@synopackageland/cli 0.5.3 → 0.6.0

package/dist/build-spk/native-lifecycle.js

@@ -1,38 +1,10 @@
 import { renderDeleteAppDataBlock } from "./delete-app-data.js";
-/** `@appdata` and `@apphome`; `@appconf` stays because no template writes there. */
+/** Package data roots shared by CGI and daemon packages. */
 export const NATIVE_DELETE_ROOTS = [
     { variable: "PKGVAR", area: "appdata" },
     { variable: "PKGHOME", area: "apphome" },
+    { variable: "PKGETC", area: "appconf" },
 ];
-/**
- * Escapes a literal string for safe inclusion in POSIX `/bin/sh` single quotes.
- * A single quote is represented as `'\''` (close single quote, literal escaped single quote, reopen single quote).
- */
-function quoteLiteral(str) {
-    return `'${str.replaceAll("'", "'\\''")}'`;
-}
-/**
- * Escapes a token (exec path, arg, or env value) so that any `${SYNOPKG_PKGVAR}` placeholder
- * expands safely to the shell variable `"${PKGVAR}"`, while all literal parts are securely
- * quoted in single quotes, preventing shell injection or word splitting.
- */
-function escapeShellTokenWithPkgvar(value, pkgvarExpr = '"${PKGVAR}"') {
-    if (value === "") {
-        return "''";
-    }
-    const placeholder = "${SYNOPKG_PKGVAR}";
-    const parts = value.split(placeholder);
-    const segments = [];
-    for (let i = 0; i < parts.length; i++) {
-        if (parts[i].length > 0) {
-            segments.push(quoteLiteral(parts[i]));
-        }
-        if (i < parts.length - 1) {
-            segments.push(pkgvarExpr);
-        }
-    }
-    return segments.length === 0 ? "''" : segments.join("");
-}
 /**
  * Renders `conf/privilege` content.
  * For non-container native packages, DSM accepts `{"defaults":{"run-as":"package"}}`.
@@ -44,169 +16,18 @@ export function renderNativePrivilege() {
         },
     }, null, 2)}\n`;
 }
-/**
- * Renders `scripts/start-stop-status`.
- *
- * Requirements & hard facts from N0:
- * - Start must be backgrounded via `nohup setsid ... &` because Package Center uses a oneshot unit.
- * - PID is tracked in `$PKGVAR/<pkg>.pid`.
- * - Status exit codes: 0 = running, 1 = PID file present but process dead, 3 = stopped / no PID file.
- * - Fallbacks for `SYNOPKG_PKGDEST` and `SYNOPKG_PKGVAR` via `:-/var/packages/<pkg>/target` and `:-/var/packages/<pkg>/var`.
- * - `exec` is relative to `SYNOPKG_PKGDEST` (no `target/` subfolder).
- * - Safe quoting for `exec`, `args`, and `env`.
- */
-export function renderNativeStartStopStatus(input) {
-    const pkg = input.packageIdentity;
-    const service = input.config.service;
-    const pkgDestFallback = `\${SYNOPKG_PKGDEST:-/var/packages/${pkg}/target}`;
-    const pkgVarFallback = `\${SYNOPKG_PKGVAR:-/var/packages/${pkg}/var}`;
-    const execToken = `"$PKGDEST/"${escapeShellTokenWithPkgvar(service.exec)}`;
-    const argTokens = (service.args ?? []).map((arg) => escapeShellTokenWithPkgvar(arg));
-    const envLines = [];
-    if (service.env) {
-        for (const [key, value] of Object.entries(service.env)) {
-            const escapedKey = quoteLiteral(key);
-            const escapedVal = escapeShellTokenWithPkgvar(value);
-            envLines.push(`    export ${escapedKey}=${escapedVal}`);
-        }
-    }
-    const envBlock = envLines.length > 0 ? `\n${envLines.join("\n")}` : "";
-    const commandLine = [execToken, ...argTokens].join(" ");
-    return `#!/bin/sh
-PKGDEST="${pkgDestFallback}"
-PKGVAR="${pkgVarFallback}"
-PIDFILE="$PKGVAR/${pkg}.pid"
-LOGFILE="$PKGVAR/${pkg}.log"
-
-pid_alive() {
-  if [ ! -f "$PIDFILE" ]; then
-    return 1
-  fi
-  pid=$(cat "$PIDFILE" 2>/dev/null) || return 1
-  [ -n "$pid" ] && kill -0 "$pid" 2>/dev/null
-}
-
-case "$1" in
-  start)
-    if pid_alive; then
-      exit 0
-    fi
-    mkdir -p "$PKGVAR"
-    rm -f "$PIDFILE"
-    (
-      cd /${envBlock}
-      nohup setsid ${commandLine} >> "$LOGFILE" 2>&1 </dev/null &
-      echo $! > "$PIDFILE"
-    )
-    # Verify the launch honestly: an exec that dies immediately (missing
-    # binary, wrong arch, bad loader) must not leave Package Center showing
-    # "started". N0 validated this re-check on hardware.
-    sleep 1
-    if pid_alive; then
-      exit 0
-    fi
-    rm -f "$PIDFILE"
-    exit 1
-    ;;
-  stop)
-    if [ -f "$PIDFILE" ]; then
-      pid=$(cat "$PIDFILE" 2>/dev/null) || pid=""
-      if [ -n "$pid" ]; then
-        if kill -0 "$pid" 2>/dev/null; then
-          kill "$pid" 2>/dev/null || true
-          n=0
-          while [ "$n" -lt 30 ]; do
-            if ! kill -0 "$pid" 2>/dev/null; then
-              break
-            fi
-            sleep 0.2
-            n=$((n + 1))
-          done
-          if kill -0 "$pid" 2>/dev/null; then
-            kill -9 "$pid" 2>/dev/null || true
-          fi
-        fi
-      fi
-      rm -f "$PIDFILE"
-    fi
-    exit 0
-    ;;
-  status)
-    if pid_alive; then
-      exit 0
-    fi
-    if [ -f "$PIDFILE" ]; then
-      exit 1
-    fi
-    exit 3
-    ;;
-  *)
-    exit 1
-    ;;
-esac
-`;
-}
-/**
- * Renders `scripts/postinst`.
- *
- * Requirements from N0:
- * - DSM creates the package user/group and sets up `SYNOPKG_PKGVAR` (drwxr-xr-x) before postinst runs.
- * - Does NOT create any users (no synouser/useradd/adduser).
- * - Does NOT chown.
- * - Only ensures that subdirectories (like `$SYNOPKG_PKGVAR/tmp`) exist.
- */
-export function renderNativePostinst(input) {
-    const pkg = input.packageIdentity;
-    const pkgVarFallback = `\${SYNOPKG_PKGVAR:-/var/packages/${pkg}/var}`;
-    return `#!/bin/sh
-set -eu
-PKGVAR="${pkgVarFallback}"
-mkdir -p "$PKGVAR" "$PKGVAR/tmp"
-exit 0
-`;
-}
-/**
- * Renders `scripts/preuninst`.
- *
- * Requirements from N0:
- * - Non-zero exit blocks uninstallation, so it must be best-effort (`|| true`).
- * - Skips when `SYNOPKG_PKG_STATUS=UPGRADE`.
- * - Calls stop via `/var/packages/${SYNOPKG_PKGNAME:-<pkg>}/scripts/start-stop-status stop`.
- * - Does NOT use postfix stripping like `%/target`.
- */
-export function renderNativePreuninst(input) {
-    const pkg = input.packageIdentity;
-    return `#!/bin/sh
-if [ "\${SYNOPKG_PKG_STATUS:-}" = "UPGRADE" ]; then
-  exit 0
-fi
-
-CONTROL="/var/packages/\${SYNOPKG_PKGNAME:-${pkg}}/scripts/start-stop-status"
-if [ -x "$CONTROL" ]; then
-  "$CONTROL" stop 2>/dev/null || true
-fi
-exit 0
-`;
-}
-/**
- * Renders `scripts/postuninst`.
- *
- * Shares `renderDeleteAppDataBlock` with the Compose generator so both runtimes
- * honour the same unchecked-by-default wizard variable and the same refusal to
- * follow a symlink out of `@appdata`. N0 showed DSM does not reclaim the
- * package user on uninstall; deleting a system account is not this script's job.
- */
-export function renderNativePostuninst(input) {
-    return renderPackagePostuninst(input.packageIdentity);
-}
 /** The postuninst every native runtime shares: only the package name differs. */
-export function renderPackagePostuninst(pkg) {
+export function renderPackagePostuninst(pkg, options = {}) {
     const pkgVarFallback = `\${SYNOPKG_PKGVAR:-/var/packages/${pkg}/var}`;
     const pkgHomeFallback = `\${SYNOPKG_PKGHOME:-/var/packages/${pkg}/home}`;
     return `#!/bin/sh
 set -eu
 PKGVAR="${pkgVarFallback}"
 PKGHOME="${pkgHomeFallback}"
-${renderDeleteAppDataBlock(pkg, NATIVE_DELETE_ROOTS)}exit 0
+PKGETC="/var/packages/${pkg}/etc"
+if [ ! -e "$PKGETC" ] && [ -n "\${SYNOPKG_PKGDEST_VOL:-}" ]; then
+  PKGETC="$SYNOPKG_PKGDEST_VOL/@appconf/${pkg}"
+fi
+${renderDeleteAppDataBlock(pkg, NATIVE_DELETE_ROOTS, options)}exit 0
 `;
 }

package/dist/build-spk/notices.d.ts

@@ -2,4 +2,4 @@
 export declare function copyNoticeTree(source: string, target: string): void;
 /** Fixed payload location, independent of app code/binary paths. */
 export declare function copyProjectNotices(root: string, payload: string): void;
-export declare function copyStandaloneNotices(root: string, uiDir: string, payload: string, go: boolean, helper: boolean, identity: boolean, goDir?: string): void;
+export declare function copyStandaloneNotices(root: string, uiDir: string, payload: string, go: boolean, goDir?: string): void;

package/dist/build-spk/notices.js

@@ -25,19 +25,23 @@ export function copyProjectNotices(root, payload) {
     if (existsSync(join(root, 'LICENSE')))
         copyNoticeTree(join(root, 'LICENSE'), join(dest, 'APP.txt'));
 }
-export function copyStandaloneNotices(root, uiDir, payload, go, helper, identity, goDir = join(root, 'backend')) {
+export function copyStandaloneNotices(root, uiDir, payload, go, goDir = join(root, 'backend')) {
     copyProjectNotices(root, payload);
     const dest = join(payload, 'LICENSES');
     const shared = new URL('../../templates/_shared/', import.meta.url);
-    if (go || helper) {
+    if (go) {
         mkdirSync(dest, { recursive: true });
         for (const name of ['GO-LICENSE', 'GO-PATENTS'])
             copyFileSync(new URL(name, shared), join(dest, name));
         if (existsSync(join(goDir, 'THIRD_PARTY_NOTICES.txt')))
             copyNoticeTree(join(goDir, 'THIRD_PARTY_NOTICES.txt'), join(dest, 'GO-THIRD_PARTY_NOTICES.txt'));
     }
-    if (helper)
-        copyFileSync(new URL('../../templates/native-go/backend/THIRD_PARTY_NOTICES.txt', import.meta.url), join(dest, 'HELPER-THIRD_PARTY_NOTICES.txt'));
+    const nativeAdmin = join(goDir, 'internal/dsm/native');
+    if (go && existsSync(join(nativeAdmin, 'admin_check.c'))) {
+        for (const name of ['admin_check.c', 'build.sh', 'provenance.json', 'licenses']) {
+            copyNoticeTree(join(nativeAdmin, name), join(dest, 'native-admin', name));
+        }
+    }
     const frontend = join(root, 'frontend/package.json');
     const usesUi = existsSync(frontend) && Boolean(JSON.parse(readFileSync(frontend, 'utf8')).dependencies?.['@synopackageland/ui']);
     if (usesUi) {
@@ -49,12 +53,4 @@ export function copyStandaloneNotices(root, uiDir, payload, go, helper, identity
     }
     if (existsSync(join(uiDir, 'LICENSES')))
         copyNoticeTree(join(uiDir, 'LICENSES'), join(dest, 'ui'));
-    if (identity) {
-        const source = join(root, 'node/dist/LICENSES');
-        for (const name of ['THIRD_PARTY_NOTICES.txt', 'inventory.json']) {
-            if (!existsSync(join(source, name)))
-                throw new Error(`[NOTICE_MISSING] Better Auth notice missing: ${name}; rebuild node bundle`);
-        }
-        copyNoticeTree(source, join(dest, 'better-auth'));
-    }
 }

package/dist/build-spk/uninstall-wizard.d.ts

@@ -1,14 +1,7 @@
 /** The key DSM's built-in packages use for their "also remove my data" box. */
 export declare const REMOVE_ADDITIONAL_KEY = "pkgwizard_remove_additional";
 export type UninstallWizardKind = "native" | "container";
-/** Options that add a warning without changing the data box. */
-export interface UninstallWizardOptions {
-    /**
-     * True when the package ships a root integration (helper). Its kill switch
-     * runs inside the App, so the administrator must disable it before DSM is
-     * allowed to uninstall; the warning says so.
-     */
-    integration?: boolean;
-}
 /** `uninstall_uifile` (English) plus one `uninstall_uifile_<dsm language>` per locale. */
-export declare function renderUninstallWizardFiles(packageName: string, kind: UninstallWizardKind, options?: UninstallWizardOptions): Record<string, string>;
+export declare function renderUninstallWizardFiles(packageName: string, kind: UninstallWizardKind, options?: {
+    executor?: boolean;
+}): Record<string, string>;

package/dist/build-spk/uninstall-wizard.js

@@ -4,21 +4,23 @@ export const REMOVE_ADDITIONAL_KEY = "pkgwizard_remove_additional";
 function list(items) {
     return `<ul class="synopkg-ul-list">${items.map((item) => `<li>${item}</li>`).join("")}</ul>`;
 }
-function renderUninstallWizard(t, packageName, kind, options) {
+function renderUninstallWizard(t, packageName, kind, executor) {
     const vars = { package: packageName };
     return [{
             step_title: t("uninstall.step"),
             items: [
-                ...(options.integration ? [{ desc: t("uninstall.integration") }] : []),
                 { desc: t("uninstall.intro") },
                 { desc: t("uninstall.deleteHeading") },
                 {
                     desc: list([
                         t("uninstall.item.appdata", vars),
                         t(kind === "container" ? "uninstall.item.apphomeSecrets" : "uninstall.item.apphome", vars),
+                        ...(kind === "native" ? [t("uninstall.item.appconf", vars)] : []),
                     ]),
                 },
                 { desc: t(kind === "container" ? "uninstall.keep.container" : "uninstall.keep.native") },
+                ...(kind === "native" ? [{ desc: t("uninstall.retained.native", vars) }] : []),
+                ...(executor ? [{ desc: t("uninstall.executor", vars) }] : []),
                 { desc: t("uninstall.backup") },
                 {
                     type: "multiselect",
@@ -29,5 +31,5 @@ function renderUninstallWizard(t, packageName, kind, options) {
 }
 /** `uninstall_uifile` (English) plus one `uninstall_uifile_<dsm language>` per locale. */
 export function renderUninstallWizardFiles(packageName, kind, options = {}) {
-    return renderWizardFiles("uninstall_uifile", (t) => renderUninstallWizard(t, packageName, kind, options));
+    return renderWizardFiles("uninstall_uifile", (t) => renderUninstallWizard(t, packageName, kind, options.executor === true));
 }

package/dist/build-spk/wizard-messages.d.ts

@@ -230,7 +230,7 @@ export declare const WIZARD_MESSAGES: {
         es: string;
         it: string;
     };
-    "uninstall.integration": {
+    "uninstall.intro": {
         en: string;
         "zh-TW": string;
         "zh-CN": string;
@@ -241,7 +241,7 @@ export declare const WIZARD_MESSAGES: {
         es: string;
         it: string;
     };
-    "uninstall.intro": {
+    "uninstall.deleteHeading": {
         en: string;
         "zh-TW": string;
         "zh-CN": string;
@@ -252,7 +252,7 @@ export declare const WIZARD_MESSAGES: {
         es: string;
         it: string;
     };
-    "uninstall.deleteHeading": {
+    "uninstall.item.appdata": {
         en: string;
         "zh-TW": string;
         "zh-CN": string;
@@ -263,7 +263,7 @@ export declare const WIZARD_MESSAGES: {
         es: string;
         it: string;
     };
-    "uninstall.item.appdata": {
+    "uninstall.item.apphome": {
         en: string;
         "zh-TW": string;
         "zh-CN": string;
@@ -274,7 +274,7 @@ export declare const WIZARD_MESSAGES: {
         es: string;
         it: string;
     };
-    "uninstall.item.apphome": {
+    "uninstall.item.apphomeSecrets": {
         en: string;
         "zh-TW": string;
         "zh-CN": string;
@@ -285,7 +285,29 @@ export declare const WIZARD_MESSAGES: {
         es: string;
         it: string;
     };
-    "uninstall.item.apphomeSecrets": {
+    "uninstall.item.appconf": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "uninstall.retained.native": {
+        en: string;
+        "zh-TW": string;
+        "zh-CN": string;
+        ja: string;
+        ko: string;
+        de: string;
+        fr: string;
+        es: string;
+        it: string;
+    };
+    "uninstall.executor": {
         en: string;
         "zh-TW": string;
         "zh-CN": string;

package/dist/build-spk/wizard-messages.js

@@ -230,17 +230,6 @@ export const WIZARD_MESSAGES = {
         es: "Cambiar {label}",
         it: "Modifica {label}",
     },
-    "uninstall.integration": {
-        en: "This app has an approved root integration. Disable the integration inside the App (and remove its root task) before uninstalling; while the integration stays enabled, DSM blocks the uninstall.",
-        "zh-TW": "此 App 有已核准的 root 整合。卸載前請先在 App 內停用整合（並移除其 root 工作）；整合未停用時，DSM 會擋下卸載。",
-        "zh-CN": "此应用有已批准的 root 集成。卸载前请先在应用内停用集成（并移除其 root 任务）；集成未停用时，DSM 会阻止卸载。",
-        ja: "このアプリには承認済みの root 統合があります。アンインストールする前に、アプリ内で統合を無効化し（root タスクも削除して）ください。統合が有効な間は DSM がアンインストールをブロックします。",
-        ko: "이 앱에는 승인된 root 통합이 있습니다. 제거하기 전에 앱에서 통합을 비활성화하고 root 작업도 제거하세요. 통합이 활성화된 동안에는 DSM이 제거를 차단합니다.",
-        de: "Diese App hat eine genehmigte root-Integration. Deaktivieren Sie die Integration in der App (und entfernen Sie deren root-Aufgabe), bevor Sie deinstallieren; solange die Integration aktiv ist, blockiert DSM die Deinstallation.",
-        fr: "Cette application dispose d'une intégration root approuvée. Désactivez l'intégration dans l'application (et supprimez sa tâche root) avant de désinstaller ; tant que l'intégration reste active, DSM bloque la désinstallation.",
-        es: "Esta aplicación tiene una integración root aprobada. Desactive la integración dentro de la aplicación (y elimine su tarea root) antes de desinstalar; mientras la integración siga activada, DSM bloquea la desinstalación.",
-        it: "Questa app ha un'integrazione root approvata. Disattiva l'integrazione nell'app (e rimuovi la relativa attività root) prima di disinstallare; finché l'integrazione resta attiva, DSM blocca la disinstallazione.",
-    },
     "uninstall.intro": {
         en: "By default, uninstalling keeps this app's data, and a later reinstall continues with it. Tick the box below to also permanently delete the data listed here.",
         "zh-TW": "預設解除安裝會保留此 App 的資料，之後重新安裝會沿用。勾選下方選項，可一併永久刪除這裡列出的資料。",
@@ -296,6 +285,39 @@ export const WIZARD_MESSAGES = {
         es: "Carpeta de inicio de la aplicación, incluidos los secretos generados (@apphome/{package})",
         it: "Cartella home dell'app, inclusi i segreti generati (@apphome/{package})",
     },
+    "uninstall.item.appconf": {
+        "en": "@appconf/{package}: saved package configuration.",
+        "zh-TW": "@appconf/{package}：套件儲存的設定。",
+        "zh-CN": "@appconf/{package}：套件保存的设置。",
+        "ja": "@appconf/{package}: 保存されたパッケージ設定。",
+        "ko": "@appconf/{package}: 저장된 패키지 설정.",
+        "de": "@appconf/{package}: gespeicherte Paketkonfiguration.",
+        "fr": "@appconf/{package} : configuration enregistrée du paquet.",
+        "es": "@appconf/{package}: configuración guardada del paquete.",
+        "it": "@appconf/{package}: configurazione salvata del pacchetto.",
+    },
+    "uninstall.retained.native": {
+        "en": "DSM may retain empty @appdata/{package}, @appconf/{package}, @apphome/{package}, @appshare/{package}, the package-config symlink /usr/syno/etc/packages/{package}, and the package account/group. The checkbox empties data/config/home contents; it does not remove DSM directory roots, shared folders or system identities. After uninstall, an administrator can review unused remnants and ACLs before removing only this package’s infrastructure.",
+        "zh-TW": "DSM 可能保留空的 @appdata/{package}、@appconf/{package}、@apphome/{package}、@appshare/{package}、套件設定連結 /usr/syno/etc/packages/{package} 與套件帳號／群組。勾選後會清空資料、設定與 home 內容，保留 DSM 目錄本身、共用資料夾與系統身分。解除安裝後，管理員可先確認殘留項目與 ACL 已不再使用，再清除此套件的基礎項目。",
+        "zh-CN": "DSM 可能保留空的 @appdata/{package}、@appconf/{package}、@apphome/{package}、@appshare/{package}、套件配置链接 /usr/syno/etc/packages/{package} 和套件账户／组。勾选后会清空数据、配置和 home 内容，保留 DSM 目录本身、共享文件夹和系统身份。卸载后，管理员可检查残留项目与 ACL 不再使用后，再清理本套件的基础项目。",
+        "ja": "DSM は空の @appdata/{package}、@appconf/{package}、@apphome/{package}、@appshare/{package}、設定リンク /usr/syno/etc/packages/{package}、パッケージのアカウントとグループを保持する場合があります。チェックするとデータ・設定・home の内容を削除しますが、DSM のディレクトリ、共有フォルダー、システム ID は保持します。アンインストール後、管理者は不要な項目と ACL を確認してから、このパッケージの項目だけを削除してください。",
+        "ko": "DSM은 빈 @appdata/{package}, @appconf/{package}, @apphome/{package}, @appshare/{package}, 설정 링크 /usr/syno/etc/packages/{package}, 패키지 계정/그룹을 유지할 수 있습니다. 체크하면 데이터/설정/home 내용만 비우며 DSM 디렉터리, 공유 폴더, 시스템 ID는 유지합니다. 제거 후 관리자는 남은 항목과 ACL을 확인하고 이 패키지의 불필요한 항목만 정리하세요.",
+        "de": "DSM kann leere @appdata/{package}, @appconf/{package}, @apphome/{package}, @appshare/{package}, den Konfigurationslink /usr/syno/etc/packages/{package} sowie Paketkonto und -gruppe behalten. Das Kontrollkästchen leert Daten, Konfiguration und home, behält aber DSM-Verzeichnisse, Freigaben und Systemidentitäten. Nach der Deinstallation kann ein Administrator ungenutzte Reste und ACLs prüfen und nur die Infrastruktur dieses Pakets entfernen.",
+        "fr": "DSM peut conserver les répertoires vides @appdata/{package}, @appconf/{package}, @apphome/{package}, @appshare/{package}, le lien de configuration /usr/syno/etc/packages/{package} et le compte/groupe du paquet. La case vide les données, la configuration et home, mais conserve les répertoires DSM, dossiers partagés et identités système. Après la désinstallation, un administrateur peut vérifier les éléments inutilisés et leurs ACL avant de supprimer uniquement ceux de ce paquet.",
+        "es": "DSM puede conservar @appdata/{package}, @appconf/{package}, @apphome/{package}, @appshare/{package} vacíos, el enlace de configuración /usr/syno/etc/packages/{package} y la cuenta/grupo del paquete. La casilla vacía datos, configuración y home; conserva directorios DSM, carpetas compartidas e identidades del sistema. Tras desinstalar, un administrador puede revisar los restos y ACL antes de eliminar solo la infraestructura de este paquete.",
+        "it": "DSM può mantenere le directory vuote @appdata/{package}, @appconf/{package}, @apphome/{package}, @appshare/{package}, il collegamento /usr/syno/etc/packages/{package} e account/gruppo del pacchetto. La casella svuota dati, configurazione e home, ma conserva directory DSM, cartelle condivise e identità di sistema. Dopo la disinstallazione, un amministratore può verificare residui e ACL prima di rimuovere solo quelli di questo pacchetto.",
+    },
+    "uninstall.executor": {
+        "en": "Uninstall asynchronously removes executor runtime, socket, delegations and the two tasks “{package} executor boot” and “{package} executor control”, after verifying their exact names, root owner and script digest. The preuninst purge mailbox requests cleanup immediately; cleanup completes asynchronously. A timeout does not block uninstall. As a fallback, the monitor pauses while the package directory or INFO identity is unavailable and purges only after 10 minutes of continuous absence; reappearance resets the timer. If its process is absent, cleanup waits until the next boot. Changed or unverifiable task definitions are kept for administrator review in Control Panel > Task Scheduler.",
+        "zh-TW": "解除安裝會在背景非同步清除 executor 執行檔、socket、委託，並驗證精確名稱、root 擁有者與腳本 digest 後刪除「{package} executor boot」及「{package} executor control」兩個任務。preuninst 的 purge mailbox 會立即要求清理，清理在背景非同步完成；等待逾時不阻擋解除安裝。後備機制會在套件目錄或 INFO 身分消失時暫停服務，僅連續消失達 10 分鐘才清除，重新出現即重置計時；若程序不存在，則等下次開機清除。已變更或無法驗證的任務會保留，請管理員到「控制台」>「任務排程表」檢查。",
+        "zh-CN": "卸载会在后台异步清除 executor 运行文件、socket、委托，并验证准确名称、root 所有者和脚本摘要后删除“{package} executor boot”和“{package} executor control”两个任务。preuninst 的 purge mailbox 会立即请求清理，清理在后台异步完成；超时不阻止卸载。后备机制会在套件目录或 INFO 身份消失时暂停服务，仅连续消失达 10 分钟才清理，重新出现即重置计时；若进程不存在，则等下次启动清理。已修改或无法验证的任务会保留，请管理员到“控制面板”>“任务计划”检查。",
+        "ja": "アンインストール時に executor ランタイム、socket、委任をバックグラウンドで非同期に削除します。「{package} executor boot」と「{package} executor control」は正確な名前、所有者 root、スクリプトのダイジェストを検証して削除します。preuninst の purge mailbox は直ちに削除を要求し、処理は非同期で完了します。タイムアウトしても続行します。予備の監視機構はパッケージディレクトリまたは INFO の識別情報がない間サービスを停止し、連続して 10 分間ない場合のみ削除します。再出現すると計時をリセットします。プロセスがない場合は次回起動時に処理します。変更された、または検証できないタスクは保持し、管理者が [コントロール パネル] > [タスク スケジューラ] で確認してください。",
+        "ko": "제거 시 executor 런타임, socket, 위임을 백그라운드에서 비동기로 정리합니다. “{package} executor boot”와 “{package} executor control” 작업은 정확한 이름, root 소유자, 스크립트 다이제스트를 확인한 후 삭제합니다. preuninst의 purge mailbox는 즉시 정리를 요청하며 정리는 비동기로 완료됩니다. 시간 초과는 제거를 막지 않습니다. 대체 모니터는 패키지 디렉터리 또는 INFO 식별 정보가 없는 동안 서비스를 일시 중지하고, 10분 동안 계속 없을 때만 정리합니다. 다시 나타나면 타이머를 초기화합니다. 프로세스가 없으면 다음 부팅 때 정리합니다. 변경되었거나 확인할 수 없는 작업은 보존되므로 관리자가 제어판 > 작업 스케줄러에서 검토해야 합니다.",
+        "de": "Die Deinstallation entfernt Executor-Laufzeit, Socket und Delegierungen asynchron im Hintergrund. Die Aufgaben „{package} executor boot“ und „{package} executor control“ werden nach Prüfung des genauen Namens, Eigentümers root und Skript-Digests gelöscht. Die purge-Mailbox von preuninst fordert die Bereinigung sofort an; sie wird asynchron abgeschlossen. Ein Timeout blockiert die Deinstallation nicht. Als Rückfall pausiert der Monitor bei fehlendem Paketverzeichnis oder fehlender INFO-Identität und bereinigt erst nach 10 Minuten ununterbrochener Abwesenheit. Erneutes Erscheinen setzt den Timer zurück. Fehlt der Prozess, erfolgt die Bereinigung beim nächsten Start. Geänderte oder nicht prüfbare Aufgaben bleiben zur Prüfung durch einen Administrator unter Systemsteuerung > Aufgabenplaner erhalten.",
+        "fr": "La désinstallation supprime de manière asynchrone en arrière-plan le runtime executor, le socket et les délégations. Les tâches « {package} executor boot » et « {package} executor control » sont supprimées après vérification du nom exact, du propriétaire root et de l’empreinte du script. La boîte de contrôle purge de preuninst demande immédiatement le nettoyage, qui se termine de manière asynchrone. Un délai dépassé ne bloque pas la désinstallation. En secours, le moniteur suspend le service en l’absence du répertoire du paquet ou de son identité INFO et nettoie seulement après 10 minutes d’absence continue. Leur retour remet le compteur à zéro. Si le processus est absent, le nettoyage attend le prochain démarrage. Les tâches modifiées ou invérifiables restent à examiner par un administrateur dans Panneau de configuration > Planificateur de tâches.",
+        "es": "La desinstalación elimina de forma asíncrona en segundo plano el runtime executor, el socket y las delegaciones. Borra las tareas «{package} executor boot» y «{package} executor control» tras verificar el nombre exacto, el propietario root y el resumen del script. El buzón purge de preuninst solicita la limpieza inmediatamente; esta se completa de forma asíncrona. El tiempo de espera agotado no bloquea la desinstalación. Como respaldo, el monitor pausa el servicio si falta el directorio del paquete o su identidad INFO y limpia solo tras 10 minutos de ausencia continua. Su reaparición reinicia el temporizador. Si el proceso no existe, la limpieza espera al próximo arranque. Las tareas modificadas o no verificables se conservan para revisión del administrador en Panel de control > Programador de tareas.",
+        "it": "La disinstallazione elimina in modo asincrono in background runtime executor, socket e deleghe. Le attività “{package} executor boot” e “{package} executor control” vengono eliminate dopo aver verificato nome esatto, proprietario root e digest dello script. La mailbox purge di preuninst richiede subito la pulizia, che termina in modo asincrono. Un timeout non blocca la disinstallazione. Come riserva, il monitor sospende il servizio se mancano la directory del pacchetto o la sua identità INFO e pulisce solo dopo 10 minuti di assenza continua. La ricomparsa azzera il timer. Se il processo è assente, la pulizia attende il prossimo avvio. Le attività modificate o non verificabili restano da esaminare da un amministratore in Pannello di controllo > Utilità di pianificazione."
+    },
     "uninstall.keep.native": {
         en: "Never deleted: Shared Folders, the package account, and other apps' data.",
         "zh-TW": "不會被刪除：共用資料夾（Shared Folder）、套件帳號，以及其他 App 的資料。",

package/dist/capabilities.d.ts

@@ -0,0 +1,4 @@
+export declare const CAPABILITY_NAMES: readonly ["files", "jobs", "login", "root-ops", "delegate"];
+export type CapabilityName = typeof CAPABILITY_NAMES[number];
+export declare function capabilityNames(values: string[]): CapabilityName[];
+export declare function capabilitySettings(names: readonly CapabilityName[]): Record<string, unknown>;

package/dist/capabilities.js

@@ -0,0 +1,12 @@
+export const CAPABILITY_NAMES = ['files', 'jobs', 'login', 'root-ops', 'delegate'];
+export function capabilityNames(values) {
+    const names = [...new Set(values.flatMap(value => value.split(',')).map(value => value.trim()))];
+    for (const name of names) {
+        if (!CAPABILITY_NAMES.includes(name))
+            throw new Error(`[CAPABILITY_INVALID] 不支援能力「${name}」；可選 ${CAPABILITY_NAMES.join(', ')}。`);
+    }
+    return names;
+}
+export function capabilitySettings(names) {
+    return Object.fromEntries(names.map(name => name === 'delegate' ? ['delegate', { operations: ['files.list', 'files.info', 'files.createFolder', 'files.checkPermission', 'files.write'], scope: 'home' }] : name === 'files' ? ['files', 'session'] : name === 'login' ? ['identity', 'standalone'] : name === 'root-ops' ? ['rootOps', true] : ['jobs', true]));
+}