@synopackageland/templates 0.9.4 → 0.9.5

package/README.md

@@ -21,7 +21,7 @@ An overlay may replace `internal/app/*_none.go` (the CLI deletes the matching
 The placeholders `__PACKAGE__` (also the Go module path), `__DISPLAY_NAME__` and
 `__BACKGROUND_ENABLED__` are substituted by `init`.
 
-`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.9.5`; that line is
+`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.9.6`; that line is
 the single source of the SDK version and `frontend/package.json` pins
 `@synopackageland/sdk` to the same version.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.9.4",
+  "version": "0.9.5",
   "description": "Project templates for synopkgland init: native-go (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
   "license": "MIT",
   "repository": {"type": "git", "url": "git+https://github.com/synopackageland/syno-pkg-land-templates.git"},

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.9.5 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.9.6 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/cmd/app/main.go

@@ -36,7 +36,8 @@ var (
 	identity = ""
 	// dsm-package.yaml entry: "admin-only" or "app-privilege"; empty keeps the route policy alone.
 	entry = ""
-	// "on" when dsm-package.yaml declares portal: serves portal.status.
+	// "on" when dsm-package.yaml declares portal: serves portal.status;
+	// "executor" below DSM 7.2, where the executor registers the entry.
 	portal = ""
 )
 
@@ -53,10 +54,11 @@ func main() {
 		DelegateDestinationsJSON: delegateDestinationsJSON,
 		DelegateLifetime:         delegateLifetime,
 		ExecutorDigest:           executorDigest, PolicyDigest: policyDigest,
-		PackageID: packageID,
-		Version:   version,
-		DataDir:   "/var/packages/" + packageID + "/var",
-		Portal:    portal == "on",
+		PackageID:      packageID,
+		Version:        version,
+		DataDir:        "/var/packages/" + packageID + "/var",
+		Portal:         portal != "",
+		PortalExecutor: portal == "executor",
 	}
 	if _, err := app.ParseDelegateConfig(cfg); err != nil {
 		log.Fatal(err)

package/templates/native-go/backend/go.mod

@@ -4,6 +4,6 @@ go 1.25.0
 
 toolchain go1.26.9
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.9.5
+require github.com/synopackageland/syno-pkg-land-sdk v0.9.6
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.9.5 h1:Kab3TVny+Zqqy7tzp5YqT1ZdcUhzVtH0uL3uu58wPXo=
-github.com/synopackageland/syno-pkg-land-sdk v0.9.5/go.mod h1:JNoqISvR4biA9IuLi0CFe4c272tsKzCN9Nyj71nrXsQ=
+github.com/synopackageland/syno-pkg-land-sdk v0.9.6 h1:jc5AmFKWKkpwxwG7RKiKgzI5WbA/DEm0FRfDbQwWXnQ=
+github.com/synopackageland/syno-pkg-land-sdk v0.9.6/go.mod h1:hlsvaVuH2wsAoR8jzI1Rg/NeejQSFpAaN6zpIWsVbjI=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go/backend/internal/app/portal.go

@@ -3,28 +3,73 @@ package app
 import (
 	"context"
 	"encoding/json"
+	"errors"
+	"net/http"
 
 	"github.com/synopackageland/syno-pkg-land-sdk/api"
+	"github.com/synopackageland/syno-pkg-land-sdk/delegate"
 	"github.com/synopackageland/syno-pkg-land-sdk/portal"
 )
 
 // portalRoutes serves portal.status when dsm-package.yaml declares `portal`.
 // An administrator sets the alias with DSM's own AppPortal API from the UI;
-// the package only reads DSM's saved setting.
+// the package only reads DSM's saved setting. Below DSM 7.2 the executor
+// registers the App's entry (PortalExecutor): portal.status then reports it,
+// and portal.register and portal.unregister change it.
 func (cfg Config) portalRoutes() []api.Route {
 	if !cfg.Portal {
 		return nil
 	}
-	return []api.Route{api.Handle("portal.status", cfg.portalStatus)}
+	routes := []api.Route{api.Handle("portal.status", cfg.portalStatus)}
+	if cfg.PortalExecutor {
+		routes = append(routes,
+			api.HandleRequest("portal.register", cfg.portalChange(portal.Register)),
+			api.HandleRequest("portal.unregister", cfg.portalChange(portal.Unregister)))
+	}
+	return routes
 }
 
-func (cfg Config) portalStatus(_ context.Context, _ api.Caller, params json.RawMessage) (any, error) {
+// portalExecutor is a variable so tests can replace the executor.
+var portalExecutor = func(cfg Config) portal.Executor { return delegate.Local(cfg.PackageID) }
+
+func (cfg Config) portalStatus(ctx context.Context, _ api.Caller, params json.RawMessage) (any, error) {
 	if err := decodeParams(params, &struct{}{}); err != nil {
 		return nil, err
 	}
+	return cfg.readPortal(ctx), nil
+}
+
+func (cfg Config) readPortal(ctx context.Context) portal.Status {
 	path := cfg.PortalConfig
 	if path == "" {
 		path = portal.ConfigPath(cfg.PackageID)
 	}
-	return portal.Read(path, "SYNO.SDS."+cfg.PackageID+".Instance"), nil
+	s := portal.Read(path, "SYNO.SDS."+cfg.PackageID+".Instance")
+	if !cfg.PortalExecutor {
+		return s
+	}
+	// An unreadable entry is not a known one: WithEntry reports unavailable.
+	entry, _ := portal.ExecutorEntry(ctx, portalExecutor(cfg))
+	return portal.WithEntry(s, entry)
+}
+
+// portalChange forwards the administrator's DSM session; the executor checks
+// it again and keeps its refusal codes, such as PORTAL_FAILED.
+func (cfg Config) portalChange(change func(context.Context, portal.Executor, map[string]string) (string, error)) api.RequestHandler {
+	return func(ctx context.Context, caller api.Caller, req *http.Request, params json.RawMessage) (any, error) {
+		if !caller.Admin() {
+			return nil, errors.New("admin_required")
+		}
+		if err := decodeParams(params, &struct{}{}); err != nil {
+			return nil, err
+		}
+		auth, err := api.DSMSession(req)
+		if err != nil {
+			return nil, err
+		}
+		if _, err := change(ctx, portalExecutor(cfg), auth); err != nil {
+			return nil, err
+		}
+		return cfg.readPortal(ctx), nil
+	}
 }

package/templates/native-go/backend/internal/app/portal_test.go

@@ -1,9 +1,17 @@
 package app
 
 import (
+	"context"
+	"encoding/json"
+	"errors"
 	"os"
 	"path/filepath"
 	"testing"
+
+	"github.com/synopackageland/syno-pkg-land-sdk/api"
+	"github.com/synopackageland/syno-pkg-land-sdk/portal"
+
+	appapi "__PACKAGE__/internal/api"
 )
 
 func portalConfig(t *testing.T, saved string) Config {
@@ -53,3 +61,123 @@ func TestPortalStatusExistsOnlyForAPortalBuild(t *testing.T) {
 		t.Fatalf("%q", code)
 	}
 }
+
+// fakeEntry is the executor as the portal routes see it.
+type fakeEntry struct {
+	entry string
+	err   error
+	calls []string
+	auth  map[string]string
+}
+
+func (f *fakeEntry) Call(_ context.Context, op string, auth map[string]string, _, result any) error {
+	f.calls = append(f.calls, op)
+	if f.err != nil {
+		return f.err
+	}
+	switch op {
+	case "portal.register":
+		f.entry, f.auth = portal.EntryRegistered, auth
+	case "portal.unregister":
+		f.entry, f.auth = portal.EntryUnregistered, auth
+	}
+	key := "entry"
+	if op == "status" {
+		key = "portal"
+	}
+	b, _ := json.Marshal(map[string]string{key: f.entry})
+	return json.Unmarshal(b, result)
+}
+
+func executorPortalConfig(t *testing.T, saved string, executor *fakeEntry) Config {
+	cfg := portalConfig(t, saved)
+	cfg.PortalExecutor = true
+	previous := portalExecutor
+	portalExecutor = func(Config) portal.Executor { return executor }
+	t.Cleanup(func() { portalExecutor = previous })
+	return cfg
+}
+
+func sessionCall(t *testing.T, cfg Config, method string) (string, map[string]any) {
+	t.Helper()
+	permissions, err := appapi.Permissions()
+	if err != nil {
+		t.Fatal(err)
+	}
+	req := apiRequest(method, `{}`)
+	req.Header.Set("Cookie", "id=session")
+	req.Header.Set("X-SYNO-TOKEN", "token")
+	return serve(t, cfg, alice, req, permissions)
+}
+
+func TestExecutorPortalStatusReportsTheEntry(t *testing.T) {
+	saved := `{"alias":"hello-go","id":"SYNO.SDS.HelloGo.Instance"}`
+	for _, c := range []struct {
+		entry string
+		err   error
+		state any
+		alias any
+	}{
+		{portal.EntryRegistered, nil, "active", "hello-go"},
+		{portal.EntryCleanupRequired, nil, "active", "hello-go"},
+		{portal.EntryUnregistered, nil, "inactive", nil},
+		{"", errors.New("executor down"), "unavailable", nil},
+	} {
+		cfg := executorPortalConfig(t, saved, &fakeEntry{entry: c.entry, err: c.err})
+		code, out := call(t, cfg, bob, "portal.status", `{}`)
+		data := out["data"].(map[string]any)
+		if code != "" || data["state"] != c.state || data["alias"] != c.alias {
+			t.Fatalf("%s: %q %v", c.entry, code, data)
+		}
+		if c.err == nil && data["entry"] != c.entry {
+			t.Fatalf("%s: entry %v", c.entry, data)
+		}
+	}
+}
+
+func TestExecutorPortalRegisterAndUnregisterReturnTheFreshStatus(t *testing.T) {
+	executor := &fakeEntry{entry: portal.EntryUnregistered}
+	cfg := executorPortalConfig(t, `{"alias":"hello-go","id":"SYNO.SDS.HelloGo.Instance"}`, executor)
+	code, out := sessionCall(t, cfg, "portal.register")
+	if data, _ := out["data"].(map[string]any); code != "" || data["entry"] != portal.EntryRegistered || data["state"] != "active" {
+		t.Fatalf("register: %q %v", code, out)
+	}
+	if executor.auth["dsm_cookie"] != "session" {
+		t.Fatalf("register did not forward the DSM session: %v", executor.auth)
+	}
+	code, out = sessionCall(t, cfg, "portal.unregister")
+	if data, _ := out["data"].(map[string]any); code != "" || data["entry"] != portal.EntryUnregistered || data["state"] != "inactive" {
+		t.Fatalf("unregister: %q %v", code, out)
+	}
+}
+
+func TestExecutorPortalChangesNeedAnAdministratorsDSMSession(t *testing.T) {
+	executor := &fakeEntry{entry: portal.EntryUnregistered}
+	cfg := executorPortalConfig(t, "", executor)
+	for _, method := range []string{"portal.register", "portal.unregister"} {
+		if code, _ := call(t, cfg, bob, method, `{}`); code == "" {
+			t.Fatalf("%s: an ordinary user changed the entry", method)
+		}
+		if code, _ := call(t, cfg, alice, method, `{}`); code != "session_required" {
+			t.Fatalf("%s without a DSM session: %q", method, code)
+		}
+	}
+	if len(executor.calls) != 0 {
+		t.Fatalf("the executor was asked: %v", executor.calls)
+	}
+}
+
+func TestExecutorPortalRefusalKeepsTheExecutorsCode(t *testing.T) {
+	cfg := executorPortalConfig(t, "", &fakeEntry{err: &api.Error{Code: "PORTAL_FAILED", Message: "x"}})
+	if code, _ := sessionCall(t, cfg, "portal.register"); code != "PORTAL_FAILED" {
+		t.Fatalf("%q", code)
+	}
+}
+
+func TestPortalChangesExistOnlyInAnExecutorPortalBuild(t *testing.T) {
+	for _, method := range []string{"portal.register", "portal.unregister"} {
+		if code, _ := call(t, portalConfig(t, ""), alice, method, `{}`); code != "unknown_method" {
+			t.Fatalf("%s: %q", method, code)
+		}
+	}
+}

package/templates/native-go/backend/internal/app/routes.go

@@ -37,10 +37,12 @@ type Config struct {
 	DataDir string
 	// VolumeRoot is where /volumeN lives; empty means "/". Tests set it.
 	VolumeRoot string
-	// Portal serves portal.status; PortalConfig overrides DSM's saved
-	// AppPortal.json path in tests.
-	Portal       bool
-	PortalConfig string
+	// Portal serves portal.status; PortalExecutor adds the executor's entry
+	// below DSM 7.2. PortalConfig overrides DSM's saved AppPortal.json path in
+	// tests.
+	Portal         bool
+	PortalExecutor bool
+	PortalConfig   string
 }
 
 func Routes(cfg Config) []api.Route {

package/templates/native-go-delegate/backend/internal/app/delegate_routes_test.go

@@ -22,6 +22,8 @@ func init() {
 	sampleParams["delegate.jobs.submit"] = `{"key":"download","url":"http://localhost/file","dest":"/home","name":"file"}`
 	sampleParams["delegate.jobs.list"] = `{}`
 	sampleParams["delegate.jobs.cancel"] = `{"id":"missing"}`
+	// delegate.status judges the caller's Application Privileges, so it needs the DSM session too.
+	sampleOutcome["delegate.status"] = "session_required"
 	sampleOutcome["delegate.create"] = "session_required"
 	sampleOutcome["delegate.list"] = "session_required"
 	sampleOutcome["delegate.revoke"] = "session_required"

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,8 +7,8 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.9.5",
-        "@synopackageland/ui": "0.9.1",
+        "@synopackageland/sdk": "0.9.6",
+        "@synopackageland/ui": "0.9.2",
         "vue": "3.5.43"
       },
       "devDependencies": {
@@ -1148,9 +1148,9 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.9.5",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.9.5.tgz",
-      "integrity": "sha512-ikBQthpwj9EvpagykdY2WVCjrN1yXBgReQzrnljfggdsOqd8TRk9eUMF2rgY62oARZx0P1fxIRAzkSUBGS1Qgw==",
+      "version": "0.9.6",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.9.6.tgz",
+      "integrity": "sha512-u0xoXjlNk1buGUDO/5KxQuS88zmwG/fIUlToLEIoyoEQfb3K0p/Jt8SVKg3+XuoWEiMZ3mzRkcTQ+AEnr3LKMw==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",
@@ -1167,9 +1167,9 @@
       }
     },
     "node_modules/@synopackageland/ui": {
-      "version": "0.9.1",
-      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.9.1.tgz",
-      "integrity": "sha512-L2k0eeN9+TLPMh5+kMbq6pV8n0qqUq6Ynme/KSp3mCqDb1MXBdr8MbAGtxdbNYMj9QepbA9mccgygwI9fFoG5A==",
+      "version": "0.9.2",
+      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.9.2.tgz",
+      "integrity": "sha512-GXYs6oVed0tIb4J5D5aDYoLJMs7haq0DBWKrPP1cLU6QKUQ6EKaIwqWHv0sVdu530FCARjcB1PrWwWVS9WOsvA==",
       "license": "MIT",
       "dependencies": {
         "@internationalized/date": "3.12.4",

package/templates/native-go-vue/frontend/package.json

@@ -8,8 +8,8 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.9.5",
-    "@synopackageland/ui": "0.9.1",
+    "@synopackageland/sdk": "0.9.6",
+    "@synopackageland/ui": "0.9.2",
     "vue": "3.5.43"
   },
   "devDependencies": {