@synopackageland/cli 0.4.1 → 0.5.3

package/dist/standalone/build.js

@@ -1,12 +1,15 @@
 import { spawnSync } from "node:child_process";
-import { mkdtempSync, rmSync } from "node:fs";
+import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { resolveMinDsm, DEFAULT_MIN_DSM, isDsmAtLeast } from "../build-spk/dsm-version.js";
 import { checkCgiBinary } from "./binary.js";
 import { loadStandaloneManifest } from "./manifest.js";
 import { assembleStandaloneSpk, StandaloneBuildError } from "./spk.js";
 import { buildHelper } from "./helper.js";
 import { buildDaemonControl } from "./daemon.js";
+import { buildAuthorization, authorizationPlan } from "./authorization.js";
+import { BACKGROUND_WORKER_MAIN } from "./background.js";
 const GOARCH = { x86_64: "amd64", aarch64: "arm64" };
 /** Argv only, never a shell; output streams to the terminal except stderr, which is also kept. */
 export const runCommand = (command, args, options) => {
@@ -29,7 +32,12 @@ export async function buildStandalone(options) {
         const [first] = loaded.errors;
         throw new StandaloneBuildError(first.code, loaded.errors.map((e) => `[${e.code}] ${e.message}`).join("\n"));
     }
-    const manifest = loaded.manifest;
+    const manifest = options.minDsm === undefined
+        ? loaded.manifest
+        : { ...loaded.manifest, os_min_ver: resolveMinDsm(options.minDsm) };
+    if (manifest.privilege === "root" && !isDsmAtLeast(manifest.os_min_ver, DEFAULT_MIN_DSM)) {
+        throw new StandaloneBuildError("STANDALONE_OS_MIN_VER_INVALID", `root templates require DSM ${DEFAULT_MIN_DSM} or later.`);
+    }
     const run = options.run ?? runCommand;
     const arches = options.arches ?? manifest.arches;
     for (const arch of arches) {
@@ -54,15 +62,26 @@ export async function buildStandalone(options) {
                 if (problem)
                     throw new StandaloneBuildError(problem.code, problem.message);
             }
-            const cgiPath = backendFor(manifest, arch, work, run, helper);
+            const operationsManifest = helper ? { ...manifest, rootOps: [...(manifest.rootOps ?? []), ...helper.ops] } : manifest;
+            const authorization = buildAuthorization(operationsManifest, arch, work, run);
+            if (authorization) {
+                const problem = checkCgiBinary(work, authorization.binary, arch);
+                if (problem)
+                    throw new StandaloneBuildError(problem.code, problem.message);
+            }
+            const cgiPath = backendFor(manifest, arch, work, run, helper, authorization);
             const problem = checkCgiBinary(manifest.backend.kind === "go" ? work : manifest.root, cgiPath, arch);
             if (problem) {
                 throw new StandaloneBuildError(problem.code, problem.message);
             }
+            if (authorization && !readFileSync(cgiPath).includes(Buffer.from(JSON.stringify(authorizationPlan(authorization, manifest))).toString("base64"))) {
+                throw new StandaloneBuildError("AUTHORIZATION_CGI_REQUIRED", "root CGI must contain its compiled authorization plan; regenerate the root template adapter");
+            }
             const outputPath = join(outDir, `${manifest.package}-${manifest.spkVersion}-${arch}.spk`);
             const daemonControl = buildDaemonControl(manifest, arch, work, run);
-            const builtManifest = helper ? { ...manifest, rootOps: [...(manifest.rootOps ?? []), ...helper.ops] } : manifest;
-            await assembleStandaloneSpk({ manifest: builtManifest, arch, cgiPath, outputPath, helper, daemonControl });
+            const builtManifest = authorization ? { ...manifest, rootOps: authorization.ops } : operationsManifest;
+            const backgroundWorker = buildBackgroundWorker(manifest, arch, work, run);
+            await assembleStandaloneSpk({ manifest: builtManifest, arch, cgiPath, outputPath, helper, daemonControl, backgroundWorker, authorization });
             outputs.push(outputPath);
         }
         return { outputs };
@@ -77,12 +96,15 @@ function buildUi(manifest, run) {
         return;
     }
     const [command, ...args] = build.command;
-    const result = run(command, args, { cwd: build.cwd, env: { ...process.env } });
+    const result = run(command, args, { cwd: build.cwd, env: { ...process.env, SYNOPKGLAND_SDK_WORKERS: manifest.integration?.sdkWorkers ? "1" : "0" } });
     if (result.missing || result.status !== 0) {
-        throw new StandaloneBuildError("STANDALONE_UI_BUILD_FAILED", `UI build（${build.command.join(" ")}）失敗。\n${result.stderr}`);
+        const installHint = command === "npm" && existsSync(join(build.cwd, "package.json")) && !existsSync(join(build.cwd, "node_modules"))
+            ? `\nUI 依賴尚未安裝。請在 ${build.cwd} 執行 npm ${existsSync(join(build.cwd, "package-lock.json")) ? "ci" : "install"}，然後重新執行 build-spk。`
+            : "";
+        throw new StandaloneBuildError("STANDALONE_UI_BUILD_FAILED", `UI build（${build.command.join(" ")}）失敗。${installHint}\n${result.stderr}`);
     }
 }
-function backendFor(manifest, arch, work, run, helper) {
+function backendFor(manifest, arch, work, run, helper, authorization) {
     const backend = manifest.backend;
     if (backend.kind === "binary") {
         return backend.files[arch];
@@ -95,16 +117,38 @@ function backendFor(manifest, arch, work, run, helper) {
         `-X main.packageID=${manifest.package}`,
         `-X main.version=${manifest.spkVersion}`,
         ...(helper ? [`-X 'main.helperInventory=${JSON.stringify(helper.inventory)}'`] : []),
+        ...(authorization ? [`-X 'main.rootAuthorization=${Buffer.from(JSON.stringify(authorizationPlan(authorization, manifest))).toString('base64')}'`] : []),
+        // Integration without a helper: the CGI serves its package-account features itself.
+        ...(manifest.integration && !helper ? ["-X main.integrationMode=package"] : []),
+        ...(manifest.fileStation ? [`-X main.fileStation=${manifest.fileStation}`] : []),
     ].join(" ");
-    const result = run("go", ["build", "-trimpath", "-buildvcs=false", "-ldflags", ldflags, "-o", out, backend.main], {
+    const result = run("go", ["build", ...(manifest.integration?.sdkWorkers ? ["-tags=synopkgland_sdk_workers"] : []), "-trimpath", "-buildvcs=false", "-ldflags", ldflags, "-o", out, backend.main], {
         cwd: backend.dir,
         env: { ...process.env, CGO_ENABLED: "0", GOOS: "linux", GOARCH: GOARCH[arch] },
     });
     if (result.missing) {
-        throw new StandaloneBuildError("STANDALONE_GO_MISSING", "找不到 go 指令。請安裝 Go 1.24 以上版本（https://go.dev/dl/），或改用 backend.binary 打包既有執行檔。");
+        throw new StandaloneBuildError("STANDALONE_GO_MISSING", "找不到 go 指令。請安裝 Go 1.25 以上版本（https://go.dev/dl/），或改用 backend.binary 打包既有執行檔。");
     }
     if (result.status !== 0) {
         throw new StandaloneBuildError("STANDALONE_GO_BUILD_FAILED", `go build（${arch}）失敗。\n${result.stderr}`);
     }
     return out;
 }
+/** The fixed worker is a second binary of the project's own Go module. */
+function buildBackgroundWorker(manifest, arch, work, run) {
+    if (!manifest.background || manifest.backend.kind !== "go")
+        return undefined;
+    const out = join(work, `background-worker-${arch}`);
+    const ldflags = ["-s", "-w", "-buildid=", `-X main.packageID=${manifest.package}`].join(" ");
+    const result = run("go", ["build", "-trimpath", "-buildvcs=false", "-ldflags", ldflags, "-o", out, BACKGROUND_WORKER_MAIN], {
+        cwd: manifest.backend.dir,
+        env: { ...process.env, CGO_ENABLED: "0", GOOS: "linux", GOARCH: GOARCH[arch] },
+    });
+    if (result.missing || result.status !== 0) {
+        throw new StandaloneBuildError("STANDALONE_BACKGROUND_BUILD_FAILED", `background worker（${BACKGROUND_WORKER_MAIN}）build 失敗；這個專案的 backend 需要含該 package。\n${result.stderr}`);
+    }
+    const problem = checkCgiBinary(work, out, arch);
+    if (problem)
+        throw new StandaloneBuildError(problem.code, problem.message);
+    return out;
+}

package/dist/standalone/dsm-window.js

@@ -1,3 +1,4 @@
+import { AUTHORIZATION_RUNTIME } from "./authorization-window.js";
 import { REOPEN_EVENTS_RUNTIME } from "./reopen-events.js";
 import { DSM_LANGS } from "./i18n.js";
 import { ROOT_MESSAGES } from "./root-messages.js";
@@ -180,15 +181,17 @@ ${root ? root.mount : ""}    ${ns}.loadApp(function (app) {
         var i18n = ${ns}.createI18n(lang, ${ns}.messages);
         me.hostAccess = ${ns}.createHost({ appWindow: me, locale: i18n.locale });
         root.lang = i18n.locale;
+        if (app.authorizationUI && me.body) { var panels = me.body.dom.querySelector(".dsmapp-rootpanels"); if (panels) panels.hidden = true; }
         try {
           me.mounted = app.mount(root, {
+          displayName: ${JSON.stringify(manifest.displayname)},
           call: ${ns}.call,
           reopen: me.reopenEvents.subscribe,
           host: me.hostAccess,
           appWindow: me,
           lang: lang,
           locale: i18n.locale,
-          t: i18n.t${root ? ",\n          root: access" : ""}
+          t: i18n.t${root ? `,\n          root: access,\n          authorization: ${ns}.createAuthorizationAccess({root: access, call: ${ns}.call, tasks: ${ns}.rootTasks, user: session})` : ""}
           }) || {};
         } catch (error) {
           me.hostAccess.dispose();
@@ -239,6 +242,10 @@ const ROOT_PANEL_CSS = [
 function renderRootParts(ns, manifest) {
     return {
         definitions: `${ns}.rootTasks = ${JSON.stringify(rootTasks(manifest))};
+${ns}.createAuthorizationAccess = (function () {
+${AUTHORIZATION_RUNTIME}
+return createAuthorizationAccess;
+})();
 ${ns}.rootMessages = ${JSON.stringify(ROOT_MESSAGES)};
 ${ns}.createRootAccess = (function () {
 ${ROOT_RUNTIME}
@@ -273,8 +280,8 @@ ${ROOT_PANEL}
       confirmPassword: function () {
         return new Promise(function (resolve) {
           SYNO.SDS.Utils.PasswordConfirmDialog.openDialog(me, function (confirmation) {
-            resolve((confirmation && confirmation.SynoConfirmPWToken) || null);
-          }, [], function () { resolve(null); });
+            resolve({ confirmed: true, token: (confirmation && confirmation.SynoConfirmPWToken) || null });
+          }, [], function () { resolve({ confirmed: false, token: null }); });
         });
       },
       call: ${ns}.call,

package/dist/standalone/helper-inventory.d.ts

@@ -1,9 +1,11 @@
+import type { SDKWorkerConfig } from "./worker-registry.js";
 export type DataAccessMode = "unavailable" | "relaxed";
 export interface Integration {
     protocol: 1 | 2;
     workers: Record<string, string>;
     identity?: "better-auth";
     dataAccess?: DataAccessMode;
+    sdkWorkers?: Record<string, SDKWorkerConfig>;
 }
 export interface HelperInventory {
     package: string;
@@ -13,4 +15,17 @@ export interface HelperInventory {
     registryDigest: string;
     dataAccess?: DataAccessMode;
 }
+/**
+ * The privileged helper exists only for an integration that also declares
+ * privilege: root. Without it, integration is package-account only.
+ */
+export declare const hasHelper: (m: {
+    integration?: unknown;
+    privilege?: "none" | "root";
+}) => boolean;
 export declare const sha256: (b: string | Buffer) => string;
+/** Preserve the original inert inventory byte format, including property order. */
+export declare function inertWorkerRegistry(workers: readonly {
+    id: string;
+    digest: string;
+}[]): string;

package/dist/standalone/helper-inventory.js

@@ -1,2 +1,11 @@
 import { createHash } from "node:crypto";
+/**
+ * The privileged helper exists only for an integration that also declares
+ * privilege: root. Without it, integration is package-account only.
+ */
+export const hasHelper = (m) => m.integration !== undefined && m.privilege === "root";
 export const sha256 = (b) => createHash("sha256").update(b).digest("hex");
+/** Preserve the original inert inventory byte format, including property order. */
+export function inertWorkerRegistry(workers) {
+    return JSON.stringify(workers.map(({ id, digest }) => ({ id, digest })));
+}

package/dist/standalone/helper.d.ts

@@ -13,6 +13,7 @@ export interface HelperArtifact {
     binary: string;
     inventory: HelperInventory;
     workers: WorkerPayload[];
+    registry?: string;
     ops: RootOp[];
 }
 export declare function readIntegration(raw: unknown, root: string, fail: (e: StandaloneError) => void): Integration | undefined;

package/dist/standalone/helper.js

@@ -2,13 +2,14 @@ import { lstatSync, readFileSync, realpathSync } from "node:fs";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import { renderRootTaskScript } from "./root-ops.js";
 import { StandaloneBuildError } from "./spk.js";
-import { sha256 } from "./helper-inventory.js";
+import { hasHelper, sha256 } from "./helper-inventory.js";
+import { buildWorkerRegistry, parseSDKWorkers } from "./worker-registry.js";
 const record = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 export function readIntegration(raw, root, fail) {
     if (raw === undefined)
         return undefined;
-    const invalid = () => { fail({ code: "STANDALONE_INTEGRATION_INVALID", message: "integration 需要 protocol: 1 或 2 與 workers: {固定 ID: 專案內檔案}；最多 16 個，僅作 inventory，不執行 worker。" }); return undefined; };
-    if (!record(raw) || Object.keys(raw).some(k => !["protocol", "workers", "identity", "dataAccess"].includes(k)) || ![1, 2].includes(raw.protocol) || !record(raw.workers) || Object.keys(raw.workers).length > 16)
+    const invalid = () => { fail({ code: "STANDALONE_INTEGRATION_INVALID", message: "integration 需要 protocol: 1 或 2 與 inert workers；sdkWorkers 僅接受 protocol 2／relaxed 的固定 SDK kind、action/mode 與較低 limits。總數最多 16，production unavailable。" }); return undefined; };
+    if (!record(raw) || Object.keys(raw).some(k => !["protocol", "workers", "identity", "dataAccess", "sdkWorkers"].includes(k)) || ![1, 2].includes(raw.protocol) || !record(raw.workers) || Object.keys(raw.workers).length > 16)
         return invalid();
     if (raw.identity !== undefined && raw.identity !== "better-auth")
         return invalid();
@@ -23,7 +24,18 @@ export function readIntegration(raw, root, fail) {
             return invalid();
         workers[id] = path;
     }
-    return { protocol: raw.protocol, workers, ...(raw.identity === "better-auth" ? { identity: "better-auth" } : {}), ...(raw.dataAccess !== undefined ? { dataAccess: raw.dataAccess } : {}) };
+    let sdkWorkers;
+    if (Object.hasOwn(raw, "sdkWorkers")) {
+        if (raw.protocol !== 2 || raw.dataAccess !== "relaxed")
+            return invalid();
+        try {
+            sdkWorkers = parseSDKWorkers(raw.sdkWorkers, Object.keys(workers));
+        }
+        catch {
+            return invalid();
+        }
+    }
+    return { protocol: raw.protocol, workers, ...(raw.identity === "better-auth" ? { identity: "better-auth" } : {}), ...(raw.dataAccess !== undefined ? { dataAccess: raw.dataAccess } : {}), ...(sdkWorkers ? { sdkWorkers } : {}) };
 }
 function snapshotWorkers(m) {
     let total = 0;
@@ -45,7 +57,7 @@ export function assertHelperTaskBudget(script, metadata = JSON.stringify({ scrip
         throw new StandaloneBuildError("HELPER_METADATA_TOO_LARGE", "helper scheduler metadata 超過 8191 bytes 有界限制。");
 }
 export function helperOps(m, inventory) {
-    return ["enable", "recover", "teardown", "disable", "repair"].map(action => {
+    return ["enable", "recover", "teardown", "disable", "repair", ...(m.privilege === 'root' ? ['purge'] : [])].map(action => {
         const op = { name: `helper_${action}`, protectedOutput: true, body: `#!/bin/sh
 set -eu
 umask 077
@@ -87,19 +99,25 @@ exec "$exe" ${action}
     });
 }
 export function buildHelper(m, arch, work, run) {
-    if (!m.integration)
+    if (!m.integration || !hasHelper(m))
         return undefined;
     if (m.backend.kind !== "go")
         throw new StandaloneBuildError("HELPER_GO_REQUIRED", "M1a integration 僅支援 native-go。");
     const workers = snapshotWorkers(m);
-    const registry = workers.map(({ id, digest }) => ({ id, digest }));
-    const base = { package: m.package, version: m.spkVersion, protocol: m.integration.protocol, payloadDigest: "", registryDigest: sha256(JSON.stringify(registry)), ...(m.integration.dataAccess ? { dataAccess: m.integration.dataAccess } : {}) };
+    const registry = buildWorkerRegistry(workers, m.integration.sdkWorkers, m.backend.dir);
+    const base = { package: m.package, version: m.spkVersion, protocol: m.integration.protocol, payloadDigest: "", registryDigest: sha256(registry), ...(m.integration.dataAccess ? { dataAccess: m.integration.dataAccess } : {}) };
     const binary = join(work, `helper-${arch}`);
-    const result = run("go", ["build", "-trimpath", "-buildvcs=false", "-ldflags", `-s -w -buildid= -X 'main.helperInventory=${JSON.stringify(base)}'`, "-o", binary, "./cmd/helper"], {
+    const sdkFlags = m.integration.sdkWorkers ? ["-tags=synopkgland_sdk_workers"] : [];
+    const sdkBinding = m.integration.sdkWorkers ? ` -X 'main.sdkWorkerRegistry=${registry}'` : "";
+    const result = run("go", ["build", ...sdkFlags, "-trimpath", "-buildvcs=false", "-ldflags", `-s -w -buildid= -X 'main.helperInventory=${JSON.stringify(base)}'${sdkBinding}`, "-o", binary, "./cmd/helper"], {
         cwd: m.backend.dir, env: { ...process.env, CGO_ENABLED: "0", GOOS: "linux", GOARCH: arch === "x86_64" ? "amd64" : "arm64" },
     });
     if (result.missing || result.status !== 0)
         throw new StandaloneBuildError("HELPER_BUILD_FAILED", `Go helper build 失敗：${result.stderr}`);
-    const inventory = { ...base, payloadDigest: sha256(readFileSync(binary)) };
-    return { binary, inventory, workers, ops: helperOps(m, inventory) };
+    const payload = readFileSync(binary);
+    if (m.integration.sdkWorkers && (!payload.includes(Buffer.from(registry)) || buildWorkerRegistry(workers, m.integration.sdkWorkers, m.backend.dir) !== registry)) {
+        throw new StandaloneBuildError("HELPER_BUILD_FAILED", "compiled SDK registry 缺失或 source 在建置期間變動；請用完整 SDK 模板重新建置。");
+    }
+    const inventory = { ...base, payloadDigest: sha256(payload) };
+    return { binary, inventory, workers, ...(m.integration.sdkWorkers ? { registry } : {}), ops: helperOps(m, inventory) };
 }

package/dist/standalone/host-adapter.d.ts

@@ -1,5 +1,5 @@
 export type { HostAdapter, HostTitleResult, HostRequestResult, HostURLResult, HostEvent, HostSubscriptionResult, HostFileNavigationResult, HostUnsupportedResult } from "./host-types.js";
-export declare const HOST_ADAPTER_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}\nfunction createHostAdapter(ctx) {\n  ctx = ctx || {};\n  var disposed = false, subscriptions = [];\n  function launchApp(appId, config) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof appId !== \"string\" || !appId || /\\s/.test(appId)) return { status: \"invalid-input\" };\n    try {\n      if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n      var sds = SYNO.SDS, map = sds.Config && sds.Config.FnMap, notifier = sds.StatusNotifier;\n      if (typeof sds.AppLaunch !== \"function\" || !map ||\n          !Object.prototype.hasOwnProperty.call(map, appId) || !map[appId] || !notifier ||\n          typeof notifier.isAppEnabled !== \"function\" || !notifier.isAppEnabled(appId) ||\n          typeof notifier.isAppLaunchable !== \"function\" || !notifier.isAppLaunchable(appId)) {\n        return { status: \"unsupported\" };\n      }\n      sds.AppLaunch(appId, config);\n      return { status: \"requested\" };\n    } catch (error) { return { status: \"failed\" }; }\n  }\n  function navigateFileStation(path, isDirectory) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n        /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n    var parts = path.split(\"/\");\n    if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {\n      return !part || part === \".\" || part === \"..\";\n    })) return { status: \"invalid-input\" };\n    var result = launchApp(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n    if (result.status !== \"requested\") return result;\n    return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n  }\n  function unsupportedOperation() { return { status: disposed ? \"unavailable\" : \"unsupported\" }; }\n  return Object.freeze({\n    platform: function () {\n      if (!disposed) return inspectHostPlatform(ctx);\n      return Object.freeze({\n        web: typeof window !== \"undefined\", host: \"unavailable\",\n        dsmStandalone: null, dsmLanguage: null, appLocale: null,\n        systemVersion: null, fullVersion: null, theme: null\n      });\n    },\n    setTitle: function (title) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof title !== \"string\") return { status: \"invalid-input\" };\n      try {\n        var platform = inspectHostPlatform(ctx);\n        if (platform.host === \"dsm\") {\n          if (typeof ctx.appWindow.setTitle !== \"function\") return { status: \"unsupported\" };\n          ctx.appWindow.setTitle(title, undefined, true);\n          return { status: \"ok\", target: \"dsm-window\" };\n        }\n        if (!platform.web) return { status: \"unavailable\" };\n        if (typeof document === \"undefined\") return { status: \"unsupported\" };\n        document.title = title;\n        return { status: \"ok\", target: \"document\" };\n      } catch (error) {\n        return { status: \"failed\" };\n      }\n    },\n    activateWindow: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\" || typeof ctx.appWindow.activate !== \"function\") return { status: \"unsupported\" };\n        ctx.appWindow.activate();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    requestClose: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        if (typeof win.close !== \"function\" || typeof win.isStandaloneMainWindow !== \"function\" ||\n            win.isStandaloneMainWindow() !== false) return { status: \"unsupported\" };\n        if (win.canClose === false) return { status: \"blocked\" };\n        win.close();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openApp: function (appId) { return launchApp(appId, {}); },\n    openURL: function (raw) {\n      if (disposed || typeof window === \"undefined\") return { status: \"unavailable\" };\n      if (typeof raw !== \"string\" || !raw || /[\\s\\x00-\\x1f\\x7f]/.test(raw)) return { status: \"invalid-input\" };\n      if (typeof URL !== \"function\") return { status: \"unsupported\" };\n      var url;\n      try { url = new URL(raw); } catch (error) { return { status: \"invalid-input\" }; }\n      if ((url.protocol !== \"http:\" && url.protocol !== \"https:\") || url.username || url.password) return { status: \"invalid-input\" };\n      if (typeof window.open !== \"function\") return { status: \"unsupported\" };\n      try {\n        var opened = window.open(url.href, \"_blank\", \"noopener,noreferrer\");\n        return { status: \"requested\", windowHandleAvailable: !!opened };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openFileManager: function (path) { return navigateFileStation(path, true); },\n    revealFile: function (path) { return navigateFileStation(path, false); },\n    openFile: unsupportedOperation,\n    showFileDetails: unsupportedOperation,\n    openAppSetting: unsupportedOperation,\n    subscribe: function (event, listener) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof listener !== \"function\") return { status: \"invalid-input\" };\n      if (event !== \"window-resize\") return { status: \"unsupported\" };\n      var win, callback = listener, active = true;\n      function handler() { if (!disposed && callback) callback(); }\n      function unsubscribe() {\n        if (!active) return;\n        active = false;\n        callback = null;\n        var target = win;\n        win = null;\n        var index = subscriptions.indexOf(unsubscribe);\n        if (index !== -1) subscriptions.splice(index, 1);\n        try { if (target) target.un(\"resize\", handler, target); } catch (error) {}\n      }\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        win = ctx.appWindow;\n        if (typeof win.on !== \"function\" || typeof win.un !== \"function\") return { status: \"unsupported\" };\n        subscriptions.push(unsubscribe);\n        win.on(\"resize\", handler, win);\n        if (disposed) return { status: \"unavailable\" };\n        return Object.freeze({ status: \"subscribed\", dispose: unsubscribe });\n      } catch (error) {\n        unsubscribe();\n        return { status: \"failed\" };\n      }\n    },\n    dispose: function () {\n      if (disposed) return;\n      disposed = true;\n      subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });\n      ctx = null;\n    }\n  });\n}";
+export declare const HOST_ADAPTER_RUNTIME = "function inspectHostPlatform(ctx) {\n  ctx = ctx || {};\n  var web = typeof window !== \"undefined\";\n  var host = false;\n  try {\n    host = !!(web && ctx.appWindow && typeof SYNO !== \"undefined\" &&\n      SYNO.SDS && typeof SYNO.SDS.AppWindow === \"function\" &&\n      ctx.appWindow instanceof SYNO.SDS.AppWindow);\n  } catch (error) {\n    // An unsupported host constructor must not break a standalone shell.\n  }\n  function read(key) {\n    if (!host || typeof _S !== \"function\") return null;\n    try { return _S(key); } catch (error) { return null; }\n  }\n  function text(value) {\n    return typeof value === \"string\" && /\\S/.test(value) ? value : null;\n  }\n  function versionPart(value) {\n    if (typeof value === \"number\") {\n      if (!isFinite(value) || value < 0 || Math.floor(value) !== value) return null;\n      value = String(value);\n    }\n    return typeof value === \"string\" && value.length > 0 && !/\\D/.test(value) ? value : null;\n  }\n  var standalone = read(\"standalone\");\n  var language = text(read(\"lang\"));\n  var major = versionPart(read(\"majorversion\"));\n  var minor = versionPart(read(\"minorversion\"));\n  var fullVersion = text(read(\"fullversion\"));\n  return Object.freeze({\n    web: web,\n    host: host ? \"dsm\" : web ? \"standalone-web\" : \"unavailable\",\n    dsmStandalone: typeof standalone === \"boolean\" ? standalone : null,\n    dsmLanguage: language,\n    appLocale: text(ctx.locale),\n    systemVersion: major !== null && minor !== null ? major + \".\" + minor : null,\n    fullVersion: fullVersion,\n    theme: null\n  });\n}\n\nfunction requestHostFileNavigation(launch, path, isDirectory) {\n  if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n  var parts = path.split(\"/\");\n  if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {\n    return !part || part === \".\" || part === \"..\";\n  })) return { status: \"invalid-input\" };\n  var result = launch(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n  if (result.status !== \"requested\") return result;\n  return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n}\n\n\nvar REVEAL_RECOVERY_TIMEOUT_MS = 5000;\nvar REVEAL_RECOVERY_POLL_MS = 100;\nvar REVEAL_RECOVERY_QUIET_MS = 300;\nvar hostFileRevealOwners = null, hostFileRevealSequence = 0;\ntry { if (typeof WeakMap === \"function\") hostFileRevealOwners = new WeakMap(); } catch (error) {}\nfunction createHostFileRevealRecovery(path, canAct) {\n  var active = true, accepted = false, win = null, dom = null, tuple = null;\n  var poll = null, deadline = null, removers = [], reached = false, pending = 0;\n  var previous = null, quietSince = null, expires = 0, order = ++hostFileRevealSequence;\n  var parent = path.slice(0, path.lastIndexOf(\"/\"));\n  function cancel() {\n    if (!active) return;\n    active = false;\n    try { if (poll !== null) clearTimeout(poll); } catch (error) {}\n    try { if (deadline !== null) clearTimeout(deadline); } catch (error) {}\n    poll = deadline = null;\n    removers.splice(0).forEach(function (remove) { try { remove(); } catch (error) {} });\n    try {\n      if (win && hostFileRevealOwners.get(win).order === order) {\n        // Preserve ordering for a late older callback, without retaining its closures.\n        hostFileRevealOwners.set(win, { order: order, cancel: null });\n      }\n    } catch (error) {}\n    win = dom = tuple = previous = null;\n  }\n  function requireMethods(target, names) {\n    if (!target || names.some(function (name) { return typeof target[name] !== \"function\"; })) throw new Error(\"unsupported receiver\");\n  }\n  function guard(fn) {\n    return function () {\n      if (!active) return;\n      try { fn.apply(null, arguments); } catch (error) { cancel(); }\n    };\n  }\n  function listen(target, event, fn) {\n    requireMethods(target, [\"on\", \"un\"]);\n    var handler = guard(fn), remove = target.un;\n    removers.push(function () { remove.call(target, event, handler, target); });\n    target.on(event, handler, target);\n  }\n  function resetQuiet() { previous = null; quietSince = null; }\n  function inspect() {\n    requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n    if (win.isDestroyed || win.destroyed || !canAct()) { cancel(); return null; }\n    var element = win.getEl(), nextDom = element && element.dom;\n    if (!nextDom) { if (dom) cancel(); return null; }\n    requireMethods(nextDom, [\"addEventListener\", \"removeEventListener\"]);\n    if (dom && nextDom !== dom) { cancel(); return null; }\n    if (!dom) {\n      dom = nextDom;\n      [\"pointerdown\", \"mousedown\", \"touchstart\", \"keydown\", \"wheel\", \"click\", \"input\"].forEach(function (event) {\n        var remove = dom.removeEventListener, handler = guard(cancel), target = dom;\n        removers.push(function () { remove.call(target, event, handler, true); });\n        dom.addEventListener(event, handler, true);\n      });\n    }\n    var panel = win.getPanelInstance();\n    if (!panel) { if (tuple) cancel(); return null; }\n    requireMethods(panel, [\"getCurrentDir\", \"on\", \"un\"]);\n    var view = panel.activeView, store = panel.activeDS;\n    requireMethods(view, [\"getStore\", \"getSelectionModel\", \"scrollToItem\"]);\n    requireMethods(store, [\"on\", \"un\", \"indexOfId\", \"getAt\", \"getCount\"]);\n    var model = view.getSelectionModel();\n    requireMethods(model, [\"on\", \"un\", \"getSelections\", \"selectRow\"]);\n    if (view.getStore() !== store || panel.isDestroyed || store.isDestroyed || model.isDestroyed) { cancel(); return null; }\n    if (tuple && (tuple.panel !== panel || tuple.view !== view || tuple.store !== store || tuple.model !== model)) { cancel(); return null; }\n    if (!tuple) {\n      tuple = { panel: panel, view: view, store: store, model: model };\n      listen(panel, \"destroy\", cancel);\n      listen(panel, \"onNodeClick\", function (node) {\n        if (!node || !node.attributes || (reached && node.attributes.path !== parent)) cancel();\n      });\n      listen(store, \"beforeload\", function () {\n        pending++; resetQuiet(); inspect();\n      });\n      listen(store, \"load\", function () {\n        if (pending > 0) pending--;\n        resetQuiet(); check();\n      });\n      [\"exception\", \"loadexception\", \"destroy\"].forEach(function (event) { listen(store, event, cancel); });\n      listen(model, \"selectionchange\", function () { resetQuiet(); check(); });\n    }\n    var dir = panel.getCurrentDir(), params = store.baseParams;\n    // New File Station panels expose their APIs before the first directory is set.\n    // Keep the bound receiver guards and original deadline while startup finishes.\n    if (!reached && dir === undefined && (!params || params.folder_path === undefined)) return null;\n    if (!params || typeof params.folder_path !== \"string\") throw new Error(\"unsupported store path\");\n    // Native reconfigure/selection events can precede the store's path assignment.\n    if (dir === parent && params.folder_path === parent) reached = true;\n    if (reached && (dir !== parent || params.folder_path !== parent)) { cancel(); return null; }\n    var selections = model.getSelections();\n    if (!Array.isArray(selections)) throw new Error(\"unsupported selection\");\n    if (selections.some(function (record) { return !record || record.id !== path; })) { cancel(); return null; }\n    var index = store.indexOfId(path), count = store.getCount();\n    if (!Number.isInteger(index) || index < -1 || !Number.isInteger(count) || count < 0) throw new Error(\"unsupported store index\");\n    var record = index >= 0 ? store.getAt(index) : null;\n    if (index >= 0 && (!record || record.id !== path || index >= count)) throw new Error(\"inconsistent store\");\n    return { dir: dir, folder: params.folder_path, count: count, index: index, record: record, selected: selections.length > 0 };\n  }\n  function check() {\n    if (!active) return;\n    if (Date.now() >= expires || !canAct()) { cancel(); return; }\n    if (!win) return;\n    var state = inspect();\n    if (!active || !state) return;\n    if (pending || state.dir !== parent || state.folder !== parent || state.index < 0) { resetQuiet(); return; }\n    if (!previous || Object.keys(state).some(function (key) { return state[key] !== previous[key]; })) {\n      previous = state; quietSince = Date.now();\n    }\n    if (Date.now() - quietSince < REVEAL_RECOVERY_QUIET_MS) return;\n    var target = tuple, receiverWindow = win;\n    cancel(); // Release every observer before the one permitted selection mutation.\n    if (state.selected || !canAct()) return;\n    target.model.selectRow(state.index);\n    if (canAct() && !receiverWindow.isDestroyed && receiverWindow.getPanelInstance() === target.panel &&\n        target.panel.activeView === target.view && target.panel.activeDS === target.store &&\n        target.view.getSelectionModel() === target.model) target.view.scrollToItem(state.index);\n  }\n  function tick() {\n    poll = null;\n    try {\n      check();\n      if (active) poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    } catch (error) { cancel(); }\n  }\n  function receive(instance) {\n    if (!active || accepted) return;\n    accepted = true;\n    try {\n      if (Date.now() >= expires || !canAct()) { cancel(); return; }\n      win = instance && instance.window;\n      requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n      var owner = hostFileRevealOwners.get(win);\n      if (owner && owner.order > order) { cancel(); return; }\n      if (owner && owner.cancel) owner.cancel();\n      hostFileRevealOwners.set(win, { order: order, cancel: cancel });\n      [\"beforeclose\", \"close\", \"beforedestroy\", \"destroy\", \"hide\"].forEach(function (event) { listen(win, event, cancel); });\n      check();\n    } catch (error) { cancel(); }\n  }\n  try {\n    if (!parent || !hostFileRevealOwners || typeof setTimeout !== \"function\" || typeof clearTimeout !== \"function\" || typeof Date.now !== \"function\") {\n      cancel();\n    } else {\n      expires = Date.now() + REVEAL_RECOVERY_TIMEOUT_MS;\n      deadline = setTimeout(cancel, REVEAL_RECOVERY_TIMEOUT_MS);\n      poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    }\n  } catch (error) { cancel(); }\n  return { receive: receive, cancel: cancel };\n}\n\nfunction createHostAdapter(ctx) {\n  ctx = ctx || {};\n  var disposed = false, subscriptions = [], revealRecovery = null;\n  function launchApp(appId, config, receiverCallback) {\n    if (disposed) return { status: \"unavailable\" };\n    if (typeof appId !== \"string\" || !appId || /\\s/.test(appId)) return { status: \"invalid-input\" };\n    try {\n      if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n      var sds = SYNO.SDS, map = sds.Config && sds.Config.FnMap, notifier = sds.StatusNotifier;\n      if (typeof sds.AppLaunch !== \"function\" || !map ||\n          !Object.prototype.hasOwnProperty.call(map, appId) || !map[appId] || !notifier ||\n          typeof notifier.isAppEnabled !== \"function\" || !notifier.isAppEnabled(appId) ||\n          typeof notifier.isAppLaunchable !== \"function\" || !notifier.isAppLaunchable(appId)) {\n        return { status: \"unsupported\" };\n      }\n      if (receiverCallback) sds.AppLaunch(appId, config, undefined, receiverCallback);\n      else sds.AppLaunch(appId, config);\n      return { status: \"requested\" };\n    } catch (error) { return { status: \"failed\" }; }\n  }\n  function navigateFileStation(path, isDirectory) {\n    if (disposed) return { status: \"unavailable\" };\n    if (revealRecovery) revealRecovery.cancel();\n    revealRecovery = null;\n    function launchFile(appId, config) {\n      if (isDirectory) return launchApp(appId, config);\n      var recovery = createHostFileRevealRecovery(path, function () { return !disposed && revealRecovery === recovery; });\n      revealRecovery = recovery;\n      var result = launchApp(appId, config, recovery.receive);\n      if (result.status !== \"requested\") recovery.cancel();\n      return result;\n    }\n    return requestHostFileNavigation(launchFile, path, isDirectory);\n  }\n  function unsupportedOperation() { return { status: disposed ? \"unavailable\" : \"unsupported\" }; }\n  return Object.freeze({\n    platform: function () {\n      if (!disposed) return inspectHostPlatform(ctx);\n      return Object.freeze({\n        web: typeof window !== \"undefined\", host: \"unavailable\",\n        dsmStandalone: null, dsmLanguage: null, appLocale: null,\n        systemVersion: null, fullVersion: null, theme: null\n      });\n    },\n    setTitle: function (title) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof title !== \"string\") return { status: \"invalid-input\" };\n      try {\n        var platform = inspectHostPlatform(ctx);\n        if (platform.host === \"dsm\") {\n          if (typeof ctx.appWindow.setTitle !== \"function\") return { status: \"unsupported\" };\n          ctx.appWindow.setTitle(title, undefined, true);\n          return { status: \"ok\", target: \"dsm-window\" };\n        }\n        if (!platform.web) return { status: \"unavailable\" };\n        if (typeof document === \"undefined\") return { status: \"unsupported\" };\n        document.title = title;\n        return { status: \"ok\", target: \"document\" };\n      } catch (error) {\n        return { status: \"failed\" };\n      }\n    },\n    activateWindow: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        var activate = typeof win.toFront === \"function\" ? win.toFront : win.activate;\n        if (typeof activate !== \"function\") return { status: \"unsupported\" };\n        // DSM minimizes by hiding; show preserves maximized geometry, unlike restore.\n        if (win.hidden === true || win.minimized === true ||\n            (typeof win.isVisible === \"function\" && win.isVisible() === false)) {\n          if (typeof win.show !== \"function\") return { status: \"unsupported\" };\n          win.show();\n        }\n        activate.call(win);\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    requestClose: function () {\n      if (disposed) return { status: \"unavailable\" };\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        var win = ctx.appWindow;\n        // DSM returns a short-circuit value; only truthy means standalone main.\n        if (typeof win.close !== \"function\" || typeof win.isStandaloneMainWindow !== \"function\" ||\n            win.isStandaloneMainWindow()) return { status: \"unsupported\" };\n        if (win.canClose === false) return { status: \"blocked\" };\n        win.close();\n        return { status: \"requested\" };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openApp: function (appId) { return launchApp(appId, {}); },\n    openURL: function (raw) {\n      if (disposed || typeof window === \"undefined\") return { status: \"unavailable\" };\n      if (typeof raw !== \"string\" || !raw || /[\\s\\x00-\\x1f\\x7f]/.test(raw)) return { status: \"invalid-input\" };\n      if (typeof URL !== \"function\") return { status: \"unsupported\" };\n      var url;\n      try { url = new URL(raw); } catch (error) { return { status: \"invalid-input\" }; }\n      if ((url.protocol !== \"http:\" && url.protocol !== \"https:\") || url.username || url.password) return { status: \"invalid-input\" };\n      if (typeof window.open !== \"function\") return { status: \"unsupported\" };\n      try {\n        var opened = window.open(url.href, \"_blank\", \"noopener,noreferrer\");\n        return { status: \"requested\", windowHandleAvailable: !!opened };\n      } catch (error) { return { status: \"failed\" }; }\n    },\n    openFileManager: function (path) { return navigateFileStation(path, true); },\n    revealFile: function (path) { return navigateFileStation(path, false); },\n    openFile: unsupportedOperation,\n    showFileDetails: unsupportedOperation,\n    openAppSetting: unsupportedOperation,\n    subscribe: function (event, listener) {\n      if (disposed) return { status: \"unavailable\" };\n      if (typeof listener !== \"function\") return { status: \"invalid-input\" };\n      if (event !== \"window-resize\") return { status: \"unsupported\" };\n      var win, callback = listener, active = true;\n      function handler() { if (!disposed && callback) callback(); }\n      function unsubscribe() {\n        if (!active) return;\n        active = false;\n        callback = null;\n        var target = win;\n        win = null;\n        var index = subscriptions.indexOf(unsubscribe);\n        if (index !== -1) subscriptions.splice(index, 1);\n        try { if (target) target.un(\"resize\", handler, target); } catch (error) {}\n      }\n      try {\n        if (inspectHostPlatform(ctx).host !== \"dsm\") return { status: \"unsupported\" };\n        win = ctx.appWindow;\n        if (typeof win.on !== \"function\" || typeof win.un !== \"function\") return { status: \"unsupported\" };\n        subscriptions.push(unsubscribe);\n        win.on(\"resize\", handler, win);\n        if (disposed) return { status: \"unavailable\" };\n        return Object.freeze({ status: \"subscribed\", dispose: unsubscribe });\n      } catch (error) {\n        unsubscribe();\n        return { status: \"failed\" };\n      }\n    },\n    dispose: function () {\n      if (disposed) return;\n      disposed = true;\n      if (revealRecovery) revealRecovery.cancel();\n      revealRecovery = null;\n      subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });\n      ctx = null;\n    }\n  });\n}";
 /** A static, per-package factory for independent web shells; no Ext or transport. */
 export declare function renderHostAdapterScript(packageId: string): string;
 export declare function hostScriptName(build: number): string;

package/dist/standalone/host-adapter.js

@@ -1,9 +1,12 @@
 import { HOST_PLATFORM_RUNTIME } from "./host-platform.js";
+import { HOST_FILE_NAVIGATION_RUNTIME, HOST_FILE_REVEAL_RUNTIME } from "./host-file-navigation.js";
 export const HOST_ADAPTER_RUNTIME = `${HOST_PLATFORM_RUNTIME}
+${HOST_FILE_NAVIGATION_RUNTIME}
+${HOST_FILE_REVEAL_RUNTIME}
 function createHostAdapter(ctx) {
   ctx = ctx || {};
-  var disposed = false, subscriptions = [];
-  function launchApp(appId, config) {
+  var disposed = false, subscriptions = [], revealRecovery = null;
+  function launchApp(appId, config, receiverCallback) {
     if (disposed) return { status: "unavailable" };
     if (typeof appId !== "string" || !appId || /\\s/.test(appId)) return { status: "invalid-input" };
     try {
@@ -15,21 +18,24 @@ function createHostAdapter(ctx) {
           typeof notifier.isAppLaunchable !== "function" || !notifier.isAppLaunchable(appId)) {
         return { status: "unsupported" };
       }
-      sds.AppLaunch(appId, config);
+      if (receiverCallback) sds.AppLaunch(appId, config, undefined, receiverCallback);
+      else sds.AppLaunch(appId, config);
       return { status: "requested" };
     } catch (error) { return { status: "failed" }; }
   }
   function navigateFileStation(path, isDirectory) {
     if (disposed) return { status: "unavailable" };
-    if (typeof path !== "string" || path.length > 4096 || path.charAt(0) !== "/" ||
-        /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: "invalid-input" };
-    var parts = path.split("/");
-    if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {
-      return !part || part === "." || part === "..";
-    })) return { status: "invalid-input" };
-    var result = launchApp("SYNO.SDS.App.FileStation3.Instance", isDirectory ? { opendir: path } : { openfile: path });
-    if (result.status !== "requested") return result;
-    return { status: "requested", action: isDirectory ? "locate-folder" : "highlight-file" };
+    if (revealRecovery) revealRecovery.cancel();
+    revealRecovery = null;
+    function launchFile(appId, config) {
+      if (isDirectory) return launchApp(appId, config);
+      var recovery = createHostFileRevealRecovery(path, function () { return !disposed && revealRecovery === recovery; });
+      revealRecovery = recovery;
+      var result = launchApp(appId, config, recovery.receive);
+      if (result.status !== "requested") recovery.cancel();
+      return result;
+    }
+    return requestHostFileNavigation(launchFile, path, isDirectory);
   }
   function unsupportedOperation() { return { status: disposed ? "unavailable" : "unsupported" }; }
   return Object.freeze({
@@ -62,8 +68,17 @@ function createHostAdapter(ctx) {
     activateWindow: function () {
       if (disposed) return { status: "unavailable" };
       try {
-        if (inspectHostPlatform(ctx).host !== "dsm" || typeof ctx.appWindow.activate !== "function") return { status: "unsupported" };
-        ctx.appWindow.activate();
+        if (inspectHostPlatform(ctx).host !== "dsm") return { status: "unsupported" };
+        var win = ctx.appWindow;
+        var activate = typeof win.toFront === "function" ? win.toFront : win.activate;
+        if (typeof activate !== "function") return { status: "unsupported" };
+        // DSM minimizes by hiding; show preserves maximized geometry, unlike restore.
+        if (win.hidden === true || win.minimized === true ||
+            (typeof win.isVisible === "function" && win.isVisible() === false)) {
+          if (typeof win.show !== "function") return { status: "unsupported" };
+          win.show();
+        }
+        activate.call(win);
         return { status: "requested" };
       } catch (error) { return { status: "failed" }; }
     },
@@ -72,8 +87,9 @@ function createHostAdapter(ctx) {
       try {
         if (inspectHostPlatform(ctx).host !== "dsm") return { status: "unsupported" };
         var win = ctx.appWindow;
+        // DSM returns a short-circuit value; only truthy means standalone main.
         if (typeof win.close !== "function" || typeof win.isStandaloneMainWindow !== "function" ||
-            win.isStandaloneMainWindow() !== false) return { status: "unsupported" };
+            win.isStandaloneMainWindow()) return { status: "unsupported" };
         if (win.canClose === false) return { status: "blocked" };
         win.close();
         return { status: "requested" };
@@ -130,6 +146,8 @@ function createHostAdapter(ctx) {
     dispose: function () {
       if (disposed) return;
       disposed = true;
+      if (revealRecovery) revealRecovery.cancel();
+      revealRecovery = null;
       subscriptions.slice().forEach(function (unsubscribe) { unsubscribe(); });
       ctx = null;
     }

package/dist/standalone/host-file-navigation.d.ts

@@ -0,0 +1,7 @@
+/** Shared virtual-path validation and File Station request shaping. */
+export declare const HOST_FILE_NAVIGATION_RUNTIME = "\nfunction requestHostFileNavigation(launch, path, isDirectory) {\n  if (typeof path !== \"string\" || path.length > 4096 || path.charAt(0) !== \"/\" ||\n    /[\\x00-\\x1f\\x7f\\\\]/.test(path)) return { status: \"invalid-input\" };\n  var parts = path.split(\"/\");\n  if (/^volume[0-9]+$/i.test(parts[1]) || parts.slice(1).some(function (part) {\n    return !part || part === \".\" || part === \"..\";\n  })) return { status: \"invalid-input\" };\n  var result = launch(\"SYNO.SDS.App.FileStation3.Instance\", isDirectory ? { opendir: path } : { openfile: path });\n  if (result.status !== \"requested\") return result;\n  return { status: \"requested\", action: isDirectory ? \"locate-folder\" : \"highlight-file\" };\n}\n";
+export declare const REVEAL_RECOVERY_TIMEOUT_MS = 5000;
+export declare const REVEAL_RECOVERY_POLL_MS = 100;
+export declare const REVEAL_RECOVERY_QUIET_MS = 300;
+/** Best-effort recovery for File Station 1.4.x private structures. */
+export declare const HOST_FILE_REVEAL_RUNTIME = "\nvar REVEAL_RECOVERY_TIMEOUT_MS = 5000;\nvar REVEAL_RECOVERY_POLL_MS = 100;\nvar REVEAL_RECOVERY_QUIET_MS = 300;\nvar hostFileRevealOwners = null, hostFileRevealSequence = 0;\ntry { if (typeof WeakMap === \"function\") hostFileRevealOwners = new WeakMap(); } catch (error) {}\nfunction createHostFileRevealRecovery(path, canAct) {\n  var active = true, accepted = false, win = null, dom = null, tuple = null;\n  var poll = null, deadline = null, removers = [], reached = false, pending = 0;\n  var previous = null, quietSince = null, expires = 0, order = ++hostFileRevealSequence;\n  var parent = path.slice(0, path.lastIndexOf(\"/\"));\n  function cancel() {\n    if (!active) return;\n    active = false;\n    try { if (poll !== null) clearTimeout(poll); } catch (error) {}\n    try { if (deadline !== null) clearTimeout(deadline); } catch (error) {}\n    poll = deadline = null;\n    removers.splice(0).forEach(function (remove) { try { remove(); } catch (error) {} });\n    try {\n      if (win && hostFileRevealOwners.get(win).order === order) {\n        // Preserve ordering for a late older callback, without retaining its closures.\n        hostFileRevealOwners.set(win, { order: order, cancel: null });\n      }\n    } catch (error) {}\n    win = dom = tuple = previous = null;\n  }\n  function requireMethods(target, names) {\n    if (!target || names.some(function (name) { return typeof target[name] !== \"function\"; })) throw new Error(\"unsupported receiver\");\n  }\n  function guard(fn) {\n    return function () {\n      if (!active) return;\n      try { fn.apply(null, arguments); } catch (error) { cancel(); }\n    };\n  }\n  function listen(target, event, fn) {\n    requireMethods(target, [\"on\", \"un\"]);\n    var handler = guard(fn), remove = target.un;\n    removers.push(function () { remove.call(target, event, handler, target); });\n    target.on(event, handler, target);\n  }\n  function resetQuiet() { previous = null; quietSince = null; }\n  function inspect() {\n    requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n    if (win.isDestroyed || win.destroyed || !canAct()) { cancel(); return null; }\n    var element = win.getEl(), nextDom = element && element.dom;\n    if (!nextDom) { if (dom) cancel(); return null; }\n    requireMethods(nextDom, [\"addEventListener\", \"removeEventListener\"]);\n    if (dom && nextDom !== dom) { cancel(); return null; }\n    if (!dom) {\n      dom = nextDom;\n      [\"pointerdown\", \"mousedown\", \"touchstart\", \"keydown\", \"wheel\", \"click\", \"input\"].forEach(function (event) {\n        var remove = dom.removeEventListener, handler = guard(cancel), target = dom;\n        removers.push(function () { remove.call(target, event, handler, true); });\n        dom.addEventListener(event, handler, true);\n      });\n    }\n    var panel = win.getPanelInstance();\n    if (!panel) { if (tuple) cancel(); return null; }\n    requireMethods(panel, [\"getCurrentDir\", \"on\", \"un\"]);\n    var view = panel.activeView, store = panel.activeDS;\n    requireMethods(view, [\"getStore\", \"getSelectionModel\", \"scrollToItem\"]);\n    requireMethods(store, [\"on\", \"un\", \"indexOfId\", \"getAt\", \"getCount\"]);\n    var model = view.getSelectionModel();\n    requireMethods(model, [\"on\", \"un\", \"getSelections\", \"selectRow\"]);\n    if (view.getStore() !== store || panel.isDestroyed || store.isDestroyed || model.isDestroyed) { cancel(); return null; }\n    if (tuple && (tuple.panel !== panel || tuple.view !== view || tuple.store !== store || tuple.model !== model)) { cancel(); return null; }\n    if (!tuple) {\n      tuple = { panel: panel, view: view, store: store, model: model };\n      listen(panel, \"destroy\", cancel);\n      listen(panel, \"onNodeClick\", function (node) {\n        if (!node || !node.attributes || (reached && node.attributes.path !== parent)) cancel();\n      });\n      listen(store, \"beforeload\", function () {\n        pending++; resetQuiet(); inspect();\n      });\n      listen(store, \"load\", function () {\n        if (pending > 0) pending--;\n        resetQuiet(); check();\n      });\n      [\"exception\", \"loadexception\", \"destroy\"].forEach(function (event) { listen(store, event, cancel); });\n      listen(model, \"selectionchange\", function () { resetQuiet(); check(); });\n    }\n    var dir = panel.getCurrentDir(), params = store.baseParams;\n    // New File Station panels expose their APIs before the first directory is set.\n    // Keep the bound receiver guards and original deadline while startup finishes.\n    if (!reached && dir === undefined && (!params || params.folder_path === undefined)) return null;\n    if (!params || typeof params.folder_path !== \"string\") throw new Error(\"unsupported store path\");\n    // Native reconfigure/selection events can precede the store's path assignment.\n    if (dir === parent && params.folder_path === parent) reached = true;\n    if (reached && (dir !== parent || params.folder_path !== parent)) { cancel(); return null; }\n    var selections = model.getSelections();\n    if (!Array.isArray(selections)) throw new Error(\"unsupported selection\");\n    if (selections.some(function (record) { return !record || record.id !== path; })) { cancel(); return null; }\n    var index = store.indexOfId(path), count = store.getCount();\n    if (!Number.isInteger(index) || index < -1 || !Number.isInteger(count) || count < 0) throw new Error(\"unsupported store index\");\n    var record = index >= 0 ? store.getAt(index) : null;\n    if (index >= 0 && (!record || record.id !== path || index >= count)) throw new Error(\"inconsistent store\");\n    return { dir: dir, folder: params.folder_path, count: count, index: index, record: record, selected: selections.length > 0 };\n  }\n  function check() {\n    if (!active) return;\n    if (Date.now() >= expires || !canAct()) { cancel(); return; }\n    if (!win) return;\n    var state = inspect();\n    if (!active || !state) return;\n    if (pending || state.dir !== parent || state.folder !== parent || state.index < 0) { resetQuiet(); return; }\n    if (!previous || Object.keys(state).some(function (key) { return state[key] !== previous[key]; })) {\n      previous = state; quietSince = Date.now();\n    }\n    if (Date.now() - quietSince < REVEAL_RECOVERY_QUIET_MS) return;\n    var target = tuple, receiverWindow = win;\n    cancel(); // Release every observer before the one permitted selection mutation.\n    if (state.selected || !canAct()) return;\n    target.model.selectRow(state.index);\n    if (canAct() && !receiverWindow.isDestroyed && receiverWindow.getPanelInstance() === target.panel &&\n        target.panel.activeView === target.view && target.panel.activeDS === target.store &&\n        target.view.getSelectionModel() === target.model) target.view.scrollToItem(state.index);\n  }\n  function tick() {\n    poll = null;\n    try {\n      check();\n      if (active) poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    } catch (error) { cancel(); }\n  }\n  function receive(instance) {\n    if (!active || accepted) return;\n    accepted = true;\n    try {\n      if (Date.now() >= expires || !canAct()) { cancel(); return; }\n      win = instance && instance.window;\n      requireMethods(win, [\"getPanelInstance\", \"getEl\", \"on\", \"un\"]);\n      var owner = hostFileRevealOwners.get(win);\n      if (owner && owner.order > order) { cancel(); return; }\n      if (owner && owner.cancel) owner.cancel();\n      hostFileRevealOwners.set(win, { order: order, cancel: cancel });\n      [\"beforeclose\", \"close\", \"beforedestroy\", \"destroy\", \"hide\"].forEach(function (event) { listen(win, event, cancel); });\n      check();\n    } catch (error) { cancel(); }\n  }\n  try {\n    if (!parent || !hostFileRevealOwners || typeof setTimeout !== \"function\" || typeof clearTimeout !== \"function\" || typeof Date.now !== \"function\") {\n      cancel();\n    } else {\n      expires = Date.now() + REVEAL_RECOVERY_TIMEOUT_MS;\n      deadline = setTimeout(cancel, REVEAL_RECOVERY_TIMEOUT_MS);\n      poll = setTimeout(tick, REVEAL_RECOVERY_POLL_MS);\n    }\n  } catch (error) { cancel(); }\n  return { receive: receive, cancel: cancel };\n}\n";