@synopackageland/cli 0.3.10 → 0.4.1

package/dist/standalone/dsm-window.js

@@ -0,0 +1,291 @@
+import { REOPEN_EVENTS_RUNTIME } from "./reopen-events.js";
+import { DSM_LANGS } from "./i18n.js";
+import { ROOT_MESSAGES } from "./root-messages.js";
+import { ROOT_PANEL, ROOT_RUNTIME, rootTasks } from "./root-window.js";
+import { HOST_ADAPTER_RUNTIME } from "./host-adapter.js";
+/** Same path the generated wrapper POSTs to, and the payload location of the CGI. */
+export const CGI_PAYLOAD_PATH = "ui/cgi/api.cgi";
+export function cgiUrl(packageId) {
+    return `/webman/3rdparty/${packageId}/cgi/api.cgi`;
+}
+const LOCALE_BY_DSM_LANG = Object.fromEntries(Object.entries(DSM_LANGS).map(([locale, lang]) => [lang, locale]));
+/**
+ * `createI18n(dsmLang, catalogs)` → `{ locale, t }`, plain ES5 so it runs in
+ * DSM's desktop as is. The DSM language picks a shipped catalog (else
+ * English); missing keys fall back to English, then to the key itself.
+ * `t(key, { count })` looks up `key.one` / `key.other` via Intl.PluralRules.
+ */
+export const I18N_RUNTIME = `function createI18n(dsmLang, catalogs) {
+  var byLang = ${JSON.stringify(LOCALE_BY_DSM_LANG)};
+  var has = function (object, key) { return Object.prototype.hasOwnProperty.call(object, key); };
+  var wanted = has(byLang, dsmLang) ? byLang[dsmLang] : "en";
+  var locale = has(catalogs, wanted) ? wanted : "en";
+  var own = catalogs[locale] || {};
+  var en = catalogs.en || {};
+  var plural = typeof Intl !== "undefined" && Intl.PluralRules ? new Intl.PluralRules(locale) : null;
+  function lookup(key) {
+    return has(own, key) ? own[key] : has(en, key) ? en[key] : undefined;
+  }
+  function t(key, params) {
+    var text = lookup(key);
+    if (text === undefined && params && typeof params.count === "number") {
+      var form = plural ? plural.select(params.count) : params.count === 1 ? "one" : "other";
+      text = lookup(key + "." + form);
+      if (text === undefined) text = lookup(key + ".other");
+    }
+    if (text === undefined) return key;
+    return text.replace(/\\{(\\w+)\\}/g, function (match, name) {
+      return params && has(params, name) ? String(params[name]) : match;
+    });
+  }
+  return { locale: locale, t: t };
+}`;
+/**
+ * The wrapper file name carries the build so DSM never serves a wrapper
+ * cached from the previous version after an upgrade.
+ */
+export function windowScriptName(manifest) {
+    return `window-${String(manifest.build).padStart(4, "0")}.js`;
+}
+/** `ui/config`: registers the DSM main-menu app and its window class. */
+export function renderUiConfig(manifest) {
+    const ns = `SYNO.SDS.${manifest.package}`;
+    return `${JSON.stringify({
+        [windowScriptName(manifest)]: {
+            [`${ns}.Instance`]: {
+                type: "app",
+                title: manifest.displayname,
+                desc: manifest.description,
+                icon: "images/app_{0}.png",
+                appWindow: `${ns}.MainWindow`,
+                allowMultiInstance: false,
+                allUsers: true,
+                depend: [`${ns}.MainWindow`],
+            },
+            [`${ns}.MainWindow`]: {
+                type: "lib",
+                title: manifest.displayname,
+                icon: "images/app_{0}.png",
+                depend: [],
+            },
+        },
+    }, null, 2)}\n`;
+}
+/**
+ * The DSM AppWindow that hosts the project's UI. It loads app/app.js and
+ * app/app.css once, then calls the app's mount(root, ctx). `ctx.call` is the
+ * only transport: same-origin POST with DSM's session cookie and SynoToken.
+ * `ctx.t` / `ctx.locale` translate with the catalogs embedded at build time.
+ * `assetVersion` busts browser caches when the UI changes.
+ */
+export function renderWindowScript(manifest, assetVersion) {
+    const pkg = manifest.package;
+    const ns = `SYNO.SDS.${pkg}`;
+    const p = JSON.stringify(pkg);
+    const root = manifest.rootOps ? renderRootParts(ns, manifest) : undefined;
+    return `/* Generated by synopkgland build-spk. Edit your UI in the project's ui folder. */
+Ext.ns(${JSON.stringify(ns)});
+
+${ns}.call = function (method, params) {
+  var headers = { "Content-Type": "application/json" };
+  var token = SYNO.SDS.Session && SYNO.SDS.Session.SynoToken;
+  if (token) {
+    headers["X-SYNO-TOKEN"] = token;
+  }
+  return fetch(${JSON.stringify(cgiUrl(pkg))}, {
+    method: "POST",
+    credentials: "same-origin",
+    headers: headers,
+    body: JSON.stringify({ method: method, params: params || {} })
+  }).then(function (response) {
+    return response.json().catch(function () {
+      return { success: false, error: { code: "bad_response", message: "HTTP " + response.status } };
+    });
+  }, function () {
+    return { success: false, error: { code: "network", message: "The NAS did not answer" } };
+  }).then(function (body) {
+    if (body && body.success === true) {
+      return body.data;
+    }
+    throw (body && body.error) || { code: "bad_response", message: "Unexpected response" };
+  });
+};
+
+${ns}.messages = ${JSON.stringify(manifest.i18n?.catalogs ?? { en: {} })};
+${ns}.createI18n = (function () {
+${I18N_RUNTIME}
+  return createI18n;
+})();
+
+${ns}.createReopenEvents = (function () {
+${REOPEN_EVENTS_RUNTIME}
+  return createReopenEvents;
+})();
+
+${ns}.createHost = (function () {
+${HOST_ADAPTER_RUNTIME}
+  return createHostAdapter;
+})();
+
+${root ? root.definitions : ""}${ns}.loadApp = function (done) {
+  var apps = window.DsmPackageApps || {};
+  if (apps[${p}]) {
+    done(apps[${p}]);
+    return;
+  }
+  var base = "webman/3rdparty/${pkg}/app/";
+  var css = document.createElement("link");
+  css.rel = "stylesheet";
+  css.href = base + "app.css?v=${assetVersion}";
+  document.head.appendChild(css);
+  var js = document.createElement("script");
+  js.src = base + "app.js?v=${assetVersion}";
+  js.dataset.package = ${p};
+  js.onload = function () { done((window.DsmPackageApps || {})[${p}]); };
+  document.head.appendChild(js);
+};
+
+Ext.define(${JSON.stringify(`${ns}.Instance`)}, {
+  extend: "SYNO.SDS.AppInstance",
+  appWindowName: ${JSON.stringify(`${ns}.MainWindow`)}
+});
+
+Ext.define(${JSON.stringify(`${ns}.MainWindow`)}, {
+  extend: "SYNO.SDS.AppWindow",
+  constructor: function (config) {
+    this.callParent([Ext.apply({
+      width: 960, height: 640, minWidth: 640, minHeight: 420, layout: "fit",
+      ${root ? root.html : `html: '<div class="dsmapp-root" style="height:100%"></div>'`}
+    }, config)]);
+  },
+  onOpen: function () {
+    this.callParent(arguments);
+    var me = this;
+    if (me.mounted) {
+      me.reopenEvents.emit();
+      return;
+    }
+    if (me.mountPending) return;
+    me.mountPending = true;
+    var mountToken = me.mountToken = {};
+    me.reopenEvents = ${ns}.createReopenEvents();
+    me.reopenHandlers = me.reopenEvents.handlers;
+    var lang = "enu";
+    try { if (typeof _S === "function") lang = _S("lang"); } catch (error) {}
+${root ? root.mount : ""}    ${ns}.loadApp(function (app) {
+      if (me.mountToken !== mountToken) return;
+      me.mountPending = false;
+      var root = me.body && me.body.dom.querySelector(".dsmapp-root");
+      if (app && root && !me.mounted) {
+        var i18n = ${ns}.createI18n(lang, ${ns}.messages);
+        me.hostAccess = ${ns}.createHost({ appWindow: me, locale: i18n.locale });
+        root.lang = i18n.locale;
+        try {
+          me.mounted = app.mount(root, {
+          call: ${ns}.call,
+          reopen: me.reopenEvents.subscribe,
+          host: me.hostAccess,
+          appWindow: me,
+          lang: lang,
+          locale: i18n.locale,
+          t: i18n.t${root ? ",\n          root: access" : ""}
+          }) || {};
+        } catch (error) {
+          me.hostAccess.dispose();
+          me.hostAccess = null;
+          me.mountToken = null;
+          me.reopenEvents.dispose();
+          me.reopenEvents = null;
+          me.reopenHandlers = [];
+          throw error;
+        }
+      }
+    });
+  },
+  onDestroy: function () {
+    this.mountToken = null;
+    this.mountPending = false;
+    if (this.reopenEvents) this.reopenEvents.dispose();
+    this.reopenEvents = null;
+    this.reopenHandlers = [];
+    if (this.hostAccess) this.hostAccess.dispose();
+    this.hostAccess = null;
+    var mounted = this.mounted;
+    this.mounted = null;
+    try {
+      if (mounted && mounted.unmount) mounted.unmount();
+    } finally {
+      this.callParent(arguments);
+    }
+  }
+});
+`;
+}
+const ROOT_PANEL_CSS = [
+    ".dsmapp-rootpanel{margin:16px 20px;padding:12px 16px;border:1px solid #d5dce5;border-radius:4px;background:#f7f9fb;font-size:13px;line-height:1.5}",
+    ".dsmapp-rootpanel h2{margin:0 0 6px;font-size:14px;font-weight:600}",
+    ".dsmapp-rootpanel dl{display:grid;grid-template-columns:max-content 1fr;gap:2px 12px;margin:8px 0}",
+    ".dsmapp-rootpanel dt{color:#526070}.dsmapp-rootpanel dd{margin:0}",
+    ".dsmapp-rootpanel pre{margin:4px 0 8px;padding:6px 8px;background:#fff;border:1px solid #e1e6ec;white-space:pre-wrap;max-height:160px;overflow:auto}",
+    ".dsmapp-rootpanel-actions button{margin-right:8px;padding:4px 14px}",
+    ".dsmapp-rootpanel-primary{background:#057feb;color:#fff;border:1px solid #057feb;border-radius:3px}",
+    ".dsmapp-rootpanel-message{color:#c0392b}.dsmapp-rootpanel-hint{color:#526070;font-size:12px}",
+].join("");
+/**
+ * The privilege: root additions to the window: the exact tasks and panel
+ * text, the access runtime wired to DSM's own password confirmation and the
+ * AppWindow's WebAPI channel, and the panel above the app.
+ */
+function renderRootParts(ns, manifest) {
+    return {
+        definitions: `${ns}.rootTasks = ${JSON.stringify(rootTasks(manifest))};
+${ns}.rootMessages = ${JSON.stringify(ROOT_MESSAGES)};
+${ns}.createRootAccess = (function () {
+${ROOT_RUNTIME}
+  return createRootAccess;
+})();
+${ns}.mountRootPanel = (function () {
+${ROOT_PANEL}
+  return mountRootPanel;
+})();
+
+`,
+        html: `autoScroll: true,
+      html: '<style>${ROOT_PANEL_CSS}</style><div class="dsmapp-rootpanels"></div><div class="dsmapp-root"></div>'`,
+        mount: `    var session = function () {
+      var current = SYNO.SDS.Session || {};
+      return { name: current.user, admin: current.is_admin === true };
+    };
+    var access = ${ns}.createRootAccess({
+      tasks: ${ns}.rootTasks,
+      user: session,
+      send: function (api, method, version, params) {
+        return new Promise(function (resolve, reject) {
+          me.sendWebAPI({
+            api: api, method: method, version: version, params: params, scope: me,
+            callback: function (success, response) {
+              if (success) resolve(response);
+              else reject({ code: "dsm_" + ((response && response.code) || "error") });
+            }
+          });
+        });
+      },
+      confirmPassword: function () {
+        return new Promise(function (resolve) {
+          SYNO.SDS.Utils.PasswordConfirmDialog.openDialog(me, function (confirmation) {
+            resolve((confirmation && confirmation.SynoConfirmPWToken) || null);
+          }, [], function () { resolve(null); });
+        });
+      },
+      call: ${ns}.call,
+      wait: function (ms) { return new Promise(function (resolve) { setTimeout(resolve, ms); }); }
+    });
+    var panels = me.body && me.body.dom.querySelector(".dsmapp-rootpanels");
+    if (panels) {
+      var rootI18n = ${ns}.createI18n(lang, ${ns}.rootMessages);
+      panels.lang = rootI18n.locale;
+      ${ns}.mountRootPanel(panels, access, rootI18n, ${ns}.rootTasks, session().admin);
+    }
+`,
+    };
+}

package/dist/standalone/helper-inventory.d.ts

@@ -0,0 +1,16 @@
+export type DataAccessMode = "unavailable" | "relaxed";
+export interface Integration {
+    protocol: 1 | 2;
+    workers: Record<string, string>;
+    identity?: "better-auth";
+    dataAccess?: DataAccessMode;
+}
+export interface HelperInventory {
+    package: string;
+    version: string;
+    protocol: number;
+    payloadDigest: string;
+    registryDigest: string;
+    dataAccess?: DataAccessMode;
+}
+export declare const sha256: (b: string | Buffer) => string;

package/dist/standalone/helper-inventory.js

@@ -0,0 +1,2 @@
+import { createHash } from "node:crypto";
+export const sha256 = (b) => createHash("sha256").update(b).digest("hex");

package/dist/standalone/helper.d.ts

@@ -0,0 +1,21 @@
+import type { NativeArchFamily } from "../build-spk/dsm-arch.js";
+import type { CommandRunner } from "./build.js";
+import type { StandaloneError, StandaloneManifest } from "./manifest.js";
+import { type RootOp } from "./root-ops.js";
+export type { Integration, HelperInventory } from "./helper-inventory.js";
+import { type Integration, type HelperInventory } from "./helper-inventory.js";
+export interface WorkerPayload {
+    id: string;
+    digest: string;
+    bytes: Buffer;
+}
+export interface HelperArtifact {
+    binary: string;
+    inventory: HelperInventory;
+    workers: WorkerPayload[];
+    ops: RootOp[];
+}
+export declare function readIntegration(raw: unknown, root: string, fail: (e: StandaloneError) => void): Integration | undefined;
+export declare function assertHelperTaskBudget(script: string, metadata?: string): void;
+export declare function helperOps(m: StandaloneManifest, inventory: HelperInventory): RootOp[];
+export declare function buildHelper(m: StandaloneManifest, arch: NativeArchFamily, work: string, run: CommandRunner): HelperArtifact | undefined;

package/dist/standalone/helper.js

@@ -0,0 +1,105 @@
+import { lstatSync, readFileSync, realpathSync } from "node:fs";
+import { isAbsolute, join, relative, resolve } from "node:path";
+import { renderRootTaskScript } from "./root-ops.js";
+import { StandaloneBuildError } from "./spk.js";
+import { sha256 } from "./helper-inventory.js";
+const record = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+export function readIntegration(raw, root, fail) {
+    if (raw === undefined)
+        return undefined;
+    const invalid = () => { fail({ code: "STANDALONE_INTEGRATION_INVALID", message: "integration 需要 protocol: 1 或 2 與 workers: {固定 ID: 專案內檔案}；最多 16 個，僅作 inventory，不執行 worker。" }); return undefined; };
+    if (!record(raw) || Object.keys(raw).some(k => !["protocol", "workers", "identity", "dataAccess"].includes(k)) || ![1, 2].includes(raw.protocol) || !record(raw.workers) || Object.keys(raw.workers).length > 16)
+        return invalid();
+    if (raw.identity !== undefined && raw.identity !== "better-auth")
+        return invalid();
+    if (raw.dataAccess !== undefined && (raw.protocol !== 2 || !["unavailable", "relaxed"].includes(raw.dataAccess)))
+        return invalid();
+    const workers = {};
+    for (const [id, file] of Object.entries(raw.workers)) {
+        if (!/^[a-z][a-z0-9_]{0,31}$/.test(id) || typeof file !== "string" || !file || isAbsolute(file) || file.split(/[\\/]/).includes(".."))
+            return invalid();
+        const path = resolve(root, file), rel = relative(root, path);
+        if (rel.startsWith("..") || isAbsolute(rel))
+            return invalid();
+        workers[id] = path;
+    }
+    return { protocol: raw.protocol, workers, ...(raw.identity === "better-auth" ? { identity: "better-auth" } : {}), ...(raw.dataAccess !== undefined ? { dataAccess: raw.dataAccess } : {}) };
+}
+function snapshotWorkers(m) {
+    let total = 0;
+    return Object.entries(m.integration.workers).sort(([a], [b]) => a.localeCompare(b, "en")).map(([id, path]) => {
+        const rel = relative(realpathSync(m.root), realpathSync(path));
+        if (rel.startsWith("..") || isAbsolute(rel) || !lstatSync(path).isFile())
+            throw new StandaloneBuildError("HELPER_WORKER_UNSAFE", `${id} 必須是專案內的一般檔案，不接受 symlink。`);
+        const bytes = readFileSync(path);
+        total += bytes.length;
+        if (total > 1024 * 1024)
+            throw new StandaloneBuildError("HELPER_WORKERS_TOO_LARGE", "worker inventory payload 合計不可超過 1 MiB。");
+        return { id, digest: sha256(bytes), bytes };
+    });
+}
+export function assertHelperTaskBudget(script, metadata = JSON.stringify({ script })) {
+    if (Buffer.byteLength(script) > 4095)
+        throw new StandaloneBuildError("HELPER_TASK_TOO_LARGE", "helper task 超過 DSM 文件的 4095 bytes 保守限制。");
+    if (Buffer.byteLength(metadata) > 8191)
+        throw new StandaloneBuildError("HELPER_METADATA_TOO_LARGE", "helper scheduler metadata 超過 8191 bytes 有界限制。");
+}
+export function helperOps(m, inventory) {
+    return ["enable", "recover", "teardown", "disable", "repair"].map(action => {
+        const op = { name: `helper_${action}`, protectedOutput: true, body: `#!/bin/sh
+set -eu
+umask 077
+[ "$(id -u)" = 0 ]
+# Verify the installed version as well as the window's exact-script check.
+info=/var/packages/${m.package}/INFO
+[ ! -L "$info" ] && [ "$(stat -c %u "$info")" = 0 ]
+grep -Fqx 'version="${m.spkVersion}"' "$info"
+for p in /var/lib /run; do
+  [ ! -L "$p" ] && [ -d "$p" ] && [ "$(stat -c %u "$p")" = 0 ]
+  mode=$(stat -c %a "$p")
+  [ "$((0$mode & 0022))" = 0 ]
+done
+s=/var/lib/synopkgland-${m.package}
+r=/run/synopkgland-helper-${m.package}
+for p in "$s" "$r"; do
+  [ ! -L "$p" ]
+  if [ ! -e "$p" ]; then mkdir -m 0755 "$p"; fi
+  [ -d "$p" ] && [ "$(stat -c %u:%a "$p")" = 0:755 ]
+done
+# Copy into a root-owned private file FIRST, then verify the copied bytes.
+# The package may change its source during copy; no unverified byte executes.
+tmp=$(mktemp "$s/.payload.XXXXXX")
+trap 'rm -f "$tmp"' EXIT HUP INT TERM
+dd if=/var/packages/${m.package}/target/integration/helper of="$tmp" bs=65536 count=1025 2>/dev/null
+[ "$(stat -c %s "$tmp")" -le 67108864 ]
+chmod 0700 "$tmp"
+[ "$(sha256sum "$tmp" | cut -d ' ' -f 1)" = '${inventory.payloadDigest}' ]
+exe="$s/payload-${inventory.payloadDigest}"
+# Rename only inside the protected directory. Existing executable mappings
+# retain their inode and digest until the controller has verified teardown.
+mv -f "$tmp" "$exe"
+trap - EXIT HUP INT TERM
+exec "$exe" ${action}
+` };
+        const script = renderRootTaskScript(m, op);
+        assertHelperTaskBudget(script, JSON.stringify({ name: `${m.package} root: ${op.name}`, script, owner: "root", enable: false }));
+        return op;
+    });
+}
+export function buildHelper(m, arch, work, run) {
+    if (!m.integration)
+        return undefined;
+    if (m.backend.kind !== "go")
+        throw new StandaloneBuildError("HELPER_GO_REQUIRED", "M1a integration 僅支援 native-go。");
+    const workers = snapshotWorkers(m);
+    const registry = workers.map(({ id, digest }) => ({ id, digest }));
+    const base = { package: m.package, version: m.spkVersion, protocol: m.integration.protocol, payloadDigest: "", registryDigest: sha256(JSON.stringify(registry)), ...(m.integration.dataAccess ? { dataAccess: m.integration.dataAccess } : {}) };
+    const binary = join(work, `helper-${arch}`);
+    const result = run("go", ["build", "-trimpath", "-buildvcs=false", "-ldflags", `-s -w -buildid= -X 'main.helperInventory=${JSON.stringify(base)}'`, "-o", binary, "./cmd/helper"], {
+        cwd: m.backend.dir, env: { ...process.env, CGO_ENABLED: "0", GOOS: "linux", GOARCH: arch === "x86_64" ? "amd64" : "arm64" },
+    });
+    if (result.missing || result.status !== 0)
+        throw new StandaloneBuildError("HELPER_BUILD_FAILED", `Go helper build 失敗：${result.stderr}`);
+    const inventory = { ...base, payloadDigest: sha256(readFileSync(binary)) };
+    return { binary, inventory, workers, ops: helperOps(m, inventory) };
+}

package/dist/standalone/host-adapter.d.ts

@@ -0,0 +1,5 @@
+export type { HostAdapter, HostTitleResult, HostRequestResult, HostURLResult, HostEvent, HostSubscriptionResult, HostFileNavigationResult, HostUnsupportedResult } from "./host-types.js";
+export declare const HOST_ADAPTER_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}\nfunction createHostAdapter(ctx) {\n  ctx = ctx || {};\n  var disposed = false, subscriptions = [];\n  function launchApp(appId, config) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof appId !== \"string\" || !appId || /\\s/.test(appId)) return { status: \"invalid-input\" };\n    try {\n      if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n      var sds = SYNO.SDS, map = sds.Config && sds.Config.FnMap, notifier = sds.StatusNotifier;\n      if (typeof sds.AppLaunch !== \"function\" || !map ||\n          !Object.prototype.hasOwnProperty.call(map, appId) || !map[appId] || !notifier ||\n          typeof notifier.isAppEnabled !== \"function\" || !notifier.isAppEnabled(appId) ||\n          typeof notifier.isAppLaunchable !== \"function\" || !notifier.isAppLaunchable(appId)) {\n        return { status: \"unsupported\" };\n      }\n      sds.AppLaunch(appId, config);\n      return { status: \"requested\" };\n    } catch (error) { return { status: \"failed\" }; }\n  }\n  function navigateFileStation(path, isDirectory) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n        /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n    var parts = path.split(\"/\");\n    if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {\n      return !part || part === \".\" || part === \"..\";\n    })) return { status: \"invalid-input\" };\n    var result = launchApp(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n    if (result.status !== \"requested\") return result;\n    return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n  }\n  function unsupportedOperation() { return { status: disposed ? \"unavailable\" : \"unsupported\" }; }\n  return Object.freeze({\n    platform: function () {\n      if (!disposed) return inspectHostPlatform(ctx);\n      return Object.freeze({\n        web: typeof window !== \"undefined\", host: \"unavailable\",\n        dsmStandalone: null, dsmLanguage: null, appLocale: null,\n        systemVersion: null, fullVersion: null, theme: null\n      });\n    },\n    setTitle: function (title) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof title !== \"string\") return { status: \"invalid-input\" };\n      try {\n        var platform = inspectHostPlatform(ctx);\n        if (platform.host === \"dsm\") {\n          if (typeof ctx.appWindow.setTitle !== \"function\") return { status: \"unsupported\" };\n          ctx.appWindow.setTitle(title, undefined, true);\n          return { status: \"ok\", target: \"dsm-window\" };\n        }\n        if (!platform.web) return { status: \"unavailable\" };\n        if (typeof document === \"undefined\") return { status: \"unsupported\" };\n        document.title = title;\n        return { status: \"ok\", target: \"document\" };\n      } catch (error) {\n        return { status: \"failed\" };\n      }\n    },\n    activateWindow: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\" || typeof ctx.appWindow.activate !== \"function\") return { status: \"unsupported\" };\n        ctx.appWindow.activate();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    requestClose: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        if (typeof win.close !== \"function\" || typeof win.isStandaloneMainWindow !== \"function\" ||\n            win.isStandaloneMainWindow() !== false) return { status: \"unsupported\" };\n        if (win.canClose === false) return { status: \"blocked\" };\n        win.close();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openApp: function (appId) { return launchApp(appId, {}); },\n    openURL: function (raw) {\n      if (disposed || typeof window === \"undefined\") return { status: \"unavailable\" };\n      if (typeof raw !== \"string\" || !raw || /[\\s\\x00-\\x1f\\x7f]/.test(raw)) return { status: \"invalid-input\" };\n      if (typeof URL !== \"function\") return { status: \"unsupported\" };\n      var url;\n      try { url = new URL(raw); } catch (error) { return { status: \"invalid-input\" }; }\n      if ((url.protocol !== \"http:\" && url.protocol !== \"https:\") || url.username || url.password) return { status: \"invalid-input\" };\n      if (typeof window.open !== \"function\") return { status: \"unsupported\" };\n      try {\n        var opened = window.open(url.href, \"_blank\", \"noopener,noreferrer\");\n        return { status: \"requested\", windowHandleAvailable: !!opened };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openFileManager: function (path) { return navigateFileStation(path, true); },\n    revealFile: function (path) { return navigateFileStation(path, false); },\n    openFile: unsupportedOperation,\n    showFileDetails: unsupportedOperation,\n    openAppSetting: unsupportedOperation,\n    subscribe: function (event, listener) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof listener !== \"function\") return { status: \"invalid-input\" };\n      if (event !== \"window-resize\") return { status: \"unsupported\" };\n      var win, callback = listener, active = true;\n      function handler() { if (!disposed && callback) callback(); }\n      function unsubscribe() {\n        if (!active) return;\n        active = false;\n        callback = null;\n        var target = win;\n        win = null;\n        var index = subscriptions.indexOf(unsubscribe);\n        if (index !== -1) subscriptions.splice(index, 1);\n        try { if (target) target.un(\"resize\", handler, target); } catch (error) {}\n      }\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        win = ctx.appWindow;\n        if (typeof win.on !== \"function\" || typeof win.un !== \"function\") return { status: \"unsupported\" };\n        subscriptions.push(unsubscribe);\n        win.on(\"resize\", handler, win);\n        if (disposed) return { status: \"unavailable\" };\n        return Object.freeze({ status: \"subscribed\", dispose: unsubscribe });\n      } catch (error) {\n        unsubscribe();\n        return { status: \"failed\" };\n      }\n    },\n    dispose: function () {\n      if (disposed) return;\n      disposed = true;\n      subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });\n      ctx = null;\n    }\n  });\n}";
+/** A static, per-package factory for independent web shells; no Ext or transport. */
+export declare function renderHostAdapterScript(packageId: string): string;
+export declare function hostScriptName(build: number): string;

package/dist/standalone/host-adapter.js

@@ -0,0 +1,148 @@
+import { HOST_PLATFORM_RUNTIME } from "./host-platform.js";
+export const HOST_ADAPTER_RUNTIME = `${HOST_PLATFORM_RUNTIME}
+function createHostAdapter(ctx) {
+  ctx = ctx || {};
+  var disposed = false, subscriptions = [];
+  function launchApp(appId, config) {
+    if (disposed) return { status: "unavailable" };
+    if (typeof appId !== "string" || !appId || /\\s/.test(appId)) return { status: "invalid-input" };
+    try {
+      if (inspectHostPlatform(ctx).host !== "dsm") return { status: "unsupported" };
+      var sds = SYNO.SDS, map = sds.Config && sds.Config.FnMap, notifier = sds.StatusNotifier;
+      if (typeof sds.AppLaunch !== "function" || !map ||
+          !Object.prototype.hasOwnProperty.call(map, appId) || !map[appId] || !notifier ||
+          typeof notifier.isAppEnabled !== "function" || !notifier.isAppEnabled(appId) ||
+          typeof notifier.isAppLaunchable !== "function" || !notifier.isAppLaunchable(appId)) {
+        return { status: "unsupported" };
+      }
+      sds.AppLaunch(appId, config);
+      return { status: "requested" };
+    } catch (error) { return { status: "failed" }; }
+  }
+  function navigateFileStation(path, isDirectory) {
+    if (disposed) return { status: "unavailable" };
+    if (typeof path !== "string" || path.length > 4096 || path.charAt(0) !== "/" ||
+        /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: "invalid-input" };
+    var parts = path.split("/");
+    if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {
+      return !part || part === "." || part === "..";
+    })) return { status: "invalid-input" };
+    var result = launchApp("SYNO.SDS.App.FileStation3.Instance", isDirectory ? { opendir: path } : { openfile: path });
+    if (result.status !== "requested") return result;
+    return { status: "requested", action: isDirectory ? "locate-folder" : "highlight-file" };
+  }
+  function unsupportedOperation() { return { status: disposed ? "unavailable" : "unsupported" }; }
+  return Object.freeze({
+    platform: function () {
+      if (!disposed) return inspectHostPlatform(ctx);
+      return Object.freeze({
+        web: typeof window !== "undefined", host: "unavailable",
+        dsmStandalone: null, dsmLanguage: null, appLocale: null,
+        systemVersion: null, fullVersion: null, theme: null
+      });
+    },
+    setTitle: function (title) {
+      if (disposed) return { status: "unavailable" };
+      if (typeof title !== "string") return { status: "invalid-input" };
+      try {
+        var platform = inspectHostPlatform(ctx);
+        if (platform.host === "dsm") {
+          if (typeof ctx.appWindow.setTitle !== "function") return { status: "unsupported" };
+          ctx.appWindow.setTitle(title, undefined, true);
+          return { status: "ok", target: "dsm-window" };
+        }
+        if (!platform.web) return { status: "unavailable" };
+        if (typeof document === "undefined") return { status: "unsupported" };
+        document.title = title;
+        return { status: "ok", target: "document" };
+      } catch (error) {
+        return { status: "failed" };
+      }
+    },
+    activateWindow: function () {
+      if (disposed) return { status: "unavailable" };
+      try {
+        if (inspectHostPlatform(ctx).host !== "dsm" || typeof ctx.appWindow.activate !== "function") return { status: "unsupported" };
+        ctx.appWindow.activate();
+        return { status: "requested" };
+      } catch (error) { return { status: "failed" }; }
+    },
+    requestClose: function () {
+      if (disposed) return { status: "unavailable" };
+      try {
+        if (inspectHostPlatform(ctx).host !== "dsm") return { status: "unsupported" };
+        var win = ctx.appWindow;
+        if (typeof win.close !== "function" || typeof win.isStandaloneMainWindow !== "function" ||
+            win.isStandaloneMainWindow() !== false) return { status: "unsupported" };
+        if (win.canClose === false) return { status: "blocked" };
+        win.close();
+        return { status: "requested" };
+      } catch (error) { return { status: "failed" }; }
+    },
+    openApp: function (appId) { return launchApp(appId, {}); },
+    openURL: function (raw) {
+      if (disposed || typeof window === "undefined") return { status: "unavailable" };
+      if (typeof raw !== "string" || !raw || /[\\s\\x00-\\x1f\\x7f]/.test(raw)) return { status: "invalid-input" };
+      if (typeof URL !== "function") return { status: "unsupported" };
+      var url;
+      try { url = new URL(raw); } catch (error) { return { status: "invalid-input" }; }
+      if ((url.protocol !== "http:" && url.protocol !== "https:") || url.username || url.password) return { status: "invalid-input" };
+      if (typeof window.open !== "function") return { status: "unsupported" };
+      try {
+        var opened = window.open(url.href, "_blank", "noopener,noreferrer");
+        return { status: "requested", windowHandleAvailable: !!opened };
+      } catch (error) { return { status: "failed" }; }
+    },
+    openFileManager: function (path) { return navigateFileStation(path, true); },
+    revealFile: function (path) { return navigateFileStation(path, false); },
+    openFile: unsupportedOperation,
+    showFileDetails: unsupportedOperation,
+    openAppSetting: unsupportedOperation,
+    subscribe: function (event, listener) {
+      if (disposed) return { status: "unavailable" };
+      if (typeof listener !== "function") return { status: "invalid-input" };
+      if (event !== "window-resize") return { status: "unsupported" };
+      var win, callback = listener, active = true;
+      function handler() { if (!disposed && callback) callback(); }
+      function unsubscribe() {
+        if (!active) return;
+        active = false;
+        callback = null;
+        var target = win;
+        win = null;
+        var index = subscriptions.indexOf(unsubscribe);
+        if (index !== -1) subscriptions.splice(index, 1);
+        try { if (target) target.un("resize", handler, target); } catch (error) {}
+      }
+      try {
+        if (inspectHostPlatform(ctx).host !== "dsm") return { status: "unsupported" };
+        win = ctx.appWindow;
+        if (typeof win.on !== "function" || typeof win.un !== "function") return { status: "unsupported" };
+        subscriptions.push(unsubscribe);
+        win.on("resize", handler, win);
+        if (disposed) return { status: "unavailable" };
+        return Object.freeze({ status: "subscribed", dispose: unsubscribe });
+      } catch (error) {
+        unsubscribe();
+        return { status: "failed" };
+      }
+    },
+    dispose: function () {
+      if (disposed) return;
+      disposed = true;
+      subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });
+      ctx = null;
+    }
+  });
+}`;
+/** A static, per-package factory for independent web shells; no Ext or transport. */
+export function renderHostAdapterScript(packageId) {
+    return `(function () {
+${HOST_ADAPTER_RUNTIME}
+  window.DsmPackageHosts = window.DsmPackageHosts || {};
+  window.DsmPackageHosts[${JSON.stringify(packageId)}] = createHostAdapter;
+})();\n`;
+}
+export function hostScriptName(build) {
+    return `host-${String(build).padStart(4, "0")}.js`;
+}

package/dist/standalone/host-platform.d.ts

@@ -0,0 +1,13 @@
+/** Read-only, per-call browser platform observation; never an authorization proof. */
+export interface HostPlatformSnapshot {
+    readonly web: boolean;
+    readonly host: "dsm" | "standalone-web" | "unavailable";
+    readonly dsmStandalone: boolean | null;
+    readonly dsmLanguage: string | null;
+    readonly appLocale: string | null;
+    readonly systemVersion: string | null;
+    readonly fullVersion: string | null;
+    readonly theme: null;
+}
+/** ES5, self-contained browser runtime, following I18N_RUNTIME's embedding pattern. */
+export declare const HOST_PLATFORM_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}";