@synopackageland/cli 0.17.3 → 0.17.5

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 0.17.5 (2026-10-20)
+
+- Run native HTTPS preparation inside the SDK lifecycle steps before App hooks, keeping generated hook wrappers inspectable.
+
+- Preserve older SDK gateway/controller JSON and supported timeout limits so their direct-connection fallback remains buildable; reject expanded budgets that require SDK 0.17.5.
+
+- Keep Compose named volumes without adding executor/root permissions; warn before uninstall and report their exact undeleted names in nine native locales when delete-data is selected. Clear package-owned data/config/home contents only on explicit uninstall, preserving data on upgrades, stops and keep.
+
+- Default supported gateway Apps to a DSM-managed HTTPS origin using native package resources and a private authenticated gateway socket. Preserve direct connections for older SDK/DSM targets with an explanation before opening them.
+- Prepare private connection credentials as the package account after DSM creates package state, and reject modified gateway proxy settings during SPK inspection.
+- Apply `ctl --timeout` to discovery, JSON requests, polling and transfer inactivity without replaying uncertain writes; use a 62-second default transport allowance.
+- Reuse `daemon.timeouts` for native, Compose and background lifecycle work, including declarations that need no daemon executable. Allow lifecycle and App purge budgets up to 3600 seconds while retaining the Compose startup cap.
+- Generate matching gateway, supervisor and approved executor budgets, preserve them through SPK inspection, and report pending uninstall cleanup within bounded TERM/reap reserve.
+
+- Pin templates 0.17.8 and SDK/App 0.17.5, including UI 0.12.4 full-page layout. Updated executor and lifecycle payloads require administrator reapproval after upgrading rebuilt Apps.
+
+## 0.17.4 (2026-10-19)
+
+- Accept `compose.startup_timeout_seconds` (default 120, integer 2–900), use the SDK plan's value for daemon start, and deliver the same budget to container bootstrap adapters through the SDK-generated environment. Reject a planner that cannot honor an explicitly declared budget. Keep ingress closed until readiness succeeds.
+
+- Show actionable image-pull diagnosis in nine locales and direct users to Package Center Repair when a package starts with stale container assets.
+- Pin templates 0.17.6 and SDK/App 0.17.4; keep UI at 0.12.3.
+
 ## 0.17.3 (2026-10-19)
 
 - Pin templates 0.17.5, SDK/App 0.17.3 and UI 0.12.3 for generated Apps.

package/README.md

@@ -259,6 +259,16 @@ Compose uses schema-2 `dsm-package.yaml` and `ui.launch`; the default is new-pag
 Classless gateways use type url via the shared contract/app-launch resolver;
 AppWindow wrappers use standalone. Headless projects have no launcher.
 
+Rebuilt container Apps include informational **Registry check** diagnostics in
+preinst, postinst, postupgrade and prestart. Messages use the existing nine-language
+catalog and end with the native recovery step: fix the cause, then use Package
+Center **Repair**. Repair re-runs the install worker and downloads missing images;
+it is not an SDK Retry action. Checks use only immutable image references from the
+packaged lock, never the Docker socket or registry credentials. They do not block
+cached/offline startup or establish daemon disk space, image existence or pull
+success. Native wrapper codes alone never identify a cause. SDK and CLI changes
+must ship together and Apps must be rebuilt to receive these hooks and catalogs.
+
 See [Compose](skills/reference/compose.md) for multiple upstream files,
 generated override/worker artifacts, image proofs and the support matrix.
 Containers use a fixed package identity and do not inherit a signed-in user's
@@ -305,7 +315,11 @@ App is absent from discovery results; no business operation runs.
 `ctl host list/show` can also succeed while reporting `authenticated:false` and
 exit 0. Check discovery `apps`/`diagnostics` and session fields as well as the exit
 code when deciding whether an App is ready.
-After a network or job timeout, query the App's state before retrying a write.
+`ctl --timeout <seconds>` applies to discovery, JSON calls, polling and transfer
+inactivity. The transport default is 62 seconds; a supplied 1–3600-second budget
+is shared across the operation. Jobs retain their described wait default when no
+override is supplied. After a network or job timeout, query the App's state before
+retrying a write.
 
 Read `synopkgland skill show ctl` for the AI workflow, batch discovery approval,
 cache refresh, host removal/revocation and explicit `ctl.commands` authoring.
@@ -318,3 +332,25 @@ share a request; results keep input order and retain per-method errors. A batch
 uses the same token recovery, request deadline and cancellation as `ctx.call`,
 and is never replayed automatically. Older SDKs and binary backends retain the
 single-call client. Rebuild the window with the current CLI/SDK to adopt it.
+
+### DSM-managed gateway HTTPS
+
+With gateway SDK 0.17.5 or later and a package target of DSM 7.2-64570 or later,
+the build uses DSM's native web-config worker for a separate HTTPS App origin.
+No Web Station dependency or executor capability is added. nginx inherits DSM's
+system default certificate, which must be trusted by the browser and cover the
+App hostname. The package never reads DSM's private key.
+
+The declared HTTPS port is served by nginx. If only an HTTP port was declared,
+that port becomes the HTTPS entry; use the generated gateway launcher. A second
+HTTP port redirects to HTTPS. nginx connects to a private, mutually authenticated
+gateway socket and preserves the session, client IP, CSRF and WebSocket checks.
+The package-account post-install/upgrade hooks prepare private connection
+credentials with DSM's OpenSSL after DSM creates package state and before
+package start activates nginx.
+
+Older SDK/DSM targets retain the direct listener and explain its certificate or
+unencrypted-HTTP limitations before opening it. Native resource/startup failures
+fail closed; they do not silently expose a direct listener. The native runtime
+requires the corresponding SDK release; this CLI change does not publish that
+release or change existing manifest version pins.

package/dist/build-spk/compose-diagnosis.d.ts

@@ -0,0 +1,4 @@
+/** Packaged data for compose/control; one source of native text in all locales. */
+export declare function composeDiagnosisMessages(): Record<string, Record<string, string>>;
+/** Diagnostics are informational and cannot mask or replace a native result. */
+export declare function renderComposeDiagnosis(project: string, phase: "preinst" | "postinst" | "postupgrade" | "prestart"): string;

package/dist/build-spk/compose-diagnosis.js

@@ -0,0 +1,12 @@
+import { LOCALES } from "../standalone/i18n.js";
+import { WIZARD_MESSAGES } from "./wizard-i18n.js";
+/** Packaged data for compose/control; one source of native text in all locales. */
+export function composeDiagnosisMessages() {
+    return Object.fromEntries(LOCALES.map((locale) => [locale, Object.fromEntries(Object.entries(WIZARD_MESSAGES)
+            .filter(([key]) => key.startsWith("compose.diagnosis."))
+            .map(([key, texts]) => [key.slice("compose.diagnosis.".length), texts[locale]]))]));
+}
+/** Diagnostics are informational and cannot mask or replace a native result. */
+export function renderComposeDiagnosis(project, phase) {
+    return `"${project}/control" diagnose --project "${project}" --phase ${phase} || :\n`;
+}

package/dist/build-spk/compose-retained-data.d.ts

@@ -0,0 +1,11 @@
+import { type ComposeAppData } from "../runtime/compose-data.js";
+import { type Locale } from "../standalone/i18n.js";
+export declare const COMPOSE_DATA_RETAINED = "COMPOSE_DATA_RETAINED";
+/** Same segment spacing as the SDK image-pull diagnosis; support code goes last. */
+export declare function composeRetainedMessage(data: ComposeAppData, locale: Locale): string;
+/**
+ * Embedded in the native hook: postuninst need not find an already removed
+ * payload/helper. Names describe the plan, not a privileged Docker readback.
+ * Reporting is informational and must never prevent package removal.
+ */
+export declare function renderComposeRetainedData(data?: ComposeAppData): string;

package/dist/build-spk/compose-retained-data.js

@@ -0,0 +1,34 @@
+import { COMPOSE_DELETE_CHOICE } from "../runtime/compose-data.js";
+import { DSM_LANGS, LOCALES } from "../standalone/i18n.js";
+import { translator } from "./wizard-i18n.js";
+export const COMPOSE_DATA_RETAINED = "COMPOSE_DATA_RETAINED";
+/** Same segment spacing as the SDK image-pull diagnosis; support code goes last. */
+export function composeRetainedMessage(data, locale) {
+    const t = translator(locale);
+    const separator = ["zh-TW", "zh-CN", "ja"].includes(locale) ? "" : " ";
+    return t("compose.retained.message", { volumes: data.volumes.map(v => v.name).join(", ") }) +
+        separator + t("compose.diagnosis.error_code", { code: COMPOSE_DATA_RETAINED });
+}
+const quote = (text) => `'${text.replaceAll("'", "'\\''")}'`;
+/**
+ * Embedded in the native hook: postuninst need not find an already removed
+ * payload/helper. Names describe the plan, not a privileged Docker readback.
+ * Reporting is informational and must never prevent package removal.
+ */
+export function renderComposeRetainedData(data) {
+    if (!data?.volumes.length)
+        return "";
+    const cases = LOCALES.map(locale => `    ${locale}|${DSM_LANGS[locale]}) compose_data_message=${quote(composeRetainedMessage(data, locale))} ;;`).join("\n");
+    return `${COMPOSE_DELETE_CHOICE}if [ "$compose_remove_data" -eq 1 ]; then
+  case "\${SYNOPKG_DSM_LANGUAGE:-enu}" in
+${cases}
+    *) compose_data_message=${quote(composeRetainedMessage(data, "en"))} ;;
+  esac
+  if [ -n "\${SYNOPKG_TEMP_LOGFILE:-}" ] && [ ! -L "$SYNOPKG_TEMP_LOGFILE" ]; then
+    if [ ! -e "$SYNOPKG_TEMP_LOGFILE" ] || [ -f "$SYNOPKG_TEMP_LOGFILE" ]; then
+      (printf '%s\\n' "$compose_data_message" >> "$SYNOPKG_TEMP_LOGFILE") 2>/dev/null || :
+    fi
+  fi
+fi
+`;
+}

package/dist/build-spk/delete-app-data.d.ts

@@ -8,7 +8,7 @@
  * pre-0.5 key `delete_app_data` and DSM's `wizard_` mirror of either key are
  * still honoured for scripted callers.
  *
- * Deletion never runs on an upgrade: DSM replays postuninst for the old
+ * Deletion runs only on exact UNINSTALL, never on an upgrade or stop: DSM replays postuninst for the old
  * version, and the new version must find its data.
  *
  * Every root is resolved first and must land on `/volumeN/@<area>/<package>`

package/dist/build-spk/delete-app-data.js

@@ -4,7 +4,7 @@ function shellQuote(value) {
 export function renderDeleteAppDataBlock(packageName, roots, options = {}) {
     const calls = roots.map((root) => `  delete_root "$${root.variable}" ${root.area}`).join("\n");
     return `remove_additional=0
-if [ "\${SYNOPKG_PKG_STATUS:-}" != UPGRADE ]; then
+if [ "\${SYNOPKG_PKG_STATUS:-}" = UNINSTALL ]; then
   for flag in "\${pkgwizard_remove_additional:-}" "\${wizard_pkgwizard_remove_additional:-}" "\${delete_app_data:-}" "\${wizard_delete_app_data:-}"; do
     case "$flag" in
       true|True|TRUE|yes|1) remove_additional=1 ;;

package/dist/build-spk/uninstall-wizard.d.ts

@@ -1,3 +1,4 @@
+import type { ComposeAppData } from "../runtime/compose-data.js";
 import type { Locale } from "../standalone/i18n.js";
 /** The key DSM's built-in packages use for their "also remove my data" box. */
 export declare const REMOVE_ADDITIONAL_KEY = "pkgwizard_remove_additional";
@@ -5,6 +6,7 @@ export declare const REMOVE_ADDITIONAL_KEY = "pkgwizard_remove_additional";
 export declare const DELETE_STATE_KEY = "pkgwizard_delete_state";
 export type UninstallWizardKind = "native" | "container";
 interface UninstallWizardOptions {
+    composeData?: ComposeAppData;
     /** The App runs the root executor (rootOps or delegate), which purges DSM's leftovers on uninstall. */
     executor?: boolean;
     /** The App declares a Login Portal alias (web-config app-portal); DSM reloads nginx through INFO. */

package/dist/build-spk/uninstall-wizard.js

@@ -8,7 +8,7 @@ function list(items) {
     return `<ul class="synopkg-ul-list">${items.map((item) => `<li>${item}</li>`).join("")}</ul>`;
 }
 const html = (text) => text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-function renderUninstallWizard(t, locale, packageName, kind, { executor = false, portal = false, portalEntry = false, state, rootPurge = false }) {
+function renderUninstallWizard(t, locale, packageName, kind, { executor = false, portal = false, portalEntry = false, state, rootPurge = false, composeData }) {
     const vars = { package: packageName };
     return [{
             step_title: t("uninstall.step"),
@@ -33,6 +33,7 @@ function renderUninstallWizard(t, locale, packageName, kind, { executor = false,
                 ] : []),
                 ...(executor && rootPurge ? [{ desc: t("uninstall.purge.root", vars) }] : []),
                 ...(state ? [{ desc: t("uninstall.state.heading") }, { desc: list(state.items(locale).map(html)) }] : []),
+                ...(composeData?.volumes.length ? [{ desc: t("uninstall.composeRetained", { volumes: composeData.volumes.map(v => v.name).join(", ") }) }] : []),
                 { desc: t("uninstall.backup") },
                 {
                     type: "multiselect",

package/dist/build-spk/wizard-messages.d.ts

@@ -1,4 +1,158 @@
 export declare const WIZARD_MESSAGES: {
+    "uninstall.composeRetained": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.retained.message": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.registry_check": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.container_manager": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.tls_trust": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.unreachable": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.dns": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.rate_limit": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.disk_full": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.not_found": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.denied": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.unknown": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.repair": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "compose.diagnosis.error_code": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
     "delegate.preselection": {
         en: string;
         "zh-TW": string;

package/dist/build-spk/wizard-messages.js

@@ -1,4 +1,158 @@
 export const WIZARD_MESSAGES = {
+    "uninstall.composeRetained": {
+        "en": "Container data volumes are kept, even when you select delete-data: {volumes}. Their data will NOT be deleted.",
+        "zh-TW": "即使勾選刪除資料，容器資料磁碟區會保留：{volumes}。其中的資料不會刪除。",
+        "zh-CN": "即使勾选删除数据，容器数据卷也会保留：{volumes}。其中的数据不会删除。",
+        "ja": "データ削除を選択しても、コンテナのデータボリュームは保持されます：{volumes}。その中のデータは削除されません。",
+        "ko": "데이터 삭제를 선택해도 컨테이너 데이터 볼륨은 보존됩니다: {volumes}. 볼륨의 데이터는 삭제되지 않습니다.",
+        "de": "Container-Datenvolumes bleiben erhalten, auch wenn Sie die Datenlöschung auswählen: {volumes}. Die darin gespeicherten Daten werden NICHT gelöscht.",
+        "fr": "Les volumes de données des conteneurs sont conservés, même si vous choisissez de supprimer les données : {volumes}. Leurs données ne seront PAS supprimées.",
+        "es": "Los volúmenes de datos de los contenedores se conservan aunque seleccione eliminar datos: {volumes}. Sus datos NO se eliminarán.",
+        "it": "I volumi dati dei container vengono conservati anche se si seleziona l’eliminazione dei dati: {volumes}. I dati al loro interno NON verranno eliminati."
+    },
+    "compose.retained.message": {
+        "en": "Container data volumes were NOT deleted: {volumes}. Their data is kept.",
+        "zh-TW": "容器資料磁碟區並未刪除：{volumes}。其中的資料已保留。",
+        "zh-CN": "容器数据卷并未删除：{volumes}。其中的数据已保留。",
+        "ja": "コンテナのデータボリュームは削除されていません：{volumes}。その中のデータは保持されます。",
+        "ko": "컨테이너 데이터 볼륨이 삭제되지 않았습니다: {volumes}. 볼륨의 데이터는 보존됩니다.",
+        "de": "Container-Datenvolumes wurden NICHT gelöscht: {volumes}. Die darin gespeicherten Daten bleiben erhalten.",
+        "fr": "Les volumes de données des conteneurs n’ont PAS été supprimés : {volumes}. Leurs données sont conservées.",
+        "es": "Los volúmenes de datos de los contenedores NO se eliminaron: {volumes}. Sus datos se conservan.",
+        "it": "I volumi dati dei container NON sono stati eliminati: {volumes}. I dati al loro interno vengono conservati."
+    },
+    "compose.diagnosis.registry_check": {
+        "en": "Registry check",
+        "zh-TW": "登錄站檢查",
+        "zh-CN": "镜像仓库检查",
+        "ja": "レジストリ確認",
+        "ko": "레지스트리 확인",
+        "de": "Registry-Prüfung",
+        "fr": "Vérification du registre",
+        "es": "Comprobación del registro",
+        "it": "Verifica del registro"
+    },
+    "compose.diagnosis.container_manager": {
+        "en": "Container Manager",
+        "zh-TW": "Container Manager 錯誤",
+        "zh-CN": "Container Manager 错误",
+        "ja": "Container Manager のエラー",
+        "ko": "Container Manager 오류",
+        "de": "Container Manager-Fehler",
+        "fr": "Erreur de Container Manager",
+        "es": "Error de Container Manager",
+        "it": "Errore di Container Manager"
+    },
+    "compose.diagnosis.tls_trust": {
+        "en": "The registry certificate could not be verified. Check the NAS date and time. Ask your network administrator to configure trusted certificates for Container Manager. Alternatively, ask them to let this registry bypass network certificate checks.",
+        "zh-TW": "無法驗證登錄站憑證。請檢查 NAS 日期與時間。若公司網路會攔查加密連線，請網管協助。可為 Container Manager 設定信任憑證，或讓登錄站略過攔查。",
+        "zh-CN": "无法验证镜像仓库证书。请检查 NAS 日期和时间。如果公司网络会检查加密连接，请联系网络管理员。可为 Container Manager 配置信任证书，或让镜像仓库绕过此类检查。",
+        "ja": "レジストリの証明書を検証できません。NAS の日付と時刻を確認してください。Container Manager で信頼する証明書の設定をネットワーク管理者に依頼してください。または、このレジストリをネットワークの証明書検査から除外してもらってください。",
+        "ko": "레지스트리 인증서를 확인할 수 없습니다. NAS 날짜와 시간을 확인하십시오. 네트워크 관리자에게 Container Manager의 신뢰할 수 있는 인증서 설정을 요청하십시오. 또는 이 레지스트리를 네트워크 인증서 검사에서 제외하도록 요청하십시오.",
+        "de": "Das Zertifikat der Registry konnte nicht geprüft werden. Prüfen Sie Datum und Uhrzeit des NAS. Bitten Sie Ihre Netzwerkadministration, vertrauenswürdige Zertifikate für Container Manager einzurichten. Alternativ kann sie diese Registry von der Zertifikatsprüfung im Netzwerk ausnehmen.",
+        "fr": "Le certificat du registre ne peut pas être vérifié. Vérifiez la date et l’heure du NAS. Demandez à votre administrateur réseau de configurer les certificats de confiance pour Container Manager. Il peut aussi exclure ce registre du contrôle des certificats sur le réseau.",
+        "es": "No se pudo verificar el certificado del registro. Compruebe la fecha y la hora del NAS. Solicite a su administrador de red que configure certificados de confianza para Container Manager. Como alternativa, puede excluir este registro de la comprobación de certificados de la red.",
+        "it": "Impossibile verificare il certificato del registro. Controllare la data e l’ora del NAS. Chiedere all’amministratore di rete di configurare i certificati attendibili per Container Manager. In alternativa, chiedere di escludere questo registro dai controlli dei certificati di rete."
+    },
+    "compose.diagnosis.unreachable": {
+        "en": "Cannot reach the registry. Check the NAS network, firewall and Container Manager proxy settings.",
+        "zh-TW": "無法連線至登錄站。檢查 NAS 網路、防火牆及 Container Manager 的代理伺服器設定。",
+        "zh-CN": "无法连接镜像仓库。检查 NAS 网络、防火墙及 Container Manager 的代理服务器设置。",
+        "ja": "レジストリに接続できません。NAS のネットワーク、ファイアウォール、Container Manager のプロキシ設定を確認してください。",
+        "ko": "레지스트리에 연결할 수 없습니다. NAS 네트워크, 방화벽 및 Container Manager 프록시 설정을 확인하십시오.",
+        "de": "Die Registry ist nicht erreichbar. Prüfen Sie Netzwerk, Firewall und die Proxy-Einstellungen von Container Manager.",
+        "fr": "Le registre est inaccessible. Vérifiez le réseau du NAS, le pare-feu et les paramètres de proxy de Container Manager.",
+        "es": "No se puede acceder al registro. Compruebe la red del NAS, el cortafuegos y la configuración de proxy de Container Manager.",
+        "it": "Impossibile raggiungere il registro. Controllare la rete del NAS, il firewall e le impostazioni proxy di Container Manager."
+    },
+    "compose.diagnosis.dns": {
+        "en": "The registry name could not be resolved. Check the NAS DNS settings.",
+        "zh-TW": "無法解析登錄站名稱。檢查 NAS 的 DNS 設定。",
+        "zh-CN": "无法解析镜像仓库名称。检查 NAS 的 DNS 设置。",
+        "ja": "レジストリ名を解決できません。NAS の DNS 設定を確認してください。",
+        "ko": "레지스트리 이름을 확인할 수 없습니다. NAS DNS 설정을 확인하십시오.",
+        "de": "Der Name der Registry konnte nicht aufgelöst werden. Prüfen Sie die DNS-Einstellungen des NAS.",
+        "fr": "Le nom du registre ne peut pas être résolu. Vérifiez les paramètres DNS du NAS.",
+        "es": "No se pudo resolver el nombre del registro. Compruebe la configuración DNS del NAS.",
+        "it": "Impossibile risolvere il nome del registro. Controllare le impostazioni DNS del NAS."
+    },
+    "compose.diagnosis.rate_limit": {
+        "en": "The registry download limit was reached. Wait before trying again. You can also ask an administrator to check registry sign-in.",
+        "zh-TW": "已達登錄站下載上限。請稍後再試，也可請管理員檢查登錄站登入設定。",
+        "zh-CN": "已达到镜像仓库下载上限。请稍后再试，也可请管理员检查镜像仓库登录设置。",
+        "ja": "レジストリのダウンロード制限に達しました。しばらく待つか、管理者にレジストリのサインイン設定の確認を依頼してください。",
+        "ko": "레지스트리 다운로드 한도에 도달했습니다. 기다리거나 관리자에게 레지스트리 로그인 설정 확인을 요청하십시오.",
+        "de": "Das Downloadlimit der Registry wurde erreicht. Warten Sie oder bitten Sie einen Administrator, die Anmeldung bei der Registry zu prüfen.",
+        "fr": "La limite de téléchargement du registre est atteinte. Patientez ou demandez à un administrateur de vérifier la connexion au registre.",
+        "es": "Se alcanzó el límite de descargas del registro. Espere o solicite a un administrador que compruebe el inicio de sesión en el registro.",
+        "it": "È stato raggiunto il limite di download del registro. Attendere o chiedere a un amministratore di controllare l’accesso al registro."
+    },
+    "compose.diagnosis.disk_full": {
+        "en": "There is not enough storage for the image. Free space on Container Manager's storage volume.",
+        "zh-TW": "儲存空間不足，無法下載映像。請釋出 Container Manager 儲存磁碟區的空間。",
+        "zh-CN": "存储空间不足，无法下载映像。请释放 Container Manager 存储卷的空间。",
+        "ja": "イメージ用の空き容量が不足しています。Container Manager のストレージボリュームの空き容量を増やしてください。",
+        "ko": "이미지를 위한 저장 공간이 부족합니다. Container Manager 저장소 볼륨의 공간을 확보하십시오.",
+        "de": "Für das Image ist nicht genug Speicherplatz verfügbar. Geben Sie Speicherplatz auf dem Speichervolume von Container Manager frei.",
+        "fr": "L’espace de stockage est insuffisant pour l’image. Libérez de l’espace sur le volume de stockage de Container Manager.",
+        "es": "No hay espacio de almacenamiento suficiente para la imagen. Libere espacio en el volumen de almacenamiento de Container Manager.",
+        "it": "Lo spazio di archiviazione per l’immagine non è sufficiente. Liberare spazio sul volume di archiviazione di Container Manager."
+    },
+    "compose.diagnosis.not_found": {
+        "en": "The required image version is unavailable. Check for an App update or contact its publisher.",
+        "zh-TW": "所需映像版本無法取得。檢查 App 更新或聯絡發佈者。",
+        "zh-CN": "无法获取所需映像版本。检查应用更新或联系发布者。",
+        "ja": "必要なイメージバージョンを取得できません。アプリの更新を確認するか、公開元に問い合わせてください。",
+        "ko": "필요한 이미지 버전을 사용할 수 없습니다. 앱 업데이트를 확인하거나 게시자에게 문의하십시오.",
+        "de": "Die erforderliche Image-Version ist nicht verfügbar. Prüfen Sie auf App-Updates oder wenden Sie sich an den Herausgeber.",
+        "fr": "La version d’image requise est indisponible. Recherchez une mise à jour de l’application ou contactez son éditeur.",
+        "es": "La versión de imagen requerida no está disponible. Busque una actualización de la aplicación o contacte con su editor.",
+        "it": "La versione dell’immagine richiesta non è disponibile. Verificare gli aggiornamenti dell’app o contattare l’editore."
+    },
+    "compose.diagnosis.denied": {
+        "en": "The registry denied access. Ask an administrator to check registry sign-in and image permissions.",
+        "zh-TW": "登錄站拒絕存取。請管理員檢查登錄站登入設定及映像權限。",
+        "zh-CN": "镜像仓库拒绝访问。请管理员检查镜像仓库登录设置及映像权限。",
+        "ja": "レジストリにアクセスを拒否されました。管理者にレジストリのサインイン設定とイメージの権限の確認を依頼してください。",
+        "ko": "레지스트리가 접근을 거부했습니다. 관리자에게 레지스트리 로그인 설정과 이미지 권한 확인을 요청하십시오.",
+        "de": "Die Registry hat den Zugriff verweigert. Bitten Sie einen Administrator, die Anmeldung und die Image-Berechtigungen zu prüfen.",
+        "fr": "Le registre a refusé l’accès. Demandez à un administrateur de vérifier la connexion au registre et les autorisations de l’image.",
+        "es": "El registro denegó el acceso. Solicite a un administrador que compruebe el inicio de sesión y los permisos de la imagen.",
+        "it": "Il registro ha negato l’accesso. Chiedere a un amministratore di controllare l’accesso al registro e le autorizzazioni dell’immagine."
+    },
+    "compose.diagnosis.unknown": {
+        "en": "The check could not determine the cause. Open Container Manager for details or contact the App publisher.",
+        "zh-TW": "檢查無法判斷原因。開啟 Container Manager 查看詳細資訊，或聯絡 App 發佈者。",
+        "zh-CN": "检查无法确定原因。打开 Container Manager 查看详细信息，或联系应用发布者。",
+        "ja": "確認では原因を特定できませんでした。Container Manager で詳細を確認するか、アプリの公開元に問い合わせてください。",
+        "ko": "확인으로 원인을 파악할 수 없습니다. Container Manager에서 세부 정보를 확인하거나 앱 게시자에게 문의하십시오.",
+        "de": "Die Prüfung konnte die Ursache nicht ermitteln. Öffnen Sie Container Manager für Details oder wenden Sie sich an den App-Herausgeber.",
+        "fr": "La vérification ne permet pas de déterminer la cause. Ouvrez Container Manager pour plus de détails ou contactez l’éditeur de l’application.",
+        "es": "La comprobación no pudo determinar la causa. Abra Container Manager para ver los detalles o contacte con el editor de la aplicación.",
+        "it": "La verifica non ha potuto determinare la causa. Aprire Container Manager per i dettagli o contattare l’editore dell’app."
+    },
+    "compose.diagnosis.repair": {
+        "en": "After fixing the cause, use Package Center \"Repair\". The system will reinstall the package and download missing images.",
+        "zh-TW": "修正後，請在套件中心按「修復」，系統會重新安裝並下載缺少的映像。",
+        "zh-CN": "修正后，请在套件中心点击“修复”，系统会重新安装并下载缺少的映像。",
+        "ja": "原因を解消してから、パッケージセンターで「修復」を実行してください。システムがパッケージを再インストールし、不足しているイメージをダウンロードします。",
+        "ko": "원인을 해결한 후 패키지 센터에서 \"복구\"를 선택하십시오. 시스템이 패키지를 다시 설치하고 누락된 이미지를 다운로드합니다.",
+        "de": "Beheben Sie die Ursache und wählen Sie im Paket-Zentrum „Reparieren“. Das System installiert das Paket erneut und lädt fehlende Images herunter.",
+        "fr": "Corrigez la cause, puis sélectionnez « Réparer » dans le Centre de paquets. Le système réinstallera le paquet et téléchargera les images manquantes.",
+        "es": "Corrija la causa y seleccione \"Reparar\" en el Centro de paquetes. El sistema reinstalará el paquete y descargará las imágenes que faltan.",
+        "it": "Correggere la causa e selezionare «Ripara» nel Centro pacchetti. Il sistema reinstallerà il pacchetto e scaricherà le immagini mancanti."
+    },
+    "compose.diagnosis.error_code": {
+        "en": "(Error code: {code})",
+        "zh-TW": "（錯誤碼：{code}）",
+        "zh-CN": "（错误代码：{code}）",
+        "ja": "（エラーコード：{code}）",
+        "ko": "(오류 코드: {code})",
+        "de": "(Fehlercode: {code})",
+        "fr": "(Code d’erreur : {code})",
+        "es": "(Código de error: {code})",
+        "it": "(Codice errore: {code})"
+    },
     "delegate.preselection": {
         en: "Pre-select the shared folder for background saves. Confirm this selection with your administrator password when first enabling background access in the app. This does not grant the package account access to the share.",
         "zh-TW": "預選背景存檔使用的共用資料夾。首次在 App 啟用背景存取時，以管理員密碼確認這個選項。這不會授予套件帳號共用資料夾權限。",

package/dist/ctl/cli.js

@@ -6,7 +6,7 @@ import { CtlError, errorData, ctlError } from './errors.js';
 import { CtlStore } from './store.js';
 import { CtlClient, boundedMap } from './service.js';
 import { selectHosts, selectApp, selectOperation, flagName, RESERVED_FLAGS } from './input.js';
-import { canonicalOrigin, createRequest } from './transport.js';
+import { canonicalOrigin, CTL_TIMEOUT_MS, createRequest } from './transport.js';
 import { loginDsm, logoutDsm } from './dsm-auth.js';
 import { publicOperation } from './redaction.js';
 const USAGE = 'synopkgland ctl host add|list|show|login|logout|remove|revoke; ctl list [--host a,b|--all-hosts] [--app pkg] [--refresh]; ctl <alias|package> <command...> [typed flags|--input file|-] [--dry-run] [--yes]';
@@ -70,7 +70,11 @@ export async function runCtl(argv, io = {}) {
             emit({ ok: true, data: { usage: USAGE } });
             return;
         }
-        const client = (host) => new CtlClient(store, host, io.requestFor?.(host));
+        const timeout = take(args, '--timeout', true);
+        if (timeout && (!/^\d+$/.test(timeout) || Number(timeout) < 1 || Number(timeout) > 3600))
+            throw new CtlError('CTL_ARGUMENT_INVALID', '--timeout must be 1–3600 seconds.', 'Use --timeout 60.');
+        const timeoutMs = timeout ? Number(timeout) * 1000 : CTL_TIMEOUT_MS;
+        const client = (host) => new CtlClient(store, host, io.requestFor?.(host), timeoutMs);
         const discoverOptions = { refresh, app: appFilter, approve, confirm: tty ? async (packages) => /^y(es)?$/i.test(await ask('Allow DSM session to fixed description endpoints for ' + packages.map(p => p.id + '@' + p.version).join(', ') + '? [y/N] ')) : undefined };
         if (args[0] === 'host') {
             const action = args[1], name = args[2];
@@ -100,7 +104,7 @@ export async function runCtl(argv, io = {}) {
                 const host = old ?? { name, origin: canonicalOrigin(url, tunnel), username: usernameOption ?? await ask('DSM account: '), approved: {}, ...(tunnel ? { tunnel: true } : {}), ...(ca ? { ca } : {}) };
                 const previous = old ? await store.credentials.get(store.key(host)) : null;
                 const secret = passwordStdin ? readBounded(0, 4096).replace(/[\r\n]+$/, '') : await ask('User password: ', true);
-                const session = await loginDsm(host.origin, host.username, secret, { remember: !noRemember, deviceId: previous?.deviceId, otp: () => ask('DSM OTP: ', true), request: io.requestFor?.(host), ca: host.ca ? readFileSync(host.ca, 'utf8') : undefined });
+                const session = await loginDsm(host.origin, host.username, secret, { remember: !noRemember, deviceId: previous?.deviceId, otp: () => ask('DSM OTP: ', true), request: io.requestFor?.(host) ?? createRequest(host.origin, timeoutMs, host.ca ? readFileSync(host.ca, 'utf8') : undefined), ca: host.ca ? readFileSync(host.ca, 'utf8') : undefined });
                 try {
                     if (old)
                         await store.credentials.set(store.key(host), session);
@@ -108,7 +112,7 @@ export async function runCtl(argv, io = {}) {
                         await store.add(host, session);
                 }
                 catch (e) {
-                    await logoutDsm(session, io.requestFor?.(host) ?? createRequest(host.origin)).catch(() => { });
+                    await logoutDsm(session, io.requestFor?.(host) ?? createRequest(host.origin, timeoutMs)).catch(() => { });
                     throw e;
                 }
                 host.lastUsed = new Date().toISOString();
@@ -135,7 +139,7 @@ export async function runCtl(argv, io = {}) {
                 let logoutError;
                 if (session?.cookie) {
                     try {
-                        await logoutDsm(session, io.requestFor?.(host) ?? createRequest(host.origin, 10000, host.ca ? readFileSync(host.ca, 'utf8') : undefined));
+                        await logoutDsm(session, io.requestFor?.(host) ?? createRequest(host.origin, timeoutMs, host.ca ? readFileSync(host.ca, 'utf8') : undefined));
                         loggedOut = true;
                     }
                     catch (error) {
@@ -184,7 +188,7 @@ export async function runCtl(argv, io = {}) {
                     return { host: name, ok: true, data: path.length ? { ...view, commands: [view.commands.find(c => c.id === selectOperation(app, path).id)] } : view };
                 }
                 const tail = args.slice(1);
-                const noWait = !!take(tail, '--no-wait'), wait = !!take(tail, '--wait'), timeout = take(tail, '--timeout', true);
+                const noWait = !!take(tail, '--no-wait'), wait = !!take(tail, '--wait');
                 if (noWait && wait)
                     throw new CtlError('CTL_ARGUMENT_INVALID', 'Use --wait or --no-wait.', 'run: synopkgland ctl list --json');
                 if (timeout && (!/^\d+$/.test(timeout) || Number(timeout) < 1 || Number(timeout) > 3600))

package/dist/ctl/flows.js

@@ -32,13 +32,13 @@ export async function runFlow(flow, params, invoke, options) {
         }
         throw new CtlError('CTL_FLOW_LIMIT', 'Pagination page limit reached; result is incomplete.', 'Narrow the query.', 5);
     }
+    const until = performance.now() + Math.min(options.timeoutMs ?? flow.timeoutMs, 3600000);
     const accepted = await invoke(flow.start, params);
     if (options.wait === false)
         return { accepted: true, job: accepted };
     const id = field(accepted, flow.jobId);
     if (!['string', 'number'].includes(typeof id))
         throw new CtlError('CTL_FLOW_RESPONSE', 'Start response has no job ID.', 'Check command metadata; start is not retried.', 5);
-    const until = performance.now() + Math.min(options.timeoutMs ?? flow.timeoutMs, 3600000);
     while (performance.now() < until) {
         const poll = await invoke(flow.poll, { [flow.idParam]: id });
         const state = field(poll, flow.state);

package/dist/ctl/service.d.ts

@@ -15,7 +15,9 @@ export declare class CtlClient {
     store: CtlStore;
     host: Host;
     request: JsonRequest;
-    constructor(store: CtlStore, host: Host, request?: JsonRequest);
+    constructor(store: CtlStore, host: Host, request?: JsonRequest, timeoutMs?: number);
+    private until?;
+    private remaining;
     valid(): Promise<boolean>;
     inventory(session: DsmSession): Promise<{
         id: string;
@@ -34,5 +36,6 @@ export declare class CtlClient {
         wait?: boolean;
         timeoutMs?: number;
     }): Promise<any>;
+    private executeWithin;
     private appCookieSession;
 }