@oddington/sdk 0.1.21 → 0.1.23

package/dist/browser.js

@@ -285,7 +285,7 @@ function validatePublication(value) {
     "views",
     "body",
     "notifyImmediately",
-    ...source.kind === "ask" ? ["questions"] : []
+    ...source.kind === "ask" ? ["questions", "tags", "recordRefs"] : []
   ], "publication"), source.notifyImmediately !== void 0 && typeof source.notifyImmediately != "boolean" && fail("notifyImmediately must be a boolean");
   let itemPresentation = { ...presentation(source), ...source.notifyImmediately === void 0 ? {} : { notifyImmediately: source.notifyImmediately } }, linkedAsks = (itemPresentation.body ?? []).flatMap((block2) => block2.kind === "asks" ? block2.asks : []);
   if (new Set(linkedAsks).size !== linkedAsks.length && fail("Ask belongs to more than one problem"), source.kind === "digest") return {
@@ -297,10 +297,24 @@ function validatePublication(value) {
   let questions = array(source.questions === void 0 ? [] : source.questions, "questions").map((value2) => question(value2));
   new Set(questions.map((entry) => entry.id)).size !== questions.length && fail("Duplicate question ID");
   let extra = source.recipients === void 0 ? [] : distinctPeople(source.recipients, "recipients", !1);
-  return !questions.length && !extra.length && fail("Ask requires at least one recipient"), {
+  !questions.length && !extra.length && fail("Ask requires at least one recipient");
+  let tags = array(source.tags === void 0 ? [] : source.tags, "Ask tags").map((value2) => {
+    let tag = text(value2, "Ask tag");
+    return new TextEncoder().encode(tag).byteLength > 64 && fail("Ask tag exceeds 64 UTF-8 bytes"), tag;
+  });
+  (tags.length > 32 || new Set(tags).size !== tags.length) && fail("Ask tags exceed bounds or contain duplicates");
+  let recordRefs = array(source.recordRefs === void 0 ? [] : source.recordRefs, "Ask Record references").map((value2) => {
+    let row = object(value2, "Ask Record reference");
+    keys(row, ["repository", "id"], "Ask Record reference");
+    let { repository, ref } = validateRecordReference({ repository: row.repository, ref: row.id });
+    return { repository, id: ref };
+  });
+  return new Set(recordRefs.map((ref) => JSON.stringify([ref.repository, ref.id]))).size !== recordRefs.length && fail("Ask Record references contain duplicates"), {
     kind: "ask",
     ...itemPresentation,
     questions,
+    tags,
+    recordRefs,
     recipients: [.../* @__PURE__ */ new Set([...extra, ...questions.flatMap((entry) => [entry.to, ...entry.allowedResponders])])]
   };
 }
@@ -335,7 +349,7 @@ function createInboxPublisher(transport) {
   return {
     async publishAsk(value, options) {
       let source = object(value, "ask");
-      keys(source, ["title", "description", "recipients", "views", "body", "questions", "notifyImmediately"], "ask");
+      keys(source, ["title", "description", "recipients", "views", "body", "questions", "notifyImmediately", "tags", "recordRefs"], "ask");
       let result2 = await transport.publish({
         requestKey: publicationRequestKey(options),
         item: validatePublication({ ...source, kind: "ask" })
@@ -391,44 +405,44 @@ var FileOperationError = class extends Error {
   retryable;
 }, FILE_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/, FILE_ORIGINAL_MAX_BYTES = 5 * 1024 ** 3;
 function parseFileDescriptor(value) {
-  let invalid6 = () => {
+  let invalid7 = () => {
     throw new FileOperationError("unavailable", 503, !0);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid6();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid7();
   let f = value;
-  if (Object.keys(f).sort().join(",") !== "details,enrichments,id,mediaType,name,path,sha256,size" || typeof f.id != "string" || !FILE_ID_PATTERN.test(f.id) || !safeFileName(f.name) || !safeFilePath(f.path) || !Number.isSafeInteger(f.size) || f.size < 0 || f.size > FILE_ORIGINAL_MAX_BYTES || typeof f.sha256 != "string" || !/^[0-9a-f]{64}$/.test(f.sha256) || !f.enrichments || typeof f.enrichments != "object" || Array.isArray(f.enrichments) || !f.details || typeof f.details != "object" || Array.isArray(f.details)) return invalid6();
+  if (Object.keys(f).sort().join(",") !== "details,enrichments,id,mediaType,name,path,sha256,size" || typeof f.id != "string" || !FILE_ID_PATTERN.test(f.id) || !safeFileName(f.name) || !safeFilePath(f.path) || !Number.isSafeInteger(f.size) || f.size < 0 || f.size > FILE_ORIGINAL_MAX_BYTES || typeof f.sha256 != "string" || !/^[0-9a-f]{64}$/.test(f.sha256) || !f.enrichments || typeof f.enrichments != "object" || Array.isArray(f.enrichments) || !f.details || typeof f.details != "object" || Array.isArray(f.details)) return invalid7();
   let d = f.details;
   if (d.kind === "other") {
-    if (Object.keys(d).length !== 1 || f.mediaType !== "application/octet-stream") return invalid6();
+    if (Object.keys(d).length !== 1 || f.mediaType !== "application/octet-stream") return invalid7();
   } else if (d.kind === "csv") {
-    if (Object.keys(d).sort().join(",") !== "dataRows,delimiter,encoding,headerRow,kind" || f.mediaType !== "text/csv" || !["utf-8", "windows-1252"].includes(d.encoding) || ![",", ";", "	"].includes(d.delimiter) || !Number.isSafeInteger(d.headerRow) || d.headerRow < 1 || !Number.isSafeInteger(d.dataRows) || d.dataRows < 0) return invalid6();
+    if (Object.keys(d).sort().join(",") !== "dataRows,delimiter,encoding,headerRow,kind" || f.mediaType !== "text/csv" || !["utf-8", "windows-1252"].includes(d.encoding) || ![",", ";", "	"].includes(d.delimiter) || !Number.isSafeInteger(d.headerRow) || d.headerRow < 1 || !Number.isSafeInteger(d.dataRows) || d.dataRows < 0) return invalid7();
   } else if (d.kind === "pdf") {
-    if (f.mediaType !== "application/pdf" || Object.keys(d).some((key) => !["kind", "pages"].includes(key)) || "pages" in d && (!Number.isSafeInteger(d.pages) || d.pages < 1)) return invalid6();
-  } else return invalid6();
+    if (f.mediaType !== "application/pdf" || Object.keys(d).some((key) => !["kind", "pages"].includes(key)) || "pages" in d && (!Number.isSafeInteger(d.pages) || d.pages < 1)) return invalid7();
+  } else return invalid7();
   for (let [name, descriptor] of Object.entries(f.enrichments)) {
-    if (!safeEnrichmentName(name)) return invalid6();
+    if (!safeEnrichmentName(name)) return invalid7();
     parseEnrichmentDescriptor(descriptor);
   }
-  return new TextEncoder().encode(JSON.stringify(f)).byteLength > 16 * 1024 ? invalid6() : f;
+  return new TextEncoder().encode(JSON.stringify(f)).byteLength > 16 * 1024 ? invalid7() : f;
 }
 function parseEnrichmentDescriptor(value) {
-  let invalid6 = () => {
+  let invalid7 = () => {
     throw new FileOperationError("unavailable", 503, !0);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid6();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid7();
   let d = value;
-  return Object.keys(d).sort().join(",") !== "mediaType,sha256,size" || !["application/octet-stream", "text/plain", "text/markdown", "application/json"].includes(d.mediaType) || !Number.isSafeInteger(d.size) || d.size < 0 || d.size > 16 * 1024 * 1024 || typeof d.sha256 != "string" || !/^[0-9a-f]{64}$/.test(d.sha256) ? invalid6() : d;
+  return Object.keys(d).sort().join(",") !== "mediaType,sha256,size" || !["application/octet-stream", "text/plain", "text/markdown", "application/json"].includes(d.mediaType) || !Number.isSafeInteger(d.size) || d.size < 0 || d.size > 16 * 1024 * 1024 || typeof d.sha256 != "string" || !/^[0-9a-f]{64}$/.test(d.sha256) ? invalid7() : d;
 }
 function safeEnrichmentName(value) {
   return safeFileName(value) && !/^original(?:\.|$)/i.test(value);
 }
 function parseFileEnrichMetadata(value, maxBytes) {
-  let invalid6 = () => {
+  let invalid7 = () => {
     throw new FileOperationError("invalid_input", 400);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid6();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid7();
   let d = value;
-  if (Object.keys(d).some((key) => !["name", "size", "mediaType", "replace"].includes(key)) || !safeEnrichmentName(d.name) || !Number.isSafeInteger(d.size) || d.size < 0 || d.mediaType !== void 0 && (typeof d.mediaType != "string" || d.mediaType.length > 255 || /[\u0000-\u001f\u007f]/.test(d.mediaType)) || d.replace !== void 0 && (typeof d.replace != "string" || !/^[0-9a-f]{64}$/.test(d.replace))) return invalid6();
+  if (Object.keys(d).some((key) => !["name", "size", "mediaType", "replace"].includes(key)) || !safeEnrichmentName(d.name) || !Number.isSafeInteger(d.size) || d.size < 0 || d.mediaType !== void 0 && (typeof d.mediaType != "string" || d.mediaType.length > 255 || /[\u0000-\u001f\u007f]/.test(d.mediaType)) || d.replace !== void 0 && (typeof d.replace != "string" || !/^[0-9a-f]{64}$/.test(d.replace))) return invalid7();
   if (d.size > maxBytes) throw new FileOperationError("request_too_large", 413);
   return d;
 }
@@ -439,23 +453,23 @@ function safeFilePath(value) {
   return typeof value == "string" && value.length <= 1024 && value.split("/").every(safeFileName);
 }
 function parseFileCreateMetadata(value, maxBytes) {
-  let invalid6 = () => {
+  let invalid7 = () => {
     throw new FileOperationError("invalid_input", 400);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid6();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid7();
   let input = value;
-  if (Object.keys(input).some((key) => !["name", "path", "storage", "csv", "inputMediaType", "size", "requestKey"].includes(key))) return invalid6();
+  if (Object.keys(input).some((key) => !["name", "path", "storage", "csv", "inputMediaType", "size", "requestKey"].includes(key))) return invalid7();
   let path = input.path === void 0 ? "Files" : input.path;
-  if (!safeFileName(input.name) || !safeFilePath(path) || path.split("/")[0].toLowerCase() === ".os" || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || input.inputMediaType !== void 0 && input.inputMediaType !== "application/pdf" || !Number.isSafeInteger(input.size) || input.size < 0) return invalid6();
+  if (!safeFileName(input.name) || !safeFilePath(path) || path.split("/")[0].toLowerCase() === ".os" || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || input.inputMediaType !== void 0 && input.inputMediaType !== "application/pdf" || !Number.isSafeInteger(input.size) || input.size < 0) return invalid7();
   if (input.size > maxBytes) throw new FileOperationError("request_too_large", 413);
-  if (typeof input.requestKey != "string" || input.requestKey.length < 1 || input.requestKey.length > 256 || input.requestKey !== input.requestKey.trim() || /[\u0000-\u001f\u007f]/.test(input.requestKey)) return invalid6();
+  if (typeof input.requestKey != "string" || input.requestKey.length < 1 || input.requestKey.length > 256 || input.requestKey !== input.requestKey.trim() || /[\u0000-\u001f\u007f]/.test(input.requestKey)) return invalid7();
   let csv;
   if (input.csv !== void 0) {
-    if (!input.csv || typeof input.csv != "object" || Array.isArray(input.csv)) return invalid6();
+    if (!input.csv || typeof input.csv != "object" || Array.isArray(input.csv)) return invalid7();
     let hints = input.csv;
-    if (Object.keys(hints).some((key) => !["encoding", "delimiter", "headerRow"].includes(key))) return invalid6();
+    if (Object.keys(hints).some((key) => !["encoding", "delimiter", "headerRow"].includes(key))) return invalid7();
     let encoding = hints.encoding === void 0 ? "utf-8" : hints.encoding, delimiter = hints.delimiter === void 0 ? "," : hints.delimiter, headerRow = hints.headerRow === void 0 ? 1 : hints.headerRow;
-    if (encoding !== "utf-8" && encoding !== "windows-1252" || ![",", ";", "	"].includes(delimiter) || !Number.isSafeInteger(headerRow) || headerRow < 1 || headerRow > 1e5) return invalid6();
+    if (encoding !== "utf-8" && encoding !== "windows-1252" || ![",", ";", "	"].includes(delimiter) || !Number.isSafeInteger(headerRow) || headerRow < 1 || headerRow > 1e5) return invalid7();
     csv = { encoding, delimiter, headerRow };
   }
   return {
@@ -517,8 +531,9 @@ function parseAppRoutineContract(value) {
       case "array":
         return !fields2(value2, ["type", "items", "maxItems"]) || !Number.isSafeInteger(value2.maxItems) || value2.maxItems < 1 || value2.maxItems > 64 ? invalidContract() : { type: "array", items: schema2(value2.items, depth + 1), maxItems: value2.maxItems };
       case "boolean":
-      case "file":
         return fields2(value2, ["type"]) ? { type: value2.type } : invalidContract();
+      case "file":
+        return !fields2(value2, ["type"], ["storage"]) || owns(value2, "storage") && value2.storage !== "local" && value2.storage !== "remote" ? invalidContract() : { type: "file", ...owns(value2, "storage") ? { storage: value2.storage } : {} };
       case "string":
         return !fields2(value2, ["type"], ["maxLength"]) || owns(value2, "maxLength") && (!Number.isSafeInteger(value2.maxLength) || value2.maxLength < 0 || value2.maxLength > 4096) ? invalidContract() : { type: "string", ...owns(value2, "maxLength") ? { maxLength: value2.maxLength } : {} };
       case "integer":
@@ -572,10 +587,10 @@ function validateRoutineSchemaValue(schema2, value) {
   }
 }
 
-var ROUTINE_DECLARATION_SCHEMA = "https://schemas.oddington.ai/routine/v1.json";
+var ROUTINE_DECLARATION_SCHEMA = "https://schemas.oddington.ai/routine/v1.json", ROUTINE_SOURCE_LIMITS = { files: 2e4, bytes: 256 * 1024 * 1024, declarationBytes: 64 * 1024 };
 var invalid = (field) => {
   throw new Error(`Invalid routine declaration: ${field}`);
-}, object2 = (value, fields6, field) => ((!value || typeof value != "object" || Array.isArray(value) || Object.keys(value).some((key) => !fields6.includes(key))) && invalid(field), value), routineAlias = (value) => typeof value == "string" && /^[a-z][a-z0-9-]{0,62}$/.test(value), list = (value, field, allowed) => value === void 0 ? [] : ((!Array.isArray(value) || value.length > 64 || value.some((item) => !routineAlias(item) || allowed && !allowed.includes(item)) || new Set(value).size !== value.length) && invalid(field), [...value].sort());
+}, object2 = (value, fields5, field) => ((!value || typeof value != "object" || Array.isArray(value) || Object.keys(value).some((key) => !fields5.includes(key))) && invalid(field), value), routineAlias = (value) => typeof value == "string" && /^[a-z][a-z0-9-]{0,62}$/.test(value), list = (value, field, allowed, qualified = !1) => value === void 0 ? [] : ((!Array.isArray(value) || value.length > 64 || value.some((item) => !(routineAlias(item) || qualified && typeof item == "string" && item.split("/").length === 2 && item.split("/").every(routineAlias)) || allowed && !allowed.includes(item)) || new Set(value).size !== value.length) && invalid(field), [...value].sort());
 function routineAssetPattern(value) {
   return typeof value == "string" && value.length <= 512 && !value.startsWith("/") && !value.includes("\\") && !value.includes(":") && value.split("/").every((part) => !!part && part !== "." && part !== ".." && /^[a-zA-Z0-9_.*-]+$/.test(part));
 }
@@ -599,7 +614,7 @@ function parseRoutineDeclaration(value) {
     $schema: ROUTINE_DECLARATION_SCHEMA,
     access: {
       repositories: grants,
-      connections: list(access.connections, "access.connections"),
+      connections: list(access.connections, "access.connections", void 0, !0),
       models: list(access.models, "access.models"),
       ...access.files === void 0 ? {} : { files: access.files },
       publish: list(access.publish, "access.publish", ["asks", "digests"])
@@ -614,19 +629,19 @@ function parseRoutineDeclaration(value) {
   };
 }
 
-var LIMIT = 256 * 1024, invalid2 = () => {
+var invalid2 = () => {
   throw new AppRoutineContractError("invalid_value");
 }, invalidContract2 = () => {
   throw new AppRoutineContractError("invalid_contract");
-}, empty = { type: "object", properties: {}, required: [], additionalProperties: !1 };
-function freeze(value) {
+}, routineTitle = (value) => typeof value == "string" && value.trim().length > 0 && value.length <= 256;
+function freezeRoutineMetadata(value) {
   if (value !== null && typeof value == "object") {
-    for (let child of Object.values(value)) freeze(child);
+    for (let child of Object.values(value)) freezeRoutineMetadata(child);
     Object.freeze(value);
   }
   return value;
 }
-function json(value, ancestors = /* @__PURE__ */ new Set()) {
+function assertRoutineJson(value, ancestors = /* @__PURE__ */ new Set()) {
   if (value === null || typeof value == "string" || typeof value == "boolean" || typeof value == "number" && Number.isFinite(value)) return;
   if (!value || typeof value != "object" || ancestors.has(value)) return invalid2();
   let array3 = Array.isArray(value);
@@ -639,14 +654,34 @@ function json(value, ancestors = /* @__PURE__ */ new Set()) {
     if (typeof key != "string") return invalid2();
     let descriptor = Object.getOwnPropertyDescriptor(value, key);
     if (!descriptor.enumerable || !Object.hasOwn(descriptor, "value")) return invalid2();
-    json(descriptor.value, ancestors);
+    assertRoutineJson(descriptor.value, ancestors);
   }
   ancestors.delete(value);
 }
+function assertRoutineFields(value, allowed) {
+  if (!value || typeof value != "object" || Object.getPrototypeOf(value) !== Object.prototype || Reflect.ownKeys(value).some((key) => typeof key != "string" || allowed && !allowed.includes(key) || !Object.getOwnPropertyDescriptor(value, key).enumerable || !Object.hasOwn(Object.getOwnPropertyDescriptor(value, key), "value"))) return invalidContract2();
+}
+function parseRoutineAccess(value) {
+  try {
+    value !== void 0 && assertRoutineJson(value), assertRoutineFields(value ?? {}, ["repositories", "connections", "models", "files", "publish"]);
+    let access = value, names = access?.connections ?? [];
+    if (!Array.isArray(names) || names.length > 64 || new Set(names).size !== names.length || names.some((name) => typeof name != "string" || name.split("/").length !== 2 || name.split("/").some((part) => !isAppRoutineName(part)))) return invalidContract2();
+    let parsed = parseRoutineDeclaration({ $schema: ROUTINE_DECLARATION_SCHEMA, access: { ...access, connections: [] } }).access;
+    return freezeRoutineMetadata({ ...parsed, connections: [...names] });
+  } catch {
+    return invalidContract2();
+  }
+}
+
+var LIMIT = 256 * 1024, invalid3 = () => {
+  throw new AppRoutineContractError("invalid_value");
+}, invalidContract3 = () => {
+  throw new AppRoutineContractError("invalid_contract");
+}, empty = { type: "object", properties: {}, required: [], additionalProperties: !1 };
 function captureJson(value) {
-  json(value);
+  assertRoutineJson(value);
   let encoded = JSON.stringify(value);
-  return new TextEncoder().encode(encoded).byteLength > LIMIT ? invalid2() : freeze(JSON.parse(encoded));
+  return new TextEncoder().encode(encoded).byteLength > LIMIT ? invalid3() : freezeRoutineMetadata(JSON.parse(encoded));
 }
 function capture(schema2, value) {
   let captured = captureJson(value);
@@ -655,26 +690,26 @@ function capture(schema2, value) {
 var schemas = /* @__PURE__ */ new WeakMap();
 function nestedSchema(value) {
   let metadata = schemaMetadata(value);
-  return Object.hasOwn(metadata, "default") ? invalidContract2() : metadata.schema;
+  return Object.hasOwn(metadata, "default") ? invalidContract3() : metadata.schema;
 }
 function schemaMetadata(value) {
-  if (!value || typeof value != "object") return invalidContract2();
+  if (!value || typeof value != "object") return invalidContract3();
   let registered = schemas.get(value);
   if (registered) return registered;
   try {
-    json(value);
+    assertRoutineJson(value);
   } catch {
-    return invalidContract2();
+    return invalidContract3();
   }
   return { schema: parseAppRoutineContract({ routine: "definition", input: value, steps: [{ id: "inspect" }] }).input };
 }
 function declaration(value, defaults) {
   try {
-    json(value);
+    assertRoutineJson(value);
   } catch {
-    return invalidContract2();
+    return invalidContract3();
   }
-  let parsed = freeze(parseAppRoutineContract({ routine: "definition", input: value, steps: [{ id: "inspect" }] }).input), captured = defaults ? capture(parsed, defaults.value) : void 0, builder = Object.defineProperty({ ...parsed }, "default", { value: (value2) => declaration(parsed, { value: value2 }) });
+  let parsed = freezeRoutineMetadata(parseAppRoutineContract({ routine: "definition", input: value, steps: [{ id: "inspect" }] }).input), captured = defaults ? capture(parsed, defaults.value) : void 0, builder = Object.defineProperty({ ...parsed }, "default", { value: (value2) => declaration(parsed, { value: value2 }) });
   return schemas.set(builder, { schema: parsed, ...defaults ? { default: captured } : {} }), Object.freeze(builder);
 }
 var schema = {
@@ -696,27 +731,11 @@ var schema = {
   boolean() {
     return declaration({ type: "boolean" });
   }
-}, file = () => declaration({ type: "file" }), definitions = /* @__PURE__ */ new WeakMap();
-function fields3(value, allowed) {
-  if (!value || typeof value != "object" || Object.getPrototypeOf(value) !== Object.prototype || Reflect.ownKeys(value).some((key) => typeof key != "string" || allowed && !allowed.includes(key) || !Object.getOwnPropertyDescriptor(value, key).enumerable || !Object.hasOwn(Object.getOwnPropertyDescriptor(value, key), "value"))) return invalidContract2();
-}
-var title = (value) => typeof value == "string" && value.trim().length > 0 && value.length <= 256;
-function accessMetadata(value) {
-  try {
-    value !== void 0 && json(value), fields3(value ?? {}, ["repositories", "connections", "models", "files", "publish"]);
-    let access = value, names = access?.connections ?? [];
-    if (!Array.isArray(names) || names.length > 64 || new Set(names).size !== names.length || names.some((name) => typeof name != "string" || name.split("/").length !== 2 || name.split("/").some((part) => !isAppRoutineName(part)))) return invalidContract2();
-    let parsed = parseRoutineDeclaration({ $schema: ROUTINE_DECLARATION_SCHEMA, access: { ...access, connections: [] } }).access;
-    return freeze({ ...parsed, connections: [...names] });
-  } catch {
-    return invalidContract2();
-  }
-}
-var defineRoutine = (definition) => {
-  if (fields3(definition, ["id", "title", "input", "steps", "result", "access", "responses", "run"]), !isAppRoutineName(definition.id) || definition.title !== void 0 && !title(definition.title) || typeof definition.run != "function") return invalidContract2();
-  let input = definition.input === void 0 ? { schema: empty, default: {} } : schemaMetadata(definition.input), result2 = definition.result === void 0 ? void 0 : schemaMetadata(definition.result).schema, access = accessMetadata(definition.access);
-  fields3(definition.steps ?? {});
-  let executable = Object.fromEntries(Object.entries(definition.steps ?? {}).map(([id3, step]) => (fields3(step, ["title", "run"]), !title(step.title) || typeof step.run != "function" ? invalidContract2() : [id3, Object.freeze({ title: step.title, run: step.run })]))), steps = Object.entries(executable).map(([id3, step]) => ({ id: id3, title: step.title }));
+}, file = (options = {}) => (assertRoutineFields(options, ["storage"]), declaration({ type: "file", ...options })), definitions = /* @__PURE__ */ new WeakMap(), defineRoutine = (definition) => {
+  if (assertRoutineFields(definition, ["id", "title", "input", "steps", "result", "access", "responses", "run"]), !isAppRoutineName(definition.id) || definition.title !== void 0 && !routineTitle(definition.title) || typeof definition.run != "function") return invalidContract3();
+  let input = definition.input === void 0 ? { schema: empty, default: {} } : schemaMetadata(definition.input), result2 = definition.result === void 0 ? void 0 : schemaMetadata(definition.result).schema, access = parseRoutineAccess(definition.access);
+  assertRoutineFields(definition.steps ?? {});
+  let executable = Object.fromEntries(Object.entries(definition.steps ?? {}).map(([id3, step]) => (assertRoutineFields(step, ["title", "run"]), !routineTitle(step.title) || typeof step.run != "function" ? invalidContract3() : [id3, Object.freeze({ title: step.title, run: step.run })]))), steps = Object.entries(executable).map(([id3, step]) => ({ id: id3, title: step.title }));
   parseAppRoutineContract({
     routine: definition.id,
     input: input.schema,
@@ -725,26 +744,26 @@ var defineRoutine = (definition) => {
   });
   let responses = [], ids = /* @__PURE__ */ new Set();
   if (definition.responses !== void 0) {
-    if (!Array.isArray(definition.responses) || definition.responses.length > 64 || Reflect.ownKeys(definition.responses).length !== definition.responses.length + 1) return invalidContract2();
+    if (!Array.isArray(definition.responses) || definition.responses.length > 64 || Reflect.ownKeys(definition.responses).length !== definition.responses.length + 1) return invalidContract3();
     for (let index = 0; index < definition.responses.length; index++) {
       let descriptor = Object.getOwnPropertyDescriptor(definition.responses, String(index));
-      if (!descriptor || !Object.hasOwn(descriptor, "value")) return invalidContract2();
+      if (!descriptor || !Object.hasOwn(descriptor, "value")) return invalidContract3();
       let response2 = descriptor.value;
-      if (fields3(response2, ["id", "results", "run"]), !isAppRoutineName(response2.id) || ids.has(response2.id)) return invalidContract2();
+      if (assertRoutineFields(response2, ["id", "results", "run"]), !isAppRoutineName(response2.id) || ids.has(response2.id)) return invalidContract3();
       if (ids.add(response2.id), response2.results !== void 0)
         try {
-          json(response2.results);
+          assertRoutineJson(response2.results);
         } catch {
-          return invalidContract2();
+          return invalidContract3();
         }
       try {
         responses.push(defineHandler(response2));
       } catch {
-        return invalidContract2();
+        return invalidContract3();
       }
     }
   }
-  let contract = freeze({
+  let contract = freezeRoutineMetadata({
     id: definition.id,
     ...definition.title === void 0 ? {} : { title: definition.title },
     input: input.schema,
@@ -769,9 +788,9 @@ var defineRoutine = (definition) => {
   return definitions.set(captured, { contract, steps: executable, run: definition.run }), captured;
 };
 function inspectRoutineDefinition(definition) {
-  if (!definition || typeof definition != "object") return invalidContract2();
+  if (!definition || typeof definition != "object") return invalidContract3();
   let registered = definitions.get(definition);
-  return registered ? registered.contract : invalidContract2();
+  return registered ? registered.contract : invalidContract3();
 }
 function captureRoutineInput(definition, input) {
   let contract = inspectRoutineDefinition(definition);
@@ -787,29 +806,35 @@ async function executeRoutineDefinition(definition, input, runtime) {
     get(_target, key) {
       return guarded(Reflect.get(value, key, value), value);
     }
-  }) : value, qualify = (value) => value.questions === void 0 ? value : { ...value, questions: value.questions.map((question2) => question2.handler ? contract.responses.some((handler) => handler.id === question2.handler.id) ? { ...question2, handler: { ...question2.handler, id: `${contract.id}/${question2.handler.id}` } } : invalid2() : question2) }, os2 = Object.freeze({
+  }) : value, qualify = (value) => value.questions === void 0 ? value : { ...value, questions: value.questions.map((question2) => question2.handler ? contract.responses.some((handler) => handler.id === question2.handler.id) ? { ...question2, handler: { ...question2.handler, id: `${contract.id}/${question2.handler.id}` } } : invalid3() : question2) }, os2 = Object.freeze({
     ...guarded({
       ...runtime,
-      run: freeze({ ...runtime.run }),
+      run: freezeRoutineMetadata({ ...runtime.run }),
+      connections: { ...runtime.connections, get: async (identity) => {
+        if (!active2 || broken || !contract.access.connections?.includes(identity)) throw new Error("Connection unavailable");
+        let value = await runtime.connections.get(identity);
+        if (!active2 || broken) throw new Error("Run authority ended");
+        return value;
+      } },
       inbox: { ...runtime.inbox, publishAsk: (value, options) => runtime.inbox.publishAsk(qualify(value), options) }
     }),
     step(id3, ...input2) {
       let saved;
       try {
-        if (!active2 || !accepting || broken || !Object.hasOwn(steps, id3) || called.has(id3) || input2.length > 1) return invalid2();
+        if (!active2 || !accepting || broken || !Object.hasOwn(steps, id3) || called.has(id3) || input2.length > 1) return invalid3();
         input2.length && (saved = captureJson(input2[0])), called.add(id3);
       } catch (error) {
         return broken = !0, Promise.reject(error);
       }
       let next = work.then(async () => {
-        if (broken) return invalid2();
+        if (broken) return invalid3();
         reached.add(id3);
         try {
           await runtime.step(id3, { status: "running" });
           let output = await steps[id3].run(saved, os2);
-          if (fields3(output, ["summary", "data"]), !Object.hasOwn(output, "summary") || !Object.hasOwn(output, "data")) return invalid2();
+          if (assertRoutineFields(output, ["summary", "data"]), !Object.hasOwn(output, "summary") || !Object.hasOwn(output, "data")) return invalid3();
           let summary2 = captureJson(output.summary), data3 = captureJson(output.data);
-          return await runtime.step(id3, { status: "completed", summary: summary2, data: data3 }), freeze({ summary: summary2, data: data3 });
+          return await runtime.step(id3, { status: "completed", summary: summary2, data: data3 }), freezeRoutineMetadata({ summary: summary2, data: data3 });
         } catch (error) {
           throw broken = !0, await runtime.step(id3, { status: "failed" }), error;
         }
@@ -829,7 +854,7 @@ async function executeRoutineDefinition(definition, input, runtime) {
   for (let step of contract.steps) reached.has(step.id) || await runtime.step(step.id, { status: "skipped" });
   if (broken) throw failure ?? new AppRoutineContractError("invalid_value");
   if (contract.result !== void 0) return capture(contract.result, result2);
-  if (result2 !== void 0) return invalid2();
+  if (result2 !== void 0) return invalid3();
 }
 
 var DataOperationError = class extends Error {
@@ -847,26 +872,26 @@ var DataOperationError = class extends Error {
   component;
 };
 
-var invalid3 = () => {
+var invalid4 = () => {
   throw new DataOperationError("invalid_query");
 }, historyText = (value) => typeof value == "string" && !/[\u0000\uD800-\uDFFF]/u.test(value);
 function historyVersion(value) {
   return historyText(value) && value.length > 0 && new TextEncoder().encode(value).length <= 1024 && !/[\u0000-\u001f\u007f-\u009f]/.test(value) && !/^[0-9a-f]{40}$/i.test(value);
 }
 function historyProperties(value) {
-  if (!value || typeof value != "object" || Array.isArray(value) || ![Object.prototype, null].includes(Object.getPrototypeOf(value))) return invalid3();
+  if (!value || typeof value != "object" || Array.isArray(value) || ![Object.prototype, null].includes(Object.getPrototypeOf(value))) return invalid4();
   let descriptors = Object.getOwnPropertyDescriptors(value);
-  return Reflect.ownKeys(value).some((key) => typeof key != "string" || !descriptors[key]?.enumerable || !Object.hasOwn(descriptors[key], "value")) ? invalid3() : descriptors;
+  return Reflect.ownKeys(value).some((key) => typeof key != "string" || !descriptors[key]?.enumerable || !Object.hasOwn(descriptors[key], "value")) ? invalid4() : descriptors;
 }
 var historyCollection = (value) => typeof value == "string" && value.length <= 512 && /^[_a-zA-Z0-9][a-zA-Z0-9_-]*$/.test(value), historyCursor = (value) => typeof value == "string" && value.length <= 128 * 1024 && /^history-cursor-v1\.[A-Za-z0-9_-]{1,64}\.[A-Za-z0-9_-]{16}\.[A-Za-z0-9_-]+$/.test(value);
 function historyArray(value) {
-  if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype) return invalid3();
+  if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype) return invalid4();
   let descriptors = Object.getOwnPropertyDescriptors(value);
-  if (Reflect.ownKeys(value).length !== value.length + 1) return invalid3();
+  if (Reflect.ownKeys(value).length !== value.length + 1) return invalid4();
   let result2 = [];
   for (let i = 0; i < value.length; i++) {
     let descriptor = descriptors[i];
-    if (!descriptor?.enumerable || !Object.hasOwn(descriptor, "value")) return invalid3();
+    if (!descriptor?.enumerable || !Object.hasOwn(descriptor, "value")) return invalid4();
     result2.push(descriptor.value);
   }
   return result2;
@@ -874,19 +899,19 @@ function historyArray(value) {
 function captureOptions(value, changes) {
   if (value === void 0) return {};
   let descriptors = historyProperties(value), result2 = {}, allowed = changes ? ["collections", "refs", "from", "through", "limit", "after"] : ["limit", "before"];
-  if (Object.keys(descriptors).some((key) => !allowed.includes(key))) return invalid3();
+  if (Object.keys(descriptors).some((key) => !allowed.includes(key))) return invalid4();
   for (let key of allowed) {
     if (!Object.hasOwn(descriptors, key)) continue;
     let scalar = descriptors[key].value;
     if (key === "collections" || key === "refs") {
       let values = historyArray(scalar);
-      if (!values.length || values.length > (key === "collections" ? 16 : 100) || !values.every(key === "collections" ? historyCollection : validRecordRef) || new Set(values).size !== values.length) return invalid3();
+      if (!values.length || values.length > (key === "collections" ? 16 : 100) || !values.every(key === "collections" ? historyCollection : validRecordRef) || new Set(values).size !== values.length) return invalid4();
       result2[key] = values;
     } else if (key === "limit") {
-      if (!Number.isInteger(scalar) || scalar < 1 || scalar > (changes ? 500 : 100)) return invalid3();
+      if (!Number.isInteger(scalar) || scalar < 1 || scalar > (changes ? 500 : 100)) return invalid4();
       result2.limit = scalar;
     } else {
-      if (!(key === "after" ? historyCursor(scalar) : historyVersion(scalar))) return invalid3();
+      if (!(key === "after" ? historyCursor(scalar) : historyVersion(scalar))) return invalid4();
       result2[key] = scalar;
     }
   }
@@ -894,39 +919,39 @@ function captureOptions(value, changes) {
 }
 var captureHistoryListOptions = (value) => captureOptions(value, !1), captureHistoryChangesOptions = (value) => captureOptions(value, !0);
 function captureHistoryInstant(value) {
-  if (!historyText(value) || value.length > 1024) return invalid3();
+  if (!historyText(value) || value.length > 1024) return invalid4();
   let match = /^(\d{4})-(\d{2})-(\d{2})[Tt](\d{2}):(\d{2}):(\d{2})(?:\.\d+)?([Zz]|([+-])(\d{2}):(\d{2}))$/.exec(value);
-  if (!match) return invalid3();
+  if (!match) return invalid4();
   let [year, month, day, hour, minute, second] = match.slice(1, 7).map(Number), days = new Date(Date.UTC(year, month, 0));
-  return days.setUTCFullYear(year), year < 1 || month < 1 || month > 12 || day < 1 || day > days.getUTCDate() || hour > 23 || minute > 59 || second > 59 || Number(match[9] ?? 0) > 23 || Number(match[10] ?? 0) > 59 ? invalid3() : value;
+  return days.setUTCFullYear(year), year < 1 || month < 1 || month > 12 || day < 1 || day > days.getUTCDate() || hour > 23 || minute > 59 || second > 59 || Number(match[9] ?? 0) > 23 || Number(match[10] ?? 0) > 59 ? invalid4() : value;
 }
 
-var invalid4 = () => {
+var invalid5 = () => {
   throw new DataOperationError("invalid_query");
 };
 function captureRecordsSearchInput(query, options) {
-  if (!historyText(query)) return invalid4();
+  if (!historyText(query)) return invalid5();
   let length = [...query.trim()].length;
-  if (length < 1 || length > 256) return invalid4();
+  if (length < 1 || length > 256) return invalid5();
   if (options === void 0) return { query };
   let descriptors = historyProperties(options);
-  if (Object.keys(descriptors).some((key) => !["collections", "limit"].includes(key))) return invalid4();
+  if (Object.keys(descriptors).some((key) => !["collections", "limit"].includes(key))) return invalid5();
   let captured = {};
   if (Object.hasOwn(descriptors, "collections")) {
     let supplied = descriptors.collections.value;
-    if (!Array.isArray(supplied) || supplied.length < 1 || supplied.length > 16 || Reflect.ownKeys(supplied).length !== supplied.length + 1) return invalid4();
+    if (!Array.isArray(supplied) || supplied.length < 1 || supplied.length > 16 || Reflect.ownKeys(supplied).length !== supplied.length + 1) return invalid5();
     let collections = [];
     for (let index = 0; index < supplied.length; index++) {
       let descriptor = Object.getOwnPropertyDescriptor(supplied, String(index));
-      if (!descriptor?.enumerable || !Object.hasOwn(descriptor, "value") || !historyText(descriptor.value)) return invalid4();
+      if (!descriptor?.enumerable || !Object.hasOwn(descriptor, "value") || !historyText(descriptor.value)) return invalid5();
       collections.push(descriptor.value);
     }
-    if (new Set(collections).size !== collections.length) return invalid4();
+    if (new Set(collections).size !== collections.length) return invalid5();
     captured.collections = collections;
   }
   if (Object.hasOwn(descriptors, "limit")) {
     let supplied = descriptors.limit.value;
-    if (!Number.isInteger(supplied) || supplied < 1 || supplied > 100) return invalid4();
+    if (!Number.isInteger(supplied) || supplied < 1 || supplied > 100) return invalid5();
     captured.limit = supplied;
   }
   return { query, options: captured };
@@ -957,8 +982,8 @@ function captureDataDelete(record3) {
   return !validRecordRef(identity.$ref) || typeof identity.$version != "string" || !identity.$version.length || identity.$version.length > 512 ? invalidChange() : { ref: identity.$ref, expectedVersion: identity.$version };
 }
 function captureDataUpdate(record3, set) {
-  let identity = captureDataDelete(record3), fields6 = mapping(set);
-  return !Object.keys(fields6).length || Object.keys(fields6).some((key) => key.startsWith("$") || ["id", "type"].includes(key)) ? invalidChange() : { ...identity, set: captureValue(fields6) };
+  let identity = captureDataDelete(record3), fields5 = mapping(set);
+  return !Object.keys(fields5).length || Object.keys(fields5).some((key) => key.startsWith("$") || ["id", "type"].includes(key)) ? invalidChange() : { ...identity, set: captureValue(fields5) };
 }
 function captureIdentities(value, update, allowEmpty = !0) {
   if (!Array.isArray(value) || !allowEmpty && !value.length || value.length > 1e4) return invalidChange();
@@ -977,14 +1002,14 @@ function captureDataCreate(value) {
   let row = mapping(value);
   if (!validRecordRef(row.$ref) || Object.keys(row).some((key) => key.startsWith("$") && !["$ref", "$filing"].includes(key)))
     return invalidChange();
-  let { $ref: ref, $filing, ...fields6 } = row, filing;
+  let { $ref: ref, $filing, ...fields5 } = row, filing;
   if ($filing !== void 0) {
     let components = mapping($filing);
     if (Object.entries(components).some(([name, value2]) => !/^[a-zA-Z][a-zA-Z0-9_-]*$/.test(name) || ["constructor", "prototype"].includes(name) || typeof value2 != "string" || !/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/.test(value2)))
       return invalidChange();
     filing = { ...components };
   }
-  return { ref, fields: captureValue(fields6), ...filing ? { filing } : {} };
+  return { ref, fields: captureValue(fields5), ...filing ? { filing } : {} };
 }
 function captureDataChanges(updatesValue, createsValue = [], deletesValue = []) {
   let updates = captureDataUpdates(updatesValue, !0);
@@ -992,8 +1017,8 @@ function captureDataChanges(updatesValue, createsValue = [], deletesValue = [])
   let creates = createsValue.map((item) => {
     let row = mapping(item);
     if (Object.keys(row).some((key) => !["ref", "fields", "filing"].includes(key)) || !Object.hasOwn(row, "ref") || !Object.hasOwn(row, "fields")) return invalidChange();
-    let fields6 = mapping(row.fields);
-    return Object.keys(fields6).some((key) => key.startsWith("$")) ? invalidChange() : captureDataCreate({ ...fields6, $ref: row.ref, ...Object.hasOwn(row, "filing") ? { $filing: row.filing } : {} });
+    let fields5 = mapping(row.fields);
+    return Object.keys(fields5).some((key) => key.startsWith("$")) ? invalidChange() : captureDataCreate({ ...fields5, $ref: row.ref, ...Object.hasOwn(row, "filing") ? { $filing: row.filing } : {} });
   }), deletes = captureIdentities(deletesValue, !1), refs = [...updates, ...creates, ...deletes].map((item) => item.ref);
   return !refs.length || refs.length > 1e4 || new Set(refs).size !== refs.length ? invalidChange() : { updates, creates, deletes };
 }
@@ -1025,16 +1050,16 @@ function routineTransport() {
   return installed;
 }
 
-var memberContext;
-function installMemberContext(resolve) {
-  return memberContext = resolve, () => {
-    memberContext === resolve && (memberContext = void 0);
+var memberContext, retainedContext;
+function installMemberContext(resolve, retained = resolve) {
+  return memberContext = resolve, retainedContext = retained, () => {
+    memberContext === resolve && (memberContext = void 0, retainedContext = void 0);
   };
 }
-async function resolveAppContext() {
+async function resolveAppContext(retained = !1) {
   let host = memberContext;
   if (!host) throw new Error("App context unavailable.");
-  let context2 = await host();
+  let context2 = await (retained ? retainedContext : host)();
   if (host !== memberContext || !context2.isCurrent() || context2.expiresAt <= Date.now() || context2.kind !== "local" && (typeof context2.accessToken != "string" || !/^[^\s]{1,8192}$/.test(context2.accessToken)))
     throw new Error("App context unavailable.");
   return context2;
@@ -1059,13 +1084,22 @@ async function resolveFilesContext() {
     let environment = {}, host = memberContext;
     if (host) {
       let context2 = await host();
-      if (context2.kind === "local") throw new Error();
+      if (host !== memberContext || !context2.isCurrent() || context2.expiresAt <= Date.now()) throw new Error();
+      if (context2.kind === "local") return {
+        url: `private:app:${context2.workspace}/${context2.memberId}`,
+        headers: {},
+        isCurrent: context2.isCurrent,
+        signal: context2.signal,
+        local: void 0,
+        localFiles: context2.requestFiles
+      };
       if (!Number.isFinite(context2.expiresAt) || context2.expiresAt <= Date.now() || typeof context2.accessToken != "string" || !/^[^\s]{1,8192}$/.test(context2.accessToken)) throw new Error();
       return {
         ...filesContext(context2.workspace, context2.endpoint, { authorization: `Bearer ${context2.accessToken}` }),
         isCurrent: context2.isCurrent,
         local: void 0,
-        localFiles: void 0
+        localFiles: void 0,
+        signal: void 0
       };
     }
     throw new Error();
@@ -1178,7 +1212,65 @@ var data = {
   }
 };
 
-var MAX_BYTES = 16 * 1024 * 1024, PART_BYTES = 8 * 1024 * 1024, METADATA_BYTES = 4096, RESULT_BYTES = 16 * 1024, CONTROL_RESULT_BYTES = 128 * 1024, TIMEOUT_MS = 3e4, MAX_ACTIVE = 4, ATTEMPTS = 2, active = 0, invalid5 = () => new FileOperationError("invalid_input", 400), unavailable = () => new FileOperationError("unavailable", 503, !0), failures = {
+async function hostedContent(url, init2, parent, upstream = fetch, check = async () => {
+}, failure) {
+  let delivery = new AbortController(), abort = () => delivery.abort(parent.reason);
+  parent.addEventListener("abort", abort, { once: !0 }), parent.aborted && abort();
+  let detach = () => parent.removeEventListener("abort", abort);
+  try {
+    let response2 = await upstream(url, { ...init2, signal: delivery.signal });
+    try {
+      if (await check(), delivery.signal.aborted) throw failure?.() ?? new FileOperationError("unavailable", 503, !0);
+    } catch (error) {
+      throw response2.body?.cancel().catch(() => {
+      }), error;
+    }
+    if (!response2.body)
+      return detach(), response2;
+    let source = response2.body, reader, settled = !1, output, cancel = async (reason) => {
+      if (!settled) {
+        settled = !0, detach(), delivery.signal.removeEventListener("abort", stop), delivery.abort(reason);
+        try {
+          await (reader ? reader.cancel(reason) : source.cancel(reason));
+        } catch (error) {
+          if (error !== delivery.signal.reason && !(error instanceof Error && error.name === "AbortError")) throw error;
+        } finally {
+          reader?.releaseLock();
+        }
+      }
+    }, stop = () => {
+      if (settled) return;
+      let error = failure?.() ?? delivery.signal.reason;
+      cancel(error).catch(() => {
+      }), output.error(error);
+    }, body = new ReadableStream({
+      start(controller) {
+        output = controller, delivery.signal.addEventListener("abort", stop, { once: !0 }), delivery.signal.aborted && stop();
+      },
+      async pull(controller) {
+        try {
+          if (await check(), settled) return;
+          reader ??= source.getReader();
+          let { done, value } = await reader.read();
+          if (await check(), settled) return;
+          done ? (settled = !0, detach(), delivery.signal.removeEventListener("abort", stop), reader.releaseLock(), controller.close()) : controller.enqueue(value);
+        } catch (error) {
+          if (settled) return;
+          controller.error(failure?.() ?? error), await cancel(error).catch(() => {
+          });
+        }
+      },
+      cancel
+    }, { highWaterMark: 0 }), wrapped = new Response(body, { status: response2.status, statusText: response2.statusText, headers: response2.headers });
+    for (let key of ["url", "redirected", "type"])
+      Object.defineProperty(wrapped, key, { value: response2[key] });
+    return wrapped;
+  } catch (error) {
+    throw detach(), delivery.abort(error), error;
+  }
+}
+
+var MAX_BYTES = 16 * 1024 * 1024, PART_BYTES = 8 * 1024 * 1024, METADATA_BYTES = 4096, RESULT_BYTES = 16 * 1024, CONTROL_RESULT_BYTES = 128 * 1024, TIMEOUT_MS = 3e4, MAX_ACTIVE = 4, ATTEMPTS = 2, active = 0, invalid6 = () => new FileOperationError("invalid_input", 400), unavailable = () => new FileOperationError("unavailable", 503, !0), failures = {
   400: ["invalid_input", "unsupported_context"],
   401: ["unauthenticated"],
   403: ["access_denied"],
@@ -1188,19 +1280,26 @@ var MAX_BYTES = 16 * 1024 * 1024, PART_BYTES = 8 * 1024 * 1024, METADATA_BYTES =
   429: ["capacity"],
   503: ["integrity", "unavailable"]
 };
-async function boundedBytes(stream, limit) {
+async function boundedBytes(stream, limit, signal) {
   if (!stream) return new Uint8Array();
-  let reader = stream.getReader(), bytes = new Uint8Array(limit), size = 0;
+  let reader = stream.getReader(), bytes = new Uint8Array(limit), size = 0, cancel = () => {
+    reader.cancel().catch(() => {
+    });
+  };
+  signal?.addEventListener("abort", cancel, { once: !0 }), signal?.aborted && cancel();
   try {
     for (; ; ) {
       let { done, value } = await reader.read();
+      if (signal?.aborted) throw unavailable();
       if (done) break;
-      if (!(value instanceof Uint8Array)) throw invalid5();
+      if (!(value instanceof Uint8Array)) throw invalid6();
       if (size += value.byteLength, size > limit) throw new FileOperationError("request_too_large", 413);
       bytes.set(value, size - value.byteLength);
     }
+  } catch (error) {
+    throw cancel(), error;
   } finally {
-    reader.releaseLock();
+    signal?.removeEventListener("abort", cancel), reader.releaseLock();
   }
   return bytes.slice(0, size);
 }
@@ -1224,50 +1323,6 @@ async function result(response2, maximum = RESULT_BYTES) {
     throw unavailable();
   }
 }
-async function hostedContent(url, init2, parent, upstream = fetch) {
-  let delivery = new AbortController(), abort = () => delivery.abort(parent.reason);
-  parent.addEventListener("abort", abort, { once: !0 }), parent.aborted && abort();
-  let detach = () => parent.removeEventListener("abort", abort);
-  try {
-    let response2 = await upstream(url, { ...init2, signal: delivery.signal });
-    if (delivery.signal.aborted)
-      throw response2.body?.cancel().catch(() => {
-      }), unavailable();
-    if (!response2.body)
-      return detach(), response2;
-    let source = response2.body, reader, settled = !1, cancel = async (reason) => {
-      if (!settled) {
-        settled = !0, detach(), delivery.abort(reason);
-        try {
-          await (reader ? reader.cancel(reason) : source.cancel(reason));
-        } catch (error) {
-          if (error !== delivery.signal.reason && !(error instanceof Error && error.name === "AbortError")) throw error;
-        } finally {
-          reader?.releaseLock();
-        }
-      }
-    }, body = new ReadableStream({
-      async pull(controller) {
-        try {
-          reader ??= source.getReader();
-          let { done, value } = await reader.read();
-          if (settled) return;
-          done ? (settled = !0, detach(), reader.releaseLock(), controller.close()) : controller.enqueue(value);
-        } catch (error) {
-          if (settled) return;
-          controller.error(error), await cancel(error).catch(() => {
-          });
-        }
-      },
-      cancel
-    }, { highWaterMark: 0 }), wrapped = new Response(body, { status: response2.status, statusText: response2.statusText, headers: response2.headers });
-    for (let key of ["url", "redirected", "type"])
-      Object.defineProperty(wrapped, key, { value: response2[key] });
-    return wrapped;
-  } catch (error) {
-    throw detach(), delivery.abort(error), error;
-  }
-}
 async function send(suffix, init2, descriptor, initial, parent) {
   let original = initial, checkCurrent = (context2 = original) => {
     if (parent?.aborted) throw unavailable();
@@ -1278,7 +1333,7 @@ async function send(suffix, init2, descriptor, initial, parent) {
     let context2 = await resolveFilesContext();
     checkCurrent(context2);
     try {
-      let response2 = await (async () => {
+      let response2 = context2.localFiles ? await context2.localFiles(suffix, init2, parent) : await (async () => {
         let url = `${context2.url}${suffix}`, request2 = {
           ...init2,
           signal: parent,
@@ -1322,7 +1377,7 @@ async function send(suffix, init2, descriptor, initial, parent) {
   throw unavailable();
 }
 function idPath(id3) {
-  if (typeof id3 != "string" || !FILE_ID_PATTERN.test(id3)) throw invalid5();
+  if (typeof id3 != "string" || !FILE_ID_PATTERN.test(id3)) throw invalid6();
   return `/${id3}`;
 }
 async function multipartCreate(input, metadata, exchange, release = () => {
@@ -1365,18 +1420,18 @@ async function multipartCreate(input, metadata, exchange, release = () => {
           if (!chunk || offset === chunk.byteLength) {
             chunk = void 0, offset = 0;
             let value2 = await next();
-            if (value2.done || !(value2.value instanceof Uint8Array) || (chunk = value2.value, chunk.byteLength > metadata.size - sent - filled)) throw invalid5();
+            if (value2.done || !(value2.value instanceof Uint8Array) || (chunk = value2.value, chunk.byteLength > metadata.size - sent - filled)) throw invalid6();
           }
           let take = Math.min(length - filled, chunk.byteLength - offset);
           part.set(chunk.subarray(offset, offset + take), filled), filled += take, offset += take, offset === chunk.byteLength && (chunk = void 0, offset = 0);
         }
       }
-      if (part.byteLength !== length) throw invalid5();
+      if (part.byteLength !== length) throw invalid6();
       if (reader && sent + length === metadata.size)
         for (lastProgress = Date.now(); ; ) {
           let value2 = await next();
           if (value2.done) break;
-          if (!(value2.value instanceof Uint8Array) || value2.value.byteLength) throw invalid5();
+          if (!(value2.value instanceof Uint8Array) || value2.value.byteLength) throw invalid6();
         }
       let value = await request2((signal) => exchange(`${route}/part`, {
         method: "POST",
@@ -1390,7 +1445,7 @@ async function multipartCreate(input, metadata, exchange, release = () => {
     }
     if (upload) for (let name of Object.keys(upload.file.enrichments)) {
       let bytes = await request2(() => upload.enrichment(name));
-      if (bytes.byteLength !== upload.file.enrichments[name].size || bytes.byteLength > MAX_BYTES) throw invalid5();
+      if (bytes.byteLength !== upload.file.enrichments[name].size || bytes.byteLength > MAX_BYTES) throw invalid6();
       await request2((signal) => exchange(`${route}/enrichments/${encodeURIComponent(name)}`, {
         method: "POST",
         headers: { "content-type": "application/octet-stream", "x-oddington-transfer": ticket },
@@ -1415,20 +1470,22 @@ async function multipartCreate(input, metadata, exchange, release = () => {
 async function operation(work, initial, parent) {
   let context2 = initial ?? await resolveFilesContext();
   if (active >= MAX_ACTIVE) throw new FileOperationError("capacity", 429, !0);
-  return active++, timed(async (signal) => {
+  active++;
+  let execute = async (signal2) => {
     try {
-      return await work(context2, signal);
+      return await work(context2, signal2);
     } finally {
       active--;
     }
-  }, parent).catch((error) => {
+  }, signal = context2.signal && parent ? AbortSignal.any([context2.signal, parent]) : context2.signal ?? parent;
+  return context2.localFiles ? execute(signal ?? new AbortController().signal) : timed(execute, signal).catch((error) => {
     throw error instanceof FileOperationError ? error : unavailable();
   });
 }
 function contentPath(id3, name) {
   let path = idPath(id3);
   if (name === void 0) return `${path}/content`;
-  if (!safeEnrichmentName(name)) throw invalid5();
+  if (!safeEnrichmentName(name)) throw invalid6();
   return `${path}/enrichments/${encodeURIComponent(name)}/content`;
 }
 async function read(id3, names) {
@@ -1437,12 +1494,12 @@ async function read(id3, names) {
     let path = contentPath(id3, names);
     return operation((context3, signal) => send(path, { method: "GET" }, !1, context3, signal), context2);
   }
-  if (!Array.isArray(names)) throw invalid5();
+  if (!Array.isArray(names)) throw invalid6();
   let distinct = [], seen = /* @__PURE__ */ new Set();
   for (let name of names) {
-    if (typeof name != "string" || !safeEnrichmentName(name)) throw invalid5();
+    if (typeof name != "string" || !safeEnrichmentName(name)) throw invalid6();
     if (!seen.has(name)) {
-      if (seen.size === 16) throw invalid5();
+      if (seen.size === 16) throw invalid6();
       seen.add(name), distinct.push(name);
     }
   }
@@ -1477,11 +1534,11 @@ var files = {
   async create(input, options) {
     let context2 = await resolveFilesContext();
     if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "size", "path", "name", "storage", "csv"].includes(key)) || options !== void 0 && (!options || typeof options != "object" || Array.isArray(options) || Object.keys(options).some((key) => key !== "requestKey")))
-      throw invalid5();
+      throw invalid6();
     let blob = input.file instanceof Blob, array3 = input.file instanceof Uint8Array, stream = input.file instanceof ReadableStream;
-    if (!blob && !array3 && !stream) throw invalid5();
+    if (!blob && !array3 && !stream) throw invalid6();
     let intrinsic = blob ? input.file.size : array3 ? input.file.byteLength : void 0;
-    if (intrinsic !== void 0 && input.size !== void 0 && input.size !== intrinsic) throw invalid5();
+    if (intrinsic !== void 0 && input.size !== void 0 && input.size !== intrinsic) throw invalid6();
     let name = input.name;
     name === void 0 && blob && "name" in input.file && typeof input.file.name == "string" && (name = typeof globalThis.File < "u" && input.file instanceof globalThis.File ? input.file.name : input.file.name.split(/[\\/]/).at(-1));
     let metadata = parseFileCreateMetadata({
@@ -1493,17 +1550,38 @@ var files = {
       ...blob && input.file.type === "application/pdf" ? { inputMediaType: "application/pdf" } : {},
       requestKey: options?.requestKey === void 0 ? routineTransport()?.key("files") ?? crypto.randomUUID() : options.requestKey
     }, FILE_ORIGINAL_MAX_BYTES);
-    if (!context2.local && metadata.storage === "local") throw new FileOperationError("unsupported_context", 400);
+    if (!context2.local && !context2.localFiles && metadata.storage === "local") throw new FileOperationError("unsupported_context", 400);
     let header = encodeURIComponent(JSON.stringify(metadata));
-    if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid5();
+    if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid6();
     if (active >= MAX_ACTIVE) throw new FileOperationError("capacity", 429, !0);
-    return active++, metadata.size > MAX_BYTES ? multipartCreate(input, metadata, (suffix, init2, kind, signal) => kind === !0 ? send(suffix, init2, !0, context2, signal) : send(suffix, init2, "control", context2, signal)) : timed(async (signal) => {
+    if (active++, context2.localFiles && !routineTransport() && metadata.size > MAX_BYTES) {
+      let signal = context2.signal ?? new AbortController().signal, file2 = input.file, offset = 0, body = file2 instanceof Blob ? context2.signal ? file2 : file2.stream() : file2 instanceof ReadableStream ? file2 : new ReadableStream({
+        pull(controller) {
+          if (offset === file2.byteLength) {
+            controller.close();
+            return;
+          }
+          let end = Math.min(offset + 256 * 1024, file2.byteLength);
+          controller.enqueue(file2.subarray(offset, end)), offset = end;
+        }
+      }, { highWaterMark: 0 });
+      try {
+        return await send("", { method: "POST", headers: {
+          "content-type": "application/octet-stream",
+          "x-oddington-file": header
+        }, body }, !0, context2, signal);
+      } finally {
+        active--;
+      }
+    }
+    return metadata.size > MAX_BYTES ? multipartCreate(input, metadata, (suffix, init2, kind, signal) => kind === !0 ? send(suffix, init2, !0, context2, signal) : send(suffix, init2, "control", context2, signal)) : timed(async (signal) => {
       try {
         let bytes = array3 ? input.file.slice() : await boundedBytes(
           blob ? input.file.stream() : input.file,
-          metadata.size
+          metadata.size,
+          signal
         );
-        if (bytes.byteLength !== metadata.size) throw invalid5();
+        if (bytes.byteLength !== metadata.size) throw invalid6();
         if (signal.aborted) throw unavailable();
         return await send("", {
           method: "POST",
@@ -1513,13 +1591,13 @@ var files = {
       } finally {
         active--;
       }
-    }).catch((error) => {
+    }, context2.signal).catch((error) => {
       throw error instanceof FileOperationError ? error : unavailable();
     });
   },
   async enrich(input) {
     let context2 = await resolveFilesContext();
-    if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "name", "content", "mediaType", "replace"].includes(key)) || typeof input.content != "string" && !(input.content instanceof Uint8Array)) throw invalid5();
+    if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "name", "content", "mediaType", "replace"].includes(key)) || typeof input.content != "string" && !(input.content instanceof Uint8Array)) throw invalid6();
     let path = `${idPath(input.file)}/enrichments`;
     if (typeof input.content == "string" ? input.content.length > MAX_BYTES : input.content.byteLength > MAX_BYTES)
       throw new FileOperationError("request_too_large", 413);
@@ -1536,7 +1614,7 @@ var files = {
         ...input.mediaType === void 0 ? {} : { mediaType: input.mediaType },
         ...input.replace === void 0 ? {} : { replace: input.replace }
       }, MAX_BYTES), header = encodeURIComponent(JSON.stringify(metadata));
-      if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid5();
+      if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid6();
       let result2 = await send(path, { method: "POST", headers: {
         "content-type": "application/octet-stream",
         "x-oddington-enrichment": header
@@ -1557,6 +1635,24 @@ function validGoogleScopes(value) {
 
 var ROUTINE_CONNECTION_CREDENTIALS_ENV = "ODDINGTON_ROUTINE_CONNECTION_CREDENTIALS";
 var connectionUuid = (v) => typeof v == "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(v);
+function runtimeConnection(lease) {
+  return lease.provider === "gmail" ? {
+    id: `gmail/${lease.name}`,
+    provider: lease.provider,
+    name: lease.name,
+    accountEmail: lease.accountEmail,
+    scopes: [...lease.scopes],
+    accessToken: lease.accessToken,
+    expiresAt: lease.expiresAt
+  } : {
+    id: `airtable/${lease.name}`,
+    provider: lease.provider,
+    name: lease.name,
+    baseId: lease.baseId,
+    accessToken: lease.accessToken,
+    runExpiresAt: lease.runExpiresAt
+  };
+}
 function parseConnectionLease(raw, now = Date.now()) {
   let v = raw;
   if (!v || typeof v != "object" || Array.isArray(v) || !connectionUuid(v.connectionId) || !connectionUuid(v.runId) || typeof v.name != "string" || !/^[a-z0-9][a-z0-9-]{0,62}$/.test(v.name) || typeof v.accessToken != "string" || !/^[A-Za-z0-9._~+/-]{1,8192}={0,2}$/.test(v.accessToken))
@@ -1595,7 +1691,7 @@ function keys2(v, allowed, required = allowed) {
 function text2(v) {
   return typeof v == "string" && v.length > 0 && v.length <= 1024;
 }
-function fields4(v, nonempty = !1) {
+function fields3(v, nonempty = !1) {
   let result2 = object3(v);
   (nonempty && !Object.keys(result2).length || Object.keys(result2).some((k) => !text2(k))) && fail2("Invalid Airtable fields");
   try {
@@ -1606,7 +1702,7 @@ function fields4(v, nonempty = !1) {
 }
 function record2(v) {
   let r = object3(v);
-  return (!recordId(r.id) || r.createdTime !== void 0 && (typeof r.createdTime != "string" || !Number.isFinite(Date.parse(r.createdTime)))) && fail2("Malformed Airtable record"), { id: r.id, ...r.createdTime === void 0 ? {} : { createdTime: r.createdTime }, fields: fields4(r.fields) };
+  return (!recordId(r.id) || r.createdTime !== void 0 && (typeof r.createdTime != "string" || !Number.isFinite(Date.parse(r.createdTime)))) && fail2("Malformed Airtable record"), { id: r.id, ...r.createdTime === void 0 ? {} : { createdTime: r.createdTime }, fields: fields3(r.fields) };
 }
 function equal(a, b) {
   if (a === b) return !0;
@@ -1618,7 +1714,9 @@ function equal(a, b) {
   ));
 }
 function createConnections(transport) {
-  return { airtable(name) {
+  return { async get() {
+    throw new Error("Connection unavailable");
+  }, airtable(name) {
     (typeof name != "string" || !/^[a-z0-9][a-z0-9-]{0,62}$/.test(name)) && fail2("Invalid Airtable connection name");
     let call = (operation2, input) => transport(name, operation2, input);
     return {
@@ -1720,10 +1818,10 @@ async function executeAirtableOperation(authority, operation2, raw, options = {}
   mutation || fail2("Unsupported Airtable operation"), keys2(input, ["table", "records"]), (!Array.isArray(input.records) || !input.records.length || input.records.length > 10) && fail2("Invalid Airtable batch");
   let kind = operation2.slice(8), ids = /* @__PURE__ */ new Set(), records = input.records.map((value) => {
     let r = object3(value);
-    if (keys2(r, kind === "create" ? ["fields"] : kind === "update" ? ["id", "expected", "set"] : ["id", "expected"]), kind === "create") return { fields: fields4(r.fields, !0) };
+    if (keys2(r, kind === "create" ? ["fields"] : kind === "update" ? ["id", "expected", "set"] : ["id", "expected"]), kind === "create") return { fields: fields3(r.fields, !0) };
     (!recordId(r.id) || ids.has(r.id)) && fail2("Invalid Airtable batch record ID"), ids.add(r.id);
-    let set = kind === "update" ? fields4(r.set, !0) : void 0;
-    return set && Object.values(set).some((value2) => value2 === null) && fail2("Airtable guard null cannot be an update value"), { id: r.id, expected: fields4(r.expected), ...set ? { set } : {} };
+    let set = kind === "update" ? fields3(r.set, !0) : void 0;
+    return set && Object.values(set).some((value2) => value2 === null) && fail2("Airtable guard null cannot be an update value"), { id: r.id, expected: fields3(r.expected), ...set ? { set } : {} };
   });
   for (let r of records) {
     if (!("id" in r)) continue;
@@ -1800,46 +1898,19 @@ async function reportLocalRoutineEffect(value) {
   await observer?.(value);
 }
 
-var connections = /* @__PURE__ */ createConnections(async (name, operation2, input) => {
-  try {
-    let installed2 = routineTransport();
-    if (installed2) return await installed2.request("airtable", { name, operation: operation2, input: serializable(input) });
-    let managed = process.env[MANAGED_CONNECTION_CAPABILITY_ENV];
-    if (managed) {
-      let client = managedConnections(JSON.parse(managed)).airtable(name);
-      return operation2 === "tables.list" ? await client.tables.list() : await client.records[operation2.slice(8)](input);
-    }
-    let raw = JSON.parse(process.env[ROUTINE_CONNECTION_CREDENTIALS_ENV] ?? "[]");
-    if (!Array.isArray(raw)) throw new Error();
-    let leases = raw.map((value) => parseConnectionLease(value));
-    if (leases.some((lease2) => lease2.provider !== "airtable") || new Set(leases.map((lease2) => lease2.name)).size !== leases.length) throw new Error();
-    let lease = leases.find((lease2) => lease2.name === name);
-    if (!lease || lease.provider !== "airtable") throw new Error();
-    let writing = ["records.create", "records.update", "records.delete"].includes(operation2), captured = serializable(input), result2;
-    try {
-      result2 = await executeAirtableOperation(lease, operation2, captured);
-    } catch (error) {
-      throw writing && error instanceof AirtableOperationError && await reportLocalRoutineEffect({
-        type: "effect",
-        connection: `airtable/${name}`,
-        operation: operation2,
-        input: captured,
-        effect: error.effect,
-        receipts: error.receipts
-      }), error;
-    }
-    return writing && await reportLocalRoutineEffect({
-      type: "effect",
-      connection: `airtable/${name}`,
-      operation: operation2,
-      input: captured,
-      effect: "confirmed",
-      receipts: [result2.receipt]
-    }), result2;
-  } catch (error) {
-    throw error instanceof AirtableOperationError ? error : new AirtableOperationError("Airtable connection unavailable");
-  }
+var local;
+var airtable = /* @__PURE__ */ createConnections(async (name, operation2, input) => {
+  throw new AirtableOperationError("Airtable connection unavailable");
 });
+function runtimeConnections() {
+  return {
+    ...airtable,
+    async get(identity) {
+      throw new Error("Connection unavailable");
+    }
+  };
+}
+var connections = /* @__PURE__ */ runtimeConnections();
 
 var LOCAL_ROUTINE_VALUE_BYTES = 256 * 1024;
 
@@ -1965,11 +2036,11 @@ function array2(value) {
     return !!descriptor?.enumerable && "value" in descriptor;
   })), value;
 }
-function json2(value, ancestors = /* @__PURE__ */ new Set()) {
+function json(value, ancestors = /* @__PURE__ */ new Set()) {
   if (value === null || typeof value == "boolean" || typeof value == "string" || typeof value == "number" && Number.isFinite(value)) return value;
   assert(value && typeof value == "object" && !ancestors.has(value)), ancestors.add(value);
   try {
-    return Array.isArray(value) ? array2(value).map((entry) => json2(entry, ancestors)) : Object.fromEntries(Object.entries(object4(value)).map(([key, entry]) => [key, json2(entry, ancestors)]));
+    return Array.isArray(value) ? array2(value).map((entry) => json(entry, ancestors)) : Object.fromEntries(Object.entries(object4(value)).map(([key, entry]) => [key, json(entry, ancestors)]));
   } finally {
     ancestors.delete(value);
   }
@@ -2025,7 +2096,7 @@ function inboxFile(value) {
   let details = object4(file2.details);
   details.kind === "csv" ? (keys3(details, ["kind", "encoding", "delimiter", "headerRow", "dataRows"]), assert(file2.mediaType === "text/csv" && ["utf-8", "windows-1252"].includes(String(details.encoding)) && [",", ";", "	"].includes(String(details.delimiter)) && integer(details.headerRow, 0) && integer(details.dataRows, 0))) : details.kind === "pdf" ? (keys3(details, ["kind", "pages"], ["kind"]), assert(file2.mediaType === "application/pdf" && (!("pages" in details) || integer(details.pages)))) : (keys3(details, ["kind"]), assert(details.kind === "other" && !["text/csv", "application/pdf"].includes(file2.mediaType)));
 }
-function fields5(value) {
+function fields4(value) {
   let labels = array2(value).map((value2) => {
     let field = object4(value2);
     return keys3(field, ["label", "value"]), assert(text3(field.label) && text3(field.value)), field.label;
@@ -2050,13 +2121,13 @@ function block(value) {
     ["kind", "label", entry.kind === "record" ? "record" : entry.kind === "records" ? "records" : "files"]
   ), assert(text3(entry.label) && (!("initiallyExpanded" in entry) || typeof entry.initiallyExpanded == "boolean") && (!("view" in entry) || text3(entry.view) && entry.view === entry.view.trim())), entry.kind === "record") {
     let record3 = object4(entry.record);
-    keys3(record3, ["ref", "title", "fields"]), assert(text3(record3.ref) && record3.ref === record3.ref.trim() && text3(record3.title)), fields5(record3.fields);
+    keys3(record3, ["ref", "title", "fields"]), assert(text3(record3.ref) && record3.ref === record3.ref.trim() && text3(record3.title)), fields4(record3.fields);
     return;
   }
   if (entry.kind === "records") {
     let records = array2(entry.records), refs = records.map((value2) => {
       let record3 = object4(value2);
-      return keys3(record3, ["ref", "title", "description", "facts", "view"], ["ref", "title"]), assert(text3(record3.ref) && record3.ref === record3.ref.trim() && text3(record3.title)), "description" in record3 && assert(text3(record3.description)), "facts" in record3 && fields5(record3.facts), "view" in record3 && assert(text3(record3.view) && record3.view === record3.view.trim()), record3.ref;
+      return keys3(record3, ["ref", "title", "description", "facts", "view"], ["ref", "title"]), assert(text3(record3.ref) && record3.ref === record3.ref.trim() && text3(record3.title)), "description" in record3 && assert(text3(record3.description)), "facts" in record3 && fields4(record3.facts), "view" in record3 && assert(text3(record3.view) && record3.view === record3.view.trim()), record3.ref;
     });
     assert(records.length > 0 && new Set(refs).size === refs.length);
     return;
@@ -2068,12 +2139,12 @@ function response(value) {
   let answer = object4(value);
   return assert(Object.keys(answer).every((key) => ["selection", "note"].includes(key))), typeof answer.selection == "string" ? assert(text3(answer.selection) && answer.selection === answer.selection.trim()) : recordReference(answer.selection), Object.hasOwn(answer, "note") && assert(text3(answer.note)), answer;
 }
-function parseInboxRequest(value, questionListContext = "local") {
+function parseInboxRequest(value) {
   try {
     let envelope = object4(value);
     assert(Object.keys(envelope).sort().join(",") === "input,operation"), assert(typeof envelope.operation == "string" && Object.hasOwn(operations, envelope.operation));
     let operation2 = envelope.operation, input = { ...object4(envelope.input) }, required = operations[operation2];
-    assert(required.every((key) => Object.hasOwn(input, key)) && Object.keys(input).every((key) => required.includes(key) || operation2 === "questions.searchRecords" && key === "selected" || (operation2 === "items.list" || operation2 === "questions.list") && key === "beforeNumber" || operation2 === "questions.list" && questionListContext === "hosted" && key === "routines")), operation2 === "questions.list" && questionListContext === "hosted" && (assert(Object.hasOwn(input, "routines")), assert(array2(input.routines).every(isAppRoutineName)));
+    assert(required.every((key) => Object.hasOwn(input, key)) && Object.keys(input).every((key) => required.includes(key) || operation2 === "questions.searchRecords" && key === "selected" || (operation2 === "items.list" || operation2 === "questions.list") && key === "beforeNumber" || operation2 === "questions.list" && key === "routines")), operation2 === "questions.list" && (assert(Object.hasOwn(input, "routines")), assert(array2(input.routines).every(isAppRoutineName)));
     for (let key of ["itemId", "personId", "fileId"]) key in input && assert(id2(input[key]));
     return "revision" in input && assert(integer(input.revision)), "beforeNumber" in input && assert(integer(input.beforeNumber)), "questionId" in input && assert(text3(input.questionId) && input.questionId === input.questionId.trim()), "title" in input && assert(text3(input.title)), "lifecycle" in input && assert(input.lifecycle === "open" || input.lifecycle === "closed"), "query" in input && assert(text3(input.query, !0) && input.query.length <= 256), "selected" in input && recordReference(input.selected), "response" in input && response(input.response), assert(new TextEncoder().encode(JSON.stringify(envelope)).byteLength <= INBOX_INPUT_BYTES), "routines" in input && (input.routines = [...new Set(input.routines)]), { operation: operation2, input };
   } catch {
@@ -2088,10 +2159,10 @@ function parseInboxCurrent(value) {
   };
 }
 function parseInboxItem(value) {
-  let item = object4(json2(value));
-  return assert(id2(item.id) && id2(item.workspaceId) && integer(item.number) && integer(item.revision) && integer(item.activityVersion, 0) && ["ask", "digest"].includes(String(item.kind)) && ["open", "closed"].includes(String(item.lifecycle)) && text3(item.title) && text3(item.description, !0) && text3(item.author) && date(item.publishedAt) && optionalDate(item.seenAt) && optionalDate(item.digestReadAt)), item.outcome !== null && assert(text3(object4(item.outcome).outcome)), array2(item.body).forEach(block), array2(item.views).forEach((value2) => {
+  let item = object4(json(value));
+  return assert(id2(item.id) && id2(item.workspaceId) && integer(item.number) && integer(item.revision) && integer(item.activityVersion, 0) && ["ask", "digest"].includes(String(item.kind)) && ["open", "closed"].includes(String(item.lifecycle)) && text3(item.title) && text3(item.description, !0) && text3(item.author) && date(item.publishedAt) && optionalDate(item.seenAt) && optionalDate(item.digestReadAt)), item.outcome !== null && assert(text3(object4(item.outcome).outcome)), "canonicalRoutineId" in item && assert(item.canonicalRoutineId === null || isAppRoutineName(item.canonicalRoutineId)), item.kind === "ask" ? askMetadata(item) : assert(!("tags" in item) && !("recordRefs" in item)), array2(item.body).forEach(block), array2(item.views).forEach((value2) => {
     let view = object4(value2);
-    assert(text3(view.id) && text3(view.view) && text3(view.implementation)), json2(view.input);
+    assert(text3(view.id) && text3(view.view) && text3(view.implementation)), json(view.input);
   }), array2(item.people).forEach((value2) => {
     let person = object4(value2);
     assert(id2(person.id) && text3(person.name));
@@ -2127,18 +2198,26 @@ function parseInboxItem(value) {
   }), item;
 }
 function parseAnswerableQuestion(value) {
-  let entry = object4(json2(value));
-  keys3(entry, ["item", "origin", "question", "recordRefs"]);
-  let item = object4(entry.item);
-  keys3(item, ["id", "number", "revision", "title", "href"]), assert(id2(item.id) && integer(item.number) && integer(item.revision) && text3(item.title) && text3(item.href));
-  let link = new URL(item.href), slug = link.hostname.slice(0, -13);
-  assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && item.href === `https://${slug}.oddington.ai/inbox/${item.id}`);
-  let origin = object4(entry.origin);
-  keys3(origin, ["routine"]), assert(text3(origin.routine) && origin.routine === origin.routine.trim());
-  let question2 = object4(entry.question);
-  keys3(question2, ["id", "prompt", "instructions", "response"]), assert(text3(question2.id) && question2.id === question2.id.trim() && text3(question2.prompt) && (question2.instructions === null || text3(question2.instructions, !0))), responseDefinition(question2.response);
-  let refs = array2(entry.recordRefs);
-  return assert(refs.every((ref) => text3(ref) && ref === ref.trim()) && new Set(refs).size === refs.length), entry;
+  let entry = object4(json(value));
+  keys3(
+    entry,
+    ["itemId", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "tags", "recordRefs", "instructions"],
+    ["itemId", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable"]
+  ), assert(id2(entry.itemId) && integer(entry.revision) && text3(entry.title) && text3(entry.inboxUrl));
+  let link = new URL(entry.inboxUrl), slug = link.hostname.slice(0, -13);
+  return assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && entry.inboxUrl === `https://${slug}.oddington.ai/inbox/${entry.itemId}`), assert(isAppRoutineName(entry.routine) && text3(entry.questionId) && entry.questionId === entry.questionId.trim() && text3(entry.prompt) && (!("instructions" in entry) || text3(entry.instructions, !0)) && typeof entry.answerable == "boolean"), responseDefinition(entry.response), askMetadata(entry), entry;
+}
+function askMetadata(entry) {
+  let tags = array2(entry.tags === void 0 ? [] : entry.tags);
+  assert(tags.length <= 32 && tags.every((tag) => text3(tag) && new TextEncoder().encode(tag).byteLength <= 64)), assert(new Set(tags).size === tags.length);
+  let refs = array2(entry.recordRefs === void 0 ? [] : entry.recordRefs);
+  refs.forEach((value) => {
+    let ref = object4(value);
+    keys3(ref, ["repository", "id"]), recordReference({ repository: ref.repository, ref: ref.id });
+  }), assert(new Set(refs.map((value) => {
+    let ref = object4(value);
+    return JSON.stringify([ref.repository, ref.id]);
+  })).size === refs.length), entry.tags = tags, entry.recordRefs = refs;
 }
 function parseInboxAcceptance(value) {
   let accepted = object4(value);
@@ -2368,10 +2447,12 @@ function appContext(origin, active2) {
         credentials: "omit",
         redirect: "error",
         cache: "no-store",
+        ...init2.body instanceof ReadableStream ? { duplex: "half" } : {},
         referrerPolicy: "no-referrer",
         signal,
         headers: {
           ...init2.body === void 0 ? {} : { "content-type": "application/json" },
+          ...Object.fromEntries(new Headers(init2.headers)),
           authorization: `Bearer ${candidate}`
         }
       });
@@ -2537,11 +2618,37 @@ function appContext(origin, active2) {
   async function requestRoutine(key, suffix, init2 = {}) {
     return requestChecked(`routines/${encodeURIComponent(key)}/${suffix}`, init2);
   }
-  async function requestChecked(path, init2, inbox2 = !1) {
+  async function requestRetainedRoutine(key, suffix) {
+    return requestChecked(`routines/${encodeURIComponent(key)}/${suffix}`, {}, !1, !0);
+  }
+  async function requestFiles(suffix, init2, parent) {
+    let unavailable3 = () => new FileOperationError("unsupported_context", 400);
+    if (!current2() || !/^(?:|\/[0-9a-f-]{36}(?:\/(?:content|upload|enrichments(?:\/[^/?#]+\/content)?))?)$/i.test(suffix))
+      throw unavailable3();
+    let admitted = credential, signal = parent ? AbortSignal.any([access.signal, parent]) : access.signal, failure = () => current2() && !signal.aborted ? new FileOperationError("unavailable", 503, !0) : unavailable3();
+    try {
+      return await hostedContent("", init2, signal, (_url, request2) => untilAborted(
+        send3(`files${suffix}`, admitted, signal, request2).then((value) => {
+          if (signal.aborted)
+            throw value.body?.cancel().catch(() => {
+            }), unavailable3();
+          return value;
+        }),
+        signal
+      ), () => settledAccess(signal), failure);
+    } catch {
+      throw failure();
+    }
+  }
+  async function requestChecked(path, init2, inbox2 = !1, retained2 = !1) {
     if (!current2()) throw new Error("Local app context unavailable.");
-    let admitted = credential, signal = access.signal, response2 = await send3(path, credential, signal, init2);
-    return await settledAccess(signal), (response2.status === 401 || !inbox2 && response2.status === 403) && admitted === credential && current2() && invalidate(), responseChecks.set(response2, async (value) => {
-      await settledAccess(signal), admitted === credential && current2() && value && typeof value == "object" && "error" in value && value.error === "authority_unavailable" && invalidate();
+    let admitted = credential, signal = access.signal, response2 = await send3(path, credential, signal, init2), check = async () => {
+      if (retained2) {
+        if (signal.aborted || !current2()) throw new Error("Local app context unavailable.");
+      } else await settledAccess(signal);
+    };
+    return await check(), (response2.status === 401 || !inbox2 && response2.status === 403) && admitted === credential && current2() && invalidate(), responseChecks.set(response2, async (value) => {
+      await check(), admitted === credential && current2() && value && typeof value == "object" && "error" in value && value.error === "authority_unavailable" && invalidate();
     }), response2;
   }
   function context2() {
@@ -2558,8 +2665,10 @@ function appContext(origin, active2) {
         issued === credential && current2() && invalidate();
       },
       requestRoutine,
+      requestRetainedRoutine,
       requestData,
       requestInbox,
+      requestFiles,
       requestAvailability: (key) => requestRoutine(key, "availability", { method: "GET" })
     };
   }
@@ -2568,22 +2677,22 @@ function appContext(origin, active2) {
     try {
       if (!alive()) throw new Error();
       if (!pair) {
-        let candidate2 = stored(), retained2 = readPair(candidate2);
-        pair = retained2, binding = { ...retained2.context }, credential = retained2.credential, serialized = candidate2;
+        let candidate2 = stored(), retained3 = readPair(candidate2);
+        pair = retained3, binding = { ...retained3.context }, credential = retained3.credential, serialized = candidate2;
       }
       if (expireAccess(), binding.expiresAt <= Date.now()) {
         if (await renew(), !current2()) throw new AppRenewalUnavailable();
         return context2();
       }
       await synchronize();
-      let candidate = stored(), retained = readPair(candidate);
+      let candidate = stored(), retained2 = readPair(candidate);
       if (attempted = candidate ?? void 0, !current2()) throw new AppRenewalUnavailable();
-      let value = await proof(retained.credential);
+      let value = await proof(retained2.credential);
       if (stored() !== candidate || serialized !== candidate)
         return await synchronize(), context2();
       if (!current2()) throw new Error();
       if (expiry && binding && value.expiresAt > binding.expiresAt) throw new Error();
-      return (!expiry || value.expiresAt !== binding.expiresAt) && install(value, retained, candidate), context2();
+      return (!expiry || value.expiresAt !== binding.expiresAt) && install(value, retained2, candidate), context2();
     } catch (error) {
       if (alive() && error instanceof AppRenewalUnavailable)
         throw new Error();
@@ -2598,7 +2707,12 @@ function appContext(origin, active2) {
   }, resolve = () => resolution2 || (resolution2 = resolveOnce().finally(() => {
     resolution2 = void 0;
   }), resolution2);
-  return { resolve, start: () => {
+  return { resolve, retained: async () => {
+    if (!expiry && alive() && (binding ? current2() && resolution2 : readPair(stored()).context.expiresAt > Date.now()))
+      return resolve();
+    if (!expiry || !current2()) throw new Error("Local app context unavailable.");
+    return context2();
+  }, start: () => {
     startup = setTimeout(() => {
       alive() && !resolution2 && !binding && resolve().catch(() => {
       });
@@ -2624,13 +2738,13 @@ function hostFailure(error, context2) {
   return !context2.isCurrent() || context2.expiresAt <= Date.now() || error instanceof InboxContextError && error.status === 401 ? stale() : error instanceof InboxContextError && error.status === 403 ? new InboxOperationError(403, "access_denied") : unavailable2();
 }
 async function send2(operation2, input) {
-  let envelope = operation2 === "questions.list" ? void 0 : parseInboxRequest({ operation: operation2, input }), context2;
+  let envelope = parseInboxRequest({ operation: operation2, input }), context2;
   try {
     context2 = await resolveAppContext();
   } catch {
     throw stale();
   }
-  if (envelope ??= parseInboxRequest({ operation: operation2, input }, context2.kind === "local" ? "local" : "hosted"), context2.kind === "local") {
+  if (context2.kind === "local") {
     if (!isAppQuestionOperation(operation2)) throw new InboxOperationError(403, "access_denied");
     let check2 = () => {
       if (!context2.isCurrent() || context2.signal.aborted || context2.expiresAt <= Date.now()) throw stale();
@@ -2651,16 +2765,18 @@ async function send2(operation2, input) {
   }
   if (context2.endpoint !== `https://${context2.workspace}.oddington.ai` || ["auth", "www", "api", "os"].includes(context2.workspace)) throw stale();
   let host;
-  try {
-    host = await resolveHostedInboxContext(context2);
-  } catch (error) {
-    throw hostFailure(error, context2);
+  if (!isAppQuestionOperation(operation2)) {
+    try {
+      host = await resolveHostedInboxContext(context2);
+    } catch (error) {
+      throw hostFailure(error, context2);
+    }
+    if (!host) throw unavailable2();
   }
-  if (!host) throw unavailable2();
   let check = () => {
-    if (!context2.isCurrent() || !host.isCurrent() || !Number.isFinite(context2.expiresAt) || context2.expiresAt <= Date.now()) throw stale();
+    if (!context2.isCurrent() || host && !host.isCurrent() || !Number.isFinite(context2.expiresAt) || context2.expiresAt <= Date.now()) throw stale();
   };
-  if (check(), host.context.kind === "focused" && !isAppQuestionOperation(operation2))
+  if (check(), host?.context.kind === "focused")
     throw new InboxOperationError(403, "access_denied");
   try {
     let response2 = await fetch(`${context2.endpoint}/api/inbox`, {
@@ -2768,33 +2884,24 @@ var inbox = {
   },
   questions: {
     async list(input) {
-      let supplied = input === void 0 ? void 0 : parseInboxRequest({ operation: "questions.list", input }, "hosted").input;
-      if (supplied && Object.hasOwn(supplied, "beforeNumber")) throw new InboxOperationError(400, "invalid_input");
-      let routines = supplied ? Object.freeze(supplied.routines) : void 0, questions = [], beforeNumber, initial;
+      let supplied = parseInboxRequest({ operation: "questions.list", input }).input;
+      if (Object.hasOwn(supplied, "beforeNumber")) throw new InboxOperationError(400, "invalid_input");
+      let routines = Object.freeze(supplied.routines), questions = [], beforeNumber, initial;
       try {
         initial = await resolveAppContext();
       } catch {
         throw stale();
       }
-      if (initial.kind === "local" ? input !== void 0 : routines === void 0)
-        throw new InboxOperationError(400, "invalid_input");
-      let host;
-      try {
-        host = initial.kind !== "local" && await resolveHostedInboxContext(initial);
-      } catch (error) {
-        throw hostFailure(error, initial);
-      }
-      if (initial.kind !== "local" && !host) throw unavailable2();
       let check = () => {
-        if (!initial.isCurrent() || host && !host.isCurrent() || initial.expiresAt <= Date.now()) throw stale();
+        if (!initial.isCurrent() || initial.expiresAt <= Date.now()) throw stale();
       };
       do {
         check();
         let page = await send2("questions.list", {
-          ...routines === void 0 ? {} : { routines },
+          routines,
           ...beforeNumber === void 0 ? {} : { beforeNumber }
         });
-        if (check(), page.questions.some((question2) => question2.item.href !== `https://${initial.workspace}.oddington.ai/inbox/${question2.item.id}` || routines !== void 0 && !routines.includes(question2.origin.routine)) || beforeNumber !== void 0 && (page.questions.some((question2) => question2.item.number >= beforeNumber) || page.nextBeforeNumber !== null && page.nextBeforeNumber >= beforeNumber)) throw unavailable2();
+        if (check(), page.questions.some((question2) => question2.inboxUrl !== `https://${initial.workspace}.oddington.ai/inbox/${question2.itemId}` || !routines.includes(question2.routine)) || beforeNumber !== void 0 && page.nextBeforeNumber !== null && page.nextBeforeNumber >= beforeNumber) throw unavailable2();
         if (questions.push(...page.questions), page.nextBeforeNumber === null) return questions;
         beforeNumber = page.nextBeforeNumber;
       } while (!0);
@@ -2831,8 +2938,8 @@ function init({ auth: input }) {
     url.protocol === "https:" && !url.port && !url.username && !url.password && !url.search && !url.hash && url.pathname === "/" && /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(slug) && slug !== "auth" && (endpoint = url.origin, workspace = slug);
   } catch {
   }
-  let active2 = !0, revision = 0, person, token, binding = {}, local2 = localOrigin ? appContext(localOrigin, () => active2) : void 0, subscription, stopDisposal, uninstall = installMemberContext(async () => {
-    if (local2) return local2.resolve();
+  let active2 = !0, revision = 0, person, token, binding = {}, local3 = localOrigin ? appContext(localOrigin, () => active2) : void 0, subscription, stopDisposal, resolve = async () => {
+    if (local3) return local3.resolve();
     if (!active2 || !endpoint || !workspace || globalThis.location.origin !== endpoint) throw new Error("Hosted Data context unavailable.");
     let started = revision, { data: { session }, error } = await auth2.getSession();
     if (!active2 || globalThis.location.origin !== endpoint || started !== revision || error || !session || person !== void 0 && person !== session.user.id)
@@ -2851,13 +2958,13 @@ function init({ auth: input }) {
       memberId: session.user.id,
       binding
     };
-  }), dispose = () => {
-    active2 && (active2 = !1, local2?.dispose(), revision++, subscription?.unsubscribe(), stopDisposal?.(), uninstall(), installedDispose === dispose && (installedDispose = void 0));
+  }, uninstall = installMemberContext(resolve, local3 ? local3.retained : resolve), dispose = () => {
+    active2 && (active2 = !1, local3?.dispose(), revision++, subscription?.unsubscribe(), stopDisposal?.(), uninstall(), installedDispose === dispose && (installedDispose = void 0));
   };
   installedDispose = dispose, stopDisposal = registered?.onDispose(dispose), active2 && (subscription = auth2.onAuthStateChange((event, session) => {
     let next = session?.user.id ?? null;
-    (event === "SIGNED_OUT" || person !== void 0 && next !== person || registered && person !== void 0 && event === "SIGNED_IN" && token !== session?.access_token) && (revision++, local2?.invalidate()), person = next, token = session?.access_token;
-  }).data.subscription, local2?.start());
+    (event === "SIGNED_OUT" || person !== void 0 && next !== person || registered && person !== void 0 && event === "SIGNED_IN" && token !== session?.access_token) && (revision++, local3?.invalidate()), person = next, token = session?.access_token;
+  }).data.subscription, local3?.start());
 }
 var os = { init };
 
@@ -3217,9 +3324,9 @@ async function provider(configuration, guard) {
       let result2 = new Response(
         [204, 205, 304].includes(response2.status) ? null : body,
         { status: response2.status, statusText: response2.statusText, headers: response2.headers }
-      ), json3 = result2.json.bind(result2);
+      ), json2 = result2.json.bind(result2);
       return result2.json = async () => {
-        let value = await json3();
+        let value = await json2();
         return (!guard.current(revision) || request2 && !request2.current()) && rejectStale(), value && typeof value.access_token == "string" && provenance.set(value.access_token, revision), value;
       }, result2;
     }, { preconnect: fetch.preconnect })
@@ -3270,6 +3377,22 @@ async function provider(configuration, guard) {
 }
 var auth = /* @__PURE__ */ createBrowserAuth({ provider, failure: (reason) => new BrowserAuthError(reason) });
 
+function routineRunHandle(operations2) {
+  return Object.freeze({
+    current: operations2.current,
+    step: operations2.step,
+    ...operations2.publish ? { publish: operations2.publish } : {},
+    async *watch() {
+      let previous;
+      for (; ; ) {
+        let state = await operations2.current(), encoded = JSON.stringify(state);
+        if (encoded !== previous && (previous = encoded, yield state), state.status === "succeeded" || state.status === "failed") return;
+        await (operations2.wait?.() ?? new Promise((resolve) => setTimeout(resolve, 100)));
+      }
+    }
+  });
+}
+
 var identifier = /^[a-z0-9]+(?:-[a-z0-9]+)*(?![\s\S])/, uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}(?![\s\S])/i, SUMMARY_BYTES = 17 * 1024 * 1024, AppRoutineError = class extends Error {
   constructor(reason) {
     super(reason);
@@ -3286,16 +3409,16 @@ function current(context2) {
 function appDescriptors() {
   return globalThis[/* @__PURE__ */ Symbol.for("oddington.app.descriptor")]?.routines ?? [];
 }
-async function local() {
-  let context2 = await resolveAppContext().catch(() => fail3("authority_unavailable"));
+async function local2(retained = !1) {
+  let context2 = await resolveAppContext(retained).catch(() => fail3("authority_unavailable"));
   return context2.kind !== "local" ? fail3("execution_unavailable") : (current(context2), context2);
 }
-async function request(key, suffix, init2, maximum = SUMMARY_BYTES, retained) {
+async function request(key, suffix, init2, maximum = SUMMARY_BYTES, retained, read2 = !1) {
   (!identifier.test(key) || !appDescriptors().some((item) => item.id === key)) && fail3("authority_unavailable");
-  let context2 = retained ?? await local();
+  let context2 = retained ?? await local2(read2);
   current(context2);
   try {
-    let response2 = await context2.requestRoutine(key, suffix, init2), value = await appResponse(response2, maximum, context2.signal);
+    let response2 = await (read2 ? context2.requestRetainedRoutine(key, suffix) : context2.requestRoutine(key, suffix, init2)), value = await appResponse(response2, maximum, context2.signal);
     if (current(context2), !response2.ok) {
       let reason = value?.error;
       reason === "authority_unavailable" && (context2.invalidate(), fail3(reason)), (reason === "invalid_input" || reason === "execution_unavailable") && fail3(reason), fail3("execution_unavailable");
@@ -3341,21 +3464,15 @@ function structure(value) {
   return JSON.stringify(value, (_key, item) => item && typeof item == "object" && !Array.isArray(item) ? Object.fromEntries(Object.keys(item).sort().map((key) => [key, item[key]])) : item);
 }
 function handle(key, id3, context2) {
-  (typeof id3 != "string" || !uuid.test(id3)) && fail3("invalid_input");
-  let read2 = async () => summary(await request(key, `runs/${id3}`, void 0, SUMMARY_BYTES, context2), key, id3);
-  return Object.freeze({
-    current: read2,
-    async *watch() {
-      let previous;
-      for (; ; ) {
-        let state = await read2(), encoded = JSON.stringify(state);
-        if (encoded !== previous && (previous = encoded, yield state), state.status === "succeeded" || state.status === "failed") return;
-        await new Promise((resolve) => setTimeout(resolve, 100));
-      }
+  (!identifier.test(key) || !appDescriptors().some((item) => item.id === key)) && fail3("authority_unavailable"), (typeof id3 != "string" || !uuid.test(id3)) && fail3("invalid_input");
+  let read2 = async () => summary(await request(key, `runs/${id3}`, void 0, SUMMARY_BYTES, context2, !0), key, id3);
+  return routineRunHandle({
+    async current() {
+      return current(context2), read2();
     },
     async step(step) {
       (typeof step != "string" || !identifier.test(step)) && fail3("invalid_input");
-      let value = await request(key, `runs/${id3}/steps/${step}`, void 0, 514 * 1024, context2);
+      let value = await request(key, `runs/${id3}/steps/${step}`, void 0, 514 * 1024, context2, !0);
       return (!only(value, "id,title,status,startedAt,finishedAt,summary,data") || value.id !== step || !validStep(value)) && fail3("execution_unavailable"), value;
     },
     async publish() {
@@ -3394,19 +3511,18 @@ function appRoutineBinding(key) {
       } catch {
         return fail3("invalid_input");
       }
-      let context2 = await local(), run = summary(await request(key, "runs", { method: "POST", body: encoded }, SUMMARY_BYTES, context2), key);
+      let context2 = await local2(), run = summary(await request(key, "runs", { method: "POST", body: encoded }, SUMMARY_BYTES, context2), key);
       return handle(key, run.id, context2);
     },
     runs: Object.freeze({
       async list() {
-        let value = await request(key, "runs", void 0, 20 * SUMMARY_BYTES);
+        let value = await request(key, "runs", void 0, 20 * SUMMARY_BYTES, void 0, !0);
         if (!Array.isArray(value) || value.length > 20) return fail3("execution_unavailable");
         let runs = value.map((run) => summary(run, key));
         return new Set(runs.map((run) => run.id)).size !== runs.length && fail3("execution_unavailable"), runs;
       },
       async get(id3) {
-        let run = handle(key, id3, await local());
-        return await run.current(), run;
+        return (typeof id3 != "string" || !uuid.test(id3)) && fail3("invalid_input"), (!identifier.test(key) || !appDescriptors().some((item) => item.id === key)) && fail3("authority_unavailable"), handle(key, id3, await local2(!0));
       }
     })
   });
@@ -3453,7 +3569,7 @@ function routineDataEnvelope(command) {
 }
 
 function routinePublicationClient2(options = {}) {
-  let environment = {}, installed2 = routineTransport(), local2 = installed2?.request ?? void 0, workspace = installed2 ? "installed" : options.workspace ?? environment.ODDINGTON_ROUTINE_WORKSPACE, capability = options.capability ?? environment.ODDINGTON_ROUTINE_RUN;
+  let environment = {}, installed2 = routineTransport(), local3 = installed2?.request ?? void 0, workspace = installed2 ? "installed" : options.workspace ?? environment.ODDINGTON_ROUTINE_WORKSPACE, capability = options.capability ?? environment.ODDINGTON_ROUTINE_RUN;
   if (!workspace || !/^[a-z0-9][a-z0-9-]*$/.test(workspace) || capability !== void 0 && !/^[0-9a-f]{64}$/.test(capability))
     throw new Error("A workspace and valid optional routine capability are required");
   let workingRoot = options.workingRoot ?? environment.ODDINGTON_INBOX_WORKING_ROOT ?? void 0, headers = capability ? { "x-oddington-run": capability } : {}, request2 = options.request ?? (capability ? async (path, init2) => {
@@ -3466,7 +3582,7 @@ function routinePublicationClient2(options = {}) {
     throw new Error("Member publication requires a host-supplied request");
   });
   async function send3(operation2, body) {
-    if (local2) return await local2(operation2, body);
+    if (local3) return await local3(operation2, body);
     let writing = operation2 === "records/update", reading = operation2 === "records/read", response2 = await request2(writing || reading ? "/api/data" : `/api/inbox/${operation2}`, {
       method: "POST",
       headers: {
@@ -3513,7 +3629,7 @@ function routinePublicationClient2(options = {}) {
     files: {
       async add(value) {
         let input = validateFileAddOptions(value);
-        if (local2) return validateInboxFile(await local2("files/add", input));
+        if (local3) return validateInboxFile(await local3("files/add", input));
         throw workingRoot ? new Error("Inbox file reads require a Node working root") : new Error("Inbox file reads require a working root");
       }
     },