@synopackageland/cli 0.10.3 → 0.10.4

package/CHANGELOG.md

@@ -1,5 +1,49 @@
 # Changelog
 
+## 0.10.4 (2026-10-14)
+
+Builds with SDK 0.10.4 and templates 0.10.4: `init` writes SDK v0.10.4 (Go
+module, Rust crate tag and `backend.sdk`), `@synopackageland/sdk` 0.10.4 and
+`@synopackageland/ui` 0.9.6. `check` and `build` still accept SDK 0.10.3 or
+later: nothing in this CLI needs 0.10.4, and an App on 0.10.3 never sees the
+stop and start codes the window now repeats. The executor digest table adds
+SDK 0.10.4, whose executor and lifecycle digests equal 0.10.3, so an App
+rebuilt on it keeps its approval unless its own root programs change. The
+gate refuses a stale SDK `ts/dist` and builds the executor flow's race binary
+before its timeout.
+
+繁中摘要：使用 SDK 0.10.4 與 templates 0.10.4（UI 0.9.6）；`check`／`build` 仍接受 SDK
+0.10.3 以上。`ctx.call` 自動重試套件停止／啟動中的碼；非管理員的
+`ctx.executor.status()` 可讀到已核准的 executor。digest 表新增 SDK 0.10.4（與 0.10.3
+相同），重建的 App 不需重新核准（除非自己的 root 程式改變）。
+
+- `ctx.call` repeats a call the package refused with `APP_STOPPED`,
+  `APP_STARTING` or `EXECUTOR_STARTING` (the executor op was not sent): after
+  0.5 s, doubling to at most 8 s, for 30 s of waiting in all, so an App comes
+  back by itself once the package has started. Other codes reject at once; past
+  the budget the last refusal rejects; leaving the page cancels the wait.
+  繁中：套件停止／啟動中時 `ctx.call` 自動有界重試（最多等 30 s）。
+- The window approval of an upgrade (outdated tasks) makes 11 scheduler calls
+  instead of 12: the outdated boot task is deleted by the approval's own first
+  EventScheduler get, made moments before the password, instead of a second
+  get (2.9 s on vt-nas in t-0484). The control task is still read again by id
+  before its delete (spec/scheduler/v1). A fresh approval stays at 8.
+  繁中：升級核准的排程呼叫由 12 降為 11（boot 任務不再於刪除前重讀）。
+- A scope approval reads the executor's selection back every second at most
+  (it backed off to 2 s), so the window sees the landed scope within a second
+  of `scope.confirm` (the Dialog closed 4.8 s after it in t-0482). Removing
+  the temporary selection task still lists Task Scheduler first, as
+  spec/scheduler/v1 requires of a delete.
+  繁中：範圍核准讀回間隔上限 2 s → 1 s，confirmed 後 1 s 內看到結果。
+- `ctx.executor.status()` for a user who is not an administrator asks the
+  App's `executor.status` (open to every signed-in user) instead of refusing
+  before any request: the pinned, running executor reads `ready`; anything
+  else stays `blocked` with `admin_required`. Task Scheduler is still read only
+  for administrators. A user no longer sees an approved executor as waiting
+  for approval (t-0482 F7).
+  繁中：非管理員的 `ctx.executor.status()` 會向 App 的 `executor.status` 詢問，已核准且
+  執行中即為 `ready`，不再一律回 `admin_required`。
+
 ## 0.10.3 (2026-10-14)
 
 Builds with SDK 0.10.3 and templates 0.10.3: `init` writes SDK v0.10.3 (Go

package/dist/runtime/executor-digests.json

@@ -42,5 +42,16 @@
             "armv7": "cafc97c89f5645c14a8cf31d6d9f258394ed6f2d086478a7aebd04d57c274b4e"
         },
         "goToolchain": "go1.26.9"
+    },
+    "0.10.4": {
+        "x86_64": "4ba7040761a719e74d6b047ef68b9415e658ebb8b373b69555b8c307524e26ba",
+        "aarch64": "ba80b389e3291419389b66be7b0a0e1085d3dfec55c9c651fecae427279bb3d5",
+        "armv7": "49474467b9c9a7f31b30b5053b70eb4f71a95f2c06fbf3566e8de8f16972a299",
+        "lifecycle": {
+            "x86_64": "d65500c4f04713a32b45d360059281391acfa5e00ee24895fdd2de7b82735372",
+            "aarch64": "94f6cd119186ff482b8aea56541dd1f9d53c147566bc1efdca6f5a1c86198331",
+            "armv7": "cafc97c89f5645c14a8cf31d6d9f258394ed6f2d086478a7aebd04d57c274b4e"
+        },
+        "goToolchain": "go1.26.9"
     }
 }

package/dist/standalone/dsm-window.js

@@ -144,7 +144,7 @@ Ext.ns(${JSON.stringify(ns)});
 // The SDK's clientTimeout: past the backend's request deadline
 // (ctx.requestTimeout, from backend.timeout_seconds), so its request_timeout
 // reply arrives first. options.signal aborts the fetch, for a page the user leaves.
-${ns}.call = function (method, params, options, requestTimeout) {
+${ns}.callOnce = function (method, params, options, requestTimeout) {
   var signal = options && options.signal;
   var canceled = { code: "request_canceled", message: "The request was canceled" };
   if (signal && signal.aborted) {
@@ -191,6 +191,39 @@ ${ns}.call = function (method, params, options, requestTimeout) {
   });
 };
 
+// APP_STOPPED, APP_STARTING and EXECUTOR_STARTING mean the executor op was not
+// sent: the package is stopped, or starting. The call repeats on its own, half a
+// second, then doubling up to 8 s, for 30 s of waiting in all; each attempt keeps
+// its own deadline. Past that it rejects with the last refusal, and leaving the
+// page during a wait rejects request_canceled at once.
+${ns}.retryCodes = ["APP_STOPPED", "APP_STARTING", "EXECUTOR_STARTING"];
+${ns}.call = function (method, params, options, requestTimeout) {
+  var signal = options && options.signal;
+  var left = 30000;
+  var delay = 500;
+  var attempt = function () {
+    return ${ns}.callOnce(method, params, options, requestTimeout).catch(function (error) {
+      if (left <= 0 || !error || ${ns}.retryCodes.indexOf(error.code) < 0) throw error;
+      var wait = Math.min(delay, left);
+      left -= wait;
+      delay = Math.min(delay * 2, 8000);
+      return new Promise(function (resolve, reject) {
+        var leave = function () {
+          clearTimeout(timer);
+          reject({ code: "request_canceled", message: "The request was canceled" });
+        };
+        var timer = setTimeout(function () {
+          if (signal) signal.removeEventListener("abort", leave);
+          resolve(attempt());
+        }, wait);
+        if (signal && signal.aborted) leave();
+        else if (signal) signal.addEventListener("abort", leave);
+      });
+    });
+  };
+  return attempt();
+};
+
 ${ns}.messages = ${JSON.stringify(manifest.i18n?.catalogs ?? { en: {} })};
 ${ns}.createI18n = (function () {
 ${I18N_RUNTIME}

package/dist/standalone/root-window.js

@@ -58,7 +58,8 @@ export const ROOT_RUNTIME = `function createRootAccess(options) {
     var boot = task.kind === "boot";
     return send(boot ? eventAPI : taskAPI, "delete", boot ? 1 : 2, boot ? ref : {tasks: [ref]});
   }
-  function admin() { if (!options.user() || options.user().admin !== true) throw fail("admin_required"); }
+  function isAdmin() { return !!options.user() && options.user().admin === true; }
+  function admin() { if (!isAdmin()) throw fail("admin_required"); }
   function missing() { return {state: "needs-admin-approval", reason: "Task is missing.", code: "task_missing"}; }
   // EventScheduler keys a task by its name (DSM refuses a second one with 117
   // DUPLICATE_PRIMARY_KEY) and get answers no data for a missing name, so get
@@ -155,16 +156,19 @@ export const ROOT_RUNTIME = `function createRootAccess(options) {
         var errors = {}, created = [], removed = [], withdrawFailed;
         // Delete only a verified, same-header outdated task, then create the pinned
         // replacement. set has no measured wire contract, and a same-named task
-        // cannot be created first. A task to delete is read again by get just
-        // before; a missing one keeps the first read: DSM refuses a second boot
-        // task name, and the readback after the writes lists control tasks for
-        // duplicates. Stop at the first error.
+        // cannot be created first. The boot task keeps this approval's first
+        // read: EventScheduler get by name is the whole lookup, it was made in
+        // this step moments ago, and delete and create address the name. A
+        // control task to delete is read again by the id that read listed
+        // (spec/scheduler/v1); a missing one keeps the first read: DSM refuses a
+        // second boot task name, and the readback after the writes lists control
+        // tasks for duplicates. Stop at the first error.
         var chain = Promise.resolve();
         options.tasks.forEach(function (task) {
           chain = chain.then(function () {
             if (Object.keys(errors).length) return;
             var first = before.tasks[task.kind];
-            return (first.ref ? find(task, true) : Promise.resolve(first)).then(function (current) {
+            return (first.ref && task.kind !== "boot" ? find(task, true) : Promise.resolve(first)).then(function (current) {
               if (current.state === "ready") return;
               if (current.state === "blocked") throw refused(current);
               var deleted = current.ref ? remove(task, current.ref).then(function () { removed.push({kind: task.kind, name: task.name, header: task.header, script: current.script}); }) : Promise.resolve();
@@ -227,9 +231,10 @@ export const ROOT_RUNTIME = `function createRootAccess(options) {
     }
     // The task waits up to 35 s for the executor, whose account, AppPriv and
     // share lookups took 16-20 s on a measured NAS: read back for 40 s,
-    // backing off from 500 ms to 2 s like health.
+    // backing off from 500 ms to 1 s, so the window closes within a second
+    // of the selection landing.
     function readSelection(budget, delay) {
-      delay = Math.min(delay || 500, 2000);
+      delay = Math.min(delay || 500, 1000);
       verified.state = "ready";
       return health(verified, 0).then(function (current) {
         if (current.state === "ready" && current.executor.selection && current.executor.selection.scope === selectedScope && Number.isSafeInteger(current.executor.selection.generation) && current.executor.selection.generation > 0) return current;
@@ -323,8 +328,17 @@ export const ROOT_RUNTIME = `function createRootAccess(options) {
   // result reaches every view so neither shows a stale state.
   var listeners = [];
   function publish(result) { listeners.forEach(function (listener) { listener(result); }); return result; }
+  // TaskScheduler answers administrators only. Anyone else reads the approved
+  // executor through the App's executor.status, which answers every user: the
+  // pinned, running executor is ready; otherwise an administrator is needed.
+  function userStatus() {
+    var needed = block({tasks: {}}, fail("admin_required"));
+    return options.call("executor.status", {}).then(function (status) {
+      return pinned(status) ? {state: "ready", tasks: {}, executor: status} : needed;
+    }, function () { return needed; });
+  }
   return {
-    status: function () { return read().then(function (verified) { return health(verified, 0); }).then(publish); },
+    status: function () { return (isAdmin() ? read().then(function (verified) { return health(verified, 0); }) : userStatus()).then(publish); },
     authorize: function (password, selectedScope) {
       if (!busy) busy = Promise.resolve().then(function () { return approve(password, selectedScope); }).catch(function (e) { var r = block({tasks: {}}, e); r.retry = !!(e && e.passwordConfirm); return r; }).then(function (r) { busy = null; return publish(r); });
       return busy;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {
@@ -19,12 +19,13 @@
   "scripts": {
     "build": "rm -rf dist && tsc",
     "test": "npm run build && node --import tsx --test test/**/*.test.ts",
-    "test:scripts": "node --test scripts/test/gate.test.mjs scripts/test/release.test.mjs scripts/test/pack-docker.test.mjs scripts/test/npm-pack.test.mjs scripts/test/executor-bump.test.mjs scripts/test/smoke-exports.test.mjs scripts/test/executor-digests.test.mjs",
-    "gates": "bash scripts/ci/gate.sh npm && bash scripts/ci/gate.sh native-go && bash scripts/ci/gate.sh daemon-gateway",
+    "test:scripts": "node --test scripts/test/gate.test.mjs scripts/test/release.test.mjs scripts/test/pack-docker.test.mjs scripts/test/npm-pack.test.mjs scripts/test/executor-bump.test.mjs scripts/test/smoke-exports.test.mjs scripts/test/executor-digests.test.mjs scripts/test/parallel.test.mjs scripts/test/scaffold-matrix.test.mjs scripts/test/frontend-deps.test.mjs scripts/test/docker-gate.test.mjs scripts/test/gate-plan.test.mjs scripts/test/gates.test.mjs",
+    "gates": "bash scripts/ci/gates.sh",
+    "gates:fast": "bash scripts/ci/gates.sh --fast",
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@synopackageland/templates": "0.10.3",
+    "@synopackageland/templates": "0.10.4",
     "ajv": "^8.17.1",
     "commander": "^13.1.0",
     "tar": "^7.4.3",