@synopackageland/cli 0.10.2 → 0.10.4

package/dist/standalone/host-adapter.d.ts

@@ -1,5 +1,5 @@
 export type { HostAdapter, HostTitleResult, HostRequestResult, HostURLResult, HostEvent, HostSubscriptionResult, HostFileNavigationResult, HostUnsupportedResult } from "./host-types.js";
-export declare const HOST_ADAPTER_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}\n\nfunction requestHostFileNavigation(launch, path, isDirectory) {\n  if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n  var parts = path.split(\"/\");\n  if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {\n    return !part || part === \".\" || part === \"..\";\n  })) return { status: \"invalid-input\" };\n  var result = launch(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n  if (result.status !== \"requested\") return result;\n  return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n}\n\n\nvar REVEAL_RECOVERY_TIMEOUT_MS = 5000;\nvar REVEAL_RECOVERY_POLL_MS = 100;\nvar REVEAL_RECOVERY_QUIET_MS = 300;\nvar hostFileRevealOwners = null, hostFileRevealSequence = 0;\ntry { if (typeof WeakMap === \"function\") hostFileRevealOwners = new WeakMap(); } catch (error) {}\nfunction createHostFileRevealRecovery(path, canAct) {\n  var active = true, accepted = false, win = null, dom = null, tuple = null;\n  var poll = null, deadline = null, removers = [], reached = false, pending = 0;\n  var previous = null, quietSince = null, expires = 0, order = ++hostFileRevealSequence;\n  var parent = path.slice(0, path.lastIndexOf(\"/\"));\n  function cancel() {\n    if (!active) return;\n    active = false;\n    try { if (poll !== null) clearTimeout(poll); } catch (error) {}\n    try { if (deadline !== null) clearTimeout(deadline); } catch (error) {}\n    poll = deadline = null;\n    removers.splice(0).forEach(function (remove) { try { remove(); } catch (error) {} });\n    try {\n      if (win && hostFileRevealOwners.get(win).order === order) {\n        // Preserve ordering for a late older callback, without retaining its closures.\n        hostFileRevealOwners.set(win, { order: order, cancel: null });\n      }\n    } catch (error) {}\n    win = dom = tuple = previous = null;\n  }\n  function requireMethods(target, names) {\n    if (!target || names.some(function (name) { return typeof target[name] !== \"function\"; })) throw new Error(\"unsupported receiver\");\n  }\n  function guard(fn) {\n    return function () {\n      if (!active) return;\n      try { fn.apply(null, arguments); } catch (error) { cancel(); }\n    };\n  }\n  function listen(target, event, fn) {\n    requireMethods(target, [\"on\", \"un\"]);\n    var handler = guard(fn), remove = target.un;\n    removers.push(function () { remove.call(target, event, handler, target); });\n    target.on(event, handler, target);\n  }\n  function resetQuiet() { previous = null; quietSince = null; }\n  function inspect() {\n    requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n    if (win.isDestroyed || win.destroyed || !canAct()) { cancel(); return null; }\n    var element = win.getEl(), nextDom = element && element.dom;\n    if (!nextDom) { if (dom) cancel(); return null; }\n    requireMethods(nextDom, [\"addEventListener\", \"removeEventListener\"]);\n    if (dom && nextDom !== dom) { cancel(); return null; }\n    if (!dom) {\n      dom = nextDom;\n      [\"pointerdown\", \"mousedown\", \"touchstart\", \"keydown\", \"wheel\", \"click\", \"input\"].forEach(function (event) {\n        var remove = dom.removeEventListener, handler = guard(cancel), target = dom;\n        removers.push(function () { remove.call(target, event, handler, true); });\n        dom.addEventListener(event, handler, true);\n      });\n    }\n    var panel = win.getPanelInstance();\n    if (!panel) { if (tuple) cancel(); return null; }\n    requireMethods(panel, [\"getCurrentDir\", \"on\", \"un\"]);\n    var view = panel.activeView, store = panel.activeDS;\n    requireMethods(view, [\"getStore\", \"getSelectionModel\", \"scrollToItem\"]);\n    requireMethods(store, [\"on\", \"un\", \"indexOfId\", \"getAt\", \"getCount\"]);\n    var model = view.getSelectionModel();\n    requireMethods(model, [\"on\", \"un\", \"getSelections\", \"selectRow\"]);\n    if (view.getStore() !== store || panel.isDestroyed || store.isDestroyed || model.isDestroyed) { cancel(); return null; }\n    if (tuple && (tuple.panel !== panel || tuple.view !== view || tuple.store !== store || tuple.model !== model)) { cancel(); return null; }\n    if (!tuple) {\n      tuple = { panel: panel, view: view, store: store, model: model };\n      listen(panel, \"destroy\", cancel);\n      listen(panel, \"onNodeClick\", function (node) {\n        if (!node || !node.attributes || (reached && node.attributes.path !== parent)) cancel();\n      });\n      listen(store, \"beforeload\", function () {\n        pending++; resetQuiet(); inspect();\n      });\n      listen(store, \"load\", function () {\n        if (pending > 0) pending--;\n        resetQuiet(); check();\n      });\n      [\"exception\", \"loadexception\", \"destroy\"].forEach(function (event) { listen(store, event, cancel); });\n      listen(model, \"selectionchange\", function () { resetQuiet(); check(); });\n    }\n    var dir = panel.getCurrentDir(), params = store.baseParams;\n    // New File Station panels expose their APIs before the first directory is set.\n    // Keep the bound receiver guards and original deadline while startup finishes.\n    if (!reached && dir === undefined && (!params || params.folder_path === undefined)) return null;\n    if (!params || typeof params.folder_path !== \"string\") throw new Error(\"unsupported store path\");\n    // Native reconfigure/selection events can precede the store's path assignment.\n    if (dir === parent && params.folder_path === parent) reached = true;\n    if (reached && (dir !== parent || params.folder_path !== parent)) { cancel(); return null; }\n    var selections = model.getSelections();\n    if (!Array.isArray(selections)) throw new Error(\"unsupported selection\");\n    if (selections.some(function (record) { return !record || record.id !== path; })) { cancel(); return null; }\n    var index = store.indexOfId(path), count = store.getCount();\n    if (!Number.isInteger(index) || index < -1 || !Number.isInteger(count) || count < 0) throw new Error(\"unsupported store index\");\n    var record = index >= 0 ? store.getAt(index) : null;\n    if (index >= 0 && (!record || record.id !== path || index >= count)) throw new Error(\"inconsistent store\");\n    return { dir: dir, folder: params.folder_path, count: count, index: index, record: record, selected: selections.length > 0 };\n  }\n  function check() {\n    if (!active) return;\n    if (Date.now() >= expires || !canAct()) { cancel(); return; }\n    if (!win) return;\n    var state = inspect();\n    if (!active || !state) return;\n    if (pending || state.dir !== parent || state.folder !== parent || state.index < 0) { resetQuiet(); return; }\n    if (!previous || Object.keys(state).some(function (key) { return state[key] !== previous[key]; })) {\n      previous = state; quietSince = Date.now();\n    }\n    if (Date.now() - quietSince < REVEAL_RECOVERY_QUIET_MS) return;\n    var target = tuple, receiverWindow = win;\n    cancel(); // Release every observer before the one permitted selection mutation.\n    if (state.selected || !canAct()) return;\n    target.model.selectRow(state.index);\n    if (canAct() && !receiverWindow.isDestroyed && receiverWindow.getPanelInstance() === target.panel &&\n        target.panel.activeView === target.view && target.panel.activeDS === target.store &&\n        target.view.getSelectionModel() === target.model) target.view.scrollToItem(state.index);\n  }\n  function tick() {\n    poll = null;\n    try {\n      check();\n      if (active) poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    } catch (error) { cancel(); }\n  }\n  function receive(instance) {\n    if (!active || accepted) return;\n    accepted = true;\n    try {\n      if (Date.now() >= expires || !canAct()) { cancel(); return; }\n      win = instance && instance.window;\n      requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n      var owner = hostFileRevealOwners.get(win);\n      if (owner && owner.order > order) { cancel(); return; }\n      if (owner && owner.cancel) owner.cancel();\n      hostFileRevealOwners.set(win, { order: order, cancel: cancel });\n      [\"beforeclose\", \"close\", \"beforedestroy\", \"destroy\", \"hide\"].forEach(function (event) { listen(win, event, cancel); });\n      check();\n    } catch (error) { cancel(); }\n  }\n  try {\n    if (!parent || !hostFileRevealOwners || typeof setTimeout !== \"function\" || typeof clearTimeout !== \"function\" || typeof Date.now !== \"function\") {\n      cancel();\n    } else {\n      expires = Date.now() + REVEAL_RECOVERY_TIMEOUT_MS;\n      deadline = setTimeout(cancel, REVEAL_RECOVERY_TIMEOUT_MS);\n      poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    }\n  } catch (error) { cancel(); }\n  return { receive: receive, cancel: cancel };\n}\n\nfunction createHostAdapter(ctx) {\n  ctx = ctx || {};\n  var disposed = false, subscriptions = [], revealRecovery = null;\n  function launchApp(appId, config, receiverCallback) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof appId !== \"string\" || !appId || /\\s/.test(appId)) return { status: \"invalid-input\" };\n    try {\n      if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n      var sds = SYNO.SDS, map = sds.Config && sds.Config.FnMap, notifier = sds.StatusNotifier;\n      if (typeof sds.AppLaunch !== \"function\" || !map ||\n          !Object.prototype.hasOwnProperty.call(map, appId) || !map[appId] || !notifier ||\n          typeof notifier.isAppEnabled !== \"function\" || !notifier.isAppEnabled(appId) ||\n          typeof notifier.isAppLaunchable !== \"function\" || !notifier.isAppLaunchable(appId)) {\n        return { status: \"unsupported\" };\n      }\n      if (receiverCallback) sds.AppLaunch(appId, config, undefined, receiverCallback);\n      else sds.AppLaunch(appId, config);\n      return { status: \"requested\" };\n    } catch (error) { return { status: \"failed\" }; }\n  }\n  function navigateFileStation(path, isDirectory) {\n    if (disposed) return { status: \"unavailable\" };\n    if (revealRecovery) revealRecovery.cancel();\n    revealRecovery = null;\n    function launchFile(appId, config) {\n      if (isDirectory) return launchApp(appId, config);\n      var recovery = createHostFileRevealRecovery(path, function () { return !disposed && revealRecovery === recovery; });\n      revealRecovery = recovery;\n      var result = launchApp(appId, config, recovery.receive);\n      if (result.status !== \"requested\") recovery.cancel();\n      return result;\n    }\n    return requestHostFileNavigation(launchFile, path, isDirectory);\n  }\n  function unsupportedOperation() { return { status: disposed ? \"unavailable\" : \"unsupported\" }; }\n  return Object.freeze({\n    platform: function () {\n      if (!disposed) return inspectHostPlatform(ctx);\n      return Object.freeze({\n        web: typeof window !== \"undefined\", host: \"unavailable\",\n        dsmStandalone: null, dsmLanguage: null, appLocale: null,\n        systemVersion: null, fullVersion: null, theme: null\n      });\n    },\n    setTitle: function (title) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof title !== \"string\") return { status: \"invalid-input\" };\n      try {\n        var platform = inspectHostPlatform(ctx);\n        if (platform.host === \"dsm\") {\n          if (typeof ctx.appWindow.setTitle !== \"function\") return { status: \"unsupported\" };\n          ctx.appWindow.setTitle(title, undefined, true);\n          return { status: \"ok\", target: \"dsm-window\" };\n        }\n        if (!platform.web) return { status: \"unavailable\" };\n        if (typeof document === \"undefined\") return { status: \"unsupported\" };\n        document.title = title;\n        return { status: \"ok\", target: \"document\" };\n      } catch (error) {\n        return { status: \"failed\" };\n      }\n    },\n    activateWindow: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        var activate = typeof win.toFront === \"function\" ? win.toFront : win.activate;\n        if (typeof activate !== \"function\") return { status: \"unsupported\" };\n        // DSM minimizes by hiding; show preserves maximized geometry, unlike restore.\n        if (win.hidden === true || win.minimized === true ||\n            (typeof win.isVisible === \"function\" && win.isVisible() === false)) {\n          if (typeof win.show !== \"function\") return { status: \"unsupported\" };\n          win.show();\n        }\n        activate.call(win);\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    requestClose: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        // DSM returns a short-circuit value; only truthy means standalone main.\n        if (typeof win.close !== \"function\" || typeof win.isStandaloneMainWindow !== \"function\" ||\n            win.isStandaloneMainWindow()) return { status: \"unsupported\" };\n        if (win.canClose === false) return { status: \"blocked\" };\n        win.close();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openApp: function (appId) { return launchApp(appId, {}); },\n    openURL: function (raw) {\n      if (disposed || typeof window === \"undefined\") return { status: \"unavailable\" };\n      if (typeof raw !== \"string\" || !raw || /[\\s\\x00-\\x1f\\x7f]/.test(raw)) return { status: \"invalid-input\" };\n      if (typeof URL !== \"function\") return { status: \"unsupported\" };\n      var url;\n      try { url = new URL(raw); } catch (error) { return { status: \"invalid-input\" }; }\n      if ((url.protocol !== \"http:\" && url.protocol !== \"https:\") || url.username || url.password) return { status: \"invalid-input\" };\n      if (typeof window.open !== \"function\") return { status: \"unsupported\" };\n      try {\n        var opened = window.open(url.href, \"_blank\", \"noopener,noreferrer\");\n        return { status: \"requested\", windowHandleAvailable: !!opened };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openFileManager: function (path) { return navigateFileStation(path, true); },\n    revealFile: function (path) { return navigateFileStation(path, false); },\n    openFile: unsupportedOperation,\n    showFileDetails: unsupportedOperation,\n    openAppSetting: unsupportedOperation,\n    subscribe: function (event, listener) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof listener !== \"function\") return { status: \"invalid-input\" };\n      if (event !== \"window-resize\") return { status: \"unsupported\" };\n      var win, callback = listener, active = true;\n      function handler() { if (!disposed && callback) callback(); }\n      function unsubscribe() {\n        if (!active) return;\n        active = false;\n        callback = null;\n        var target = win;\n        win = null;\n        var index = subscriptions.indexOf(unsubscribe);\n        if (index !== -1) subscriptions.splice(index, 1);\n        try { if (target) target.un(\"resize\", handler, target); } catch (error) {}\n      }\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        win = ctx.appWindow;\n        if (typeof win.on !== \"function\" || typeof win.un !== \"function\") return { status: \"unsupported\" };\n        subscriptions.push(unsubscribe);\n        win.on(\"resize\", handler, win);\n        if (disposed) return { status: \"unavailable\" };\n        return Object.freeze({ status: \"subscribed\", dispose: unsubscribe });\n      } catch (error) {\n        unsubscribe();\n        return { status: \"failed\" };\n      }\n    },\n    dispose: function () {\n      if (disposed) return;\n      disposed = true;\n      if (revealRecovery) revealRecovery.cancel();\n      revealRecovery = null;\n      subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });\n      ctx = null;\n    }\n  });\n}";
+export declare const HOST_ADAPTER_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}\n\nfunction requestHostFileNavigation(launch, path, isDirectory) {\n  if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n  var volume = /^\\/volume(?:USB|SATA)?[0-9]+(?=\\/|$)/.exec(path);\n  if (volume) path = path.slice(volume[0].length);\n  var parts = path.split(\"/\");\n  if (parts.length < 2 || parts.slice(1).some(function (part) {\n    return !part || part === \".\" || part === \"..\";\n  })) return { status: \"invalid-input\" };\n  var result = launch(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n  if (result.status !== \"requested\") return result;\n  return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n}\n\n\nvar REVEAL_RECOVERY_TIMEOUT_MS = 5000;\nvar REVEAL_RECOVERY_POLL_MS = 100;\nvar REVEAL_RECOVERY_QUIET_MS = 300;\nvar hostFileRevealOwners = null, hostFileRevealSequence = 0;\ntry { if (typeof WeakMap === \"function\") hostFileRevealOwners = new WeakMap(); } catch (error) {}\nfunction createHostFileRevealRecovery(path, canAct) {\n  var active = true, accepted = false, win = null, dom = null, tuple = null;\n  var poll = null, deadline = null, removers = [], reached = false, pending = 0;\n  var previous = null, quietSince = null, expires = 0, order = ++hostFileRevealSequence;\n  var parent = path.slice(0, path.lastIndexOf(\"/\"));\n  function cancel() {\n    if (!active) return;\n    active = false;\n    try { if (poll !== null) clearTimeout(poll); } catch (error) {}\n    try { if (deadline !== null) clearTimeout(deadline); } catch (error) {}\n    poll = deadline = null;\n    removers.splice(0).forEach(function (remove) { try { remove(); } catch (error) {} });\n    try {\n      if (win && hostFileRevealOwners.get(win).order === order) {\n        // Preserve ordering for a late older callback, without retaining its closures.\n        hostFileRevealOwners.set(win, { order: order, cancel: null });\n      }\n    } catch (error) {}\n    win = dom = tuple = previous = null;\n  }\n  function requireMethods(target, names) {\n    if (!target || names.some(function (name) { return typeof target[name] !== \"function\"; })) throw new Error(\"unsupported receiver\");\n  }\n  function guard(fn) {\n    return function () {\n      if (!active) return;\n      try { fn.apply(null, arguments); } catch (error) { cancel(); }\n    };\n  }\n  function listen(target, event, fn) {\n    requireMethods(target, [\"on\", \"un\"]);\n    var handler = guard(fn), remove = target.un;\n    removers.push(function () { remove.call(target, event, handler, target); });\n    target.on(event, handler, target);\n  }\n  function resetQuiet() { previous = null; quietSince = null; }\n  function inspect() {\n    requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n    if (win.isDestroyed || win.destroyed || !canAct()) { cancel(); return null; }\n    var element = win.getEl(), nextDom = element && element.dom;\n    if (!nextDom) { if (dom) cancel(); return null; }\n    requireMethods(nextDom, [\"addEventListener\", \"removeEventListener\"]);\n    if (dom && nextDom !== dom) { cancel(); return null; }\n    if (!dom) {\n      dom = nextDom;\n      [\"pointerdown\", \"mousedown\", \"touchstart\", \"keydown\", \"wheel\", \"click\", \"input\"].forEach(function (event) {\n        var remove = dom.removeEventListener, handler = guard(cancel), target = dom;\n        removers.push(function () { remove.call(target, event, handler, true); });\n        dom.addEventListener(event, handler, true);\n      });\n    }\n    var panel = win.getPanelInstance();\n    if (!panel) { if (tuple) cancel(); return null; }\n    requireMethods(panel, [\"getCurrentDir\", \"on\", \"un\"]);\n    var view = panel.activeView, store = panel.activeDS;\n    requireMethods(view, [\"getStore\", \"getSelectionModel\", \"scrollToItem\"]);\n    requireMethods(store, [\"on\", \"un\", \"indexOfId\", \"getAt\", \"getCount\"]);\n    var model = view.getSelectionModel();\n    requireMethods(model, [\"on\", \"un\", \"getSelections\", \"selectRow\"]);\n    if (view.getStore() !== store || panel.isDestroyed || store.isDestroyed || model.isDestroyed) { cancel(); return null; }\n    if (tuple && (tuple.panel !== panel || tuple.view !== view || tuple.store !== store || tuple.model !== model)) { cancel(); return null; }\n    if (!tuple) {\n      tuple = { panel: panel, view: view, store: store, model: model };\n      listen(panel, \"destroy\", cancel);\n      listen(panel, \"onNodeClick\", function (node) {\n        if (!node || !node.attributes || (reached && node.attributes.path !== parent)) cancel();\n      });\n      listen(store, \"beforeload\", function () {\n        pending++; resetQuiet(); inspect();\n      });\n      listen(store, \"load\", function () {\n        if (pending > 0) pending--;\n        resetQuiet(); check();\n      });\n      [\"exception\", \"loadexception\", \"destroy\"].forEach(function (event) { listen(store, event, cancel); });\n      listen(model, \"selectionchange\", function () { resetQuiet(); check(); });\n    }\n    var dir = panel.getCurrentDir(), params = store.baseParams;\n    // New File Station panels expose their APIs before the first directory is set.\n    // Keep the bound receiver guards and original deadline while startup finishes.\n    if (!reached && dir === undefined && (!params || params.folder_path === undefined)) return null;\n    if (!params || typeof params.folder_path !== \"string\") throw new Error(\"unsupported store path\");\n    // Native reconfigure/selection events can precede the store's path assignment.\n    if (dir === parent && params.folder_path === parent) reached = true;\n    if (reached && (dir !== parent || params.folder_path !== parent)) { cancel(); return null; }\n    var selections = model.getSelections();\n    if (!Array.isArray(selections)) throw new Error(\"unsupported selection\");\n    if (selections.some(function (record) { return !record || record.id !== path; })) { cancel(); return null; }\n    var index = store.indexOfId(path), count = store.getCount();\n    if (!Number.isInteger(index) || index < -1 || !Number.isInteger(count) || count < 0) throw new Error(\"unsupported store index\");\n    var record = index >= 0 ? store.getAt(index) : null;\n    if (index >= 0 && (!record || record.id !== path || index >= count)) throw new Error(\"inconsistent store\");\n    return { dir: dir, folder: params.folder_path, count: count, index: index, record: record, selected: selections.length > 0 };\n  }\n  function check() {\n    if (!active) return;\n    if (Date.now() >= expires || !canAct()) { cancel(); return; }\n    if (!win) return;\n    var state = inspect();\n    if (!active || !state) return;\n    if (pending || state.dir !== parent || state.folder !== parent || state.index < 0) { resetQuiet(); return; }\n    if (!previous || Object.keys(state).some(function (key) { return state[key] !== previous[key]; })) {\n      previous = state; quietSince = Date.now();\n    }\n    if (Date.now() - quietSince < REVEAL_RECOVERY_QUIET_MS) return;\n    var target = tuple, receiverWindow = win;\n    cancel(); // Release every observer before the one permitted selection mutation.\n    if (state.selected || !canAct()) return;\n    target.model.selectRow(state.index);\n    if (canAct() && !receiverWindow.isDestroyed && receiverWindow.getPanelInstance() === target.panel &&\n        target.panel.activeView === target.view && target.panel.activeDS === target.store &&\n        target.view.getSelectionModel() === target.model) target.view.scrollToItem(state.index);\n  }\n  function tick() {\n    poll = null;\n    try {\n      check();\n      if (active) poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    } catch (error) { cancel(); }\n  }\n  function receive(instance) {\n    if (!active || accepted) return;\n    accepted = true;\n    try {\n      if (Date.now() >= expires || !canAct()) { cancel(); return; }\n      win = instance && instance.window;\n      requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n      var owner = hostFileRevealOwners.get(win);\n      if (owner && owner.order > order) { cancel(); return; }\n      if (owner && owner.cancel) owner.cancel();\n      hostFileRevealOwners.set(win, { order: order, cancel: cancel });\n      [\"beforeclose\", \"close\", \"beforedestroy\", \"destroy\", \"hide\"].forEach(function (event) { listen(win, event, cancel); });\n      check();\n    } catch (error) { cancel(); }\n  }\n  try {\n    if (!parent || !hostFileRevealOwners || typeof setTimeout !== \"function\" || typeof clearTimeout !== \"function\" || typeof Date.now !== \"function\") {\n      cancel();\n    } else {\n      expires = Date.now() + REVEAL_RECOVERY_TIMEOUT_MS;\n      deadline = setTimeout(cancel, REVEAL_RECOVERY_TIMEOUT_MS);\n      poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    }\n  } catch (error) { cancel(); }\n  return { receive: receive, cancel: cancel };\n}\n\nfunction createHostAdapter(ctx) {\n  ctx = ctx || {};\n  var disposed = false, subscriptions = [], revealRecovery = null;\n  function launchApp(appId, config, receiverCallback) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof appId !== \"string\" || !appId || /\\s/.test(appId)) return { status: \"invalid-input\" };\n    try {\n      if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n      var sds = SYNO.SDS, map = sds.Config && sds.Config.FnMap, notifier = sds.StatusNotifier;\n      if (typeof sds.AppLaunch !== \"function\" || !map ||\n          !Object.prototype.hasOwnProperty.call(map, appId) || !map[appId] || !notifier ||\n          typeof notifier.isAppEnabled !== \"function\" || !notifier.isAppEnabled(appId) ||\n          typeof notifier.isAppLaunchable !== \"function\" || !notifier.isAppLaunchable(appId)) {\n        return { status: \"unsupported\" };\n      }\n      if (receiverCallback) sds.AppLaunch(appId, config, undefined, receiverCallback);\n      else sds.AppLaunch(appId, config);\n      return { status: \"requested\" };\n    } catch (error) { return { status: \"failed\" }; }\n  }\n  function navigateFileStation(path, isDirectory) {\n    if (disposed) return { status: \"unavailable\" };\n    if (revealRecovery) revealRecovery.cancel();\n    revealRecovery = null;\n    function launchFile(appId, config) {\n      if (isDirectory) return launchApp(appId, config);\n      var recovery = createHostFileRevealRecovery(config.openfile, function () { return !disposed && revealRecovery === recovery; });\n      revealRecovery = recovery;\n      var result = launchApp(appId, config, recovery.receive);\n      if (result.status !== \"requested\") recovery.cancel();\n      return result;\n    }\n    return requestHostFileNavigation(launchFile, path, isDirectory);\n  }\n  function unsupportedOperation() { return { status: disposed ? \"unavailable\" : \"unsupported\" }; }\n  return Object.freeze({\n    platform: function () {\n      if (!disposed) return inspectHostPlatform(ctx);\n      return Object.freeze({\n        web: typeof window !== \"undefined\", host: \"unavailable\",\n        dsmStandalone: null, dsmLanguage: null, appLocale: null,\n        systemVersion: null, fullVersion: null, theme: null\n      });\n    },\n    setTitle: function (title) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof title !== \"string\") return { status: \"invalid-input\" };\n      try {\n        var platform = inspectHostPlatform(ctx);\n        if (platform.host === \"dsm\") {\n          if (typeof ctx.appWindow.setTitle !== \"function\") return { status: \"unsupported\" };\n          ctx.appWindow.setTitle(title, undefined, true);\n          return { status: \"ok\", target: \"dsm-window\" };\n        }\n        if (!platform.web) return { status: \"unavailable\" };\n        if (typeof document === \"undefined\") return { status: \"unsupported\" };\n        document.title = title;\n        return { status: \"ok\", target: \"document\" };\n      } catch (error) {\n        return { status: \"failed\" };\n      }\n    },\n    activateWindow: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        var activate = typeof win.toFront === \"function\" ? win.toFront : win.activate;\n        if (typeof activate !== \"function\") return { status: \"unsupported\" };\n        // DSM minimizes by hiding; show preserves maximized geometry, unlike restore.\n        if (win.hidden === true || win.minimized === true ||\n            (typeof win.isVisible === \"function\" && win.isVisible() === false)) {\n          if (typeof win.show !== \"function\") return { status: \"unsupported\" };\n          win.show();\n        }\n        activate.call(win);\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    requestClose: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        // DSM returns a short-circuit value; only truthy means standalone main.\n        if (typeof win.close !== \"function\" || typeof win.isStandaloneMainWindow !== \"function\" ||\n            win.isStandaloneMainWindow()) return { status: \"unsupported\" };\n        if (win.canClose === false) return { status: \"blocked\" };\n        win.close();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openApp: function (appId) { return launchApp(appId, {}); },\n    openURL: function (raw) {\n      if (disposed || typeof window === \"undefined\") return { status: \"unavailable\" };\n      if (typeof raw !== \"string\" || !raw || /[\\s\\x00-\\x1f\\x7f]/.test(raw)) return { status: \"invalid-input\" };\n      if (typeof URL !== \"function\") return { status: \"unsupported\" };\n      var url;\n      try { url = new URL(raw); } catch (error) { return { status: \"invalid-input\" }; }\n      if ((url.protocol !== \"http:\" && url.protocol !== \"https:\") || url.username || url.password) return { status: \"invalid-input\" };\n      if (typeof window.open !== \"function\") return { status: \"unsupported\" };\n      try {\n        var opened = window.open(url.href, \"_blank\", \"noopener,noreferrer\");\n        return { status: \"requested\", windowHandleAvailable: !!opened };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openFileManager: function (path) { return navigateFileStation(path, true); },\n    revealFile: function (path) { return navigateFileStation(path, false); },\n    openFile: unsupportedOperation,\n    showFileDetails: unsupportedOperation,\n    openAppSetting: unsupportedOperation,\n    subscribe: function (event, listener) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof listener !== \"function\") return { status: \"invalid-input\" };\n      if (event !== \"window-resize\") return { status: \"unsupported\" };\n      var win, callback = listener, active = true;\n      function handler() { if (!disposed && callback) callback(); }\n      function unsubscribe() {\n        if (!active) return;\n        active = false;\n        callback = null;\n        var target = win;\n        win = null;\n        var index = subscriptions.indexOf(unsubscribe);\n        if (index !== -1) subscriptions.splice(index, 1);\n        try { if (target) target.un(\"resize\", handler, target); } catch (error) {}\n      }\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        win = ctx.appWindow;\n        if (typeof win.on !== \"function\" || typeof win.un !== \"function\") return { status: \"unsupported\" };\n        subscriptions.push(unsubscribe);\n        win.on(\"resize\", handler, win);\n        if (disposed) return { status: \"unavailable\" };\n        return Object.freeze({ status: \"subscribed\", dispose: unsubscribe });\n      } catch (error) {\n        unsubscribe();\n        return { status: \"failed\" };\n      }\n    },\n    dispose: function () {\n      if (disposed) return;\n      disposed = true;\n      if (revealRecovery) revealRecovery.cancel();\n      revealRecovery = null;\n      subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });\n      ctx = null;\n    }\n  });\n}";
 /** A static, per-package factory for independent web shells; no Ext or transport. */
 export declare function renderHostAdapterScript(packageId: string): string;
 export declare function hostScriptName(build: number): string;

package/dist/standalone/host-adapter.js

@@ -29,7 +29,7 @@ function createHostAdapter(ctx) {
     revealRecovery = null;
     function launchFile(appId, config) {
       if (isDirectory) return launchApp(appId, config);
-      var recovery = createHostFileRevealRecovery(path, function () { return !disposed && revealRecovery === recovery; });
+      var recovery = createHostFileRevealRecovery(config.openfile, function () { return !disposed && revealRecovery === recovery; });
       revealRecovery = recovery;
       var result = launchApp(appId, config, recovery.receive);
       if (result.status !== "requested") recovery.cancel();

package/dist/standalone/host-file-navigation.d.ts

@@ -1,5 +1,9 @@
-/** Shared virtual-path validation and File Station request shaping. */
-export declare const HOST_FILE_NAVIGATION_RUNTIME = "\nfunction requestHostFileNavigation(launch, path, isDirectory) {\n  if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n  var parts = path.split(\"/\");\n  if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {\n    return !part || part === \".\" || part === \"..\";\n  })) return { status: \"invalid-input\" };\n  var result = launch(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n  if (result.status !== \"requested\") return result;\n  return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n}\n";
+/**
+ * Shared virtual-path validation and File Station request shaping. The rule is
+ * the SDK's (ts/src/dsm/file-station.ts): a DSM volume mount is stripped, and
+ * anything but one canonical shared-folder path is invalid-input.
+ */
+export declare const HOST_FILE_NAVIGATION_RUNTIME = "\nfunction requestHostFileNavigation(launch, path, isDirectory) {\n  if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n  var volume = /^\\/volume(?:USB|SATA)?[0-9]+(?=\\/|$)/.exec(path);\n  if (volume) path = path.slice(volume[0].length);\n  var parts = path.split(\"/\");\n  if (parts.length < 2 || parts.slice(1).some(function (part) {\n    return !part || part === \".\" || part === \"..\";\n  })) return { status: \"invalid-input\" };\n  var result = launch(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n  if (result.status !== \"requested\") return result;\n  return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n}\n";
 export declare const REVEAL_RECOVERY_TIMEOUT_MS = 5000;
 export declare const REVEAL_RECOVERY_POLL_MS = 100;
 export declare const REVEAL_RECOVERY_QUIET_MS = 300;

package/dist/standalone/host-file-navigation.js

@@ -1,10 +1,16 @@
-/** Shared virtual-path validation and File Station request shaping. */
+/**
+ * Shared virtual-path validation and File Station request shaping. The rule is
+ * the SDK's (ts/src/dsm/file-station.ts): a DSM volume mount is stripped, and
+ * anything but one canonical shared-folder path is invalid-input.
+ */
 export const HOST_FILE_NAVIGATION_RUNTIME = `
 function requestHostFileNavigation(launch, path, isDirectory) {
   if (typeof path !== "string" || path.length > 4096 || path.charAt(0) !== "/" ||
     /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: "invalid-input" };
+  var volume = /^\\/volume(?:USB|SATA)?[0-9]+(?=\\/|$)/.exec(path);
+  if (volume) path = path.slice(volume[0].length);
   var parts = path.split("/");
-  if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {
+  if (parts.length < 2 || parts.slice(1).some(function (part) {
     return !part || part === "." || part === "..";
   })) return { status: "invalid-input" };
   var result = launch("SYNO.SDS.App.FileStation3.Instance", isDirectory ? { opendir: path } : { openfile: path });

package/dist/standalone/inspect-spk.d.ts

@@ -1,4 +1,5 @@
 import { type ExecutorInspection } from "../runtime/executor-inspect.js";
+import { type AppScriptName } from "./app-scripts.js";
 import type { EntryMode } from "./manifest.js";
 import { type UninstallCleanupItem } from "../runtime/uninstall-cleanup.js";
 export type SpkKind = "native-go" | "native-python" | "native-node" | "native-rust" | "binary" | "container" | "native-layout";
@@ -30,11 +31,19 @@ export interface SpkInspection {
     };
     /** Declared `entry` mode; `admin-only` is the administrator floor of every route. */
     entry?: EntryMode;
+    /** The App's own scripts/app/<DSM script name>, each called from the generated script of that name. */
+    appScripts?: AppScriptName[];
     /** PACKAGE_ICON_256.PNG: the SDK default, a custom icon (by digest) or none. */
     icon?: {
         source: "default" | "custom" | "none";
         sha256?: string;
     };
+    /** The launcher's Login Portal style: its colour, whether the wallpaper is the CLI default, and what titles the login page. */
+    loginStyle?: {
+        color: string;
+        wallpaper: "default" | "custom";
+        title: "custom" | "app-icon" | "none";
+    };
 }
 /** Reads an SPK without installing it and reports how it would run on DSM. */
 export declare function inspectStandaloneSpk(spkPath: string): Promise<SpkInspection>;

package/dist/standalone/inspect-spk.js

@@ -2,7 +2,8 @@ import { createHash } from "node:crypto";
 import { inspectNativeLayout } from "./native-layout.js";
 import { checkBridgeApp, checkBridgeExecutor } from "./inspect-bridge.js";
 import { inspectExecutor, inspectExecutorAnchor } from "../runtime/executor-inspect.js";
-import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync } from "node:fs";
+import { existsSync, lstatSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync } from "node:fs";
+import { unwrapAppScripts } from "./app-scripts.js";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import * as tar from "tar";
@@ -26,6 +27,7 @@ import { uninstallCleanup } from "../runtime/uninstall-cleanup.js";
 import { PORTAL_JSON_RELPATH, PORTAL_MUSTACHE_RELPATH, renderPortalJson, renderPortalLifecycle, renderPortalMustache, renderPortalWizardStep } from "../portal/package.js";
 import { isPortalAlias } from "../portal/alias.js";
 import { defaultPackageIcons, MAX_ICON_BYTES } from "../build-spk/dsm-icons.js";
+import { isDefaultLoginAsset } from "../build-spk/login-style.js";
 import { decodePng } from "../build-spk/png.js";
 /** The SPK kind of each sdk-package.json backend a CGI is built for: Go itself, or the runtime of an App in another language. */
 const COMPILED_KIND = { go: "native-go", python: "native-python", node: "native-node", rust: "native-rust" };
@@ -80,6 +82,8 @@ export async function inspectSpk(spkPath, expectedKind) {
         const info = readInfo(join(dir, "INFO"), findings, kind);
         await checkArch(dir, info, kind, paths.has(CGI_PAYLOAD_PATH), findings);
         const background = compiledKind && paths.has(BACKGROUND_WORKER_PAYLOAD);
+        // Before any fixed-lifecycle comparison: those see the SDK steps alone.
+        const appScripts = standalone || kind === "container" ? unwrapAppScripts(join(dir, "scripts"), findings) : [];
         const sharedFolder = standalone ? recoverSharedFolder(readOptional(join(dir, "scripts/postinst"))) : undefined;
         // A Compose App has no executor, so its SPK never carries a portal.
         const portal = standalone ? await recoverPortal(dir, info, `SYNO.SDS.${info.package}.Instance`, paths, payload, findings) : undefined;
@@ -136,6 +140,7 @@ export async function inspectSpk(spkPath, expectedKind) {
         }
         if (metadata.entry)
             await checkEntryLauncher(dir, info.package, metadata.entry, findings);
+        const loginStyle = standalone ? await inspectLoginStyle(dir, info.package, Boolean(portal || executor?.policy.portal), findings) : undefined;
         if (standalone)
             checkSharedFolder(dir, findings, info.package, sharedFolder, executor?.policy.scope === 'install-selected', portal, hasExecutor);
         const icon = inspectPackageIcons(dir, findings);
@@ -153,6 +158,8 @@ export async function inspectSpk(spkPath, expectedKind) {
             ...(portal ? { portal: { appId: portal.appId, alias: portal.alias } } : {}),
             ...(executor?.policy.portal ? { portal: { appId: executor.policy.app, alias: executor.policy.portal.alias } } : {}),
             ...(metadata.entry ? { entry: metadata.entry } : {}),
+            ...(appScripts.length ? { appScripts } : {}),
+            ...(loginStyle ? { loginStyle } : {}),
             ...(standalone ? { uninstallCleanup: uninstallCleanup(info.package, { executor: hasExecutor, portal: Boolean(portal), portalEntry: Boolean(executor?.policy.portal) }) } : {}),
             package: info.package,
             version: info.version,
@@ -185,6 +192,47 @@ async function checkEntryLauncher(dir, pkg, entry, findings) {
         findings.push(`ENTRY_LAUNCHER_MISMATCH sdk-package.json declares entry: ${entry}, but the ui/config launcher is not ${JSON.stringify(expected)}; regenerate it with synopkgland build`);
     }
 }
+const LOGIN_STYLE_FILES = ["defaultLoginWallpaper", "defaultLoginWallpaperThumbnail", "loginPreviewThumbnailMaskPath", "titleImgPath"];
+/**
+ * The launcher's loginStyle and the ui/ files it names, at 1x and 2x. A portal
+ * App without one shows a blank Control Panel > Login Portal thumbnail.
+ */
+async function inspectLoginStyle(dir, pkg, portal, findings) {
+    const target = join(dir, "login-style-inspection");
+    mkdirSync(target);
+    await tar.x({ file: join(dir, "package.tgz"), cwd: target, filter: path => path.replace(/^\.\//, "").startsWith("ui/") });
+    let launcher;
+    try {
+        const config = JSON.parse(readFileSync(join(target, "ui/config"), "utf8"));
+        launcher = Object.values(config)[0]?.[`SYNO.SDS.${pkg}.Instance`];
+    }
+    catch { /* reported by the other checks */ }
+    const style = launcher?.loginStyle;
+    if (typeof style !== "object" || style === null) {
+        if (portal)
+            findings.push("LOGIN_STYLE_MISSING the Application Portal launcher has no loginStyle in ui/config, so Control Panel > Login Portal shows a blank thumbnail; rebuild with synopkgland build");
+        return undefined;
+    }
+    const fields = style;
+    const read = (field) => {
+        const path = fields[field];
+        if (path === undefined)
+            return undefined;
+        const files = typeof path === "string" && !path.split("/").includes("..") && !path.startsWith("/")
+            ? ["1x", "2x"].map(scale => join(target, "ui", path.replace("{0}", scale))) : [];
+        if (!files.length || !files.every(file => existsSync(file))) {
+            findings.push(`LOGIN_STYLE_FILE_MISSING ui/config loginStyle.${field} names ui/${String(path)}, which the payload does not carry`);
+            return undefined;
+        }
+        return readFileSync(files[0]);
+    };
+    const [wallpaper] = LOGIN_STYLE_FILES.map(read);
+    return {
+        color: String(fields.mainColor ?? ""),
+        wallpaper: wallpaper && isDefaultLoginAsset("wallpaper.jpg", wallpaper) ? "default" : "custom",
+        title: fields.titleImgPath !== undefined ? "custom" : launcher.loginIcon !== undefined ? "app-icon" : "none",
+    };
+}
 /** Package Center shows PACKAGE_ICON at 64 and 256 px; the package source refuses a release whose icon is over 256 KiB. */
 function inspectPackageIcons(dir, findings) {
     for (const [name, size] of [["PACKAGE_ICON.PNG", 64], ["PACKAGE_ICON_256.PNG", 256]]) {
@@ -479,12 +527,18 @@ function checkScripts(dir, findings) {
     if (!existsSync(join(scriptsDir, "start-stop-status"))) {
         findings.push("scripts/start-stop-status is missing");
     }
-    for (const name of existsSync(scriptsDir) ? readdirSync(scriptsDir) : []) {
-        const body = readFileSync(join(scriptsDir, name), "utf8");
-        if (ROOT_SCRIPT_HINTS.some((pattern) => pattern.test(body))) {
-            findings.push(`scripts/${name} tries to gain root (sudo, chown root or setuid)`);
+    const scan = (relative) => {
+        const path = join(dir, relative);
+        if (lstatSync(path).isDirectory()) {
+            for (const name of readdirSync(path))
+                scan(`${relative}/${name}`);
         }
-    }
+        else if (ROOT_SCRIPT_HINTS.some((pattern) => pattern.test(readFileSync(path, "utf8")))) {
+            findings.push(`${relative} tries to gain root (sudo, chown root or setuid)`);
+        }
+    };
+    if (existsSync(scriptsDir))
+        scan("scripts");
 }
 const DATA_KEYS = ["pkgwizard_remove_additional", "delete_app_data"];
 const DELETE_COMMAND = /\brm\s+-[a-zA-Z]*[rR]|\bfind\b[^\n]*(-delete|-exec\s+rm)/;

package/dist/standalone/lifecycle.js

@@ -5,12 +5,14 @@ import { renderDelegateInstallDraft } from '../build-spk/delegate-scope.js';
 import { renderPortalLifecycle } from "../portal/package.js";
 import { nativePortal } from "./portal.js";
 import { renderUninstallHook } from "./uninstall-hook.js";
+import { composeAppScript } from "./app-scripts.js";
 const UNINSTALL_ONLY = '[ "${SYNOPKG_PKG_STATUS:-}" = UPGRADE ] || synopkgland_uninstall_hook\n';
 /** Package-account lifecycle hooks for CGI, daemon and background packages. */
 export function renderStandaloneScript(name, manifest) {
     const portal = nativePortal(manifest);
     const script = renderCapabilityScript(name, manifest);
-    return portal ? script.replace("#!/bin/sh\n", () => `#!/bin/sh\n${renderPortalLifecycle(name, portal)}`) : script;
+    const sdk = portal ? script.replace("#!/bin/sh\n", () => `#!/bin/sh\n${renderPortalLifecycle(name, portal)}`) : script;
+    return manifest.appScripts?.some(app => app === name) ? composeAppScript(name, sdk) : sdk;
 }
 function renderCapabilityScript(name, manifest) {
     if (name === 'preupgrade' && (manifest.capabilities.rootOps || manifest.capabilities.delegate)) {

package/dist/standalone/manifest.d.ts

@@ -8,10 +8,12 @@ import { type RootOp } from "./root-ops.js";
 import type { RootSettings } from "../runtime/root-programs.js";
 import { type Daemon } from "./daemon.js";
 import { type Uninstall } from "./uninstall.js";
+import { type AppScriptName } from "./app-scripts.js";
 import { type Background } from "./background.js";
 import { type SharedFolder } from "./shared-folder.js";
 import { readApiPermissions, type ApiPermissions } from "./api-permissions.js";
 import { type PortalDeclaration } from "../portal/alias.js";
+import { type LoginStyle } from "../build-spk/login-style.js";
 import { type SdkBackend } from "../runtime/sdk-source.js";
 import { type WindowSize } from "./window-size.js";
 import { type BridgeBackend } from "./bridge-backend.js";
@@ -81,8 +83,12 @@ export interface StandaloneManifest {
     entry?: EntryMode;
     /** `portal`: registers the DSM Application Portal entry; an administrator activates it. */
     portal?: PortalDeclaration;
+    /** The project's dsm-scripts/<DSM script name> files, each run inside the generated script of that name. */
+    appScripts?: AppScriptName[];
     /** `icon`: a square PNG of at least 256 px, or a directory of icon_<size>.png; absent uses the SDK default. */
     icon?: string;
+    /** `login_style`: the portal login page's colour, wallpaper and title over the CLI defaults. */
+    loginStyle?: LoginStyle;
 }
 /**
  * `admin-only`: DSM administrators only. `app-privilege`: administrators and

package/dist/standalone/manifest.js

@@ -8,17 +8,20 @@ import { checkGlossary, loadCatalogs, readInfoTranslations } from "./i18n.js";
 import { loadRootOps, readRootSettings, rootBinaryProblem, ROOT_OPS_DIR } from "./root-ops.js";
 import { readDaemon } from "./daemon.js";
 import { readUninstall } from "./uninstall.js";
+import { readAppScripts } from "./app-scripts.js";
 import { readBackground } from "./background.js";
 import { DEFAULT_MIN_DSM, isDsmAtLeast, PORTAL_EXECUTOR_MIN_DSM, portalByExecutor, portalMinDsmMessage } from "../build-spk/dsm-version.js";
 import { readSharedFolder } from "./shared-folder.js";
 import { API_PERMISSIONS_FILE, floorAtAdministrators, permitsOrdinaryUsers, readApiPermissions } from "./api-permissions.js";
 import { PORTAL_REQUIRES_EXECUTOR, portalEntryProblem, readPortalDeclaration } from "../portal/alias.js";
 import { renderPackageIcons } from "../build-spk/dsm-icons.js";
+import { LOGIN_COLOR, loginImageProblem } from "../build-spk/login-style.js";
 import { validateReproducible } from "../reproducible-config.js";
 import { appSdkVersion, SDK_MODULE } from "../runtime/sdk-source.js";
 import { sdkProblems } from "./sdk-check.js";
 import { readWindowSize } from "./window-size.js";
-import { TIMEOUT_USAGE, validTimeoutSeconds } from "./request-timeout.js";
+import { appSdkTimeouts } from "../runtime/sdk-timeouts.js";
+import { requestTimeoutSeconds, rootRunDeadlineProblem, TIMEOUT_USAGE, validTimeoutSeconds } from "./request-timeout.js";
 import { BRIDGE_RUNTIMES, isBridgeBackend, overlaps, readBridgeBackend } from "./bridge-backend.js";
 /**
  * `dsm-package.yaml`: a Standalone Package, i.e. an unsigned native SPK that
@@ -27,7 +30,7 @@ import { BRIDGE_RUNTIMES, isBridgeBackend, overlaps, readBridgeBackend } from ".
 export const STANDALONE_MANIFEST = "dsm-package.yaml";
 export const KNOWN_FIELDS = new Set([
     "schema", "package", "version", "build", "displayname", "description",
-    "metadata", "maintainer", "os_min_ver", "arches", "backend", "ui", "capabilities", "i18n", "daemon", "install", "uninstall", "entry", "portal", "icon", "reproducible", "root",
+    "metadata", "maintainer", "os_min_ver", "arches", "backend", "ui", "capabilities", "i18n", "daemon", "install", "uninstall", "entry", "portal", "icon", "reproducible", "root", "login_style",
 ]);
 const I18N_FIELDS = new Set(["messages", "glossary", "info"]);
 const PACKAGE_ID = /^[A-Za-z][A-Za-z0-9]{1,63}$/;
@@ -91,7 +94,7 @@ export function loadStandaloneManifest(root) {
 function readManifest(raw, c) {
     for (const key of Object.keys(raw)) {
         if (!KNOWN_FIELDS.has(key)) {
-            c.fail("STANDALONE_FIELD_UNKNOWN", `Unsupported field "${key}". A Standalone Package does not accept custom lifecycle scripts or DSM conf.`);
+            c.fail("STANDALONE_FIELD_UNKNOWN", `Unsupported field "${key}". A Standalone Package does not accept DSM conf; put lifecycle scripts in dsm-scripts/<DSM script name>.`);
         }
     }
     if (raw.reproducible !== undefined) {
@@ -139,6 +142,16 @@ function readManifest(raw, c) {
     if (binaryProblem)
         c.fail("STANDALONE_ROOT_PROGRAMS_INVALID", binaryProblem);
     const backend = arches && readBackend(raw.backend, arches, c);
+    if (backend && backend.kind !== "binary" && rootOps) {
+        // root.run may run a program without settings (its defaults) or with run.
+        // The SDK's spec/protocol/v1 Timeouts say how long the executor and its client wait.
+        const timeouts = appSdkTimeouts(backend);
+        const runnable = rootOps.map(op => ({ op, setting: rootPrograms?.programs?.[op.name] })).filter(({ setting }) => !setting || setting.run)
+            .map(({ op, setting }) => ({ name: op.name, timeoutSeconds: setting?.run?.timeout_s ?? timeouts.rootRunDefaultSeconds }));
+        const problem = rootRunDeadlineProblem(runnable, requestTimeoutSeconds(backend), timeouts.rootRunRequestMarginSeconds);
+        if (problem)
+            c.fail("STANDALONE_REQUEST_TIMEOUT_SHORT", problem);
+    }
     let permissions;
     if (backend && backend.kind !== "binary") {
         try {
@@ -200,6 +213,7 @@ function readManifest(raw, c) {
     const i18n = raw.i18n === undefined ? undefined : readI18n(raw.i18n, c);
     const icon = raw.icon === undefined ? undefined : readIcon(raw.icon, c);
     const uninstall = readUninstall(raw.uninstall, { rootOps: capabilities.rootOps === true, ops: rootOps, en: i18n?.catalogs?.en }, e => c.fail(e.code, e.message));
+    const appScripts = readAppScripts(c.root, e => c.fail(e.code, e.message));
     const portal = raw.portal === undefined || !packageId ? undefined : readPortalDeclaration(raw.portal, packageId)
         ?? c.fail("STANDALONE_PORTAL_INVALID", "portal must be {} or { alias: <1-64 lowercase alphanumerics or -, not a DSM reserved path> }.");
     if (portal && !capabilities.rootOps && !capabilities.delegate) {
@@ -212,6 +226,7 @@ function readManifest(raw, c) {
         ? portalEntryProblem(packageId, { application: displayname, alias: portal.alias }) : undefined;
     if (entryProblem)
         c.fail("STANDALONE_PORTAL_ENTRY_INVALID", entryProblem);
+    const loginStyle = raw.login_style === undefined ? undefined : readLoginStyle(raw.login_style, raw.portal !== undefined, c);
     if (!packageId || !version || !build || !osMinVer || !displayname || !description || !maintainer
         || !arches || !backend || !ui || (capabilities.rootOps === true && !rootOps)) {
         return undefined;
@@ -241,6 +256,8 @@ function readManifest(raw, c) {
         ...(entry ? { entry } : {}),
         ...(portal ? { portal } : {}),
         ...(icon ? { icon } : {}),
+        ...(loginStyle ? { loginStyle } : {}),
+        ...(appScripts ? { appScripts } : {}),
     };
 }
 function checkBridgeMethods(backend, permissions, c) {
@@ -281,6 +298,37 @@ function readIcon(value, c) {
         return c.fail("STANDALONE_ICON_INVALID", `icon: ${error.message}`);
     }
 }
+const LOGIN_STYLE_FIELDS = ["color", "wallpaper", "wallpaper_thumbnail", "title"];
+/** `login_style`: a portal's colour, wallpaper (with its thumbnail) and title image, each optional. */
+function readLoginStyle(value, portal, c) {
+    const invalid = (message) => c.fail("STANDALONE_LOGIN_STYLE_INVALID", message);
+    if (!isRecord(value))
+        return invalid("login_style must be a mapping with color, wallpaper, wallpaper_thumbnail or title.");
+    if (!portal)
+        return invalid("login_style styles the Application Portal login page; declare portal as well, or remove login_style.");
+    const unknown = Object.keys(value).filter(key => !LOGIN_STYLE_FIELDS.includes(key));
+    if (unknown.length)
+        return invalid(`login_style does not accept ${unknown.join(", ")}; use ${LOGIN_STYLE_FIELDS.join(", ")}.`);
+    if (value.color !== undefined && (typeof value.color !== "string" || !LOGIN_COLOR.test(value.color))) {
+        return invalid('login_style.color must be a hex colour such as "#0F766E".');
+    }
+    if ((value.wallpaper === undefined) !== (value.wallpaper_thumbnail === undefined)) {
+        return invalid("login_style.wallpaper and login_style.wallpaper_thumbnail go together: DSM uses a package wallpaper only when both are set.");
+    }
+    const image = (field) => {
+        if (value[field] === undefined)
+            return undefined;
+        const path = c.path(value[field], `login_style.${field}`);
+        const problem = path && loginImageProblem(field, path);
+        return problem ? c.fail("STANDALONE_LOGIN_STYLE_IMAGE_INVALID", `login_style.${field}: ${problem}`) : path;
+    };
+    const [wallpaper, thumbnail, title] = [image("wallpaper"), image("wallpaper_thumbnail"), image("title")];
+    return {
+        ...(value.color !== undefined ? { color: value.color } : {}),
+        ...(wallpaper && thumbnail ? { wallpaper: { image: wallpaper, thumbnail } } : {}),
+        ...(title ? { title } : {}),
+    };
+}
 /** Where each backend kind's CGI main wraps its authenticator in the SDK entry gate. */
 const ENTRY_GATE = {
     go: { main: b => b.kind === "go" ? join(b.dir, b.main, "main.go") : "", call: "dsm.NewEntryGate(", sdk: `backend/go.mod must require ${SDK_MODULE}` },

package/dist/standalone/portal-window.d.ts

@@ -1,6 +1,7 @@
-type PortalLocale = "en" | "zh-TW" | "zh-CN" | "ja" | "ko" | "de" | "fr" | "es" | "it";
-/** SDK-owned portal panel text, shared by the plain panel and the Vue template. */
-export declare const PORTAL_MESSAGES: Record<string, Record<PortalLocale, string>>;
+/** The panel text by locale, keyed without the SDK's `portal.` prefix. */
+export type PortalCatalogs = Record<string, Record<string, string>>;
+/** The SDK's portal panel text (`ts/i18n/portal/<locale>.json` of the App's SDK), which the SDK owns and its Vue panel shows too. */
+export declare function portalCatalogs(sdkDir: string): PortalCatalogs;
 /**
  * `createPortalAccess(options)` → `ctx.portal`, plain ES5 for DSM's desktop.
  *
@@ -16,8 +17,7 @@ export declare const PORTAL_MESSAGES: Record<string, Record<PortalLocale, string
  * status or reject `{code}`. With `options.entry` (below DSM 7.2) the
  * backend's `portal.status` also reports the executor's entry, and
  * administrators get `register()` and `unregister()`; `openControlPanel()` opens Login Portal > Applications.
- * `messages` is the panel text in the window's locale; `mountPanel(element)`
+ * `messages` is the SDK's panel text in the window's locale; `mountPanel(element)`
  * renders a plain panel for UIs without their own.
  */
-export declare const PORTAL_RUNTIME: string;
-export {};
+export declare const portalRuntime: (catalogs: PortalCatalogs) => string;

package/dist/standalone/portal-window.js

@@ -1,33 +1,13 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
 import { PORTAL_ALIAS_PATTERN, RESERVED_PORTAL_ALIASES } from "../portal/alias.js";
-/** SDK-owned portal panel text, shared by the plain panel and the Vue template. */
-export const PORTAL_MESSAGES = {
-    title: { en: "Application Portal", "zh-TW": "應用程式入口", "zh-CN": "应用程序门户", ja: "アプリケーションポータル", ko: "응용 프로그램 포털", de: "Anwendungsportal", fr: "Portail d'application", es: "Portal de aplicaciones", it: "Portale applicazioni" },
-    link: { en: "Direct link after DSM sign-in:", "zh-TW": "DSM 登入後的直接連結：", "zh-CN": "DSM 登录后的直接链接：", ja: "DSM サインイン後の直接リンク：", ko: "DSM 로그인 후 바로 가기 링크:", de: "Direkter Link nach der DSM-Anmeldung:", fr: "Lien direct après connexion à DSM :", es: "Enlace directo tras iniciar sesión en DSM:", it: "Link diretto dopo l'accesso a DSM:" },
-    inactive: { en: "Not active. Apply an alias to let users open this app directly after DSM sign-in.", "zh-TW": "尚未啟用。套用別名後，使用者可在 DSM 登入後直接開啟這個 App。", "zh-CN": "尚未启用。应用别名后，用户可在 DSM 登录后直接打开此应用。", ja: "無効です。エイリアスを適用すると、DSM サインイン後にこのアプリを直接開けます。", ko: "비활성 상태입니다. 별칭을 적용하면 DSM 로그인 후 이 앱을 바로 열 수 있습니다.", de: "Nicht aktiv. Wenden Sie einen Alias an, damit Benutzer diese App nach der DSM-Anmeldung direkt öffnen können.", fr: "Inactif. Appliquez un alias pour ouvrir cette application directement après connexion à DSM.", es: "Inactivo. Aplique un alias para abrir esta aplicación directamente tras iniciar sesión en DSM.", it: "Non attivo. Applica un alias per aprire questa app direttamente dopo l'accesso a DSM." },
-    askAdmin: { en: "Ask an administrator to set this up", "zh-TW": "請管理員設定", "zh-CN": "请管理员设置", ja: "管理者に設定を依頼してください", ko: "관리자에게 설정을 요청하십시오", de: "Bitten Sie einen Administrator, dies einzurichten", fr: "Demandez à un administrateur de le configurer", es: "Pida a un administrador que lo configure", it: "Chiedi a un amministratore di configurarlo" },
-    alias: { en: "Alias", "zh-TW": "別名", "zh-CN": "别名", ja: "エイリアス", ko: "별칭", de: "Alias", fr: "Alias", es: "Alias", it: "Alias" },
-    apply: { en: "Apply", "zh-TW": "套用", "zh-CN": "应用", ja: "適用", ko: "적용", de: "Übernehmen", fr: "Appliquer", es: "Aplicar", it: "Applica" },
-    disable: { en: "Turn off", "zh-TW": "停用", "zh-CN": "停用", ja: "無効にする", ko: "끄기", de: "Ausschalten", fr: "Désactiver", es: "Desactivar", it: "Disattiva" },
-    advanced: { en: "Advanced settings in Control Panel", "zh-TW": "在控制台進行進階設定", "zh-CN": "在控制面板中进行高级设置", ja: "コントロールパネルの詳細設定", ko: "제어판의 고급 설정", de: "Erweiterte Einstellungen in der Systemsteuerung", fr: "Paramètres avancés dans le Panneau de configuration", es: "Ajustes avanzados en el Panel de control", it: "Impostazioni avanzate nel Pannello di controllo" },
-    controlPanel: { en: "Open Control Panel Application Portal", "zh-TW": "開啟控制台 Application Portal", "zh-CN": "打开控制面板 Application Portal", ja: "コントロールパネルの Application Portal を開く", ko: "제어판 Application Portal 열기", de: "Application Portal in der Systemsteuerung öffnen", fr: "Ouvrir Application Portal dans le Panneau de configuration", es: "Abrir Application Portal en el Panel de control", it: "Apri Application Portal nel Pannello di controllo" },
-    entryOff: { en: "This app has no Application Portal entry yet. Enable the entry so that an alias can open it after DSM sign-in.", "zh-TW": "這個 App 尚未加入應用程式入口。啟用入口後，即可用別名在 DSM 登入後直接開啟。", "zh-CN": "此应用尚未加入应用程序门户。启用入口后，即可用别名在 DSM 登录后直接打开。", ja: "このアプリはまだアプリケーションポータルに登録されていません。エントリを有効にすると、DSM サインイン後にエイリアスで直接開けます。", ko: "이 앱은 아직 응용 프로그램 포털에 등록되지 않았습니다. 항목을 활성화하면 DSM 로그인 후 별칭으로 바로 열 수 있습니다.", de: "Diese App hat noch keinen Eintrag im Anwendungsportal. Aktivieren Sie den Eintrag, damit ein Alias sie nach der DSM-Anmeldung öffnet.", fr: "Cette application n'a pas encore d'entrée dans le Portail d'application. Activez l'entrée pour qu'un alias l'ouvre après connexion à DSM.", es: "Esta aplicación aún no tiene una entrada en el Portal de aplicaciones. Active la entrada para que un alias la abra tras iniciar sesión en DSM.", it: "Questa app non ha ancora una voce nel Portale applicazioni. Attivare la voce per aprirla con un alias dopo l'accesso a DSM." },
-    cleanupRequired: { en: "The Application Portal entry was not fully removed. Remove the entry again.", "zh-TW": "應用程式入口未完全移除。請再移除一次入口。", "zh-CN": "应用程序门户入口未完全移除。请再移除一次入口。", ja: "アプリケーションポータルのエントリが完全に削除されていません。もう一度エントリを削除してください。", ko: "응용 프로그램 포털 항목이 완전히 제거되지 않았습니다. 항목을 다시 제거하십시오.", de: "Der Eintrag im Anwendungsportal wurde nicht vollständig entfernt. Entfernen Sie den Eintrag erneut.", fr: "L'entrée du Portail d'application n'a pas été entièrement supprimée. Supprimez de nouveau l'entrée.", es: "La entrada del Portal de aplicaciones no se eliminó por completo. Elimine la entrada de nuevo.", it: "La voce del Portale applicazioni non è stata rimossa completamente. Rimuovere di nuovo la voce." },
-    register: { en: "Enable entry", "zh-TW": "啟用入口", "zh-CN": "启用入口", ja: "エントリを有効にする", ko: "항목 활성화", de: "Eintrag aktivieren", fr: "Activer l'entrée", es: "Activar entrada", it: "Attiva voce" },
-    unregister: { en: "Remove entry", "zh-TW": "移除入口", "zh-CN": "移除入口", ja: "エントリを削除", ko: "항목 제거", de: "Eintrag entfernen", fr: "Supprimer l'entrée", es: "Eliminar entrada", it: "Rimuovi voce" },
-    portal_alias_invalid: { en: "Use 1-64 lowercase letters, digits or hyphens, not starting or ending with a hyphen.", "zh-TW": "請使用 1–64 個小寫英文字母、數字或連字號，且不可以連字號開頭或結尾。", "zh-CN": "请使用 1–64 个小写英文字母、数字或连字符，且不能以连字符开头或结尾。", ja: "1～64 文字の小文字英字・数字・ハイフンを使用し、先頭と末尾にハイフンは使えません。", ko: "1~64자의 영문 소문자, 숫자 또는 하이픈을 사용하고 하이픈으로 시작하거나 끝나지 않게 하십시오.", de: "Verwenden Sie 1–64 Kleinbuchstaben, Ziffern oder Bindestriche, ohne Bindestrich am Anfang oder Ende.", fr: "Utilisez 1 à 64 lettres minuscules, chiffres ou tirets, sans tiret au début ni à la fin.", es: "Use de 1 a 64 letras minúsculas, dígitos o guiones, sin guion al principio ni al final.", it: "Usare da 1 a 64 lettere minuscole, cifre o trattini, senza trattino all'inizio o alla fine." },
-    portal_alias_reserved: { en: "DSM already uses this alias. Choose another one.", "zh-TW": "DSM 已使用這個別名，請改用其他別名。", "zh-CN": "DSM 已使用此别名，请改用其他别名。", ja: "このエイリアスは DSM で使用されています。別のものを選んでください。", ko: "DSM에서 이미 사용하는 별칭입니다. 다른 별칭을 선택하십시오.", de: "DSM verwendet diesen Alias bereits. Wählen Sie einen anderen.", fr: "DSM utilise déjà cet alias. Choisissez-en un autre.", es: "DSM ya usa este alias. Elija otro.", it: "DSM usa già questo alias. Sceglierne un altro." },
-    portal_alias_in_use: { en: "Another app already uses this alias. Choose another one.", "zh-TW": "另一個 App 已使用這個別名，請改用其他別名。", "zh-CN": "另一个应用已使用此别名，请改用其他别名。", ja: "別のアプリがこのエイリアスを使用しています。別のものを選んでください。", ko: "다른 앱이 이미 이 별칭을 사용합니다. 다른 별칭을 선택하십시오.", de: "Eine andere App verwendet diesen Alias bereits. Wählen Sie einen anderen.", fr: "Une autre application utilise déjà cet alias. Choisissez-en un autre.", es: "Otra aplicación ya usa este alias. Elija otro.", it: "Un'altra app usa già questo alias. Sceglierne un altro." },
-    admin_required: { en: "Only a DSM administrator can change this.", "zh-TW": "只有 DSM 管理員可以變更這項設定。", "zh-CN": "只有 DSM 管理员可以更改此设置。", ja: "これを変更できるのは DSM 管理者のみです。", ko: "DSM 관리자만 변경할 수 있습니다.", de: "Nur ein DSM-Administrator kann dies ändern.", fr: "Seul un administrateur DSM peut modifier ce paramètre.", es: "Solo un administrador de DSM puede cambiar esto.", it: "Solo un amministratore DSM può modificarlo." },
-    portal_unavailable: { en: "DSM did not accept the change. Try again or use Control Panel.", "zh-TW": "DSM 未接受變更。請再試一次或改用控制台。", "zh-CN": "DSM 未接受更改。请重试或改用控制面板。", ja: "DSM は変更を受け付けませんでした。再試行するか、コントロールパネルを使用してください。", ko: "DSM이 변경을 받아들이지 않았습니다. 다시 시도하거나 제어판을 사용하십시오.", de: "DSM hat die Änderung nicht übernommen. Versuchen Sie es erneut oder verwenden Sie die Systemsteuerung.", fr: "DSM n'a pas accepté la modification. Réessayez ou utilisez le Panneau de configuration.", es: "DSM no aceptó el cambio. Inténtelo de nuevo o use el Panel de control.", it: "DSM non ha accettato la modifica. Riprovare o usare il Pannello di controllo." },
-    PORTAL_FAILED: { en: "DSM did not accept the Application Portal change. Try again.", "zh-TW": "DSM 未接受應用程式入口的變更。請再試一次。", "zh-CN": "DSM 未接受应用程序门户的更改。请重试。", ja: "DSM はアプリケーションポータルの変更を受け付けませんでした。再試行してください。", ko: "DSM이 응용 프로그램 포털 변경을 받아들이지 않았습니다. 다시 시도하십시오.", de: "DSM hat die Änderung am Anwendungsportal nicht übernommen. Versuchen Sie es erneut.", fr: "DSM n'a pas accepté la modification du Portail d'application. Réessayez.", es: "DSM no aceptó el cambio en el Portal de aplicaciones. Inténtelo de nuevo.", it: "DSM non ha accettato la modifica al Portale applicazioni. Riprovare." },
-};
-function localizedMessages() {
-    const out = {};
-    for (const [key, texts] of Object.entries(PORTAL_MESSAGES)) {
-        for (const [locale, text] of Object.entries(texts))
-            (out[locale] ??= {})[key] = text;
-    }
-    return out;
+import { LOCALES } from "./i18n.js";
+/** The SDK's portal panel text (`ts/i18n/portal/<locale>.json` of the App's SDK), which the SDK owns and its Vue panel shows too. */
+export function portalCatalogs(sdkDir) {
+    return Object.fromEntries(LOCALES.map((locale) => {
+        const catalog = JSON.parse(readFileSync(join(sdkDir, "ts/i18n/portal", `${locale}.json`), "utf8"));
+        return [locale, Object.fromEntries(Object.entries(catalog).map(([key, text]) => [key.slice("portal.".length), text]))];
+    }));
 }
 /**
  * `createPortalAccess(options)` → `ctx.portal`, plain ES5 for DSM's desktop.
@@ -44,14 +24,14 @@ function localizedMessages() {
  * status or reject `{code}`. With `options.entry` (below DSM 7.2) the
  * backend's `portal.status` also reports the executor's entry, and
  * administrators get `register()` and `unregister()`; `openControlPanel()` opens Login Portal > Applications.
- * `messages` is the panel text in the window's locale; `mountPanel(element)`
+ * `messages` is the SDK's panel text in the window's locale; `mountPanel(element)`
  * renders a plain panel for UIs without their own.
  */
-export const PORTAL_RUNTIME = `function createPortalAccess(options) {
+export const portalRuntime = (catalogs) => `function createPortalAccess(options) {
   var ALIAS = new RegExp(${JSON.stringify(PORTAL_ALIAS_PATTERN.source)});
   var RESERVED = ${JSON.stringify(RESERVED_PORTAL_ALIASES)};
   var LINKABLE = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
-  var CATALOGS = ${JSON.stringify(localizedMessages())};
+  var CATALOGS = ${JSON.stringify(catalogs)};
   var messages = CATALOGS[options.locale] || CATALOGS.en;
   var ENTRIES = ["registered", "unregistered", "cleanup-required"];
   var ERRORS = { dsm_4100: "portal_alias_invalid", dsm_4102: "portal_alias_reserved", dsm_4103: "portal_alias_in_use", dsm_105: "admin_required" };

package/dist/standalone/request-timeout.d.ts

@@ -1,9 +1,12 @@
-/** The backend's request deadline in seconds unless the App sets backend.timeout_seconds. */
-export declare const DEFAULT_REQUEST_TIMEOUT_SECONDS = 60;
 /** spec/bridge/v1 timeout_seconds: the runtime refuses more. */
 export declare const MAX_REQUEST_TIMEOUT_SECONDS = 3600;
-export declare const TIMEOUT_USAGE = "timeout_seconds is the request deadline in seconds, a whole number from 1 to 3600; omitted, 60.";
+export declare const TIMEOUT_USAGE = "timeout_seconds is the request deadline in seconds, a whole number from 1 to 3600; omitted, the request default of the App's SDK (60 seconds through SDK 0.10).";
 /** Whether backend.timeout_seconds is a deadline the runtime accepts. */
 export declare function validTimeoutSeconds(value: unknown): value is number;
 /** The request deadline the CGI applies and the window waits past. */
 export declare function requestTimeoutSeconds(backend: object): number;
+/** Why a request deadline ends before a program root.run may run would answer, marginSeconds after its timeout_s; undefined when it does not. */
+export declare function rootRunDeadlineProblem(programs: ReadonlyArray<{
+    name: string;
+    timeoutSeconds: number;
+}>, requestSeconds: number, marginSeconds: number): string | undefined;

package/dist/standalone/request-timeout.js

@@ -1,13 +1,19 @@
-/** The backend's request deadline in seconds unless the App sets backend.timeout_seconds. */
-export const DEFAULT_REQUEST_TIMEOUT_SECONDS = 60;
+import { appSdkTimeouts } from "../runtime/sdk-timeouts.js";
 /** spec/bridge/v1 timeout_seconds: the runtime refuses more. */
 export const MAX_REQUEST_TIMEOUT_SECONDS = 3600;
-export const TIMEOUT_USAGE = `timeout_seconds is the request deadline in seconds, a whole number from 1 to ${MAX_REQUEST_TIMEOUT_SECONDS}; omitted, ${DEFAULT_REQUEST_TIMEOUT_SECONDS}.`;
+export const TIMEOUT_USAGE = `timeout_seconds is the request deadline in seconds, a whole number from 1 to ${MAX_REQUEST_TIMEOUT_SECONDS}; omitted, the request default of the App's SDK (60 seconds through SDK 0.10).`;
 /** Whether backend.timeout_seconds is a deadline the runtime accepts. */
 export function validTimeoutSeconds(value) {
     return Number.isInteger(value) && value >= 1 && value <= MAX_REQUEST_TIMEOUT_SECONDS;
 }
 /** The request deadline the CGI applies and the window waits past. */
 export function requestTimeoutSeconds(backend) {
-    return backend.timeoutSeconds ?? DEFAULT_REQUEST_TIMEOUT_SECONDS;
+    return backend.timeoutSeconds ?? appSdkTimeouts(backend).requestDefaultSeconds;
+}
+/** Why a request deadline ends before a program root.run may run would answer, marginSeconds after its timeout_s; undefined when it does not. */
+export function rootRunDeadlineProblem(programs, requestSeconds, marginSeconds) {
+    const short = programs.find(p => p.timeoutSeconds + marginSeconds > requestSeconds);
+    if (!short)
+        return undefined;
+    return `backend.timeout_seconds is ${requestSeconds}, but root.run waits for root program ${short.name} up to its run.timeout_s ${short.timeoutSeconds} + ${marginSeconds} seconds; set timeout_seconds to at least ${short.timeoutSeconds + marginSeconds}, or lower run.timeout_s.`;
 }