@synopackageland/cli 0.41.8 → 0.41.9

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.41.9 (2026-10-30)
+
+- Accept self-signed DSM and redirected gateway certificates by default in the
+  Chromium e2e target, before its first network navigation.
+- Preserve installer-managed ports when the SPK inspector reconstructs daemon
+  and background lifecycle hooks, so native gateway Apps with `install.ports`
+  build and inspect consistently.
+
 ## 0.41.8 (2026-10-30)
 
 - Preserve the manifest's installer ports, settings and shared-folder context

package/README.md

@@ -225,6 +225,10 @@ not change how the App runs or its privilege tier. See `synopkgland skill show b
 suite on [`e2e`](https://www.npmjs.com/package/e2e) and `@e2e-dev/web`
 (optional peers, with `ai` and `@ai-sdk/openai`).
 
+`dsmTarget()` uses Chromium and accepts self-signed DSM and gateway HTTPS
+certificates by default, including redirects from an HTTP DSM URL. It configures
+CDP before the first network navigation; this certificate handling is Chromium-only.
+
 ```ts
 // e2e.config.ts
 import {dsmTarget, magpieAgent} from '@synopackageland/cli/e2e';

package/dist/e2e/certificates.d.ts

@@ -0,0 +1,6 @@
+import { type EngineHandle } from "e2e/engine";
+import type { surfaceOf } from "@e2e-dev/web";
+type Surface = NonNullable<ReturnType<typeof surfaceOf>>;
+/** Chromium DSM test targets accept self-signed DSM and redirected gateway certificates. */
+export declare function withDsmCertificates(base: EngineHandle, surface: () => Surface): EngineHandle;
+export {};

package/dist/e2e/certificates.js

@@ -0,0 +1,60 @@
+import { defineEngine } from "e2e/engine";
+/** Chromium DSM test targets accept self-signed DSM and redirected gateway certificates. */
+export function withDsmCertificates(base, surface) {
+    const browsers = new WeakMap();
+    const pages = new WeakMap();
+    async function prepareBrowser() {
+        const browser = surface().context().browser();
+        if (!browser)
+            return false;
+        let pending = browsers.get(browser);
+        if (!pending) {
+            pending = (async () => {
+                const session = await browser.newBrowserCDPSession();
+                await session.send("Security.setIgnoreCertificateErrors", { ignore: true });
+                return true;
+            })().catch(() => false); // Some Chromium connections expose only page CDP.
+            browsers.set(browser, pending);
+        }
+        return pending;
+    }
+    const { capabilities: _capabilities, ...spec } = base;
+    return defineEngine({
+        ...spec,
+        async startAttempt(context) {
+            await base.startAttempt?.(context);
+            await prepareBrowser();
+        },
+        session: {
+            ...base.session,
+            async open(url, operation) {
+                if (!base.session?.open)
+                    throw new Error("The DSM engine cannot open a page.");
+                if (!await prepareBrowser()) {
+                    // The runner creates its page lazily. Open only a blank page before
+                    // configuring page CDP, so the first network navigation is covered.
+                    let page;
+                    try {
+                        page = surface().page();
+                    }
+                    catch {
+                        await base.session.open("about:blank", operation);
+                        page = surface().page();
+                    }
+                    let pending = pages.get(page);
+                    if (!pending) {
+                        const target = page;
+                        pending = (async () => {
+                            const session = await surface().context().newCDPSession(target);
+                            await session.send("Security.setIgnoreCertificateErrors", { ignore: true });
+                        })();
+                        pages.set(page, pending);
+                        pending.catch(() => pages.delete(target));
+                    }
+                    await pending;
+                }
+                await base.session.open(url, operation);
+            },
+        },
+    });
+}

package/dist/e2e/dsm.d.ts

@@ -82,7 +82,7 @@ export declare function loadProfile(file: string, url: string): StorageState | n
  * process, each write their own temporary file and rename it into place.
  */
 export declare function saveProfile(file: string, url: string, state: StorageState): void;
-/** The `targets` entry of e2e.config.ts. */
+/** The Chromium `targets` entry of e2e.config.ts; accepts self-signed test certificates. */
 export declare function dsmTarget(name?: string): {
     name: string;
     engine: import("e2e/engine").EngineHandle;

package/dist/e2e/dsm.js

@@ -23,6 +23,7 @@ import { createOpenAI } from "@ai-sdk/openai";
 import { readSmokeEntry } from "./app-open.js";
 export { deriveSmokeEntry } from "./app-open.js";
 import { surfaceOf, test, web } from "@e2e-dev/web";
+import { withDsmCertificates } from "./certificates.js";
 const safeName = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,63}$/;
 const desktopSelector = "#sds-desktop";
 const signedInSelector = "#sds-taskbar-tray-item-user";
@@ -288,15 +289,16 @@ export function saveProfile(file, url, state) {
     renameSync(temporary, file);
 }
 // ---- Browser --------------------------------------------------------------
-const engine = web({
+const webEngine = web({
     viewport: { width: Number(process.env.DSM_E2E_VIEWPORT_WIDTH || 1280), height: Number(process.env.DSM_E2E_VIEWPORT_HEIGHT || 800) },
 });
-/** The `targets` entry of e2e.config.ts. */
+const engine = withDsmCertificates(webEngine, surface);
+/** The Chromium `targets` entry of e2e.config.ts; accepts self-signed test certificates. */
 export function dsmTarget(name = "dsm") {
     return { name, engine, app: { url: dsmUrl() } };
 }
 function surface() {
-    const live = surfaceOf(engine);
+    const live = surfaceOf(webEngine);
     if (!live)
         throw new Error("The DSM web engine is unavailable.");
     return live;

package/dist/standalone/inspect-spk.js

@@ -248,10 +248,10 @@ export async function inspectSpk(spkPath, expectedKind) {
         if (standalone && portal)
             findings.push(...inspectPortalInfo(info, hasExecutor));
         const daemon = standalone
-            ? await checkDaemon(dir, info, paths, payload, findings, hasExecutor, background, combined, nativeGateway, uninstallHook?.uninstall, { ingress: daemonIngress, node: daemonNode, restart: daemonRestart })
+            ? await checkDaemon(dir, info, paths, payload, findings, hasExecutor, background, combined, nativeGateway, uninstallHook?.uninstall, { ingress: daemonIngress, node: daemonNode, restart: daemonRestart, installPorts: Boolean(metadata.installPorts) })
             : undefined;
         if (background)
-            checkBackground(dir, info, payload, findings, hasExecutor, daemon, kind !== "native-go", metadata.lifecycleTimeouts, nativeGateway);
+            checkBackground(dir, info, payload, findings, hasExecutor, daemon, kind !== "native-go", metadata.lifecycleTimeouts, nativeGateway, Boolean(metadata.installPorts));
         let executor;
         if ((metadata.capabilities ?? []).some((name) => name === "rootOps" || name === "delegate" || name === "webapi") ||
             paths.has("executor/executor")) {
@@ -1026,6 +1026,7 @@ async function checkDaemon(dir, info, paths, payload, findings, executor, backgr
             throw new Error("missing executable");
         const manifest = {
             package: info.package,
+            ...(extras.installPorts ? { installPorts: true } : {}),
             backend: { kind: 'go', dir: dir, main: './cmd/app', timeoutSeconds: config.operation_seconds ?? 60 },
             root: dir,
             ...(combined ? { lifecycleTimeouts: daemon.timeouts } : {}),
@@ -1057,7 +1058,7 @@ async function checkDaemon(dir, info, paths, payload, findings, executor, backgr
         if (readFileSync(join(unpacked, "daemon/config.json"), "utf8") !== JSON.stringify(expectedConfig) + '\n')
             throw new Error("non-canonical daemon config");
         for (const hook of ["start-stop-status", "preupgrade", "preuninst"]) {
-            if (!matchesStandaloneScript(hook, nativeGateway ? { ...manifest, os_min_ver: info.os_min_ver, identityGateway: nativeGateway } : manifest, readFileSync(join(dir, "scripts", hook), "utf8")))
+            if (!matchesStandaloneScript(hook, nativeGateway ? { ...manifest, os_min_ver: info.os_min_ver, identityGateway: nativeGateway } : manifest, readFileSync(join(dir, "scripts", hook), "utf8"), Boolean(extras.installPorts)))
                 findings.push(`daemon scripts/${hook} does not match the fixed lifecycle`);
         }
         return daemon;
@@ -1379,7 +1380,7 @@ function checkConf(dir, findings, kind, background, sharedFolder, pkg, portal, c
     }
 }
 /** The opt-in package user unit must be exactly what the generator writes. */
-function checkBackground(dir, info, payload, findings, executor, daemon, bridge = false, lifecycleTimeouts, nativeGateway) {
+function checkBackground(dir, info, payload, findings, executor, daemon, bridge = false, lifecycleTimeouts, nativeGateway, installPorts = false) {
     const pkg = info.package;
     if (!pkg)
         return;
@@ -1402,6 +1403,7 @@ function checkBackground(dir, info, payload, findings, executor, daemon, bridge
     }
     if (!matchesStandaloneScript("start-stop-status", {
         package: pkg,
+        ...(installPorts ? { installPorts: true } : {}),
         os_min_ver: info.os_min_ver,
         ...(nativeGateway ? { identityGateway: nativeGateway } : {}),
         lifecycleTimeouts,
@@ -1410,7 +1412,7 @@ function checkBackground(dir, info, payload, findings, executor, daemon, bridge
             jobs: { worker: "sha256-v1" },
             ...(executor ? { rootOps: true } : {}),
         },
-    }, read("scripts/start-stop-status")))
+    }, read("scripts/start-stop-status"), installPorts))
         findings.push("background scripts/start-stop-status does not match the fixed synosystemctl lifecycle");
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.41.8",
+  "version": "0.41.9",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {