@synopackageland/cli 0.9.6 → 0.10.0

package/dist/standalone/root-ops.d.ts

@@ -1,8 +1,16 @@
 import type { StandaloneError } from "./manifest.js";
-/** Fixed root scripts are dispatched only through executor root.run. */
+import { type NativeArchFamily } from "../build-spk/dsm-arch.js";
+import { type RootSettings } from "../runtime/root-programs.js";
+/** Fixed root programs, run only by the executor: a script, or a binary per architecture. */
 export interface RootOp {
     name: string;
-    body: string;
+    /** root/<name>.sh */
+    body?: string;
+    /** root/<arch>/<name>, declared `kind: binary` in root.programs. */
+    binary?: Partial<Record<NativeArchFamily, {
+        path: string;
+        digest: string;
+    }>>;
 }
 export type RootOpsResult = {
     ok: true;
@@ -15,3 +23,16 @@ export declare const ROOT_OPS_DIR = "root";
 /** Shell that tries to become root: sudo, chown root or setuid/setgid modes. */
 export declare const ROOT_SCRIPT_HINTS: RegExp[];
 export declare function loadRootOps(dir: string): RootOpsResult;
+/** Every binary root program is declared kind: binary and built for each architecture the package ships. */
+export declare function rootBinaryProblem(ops: readonly RootOp[], settings: RootSettings | undefined, arches: readonly NativeArchFamily[]): string | undefined;
+/**
+ * dsm-package.yaml `root`: `programs.<name>` gives a root/ program its kind,
+ * params schema and run or job limits; `stop` names the program the executor
+ * runs at package stop and upgrade; `state: true` gives root programs a
+ * directory only root can read. Returns why the settings are refused.
+ */
+export declare function readRootSettings(value: unknown, ops: readonly RootOp[] | undefined): {
+    settings: RootSettings;
+} | {
+    error: string;
+};

package/dist/standalone/root-ops.js

@@ -1,46 +1,151 @@
 import { existsSync, lstatSync, readdirSync, readFileSync } from "node:fs";
 import { join } from "node:path";
+import { createHash } from "node:crypto";
+import { isNativeArchFamily } from "../build-spk/dsm-arch.js";
+import { ELF_MACHINE } from "./binary.js";
+import { rootLimitsProblem, rootSchemaProblem } from "../runtime/root-programs.js";
 export const ROOT_OPS_DIR = "root";
 /** Shell that tries to become root: sudo, chown root or setuid/setgid modes. */
 export const ROOT_SCRIPT_HINTS = [/\bsudo\b/, /\bchown\s+(-\w+\s+)*root\b/, /chmod\s+[ugo]*\+s\b/, /chmod\s+[2467][0-7]{3}\b/];
 const MAX_ROOT_OP_BYTES = 16 * 1024;
+const MAX_ROOT_BINARY_BYTES = 64 * 1024 * 1024;
+const ELF_MAGIC = Buffer.from([0x7f, 0x45, 0x4c, 0x46]);
 const OP_FILE = /^([a-z][a-z0-9_]{0,31})\.sh$/;
 export function loadRootOps(dir) {
     const names = existsSync(dir) ? readdirSync(dir).sort() : [];
     if (names.length === 0) {
         return {
             ok: false,
-            errors: [{ code: "STANDALONE_ROOT_OPS_MISSING", message: `capabilities.rootOps: true 需要 ${ROOT_OPS_DIR}/<名稱>.sh，至少一個 root 操作。` }],
+            errors: [{ code: "STANDALONE_ROOT_OPS_MISSING", message: `capabilities.rootOps: true needs at least one root operation at ${ROOT_OPS_DIR}/<name>.sh.` }],
         };
     }
     const errors = [];
-    const ops = [];
+    const invalid = (file, error) => errors.push({ code: "STANDALONE_ROOT_OP_INVALID", message: `${ROOT_OPS_DIR}/${file}: ${error}` });
+    const ops = new Map();
     for (const file of names) {
-        const op = readRootOp(join(dir, file), file);
-        if ("error" in op) {
-            errors.push({ code: "STANDALONE_ROOT_OP_INVALID", message: `${ROOT_OPS_DIR}/${file}：${op.error}` });
-        }
-        else {
-            ops.push(op);
+        if (isNativeArchFamily(file) && lstatSync(join(dir, file)).isDirectory()) {
+            for (const name of readdirSync(join(dir, file)).sort()) {
+                const binary = readRootBinary(join(dir, file, name), name, file);
+                if ("error" in binary)
+                    invalid(`${file}/${name}`, binary.error);
+                else if (ops.get(name)?.body !== undefined)
+                    invalid(`${file}/${name}`, `has the same name as ${ROOT_OPS_DIR}/${name}.sh.`);
+                else
+                    ops.set(name, { name, binary: { ...ops.get(name)?.binary, [file]: binary } });
+            }
+            continue;
         }
+        const op = readRootOp(join(dir, file), file);
+        if ("error" in op)
+            invalid(file, op.error);
+        else if (ops.has(op.name))
+            invalid(file, `has the same name as ${ROOT_OPS_DIR}/<arch>/${op.name}.`);
+        else
+            ops.set(op.name, op);
+    }
+    const sorted = [...ops.values()].sort((a, b) => a.name < b.name ? -1 : 1);
+    return errors.length === 0 ? { ok: true, ops: sorted } : { ok: false, errors };
+}
+/** root/<arch>/<name>: an ELF executable for that architecture. */
+function readRootBinary(path, name, arch) {
+    if (!/^[a-z][a-z0-9_]{0,31}$/.test(name))
+        return { error: "A binary file name must consist of lowercase alphanumerics and underscores (at most 32 characters)." };
+    const stat = lstatSync(path);
+    if (!stat.isFile())
+        return { error: "It must be a regular file (not a symlink or directory)." };
+    if (stat.size > MAX_ROOT_BINARY_BYTES)
+        return { error: `It must not exceed ${MAX_ROOT_BINARY_BYTES} bytes.` };
+    const bytes = readFileSync(path);
+    if (bytes.length < 20 || !bytes.subarray(0, 4).equals(ELF_MAGIC) || bytes.readUInt16LE(18) !== ELF_MACHINE[arch])
+        return { error: `It must be an ${arch} ELF executable.` };
+    return { path, digest: createHash("sha256").update(bytes).digest("hex") };
+}
+/** Every binary root program is declared kind: binary and built for each architecture the package ships. */
+export function rootBinaryProblem(ops, settings, arches) {
+    for (const op of ops) {
+        if (!op.binary)
+            continue;
+        if (settings?.programs?.[op.name]?.kind !== "binary")
+            return `root: ${ROOT_OPS_DIR}/<arch>/${op.name} needs root.programs.${op.name}.kind: binary.`;
+        const missing = arches.filter(arch => !op.binary[arch]);
+        if (missing.length)
+            return `root: binary program ${op.name} is missing ${missing.map(arch => `${ROOT_OPS_DIR}/${arch}/${op.name}`).join(", ")}.`;
     }
-    return errors.length === 0 ? { ok: true, ops } : { ok: false, errors };
+    return undefined;
 }
 function readRootOp(path, file) {
     const name = OP_FILE.exec(file)?.[1];
     if (!name) {
-        return { error: "檔名必須是小寫英數與底線組成的 <名稱>.sh（最多 32 字元），此資料夾不放其他檔案。" };
+        return { error: "The file name must be <name>.sh with lowercase alphanumerics and underscores (at most 32 characters); this directory holds nothing else." };
     }
     const stat = lstatSync(path);
     if (!stat.isFile()) {
-        return { error: "必須是一般檔案（不可是 symlink 或資料夾）。" };
+        return { error: "It must be a regular file (not a symlink or directory)." };
     }
     if (stat.size > MAX_ROOT_OP_BYTES) {
-        return { error: `不可超過 ${MAX_ROOT_OP_BYTES} bytes。` };
+        return { error: `It must not exceed ${MAX_ROOT_OP_BYTES} bytes.` };
     }
     const body = readFileSync(path, "utf8");
     if (!body.startsWith("#!/bin/sh\n") || body.includes("\0") || body.includes("�")) {
-        return { error: "必須是以 #!/bin/sh 開頭的 UTF-8 文字 script。" };
+        return { error: "It must be a UTF-8 text script starting with #!/bin/sh." };
     }
     return { name, body };
 }
+const ROOT_SETTINGS_FIELDS = ["programs", "stop", "state"];
+const PROGRAM_FIELDS = ["kind", "schema", "run", "job"];
+/**
+ * dsm-package.yaml `root`: `programs.<name>` gives a root/ program its kind,
+ * params schema and run or job limits; `stop` names the program the executor
+ * runs at package stop and upgrade; `state: true` gives root programs a
+ * directory only root can read. Returns why the settings are refused.
+ */
+export function readRootSettings(value, ops) {
+    const fail = (why) => ({ error: `root: ${why}` });
+    if (!ops)
+        return fail("capabilities.rootOps: true is required.");
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return fail(`Only ${ROOT_SETTINGS_FIELDS.join(", ")} are accepted.`);
+    const raw = value;
+    const other = Object.keys(raw).find(key => !ROOT_SETTINGS_FIELDS.includes(key));
+    if (other)
+        return fail(`Unsupported ${other}; only ${ROOT_SETTINGS_FIELDS.join(", ")} are accepted (the uninstall root program is written in uninstall.purge.root).`);
+    const names = new Set(ops.map(op => op.name));
+    const programs = raw.programs ?? {};
+    if (typeof programs !== "object" || programs === null || Array.isArray(programs))
+        return fail("programs is <name>: {kind, schema, run, job}.");
+    for (const [name, setting] of Object.entries(programs)) {
+        const problem = programProblem(name, setting, ops.find(op => op.name === name));
+        if (problem)
+            return fail(`programs.${name}: ${problem}`);
+    }
+    if (raw.stop !== undefined && (typeof raw.stop !== "string" || !names.has(raw.stop)))
+        return fail(`stop must be a program name in root/, not ${JSON.stringify(raw.stop)}.`);
+    if (raw.state !== undefined && raw.state !== true)
+        return fail("state can only be true (the state directory of root programs).");
+    return { settings: raw };
+}
+function programProblem(name, value, op) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return "It must be {kind, schema, run, job}.";
+    const setting = value;
+    const other = Object.keys(setting).find(key => !PROGRAM_FIELDS.includes(key));
+    if (other)
+        return `Unsupported ${other}; only ${PROGRAM_FIELDS.join(", ")} are accepted.`;
+    const kind = setting.kind ?? "script";
+    if (kind !== "script" && kind !== "binary")
+        return "kind is script or binary.";
+    if (!op || (kind === "script") !== (op.body !== undefined))
+        return `There is no matching ${kind === "script" ? `${ROOT_OPS_DIR}/${name}.sh` : `${ROOT_OPS_DIR}/<arch>/${name}`}.`;
+    if (setting.schema !== undefined) {
+        const problem = typeof setting.schema === "object" && setting.schema !== null && setting.schema.type === "object"
+            ? rootSchemaProblem(setting.schema) : "schema must be a JSON Schema with type: object";
+        if (problem)
+            return `schema: ${problem}.`;
+    }
+    for (const which of ["run", "job"]) {
+        const problem = setting[which] === undefined ? undefined : rootLimitsProblem(setting[which], which);
+        if (problem)
+            return `${problem}.`;
+    }
+    return undefined;
+}

package/dist/standalone/sdk-check.js

@@ -4,7 +4,7 @@ import { CLI_VERSION } from "../cli-version.js";
 import { appSdkVersion, SDK_DEPENDENCY, SDK_PACKAGE } from "../runtime/sdk-source.js";
 const minorLine = (version) => version.split(".").slice(0, 2).join(".");
 /** The file that names each backend kind's SDK version. */
-const SDK_VERSION_FILE = { go: "backend/go.mod", rust: "backend/Cargo.lock" };
+const SDK_VERSION_FILE = { go: "backend/go.mod", rust: "Cargo.lock", python: "backend.sdk", node: "backend.sdk" };
 /**
  * The backend's dependency files name the App's SDK version; the frontend
  * package and this CLI must agree with it. `needsSdk`: the App declares
@@ -22,16 +22,16 @@ export function sdkProblems(backend, frontendDir, needsSdk, cliVersion = CLI_VER
         throw error;
     }
     if (!version) {
-        return needsSdk ? [{ code: "SDK_REQUIRED", message: `capabilities.delegate 與 rootOps 需要 SDK（${minorLine(cliVersion)}.x）：${SDK_DEPENDENCY[backend.kind]}` }] : [];
+        return needsSdk ? [{ code: "SDK_REQUIRED", message: `Python, Node and Rust Apps, plus capabilities.delegate and rootOps, need the SDK (${minorLine(cliVersion)}.x): ${SDK_DEPENDENCY[backend.kind]}` }] : [];
     }
     const file = SDK_VERSION_FILE[backend.kind];
     const problems = [];
     if (minorLine(version) !== minorLine(cliVersion)) {
-        problems.push({ code: "SDK_UNSUPPORTED", message: `${file} 要求 SDK ${version}；CLI ${cliVersion} 只支援 SDK ${minorLine(cliVersion)}.x。請改用對應的 CLI，或把 SDK 升到 ${minorLine(cliVersion)}.x。` });
+        problems.push({ code: "SDK_UNSUPPORTED", message: `${file} requires SDK ${version}; CLI ${cliVersion} supports only SDK ${minorLine(cliVersion)}.x. Use the matching CLI, or raise the SDK to ${minorLine(cliVersion)}.x.` });
     }
     const frontend = frontendDir === undefined ? undefined : frontendSdkVersion(frontendDir);
     if (frontend && frontend.version !== version) {
-        problems.push({ code: "SDK_VERSION_MISMATCH", message: `frontend/package.json 的 ${SDK_PACKAGE} 是 ${frontend.spec}（${frontend.version ?? "讀不到版本"}），${file} 要求 ${version}；兩者必須相同。` });
+        problems.push({ code: "SDK_VERSION_MISMATCH", message: `frontend/package.json has ${SDK_PACKAGE} ${frontend.spec} (${frontend.version ?? "version unreadable"}), while ${file} requires ${version}; the two must match.` });
     }
     return problems;
 }

package/dist/standalone/shared-folder.js

@@ -14,25 +14,25 @@ export function readSharedFolder(value, fail) {
         return undefined;
     };
     if (!isRecord(value) || Object.keys(value).some((key) => key !== "sharedFolder")) {
-        return refuse("：install 只接受 sharedFolder。");
+        return refuse(": only sharedFolder is allowed.");
     }
     const folder = value.sharedFolder;
     if (!isRecord(folder) || Object.keys(folder).some((key) => !FIELDS.has(key))) {
-        return refuse("只接受 mode、key、name 與 permission。");
+        return refuse(" accepts only mode, key, name and permission.");
     }
     const { mode, key, name, permission } = folder;
     if (mode !== "select" && mode !== "create")
-        return refuse("的 mode 必須是 select 或 create。");
+        return refuse(" mode must be select or create.");
     if (permission !== "ro" && permission !== "rw")
-        return refuse("的 permission 必須是 ro 或 rw。");
+        return refuse(" permission must be ro or rw.");
     if (typeof key !== "string" || !KEY.test(key) || RESERVED_KEY.test(key)) {
-        return refuse("的 key 必須是小寫英文字母開頭、只含小寫英數與底線（最長 32 字），且不能以 pkgwizard_、synopkg、change_ 開頭。");
+        return refuse(" key must start with a lowercase letter, contain only lowercase alphanumerics and underscores (at most 32 characters), and must not start with pkgwizard_, synopkg or change_.");
     }
     if (mode === "select") {
-        return name === undefined ? { mode, key, permission } : refuse("的 name 只用於 create；select 由安裝精靈選擇。");
+        return name === undefined ? { mode, key, permission } : refuse(" name applies only to create; select is chosen by the install wizard.");
     }
     if (typeof name !== "string" || !SHARE_NAME.test(name) || SYSTEM_SHARE.test(name)) {
-        return refuse("create 需要 name：英數字開頭、只含英數字、底線與連字號（最長 32 字），且不能是 DSM 系統共用資料夾名稱。");
+        return refuse("create needs name: start with an alphanumeric, contain only alphanumerics, underscores and hyphens (at most 32 characters), and not be a DSM system shared folder name.");
     }
     return { mode, key, name, permission };
 }

package/dist/standalone/spk.d.ts

@@ -16,6 +16,8 @@ export interface AssembleOptions {
     daemonControl?: string;
     /** The compiled background worker, required exactly when capabilities.jobs is enabled. */
     backgroundWorker?: string;
+    /** A Python, Node or Rust App's finished directory, installed as target/app. */
+    app?: string;
 }
 /**
  * Packs an unsigned Standalone Package SPK. DSM runs installation/lifecycle

package/dist/standalone/spk.js

@@ -17,9 +17,11 @@ import { DSM_LANGS, LOCALES } from "./i18n.js";
 import { appTitle, CGI_PAYLOAD_PATH, renderUiConfig, renderWindowScript, windowScriptName } from "./dsm-window.js";
 import { writeUiTexts } from "../build-spk/ui-texts.js";
 import { copyStandaloneNotices } from "../build-spk/notices.js";
+import { copyAppTree } from "./bridge-app.js";
+import { isBridgeBackend } from "./bridge-backend.js";
 import { hostScriptName, renderHostAdapterScript } from "./host-adapter.js";
 import { copyDaemonPayload } from "./daemon.js";
-import { BACKGROUND_UNIT_DIR, BACKGROUND_WORKER_PAYLOAD, backgroundUnitName, renderBackgroundUnit } from "./background.js";
+import { BACKGROUND_UNIT_DIR, BACKGROUND_WORKER_PAYLOAD, backgroundUnitName, renderBackgroundUnit, BRIDGE_WORKER_ARGS } from "./background.js";
 import { renderStandaloneResource } from "./resource.js";
 import { nativePortal } from "./portal.js";
 import { portalByExecutor } from "../build-spk/dsm-version.js";
@@ -63,8 +65,8 @@ export async function assembleStandaloneSpk(options) {
         const appDir = join(uiRoot, "app");
         copyUiTree(manifest.ui.dir, appDir);
         const assetVersion = digestTree(appDir).slice(0, 12);
-        writeFile(join(uiRoot, "config"), renderUiConfig(manifest));
-        writeFile(join(uiRoot, windowScriptName(manifest)), renderWindowScript(manifest, assetVersion));
+        writeFile(join(uiRoot, "config"), renderUiConfig(manifest, icons));
+        writeFile(join(uiRoot, windowScriptName(manifest)), renderWindowScript(manifest, assetVersion, icons));
         writeFile(join(uiRoot, hostScriptName(manifest.build)), renderHostAdapterScript(manifest.package));
         writeDsmWindowIcons(uiRoot, icons);
         writeUiTexts(uiRoot, appTitle(manifest));
@@ -86,9 +88,14 @@ export async function assembleStandaloneSpk(options) {
             chmodSync(worker, EXEC_MODE);
         }
         const backend = manifest.backend;
+        if (isBridgeBackend(backend)) {
+            if (!options.app)
+                throw new StandaloneBuildError("STANDALONE_BRIDGE_APP_INVALID", "App directory required.");
+            copyAppTree(options.app, join(staging, "package", "app"));
+        }
         // A daemon is a Go program of the project's backend directory.
         const sdk = backend.kind !== 'binary' ? backend : manifest.daemon ? { kind: 'go', dir: join(manifest.root, 'backend') } : undefined;
-        copyStandaloneNotices(manifest.root, manifest.ui.dir, join(staging, 'package'), { go: backend.kind === 'go' || Boolean(manifest.daemon), rust: backend.kind === 'rust', sdk });
+        copyStandaloneNotices(manifest.root, manifest.ui.dir, join(staging, 'package'), { go: backend.kind !== 'binary' || Boolean(manifest.daemon), rust: backend.kind === 'rust', sdk });
         if (manifest.daemon)
             copyFileSync(new URL('../../assets/licenses/TEMPLATE.txt', import.meta.url), join(staging, 'package', 'LICENSES', 'DAEMON-LICENSE.txt'));
         const portal = nativePortal(manifest);
@@ -105,8 +112,12 @@ export async function assembleStandaloneSpk(options) {
             chmodSync(join(executorDir, "lifecycle"), EXEC_MODE);
             writeFile(join(executorDir, "policy.json"), options.executor.policyText);
             writeFile(join(executorDir, "setup.json"), JSON.stringify(executorPlan(options.executor)));
-            for (const op of manifest.rootOps ?? [])
-                writeFile(join(staging, "package", "root", op.name + ".sh"), op.body);
+            for (const op of manifest.rootOps ?? []) {
+                if (op.body !== undefined)
+                    writeFile(join(staging, "package", "root", op.name + ".sh"), op.body);
+                else
+                    copyExecutable(op.binary[options.arch].path, join(staging, "package", "root", op.name));
+            }
         }
         const hook = manifest.uninstall && uninstallExecProblem(join(staging, "package"), manifest.uninstall.purge);
         if (hook)
@@ -124,7 +135,7 @@ export async function assembleStandaloneSpk(options) {
             writeFile(join(staging, "conf", "resource"), resource);
         if (manifest.capabilities.jobs) {
             mkdirSync(join(staging, BACKGROUND_UNIT_DIR), { recursive: true });
-            writeFile(join(staging, BACKGROUND_UNIT_DIR, backgroundUnitName(manifest.package)), renderBackgroundUnit(manifest.package));
+            writeFile(join(staging, BACKGROUND_UNIT_DIR, backgroundUnitName(manifest.package)), renderBackgroundUnit(manifest.package, isBridgeBackend(manifest.backend) ? BRIDGE_WORKER_ARGS : []));
         }
         mkdirSync(join(staging, "scripts"));
         for (const name of LIFECYCLE_SCRIPTS) {
@@ -153,6 +164,11 @@ export async function assembleStandaloneSpk(options) {
         rmSync(staging, { recursive: true, force: true });
     }
 }
+function copyExecutable(source, target) {
+    mkdirSync(dirname(target), { recursive: true });
+    copyFileSync(source, target);
+    chmodSync(target, EXEC_MODE);
+}
 function writeFile(path, content, mode = FILE_MODE) {
     mkdirSync(dirname(path), { recursive: true });
     writeFileSync(path, content, "utf8");
@@ -180,6 +196,9 @@ function renderInfo(manifest, arch, checksum, executorDigest) {
     // Package Center writes INFO as root; root tasks accept only this executor.
     if (executorDigest)
         fields.push([EXECUTOR_ANCHOR, executorDigest]);
+    const backend = manifest.backend;
+    if (isBridgeBackend(backend) && backend.node)
+        fields.push(["install_dep_packages", backend.node.package]);
     fields.push(...metadataInfoFields(manifest.metadata));
     // Background packages need prestart: it runs before DSM's systemd-user-unit acquire.
     if (manifest.daemon || manifest.capabilities.jobs)
@@ -196,7 +215,7 @@ function renderInfo(manifest, arch, checksum, executorDigest) {
 function copyUiTree(source, target) {
     for (const entry of ["app.js", "app.css"]) {
         if (!existsSync(join(source, entry))) {
-            throw new StandaloneBuildError("STANDALONE_UI_ENTRY_MISSING", `UI 目錄缺少 ${entry}：${source}`);
+            throw new StandaloneBuildError("STANDALONE_UI_ENTRY_MISSING", `The UI directory is missing ${entry}: ${source}`);
         }
     }
     let total = 0;
@@ -207,7 +226,7 @@ function copyUiTree(source, target) {
             const src = join(from, name);
             const stat = lstatSync(src);
             if (stat.isSymbolicLink()) {
-                throw new StandaloneBuildError("STANDALONE_UI_SYMLINK", `UI 目錄不可含 symlink：${src}`);
+                throw new StandaloneBuildError("STANDALONE_UI_SYMLINK", `The UI directory must not contain a symlink: ${src}`);
             }
             if (stat.isDirectory()) {
                 walk(src, join(to, name));
@@ -215,13 +234,13 @@ function copyUiTree(source, target) {
             else if (stat.isFile()) {
                 total += stat.size;
                 if (total > MAX_UI_BYTES) {
-                    throw new StandaloneBuildError("STANDALONE_UI_TOO_LARGE", "UI 目錄超過 64 MiB。");
+                    throw new StandaloneBuildError("STANDALONE_UI_TOO_LARGE", "The UI directory exceeds 64 MiB.");
                 }
                 copyFileSync(src, join(to, name));
                 chmodSync(join(to, name), FILE_MODE);
             }
             else {
-                throw new StandaloneBuildError("STANDALONE_UI_SPECIAL_FILE", `UI 目錄只可含一般檔案與目錄：${src}`);
+                throw new StandaloneBuildError("STANDALONE_UI_SPECIAL_FILE", `The UI directory may contain only regular files and directories: ${src}`);
             }
         }
     };

package/dist/standalone/uninstall-hook.js

@@ -44,16 +44,34 @@ ${manifest.uninstall?.state ? wizardFlag("delete_state", ["pkgwizard_delete_stat
   (cd "$hook_var" 2>/dev/null || cd /; exec /usr/bin/env -i ${env} ${argv}) </dev/null >"$hook_var/uninstall-hook.log" 2>&1 &
   hook_pid=$!
   set +m
+  # DSM's bash logs a failed kill to syslog even with 2>/dev/null, so a
+  # finished hook is looked up in /proc wherever there is one.
+  hook_running() {
+    if [ -d /proc/self ]; then [ -d "/proc/$hook_pid" ]; else kill -0 "$hook_pid" 2>/dev/null; fi
+  }
+  # A process in /proc whose group is the hook's ("pid (comm) state ppid pgrp ...").
+  hook_group_running() {
+    cat /proc/[0-9]*/stat 2>/dev/null | awk -v group="$hook_pid" '{ sub(/.*\) /, ""); if ($3 == group) found = 1 } END { exit !found }'
+  }
+  hook_signal() {
+    if [ ! -d /proc/self ]; then
+      kill -"$1" -"$hook_pid" 2>/dev/null || kill -"$1" "$hook_pid" 2>/dev/null
+    elif hook_group_running; then
+      kill -"$1" -"$hook_pid"
+    elif hook_running; then
+      kill -"$1" "$hook_pid"
+    fi
+  }
   hook_waited=0
-  while kill -0 "$hook_pid" 2>/dev/null && [ "$hook_waited" -lt ${purge.timeout} ]; do
+  while hook_running && [ "$hook_waited" -lt ${purge.timeout} ]; do
     sleep 1
     hook_waited=$((hook_waited + 1))
   done
   hook_failure=
-  if kill -0 "$hook_pid" 2>/dev/null; then
-    kill -TERM -"$hook_pid" 2>/dev/null || kill -TERM "$hook_pid" 2>/dev/null
+  if hook_running; then
+    hook_signal TERM
     sleep 1
-    kill -KILL -"$hook_pid" 2>/dev/null || kill -KILL "$hook_pid" 2>/dev/null
+    hook_signal KILL
     wait "$hook_pid" 2>/dev/null
     hook_failure="timeout after ${purge.timeout} s"
   else

package/dist/standalone/uninstall.js

@@ -16,7 +16,7 @@ export function readUninstall(value, context, fail) {
     if (value === undefined)
         return undefined;
     const invalid = () => {
-        fail({ code: "UNINSTALL_INVALID", message: "uninstall 只接受 purge {exec, args, env, timeout, root} 與 state {items: [{key}]}；exec 須是套件內固定執行檔（不可在 executor/ 或 root/），timeout 為 2–120 秒整數。" });
+        fail({ code: "UNINSTALL_INVALID", message: "uninstall accepts only purge {exec, args, env, timeout, root} and state {items: [{key}]}; exec must be a fixed executable inside the package (not in executor/ or root/), and timeout is an integer from 2 to 120 seconds." });
         return undefined;
     };
     if (!record(value) || Object.keys(value).some(k => !FIELDS.has(k)))
@@ -24,7 +24,7 @@ export function readUninstall(value, context, fail) {
     if (value.purge === undefined) {
         if (value.state === undefined)
             return invalid();
-        fail({ code: "UNINSTALL_STATE_REQUIRES_PURGE", message: "uninstall.state 需要 uninstall.purge：只有 App 自己知道狀態存在哪裡。" });
+        fail({ code: "UNINSTALL_STATE_REQUIRES_PURGE", message: "uninstall.state needs uninstall.purge: only the App knows where the state lives." });
         return undefined;
     }
     const purge = readPurge(value.purge, context, fail);
@@ -35,7 +35,7 @@ export function readUninstall(value, context, fail) {
         return invalid();
     const missing = (state?.items ?? []).map(item => stateTextKey(item.key)).filter(key => context.en?.[key] === undefined);
     if (missing.length) {
-        fail({ code: "UNINSTALL_STATE_TEXT_MISSING", message: `uninstall.state 的項目需要 i18n en.json 文字：${missing.join(", ")}。` });
+        fail({ code: "UNINSTALL_STATE_TEXT_MISSING", message: `The uninstall.state items need i18n en.json text: ${missing.join(", ")}.` });
         return undefined;
     }
     return purge && { purge, ...(state ? { state } : {}) };
@@ -61,11 +61,11 @@ function readPurge(value, context, fail) {
         if (typeof root !== "string")
             return "invalid";
         if (!context.rootOps) {
-            fail({ code: "UNINSTALL_ROOT_REQUIRES_ROOT_OPS", message: "uninstall.purge.root 需要 capabilities.rootOps: true。" });
+            fail({ code: "UNINSTALL_ROOT_REQUIRES_ROOT_OPS", message: "uninstall.purge.root needs capabilities.rootOps: true." });
             return undefined;
         }
         if (context.ops && !context.ops.some(op => op.name === root)) {
-            fail({ code: "UNINSTALL_ROOT_OP_MISSING", message: `uninstall.purge.root「${root}」需要 root/${root}.sh。` });
+            fail({ code: "UNINSTALL_ROOT_OP_MISSING", message: `uninstall.purge.root "${root}" needs root/${root}.sh.` });
             return undefined;
         }
     }
@@ -99,11 +99,11 @@ export function uninstallExecProblem(packageDir, purge) {
         stat = undefined;
     }
     if (!stat?.isFile() || (stat.mode & 0o111) === 0) {
-        return { code: "UNINSTALL_EXEC_MISSING", message: `uninstall.purge.exec「${purge.exec}」不是套件內可執行的一般檔案。` };
+        return { code: "UNINSTALL_EXEC_MISSING", message: `uninstall.purge.exec "${purge.exec}" is not a regular executable file inside the package.` };
     }
     const text = readFileSync(path).toString("latin1");
     if (text.startsWith("#!") && ROOT_SCRIPT_HINTS.some(hint => hint.test(text))) {
-        return { code: "UNINSTALL_EXEC_UNSAFE", message: `uninstall.purge.exec「${purge.exec}」嘗試取得 root（sudo、chown root 或 setuid）；root 只能經 uninstall.purge.root。` };
+        return { code: "UNINSTALL_EXEC_UNSAFE", message: `uninstall.purge.exec "${purge.exec}" tries to gain root (sudo, chown root or setuid); root is only available through uninstall.purge.root.` };
     }
     return undefined;
 }

package/dist/standalone/window-size.d.ts

@@ -0,0 +1,17 @@
+/** The DSM AppWindow's size and the desktop's minimum size, in pixels. */
+export interface WindowSize {
+    width: number;
+    height: number;
+    minWidth: number;
+    minHeight: number;
+}
+export declare const DEFAULT_WINDOW: WindowSize;
+/** A Portal/standalone launch is the whole page, a phone's as well. */
+export declare const FULL_PAGE_MIN_WIDTH = 320;
+export declare const WINDOW_USAGE = "ui.window takes width and height (whole numbers, 320\u20133840 by 240\u20132160) and minWidth and minHeight (no larger than width and height; 700 and 420 by default); omitted fields keep 960\u00D7640, at least 700\u00D7420.";
+/** `ui.window` over the defaults, or why it is refused. */
+export declare function readWindowSize(value: unknown): {
+    size: WindowSize;
+} | {
+    error: string;
+};

package/dist/standalone/window-size.js

@@ -0,0 +1,31 @@
+export const DEFAULT_WINDOW = { width: 960, height: 640, minWidth: 700, minHeight: 420 };
+/** A Portal/standalone launch is the whole page, a phone's as well. */
+export const FULL_PAGE_MIN_WIDTH = 320;
+const LIMITS = {
+    width: [320, 3840], height: [240, 2160], minWidth: [320, 3840], minHeight: [240, 2160],
+};
+export const WINDOW_USAGE = "ui.window takes width and height (whole numbers, 320–3840 by 240–2160) and minWidth and minHeight (no larger than width and height; 700 and 420 by default); omitted fields keep 960×640, at least 700×420.";
+/** `ui.window` over the defaults, or why it is refused. */
+export function readWindowSize(value) {
+    const keys = Object.keys(LIMITS);
+    if (typeof value !== "object" || value === null || Array.isArray(value) || Object.keys(value).length === 0)
+        return { error: WINDOW_USAGE };
+    const raw = value;
+    const unknown = Object.keys(raw).filter(key => !keys.includes(key));
+    if (unknown.length)
+        return { error: `${WINDOW_USAGE} Unsupported: ${unknown.map(key => `ui.window.${key}`).join(", ")}.` };
+    const size = { ...DEFAULT_WINDOW };
+    for (const key of keys) {
+        if (raw[key] === undefined)
+            continue;
+        const [min, max] = LIMITS[key];
+        const n = raw[key];
+        if (!Number.isInteger(n) || n < min || n > max)
+            return { error: `${WINDOW_USAGE} ui.window.${key} must be a whole number from ${min} to ${max}.` };
+        size[key] = n;
+    }
+    if (size.minWidth > size.width || size.minHeight > size.height) {
+        return { error: `${WINDOW_USAGE} The minimum ${size.minWidth}×${size.minHeight} is larger than the window ${size.width}×${size.height}.` };
+    }
+    return { size };
+}

package/dist/types.d.ts

@@ -56,4 +56,4 @@ export interface ComposeDocument {
     secrets?: Record<string, unknown>;
     [key: string]: unknown;
 }
-export type TemplateName = "compose" | "binary" | "native-go" | "native-rust";
+export type TemplateName = "compose" | "binary" | "native-go" | "native-python" | "native-node" | "native-rust";

package/dist/validate.js

@@ -23,37 +23,37 @@ export function validateProject(project, options = {}) {
         return { ok: false, errors: [{
                     code: "PROJECT_RUNTIME_EXCLUSIVE",
                     span: { file: DSM_PACKAGE_FILENAME, line: 1, column: 1 },
-                    message: "專案同時存在 compose.yaml 與 dsm-package.yaml，兩者互斥。",
-                    suggestion: "請選擇 compose.yaml（容器 App）或 dsm-package.yaml（原生 App），並刪除另一個檔案。",
+                    message: "The project has both compose.yaml and dsm-package.yaml, which are mutually exclusive.",
+                    suggestion: "Choose compose.yaml (container App) or dsm-package.yaml (native App) and delete the other file.",
                 }] };
     }
     if (hasStandalone) {
         const loaded = isNativeLayout(project.root) ? loadNativeLayout(project.root) : loadStandaloneManifest(project.root);
         return loaded.ok ? { ok: true, errors: [] } : { ok: false, errors: loaded.errors.map(error => ({
                 ...error, span: { file: DSM_PACKAGE_FILENAME, line: 1, column: 1 },
-                suggestion: getErrorCode(error.code)?.suggestion ?? "請修正 dsm-package.yaml 的 schema 2 欄位與能力宣告。",
+                suggestion: getErrorCode(error.code)?.suggestion ?? "Fix the schema 2 fields and capability declarations in dsm-package.yaml.",
             })) };
     }
     const parsed = loadContract(project.contractPath);
     errors.push(...validateContract(parsed, contractFile));
     const capabilities = parsed.contract.capabilities;
     if (capabilities !== undefined) {
-        errors.push(makeError("CAPABILITY_UNSUPPORTED", contractSpan(contractFile, 1, 1, "capabilities"), "compose 專案不支援 capabilities。", "請移除 capabilities，或使用 dsm-package.yaml 的 native-go 專案。"));
+        errors.push(makeError("CAPABILITY_UNSUPPORTED", contractSpan(contractFile, 1, 1, "capabilities"), "A compose project does not support capabilities.", "Remove capabilities, or use a dsm-package.yaml native-go project."));
     }
     if (profile === "listing") {
         for (const { name, type, code } of findListingUnsupportedInstallTypes(parsed.contract)) {
             const pos = getValuePosition(parsed.doc, ["install", name, "type"]) ??
                 getValuePosition(parsed.doc, ["install", name]) ??
                 { line: 1, column: 1 };
-            errors.push(makeError(code, contractSpan(contractFile, pos.line, pos.column, `install.${name}.type`), `Install Parameter「${name}」的 type: ${type} 只能由 synopkgland deploy 在管理員 session 取得安裝當下的 Share 清單快照；Package Center／Package Source listing 不支援。`, "請使用 synopkgland deploy --host <name>，由管理員 session 在安裝時取得 Share 清單快照；此型別不能透過 Package Center 或 Package Source listing 上架。"));
+            errors.push(makeError(code, contractSpan(contractFile, pos.line, pos.column, `install.${name}.type`), `The Install Parameter "${name}" with type: ${type} can only be snapshotted by synopkgland deploy with an administrator session at install time; Package Center and Package Source listing do not support it.`, "Use synopkgland deploy --host <name> so an administrator session takes the Share list snapshot at install time; this type cannot ship through Package Center or Package Source listing."));
         }
     }
     if (!hasCompose) {
         errors.push({
             code: "COMPOSE_MISSING",
             span: { file: composeFile, line: 1, column: 1 },
-            message: "找不到 compose.yaml 或 dsm-package.yaml。",
-            suggestion: "請在專案根目錄建立 compose.yaml 或 schema 2 的 dsm-package.yaml。",
+            message: "compose.yaml or dsm-package.yaml was not found.",
+            suggestion: "Create compose.yaml or a schema 2 dsm-package.yaml in the project root.",
         });
         return { ok: false, errors };
     }
@@ -95,16 +95,16 @@ export function validateProject(project, options = {}) {
         errors.push({
             code: "CONTRACT_DSM_USER_DUPLICATE",
             span: { file: contractFile, line: 1, column: 1, path: "install" },
-            message: "每顆 App 至多一個 dsm_user。",
-            suggestion: "請只保留一個 Container Run-as 參數。",
+            message: "Each App has at most one dsm_user.",
+            suggestion: "Keep only one Container Run-as parameter.",
         });
     }
     if (hasSharedFolder && dsmUserParams.length === 0) {
         errors.push({
             code: "DSM_USER_REQUIRED",
             span: { file: contractFile, line: 1, column: 1, path: "install" },
-            message: "有 Shared Folder 時必須宣告恰好一個 dsm_user 作為 Container Run-as。",
-            suggestion: "請新增 install.<NAME>.type: dsm_user，Compose 引用 ${NAME_UID}:${NAME_GID}。",
+            message: "With a Shared Folder, declare exactly one dsm_user as the Container Run-as.",
+            suggestion: "Add install.<NAME>.type: dsm_user and reference ${NAME_UID}:${NAME_GID} in Compose.",
             severity: profile === "listing" ? "error" : "warning",
         });
     }
@@ -132,8 +132,8 @@ export function validateProject(project, options = {}) {
                     column: 1,
                     path: `install.${name}`,
                 },
-                message: `Install Parameter「${name}」未在 Compose 中被引用。`,
-                suggestion: `請在 compose.yaml 以 \${${name}} 引用此參數。`,
+                message: `The Install Parameter "${name}" is not referenced in Compose.`,
+                suggestion: `Reference this parameter in compose.yaml as \${${name}}.`,
             });
         }
     }