@synopackageland/templates 0.42.1 → 0.43.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.43.0
+
+- Move Vue and capability layers under `templates/overlays/`; keep six main templates.
+- Let init resolve compatible SDK/UI releases and its own CLI version from shipped defaults.
+- Refresh offline defaults and remove shipped npm lockfiles; first install creates them.
+- Preserve release checksums and document Go/Rust dependency initialization.
+
+## 0.42.2
+
+- New Apps get no header Refresh. The Vue templates leave `AppShell`'s `#actions` empty (Sign out only with standalone login), so the shell draws no bar above the page; the plain UI's title row drops its Refresh button
+- Data stays fresh without it: reopening the window reads the status, panels and portal again, the Vue status page reads again each time it is shown, and a failed read offers Retry beside its error
+- Delegate templates keep their Retry inside the capability's own error Callout
+- READMEs, `DESIGN.md` and `AGENTS.md` say `#actions` is for real page actions (such as Add), never a Refresh
+- Drop the unused `refresh`, `greeting`, `save` and `saved` messages; error texts no longer ask the user to refresh
+
 ## 0.42.1
 
 - The commented `backup` example in the native and binary `dsm-package.yaml` says online backup reads SQLite in place, and shows the optional `exclude` list of data-folder globs left out of the archive (SDK 0.53.35, CLI 0.53.13)

package/README.md

@@ -24,7 +24,7 @@ daemon:
     window_seconds: 300
 ```
 
-Templates pin compatible UI and SDK releases in native and Compose projects.
+Templates carry offline fallback dependency versions; init resolves compatible current releases.
 Use a CLI that supports executor manifest format 1. The Vue `AppShell` shows a
 non-blocking **Reload** notice when an upgrade replaced the UI an open page
 loaded. Go Apps select
@@ -50,15 +50,20 @@ An opt-in [native UI plus DSM console example](examples/dual-entry-console/READM
 shows the `console` declaration for an App that wraps a web service behind the
 identity gateway and keeps its own settings in an administrator-only DSM window.
 
-| Template | What it adds |
+The first level of `templates/` contains the six main templates, `_shared/`,
+and `overlays/`. All Vue, jobs, delegate and root-ops layers live under `overlays/`.
+The shipped manifest versions are fallback defaults; init rewrites them through its
+existing substitution pass. SDK/UI/CLI patches do not require a templates release.
+
+| Template or overlay | What it adds |
 | --- | --- |
 | `native-go` | Base: `dsm-package.yaml`, Go module (`backend/cmd/{app,background-worker}`, `backend/internal/app`, `backend/internal/api/permissions.json`), plain `ui/`, i18n |
-| `native-go-vue` | Vue shell in `frontend/` (`App.vue`, `main.ts`, app i18n, `CapabilityPanels.vue`, `ExecutorGate.vue`) |
-| `native-go-jobs` | Background job routes in `internal/app` and a shell lifecycle test |
-| `native-go-delegate` | Delegate routes, the delegate background worker, the delegate `CapabilityPanels.vue` |
-| `native-go-root-ops` | The SDK's executor routes and `root.run` in `internal/app`, an example `root/whoami.sh`, and the Vue `ExecutorGate.vue` that holds the pages until the executor is approved |
+| `overlays/native-go-vue` | Vue shell in `frontend/` (`App.vue`, `main.ts`, app i18n, `CapabilityPanels.vue`, `ExecutorGate.vue`) |
+| `overlays/native-go-jobs` | Background job routes in `internal/app` and a shell lifecycle test |
+| `overlays/native-go-delegate` | Delegate routes, the delegate background worker, the delegate `CapabilityPanels.vue` |
+| `overlays/native-go-root-ops` | The SDK's executor routes and `root.run` in `internal/app`, an example `root/whoami.sh`, and the Vue `ExecutorGate.vue` that holds the pages until the executor is approved |
 | `native-python` | Base: `dsm-package.yaml` (`backend.runtime: python`), the App in `backend/app` (`routes.py`, stub capability modules, `permissions.json`), unittest tests |
-| `native-node` | Base: `dsm-package.yaml` (`backend.runtime: node`), TypeScript in `backend/src` compiled into `backend/app`, node:test tests, `pnpm-lock.yaml` |
+| `native-node` | Base: `dsm-package.yaml` (`backend.runtime: node`), TypeScript in `backend/src` compiled into `backend/app`, node:test tests, an install-generated lockfile |
 | `native-rust` | Base: `dsm-package.yaml` (`backend.runtime: rust`, `methods`), the Cargo project in `backend` on the `syno-pkg-land-app` crate, `Cargo.lock`, `rust-toolchain.toml` |
 | `native-{python,node,rust}-{jobs,root-ops,delegate}` | The capability's example module, replacing the base's stub, with its tests |
 | `native-{python,node,rust}-vue` | The README and `.gitignore` of the Vue shell |
@@ -70,8 +75,8 @@ Overlays are copied over `native-go` in the order root-ops, vue, jobs, delegate.
 An overlay may replace `internal/app/*_none.go` (the CLI deletes the matching
 `_none.go` file); nothing outside `internal/app` and the Vue shell differs.
 The Python, Node.js and Rust templates borrow the Go template's UI: `ui/` and
-`i18n/` from `native-go`, `frontend/` from `native-go-vue` (and the jobs and
-delegate overlays' frontend files), `root/whoami.sh` from `native-go-root-ops`.
+`i18n/` from `native-go`, `frontend/` from `overlays/native-go-vue` (and the jobs and
+delegate overlays' frontend files), `root/whoami.sh` from `overlays/native-go-root-ops`.
 Their overlays are copied in the order vue, root-ops, jobs, delegate; delegate
 also makes `app.status` and `report.save` `authenticated`, and the Rust
 manifest gets the overlays' methods. `init` copies the App SDK into
@@ -84,13 +89,22 @@ calls each one from the generated script of the same name (`synopkgland skill sh
 The placeholders `__PACKAGE__` (also the Go module path), `__DISPLAY_NAME__` and
 `__BACKGROUND_ENABLED__` are substituted by `init`.
 
-`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk`; that line is
-the single source of the SDK version and `frontend/package.json` sets
-`@synopackageland/sdk` to a patch range starting at the same version. Python and Node.js name it in
-`backend.sdk`, Rust in the `syno-pkg-land-app` tag of `backend/Cargo.toml`
-(and `Cargo.lock`). The Vue frontend uses a compatible patch range for
-`@synopackageland/ui`. The shipped lockfile fixes both installed versions;
-update it deliberately to take newer patches.
+`init` defaults to `native-go` with Vue. The CLI writes its own `~` version,
+selects the newest stable, non-deprecated SDK and UI releases in its declared
+compatibility ranges, and writes the same exact SDK version to npm and the backend.
+UI stays in the supported minor line. Registry errors or unavailable compatible
+releases print one hint and use the shipped defaults; there is no short custom timeout.
+Templates are still read from the installed package, never downloaded by `init`.
+The CLI compatibility ranges live in `src/init-versions.ts`.
+
+Templates do not ship npm lockfiles. Run `pnpm install` in the project root and
+frontend (and the Node backend) to create them, then commit them and use
+`pnpm install --frozen-lockfile` for subsequent installs. For Go, run
+`(cd backend && go mod tidy)` before check/build. When init selects a newer Rust
+SDK tag, run `(cd backend && cargo generate-lockfile)` before check/build;
+the old release's Cargo.lock is removed rather than relabeling its commit.
+`SYNOPKGLAND_SDK_DIR` still overrides the generated SDK dependency for local development.
+
 Read the SDK's published peer dependency range with
 `npm view @synopackageland/sdk peerDependencies` rather than overriding it. Tests use jsdom 30 for UI floating-layer styles.
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.42.1",
-  "description": "Project templates for synopkgland init: native-go, native-python, native-node and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
+  "version": "0.43.0",
+  "description": "Project templates for synopkgland init: native-go, native-python, native-node and native-rust (plain or Vue, with layers in templates/overlays), binary and compose.",
   "license": "MIT",
   "repository": {
     "type": "git",

package/templates/_shared/AGENTS.md

@@ -17,12 +17,18 @@ Only a confirmed refusal (signed out, expired session, not an administrator)
 shows the sign-in page or a `@synopackageland/ui` Dialog; loading text inside a
 section is fine.
 
+Do not add a header Refresh. Re-read data when the window is shown again
+(`ctx.reopen`) and when a page is shown; a failed read offers Retry beside its
+error. `AppShell`'s `#actions` is for real page actions (such as Add); with
+nothing in it the shell draws no bar. A section that needs a manual re-read
+gets its own action in that section.
+
 Everything below holds for every native backend language; the backend
 sections at the end name each language's files, types and test commands.
 
 From the project root, run `synopkgland check --json`,
 `synopkgland build --json`, then `synopkgland inspect <spk> --json` on the emitted SPK.
-For Vue, first run `pnpm install --frozen-lockfile --prod=false` and `pnpm run build` in frontend. Run its tests only if the user chose tests.
+For Vue, first run `pnpm install --prod=false` (creates its lockfile) and `pnpm run build` in frontend. Run its tests only if the user chose tests.
 Do not connect to or change a NAS without explicit task authorization.
 
 ## Optional testing
@@ -402,7 +408,7 @@ their capabilities with `synopkgland init --with`.
   `new AppError(code, message)`, `AppError.badRequest(message)`. Call services
   through `service(ctx, op, params)` (`service.ts`), which passes the runtime's
   refusals on; a bare `ctx.runtime` refusal would reach the browser as `internal`.
-- Test with `(cd backend && pnpm install --frozen-lockfile --prod=false && pnpm test && pnpm run typecheck)`; `test/support.ts`'s
+- Test with `(cd backend && pnpm install --prod=false && pnpm test && pnpm run typecheck)`; `test/support.ts`'s
   `call` plays the runtime.
 
 ## Rust backend

package/templates/_shared/package.json

@@ -11,7 +11,7 @@
     "e2e:ai": "node --env-file-if-exists=.env node_modules/@synopackageland/cli/dist/e2e/dsm.js tunnel -- e2e run --config e2e.ai.config.ts tests/e2e/action.ai.e2e.ts"
   },
   "devDependencies": {
-    "@synopackageland/cli": "~0.52.11",
+    "@synopackageland/cli": "~0.53.18",
     "@e2e-dev/web": "^0.14.0",
     "e2e": "^0.19.0"
   },

package/templates/_shared/pnpm-workspace.yaml

@@ -1,2 +1,3 @@
 allowBuilds:
   esbuild: true
+  koffi: true

package/templates/compose/dsm-package.yaml

@@ -23,7 +23,7 @@ compose:
   web: {service: web, port: 8080, health: {path: /, status: 200}}
   network: {egress: isolated}
 identity_gateway:
-  sdk: 0.53.16
+  sdk: 0.53.42
   mode: none
   listen: {http: 28000}
 # Web Apps default to new-page through the shared app-launch resolver.

package/templates/native-go/README.md

@@ -205,7 +205,10 @@ the new version; `synopkgland check` refuses mismatched versions.
 `ui/app.js` must register `window.DsmPackageApps[<package>].mount(root, ctx)`
 (the template shows how, using `document.currentScript.dataset.package`).
 `ctx.call(method, params)` is the only transport. `ctx.reopen(fn)` runs `fn`
-whenever DSM shows the window again and returns an idempotent unsubscribe function. Scope your CSS under your own root class:
+whenever DSM shows the window again and returns an idempotent unsubscribe function.
+The template re-reads its status there instead of showing a Refresh button; a
+failed read shows Retry beside its error. Keep header buttons for real page
+actions, such as Add. Scope your CSS under your own root class:
 every DSM app shares one page.
 
 Plain JS and Vue receive the same `ctx.host` adapter. `ctx.host.platform()`
@@ -495,3 +498,6 @@ Keep `synology/backend/`, `synology/i18n/messages/`, `synology/operations.json`
 the local/ctl tests: the entry gate still needs the backend and message catalogs.
 Read `synopkgland skill show upstream-fork` and
 `synopkgland skill show orchestrator` for the wrapper workflow.
+
+Before the first check/build, install the project dependencies with `pnpm install`
+and run `(cd backend && go mod tidy)` to populate checksums for the selected SDK.

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.53.16 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.53.42 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/go.mod

@@ -2,6 +2,6 @@ module __PACKAGE__
 
 go 1.26.10
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.53.16
+require github.com/synopackageland/syno-pkg-land-sdk v0.53.42
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.53.16 h1:i4FCBCpOr7ma31zFathuS2QLpCWa13y3v9rWvlg+AfE=
-github.com/synopackageland/syno-pkg-land-sdk v0.53.16/go.mod h1:JMfenGwAhlVgGUtoSQFA9XRbtN8Zcs+0xdrOaaam+Fg=
+github.com/synopackageland/syno-pkg-land-sdk v0.53.42 h1:qhbKCjU6ME8OpuMgpz03LHs3KGL66xSwDRvePGWlyEU=
+github.com/synopackageland/syno-pkg-land-sdk v0.53.42/go.mod h1:mmtgnyafLwci1588LJFpRIsWflHwjaHJoDm7grXFh8A=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go/i18n/glossary.json

@@ -163,9 +163,7 @@
         "es": "Actualizar",
         "it": "Aggiorna"
       },
-      "keys": [
-        "app.refresh"
-      ]
+      "keys": []
     },
     {
       "id": "retry",
@@ -181,7 +179,9 @@
         "es": "Volver a intentar",
         "it": "Riprova"
       },
-      "keys": []
+      "keys": [
+        "app.retry"
+      ]
     },
     {
       "id": "back",

package/templates/native-go/i18n/messages/de.json

@@ -1,5 +1,5 @@
 {
-  "app.refresh": "Aktualisieren",
+  "app.retry": "Neuer Versuch",
   "app.title": "Es funktioniert",
   "error.admin_required": "Dieses Benutzerkonto verfügt nicht über die erforderlichen Berechtigungen, um diese Aktion durchzuführen",
   "error.app_privilege_denied": "Dieses Benutzerkonto verfügt nicht über die erforderlichen Berechtigungen, um diese Aktion durchzuführen",

package/templates/native-go/i18n/messages/en.json

@@ -1,5 +1,5 @@
 {
-  "app.refresh": "Refresh",
+  "app.retry": "Retry",
   "app.title": "It works",
   "error.admin_required": "Sorry, this user account has not been assigned proper privileges to perform this action",
   "error.app_privilege_denied": "Sorry, this user account has not been assigned proper privileges to perform this action",

package/templates/native-go/i18n/messages/es.json

@@ -1,5 +1,5 @@
 {
-  "app.refresh": "Actualizar",
+  "app.retry": "Volver a intentar",
   "app.title": "Funciona",
   "error.admin_required": "A esta cuenta de usuario no se le han asignado los privilegios adecuados para realizar esta acción",
   "error.app_privilege_denied": "A esta cuenta de usuario no se le han asignado los privilegios adecuados para realizar esta acción",

package/templates/native-go/i18n/messages/fr.json

@@ -1,5 +1,5 @@
 {
-  "app.refresh": "Actualiser",
+  "app.retry": "Réessayer",
   "app.title": "Ça fonctionne",
   "error.admin_required": "Désolé, ce compte utilisateur ne dispose pas des droits nécessaires pour accomplir cette action",
   "error.app_privilege_denied": "Désolé, ce compte utilisateur ne dispose pas des droits nécessaires pour accomplir cette action",

package/templates/native-go/i18n/messages/it.json

@@ -1,5 +1,5 @@
 {
-  "app.refresh": "Aggiorna",
+  "app.retry": "Riprova",
   "app.title": "Funziona",
   "error.admin_required": "Siamo spiacenti, a questo account utente non sono stati assegnati privilegi appropriati per eseguire questa azione",
   "error.app_privilege_denied": "Siamo spiacenti, a questo account utente non sono stati assegnati privilegi appropriati per eseguire questa azione",

package/templates/native-go/i18n/messages/ja.json

@@ -1,5 +1,5 @@
 {
-  "app.refresh": "最新の情報に更新",
+  "app.retry": "再試行",
   "app.title": "動作しています",
   "error.admin_required": "申し訳ありませんが、このユーザー アカウントにはこの操作を行うための権限が与えられていません",
   "error.app_privilege_denied": "申し訳ありませんが、このユーザー アカウントにはこの操作を行うための権限が与えられていません",

package/templates/native-go/i18n/messages/ko.json

@@ -1,5 +1,5 @@
 {
-  "app.refresh": "새로 고침",
+  "app.retry": "재시도",
   "app.title": "정상적으로 작동합니다",
   "error.admin_required": "죄송합니다. 이 사용자 계정에는 이 작업을 수행하기에 적절한 권한이 할당되지 않았습니다",
   "error.app_privilege_denied": "죄송합니다. 이 사용자 계정에는 이 작업을 수행하기에 적절한 권한이 할당되지 않았습니다",

package/templates/native-go/i18n/messages/zh-CN.json

@@ -1,5 +1,5 @@
 {
-  "app.refresh": "刷新",
+  "app.retry": "重试",
   "app.title": "运行成功",
   "error.admin_required": "抱歉，此用户帐户权限不足，无法执行此操作",
   "error.app_privilege_denied": "抱歉，此用户帐户权限不足，无法执行此操作",

package/templates/native-go/i18n/messages/zh-TW.json

@@ -1,5 +1,5 @@
 {
-  "app.refresh": "重新整理",
+  "app.retry": "重試",
   "app.title": "成功運作了",
   "error.admin_required": "抱歉，此使用者帳號權限不足，無法執行此動作",
   "error.app_privilege_denied": "抱歉，此使用者帳號權限不足，無法執行此動作",

package/templates/native-go/ui/app.css

@@ -34,7 +34,6 @@
   background: var(--ui-surface);
 }
 .dsmapp *, .dsmapp *::before, .dsmapp *::after { box-sizing: inherit; }
-.dsmapp-header { display: flex; align-items: center; justify-content: space-between; gap: var(--ui-space-3); }
 .dsmapp h1 { margin: 0 0 var(--ui-space-1); font-size: var(--ui-font-size-title); font-weight: 600; }
 .dsmapp-secondary {
   height: var(--ui-control-md); padding: 0 var(--ui-space-3); border: 1px solid var(--ui-border); border-radius: var(--ui-radius-sm);
@@ -55,6 +54,8 @@
 .dsmapp-form button:disabled { opacity: 0.6; cursor: default; }
 .dsmapp-note { margin: 0; color: var(--ui-text-secondary); font-size: var(--ui-font-size-sm); }
 .dsmapp-note[hidden] { display: none; }
+.dsmapp-message-row { display: flex; flex-wrap: wrap; align-items: center; gap: var(--ui-space-3); }
+.dsmapp-message-row .dsmapp-message { flex: 1 1 auto; }
 .dsmapp-message { min-height: var(--ui-line-height); color: var(--ui-danger-text); }
 .dsmapp-facts { display: grid; grid-template-columns: fit-content(40%) minmax(0, 1fr); gap: var(--ui-space-1) var(--ui-space-4); margin: 0; }
 .dsmapp-facts dt { color: var(--ui-text-secondary); }

package/templates/native-go/ui/app.js

@@ -36,14 +36,16 @@
   function mount(root, ctx) {
     var t = ctx.t;
     var status = el("dl", { class: "dsmapp-facts" });
-    var refreshButton = el("button", { type: "button", class: "dsmapp-secondary", text: t("app.refresh") });
     var message = el("p", { class: "dsmapp-message", role: "status" });
+    // Shown only after a failed read; the App re-reads on reopen, so no header Refresh.
+    var retryButton = el("button", { type: "button", class: "dsmapp-secondary", text: t("app.retry") });
+    retryButton.hidden = true;
     var portal = ctx.portal ? el("section", { class: "dsmapp-portal" }) : null;
 
     root.classList.add("dsmapp");
     root.replaceChildren(
-      el("div", { class: "dsmapp-header" }, [el("h1", { text: t("app.title") }), refreshButton]),
-      message,
+      el("h1", { text: t("app.title") }),
+      el("div", { class: "dsmapp-message-row" }, [message, retryButton]),
       el("h2", { text: t("status.heading") }),
       status
     );
@@ -54,10 +56,12 @@
       var code = (error && error.code) || "internal";
       var text = t("error." + code);
       message.textContent = text === "error." + code ? (error && error.message) || t("error.internal") : text;
+      retryButton.hidden = false;
     }
 
     function refresh() {
       message.textContent = "";
+      retryButton.hidden = true;
       ctx.call("app.status").then(function (data) {
         status.replaceChildren();
         [[t("status.user"), data.admin ? t("status.userAdmin", { user: data.user }) : data.user],
@@ -73,7 +77,7 @@
       }).catch(showError);
     }
 
-    refreshButton.addEventListener("click", refresh);
+    retryButton.addEventListener("click", refresh);
 
     ctx.reopen(refresh);
     refresh();

package/templates/native-node/README.md

@@ -51,7 +51,7 @@ run `synopkgland ctl generate`.
 Needs Node.js 20 or later with `synopkgland` installed. The SPK depends on DSM's **Node.js v20** package (INFO `install_dep_packages`).
 
 ```bash
-(cd backend && pnpm install --frozen-lockfile --prod=false && pnpm test && pnpm run build)   # method tests, then app/*.js
+(cd backend && pnpm install --prod=false && pnpm test && pnpm run build)   # method tests, then app/*.js
 synopkgland ctl generate
 synopkgland check
 synopkgland build           # → dist/__PACKAGE__-0.1.0-0001-{x86_64,aarch64}.spk

package/templates/native-node/dsm-package.yaml

@@ -49,7 +49,7 @@ backend:
   runtime: node
   dir: backend/app
   entry: main.js
-  sdk: 0.53.16
+  sdk: 0.53.42
   node: { package: Node.js_v22 }
 
 ui:

package/templates/native-python/dsm-package.yaml

@@ -47,7 +47,7 @@ backend:
   runtime: python
   dir: backend/app
   entry: main.py
-  sdk: 0.53.16
+  sdk: 0.53.42
 
 ui:
   # Non-UI-SDK frontends open a full page; Portal is a separate opt-in.

package/templates/native-rust/README.md

@@ -225,3 +225,6 @@ Draft writes require a non-mutating preview and explicit human confirmation.
 Long operations use the existing job flow; tools own polling and pagination.
 
 Use a matching SDK/CLI/templates release containing the registry support.
+
+After init selects a new SDK tag, run `(cd backend && cargo generate-lockfile)`
+before check/build, then commit the generated Cargo.lock.

package/templates/native-rust/backend/Cargo.lock

@@ -14,15 +14,15 @@ dependencies = [
 
 [[package]]
 name = "itoa"
-version = "1.0.18"
+version = "1.0.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+checksum = "3bd1574e617a9a6c1f8f8181bd7e841e1f20e4277607ef28945765188d6284d4"
 
 [[package]]
 name = "libc"
-version = "0.2.190"
+version = "0.2.191"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ce5d3ddc6d3fa000eb1536d85e147bfe31aacaba692ed6a876f95cb7c855be78"
+checksum = "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a"
 
 [[package]]
 name = "memchr"
@@ -93,9 +93,9 @@ dependencies = [
 
 [[package]]
 name = "syn"
-version = "3.0.9"
+version = "3.0.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b"
+checksum = "4ae9ccbea3a7b0b09443036490c8f34a8b1b760fd345e5c0dae0aac718faea79"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -104,8 +104,8 @@ dependencies = [
 
 [[package]]
 name = "syno-pkg-land-app"
-version = "0.53.16"
-source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.53.16#6751951c140fb032e5f050dc53f5cc58fcd0bf60"
+version = "0.53.42"
+source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.53.42#02d5b526c852b3bd30e4dc9031414c9907fadb57"
 dependencies = [
  "libc",
  "serde",

package/templates/native-rust/backend/Cargo.toml

@@ -9,7 +9,7 @@ libc = "0.2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The SDK version is the tag; `synopkgland check` reads it from Cargo.lock.
-syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.53.16" }
+syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.53.42" }
 
 [profile.release]
 # A handler panic becomes an "internal" reply; abort would end the App without one.

package/templates/{native-go-delegate → overlays/native-go-delegate}/frontend/test/capability-panels.test.ts

@@ -102,7 +102,8 @@ test('the app mount forwards ctx.executor to administrator setup only',async()=>
   }
  }
 })
-test('the header Refresh reloads the save destinations',async()=>{
+// No header Refresh: reopening the App reloads the save destinations.
+test('reopening the App reloads the save destinations',async()=>{
  const call=vi.fn(async(method:string)=>{
   if(method==='app.status')return {package:'DelegateApp',version:'1',user:'alice',admin:false}
   if(method==='delegate.status')return {state:'ready',disabled:false,lifetime:'until-revoked',destinations:['save']}
@@ -112,11 +113,13 @@ test('the header Refresh reloads the save destinations',async()=>{
    throw {code:'unknown_method'}
  })
  const root=document.createElement('div');document.body.append(root)
- const app=mount(root,dsmWindow({call}))
+ const reopen:Array<()=>void>=[]
+ const app=mount(root,dsmWindow({call,reopen(fn:()=>void){reopen.push(fn);return ()=>{}}}))
  cleanup.push(()=>{app.unmount();root.remove()});await settle()
  const reads=()=>call.mock.calls.filter(([method])=>method==='delegate.destination').length
  const before=reads();expect(before).toBeGreaterThan(0)
- button(root,'Refresh').click();await settle()
+ expect([...root.querySelectorAll('button')].some(n=>n.textContent?.trim()==='Refresh')).toBe(false)
+ reopen.forEach(fn=>fn());await settle()
  expect(reads()).toBeGreaterThan(before)
 })
 test('the panels show a skeleton while the delegate status loads',async()=>{

package/templates/overlays/native-go-jobs/frontend/test/background-shell.test.ts

@@ -0,0 +1,37 @@
+// @vitest-environment jsdom
+import {expect,test,vi} from 'vitest'
+import {nextTick} from 'vue'
+import {mount} from '../src/main'
+import {dsmWindow} from './context'
+async function settle(){for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}}
+test('a jobs project opens its shell without starting a job',async()=>{
+ const call=vi.fn(async(method:string)=>{
+  if(method==='app.status')return {package:'Jobs',version:'1',user:'alice',admin:false}
+  throw {code:'unknown_method'}
+ })
+ const root=document.createElement('div');document.body.append(root)
+ const app=mount(root,dsmWindow({call}))
+ try{
+  await settle()
+  expect(root.querySelector('[data-app-status]')).not.toBeNull()
+  expect(call.mock.calls.some(([method])=>method.startsWith('bg.'))).toBe(false)
+ }finally{app.unmount();root.remove()}
+})
+// No header Refresh: showing the status page again reads its status again.
+test('returning to the status page reads its status again',async()=>{
+ const call=vi.fn(async(method:string)=>{
+  if(method==='app.status')return {package:'Jobs',version:'1',user:'alice',admin:false}
+  throw {code:'unknown_method'}
+ })
+ const root=document.createElement('div');document.body.append(root)
+ const app=mount(root,dsmWindow({call}))
+ try{
+  await settle()
+  const reads=()=>call.mock.calls.filter(([method])=>method==='app.status').length
+  const item=(name:string)=>[...root.querySelectorAll<HTMLElement>('button')].find(n=>n.textContent?.trim()===name)!
+  item('Background jobs').click();await settle()
+  const before=reads()
+  item('Status').click();await settle()
+  expect(reads()).toBeGreaterThan(before)
+ }finally{app.unmount();root.remove()}
+})

package/templates/{native-go-vue → overlays/native-go-vue}/README.md

@@ -37,13 +37,12 @@ See the [fork guide](https://github.com/synopackageland/syno-pkg-land-templates#
 
 ```sh
 cd frontend
-pnpm install --frozen-lockfile --prod=false
+pnpm install --prod=false
 pnpm test
 pnpm run build
 ```
 
-The base app reads package status and edits the package greeting through
-`ctx.call`. Each window has its own Vue mount, request state and host
+The base app reads package status through `ctx.call`. Each window has its own Vue mount, request state and host
 subscriptions; unmount disposes subscriptions and ignores late responses.
 
 The build emits `app.module.js`, `app.css` and any lazy chunks. The entry
@@ -94,7 +93,7 @@ SDK's light default in place.
 
 Use the installed `@synopackageland/ui` and its declared compatible patch range.
 `App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
-`pages` from `shellPages`, the page's buttons in `#actions` and the pages in its
+`pages` from `shellPages`, real page actions in `#actions` and the pages in its
 default slot. On desktop, the sidebar names the page: the shell shows no page title, puts
 `#actions` in a bar above the page and scrolls only the content; a settings
 page (`SectionTabs fill` or `SettingsPage`) keeps its tabs and footer in place
@@ -109,6 +108,14 @@ device-width viewport. Its full-page sidebar names the App with
 shows the signed-in DSM account and its role from `ctx.user`. See the ui's
 `docs/adaptive-layout.md`.
 
+The template puts no Refresh in `#actions`, and with nothing there `AppShell`
+draws no bar above the page. Data stays fresh without one: `ctx.reopen` reads
+the status, the panels and the portal again when the window is shown again,
+and showing the status page again reads it again. A failed read offers Retry
+beside its error. Sign out appears in `#actions` only when standalone login is
+on. Keep `#actions` for real page actions, such as Add; a section that needs a
+manual re-read gets its own action in that section, not a header Refresh.
+
 The frontend SDK and UI use patch ranges; the lockfile records the installed
 versions. Update the lockfile deliberately when taking a newer patch.
 
@@ -120,8 +127,8 @@ keeps that branding, and the UI hides a bar with nothing in it. When using
 even with `phone-bar-title="none"`. Pages outside the tab bar and detail pages
 with Back keep their title bar. `header-actions` share one "…" menu; only an
 entry marked `primary: true`, or a sole entry with an icon, becomes a separate
-bar button. The template's `#actions` stays page actions; no title or empty-bar
-workaround is needed.
+bar button. The template's `#actions` holds only real page actions; no title or
+empty-bar workaround is needed.
 
 `AppShell`'s `app-root` wraps it in an app-local `AppRoot` (app modal scope, on
 a full page as well, bounded at `height: 100%`) with the UI locale from
@@ -143,3 +150,6 @@ For UI discovery, run `pnpm exec syno-pkg-land-ui catalog --json` and
 `pnpm exec syno-pkg-land-ui describe Button --json` from the installed frontend.
 Read its prompt and exported Vue docs/types before choosing component APIs.
 Use `syno-pkg-land-ui` directly in package scripts; keep AI guidance version-independent.
+
+Before the first check/build, install the project dependencies with `pnpm install`
+and run `(cd backend && go mod tidy)` to populate checksums for the selected SDK.

package/templates/{native-go-vue → overlays/native-go-vue}/frontend/DESIGN.md

@@ -30,8 +30,8 @@ Use `syno-pkg-land-ui` directly in package scripts; keep AI guidance version-ind
 ## Overview
 
 The template runs inside a DSM package window. `AppShell` provides status and
-optional background navigation. The base page shows package status and a greeting
-editor; the root overlay adds its existing fixed-operation authorization gate.
+optional background navigation. The base page shows package status; the root
+overlay adds its existing fixed-operation authorization gate.
 
 Use the installed `@synopackageland/ui` controls and `themes/dsm7-embedded.css`.
 The theme owns colors, typography, spacing and dialogs. Keep per-app modal scope,
@@ -39,7 +39,11 @@ a unique Vue ID prefix and vertical scrolling at the DSM minimum window size.
 In a DSM window, Dialogs may leave the window (`dialog-bounds="viewport"`) and a
 press on one brings the window to the front; below 600px they are bottom sheets.
 
-Refresh and save expose busy state and localized errors. Reopen refreshes status.
+There is no header Refresh: reopening the window, or showing the status page
+again, reads it again, and a failed read offers Retry beside its error. The
+shell's `#actions` holds only real page actions (Sign out with standalone
+login); empty, the shell draws no bar. Reads expose busy state and localized
+errors.
 Each mount owns its state; unmount unsubscribes from host events and ignores late
 responses. Backend route policies decide access.
 

package/templates/{native-go-vue → overlays/native-go-vue}/frontend/package.json

@@ -8,8 +8,8 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "~0.53.16",
-    "@synopackageland/ui": "~0.25.2",
+    "@synopackageland/sdk": "~0.53.42",
+    "@synopackageland/ui": "~0.25.17",
     "vue": "3.5.43"
   },
   "devDependencies": {