@synopackageland/sdk 0.38.2 → 0.38.4

package/dist/src/protocol/v1.d.ts

@@ -560,6 +560,7 @@ export interface StatusParams {
 /** webapi.call: Call an exact approved WebAPI as the profile grant owner. JSON returns the DSM envelope; raw (since 0.12.1) requires profile raw_max_bytes and returns content_type, size, sha256 and base64 body or private staging handle. Never retried. Since 0.11.0. */
 export interface WebapiCallParams {
     response_type?: "json" | "raw";
+    expected_size?: number;
     delegation_id: string;
     job_id?: string;
     api: string;

package/executor-manifest.json

@@ -1,11 +1,11 @@
 {
   "formatVersion": 1,
-  "sdkVersion": "0.38.2",
-  "executorVersion": "0.38.2",
+  "sdkVersion": "0.38.4",
+  "executorVersion": "0.38.3",
   "executorDigests": {
-    "x86_64": "c25375fd73da6fa91388f8d827e94782779a9d007d9a147f250774219e768476",
-    "aarch64": "9f523ba0482814c61e441a681a2082979e96718043f13112c40fb0cd061dedb2",
-    "armv7": "75a0046758a47dd81d62662996465c0b701f9d7de13e808b46f0a627ae5c011e",
+    "x86_64": "36c4f39754b946773011a632308ea357c2269585aa8000c7f4989a3b43cc6235",
+    "aarch64": "11c81787763007be62839b27e9ebfab734f6a4f1b866e41de1fd143e1af32b8e",
+    "armv7": "e2d97ba0d8b47c39f5fbce36118803d17ff0faf31ea686a3225fa0296e3c6f32",
     "lifecycle": {
       "x86_64": "c6fbb377ecd5ec7ee5b96439f22091d9fa5965dfd616d510ca9445722f436721",
       "aarch64": "a9ca1750d4d5cff4727dc29789e6eaf0a365cb0e674f1bb796971d82f2d4fa27",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/sdk",
-  "version": "0.38.2",
+  "version": "0.38.4",
   "description": "Frontend SDK for DSM packages built with synopkgland: headless client and Vue components",
   "license": "MIT",
   "homepage": "https://github.com/synopackageland/syno-pkg-land-sdk/tree/main/ts#readme",

package/spec/protocol/v1/README.md

@@ -491,7 +491,7 @@ MUST be refused. These bounds and semantics also apply to until-revoked grants.
 
 The JSON-only restriction above applies to the default response mode. An explicit
 `response_type:"raw"` MUST require a positive, approved profile `raw_max_bytes`
-(1..2147483648, at most 2 GiB), pinned by policy and user consent. The executor MUST parse bounded
+(1..10737418240, at most 10 GiB), pinned by policy and user consent. The executor MUST parse bounded
 CGI headers, refuse redirects, enforce the body limit without truncation, and
 return `response_type`, `content_type`, `size`, `sha256` and exactly one of
 base64 `body` (at most 32768 bytes decoded) or a package-private `staging` handle.
@@ -499,9 +499,16 @@ It MUST NOT raise frame limits. Staging MUST be App-owned 0600 under a private
 0700 package directory. The App MUST verify size/hash and unlink after reading.
 Header, execution, spool cleanup and error rules are specified in
 [the raw contract](../../../docs/webapi-raw.md).
-Raw calls have a 30-minute execution bound, narrowed by the parent deadline and
-any timed grant's remaining lifetime. They MUST stream with bounded memory,
-reserve staging capacity, and cancel/drain when the grant is revoked or the
+Raw calls allow 18 minutes per started GiB (at least 30 minutes, at most three
+hours), narrowed by the parent deadline and any timed grant's remaining lifetime.
+Optional raw-only `expected_size` asserts the exact pinned source size, bounded
+by the profile. It MUST match Content-Length if present and the final body size.
+Reserve staging from that size or validated Content-Length before body writes;
+only unknown sizes use the profile ceiling. Check available filesystem space
+and refuse insufficient capacity with `NO_SPACE`. Raw socket deadline
+hints may reach 10820000 ms; other operations retain their one-hour ceiling.
+They MUST stream with bounded memory, protect active output from orphan cleanup,
+and cancel/drain when the grant is revoked or the
 integration is disabled. JSON calls retain their 10-second bound.
 
 ### Destination permission observations

package/spec/protocol/v1/schema/webapi.call.json

@@ -12,6 +12,12 @@
       "enum": ["json", "raw"],
       "description": "Defaults to json. Raw requires an explicitly approved raw_max_bytes profile."
     },
+    "expected_size": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 10737418240,
+      "description": "Raw only: exact byte size of the pinned source version from metadata. Narrows staging reservation and execution budget; mismatch is refused."
+    },
     "delegation_id": {
       "type": "string",
       "pattern": "^[a-f0-9]{64}$"

package/spec/protocol/v1/timeouts.json

@@ -3,8 +3,8 @@
   "margin_s": 10,
   "executor": {
     "op_s": 30,
-    "webapi_raw_execution_s": 1800,
-    "webapi_raw_answer_s": 1810,
+    "webapi_raw_execution_s": 10800,
+    "webapi_raw_answer_s": 10810,
     "root_run_program_default_s": 20,
     "root_run_program_max_s": 120,
     "root_run_answer_s": 130,
@@ -12,7 +12,7 @@
   },
   "client": {
     "op_s": 40,
-    "webapi_raw_s": 1820,
+    "webapi_raw_s": 10820,
     "root_run_s": 140
   },
   "request": {