@synopackageland/cli 0.10.2 → 0.10.3

package/README.md

@@ -52,7 +52,8 @@ The CLI packages, deploys and checks. The app-side code is the SDK
 `github.com/synopackageland/syno-pkg-land-sdk` and the npm package `@synopackageland/sdk` (Vue components at
 `@synopackageland/sdk/vue`). The `require github.com/synopackageland/syno-pkg-land-sdk` line in
 `backend/go.mod` is the app's only SDK version; `build` compiles the executor of that version
-and checks it against the digests shipped in this CLI. CLI 0.9.x builds SDK 0.9.x.
+and checks it against the digests shipped in this CLI. A CLI builds the SDK releases of its own minor version
+(CLI X.Y.z builds SDK X.Y.*) that its digest table records; `EXECUTOR_DIGEST_MISMATCH` names the ones it knows.
 
 The SDK repositories are private for now, so Go cannot fetch them from proxy.golang.org. Set
 `go env -w GOPRIVATE=github.com/synopackageland/*` and give git a credential that can read
@@ -77,11 +78,29 @@ Add them with `init --with …` or later with `synopkgland add <capability…>`.
 | `login` | Sign users in with their DSM account, without the DSM desktop | Nobody; requires HTTPS for password sign-in |
 | `delegate` | Move files into a user's chosen folder while the user is offline | An administrator, once |
 | `root-ops` | Run fixed `root/*.sh` scripts for administrators | An administrator, once |
-| `portal` | Open the app from its own Application Portal alias | An administrator sets the alias; needs `root-ops` or `delegate` and DSM 7.1-42661+ (below 7.2-64570 the executor registers the entry) |
+| `portal` | Open the app from its own Application Portal alias, with a login page style (`login_style` changes the colour, wallpaper and title) | An administrator sets the alias; needs `root-ops` or `delegate` and DSM 7.1-42661+ (below 7.2-64570 the executor registers the entry) |
 
 Delegate is implemented; its default operation is `files.moveFromStaging`.
 Device lifecycle acceptance on real hardware is still pending for delegate and root operations.
 
+## Lifecycle scripts
+
+Every template has a `dsm-scripts/` folder with DSM's own script names: `preinst`, `postinst`,
+`preupgrade`, `postupgrade`, `preuninst`, `postuninst` and `start-stop-status`. Each does nothing
+until you edit it. `build` packs them and calls each one from the generated script of the same
+name, after the SDK's steps (before them for `preupgrade`, `preuninst` and `stop`); they run as
+the package account, with DSM's arguments, environment and exit codes. Projects without
+`dsm-scripts/` build as before. See `synopkgland skill show lifecycle`.
+
+Root work after an install or upgrade, such as removing what an older version left, is not a
+lifecycle script: name a `root/` program as `root.start` in dsm-package.yaml. The executor runs
+it as root once at the first start of each new version, while the administrator's approval is
+live, for at most 60 seconds; a failure is logged and does not block the start, and the executor
+`status` reports the result as `start_step`. While it runs, the executor answers only `status`
+(`state: "starting"`) and refuses other requests with the retryable `EXECUTOR_STARTING`; the DSM
+window's approval waits for it. The program cannot declare `run` or `job`, and
+declaring it changes the policy digest, so an administrator approves the App again.
+
 ## Commands
 
 | Command | Purpose |

package/dist/build-spk/generator.js

@@ -19,6 +19,7 @@ import { createReproducibleTar } from "./reproducible-archive.js";
 import { copyProjectNotices } from "./notices.js";
 import { renderDeleteAppDataBlock } from "./delete-app-data.js";
 import { renderUninstallWizardFiles } from "./uninstall-wizard.js";
+import { APP_SCRIPTS_DIR, APP_SCRIPTS_SPK_DIR, composeAppScript, readAppScripts } from "../standalone/app-scripts.js";
 import { renderInstallWizardFiles } from "./install-wizard.js";
 import { renderWizardFiles, writeWizardUiFiles } from "./wizard-i18n.js";
 import { sharedFolderCombobox } from "./share-combobox.js";
@@ -121,11 +122,19 @@ export async function buildSpk(options) {
         }
         writeWizards(staging, contract, parsedCompose?.compose, "container");
         mkdirSync(join(staging, "scripts"), { recursive: true });
+        // validateProject already refused a bad scripts/ entry.
+        const appScripts = readAppScripts(options.project.root, () => { }) ?? [];
         for (const name of SCRIPT_NAMES) {
             const scriptPath = join(staging, "scripts", name);
-            writeFileSync(scriptPath, renderManagedScript(name, contract, isResourceWorkerRoute, rwEligibility?.adminport, isDynamicRoute, rwEligibility?.headless === true), "utf8");
+            const script = renderManagedScript(name, contract, isResourceWorkerRoute, rwEligibility?.adminport, isDynamicRoute, rwEligibility?.headless === true);
+            writeFileSync(scriptPath, appScripts.includes(name) ? composeAppScript(name, script) : script, "utf8");
             chmodSync(scriptPath, SCRIPT_MODE);
         }
+        for (const name of appScripts) {
+            mkdirSync(join(staging, APP_SCRIPTS_SPK_DIR), { recursive: true });
+            copyFileSync(join(options.project.root, APP_SCRIPTS_DIR, name), join(staging, APP_SCRIPTS_SPK_DIR, name));
+            chmodSync(join(staging, APP_SCRIPTS_SPK_DIR, name), SCRIPT_MODE);
+        }
         mkdirSync(join(staging, "package"), { recursive: true });
         copyFileSync(options.project.composePath, join(staging, "package", "compose.yaml"));
         copyFileSync(options.project.contractPath, join(staging, "package", "synology-app.yaml"));

package/dist/build-spk/login-style.d.ts

@@ -0,0 +1,55 @@
+/**
+ * DSM's Login Portal draws an Application Portal entry from the launcher's
+ * `loginStyle` in ui/config: the thumbnail in Control Panel > Login Portal
+ * and the alias's own login page. Without it the thumbnail stays blank.
+ * Paths are relative to ui/; DSM replaces `{0}` with 1x or 2x, and a path
+ * without it serves both.
+ */
+/** Ships next to dist/ and src/ alike: <package>/assets/login-style, drawn by scripts/render-login-style.py. */
+export declare const DEFAULT_LOGIN_STYLE_DIR: string;
+/** The login button colour; the default mask's button has the same colour. */
+export declare const DEFAULT_LOGIN_COLOR = "#2F6BD8";
+export declare const LOGIN_COLOR: RegExp;
+/** `login_style` in dsm-package.yaml, its paths resolved inside the project. */
+export interface LoginStyle {
+    color?: string;
+    wallpaper?: {
+        image: string;
+        thumbnail: string;
+    };
+    title?: string;
+}
+/** The project files login_style names, by their dsm-package.yaml field. */
+export type LoginImageField = "wallpaper" | "wallpaper_thumbnail" | "title";
+/** The frame size of a JPEG, from its first SOF segment. */
+export declare function jpegSize(bytes: Buffer): {
+    width: number;
+    height: number;
+};
+/** Why a login_style image cannot be used, or undefined. */
+export declare function loginImageProblem(field: LoginImageField, path: string): string | undefined;
+/** ui/config `loginStyle` fields and the ui/ files they name. */
+export interface LoginStyleAssets {
+    fields: Record<string, string>;
+    files: Map<string, Buffer>;
+}
+/**
+ * The App's login style over the CLI defaults. The file name carries the
+ * content, as the window icons do, so DSM and browsers load a changed image.
+ */
+export declare function loginStyleAssets(style?: LoginStyle): LoginStyleAssets;
+/** Whether a payload file is the CLI's default of that name. */
+export declare function isDefaultLoginAsset(name: "wallpaper.jpg" | "wallpaper-thumbnail.jpg" | "mask.png", bytes: Buffer): boolean;
+/** check's view of login_style: each override by its project path, or the default. */
+export interface LoginStyleReport {
+    color: string;
+    wallpaper: "default" | string;
+    title: "app-icon" | string;
+}
+export declare function loginStyleReport(root: string, style?: LoginStyle): LoginStyleReport;
+/** One line for check and inspect; inspect knows only "custom", check the project path. */
+export declare function formatLoginStyle(style: {
+    color: string;
+    wallpaper: string;
+    title: string;
+}): string;

package/dist/build-spk/login-style.js

@@ -0,0 +1,115 @@
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
+import { basename, dirname, join, relative } from "node:path";
+import { fileURLToPath } from "node:url";
+import { decodePng } from "./png.js";
+/**
+ * DSM's Login Portal draws an Application Portal entry from the launcher's
+ * `loginStyle` in ui/config: the thumbnail in Control Panel > Login Portal
+ * and the alias's own login page. Without it the thumbnail stays blank.
+ * Paths are relative to ui/; DSM replaces `{0}` with 1x or 2x, and a path
+ * without it serves both.
+ */
+/** Ships next to dist/ and src/ alike: <package>/assets/login-style, drawn by scripts/render-login-style.py. */
+export const DEFAULT_LOGIN_STYLE_DIR = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "assets", "login-style");
+/** The login button colour; the default mask's button has the same colour. */
+export const DEFAULT_LOGIN_COLOR = "#2F6BD8";
+export const LOGIN_COLOR = /^#([0-9A-Fa-f]{3}|[0-9A-Fa-f]{6})$/;
+const MAX_WALLPAPER_BYTES = 2 * 1024 * 1024;
+/** The frame size of a JPEG, from its first SOF segment. */
+export function jpegSize(bytes) {
+    if (bytes.length < 4 || bytes[0] !== 0xff || bytes[1] !== 0xd8)
+        throw new Error("Not a JPEG file (no start-of-image marker).");
+    let at = 2;
+    while (at + 4 <= bytes.length) {
+        if (bytes[at] !== 0xff)
+            break;
+        const marker = bytes[at + 1];
+        if (marker === 0xff) {
+            at += 1;
+            continue;
+        }
+        if (marker === 0xd9 || marker === 0xda)
+            break;
+        if (marker === 0x01 || (marker >= 0xd0 && marker <= 0xd7)) {
+            at += 2;
+            continue;
+        }
+        const length = bytes.readUInt16BE(at + 2);
+        const frame = marker >= 0xc0 && marker <= 0xcf && marker !== 0xc4 && marker !== 0xc8 && marker !== 0xcc;
+        if (frame && at + 9 <= bytes.length)
+            return { height: bytes.readUInt16BE(at + 5), width: bytes.readUInt16BE(at + 7) };
+        at += 2 + length;
+    }
+    throw new Error("The JPEG has no frame header.");
+}
+function exactly(name, size, width, height) {
+    if (size.width !== width || size.height !== height) {
+        throw new Error(`${name} is ${size.width}x${size.height}; it should be ${width}x${height}.`);
+    }
+}
+/** Format and size per field: the sizes DSM's own packages ship and its pages draw. */
+const IMAGE_RULES = {
+    wallpaper: (name, bytes) => {
+        const size = jpegSize(bytes);
+        if (size.width < 1920 || size.height < 1080)
+            throw new Error(`${name} is ${size.width}x${size.height}; the login page needs at least 1920x1080.`);
+        if (bytes.length > MAX_WALLPAPER_BYTES)
+            throw new Error(`${name} is ${bytes.length} bytes, over 2 MiB; every login page loads it.`);
+    },
+    wallpaper_thumbnail: (name, bytes) => exactly(name, jpegSize(bytes), 320, 200),
+    title: (name, bytes) => {
+        const image = decodePng(bytes);
+        exactly(name, image, 680, 124);
+    },
+};
+/** Why a login_style image cannot be used, or undefined. */
+export function loginImageProblem(field, path) {
+    const name = basename(path);
+    if (!existsSync(path))
+        return `${name} was not found.`;
+    try {
+        IMAGE_RULES[field](name, readFileSync(path));
+        return undefined;
+    }
+    catch (error) {
+        return error.message;
+    }
+}
+/**
+ * The App's login style over the CLI defaults. The file name carries the
+ * content, as the window icons do, so DSM and browsers load a changed image.
+ */
+export function loginStyleAssets(style = {}) {
+    const fields = { mainColor: style.color ?? DEFAULT_LOGIN_COLOR };
+    const files = new Map();
+    const add = (field, name, bytes) => {
+        const path = `images/login_${createHash("sha256").update(bytes).digest("hex").slice(0, 12)}_${name}`;
+        fields[field] = path;
+        files.set(path, bytes);
+    };
+    const asset = (name) => readFileSync(join(DEFAULT_LOGIN_STYLE_DIR, name));
+    add("defaultLoginWallpaper", "wallpaper.jpg", style.wallpaper ? readFileSync(style.wallpaper.image) : asset("wallpaper.jpg"));
+    add("defaultLoginWallpaperThumbnail", "wallpaper-thumbnail.jpg", style.wallpaper ? readFileSync(style.wallpaper.thumbnail) : asset("wallpaper-thumbnail.jpg"));
+    add("loginPreviewThumbnailMaskPath", "mask.png", asset("mask.png"));
+    if (style.title)
+        add("titleImgPath", "title.png", readFileSync(style.title));
+    return { fields, files };
+}
+/** Whether a payload file is the CLI's default of that name. */
+export function isDefaultLoginAsset(name, bytes) {
+    return bytes.equals(readFileSync(join(DEFAULT_LOGIN_STYLE_DIR, name)));
+}
+export function loginStyleReport(root, style = {}) {
+    return {
+        color: style.color ?? DEFAULT_LOGIN_COLOR,
+        wallpaper: style.wallpaper ? relative(root, style.wallpaper.image) : "default",
+        title: style.title ? relative(root, style.title) : "app-icon",
+    };
+}
+/** One line for check and inspect; inspect knows only "custom", check the project path. */
+export function formatLoginStyle(style) {
+    const wallpaper = style.wallpaper === "default" ? "CLI default wallpaper" : style.wallpaper === "custom" ? "custom wallpaper" : `wallpaper ${style.wallpaper}`;
+    const title = style.title === "app-icon" ? "App icon as title" : style.title === "none" ? "no title" : style.title === "custom" ? "custom title" : `title ${style.title}`;
+    return `Login style: colour ${style.color}, ${wallpaper}, ${title}`;
+}

package/dist/cli.js

@@ -20,6 +20,7 @@ import { buildSpk } from "./build-spk/generator.js";
 import { CONTAINER_ARCH_FAMILIES, isContainerArchFamily, isNativeArchFamily, NATIVE_ARCH_FAMILIES, parseArchList, } from "./build-spk/dsm-arch.js";
 import { DEFAULT_MIN_DSM, CONTAINER_MIN_DSM } from "./build-spk/dsm-version.js";
 import { iconReport } from "./build-spk/dsm-icons.js";
+import { formatLoginStyle, loginStyleReport } from "./build-spk/login-style.js";
 import { deployProject } from "./deploy/deploy.js";
 import { planDeployment, deployStandalone } from "./deploy/plan.js";
 import { createNasHost } from "./host/dsm-client.js";
@@ -90,6 +91,16 @@ function formatSpkChecks(report) {
             : []),
     ];
 }
+/** The root programs the executor runs at lifecycle events, without a session. */
+function formatRootSteps(report) {
+    const policy = report.executor?.policy;
+    const steps = [
+        ...(policy?.start ? [`start ${policy.start} (once after each install or upgrade)`] : []),
+        ...(policy?.stop ? [`stop ${policy.stop} (at package stop and upgrade)`] : []),
+        ...(policy?.purge ? [`purge ${policy.purge} (at uninstall)`] : []),
+    ];
+    return steps.length ? [`Root steps: ${steps.join(", ")}`] : [];
+}
 function formatSpkReport(spk, report) {
     return [
         `SPK: ${spk}`,
@@ -100,6 +111,9 @@ function formatSpkReport(spk, report) {
         ...(report.icon ? [`Icon: ${report.icon.source === "default" ? "SDK default icon" : report.icon.source === "custom" ? `custom (PACKAGE_ICON_256 sha256 ${report.icon.sha256.slice(0, 12)}…)` : "no PACKAGE_ICON"}`] : []),
         ...(report.entry === "admin-only" ? ["Entry: entry: admin-only; only a DSM administrator can open it and call any route (including SDK routes)"] : []),
         ...(report.entry === "app-privilege" ? ["Entry: entry: app-privilege; DSM Control Panel > Application Privileges decides who can use it"] : []),
+        ...formatRootSteps(report),
+        ...(report.appScripts ? [`App scripts: ${report.appScripts.join(", ")} (scripts/app, run by the generated scripts of the same name as the package account)`] : []),
+        ...(report.loginStyle ? [formatLoginStyle(report.loginStyle)] : []),
         ...(report.portal ? [`Application Portal: default alias /${report.portal.alias}/ (${report.portal.appId}), active after an administrator applies it`] : []),
         ...report.capabilities.map((cap) => `Capability ${cap.name}: ${cap.requiresAdminApproval ? "needs DSM administrator approval" : "ready after install"}`),
         "payload:",
@@ -217,11 +231,18 @@ export async function runCli(argv) {
             const iconText = formatIconReport(icon, "dsm-package.yaml");
             if (iconText.warning)
                 console.error(iconText.warning);
+            // A portal build carries the login style; a native layout keeps its own ui/config.
+            const loginStyle = !isNativeLayout(standalone) && "portal" in loaded.manifest && loaded.manifest.portal
+                ? loginStyleReport(standalone, "loginStyle" in loaded.manifest ? loaded.manifest.loginStyle : undefined) : undefined;
             emit("check", {
                 package: loaded.manifest.package,
                 capabilities: "capabilities" in loaded.manifest ? loaded.manifest.capabilities : {},
                 icon,
-            }, ["Validation passed.", ...iconText.lines].join("\n"));
+                ...(loginStyle ? { loginStyle } : {}),
+            }, ["Validation passed.", ...iconText.lines, ...(loginStyle ? [
+                    formatLoginStyle(loginStyle),
+                    "info: set login_style: in dsm-package.yaml (color, wallpaper with wallpaper_thumbnail, title) to brand the Login Portal page.",
+                ] : [])].join("\n"));
             return;
         }
         const project = requireProject(rootOf(command));

package/dist/error-registry.js

@@ -389,6 +389,26 @@ export const ERROR_REGISTRY = {
         "description": "dsm-package.yaml is not a valid YAML object.",
         "suggestion": "Fix the YAML syntax in dsm-package.yaml."
     },
+    "APP_SCRIPT_UNKNOWN": {
+        "code": "APP_SCRIPT_UNKNOWN",
+        "description": "A file in the project's dsm-scripts/ folder does not have a DSM package script name the SDK runs.",
+        "suggestion": "Name it preinst, postinst, preuninst, postuninst, preupgrade, postupgrade or start-stop-status, or move it out of dsm-scripts/. prereplace and postreplace are not supported."
+    },
+    "APP_SCRIPT_INVALID": {
+        "code": "APP_SCRIPT_INVALID",
+        "description": "A dsm-scripts/<DSM script name> entry is a symlink, directory or special file.",
+        "suggestion": "Make it a regular file in the project's dsm-scripts/ folder."
+    },
+    "APP_SCRIPT_NOT_EXECUTABLE": {
+        "code": "APP_SCRIPT_NOT_EXECUTABLE",
+        "description": "A dsm-scripts/<DSM script name> file is not executable; DSM runs it directly.",
+        "suggestion": "Run chmod +x on the file."
+    },
+    "APP_SCRIPT_NO_SHEBANG": {
+        "code": "APP_SCRIPT_NO_SHEBANG",
+        "description": "A dsm-scripts/<DSM script name> file does not start with #!.",
+        "suggestion": "Start the file with an interpreter line such as #!/bin/sh."
+    },
     "STANDALONE_FIELD_UNKNOWN": {
         "code": "STANDALONE_FIELD_UNKNOWN",
         "description": "dsm-package.yaml contains an unsupported field.",
@@ -594,6 +614,11 @@ export const ERROR_REGISTRY = {
         "description": "backend.timeout_seconds needs a Go main that reads the requestTimeout the build passes.",
         "suggestion": "Declare var requestTimeout = \"\" in main.go and pass its seconds to api.WithRequestDeadline(handler, api.Timeout(...)), or remove timeout_seconds."
     },
+    "STANDALONE_REQUEST_TIMEOUT_SHORT": {
+        "code": "STANDALONE_REQUEST_TIMEOUT_SHORT",
+        "description": "The request deadline ends before a root program that root.run may run would answer: the executor answers 10 seconds after run.timeout_s and its client waits 10 more.",
+        "suggestion": "Set backend.timeout_seconds to at least the program's run.timeout_s (20 by default) + 20, or lower run.timeout_s."
+    },
     "STANDALONE_UI_WINDOW_INVALID": {
         "code": "STANDALONE_UI_WINDOW_INVALID",
         "description": "ui.window does not give a valid DSM window size.",
@@ -644,6 +669,16 @@ export const ERROR_REGISTRY = {
         "description": "An App without an executor (capabilities.rootOps or delegate) declares portal.",
         "suggestion": "Removing the sign-in alias after uninstall needs root so nginx stops serving it, but an App without escalation uses no root at any stage. Add capabilities.rootOps or delegate (executor level), or remove portal and let an administrator configure a reverse proxy in DSM."
     },
+    "STANDALONE_LOGIN_STYLE_INVALID": {
+        "code": "STANDALONE_LOGIN_STYLE_INVALID",
+        "description": "login_style in dsm-package.yaml is malformed, or set without portal.",
+        "suggestion": "Declare portal, and give login_style only color (#RRGGBB), wallpaper together with wallpaper_thumbnail, and title; omit login_style to use the CLI default style."
+    },
+    "STANDALONE_LOGIN_STYLE_IMAGE_INVALID": {
+        "code": "STANDALONE_LOGIN_STYLE_IMAGE_INVALID",
+        "description": "An image login_style names is missing, in the wrong format or the wrong size.",
+        "suggestion": "Use a JPEG wallpaper of at least 1920x1080 and at most 2 MiB, a 320x200 JPEG wallpaper_thumbnail and a 680x124 PNG title, inside the project."
+    },
     "STANDALONE_I18N_INVALID": {
         "code": "STANDALONE_I18N_INVALID",
         "description": "The i18n configuration in dsm-package.yaml is invalid.",
@@ -757,7 +792,7 @@ for (const [code, description, suggestion] of [
     ["TEMPLATES_MISSING", "@synopackageland/templates was not found.", "Reinstall @synopackageland/cli, or point SYNOPKGLAND_TEMPLATES_DIR at a templates checkout."],
     ["EXECUTOR_PIN_REQUIRED", "A package that declares rootOps or delegate was built without the executor artifact.", "Use synopkgland build so the CLI compiles and pins the executor; do not call the low-level SPK API directly."],
     ["EXECUTOR_POLICY", "capabilities.delegate has invalid operations or scope, or a binary root program lacks the file for this architecture, so the executor policy cannot be generated.", "Use the delegate declaration init/add produces and fix scope and operations against the manifest reference; for binary root programs provide root/<arch>/<name> for every arch in arches."],
-    ["EXECUTOR_POLICY_REJECTED", "The executor of the App's SDK version refuses the policy the CLI generated, so the NAS would refuse it at approval.", "The reason names the refused part: policy root/stop/purge → root.programs (schema, run, job), root.stop, uninstall.purge; policy scope/operation/destination/move/lifetime → capabilities.delegate; policy portal → portal; policy entry → entry. Fix that part of dsm-package.yaml; if it already matches the manifest reference, use the SDK version this CLI release names."],
+    ["EXECUTOR_POLICY_REJECTED", "The executor of the App's SDK version refuses the policy the CLI generated, so the NAS would refuse it at approval.", "The reason names the refused part: policy root/start/stop/purge → root.programs (schema, run, job), root.start, root.stop, uninstall.purge; policy scope/operation/destination/move/lifetime → capabilities.delegate; policy portal → portal; policy entry → entry. Fix that part of dsm-package.yaml; if it already matches the manifest reference, use the SDK version this CLI release names."],
     ["EXECUTOR_ROOT_PROGRAMS_UNSUPPORTED", "The root settings in dsm-package.yaml need an executor that supports root program settings, which the App's SDK version lacks.", "Use an SDK with root programs, stop and root_state (executor/stop_step.go), or remove the root settings."],
     ["EXECUTOR_PACKAGE", "The package name pinned into the root task is invalid.", "package must start with a letter and contain only alphanumerics (2-64 characters)."],
     ["EXECUTOR_DIGEST", "The sha256 pin for the executor or policy is malformed.", "Build again so the CLI recomputes the pin; do not hand-edit pins inside the SPK."],
@@ -781,6 +816,7 @@ for (const [code, description, suggestion] of [
     ["STANDALONE_BRIDGE_APP_INVALID", "The App directory contains a symlink or special file, or exceeds 256 MiB.", "Keep only regular files and directories in the App directory; move large data out of it."],
     ["STANDALONE_RUST_BUILD_FAILED", "The Rust App's cargo zigbuild cross-compile failed, or it produced no binary for backend.entry.", "Install Rust with rustup and the three targets (x86_64/aarch64-unknown-linux-musl, armv7-unknown-linux-gnueabihf), install cargo-zigbuild and zig; set backend.entry to the Cargo binary name; check the compiler output in the message."],
     ["STANDALONE_BRIDGE_MANIFEST_INVALID", "The bridge.json the CLI produced does not match spec/bridge/v1 manifest.schema.json.", "Check backend.entry, methods and node.package; if it still fails, report the CLI bug."],
+    ["STANDALONE_PYTHON_SDK_MISSING", "The App's SDK version has no Python SDK (python/synopkgland_app).", "Point SYNOPKGLAND_SDK_DIR at a syno-pkg-land-sdk checkout that has python/synopkgland_app, or require an SDK release that ships it."],
     ["STANDALONE_NODE_SDK_NOT_BUILT", "The App's SDK version has no built Node SDK (node/dist).", "Run npm ci && npm run build in node/ of the SYNOPKGLAND_SDK_DIR checkout first; a release SDK must contain node/dist."],
 ])
     ERROR_REGISTRY[code] = { code, description, suggestion };

package/dist/host/dsm-client.js

@@ -186,17 +186,14 @@ function createDsmNasHost(credentials, profileName) {
                         throw e;
                     return call("SYNO.Core.TaskScheduler", method, legacyVersion, legacyParams);
                 });
-                const records = await call("SYNO.Core.EventScheduler", "list", 1, {});
-                if (!Array.isArray(records))
-                    throw new Error("Invalid EventScheduler readback.");
+                // EventScheduler keys a task by its unique name; get answers no data for a missing one.
+                const bootName = `${packageIdentity} executor boot`;
                 const tasks = [];
-                for (const summary of records) {
-                    if (summary?.task_name !== `${packageIdentity} executor boot`)
-                        continue;
-                    const detail = await call("SYNO.Core.EventScheduler", "get", 1, { task_name: summary.task_name });
-                    if (!detail || detail.task_name !== summary.task_name)
+                const boot = await call("SYNO.Core.EventScheduler", "get", 1, { task_name: bootName });
+                if (boot !== undefined && boot !== null && !(typeof boot === "object" && Object.keys(boot).length === 0)) {
+                    if (boot.task_name !== bootName)
                         throw new Error("Invalid boot task readback.");
-                    tasks.push({ ...detail, name: detail.task_name, kind: "boot" });
+                    tasks.push({ ...boot, name: boot.task_name, kind: "boot" });
                 }
                 const listed = await taskRead("list", 3, { start: 0, limit: 500 }, 2, { offset: 0, limit: 500 });
                 if (!Array.isArray(listed?.tasks) || !Number.isInteger(listed.total) || listed.total !== listed.tasks.length || listed.total > 500)

package/dist/init.js

@@ -5,10 +5,11 @@ import { capabilityNames, capabilitySettings } from "./capabilities.js";
 import { MOVE_FROM_STAGING } from './runtime/delegate-contract.js';
 import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, relative, resolve } from "node:path";
+import { APP_SCRIPTS_DIR } from "./standalone/app-scripts.js";
 import { SDK_MODULE, SDK_PACKAGE, sdkSource } from "./runtime/sdk-source.js";
 import { templatesRoot } from "./template-paths.js";
 import { BASE_BORROWED, BRIDGE_TEMPLATES, borrowedFiles, borrowedTarget, capabilityOverlays, VUE_OVERLAYS } from "./capability-overlays.js";
-import { copyAppTree, copyNodeSdk, NODE_SDK_PACKAGE } from "./standalone/bridge-app.js";
+import { copyNodeSdk, copyPythonSdk, NODE_SDK_PACKAGE } from "./standalone/bridge-app.js";
 import { API_PERMISSIONS_FILE } from "./standalone/api-permissions.js";
 import { resolveMinDsm, assertContainerMinDsm, DEFAULT_MIN_DSM, isDsmAtLeast } from "./build-spk/dsm-version.js";
 import { readSharedFolder } from "./standalone/shared-folder.js";
@@ -135,7 +136,9 @@ export function initFromTemplate(template, targetDir, options = {}) {
     // Shared legal resources also live in the CLI package; only the template
     // terms are an unconditional part of a generated project.
     const shared = join(templatesRoot(), "_shared");
-    const sharedFiles = ["LICENSES/TEMPLATE.txt", "AGENTS.md", "CLAUDE.md"];
+    // dsm-scripts/: the DSM lifecycle scripts every project starts with (doing nothing); older templates have none.
+    const sharedScripts = existsSync(join(shared, APP_SCRIPTS_DIR)) ? readdirSync(join(shared, APP_SCRIPTS_DIR)).sort().map(name => `${APP_SCRIPTS_DIR}/${name}`) : [];
+    const sharedFiles = ["LICENSES/TEMPLATE.txt", "AGENTS.md", "CLAUDE.md", ...sharedScripts];
     const files = [...templateFiles(source), ...sharedFiles, ...overlays.flatMap(root => templateFiles(root)),
         ...borrowed.map(borrowedTarget), ...(ui === "vue" ? ["frontend/third-party-notices.mjs"] : [])];
     const collisions = files.map(targetName).filter((file) => existsSync(join(targetDir, file)));
@@ -144,9 +147,10 @@ export function initFromTemplate(template, targetDir, options = {}) {
     }
     mkdirSync(targetDir, { recursive: true });
     copyTemplateTree(source, targetDir);
-    mkdirSync(join(targetDir, "LICENSES"), { recursive: true });
-    for (const file of sharedFiles)
+    for (const file of sharedFiles) {
+        mkdirSync(dirname(join(targetDir, file)), { recursive: true });
         cpSync(join(shared, file), join(targetDir, file));
+    }
     for (const overlay of overlays)
         copyTemplateTree(overlay, targetDir);
     for (const dir of (ui === "vue" ? ["frontend"] : [])) {
@@ -275,7 +279,7 @@ function vendorAppSdk(template, targetDir) {
     const sdk = sdkSource(version).goDir;
     const vendor = join(targetDir, "backend/vendor");
     if (template === "native-python")
-        return copyAppTree(join(sdk, "python/synopkgland_app"), join(vendor, "synopkgland_app"));
+        return copyPythonSdk(sdk, join(vendor, "synopkgland_app"));
     const target = join(vendor, NODE_SDK_PACKAGE);
     copyNodeSdk(join(sdk, "node"), target);
     const { devDependencies: _dev, scripts: _scripts, ...pkg } = JSON.parse(readFileSync(join(target, "package.json"), "utf8"));

package/dist/runtime/delegate-contract.d.ts

@@ -1,94 +1,4 @@
-/** Frozen schema-2 / v1 extension. Definitions alone do not enable capabilities. */
+/** Frozen schema-2 / v1 extension. Definitions alone do not enable capabilities.
+ * The DTOs and the golden vector live in the SDK (ts/src/delegate/long-running.ts). */
 export declare const MOVE_FROM_STAGING: "files.moveFromStaging";
 export declare const DELEGATE_EXTENSION_OPERATIONS: readonly ["files.moveFromStaging", "files.operationStatus", "files.cancelOperation", "delegate.disable", "delegate.enable", "delegate.audit"];
-export declare const DELEGATE_OPERATION_STATES: readonly ["queued", "copying", "committed", "canceled", "interrupted", "uncertain"];
-export type DelegateOperationState = typeof DELEGATE_OPERATION_STATES[number];
-export interface LongRunningDelegateCapability {
-    scope: string;
-    operations: [typeof MOVE_FROM_STAGING];
-    destinations: string[];
-    lifetime: 'until-revoked';
-}
-export interface SelectDestination {
-    key: string;
-    path: string;
-}
-/** Protected executor selection, not the package-owned installer draft. */
-export interface ScopeSelection {
-    scope: string;
-    root: string;
-    generation: number;
-}
-export interface DestinationState {
-    key: string;
-    selection: ScopeSelection | null;
-    destination: DestinationGrant | null;
-    status: 'active' | 'missing' | 'reselection-required' | 'needs-scope-confirmation' | 'disabled';
-}
-export interface DestinationGrant {
-    id: string;
-    key: string;
-    path: string;
-    username: string;
-    lifetime: 'until-revoked';
-}
-/** Owner/UID/destination are resolved from the protected grant, never supplied here. */
-export interface MoveFromStaging {
-    delegation_id: string;
-    job_id: string;
-    staging: string;
-    /**
-     * File name, or folders below the destination and a file name, for example
-     * `Album/CD1/01.flac`. Missing folders are created as the user, at most
-     * `DELEGATE_LIMITS.maxDestinationFolders` deep and `maxDestinationBytes` long.
-     */
-    name: string;
-    size: number;
-    /**
-     * When the name is taken: `fail` (default) refuses with `destination-exists`,
-     * `overwrite` atomically replaces a regular file the user can write, `rename`
-     * publishes `name (n).ext` (n up to 99) and the receipt reports that path.
-     */
-    conflict?: DelegateConflictPolicy;
-}
-export declare const DELEGATE_CONFLICT_POLICIES: readonly ["fail", "overwrite", "rename"];
-export type DelegateConflictPolicy = typeof DELEGATE_CONFLICT_POLICIES[number];
-export interface OperationRef {
-    delegation_id: string;
-    job_id: string;
-}
-export interface OperationResult {
-    job_id: string;
-    state: DelegateOperationState;
-    /** Only a committed executor receipt may supply a final destination path. */
-    receipt?: {
-        path: string;
-        size: number;
-    };
-    code?: string;
-    reason?: string;
-}
-export declare const DELEGATE_ROUTES: {
-    readonly 'delegate.example.export': "authenticated";
-    readonly 'delegate.destination': "authenticated";
-    readonly 'delegate.select_destination': "authenticated";
-    readonly 'delegate.move_from_staging': "authenticated";
-    readonly 'delegate.operations.get': "authenticated";
-    readonly 'delegate.operations.list': "authenticated";
-    readonly 'delegate.operations.cancel': "authenticated";
-    readonly 'delegate.disable': "administrators";
-    readonly 'delegate.enable': "administrators";
-    readonly 'delegate.audit': "authenticated";
-};
-/** Shared, explicit limits; legacy TTL/job limits remain separate. */
-export declare const DELEGATE_LIMITS: {
-    readonly maxFileBytes: number;
-    readonly maxQueued: 16;
-    readonly maxActive: 1;
-    readonly maxCopySeconds: 86400;
-    readonly maxOperationBytes: number;
-    readonly maxAuditBytes: number;
-    readonly revalidateSeconds: 5;
-    readonly maxDestinationFolders: 16;
-    readonly maxDestinationBytes: 1024;
-};

package/dist/runtime/delegate-contract.js

@@ -1,29 +1,7 @@
-/** Frozen schema-2 / v1 extension. Definitions alone do not enable capabilities. */
+/** Frozen schema-2 / v1 extension. Definitions alone do not enable capabilities.
+ * The DTOs and the golden vector live in the SDK (ts/src/delegate/long-running.ts). */
 export const MOVE_FROM_STAGING = 'files.moveFromStaging';
 export const DELEGATE_EXTENSION_OPERATIONS = [
     MOVE_FROM_STAGING, 'files.operationStatus', 'files.cancelOperation',
     'delegate.disable', 'delegate.enable', 'delegate.audit',
 ];
-export const DELEGATE_OPERATION_STATES = [
-    'queued', 'copying', 'committed', 'canceled', 'interrupted', 'uncertain',
-];
-export const DELEGATE_CONFLICT_POLICIES = ['fail', 'overwrite', 'rename'];
-export const DELEGATE_ROUTES = {
-    'delegate.example.export': 'authenticated',
-    'delegate.destination': 'authenticated',
-    'delegate.select_destination': 'authenticated',
-    'delegate.move_from_staging': 'authenticated',
-    'delegate.operations.get': 'authenticated',
-    'delegate.operations.list': 'authenticated',
-    'delegate.operations.cancel': 'authenticated',
-    'delegate.disable': 'administrators',
-    'delegate.enable': 'administrators',
-    'delegate.audit': 'authenticated',
-};
-/** Shared, explicit limits; legacy TTL/job limits remain separate. */
-export const DELEGATE_LIMITS = {
-    maxFileBytes: 16 * 1024 ** 3, maxQueued: 16, maxActive: 1,
-    maxCopySeconds: 86400, maxOperationBytes: 10 * 1024 ** 2,
-    maxAuditBytes: 50 * 1024 ** 2, revalidateSeconds: 5,
-    maxDestinationFolders: 16, maxDestinationBytes: 1024,
-};

package/dist/runtime/executor-digests.json

@@ -31,5 +31,16 @@
             "armv7": "cafc97c89f5645c14a8cf31d6d9f258394ed6f2d086478a7aebd04d57c274b4e"
         },
         "goToolchain": "go1.26.9"
+    },
+    "0.10.3": {
+        "x86_64": "4ba7040761a719e74d6b047ef68b9415e658ebb8b373b69555b8c307524e26ba",
+        "aarch64": "ba80b389e3291419389b66be7b0a0e1085d3dfec55c9c651fecae427279bb3d5",
+        "armv7": "49474467b9c9a7f31b30b5053b70eb4f71a95f2c06fbf3566e8de8f16972a299",
+        "lifecycle": {
+            "x86_64": "d65500c4f04713a32b45d360059281391acfa5e00ee24895fdd2de7b82735372",
+            "aarch64": "94f6cd119186ff482b8aea56541dd1f9d53c147566bc1efdca6f5a1c86198331",
+            "armv7": "cafc97c89f5645c14a8cf31d6d9f258394ed6f2d086478a7aebd04d57c274b4e"
+        },
+        "goToolchain": "go1.26.9"
     }
 }

package/dist/runtime/executor-policy-check.d.ts

@@ -1,7 +1,7 @@
 import { type StandaloneManifest } from '../standalone/manifest.js';
 /**
  * Why the SDK executor would refuse the policy, such as `invalid policy: policy root`;
- * undefined when it accepts it or its SDK predates check-policy. The executor is
+ * undefined when it accepts it. The executor is
  * built for this host from executorDir, so its own rules decide, not a copy in the CLI.
  */
 export declare function executorPolicyRefusal(executorDir: string, pkg: string, policyText: string, env?: NodeJS.ProcessEnv): string | undefined;