@synopackageland/templates 0.32.1 → 0.33.0

package/README.md

@@ -22,8 +22,8 @@ daemon:
     window_seconds: 300
 ```
 
-Templates 0.32.0 pin UI 0.16.1 and SDK 0.32.0 in native and Compose projects.
-Use CLI 0.34.0. The Vue `AppShell` shows a
+Templates 0.33.0 pin UI 0.16.1 and SDK 0.35.0 in native and Compose projects.
+Use CLI 0.37.0. The Vue `AppShell` shows a
 non-blocking **Reload** notice when an upgrade replaced the UI an open page
 loaded. Go Apps select
 their controller from their Go SDK requirement; an identity gateway selects it
@@ -91,11 +91,10 @@ so no UI peer override is needed. Tests use jsdom 30 for UI floating-layer style
 
 Interactive NAS file operations use same-origin browser calls.
 Custom file handlers use the SDK's
-[session transport migration](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.32.0/docs/dsm-session-transport.md).
-CLI 0.34.0 reads SDK 0.32.0's release manifest, which names immutable
-executor/v0.32.0 and its refreshed executor digests; lifecycle bytes are unchanged. Its `~0.32.0` templates
-dependency selects this release. Rebuilt protected executors need fresh
-administrator approval. No device acceptance is claimed.
+[session transport migration](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.35.0/docs/dsm-session-transport.md).
+CLI 0.37.0 reads SDK 0.35.0's release manifest, which names immutable
+executor/v0.32.0 and its executor digests. Its `~0.33.0` templates
+dependency selects this release.
 
 Every App method must appear in the permissions table, including methods whose
 permission equals `default: administrators`. Dynamic method names and custom
@@ -107,6 +106,17 @@ authentication. Other paths retain DSM entry admission. See the CLI's
 UI and i18n text, including the DSM glossary, omit terminal sentence periods.
 Keep punctuation between sentences and intentional loading ellipses.
 
+## Hyper Backup
+
+Native Apps appear in Hyper Backup as applications by default. CLI 0.37.0
+builds them with a fixed `scripts/backup/` shim that Hyper Backup runs as
+root; it only switches to the package account, which archives or restores the
+App's data folder with the SDK backup control. The App itself still runs as
+the package user and its privilege tier is unchanged. Opt out with
+`backup: { hyper_backup: false }` in `dsm-package.yaml`; the native templates
+show the other settings as comments. Compose Apps are not covered because
+their data lives in container volumes.
+
 ## Vue frontend modules
 
 Vue scaffolds export `mount(root, ctx)` from `app.module.js` and emit `app.css`.
@@ -114,7 +124,7 @@ Keep `base: './'`, relative imports and `cssCodeSplit: false`; allow lazy chunks
 with `() => import('./Page.vue')` or `defineAsyncComponent`. Each mount creates
 its own Vue App and returns synchronous cleanup.
 
-CLI 0.34.0 copies the entire output into `ui/app/<tree-sha256>/` and verifies it
+CLI 0.37.0 copies the entire output into `ui/app/<tree-sha256>/` and verifies it
 during `inspect`. Changing a lazy chunk changes the snapshot URL. An open page
 may need to reload after an upgrade when an old lazy chunk is unavailable.
 See the SDK's [frontend bundle contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/frontend-bundles.md).
@@ -253,4 +263,4 @@ The bridge examples expose submission, lookup and cancellation through
 
 ## External access
 
-With CLI 0.34.0 and SDK 0.32.0, a gateway App may declare `identity_gateway.external_access: {connect: optional, origin_change: confirm, single_origin: true}` for an upstream that signs in on one fixed URL. The policy is forwarded to the packaged gateway. A single-origin App's `manual_origin` accepts an explicit HTTPS port; the `external-origin` installation setting remains restricted to port 443. The DSM launcher selects a provider destination, probes `/_spl/ping` for up to eight seconds, and explains failures before offering **Open anyway**. A configured single-origin App always opens its primary external origin.
+With CLI 0.37.0 and SDK 0.35.0, a gateway App may declare `identity_gateway.external_access: {connect: optional, origin_change: confirm, single_origin: true}` for an upstream that signs in on one fixed URL. The policy is forwarded to the packaged gateway. A single-origin App's `manual_origin` accepts an explicit HTTPS port; the `external-origin` installation setting remains restricted to port 443. The DSM launcher selects a provider destination, probes `/_spl/ping` for up to eight seconds, and explains failures before offering **Open anyway**. A configured single-origin App always opens its primary external origin.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.32.1",
+  "version": "0.33.0",
   "description": "Project templates for synopkgland init: native-go, native-python, native-node and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
   "license": "MIT",
   "repository": {

package/templates/_shared/AGENTS.md

@@ -58,7 +58,7 @@ List every App method explicitly in permissions.json, including administrator
 methods. Dynamic method names and unregistered HTTP dispatchers are rejected; use
 fixed SDK route constructors. Use identity_gateway.upstream_auth_paths for
 client API paths authenticated by the upstream.
-SDK 0.33.0 with CLI 0.35.0 adds `api.HandleHTTP("/proxy/", "app.proxy", handler)`
+`api.HandleHTTP("/proxy/", "app.proxy", handler)` serves raw HTTP
 for literal, disjoint full-segment prefixes outside SDK reserved paths. Declare
 the key as authenticated or administrators in permissions.json. Origin, entry,
 identity and permission checks precede raw streaming/initial-upgrade handlers;
@@ -66,7 +66,13 @@ CGI itself cannot upgrade a connection. For package-private worker HTTP use
 `ipc.ServeUnix(ctx, path, handler)` and `ipc.DialUnix`: owned mode-0600 sockets
 directly beneath the package's private `var/run`, with no custom TCP listener.
 The audit follows configured binaries' Linux import graphs and excludes unshipped
-dev commands. Upgrade the scaffold's SDK pin before using these APIs.
+dev commands.
+Hyper Backup lists the App as an application by default: the build adds a
+fixed `scripts/backup/` shim that Hyper Backup runs as root, which only
+switches to the package account and moves one archive of the data folder. The
+App itself still runs as the package user. Never add or edit files in
+`scripts/backup/`; opt out with `backup: { hyper_backup: false }` in
+dsm-package.yaml.
 Mark routes ordinary users call `authenticated`, mark whole admin routes
 `administrators`, guard global settings inside shared routes with
 the SDK's require-admin check, and hide admin controls with `ctx.user?.isAdmin`

package/templates/binary/dsm-package.yaml

@@ -37,6 +37,20 @@ backend:
     x86_64: prebuilt/api-x86_64
     aarch64: prebuilt/api-aarch64
 ui: {dir: ui, launch: new-page}
+
+# Hyper Backup lists this App as an application by default. A backup stops the
+# App, the SDK archives the package's var folder as the package account, and
+# the App starts again; a restore replaces that folder. Hyper Backup runs the
+# generated scripts/backup/ as root: a fixed script that only switches to the
+# package account. See `synopkgland skill show backup`.
+# backup:
+#   online: false          # true keeps the App running; SQLite is snapshotted
+#   data_version: "1.0"    # "major.minor"; a restore refuses newer data
+#   hook: bin/backup-hook  # optional packaged freeze/thaw executable
+# To opt out, use only:
+# backup:
+#   hyper_backup: false
+
 # UI languages: i18n/messages/<locale>.json for en, zh-TW, zh-CN, ja, ko, de,
 # fr, es and it (DSM's other languages fall back to English); ctx.t(key) reads them.
 i18n:

package/templates/compose/dsm-package.yaml

@@ -9,12 +9,14 @@ maintainer: Your Name
 os_min_ver: "7.2.1-69057"
 arches: [x86_64, aarch64]
 capabilities: {}
+# Hyper Backup application backup is off for Compose Apps: their data lives
+# in container volumes, which it does not cover.
 compose:
   files: [compose.yaml]
   web: {service: web, port: 8080, health: {path: /, status: 200}}
   network: {egress: isolated}
 identity_gateway:
-  sdk: 0.32.0
+  sdk: 0.35.0
   mode: none
   listen: {http: 28000}
 # Web Apps default to new-page through the shared app-launch resolver.

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.32.0 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.35.0 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/go.mod

@@ -4,6 +4,6 @@ go 1.25.0
 
 toolchain go1.26.10
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.32.0
+require github.com/synopackageland/syno-pkg-land-sdk v0.35.0
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.32.0 h1:m5AkhRV3ZA+9PnifnDTstC+5PLoQVJQ58ZYQNkzUtPE=
-github.com/synopackageland/syno-pkg-land-sdk v0.32.0/go.mod h1:8GwREGbczc8mAk4Gv8FUHaukXXCUstjzkovQrNV59Cc=
+github.com/synopackageland/syno-pkg-land-sdk v0.35.0 h1:gno3BQEj88f9UZ1tjr6OJ7dcmHeZOv3NHaQq1EZalTE=
+github.com/synopackageland/syno-pkg-land-sdk v0.35.0/go.mod h1:8GwREGbczc8mAk4Gv8FUHaukXXCUstjzkovQrNV59Cc=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go/dsm-package.yaml

@@ -72,6 +72,19 @@ i18n:
 # Optional SDK capabilities; delegate/rootOps share administrator-approved executor setup.
 capabilities: {}
 
+# Hyper Backup lists this App as an application by default. A backup stops the
+# App, the SDK archives the package's var folder as the package account, and
+# the App starts again; a restore replaces that folder. Hyper Backup runs the
+# generated scripts/backup/ as root: a fixed script that only switches to the
+# package account. See `synopkgland skill show backup`.
+# backup:
+#   online: false          # true keeps the App running; SQLite is snapshotted
+#   data_version: "1.0"    # "major.minor"; a restore refuses newer data
+#   hook: bin/backup-hook  # optional packaged freeze/thaw executable
+# To opt out, use only:
+# backup:
+#   hyper_backup: false
+
 # Optional uninstall hook. DSM runs `exec args` as the package account on a
 # real uninstall (not an upgrade), before the executor is removed, with
 # SYNOPKGLAND_DELETE_STATE=0|1 and SYNOPKGLAND_REMOVE_DATA=0|1 from the wizard.

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,7 +7,7 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.32.0",
+        "@synopackageland/sdk": "0.35.0",
         "@synopackageland/ui": "0.16.1",
         "vue": "3.5.43"
       },
@@ -1152,9 +1152,9 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.32.0",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.32.0.tgz",
-      "integrity": "sha512-95IT8qXgmO98y56ftLgKcHAMeDDx1QxdYrlZrWBSuga8Z7lLW545v3iWll86zY8rpbURDHbVrrunCCPyZraLSw==",
+      "version": "0.35.0",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.35.0.tgz",
+      "integrity": "sha512-nUq/+51jAQHHXTWcrXtqXiT81Sn+uCGS8TMLOkcvLyhisNVdOOyKYcC35rsLmIGB1hdsJ5JJCnUvOdTHso0uYg==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",

package/templates/native-go-vue/frontend/package.json

@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.32.0",
+    "@synopackageland/sdk": "0.35.0",
     "@synopackageland/ui": "0.16.1",
     "vue": "3.5.43"
   },

package/templates/native-node/dsm-package.yaml

@@ -49,7 +49,7 @@ backend:
   runtime: node
   dir: backend/app
   entry: main.js
-  sdk: 0.32.0
+  sdk: 0.35.0
   node: { package: Node.js_v22 }
 
 ui:
@@ -81,6 +81,19 @@ i18n:
 # Optional SDK capabilities; delegate/rootOps share administrator-approved executor setup.
 capabilities: {}
 
+# Hyper Backup lists this App as an application by default. A backup stops the
+# App, the SDK archives the package's var folder as the package account, and
+# the App starts again; a restore replaces that folder. Hyper Backup runs the
+# generated scripts/backup/ as root: a fixed script that only switches to the
+# package account. See `synopkgland skill show backup`.
+# backup:
+#   online: false          # true keeps the App running; SQLite is snapshotted
+#   data_version: "1.0"    # "major.minor"; a restore refuses newer data
+#   hook: bin/backup-hook  # optional packaged freeze/thaw executable
+# To opt out, use only:
+# backup:
+#   hyper_backup: false
+
 # Explicit AI commands. Internal/UI methods are not automatically exposed.
 ctl:
   enabled: true

package/templates/native-python/dsm-package.yaml

@@ -47,7 +47,7 @@ backend:
   runtime: python
   dir: backend/app
   entry: main.py
-  sdk: 0.32.0
+  sdk: 0.35.0
 
 ui:
   # Non-UI-SDK frontends open a full page; Portal is a separate opt-in.
@@ -78,6 +78,19 @@ i18n:
 # Optional SDK capabilities; delegate/rootOps share administrator-approved executor setup.
 capabilities: {}
 
+# Hyper Backup lists this App as an application by default. A backup stops the
+# App, the SDK archives the package's var folder as the package account, and
+# the App starts again; a restore replaces that folder. Hyper Backup runs the
+# generated scripts/backup/ as root: a fixed script that only switches to the
+# package account. See `synopkgland skill show backup`.
+# backup:
+#   online: false          # true keeps the App running; SQLite is snapshotted
+#   data_version: "1.0"    # "major.minor"; a restore refuses newer data
+#   hook: bin/backup-hook  # optional packaged freeze/thaw executable
+# To opt out, use only:
+# backup:
+#   hyper_backup: false
+
 # Explicit AI commands. Internal/UI methods are not automatically exposed.
 ctl:
   enabled: true

package/templates/native-rust/backend/Cargo.lock

@@ -104,8 +104,8 @@ dependencies = [
 
 [[package]]
 name = "syno-pkg-land-app"
-version = "0.32.0"
-source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.32.0#dcf4229b53ee6455c4c4ec41b4a4f52775c2b958"
+version = "0.35.0"
+source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.35.0#461655ff968eb3b646101cbca831dc9e593b929c"
 dependencies = [
  "libc",
  "serde",

package/templates/native-rust/backend/Cargo.toml

@@ -9,7 +9,7 @@ libc = "0.2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The SDK version is the tag; `synopkgland check` reads it from Cargo.lock.
-syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.32.0" }
+syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.35.0" }
 
 [profile.release]
 # A handler panic becomes an "internal" reply; abort would end the App without one.

package/templates/native-rust/dsm-package.yaml

@@ -79,6 +79,19 @@ i18n:
 # Optional SDK capabilities; delegate/rootOps share administrator-approved executor setup.
 capabilities: {}
 
+# Hyper Backup lists this App as an application by default. A backup stops the
+# App, the SDK archives the package's var folder as the package account, and
+# the App starts again; a restore replaces that folder. Hyper Backup runs the
+# generated scripts/backup/ as root: a fixed script that only switches to the
+# package account. See `synopkgland skill show backup`.
+# backup:
+#   online: false          # true keeps the App running; SQLite is snapshotted
+#   data_version: "1.0"    # "major.minor"; a restore refuses newer data
+#   hook: bin/backup-hook  # optional packaged freeze/thaw executable
+# To opt out, use only:
+# backup:
+#   hyper_backup: false
+
 # Explicit AI commands. Internal/UI methods are not automatically exposed.
 ctl:
   enabled: true