@synopackageland/cli 0.5.0 → 0.6.0

package/dist/standalone/resource.d.ts

@@ -1,4 +1,4 @@
-import type { Background } from "./background.js";
+import type { Capabilities } from "./manifest.js";
 import { type SharedFolder } from "./shared-folder.js";
 /**
  * `conf/resource` for a native package: only DSM's official `data-share` and
@@ -6,6 +6,6 @@ import { type SharedFolder } from "./shared-folder.js";
  */
 export declare function renderStandaloneResource(m: {
     package: string;
-    background?: Background;
+    capabilities: Capabilities;
     sharedFolder?: SharedFolder;
 }): string | undefined;

package/dist/standalone/resource.js

@@ -7,7 +7,7 @@ export function renderStandaloneResource(m) {
     const dataShare = m.sharedFolder && sharedFolderResource(m.package, m.sharedFolder);
     const resource = {
         ...(dataShare ? { "data-share": dataShare } : {}),
-        ...(m.background ? { "systemd-user-unit": {} } : {}),
+        ...(m.capabilities.jobs ? { "systemd-user-unit": {} } : {}),
     };
     return Object.keys(resource).length > 0 ? JSON.stringify(resource) : undefined;
 }

package/dist/standalone/root-ops.d.ts

@@ -1,16 +1,8 @@
 import type { StandaloneError } from "./manifest.js";
-/**
- * Root operations of a `privilege: root` Standalone Package. Each
- * `root/<name>.sh` becomes the fixed script of one disabled DSM Task
- * Scheduler task owned by root, which a DSM administrator creates through
- * DSM's own password confirmation and runs on demand. The package itself
- * never runs as root and nothing it can write is ever executed as root.
- */
+/** Fixed root scripts are dispatched only through executor root.run. */
 export interface RootOp {
     name: string;
     body: string;
-    /** Internal generator flag for protected helper control output. */
-    protectedOutput?: boolean;
 }
 export type RootOpsResult = {
     ok: true;
@@ -20,23 +12,4 @@ export type RootOpsResult = {
     errors: StandaloneError[];
 };
 export declare const ROOT_OPS_DIR = "root";
-export declare const ROOT_OP_END = "SYNOPKGLAND_ROOT_OP_END";
-export declare function rootTaskName(packageId: string, op: string): string;
-/**
- * The fixed start of an operation's task text. It does not carry the version,
- * so the window can tell its own outdated task from someone else's.
- */
-export declare function rootTaskHeader(packageId: string, op: string): string;
-/** Root-owned tmpfs folder the tasks write to; the package account can only read it. */
-export declare function rootOutputDir(packageId: string): string;
 export declare function loadRootOps(dir: string): RootOpsResult;
-/**
- * The exact text of the DSM task. The body runs from a quoted here-document
- * (no expansion) and its stdout replaces `<op>.out` in the root-owned run
- * folder. The package version is part of the text, so every upgrade changes
- * what the administrator approved and needs approval again.
- */
-export declare function renderRootTaskScript(manifest: {
-    package: string;
-    spkVersion: string;
-}, op: RootOp): string;

package/dist/standalone/root-ops.js

@@ -1,29 +1,14 @@
 import { existsSync, lstatSync, readdirSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 export const ROOT_OPS_DIR = "root";
-export const ROOT_OP_END = "SYNOPKGLAND_ROOT_OP_END";
 const MAX_ROOT_OP_BYTES = 16 * 1024;
 const OP_FILE = /^([a-z][a-z0-9_]{0,31})\.sh$/;
-export function rootTaskName(packageId, op) {
-    return `${packageId} root: ${op}`;
-}
-/**
- * The fixed start of an operation's task text. It does not carry the version,
- * so the window can tell its own outdated task from someone else's.
- */
-export function rootTaskHeader(packageId, op) {
-    return `#!/bin/sh\n# synopkgland root operation "${op}" of ${packageId} `;
-}
-/** Root-owned tmpfs folder the tasks write to; the package account can only read it. */
-export function rootOutputDir(packageId) {
-    return `/run/synopkgland-${packageId}`;
-}
 export function loadRootOps(dir) {
     const names = existsSync(dir) ? readdirSync(dir).sort() : [];
     if (names.length === 0) {
         return {
             ok: false,
-            errors: [{ code: "STANDALONE_ROOT_OPS_MISSING", message: `privilege: root 需要 ${ROOT_OPS_DIR}/<名稱>.sh，至少一個 root 操作。` }],
+            errors: [{ code: "STANDALONE_ROOT_OPS_MISSING", message: `capabilities.rootOps: true 需要 ${ROOT_OPS_DIR}/<名稱>.sh，至少一個 root 操作。` }],
         };
     }
     const errors = [];
@@ -55,47 +40,5 @@ function readRootOp(path, file) {
     if (!body.startsWith("#!/bin/sh\n") || body.includes("\0") || body.includes("�")) {
         return { error: "必須是以 #!/bin/sh 開頭的 UTF-8 文字 script。" };
     }
-    if (body.split("\n").includes(ROOT_OP_END)) {
-        return { error: `不可包含單獨一行的 ${ROOT_OP_END}。` };
-    }
     return { name, body };
 }
-/**
- * The exact text of the DSM task. The body runs from a quoted here-document
- * (no expansion) and its stdout replaces `<op>.out` in the root-owned run
- * folder. The package version is part of the text, so every upgrade changes
- * what the administrator approved and needs approval again.
- */
-export function renderRootTaskScript(manifest, op) {
-    const body = op.body.endsWith("\n") ? op.body : `${op.body}\n`;
-    return `${rootTaskHeader(manifest.package, op.name)}${manifest.spkVersion}.
-# Approved by a DSM administrator; runs only when this task is run.
-set -eu
-umask 022
-PATH=/usr/sbin:/usr/bin:/sbin:/bin
-export PATH
-dir=${rootOutputDir(manifest.package)}
-${op.protectedOutput ? `[ "$(id -u)" = 0 ]
-[ ! -L /run ] && [ "$(stat -c %u /run)" = 0 ]
-[ ! -L "$dir" ]
-if [ ! -e "$dir" ]; then mkdir -m 0755 "$dir"; fi
-[ -d "$dir" ] && [ "$(stat -c %u "$dir")" = 0 ]
-output_mode=$(stat -c %a "$dir")
-[ "$((0$output_mode & 0022))" = 0 ]
-` : `if [ -L "$dir" ] || [ ! -d "$dir" ]; then
-  rm -f "$dir"
-  mkdir -m 0755 "$dir"
-fi
-`}tmp=$(mktemp "$dir/.${op.name}.XXXXXX")
-if /bin/sh -eu >"$tmp" <<'${ROOT_OP_END}'
-${body}${ROOT_OP_END}
-then
-  chmod 0644 "$tmp"
-  mv -f "$tmp" "$dir/${op.name}.out"
-else
-  status=$?
-  rm -f "$tmp"
-  exit "$status"
-fi
-`;
-}

package/dist/standalone/root-window.d.ts

@@ -1,38 +1,5 @@
-import { type RootOp } from "./root-ops.js";
-/** What the window embeds per root operation: the task it may create, and how to recognize it. */
-export interface RootTask {
-    op: string;
-    name: string;
-    header: string;
-    script: string;
-    /** Whether the package backend serves `root.output` for this op; helper ops report through the helper instead. */
-    output: boolean;
-}
-export declare function rootTasks(manifest: {
-    package: string;
-    spkVersion: string;
-    rootOps?: RootOp[];
-}): RootTask[];
-/**
- * `createRootAccess(options)` → `{ state, authorize, run, remove }`, plain
- * ES5 for DSM's desktop. Every DSM call goes through `options.send` (the
- * AppWindow's sendWebAPI) as the signed-in administrator:
- *
- * - authorize: DSM's own password confirmation, then one disabled root task
- *   with exactly the embedded script. The one-use token goes into that single
- *   create call and is never kept.
- * - run: re-reads the task and runs it only if it is still exactly ours, then
- *   waits for its history entry and asks the backend for the output. Repair
- *   additionally requires fresh PasswordConfirm and another exact task check.
- * - an older version of our task is "outdated" and never runs; authorizing
- *   again replaces it. A same-named task that is not ours is a "conflict" and
- *   is never run, replaced or deleted.
- */
-export declare const ROOT_RUNTIME = "function createRootAccess(options) {\n  var API = \"SYNO.Core.TaskScheduler\";\n  var POLL_MS = 500, POLLS = 60;\n  var byOp = {}, running = {};\n  var legacy = null, probe = null;\n  options.tasks.forEach(function (task) { byOp[task.op] = task; });\n\n  function fail(code) {\n    var error = new Error(code);\n    error.code = code;\n    return error;\n  }\n  function begin(op) {\n    if (!Object.prototype.hasOwnProperty.call(byOp, op)) return Promise.reject(fail(\"root_unknown_op\"));\n    if (options.user().admin !== true) return Promise.reject(fail(\"admin_required\"));\n    return Promise.resolve(byOp[op]);\n  }\n  function readOutput(task) {\n    return task.output ? options.call(\"root.output\", { op: task.op }) : Promise.resolve(null);\n  }\n  function isRootTask(summary) {\n    return summary.owner === \"root\" && summary.real_owner === \"root\" && summary.enable === false && summary.type === \"script\";\n  }\n  function listTasks() {\n    if (legacy === false) return options.send(API, \"list\", 3, { start: 0, limit: 500 });\n    if (legacy === true) return legacyList();\n    if (!probe) {\n      probe = options.send(API, \"list\", 3, { start: 0, limit: 500 }).then(function (data) {\n        legacy = false;\n        return data;\n      }, function (error) {\n        if (!error || (error.code !== \"dsm_103\" && error.code !== 103)) {\n          probe = null;\n          throw error;\n        }\n        legacy = true;\n        return legacyList();\n      });\n    }\n    return probe;\n  }\n  function legacyList() {\n    return options.send(API, \"list\", 2, { offset: 0, limit: 500 }).then(function (data) {\n      // Refuse a truncated snapshot: a same-named task could lie outside it.\n      if (!data || !Array.isArray(data.tasks) || data.tasks.length > 500\n          || !(typeof data.total === \"number\" && isFinite(data.total) && Math.floor(data.total) === data.total) || data.total !== data.tasks.length) throw fail(\"root_bad_response\");\n      return data;\n    });\n  }\n  function readTask(ref) {\n    return options.send(API, \"get\", legacy ? 3 : 4, ref);\n  }\n  function createTask(params) {\n    return options.send(legacy ? API : API + \".Root\", \"create\", legacy ? 3 : 4, params);\n  }\n  function deleteTask(ref) {\n    return options.send(API, \"delete\", 2, { tasks: [ref] });\n  }\n  function runTask(ref) {\n    return options.send(API, \"run\", 2, { tasks: [ref] });\n  }\n  function find(task) {\n    return listTasks().then(function (data) {\n      if (!data || !Array.isArray(data.tasks)) throw fail(\"root_bad_response\");\n      var named = data.tasks.filter(function (summary) { return summary && summary.name === task.name; });\n      if (named.length === 0) return { state: \"missing\" };\n      if (named.length > 1 || !isRootTask(named[0])) return { state: \"conflict\" };\n      var ref = { id: named[0].id, real_owner: named[0].real_owner };\n      return readTask(ref).then(function (detail) {\n        var script = detail && detail.extra && detail.extra.script;\n        if (!detail || String(detail.id) !== String(ref.id) || detail.name !== task.name\n            || detail.owner !== \"root\" || detail.real_owner !== ref.real_owner || detail.enable !== false || detail.type !== \"script\" || typeof script !== \"string\") {\n          return { state: \"conflict\" };\n        }\n        if (script === task.script) return { state: \"ready\", ref: ref };\n        if (script.indexOf(task.header) === 0) return { state: \"outdated\", ref: ref };\n        return { state: \"conflict\" };\n      });\n    });\n  }\n  function definition(task, user) {\n    var hours = [];\n    for (var h = 1; h <= 23; h++) hours.push(h);\n    return {\n      name: task.name,\n      real_owner: user,\n      owner: \"root\",\n      enable: false,\n      type: \"script\",\n      schedule: {\n        date_type: 0, week_day: \"0,1,2,3,4,5,6\", repeat_date: 1001, monthly_week: [], hour: 0, minute: 0,\n        repeat_hour: 0, repeat_min: 0, last_work_hour: 0,\n        repeat_min_store_config: [1, 5, 10, 15, 20, 30], repeat_hour_store_config: hours\n      },\n      extra: { notify_enable: false, script: task.script, notify_mail: \"\", notify_if_error: false }\n    };\n  }\n  function newest(history) {\n    if (!Array.isArray(history)) throw fail(\"root_bad_response\");\n    return history.reduce(function (latest, entry) {\n      return entry && (!latest || Number(entry.timestamp) > Number(latest.timestamp)) ? entry : latest;\n    }, null);\n  }\n  function history(ref) {\n    return options.send(API, \"get_history_status_list\", 1, { id: ref.id }).then(newest);\n  }\n  function waitForRun(ref, before, polls) {\n    return history(ref).then(function (latest) {\n      var finished = latest && (!before || latest.timestamp !== before.timestamp)\n        && latest.exit_type !== \"running\" && latest.stop_time;\n      if (finished) {\n        if (latest.exit_code !== 0) throw fail(\"root_task_failed\");\n        return;\n      }\n      if (polls <= 1) throw fail(\"root_timeout\");\n      return options.wait(POLL_MS).then(function () { return waitForRun(ref, before, polls - 1); });\n    });\n  }\n\n  function validTime(value) {\n    if (typeof value !== \"string\" || !/^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}$/.test(value)) return false;\n    var normalized = value.replace(\" \", \"T\") + \"Z\";\n    var date = new Date(normalized);\n    return !isNaN(date.getTime()) && date.toISOString().slice(0, 19) === normalized.slice(0, 19);\n  }\n  function bounded(call, deadline) {\n    // A poll count alone cannot bound a stalled DSM callback. Discard late replies.\n    return new Promise(function (resolve, reject) {\n      var remaining = deadline - Date.now();\n      if (remaining <= 0) { reject(fail(\"root_timeout\")); return; }\n      var timer = setTimeout(function () { reject(fail(\"root_timeout\")); }, remaining);\n      Promise.resolve().then(call).then(function (value) {\n        clearTimeout(timer);\n        if (Date.now() >= deadline) reject(fail(\"root_timeout\"));\n        else resolve(value);\n      }, function (error) { clearTimeout(timer); reject(error); });\n    });\n  }\n  function legacyHistory(ref, deadline) {\n    return bounded(function () { return options.send(API, \"view\", 1, { id: ref.id }); }, deadline).then(function (records) {\n      // DSM 7.1 omits data entirely when a task has never run.\n      if (records === undefined) records = [];\n      if (!Array.isArray(records) || records.length > 500) throw fail(\"root_bad_response\");\n      var seen = {};\n      records.forEach(function (record) {\n        if (!record || !validTime(record.start_time) || typeof record.stop_time !== \"string\"\n            || (record.stop_time && (!validTime(record.stop_time) || record.stop_time < record.start_time))\n            || typeof record.exit_type !== \"string\" || !(typeof record.exit_code === \"number\" && isFinite(record.exit_code) && Math.floor(record.exit_code) === record.exit_code)\n            || seen[record.start_time]) throw fail(\"root_bad_response\");\n        seen[record.start_time] = true;\n      });\n      return records;\n    });\n  }\n  function waitForLegacyRun(ref, before, deadline, polls) {\n    return legacyHistory(ref, deadline).then(function (records) {\n      var previous = before.map(function (record) { return record.start_time; });\n      var newestBefore = previous.slice().sort().pop();\n      var fresh = records.filter(function (record) { return previous.indexOf(record.start_time) === -1; });\n      if (fresh.length > 1) throw fail(\"root_bad_response\");\n      var latest = fresh[0];\n      if (latest && (!newestBefore || latest.start_time > newestBefore) && latest.stop_time) {\n        if (latest.exit_code !== 0 || latest.exit_type !== \"normal\") throw fail(\"root_task_failed\");\n        return;\n      }\n      if (polls <= 1 || Date.now() >= deadline) throw fail(\"root_timeout\");\n      return options.wait(Math.min(POLL_MS, deadline - Date.now())).then(function () {\n        return waitForLegacyRun(ref, before, deadline, polls - 1);\n      });\n    });\n  }\n  function execute(task, verified) {\n    if (!legacy) {\n      return history(verified.ref).then(function (before) {\n        return runTask(verified.ref).then(function () { return waitForRun(verified.ref, before, POLLS); });\n      });\n    }\n    var deadline = Date.now() + POLL_MS * POLLS;\n    return legacyHistory(verified.ref, deadline).then(function (before) {\n      if (before.some(function (record) { return !record.stop_time || record.exit_type === \"running\"; })) throw fail(\"root_not_ready\");\n      // Mutating calls are sent exactly once, never retried with another profile.\n      return bounded(function () { return runTask(verified.ref); }, deadline).then(function () {\n        return waitForLegacyRun(verified.ref, before, deadline, POLLS);\n      });\n    }).then(function () {\n      return bounded(function () { return find(task); }, deadline).then(function (after) {\n        if (after.state !== \"ready\" || String(after.ref.id) !== String(verified.ref.id)) throw fail(\"root_verify_failed\");\n      });\n    });\n  }\n  function performRun(op) {\n    return begin(op).then(function (task) {\n      return find(task).then(function (found) {\n        if (found.state !== \"ready\") throw fail(\"root_not_ready\");\n        var consent = op === \"helper_repair\" ? options.confirmPassword() : Promise.resolve({ confirmed: true });\n        return consent.then(function (confirmation) {\n          if (!confirmation || confirmation.confirmed !== true) throw fail(\"root_cancelled\");\n          return op === \"helper_repair\" ? begin(op).then(find) : found;\n        }).then(function (verified) {\n          if (verified.state !== \"ready\") throw fail(\"root_not_ready\");\n          return execute(task, verified);\n        });\n      }).then(function () { return readOutput(task); });\n    });\n  }\n\n  return {\n    state: function (op) {\n      return begin(op).then(find).then(function (found) { return found.state; });\n    },\n    authorize: function (op) {\n      return begin(op).then(function (task) {\n        return find(task).then(function (found) {\n          if (found.state === \"ready\") return \"ready\";\n          if (found.state === \"conflict\") throw fail(\"root_conflict\");\n          return options.confirmPassword().then(function (confirmation) {\n            if (!confirmation || confirmation.confirmed !== true) return \"cancelled\";\n            if (!legacy && (typeof confirmation.token !== \"string\" || !confirmation.token)) throw fail(\"root_verify_failed\");\n            var params = definition(task, options.user().name);\n            if (!legacy) params.SynoConfirmPWToken = confirmation.token;\n            // Re-read after the legacy client-side dialog before replacing a task.\n            var checked = legacy ? begin(op).then(find) : Promise.resolve(found);\n            return checked.then(function (current) {\n              if (current.state === \"conflict\") throw fail(\"root_conflict\");\n              if (current.state === \"ready\") return;\n              var replaced = current.state === \"outdated\" ? deleteTask(current.ref) : Promise.resolve();\n              return replaced.then(function () { return createTask(params); });\n            }).then(function () {\n              return find(task);\n            }).then(function (after) {\n              if (after.state !== \"ready\") throw fail(\"root_verify_failed\");\n              return \"ready\";\n            });\n          });\n        });\n      });\n    },\n    run: function (op) {\n      if (!Object.prototype.hasOwnProperty.call(byOp, op)) return Promise.reject(fail(\"root_unknown_op\"));\n      if (options.user().admin !== true) return Promise.reject(fail(\"admin_required\"));\n      if (running[op]) return running[op];\n      var pending = performRun(op).then(function (value) {\n        delete running[op];\n        return value;\n      }, function (error) { delete running[op]; throw error; });\n      running[op] = pending;\n      return pending;\n    },\n    remove: function (op) {\n      return begin(op).then(function (task) {\n        return find(task).then(function (found) {\n          if (found.state === \"missing\") return \"missing\";\n          if (found.state === \"conflict\") throw fail(\"root_conflict\");\n          return deleteTask(found.ref).then(function () {\n            return find(task);\n          }).then(function (after) {\n            if (after.state !== \"missing\") throw fail(\"root_verify_failed\");\n            return \"missing\";\n          });\n        });\n      });\n    },\n    output: function (op) {\n      return begin(op).then(readOutput);\n    }\n  };\n}";
-/**
- * The authorization panel the window shows above the app for each root
- * operation, identical in every package. `rootPanelView(model)` decides what
- * it shows; `mountRootPanel(host, access, i18n, tasks, admin)` draws it with
- * DOM text nodes only (no HTML from data).
- */
-export declare const ROOT_PANEL = "function rootPanelShowsResult(state) {\n  return state === \"ready\" || state === \"outdated\";\n}\n\nfunction rootPanelView(model) {\n  if (!model.admin) return { status: null, buttons: [], message: { key: \"admin_only\" } };\n  function buttons(actions) {\n    return actions.map(function (action) { return { action: action, disabled: model.busy === true }; });\n  }\n  if (model.error) {\n    return {\n      status: \"state.\" + model.state, buttons: buttons([\"retry\"]),\n      message: { key: \"error.\" + model.error, params: { name: model.name, code: model.error } }\n    };\n  }\n  var message = model.notice ? { key: model.notice } : null;\n  switch (model.state) {\n    case \"missing\":\n      return { status: \"state.missing\", buttons: buttons([\"authorize\"]), message: message };\n    case \"outdated\":\n      return { status: \"state.outdated\", buttons: buttons([\"authorize\", \"remove\"]), message: message };\n    case \"ready\":\n      return { status: \"state.ready\", buttons: buttons([\"run\", \"remove\"]), message: message };\n    case \"conflict\":\n      return { status: \"state.conflict\", buttons: buttons([\"retry\"]), message: { key: \"error.root_conflict\", params: { name: model.name } } };\n    default:\n      return { status: \"state.checking\", buttons: [], message: null };\n  }\n}\n\nfunction mountRootPanel(host, access, i18n, tasks, admin) {\n  var t = i18n.t;\n  function el(tag, className, text) {\n    var node = document.createElement(tag);\n    if (className) node.className = className;\n    if (text !== undefined) node.textContent = text;\n    return node;\n  }\n  function say(message) {\n    if (!message) return \"\";\n    var text = t(message.key, message.params);\n    return text === message.key && message.key.indexOf(\"error.\") === 0 ? t(\"error.default\", message.params) : text;\n  }\n  tasks.forEach(function (task) {\n    var model = { admin: admin, name: task.name, state: \"checking\", busy: false, error: null, notice: null };\n    var result = null;\n    var section = el(\"section\", \"dsmapp-rootpanel\");\n    host.appendChild(section);\n\n    function render() {\n      var view = rootPanelView(model);\n      while (section.firstChild) section.removeChild(section.firstChild);\n      section.appendChild(el(\"h2\", null, t(\"title\")));\n      section.appendChild(el(\"p\", null, t(\"intro\", { op: task.op })));\n      if (view.status) {\n        var facts = el(\"dl\");\n        facts.appendChild(el(\"dt\", null, t(\"status\")));\n        facts.appendChild(el(\"dd\", \"dsmapp-rootpanel-state\", t(view.status, { name: task.name })));\n        facts.appendChild(el(\"dt\", null, t(\"last_run\")));\n        facts.appendChild(el(\"dd\", null, result && result.modified\n          ? new Date(result.modified * 1000).toLocaleString(i18n.locale) : t(\"never\")));\n        section.appendChild(facts);\n      }\n      if (view.message) section.appendChild(el(\"p\", \"dsmapp-rootpanel-message\", say(view.message)));\n      if (result && typeof result.output === \"string\") {\n        section.appendChild(el(\"div\", \"dsmapp-rootpanel-label\", t(\"output\")));\n        section.appendChild(el(\"pre\", \"dsmapp-rootpanel-output\", result.output));\n      }\n      var actions = el(\"div\", \"dsmapp-rootpanel-actions\");\n      view.buttons.forEach(function (button) {\n        var node = el(\"button\", button.action === \"remove\" ? null : \"dsmapp-rootpanel-primary\", t(button.action));\n        node.type = \"button\";\n        node.disabled = button.disabled;\n        node.onclick = function () { act(button.action); };\n        actions.appendChild(node);\n      });\n      section.appendChild(actions);\n      if (admin && rootPanelShowsResult(model.state)) section.appendChild(el(\"p\", \"dsmapp-rootpanel-hint\", t(\"uninstall_hint\")));\n    }\n    function settle(promise, notice) {\n      model.busy = true;\n      model.error = null;\n      model.notice = null;\n      render();\n      return promise.then(function (value) {\n        model.notice = typeof notice === \"function\" ? notice(value) : notice;\n      }, function (error) {\n        if (error && error.code === \"root_cancelled\") model.notice = \"cancelled\";\n        else model.error = (error && error.code) || \"unknown\";\n      }).then(function () {\n        model.busy = false;\n        render();\n      });\n    }\n    function refresh(notice) {\n      return settle(access.state(task.op).then(function (state) {\n        model.state = state;\n        if (!rootPanelShowsResult(state)) return;\n        return access.output(task.op).then(function (out) { result = out; });\n      }), notice);\n    }\n    function refreshAfterChange() {\n      return model.error ? null : refresh(model.notice);\n    }\n    function act(action) {\n      if (action === \"retry\") return refresh(null);\n      if (action === \"authorize\") {\n        return settle(access.authorize(task.op), function (outcome) {\n          return outcome === \"cancelled\" ? \"cancelled\" : null;\n        }).then(refreshAfterChange);\n      }\n      if (action === \"run\") {\n        return settle(access.run(task.op).then(function (out) { result = out; }), \"completed\");\n      }\n      if (action === \"remove\") {\n        return settle(access.remove(task.op).then(function () { result = null; }), null).then(refreshAfterChange);\n      }\n    }\n    render();\n    if (admin) refresh(null);\n  });\n}";
+export { executorTasks as rootTasks, type ExecutorTask as RootTask } from '../runtime/executor-tasks.js';
+/** Exact readback is authoritative. PasswordConfirm tokens are reused immediately,
+ * across both Root APIs, and never persisted (DSM validity is about 300 seconds). */
+export declare const ROOT_RUNTIME: string;
+export declare const ROOT_PANEL = "function mountRootPanel(host, access, i18n, tasks, admin) {\n  if (!admin) return;\n  var status = document.createElement(\"p\"), approve = document.createElement(\"button\"), retry = document.createElement(\"button\");\n  approve.textContent = \"Approve background access\"; retry.textContent = \"Check status\";\n  host.appendChild(status); host.appendChild(approve); host.appendChild(retry);\n  function show(result) { status.textContent = result.state + (result.reason ? \": \" + result.reason : \"\"); approve.hidden = result.state !== \"needs-admin-approval\"; }\n  function run(fn) { approve.disabled = retry.disabled = true; return fn().then(show, function(e) { show({state: \"blocked\", reason: e.message || e.code}); }).then(function() { approve.disabled = retry.disabled = false; }); }\n  approve.onclick = function() { return run(function() { return access.authorize(); }); };\n  retry.onclick = function() { return run(function() { return access.status(); }); };\n  run(function() { return access.status().then(function(result) { return result.tasks && result.tasks.boot && result.tasks.control && result.tasks.boot.state === \"ready\" && result.tasks.control.state === \"ready\" ? access.control(\"start\") : result; }); });\n}";