@synopackageland/templates 0.9.9 → 0.10.0

package/README.md

@@ -11,11 +11,11 @@ the files an App owns; the SDK (`github.com/synopackageland/syno-pkg-land-sdk`,
 | `native-go-jobs` | Background job routes in `internal/app` and their page test |
 | `native-go-delegate` | Delegate routes, the delegate background worker, the delegate `CapabilityPanels.vue` |
 | `native-go-root-ops` | Executor routes in `internal/app` and an example `root/whoami.sh` |
-| `native-rust` | Base: `dsm-package.yaml` with `backend.kind: rust`, Cargo package `app` (`backend/src/bin/{api,background-worker}.rs`, `backend/src/app`, `backend/permissions.json`, committed `Cargo.lock`, `rust-toolchain.toml`), plain `ui/`, i18n |
-| `native-rust-vue` | Only the Vue README and gitignore; the shell itself is `native-go-vue`'s `frontend/` |
-| `native-rust-jobs` | `backend/src/app/background_routes.rs`: the background job routes and their tests |
-| `native-rust-delegate` | `delegate_routes.rs` and the delegate `background-worker.rs` |
-| `native-rust-root-ops` | `root_routes.rs`: the executor routes and their tests |
+| `native-python` | Base: `dsm-package.yaml` (`backend.runtime: python`), the App in `backend/app` (`routes.py`, stub capability modules, `permissions.json`), unittest tests |
+| `native-node` | Base: `dsm-package.yaml` (`backend.runtime: node`), TypeScript in `backend/src` compiled into `backend/app`, node:test tests, `package-lock.json` |
+| `native-rust` | Base: `dsm-package.yaml` (`backend.runtime: rust`, `methods`), the Cargo project in `backend` on the `syno-pkg-land-app` crate, `Cargo.lock`, `rust-toolchain.toml` |
+| `native-{python,node,rust}-{jobs,root-ops,delegate}` | The capability's example module, replacing the base's stub, with its tests |
+| `native-{python,node,rust}-vue` | The README and `.gitignore` of the Vue shell |
 | `binary` | A prebuilt static CGI (`example/main.go`) with a plain UI |
 | `compose` | Container Manager project (`compose.yaml`, `synology-app.yaml`) |
 | `_shared` | Agent guides, template license, Go license texts, third-party notice writer |
@@ -23,25 +23,22 @@ the files an App owns; the SDK (`github.com/synopackageland/syno-pkg-land-sdk`,
 Overlays are copied over `native-go` in the order root-ops, vue, jobs, delegate.
 An overlay may replace `internal/app/*_none.go` (the CLI deletes the matching
 `_none.go` file); nothing outside `internal/app` and the Vue shell differs.
+The Python, Node.js and Rust templates borrow the Go template's UI: `ui/` and
+`i18n/` from `native-go`, `frontend/` from `native-go-vue` (and the jobs and
+delegate overlays' frontend files), `root/whoami.sh` from `native-go-root-ops`.
+Their overlays are copied in the order vue, root-ops, jobs, delegate; delegate
+also makes `app.status` and `report.save` `authenticated`, and the Rust
+manifest gets the overlays' methods. `init` copies the App SDK into
+`backend/vendor` (Python `synopkgland_app`; Node `@synopackageland/app`, its
+package.json without devDependencies and scripts, and `dist/`).
 The placeholders `__PACKAGE__` (also the Go module path), `__DISPLAY_NAME__` and
 `__BACKGROUND_ENABLED__` are substituted by `init`.
 
-Rust has no build tags, so the `native-rust-*` overlays overwrite same-named
-base files (`background_routes.rs`, `delegate_routes.rs`, `root_routes.rs`,
-`bin/background-worker.rs`) and nothing is removed. They carry only the
-backend. A Rust project borrows the native-go overlays' non-backend files: the
-Vue shell from `native-go-vue` (then `native-rust-vue`), `frontend/` of
-`native-go-jobs` and `native-go-delegate`, and `root/whoami.sh` of
-`native-go-root-ops`. A delegate project without root-ops also takes
-`native-rust-root-ops`'s `root_routes.rs`, the executor shell Go borrows as
-`executor.go`. `scripts/assemble.sh --language rust` does exactly this.
-
-`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.9.9`; that line is
+`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.10.0`; that line is
 the single source of the SDK version and `frontend/package.json` pins
-`@synopackageland/sdk` to the same version. A Rust project takes it from the
-`tag` of the `syno-pkg-land-sdk` git dependency in `backend/Cargo.toml`, which
-`Cargo.lock` repeats; build-time values reach it through the contract's
-`SYNOPKGLAND_*` environment variables.
+`@synopackageland/sdk` to the same version. Python and Node.js name it in
+`backend.sdk`, Rust in the `syno-pkg-land-app` tag of `backend/Cargo.toml`
+(and `Cargo.lock`); all of them pin 0.10.0.
 
 ## Notice writer
 
@@ -62,9 +59,10 @@ and `UI-THIRD_PARTY.md` in the output directory; other files there stay.
 ```sh
 export GOPRIVATE='github.com/synopackageland/*'           # the SDK repository is private
 export SYNOPKGLAND_SDK_DIR=~/Public/synopackageland/sdk   # optional sdk checkout: Go module at the root, ts/
+export SYNOPKGLAND_DOCKER_SSH=my-docker-host                # optional: the Docker engine for the Linux tests
 scripts/assemble.sh /tmp/app vue delegate                 # one combination, as init lays it out
-scripts/assemble.sh --language rust /tmp/app vue delegate # the same, for native-rust
-scripts/gate.sh                                           # layout, every combination (Go and Rust), binary, npm pack
+scripts/assemble.sh --language rust /tmp/app-rs plain jobs  # python, node or rust
+scripts/gate.sh                                           # layout, every combination, binary, npm pack
 ```
 
 Without `SYNOPKGLAND_SDK_DIR` the combinations use the released SDK that
@@ -72,11 +70,13 @@ Without `SYNOPKGLAND_SDK_DIR` the combinations use the released SDK that
 `replace github.com/synopackageland/syno-pkg-land-sdk => $SYNOPKGLAND_SDK_DIR`
 and installs `$SYNOPKGLAND_SDK_DIR/ts` as an `npm pack` tarball (not a link, so Vue
 resolves once). With `SYNOPKGLAND_UI_TARBALL` set it installs that tarball as
-`@synopackageland/ui`, for a UI version not yet on npm. The Rust gate runs `cargo fmt --check`, `cargo clippy -D warnings`, `cargo test --locked`
-and a target clippy for the three DSM targets per combination; `rustup` installs the
-toolchain `backend/rust-toolchain.toml` pins. With `SYNOPKGLAND_SDK_DIR`, `scripts/rust-env.sh`
-(sourced by the gate) makes cargo fetch the SDK's pinned tag from that checkout instead of
-GitHub, leaving the Cargo files as shipped. CI is not available; `scripts/gate.sh` is the gate.
+`@synopackageland/ui`, for a UI version not yet on npm.
+The Python and Node.js combinations need `SYNOPKGLAND_SDK_DIR` (its `python/`,
+and `node/` built with `npm ci && npm run build`) for their App SDK, and the
+Rust ones fetch the SDK crate from it (`scripts/rust-env.sh`), so it must hold
+the tag `Cargo.lock` pins. The gate runs each language's tests on Linux in
+Docker (`scripts/bridge-linux-test.sh`: Python 3.8, Node.js 18, Rust).
+CI is not available; `scripts/gate.sh` is the gate.
 
 SDK usage, protocol and API documentation: <https://github.com/synopackageland/syno-pkg-land-sdk>.
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.9.9",
-  "description": "Project templates for synopkgland init: native-go and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
+  "version": "0.10.0",
+  "description": "Project templates for synopkgland init: native-go, native-python, native-node and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
   "license": "MIT",
   "repository": {"type": "git", "url": "git+https://github.com/synopackageland/syno-pkg-land-templates.git"},
   "exports": {

package/templates/_shared/AGENTS.md

@@ -213,20 +213,58 @@ sweep forward the cancel instead of admitting it.
   `Service.OperationStatus`, `Service.ExportExample` (the SDK's
   `delegate/example.go`).
 
+## Python, Node.js and Rust backends
+
+The SDK runtime is the CGI: it checks the DSM session, the entry gate and
+permissions.json, then runs the App once per call, as the package account, and
+answers the browser itself for every refusal. The App only registers methods
+and asks the runtime for services with `ctx.runtime(op, params)`: `files.read`
+(the caller's file, `files: session`), `bg.submit`/`bg.get`/`bg.cancel` (the
+caller's jobs, `jobs: true`, whose worker hashes each job's input), `root.run`
+(`rootOps`), `delegate.move_from_staging` (`delegate`) and `portal.status`. A
+service refusal is a code the browser may see; pass it on. The admin guard
+inside a shared method is `ctx.admin`. State lives in
+`SYNOPKGLAND_DATA_DIR`. `synopkgland add` does not change these backends: choose
+their capabilities with `synopkgland init --with`.
+
+## Python backend
+
+- Methods: `backend/app/routes.py` (`build` registers them, the capability
+  modules `jobs.py`, `root_ops.py`, `delegate.py` add theirs); permissions:
+  `backend/app/permissions.json`. DSM runs it with its own python3 (3.8):
+  standard library only, nothing newer than 3.8.
+- Params: `fields(params, name=type)` (`params.py`); errors:
+  `Error(code, message)`, `Error.bad_request(message)`; anything else is
+  `internal`. `ctx.runtime` raises the runtime's refusal as an `Error`.
+- Test with `(cd backend && python3 -m unittest discover -s tests)`;
+  `tests/support.py`'s `call` plays the runtime, with the services a test answers.
+
+## Node.js backend
+
+- Methods: `backend/src/routes.ts` (`build` registers them, the capability
+  modules `jobs.ts`, `root-ops.ts`, `delegate.ts` add theirs); permissions:
+  `backend/app/permissions.json`. TypeScript with `"module": "NodeNext"`;
+  `npm run build` compiles it into `backend/app`, which the SPK ships, so run it
+  before `synopkgland check` or `build`.
+- Params: `strings(params, ...names)` (`params.ts`); errors:
+  `new AppError(code, message)`, `AppError.badRequest(message)`. Call services
+  through `service(ctx, op, params)` (`service.ts`), which passes the runtime's
+  refusals on; a bare `ctx.runtime` refusal would reach the browser as `internal`.
+- Test with `(cd backend && npm ci && npm test && npm run typecheck)`; `test/support.ts`'s
+  `call` plays the runtime.
+
 ## Rust backend
 
-- Routes: `backend/src/app/routes.rs`; App permissions:
-  `backend/permissions.json`. Test with `(cd backend && cargo test --locked)`,
-  then `cargo clippy --locked --all-targets -- -D warnings` and
-  `cargo fmt --check`.
-- Admin guard inside a shared route: `api::require_admin(caller)`.
-- Jobs: `background::Work` is `Arc<dyn Fn(&Context, &mut Task<'_>) ->
-  Result<JobResult, BoxError>>`; call `t.report(Progress {..})` and
-  `t.checkpoint(state)`, and resume from `t.job.checkpoint`. The template's
-  Work is `app::hash_work` (`app/background/work.rs`, hash state through
-  `sha256::Sha256::save`/`restore`), set as `Runner.work` in
-  `bin/background-worker.rs` and as `delegate::Service.work` with delegate.
-- Uninstall hook: `app::uninstall(data_dir, delete_state)`
-  (`app/uninstall.rs`), reached by `api.cgi uninstall`.
-- Delegate: `Service::destination`, `move_from_staging`, `cancel_operation`,
-  `operation_status`, `export_example` (the SDK's `delegate/example.rs`).
+- Methods: `backend/src/routes.rs` (`build` registers them, the capability
+  modules `jobs.rs`, `root_ops.rs`, `delegate.rs` add theirs); permissions:
+  `backend/permissions.json`. The build cross-compiles the binary, which cannot
+  run on the build machine: list every method in `backend.methods` of
+  dsm-package.yaml too.
+- Params: a `#[serde(deny_unknown_fields)]` struct and `params.decode()?`;
+  errors: `Error::new(code, message)`, `Error::bad_request(message)`,
+  `routes::internal(e)` for the unexpected. `ctx.runtime::<T>(op, &params)?`
+  passes the runtime's refusal on.
+- Test with `(cd backend && cargo test --locked)`, then
+  `cargo clippy --locked --all-targets -- -D warnings` and `cargo fmt --check`;
+  `test_support::call` plays the runtime. `rust-toolchain.toml` pins the
+  toolchain and the DSM targets; keep `Cargo.lock` committed.

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.9.9 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.10.0 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/cmd/app/main.go

@@ -11,6 +11,8 @@ import (
 	"net/http"
 	"net/http/cgi"
 	"os"
+	"strconv"
+	"time"
 
 	"github.com/synopackageland/syno-pkg-land-sdk/api"
 	"github.com/synopackageland/syno-pkg-land-sdk/dsm"
@@ -40,8 +42,20 @@ var (
 	// "on" when dsm-package.yaml declares portal: serves portal.status;
 	// "executor" below DSM 7.2, where the executor registers the entry.
 	portal = ""
+	// backend.timeout_seconds, 60 unless set.
+	requestTimeout = ""
 )
 
+// deadline is the CGI request deadline: requestTimeout seconds, or 60 when it
+// is unset or not a positive number.
+func deadline() api.DeadlineOption {
+	seconds, err := strconv.Atoi(requestTimeout)
+	if err != nil || seconds <= 0 {
+		seconds = 60
+	}
+	return api.Timeout(time.Duration(seconds) * time.Second)
+}
+
 func main() {
 	log.SetFlags(0)
 	log.SetPrefix(packageID + ": ")
@@ -104,7 +118,7 @@ func main() {
 	if standalone != nil {
 		handler = standalone.Wrap(handler)
 	}
-	if err := cgi.Serve(api.WithRequestDeadline(handler)); err != nil {
+	if err := cgi.Serve(api.WithRequestDeadline(handler, deadline())); err != nil {
 		log.Fatal(err)
 	}
 }

package/templates/native-go/backend/cmd/app/main_test.go

@@ -0,0 +1,33 @@
+package main
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	"github.com/synopackageland/syno-pkg-land-sdk/api"
+)
+
+func TestRequestDeadlineFollowsTheBuildSetting(t *testing.T) {
+	saved := requestTimeout
+	t.Cleanup(func() { requestTimeout = saved })
+	for setting, want := range map[string]time.Duration{
+		"":    60 * time.Second,
+		"120": 120 * time.Second,
+		"1":   time.Second,
+		"0":   60 * time.Second,
+		"-5":  60 * time.Second,
+		"x":   60 * time.Second,
+	} {
+		requestTimeout = setting
+		var left time.Duration
+		api.WithRequestDeadline(http.HandlerFunc(func(_ http.ResponseWriter, r *http.Request) {
+			d, _ := r.Context().Deadline()
+			left = time.Until(d)
+		}), deadline()).ServeHTTP(httptest.NewRecorder(), httptest.NewRequest("POST", "/", nil))
+		if left > want || left < want-time.Second {
+			t.Errorf("requestTimeout %q: deadline in %v, want %v", setting, left, want)
+		}
+	}
+}

package/templates/native-go/backend/go.mod

@@ -4,6 +4,6 @@ go 1.25.0
 
 toolchain go1.26.9
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.9.9
+require github.com/synopackageland/syno-pkg-land-sdk v0.10.0
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.9.9 h1:TUsblZtIwlBO0DpBTUOj6gd8+xTi60Y0CwkKNb+OR3M=
-github.com/synopackageland/syno-pkg-land-sdk v0.9.9/go.mod h1:hlsvaVuH2wsAoR8jzI1Rg/NeejQSFpAaN6zpIWsVbjI=
+github.com/synopackageland/syno-pkg-land-sdk v0.10.0 h1:YcKdeKZDRGqUuNuuGS1WIehCA9UgfB3cpHyP8eHYdds=
+github.com/synopackageland/syno-pkg-land-sdk v0.10.0/go.mod h1:hlsvaVuH2wsAoR8jzI1Rg/NeejQSFpAaN6zpIWsVbjI=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go/i18n/messages/de.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "Dieser Vorgang kann nicht ausgeführt werden. Bitte versuchen Sie es später erneut.",
   "error.session_required": "Verbindung abgelaufen. Melden Sie sich erneut an.",
   "error.unknown_method": "Dieser Vorgang kann nicht ausgeführt werden. Bitte versuchen Sie es später erneut.",
+  "error.app_unavailable": "Die App ist derzeit nicht verfügbar. Versuchen Sie es später erneut.",
+  "error.limit_exceeded": "Die Datei ist größer als zulässig.",
+  "error.read_failed": "Die Datei kann nicht gelesen werden. Bitte versuchen Sie es später erneut.",
+  "error.identity_unavailable": "Dieses Benutzerkonto kann nicht ermittelt werden. Bitte versuchen Sie es später erneut.",
   "greeting.adminOnly": "Nur Mitglieder der Gruppe administrators können den Gruß ändern.",
   "greeting.label": "Neuer Gruß",
   "greeting.save": "Speichern",

package/templates/native-go/i18n/messages/en.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "Unable to perform this operation. Please try again later.",
   "error.session_required": "Connection expired. Please sign in again.",
   "error.unknown_method": "Unable to perform this operation. Please try again later.",
+  "error.app_unavailable": "The App is not available right now. Try again later.",
+  "error.limit_exceeded": "The file is larger than allowed.",
+  "error.read_failed": "Unable to read the file. Please try again later.",
+  "error.identity_unavailable": "Unable to identify this user account. Please try again later.",
   "greeting.adminOnly": "Only members of the administrators group can change the greeting.",
   "greeting.label": "New greeting",
   "greeting.save": "Save",

package/templates/native-go/i18n/messages/es.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "No se puede realizar esta operación. Vuelva a intentarlo más tarde.",
   "error.session_required": "Conexión caducada. Vuelva a conectarse.",
   "error.unknown_method": "No se puede realizar esta operación. Vuelva a intentarlo más tarde.",
+  "error.app_unavailable": "La App no está disponible en este momento. Vuelva a intentarlo más tarde.",
+  "error.limit_exceeded": "El archivo supera el tamaño permitido.",
+  "error.read_failed": "No se puede leer el archivo. Vuelva a intentarlo más tarde.",
+  "error.identity_unavailable": "No se puede identificar esta cuenta de usuario. Vuelva a intentarlo más tarde.",
   "greeting.adminOnly": "Solo los miembros del grupo administrators pueden cambiar el saludo.",
   "greeting.label": "Nuevo saludo",
   "greeting.save": "Guardar",

package/templates/native-go/i18n/messages/fr.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "Impossible d'effectuer cette opération. Veuillez réessayer ultérieurement.",
   "error.session_required": "La connexion a expiré. Reconnectez-vous.",
   "error.unknown_method": "Impossible d'effectuer cette opération. Veuillez réessayer ultérieurement.",
+  "error.app_unavailable": "L’App n’est pas disponible pour le moment. Réessayez plus tard.",
+  "error.limit_exceeded": "Le fichier dépasse la taille autorisée.",
+  "error.read_failed": "Impossible de lire le fichier. Veuillez réessayer ultérieurement.",
+  "error.identity_unavailable": "Impossible d'identifier ce compte utilisateur. Veuillez réessayer ultérieurement.",
   "greeting.adminOnly": "Seuls les membres du groupe administrators peuvent modifier le message d'accueil.",
   "greeting.label": "Nouveau message d'accueil",
   "greeting.save": "Sauvegarder",

package/templates/native-go/i18n/messages/it.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "Impossibile eseguire questa operazione. Riprovare più tardi.",
   "error.session_required": "Connessione scaduta. Accedere nuovamente.",
   "error.unknown_method": "Impossibile eseguire questa operazione. Riprovare più tardi.",
+  "error.app_unavailable": "L’App non è al momento disponibile. Riprovare più tardi.",
+  "error.limit_exceeded": "Il file supera le dimensioni consentite.",
+  "error.read_failed": "Impossibile leggere il file. Riprovare più tardi.",
+  "error.identity_unavailable": "Impossibile identificare questo account utente. Riprovare più tardi.",
   "greeting.adminOnly": "Solo i membri del gruppo administrators possono modificare il saluto.",
   "greeting.label": "Nuovo saluto",
   "greeting.save": "Salva",

package/templates/native-go/i18n/messages/ja.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "この操作は実行できません。後でもう一度お試しください。",
   "error.session_required": "接続の期限が切れています。もう 1 度サイン インしてください。",
   "error.unknown_method": "この操作は実行できません。後でもう一度お試しください。",
+  "error.app_unavailable": "App は現在使用できません。しばらくしてから再試行してください。",
+  "error.limit_exceeded": "ファイルが許可されたサイズを超えています。",
+  "error.read_failed": "ファイルを読み取れません。後でもう一度お試しください。",
+  "error.identity_unavailable": "このユーザー アカウントを識別できません。後でもう一度お試しください。",
   "greeting.adminOnly": "あいさつを変更できるのは administrators グループのメンバーのみです。",
   "greeting.label": "新しいあいさつ",
   "greeting.save": "保存",

package/templates/native-go/i18n/messages/ko.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "이 작업을 수행할 수 없습니다. 나중에 다시 시도하십시오.",
   "error.session_required": "연결 만료됨. 다시 로그인 해 주십시오.",
   "error.unknown_method": "이 작업을 수행할 수 없습니다. 나중에 다시 시도하십시오.",
+  "error.app_unavailable": "현재 App을 사용할 수 없습니다. 나중에 다시 시도하십시오.",
+  "error.limit_exceeded": "파일이 허용된 크기를 초과합니다.",
+  "error.read_failed": "파일을 읽을 수 없습니다. 나중에 다시 시도하십시오.",
+  "error.identity_unavailable": "이 사용자 계정을 확인할 수 없습니다. 나중에 다시 시도하십시오.",
   "greeting.adminOnly": "administrators 그룹의 구성원만 인사말을 변경할 수 있습니다.",
   "greeting.label": "새 인사말",
   "greeting.save": "저장",

package/templates/native-go/i18n/messages/zh-CN.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "无法执行此操作。请稍后再试。",
   "error.session_required": "联机超时，请重新登录。",
   "error.unknown_method": "无法执行此操作。请稍后再试。",
+  "error.app_unavailable": "App 当前不可用，请稍后重试。",
+  "error.limit_exceeded": "文件超过允许的大小。",
+  "error.read_failed": "无法读取文件。请稍后再试。",
+  "error.identity_unavailable": "无法识别此用户帐号。请稍后再试。",
   "greeting.adminOnly": "只有 administrators 群组的成员可以更改问候语。",
   "greeting.label": "新的问候语",
   "greeting.save": "保存",

package/templates/native-go/i18n/messages/zh-TW.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "無法執行此操作。請稍後再試。",
   "error.session_required": "連線逾時。請重新登入。",
   "error.unknown_method": "無法執行此操作。請稍後再試。",
+  "error.app_unavailable": "App 目前無法使用，請稍後再試。",
+  "error.limit_exceeded": "檔案超過允許的大小。",
+  "error.read_failed": "無法讀取檔案。請稍後再試。",
+  "error.identity_unavailable": "無法識別此使用者帳號。請稍後再試。",
   "greeting.adminOnly": "只有 administrators 群組的成員可以變更問候語。",
   "greeting.label": "新的問候語",
   "greeting.save": "儲存",

package/templates/native-go/ui/app.js

@@ -71,7 +71,8 @@
         [[t("status.user"), data.admin ? t("status.userAdmin", { user: data.user }) : data.user],
          [t("status.package"), data.package],
          [t("status.version"), data.version],
-         [t("status.backend"), data.go_version + " · " + data.platform],
+         // A Go backend reports go_version; a Python, Node.js or Rust App reports language.
+         [t("status.backend"), (data.language || data.go_version) + " · " + data.platform],
          [t("status.uid"), String(data.process.uid)]].forEach(function (row) {
           status.appendChild(el("dt", { text: row[0] }));
           status.appendChild(el("dd", { text: row[1] }));

package/templates/native-go-delegate/frontend/test/capability-panels.test.ts

@@ -5,6 +5,7 @@ import {AppRoot} from '@synopackageland/ui'
 import type {BackgroundSaveFacade} from '@synopackageland/sdk'
 import CapabilityPanels from '../src/CapabilityPanels.vue'
 import {mount} from '../src/main'
+import {dsmWindow} from './context'
 const cleanup:Array<()=>void>=[]
 afterEach(()=>cleanup.splice(0).forEach(fn=>fn()))
 async function settle(){for(let i=0;i<30;i++){await Promise.resolve();await nextTick()}}
@@ -66,7 +67,7 @@ test('the app mount forwards ctx.executor to administrator setup only',async()=>
    throw {code:'unknown_method'}
   })
   const root=document.createElement('div');document.body.append(root)
-  const app=mount(root,{locale:'en',call,reopen:()=>()=>{},executor:{status,authorize,control:vi.fn(async()=>({state:'ready' as const}))}} as any)
+  const app=mount(root,dsmWindow({call,executor:{status,authorize,control:vi.fn(async()=>({state:'ready' as const}))} as never}))
   cleanup.push(()=>{app.unmount();root.remove()});await settle()
   if(admin){
    expect(status).toHaveBeenCalled()
@@ -90,7 +91,7 @@ test('the header Refresh reloads the save destinations',async()=>{
    throw {code:'unknown_method'}
  })
  const root=document.createElement('div');document.body.append(root)
- const app=mount(root,{locale:'en',call,reopen:()=>()=>{}} as any)
+ const app=mount(root,dsmWindow({call}))
  cleanup.push(()=>{app.unmount();root.remove()});await settle()
  const reads=()=>call.mock.calls.filter(([method])=>method==='delegate.destination').length
  const before=reads();expect(before).toBeGreaterThan(0)

package/templates/native-go-jobs/frontend/test/background-page.test.ts

@@ -2,7 +2,7 @@
 import {expect,test,vi} from 'vitest'
 import {nextTick} from 'vue'
 import {mount} from '../src/main'
-import type {Context} from '@synopackageland/sdk'
+import {dsmWindow} from './context'
 async function settle(){for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}}
 // The CLI turns the background page on for jobs (and delegate) projects only.
 test('a jobs project mounts the background panel for the signed-in user',async()=>{
@@ -11,7 +11,7 @@ test('a jobs project mounts the background panel for the signed-in user',async()
   throw {code:'unknown_method'}
  })
  const root=document.createElement('div');document.body.append(root)
- const app=mount(root,{locale:'en',call,reopen:()=>()=>{}} as unknown as Context)
+ const app=mount(root,dsmWindow({call}))
  try{
   await settle()
   expect(call.mock.calls.some(([method])=>method.startsWith('bg.'))).toBe(true)
@@ -29,7 +29,7 @@ test('the background panel pauses a running job and resumes a paused one',async(
   return {}
  })
  const root=document.createElement('div');document.body.append(root)
- const app=mount(root,{locale:'en',call,reopen:()=>()=>{}} as unknown as Context)
+ const app=mount(root,dsmWindow({call}))
  const button=(id:string,label:string)=>Array.from(root.querySelectorAll(`[data-job-id="${id}"] button`)).find(b=>b.textContent===label) as HTMLButtonElement|undefined
  try{
   await settle()
@@ -48,7 +48,7 @@ test('the header Refresh reloads the background panel',async()=>{
   return {}
  })
  const root=document.createElement('div');document.body.append(root)
- const app=mount(root,{locale:'en',call,reopen:()=>()=>{}} as unknown as Context)
+ const app=mount(root,dsmWindow({call}))
  const reads=()=>call.mock.calls.filter(([method])=>method==='bg.jobs.list').length
  try{
   await settle();const before=reads()

package/templates/native-go-vue/README.md

@@ -33,14 +33,26 @@ Generated build and unit tests do not establish NAS runtime acceptance.
 The manifest is dsm-package.yaml schema 2: backend.kind: go and capabilities.files: session, jobs: true, identity: standalone, rootOps: true. Use --with login to declare standalone identity. Existing projects use synopkgland add <cap>...; app entrypoints stay app-owned, SDK conflicts are refused. check, inspect, build, deploy and status accept --json.
 
 Use the installed `@synopackageland/ui`; package.json pins its version.
-`AppRoot` defaults to app modal scope and stays bounded at `height: 100%`;
-`AppLayout wide-layout="window"` keeps the DSM shell in window mode even when
-maximized. Only whole-page web/Portal apps should opt into document scope or
-`wide-layout="web"`. The DSM host sets the 700px minimum window width.
-In a DSM window (`ctx.host.platform().host === 'dsm'`) `AppRoot` takes
+`App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
+`pages` from `shellPages`, the header buttons in `#actions` and the pages in its
+default slot. Given `ctx`, it follows the launch. In a DSM desktop window it
+keeps `wide-layout="window"`, even maximized; the DSM host sets the 700px
+minimum window width. A Portal or standalone launch owns the whole page
+(`ctx.fullPage`, from the generated window): `AppShell` takes
+`wide-layout="web"` (the SaaS layout at 1200px or wider, mobile on a phone) and
+a device-width viewport, undone at unmount, since DSM's page has no
+device-width viewport. Its full-page sidebar names the App with
+`ctx.displayName` and `ctx.appIcon` (without them the page title and icon) and
+shows the signed-in DSM account and its role from `ctx.user`. See the ui's
+`docs/adaptive-layout.md`.
+`AppShell`'s `app-root` wraps it in an app-local `AppRoot` (app modal scope, on
+a full page as well, bounded at `height: 100%`) with the UI locale from
+`locale`; do not add another `AppRoot`.
+In a DSM window (not a full page) that `AppRoot` takes
 `dialog-bounds="viewport"`, so Dialogs can be dragged out of the window, and
-its `activate` event calls `ctx.host.activateWindow()` to bring the window to
-the front. Elsewhere Dialogs stay inside the App.
+pressing one calls `ctx.host.activateWindow()` to bring the window to the
+front. Elsewhere Dialogs stay inside the App. A confirmed sign-in need sets
+`denied`: the `#denied` slot's `LoginPage` takes the place of the App's pages.
 Import `themes/dsm7-embedded.css` and assign each mount a unique
 `app.config.idPrefix` before mounting.
 

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,8 +7,8 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.9.9",
-        "@synopackageland/ui": "0.9.3",
+        "@synopackageland/sdk": "0.10.0",
+        "@synopackageland/ui": "0.9.4",
         "vue": "3.5.43"
       },
       "devDependencies": {
@@ -1148,13 +1148,13 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.9.9",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.9.9.tgz",
-      "integrity": "sha512-O73D+s+yJPmYLfZ2l261S1izqa5lAc9hgbuBScE4uoKyydUDfWEhAmb7CUM6Er25wY8nYqG480GMcyfLuESFGw==",
+      "version": "0.10.0",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.10.0.tgz",
+      "integrity": "sha512-oRwr3I4WNWCqknTPvDnlR7wjM/6pBX+UJ/GRc2U4l9+VUGrdgq0UH9gCjmGIZS9beE5y33tcxmj2ASweLUbJIg==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",
-        "@synopackageland/ui": "^0.9.3",
+        "@synopackageland/ui": "^0.9.4",
         "vue": "^3.5.0"
       },
       "peerDependenciesMeta": {
@@ -1167,9 +1167,9 @@
       }
     },
     "node_modules/@synopackageland/ui": {
-      "version": "0.9.3",
-      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.9.3.tgz",
-      "integrity": "sha512-CcCpSiQ2y4GJnbWjBxRrPO6QzLboMdEzqgbMdpXGaEI3IaTrxwS6zy8yXuuMBQHuqAcfBf3jL7fmcL9A58oVqw==",
+      "version": "0.9.4",
+      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.9.4.tgz",
+      "integrity": "sha512-yu0RrYtT/QcAn/lNwqZBoqqjLTXrpqqnSWB+0swGou8IWLrhfwXrHVBf+oJc+NjLj+G4kB7AyP9kbvw9FHxNOA==",
       "license": "MIT",
       "dependencies": {
         "@internationalized/date": "3.12.4",

package/templates/native-go-vue/frontend/package.json

@@ -8,8 +8,8 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.9.9",
-    "@synopackageland/ui": "0.9.3",
+    "@synopackageland/sdk": "0.10.0",
+    "@synopackageland/ui": "0.9.4",
     "vue": "3.5.43"
   },
   "devDependencies": {