@astrale-os/sdk 0.6.0-beta.11 → 0.6.0-beta.12

package/README.md

@@ -289,7 +289,7 @@ const session = connect({
     // Return { credential, expiresAt } with expiresAt in Unix milliseconds.
     mint: (signal) => mintSourceCredential(signal),
   }),
-  exchange: {},
+  exchange: { mode: 'auto' },
 })
 
 await session.call({ target: '/:orders.example:class.Order:create', input }) // Domain callable
@@ -299,8 +299,10 @@ await session.graph.get('@order-id') // Kernel callable: the source credential
 - **Hold the source in a provider.** Domain credentials are cached per source credential, so a
   `resolve` that returns a new token on every call also exchanges on every call. The provider also
   lets the Session renew a source that is too close to expiry to feed a Domain credential.
-- **Lifetimes.** `exchange.ttlSeconds` (default 300) must exceed the provider's `ttlSeconds` plus a
-  5-second settlement skew. A Domain credential never outlives its source.
+- **Lifetimes.** In `exchange: { mode: 'auto', ttlSeconds }`, `ttlSeconds` (default 300) must exceed
+  the provider's `ttlSeconds` plus a 5-second settlement skew. A Domain credential never outlives its
+  source. `exchange: { mode: 'source' }` keeps the source credential for every Call and takes no
+  `ttlSeconds`; an empty `{}` or a bare `{ ttlSeconds }` is rejected.
 - **Reading as a Domain.** To call Kernel callables as a Domain, for example to read Shell-owned
   Classes, feed a second Session from an explicit exchange:
   `createSessionCredentialProvider({ ttlSeconds: 60, mint: (signal) => session.exchange(shellIssuer, { signal }) })`.

package/dist/execution/invocation/result/project.js

@@ -2,6 +2,10 @@ import { InvocationDefect } from './errors.js';
 import { validateOutput } from './validate.js';
 const MEDIA_TYPE = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u;
 const HEADER_NAME = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u;
+const BUFFERED_FIELDS = new Set(['body', 'mediaType', 'status', 'headers']);
+const STREAMING_FIELDS = new Set([...BUFFERED_FIELDS, 'length', 'delivery']);
+/** Largest delay a host timer accepts; the Server rejects a longer delivery budget. */
+const MAXIMUM_TIMER_MS = 2_147_483_647;
 export function project(callable, output) {
     switch (callable.output.mode) {
         case 'value':
@@ -72,7 +76,8 @@ function binary(input) {
     if (input === null || typeof input !== 'object' || Array.isArray(input))
         invalidBinary();
     const value = input;
-    if (Reflect.ownKeys(input).some((key) => key !== 'body' && key !== 'mediaType' && key !== 'status' && key !== 'headers') ||
+    const fields = isBytes(value.body) ? BUFFERED_FIELDS : STREAMING_FIELDS;
+    if (Reflect.ownKeys(input).some((key) => typeof key !== 'string' || !fields.has(key)) ||
         (!isBytes(value.body) && !isAsyncBytes(value.body)) ||
         typeof value.mediaType !== 'string' ||
         !MEDIA_TYPE.test(value.mediaType) ||
@@ -89,13 +94,48 @@ function binary(input) {
             ...(headers === undefined ? {} : { headers }),
         });
     }
+    const length = streamingLength(value.length);
+    const delivery = deliveryBudget(value.delivery);
     return Object.freeze({
         body: new InvocationByteStream(value.body),
         mediaType: value.mediaType,
+        // The declared length is the only count a Client verifies a streaming delivery against.
+        ...(length === undefined ? {} : { length }),
+        ...(delivery === undefined ? {} : { delivery }),
         ...(value.status === undefined ? {} : { status: value.status }),
         ...(headers === undefined ? {} : { headers }),
     });
 }
+function streamingLength(input) {
+    if (input === undefined)
+        return undefined;
+    if (typeof input !== 'number' || !Number.isSafeInteger(input) || input < 0)
+        invalidBinary();
+    return input;
+}
+function deliveryBudget(input) {
+    if (input === undefined)
+        return undefined;
+    if (input === null || typeof input !== 'object' || Array.isArray(input))
+        invalidBinary();
+    const value = input;
+    if (Reflect.ownKeys(input).some((key) => key !== 'maximumDurationMs' && key !== 'idleTimeoutMs') ||
+        !isTimerDuration(value.maximumDurationMs) ||
+        !isTimerDuration(value.idleTimeoutMs) ||
+        value.idleTimeoutMs > value.maximumDurationMs) {
+        invalidBinary();
+    }
+    return Object.freeze({
+        maximumDurationMs: value.maximumDurationMs,
+        idleTimeoutMs: value.idleTimeoutMs,
+    });
+}
+function isTimerDuration(input) {
+    return (typeof input === 'number' &&
+        Number.isSafeInteger(input) &&
+        input > 0 &&
+        input <= MAXIMUM_TIMER_MS);
+}
 class InvocationByteStream {
     source;
     consumed = false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/sdk",
-  "version": "0.6.0-beta.11",
+  "version": "0.6.0-beta.12",
   "description": "Schema-first SDK for defining, composing, and deploying Astrale domains",
   "keywords": [
     "astrale",