@synopackageland/cli 0.9.4 → 0.9.6

package/CHANGELOG.md

@@ -1,5 +1,99 @@
 # Changelog
 
+## 0.9.6 (2026-10-12)
+
+Builds with SDK 0.9.7 and templates 0.9.6: `init` writes SDK v0.9.7 (Go
+module and Rust crate tag), `@synopackageland/sdk` 0.9.7 and
+`@synopackageland/ui` 0.9.2. The executor digest table records SDK 0.9.7,
+whose executor and lifecycle binary changed, so a rebuilt App carries new
+executor digests. SDK 0.9.7 adds `bg.jobs.pause` and `bg.jobs.resume` to the
+policy, so the policy digest of every App changes: after the upgrade, every
+App asks for approval again.
+
+繁中摘要：使用 SDK 0.9.7 與 templates 0.9.6（UI 0.9.2）。executor digest 表加入
+SDK 0.9.7；executor 與 lifecycle 都有變更，重建的 App 會帶新的 executor digest。
+SDK 0.9.7 的 policy 新增 `bg.jobs.pause`、`bg.jobs.resume`，所有 App 的 policy
+digest 都會變，升級後都需要重新核准。新增解除安裝 hook（`uninstall.purge`）。
+
+- Uninstall hook: `uninstall.purge` in dsm-package.yaml (`exec`, `args`,
+  `env`, `timeout` 2..120 s, optional `root`) names the App's own command,
+  and `uninstall.state.items` lists the state it can delete, each with an
+  `uninstall.state.<key>` text. On a real uninstall preuninst stops the
+  worker and the daemon, runs the hook as the package account with
+  `SYNOPKGLAND_DELETE_STATE` and `SYNOPKGLAND_REMOVE_DATA`, then asks the
+  executor to purge; a failing or timed-out hook is logged and never blocks
+  the uninstall, and an upgrade skips it. The wizard gains an unchecked
+  "delete state" box after the item texts. `purge.root` names a rootOps
+  script the executor runs as root only while its approval stands; the
+  policy's `purge` member records it, so such an App asks for approval
+  again. Build refuses a hook outside the package or one that tries to
+  become root. inspect checks an executor SPK's preuninst and wizard against
+  the hook recorded in sdk-package.json, and that record's root step against
+  the policy's `purge`.
+- `init` and `add` change only the dsm-package.yaml keys they set
+  (`capabilities`, `portal`, `os_min_ver`); the template's comments, such as
+  the commented `uninstall` example, and its formatting stay as written.
+- With `SYNOPKGLAND_SDK_DIR`, init also drops the released SDK from the
+  frontend's package-lock.json, so npm installs the local ts package.
+
+## 0.9.5 (2026-10-12)
+
+Builds with SDK 0.9.6 and templates 0.9.5: `init` writes SDK v0.9.6,
+`@synopackageland/sdk` 0.9.6 and `@synopackageland/ui` 0.9.2. The executor
+digest table records SDK 0.9.6, whose executor registers the portal entry
+and checks a grant's background work from the browser address it recorded,
+so a rebuilt App carries new executor digests. The policy digest changes
+only for an App whose executor registers its portal entry (a portal and
+os_min_ver below 7.2): after the upgrade it asks for approval again. Other
+Apps keep their policy digest.
+
+繁中摘要：使用 SDK 0.9.6 與 templates 0.9.5（UI 0.9.2）。executor digest 表加入
+SDK 0.9.6，重建的 App 會帶新的 executor digest。只有由 executor 註冊入口的
+portal App（宣告 portal 且 os_min_ver 低於 7.2）policy digest 會變，升級後需重新
+核准；其他 App 的 policy digest 不變。DSM 7.1 起可用 portal（executor 模式）。
+
+- The generated DSM window stays inside the desktop: its width is at most the
+  viewport's and its height at most the viewport's less the DSM taskbar. This
+  applies to the default 960×640 and to the size DSM restores from
+  `restoreSizePos`, which may have been saved on a larger screen. Position and
+  maximized state are restored as before.
+- Native root authorization (`createRootAccess` from
+  `@synopackageland/cli/authorization-sdk`): the first `run` after an `authorize`
+  runs the task that `authorize` just read back as exactly ours, instead of
+  reading the TaskScheduler list and task again. Any later run, a repair, and
+  a run after `remove` still read DSM first; `authorize` still reads the task
+  back after creating it and checks its identity and script.
+- Native root authorization polls the task history every 0.5 s, then at most
+  once a second (was up to every 2 s), so a finished root task is seen up to
+  1 s sooner.
+- A portal works from DSM 7.1-42661 on. Below 7.2-64570 (executor mode) the
+  SPK carries no web-config resource, `etc/portal.*`, alias wizard step or
+  alias lifecycle; the executor policy carries `portal: {application, alias}`
+  and the `portal.register` / `portal.unregister` operations, and the CGI is
+  built with `-X main.portal=executor`. A package name or displayname the
+  executor would refuse fails with `STANDALONE_PORTAL_ENTRY_INVALID`; below
+  7.1 `STANDALONE_PORTAL_MIN_DSM` still refuses the portal, and `add portal`
+  raises os_min_ver only to 7.1-42661. inspect reports the policy's entry
+  and flags an INFO os_min_ver below 7.1. Needs templates 0.9.5 and SDK 0.9.6.
+- `ctx.portal` in executor mode: `status()` carries `entry`, administrators
+  get `register()` and `unregister()`, and the plain panel offers "Enable
+  entry", "Remove entry" or the alias form by entry state. New texts in nine
+  languages, including `PORTAL_FAILED`. The panel's Korean texts use the
+  formal -십시오 register.
+- The uninstall wizard and the cleanup list of an executor-mode portal App
+  warn that a stopped or never-approved executor leaves the entry, and give
+  the root cleanup commands.
+- native-layout: `portal: {}` or `{alias}` (DSM 7.1-42661+) writes
+  `synopkgland_portal_alias` into INFO for the product's own root helper;
+  inspect checks it against `native-layout.json`.
+- DSM's web-config portal registration now needs `os_min_ver` 7.2-64570 or
+  later instead of 7.3.2-86009. DSM 7.1's package manager marks the web-config
+  worker Synology-only and refuses it in an unsigned SPK (error 320); synopkg
+  from DSM 7.2 on drops that mark, the only change to its worker table. The
+  7.2 floor comes from that source and is not yet verified on a 7.2 NAS.
+  inspect flags a web-config portal SPK whose INFO os_min_ver is lower, with
+  this reason.
+
 ## 0.9.4 (2026-10-12)
 
 Builds with SDK 0.9.5 and templates 0.9.4: `init` writes SDK v0.9.5 and

package/README.md

@@ -72,7 +72,7 @@ Add them with `init --with …` or later with `synopkgland add <capability…>`.
 | `login` | Sign users in with their DSM account, without the DSM desktop | Nobody; requires HTTPS for password sign-in |
 | `delegate` | Move files into a user's chosen folder while the user is offline | An administrator, once |
 | `root-ops` | Run fixed `root/*.sh` scripts for administrators | An administrator, once |
-| `portal` | Open the app from its own Application Portal alias | An administrator sets the alias; needs `root-ops` or `delegate` and DSM 7.3.2-86009+ |
+| `portal` | Open the app from its own Application Portal alias | An administrator sets the alias; needs `root-ops` or `delegate` and DSM 7.1-42661+ (below 7.2-64570 the executor registers the entry) |
 
 Delegate is implemented; its default operation is `files.moveFromStaging`.
 Device lifecycle acceptance on real hardware is still pending for delegate and root operations.

package/assets/licenses/MUSL-COPYRIGHT

@@ -0,0 +1,193 @@
+musl as a whole is licensed under the following standard MIT license:
+
+----------------------------------------------------------------------
+Copyright © 2005-2020 Rich Felker, et al.
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+----------------------------------------------------------------------
+
+Authors/contributors include:
+
+A. Wilcox
+Ada Worcester
+Alex Dowad
+Alex Suykov
+Alexander Monakov
+Andre McCurdy
+Andrew Kelley
+Anthony G. Basile
+Aric Belsito
+Arvid Picciani
+Bartosz Brachaczek
+Benjamin Peterson
+Bobby Bingham
+Boris Brezillon
+Brent Cook
+Chris Spiegel
+Clément Vasseur
+Daniel Micay
+Daniel Sabogal
+Daurnimator
+David Carlier
+David Edelsohn
+Denys Vlasenko
+Dmitry Ivanov
+Dmitry V. Levin
+Drew DeVault
+Emil Renner Berthing
+Fangrui Song
+Felix Fietkau
+Felix Janda
+Gianluca Anzolin
+Hauke Mehrtens
+He X
+Hiltjo Posthuma
+Isaac Dunham
+Jaydeep Patil
+Jens Gustedt
+Jeremy Huntwork
+Jo-Philipp Wich
+Joakim Sindholt
+John Spencer
+Julien Ramseier
+Justin Cormack
+Kaarle Ritvanen
+Khem Raj
+Kylie McClain
+Leah Neukirchen
+Luca Barbato
+Luka Perkov
+M Farkas-Dyck (Strake)
+Mahesh Bodapati
+Markus Wichmann
+Masanori Ogino
+Michael Clark
+Michael Forney
+Mikhail Kremnyov
+Natanael Copa
+Nicholas J. Kain
+orc
+Pascal Cuoq
+Patrick Oppenlander
+Petr Hosek
+Petr Skocik
+Pierre Carrier
+Reini Urban
+Rich Felker
+Richard Pennington
+Ryan Fairfax
+Samuel Holland
+Segev Finer
+Shiz
+sin
+Solar Designer
+Stefan Kristiansson
+Stefan O'Rear
+Szabolcs Nagy
+Timo Teräs
+Trutz Behn
+Valentin Ochs
+Will Dietz
+William Haddon
+William Pitcock
+
+Portions of this software are derived from third-party works licensed
+under terms compatible with the above MIT license:
+
+The TRE regular expression implementation (src/regex/reg* and
+src/regex/tre*) is Copyright © 2001-2008 Ville Laurikari and licensed
+under a 2-clause BSD license (license text in the source files). The
+included version has been heavily modified by Rich Felker in 2012, in
+the interests of size, simplicity, and namespace cleanliness.
+
+Much of the math library code (src/math/* and src/complex/*) is
+Copyright © 1993,2004 Sun Microsystems or
+Copyright © 2003-2011 David Schultz or
+Copyright © 2003-2009 Steven G. Kargl or
+Copyright © 2003-2009 Bruce D. Evans or
+Copyright © 2008 Stephen L. Moshier or
+Copyright © 2017-2018 Arm Limited
+and labelled as such in comments in the individual source files. All
+have been licensed under extremely permissive terms.
+
+The ARM memcpy code (src/string/arm/memcpy.S) is Copyright © 2008
+The Android Open Source Project and is licensed under a two-clause BSD
+license. It was taken from Bionic libc, used on Android.
+
+The AArch64 memcpy and memset code (src/string/aarch64/*) are
+Copyright © 1999-2019, Arm Limited.
+
+The implementation of DES for crypt (src/crypt/crypt_des.c) is
+Copyright © 1994 David Burren. It is licensed under a BSD license.
+
+The implementation of blowfish crypt (src/crypt/crypt_blowfish.c) was
+originally written by Solar Designer and placed into the public
+domain. The code also comes with a fallback permissive license for use
+in jurisdictions that may not recognize the public domain.
+
+The smoothsort implementation (src/stdlib/qsort.c) is Copyright © 2011
+Valentin Ochs and is licensed under an MIT-style license.
+
+The x86_64 port was written by Nicholas J. Kain and is licensed under
+the standard MIT terms.
+
+The mips and microblaze ports were originally written by Richard
+Pennington for use in the ellcc project. The original code was adapted
+by Rich Felker for build system and code conventions during upstream
+integration. It is licensed under the standard MIT terms.
+
+The mips64 port was contributed by Imagination Technologies and is
+licensed under the standard MIT terms.
+
+The powerpc port was also originally written by Richard Pennington,
+and later supplemented and integrated by John Spencer. It is licensed
+under the standard MIT terms.
+
+All other files which have no copyright comments are original works
+produced specifically for use as part of this library, written either
+by Rich Felker, the main author of the library, or by one or more
+contibutors listed above. Details on authorship of individual files
+can be found in the git version control history of the project. The
+omission of copyright and license comments in each file is in the
+interest of source tree size.
+
+In addition, permission is hereby granted for all public header files
+(include/* and arch/*/bits/*) and crt files intended to be linked into
+applications (crt/*, ldso/dlstart.c, and arch/*/crt_arch.h) to omit
+the copyright notice and permission notice otherwise required by the
+license, and to use these files without any requirement of
+attribution. These files include substantial contributions from:
+
+Bobby Bingham
+John Spencer
+Nicholas J. Kain
+Rich Felker
+Richard Pennington
+Stefan Kristiansson
+Szabolcs Nagy
+
+all of whom have explicitly granted such permission.
+
+This file previously contained text expressing a belief that most of
+the files covered by the above exception were sufficiently trivial not
+to be subject to copyright, resulting in confusion over whether it
+negated the permissions granted in the license. In the spirit of
+permissive licensing, and of not having licensing issues being an
+obstacle to adoption, that text has been removed.