@synopackageland/cli 0.23.2 → 0.24.1

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.24.1 (2026-10-22)
+
+- Build SDK/App 0.24.1 with the verified immutable executor/v0.24.0 release and its exact executor/lifecycle digests; retain SDK/App 0.24.0 support. SDK 0.24.1 adds AppShell brand navigation to the first page and supports UI 0.14.3.
+- Keep templates 0.24.0 and Go 1.26.10. Executor and lifecycle payloads remain unchanged.
+
+## 0.24.0 (2026-10-22)
+
+- Pin Go 1.26.10 for every SDK runtime build, addressing crypto/x509 GO-2026-6809. Ship the matching executor/lifecycle digest inventory for SDK 0.24.0; older release records are preserved in their release history.
+- Include the native HTTPS prestart port-release wait and diagnostics, and SDK/App UI 0.14 compatibility already merged in this release line.
+- Use templates 0.24.0 with UI 0.14.0 and the supported DSM Node.js_v22 dependency. Update build/test environments to Node.js 24.22.1 LTS.
+- Known limitations: rebuilding and upgrading executor Apps changes their protected payload digests and requires administrator reapproval of system access. No NAS acceptance is claimed.
+
 ## 0.23.2 (2026-10-22)
 
 - Build SDK/App 0.23.2 with its verified immutable executor/v0.20.0 digests; retain support for SDK/App 0.23.0 and 0.23.1. SDK 0.23.2 adds compatibility with UI 0.14.0.

package/dist/build-spk/go-toolchain.d.ts

@@ -4,7 +4,7 @@ import { type NativeArchFamily } from "./dsm-arch.js";
  * templates, so their digests do not depend on the builder's Go. Each
  * template go.mod names it in its `toolchain` line.
  */
-export declare const PINNED_GO_TOOLCHAIN = "go1.26.9";
+export declare const PINNED_GO_TOOLCHAIN = "go1.26.10";
 /**
  * The `go build` environment for a binary the CLI ships from its own templates
  * (executor, lifecycle helper, daemon controller, gateway). GOTOOLCHAIN names
@@ -17,4 +17,4 @@ export declare function goBinaryVersion(file: string): string | undefined;
 /** Why a CLI-owned binary cannot ship: it was not built by the pinned Go release. */
 export declare function pinnedGoProblem(file: string): string | undefined;
 /** Appended to a failed CLI-owned `go build`: what the build needs. */
-export declare const PINNED_GO_HINT = "These binaries need go1.26.9: Go 1.21 or later downloads it automatically; offline, install go1.26.9 on PATH or allow GOPROXY to serve golang.org/toolchain.";
+export declare const PINNED_GO_HINT = "These binaries need go1.26.10: Go 1.21 or later downloads it automatically; offline, install go1.26.10 on PATH or allow GOPROXY to serve golang.org/toolchain.";

package/dist/build-spk/go-toolchain.js

@@ -5,7 +5,7 @@ import { goBuildEnv } from "./dsm-arch.js";
  * templates, so their digests do not depend on the builder's Go. Each
  * template go.mod names it in its `toolchain` line.
  */
-export const PINNED_GO_TOOLCHAIN = "go1.26.9";
+export const PINNED_GO_TOOLCHAIN = "go1.26.10";
 /**
  * The `go build` environment for a binary the CLI ships from its own templates
  * (executor, lifecycle helper, daemon controller, gateway). GOTOOLCHAIN names

package/dist/error-registry.js

@@ -2,7 +2,7 @@ import { COMPOSE_ERRORS } from "./standalone/compose-errors.js";
 export const ERROR_REGISTRY = {
     ...COMPOSE_ERRORS,
     INSTALL_SETTINGS_INVALID: { "code": "INSTALL_SETTINGS_INVALID", "description": "The installation setting declaration is invalid.", "suggestion": "Declare 1–32 lowercase identifier keys in install.settings, each with type https-origin, a plain label and an explicit boolean required; omit defaults and values." },
-    SDK_INSTALL_SETTINGS_UNSUPPORTED: { "code": "SDK_INSTALL_SETTINGS_UNSUPPORTED", "description": "The selected SDK does not provide native installation settings.", "suggestion": "Pin SDK 0.23.0 or a matching supported release with installsettings/cmd/control, then rebuild with the matching CLI." },
+    SDK_INSTALL_SETTINGS_UNSUPPORTED: { "code": "SDK_INSTALL_SETTINGS_UNSUPPORTED", "description": "The selected SDK does not provide native installation settings.", "suggestion": "Pin SDK 0.24.0 or a matching supported release with installsettings/cmd/control, then rebuild with the matching CLI." },
     SDK_INSTALL_SETTINGS_BUILD_FAILED: { "code": "SDK_INSTALL_SETTINGS_BUILD_FAILED", "description": "The SDK installation settings controller could not be built.", "suggestion": "Install the pinned Go toolchain, inspect the compiler diagnostics and rebuild with a complete matching SDK release." },
     INIT_HEALTH_INVALID: { code: "INIT_HEALTH_INVALID", description: "The Compose readiness selection is invalid.", suggestion: "Supply both --health-path and --health-status with the actual endpoint and expected 2xx response; redirects are not followed." },
     INIT_UPSTREAM_IMAGE_REQUIRED: { code: "INIT_UPSTREAM_IMAGE_REQUIRED", description: "The official upstream image repository was not selected.", suggestion: "Use init --upstream-fork --upstream-image <official-repository> for Compose." },
@@ -320,7 +320,7 @@ export const ERROR_REGISTRY = {
         STANDALONE_DAEMON_BUILD_FAILED: {
             code: "STANDALONE_DAEMON_BUILD_FAILED",
             description: "The package daemon's Go supervisor could not be built.",
-            suggestion: "Install Go 1.21 or later (builds pin go1.26.9 and need it offline) and check the compiler stderr; the NAS does not need a Go toolchain.",
+            suggestion: "Install Go 1.21 or later (builds pin go1.26.10 and need it offline) and check the compiler stderr; the NAS does not need a Go toolchain.",
         },
         STANDALONE_DAEMON_PAYLOAD_INVALID: {
             code: "STANDALONE_DAEMON_PAYLOAD_INVALID",
@@ -340,7 +340,7 @@ export const ERROR_REGISTRY = {
         STANDALONE_IDENTITY_GATEWAY_BUILD_FAILED: {
             code: "STANDALONE_IDENTITY_GATEWAY_BUILD_FAILED",
             description: "The SDK identity gateway could not be built from identity_gateway.sdk.",
-            suggestion: "Use an SDK release that contains idgateway/cmd/gateway, install Go (builds pin go1.26.9) and check the compiler stderr.",
+            suggestion: "Use an SDK release that contains idgateway/cmd/gateway, install Go (builds pin go1.26.10) and check the compiler stderr.",
         },
         STANDALONE_IDENTITY_GATEWAY_ARTIFACT_REQUIRED: {
             code: "STANDALONE_IDENTITY_GATEWAY_ARTIFACT_REQUIRED",
@@ -830,12 +830,12 @@ export const ERROR_REGISTRY = {
         EXECUTOR_BUILD_FAILED: {
             code: "EXECUTOR_BUILD_FAILED",
             description: "Compiling the executor or lifecycle helper from the App's SDK version failed.",
-            suggestion: "Confirm Go 1.21 or later is installed and go1.26.9 is available (prepare it offline), and check the compiler output in the message.",
+            suggestion: "Confirm Go 1.21 or later is installed and go1.26.10 is available (prepare it offline), and check the compiler output in the message.",
         },
         EXECUTOR_DIGEST_MISMATCH: {
             code: "EXECUTOR_DIGEST_MISMATCH",
             description: "The executor built from the SDK version does not match the sha256 table bundled in the CLI, or the table has no entry for this SDK version.",
-            suggestion: "Confirm github.com/synopackageland/syno-pkg-land-sdk in backend/go.mod is a release version and Go is go1.26.9; upgrade the CLI when the table has no entry for that version.",
+            suggestion: "Confirm github.com/synopackageland/syno-pkg-land-sdk in backend/go.mod is a release version and Go is go1.26.10; upgrade the CLI when the table has no entry for that version.",
         },
         EXECUTOR_DIGEST_UNVERIFIED: {
             code: "EXECUTOR_DIGEST_UNVERIFIED",
@@ -964,8 +964,8 @@ export const ERROR_REGISTRY = {
         },
         STANDALONE_RUNTIME_BUILD_FAILED: {
             code: "STANDALONE_RUNTIME_BUILD_FAILED",
-            description: "Compiling the bridge runtime (bridge/cmd/runtime) from the App's SDK version failed, or the result was not built with go1.26.9.",
-            suggestion: "Confirm Go 1.21 or later is installed and go1.26.9 is available; that SDK version must contain the bridge runtime; check the compiler output in the message.",
+            description: "Compiling the bridge runtime (bridge/cmd/runtime) from the App's SDK version failed, or the result was not built with go1.26.10.",
+            suggestion: "Confirm Go 1.21 or later is installed and go1.26.10 is available; that SDK version must contain the bridge runtime; check the compiler output in the message.",
         },
         STANDALONE_BRIDGE_DESCRIBE_FAILED: {
             code: "STANDALONE_BRIDGE_DESCRIBE_FAILED",

package/dist/runtime/executor-digests.json

@@ -1,35 +1,24 @@
 {
-    "0.23.0": {
-        "x86_64": "e27cfeb85fed221b06f9c58166f02c0f701a724308cd17c96a43a843a0b5c4aa",
-        "aarch64": "908db00cbd37d072f6ffc339e7bca24da5efb8cddd4befcbad02c7398beb7191",
-        "armv7": "a0f35d62ec80a1bf3fb49f5e2d1a5f7576eda569a6fd0695084cec6cb8e100bc",
+    "0.24.0": {
+        "x86_64": "de78684faac211c24a7cda8a4541ab1b138d37f6d580936fe354bb9bd0d78a0f",
+        "aarch64": "8ef7c736203f6c111816b76f970b7204fa6f8d871ff3222fd7c0a27d0075b847",
+        "armv7": "a38703119554b5f2a8bf4810ec2a6c8f1d793bfbb1ca96803eb1b39a26ffd96c",
         "lifecycle": {
-            "x86_64": "9bb53301670b43cdcd6e21cebac99ab7abd82962d874f32423a81e6cb49d4972",
-            "aarch64": "38fe873c86eb102c850baa1f304114a83a31d1df72defd22792bc37610fec9bb",
-            "armv7": "256fb348b275da7ac5728a3cb7cb7c65660de0d5c2c59430ab4f5ade1b0a3681"
+            "x86_64": "c6fbb377ecd5ec7ee5b96439f22091d9fa5965dfd616d510ca9445722f436721",
+            "aarch64": "a9ca1750d4d5cff4727dc29789e6eaf0a365cb0e674f1bb796971d82f2d4fa27",
+            "armv7": "6d25fc972eba12e3ac68f8b6a95a45e9e5706ebe19ffc1ff774fc318acbeb90f"
         },
-        "goToolchain": "go1.26.9"
+        "goToolchain": "go1.26.10"
     },
-    "0.23.1": {
-        "x86_64": "e27cfeb85fed221b06f9c58166f02c0f701a724308cd17c96a43a843a0b5c4aa",
-        "aarch64": "908db00cbd37d072f6ffc339e7bca24da5efb8cddd4befcbad02c7398beb7191",
-        "armv7": "a0f35d62ec80a1bf3fb49f5e2d1a5f7576eda569a6fd0695084cec6cb8e100bc",
+    "0.24.1": {
+        "x86_64": "de78684faac211c24a7cda8a4541ab1b138d37f6d580936fe354bb9bd0d78a0f",
+        "aarch64": "8ef7c736203f6c111816b76f970b7204fa6f8d871ff3222fd7c0a27d0075b847",
+        "armv7": "a38703119554b5f2a8bf4810ec2a6c8f1d793bfbb1ca96803eb1b39a26ffd96c",
         "lifecycle": {
-            "x86_64": "9bb53301670b43cdcd6e21cebac99ab7abd82962d874f32423a81e6cb49d4972",
-            "aarch64": "38fe873c86eb102c850baa1f304114a83a31d1df72defd22792bc37610fec9bb",
-            "armv7": "256fb348b275da7ac5728a3cb7cb7c65660de0d5c2c59430ab4f5ade1b0a3681"
+            "x86_64": "c6fbb377ecd5ec7ee5b96439f22091d9fa5965dfd616d510ca9445722f436721",
+            "aarch64": "a9ca1750d4d5cff4727dc29789e6eaf0a365cb0e674f1bb796971d82f2d4fa27",
+            "armv7": "6d25fc972eba12e3ac68f8b6a95a45e9e5706ebe19ffc1ff774fc318acbeb90f"
         },
-        "goToolchain": "go1.26.9"
-    },
-    "0.23.2": {
-        "x86_64": "e27cfeb85fed221b06f9c58166f02c0f701a724308cd17c96a43a843a0b5c4aa",
-        "aarch64": "908db00cbd37d072f6ffc339e7bca24da5efb8cddd4befcbad02c7398beb7191",
-        "armv7": "a0f35d62ec80a1bf3fb49f5e2d1a5f7576eda569a6fd0695084cec6cb8e100bc",
-        "lifecycle": {
-            "x86_64": "9bb53301670b43cdcd6e21cebac99ab7abd82962d874f32423a81e6cb49d4972",
-            "aarch64": "38fe873c86eb102c850baa1f304114a83a31d1df72defd22792bc37610fec9bb",
-            "armv7": "256fb348b275da7ac5728a3cb7cb7c65660de0d5c2c59430ab4f5ade1b0a3681"
-        },
-        "goToolchain": "go1.26.9"
+        "goToolchain": "go1.26.10"
     }
 }

package/dist/runtime/sdk-source.js

@@ -76,7 +76,7 @@ function goMod(backendDir) {
     }
 }
 /** SDK releases that reuse an immutable executor release with identical payload bytes. */
-const EXECUTOR_RELEASES = { '0.21.0': '0.20.0', '0.21.1': '0.20.0', '0.22.0': '0.20.0', '0.23.0': '0.20.0', '0.23.1': '0.20.0', '0.23.2': '0.20.0' };
+const EXECUTOR_RELEASES = { '0.21.0': '0.20.0', '0.21.1': '0.20.0', '0.22.0': '0.20.0', '0.23.0': '0.20.0', '0.23.1': '0.20.0', '0.23.2': '0.20.0', '0.24.1': '0.24.0' };
 /**
  * The module directories of one SDK version. SYNOPKGLAND_SDK_DIR names a
  * local sdk checkout (development and gates only); otherwise modules come from

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.23.2",
+  "version": "0.24.1",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {
@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "@napi-rs/keyring": "^2.1.1",
-    "@synopackageland/templates": "0.23.0",
+    "@synopackageland/templates": "0.24.0",
     "ajv": "^8.17.1",
     "commander": "^13.1.0",
     "json-canonicalize": "^3.0.1",