@synopackageland/cli 0.3.10 → 0.4.1

package/dist/templates/native-go-vue/frontend/test/nas-ui.test.ts

@@ -0,0 +1,261 @@
+// @vitest-environment jsdom
+import {expect, test, vi} from 'vitest'
+import {nextTick} from 'vue'
+import {mount} from '../src/main'
+import {createMockNasService} from '../src/nas/mock-provider'
+import {catalogs, nasCopy, format, errorCopy} from '../src/nas/i18n'
+import type {NasProvider} from '../src/nas/provider'
+import type {Context} from '../src/context'
+
+async function settle() {for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}await new Promise(r=>setTimeout(r,25))}
+function click(root:HTMLElement, text:string) {const b=[...root.querySelectorAll('button')].find(b=>b.textContent?.trim()===text || b.getAttribute('aria-label')===text);expect(b,text).toBeTruthy();b!.click()}
+function fixture(nas:NasProvider | undefined, user='normal1', locale='en') {
+ const root=document.createElement('div');document.body.append(root)
+ const reopen:Array<()=>void>=[]
+ const ctx={locale,reopen(fn:()=>void){reopen.push(fn)},call:vi.fn(async(method:string)=> {
+  if(method==='app.status') return {package:'SamePackage',version:'1',user,admin:user==='admin'}
+  if(method==='integration.status') return {state:'not-enabled',reason:'not-requested',packageRunning:'unknown',scheduler:'not-probed'}
+  throw {code:'unknown_method'}
+ })} as Context
+ const app=mount(root,ctx,{nasProvider:nas})
+ return {root,app,ctx,reopen}
+}
+function cleanup(...fixtures:ReturnType<typeof fixture>[]) {for(const f of fixtures){f.app.unmount();f.root.remove()}}
+
+test('managed account pilot stays visibly off with maintenance and approval restrictions',async()=> {
+ const f=fixture(createMockNasService().connect('admin'),'admin')
+ try {
+  await settle()
+  expect(f.root.textContent).toContain('Managed account pilot: off')
+  expect(f.root.textContent).toContain('Account changes or unverified identity revoke access')
+  expect(f.root.textContent).toContain('Enabling this pilot is unavailable in this build')
+  expect([...f.root.querySelectorAll('button')].some(b=>b.textContent?.includes('Enable managed'))).toBe(false)
+ } finally {cleanup(f)}
+})
+
+test('nine complete catalogs resolve DSM locale aliases with English fallback',()=> {
+ expect(Object.keys(catalogs)).toEqual(['en','zh-TW','zh-CN','ja','ko','de','fr','es','it'])
+ for(const catalog of Object.values(catalogs)) {
+  expect(Object.keys(catalog).sort()).toEqual(Object.keys(catalogs.en).sort())
+  expect(Object.values(catalog).every(s=>typeof s==='string' && s.trim().length>0)).toBe(true)
+  for(const key of Object.keys(catalogs.en) as Array<keyof typeof catalogs.en>) {
+   expect(catalog[key].match(/\{\w+\}/g) ?? []).toEqual(catalogs.en[key].match(/\{\w+\}/g) ?? [])
+  }
+ }
+ expect(nasCopy('cht')).toEqual(catalogs['zh-TW'])
+ expect(nasCopy('zh_CN')).toEqual(catalogs['zh-CN'])
+ expect(nasCopy('unknown')).toEqual(catalogs.en)
+})
+
+test('account changes discard the bound provider UI and its pending candidate context',async()=> {
+ const provider=createMockNasService().connect('normal1'), cancel=vi.spyOn(provider,'cancel'), f=fixture(provider)
+ try {
+  await settle();click(f.root,'Choose my folder');await settle()
+  f.ctx.call=vi.fn(async(method:string)=>method==='app.status'?{package:'SamePackage',version:'1',user:'normal2',admin:false}:{state:'not-enabled',reason:'not-requested',packageRunning:'unknown',scheduler:'not-probed'})
+  f.reopen.forEach(fn=>fn());await settle()
+  expect(f.root.textContent).toContain('normal2')
+  expect(f.root.querySelector('[role="dialog"]')).toBeNull()
+  expect(f.root.textContent).not.toContain('Choose my folder')
+  expect(cancel).toHaveBeenCalled()
+ } finally {cleanup(f)}
+})
+
+test('all nine locale UIs localize dialog controls and allow keyboard review without mouse-only actions',async()=> {
+ for(const locale of Object.keys(catalogs)) {
+  const copy=nasCopy(locale), f=fixture(createMockNasService().connect('normal1'),'normal1',locale)
+  try {
+   await settle();click(f.root,copy.choosePersonal);await settle()
+   const selected=[...f.root.querySelectorAll('button')].find(b=>b.getAttribute('aria-label')===format(copy.select,'Projects'))!
+   selected.focus();expect(document.activeElement).toBe(selected)
+   // Native Button remains a keyboard-activatable button (browser verifies Enter).
+   expect(selected.tagName).toBe('BUTTON');selected.click();await settle()
+   click(f.root,copy.review);await settle();expect(f.root.textContent).toContain(copy.persistent)
+   expect(f.root.querySelector(`button[aria-label="${copy.close}"]`)).toBeTruthy()
+   click(f.root,copy.cancel);await settle()
+  } finally {cleanup(f)}
+ }
+})
+
+test('home unavailable is recoverable and native diagnostics are never rendered',async()=> {
+ const provider=createMockNasService({homeAvailable:false}).connect('normal1'), f=fixture(provider)
+ try {
+  await settle();click(f.root,'Choose my folder');await settle()
+  expect(f.root.textContent).toContain('Required native identity or permission proof is unavailable')
+  provider.begin=async()=>{throw {code:'unknown',message:'/volume1/private-secret stderr'}}
+  click(f.root,'Retry');await settle()
+  expect(f.root.textContent).toContain('The request failed')
+  expect(f.root.textContent).not.toMatch(/private-secret|stderr/)
+ } finally {cleanup(f)}
+})
+
+test('picker browse, separate selection/summary, cancel, empty and confirm use injected provider only',async()=> {
+ const service=createMockNasService(), provider=service.connect('normal1'), cancel=vi.spyOn(provider,'cancel'), f=fixture(provider)
+ try {
+  await settle();click(f.root,'Choose my folder');await settle()
+  expect(f.root.textContent).toContain('Mock preview')
+  expect(f.root.querySelector('[role="dialog"]')).toBeTruthy()
+  click(f.root,'Select Projects');await settle()
+  expect(f.root.textContent).not.toContain('Persistent access')
+  click(f.root,'Review access');await settle()
+  expect(f.root.textContent).toContain('Persistent access')
+  click(f.root,'Cancel');await settle()
+  expect(cancel).toHaveBeenCalled()
+  expect(await provider.grants(new AbortController().signal)).toEqual([])
+  click(f.root,'Choose my folder');await settle();click(f.root,'Open Empty folder');await settle()
+  expect(f.root.textContent).toContain('This folder is empty')
+  click(f.root,'Back');await settle();click(f.root,'Select Projects');await settle();click(f.root,'Review access');await settle();click(f.root,'Confirm access');await settle()
+  expect(f.root.querySelector('[role="dialog"]')).toBeNull()
+  expect(f.root.textContent).toContain('Active')
+ } finally {cleanup(f)}
+})
+
+test('two same-package apps retain local modality, unique ARIA IDs and cancellation isolation',async()=> {
+ const service=createMockNasService(), a=fixture(service.connect('normal1')), b=fixture(service.connect('normal2'))
+ const body=document.body.getAttribute('style')
+ try {
+  await settle();click(a.root,'Choose my folder');click(b.root,'Choose my folder');await settle()
+  const ids=[...document.querySelectorAll('[id]')].map(n=>n.id).filter(Boolean)
+  expect(new Set(ids).size).toBe(ids.length)
+  for(const f of [a,b]) {
+   const dialog=f.root.querySelector('[role="dialog"]')!
+   expect(dialog.hasAttribute('aria-modal')).toBe(false)
+   for(const name of ['aria-labelledby','aria-describedby']) expect(f.root.querySelector(`[id="${dialog.getAttribute(name)}"]`)).toBeTruthy()
+  }
+  expect(getComputedStyle(b.root).pointerEvents).not.toBe('none')
+  click(a.root,'Cancel');await settle()
+  expect(a.root.querySelector('[role="dialog"]')).toBeNull()
+  expect(b.root.querySelector('[role="dialog"]')).toBeTruthy()
+  expect(document.body.getAttribute('style')).toBe(body)
+ } finally {cleanup(a,b)}
+})
+
+test('intent expiry is actionable; revoked but not drained never claims transfers stopped',async()=> {
+ let now=1000
+ const service=createMockNasService({now:()=>now,drained:false}), provider=service.connect('normal1'), f=fixture(provider)
+ try {
+  await settle();click(f.root,'Choose my folder');await settle();click(f.root,'Select Projects');await settle();click(f.root,'Review access');await settle()
+  now+=30_000;click(f.root,'Confirm access');await settle()
+  expect(f.root.textContent).toContain('expired')
+  expect(await provider.grants(new AbortController().signal)).toEqual([])
+  click(f.root,'Cancel');await settle();click(f.root,'Choose my folder');await settle();click(f.root,'Select Projects');await settle();click(f.root,'Review access');await settle();click(f.root,'Confirm access');await settle()
+  click(f.root,'Revoke');await settle()
+  expect(f.root.textContent).toContain('already sent or written')
+  click(f.root,'Confirm revoke');await settle()
+  expect(f.root.textContent).toContain('Revoked; stopping transfers')
+ } finally {cleanup(f)}
+})
+
+test('unmount aborts late browse and cancels its context without creating a grant',async()=> {
+ const provider=createMockNasService().connect('normal1'), base=provider.list.bind(provider)
+ let resolve!:()=>void, requestSignal!:AbortSignal
+ provider.list=async(...args)=>{requestSignal=args[3];await new Promise<void>(r=>resolve=r);return base(...args)}
+ const cancel=vi.spyOn(provider,'cancel'), f=fixture(provider)
+ await settle();click(f.root,'Choose my folder');await settle();f.app.unmount()
+ expect(requestSignal.aborted).toBe(true);expect(cancel).toHaveBeenCalled()
+ resolve();await settle();expect(f.root.childElementCount).toBe(0);f.root.remove()
+})
+
+test('late begin after close is canceled and rapid double review consumes one intent',async()=> {
+ const provider=createMockNasService().connect('normal1'), begin=provider.begin.bind(provider)
+ let release!:()=>void
+ provider.begin=async(kind,signal)=>{await new Promise<void>(r=>release=r);return begin(kind,new AbortController().signal)}
+ const cancel=vi.spyOn(provider,'cancel'), prepare=vi.spyOn(provider,'prepare'), f=fixture(provider)
+ try {
+  await settle();click(f.root,'Choose my folder');await settle();click(f.root,'Cancel');await settle()
+  release();await settle();expect(cancel).toHaveBeenCalled();expect(f.root.querySelector('[role="dialog"]')).toBeNull()
+  provider.begin=begin
+  click(f.root,'Choose my folder');await settle();click(f.root,'Select Projects');await settle()
+  click(f.root,'Review access');click(f.root,'Review access');await settle()
+  expect(prepare).toHaveBeenCalledTimes(1)
+ } finally {cleanup(f)}
+})
+
+test('long folder names stay text, and revoked without Q uses pending cleanup copy',async()=> {
+ const name='<img src=x onerror=alert(1)> '+ '\u5e74\u5ea6\u5831\u544a'.repeat(20)
+ const provider=createMockNasService({personalFolders:[name]}).connect('normal1'), f=fixture(provider)
+ try {
+  await settle();click(f.root,'Choose my folder');await settle()
+  expect(f.root.textContent).toContain(name);expect(f.root.querySelector('img')).toBeNull()
+  click(f.root,'Cancel');await settle()
+  provider.settings=async()=>({canManageShared:false,items:[{grantId:'fixture',revision:2,scopeKind:'user-personal',displayName:name,targetKind:'directory',actions:['nas.files.read'],effectiveState:'revoked',createdAt:1000,canRevoke:true,cleanupRequired:true}]})
+  click(f.root,'Refresh access');await settle()
+  expect(f.root.textContent).toContain('Revoked; cleanup needs verification')
+  expect(f.root.textContent).toContain('Read files')
+  expect(f.root.textContent).not.toContain('List folders')
+ } finally {cleanup(f)}
+})
+
+
+test('S8 production defaults display unavailable for normal/admin even when lifecycle is ready',async()=> {
+ for(const user of ['normal1','admin']) for(const locale of Object.keys(catalogs)) {
+  const f=fixture(undefined,user,locale),copy=nasCopy(locale)
+  try {
+   f.ctx.call=vi.fn(async(method:string)=> {
+    if(method==='app.status') return {package:'SamePackage',version:'1',user,admin:user==='admin'}
+    if(method==='integration.status') return {state:'ready',packageRunning:'running',scheduler:'ready'}
+    if(method==='personal.list') return {items:[]}
+    throw {code:'unknown_method'}
+   })
+   f.reopen.forEach(fn=>fn());await settle()
+   expect(f.root.textContent).toContain(copy.unavailableMessage)
+   expect(f.root.textContent).toContain(copy.pilotUnavailable)
+   expect(f.root.textContent).toContain(copy.noUnlock)
+   expect(f.root.textContent).not.toContain(copy.choosePersonal)
+   expect(f.root.textContent).not.toContain(copy.chooseShared)
+   expect(f.root.textContent).not.toContain(copy.emptyGrant)
+   expect(f.ctx.call.mock.calls.some(([method])=>method.startsWith('nas.'))).toBe(false)
+  } finally {cleanup(f)}
+ }
+})
+
+test('S8 unavailable connected providers are ignored; only development mocks have a picker',async()=> {
+ const connected=createMockNasService().connect('normal1')
+ Object.defineProperty(connected,'mode',{value:'connected'})
+ const settings=vi.spyOn(connected,'settings'),f=fixture(connected)
+ try {
+  await settle()
+  expect(f.root.textContent).toContain(nasCopy('en').unavailableMessage)
+  expect(f.root.textContent).not.toContain('Choose my folder')
+  expect(settings).not.toHaveBeenCalled()
+ } finally {cleanup(f)}
+})
+
+
+test('S8 safe error codes distinguish missing proof, denial, missing method and app authentication',()=> {
+ for(const copy of Object.values(catalogs)) {
+  for(const [code,key] of [['unavailable','errorNativeProof'],['denied','errorDenied'],['unknown_method','errorUnknownMethod'],['unsupported','errorUnsupported'],['session_required','errorSession'],['auth_unavailable','errorAuthentication']] as const) {
+   expect(errorCopy({code,message:'/volume1/private cookie=sid'},copy)).toBe(copy[key])
+   expect(errorCopy({code,message:'/volume1/private cookie=sid'},copy)).not.toMatch(/volume1|cookie=sid/)
+  }
+  expect(new Set(['unavailable','denied','unknown_method','unsupported'].map(code=>errorCopy({code},copy))).size).toBe(4)
+ }
+})
+
+
+test('S8 app request failures use localized safe-code copy without native diagnostics',async()=> {
+ for(const code of ['denied','unknown_method','unavailable','unsupported','session_required','auth_unavailable']) {
+  const f=fixture(undefined,'normal1','cht')
+  try {
+   await settle()
+   f.ctx.call=vi.fn(async()=>{throw {code,message:'/volume1/private cookie=sid'}})
+   f.reopen.forEach(fn=>fn());await settle()
+   expect(f.root.querySelector('[role="alert"]')?.textContent).toBe(errorCopy({code},nasCopy('cht')))
+   expect(f.root.textContent).not.toMatch(/volume1|cookie=sid/)
+  } finally {cleanup(f)}
+ }
+})
+
+ test('S1R risk and reauthorization are disclosed in nine unavailable UIs without data actions',async()=> {
+  for(const locale of Object.keys(catalogs)) {
+   const copy=nasCopy(locale) as any, f=fixture(undefined,'normal1',locale)
+   try {
+    await settle()
+    for(const key of ['relaxedRisk','relaxedReauthorize','relaxedPermissions']) {
+     expect(copy[key],`${locale}:${key}`).toBeTypeOf('string')
+     expect(f.root.textContent).toContain(copy[key])
+    }
+    expect(f.root.textContent).not.toContain(copy.choosePersonal)
+    expect(f.ctx.call.mock.calls.some(([method])=>method.startsWith('nas.'))).toBe(false)
+   } finally {cleanup(f)}
+  }
+ })

package/dist/templates/native-go-vue/frontend/tsconfig.json

@@ -0,0 +1 @@
+{"compilerOptions":{"target":"ES2022","module":"ESNext","moduleResolution":"Bundler","resolveJsonModule":true,"strict":true,"lib":["ES2022","DOM"],"skipLibCheck":true,"types":["vite/client"]},"include":["src/**/*.ts","src/**/*.vue","vite.config.ts"]}

package/dist/templates/native-go-vue/frontend/vite.config.ts

@@ -0,0 +1,10 @@
+import { defineConfig } from 'vite'
+import vue from '@vitejs/plugin-vue'
+// @ts-expect-error The shared notice tool is a plain Node module.
+import { writeThirdPartyNotices } from './third-party-notices.mjs'
+export default defineConfig(({command}) => ({
+  plugins: [vue(), {name: 'dependency-notices', closeBundle() {writeThirdPartyNotices('.', 'dist/LICENSES', {ui: true})}}],
+  // Library mode must replace Vue dependency env guards for the DSM browser.
+  define: command === 'build' ? {'process.env.NODE_ENV': JSON.stringify('production')} : {},
+  build: {lib: {entry: 'src/main.ts', formats: ['iife'], name: 'DsmVueApp', fileName: () => 'app.js'}, cssCodeSplit: false, rollupOptions: {output: {assetFileNames: 'app.[ext]'}}},
+}))

package/dist/templates/native-go-vue/gitignore

@@ -0,0 +1,2 @@
+dist/
+node_modules/

package/dist/types.d.ts

@@ -56,4 +56,4 @@ export interface ComposeDocument {
     secrets?: Record<string, unknown>;
     [key: string]: unknown;
 }
-export type TemplateName = "hello-web" | "hello-web-page" | "hello-files" | "compose-import" | "native";
+export type TemplateName = "hello-web" | "hello-web-page" | "hello-files" | "compose-import" | "binary" | "native-go";

package/dist/validate.js

@@ -1,7 +1,9 @@
 import { existsSync } from "node:fs";
 import { join } from "node:path";
-import { collectInstallParameters, loadContract } from "./contract/load.js";
+import { contractSpan, makeError } from "./errors.js";
+import { collectInstallParameters, getValuePosition, loadContract } from "./contract/load.js";
 import { validateContract } from "./contract/validate.js";
+import { findListingUnsupportedInstallTypes } from "./contract/unsupported-types.js";
 import { collectComposeInterpolations, collectVolumeSourceInterpolations, loadCompose, validateAdminPortMapping, validateComposeHostBinds, validateComposeNumericCommandArgs, validateComposeRunAs, validateComposeSecurity, } from "./compose/analyze.js";
 import { loadNative } from "./native/load.js";
 import { validateNative } from "./native/validate.js";
@@ -16,6 +18,14 @@ export function validateProject(project, options = {}) {
     const nativeFile = NATIVE_FILENAME;
     const parsed = loadContract(project.contractPath);
     errors.push(...validateContract(parsed, contractFile));
+    if (profile === "listing") {
+        for (const { name, type, code } of findListingUnsupportedInstallTypes(parsed.contract)) {
+            const pos = getValuePosition(parsed.doc, ["install", name, "type"]) ??
+                getValuePosition(parsed.doc, ["install", name]) ??
+                { line: 1, column: 1 };
+            errors.push(makeError(code, contractSpan(contractFile, pos.line, pos.column, `install.${name}.type`), `Install Parameter「${name}」的 type: ${type} 只能由 synopkgland deploy 在管理員 session 取得安裝當下的 Share 清單快照；Package Center／Package Source listing 不支援。`, "請使用 synopkgland deploy --host <name>，由管理員 session 在安裝時取得 Share 清單快照；此型別不能透過 Package Center 或 Package Source listing 上架。"));
+        }
+    }
     const hasCompose = existsSync(project.composePath);
     const nativePath = project.nativePath ?? join(project.root, NATIVE_FILENAME);
     const hasNative = existsSync(nativePath);
@@ -130,12 +140,6 @@ export function validateProject(project, options = {}) {
                 suggestion: `請在 compose.yaml 以 \${${name}} 引用此參數。`,
             });
         }
-        if (param.type === "dsm_user") {
-            // In dynamic route, dsm_user is automatically injected into Compose by generator.
-            // If a Compose manually writes user, COMPOSE_USER_CONFLICTS_DSM_USER is emitted.
-            // Referenced for error-registry emitter compatibility.
-            const _unused = "INSTALL_DSM_USER_UNREFERENCED";
-        }
     }
     const warnings = errors.filter((item) => item.severity === "warning");
     const hardErrors = errors.filter((item) => item.severity !== "warning");

package/package.json

@@ -1,11 +1,10 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.3.10",
+  "version": "0.4.1",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {
-    "synopkgland": "./dist/bin.js",
-    "synopkgland-release": "./dist/release-bin.js"
+    "synopkgland": "./dist/bin.js"
   },
   "files": [
     "dist",
@@ -14,16 +13,13 @@
     "skills"
   ],
   "scripts": {
-    "build": "tsc && node scripts/copy-templates.mjs",
+    "build": "rm -rf dist && tsc && node scripts/copy-templates.mjs",
     "test": "npm run build && node --import tsx --test test/**/*.test.ts",
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@synopackageland/dev-sdk": "^0.2.0",
-    "@synopackageland/package-source": "^0.2.1",
     "ajv": "^8.17.1",
     "commander": "^13.1.0",
-    "jose": "^6.0.10",
     "tar": "^7.4.3",
     "yaml": "^2.7.0"
   },
@@ -35,5 +31,6 @@
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org"
-  }
+  },
+  "license": "MIT"
 }

package/schema/synology-app.schema.json

@@ -59,14 +59,24 @@
         "properties": {
           "type": {
             "type": "string",
-            "enum": ["string", "boolean", "secret", "shared_folder", "dsm_user", "homes", "posix_all_shares"]
+            "enum": [
+              "string",
+              "boolean",
+              "secret",
+              "shared_folder",
+              "dsm_user",
+              "homes",
+              "posix_all_shares"
+            ]
           },
           "default": {},
           "generate": {
             "type": "boolean"
           }
         },
-        "required": ["type"]
+        "required": [
+          "type"
+        ]
       }
     },
     "integration": {
@@ -77,7 +87,10 @@
           "properties": {
             "launch": {
               "type": "string",
-              "enum": ["dsm-window", "new-page"],
+              "enum": [
+                "dsm-window",
+                "new-page"
+              ],
               "description": "Web App Launch Mode. dsm-window opens a DSM Application Window at the Trusted App Entry; new-page uses Package Center Open. Omit for dsm-window. Headless apps omit this field."
             },
             "cookies": {
@@ -89,47 +102,33 @@
             }
           },
           "additionalProperties": true
-        },
-        "identity": {
-          "type": "object",
-          "additionalProperties": false,
-          "required": ["mode"],
-          "properties": {
-            "mode": {
-              "type": "string",
-              "enum": ["broker-managed"],
-              "description": "v1 identity mode. SDK Apps omit oidc_compat; wrap-existing may add it."
-            },
-            "oidc_compat": {
-              "type": "object",
-              "additionalProperties": false,
-              "required": ["redirect_path"],
-              "properties": {
-                "redirect_path": {
-                  "type": "string",
-                  "pattern": "^/(?!/)(?!.*\\.\\.)[^\\s?#:]*$",
-                  "description": "App-owned OIDC callback path. No scheme, host, query, or '..'."
-                }
-              }
-            }
-          }
         }
       },
-      "additionalProperties": true
-    },
-    "permissions": {
-      "type": "object"
+      "additionalProperties": false
     },
+    "permissions": false,
     "privilege": {
       "type": "object",
       "additionalProperties": false,
       "properties": {
-        "privileged": { "type": "boolean" },
-        "host_network": { "type": "boolean" },
-        "host_pid": { "type": "boolean" },
-        "host_ipc": { "type": "boolean" },
-        "devices": { "type": "boolean" },
-        "cap_add": { "type": "boolean" }
+        "privileged": {
+          "type": "boolean"
+        },
+        "host_network": {
+          "type": "boolean"
+        },
+        "host_pid": {
+          "type": "boolean"
+        },
+        "host_ipc": {
+          "type": "boolean"
+        },
+        "devices": {
+          "type": "boolean"
+        },
+        "cap_add": {
+          "type": "boolean"
+        }
       }
     }
   },

package/skills/SKILL.md

@@ -1,51 +1,7 @@
----
-name: synopkgland
-description: Agent Authoring for Syno Package Land — create, validate, and Inner Loop deploy a Personal App to the author's NAS with synopkgland CLI. Load when the user wants to build a DSM app from a brief, scaffold from templates, validate App Contract + Compose, deploy with Local Attestation, or diagnose analyzer/deploy/readiness failures. Not for Curated publish, SSH to NAS, or inventing platform fields.
-version: 0.1.0
----
+# Independent Synology SPKs
 
-Syno Package Land Skill Pack（與 `@synopackageland/cli` 同版本、同 repo，不另發 npm）。
+Use this guide to initialize, build and inspect own applications or upstream OSS as independent packages. 禁止發明已完成的登入橋接、逐使用者檔案 ACL 或新身分平台。
 
-## 載入方式
+Start with `synopkgland init -t native-go`, `synopkgland init --binary`, or `synopkgland init -t compose-import`. Read reference/create.md or reference/wrap.md, then reference/deploy.md. Native CGI session checks belong to the package. Container authentication belongs to upstream; fixed service credentials govern mounted data access.
 
-1. 執行 `synopkgland skill path`，得到 Skill Pack 根目錄。
-2. **永遠先讀**本檔 `SKILL.md`。
-3. 依任務載入 `reference/*.md`（見下表）。不要一次讀完全部。
-
-| 階段 | 檔案 | 何時 |
-| --- | --- | --- |
-| 建立 | `reference/create.md` | 從零或一句話需求 |
-| 封裝 | `reference/wrap.md` | 已有 `compose.yaml` 或要補契約 |
-| 身分 | `reference/identity.md` | 需要 DSM 登入／Open |
-| 檔案 | `reference/files.md` | 需要 NAS 檔案 |
-| 部署 | `reference/deploy.md` | 要 `deploy` 到 NAS |
-| 排查 | `reference/diagnose.md` | `validate`／`deploy`／Open 失敗 |
-
-也可用 `synopkgland skill list`、`synopkgland skill show <id>` 在終端機檢視。
-
-## 權威邊界（必守）
-
-- **權威**：`synology-app.yaml` schema（`packages/app-cli/schema/synology-app.schema.json`）、`synopkgland validate`／analyzer 錯誤碼、repo 測試。Skill 只是操作介面。
-- **禁止發明欄位**：不得新增 schema 沒有的 top-level 或 `install` 型別；不得自創第二套 Compose／SPK DSL。不確定時先 `synopkgland inspect` 或讀模板，再 `validate`。
-- **禁止洩漏 secret**：不得把 DSM 密碼、signing key、API token 寫進 Git、`compose.yaml` environment、`.env` commit、或對話紀錄。NAS 憑證用 synoagentcli profile 或本機環境變數，由 CLI 讀取。
-- **不要讀 ADR** 當預設步驟；需要決策時 skill 才指向規格。
-- **不要宣稱** 15 分鐘黃金路徑已通過、公開 SDK 已 freeze、或 `inner-loop` 全綠。
-
-## 典型流程
-
-```text
-一句話需求
-  → reference/create.md（選模板、最少問題）
-  → synopkgland init -t hello-web|hello-web-page|hello-files|compose-import
-  → synopkgland dev（本機 mock）
-  → synopkgland validate
-  → synopkgland test
-  → reference/deploy.md → synopkgland deploy --host <nas>
-  → synopkgland info --host <nas>；DSM Open
-```
-
-失敗時載入 `reference/diagnose.md`；依錯誤碼修契約或 Compose，**不要猜**。
-
-## CLI 專案根
-
-`synopkgland` 從 cwd 向上找 `synology-app.yaml`，或 `--project <dir>`。v1 不做 monorepo workspace 協定。載入 `.env` 亦從 cwd 向上找，在非專案目錄執行指令時應配合 `--project`（來源：docs/impl/STATUS.md 關鍵教訓 15）。
+Never install, uninstall, publish or modify NAS data without task authorization. Prefer validate, inspect and deploy --dry-run for reviewable artifacts.

package/skills/reference/create.md

@@ -1,93 +1,21 @@
 # 建立（Create）
 
-從一句話或空白目錄產出可跑專案。**最少問題**：只問 schema／模板無法推斷的意圖。
+先選擇 `native-go`（Go CGI + DSM 視窗）、`binary`（預建服務程式）或 `compose-import`（上游容器）。`hello-web` 與 `hello-web-page` 分別示範 DSM 視窗及新分頁入口；`hello-files` 示範 Share 與固定 run-as 使用者。
 
-## 選模板（`synopkgland init -t`）
-
-| 模板 | 何時 | 預設整合 |
-| --- | --- | --- |
-| `hello-web` | 第一個「DSM 帳號打開」的 Web App（DSM 視窗） | 身分；`launch: dsm-window`；**不**開廣域 `files.*` |
-| `hello-web-page` | Web App 以 Package Center Open 開新分頁 | 身分；`launch: new-page` |
-| `hello-files` | 讀寫管理員選的 Shared Folder | 身分 + 必填 `install` shared_folder |
-| `compose-import` | 已有 `compose.yaml` | 保留映像／upstream 的 container target；只把 host source 換成 `${PARAM}`；Share 安裝時選 |
-
-```bash
-synopkgland init -t hello-web [目錄]
-```
-
-產物：`synology-app.yaml`、`compose.yaml`、README。需要程式碼時在同一專案加最小 Web App；v1 官方範例用 TypeScript + `@synopackageland/dev-sdk`。
-
-## Published port 分配
-
-`hello-web` 與 `hello-web-page` 模板的預設 `adminport` 是 **18333**。這個預設值在 2026-08-24 由 8080 調整而來，因為 8080 在真實 NAS 上常被既有容器使用；它只降低碰撞機率，不能保證該 port 一定可用。
-
-`adminport` 是 NAS 上的 published host port，必須和 `compose.yaml` 的 host-side published port 對應。若同一台 NAS 上有多個測試或正式 instance，每個 package／instance 都要分配獨立的 published port；**同一台 NAS 上不要重用同一個 port**。可挑選尚未被既有服務使用的高位 port，例如 19xxx 範圍（`19160` 只是示例），並記錄每個 instance 的分配。
-
-例如把模板 instance 改用 19160 時，`synology-app.yaml` 與 Compose 的 host-side port 要一起改，容器內 target 仍依原本 Compose／映像設定：
-
-```yaml
-# synology-app.yaml
-adminport: 19160
-
-# compose.yaml
-ports:
-  - "19160:18333"
+```sh
+synopkgland init -t native-go --package MyApp my-app
+synopkgland init --binary service
+synopkgland init -t compose-import upstream-app
 ```
 
-不要只改其中一處：`adminport` 沒有對應的 published port 會在 `validate` 被擋下；host port 已被同一台 NAS 的其他服務占用，則可能直到 deploy 才以 DSM 的 `broken` 呈現。
-
-包現成 Compose 時，先用 `inspect` 看原本的 volume mapping。容器路徑跟 Compose／映像的 upstream target 走，不要為了套平台範例改成 `/data`；只把 host source 換成 `${PARAM}`。原有的 upstream named volume 要保留在頂層 `volumes:`。需要既有 Share 時宣告 `install.<PARAM>.type: shared_folder`，管理員在安裝時選這台 NAS 的 Share。
-
-### `posix_all_shares`
-
-當 App 必須在安裝當下掛載這台 NAS 目前列出的每一個共用資料夾時，宣告 `install.<NAME>.type: posix_all_shares`，並把 `${NAME}` 作為完整 Compose volume source，例如 `${NAME}:/shares:ro`。Package Center wizard 會以 `SYNO.Core.Share.list` 的 multi-select 讓管理員再次確認；這是最大警告：容器可讀（或依 Compose 模式讀寫）所有列出的 Share，安裝後新建的共用資料夾不會自動加入，由管理員決定是否安裝。不要在契約或 Compose 寫 `/volume*`、domain、實體 path；`CLI deploy` 未給 `--param NAME=...` 時會用管理員 session 重新列出當下的 Share，preinst 只解析清單，不掃描檔案系統。
-
-## 路線判準：零設定（Static Zero-Config）vs Dynamic vs Broker
-
-Syno Package Land 在打包 Compose App 時，依契約與 Compose 內容自動分類為不同路線：
-
-| 路線 | 條件與特徵 | 適用環境 |
-| --- | --- | --- |
-| **零設定（Static Zero-Config）** | 靜態、低權限、無 `${...}` 插值（除專案相對路徑 `./html` bind 外）、單一 published port 對應 `adminport`。由 DSM 原生 `docker-project` 與 `webservice` resource worker 直接接管。 | Personal 與 **Curated 上架均支援** |
-| **Dynamic** | 宣告了 string/boolean 的 `install` 參數，在 Compose 內以 `${NAME}` 引用；preinst carrier 以 0600 寫入 `$SYNOPKG_PKGINST_TEMP_DIR/compose/.env` 供 DSM worker 載入。 | Personal 支援（Curated 暫限已支援子集） |
-| **Broker-installer（拒收於 Curated）** | 包含 `${SYNOPKG_PKGVAR}` 等平台 bind、需要 root 啟動的映像（例如官方 nginx）、未宣告參數的插值等。 | Personal 會警告；**Curated 上架直接拒收（`CURATED_BROKER_ROUTE_FORBIDDEN`）** |
-
-### Curated 拒絕 Broker-installer 路線與零設定寫法
-
-Rootless Broker 不支援 Container Manager 操作，因此 Curated 上架不接受 Broker-installer 路線：
-- 官方 `nginx:alpine` 這類需要 root 權限啟動的 image 在 DSM Container Manager 注入 package UID 後會直接 `ExitCode 1` 起不來。
-- `${SYNOPKG_PKGVAR}` 等平台 bind 應改用 named volume，或改用 D1 dynamic route 的 string/boolean 參數。
-- Web 服務推薦使用可由任意 UID 執行的映像檔與專案相對路徑 bind（模板寫法）：
-
-```yaml
-# 推薦的零設定 compose.yaml 寫法（參考 hello-web 模板）
-services:
-  web:
-    image: busybox:1.36
-    command: ["sh","-c","httpd -f -p 18333 -h /usr/share/nginx/html"]
-    ports:
-      - "18333:18333"
-    volumes:
-      - "./html:/usr/share/nginx/html:ro"
-```
-
-（來源：docs/impl/STATUS.md A31、packages/app-cli/templates/hello-web/compose.yaml）
-
-### Compose 變數未定義與執行身分限制
-
-- **未定義變數會導致 DSM Worker 靜默失敗**：Compose 內引用的環境變數若未在契約 `install` 宣告或未提供預設值，DSM `docker-project` worker 會直接失敗，套件呈現 `broken 150` 且 `worker_msg` 為空。（來源：docs/impl/dynamic-compose-d3-runbook.md「DSM 事實」第 4 條、docs/impl/STATUS.md 關鍵教訓 11）
-- **容器以 Package UID 執行**：DSM worker 會注入 `user: <package-uid>:<package-gid>`。以 root 擁有的 Docker named volume 會因為無寫入權限而報錯；容器如需寫入目錄，請寫入 `/tmp` 或由映像建立 package UID 可寫的目錄。（來源：docs/impl/STATUS.md 關鍵教訓 19）
+容器沿用上游登入。包現成 Compose 時保留 upstream target，只把 host source 換成 `${PARAM}`；管理員在安裝時選 Share。不要硬編碼 NAS 路徑，不要以固定 UID/GID 冒充逐使用者 ACL。
 
-## 只問這些（缺才問）
+## Published port
 
-1. **Package Identity**（reverse-DNS，例如 `com.example.myapp`）— 將來上架同一條身分。
-2. **顯示名稱**（`displayname`）。
-3. **要不要碰 NAS 檔案** — 若要，預設走 Shared Folder（`hello-files`），不要默默加 `files.read`／`files.write`／`files.delete`（見 `files.md`）。
-4. **已有 Compose 嗎** — 有則 `compose-import` + `inspect`。
+hello-web 預設 published port 是 18333。每個 package／instance 都要分配獨立的 port；同一台 NAS 上不要重用。可挑選未使用的 19xxx 高位 port，例如 19160；同時修改 contract adminport 與 Compose published port，保留容器內 target。
 
-不要問：SPK INFO、wizard、DDNS、port forwarding、Community PR。
+## 建置與檢查
 
-## 下一步
+執行 validate、build-spk、inspect --spk，再看 deploy --dry-run。Go CGI 每包驗證 DSM session，root 模式只提供固定管理員核准工作。容器必須使用已建置映像；不支援的特權 host 存取、secret/config 與 build stanza 會拒絕。
 
-- 本機：`synopkgland dev` → `validate` → `test`
-- 要上 NAS：讀 `deploy.md`
+安裝前讀 deploy.md。需要資料或登入時讀 files.md、identity.md；不加入尚未實作的 bridge。