@synopackageland/cli 0.4.1 → 0.5.3

package/dist/standalone/root-window.d.ts

@@ -5,6 +5,8 @@ export interface RootTask {
     name: string;
     header: string;
     script: string;
+    /** Whether the package backend serves `root.output` for this op; helper ops report through the helper instead. */
+    output: boolean;
 }
 export declare function rootTasks(manifest: {
     package: string;
@@ -26,7 +28,7 @@ export declare function rootTasks(manifest: {
  *   again replaces it. A same-named task that is not ours is a "conflict" and
  *   is never run, replaced or deleted.
  */
-export declare const ROOT_RUNTIME = "function createRootAccess(options) {\n  var API = \"SYNO.Core.TaskScheduler\";\n  var POLL_MS = 500, POLLS = 60;\n  var byOp = {};\n  options.tasks.forEach(function (task) { byOp[task.op] = task; });\n\n  function fail(code) {\n    var error = new Error(code);\n    error.code = code;\n    return error;\n  }\n  function begin(op) {\n    if (!Object.prototype.hasOwnProperty.call(byOp, op)) return Promise.reject(fail(\"root_unknown_op\"));\n    if (options.user().admin !== true) return Promise.reject(fail(\"admin_required\"));\n    return Promise.resolve(byOp[op]);\n  }\n  function isRootTask(summary) {\n    return summary.owner === \"root\" && summary.real_owner === \"root\" && summary.enable === false && summary.type === \"script\";\n  }\n  function find(task) {\n    return options.send(API, \"list\", 3, { start: 0, limit: 500 }).then(function (data) {\n      if (!data || !Array.isArray(data.tasks)) throw fail(\"root_bad_response\");\n      var named = data.tasks.filter(function (summary) { return summary && summary.name === task.name; });\n      if (named.length === 0) return { state: \"missing\" };\n      if (named.length > 1 || !isRootTask(named[0])) return { state: \"conflict\" };\n      var ref = { id: named[0].id, real_owner: named[0].real_owner };\n      return options.send(API, \"get\", 4, ref).then(function (detail) {\n        var script = detail && detail.extra && detail.extra.script;\n        if (!detail || String(detail.id) !== String(ref.id) || detail.name !== task.name\n            || detail.owner !== \"root\" || detail.enable !== false || detail.type !== \"script\" || typeof script !== \"string\") {\n          return { state: \"conflict\" };\n        }\n        if (script === task.script) return { state: \"ready\", ref: ref };\n        if (script.indexOf(task.header) === 0) return { state: \"outdated\", ref: ref };\n        return { state: \"conflict\" };\n      });\n    });\n  }\n  function definition(task, user) {\n    var hours = [];\n    for (var h = 1; h <= 23; h++) hours.push(h);\n    return {\n      name: task.name,\n      real_owner: user,\n      owner: \"root\",\n      enable: false,\n      type: \"script\",\n      schedule: {\n        date_type: 0, week_day: \"0,1,2,3,4,5,6\", repeat_date: 1001, monthly_week: [], hour: 0, minute: 0,\n        repeat_hour: 0, repeat_min: 0, last_work_hour: 0,\n        repeat_min_store_config: [1, 5, 10, 15, 20, 30], repeat_hour_store_config: hours\n      },\n      extra: { notify_enable: false, script: task.script, notify_mail: \"\", notify_if_error: false }\n    };\n  }\n  function newest(history) {\n    if (!Array.isArray(history)) throw fail(\"root_bad_response\");\n    return history.reduce(function (latest, entry) {\n      return entry && (!latest || Number(entry.timestamp) > Number(latest.timestamp)) ? entry : latest;\n    }, null);\n  }\n  function history(ref) {\n    return options.send(API, \"get_history_status_list\", 1, { id: ref.id }).then(newest);\n  }\n  function waitForRun(ref, before, polls) {\n    return history(ref).then(function (latest) {\n      var finished = latest && (!before || latest.timestamp !== before.timestamp)\n        && latest.exit_type !== \"running\" && latest.stop_time;\n      if (finished) {\n        if (latest.exit_code !== 0) throw fail(\"root_task_failed\");\n        return;\n      }\n      if (polls <= 1) throw fail(\"root_timeout\");\n      return options.wait(POLL_MS).then(function () { return waitForRun(ref, before, polls - 1); });\n    });\n  }\n\n  return {\n    state: function (op) {\n      return begin(op).then(find).then(function (found) { return found.state; });\n    },\n    authorize: function (op) {\n      return begin(op).then(function (task) {\n        return find(task).then(function (found) {\n          if (found.state === \"ready\") return \"ready\";\n          if (found.state === \"conflict\") throw fail(\"root_conflict\");\n          return options.confirmPassword().then(function (token) {\n            if (!token) return \"cancelled\";\n            var params = definition(task, options.user().name);\n            params.SynoConfirmPWToken = token;\n            var replaced = found.state === \"outdated\"\n              ? options.send(API, \"delete\", 2, { tasks: [found.ref] })\n              : Promise.resolve();\n            return replaced.then(function () {\n              return options.send(API + \".Root\", \"create\", 4, params);\n            }).then(function () {\n              return find(task);\n            }).then(function (after) {\n              if (after.state !== \"ready\") throw fail(\"root_verify_failed\");\n              return \"ready\";\n            });\n          });\n        });\n      });\n    },\n    run: function (op) {\n      return begin(op).then(function (task) {\n        return find(task).then(function (found) {\n          if (found.state !== \"ready\") throw fail(\"root_not_ready\");\n          // Repair requires fresh interactive consent even for a retained task.\n          // Confirmation tokens are never cached or reused as scheduler tokens.\n          var consent = op === \"helper_repair\" ? options.confirmPassword() : Promise.resolve(true);\n          return consent.then(function (token) {\n            if (!token) throw fail(\"root_cancelled\");\n            // The user may leave the dialog open while the scheduler changes.\n            return op === \"helper_repair\" ? begin(op).then(find) : found;\n          }).then(function (verified) {\n            if (verified.state !== \"ready\") throw fail(\"root_not_ready\");\n            return history(verified.ref).then(function (before) {\n              return options.send(API, \"run\", 2, { tasks: [verified.ref] }).then(function () {\n                return waitForRun(verified.ref, before, POLLS);\n              });\n            });\n          });\n        }).then(function () {\n          return options.call(\"root.output\", { op: op });\n        });\n      });\n    },\n    remove: function (op) {\n      return begin(op).then(function (task) {\n        return find(task).then(function (found) {\n          if (found.state === \"missing\") return \"missing\";\n          if (found.state === \"conflict\") throw fail(\"root_conflict\");\n          return options.send(API, \"delete\", 2, { tasks: [found.ref] }).then(function () {\n            return find(task);\n          }).then(function (after) {\n            if (after.state !== \"missing\") throw fail(\"root_verify_failed\");\n            return \"missing\";\n          });\n        });\n      });\n    },\n    output: function (op) {\n      return begin(op).then(function () {\n        return options.call(\"root.output\", { op: op });\n      });\n    }\n  };\n}";
+export declare const ROOT_RUNTIME = "function createRootAccess(options) {\n  var API = \"SYNO.Core.TaskScheduler\";\n  var POLL_MS = 500, POLLS = 60;\n  var byOp = {}, running = {};\n  var legacy = null, probe = null;\n  options.tasks.forEach(function (task) { byOp[task.op] = task; });\n\n  function fail(code) {\n    var error = new Error(code);\n    error.code = code;\n    return error;\n  }\n  function begin(op) {\n    if (!Object.prototype.hasOwnProperty.call(byOp, op)) return Promise.reject(fail(\"root_unknown_op\"));\n    if (options.user().admin !== true) return Promise.reject(fail(\"admin_required\"));\n    return Promise.resolve(byOp[op]);\n  }\n  function readOutput(task) {\n    return task.output ? options.call(\"root.output\", { op: task.op }) : Promise.resolve(null);\n  }\n  function isRootTask(summary) {\n    return summary.owner === \"root\" && summary.real_owner === \"root\" && summary.enable === false && summary.type === \"script\";\n  }\n  function listTasks() {\n    if (legacy === false) return options.send(API, \"list\", 3, { start: 0, limit: 500 });\n    if (legacy === true) return legacyList();\n    if (!probe) {\n      probe = options.send(API, \"list\", 3, { start: 0, limit: 500 }).then(function (data) {\n        legacy = false;\n        return data;\n      }, function (error) {\n        if (!error || (error.code !== \"dsm_103\" && error.code !== 103)) {\n          probe = null;\n          throw error;\n        }\n        legacy = true;\n        return legacyList();\n      });\n    }\n    return probe;\n  }\n  function legacyList() {\n    return options.send(API, \"list\", 2, { offset: 0, limit: 500 }).then(function (data) {\n      // Refuse a truncated snapshot: a same-named task could lie outside it.\n      if (!data || !Array.isArray(data.tasks) || data.tasks.length > 500\n          || !(typeof data.total === \"number\" && isFinite(data.total) && Math.floor(data.total) === data.total) || data.total !== data.tasks.length) throw fail(\"root_bad_response\");\n      return data;\n    });\n  }\n  function readTask(ref) {\n    return options.send(API, \"get\", legacy ? 3 : 4, ref);\n  }\n  function createTask(params) {\n    return options.send(legacy ? API : API + \".Root\", \"create\", legacy ? 3 : 4, params);\n  }\n  function deleteTask(ref) {\n    return options.send(API, \"delete\", 2, { tasks: [ref] });\n  }\n  function runTask(ref) {\n    return options.send(API, \"run\", 2, { tasks: [ref] });\n  }\n  function find(task) {\n    return listTasks().then(function (data) {\n      if (!data || !Array.isArray(data.tasks)) throw fail(\"root_bad_response\");\n      var named = data.tasks.filter(function (summary) { return summary && summary.name === task.name; });\n      if (named.length === 0) return { state: \"missing\" };\n      if (named.length > 1 || !isRootTask(named[0])) return { state: \"conflict\" };\n      var ref = { id: named[0].id, real_owner: named[0].real_owner };\n      return readTask(ref).then(function (detail) {\n        var script = detail && detail.extra && detail.extra.script;\n        if (!detail || String(detail.id) !== String(ref.id) || detail.name !== task.name\n            || detail.owner !== \"root\" || detail.real_owner !== ref.real_owner || detail.enable !== false || detail.type !== \"script\" || typeof script !== \"string\") {\n          return { state: \"conflict\" };\n        }\n        if (script === task.script) return { state: \"ready\", ref: ref };\n        if (script.indexOf(task.header) === 0) return { state: \"outdated\", ref: ref };\n        return { state: \"conflict\" };\n      });\n    });\n  }\n  function definition(task, user) {\n    var hours = [];\n    for (var h = 1; h <= 23; h++) hours.push(h);\n    return {\n      name: task.name,\n      real_owner: user,\n      owner: \"root\",\n      enable: false,\n      type: \"script\",\n      schedule: {\n        date_type: 0, week_day: \"0,1,2,3,4,5,6\", repeat_date: 1001, monthly_week: [], hour: 0, minute: 0,\n        repeat_hour: 0, repeat_min: 0, last_work_hour: 0,\n        repeat_min_store_config: [1, 5, 10, 15, 20, 30], repeat_hour_store_config: hours\n      },\n      extra: { notify_enable: false, script: task.script, notify_mail: \"\", notify_if_error: false }\n    };\n  }\n  function newest(history) {\n    if (!Array.isArray(history)) throw fail(\"root_bad_response\");\n    return history.reduce(function (latest, entry) {\n      return entry && (!latest || Number(entry.timestamp) > Number(latest.timestamp)) ? entry : latest;\n    }, null);\n  }\n  function history(ref) {\n    return options.send(API, \"get_history_status_list\", 1, { id: ref.id }).then(newest);\n  }\n  function waitForRun(ref, before, polls) {\n    return history(ref).then(function (latest) {\n      var finished = latest && (!before || latest.timestamp !== before.timestamp)\n        && latest.exit_type !== \"running\" && latest.stop_time;\n      if (finished) {\n        if (latest.exit_code !== 0) throw fail(\"root_task_failed\");\n        return;\n      }\n      if (polls <= 1) throw fail(\"root_timeout\");\n      return options.wait(POLL_MS).then(function () { return waitForRun(ref, before, polls - 1); });\n    });\n  }\n\n  function validTime(value) {\n    if (typeof value !== \"string\" || !/^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}$/.test(value)) return false;\n    var normalized = value.replace(\" \", \"T\") + \"Z\";\n    var date = new Date(normalized);\n    return !isNaN(date.getTime()) && date.toISOString().slice(0, 19) === normalized.slice(0, 19);\n  }\n  function bounded(call, deadline) {\n    // A poll count alone cannot bound a stalled DSM callback. Discard late replies.\n    return new Promise(function (resolve, reject) {\n      var remaining = deadline - Date.now();\n      if (remaining <= 0) { reject(fail(\"root_timeout\")); return; }\n      var timer = setTimeout(function () { reject(fail(\"root_timeout\")); }, remaining);\n      Promise.resolve().then(call).then(function (value) {\n        clearTimeout(timer);\n        if (Date.now() >= deadline) reject(fail(\"root_timeout\"));\n        else resolve(value);\n      }, function (error) { clearTimeout(timer); reject(error); });\n    });\n  }\n  function legacyHistory(ref, deadline) {\n    return bounded(function () { return options.send(API, \"view\", 1, { id: ref.id }); }, deadline).then(function (records) {\n      // DSM 7.1 omits data entirely when a task has never run.\n      if (records === undefined) records = [];\n      if (!Array.isArray(records) || records.length > 500) throw fail(\"root_bad_response\");\n      var seen = {};\n      records.forEach(function (record) {\n        if (!record || !validTime(record.start_time) || typeof record.stop_time !== \"string\"\n            || (record.stop_time && (!validTime(record.stop_time) || record.stop_time < record.start_time))\n            || typeof record.exit_type !== \"string\" || !(typeof record.exit_code === \"number\" && isFinite(record.exit_code) && Math.floor(record.exit_code) === record.exit_code)\n            || seen[record.start_time]) throw fail(\"root_bad_response\");\n        seen[record.start_time] = true;\n      });\n      return records;\n    });\n  }\n  function waitForLegacyRun(ref, before, deadline, polls) {\n    return legacyHistory(ref, deadline).then(function (records) {\n      var previous = before.map(function (record) { return record.start_time; });\n      var newestBefore = previous.slice().sort().pop();\n      var fresh = records.filter(function (record) { return previous.indexOf(record.start_time) === -1; });\n      if (fresh.length > 1) throw fail(\"root_bad_response\");\n      var latest = fresh[0];\n      if (latest && (!newestBefore || latest.start_time > newestBefore) && latest.stop_time) {\n        if (latest.exit_code !== 0 || latest.exit_type !== \"normal\") throw fail(\"root_task_failed\");\n        return;\n      }\n      if (polls <= 1 || Date.now() >= deadline) throw fail(\"root_timeout\");\n      return options.wait(Math.min(POLL_MS, deadline - Date.now())).then(function () {\n        return waitForLegacyRun(ref, before, deadline, polls - 1);\n      });\n    });\n  }\n  function execute(task, verified) {\n    if (!legacy) {\n      return history(verified.ref).then(function (before) {\n        return runTask(verified.ref).then(function () { return waitForRun(verified.ref, before, POLLS); });\n      });\n    }\n    var deadline = Date.now() + POLL_MS * POLLS;\n    return legacyHistory(verified.ref, deadline).then(function (before) {\n      if (before.some(function (record) { return !record.stop_time || record.exit_type === \"running\"; })) throw fail(\"root_not_ready\");\n      // Mutating calls are sent exactly once, never retried with another profile.\n      return bounded(function () { return runTask(verified.ref); }, deadline).then(function () {\n        return waitForLegacyRun(verified.ref, before, deadline, POLLS);\n      });\n    }).then(function () {\n      return bounded(function () { return find(task); }, deadline).then(function (after) {\n        if (after.state !== \"ready\" || String(after.ref.id) !== String(verified.ref.id)) throw fail(\"root_verify_failed\");\n      });\n    });\n  }\n  function performRun(op) {\n    return begin(op).then(function (task) {\n      return find(task).then(function (found) {\n        if (found.state !== \"ready\") throw fail(\"root_not_ready\");\n        var consent = op === \"helper_repair\" ? options.confirmPassword() : Promise.resolve({ confirmed: true });\n        return consent.then(function (confirmation) {\n          if (!confirmation || confirmation.confirmed !== true) throw fail(\"root_cancelled\");\n          return op === \"helper_repair\" ? begin(op).then(find) : found;\n        }).then(function (verified) {\n          if (verified.state !== \"ready\") throw fail(\"root_not_ready\");\n          return execute(task, verified);\n        });\n      }).then(function () { return readOutput(task); });\n    });\n  }\n\n  return {\n    state: function (op) {\n      return begin(op).then(find).then(function (found) { return found.state; });\n    },\n    authorize: function (op) {\n      return begin(op).then(function (task) {\n        return find(task).then(function (found) {\n          if (found.state === \"ready\") return \"ready\";\n          if (found.state === \"conflict\") throw fail(\"root_conflict\");\n          return options.confirmPassword().then(function (confirmation) {\n            if (!confirmation || confirmation.confirmed !== true) return \"cancelled\";\n            if (!legacy && (typeof confirmation.token !== \"string\" || !confirmation.token)) throw fail(\"root_verify_failed\");\n            var params = definition(task, options.user().name);\n            if (!legacy) params.SynoConfirmPWToken = confirmation.token;\n            // Re-read after the legacy client-side dialog before replacing a task.\n            var checked = legacy ? begin(op).then(find) : Promise.resolve(found);\n            return checked.then(function (current) {\n              if (current.state === \"conflict\") throw fail(\"root_conflict\");\n              if (current.state === \"ready\") return;\n              var replaced = current.state === \"outdated\" ? deleteTask(current.ref) : Promise.resolve();\n              return replaced.then(function () { return createTask(params); });\n            }).then(function () {\n              return find(task);\n            }).then(function (after) {\n              if (after.state !== \"ready\") throw fail(\"root_verify_failed\");\n              return \"ready\";\n            });\n          });\n        });\n      });\n    },\n    run: function (op) {\n      if (!Object.prototype.hasOwnProperty.call(byOp, op)) return Promise.reject(fail(\"root_unknown_op\"));\n      if (options.user().admin !== true) return Promise.reject(fail(\"admin_required\"));\n      if (running[op]) return running[op];\n      var pending = performRun(op).then(function (value) {\n        delete running[op];\n        return value;\n      }, function (error) { delete running[op]; throw error; });\n      running[op] = pending;\n      return pending;\n    },\n    remove: function (op) {\n      return begin(op).then(function (task) {\n        return find(task).then(function (found) {\n          if (found.state === \"missing\") return \"missing\";\n          if (found.state === \"conflict\") throw fail(\"root_conflict\");\n          return deleteTask(found.ref).then(function () {\n            return find(task);\n          }).then(function (after) {\n            if (after.state !== \"missing\") throw fail(\"root_verify_failed\");\n            return \"missing\";\n          });\n        });\n      });\n    },\n    output: function (op) {\n      return begin(op).then(readOutput);\n    }\n  };\n}";
 /**
  * The authorization panel the window shows above the app for each root
  * operation, identical in every package. `rootPanelView(model)` decides what

package/dist/standalone/root-window.js

@@ -5,6 +5,7 @@ export function rootTasks(manifest) {
         name: rootTaskName(manifest.package, op.name),
         header: rootTaskHeader(manifest.package, op.name),
         script: renderRootTaskScript(manifest, op),
+        output: op.exposeOutput ?? op.protectedOutput !== true,
     }));
 }
 /**
@@ -25,7 +26,8 @@ export function rootTasks(manifest) {
 export const ROOT_RUNTIME = `function createRootAccess(options) {
   var API = "SYNO.Core.TaskScheduler";
   var POLL_MS = 500, POLLS = 60;
-  var byOp = {};
+  var byOp = {}, running = {};
+  var legacy = null, probe = null;
   options.tasks.forEach(function (task) { byOp[task.op] = task; });
 
   function fail(code) {
@@ -38,20 +40,61 @@ export const ROOT_RUNTIME = `function createRootAccess(options) {
     if (options.user().admin !== true) return Promise.reject(fail("admin_required"));
     return Promise.resolve(byOp[op]);
   }
+  function readOutput(task) {
+    return task.output ? options.call("root.output", { op: task.op }) : Promise.resolve(null);
+  }
   function isRootTask(summary) {
     return summary.owner === "root" && summary.real_owner === "root" && summary.enable === false && summary.type === "script";
   }
+  function listTasks() {
+    if (legacy === false) return options.send(API, "list", 3, { start: 0, limit: 500 });
+    if (legacy === true) return legacyList();
+    if (!probe) {
+      probe = options.send(API, "list", 3, { start: 0, limit: 500 }).then(function (data) {
+        legacy = false;
+        return data;
+      }, function (error) {
+        if (!error || (error.code !== "dsm_103" && error.code !== 103)) {
+          probe = null;
+          throw error;
+        }
+        legacy = true;
+        return legacyList();
+      });
+    }
+    return probe;
+  }
+  function legacyList() {
+    return options.send(API, "list", 2, { offset: 0, limit: 500 }).then(function (data) {
+      // Refuse a truncated snapshot: a same-named task could lie outside it.
+      if (!data || !Array.isArray(data.tasks) || data.tasks.length > 500
+          || !(typeof data.total === "number" && isFinite(data.total) && Math.floor(data.total) === data.total) || data.total !== data.tasks.length) throw fail("root_bad_response");
+      return data;
+    });
+  }
+  function readTask(ref) {
+    return options.send(API, "get", legacy ? 3 : 4, ref);
+  }
+  function createTask(params) {
+    return options.send(legacy ? API : API + ".Root", "create", legacy ? 3 : 4, params);
+  }
+  function deleteTask(ref) {
+    return options.send(API, "delete", 2, { tasks: [ref] });
+  }
+  function runTask(ref) {
+    return options.send(API, "run", 2, { tasks: [ref] });
+  }
   function find(task) {
-    return options.send(API, "list", 3, { start: 0, limit: 500 }).then(function (data) {
+    return listTasks().then(function (data) {
       if (!data || !Array.isArray(data.tasks)) throw fail("root_bad_response");
       var named = data.tasks.filter(function (summary) { return summary && summary.name === task.name; });
       if (named.length === 0) return { state: "missing" };
       if (named.length > 1 || !isRootTask(named[0])) return { state: "conflict" };
       var ref = { id: named[0].id, real_owner: named[0].real_owner };
-      return options.send(API, "get", 4, ref).then(function (detail) {
+      return readTask(ref).then(function (detail) {
         var script = detail && detail.extra && detail.extra.script;
         if (!detail || String(detail.id) !== String(ref.id) || detail.name !== task.name
-            || detail.owner !== "root" || detail.enable !== false || detail.type !== "script" || typeof script !== "string") {
+            || detail.owner !== "root" || detail.real_owner !== ref.real_owner || detail.enable !== false || detail.type !== "script" || typeof script !== "string") {
           return { state: "conflict" };
         }
         if (script === task.script) return { state: "ready", ref: ref };
@@ -99,6 +142,93 @@ export const ROOT_RUNTIME = `function createRootAccess(options) {
     });
   }
 
+  function validTime(value) {
+    if (typeof value !== "string" || !/^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}$/.test(value)) return false;
+    var normalized = value.replace(" ", "T") + "Z";
+    var date = new Date(normalized);
+    return !isNaN(date.getTime()) && date.toISOString().slice(0, 19) === normalized.slice(0, 19);
+  }
+  function bounded(call, deadline) {
+    // A poll count alone cannot bound a stalled DSM callback. Discard late replies.
+    return new Promise(function (resolve, reject) {
+      var remaining = deadline - Date.now();
+      if (remaining <= 0) { reject(fail("root_timeout")); return; }
+      var timer = setTimeout(function () { reject(fail("root_timeout")); }, remaining);
+      Promise.resolve().then(call).then(function (value) {
+        clearTimeout(timer);
+        if (Date.now() >= deadline) reject(fail("root_timeout"));
+        else resolve(value);
+      }, function (error) { clearTimeout(timer); reject(error); });
+    });
+  }
+  function legacyHistory(ref, deadline) {
+    return bounded(function () { return options.send(API, "view", 1, { id: ref.id }); }, deadline).then(function (records) {
+      // DSM 7.1 omits data entirely when a task has never run.
+      if (records === undefined) records = [];
+      if (!Array.isArray(records) || records.length > 500) throw fail("root_bad_response");
+      var seen = {};
+      records.forEach(function (record) {
+        if (!record || !validTime(record.start_time) || typeof record.stop_time !== "string"
+            || (record.stop_time && (!validTime(record.stop_time) || record.stop_time < record.start_time))
+            || typeof record.exit_type !== "string" || !(typeof record.exit_code === "number" && isFinite(record.exit_code) && Math.floor(record.exit_code) === record.exit_code)
+            || seen[record.start_time]) throw fail("root_bad_response");
+        seen[record.start_time] = true;
+      });
+      return records;
+    });
+  }
+  function waitForLegacyRun(ref, before, deadline, polls) {
+    return legacyHistory(ref, deadline).then(function (records) {
+      var previous = before.map(function (record) { return record.start_time; });
+      var newestBefore = previous.slice().sort().pop();
+      var fresh = records.filter(function (record) { return previous.indexOf(record.start_time) === -1; });
+      if (fresh.length > 1) throw fail("root_bad_response");
+      var latest = fresh[0];
+      if (latest && (!newestBefore || latest.start_time > newestBefore) && latest.stop_time) {
+        if (latest.exit_code !== 0 || latest.exit_type !== "normal") throw fail("root_task_failed");
+        return;
+      }
+      if (polls <= 1 || Date.now() >= deadline) throw fail("root_timeout");
+      return options.wait(Math.min(POLL_MS, deadline - Date.now())).then(function () {
+        return waitForLegacyRun(ref, before, deadline, polls - 1);
+      });
+    });
+  }
+  function execute(task, verified) {
+    if (!legacy) {
+      return history(verified.ref).then(function (before) {
+        return runTask(verified.ref).then(function () { return waitForRun(verified.ref, before, POLLS); });
+      });
+    }
+    var deadline = Date.now() + POLL_MS * POLLS;
+    return legacyHistory(verified.ref, deadline).then(function (before) {
+      if (before.some(function (record) { return !record.stop_time || record.exit_type === "running"; })) throw fail("root_not_ready");
+      // Mutating calls are sent exactly once, never retried with another profile.
+      return bounded(function () { return runTask(verified.ref); }, deadline).then(function () {
+        return waitForLegacyRun(verified.ref, before, deadline, POLLS);
+      });
+    }).then(function () {
+      return bounded(function () { return find(task); }, deadline).then(function (after) {
+        if (after.state !== "ready" || String(after.ref.id) !== String(verified.ref.id)) throw fail("root_verify_failed");
+      });
+    });
+  }
+  function performRun(op) {
+    return begin(op).then(function (task) {
+      return find(task).then(function (found) {
+        if (found.state !== "ready") throw fail("root_not_ready");
+        var consent = op === "helper_repair" ? options.confirmPassword() : Promise.resolve({ confirmed: true });
+        return consent.then(function (confirmation) {
+          if (!confirmation || confirmation.confirmed !== true) throw fail("root_cancelled");
+          return op === "helper_repair" ? begin(op).then(find) : found;
+        }).then(function (verified) {
+          if (verified.state !== "ready") throw fail("root_not_ready");
+          return execute(task, verified);
+        });
+      }).then(function () { return readOutput(task); });
+    });
+  }
+
   return {
     state: function (op) {
       return begin(op).then(find).then(function (found) { return found.state; });
@@ -108,15 +238,18 @@ export const ROOT_RUNTIME = `function createRootAccess(options) {
         return find(task).then(function (found) {
           if (found.state === "ready") return "ready";
           if (found.state === "conflict") throw fail("root_conflict");
-          return options.confirmPassword().then(function (token) {
-            if (!token) return "cancelled";
+          return options.confirmPassword().then(function (confirmation) {
+            if (!confirmation || confirmation.confirmed !== true) return "cancelled";
+            if (!legacy && (typeof confirmation.token !== "string" || !confirmation.token)) throw fail("root_verify_failed");
             var params = definition(task, options.user().name);
-            params.SynoConfirmPWToken = token;
-            var replaced = found.state === "outdated"
-              ? options.send(API, "delete", 2, { tasks: [found.ref] })
-              : Promise.resolve();
-            return replaced.then(function () {
-              return options.send(API + ".Root", "create", 4, params);
+            if (!legacy) params.SynoConfirmPWToken = confirmation.token;
+            // Re-read after the legacy client-side dialog before replacing a task.
+            var checked = legacy ? begin(op).then(find) : Promise.resolve(found);
+            return checked.then(function (current) {
+              if (current.state === "conflict") throw fail("root_conflict");
+              if (current.state === "ready") return;
+              var replaced = current.state === "outdated" ? deleteTask(current.ref) : Promise.resolve();
+              return replaced.then(function () { return createTask(params); });
             }).then(function () {
               return find(task);
             }).then(function (after) {
@@ -128,35 +261,22 @@ export const ROOT_RUNTIME = `function createRootAccess(options) {
       });
     },
     run: function (op) {
-      return begin(op).then(function (task) {
-        return find(task).then(function (found) {
-          if (found.state !== "ready") throw fail("root_not_ready");
-          // Repair requires fresh interactive consent even for a retained task.
-          // Confirmation tokens are never cached or reused as scheduler tokens.
-          var consent = op === "helper_repair" ? options.confirmPassword() : Promise.resolve(true);
-          return consent.then(function (token) {
-            if (!token) throw fail("root_cancelled");
-            // The user may leave the dialog open while the scheduler changes.
-            return op === "helper_repair" ? begin(op).then(find) : found;
-          }).then(function (verified) {
-            if (verified.state !== "ready") throw fail("root_not_ready");
-            return history(verified.ref).then(function (before) {
-              return options.send(API, "run", 2, { tasks: [verified.ref] }).then(function () {
-                return waitForRun(verified.ref, before, POLLS);
-              });
-            });
-          });
-        }).then(function () {
-          return options.call("root.output", { op: op });
-        });
-      });
+      if (!Object.prototype.hasOwnProperty.call(byOp, op)) return Promise.reject(fail("root_unknown_op"));
+      if (options.user().admin !== true) return Promise.reject(fail("admin_required"));
+      if (running[op]) return running[op];
+      var pending = performRun(op).then(function (value) {
+        delete running[op];
+        return value;
+      }, function (error) { delete running[op]; throw error; });
+      running[op] = pending;
+      return pending;
     },
     remove: function (op) {
       return begin(op).then(function (task) {
         return find(task).then(function (found) {
           if (found.state === "missing") return "missing";
           if (found.state === "conflict") throw fail("root_conflict");
-          return options.send(API, "delete", 2, { tasks: [found.ref] }).then(function () {
+          return deleteTask(found.ref).then(function () {
             return find(task);
           }).then(function (after) {
             if (after.state !== "missing") throw fail("root_verify_failed");
@@ -166,9 +286,7 @@ export const ROOT_RUNTIME = `function createRootAccess(options) {
       });
     },
     output: function (op) {
-      return begin(op).then(function () {
-        return options.call("root.output", { op: op });
-      });
+      return begin(op).then(readOutput);
     }
   };
 }`;

package/dist/standalone/shared-folder.d.ts

@@ -0,0 +1,39 @@
+import type { StandaloneError } from "./manifest.js";
+import { type Translate } from "../build-spk/wizard-i18n.js";
+import type { InstallWizardStep } from "../build-spk/install-wizard.js";
+/**
+ * `install.sharedFolder`: the Shared Folder a package keeps its files in.
+ *
+ * `select`: the install and upgrade wizard offer the NAS's existing Shared
+ * Folders. DSM cannot grant a package account access to a folder chosen at
+ * install time, so the administrator grants `permission` afterwards.
+ * `create`: DSM's official `data-share` resource creates the fixed `name` and
+ * gives the package account `permission`. Removing the package never deletes it.
+ */
+export interface SharedFolder {
+    mode: "select" | "create";
+    /** The wizard variable and the `var/config.json` entry for this folder. */
+    key: string;
+    /** `create` only: the Shared Folder `data-share` creates. */
+    name?: string;
+    permission: "ro" | "rw";
+}
+export declare function readSharedFolder(value: unknown, fail: (error: StandaloneError) => void): SharedFolder | undefined;
+/** The first line `inspect` looks for to recover the declaration from an SPK. */
+export declare const SHARED_FOLDER_MARKER = "# synopkgland:install.sharedFolder ";
+/**
+ * `scripts/postinst` and `scripts/postupgrade`: store the Shared Folder *name*
+ * in `$SYNOPKG_PKGVAR/config.json`. The volume path is resolved at run time,
+ * so a moved folder keeps working. Runs as the package account.
+ */
+export declare function renderSharedFolderScript(pkg: string, folder: SharedFolder): string;
+/** `install_uifile` and `upgrade_uifile`, English plus one file per DSM language. */
+export declare function renderSharedFolderWizardFiles(pkg: string, folder: SharedFolder): Record<string, string>;
+/** The install wizard steps that ask for the shared folder, for static or dynamic wizards. */
+export declare function sharedFolderInstallSteps(pkg: string, folder: SharedFolder): (t: Translate) => InstallWizardStep[];
+/** The upgrade wizard files that let the administrator keep or change the shared folder. */
+export declare function renderSharedFolderUpgradeWizardFiles(pkg: string, folder: SharedFolder): Record<string, string>;
+/** `conf/resource` `data-share` entry: create mode only; DSM never deletes the share on uninstall. */
+export declare function sharedFolderResource(pkg: string, folder: SharedFolder): Record<string, unknown> | undefined;
+/** The declaration an SPK's postinst carries, or undefined when it has none or it is no longer valid. */
+export declare function recoverSharedFolder(postinst: string | undefined): SharedFolder | undefined;

package/dist/standalone/shared-folder.js

@@ -0,0 +1,141 @@
+import { sharedFolderCombobox } from "../build-spk/share-combobox.js";
+import { renderWizardFiles } from "../build-spk/wizard-i18n.js";
+const FIELDS = new Set(["mode", "key", "name", "permission"]);
+const KEY = /^[a-z][a-z0-9_]{0,31}$/;
+const RESERVED_KEY = /^(pkgwizard_|synopkg|change_)/;
+const SHARE_NAME = /^[A-Za-z0-9][A-Za-z0-9_-]{0,31}$/;
+const SYSTEM_SHARE = /^(homes?|users|ftp|root|admin|guest|system|volume\d*|(usb|sata|sd)share\d*)$/i;
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export function readSharedFolder(value, fail) {
+    const refuse = (why) => {
+        fail({ code: "STANDALONE_SHARED_FOLDER_INVALID", message: `install.sharedFolder ${why}` });
+        return undefined;
+    };
+    if (!isRecord(value) || Object.keys(value).some((key) => key !== "sharedFolder")) {
+        return refuse("：install 只接受 sharedFolder。");
+    }
+    const folder = value.sharedFolder;
+    if (!isRecord(folder) || Object.keys(folder).some((key) => !FIELDS.has(key))) {
+        return refuse("只接受 mode、key、name 與 permission。");
+    }
+    const { mode, key, name, permission } = folder;
+    if (mode !== "select" && mode !== "create")
+        return refuse("的 mode 必須是 select 或 create。");
+    if (permission !== "ro" && permission !== "rw")
+        return refuse("的 permission 必須是 ro 或 rw。");
+    if (typeof key !== "string" || !KEY.test(key) || RESERVED_KEY.test(key)) {
+        return refuse("的 key 必須是小寫英文字母開頭、只含小寫英數與底線（最長 32 字），且不能以 pkgwizard_、synopkg、change_ 開頭。");
+    }
+    if (mode === "select") {
+        return name === undefined ? { mode, key, permission } : refuse("的 name 只用於 create；select 由安裝精靈選擇。");
+    }
+    if (typeof name !== "string" || !SHARE_NAME.test(name) || SYSTEM_SHARE.test(name)) {
+        return refuse("create 需要 name：英數字開頭、只含英數字、底線與連字號（最長 32 字），且不能是 DSM 系統共用資料夾名稱。");
+    }
+    return { mode, key, name, permission };
+}
+/** The first line `inspect` looks for to recover the declaration from an SPK. */
+export const SHARED_FOLDER_MARKER = "# synopkgland:install.sharedFolder ";
+/**
+ * `scripts/postinst` and `scripts/postupgrade`: store the Shared Folder *name*
+ * in `$SYNOPKG_PKGVAR/config.json`. The volume path is resolved at run time,
+ * so a moved folder keeps working. Runs as the package account.
+ */
+export function renderSharedFolderScript(pkg, folder) {
+    const { key } = folder;
+    const pick = folder.mode === "create"
+        ? `name='${folder.name}'`
+        : `name=""
+if [ "\${SYNOPKG_PKG_STATUS:-}" = "UPGRADE" ] && ! change_enabled "\${CHANGE_${key}:-}"; then
+  exit 0
+fi
+name="\${${key}:-}"
+case "$name" in
+  ''|*/*|*..*|@*|.*|*[[:cntrl:]]*|*'"'*|*'\\'*) echo "invalid shared folder name for ${key}" >&2; exit 1 ;;
+esac`;
+    const gate = folder.mode === "create" ? "" : `change_enabled() {
+  case "$1" in true|1|yes|on) return 0 ;; *) return 1 ;; esac
+}
+`;
+    return `#!/bin/sh
+${SHARED_FOLDER_MARKER}${JSON.stringify(folder)}
+set -eu
+PKGVAR="\${SYNOPKG_PKGVAR:-/var/packages/${pkg}/var}"
+CONFIG="$PKGVAR/config.json"
+${gate}${pick}
+umask 077
+mkdir -p "$PKGVAR"
+tmp="$CONFIG.tmp.$$"
+printf '{"schema":1,"shared_folders":{"${key}":"%s"}}\\n' "$name" > "$tmp"
+mv "$tmp" "$CONFIG"
+exit 0
+`;
+}
+function intro(t, pkg, folder) {
+    const permission = t(`nativeShare.permission.${folder.permission}`);
+    return {
+        desc: folder.mode === "create"
+            ? t("nativeShare.createIntro", { name: folder.name, permission })
+            : t("nativeShare.selectIntro", { account: pkg, permission }),
+    };
+}
+/** Install: the share picker (select) or a note (create). */
+function installItems(t, pkg, folder) {
+    return folder.mode === "create" ? [intro(t, pkg, folder)] : [intro(t, pkg, folder), sharedFolderCombobox(t, folder.key)];
+}
+/**
+ * Upgrade: DSM prefills the first share, so a checked `CHANGE_<key>` box is what
+ * switches shares; unchecked keeps the stored one and the picker may stay blank.
+ */
+function upgradeItems(t, pkg, folder) {
+    if (folder.mode === "create")
+        return [intro(t, pkg, folder)];
+    const label = t("label.sharedFolder");
+    const picker = sharedFolderCombobox(t, folder.key);
+    const [subitem] = picker.subitems;
+    const { defaultValue: _unused, ...blankable } = subitem;
+    return [
+        intro(t, pkg, folder),
+        {
+            type: "multiselect",
+            desc: t("upgrade.changeDesc", { label }),
+            subitems: [{ key: `CHANGE_${folder.key}`, desc: t("upgrade.changeSub", { label }), defaultValue: false }],
+        },
+        { ...picker, desc: t("upgrade.reuseDesc", { desc: String(picker.desc) }), subitems: [{ ...blankable, validator: { allowBlank: true } }] },
+    ];
+}
+/** `install_uifile` and `upgrade_uifile`, English plus one file per DSM language. */
+export function renderSharedFolderWizardFiles(pkg, folder) {
+    return {
+        ...renderWizardFiles("install_uifile", sharedFolderInstallSteps(pkg, folder)),
+        ...renderSharedFolderUpgradeWizardFiles(pkg, folder),
+    };
+}
+/** The install wizard steps that ask for the shared folder, for static or dynamic wizards. */
+export function sharedFolderInstallSteps(pkg, folder) {
+    return t => [{ step_title: t("install.step"), items: installItems(t, pkg, folder) }];
+}
+/** The upgrade wizard files that let the administrator keep or change the shared folder. */
+export function renderSharedFolderUpgradeWizardFiles(pkg, folder) {
+    return renderWizardFiles("upgrade_uifile", t => [{ step_title: t("upgrade.step"), items: upgradeItems(t, pkg, folder) }]);
+}
+/** `conf/resource` `data-share` entry: create mode only; DSM never deletes the share on uninstall. */
+export function sharedFolderResource(pkg, folder) {
+    if (folder.mode !== "create")
+        return undefined;
+    return { shares: [{ name: folder.name, permission: { [folder.permission]: [pkg] } }] };
+}
+/** The declaration an SPK's postinst carries, or undefined when it has none or it is no longer valid. */
+export function recoverSharedFolder(postinst) {
+    const line = postinst?.split("\n").find(l => l.startsWith(SHARED_FOLDER_MARKER));
+    if (!line)
+        return undefined;
+    try {
+        return readSharedFolder({ sharedFolder: JSON.parse(line.slice(SHARED_FOLDER_MARKER.length)) }, () => { });
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/standalone/spk.d.ts

@@ -1,6 +1,7 @@
 import { type NativeArchFamily } from "../build-spk/dsm-arch.js";
 import type { StandaloneManifest } from "./manifest.js";
 import type { HelperArtifact } from "./helper.js";
+import { type AuthorizationArtifact } from "./authorization.js";
 export declare const LIFECYCLE_SCRIPTS: readonly ["preinst", "postinst", "preuninst", "postuninst", "preupgrade", "postupgrade", "start-stop-status"];
 export declare class StandaloneBuildError extends Error {
     readonly code: string;
@@ -13,7 +14,10 @@ export interface AssembleOptions {
     cgiPath: string;
     outputPath: string;
     helper?: HelperArtifact;
+    authorization?: AuthorizationArtifact;
     daemonControl?: string;
+    /** The compiled background worker, required exactly when the manifest declares background. */
+    backgroundWorker?: string;
 }
 /**
  * Packs an unsigned Standalone Package SPK. DSM runs installation/lifecycle

package/dist/standalone/spk.js

@@ -5,13 +5,21 @@ import { dirname, join, relative, isAbsolute } from "node:path";
 import { infoArchValue } from "../build-spk/dsm-arch.js";
 import { writeDsmWindowIcons, writePackageCenterIcons } from "../build-spk/dsm-icons.js";
 import { renderNativePrivilege } from "../build-spk/native-lifecycle.js";
+import { renderUninstallWizardFiles } from "../build-spk/uninstall-wizard.js";
+import { renderInstallWizardFiles, renderNativeInstallWizard } from "../build-spk/install-wizard.js";
+import { writeWizardUiFiles } from "../build-spk/wizard-i18n.js";
 import { createReproducibleTar } from "../build-spk/reproducible-archive.js";
 import { renderStandaloneScript } from "./lifecycle.js";
 import { DSM_LANGS, LOCALES } from "./i18n.js";
 import { CGI_PAYLOAD_PATH, renderUiConfig, renderWindowScript, windowScriptName } from "./dsm-window.js";
+import { hasHelper, inertWorkerRegistry } from "./helper-inventory.js";
 import { copyStandaloneNotices } from "../build-spk/notices.js";
 import { hostScriptName, renderHostAdapterScript } from "./host-adapter.js";
 import { copyDaemonPayload } from "./daemon.js";
+import { BACKGROUND_UNIT_DIR, BACKGROUND_WORKER_PAYLOAD, backgroundUnitName, renderBackgroundUnit } from "./background.js";
+import { renderStandaloneResource } from "./resource.js";
+import { authorizationPlan } from "./authorization.js";
+import { renderSharedFolderUpgradeWizardFiles, sharedFolderInstallSteps } from "./shared-folder.js";
 const FILE_MODE = 0o644;
 const EXEC_MODE = 0o755;
 const MAX_UI_BYTES = 64 * 1024 * 1024;
@@ -40,6 +48,8 @@ export async function assembleStandaloneSpk(options) {
     const { manifest } = options;
     const staging = mkdtempSync(join(tmpdir(), "syno-standalone-spk-"));
     try {
+        if (manifest.privilege === "root" && !options.authorization)
+            throw new StandaloneBuildError("AUTHORIZATION_PIN_REQUIRED", "root package requires pinned authorization bootstrap");
         const uiRoot = join(staging, "package", "ui");
         const appDir = join(uiRoot, "app");
         copyUiTree(manifest.ui.dir, appDir);
@@ -57,7 +67,15 @@ export async function assembleStandaloneSpk(options) {
                 throw new StandaloneBuildError("STANDALONE_DAEMON_ARTIFACT_REQUIRED", "daemon controller artifact required.");
             copyDaemonPayload(manifest, options.arch, join(staging, "package", "daemon"), options.daemonControl);
         }
-        if (manifest.integration && !options.helper)
+        if (manifest.background) {
+            if (!options.backgroundWorker)
+                throw new StandaloneBuildError("STANDALONE_BACKGROUND_ARTIFACT_REQUIRED", "background worker artifact required.");
+            const worker = join(staging, "package", BACKGROUND_WORKER_PAYLOAD);
+            mkdirSync(dirname(worker), { recursive: true });
+            copyFileSync(options.backgroundWorker, worker);
+            chmodSync(worker, EXEC_MODE);
+        }
+        if (hasHelper(manifest) && !options.helper)
             throw new StandaloneBuildError("HELPER_ARTIFACT_REQUIRED", "integration SPK 缺少已建置的 helper inventory。");
         if (options.helper) {
             const dir = join(staging, "package", "integration");
@@ -66,7 +84,7 @@ export async function assembleStandaloneSpk(options) {
             copyFileSync(new URL("../../templates/native-go/backend/THIRD_PARTY_NOTICES.txt", import.meta.url), join(dir, "THIRD_PARTY_NOTICES.txt"));
             chmodSync(join(dir, "helper"), EXEC_MODE);
             writeFile(join(dir, "inventory.json"), JSON.stringify(options.helper.inventory));
-            writeFile(join(dir, "workers.json"), JSON.stringify(options.helper.workers.map(({ id, digest }) => ({ id, digest }))));
+            writeFile(join(dir, "workers.json"), options.helper.registry ?? inertWorkerRegistry(options.helper.workers));
             mkdirSync(join(dir, "workers"));
             for (const worker of options.helper.workers) {
                 writeFileSync(join(dir, "workers", worker.id), worker.bytes, { mode: FILE_MODE });
@@ -85,6 +103,15 @@ export async function assembleStandaloneSpk(options) {
         copyStandaloneNotices(manifest.root, manifest.ui.dir, join(staging, 'package'), manifest.backend.kind === 'go' || Boolean(manifest.daemon), Boolean(options.helper), manifest.integration?.identity === 'better-auth', manifest.backend.kind === 'go' ? manifest.backend.dir : undefined);
         if (manifest.daemon)
             copyFileSync(new URL('../../templates/_shared/LICENSES/TEMPLATE.txt', import.meta.url), join(staging, 'package', 'LICENSES', 'DAEMON-LICENSE.txt'));
+        if (manifest.privilege === "root") {
+            if (!options.authorization || !/^[a-f0-9]{64}$/.test(options.authorization.bootstrapSha256))
+                throw new StandaloneBuildError("AUTHORIZATION_PIN_REQUIRED", "root package requires pinned authorization bootstrap");
+            const authDir = join(staging, "package", "authorization");
+            mkdirSync(authDir);
+            copyFileSync(options.authorization.binary, join(authDir, "bootstrap"));
+            chmodSync(join(authDir, "bootstrap"), EXEC_MODE);
+            writeFile(join(authDir, "manifest.json"), JSON.stringify(authorizationPlan(options.authorization, manifest)));
+        }
         const packageTgz = join(staging, "package.tgz");
         await createReproducibleTar(join(staging, "package"), packageTgz, { gzip: true });
         rmSync(join(staging, "package"), { recursive: true, force: true });
@@ -92,10 +119,25 @@ export async function assembleStandaloneSpk(options) {
         writeFile(join(staging, "INFO"), renderInfo(manifest, options.arch, checksum));
         mkdirSync(join(staging, "conf"));
         writeFile(join(staging, "conf", "privilege"), renderNativePrivilege());
+        const resource = renderStandaloneResource(manifest);
+        if (resource)
+            writeFile(join(staging, "conf", "resource"), resource);
+        if (manifest.background) {
+            mkdirSync(join(staging, BACKGROUND_UNIT_DIR), { recursive: true });
+            writeFile(join(staging, BACKGROUND_UNIT_DIR, backgroundUnitName(manifest.package)), renderBackgroundUnit(manifest.package));
+        }
         mkdirSync(join(staging, "scripts"));
         for (const name of LIFECYCLE_SCRIPTS) {
             writeFile(join(staging, "scripts", name), renderStandaloneScript(name, manifest), EXEC_MODE);
         }
+        const folder = manifest.sharedFolder;
+        const install = renderInstallWizardFiles(manifest.package, folder ? sharedFolderInstallSteps(manifest.package, folder) : renderNativeInstallWizard);
+        writeWizardUiFiles(staging, {
+            ...install.static,
+            ...install.dynamic,
+            ...(folder ? renderSharedFolderUpgradeWizardFiles(manifest.package, folder) : {}),
+            ...renderUninstallWizardFiles(manifest.package, "native", { integration: hasHelper(manifest) }),
+        });
         writePackageCenterIcons(staging);
         mkdirSync(dirname(options.outputPath), { recursive: true });
         await createReproducibleTar(staging, options.outputPath);
@@ -127,7 +169,9 @@ function renderInfo(manifest, arch, checksum) {
         ["startable", "yes"],
         ["checksum", checksum],
     ];
-    if (manifest.integration || manifest.daemon)
+    if (manifest.privilege === "root")
+        fields.push(["sdk_root_authorization", "2"]);
+    if (hasHelper(manifest) || manifest.daemon)
         fields.push(["precheckstartstop", "yes"]);
     if (manifest.integration?.identity === "better-auth")
         fields.push(["install_dep_packages", "Node.js_v22"]);

package/dist/standalone/worker-contract-json.d.ts

@@ -0,0 +1,8 @@
+import type { WorkerSafeReason } from "./worker-contract.js";
+export declare class WorkerContractError extends Error {
+    readonly code: WorkerSafeReason;
+    constructor(code: WorkerSafeReason);
+}
+export declare function fail(code?: WorkerSafeReason): never;
+export declare function validUnicode(s: string): boolean;
+export declare function strictJSON(raw: string | Uint8Array, cap: number): unknown;