@synopackageland/cli 0.5.3 → 0.6.1

package/dist/error-registry.js

@@ -1,7 +1,8 @@
 export const ERROR_REGISTRY = {
     "NATIVE_LAYOUT_INVALID": {
-        code: "NATIVE_LAYOUT_INVALID", description: "Native layout manifest、toolkit、hook 或產物不符合契約。",
-        suggestion: "檢查 dsm-package.yaml、SHA-256 pins、package privilege、ELF linkage 與 hook 診斷。"
+        code: "NATIVE_LAYOUT_INVALID",
+        description: "Native layout manifest, hook, toolkit or artifact violates the package-only contract.",
+        suggestion: "Use schema 2 with backend.kind: native; check paths, ELF linkage and checksum pins."
     },
     "COMPOSE_ROUTE_UNSUPPORTED": {
         "code": "COMPOSE_ROUTE_UNSUPPORTED",
@@ -150,13 +151,13 @@ export const ERROR_REGISTRY = {
     },
     "PROJECT_RUNTIME_EXCLUSIVE": {
         "code": "PROJECT_RUNTIME_EXCLUSIVE",
-        "description": "專案同時存在 compose.yaml 與 native.yaml，兩者互斥。",
-        "suggestion": "請選擇使用 compose.yaml（容器 App）或 native.yaml（原生 App），並刪除另一個檔案。"
+        "description": "專案同時存在 compose.yaml 與 dsm-package.yaml，兩者互斥。",
+        "suggestion": "請選擇使用 compose.yaml（容器 App）或 dsm-package.yaml（原生 App），並刪除另一個檔案。"
     },
     "COMPOSE_MISSING": {
         "code": "COMPOSE_MISSING",
-        "description": "找不到 compose.yaml 或 native.yaml。",
-        "suggestion": "請在專案根目錄建立 compose.yaml 或 native.yaml。"
+        "description": "找不到 compose.yaml 或 dsm-package.yaml。",
+        "suggestion": "請在專案根目錄建立 compose.yaml 或 dsm-package.yaml。"
     },
     "COMPOSE_SERVICE_NOT_FOUND": {
         "code": "COMPOSE_SERVICE_NOT_FOUND",
@@ -176,7 +177,7 @@ export const ERROR_REGISTRY = {
     "COMPOSE_BUILD_FORBIDDEN": {
         "code": "COMPOSE_BUILD_FORBIDDEN",
         "description": "D0 Compose route 禁止在 NAS install-time 使用 build:；build capability 永久拒收。",
-        "suggestion": "請移除 build:，改用已存在的 image（最好使用 image@sha256:... 固定 digest），再重新執行 validate。"
+        "suggestion": "請移除 build:，改用已存在的 image（最好使用 image@sha256:... 固定 digest），再重新執行 check。"
     },
     "COMPOSE_SOCKET_MOUNT_FORBIDDEN": {
         "code": "COMPOSE_SOCKET_MOUNT_FORBIDDEN",
@@ -271,242 +272,27 @@ export const ERROR_REGISTRY = {
     "COMPOSE_NOT_HEALTHY": {
         "code": "COMPOSE_NOT_HEALTHY",
         "description": "Compose 服務未能於時限內通過 healthcheck 達到 healthy 狀態。",
-        "suggestion": "請檢查容器健康檢查設定與應用程式日誌：synopkgland log --host <nas>。"
+        "suggestion": "請檢查容器健康檢查設定與應用程式日誌：synopkgland logs --host <nas>。"
     },
     "COMPOSE_NOT_RUNNING": {
         "code": "COMPOSE_NOT_RUNNING",
         "description": "Compose 服務未能於時限內維持 running 狀態。",
-        "suggestion": "請檢查容器啟動腳本與日誌以排除崩潰原因：synopkgland log --host <nas>。"
-    },
-    "NATIVE_LOAD_FAILED": {
-        "code": "NATIVE_LOAD_FAILED",
-        "description": "無法讀取或解析 native.yaml。",
-        "suggestion": "請確認 native.yaml 存在且為合法 YAML 格式。"
-    },
-    "NATIVE_SCHEMA_INVALID": {
-        "code": "NATIVE_SCHEMA_INVALID",
-        "description": "native.yaml schema 版本無效（必須為整數 1）。",
-        "suggestion": "請在 native.yaml 設定 schema: 1。"
-    },
-    "NATIVE_TARGETS_REQUIRED": {
-        "code": "NATIVE_TARGETS_REQUIRED",
-        "description": "native.yaml 缺少 targets 區塊。",
-        "suggestion": "請在 native.yaml 宣告 targets 區塊並指定 x86_64 或 aarch64 目標。"
-    },
-    "NATIVE_TARGETS_EMPTY": {
-        "code": "NATIVE_TARGETS_EMPTY",
-        "description": "native.yaml 中的 targets 區塊不可為空。",
-        "suggestion": "請在 native.yaml 的 targets 內至少定義一個架構目標（x86_64 或 aarch64）。"
-    },
-    "NATIVE_ARCH_UNKNOWN": {
-        "code": "NATIVE_ARCH_UNKNOWN",
-        "description": "native.yaml 定義了不受支援的架構目標名稱。",
-        "suggestion": "目標架構名稱僅支援 x86_64 與 aarch64。"
-    },
-    "NATIVE_TARGET_INVALID": {
-        "code": "NATIVE_TARGET_INVALID",
-        "description": "native.yaml 目標架構定義無效。",
-        "suggestion": "每個目標架構必須包含 path 或 url 下載來源設定。"
-    },
-    "NATIVE_TARGET_NOT_DECLARED": {
-        "code": "NATIVE_TARGET_NOT_DECLARED",
-        "description": "欲建置或部署的架構目標未在 native.yaml 中宣告。",
-        "suggestion": "請在 native.yaml 的 targets 補上該架構目標，或透過 --arch 指定已宣告的目標。"
-    },
-    "NATIVE_TARGET_SOURCE_EXCLUSIVE": {
-        "code": "NATIVE_TARGET_SOURCE_EXCLUSIVE",
-        "description": "目標架構不可同時包含 path 與 url，兩者互斥。",
-        "suggestion": "請在該目標架構中只保留 path（本機）或 url（遠端二進位檔）。"
-    },
-    "NATIVE_PATH_FORBIDDEN_IN_LISTING": {
-        "code": "NATIVE_PATH_FORBIDDEN_IN_LISTING",
-        "description": "公開上架審查禁止使用本機 path 來源的 native 目標。",
-        "suggestion": "請將 target 改為公開可下載的 url 並附帶 sha256 校驗碼。"
-    },
-    "NATIVE_SHA256_REQUIRED_IN_LISTING": {
-        "code": "NATIVE_SHA256_REQUIRED_IN_LISTING",
-        "description": "公開上架審查要求 url 目標必須提供 sha256 校驗碼。",
-        "suggestion": "請在 native.yaml 的 url 目標補上 64 位十六進位 sha256 欄位。"
-    },
-    "NATIVE_SHA256_INVALID": {
-        "code": "NATIVE_SHA256_INVALID",
-        "description": "sha256 校驗碼格式無效。",
-        "suggestion": "請提供恰好 64 字元的十六進位 SHA-256 字串。"
-    },
-    "NATIVE_STRIP_COMPONENTS_INVALID": {
-        "code": "NATIVE_STRIP_COMPONENTS_INVALID",
-        "description": "strip_components 必須是非負整數。",
-        "suggestion": "請在 native.yaml 將 strip_components 設為大於等於 0 的整數。"
-    },
-    "NATIVE_SERVICE_REQUIRED": {
-        "code": "NATIVE_SERVICE_REQUIRED",
-        "description": "native.yaml 缺少 service 區塊。",
-        "suggestion": "請在 native.yaml 補上 service 區塊並宣告 exec 與 args/env。"
-    },
-    "NATIVE_SERVICE_USER_FORBIDDEN": {
-        "code": "NATIVE_SERVICE_USER_FORBIDDEN",
-        "description": "native service 不允許自訂 user 欄位（固定以 package 使用者執行）。",
-        "suggestion": "請從 native.yaml 的 service 區塊移除 user 欄位。"
-    },
-    "NATIVE_SERVICE_SHELL_FIELD_FORBIDDEN": {
-        "code": "NATIVE_SERVICE_SHELL_FIELD_FORBIDDEN",
-        "description": "禁止在 native service 使用 command/shell 等字串欄位以免 shell injection。",
-        "suggestion": "請改用 exec（路徑）與 args（字串陣列）方式宣告啟動指令。"
-    },
-    "NATIVE_EXEC_REQUIRED": {
-        "code": "NATIVE_EXEC_REQUIRED",
-        "description": "native service 缺少 exec 執行檔路徑。",
-        "suggestion": "請在 native.yaml 的 service 區塊指定 exec: <相對路徑>。"
-    },
-    "NATIVE_EXEC_INVALID_PATH": {
-        "code": "NATIVE_EXEC_INVALID_PATH",
-        "description": "exec 必須是相對路徑，且不可包含 .. 或絕對路徑。",
-        "suggestion": "請指定相對於安裝根目錄的合法相對路徑，例如 exec: bin/app。"
-    },
-    "NATIVE_ARGS_INVALID": {
-        "code": "NATIVE_ARGS_INVALID",
-        "description": "service.args 必須是字串陣列。",
-        "suggestion": "請在 native.yaml 將 args 宣告為字串列表格式（例如 args: [\"--port\", \"8080\"]）。"
-    },
-    "NATIVE_ENV_INVALID": {
-        "code": "NATIVE_ENV_INVALID",
-        "description": "service.env 必須是 key-value 字串映射表。",
-        "suggestion": "請將 env 宣告為字典物件且每個值皆為字串。"
-    },
-    "NATIVE_PKGVAR_REQUIRED": {
-        "code": "NATIVE_PKGVAR_REQUIRED",
-        "description": "原生二進位 App 必須在 args 或 env 中引用 ${SYNOPKG_PKGVAR} 以指定資料路徑。",
-        "suggestion": "請在 native.yaml 的 service.args 或 service.env 加入 ${SYNOPKG_PKGVAR} 參數。"
-    },
-    "NATIVE_ARCH_FAMILY_REQUIRED": {
-        "code": "NATIVE_ARCH_FAMILY_REQUIRED",
-        "description": "建置原生 SPK 時缺少目標架構家族（x86_64 或 aarch64）。",
-        "suggestion": "請在指令加上 --arch x86_64 或 --arch aarch64。"
-    },
-    "NATIVE_ARCH_UNDETERMINED": {
-        "code": "NATIVE_ARCH_UNDETERMINED",
-        "description": "無法從目標 NAS 的 CPU 資訊自動判定架構家族。",
-        "suggestion": "請使用 --arch x86_64 或 --arch aarch64 明確指定目標架構。"
-    },
-    "NATIVE_PAYLOAD_BUNDLE_COLLISION": {
-        "code": "NATIVE_PAYLOAD_BUNDLE_COLLISION",
-        "description": "原生 payload 解壓縮內容與 App Bundle 核心保留檔衝突。",
-        "suggestion": "請檢查 payload 內容，避免在根目錄覆蓋 synology-app.yaml 或 native.yaml。"
-    },
-    "NATIVE_PAYLOAD_DOWNLOAD_FAILED": {
-        "code": "NATIVE_PAYLOAD_DOWNLOAD_FAILED",
-        "description": "下載原生二進位檔 payload 失敗。",
-        "suggestion": "請檢查 native.yaml 中的 url 是否有效且網路連線正常。"
-    },
-    "NATIVE_PAYLOAD_DOWNLOAD_INVALID": {
-        "code": "NATIVE_PAYLOAD_DOWNLOAD_INVALID",
-        "description": "下載的原生 payload 回傳內容無效。",
-        "suggestion": "請確認目標 URL 回傳了有效的二進位檔案內容。"
-    },
-    "NATIVE_PAYLOAD_DUPLICATE_ENTRY": {
-        "code": "NATIVE_PAYLOAD_DUPLICATE_ENTRY",
-        "description": "原生 payload 壓縮檔內包含重複的檔案路徑。",
-        "suggestion": "請重新打包原始檔案，確保壓縮檔內無重複 entry。"
-    },
-    "NATIVE_PAYLOAD_ERROR": {
-        "code": "NATIVE_PAYLOAD_ERROR",
-        "description": "處理原生二進位 payload 時發生未預期錯誤。",
-        "suggestion": "請檢查 payload 壓縮檔完整性或重新建置 SPK。"
-    },
-    "NATIVE_PAYLOAD_EXTRACTION_FAILED": {
-        "code": "NATIVE_PAYLOAD_EXTRACTION_FAILED",
-        "description": "解壓縮原生二進位 payload 失敗。",
-        "suggestion": "請確認壓縮檔格式正確無損壞，且支援 tar.gz / tar.xz / zip。"
-    },
-    "NATIVE_PAYLOAD_INVALID_HARDLINK": {
-        "code": "NATIVE_PAYLOAD_INVALID_HARDLINK",
-        "description": "原生 payload 含有無效或循環的 hardlink。",
-        "suggestion": "請移除壓縮檔中不合法的 hardlink 後重新打包。"
-    },
-    "NATIVE_PAYLOAD_INVALID_STRIP_COMPONENTS": {
-        "code": "NATIVE_PAYLOAD_INVALID_STRIP_COMPONENTS",
-        "description": "strip_components 設定超過了壓縮檔目錄層級深度。",
-        "suggestion": "請在 native.yaml 調整或減少 strip_components 數值。"
-    },
-    "NATIVE_PAYLOAD_INVALID_SYMLINK": {
-        "code": "NATIVE_PAYLOAD_INVALID_SYMLINK",
-        "description": "原生 payload 含有無效的符號連結。",
-        "suggestion": "請檢查壓縮檔內的 symlink 目標是否存在且合法。"
-    },
-    "NATIVE_PAYLOAD_INVALID_ZIP": {
-        "code": "NATIVE_PAYLOAD_INVALID_ZIP",
-        "description": "ZIP 壓縮檔格式無效或已損壞。",
-        "suggestion": "請檢查 zip 檔案完整性或重新打包。"
-    },
-    "NATIVE_PAYLOAD_SHA256_MISMATCH": {
-        "code": "NATIVE_PAYLOAD_SHA256_MISMATCH",
-        "description": "下載的 payload SHA-256 校驗碼與 native.yaml 宣告不符。",
-        "suggestion": "請更新 native.yaml 中的 sha256 欄位以符合實際檔案雜湊。"
-    },
-    "NATIVE_PAYLOAD_SOURCE_AMBIGUOUS": {
-        "code": "NATIVE_PAYLOAD_SOURCE_AMBIGUOUS",
-        "description": "目標架構同時宣告了 path 與 url，來源衝突。",
-        "suggestion": "請在該目標架構中只保留 path 或 url 其中一種來源。"
-    },
-    "NATIVE_PAYLOAD_SOURCE_REQUIRED": {
-        "code": "NATIVE_PAYLOAD_SOURCE_REQUIRED",
-        "description": "目標架構缺少 path 或 url 來源設定。",
-        "suggestion": "請在 native.yaml 的 targets 內為各架構補上 path 或 url。"
-    },
-    "NATIVE_PAYLOAD_SYMLINK_CYCLE": {
-        "code": "NATIVE_PAYLOAD_SYMLINK_CYCLE",
-        "description": "原生 payload 包含循環符號連結 (Symlink cycle)。",
-        "suggestion": "請移除壓縮檔中的循環 symlink。"
-    },
-    "NATIVE_PAYLOAD_UNSAFE_HARDLINK": {
-        "code": "NATIVE_PAYLOAD_UNSAFE_HARDLINK",
-        "description": "原生 payload hardlink 試圖連結至目標目錄外。",
-        "suggestion": "請確保 hardlink 僅指向 payload 目錄內部的有效檔案。"
-    },
-    "NATIVE_PAYLOAD_UNSAFE_PATH": {
-        "code": "NATIVE_PAYLOAD_UNSAFE_PATH",
-        "description": "原生 payload 含有路徑穿越 (Path traversal) 等不安全路徑。",
-        "suggestion": "請確保壓縮檔內無包含 .. 或絕對路徑的檔案名稱。"
-    },
-    "NATIVE_PAYLOAD_UNSAFE_SYMLINK": {
-        "code": "NATIVE_PAYLOAD_UNSAFE_SYMLINK",
-        "description": "原生 payload symlink 指向了安裝目錄之外。",
-        "suggestion": "請確保 symlink 僅指向 payload 目錄內部的相對目標。"
-    },
-    "NATIVE_PAYLOAD_UNSUPPORTED_ENTRY": {
-        "code": "NATIVE_PAYLOAD_UNSUPPORTED_ENTRY",
-        "description": "原生 payload 包含不支援的特殊檔案類型（如 device node 或 fifo）。",
-        "suggestion": "請從壓縮檔中移除特殊檔案，僅保留一般檔案、目錄與合法 symlink。"
-    },
-    "NATIVE_PAYLOAD_UNSUPPORTED_ZIP": {
-        "code": "NATIVE_PAYLOAD_UNSUPPORTED_ZIP",
-        "description": "不支援的 ZIP 特性（例如 ZIP64、多卷分割或密碼加密）。",
-        "suggestion": "請使用標準未加密的 ZIP 或改用 tar.gz 打包。"
-    },
-    "NATIVE_PAYLOAD_XZ_FAILED": {
-        "code": "NATIVE_PAYLOAD_XZ_FAILED",
-        "description": "解壓縮 tar.xz 失敗。",
-        "suggestion": "請確認本機已安裝 xz 工具且檔案未損壞。"
-    },
-    "NATIVE_PAYLOAD_XZ_UNAVAILABLE": {
-        "code": "NATIVE_PAYLOAD_XZ_UNAVAILABLE",
-        "description": "系統中找不到 xz 指令可用於解壓縮 .tar.xz 檔案。",
-        "suggestion": "請在作業系統中安裝 xz-utils 或改用 tar.gz 格式打包。"
+        "suggestion": "請檢查容器啟動腳本與日誌以排除崩潰原因：synopkgland logs --host <nas>。"
     },
     "BUILD_SPK_FAILED": {
         "code": "BUILD_SPK_FAILED",
         "description": "SPK 打包流程失敗。",
-        "suggestion": "請檢查 validate 錯誤與目錄檔案權限後重試。"
+        "suggestion": "請檢查 check 錯誤與目錄檔案權限後重試。"
     },
     "VALIDATION_FAILED": {
         "code": "VALIDATION_FAILED",
         "description": "專案未通過契約或安全驗證，終止部署。",
-        "suggestion": "請先執行 synopkgland validate 排除合約與 Compose 錯誤。"
+        "suggestion": "請先執行 synopkgland check 排除合約與 Compose 錯誤。"
     },
     "DEPLOY_FAILED": {
         "code": "DEPLOY_FAILED",
         "description": "部署至 NAS 時發生未分類錯誤。",
-        "suggestion": "請檢查 NAS 網路連線與日誌：synopkgland log --host <nas>。"
+        "suggestion": "請檢查 NAS 網路連線與日誌：synopkgland logs --host <nas>。"
     },
     "SHARE_VALUE_REQUIRED": {
         "code": "SHARE_VALUE_REQUIRED",
@@ -601,22 +387,12 @@ export const ERROR_REGISTRY = {
     "STANDALONE_SCHEMA_INVALID": {
         "code": "STANDALONE_SCHEMA_INVALID",
         "description": "dsm-package.yaml 的 schema 版本不受支援。",
-        "suggestion": "請將 schema 設為 1。"
-    },
-    "STANDALONE_PRIVILEGE_UNSUPPORTED": {
-        "code": "STANDALONE_PRIVILEGE_UNSUPPORTED",
-        "description": "privilege 只能是 none（只以 package 帳號執行）或 root（另加管理員核准的 root 操作）。",
-        "suggestion": "請改為 privilege: none，或用 privilege: root 搭配 root/<名稱>.sh。"
+        "suggestion": "請將 schema 設為 2，改用 backend.kind 與 capabilities。"
     },
     "STANDALONE_ROOT_OPS_MISSING": {
         "code": "STANDALONE_ROOT_OPS_MISSING",
-        "description": "privilege: root 但沒有任何 root 操作。",
-        "suggestion": "請在 root/ 放至少一個 <名稱>.sh，或改為 privilege: none。"
-    },
-    "STANDALONE_INTEGRATION_INVALID": {
-        "code": "STANDALONE_INTEGRATION_INVALID",
-        "description": "每包 helper 的 integration 宣告不合法。",
-        "suggestion": "使用 native-go、privilege: root、protocol: 1 和 workers map；不要自訂 helper_ 操作。"
+        "description": "capabilities.rootOps: true 但沒有任何 root 操作。",
+        "suggestion": "請在 root/ 放至少一個 <名稱>.sh，或改為 省略 capabilities.rootOps。"
     },
     "STANDALONE_DAEMON_INVALID": {
         "code": "STANDALONE_DAEMON_INVALID",
@@ -636,7 +412,7 @@ export const ERROR_REGISTRY = {
     "STANDALONE_DAEMON_ARTIFACT_REQUIRED": {
         "code": "STANDALONE_DAEMON_ARTIFACT_REQUIRED",
         "description": "組裝 daemon SPK 時缺少已建置的 supervisor。",
-        "suggestion": "透過 synopkgland build-spk 建置完整產物，不直接呼叫缺少 controller 的 assembler。"
+        "suggestion": "透過 synopkgland build 建置完整產物，不直接呼叫缺少 controller 的 assembler。"
     },
     "STANDALONE_SHARED_FOLDER_INVALID": {
         "code": "STANDALONE_SHARED_FOLDER_INVALID",
@@ -646,52 +422,17 @@ export const ERROR_REGISTRY = {
     "STANDALONE_BACKGROUND_INVALID": {
         "code": "STANDALONE_BACKGROUND_INVALID",
         "description": "套件背景工作的宣告不符合固定 worker 契約。",
-        "suggestion": "只寫 background: { worker: sha256-v1 }，使用 backend.go，且不要與 daemon 或 integration 並用；背景程序固定以套件帳號執行。"
+        "suggestion": "只寫 capabilities.jobs: true 或 { worker: sha256-v1 }，使用 backend.kind: go，且不要與 daemon 或 integration 並用；背景程序固定以套件帳號執行。"
     },
     "STANDALONE_BACKGROUND_BUILD_FAILED": {
         "code": "STANDALONE_BACKGROUND_BUILD_FAILED",
         "description": "無法建置套件的背景 worker。",
-        "suggestion": "安裝 Go 1.25 以上，確認 backend 含 cmd/background-worker（可用 synopkgland init --background 建立），並檢查 compiler stderr。"
+        "suggestion": "安裝 Go 1.25 以上，確認 backend 含 cmd/background-worker（可用 synopkgland init -t native-go --with jobs 建立），並檢查 compiler stderr。"
     },
     "STANDALONE_BACKGROUND_ARTIFACT_REQUIRED": {
         "code": "STANDALONE_BACKGROUND_ARTIFACT_REQUIRED",
         "description": "組裝背景工作 SPK 時缺少已建置的 worker。",
-        "suggestion": "透過 synopkgland build-spk 建置完整產物，不直接呼叫缺少 worker 的 assembler。"
-    },
-    "HELPER_WORKER_UNSAFE": {
-        "code": "HELPER_WORKER_UNSAFE",
-        "description": "worker inventory 檔案不在專案內或不是一般檔案。",
-        "suggestion": "使用專案內的一般檔案，不接受 symlink。"
-    },
-    "HELPER_WORKERS_TOO_LARGE": {
-        "code": "HELPER_WORKERS_TOO_LARGE",
-        "description": "worker inventory payload 超過 1 MiB。",
-        "suggestion": "減少 worker inventory 檔案大小。"
-    },
-    "HELPER_TASK_TOO_LARGE": {
-        "code": "HELPER_TASK_TOO_LARGE",
-        "description": "helper task 超過 4095 bytes 保守限制。",
-        "suggestion": "縮短固定 literal；不要內嵌 binary 或將授權改為可寫 script 路徑。"
-    },
-    "HELPER_METADATA_TOO_LARGE": {
-        "code": "HELPER_METADATA_TOO_LARGE",
-        "description": "helper scheduler metadata 超過 8191 bytes 限制。",
-        "suggestion": "減少 metadata 並核對 DSM readback 的 exact script。"
-    },
-    "HELPER_GO_REQUIRED": {
-        "code": "HELPER_GO_REQUIRED",
-        "description": "目前 integration 需要 Go backend。",
-        "suggestion": "使用現有 native-go 模板。"
-    },
-    "HELPER_BUILD_FAILED": {
-        "code": "HELPER_BUILD_FAILED",
-        "description": "Go helper 編譯失敗。",
-        "suggestion": "檢查 Go toolchain 與 backend/cmd/helper 編譯錯誤。"
-    },
-    "HELPER_ARTIFACT_REQUIRED": {
-        "code": "HELPER_ARTIFACT_REQUIRED",
-        "description": "integration SPK 缺少已建置的 helper artifact。",
-        "suggestion": "使用現有 buildStandalone pipeline 建置完整 helper 與 immutable inventory。"
+        "suggestion": "透過 synopkgland build 建置完整產物，不直接呼叫缺少 worker 的 assembler。"
     },
     "STANDALONE_ROOT_OP_INVALID": {
         "code": "STANDALONE_ROOT_OP_INVALID",
@@ -700,8 +441,8 @@ export const ERROR_REGISTRY = {
     },
     "STANDALONE_ROOT_OPS_UNUSED": {
         "code": "STANDALONE_ROOT_OPS_UNUSED",
-        "description": "專案有 root/ 資料夾，但 privilege 不是 root。",
-        "suggestion": "要使用 root 操作請設 privilege: root；不需要就刪除 root/。"
+        "description": "專案有 root/ 資料夾，但 capabilities.rootOps 未啟用。",
+        "suggestion": "要使用 root 操作請設 capabilities.rootOps: true；不需要就刪除 root/。"
     },
     "STANDALONE_PACKAGE_INVALID": {
         "code": "STANDALONE_PACKAGE_INVALID",
@@ -745,13 +486,13 @@ export const ERROR_REGISTRY = {
     },
     "STANDALONE_BINARY_ARCH_MISSING": {
         "code": "STANDALONE_BINARY_ARCH_MISSING",
-        "description": "arches 宣告的架構沒有對應的 backend.binary 執行檔。",
-        "suggestion": "請在 backend.binary 補上該架構的執行檔，或從 arches 移除它。"
+        "description": "arches 宣告的架構沒有對應的 backend.files 執行檔。",
+        "suggestion": "請在 backend.files 補上該架構的執行檔，或從 arches 移除它。"
     },
     "STANDALONE_BINARY_MISSING": {
         "code": "STANDALONE_BINARY_MISSING",
         "description": "找不到 backend 執行檔。",
-        "suggestion": "請確認 backend.binary 指向的檔案存在。"
+        "suggestion": "請確認 backend.files 指向的檔案存在。"
     },
     "STANDALONE_BINARY_NOT_REGULAR": {
         "code": "STANDALONE_BINARY_NOT_REGULAR",
@@ -771,7 +512,7 @@ export const ERROR_REGISTRY = {
     "STANDALONE_BINARY_ARCH_MISMATCH": {
         "code": "STANDALONE_BINARY_ARCH_MISMATCH",
         "description": "backend 執行檔的 CPU 架構與目標不符。",
-        "suggestion": "請為該架構重新編譯，或修正 backend.binary 的對應。"
+        "suggestion": "請為該架構重新編譯，或修正 backend.files 的對應。"
     },
     "STANDALONE_BINARY_DYNAMIC": {
         "code": "STANDALONE_BINARY_DYNAMIC",
@@ -798,16 +539,6 @@ export const ERROR_REGISTRY = {
         "description": "ui.build 設定不合法。",
         "suggestion": "ui.build.command 必須是 argv 字串陣列（不經 shell），例如 [npm, run, build]。"
     },
-    "STANDALONE_IDENTITY_BUILD_FAILED": {
-        "code": "STANDALONE_IDENTITY_BUILD_FAILED",
-        "description": "選用的 Better Auth bundle 建置失敗。",
-        "suggestion": "在 node/ 執行 npm ci 與 npm run build，確認 Node 22 以上。"
-    },
-    "STANDALONE_IDENTITY_PAYLOAD_INVALID": {
-        "code": "STANDALONE_IDENTITY_PAYLOAD_INVALID",
-        "description": "Better Auth bundle 不是專案內的有界一般檔案。",
-        "suggestion": "重新建置 node/dist/app.mjs，移除 symlink 並確認大小。"
-    },
     "STANDALONE_UI_BUILD_FAILED": {
         "code": "STANDALONE_UI_BUILD_FAILED",
         "description": "UI build 指令失敗。",
@@ -836,7 +567,7 @@ export const ERROR_REGISTRY = {
     "STANDALONE_GO_MISSING": {
         "code": "STANDALONE_GO_MISSING",
         "description": "找不到 go 指令。",
-        "suggestion": "請安裝 Go 1.25 以上版本（https://go.dev/dl/），或改用 backend.binary 打包既有執行檔。"
+        "suggestion": "請安裝 Go 1.25 以上版本（https://go.dev/dl/），或改用 backend.files 打包既有執行檔。"
     },
     "STANDALONE_GO_BUILD_FAILED": {
         "code": "STANDALONE_GO_BUILD_FAILED",
@@ -889,6 +620,52 @@ export const ERROR_REGISTRY = {
         "suggestion": "設定更高的有效 version/build 再部署。"
     }
 };
+for (const [code, description, suggestion] of [
+    ["CAPABILITY_INVALID", "能力宣告不合法。", "使用 files: session、jobs: true 或 {worker: sha256-v1}、identity: standalone、rootOps: true。"],
+    ["CAPABILITY_UNSUPPORTED", "這個 runtime 不支援所選能力。", "files、jobs、identity 需要 backend.kind: go；compose 不支援原生能力。"],
+    ["CAPABILITY_COMBINATION_INVALID", "能力與 runtime 或 UI 組合不合法。", "daemon 不能搭配 capabilities.jobs；identity/login 需要 vue UI（--ui vue）。"],
+    ["ADD_FILE_CONFLICT", "既有檔案與 SDK overlay 衝突。", "先移動或合併列出的衝突檔案再執行 add；CLI 不覆寫不同內容。"],
+])
+    ERROR_REGISTRY[code] = { code, description, suggestion };
+ERROR_REGISTRY["ADD_LAYOUT_UNSUPPORTED"] = { "code": "ADD_LAYOUT_UNSUPPORTED", "description": "SDK overlay 需要標準 backend 目錄。", "suggestion": "使用 backend.dir: backend，或手動合併 SDK overlay。" };
+ERROR_REGISTRY["MIN_DSM_CONTAINER_FLOOR"] = { "code": "MIN_DSM_CONTAINER_FLOOR", "description": "Compose 最低 DSM 版本過低。", "suggestion": "Compose 需要 DSM 7.2.1-69057 或以上。" };
+ERROR_REGISTRY["MIN_DSM_INVALID"] = { "code": "MIN_DSM_INVALID", "description": "最低 DSM 版本格式不合法。", "suggestion": "指定 7.x release 或完整 7.x-build。" };
+ERROR_REGISTRY["NOTICE_UNSAFE"] = { "code": "NOTICE_UNSAFE", "description": "授權檔案不符合一般檔案限制。", "suggestion": "移除 symlink、特殊檔與超大授權檔案。" };
+ERROR_REGISTRY["NOTICE_MISSING"] = { "code": "NOTICE_MISSING", "description": "缺少第三方授權資訊。", "suggestion": "重新安裝模板依賴並產生 third-party notices。" };
+ERROR_REGISTRY["PROJECT_NOT_FOUND"] = { "code": "PROJECT_NOT_FOUND", "description": "找不到專案 manifest。", "suggestion": "在專案根目錄執行或使用 --project。" };
+ERROR_REGISTRY["CLI_OPTION_INVALID"] = { "code": "CLI_OPTION_INVALID", "description": "指令選項不合法。", "suggestion": "使用 --help 核對選項與可用 runtime。" };
+ERROR_REGISTRY["CLI_OUTPUT_ARCH_REQUIRED"] = { "code": "CLI_OUTPUT_ARCH_REQUIRED", "description": "輸出單一檔案需要指定架構。", "suggestion": "-o 搭配單一 --arch，或使用 --out-dir。" };
+ERROR_REGISTRY["HOST_REQUIRED"] = { "code": "HOST_REQUIRED", "description": "沒有指定 NAS。", "suggestion": "使用 --host <profile>；deploy 本地檢查可用 --dry-run。" };
+ERROR_REGISTRY["NAS_CREDENTIALS_MISSING"] = { "code": "NAS_CREDENTIALS_MISSING", "description": "找不到 NAS 憑證。", "suggestion": "設定 synoagentcli profile 或 DSM_URL／DSM_PASSWORD。" };
+ERROR_REGISTRY["SPK_INSPECTION_FAILED"] = { "code": "SPK_INSPECTION_FAILED", "description": "SPK 產物檢查失敗。", "suggestion": "修正 findings 並重新 build。" };
+ERROR_REGISTRY["IMAGE_PIN_REQUIRED"] = { "code": "IMAGE_PIN_REQUIRED", "description": "映像 digest 尚未固定。", "suggestion": "執行 images pin。" };
+ERROR_REGISTRY["INIT_TEMPLATE_REQUIRED"] = { "code": "INIT_TEMPLATE_REQUIRED", "description": "未指定模板。", "suggestion": "使用 -t native-go、binary 或 compose。" };
+ERROR_REGISTRY["INIT_TEMPLATE_UNKNOWN"] = { "code": "INIT_TEMPLATE_UNKNOWN", "description": "未知模板。", "suggestion": "使用 -t native-go、binary 或 compose。" };
+ERROR_REGISTRY["CLI_ARCH_INVALID"] = { "code": "CLI_ARCH_INVALID", "description": "架構選項不合法。", "suggestion": "使用 x86_64 或 aarch64。" };
+ERROR_REGISTRY["NATIVE_ARCH_UNDETERMINED"] = { "code": "NATIVE_ARCH_UNDETERMINED", "description": "無法判定 NAS 架構。", "suggestion": "指定 --arch x86_64 或 aarch64。" };
+ERROR_REGISTRY["DEVELOPMENT_INSTANCE_UNSUPPORTED"] = { "code": "DEVELOPMENT_INSTANCE_UNSUPPORTED", "description": "原生專案不支援 --dev。", "suggestion": "init 時指定不同 package ID。" };
+ERROR_REGISTRY["INIT_TEMPLATE_INVALID"] = { "code": "INIT_TEMPLATE_INVALID", "description": "未知模板。", "suggestion": "使用 -t native-go、binary 或 compose。" };
+ERROR_REGISTRY["INIT_OPTIONS_UNSUPPORTED"] = { "code": "INIT_OPTIONS_UNSUPPORTED", "description": "選項不適用於這個模板。", "suggestion": "--from 僅 compose；--ui 僅 native-go。" };
+ERROR_REGISTRY["INIT_TARGET_NOT_EMPTY"] = { "code": "INIT_TARGET_NOT_EMPTY", "description": "init 目錄已有衝突檔案。", "suggestion": "使用空目錄；既有專案新增能力使用 add。" };
+ERROR_REGISTRY["INIT_COMPOSE_INVALID"] = { "code": "INIT_COMPOSE_INVALID", "description": "匯入的 Compose 不合法。", "suggestion": "--from 指向有 services 的 YAML 檔案。" };
+ERROR_REGISTRY["INIT_BINARY_BUILD_FAILED"] = { "code": "INIT_BINARY_BUILD_FAILED", "description": "binary 範例編譯失敗。", "suggestion": "安裝 Go 或提供自己的靜態 CGI ELF。" };
+ERROR_REGISTRY["INIT_SHARED_FOLDER_INVALID"] = { "code": "INIT_SHARED_FOLDER_INVALID", "description": "共用資料夾選項不合法。", "suggestion": "使用 select 或 create；create 加上 --shared-folder-name。" };
+ERROR_REGISTRY["INIT_UI_INVALID"] = { "code": "INIT_UI_INVALID", "description": "UI 選項不合法。", "suggestion": "使用 --ui vue 或 plain。" };
+ERROR_REGISTRY["INIT_PACKAGE_INVALID"] = { "code": "INIT_PACKAGE_INVALID", "description": "套件名稱不合法。", "suggestion": "使用英文字母開頭的 2–64 字英數字名稱。" };
+ERROR_REGISTRY["INIT_DISPLAY_NAME_INVALID"] = { "code": "INIT_DISPLAY_NAME_INVALID", "description": "顯示名稱不合法。", "suggestion": "使用單行且不含引號或反斜線的文字。" };
+ERROR_REGISTRY["STANDALONE_API_PERMISSIONS_CHANGED"] = { "code": "STANDALONE_API_PERMISSIONS_CHANGED", "description": "建置中 API policy 變動。", "suggestion": "固定 permissions.json 後重新 check/build。" };
+ERROR_REGISTRY["STANDALONE_API_PERMISSIONS_INVALID"] = { "code": "STANDALONE_API_PERMISSIONS_INVALID", "description": "API policy 不合法。", "suggestion": "修正 backend/internal/api/permissions.json。" };
+ERROR_REGISTRY["CLI_OPTION_UNKNOWN"] = { "code": "CLI_OPTION_UNKNOWN", "description": "未知 CLI 選項。", "suggestion": "使用 --help 查看目前支援的選項。" };
+ERROR_REGISTRY["CLI_ARGUMENT_MISSING"] = { "code": "CLI_ARGUMENT_MISSING", "description": "缺少指令引數。", "suggestion": "使用 --help 查看必填引數。" };
+ERROR_REGISTRY["CLI_OPTION_MISSING"] = { "code": "CLI_OPTION_MISSING", "description": "缺少必要選項。", "suggestion": "使用 --help 查看必要選項。" };
+ERROR_REGISTRY["CLI_OPTION_ARGUMENT_MISSING"] = { "code": "CLI_OPTION_ARGUMENT_MISSING", "description": "選項缺少值。", "suggestion": "補上選項需要的值。" };
+ERROR_REGISTRY["CLI_COMMAND_UNKNOWN"] = { "code": "CLI_COMMAND_UNKNOWN", "description": "未知指令。", "suggestion": "使用 synopkgland --help 查看指令。" };
+ERROR_REGISTRY["COMMAND_FAILED"] = { "code": "COMMAND_FAILED", "description": "指令執行失敗。", "suggestion": "查看 message 與 stderr，修正問題後重試。" };
+ERROR_REGISTRY["DEPLOY_PLAN_INVALID"] = { "code": "DEPLOY_PLAN_INVALID", "description": "部署計畫與 runtime 不符。", "suggestion": "重新 check 並產生部署計畫。" };
+ERROR_REGISTRY["DEPLOY_ARCH_UNDETERMINED"] = { "code": "DEPLOY_ARCH_UNDETERMINED", "description": "無法判定 NAS 架構。", "suggestion": "使用 --arch x86_64 或 aarch64。" };
+ERROR_REGISTRY["DEPLOY_BUILD_OUTPUT_INVALID"] = { "code": "DEPLOY_BUILD_OUTPUT_INVALID", "description": "部署建置輸出數量不符。", "suggestion": "指定單一架構並重新 build。" };
 export function getErrorCode(code) {
     return ERROR_REGISTRY[code];
 }
+for (const code of ["EXECUTOR_BUILD_FAILED", "EXECUTOR_PIN_REQUIRED", "EXECUTOR_POLICY", "EXECUTOR_PACKAGE", "EXECUTOR_DIGEST", "EXECUTOR_TASK_PERCENT", "EXECUTOR_TASK_LENGTH"])
+    ERROR_REGISTRY[code] = { code, description: "Executor build or pinned task definition is invalid.", suggestion: "Check manifest capabilities and executor compiler output; rebuild before administrator approval." };

package/dist/host/dsm-client.js

@@ -1,5 +1,5 @@
 import { spawnSync } from "node:child_process";
-import { listShareNamesWithSynoagentcli, lookupSharePathWithSynoagentcli } from "./share-lookup.js";
+import { listShareNamesWithSynoagentcli, lookupSharePathWithSynoagentcli, } from "./share-lookup.js";
 import { createSynoagentcliApiCall, fetchSharePermissions, fetchUserGroups, } from "./share-permission-lookup.js";
 import { fetchPortInfo } from "./port-info-lookup.js";
 import { dsmFetch } from "./dsm-http.js";
@@ -69,8 +69,12 @@ function createDsmNasHost(credentials, profileName) {
             session: "FileStation",
             format: "cookie",
         });
-        const response = await dsmFetch(`${dsmOrigin}/webapi/entry.cgi`, { method: "POST", headers: { "content-type": "application/x-www-form-urlencoded" }, body: query });
-        const login = await response.json();
+        const response = await dsmFetch(`${dsmOrigin}/webapi/entry.cgi`, {
+            method: "POST",
+            headers: { "content-type": "application/x-www-form-urlencoded" },
+            body: query,
+        });
+        const login = (await response.json());
         if (!response.ok || login.success !== true)
             throw new Error("DSM login failed");
         const setCookie = typeof response.headers.getSetCookie === "function"
@@ -90,11 +94,71 @@ function createDsmNasHost(credentials, profileName) {
         async installFromLocalSpk(input) {
             await ensureLogin();
             await installPackageFromLocalSpk({
-                dsmOrigin, cookieHeader: cookieHeader ?? "",
-                packageId: input.packageId, spkPath: input.spkPath,
-                version: input.version, profileName, extraValues: input.extraValues,
+                dsmOrigin,
+                cookieHeader: cookieHeader ?? "",
+                packageId: input.packageId,
+                spkPath: input.spkPath,
+                version: input.version,
+                profileName,
+                extraValues: input.extraValues,
             });
         },
+        async getExecutorStatus(packageIdentity) {
+            try {
+                await ensureLogin();
+                const response = await dsmFetch(`${dsmOrigin}/webman/3rdparty/${encodeURIComponent(packageIdentity)}/cgi/api.cgi`, {
+                    method: "POST", headers: { cookie: cookieHeader ?? "", "content-type": "application/json" },
+                    body: JSON.stringify({ method: "executor.status", params: {} }),
+                });
+                const body = await response.json();
+                return body.success ? body.data : undefined;
+            }
+            catch {
+                return undefined;
+            }
+        },
+        async getRootTaskInventory(packageIdentity) {
+            try {
+                await ensureLogin();
+                const call = async (api, method, version, params) => {
+                    const query = new URLSearchParams({ api, method, version: String(version) });
+                    for (const [key, value] of Object.entries(params))
+                        query.set(key, value === "" || typeof value === "object" || typeof value === "boolean" ? JSON.stringify(value) : String(value));
+                    const response = await dsmFetch(`${dsmOrigin}/webapi/entry.cgi?${query}`, { headers: { cookie: cookieHeader ?? "" } });
+                    const body = await response.json();
+                    if (!body.success)
+                        throw Object.assign(new Error(`DSM ${body.error?.code ?? "error"}: scheduler readback denied; check the administrator session. No retry was made.`), { code: body.error?.code });
+                    return body.data;
+                };
+                const records = await call("SYNO.Core.EventScheduler", "list", 1, {});
+                if (!Array.isArray(records))
+                    throw new Error("Invalid EventScheduler readback.");
+                const tasks = [];
+                for (const summary of records) {
+                    if (summary?.task_name !== `${packageIdentity} executor boot`)
+                        continue;
+                    const detail = await call("SYNO.Core.EventScheduler", "get", 1, { task_name: summary.task_name });
+                    if (!detail || detail.task_name !== summary.task_name)
+                        throw new Error("Invalid boot task readback.");
+                    tasks.push({ ...detail, name: detail.task_name, kind: "boot" });
+                }
+                const listed = await call("SYNO.Core.TaskScheduler", "list", 3, { start: 0, limit: 500 });
+                if (!Array.isArray(listed?.tasks) || !Number.isInteger(listed.total) || listed.total !== listed.tasks.length || listed.total > 500)
+                    throw new Error("Incomplete TaskScheduler readback.");
+                for (const summary of listed.tasks) {
+                    if (summary?.name !== `${packageIdentity} executor control`)
+                        continue;
+                    const detail = await call("SYNO.Core.TaskScheduler", "get", 4, { id: summary.id, real_owner: summary.real_owner });
+                    if (!detail || String(detail.id) !== String(summary.id) || detail.name !== summary.name)
+                        throw new Error("Invalid control task readback.");
+                    tasks.push({ ...detail, kind: "control" });
+                }
+                return { tasks, total: tasks.length };
+            }
+            catch (e) {
+                return { tasks: [], total: 0, unsupported: [102, 103, 104].includes(e.code), error: e.message };
+            }
+        },
         async getArchFamily() {
             await ensureLogin();
             const response = await dsmFetch(`${dsmOrigin}/webapi/entry.cgi?api=SYNO.Core.System&version=1&method=info`, { headers: { cookie: cookieHeader ?? "" } });
@@ -127,7 +191,15 @@ function createDsmNasHost(credentials, profileName) {
         },
         async resolveHomesPath() {
             try {
-                const result = synoagentcli(["dsm", "control-panel", "user-group", "advanced", "get", "--section", "home"], profileName);
+                const result = synoagentcli([
+                    "dsm",
+                    "control-panel",
+                    "user-group",
+                    "advanced",
+                    "get",
+                    "--section",
+                    "home",
+                ], profileName);
                 return homesPathFromDsmUserHomeRead(result);
             }
             catch {

package/dist/host/types.d.ts

@@ -7,6 +7,12 @@ export interface DeployIdentity {
     displayname: string;
     developmentInstance: boolean;
 }
+export interface RootTaskInventory {
+    unsupported?: boolean;
+    error?: string;
+    tasks: Record<string, unknown>[];
+    total: number;
+}
 export interface NasHost {
     readonly dsmOrigin: string;
     installFromLocalSpk(input: {
@@ -20,6 +26,13 @@ export interface NasHost {
      * undefined when the DSM answer does not map to a family we ship, so the
      * caller refuses instead of guessing.
      */
+    /** Complete DSM scheduler task details; undefined means readback could not be verified. */
+    getRootTaskInventory?(packageIdentity: string): Promise<RootTaskInventory | undefined>;
+    getExecutorStatus?(packageIdentity: string): Promise<{
+        ready: boolean;
+        executor_digest: string;
+        policy_digest: string;
+    } | undefined>;
     getArchFamily?(): Promise<"x86_64" | "aarch64" | undefined>;
     /** List the current logical Shared Folder names using an administrator session. */
     listShareNames?(): Promise<string[]>;