@synopackageland/cli 0.6.0 → 0.6.1

package/dist/standalone/native-root-window.d.ts

@@ -0,0 +1,26 @@
+/** Build-time adapter for explicitly approved native product tasks. */
+/** What the window embeds per root operation: the task it may create, and how to recognize it. */
+export interface RootTask {
+    op: string;
+    name: string;
+    header: string;
+    script: string;
+    /** Whether the package backend serves `root.output` for this op; helper ops report through the helper instead. */
+    output: boolean;
+}
+/**
+ * `createRootAccess(options)` → `{ state, authorize, run, remove }`, plain
+ * ES5 for DSM's desktop. Every DSM call goes through `options.send` (the
+ * AppWindow's sendWebAPI) as the signed-in administrator:
+ *
+ * - authorize: DSM's own password confirmation, then one disabled root task
+ *   with exactly the embedded script. The one-use token goes into that single
+ *   create call and is never kept.
+ * - run: re-reads the task and runs it only if it is still exactly ours, then
+ *   waits for its history entry and asks the backend for the output. Repair
+ *   additionally requires fresh PasswordConfirm and another exact task check.
+ * - an older version of our task is "outdated" and never runs; authorizing
+ *   again replaces it. A same-named task that is not ours is a "conflict" and
+ *   is never run, replaced or deleted.
+ */
+export declare const ROOT_RUNTIME = "function createRootAccess(options) {\n  var API = \"SYNO.Core.TaskScheduler\";\n  var POLL_MS = 500, POLLS = 60;\n  var byOp = {}, running = {};\n  var legacy = null, probe = null;\n  options.tasks.forEach(function (task) { byOp[task.op] = task; });\n\n  function fail(code) {\n    var error = new Error(code);\n    error.code = code;\n    return error;\n  }\n  function begin(op) {\n    if (!Object.prototype.hasOwnProperty.call(byOp, op)) return Promise.reject(fail(\"root_unknown_op\"));\n    if (options.user().admin !== true) return Promise.reject(fail(\"admin_required\"));\n    return Promise.resolve(byOp[op]);\n  }\n  function readOutput(task) {\n    return task.output ? options.call(\"root.output\", { op: task.op }) : Promise.resolve(null);\n  }\n  function isRootTask(summary) {\n    return summary.owner === \"root\" && summary.real_owner === \"root\" && summary.enable === false && summary.type === \"script\";\n  }\n  function listTasks() {\n    if (legacy === false) return options.send(API, \"list\", 3, { start: 0, limit: 500 });\n    if (legacy === true) return legacyList();\n    if (!probe) {\n      probe = options.send(API, \"list\", 3, { start: 0, limit: 500 }).then(function (data) {\n        legacy = false;\n        return data;\n      }, function (error) {\n        if (!error || (error.code !== \"dsm_103\" && error.code !== 103)) {\n          probe = null;\n          throw error;\n        }\n        legacy = true;\n        return legacyList();\n      });\n    }\n    return probe;\n  }\n  function legacyList() {\n    return options.send(API, \"list\", 2, { offset: 0, limit: 500 }).then(function (data) {\n      // Refuse a truncated snapshot: a same-named task could lie outside it.\n      if (!data || !Array.isArray(data.tasks) || data.tasks.length > 500\n          || !(typeof data.total === \"number\" && isFinite(data.total) && Math.floor(data.total) === data.total) || data.total !== data.tasks.length) throw fail(\"root_bad_response\");\n      return data;\n    });\n  }\n  function readTask(ref) {\n    return options.send(API, \"get\", legacy ? 3 : 4, ref);\n  }\n  function createTask(params) {\n    return options.send(legacy ? API : API + \".Root\", \"create\", legacy ? 3 : 4, params);\n  }\n  function deleteTask(ref) {\n    return options.send(API, \"delete\", 2, { tasks: [ref] });\n  }\n  function runTask(ref) {\n    return options.send(API, \"run\", 2, { tasks: [ref] });\n  }\n  function find(task) {\n    return listTasks().then(function (data) {\n      if (!data || !Array.isArray(data.tasks)) throw fail(\"root_bad_response\");\n      var named = data.tasks.filter(function (summary) { return summary && summary.name === task.name; });\n      if (named.length === 0) return { state: \"missing\" };\n      if (named.length > 1 || !isRootTask(named[0])) return { state: \"conflict\" };\n      var ref = { id: named[0].id, real_owner: named[0].real_owner };\n      return readTask(ref).then(function (detail) {\n        var script = detail && detail.extra && detail.extra.script;\n        if (!detail || String(detail.id) !== String(ref.id) || detail.name !== task.name\n            || detail.owner !== \"root\" || detail.real_owner !== ref.real_owner || detail.enable !== false || detail.type !== \"script\" || typeof script !== \"string\") {\n          return { state: \"conflict\" };\n        }\n        if (script === task.script) return { state: \"ready\", ref: ref };\n        if (script.indexOf(task.header) === 0) return { state: \"outdated\", ref: ref };\n        return { state: \"conflict\" };\n      });\n    });\n  }\n  function definition(task, user) {\n    var hours = [];\n    for (var h = 1; h <= 23; h++) hours.push(h);\n    return {\n      name: task.name,\n      real_owner: user,\n      owner: \"root\",\n      enable: false,\n      type: \"script\",\n      schedule: {\n        date_type: 0, week_day: \"0,1,2,3,4,5,6\", repeat_date: 1001, monthly_week: [], hour: 0, minute: 0,\n        repeat_hour: 0, repeat_min: 0, last_work_hour: 0,\n        repeat_min_store_config: [1, 5, 10, 15, 20, 30], repeat_hour_store_config: hours\n      },\n      extra: { notify_enable: false, script: task.script, notify_mail: \"\", notify_if_error: false }\n    };\n  }\n  function newest(history) {\n    if (!Array.isArray(history)) throw fail(\"root_bad_response\");\n    return history.reduce(function (latest, entry) {\n      return entry && (!latest || Number(entry.timestamp) > Number(latest.timestamp)) ? entry : latest;\n    }, null);\n  }\n  function history(ref) {\n    return options.send(API, \"get_history_status_list\", 1, { id: ref.id }).then(newest);\n  }\n  function waitForRun(ref, before, polls) {\n    return history(ref).then(function (latest) {\n      var finished = latest && (!before || latest.timestamp !== before.timestamp)\n        && latest.exit_type !== \"running\" && latest.stop_time;\n      if (finished) {\n        if (latest.exit_code !== 0) throw fail(\"root_task_failed\");\n        return;\n      }\n      if (polls <= 1) throw fail(\"root_timeout\");\n      return options.wait(POLL_MS).then(function () { return waitForRun(ref, before, polls - 1); });\n    });\n  }\n\n  function validTime(value) {\n    if (typeof value !== \"string\" || !/^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}$/.test(value)) return false;\n    var normalized = value.replace(\" \", \"T\") + \"Z\";\n    var date = new Date(normalized);\n    return !isNaN(date.getTime()) && date.toISOString().slice(0, 19) === normalized.slice(0, 19);\n  }\n  function bounded(call, deadline) {\n    // A poll count alone cannot bound a stalled DSM callback. Discard late replies.\n    return new Promise(function (resolve, reject) {\n      var remaining = deadline - Date.now();\n      if (remaining <= 0) { reject(fail(\"root_timeout\")); return; }\n      var timer = setTimeout(function () { reject(fail(\"root_timeout\")); }, remaining);\n      Promise.resolve().then(call).then(function (value) {\n        clearTimeout(timer);\n        if (Date.now() >= deadline) reject(fail(\"root_timeout\"));\n        else resolve(value);\n      }, function (error) { clearTimeout(timer); reject(error); });\n    });\n  }\n  function legacyHistory(ref, deadline) {\n    return bounded(function () { return options.send(API, \"view\", 1, { id: ref.id }); }, deadline).then(function (records) {\n      // DSM 7.1 omits data entirely when a task has never run.\n      if (records === undefined) records = [];\n      if (!Array.isArray(records) || records.length > 500) throw fail(\"root_bad_response\");\n      var seen = {};\n      records.forEach(function (record) {\n        if (!record || !validTime(record.start_time) || typeof record.stop_time !== \"string\"\n            || (record.stop_time && (!validTime(record.stop_time) || record.stop_time < record.start_time))\n            || typeof record.exit_type !== \"string\" || !(typeof record.exit_code === \"number\" && isFinite(record.exit_code) && Math.floor(record.exit_code) === record.exit_code)\n            || seen[record.start_time]) throw fail(\"root_bad_response\");\n        seen[record.start_time] = true;\n      });\n      return records;\n    });\n  }\n  function waitForLegacyRun(ref, before, deadline, polls) {\n    return legacyHistory(ref, deadline).then(function (records) {\n      var previous = before.map(function (record) { return record.start_time; });\n      var newestBefore = previous.slice().sort().pop();\n      var fresh = records.filter(function (record) { return previous.indexOf(record.start_time) === -1; });\n      if (fresh.length > 1) throw fail(\"root_bad_response\");\n      var latest = fresh[0];\n      if (latest && (!newestBefore || latest.start_time > newestBefore) && latest.stop_time) {\n        if (latest.exit_code !== 0 || latest.exit_type !== \"normal\") throw fail(\"root_task_failed\");\n        return;\n      }\n      if (polls <= 1 || Date.now() >= deadline) throw fail(\"root_timeout\");\n      return options.wait(Math.min(POLL_MS, deadline - Date.now())).then(function () {\n        return waitForLegacyRun(ref, before, deadline, polls - 1);\n      });\n    });\n  }\n  function execute(task, verified) {\n    if (!legacy) {\n      return history(verified.ref).then(function (before) {\n        return runTask(verified.ref).then(function () { return waitForRun(verified.ref, before, POLLS); });\n      });\n    }\n    var deadline = Date.now() + POLL_MS * POLLS;\n    return legacyHistory(verified.ref, deadline).then(function (before) {\n      if (before.some(function (record) { return !record.stop_time || record.exit_type === \"running\"; })) throw fail(\"root_not_ready\");\n      // Mutating calls are sent exactly once, never retried with another profile.\n      return bounded(function () { return runTask(verified.ref); }, deadline).then(function () {\n        return waitForLegacyRun(verified.ref, before, deadline, POLLS);\n      });\n    }).then(function () {\n      return bounded(function () { return find(task); }, deadline).then(function (after) {\n        if (after.state !== \"ready\" || String(after.ref.id) !== String(verified.ref.id)) throw fail(\"root_verify_failed\");\n      });\n    });\n  }\n  function performRun(op) {\n    return begin(op).then(function (task) {\n      return find(task).then(function (found) {\n        if (found.state !== \"ready\") throw fail(\"root_not_ready\");\n        var consent = op === \"helper_repair\" ? options.confirmPassword() : Promise.resolve({ confirmed: true });\n        return consent.then(function (confirmation) {\n          if (!confirmation || confirmation.confirmed !== true) throw fail(\"root_cancelled\");\n          return op === \"helper_repair\" ? begin(op).then(find) : found;\n        }).then(function (verified) {\n          if (verified.state !== \"ready\") throw fail(\"root_not_ready\");\n          return execute(task, verified);\n        });\n      }).then(function () { return readOutput(task); });\n    });\n  }\n\n  return {\n    state: function (op) {\n      return begin(op).then(find).then(function (found) { return found.state; });\n    },\n    authorize: function (op) {\n      return begin(op).then(function (task) {\n        return find(task).then(function (found) {\n          if (found.state === \"ready\") return \"ready\";\n          if (found.state === \"conflict\") throw fail(\"root_conflict\");\n          return options.confirmPassword().then(function (confirmation) {\n            if (!confirmation || confirmation.confirmed !== true) return \"cancelled\";\n            if (!legacy && (typeof confirmation.token !== \"string\" || !confirmation.token)) throw fail(\"root_verify_failed\");\n            var params = definition(task, options.user().name);\n            if (!legacy) params.SynoConfirmPWToken = confirmation.token;\n            // Re-read after the legacy client-side dialog before replacing a task.\n            var checked = legacy ? begin(op).then(find) : Promise.resolve(found);\n            return checked.then(function (current) {\n              if (current.state === \"conflict\") throw fail(\"root_conflict\");\n              if (current.state === \"ready\") return;\n              var replaced = current.state === \"outdated\" ? deleteTask(current.ref) : Promise.resolve();\n              return replaced.then(function () { return createTask(params); });\n            }).then(function () {\n              return find(task);\n            }).then(function (after) {\n              if (after.state !== \"ready\") throw fail(\"root_verify_failed\");\n              return \"ready\";\n            });\n          });\n        });\n      });\n    },\n    run: function (op) {\n      if (!Object.prototype.hasOwnProperty.call(byOp, op)) return Promise.reject(fail(\"root_unknown_op\"));\n      if (options.user().admin !== true) return Promise.reject(fail(\"admin_required\"));\n      if (running[op]) return running[op];\n      var pending = performRun(op).then(function (value) {\n        delete running[op];\n        return value;\n      }, function (error) { delete running[op]; throw error; });\n      running[op] = pending;\n      return pending;\n    },\n    remove: function (op) {\n      return begin(op).then(function (task) {\n        return find(task).then(function (found) {\n          if (found.state === \"missing\") return \"missing\";\n          if (found.state === \"conflict\") throw fail(\"root_conflict\");\n          return deleteTask(found.ref).then(function () {\n            return find(task);\n          }).then(function (after) {\n            if (after.state !== \"missing\") throw fail(\"root_verify_failed\");\n            return \"missing\";\n          });\n        });\n      });\n    },\n    output: function (op) {\n      return begin(op).then(readOutput);\n    }\n  };\n}";

package/dist/standalone/native-root-window.js

@@ -0,0 +1,282 @@
+/**
+ * `createRootAccess(options)` → `{ state, authorize, run, remove }`, plain
+ * ES5 for DSM's desktop. Every DSM call goes through `options.send` (the
+ * AppWindow's sendWebAPI) as the signed-in administrator:
+ *
+ * - authorize: DSM's own password confirmation, then one disabled root task
+ *   with exactly the embedded script. The one-use token goes into that single
+ *   create call and is never kept.
+ * - run: re-reads the task and runs it only if it is still exactly ours, then
+ *   waits for its history entry and asks the backend for the output. Repair
+ *   additionally requires fresh PasswordConfirm and another exact task check.
+ * - an older version of our task is "outdated" and never runs; authorizing
+ *   again replaces it. A same-named task that is not ours is a "conflict" and
+ *   is never run, replaced or deleted.
+ */
+export const ROOT_RUNTIME = `function createRootAccess(options) {
+  var API = "SYNO.Core.TaskScheduler";
+  var POLL_MS = 500, POLLS = 60;
+  var byOp = {}, running = {};
+  var legacy = null, probe = null;
+  options.tasks.forEach(function (task) { byOp[task.op] = task; });
+
+  function fail(code) {
+    var error = new Error(code);
+    error.code = code;
+    return error;
+  }
+  function begin(op) {
+    if (!Object.prototype.hasOwnProperty.call(byOp, op)) return Promise.reject(fail("root_unknown_op"));
+    if (options.user().admin !== true) return Promise.reject(fail("admin_required"));
+    return Promise.resolve(byOp[op]);
+  }
+  function readOutput(task) {
+    return task.output ? options.call("root.output", { op: task.op }) : Promise.resolve(null);
+  }
+  function isRootTask(summary) {
+    return summary.owner === "root" && summary.real_owner === "root" && summary.enable === false && summary.type === "script";
+  }
+  function listTasks() {
+    if (legacy === false) return options.send(API, "list", 3, { start: 0, limit: 500 });
+    if (legacy === true) return legacyList();
+    if (!probe) {
+      probe = options.send(API, "list", 3, { start: 0, limit: 500 }).then(function (data) {
+        legacy = false;
+        return data;
+      }, function (error) {
+        if (!error || (error.code !== "dsm_103" && error.code !== 103)) {
+          probe = null;
+          throw error;
+        }
+        legacy = true;
+        return legacyList();
+      });
+    }
+    return probe;
+  }
+  function legacyList() {
+    return options.send(API, "list", 2, { offset: 0, limit: 500 }).then(function (data) {
+      // Refuse a truncated snapshot: a same-named task could lie outside it.
+      if (!data || !Array.isArray(data.tasks) || data.tasks.length > 500
+          || !(typeof data.total === "number" && isFinite(data.total) && Math.floor(data.total) === data.total) || data.total !== data.tasks.length) throw fail("root_bad_response");
+      return data;
+    });
+  }
+  function readTask(ref) {
+    return options.send(API, "get", legacy ? 3 : 4, ref);
+  }
+  function createTask(params) {
+    return options.send(legacy ? API : API + ".Root", "create", legacy ? 3 : 4, params);
+  }
+  function deleteTask(ref) {
+    return options.send(API, "delete", 2, { tasks: [ref] });
+  }
+  function runTask(ref) {
+    return options.send(API, "run", 2, { tasks: [ref] });
+  }
+  function find(task) {
+    return listTasks().then(function (data) {
+      if (!data || !Array.isArray(data.tasks)) throw fail("root_bad_response");
+      var named = data.tasks.filter(function (summary) { return summary && summary.name === task.name; });
+      if (named.length === 0) return { state: "missing" };
+      if (named.length > 1 || !isRootTask(named[0])) return { state: "conflict" };
+      var ref = { id: named[0].id, real_owner: named[0].real_owner };
+      return readTask(ref).then(function (detail) {
+        var script = detail && detail.extra && detail.extra.script;
+        if (!detail || String(detail.id) !== String(ref.id) || detail.name !== task.name
+            || detail.owner !== "root" || detail.real_owner !== ref.real_owner || detail.enable !== false || detail.type !== "script" || typeof script !== "string") {
+          return { state: "conflict" };
+        }
+        if (script === task.script) return { state: "ready", ref: ref };
+        if (script.indexOf(task.header) === 0) return { state: "outdated", ref: ref };
+        return { state: "conflict" };
+      });
+    });
+  }
+  function definition(task, user) {
+    var hours = [];
+    for (var h = 1; h <= 23; h++) hours.push(h);
+    return {
+      name: task.name,
+      real_owner: user,
+      owner: "root",
+      enable: false,
+      type: "script",
+      schedule: {
+        date_type: 0, week_day: "0,1,2,3,4,5,6", repeat_date: 1001, monthly_week: [], hour: 0, minute: 0,
+        repeat_hour: 0, repeat_min: 0, last_work_hour: 0,
+        repeat_min_store_config: [1, 5, 10, 15, 20, 30], repeat_hour_store_config: hours
+      },
+      extra: { notify_enable: false, script: task.script, notify_mail: "", notify_if_error: false }
+    };
+  }
+  function newest(history) {
+    if (!Array.isArray(history)) throw fail("root_bad_response");
+    return history.reduce(function (latest, entry) {
+      return entry && (!latest || Number(entry.timestamp) > Number(latest.timestamp)) ? entry : latest;
+    }, null);
+  }
+  function history(ref) {
+    return options.send(API, "get_history_status_list", 1, { id: ref.id }).then(newest);
+  }
+  function waitForRun(ref, before, polls) {
+    return history(ref).then(function (latest) {
+      var finished = latest && (!before || latest.timestamp !== before.timestamp)
+        && latest.exit_type !== "running" && latest.stop_time;
+      if (finished) {
+        if (latest.exit_code !== 0) throw fail("root_task_failed");
+        return;
+      }
+      if (polls <= 1) throw fail("root_timeout");
+      return options.wait(POLL_MS).then(function () { return waitForRun(ref, before, polls - 1); });
+    });
+  }
+
+  function validTime(value) {
+    if (typeof value !== "string" || !/^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}$/.test(value)) return false;
+    var normalized = value.replace(" ", "T") + "Z";
+    var date = new Date(normalized);
+    return !isNaN(date.getTime()) && date.toISOString().slice(0, 19) === normalized.slice(0, 19);
+  }
+  function bounded(call, deadline) {
+    // A poll count alone cannot bound a stalled DSM callback. Discard late replies.
+    return new Promise(function (resolve, reject) {
+      var remaining = deadline - Date.now();
+      if (remaining <= 0) { reject(fail("root_timeout")); return; }
+      var timer = setTimeout(function () { reject(fail("root_timeout")); }, remaining);
+      Promise.resolve().then(call).then(function (value) {
+        clearTimeout(timer);
+        if (Date.now() >= deadline) reject(fail("root_timeout"));
+        else resolve(value);
+      }, function (error) { clearTimeout(timer); reject(error); });
+    });
+  }
+  function legacyHistory(ref, deadline) {
+    return bounded(function () { return options.send(API, "view", 1, { id: ref.id }); }, deadline).then(function (records) {
+      // DSM 7.1 omits data entirely when a task has never run.
+      if (records === undefined) records = [];
+      if (!Array.isArray(records) || records.length > 500) throw fail("root_bad_response");
+      var seen = {};
+      records.forEach(function (record) {
+        if (!record || !validTime(record.start_time) || typeof record.stop_time !== "string"
+            || (record.stop_time && (!validTime(record.stop_time) || record.stop_time < record.start_time))
+            || typeof record.exit_type !== "string" || !(typeof record.exit_code === "number" && isFinite(record.exit_code) && Math.floor(record.exit_code) === record.exit_code)
+            || seen[record.start_time]) throw fail("root_bad_response");
+        seen[record.start_time] = true;
+      });
+      return records;
+    });
+  }
+  function waitForLegacyRun(ref, before, deadline, polls) {
+    return legacyHistory(ref, deadline).then(function (records) {
+      var previous = before.map(function (record) { return record.start_time; });
+      var newestBefore = previous.slice().sort().pop();
+      var fresh = records.filter(function (record) { return previous.indexOf(record.start_time) === -1; });
+      if (fresh.length > 1) throw fail("root_bad_response");
+      var latest = fresh[0];
+      if (latest && (!newestBefore || latest.start_time > newestBefore) && latest.stop_time) {
+        if (latest.exit_code !== 0 || latest.exit_type !== "normal") throw fail("root_task_failed");
+        return;
+      }
+      if (polls <= 1 || Date.now() >= deadline) throw fail("root_timeout");
+      return options.wait(Math.min(POLL_MS, deadline - Date.now())).then(function () {
+        return waitForLegacyRun(ref, before, deadline, polls - 1);
+      });
+    });
+  }
+  function execute(task, verified) {
+    if (!legacy) {
+      return history(verified.ref).then(function (before) {
+        return runTask(verified.ref).then(function () { return waitForRun(verified.ref, before, POLLS); });
+      });
+    }
+    var deadline = Date.now() + POLL_MS * POLLS;
+    return legacyHistory(verified.ref, deadline).then(function (before) {
+      if (before.some(function (record) { return !record.stop_time || record.exit_type === "running"; })) throw fail("root_not_ready");
+      // Mutating calls are sent exactly once, never retried with another profile.
+      return bounded(function () { return runTask(verified.ref); }, deadline).then(function () {
+        return waitForLegacyRun(verified.ref, before, deadline, POLLS);
+      });
+    }).then(function () {
+      return bounded(function () { return find(task); }, deadline).then(function (after) {
+        if (after.state !== "ready" || String(after.ref.id) !== String(verified.ref.id)) throw fail("root_verify_failed");
+      });
+    });
+  }
+  function performRun(op) {
+    return begin(op).then(function (task) {
+      return find(task).then(function (found) {
+        if (found.state !== "ready") throw fail("root_not_ready");
+        var consent = op === "helper_repair" ? options.confirmPassword() : Promise.resolve({ confirmed: true });
+        return consent.then(function (confirmation) {
+          if (!confirmation || confirmation.confirmed !== true) throw fail("root_cancelled");
+          return op === "helper_repair" ? begin(op).then(find) : found;
+        }).then(function (verified) {
+          if (verified.state !== "ready") throw fail("root_not_ready");
+          return execute(task, verified);
+        });
+      }).then(function () { return readOutput(task); });
+    });
+  }
+
+  return {
+    state: function (op) {
+      return begin(op).then(find).then(function (found) { return found.state; });
+    },
+    authorize: function (op) {
+      return begin(op).then(function (task) {
+        return find(task).then(function (found) {
+          if (found.state === "ready") return "ready";
+          if (found.state === "conflict") throw fail("root_conflict");
+          return options.confirmPassword().then(function (confirmation) {
+            if (!confirmation || confirmation.confirmed !== true) return "cancelled";
+            if (!legacy && (typeof confirmation.token !== "string" || !confirmation.token)) throw fail("root_verify_failed");
+            var params = definition(task, options.user().name);
+            if (!legacy) params.SynoConfirmPWToken = confirmation.token;
+            // Re-read after the legacy client-side dialog before replacing a task.
+            var checked = legacy ? begin(op).then(find) : Promise.resolve(found);
+            return checked.then(function (current) {
+              if (current.state === "conflict") throw fail("root_conflict");
+              if (current.state === "ready") return;
+              var replaced = current.state === "outdated" ? deleteTask(current.ref) : Promise.resolve();
+              return replaced.then(function () { return createTask(params); });
+            }).then(function () {
+              return find(task);
+            }).then(function (after) {
+              if (after.state !== "ready") throw fail("root_verify_failed");
+              return "ready";
+            });
+          });
+        });
+      });
+    },
+    run: function (op) {
+      if (!Object.prototype.hasOwnProperty.call(byOp, op)) return Promise.reject(fail("root_unknown_op"));
+      if (options.user().admin !== true) return Promise.reject(fail("admin_required"));
+      if (running[op]) return running[op];
+      var pending = performRun(op).then(function (value) {
+        delete running[op];
+        return value;
+      }, function (error) { delete running[op]; throw error; });
+      running[op] = pending;
+      return pending;
+    },
+    remove: function (op) {
+      return begin(op).then(function (task) {
+        return find(task).then(function (found) {
+          if (found.state === "missing") return "missing";
+          if (found.state === "conflict") throw fail("root_conflict");
+          return deleteTask(found.ref).then(function () {
+            return find(task);
+          }).then(function (after) {
+            if (after.state !== "missing") throw fail("root_verify_failed");
+            return "missing";
+          });
+        });
+      });
+    },
+    output: function (op) {
+      return begin(op).then(readOutput);
+    }
+  };
+}`;

package/dist/templates/native-authorization/AuthorizationGate.vue

@@ -0,0 +1,89 @@
+<script setup lang="ts">
+import {computed,onMounted,onUnmounted,ref} from 'vue'
+import {Button,Callout,Dialog,Surface} from '@synopackageland/ui'
+import {ShieldCheck,TriangleAlert} from '@lucide/vue'
+import type {AuthorizationStatus,Context} from '../context'
+import {authorizationCopy} from './i18n'
+const props=defineProps<{ctx:Context}>()
+const emit=defineEmits<{ready:[]}>()
+const state=ref<AuthorizationStatus>()
+const pendingState=ref<AuthorizationStatus>()
+const busy=ref(false)
+const failure=ref(false)
+const confirmRevoke=ref(false)
+let disposed=false,sequence=0,pendingRecheck=false
+let unsubscribe:(()=>void)|undefined
+const text=computed(()=>authorizationCopy(props.ctx.locale,props.ctx.displayName||'__DISPLAY_NAME__'))
+const ready=computed(()=>state.value?.state==='ready')
+const shown=computed(()=>state.value||pendingState.value)
+const required=computed(()=>shown.value?.state==='authorization_required')
+const untrusted=computed(()=>['helper_untrusted','cli_untrusted'].includes(shown.value?.reason||''))
+const canAuthorize=computed(()=>required.value&&!untrusted.value)
+const unavailableKey=computed(()=>shown.value?.reason==='credential_not_ready'?'credential':'unavailable')
+const title=computed(()=>!shown.value?text.value('checking'):required.value?text.value('title'):shown.value.state==='ready'?text.value('ready'):shown.value.state==='not_admin'?text.value('not_admin.title'):shown.value.state==='session_expired'?text.value('session_expired.title'):text.value(unavailableKey.value+'.title'))
+const body=computed(()=>required.value?text.value('purpose'):shown.value?.state==='not_admin'?text.value('not_admin.body'):shown.value?.state==='session_expired'?text.value('session_expired.body'):shown.value?.state==='unavailable'?text.value(unavailableKey.value+'.body'):text.value('purpose'))
+const reasons=['grant_missing','helper_untrusted','cli_untrusted','grant_incompatible','package_identity_changed','maintenance_task_missing','maintenance_task_mismatch','helper_health_rejected','capability_missing']
+const reason=computed(()=>reasons.includes(shown.value?.reason||'')?shown.value!.reason!:'unknown')
+const next=computed(()=>untrusted.value?'next.reinstall':reason.value==='grant_missing'?'next.install':reason.value==='grant_incompatible'?'next.update':'next.repair')
+async function action(method:'status'|'request'|'revoke'){
+ if(busy.value||disposed)return
+ const current=++sequence
+ pendingState.value=method==='request'&&state.value?.state==='authorization_required'?state.value:undefined
+ busy.value=true;failure.value=false
+ // Mutation/revalidation immediately hides application content. A request
+ // keeps its prior reason visible while DSM's confirmation is pending.
+ state.value=undefined
+ try {
+  const result=await props.ctx.authorization?.[method]()
+  if(disposed||current!==sequence)return
+  if(!result||result.command!=='authorization'||result.schema_version!==1||!['ready','authorization_required','not_admin','session_expired','unavailable'].includes(result.state))throw Error('invalid status')
+  state.value=result
+  if(result.state==='ready')emit('ready')
+ } catch(e){if(!disposed&&current===sequence){
+  state.value=(e as {code?:string}).code==='session_required'?{command:'authorization',schema_version:1,state:'session_expired',reason:'session_expired'}:pendingState.value||{command:'authorization',schema_version:1,state:'unavailable',reason:'service_unavailable'}
+  failure.value=true
+ }} finally{if(!disposed&&current===sequence){busy.value=false;pendingState.value=undefined;if(pendingRecheck){pendingRecheck=false;void action('status')}}}
+}
+onMounted(()=>{unsubscribe=props.ctx.reopen(()=>{if(busy.value)pendingRecheck=true;else void action('status')});void action('status')})
+onUnmounted(()=>{disposed=true;sequence++;if(typeof unsubscribe==='function')unsubscribe()})
+</script>
+<template>
+ <p class="authorization-announcement" role="status" aria-live="polite" aria-atomic="true">{{ busy ? text('authorizing') : title }}</p>
+ <div v-if="!ready" class="authorization-view" :aria-busy="busy" :data-authorization-state="state?.state || 'checking'">
+  <Surface class="authorization-card" padding="lg" raised :aria-label="title">
+   <span class="authorization-icon" aria-hidden="true"><component :is="shown?.state==='unavailable'||shown?.state==='session_expired'?TriangleAlert:ShieldCheck" class="authorization-icon-glyph" /></span>
+   <h1 class="authorization-title">{{ title }}</h1>
+   <p class="authorization-body">{{ body }}</p>
+   <Callout v-if="required" class="authorization-status" :tone="reason==='grant_missing'?'info':'warning'" :title="text('reason.'+reason)">{{ text(next) }}</Callout>
+   <Callout v-if="failure" class="authorization-failed" tone="warning">{{ text('failed') }}</Callout>
+   <div class="authorization-actions">
+    <Button v-if="canAuthorize" variant="primary" :loading="busy" :disabled="busy" @click="action('request')">{{ busy ? text('authorizing') : text('authorize') }}</Button>
+    <Button v-else variant="primary" :loading="busy" :disabled="busy" @click="action('status')">{{ busy ? text('checking') : text('retry') }}</Button>
+   </div>
+  </Surface>
+ </div>
+ <div v-else class="authorization-authorized">
+  <div class="authorization-ready"><ShieldCheck :size="16" aria-hidden="true"/><span>{{ text('ready') }}</span><Button v-if="ctx.authorization?.canManage?.()" variant="secondary" :disabled="busy" @click="confirmRevoke=true">{{ text('revoke') }}</Button></div>
+  <slot />
+ </div>
+ <Dialog v-model:open="confirmRevoke" :title="text('revoke.title')" :description="text('revoke.body')">
+  <template #footer><Button variant="secondary" @click="confirmRevoke=false">{{ text('cancel') }}</Button><Button variant="danger" :disabled="busy" @click="confirmRevoke=false;action('revoke')">{{ text('revoke') }}</Button></template>
+ </Dialog>
+</template>
+<style scoped>
+.authorization-announcement{position:absolute;width:1px;height:1px;overflow:hidden;clip-path:inset(50%);white-space:nowrap}
+/* T0156: auto margins center the whole card but preserve top scrolling in a short window. */
+.authorization-view{display:flex;align-items:flex-start;justify-content:center;min-height:100%;height:100%;box-sizing:border-box;padding:24px;overflow-y:auto;color:var(--ui-text);font-family:var(--ui-font-sans)}
+.authorization-card{display:flex;flex-direction:column;align-items:center;gap:12px;width:100%;max-width:28rem;margin:auto;text-align:center}
+.authorization-icon{display:flex;align-items:center;justify-content:center;width:48px;height:48px;flex-shrink:0;border-radius:9999px;background:var(--ui-primary-soft);color:var(--ui-primary)}
+.authorization-icon-glyph{width:24px;height:24px}
+.authorization-title{font-size:16px;font-weight:600;line-height:1.4;color:var(--ui-text);margin:0;text-wrap:balance}
+.authorization-body{max-width:24rem;font-size:13px;line-height:1.6;color:var(--ui-text);margin:0;text-align:center;text-wrap:pretty}
+.authorization-status,.authorization-failed{width:100%;text-align:left}
+/* Essential recovery text uses the full foreground; DSM's muted token is below 4.5:1. */
+.authorization-status,.authorization-failed{color:var(--ui-text)}
+.authorization-actions{display:flex;justify-content:center;width:100%;margin-top:4px}
+.authorization-authorized{display:flex;flex-direction:column;height:100%;min-height:0}.authorization-authorized :deep(.app-shell){flex:1;min-height:0;height:auto}
+.authorization-ready{display:flex;align-items:center;justify-content:flex-end;gap:8px;padding:8px 16px;color:var(--ui-text);font:13px var(--ui-font-sans)}
+@media(max-width:480px){.authorization-view{padding:16px}}
+</style>

package/dist/templates/native-authorization/i18n/de.json

@@ -0,0 +1,36 @@
+{
+  "authorization.title": "{package} benötigt Ihre Erlaubnis",
+  "authorization.purpose": "Dieses Paket benötigt eine Genehmigung für feste Root-Operationen. DSM verarbeitet Ihr Passwort; das Paket sieht oder speichert es nicht.",
+  "authorization.reason.grant_missing": "Root-Operationen sind noch nicht autorisiert.",
+  "authorization.reason.helper_untrusted": "Dem privilegierten Helfer konnte nicht vertraut werden.",
+  "authorization.reason.cli_untrusted": "Dem privilegierten Befehl konnte nicht vertraut werden.",
+  "authorization.reason.grant_incompatible": "Der privilegierte Helfer muss aktualisiert werden.",
+  "authorization.reason.package_identity_changed": "Das Paketkonto hat sich geändert.",
+  "authorization.reason.maintenance_task_missing": "Die Wartungsaufgabe fehlt.",
+  "authorization.reason.maintenance_task_mismatch": "Die Wartungsaufgabe passt nicht mehr zur Berechtigung.",
+  "authorization.reason.helper_health_rejected": "Der privilegierte Helfer hat seine Integritätsprüfung nicht bestanden.",
+  "authorization.reason.capability_missing": "Dem privilegierten Helfer fehlt eine erforderliche Fähigkeit.",
+  "authorization.reason.unknown": "Die Berechtigung fehlt oder ist nicht mehr gültig.",
+  "authorization.next.install": "Wählen Sie Autorisieren und bestätigen Sie Ihr DSM-Passwort, um diesen Build zu genehmigen.",
+  "authorization.next.update": "Dieser Build benötigt eine neue Autorisierung. Wählen Sie Autorisieren und bestätigen Sie Ihr DSM-Passwort.",
+  "authorization.next.repair": "Prüfen Sie die Aufgaben dieses Pakets im Aufgabenplaner und versuchen Sie es erneut.",
+  "authorization.authorize": "Berechtigen",
+  "authorization.authorizing": "Warten auf DSM…",
+  "authorization.failed": "Die Berechtigung wurde nicht abgeschlossen. Sie können es erneut versuchen.",
+  "authorization.unavailable.title": "Berechtigung konnte nicht geprüft werden",
+  "authorization.unavailable.body": "Das ist meist vorübergehend. Versuchen Sie es erneut; {package} fragt nicht nach Ihrem Passwort.",
+  "authorization.credential.title": "Die DSM-Anmeldeinformationen sind nicht bereit",
+  "authorization.credential.body": "Diese DSM-Sitzung wurde ohne Anmeldung mit Kennwort wiederhergestellt, daher kann DSM die Anfragen von {package} nicht bestätigen. Melden Sie sich bei DSM ab, melden Sie sich erneut mit Ihrem Kennwort an und öffnen Sie dann {package} erneut.",
+  "authorization.retry": "Erneut versuchen",
+  "authorization.next.reinstall": "Die installierten Dateien stimmen nicht mit diesem Build überein. Installieren Sie das Paket aus einer vertrauenswürdigen Quelle neu.",
+  "authorization.not_admin.title": "Administrator erforderlich",
+  "authorization.not_admin.body": "Bitten Sie einen DSM-Administrator, dieses Paket zu öffnen und zu autorisieren.",
+  "authorization.session_expired.title": "Sitzung abgelaufen",
+  "authorization.session_expired.body": "Melden Sie sich erneut bei DSM an und öffnen Sie dieses Paket wieder.",
+  "authorization.ready": "Autorisiert",
+  "authorization.revoke": "Autorisierung widerrufen",
+  "authorization.revoke.title": "Autorisierung widerrufen?",
+  "authorization.revoke.body": "Neuer Helper-Zugriff wird deaktiviert. Paketdaten und bisherige Ergebnisse bleiben erhalten.",
+  "authorization.cancel": "Abbrechen",
+  "authorization.checking": "Autorisierung wird geprüft…"
+}

package/dist/templates/native-authorization/i18n/en.json

@@ -0,0 +1,36 @@
+{
+  "authorization.title": "{package} needs your permission",
+  "authorization.purpose": "This package needs approval for its fixed root operations. DSM handles your password; the package never sees or stores it.",
+  "authorization.reason.grant_missing": "Root operations are not authorized yet.",
+  "authorization.reason.helper_untrusted": "The privileged helper could not be trusted.",
+  "authorization.reason.cli_untrusted": "The privileged command could not be trusted.",
+  "authorization.reason.grant_incompatible": "The privileged helper needs an update.",
+  "authorization.reason.package_identity_changed": "The package account changed.",
+  "authorization.reason.maintenance_task_missing": "The maintenance task is missing.",
+  "authorization.reason.maintenance_task_mismatch": "The maintenance task no longer matches the authorization.",
+  "authorization.reason.helper_health_rejected": "The privileged helper did not pass its health check.",
+  "authorization.reason.capability_missing": "The privileged helper lacks a required capability.",
+  "authorization.reason.unknown": "The authorization is missing or no longer valid.",
+  "authorization.next.install": "Choose Authorize and confirm your DSM password to approve this build.",
+  "authorization.next.update": "This build needs fresh authorization. Choose Authorize and confirm your DSM password.",
+  "authorization.next.repair": "Review this package and its tasks in Task Scheduler, then retry.",
+  "authorization.authorize": "Authorize",
+  "authorization.authorizing": "Waiting for DSM…",
+  "authorization.failed": "Authorization did not finish. You can try again.",
+  "authorization.unavailable.title": "Authorization could not be checked",
+  "authorization.unavailable.body": "This is usually temporary. Try again — {package} will not ask for your password.",
+  "authorization.credential.title": "DSM's sign-in credential is not ready",
+  "authorization.credential.body": "This DSM session was restored without a password sign-in, so DSM cannot vouch for {package}'s requests. Sign out of DSM, sign in again with your password, then reopen {package}.",
+  "authorization.retry": "Try again",
+  "authorization.next.reinstall": "The installed files do not match this build. Reinstall the package from a trusted source, then retry.",
+  "authorization.not_admin.title": "Administrator needed",
+  "authorization.not_admin.body": "Ask a DSM administrator to open this package and authorize it.",
+  "authorization.session_expired.title": "Session expired",
+  "authorization.session_expired.body": "Sign in to DSM again, then reopen this package.",
+  "authorization.ready": "Authorized",
+  "authorization.revoke": "Revoke authorization",
+  "authorization.revoke.title": "Revoke authorization?",
+  "authorization.revoke.body": "New helper access will be disabled. Package data and past results are retained.",
+  "authorization.cancel": "Cancel",
+  "authorization.checking": "Checking authorization…"
+}

package/dist/templates/native-authorization/i18n/es.json

@@ -0,0 +1,36 @@
+{
+  "authorization.title": "{package} necesita su permiso",
+  "authorization.purpose": "Este paquete requiere aprobación para sus operaciones root fijas. DSM gestiona su contraseña; el paquete no la ve ni la almacena.",
+  "authorization.reason.grant_missing": "Las operaciones root aún no están autorizadas.",
+  "authorization.reason.helper_untrusted": "No se pudo confiar en el asistente privilegiado.",
+  "authorization.reason.cli_untrusted": "No se pudo confiar en el comando privilegiado.",
+  "authorization.reason.grant_incompatible": "El asistente privilegiado necesita una actualización.",
+  "authorization.reason.package_identity_changed": "La cuenta del paquete ha cambiado.",
+  "authorization.reason.maintenance_task_missing": "Falta la tarea de mantenimiento.",
+  "authorization.reason.maintenance_task_mismatch": "La tarea de mantenimiento ya no coincide con la autorización.",
+  "authorization.reason.helper_health_rejected": "El asistente privilegiado no superó su comprobación de estado.",
+  "authorization.reason.capability_missing": "Al asistente privilegiado le falta una capacidad necesaria.",
+  "authorization.reason.unknown": "La autorización falta o ya no es válida.",
+  "authorization.next.install": "Elija Autorizar y confirme su contraseña de DSM para aprobar esta versión.",
+  "authorization.next.update": "Esta versión requiere una nueva autorización. Elija Autorizar y confirme su contraseña de DSM.",
+  "authorization.next.repair": "Revise las tareas de este paquete en el Programador de tareas y vuelva a intentarlo.",
+  "authorization.authorize": "Autorizar",
+  "authorization.authorizing": "Esperando a DSM…",
+  "authorization.failed": "La autorización no se completó. Puede intentarlo de nuevo.",
+  "authorization.unavailable.title": "No se pudo comprobar la autorización",
+  "authorization.unavailable.body": "Suele ser temporal. Inténtelo de nuevo; {package} no le pedirá la contraseña.",
+  "authorization.credential.title": "Las credenciales de inicio de sesión de DSM no están listas",
+  "authorization.credential.body": "Esta sesión de DSM se restauró sin iniciar sesión con contraseña, por lo que DSM no puede avalar las solicitudes de {package}. Cierre sesión en DSM, inicie sesión de nuevo con su contraseña y vuelva a abrir {package}.",
+  "authorization.retry": "Reintentar",
+  "authorization.next.reinstall": "Los archivos instalados no coinciden con esta versión. Reinstale el paquete desde una fuente fiable y vuelva a intentarlo.",
+  "authorization.not_admin.title": "Se requiere un administrador",
+  "authorization.not_admin.body": "Pida a un administrador de DSM que abra y autorice este paquete.",
+  "authorization.session_expired.title": "Sesión caducada",
+  "authorization.session_expired.body": "Inicie sesión de nuevo en DSM y vuelva a abrir este paquete.",
+  "authorization.ready": "Autorizado",
+  "authorization.revoke": "Revocar autorización",
+  "authorization.revoke.title": "¿Revocar autorización?",
+  "authorization.revoke.body": "Se desactivarán los nuevos accesos del helper. Se conservan los datos del paquete y los resultados anteriores.",
+  "authorization.cancel": "Cancelar",
+  "authorization.checking": "Comprobando autorización…"
+}

package/dist/templates/native-authorization/i18n/fr.json

@@ -0,0 +1,36 @@
+{
+  "authorization.title": "{package} demande votre autorisation",
+  "authorization.purpose": "Ce paquet nécessite une autorisation pour ses opérations root fixes. DSM traite votre mot de passe ; le paquet ne le voit ni ne le stocke.",
+  "authorization.reason.grant_missing": "Les opérations root ne sont pas encore autorisées.",
+  "authorization.reason.helper_untrusted": "L'assistant privilégié n'a pas pu être approuvé.",
+  "authorization.reason.cli_untrusted": "La commande privilégiée n'a pas pu être approuvée.",
+  "authorization.reason.grant_incompatible": "L'assistant privilégié doit être mis à jour.",
+  "authorization.reason.package_identity_changed": "Le compte du paquet a changé.",
+  "authorization.reason.maintenance_task_missing": "La tâche de maintenance est introuvable.",
+  "authorization.reason.maintenance_task_mismatch": "La tâche de maintenance ne correspond plus à l'autorisation.",
+  "authorization.reason.helper_health_rejected": "L'assistant privilégié n'a pas réussi son contrôle d'intégrité.",
+  "authorization.reason.capability_missing": "Il manque à l'assistant privilégié une capacité requise.",
+  "authorization.reason.unknown": "L'autorisation est absente ou n'est plus valide.",
+  "authorization.next.install": "Choisissez Autoriser et confirmez votre mot de passe DSM pour approuver cette version.",
+  "authorization.next.update": "Cette version nécessite une nouvelle autorisation. Choisissez Autoriser et confirmez votre mot de passe DSM.",
+  "authorization.next.repair": "Vérifiez les tâches de ce paquet dans le Planificateur de tâches, puis réessayez.",
+  "authorization.authorize": "Autoriser",
+  "authorization.authorizing": "En attente de DSM…",
+  "authorization.failed": "L'autorisation ne s'est pas terminée. Vous pouvez réessayer.",
+  "authorization.unavailable.title": "Impossible de vérifier l'autorisation",
+  "authorization.unavailable.body": "C'est généralement temporaire. Réessayez ; {package} ne demandera pas votre mot de passe.",
+  "authorization.credential.title": "Les identifiants de connexion DSM ne sont pas prêts",
+  "authorization.credential.body": "Cette session DSM a été restaurée sans connexion par mot de passe : DSM ne peut donc pas authentifier les requêtes de {package}. Déconnectez-vous de DSM, reconnectez-vous avec votre mot de passe, puis rouvrez {package}.",
+  "authorization.retry": "Réessayer",
+  "authorization.next.reinstall": "Les fichiers installés ne correspondent pas à cette version. Réinstallez le paquet depuis une source fiable, puis réessayez.",
+  "authorization.not_admin.title": "Administrateur requis",
+  "authorization.not_admin.body": "Demandez à un administrateur DSM d’ouvrir ce paquet et de l’autoriser.",
+  "authorization.session_expired.title": "Session expirée",
+  "authorization.session_expired.body": "Reconnectez-vous à DSM, puis rouvrez ce paquet.",
+  "authorization.ready": "Autorisé",
+  "authorization.revoke": "Révoquer l’autorisation",
+  "authorization.revoke.title": "Révoquer l’autorisation ?",
+  "authorization.revoke.body": "Les nouveaux accès helper seront désactivés. Les données du paquet et les résultats précédents sont conservés.",
+  "authorization.cancel": "Annuler",
+  "authorization.checking": "Vérification de l’autorisation…"
+}

package/dist/templates/native-authorization/i18n/index.ts

@@ -0,0 +1,15 @@
+import en from './en.json'
+import zhTW from './zh-TW.json'
+import zhCN from './zh-CN.json'
+import ja from './ja.json'
+import ko from './ko.json'
+import de from './de.json'
+import fr from './fr.json'
+import es from './es.json'
+import it from './it.json'
+const catalogs:Record<string,Record<string,string>>={en,'zh-TW':zhTW,'zh-CN':zhCN,ja,ko,de,fr,es,it}
+/** Copy follows Reclaim T0156; root-task semantics are template-owned. */
+export function authorizationCopy(locale:string,packageName:string){
+ const catalog={...en,...catalogs[locale]}
+ return (key:string)=>((catalog as Record<string,string>)[`authorization.${key}`]||key).replaceAll('{package}',packageName)
+}