@synopackageland/cli 0.7.0 → 0.7.1

package/dist/deploy/plan.js

@@ -3,14 +3,18 @@ import { loadContract } from "../contract/load.js";
 import { validateProject } from "../validate.js";
 import { findStandaloneRoot, loadStandaloneManifest, } from "../standalone/manifest.js";
 import { buildStandalone } from "../standalone/build.js";
+import { buildNativeLayout, isNativeLayout, loadNativeLayout } from "../standalone/native-layout.js";
 import { resolveDeployIdentity } from "./identity.js";
 import { nextDeployVersion } from "./spk-version.js";
+import { resolveNativeInstallValues } from "./native-install-values.js";
 function fail(code, message) {
     return Object.assign(new Error(`[${code}] ${message}`), { code });
 }
 /** Purely local planning: no credentials, network, build or installation. */
 export function planDeployment(root, options = {}) {
     const standalone = findStandaloneRoot(root);
+    if (standalone && isNativeLayout(standalone))
+        return planNativeLayout(standalone, options);
     if (standalone) {
         const validation = validateProject(findProjectRoot(standalone));
         if (!validation.ok)
@@ -33,7 +37,7 @@ export function planDeployment(root, options = {}) {
             transport: "dsm-local-spk",
             notes: m.capabilities.rootOps || m.capabilities.delegate
                 ? [
-                    "Installation does not mean ready. Approve boot and control tasks once in the App window; executor or policy digest changes require approval again.",
+                    "Installation does not mean ready. Approve boot and control tasks once in the App window. An executor-only upgrade stays ready without approval (INFO anchors the executor digest); a policy digest change requires approval again.",
                 ]
                 : [],
         };
@@ -59,7 +63,56 @@ export function planDeployment(root, options = {}) {
         ],
     };
 }
-export async function deployStandalone(plan, host) {
+/** DSM reports the aarch64 family; a native layout may name it armv8. */
+function layoutArchFor(arches, family) {
+    const names = family === "aarch64" ? ["aarch64", "armv8"] : [family];
+    return names.find((name) => arches.includes(name));
+}
+function loadLayout(root) {
+    const loaded = loadNativeLayout(root);
+    if (!loaded.ok)
+        throw fail(loaded.errors[0].code, loaded.errors.map((e) => e.message).join("\n"));
+    return loaded.manifest;
+}
+function planNativeLayout(root, options) {
+    const m = loadLayout(root);
+    if (options.dev)
+        throw fail("DEVELOPMENT_INSTANCE_UNSUPPORTED", "--dev is not supported for a native layout; choose a distinct package name");
+    if (options.arch && !layoutArchFor(m.arches, options.arch))
+        throw fail("STANDALONE_ARCH_NOT_DECLARED", `Architecture not declared: ${options.arch}; add it to dsm-package.yaml arches to deploy it`);
+    return {
+        root,
+        kind: "native-layout",
+        packageId: m.package,
+        version: `${m.version}-${String(m.build).padStart(4, "0")}`,
+        arch: options.arch,
+        capabilities: [],
+        transport: "dsm-local-spk",
+        notes: [],
+    };
+}
+async function buildForDeploy(plan, arch, installed, options) {
+    if (plan.kind === "native-layout") {
+        const m = loadLayout(plan.root);
+        const layoutArch = layoutArchFor(m.arches, arch);
+        if (!layoutArch)
+            throw fail("STANDALONE_ARCH_NOT_DECLARED", `Architecture not declared: ${arch}; add it to dsm-package.yaml arches to deploy it`);
+        const name = Object.keys(options.params ?? {})[0];
+        if (name)
+            throw fail("DEPLOY_PARAM_UNDECLARED", `${m.package} has no install wizard values; remove --param ${name}.`);
+        const { outputs } = await buildNativeLayout({ root: plan.root, arches: [layoutArch], run: options.run });
+        return { outputs, extraValues: {} };
+    }
+    const loaded = loadStandaloneManifest(plan.root);
+    if (!loaded.ok)
+        throw fail(loaded.errors[0].code, loaded.errors.map((e) => e.message).join("\n"));
+    const values = resolveNativeInstallValues(loaded.manifest, options.params ?? {}, { installed });
+    if (!values.ok)
+        throw fail(values.code, values.message);
+    const { outputs } = await buildStandalone({ root: plan.root, arches: [arch], run: options.run });
+    return { outputs, extraValues: values.extraValues };
+}
+export async function deployStandalone(plan, host, options = {}) {
     if (plan.kind === "container")
         throw fail("DEPLOY_PLAN_INVALID", "Expected native-go or binary deployment plan");
     const arch = plan.arch ?? (await host.getArchFamily?.());
@@ -70,16 +123,14 @@ export async function deployStandalone(plan, host) {
         nextDeployVersion(plan.version, installed) !== plan.version) {
         throw fail("DEPLOY_VERSION_INVALID", `Increase dsm-package.yaml version/build above installed ${installed}`);
     }
-    const { outputs } = await buildStandalone({
-        root: plan.root,
-        arches: [arch],
-    });
+    const { outputs, extraValues } = await buildForDeploy(plan, arch, Boolean(installed), options);
     if (outputs.length !== 1)
         throw fail("DEPLOY_BUILD_OUTPUT_INVALID", "Expected one SPK");
     await host.installFromLocalSpk({
         packageId: plan.packageId,
         version: plan.version,
         spkPath: outputs[0],
+        extraValues,
     });
     return outputs[0];
 }

package/dist/error-registry.js

@@ -97,12 +97,12 @@ export const ERROR_REGISTRY = {
     "GATEWAY_GO_MISSING": {
         "code": "GATEWAY_GO_MISSING",
         "description": "建置 DSM 驗證閘道需要 Go，但找不到 go 指令。",
-        "suggestion": "請安裝 Go 1.24 以上版本（https://go.dev/dl/），或在 integration.web.access 明確選 public。"
+        "suggestion": "請安裝 Go 1.21 以上版本（https://go.dev/dl/，建置時固定使用 go1.26.9），或在 integration.web.access 明確選 public。"
     },
     "GATEWAY_BUILD_FAILED": {
         "code": "GATEWAY_BUILD_FAILED",
         "description": "DSM 驗證閘道建置失敗或產出不是對應架構的靜態 ELF。",
-        "suggestion": "請查看 go build 輸出；確認 Go 版本 1.24 以上且 templates/_gateway 未被修改。"
+        "suggestion": "請查看 go build 輸出；閘道固定以 go1.26.9 建置，離線時請安裝 go1.26.9 或讓 GOPROXY 可提供 golang.org/toolchain，並確認 templates/_gateway 未被修改。"
     },
     "CONTRACT_INVALID_STRING": {
         "code": "CONTRACT_INVALID_STRING",
@@ -346,8 +346,13 @@ export const ERROR_REGISTRY = {
     },
     "DEPLOY_PARAM_UNDECLARED": {
         "code": "DEPLOY_PARAM_UNDECLARED",
-        "description": "deploy --param 提供了契約未宣告的 Install Parameter。",
-        "suggestion": "請只傳 synology-app.yaml install 中宣告的 string 或 boolean 名稱。"
+        "description": "deploy --param 提供了契約未宣告的 Install Parameter，或 native-go／binary 套件沒有的安裝精靈值。",
+        "suggestion": "Compose 請只傳 synology-app.yaml install 中宣告的 string 或 boolean 名稱；native-go／binary 只接受 install-selected delegate 的 delegate_share 或 delegate_home。"
+    },
+    "DEPLOY_PARAM_REQUIRED": {
+        "code": "DEPLOY_PARAM_REQUIRED",
+        "description": "首次安裝 install-selected delegate 套件時沒有提供安裝精靈的範圍值，preinst 會拒絕安裝。",
+        "suggestion": "加上 --param delegate_share=<共用資料夾> 或 --param delegate_home=true 再部署。"
     },
     "DEPLOY_PARAM_TYPE_INVALID": {
         "code": "DEPLOY_PARAM_TYPE_INVALID",
@@ -412,7 +417,7 @@ export const ERROR_REGISTRY = {
     "STANDALONE_DAEMON_BUILD_FAILED": {
         "code": "STANDALONE_DAEMON_BUILD_FAILED",
         "description": "無法建置套件 daemon 的 Go supervisor。",
-        "suggestion": "安裝 Go 1.24 以上並檢查 compiler stderr；NAS 不需要 Go toolchain。"
+        "suggestion": "安裝 Go 1.21 以上（建置固定使用 go1.26.9，離線時請先備妥）並檢查 compiler stderr；NAS 不需要 Go toolchain。"
     },
     "STANDALONE_DAEMON_PAYLOAD_INVALID": {
         "code": "STANDALONE_DAEMON_PAYLOAD_INVALID",
@@ -685,7 +690,7 @@ export function getErrorCode(code) {
     return ERROR_REGISTRY[code];
 }
 for (const [code, description, suggestion] of [
-    ["EXECUTOR_BUILD_FAILED", "executor 或 lifecycle helper 編譯失敗，或 CLI 套件缺少 executor 原始碼。", "確認已安裝 Go，查看訊息中的編譯器輸出；原始碼缺少時重新安裝 CLI。"],
+    ["EXECUTOR_BUILD_FAILED", "executor 或 lifecycle helper 編譯失敗，或 CLI 套件缺少 executor 原始碼。", "確認已安裝 Go 1.21 以上且可取得 go1.26.9（離線時請先備妥），查看訊息中的編譯器輸出；原始碼缺少時重新安裝 CLI。"],
     ["EXECUTOR_PIN_REQUIRED", "宣告 rootOps 或 delegate 的套件建置時沒有 executor 產物。", "使用 synopkgland build，讓 CLI 編譯並 pin executor；不要直接呼叫低階 SPK API。"],
     ["EXECUTOR_POLICY", "capabilities.delegate 的 operations 或 scope 不合法，無法產生 executor policy。", "改用 init／add 產生的 delegate 宣告，或依 manifest 參考修正 scope 與 operations。"],
     ["EXECUTOR_PACKAGE", "pin 進 root task 的套件名稱不合法。", "package 必須以英文字母開頭，只含英數字（2–64 字）。"],
@@ -697,3 +702,4 @@ for (const [code, description, suggestion] of [
 ERROR_REGISTRY["STANDALONE_ENTRY_INVALID"] = { "code": "STANDALONE_ENTRY_INVALID", "description": "entry 設定不合法。", "suggestion": "entry 填 admin-only 或 app-privilege；app-privilege 需要至少一個 authenticated route。" };
 ERROR_REGISTRY["STANDALONE_ENTRY_WIDENED"] = { "code": "STANDALONE_ENTRY_WIDENED", "description": "entry: admin-only 與放寬權限的 route 設定衝突。", "suggestion": "把 permissions.json 中 authenticated 或 public 的 route 改為 administrators；要開放給一般使用者請改用 entry: app-privilege 或省略 entry。" };
 ERROR_REGISTRY["STANDALONE_ENTRY_UNSUPPORTED"] = { "code": "STANDALONE_ENTRY_UNSUPPORTED", "description": "backend 無法強制 entry 模式。", "suggestion": "使用 Go backend，複製 SDK 的 internal/dsm entry gate 並在 cmd/app/main.go 呼叫 dsm.NewEntryGate。" };
+ERROR_REGISTRY["DSM_TLS_UNTRUSTED"] = { "code": "DSM_TLS_UNTRUSTED", "description": "DSM 的 TLS 憑證不受這台電腦信任（自簽、過期或名稱不符）。", "suggestion": "把 NAS 憑證或其 CA 匯出成 PEM，用 NODE_EXTRA_CA_CERTS=<該檔> 執行；或讓 DSM 使用與 host profile 名稱相符的受信任憑證。不要關閉憑證驗證。" };

package/dist/host/dsm-client.js

@@ -3,6 +3,7 @@ import { listShareNamesWithSynoagentcli, lookupSharePathWithSynoagentcli, } from
 import { createSynoagentcliApiCall, fetchSharePermissions, fetchUserGroups, } from "./share-permission-lookup.js";
 import { fetchPortInfo } from "./port-info-lookup.js";
 import { dsmFetch } from "./dsm-http.js";
+import { versionUnsupported } from "../runtime/dsm-version.js";
 import { fetchDsmPortProfileInventory } from "./dsm-port-profile.js";
 import { installPackageFromLocalSpk, fetchInstalledPackageState, packageStateFromRecord, } from "./catalog-install.js";
 import { resolveHostCredentials } from "./credentials.js";
@@ -53,6 +54,16 @@ export function homesPathFromDsmUserHomeRead(result) {
     }
     return `${volume}/homes`;
 }
+function setCookiePairs(headers) {
+    const lines = typeof headers.getSetCookie === "function"
+        ? headers.getSetCookie()
+        : headers.get("set-cookie")
+            ? [headers.get("set-cookie")]
+            : [];
+    return lines
+        .map((line) => line.split(";")[0]?.trim())
+        .filter((pair) => Boolean(pair));
+}
 function createDsmNasHost(credentials, profileName) {
     const dsmOrigin = credentials.dsmOrigin.replace(/\/$/, "");
     let cookieHeader = credentials.cookieHeader;
@@ -77,15 +88,7 @@ function createDsmNasHost(credentials, profileName) {
         const login = (await response.json());
         if (!response.ok || login.success !== true)
             throw new Error("DSM login failed");
-        const setCookie = typeof response.headers.getSetCookie === "function"
-            ? response.headers.getSetCookie()
-            : response.headers.get("set-cookie")
-                ? [response.headers.get("set-cookie")]
-                : [];
-        const pairs = setCookie
-            .map((line) => line.split(";")[0]?.trim())
-            .filter((pair) => Boolean(pair));
-        cookieHeader = pairs.join("; ");
+        cookieHeader = setCookiePairs(response.headers).join("; ");
         if (!cookieHeader)
             throw new Error("DSM login returned no session cookie");
     };
@@ -106,12 +109,38 @@ function createDsmNasHost(credentials, profileName) {
         async getExecutorStatus(packageIdentity) {
             try {
                 await ensureLogin();
-                const response = await dsmFetch(`${dsmOrigin}/webman/3rdparty/${encodeURIComponent(packageIdentity)}/cgi/api.cgi`, {
-                    method: "POST", headers: { cookie: cookieHeader ?? "", "content-type": "application/json" },
-                    body: JSON.stringify({ method: "executor.status", params: {} }),
-                });
-                const body = await response.json();
-                return body.success ? body.data : undefined;
+                const appCall = async (method, cookie) => {
+                    const response = await dsmFetch(`${dsmOrigin}/webman/3rdparty/${encodeURIComponent(packageIdentity)}/cgi/api.cgi`, {
+                        method: "POST", headers: { cookie, origin: dsmOrigin, "content-type": "application/json" },
+                        body: JSON.stringify({ method, params: method === "identity.session" ? { bootstrap: true } : {} }),
+                    });
+                    const body = await response.json();
+                    return { body, setCookie: setCookiePairs(response.headers) };
+                };
+                // A paused executor answers with why and what to do next.
+                const explain = (status) => status.state === "paused" ? { ...status, error: `Executor paused (${status.reason}). ${status.next}` } : status;
+                const direct = await appCall("executor.status", cookieHeader ?? "");
+                if (direct.body.success)
+                    return explain(direct.body.data);
+                // identity: standalone wraps business methods in an App session; trade the
+                // administrator's DSM cookie for one, read once, then end that session.
+                if (direct.body.error?.code !== "session_required")
+                    return undefined;
+                const session = await appCall("identity.session", cookieHeader ?? "");
+                if (!session.body.success) {
+                    const code = session.body.error?.code;
+                    return { ready: false, executor_digest: "", policy_digest: "", error: code === "https_required"
+                            ? "identity: standalone status needs an https:// DSM host profile to open an App session."
+                            : `identity: standalone App session bootstrap failed (${code ?? "error"}).` };
+                }
+                const appCookie = [cookieHeader ?? "", ...session.setCookie].filter(Boolean).join("; ");
+                try {
+                    const status = await appCall("executor.status", appCookie);
+                    return status.body.success ? explain(status.body.data) : undefined;
+                }
+                finally {
+                    await appCall("identity.logout", appCookie).catch(() => undefined);
+                }
             }
             catch {
                 return undefined;
@@ -130,6 +159,12 @@ function createDsmNasHost(credentials, profileName) {
                         throw Object.assign(new Error(`DSM ${body.error?.code ?? "error"}: scheduler readback denied; check the administrator session. No retry was made.`), { code: body.error?.code });
                     return body.data;
                 };
+                // DSM 7.1 stops at TaskScheduler list v2 (offset) and get v3; only an unsupported version falls back.
+                const taskRead = (method, version, params, legacyVersion, legacyParams) => call("SYNO.Core.TaskScheduler", method, version, params).catch((e) => {
+                    if (!versionUnsupported(e.code))
+                        throw e;
+                    return call("SYNO.Core.TaskScheduler", method, legacyVersion, legacyParams);
+                });
                 const records = await call("SYNO.Core.EventScheduler", "list", 1, {});
                 if (!Array.isArray(records))
                     throw new Error("Invalid EventScheduler readback.");
@@ -142,13 +177,14 @@ function createDsmNasHost(credentials, profileName) {
                         throw new Error("Invalid boot task readback.");
                     tasks.push({ ...detail, name: detail.task_name, kind: "boot" });
                 }
-                const listed = await call("SYNO.Core.TaskScheduler", "list", 3, { start: 0, limit: 500 });
+                const listed = await taskRead("list", 3, { start: 0, limit: 500 }, 2, { offset: 0, limit: 500 });
                 if (!Array.isArray(listed?.tasks) || !Number.isInteger(listed.total) || listed.total !== listed.tasks.length || listed.total > 500)
                     throw new Error("Incomplete TaskScheduler readback.");
                 for (const summary of listed.tasks) {
                     if (summary?.name !== `${packageIdentity} executor control`)
                         continue;
-                    const detail = await call("SYNO.Core.TaskScheduler", "get", 4, { id: summary.id, real_owner: summary.real_owner });
+                    const ref = { id: summary.id, real_owner: summary.real_owner };
+                    const detail = await taskRead("get", 4, ref, 3, ref);
                     if (!detail || String(detail.id) !== String(summary.id) || detail.name !== summary.name)
                         throw new Error("Invalid control task readback.");
                     tasks.push({ ...detail, kind: "control" });

package/dist/host/dsm-http.js

@@ -2,11 +2,29 @@ import { spawnSync } from "node:child_process";
 import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-function isHostUnreachable(error) {
-    const code = error.cause?.code
+function errorCode(error) {
+    return error.cause?.code
         ?? error.code;
+}
+function isHostUnreachable(error) {
+    const code = errorCode(error);
     return code === "EHOSTUNREACH" || code === "ENETUNREACH";
 }
+const UNTRUSTED_CERTIFICATE = new Set([
+    "DEPTH_ZERO_SELF_SIGNED_CERT",
+    "SELF_SIGNED_CERT_IN_CHAIN",
+    "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+    "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
+    "CERT_HAS_EXPIRED",
+    "ERR_TLS_CERT_ALTNAME_INVALID",
+]);
+/** Node reports an untrusted certificate only as "fetch failed"; say what to do. Verification stays on. */
+function untrustedCertificate(url, code) {
+    const origin = new URL(url).origin;
+    return Object.assign(new Error(`DSM at ${origin} presented a TLS certificate this computer does not trust (${code}). ` +
+        `Export the NAS certificate or its CA as PEM and run with NODE_EXTRA_CA_CERTS=<that file>, ` +
+        `or give DSM a certificate whose name matches the host profile. Certificate checks stay on.`), { code: "DSM_TLS_UNTRUSTED" });
+}
 function headerRecord(headers) {
     if (!headers) {
         return {};
@@ -24,6 +42,10 @@ export async function dsmFetch(url, init = {}) {
         return await fetch(url, init);
     }
     catch (error) {
+        const code = errorCode(error);
+        if (code && UNTRUSTED_CERTIFICATE.has(code)) {
+            throw untrustedCertificate(url, code);
+        }
         if (!isHostUnreachable(error)) {
             throw error;
         }

package/dist/host/types.d.ts

@@ -33,6 +33,7 @@ export interface NasHost {
         ready: boolean;
         executor_digest: string;
         policy_digest: string;
+        error?: string;
     } | undefined>;
     getArchFamily?(): Promise<NativeArchFamily | undefined>;
     /** List the current logical Shared Folder names using an administrator session. */

package/dist/info.js

@@ -5,6 +5,7 @@ import { appOriginFromContract } from "./host/open-url.js";
 import { resolveDeployIdentity } from "./deploy/identity.js";
 import { loadStandaloneManifest, } from "./standalone/manifest.js";
 import { inspectSpk } from "./standalone/inspect-spk.js";
+import { isNativeLayout, loadNativeLayout } from "./standalone/native-layout.js";
 import { executorPolicy, executorPolicyText, sha256 } from "./runtime/executor-policy.js";
 import { executorTasks } from "./runtime/executor-tasks.js";
 import { uninstallCleanup } from "./runtime/uninstall-cleanup.js";
@@ -72,7 +73,7 @@ async function liveRootCapability(m, host) {
             return classified;
         const observed = await host.getExecutorStatus?.(m.package);
         if (observed?.ready !== true || observed.policy_digest !== policyDigest)
-            return { ...classified, state: "blocked", reason: "Executor health or policy digest readback could not be verified." };
+            return { ...classified, state: "blocked", reason: observed?.error ?? "Executor health or policy digest readback could not be verified." };
         return { ...classified, reason: "Root tasks and the running executor match the source policy (no local SPK, so executor bytes were not compared)." };
     }
     catch {
@@ -116,7 +117,7 @@ async function rootCapability(m, host, version) {
         if (classified.state === "ready") {
             const observed = await host.getExecutorStatus?.(m.package);
             if (!observed || observed.ready !== true || observed.executor_digest !== executor.executorDigest || observed.policy_digest !== executor.policyDigest)
-                return { ...classified, executor, state: "blocked", reason: "Executor health or digest readback could not be verified." };
+                return { ...classified, executor, state: "blocked", reason: observed?.error ?? "Executor health or digest readback could not be verified." };
         }
         return { ...classified, executor };
     }
@@ -127,12 +128,14 @@ async function rootCapability(m, host, version) {
 export async function standaloneInfo(options) {
     if (options.dev)
         throw Object.assign(new Error("--dev is not supported for native-go/binary; choose a distinct package name at init"), { code: "DEVELOPMENT_INSTANCE_UNSUPPORTED" });
+    if (isNativeLayout(options.root))
+        return nativeLayoutInfo(options.root, options.host);
     const loaded = loadStandaloneManifest(options.root);
     if (!loaded.ok)
         throw Object.assign(new Error(loaded.errors.map((e) => e.message).join("\n")), { code: loaded.errors[0].code });
     const m = loaded.manifest;
-    const remote = await options.host.getInstalledPackageState?.(m.package);
-    const installed = await options.host.isPackageInstalled(m.package);
+    const { remote, ...state } = await packageState(m.package, options.host);
+    const installed = state.installed;
     const capabilities = [];
     let executor;
     for (const name of ["files", "jobs", "identity", "rootOps", "delegate"]) {
@@ -158,16 +161,32 @@ export async function standaloneInfo(options) {
             });
     }
     return {
-        packageIdentity: m.package,
-        developmentInstance: false,
-        installed,
-        readiness: remote?.status ?? (installed ? "UNKNOWN" : "NOT_INSTALLED"),
-        openUrl: `${options.host.dsmOrigin.replace(/\/$/, "")}/?launchApp=SYNO.SDS.${m.package}.Instance`,
+        ...state,
         capabilities,
         ...(executor ? { executor } : {}),
         uninstallCleanup: uninstallCleanup(m.package, Boolean(m.capabilities.rootOps || m.capabilities.delegate)),
     };
 }
+/** A native layout has no SDK capabilities; report package state only. */
+async function nativeLayoutInfo(root, host) {
+    const loaded = loadNativeLayout(root);
+    if (!loaded.ok)
+        throw Object.assign(new Error(loaded.errors.map((e) => e.message).join("\n")), { code: loaded.errors[0].code });
+    const { remote, ...state } = await packageState(loaded.manifest.package, host);
+    return { ...state, capabilities: [] };
+}
+async function packageState(pkg, host) {
+    const remote = await host.getInstalledPackageState?.(pkg);
+    const installed = await host.isPackageInstalled(pkg);
+    return {
+        remote,
+        packageIdentity: pkg,
+        developmentInstance: false,
+        installed,
+        readiness: remote?.status ?? (installed ? "UNKNOWN" : "NOT_INSTALLED"),
+        openUrl: `${host.dsmOrigin.replace(/\/$/, "")}/?launchApp=SYNO.SDS.${pkg}.Instance`,
+    };
+}
 export function formatProjectInfo(info) {
     return [
         `Package Identity：${info.packageIdentity}`,

package/dist/init.js

@@ -195,7 +195,7 @@ export function initFromTemplate(template, targetDir, options = {}) {
     }
     if (executor) {
         const path = join(targetDir, "backend/internal/app/routes_test.go");
-        writeFileSync(path, readFileSync(path, "utf8").replace('if strings.HasPrefix(r.Method(), "jobs.") {', 'if r.Method() == "executor.status" { want = "internal" }\n\t\tif r.Method() == "root.run" { want = "session_required" }\n\t\tif strings.HasPrefix(r.Method(), "jobs.") {'));
+        writeFileSync(path, readFileSync(path, "utf8").replace('if strings.HasPrefix(r.Method(), "jobs.") {', 'if r.Method() == "root.run" { want = "session_required" }\n\t\tif strings.HasPrefix(r.Method(), "jobs.") {'));
     }
     if (background && ui === "vue") {
         const app = join(targetDir, "frontend/src/App.vue");

package/dist/runtime/dsm-version.d.ts

@@ -0,0 +1,6 @@
+/** Self-contained: the same function is embedded in the DSM window. True only
+ * when DSM refused a request because this method version is unavailable, the
+ * one refusal that may be retried with an older version. DSM 7.1.1 (t-0234)
+ * returns 104 for a version above maxVersion and 103 for a method absent at an
+ * existing version. Accepts the numeric code and the window's dsm_ form. */
+export declare function versionUnsupported(code: unknown): boolean;

package/dist/runtime/dsm-version.js

@@ -0,0 +1,8 @@
+/** Self-contained: the same function is embedded in the DSM window. True only
+ * when DSM refused a request because this method version is unavailable, the
+ * one refusal that may be retried with an older version. DSM 7.1.1 (t-0234)
+ * returns 104 for a version above maxVersion and 103 for a method absent at an
+ * existing version. Accepts the numeric code and the window's dsm_ form. */
+export function versionUnsupported(code) {
+    return ["103", "104", "dsm_103", "dsm_104"].indexOf(String(code)) >= 0;
+}

package/dist/runtime/executor-build.d.ts

@@ -1,4 +1,4 @@
-import { type NativeArchFamily } from '../build-spk/dsm-arch.js';
+import type { NativeArchFamily } from '../build-spk/dsm-arch.js';
 import type { CommandRunner } from '../standalone/build.js';
 import type { StandaloneManifest } from '../standalone/manifest.js';
 import { type ExecutorPolicy } from './executor-policy.js';

package/dist/runtime/executor-build.js

@@ -1,7 +1,7 @@
 import { existsSync, mkdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { templatesRoot } from '../template-paths.js';
-import { goBuildEnv } from '../build-spk/dsm-arch.js';
+import { PINNED_GO_HINT, pinnedGoBuildEnv, pinnedGoProblem } from '../build-spk/go-toolchain.js';
 import { StandaloneBuildError } from '../standalone/spk.js';
 import { checkCgiBinary } from '../standalone/binary.js';
 import { executorPolicy, executorPolicyText, sha256 } from './executor-policy.js';
@@ -15,19 +15,22 @@ export function buildExecutor(m, arch, work, run) {
     if (!existsSync(join(source, 'go.mod')))
         throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', 'Executor sources are missing.');
     const binary = join(dir, 'executor');
-    const result = run('go', ['build', '-trimpath', '-buildvcs=false', '-ldflags', '-s -w -buildid=', '-o', binary, '.'], { cwd: source, env: { ...process.env, ...goBuildEnv(arch) } });
+    const result = run('go', ['build', '-trimpath', '-buildvcs=false', '-ldflags', '-s -w -buildid=', '-o', binary, '.'], { cwd: source, env: { ...process.env, ...pinnedGoBuildEnv(arch) } });
     if (result.missing || result.status !== 0)
-        throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', `Executor build failed (${arch}). ${result.stderr}`);
+        throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', `Executor build failed (${arch}). ${PINNED_GO_HINT}\n${result.stderr}`);
     const problem = checkCgiBinary(work, binary, arch);
     if (problem)
         throw new StandaloneBuildError(problem.code, problem.message);
     const lifecycleBinary = join(dir, 'lifecycle');
-    const lifecycleResult = run('go', ['build', '-trimpath', '-buildvcs=false', '-ldflags', '-s -w -buildid=', '-o', lifecycleBinary, './cmd/lifecycle'], { cwd: source, env: { ...process.env, ...goBuildEnv(arch) } });
+    const lifecycleResult = run('go', ['build', '-trimpath', '-buildvcs=false', '-ldflags', '-s -w -buildid=', '-o', lifecycleBinary, './cmd/lifecycle'], { cwd: source, env: { ...process.env, ...pinnedGoBuildEnv(arch) } });
     if (lifecycleResult.missing || lifecycleResult.status !== 0)
-        throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', `Lifecycle helper build failed (${arch}). ${lifecycleResult.stderr}`);
+        throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', `Lifecycle helper build failed (${arch}). ${PINNED_GO_HINT}\n${lifecycleResult.stderr}`);
     const lifecycleProblem = checkCgiBinary(work, lifecycleBinary, arch);
     if (lifecycleProblem)
         throw new StandaloneBuildError(lifecycleProblem.code, lifecycleProblem.message);
+    const toolchainProblem = pinnedGoProblem(binary) ?? pinnedGoProblem(lifecycleBinary);
+    if (toolchainProblem)
+        throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', toolchainProblem);
     const policy = executorPolicy(m), policyText = executorPolicyText(policy);
     const pins = { package: m.package, executorDigest: sha256(readFileSync(binary)), policyDigest: sha256(policyText) };
     return { ...pins, binary, lifecycleBinary, policy, policyText, tasks: executorTasks(pins), implementation: 'executor' };

package/dist/standalone/daemon.d.ts

@@ -1,4 +1,4 @@
-import { type NativeArchFamily } from "../build-spk/dsm-arch.js";
+import type { NativeArchFamily } from "../build-spk/dsm-arch.js";
 import type { CommandRunner } from "./build.js";
 import type { StandaloneError, StandaloneManifest } from "./manifest.js";
 export interface Daemon {
@@ -15,6 +15,7 @@ export interface Daemon {
         start: number;
         stop: number;
         status: number;
+        uninstall: number;
     };
 }
 export declare function readDaemon(value: unknown, root: string, arches: NativeArchFamily[], fail: (error: StandaloneError) => void): Daemon | undefined;

package/dist/standalone/daemon.js

@@ -1,6 +1,6 @@
 import { chmodSync, copyFileSync, lstatSync, mkdirSync, readdirSync, realpathSync, writeFileSync } from "node:fs";
 import { isAbsolute, join, relative, resolve } from "node:path";
-import { goBuildEnv } from "../build-spk/dsm-arch.js";
+import { PINNED_GO_HINT, pinnedGoBuildEnv, pinnedGoProblem } from "../build-spk/go-toolchain.js";
 import { templatesRoot } from "../template-paths.js";
 import { checkCgiBinary } from "./binary.js";
 import { StandaloneBuildError } from "./spk.js";
@@ -41,11 +41,12 @@ export function readDaemon(value, root, arches, fail) {
     if (!record(env) || Object.keys(env).length > 64 || Object.entries(env).some(([k, v]) => !envKey(k) || !token(v)))
         return invalid();
     const limits = value.timeouts ?? {};
-    if (!record(limits) || Object.keys(limits).some(k => !["start", "stop", "status"].includes(k)))
+    if (!record(limits) || Object.keys(limits).some(k => !["start", "stop", "status", "uninstall"].includes(k)))
         return invalid();
-    const timeouts = { start: limits.start ?? 5, stop: limits.stop ?? 10, status: limits.status ?? 2 };
+    // Defaults hold under IO load on a busy NAS; DSM's package unit allows 3600 s.
+    const timeouts = { start: limits.start ?? 30, stop: limits.stop ?? 30, status: limits.status ?? 5, uninstall: limits.uninstall ?? 60 };
     for (const [key, v] of Object.entries(timeouts)) {
-        if (!Number.isInteger(v) || v < (key === "start" ? 2 : key === "stop" ? 2 : 1) || v > (key === "status" ? 10 : 120))
+        if (!Number.isInteger(v) || v < (key === "status" ? 1 : 2) || v > (key === "status" ? 10 : 120))
             return invalid();
     }
     return { exec: value.exec, targets, args, ...(uninstall ? { uninstall_args: uninstall } : {}), env: Object.fromEntries(Object.keys(env).sort().map(key => [key, env[key]])), timeouts: timeouts };
@@ -59,13 +60,16 @@ export function buildDaemonControl(manifest, arch, work, run) {
         return undefined;
     const out = join(work, `daemon-control-${arch}`);
     const result = run("go", ["build", "-trimpath", "-buildvcs=false", "-ldflags", "-s -w -buildid=", "-o", out, "."], {
-        cwd: join(templatesRoot(), "_daemon"), env: { ...process.env, ...goBuildEnv(arch) },
+        cwd: join(templatesRoot(), "_daemon"), env: { ...process.env, ...pinnedGoBuildEnv(arch) },
     });
     if (result.missing || result.status !== 0)
-        throw new StandaloneBuildError("STANDALONE_DAEMON_BUILD_FAILED", `daemon controller build 需要 Go 1.24 以上。\n${result.stderr}`);
+        throw new StandaloneBuildError("STANDALONE_DAEMON_BUILD_FAILED", `daemon controller build failed (${arch}). ${PINNED_GO_HINT}\n${result.stderr}`);
     const problem = checkCgiBinary(work, out, arch);
     if (problem)
         throw new StandaloneBuildError(problem.code, problem.message);
+    const toolchainProblem = pinnedGoProblem(out);
+    if (toolchainProblem)
+        throw new StandaloneBuildError("STANDALONE_DAEMON_BUILD_FAILED", toolchainProblem);
     return out;
 }
 export function copyDaemonPayload(manifest, arch, target, controller) {

package/dist/standalone/dsm-window.js

@@ -1,6 +1,6 @@
 import { REOPEN_EVENTS_RUNTIME } from "./reopen-events.js";
 import { DSM_LANGS } from "./i18n.js";
-import { ROOT_PANEL, ROOT_RUNTIME, rootTasks } from "./root-window.js";
+import { PASSWORD_CONFIRM, ROOT_PANEL, ROOT_RUNTIME, rootTasks } from "./root-window.js";
 import { HOST_ADAPTER_RUNTIME } from "./host-adapter.js";
 import { permitsOrdinaryUsers } from "./api-permissions.js";
 import { PORTAL_RUNTIME } from "./portal-window.js";
@@ -316,6 +316,10 @@ ${ns}.mountRootPanel = (function () {
 ${ROOT_PANEL}
   return mountRootPanel;
 })();
+${ns}.createPasswordConfirm = (function () {
+${PASSWORD_CONFIRM}
+  return createPasswordConfirm;
+})();
 
 `,
         html: `autoScroll: true,
@@ -329,39 +333,7 @@ ${ROOT_PANEL}
       pins: ${JSON.stringify({ package: manifest.package, executorDigest: manifest.executor.executorDigest, policyDigest: manifest.executor.policyDigest })},
       user: session,
       send: ${ns}.webApi(me),
-      confirmPassword: function (suppliedPassword) {
-        // Send exactly one PasswordConfirm v2 auth with a masked password field.
-        return new Promise(function (resolve, reject) {
-          if (typeof suppliedPassword === "string" && suppliedPassword) {
-            me.sendWebAPI({api: "SYNO.Core.User.PasswordConfirm", method: "auth", version: 2, params: {password: suppliedPassword}, scope: me,
-              callback: function(success, response) { suppliedPassword = ""; if (!success) reject({code: "dsm_" + ((response && response.code) || "error")}); else resolve({confirmed: true, token: response && response.SynoConfirmPWToken}); }
-            });
-            suppliedPassword = "";
-            return;
-          }
-          var form = document.createElement("form"), label = document.createElement("label"), input = document.createElement("input");
-          var submit = document.createElement("button"), cancel = document.createElement("button");
-          label.textContent = "Confirm your DSM administrator password";
-          input.type = "password"; input.autocomplete = "current-password"; input.required = true;
-          label.appendChild(input); form.appendChild(label);
-          submit.type = "submit"; submit.textContent = "Approve"; form.appendChild(submit);
-          cancel.type = "button"; cancel.textContent = "Cancel"; form.appendChild(cancel);
-          me.body.dom.appendChild(form); input.focus();
-          function close() { input.value = ""; if (form.parentNode) form.parentNode.removeChild(form); }
-          cancel.onclick = function() { close(); resolve({confirmed: false}); };
-          form.onsubmit = function(event) {
-            event.preventDefault(); submit.disabled = cancel.disabled = true;
-            var password = input.value; input.value = "";
-            me.sendWebAPI({api: "SYNO.Core.User.PasswordConfirm", method: "auth", version: 2, params: {password: password}, scope: me,
-              callback: function(success, response) {
-                password = ""; close();
-                if (!success) { reject({code: "dsm_" + ((response && response.code) || "error")}); return; }
-                resolve({confirmed: true, token: response && response.SynoConfirmPWToken});
-              }
-            });
-          };
-        });
-      },
+      confirmPassword: ${ns}.createPasswordConfirm(me),
       call: ${ns}.call,
       wait: function (ms) { return new Promise(function (resolve) { setTimeout(resolve, ms); }); }
     });

package/dist/standalone/inspect-spk.js

@@ -211,7 +211,11 @@ async function checkDaemon(dir, info, paths, payload, findings, executor, backgr
         if (payload.find(p => p.path === `daemon/payload/${daemon.exec}`)?.mode !== "0755")
             throw new Error("missing executable");
         const manifest = { package: info.package, daemon, capabilities: { ...(executor ? { rootOps: true } : {}), ...(background ? { jobs: { worker: 'sha256-v1' } } : {}) } };
-        if (readFileSync(join(unpacked, "daemon/config.json"), "utf8") !== daemonConfig(manifest))
+        // A config from before timeouts.uninstall pairs with a control that rejects the key.
+        const legacy = typeof config.timeouts === "object" && config.timeouts !== null && !("uninstall" in config.timeouts);
+        const { uninstall: _, ...legacyTimeouts } = daemon.timeouts;
+        const canonical = daemonConfig(legacy ? { ...manifest, daemon: { ...daemon, timeouts: legacyTimeouts } } : manifest);
+        if (readFileSync(join(unpacked, "daemon/config.json"), "utf8") !== canonical)
             throw new Error("non-canonical daemon config");
         for (const hook of ["start-stop-status", "preupgrade", "preuninst"]) {
             if (readFileSync(join(dir, "scripts", hook), "utf8") !== renderStandaloneScript(hook, manifest))