@synopackageland/cli 0.9.5 → 0.9.7

package/CHANGELOG.md

@@ -1,5 +1,59 @@
 # Changelog
 
+## 0.9.7 (2026-10-13)
+
+Builds with SDK 0.9.8 and templates 0.9.7: `init` writes SDK v0.9.8 (Go
+module and Rust crate tag), `@synopackageland/sdk` 0.9.8 and
+`@synopackageland/ui` 0.9.2. SDK 0.9.8 fixes `BackgroundPanel`, whose controls
+to choose a file and submit it were hidden on DSM. The executor digest table
+records SDK 0.9.8 with the same executor and lifecycle digests as 0.9.7, and
+the policy digest does not change, so a rebuilt App keeps the pins it was
+approved with.
+
+繁中摘要：使用 SDK 0.9.8 與 templates 0.9.7（UI 0.9.2）。SDK 0.9.8 修正
+`BackgroundPanel` 在 DSM 上看不到選檔與送出按鈕。digest 表加入 SDK 0.9.8，
+executor 與 lifecycle digest 與 0.9.7 相同，policy digest 也不變，重建的 App
+沿用原本核准的 pins。
+
+## 0.9.6 (2026-10-12)
+
+Builds with SDK 0.9.7 and templates 0.9.6: `init` writes SDK v0.9.7 (Go
+module and Rust crate tag), `@synopackageland/sdk` 0.9.7 and
+`@synopackageland/ui` 0.9.2. The executor digest table records SDK 0.9.7,
+whose executor and lifecycle binary changed, so a rebuilt App carries new
+executor digests. The policy digest changes only for an App that declares
+`uninstall.purge.root`, and such an App asks for approval again after the
+upgrade; `bg.jobs.pause` and `bg.jobs.resume` reach the CGI route table, not
+the policy. Whether new executor digests alone ask for approval again has not
+been checked on a DSM yet.
+
+繁中摘要：使用 SDK 0.9.7 與 templates 0.9.6（UI 0.9.2）。executor digest 表加入
+SDK 0.9.7；executor 與 lifecycle 都有變更，重建的 App 會帶新的 executor digest。
+只有宣告 `uninstall.purge.root` 的 App 的 policy digest 會變，升級後需要重新核准；
+`bg.jobs.pause`、`bg.jobs.resume` 只進 CGI route 表，不影響 policy。只換 executor
+digest 時是否需要重新核准，尚未在 DSM 上驗證。新增解除安裝 hook（`uninstall.purge`）。
+
+- Uninstall hook: `uninstall.purge` in dsm-package.yaml (`exec`, `args`,
+  `env`, `timeout` 2..120 s, optional `root`) names the App's own command,
+  and `uninstall.state.items` lists the state it can delete, each with an
+  `uninstall.state.<key>` text. On a real uninstall preuninst stops the
+  worker and the daemon, runs the hook as the package account with
+  `SYNOPKGLAND_DELETE_STATE` and `SYNOPKGLAND_REMOVE_DATA`, then asks the
+  executor to purge; a failing or timed-out hook is logged and never blocks
+  the uninstall, and an upgrade skips it. The wizard gains an unchecked
+  "delete state" box after the item texts. `purge.root` names a rootOps
+  script the executor runs as root only while its approval stands; the
+  policy's `purge` member records it, so such an App asks for approval
+  again. Build refuses a hook outside the package or one that tries to
+  become root. inspect checks an executor SPK's preuninst and wizard against
+  the hook recorded in sdk-package.json, and that record's root step against
+  the policy's `purge`.
+- `init` and `add` change only the dsm-package.yaml keys they set
+  (`capabilities`, `portal`, `os_min_ver`); the template's comments, such as
+  the commented `uninstall` example, and its formatting stay as written.
+- With `SYNOPKGLAND_SDK_DIR`, init also drops the released SDK from the
+  frontend's package-lock.json, so npm installs the local ts package.
+
 ## 0.9.5 (2026-10-12)
 
 Builds with SDK 0.9.6 and templates 0.9.5: `init` writes SDK v0.9.6,

package/assets/licenses/MUSL-COPYRIGHT

@@ -0,0 +1,193 @@
+musl as a whole is licensed under the following standard MIT license:
+
+----------------------------------------------------------------------
+Copyright © 2005-2020 Rich Felker, et al.
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+----------------------------------------------------------------------
+
+Authors/contributors include:
+
+A. Wilcox
+Ada Worcester
+Alex Dowad
+Alex Suykov
+Alexander Monakov
+Andre McCurdy
+Andrew Kelley
+Anthony G. Basile
+Aric Belsito
+Arvid Picciani
+Bartosz Brachaczek
+Benjamin Peterson
+Bobby Bingham
+Boris Brezillon
+Brent Cook
+Chris Spiegel
+Clément Vasseur
+Daniel Micay
+Daniel Sabogal
+Daurnimator
+David Carlier
+David Edelsohn
+Denys Vlasenko
+Dmitry Ivanov
+Dmitry V. Levin
+Drew DeVault
+Emil Renner Berthing
+Fangrui Song
+Felix Fietkau
+Felix Janda
+Gianluca Anzolin
+Hauke Mehrtens
+He X
+Hiltjo Posthuma
+Isaac Dunham
+Jaydeep Patil
+Jens Gustedt
+Jeremy Huntwork
+Jo-Philipp Wich
+Joakim Sindholt
+John Spencer
+Julien Ramseier
+Justin Cormack
+Kaarle Ritvanen
+Khem Raj
+Kylie McClain
+Leah Neukirchen
+Luca Barbato
+Luka Perkov
+M Farkas-Dyck (Strake)
+Mahesh Bodapati
+Markus Wichmann
+Masanori Ogino
+Michael Clark
+Michael Forney
+Mikhail Kremnyov
+Natanael Copa
+Nicholas J. Kain
+orc
+Pascal Cuoq
+Patrick Oppenlander
+Petr Hosek
+Petr Skocik
+Pierre Carrier
+Reini Urban
+Rich Felker
+Richard Pennington
+Ryan Fairfax
+Samuel Holland
+Segev Finer
+Shiz
+sin
+Solar Designer
+Stefan Kristiansson
+Stefan O'Rear
+Szabolcs Nagy
+Timo Teräs
+Trutz Behn
+Valentin Ochs
+Will Dietz
+William Haddon
+William Pitcock
+
+Portions of this software are derived from third-party works licensed
+under terms compatible with the above MIT license:
+
+The TRE regular expression implementation (src/regex/reg* and
+src/regex/tre*) is Copyright © 2001-2008 Ville Laurikari and licensed
+under a 2-clause BSD license (license text in the source files). The
+included version has been heavily modified by Rich Felker in 2012, in
+the interests of size, simplicity, and namespace cleanliness.
+
+Much of the math library code (src/math/* and src/complex/*) is
+Copyright © 1993,2004 Sun Microsystems or
+Copyright © 2003-2011 David Schultz or
+Copyright © 2003-2009 Steven G. Kargl or
+Copyright © 2003-2009 Bruce D. Evans or
+Copyright © 2008 Stephen L. Moshier or
+Copyright © 2017-2018 Arm Limited
+and labelled as such in comments in the individual source files. All
+have been licensed under extremely permissive terms.
+
+The ARM memcpy code (src/string/arm/memcpy.S) is Copyright © 2008
+The Android Open Source Project and is licensed under a two-clause BSD
+license. It was taken from Bionic libc, used on Android.
+
+The AArch64 memcpy and memset code (src/string/aarch64/*) are
+Copyright © 1999-2019, Arm Limited.
+
+The implementation of DES for crypt (src/crypt/crypt_des.c) is
+Copyright © 1994 David Burren. It is licensed under a BSD license.
+
+The implementation of blowfish crypt (src/crypt/crypt_blowfish.c) was
+originally written by Solar Designer and placed into the public
+domain. The code also comes with a fallback permissive license for use
+in jurisdictions that may not recognize the public domain.
+
+The smoothsort implementation (src/stdlib/qsort.c) is Copyright © 2011
+Valentin Ochs and is licensed under an MIT-style license.
+
+The x86_64 port was written by Nicholas J. Kain and is licensed under
+the standard MIT terms.
+
+The mips and microblaze ports were originally written by Richard
+Pennington for use in the ellcc project. The original code was adapted
+by Rich Felker for build system and code conventions during upstream
+integration. It is licensed under the standard MIT terms.
+
+The mips64 port was contributed by Imagination Technologies and is
+licensed under the standard MIT terms.
+
+The powerpc port was also originally written by Richard Pennington,
+and later supplemented and integrated by John Spencer. It is licensed
+under the standard MIT terms.
+
+All other files which have no copyright comments are original works
+produced specifically for use as part of this library, written either
+by Rich Felker, the main author of the library, or by one or more
+contibutors listed above. Details on authorship of individual files
+can be found in the git version control history of the project. The
+omission of copyright and license comments in each file is in the
+interest of source tree size.
+
+In addition, permission is hereby granted for all public header files
+(include/* and arch/*/bits/*) and crt files intended to be linked into
+applications (crt/*, ldso/dlstart.c, and arch/*/crt_arch.h) to omit
+the copyright notice and permission notice otherwise required by the
+license, and to use these files without any requirement of
+attribution. These files include substantial contributions from:
+
+Bobby Bingham
+John Spencer
+Nicholas J. Kain
+Rich Felker
+Richard Pennington
+Stefan Kristiansson
+Szabolcs Nagy
+
+all of whom have explicitly granted such permission.
+
+This file previously contained text expressing a belief that most of
+the files covered by the above exception were sufficiently trivial not
+to be subject to copyright, resulting in confusion over whether it
+negated the permissions granted in the license. In the spirit of
+permissive licensing, and of not having licensing issues being an
+obstacle to adoption, that text has been removed.