@oddington/sdk 0.1.21 → 0.1.22

package/dist/browser.js

@@ -391,44 +391,44 @@ var FileOperationError = class extends Error {
   retryable;
 }, FILE_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/, FILE_ORIGINAL_MAX_BYTES = 5 * 1024 ** 3;
 function parseFileDescriptor(value) {
-  let invalid6 = () => {
+  let invalid7 = () => {
     throw new FileOperationError("unavailable", 503, !0);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid6();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid7();
   let f = value;
-  if (Object.keys(f).sort().join(",") !== "details,enrichments,id,mediaType,name,path,sha256,size" || typeof f.id != "string" || !FILE_ID_PATTERN.test(f.id) || !safeFileName(f.name) || !safeFilePath(f.path) || !Number.isSafeInteger(f.size) || f.size < 0 || f.size > FILE_ORIGINAL_MAX_BYTES || typeof f.sha256 != "string" || !/^[0-9a-f]{64}$/.test(f.sha256) || !f.enrichments || typeof f.enrichments != "object" || Array.isArray(f.enrichments) || !f.details || typeof f.details != "object" || Array.isArray(f.details)) return invalid6();
+  if (Object.keys(f).sort().join(",") !== "details,enrichments,id,mediaType,name,path,sha256,size" || typeof f.id != "string" || !FILE_ID_PATTERN.test(f.id) || !safeFileName(f.name) || !safeFilePath(f.path) || !Number.isSafeInteger(f.size) || f.size < 0 || f.size > FILE_ORIGINAL_MAX_BYTES || typeof f.sha256 != "string" || !/^[0-9a-f]{64}$/.test(f.sha256) || !f.enrichments || typeof f.enrichments != "object" || Array.isArray(f.enrichments) || !f.details || typeof f.details != "object" || Array.isArray(f.details)) return invalid7();
   let d = f.details;
   if (d.kind === "other") {
-    if (Object.keys(d).length !== 1 || f.mediaType !== "application/octet-stream") return invalid6();
+    if (Object.keys(d).length !== 1 || f.mediaType !== "application/octet-stream") return invalid7();
   } else if (d.kind === "csv") {
-    if (Object.keys(d).sort().join(",") !== "dataRows,delimiter,encoding,headerRow,kind" || f.mediaType !== "text/csv" || !["utf-8", "windows-1252"].includes(d.encoding) || ![",", ";", "	"].includes(d.delimiter) || !Number.isSafeInteger(d.headerRow) || d.headerRow < 1 || !Number.isSafeInteger(d.dataRows) || d.dataRows < 0) return invalid6();
+    if (Object.keys(d).sort().join(",") !== "dataRows,delimiter,encoding,headerRow,kind" || f.mediaType !== "text/csv" || !["utf-8", "windows-1252"].includes(d.encoding) || ![",", ";", "	"].includes(d.delimiter) || !Number.isSafeInteger(d.headerRow) || d.headerRow < 1 || !Number.isSafeInteger(d.dataRows) || d.dataRows < 0) return invalid7();
   } else if (d.kind === "pdf") {
-    if (f.mediaType !== "application/pdf" || Object.keys(d).some((key) => !["kind", "pages"].includes(key)) || "pages" in d && (!Number.isSafeInteger(d.pages) || d.pages < 1)) return invalid6();
-  } else return invalid6();
+    if (f.mediaType !== "application/pdf" || Object.keys(d).some((key) => !["kind", "pages"].includes(key)) || "pages" in d && (!Number.isSafeInteger(d.pages) || d.pages < 1)) return invalid7();
+  } else return invalid7();
   for (let [name, descriptor] of Object.entries(f.enrichments)) {
-    if (!safeEnrichmentName(name)) return invalid6();
+    if (!safeEnrichmentName(name)) return invalid7();
     parseEnrichmentDescriptor(descriptor);
   }
-  return new TextEncoder().encode(JSON.stringify(f)).byteLength > 16 * 1024 ? invalid6() : f;
+  return new TextEncoder().encode(JSON.stringify(f)).byteLength > 16 * 1024 ? invalid7() : f;
 }
 function parseEnrichmentDescriptor(value) {
-  let invalid6 = () => {
+  let invalid7 = () => {
     throw new FileOperationError("unavailable", 503, !0);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid6();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid7();
   let d = value;
-  return Object.keys(d).sort().join(",") !== "mediaType,sha256,size" || !["application/octet-stream", "text/plain", "text/markdown", "application/json"].includes(d.mediaType) || !Number.isSafeInteger(d.size) || d.size < 0 || d.size > 16 * 1024 * 1024 || typeof d.sha256 != "string" || !/^[0-9a-f]{64}$/.test(d.sha256) ? invalid6() : d;
+  return Object.keys(d).sort().join(",") !== "mediaType,sha256,size" || !["application/octet-stream", "text/plain", "text/markdown", "application/json"].includes(d.mediaType) || !Number.isSafeInteger(d.size) || d.size < 0 || d.size > 16 * 1024 * 1024 || typeof d.sha256 != "string" || !/^[0-9a-f]{64}$/.test(d.sha256) ? invalid7() : d;
 }
 function safeEnrichmentName(value) {
   return safeFileName(value) && !/^original(?:\.|$)/i.test(value);
 }
 function parseFileEnrichMetadata(value, maxBytes) {
-  let invalid6 = () => {
+  let invalid7 = () => {
     throw new FileOperationError("invalid_input", 400);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid6();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid7();
   let d = value;
-  if (Object.keys(d).some((key) => !["name", "size", "mediaType", "replace"].includes(key)) || !safeEnrichmentName(d.name) || !Number.isSafeInteger(d.size) || d.size < 0 || d.mediaType !== void 0 && (typeof d.mediaType != "string" || d.mediaType.length > 255 || /[\u0000-\u001f\u007f]/.test(d.mediaType)) || d.replace !== void 0 && (typeof d.replace != "string" || !/^[0-9a-f]{64}$/.test(d.replace))) return invalid6();
+  if (Object.keys(d).some((key) => !["name", "size", "mediaType", "replace"].includes(key)) || !safeEnrichmentName(d.name) || !Number.isSafeInteger(d.size) || d.size < 0 || d.mediaType !== void 0 && (typeof d.mediaType != "string" || d.mediaType.length > 255 || /[\u0000-\u001f\u007f]/.test(d.mediaType)) || d.replace !== void 0 && (typeof d.replace != "string" || !/^[0-9a-f]{64}$/.test(d.replace))) return invalid7();
   if (d.size > maxBytes) throw new FileOperationError("request_too_large", 413);
   return d;
 }
@@ -439,23 +439,23 @@ function safeFilePath(value) {
   return typeof value == "string" && value.length <= 1024 && value.split("/").every(safeFileName);
 }
 function parseFileCreateMetadata(value, maxBytes) {
-  let invalid6 = () => {
+  let invalid7 = () => {
     throw new FileOperationError("invalid_input", 400);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid6();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid7();
   let input = value;
-  if (Object.keys(input).some((key) => !["name", "path", "storage", "csv", "inputMediaType", "size", "requestKey"].includes(key))) return invalid6();
+  if (Object.keys(input).some((key) => !["name", "path", "storage", "csv", "inputMediaType", "size", "requestKey"].includes(key))) return invalid7();
   let path = input.path === void 0 ? "Files" : input.path;
-  if (!safeFileName(input.name) || !safeFilePath(path) || path.split("/")[0].toLowerCase() === ".os" || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || input.inputMediaType !== void 0 && input.inputMediaType !== "application/pdf" || !Number.isSafeInteger(input.size) || input.size < 0) return invalid6();
+  if (!safeFileName(input.name) || !safeFilePath(path) || path.split("/")[0].toLowerCase() === ".os" || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || input.inputMediaType !== void 0 && input.inputMediaType !== "application/pdf" || !Number.isSafeInteger(input.size) || input.size < 0) return invalid7();
   if (input.size > maxBytes) throw new FileOperationError("request_too_large", 413);
-  if (typeof input.requestKey != "string" || input.requestKey.length < 1 || input.requestKey.length > 256 || input.requestKey !== input.requestKey.trim() || /[\u0000-\u001f\u007f]/.test(input.requestKey)) return invalid6();
+  if (typeof input.requestKey != "string" || input.requestKey.length < 1 || input.requestKey.length > 256 || input.requestKey !== input.requestKey.trim() || /[\u0000-\u001f\u007f]/.test(input.requestKey)) return invalid7();
   let csv;
   if (input.csv !== void 0) {
-    if (!input.csv || typeof input.csv != "object" || Array.isArray(input.csv)) return invalid6();
+    if (!input.csv || typeof input.csv != "object" || Array.isArray(input.csv)) return invalid7();
     let hints = input.csv;
-    if (Object.keys(hints).some((key) => !["encoding", "delimiter", "headerRow"].includes(key))) return invalid6();
+    if (Object.keys(hints).some((key) => !["encoding", "delimiter", "headerRow"].includes(key))) return invalid7();
     let encoding = hints.encoding === void 0 ? "utf-8" : hints.encoding, delimiter = hints.delimiter === void 0 ? "," : hints.delimiter, headerRow = hints.headerRow === void 0 ? 1 : hints.headerRow;
-    if (encoding !== "utf-8" && encoding !== "windows-1252" || ![",", ";", "	"].includes(delimiter) || !Number.isSafeInteger(headerRow) || headerRow < 1 || headerRow > 1e5) return invalid6();
+    if (encoding !== "utf-8" && encoding !== "windows-1252" || ![",", ";", "	"].includes(delimiter) || !Number.isSafeInteger(headerRow) || headerRow < 1 || headerRow > 1e5) return invalid7();
     csv = { encoding, delimiter, headerRow };
   }
   return {
@@ -572,10 +572,10 @@ function validateRoutineSchemaValue(schema2, value) {
   }
 }
 
-var ROUTINE_DECLARATION_SCHEMA = "https://schemas.oddington.ai/routine/v1.json";
+var ROUTINE_DECLARATION_SCHEMA = "https://schemas.oddington.ai/routine/v1.json", ROUTINE_SOURCE_LIMITS = { files: 2e4, bytes: 256 * 1024 * 1024, declarationBytes: 64 * 1024 };
 var invalid = (field) => {
   throw new Error(`Invalid routine declaration: ${field}`);
-}, object2 = (value, fields6, field) => ((!value || typeof value != "object" || Array.isArray(value) || Object.keys(value).some((key) => !fields6.includes(key))) && invalid(field), value), routineAlias = (value) => typeof value == "string" && /^[a-z][a-z0-9-]{0,62}$/.test(value), list = (value, field, allowed) => value === void 0 ? [] : ((!Array.isArray(value) || value.length > 64 || value.some((item) => !routineAlias(item) || allowed && !allowed.includes(item)) || new Set(value).size !== value.length) && invalid(field), [...value].sort());
+}, object2 = (value, fields5, field) => ((!value || typeof value != "object" || Array.isArray(value) || Object.keys(value).some((key) => !fields5.includes(key))) && invalid(field), value), routineAlias = (value) => typeof value == "string" && /^[a-z][a-z0-9-]{0,62}$/.test(value), list = (value, field, allowed, qualified = !1) => value === void 0 ? [] : ((!Array.isArray(value) || value.length > 64 || value.some((item) => !(routineAlias(item) || qualified && typeof item == "string" && item.split("/").length === 2 && item.split("/").every(routineAlias)) || allowed && !allowed.includes(item)) || new Set(value).size !== value.length) && invalid(field), [...value].sort());
 function routineAssetPattern(value) {
   return typeof value == "string" && value.length <= 512 && !value.startsWith("/") && !value.includes("\\") && !value.includes(":") && value.split("/").every((part) => !!part && part !== "." && part !== ".." && /^[a-zA-Z0-9_.*-]+$/.test(part));
 }
@@ -599,7 +599,7 @@ function parseRoutineDeclaration(value) {
     $schema: ROUTINE_DECLARATION_SCHEMA,
     access: {
       repositories: grants,
-      connections: list(access.connections, "access.connections"),
+      connections: list(access.connections, "access.connections", void 0, !0),
       models: list(access.models, "access.models"),
       ...access.files === void 0 ? {} : { files: access.files },
       publish: list(access.publish, "access.publish", ["asks", "digests"])
@@ -614,19 +614,19 @@ function parseRoutineDeclaration(value) {
   };
 }
 
-var LIMIT = 256 * 1024, invalid2 = () => {
+var invalid2 = () => {
   throw new AppRoutineContractError("invalid_value");
 }, invalidContract2 = () => {
   throw new AppRoutineContractError("invalid_contract");
-}, empty = { type: "object", properties: {}, required: [], additionalProperties: !1 };
-function freeze(value) {
+}, routineTitle = (value) => typeof value == "string" && value.trim().length > 0 && value.length <= 256;
+function freezeRoutineMetadata(value) {
   if (value !== null && typeof value == "object") {
-    for (let child of Object.values(value)) freeze(child);
+    for (let child of Object.values(value)) freezeRoutineMetadata(child);
     Object.freeze(value);
   }
   return value;
 }
-function json(value, ancestors = /* @__PURE__ */ new Set()) {
+function assertRoutineJson(value, ancestors = /* @__PURE__ */ new Set()) {
   if (value === null || typeof value == "string" || typeof value == "boolean" || typeof value == "number" && Number.isFinite(value)) return;
   if (!value || typeof value != "object" || ancestors.has(value)) return invalid2();
   let array3 = Array.isArray(value);
@@ -639,14 +639,34 @@ function json(value, ancestors = /* @__PURE__ */ new Set()) {
     if (typeof key != "string") return invalid2();
     let descriptor = Object.getOwnPropertyDescriptor(value, key);
     if (!descriptor.enumerable || !Object.hasOwn(descriptor, "value")) return invalid2();
-    json(descriptor.value, ancestors);
+    assertRoutineJson(descriptor.value, ancestors);
   }
   ancestors.delete(value);
 }
+function assertRoutineFields(value, allowed) {
+  if (!value || typeof value != "object" || Object.getPrototypeOf(value) !== Object.prototype || Reflect.ownKeys(value).some((key) => typeof key != "string" || allowed && !allowed.includes(key) || !Object.getOwnPropertyDescriptor(value, key).enumerable || !Object.hasOwn(Object.getOwnPropertyDescriptor(value, key), "value"))) return invalidContract2();
+}
+function parseRoutineAccess(value) {
+  try {
+    value !== void 0 && assertRoutineJson(value), assertRoutineFields(value ?? {}, ["repositories", "connections", "models", "files", "publish"]);
+    let access = value, names = access?.connections ?? [];
+    if (!Array.isArray(names) || names.length > 64 || new Set(names).size !== names.length || names.some((name) => typeof name != "string" || name.split("/").length !== 2 || name.split("/").some((part) => !isAppRoutineName(part)))) return invalidContract2();
+    let parsed = parseRoutineDeclaration({ $schema: ROUTINE_DECLARATION_SCHEMA, access: { ...access, connections: [] } }).access;
+    return freezeRoutineMetadata({ ...parsed, connections: [...names] });
+  } catch {
+    return invalidContract2();
+  }
+}
+
+var LIMIT = 256 * 1024, invalid3 = () => {
+  throw new AppRoutineContractError("invalid_value");
+}, invalidContract3 = () => {
+  throw new AppRoutineContractError("invalid_contract");
+}, empty = { type: "object", properties: {}, required: [], additionalProperties: !1 };
 function captureJson(value) {
-  json(value);
+  assertRoutineJson(value);
   let encoded = JSON.stringify(value);
-  return new TextEncoder().encode(encoded).byteLength > LIMIT ? invalid2() : freeze(JSON.parse(encoded));
+  return new TextEncoder().encode(encoded).byteLength > LIMIT ? invalid3() : freezeRoutineMetadata(JSON.parse(encoded));
 }
 function capture(schema2, value) {
   let captured = captureJson(value);
@@ -655,26 +675,26 @@ function capture(schema2, value) {
 var schemas = /* @__PURE__ */ new WeakMap();
 function nestedSchema(value) {
   let metadata = schemaMetadata(value);
-  return Object.hasOwn(metadata, "default") ? invalidContract2() : metadata.schema;
+  return Object.hasOwn(metadata, "default") ? invalidContract3() : metadata.schema;
 }
 function schemaMetadata(value) {
-  if (!value || typeof value != "object") return invalidContract2();
+  if (!value || typeof value != "object") return invalidContract3();
   let registered = schemas.get(value);
   if (registered) return registered;
   try {
-    json(value);
+    assertRoutineJson(value);
   } catch {
-    return invalidContract2();
+    return invalidContract3();
   }
   return { schema: parseAppRoutineContract({ routine: "definition", input: value, steps: [{ id: "inspect" }] }).input };
 }
 function declaration(value, defaults) {
   try {
-    json(value);
+    assertRoutineJson(value);
   } catch {
-    return invalidContract2();
+    return invalidContract3();
   }
-  let parsed = freeze(parseAppRoutineContract({ routine: "definition", input: value, steps: [{ id: "inspect" }] }).input), captured = defaults ? capture(parsed, defaults.value) : void 0, builder = Object.defineProperty({ ...parsed }, "default", { value: (value2) => declaration(parsed, { value: value2 }) });
+  let parsed = freezeRoutineMetadata(parseAppRoutineContract({ routine: "definition", input: value, steps: [{ id: "inspect" }] }).input), captured = defaults ? capture(parsed, defaults.value) : void 0, builder = Object.defineProperty({ ...parsed }, "default", { value: (value2) => declaration(parsed, { value: value2 }) });
   return schemas.set(builder, { schema: parsed, ...defaults ? { default: captured } : {} }), Object.freeze(builder);
 }
 var schema = {
@@ -696,27 +716,11 @@ var schema = {
   boolean() {
     return declaration({ type: "boolean" });
   }
-}, file = () => declaration({ type: "file" }), definitions = /* @__PURE__ */ new WeakMap();
-function fields3(value, allowed) {
-  if (!value || typeof value != "object" || Object.getPrototypeOf(value) !== Object.prototype || Reflect.ownKeys(value).some((key) => typeof key != "string" || allowed && !allowed.includes(key) || !Object.getOwnPropertyDescriptor(value, key).enumerable || !Object.hasOwn(Object.getOwnPropertyDescriptor(value, key), "value"))) return invalidContract2();
-}
-var title = (value) => typeof value == "string" && value.trim().length > 0 && value.length <= 256;
-function accessMetadata(value) {
-  try {
-    value !== void 0 && json(value), fields3(value ?? {}, ["repositories", "connections", "models", "files", "publish"]);
-    let access = value, names = access?.connections ?? [];
-    if (!Array.isArray(names) || names.length > 64 || new Set(names).size !== names.length || names.some((name) => typeof name != "string" || name.split("/").length !== 2 || name.split("/").some((part) => !isAppRoutineName(part)))) return invalidContract2();
-    let parsed = parseRoutineDeclaration({ $schema: ROUTINE_DECLARATION_SCHEMA, access: { ...access, connections: [] } }).access;
-    return freeze({ ...parsed, connections: [...names] });
-  } catch {
-    return invalidContract2();
-  }
-}
-var defineRoutine = (definition) => {
-  if (fields3(definition, ["id", "title", "input", "steps", "result", "access", "responses", "run"]), !isAppRoutineName(definition.id) || definition.title !== void 0 && !title(definition.title) || typeof definition.run != "function") return invalidContract2();
-  let input = definition.input === void 0 ? { schema: empty, default: {} } : schemaMetadata(definition.input), result2 = definition.result === void 0 ? void 0 : schemaMetadata(definition.result).schema, access = accessMetadata(definition.access);
-  fields3(definition.steps ?? {});
-  let executable = Object.fromEntries(Object.entries(definition.steps ?? {}).map(([id3, step]) => (fields3(step, ["title", "run"]), !title(step.title) || typeof step.run != "function" ? invalidContract2() : [id3, Object.freeze({ title: step.title, run: step.run })]))), steps = Object.entries(executable).map(([id3, step]) => ({ id: id3, title: step.title }));
+}, file = () => declaration({ type: "file" }), definitions = /* @__PURE__ */ new WeakMap(), defineRoutine = (definition) => {
+  if (assertRoutineFields(definition, ["id", "title", "input", "steps", "result", "access", "responses", "run"]), !isAppRoutineName(definition.id) || definition.title !== void 0 && !routineTitle(definition.title) || typeof definition.run != "function") return invalidContract3();
+  let input = definition.input === void 0 ? { schema: empty, default: {} } : schemaMetadata(definition.input), result2 = definition.result === void 0 ? void 0 : schemaMetadata(definition.result).schema, access = parseRoutineAccess(definition.access);
+  assertRoutineFields(definition.steps ?? {});
+  let executable = Object.fromEntries(Object.entries(definition.steps ?? {}).map(([id3, step]) => (assertRoutineFields(step, ["title", "run"]), !routineTitle(step.title) || typeof step.run != "function" ? invalidContract3() : [id3, Object.freeze({ title: step.title, run: step.run })]))), steps = Object.entries(executable).map(([id3, step]) => ({ id: id3, title: step.title }));
   parseAppRoutineContract({
     routine: definition.id,
     input: input.schema,
@@ -725,26 +729,26 @@ var defineRoutine = (definition) => {
   });
   let responses = [], ids = /* @__PURE__ */ new Set();
   if (definition.responses !== void 0) {
-    if (!Array.isArray(definition.responses) || definition.responses.length > 64 || Reflect.ownKeys(definition.responses).length !== definition.responses.length + 1) return invalidContract2();
+    if (!Array.isArray(definition.responses) || definition.responses.length > 64 || Reflect.ownKeys(definition.responses).length !== definition.responses.length + 1) return invalidContract3();
     for (let index = 0; index < definition.responses.length; index++) {
       let descriptor = Object.getOwnPropertyDescriptor(definition.responses, String(index));
-      if (!descriptor || !Object.hasOwn(descriptor, "value")) return invalidContract2();
+      if (!descriptor || !Object.hasOwn(descriptor, "value")) return invalidContract3();
       let response2 = descriptor.value;
-      if (fields3(response2, ["id", "results", "run"]), !isAppRoutineName(response2.id) || ids.has(response2.id)) return invalidContract2();
+      if (assertRoutineFields(response2, ["id", "results", "run"]), !isAppRoutineName(response2.id) || ids.has(response2.id)) return invalidContract3();
       if (ids.add(response2.id), response2.results !== void 0)
         try {
-          json(response2.results);
+          assertRoutineJson(response2.results);
         } catch {
-          return invalidContract2();
+          return invalidContract3();
         }
       try {
         responses.push(defineHandler(response2));
       } catch {
-        return invalidContract2();
+        return invalidContract3();
       }
     }
   }
-  let contract = freeze({
+  let contract = freezeRoutineMetadata({
     id: definition.id,
     ...definition.title === void 0 ? {} : { title: definition.title },
     input: input.schema,
@@ -769,9 +773,9 @@ var defineRoutine = (definition) => {
   return definitions.set(captured, { contract, steps: executable, run: definition.run }), captured;
 };
 function inspectRoutineDefinition(definition) {
-  if (!definition || typeof definition != "object") return invalidContract2();
+  if (!definition || typeof definition != "object") return invalidContract3();
   let registered = definitions.get(definition);
-  return registered ? registered.contract : invalidContract2();
+  return registered ? registered.contract : invalidContract3();
 }
 function captureRoutineInput(definition, input) {
   let contract = inspectRoutineDefinition(definition);
@@ -787,29 +791,29 @@ async function executeRoutineDefinition(definition, input, runtime) {
     get(_target, key) {
       return guarded(Reflect.get(value, key, value), value);
     }
-  }) : value, qualify = (value) => value.questions === void 0 ? value : { ...value, questions: value.questions.map((question2) => question2.handler ? contract.responses.some((handler) => handler.id === question2.handler.id) ? { ...question2, handler: { ...question2.handler, id: `${contract.id}/${question2.handler.id}` } } : invalid2() : question2) }, os2 = Object.freeze({
+  }) : value, qualify = (value) => value.questions === void 0 ? value : { ...value, questions: value.questions.map((question2) => question2.handler ? contract.responses.some((handler) => handler.id === question2.handler.id) ? { ...question2, handler: { ...question2.handler, id: `${contract.id}/${question2.handler.id}` } } : invalid3() : question2) }, os2 = Object.freeze({
     ...guarded({
       ...runtime,
-      run: freeze({ ...runtime.run }),
+      run: freezeRoutineMetadata({ ...runtime.run }),
       inbox: { ...runtime.inbox, publishAsk: (value, options) => runtime.inbox.publishAsk(qualify(value), options) }
     }),
     step(id3, ...input2) {
       let saved;
       try {
-        if (!active2 || !accepting || broken || !Object.hasOwn(steps, id3) || called.has(id3) || input2.length > 1) return invalid2();
+        if (!active2 || !accepting || broken || !Object.hasOwn(steps, id3) || called.has(id3) || input2.length > 1) return invalid3();
         input2.length && (saved = captureJson(input2[0])), called.add(id3);
       } catch (error) {
         return broken = !0, Promise.reject(error);
       }
       let next = work.then(async () => {
-        if (broken) return invalid2();
+        if (broken) return invalid3();
         reached.add(id3);
         try {
           await runtime.step(id3, { status: "running" });
           let output = await steps[id3].run(saved, os2);
-          if (fields3(output, ["summary", "data"]), !Object.hasOwn(output, "summary") || !Object.hasOwn(output, "data")) return invalid2();
+          if (assertRoutineFields(output, ["summary", "data"]), !Object.hasOwn(output, "summary") || !Object.hasOwn(output, "data")) return invalid3();
           let summary2 = captureJson(output.summary), data3 = captureJson(output.data);
-          return await runtime.step(id3, { status: "completed", summary: summary2, data: data3 }), freeze({ summary: summary2, data: data3 });
+          return await runtime.step(id3, { status: "completed", summary: summary2, data: data3 }), freezeRoutineMetadata({ summary: summary2, data: data3 });
         } catch (error) {
           throw broken = !0, await runtime.step(id3, { status: "failed" }), error;
         }
@@ -829,7 +833,7 @@ async function executeRoutineDefinition(definition, input, runtime) {
   for (let step of contract.steps) reached.has(step.id) || await runtime.step(step.id, { status: "skipped" });
   if (broken) throw failure ?? new AppRoutineContractError("invalid_value");
   if (contract.result !== void 0) return capture(contract.result, result2);
-  if (result2 !== void 0) return invalid2();
+  if (result2 !== void 0) return invalid3();
 }
 
 var DataOperationError = class extends Error {
@@ -847,26 +851,26 @@ var DataOperationError = class extends Error {
   component;
 };
 
-var invalid3 = () => {
+var invalid4 = () => {
   throw new DataOperationError("invalid_query");
 }, historyText = (value) => typeof value == "string" && !/[\u0000\uD800-\uDFFF]/u.test(value);
 function historyVersion(value) {
   return historyText(value) && value.length > 0 && new TextEncoder().encode(value).length <= 1024 && !/[\u0000-\u001f\u007f-\u009f]/.test(value) && !/^[0-9a-f]{40}$/i.test(value);
 }
 function historyProperties(value) {
-  if (!value || typeof value != "object" || Array.isArray(value) || ![Object.prototype, null].includes(Object.getPrototypeOf(value))) return invalid3();
+  if (!value || typeof value != "object" || Array.isArray(value) || ![Object.prototype, null].includes(Object.getPrototypeOf(value))) return invalid4();
   let descriptors = Object.getOwnPropertyDescriptors(value);
-  return Reflect.ownKeys(value).some((key) => typeof key != "string" || !descriptors[key]?.enumerable || !Object.hasOwn(descriptors[key], "value")) ? invalid3() : descriptors;
+  return Reflect.ownKeys(value).some((key) => typeof key != "string" || !descriptors[key]?.enumerable || !Object.hasOwn(descriptors[key], "value")) ? invalid4() : descriptors;
 }
 var historyCollection = (value) => typeof value == "string" && value.length <= 512 && /^[_a-zA-Z0-9][a-zA-Z0-9_-]*$/.test(value), historyCursor = (value) => typeof value == "string" && value.length <= 128 * 1024 && /^history-cursor-v1\.[A-Za-z0-9_-]{1,64}\.[A-Za-z0-9_-]{16}\.[A-Za-z0-9_-]+$/.test(value);
 function historyArray(value) {
-  if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype) return invalid3();
+  if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype) return invalid4();
   let descriptors = Object.getOwnPropertyDescriptors(value);
-  if (Reflect.ownKeys(value).length !== value.length + 1) return invalid3();
+  if (Reflect.ownKeys(value).length !== value.length + 1) return invalid4();
   let result2 = [];
   for (let i = 0; i < value.length; i++) {
     let descriptor = descriptors[i];
-    if (!descriptor?.enumerable || !Object.hasOwn(descriptor, "value")) return invalid3();
+    if (!descriptor?.enumerable || !Object.hasOwn(descriptor, "value")) return invalid4();
     result2.push(descriptor.value);
   }
   return result2;
@@ -874,19 +878,19 @@ function historyArray(value) {
 function captureOptions(value, changes) {
   if (value === void 0) return {};
   let descriptors = historyProperties(value), result2 = {}, allowed = changes ? ["collections", "refs", "from", "through", "limit", "after"] : ["limit", "before"];
-  if (Object.keys(descriptors).some((key) => !allowed.includes(key))) return invalid3();
+  if (Object.keys(descriptors).some((key) => !allowed.includes(key))) return invalid4();
   for (let key of allowed) {
     if (!Object.hasOwn(descriptors, key)) continue;
     let scalar = descriptors[key].value;
     if (key === "collections" || key === "refs") {
       let values = historyArray(scalar);
-      if (!values.length || values.length > (key === "collections" ? 16 : 100) || !values.every(key === "collections" ? historyCollection : validRecordRef) || new Set(values).size !== values.length) return invalid3();
+      if (!values.length || values.length > (key === "collections" ? 16 : 100) || !values.every(key === "collections" ? historyCollection : validRecordRef) || new Set(values).size !== values.length) return invalid4();
       result2[key] = values;
     } else if (key === "limit") {
-      if (!Number.isInteger(scalar) || scalar < 1 || scalar > (changes ? 500 : 100)) return invalid3();
+      if (!Number.isInteger(scalar) || scalar < 1 || scalar > (changes ? 500 : 100)) return invalid4();
       result2.limit = scalar;
     } else {
-      if (!(key === "after" ? historyCursor(scalar) : historyVersion(scalar))) return invalid3();
+      if (!(key === "after" ? historyCursor(scalar) : historyVersion(scalar))) return invalid4();
       result2[key] = scalar;
     }
   }
@@ -894,39 +898,39 @@ function captureOptions(value, changes) {
 }
 var captureHistoryListOptions = (value) => captureOptions(value, !1), captureHistoryChangesOptions = (value) => captureOptions(value, !0);
 function captureHistoryInstant(value) {
-  if (!historyText(value) || value.length > 1024) return invalid3();
+  if (!historyText(value) || value.length > 1024) return invalid4();
   let match = /^(\d{4})-(\d{2})-(\d{2})[Tt](\d{2}):(\d{2}):(\d{2})(?:\.\d+)?([Zz]|([+-])(\d{2}):(\d{2}))$/.exec(value);
-  if (!match) return invalid3();
+  if (!match) return invalid4();
   let [year, month, day, hour, minute, second] = match.slice(1, 7).map(Number), days = new Date(Date.UTC(year, month, 0));
-  return days.setUTCFullYear(year), year < 1 || month < 1 || month > 12 || day < 1 || day > days.getUTCDate() || hour > 23 || minute > 59 || second > 59 || Number(match[9] ?? 0) > 23 || Number(match[10] ?? 0) > 59 ? invalid3() : value;
+  return days.setUTCFullYear(year), year < 1 || month < 1 || month > 12 || day < 1 || day > days.getUTCDate() || hour > 23 || minute > 59 || second > 59 || Number(match[9] ?? 0) > 23 || Number(match[10] ?? 0) > 59 ? invalid4() : value;
 }
 
-var invalid4 = () => {
+var invalid5 = () => {
   throw new DataOperationError("invalid_query");
 };
 function captureRecordsSearchInput(query, options) {
-  if (!historyText(query)) return invalid4();
+  if (!historyText(query)) return invalid5();
   let length = [...query.trim()].length;
-  if (length < 1 || length > 256) return invalid4();
+  if (length < 1 || length > 256) return invalid5();
   if (options === void 0) return { query };
   let descriptors = historyProperties(options);
-  if (Object.keys(descriptors).some((key) => !["collections", "limit"].includes(key))) return invalid4();
+  if (Object.keys(descriptors).some((key) => !["collections", "limit"].includes(key))) return invalid5();
   let captured = {};
   if (Object.hasOwn(descriptors, "collections")) {
     let supplied = descriptors.collections.value;
-    if (!Array.isArray(supplied) || supplied.length < 1 || supplied.length > 16 || Reflect.ownKeys(supplied).length !== supplied.length + 1) return invalid4();
+    if (!Array.isArray(supplied) || supplied.length < 1 || supplied.length > 16 || Reflect.ownKeys(supplied).length !== supplied.length + 1) return invalid5();
     let collections = [];
     for (let index = 0; index < supplied.length; index++) {
       let descriptor = Object.getOwnPropertyDescriptor(supplied, String(index));
-      if (!descriptor?.enumerable || !Object.hasOwn(descriptor, "value") || !historyText(descriptor.value)) return invalid4();
+      if (!descriptor?.enumerable || !Object.hasOwn(descriptor, "value") || !historyText(descriptor.value)) return invalid5();
       collections.push(descriptor.value);
     }
-    if (new Set(collections).size !== collections.length) return invalid4();
+    if (new Set(collections).size !== collections.length) return invalid5();
     captured.collections = collections;
   }
   if (Object.hasOwn(descriptors, "limit")) {
     let supplied = descriptors.limit.value;
-    if (!Number.isInteger(supplied) || supplied < 1 || supplied > 100) return invalid4();
+    if (!Number.isInteger(supplied) || supplied < 1 || supplied > 100) return invalid5();
     captured.limit = supplied;
   }
   return { query, options: captured };
@@ -957,8 +961,8 @@ function captureDataDelete(record3) {
   return !validRecordRef(identity.$ref) || typeof identity.$version != "string" || !identity.$version.length || identity.$version.length > 512 ? invalidChange() : { ref: identity.$ref, expectedVersion: identity.$version };
 }
 function captureDataUpdate(record3, set) {
-  let identity = captureDataDelete(record3), fields6 = mapping(set);
-  return !Object.keys(fields6).length || Object.keys(fields6).some((key) => key.startsWith("$") || ["id", "type"].includes(key)) ? invalidChange() : { ...identity, set: captureValue(fields6) };
+  let identity = captureDataDelete(record3), fields5 = mapping(set);
+  return !Object.keys(fields5).length || Object.keys(fields5).some((key) => key.startsWith("$") || ["id", "type"].includes(key)) ? invalidChange() : { ...identity, set: captureValue(fields5) };
 }
 function captureIdentities(value, update, allowEmpty = !0) {
   if (!Array.isArray(value) || !allowEmpty && !value.length || value.length > 1e4) return invalidChange();
@@ -977,14 +981,14 @@ function captureDataCreate(value) {
   let row = mapping(value);
   if (!validRecordRef(row.$ref) || Object.keys(row).some((key) => key.startsWith("$") && !["$ref", "$filing"].includes(key)))
     return invalidChange();
-  let { $ref: ref, $filing, ...fields6 } = row, filing;
+  let { $ref: ref, $filing, ...fields5 } = row, filing;
   if ($filing !== void 0) {
     let components = mapping($filing);
     if (Object.entries(components).some(([name, value2]) => !/^[a-zA-Z][a-zA-Z0-9_-]*$/.test(name) || ["constructor", "prototype"].includes(name) || typeof value2 != "string" || !/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/.test(value2)))
       return invalidChange();
     filing = { ...components };
   }
-  return { ref, fields: captureValue(fields6), ...filing ? { filing } : {} };
+  return { ref, fields: captureValue(fields5), ...filing ? { filing } : {} };
 }
 function captureDataChanges(updatesValue, createsValue = [], deletesValue = []) {
   let updates = captureDataUpdates(updatesValue, !0);
@@ -992,8 +996,8 @@ function captureDataChanges(updatesValue, createsValue = [], deletesValue = [])
   let creates = createsValue.map((item) => {
     let row = mapping(item);
     if (Object.keys(row).some((key) => !["ref", "fields", "filing"].includes(key)) || !Object.hasOwn(row, "ref") || !Object.hasOwn(row, "fields")) return invalidChange();
-    let fields6 = mapping(row.fields);
-    return Object.keys(fields6).some((key) => key.startsWith("$")) ? invalidChange() : captureDataCreate({ ...fields6, $ref: row.ref, ...Object.hasOwn(row, "filing") ? { $filing: row.filing } : {} });
+    let fields5 = mapping(row.fields);
+    return Object.keys(fields5).some((key) => key.startsWith("$")) ? invalidChange() : captureDataCreate({ ...fields5, $ref: row.ref, ...Object.hasOwn(row, "filing") ? { $filing: row.filing } : {} });
   }), deletes = captureIdentities(deletesValue, !1), refs = [...updates, ...creates, ...deletes].map((item) => item.ref);
   return !refs.length || refs.length > 1e4 || new Set(refs).size !== refs.length ? invalidChange() : { updates, creates, deletes };
 }
@@ -1178,7 +1182,7 @@ var data = {
   }
 };
 
-var MAX_BYTES = 16 * 1024 * 1024, PART_BYTES = 8 * 1024 * 1024, METADATA_BYTES = 4096, RESULT_BYTES = 16 * 1024, CONTROL_RESULT_BYTES = 128 * 1024, TIMEOUT_MS = 3e4, MAX_ACTIVE = 4, ATTEMPTS = 2, active = 0, invalid5 = () => new FileOperationError("invalid_input", 400), unavailable = () => new FileOperationError("unavailable", 503, !0), failures = {
+var MAX_BYTES = 16 * 1024 * 1024, PART_BYTES = 8 * 1024 * 1024, METADATA_BYTES = 4096, RESULT_BYTES = 16 * 1024, CONTROL_RESULT_BYTES = 128 * 1024, TIMEOUT_MS = 3e4, MAX_ACTIVE = 4, ATTEMPTS = 2, active = 0, invalid6 = () => new FileOperationError("invalid_input", 400), unavailable = () => new FileOperationError("unavailable", 503, !0), failures = {
   400: ["invalid_input", "unsupported_context"],
   401: ["unauthenticated"],
   403: ["access_denied"],
@@ -1195,7 +1199,7 @@ async function boundedBytes(stream, limit) {
     for (; ; ) {
       let { done, value } = await reader.read();
       if (done) break;
-      if (!(value instanceof Uint8Array)) throw invalid5();
+      if (!(value instanceof Uint8Array)) throw invalid6();
       if (size += value.byteLength, size > limit) throw new FileOperationError("request_too_large", 413);
       bytes.set(value, size - value.byteLength);
     }
@@ -1322,7 +1326,7 @@ async function send(suffix, init2, descriptor, initial, parent) {
   throw unavailable();
 }
 function idPath(id3) {
-  if (typeof id3 != "string" || !FILE_ID_PATTERN.test(id3)) throw invalid5();
+  if (typeof id3 != "string" || !FILE_ID_PATTERN.test(id3)) throw invalid6();
   return `/${id3}`;
 }
 async function multipartCreate(input, metadata, exchange, release = () => {
@@ -1365,18 +1369,18 @@ async function multipartCreate(input, metadata, exchange, release = () => {
           if (!chunk || offset === chunk.byteLength) {
             chunk = void 0, offset = 0;
             let value2 = await next();
-            if (value2.done || !(value2.value instanceof Uint8Array) || (chunk = value2.value, chunk.byteLength > metadata.size - sent - filled)) throw invalid5();
+            if (value2.done || !(value2.value instanceof Uint8Array) || (chunk = value2.value, chunk.byteLength > metadata.size - sent - filled)) throw invalid6();
           }
           let take = Math.min(length - filled, chunk.byteLength - offset);
           part.set(chunk.subarray(offset, offset + take), filled), filled += take, offset += take, offset === chunk.byteLength && (chunk = void 0, offset = 0);
         }
       }
-      if (part.byteLength !== length) throw invalid5();
+      if (part.byteLength !== length) throw invalid6();
       if (reader && sent + length === metadata.size)
         for (lastProgress = Date.now(); ; ) {
           let value2 = await next();
           if (value2.done) break;
-          if (!(value2.value instanceof Uint8Array) || value2.value.byteLength) throw invalid5();
+          if (!(value2.value instanceof Uint8Array) || value2.value.byteLength) throw invalid6();
         }
       let value = await request2((signal) => exchange(`${route}/part`, {
         method: "POST",
@@ -1390,7 +1394,7 @@ async function multipartCreate(input, metadata, exchange, release = () => {
     }
     if (upload) for (let name of Object.keys(upload.file.enrichments)) {
       let bytes = await request2(() => upload.enrichment(name));
-      if (bytes.byteLength !== upload.file.enrichments[name].size || bytes.byteLength > MAX_BYTES) throw invalid5();
+      if (bytes.byteLength !== upload.file.enrichments[name].size || bytes.byteLength > MAX_BYTES) throw invalid6();
       await request2((signal) => exchange(`${route}/enrichments/${encodeURIComponent(name)}`, {
         method: "POST",
         headers: { "content-type": "application/octet-stream", "x-oddington-transfer": ticket },
@@ -1428,7 +1432,7 @@ async function operation(work, initial, parent) {
 function contentPath(id3, name) {
   let path = idPath(id3);
   if (name === void 0) return `${path}/content`;
-  if (!safeEnrichmentName(name)) throw invalid5();
+  if (!safeEnrichmentName(name)) throw invalid6();
   return `${path}/enrichments/${encodeURIComponent(name)}/content`;
 }
 async function read(id3, names) {
@@ -1437,12 +1441,12 @@ async function read(id3, names) {
     let path = contentPath(id3, names);
     return operation((context3, signal) => send(path, { method: "GET" }, !1, context3, signal), context2);
   }
-  if (!Array.isArray(names)) throw invalid5();
+  if (!Array.isArray(names)) throw invalid6();
   let distinct = [], seen = /* @__PURE__ */ new Set();
   for (let name of names) {
-    if (typeof name != "string" || !safeEnrichmentName(name)) throw invalid5();
+    if (typeof name != "string" || !safeEnrichmentName(name)) throw invalid6();
     if (!seen.has(name)) {
-      if (seen.size === 16) throw invalid5();
+      if (seen.size === 16) throw invalid6();
       seen.add(name), distinct.push(name);
     }
   }
@@ -1477,11 +1481,11 @@ var files = {
   async create(input, options) {
     let context2 = await resolveFilesContext();
     if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "size", "path", "name", "storage", "csv"].includes(key)) || options !== void 0 && (!options || typeof options != "object" || Array.isArray(options) || Object.keys(options).some((key) => key !== "requestKey")))
-      throw invalid5();
+      throw invalid6();
     let blob = input.file instanceof Blob, array3 = input.file instanceof Uint8Array, stream = input.file instanceof ReadableStream;
-    if (!blob && !array3 && !stream) throw invalid5();
+    if (!blob && !array3 && !stream) throw invalid6();
     let intrinsic = blob ? input.file.size : array3 ? input.file.byteLength : void 0;
-    if (intrinsic !== void 0 && input.size !== void 0 && input.size !== intrinsic) throw invalid5();
+    if (intrinsic !== void 0 && input.size !== void 0 && input.size !== intrinsic) throw invalid6();
     let name = input.name;
     name === void 0 && blob && "name" in input.file && typeof input.file.name == "string" && (name = typeof globalThis.File < "u" && input.file instanceof globalThis.File ? input.file.name : input.file.name.split(/[\\/]/).at(-1));
     let metadata = parseFileCreateMetadata({
@@ -1495,7 +1499,7 @@ var files = {
     }, FILE_ORIGINAL_MAX_BYTES);
     if (!context2.local && metadata.storage === "local") throw new FileOperationError("unsupported_context", 400);
     let header = encodeURIComponent(JSON.stringify(metadata));
-    if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid5();
+    if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid6();
     if (active >= MAX_ACTIVE) throw new FileOperationError("capacity", 429, !0);
     return active++, metadata.size > MAX_BYTES ? multipartCreate(input, metadata, (suffix, init2, kind, signal) => kind === !0 ? send(suffix, init2, !0, context2, signal) : send(suffix, init2, "control", context2, signal)) : timed(async (signal) => {
       try {
@@ -1503,7 +1507,7 @@ var files = {
           blob ? input.file.stream() : input.file,
           metadata.size
         );
-        if (bytes.byteLength !== metadata.size) throw invalid5();
+        if (bytes.byteLength !== metadata.size) throw invalid6();
         if (signal.aborted) throw unavailable();
         return await send("", {
           method: "POST",
@@ -1519,7 +1523,7 @@ var files = {
   },
   async enrich(input) {
     let context2 = await resolveFilesContext();
-    if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "name", "content", "mediaType", "replace"].includes(key)) || typeof input.content != "string" && !(input.content instanceof Uint8Array)) throw invalid5();
+    if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "name", "content", "mediaType", "replace"].includes(key)) || typeof input.content != "string" && !(input.content instanceof Uint8Array)) throw invalid6();
     let path = `${idPath(input.file)}/enrichments`;
     if (typeof input.content == "string" ? input.content.length > MAX_BYTES : input.content.byteLength > MAX_BYTES)
       throw new FileOperationError("request_too_large", 413);
@@ -1536,7 +1540,7 @@ var files = {
         ...input.mediaType === void 0 ? {} : { mediaType: input.mediaType },
         ...input.replace === void 0 ? {} : { replace: input.replace }
       }, MAX_BYTES), header = encodeURIComponent(JSON.stringify(metadata));
-      if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid5();
+      if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid6();
       let result2 = await send(path, { method: "POST", headers: {
         "content-type": "application/octet-stream",
         "x-oddington-enrichment": header
@@ -1595,7 +1599,7 @@ function keys2(v, allowed, required = allowed) {
 function text2(v) {
   return typeof v == "string" && v.length > 0 && v.length <= 1024;
 }
-function fields4(v, nonempty = !1) {
+function fields3(v, nonempty = !1) {
   let result2 = object3(v);
   (nonempty && !Object.keys(result2).length || Object.keys(result2).some((k) => !text2(k))) && fail2("Invalid Airtable fields");
   try {
@@ -1606,7 +1610,7 @@ function fields4(v, nonempty = !1) {
 }
 function record2(v) {
   let r = object3(v);
-  return (!recordId(r.id) || r.createdTime !== void 0 && (typeof r.createdTime != "string" || !Number.isFinite(Date.parse(r.createdTime)))) && fail2("Malformed Airtable record"), { id: r.id, ...r.createdTime === void 0 ? {} : { createdTime: r.createdTime }, fields: fields4(r.fields) };
+  return (!recordId(r.id) || r.createdTime !== void 0 && (typeof r.createdTime != "string" || !Number.isFinite(Date.parse(r.createdTime)))) && fail2("Malformed Airtable record"), { id: r.id, ...r.createdTime === void 0 ? {} : { createdTime: r.createdTime }, fields: fields3(r.fields) };
 }
 function equal(a, b) {
   if (a === b) return !0;
@@ -1720,10 +1724,10 @@ async function executeAirtableOperation(authority, operation2, raw, options = {}
   mutation || fail2("Unsupported Airtable operation"), keys2(input, ["table", "records"]), (!Array.isArray(input.records) || !input.records.length || input.records.length > 10) && fail2("Invalid Airtable batch");
   let kind = operation2.slice(8), ids = /* @__PURE__ */ new Set(), records = input.records.map((value) => {
     let r = object3(value);
-    if (keys2(r, kind === "create" ? ["fields"] : kind === "update" ? ["id", "expected", "set"] : ["id", "expected"]), kind === "create") return { fields: fields4(r.fields, !0) };
+    if (keys2(r, kind === "create" ? ["fields"] : kind === "update" ? ["id", "expected", "set"] : ["id", "expected"]), kind === "create") return { fields: fields3(r.fields, !0) };
     (!recordId(r.id) || ids.has(r.id)) && fail2("Invalid Airtable batch record ID"), ids.add(r.id);
-    let set = kind === "update" ? fields4(r.set, !0) : void 0;
-    return set && Object.values(set).some((value2) => value2 === null) && fail2("Airtable guard null cannot be an update value"), { id: r.id, expected: fields4(r.expected), ...set ? { set } : {} };
+    let set = kind === "update" ? fields3(r.set, !0) : void 0;
+    return set && Object.values(set).some((value2) => value2 === null) && fail2("Airtable guard null cannot be an update value"), { id: r.id, expected: fields3(r.expected), ...set ? { set } : {} };
   });
   for (let r of records) {
     if (!("id" in r)) continue;
@@ -1965,11 +1969,11 @@ function array2(value) {
     return !!descriptor?.enumerable && "value" in descriptor;
   })), value;
 }
-function json2(value, ancestors = /* @__PURE__ */ new Set()) {
+function json(value, ancestors = /* @__PURE__ */ new Set()) {
   if (value === null || typeof value == "boolean" || typeof value == "string" || typeof value == "number" && Number.isFinite(value)) return value;
   assert(value && typeof value == "object" && !ancestors.has(value)), ancestors.add(value);
   try {
-    return Array.isArray(value) ? array2(value).map((entry) => json2(entry, ancestors)) : Object.fromEntries(Object.entries(object4(value)).map(([key, entry]) => [key, json2(entry, ancestors)]));
+    return Array.isArray(value) ? array2(value).map((entry) => json(entry, ancestors)) : Object.fromEntries(Object.entries(object4(value)).map(([key, entry]) => [key, json(entry, ancestors)]));
   } finally {
     ancestors.delete(value);
   }
@@ -2025,7 +2029,7 @@ function inboxFile(value) {
   let details = object4(file2.details);
   details.kind === "csv" ? (keys3(details, ["kind", "encoding", "delimiter", "headerRow", "dataRows"]), assert(file2.mediaType === "text/csv" && ["utf-8", "windows-1252"].includes(String(details.encoding)) && [",", ";", "	"].includes(String(details.delimiter)) && integer(details.headerRow, 0) && integer(details.dataRows, 0))) : details.kind === "pdf" ? (keys3(details, ["kind", "pages"], ["kind"]), assert(file2.mediaType === "application/pdf" && (!("pages" in details) || integer(details.pages)))) : (keys3(details, ["kind"]), assert(details.kind === "other" && !["text/csv", "application/pdf"].includes(file2.mediaType)));
 }
-function fields5(value) {
+function fields4(value) {
   let labels = array2(value).map((value2) => {
     let field = object4(value2);
     return keys3(field, ["label", "value"]), assert(text3(field.label) && text3(field.value)), field.label;
@@ -2050,13 +2054,13 @@ function block(value) {
     ["kind", "label", entry.kind === "record" ? "record" : entry.kind === "records" ? "records" : "files"]
   ), assert(text3(entry.label) && (!("initiallyExpanded" in entry) || typeof entry.initiallyExpanded == "boolean") && (!("view" in entry) || text3(entry.view) && entry.view === entry.view.trim())), entry.kind === "record") {
     let record3 = object4(entry.record);
-    keys3(record3, ["ref", "title", "fields"]), assert(text3(record3.ref) && record3.ref === record3.ref.trim() && text3(record3.title)), fields5(record3.fields);
+    keys3(record3, ["ref", "title", "fields"]), assert(text3(record3.ref) && record3.ref === record3.ref.trim() && text3(record3.title)), fields4(record3.fields);
     return;
   }
   if (entry.kind === "records") {
     let records = array2(entry.records), refs = records.map((value2) => {
       let record3 = object4(value2);
-      return keys3(record3, ["ref", "title", "description", "facts", "view"], ["ref", "title"]), assert(text3(record3.ref) && record3.ref === record3.ref.trim() && text3(record3.title)), "description" in record3 && assert(text3(record3.description)), "facts" in record3 && fields5(record3.facts), "view" in record3 && assert(text3(record3.view) && record3.view === record3.view.trim()), record3.ref;
+      return keys3(record3, ["ref", "title", "description", "facts", "view"], ["ref", "title"]), assert(text3(record3.ref) && record3.ref === record3.ref.trim() && text3(record3.title)), "description" in record3 && assert(text3(record3.description)), "facts" in record3 && fields4(record3.facts), "view" in record3 && assert(text3(record3.view) && record3.view === record3.view.trim()), record3.ref;
     });
     assert(records.length > 0 && new Set(refs).size === refs.length);
     return;
@@ -2068,12 +2072,12 @@ function response(value) {
   let answer = object4(value);
   return assert(Object.keys(answer).every((key) => ["selection", "note"].includes(key))), typeof answer.selection == "string" ? assert(text3(answer.selection) && answer.selection === answer.selection.trim()) : recordReference(answer.selection), Object.hasOwn(answer, "note") && assert(text3(answer.note)), answer;
 }
-function parseInboxRequest(value, questionListContext = "local") {
+function parseInboxRequest(value) {
   try {
     let envelope = object4(value);
     assert(Object.keys(envelope).sort().join(",") === "input,operation"), assert(typeof envelope.operation == "string" && Object.hasOwn(operations, envelope.operation));
     let operation2 = envelope.operation, input = { ...object4(envelope.input) }, required = operations[operation2];
-    assert(required.every((key) => Object.hasOwn(input, key)) && Object.keys(input).every((key) => required.includes(key) || operation2 === "questions.searchRecords" && key === "selected" || (operation2 === "items.list" || operation2 === "questions.list") && key === "beforeNumber" || operation2 === "questions.list" && questionListContext === "hosted" && key === "routines")), operation2 === "questions.list" && questionListContext === "hosted" && (assert(Object.hasOwn(input, "routines")), assert(array2(input.routines).every(isAppRoutineName)));
+    assert(required.every((key) => Object.hasOwn(input, key)) && Object.keys(input).every((key) => required.includes(key) || operation2 === "questions.searchRecords" && key === "selected" || (operation2 === "items.list" || operation2 === "questions.list") && key === "beforeNumber" || operation2 === "questions.list" && key === "routines")), operation2 === "questions.list" && (assert(Object.hasOwn(input, "routines")), assert(array2(input.routines).every(isAppRoutineName)));
     for (let key of ["itemId", "personId", "fileId"]) key in input && assert(id2(input[key]));
     return "revision" in input && assert(integer(input.revision)), "beforeNumber" in input && assert(integer(input.beforeNumber)), "questionId" in input && assert(text3(input.questionId) && input.questionId === input.questionId.trim()), "title" in input && assert(text3(input.title)), "lifecycle" in input && assert(input.lifecycle === "open" || input.lifecycle === "closed"), "query" in input && assert(text3(input.query, !0) && input.query.length <= 256), "selected" in input && recordReference(input.selected), "response" in input && response(input.response), assert(new TextEncoder().encode(JSON.stringify(envelope)).byteLength <= INBOX_INPUT_BYTES), "routines" in input && (input.routines = [...new Set(input.routines)]), { operation: operation2, input };
   } catch {
@@ -2088,10 +2092,10 @@ function parseInboxCurrent(value) {
   };
 }
 function parseInboxItem(value) {
-  let item = object4(json2(value));
-  return assert(id2(item.id) && id2(item.workspaceId) && integer(item.number) && integer(item.revision) && integer(item.activityVersion, 0) && ["ask", "digest"].includes(String(item.kind)) && ["open", "closed"].includes(String(item.lifecycle)) && text3(item.title) && text3(item.description, !0) && text3(item.author) && date(item.publishedAt) && optionalDate(item.seenAt) && optionalDate(item.digestReadAt)), item.outcome !== null && assert(text3(object4(item.outcome).outcome)), array2(item.body).forEach(block), array2(item.views).forEach((value2) => {
+  let item = object4(json(value));
+  return assert(id2(item.id) && id2(item.workspaceId) && integer(item.number) && integer(item.revision) && integer(item.activityVersion, 0) && ["ask", "digest"].includes(String(item.kind)) && ["open", "closed"].includes(String(item.lifecycle)) && text3(item.title) && text3(item.description, !0) && text3(item.author) && date(item.publishedAt) && optionalDate(item.seenAt) && optionalDate(item.digestReadAt)), item.outcome !== null && assert(text3(object4(item.outcome).outcome)), "canonicalRoutineId" in item && assert(item.canonicalRoutineId === null || isAppRoutineName(item.canonicalRoutineId)), array2(item.body).forEach(block), array2(item.views).forEach((value2) => {
     let view = object4(value2);
-    assert(text3(view.id) && text3(view.view) && text3(view.implementation)), json2(view.input);
+    assert(text3(view.id) && text3(view.view) && text3(view.implementation)), json(view.input);
   }), array2(item.people).forEach((value2) => {
     let person = object4(value2);
     assert(id2(person.id) && text3(person.name));
@@ -2127,18 +2131,22 @@ function parseInboxItem(value) {
   }), item;
 }
 function parseAnswerableQuestion(value) {
-  let entry = object4(json2(value));
-  keys3(entry, ["item", "origin", "question", "recordRefs"]);
-  let item = object4(entry.item);
-  keys3(item, ["id", "number", "revision", "title", "href"]), assert(id2(item.id) && integer(item.number) && integer(item.revision) && text3(item.title) && text3(item.href));
-  let link = new URL(item.href), slug = link.hostname.slice(0, -13);
-  assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && item.href === `https://${slug}.oddington.ai/inbox/${item.id}`);
-  let origin = object4(entry.origin);
-  keys3(origin, ["routine"]), assert(text3(origin.routine) && origin.routine === origin.routine.trim());
-  let question2 = object4(entry.question);
-  keys3(question2, ["id", "prompt", "instructions", "response"]), assert(text3(question2.id) && question2.id === question2.id.trim() && text3(question2.prompt) && (question2.instructions === null || text3(question2.instructions, !0))), responseDefinition(question2.response);
+  let entry = object4(json(value));
+  keys3(
+    entry,
+    ["itemId", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "recordRefs", "instructions"],
+    ["itemId", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "recordRefs"]
+  ), assert(id2(entry.itemId) && integer(entry.revision) && text3(entry.title) && text3(entry.inboxUrl));
+  let link = new URL(entry.inboxUrl), slug = link.hostname.slice(0, -13);
+  assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && entry.inboxUrl === `https://${slug}.oddington.ai/inbox/${entry.itemId}`), assert(isAppRoutineName(entry.routine) && text3(entry.questionId) && entry.questionId === entry.questionId.trim() && text3(entry.prompt) && (!("instructions" in entry) || text3(entry.instructions, !0)) && typeof entry.answerable == "boolean"), responseDefinition(entry.response);
   let refs = array2(entry.recordRefs);
-  return assert(refs.every((ref) => text3(ref) && ref === ref.trim()) && new Set(refs).size === refs.length), entry;
+  return refs.forEach((value2) => {
+    let ref = object4(value2);
+    keys3(ref, ["repository", "id"]), assert(validRepositoryAlias(ref.repository) && text3(ref.id) && /^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/.test(ref.id) && !ref.id.split("/").some((part) => !part || part === "." || part === ".."));
+  }), assert(new Set(refs.map((value2) => {
+    let ref = object4(value2);
+    return JSON.stringify([ref.repository, ref.id]);
+  })).size === refs.length), entry;
 }
 function parseInboxAcceptance(value) {
   let accepted = object4(value);
@@ -2624,13 +2632,13 @@ function hostFailure(error, context2) {
   return !context2.isCurrent() || context2.expiresAt <= Date.now() || error instanceof InboxContextError && error.status === 401 ? stale() : error instanceof InboxContextError && error.status === 403 ? new InboxOperationError(403, "access_denied") : unavailable2();
 }
 async function send2(operation2, input) {
-  let envelope = operation2 === "questions.list" ? void 0 : parseInboxRequest({ operation: operation2, input }), context2;
+  let envelope = parseInboxRequest({ operation: operation2, input }), context2;
   try {
     context2 = await resolveAppContext();
   } catch {
     throw stale();
   }
-  if (envelope ??= parseInboxRequest({ operation: operation2, input }, context2.kind === "local" ? "local" : "hosted"), context2.kind === "local") {
+  if (context2.kind === "local") {
     if (!isAppQuestionOperation(operation2)) throw new InboxOperationError(403, "access_denied");
     let check2 = () => {
       if (!context2.isCurrent() || context2.signal.aborted || context2.expiresAt <= Date.now()) throw stale();
@@ -2651,16 +2659,18 @@ async function send2(operation2, input) {
   }
   if (context2.endpoint !== `https://${context2.workspace}.oddington.ai` || ["auth", "www", "api", "os"].includes(context2.workspace)) throw stale();
   let host;
-  try {
-    host = await resolveHostedInboxContext(context2);
-  } catch (error) {
-    throw hostFailure(error, context2);
+  if (!isAppQuestionOperation(operation2)) {
+    try {
+      host = await resolveHostedInboxContext(context2);
+    } catch (error) {
+      throw hostFailure(error, context2);
+    }
+    if (!host) throw unavailable2();
   }
-  if (!host) throw unavailable2();
   let check = () => {
-    if (!context2.isCurrent() || !host.isCurrent() || !Number.isFinite(context2.expiresAt) || context2.expiresAt <= Date.now()) throw stale();
+    if (!context2.isCurrent() || host && !host.isCurrent() || !Number.isFinite(context2.expiresAt) || context2.expiresAt <= Date.now()) throw stale();
   };
-  if (check(), host.context.kind === "focused" && !isAppQuestionOperation(operation2))
+  if (check(), host?.context.kind === "focused")
     throw new InboxOperationError(403, "access_denied");
   try {
     let response2 = await fetch(`${context2.endpoint}/api/inbox`, {
@@ -2768,33 +2778,24 @@ var inbox = {
   },
   questions: {
     async list(input) {
-      let supplied = input === void 0 ? void 0 : parseInboxRequest({ operation: "questions.list", input }, "hosted").input;
-      if (supplied && Object.hasOwn(supplied, "beforeNumber")) throw new InboxOperationError(400, "invalid_input");
-      let routines = supplied ? Object.freeze(supplied.routines) : void 0, questions = [], beforeNumber, initial;
+      let supplied = parseInboxRequest({ operation: "questions.list", input }).input;
+      if (Object.hasOwn(supplied, "beforeNumber")) throw new InboxOperationError(400, "invalid_input");
+      let routines = Object.freeze(supplied.routines), questions = [], beforeNumber, initial;
       try {
         initial = await resolveAppContext();
       } catch {
         throw stale();
       }
-      if (initial.kind === "local" ? input !== void 0 : routines === void 0)
-        throw new InboxOperationError(400, "invalid_input");
-      let host;
-      try {
-        host = initial.kind !== "local" && await resolveHostedInboxContext(initial);
-      } catch (error) {
-        throw hostFailure(error, initial);
-      }
-      if (initial.kind !== "local" && !host) throw unavailable2();
       let check = () => {
-        if (!initial.isCurrent() || host && !host.isCurrent() || initial.expiresAt <= Date.now()) throw stale();
+        if (!initial.isCurrent() || initial.expiresAt <= Date.now()) throw stale();
       };
       do {
         check();
         let page = await send2("questions.list", {
-          ...routines === void 0 ? {} : { routines },
+          routines,
           ...beforeNumber === void 0 ? {} : { beforeNumber }
         });
-        if (check(), page.questions.some((question2) => question2.item.href !== `https://${initial.workspace}.oddington.ai/inbox/${question2.item.id}` || routines !== void 0 && !routines.includes(question2.origin.routine)) || beforeNumber !== void 0 && (page.questions.some((question2) => question2.item.number >= beforeNumber) || page.nextBeforeNumber !== null && page.nextBeforeNumber >= beforeNumber)) throw unavailable2();
+        if (check(), page.questions.some((question2) => question2.inboxUrl !== `https://${initial.workspace}.oddington.ai/inbox/${question2.itemId}` || !routines.includes(question2.routine)) || beforeNumber !== void 0 && page.nextBeforeNumber !== null && page.nextBeforeNumber >= beforeNumber) throw unavailable2();
         if (questions.push(...page.questions), page.nextBeforeNumber === null) return questions;
         beforeNumber = page.nextBeforeNumber;
       } while (!0);
@@ -3217,9 +3218,9 @@ async function provider(configuration, guard) {
       let result2 = new Response(
         [204, 205, 304].includes(response2.status) ? null : body,
         { status: response2.status, statusText: response2.statusText, headers: response2.headers }
-      ), json3 = result2.json.bind(result2);
+      ), json2 = result2.json.bind(result2);
       return result2.json = async () => {
-        let value = await json3();
+        let value = await json2();
         return (!guard.current(revision) || request2 && !request2.current()) && rejectStale(), value && typeof value.access_token == "string" && provenance.set(value.access_token, revision), value;
       }, result2;
     }, { preconnect: fetch.preconnect })
@@ -3270,6 +3271,22 @@ async function provider(configuration, guard) {
 }
 var auth = /* @__PURE__ */ createBrowserAuth({ provider, failure: (reason) => new BrowserAuthError(reason) });
 
+function routineRunHandle(operations2) {
+  return Object.freeze({
+    current: operations2.current,
+    step: operations2.step,
+    ...operations2.publish ? { publish: operations2.publish } : {},
+    async *watch() {
+      let previous;
+      for (; ; ) {
+        let state = await operations2.current(), encoded = JSON.stringify(state);
+        if (encoded !== previous && (previous = encoded, yield state), state.status === "succeeded" || state.status === "failed") return;
+        await (operations2.wait?.() ?? new Promise((resolve) => setTimeout(resolve, 100)));
+      }
+    }
+  });
+}
+
 var identifier = /^[a-z0-9]+(?:-[a-z0-9]+)*(?![\s\S])/, uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}(?![\s\S])/i, SUMMARY_BYTES = 17 * 1024 * 1024, AppRoutineError = class extends Error {
   constructor(reason) {
     super(reason);
@@ -3341,18 +3358,8 @@ function structure(value) {
   return JSON.stringify(value, (_key, item) => item && typeof item == "object" && !Array.isArray(item) ? Object.fromEntries(Object.keys(item).sort().map((key) => [key, item[key]])) : item);
 }
 function handle(key, id3, context2) {
-  (typeof id3 != "string" || !uuid.test(id3)) && fail3("invalid_input");
-  let read2 = async () => summary(await request(key, `runs/${id3}`, void 0, SUMMARY_BYTES, context2), key, id3);
-  return Object.freeze({
-    current: read2,
-    async *watch() {
-      let previous;
-      for (; ; ) {
-        let state = await read2(), encoded = JSON.stringify(state);
-        if (encoded !== previous && (previous = encoded, yield state), state.status === "succeeded" || state.status === "failed") return;
-        await new Promise((resolve) => setTimeout(resolve, 100));
-      }
-    },
+  return (typeof id3 != "string" || !uuid.test(id3)) && fail3("invalid_input"), routineRunHandle({
+    current: async () => summary(await request(key, `runs/${id3}`, void 0, SUMMARY_BYTES, context2), key, id3),
     async step(step) {
       (typeof step != "string" || !identifier.test(step)) && fail3("invalid_input");
       let value = await request(key, `runs/${id3}/steps/${step}`, void 0, 514 * 1024, context2);