@synopackageland/cli 0.12.0 → 0.12.2

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.12.2 (2026-10-16)
+
+- Generated Apps use templates 0.12.2, SDK 0.12.2 and UI 0.10.3. SDK 0.12.2 types `ctx.launchParams` and `ctx.onLaunch` and adds `followLaunchRoute`, `launchRoute` and `dsmLaunchURL`.
+- Pin the SDK 0.12.2 executor and lifecycle digests, identical to 0.12.1 for all three architectures.
+- The DSM window forwards launch parameters to the App. `ctx.launchParams` holds the App's own string values from the launch that opened the window, from a desktop URL `?launchApp=SYNO.SDS.<package>.Instance&launchParam=<url-encoded key=value&...>` or `SYNO.SDS.AppLaunch(id, {key: value})`; `ctx.onLaunch(fn)` runs fn with those of each later launch of the open window. DSM's own keys, non-string values, keys outside `[A-Za-z][A-Za-z0-9_.-]{0,63}`, values over 2048 characters or with control characters, and keys past 32 are left out.
+- `ctx.reopen` callbacks now run when DSM launches the already open window again (main menu, desktop URL or AppLaunch); DSM calls the window's onRequest then, never onOpen again.
+
+繁中摘要：新專案使用 templates 0.12.2、SDK 0.12.2 與 UI 0.10.3，並加入 SDK 0.12.2 的 executor digest（與 0.12.1 相同）。DSM 視窗把啟動參數轉給 App：`ctx.launchParams` 是開啟視窗那次的 App 字串參數（桌面 URL `launchParam` 或 `SYNO.SDS.AppLaunch`），`ctx.onLaunch(fn)` 在已開視窗再次被帶參數啟動時呼叫；DSM 自有欄位、非字串、不合格的 key、超過 2048 字元或含控制字元的值與第 32 個之後的 key 會被略過。已開視窗再次啟動時 `ctx.reopen` 現在會觸發（DSM 呼叫 onRequest，不會再呼叫 onOpen）。
+
+## 0.12.1 (2026-10-16)
+
+- Preserve optional `raw_max_bytes` in WebAPI profiles and administrator policy digests. Reject invalid limits and require raw-capable SDK 0.12.1; zero/omitted profiles stay JSON-only. Generated approval details receive the byte limit.
+- Pin the SDK 0.12.1 three-architecture executor and lifecycle digests. Templates remain 0.12.0; no template change is needed for an optional consumer-declared profile.
+
+繁中摘要：WebAPI profile 支援 raw_max_bytes 明確啟用原始回應與大小上限；驗證及核准 digest 保留此設定，需搭配 SDK 0.12.1。更新 executor digest，templates 維持 0.12.0。
+
 ## 0.12.0 (2026-10-16)
 
 - Generated Apps use templates 0.12.0, SDK 0.12.0 and UI 0.10.1. Vue pages and sections stack at the UI section gap, and SDK dialogs size to their content.

package/README.md

@@ -204,3 +204,15 @@ normal executor approval digest; a profile change needs administrator approval.
 Users grant the named profile separately. The permanent denylist, current-user
 permission checks, bounded JSON and uncertain-outcome rules are in the SDK's
 executor/README.md. Binary downloads require later SDK support.
+
+## Raw WebAPI profiles
+
+SDK 0.12.1 add opt-in raw responses. In `capabilities.webapi.<profile>`,
+set `raw_max_bytes: 26214400` for a 25 MiB MIME limit and explicitly allow
+`SYNO.MailClient.Message.get_original` v10. Omitting the limit preserves JSON-only
+profiles. Changing it changes the approved policy and requires fresh user consent.
+Call `webapi.call` with `response_type: "raw"`; Go Apps use
+`JobContext.WebAPI().CallRaw`. Small bodies use base64; large bodies use the
+package's private executor-staging folder with size/SHA-256 and immediate cleanup.
+Do not use Attachment.download or follow X-Accel-Redirect. See the SDK raw response
+contract for the complete transport and CGI validation rules.

package/dist/init.js

@@ -305,8 +305,17 @@ function assertLocalSdkReady(sdkDir, vue) {
  */
 function useLocalSdk(targetDir, sdkDir) {
     const goMod = join(targetDir, "backend/go.mod");
-    if (existsSync(goMod))
-        writeFileSync(goMod, `${readFileSync(goMod, "utf8")}\nreplace ${SDK_MODULE} => ${sdkDir}\n`);
+    if (existsSync(goMod)) {
+        let text = readFileSync(goMod, "utf8");
+        const sdkPackage = join(sdkDir, "ts/package.json");
+        if (existsSync(sdkPackage)) {
+            const version = JSON.parse(readFileSync(sdkPackage, "utf8")).version;
+            if (typeof version !== "string" || !/^\d+\.\d+\.\d+$/.test(version))
+                throw new Error('[SDK_DIR_NOT_READY] Local SDK package version must be X.Y.Z.');
+            text = text.replace(/(github\.com\/synopackageland\/syno-pkg-land-sdk v)\d+\.\d+\.\d+\b/g, `$1${version}`);
+        }
+        writeFileSync(goMod, `${text}\nreplace ${SDK_MODULE} => ${sdkDir}\n`);
+    }
     const frontend = join(targetDir, "frontend/package.json");
     if (!existsSync(frontend))
         return;

package/dist/runtime/executor-digests.json

@@ -9,5 +9,27 @@
             "armv7": "cafc97c89f5645c14a8cf31d6d9f258394ed6f2d086478a7aebd04d57c274b4e"
         },
         "goToolchain": "go1.26.9"
+    },
+    "0.12.1": {
+        "x86_64": "efe409287770f6b70e7f8465e8767eeb2413b9ab8775020cf4dffb1555d7bf1f",
+        "aarch64": "d68c9889ed2391e918b9c278679ea0a01cd04425528c11090700a3b6341fc543",
+        "armv7": "9149a05efb9f2d7d86a400707099b3d657382b1c0dbad6588be8c500e90445cc",
+        "lifecycle": {
+            "x86_64": "d65500c4f04713a32b45d360059281391acfa5e00ee24895fdd2de7b82735372",
+            "aarch64": "94f6cd119186ff482b8aea56541dd1f9d53c147566bc1efdca6f5a1c86198331",
+            "armv7": "cafc97c89f5645c14a8cf31d6d9f258394ed6f2d086478a7aebd04d57c274b4e"
+        },
+        "goToolchain": "go1.26.9"
+    },
+    "0.12.2": {
+        "x86_64": "efe409287770f6b70e7f8465e8767eeb2413b9ab8775020cf4dffb1555d7bf1f",
+        "aarch64": "d68c9889ed2391e918b9c278679ea0a01cd04425528c11090700a3b6341fc543",
+        "armv7": "9149a05efb9f2d7d86a400707099b3d657382b1c0dbad6588be8c500e90445cc",
+        "lifecycle": {
+            "x86_64": "d65500c4f04713a32b45d360059281391acfa5e00ee24895fdd2de7b82735372",
+            "aarch64": "94f6cd119186ff482b8aea56541dd1f9d53c147566bc1efdca6f5a1c86198331",
+            "armv7": "cafc97c89f5645c14a8cf31d6d9f258394ed6f2d086478a7aebd04d57c274b4e"
+        },
+        "goToolchain": "go1.26.9"
     }
 }

package/dist/runtime/webapi-profile.d.ts

@@ -1,7 +1,8 @@
-/** JSON WebAPI profiles, independently enforced again by the pinned executor. */
+/** WebAPI profiles, independently enforced again by the pinned executor. */
 export interface WebAPIProfile {
     purpose: string;
     apis: Record<string, Record<string, number[]>>;
+    raw_max_bytes?: number;
 }
 export type WebAPIProfiles = Record<string, WebAPIProfile>;
 export declare function validWebAPIProfiles(value: unknown): value is WebAPIProfiles;

package/dist/runtime/webapi-profile.js

@@ -6,7 +6,9 @@ export function validWebAPIProfiles(value) {
         return false;
     let total = 0;
     for (const [name, p] of Object.entries(value)) {
-        if (!/^[a-z][a-z0-9_-]{0,63}$/.test(name) || name === 'home' || !record(p) || Object.keys(p).some(k => !['purpose', 'apis'].includes(k)) || typeof p.purpose !== 'string' || !p.purpose.trim() || Buffer.byteLength(p.purpose) > 1024 || /[\x00-\x1f\x7f]/.test(p.purpose) || !record(p.apis) || !Object.keys(p.apis).length)
+        if (!/^[a-z][a-z0-9_-]{0,63}$/.test(name) || name === 'home' || !record(p) || Object.keys(p).some(k => !['purpose', 'apis', 'raw_max_bytes'].includes(k)) || typeof p.purpose !== 'string' || !p.purpose.trim() || Buffer.byteLength(p.purpose) > 1024 || /[\x00-\x1f\x7f]/.test(p.purpose) || !record(p.apis) || !Object.keys(p.apis).length)
+            return false;
+        if (p.raw_max_bytes !== undefined && (!Number.isSafeInteger(p.raw_max_bytes) || Number(p.raw_max_bytes) < 0 || Number(p.raw_max_bytes) > 67108864))
             return false;
         for (const [api, methods] of Object.entries(p.apis)) {
             if (!/^SYNO\.[A-Za-z][A-Za-z0-9]*(\.[A-Za-z][A-Za-z0-9]*)*$/.test(api) || api.toLowerCase().split('.').slice(1).some(x => blocked.has(x)) || !record(methods) || !Object.keys(methods).length)
@@ -23,5 +25,5 @@ export function validWebAPIProfiles(value) {
     return true;
 }
 export function sortedWebAPIProfiles(profiles) {
-    return Object.fromEntries(Object.entries(profiles).sort(([a], [b]) => a < b ? -1 : 1).map(([name, p]) => [name, { purpose: p.purpose, apis: Object.fromEntries(Object.entries(p.apis).sort(([a], [b]) => a < b ? -1 : 1).map(([api, methods]) => [api, Object.fromEntries(Object.entries(methods).sort(([a], [b]) => a < b ? -1 : 1).map(([m, versions]) => [m, [...versions].sort((a, b) => a - b)]))])) }]));
+    return Object.fromEntries(Object.entries(profiles).sort(([a], [b]) => a < b ? -1 : 1).map(([name, p]) => [name, { purpose: p.purpose, apis: Object.fromEntries(Object.entries(p.apis).sort(([a], [b]) => a < b ? -1 : 1).map(([api, methods]) => [api, Object.fromEntries(Object.entries(methods).sort(([a], [b]) => a < b ? -1 : 1).map(([m, versions]) => [m, [...versions].sort((a, b) => a - b)]))])), ...(p.raw_max_bytes ? { raw_max_bytes: p.raw_max_bytes } : {}) }]));
 }

package/dist/standalone/dsm-window.d.ts

@@ -42,5 +42,8 @@ export declare function renderUiConfig(manifest: StandaloneManifest, icons?: Pac
  * (and add a device-width viewport), and `ctx.appIcon` is the package icon a
  * full-page shell shows beside the name, where a DSM window has a title bar.
  * A portal App's `ctx.portal` shows `portalText`, the SDK's panel text.
+ * `ctx.launchParams` holds the App's own values from the launch that opened
+ * the window (a `launchParam` desktop URL or `SYNO.SDS.AppLaunch(id, param)`),
+ * and `ctx.onLaunch(fn)` hands fn those of each later launch with values.
  */
 export declare function renderWindowScript(manifest: StandaloneManifest, assetVersion: string, icons?: PackageIcons, portalText?: PortalCatalogs): string;

package/dist/standalone/dsm-window.js

@@ -1,4 +1,5 @@
 import { REOPEN_EVENTS_RUNTIME } from "./reopen-events.js";
+import { LAUNCH_PARAMS_RUNTIME } from "./launch-params.js";
 import { DSM_LANGS } from "./i18n.js";
 import { PASSWORD_CONFIRM, ROOT_PANEL, ROOT_RUNTIME, rootPanelCatalogs } from "./root-window.js";
 import { HOST_ADAPTER_RUNTIME } from "./host-adapter.js";
@@ -128,6 +129,9 @@ export function renderUiConfig(manifest, icons = packageIcons(manifest.icon), lo
  * (and add a device-width viewport), and `ctx.appIcon` is the package icon a
  * full-page shell shows beside the name, where a DSM window has a title bar.
  * A portal App's `ctx.portal` shows `portalText`, the SDK's panel text.
+ * `ctx.launchParams` holds the App's own values from the launch that opened
+ * the window (a `launchParam` desktop URL or `SYNO.SDS.AppLaunch(id, param)`),
+ * and `ctx.onLaunch(fn)` hands fn those of each later launch with values.
  */
 export function renderWindowScript(manifest, assetVersion, icons = packageIcons(manifest.icon), portalText) {
     const pkg = manifest.package;
@@ -270,6 +274,11 @@ ${REOPEN_EVENTS_RUNTIME}
   return createReopenEvents;
 })();
 
+${ns}.launchParams = (function () {
+${LAUNCH_PARAMS_RUNTIME}
+  return launchParams;
+})();
+
 ${ns}.createHost = (function () {
 ${HOST_ADAPTER_RUNTIME}
   return createHostAdapter;
@@ -332,7 +341,7 @@ Ext.define(${JSON.stringify(`${ns}.MainWindow`)}, {
   getRestoreSizePos: function (config) {
     return ${ns}.fitDesktop(Ext.apply({ width: config.width, height: config.height }, this.callParent(arguments)));
   },
-  onOpen: function () {
+  onOpen: function (param) {
     this.callParent(arguments);
     var me = this;
     if (me.mounted) {
@@ -341,9 +350,11 @@ Ext.define(${JSON.stringify(`${ns}.MainWindow`)}, {
     }
     if (me.mountPending) return;
     me.mountPending = true;
+    me.launchParams = ${ns}.launchParams(param);
     var mountToken = me.mountToken = {};
     me.reopenEvents = ${ns}.createReopenEvents();
     me.reopenHandlers = me.reopenEvents.handlers;
+    me.launchEvents = ${ns}.createReopenEvents();
     var lang = "enu";
     try { if (typeof _S === "function") lang = _S("lang"); } catch (error) {}
     var ctx = { requestTimeout: ${requestTimeout} };
@@ -362,6 +373,8 @@ ${root ? root.mount : ""}    ${ns}.loadApp(function (app) {
           call: call,
           files: {endpoint: ${JSON.stringify(cgiUrl(pkg))}, token: function () { return SYNO.SDS.Session && SYNO.SDS.Session.SynoToken; }},
           reopen: me.reopenEvents.subscribe,
+          launchParams: me.launchParams,
+          onLaunch: me.launchEvents.subscribe,
           user: ${ns}.sessionUser(),${manifest.portal ? `\n          portal: ${renderPortalAccess(ns, manifest)},` : ""}
           host: me.hostAccess,
           appWindow: me,
@@ -378,17 +391,33 @@ ${root ? root.mount : ""}    ${ns}.loadApp(function (app) {
           me.reopenEvents.dispose();
           me.reopenEvents = null;
           me.reopenHandlers = [];
+          me.launchEvents.dispose();
+          me.launchEvents = null;
           throw error;
         }
       }
     });
   },
+  // DSM opens a running App's window again through onRequest, not onOpen,
+  // with that launch's param. Before the App mounts, it mounts with the latest.
+  onRequest: function (param) {
+    this.callParent(arguments);
+    var params = ${ns}.launchParams(param);
+    if (!this.mounted) {
+      if (this.mountPending && Object.keys(params).length) this.launchParams = params;
+      return;
+    }
+    this.reopenEvents.emit();
+    if (Object.keys(params).length) this.launchEvents.emit(params);
+  },
   onDestroy: function () {
     this.mountToken = null;
     this.mountPending = false;
     if (this.reopenEvents) this.reopenEvents.dispose();
     this.reopenEvents = null;
     this.reopenHandlers = [];
+    if (this.launchEvents) this.launchEvents.dispose();
+    this.launchEvents = null;
     if (this.hostAccess) this.hostAccess.dispose();
     this.hostAccess = null;
     var mounted = this.mounted;

package/dist/standalone/launch-params.d.ts

@@ -0,0 +1,11 @@
+/** At most this many App values, each at most this long, reach the App from one launch. */
+export declare const MAX_LAUNCH_PARAMS = 32;
+export declare const MAX_LAUNCH_VALUE = 2048;
+/**
+ * `launchParams(param)`: the App's own values from the param DSM hands the
+ * window's onOpen and onRequest, a `launchParam` desktop URL decoded by DSM
+ * into an object or AppLaunch's second argument. Only short single-line string
+ * values under plain keys pass; the result is a frozen, prototype-free copy.
+ * The values stay untrusted text for the App.
+ */
+export declare const LAUNCH_PARAMS_RUNTIME: string;

package/dist/standalone/launch-params.js

@@ -0,0 +1,33 @@
+/** At most this many App values, each at most this long, reach the App from one launch. */
+export const MAX_LAUNCH_PARAMS = 32;
+export const MAX_LAUNCH_VALUE = 2048;
+/**
+ * DSM's own string keys in a launch: AppLaunch reads className and
+ * instanceName, AppWindow.onOpen sets the window title from title, and desktop
+ * restore replays openConfig with dsm_version. Its other keys (fromRestore,
+ * windowState, cms_id, ...) are not strings and are left out with the rest.
+ */
+const DSM_KEYS = ["className", "instanceName", "dsm_version", "title"];
+/**
+ * `launchParams(param)`: the App's own values from the param DSM hands the
+ * window's onOpen and onRequest, a `launchParam` desktop URL decoded by DSM
+ * into an object or AppLaunch's second argument. Only short single-line string
+ * values under plain keys pass; the result is a frozen, prototype-free copy.
+ * The values stay untrusted text for the App.
+ */
+export const LAUNCH_PARAMS_RUNTIME = `
+function launchParams(param) {
+  var dsmKeys = ${JSON.stringify(DSM_KEYS)};
+  var params = Object.create(null), count = 0;
+  if (param && typeof param === "object" && !Array.isArray(param)) {
+    Object.keys(param).forEach(function (key) {
+      var value = param[key];
+      if (count >= ${MAX_LAUNCH_PARAMS} || dsmKeys.indexOf(key) >= 0 || !/^[A-Za-z][A-Za-z0-9_.-]{0,63}$/.test(key)) return;
+      if (typeof value !== "string" || value.length > ${MAX_LAUNCH_VALUE} || /[\\u0000-\\u001f\\u007f]/.test(value)) return;
+      params[key] = value;
+      count++;
+    });
+  }
+  return Object.freeze(params);
+}
+`;

package/dist/standalone/manifest.js

@@ -217,6 +217,10 @@ function readManifest(raw, c) {
         const sdk = sdkVersionOrUndefined(backend);
         if (!sdk || Number(sdk.split('.')[0]) === 0 && Number(sdk.split('.')[1]) < 11)
             c.fail("SDK_UNSUPPORTED", "capabilities.webapi requires SDK 0.11.0 or later; update backend and frontend together.");
+        const raw = Object.values(capabilities.webapi).some(profile => (profile.raw_max_bytes ?? 0) > 0);
+        const [major, minor, patch] = (sdk ?? '0.0.0').split('.').map(Number);
+        if (raw && (!sdk || major === 0 && (minor < 12 || minor === 12 && patch < 1)))
+            c.fail("SDK_UNSUPPORTED", "Raw WebAPI profiles require SDK 0.12.1 or later; update backend and frontend together.");
     }
     const uninstall = readUninstall(raw.uninstall, { rootOps: capabilities.rootOps === true, ops: rootOps, en: i18n?.catalogs?.en }, e => c.fail(e.code, e.message));
     const appScripts = readAppScripts(c.root, e => c.fail(e.code, e.message));

package/dist/standalone/reopen-events.d.ts

@@ -1,2 +1,2 @@
-/** Wrapper-owned subscriptions; no dependency on native event names or Ext. */
-export declare const REOPEN_EVENTS_RUNTIME = "\nfunction createReopenEvents() {\n  var active = true, handlers = [];\n  function subscribe(fn) {\n    if (!active || typeof fn !== \"function\") return function () {};\n    function handler() { if (active && fn) fn(); }\n    function unsubscribe() {\n      if (!fn) return;\n      fn = null;\n      var index = handlers.indexOf(handler);\n      if (index !== -1) handlers.splice(index, 1);\n    }\n    handler.unsubscribe = unsubscribe;\n    handlers.push(handler);\n    return unsubscribe;\n  }\n  return {\n    handlers: handlers,\n    subscribe: subscribe,\n    emit: function () { handlers.slice().forEach(function (handler) { handler(); }); },\n    dispose: function () {\n      active = false;\n      handlers.slice().forEach(function (handler) { handler.unsubscribe(); });\n    }\n  };\n}\n";
+/** Wrapper-owned subscriptions; no dependency on native event names or Ext. emit(value) hands value to each fn. */
+export declare const REOPEN_EVENTS_RUNTIME = "\nfunction createReopenEvents() {\n  var active = true, handlers = [];\n  function subscribe(fn) {\n    if (!active || typeof fn !== \"function\") return function () {};\n    function handler(value) { if (active && fn) fn(value); }\n    function unsubscribe() {\n      if (!fn) return;\n      fn = null;\n      var index = handlers.indexOf(handler);\n      if (index !== -1) handlers.splice(index, 1);\n    }\n    handler.unsubscribe = unsubscribe;\n    handlers.push(handler);\n    return unsubscribe;\n  }\n  return {\n    handlers: handlers,\n    subscribe: subscribe,\n    emit: function (value) { handlers.slice().forEach(function (handler) { handler(value); }); },\n    dispose: function () {\n      active = false;\n      handlers.slice().forEach(function (handler) { handler.unsubscribe(); });\n    }\n  };\n}\n";

package/dist/standalone/reopen-events.js

@@ -1,10 +1,10 @@
-/** Wrapper-owned subscriptions; no dependency on native event names or Ext. */
+/** Wrapper-owned subscriptions; no dependency on native event names or Ext. emit(value) hands value to each fn. */
 export const REOPEN_EVENTS_RUNTIME = `
 function createReopenEvents() {
   var active = true, handlers = [];
   function subscribe(fn) {
     if (!active || typeof fn !== "function") return function () {};
-    function handler() { if (active && fn) fn(); }
+    function handler(value) { if (active && fn) fn(value); }
     function unsubscribe() {
       if (!fn) return;
       fn = null;
@@ -18,7 +18,7 @@ function createReopenEvents() {
   return {
     handlers: handlers,
     subscribe: subscribe,
-    emit: function () { handlers.slice().forEach(function (handler) { handler(); }); },
+    emit: function (value) { handlers.slice().forEach(function (handler) { handler(value); }); },
     dispose: function () {
       active = false;
       handlers.slice().forEach(function (handler) { handler.unsubscribe(); });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {
@@ -25,7 +25,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@synopackageland/templates": "0.12.0",
+    "@synopackageland/templates": "0.12.2",
     "ajv": "^8.17.1",
     "commander": "^13.1.0",
     "tar": "^7.4.3",