@synopackageland/templates 0.9.9 → 0.10.1

package/README.md

@@ -7,15 +7,15 @@ the files an App owns; the SDK (`github.com/synopackageland/syno-pkg-land-sdk`,
 | Template | What it adds |
 | --- | --- |
 | `native-go` | Base: `dsm-package.yaml`, Go module (`backend/cmd/{app,background-worker}`, `backend/internal/app`, `backend/internal/api/permissions.json`), plain `ui/`, i18n |
-| `native-go-vue` | Vue shell in `frontend/` (`App.vue`, `main.ts`, app i18n, `CapabilityPanels.vue`) |
+| `native-go-vue` | Vue shell in `frontend/` (`App.vue`, `main.ts`, app i18n, `CapabilityPanels.vue`, `ExecutorGate.vue`) |
 | `native-go-jobs` | Background job routes in `internal/app` and their page test |
 | `native-go-delegate` | Delegate routes, the delegate background worker, the delegate `CapabilityPanels.vue` |
-| `native-go-root-ops` | Executor routes in `internal/app` and an example `root/whoami.sh` |
-| `native-rust` | Base: `dsm-package.yaml` with `backend.kind: rust`, Cargo package `app` (`backend/src/bin/{api,background-worker}.rs`, `backend/src/app`, `backend/permissions.json`, committed `Cargo.lock`, `rust-toolchain.toml`), plain `ui/`, i18n |
-| `native-rust-vue` | Only the Vue README and gitignore; the shell itself is `native-go-vue`'s `frontend/` |
-| `native-rust-jobs` | `backend/src/app/background_routes.rs`: the background job routes and their tests |
-| `native-rust-delegate` | `delegate_routes.rs` and the delegate `background-worker.rs` |
-| `native-rust-root-ops` | `root_routes.rs`: the executor routes and their tests |
+| `native-go-root-ops` | The SDK's executor routes and `root.run` in `internal/app`, an example `root/whoami.sh`, and the Vue `ExecutorGate.vue` that holds the pages until the executor is approved |
+| `native-python` | Base: `dsm-package.yaml` (`backend.runtime: python`), the App in `backend/app` (`routes.py`, stub capability modules, `permissions.json`), unittest tests |
+| `native-node` | Base: `dsm-package.yaml` (`backend.runtime: node`), TypeScript in `backend/src` compiled into `backend/app`, node:test tests, `package-lock.json` |
+| `native-rust` | Base: `dsm-package.yaml` (`backend.runtime: rust`, `methods`), the Cargo project in `backend` on the `syno-pkg-land-app` crate, `Cargo.lock`, `rust-toolchain.toml` |
+| `native-{python,node,rust}-{jobs,root-ops,delegate}` | The capability's example module, replacing the base's stub, with its tests |
+| `native-{python,node,rust}-vue` | The README and `.gitignore` of the Vue shell |
 | `binary` | A prebuilt static CGI (`example/main.go`) with a plain UI |
 | `compose` | Container Manager project (`compose.yaml`, `synology-app.yaml`) |
 | `_shared` | Agent guides, template license, Go license texts, third-party notice writer |
@@ -23,25 +23,22 @@ the files an App owns; the SDK (`github.com/synopackageland/syno-pkg-land-sdk`,
 Overlays are copied over `native-go` in the order root-ops, vue, jobs, delegate.
 An overlay may replace `internal/app/*_none.go` (the CLI deletes the matching
 `_none.go` file); nothing outside `internal/app` and the Vue shell differs.
+The Python, Node.js and Rust templates borrow the Go template's UI: `ui/` and
+`i18n/` from `native-go`, `frontend/` from `native-go-vue` (and the jobs and
+delegate overlays' frontend files), `root/whoami.sh` from `native-go-root-ops`.
+Their overlays are copied in the order vue, root-ops, jobs, delegate; delegate
+also makes `app.status` and `report.save` `authenticated`, and the Rust
+manifest gets the overlays' methods. `init` copies the App SDK into
+`backend/vendor` (Python `synopkgland_app`; Node `@synopackageland/app`, its
+package.json without devDependencies and scripts, and `dist/`).
 The placeholders `__PACKAGE__` (also the Go module path), `__DISPLAY_NAME__` and
 `__BACKGROUND_ENABLED__` are substituted by `init`.
 
-Rust has no build tags, so the `native-rust-*` overlays overwrite same-named
-base files (`background_routes.rs`, `delegate_routes.rs`, `root_routes.rs`,
-`bin/background-worker.rs`) and nothing is removed. They carry only the
-backend. A Rust project borrows the native-go overlays' non-backend files: the
-Vue shell from `native-go-vue` (then `native-rust-vue`), `frontend/` of
-`native-go-jobs` and `native-go-delegate`, and `root/whoami.sh` of
-`native-go-root-ops`. A delegate project without root-ops also takes
-`native-rust-root-ops`'s `root_routes.rs`, the executor shell Go borrows as
-`executor.go`. `scripts/assemble.sh --language rust` does exactly this.
-
-`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.9.9`; that line is
+`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.10.1`; that line is
 the single source of the SDK version and `frontend/package.json` pins
-`@synopackageland/sdk` to the same version. A Rust project takes it from the
-`tag` of the `syno-pkg-land-sdk` git dependency in `backend/Cargo.toml`, which
-`Cargo.lock` repeats; build-time values reach it through the contract's
-`SYNOPKGLAND_*` environment variables.
+`@synopackageland/sdk` to the same version. Python and Node.js name it in
+`backend.sdk`, Rust in the `syno-pkg-land-app` tag of `backend/Cargo.toml`
+(and `Cargo.lock`); all of them pin 0.10.1.
 
 ## Notice writer
 
@@ -62,9 +59,10 @@ and `UI-THIRD_PARTY.md` in the output directory; other files there stay.
 ```sh
 export GOPRIVATE='github.com/synopackageland/*'           # the SDK repository is private
 export SYNOPKGLAND_SDK_DIR=~/Public/synopackageland/sdk   # optional sdk checkout: Go module at the root, ts/
+export SYNOPKGLAND_DOCKER_SSH=my-docker-host                # optional: the Docker engine for the Linux tests
 scripts/assemble.sh /tmp/app vue delegate                 # one combination, as init lays it out
-scripts/assemble.sh --language rust /tmp/app vue delegate # the same, for native-rust
-scripts/gate.sh                                           # layout, every combination (Go and Rust), binary, npm pack
+scripts/assemble.sh --language rust /tmp/app-rs plain jobs  # python, node or rust
+scripts/gate.sh                                           # layout, every combination, binary, npm pack
 ```
 
 Without `SYNOPKGLAND_SDK_DIR` the combinations use the released SDK that
@@ -72,11 +70,13 @@ Without `SYNOPKGLAND_SDK_DIR` the combinations use the released SDK that
 `replace github.com/synopackageland/syno-pkg-land-sdk => $SYNOPKGLAND_SDK_DIR`
 and installs `$SYNOPKGLAND_SDK_DIR/ts` as an `npm pack` tarball (not a link, so Vue
 resolves once). With `SYNOPKGLAND_UI_TARBALL` set it installs that tarball as
-`@synopackageland/ui`, for a UI version not yet on npm. The Rust gate runs `cargo fmt --check`, `cargo clippy -D warnings`, `cargo test --locked`
-and a target clippy for the three DSM targets per combination; `rustup` installs the
-toolchain `backend/rust-toolchain.toml` pins. With `SYNOPKGLAND_SDK_DIR`, `scripts/rust-env.sh`
-(sourced by the gate) makes cargo fetch the SDK's pinned tag from that checkout instead of
-GitHub, leaving the Cargo files as shipped. CI is not available; `scripts/gate.sh` is the gate.
+`@synopackageland/ui`, for a UI version not yet on npm.
+The Python and Node.js combinations need `SYNOPKGLAND_SDK_DIR` (its `python/`,
+and `node/` built with `npm ci && npm run build`) for their App SDK, and the
+Rust ones fetch the SDK crate from it (`scripts/rust-env.sh`), so it must hold
+the tag `Cargo.lock` pins. The gate runs each language's tests on Linux in
+Docker (`scripts/bridge-linux-test.sh`: Python 3.8, Node.js 18, Rust).
+CI is not available; `scripts/gate.sh` is the gate.
 
 SDK usage, protocol and API documentation: <https://github.com/synopackageland/syno-pkg-land-sdk>.
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.9.9",
-  "description": "Project templates for synopkgland init: native-go and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
+  "version": "0.10.1",
+  "description": "Project templates for synopkgland init: native-go, native-python, native-node and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
   "license": "MIT",
   "repository": {"type": "git", "url": "git+https://github.com/synopackageland/syno-pkg-land-templates.git"},
   "exports": {

package/templates/_shared/AGENTS.md

@@ -213,20 +213,58 @@ sweep forward the cancel instead of admitting it.
   `Service.OperationStatus`, `Service.ExportExample` (the SDK's
   `delegate/example.go`).
 
+## Python, Node.js and Rust backends
+
+The SDK runtime is the CGI: it checks the DSM session, the entry gate and
+permissions.json, then runs the App once per call, as the package account, and
+answers the browser itself for every refusal. The App only registers methods
+and asks the runtime for services with `ctx.runtime(op, params)`: `files.read`
+(the caller's file, `files: session`), `bg.submit`/`bg.get`/`bg.cancel` (the
+caller's jobs, `jobs: true`, whose worker hashes each job's input), `root.run`
+(`rootOps`), `delegate.move_from_staging` (`delegate`) and `portal.status`. A
+service refusal is a code the browser may see; pass it on. The admin guard
+inside a shared method is `ctx.admin`. State lives in
+`SYNOPKGLAND_DATA_DIR`. `synopkgland add` does not change these backends: choose
+their capabilities with `synopkgland init --with`.
+
+## Python backend
+
+- Methods: `backend/app/routes.py` (`build` registers them, the capability
+  modules `jobs.py`, `root_ops.py`, `delegate.py` add theirs); permissions:
+  `backend/app/permissions.json`. DSM runs it with its own python3 (3.8):
+  standard library only, nothing newer than 3.8.
+- Params: `fields(params, name=type)` (`params.py`); errors:
+  `Error(code, message)`, `Error.bad_request(message)`; anything else is
+  `internal`. `ctx.runtime` raises the runtime's refusal as an `Error`.
+- Test with `(cd backend && python3 -m unittest discover -s tests)`;
+  `tests/support.py`'s `call` plays the runtime, with the services a test answers.
+
+## Node.js backend
+
+- Methods: `backend/src/routes.ts` (`build` registers them, the capability
+  modules `jobs.ts`, `root-ops.ts`, `delegate.ts` add theirs); permissions:
+  `backend/app/permissions.json`. TypeScript with `"module": "NodeNext"`;
+  `npm run build` compiles it into `backend/app`, which the SPK ships, so run it
+  before `synopkgland check` or `build`.
+- Params: `strings(params, ...names)` (`params.ts`); errors:
+  `new AppError(code, message)`, `AppError.badRequest(message)`. Call services
+  through `service(ctx, op, params)` (`service.ts`), which passes the runtime's
+  refusals on; a bare `ctx.runtime` refusal would reach the browser as `internal`.
+- Test with `(cd backend && npm ci && npm test && npm run typecheck)`; `test/support.ts`'s
+  `call` plays the runtime.
+
 ## Rust backend
 
-- Routes: `backend/src/app/routes.rs`; App permissions:
-  `backend/permissions.json`. Test with `(cd backend && cargo test --locked)`,
-  then `cargo clippy --locked --all-targets -- -D warnings` and
-  `cargo fmt --check`.
-- Admin guard inside a shared route: `api::require_admin(caller)`.
-- Jobs: `background::Work` is `Arc<dyn Fn(&Context, &mut Task<'_>) ->
-  Result<JobResult, BoxError>>`; call `t.report(Progress {..})` and
-  `t.checkpoint(state)`, and resume from `t.job.checkpoint`. The template's
-  Work is `app::hash_work` (`app/background/work.rs`, hash state through
-  `sha256::Sha256::save`/`restore`), set as `Runner.work` in
-  `bin/background-worker.rs` and as `delegate::Service.work` with delegate.
-- Uninstall hook: `app::uninstall(data_dir, delete_state)`
-  (`app/uninstall.rs`), reached by `api.cgi uninstall`.
-- Delegate: `Service::destination`, `move_from_staging`, `cancel_operation`,
-  `operation_status`, `export_example` (the SDK's `delegate/example.rs`).
+- Methods: `backend/src/routes.rs` (`build` registers them, the capability
+  modules `jobs.rs`, `root_ops.rs`, `delegate.rs` add theirs); permissions:
+  `backend/permissions.json`. The build cross-compiles the binary, which cannot
+  run on the build machine: list every method in `backend.methods` of
+  dsm-package.yaml too.
+- Params: a `#[serde(deny_unknown_fields)]` struct and `params.decode()?`;
+  errors: `Error::new(code, message)`, `Error::bad_request(message)`,
+  `routes::internal(e)` for the unexpected. `ctx.runtime::<T>(op, &params)?`
+  passes the runtime's refusal on.
+- Test with `(cd backend && cargo test --locked)`, then
+  `cargo clippy --locked --all-targets -- -D warnings` and `cargo fmt --check`;
+  `test_support::call` plays the runtime. `rust-toolchain.toml` pins the
+  toolchain and the DSM targets; keep `Cargo.lock` committed.

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.9.9 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.10.1 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/cmd/app/main.go

@@ -11,6 +11,8 @@ import (
 	"net/http"
 	"net/http/cgi"
 	"os"
+	"strconv"
+	"time"
 
 	"github.com/synopackageland/syno-pkg-land-sdk/api"
 	"github.com/synopackageland/syno-pkg-land-sdk/dsm"
@@ -40,8 +42,20 @@ var (
 	// "on" when dsm-package.yaml declares portal: serves portal.status;
 	// "executor" below DSM 7.2, where the executor registers the entry.
 	portal = ""
+	// backend.timeout_seconds, 60 unless set.
+	requestTimeout = ""
 )
 
+// deadline is the CGI request deadline: requestTimeout seconds, or 60 when it
+// is unset or not a positive number.
+func deadline() api.DeadlineOption {
+	seconds, err := strconv.Atoi(requestTimeout)
+	if err != nil || seconds <= 0 {
+		seconds = 60
+	}
+	return api.Timeout(time.Duration(seconds) * time.Second)
+}
+
 func main() {
 	log.SetFlags(0)
 	log.SetPrefix(packageID + ": ")
@@ -104,7 +118,7 @@ func main() {
 	if standalone != nil {
 		handler = standalone.Wrap(handler)
 	}
-	if err := cgi.Serve(api.WithRequestDeadline(handler)); err != nil {
+	if err := cgi.Serve(api.WithRequestDeadline(handler, deadline())); err != nil {
 		log.Fatal(err)
 	}
 }

package/templates/native-go/backend/cmd/app/main_test.go

@@ -0,0 +1,33 @@
+package main
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	"github.com/synopackageland/syno-pkg-land-sdk/api"
+)
+
+func TestRequestDeadlineFollowsTheBuildSetting(t *testing.T) {
+	saved := requestTimeout
+	t.Cleanup(func() { requestTimeout = saved })
+	for setting, want := range map[string]time.Duration{
+		"":    60 * time.Second,
+		"120": 120 * time.Second,
+		"1":   time.Second,
+		"0":   60 * time.Second,
+		"-5":  60 * time.Second,
+		"x":   60 * time.Second,
+	} {
+		requestTimeout = setting
+		var left time.Duration
+		api.WithRequestDeadline(http.HandlerFunc(func(_ http.ResponseWriter, r *http.Request) {
+			d, _ := r.Context().Deadline()
+			left = time.Until(d)
+		}), deadline()).ServeHTTP(httptest.NewRecorder(), httptest.NewRequest("POST", "/", nil))
+		if left > want || left < want-time.Second {
+			t.Errorf("requestTimeout %q: deadline in %v, want %v", setting, left, want)
+		}
+	}
+}

package/templates/native-go/backend/go.mod

@@ -4,6 +4,6 @@ go 1.25.0
 
 toolchain go1.26.9
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.9.9
+require github.com/synopackageland/syno-pkg-land-sdk v0.10.1
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.9.9 h1:TUsblZtIwlBO0DpBTUOj6gd8+xTi60Y0CwkKNb+OR3M=
-github.com/synopackageland/syno-pkg-land-sdk v0.9.9/go.mod h1:hlsvaVuH2wsAoR8jzI1Rg/NeejQSFpAaN6zpIWsVbjI=
+github.com/synopackageland/syno-pkg-land-sdk v0.10.1 h1:XpuacZIACIiBljWRDGedVQ7SCRZnFqqeCBaGzENsnRo=
+github.com/synopackageland/syno-pkg-land-sdk v0.10.1/go.mod h1:hlsvaVuH2wsAoR8jzI1Rg/NeejQSFpAaN6zpIWsVbjI=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go/i18n/messages/de.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "Dieser Vorgang kann nicht ausgeführt werden. Bitte versuchen Sie es später erneut.",
   "error.session_required": "Verbindung abgelaufen. Melden Sie sich erneut an.",
   "error.unknown_method": "Dieser Vorgang kann nicht ausgeführt werden. Bitte versuchen Sie es später erneut.",
+  "error.app_unavailable": "Die App ist derzeit nicht verfügbar. Versuchen Sie es später erneut.",
+  "error.limit_exceeded": "Die Datei ist größer als zulässig.",
+  "error.read_failed": "Die Datei kann nicht gelesen werden. Bitte versuchen Sie es später erneut.",
+  "error.identity_unavailable": "Dieses Benutzerkonto kann nicht ermittelt werden. Bitte versuchen Sie es später erneut.",
   "greeting.adminOnly": "Nur Mitglieder der Gruppe administrators können den Gruß ändern.",
   "greeting.label": "Neuer Gruß",
   "greeting.save": "Speichern",

package/templates/native-go/i18n/messages/en.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "Unable to perform this operation. Please try again later.",
   "error.session_required": "Connection expired. Please sign in again.",
   "error.unknown_method": "Unable to perform this operation. Please try again later.",
+  "error.app_unavailable": "The App is not available right now. Try again later.",
+  "error.limit_exceeded": "The file is larger than allowed.",
+  "error.read_failed": "Unable to read the file. Please try again later.",
+  "error.identity_unavailable": "Unable to identify this user account. Please try again later.",
   "greeting.adminOnly": "Only members of the administrators group can change the greeting.",
   "greeting.label": "New greeting",
   "greeting.save": "Save",

package/templates/native-go/i18n/messages/es.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "No se puede realizar esta operación. Vuelva a intentarlo más tarde.",
   "error.session_required": "Conexión caducada. Vuelva a conectarse.",
   "error.unknown_method": "No se puede realizar esta operación. Vuelva a intentarlo más tarde.",
+  "error.app_unavailable": "La App no está disponible en este momento. Vuelva a intentarlo más tarde.",
+  "error.limit_exceeded": "El archivo supera el tamaño permitido.",
+  "error.read_failed": "No se puede leer el archivo. Vuelva a intentarlo más tarde.",
+  "error.identity_unavailable": "No se puede identificar esta cuenta de usuario. Vuelva a intentarlo más tarde.",
   "greeting.adminOnly": "Solo los miembros del grupo administrators pueden cambiar el saludo.",
   "greeting.label": "Nuevo saludo",
   "greeting.save": "Guardar",

package/templates/native-go/i18n/messages/fr.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "Impossible d'effectuer cette opération. Veuillez réessayer ultérieurement.",
   "error.session_required": "La connexion a expiré. Reconnectez-vous.",
   "error.unknown_method": "Impossible d'effectuer cette opération. Veuillez réessayer ultérieurement.",
+  "error.app_unavailable": "L’App n’est pas disponible pour le moment. Réessayez plus tard.",
+  "error.limit_exceeded": "Le fichier dépasse la taille autorisée.",
+  "error.read_failed": "Impossible de lire le fichier. Veuillez réessayer ultérieurement.",
+  "error.identity_unavailable": "Impossible d'identifier ce compte utilisateur. Veuillez réessayer ultérieurement.",
   "greeting.adminOnly": "Seuls les membres du groupe administrators peuvent modifier le message d'accueil.",
   "greeting.label": "Nouveau message d'accueil",
   "greeting.save": "Sauvegarder",

package/templates/native-go/i18n/messages/it.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "Impossibile eseguire questa operazione. Riprovare più tardi.",
   "error.session_required": "Connessione scaduta. Accedere nuovamente.",
   "error.unknown_method": "Impossibile eseguire questa operazione. Riprovare più tardi.",
+  "error.app_unavailable": "L’App non è al momento disponibile. Riprovare più tardi.",
+  "error.limit_exceeded": "Il file supera le dimensioni consentite.",
+  "error.read_failed": "Impossibile leggere il file. Riprovare più tardi.",
+  "error.identity_unavailable": "Impossibile identificare questo account utente. Riprovare più tardi.",
   "greeting.adminOnly": "Solo i membri del gruppo administrators possono modificare il saluto.",
   "greeting.label": "Nuovo saluto",
   "greeting.save": "Salva",

package/templates/native-go/i18n/messages/ja.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "この操作は実行できません。後でもう一度お試しください。",
   "error.session_required": "接続の期限が切れています。もう 1 度サイン インしてください。",
   "error.unknown_method": "この操作は実行できません。後でもう一度お試しください。",
+  "error.app_unavailable": "App は現在使用できません。しばらくしてから再試行してください。",
+  "error.limit_exceeded": "ファイルが許可されたサイズを超えています。",
+  "error.read_failed": "ファイルを読み取れません。後でもう一度お試しください。",
+  "error.identity_unavailable": "このユーザー アカウントを識別できません。後でもう一度お試しください。",
   "greeting.adminOnly": "あいさつを変更できるのは administrators グループのメンバーのみです。",
   "greeting.label": "新しいあいさつ",
   "greeting.save": "保存",

package/templates/native-go/i18n/messages/ko.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "이 작업을 수행할 수 없습니다. 나중에 다시 시도하십시오.",
   "error.session_required": "연결 만료됨. 다시 로그인 해 주십시오.",
   "error.unknown_method": "이 작업을 수행할 수 없습니다. 나중에 다시 시도하십시오.",
+  "error.app_unavailable": "현재 App을 사용할 수 없습니다. 나중에 다시 시도하십시오.",
+  "error.limit_exceeded": "파일이 허용된 크기를 초과합니다.",
+  "error.read_failed": "파일을 읽을 수 없습니다. 나중에 다시 시도하십시오.",
+  "error.identity_unavailable": "이 사용자 계정을 확인할 수 없습니다. 나중에 다시 시도하십시오.",
   "greeting.adminOnly": "administrators 그룹의 구성원만 인사말을 변경할 수 있습니다.",
   "greeting.label": "새 인사말",
   "greeting.save": "저장",

package/templates/native-go/i18n/messages/zh-CN.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "无法执行此操作。请稍后再试。",
   "error.session_required": "联机超时，请重新登录。",
   "error.unknown_method": "无法执行此操作。请稍后再试。",
+  "error.app_unavailable": "App 当前不可用，请稍后重试。",
+  "error.limit_exceeded": "文件超过允许的大小。",
+  "error.read_failed": "无法读取文件。请稍后再试。",
+  "error.identity_unavailable": "无法识别此用户帐号。请稍后再试。",
   "greeting.adminOnly": "只有 administrators 群组的成员可以更改问候语。",
   "greeting.label": "新的问候语",
   "greeting.save": "保存",

package/templates/native-go/i18n/messages/zh-TW.json

@@ -18,6 +18,10 @@
   "error.request_canceled": "無法執行此操作。請稍後再試。",
   "error.session_required": "連線逾時。請重新登入。",
   "error.unknown_method": "無法執行此操作。請稍後再試。",
+  "error.app_unavailable": "App 目前無法使用，請稍後再試。",
+  "error.limit_exceeded": "檔案超過允許的大小。",
+  "error.read_failed": "無法讀取檔案。請稍後再試。",
+  "error.identity_unavailable": "無法識別此使用者帳號。請稍後再試。",
   "greeting.adminOnly": "只有 administrators 群組的成員可以變更問候語。",
   "greeting.label": "新的問候語",
   "greeting.save": "儲存",

package/templates/native-go/ui/app.js

@@ -71,7 +71,8 @@
         [[t("status.user"), data.admin ? t("status.userAdmin", { user: data.user }) : data.user],
          [t("status.package"), data.package],
          [t("status.version"), data.version],
-         [t("status.backend"), data.go_version + " · " + data.platform],
+         // A Go backend reports go_version; a Python, Node.js or Rust App reports language.
+         [t("status.backend"), (data.language || data.go_version) + " · " + data.platform],
          [t("status.uid"), String(data.process.uid)]].forEach(function (row) {
           status.appendChild(el("dt", { text: row[0] }));
           status.appendChild(el("dd", { text: row[1] }));

package/templates/native-go-delegate/frontend/test/capability-panels.test.ts

@@ -5,6 +5,8 @@ import {AppRoot} from '@synopackageland/ui'
 import type {BackgroundSaveFacade} from '@synopackageland/sdk'
 import CapabilityPanels from '../src/CapabilityPanels.vue'
 import {mount} from '../src/main'
+import {holdsPages} from '../src/ExecutorGate.vue'
+import {dsmWindow} from './context'
 const cleanup:Array<()=>void>=[]
 afterEach(()=>cleanup.splice(0).forEach(fn=>fn()))
 async function settle(){for(let i=0;i<30;i++){await Promise.resolve();await nextTick()}}
@@ -66,7 +68,7 @@ test('the app mount forwards ctx.executor to administrator setup only',async()=>
    throw {code:'unknown_method'}
   })
   const root=document.createElement('div');document.body.append(root)
-  const app=mount(root,{locale:'en',call,reopen:()=>()=>{},executor:{status,authorize,control:vi.fn(async()=>({state:'ready' as const}))}} as any)
+  const app=mount(root,dsmWindow({call,executor:{status,authorize,control:vi.fn(async()=>({state:'ready' as const}))} as never}))
   cleanup.push(()=>{app.unmount();root.remove()});await settle()
   if(admin){
    expect(status).toHaveBeenCalled()
@@ -75,8 +77,9 @@ test('the app mount forwards ctx.executor to administrator setup only',async()=>
    password.closest('form')!.dispatchEvent(new Event('submit',{bubbles:true,cancelable:true}));await settle()
    expect(authorize).toHaveBeenCalledWith('one-time')
   }else{
-   expect(status).not.toHaveBeenCalled()
+   // With root-ops the App's pages also wait for the executor, which reads its status.
    expect(root.querySelector('input[type=password]')).toBeNull()
+   expect(authorize).not.toHaveBeenCalled()
   }
  }
 })
@@ -90,7 +93,7 @@ test('the header Refresh reloads the save destinations',async()=>{
    throw {code:'unknown_method'}
  })
  const root=document.createElement('div');document.body.append(root)
- const app=mount(root,{locale:'en',call,reopen:()=>()=>{}} as any)
+ const app=mount(root,dsmWindow({call}))
  cleanup.push(()=>{app.unmount();root.remove()});await settle()
  const reads=()=>call.mock.calls.filter(([method])=>method==='delegate.destination').length
  const before=reads();expect(before).toBeGreaterThan(0)
@@ -102,3 +105,21 @@ test('the panels show a skeleton while the delegate status loads',async()=>{
  const root=render({call,locale:'en'});await settle()
  expect(root.querySelector('[data-ui-skeleton-line]')).not.toBeNull()
 })
+// AppShell's ExecutorNotice: a delegate App's pages stay while the executor waits for approval.
+// With root-ops, ExecutorGate holds the pages instead (its own test).
+test.skipIf(holdsPages)('an executor awaiting approval adds a notice above the pages and holds none of them back',async()=>{
+ const status=vi.fn(async()=>({state:'needs-admin-approval' as const}))
+ const call=vi.fn(async(method:string)=>{
+  if(method==='app.status')return {package:'DelegateApp',version:'1',user:'admin',admin:true}
+  if(method==='greeting.get')return {text:'Hello'}
+  if(method==='delegate.status')return {state:'needs-admin-approval'}
+  if(method==='delegate.list')return {delegations:[]}
+  throw {code:'unknown_method'}
+ })
+ const root=document.createElement('div');document.body.append(root)
+ const app=mount(root,dsmWindow({call,user:{name:'admin',isAdmin:true},executor:{status,authorize:vi.fn(),control:vi.fn()} as never}))
+ cleanup.push(()=>{app.unmount();root.remove()});await settle()
+ expect(root.textContent).toContain('Some features are unavailable until you approve system access for this app.')
+ expect(root.textContent).toContain('Package status')
+ expect((root.querySelector('textarea') as HTMLTextAreaElement).value).toBe('Hello')
+})

package/templates/native-go-jobs/frontend/test/background-page.test.ts

@@ -2,7 +2,7 @@
 import {expect,test,vi} from 'vitest'
 import {nextTick} from 'vue'
 import {mount} from '../src/main'
-import type {Context} from '@synopackageland/sdk'
+import {dsmWindow} from './context'
 async function settle(){for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}}
 // The CLI turns the background page on for jobs (and delegate) projects only.
 test('a jobs project mounts the background panel for the signed-in user',async()=>{
@@ -11,7 +11,7 @@ test('a jobs project mounts the background panel for the signed-in user',async()
   throw {code:'unknown_method'}
  })
  const root=document.createElement('div');document.body.append(root)
- const app=mount(root,{locale:'en',call,reopen:()=>()=>{}} as unknown as Context)
+ const app=mount(root,dsmWindow({call}))
  try{
   await settle()
   expect(call.mock.calls.some(([method])=>method.startsWith('bg.'))).toBe(true)
@@ -29,7 +29,7 @@ test('the background panel pauses a running job and resumes a paused one',async(
   return {}
  })
  const root=document.createElement('div');document.body.append(root)
- const app=mount(root,{locale:'en',call,reopen:()=>()=>{}} as unknown as Context)
+ const app=mount(root,dsmWindow({call}))
  const button=(id:string,label:string)=>Array.from(root.querySelectorAll(`[data-job-id="${id}"] button`)).find(b=>b.textContent===label) as HTMLButtonElement|undefined
  try{
   await settle()
@@ -48,7 +48,7 @@ test('the header Refresh reloads the background panel',async()=>{
   return {}
  })
  const root=document.createElement('div');document.body.append(root)
- const app=mount(root,{locale:'en',call,reopen:()=>()=>{}} as unknown as Context)
+ const app=mount(root,dsmWindow({call}))
  const reads=()=>call.mock.calls.filter(([method])=>method==='bg.jobs.list').length
  try{
   await settle();const before=reads()

package/templates/native-go-root-ops/backend/internal/app/executor.go

@@ -5,79 +5,16 @@ import (
 	"encoding/json"
 	"errors"
 	"net/http"
-	"os"
 	"path/filepath"
-	"strings"
 	"time"
 
 	"github.com/synopackageland/syno-pkg-land-sdk/api"
 	"github.com/synopackageland/syno-pkg-land-sdk/delegate"
 )
 
+// executor.status and executor.control are the SDK's, as the bridge runtime serves them.
 func (cfg Config) rootRoutes() []api.Route {
-	return []api.Route{
-		api.Handle("executor.control", cfg.executorControl),
-		api.Handle("executor.status", cfg.executorStatus),
-		api.HandleRequest("root.run", cfg.executorRootRun),
-	}
-}
-
-// API permissions default to administrators for unlisted methods. Check here
-// too: control mutates the fixed package-owned control file before DSM run.
-func (cfg Config) executorControl(_ context.Context, caller api.Caller, raw json.RawMessage) (any, error) {
-	if !caller.Admin() {
-		return nil, errors.New("admin_required")
-	}
-	var in struct {
-		Action string `json:"action"`
-	}
-	if err := decodeParams(raw, &in); err != nil {
-		return nil, err
-	}
-	if in.Action != "start" && in.Action != "stop" && in.Action != "purge" {
-		return nil, api.BadRequest("executor_control_invalid")
-	}
-	dir := filepath.Join(cfg.DataDir, "executor")
-	if err := os.MkdirAll(dir, 0700); err != nil {
-		return nil, err
-	}
-	info, err := os.Lstat(dir)
-	if err != nil || !info.IsDir() || info.Mode()&os.ModeSymlink != 0 {
-		return nil, errors.New("executor_control_directory_invalid")
-	}
-	if err := writeFileAtomic(filepath.Join(dir, "control"), []byte(in.Action)); err != nil {
-		return nil, err
-	}
-	return map[string]bool{"written": true}, nil
-}
-
-// The executor closes its socket while paused: the package is stopped, or an
-// upgrade changed the pins and awaits administrator approval.
-func (cfg Config) executorStatus(ctx context.Context, _ api.Caller, _ json.RawMessage) (any, error) {
-	var status json.RawMessage
-	err := cfg.executor().Call(ctx, "status", nil, nil, &status)
-	var refusal *api.Error
-	if errors.As(err, &refusal) && refusal.Code == delegate.CodeExecutorUnavailable {
-		next := "Start the package."
-		if cfg.startRequested() {
-			next = "The package is running: an administrator approves background access again in Administrator setup; the executor log names the cause."
-		}
-		return map[string]any{"ready": false, "state": "paused", "reason": "executor_not_listening", "next": next}, nil
-	}
-	return status, err
-}
-
-// Package start and stop write the lifecycle mailbox; its last request tells a
-// stopped package from a running one whose executor stays paused.
-func (cfg Config) startRequested() bool {
-	f, err := os.Open(filepath.Join(cfg.DataDir, "executor", "control"))
-	if err != nil {
-		return false
-	}
-	defer f.Close()
-	b := make([]byte, 16)
-	n, _ := f.Read(b)
-	return strings.TrimSpace(string(b[:n])) == "start"
+	return append(delegate.ExecutorRoutes(cfg.executor(), cfg.DataDir), api.HandleRequest("root.run", cfg.executorRootRun))
 }
 
 func (cfg Config) executorRootRun(ctx context.Context, caller api.Caller, req *http.Request, raw json.RawMessage) (any, error) {