@synopackageland/cli 0.17.6 → 0.17.8

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.17.8 (2026-10-20)
+
+- Update SDK 0.17.7 executor and lifecycle digests for the administrator-role fix.
+
+## 0.17.7 (2026-10-20)
+
+- Inspect Compose Apps with custom icons and localized titles using their archived build inputs, preserving every icon size and strict launcher validation. Preserve declared daemon uninstall hooks when checking fixed lifecycle scripts.
+
 ## 0.17.6 (2026-10-20)
 
 - Inspect sharedFolder, Portal and install-selected Apps by reconstructing fixed lifecycle scripts from their complete inputs, including native HTTPS ingress and App hooks.

package/dist/build-spk/dsm-icons.d.ts

@@ -34,5 +34,7 @@ export declare function iconReport(root: string, icon: string | undefined): Icon
  */
 export declare function windowIconTemplate(icons: PackageIcons): string;
 export declare function windowIconFile(icons: PackageIcons, size: number): string;
+/** Recover the build's exact icon inputs from an SPK, including hand-drawn sizes. */
+export declare function readDsmWindowIcons(uiDir: string): PackageIcons;
 export declare function writeDsmWindowIcons(uiDir: string, icons: PackageIcons): void;
 export declare function writePackageCenterIcons(spkRoot: string, icons: PackageIcons): void;

package/dist/build-spk/dsm-icons.js

@@ -149,6 +149,36 @@ export function windowIconTemplate(icons) {
 export function windowIconFile(icons, size) {
     return windowIconTemplate(icons).replace("{0}", String(size));
 }
+/** Recover the build's exact icon inputs from an SPK, including hand-drawn sizes. */
+export function readDsmWindowIcons(uiDir) {
+    const dir = join(uiDir, "images");
+    const candidates = readdirSync(dir).filter(name => /^app_[a-f0-9]{12}_256\.png$/.test(name));
+    if (candidates.length !== 1)
+        throw new Error("expected one complete DSM window icon set");
+    const template = candidates[0].replace(/_256\.png$/, "_{0}.png");
+    const window = new Map();
+    let solid = false;
+    for (const size of WINDOW_ICON_SIZES) {
+        const name = template.replace("{0}", String(size));
+        const bytes = readFileSync(join(dir, name));
+        if (bytes.length > MAX_ICON_BYTES)
+            throw new Error(`${name}: invalid DSM window icon`);
+        const image = decodePng(bytes);
+        if (image.width !== size || image.height !== size)
+            throw new Error(`${name}: invalid DSM window icon`);
+        if (size === 256)
+            solid = isSolid(image);
+        window.set(size, bytes);
+    }
+    const icons = {
+        source: window.get(256).equals(defaultPackageIcons().packageIcon256) ? "default" : "custom",
+        window, solid,
+        packageIcon: window.get(64), packageIcon256: window.get(256),
+    };
+    if (windowIconTemplate(icons) !== `images/${template}`)
+        throw new Error("DSM window icon filenames differ from their content hash");
+    return icons;
+}
 export function writeDsmWindowIcons(uiDir, icons) {
     mkdirSync(join(uiDir, "images"), { recursive: true });
     for (const [size, png] of icons.window)

package/dist/runtime/executor-digests.json

@@ -53,5 +53,16 @@
             "armv7": "57b6350c2812783cb536384f8b363c26d894af6589b5f19464d71d8d0a8035d5"
         },
         "goToolchain": "go1.26.9"
+    },
+    "0.17.7": {
+        "x86_64": "6d9d5a12ac4c990639b31c555560a1b6e49cbe1c267c626a23b91833dcc4452e",
+        "aarch64": "efbed582ce1249fed09de72b7bbe553510a55553e44ccf76fa93c684864e8bb8",
+        "armv7": "670f83c3349497263c96b0244ec142153c094d5e223dae091c9c8614c0ea04b6",
+        "lifecycle": {
+            "x86_64": "9bb53301670b43cdcd6e21cebac99ab7abd82962d874f32423a81e6cb49d4972",
+            "aarch64": "38fe873c86eb102c850baa1f304114a83a31d1df72defd22792bc37610fec9bb",
+            "armv7": "256fb348b275da7ac5728a3cb7cb7c65660de0d5c2c59430ab4f5ade1b0a3681"
+        },
+        "goToolchain": "go1.26.9"
     }
 }

package/dist/standalone/inspect-spk.js

@@ -24,6 +24,7 @@ import { daemonConfig, readDaemon, readLifecycleTimeouts } from "./daemon.js";
 import { ROOT_SCRIPT_HINTS } from "./root-ops.js";
 import { DELETE_STATE_KEY } from "../build-spk/uninstall-wizard.js";
 import { readUninstallRecord, stateItemTexts } from "./uninstall.js";
+import { DSM_LANGS } from "./i18n.js";
 import { BACKGROUND_UNIT_DIR, BACKGROUND_WORKER_PAYLOAD, BRIDGE_WORKER_ARGS, backgroundUnitName, renderBackgroundUnit, } from "./background.js";
 import { renderStandaloneResource } from "./resource.js";
 import { recoverSharedFolder, renderSharedFolderUpgradeWizardFiles, sharedFolderInstallSteps, SHARED_FOLDER_MARKER, } from "./shared-folder.js";
@@ -39,7 +40,7 @@ import { listPortExposures, loadCompose } from "../compose/analyze.js";
 import { uninstallCleanup, } from "../runtime/uninstall-cleanup.js";
 import { PORTAL_JSON_RELPATH, PORTAL_MUSTACHE_RELPATH, renderPortalJson, renderPortalLifecycle, renderPortalMustache, renderPortalWizardStep, } from "../portal/package.js";
 import { isPortalAlias } from "../portal/alias.js";
-import { defaultPackageIcons, MAX_ICON_BYTES } from "../build-spk/dsm-icons.js";
+import { defaultPackageIcons, MAX_ICON_BYTES, readDsmWindowIcons } from "../build-spk/dsm-icons.js";
 import { isDefaultLoginAsset } from "../build-spk/login-style.js";
 import { decodePng } from "../build-spk/png.js";
 /** The SPK kind of each sdk-package.json backend a CGI is built for: Go itself, or the runtime of an App in another language. */
@@ -198,7 +199,7 @@ export async function inspectSpk(spkPath, expectedKind) {
         if (standalone && portal)
             findings.push(...inspectPortalInfo(info, hasExecutor));
         const daemon = standalone
-            ? await checkDaemon(dir, info, paths, payload, findings, hasExecutor, background, combined, nativeGateway)
+            ? await checkDaemon(dir, info, paths, payload, findings, hasExecutor, background, combined, nativeGateway, uninstallHook?.uninstall)
             : undefined;
         if (background)
             checkBackground(dir, info, payload, findings, hasExecutor, daemon, kind !== "native-go", metadata.lifecycleTimeouts);
@@ -627,6 +628,7 @@ async function inspectUnifiedCompose(dir, payload, metadata, findings) {
             displayname: info.displayname,
             description: info.description,
             maintainer: info.maintainer,
+            i18n: { info: archivedInfoTranslations(info) },
             os_min_ver: info.os_min_ver,
             build: Number(info.version?.split("-").pop()),
             arches: [arch],
@@ -653,7 +655,10 @@ async function inspectUnifiedCompose(dir, payload, metadata, findings) {
             throw new Error("unexpected worker resource; unapproved Shares must never auto-acquire");
         if (readdirSync(join(dir, "conf")).some((n) => !["privilege", ...(resource ? ["resource"] : [])].includes(n)))
             throw new Error("unexpected Compose resource");
-        if (readOptional(join(root, "ui/config")) !== renderUiConfig(manifest))
+        // Replay build's shared renderer with the archived bytes, never a project
+        // path or the SDK default. Each hand-drawn icon size affects the URL hash.
+        const icons = readDsmWindowIcons(join(root, "ui"));
+        if (readOptional(join(root, "ui/config")) !== renderUiConfig(manifest, icons))
             throw new Error("LAUNCHER_TYPE_MISMATCH classless Compose must use the shared url launcher");
         if (g &&
             (cfg.package !== info.package ||
@@ -787,7 +792,7 @@ async function recoverCompose(dir, value, findings) {
         return undefined;
     }
 }
-async function checkDaemon(dir, info, paths, payload, findings, executor, background, combined, nativeGateway) {
+async function checkDaemon(dir, info, paths, payload, findings, executor, background, combined, nativeGateway, uninstall) {
     if (![...paths].some((path) => path.startsWith("daemon/")))
         return;
     if (info.precheckstartstop !== "yes")
@@ -843,6 +848,7 @@ async function checkDaemon(dir, info, paths, payload, findings, executor, backgr
             root: dir,
             ...(combined ? { lifecycleTimeouts: daemon.timeouts } : {}),
             daemon,
+            uninstall,
             ...combined,
             capabilities: {
                 ...(executor ? { rootOps: true } : {}),
@@ -879,6 +885,22 @@ async function checkDaemon(dir, info, paths, payload, findings, executor, backgr
         findings.push("daemon/config.json or the payload does not match the fixed daemon contract");
     }
 }
+/** INFO retains the localized title inputs used by build's ui/config renderer. */
+function archivedInfoTranslations(info) {
+    const translations = {};
+    for (const [locale, lang] of Object.entries(DSM_LANGS)) {
+        if (locale === "en")
+            continue;
+        const displayname = info[`displayname_${lang}`];
+        const description = info[`description_${lang}`];
+        if (displayname || description)
+            translations[locale] = {
+                ...(displayname ? { displayname } : {}),
+                ...(description ? { description } : {}),
+            };
+    }
+    return translations;
+}
 function readInfo(path, findings, kind, compose = false) {
     if (!existsSync(path)) {
         findings.push("INFO is missing");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.17.6",
+  "version": "0.17.8",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {
@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "@napi-rs/keyring": "^2.1.1",
-    "@synopackageland/templates": "0.17.8",
+    "@synopackageland/templates": "0.17.10",
     "ajv": "^8.17.1",
     "commander": "^13.1.0",
     "json-canonicalize": "^3.0.1",