@synopackageland/cli 0.4.0 → 0.5.0

package/dist/standalone/host-file-navigation.js

@@ -0,0 +1,172 @@
+/** Shared virtual-path validation and File Station request shaping. */
+export const HOST_FILE_NAVIGATION_RUNTIME = `
+function requestHostFileNavigation(launch, path, isDirectory) {
+  if (typeof path !== "string" || path.length > 4096 || path.charAt(0) !== "/" ||
+    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: "invalid-input" };
+  var parts = path.split("/");
+  if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {
+    return !part || part === "." || part === "..";
+  })) return { status: "invalid-input" };
+  var result = launch("SYNO.SDS.App.FileStation3.Instance", isDirectory ? { opendir: path } : { openfile: path });
+  if (result.status !== "requested") return result;
+  return { status: "requested", action: isDirectory ? "locate-folder" : "highlight-file" };
+}
+`;
+// Engineering bounds, not DSM/File Station latency proof.
+export const REVEAL_RECOVERY_TIMEOUT_MS = 5000;
+export const REVEAL_RECOVERY_POLL_MS = 100;
+export const REVEAL_RECOVERY_QUIET_MS = 300;
+/** Best-effort recovery for File Station 1.4.x private structures. */
+export const HOST_FILE_REVEAL_RUNTIME = `
+var REVEAL_RECOVERY_TIMEOUT_MS = ${REVEAL_RECOVERY_TIMEOUT_MS};
+var REVEAL_RECOVERY_POLL_MS = ${REVEAL_RECOVERY_POLL_MS};
+var REVEAL_RECOVERY_QUIET_MS = ${REVEAL_RECOVERY_QUIET_MS};
+var hostFileRevealOwners = null, hostFileRevealSequence = 0;
+try { if (typeof WeakMap === "function") hostFileRevealOwners = new WeakMap(); } catch (error) {}
+function createHostFileRevealRecovery(path, canAct) {
+  var active = true, accepted = false, win = null, dom = null, tuple = null;
+  var poll = null, deadline = null, removers = [], reached = false, pending = 0;
+  var previous = null, quietSince = null, expires = 0, order = ++hostFileRevealSequence;
+  var parent = path.slice(0, path.lastIndexOf("/"));
+  function cancel() {
+    if (!active) return;
+    active = false;
+    try { if (poll !== null) clearTimeout(poll); } catch (error) {}
+    try { if (deadline !== null) clearTimeout(deadline); } catch (error) {}
+    poll = deadline = null;
+    removers.splice(0).forEach(function (remove) { try { remove(); } catch (error) {} });
+    try {
+      if (win && hostFileRevealOwners.get(win).order === order) {
+        // Preserve ordering for a late older callback, without retaining its closures.
+        hostFileRevealOwners.set(win, { order: order, cancel: null });
+      }
+    } catch (error) {}
+    win = dom = tuple = previous = null;
+  }
+  function requireMethods(target, names) {
+    if (!target || names.some(function (name) { return typeof target[name] !== "function"; })) throw new Error("unsupported receiver");
+  }
+  function guard(fn) {
+    return function () {
+      if (!active) return;
+      try { fn.apply(null, arguments); } catch (error) { cancel(); }
+    };
+  }
+  function listen(target, event, fn) {
+    requireMethods(target, ["on", "un"]);
+    var handler = guard(fn), remove = target.un;
+    removers.push(function () { remove.call(target, event, handler, target); });
+    target.on(event, handler, target);
+  }
+  function resetQuiet() { previous = null; quietSince = null; }
+  function inspect() {
+    requireMethods(win, ["getPanelInstance", "getEl", "on", "un"]);
+    if (win.isDestroyed || win.destroyed || !canAct()) { cancel(); return null; }
+    var element = win.getEl(), nextDom = element && element.dom;
+    if (!nextDom) { if (dom) cancel(); return null; }
+    requireMethods(nextDom, ["addEventListener", "removeEventListener"]);
+    if (dom && nextDom !== dom) { cancel(); return null; }
+    if (!dom) {
+      dom = nextDom;
+      ["pointerdown", "mousedown", "touchstart", "keydown", "wheel", "click", "input"].forEach(function (event) {
+        var remove = dom.removeEventListener, handler = guard(cancel), target = dom;
+        removers.push(function () { remove.call(target, event, handler, true); });
+        dom.addEventListener(event, handler, true);
+      });
+    }
+    var panel = win.getPanelInstance();
+    if (!panel) { if (tuple) cancel(); return null; }
+    requireMethods(panel, ["getCurrentDir", "on", "un"]);
+    var view = panel.activeView, store = panel.activeDS;
+    requireMethods(view, ["getStore", "getSelectionModel", "scrollToItem"]);
+    requireMethods(store, ["on", "un", "indexOfId", "getAt", "getCount"]);
+    var model = view.getSelectionModel();
+    requireMethods(model, ["on", "un", "getSelections", "selectRow"]);
+    if (view.getStore() !== store || panel.isDestroyed || store.isDestroyed || model.isDestroyed) { cancel(); return null; }
+    if (tuple && (tuple.panel !== panel || tuple.view !== view || tuple.store !== store || tuple.model !== model)) { cancel(); return null; }
+    if (!tuple) {
+      tuple = { panel: panel, view: view, store: store, model: model };
+      listen(panel, "destroy", cancel);
+      listen(panel, "onNodeClick", function (node) {
+        if (!node || !node.attributes || (reached && node.attributes.path !== parent)) cancel();
+      });
+      listen(store, "beforeload", function () {
+        pending++; resetQuiet(); inspect();
+      });
+      listen(store, "load", function () {
+        if (pending > 0) pending--;
+        resetQuiet(); check();
+      });
+      ["exception", "loadexception", "destroy"].forEach(function (event) { listen(store, event, cancel); });
+      listen(model, "selectionchange", function () { resetQuiet(); check(); });
+    }
+    var dir = panel.getCurrentDir(), params = store.baseParams;
+    // New File Station panels expose their APIs before the first directory is set.
+    // Keep the bound receiver guards and original deadline while startup finishes.
+    if (!reached && dir === undefined && (!params || params.folder_path === undefined)) return null;
+    if (!params || typeof params.folder_path !== "string") throw new Error("unsupported store path");
+    // Native reconfigure/selection events can precede the store's path assignment.
+    if (dir === parent && params.folder_path === parent) reached = true;
+    if (reached && (dir !== parent || params.folder_path !== parent)) { cancel(); return null; }
+    var selections = model.getSelections();
+    if (!Array.isArray(selections)) throw new Error("unsupported selection");
+    if (selections.some(function (record) { return !record || record.id !== path; })) { cancel(); return null; }
+    var index = store.indexOfId(path), count = store.getCount();
+    if (!Number.isInteger(index) || index < -1 || !Number.isInteger(count) || count < 0) throw new Error("unsupported store index");
+    var record = index >= 0 ? store.getAt(index) : null;
+    if (index >= 0 && (!record || record.id !== path || index >= count)) throw new Error("inconsistent store");
+    return { dir: dir, folder: params.folder_path, count: count, index: index, record: record, selected: selections.length > 0 };
+  }
+  function check() {
+    if (!active) return;
+    if (Date.now() >= expires || !canAct()) { cancel(); return; }
+    if (!win) return;
+    var state = inspect();
+    if (!active || !state) return;
+    if (pending || state.dir !== parent || state.folder !== parent || state.index < 0) { resetQuiet(); return; }
+    if (!previous || Object.keys(state).some(function (key) { return state[key] !== previous[key]; })) {
+      previous = state; quietSince = Date.now();
+    }
+    if (Date.now() - quietSince < REVEAL_RECOVERY_QUIET_MS) return;
+    var target = tuple, receiverWindow = win;
+    cancel(); // Release every observer before the one permitted selection mutation.
+    if (state.selected || !canAct()) return;
+    target.model.selectRow(state.index);
+    if (canAct() && !receiverWindow.isDestroyed && receiverWindow.getPanelInstance() === target.panel &&
+        target.panel.activeView === target.view && target.panel.activeDS === target.store &&
+        target.view.getSelectionModel() === target.model) target.view.scrollToItem(state.index);
+  }
+  function tick() {
+    poll = null;
+    try {
+      check();
+      if (active) poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);
+    } catch (error) { cancel(); }
+  }
+  function receive(instance) {
+    if (!active || accepted) return;
+    accepted = true;
+    try {
+      if (Date.now() >= expires || !canAct()) { cancel(); return; }
+      win = instance && instance.window;
+      requireMethods(win, ["getPanelInstance", "getEl", "on", "un"]);
+      var owner = hostFileRevealOwners.get(win);
+      if (owner && owner.order > order) { cancel(); return; }
+      if (owner && owner.cancel) owner.cancel();
+      hostFileRevealOwners.set(win, { order: order, cancel: cancel });
+      ["beforeclose", "close", "beforedestroy", "destroy", "hide"].forEach(function (event) { listen(win, event, cancel); });
+      check();
+    } catch (error) { cancel(); }
+  }
+  try {
+    if (!parent || !hostFileRevealOwners || typeof setTimeout !== "function" || typeof clearTimeout !== "function" || typeof Date.now !== "function") {
+      cancel();
+    } else {
+      expires = Date.now() + REVEAL_RECOVERY_TIMEOUT_MS;
+      deadline = setTimeout(cancel, REVEAL_RECOVERY_TIMEOUT_MS);
+      poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);
+    }
+  } catch (error) { cancel(); }
+  return { receive: receive, cancel: cancel };
+}
+`;

package/dist/standalone/host-platform.d.ts

@@ -0,0 +1,13 @@
+/** Read-only, per-call browser platform observation; never an authorization proof. */
+export interface HostPlatformSnapshot {
+    readonly web: boolean;
+    readonly host: "dsm" | "standalone-web" | "unavailable";
+    readonly dsmStandalone: boolean | null;
+    readonly dsmLanguage: string | null;
+    readonly appLocale: string | null;
+    readonly systemVersion: string | null;
+    readonly fullVersion: string | null;
+    readonly theme: null;
+}
+/** ES5, self-contained browser runtime, following I18N_RUNTIME's embedding pattern. */
+export declare const HOST_PLATFORM_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}";

package/dist/standalone/host-platform.js

@@ -0,0 +1,42 @@
+/** ES5, self-contained browser runtime, following I18N_RUNTIME's embedding pattern. */
+export const HOST_PLATFORM_RUNTIME = `function inspectHostPlatform(ctx) {
+  ctx = ctx || {};
+  var web = typeof window !== "undefined";
+  var host = false;
+  try {
+    host = !!(web && ctx.appWindow && typeof SYNO !== "undefined" &&
+      SYNO.SDS && typeof SYNO.SDS.AppWindow === "function" &&
+      ctx.appWindow instanceof SYNO.SDS.AppWindow);
+  } catch (error) {
+    // An unsupported host constructor must not break a standalone shell.
+  }
+  function read(key) {
+    if (!host || typeof _S !== "function") return null;
+    try { return _S(key); } catch (error) { return null; }
+  }
+  function text(value) {
+    return typeof value === "string" && /\\S/.test(value) ? value : null;
+  }
+  function versionPart(value) {
+    if (typeof value === "number") {
+      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;
+      value = String(value);
+    }
+    return typeof value === "string" && value.length > 0 && !/\\D/.test(value) ? value : null;
+  }
+  var standalone = read("standalone");
+  var language = text(read("lang"));
+  var major = versionPart(read("majorversion"));
+  var minor = versionPart(read("minorversion"));
+  var fullVersion = text(read("fullversion"));
+  return Object.freeze({
+    web: web,
+    host: host ? "dsm" : web ? "standalone-web" : "unavailable",
+    dsmStandalone: typeof standalone === "boolean" ? standalone : null,
+    dsmLanguage: language,
+    appLocale: text(ctx.locale),
+    systemVersion: major !== null && minor !== null ? major + "." + minor : null,
+    fullVersion: fullVersion,
+    theme: null
+  });
+}`;

package/dist/standalone/host-types.d.ts

@@ -0,0 +1,49 @@
+import type { HostPlatformSnapshot } from "./host-platform.js";
+export type HostTitleResult = {
+    status: "ok";
+    target: "dsm-window" | "document";
+} | {
+    status: "unsupported" | "unavailable" | "invalid-input" | "failed";
+};
+export type HostRequestResult = {
+    status: "requested";
+} | {
+    status: "unsupported" | "unavailable" | "invalid-input" | "blocked" | "failed";
+};
+export type HostURLResult = {
+    status: "requested";
+    windowHandleAvailable: boolean;
+} | {
+    status: "unsupported" | "unavailable" | "invalid-input" | "failed";
+};
+export type HostEvent = "window-resize" | "host-theme-change" | "host-language-change";
+export type HostSubscriptionResult = {
+    status: "subscribed";
+    dispose(): void;
+} | {
+    status: "unsupported" | "unavailable" | "invalid-input" | "failed";
+};
+export type HostFileNavigationResult = {
+    status: "requested";
+    action: "locate-folder" | "highlight-file";
+} | {
+    status: "unsupported" | "unavailable" | "invalid-input" | "failed";
+};
+export type HostUnsupportedResult = {
+    status: "unsupported" | "unavailable";
+};
+export interface HostAdapter {
+    platform(): HostPlatformSnapshot;
+    setTitle(title: string): HostTitleResult;
+    activateWindow(): HostRequestResult;
+    requestClose(): HostRequestResult;
+    openApp(appId: string): HostRequestResult;
+    openURL(url: string): HostURLResult;
+    openFileManager(path: string): HostFileNavigationResult;
+    revealFile(path: string): HostFileNavigationResult;
+    openFile(path: string): HostUnsupportedResult;
+    showFileDetails(paths: readonly string[]): HostUnsupportedResult;
+    openAppSetting(): HostUnsupportedResult;
+    subscribe(event: HostEvent, listener: () => void): HostSubscriptionResult;
+    dispose(): void;
+}

package/dist/standalone/host-types.js

@@ -0,0 +1 @@
+export {};

package/dist/standalone/inspect-helper.d.ts

@@ -0,0 +1,6 @@
+export interface IntegrationInspection {
+    protocol: 1 | 2;
+    dataAccess: "unavailable" | "relaxed";
+}
+/** Artifact consistency only; bytes, approval and health never certify NAS access. */
+export declare function inspectHelper(dir: string, info: Record<string, string>, findings: string[], daemon?: boolean): Promise<IntegrationInspection | undefined>;

package/dist/standalone/inspect-helper.js

@@ -0,0 +1,93 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import * as tar from "tar";
+import { windowScriptName } from "./dsm-window.js";
+import { helperOps } from "./helper.js";
+import { sha256 } from "./helper-inventory.js";
+import { renderStandaloneScript } from "./lifecycle.js";
+import { rootTasks } from "./root-window.js";
+import { decodeSDKRegistry } from "./worker-registry.js";
+/** Artifact consistency only; bytes, approval and health never certify NAS access. */
+export async function inspectHelper(dir, info, findings, daemon = false) {
+    const files = new Map();
+    const windowPath = `ui/${windowScriptName({ build: Number(info.version?.split("-").at(-1)) })}`;
+    const windows = [];
+    let oversized = false;
+    await tar.t({ file: join(dir, "package.tgz"), onReadEntry(entry) {
+            const path = entry.path.replace(/^\.\//, "");
+            // Enumerate candidates to reject extras; only the INFO-derived exact path is read.
+            if (/^ui\/window-[^/]*\.js$/.test(path))
+                windows.push(path);
+            if (entry.type !== "File" || !(path.startsWith("integration/workers/") || ["integration/helper", "integration/inventory.json", "integration/workers.json", "ui/cgi/api.cgi", windowPath].includes(path)))
+                return;
+            const limit = ["integration/helper", "ui/cgi/api.cgi"].includes(path) ? 64 * 1024 * 1024 : 1024 * 1024;
+            if (files.has(path) || entry.size > limit) {
+                oversized = true;
+                return;
+            }
+            const chunks = [];
+            let size = 0;
+            entry.on("data", (chunk) => { size += chunk.length; if (size <= limit)
+                chunks.push(chunk);
+            else
+                oversized = true; });
+            entry.on("end", () => files.set(path, Buffer.concat(chunks)));
+        } });
+    try {
+        if (oversized)
+            throw new Error("oversized/duplicate payload");
+        const bytes = (path) => { const b = files.get(path); if (!b)
+            throw new Error(`missing ${path}`); return b; };
+        const raw = bytes("integration/inventory.json").toString("utf8");
+        const i = JSON.parse(raw);
+        const keys = i.dataAccess === undefined ? "package,payloadDigest,protocol,registryDigest,version" : "dataAccess,package,payloadDigest,protocol,registryDigest,version";
+        if (Object.keys(i).sort().join(",") !== keys || (i.dataAccess !== undefined && (i.protocol !== 2 || !["unavailable", "relaxed"].includes(i.dataAccess))) ||
+            i.package !== info.package || i.version !== info.version || !/^[A-Za-z][A-Za-z0-9]{1,63}$/.test(i.package) || !/^\d+(\.\d+){0,3}-\d{4}$/.test(i.version) || ![1, 2].includes(i.protocol) ||
+            !/^[a-f0-9]{64}$/.test(i.payloadDigest) || !/^[a-f0-9]{64}$/.test(i.registryDigest) || JSON.stringify(i) !== raw)
+            throw new Error("invalid inventory");
+        if (windows.length !== 1 || windows[0] !== windowPath)
+            throw new Error("missing/ambiguous window or build mismatch");
+        const helper = bytes("integration/helper");
+        if (sha256(helper) !== i.payloadDigest || !helper.includes(Buffer.from(JSON.stringify({ ...i, payloadDigest: "" }))) ||
+            !bytes("ui/cgi/api.cgi").includes(Buffer.from(raw)))
+            throw new Error("payload/compiled inventory mismatch");
+        const workers = bytes("integration/workers.json");
+        const rawRegistry = JSON.parse(workers.toString("utf8"));
+        const sdkRegistry = !Array.isArray(rawRegistry);
+        const registry = sdkRegistry ? decodeSDKRegistry(workers).inert : rawRegistry;
+        if (sdkRegistry && (i.protocol !== 2 || i.dataAccess !== "relaxed" || !helper.includes(workers)))
+            throw new Error("compiled SDK registry mismatch");
+        if (!Array.isArray(registry) || registry.length > 16 || sha256(workers) !== i.registryDigest || (!sdkRegistry && JSON.stringify(registry) !== workers.toString("utf8")))
+            throw new Error("invalid registry");
+        let previous = "", total = 0;
+        for (const worker of registry) {
+            if (!worker || Object.keys(worker).sort().join(",") !== "digest,id" || typeof worker.id !== "string" ||
+                !/^[a-z][a-z0-9_]{0,31}$/.test(worker.id) || (previous && (sdkRegistry ? previous >= worker.id : previous.localeCompare(worker.id, "en") >= 0)) ||
+                !/^[a-f0-9]{64}$/.test(worker.digest))
+                throw new Error("invalid worker");
+            const content = bytes(`integration/workers/${worker.id}`);
+            total += content.length;
+            if (total > 1024 * 1024 || sha256(content) !== worker.digest)
+                throw new Error("worker digest mismatch");
+            previous = worker.id;
+        }
+        if ([...files.keys()].filter(p => p.startsWith("integration/workers/")).length !== registry.length)
+            throw new Error("unregistered worker");
+        const manifest = { package: i.package, spkVersion: i.version, privilege: "root", integration: { protocol: i.protocol, workers: {} } };
+        const tasks = JSON.parse(/\.rootTasks = (\[[^\n]+\]);/.exec(bytes(windowPath).toString("utf8"))?.[1] ?? "null");
+        const expected = rootTasks({ ...manifest, rootOps: helperOps(manifest, i) });
+        if (!Array.isArray(tasks) || JSON.stringify(tasks.filter(t => t.op?.startsWith("helper_"))) !== JSON.stringify(expected))
+            throw new Error("approved task mismatch");
+        // Daemon lifecycle is verified separately with the complete daemon config.
+        if (!daemon)
+            for (const hook of ["start-stop-status", "preupgrade", "preuninst"]) {
+                if (readFileSync(join(dir, "scripts", hook), "utf8") !== renderStandaloneScript(hook, manifest))
+                    throw new Error("lifecycle mismatch");
+            }
+        return { protocol: i.protocol, dataAccess: i.dataAccess ?? "unavailable" };
+    }
+    catch {
+        findings.push("integration inventory、digest、compiled binding、worker 或 lifecycle 不符合固定契約");
+        return undefined;
+    }
+}

package/dist/standalone/inspect-spk.d.ts

@@ -1,4 +1,5 @@
-export type SpkKind = "native-go" | "binary" | "container";
+import { type IntegrationInspection } from "./inspect-helper.js";
+export type SpkKind = "native-go" | "binary" | "container" | "native-layout";
 export interface SpkInspection {
     kind?: SpkKind;
     package?: string;
@@ -8,6 +9,7 @@ export interface SpkInspection {
     signed: boolean;
     /** Payload path of the package CGI, when present with mode 0755. */
     cgi?: string;
+    integration?: IntegrationInspection;
     payload: Array<{
         path: string;
         mode: string;