@synopackageland/cli 0.34.0 → 0.36.0

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # Changelog
 
+## 0.36.0 (2026-10-29)
+
+- Stop treating `net.Listener` and `net.ListenConfig` types as listeners.
+  Actual constructors, aliases and declared listener/server methods remain
+  rejected. Accept SDK child-port reservation/probe, named private HTTP servers
+  and peer-credential executor transport as explicit boundaries.
+- Add `audit-entry` for every custom-hook Go payload's own target import graph.
+  It never executes the App. Keep all files of imported shared packages in scope.
+- Bind ordinary CGI/workers to IPC tier `none`; only separately approved root
+  helper builds may use executor-tier peer serving. Update the App skill for
+  SDK/App 0.34.0, named data planes, child ports and helper boundaries.
+
+- Audit `(*api.Server).InvokeAsAdministrator` calls: each must name a literal
+  method declared `administrators` in permissions.json. Package commands outside
+  CGI use it instead of calling `ServeHTTP` on a server in process, which the
+  audit still rejects. Requires the SDK release with `InvokeAsAdministrator`.
+- Accept the `integration` permission for Go `api.HandleIntegration` service
+  callbacks. `dsm-package.yaml` `integrations` must list exactly those methods.
+  The route audit requires the constructor and permission together, admits only
+  the callback's handler graph, and binds each `?method=` selector into the
+  HTTP route inventory. The install and upgrade wizards list the callbacks for
+  administrator approval; `inspect` verifies them. Requires the SDK release
+  with `api.HandleIntegration`.
+- Stop the route audit from following a handler's receiver or parameter to
+  its type. A method value such as `cfg.serve` used to admit every method of
+  that type, which could hide an unregistered `ServeHTTP` dispatch elsewhere
+  on it.
+
+## 0.35.0 (2026-10-29)
+
+- Audit the target Linux import graphs of configured Go binaries rather than
+  recursively scanning unshipped development commands.
+- Accept fixed, permission-declared `api.HandleHTTP` routes and package-private
+  `ipc.ServeUnix` handler graphs with SDK 0.33.0. Reject direct listeners and
+  unregistered handlers even when an IPC handler is reused.
+- Bind the raw HTTP prefix inventory and package IPC identity into each Go
+  binary. Repeat source validation after UI hooks. Retain executor 0.32.0 bytes
+  and templates 0.32.0.
+
 ## 0.34.0 (2026-10-29)
 
 - Enforce explicit App entry and reject undeclared App methods, dynamic route

package/README.md

@@ -74,15 +74,18 @@ alongside npm lockfiles. Do not disable checksum verification for public SDK
 packages. Private mirrors can use explicitly configured Go authentication and
 checksum settings; a failed fetch reports `SDK_DOWNLOAD_FAILED`.
 
-CLI 0.34.0 uses templates 0.32.0 and SDK 0.32.0. Compose import and SDK defaults
+CLI 0.35.0 uses templates ~0.32.0, whose default SDK pin remains 0.32.0. Compose import and SDK defaults
 read the SDK pin from the installed templates; explicit App SDK declarations take precedence.
 Every App method must be declared in the permissions table. Dynamic names and
-custom HTTP dispatchers are rejected; use fixed SDK route constructors and
+custom HTTP dispatchers are rejected. With SDK 0.33.0, use fixed
+`api.HandleHTTP` prefixes for authorized raw HTTP and `ipc.ServeUnix` for private
+package Unix sockets. The audit follows each shipped Linux binary's import graph;
+unimported development commands are excluded. Use
 `identity_gateway.upstream_auth_paths` for client API paths that use upstream
 authentication. See [App entry and registration](docs/app-entry.md).
 
 `init` and `add` read their templates from the locally installed
-`@synopackageland/templates`. CLI 0.34.0 depends on `~0.32.0`: npm installation or
+`@synopackageland/templates`. CLI 0.35.0 depends on `~0.32.0`: npm installation or
 update can select the latest templates patch in the 0.32 minor line. Templates
 patches need only a templates release; update the npm installation to receive them.
 The CLI never fetches templates at runtime, so offline use works after installation;