@uofx/cli 1.0.2 → 1.1.0

package/dist/infrastructure/interceptors/decorators/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * 攔截器裝飾器模組
+ *
+ * 匯出敏感資料標記等裝飾器，用於方法參數與回傳值的安全處理
+ */
+__exportStar(require("./sensitive.decorator"), exports);
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/interceptors/index.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.InterceptorFactory = exports.LoggingInterceptor = void 0;
-var logging_interceptor_1 = require("./logging.interceptor");
-Object.defineProperty(exports, "LoggingInterceptor", { enumerable: true, get: function () { return logging_interceptor_1.LoggingInterceptor; } });
+var services_1 = require("./services");
+Object.defineProperty(exports, "LoggingInterceptor", { enumerable: true, get: function () { return services_1.LoggingInterceptor; } });
 var interceptor_factory_1 = require("./interceptor.factory");
 Object.defineProperty(exports, "InterceptorFactory", { enumerable: true, get: function () { return interceptor_factory_1.InterceptorFactory; } });
 //# sourceMappingURL=index.js.map

package/dist/infrastructure/interceptors/interceptor.factory.js

@@ -14,7 +14,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.InterceptorFactory = void 0;
 const tsyringe_1 = require("tsyringe");
-const logging_interceptor_1 = require("./logging.interceptor");
+const services_1 = require("./services");
 /**
  * 攔截器工廠
  *
@@ -38,7 +38,7 @@ let InterceptorFactory = class InterceptorFactory {
 exports.InterceptorFactory = InterceptorFactory;
 exports.InterceptorFactory = InterceptorFactory = __decorate([
     (0, tsyringe_1.injectable)(),
-    __param(0, (0, tsyringe_1.inject)(logging_interceptor_1.LoggingInterceptor)),
-    __metadata("design:paramtypes", [logging_interceptor_1.LoggingInterceptor])
+    __param(0, (0, tsyringe_1.inject)(services_1.LoggingInterceptor)),
+    __metadata("design:paramtypes", [services_1.LoggingInterceptor])
 ], InterceptorFactory);
 //# sourceMappingURL=interceptor.factory.js.map

package/dist/infrastructure/interceptors/interfaces/index.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/interceptors/services/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoggingInterceptor = void 0;
+var logging_interceptor_service_1 = require("./logging-interceptor.service");
+Object.defineProperty(exports, "LoggingInterceptor", { enumerable: true, get: function () { return logging_interceptor_service_1.LoggingInterceptor; } });
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/interceptors/{logging.interceptor.js → services/logging-interceptor.service.js}

@@ -16,8 +16,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoggingInterceptor = void 0;
 const tsyringe_1 = require("tsyringe");
 require("reflect-metadata");
-const tokens_1 = require("../../di/tokens");
-const sensitive_decorator_1 = require("../../domain/decorators/sensitive.decorator");
+const tokens_1 = require("../../../di/tokens");
+const sensitive_decorator_1 = require("../decorators/sensitive.decorator");
 /**
  * 日誌攔截器
  *
@@ -165,7 +165,7 @@ LoggingInterceptor.EXCLUDED_METHODS = new Set([
 exports.LoggingInterceptor = LoggingInterceptor = LoggingInterceptor_1 = __decorate([
     (0, tsyringe_1.injectable)(),
     __param(0, (0, tsyringe_1.inject)(tokens_1.TOKENS.ILoggerPort)),
-    __param(1, (0, tsyringe_1.inject)(tokens_1.TOKENS.IAppConfig)),
+    __param(1, (0, tsyringe_1.inject)(tokens_1.TOKENS.IAppConfigPort)),
     __metadata("design:paramtypes", [Object, Object])
 ], LoggingInterceptor);
-//# sourceMappingURL=logging.interceptor.js.map
+//# sourceMappingURL=logging-interceptor.service.js.map

package/dist/infrastructure/logger/services/file-log-reader.repository.js

@@ -65,7 +65,7 @@ const DEFAULT_CONFIG = {
 let FileLogReaderRepository = class FileLogReaderRepository {
     constructor() {
         // 使用默認配置
-        // 如果未來需要自定義配置，應該從 IAppConfig 注入
+        // 如果未來需要自定義配置，應該從 IAppConfigPort 注入
         this.config = DEFAULT_CONFIG;
     }
     /**

package/dist/infrastructure/logger/services/file-log-writer.repository.js

@@ -82,7 +82,7 @@ let FileLogWriterRepository = class FileLogWriterRepository {
         this.currentDate = '';
         this.currentFilePath = '';
         // 使用默認配置
-        // 如果未來需要自定義配置，應該從 IAppConfig 注入
+        // 如果未來需要自定義配置，應該從 IAppConfigPort 注入
         this.config = DEFAULT_CONFIG;
         this.baseDir = path.dirname(this.config.path);
         this.updateCurrentFilePath();

package/dist/infrastructure/persistence/instance-metadata.adapter.js

@@ -61,7 +61,8 @@ let InstanceMetadataAdapter = class InstanceMetadataAdapter {
         if (!fs.existsSync(installPath)) {
             fs.mkdirSync(installPath, { recursive: true });
         }
-        fs.writeFileSync(metadataPath, JSON.stringify(metadata, null, 2), 'utf8');
+        // 限制檔案權限為擁有者可讀寫
+        fs.writeFileSync(metadataPath, JSON.stringify(metadata, null, 2), { encoding: 'utf8', mode: 0o600 });
     }
     /**
      * 載入實例 metadata

package/dist/infrastructure/persistence/services/file-system-config.repository.js

@@ -48,6 +48,7 @@ const fs = __importStar(require("fs/promises"));
 const path = __importStar(require("path"));
 const os = __importStar(require("os"));
 const value_objects_1 = require("../../../domain/value-objects");
+const crypto_service_1 = require("../../config/services/crypto.service");
 /**
  * 檔案系統配置 Repository
  *
@@ -66,7 +67,11 @@ let FileSystemConfigRepository = class FileSystemConfigRepository {
         const config = await this.loadConfig();
         if (config.acr) {
             try {
-                return value_objects_1.AcrCredentials.create(config.acr.name, config.acr.account, config.acr.password);
+                // 解密密碼（相容未加密的舊資料）
+                const password = crypto_service_1.CryptoService.isEncrypted(config.acr.password)
+                    ? crypto_service_1.CryptoService.decrypt(config.acr.password)
+                    : config.acr.password;
+                return value_objects_1.AcrCredentials.create(config.acr.name, config.acr.account, password);
             }
             catch {
                 return null;
@@ -80,10 +85,11 @@ let FileSystemConfigRepository = class FileSystemConfigRepository {
      */
     async saveDefaultAcrCredentials(credentials) {
         const config = await this.loadConfig();
+        // 加密密碼後再儲存
         config.acr = {
             name: credentials.name,
             account: credentials.account,
-            password: credentials.password,
+            password: crypto_service_1.CryptoService.encrypt(credentials.password),
         };
         await this.saveConfig(config);
     }
@@ -155,9 +161,9 @@ let FileSystemConfigRepository = class FileSystemConfigRepository {
         const dir = path.dirname(this.configPath);
         // 確保目錄存在
         await fs.mkdir(dir, { recursive: true });
-        // 寫入配置
+        // 寫入配置（限制檔案權限為擁有者可讀寫）
         const data = JSON.stringify(config, null, 2);
-        await fs.writeFile(this.configPath, data, 'utf8');
+        await fs.writeFile(this.configPath, data, { encoding: 'utf8', mode: 0o600 });
     }
 };
 exports.FileSystemConfigRepository = FileSystemConfigRepository;

package/dist/infrastructure/persistence/services/file-system-instance.repository.js

@@ -67,9 +67,9 @@ let FileSystemInstanceRepository = class FileSystemInstanceRepository {
         const dir = path.dirname(metadataPath);
         // 確保目錄存在
         await fs.mkdir(dir, { recursive: true });
-        // 寫入 metadata
+        // 寫入 metadata（限制檔案權限為擁有者可讀寫）
         const data = JSON.stringify(metadata.toObject(), null, 2);
-        await fs.writeFile(metadataPath, data, 'utf8');
+        await fs.writeFile(metadataPath, data, { encoding: 'utf8', mode: 0o600 });
     }
     /**
      * 載入實例 metadata

package/dist/infrastructure/platforms/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./windows"), exports);
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/platforms/windows/index.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WslSetupAdapter = exports.WslBaseImageAdapter = exports.WslInstanceManagerAdapter = void 0;
+/**
+ * Infrastructure Windows 平台模組匯出
+ */
+var wsl_instance_manager_adapter_1 = require("./wsl-instance-manager.adapter");
+Object.defineProperty(exports, "WslInstanceManagerAdapter", { enumerable: true, get: function () { return wsl_instance_manager_adapter_1.WslInstanceManagerAdapter; } });
+var wsl_base_image_adapter_1 = require("./wsl-base-image.adapter");
+Object.defineProperty(exports, "WslBaseImageAdapter", { enumerable: true, get: function () { return wsl_base_image_adapter_1.WslBaseImageAdapter; } });
+var wsl_setup_adapter_1 = require("./wsl-setup.adapter");
+Object.defineProperty(exports, "WslSetupAdapter", { enumerable: true, get: function () { return wsl_setup_adapter_1.WslSetupAdapter; } });
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/platforms/windows/interfaces/index.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/platforms/windows/parsers/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WslVersionParser = void 0;
+/**
+ * Windows 平台模組解析器匯出
+ */
+var wsl_version_parser_1 = require("./wsl-version.parser");
+Object.defineProperty(exports, "WslVersionParser", { enumerable: true, get: function () { return wsl_version_parser_1.WslVersionParser; } });
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/platforms/windows/services/index.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WslUpdaterService = exports.WslInstanceNamingService = exports.WslInstanceLifecycleService = exports.WslInstanceInspectionService = exports.WslInfoService = exports.WslConfigParserService = exports.WslConfigService = exports.MIN_WIN11_BUILD = exports.MIN_WIN10_BUILD = exports.WindowsInfoService = exports.VM_PLATFORM_FEATURE_NAME = exports.WSL_FEATURE_NAME = exports.WindowsFeaturesService = exports.RootfsManagerService = exports.MicroK8sService = void 0;
+/**
+ * Windows 平台模組服務匯出
+ */
+var microk8s_service_1 = require("./microk8s.service");
+Object.defineProperty(exports, "MicroK8sService", { enumerable: true, get: function () { return microk8s_service_1.MicroK8sService; } });
+var rootfs_manager_service_1 = require("./rootfs-manager.service");
+Object.defineProperty(exports, "RootfsManagerService", { enumerable: true, get: function () { return rootfs_manager_service_1.RootfsManagerService; } });
+var windows_features_service_1 = require("./windows-features.service");
+Object.defineProperty(exports, "WindowsFeaturesService", { enumerable: true, get: function () { return windows_features_service_1.WindowsFeaturesService; } });
+Object.defineProperty(exports, "WSL_FEATURE_NAME", { enumerable: true, get: function () { return windows_features_service_1.WSL_FEATURE_NAME; } });
+Object.defineProperty(exports, "VM_PLATFORM_FEATURE_NAME", { enumerable: true, get: function () { return windows_features_service_1.VM_PLATFORM_FEATURE_NAME; } });
+var windows_info_service_1 = require("./windows-info.service");
+Object.defineProperty(exports, "WindowsInfoService", { enumerable: true, get: function () { return windows_info_service_1.WindowsInfoService; } });
+Object.defineProperty(exports, "MIN_WIN10_BUILD", { enumerable: true, get: function () { return windows_info_service_1.MIN_WIN10_BUILD; } });
+Object.defineProperty(exports, "MIN_WIN11_BUILD", { enumerable: true, get: function () { return windows_info_service_1.MIN_WIN11_BUILD; } });
+var wsl_config_service_1 = require("./wsl-config.service");
+Object.defineProperty(exports, "WslConfigService", { enumerable: true, get: function () { return wsl_config_service_1.WslConfigService; } });
+var wslconfig_parser_service_1 = require("./wslconfig-parser.service");
+Object.defineProperty(exports, "WslConfigParserService", { enumerable: true, get: function () { return wslconfig_parser_service_1.WslConfigParserService; } });
+var wsl_info_service_1 = require("./wsl-info.service");
+Object.defineProperty(exports, "WslInfoService", { enumerable: true, get: function () { return wsl_info_service_1.WslInfoService; } });
+var wsl_instance_inspection_service_1 = require("./wsl-instance-inspection.service");
+Object.defineProperty(exports, "WslInstanceInspectionService", { enumerable: true, get: function () { return wsl_instance_inspection_service_1.WslInstanceInspectionService; } });
+var wsl_instance_lifecycle_service_1 = require("./wsl-instance-lifecycle.service");
+Object.defineProperty(exports, "WslInstanceLifecycleService", { enumerable: true, get: function () { return wsl_instance_lifecycle_service_1.WslInstanceLifecycleService; } });
+var wsl_instance_naming_service_1 = require("./wsl-instance-naming.service");
+Object.defineProperty(exports, "WslInstanceNamingService", { enumerable: true, get: function () { return wsl_instance_naming_service_1.WslInstanceNamingService; } });
+var wsl_updater_service_1 = require("./wsl-updater.service");
+Object.defineProperty(exports, "WslUpdaterService", { enumerable: true, get: function () { return wsl_updater_service_1.WslUpdaterService; } });
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/platforms/windows/services/microk8s.service.js

@@ -143,19 +143,37 @@ let MicroK8sService = class MicroK8sService {
         return false;
     }
     /**
-     * 重啟 containerd 服務
+     * 清理 containerd stale state
+     *
+     * WSL terminate 後 containerd 的 task state 殘留在磁碟，
+     * 重啟後 kubelet 逐一嘗試清理 stale containers 會卡住數分鐘。
+     * 在 microk8s start 前清理 stale tasks 可實現秒級恢復。
+     * @param instanceName - WSL 實例名稱
      */
-    async restartContainerd(instanceName) {
+    async cleanStaleState(instanceName) {
         (0, input_validator_util_1.requireValidInstanceName)(instanceName);
-        this.logger.debug('[MicroK8s] Restarting containerd', { instanceName });
+        this.logger.debug('[MicroK8s] Cleaning stale containerd state', { instanceName });
         const env = this.envFactory.getForInstance(instanceName);
-        // 停止
-        const restartBuilder = env.shell('sudo')
-            .arg('systemctl')
-            .arg('restart')
-            .arg('snap.microk8s.daemon-containerd');
-        await restartBuilder.exec();
-        await new Promise(resolve => setTimeout(resolve, 3000));
+        const staleTaskDir = '/var/snap/microk8s/common/run/containerd/io.containerd.runtime.v2.task/k8s.io';
+        try {
+            // 先停止所有 microk8s 服務（kubelite + containerd 等），
+            // 避免只停 containerd 導致 kubelet 報 connection error
+            const stopBuilder = env.shell(index_1.LINUX_PATHS.MICROK8S_BIN)
+                .arg('stop');
+            await stopBuilder.exec();
+            // lazy unmount stale rootfs（kernel 可能仍持有 overlay mount）
+            const unmountBuilder = env.shellScript(`mount | grep 'containerd.*k8s.io' | awk '{print $3}' | xargs -r umount -l 2>/dev/null; true`);
+            await unmountBuilder.exec();
+            // 清除 stale task 目錄
+            const cleanBuilder = env.shell('sudo')
+                .arg('rm')
+                .arg('-rf')
+                .arg(staleTaskDir);
+            await cleanBuilder.exec();
+        }
+        catch (error) {
+            this.logger.warn('[MicroK8s] Failed to clean stale state, continuing...', { error });
+        }
     }
 };
 exports.MicroK8sService = MicroK8sService;

package/dist/infrastructure/platforms/windows/services/rootfs-manager.service.js

@@ -52,7 +52,7 @@ const path = __importStar(require("path"));
 const os = __importStar(require("os"));
 const crypto = __importStar(require("crypto"));
 const tokens_1 = require("../../../../di/tokens");
-const errors_1 = require("../../../errors");
+const errors_1 = require("../../../../domain/errors");
 const index_1 = require("../../../../constants/index");
 /**
  * Rootfs 管理相關常數
@@ -193,7 +193,9 @@ let RootfsManagerService = class RootfsManagerService {
         const rootfsFilename = path.basename(this.rootfsUrl);
         const hash = sums.get(rootfsFilename);
         if (!hash) {
-            throw new Error(`SHA256 hash not found for ${rootfsFilename}`);
+            throw new errors_1.AppError(`SHA256 hash not found for ${rootfsFilename}`, {
+                exitCode: errors_1.EXIT_CODES.NETWORK_ERROR,
+            });
         }
         return hash;
     }
@@ -221,7 +223,9 @@ let RootfsManagerService = class RootfsManagerService {
             if (!verified) {
                 // 清理無效檔案
                 fs.unlinkSync(tempPath);
-                throw new Error('SHA256 verification failed - downloaded file may be corrupted');
+                throw new errors_1.AppError('SHA256 verification failed - downloaded file may be corrupted', {
+                    exitCode: errors_1.EXIT_CODES.VALIDATION_ERROR,
+                });
             }
             // 移動臨時檔案到最終位置
             if (fs.existsSync(this.cachePath)) {

package/dist/infrastructure/platforms/windows/services/windows-features.service.js

@@ -15,8 +15,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.WindowsFeaturesService = exports.VM_PLATFORM_FEATURE_NAME = exports.WSL_FEATURE_NAME = void 0;
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../../di/tokens");
-const errors_1 = require("../../../errors");
-const command_builder_1 = require("../../../execution/command-builder");
+const errors_1 = require("../../../../domain/errors");
+const command_builder_util_1 = require("../../../execution/command-builder.util");
 /**
  * Windows 功能管理服務
  *
@@ -32,6 +32,16 @@ let WindowsFeaturesService = class WindowsFeaturesService {
     constructor(commandExecutor) {
         this.commandExecutor = commandExecutor;
     }
+    /**
+     * 驗證 Windows 功能名稱僅包含安全字元
+     * @param name - Windows 功能名稱
+     * @throws AppError 若名稱包含不安全字元
+     */
+    validateFeatureName(name) {
+        if (!/^[a-zA-Z0-9-]+$/.test(name)) {
+            throw new errors_1.AppError(`Invalid Windows feature name: "${name}"`, { exitCode: errors_1.EXIT_CODES.VALIDATION_ERROR });
+        }
+    }
     /**
      * 檢查單一 Windows 功能的狀態
      * @param featureName - Windows 功能名稱
@@ -39,10 +49,12 @@ let WindowsFeaturesService = class WindowsFeaturesService {
      * @throws AppSystemError 若查詢失敗
      */
     async checkFeatureState(featureName) {
+        // 防禦性驗證：確保 featureName 僅包含安全字元
+        this.validateFeatureName(featureName);
         try {
-            const builder = command_builder_1.CommandBuilder.create('powershell')
+            const builder = command_builder_util_1.CommandBuilder.create('powershell', this.commandExecutor)
                 .powershell(`[Console]::OutputEncoding = [System.Text.Encoding]::UTF8; $feature = Get-WindowsOptionalFeature -Online -FeatureName ${featureName}; $feature.State`);
-            const result = await builder.exec(this.commandExecutor);
+            const result = await builder.exec();
             const output = result.stdout.trim();
             if (output.includes('Enable')) {
                 return 'Enabled';
@@ -103,9 +115,9 @@ let WindowsFeaturesService = class WindowsFeaturesService {
      */
     async checkAdminPrivileges() {
         try {
-            const builder = command_builder_1.CommandBuilder.create('powershell')
+            const builder = command_builder_util_1.CommandBuilder.create('powershell', this.commandExecutor)
                 .powershell("([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] 'Administrator')");
-            const result = await builder.exec(this.commandExecutor);
+            const result = await builder.exec();
             const output = result.stdout.trim();
             return output === 'True';
         }
@@ -127,14 +139,16 @@ let WindowsFeaturesService = class WindowsFeaturesService {
     async enableWSLFeatures(features) {
         let enabledCount = 0;
         for (const feature of features) {
+            // 防禦性驗證：確保 feature name 僅包含安全字元
+            this.validateFeatureName(feature.name);
             try {
-                const builder = command_builder_1.CommandBuilder.create('dism.exe')
+                const builder = command_builder_util_1.CommandBuilder.create('dism.exe', this.commandExecutor)
                     .arg('/online')
                     .arg('/enable-feature')
                     .arg(`/featurename:${feature.name}`)
                     .arg('/all')
                     .arg('/norestart');
-                await builder.exec(this.commandExecutor);
+                await builder.exec();
                 enabledCount++;
             }
             catch (error) {

package/dist/infrastructure/platforms/windows/services/windows-info.service.js

@@ -15,8 +15,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.WindowsInfoService = exports.MIN_WIN11_BUILD = exports.MIN_WIN10_BUILD = void 0;
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../../di/tokens");
-const command_builder_1 = require("../../../execution/command-builder");
-const errors_1 = require("../../../errors");
+const command_builder_util_1 = require("../../../execution/command-builder.util");
+const errors_1 = require("../../../../domain/errors");
 /**
  * Windows 支援的最低 Build 號碼
  */
@@ -40,19 +40,23 @@ let WindowsInfoService = class WindowsInfoService {
             });
         }
         try {
-            const builder = command_builder_1.CommandBuilder.create('powershell')
+            const builder = command_builder_util_1.CommandBuilder.create('powershell', this.commandExecutor)
                 .arg('-NoProfile')
                 .arg('-NoLogo')
                 .arg('-Command')
                 .arg(`"${PS_QUERY_COMMAND}"`);
-            const result = await builder.exec(this.commandExecutor);
+            const result = await builder.exec();
             const info = JSON.parse(result.stdout.trim());
             if (!info.Caption || !info.Version || !info.BuildNumber) {
-                throw new Error('Invalid PowerShell output format');
+                throw new errors_1.AppError('Invalid PowerShell output format', {
+                    exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+                });
             }
             const buildNumber = parseInt(info.BuildNumber, 10);
             if (isNaN(buildNumber)) {
-                throw new Error(`Invalid build number: ${info.BuildNumber}`);
+                throw new errors_1.AppError(`Invalid build number: ${info.BuildNumber}`, {
+                    exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+                });
             }
             const isWindows11 = buildNumber >= exports.MIN_WIN11_BUILD;
             const isSupported = buildNumber >= exports.MIN_WIN10_BUILD;

package/dist/infrastructure/platforms/windows/services/wsl-config.service.js

@@ -17,6 +17,7 @@ const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../../di/tokens");
 const index_1 = require("../../../../constants/index");
 const input_validator_util_1 = require("../../../utils/input-validator.util");
+const errors_1 = require("../../../../domain/errors");
 /**
  * 延遲執行輔助函式
  */
@@ -86,7 +87,8 @@ appendWindowsPath=false`;
             .stdin(configContent);
         const result = await builder.exec();
         if (result.exitCode !== 0) {
-            throw new Error(`Failed to create wsl.conf in instance '${instanceName}': ${result.stderr}`);
+            this.appLogger?.debug('Failed to create wsl.conf', { stderr: result.stderr });
+            throw new errors_1.AppError(`Failed to create wsl.conf in instance '${instanceName}'`, { exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR });
         }
         return true;
     }
@@ -97,7 +99,8 @@ appendWindowsPath=false`;
             .arg(instanceName);
         const terminateResult = await terminateBuilder.exec();
         if (terminateResult.exitCode !== 0) {
-            throw new Error(`Failed to terminate instance '${instanceName}': ${terminateResult.stderr}`);
+            this.appLogger?.debug('Failed to terminate instance', { stderr: terminateResult.stderr });
+            throw new errors_1.AppError(`Failed to terminate instance '${instanceName}'`, { exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR });
         }
         await sleep(index_1.TIMEOUTS.WSL_CONFIG_APPLY);
         // 重啟實例
@@ -105,7 +108,10 @@ appendWindowsPath=false`;
         const restartBuilder = env.shell('exit');
         const restartResult = await restartBuilder.exec();
         if (restartResult.exitCode !== 0) {
-            throw new Error(`Failed to restart instance '${instanceName}': ${restartResult.stderr}`);
+            this.appLogger?.debug('Failed to restart instance', { stderr: restartResult.stderr });
+            throw new errors_1.AppError(`Failed to restart instance '${instanceName}'`, {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
         await sleep(index_1.TIMEOUTS.WSL_SHUTDOWN_DELAY);
     }
@@ -139,7 +145,8 @@ appendWindowsPath=false`;
             .arg(username);
         const createResult = await createBuilder.exec();
         if (createResult.exitCode !== 0) {
-            throw new Error(`Failed to create user '${username}' in instance '${instanceName}': ${createResult.stderr}`);
+            this.appLogger?.debug('Failed to create user', { stderr: createResult.stderr });
+            throw new errors_1.AppError(`Failed to create user '${username}' in instance '${instanceName}'`, { exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR });
         }
         // 加入 sudo 群組
         const sudoGroupBuilder = env.shell('usermod')
@@ -148,7 +155,8 @@ appendWindowsPath=false`;
             .arg(username);
         const sudoGroupResult = await sudoGroupBuilder.exec();
         if (sudoGroupResult.exitCode !== 0) {
-            throw new Error(`Failed to add user '${username}' to sudo group: ${sudoGroupResult.stderr}`);
+            this.appLogger?.debug('Failed to add user to sudo group', { stderr: sudoGroupResult.stderr });
+            throw new errors_1.AppError(`Failed to add user '${username}' to sudo group`, { exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR });
         }
         // 設定 sudoers 權限 - 使用 stdin 傳遞內容，避免命令注入
         const sudoersContent = `${username} ALL=(ALL) NOPASSWD:ALL\n`;
@@ -156,7 +164,8 @@ appendWindowsPath=false`;
             .stdin(sudoersContent);
         const sudoersResult = await sudoersBuilder.exec();
         if (sudoersResult.exitCode !== 0) {
-            throw new Error(`Failed to configure passwordless sudo for '${username}': ${sudoersResult.stderr}`);
+            this.appLogger?.debug('Failed to configure passwordless sudo', { stderr: sudoersResult.stderr });
+            throw new errors_1.AppError(`Failed to configure passwordless sudo for '${username}'`, { exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR });
         }
         return true;
     }

package/dist/infrastructure/platforms/windows/services/wsl-info.service.js

@@ -13,10 +13,10 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WslInfoService = void 0;
-const errors_1 = require("../../../errors");
+const errors_1 = require("../../../../domain/errors");
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../../di/tokens");
-const command_builder_1 = require("../../../execution/command-builder");
+const command_builder_util_1 = require("../../../execution/command-builder.util");
 const wsl_version_parser_1 = require("../parsers/wsl-version.parser");
 /**
  * 最低建議 WSL 版本
@@ -33,9 +33,9 @@ let WslInfoService = class WslInfoService {
     async isWslInstalled() {
         try {
             // 使用 where.exe 檢查 wsl.exe 是否存在，這不會觸發 WSL 的彈窗
-            const builder = command_builder_1.CommandBuilder.create('where.exe')
+            const builder = command_builder_util_1.CommandBuilder.create('where.exe', this.commandExecutor)
                 .arg('wsl.exe');
-            const result = await builder.exec(this.commandExecutor);
+            const result = await builder.exec();
             return result.exitCode === 0 && result.stdout.trim().length > 0;
         }
         catch {
@@ -55,11 +55,11 @@ let WslInfoService = class WslInfoService {
         try {
             // 檢查 LxssManager 服務是否存在並正在執行
             // 這個服務只有在 WSL 完全安裝後才會存在
-            const builder = command_builder_1.CommandBuilder.create('powershell')
+            const builder = command_builder_util_1.CommandBuilder.create('powershell', this.commandExecutor)
                 .arg('-NoProfile')
                 .arg('-Command')
                 .arg('Get-Service LxssManager -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Status');
-            const result = await builder.exec(this.commandExecutor);
+            const result = await builder.exec();
             const status = result.stdout.trim();
             // 服務狀態應該是 Running 或 Stopped
             return status === 'Running' || status === 'Stopped';
@@ -74,11 +74,11 @@ let WslInfoService = class WslInfoService {
      */
     async isStoreVersionInstalled() {
         try {
-            const builder = command_builder_1.CommandBuilder.create('powershell')
+            const builder = command_builder_util_1.CommandBuilder.create('powershell', this.commandExecutor)
                 .arg('-NoProfile')
                 .arg('-Command')
                 .arg('Get-AppxPackage -Name MicrosoftCorporationII.WindowsSubsystemForLinux');
-            const result = await builder.exec(this.commandExecutor);
+            const result = await builder.exec();
             return result.stdout.trim().length > 0;
         }
         catch {
@@ -110,9 +110,9 @@ let WslInfoService = class WslInfoService {
             if (await this.isStoreVersionInstalled()) {
                 try {
                     // 使用 --version 檢查版本
-                    const versionBuilder = command_builder_1.CommandBuilder.create('wsl')
+                    const versionBuilder = command_builder_util_1.CommandBuilder.create('wsl', this.commandExecutor)
                         .arg('--version');
-                    const versionResult = await versionBuilder.exec(this.commandExecutor);
+                    const versionResult = await versionBuilder.exec();
                     const versionOutput = versionResult.stdout;
                     // 使用 Parser 解析版本資訊（支援多語系）
                     wslVersion = wsl_version_parser_1.WslVersionParser.parseWslVersion(versionOutput) ?? undefined;
@@ -125,9 +125,9 @@ let WslInfoService = class WslInfoService {
             // 執行 wsl --status 取得預設版本
             let defaultVersion;
             try {
-                const statusBuilder = command_builder_1.CommandBuilder.create('wsl')
+                const statusBuilder = command_builder_util_1.CommandBuilder.create('wsl', this.commandExecutor)
                     .arg('--status');
-                const statusResult = await statusBuilder.exec(this.commandExecutor);
+                const statusResult = await statusBuilder.exec();
                 const statusOutput = statusResult.stdout;
                 // 使用 Parser 解析預設版本（支援多語系）
                 defaultVersion = wsl_version_parser_1.WslVersionParser.parseDefaultVersion(statusOutput) ?? undefined;

package/dist/infrastructure/platforms/windows/services/wsl-instance-inspection.service.js

@@ -50,7 +50,7 @@ const tsyringe_1 = require("tsyringe");
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const tokens_1 = require("../../../../di/tokens");
-const command_builder_1 = require("../../../execution/command-builder");
+const command_builder_util_1 = require("../../../execution/command-builder.util");
 const paths_1 = require("../../../../constants/paths");
 const input_validator_util_1 = require("../../../utils/input-validator.util");
 /**
@@ -80,10 +80,10 @@ let WslInstanceInspectionService = class WslInstanceInspectionService {
             component: 'WslInstanceInspectionService'
         });
         try {
-            const builder = command_builder_1.CommandBuilder.create('wsl')
+            const builder = command_builder_util_1.CommandBuilder.create('wsl', this.commandExecutor)
                 .arg('--list')
                 .arg('--verbose');
-            const result = await builder.exec(this.commandExecutor);
+            const result = await builder.exec();
             const output = result.stdout;
             const lines = output.split('\n');
             const instances = [];