@synopackageland/cli 0.7.0 → 0.7.2

package/dist/host/dsm-http.js

@@ -2,11 +2,29 @@ import { spawnSync } from "node:child_process";
 import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-function isHostUnreachable(error) {
-    const code = error.cause?.code
+function errorCode(error) {
+    return error.cause?.code
         ?? error.code;
+}
+function isHostUnreachable(error) {
+    const code = errorCode(error);
     return code === "EHOSTUNREACH" || code === "ENETUNREACH";
 }
+const UNTRUSTED_CERTIFICATE = new Set([
+    "DEPTH_ZERO_SELF_SIGNED_CERT",
+    "SELF_SIGNED_CERT_IN_CHAIN",
+    "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+    "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
+    "CERT_HAS_EXPIRED",
+    "ERR_TLS_CERT_ALTNAME_INVALID",
+]);
+/** Node reports an untrusted certificate only as "fetch failed"; say what to do. Verification stays on. */
+function untrustedCertificate(url, code) {
+    const origin = new URL(url).origin;
+    return Object.assign(new Error(`DSM at ${origin} presented a TLS certificate this computer does not trust (${code}). ` +
+        `Export the NAS certificate or its CA as PEM and run with NODE_EXTRA_CA_CERTS=<that file>, ` +
+        `or give DSM a certificate whose name matches the host profile. Certificate checks stay on.`), { code: "DSM_TLS_UNTRUSTED" });
+}
 function headerRecord(headers) {
     if (!headers) {
         return {};
@@ -24,6 +42,10 @@ export async function dsmFetch(url, init = {}) {
         return await fetch(url, init);
     }
     catch (error) {
+        const code = errorCode(error);
+        if (code && UNTRUSTED_CERTIFICATE.has(code)) {
+            throw untrustedCertificate(url, code);
+        }
         if (!isHostUnreachable(error)) {
             throw error;
         }

package/dist/host/types.d.ts

@@ -33,6 +33,7 @@ export interface NasHost {
         ready: boolean;
         executor_digest: string;
         policy_digest: string;
+        error?: string;
     } | undefined>;
     getArchFamily?(): Promise<NativeArchFamily | undefined>;
     /** List the current logical Shared Folder names using an administrator session. */

package/dist/info.js

@@ -5,6 +5,7 @@ import { appOriginFromContract } from "./host/open-url.js";
 import { resolveDeployIdentity } from "./deploy/identity.js";
 import { loadStandaloneManifest, } from "./standalone/manifest.js";
 import { inspectSpk } from "./standalone/inspect-spk.js";
+import { isNativeLayout, loadNativeLayout } from "./standalone/native-layout.js";
 import { executorPolicy, executorPolicyText, sha256 } from "./runtime/executor-policy.js";
 import { executorTasks } from "./runtime/executor-tasks.js";
 import { uninstallCleanup } from "./runtime/uninstall-cleanup.js";
@@ -72,7 +73,7 @@ async function liveRootCapability(m, host) {
             return classified;
         const observed = await host.getExecutorStatus?.(m.package);
         if (observed?.ready !== true || observed.policy_digest !== policyDigest)
-            return { ...classified, state: "blocked", reason: "Executor health or policy digest readback could not be verified." };
+            return { ...classified, state: "blocked", reason: observed?.error ?? "Executor health or policy digest readback could not be verified." };
         return { ...classified, reason: "Root tasks and the running executor match the source policy (no local SPK, so executor bytes were not compared)." };
     }
     catch {
@@ -116,7 +117,7 @@ async function rootCapability(m, host, version) {
         if (classified.state === "ready") {
             const observed = await host.getExecutorStatus?.(m.package);
             if (!observed || observed.ready !== true || observed.executor_digest !== executor.executorDigest || observed.policy_digest !== executor.policyDigest)
-                return { ...classified, executor, state: "blocked", reason: "Executor health or digest readback could not be verified." };
+                return { ...classified, executor, state: "blocked", reason: observed?.error ?? "Executor health or digest readback could not be verified." };
         }
         return { ...classified, executor };
     }
@@ -127,12 +128,14 @@ async function rootCapability(m, host, version) {
 export async function standaloneInfo(options) {
     if (options.dev)
         throw Object.assign(new Error("--dev is not supported for native-go/binary; choose a distinct package name at init"), { code: "DEVELOPMENT_INSTANCE_UNSUPPORTED" });
+    if (isNativeLayout(options.root))
+        return nativeLayoutInfo(options.root, options.host);
     const loaded = loadStandaloneManifest(options.root);
     if (!loaded.ok)
         throw Object.assign(new Error(loaded.errors.map((e) => e.message).join("\n")), { code: loaded.errors[0].code });
     const m = loaded.manifest;
-    const remote = await options.host.getInstalledPackageState?.(m.package);
-    const installed = await options.host.isPackageInstalled(m.package);
+    const { remote, ...state } = await packageState(m.package, options.host);
+    const installed = state.installed;
     const capabilities = [];
     let executor;
     for (const name of ["files", "jobs", "identity", "rootOps", "delegate"]) {
@@ -158,16 +161,32 @@ export async function standaloneInfo(options) {
             });
     }
     return {
-        packageIdentity: m.package,
-        developmentInstance: false,
-        installed,
-        readiness: remote?.status ?? (installed ? "UNKNOWN" : "NOT_INSTALLED"),
-        openUrl: `${options.host.dsmOrigin.replace(/\/$/, "")}/?launchApp=SYNO.SDS.${m.package}.Instance`,
+        ...state,
         capabilities,
         ...(executor ? { executor } : {}),
         uninstallCleanup: uninstallCleanup(m.package, Boolean(m.capabilities.rootOps || m.capabilities.delegate)),
     };
 }
+/** A native layout has no SDK capabilities; report package state only. */
+async function nativeLayoutInfo(root, host) {
+    const loaded = loadNativeLayout(root);
+    if (!loaded.ok)
+        throw Object.assign(new Error(loaded.errors.map((e) => e.message).join("\n")), { code: loaded.errors[0].code });
+    const { remote, ...state } = await packageState(loaded.manifest.package, host);
+    return { ...state, capabilities: [] };
+}
+async function packageState(pkg, host) {
+    const remote = await host.getInstalledPackageState?.(pkg);
+    const installed = await host.isPackageInstalled(pkg);
+    return {
+        remote,
+        packageIdentity: pkg,
+        developmentInstance: false,
+        installed,
+        readiness: remote?.status ?? (installed ? "UNKNOWN" : "NOT_INSTALLED"),
+        openUrl: `${host.dsmOrigin.replace(/\/$/, "")}/?launchApp=SYNO.SDS.${pkg}.Instance`,
+    };
+}
 export function formatProjectInfo(info) {
     return [
         `Package Identity：${info.packageIdentity}`,

package/dist/init.js

@@ -195,7 +195,7 @@ export function initFromTemplate(template, targetDir, options = {}) {
     }
     if (executor) {
         const path = join(targetDir, "backend/internal/app/routes_test.go");
-        writeFileSync(path, readFileSync(path, "utf8").replace('if strings.HasPrefix(r.Method(), "jobs.") {', 'if r.Method() == "executor.status" { want = "internal" }\n\t\tif r.Method() == "root.run" { want = "session_required" }\n\t\tif strings.HasPrefix(r.Method(), "jobs.") {'));
+        writeFileSync(path, readFileSync(path, "utf8").replace('if strings.HasPrefix(r.Method(), "jobs.") {', 'if r.Method() == "root.run" { want = "session_required" }\n\t\tif strings.HasPrefix(r.Method(), "jobs.") {'));
     }
     if (background && ui === "vue") {
         const app = join(targetDir, "frontend/src/App.vue");

package/dist/runtime/dsm-version.d.ts

@@ -0,0 +1,6 @@
+/** Self-contained: the same function is embedded in the DSM window. True only
+ * when DSM refused a request because this method version is unavailable, the
+ * one refusal that may be retried with an older version. DSM 7.1.1 (t-0234)
+ * returns 104 for a version above maxVersion and 103 for a method absent at an
+ * existing version. Accepts the numeric code and the window's dsm_ form. */
+export declare function versionUnsupported(code: unknown): boolean;

package/dist/runtime/dsm-version.js

@@ -0,0 +1,8 @@
+/** Self-contained: the same function is embedded in the DSM window. True only
+ * when DSM refused a request because this method version is unavailable, the
+ * one refusal that may be retried with an older version. DSM 7.1.1 (t-0234)
+ * returns 104 for a version above maxVersion and 103 for a method absent at an
+ * existing version. Accepts the numeric code and the window's dsm_ form. */
+export function versionUnsupported(code) {
+    return ["103", "104", "dsm_103", "dsm_104"].indexOf(String(code)) >= 0;
+}

package/dist/runtime/executor-build.d.ts

@@ -1,4 +1,4 @@
-import { type NativeArchFamily } from '../build-spk/dsm-arch.js';
+import type { NativeArchFamily } from '../build-spk/dsm-arch.js';
 import type { CommandRunner } from '../standalone/build.js';
 import type { StandaloneManifest } from '../standalone/manifest.js';
 import { type ExecutorPolicy } from './executor-policy.js';

package/dist/runtime/executor-build.js

@@ -1,7 +1,7 @@
 import { existsSync, mkdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { templatesRoot } from '../template-paths.js';
-import { goBuildEnv } from '../build-spk/dsm-arch.js';
+import { PINNED_GO_HINT, pinnedGoBuildEnv, pinnedGoProblem } from '../build-spk/go-toolchain.js';
 import { StandaloneBuildError } from '../standalone/spk.js';
 import { checkCgiBinary } from '../standalone/binary.js';
 import { executorPolicy, executorPolicyText, sha256 } from './executor-policy.js';
@@ -15,19 +15,22 @@ export function buildExecutor(m, arch, work, run) {
     if (!existsSync(join(source, 'go.mod')))
         throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', 'Executor sources are missing.');
     const binary = join(dir, 'executor');
-    const result = run('go', ['build', '-trimpath', '-buildvcs=false', '-ldflags', '-s -w -buildid=', '-o', binary, '.'], { cwd: source, env: { ...process.env, ...goBuildEnv(arch) } });
+    const result = run('go', ['build', '-trimpath', '-buildvcs=false', '-ldflags', '-s -w -buildid=', '-o', binary, '.'], { cwd: source, env: { ...process.env, ...pinnedGoBuildEnv(arch) } });
     if (result.missing || result.status !== 0)
-        throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', `Executor build failed (${arch}). ${result.stderr}`);
+        throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', `Executor build failed (${arch}). ${PINNED_GO_HINT}\n${result.stderr}`);
     const problem = checkCgiBinary(work, binary, arch);
     if (problem)
         throw new StandaloneBuildError(problem.code, problem.message);
     const lifecycleBinary = join(dir, 'lifecycle');
-    const lifecycleResult = run('go', ['build', '-trimpath', '-buildvcs=false', '-ldflags', '-s -w -buildid=', '-o', lifecycleBinary, './cmd/lifecycle'], { cwd: source, env: { ...process.env, ...goBuildEnv(arch) } });
+    const lifecycleResult = run('go', ['build', '-trimpath', '-buildvcs=false', '-ldflags', '-s -w -buildid=', '-o', lifecycleBinary, './cmd/lifecycle'], { cwd: source, env: { ...process.env, ...pinnedGoBuildEnv(arch) } });
     if (lifecycleResult.missing || lifecycleResult.status !== 0)
-        throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', `Lifecycle helper build failed (${arch}). ${lifecycleResult.stderr}`);
+        throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', `Lifecycle helper build failed (${arch}). ${PINNED_GO_HINT}\n${lifecycleResult.stderr}`);
     const lifecycleProblem = checkCgiBinary(work, lifecycleBinary, arch);
     if (lifecycleProblem)
         throw new StandaloneBuildError(lifecycleProblem.code, lifecycleProblem.message);
+    const toolchainProblem = pinnedGoProblem(binary) ?? pinnedGoProblem(lifecycleBinary);
+    if (toolchainProblem)
+        throw new StandaloneBuildError('EXECUTOR_BUILD_FAILED', toolchainProblem);
     const policy = executorPolicy(m), policyText = executorPolicyText(policy);
     const pins = { package: m.package, executorDigest: sha256(readFileSync(binary)), policyDigest: sha256(policyText) };
     return { ...pins, binary, lifecycleBinary, policy, policyText, tasks: executorTasks(pins), implementation: 'executor' };

package/dist/standalone/daemon.d.ts

@@ -1,4 +1,4 @@
-import { type NativeArchFamily } from "../build-spk/dsm-arch.js";
+import type { NativeArchFamily } from "../build-spk/dsm-arch.js";
 import type { CommandRunner } from "./build.js";
 import type { StandaloneError, StandaloneManifest } from "./manifest.js";
 export interface Daemon {
@@ -15,6 +15,7 @@ export interface Daemon {
         start: number;
         stop: number;
         status: number;
+        uninstall: number;
     };
 }
 export declare function readDaemon(value: unknown, root: string, arches: NativeArchFamily[], fail: (error: StandaloneError) => void): Daemon | undefined;

package/dist/standalone/daemon.js

@@ -1,6 +1,6 @@
 import { chmodSync, copyFileSync, lstatSync, mkdirSync, readdirSync, realpathSync, writeFileSync } from "node:fs";
 import { isAbsolute, join, relative, resolve } from "node:path";
-import { goBuildEnv } from "../build-spk/dsm-arch.js";
+import { PINNED_GO_HINT, pinnedGoBuildEnv, pinnedGoProblem } from "../build-spk/go-toolchain.js";
 import { templatesRoot } from "../template-paths.js";
 import { checkCgiBinary } from "./binary.js";
 import { StandaloneBuildError } from "./spk.js";
@@ -41,11 +41,12 @@ export function readDaemon(value, root, arches, fail) {
     if (!record(env) || Object.keys(env).length > 64 || Object.entries(env).some(([k, v]) => !envKey(k) || !token(v)))
         return invalid();
     const limits = value.timeouts ?? {};
-    if (!record(limits) || Object.keys(limits).some(k => !["start", "stop", "status"].includes(k)))
+    if (!record(limits) || Object.keys(limits).some(k => !["start", "stop", "status", "uninstall"].includes(k)))
         return invalid();
-    const timeouts = { start: limits.start ?? 5, stop: limits.stop ?? 10, status: limits.status ?? 2 };
+    // Defaults hold under IO load on a busy NAS; DSM's package unit allows 3600 s.
+    const timeouts = { start: limits.start ?? 30, stop: limits.stop ?? 30, status: limits.status ?? 5, uninstall: limits.uninstall ?? 60 };
     for (const [key, v] of Object.entries(timeouts)) {
-        if (!Number.isInteger(v) || v < (key === "start" ? 2 : key === "stop" ? 2 : 1) || v > (key === "status" ? 10 : 120))
+        if (!Number.isInteger(v) || v < (key === "status" ? 1 : 2) || v > (key === "status" ? 10 : 120))
             return invalid();
     }
     return { exec: value.exec, targets, args, ...(uninstall ? { uninstall_args: uninstall } : {}), env: Object.fromEntries(Object.keys(env).sort().map(key => [key, env[key]])), timeouts: timeouts };
@@ -59,13 +60,16 @@ export function buildDaemonControl(manifest, arch, work, run) {
         return undefined;
     const out = join(work, `daemon-control-${arch}`);
     const result = run("go", ["build", "-trimpath", "-buildvcs=false", "-ldflags", "-s -w -buildid=", "-o", out, "."], {
-        cwd: join(templatesRoot(), "_daemon"), env: { ...process.env, ...goBuildEnv(arch) },
+        cwd: join(templatesRoot(), "_daemon"), env: { ...process.env, ...pinnedGoBuildEnv(arch) },
     });
     if (result.missing || result.status !== 0)
-        throw new StandaloneBuildError("STANDALONE_DAEMON_BUILD_FAILED", `daemon controller build 需要 Go 1.24 以上。\n${result.stderr}`);
+        throw new StandaloneBuildError("STANDALONE_DAEMON_BUILD_FAILED", `daemon controller build failed (${arch}). ${PINNED_GO_HINT}\n${result.stderr}`);
     const problem = checkCgiBinary(work, out, arch);
     if (problem)
         throw new StandaloneBuildError(problem.code, problem.message);
+    const toolchainProblem = pinnedGoProblem(out);
+    if (toolchainProblem)
+        throw new StandaloneBuildError("STANDALONE_DAEMON_BUILD_FAILED", toolchainProblem);
     return out;
 }
 export function copyDaemonPayload(manifest, arch, target, controller) {

package/dist/standalone/dsm-window.d.ts

@@ -1,4 +1,5 @@
 import type { EntryMode, StandaloneManifest } from "./manifest.js";
+import { type AppTitle } from "../build-spk/ui-texts.js";
 /** Same path the generated wrapper POSTs to, and the payload location of the CGI. */
 export declare const CGI_PAYLOAD_PATH = "ui/cgi/api.cgi";
 export declare function cgiUrl(packageId: string): string;
@@ -16,6 +17,7 @@ export declare const I18N_RUNTIME: string;
 export declare function windowScriptName(manifest: Pick<StandaloneManifest, "build">): string;
 /** The launcher fields an entry mode fixes; inspect checks a built SPK against them. */
 export declare function entryLauncherAccess(entry: EntryMode): Record<string, unknown>;
+export declare function appTitle(manifest: StandaloneManifest): AppTitle;
 /** `ui/config`: registers the DSM main-menu app and its window class. */
 export declare function renderUiConfig(manifest: StandaloneManifest): string;
 /**

package/dist/standalone/dsm-window.js

@@ -1,9 +1,10 @@
 import { REOPEN_EVENTS_RUNTIME } from "./reopen-events.js";
 import { DSM_LANGS } from "./i18n.js";
-import { ROOT_PANEL, ROOT_RUNTIME, rootTasks } from "./root-window.js";
+import { PASSWORD_CONFIRM, ROOT_PANEL, ROOT_RUNTIME, rootTasks } from "./root-window.js";
 import { HOST_ADAPTER_RUNTIME } from "./host-adapter.js";
 import { permitsOrdinaryUsers } from "./api-permissions.js";
 import { PORTAL_RUNTIME } from "./portal-window.js";
+import { uiTitleFields } from "../build-spk/ui-texts.js";
 /** Same path the generated wrapper POSTs to, and the payload location of the CGI. */
 export const CGI_PAYLOAD_PATH = "ui/cgi/api.cgi";
 export function cgiUrl(packageId) {
@@ -62,15 +63,20 @@ export function entryLauncherAccess(entry) {
         ? { allUsers: false }
         : { allUsers: true, grantPrivilege: "all", advanceGrantPrivilege: true };
 }
+export function appTitle(manifest) {
+    return { displayname: manifest.displayname, description: manifest.description, info: manifest.i18n?.info };
+}
 /** `ui/config`: registers the DSM main-menu app and its window class. */
 export function renderUiConfig(manifest) {
     const ns = `SYNO.SDS.${manifest.package}`;
+    const { title, desc, preloadTexts } = uiTitleFields(appTitle(manifest));
     return `${JSON.stringify({
         [windowScriptName(manifest)]: {
             [`${ns}.Instance`]: {
                 type: "app",
-                title: manifest.displayname,
-                desc: manifest.description,
+                title,
+                desc,
+                ...(preloadTexts ? { preloadTexts } : {}),
                 icon: "images/app_{0}.png",
                 appWindow: `${ns}.MainWindow`,
                 allowMultiInstance: false,
@@ -79,7 +85,7 @@ export function renderUiConfig(manifest) {
             },
             [`${ns}.MainWindow`]: {
                 type: "lib",
-                title: manifest.displayname,
+                title,
                 icon: "images/app_{0}.png",
                 depend: [],
             },
@@ -300,6 +306,14 @@ const ROOT_PANEL_CSS = [
     ".dsmapp-rootpanel-primary{background:#057feb;color:#fff;border:1px solid #057feb;border-radius:3px}",
     ".dsmapp-rootpanel-message{color:#c0392b}.dsmapp-rootpanel-hint{color:#526070;font-size:12px}",
 ].join("");
+/**
+ * An install-selected delegate scope is approved only in the app's settings: the
+ * approval carries the scope the administrator picks there, and the window panel
+ * has no scope picker.
+ */
+function settingsOnlyApproval(manifest) {
+    return manifest.ui.build !== undefined && manifest.capabilities.delegate?.scope === "install-selected";
+}
 /**
  * The capabilities.rootOps: true additions to the window: the exact tasks and panel
  * text, the access runtime wired to DSM's own password confirmation and the
@@ -316,6 +330,10 @@ ${ns}.mountRootPanel = (function () {
 ${ROOT_PANEL}
   return mountRootPanel;
 })();
+${ns}.createPasswordConfirm = (function () {
+${PASSWORD_CONFIRM}
+  return createPasswordConfirm;
+})();
 
 `,
         html: `autoScroll: true,
@@ -329,46 +347,14 @@ ${ROOT_PANEL}
       pins: ${JSON.stringify({ package: manifest.package, executorDigest: manifest.executor.executorDigest, policyDigest: manifest.executor.policyDigest })},
       user: session,
       send: ${ns}.webApi(me),
-      confirmPassword: function (suppliedPassword) {
-        // Send exactly one PasswordConfirm v2 auth with a masked password field.
-        return new Promise(function (resolve, reject) {
-          if (typeof suppliedPassword === "string" && suppliedPassword) {
-            me.sendWebAPI({api: "SYNO.Core.User.PasswordConfirm", method: "auth", version: 2, params: {password: suppliedPassword}, scope: me,
-              callback: function(success, response) { suppliedPassword = ""; if (!success) reject({code: "dsm_" + ((response && response.code) || "error")}); else resolve({confirmed: true, token: response && response.SynoConfirmPWToken}); }
-            });
-            suppliedPassword = "";
-            return;
-          }
-          var form = document.createElement("form"), label = document.createElement("label"), input = document.createElement("input");
-          var submit = document.createElement("button"), cancel = document.createElement("button");
-          label.textContent = "Confirm your DSM administrator password";
-          input.type = "password"; input.autocomplete = "current-password"; input.required = true;
-          label.appendChild(input); form.appendChild(label);
-          submit.type = "submit"; submit.textContent = "Approve"; form.appendChild(submit);
-          cancel.type = "button"; cancel.textContent = "Cancel"; form.appendChild(cancel);
-          me.body.dom.appendChild(form); input.focus();
-          function close() { input.value = ""; if (form.parentNode) form.parentNode.removeChild(form); }
-          cancel.onclick = function() { close(); resolve({confirmed: false}); };
-          form.onsubmit = function(event) {
-            event.preventDefault(); submit.disabled = cancel.disabled = true;
-            var password = input.value; input.value = "";
-            me.sendWebAPI({api: "SYNO.Core.User.PasswordConfirm", method: "auth", version: 2, params: {password: password}, scope: me,
-              callback: function(success, response) {
-                password = ""; close();
-                if (!success) { reject({code: "dsm_" + ((response && response.code) || "error")}); return; }
-                resolve({confirmed: true, token: response && response.SynoConfirmPWToken});
-              }
-            });
-          };
-        });
-      },
+      confirmPassword: ${ns}.createPasswordConfirm(me),
       call: ${ns}.call,
       wait: function (ms) { return new Promise(function (resolve) { setTimeout(resolve, ms); }); }
     });
-    var panels = me.body && me.body.dom.querySelector(".dsmapp-rootpanels");
-    if (panels && ${manifest.ui.build !== undefined && manifest.capabilities.delegate?.scope === "install-selected" ? "false" : "true"}) {
+${settingsOnlyApproval(manifest) ? "" : `    var panels = me.body && me.body.dom.querySelector(".dsmapp-rootpanels");
+    if (panels) {
       ${ns}.mountRootPanel(panels, access, null, ${ns}.rootTasks, session().admin);
     }
-`,
+`}`,
     };
 }

package/dist/standalone/i18n.d.ts

@@ -18,6 +18,18 @@ export type CatalogsResult = {
     ok: false;
     errors: StandaloneError[];
 };
+export interface InfoText {
+    displayname?: string;
+    description?: string;
+}
+/** INFO `displayname_<dsm lang>` / `description_<dsm lang>`; English stays top level. */
+export type InfoTranslations = Partial<Record<Locale, InfoText>>;
+export interface InfoTextChecks {
+    invalid(why: string): undefined;
+    /** The plain single-line text INFO and DSM strings files can carry, or undefined after reporting. */
+    text(value: unknown, field: string): string | undefined;
+}
+export declare function readInfoTranslations(value: unknown, check: InfoTextChecks): InfoTranslations | undefined;
 export declare function isLocale(value: string): value is Locale;
 /** `<dir>/<locale>.json` for each shipped locale; en.json is required. */
 export declare function loadCatalogs(dir: string): CatalogsResult;

package/dist/standalone/i18n.js

@@ -17,6 +17,36 @@ export const DSM_LANGS = {
     es: "spn",
     it: "ita",
 };
+const INFO_TEXT_FIELDS = new Set(["displayname", "description"]);
+export function readInfoTranslations(value, check) {
+    if (value === undefined) {
+        return {};
+    }
+    if (!isRecord(value)) {
+        return check.invalid("必須以語言為 key，例如 zh-TW: { displayname, description }。");
+    }
+    const info = {};
+    for (const [locale, text] of Object.entries(value)) {
+        if (!isLocale(locale) || locale === "en") {
+            return check.invalid(`的「${locale}」不是支援的翻譯語言；英文寫在頂層 displayname / description。`);
+        }
+        if (!isRecord(text) || Object.keys(text).some((key) => !INFO_TEXT_FIELDS.has(key))) {
+            return check.invalid(`.${locale} 只接受 displayname 與 description。`);
+        }
+        const entry = {};
+        for (const field of INFO_TEXT_FIELDS) {
+            if (text[field] !== undefined) {
+                const checked = check.text(text[field], `i18n.info.${locale}.${field}`);
+                if (!checked) {
+                    return undefined;
+                }
+                entry[field] = checked;
+            }
+        }
+        info[locale] = entry;
+    }
+    return info;
+}
 const MESSAGE_KEY = /^[A-Za-z][A-Za-z0-9_-]*(\.[A-Za-z0-9_-]+)*$/;
 export function isLocale(value) {
     return LOCALES.includes(value);

package/dist/standalone/inspect-spk.d.ts

@@ -30,6 +30,11 @@ export interface SpkInspection {
     };
     /** Declared `entry` mode; `admin-only` is the administrator floor of every route. */
     entry?: EntryMode;
+    /** PACKAGE_ICON_256.PNG: the SDK default, a custom icon (by digest) or none. */
+    icon?: {
+        source: "default" | "custom" | "none";
+        sha256?: string;
+    };
 }
 /** Reads an SPK without installing it and reports how it would run on DSM. */
 export declare function inspectStandaloneSpk(spkPath: string): Promise<SpkInspection>;

package/dist/standalone/inspect-spk.js

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 import { inspectNativeLayout } from "./native-layout.js";
 import { inspectExecutor, inspectExecutorAnchor } from "../runtime/executor-inspect.js";
 import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync } from "node:fs";
@@ -20,6 +21,8 @@ import { listPortExposures, loadCompose } from "../compose/analyze.js";
 import { uninstallCleanup } from "../runtime/uninstall-cleanup.js";
 import { PORTAL_JSON_RELPATH, PORTAL_MUSTACHE_RELPATH, portalResource, renderPortalJson, renderPortalLifecycle, renderPortalMustache, renderPortalWizardStep } from "../portal/package.js";
 import { isPortalAlias } from "../portal/alias.js";
+import { defaultPackageIcons, MAX_ICON_BYTES } from "../build-spk/dsm-icons.js";
+import { decodePng } from "../build-spk/png.js";
 const ROOT_SCRIPT_HINTS = [/\bsudo\b/, /\bchown\s+(-\w+\s+)*root\b/, /chmod\s+[ugo]*\+s\b/, /chmod\s+[2467][0-7]{3}\b/];
 /** Reads an SPK without installing it and reports how it would run on DSM. */
 export async function inspectStandaloneSpk(spkPath) {
@@ -41,8 +44,9 @@ export async function inspectSpk(spkPath, expectedKind) {
             for (const key of ["package", "version", "arch", "os_min_ver", "checksum"])
                 if (!info[key])
                     findings.push(`Missing INFO ${key}`);
+            const icon = inspectPackageIcons(dir, findings);
             return { kind: "native-layout", package: info.package, version: info.version, arch: info.arch,
-                signed: existsSync(join(dir, "syno_signature.asc")), payload, findings, capabilities: [] };
+                signed: existsSync(join(dir, "syno_signature.asc")), payload, findings, capabilities: [], icon };
         }
         const payload = await listPayload(join(dir, "package.tgz"), findings);
         const paths = new Set(payload.map(entry => entry.path));
@@ -112,6 +116,7 @@ export async function inspectSpk(spkPath, expectedKind) {
             await checkEntryLauncher(dir, info.package, metadata.entry, findings);
         if (standalone)
             checkSharedFolder(dir, findings, info.package, sharedFolder, executor?.policy.scope === 'install-selected', portal);
+        const icon = inspectPackageIcons(dir, findings);
         const cgiEntry = payload.find((entry) => entry.path === CGI_PAYLOAD_PATH);
         if (standalone && !cgiEntry) {
             findings.push(`payload 沒有 ${CGI_PAYLOAD_PATH}`);
@@ -121,6 +126,7 @@ export async function inspectSpk(spkPath, expectedKind) {
         }
         return {
             kind,
+            icon,
             ...(executor ? { executor } : {}),
             ...(portal ? { portal: { appId: portal.appId, alias: portal.alias } } : {}),
             ...(metadata.entry ? { entry: metadata.entry } : {}),
@@ -156,6 +162,35 @@ async function checkEntryLauncher(dir, pkg, entry, findings) {
         findings.push(`ENTRY_LAUNCHER_MISMATCH sdk-package.json 宣告 entry: ${entry}，但 ui/config 的 launcher 不是 ${JSON.stringify(expected)}；請用 synopkgland build 重新產生`);
     }
 }
+/** Package Center shows PACKAGE_ICON at 64 and 256 px; the package source refuses a release whose icon is over 256 KiB. */
+function inspectPackageIcons(dir, findings) {
+    for (const [name, size] of [["PACKAGE_ICON.PNG", 64], ["PACKAGE_ICON_256.PNG", 256]]) {
+        const bytes = readOptionalBytes(join(dir, name));
+        if (!bytes)
+            continue;
+        if (bytes.length > MAX_ICON_BYTES) {
+            findings.push(`${name} 有 ${bytes.length} bytes，超過 package source 的 256 KiB 上限；上架後整個版本會被拒收`);
+            continue;
+        }
+        try {
+            const image = decodePng(bytes);
+            if (image.width !== size || image.height !== size)
+                findings.push(`${name} 是 ${image.width}×${image.height}，Package Center 需要 ${size}×${size}`);
+        }
+        catch (error) {
+            findings.push(`${name}：${error.message}`);
+        }
+    }
+    const big = readOptionalBytes(join(dir, "PACKAGE_ICON_256.PNG"));
+    if (!big)
+        return { source: "none" };
+    return big.equals(defaultPackageIcons().packageIcon256)
+        ? { source: "default" }
+        : { source: "custom", sha256: createHash("sha256").update(big).digest("hex") };
+}
+function readOptionalBytes(path) {
+    return existsSync(path) ? readFileSync(path) : undefined;
+}
 const OS_MIN_VER = /^7\.\d+(\.\d+)?-\d+$/;
 /** INFO os_min_ver and arch must be values DSM accepts, and arch must match the shipped CGI. */
 async function checkArch(dir, info, kind, hasCgi, findings) {
@@ -211,7 +246,11 @@ async function checkDaemon(dir, info, paths, payload, findings, executor, backgr
         if (payload.find(p => p.path === `daemon/payload/${daemon.exec}`)?.mode !== "0755")
             throw new Error("missing executable");
         const manifest = { package: info.package, daemon, capabilities: { ...(executor ? { rootOps: true } : {}), ...(background ? { jobs: { worker: 'sha256-v1' } } : {}) } };
-        if (readFileSync(join(unpacked, "daemon/config.json"), "utf8") !== daemonConfig(manifest))
+        // A config from before timeouts.uninstall pairs with a control that rejects the key.
+        const legacy = typeof config.timeouts === "object" && config.timeouts !== null && !("uninstall" in config.timeouts);
+        const { uninstall: _, ...legacyTimeouts } = daemon.timeouts;
+        const canonical = daemonConfig(legacy ? { ...manifest, daemon: { ...daemon, timeouts: legacyTimeouts } } : manifest);
+        if (readFileSync(join(unpacked, "daemon/config.json"), "utf8") !== canonical)
             throw new Error("non-canonical daemon config");
         for (const hook of ["start-stop-status", "preupgrade", "preuninst"]) {
             if (readFileSync(join(dir, "scripts", hook), "utf8") !== renderStandaloneScript(hook, manifest))

package/dist/standalone/manifest.d.ts

@@ -2,7 +2,8 @@ import { type PackageMetadata } from "../package-metadata.js";
 import { type DelegateCapability } from "../runtime/executor-policy.js";
 import type { ExecutorPins } from "../runtime/executor-tasks.js";
 import { type NativeArchFamily } from "../build-spk/dsm-arch.js";
-import { type Catalogs, type Locale } from "./i18n.js";
+import { type Catalogs, type InfoTranslations } from "./i18n.js";
+export type { InfoText } from "./i18n.js";
 import { type RootOp } from "./root-ops.js";
 import { type Daemon } from "./daemon.js";
 import { type Background } from "./background.js";
@@ -22,15 +23,11 @@ export type StandaloneBackend = {
     kind: "binary";
     files: Partial<Record<NativeArchFamily, string>>;
 };
-export interface InfoText {
-    displayname?: string;
-    description?: string;
-}
 export interface StandaloneI18n {
     /** UI messages per locale, embedded into the DSM window. */
     catalogs?: Catalogs;
     /** INFO `displayname_<dsm lang>` / `description_<dsm lang>`. */
-    info: Partial<Record<Locale, InfoText>>;
+    info: InfoTranslations;
 }
 export interface StandaloneManifest {
     metadata?: PackageMetadata;
@@ -69,6 +66,8 @@ export interface StandaloneManifest {
     entry?: EntryMode;
     /** `portal`: registers the DSM Application Portal entry; an administrator activates it. */
     portal?: PortalDeclaration;
+    /** `icon`: a square PNG of at least 256 px, or a directory of icon_<size>.png; absent uses the SDK default. */
+    icon?: string;
 }
 /**
  * `admin-only`: DSM administrators only. `app-privilege`: administrators and