@synopackageland/cli 0.9.6 → 0.10.0

package/dist/standalone/manifest.d.ts

@@ -5,13 +5,16 @@ import { type NativeArchFamily } from "../build-spk/dsm-arch.js";
 import { type Catalogs, type InfoTranslations } from "./i18n.js";
 export type { InfoText } from "./i18n.js";
 import { type RootOp } from "./root-ops.js";
+import type { RootSettings } from "../runtime/root-programs.js";
 import { type Daemon } from "./daemon.js";
 import { type Uninstall } from "./uninstall.js";
 import { type Background } from "./background.js";
 import { type SharedFolder } from "./shared-folder.js";
-import { type ApiPermissions } from "./api-permissions.js";
+import { readApiPermissions, type ApiPermissions } from "./api-permissions.js";
 import { type PortalDeclaration } from "../portal/alias.js";
 import { type SdkBackend } from "../runtime/sdk-source.js";
+import { type WindowSize } from "./window-size.js";
+import { type BridgeBackend } from "./bridge-backend.js";
 /**
  * `dsm-package.yaml`: a Standalone Package, i.e. an unsigned native SPK that
  * runs as its own DSM package account with a CGI backend and a DSM window UI.
@@ -21,16 +24,11 @@ export type StandaloneBackend = {
     kind: "go";
     dir: string;
     main: string;
-} | {
-    kind: "rust";
-    dir: string;
-    package: string;
-    bin: string;
-    worker: string;
+    timeoutSeconds?: number;
 } | {
     kind: "binary";
     files: Partial<Record<NativeArchFamily, string>>;
-};
+} | BridgeBackend;
 export interface StandaloneI18n {
     /** UI messages per locale, embedded into the DSM window. */
     catalogs?: Catalogs;
@@ -55,17 +53,21 @@ export interface StandaloneManifest {
     apiPermissions?: ApiPermissions;
     apiPermissionsDigest?: string;
     apiSDKPermissionsDigest?: string;
+    /** `ui.window`: the DSM window's size over the defaults; absent keeps 960×640, at least 700×420. */
     ui: {
         dir: string;
         build?: {
             cwd: string;
             command: string[];
         };
+        window?: WindowSize;
     };
     i18n?: StandaloneI18n;
     capabilities: Capabilities;
     /** Fixed root/<name>.sh operations, enabled by capabilities.rootOps. */
     rootOps?: RootOp[];
+    /** `root`: the root programs' settings, the stop step and the root state directory. */
+    rootPrograms?: RootSettings;
     /** Set by build: the pins and the root tasks generated from the App's SDK executor. */
     executor?: ExecutorPins & {
         tasks: ExecutorTask[];
@@ -107,7 +109,13 @@ export type ManifestResult = {
 };
 export declare const KNOWN_FIELDS: Set<string>;
 export declare function loadStandaloneManifest(root: string): ManifestResult;
-/** Where an App's SDK version is declared: its Go or Rust backend; a prebuilt binary declares it in the project's go.mod. */
+/**
+ * The runtime registers routes from the manifest's methods: a policy for
+ * another method, or an App method with an SDK name, would refuse to start.
+ * Without methods only the SDK names of the policy can be checked.
+ */
+export declare function bridgeMethodProblems(methods: readonly string[] | undefined, permissions: Pick<ReturnType<typeof readApiPermissions>, "policy" | "sdk">, file: string): string[];
+/** Where an App's SDK version is declared: its Go backend; a prebuilt binary declares it in the project's go.mod. */
 export declare function sdkBackend(m: Pick<StandaloneManifest, "backend" | "root">): SdkBackend;
 /**
  * The nearest directory at or above `start` that holds dsm-package.yaml,

package/dist/standalone/manifest.js

@@ -5,7 +5,7 @@ import { isAbsolute, join, relative, resolve } from "node:path";
 import { parse } from "yaml";
 import { isNativeArchFamily } from "../build-spk/dsm-arch.js";
 import { checkGlossary, loadCatalogs, readInfoTranslations } from "./i18n.js";
-import { loadRootOps, ROOT_OPS_DIR } from "./root-ops.js";
+import { loadRootOps, readRootSettings, rootBinaryProblem, ROOT_OPS_DIR } from "./root-ops.js";
 import { readDaemon } from "./daemon.js";
 import { readUninstall } from "./uninstall.js";
 import { readBackground } from "./background.js";
@@ -15,8 +15,11 @@ import { API_PERMISSIONS_FILE, floorAtAdministrators, permitsOrdinaryUsers, read
 import { PORTAL_REQUIRES_EXECUTOR, portalEntryProblem, readPortalDeclaration } from "../portal/alias.js";
 import { renderPackageIcons } from "../build-spk/dsm-icons.js";
 import { validateReproducible } from "../reproducible-config.js";
-import { appSdkVersion, SDK_CRATE, SDK_MODULE } from "../runtime/sdk-source.js";
+import { appSdkVersion, SDK_MODULE } from "../runtime/sdk-source.js";
 import { sdkProblems } from "./sdk-check.js";
+import { readWindowSize } from "./window-size.js";
+import { TIMEOUT_USAGE, validTimeoutSeconds } from "./request-timeout.js";
+import { BRIDGE_RUNTIMES, isBridgeBackend, overlaps, readBridgeBackend } from "./bridge-backend.js";
 /**
  * `dsm-package.yaml`: a Standalone Package, i.e. an unsigned native SPK that
  * runs as its own DSM package account with a CGI backend and a DSM window UI.
@@ -24,15 +27,13 @@ import { sdkProblems } from "./sdk-check.js";
 export const STANDALONE_MANIFEST = "dsm-package.yaml";
 export const KNOWN_FIELDS = new Set([
     "schema", "package", "version", "build", "displayname", "description",
-    "metadata", "maintainer", "os_min_ver", "arches", "backend", "ui", "capabilities", "i18n", "daemon", "install", "uninstall", "entry", "portal", "icon", "reproducible",
+    "metadata", "maintainer", "os_min_ver", "arches", "backend", "ui", "capabilities", "i18n", "daemon", "install", "uninstall", "entry", "portal", "icon", "reproducible", "root",
 ]);
 const I18N_FIELDS = new Set(["messages", "glossary", "info"]);
 const PACKAGE_ID = /^[A-Za-z][A-Za-z0-9]{1,63}$/;
 const VERSION = /^\d+(\.\d+){0,3}$/;
 const OS_MIN_VER = /^\d+\.\d+(\.\d+)?-\d+$/;
 const GO_MAIN = /^\.\/[A-Za-z0-9_./-]*$/;
-/** A Cargo package or binary name. */
-const CARGO_NAME = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -49,18 +50,18 @@ class Collector {
     /** A project-relative path that stays inside the project. */
     path(value, field) {
         if (typeof value !== "string" || value.trim() === "") {
-            return this.fail("STANDALONE_PATH_INVALID", `${field} 必須是專案內的相對路徑。`);
+            return this.fail("STANDALONE_PATH_INVALID", `${field} must be a relative path inside the project.`);
         }
         const resolved = resolve(this.root, value);
         const rel = relative(this.root, resolved);
         if (isAbsolute(value) || rel.startsWith("..") || isAbsolute(rel)) {
-            return this.fail("STANDALONE_PATH_OUTSIDE_PROJECT", `${field}「${value}」必須位於專案目錄內。`);
+            return this.fail("STANDALONE_PATH_OUTSIDE_PROJECT", `${field} "${value}" must be inside the project directory.`);
         }
         return resolved;
     }
     text(value, field) {
         if (typeof value !== "string" || value.trim() === "" || /[\r\n"\\]/.test(value)) {
-            return this.fail("STANDALONE_TEXT_INVALID", `${field} 必須是單行、非空且不含 " 或 \\ 的文字。`);
+            return this.fail("STANDALONE_TEXT_INVALID", `${field} must be single-line, non-empty text without " or \\.`);
         }
         return value;
     }
@@ -68,7 +69,7 @@ class Collector {
 export function loadStandaloneManifest(root) {
     const file = join(root, STANDALONE_MANIFEST);
     if (!existsSync(file)) {
-        return { ok: false, errors: [{ code: "STANDALONE_MANIFEST_MISSING", message: `找不到 ${STANDALONE_MANIFEST}。` }] };
+        return { ok: false, errors: [{ code: "STANDALONE_MANIFEST_MISSING", message: `${STANDALONE_MANIFEST} was not found.` }] };
     }
     let raw;
     try {
@@ -79,9 +80,9 @@ export function loadStandaloneManifest(root) {
     }
     const c = new Collector(root);
     if (existsSync(join(root, "compose.yaml")))
-        c.fail("PROJECT_RUNTIME_EXCLUSIVE", "compose.yaml 與 dsm-package.yaml 互斥；請保留其中一個。");
+        c.fail("PROJECT_RUNTIME_EXCLUSIVE", "compose.yaml and dsm-package.yaml are mutually exclusive; keep only one.");
     if (!isRecord(raw)) {
-        c.fail("STANDALONE_MANIFEST_YAML", `${STANDALONE_MANIFEST} 必須是 YAML 物件。`);
+        c.fail("STANDALONE_MANIFEST_YAML", `${STANDALONE_MANIFEST} must be a YAML object.`);
         return { ok: false, errors: c.errors };
     }
     const manifest = readManifest(raw, c);
@@ -90,7 +91,7 @@ export function loadStandaloneManifest(root) {
 function readManifest(raw, c) {
     for (const key of Object.keys(raw)) {
         if (!KNOWN_FIELDS.has(key)) {
-            c.fail("STANDALONE_FIELD_UNKNOWN", `不支援的欄位「${key}」。Standalone Package 不接受自訂 lifecycle scripts 或 DSM conf。`);
+            c.fail("STANDALONE_FIELD_UNKNOWN", `Unsupported field "${key}". A Standalone Package does not accept custom lifecycle scripts or DSM conf.`);
         }
     }
     if (raw.reproducible !== undefined) {
@@ -102,22 +103,23 @@ function readManifest(raw, c) {
         }
     }
     if (raw.schema !== 2) {
-        c.fail("STANDALONE_SCHEMA_INVALID", "schema: 2 必填；請改成 schema: 2、backend.kind: go|binary，並將 privilege: root、background、fileStation 分別改為 capabilities.rootOps: true、capabilities.jobs: true、capabilities.files: session。");
+        c.fail("STANDALONE_SCHEMA_INVALID", "schema: 2 is required; use schema: 2 with backend.kind: go|binary, and change privilege: root, background and fileStation to capabilities.rootOps: true, capabilities.jobs: true and capabilities.files: session respectively.");
     }
     const capabilities = readCapabilities(raw.capabilities, c);
     const rootOps = readRootOps(capabilities.rootOps === true, c);
+    const rootPrograms = raw.root === undefined ? undefined : readRootPrograms(raw.root, capabilities.rootOps === true, rootOps, c);
     const packageId = typeof raw.package === "string" && PACKAGE_ID.test(raw.package)
         ? raw.package
-        : c.fail("STANDALONE_PACKAGE_INVALID", "package 必須以英文字母開頭，只含英數字（2–64 字）。");
+        : c.fail("STANDALONE_PACKAGE_INVALID", "package must start with a letter and contain only alphanumerics (2-64 characters).");
     const version = typeof raw.version === "string" && VERSION.test(raw.version)
         ? raw.version
-        : c.fail("STANDALONE_VERSION_INVALID", "version 必須是數字版本，例如 1.2.0（build 另外填）。");
+        : c.fail("STANDALONE_VERSION_INVALID", "version must be a numeric version such as 1.2.0 (build goes in build).");
     const build = Number.isInteger(raw.build) && raw.build >= 1 && raw.build <= 9999
         ? raw.build
-        : c.fail("STANDALONE_BUILD_INVALID", "build 必須是 1–9999 的整數。");
+        : c.fail("STANDALONE_BUILD_INVALID", "build must be an integer from 1 to 9999.");
     const osMinVer = typeof raw.os_min_ver === "string" && OS_MIN_VER.test(raw.os_min_ver)
         ? raw.os_min_ver
-        : c.fail("STANDALONE_OS_MIN_VER_INVALID", "os_min_ver 格式為 <major>.<minor>-<build>，例如 7.2-64570。");
+        : c.fail("STANDALONE_OS_MIN_VER_INVALID", "os_min_ver format is <major>.<minor>-<build>, for example 7.2-64570.");
     if (capabilities.rootOps === true && osMinVer && !isDsmAtLeast(osMinVer, DEFAULT_MIN_DSM)) {
         c.fail("STANDALONE_OS_MIN_VER_INVALID", `root templates require DSM ${DEFAULT_MIN_DSM} or later.`);
     }
@@ -130,9 +132,12 @@ function readManifest(raw, c) {
             metadata = validateMetadata(raw.metadata);
         }
         catch {
-            c.fail("STANDALONE_TEXT_INVALID", "metadata 欄位格式不正確；請檢查文字、email、URLs 與 screenshots。");
+            c.fail("STANDALONE_TEXT_INVALID", "The metadata fields are malformed; check the text, email, URLs and screenshots.");
         }
     const arches = readArches(raw.arches, c);
+    const binaryProblem = rootOps && arches && (raw.root === undefined || rootPrograms) ? rootBinaryProblem(rootOps, rootPrograms, arches) : undefined;
+    if (binaryProblem)
+        c.fail("STANDALONE_ROOT_PROGRAMS_INVALID", binaryProblem);
     const backend = arches && readBackend(raw.backend, arches, c);
     let permissions;
     if (backend && backend.kind !== "binary") {
@@ -152,37 +157,51 @@ function readManifest(raw, c) {
     }
     const daemon = arches && readDaemon(raw.daemon, c.root, arches, e => c.fail(e.code, e.message));
     if (capabilities.jobs && raw.daemon !== undefined && capabilities.delegate?.lifetime !== 'until-revoked') {
-        c.fail("CAPABILITY_COMBINATION_INVALID", "daemon 僅可與明確 until-revoked delegate 的固定 worker 共存；一般 capabilities.jobs 仍互斥。");
+        c.fail("CAPABILITY_COMBINATION_INVALID", "daemon can only coexist with an explicit until-revoked delegate fixed worker; plain capabilities.jobs stays mutually exclusive.");
     }
     if (backend?.kind === "binary") {
         for (const name of ["files", "jobs", "identity", "delegate"]) {
             if (isRecord(raw.capabilities) && raw.capabilities[name] !== undefined)
-                c.fail("CAPABILITY_UNSUPPORTED", `backend.kind: binary 不支援 capabilities.${name}。`);
+                c.fail("CAPABILITY_UNSUPPORTED", `backend.kind: binary does not support capabilities.${name}.`);
         }
     }
+    if (backend && isBridgeBackend(backend)) {
+        // The runtime offers delegate only as the until-revoked files.moveFromStaging integration (spec/bridge/v1).
+        const delegate = capabilities.delegate;
+        if (delegate && !(delegate.lifetime === "until-revoked" && delegate.operations.join() === "files.moveFromStaging" && delegate.destinations?.length)) {
+            c.fail("CAPABILITY_UNSUPPORTED", `For backend.runtime: ${backend.kind}, capabilities.delegate supports only operations: [files.moveFromStaging], destinations and lifetime: until-revoked.`);
+        }
+        if (raw.daemon !== undefined)
+            c.fail("CAPABILITY_UNSUPPORTED", `backend.runtime: ${backend.kind} does not support daemon; a v1 App runs once per request (exec mode).`);
+        if (permissions)
+            checkBridgeMethods(backend, permissions, c);
+    }
     const sharedFolder = raw.install === undefined ? undefined : readSharedFolder(raw.install, e => c.fail(e.code, e.message));
     const entry = raw.entry === undefined ? undefined : readEntry(raw.entry, backend, permissions?.policy, c);
     if (entry === "admin-only" && permissions) {
         const floored = floorAtAdministrators(permissions.policy, permissions.sdk);
         if (floored.widened.length) {
-            c.fail("STANDALONE_ENTRY_WIDENED", `entry: admin-only 以管理員為所有 route 的下限；permissions.json 的 ${floored.widened.join("、")} 會開放給其他人。請改為 administrators，或改用 entry: app-privilege／省略 entry。`);
+            c.fail("STANDALONE_ENTRY_WIDENED", `entry: admin-only uses administrators as the floor for every route; ${floored.widened.join(", ")} in permissions.json would open it to others. Change them to administrators, or use entry: app-privilege / omit entry.`);
         }
         permissions.policy = floored.policy;
     }
     const ui = readUi(raw.ui, c);
+    if (backend && isBridgeBackend(backend) && ui && overlaps(backend.dir, ui.dir)) {
+        c.fail("STANDALONE_BRIDGE_APP_IN_UI", "backend.dir and ui.dir must not overlap: DSM serves the files under ui/ directly, so the App directory (target/app) cannot be inside it.");
+    }
     if (capabilities.identity && ui && !ui.build)
-        c.fail("CAPABILITY_COMBINATION_INVALID", "capabilities.identity 需要獨立登入頁；plain UI 不支援，請改用 vue UI（init --ui vue）。");
+        c.fail("CAPABILITY_COMBINATION_INVALID", "capabilities.identity needs a standalone sign-in page; plain UI does not support it, use a vue UI (init --ui vue).");
     if (capabilities.delegate?.scope === "install-selected" && ui && !ui.build)
-        c.fail("CAPABILITY_COMBINATION_INVALID", "delegate scope install-selected 只能在 Vue 面板確認；plain UI 不支援，請改用 vue UI（init --ui vue）。");
+        c.fail("CAPABILITY_COMBINATION_INVALID", "The delegate install-selected scope can only be confirmed in a Vue panel; plain UI does not support it, use a vue UI (init --ui vue).");
     if (backend && backend.kind !== "binary") {
-        for (const problem of sdkProblems(backend, ui?.build?.cwd, Boolean(capabilities.delegate || capabilities.rootOps)))
+        for (const problem of sdkProblems(backend, ui?.build?.cwd, isBridgeBackend(backend) || Boolean(capabilities.delegate || capabilities.rootOps)))
             c.fail(problem.code, problem.message);
     }
     const i18n = raw.i18n === undefined ? undefined : readI18n(raw.i18n, c);
     const icon = raw.icon === undefined ? undefined : readIcon(raw.icon, c);
     const uninstall = readUninstall(raw.uninstall, { rootOps: capabilities.rootOps === true, ops: rootOps, en: i18n?.catalogs?.en }, e => c.fail(e.code, e.message));
     const portal = raw.portal === undefined || !packageId ? undefined : readPortalDeclaration(raw.portal, packageId)
-        ?? c.fail("STANDALONE_PORTAL_INVALID", "portal 必須是 {} 或 { alias: <小寫英數與 -，1–64 字，不可為 DSM 保留路徑> }。");
+        ?? c.fail("STANDALONE_PORTAL_INVALID", "portal must be {} or { alias: <1-64 lowercase alphanumerics or -, not a DSM reserved path> }.");
     if (portal && !capabilities.rootOps && !capabilities.delegate) {
         c.fail("STANDALONE_PORTAL_REQUIRES_EXECUTOR", PORTAL_REQUIRES_EXECUTOR);
     }
@@ -215,6 +234,7 @@ function readManifest(raw, c) {
         ...(i18n ? { i18n } : {}),
         capabilities,
         ...(rootOps ? { rootOps } : {}),
+        ...(rootPrograms ? { rootPrograms } : {}),
         ...(daemon ? { daemon } : {}),
         ...(uninstall ? { uninstall } : {}),
         ...(sharedFolder ? { sharedFolder } : {}),
@@ -223,7 +243,29 @@ function readManifest(raw, c) {
         ...(icon ? { icon } : {}),
     };
 }
-/** Where an App's SDK version is declared: its Go or Rust backend; a prebuilt binary declares it in the project's go.mod. */
+function checkBridgeMethods(backend, permissions, c) {
+    for (const problem of bridgeMethodProblems(backend.methods, permissions, `${relative(c.root, backend.dir)}/permissions.json`))
+        c.fail("STANDALONE_BRIDGE_METHODS_MISMATCH", problem);
+}
+/**
+ * The runtime registers routes from the manifest's methods: a policy for
+ * another method, or an App method with an SDK name, would refuse to start.
+ * Without methods only the SDK names of the policy can be checked.
+ */
+export function bridgeMethodProblems(methods, permissions, file) {
+    const sdk = new Set(Object.values(permissions.sdk).flatMap(names => Object.keys(names)));
+    const problems = [];
+    const taken = (methods ?? []).filter(method => sdk.has(method));
+    if (taken.length)
+        problems.push(`App methods must not use an SDK method name: ${taken.join(", ")}.`);
+    if (!methods)
+        return problems;
+    const unlisted = Object.keys(permissions.policy.methods).filter(method => !sdk.has(method) && !methods.includes(method));
+    if (unlisted.length)
+        problems.push(`${file} sets methods the App does not have: ${unlisted.join(", ")}; the runtime refuses to start.`);
+    return problems;
+}
+/** Where an App's SDK version is declared: its Go backend; a prebuilt binary declares it in the project's go.mod. */
 export function sdkBackend(m) {
     return m.backend.kind === "binary" ? { kind: "go", dir: m.root } : m.backend;
 }
@@ -236,13 +278,12 @@ function readIcon(value, c) {
         return path;
     }
     catch (error) {
-        return c.fail("STANDALONE_ICON_INVALID", `icon：${error.message}`);
+        return c.fail("STANDALONE_ICON_INVALID", `icon: ${error.message}`);
     }
 }
 /** Where each backend kind's CGI main wraps its authenticator in the SDK entry gate. */
 const ENTRY_GATE = {
-    go: { main: b => b.kind === "go" ? join(b.dir, b.main, "main.go") : "", call: "dsm.NewEntryGate(", sdk: `backend/go.mod 要 require ${SDK_MODULE}` },
-    rust: { main: b => b.kind === "rust" ? join(b.dir, "src/bin", `${b.bin}.rs`) : "", call: "new_entry_gate(", sdk: `backend/Cargo.toml 要以 release tag 相依 ${SDK_CRATE}` },
+    go: { main: b => b.kind === "go" ? join(b.dir, b.main, "main.go") : "", call: "dsm.NewEntryGate(", sdk: `backend/go.mod must require ${SDK_MODULE}` },
 };
 /** The SDK version, or none when the backend has none or pins it wrongly (reported by sdkProblems). */
 function sdkVersionOrUndefined(backend) {
@@ -260,27 +301,35 @@ function sdkVersionOrUndefined(backend) {
  */
 function readEntry(value, backend, policy, c) {
     if (value !== "admin-only" && value !== "app-privilege") {
-        return c.fail("STANDALONE_ENTRY_INVALID", "entry 必須是 admin-only 或 app-privilege；省略則維持既有 permissions.json 行為。");
+        return c.fail("STANDALONE_ENTRY_INVALID", "entry must be admin-only or app-privilege; omit it to keep the existing permissions.json behavior.");
     }
     if (!backend)
         return undefined;
-    const gate = ENTRY_GATE[backend.kind];
+    // A bridge App's entry gate is the runtime's (bridge.json access).
+    const gate = isBridgeBackend(backend) ? undefined : ENTRY_GATE[backend.kind];
     const main = gate?.main(backend) ?? "";
-    if (!gate || !sdkVersionOrUndefined(backend)
-        || !existsSync(main) || !readFileSync(main, "utf8").includes(gate.call)) {
-        const shown = main ? relative(c.root, main) : "backend.main 的 main.go";
-        return c.fail("STANDALONE_ENTRY_UNSUPPORTED", `entry 需要 SDK 的 entry gate：${gate?.sdk ?? `backend/go.mod 要 require ${SDK_MODULE}`}，並在 ${shown} 以 ${gate?.call.slice(0, -1) ?? "dsm.NewEntryGate"} 包住 authenticator。`);
+    if (!isBridgeBackend(backend) && (!gate || !sdkVersionOrUndefined(backend))
+        || gate && (!existsSync(main) || !readFileSync(main, "utf8").includes(gate.call))) {
+        const shown = main ? relative(c.root, main) : "the backend.main main.go";
+        return c.fail("STANDALONE_ENTRY_UNSUPPORTED", `entry needs the SDK entry gate: ${gate?.sdk ?? `backend/go.mod must require ${SDK_MODULE}`}, and wrap the authenticator with ${gate?.call.slice(0, -1) ?? "dsm.NewEntryGate"} in ${shown}.`);
     }
     if (value === "app-privilege" && !permitsOrdinaryUsers(policy)) {
-        return c.fail("STANDALONE_ENTRY_INVALID", "entry: app-privilege 需要至少一個 permissions.json 標為 authenticated 的 route，一般使用者才有功能可用。");
+        return c.fail("STANDALONE_ENTRY_INVALID", "entry: app-privilege needs at least one route marked authenticated in permissions.json, otherwise regular users have nothing to use.");
     }
     return value;
 }
+/** Root settings are read against the loaded root/ programs; when those failed, their errors stand alone. */
+function readRootPrograms(value, enabled, ops, c) {
+    if (enabled && !ops)
+        return undefined;
+    const read = readRootSettings(value, ops);
+    return "settings" in read ? read.settings : c.fail("STANDALONE_ROOT_PROGRAMS_INVALID", read.error);
+}
 function readRootOps(enabled, c) {
     const dir = join(c.root, ROOT_OPS_DIR);
     if (!enabled) {
         return existsSync(dir)
-            ? c.fail("STANDALONE_ROOT_OPS_UNUSED", `${ROOT_OPS_DIR}/ 需要 capabilities.rootOps: true；請宣告能力或刪除此目錄。`)
+            ? c.fail("STANDALONE_ROOT_OPS_UNUSED", `${ROOT_OPS_DIR}/ needs capabilities.rootOps: true; declare the capability or delete this directory.`)
             : undefined;
     }
     const loaded = loadRootOps(dir);
@@ -297,77 +346,106 @@ function readArches(value, c) {
         && new Set(value).size === value.length;
     return ok
         ? value
-        : c.fail("STANDALONE_ARCHES_INVALID", "arches 必須是不重複的 x86_64／aarch64／armv7 清單，至少一個。");
+        : c.fail("STANDALONE_ARCHES_INVALID", "arches must be a list of unique x86_64/aarch64/armv7 values, at least one.");
 }
 function readBackend(value, arches, c) {
-    if (!isRecord(value) || !["go", "rust", "binary"].includes(String(value.kind))) {
-        return c.fail("STANDALONE_BACKEND_INVALID", "backend.kind 必須是 go、rust 或 binary。");
+    if (isRecord(value) && value.runtime !== undefined) {
+        if (value.kind !== undefined)
+            return c.fail("STANDALONE_BACKEND_INVALID", "Use either backend.kind or backend.runtime; runtime: go is equivalent to kind: go.");
+        if (value.runtime === "go") {
+            const { runtime: _, ...go } = value;
+            value = { ...go, kind: "go" };
+        }
+        else if (BRIDGE_RUNTIMES.includes(value.runtime)) {
+            return readBridgeBackend(value, dir => c.path(dir, "backend.dir"), (code, message) => c.fail(code, message));
+        }
+        else {
+            return c.fail("STANDALONE_BACKEND_INVALID", "backend.runtime must be go, python, node or rust.");
+        }
+    }
+    if (!isRecord(value) || !["go", "binary"].includes(String(value.kind))) {
+        return c.fail("STANDALONE_BACKEND_INVALID", "backend.kind must be go or binary (or name go, python, node, rust with backend.runtime).");
     }
-    if (value.kind === "rust")
-        return readRustBackend(value, c);
     if (value.kind === "go") {
-        if (Object.keys(value).some(key => !["kind", "dir", "main"].includes(key)) || (value.main !== undefined && (typeof value.main !== "string" || !GO_MAIN.test(value.main) || value.main.includes("..")))) {
-            return c.fail("STANDALONE_BACKEND_INVALID", "backend.kind: go 需要 dir，可選 main（預設 ./cmd/app）。");
+        if (Object.keys(value).some(key => !["kind", "dir", "main", "timeout_seconds"].includes(key)) || (value.main !== undefined && (typeof value.main !== "string" || !GO_MAIN.test(value.main) || value.main.includes("..")))) {
+            return c.fail("STANDALONE_BACKEND_INVALID", "backend.kind: go needs dir, with optional main (./cmd/app by default) and timeout_seconds.");
         }
+        const timeout = value.timeout_seconds;
+        if (timeout !== undefined && !validTimeoutSeconds(timeout))
+            return c.fail("STANDALONE_BACKEND_INVALID", `backend.${TIMEOUT_USAGE}`);
         const dir = c.path(value.dir, "backend.dir");
-        return dir ? { kind: "go", dir, main: value.main ?? "./cmd/app" } : undefined;
+        if (!dir)
+            return undefined;
+        const backend = { kind: "go", dir, main: value.main ?? "./cmd/app" };
+        if (timeout === undefined)
+            return backend;
+        return goReadsTimeout(backend, c) ? { ...backend, timeoutSeconds: timeout } : undefined;
+    }
+    if (value.timeout_seconds !== undefined) {
+        return c.fail("STANDALONE_BACKEND_INVALID", "backend.kind: binary does not take timeout_seconds: a prebuilt CGI sets its own request deadline.");
     }
     const binary = value.files;
     if (!isRecord(binary) || Object.keys(value).some(key => !["kind", "files"].includes(key))) {
-        return c.fail("STANDALONE_BACKEND_INVALID", "backend.kind: binary 需要 files，以架構為 key 指向 CGI 執行檔。");
+        return c.fail("STANDALONE_BACKEND_INVALID", "backend.kind: binary needs files keyed by architecture pointing at CGI executables.");
     }
     const files = {};
     for (const arch of arches) {
         if (!(arch in binary)) {
-            c.fail("STANDALONE_BINARY_ARCH_MISSING", `arches 宣告了 ${arch}，但 backend.files 沒有它的執行檔。`);
+            c.fail("STANDALONE_BINARY_ARCH_MISSING", `arches declares ${arch}, but backend.files has no executable for it.`);
             continue;
         }
         files[arch] = c.path(binary[arch], `backend.files.${arch}`);
     }
     for (const key of Object.keys(binary)) {
         if (!arches.includes(key)) {
-            c.fail("STANDALONE_BACKEND_INVALID", `backend.files.${key} 不在 arches 內。`);
+            c.fail("STANDALONE_BACKEND_INVALID", `backend.files.${key} is not in arches.`);
         }
     }
     return Object.values(files).every(Boolean) ? { kind: "binary", files } : undefined;
 }
-function readRustBackend(value, c) {
-    const { package: pkg, bin = "api", worker = "background-worker" } = value;
-    const names = [pkg, bin, worker];
-    if (Object.keys(value).some(key => !["kind", "dir", "package", "bin", "worker"].includes(key))
-        || !names.every(name => typeof name === "string" && CARGO_NAME.test(name)) || bin === worker) {
-        return c.fail("STANDALONE_BACKEND_INVALID", "backend.kind: rust 需要 dir 與 package（Cargo package），可選 bin（CGI，預設 api）與 worker（背景程序，預設 background-worker），兩者不可相同。");
-    }
-    const dir = c.path(value.dir, "backend.dir");
-    return dir ? { kind: "rust", dir, package: pkg, bin: bin, worker: worker } : undefined;
+/**
+ * The build passes the deadline as -X main.requestTimeout; a main without
+ * that variable would silently drop it and keep the SDK's default.
+ */
+function goReadsTimeout(backend, c) {
+    const main = join(backend.dir, backend.main, "main.go");
+    const source = existsSync(main) ? readFileSync(main, "utf8") : "";
+    if (/\brequestTimeout\b/.test(source) && source.includes("api.Timeout("))
+        return true;
+    c.fail("STANDALONE_TIMEOUT_UNSUPPORTED", `backend.timeout_seconds needs ${relative(c.root, main)} to declare var requestTimeout = "" (build passes the seconds with -X main.requestTimeout) and apply it with api.WithRequestDeadline(handler, api.Timeout(...)).`);
+    return false;
 }
 function readUi(value, c) {
     if (!isRecord(value)) {
-        return c.fail("STANDALONE_UI_INVALID", "ui 必須包含 dir。");
+        return c.fail("STANDALONE_UI_INVALID", "ui must contain dir.");
     }
     const dir = c.path(value.dir, "ui.dir");
+    const read = value.window === undefined ? undefined : readWindowSize(value.window);
+    if (read && "error" in read)
+        return c.fail("STANDALONE_UI_WINDOW_INVALID", read.error);
+    const window = read ? { window: read.size } : {};
     if (value.build === undefined) {
-        return dir ? { dir } : undefined;
+        return dir ? { dir, ...window } : undefined;
     }
     const build = value.build;
     const command = isRecord(build) ? build.command : undefined;
     if (!Array.isArray(command) || command.length === 0 || !command.every((arg) => typeof arg === "string" && arg !== "")) {
-        return c.fail("STANDALONE_UI_BUILD_INVALID", "ui.build.command 必須是 argv 字串陣列（不經 shell），例如 [npm, run, build]。");
+        return c.fail("STANDALONE_UI_BUILD_INVALID", "ui.build.command must be an argv string array (not going through a shell), for example [npm, run, build].");
     }
     const cwd = c.path(build.cwd, "ui.build.cwd");
-    return dir && cwd ? { dir, build: { cwd, command: command } } : undefined;
+    return dir && cwd ? { dir, build: { cwd, command: command }, ...window } : undefined;
 }
 function readI18n(value, c) {
     const invalid = (why) => c.fail("STANDALONE_I18N_INVALID", `i18n ${why}`);
     if (!isRecord(value) || Object.keys(value).some((key) => !I18N_FIELDS.has(key))) {
-        return invalid("只接受 messages（訊息目錄）、glossary（用語表）與 info（各語言 INFO 文字）。");
+        return invalid("Only messages (the message directory), glossary (the terminology table) and info (per-language INFO text) are accepted.");
     }
     const info = readInfoTranslations(value.info, {
         invalid: (why) => c.fail("STANDALONE_I18N_INVALID", `i18n.info ${why}`),
         text: (text, field) => c.text(text, field),
     });
     if (value.messages === undefined) {
-        return value.glossary === undefined ? info && { info } : invalid("glossary 需要搭配 messages。");
+        return value.glossary === undefined ? info && { info } : invalid("glossary needs messages.");
     }
     const dir = c.path(value.messages, "i18n.messages");
     const glossary = value.glossary === undefined ? undefined : c.path(value.glossary, "i18n.glossary");
@@ -407,7 +485,7 @@ function readCapabilities(value, c) {
     if (value === undefined)
         return {};
     if (!isRecord(value)) {
-        c.fail("CAPABILITY_INVALID", "capabilities 必須是物件。");
+        c.fail("CAPABILITY_INVALID", "capabilities must be an object.");
         return {};
     }
     const result = {};
@@ -428,7 +506,7 @@ function readCapabilities(value, c) {
             result.jobs = readBackground(setting === true ? { worker: "sha256-v1" } : setting, e => c.fail("CAPABILITY_INVALID", e.message.replace("background", "capabilities.jobs")));
         }
         else
-            c.fail("CAPABILITY_INVALID", `不支援的 capabilities.${name} 值；files: session、identity: standalone、jobs: true 或 {worker: sha256-v1}、rootOps: true。`);
+            c.fail("CAPABILITY_INVALID", `Unsupported capabilities.${name} value; use files: session, identity: standalone, jobs: true or {worker: sha256-v1}, rootOps: true.`);
     }
     if (result.delegate && !result.jobs)
         result.jobs = { worker: "sha256-v1" };

package/dist/standalone/portal-window.js

@@ -14,11 +14,11 @@ export const PORTAL_MESSAGES = {
     cleanupRequired: { en: "The Application Portal entry was not fully removed. Remove the entry again.", "zh-TW": "應用程式入口未完全移除。請再移除一次入口。", "zh-CN": "应用程序门户入口未完全移除。请再移除一次入口。", ja: "アプリケーションポータルのエントリが完全に削除されていません。もう一度エントリを削除してください。", ko: "응용 프로그램 포털 항목이 완전히 제거되지 않았습니다. 항목을 다시 제거하십시오.", de: "Der Eintrag im Anwendungsportal wurde nicht vollständig entfernt. Entfernen Sie den Eintrag erneut.", fr: "L'entrée du Portail d'application n'a pas été entièrement supprimée. Supprimez de nouveau l'entrée.", es: "La entrada del Portal de aplicaciones no se eliminó por completo. Elimine la entrada de nuevo.", it: "La voce del Portale applicazioni non è stata rimossa completamente. Rimuovere di nuovo la voce." },
     register: { en: "Enable entry", "zh-TW": "啟用入口", "zh-CN": "启用入口", ja: "エントリを有効にする", ko: "항목 활성화", de: "Eintrag aktivieren", fr: "Activer l'entrée", es: "Activar entrada", it: "Attiva voce" },
     unregister: { en: "Remove entry", "zh-TW": "移除入口", "zh-CN": "移除入口", ja: "エントリを削除", ko: "항목 제거", de: "Eintrag entfernen", fr: "Supprimer l'entrée", es: "Eliminar entrada", it: "Rimuovi voce" },
-    portal_alias_invalid: { en: "Use 1-64 lowercase letters, digits or hyphens, not starting or ending with a hyphen.", "zh-TW": "請使用 1–64 個小寫英文字母、數字或連字號，且不可以連字號開頭或結尾。", "zh-CN": "请使用 1–64 个小写英文字母、数字或连字符，且不能以连字符开头或结尾。", ja: "1～64 文字の小文字英字・数字・ハイフンを使用し、先頭と末尾にハイフンは使えません。", ko: "1~64자의 영문 소문자, 숫자 또는 하이픈을 사용하고 하이픈으로 시작하거나 끝나지 않게 하십시오.", de: "Verwenden Sie 1–64 Kleinbuchstaben, Ziffern oder Bindestriche, ohne Bindestrich am Anfang oder Ende.", fr: "Utilisez 1 à 64 lettres minuscules, chiffres ou tirets, sans tiret au début ni à la fin.", es: "Use de 1 a 64 letras minúsculas, dígitos o guiones, sin guion al principio ni al final.", it: "Usa da 1 a 64 lettere minuscole, cifre o trattini, senza trattino all'inizio o alla fine." },
-    portal_alias_reserved: { en: "DSM already uses this alias. Choose another one.", "zh-TW": "DSM 已使用這個別名，請改用其他別名。", "zh-CN": "DSM 已使用此别名，请改用其他别名。", ja: "このエイリアスは DSM で使用されています。別のものを選んでください。", ko: "DSM에서 이미 사용하는 별칭입니다. 다른 별칭을 선택하십시오.", de: "DSM verwendet diesen Alias bereits. Wählen Sie einen anderen.", fr: "DSM utilise déjà cet alias. Choisissez-en un autre.", es: "DSM ya usa este alias. Elija otro.", it: "DSM usa già questo alias. Scegline un altro." },
-    portal_alias_in_use: { en: "Another app already uses this alias. Choose another one.", "zh-TW": "另一個 App 已使用這個別名，請改用其他別名。", "zh-CN": "另一个应用已使用此别名，请改用其他别名。", ja: "別のアプリがこのエイリアスを使用しています。別のものを選んでください。", ko: "다른 앱이 이미 이 별칭을 사용합니다. 다른 별칭을 선택하십시오.", de: "Eine andere App verwendet diesen Alias bereits. Wählen Sie einen anderen.", fr: "Une autre application utilise déjà cet alias. Choisissez-en un autre.", es: "Otra aplicación ya usa este alias. Elija otro.", it: "Un'altra app usa già questo alias. Scegline un altro." },
+    portal_alias_invalid: { en: "Use 1-64 lowercase letters, digits or hyphens, not starting or ending with a hyphen.", "zh-TW": "請使用 1–64 個小寫英文字母、數字或連字號，且不可以連字號開頭或結尾。", "zh-CN": "请使用 1–64 个小写英文字母、数字或连字符，且不能以连字符开头或结尾。", ja: "1～64 文字の小文字英字・数字・ハイフンを使用し、先頭と末尾にハイフンは使えません。", ko: "1~64자의 영문 소문자, 숫자 또는 하이픈을 사용하고 하이픈으로 시작하거나 끝나지 않게 하십시오.", de: "Verwenden Sie 1–64 Kleinbuchstaben, Ziffern oder Bindestriche, ohne Bindestrich am Anfang oder Ende.", fr: "Utilisez 1 à 64 lettres minuscules, chiffres ou tirets, sans tiret au début ni à la fin.", es: "Use de 1 a 64 letras minúsculas, dígitos o guiones, sin guion al principio ni al final.", it: "Usare da 1 a 64 lettere minuscole, cifre o trattini, senza trattino all'inizio o alla fine." },
+    portal_alias_reserved: { en: "DSM already uses this alias. Choose another one.", "zh-TW": "DSM 已使用這個別名，請改用其他別名。", "zh-CN": "DSM 已使用此别名，请改用其他别名。", ja: "このエイリアスは DSM で使用されています。別のものを選んでください。", ko: "DSM에서 이미 사용하는 별칭입니다. 다른 별칭을 선택하십시오.", de: "DSM verwendet diesen Alias bereits. Wählen Sie einen anderen.", fr: "DSM utilise déjà cet alias. Choisissez-en un autre.", es: "DSM ya usa este alias. Elija otro.", it: "DSM usa già questo alias. Sceglierne un altro." },
+    portal_alias_in_use: { en: "Another app already uses this alias. Choose another one.", "zh-TW": "另一個 App 已使用這個別名，請改用其他別名。", "zh-CN": "另一个应用已使用此别名，请改用其他别名。", ja: "別のアプリがこのエイリアスを使用しています。別のものを選んでください。", ko: "다른 앱이 이미 이 별칭을 사용합니다. 다른 별칭을 선택하십시오.", de: "Eine andere App verwendet diesen Alias bereits. Wählen Sie einen anderen.", fr: "Une autre application utilise déjà cet alias. Choisissez-en un autre.", es: "Otra aplicación ya usa este alias. Elija otro.", it: "Un'altra app usa già questo alias. Sceglierne un altro." },
     admin_required: { en: "Only a DSM administrator can change this.", "zh-TW": "只有 DSM 管理員可以變更這項設定。", "zh-CN": "只有 DSM 管理员可以更改此设置。", ja: "これを変更できるのは DSM 管理者のみです。", ko: "DSM 관리자만 변경할 수 있습니다.", de: "Nur ein DSM-Administrator kann dies ändern.", fr: "Seul un administrateur DSM peut modifier ce paramètre.", es: "Solo un administrador de DSM puede cambiar esto.", it: "Solo un amministratore DSM può modificarlo." },
-    portal_unavailable: { en: "DSM did not accept the change. Try again or use Control Panel.", "zh-TW": "DSM 未接受變更。請再試一次或改用控制台。", "zh-CN": "DSM 未接受更改。请重试或改用控制面板。", ja: "DSM は変更を受け付けませんでした。再試行するか、コントロールパネルを使用してください。", ko: "DSM이 변경을 받아들이지 않았습니다. 다시 시도하거나 제어판을 사용하십시오.", de: "DSM hat die Änderung nicht übernommen. Versuchen Sie es erneut oder verwenden Sie die Systemsteuerung.", fr: "DSM n'a pas accepté la modification. Réessayez ou utilisez le Panneau de configuration.", es: "DSM no aceptó el cambio. Inténtelo de nuevo o use el Panel de control.", it: "DSM non ha accettato la modifica. Riprova o usa il Pannello di controllo." },
+    portal_unavailable: { en: "DSM did not accept the change. Try again or use Control Panel.", "zh-TW": "DSM 未接受變更。請再試一次或改用控制台。", "zh-CN": "DSM 未接受更改。请重试或改用控制面板。", ja: "DSM は変更を受け付けませんでした。再試行するか、コントロールパネルを使用してください。", ko: "DSM이 변경을 받아들이지 않았습니다. 다시 시도하거나 제어판을 사용하십시오.", de: "DSM hat die Änderung nicht übernommen. Versuchen Sie es erneut oder verwenden Sie die Systemsteuerung.", fr: "DSM n'a pas accepté la modification. Réessayez ou utilisez le Panneau de configuration.", es: "DSM no aceptó el cambio. Inténtelo de nuevo o use el Panel de control.", it: "DSM non ha accettato la modifica. Riprovare o usare il Pannello di controllo." },
     PORTAL_FAILED: { en: "DSM did not accept the Application Portal change. Try again.", "zh-TW": "DSM 未接受應用程式入口的變更。請再試一次。", "zh-CN": "DSM 未接受应用程序门户的更改。请重试。", ja: "DSM はアプリケーションポータルの変更を受け付けませんでした。再試行してください。", ko: "DSM이 응용 프로그램 포털 변경을 받아들이지 않았습니다. 다시 시도하십시오.", de: "DSM hat die Änderung am Anwendungsportal nicht übernommen. Versuchen Sie es erneut.", fr: "DSM n'a pas accepté la modification du Portail d'application. Réessayez.", es: "DSM no aceptó el cambio en el Portal de aplicaciones. Inténtelo de nuevo.", it: "DSM non ha accettato la modifica al Portale applicazioni. Riprovare." },
 };
 function localizedMessages() {
@@ -105,13 +105,20 @@ export const PORTAL_RUNTIME = `function createPortalAccess(options) {
       return options.isAdmin() ? result("unavailable", undefined, false) : result("unavailable");
     });
   }
+  // The backend reports cleanup-required while a register or unregister runs,
+  // so a status read waits for the change, whatever its result.
+  var changing = Promise.resolve();
   function status() {
-    if (options.entry) return fromEntry();
-    return options.isAdmin() ? fromDsm() : fromBackend();
+    return changing.then(function () {
+      if (options.entry) return fromEntry();
+      return options.isAdmin() ? fromDsm() : fromBackend();
+    });
   }
   function change(method) {
     if (!options.isAdmin()) return Promise.reject({ code: "admin_required" });
-    return options.call(method, {}).then(status, function (error) {
+    var call = options.call(method, {});
+    changing = call.then(function () {}, function () {});
+    return call.then(status, function (error) {
       throw { code: error && error.code === "ADMIN_REQUIRED" ? "admin_required" : "PORTAL_FAILED" };
     });
   }

package/dist/standalone/request-timeout.d.ts

@@ -0,0 +1,9 @@
+/** The backend's request deadline in seconds unless the App sets backend.timeout_seconds. */
+export declare const DEFAULT_REQUEST_TIMEOUT_SECONDS = 60;
+/** spec/bridge/v1 timeout_seconds: the runtime refuses more. */
+export declare const MAX_REQUEST_TIMEOUT_SECONDS = 3600;
+export declare const TIMEOUT_USAGE = "timeout_seconds is the request deadline in seconds, a whole number from 1 to 3600; omitted, 60.";
+/** Whether backend.timeout_seconds is a deadline the runtime accepts. */
+export declare function validTimeoutSeconds(value: unknown): value is number;
+/** The request deadline the CGI applies and the window waits past. */
+export declare function requestTimeoutSeconds(backend: object): number;

package/dist/standalone/request-timeout.js

@@ -0,0 +1,13 @@
+/** The backend's request deadline in seconds unless the App sets backend.timeout_seconds. */
+export const DEFAULT_REQUEST_TIMEOUT_SECONDS = 60;
+/** spec/bridge/v1 timeout_seconds: the runtime refuses more. */
+export const MAX_REQUEST_TIMEOUT_SECONDS = 3600;
+export const TIMEOUT_USAGE = `timeout_seconds is the request deadline in seconds, a whole number from 1 to ${MAX_REQUEST_TIMEOUT_SECONDS}; omitted, ${DEFAULT_REQUEST_TIMEOUT_SECONDS}.`;
+/** Whether backend.timeout_seconds is a deadline the runtime accepts. */
+export function validTimeoutSeconds(value) {
+    return Number.isInteger(value) && value >= 1 && value <= MAX_REQUEST_TIMEOUT_SECONDS;
+}
+/** The request deadline the CGI applies and the window waits past. */
+export function requestTimeoutSeconds(backend) {
+    return backend.timeoutSeconds ?? DEFAULT_REQUEST_TIMEOUT_SECONDS;
+}