@synopackageland/cli 0.19.1 → 0.21.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.21.0 (2026-10-21)
+
+- Validate and preserve `compose.devices.gpu` in check, build and inspect for optional Intel render-node access and software fallback.
+- Pin SDK/templates 0.21.0 and reuse immutable executor/v0.20.0 with verified unchanged executor/lifecycle digests.
+
+## 0.20.0 (2026-10-21)
+
+- Align CLI/templates and the supported SDK minor line at 0.20; retain published UI 0.12.5.
+- Compare upgrade approval requirements with `build/inspect --baseline`.
+- Package native Compose shared-folder mounts with `select: install` and pass host health readiness to the daemon.
+- Pin the 0.20.0 executor/lifecycle digest inventory and refresh canonical approval fixtures. Rebuilt executor Apps require administrator reapproval after upgrade.
+
 ## 0.19.1 (2026-10-20)
 
 - Record SDK 0.19.1 executor and lifecycle digests for the executor fix that accepts `deadline_ms` on delegated `webapi.call`; SDK 0.19.0 digests remain. Executor Apps rebuilt with SDK 0.19.1 require one administrator reapproval after upgrading.

package/README.md

@@ -367,3 +367,20 @@ unencrypted-HTTP limitations before opening it. Native resource/startup failures
 fail closed; they do not silently expose a direct listener. The native runtime
 requires the corresponding SDK release; this CLI change does not publish that
 release or change existing manifest version pins.
+
+Compose Apps may opt in to Intel render devices with
+`compose.devices.gpu.services: [media]`. The matching SDK discovers exact devices
+and the native `videodriver` GID at installation; the CLI emits DSM's
+`video-driver` resource. `check` rejects arbitrary paths/GIDs and elevated GPU
+services. `inspect --json` includes `compose.devices.gpu` with the runtime path
+policy, GID source and software fallback, plus outstanding DSM acceptance
+blockers. Keep the package UID and let the App validate its upstream encoder;
+absence of a GPU produces no device mapping. See the matching SDK's Compose GPU
+documentation for the security boundary and hardware validation limits.
+
+DSM's native provider adds NET_BIND_SERVICE to the bounding set for Compose
+packages. The SDK still emits `cap_drop: [ALL]` and requests no `cap_add`; the
+nonroot package process with no-new-privileges has zero effective, permitted and
+ambient capabilities on the tested provider. This general platform behavior is
+not a GPU blocker. Plan metadata describes SDK policy, not an attestation of the
+provider's final container configuration; see the SDK Compose security boundary.

package/dist/cli.js

@@ -344,6 +344,7 @@ export async function runCli(argv) {
                 ...("compose" in loaded.manifest && loaded.manifest.compose
                     ? {
                         compose: {
+                            ...(loaded.manifest.compose.plan.devices ? { devices: loaded.manifest.compose.plan.devices } : {}),
                             images: loaded.manifest.compose.plan.images,
                             services: loaded.manifest.compose.plan.services,
                             mountsBlocked: loaded.manifest.compose.plan.mounts_blocked,
@@ -688,15 +689,18 @@ export async function runCli(argv) {
                         outDir: undefined,
                     }),
             });
+        const builtManifest = standalone && !isNativeLayout(standalone) ? loadStandaloneManifest(standalone) : undefined;
+        const devices = builtManifest && builtManifest.ok ? builtManifest.manifest.compose?.plan.devices : undefined;
         const approval = await Promise.all(outputs.map(async (output) => ({ output, ...await spkApprovalDiff(output, options.baseline && resolve(options.baseline)) })));
         const lines = [
             ...approval.map(item => item.output + "\n" + formatApprovalDiff(item)),
             ...outputs.map((output) => `Built ${output}`),
+            ...(devices?.gpu ? [`GPU: ${devices.gpu.paths}; GID source: ${devices.gpu.gid_source}; fallback: ${devices.gpu.fallback}`] : []),
             ...(reproducible ? reproducibleLines(reproducible) : []),
         ];
         if (reproducible && !reproducible.identical)
             throw Object.assign(failure("BUILD_NOT_REPRODUCIBLE", lines.join("\n"), "Find the payload files that differ between builds (timestamps, random paths, unpinned dependencies) and retry after fixing them."), { report: { outputs, reproducible } });
-        emit("build", { outputs, approval, ...(reproducible ? { reproducible } : {}) }, lines.join("\n"));
+        emit("build", { outputs, approval, ...(devices ? { compose: { devices } } : {}), ...(reproducible ? { reproducible } : {}) }, lines.join("\n"));
     });
     if (json)
         console.log = (...args) => console.error(...args);

package/dist/deploy/native-install-values.d.ts

@@ -8,9 +8,9 @@ export type NativeInstallValuesResult = {
     message: string;
 };
 /**
- * Install wizard values for a native-go/binary deploy. Only an install-selected
- * delegate asks the wizard for anything; preinst refuses an empty selection on
- * the first install, so refuse it here before building or uploading.
+ * Install wizard values for native and Compose deployment. An install-selected
+ * delegate or install.sharedFolder asks the wizard for a selection. Reject
+ * missing first-install answers before building or uploading.
  */
 export declare function resolveNativeInstallValues(manifest: StandaloneManifest, provided: Record<string, string>, state: {
     installed: boolean;

package/dist/deploy/native-install-values.js

@@ -6,20 +6,34 @@ function validShareName(name) {
         !/^homes?$/i.test(name) && name.trim() === name && name.length <= 256);
 }
 /**
- * Install wizard values for a native-go/binary deploy. Only an install-selected
- * delegate asks the wizard for anything; preinst refuses an empty selection on
- * the first install, so refuse it here before building or uploading.
+ * Install wizard values for native and Compose deployment. An install-selected
+ * delegate or install.sharedFolder asks the wizard for a selection. Reject
+ * missing first-install answers before building or uploading.
  */
 export function resolveNativeInstallValues(manifest, provided, state) {
     const fail = (code, message) => ({ ok: false, code, message });
     const selected = manifest.capabilities.delegate?.scope === "install-selected";
+    const folder = manifest.sharedFolder?.mode === "select" ? manifest.sharedFolder : undefined;
+    const key = folder?.key;
+    const changeKey = key ? `CHANGE_${key}` : undefined;
     const names = Object.keys(provided);
-    if (!selected && names.length)
+    if (!selected && !folder && names.length)
         return fail("DEPLOY_PARAM_UNDECLARED", `${manifest.package} has no install wizard values; remove --param ${names[0]}.`);
-    const unknown = names.find((name) => name !== "delegate_share" && name !== "delegate_home");
+    const unknown = names.find((name) => !(selected && (name === "delegate_share" || name === "delegate_home")) && name !== key && name !== changeKey);
     if (unknown)
-        return fail("DEPLOY_PARAM_UNDECLARED", `--param ${unknown} is not an install wizard value. Use: ${USAGE}.`);
-    const { delegate_share: share, delegate_home: home } = provided;
+        return fail("DEPLOY_PARAM_UNDECLARED", `--param ${unknown} is not an install wizard value. Use: ${folder ? `--param ${folder.key}=<shared folder>` : USAGE}.`);
+    if (key && changeKey) {
+        const name = provided[key], change = provided[changeKey];
+        if (change !== undefined && change !== "true" && change !== "false")
+            return fail("DEPLOY_PARAM_TYPE_INVALID", `--param ${changeKey} must be true or false.`);
+        if (name !== undefined && (name === "" || /[/\\"\x00-\x1f\x7f]/.test(name) || name.includes("..") || /^[.@]/.test(name)))
+            return fail("DEPLOY_PARAM_TYPE_INVALID", `--param ${key} must be one DSM Shared Folder name, never a path.`);
+        if ((!state.installed || change === "true") && name === undefined)
+            return fail("DEPLOY_PARAM_REQUIRED", `Select the native Shared Folder with --param ${key}=<shared folder>.`);
+        if (state.installed && name !== undefined && change !== "true")
+            return fail("DEPLOY_PARAM_REQUIRED", `Changing the selected folder requires --param ${changeKey}=true and --param ${key}=<shared folder>.`);
+    }
+    const share = selected ? provided.delegate_share : undefined, home = selected ? provided.delegate_home : undefined;
     if (home !== undefined && home !== "true" && home !== "false")
         return fail("DEPLOY_PARAM_TYPE_INVALID", "--param delegate_home must be true or false.");
     if (share !== undefined && !validShareName(share))

package/dist/runtime/executor-digests.json

@@ -1,24 +1 @@
-{
-    "0.19.0": {
-        "x86_64": "3b23252a4d2ad188e8920aee3c022d054a85f31797dfb9f34a576449f8b08f41",
-        "aarch64": "024a8a01977324645b475330371afb8b8c8387eac6a11ec3d9d30a4a0e445174",
-        "armv7": "fae3266f65863815f1417332a3c73d12507941029077e0ddc118da8461e8cff3",
-        "lifecycle": {
-            "x86_64": "9bb53301670b43cdcd6e21cebac99ab7abd82962d874f32423a81e6cb49d4972",
-            "aarch64": "38fe873c86eb102c850baa1f304114a83a31d1df72defd22792bc37610fec9bb",
-            "armv7": "256fb348b275da7ac5728a3cb7cb7c65660de0d5c2c59430ab4f5ade1b0a3681"
-        },
-        "goToolchain": "go1.26.9"
-    },
-    "0.19.1": {
-        "x86_64": "e27cfeb85fed221b06f9c58166f02c0f701a724308cd17c96a43a843a0b5c4aa",
-        "aarch64": "908db00cbd37d072f6ffc339e7bca24da5efb8cddd4befcbad02c7398beb7191",
-        "armv7": "a0f35d62ec80a1bf3fb49f5e2d1a5f7576eda569a6fd0695084cec6cb8e100bc",
-        "lifecycle": {
-            "x86_64": "9bb53301670b43cdcd6e21cebac99ab7abd82962d874f32423a81e6cb49d4972",
-            "aarch64": "38fe873c86eb102c850baa1f304114a83a31d1df72defd22792bc37610fec9bb",
-            "armv7": "256fb348b275da7ac5728a3cb7cb7c65660de0d5c2c59430ab4f5ade1b0a3681"
-        },
-        "goToolchain": "go1.26.9"
-    }
-}
+{ "0.21.0": { "x86_64": "e27cfeb85fed221b06f9c58166f02c0f701a724308cd17c96a43a843a0b5c4aa", "aarch64": "908db00cbd37d072f6ffc339e7bca24da5efb8cddd4befcbad02c7398beb7191", "armv7": "a0f35d62ec80a1bf3fb49f5e2d1a5f7576eda569a6fd0695084cec6cb8e100bc", "lifecycle": { "x86_64": "9bb53301670b43cdcd6e21cebac99ab7abd82962d874f32423a81e6cb49d4972", "aarch64": "38fe873c86eb102c850baa1f304114a83a31d1df72defd22792bc37610fec9bb", "armv7": "256fb348b275da7ac5728a3cb7cb7c65660de0d5c2c59430ab4f5ade1b0a3681" }, "goToolchain": "go1.26.9" } }

package/dist/runtime/sdk-source.d.ts

@@ -36,8 +36,8 @@ export declare function sdkRequirement(backendDir: string): string | undefined;
 export declare function goModulePath(backendDir: string): string | undefined;
 /**
  * The module directories of one SDK version. SYNOPKGLAND_SDK_DIR names a
- * local sdk checkout (development and gates only); otherwise both modules
- * come from `go mod download` of exactly that version.
+ * local sdk checkout (development and gates only); otherwise modules come from
+ * `go mod download`; unchanged executor releases are pinned above.
  */
 export declare function sdkSource(version: string, env?: NodeJS.ProcessEnv, download?: (spec: string) => string): SdkSource;
 /** The module cache directory of module@version; the cache is read-only, so builds copy it first. */

package/dist/runtime/sdk-source.js

@@ -75,16 +75,18 @@ function goMod(backendDir) {
         return '';
     }
 }
+/** SDK releases that reuse an immutable executor release with identical payload bytes. */
+const EXECUTOR_RELEASES = { '0.21.0': '0.20.0' };
 /**
  * The module directories of one SDK version. SYNOPKGLAND_SDK_DIR names a
- * local sdk checkout (development and gates only); otherwise both modules
- * come from `go mod download` of exactly that version.
+ * local sdk checkout (development and gates only); otherwise modules come from
+ * `go mod download`; unchanged executor releases are pinned above.
  */
 export function sdkSource(version, env = process.env, download = (spec) => goModDownload(spec, env)) {
     const dir = env.SYNOPKGLAND_SDK_DIR;
     if (dir)
         return { version, goDir: dir, executorDir: join(dir, 'executor'), local: true };
-    return { version, goDir: download(`${SDK_MODULE}@v${version}`), executorDir: download(`${EXECUTOR_MODULE}@v${version}`), local: false };
+    return { version, goDir: download(`${SDK_MODULE}@v${version}`), executorDir: download(`${EXECUTOR_MODULE}@v${EXECUTOR_RELEASES[version] ?? version}`), local: false };
 }
 const downloaded = new Map();
 /** The module cache directory of module@version; the cache is read-only, so builds copy it first. */

package/dist/standalone/compose-errors.js

@@ -1,5 +1,10 @@
 /** SDK planner errors accepted at this versioned tool boundary. */
 export const COMPOSE_ERRORS = {
+    COMPOSE_GPU_INVALID: {
+        code: "COMPOSE_GPU_INVALID",
+        description: "The GPU declaration requires bounded package-UID services.",
+        suggestion: "Declare compose.devices.gpu.services with distinct active service names. Keep package UID, no added capabilities, and let the SDK discover Intel render devices and the native videodriver GID.",
+    },
     COMPOSE_STARTUP_INVALID: {
         code: "COMPOSE_STARTUP_INVALID",
         description: "The container startup budget is invalid.",
@@ -212,13 +217,13 @@ export const COMPOSE_ERRORS = {
     },
     COMPOSE_SHARE_INVALID: {
         code: "COMPOSE_SHARE_INVALID",
-        description: "Shares.the declared value needs admin selection, ro/rw and fixed mounts.",
-        suggestion: "Keep the project disabled until an official protected mount/project adapter is verified; never use a destination grant or host root workaround.",
+        description: "Shared Folder selection, permission or fixed mount declaration is invalid.",
+        suggestion: "For select: install, match install.sharedFolder mode: select, key and permission; choose an existing unambiguous folder. Dynamic admin-after-install remains blocked. Never use a destination grant or host root workaround.",
     },
     COMPOSE_SHARE_NEEDS_APPROVAL: {
         code: "COMPOSE_SHARE_NEEDS_APPROVAL",
         description: "Declare capabilities.composeMounts: true; user destination grants cannot authorize package mounts.",
-        suggestion: "Keep the project disabled until an official protected mount/project adapter is verified; never use a destination grant or host root workaround.",
+        suggestion: "Declare the package-wide composeMounts opt-in. Native install selection requires DSM package-user permission; dynamic admin-after-install remains blocked.",
     },
     COMPOSE_SOURCE_UNSAFE: {
         code: "COMPOSE_SOURCE_UNSAFE",

package/dist/standalone/compose.d.ts

@@ -1,8 +1,18 @@
 import { type ComposeAppData } from "../runtime/compose-data.js";
 import type { NativeArchFamily } from "../build-spk/dsm-arch.js";
 import { type Daemon } from "./daemon.js";
+import type { SharedFolder } from "./shared-folder.js";
 import type { StandaloneError, StandaloneManifest } from "./manifest.js";
 export interface ComposePlan {
+    devices?: {
+        gpu?: {
+            services: string[];
+            resource: string;
+            gid_source: string;
+            paths: string;
+            fallback: string;
+        };
+    };
     app_data?: ComposeAppData;
     startup_timeout_seconds?: number;
     ingress?: {
@@ -71,12 +81,13 @@ export interface ComposeApp {
     document: Record<string, any>;
     plan: ComposePlan;
 }
-export declare const COMPOSE_FIELDS: readonly ["startup_timeout_seconds", "resource_prefix", "files", "env_files", "profiles", "web", "data", "shares", "network", "services", "helpers", "sdk"];
+export declare const COMPOSE_FIELDS: readonly ["devices", "startup_timeout_seconds", "resource_prefix", "files", "env_files", "profiles", "web", "data", "shares", "network", "services", "helpers", "sdk"];
 export declare function readComposeApp(value: unknown, root: string, arches: NativeArchFamily[], fail: (e: StandaloneError) => void, context?: {
     package?: string;
     sdk?: string;
     mode?: string;
     composeMounts?: boolean;
+    sharedFolder?: SharedFolder;
     resolveImages?: boolean;
     architecture?: NativeArchFamily;
     imageProofs?: unknown;
@@ -85,12 +96,12 @@ export declare function composeDaemon(m: Pick<StandaloneManifest, "compose" | "l
 export declare function composeNetwork(m: Pick<StandaloneManifest, "compose" | "identityGateway" | "spkVersion">): {
     public_ports: number[];
     readiness?: {
-        version: string;
-        plan_sha256: string;
         health: {
             path: string;
             status: number;
         } | undefined;
+        version?: string | undefined;
+        plan_sha256?: string | undefined;
     } | undefined;
     ingress?: {
         candidate: number;
@@ -101,7 +112,7 @@ export declare function composeNetwork(m: Pick<StandaloneManifest, "compose" | "
 export declare function composeSource(c: ComposeApp): string;
 /** Retain upstream bytes, the true override and a lock without secret values. */
 export declare function writeComposePayload(c: ComposeApp, root: string, target: string, gateway?: unknown): void;
-/** Only package identity values are materialized, in the incoming tree. */
+/** Materialize fixed package identity and native wizard share names in the incoming tree. */
 export declare function renderComposeInstall(pkg: string): string;
 /** The same SDK entry point supplies the package-account install materializer. */
 export declare function buildComposeControl(m: StandaloneManifest, arch: NativeArchFamily, work: string, run: import("./build.js").CommandRunner): Promise<string | undefined>;
@@ -118,3 +129,4 @@ export declare function dsmComposeProblem(c: ComposeApp): {
     message: string;
 } | undefined;
 export declare const COMPOSE_READINESS_LIMITATION = "Availability only: App health + fixed endpoint TCP + package lifecycle acquire generation matching the installed version. This does not attest the actual Docker image, project or generation. Another process already executing locally on the NAS may impersonate the fixed endpoint. Accepted for this local-code-execution threat model; replace with full official readback when available.";
+export declare const COMPOSE_HOST_READINESS_LIMITATION = "Host availability only: package UID and loopback listener bindings, plus declared App HTTP health when configured. This does not attest the actual Docker image, project or generation.";

package/dist/standalone/compose.js

@@ -12,6 +12,7 @@ import { goChildEnv } from "../runtime/go-env.js";
 import { sdkSource } from "../runtime/sdk-source.js";
 import { readDaemon } from "./daemon.js";
 export const COMPOSE_FIELDS = [
+    "devices",
     "startup_timeout_seconds",
     "resource_prefix",
     "files",
@@ -68,7 +69,7 @@ export function readComposeApp(value, root, arches, fail, context = {}) {
     if (!record(value) ||
         Object.keys(value).some((k) => !COMPOSE_FIELDS.includes(k)) ||
         !Array.isArray(value.files))
-        return invalid("compose requires files, with optional env_files, profiles, web, data, shares, network, services, helpers and sdk; old file/targets syntax is removed.");
+        return invalid("compose requires files, with optional env_files, profiles, web, data, shares, devices, network, services, helpers and sdk; old file/targets syntax is removed.");
     if (value.sdk !== undefined &&
         (typeof value.sdk !== "string" || !/^\d+\.\d+\.\d+$/.test(value.sdk)))
         return invalid("compose.sdk must name the matching SDK release.", "SDK_COMPOSE_UNSUPPORTED");
@@ -93,6 +94,7 @@ export function readComposeApp(value, root, arches, fail, context = {}) {
                 package: context.package ?? "ComposeApp",
                 identity_mode: context.mode ?? "none",
                 compose_mounts: context.composeMounts === true,
+                ...(context.sharedFolder?.mode === "select" ? { install_shared_folder: context.sharedFolder } : {}),
                 resolve_images: context.resolveImages === true,
                 registry_mirrors: context.resolveImages &&
                     process.env.SYNOPKGLAND_COMPOSE_REGISTRY_MIRRORS
@@ -171,11 +173,10 @@ export function composeNetwork(m) {
         ...(c.plan.ingress
             ? { ingress: { candidate: c.plan.ingress.candidate } }
             : {}),
-        ...(!host && c.web && !c.plan.mounts_blocked
+        ...(c.web && (!host || c.web.health) && !c.plan.mounts_blocked
             ? {
                 readiness: {
-                    version: m.spkVersion,
-                    plan_sha256: c.plan.sha256,
+                    ...(!host ? { version: m.spkVersion, plan_sha256: c.plan.sha256 } : {}),
                     health: c.web.health,
                 },
             }
@@ -199,6 +200,7 @@ export function writeComposePayload(c, root, target, gateway) {
     mkdirSync(target, { recursive: true });
     for (const [name, content] of Object.entries({
         "docker-compose.yml": c.plan.effective,
+        ...(c.plan.devices?.gpu ? { "gpu.template.yaml": c.plan.effective } : {}),
         "generated.override.yaml": c.plan.override,
         "compose.lock.json": JSON.stringify(c.plan.lock, null, 2) + "\n",
         "request.json": JSON.stringify({ declaration: c.declaration, sdk: c.sdk, gateway }, null, 2) + "\n",
@@ -207,7 +209,7 @@ export function writeComposePayload(c, root, target, gateway) {
     }))
         writeFileSync(join(target, name), content, { mode: 0o600 });
 }
-/** Only package identity values are materialized, in the incoming tree. */
+/** Materialize fixed package identity and native wizard share names in the incoming tree. */
 export function renderComposeInstall(pkg) {
     return `#!/bin/sh
 set -eu
@@ -268,6 +270,7 @@ export function lockComposeImages(m, arch, resolveImages, imageProofs) {
         sdk: m.compose.sdk,
         mode: m.identityGateway?.mode ?? "none",
         composeMounts: m.capabilities.composeMounts,
+        sharedFolder: m.sharedFolder,
         resolveImages,
         architecture: arch,
         imageProofs,
@@ -346,3 +349,4 @@ export function dsmComposeProblem(c) {
         };
 }
 export const COMPOSE_READINESS_LIMITATION = "Availability only: App health + fixed endpoint TCP + package lifecycle acquire generation matching the installed version. This does not attest the actual Docker image, project or generation. Another process already executing locally on the NAS may impersonate the fixed endpoint. Accepted for this local-code-execution threat model; replace with full official readback when available.";
+export const COMPOSE_HOST_READINESS_LIMITATION = "Host availability only: package UID and loopback listener bindings, plus declared App HTTP health when configured. This does not attest the actual Docker image, project or generation.";

package/dist/standalone/inspect-spk.d.ts

@@ -25,6 +25,7 @@ export interface SpkInspection {
         requiresAdminApproval: boolean;
     }>;
     compose?: {
+        devices?: ComposeApp["plan"]["devices"];
         ingress?: ComposeApp["plan"]["ingress"];
         images: unknown[];
         services: unknown[];

package/dist/standalone/inspect-spk.js

@@ -6,7 +6,7 @@ import { inspectApiDescription } from "./api-description-inspect.js";
 import { dsmLauncherType } from "../contract/app-launch.js";
 import { isWebLaunchMode, resolvedWebLaunch, trustedAppEntryPath, usesAuthGateway, } from "../contract/web-launch.js";
 import { loadContract } from "../contract/load.js";
-import { readComposeApp, composeSource, dsmComposeProblem, COMPOSE_READINESS_LIMITATION, } from "./compose.js";
+import { readComposeApp, composeSource, dsmComposeProblem, COMPOSE_READINESS_LIMITATION, COMPOSE_HOST_READINESS_LIMITATION, } from "./compose.js";
 import { createHash } from "node:crypto";
 import { inspectNativeLayout } from "./native-layout.js";
 import { checkBridgeApp, checkBridgeExecutor } from "./inspect-bridge.js";
@@ -575,6 +575,7 @@ async function inspectUnifiedCompose(dir, payload, metadata, findings) {
             requiresAdminApproval: true,
         })),
     };
+    const appScripts = unwrapAppScripts(join(dir, "scripts"), findings);
     const root = join(dir, "unified-compose-inspection");
     mkdirSync(root);
     await tar.x({ file: join(dir, "package.tgz"), cwd: root });
@@ -596,6 +597,7 @@ async function inspectUnifiedCompose(dir, payload, metadata, findings) {
             sdk: saved.sdk,
             mode: cfg?.mode ?? "none",
             composeMounts: metadata.capabilities?.includes("composeMounts"),
+            sharedFolder: recoverSharedFolder(readOptional(join(dir, "scripts/postinst"))),
             architecture: arch,
             imageProofs: JSON.parse(readFileSync(join(root, "compose/images.json"), "utf8")),
         });
@@ -606,6 +608,8 @@ async function inspectUnifiedCompose(dir, payload, metadata, findings) {
         if (composeSource(c) !==
             readFileSync(join(root, "compose/docker-compose.yml"), "utf8"))
             throw new Error("worker Compose differs from the SDK plan");
+        if (c.plan.devices?.gpu && readFileSync(join(root, "compose/gpu.template.yaml"), "utf8") !== c.plan.effective)
+            throw new Error("GPU template differs from the SDK plan");
         if (c.plan.override !==
             readFileSync(join(root, "compose/generated.override.yaml"), "utf8"))
             throw new Error("generated override differs from the SDK plan");
@@ -641,6 +645,7 @@ async function inspectUnifiedCompose(dir, payload, metadata, findings) {
                     : {}),
             },
             compose: c,
+            sharedFolder: recoverSharedFolder(readOptional(join(dir, "scripts/postinst"))),
             ...(g ? { identityGateway: g } : {}),
             ...(metadata.entry ? { entry: metadata.entry } : {}),
         };
@@ -650,6 +655,11 @@ async function inspectUnifiedCompose(dir, payload, metadata, findings) {
             throw new Error("gateway configuration differs from the declared package contract");
         if (readOptional(join(dir, "conf/privilege")) !== renderNativePrivilege())
             throw new Error("Compose hooks must run as the package account");
+        if (manifest.sharedFolder) {
+            for (const [name, text] of Object.entries(expectedWizardFiles(info.package, manifest.sharedFolder)))
+                if (readOptional(join(dir, "WIZARD_UIFILES", name)) !== text)
+                    throw new Error(`unexpected WIZARD_UIFILES/${name}; native share selection must match the declaration`);
+        }
         const resource = renderStandaloneResource(manifest);
         if (readOptional(join(dir, "conf/resource")) !== resource)
             throw new Error("unexpected worker resource; unapproved Shares must never auto-acquire");
@@ -671,7 +681,6 @@ async function inspectUnifiedCompose(dir, payload, metadata, findings) {
             if (readOptional(join(dir, "WIZARD_UIFILES", name)) !== text)
                 throw new Error(`unexpected WIZARD_UIFILES/${name}; retained-volume guidance must match the plan`);
         }
-        const appScripts = unwrapAppScripts(join(dir, "scripts"), findings);
         manifest.appScripts = undefined;
         for (const hook of [
             "preinst",
@@ -725,6 +734,7 @@ async function inspectUnifiedCompose(dir, payload, metadata, findings) {
         if (storageProblem)
             throw new Error(`[${storageProblem.code}] ${storageProblem.message}`);
         base.compose = {
+            ...(c.plan.devices ? { devices: c.plan.devices } : {}),
             ...(c.plan.ingress ? { ingress: c.plan.ingress } : {}),
             images: c.plan.images,
             services: c.plan.services,
@@ -737,9 +747,10 @@ async function inspectUnifiedCompose(dir, payload, metadata, findings) {
                         ? "none"
                         : c.plan.services.find((s) => s.service === c.web?.service)
                             ?.network === "host"
-                            ? "host-uid-listener"
+                            ? c.web.health ? "host-uid-listener-health" : "host-uid-listener"
                             : "health-fixed-ip-lifecycle",
-                limitation: COMPOSE_READINESS_LIMITATION,
+                limitation: c.plan.services.find((s) => s.service === c.web?.service)?.network === "host"
+                    ? COMPOSE_HOST_READINESS_LIMITATION : COMPOSE_READINESS_LIMITATION,
             },
         };
     }
@@ -1033,7 +1044,7 @@ function checkConf(dir, findings, kind, background, sharedFolder, pkg, portal, c
             if (!resource["docker-project"])
                 findings.push("the container is missing the docker-project resource");
             for (const key of Object.keys(resource)) {
-                if (!["docker-project", "webservice"].includes(key))
+                if (!["docker-project", "webservice", ...(compose?.plan.devices?.gpu ? ["video-driver"] : [])].includes(key))
                     findings.push(`Unknown container resource: ${key}`);
             }
         }

package/dist/standalone/lifecycle.js

@@ -33,7 +33,8 @@ function renderStandaloneScriptInternal(name, manifest) {
         const control = `"/var/packages/${manifest.package}/target/daemon/control"`;
         const paths = `"\${SYNOPKG_PKGDEST:-/var/packages/${manifest.package}/target}" "\${SYNOPKG_PKGVAR:-/var/packages/${manifest.package}/var}"`;
         const preflight = name === "start-stop-status"
-            ? `case "$1" in prestart|start|restart)\n  "\${SYNOPKG_PKGDEST:-/var/packages/${manifest.package}/target}/compose/control" preflight || exit $? ;;\nesac\n`
+            ? `case "$1" in prestart|start|restart)\n  "\${SYNOPKG_PKGDEST:-/var/packages/${manifest.package}/target}/compose/control" preflight || exit $? ;;\nesac\n` +
+                (!manifest.identityGateway ? `case "$1" in prestart|prestop) exit 0 ;; esac\n` : "")
             : "";
         const remember = name === "postinst" &&
             manifest.compose.plan.ingress &&

package/dist/standalone/manifest.js

@@ -240,12 +240,16 @@ function readManifest(raw, c) {
         c.fail("CTL_UNSUPPORTED_BACKEND", "Compose does not support automatic ctl descriptions; disable ctl.");
     if (isRecord(raw.compose) && isRecord(raw.compose.web) && !isRecord(raw.compose.web.health))
         c.fail("COMPOSE_HEALTH_REQUIRED", "Select compose.web.health.path and expected 2xx status for the actual App. Readiness does not follow redirects; check is static and does not probe HTTP.");
+    const sharedFolder = raw.install === undefined
+        ? undefined
+        : readSharedFolder(raw.install, (e) => c.fail(e.code, e.message));
     const compose = arches &&
         readComposeApp(raw.compose, c.root, arches, (e) => c.fail(e.code, e.message), {
             package: packageId,
             sdk: typeof gatewayRaw.sdk === "string" ? gatewayRaw.sdk : undefined,
             mode: typeof gatewayRaw.mode === "string" ? gatewayRaw.mode : "none",
             composeMounts: capabilities.composeMounts,
+            sharedFolder,
         });
     if (raw.compose !== undefined &&
         ((raw.daemon !== undefined && !timeoutOnly) ||
@@ -306,9 +310,6 @@ function readManifest(raw, c) {
         if (permissions)
             checkBridgeMethods(backend, permissions, c);
     }
-    const sharedFolder = raw.install === undefined
-        ? undefined
-        : readSharedFolder(raw.install, (e) => c.fail(e.code, e.message));
     const entry = raw.entry === undefined
         ? undefined
         : raw.compose !== undefined &&

package/dist/standalone/resource.js

@@ -11,6 +11,7 @@ export function renderStandaloneResource(m, portal) {
     const dataShare = m.sharedFolder && sharedFolderResource(m.package, m.sharedFolder);
     const webConfig = { ...(portal ? portalResource()['web-config'] : {}), ...nativeGatewayResource(m) };
     const resource = {
+        ...(m.compose?.plan.devices?.gpu && !m.compose.plan.mounts_blocked ? { "video-driver": {} } : {}),
         ...(m.compose && !m.compose.plan.mounts_blocked
             ? renderDockerProjectResource(m.package, "compose", false, m.compose.plan.project_name)
             : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.19.1",
+  "version": "0.21.0",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {
@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "@napi-rs/keyring": "^2.1.1",
-    "@synopackageland/templates": "0.19.0",
+    "@synopackageland/templates": "0.21.0",
     "ajv": "^8.17.1",
     "commander": "^13.1.0",
     "json-canonicalize": "^3.0.1",

package/skills/reference/compose.md

@@ -98,7 +98,7 @@ a build operator trust decision. `check`/`inspect` remain offline.
 | Private bind data | DSM build rejects COMPOSE_PRIVATE_BIND_TIMING_UNSUPPORTED: clean-install preinst precedes pkgvar creation, while worker acquire precedes postinst; no root initialization or automatic volume conversion |
 | Image VOLUME | Build inventories verified image config and assigns a stable named volume |
 | Existing external volume | Rejected without trusted admin ownership/driver readback |
-| Existing Shared Folder | Explicit opt-in intent only; blocked settings page until official protected ACL/project control exists |
+| Existing Shared Folder | Native install selection plus DSM package-user ACL; dynamic admin-after-install authority stays blocked |
 | Bridge | Default no-publish dedicated internal bridge with a package-derived fixed IP; availability requires App health, TCP and the current lifecycle acquire record; no Docker identity attestation |
 | Host | Explicit verified OIDC web consumer with address_env forced to 127.0.0.1; no container-root; internet access is visible |
 | Egress | isolated internal networks, or explicit internet outbound bridge; fine allowlist declarations fail |
@@ -122,7 +122,48 @@ modification and deletion. DSM identity/account bridge and file authority are
 separate features. Per-DSM-user filesystem access requires a File Station session
 or Broker Adapter; it is outside this change and cannot be obtained through a mount.
 
-Declare `capabilities: {composeMounts: true}` and, for example:
+For one existing Shared Folder, reuse the native install/upgrade wizard:
+
+```yaml
+capabilities: {composeMounts: true}
+install:
+  sharedFolder: {mode: select, key: media, permission: ro}
+compose:
+  shares:
+    media:
+      select: install
+      # Omitted permission defaults to ro. For rw, set rw in both declarations.
+      mounts: [{service: web, target: /media}]
+```
+
+The share key and permission must match `install.sharedFolder` exactly. This
+route supports `mode: select`; `create` resource ordering is not supported.
+The package-account preinst resolves the chosen name on `/volumeN` and writes
+only the fixed source placeholder into the worker's private `.env`. Missing,
+ambiguous or symlinked sources fail installation. Host paths are never wizard
+answers. Every mounted service uses the fixed package UID:GID, drops all Linux
+capabilities and has no-new-privileges. Container-root cannot mount Shares.
+
+**Selecting an existing share does not grant permission.** An administrator must
+grant the package account access in **Control Panel > Shared Folder > Edit >
+Permissions > System internal user**. Until then, container file operations fail
+under the kernel's ACL checks. No root helper, ACL writer or Docker socket is
+given to the App. Grant directly to the package account; supplementary DSM groups
+are not added to the container. See the SDK Shared Folder permission guide.
+
+The upgrade wizard keeps the saved name unless its change checkbox is selected.
+CLI deployment uses `--param media=Media` on first install, and
+`--param CHANGE_media=true --param media=OtherMedia` to change it on upgrade.
+Stop/disable and uninstall use DSM's official project worker; source data and
+administrator-managed ACL entries are retained. A moved share needs a new
+upgrade to resolve its volume path; start does not rematerialize the bind.
+
+ACL changes affect subsequent filesystem operations. Already-open file
+descriptors and data already read are not recalled. To stop existing streams,
+stop the package before removing its access. This native route does not promise
+automatic container termination or recreation on ACL changes.
+
+For dynamic selection after install, declare the separate, blocked authority:
 
 ```yaml
 compose:
@@ -140,13 +181,25 @@ upstream docker-project is acquired. The independent authority purpose is
 `compose-mount`; a user destination grant from Download Hub/delegate never
 permits a package-wide mount.
 
-The current implementation does **not** issue a mount grant, invoke ACL tools,
+The dynamic implementation does **not** issue a mount grant, invoke ACL tools,
 install a protected executor for Compose, or activate/revoke an upstream project.
 Confirmation returns `COMPOSE_PROJECT_CONTROL_UNAVAILABLE`. It must remain
 unsupported until an official ACL plus fixed project-control adapter can use
 protected policy/digest/generation authority, stop/recreate/read back and revoke
 without reviving stale grants. No app runs as host root to bypass this boundary.
 
+| Acceptance blocker | Native install selection |
+| --- | --- |
+| `DSM_DOCKER_PROJECT_MODEL` | Uses the existing official docker-project worker; device acceptance still applies. |
+| `DSM_STORAGE_OWNERSHIP_TIMING` | Existing shares need no package-created directory or chown; private package binds remain unsupported. |
+| `DSM_EGRESS_BOUNDARY` | Unchanged independent network acceptance condition. |
+| `COMPOSE_PROJECT_CONTROL_UNAVAILABLE` | Bypassed through native install/upgrade/stop/uninstall, without a dynamic controller. |
+| `DSM_MOUNT_ACL_REVOKE` | Native kernel ACL semantics above; immediate stream cancellation remains outside this route. |
+
+The first three general device acceptance labels remain in the plan. Dynamic
+`admin-after-install` and `install-draft` keep all five blockers and
+`mounts_blocked: true`; mixing dynamic authority with native selection is refused.
+
 ## Gateway transport
 
 `none` keeps native app login; `header`, `token` and embedded `oidc` use supported

package/skills/reference/deploy.md

@@ -5,7 +5,7 @@
 3. Review `synopkgland deploy --dry-run --arch x86_64`, which does not connect to a NAS.
 4. Only when installation is authorized, run `synopkgland deploy --host <profile>`.
 
-Deployment uploads directly to DSM. It does not publish artifacts. Compose uses schema-2 differences and fixed package identity. Existing Shared Folder intent requires admin confirmation after install; official protected ACL/project control is currently blocked. No install answer or user destination grant activates a package mount. See compose.md and its device acceptance blockers.
+Deployment uploads directly to DSM. It does not publish artifacts. Compose uses schema-2 differences and fixed package identity. For `compose.shares` with `select: install`, use matching `install.sharedFolder: {mode: select, key: media, permission: ro}` and pass `--param media=Media`. Upgrade keeps the selection unless `--param CHANGE_media=true --param media=OtherMedia` is provided. An administrator grants the fixed package account access through DSM; selection is not a grant. Dynamic admin-after-install protected ACL/project control remains blocked. A user destination grant never activates a package mount. See compose.md and its device acceptance blockers.
 
 For native-go root-ops, approve fixed operations in DSM after installation. Updates that change the task text require fresh approval. Uninstall removes the executor tasks, the App's Application Privileges rules and a stale portal alias itself. Never delete installed packages or data as part of a code cleanup.