@synopackageland/templates 0.39.2 → 0.40.1

package/README.md

@@ -8,7 +8,7 @@ the files an App owns; the SDK (`github.com/synopackageland/syno-pkg-land-sdk`,
 
 Scaffolds keep automatic daemon recovery **off** by omitting `daemon.restart`.
 For an App that owns a foreground native daemon, a CLI with restart support and
-SDK **0.26.0 or later** can accept this opt-in alongside its existing `exec` and
+an SDK with restart support can accept this opt-in alongside its existing `exec` and
 `targets`:
 
 ```yaml
@@ -22,7 +22,7 @@ daemon:
     window_seconds: 300
 ```
 
-Templates 0.39.2 pin UI 0.19.5 and SDK 0.47.1 in native and Compose projects.
+Templates pin compatible UI and SDK releases in native and Compose projects.
 Use a CLI that supports executor manifest format 1. The Vue `AppShell` shows a
 non-blocking **Reload** notice when an upgrade replaced the UI an open page
 loaded. Go Apps select
@@ -42,7 +42,7 @@ for declaration bounds, SDK selection, build/inspect checks and diagnostics.
 
 An opt-in [Shared Folder permission example](examples/shared-folder-permission/README.md)
 shows the Go status-handler registration and a Vue notice for startup checks and
-storage failures. It pins SDK 0.32.0 independently of the current scaffold defaults.
+storage failures. Its manifest records its SDK pin independently of the scaffold defaults.
 
 An opt-in [native UI plus DSM console example](examples/dual-entry-console/README.md)
 shows the `console` declaration for an App that wraps a web service behind the
@@ -77,25 +77,26 @@ manifest gets the overlays' methods. `init` copies the App SDK into
 package.json without devDependencies and scripts, and `dist/`).
 `_shared/dsm-scripts/` holds DSM's lifecycle scripts (`preinst`, `postinst`, `preupgrade`,
 `postupgrade`, `preuninst`, `postuninst`, `start-stop-status`), each commented and doing
-nothing; `init` (CLI 0.10.3 and later) copies them into every project's `dsm-scripts/`, and `build`
+nothing; `init` copies them into every project's `dsm-scripts/`, and `build`
 calls each one from the generated script of the same name (`synopkgland skill show lifecycle`).
 The placeholders `__PACKAGE__` (also the Go module path), `__DISPLAY_NAME__` and
 `__BACKGROUND_ENABLED__` are substituted by `init`.
 
-`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.41.1`; that line is
+`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk`; that line is
 the single source of the SDK version and `frontend/package.json` pins
 `@synopackageland/sdk` to the same version. Python and Node.js name it in
 `backend.sdk`, Rust in the `syno-pkg-land-app` tag of `backend/Cargo.toml`
-(and `Cargo.lock`); all of them pin 0.41.1. The Vue frontend pins
-`@synopackageland/ui` 0.19.5. SDK 0.47.1 accepts UI `>=0.10.1 <0.20.0`,
-so no UI peer override is needed. Tests use jsdom 30 for UI floating-layer styles.
+(and `Cargo.lock`). The Vue frontend pins a compatible `@synopackageland/ui`.
+Read the SDK's published peer dependency range with
+`npm view @synopackageland/sdk peerDependencies` rather than overriding it. Tests use jsdom 30 for UI floating-layer styles.
 
 Interactive NAS file operations use same-origin browser calls.
 Custom file handlers use the SDK's
-[session transport migration](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.41.1/docs/dsm-session-transport.md).
-The CLI reads SDK 0.47.1's release manifest, which names immutable
-executor/v0.39.0 and its executor digests. CLI distributions must resolve
-templates 0.39.x for the current registry scaffolds.
+[session transport migration](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/dsm-session-transport.md).
+The CLI reads the selected SDK's release manifest, which names its immutable
+executor release and digests. Install matching CLI and templates dependencies;
+query published releases with `npm view @synopackageland/templates version`
+and `npm view @synopackageland/sdk version`.
 
 Every App method must appear in the permissions table, including methods whose
 permission equals `default: administrators`. Dynamic method names and custom
@@ -109,7 +110,7 @@ Keep punctuation between sentences and intentional loading ellipses.
 
 ## Request deadlines and background work
 
-SDK/App 0.47.1 defaults to 300 seconds for cooperative requests and 302 seconds
+SDK/App defaults to 300 seconds for cooperative requests and 302 seconds
 for the TS client and generated DSM window. The CLI reads the selected SDK's
 timeout spec; `backend.timeout_seconds` explicitly overrides it for native
 backends, and an earlier parent deadline still wins. Go assembly should fall
@@ -141,11 +142,36 @@ caps, approved root policy/program budgets and credential lifetimes retain
 their existing limits; long root work uses `root.start` / `root.jobs.*`.
 The independent ctl transport keeps its 62-second default: use an explicit
 `--timeout` for long synchronous calls, or an existing nonblocking job flow.
-See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.41.1/docs/request-deadlines.md).
+See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/request-deadlines.md).
+
+## HTTPS and stale DSM tokens
+
+Many CRUD, settings and file Apps work over HTTP; templates do not force HTTPS.
+Require it only for secure context features (`getUserMedia`, clipboard, Service
+Worker, WebCrypto `subtle`), pairing or an explicit secure Origin policy. Return
+`https_required`, distinct from authentication errors, and show a dedicated
+HTTPS page using SDK `identityCopy(locale).httpsTitle` / `errors.https_required`.
+Go `api.RequireSecureOrigin(request)` is an optional supplementary check.
+
+Only administrators may call `readDsmPorts(ctx)` to discover `dms_https` for a
+link. SDK `readDsmHttpsURL(ctx, location.href)` guards this call; ordinary users
+see instructions only, because PortInfo can refuse them or close their window.
+Do not guess a port when discovery is unavailable.
+
+An older DSM tab may retain a rejected `X-SYNO-TOKEN` after another tab signs in.
+SDK `createClient({sessionRetry: {session, operations}})` and
+`createDsmSession.refresh(rejectedToken)` offer opt-in, one-time recovery for
+trusted `effect: read`, `kind: rpc` calls. Writes, AI, streams and batches never
+replay; generated `ctx.call` is not automatically wrapped. Check the installed
+SDK's exported API before opting in; keep its frontend and backend pins aligned.
+Read the [CLI skill](https://github.com/synopackageland/syno-pkg-land-cli/blob/main/skills/SKILL.md#https-與舊-dsm-token)
+and [SDK API guide](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/https-and-session-recovery.md).
+Validate HTTP and HTTPS entries, administrator and ordinary users, stale-token
+read recovery and no replay of writes/AI/streams before shipping an App.
 
 ## Hyper Backup
 
-Native Apps appear in Hyper Backup as applications by default. CLI 0.40.0
+Native Apps appear in Hyper Backup as applications by default. The CLI
 builds them with a fixed `scripts/backup/` shim that Hyper Backup runs as
 root; it only switches to the package account, which archives or restores the
 App's data folder with the SDK backup control. The App itself still runs as
@@ -161,7 +187,7 @@ Keep `base: './'`, relative imports and `cssCodeSplit: false`; allow lazy chunks
 with `() => import('./Page.vue')` or `defineAsyncComponent`. Each mount creates
 its own Vue App and returns synchronous cleanup.
 
-CLI 0.40.0 copies the entire output into `ui/app/<tree-sha256>/` and verifies it
+The CLI copies the entire output into `ui/app/<tree-sha256>/` and verifies it
 during `inspect`. Changing a lazy chunk changes the snapshot URL. An open page
 may need to reload after an upgrade when an old lazy chunk is unavailable.
 See the SDK's [frontend bundle contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/frontend-bundles.md).
@@ -303,7 +329,7 @@ The bridge examples expose submission, lookup and cancellation through
 
 ## External access
 
-With a compatible CLI and SDK 0.47.1, a gateway App may declare `identity_gateway.external_access: {connect: optional, origin_change: confirm, single_origin: true}` for an upstream that signs in on one fixed URL. The policy is forwarded to the packaged gateway. A single-origin App's `manual_origin` accepts an explicit HTTPS port; the `external-origin` installation setting remains restricted to port 443. The DSM launcher selects a provider destination, probes `/_spl/ping` for up to eight seconds, and explains failures before offering **Open anyway**. A configured single-origin App always opens its primary external origin.
+With compatible CLI and SDK releases, a gateway App may declare `identity_gateway.external_access: {connect: optional, origin_change: confirm, single_origin: true}` for an upstream that signs in on one fixed URL. The policy is forwarded to the packaged gateway. A single-origin App's `manual_origin` accepts an explicit HTTPS port; the `external-origin` installation setting remains restricted to port 443. The DSM launcher selects a provider destination, probes `/_spl/ping` for up to eight seconds, and explains failures before offering **Open anyway**. A configured single-origin App always opens its primary external origin.
 
 
 Compose templates declare an app-named dedicated shared folder by default. DSM

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.39.2",
+  "version": "0.40.1",
   "description": "Project templates for synopkgland init: native-go, native-python, native-node and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
   "license": "MIT",
   "repository": {
@@ -17,6 +17,7 @@
     "README.md"
   ],
   "scripts": {
+    "check:docs": "node --test scripts/check-doc-versions.test.mjs && node scripts/check-doc-versions.mjs",
     "gate": "scripts/gate.sh"
   }
 }

package/templates/_shared/AGENTS.md

@@ -268,6 +268,29 @@ sweep forward the cancel instead of admitting it.
   template ships the wizard contract; it is not proof of every DSM release or of
   full writer/reboot behavior.
 
+## HTTPS and stale DSM tokens
+
+Do not force HTTPS for ordinary CRUD/settings/file Apps. Only secure context
+features, pairing or a strict secure Origin policy justify it. Return
+`https_required`, not a generic authentication error, and render the SDK's
+`identityCopy(locale).httpsTitle` / `errors.https_required` with reopening
+instructions. Go `api.RequireSecureOrigin(request)` is opt-in and does not
+replace authentication, origin or permission checks.
+
+Call `readDsmPorts` for `dms_https` only when `ctx.user?.isAdmin === true`;
+`readDsmHttpsURL(ctx, location.href)` applies this guard. Ordinary users see
+instructions only: PortInfo can refuse their session or close the DSM window.
+Do not guess a configured port.
+
+For an old tab's stale `X-SYNO-TOKEN`, SDK `createClient` can opt in through
+`sessionRetry` and `createDsmSession.refresh(rejectedToken)`. Only trusted
+`effect: read`, `kind: rpc` calls retry once on `session_required`. Writes, AI,
+streams, batches and unknown methods never retry. Existing `ctx.call` is not
+automatically wrapped. Verify the installed SDK exports these APIs before
+using them. Follow the [CLI skill](https://github.com/synopackageland/syno-pkg-land-cli/blob/main/skills/SKILL.md#https-與舊-dsm-token)
+and [SDK guide](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/https-and-session-recovery.md).
+Test both HTTP/HTTPS entries, both user roles and cross-tab session recovery.
+
 ## Go backend
 
 - Routes: `backend/internal/app` (`routes.go` registers them); App

package/templates/compose/dsm-package.yaml

@@ -23,7 +23,7 @@ compose:
   web: {service: web, port: 8080, health: {path: /, status: 200}}
   network: {egress: isolated}
 identity_gateway:
-  sdk: 0.47.1
+  sdk: 0.50.0
   mode: none
   listen: {http: 28000}
 # Web Apps default to new-page through the shared app-launch resolver.

package/templates/native-go/README.md

@@ -17,7 +17,7 @@ DSM main menu → DSM window (ui/app.js)
 
 ## Requests and long work
 
-SDK/App 0.47.1 defaults to 300-second requests and a 302-second browser wait.
+SDK/App defaults to 300-second requests and a 302-second browser wait.
 Explicit `backend.timeout_seconds` and earlier parent deadlines still apply;
 rebuild the App to use the new SDK. For long NAS work, enable the existing jobs
 capability: return admission and the original job ID promptly, execute in the
@@ -27,7 +27,7 @@ last queued/running state intact. After a lost admission reply, reuse the same
 idempotency key and input instead of replaying a mutation with a new key.
 Jobs default to 30 minutes; approved executor limits remain separate. ctl keeps
 its 62-second transport default; use an explicit `--timeout` or an existing
-nonblocking job. See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.47.1/docs/request-deadlines.md).
+nonblocking job. See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/request-deadlines.md).
 
 ## Quick start
 

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.47.1 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.50.0 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/go.mod

@@ -2,6 +2,6 @@ module __PACKAGE__
 
 go 1.26.10
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.47.1
+require github.com/synopackageland/syno-pkg-land-sdk v0.50.0
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.47.1 h1:7HbGRLJUr0ip0isBkvUPfG9p1hLBQ0VmcDskBA4SdTU=
-github.com/synopackageland/syno-pkg-land-sdk v0.47.1/go.mod h1:A4ZvKEQnCMk5offv/57Zsf1Z/pV1RmylS9cMfDqdBMQ=
+github.com/synopackageland/syno-pkg-land-sdk v0.50.0 h1:eaehFfsLqa18qFe0S3xjF/eaS3qg5ZSCycZdnGAvt7c=
+github.com/synopackageland/syno-pkg-land-sdk v0.50.0/go.mod h1:A4ZvKEQnCMk5offv/57Zsf1Z/pV1RmylS9cMfDqdBMQ=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go-vue/README.md

@@ -51,8 +51,11 @@ The manifest is dsm-package.yaml schema 2: backend.kind: go and capabilities.fil
 
 Use the installed `@synopackageland/ui`; package.json pins its version.
 `App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
-`pages` from `shellPages`, the header buttons in `#actions` and the pages in its
-default slot. Given `ctx`, it follows the launch. In a DSM desktop window it
+`pages` from `shellPages`, the page's buttons in `#actions` and the pages in its
+default slot. The sidebar names the page: the shell shows no page title, puts
+`#actions` in a bar above the page and scrolls only the content; a settings
+page (`SectionTabs fill` or `SettingsPage`) keeps its tabs and footer in place
+with no CSS of its own. Given `ctx`, it follows the launch. In a DSM desktop window it
 keeps `wide-layout="window"`, even maximized; the DSM host sets the 700px
 minimum window width. A Portal or standalone launch owns the whole page
 (`ctx.fullPage`, from the generated window): `AppShell` takes

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,8 +7,8 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.47.1",
-        "@synopackageland/ui": "0.19.5",
+        "@synopackageland/sdk": "0.50.0",
+        "@synopackageland/ui": "0.20.0",
         "vue": "3.5.43"
       },
       "devDependencies": {
@@ -1177,13 +1177,13 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.47.1",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.47.1.tgz",
-      "integrity": "sha512-ZkaNDKfn2zw28UhjKZ493DmEDq6zgr4TbgojXwMEjgRCyY3IRl8JF++LMuf6rrw4dmO7PdOufyAOqAoXulQ6YQ==",
+      "version": "0.50.0",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.50.0.tgz",
+      "integrity": "sha512-9cc/aBNicwE/2Ospx1a/akBGU2B8B2cQg6i06LbpZe8rdDBuPdLmAZh5WIlREsUruetq0mfmlVoeQ8l/lrdZ3g==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",
-        "@synopackageland/ui": ">=0.10.1 <0.20.0",
+        "@synopackageland/ui": ">=0.10.1 <0.21.0",
         "vue": "^3.5.0"
       },
       "peerDependenciesMeta": {
@@ -1196,9 +1196,9 @@
       }
     },
     "node_modules/@synopackageland/ui": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.19.5.tgz",
-      "integrity": "sha512-mVFy1QryQPfJdtjzsvECucFRBPh7oe0L1agJaf0UlA6T3PlsdCly1YhJumXJaY2ABPisGAFcoRCZda36uSIpFA==",
+      "version": "0.20.0",
+      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.20.0.tgz",
+      "integrity": "sha512-YoeMoI2s1jw+1fdyVjc2L9GzwaDCiCrj+zMQDOBiCCjPdPiOElENAbBm1vo/XKViVNhPoH4p3gXQEQxf4RRUXA==",
       "license": "MIT",
       "dependencies": {
         "@floating-ui/dom": "1.8.0",

package/templates/native-go-vue/frontend/package.json

@@ -8,8 +8,8 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.47.1",
-    "@synopackageland/ui": "0.19.5",
+    "@synopackageland/sdk": "0.50.0",
+    "@synopackageland/ui": "0.20.0",
     "vue": "3.5.43"
   },
   "devDependencies": {

package/templates/native-go-vue/frontend/src/App.vue

@@ -25,7 +25,6 @@ const page = ref<ShellPage>('status')
 const pages = computed(() => shellPages({background:backgroundEnabled}))
 // Only a confirmed sign-in need replaces the App's pages; the sign-in page draws its own title.
 const signIn = computed(() => login.ready.value && login.enabled.value && !login.subject.value && {header: false as const})
-const subtitle = computed(() => app.value?.package)
 function message(e: unknown) {
  const code = (e as {code?: string})?.code || 'request_failed'
  const errors = copy.value.errors as Record<string, string>
@@ -71,7 +70,7 @@ onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose()})
 </script>
 
 <template>
- <AppShell app-root v-model="page" :ctx="shellCtx" :locale="ctx.locale" :pages="pages" :description="subtitle" :denied="signIn" sidebar-storage-key="__PACKAGE__">
+ <AppShell app-root v-model="page" :ctx="shellCtx" :locale="ctx.locale" :pages="pages" :denied="signIn" sidebar-storage-key="__PACKAGE__">
   <template #denied><LoginPage :session="login" :locale="ctx.locale" /></template>
   <template #actions><Button variant="secondary" :disabled="busy" @click="refreshAll">{{ copy.refresh }}</Button><Button v-if="login.enabled.value" variant="secondary" :disabled="busy" @click="signOut">{{ copy.signOut }}</Button></template>
   <ExecutorGate :ctx="ctx" :admin="ctx.user?.isAdmin ?? !!app?.admin">

package/templates/native-node/README.md

@@ -17,7 +17,7 @@ DSM main menu → DSM window (ui/app.js)
 
 ## Requests and long work
 
-SDK/App 0.47.1 defaults to 300-second requests and a 302-second browser wait.
+SDK/App defaults to 300-second requests and a 302-second browser wait.
 Explicit `backend.timeout_seconds` and earlier parent deadlines still apply;
 rebuild the App to use the new SDK. For long NAS work, enable the existing jobs
 capability: return admission and the original job ID promptly, execute in the
@@ -27,7 +27,7 @@ last queued/running state intact. After a lost admission reply, reuse the same
 idempotency key and input instead of replaying a mutation with a new key.
 Jobs default to 30 minutes; approved executor limits remain separate. ctl keeps
 its 62-second transport default; use an explicit `--timeout` or an existing
-nonblocking job. See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.47.1/docs/request-deadlines.md).
+nonblocking job. See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/request-deadlines.md).
 
 ## Quick start
 

package/templates/native-node/backend/package-lock.json

@@ -49,7 +49,7 @@
       "license": "MIT"
     },
     "vendor/@synopackageland/app": {
-      "version": "0.47.1",
+      "version": "0.50.0",
       "license": "MIT",
       "engines": {
         "node": ">=22"

package/templates/native-node/dsm-package.yaml

@@ -49,7 +49,7 @@ backend:
   runtime: node
   dir: backend/app
   entry: main.js
-  sdk: 0.47.1
+  sdk: 0.50.0
   node: { package: Node.js_v22 }
 
 ui:

package/templates/native-node-vue/README.md

@@ -28,8 +28,11 @@ bridge App's runtime serves.
 
 Use the installed `@synopackageland/ui`; package.json pins its version.
 `App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
-`pages` from `shellPages`, the header buttons in `#actions` and the pages in its
-default slot. Given `ctx`, it follows the launch. In a DSM desktop window it
+`pages` from `shellPages`, the page's buttons in `#actions` and the pages in its
+default slot. The sidebar names the page: the shell shows no page title, puts
+`#actions` in a bar above the page and scrolls only the content; a settings
+page (`SectionTabs fill` or `SettingsPage`) keeps its tabs and footer in place
+with no CSS of its own. Given `ctx`, it follows the launch. In a DSM desktop window it
 keeps `wide-layout="window"`, even maximized; the DSM host sets the 700px
 minimum window width. A Portal or standalone launch owns the whole page
 (`ctx.fullPage`, from the generated window): `AppShell` takes

package/templates/native-python/README.md

@@ -17,7 +17,7 @@ DSM main menu → DSM window (ui/app.js)
 
 ## Requests and long work
 
-SDK/App 0.47.1 defaults to 300-second requests and a 302-second browser wait.
+SDK/App defaults to 300-second requests and a 302-second browser wait.
 Explicit `backend.timeout_seconds` and earlier parent deadlines still apply;
 rebuild the App to use the new SDK. For long NAS work, enable the existing jobs
 capability: return admission and the original job ID promptly, execute in the
@@ -27,7 +27,7 @@ last queued/running state intact. After a lost admission reply, reuse the same
 idempotency key and input instead of replaying a mutation with a new key.
 Jobs default to 30 minutes; approved executor limits remain separate. ctl keeps
 its 62-second transport default; use an explicit `--timeout` or an existing
-nonblocking job. See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.47.1/docs/request-deadlines.md).
+nonblocking job. See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/request-deadlines.md).
 
 ## Quick start
 

package/templates/native-python/dsm-package.yaml

@@ -47,7 +47,7 @@ backend:
   runtime: python
   dir: backend/app
   entry: main.py
-  sdk: 0.47.1
+  sdk: 0.50.0
 
 ui:
   # Non-UI-SDK frontends open a full page; Portal is a separate opt-in.

package/templates/native-python-vue/README.md

@@ -28,8 +28,11 @@ bridge App's runtime serves.
 
 Use the installed `@synopackageland/ui`; package.json pins its version.
 `App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
-`pages` from `shellPages`, the header buttons in `#actions` and the pages in its
-default slot. Given `ctx`, it follows the launch. In a DSM desktop window it
+`pages` from `shellPages`, the page's buttons in `#actions` and the pages in its
+default slot. The sidebar names the page: the shell shows no page title, puts
+`#actions` in a bar above the page and scrolls only the content; a settings
+page (`SectionTabs fill` or `SettingsPage`) keeps its tabs and footer in place
+with no CSS of its own. Given `ctx`, it follows the launch. In a DSM desktop window it
 keeps `wide-layout="window"`, even maximized; the DSM host sets the 700px
 minimum window width. A Portal or standalone launch owns the whole page
 (`ctx.fullPage`, from the generated window): `AppShell` takes

package/templates/native-rust/README.md

@@ -17,7 +17,7 @@ DSM main menu → DSM window (ui/app.js)
 
 ## Requests and long work
 
-SDK/App 0.47.1 defaults to 300-second requests and a 302-second browser wait.
+SDK/App defaults to 300-second requests and a 302-second browser wait.
 Explicit `backend.timeout_seconds` and earlier parent deadlines still apply;
 rebuild the App to use the new SDK. For long NAS work, enable the existing jobs
 capability: return admission and the original job ID promptly, execute in the
@@ -27,7 +27,7 @@ last queued/running state intact. After a lost admission reply, reuse the same
 idempotency key and input instead of replaying a mutation with a new key.
 Jobs default to 30 minutes; approved executor limits remain separate. ctl keeps
 its 62-second transport default; use an explicit `--timeout` or an existing
-nonblocking job. See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.47.1/docs/request-deadlines.md).
+nonblocking job. See the SDK's [request deadline contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/request-deadlines.md).
 
 ## Quick start
 

package/templates/native-rust/backend/Cargo.lock

@@ -104,8 +104,8 @@ dependencies = [
 
 [[package]]
 name = "syno-pkg-land-app"
-version = "0.47.1"
-source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.47.1#a3239a7def2968a111cfb2881fd1726484976c23"
+version = "0.50.0"
+source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.50.0#b1adac9407cf1338fa79741ebfcbdaa5c1698b6f"
 dependencies = [
  "libc",
  "serde",

package/templates/native-rust/backend/Cargo.toml

@@ -9,7 +9,7 @@ libc = "0.2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The SDK version is the tag; `synopkgland check` reads it from Cargo.lock.
-syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.47.1" }
+syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.50.0" }
 
 [profile.release]
 # A handler panic becomes an "internal" reply; abort would end the App without one.

package/templates/native-rust-delegate/backend/Cargo.lock

@@ -170,8 +170,8 @@ dependencies = [
 
 [[package]]
 name = "syno-pkg-land-app"
-version = "0.47.1"
-source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.47.1#a3239a7def2968a111cfb2881fd1726484976c23"
+version = "0.50.0"
+source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.50.0#b1adac9407cf1338fa79741ebfcbdaa5c1698b6f"
 dependencies = [
  "libc",
  "serde",

package/templates/native-rust-delegate/backend/Cargo.toml

@@ -10,7 +10,7 @@ libc = "0.2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The SDK version is the tag; `synopkgland check` reads it from Cargo.lock.
-syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.47.1" }
+syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.50.0" }
 
 [profile.release]
 # A handler panic becomes an "internal" reply; abort would end the App without one.

package/templates/native-rust-vue/README.md

@@ -28,8 +28,11 @@ bridge App's runtime serves.
 
 Use the installed `@synopackageland/ui`; package.json pins its version.
 `App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
-`pages` from `shellPages`, the header buttons in `#actions` and the pages in its
-default slot. Given `ctx`, it follows the launch. In a DSM desktop window it
+`pages` from `shellPages`, the page's buttons in `#actions` and the pages in its
+default slot. The sidebar names the page: the shell shows no page title, puts
+`#actions` in a bar above the page and scrolls only the content; a settings
+page (`SectionTabs fill` or `SettingsPage`) keeps its tabs and footer in place
+with no CSS of its own. Given `ctx`, it follows the launch. In a DSM desktop window it
 keeps `wide-layout="window"`, even maximized; the DSM host sets the 700px
 minimum window width. A Portal or standalone launch owns the whole page
 (`ctx.fullPage`, from the generated window): `AppShell` takes