4.2.7-7
- 群晖设置页支持文件管理与远程开机扩展：单共享目录、独立授权凭据、端口配置，默认关闭。
- 群晖客户端为唤醒接口增加认证，使用无提权 UDP 唤醒，并限制文件服务遍历符号链接。
- 增加扩展运行状态与错误提示，保留配置回滚、禁用后的凭据和基础隧道运行。
- 打包拒绝缺少新版扩展能力的客户端，设置网页仍使用独立 Go CGI。

4.2.7-4
- DSM 静态入口从同源主窗口携带 SynoToken，修复启用 CSRF 时打开设置页的 403。
- 修复排障脚本在 DSM 7 误查 etc 目录导致运行状态显示停止。

4.2.7-3
- 修正设置页绝对路径，控制台统一使用 web.ddnsto.com。
- 设置页显示进程状态、服务端连接、设备 ID、版本和有界脱敏日志。
- 连接日志写入套件持久目录，增加只读设备排障脚本。

4.2.7-2
--------
- Add a local DSM administrator settings page for viewing and editing Token and device index.
- Replace the desktop website shortcut with an authenticated, package-user CGI.
- Save private configuration atomically; restart only running clients, with rollback on failure.
- Reject unauthorized, forged and stale submissions; keep Token out of URLs and response caches.
- Embed the settings page in ARM/amd64 CGI binaries and verify both in each SPK.
- DSM authentication and CGI privilege integration still require device qualification.

4.2.7-1
--------
- Package the Go DDNSTO 4.2.7 client for ARM and amd64, DSM 6 and DSM 7.
- Parameterize input/output paths; reject missing binaries and mismatched architectures/hashes.
- Build SPKs in isolated staging directories and emit SHA256 checksums and source manifests.
- Keep package configuration and boot state in persistent private storage.
- Use DSM-managed desktop integration and PID-scoped process supervision.
- Correct numeric device-index loading in the client (nonzero legacy indices require migration testing).
- Linux build validation completed; DSM device qualification is still required.
