@synopackageland/sdk 0.10.8 → 0.10.10

package/README.md

@@ -13,6 +13,18 @@ App's `backend/go.mod`.
 | `@synopackageland/sdk/i18n/<capability>/<locale>.json` | Copy in `en`, `zh-TW`, `zh-CN`, `ja`, `ko`, `de`, `fr`, `es`, `it`. |
 | `@synopackageland/sdk/spec/protocol/v1/` | The executor protocol (`errors.json`, `schema/`, `vectors/`), a file copy of the repository's `spec/protocol/v1`. Read it from `node_modules/@synopackageland/sdk/spec/protocol/v1`. |
 
+## DSM session carriers
+
+`createDsmSession({read, write, fetch})` provides DSM session carriers for a
+desktop window or an Application Portal page. `ready()` returns the desktop's
+current token, or makes one shared, five-second, same-origin request to
+`webman/login.cgi?enable_syno_token=yes`. `token()` reads the current carrier.
+The optional `write` updates DSM's in-memory session for its own WebAPI client.
+Nothing is persisted. Recovery failure leaves the backend's existing
+`credential_not_ready` response intact; root and delegate calls still require
+both the cookie and token. The CLI embeds this factory from the selected SDK
+into every generated native window, including Go-only Apps.
+
 ## File Station
 
 `openFolderInFileStation(path)` opens DSM's File Station at a folder;
@@ -121,21 +133,20 @@ through `v-model`:
 
 ## Background saves in the settings page
 
-`BackgroundSaveSettings` is background saves as one `SettingsSection` of the
-App's settings page. A user sees one row, the save folder and a button that
-opens `NasPicker` inside the allowed scope; choosing a folder never asks for
-a password. An administrator also sees the allowed scope, with Change, and
-turns saves off at the end of the section. A `Callout` shows only when
-something needs attention: approval needed, saves turned off, a folder to
-choose again after a scope change, an error.
-
-The DSM password is asked twice at most, and only where the executor's root
-tasks change. The first approval chooses the scope in the same step, with
-one password. A later change of scope asks for it again: the scope is the
-boundary the executor writes inside as root, and the App backend sees the
-administrator's DSM session on every request, so only the password, which
-it never sees, shows the administrator meant the change. A change revokes
-every user's folder; each chooses again.
+`BackgroundSaveSettings` provides one save-folder row per destination key,
+with Choose folder and Revoke access on the same row. It has no save history
+or app-wide disable control. The headless facade's operations/cancel and
+disable/enable methods remain available to applications.
+
+For install-selected manifests, administrators choose a shared-folder root
+or home and enter their DSM password. One submit approves that scope through
+the existing executor root task, reads the protected selection back, and grants
+that same root as their save destination through the session-checked API. It
+never silently migrates an existing destination on load. Changing scope still
+revokes every user's old grant and cancels pending saves; saved files remain.
+Ordinary users choose their own folder inside the approved scope through
+`NasPicker`, with fresh DSM session and write-permission verification and no
+administrator password. Fixed-scope manifests keep their in-scope picker.
 
 ```vue
 <AppShell v-model="page" :ctx="ctx" :locale="ctx.locale" :pages="[
@@ -167,8 +178,9 @@ every user's folder; each chooses again.
   read back for 60 seconds before it is reported as failed.
 - `refresh()` (exposed) rereads the section, for the page header's refresh.
 
-`BackgroundSavePanel` is this section plus a "Save history" list, a page of its
-own for an App whose saves are not listed elsewhere (templates, samples).
+`BackgroundSavePanel` wraps this section with an opt-in `sampleSave` producer
+for templates and samples. It does not list save history or infer completion
+from the acknowledgement of a sample job.
 
 An App that had a background page and a settings page merges them: drop the
 background page and its `BackgroundSavePanel`, its own scope settings
@@ -194,21 +206,38 @@ the App's own `AppRoot`: app-local roots do not nest.
 
 ## Denied access
 
-`denied` replaces the App's pages with one page that says the account may
-not use the App: a `No access` header and a message pointing to DSM
-Application Privileges, in every UI locale (`shellCopy`'s `deniedTitle` and
-`deniedMessage`). `denied` is `true` or an `AppShellDenied` (`title`,
-`message`, `header: false`); the `denied` slot replaces the message, for
-example with a sign-in form. The sidebar, the notices and the default slot
-are not rendered meanwhile.
+`denied` replaces the App's pages with one denial page. Pass the backend
+error as `{code}` to distinguish entry policies:
+
+- `app_privilege_denied`: ask an administrator to open Control Panel >
+  Application Privileges, select the app and click Edit, then allow the account
+  or group. The app name comes from `brandName`, then `ctx.displayName`; without
+  either, the message says “this app”.
+- `admin_required`: the app requires membership in the administrators group;
+  open it with an administrator account. An admin-only app is not listed in
+  Application Privileges.
+
+`appRefusal(error, locale, displayName?)` supplies the same title and message
+used by AuthorizationGate, session denial, and delegate/NAS error copy, in every
+SDK locale. Unverified DSM menu translations use the English labels.
+Other error codes and `denied: true` retain the generic `shellCopy` text.
+Explicit `title`, `message` and `header: false` still take precedence; the
+`denied` slot replaces the message. The sidebar, notices and default slot are
+not rendered while denied. `createSession(ctx).denied` exposes the entry refusal
+with this copy, including refusals during session discovery or later calls.
+LoginPage shows it without offering a login form.
 
 ```vue
-<AppShell v-model="page" :ctx="ctx" :locale="ctx.locale" :pages="pages" :denied="!authorized && {title: t('privilegeTitle')}" />
-<AppShell v-model="page" :ctx="ctx" :locale="ctx.locale" :pages="pages" :denied="signInNeeded && {header: false}">
-  <template #denied><LoginPage :session="login" :locale="ctx.locale" /></template>
-</AppShell>
+<AppShell v-model="page" :ctx="ctx" :locale="ctx.locale" :pages="pages" :denied="accessError && {code: accessError.code}" />
+<AppShell v-model="page" :ctx="ctx" :locale="ctx.locale" :pages="pages" :denied="login.denied.value" />
 ```
 
+Headless error helpers accept an optional app display name after the locale:
+`errorCopy(error, delegateCopy(locale), locale, displayName)`,
+`nasErrorCopy(error, nasCopy(locale), locale, displayName)`,
+`saveError(error, saveCopy(locale), 'select', locale, displayName)` and
+`backgroundErrorCopy(error, backgroundCopy(locale), locale, displayName)`.
+
 ## Executor approval
 
 `ExecutorApproval` shows its default slot, the App's pages, only while the
@@ -228,6 +257,18 @@ until the administrator submits again, refreshes or closes the dialog.
 `AuthorizationGate` cannot approve the executor: its `request()` takes no
 password.
 
+The approval explains itself before it asks for the password, in one card:
+the App is not Synology's and DSM runs no third-party App with system
+privileges, then what the App needs them for. A refused password shows at its
+field and keeps what was typed. "About this approval", closed at first, says
+whose password it is and what approving does: only the package's declared
+tasks, a new approval when an update changes them, and removal on uninstall.
+`purpose` (on `ExecutorApproval`, `ExecutorNotice` and `ExecutorSettings`)
+replaces the generic "Some of its features need system privileges." with the
+App's own sentence, in its locale. `ExecutorSettings` and
+`BackgroundSaveSettings` show the same explanation inline, and the notice's
+dialog under the title "System access".
+
 ```vue
 <script setup lang="ts">
 provide(ExecutorSetupKey, ctx.executor!)
@@ -250,7 +291,10 @@ for pages whose mount only reads: a page that writes on mount would do so
 before the check ends, and also when it then fails. A dialog or a toast
 leaves the hidden wrapper: `useExecutorPreload()` is `true` while the pages
 are preloaded, so a page waits for `false` before it opens one.
-`AuthorizationGate` does so with its own dialog.
+`AuthorizationGate` does so with its own dialog. When the status is not
+ready it turns `false` before the pages unmount, so `false` does not mean the
+pages show: open a teleported dialog from `watchPostEffect` (or after the
+next render), when an unmounted page no longer runs it.
 
 ```vue
 <ExecutorApproval preload :admin="ctx.user?.isAdmin ?? false" :locale="ctx.locale" :ctx="ctx">

package/dist/i18n/authorization/de.json

@@ -46,5 +46,10 @@
   "authorization.settings.status": "Status",
   "authorization.settings.details": "Details anzeigen",
   "authorization.state.required": "Nicht autorisiert",
-  "authorization.state.unavailable": "Konnte nicht geprüft werden"
+  "authorization.state.unavailable": "Konnte nicht geprüft werden",
+  "authorization.app_privilege_denied.title": "Kein Zugriff",
+  "authorization.app_privilege_denied.body": "Bitten Sie einen Administrator, unter Systemsteuerung > Anwendungsberechtigungen diese App auszuwählen, auf Bearbeiten zu klicken und Ihr Konto oder Ihre Gruppe zuzulassen.",
+  "authorization.app_privilege_denied.namedBody": "Bitten Sie einen Administrator, unter Systemsteuerung > Anwendungsberechtigungen „{package}“ auszuwählen, auf Bearbeiten zu klicken und Ihr Konto oder Ihre Gruppe zuzulassen.",
+  "authorization.admin_required.title": "Administratorkonto erforderlich",
+  "authorization.admin_required.body": "Diese App ist nur für Mitglieder der Gruppe administrators verfügbar. Öffnen Sie sie mit einem Administratorkonto."
 }

package/dist/i18n/authorization/en.json

@@ -46,5 +46,10 @@
   "authorization.settings.status": "Status",
   "authorization.settings.details": "Show details",
   "authorization.state.required": "Not authorized",
-  "authorization.state.unavailable": "Could not be checked"
+  "authorization.state.unavailable": "Could not be checked",
+  "authorization.app_privilege_denied.title": "No access",
+  "authorization.app_privilege_denied.body": "Ask an administrator to open Control Panel > Application Privileges, select this app and click Edit, then allow your account or group.",
+  "authorization.app_privilege_denied.namedBody": "Ask an administrator to open Control Panel > Application Privileges, select {package} and click Edit, then allow your account or group.",
+  "authorization.admin_required.title": "Administrator account required",
+  "authorization.admin_required.body": "This app is only available to members of the administrators group. Open it with an administrator account."
 }

package/dist/i18n/authorization/es.json

@@ -46,5 +46,10 @@
   "authorization.settings.status": "Estado",
   "authorization.settings.details": "Mostrar detalles",
   "authorization.state.required": "Sin autorizar",
-  "authorization.state.unavailable": "No se pudo comprobar"
+  "authorization.state.unavailable": "No se pudo comprobar",
+  "authorization.app_privilege_denied.title": "Sin acceso",
+  "authorization.app_privilege_denied.body": "Pida a un administrador que abra Panel de control > Privilegios de la aplicación, seleccione esta aplicación, haga clic en Editar y permita su cuenta o grupo.",
+  "authorization.app_privilege_denied.namedBody": "Pida a un administrador que abra Panel de control > Privilegios de la aplicación, seleccione «{package}», haga clic en Editar y permita su cuenta o grupo.",
+  "authorization.admin_required.title": "Se requiere una cuenta de administrador",
+  "authorization.admin_required.body": "Esta aplicación solo está disponible para miembros del grupo administrators. Ábrala con una cuenta de administrador."
 }

package/dist/i18n/authorization/fr.json

@@ -46,5 +46,10 @@
   "authorization.settings.status": "Statut",
   "authorization.settings.details": "Afficher les détails",
   "authorization.state.required": "Non autorisé",
-  "authorization.state.unavailable": "Vérification impossible"
+  "authorization.state.unavailable": "Vérification impossible",
+  "authorization.app_privilege_denied.title": "Accès refusé",
+  "authorization.app_privilege_denied.body": "Demandez à un administrateur d’ouvrir Panneau de configuration > Privilèges d’application, de sélectionner cette application, de cliquer sur Modifier et d’autoriser votre compte ou votre groupe.",
+  "authorization.app_privilege_denied.namedBody": "Demandez à un administrateur d’ouvrir Panneau de configuration > Privilèges d’application, de sélectionner « {package} », de cliquer sur Modifier et d’autoriser votre compte ou votre groupe.",
+  "authorization.admin_required.title": "Compte administrateur requis",
+  "authorization.admin_required.body": "Cette application est réservée aux membres du groupe administrators. Ouvrez-la avec un compte administrateur."
 }

package/dist/i18n/authorization/it.json

@@ -46,5 +46,10 @@
   "authorization.settings.status": "Stato",
   "authorization.settings.details": "Mostra dettagli",
   "authorization.state.required": "Non autorizzato",
-  "authorization.state.unavailable": "Impossibile verificare"
+  "authorization.state.unavailable": "Impossibile verificare",
+  "authorization.app_privilege_denied.title": "Accesso negato",
+  "authorization.app_privilege_denied.body": "Chiedere a un amministratore di aprire Pannello di controllo > Privilegi applicazione, selezionare questa app, fare clic su Modifica e consentire il proprio account o gruppo.",
+  "authorization.app_privilege_denied.namedBody": "Chiedere a un amministratore di aprire Pannello di controllo > Privilegi applicazione, selezionare «{package}», fare clic su Modifica e consentire il proprio account o gruppo.",
+  "authorization.admin_required.title": "Account amministratore richiesto",
+  "authorization.admin_required.body": "Questa app è disponibile solo ai membri del gruppo administrators. Aprirla con un account amministratore."
 }

package/dist/i18n/authorization/ja.json

@@ -46,5 +46,10 @@
   "authorization.settings.status": "状態",
   "authorization.settings.details": "詳細を表示",
   "authorization.state.required": "未承認",
-  "authorization.state.unavailable": "確認できませんでした"
+  "authorization.state.unavailable": "確認できませんでした",
+  "authorization.app_privilege_denied.title": "アクセスできません",
+  "authorization.app_privilege_denied.body": "管理者にコントロール パネル > アプリケーションの権限でこのアプリを選択し、編集をクリックして、あなたのアカウントまたはグループを許可するよう依頼してください。",
+  "authorization.app_privilege_denied.namedBody": "管理者にコントロール パネル > アプリケーションの権限で「{package}」を選択し、編集をクリックして、あなたのアカウントまたはグループを許可するよう依頼してください。",
+  "authorization.admin_required.title": "管理者アカウントが必要です",
+  "authorization.admin_required.body": "このアプリは administrators グループのメンバーのみ利用できます。管理者アカウントで開いてください。"
 }

package/dist/i18n/authorization/ko.json

@@ -46,5 +46,10 @@
   "authorization.settings.status": "상태",
   "authorization.settings.details": "세부 정보 보기",
   "authorization.state.required": "승인되지 않음",
-  "authorization.state.unavailable": "확인할 수 없음"
+  "authorization.state.unavailable": "확인할 수 없음",
+  "authorization.app_privilege_denied.title": "접근할 수 없음",
+  "authorization.app_privilege_denied.body": "관리자에게 제어판 > 응용 프로그램 권한에서 이 앱을 선택하고 편집을 클릭한 다음 내 계정 또는 그룹을 허용하도록 요청하십시오.",
+  "authorization.app_privilege_denied.namedBody": "관리자에게 제어판 > 응용 프로그램 권한에서 {package} 앱을 선택하고 편집을 클릭한 다음 내 계정 또는 그룹을 허용하도록 요청하십시오.",
+  "authorization.admin_required.title": "관리자 계정 필요",
+  "authorization.admin_required.body": "이 앱은 administrators 그룹의 구성원만 사용할 수 있습니다. 관리자 계정으로 여십시오."
 }

package/dist/i18n/authorization/zh-CN.json

@@ -46,5 +46,10 @@
   "authorization.settings.status": "状态",
   "authorization.settings.details": "显示详细信息",
   "authorization.state.required": "尚未授权",
-  "authorization.state.unavailable": "无法检查"
+  "authorization.state.unavailable": "无法检查",
+  "authorization.app_privilege_denied.title": "无法访问",
+  "authorization.app_privilege_denied.body": "请管理员前往控制面板 > 应用程序权限，选择此 App 并点击编辑，允许你的账号或群组使用。",
+  "authorization.app_privilege_denied.namedBody": "请管理员前往控制面板 > 应用程序权限，选择“{package}”并点击编辑，允许你的账号或群组使用。",
+  "authorization.admin_required.title": "需要管理员账号",
+  "authorization.admin_required.body": "此 App 仅供 administrators 群组的成员使用。请使用管理员账号打开。"
 }

package/dist/i18n/authorization/zh-TW.json

@@ -46,5 +46,10 @@
   "authorization.settings.status": "狀態",
   "authorization.settings.details": "顯示詳細資料",
   "authorization.state.required": "尚未授權",
-  "authorization.state.unavailable": "無法檢查"
+  "authorization.state.unavailable": "無法檢查",
+  "authorization.app_privilege_denied.title": "無法存取",
+  "authorization.app_privilege_denied.body": "請管理員到「控制台 > 應用程式權限」，選擇此 App 並按「編輯」，允許你的帳號或群組使用。",
+  "authorization.app_privilege_denied.namedBody": "請管理員到「控制台 > 應用程式權限」，選擇「{package}」並按「編輯」，允許你的帳號或群組使用。",
+  "authorization.admin_required.title": "需要管理員帳號",
+  "authorization.admin_required.body": "此 App 僅供 administrators 群組的成員使用。請使用管理員帳號開啟。"
 }

package/dist/i18n/delegate/de.json

@@ -1,18 +1,28 @@
 {
   "title": "Dateizugriff im Hintergrund",
   "help": "Downloads laufen weiter, nachdem Sie diese App schließen. Jeder Auftrag darf bis zu einer Stunde lang nur in den ausgewählten Ordner schreiben. Vorhandene Dateien werden nie ersetzt.",
-  "setupTitle": "Administratoreinrichtung",
-  "setupHelp": "Genehmigen Sie diese App einmal, damit sie Aufgaben ausführen kann, die Systemzugriff erfordern.",
-  "setupHelpFiles": "Genehmigen Sie diese App einmal, damit sie Dateiaufträge abschließen kann, während Benutzer offline sind.",
+  "setupTitle": "Systemzugriff",
+  "setupHelp": "Erlaubt dieser App, die in ihrem Paket festgelegten Systemaufgaben auszuführen.",
+  "setupHelpFiles": "Erlaubt dieser App, Dateiaufträge für Benutzer auch nach deren Abmeldung abzuschließen.",
+  "consentTitle": "Diese App einmalig genehmigen",
+  "consentTitleUser": "Diese App benötigt die Genehmigung eines Administrators",
+  "consentWhy": "Diese App stammt nicht von Synology, und DSM lässt Apps von Drittanbietern nicht mit Systemrechten laufen.",
+  "consentPurpose": "Einige ihrer Funktionen benötigen Systemrechte.",
+  "consentPurposeFiles": "Sie benötigt Systemrechte, um Dateiaufträge auch nach der Abmeldung der Benutzer abzuschließen.",
+  "consentDetails": "Über diese Genehmigung",
+  "pointPassword": "Verwenden Sie das Passwort des DSM-Kontos, mit dem Sie gerade angemeldet sind.",
+  "passwordNote": "DSM prüft es direkt. Es wird weder an den Dienst dieser App gesendet noch gespeichert.",
+  "pointLimited": "Danach kann die App nur die in ihrem Paket festgelegten Systemaufgaben ausführen und sonst nichts mit Systemrechten.",
+  "pointUpdate": "Ändert ein Update diese Aufgaben, werden Sie erneut um Genehmigung gebeten.",
+  "pointRevoke": "Die Genehmigung fügt die Aufgaben der App im Aufgabenplaner hinzu. Beim Deinstallieren der App werden sie entfernt und die Genehmigung endet.",
+  "consentAsk": "Bitten Sie einen Administrator, diese App zu öffnen und einmalig zu genehmigen.",
   "password": "DSM-Passwort",
-  "authorize": "Systemzugriff genehmigen",
+  "authorize": "Genehmigen",
   "confirmShare": "Freigegebenen Ordner bestätigen",
-  "scopeNeeds": "Der freigegebene Ordner muss bestätigt werden. Wählen Sie unten einen freigegebenen Ordner und bestätigen Sie ihn mit Ihrem DSM-Passwort.",
   "ready": "Der Dateizugriff im Hintergrund ist bereit.",
   "confirming": "Hintergrundzugriff wird bestätigt. Bitte nicht erneut senden.",
   "needs": "Ein Administrator muss den Dateizugriff im Hintergrund genehmigen.",
   "blocked": "Der Dateizugriff im Hintergrund ist nicht verfügbar. Bitten Sie einen Administrator, die App-Einrichtung zu prüfen.",
-  "executorNeeds": "Ein Administrator muss den Systemzugriff für diese App genehmigen.",
   "executorBlocked": "Der Systemzugriff ist nicht verfügbar. Bitten Sie einen Administrator, die App-Einrichtung zu prüfen.",
   "noticeAdmin": "Einige Funktionen sind erst verfügbar, wenn Sie den Systemzugriff für diese App genehmigen.",
   "noticeUser": "Einige Funktionen sind erst verfügbar, wenn ein Administrator den Systemzugriff für diese App genehmigt.",
@@ -38,9 +48,9 @@
   "pending": "Auftrag abgebrochen. Der Widerruf steht noch aus; die App versucht es erneut.",
   "error": "Die Aktion konnte nicht abgeschlossen werden. Aktualisieren Sie die Ansicht und versuchen Sie es erneut. Wenn der Fehler bestehen bleibt, wenden Sie sich an Ihren Administrator.",
   "setupError": "Die Genehmigung konnte nicht abgeschlossen werden. Geben Sie Ihr DSM-Passwort erneut ein und versuchen Sie es noch einmal, oder prüfen Sie die App-Einrichtung.",
-  "passwordRejected": "Das DSM-Passwort ist falsch. Geben Sie es erneut ein.",
-  "passwordRequired": "Geben Sie zur Freigabe das DSM-Passwort ein.",
-  "passwordConfirmFailed": "DSM konnte das Administratorpasswort nicht bestätigen. Es wurde nichts geändert; versuchen Sie es erneut.",
+  "passwordRejected": "Falsches Passwort. Versuchen Sie es erneut.",
+  "passwordRequired": "Geben Sie Ihr DSM-Passwort ein.",
+  "passwordConfirmFailed": "DSM konnte das Passwort nicht prüfen. Es wurde nichts geändert; versuchen Sie es erneut.",
   "confirmingHelp": "Der Hintergrunddienst der App startet und prüft mit DSM. Das kann bis zu einer Minute dauern.",
   "denied": "Der Zugriff wurde verweigert. Prüfen Sie Ihre Ordnerberechtigungen und versuchen Sie es erneut.",
   "session": "Melden Sie sich erneut bei DSM an und aktualisieren Sie dann die Ansicht.",
@@ -60,12 +70,9 @@
   "waiting_executor": "Warten auf den Start der Systemdienste",
   "status": "Status",
   "statusReady": "Bereit",
-  "statusNeeds": "Genehmigung erforderlich",
-  "statusScope": "Freigegebener Ordner erforderlich",
   "statusBlocked": "Nicht verfügbar",
   "statusConfirming": "Wird bestätigt",
   "statusUnreachable": "Die App hat keine Antwort von ihrem Systemdienst erhalten. Mögliche Ursachen: Die App wurde über einen Alias des Anwendungsportals geöffnet und mit einer älteren synopkgland-CLI erstellt; die DSM-Anmeldung ist abgelaufen; oder der Dienst ist noch nicht gestartet oder wurde beendet. Öffnen Sie die App über den DSM-Desktop oder laden Sie die Seite neu; bleibt der Fehler bestehen, genehmigen Sie erneut oder wenden Sie sich an den Entwickler der App.",
   "statusStarting": "Der Hintergrunddienst der App führt nach einer Installation oder einem Upgrade noch seinen Startschritt aus. Aktualisieren Sie gleich; wenn dies anhält, genehmigen Sie erneut oder wenden Sie sich an den Entwickler der App.",
-  "hintPassword": "Geben Sie das DSM-Passwort ein, um zu bestätigen.",
   "retry": "Neuer Versuch"
 }

package/dist/i18n/delegate/en.json

@@ -1,18 +1,28 @@
 {
   "title": "Background file access",
   "help": "Downloads continue after you close this app. Each job can write only to the folder you select, for up to one hour. Existing files are never replaced.",
-  "setupTitle": "Administrator setup",
-  "setupHelp": "Approve this app once to let it run tasks that need system access.",
-  "setupHelpFiles": "Approve this app once to let it complete file jobs while users are offline.",
+  "setupTitle": "System access",
+  "setupHelp": "Lets this app run the system tasks declared in its package.",
+  "setupHelpFiles": "Lets this app finish file jobs for users after they sign out.",
+  "consentTitle": "Approve this app once",
+  "consentTitleUser": "This app needs administrator approval",
+  "consentWhy": "This app isn't made by Synology, and DSM doesn't let third-party apps run with system privileges.",
+  "consentPurpose": "Some of its features need system privileges.",
+  "consentPurposeFiles": "It needs system privileges to finish file jobs for users after they sign out.",
+  "consentDetails": "About this approval",
+  "pointPassword": "Use the password of the DSM account you're signed in with now.",
+  "passwordNote": "DSM checks it directly. It isn't sent to this app's service or saved.",
+  "pointLimited": "The app can then run only the system tasks declared in its package, and nothing else with system privileges.",
+  "pointUpdate": "If an update changes those tasks, you'll be asked to approve again.",
+  "pointRevoke": "Approval adds the app's tasks to Task Scheduler. Uninstalling the app removes them and ends the approval.",
+  "consentAsk": "Ask an administrator to open this app and approve it once.",
   "password": "DSM password",
-  "authorize": "Approve system access",
+  "authorize": "Approve",
   "confirmShare": "Confirm share",
-  "scopeNeeds": "Share needs confirmation. Choose a share below and confirm it with your DSM password.",
   "ready": "Background file access is ready.",
   "confirming": "Confirming background access. Do not submit again.",
   "needs": "An administrator must approve background file access.",
   "blocked": "Background file access is unavailable. Ask an administrator to check the app setup.",
-  "executorNeeds": "An administrator must approve system access for this app.",
   "executorBlocked": "System access is unavailable. Ask an administrator to check the app setup.",
   "noticeAdmin": "Some features are unavailable until you approve system access for this app.",
   "noticeUser": "Some features are unavailable until an administrator approves system access for this app.",
@@ -38,9 +48,9 @@
   "pending": "Job canceled. Revocation is pending; the app will retry.",
   "error": "The action could not be completed. Refresh and try again. If it keeps failing, contact your administrator.",
   "setupError": "Approval could not be completed. Re-enter your DSM password and try again, or check the app setup.",
-  "passwordRejected": "The DSM password is incorrect. Enter it again.",
-  "passwordRequired": "Enter the DSM password to approve.",
-  "passwordConfirmFailed": "DSM could not confirm the administrator password. Nothing was changed; try again.",
+  "passwordRejected": "Incorrect password. Try again.",
+  "passwordRequired": "Enter your DSM password.",
+  "passwordConfirmFailed": "DSM couldn't check the password. Nothing was changed; try again.",
   "confirmingHelp": "This can take up to a minute while the app’s background service starts and checks with DSM.",
   "denied": "Access was refused. Check your folder permissions and try again.",
   "session": "Sign in to DSM again, then refresh.",
@@ -60,12 +70,9 @@
   "waiting_executor": "Waiting for system services to start",
   "status": "Status",
   "statusReady": "Ready",
-  "statusNeeds": "Needs approval",
-  "statusScope": "Needs a shared folder",
   "statusBlocked": "Unavailable",
   "statusConfirming": "Confirming",
   "statusUnreachable": "The app could not get an answer from its system service. Possible causes: the app was opened through an Application Portal alias and was built with an older synopkgland CLI; the DSM sign-in has expired; or the service has not started yet or has stopped. Open the app from the DSM desktop or refresh the page; if this continues, approve again or contact the app's developer.",
   "statusStarting": "The app's background service is still running its start step after an install or upgrade. Refresh in a moment; if this continues, approve again or contact the app's developer.",
-  "hintPassword": "Enter the DSM password to confirm.",
   "retry": "Retry"
 }

package/dist/i18n/delegate/es.json

@@ -1,18 +1,28 @@
 {
   "title": "Acceso a archivos en segundo plano",
   "help": "Las descargas continúan después de cerrar esta aplicación. Cada tarea solo puede escribir en la carpeta seleccionada, durante una hora como máximo. Los archivos existentes nunca se reemplazan.",
-  "setupTitle": "Configuración del administrador",
-  "setupHelp": "Apruebe esta aplicación una vez para que pueda ejecutar las tareas que requieren acceso al sistema.",
-  "setupHelpFiles": "Apruebe esta aplicación una vez para que complete tareas de archivos mientras los usuarios están desconectados.",
+  "setupTitle": "Acceso al sistema",
+  "setupHelp": "Permite que esta aplicación ejecute las tareas del sistema declaradas en su paquete.",
+  "setupHelpFiles": "Permite que esta aplicación termine las tareas de archivos de los usuarios después de que cierren sesión.",
+  "consentTitle": "Aprobar esta aplicación una sola vez",
+  "consentTitleUser": "Esta aplicación necesita la aprobación de un administrador",
+  "consentWhy": "Esta aplicación no está desarrollada por Synology, y DSM no permite que las aplicaciones de terceros se ejecuten con privilegios del sistema.",
+  "consentPurpose": "Algunas de sus funciones necesitan privilegios del sistema.",
+  "consentPurposeFiles": "Necesita privilegios del sistema para terminar las tareas de archivos de los usuarios después de que cierren sesión.",
+  "consentDetails": "Acerca de esta aprobación",
+  "pointPassword": "Use la contraseña de la cuenta de DSM con la que ha iniciado sesión.",
+  "passwordNote": "DSM la comprueba directamente. No se envía al servicio de esta aplicación ni se guarda.",
+  "pointLimited": "Después, la aplicación solo puede ejecutar las tareas del sistema declaradas en su paquete, y nada más con privilegios del sistema.",
+  "pointUpdate": "Si una actualización cambia estas tareas, se le pedirá que la apruebe de nuevo.",
+  "pointRevoke": "La aprobación añade las tareas de la aplicación al Programador de tareas. Al desinstalar la aplicación, se eliminan y la aprobación termina.",
+  "consentAsk": "Pida a un administrador que abra esta aplicación y la apruebe una vez.",
   "password": "Contraseña de DSM",
-  "authorize": "Aprobar el acceso al sistema",
+  "authorize": "Aprobar",
   "confirmShare": "Confirmar carpeta compartida",
-  "scopeNeeds": "La carpeta compartida debe confirmarse. Elija una carpeta compartida abajo y confírmela con su contraseña de DSM.",
   "ready": "El acceso a archivos en segundo plano está listo.",
   "confirming": "Confirmando el acceso en segundo plano. No vuelva a enviar.",
   "needs": "Un administrador debe aprobar el acceso a archivos en segundo plano.",
   "blocked": "El acceso a archivos en segundo plano no está disponible. Pida a un administrador que revise la configuración de la aplicación.",
-  "executorNeeds": "Un administrador debe aprobar el acceso al sistema para esta aplicación.",
   "executorBlocked": "El acceso al sistema no está disponible. Pida a un administrador que revise la configuración de la aplicación.",
   "noticeAdmin": "Algunas funciones no están disponibles hasta que apruebe el acceso al sistema para esta aplicación.",
   "noticeUser": "Algunas funciones no están disponibles hasta que un administrador apruebe el acceso al sistema para esta aplicación.",
@@ -38,9 +48,9 @@
   "pending": "Tarea cancelada. La revocación está pendiente; la aplicación volverá a intentarlo.",
   "error": "No se pudo completar la acción. Actualice e inténtelo de nuevo. Si sigue fallando, póngase en contacto con su administrador.",
   "setupError": "No se pudo completar la aprobación. Vuelva a introducir su contraseña de DSM e inténtelo de nuevo, o revise la configuración de la aplicación.",
-  "passwordRejected": "La contraseña de DSM no es correcta. Vuelva a introducirla.",
-  "passwordRequired": "Introduzca la contraseña de DSM para aprobar.",
-  "passwordConfirmFailed": "DSM no pudo confirmar la contraseña de administrador. No se ha cambiado nada; vuelva a intentarlo.",
+  "passwordRejected": "Contraseña incorrecta. Vuelva a intentarlo.",
+  "passwordRequired": "Introduzca su contraseña de DSM.",
+  "passwordConfirmFailed": "DSM no pudo comprobar la contraseña. No se ha cambiado nada; vuelva a intentarlo.",
   "confirmingHelp": "El servicio en segundo plano de la aplicación se está iniciando y comprobando con DSM. Puede tardar hasta un minuto.",
   "denied": "Se denegó el acceso. Compruebe los permisos de la carpeta e inténtelo de nuevo.",
   "session": "Vuelva a iniciar sesión en DSM y luego actualice.",
@@ -60,12 +70,9 @@
   "waiting_executor": "Esperando a que se inicien los servicios del sistema",
   "status": "Estado",
   "statusReady": "Listo",
-  "statusNeeds": "Requiere aprobación",
-  "statusScope": "Falta confirmar la carpeta compartida",
   "statusBlocked": "No disponible",
   "statusConfirming": "Confirmando",
   "statusUnreachable": "La aplicación no obtuvo respuesta de su servicio del sistema. Posibles causas: la aplicación se abrió mediante un alias del Portal de aplicaciones y se compiló con una CLI de synopkgland antigua; la sesión de DSM ha caducado; o el servicio aún no se ha iniciado o se ha detenido. Abra la aplicación desde el escritorio de DSM o actualice la página; si continúa, apruebe de nuevo o contacte con el desarrollador de la aplicación.",
   "statusStarting": "El servicio en segundo plano de la aplicación aún está ejecutando su paso de inicio tras una instalación o actualización. Actualice en un momento; si continúa, apruebe de nuevo o póngase en contacto con el desarrollador de la aplicación.",
-  "hintPassword": "Introduzca la contraseña de DSM para confirmar.",
   "retry": "Volver a intentar"
 }

package/dist/i18n/delegate/fr.json

@@ -1,18 +1,28 @@
 {
   "title": "Accès aux fichiers en arrière-plan",
   "help": "Les téléchargements continuent après la fermeture de cette application. Chaque tâche ne peut écrire que dans le dossier sélectionné, pendant une heure au maximum. Les fichiers existants ne sont jamais remplacés.",
-  "setupTitle": "Configuration administrateur",
-  "setupHelp": "Approuvez cette application une fois pour qu’elle puisse exécuter les tâches qui nécessitent un accès système.",
-  "setupHelpFiles": "Approuvez cette application une fois pour qu’elle termine les tâches de fichiers pendant que les utilisateurs sont hors ligne.",
+  "setupTitle": "Accès système",
+  "setupHelp": "Permet à cette application d’exécuter les tâches système déclarées dans son paquet.",
+  "setupHelpFiles": "Permet à cette application de terminer les tâches de fichiers des utilisateurs après leur déconnexion.",
+  "consentTitle": "Approuver cette application une seule fois",
+  "consentTitleUser": "Cette application a besoin de l’approbation d’un administrateur",
+  "consentWhy": "Cette application n’est pas développée par Synology, et DSM n’autorise pas les applications tierces à s’exécuter avec des privilèges système.",
+  "consentPurpose": "Certaines de ses fonctions nécessitent des privilèges système.",
+  "consentPurposeFiles": "Elle a besoin de privilèges système pour terminer les tâches de fichiers des utilisateurs après leur déconnexion.",
+  "consentDetails": "À propos de cette approbation",
+  "pointPassword": "Utilisez le mot de passe du compte DSM avec lequel vous êtes connecté.",
+  "passwordNote": "DSM le vérifie directement. Il n’est ni envoyé au service de cette application, ni enregistré.",
+  "pointLimited": "L’application peut ensuite exécuter uniquement les tâches système déclarées dans son paquet, et rien d’autre avec des privilèges système.",
+  "pointUpdate": "Si une mise à jour modifie ces tâches, une nouvelle approbation vous sera demandée.",
+  "pointRevoke": "L’approbation ajoute les tâches de l’application au Planificateur de tâches. La désinstallation de l’application les supprime et met fin à l’approbation.",
+  "consentAsk": "Demandez à un administrateur d’ouvrir cette application et de l’approuver une fois.",
   "password": "Mot de passe DSM",
-  "authorize": "Approuver l’accès système",
+  "authorize": "Approuver",
   "confirmShare": "Confirmer le dossier partagé",
-  "scopeNeeds": "Le dossier partagé doit être confirmé. Choisissez un dossier partagé ci-dessous et confirmez-le avec votre mot de passe DSM.",
   "ready": "L’accès aux fichiers en arrière-plan est prêt.",
   "confirming": "Confirmation de l'accès en arrière-plan. Ne soumettez pas à nouveau.",
   "needs": "Un administrateur doit approuver l’accès aux fichiers en arrière-plan.",
   "blocked": "L’accès aux fichiers en arrière-plan n’est pas disponible. Demandez à un administrateur de vérifier la configuration de l’application.",
-  "executorNeeds": "Un administrateur doit approuver l’accès système pour cette application.",
   "executorBlocked": "L’accès système n’est pas disponible. Demandez à un administrateur de vérifier la configuration de l’application.",
   "noticeAdmin": "Certaines fonctions restent indisponibles tant que vous n’avez pas approuvé l’accès système pour cette application.",
   "noticeUser": "Certaines fonctions restent indisponibles tant qu’un administrateur n’a pas approuvé l’accès système pour cette application.",
@@ -38,9 +48,9 @@
   "pending": "Tâche annulée. La révocation est en attente ; l’application va réessayer.",
   "error": "L’action n’a pas pu être effectuée. Actualisez et réessayez. Si le problème persiste, contactez votre administrateur.",
   "setupError": "L’approbation n’a pas pu être effectuée. Saisissez à nouveau votre mot de passe DSM et réessayez, ou vérifiez la configuration de l’application.",
-  "passwordRejected": "Le mot de passe DSM est incorrect. Saisissez-le à nouveau.",
-  "passwordRequired": "Saisissez le mot de passe DSM pour approuver.",
-  "passwordConfirmFailed": "DSM n'a pas pu confirmer le mot de passe administrateur. Rien n'a été modifié ; réessayez.",
+  "passwordRejected": "Mot de passe incorrect. Réessayez.",
+  "passwordRequired": "Saisissez votre mot de passe DSM.",
+  "passwordConfirmFailed": "DSM n’a pas pu vérifier le mot de passe. Rien n’a été modifié ; réessayez.",
   "confirmingHelp": "Le service d’arrière-plan de l’application démarre et effectue des vérifications auprès de DSM. Cela peut prendre jusqu’à une minute.",
   "denied": "L’accès a été refusé. Vérifiez les autorisations du dossier et réessayez.",
   "session": "Reconnectez-vous à DSM, puis actualisez.",
@@ -60,12 +70,9 @@
   "waiting_executor": "En attente du démarrage des services système",
   "status": "Statut",
   "statusReady": "Prêt",
-  "statusNeeds": "Approbation requise",
-  "statusScope": "Dossier partagé à confirmer",
   "statusBlocked": "Indisponible",
   "statusConfirming": "Confirmation",
   "statusUnreachable": "L'application n'a pas obtenu de réponse de son service système. Causes possibles : l'application a été ouverte par un alias du Portail d'application et compilée avec une ancienne CLI synopkgland ; la connexion à DSM a expiré ; ou le service n'a pas encore démarré ou s'est arrêté. Ouvrez l'application depuis le bureau DSM ou actualisez la page ; si le problème persiste, approuvez de nouveau ou contactez le développeur de l'application.",
   "statusStarting": "Le service en arrière-plan de l'application exécute encore son étape de démarrage après une installation ou une mise à niveau. Actualisez dans un instant ; si cela persiste, approuvez de nouveau ou contactez le développeur de l'application.",
-  "hintPassword": "Saisissez le mot de passe DSM pour confirmer.",
   "retry": "Réessayer"
 }

package/dist/i18n/delegate/it.json

@@ -1,18 +1,28 @@
 {
   "title": "Accesso ai file in background",
   "help": "I download continuano dopo la chiusura di questa app. Ogni processo può scrivere solo nella cartella selezionata, per un massimo di un’ora. I file esistenti non vengono mai sostituiti.",
-  "setupTitle": "Configurazione amministratore",
-  "setupHelp": "Approvare questa app una volta per consentirle di eseguire le attività che richiedono l’accesso di sistema.",
-  "setupHelpFiles": "Approvare questa app una volta per consentirle di completare i processi sui file mentre gli utenti sono offline.",
+  "setupTitle": "Accesso di sistema",
+  "setupHelp": "Consente a questa app di eseguire le attività di sistema dichiarate nel suo pacchetto.",
+  "setupHelpFiles": "Consente a questa app di completare i processi sui file per gli utenti anche dopo che si sono disconnessi.",
+  "consentTitle": "Approvare questa app una sola volta",
+  "consentTitleUser": "Questa app richiede l’approvazione di un amministratore",
+  "consentWhy": "Questa app non è sviluppata da Synology e DSM non consente alle app di terze parti di essere eseguite con privilegi di sistema.",
+  "consentPurpose": "Alcune sue funzioni richiedono privilegi di sistema.",
+  "consentPurposeFiles": "Richiede privilegi di sistema per completare i processi sui file per gli utenti anche dopo che si sono disconnessi.",
+  "consentDetails": "Informazioni su questa approvazione",
+  "pointPassword": "Usare la password dell’account DSM con cui si è effettuato l’accesso.",
+  "passwordNote": "DSM la verifica direttamente. Non viene inviata al servizio di questa app né salvata.",
+  "pointLimited": "In seguito l’app può eseguire solo le attività di sistema dichiarate nel suo pacchetto e nient’altro con privilegi di sistema.",
+  "pointUpdate": "Se un aggiornamento modifica queste attività, verrà richiesta una nuova approvazione.",
+  "pointRevoke": "L’approvazione aggiunge le attività dell’app all’Utilità di pianificazione. Disinstallando l’app, queste vengono rimosse e l’approvazione termina.",
+  "consentAsk": "Chiedere a un amministratore di aprire questa app e approvarla una volta.",
   "password": "Password DSM",
-  "authorize": "Approva l’accesso di sistema",
+  "authorize": "Approva",
   "confirmShare": "Conferma cartella condivisa",
-  "scopeNeeds": "La cartella condivisa deve essere confermata. Scegliere una cartella condivisa qui sotto e confermarla con la password DSM.",
   "ready": "L’accesso ai file in background è pronto.",
   "confirming": "Accesso in background in fase di conferma. Non inviare di nuovo.",
   "needs": "Un amministratore deve approvare l’accesso ai file in background.",
   "blocked": "L’accesso ai file in background non è disponibile. Chiedere a un amministratore di controllare la configurazione dell’app.",
-  "executorNeeds": "Un amministratore deve approvare l’accesso di sistema per questa app.",
   "executorBlocked": "L’accesso di sistema non è disponibile. Chiedere a un amministratore di controllare la configurazione dell’app.",
   "noticeAdmin": "Alcune funzioni non sono disponibili finché non si approva l’accesso di sistema per questa app.",
   "noticeUser": "Alcune funzioni non sono disponibili finché un amministratore non approva l’accesso di sistema per questa app.",
@@ -38,9 +48,9 @@
   "pending": "Processo annullato. La revoca è in sospeso; l’app riproverà.",
   "error": "Impossibile completare l’azione. Aggiornare e riprovare. Se il problema persiste, contattare l’amministratore.",
   "setupError": "Impossibile completare l’approvazione. Inserire di nuovo la password DSM e riprovare, oppure controllare la configurazione dell’app.",
-  "passwordRejected": "La password DSM non è corretta. Inserirla di nuovo.",
-  "passwordRequired": "Inserire la password DSM per approvare.",
-  "passwordConfirmFailed": "DSM non è riuscito a confermare la password dell'amministratore. Non è stato modificato nulla; riprovare.",
+  "passwordRejected": "Password errata. Riprovare.",
+  "passwordRequired": "Inserire la password DSM.",
+  "passwordConfirmFailed": "DSM non è riuscito a verificare la password. Non è stato modificato nulla; riprovare.",
   "confirmingHelp": "Il servizio in background dell’app si sta avviando e sta effettuando verifiche con DSM. Può richiedere fino a un minuto.",
   "denied": "Accesso negato. Controllare le autorizzazioni della cartella e riprovare.",
   "session": "Accedere di nuovo a DSM, quindi aggiornare.",
@@ -60,12 +70,9 @@
   "waiting_executor": "In attesa dell’avvio dei servizi di sistema",
   "status": "Stato",
   "statusReady": "Pronto",
-  "statusNeeds": "Approvazione necessaria",
-  "statusScope": "Cartella condivisa da confermare",
   "statusBlocked": "Non disponibile",
   "statusConfirming": "Conferma in corso",
   "statusUnreachable": "L'app non ha ricevuto risposta dal suo servizio di sistema. Possibili cause: l'app è stata aperta tramite un alias del Portale applicazioni ed è stata compilata con una CLI synopkgland precedente; l'accesso a DSM è scaduto; oppure il servizio non è ancora avviato o si è arrestato. Aprire l'app dal desktop DSM o aggiornare la pagina; se il problema persiste, approvare di nuovo o contattare lo sviluppatore dell'app.",
   "statusStarting": "Il servizio in background dell'app sta ancora eseguendo il passaggio di avvio dopo un'installazione o un aggiornamento. Aggiornare tra poco; se continua, approvare di nuovo o contattare lo sviluppatore dell'app.",
-  "hintPassword": "Inserire la password DSM per confermare.",
   "retry": "Riprova"
 }