@synopackageland/templates 0.38.1 → 0.39.0

package/templates/native-go-delegate/frontend/test/capability-panels.test.ts

@@ -76,7 +76,6 @@ test('the app mount forwards ctx.executor to administrator setup only',async()=>
   const authorize=vi.fn(async()=>({state:'ready' as const}))
   const call=vi.fn(async(method:string)=>{
    if(method==='app.status')return {package:'DelegateApp',version:'1',user:admin?'admin':'alice',admin}
-   if(method==='greeting.get')return {text:'Hello'}
    if(method==='delegate.status')return {state:'needs-admin-approval'}
    if(method==='delegate.list')return {delegations:[]}
    if(method==='delegate.jobs.list')return {jobs:[]}
@@ -151,7 +150,6 @@ test.skipIf(holdsPages)('an executor awaiting approval adds a notice above the p
  const status=vi.fn(async()=>({state:'needs-admin-approval' as const}))
  const call=vi.fn(async(method:string)=>{
   if(method==='app.status')return {package:'DelegateApp',version:'1',user:'admin',admin:true}
-  if(method==='greeting.get')return {text:'Hello'}
   if(method==='delegate.status')return {state:'needs-admin-approval'}
   if(method==='delegate.list')return {delegations:[]}
   throw {code:'unknown_method'}
@@ -159,7 +157,8 @@ test.skipIf(holdsPages)('an executor awaiting approval adds a notice above the p
  const root=document.createElement('div');document.body.append(root)
  const app=mount(root,dsmWindow({call,user:{name:'admin',isAdmin:true},executor:{status,authorize:vi.fn(),control:vi.fn()} as never}))
  cleanup.push(()=>{app.unmount();root.remove()});await settle()
- expect(root.textContent).toContain('Some features are unavailable until you approve system access for this app.')
+ expect(root.textContent).toContain('Some features are unavailable until you approve system access for this app')
  expect(root.textContent).toContain('Package status')
- expect((root.querySelector('textarea') as HTMLTextAreaElement).value).toBe('Hello')
+ expect(root.querySelector('[data-app-status] [data-app-value]')?.textContent).toBe('DelegateApp')
+ expect(root.querySelector('textarea')).toBeNull()
 })

package/templates/native-go-root-ops/frontend/test/executor-gate.test.ts

@@ -10,7 +10,6 @@ async function settle(){for(let i=0;i<30;i++){await Promise.resolve();await next
 function open(admin:boolean,executor?:Context['executor']){
  const call=vi.fn(async(method:string)=>{
   if(method==='app.status')return {package:'Root',version:'1',user:admin?'admin':'alice',admin}
-  if(method==='greeting.get')return {text:'Hello Root'}
   if(method==='delegate.status')return {state:'ready',disabled:false,lifetime:'until-revoked',destinations:['save']}
   if(method==='delegate.destination')return {key:'save',selection:{scope:'home',root:'/home',generation:0},destination:null,status:'missing'}
   if(method==='delegate.list')return {delegations:[]}
@@ -37,18 +36,19 @@ test('the App pages wait until an administrator approves the executor with the u
  password.closest('form')!.dispatchEvent(new Event('submit',{bubbles:true,cancelable:true}));await settle()
  expect(executor.authorize).toHaveBeenCalledWith('one-time')
  expect(root.textContent).toContain('Package status')
- expect((root.querySelector('textarea') as HTMLTextAreaElement).value).toBe('Hello Root')
+ expect(root.querySelector('[data-app-status] [data-app-value]')?.textContent).toBe('Root')
+ expect(root.querySelector('textarea')).toBeNull()
 })
 test('anyone else is told to ask an administrator for system access',async()=>{
  const root=open(false,awaitingApproval() as unknown as Context['executor']);await settle()
- expect(root.textContent).toContain('Ask an administrator to open this app and approve it once.')
+ expect(root.textContent).toContain('Ask an administrator to open this app and approve it once')
  expect(root.querySelector('input[type=password]')).toBeNull()
  expect(root.textContent).not.toContain('Package status')
 })
 test('without an executor (a dev server) the App pages show at once',async()=>{
  const root=open(false);await settle()
  expect(root.textContent).toContain('Package status')
- expect(root.textContent).not.toContain('Ask an administrator to open this app and approve it once.')
+ expect(root.textContent).not.toContain('Ask an administrator to open this app and approve it once')
 })
 // preload: the App's own reads run alongside the executor's first status read.
 test('while the executor status is read the App pages already load, hidden and inert',async()=>{
@@ -60,13 +60,14 @@ test('while the executor status is read the App pages already load, hidden and i
  expect(hidden?.textContent).toContain('Package status')
  answers.forEach(answer=>answer({state:'ready'}));await settle()
  expect(root.querySelector('.executor-preloading')).toBeNull()
- expect((root.querySelector('textarea') as HTMLTextAreaElement).value).toBe('Hello Root')
+ expect(root.querySelector('[data-app-status] [data-app-value]')?.textContent).toBe('Root')
+ expect(root.querySelector('textarea')).toBeNull()
 })
 // ExecutorApproval holds the pages: AppShell's ExecutorNotice would only repeat it.
 test('while the executor awaits approval no notice repeats the approval page',async()=>{
  for(const admin of [true,false]){
   const root=open(admin,awaitingApproval() as unknown as Context['executor']);await settle()
-  expect(root.textContent,String(admin)).toContain(admin?'Approve this app once':'Ask an administrator to open this app and approve it once.')
+  expect(root.textContent,String(admin)).toContain(admin?'Approve this app once':'Ask an administrator to open this app and approve it once')
   expect(root.textContent,String(admin)).not.toContain('Some features are unavailable')
  }
 })

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,7 +7,7 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.43.0",
+        "@synopackageland/sdk": "0.47.0",
         "@synopackageland/ui": "0.19.1",
         "vue": "3.5.43"
       },
@@ -1177,9 +1177,9 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.43.0",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.43.0.tgz",
-      "integrity": "sha512-i/HbHkk50SEbzs1rNS7IEuS3ydLK3cMZb9wJqr6aGOjNROiGTy3nBo9MkpKmXYoksTuYkBt94gSP3Q7DfKFHBw==",
+      "version": "0.47.0",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.47.0.tgz",
+      "integrity": "sha512-UlJdmYA9kj6ureqkVw6PNlT+4fV7rWyEzlsPGhguHVFv6vQs4wJReBLDWkTa2zj83JtP0gsLMOOq8GU5vXNRKg==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",

package/templates/native-go-vue/frontend/package.json

@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.43.0",
+    "@synopackageland/sdk": "0.47.0",
     "@synopackageland/ui": "0.19.1",
     "vue": "3.5.43"
   },

package/templates/native-go-vue/frontend/src/App.vue

@@ -1,6 +1,6 @@
 <script setup lang="ts">
 import {computed, onMounted, onUnmounted, ref, watch} from 'vue'
-import {Button, Callout, Form, FormActions, FormItem, KeyValueRow, SettingsSection, Textarea} from '@synopackageland/ui'
+import {Button, Callout, KeyValueRow, SettingsSection} from '@synopackageland/ui'
 import {bridgeErrorCopy, sharedFolderAccessFor, type AppStatus, type Context, type ShellPage} from '@synopackageland/sdk'
 import {AppShell, FilesPage, LoginPage, PortalSettings, SharedFolderSettings, createSession, shellPages} from '@synopackageland/sdk/vue'
 import {appCopy} from './i18n'
@@ -17,8 +17,6 @@ const copy = computed(() => appCopy(props.ctx.locale))
 const app = ref<AppStatus>()
 const busy = ref(false)
 const error = ref('')
-const notice = ref('')
-const text = ref('')
 let disposed = false
 let unsubscribe: (() => void) | undefined
 // The CLI substitutes this only for a declared package-account background worker.
@@ -43,24 +41,9 @@ async function refresh() {
  const early = !login.ready.value
  const call: typeof login.call = early ? (method, params) => props.ctx.call(method, params) : login.call
  busy.value = true; error.value = ''
- // An administrator DSM names up front has the greeting read beside the status.
- const startupBatch = props.ctx.user?.isAdmin === true ? props.ctx.batch : undefined
- const read = !startupBatch && props.ctx.user?.isAdmin ? call<{text:string}>('greeting.get') : undefined
- read?.catch(() => {})
  try {
-  if(startupBatch) {
-   const batch = early ? startupBatch : login.batch
-   const results = await batch([{method:'app.status'},{method:'greeting.get'}])
-   const status = results[0]!, greeting = results[1]!
-   if(!status.success) throw status.error
-   if(!disposed) app.value = status.data as AppStatus
-   if(!greeting.success) throw greeting.error
-   if(!disposed) text.value = (greeting.data as {text:string}).text
-  } else {
-   const a = await call<AppStatus>('app.status')
-   if(!disposed) app.value = a
-   if(a.admin) {const greeting = await (read ?? call<{text:string}>('greeting.get')); if(!disposed) text.value = greeting.text}
-  }
+  const status = await call<AppStatus>('app.status')
+  if(!disposed) app.value = status
  } catch(e) {if(!disposed && !(early && login.enabled.value)) error.value = message(e)}
  finally {if(!disposed) {busy.value=false; if(again) {again=false; void refresh()}}}
 }
@@ -71,14 +54,8 @@ const portalKey = computed(() => `${app.value?.user}:${portalReads.value}`)
 function refreshAll() {
  void refresh(); void panels.value?.refresh(); portalReads.value++
 }
-async function save() {
- if(disposed || busy.value) return
- busy.value = true; error.value='';notice.value=''
- try {await login.call('greeting.set',{text:text.value});if(!disposed) notice.value=copy.value.saved}
- catch(e) {if(!disposed) error.value=message(e)} finally {if(!disposed) busy.value=false}
-}
 watch(login.subject, (subject, previous) => {
- if(!subject) {app.value=undefined;text.value='';notice.value='';error.value=''}
+ if(!subject) {app.value=undefined;error.value=''}
  else if((!previous || previous.user!==subject.user)) void refresh()
 })
 async function signOut() {
@@ -90,7 +67,7 @@ onMounted(()=>{
  void login.start()
  void refresh()
 })
-onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose();text.value=''})
+onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose()})
 </script>
 
 <template>
@@ -100,7 +77,6 @@ onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose();text.value=''})
   <ExecutorGate :ctx="ctx" :admin="ctx.user?.isAdmin ?? !!app?.admin">
   <div class="integration-app" :aria-busy="busy" :aria-label="copy.settings">
    <Callout v-if="error" tone="danger" :title="copy.actionRequired"><span role="alert">{{ error }}</span></Callout>
-   <p v-if="notice" role="status">{{ notice }}</p>
    <div data-page="status" v-show="page==='status'">
     <SettingsSection :title="copy.statusTitle" :collapsible="false" :loading="busy && !app">
      <div v-if="app" data-app-status>
@@ -112,11 +88,6 @@ onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose();text.value=''})
     </SettingsSection>
     <PortalSettings v-if="ctx.portal && app" :key="portalKey" :portal="ctx.portal" />
     <SharedFolderSettings v-if="app?.admin" :key="portalKey" :shared="sharedFolders" :locale="ctx.locale" />
-    <SettingsSection v-if="app?.admin" :title="copy.greeting" :collapsible="false">
-     <Form direction="vertical" @submit.prevent="save"><FormItem :label="copy.greeting"><Textarea v-model="text" :disabled="busy" /></FormItem>
-      <FormActions><Button variant="primary" :disabled="busy || !text.trim()" @click="save">{{ copy.save }}</Button></FormActions>
-     </Form>
-    </SettingsSection>
    </div>
    <CapabilityPanels v-if="app" ref="panels" :key="app.user" :ctx="ctx" :admin="app.admin" />
    <FilesPage v-if="page==='status'" :ctx="ctx" />

package/templates/native-go-vue/frontend/test/apps.test.ts

@@ -9,8 +9,6 @@ function fixture(id:string){
  const reopen:Array<()=>void>=[]
  const call=vi.fn(async(method:string)=>{
   if(method==='app.status')return {package:id,version:'1',user:'admin',admin:true}
-  if(method==='greeting.get')return {text:'Hello '+id}
-  if(method==='greeting.set')return {}
   throw {code:'unknown_method'}
  })
  const ctx=dsmWindow({call,reopen(fn:()=>void){reopen.push(fn);return ()=>{}}})
@@ -18,15 +16,14 @@ function fixture(id:string){
  const app=mount(root,ctx)
  return {root,app,call,reopen,ctx,close(){app.unmount();root.remove()}}
 }
-test('independent mounts load and save their own package greeting',async()=>{
+test('independent mounts load only their own package status and no sample operations',async()=>{
  const a=fixture('Alpha'),b=fixture('Beta')
  try{
   await settle()
   expect(a.root.textContent).toContain('Alpha');expect(a.root.textContent).not.toContain('Beta')
-  expect((a.root.querySelector('textarea') as HTMLTextAreaElement).value).toBe('Hello Alpha')
-  ;[...a.root.querySelectorAll('button')].find(n=>n.textContent==='Save')!.click();await settle()
-  expect(a.call).toHaveBeenCalledWith('greeting.set',{text:'Hello Alpha'})
-  expect(b.call.mock.calls.some(([method])=>method==='greeting.set')).toBe(false)
+  expect(a.root.querySelector('textarea')).toBeNull()
+  expect(a.call.mock.calls.some(([method])=>method.startsWith('greeting.'))).toBe(false)
+  expect(b.call.mock.calls.some(([method])=>method.startsWith('greeting.'))).toBe(false)
   const count=b.call.mock.calls.length;a.reopen.forEach(fn=>fn());await settle()
   expect(b.call.mock.calls).toHaveLength(count)
   a.app.unmount();const stopped=a.call.mock.calls.length;a.reopen.forEach(fn=>fn());await settle()
@@ -76,7 +73,6 @@ test('the app renders and loads status while the session check is still pending'
  const call=vi.fn(async(method:string)=>{
   if(method==='identity.status')return new Promise(()=>{})
   if(method==='app.status')return {package:'Eager',version:'1',user:'admin',admin:true}
-  if(method==='greeting.get')return {text:'Hello Eager'}
   throw {code:'unknown_method'}
  })
  const ctx=dsmWindow({call})
@@ -88,17 +84,17 @@ test('the app renders and loads status while the session check is still pending'
   expect([...root.querySelectorAll('[data-app-status] [data-app-value]')].map(node=>node.textContent)).toEqual(['Eager','admin','1'])
  }finally{app.unmount();root.remove()}
 })
-test('an administrator DSM names up front has the greeting read beside the status',async()=>{
+test('an administrator starts the real status read without sample calls',async()=>{
  const call=vi.fn(async(method:string)=>{
   if(method==='app.status')return new Promise(()=>{})
-  if(method==='greeting.get')return {text:'Hello Early'}
   throw {code:'unknown_method'}
  })
  const root=document.createElement('div');document.body.append(root)
  const app=mount(root,dsmWindow({call,user:{name:'admin',isAdmin:true}}))
  try{
   await settle()
-  expect(call.mock.calls.map(([method])=>method)).toContain('greeting.get')
+  expect(call.mock.calls.map(([method])=>method)).toContain('app.status')
+  expect(call.mock.calls.some(([method])=>method.startsWith('greeting.'))).toBe(false)
  }finally{app.unmount();root.remove()}
 })
 test('a status request that raced the session check is retried once the session is confirmed',async()=>{
@@ -110,7 +106,6 @@ test('a status request that raced the session check is retried once the session
    if(!session)return new Promise((_,reject)=>{rejectEarly=reject})
    return {package:'Raced',version:'1',user:'admin',admin:true}
   }
-  if(method==='greeting.get')return {text:'Hello Raced'}
   throw {code:'unknown_method'}
  })
  const ctx=dsmWindow({call})
@@ -162,7 +157,6 @@ test('the status page follows the UI layout rules',async()=>{
  let answer:(value:unknown)=>void=()=>{}
  const call=vi.fn(async(method:string)=>{
   if(method==='app.status')return new Promise(resolve=>{answer=resolve})
-  if(method==='greeting.get')return {text:'Hello'}
   throw {code:'unknown_method'}
  })
  const root=document.createElement('div');document.body.append(root)
@@ -175,15 +169,15 @@ test('the status page follows the UI layout rules',async()=>{
   expect(root.textContent).not.toContain('Loading package data')
   answer({package:'Pkg',version:'1',user:'admin',admin:true});await settle()
   expect(root.querySelector('[data-ui-skeleton-line]')).toBeNull()
-  // Labels sit above their fields.
-  expect(root.querySelector('textarea')!.closest('[data-form-item]')!.getAttribute('data-direction')).toBe('vertical')
+  expect([...root.querySelectorAll('[data-app-status] [data-app-value]')].map(node=>node.textContent)).toEqual(['Pkg','admin','1'])
+  expect(root.querySelector('textarea')).toBeNull()
  }finally{app.unmount();root.remove()}
 })
 test('a code the bridge runtime adds shows the SDK text in the DSM language',async()=>{
  const f=fixture('Bridge')
  try{
   await settle();f.call.mockRejectedValue({code:'app_unavailable'});f.reopen.forEach(fn=>fn());await settle()
-  expect(f.root.textContent).toContain('The App is not available right now. Try again later.')
+  expect(f.root.textContent).toContain('The App is not available right now. Try again later')
  }finally{f.close()}
 })
 test('a Portal or standalone launch lays the App out full-page; a DSM window keeps the window layout',async()=>{
@@ -237,7 +231,6 @@ test('an administrator sees a pending Shared Folder with the grant step; a plain
  const folder={key:'shared',name:'Media',exists:true,required:'write',granted:'read',state:'pending'}
  const call=vi.fn(async(method:string)=>{
   if(method==='app.status')return {package:'Share',version:'1',user:'admin',admin:true}
-  if(method==='greeting.get')return {text:'Hi'}
   if(method==='sharedfolder.status')return {account:'Share',folders:[folder]}
   throw {code:'unknown_method'}
  })
@@ -253,15 +246,16 @@ test('an administrator sees a pending Shared Folder with the grant step; a plain
  }finally{app.unmount();root.remove();plain.close()}
 })
 
-test('batches startup reads for a known administrator', async () => {
+test('status-only startup never schedules a sample batch', async () => {
  const calls: string[]=[]
- const batch=vi.fn(async () => [{success:true as const,data:{package:'Batch',version:'1',user:'admin',admin:true}},{success:true as const,data:{text:'Hello Batch'}}])
- const ctx=dsmWindow({user:{name:'admin',isAdmin:true},batch:batch as NonNullable<Context['batch']>,call:async <T,>(method:string)=>{calls.push(method);if(method==='identity.status')return {enabled:false} as T;throw {code:'unknown_method'}}})
+ const batch=vi.fn(async () => [])
+ const ctx=dsmWindow({user:{name:'admin',isAdmin:true},batch:batch as NonNullable<Context['batch']>,call:async <T,>(method:string)=>{calls.push(method);if(method==='identity.status')return {enabled:false} as T;if(method==='app.status')return {package:'Status',version:'1',user:'admin',admin:true} as T;throw {code:'unknown_method'}}})
  const root=document.createElement('div');document.body.append(root)
  const app=mount(root,ctx)
- await settle()
- expect(batch).toHaveBeenCalledWith([{method:'app.status'},{method:'greeting.get'}])
- expect(calls).not.toContain('app.status');expect(calls).not.toContain('greeting.get')
- expect((root.querySelector('textarea') as HTMLTextAreaElement).value).toBe('Hello Batch')
- app.unmount();root.remove()
+ try{
+  await settle()
+  expect(batch).not.toHaveBeenCalled()
+  expect(calls).toContain('app.status');expect(calls.some(method=>method.startsWith('greeting.'))).toBe(false)
+  expect(root.querySelector('textarea')).toBeNull()
+ }finally{app.unmount();root.remove()}
 })

package/templates/native-go-vue/frontend/test/native-controls.test.ts

@@ -14,7 +14,10 @@ test.each(['select','option','textarea','label','input','a'])('no vue template r
 // inside a FormItem binds its id/ARIA by itself.
 test('FormItem labels sit above their controls and the UI binds the control id',()=>{
  const items=sources(root).filter(file=>uses(file,'FormItem'))
- expect(items.length).toBeGreaterThan(0)
+ // The base status page has no sample form; capability forms still obey these rules.
+ const app=template(join(root,'App.vue'))
+ expect(app).toContain('<KeyValueRow')
+ expect(app).not.toMatch(/<(?:Form|FormItem|Textarea)[\s>]/)
  expect(items.filter(file=>/<Form(?![^>]*direction="vertical")[\s>]|field\.controlId|#default="\{field\}"/.test(template(file)))).toEqual([])
 })
 // UI built-in text follows the Provider locale (nine locales), so every app root sets it once and no

package/templates/native-go-vue/frontend/test/shell-i18n.test.ts

@@ -16,16 +16,18 @@ function start(locale:string,call:(method:string)=>Promise<unknown>){
 }
 test('the status page and its errors follow the DSM language',async()=>{
  const copy=appCopy('ger')
+ let denied=false
  const {root,close}=start('de',async method=>{
-  if(method==='app.status')return {package:'Pkg',version:'1',user:'admin',admin:true}
-  if(method==='greeting.get')throw {code:'admin_required'}
+  if(method==='app.status'){if(denied)throw {code:'admin_required'};return {package:'Pkg',version:'1',user:'admin',admin:true}}
   throw {code:'unknown_method'}
  })
  try{
   await settle()
   expect(buttons(root)).toContain(copy.refresh)
   expect(root.textContent).toContain(copy.statusTitle)
-  expect(root.textContent).toContain(copy.greeting)
+  expect(root.textContent).toContain(copy.packageName)
+  expect(root.textContent).not.toContain(copy.greeting)
+  denied=true;[...root.querySelectorAll('button')].find(button=>button.textContent?.trim()===copy.refresh)!.click();await settle()
   expect(root.textContent).toContain(copy.errors.admin_required)
   expect(root.querySelector('[aria-label]')?.getAttribute('aria-label')).not.toBe('Package settings')
  }finally{close()}

package/templates/native-node/README.md

@@ -6,7 +6,7 @@ runs as its own DSM package account, needs no containers, and has no root by def
 
 ```text
 DSM main menu → DSM window (ui/app.js)
-                   │  ctx.call("greeting.get")  same-origin POST + DSM session
+                   │  ctx.call("app.status")  same-origin POST + DSM session
                    ▼
    /webman/3rdparty/__PACKAGE__/cgi/api.cgi   (the SDK runtime, runs as package user)
       1. transport guards: POST, JSON, same origin, ≤ 1 MiB, bounded JSON complexity
@@ -17,7 +17,7 @@ DSM main menu → DSM window (ui/app.js)
 
 ## Requests and long work
 
-SDK/App 0.43.0 defaults to 300-second requests and a 302-second browser wait.
+SDK/App 0.47.0 defaults to 300-second requests and a 302-second browser wait.
 Explicit `backend.timeout_seconds` and earlier parent deadlines still apply;
 rebuild the App to use the new SDK. For long NAS work, enable the existing jobs
 capability: return admission and the original job ID promptly, execute in the
@@ -27,7 +27,7 @@ last queued/running state intact. After a lost admission reply, reuse the same
 idempotency key and input instead of replaying a mutation with a new key.
 Jobs default to 30 minutes; approved executor limits remain separate. ctl keeps
 its 62-second transport default; use an explicit `--timeout` or an existing
-nonblocking job. See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.43.0/docs/request-deadlines.md).
+nonblocking job. See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.47.0/docs/request-deadlines.md).
 
 ## Quick start
 
@@ -35,6 +35,8 @@ Needs Node.js 20 or later with `synopkgland` installed. The SPK depends on DSM's
 
 ```bash
 (cd backend && npm ci && npm test && npm run build)   # method tests, then app/*.js
+synopkgland ctl generate
+synopkgland check
 synopkgland build           # → dist/__PACKAGE__-0.1.0-0001-{x86_64,aarch64}.spk
 synopkgland inspect dist/__PACKAGE__-0.1.0-0001-x86_64.spk
 ```
@@ -44,8 +46,7 @@ Run `npm run build` in `backend` before every `synopkgland check` or `build`: th
 Install: Package Center → Settings → General → Trust Level "Any publisher",
 then Manual Install with the SPK for your NAS's CPU. Open
 **__DISPLAY_NAME__** from the DSM main menu: it shows who you are signed in
-as, what the backend reports, and (for administrators) a form that stores a
-greeting in the package's data folder.
+as and what the backend reports.
 
 ## Project layout
 
@@ -58,7 +59,7 @@ greeting in the package's data folder.
 | `backend/src/routes.ts` | Your methods: `build` registers them | Yes — your backend |
 | `backend/src/jobs.ts`, `root-ops.ts`, `delegate.ts` | Capability examples (stubs unless `init --with` added them) | Yes |
 | `backend/src/main.ts` | Runs the App on the runtime's channel | Rarely |
-| `backend/app/` | `npm run build` output (`*.js`, ignored by git), `package.json` and `permissions.json`: the directory the SPK ships | Only `permissions.json` |
+| `backend/app/` | `npm run build` output (`*.js`, ignored by git), `package.json` and `permissions.json`: the directory the SPK ships | No (generated) |
 | `backend/test/` | node:test tests; `call` plays the runtime | Yes |
 | `backend/package.json`, `package-lock.json` | TypeScript (NodeNext) and the Node SDK `@synopackageland/app` from `backend/vendor`, which `synopkgland init` copies from the SDK release | Dependencies |
 | `dist/` | Built SPKs (ignored by git) | No |
@@ -70,7 +71,8 @@ runtime CGI at `ui/cgi/api.cgi`.
 ## Add a method
 
 Register it in `build`. Every method defaults to DSM administrator membership;
-all access rules live in `backend/app/permissions.json`:
+declare metadata and access rules in `operations.json`; `ctl generate` writes
+`backend/app/permissions.json`:
 
 ```ts
 export function build(cfg: Config): App {
@@ -182,3 +184,21 @@ bounded private copy for the worker; no browser session or NAS picker is used.
 Submit with `hash.submit`; use `hash.get` for progress and `hash.cancel` to
 cancel. These handlers call the existing `bg.submit`, `bg.get` and `bg.cancel`
 services; the runtime checks the input path and binds ownership to the caller.
+
+## Operation registry
+
+Declare each App method once in `operations.json`, including its English summary,
+params/result schemas, effect, permission, flow and required `ai` class. The
+SDK contributes its own hidden operation catalog for enabled capability routes.
+Register the handler, then run `synopkgland ctl generate`, `synopkgland ctl
+generate --check` and `synopkgland check`. Build refuses generated drift or a
+route/spec mismatch. Never maintain commands or operation descriptions in the
+manifest or skill by hand. Read the generated `generated/operations.md`.
+
+`examples/operations.json` illustrates read, preview, draft, human-only and hidden.
+It is documentation only: its operations have no handlers and are never shipped
+as commands. Copy a declaration only when implementing a real App capability.
+Draft writes require a non-mutating preview and explicit human confirmation.
+Long operations use the existing job flow; tools own polling and pagination.
+
+Use a matching SDK/CLI/templates release containing the registry support.

package/templates/native-node/backend/app/permissions.json

@@ -1,5 +1,7 @@
 {
   "schema": 1,
   "default": "administrators",
-  "methods": {}
+  "methods": {
+    "app.status": "administrators"
+  }
 }

package/templates/native-node/backend/package-lock.json

@@ -49,7 +49,7 @@
       "license": "MIT"
     },
     "vendor/@synopackageland/app": {
-      "version": "0.43.0",
+      "version": "0.47.0",
       "license": "MIT",
       "engines": {
         "node": ">=22"

package/templates/native-node/backend/src/routes.ts

@@ -1,14 +1,10 @@
-// The App's methods. Register a method in build() and give it a rule in
-// app/permissions.json unless only administrators may call it: the runtime
-// has checked the DSM session, the entry gate and that rule before a handler
-// runs.
-import { randomUUID } from 'node:crypto'
-import { readFileSync, renameSync, unlinkSync, writeFileSync } from 'node:fs'
-import { dirname, join } from 'node:path'
-import { App, AppError, type Context } from '@synopackageland/app'
+// Register real handlers here; operations.json owns metadata and permissions.
+// Run ctl generate and ctl generate --check after adding a handler.
+import { readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { App, type Context } from '@synopackageland/app'
 import * as delegate from './delegate.js'
 import * as jobs from './jobs.js'
-import { strings } from './params.js'
 import * as rootOps from './root-ops.js'
 
 /** Where the App's state lives; the runtime sets the environment. */
@@ -27,8 +23,6 @@ export function configFromEnv(): Config {
 export function build(cfg: Config): App {
   const app = new App()
   app.method('app.status', (ctx) => status(cfg, ctx))
-  app.method('greeting.get', () => getGreeting(cfg))
-  app.method('greeting.set', (ctx, params) => setGreeting(cfg, ctx, params))
   // Each capability module is a stub until `synopkgland init --with` adds its example.
   for (const capability of [jobs, rootOps, delegate]) capability.register(app, cfg)
   return app
@@ -63,35 +57,3 @@ function installedVersion(cfg: Config): string {
     return ''
   }
 }
-
-const greetingPath = (cfg: Config) => join(cfg.dataDir, 'greeting.json')
-
-function getGreeting(cfg: Config): unknown {
-  try {
-    return JSON.parse(readFileSync(greetingPath(cfg), 'utf8'))
-  } catch (e) {
-    if ((e as NodeJS.ErrnoException).code === 'ENOENT') return { text: 'Hello' }
-    throw e
-  }
-}
-
-function setGreeting(cfg: Config, ctx: Context, params: unknown) {
-  const { text } = strings(params, 'text')
-  const length = [...text].length
-  if (length < 1 || length > 200) throw AppError.badRequest('text must be 1 to 200 characters')
-  const greeting = { text, updated_by: ctx.user }
-  writeFileAtomic(greetingPath(cfg), JSON.stringify(greeting))
-  return greeting
-}
-
-/** Replaces path in one rename, so readers never see half a file. */
-export function writeFileAtomic(path: string, data: string): void {
-  const tmp = join(dirname(path), `.tmp-${randomUUID()}`)
-  try {
-    writeFileSync(tmp, data, { flag: 'wx' })
-    renameSync(tmp, path)
-  } catch (e) {
-    try { unlinkSync(tmp) } catch { /* never written */ }
-    throw e
-  }
-}

package/templates/native-node/backend/test/routes.test.ts

@@ -1,5 +1,5 @@
 import assert from 'node:assert/strict'
-import { mkdirSync, mkdtempSync, readdirSync, rmSync, writeFileSync } from 'node:fs'
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { afterEach, beforeEach, test } from 'node:test'
@@ -50,26 +50,6 @@ test('app.status without a portal leaves it out', async () => {
   assert.equal('portal' in reply.data, false)
 })
 
-test('greeting.get defaults to Hello', async () => {
-  assert.deepEqual((await call(build(cfg), 'greeting.get')).data, { text: 'Hello' })
-})
-
-test('greeting.set stores the text and who set it', async () => {
-  const app = build(cfg)
-  const reply = await call(app, 'greeting.set', { text: 'Hi 👋' }, { user: 'alice' })
-  assert.deepEqual(reply.data, { text: 'Hi 👋', updated_by: 'alice' })
-  assert.deepEqual((await call(app, 'greeting.get')).data, { text: 'Hi 👋', updated_by: 'alice' })
-  assert.deepEqual(readdirSync(cfg.dataDir), ['greeting.json'])
-})
-
-test('greeting.set counts characters, not UTF-16 units', async () => {
-  assert.equal((await call(build(cfg), 'greeting.set', { text: '👋'.repeat(200) })).ok, true)
-})
-
-test('greeting.set refuses invalid params and keeps the old text', async () => {
-  for (const params of [null, [], {}, { text: '' }, { text: 'x'.repeat(201) }, { text: 5 }, { text: 'hi', extra: 1 }]) {
-    const reply = await call(build(cfg), 'greeting.set', params)
-    assert.equal(reply.error?.code, 'bad_request', JSON.stringify(params))
-  }
-  assert.deepEqual(readdirSync(cfg.dataDir), [])
+test('sample operations are absent', async () => {
+  for(const method of ['greeting.get', 'greeting.set']) assert.equal((await call(build(cfg), method)).ok, false)
 })

package/templates/native-node/dsm-package.yaml

@@ -49,7 +49,7 @@ backend:
   runtime: node
   dir: backend/app
   entry: main.js
-  sdk: 0.43.0
+  sdk: 0.47.0
   node: { package: Node.js_v22 }
 
 ui:
@@ -94,33 +94,7 @@ capabilities: {}
 # backup:
 #   hyper_backup: false
 
-# Explicit AI commands. Internal/UI methods are not automatically exposed.
+# Operation metadata has one source. Generate/check before building.
 ctl:
   enabled: true
-  commands:
-    status.show:
-      cli: [status]
-      summary: Show this App's status and verified caller
-      effect: read
-      flow: {type: invoke, method: app.status}
-      paramsSchema: {type: object, additionalProperties: false}
-      examples: [{}]
-    greeting.get:
-      cli: [greeting, get]
-      summary: Read the greeting
-      effect: read
-      flow: {type: invoke, method: greeting.get}
-      paramsSchema: {type: object, additionalProperties: false}
-      examples: [{}]
-    greeting.set:
-      cli: [greeting, set]
-      summary: Set the greeting
-      effect: write
-      flow: {type: invoke, method: greeting.set}
-      paramsSchema:
-        type: object
-        required: [text]
-        additionalProperties: false
-        properties:
-          text: {type: string, minLength: 1, maxLength: 200, description: Greeting text, examples: [Hello]}
-      examples: [{text: Hello}]
+  registry: operations.json