@synopackageland/cli 0.3.2 → 0.3.3

package/dist/build-spk/generator.js

@@ -138,9 +138,7 @@ export async function buildSpk(options) {
         return { ok: false, errors: route.errors.map((error) => error.code) };
     }
     const rwEligibility = route?.eligibility;
-    const isDynamicRoute = route?.route === "dynamic" &&
-        rwEligibility?.adminport !== undefined &&
-        collectInstallParameters(contract).length > 0;
+    const isDynamicRoute = route?.route === "dynamic";
     const isResourceWorkerRoute = route?.route === "static-zero-config" ||
         isDynamicRoute;
     const staging = mkdtempSync(join(tmpdir(), "syno-spk-"));

package/dist/compose/analyze.d.ts

@@ -27,7 +27,7 @@ export interface ResourceWorkerEligibility {
  * - any App without a unique literal published adminport status probe
  */
 export declare function resourceWorkerEligibility(contract: AppContract, compose: ComposeDocument): ResourceWorkerEligibility;
-export type ComposeRoute = "static-zero-config" | "dynamic" | "reject";
+export type ComposeRoute = "static-zero-config" | "dynamic" | "broker-installer" | "reject";
 export interface ComposeRouteClassification {
     route: ComposeRoute;
     eligibility: ResourceWorkerEligibility;
@@ -41,6 +41,7 @@ export interface ComposeRouteClassification {
  * placed in the project .env.
  */
 export declare function classifyComposeRoute(contract: AppContract, parsed: ParsedCompose, composeFile?: string): ComposeRouteClassification;
+export declare function brokerInstallerRouteWarning(compose: ComposeDocument, composeFile?: string): ValidationError;
 export declare function collectComposeInterpolations(compose: ComposeDocument): Set<string>;
 export declare function validateComposeSecurity(compose: ComposeDocument, composeFile: string, options: {
     profile: "personal" | "listing";

package/dist/compose/analyze.js

@@ -204,7 +204,25 @@ export function classifyComposeRoute(contract, parsed, composeFile = "compose.ya
     if (eligibility.eligible) {
         return { route: "static-zero-config", eligibility, errors: [] };
     }
-    return { route: "dynamic", eligibility, errors: [] };
+    // Keep the route decision in one place. build-spk must not independently
+    // reinterpret an ineligible Compose as D1: only a route with a resolved
+    // published adminport and at least one declared install parameter has a
+    // package-only materializer. Every other buildable fallback is Broker.
+    if (eligibility.adminport !== undefined && collectInstallParameters(contract).length > 0) {
+        return { route: "dynamic", eligibility, errors: [] };
+    }
+    return { route: "broker-installer", eligibility, errors: [] };
+}
+export function brokerInstallerRouteWarning(compose, composeFile = "compose.yaml") {
+    const path = findDynamicComposePath(compose) ?? "services";
+    return makeError("CURATED_BROKER_ROUTE_FORBIDDEN", composeSpanForPath(compose, composeFile, path), "此 Compose 會落到 Broker installer 路線；rootless Broker 不支援 Container Manager，無法作為 Curated production runtime。", "請改成零設定 resource-worker：使用 ./html bind 與預先 build 的 image；將 ${SYNOPKG_PKGVAR} 等平台 bind 改成 named volume，或改用 D1 dynamic route 的 string/boolean install 參數。", "warning");
+}
+function hasImmutableServiceImages(compose) {
+    const services = compose.services;
+    if (!services || Object.keys(services).length === 0) {
+        return false;
+    }
+    return Object.values(services).every((service) => typeof service.image === "string" && /@sha256:[a-f0-9]{64}$/.test(service.image.trim()));
 }
 function collectRouteRejectErrors(contract, parsed, composeFile) {
     const { compose } = parsed;
@@ -429,10 +447,16 @@ function walkForInterpolation(value, names) {
 export function validateComposeSecurity(compose, composeFile, options) {
     const errors = [];
     const contract = composeContracts.get(compose);
-    const routeErrors = contract
-        ? classifyComposeRoute(contract, parsedComposeForAnalysis(compose), composeFile).errors.filter((error) => !HOST_BIND_ERROR_CODES.has(error.code))
+    const route = contract
+        ? classifyComposeRoute(contract, parsedComposeForAnalysis(compose), composeFile)
+        : undefined;
+    const routeErrors = route
+        ? route.errors.filter((error) => !HOST_BIND_ERROR_CODES.has(error.code))
         : [];
     errors.push(...routeErrors);
+    if (route?.route === "broker-installer" && hasImmutableServiceImages(compose)) {
+        errors.push(brokerInstallerRouteWarning(compose, composeFile));
+    }
     const routeErrorKeys = new Set(routeErrors.map(validationErrorKey));
     if (!compose.services) {
         return errors;

package/dist/deploy/deploy.js

@@ -11,6 +11,7 @@ import { resolveSharedFolderExtraValues, sharedFolderParameterNames } from "./sh
 import { resolveDsmUserExtraValues, dsmUserParameterNames } from "./run-as-values.js";
 import { homesParameterNames, resolveHomesExtraValues } from "./homes-values.js";
 import { resolveInstallParameterExtraValues } from "./param-values.js";
+import { CURATED_BUILD_OFFSET } from "@synopackageland/package-source/index-manifest";
 const CURATED_DEPLOY_REFUSED_MESSAGE = "此 NAS 已持有 Curated App Package Attestation。請改用 --dev，或使用 --replace-curated 明確降級。";
 function brokerCapabilitiesFromContract(project) {
     const contract = loadContract(project.contractPath).contract;
@@ -21,12 +22,43 @@ function brokerCapabilitiesFromContract(project) {
     }
     return capabilities;
 }
+function versionBuildIsCurated(version) {
+    if (!version) {
+        return false;
+    }
+    const match = /-(\d+)$/.exec(version);
+    if (!match) {
+        return false;
+    }
+    const build = Number(match[1]);
+    return Number.isSafeInteger(build) && build >= CURATED_BUILD_OFFSET;
+}
+async function detectCuratedInstall(host, packageId) {
+    let brokerRecord = false;
+    try {
+        brokerRecord = (await host.getAttestationInfo(packageId)).attestationKind === "app-package";
+    }
+    catch {
+        // requestAttestation below remains the authoritative error path when the Broker info probe is unavailable.
+    }
+    return {
+        brokerRecord,
+        installedVersion: await host.getInstalledPackageVersion?.(packageId),
+    };
+}
 export async function deployProject(options) {
     const validation = validateProject(options.project);
     if (!validation.ok) {
         return { ok: false, code: "VALIDATION_FAILED", message: validation.errors.map((e) => e.code).join(", ") };
     }
     const identity = resolveDeployIdentity(options.project, { dev: options.dev });
+    const curatedInstall = identity.developmentInstance
+        ? undefined
+        : await detectCuratedInstall(options.host, identity.packageId);
+    const hasCuratedInstall = curatedInstall?.brokerRecord === true || versionBuildIsCurated(curatedInstall?.installedVersion);
+    if (hasCuratedInstall && !options.replaceCurated) {
+        return { ok: false, code: "CURATED_DEPLOY_REFUSED", message: CURATED_DEPLOY_REFUSED_MESSAGE };
+    }
     const contract = loadContract(options.project.contractPath).contract;
     const paramResolved = resolveInstallParameterExtraValues({
         contract,
@@ -67,6 +99,29 @@ export async function deployProject(options) {
     };
     const contractDigest = digestProjectContract(options.project);
     const bundleDigest = digestProjectBundle(options.project);
+    if (hasCuratedInstall && options.replaceCurated) {
+        const installed = await options.host.isPackageInstalled(identity.packageId);
+        if (installed) {
+            console.warn("警告：--replace-curated 會移除 Curated 安裝，但會保留 App Data。");
+            if (!options.host.uninstallPackage) {
+                return {
+                    ok: false,
+                    code: "CATALOG_INSTALL_FAILED",
+                    message: "此 NAS Host 不支援保留 App Data 的 Curated replacement uninstall。",
+                };
+            }
+            try {
+                await options.host.uninstallPackage(identity.packageId);
+            }
+            catch (error) {
+                return {
+                    ok: false,
+                    code: "CATALOG_INSTALL_FAILED",
+                    message: error instanceof Error ? error.message : String(error),
+                };
+            }
+        }
+    }
     try {
         await options.host.requestAttestation({
             packageIdentity: identity.packageId,
@@ -95,10 +150,12 @@ export async function deployProject(options) {
     }
     catch (error) {
         const code = error.code;
-        if (code === "DEPLOY_PERSONAL_BUILD_EXHAUSTED" || code === "PERSONAL_BUILD_EXHAUSTED") {
+        if (code === "DEPLOY_PERSONAL_BUILD_EXHAUSTED" ||
+            code === "PERSONAL_BUILD_EXHAUSTED" ||
+            code === "DEPLOY_VERSION_NOT_ASCENDING") {
             return {
                 ok: false,
-                code: "DEPLOY_PERSONAL_BUILD_EXHAUSTED",
+                code: code === "DEPLOY_VERSION_NOT_ASCENDING" ? code : "DEPLOY_PERSONAL_BUILD_EXHAUSTED",
                 message: error instanceof Error ? error.message : String(error),
             };
         }

package/dist/deploy/spk-version.d.ts

@@ -4,6 +4,14 @@ export declare class DeployPersonalBuildExhaustedError extends Error {
     readonly code = "DEPLOY_PERSONAL_BUILD_EXHAUSTED";
     constructor();
 }
-export declare function bumpBuildNumber(version: string): string;
+export declare class DeployVersionNotAscendingError extends Error {
+    readonly code = "DEPLOY_VERSION_NOT_ASCENDING";
+    constructor(contractVersion: string, proposedVersion: string, existingVersion: string);
+}
+export interface DeployVersionCandidates {
+    installed?: string;
+    feed?: string;
+}
+export declare function resolvePersonalDeploySpkVersion(contractVersion: string, candidates?: DeployVersionCandidates): string;
 export declare function resolveDeploySpkVersion(project: ProjectRoot, host: NasHost, packageId: string): Promise<string>;
 export declare function publishDeploySpk(spkPath: string): Promise<string>;

package/dist/deploy/spk-version.js

@@ -1,6 +1,5 @@
 import { loadContract } from "../contract/load.js";
 import { comparePackageVersions, CURATED_BUILD_OFFSET, PERSONAL_BUILD_MAX, } from "@synopackageland/package-source/index-manifest";
-import { PersonalBuildExhaustedError, resolveNextSpkVersion, } from "@synopackageland/package-source/next-version";
 import { fetchPackageSourceManifest, fetchPackageSourceManifestFromR2, resolvePublishTarget, } from "@synopackageland/package-source/publish-spk";
 import { publishBuiltSpk } from "./catalog-publish.js";
 import { isDevelopmentPackageIdentity } from "./identity-shared.js";
@@ -12,32 +11,61 @@ export class DeployPersonalBuildExhaustedError extends Error {
         this.name = "DeployPersonalBuildExhaustedError";
     }
 }
-function defaultSpkVersion(contractVersion) {
-    const match = /-(\d+)$/.exec(contractVersion);
-    if (!match) {
-        return `${contractVersion}-0001`;
-    }
-    const build = Number(match[1]);
-    if (!Number.isSafeInteger(build) || build >= CURATED_BUILD_OFFSET) {
-        throw new DeployPersonalBuildExhaustedError();
+export class DeployVersionNotAscendingError extends Error {
+    code = "DEPLOY_VERSION_NOT_ASCENDING";
+    constructor(contractVersion, proposedVersion, existingVersion) {
+        super(`Contract version ${contractVersion} would produce ${proposedVersion}, which is not higher than installed package version ${existingVersion}.`);
+        this.name = "DeployVersionNotAscendingError";
     }
-    return contractVersion;
 }
-export function bumpBuildNumber(version) {
+function baseVersion(version) {
     const match = /^(.+)-(\d+)$/.exec(version);
+    return match ? match[1] : version;
+}
+function buildNumber(version) {
+    const match = /^.+-(\d+)$/.exec(version);
     if (!match) {
-        return `${version}-0002`;
+        return undefined;
     }
-    const current = Number(match[2]);
-    if (!Number.isSafeInteger(current) || current >= CURATED_BUILD_OFFSET) {
-        throw new DeployPersonalBuildExhaustedError();
+    const build = Number(match[1]);
+    return Number.isSafeInteger(build) ? build : undefined;
+}
+function personalBuildNumber(version) {
+    const build = buildNumber(version);
+    return build !== undefined && build >= 1 && build <= PERSONAL_BUILD_MAX ? build : undefined;
+}
+export function resolvePersonalDeploySpkVersion(contractVersion, candidates = {}) {
+    const base = baseVersion(contractVersion);
+    const existingVersions = [candidates.installed, candidates.feed].filter((version) => typeof version === "string" && version.length > 0);
+    const latestExisting = existingVersions.sort(comparePackageVersions).at(-1);
+    let proposedVersion;
+    if (!latestExisting || baseVersion(latestExisting) !== base) {
+        proposedVersion = `${base}-0001`;
     }
-    const nextBuild = current + 1;
-    if (nextBuild > PERSONAL_BUILD_MAX) {
-        throw new DeployPersonalBuildExhaustedError();
+    else {
+        const latestBuild = buildNumber(latestExisting);
+        if (latestBuild === undefined || latestBuild >= CURATED_BUILD_OFFSET) {
+            throw new DeployPersonalBuildExhaustedError();
+        }
+        const nextBuild = latestBuild + 1;
+        if (nextBuild > PERSONAL_BUILD_MAX) {
+            throw new DeployPersonalBuildExhaustedError();
+        }
+        proposedVersion = `${base}-${String(nextBuild).padStart(4, "0")}`;
+    }
+    if (candidates.installed &&
+        comparePackageVersions(proposedVersion, candidates.installed) <= 0) {
+        throw new DeployVersionNotAscendingError(contractVersion, proposedVersion, candidates.installed);
     }
-    const next = String(nextBuild).padStart(4, "0");
-    return `${match[1]}-${next}`;
+    return proposedVersion;
+}
+function latestPersonalFeedVersion(packageId, manifest) {
+    return (manifest?.packages ?? [])
+        .filter((entry) => entry.package === packageId)
+        .map((entry) => entry.version)
+        .filter((version) => personalBuildNumber(version) !== undefined)
+        .sort(comparePackageVersions)
+        .at(-1);
 }
 async function resolvePackageSourceManifest(origin) {
     try {
@@ -56,12 +84,11 @@ async function resolvePackageSourceManifest(origin) {
 }
 async function resolveOfflineDeploySpkVersion(project, host, packageId) {
     const contract = loadContract(project.contractPath).contract;
-    const base = defaultSpkVersion(String(contract.version ?? "1.0.0"));
-    if (!(await host.isPackageInstalled(packageId))) {
-        return base;
-    }
-    const installed = await host.getInstalledPackageVersion?.(packageId);
-    return installed ? bumpBuildNumber(installed) : base;
+    const contractVersion = String(contract.version ?? "1.0.0");
+    const installed = (await host.isPackageInstalled(packageId))
+        ? await host.getInstalledPackageVersion?.(packageId)
+        : undefined;
+    return resolvePersonalDeploySpkVersion(contractVersion, { installed });
 }
 export async function resolveDeploySpkVersion(project, host, packageId) {
     try {
@@ -72,19 +99,13 @@ export async function resolveDeploySpkVersion(project, host, packageId) {
         const target = resolvePublishTarget();
         const manifest = (await fetchPackageSourceManifestFromR2(target)) ??
             (await resolvePackageSourceManifest(target.origin));
-        let version = resolveNextSpkVersion(String(contract.version ?? "1.0.0"), packageId, manifest);
+        const contractVersion = String(contract.version ?? "1.0.0");
         const installed = await host.getInstalledPackageVersion?.(packageId);
-        if (installed) {
-            const installedNext = bumpBuildNumber(installed);
-            if (comparePackageVersions(installedNext, version) > 0) {
-                version = installedNext;
-            }
-        }
-        return version;
+        const feed = latestPersonalFeedVersion(packageId, manifest);
+        return resolvePersonalDeploySpkVersion(contractVersion, { installed, feed });
     }
     catch (error) {
-        if (error instanceof PersonalBuildExhaustedError ||
-            error.code === "PERSONAL_BUILD_EXHAUSTED") {
+        if (error.code === "PERSONAL_BUILD_EXHAUSTED") {
             throw new DeployPersonalBuildExhaustedError();
         }
         throw error;

package/dist/error-registry.js

@@ -454,6 +454,11 @@ export const ERROR_REGISTRY = {
         description: "Personal App 的 Package Build 已用盡 0001–9999 命名範圍。",
         suggestion: "請改用新的 App Version，或先清理並確認不會與 Curated 版本命名空間混用。",
     },
+    DEPLOY_VERSION_NOT_ASCENDING: {
+        code: "DEPLOY_VERSION_NOT_ASCENDING",
+        description: "部署產生的 Package Version 不高於既有版本。",
+        suggestion: "請提高 synology-app.yaml 的 version，或確認目標 NAS 與 Package Source 上的既有版本。",
+    },
     SHARE_VALUE_REQUIRED: {
         code: "SHARE_VALUE_REQUIRED",
         description: "部署時缺少合約中宣告的 shared_folder 實際路徑映射。",
@@ -755,6 +760,11 @@ export const ERROR_REGISTRY = {
         description: "compose.yaml 缺少 services 區塊或服務為空。",
         suggestion: "請在 compose.yaml 至少定義一個容器服務。",
     },
+    CURATED_BROKER_ROUTE_FORBIDDEN: {
+        code: "CURATED_BROKER_ROUTE_FORBIDDEN",
+        description: "此 Compose 會落到 Broker installer 路線；rootless Broker 不支援 Container Manager，Curated listing 拒絕。",
+        suggestion: "請改成零設定 resource-worker：使用 ./html bind 與預先 build 的 image；將 ${SYNOPKG_PKGVAR} 等平台 bind 改成 named volume，或改用 D1 dynamic route 的 string/boolean install 參數。",
+    },
     CURATED_BUNDLE_FILE_MISSING: {
         code: "CURATED_BUNDLE_FILE_MISSING",
         description: "打包 Curated Release 時缺少必要的 Bundle 檔案。",

package/dist/host/catalog-install.d.ts

@@ -48,6 +48,14 @@ export declare function waitForInstalledVersion(readState: () => InstalledPackag
     deadlineMs?: number;
     pollMs?: number;
 }): Promise<void>;
+export interface UninstallPackageOptions {
+    dsmOrigin: string;
+    cookieHeader: string;
+    packageId: string;
+    deadlineMs?: number;
+    pollMs?: number;
+}
+export declare function uninstallPackageFromDsm(options: UninstallPackageOptions): Promise<void>;
 export declare function catalogInstallationRequests(entry: Pick<CatalogPackageEntry, "package" | "version" | "size" | "beta" | "link" | "md5" | "qinst" | "deppkgs" | "breakpkgs" | "replacepkgs">, installed: boolean, sid: string, volumePath?: string): {
     check: Record<string, string>;
     install: Record<string, string>;

package/dist/host/catalog-install.js

@@ -224,6 +224,66 @@ export async function waitForInstalledVersion(readState, options) {
         ? `Timed out waiting for ${options.packageId} to reach version ${options.expectedVersion}`
         : `Timed out waiting for ${options.packageId} to install from catalog`);
 }
+function packageStatusIsStopped(state) {
+    const status = state?.status?.trim().toLowerCase();
+    return state?.installed === true && (status === "stop" || status === "stopped" || status === "manually-stopped");
+}
+async function waitForPackageStopped(readState, options) {
+    const deadline = Date.now() + (options.deadlineMs ?? 5 * 60 * 1000);
+    const pollMs = options.pollMs ?? 1000;
+    while (Date.now() < deadline) {
+        const state = await readState();
+        if (packageStatusIsStopped(state)) {
+            return;
+        }
+        await new Promise((resolve) => setTimeout(resolve, pollMs));
+    }
+    throw new Error(`Timed out waiting for ${options.packageId} to stop before uninstall`);
+}
+async function waitForPackageUninstalled(readState, options) {
+    const deadline = Date.now() + (options.deadlineMs ?? 5 * 60 * 1000);
+    const pollMs = options.pollMs ?? 1000;
+    while (Date.now() < deadline) {
+        const state = await readState();
+        if (state?.installed === false) {
+            return;
+        }
+        await new Promise((resolve) => setTimeout(resolve, pollMs));
+    }
+    throw new Error(`Timed out waiting for ${options.packageId} to be uninstalled`);
+}
+function uninstallFailure(packageId, error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    const failure = new Error(`Failed to uninstall ${packageId}: ${detail}`);
+    failure.code = "CATALOG_INSTALL_FAILED";
+    return failure;
+}
+export async function uninstallPackageFromDsm(options) {
+    try {
+        const sid = extractSid(options.cookieHeader);
+        const readState = () => fetchInstalledPackageState(options.dsmOrigin, options.cookieHeader, options.packageId);
+        await dsmWebApi(options.dsmOrigin, options.cookieHeader, {
+            api: "SYNO.Core.Package.Control",
+            version: "1",
+            method: "stop",
+            id: jsonApiParam(options.packageId),
+            _sid: sid,
+        });
+        await waitForPackageStopped(readState, options);
+        await dsmWebApi(options.dsmOrigin, options.cookieHeader, {
+            api: "SYNO.Core.Package.Uninstallation",
+            version: "1",
+            method: "uninstall",
+            id: jsonApiParam(options.packageId),
+            extra_values: jsonApiParam("{}"),
+            _sid: sid,
+        });
+        await waitForPackageUninstalled(readState, options);
+    }
+    catch (error) {
+        throw uninstallFailure(options.packageId, error);
+    }
+}
 export function catalogInstallationRequests(entry, installed, sid, volumePath) {
     const install = {
         api: "SYNO.Core.Package.Installation",

package/dist/host/dsm-client.js

@@ -6,7 +6,7 @@ import { IDENTITY_CGI_PATH } from "./broker-paths.js";
 import { packageSourceOrigin } from "../deploy/catalog-publish.js";
 import { lookupSharePathWithSynoagentcli } from "./share-lookup.js";
 import { dsmFetch } from "./dsm-http.js";
-import { installPackageFromCatalog, installPackageFromLocalSpk, fetchInstalledPackageState, packageStateFromRecord, } from "./catalog-install.js";
+import { installPackageFromCatalog, installPackageFromLocalSpk, uninstallPackageFromDsm, fetchInstalledPackageState, packageStateFromRecord, } from "./catalog-install.js";
 import { resolveHostCredentials } from "./credentials.js";
 export function createNasHost(options = {}) {
     const credentials = options.credentials ?? resolveHostCredentials(options.host);
@@ -200,6 +200,19 @@ function createDsmNasHost(credentials, profileName) {
                 projectEnvCache.delete(input.packageId);
             }
         },
+        async uninstallPackage(packageIdentity) {
+            try {
+                await ensureLogin();
+                await uninstallPackageFromDsm({
+                    dsmOrigin,
+                    cookieHeader: cookieHeader ?? "",
+                    packageId: packageIdentity,
+                });
+            }
+            finally {
+                projectEnvCache.delete(packageIdentity);
+            }
+        },
         async getArchFamily() {
             await ensureLogin();
             const response = await dsmFetch(`${dsmOrigin}/webapi/entry.cgi?api=SYNO.Core.System&version=1&method=info`, { headers: { cookie: cookieHeader ?? "" } });

package/dist/host/types.d.ts

@@ -44,6 +44,8 @@ export interface NasHost {
         spkPath: string;
         extraValues?: Record<string, string>;
     }): Promise<void>;
+    /** Stop and normally uninstall a formal package while preserving App Data. */
+    uninstallPackage?(packageIdentity: string): Promise<void>;
     /**
      * CPU family of this NAS, for picking a native App's target. Returns
      * undefined when the DSM answer does not map to a family we ship, so the

package/dist/publish/curated-release.js

@@ -9,7 +9,7 @@ import { createR2CuratedReleasePublisher, publishCuratedRelease, } from "@synopa
 import { digestAppPackageClaims, digestCuratedReleaseClaims, normalizeCapabilities, signCuratedAppPackageAttestationToken, signCuratedReleaseAttestationToken, } from "../attestation/app-package.js";
 import { CuratedTrustRootError, loadCuratedTrustRoot, resolveCuratedSigningTrust, } from "../attestation/keyring.js";
 import { loadContract } from "../contract/load.js";
-import { loadCompose } from "../compose/analyze.js";
+import { classifyComposeRoute, loadCompose } from "../compose/analyze.js";
 import { loadNative } from "../native/load.js";
 import { infoArchValue, isNativeArchFamily } from "../build-spk/dsm-arch.js";
 import { EMBEDDED_ATTESTATION_RELATIVE_PATH, buildSpk, extractSpk, } from "../build-spk/generator.js";
@@ -524,6 +524,10 @@ function prepareRelease(project, build) {
     if (!parsedCompose) {
         throw new CuratedReleaseError("CURATED_COMPOSE_MISSING");
     }
+    const route = classifyComposeRoute(contract, parsedCompose);
+    if (route.route === "broker-installer" && contract.adminport !== undefined) {
+        throw new CuratedReleaseError("CURATED_BROKER_ROUTE_FORBIDDEN");
+    }
     const composeGate = validateCuratedCompose(parsedCompose.compose);
     if (!composeGate.ok) {
         throw new CuratedReleaseError("CURATED_COMPOSE_GATE_FAILED", composeGate.errors.join(","));

package/dist/publish/preflight.js

@@ -3,7 +3,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { CURATED_BUILD_OFFSET, isDevelopmentPackageIdentity, } from "@synopackageland/package-source/index-manifest";
 import { buildSpk } from "../build-spk/generator.js";
-import { loadCompose } from "../compose/analyze.js";
+import { classifyComposeRoute, loadCompose } from "../compose/analyze.js";
 import { loadContract } from "../contract/load.js";
 import { isNativeArchFamily } from "../build-spk/dsm-arch.js";
 import { loadNative } from "../native/load.js";
@@ -89,6 +89,15 @@ export async function runPublicReleasePreflight(project) {
             ok: gate.ok,
             detail: gate.ok ? undefined : gate.errors.join(", "),
         });
+        const route = parsedCompose
+            ? classifyComposeRoute(contract, parsedCompose)
+            : undefined;
+        add({
+            id: "curated-route",
+            title: "Compose 不使用 Broker installer 路線",
+            ok: route?.route !== "broker-installer",
+            detail: route?.route === "broker-installer" ? "CURATED_BROKER_ROUTE_FORBIDDEN" : undefined,
+        });
     }
     // The strongest local gate: actually produce the artifact. For native this
     // fetches each pinned asset and refuses it unless the bytes hash to the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {