@synopackageland/cli 0.24.0 → 0.25.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.25.0 (2026-10-22)
+
+- Add the opt-in `console` declaration for native Apps with `identity_gateway`: a native UI URL launcher and an administrator-only DSM console, selected by Package Center Open. Validate both entries and refuse incompatible launch declarations.
+- Fix installation-settings inspection when native identity-gateway diagnostics precede the settings hook, retaining full lifecycle validation.
+- Document punctuation rules for owned UI copy in the development skill.
+- Support SDK/App 0.25.0 and templates 0.25.0, with UI 0.14.3 in Vue scaffolds. Reuse executor/v0.24.0 with unchanged protected executor/lifecycle payloads and Go 1.26.10. OIDC browser cold-login continuation requires SDK 0.25.0. No NAS acceptance is claimed.
+
+## 0.24.1 (2026-10-22)
+
+- Build SDK/App 0.24.1 with the verified immutable executor/v0.24.0 release and its exact executor/lifecycle digests; retain SDK/App 0.24.0 support. SDK 0.24.1 adds AppShell brand navigation to the first page and supports UI 0.14.3.
+- Keep templates 0.24.0 and Go 1.26.10. Executor and lifecycle payloads remain unchanged.
+
 ## 0.24.0 (2026-10-22)
 
 - Pin Go 1.26.10 for every SDK runtime build, addressing crypto/x509 GO-2026-6809. Ship the matching executor/lifecycle digest inventory for SDK 0.24.0; older release records are preserved in their release history.

package/README.md

@@ -268,6 +268,16 @@ A full page does not need Application Portal. Omit `portal` unless an alias is
 explicitly wanted; only that opt-in adds `defaultAlias`, login styling, Portal
 panels and capabilities. No Portal is a healthy default for inspect/info/doctor.
 
+A native App with `identity_gateway` can declare `console` to get two main-menu
+icons: the native UI (`displayname`, a `type: "url"` launcher to `sso/open.cgi`
+that opens a new tab) and an administrator-only DSM window running the SDK UI
+from `ui.dir`, named "<displayname> for DSM" by default. Package Center's Open
+(INFO `dsmapplaunchname`) starts the console, and Application Privileges lists
+only the native icon. `console: {}` keeps the default name; `console: { title }`
+sets it for every language. Omit `console` to keep one icon. check refuses
+`console` on Compose, without `identity_gateway`, or with `ui.launch` or
+`portal`. A cold DSM sign-in resumes through the url launcher.
+
 Compose uses schema-2 `dsm-package.yaml` and `ui.launch`; the default is new-page.
 Classless gateways use type url via the shared contract/app-launch resolver;
 AppWindow wrappers use standalone. Headless projects have no launcher.

package/dist/build-spk/ui-texts.d.ts

@@ -18,6 +18,18 @@ export declare function uiTitleFields(app: AppTitle): {
     texts?: string;
     preloadTexts?: string[];
 };
+/** The console's name: the declared title in every language, else "<displayname> for DSM". */
+export declare function consoleTitle(displayname: string, console: {
+    title?: string;
+}): string;
+/** {@link uiTitleFields} for the console window, which shares the App's description. */
+export declare function uiConsoleTitleFields(app: AppTitle, console: {
+    title?: string;
+}): ReturnType<typeof uiTitleFields>;
 /** `ui/texts/<dsm lang>/strings` for English and every translated language; none without translations. */
-export declare function renderUiTexts(app: AppTitle): Map<string, string>;
-export declare function writeUiTexts(uiRoot: string, app: AppTitle): void;
+export declare function renderUiTexts(app: AppTitle, console?: {
+    title?: string;
+}): Map<string, string>;
+export declare function writeUiTexts(uiRoot: string, app: AppTitle, console?: {
+    title?: string;
+}): void;

package/dist/build-spk/ui-texts.js

@@ -4,6 +4,7 @@ import { DSM_LANGS, LOCALES } from "../standalone/i18n.js";
 const SECTION = "synopkgland";
 const TITLE = `${SECTION}:app_title`;
 const DESC = `${SECTION}:app_desc`;
+const CONSOLE_TITLE = `${SECTION}:console_title`;
 /** `ui/` subdirectory with the strings; a `ui/config` entry's `texts` names it relative to `ui/`. */
 const TEXTS_DIR = "texts";
 function translated(app) {
@@ -21,8 +22,18 @@ export function uiTitleFields(app) {
         ? { title: TITLE, desc: DESC, texts: TEXTS_DIR, preloadTexts: [TITLE, DESC] }
         : { title: app.displayname, desc: app.description };
 }
+/** The console's name: the declared title in every language, else "<displayname> for DSM". */
+export function consoleTitle(displayname, console) {
+    return console.title ?? `${displayname} for DSM`;
+}
+/** {@link uiTitleFields} for the console window, which shares the App's description. */
+export function uiConsoleTitleFields(app, console) {
+    return translated(app)
+        ? { title: CONSOLE_TITLE, desc: DESC, texts: TEXTS_DIR, preloadTexts: [CONSOLE_TITLE, DESC] }
+        : { title: consoleTitle(app.displayname, console), desc: app.description };
+}
 /** `ui/texts/<dsm lang>/strings` for English and every translated language; none without translations. */
-export function renderUiTexts(app) {
+export function renderUiTexts(app, console) {
     const files = new Map();
     if (!translated(app))
         return files;
@@ -32,12 +43,13 @@ export function renderUiTexts(app) {
             continue;
         const title = text?.displayname ?? app.displayname;
         const desc = text?.description ?? app.description;
-        files.set(DSM_LANGS[locale], `[${SECTION}]\napp_title="${title}"\napp_desc="${desc}"\n`);
+        const consoleLine = console ? `console_title="${consoleTitle(title, console)}"\n` : "";
+        files.set(DSM_LANGS[locale], `[${SECTION}]\napp_title="${title}"\napp_desc="${desc}"\n${consoleLine}`);
     }
     return files;
 }
-export function writeUiTexts(uiRoot, app) {
-    for (const [lang, strings] of renderUiTexts(app)) {
+export function writeUiTexts(uiRoot, app, console) {
+    for (const [lang, strings] of renderUiTexts(app, console)) {
         mkdirSync(join(uiRoot, TEXTS_DIR, lang), { recursive: true });
         const path = join(uiRoot, TEXTS_DIR, lang, "strings");
         writeFileSync(path, strings, "utf8");

package/dist/contract/app-launch.d.ts

@@ -6,6 +6,9 @@ export declare const DEFAULT_WEB_LAUNCH: AppLaunchMode;
 export declare function isAppLaunchMode(value: unknown): value is AppLaunchMode;
 /** Both Compose routes use the same web default; a valid explicit choice wins. */
 export declare function resolveAppLaunch(value: unknown, webService: boolean): AppLaunchMode | undefined;
-export declare function resolvedSdkLaunch(manifest: Pick<StandaloneManifest, 'ui' | 'compose' | 'identityGateway'>): AppLaunchMode;
+/** A console always opens the SDK UI in a DSM window. */
+export declare function resolvedSdkLaunch(manifest: Pick<StandaloneManifest, 'ui' | 'compose' | 'identityGateway'> & {
+    console?: unknown;
+}): AppLaunchMode;
 /** DSM rewrites standalone URLs to launchApp; only SDK wrappers provide that class. */
 export declare function dsmLauncherType(launch: AppLaunchMode, sdkWindow: boolean): 'standalone' | 'app' | 'url';

package/dist/contract/app-launch.js

@@ -9,8 +9,9 @@ export function resolveAppLaunch(value, webService) {
     return value === undefined ? webService ? DEFAULT_WEB_LAUNCH : DEFAULT_NATIVE_LAUNCH
         : isAppLaunchMode(value) ? value : undefined;
 }
+/** A console always opens the SDK UI in a DSM window. */
 export function resolvedSdkLaunch(manifest) {
-    return resolveAppLaunch(manifest.ui.launch, Boolean(manifest.compose || manifest.identityGateway));
+    return resolveAppLaunch(manifest.console ? 'dsm-window' : manifest.ui.launch, Boolean(manifest.compose || manifest.identityGateway));
 }
 /** DSM rewrites standalone URLs to launchApp; only SDK wrappers provide that class. */
 export function dsmLauncherType(launch, sdkWindow) {

package/dist/error-registry.js

@@ -532,6 +532,26 @@ export const ERROR_REGISTRY = {
             description: "The portal format or alias in dsm-package.yaml is invalid.",
             suggestion: "Use portal: {} or portal: { alias: my-app }; alias is 1-64 lowercase alphanumerics or -, and not a DSM reserved path.",
         },
+        STANDALONE_CONSOLE_INVALID: {
+            code: "STANDALONE_CONSOLE_INVALID",
+            description: "The console format or title in dsm-package.yaml is invalid.",
+            suggestion: 'Use console: {} for "<displayname> for DSM", or console: { title: My App Admin } with 1-64 characters and no quotes, backslashes or control characters.',
+        },
+        STANDALONE_CONSOLE_REQUIRES_GATEWAY: {
+            code: "STANDALONE_CONSOLE_REQUIRES_GATEWAY",
+            description: "console is declared on a Compose App or an App without identity_gateway.",
+            suggestion: "Declare console only on a native App whose web UI the identity gateway serves; otherwise remove console and keep one icon.",
+        },
+        STANDALONE_CONSOLE_LAUNCH: {
+            code: "STANDALONE_CONSOLE_LAUNCH",
+            description: "console is declared together with ui.launch.",
+            suggestion: "Remove ui.launch: the console always opens in a DSM window and the native icon in a new tab.",
+        },
+        STANDALONE_CONSOLE_PORTAL: {
+            code: "STANDALONE_CONSOLE_PORTAL",
+            description: "console is declared together with portal.",
+            suggestion: "Declare either console or portal, not both.",
+        },
         STANDALONE_PORTAL_REQUIRES_EXECUTOR: {
             code: "STANDALONE_PORTAL_REQUIRES_EXECUTOR",
             description: "An App targeting DSM below 7.2-64570 declares portal without an executor.",

package/dist/runtime/executor-digests.json

@@ -1,5 +1,5 @@
 {
-    "0.24.0": {
+    "0.25.0": {
         "x86_64": "de78684faac211c24a7cda8a4541ab1b138d37f6d580936fe354bb9bd0d78a0f",
         "aarch64": "8ef7c736203f6c111816b76f970b7204fa6f8d871ff3222fd7c0a27d0075b847",
         "armv7": "a38703119554b5f2a8bf4810ec2a6c8f1d793bfbb1ca96803eb1b39a26ffd96c",

package/dist/runtime/sdk-source.js

@@ -76,7 +76,7 @@ function goMod(backendDir) {
     }
 }
 /** SDK releases that reuse an immutable executor release with identical payload bytes. */
-const EXECUTOR_RELEASES = { '0.21.0': '0.20.0', '0.21.1': '0.20.0', '0.22.0': '0.20.0', '0.23.0': '0.20.0', '0.23.1': '0.20.0', '0.23.2': '0.20.0' };
+const EXECUTOR_RELEASES = { '0.21.0': '0.20.0', '0.21.1': '0.20.0', '0.22.0': '0.20.0', '0.23.0': '0.20.0', '0.23.1': '0.20.0', '0.23.2': '0.20.0', '0.24.1': '0.24.0', '0.25.0': '0.24.0' };
 /**
  * The module directories of one SDK version. SYNOPKGLAND_SDK_DIR names a
  * local sdk checkout (development and gates only); otherwise modules come from

package/dist/standalone/dsm-window.d.ts

@@ -25,8 +25,13 @@ export declare function windowScriptName(manifest: Pick<StandaloneManifest, "bui
 /** The launcher fields an entry mode fixes; inspect checks a built SPK against them. */
 export declare function entryLauncherAccess(entry: EntryMode): Record<string, unknown>;
 export declare function appTitle(manifest: StandaloneManifest): AppTitle;
+/** The DSM app class whose launch opens the SDK window: the console's when the App declares one. */
+export declare function windowAppId(manifest: Pick<StandaloneManifest, "package" | "console">): string;
 /**
- * `ui/config`: registers the DSM main-menu app and its window class. A portal
+ * `ui/config`: registers the DSM main-menu app and its window class. With a
+ * console, `.Instance` is the gateway's url launcher (new tab) and `.Console`
+ * the administrator-only window; DSM lists only `.Instance` under Application
+ * Privileges. A portal
  * App's launcher also carries the Login Portal style and its icon as the
  * login page icon (DSM shows `loginIcon`, never `icon`, there).
  */

package/dist/standalone/dsm-window.js

@@ -9,7 +9,7 @@ import { HOST_ADAPTER_RUNTIME } from "./host-adapter.js";
 import { permitsOrdinaryUsers } from "./api-permissions.js";
 import { portalRuntime } from "./portal-window.js";
 import { portalByExecutor } from "../build-spk/dsm-version.js";
-import { uiTitleFields } from "../build-spk/ui-texts.js";
+import { consoleTitle, uiConsoleTitleFields, uiTitleFields } from "../build-spk/ui-texts.js";
 import { packageIcons, windowIconFile, windowIconTemplate, } from "../build-spk/dsm-icons.js";
 import { DEFAULT_WINDOW, FULL_PAGE_MIN_WIDTH } from "./window-size.js";
 import { requestTimeoutSeconds } from "./request-timeout.js";
@@ -74,7 +74,7 @@ function launcherAccess(manifest) {
     return manifest.entry
         ? entryLauncherAccess(manifest.entry)
         : {
-            allUsers: manifest.compose
+            allUsers: manifest.compose || manifest.console
                 ? manifest.identityGateway?.access !== "dsm-admins"
                 : permitsOrdinaryUsers(manifest.apiPermissions),
         };
@@ -92,19 +92,35 @@ export function appTitle(manifest) {
         info: manifest.i18n?.info,
     };
 }
-/** The app name by locale, as `ui/texts` names the window: `createI18n(lang, ...).t("app_title")`. */
+/**
+ * The window's name by locale, as `ui/texts` names it: `createI18n(lang,
+ * ...).t("app_title")`. A console window carries the console's name.
+ */
 function displayNameCatalogs(manifest) {
+    const name = (displayname) => manifest.console ? consoleTitle(displayname, manifest.console) : displayname;
     const catalogs = {
-        en: { app_title: manifest.displayname },
+        en: { app_title: name(manifest.displayname) },
     };
     for (const [locale, text] of Object.entries(manifest.i18n?.info ?? {})) {
         if (text?.displayname)
-            catalogs[locale] = { app_title: text.displayname };
+            catalogs[locale] = { app_title: name(text.displayname) };
     }
     return catalogs;
 }
+/** The DSM app class whose launch opens the SDK window: the console's when the App declares one. */
+export function windowAppId(manifest) {
+    return `SYNO.SDS.${manifest.package}.${manifest.console ? "Console" : "Instance"}`;
+}
+/** Whether the window itself resumes a cold DSM sign-in; with a console the url launcher does. */
+function windowResumesOIDC(manifest) {
+    const oidc = manifest.identityGateway?.oidc;
+    return Boolean((oidc?.native_login || oidc?.browser) && !manifest.console);
+}
 /**
- * `ui/config`: registers the DSM main-menu app and its window class. A portal
+ * `ui/config`: registers the DSM main-menu app and its window class. With a
+ * console, `.Instance` is the gateway's url launcher (new tab) and `.Console`
+ * the administrator-only window; DSM lists only `.Instance` under Application
+ * Privileges. A portal
  * App's launcher also carries the Login Portal style and its icon as the
  * login page icon (DSM shows `loginIcon`, never `icon`, there).
  */
@@ -127,6 +143,38 @@ export function renderUiConfig(manifest, icons = packageIcons(manifest.icon), lo
             },
         }, null, 2) + "\n");
     }
+    if (manifest.console) {
+        const consoleFields = uiConsoleTitleFields(appTitle(manifest), manifest.console);
+        return `${JSON.stringify({
+            ".url": {
+                [`${ns}.Instance`]: {
+                    type: "url",
+                    ...titleFields,
+                    icon,
+                    ...launcherAccess(manifest),
+                    url: gatewayEntryPath(manifest),
+                },
+            },
+            [windowScriptName(manifest)]: {
+                [`${ns}.Console`]: {
+                    type: "app",
+                    ...consoleFields,
+                    icon,
+                    appWindow: `${ns}.MainWindow`,
+                    allowMultiInstance: false,
+                    allUsers: false,
+                    depend: [`${ns}.MainWindow`],
+                },
+                [`${ns}.MainWindow`]: {
+                    type: "lib",
+                    title: consoleFields.title,
+                    texts: consoleFields.texts,
+                    icon,
+                    depend: [],
+                },
+            },
+        }, null, 2)}\n`;
+    }
     return `${JSON.stringify({
         [windowScriptName(manifest)]: {
             [`${ns}.Instance`]: {
@@ -379,7 +427,7 @@ ${ns}.prepareFullPage = function (title) {
   favicon.href = ${ns}.appIcon;
 };
 
-${(manifest.identityGateway?.oidc?.native_login || manifest.identityGateway?.oidc?.browser) ? `${ns}.resumeOIDC = ${oidcResumeRuntime(pkg, Object.values(manifest.identityGateway.listen).filter((p) => typeof p === "number"))};` : ""}
+${windowResumesOIDC(manifest) ? `${ns}.resumeOIDC = ${oidcResumeRuntime(pkg, Object.values(manifest.identityGateway.listen).filter((p) => typeof p === "number"))};` : ""}
 
 // DSM reopens a window at the size it was last left at, even one saved on a
 // larger screen, and only moves a window that does not fit: keep it inside.
@@ -390,7 +438,7 @@ ${ns}.fitDesktop = function (size) {
   return size;
 };
 
-Ext.define(${JSON.stringify(`${ns}.Instance`)}, {
+Ext.define(${JSON.stringify(windowAppId(manifest))}, {
   extend: "SYNO.SDS.AppInstance",
   appWindowName: ${JSON.stringify(`${ns}.MainWindow`)}
 });
@@ -408,7 +456,7 @@ Ext.define(${JSON.stringify(`${ns}.MainWindow`)}, {
   },
   onOpen: function (param) {
     this.callParent(arguments);
-    ${(manifest.identityGateway?.oidc?.native_login || manifest.identityGateway?.oidc?.browser) ? `if (${ns}.resumeOIDC(param)) return;` : ""}
+    ${windowResumesOIDC(manifest) ? `if (${ns}.resumeOIDC(param)) return;` : ""}
     var me = this;
     if (me.mounted) {
       me.reopenEvents.emit();
@@ -471,7 +519,7 @@ ${root ? root.mount : ""}    ${ns}.loadApp(function (app) {
   // with that launch's param. Before the App mounts, it mounts with the latest.
   onRequest: function (param) {
     this.callParent(arguments);
-    ${(manifest.identityGateway?.oidc?.native_login || manifest.identityGateway?.oidc?.browser) ? `if (${ns}.resumeOIDC(param)) return;` : ""}
+    ${windowResumesOIDC(manifest) ? `if (${ns}.resumeOIDC(param)) return;` : ""}
     var params = ${ns}.launchParams(param);
     if (!this.mounted) {
       if (this.mountPending && Object.keys(params).length) this.launchParams = params;

package/dist/standalone/inspect-spk.js

@@ -36,7 +36,7 @@ import { renderNativePrivilege } from "../build-spk/native-lifecycle.js";
 import { renderUiConfig } from "./dsm-window.js";
 import { identityGatewayConfig, gatewayAdmissionReport, gatewayAdmissionPolicy, readIdentityGateway, } from "./identity-gateway.js";
 import { checkCgiBinary } from "./binary.js";
-import { matchesStandaloneScript, renderStandaloneScript } from "./lifecycle.js";
+import { matchesStandaloneScript, renderStandaloneScript, matchesStandaloneScriptPrefix } from "./lifecycle.js";
 import { listPortExposures, loadCompose } from "../compose/analyze.js";
 import { uninstallCleanup, } from "../runtime/uninstall-cleanup.js";
 import { PORTAL_JSON_RELPATH, PORTAL_MUSTACHE_RELPATH, renderPortalJson, renderPortalLifecycle, renderPortalMustache, renderPortalWizardStep, } from "../portal/package.js";
@@ -112,7 +112,8 @@ export async function inspectSpk(spkPath, expectedKind) {
                     ].includes(String(name))) ||
                     new Set(raw.capabilities).size !== raw.capabilities.length ||
                     (raw.entry !== undefined &&
-                        !["admin-only", "app-privilege"].includes(raw.entry)))
+                        !["admin-only", "app-privilege"].includes(raw.entry)) ||
+                    (raw.console !== undefined && raw.console !== true))
                     throw new Error();
                 if (raw.lifecycleTimeouts !== undefined && (!readLifecycleTimeouts(raw.lifecycleTimeouts, () => { }) || Object.keys(raw.lifecycleTimeouts).length !== 4))
                     throw new Error();
@@ -272,7 +273,7 @@ export async function inspectSpk(spkPath, expectedKind) {
         }
         if (metadata.entry)
             await checkEntryLauncher(dir, info.package, metadata.entry, findings);
-        const launch = await checkLaunchConfiguration(dir, info, standalone, metadata.launch, portal?.alias ?? executor?.policy.portal?.alias, findings);
+        const launch = await checkLaunchConfiguration(dir, info, standalone, metadata.launch, portal?.alias ?? executor?.policy.portal?.alias, findings, metadata.console === true);
         const loginStyle = standalone
             ? await inspectLoginStyle(dir, info.package, Boolean(portal || executor?.policy.portal), findings)
             : undefined;
@@ -336,7 +337,7 @@ export async function inspectSpk(spkPath, expectedKind) {
 const LAUNCHER_TYPE_MISMATCH = "LAUNCHER_TYPE_MISMATCH";
 const LAUNCHER_PORTAL_MISMATCH = "LAUNCHER_PORTAL_MISMATCH";
 /** Compare the actual launcher and Portal fields to the packaged declaration. */
-async function checkLaunchConfiguration(dir, info, native, declared, alias, findings) {
+async function checkLaunchConfiguration(dir, info, native, declared, alias, findings, console = false) {
     const target = join(dir, "launch-inspection");
     mkdirSync(target);
     await tar.x({
@@ -387,6 +388,10 @@ async function checkLaunchConfiguration(dir, info, native, declared, alias, find
     catch {
         /* report the missing or malformed launcher below */
     }
+    if (console) {
+        checkConsoleLaunchers(target, info, native, findings);
+        return launch;
+    }
     const type = dsmLauncherType(launch, native);
     if (!launcher ||
         launcher.type !== type ||
@@ -406,6 +411,35 @@ async function checkLaunchConfiguration(dir, info, native, declared, alias, find
     }
     return launch;
 }
+/**
+ * A console App's ui/config: `.Instance` is the url launcher to the gateway,
+ * `.Console` the administrator-only SDK window Package Center's Open starts.
+ */
+function checkConsoleLaunchers(target, info, native, findings) {
+    const ns = `SYNO.SDS.${info.package}`;
+    let config = {};
+    try {
+        config = JSON.parse(readFileSync(join(target, "ui/config"), "utf8"));
+    }
+    catch {
+        /* reported below as a missing launcher */
+    }
+    const find = (id) => Object.values(config).map((entries) => entries?.[id]).find(Boolean);
+    const instance = find(`${ns}.Instance`);
+    const console = find(`${ns}.Console`);
+    if (!native ||
+        instance?.type !== "url" ||
+        instance.url !== `/webman/3rdparty/${info.package}/sso/open.cgi` ||
+        console?.type !== "app" ||
+        console.appWindow !== `${ns}.MainWindow` ||
+        console.allUsers !== false ||
+        console.grantPrivilege !== undefined ||
+        info.dsmuidir !== "ui" ||
+        info.dsmappname !== `${ns}.Instance ${ns}.Console` ||
+        info.dsmapplaunchname !== `${ns}.Console`) {
+        findings.push(`${LAUNCHER_TYPE_MISMATCH} console requires a url launcher at ${ns}.Instance to sso/open.cgi, an administrator-only app launcher at ${ns}.Console and INFO dsmapplaunchname=${ns}.Console; rebuild with synopkgland build`);
+    }
+}
 /** The launcher in ui/config must carry exactly the access the declared entry mode fixes. */
 async function checkEntryLauncher(dir, pkg, entry, findings) {
     const target = join(dir, "entry-inspection");
@@ -1229,8 +1263,8 @@ async function inspectInstallSettings(dir, payload, metadata, findings) {
     mkdirSync(root);
     await tar.x({ file: join(dir, 'package.tgz'), cwd: root });
     const info = readInfo(join(dir, 'INFO'), findings, 'binary', Boolean(metadata.compose));
-    const gateway = metadata.compose?.gateway ?? (metadata.native_gateway ? { listen: metadata.native_gateway.listen } : undefined);
-    const m = { package: info.package, installSettings: settings, identityGateway: gateway };
+    const gateway = metadata.compose?.gateway ?? metadata.native_gateway;
+    const m = { package: info.package, os_min_ver: info.os_min_ver, capabilities: {}, installSettings: settings, identityGateway: gateway };
     try {
         if (readOptional(join(root, 'install/settings.json')) !== JSON.stringify(settingsConfig(m), null, 2) + '\n')
             throw new Error('settings inventory differs from its declaration or gateway port');
@@ -1243,7 +1277,8 @@ async function inspectInstallSettings(dir, payload, metadata, findings) {
         // App wrappers remain intact here; remove exactly the SDK prefix within them.
         for (const name of ['preinst', 'postinst', 'postupgrade', 'preuninst']) {
             const file = join(dir, 'scripts', name), text = readOptional(file), prefix = renderSettingsHook(name, m);
-            if (!text || !sdkScriptOf(name, text)?.sdk.startsWith('#!/bin/sh\n' + prefix) || text.split(prefix).length !== 2)
+            const sdk = text && sdkScriptOf(name, text)?.sdk;
+            if (!sdk || !matchesStandaloneScriptPrefix(name, m, sdk) || text.split(prefix).length !== 2)
                 throw new Error(`scripts/${name} lacks the exact SDK settings hook`);
             writeFileSync(file, text.replace(prefix, ''));
         }

package/dist/standalone/lifecycle.d.ts

@@ -1,5 +1,8 @@
 import type { StandaloneManifest } from "./manifest.js";
 /** Package-account lifecycle hooks for CGI, daemon and background packages. */
 export declare function renderStandaloneScript(name: string, manifest: StandaloneManifest): string;
+/** Settings inspection peels its hook only at the position build's renderer writes.
+ * The backend inspector then replays the entire remaining lifecycle script. */
+export declare function matchesStandaloneScriptPrefix(name: string, manifest: StandaloneManifest, actual: string): boolean;
 /** Accept the exact current, diagnostic-only, and released lifecycle variants. */
 export declare function matchesStandaloneScript(name: string, manifest: StandaloneManifest, actual: string | undefined): boolean;

package/dist/standalone/lifecycle.js

@@ -15,23 +15,34 @@ const UNINSTALL_ONLY = '[ "${SYNOPKG_PKG_STATUS:-}" = UPGRADE ] || synopkgland_u
 /** Package-account lifecycle hooks for CGI, daemon and background packages. */
 export function renderStandaloneScript(name, manifest) {
     const script = renderStandaloneScriptInternal(name, manifest);
-    const prepared = ['postinst', 'postupgrade'].includes(name) ? renderNativeGatewayPrepare(manifest) : '';
-    const prefix = renderNativeGatewayDiagnostic(manifest, name) + renderNativeGatewayPortWait(manifest, name) + renderSettingsHook(name, manifest) + prepared;
+    const prefix = renderStandaloneScriptPrefix(name, manifest);
     const sdk = prefix ? script.replace('#!/bin/sh\n', () => '#!/bin/sh\n' + prefix) : script;
     return manifest.appScripts?.some((app) => app === name)
         ? composeAppScript(name, sdk)
         : sdk;
 }
+function renderStandaloneScriptPrefix(name, manifest) {
+    const prepared = ['postinst', 'postupgrade'].includes(name) ? renderNativeGatewayPrepare(manifest) : '';
+    return renderNativeGatewayDiagnostic(manifest, name) + renderNativeGatewayPortWait(manifest, name) + renderSettingsHook(name, manifest) + prepared;
+}
+/** Settings inspection peels its hook only at the position build's renderer writes.
+ * The backend inspector then replays the entire remaining lifecycle script. */
+export function matchesStandaloneScriptPrefix(name, manifest, actual) {
+    const blocks = [renderNativeGatewayDiagnostic(manifest, name), renderNativeGatewayPortWait(manifest, name)].filter(Boolean);
+    return standaloneScriptVariants(name, manifest, renderStandaloneScriptPrefix(name, manifest)).some(prefix => actual.startsWith('#!/bin/sh\n' + prefix) &&
+        // A released prefix omits these blocks entirely; moving one after the
+        // settings hook must not masquerade as that released variant.
+        blocks.every(block => prefix.includes(block) || !actual.includes(block)));
+}
 /** Accept the exact current, diagnostic-only, and released lifecycle variants. */
 export function matchesStandaloneScript(name, manifest, actual) {
-    const expected = renderStandaloneScript(name, manifest);
-    if (actual === expected)
-        return true;
+    return actual !== undefined && standaloneScriptVariants(name, manifest, renderStandaloneScript(name, manifest)).includes(actual);
+}
+function standaloneScriptVariants(name, manifest, expected) {
     const diagnostic = renderNativeGatewayDiagnostic(manifest, name);
     const wait = renderNativeGatewayPortWait(manifest, name);
     const diagnosticOnly = wait ? expected.replace(wait, '') : expected;
-    return (wait !== '' && actual === diagnosticOnly) ||
-        (diagnostic !== '' && actual === diagnosticOnly.replace(diagnostic, ''));
+    return [expected, ...(wait ? [diagnosticOnly] : []), ...(diagnostic ? [diagnosticOnly.replace(diagnostic, '')] : [])];
 }
 function renderStandaloneScriptInternal(name, manifest) {
     if (manifest.compose) {

package/dist/standalone/manifest.d.ts

@@ -100,6 +100,12 @@ export interface StandaloneManifest {
     entry?: EntryMode;
     /** `portal`: registers the DSM Application Portal entry; an administrator activates it. */
     portal?: PortalDeclaration;
+    /**
+     * `console`: the main menu gets two icons, the gateway's native UI in a new
+     * tab and the SDK UI in an administrator-only DSM window titled `title`
+     * (default "<displayname> for DSM"). Absent keeps the single window icon.
+     */
+    console?: ConsoleDeclaration;
     /** The project's dsm-scripts/<DSM script name> files, each run inside the generated script of that name. */
     appScripts?: AppScriptName[];
     /** `icon`: a square PNG of at least 256 px, or a directory of icon_<size>.png; absent uses the SDK default. */
@@ -112,6 +118,9 @@ export interface StandaloneManifest {
  * accounts DSM's Control Panel > Application Privileges allows for the app.
  */
 export type EntryMode = "admin-only" | "app-privilege";
+export interface ConsoleDeclaration {
+    title?: string;
+}
 export interface Capabilities {
     composeMounts?: true;
     webapi?: WebAPIProfiles;

package/dist/standalone/manifest.js

@@ -56,6 +56,7 @@ export const KNOWN_FIELDS = new Set([
     "uninstall",
     "entry",
     "portal",
+    "console",
     "icon",
     "reproducible",
     "root",
@@ -65,6 +66,7 @@ const I18N_FIELDS = new Set(["messages", "glossary", "info"]);
 const PACKAGE_ID = /^[A-Za-z][A-Za-z0-9]{1,63}$/;
 const VERSION = /^\d+(\.\d+){0,3}$/;
 const OS_MIN_VER = /^\d+\.\d+(\.\d+)?-\d+$/;
+const CONSOLE_TITLE = /^[^"\\\x00-\x1f\x7f]{1,64}$/;
 const GO_MAIN = /^\.\/[A-Za-z0-9_./-]*$/;
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -399,6 +401,7 @@ function readManifest(raw, c) {
         : undefined;
     if (entryProblem)
         c.fail("STANDALONE_PORTAL_ENTRY_INVALID", entryProblem);
+    const dsmConsole = raw.console === undefined ? undefined : readConsole(raw, ui?.launch, c);
     const loginStyle = raw.login_style === undefined
         ? undefined
         : readLoginStyle(raw.login_style, raw.portal !== undefined, c);
@@ -454,6 +457,7 @@ function readManifest(raw, c) {
         ...(installSettings ? { installSettings } : {}),
         ...(entry ? { entry } : {}),
         ...(portal ? { portal } : {}),
+        ...(dsmConsole ? { console: dsmConsole } : {}),
         ...(icon ? { icon } : {}),
         ...(loginStyle ? { loginStyle } : {}),
         ...(appScripts ? { appScripts } : {}),
@@ -503,6 +507,30 @@ const LOGIN_STYLE_FIELDS = [
     "wallpaper_thumbnail",
     "title",
 ];
+/**
+ * `console`: {} or { title }. The native icon is the gateway's url launcher,
+ * so the App needs identity_gateway and its own SDK window; that window is the
+ * console, never a new page or a portal.
+ */
+function readConsole(raw, launch, c) {
+    const value = raw.console;
+    if (!isRecord(value) ||
+        Object.keys(value).some((k) => k !== "title") ||
+        (value.title !== undefined &&
+            (typeof value.title !== "string" || !CONSOLE_TITLE.test(value.title)))) {
+        c.fail("STANDALONE_CONSOLE_INVALID", 'console must be {} or { title: <1-64 characters, no quotes, backslashes or control characters> }.');
+        return undefined;
+    }
+    if (raw.identity_gateway === undefined || raw.compose !== undefined) {
+        c.fail("STANDALONE_CONSOLE_REQUIRES_GATEWAY", "console needs identity_gateway on an App with its own SDK UI: the native icon opens the gateway, the console opens the SDK UI. Compose and Apps without a gateway keep one icon.");
+        return undefined;
+    }
+    if (launch !== undefined)
+        c.fail("STANDALONE_CONSOLE_LAUNCH", "console always opens in a DSM window and the native icon in a new tab; remove ui.launch.");
+    if (raw.portal !== undefined)
+        c.fail("STANDALONE_CONSOLE_PORTAL", "console and portal both claim the App's SDK UI; declare one of them.");
+    return value.title === undefined ? {} : { title: value.title };
+}
 /** `login_style`: a portal's colour, wallpaper (with its thumbnail) and title image, each optional. */
 function readLoginStyle(value, portal, c) {
     const invalid = (message) => c.fail("STANDALONE_LOGIN_STYLE_INVALID", message);

package/dist/standalone/spk.d.ts

@@ -36,4 +36,9 @@ export interface AssembleOptions {
  */
 export declare function assembleStandaloneSpk(options: AssembleOptions): Promise<void>;
 /** Manifest validation already refused quotes, backslashes and newlines. */
+/**
+ * INFO `dsmappname` lists the App's launchable classes. With a console,
+ * Package Center's Open (`dsmapplaunchname`) opens the console window.
+ */
+export declare function consoleInfo(manifest: Pick<StandaloneManifest, "package" | "console">): Array<[string, string]>;
 export declare function renderInfo(manifest: StandaloneManifest, arch: NativeArchFamily, checksum: string, executorDigest?: string): string;

package/dist/standalone/spk.js

@@ -91,7 +91,7 @@ export async function assembleStandaloneSpk(options) {
             writeFile(join(uiRoot, windowScriptName(manifest)), renderWindowScript(manifest, assetVersion, icons, options.portalText));
         writeFile(join(uiRoot, hostScriptName(manifest.build)), renderHostAdapterScript(manifest.package));
         writeDsmWindowIcons(uiRoot, icons);
-        writeUiTexts(uiRoot, appTitle(manifest));
+        writeUiTexts(uiRoot, appTitle(manifest), manifest.console);
         if (options.apiDescription)
             writeFile(join(staging, "package", "synopkgland-api.json"), JSON.stringify(options.apiDescription) + "\n");
         const cgiTarget = join(staging, "package", CGI_PAYLOAD_PATH);
@@ -242,6 +242,7 @@ export async function assembleStandaloneSpk(options) {
                 }
                 : {}),
             ...(manifest.entry ? { entry: manifest.entry } : {}),
+            ...(manifest.console ? { console: true } : {}),
             ...(manifest.uninstall
                 ? {
                     uninstall: uninstallRecord(manifest.uninstall, manifest.i18n?.catalogs),
@@ -319,6 +320,16 @@ function quote(value) {
     return `"${value.replace(/([\\"$`])/g, "\\$1")}"`;
 }
 /** Manifest validation already refused quotes, backslashes and newlines. */
+/**
+ * INFO `dsmappname` lists the App's launchable classes. With a console,
+ * Package Center's Open (`dsmapplaunchname`) opens the console window.
+ */
+export function consoleInfo(manifest) {
+    const ns = `SYNO.SDS.${manifest.package}`;
+    return manifest.console
+        ? [["dsmappname", `${ns}.Instance ${ns}.Console`], ["dsmapplaunchname", `${ns}.Console`]]
+        : [["dsmappname", `${ns}.Instance`]];
+}
 export function renderInfo(manifest, arch, checksum, executorDigest) {
     const fields = [
         ["package", manifest.package],
@@ -329,7 +340,7 @@ export function renderInfo(manifest, arch, checksum, executorDigest) {
         ["arch", infoArchValue(arch)],
         ["os_min_ver", manifest.os_min_ver],
         ["dsmuidir", "ui"],
-        ["dsmappname", `SYNO.SDS.${manifest.package}.Instance`],
+        ...consoleInfo(manifest),
         ["thirdparty", "yes"],
         ["startable", "yes"],
         ["checksum", checksum],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {
@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "@napi-rs/keyring": "^2.1.1",
-    "@synopackageland/templates": "0.24.0",
+    "@synopackageland/templates": "0.25.0",
     "ajv": "^8.17.1",
     "commander": "^13.1.0",
     "json-canonicalize": "^3.0.1",

package/skills/SKILL.md

@@ -27,6 +27,18 @@ Read [reference/ui-vue.md](reference/ui-vue.md) when editing Vue components in t
 
 Read [reference/ui-json.md](reference/ui-json.md) when generating or editing JSON UI; discover the installed catalog, validate the spec, then render and fix layout issues.
 
+## UI copywriting
+
+For UI/locale strings we author in the SDK, UI package, templates and our own
+Apps, remove the final sentence-ending period in every language, even from
+multi-sentence text; keep periods between sentences. Preserve question marks,
+exclamation marks, ellipses, abbreviations, version numbers, URLs and trailing
+`{key}` placeholders. In upstream forks, apply this only to UI copy we add under
+`synology/` (such as DSM install wizards and gateway pages); leave upstream
+UI/locale strings and release notes unchanged. See
+[Vue copy and i18n](reference/ui-vue.md#ui-copy-and-i18n) and
+[JSON copy and i18n](reference/ui-json.md#ui-copy-and-i18n) for examples.
+
 For UI discovery, run `npx --no syno-pkg-land-ui catalog --json` and
 `npx --no syno-pkg-land-ui describe Button --json` from the installed frontend.
 Read its prompt and exported Vue docs/types before choosing component APIs.
@@ -155,6 +167,15 @@ Application Portal 是獨立 opt-in：不想要別名就省略 `portal`，不生
 `defaultAlias`、Portal 面板／capability 或 Web Station alias；沒有 Portal
 不是 inspect／info／doctor 問題。明確啟用 `portal` 時才將其 alias 作為 `defaultAlias`。
 
+宣告 `console` 的 App 在主選單有兩個圖示，適用於包裝開源專案、又有額外整合操作的 App。
+原生圖示叫 `displayname`，是 `type: "url"`，經 `sso/open.cgi` 在新分頁開原生 UI。
+主控台預設叫「<displayname> for DSM」，是只給管理員的 `type: "app"` DSM 視窗，掛載 `ui.dir` 的 SDK UI。
+套件中心「開啟」（INFO `dsmapplaunchname`）開主控台；Application Privileges 只列出原生圖示。
+`console: {}` 用預設名稱，`console: { title: "<名稱>" }` 覆寫所有語系。
+省略 `console` 維持單一圖示。`console` 必須搭配 `identity_gateway` 與 SDK UI；
+compose App、沒有 gateway 的 App、`ui.launch` 或 `portal` 都會被 check 拒絕。
+冷登入由 url 圖示經 `open.cgi` 續接，`oidc.browser` 需要支援此續接的 SDK。
+
 Schema 2 Compose 使用 `dsm-package.yaml` 的 `compose.files`、`compose.web` 與
 `identity_gateway`；不使用 file/targets/address_env 或手寫 upstream。
 省略 `ui.launch` 時預設 `new-page`，使用 SDK standalone launcher，不帶 Application Portal。

package/skills/reference/portal.md

@@ -57,6 +57,15 @@ Application Portal 是獨立 opt-in：不想要別名就省略 `portal`，不生
 `defaultAlias`、Portal 面板／capability 或 Web Station alias；沒有 Portal
 不是 inspect／info／doctor 問題。明確啟用 `portal` 時才將其 alias 作為 `defaultAlias`。
 
+宣告 `console` 的 App 在主選單有兩個圖示，適用於包裝開源專案、又有額外整合操作的 App。
+原生圖示叫 `displayname`，是 `type: "url"`，經 `sso/open.cgi` 在新分頁開原生 UI。
+主控台預設叫「<displayname> for DSM」，是只給管理員的 `type: "app"` DSM 視窗，掛載 `ui.dir` 的 SDK UI。
+套件中心「開啟」（INFO `dsmapplaunchname`）開主控台；Application Privileges 只列出原生圖示。
+`console: {}` 用預設名稱，`console: { title: "<名稱>" }` 覆寫所有語系。
+省略 `console` 維持單一圖示。`console` 必須搭配 `identity_gateway` 與 SDK UI；
+compose App、沒有 gateway 的 App、`ui.launch` 或 `portal` 都會被 check 拒絕。
+冷登入由 url 圖示經 `open.cgi` 續接，`oidc.browser` 需要支援此續接的 SDK。
+
 Docker／web service App 設定 `integration.web.launch`，內建預設是 `new-page`；
 省略開啟方式時直接開新分頁，不宣告 Application Portal。SDK 原生 App
 省略時使用 `dsm-window`；非 UI SDK 原生 App 必須明確寫 `ui.launch: new-page`。

package/skills/reference/ui-json.md

@@ -25,6 +25,35 @@ every state path you bind. Use only catalog components and real app-owned action
 computed functions and message keys. Keep NAS pickers, native DSM bridges,
 authorization, polling and domain-specific views in Vue/TypeScript extensions.
 
+## UI copy and i18n
+
+Use the same [UI copy rule as Vue](ui-vue.md#ui-copy-and-i18n) for literal
+display text in JSON specs and the locale catalogs behind message keys. It
+applies to copy we author in the SDK, UI package, templates and our own Apps.
+In upstream forks, only our added UI copy under `synology/` (for example DSM
+install wizards and gateway pages) is in scope. Leave upstream UI/locale
+strings and release notes unchanged; any future checker must exclude upstream
+source and scan only our owned files.
+
+In every language, remove the final sentence-ending period (`.`, `。`, `．`),
+even when the string contains multiple sentences. Preserve periods between
+sentences. Keep question marks, exclamation marks, ellipses (`…`, `...`),
+abbreviations such as `etc.`, version numbers, URLs and trailing `{key}`
+placeholders intact. Apply the rule to each translation and plural form, not
+to message keys, action names, URLs or other non-display spec data.
+
+| Avoid (message value) | Use (message value) |
+| --- | --- |
+| `"Saved."` | `"Saved"` |
+| `"Try again. Contact support if it still fails."` | `"Try again. Contact support if it still fails"` |
+| `"請稍後再開。若一直打不開，請聯絡送審的人。"` | `"請稍後再開。若一直打不開，請聯絡送審的人"` |
+| `"保存しました。"` | `"保存しました"` |
+
+Keep `"Continue?"`, `"Done!"`, `"Loading…"`, `"Loading..."`, `"Images, etc."`,
+`"Version {version}"`, `"https://example.com"` and `"Saved to {folder}"` unchanged.
+Use a script for bulk corrections rather than editing entries one by one.
+This is authoring guidance; it does not add validation to the commands below.
+
 ## Validate, fix, render
 
 After saving the generated spec as `ui.json`, run:

package/skills/reference/ui-vue.md

@@ -73,6 +73,38 @@ the first screen waits for the startup chain, not the bundle:
 - Start polling on its schedule; do not repeat at mount a read startup just
   made. Delay background sampling that the first screen does not need.
 
+## UI copy and i18n
+
+Apply this rule to UI strings we author in the SDK, UI package, templates and
+our own Apps, whether in locale catalogs or inline Vue/TypeScript copy: buttons,
+titles, labels, field descriptions, hints, toasts and error messages. In an
+upstream fork, apply it only to our added UI copy under `synology/`, including
+DSM install wizards and gateway pages. Never rewrite upstream UI/locale strings
+to match this style; preserve them for future upstream merges. Release notes
+are outside this UI-copy rule.
+
+Remove only the final sentence-ending period, including `.` and fullwidth
+periods such as `。` and `．`, in every language. This applies to both single-
+and multi-sentence strings. Keep sentence-separating periods inside the string.
+Preserve question marks (`?`, `？`), exclamation marks (`!`, `！`), ellipses
+(`…`, `...`), abbreviations such as `etc.`, version numbers, URLs and trailing
+`{key}` placeholders; do not trim dots indiscriminately or alter substituted
+values.
+
+| Avoid | Use |
+| --- | --- |
+| `Save.` | `Save` |
+| `Try again later. If it still fails, contact support.` | `Try again later. If it still fails, contact support` |
+| `請稍後再開。若一直打不開，請聯絡送審的人。` | `請稍後再開。若一直打不開，請聯絡送審的人` |
+| `設定を保存しました。` | `設定を保存しました` |
+
+Keep these unchanged: `Continue?`, `Done!`, `Loading…`, `Loading...`,
+`Images, videos, etc.`, `Version {version}`, `https://example.com` and
+`Saved to {folder}`. Preserve internal punctuation in every translation and
+plural form. For bulk copy corrections, use a script rather than editing each
+entry by hand. Any future punctuation checker must scan only our owned files,
+excluding upstream source; this guidance does not add a CLI check or gate.
+
 ## Verify the actual Vue app
 
 From `frontend`, run:
@@ -124,6 +156,15 @@ Application Portal 是獨立 opt-in：不想要別名就省略 `portal`，不生
 `defaultAlias`、Portal 面板／capability 或 Web Station alias；沒有 Portal
 不是 inspect／info／doctor 問題。明確啟用 `portal` 時才將其 alias 作為 `defaultAlias`。
 
+宣告 `console` 的 App 在主選單有兩個圖示，適用於包裝開源專案、又有額外整合操作的 App。
+原生圖示叫 `displayname`，是 `type: "url"`，經 `sso/open.cgi` 在新分頁開原生 UI。
+主控台預設叫「<displayname> for DSM」，是只給管理員的 `type: "app"` DSM 視窗，掛載 `ui.dir` 的 SDK UI。
+套件中心「開啟」（INFO `dsmapplaunchname`）開主控台；Application Privileges 只列出原生圖示。
+`console: {}` 用預設名稱，`console: { title: "<名稱>" }` 覆寫所有語系。
+省略 `console` 維持單一圖示。`console` 必須搭配 `identity_gateway` 與 SDK UI；
+compose App、沒有 gateway 的 App、`ui.launch` 或 `portal` 都會被 check 拒絕。
+冷登入由 url 圖示經 `open.cgi` 續接，`oidc.browser` 需要支援此續接的 SDK。
+
 Docker／web service App 設定 `integration.web.launch`，內建預設是 `new-page`；
 省略開啟方式時直接開新分頁，不宣告 Application Portal。SDK 原生 App
 省略時使用 `dsm-window`；非 UI SDK 原生 App 必須明確寫 `ui.launch: new-page`。

package/skills/reference/upstream-fork.md

@@ -6,6 +6,11 @@ Never edit upstream README, Dockerfile, source, config, workflows or ignore file
 Do not rewrite the App or treat it as an SDK component. Use `.git/info/exclude`
 for local output when needed.
 
+Apply the [UI copy rule](ui-vue.md#ui-copy-and-i18n) only to UI strings we add
+under `synology/`, such as DSM install wizards and gateway pages; leave upstream
+UI/locale strings and release notes unchanged, and exclude upstream source from
+any future punctuation checker.
+
 ## Decide whether to expose AI control
 
 Ask whether the user needs AI control unless they have already explicitly requested it.