Version 0.3.2 is a patch release correcting the Deno/JSR native installer. The diff from v0.3.1 does not change src/, include/morpheus/morpheus.h, or cmake/PublicApi.cmake; it removes no public function, changes no signature or record layout, and reassigns no constant. C ABI 2 and SONAME 1 remain correct.
The current project still coordinates one version across native archives, the standalone Deno archive, benchmark evidence, and JSR. All assets are therefore rebuilt as 0.3.2.
Failure and correction
The published 0.3.1 /native and /setup commands verified the native archive correctly, but attempted to recreate its unversioned and SONAME aliases with Deno.symlink(). Deno requires unscoped read and write permissions for that operation, so the documented path-scoped command failed before installing the archive.
The 0.3.2 extractor validates the same archive paths and link targets, resolves link chains entirely within the verified in-memory archive, rejects missing, non-regular, escaping, cyclic, and duplicate entries, and materializes each shared-library alias as a regular copy. The unversioned, SONAME, and fully versioned paths therefore remain loadable without granting filesystem-wide permissions.
CI reproduces the real two-link Linux archive structure and runs that test with only path-scoped --allow-read and --allow-write. Existing traversal, redirect, checksum, cleanup, duplicate, and output-isolation tests remain in force.