@synopackageland/templates 0.41.0 → 0.41.2

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.41.2
+
+- Align SDK/App references across native and Compose templates and refresh dependency locks
+- Use frontend SDK ~0.53.1 and UI ~0.23.2 to allow compatible patch updates
+- Document phone tab pages, preserved page titles and App branding, shared header action menus and the Package Center URL helper
+
+## 0.41.1
+
+- Pin SDK/App 0.51.1 across Go, Python, Node.js, Rust and Compose templates
+- Require frontend SDK ~0.51.1 so generated mobile entries can preload the App bundle during identity requests
+- Refresh SDK lock integrity, Go module sums and Rust release references
+
 ## 0.41.0
 
 - Require CLI `~0.49.0` in every generated project through the shared test scaffold

package/README.md

@@ -83,13 +83,18 @@ The placeholders `__PACKAGE__` (also the Go module path), `__DISPLAY_NAME__` and
 `__BACKGROUND_ENABLED__` are substituted by `init`.
 
 `backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk`; that line is
-the single source of the SDK version and `frontend/package.json` pins
-`@synopackageland/sdk` to the same version. Python and Node.js name it in
+the single source of the SDK version and `frontend/package.json` sets
+`@synopackageland/sdk` to a patch range starting at the same version. Python and Node.js name it in
 `backend.sdk`, Rust in the `syno-pkg-land-app` tag of `backend/Cargo.toml`
-(and `Cargo.lock`). The Vue frontend pins a compatible `@synopackageland/ui`.
+(and `Cargo.lock`). The Vue frontend uses a compatible patch range for
+`@synopackageland/ui`. The shipped lockfile fixes both installed versions;
+update it deliberately to take newer patches.
 Read the SDK's published peer dependency range with
 `npm view @synopackageland/sdk peerDependencies` rather than overriding it. Tests use jsdom 30 for UI floating-layer styles.
 
+For an "install another package" link, use the SDK's
+`packageCenterUrl(origin?)` helper to open DSM's Package Center.
+
 Interactive NAS file operations use same-origin browser calls.
 Custom file handlers use the SDK's
 [session transport migration](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/dsm-session-transport.md).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.41.0",
+  "version": "0.41.2",
   "description": "Project templates for synopkgland init: native-go, native-python, native-node and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
   "license": "MIT",
   "repository": {

package/templates/compose/dsm-package.yaml

@@ -23,7 +23,7 @@ compose:
   web: {service: web, port: 8080, health: {path: /, status: 200}}
   network: {egress: isolated}
 identity_gateway:
-  sdk: 0.51.0
+  sdk: 0.53.1
   mode: none
   listen: {http: 28000}
 # Web Apps default to new-page through the shared app-launch resolver.

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.51.0 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.53.1 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/go.mod

@@ -2,6 +2,6 @@ module __PACKAGE__
 
 go 1.26.10
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.51.0
+require github.com/synopackageland/syno-pkg-land-sdk v0.53.1
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.51.0 h1:DkFlrW3gsvUze8oqHtDJ+I4yrIdbFUyImqCcF4zWT0I=
-github.com/synopackageland/syno-pkg-land-sdk v0.51.0/go.mod h1:A4ZvKEQnCMk5offv/57Zsf1Z/pV1RmylS9cMfDqdBMQ=
+github.com/synopackageland/syno-pkg-land-sdk v0.53.1 h1:bgfWJRVjWWAofaIxRh4lhGrToPdhZ2AwbQp+YQMWqMo=
+github.com/synopackageland/syno-pkg-land-sdk v0.53.1/go.mod h1:JMfenGwAhlVgGUtoSQFA9XRbtN8Zcs+0xdrOaaam+Fg=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go-vue/README.md

@@ -3,7 +3,7 @@
 Edit `frontend/src/App.vue` and `main.ts` to build a DSM-window app with the
 public `@synopackageland/ui` components and embedded theme. The shell, sign-in,
 files, portal, jobs and delegate components come from `@synopackageland/sdk/vue`
-(types from `@synopackageland/sdk`); its version must equal the
+(types from `@synopackageland/sdk`); its patch range starts at the
 `github.com/synopackageland/syno-pkg-land-sdk` version in `backend/go.mod`. See
 <https://github.com/synopackageland/syno-pkg-land-sdk> for the components and their props.
 
@@ -77,10 +77,10 @@ Generated build and unit tests do not establish NAS runtime acceptance.
 
 The manifest is dsm-package.yaml schema 2: backend.kind: go and capabilities.files: session, jobs: true, identity: standalone, rootOps: true. Use --with login to declare standalone identity. Existing projects use synopkgland add <cap>...; app entrypoints stay app-owned, SDK conflicts are refused. check, inspect, build, deploy and status accept --json.
 
-Use the installed `@synopackageland/ui`; package.json pins its version.
+Use the installed `@synopackageland/ui` and its declared compatible patch range.
 `App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
 `pages` from `shellPages`, the page's buttons in `#actions` and the pages in its
-default slot. The sidebar names the page: the shell shows no page title, puts
+default slot. On desktop, the sidebar names the page: the shell shows no page title, puts
 `#actions` in a bar above the page and scrolls only the content; a settings
 page (`SectionTabs fill` or `SettingsPage`) keeps its tabs and footer in place
 with no CSS of its own. Given `ctx`, it follows the launch. In a DSM desktop window it
@@ -93,6 +93,21 @@ device-width viewport. Its full-page sidebar names the App with
 `ctx.displayName` and `ctx.appIcon` (without them the page title and icon) and
 shows the signed-in DSM account and its role from `ctx.user`. See the ui's
 `docs/adaptive-layout.md`.
+
+The frontend SDK and UI use patch ranges; the lockfile records the installed
+versions. Update the lockfile deliberately when taking a newer patch.
+
+On a phone, a page with its own current tab in `#tabbar` has no repeated title
+row. `AppShell` passes `phone-bar-title="none"` to `AppLayout` for that page,
+while retaining the real page title and App name/icon from `ctx`. The drawer
+keeps that branding, and the UI hides a bar with nothing in it. When using
+`AppLayout` directly, pass the real `title`, `brand-name` and `brand-icon`
+even with `phone-bar-title="none"`. Pages outside the tab bar and detail pages
+with Back keep their title bar. `header-actions` share one "…" menu; only an
+entry marked `primary: true`, or a sole entry with an icon, becomes a separate
+bar button. The template's `#actions` stays page actions; no title or empty-bar
+workaround is needed.
+
 `AppShell`'s `app-root` wraps it in an app-local `AppRoot` (app modal scope, on
 a full page as well, bounded at `height: 100%`) with the UI locale from
 `locale`; do not add another `AppRoot`.

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,8 +7,8 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "~0.51.0",
-        "@synopackageland/ui": "0.20.5",
+        "@synopackageland/sdk": "~0.53.1",
+        "@synopackageland/ui": "~0.23.2",
         "vue": "3.5.43"
       },
       "devDependencies": {
@@ -1174,13 +1174,13 @@
       "license": "Apache-2.0"
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.51.0",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.51.0.tgz",
-      "integrity": "sha512-Ijv4n5B2YlDde4P2c3AZj0YPiO08ft+kUiNYIGfQiv3nbyniljX0k6nllG7oi85jD2gPrWQM+HIw7BVpU70WWg==",
+      "version": "0.53.1",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.53.1.tgz",
+      "integrity": "sha512-Riw45zAJW4L4aU7VxLT95q3NhG+zD2dIFsuiHyqPZizugeT3e2U4bckFRTMY8YPL5Nc0jz4Jk4MFpDSCnXddqw==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",
-        "@synopackageland/ui": ">=0.20.5 <0.21.0",
+        "@synopackageland/ui": ">=0.23.2 <0.24.0",
         "vue": "^3.5.0"
       },
       "peerDependenciesMeta": {
@@ -1193,9 +1193,9 @@
       }
     },
     "node_modules/@synopackageland/ui": {
-      "version": "0.20.5",
-      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.20.5.tgz",
-      "integrity": "sha512-lyn3W+VvPu5BuZN1CMPZP3R7B1phUcqRzhmSmSJ8rubptPk1/wbfa91cLdYtRC9qKBBSnXlf6c9ibjkskf5qLQ==",
+      "version": "0.23.2",
+      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.23.2.tgz",
+      "integrity": "sha512-3qVl482czZERMsxd2M0ueP+Qy6INW1+OlaalX9RpUMxp6z5eydN/9s6HhT8SQZSX2dpboZg61R8djgQm9PqOuQ==",
       "license": "MIT",
       "dependencies": {
         "@floating-ui/dom": "1.8.0",

package/templates/native-go-vue/frontend/package.json

@@ -8,8 +8,8 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "~0.51.0",
-    "@synopackageland/ui": "0.20.5",
+    "@synopackageland/sdk": "~0.53.1",
+    "@synopackageland/ui": "~0.23.2",
     "vue": "3.5.43"
   },
   "devDependencies": {

package/templates/native-node/backend/package-lock.json

@@ -49,7 +49,7 @@
       "license": "MIT"
     },
     "vendor/@synopackageland/app": {
-      "version": "0.51.0",
+      "version": "0.53.1",
       "license": "MIT",
       "engines": {
         "node": ">=22"

package/templates/native-node/dsm-package.yaml

@@ -49,7 +49,7 @@ backend:
   runtime: node
   dir: backend/app
   entry: main.js
-  sdk: 0.51.0
+  sdk: 0.53.1
   node: { package: Node.js_v22 }
 
 ui:

package/templates/native-node-vue/README.md

@@ -4,7 +4,7 @@ The Vue shell is the same as the Go template's. Edit `frontend/src/App.vue`
 and `main.ts` to build a DSM-window app with the public `@synopackageland/ui`
 components and embedded theme. The shell, sign-in, files, portal, jobs and
 delegate components come from `@synopackageland/sdk/vue` (types from
-`@synopackageland/sdk`); its version must equal the `backend.sdk` in dsm-package.yaml. See
+`@synopackageland/sdk`); its patch range starts at the `backend.sdk` in dsm-package.yaml. See
 <https://github.com/synopackageland/syno-pkg-land-sdk> for the components and their props.
 
 ## Local tests
@@ -43,10 +43,10 @@ background-jobs page and executor settings call the runtime's own browser
 methods (`bg.*`, `executor.*`); check the SDK release notes for the ones a
 bridge App's runtime serves.
 
-Use the installed `@synopackageland/ui`; package.json pins its version.
+Use the installed `@synopackageland/ui` and its declared compatible patch range.
 `App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
 `pages` from `shellPages`, the page's buttons in `#actions` and the pages in its
-default slot. The sidebar names the page: the shell shows no page title, puts
+default slot. On desktop, the sidebar names the page: the shell shows no page title, puts
 `#actions` in a bar above the page and scrolls only the content; a settings
 page (`SectionTabs fill` or `SettingsPage`) keeps its tabs and footer in place
 with no CSS of its own. Given `ctx`, it follows the launch. In a DSM desktop window it
@@ -59,6 +59,21 @@ device-width viewport. Its full-page sidebar names the App with
 `ctx.displayName` and `ctx.appIcon` (without them the page title and icon) and
 shows the signed-in DSM account and its role from `ctx.user`. See the ui's
 `docs/adaptive-layout.md`.
+
+The frontend SDK and UI use patch ranges; the lockfile records the installed
+versions. Update the lockfile deliberately when taking a newer patch.
+
+On a phone, a page with its own current tab in `#tabbar` has no repeated title
+row. `AppShell` passes `phone-bar-title="none"` to `AppLayout` for that page,
+while retaining the real page title and App name/icon from `ctx`. The drawer
+keeps that branding, and the UI hides a bar with nothing in it. When using
+`AppLayout` directly, pass the real `title`, `brand-name` and `brand-icon`
+even with `phone-bar-title="none"`. Pages outside the tab bar and detail pages
+with Back keep their title bar. `header-actions` share one "…" menu; only an
+entry marked `primary: true`, or a sole entry with an icon, becomes a separate
+bar button. The template's `#actions` stays page actions; no title or empty-bar
+workaround is needed.
+
 `AppShell`'s `app-root` wraps it in an app-local `AppRoot` (app modal scope, on
 a full page as well, bounded at `height: 100%`) with the UI locale from
 `locale`; do not add another `AppRoot`.

package/templates/native-python/dsm-package.yaml

@@ -47,7 +47,7 @@ backend:
   runtime: python
   dir: backend/app
   entry: main.py
-  sdk: 0.51.0
+  sdk: 0.53.1
 
 ui:
   # Non-UI-SDK frontends open a full page; Portal is a separate opt-in.

package/templates/native-python-vue/README.md

@@ -4,7 +4,7 @@ The Vue shell is the same as the Go template's. Edit `frontend/src/App.vue`
 and `main.ts` to build a DSM-window app with the public `@synopackageland/ui`
 components and embedded theme. The shell, sign-in, files, portal, jobs and
 delegate components come from `@synopackageland/sdk/vue` (types from
-`@synopackageland/sdk`); its version must equal the `backend.sdk` in dsm-package.yaml. See
+`@synopackageland/sdk`); its patch range starts at the `backend.sdk` in dsm-package.yaml. See
 <https://github.com/synopackageland/syno-pkg-land-sdk> for the components and their props.
 
 ## Local tests
@@ -43,10 +43,10 @@ background-jobs page and executor settings call the runtime's own browser
 methods (`bg.*`, `executor.*`); check the SDK release notes for the ones a
 bridge App's runtime serves.
 
-Use the installed `@synopackageland/ui`; package.json pins its version.
+Use the installed `@synopackageland/ui` and its declared compatible patch range.
 `App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
 `pages` from `shellPages`, the page's buttons in `#actions` and the pages in its
-default slot. The sidebar names the page: the shell shows no page title, puts
+default slot. On desktop, the sidebar names the page: the shell shows no page title, puts
 `#actions` in a bar above the page and scrolls only the content; a settings
 page (`SectionTabs fill` or `SettingsPage`) keeps its tabs and footer in place
 with no CSS of its own. Given `ctx`, it follows the launch. In a DSM desktop window it
@@ -59,6 +59,21 @@ device-width viewport. Its full-page sidebar names the App with
 `ctx.displayName` and `ctx.appIcon` (without them the page title and icon) and
 shows the signed-in DSM account and its role from `ctx.user`. See the ui's
 `docs/adaptive-layout.md`.
+
+The frontend SDK and UI use patch ranges; the lockfile records the installed
+versions. Update the lockfile deliberately when taking a newer patch.
+
+On a phone, a page with its own current tab in `#tabbar` has no repeated title
+row. `AppShell` passes `phone-bar-title="none"` to `AppLayout` for that page,
+while retaining the real page title and App name/icon from `ctx`. The drawer
+keeps that branding, and the UI hides a bar with nothing in it. When using
+`AppLayout` directly, pass the real `title`, `brand-name` and `brand-icon`
+even with `phone-bar-title="none"`. Pages outside the tab bar and detail pages
+with Back keep their title bar. `header-actions` share one "…" menu; only an
+entry marked `primary: true`, or a sole entry with an icon, becomes a separate
+bar button. The template's `#actions` stays page actions; no title or empty-bar
+workaround is needed.
+
 `AppShell`'s `app-root` wraps it in an app-local `AppRoot` (app modal scope, on
 a full page as well, bounded at `height: 100%`) with the UI locale from
 `locale`; do not add another `AppRoot`.

package/templates/native-rust/backend/Cargo.lock

@@ -104,8 +104,8 @@ dependencies = [
 
 [[package]]
 name = "syno-pkg-land-app"
-version = "0.51.0"
-source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.51.0#fffdbb3781fe7f8c57294cdf082b1bf347c0957d"
+version = "0.53.1"
+source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.53.1#67feea7b8c05f0bbb5e31b07e40be617691b9de9"
 dependencies = [
  "libc",
  "serde",

package/templates/native-rust/backend/Cargo.toml

@@ -9,7 +9,7 @@ libc = "0.2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The SDK version is the tag; `synopkgland check` reads it from Cargo.lock.
-syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.51.0" }
+syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.53.1" }
 
 [profile.release]
 # A handler panic becomes an "internal" reply; abort would end the App without one.

package/templates/native-rust-delegate/backend/Cargo.lock

@@ -170,8 +170,8 @@ dependencies = [
 
 [[package]]
 name = "syno-pkg-land-app"
-version = "0.51.0"
-source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.51.0#fffdbb3781fe7f8c57294cdf082b1bf347c0957d"
+version = "0.53.1"
+source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.53.1#67feea7b8c05f0bbb5e31b07e40be617691b9de9"
 dependencies = [
  "libc",
  "serde",

package/templates/native-rust-delegate/backend/Cargo.toml

@@ -10,7 +10,7 @@ libc = "0.2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The SDK version is the tag; `synopkgland check` reads it from Cargo.lock.
-syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.51.0" }
+syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.53.1" }
 
 [profile.release]
 # A handler panic becomes an "internal" reply; abort would end the App without one.

package/templates/native-rust-vue/README.md

@@ -4,7 +4,7 @@ The Vue shell is the same as the Go template's. Edit `frontend/src/App.vue`
 and `main.ts` to build a DSM-window app with the public `@synopackageland/ui`
 components and embedded theme. The shell, sign-in, files, portal, jobs and
 delegate components come from `@synopackageland/sdk/vue` (types from
-`@synopackageland/sdk`); its version must equal the `syno-pkg-land-app` tag in backend/Cargo.toml. See
+`@synopackageland/sdk`); its patch range starts at the `syno-pkg-land-app` tag in backend/Cargo.toml. See
 <https://github.com/synopackageland/syno-pkg-land-sdk> for the components and their props.
 
 ## Local tests
@@ -43,10 +43,10 @@ background-jobs page and executor settings call the runtime's own browser
 methods (`bg.*`, `executor.*`); check the SDK release notes for the ones a
 bridge App's runtime serves.
 
-Use the installed `@synopackageland/ui`; package.json pins its version.
+Use the installed `@synopackageland/ui` and its declared compatible patch range.
 `App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
 `pages` from `shellPages`, the page's buttons in `#actions` and the pages in its
-default slot. The sidebar names the page: the shell shows no page title, puts
+default slot. On desktop, the sidebar names the page: the shell shows no page title, puts
 `#actions` in a bar above the page and scrolls only the content; a settings
 page (`SectionTabs fill` or `SettingsPage`) keeps its tabs and footer in place
 with no CSS of its own. Given `ctx`, it follows the launch. In a DSM desktop window it
@@ -59,6 +59,21 @@ device-width viewport. Its full-page sidebar names the App with
 `ctx.displayName` and `ctx.appIcon` (without them the page title and icon) and
 shows the signed-in DSM account and its role from `ctx.user`. See the ui's
 `docs/adaptive-layout.md`.
+
+The frontend SDK and UI use patch ranges; the lockfile records the installed
+versions. Update the lockfile deliberately when taking a newer patch.
+
+On a phone, a page with its own current tab in `#tabbar` has no repeated title
+row. `AppShell` passes `phone-bar-title="none"` to `AppLayout` for that page,
+while retaining the real page title and App name/icon from `ctx`. The drawer
+keeps that branding, and the UI hides a bar with nothing in it. When using
+`AppLayout` directly, pass the real `title`, `brand-name` and `brand-icon`
+even with `phone-bar-title="none"`. Pages outside the tab bar and detail pages
+with Back keep their title bar. `header-actions` share one "…" menu; only an
+entry marked `primary: true`, or a sole entry with an icon, becomes a separate
+bar button. The template's `#actions` stays page actions; no title or empty-bar
+workaround is needed.
+
 `AppShell`'s `app-root` wraps it in an app-local `AppRoot` (app modal scope, on
 a full page as well, bounded at `height: 100%`) with the UI locale from
 `locale`; do not add another `AppRoot`.