@synopackageland/templates 0.9.1 → 0.9.3

package/README.md

@@ -21,7 +21,7 @@ An overlay may replace `internal/app/*_none.go` (the CLI deletes the matching
 The placeholders `__PACKAGE__` (also the Go module path), `__DISPLAY_NAME__` and
 `__BACKGROUND_ENABLED__` are substituted by `init`.
 
-`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.9.1`; that line is
+`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.9.4`; that line is
 the single source of the SDK version and `frontend/package.json` pins
 `@synopackageland/sdk` to the same version.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Project templates for synopkgland init: native-go (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
   "license": "MIT",
   "repository": {"type": "git", "url": "git+https://github.com/synopackageland/syno-pkg-land-templates.git"},

package/templates/_shared/AGENTS.md

@@ -11,6 +11,12 @@ For UI discovery, run `npx --no syno-pkg-land-ui catalog --json` and
 Read its prompt and exported Vue docs/types before choosing component APIs.
 Use `syno-pkg-land-ui` directly in npm scripts; keep AI guidance version-independent.
 
+Open the App at once: render its shell immediately and run session, permission
+and status checks in the background, never a full-window "Checking…" placeholder.
+Only a confirmed refusal (signed out, expired session, not an administrator)
+shows the sign-in page or a `@synopackageland/ui` Dialog; loading text inside a
+section is fine.
+
 From the project root, run `synopkgland check --json`,
 `synopkgland build --json`, then `synopkgland inspect <spk> --json` on the emitted SPK.
 For Vue, first run `npm ci`, `npm test` and `npm run build` in frontend.

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.9.1 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.9.4 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/go.mod

@@ -4,6 +4,6 @@ go 1.25.0
 
 toolchain go1.26.9
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.9.1
+require github.com/synopackageland/syno-pkg-land-sdk v0.9.4
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.9.1 h1:Mni+769M/fldZTlv0IOZKeaK3xGu6hTSkTeWIALPqBg=
-github.com/synopackageland/syno-pkg-land-sdk v0.9.1/go.mod h1:JNoqISvR4biA9IuLi0CFe4c272tsKzCN9Nyj71nrXsQ=
+github.com/synopackageland/syno-pkg-land-sdk v0.9.4 h1:ZfM5aZ/zjbIqpRda4fdeMYnibLh6UjGtxJudFlk/Dno=
+github.com/synopackageland/syno-pkg-land-sdk v0.9.4/go.mod h1:JNoqISvR4biA9IuLi0CFe4c272tsKzCN9Nyj71nrXsQ=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go-delegate/frontend/test/capability-panels.test.ts

@@ -44,7 +44,8 @@ test('the default surface binds the real routes and the session-only picker',asy
  })
  const root=render({call,locale:'en'});await settle()
  button(root,'Choose save destination (save)').click();await settle()
- const select=[...root.querySelectorAll('button')].find(n=>n.getAttribute('aria-label')==='Select home')!;expect(select).toBeTruthy();select.click();await settle()
+ // The SDK picker selects a folder with a row click.
+ const row=root.querySelector<HTMLElement>('tr[data-row-key="/home"]')!;expect(row).toBeTruthy();row.dispatchEvent(new MouseEvent('click',{bubbles:true}));await settle()
  button(root,'Confirm selection').click();await settle()
  expect(call).toHaveBeenCalledWith('delegate.select_destination',{key:'save',path:'/home'})
 })

package/templates/native-go-vue/frontend/DESIGN.md

@@ -56,6 +56,7 @@ Evidence: `.herdr-project/syno-package-land-sdk-t-0129/library/ui-desktop.png` a
 
 - Do use existing public UI components, embedded theme tokens and state/recovery copy.
 - Do retain permission gating, readable loading/empty/error states and per-instance cleanup.
+- Do open the App at once: render `AppShell` immediately and run session, permission and status checks in the background, never a full-window "Checking…" placeholder. Only a confirmed refusal (signed out, expired session, not an administrator) shows the sign-in page or a library `Dialog`; loading text inside a section is fine.
 - Do use the library's `Select`, `Checkbox`, `Input`, `Textarea`, `Form`, `FormItem`, `FilePicker` (`variant="compact"`, in the app locale) and `Link` for controls; there is no native `<input>` or `<a>`. Leave `Form` on its automatic direction (labels stack below 520px of container width) and let a `FormItem` bind its control, with no `direction="vertical"`, `role="group"` or `field.controlId`.
 - Do not infer authority from frontend observations or scheduler history.
 - Don't introduce a separate palette, component system or modal workaround around the library contract.

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,8 +7,8 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.9.1",
-        "@synopackageland/ui": "0.9.0",
+        "@synopackageland/sdk": "0.9.4",
+        "@synopackageland/ui": "0.9.1",
         "vue": "3.5.43"
       },
       "devDependencies": {
@@ -1148,13 +1148,13 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.9.1",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.9.1.tgz",
-      "integrity": "sha512-V7V2Ad7KTcQGo3fgMl2PofqhwDvHzCxYJG4q3DqVRuJgNNhxeflZUSYTWHtO/xTB9OZ5KPGoN8hqHIrNDyzAXg==",
+      "version": "0.9.4",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.9.4.tgz",
+      "integrity": "sha512-GvPDd8hoU5mzkXD4s/RShY1dBiu/zRoPtd0zFb/yjciZxlzdgopn4VnOjhq7xScbrmK9RuVZRbXLGT16NdobUg==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",
-        "@synopackageland/ui": "^0.9.0",
+        "@synopackageland/ui": "^0.9.1",
         "vue": "^3.5.0"
       },
       "peerDependenciesMeta": {
@@ -1167,9 +1167,9 @@
       }
     },
     "node_modules/@synopackageland/ui": {
-      "version": "0.9.0",
-      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.9.0.tgz",
-      "integrity": "sha512-0OnItM4pJ8zYHafpWkAdbVb4x8alqkz9FKwOR1Y3DWdelIxR6DTiTrCOLmqat1GwjtuyqLuebhoPX5rejZjWUA==",
+      "version": "0.9.1",
+      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.9.1.tgz",
+      "integrity": "sha512-L2k0eeN9+TLPMh5+kMbq6pV8n0qqUq6Ynme/KSp3mCqDb1MXBdr8MbAGtxdbNYMj9QepbA9mccgygwI9fFoG5A==",
       "license": "MIT",
       "dependencies": {
         "@internationalized/date": "3.12.4",
@@ -2538,9 +2538,9 @@
       "license": "MIT"
     },
     "node_modules/zod": {
-      "version": "4.6.5",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.5.tgz",
-      "integrity": "sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==",
+      "version": "4.6.6",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.6.tgz",
+      "integrity": "sha512-4UmzQUF5fxvfcYHlbjBmejU+w+hbDnWFx4aS8kBx7nPBHcO2SqPbpAG8snbdg+Xse4pRefR98hgjFgIMCI/UhA==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"

package/templates/native-go-vue/frontend/package.json

@@ -8,8 +8,8 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.9.1",
-    "@synopackageland/ui": "0.9.0",
+    "@synopackageland/sdk": "0.9.4",
+    "@synopackageland/ui": "0.9.1",
     "vue": "3.5.43"
   },
   "devDependencies": {

package/templates/native-go-vue/frontend/src/App.vue

@@ -25,14 +25,21 @@ function message(e: unknown) {
  const errors = copy.value.errors as Record<string, string>
  return (code !== 'request_failed' && errors[code]) || errors.request_failed!.replace('{code}', code)
 }
+let again = false
 async function refresh() {
- if(disposed || busy.value || (login.enabled.value && !login.subject.value)) return
+ if(disposed || (login.enabled.value && !login.subject.value)) return
+ if(busy.value) {again = true; return}
+ // Sent before the session check settles: a session failure must not sign the user
+ // out, and the confirmed session refreshes again.
+ const early = !login.ready.value
+ const call: typeof login.call = early ? (method, params) => props.ctx.call(method, params) : login.call
  busy.value = true; error.value = ''
  try {
-  const a = await login.call<AppStatus>('app.status')
+  const a = await call<AppStatus>('app.status')
   if(!disposed) app.value = a
-  if(a.admin) {const greeting = await login.call<{text:string}>('greeting.get'); if(!disposed) text.value = greeting.text}
- } catch(e) {if(!disposed) error.value = message(e)} finally {if(!disposed) busy.value=false}
+  if(a.admin) {const greeting = await call<{text:string}>('greeting.get'); if(!disposed) text.value = greeting.text}
+ } catch(e) {if(!disposed && !(early && login.enabled.value)) error.value = message(e)}
+ finally {if(!disposed) {busy.value=false; if(again) {again=false; void refresh()}}}
 }
 async function save() {
  if(disposed || busy.value) return
@@ -47,10 +54,11 @@ watch(login.subject, (subject, previous) => {
 async function signOut() {
  try {await login.logout()} catch(e) {if(!disposed) error.value=message(e)}
 }
-onMounted(async()=>{
+onMounted(()=>{
  unsubscribe = props.ctx.reopen(()=>{if(!disposed) void refresh()})
- await login.start()
- if((!login.enabled.value || login.subject.value)) await refresh()
+ // The session check runs in the background; only a confirmed sign-in need replaces the App.
+ void login.start()
+ void refresh()
 })
 onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose();text.value=''})
 </script>
@@ -58,8 +66,7 @@ onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose();text.value=''})
 <template>
  <AppRoot modal-scope="app" style="height: 100%">
   <ConfigProvider :locale="uiLocale(ctx.locale)">
-  <p v-if="!login.ready.value" role="status">{{ copy.checking }}</p>
-  <LoginPage v-else-if="login.enabled.value && !login.subject.value" :session="login" :locale="ctx.locale" />
+  <LoginPage v-if="login.ready.value && login.enabled.value && !login.subject.value" :session="login" :locale="ctx.locale" />
   <AppShell v-else v-model="page" :locale="ctx.locale" :pages="pages" :description="subtitle">
    <template #actions><Button variant="secondary" :disabled="busy" @click="refresh">{{ copy.refresh }}</Button><Button v-if="login.enabled.value" variant="secondary" :disabled="busy" @click="signOut">{{ copy.signOut }}</Button></template>
    <div class="integration-app" :aria-busy="busy" :aria-label="copy.settings">

package/templates/native-go-vue/frontend/src/i18n/de.json

@@ -1,5 +1,4 @@
 {
-  "checking": "Sitzung wird geprüft…",
   "refresh": "Aktualisieren",
   "signOut": "Abmelden",
   "settings": "Paketeinstellungen",

package/templates/native-go-vue/frontend/src/i18n/en.json

@@ -1,5 +1,4 @@
 {
-  "checking": "Checking session…",
   "refresh": "Refresh",
   "signOut": "Sign out",
   "settings": "Package settings",

package/templates/native-go-vue/frontend/src/i18n/es.json

@@ -1,5 +1,4 @@
 {
-  "checking": "Comprobando la sesión…",
   "refresh": "Actualizar",
   "signOut": "Cerrar sesión",
   "settings": "Configuración del paquete",

package/templates/native-go-vue/frontend/src/i18n/fr.json

@@ -1,5 +1,4 @@
 {
-  "checking": "Vérification de la session…",
   "refresh": "Actualiser",
   "signOut": "Se déconnecter",
   "settings": "Paramètres du paquet",

package/templates/native-go-vue/frontend/src/i18n/it.json

@@ -1,5 +1,4 @@
 {
-  "checking": "Verifica della sessione…",
   "refresh": "Aggiorna",
   "signOut": "Disconnetti",
   "settings": "Impostazioni del pacchetto",

package/templates/native-go-vue/frontend/src/i18n/ja.json

@@ -1,5 +1,4 @@
 {
-  "checking": "セッションを確認しています…",
   "refresh": "最新の情報に更新",
   "signOut": "サインアウト",
   "settings": "パッケージ設定",

package/templates/native-go-vue/frontend/src/i18n/ko.json

@@ -1,5 +1,4 @@
 {
-  "checking": "세션 확인 중…",
   "refresh": "새로 고침",
   "signOut": "로그아웃",
   "settings": "패키지 설정",

package/templates/native-go-vue/frontend/src/i18n/zh-CN.json

@@ -1,5 +1,4 @@
 {
-  "checking": "正在检查登录状态…",
   "refresh": "刷新",
   "signOut": "注销",
   "settings": "套件设置",

package/templates/native-go-vue/frontend/src/i18n/zh-TW.json

@@ -1,5 +1,4 @@
 {
-  "checking": "正在檢查登入狀態…",
   "refresh": "重新整理",
   "signOut": "登出",
   "settings": "套件設定",

package/templates/native-go-vue/frontend/test/apps.test.ts

@@ -55,3 +55,40 @@ test('a portal app shows the Application Portal section on the status page',asyn
   app.unmount()
  }finally{without.close();f.root.remove()}
 })
+test('the app renders and loads status while the session check is still pending',async()=>{
+ const call=vi.fn(async(method:string)=>{
+  if(method==='identity.status')return new Promise(()=>{})
+  if(method==='app.status')return {package:'Eager',version:'1',user:'admin',admin:true}
+  if(method==='greeting.get')return {text:'Hello Eager'}
+  throw {code:'unknown_method'}
+ })
+ const ctx={locale:'en',call,reopen(){return ()=>{}}} as unknown as Context
+ const root=document.createElement('div');document.body.append(root)
+ const app=mount(root,ctx)
+ try{
+  await settle()
+  expect(root.textContent).not.toContain('Checking session')
+  expect(root.textContent).toContain('Eager · admin · 1')
+ }finally{app.unmount();root.remove()}
+})
+test('a status request that raced the session check is retried once the session is confirmed',async()=>{
+ let session=false,rejectEarly:(e:unknown)=>void=()=>{}
+ const call=vi.fn(async(method:string)=>{
+  if(method==='identity.status')return {enabled:true}
+  if(method==='identity.session'){session=true;return {user:'admin',uid:'1024',expiresAt:new Date(Date.now()+3600000).toISOString()}}
+  if(method==='app.status'){
+   if(!session)return new Promise((_,reject)=>{rejectEarly=reject})
+   return {package:'Raced',version:'1',user:'admin',admin:true}
+  }
+  if(method==='greeting.get')return {text:'Hello Raced'}
+  throw {code:'unknown_method'}
+ })
+ const ctx={locale:'en',call,reopen(){return ()=>{}}} as unknown as Context
+ const root=document.createElement('div');document.body.append(root)
+ const app=mount(root,ctx)
+ try{
+  await settle();rejectEarly({code:'session_required'});await settle()
+  expect(root.textContent).not.toContain('Your DSM session expired')
+  expect(root.textContent).toContain('Raced · admin · 1')
+ }finally{app.unmount();root.remove()}
+})