@synopackageland/templates 0.9.9 → 0.10.1

package/templates/native-go-root-ops/backend/internal/app/executor_test.go

@@ -20,39 +20,20 @@ func init() {
 	sampleOutcome["root.run"] = "session_required"
 }
 
-func TestExecutorControlAcceptsOnlyFixedActions(t *testing.T) {
-	cfg := testConfig(t)
-	for _, action := range []string{"start", "stop", "purge"} {
-		code, out := call(t, cfg, alice, "executor.control", `{"action":"`+action+`"}`)
-		if code != "" {
-			t.Fatalf("%s: %s %v", action, code, out)
-		}
-		b, err := os.ReadFile(filepath.Join(cfg.DataDir, "executor/control"))
-		if err != nil || string(b) != action {
-			t.Fatalf("control was not written: %s %v", b, err)
-		}
-	}
-	for _, raw := range []string{`{"action":"start;id"}`, `{"action":"start\nstop"}`, `{"action":""}`, `{"action":"stop","path":"/etc/passwd"}`} {
-		if code, _ := call(t, cfg, alice, "executor.control", raw); code != "bad_request" {
-			t.Fatalf("accepted %s: %s", raw, code)
+// The SDK serves executor.status and executor.control and tests them; the
+// App only registers them.
+func TestTheSDKsExecutorRoutesAreRegistered(t *testing.T) {
+	registered := map[string]bool{}
+	for _, r := range Routes(testConfig(t)) {
+		registered[r.Method()] = true
+	}
+	for _, method := range []string{"executor.status", "executor.control", "root.run"} {
+		if !registered[method] {
+			t.Errorf("%s is not registered", method)
 		}
 	}
 }
 
-func TestExecutorControlRejectsSymlinkDirectory(t *testing.T) {
-	cfg := testConfig(t)
-	outside := t.TempDir()
-	if err := os.Symlink(outside, filepath.Join(cfg.DataDir, "executor")); err != nil {
-		t.Fatal(err)
-	}
-	if code, _ := call(t, cfg, alice, "executor.control", `{"action":"stop"}`); code == "" {
-		t.Fatal("accepted symlink")
-	}
-	if _, err := os.Stat(filepath.Join(outside, "control")); !os.IsNotExist(err) {
-		t.Fatal("wrote outside data directory")
-	}
-}
-
 func TestExecutorRootRunRequiresCurrentDSMCookie(t *testing.T) {
 	t.Setenv("HTTP_COOKIE", "")
 	if code, _ := call(t, testConfig(t), alice, "root.run", `{"name":"whoami"}`); code == "" {
@@ -60,59 +41,6 @@ func TestExecutorRootRunRequiresCurrentDSMCookie(t *testing.T) {
 	}
 }
 
-// The executor closes its listener while paused (package stopped, or pins
-// awaiting administrator approval). Status then answers, not "internal".
-func TestExecutorStatusReportsAPausedExecutor(t *testing.T) {
-	cfg := testConfig(t)
-	useExecutorSocketBase(t)
-	check := func(name string) {
-		t.Helper()
-		code, envelope := call(t, cfg, alice, "executor.status", `{}`)
-		out, _ := envelope["data"].(map[string]any)
-		if code != "" || out["ready"] != false || out["state"] != "paused" || out["reason"] != "executor_not_listening" || out["next"] == "" || out["next"] == nil {
-			t.Fatalf("%s: %s %v", name, code, out)
-		}
-	}
-	check("no socket")
-	if code, _ := call(t, cfg, bob, "executor.status", `{}`); code != "" {
-		t.Fatal("authenticated user cannot read a paused status", code)
-	}
-	dir := filepath.Join(executorSocketBase, cfg.PackageID)
-	os.MkdirAll(dir, 0700)
-	ln, err := net.ListenUnix("unix", &net.UnixAddr{Name: filepath.Join(dir, "executor.sock"), Net: "unix"})
-	if err != nil {
-		t.Fatal(err)
-	}
-	ln.SetUnlinkOnClose(false)
-	ln.Close()
-	check("closed listener")
-}
-
-// next follows the last lifecycle request: a running package needs approval
-// again, not a start.
-func TestExecutorStatusNextFollowsTheLifecycleRequest(t *testing.T) {
-	cfg := testConfig(t)
-	useExecutorSocketBase(t)
-	next := func() string {
-		t.Helper()
-		_, envelope := call(t, cfg, alice, "executor.status", `{}`)
-		out, _ := envelope["data"].(map[string]any)
-		s, _ := out["next"].(string)
-		return s
-	}
-	if !strings.HasPrefix(next(), "Start the package.") {
-		t.Fatal("no request:", next())
-	}
-	mailbox := filepath.Join(cfg.DataDir, "executor")
-	os.MkdirAll(mailbox, 0700)
-	for request, start := range map[string]bool{"stop\n": true, "start\n": false, "start": false} {
-		os.WriteFile(filepath.Join(mailbox, "control"), []byte(request), 0600)
-		if got := next(); strings.HasPrefix(got, "Start the package") != start || got == "" {
-			t.Fatalf("%q: %s", request, got)
-		}
-	}
-}
-
 // fakeExecutor answers each v1 request with replies[op] and records the ops.
 type fakeExecutor struct {
 	mu  sync.Mutex

package/templates/native-go-root-ops/frontend/src/ExecutorGate.vue

@@ -0,0 +1,16 @@
+<script lang="ts">
+// A root-ops App's pages wait for its executor: the SDK's ExecutorApproval
+// takes their place until an administrator approves it with the DSM
+// password, and tells anyone else to ask one. Without ctx.executor (a dev
+// server) there is nothing to approve.
+export const holdsPages = true
+</script>
+<script setup lang="ts">
+import type {Context} from '@synopackageland/sdk'
+import {ExecutorApproval} from '@synopackageland/sdk/vue'
+defineProps<{ctx:Context;admin:boolean}>()
+</script>
+<template>
+ <ExecutorApproval v-if="ctx.executor" :admin="admin" :locale="ctx.locale" :ctx="ctx"><slot /></ExecutorApproval>
+ <slot v-else />
+</template>

package/templates/native-go-root-ops/frontend/test/executor-gate.test.ts

@@ -0,0 +1,60 @@
+// @vitest-environment jsdom
+import {afterEach,expect,test,vi} from 'vitest'
+import {nextTick} from 'vue'
+import type {Context} from '@synopackageland/sdk'
+import {mount} from '../src/main'
+import {dsmWindow} from './context'
+const cleanup:Array<()=>void>=[]
+afterEach(()=>cleanup.splice(0).forEach(fn=>fn()))
+async function settle(){for(let i=0;i<30;i++){await Promise.resolve();await nextTick()}}
+function open(admin:boolean,executor?:Context['executor']){
+ const call=vi.fn(async(method:string)=>{
+  if(method==='app.status')return {package:'Root',version:'1',user:admin?'admin':'alice',admin}
+  if(method==='greeting.get')return {text:'Hello Root'}
+  if(method==='delegate.status')return {state:'ready',disabled:false,lifetime:'until-revoked',destinations:['save']}
+  if(method==='delegate.destination')return {key:'save',selection:{scope:'home',root:'/home',generation:0},destination:null,status:'missing'}
+  if(method==='delegate.list')return {delegations:[]}
+  if(method==='delegate.operations.list')return {operations:[]}
+  throw {code:'unknown_method'}
+ })
+ const root=document.createElement('div');document.body.append(root)
+ const app=mount(root,dsmWindow({call,user:{name:admin?'admin':'alice',isAdmin:admin},executor}))
+ cleanup.push(()=>{app.unmount();root.remove()})
+ return root
+}
+function awaitingApproval(){
+ let state:'needs-admin-approval'|'ready'='needs-admin-approval'
+ return {status:vi.fn(async()=>({state})),authorize:vi.fn(async()=>{state='ready';return {state}}),control:vi.fn(async()=>({state}))}
+}
+test('the App pages wait until an administrator approves the executor with the DSM password, in the window',async()=>{
+ const executor=awaitingApproval()
+ const root=open(true,executor as unknown as Context['executor']);await settle()
+ expect(root.textContent).not.toContain('Package status')
+ expect(root.querySelector('[role=dialog]')).toBeNull()
+ const password=root.querySelector<HTMLInputElement>('input[type=password]')!
+ expect(password.closest('[data-ui-app]')).not.toBeNull()
+ password.value='one-time';password.dispatchEvent(new Event('input',{bubbles:true}));await settle()
+ password.closest('form')!.dispatchEvent(new Event('submit',{bubbles:true,cancelable:true}));await settle()
+ expect(executor.authorize).toHaveBeenCalledWith('one-time')
+ expect(root.textContent).toContain('Package status')
+ expect((root.querySelector('textarea') as HTMLTextAreaElement).value).toBe('Hello Root')
+})
+test('anyone else is told to ask an administrator for system access',async()=>{
+ const root=open(false,awaitingApproval() as unknown as Context['executor']);await settle()
+ expect(root.textContent).toContain('An administrator must approve system access')
+ expect(root.querySelector('input[type=password]')).toBeNull()
+ expect(root.textContent).not.toContain('Package status')
+})
+test('without an executor (a dev server) the App pages show at once',async()=>{
+ const root=open(false);await settle()
+ expect(root.textContent).toContain('Package status')
+ expect(root.textContent).not.toContain('An administrator must approve system access')
+})
+// ExecutorApproval holds the pages: AppShell's ExecutorNotice would only repeat it.
+test('while the executor awaits approval no notice repeats the approval page',async()=>{
+ for(const admin of [true,false]){
+  const root=open(admin,awaitingApproval() as unknown as Context['executor']);await settle()
+  expect(root.textContent,String(admin)).toContain(admin?'Approve system access':'An administrator must approve system access')
+  expect(root.textContent,String(admin)).not.toContain('Some features are unavailable')
+ }
+})

package/templates/native-go-vue/README.md

@@ -19,7 +19,11 @@ The base app reads package status and edits the package greeting through
 subscriptions; unmount disposes subscriptions and ignores late responses.
 
 `--with root-ops` adds the existing DSM approval gate for fixed `root/*.sh`
-operations. `--with jobs` adds package-account jobs and schedules; it combines with root-ops and files. `--with files` enables current-session File Station access,
+operations, and its `ExecutorGate.vue` holds the pages with the SDK's
+`ExecutorApproval` until the executor is approved: an administrator approves
+with the DSM password, anyone else is told to ask one. A delegate App keeps its
+pages: `AppShell` shows the SDK's `ExecutorNotice` above them while its
+executor waits for approval. `--with jobs` adds package-account jobs and schedules; it combines with root-ops and files. `--with files` enables current-session File Station access,
 and the background picker uses the retained session provider.
 
 With `portal:` declared (`synopkgland add portal`, executor Apps only), the status page shows
@@ -33,14 +37,26 @@ Generated build and unit tests do not establish NAS runtime acceptance.
 The manifest is dsm-package.yaml schema 2: backend.kind: go and capabilities.files: session, jobs: true, identity: standalone, rootOps: true. Use --with login to declare standalone identity. Existing projects use synopkgland add <cap>...; app entrypoints stay app-owned, SDK conflicts are refused. check, inspect, build, deploy and status accept --json.
 
 Use the installed `@synopackageland/ui`; package.json pins its version.
-`AppRoot` defaults to app modal scope and stays bounded at `height: 100%`;
-`AppLayout wide-layout="window"` keeps the DSM shell in window mode even when
-maximized. Only whole-page web/Portal apps should opt into document scope or
-`wide-layout="web"`. The DSM host sets the 700px minimum window width.
-In a DSM window (`ctx.host.platform().host === 'dsm'`) `AppRoot` takes
+`App.vue` lays the shell out with the SDK's `AppShell` (`@synopackageland/sdk/vue`):
+`pages` from `shellPages`, the header buttons in `#actions` and the pages in its
+default slot. Given `ctx`, it follows the launch. In a DSM desktop window it
+keeps `wide-layout="window"`, even maximized; the DSM host sets the 700px
+minimum window width. A Portal or standalone launch owns the whole page
+(`ctx.fullPage`, from the generated window): `AppShell` takes
+`wide-layout="web"` (the SaaS layout at 1200px or wider, mobile on a phone) and
+a device-width viewport, undone at unmount, since DSM's page has no
+device-width viewport. Its full-page sidebar names the App with
+`ctx.displayName` and `ctx.appIcon` (without them the page title and icon) and
+shows the signed-in DSM account and its role from `ctx.user`. See the ui's
+`docs/adaptive-layout.md`.
+`AppShell`'s `app-root` wraps it in an app-local `AppRoot` (app modal scope, on
+a full page as well, bounded at `height: 100%`) with the UI locale from
+`locale`; do not add another `AppRoot`.
+In a DSM window (not a full page) that `AppRoot` takes
 `dialog-bounds="viewport"`, so Dialogs can be dragged out of the window, and
-its `activate` event calls `ctx.host.activateWindow()` to bring the window to
-the front. Elsewhere Dialogs stay inside the App.
+pressing one calls `ctx.host.activateWindow()` to bring the window to the
+front. Elsewhere Dialogs stay inside the App. A confirmed sign-in need sets
+`denied`: the `#denied` slot's `LoginPage` takes the place of the App's pages.
 Import `themes/dsm7-embedded.css` and assign each mount a unique
 `app.config.idPrefix` before mounting.
 

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,8 +7,8 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.9.9",
-        "@synopackageland/ui": "0.9.3",
+        "@synopackageland/sdk": "0.10.1",
+        "@synopackageland/ui": "0.9.4",
         "vue": "3.5.43"
       },
       "devDependencies": {
@@ -1148,13 +1148,13 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.9.9",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.9.9.tgz",
-      "integrity": "sha512-O73D+s+yJPmYLfZ2l261S1izqa5lAc9hgbuBScE4uoKyydUDfWEhAmb7CUM6Er25wY8nYqG480GMcyfLuESFGw==",
+      "version": "0.10.1",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.10.1.tgz",
+      "integrity": "sha512-gs127yFWWYkrNS9lNK/2oHcQ2l0KkhH8dhOAqOScDoGvON212vweVczStdkraesn5Gway+aIMoBqz18uSsD/OA==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",
-        "@synopackageland/ui": "^0.9.3",
+        "@synopackageland/ui": "^0.9.4",
         "vue": "^3.5.0"
       },
       "peerDependenciesMeta": {
@@ -1167,9 +1167,9 @@
       }
     },
     "node_modules/@synopackageland/ui": {
-      "version": "0.9.3",
-      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.9.3.tgz",
-      "integrity": "sha512-CcCpSiQ2y4GJnbWjBxRrPO6QzLboMdEzqgbMdpXGaEI3IaTrxwS6zy8yXuuMBQHuqAcfBf3jL7fmcL9A58oVqw==",
+      "version": "0.9.4",
+      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.9.4.tgz",
+      "integrity": "sha512-yu0RrYtT/QcAn/lNwqZBoqqjLTXrpqqnSWB+0swGou8IWLrhfwXrHVBf+oJc+NjLj+G4kB7AyP9kbvw9FHxNOA==",
       "license": "MIT",
       "dependencies": {
         "@internationalized/date": "3.12.4",

package/templates/native-go-vue/frontend/package.json

@@ -8,8 +8,8 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.9.9",
-    "@synopackageland/ui": "0.9.3",
+    "@synopackageland/sdk": "0.10.1",
+    "@synopackageland/ui": "0.9.4",
     "vue": "3.5.43"
   },
   "devDependencies": {

package/templates/native-go-vue/frontend/src/App.vue

@@ -1,12 +1,15 @@
 <script setup lang="ts">
 import {computed, onMounted, onUnmounted, ref, watch} from 'vue'
-import {AppRoot, ConfigProvider, Button, Callout, Form, FormActions, FormItem, SettingsSection, Textarea} from '@synopackageland/ui'
-import type {AppStatus, Context, ShellPage} from '@synopackageland/sdk'
-import {AppShell, BackgroundPanel, FilesPage, LoginPage, PortalSettings, createSession, shellPages, uiLocale} from '@synopackageland/sdk/vue'
+import {Button, Callout, Form, FormActions, FormItem, SettingsSection, Textarea} from '@synopackageland/ui'
+import {bridgeErrorCopy, type AppStatus, type Context, type ShellPage} from '@synopackageland/sdk'
+import {AppShell, BackgroundPanel, FilesPage, LoginPage, PortalSettings, createSession, shellPages} from '@synopackageland/sdk/vue'
 import {appCopy} from './i18n'
 import CapabilityPanels from './CapabilityPanels.vue'
+import ExecutorGate, {holdsPages} from './ExecutorGate.vue'
 const props = defineProps<{ctx: Context}>()
 const login = createSession(props.ctx)
+// Pages ExecutorGate holds need no notice above them that repeats its approval.
+const shellCtx = holdsPages ? {...props.ctx, executor: undefined} : props.ctx
 const copy = computed(() => appCopy(props.ctx.locale))
 const app = ref<AppStatus>()
 const busy = ref(false)
@@ -17,17 +20,16 @@ let disposed = false
 let unsubscribe: (() => void) | undefined
 // The CLI substitutes this only for a declared package-account background worker.
 const backgroundEnabled = (('__BACKGROUND_ENABLED__') as string) === 'true'
-// In a DSM window, dialogs may leave the window as DSM's own do; a press on one
-// does not reach the window, so it brings the window to the front itself.
-const inDsmWindow = props.ctx.host?.platform().host === 'dsm'
-function toFront() {props.ctx.host.activateWindow()}
 const page = ref<ShellPage>('status')
 const pages = computed(() => shellPages({background:backgroundEnabled}))
+// Only a confirmed sign-in need replaces the App's pages; the sign-in page draws its own title.
+const signIn = computed(() => login.ready.value && login.enabled.value && !login.subject.value && {header: false as const})
 const subtitle = computed(() => app.value ? `${app.value.package} · ${app.value.user} · ${app.value.version}` : undefined)
 function message(e: unknown) {
  const code = (e as {code?: string})?.code || 'request_failed'
  const errors = copy.value.errors as Record<string, string>
- return (code !== 'request_failed' && errors[code]) || errors.request_failed!.replace('{code}', code)
+ // A bridge App's runtime adds codes (app_unavailable, a service's refusal) the SDK words.
+ return bridgeErrorCopy(e, props.ctx.locale) ?? ((code !== 'request_failed' && errors[code]) || errors.request_failed!.replace('{code}', code))
 }
 let again = false
 async function refresh() {
@@ -76,33 +78,31 @@ onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose();text.value=''})
 </script>
 
 <template>
- <AppRoot modal-scope="app" :dialog-bounds="inDsmWindow ? 'viewport' : 'app'" style="height: 100%" @activate="toFront">
-  <ConfigProvider :locale="uiLocale(ctx.locale)">
-  <LoginPage v-if="login.ready.value && login.enabled.value && !login.subject.value" :session="login" :locale="ctx.locale" />
-  <AppShell v-else v-model="page" :locale="ctx.locale" :pages="pages" :description="subtitle">
-   <template #actions><Button variant="secondary" :disabled="busy" @click="refreshAll">{{ copy.refresh }}</Button><Button v-if="login.enabled.value" variant="secondary" :disabled="busy" @click="signOut">{{ copy.signOut }}</Button></template>
-   <div class="integration-app" :aria-busy="busy" :aria-label="copy.settings">
-    <Callout v-if="error" tone="danger" :title="copy.actionRequired"><span role="alert">{{ error }}</span></Callout>
-    <p v-if="notice" role="status">{{ notice }}</p>
-    <div data-page="status" v-show="page==='status'">
-     <SettingsSection :title="copy.statusTitle" :collapsible="false" :loading="busy && !app">
-      <p v-if="app">{{ app.package }} · {{ app.user }} · {{ app.version }}</p>
-      <p v-else-if="error" role="status">{{ copy.statusError }}</p>
-     </SettingsSection>
-     <PortalSettings v-if="ctx.portal && app" :key="portalKey" :portal="ctx.portal" />
-     <SettingsSection v-if="app?.admin" :title="copy.greeting" :collapsible="false">
-      <Form direction="vertical" @submit.prevent="save"><FormItem :label="copy.greeting"><Textarea v-model="text" :disabled="busy" /></FormItem>
-       <FormActions><Button variant="primary" :disabled="busy || !text.trim()" @click="save">{{ copy.save }}</Button></FormActions>
-      </Form>
-     </SettingsSection>
-    </div>
-    <CapabilityPanels v-if="app" ref="panels" :key="app.user" :ctx="ctx" :admin="app.admin" />
-    <FilesPage v-if="page==='status'" :ctx="ctx" />
-    <div data-page="background" v-show="page==='background'">
-     <BackgroundPanel v-if="backgroundEnabled && app" ref="background" :key="app.user" :ctx="ctx" />
-    </div>
+ <AppShell app-root v-model="page" :ctx="shellCtx" :locale="ctx.locale" :pages="pages" :description="subtitle" :denied="signIn" sidebar-storage-key="__PACKAGE__">
+  <template #denied><LoginPage :session="login" :locale="ctx.locale" /></template>
+  <template #actions><Button variant="secondary" :disabled="busy" @click="refreshAll">{{ copy.refresh }}</Button><Button v-if="login.enabled.value" variant="secondary" :disabled="busy" @click="signOut">{{ copy.signOut }}</Button></template>
+  <ExecutorGate :ctx="ctx" :admin="ctx.user?.isAdmin ?? !!app?.admin">
+  <div class="integration-app" :aria-busy="busy" :aria-label="copy.settings">
+   <Callout v-if="error" tone="danger" :title="copy.actionRequired"><span role="alert">{{ error }}</span></Callout>
+   <p v-if="notice" role="status">{{ notice }}</p>
+   <div data-page="status" v-show="page==='status'">
+    <SettingsSection :title="copy.statusTitle" :collapsible="false" :loading="busy && !app">
+     <p v-if="app">{{ app.package }} · {{ app.user }} · {{ app.version }}</p>
+     <p v-else-if="error" role="status">{{ copy.statusError }}</p>
+    </SettingsSection>
+    <PortalSettings v-if="ctx.portal && app" :key="portalKey" :portal="ctx.portal" />
+    <SettingsSection v-if="app?.admin" :title="copy.greeting" :collapsible="false">
+     <Form direction="vertical" @submit.prevent="save"><FormItem :label="copy.greeting"><Textarea v-model="text" :disabled="busy" /></FormItem>
+      <FormActions><Button variant="primary" :disabled="busy || !text.trim()" @click="save">{{ copy.save }}</Button></FormActions>
+     </Form>
+    </SettingsSection>
    </div>
-  </AppShell>
-  </ConfigProvider>
- </AppRoot>
+   <CapabilityPanels v-if="app" ref="panels" :key="app.user" :ctx="ctx" :admin="app.admin" />
+   <FilesPage v-if="page==='status'" :ctx="ctx" />
+   <div data-page="background" v-show="page==='background'">
+    <BackgroundPanel v-if="backgroundEnabled && app" ref="background" :key="app.user" :ctx="ctx" />
+   </div>
+  </div>
+  </ExecutorGate>
+ </AppShell>
 </template>

package/templates/native-go-vue/frontend/src/ExecutorGate.vue

@@ -0,0 +1,10 @@
+<script lang="ts">
+// The App's pages, shown at once. The root-ops overlay replaces this file to
+// hold them until an administrator approves the executor.
+export const holdsPages = false
+</script>
+<script setup lang="ts">
+import type {Context} from '@synopackageland/sdk'
+defineProps<{ctx:Context;admin:boolean}>()
+</script>
+<template><slot /></template>

package/templates/native-go-vue/frontend/test/apps.test.ts

@@ -2,7 +2,8 @@
 import {expect,test,vi} from 'vitest'
 import {nextTick} from 'vue'
 import {mount} from '../src/main'
-import type {Context} from '@synopackageland/sdk'
+import {createStandaloneContext, type Context} from '@synopackageland/sdk'
+import {dsmWindow} from './context'
 async function settle(){for(let i=0;i<16;i++){await Promise.resolve();await nextTick()}}
 function fixture(id:string){
  const reopen:Array<()=>void>=[]
@@ -12,7 +13,7 @@ function fixture(id:string){
   if(method==='greeting.set')return {}
   throw {code:'unknown_method'}
  })
- const ctx={locale:'en',call,reopen(fn:()=>void){reopen.push(fn);return ()=>{}}} as Context
+ const ctx=dsmWindow({call,reopen(fn:()=>void){reopen.push(fn);return ()=>{}}})
  const root=document.createElement('div');document.body.append(root)
  const app=mount(root,ctx)
  return {root,app,call,reopen,ctx,close(){app.unmount();root.remove()}}
@@ -78,7 +79,7 @@ test('the app renders and loads status while the session check is still pending'
   if(method==='greeting.get')return {text:'Hello Eager'}
   throw {code:'unknown_method'}
  })
- const ctx={locale:'en',call,reopen(){return ()=>{}}} as unknown as Context
+ const ctx=dsmWindow({call})
  const root=document.createElement('div');document.body.append(root)
  const app=mount(root,ctx)
  try{
@@ -99,7 +100,7 @@ test('a status request that raced the session check is retried once the session
   if(method==='greeting.get')return {text:'Hello Raced'}
   throw {code:'unknown_method'}
  })
- const ctx={locale:'en',call,reopen(){return ()=>{}}} as unknown as Context
+ const ctx=dsmWindow({call})
  const root=document.createElement('div');document.body.append(root)
  const app=mount(root,ctx)
  try{
@@ -108,13 +109,14 @@ test('a status request that raced the session check is retried once the session
   expect(root.textContent).toContain('Raced · admin · 1')
  }finally{app.unmount();root.remove()}
 })
-function hosted(host?:'dsm'|'standalone-web'){
+function hosted(host:'dsm'|'standalone-web'){
  const call=vi.fn(async(method:string)=>{
   if(method==='app.status')return {package:'Hosted',version:'1',user:'admin',admin:false}
   throw {code:'unknown_method'}
  })
- const activateWindow=vi.fn(()=>({status:'requested'}))
- const ctx={locale:'en',call,reopen(){return ()=>{}},...(host?{host:{platform:()=>({host}),activateWindow}}:{})} as unknown as Context
+ // Outside DSM the App owns the page.
+ const ctx=host==='dsm'?dsmWindow({call}):createStandaloneContext({call})
+ const activateWindow=ctx.host.activateWindow
  const root=document.createElement('div');document.body.append(root)
  const app=mount(root,ctx)
  return {activateWindow,close(){app.unmount();root.remove()}}
@@ -140,10 +142,8 @@ test('on a narrow viewport the floating dialogs become sheets that stay on scree
  }finally{f.close();Object.defineProperty(window,'innerWidth',{configurable:true,value:width})}
 })
 test('outside a DSM window dialogs stay inside the app',async()=>{
- for(const host of [undefined,'standalone-web'] as const){
-  const f=hosted(host)
-  try{await settle();expect(document.querySelector('[data-ui-floating]')).toBeNull()}finally{f.close()}
- }
+ const f=hosted('standalone-web')
+ try{await settle();expect(document.querySelector('[data-ui-floating]')).toBeNull()}finally{f.close()}
 })
 test('the status page follows the UI layout rules',async()=>{
  let answer:(value:unknown)=>void=()=>{}
@@ -153,7 +153,7 @@ test('the status page follows the UI layout rules',async()=>{
   throw {code:'unknown_method'}
  })
  const root=document.createElement('div');document.body.append(root)
- const app=mount(root,{locale:'en',call,reopen:()=>()=>{}} as unknown as Context)
+ const app=mount(root,dsmWindow({call}))
  try{
   await settle()
   // A loading section keeps its title and shows a skeleton, not a sentence.
@@ -166,3 +166,56 @@ test('the status page follows the UI layout rules',async()=>{
   expect(root.querySelector('textarea')!.closest('[data-form-item]')!.getAttribute('data-direction')).toBe('vertical')
  }finally{app.unmount();root.remove()}
 })
+test('a code the bridge runtime adds shows the SDK text in the DSM language',async()=>{
+ const f=fixture('Bridge')
+ try{
+  await settle();f.call.mockRejectedValue({code:'app_unavailable'});f.reopen.forEach(fn=>fn());await settle()
+  expect(f.root.textContent).toContain('The App is not available right now. Try again later.')
+ }finally{f.close()}
+})
+test('a Portal or standalone launch lays the App out full-page; a DSM window keeps the window layout',async()=>{
+ // jsdom lays nothing out: give every element a wide desktop width.
+ const box=vi.spyOn(HTMLElement.prototype,'getBoundingClientRect').mockReturnValue({width:1400,height:800} as DOMRect)
+ const viewport=()=>document.head.querySelector('meta[name="viewport"]')
+ const window=fixture('Window')
+ const call=vi.fn(async(method:string)=>method==='app.status'?{package:'Page',version:'1',user:'alice',admin:false}:{})
+ const ctx=createStandaloneContext({call,displayName:'Page App',appIcon:'webman/3rdparty/Page/images/icon_64.png',user:{name:'alice',isAdmin:false}})
+ const root=document.createElement('div');document.body.append(root)
+ try{
+  await settle()
+  expect(window.root.querySelector('[data-ui-layout-mode]')?.getAttribute('data-ui-layout-mode')).toBe('window')
+  expect(viewport()).toBeNull()
+  // A DSM window has DSM's own title bar and account: the sidebar shows no user.
+  expect(window.root.querySelector('[data-ui-sidebar-footer]')).toBeNull()
+  const app=mount(root,ctx);await settle()
+  expect(root.querySelector('[data-ui-layout-mode]')?.getAttribute('data-ui-layout-mode')).toBe('web')
+  // DSM's page has no device-width viewport, so a phone would never reach the mobile layout.
+  expect(viewport()?.getAttribute('content')).toContain('width=device-width')
+  const brand=root.querySelector('[data-ui-sidebar-brand]')
+  expect(brand?.textContent).toContain('Page App')
+  expect(brand?.querySelector('img')?.getAttribute('src')).toBe('webman/3rdparty/Page/images/icon_64.png')
+  // The signed-in DSM account and its role, from ctx.user.
+  expect(root.querySelector('[data-ui-sidebar-footer]')?.textContent).toContain('alice')
+  expect(root.querySelector('[data-ui-sidebar-footer]')?.textContent).toContain('DSM user')
+  app.unmount()
+  expect(viewport()).toBeNull()
+ }finally{window.close();root.remove();box.mockRestore()}
+})
+test('a needed sign-in takes the shell page in place of the App pages, inside the App root',async()=>{
+ const call=vi.fn(async(method:string)=>{
+  if(method==='identity.status')return {enabled:true}
+  if(method==='identity.session')return {user:'alice',uid:'1',expiresAt:new Date(Date.now()-1000).toISOString()}
+  throw {code:'session_required'}
+ })
+ const root=document.createElement('div');document.body.append(root)
+ const app=mount(root,dsmWindow({call}))
+ try{
+  await settle()
+  const form=root.querySelector('form')
+  expect(form).not.toBeNull()
+  // The shell lays the sign-in page out as one of its pages: no sidebar, the page body's padding.
+  expect(form!.closest('[data-page-content-body]')).not.toBeNull()
+  expect(root.querySelector('nav')).toBeNull()
+  expect(form!.closest('[data-ui-app]')).not.toBeNull()
+ }finally{app.unmount();root.remove()}
+})

package/templates/native-go-vue/frontend/test/context.ts

@@ -0,0 +1,8 @@
+import {vi} from 'vitest'
+import {createStandaloneContext, createStandaloneHost, type Context} from '@synopackageland/sdk'
+/** The ctx the CLI gives a DSM desktop window; activateWindow is a spy. */
+export function dsmWindow(fields: Pick<Context, 'call'> & Partial<Omit<Context, 'call'>>): Context {
+ const host = createStandaloneHost({host: 'dsm', dsmStandalone: false})
+ vi.spyOn(host, 'activateWindow')
+ return createStandaloneContext({fullPage: false, host, ...fields})
+}

package/templates/native-go-vue/frontend/test/native-controls.test.ts

@@ -18,10 +18,9 @@ test('FormItem labels sit above their controls and the UI binds the control id',
  expect(items.filter(file=>/<Form(?![^>]*direction="vertical")[\s>]|field\.controlId|#default="\{field\}"/.test(template(file)))).toEqual([])
 })
 // UI built-in text follows the Provider locale (nine locales), so every app root sets it once and no
-// component repeats a per-control locale or download label.
+// component repeats a per-control locale or download label. AppShell's app-root sets it from its locale.
 test('app roots set the UI locale once and components do not translate UI text themselves',()=>{
- const roots=sources(root).filter(file=>uses(file,'AppRoot'))
- expect(roots.length).toBeGreaterThan(0)
- expect(roots.filter(file=>!uses(file,'ConfigProvider'))).toEqual([])
+ expect(sources(root).filter(file=>/<AppShell[^>]*\sapp-root[\s>]/.test(template(file))).length).toBeGreaterThan(0)
+ expect(sources(root).filter(file=>uses(file,'AppRoot')&&!uses(file,'ConfigProvider'))).toEqual([])
  expect(sources(root).filter(file=>/download-label|external-label|<FilePicker[^>]*:locale=/.test(template(file)))).toEqual([])
 })

package/templates/native-go-vue/frontend/test/shell-i18n.test.ts

@@ -3,13 +3,13 @@
 import {expect,test,vi} from 'vitest'
 import {nextTick} from 'vue'
 import {mount} from '../src/main'
-import type {Context} from '@synopackageland/sdk'
+import {dsmWindow} from './context'
 import {appCopy} from '../src/i18n'
 import {identityCopy} from '@synopackageland/sdk/vue'
 async function settle(){for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}}
 const buttons=(root:HTMLElement)=>[...root.querySelectorAll('button')].map(b=>b.textContent?.trim())
 function start(locale:string,call:(method:string)=>Promise<unknown>){
- const ctx={locale,call:vi.fn(call),reopen(){return ()=>{}}} as unknown as Context
+ const ctx=dsmWindow({locale,call:vi.fn(call) as never})
  const root=document.createElement('div');document.body.append(root)
  const app=mount(root,ctx)
  return {root,close(){app.unmount();root.remove()}}