@synopackageland/sdk 0.38.1 → 0.38.3

package/dist/src/protocol/v1.d.ts

@@ -560,6 +560,7 @@ export interface StatusParams {
 /** webapi.call: Call an exact approved WebAPI as the profile grant owner. JSON returns the DSM envelope; raw (since 0.12.1) requires profile raw_max_bytes and returns content_type, size, sha256 and base64 body or private staging handle. Never retried. Since 0.11.0. */
 export interface WebapiCallParams {
     response_type?: "json" | "raw";
+    expected_size?: number;
     delegation_id: string;
     job_id?: string;
     api: string;

package/executor-manifest.json

@@ -1,11 +1,11 @@
 {
   "formatVersion": 1,
-  "sdkVersion": "0.38.1",
-  "executorVersion": "0.32.0",
+  "sdkVersion": "0.38.3",
+  "executorVersion": "0.38.3",
   "executorDigests": {
-    "x86_64": "aa8259f22620c3301ee83b76f6de6fbf06b4df36f49b64a5cc12772a3072abcc",
-    "aarch64": "97d2b3d8d4a169ba39583a78d5f30428f877d9aac7b38415a69ac024200716bd",
-    "armv7": "3cb936feabe1252a6fc4d44ac5318ff340bbc5fc89acd53a9afaddeaa94914bf",
+    "x86_64": "36c4f39754b946773011a632308ea357c2269585aa8000c7f4989a3b43cc6235",
+    "aarch64": "11c81787763007be62839b27e9ebfab734f6a4f1b866e41de1fd143e1af32b8e",
+    "armv7": "e2d97ba0d8b47c39f5fbce36118803d17ff0faf31ea686a3225fa0296e3c6f32",
     "lifecycle": {
       "x86_64": "c6fbb377ecd5ec7ee5b96439f22091d9fa5965dfd616d510ca9445722f436721",
       "aarch64": "a9ca1750d4d5cff4727dc29789e6eaf0a365cb0e674f1bb796971d82f2d4fa27",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/sdk",
-  "version": "0.38.1",
+  "version": "0.38.3",
   "description": "Frontend SDK for DSM packages built with synopkgland: headless client and Vue components",
   "license": "MIT",
   "homepage": "https://github.com/synopackageland/syno-pkg-land-sdk/tree/main/ts#readme",

package/spec/protocol/v1/README.md

@@ -40,8 +40,9 @@ browser waits 2 seconds past the request (`timeouts.json` holds the values).
 |---|---|---|
 | Root program (`run.timeout_s`) | its own work | 1–120 s, default 20; the process group is then killed |
 | Executor, `root.run` | the program, then its reply | answers within 130 s (120 + 10) |
-| Executor, every other op | its DSM calls | answers within 30 s |
-| Executor client (Go `delegate.Client`, the bridge runtime's `root.*` and `delegate.*`) | the executor | `root.run` 140 s (`delegate.RootRunTimeout`), every other op 40 s (`delegate.ExecutorTimeout`) |
+| Executor, raw `webapi.call` | its streaming DSM call | executes within 1800 s, answers within 1810 s |
+| Executor, other ops | its DSM calls | answers within 30 s |
+| Executor client (Go `delegate.Client`, the bridge runtime's `root.*` and `delegate.*`) | the executor | `root.run` 140 s (`delegate.RootRunTimeout`); Go raw WebAPI 1820 s; other ops 40 s (`delegate.ExecutorTimeout`) |
 | Request (`api.Timeout`, manifest `timeout_seconds`) | the App's backend | default 300 s (`api.DefaultRequestTimeout`), 1–3600 |
 | Browser (`clientTimeout`, the CLI window's `call`) | the request | the request's deadline + 2 s |
 
@@ -490,7 +491,7 @@ MUST be refused. These bounds and semantics also apply to until-revoked grants.
 
 The JSON-only restriction above applies to the default response mode. An explicit
 `response_type:"raw"` MUST require a positive, approved profile `raw_max_bytes`
-(1..67108864), pinned by policy and user consent. The executor MUST parse bounded
+(1..10737418240, at most 10 GiB), pinned by policy and user consent. The executor MUST parse bounded
 CGI headers, refuse redirects, enforce the body limit without truncation, and
 return `response_type`, `content_type`, `size`, `sha256` and exactly one of
 base64 `body` (at most 32768 bytes decoded) or a package-private `staging` handle.
@@ -498,6 +499,17 @@ It MUST NOT raise frame limits. Staging MUST be App-owned 0600 under a private
 0700 package directory. The App MUST verify size/hash and unlink after reading.
 Header, execution, spool cleanup and error rules are specified in
 [the raw contract](../../../docs/webapi-raw.md).
+Raw calls allow 18 minutes per started GiB (at least 30 minutes, at most three
+hours), narrowed by the parent deadline and any timed grant's remaining lifetime.
+Optional raw-only `expected_size` asserts the exact pinned source size, bounded
+by the profile. It MUST match Content-Length if present and the final body size.
+Reserve staging from that size or validated Content-Length before body writes;
+only unknown sizes use the profile ceiling. Check available filesystem space
+and refuse insufficient capacity with `NO_SPACE`. Raw socket deadline
+hints may reach 10820000 ms; other operations retain their one-hour ceiling.
+They MUST stream with bounded memory, protect active output from orphan cleanup,
+and cancel/drain when the grant is revoked or the
+integration is disabled. JSON calls retain their 10-second bound.
 
 ### Destination permission observations
 

package/spec/protocol/v1/schema/webapi.call.json

@@ -12,6 +12,12 @@
       "enum": ["json", "raw"],
       "description": "Defaults to json. Raw requires an explicitly approved raw_max_bytes profile."
     },
+    "expected_size": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 10737418240,
+      "description": "Raw only: exact byte size of the pinned source version from metadata. Narrows staging reservation and execution budget; mismatch is refused."
+    },
     "delegation_id": {
       "type": "string",
       "pattern": "^[a-f0-9]{64}$"

package/spec/protocol/v1/timeouts.json

@@ -3,6 +3,8 @@
   "margin_s": 10,
   "executor": {
     "op_s": 30,
+    "webapi_raw_execution_s": 10800,
+    "webapi_raw_answer_s": 10810,
     "root_run_program_default_s": 20,
     "root_run_program_max_s": 120,
     "root_run_answer_s": 130,
@@ -10,6 +12,7 @@
   },
   "client": {
     "op_s": 40,
+    "webapi_raw_s": 10820,
     "root_run_s": 140
   },
   "request": {