@synopackageland/cli 0.10.1 → 0.10.3

package/dist/standalone/dsm-window.js

@@ -3,18 +3,22 @@ import { DSM_LANGS } from "./i18n.js";
 import { PASSWORD_CONFIRM, ROOT_PANEL, ROOT_RUNTIME, rootPanelCatalogs } from "./root-window.js";
 import { HOST_ADAPTER_RUNTIME } from "./host-adapter.js";
 import { permitsOrdinaryUsers } from "./api-permissions.js";
-import { PORTAL_RUNTIME } from "./portal-window.js";
+import { portalRuntime } from "./portal-window.js";
 import { portalByExecutor } from "../build-spk/dsm-version.js";
 import { uiTitleFields } from "../build-spk/ui-texts.js";
 import { packageIcons, windowIconFile, windowIconTemplate } from "../build-spk/dsm-icons.js";
 import { DEFAULT_WINDOW, FULL_PAGE_MIN_WIDTH } from "./window-size.js";
 import { requestTimeoutSeconds } from "./request-timeout.js";
+import { appSdkTimeouts } from "../runtime/sdk-timeouts.js";
 /** Same path the generated wrapper POSTs to, and the payload location of the CGI. */
 export const CGI_PAYLOAD_PATH = "ui/cgi/api.cgi";
-/** The SDK's clientTimeout(requestTimeout) waits this much past the backend deadline. */
-const CLIENT_TIMEOUT_MARGIN = 2000;
+/**
+ * Relative to the page, as loadApp's assets and DSM's own WebAPI calls are: an
+ * Application Portal alias (https://nas/<alias>/) routes only its own paths,
+ * and /webman/... there answers 403.
+ */
 export function cgiUrl(packageId) {
-    return `/webman/3rdparty/${packageId}/cgi/api.cgi`;
+    return `webman/3rdparty/${packageId}/cgi/api.cgi`;
 }
 const LOCALE_BY_DSM_LANG = Object.fromEntries(Object.entries(DSM_LANGS).map(([locale, lang]) => [lang, locale]));
 /**
@@ -72,8 +76,21 @@ export function entryLauncherAccess(entry) {
 export function appTitle(manifest) {
     return { displayname: manifest.displayname, description: manifest.description, info: manifest.i18n?.info };
 }
-/** `ui/config`: registers the DSM main-menu app and its window class. */
-export function renderUiConfig(manifest, icons = packageIcons(manifest.icon)) {
+/** The app name by locale, as `ui/texts` names the window: `createI18n(lang, ...).t("app_title")`. */
+function displayNameCatalogs(manifest) {
+    const catalogs = { en: { app_title: manifest.displayname } };
+    for (const [locale, text] of Object.entries(manifest.i18n?.info ?? {})) {
+        if (text?.displayname)
+            catalogs[locale] = { app_title: text.displayname };
+    }
+    return catalogs;
+}
+/**
+ * `ui/config`: registers the DSM main-menu app and its window class. A portal
+ * App's launcher also carries the Login Portal style and its icon as the
+ * login page icon (DSM shows `loginIcon`, never `icon`, there).
+ */
+export function renderUiConfig(manifest, icons = packageIcons(manifest.icon), loginStyle) {
     const icon = windowIconTemplate(icons);
     const ns = `SYNO.SDS.${manifest.package}`;
     const titleFields = uiTitleFields(appTitle(manifest));
@@ -86,6 +103,7 @@ export function renderUiConfig(manifest, icons = packageIcons(manifest.icon)) {
                 appWindow: `${ns}.MainWindow`,
                 allowMultiInstance: false,
                 ...launcherAccess(manifest),
+                ...(loginStyle ? { loginIcon: icon, loginStyle } : {}),
                 depend: [`${ns}.MainWindow`],
             },
             [`${ns}.MainWindow`]: {
@@ -108,14 +126,18 @@ export function renderUiConfig(manifest, icons = packageIcons(manifest.icon)) {
  * launch owns the whole page: `ctx.fullPage` tells the app to lay out full-page
  * (and add a device-width viewport), and `ctx.appIcon` is the package icon a
  * full-page shell shows beside the name, where a DSM window has a title bar.
+ * A portal App's `ctx.portal` shows `portalText`, the SDK's panel text.
  */
-export function renderWindowScript(manifest, assetVersion, icons = packageIcons(manifest.icon)) {
+export function renderWindowScript(manifest, assetVersion, icons = packageIcons(manifest.icon), portalText) {
     const pkg = manifest.package;
     const ns = `SYNO.SDS.${pkg}`;
     const p = JSON.stringify(pkg);
     const root = manifest.executor ? renderRootParts(ns, manifest) : undefined;
     const size = manifest.ui.window ?? DEFAULT_WINDOW;
     const requestTimeout = requestTimeoutSeconds(manifest.backend) * 1000;
+    const clientMargin = appSdkTimeouts(manifest.backend).browserMarginMs;
+    if (manifest.portal && !portalText)
+        throw new Error("A portal App's window needs the SDK's portal panel text.");
     return `/* Generated by synopkgland build. Edit your UI in the project's ui folder. */
 Ext.ns(${JSON.stringify(ns)});
 
@@ -142,7 +164,7 @@ ${ns}.call = function (method, params, options, requestTimeout) {
   var leave = function () { stop(canceled); };
   var timer = setTimeout(function () {
     stop({ code: "request_timeout", message: "The NAS did not answer in time" });
-  }, (requestTimeout || ${requestTimeout}) + ${CLIENT_TIMEOUT_MARGIN});
+  }, (requestTimeout || ${requestTimeout}) + ${clientMargin});
   if (signal) signal.addEventListener("abort", leave);
   var done = function () {
     clearTimeout(timer);
@@ -192,7 +214,7 @@ ${ns}.sessionUser = function () {
   return { name: typeof session.user === "string" ? session.user : "", isAdmin: session.is_admin === true };
 };
 
-${root ? root.definitions : ""}${manifest.portal ? renderPortalDefinition(ns) : ""}${ns}.loadApp = function (done) {
+${root ? root.definitions : ""}${manifest.portal ? renderPortalDefinition(ns, portalText) : ""}${ns}.loadApp = function (done) {
   var apps = window.DsmPackageApps || {};
   if (apps[${p}]) {
     done(apps[${p}]);
@@ -268,7 +290,7 @@ ${root ? root.mount : ""}    ${ns}.loadApp(function (app) {
         root.lang = i18n.locale;
         try {
           me.mounted = app.mount(root, Ext.apply(ctx, {
-          displayName: ${JSON.stringify(manifest.displayname)},
+          displayName: ${ns}.createI18n(lang, ${JSON.stringify(displayNameCatalogs(manifest))}).t("app_title"),
           call: call,
           files: {endpoint: ${JSON.stringify(cgiUrl(pkg))}, token: function () { return SYNO.SDS.Session && SYNO.SDS.Session.SynoToken; }},
           reopen: me.reopenEvents.subscribe,
@@ -312,9 +334,9 @@ ${root ? root.mount : ""}    ${ns}.loadApp(function (app) {
 });
 `;
 }
-function renderPortalDefinition(ns) {
+function renderPortalDefinition(ns, text) {
     return `${ns}.createPortalAccess = (function () {
-${PORTAL_RUNTIME}
+${portalRuntime(text)}
   return createPortalAccess;
 })();
 

package/dist/standalone/host-adapter.d.ts

@@ -1,5 +1,5 @@
 export type { HostAdapter, HostTitleResult, HostRequestResult, HostURLResult, HostEvent, HostSubscriptionResult, HostFileNavigationResult, HostUnsupportedResult } from "./host-types.js";
-export declare const HOST_ADAPTER_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}\n\nfunction requestHostFileNavigation(launch, path, isDirectory) {\n  if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n  var parts = path.split(\"/\");\n  if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {\n    return !part || part === \".\" || part === \"..\";\n  })) return { status: \"invalid-input\" };\n  var result = launch(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n  if (result.status !== \"requested\") return result;\n  return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n}\n\n\nvar REVEAL_RECOVERY_TIMEOUT_MS = 5000;\nvar REVEAL_RECOVERY_POLL_MS = 100;\nvar REVEAL_RECOVERY_QUIET_MS = 300;\nvar hostFileRevealOwners = null, hostFileRevealSequence = 0;\ntry { if (typeof WeakMap === \"function\") hostFileRevealOwners = new WeakMap(); } catch (error) {}\nfunction createHostFileRevealRecovery(path, canAct) {\n  var active = true, accepted = false, win = null, dom = null, tuple = null;\n  var poll = null, deadline = null, removers = [], reached = false, pending = 0;\n  var previous = null, quietSince = null, expires = 0, order = ++hostFileRevealSequence;\n  var parent = path.slice(0, path.lastIndexOf(\"/\"));\n  function cancel() {\n    if (!active) return;\n    active = false;\n    try { if (poll !== null) clearTimeout(poll); } catch (error) {}\n    try { if (deadline !== null) clearTimeout(deadline); } catch (error) {}\n    poll = deadline = null;\n    removers.splice(0).forEach(function (remove) { try { remove(); } catch (error) {} });\n    try {\n      if (win && hostFileRevealOwners.get(win).order === order) {\n        // Preserve ordering for a late older callback, without retaining its closures.\n        hostFileRevealOwners.set(win, { order: order, cancel: null });\n      }\n    } catch (error) {}\n    win = dom = tuple = previous = null;\n  }\n  function requireMethods(target, names) {\n    if (!target || names.some(function (name) { return typeof target[name] !== \"function\"; })) throw new Error(\"unsupported receiver\");\n  }\n  function guard(fn) {\n    return function () {\n      if (!active) return;\n      try { fn.apply(null, arguments); } catch (error) { cancel(); }\n    };\n  }\n  function listen(target, event, fn) {\n    requireMethods(target, [\"on\", \"un\"]);\n    var handler = guard(fn), remove = target.un;\n    removers.push(function () { remove.call(target, event, handler, target); });\n    target.on(event, handler, target);\n  }\n  function resetQuiet() { previous = null; quietSince = null; }\n  function inspect() {\n    requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n    if (win.isDestroyed || win.destroyed || !canAct()) { cancel(); return null; }\n    var element = win.getEl(), nextDom = element && element.dom;\n    if (!nextDom) { if (dom) cancel(); return null; }\n    requireMethods(nextDom, [\"addEventListener\", \"removeEventListener\"]);\n    if (dom && nextDom !== dom) { cancel(); return null; }\n    if (!dom) {\n      dom = nextDom;\n      [\"pointerdown\", \"mousedown\", \"touchstart\", \"keydown\", \"wheel\", \"click\", \"input\"].forEach(function (event) {\n        var remove = dom.removeEventListener, handler = guard(cancel), target = dom;\n        removers.push(function () { remove.call(target, event, handler, true); });\n        dom.addEventListener(event, handler, true);\n      });\n    }\n    var panel = win.getPanelInstance();\n    if (!panel) { if (tuple) cancel(); return null; }\n    requireMethods(panel, [\"getCurrentDir\", \"on\", \"un\"]);\n    var view = panel.activeView, store = panel.activeDS;\n    requireMethods(view, [\"getStore\", \"getSelectionModel\", \"scrollToItem\"]);\n    requireMethods(store, [\"on\", \"un\", \"indexOfId\", \"getAt\", \"getCount\"]);\n    var model = view.getSelectionModel();\n    requireMethods(model, [\"on\", \"un\", \"getSelections\", \"selectRow\"]);\n    if (view.getStore() !== store || panel.isDestroyed || store.isDestroyed || model.isDestroyed) { cancel(); return null; }\n    if (tuple && (tuple.panel !== panel || tuple.view !== view || tuple.store !== store || tuple.model !== model)) { cancel(); return null; }\n    if (!tuple) {\n      tuple = { panel: panel, view: view, store: store, model: model };\n      listen(panel, \"destroy\", cancel);\n      listen(panel, \"onNodeClick\", function (node) {\n        if (!node || !node.attributes || (reached && node.attributes.path !== parent)) cancel();\n      });\n      listen(store, \"beforeload\", function () {\n        pending++; resetQuiet(); inspect();\n      });\n      listen(store, \"load\", function () {\n        if (pending > 0) pending--;\n        resetQuiet(); check();\n      });\n      [\"exception\", \"loadexception\", \"destroy\"].forEach(function (event) { listen(store, event, cancel); });\n      listen(model, \"selectionchange\", function () { resetQuiet(); check(); });\n    }\n    var dir = panel.getCurrentDir(), params = store.baseParams;\n    // New File Station panels expose their APIs before the first directory is set.\n    // Keep the bound receiver guards and original deadline while startup finishes.\n    if (!reached && dir === undefined && (!params || params.folder_path === undefined)) return null;\n    if (!params || typeof params.folder_path !== \"string\") throw new Error(\"unsupported store path\");\n    // Native reconfigure/selection events can precede the store's path assignment.\n    if (dir === parent && params.folder_path === parent) reached = true;\n    if (reached && (dir !== parent || params.folder_path !== parent)) { cancel(); return null; }\n    var selections = model.getSelections();\n    if (!Array.isArray(selections)) throw new Error(\"unsupported selection\");\n    if (selections.some(function (record) { return !record || record.id !== path; })) { cancel(); return null; }\n    var index = store.indexOfId(path), count = store.getCount();\n    if (!Number.isInteger(index) || index < -1 || !Number.isInteger(count) || count < 0) throw new Error(\"unsupported store index\");\n    var record = index >= 0 ? store.getAt(index) : null;\n    if (index >= 0 && (!record || record.id !== path || index >= count)) throw new Error(\"inconsistent store\");\n    return { dir: dir, folder: params.folder_path, count: count, index: index, record: record, selected: selections.length > 0 };\n  }\n  function check() {\n    if (!active) return;\n    if (Date.now() >= expires || !canAct()) { cancel(); return; }\n    if (!win) return;\n    var state = inspect();\n    if (!active || !state) return;\n    if (pending || state.dir !== parent || state.folder !== parent || state.index < 0) { resetQuiet(); return; }\n    if (!previous || Object.keys(state).some(function (key) { return state[key] !== previous[key]; })) {\n      previous = state; quietSince = Date.now();\n    }\n    if (Date.now() - quietSince < REVEAL_RECOVERY_QUIET_MS) return;\n    var target = tuple, receiverWindow = win;\n    cancel(); // Release every observer before the one permitted selection mutation.\n    if (state.selected || !canAct()) return;\n    target.model.selectRow(state.index);\n    if (canAct() && !receiverWindow.isDestroyed && receiverWindow.getPanelInstance() === target.panel &&\n        target.panel.activeView === target.view && target.panel.activeDS === target.store &&\n        target.view.getSelectionModel() === target.model) target.view.scrollToItem(state.index);\n  }\n  function tick() {\n    poll = null;\n    try {\n      check();\n      if (active) poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    } catch (error) { cancel(); }\n  }\n  function receive(instance) {\n    if (!active || accepted) return;\n    accepted = true;\n    try {\n      if (Date.now() >= expires || !canAct()) { cancel(); return; }\n      win = instance && instance.window;\n      requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n      var owner = hostFileRevealOwners.get(win);\n      if (owner && owner.order > order) { cancel(); return; }\n      if (owner && owner.cancel) owner.cancel();\n      hostFileRevealOwners.set(win, { order: order, cancel: cancel });\n      [\"beforeclose\", \"close\", \"beforedestroy\", \"destroy\", \"hide\"].forEach(function (event) { listen(win, event, cancel); });\n      check();\n    } catch (error) { cancel(); }\n  }\n  try {\n    if (!parent || !hostFileRevealOwners || typeof setTimeout !== \"function\" || typeof clearTimeout !== \"function\" || typeof Date.now !== \"function\") {\n      cancel();\n    } else {\n      expires = Date.now() + REVEAL_RECOVERY_TIMEOUT_MS;\n      deadline = setTimeout(cancel, REVEAL_RECOVERY_TIMEOUT_MS);\n      poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    }\n  } catch (error) { cancel(); }\n  return { receive: receive, cancel: cancel };\n}\n\nfunction createHostAdapter(ctx) {\n  ctx = ctx || {};\n  var disposed = false, subscriptions = [], revealRecovery = null;\n  function launchApp(appId, config, receiverCallback) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof appId !== \"string\" || !appId || /\\s/.test(appId)) return { status: \"invalid-input\" };\n    try {\n      if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n      var sds = SYNO.SDS, map = sds.Config && sds.Config.FnMap, notifier = sds.StatusNotifier;\n      if (typeof sds.AppLaunch !== \"function\" || !map ||\n          !Object.prototype.hasOwnProperty.call(map, appId) || !map[appId] || !notifier ||\n          typeof notifier.isAppEnabled !== \"function\" || !notifier.isAppEnabled(appId) ||\n          typeof notifier.isAppLaunchable !== \"function\" || !notifier.isAppLaunchable(appId)) {\n        return { status: \"unsupported\" };\n      }\n      if (receiverCallback) sds.AppLaunch(appId, config, undefined, receiverCallback);\n      else sds.AppLaunch(appId, config);\n      return { status: \"requested\" };\n    } catch (error) { return { status: \"failed\" }; }\n  }\n  function navigateFileStation(path, isDirectory) {\n    if (disposed) return { status: \"unavailable\" };\n    if (revealRecovery) revealRecovery.cancel();\n    revealRecovery = null;\n    function launchFile(appId, config) {\n      if (isDirectory) return launchApp(appId, config);\n      var recovery = createHostFileRevealRecovery(path, function () { return !disposed && revealRecovery === recovery; });\n      revealRecovery = recovery;\n      var result = launchApp(appId, config, recovery.receive);\n      if (result.status !== \"requested\") recovery.cancel();\n      return result;\n    }\n    return requestHostFileNavigation(launchFile, path, isDirectory);\n  }\n  function unsupportedOperation() { return { status: disposed ? \"unavailable\" : \"unsupported\" }; }\n  return Object.freeze({\n    platform: function () {\n      if (!disposed) return inspectHostPlatform(ctx);\n      return Object.freeze({\n        web: typeof window !== \"undefined\", host: \"unavailable\",\n        dsmStandalone: null, dsmLanguage: null, appLocale: null,\n        systemVersion: null, fullVersion: null, theme: null\n      });\n    },\n    setTitle: function (title) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof title !== \"string\") return { status: \"invalid-input\" };\n      try {\n        var platform = inspectHostPlatform(ctx);\n        if (platform.host === \"dsm\") {\n          if (typeof ctx.appWindow.setTitle !== \"function\") return { status: \"unsupported\" };\n          ctx.appWindow.setTitle(title, undefined, true);\n          return { status: \"ok\", target: \"dsm-window\" };\n        }\n        if (!platform.web) return { status: \"unavailable\" };\n        if (typeof document === \"undefined\") return { status: \"unsupported\" };\n        document.title = title;\n        return { status: \"ok\", target: \"document\" };\n      } catch (error) {\n        return { status: \"failed\" };\n      }\n    },\n    activateWindow: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        var activate = typeof win.toFront === \"function\" ? win.toFront : win.activate;\n        if (typeof activate !== \"function\") return { status: \"unsupported\" };\n        // DSM minimizes by hiding; show preserves maximized geometry, unlike restore.\n        if (win.hidden === true || win.minimized === true ||\n            (typeof win.isVisible === \"function\" && win.isVisible() === false)) {\n          if (typeof win.show !== \"function\") return { status: \"unsupported\" };\n          win.show();\n        }\n        activate.call(win);\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    requestClose: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        // DSM returns a short-circuit value; only truthy means standalone main.\n        if (typeof win.close !== \"function\" || typeof win.isStandaloneMainWindow !== \"function\" ||\n            win.isStandaloneMainWindow()) return { status: \"unsupported\" };\n        if (win.canClose === false) return { status: \"blocked\" };\n        win.close();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openApp: function (appId) { return launchApp(appId, {}); },\n    openURL: function (raw) {\n      if (disposed || typeof window === \"undefined\") return { status: \"unavailable\" };\n      if (typeof raw !== \"string\" || !raw || /[\\s\\x00-\\x1f\\x7f]/.test(raw)) return { status: \"invalid-input\" };\n      if (typeof URL !== \"function\") return { status: \"unsupported\" };\n      var url;\n      try { url = new URL(raw); } catch (error) { return { status: \"invalid-input\" }; }\n      if ((url.protocol !== \"http:\" && url.protocol !== \"https:\") || url.username || url.password) return { status: \"invalid-input\" };\n      if (typeof window.open !== \"function\") return { status: \"unsupported\" };\n      try {\n        var opened = window.open(url.href, \"_blank\", \"noopener,noreferrer\");\n        return { status: \"requested\", windowHandleAvailable: !!opened };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openFileManager: function (path) { return navigateFileStation(path, true); },\n    revealFile: function (path) { return navigateFileStation(path, false); },\n    openFile: unsupportedOperation,\n    showFileDetails: unsupportedOperation,\n    openAppSetting: unsupportedOperation,\n    subscribe: function (event, listener) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof listener !== \"function\") return { status: \"invalid-input\" };\n      if (event !== \"window-resize\") return { status: \"unsupported\" };\n      var win, callback = listener, active = true;\n      function handler() { if (!disposed && callback) callback(); }\n      function unsubscribe() {\n        if (!active) return;\n        active = false;\n        callback = null;\n        var target = win;\n        win = null;\n        var index = subscriptions.indexOf(unsubscribe);\n        if (index !== -1) subscriptions.splice(index, 1);\n        try { if (target) target.un(\"resize\", handler, target); } catch (error) {}\n      }\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        win = ctx.appWindow;\n        if (typeof win.on !== \"function\" || typeof win.un !== \"function\") return { status: \"unsupported\" };\n        subscriptions.push(unsubscribe);\n        win.on(\"resize\", handler, win);\n        if (disposed) return { status: \"unavailable\" };\n        return Object.freeze({ status: \"subscribed\", dispose: unsubscribe });\n      } catch (error) {\n        unsubscribe();\n        return { status: \"failed\" };\n      }\n    },\n    dispose: function () {\n      if (disposed) return;\n      disposed = true;\n      if (revealRecovery) revealRecovery.cancel();\n      revealRecovery = null;\n      subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });\n      ctx = null;\n    }\n  });\n}";
+export declare const HOST_ADAPTER_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}\n\nfunction requestHostFileNavigation(launch, path, isDirectory) {\n  if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n  var volume = /^\\/volume(?:USB|SATA)?[0-9]+(?=\\/|$)/.exec(path);\n  if (volume) path = path.slice(volume[0].length);\n  var parts = path.split(\"/\");\n  if (parts.length < 2 || parts.slice(1).some(function (part) {\n    return !part || part === \".\" || part === \"..\";\n  })) return { status: \"invalid-input\" };\n  var result = launch(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n  if (result.status !== \"requested\") return result;\n  return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n}\n\n\nvar REVEAL_RECOVERY_TIMEOUT_MS = 5000;\nvar REVEAL_RECOVERY_POLL_MS = 100;\nvar REVEAL_RECOVERY_QUIET_MS = 300;\nvar hostFileRevealOwners = null, hostFileRevealSequence = 0;\ntry { if (typeof WeakMap === \"function\") hostFileRevealOwners = new WeakMap(); } catch (error) {}\nfunction createHostFileRevealRecovery(path, canAct) {\n  var active = true, accepted = false, win = null, dom = null, tuple = null;\n  var poll = null, deadline = null, removers = [], reached = false, pending = 0;\n  var previous = null, quietSince = null, expires = 0, order = ++hostFileRevealSequence;\n  var parent = path.slice(0, path.lastIndexOf(\"/\"));\n  function cancel() {\n    if (!active) return;\n    active = false;\n    try { if (poll !== null) clearTimeout(poll); } catch (error) {}\n    try { if (deadline !== null) clearTimeout(deadline); } catch (error) {}\n    poll = deadline = null;\n    removers.splice(0).forEach(function (remove) { try { remove(); } catch (error) {} });\n    try {\n      if (win && hostFileRevealOwners.get(win).order === order) {\n        // Preserve ordering for a late older callback, without retaining its closures.\n        hostFileRevealOwners.set(win, { order: order, cancel: null });\n      }\n    } catch (error) {}\n    win = dom = tuple = previous = null;\n  }\n  function requireMethods(target, names) {\n    if (!target || names.some(function (name) { return typeof target[name] !== \"function\"; })) throw new Error(\"unsupported receiver\");\n  }\n  function guard(fn) {\n    return function () {\n      if (!active) return;\n      try { fn.apply(null, arguments); } catch (error) { cancel(); }\n    };\n  }\n  function listen(target, event, fn) {\n    requireMethods(target, [\"on\", \"un\"]);\n    var handler = guard(fn), remove = target.un;\n    removers.push(function () { remove.call(target, event, handler, target); });\n    target.on(event, handler, target);\n  }\n  function resetQuiet() { previous = null; quietSince = null; }\n  function inspect() {\n    requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n    if (win.isDestroyed || win.destroyed || !canAct()) { cancel(); return null; }\n    var element = win.getEl(), nextDom = element && element.dom;\n    if (!nextDom) { if (dom) cancel(); return null; }\n    requireMethods(nextDom, [\"addEventListener\", \"removeEventListener\"]);\n    if (dom && nextDom !== dom) { cancel(); return null; }\n    if (!dom) {\n      dom = nextDom;\n      [\"pointerdown\", \"mousedown\", \"touchstart\", \"keydown\", \"wheel\", \"click\", \"input\"].forEach(function (event) {\n        var remove = dom.removeEventListener, handler = guard(cancel), target = dom;\n        removers.push(function () { remove.call(target, event, handler, true); });\n        dom.addEventListener(event, handler, true);\n      });\n    }\n    var panel = win.getPanelInstance();\n    if (!panel) { if (tuple) cancel(); return null; }\n    requireMethods(panel, [\"getCurrentDir\", \"on\", \"un\"]);\n    var view = panel.activeView, store = panel.activeDS;\n    requireMethods(view, [\"getStore\", \"getSelectionModel\", \"scrollToItem\"]);\n    requireMethods(store, [\"on\", \"un\", \"indexOfId\", \"getAt\", \"getCount\"]);\n    var model = view.getSelectionModel();\n    requireMethods(model, [\"on\", \"un\", \"getSelections\", \"selectRow\"]);\n    if (view.getStore() !== store || panel.isDestroyed || store.isDestroyed || model.isDestroyed) { cancel(); return null; }\n    if (tuple && (tuple.panel !== panel || tuple.view !== view || tuple.store !== store || tuple.model !== model)) { cancel(); return null; }\n    if (!tuple) {\n      tuple = { panel: panel, view: view, store: store, model: model };\n      listen(panel, \"destroy\", cancel);\n      listen(panel, \"onNodeClick\", function (node) {\n        if (!node || !node.attributes || (reached && node.attributes.path !== parent)) cancel();\n      });\n      listen(store, \"beforeload\", function () {\n        pending++; resetQuiet(); inspect();\n      });\n      listen(store, \"load\", function () {\n        if (pending > 0) pending--;\n        resetQuiet(); check();\n      });\n      [\"exception\", \"loadexception\", \"destroy\"].forEach(function (event) { listen(store, event, cancel); });\n      listen(model, \"selectionchange\", function () { resetQuiet(); check(); });\n    }\n    var dir = panel.getCurrentDir(), params = store.baseParams;\n    // New File Station panels expose their APIs before the first directory is set.\n    // Keep the bound receiver guards and original deadline while startup finishes.\n    if (!reached && dir === undefined && (!params || params.folder_path === undefined)) return null;\n    if (!params || typeof params.folder_path !== \"string\") throw new Error(\"unsupported store path\");\n    // Native reconfigure/selection events can precede the store's path assignment.\n    if (dir === parent && params.folder_path === parent) reached = true;\n    if (reached && (dir !== parent || params.folder_path !== parent)) { cancel(); return null; }\n    var selections = model.getSelections();\n    if (!Array.isArray(selections)) throw new Error(\"unsupported selection\");\n    if (selections.some(function (record) { return !record || record.id !== path; })) { cancel(); return null; }\n    var index = store.indexOfId(path), count = store.getCount();\n    if (!Number.isInteger(index) || index < -1 || !Number.isInteger(count) || count < 0) throw new Error(\"unsupported store index\");\n    var record = index >= 0 ? store.getAt(index) : null;\n    if (index >= 0 && (!record || record.id !== path || index >= count)) throw new Error(\"inconsistent store\");\n    return { dir: dir, folder: params.folder_path, count: count, index: index, record: record, selected: selections.length > 0 };\n  }\n  function check() {\n    if (!active) return;\n    if (Date.now() >= expires || !canAct()) { cancel(); return; }\n    if (!win) return;\n    var state = inspect();\n    if (!active || !state) return;\n    if (pending || state.dir !== parent || state.folder !== parent || state.index < 0) { resetQuiet(); return; }\n    if (!previous || Object.keys(state).some(function (key) { return state[key] !== previous[key]; })) {\n      previous = state; quietSince = Date.now();\n    }\n    if (Date.now() - quietSince < REVEAL_RECOVERY_QUIET_MS) return;\n    var target = tuple, receiverWindow = win;\n    cancel(); // Release every observer before the one permitted selection mutation.\n    if (state.selected || !canAct()) return;\n    target.model.selectRow(state.index);\n    if (canAct() && !receiverWindow.isDestroyed && receiverWindow.getPanelInstance() === target.panel &&\n        target.panel.activeView === target.view && target.panel.activeDS === target.store &&\n        target.view.getSelectionModel() === target.model) target.view.scrollToItem(state.index);\n  }\n  function tick() {\n    poll = null;\n    try {\n      check();\n      if (active) poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    } catch (error) { cancel(); }\n  }\n  function receive(instance) {\n    if (!active || accepted) return;\n    accepted = true;\n    try {\n      if (Date.now() >= expires || !canAct()) { cancel(); return; }\n      win = instance && instance.window;\n      requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n      var owner = hostFileRevealOwners.get(win);\n      if (owner && owner.order > order) { cancel(); return; }\n      if (owner && owner.cancel) owner.cancel();\n      hostFileRevealOwners.set(win, { order: order, cancel: cancel });\n      [\"beforeclose\", \"close\", \"beforedestroy\", \"destroy\", \"hide\"].forEach(function (event) { listen(win, event, cancel); });\n      check();\n    } catch (error) { cancel(); }\n  }\n  try {\n    if (!parent || !hostFileRevealOwners || typeof setTimeout !== \"function\" || typeof clearTimeout !== \"function\" || typeof Date.now !== \"function\") {\n      cancel();\n    } else {\n      expires = Date.now() + REVEAL_RECOVERY_TIMEOUT_MS;\n      deadline = setTimeout(cancel, REVEAL_RECOVERY_TIMEOUT_MS);\n      poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    }\n  } catch (error) { cancel(); }\n  return { receive: receive, cancel: cancel };\n}\n\nfunction createHostAdapter(ctx) {\n  ctx = ctx || {};\n  var disposed = false, subscriptions = [], revealRecovery = null;\n  function launchApp(appId, config, receiverCallback) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof appId !== \"string\" || !appId || /\\s/.test(appId)) return { status: \"invalid-input\" };\n    try {\n      if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n      var sds = SYNO.SDS, map = sds.Config && sds.Config.FnMap, notifier = sds.StatusNotifier;\n      if (typeof sds.AppLaunch !== \"function\" || !map ||\n          !Object.prototype.hasOwnProperty.call(map, appId) || !map[appId] || !notifier ||\n          typeof notifier.isAppEnabled !== \"function\" || !notifier.isAppEnabled(appId) ||\n          typeof notifier.isAppLaunchable !== \"function\" || !notifier.isAppLaunchable(appId)) {\n        return { status: \"unsupported\" };\n      }\n      if (receiverCallback) sds.AppLaunch(appId, config, undefined, receiverCallback);\n      else sds.AppLaunch(appId, config);\n      return { status: \"requested\" };\n    } catch (error) { return { status: \"failed\" }; }\n  }\n  function navigateFileStation(path, isDirectory) {\n    if (disposed) return { status: \"unavailable\" };\n    if (revealRecovery) revealRecovery.cancel();\n    revealRecovery = null;\n    function launchFile(appId, config) {\n      if (isDirectory) return launchApp(appId, config);\n      var recovery = createHostFileRevealRecovery(config.openfile, function () { return !disposed && revealRecovery === recovery; });\n      revealRecovery = recovery;\n      var result = launchApp(appId, config, recovery.receive);\n      if (result.status !== \"requested\") recovery.cancel();\n      return result;\n    }\n    return requestHostFileNavigation(launchFile, path, isDirectory);\n  }\n  function unsupportedOperation() { return { status: disposed ? \"unavailable\" : \"unsupported\" }; }\n  return Object.freeze({\n    platform: function () {\n      if (!disposed) return inspectHostPlatform(ctx);\n      return Object.freeze({\n        web: typeof window !== \"undefined\", host: \"unavailable\",\n        dsmStandalone: null, dsmLanguage: null, appLocale: null,\n        systemVersion: null, fullVersion: null, theme: null\n      });\n    },\n    setTitle: function (title) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof title !== \"string\") return { status: \"invalid-input\" };\n      try {\n        var platform = inspectHostPlatform(ctx);\n        if (platform.host === \"dsm\") {\n          if (typeof ctx.appWindow.setTitle !== \"function\") return { status: \"unsupported\" };\n          ctx.appWindow.setTitle(title, undefined, true);\n          return { status: \"ok\", target: \"dsm-window\" };\n        }\n        if (!platform.web) return { status: \"unavailable\" };\n        if (typeof document === \"undefined\") return { status: \"unsupported\" };\n        document.title = title;\n        return { status: \"ok\", target: \"document\" };\n      } catch (error) {\n        return { status: \"failed\" };\n      }\n    },\n    activateWindow: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        var activate = typeof win.toFront === \"function\" ? win.toFront : win.activate;\n        if (typeof activate !== \"function\") return { status: \"unsupported\" };\n        // DSM minimizes by hiding; show preserves maximized geometry, unlike restore.\n        if (win.hidden === true || win.minimized === true ||\n            (typeof win.isVisible === \"function\" && win.isVisible() === false)) {\n          if (typeof win.show !== \"function\") return { status: \"unsupported\" };\n          win.show();\n        }\n        activate.call(win);\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    requestClose: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        // DSM returns a short-circuit value; only truthy means standalone main.\n        if (typeof win.close !== \"function\" || typeof win.isStandaloneMainWindow !== \"function\" ||\n            win.isStandaloneMainWindow()) return { status: \"unsupported\" };\n        if (win.canClose === false) return { status: \"blocked\" };\n        win.close();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openApp: function (appId) { return launchApp(appId, {}); },\n    openURL: function (raw) {\n      if (disposed || typeof window === \"undefined\") return { status: \"unavailable\" };\n      if (typeof raw !== \"string\" || !raw || /[\\s\\x00-\\x1f\\x7f]/.test(raw)) return { status: \"invalid-input\" };\n      if (typeof URL !== \"function\") return { status: \"unsupported\" };\n      var url;\n      try { url = new URL(raw); } catch (error) { return { status: \"invalid-input\" }; }\n      if ((url.protocol !== \"http:\" && url.protocol !== \"https:\") || url.username || url.password) return { status: \"invalid-input\" };\n      if (typeof window.open !== \"function\") return { status: \"unsupported\" };\n      try {\n        var opened = window.open(url.href, \"_blank\", \"noopener,noreferrer\");\n        return { status: \"requested\", windowHandleAvailable: !!opened };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openFileManager: function (path) { return navigateFileStation(path, true); },\n    revealFile: function (path) { return navigateFileStation(path, false); },\n    openFile: unsupportedOperation,\n    showFileDetails: unsupportedOperation,\n    openAppSetting: unsupportedOperation,\n    subscribe: function (event, listener) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof listener !== \"function\") return { status: \"invalid-input\" };\n      if (event !== \"window-resize\") return { status: \"unsupported\" };\n      var win, callback = listener, active = true;\n      function handler() { if (!disposed && callback) callback(); }\n      function unsubscribe() {\n        if (!active) return;\n        active = false;\n        callback = null;\n        var target = win;\n        win = null;\n        var index = subscriptions.indexOf(unsubscribe);\n        if (index !== -1) subscriptions.splice(index, 1);\n        try { if (target) target.un(\"resize\", handler, target); } catch (error) {}\n      }\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        win = ctx.appWindow;\n        if (typeof win.on !== \"function\" || typeof win.un !== \"function\") return { status: \"unsupported\" };\n        subscriptions.push(unsubscribe);\n        win.on(\"resize\", handler, win);\n        if (disposed) return { status: \"unavailable\" };\n        return Object.freeze({ status: \"subscribed\", dispose: unsubscribe });\n      } catch (error) {\n        unsubscribe();\n        return { status: \"failed\" };\n      }\n    },\n    dispose: function () {\n      if (disposed) return;\n      disposed = true;\n      if (revealRecovery) revealRecovery.cancel();\n      revealRecovery = null;\n      subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });\n      ctx = null;\n    }\n  });\n}";
 /** A static, per-package factory for independent web shells; no Ext or transport. */
 export declare function renderHostAdapterScript(packageId: string): string;
 export declare function hostScriptName(build: number): string;

package/dist/standalone/host-adapter.js

@@ -29,7 +29,7 @@ function createHostAdapter(ctx) {
     revealRecovery = null;
     function launchFile(appId, config) {
       if (isDirectory) return launchApp(appId, config);
-      var recovery = createHostFileRevealRecovery(path, function () { return !disposed && revealRecovery === recovery; });
+      var recovery = createHostFileRevealRecovery(config.openfile, function () { return !disposed && revealRecovery === recovery; });
       revealRecovery = recovery;
       var result = launchApp(appId, config, recovery.receive);
       if (result.status !== "requested") recovery.cancel();

package/dist/standalone/host-file-navigation.d.ts

@@ -1,5 +1,9 @@
-/** Shared virtual-path validation and File Station request shaping. */
-export declare const HOST_FILE_NAVIGATION_RUNTIME = "\nfunction requestHostFileNavigation(launch, path, isDirectory) {\n  if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n  var parts = path.split(\"/\");\n  if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {\n    return !part || part === \".\" || part === \"..\";\n  })) return { status: \"invalid-input\" };\n  var result = launch(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n  if (result.status !== \"requested\") return result;\n  return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n}\n";
+/**
+ * Shared virtual-path validation and File Station request shaping. The rule is
+ * the SDK's (ts/src/dsm/file-station.ts): a DSM volume mount is stripped, and
+ * anything but one canonical shared-folder path is invalid-input.
+ */
+export declare const HOST_FILE_NAVIGATION_RUNTIME = "\nfunction requestHostFileNavigation(launch, path, isDirectory) {\n  if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n  var volume = /^\\/volume(?:USB|SATA)?[0-9]+(?=\\/|$)/.exec(path);\n  if (volume) path = path.slice(volume[0].length);\n  var parts = path.split(\"/\");\n  if (parts.length < 2 || parts.slice(1).some(function (part) {\n    return !part || part === \".\" || part === \"..\";\n  })) return { status: \"invalid-input\" };\n  var result = launch(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n  if (result.status !== \"requested\") return result;\n  return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n}\n";
 export declare const REVEAL_RECOVERY_TIMEOUT_MS = 5000;
 export declare const REVEAL_RECOVERY_POLL_MS = 100;
 export declare const REVEAL_RECOVERY_QUIET_MS = 300;

package/dist/standalone/host-file-navigation.js

@@ -1,10 +1,16 @@
-/** Shared virtual-path validation and File Station request shaping. */
+/**
+ * Shared virtual-path validation and File Station request shaping. The rule is
+ * the SDK's (ts/src/dsm/file-station.ts): a DSM volume mount is stripped, and
+ * anything but one canonical shared-folder path is invalid-input.
+ */
 export const HOST_FILE_NAVIGATION_RUNTIME = `
 function requestHostFileNavigation(launch, path, isDirectory) {
   if (typeof path !== "string" || path.length > 4096 || path.charAt(0) !== "/" ||
     /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: "invalid-input" };
+  var volume = /^\\/volume(?:USB|SATA)?[0-9]+(?=\\/|$)/.exec(path);
+  if (volume) path = path.slice(volume[0].length);
   var parts = path.split("/");
-  if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {
+  if (parts.length < 2 || parts.slice(1).some(function (part) {
     return !part || part === "." || part === "..";
   })) return { status: "invalid-input" };
   var result = launch("SYNO.SDS.App.FileStation3.Instance", isDirectory ? { opendir: path } : { openfile: path });

package/dist/standalone/inspect-spk.d.ts

@@ -1,4 +1,5 @@
 import { type ExecutorInspection } from "../runtime/executor-inspect.js";
+import { type AppScriptName } from "./app-scripts.js";
 import type { EntryMode } from "./manifest.js";
 import { type UninstallCleanupItem } from "../runtime/uninstall-cleanup.js";
 export type SpkKind = "native-go" | "native-python" | "native-node" | "native-rust" | "binary" | "container" | "native-layout";
@@ -30,11 +31,19 @@ export interface SpkInspection {
     };
     /** Declared `entry` mode; `admin-only` is the administrator floor of every route. */
     entry?: EntryMode;
+    /** The App's own scripts/app/<DSM script name>, each called from the generated script of that name. */
+    appScripts?: AppScriptName[];
     /** PACKAGE_ICON_256.PNG: the SDK default, a custom icon (by digest) or none. */
     icon?: {
         source: "default" | "custom" | "none";
         sha256?: string;
     };
+    /** The launcher's Login Portal style: its colour, whether the wallpaper is the CLI default, and what titles the login page. */
+    loginStyle?: {
+        color: string;
+        wallpaper: "default" | "custom";
+        title: "custom" | "app-icon" | "none";
+    };
 }
 /** Reads an SPK without installing it and reports how it would run on DSM. */
 export declare function inspectStandaloneSpk(spkPath: string): Promise<SpkInspection>;

package/dist/standalone/inspect-spk.js

@@ -2,7 +2,8 @@ import { createHash } from "node:crypto";
 import { inspectNativeLayout } from "./native-layout.js";
 import { checkBridgeApp, checkBridgeExecutor } from "./inspect-bridge.js";
 import { inspectExecutor, inspectExecutorAnchor } from "../runtime/executor-inspect.js";
-import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync } from "node:fs";
+import { existsSync, lstatSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync } from "node:fs";
+import { unwrapAppScripts } from "./app-scripts.js";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import * as tar from "tar";
@@ -26,6 +27,7 @@ import { uninstallCleanup } from "../runtime/uninstall-cleanup.js";
 import { PORTAL_JSON_RELPATH, PORTAL_MUSTACHE_RELPATH, renderPortalJson, renderPortalLifecycle, renderPortalMustache, renderPortalWizardStep } from "../portal/package.js";
 import { isPortalAlias } from "../portal/alias.js";
 import { defaultPackageIcons, MAX_ICON_BYTES } from "../build-spk/dsm-icons.js";
+import { isDefaultLoginAsset } from "../build-spk/login-style.js";
 import { decodePng } from "../build-spk/png.js";
 /** The SPK kind of each sdk-package.json backend a CGI is built for: Go itself, or the runtime of an App in another language. */
 const COMPILED_KIND = { go: "native-go", python: "native-python", node: "native-node", rust: "native-rust" };
@@ -80,6 +82,8 @@ export async function inspectSpk(spkPath, expectedKind) {
         const info = readInfo(join(dir, "INFO"), findings, kind);
         await checkArch(dir, info, kind, paths.has(CGI_PAYLOAD_PATH), findings);
         const background = compiledKind && paths.has(BACKGROUND_WORKER_PAYLOAD);
+        // Before any fixed-lifecycle comparison: those see the SDK steps alone.
+        const appScripts = standalone || kind === "container" ? unwrapAppScripts(join(dir, "scripts"), findings) : [];
         const sharedFolder = standalone ? recoverSharedFolder(readOptional(join(dir, "scripts/postinst"))) : undefined;
         // A Compose App has no executor, so its SPK never carries a portal.
         const portal = standalone ? await recoverPortal(dir, info, `SYNO.SDS.${info.package}.Instance`, paths, payload, findings) : undefined;
@@ -136,6 +140,7 @@ export async function inspectSpk(spkPath, expectedKind) {
         }
         if (metadata.entry)
             await checkEntryLauncher(dir, info.package, metadata.entry, findings);
+        const loginStyle = standalone ? await inspectLoginStyle(dir, info.package, Boolean(portal || executor?.policy.portal), findings) : undefined;
         if (standalone)
             checkSharedFolder(dir, findings, info.package, sharedFolder, executor?.policy.scope === 'install-selected', portal, hasExecutor);
         const icon = inspectPackageIcons(dir, findings);
@@ -153,6 +158,8 @@ export async function inspectSpk(spkPath, expectedKind) {
             ...(portal ? { portal: { appId: portal.appId, alias: portal.alias } } : {}),
             ...(executor?.policy.portal ? { portal: { appId: executor.policy.app, alias: executor.policy.portal.alias } } : {}),
             ...(metadata.entry ? { entry: metadata.entry } : {}),
+            ...(appScripts.length ? { appScripts } : {}),
+            ...(loginStyle ? { loginStyle } : {}),
             ...(standalone ? { uninstallCleanup: uninstallCleanup(info.package, { executor: hasExecutor, portal: Boolean(portal), portalEntry: Boolean(executor?.policy.portal) }) } : {}),
             package: info.package,
             version: info.version,
@@ -185,6 +192,47 @@ async function checkEntryLauncher(dir, pkg, entry, findings) {
         findings.push(`ENTRY_LAUNCHER_MISMATCH sdk-package.json declares entry: ${entry}, but the ui/config launcher is not ${JSON.stringify(expected)}; regenerate it with synopkgland build`);
     }
 }
+const LOGIN_STYLE_FILES = ["defaultLoginWallpaper", "defaultLoginWallpaperThumbnail", "loginPreviewThumbnailMaskPath", "titleImgPath"];
+/**
+ * The launcher's loginStyle and the ui/ files it names, at 1x and 2x. A portal
+ * App without one shows a blank Control Panel > Login Portal thumbnail.
+ */
+async function inspectLoginStyle(dir, pkg, portal, findings) {
+    const target = join(dir, "login-style-inspection");
+    mkdirSync(target);
+    await tar.x({ file: join(dir, "package.tgz"), cwd: target, filter: path => path.replace(/^\.\//, "").startsWith("ui/") });
+    let launcher;
+    try {
+        const config = JSON.parse(readFileSync(join(target, "ui/config"), "utf8"));
+        launcher = Object.values(config)[0]?.[`SYNO.SDS.${pkg}.Instance`];
+    }
+    catch { /* reported by the other checks */ }
+    const style = launcher?.loginStyle;
+    if (typeof style !== "object" || style === null) {
+        if (portal)
+            findings.push("LOGIN_STYLE_MISSING the Application Portal launcher has no loginStyle in ui/config, so Control Panel > Login Portal shows a blank thumbnail; rebuild with synopkgland build");
+        return undefined;
+    }
+    const fields = style;
+    const read = (field) => {
+        const path = fields[field];
+        if (path === undefined)
+            return undefined;
+        const files = typeof path === "string" && !path.split("/").includes("..") && !path.startsWith("/")
+            ? ["1x", "2x"].map(scale => join(target, "ui", path.replace("{0}", scale))) : [];
+        if (!files.length || !files.every(file => existsSync(file))) {
+            findings.push(`LOGIN_STYLE_FILE_MISSING ui/config loginStyle.${field} names ui/${String(path)}, which the payload does not carry`);
+            return undefined;
+        }
+        return readFileSync(files[0]);
+    };
+    const [wallpaper] = LOGIN_STYLE_FILES.map(read);
+    return {
+        color: String(fields.mainColor ?? ""),
+        wallpaper: wallpaper && isDefaultLoginAsset("wallpaper.jpg", wallpaper) ? "default" : "custom",
+        title: fields.titleImgPath !== undefined ? "custom" : launcher.loginIcon !== undefined ? "app-icon" : "none",
+    };
+}
 /** Package Center shows PACKAGE_ICON at 64 and 256 px; the package source refuses a release whose icon is over 256 KiB. */
 function inspectPackageIcons(dir, findings) {
     for (const [name, size] of [["PACKAGE_ICON.PNG", 64], ["PACKAGE_ICON_256.PNG", 256]]) {
@@ -479,12 +527,18 @@ function checkScripts(dir, findings) {
     if (!existsSync(join(scriptsDir, "start-stop-status"))) {
         findings.push("scripts/start-stop-status is missing");
     }
-    for (const name of existsSync(scriptsDir) ? readdirSync(scriptsDir) : []) {
-        const body = readFileSync(join(scriptsDir, name), "utf8");
-        if (ROOT_SCRIPT_HINTS.some((pattern) => pattern.test(body))) {
-            findings.push(`scripts/${name} tries to gain root (sudo, chown root or setuid)`);
+    const scan = (relative) => {
+        const path = join(dir, relative);
+        if (lstatSync(path).isDirectory()) {
+            for (const name of readdirSync(path))
+                scan(`${relative}/${name}`);
         }
-    }
+        else if (ROOT_SCRIPT_HINTS.some((pattern) => pattern.test(readFileSync(path, "utf8")))) {
+            findings.push(`${relative} tries to gain root (sudo, chown root or setuid)`);
+        }
+    };
+    if (existsSync(scriptsDir))
+        scan("scripts");
 }
 const DATA_KEYS = ["pkgwizard_remove_additional", "delete_app_data"];
 const DELETE_COMMAND = /\brm\s+-[a-zA-Z]*[rR]|\bfind\b[^\n]*(-delete|-exec\s+rm)/;

package/dist/standalone/lifecycle.js

@@ -5,12 +5,14 @@ import { renderDelegateInstallDraft } from '../build-spk/delegate-scope.js';
 import { renderPortalLifecycle } from "../portal/package.js";
 import { nativePortal } from "./portal.js";
 import { renderUninstallHook } from "./uninstall-hook.js";
+import { composeAppScript } from "./app-scripts.js";
 const UNINSTALL_ONLY = '[ "${SYNOPKG_PKG_STATUS:-}" = UPGRADE ] || synopkgland_uninstall_hook\n';
 /** Package-account lifecycle hooks for CGI, daemon and background packages. */
 export function renderStandaloneScript(name, manifest) {
     const portal = nativePortal(manifest);
     const script = renderCapabilityScript(name, manifest);
-    return portal ? script.replace("#!/bin/sh\n", () => `#!/bin/sh\n${renderPortalLifecycle(name, portal)}`) : script;
+    const sdk = portal ? script.replace("#!/bin/sh\n", () => `#!/bin/sh\n${renderPortalLifecycle(name, portal)}`) : script;
+    return manifest.appScripts?.some(app => app === name) ? composeAppScript(name, sdk) : sdk;
 }
 function renderCapabilityScript(name, manifest) {
     if (name === 'preupgrade' && (manifest.capabilities.rootOps || manifest.capabilities.delegate)) {

package/dist/standalone/manifest.d.ts

@@ -8,10 +8,12 @@ import { type RootOp } from "./root-ops.js";
 import type { RootSettings } from "../runtime/root-programs.js";
 import { type Daemon } from "./daemon.js";
 import { type Uninstall } from "./uninstall.js";
+import { type AppScriptName } from "./app-scripts.js";
 import { type Background } from "./background.js";
 import { type SharedFolder } from "./shared-folder.js";
 import { readApiPermissions, type ApiPermissions } from "./api-permissions.js";
 import { type PortalDeclaration } from "../portal/alias.js";
+import { type LoginStyle } from "../build-spk/login-style.js";
 import { type SdkBackend } from "../runtime/sdk-source.js";
 import { type WindowSize } from "./window-size.js";
 import { type BridgeBackend } from "./bridge-backend.js";
@@ -81,8 +83,12 @@ export interface StandaloneManifest {
     entry?: EntryMode;
     /** `portal`: registers the DSM Application Portal entry; an administrator activates it. */
     portal?: PortalDeclaration;
+    /** The project's dsm-scripts/<DSM script name> files, each run inside the generated script of that name. */
+    appScripts?: AppScriptName[];
     /** `icon`: a square PNG of at least 256 px, or a directory of icon_<size>.png; absent uses the SDK default. */
     icon?: string;
+    /** `login_style`: the portal login page's colour, wallpaper and title over the CLI defaults. */
+    loginStyle?: LoginStyle;
 }
 /**
  * `admin-only`: DSM administrators only. `app-privilege`: administrators and

package/dist/standalone/manifest.js

@@ -8,17 +8,20 @@ import { checkGlossary, loadCatalogs, readInfoTranslations } from "./i18n.js";
 import { loadRootOps, readRootSettings, rootBinaryProblem, ROOT_OPS_DIR } from "./root-ops.js";
 import { readDaemon } from "./daemon.js";
 import { readUninstall } from "./uninstall.js";
+import { readAppScripts } from "./app-scripts.js";
 import { readBackground } from "./background.js";
 import { DEFAULT_MIN_DSM, isDsmAtLeast, PORTAL_EXECUTOR_MIN_DSM, portalByExecutor, portalMinDsmMessage } from "../build-spk/dsm-version.js";
 import { readSharedFolder } from "./shared-folder.js";
 import { API_PERMISSIONS_FILE, floorAtAdministrators, permitsOrdinaryUsers, readApiPermissions } from "./api-permissions.js";
 import { PORTAL_REQUIRES_EXECUTOR, portalEntryProblem, readPortalDeclaration } from "../portal/alias.js";
 import { renderPackageIcons } from "../build-spk/dsm-icons.js";
+import { LOGIN_COLOR, loginImageProblem } from "../build-spk/login-style.js";
 import { validateReproducible } from "../reproducible-config.js";
 import { appSdkVersion, SDK_MODULE } from "../runtime/sdk-source.js";
 import { sdkProblems } from "./sdk-check.js";
 import { readWindowSize } from "./window-size.js";
-import { TIMEOUT_USAGE, validTimeoutSeconds } from "./request-timeout.js";
+import { appSdkTimeouts } from "../runtime/sdk-timeouts.js";
+import { requestTimeoutSeconds, rootRunDeadlineProblem, TIMEOUT_USAGE, validTimeoutSeconds } from "./request-timeout.js";
 import { BRIDGE_RUNTIMES, isBridgeBackend, overlaps, readBridgeBackend } from "./bridge-backend.js";
 /**
  * `dsm-package.yaml`: a Standalone Package, i.e. an unsigned native SPK that
@@ -27,7 +30,7 @@ import { BRIDGE_RUNTIMES, isBridgeBackend, overlaps, readBridgeBackend } from ".
 export const STANDALONE_MANIFEST = "dsm-package.yaml";
 export const KNOWN_FIELDS = new Set([
     "schema", "package", "version", "build", "displayname", "description",
-    "metadata", "maintainer", "os_min_ver", "arches", "backend", "ui", "capabilities", "i18n", "daemon", "install", "uninstall", "entry", "portal", "icon", "reproducible", "root",
+    "metadata", "maintainer", "os_min_ver", "arches", "backend", "ui", "capabilities", "i18n", "daemon", "install", "uninstall", "entry", "portal", "icon", "reproducible", "root", "login_style",
 ]);
 const I18N_FIELDS = new Set(["messages", "glossary", "info"]);
 const PACKAGE_ID = /^[A-Za-z][A-Za-z0-9]{1,63}$/;
@@ -91,7 +94,7 @@ export function loadStandaloneManifest(root) {
 function readManifest(raw, c) {
     for (const key of Object.keys(raw)) {
         if (!KNOWN_FIELDS.has(key)) {
-            c.fail("STANDALONE_FIELD_UNKNOWN", `Unsupported field "${key}". A Standalone Package does not accept custom lifecycle scripts or DSM conf.`);
+            c.fail("STANDALONE_FIELD_UNKNOWN", `Unsupported field "${key}". A Standalone Package does not accept DSM conf; put lifecycle scripts in dsm-scripts/<DSM script name>.`);
         }
     }
     if (raw.reproducible !== undefined) {
@@ -139,6 +142,16 @@ function readManifest(raw, c) {
     if (binaryProblem)
         c.fail("STANDALONE_ROOT_PROGRAMS_INVALID", binaryProblem);
     const backend = arches && readBackend(raw.backend, arches, c);
+    if (backend && backend.kind !== "binary" && rootOps) {
+        // root.run may run a program without settings (its defaults) or with run.
+        // The SDK's spec/protocol/v1 Timeouts say how long the executor and its client wait.
+        const timeouts = appSdkTimeouts(backend);
+        const runnable = rootOps.map(op => ({ op, setting: rootPrograms?.programs?.[op.name] })).filter(({ setting }) => !setting || setting.run)
+            .map(({ op, setting }) => ({ name: op.name, timeoutSeconds: setting?.run?.timeout_s ?? timeouts.rootRunDefaultSeconds }));
+        const problem = rootRunDeadlineProblem(runnable, requestTimeoutSeconds(backend), timeouts.rootRunRequestMarginSeconds);
+        if (problem)
+            c.fail("STANDALONE_REQUEST_TIMEOUT_SHORT", problem);
+    }
     let permissions;
     if (backend && backend.kind !== "binary") {
         try {
@@ -200,6 +213,7 @@ function readManifest(raw, c) {
     const i18n = raw.i18n === undefined ? undefined : readI18n(raw.i18n, c);
     const icon = raw.icon === undefined ? undefined : readIcon(raw.icon, c);
     const uninstall = readUninstall(raw.uninstall, { rootOps: capabilities.rootOps === true, ops: rootOps, en: i18n?.catalogs?.en }, e => c.fail(e.code, e.message));
+    const appScripts = readAppScripts(c.root, e => c.fail(e.code, e.message));
     const portal = raw.portal === undefined || !packageId ? undefined : readPortalDeclaration(raw.portal, packageId)
         ?? c.fail("STANDALONE_PORTAL_INVALID", "portal must be {} or { alias: <1-64 lowercase alphanumerics or -, not a DSM reserved path> }.");
     if (portal && !capabilities.rootOps && !capabilities.delegate) {
@@ -212,6 +226,7 @@ function readManifest(raw, c) {
         ? portalEntryProblem(packageId, { application: displayname, alias: portal.alias }) : undefined;
     if (entryProblem)
         c.fail("STANDALONE_PORTAL_ENTRY_INVALID", entryProblem);
+    const loginStyle = raw.login_style === undefined ? undefined : readLoginStyle(raw.login_style, raw.portal !== undefined, c);
     if (!packageId || !version || !build || !osMinVer || !displayname || !description || !maintainer
         || !arches || !backend || !ui || (capabilities.rootOps === true && !rootOps)) {
         return undefined;
@@ -241,6 +256,8 @@ function readManifest(raw, c) {
         ...(entry ? { entry } : {}),
         ...(portal ? { portal } : {}),
         ...(icon ? { icon } : {}),
+        ...(loginStyle ? { loginStyle } : {}),
+        ...(appScripts ? { appScripts } : {}),
     };
 }
 function checkBridgeMethods(backend, permissions, c) {
@@ -281,6 +298,37 @@ function readIcon(value, c) {
         return c.fail("STANDALONE_ICON_INVALID", `icon: ${error.message}`);
     }
 }
+const LOGIN_STYLE_FIELDS = ["color", "wallpaper", "wallpaper_thumbnail", "title"];
+/** `login_style`: a portal's colour, wallpaper (with its thumbnail) and title image, each optional. */
+function readLoginStyle(value, portal, c) {
+    const invalid = (message) => c.fail("STANDALONE_LOGIN_STYLE_INVALID", message);
+    if (!isRecord(value))
+        return invalid("login_style must be a mapping with color, wallpaper, wallpaper_thumbnail or title.");
+    if (!portal)
+        return invalid("login_style styles the Application Portal login page; declare portal as well, or remove login_style.");
+    const unknown = Object.keys(value).filter(key => !LOGIN_STYLE_FIELDS.includes(key));
+    if (unknown.length)
+        return invalid(`login_style does not accept ${unknown.join(", ")}; use ${LOGIN_STYLE_FIELDS.join(", ")}.`);
+    if (value.color !== undefined && (typeof value.color !== "string" || !LOGIN_COLOR.test(value.color))) {
+        return invalid('login_style.color must be a hex colour such as "#0F766E".');
+    }
+    if ((value.wallpaper === undefined) !== (value.wallpaper_thumbnail === undefined)) {
+        return invalid("login_style.wallpaper and login_style.wallpaper_thumbnail go together: DSM uses a package wallpaper only when both are set.");
+    }
+    const image = (field) => {
+        if (value[field] === undefined)
+            return undefined;
+        const path = c.path(value[field], `login_style.${field}`);
+        const problem = path && loginImageProblem(field, path);
+        return problem ? c.fail("STANDALONE_LOGIN_STYLE_IMAGE_INVALID", `login_style.${field}: ${problem}`) : path;
+    };
+    const [wallpaper, thumbnail, title] = [image("wallpaper"), image("wallpaper_thumbnail"), image("title")];
+    return {
+        ...(value.color !== undefined ? { color: value.color } : {}),
+        ...(wallpaper && thumbnail ? { wallpaper: { image: wallpaper, thumbnail } } : {}),
+        ...(title ? { title } : {}),
+    };
+}
 /** Where each backend kind's CGI main wraps its authenticator in the SDK entry gate. */
 const ENTRY_GATE = {
     go: { main: b => b.kind === "go" ? join(b.dir, b.main, "main.go") : "", call: "dsm.NewEntryGate(", sdk: `backend/go.mod must require ${SDK_MODULE}` },

package/dist/standalone/portal-window.d.ts

@@ -1,6 +1,7 @@
-type PortalLocale = "en" | "zh-TW" | "zh-CN" | "ja" | "ko" | "de" | "fr" | "es" | "it";
-/** SDK-owned portal panel text, shared by the plain panel and the Vue template. */
-export declare const PORTAL_MESSAGES: Record<string, Record<PortalLocale, string>>;
+/** The panel text by locale, keyed without the SDK's `portal.` prefix. */
+export type PortalCatalogs = Record<string, Record<string, string>>;
+/** The SDK's portal panel text (`ts/i18n/portal/<locale>.json` of the App's SDK), which the SDK owns and its Vue panel shows too. */
+export declare function portalCatalogs(sdkDir: string): PortalCatalogs;
 /**
  * `createPortalAccess(options)` → `ctx.portal`, plain ES5 for DSM's desktop.
  *
@@ -16,8 +17,7 @@ export declare const PORTAL_MESSAGES: Record<string, Record<PortalLocale, string
  * status or reject `{code}`. With `options.entry` (below DSM 7.2) the
  * backend's `portal.status` also reports the executor's entry, and
  * administrators get `register()` and `unregister()`; `openControlPanel()` opens Login Portal > Applications.
- * `messages` is the panel text in the window's locale; `mountPanel(element)`
+ * `messages` is the SDK's panel text in the window's locale; `mountPanel(element)`
  * renders a plain panel for UIs without their own.
  */
-export declare const PORTAL_RUNTIME: string;
-export {};
+export declare const portalRuntime: (catalogs: PortalCatalogs) => string;