@oddington/sdk 0.1.19 → 0.1.20

package/README.md

@@ -12,9 +12,16 @@ same key and content returns the original result; changed content conflicts.
 Existing Inbox-retained files remain separate from shared Files, with their
 original identities, bytes and audience. The SDK exposes no raw-credential API.
 
-Focused apps use `inbox.questions.list()` for `AnswerableQuestion[]`, with relevance
-bound by the trusted host to the canonical routines in the app declaration.
-The same list, answer and Record-search methods work in hosted and local apps.
+Hosted apps use `inbox.questions.list({ routines })` for `AnswerableQuestion[]`.
+Derive `routines` from the existing app declaration with
+`[...new Set(Object.values(appDeclaration.routines).map(binding => binding.routine))]`.
+These inner canonical names narrow relevance only; they grant no answer or
+Record-search authority. The ordinary authenticated Inbox context needs no app
+identity or declaration provisioning. The filter is required; `[]` returns no
+Questions after authentication. The SDK validates and privately snapshots the
+filter across pagination. Local apps use `inbox.questions.list()` instead, bound
+to their trusted host's declaration; any supplied filter is invalid locally.
+Both use the same answer and Record-search methods, without a filter or prior list.
 `InboxItem` remains the complete first-party Inbox value. Record refs are placement
 hints only: match them against independently authorized Data, and omit ambiguous
 detail placement. Keep drafts on failed or uncertain acceptance, prevent duplicate

package/dist/browser.js

@@ -475,7 +475,11 @@ var AppRoutineContractError = class extends Error {
     this.code = code;
   }
   code;
-}, propertyName = /^[a-z][A-Za-z0-9]*(?![\s\S])/, stepId = /^[a-z0-9]+(?:-[a-z0-9]+)*(?![\s\S])/, routineName = /^[a-z0-9][a-z0-9-]{0,62}(?![\s\S])/, owns = (value, key) => Object.hasOwn(value, key), invalidContract = () => {
+}, propertyName = /^[a-z][A-Za-z0-9]*(?![\s\S])/, stepId = /^[a-z0-9]+(?:-[a-z0-9]+)*(?![\s\S])/, routineName = /^[a-z0-9][a-z0-9-]{0,62}(?![\s\S])/;
+function isAppRoutineName(value) {
+  return typeof value == "string" && routineName.test(value);
+}
+var owns = (value, key) => Object.hasOwn(value, key), invalidContract = () => {
   throw new AppRoutineContractError("invalid_contract");
 }, invalidValue = () => {
   throw new AppRoutineContractError("invalid_value");
@@ -530,7 +534,7 @@ function parseAppRoutineContract(value) {
         return invalidContract();
     }
   }
-  if (!record(value) || !fields2(value, ["routine", "input", "steps"], ["result"]) || typeof value.routine != "string" || !routineName.test(value.routine) || !denseArray(value.steps) || value.steps.length < 1 || value.steps.length > 64) return invalidContract();
+  if (!record(value) || !fields2(value, ["routine", "input", "steps"], ["result"]) || !isAppRoutineName(value.routine) || !denseArray(value.steps) || value.steps.length < 1 || value.steps.length > 64) return invalidContract();
   let input = schema2(value.input), result2 = owns(value, "result") ? schema2(value.result) : void 0, ids = /* @__PURE__ */ new Set(), steps = value.steps.map((step) => !record(step) || !fields2(step, ["id"], ["summary"]) || typeof step.id != "string" || !stepId.test(step.id) || ids.has(step.id) ? invalidContract() : (ids.add(step.id), { id: step.id, ...owns(step, "summary") ? { summary: schema2(step.summary) } : {} }));
   return { routine: value.routine, input, steps, ...result2 === void 0 ? {} : { result: result2 } };
 }
@@ -1937,14 +1941,14 @@ function response(value) {
   let answer = object3(value);
   return assert(Object.keys(answer).every((key) => ["selection", "note"].includes(key))), typeof answer.selection == "string" ? assert(text3(answer.selection) && answer.selection === answer.selection.trim()) : recordReference(answer.selection), Object.hasOwn(answer, "note") && assert(text3(answer.note)), answer;
 }
-function parseInboxRequest(value) {
+function parseInboxRequest(value, questionListContext = "local") {
   try {
     let envelope = object3(value);
     assert(Object.keys(envelope).sort().join(",") === "input,operation"), assert(typeof envelope.operation == "string" && Object.hasOwn(operations, envelope.operation));
-    let operation2 = envelope.operation, input = object3(envelope.input), required = operations[operation2];
-    assert(required.every((key) => Object.hasOwn(input, key)) && Object.keys(input).every((key) => required.includes(key) || operation2 === "questions.searchRecords" && key === "selected" || (operation2 === "items.list" || operation2 === "questions.list") && key === "beforeNumber"));
+    let operation2 = envelope.operation, input = { ...object3(envelope.input) }, required = operations[operation2];
+    assert(required.every((key) => Object.hasOwn(input, key)) && Object.keys(input).every((key) => required.includes(key) || operation2 === "questions.searchRecords" && key === "selected" || (operation2 === "items.list" || operation2 === "questions.list") && key === "beforeNumber" || operation2 === "questions.list" && questionListContext === "hosted" && key === "routines")), operation2 === "questions.list" && questionListContext === "hosted" && (assert(Object.hasOwn(input, "routines")), assert(array2(input.routines).every(isAppRoutineName)));
     for (let key of ["itemId", "personId", "fileId"]) key in input && assert(id2(input[key]));
-    return "revision" in input && assert(integer(input.revision)), "beforeNumber" in input && assert(integer(input.beforeNumber)), "questionId" in input && assert(text3(input.questionId) && input.questionId === input.questionId.trim()), "title" in input && assert(text3(input.title)), "lifecycle" in input && assert(input.lifecycle === "open" || input.lifecycle === "closed"), "query" in input && assert(text3(input.query, !0) && input.query.length <= 256), "selected" in input && recordReference(input.selected), "response" in input && response(input.response), assert(new TextEncoder().encode(JSON.stringify(envelope)).byteLength <= INBOX_INPUT_BYTES), { operation: operation2, input };
+    return "revision" in input && assert(integer(input.revision)), "beforeNumber" in input && assert(integer(input.beforeNumber)), "questionId" in input && assert(text3(input.questionId) && input.questionId === input.questionId.trim()), "title" in input && assert(text3(input.title)), "lifecycle" in input && assert(input.lifecycle === "open" || input.lifecycle === "closed"), "query" in input && assert(text3(input.query, !0) && input.query.length <= 256), "selected" in input && recordReference(input.selected), "response" in input && response(input.response), assert(new TextEncoder().encode(JSON.stringify(envelope)).byteLength <= INBOX_INPUT_BYTES), "routines" in input && (input.routines = [...new Set(input.routines)]), { operation: operation2, input };
   } catch {
     throw new InboxOperationError(400, "invalid_input");
   }
@@ -2493,13 +2497,13 @@ function hostFailure(error, context2) {
   return !context2.isCurrent() || context2.expiresAt <= Date.now() || error instanceof InboxContextError && error.status === 401 ? stale() : error instanceof InboxContextError && error.status === 403 ? new InboxOperationError(403, "access_denied") : unavailable2();
 }
 async function send2(operation2, input) {
-  let envelope = parseInboxRequest({ operation: operation2, input }), context2;
+  let envelope = operation2 === "questions.list" ? void 0 : parseInboxRequest({ operation: operation2, input }), context2;
   try {
     context2 = await resolveAppContext();
   } catch {
     throw stale();
   }
-  if (context2.kind === "local") {
+  if (envelope ??= parseInboxRequest({ operation: operation2, input }, context2.kind === "local" ? "local" : "hosted"), context2.kind === "local") {
     if (!isAppQuestionOperation(operation2)) throw new InboxOperationError(403, "access_denied");
     let check2 = () => {
       if (!context2.isCurrent() || context2.signal.aborted || context2.expiresAt <= Date.now()) throw stale();
@@ -2636,13 +2640,17 @@ var inbox = {
     addRecipient: async (input) => await send2("items.addRecipient", input)
   },
   questions: {
-    async list() {
-      let questions = [], beforeNumber, initial;
+    async list(input) {
+      let supplied = input === void 0 ? void 0 : parseInboxRequest({ operation: "questions.list", input }, "hosted").input;
+      if (supplied && Object.hasOwn(supplied, "beforeNumber")) throw new InboxOperationError(400, "invalid_input");
+      let routines = supplied ? Object.freeze(supplied.routines) : void 0, questions = [], beforeNumber, initial;
       try {
         initial = await resolveAppContext();
       } catch {
         throw stale();
       }
+      if (initial.kind === "local" ? input !== void 0 : routines === void 0)
+        throw new InboxOperationError(400, "invalid_input");
       let host;
       try {
         host = initial.kind !== "local" && await resolveHostedInboxContext(initial);
@@ -2655,8 +2663,11 @@ var inbox = {
       };
       do {
         check();
-        let page = await send2("questions.list", beforeNumber === void 0 ? {} : { beforeNumber });
-        if (check(), page.questions.some((question2) => question2.item.href !== `https://${initial.workspace}.oddington.ai/inbox/${question2.item.id}`) || beforeNumber !== void 0 && (page.questions.some((question2) => question2.item.number >= beforeNumber) || page.nextBeforeNumber !== null && page.nextBeforeNumber >= beforeNumber)) throw unavailable2();
+        let page = await send2("questions.list", {
+          ...routines === void 0 ? {} : { routines },
+          ...beforeNumber === void 0 ? {} : { beforeNumber }
+        });
+        if (check(), page.questions.some((question2) => question2.item.href !== `https://${initial.workspace}.oddington.ai/inbox/${question2.item.id}` || routines !== void 0 && !routines.includes(question2.origin.routine)) || beforeNumber !== void 0 && (page.questions.some((question2) => question2.item.number >= beforeNumber) || page.nextBeforeNumber !== null && page.nextBeforeNumber >= beforeNumber)) throw unavailable2();
         if (questions.push(...page.questions), page.nextBeforeNumber === null) return questions;
         beforeNumber = page.nextBeforeNumber;
       } while (!0);