@synopackageland/sdk 0.9.0 → 0.9.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/sdk",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "Frontend SDK for DSM packages built with synopkgland: headless client and Vue components",
   "license": "MIT",
   "homepage": "https://github.com/synopackageland/syno-pkg-land-sdk/tree/main/ts#readme",
@@ -40,7 +40,7 @@
   },
   "peerDependencies": {
     "@lucide/vue": "^1.48.0",
-    "@synopackageland/ui": "^0.9.0",
+    "@synopackageland/ui": "^0.9.1",
     "vue": "^3.5.0"
   },
   "peerDependenciesMeta": {
@@ -53,7 +53,7 @@
   },
   "devDependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/ui": "0.9.0",
+    "@synopackageland/ui": "0.9.1",
     "@types/node": "24.19.2",
     "@vitejs/plugin-vue": "6.0.9",
     "jsdom": "27.4.0",

package/spec/protocol/v1/README.md

@@ -76,6 +76,17 @@ digest MUST change only when the executor source changes.
 - An until-revoked grant (`destination`, `lifetime: "until-revoked"`) covers
   only `files.moveFromStaging` into one directory. A new grant for the same
   user and destination MUST revoke the previous one (`destination-replaced`).
+  Creating it again for the same directory MUST return the active grant
+  unchanged, so a client retrying a create it timed out on keeps its saves.
+- Every operation under an until-revoked grant MUST revalidate the account,
+  Application Privileges, scope, directory identity and write permission
+  against DSM. A failure the user or an administrator can undo MUST fail only
+  that operation and MUST keep the grant: `PERMISSION_DENIED` (the ACL refuses
+  the write) and `not-found` (the granted folder is not at its path). Once the
+  cause is fixed, a new operation under the same grant succeeds. Any other
+  revalidation failure (`DELEGATION_DENIED`, `INELIGIBLE`, `APP_DENIED`,
+  `SCOPE_DENIED`, including a different folder at the granted path) MUST
+  revoke the grant; the user then chooses the destination again.
 - `files.taskStatus` and `files.taskCancel` follow the task's op and MUST NOT
   be granted directly.
 - An administrator MAY turn the integration off with `delegate.disable`; then

package/spec/protocol/v1/errors.json

@@ -378,14 +378,6 @@
       "en": "An administrator disabled the integration.",
       "zh-TW": "管理員停用了此整合。"
     },
-    {
-      "code": "grant-inactive",
-      "kind": "reason",
-      "retryable": false,
-      "httpStatus": 409,
-      "en": "The grant is inactive.",
-      "zh-TW": "授權目前無效。"
-    },
     {
       "code": "validation-denied",
       "kind": "reason",