@synopackageland/sdk 0.26.0 → 0.27.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/sdk",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "Frontend SDK for DSM packages built with synopkgland: headless client and Vue components",
   "license": "MIT",
   "homepage": "https://github.com/synopackageland/syno-pkg-land-sdk/tree/main/ts#readme",
@@ -57,7 +57,7 @@
   },
   "devDependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/ui": "0.14.3",
+    "@synopackageland/ui": "0.14.8",
     "@types/node": "24.19.2",
     "@vitejs/plugin-vue": "6.0.9",
     "jsdom": "29.1.1",

package/spec/protocol/v1/README.md

@@ -487,3 +487,13 @@ It MUST NOT raise frame limits. Staging MUST be App-owned 0600 under a private
 0700 package directory. The App MUST verify size/hash and unlink after reading.
 Header, execution, spool cleanup and error rules are specified in
 [the raw contract](../../../docs/webapi-raw.md).
+
+### Destination permission observations
+
+`files.checkPermission` also supports an existing until-revoked
+`files.moveFromStaging` destination: omit `job_id`, provide the exact granted
+path and the current owner's session. The approved move policy permits only
+this observation; it cannot widen the destination or grant new authority.
+The executor rechecks current identity, App Privileges, scope, ACL and grant
+fences. Legacy time-limited grants continue to require their `job_id` and
+explicit operation policy. See `docs/dsm-session-transport.md` at the root.

package/spec/protocol/v1/schema/files.checkPermission.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/synopackageland/syno-pkg-land-sdk/spec/protocol/v1/schema/files.checkPermission.json",
   "title": "files.checkPermission",
-  "description": "Check write permission for the delegated user.",
+  "description": "Check write permission for the delegated user. A legacy grant requires job_id. An until-revoked moveFromStaging destination omits job_id, requires the current owner session, and permits only its exact destination path; it never creates or widens a grant.",
   "since": "0.9.0",
   "auth": "optional",
   "type": "object",
@@ -24,7 +24,6 @@
   "additionalProperties": false,
   "required": [
     "delegation_id",
-    "job_id",
     "path"
   ]
 }