@synopackageland/cli 0.4.0 → 0.4.1

package/dist/standalone/helper.js

@@ -1,18 +1,19 @@
-import { createHash } from "node:crypto";
 import { lstatSync, readFileSync, realpathSync } from "node:fs";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import { renderRootTaskScript } from "./root-ops.js";
 import { StandaloneBuildError } from "./spk.js";
-const sha256 = (b) => createHash("sha256").update(b).digest("hex");
+import { sha256 } from "./helper-inventory.js";
 const record = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 export function readIntegration(raw, root, fail) {
     if (raw === undefined)
         return undefined;
-    const invalid = () => { fail({ code: "STANDALONE_INTEGRATION_INVALID", message: "integration 需要 protocol: 1 與 workers: {固定 ID: 專案內檔案}；最多 16 個，僅作 inventory，不執行 worker。" }); return undefined; };
-    if (!record(raw) || Object.keys(raw).some(k => !["protocol", "workers", "identity"].includes(k)) || raw.protocol !== 1 || !record(raw.workers) || Object.keys(raw.workers).length > 16)
+    const invalid = () => { fail({ code: "STANDALONE_INTEGRATION_INVALID", message: "integration 需要 protocol: 1 或 2 與 workers: {固定 ID: 專案內檔案}；最多 16 個，僅作 inventory，不執行 worker。" }); return undefined; };
+    if (!record(raw) || Object.keys(raw).some(k => !["protocol", "workers", "identity", "dataAccess"].includes(k)) || ![1, 2].includes(raw.protocol) || !record(raw.workers) || Object.keys(raw.workers).length > 16)
         return invalid();
     if (raw.identity !== undefined && raw.identity !== "better-auth")
         return invalid();
+    if (raw.dataAccess !== undefined && (raw.protocol !== 2 || !["unavailable", "relaxed"].includes(raw.dataAccess)))
+        return invalid();
     const workers = {};
     for (const [id, file] of Object.entries(raw.workers)) {
         if (!/^[a-z][a-z0-9_]{0,31}$/.test(id) || typeof file !== "string" || !file || isAbsolute(file) || file.split(/[\\/]/).includes(".."))
@@ -22,7 +23,7 @@ export function readIntegration(raw, root, fail) {
             return invalid();
         workers[id] = path;
     }
-    return { protocol: 1, workers, ...(raw.identity === "better-auth" ? { identity: "better-auth" } : {}) };
+    return { protocol: raw.protocol, workers, ...(raw.identity === "better-auth" ? { identity: "better-auth" } : {}), ...(raw.dataAccess !== undefined ? { dataAccess: raw.dataAccess } : {}) };
 }
 function snapshotWorkers(m) {
     let total = 0;
@@ -44,7 +45,7 @@ export function assertHelperTaskBudget(script, metadata = JSON.stringify({ scrip
         throw new StandaloneBuildError("HELPER_METADATA_TOO_LARGE", "helper scheduler metadata 超過 8191 bytes 有界限制。");
 }
 export function helperOps(m, inventory) {
-    return ["enable", "recover", "teardown", "disable"].map(action => {
+    return ["enable", "recover", "teardown", "disable", "repair"].map(action => {
         const op = { name: `helper_${action}`, protectedOutput: true, body: `#!/bin/sh
 set -eu
 umask 077
@@ -92,7 +93,7 @@ export function buildHelper(m, arch, work, run) {
         throw new StandaloneBuildError("HELPER_GO_REQUIRED", "M1a integration 僅支援 native-go。");
     const workers = snapshotWorkers(m);
     const registry = workers.map(({ id, digest }) => ({ id, digest }));
-    const base = { package: m.package, version: m.spkVersion, protocol: m.integration.protocol, payloadDigest: "", registryDigest: sha256(JSON.stringify(registry)) };
+    const base = { package: m.package, version: m.spkVersion, protocol: m.integration.protocol, payloadDigest: "", registryDigest: sha256(JSON.stringify(registry)), ...(m.integration.dataAccess ? { dataAccess: m.integration.dataAccess } : {}) };
     const binary = join(work, `helper-${arch}`);
     const result = run("go", ["build", "-trimpath", "-buildvcs=false", "-ldflags", `-s -w -buildid= -X 'main.helperInventory=${JSON.stringify(base)}'`, "-o", binary, "./cmd/helper"], {
         cwd: m.backend.dir, env: { ...process.env, CGO_ENABLED: "0", GOOS: "linux", GOARCH: arch === "x86_64" ? "amd64" : "arm64" },

package/dist/standalone/host-adapter.d.ts

@@ -0,0 +1,5 @@
+export type { HostAdapter, HostTitleResult, HostRequestResult, HostURLResult, HostEvent, HostSubscriptionResult, HostFileNavigationResult, HostUnsupportedResult } from "./host-types.js";
+export declare const HOST_ADAPTER_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}\nfunction createHostAdapter(ctx) {\n  ctx = ctx || {};\n  var disposed = false, subscriptions = [];\n  function launchApp(appId, config) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof appId !== \"string\" || !appId || /\\s/.test(appId)) return { status: \"invalid-input\" };\n    try {\n      if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n      var sds = SYNO.SDS, map = sds.Config && sds.Config.FnMap, notifier = sds.StatusNotifier;\n      if (typeof sds.AppLaunch !== \"function\" || !map ||\n          !Object.prototype.hasOwnProperty.call(map, appId) || !map[appId] || !notifier ||\n          typeof notifier.isAppEnabled !== \"function\" || !notifier.isAppEnabled(appId) ||\n          typeof notifier.isAppLaunchable !== \"function\" || !notifier.isAppLaunchable(appId)) {\n        return { status: \"unsupported\" };\n      }\n      sds.AppLaunch(appId, config);\n      return { status: \"requested\" };\n    } catch (error) { return { status: \"failed\" }; }\n  }\n  function navigateFileStation(path, isDirectory) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n        /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n    var parts = path.split(\"/\");\n    if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {\n      return !part || part === \".\" || part === \"..\";\n    })) return { status: \"invalid-input\" };\n    var result = launchApp(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n    if (result.status !== \"requested\") return result;\n    return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n  }\n  function unsupportedOperation() { return { status: disposed ? \"unavailable\" : \"unsupported\" }; }\n  return Object.freeze({\n    platform: function () {\n      if (!disposed) return inspectHostPlatform(ctx);\n      return Object.freeze({\n        web: typeof window !== \"undefined\", host: \"unavailable\",\n        dsmStandalone: null, dsmLanguage: null, appLocale: null,\n        systemVersion: null, fullVersion: null, theme: null\n      });\n    },\n    setTitle: function (title) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof title !== \"string\") return { status: \"invalid-input\" };\n      try {\n        var platform = inspectHostPlatform(ctx);\n        if (platform.host === \"dsm\") {\n          if (typeof ctx.appWindow.setTitle !== \"function\") return { status: \"unsupported\" };\n          ctx.appWindow.setTitle(title, undefined, true);\n          return { status: \"ok\", target: \"dsm-window\" };\n        }\n        if (!platform.web) return { status: \"unavailable\" };\n        if (typeof document === \"undefined\") return { status: \"unsupported\" };\n        document.title = title;\n        return { status: \"ok\", target: \"document\" };\n      } catch (error) {\n        return { status: \"failed\" };\n      }\n    },\n    activateWindow: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\" || typeof ctx.appWindow.activate !== \"function\") return { status: \"unsupported\" };\n        ctx.appWindow.activate();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    requestClose: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        if (typeof win.close !== \"function\" || typeof win.isStandaloneMainWindow !== \"function\" ||\n            win.isStandaloneMainWindow() !== false) return { status: \"unsupported\" };\n        if (win.canClose === false) return { status: \"blocked\" };\n        win.close();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openApp: function (appId) { return launchApp(appId, {}); },\n    openURL: function (raw) {\n      if (disposed || typeof window === \"undefined\") return { status: \"unavailable\" };\n      if (typeof raw !== \"string\" || !raw || /[\\s\\x00-\\x1f\\x7f]/.test(raw)) return { status: \"invalid-input\" };\n      if (typeof URL !== \"function\") return { status: \"unsupported\" };\n      var url;\n      try { url = new URL(raw); } catch (error) { return { status: \"invalid-input\" }; }\n      if ((url.protocol !== \"http:\" && url.protocol !== \"https:\") || url.username || url.password) return { status: \"invalid-input\" };\n      if (typeof window.open !== \"function\") return { status: \"unsupported\" };\n      try {\n        var opened = window.open(url.href, \"_blank\", \"noopener,noreferrer\");\n        return { status: \"requested\", windowHandleAvailable: !!opened };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openFileManager: function (path) { return navigateFileStation(path, true); },\n    revealFile: function (path) { return navigateFileStation(path, false); },\n    openFile: unsupportedOperation,\n    showFileDetails: unsupportedOperation,\n    openAppSetting: unsupportedOperation,\n    subscribe: function (event, listener) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof listener !== \"function\") return { status: \"invalid-input\" };\n      if (event !== \"window-resize\") return { status: \"unsupported\" };\n      var win, callback = listener, active = true;\n      function handler() { if (!disposed && callback) callback(); }\n      function unsubscribe() {\n        if (!active) return;\n        active = false;\n        callback = null;\n        var target = win;\n        win = null;\n        var index = subscriptions.indexOf(unsubscribe);\n        if (index !== -1) subscriptions.splice(index, 1);\n        try { if (target) target.un(\"resize\", handler, target); } catch (error) {}\n      }\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        win = ctx.appWindow;\n        if (typeof win.on !== \"function\" || typeof win.un !== \"function\") return { status: \"unsupported\" };\n        subscriptions.push(unsubscribe);\n        win.on(\"resize\", handler, win);\n        if (disposed) return { status: \"unavailable\" };\n        return Object.freeze({ status: \"subscribed\", dispose: unsubscribe });\n      } catch (error) {\n        unsubscribe();\n        return { status: \"failed\" };\n      }\n    },\n    dispose: function () {\n      if (disposed) return;\n      disposed = true;\n      subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });\n      ctx = null;\n    }\n  });\n}";
+/** A static, per-package factory for independent web shells; no Ext or transport. */
+export declare function renderHostAdapterScript(packageId: string): string;
+export declare function hostScriptName(build: number): string;

package/dist/standalone/host-adapter.js

@@ -0,0 +1,148 @@
+import { HOST_PLATFORM_RUNTIME } from "./host-platform.js";
+export const HOST_ADAPTER_RUNTIME = `${HOST_PLATFORM_RUNTIME}
+function createHostAdapter(ctx) {
+  ctx = ctx || {};
+  var disposed = false, subscriptions = [];
+  function launchApp(appId, config) {
+    if (disposed) return { status: "unavailable" };
+    if (typeof appId !== "string" || !appId || /\\s/.test(appId)) return { status: "invalid-input" };
+    try {
+      if (inspectHostPlatform(ctx).host !== "dsm") return { status: "unsupported" };
+      var sds = SYNO.SDS, map = sds.Config && sds.Config.FnMap, notifier = sds.StatusNotifier;
+      if (typeof sds.AppLaunch !== "function" || !map ||
+          !Object.prototype.hasOwnProperty.call(map, appId) || !map[appId] || !notifier ||
+          typeof notifier.isAppEnabled !== "function" || !notifier.isAppEnabled(appId) ||
+          typeof notifier.isAppLaunchable !== "function" || !notifier.isAppLaunchable(appId)) {
+        return { status: "unsupported" };
+      }
+      sds.AppLaunch(appId, config);
+      return { status: "requested" };
+    } catch (error) { return { status: "failed" }; }
+  }
+  function navigateFileStation(path, isDirectory) {
+    if (disposed) return { status: "unavailable" };
+    if (typeof path !== "string" || path.length > 4096 || path.charAt(0) !== "/" ||
+        /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: "invalid-input" };
+    var parts = path.split("/");
+    if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {
+      return !part || part === "." || part === "..";
+    })) return { status: "invalid-input" };
+    var result = launchApp("SYNO.SDS.App.FileStation3.Instance", isDirectory ? { opendir: path } : { openfile: path });
+    if (result.status !== "requested") return result;
+    return { status: "requested", action: isDirectory ? "locate-folder" : "highlight-file" };
+  }
+  function unsupportedOperation() { return { status: disposed ? "unavailable" : "unsupported" }; }
+  return Object.freeze({
+    platform: function () {
+      if (!disposed) return inspectHostPlatform(ctx);
+      return Object.freeze({
+        web: typeof window !== "undefined", host: "unavailable",
+        dsmStandalone: null, dsmLanguage: null, appLocale: null,
+        systemVersion: null, fullVersion: null, theme: null
+      });
+    },
+    setTitle: function (title) {
+      if (disposed) return { status: "unavailable" };
+      if (typeof title !== "string") return { status: "invalid-input" };
+      try {
+        var platform = inspectHostPlatform(ctx);
+        if (platform.host === "dsm") {
+          if (typeof ctx.appWindow.setTitle !== "function") return { status: "unsupported" };
+          ctx.appWindow.setTitle(title, undefined, true);
+          return { status: "ok", target: "dsm-window" };
+        }
+        if (!platform.web) return { status: "unavailable" };
+        if (typeof document === "undefined") return { status: "unsupported" };
+        document.title = title;
+        return { status: "ok", target: "document" };
+      } catch (error) {
+        return { status: "failed" };
+      }
+    },
+    activateWindow: function () {
+      if (disposed) return { status: "unavailable" };
+      try {
+        if (inspectHostPlatform(ctx).host !== "dsm" || typeof ctx.appWindow.activate !== "function") return { status: "unsupported" };
+        ctx.appWindow.activate();
+        return { status: "requested" };
+      } catch (error) { return { status: "failed" }; }
+    },
+    requestClose: function () {
+      if (disposed) return { status: "unavailable" };
+      try {
+        if (inspectHostPlatform(ctx).host !== "dsm") return { status: "unsupported" };
+        var win = ctx.appWindow;
+        if (typeof win.close !== "function" || typeof win.isStandaloneMainWindow !== "function" ||
+            win.isStandaloneMainWindow() !== false) return { status: "unsupported" };
+        if (win.canClose === false) return { status: "blocked" };
+        win.close();
+        return { status: "requested" };
+      } catch (error) { return { status: "failed" }; }
+    },
+    openApp: function (appId) { return launchApp(appId, {}); },
+    openURL: function (raw) {
+      if (disposed || typeof window === "undefined") return { status: "unavailable" };
+      if (typeof raw !== "string" || !raw || /[\\s\\x00-\\x1f\\x7f]/.test(raw)) return { status: "invalid-input" };
+      if (typeof URL !== "function") return { status: "unsupported" };
+      var url;
+      try { url = new URL(raw); } catch (error) { return { status: "invalid-input" }; }
+      if ((url.protocol !== "http:" && url.protocol !== "https:") || url.username || url.password) return { status: "invalid-input" };
+      if (typeof window.open !== "function") return { status: "unsupported" };
+      try {
+        var opened = window.open(url.href, "_blank", "noopener,noreferrer");
+        return { status: "requested", windowHandleAvailable: !!opened };
+      } catch (error) { return { status: "failed" }; }
+    },
+    openFileManager: function (path) { return navigateFileStation(path, true); },
+    revealFile: function (path) { return navigateFileStation(path, false); },
+    openFile: unsupportedOperation,
+    showFileDetails: unsupportedOperation,
+    openAppSetting: unsupportedOperation,
+    subscribe: function (event, listener) {
+      if (disposed) return { status: "unavailable" };
+      if (typeof listener !== "function") return { status: "invalid-input" };
+      if (event !== "window-resize") return { status: "unsupported" };
+      var win, callback = listener, active = true;
+      function handler() { if (!disposed && callback) callback(); }
+      function unsubscribe() {
+        if (!active) return;
+        active = false;
+        callback = null;
+        var target = win;
+        win = null;
+        var index = subscriptions.indexOf(unsubscribe);
+        if (index !== -1) subscriptions.splice(index, 1);
+        try { if (target) target.un("resize", handler, target); } catch (error) {}
+      }
+      try {
+        if (inspectHostPlatform(ctx).host !== "dsm") return { status: "unsupported" };
+        win = ctx.appWindow;
+        if (typeof win.on !== "function" || typeof win.un !== "function") return { status: "unsupported" };
+        subscriptions.push(unsubscribe);
+        win.on("resize", handler, win);
+        if (disposed) return { status: "unavailable" };
+        return Object.freeze({ status: "subscribed", dispose: unsubscribe });
+      } catch (error) {
+        unsubscribe();
+        return { status: "failed" };
+      }
+    },
+    dispose: function () {
+      if (disposed) return;
+      disposed = true;
+      subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });
+      ctx = null;
+    }
+  });
+}`;
+/** A static, per-package factory for independent web shells; no Ext or transport. */
+export function renderHostAdapterScript(packageId) {
+    return `(function () {
+${HOST_ADAPTER_RUNTIME}
+  window.DsmPackageHosts = window.DsmPackageHosts || {};
+  window.DsmPackageHosts[${JSON.stringify(packageId)}] = createHostAdapter;
+})();\n`;
+}
+export function hostScriptName(build) {
+    return `host-${String(build).padStart(4, "0")}.js`;
+}

package/dist/standalone/host-platform.d.ts

@@ -0,0 +1,13 @@
+/** Read-only, per-call browser platform observation; never an authorization proof. */
+export interface HostPlatformSnapshot {
+    readonly web: boolean;
+    readonly host: "dsm" | "standalone-web" | "unavailable";
+    readonly dsmStandalone: boolean | null;
+    readonly dsmLanguage: string | null;
+    readonly appLocale: string | null;
+    readonly systemVersion: string | null;
+    readonly fullVersion: string | null;
+    readonly theme: null;
+}
+/** ES5, self-contained browser runtime, following I18N_RUNTIME's embedding pattern. */
+export declare const HOST_PLATFORM_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}";

package/dist/standalone/host-platform.js

@@ -0,0 +1,42 @@
+/** ES5, self-contained browser runtime, following I18N_RUNTIME's embedding pattern. */
+export const HOST_PLATFORM_RUNTIME = `function inspectHostPlatform(ctx) {
+  ctx = ctx || {};
+  var web = typeof window !== "undefined";
+  var host = false;
+  try {
+    host = !!(web && ctx.appWindow && typeof SYNO !== "undefined" &&
+      SYNO.SDS && typeof SYNO.SDS.AppWindow === "function" &&
+      ctx.appWindow instanceof SYNO.SDS.AppWindow);
+  } catch (error) {
+    // An unsupported host constructor must not break a standalone shell.
+  }
+  function read(key) {
+    if (!host || typeof _S !== "function") return null;
+    try { return _S(key); } catch (error) { return null; }
+  }
+  function text(value) {
+    return typeof value === "string" && /\\S/.test(value) ? value : null;
+  }
+  function versionPart(value) {
+    if (typeof value === "number") {
+      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;
+      value = String(value);
+    }
+    return typeof value === "string" && value.length > 0 && !/\\D/.test(value) ? value : null;
+  }
+  var standalone = read("standalone");
+  var language = text(read("lang"));
+  var major = versionPart(read("majorversion"));
+  var minor = versionPart(read("minorversion"));
+  var fullVersion = text(read("fullversion"));
+  return Object.freeze({
+    web: web,
+    host: host ? "dsm" : web ? "standalone-web" : "unavailable",
+    dsmStandalone: typeof standalone === "boolean" ? standalone : null,
+    dsmLanguage: language,
+    appLocale: text(ctx.locale),
+    systemVersion: major !== null && minor !== null ? major + "." + minor : null,
+    fullVersion: fullVersion,
+    theme: null
+  });
+}`;

package/dist/standalone/host-types.d.ts

@@ -0,0 +1,49 @@
+import type { HostPlatformSnapshot } from "./host-platform.js";
+export type HostTitleResult = {
+    status: "ok";
+    target: "dsm-window" | "document";
+} | {
+    status: "unsupported" | "unavailable" | "invalid-input" | "failed";
+};
+export type HostRequestResult = {
+    status: "requested";
+} | {
+    status: "unsupported" | "unavailable" | "invalid-input" | "blocked" | "failed";
+};
+export type HostURLResult = {
+    status: "requested";
+    windowHandleAvailable: boolean;
+} | {
+    status: "unsupported" | "unavailable" | "invalid-input" | "failed";
+};
+export type HostEvent = "window-resize" | "host-theme-change" | "host-language-change";
+export type HostSubscriptionResult = {
+    status: "subscribed";
+    dispose(): void;
+} | {
+    status: "unsupported" | "unavailable" | "invalid-input" | "failed";
+};
+export type HostFileNavigationResult = {
+    status: "requested";
+    action: "locate-folder" | "highlight-file";
+} | {
+    status: "unsupported" | "unavailable" | "invalid-input" | "failed";
+};
+export type HostUnsupportedResult = {
+    status: "unsupported" | "unavailable";
+};
+export interface HostAdapter {
+    platform(): HostPlatformSnapshot;
+    setTitle(title: string): HostTitleResult;
+    activateWindow(): HostRequestResult;
+    requestClose(): HostRequestResult;
+    openApp(appId: string): HostRequestResult;
+    openURL(url: string): HostURLResult;
+    openFileManager(path: string): HostFileNavigationResult;
+    revealFile(path: string): HostFileNavigationResult;
+    openFile(path: string): HostUnsupportedResult;
+    showFileDetails(paths: readonly string[]): HostUnsupportedResult;
+    openAppSetting(): HostUnsupportedResult;
+    subscribe(event: HostEvent, listener: () => void): HostSubscriptionResult;
+    dispose(): void;
+}

package/dist/standalone/host-types.js

@@ -0,0 +1 @@
+export {};

package/dist/standalone/inspect-helper.d.ts

@@ -0,0 +1,6 @@
+export interface IntegrationInspection {
+    protocol: 1 | 2;
+    dataAccess: "unavailable" | "relaxed";
+}
+/** Artifact consistency only; bytes, approval and health never certify NAS access. */
+export declare function inspectHelper(dir: string, info: Record<string, string>, findings: string[], daemon?: boolean): Promise<IntegrationInspection | undefined>;

package/dist/standalone/inspect-helper.js

@@ -0,0 +1,88 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import * as tar from "tar";
+import { windowScriptName } from "./dsm-window.js";
+import { helperOps } from "./helper.js";
+import { sha256 } from "./helper-inventory.js";
+import { renderStandaloneScript } from "./lifecycle.js";
+import { rootTasks } from "./root-window.js";
+/** Artifact consistency only; bytes, approval and health never certify NAS access. */
+export async function inspectHelper(dir, info, findings, daemon = false) {
+    const files = new Map();
+    const windowPath = `ui/${windowScriptName({ build: Number(info.version?.split("-").at(-1)) })}`;
+    const windows = [];
+    let oversized = false;
+    await tar.t({ file: join(dir, "package.tgz"), onReadEntry(entry) {
+            const path = entry.path.replace(/^\.\//, "");
+            // Enumerate candidates to reject extras; only the INFO-derived exact path is read.
+            if (/^ui\/window-[^/]*\.js$/.test(path))
+                windows.push(path);
+            if (entry.type !== "File" || !(path.startsWith("integration/workers/") || ["integration/helper", "integration/inventory.json", "integration/workers.json", "ui/cgi/api.cgi", windowPath].includes(path)))
+                return;
+            const limit = ["integration/helper", "ui/cgi/api.cgi"].includes(path) ? 64 * 1024 * 1024 : 1024 * 1024;
+            if (files.has(path) || entry.size > limit) {
+                oversized = true;
+                return;
+            }
+            const chunks = [];
+            let size = 0;
+            entry.on("data", (chunk) => { size += chunk.length; if (size <= limit)
+                chunks.push(chunk);
+            else
+                oversized = true; });
+            entry.on("end", () => files.set(path, Buffer.concat(chunks)));
+        } });
+    try {
+        if (oversized)
+            throw new Error("oversized/duplicate payload");
+        const bytes = (path) => { const b = files.get(path); if (!b)
+            throw new Error(`missing ${path}`); return b; };
+        const raw = bytes("integration/inventory.json").toString("utf8");
+        const i = JSON.parse(raw);
+        const keys = i.dataAccess === undefined ? "package,payloadDigest,protocol,registryDigest,version" : "dataAccess,package,payloadDigest,protocol,registryDigest,version";
+        if (Object.keys(i).sort().join(",") !== keys || (i.dataAccess !== undefined && (i.protocol !== 2 || !["unavailable", "relaxed"].includes(i.dataAccess))) ||
+            i.package !== info.package || i.version !== info.version || !/^[A-Za-z][A-Za-z0-9]{1,63}$/.test(i.package) || !/^\d+(\.\d+){0,3}-\d{4}$/.test(i.version) || ![1, 2].includes(i.protocol) ||
+            !/^[a-f0-9]{64}$/.test(i.payloadDigest) || !/^[a-f0-9]{64}$/.test(i.registryDigest) || JSON.stringify(i) !== raw)
+            throw new Error("invalid inventory");
+        if (windows.length !== 1 || windows[0] !== windowPath)
+            throw new Error("missing/ambiguous window or build mismatch");
+        const helper = bytes("integration/helper");
+        if (sha256(helper) !== i.payloadDigest || !helper.includes(Buffer.from(JSON.stringify({ ...i, payloadDigest: "" }))) ||
+            !bytes("ui/cgi/api.cgi").includes(Buffer.from(raw)))
+            throw new Error("payload/compiled inventory mismatch");
+        const workers = bytes("integration/workers.json");
+        const registry = JSON.parse(workers.toString("utf8"));
+        if (!Array.isArray(registry) || registry.length > 16 || sha256(workers) !== i.registryDigest || JSON.stringify(registry) !== workers.toString("utf8"))
+            throw new Error("invalid registry");
+        let previous = "", total = 0;
+        for (const worker of registry) {
+            if (!worker || Object.keys(worker).sort().join(",") !== "digest,id" || typeof worker.id !== "string" ||
+                !/^[a-z][a-z0-9_]{0,31}$/.test(worker.id) || (previous && previous.localeCompare(worker.id, "en") >= 0) ||
+                !/^[a-f0-9]{64}$/.test(worker.digest))
+                throw new Error("invalid worker");
+            const content = bytes(`integration/workers/${worker.id}`);
+            total += content.length;
+            if (total > 1024 * 1024 || sha256(content) !== worker.digest)
+                throw new Error("worker digest mismatch");
+            previous = worker.id;
+        }
+        if ([...files.keys()].filter(p => p.startsWith("integration/workers/")).length !== registry.length)
+            throw new Error("unregistered worker");
+        const manifest = { package: i.package, spkVersion: i.version, integration: { protocol: i.protocol, workers: {} } };
+        const tasks = JSON.parse(/\.rootTasks = (\[[^\n]+\]);/.exec(bytes(windowPath).toString("utf8"))?.[1] ?? "null");
+        const expected = rootTasks({ ...manifest, rootOps: helperOps(manifest, i) });
+        if (!Array.isArray(tasks) || JSON.stringify(tasks.filter(t => t.op?.startsWith("helper_"))) !== JSON.stringify(expected))
+            throw new Error("approved task mismatch");
+        // Daemon lifecycle is verified separately with the complete daemon config.
+        if (!daemon)
+            for (const hook of ["start-stop-status", "preupgrade", "preuninst"]) {
+                if (readFileSync(join(dir, "scripts", hook), "utf8") !== renderStandaloneScript(hook, manifest))
+                    throw new Error("lifecycle mismatch");
+            }
+        return { protocol: i.protocol, dataAccess: i.dataAccess ?? "unavailable" };
+    }
+    catch {
+        findings.push("integration inventory、digest、compiled binding、worker 或 lifecycle 不符合固定契約");
+        return undefined;
+    }
+}

package/dist/standalone/inspect-spk.d.ts

@@ -1,3 +1,4 @@
+import { type IntegrationInspection } from "./inspect-helper.js";
 export type SpkKind = "native-go" | "binary" | "container";
 export interface SpkInspection {
     kind?: SpkKind;
@@ -8,6 +9,7 @@ export interface SpkInspection {
     signed: boolean;
     /** Payload path of the package CGI, when present with mode 0755. */
     cgi?: string;
+    integration?: IntegrationInspection;
     payload: Array<{
         path: string;
         mode: string;

package/dist/standalone/inspect-spk.js

@@ -3,6 +3,9 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import * as tar from "tar";
 import { CGI_PAYLOAD_PATH } from "./dsm-window.js";
+import { daemonConfig, readDaemon } from "./daemon.js";
+import { renderStandaloneScript } from "./lifecycle.js";
+import { inspectHelper } from "./inspect-helper.js";
 const ROOT_SCRIPT_HINTS = [/\bsudo\b/, /\bchown\s+(-\w+\s+)*root\b/, /chmod\s+[ugo]*\+s\b/, /chmod\s+[2467][0-7]{3}\b/];
 /** Reads an SPK without installing it and reports how it would run on DSM. */
 export async function inspectStandaloneSpk(spkPath) {
@@ -20,8 +23,20 @@ export async function inspectSpk(spkPath, expectedKind) {
             : paths.has("native.yaml") ? "binary" : paths.has("compose.yaml") ? "container" : "native-go");
         const identityPayload = [CGI_PAYLOAD_PATH, "integration/helper", "integration/inventory.json", "integration/workers.json", "integration/identity/app.mjs"].every(path => paths.has(path));
         const info = readInfo(join(dir, "INFO"), findings, kind, identityPayload);
+        if (kind === "native-go" && paths.has("integration/helper") && info.precheckstartstop !== "yes") {
+            findings.push('integration INFO 必須明確設定 precheckstartstop="yes"，否則 DSM 不執行 prestop');
+        }
         checkConf(dir, findings, kind);
         checkScripts(dir, findings);
+        if (kind === "native-go")
+            await checkDaemon(dir, info, paths, payload, findings);
+        let integration;
+        if ([...paths].some(path => path.startsWith("integration/"))) {
+            if (kind !== "native-go" || payload.find(p => p.path === "integration/helper")?.mode !== "0755")
+                findings.push("integration 必須有 native-go executable helper");
+            else if (!findings.length)
+                integration = await inspectHelper(dir, info, findings, paths.has("daemon/config.json"));
+        }
         const cgiEntry = payload.find((entry) => entry.path === CGI_PAYLOAD_PATH);
         if (kind === "native-go" && !cgiEntry) {
             findings.push(`payload 沒有 ${CGI_PAYLOAD_PATH}`);
@@ -37,6 +52,7 @@ export async function inspectSpk(spkPath, expectedKind) {
             signed: existsSync(join(dir, "syno_signature.asc")),
             cgi: cgiEntry?.mode === "0755" ? CGI_PAYLOAD_PATH : undefined,
             payload,
+            ...(integration ? { integration } : {}),
             findings,
         };
     }
@@ -44,6 +60,39 @@ export async function inspectSpk(spkPath, expectedKind) {
         rmSync(dir, { recursive: true, force: true });
     }
 }
+async function checkDaemon(dir, info, paths, payload, findings) {
+    if (![...paths].some(path => path.startsWith("daemon/")))
+        return;
+    if (info.precheckstartstop !== "yes")
+        findings.push('daemon INFO 必須明確設定 precheckstartstop="yes"');
+    if (payload.find(p => p.path === "daemon/control")?.mode !== "0755")
+        findings.push("daemon/control 缺少或非 executable");
+    const unpacked = join(dir, "daemon-inspection");
+    // Extract only the bounded config; the payload executable is never run.
+    const { mkdirSync } = await import("node:fs");
+    mkdirSync(unpacked);
+    await tar.x({ file: join(dir, "package.tgz"), cwd: unpacked, filter: path => path.replace(/^\.\//, "") === "daemon/config.json" });
+    try {
+        const config = JSON.parse(readFileSync(join(unpacked, "daemon/config.json"), "utf8"));
+        if (config.package !== info.package || Object.keys(config).some(key => !["package", "exec", "args", "env", "timeouts", "uninstall_args"].includes(key)))
+            throw new Error("package/config mismatch");
+        const daemon = readDaemon({ exec: config.exec, args: config.args, uninstall_args: config.uninstall_args, env: config.env, timeouts: config.timeouts, targets: { x86_64: "payload" } }, dir, ["x86_64"], () => { });
+        if (!daemon)
+            throw new Error("invalid config");
+        if (payload.find(p => p.path === `daemon/payload/${daemon.exec}`)?.mode !== "0755")
+            throw new Error("missing executable");
+        const manifest = { package: info.package, daemon, ...(paths.has("integration/helper") ? { integration: {} } : {}) };
+        if (readFileSync(join(unpacked, "daemon/config.json"), "utf8") !== daemonConfig(manifest))
+            throw new Error("non-canonical daemon config");
+        for (const hook of ["start-stop-status", "preupgrade", "preuninst"]) {
+            if (readFileSync(join(dir, "scripts", hook), "utf8") !== renderStandaloneScript(hook, manifest))
+                findings.push(`daemon scripts/${hook} 與固定 lifecycle 不符`);
+        }
+    }
+    catch {
+        findings.push("daemon/config.json 或 payload 不符合固定 daemon 契約");
+    }
+}
 function readInfo(path, findings, kind, identityPayload) {
     if (!existsSync(path)) {
         findings.push("缺少 INFO");

package/dist/standalone/lifecycle-helper.d.ts

@@ -0,0 +1,2 @@
+/** Non-privileged management veto shared by the generated package hooks. */
+export declare function renderHelperStoppedCheck(packageId: string): string;

package/dist/standalone/lifecycle-helper.js

@@ -0,0 +1,12 @@
+/** Non-privileged management veto shared by the generated package hooks. */
+export function renderHelperStoppedCheck(packageId) {
+    return `/var/packages/${packageId}/target/integration/helper check-stopped || {
+  message='Run the approved helper_teardown or helper_disable operation before stopping, upgrading or uninstalling.'
+  printf '%s\\n' "$message" >&2
+  if [ -n "\${SYNOPKG_TEMP_LOGFILE:-}" ]; then
+    (printf '%s\\n' "$message" >> "$SYNOPKG_TEMP_LOGFILE") 2>/dev/null || :
+  fi
+  exit 1
+}
+`;
+}

package/dist/standalone/lifecycle.d.ts

@@ -0,0 +1,3 @@
+import type { StandaloneManifest } from "./manifest.js";
+/** Non-privileged hooks: precheck gates DSM management; no hook tears down root. */
+export declare function renderStandaloneScript(name: string, manifest: StandaloneManifest): string;

package/dist/standalone/lifecycle.js

@@ -0,0 +1,53 @@
+import { renderHelperStoppedCheck } from "./lifecycle-helper.js";
+/** Non-privileged hooks: precheck gates DSM management; no hook tears down root. */
+export function renderStandaloneScript(name, manifest) {
+    if (manifest.daemon)
+        return renderDaemonScript(name, manifest);
+    if (manifest.integration && ["preupgrade", "preuninst", "start-stop-status"].includes(name)) {
+        const check = renderHelperStoppedCheck(manifest.package);
+        if (name !== "start-stop-status")
+            return `#!/bin/sh\n${check}`;
+        return `#!/bin/sh
+case "$1" in
+  # Start the ordinary app even when integration is disabled or needs cleanup.
+  # No root enable/recover here; the administrator must explicitly approve it.
+  prestart|start|status) exit 0 ;;
+  prestop|stop)
+  # prestop is the management veto. stop runs inside ExecStop: its failure
+  # reports unsafe residue but cannot keep the DSM unit active.
+${check}    ;;
+  *) exit 1 ;;
+esac
+`;
+    }
+    if (name === "start-stop-status") {
+        return `#!/bin/sh
+case "$1" in
+  start|stop|status) exit 0 ;;
+  *) exit 1 ;;
+esac
+`;
+    }
+    return "#!/bin/sh\nexit 0\n";
+}
+function renderDaemonScript(name, manifest) {
+    const pkg = manifest.package;
+    const control = `"/var/packages/${pkg}/target/daemon/control"`;
+    const paths = `"\${SYNOPKG_PKGDEST:-/var/packages/${pkg}/target}" "\${SYNOPKG_PKGVAR:-/var/packages/${pkg}/var}"`;
+    const check = manifest.integration ? renderHelperStoppedCheck(pkg) : "";
+    if (["preupgrade", "preuninst"].includes(name))
+        return `#!/bin/sh\n${check}exec ${control} ${name === "preuninst" && manifest.daemon?.uninstall_args ? "uninstall" : "stop"} ${paths}\n`;
+    if (name !== "start-stop-status")
+        return "#!/bin/sh\nexit 0\n";
+    return `#!/bin/sh
+case "$1" in
+  prestart) exit 0 ;;
+  prestop)
+${check}    exit 0 ;;
+  start|status) exec ${control} "$1" ${paths} ;;
+  stop|restart)
+${check}    exec ${control} "$1" ${paths} ;;
+  *) exit 1 ;;
+esac
+`;
+}

package/dist/standalone/manifest.d.ts

@@ -2,6 +2,7 @@ import { type NativeArchFamily } from "../build-spk/dsm-arch.js";
 import { type Catalogs, type Locale } from "./i18n.js";
 import { type RootOp } from "./root-ops.js";
 import { type Integration } from "./helper.js";
+import { type Daemon } from "./daemon.js";
 /**
  * `dsm-package.yaml`: a Standalone Package, i.e. an unsigned native SPK that
  * runs as its own DSM package account with a CGI backend and a DSM window UI.
@@ -51,6 +52,7 @@ export interface StandaloneManifest {
     /** `root/<name>.sh`, present exactly when privilege is root. */
     rootOps?: RootOp[];
     integration?: Integration;
+    daemon?: Daemon;
 }
 export interface StandaloneError {
     code: string;