@oddington/sdk 0.1.22 → 0.1.23

package/dist/browser.js

@@ -285,7 +285,7 @@ function validatePublication(value) {
     "views",
     "body",
     "notifyImmediately",
-    ...source.kind === "ask" ? ["questions"] : []
+    ...source.kind === "ask" ? ["questions", "tags", "recordRefs"] : []
   ], "publication"), source.notifyImmediately !== void 0 && typeof source.notifyImmediately != "boolean" && fail("notifyImmediately must be a boolean");
   let itemPresentation = { ...presentation(source), ...source.notifyImmediately === void 0 ? {} : { notifyImmediately: source.notifyImmediately } }, linkedAsks = (itemPresentation.body ?? []).flatMap((block2) => block2.kind === "asks" ? block2.asks : []);
   if (new Set(linkedAsks).size !== linkedAsks.length && fail("Ask belongs to more than one problem"), source.kind === "digest") return {
@@ -297,10 +297,24 @@ function validatePublication(value) {
   let questions = array(source.questions === void 0 ? [] : source.questions, "questions").map((value2) => question(value2));
   new Set(questions.map((entry) => entry.id)).size !== questions.length && fail("Duplicate question ID");
   let extra = source.recipients === void 0 ? [] : distinctPeople(source.recipients, "recipients", !1);
-  return !questions.length && !extra.length && fail("Ask requires at least one recipient"), {
+  !questions.length && !extra.length && fail("Ask requires at least one recipient");
+  let tags = array(source.tags === void 0 ? [] : source.tags, "Ask tags").map((value2) => {
+    let tag = text(value2, "Ask tag");
+    return new TextEncoder().encode(tag).byteLength > 64 && fail("Ask tag exceeds 64 UTF-8 bytes"), tag;
+  });
+  (tags.length > 32 || new Set(tags).size !== tags.length) && fail("Ask tags exceed bounds or contain duplicates");
+  let recordRefs = array(source.recordRefs === void 0 ? [] : source.recordRefs, "Ask Record references").map((value2) => {
+    let row = object(value2, "Ask Record reference");
+    keys(row, ["repository", "id"], "Ask Record reference");
+    let { repository, ref } = validateRecordReference({ repository: row.repository, ref: row.id });
+    return { repository, id: ref };
+  });
+  return new Set(recordRefs.map((ref) => JSON.stringify([ref.repository, ref.id]))).size !== recordRefs.length && fail("Ask Record references contain duplicates"), {
     kind: "ask",
     ...itemPresentation,
     questions,
+    tags,
+    recordRefs,
     recipients: [.../* @__PURE__ */ new Set([...extra, ...questions.flatMap((entry) => [entry.to, ...entry.allowedResponders])])]
   };
 }
@@ -335,7 +349,7 @@ function createInboxPublisher(transport) {
   return {
     async publishAsk(value, options) {
       let source = object(value, "ask");
-      keys(source, ["title", "description", "recipients", "views", "body", "questions", "notifyImmediately"], "ask");
+      keys(source, ["title", "description", "recipients", "views", "body", "questions", "notifyImmediately", "tags", "recordRefs"], "ask");
       let result2 = await transport.publish({
         requestKey: publicationRequestKey(options),
         item: validatePublication({ ...source, kind: "ask" })
@@ -517,8 +531,9 @@ function parseAppRoutineContract(value) {
       case "array":
         return !fields2(value2, ["type", "items", "maxItems"]) || !Number.isSafeInteger(value2.maxItems) || value2.maxItems < 1 || value2.maxItems > 64 ? invalidContract() : { type: "array", items: schema2(value2.items, depth + 1), maxItems: value2.maxItems };
       case "boolean":
-      case "file":
         return fields2(value2, ["type"]) ? { type: value2.type } : invalidContract();
+      case "file":
+        return !fields2(value2, ["type"], ["storage"]) || owns(value2, "storage") && value2.storage !== "local" && value2.storage !== "remote" ? invalidContract() : { type: "file", ...owns(value2, "storage") ? { storage: value2.storage } : {} };
       case "string":
         return !fields2(value2, ["type"], ["maxLength"]) || owns(value2, "maxLength") && (!Number.isSafeInteger(value2.maxLength) || value2.maxLength < 0 || value2.maxLength > 4096) ? invalidContract() : { type: "string", ...owns(value2, "maxLength") ? { maxLength: value2.maxLength } : {} };
       case "integer":
@@ -716,7 +731,7 @@ var schema = {
   boolean() {
     return declaration({ type: "boolean" });
   }
-}, file = () => declaration({ type: "file" }), definitions = /* @__PURE__ */ new WeakMap(), defineRoutine = (definition) => {
+}, file = (options = {}) => (assertRoutineFields(options, ["storage"]), declaration({ type: "file", ...options })), definitions = /* @__PURE__ */ new WeakMap(), defineRoutine = (definition) => {
   if (assertRoutineFields(definition, ["id", "title", "input", "steps", "result", "access", "responses", "run"]), !isAppRoutineName(definition.id) || definition.title !== void 0 && !routineTitle(definition.title) || typeof definition.run != "function") return invalidContract3();
   let input = definition.input === void 0 ? { schema: empty, default: {} } : schemaMetadata(definition.input), result2 = definition.result === void 0 ? void 0 : schemaMetadata(definition.result).schema, access = parseRoutineAccess(definition.access);
   assertRoutineFields(definition.steps ?? {});
@@ -795,6 +810,12 @@ async function executeRoutineDefinition(definition, input, runtime) {
     ...guarded({
       ...runtime,
       run: freezeRoutineMetadata({ ...runtime.run }),
+      connections: { ...runtime.connections, get: async (identity) => {
+        if (!active2 || broken || !contract.access.connections?.includes(identity)) throw new Error("Connection unavailable");
+        let value = await runtime.connections.get(identity);
+        if (!active2 || broken) throw new Error("Run authority ended");
+        return value;
+      } },
       inbox: { ...runtime.inbox, publishAsk: (value, options) => runtime.inbox.publishAsk(qualify(value), options) }
     }),
     step(id3, ...input2) {
@@ -1029,16 +1050,16 @@ function routineTransport() {
   return installed;
 }
 
-var memberContext;
-function installMemberContext(resolve) {
-  return memberContext = resolve, () => {
-    memberContext === resolve && (memberContext = void 0);
+var memberContext, retainedContext;
+function installMemberContext(resolve, retained = resolve) {
+  return memberContext = resolve, retainedContext = retained, () => {
+    memberContext === resolve && (memberContext = void 0, retainedContext = void 0);
   };
 }
-async function resolveAppContext() {
+async function resolveAppContext(retained = !1) {
   let host = memberContext;
   if (!host) throw new Error("App context unavailable.");
-  let context2 = await host();
+  let context2 = await (retained ? retainedContext : host)();
   if (host !== memberContext || !context2.isCurrent() || context2.expiresAt <= Date.now() || context2.kind !== "local" && (typeof context2.accessToken != "string" || !/^[^\s]{1,8192}$/.test(context2.accessToken)))
     throw new Error("App context unavailable.");
   return context2;
@@ -1063,13 +1084,22 @@ async function resolveFilesContext() {
     let environment = {}, host = memberContext;
     if (host) {
       let context2 = await host();
-      if (context2.kind === "local") throw new Error();
+      if (host !== memberContext || !context2.isCurrent() || context2.expiresAt <= Date.now()) throw new Error();
+      if (context2.kind === "local") return {
+        url: `private:app:${context2.workspace}/${context2.memberId}`,
+        headers: {},
+        isCurrent: context2.isCurrent,
+        signal: context2.signal,
+        local: void 0,
+        localFiles: context2.requestFiles
+      };
       if (!Number.isFinite(context2.expiresAt) || context2.expiresAt <= Date.now() || typeof context2.accessToken != "string" || !/^[^\s]{1,8192}$/.test(context2.accessToken)) throw new Error();
       return {
         ...filesContext(context2.workspace, context2.endpoint, { authorization: `Bearer ${context2.accessToken}` }),
         isCurrent: context2.isCurrent,
         local: void 0,
-        localFiles: void 0
+        localFiles: void 0,
+        signal: void 0
       };
     }
     throw new Error();
@@ -1182,6 +1212,64 @@ var data = {
   }
 };
 
+async function hostedContent(url, init2, parent, upstream = fetch, check = async () => {
+}, failure) {
+  let delivery = new AbortController(), abort = () => delivery.abort(parent.reason);
+  parent.addEventListener("abort", abort, { once: !0 }), parent.aborted && abort();
+  let detach = () => parent.removeEventListener("abort", abort);
+  try {
+    let response2 = await upstream(url, { ...init2, signal: delivery.signal });
+    try {
+      if (await check(), delivery.signal.aborted) throw failure?.() ?? new FileOperationError("unavailable", 503, !0);
+    } catch (error) {
+      throw response2.body?.cancel().catch(() => {
+      }), error;
+    }
+    if (!response2.body)
+      return detach(), response2;
+    let source = response2.body, reader, settled = !1, output, cancel = async (reason) => {
+      if (!settled) {
+        settled = !0, detach(), delivery.signal.removeEventListener("abort", stop), delivery.abort(reason);
+        try {
+          await (reader ? reader.cancel(reason) : source.cancel(reason));
+        } catch (error) {
+          if (error !== delivery.signal.reason && !(error instanceof Error && error.name === "AbortError")) throw error;
+        } finally {
+          reader?.releaseLock();
+        }
+      }
+    }, stop = () => {
+      if (settled) return;
+      let error = failure?.() ?? delivery.signal.reason;
+      cancel(error).catch(() => {
+      }), output.error(error);
+    }, body = new ReadableStream({
+      start(controller) {
+        output = controller, delivery.signal.addEventListener("abort", stop, { once: !0 }), delivery.signal.aborted && stop();
+      },
+      async pull(controller) {
+        try {
+          if (await check(), settled) return;
+          reader ??= source.getReader();
+          let { done, value } = await reader.read();
+          if (await check(), settled) return;
+          done ? (settled = !0, detach(), delivery.signal.removeEventListener("abort", stop), reader.releaseLock(), controller.close()) : controller.enqueue(value);
+        } catch (error) {
+          if (settled) return;
+          controller.error(failure?.() ?? error), await cancel(error).catch(() => {
+          });
+        }
+      },
+      cancel
+    }, { highWaterMark: 0 }), wrapped = new Response(body, { status: response2.status, statusText: response2.statusText, headers: response2.headers });
+    for (let key of ["url", "redirected", "type"])
+      Object.defineProperty(wrapped, key, { value: response2[key] });
+    return wrapped;
+  } catch (error) {
+    throw detach(), delivery.abort(error), error;
+  }
+}
+
 var MAX_BYTES = 16 * 1024 * 1024, PART_BYTES = 8 * 1024 * 1024, METADATA_BYTES = 4096, RESULT_BYTES = 16 * 1024, CONTROL_RESULT_BYTES = 128 * 1024, TIMEOUT_MS = 3e4, MAX_ACTIVE = 4, ATTEMPTS = 2, active = 0, invalid6 = () => new FileOperationError("invalid_input", 400), unavailable = () => new FileOperationError("unavailable", 503, !0), failures = {
   400: ["invalid_input", "unsupported_context"],
   401: ["unauthenticated"],
@@ -1192,19 +1280,26 @@ var MAX_BYTES = 16 * 1024 * 1024, PART_BYTES = 8 * 1024 * 1024, METADATA_BYTES =
   429: ["capacity"],
   503: ["integrity", "unavailable"]
 };
-async function boundedBytes(stream, limit) {
+async function boundedBytes(stream, limit, signal) {
   if (!stream) return new Uint8Array();
-  let reader = stream.getReader(), bytes = new Uint8Array(limit), size = 0;
+  let reader = stream.getReader(), bytes = new Uint8Array(limit), size = 0, cancel = () => {
+    reader.cancel().catch(() => {
+    });
+  };
+  signal?.addEventListener("abort", cancel, { once: !0 }), signal?.aborted && cancel();
   try {
     for (; ; ) {
       let { done, value } = await reader.read();
+      if (signal?.aborted) throw unavailable();
       if (done) break;
       if (!(value instanceof Uint8Array)) throw invalid6();
       if (size += value.byteLength, size > limit) throw new FileOperationError("request_too_large", 413);
       bytes.set(value, size - value.byteLength);
     }
+  } catch (error) {
+    throw cancel(), error;
   } finally {
-    reader.releaseLock();
+    signal?.removeEventListener("abort", cancel), reader.releaseLock();
   }
   return bytes.slice(0, size);
 }
@@ -1228,50 +1323,6 @@ async function result(response2, maximum = RESULT_BYTES) {
     throw unavailable();
   }
 }
-async function hostedContent(url, init2, parent, upstream = fetch) {
-  let delivery = new AbortController(), abort = () => delivery.abort(parent.reason);
-  parent.addEventListener("abort", abort, { once: !0 }), parent.aborted && abort();
-  let detach = () => parent.removeEventListener("abort", abort);
-  try {
-    let response2 = await upstream(url, { ...init2, signal: delivery.signal });
-    if (delivery.signal.aborted)
-      throw response2.body?.cancel().catch(() => {
-      }), unavailable();
-    if (!response2.body)
-      return detach(), response2;
-    let source = response2.body, reader, settled = !1, cancel = async (reason) => {
-      if (!settled) {
-        settled = !0, detach(), delivery.abort(reason);
-        try {
-          await (reader ? reader.cancel(reason) : source.cancel(reason));
-        } catch (error) {
-          if (error !== delivery.signal.reason && !(error instanceof Error && error.name === "AbortError")) throw error;
-        } finally {
-          reader?.releaseLock();
-        }
-      }
-    }, body = new ReadableStream({
-      async pull(controller) {
-        try {
-          reader ??= source.getReader();
-          let { done, value } = await reader.read();
-          if (settled) return;
-          done ? (settled = !0, detach(), reader.releaseLock(), controller.close()) : controller.enqueue(value);
-        } catch (error) {
-          if (settled) return;
-          controller.error(error), await cancel(error).catch(() => {
-          });
-        }
-      },
-      cancel
-    }, { highWaterMark: 0 }), wrapped = new Response(body, { status: response2.status, statusText: response2.statusText, headers: response2.headers });
-    for (let key of ["url", "redirected", "type"])
-      Object.defineProperty(wrapped, key, { value: response2[key] });
-    return wrapped;
-  } catch (error) {
-    throw detach(), delivery.abort(error), error;
-  }
-}
 async function send(suffix, init2, descriptor, initial, parent) {
   let original = initial, checkCurrent = (context2 = original) => {
     if (parent?.aborted) throw unavailable();
@@ -1282,7 +1333,7 @@ async function send(suffix, init2, descriptor, initial, parent) {
     let context2 = await resolveFilesContext();
     checkCurrent(context2);
     try {
-      let response2 = await (async () => {
+      let response2 = context2.localFiles ? await context2.localFiles(suffix, init2, parent) : await (async () => {
         let url = `${context2.url}${suffix}`, request2 = {
           ...init2,
           signal: parent,
@@ -1419,13 +1470,15 @@ async function multipartCreate(input, metadata, exchange, release = () => {
 async function operation(work, initial, parent) {
   let context2 = initial ?? await resolveFilesContext();
   if (active >= MAX_ACTIVE) throw new FileOperationError("capacity", 429, !0);
-  return active++, timed(async (signal) => {
+  active++;
+  let execute = async (signal2) => {
     try {
-      return await work(context2, signal);
+      return await work(context2, signal2);
     } finally {
       active--;
     }
-  }, parent).catch((error) => {
+  }, signal = context2.signal && parent ? AbortSignal.any([context2.signal, parent]) : context2.signal ?? parent;
+  return context2.localFiles ? execute(signal ?? new AbortController().signal) : timed(execute, signal).catch((error) => {
     throw error instanceof FileOperationError ? error : unavailable();
   });
 }
@@ -1497,15 +1550,36 @@ var files = {
       ...blob && input.file.type === "application/pdf" ? { inputMediaType: "application/pdf" } : {},
       requestKey: options?.requestKey === void 0 ? routineTransport()?.key("files") ?? crypto.randomUUID() : options.requestKey
     }, FILE_ORIGINAL_MAX_BYTES);
-    if (!context2.local && metadata.storage === "local") throw new FileOperationError("unsupported_context", 400);
+    if (!context2.local && !context2.localFiles && metadata.storage === "local") throw new FileOperationError("unsupported_context", 400);
     let header = encodeURIComponent(JSON.stringify(metadata));
     if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid6();
     if (active >= MAX_ACTIVE) throw new FileOperationError("capacity", 429, !0);
-    return active++, metadata.size > MAX_BYTES ? multipartCreate(input, metadata, (suffix, init2, kind, signal) => kind === !0 ? send(suffix, init2, !0, context2, signal) : send(suffix, init2, "control", context2, signal)) : timed(async (signal) => {
+    if (active++, context2.localFiles && !routineTransport() && metadata.size > MAX_BYTES) {
+      let signal = context2.signal ?? new AbortController().signal, file2 = input.file, offset = 0, body = file2 instanceof Blob ? context2.signal ? file2 : file2.stream() : file2 instanceof ReadableStream ? file2 : new ReadableStream({
+        pull(controller) {
+          if (offset === file2.byteLength) {
+            controller.close();
+            return;
+          }
+          let end = Math.min(offset + 256 * 1024, file2.byteLength);
+          controller.enqueue(file2.subarray(offset, end)), offset = end;
+        }
+      }, { highWaterMark: 0 });
+      try {
+        return await send("", { method: "POST", headers: {
+          "content-type": "application/octet-stream",
+          "x-oddington-file": header
+        }, body }, !0, context2, signal);
+      } finally {
+        active--;
+      }
+    }
+    return metadata.size > MAX_BYTES ? multipartCreate(input, metadata, (suffix, init2, kind, signal) => kind === !0 ? send(suffix, init2, !0, context2, signal) : send(suffix, init2, "control", context2, signal)) : timed(async (signal) => {
       try {
         let bytes = array3 ? input.file.slice() : await boundedBytes(
           blob ? input.file.stream() : input.file,
-          metadata.size
+          metadata.size,
+          signal
         );
         if (bytes.byteLength !== metadata.size) throw invalid6();
         if (signal.aborted) throw unavailable();
@@ -1517,7 +1591,7 @@ var files = {
       } finally {
         active--;
       }
-    }).catch((error) => {
+    }, context2.signal).catch((error) => {
       throw error instanceof FileOperationError ? error : unavailable();
     });
   },
@@ -1561,6 +1635,24 @@ function validGoogleScopes(value) {
 
 var ROUTINE_CONNECTION_CREDENTIALS_ENV = "ODDINGTON_ROUTINE_CONNECTION_CREDENTIALS";
 var connectionUuid = (v) => typeof v == "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(v);
+function runtimeConnection(lease) {
+  return lease.provider === "gmail" ? {
+    id: `gmail/${lease.name}`,
+    provider: lease.provider,
+    name: lease.name,
+    accountEmail: lease.accountEmail,
+    scopes: [...lease.scopes],
+    accessToken: lease.accessToken,
+    expiresAt: lease.expiresAt
+  } : {
+    id: `airtable/${lease.name}`,
+    provider: lease.provider,
+    name: lease.name,
+    baseId: lease.baseId,
+    accessToken: lease.accessToken,
+    runExpiresAt: lease.runExpiresAt
+  };
+}
 function parseConnectionLease(raw, now = Date.now()) {
   let v = raw;
   if (!v || typeof v != "object" || Array.isArray(v) || !connectionUuid(v.connectionId) || !connectionUuid(v.runId) || typeof v.name != "string" || !/^[a-z0-9][a-z0-9-]{0,62}$/.test(v.name) || typeof v.accessToken != "string" || !/^[A-Za-z0-9._~+/-]{1,8192}={0,2}$/.test(v.accessToken))
@@ -1622,7 +1714,9 @@ function equal(a, b) {
   ));
 }
 function createConnections(transport) {
-  return { airtable(name) {
+  return { async get() {
+    throw new Error("Connection unavailable");
+  }, airtable(name) {
     (typeof name != "string" || !/^[a-z0-9][a-z0-9-]{0,62}$/.test(name)) && fail2("Invalid Airtable connection name");
     let call = (operation2, input) => transport(name, operation2, input);
     return {
@@ -1804,46 +1898,19 @@ async function reportLocalRoutineEffect(value) {
   await observer?.(value);
 }
 
-var connections = /* @__PURE__ */ createConnections(async (name, operation2, input) => {
-  try {
-    let installed2 = routineTransport();
-    if (installed2) return await installed2.request("airtable", { name, operation: operation2, input: serializable(input) });
-    let managed = process.env[MANAGED_CONNECTION_CAPABILITY_ENV];
-    if (managed) {
-      let client = managedConnections(JSON.parse(managed)).airtable(name);
-      return operation2 === "tables.list" ? await client.tables.list() : await client.records[operation2.slice(8)](input);
-    }
-    let raw = JSON.parse(process.env[ROUTINE_CONNECTION_CREDENTIALS_ENV] ?? "[]");
-    if (!Array.isArray(raw)) throw new Error();
-    let leases = raw.map((value) => parseConnectionLease(value));
-    if (leases.some((lease2) => lease2.provider !== "airtable") || new Set(leases.map((lease2) => lease2.name)).size !== leases.length) throw new Error();
-    let lease = leases.find((lease2) => lease2.name === name);
-    if (!lease || lease.provider !== "airtable") throw new Error();
-    let writing = ["records.create", "records.update", "records.delete"].includes(operation2), captured = serializable(input), result2;
-    try {
-      result2 = await executeAirtableOperation(lease, operation2, captured);
-    } catch (error) {
-      throw writing && error instanceof AirtableOperationError && await reportLocalRoutineEffect({
-        type: "effect",
-        connection: `airtable/${name}`,
-        operation: operation2,
-        input: captured,
-        effect: error.effect,
-        receipts: error.receipts
-      }), error;
-    }
-    return writing && await reportLocalRoutineEffect({
-      type: "effect",
-      connection: `airtable/${name}`,
-      operation: operation2,
-      input: captured,
-      effect: "confirmed",
-      receipts: [result2.receipt]
-    }), result2;
-  } catch (error) {
-    throw error instanceof AirtableOperationError ? error : new AirtableOperationError("Airtable connection unavailable");
-  }
+var local;
+var airtable = /* @__PURE__ */ createConnections(async (name, operation2, input) => {
+  throw new AirtableOperationError("Airtable connection unavailable");
 });
+function runtimeConnections() {
+  return {
+    ...airtable,
+    async get(identity) {
+      throw new Error("Connection unavailable");
+    }
+  };
+}
+var connections = /* @__PURE__ */ runtimeConnections();
 
 var LOCAL_ROUTINE_VALUE_BYTES = 256 * 1024;
 
@@ -2093,7 +2160,7 @@ function parseInboxCurrent(value) {
 }
 function parseInboxItem(value) {
   let item = object4(json(value));
-  return assert(id2(item.id) && id2(item.workspaceId) && integer(item.number) && integer(item.revision) && integer(item.activityVersion, 0) && ["ask", "digest"].includes(String(item.kind)) && ["open", "closed"].includes(String(item.lifecycle)) && text3(item.title) && text3(item.description, !0) && text3(item.author) && date(item.publishedAt) && optionalDate(item.seenAt) && optionalDate(item.digestReadAt)), item.outcome !== null && assert(text3(object4(item.outcome).outcome)), "canonicalRoutineId" in item && assert(item.canonicalRoutineId === null || isAppRoutineName(item.canonicalRoutineId)), array2(item.body).forEach(block), array2(item.views).forEach((value2) => {
+  return assert(id2(item.id) && id2(item.workspaceId) && integer(item.number) && integer(item.revision) && integer(item.activityVersion, 0) && ["ask", "digest"].includes(String(item.kind)) && ["open", "closed"].includes(String(item.lifecycle)) && text3(item.title) && text3(item.description, !0) && text3(item.author) && date(item.publishedAt) && optionalDate(item.seenAt) && optionalDate(item.digestReadAt)), item.outcome !== null && assert(text3(object4(item.outcome).outcome)), "canonicalRoutineId" in item && assert(item.canonicalRoutineId === null || isAppRoutineName(item.canonicalRoutineId)), item.kind === "ask" ? askMetadata(item) : assert(!("tags" in item) && !("recordRefs" in item)), array2(item.body).forEach(block), array2(item.views).forEach((value2) => {
     let view = object4(value2);
     assert(text3(view.id) && text3(view.view) && text3(view.implementation)), json(view.input);
   }), array2(item.people).forEach((value2) => {
@@ -2134,19 +2201,23 @@ function parseAnswerableQuestion(value) {
   let entry = object4(json(value));
   keys3(
     entry,
-    ["itemId", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "recordRefs", "instructions"],
-    ["itemId", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "recordRefs"]
+    ["itemId", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "tags", "recordRefs", "instructions"],
+    ["itemId", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable"]
   ), assert(id2(entry.itemId) && integer(entry.revision) && text3(entry.title) && text3(entry.inboxUrl));
   let link = new URL(entry.inboxUrl), slug = link.hostname.slice(0, -13);
-  assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && entry.inboxUrl === `https://${slug}.oddington.ai/inbox/${entry.itemId}`), assert(isAppRoutineName(entry.routine) && text3(entry.questionId) && entry.questionId === entry.questionId.trim() && text3(entry.prompt) && (!("instructions" in entry) || text3(entry.instructions, !0)) && typeof entry.answerable == "boolean"), responseDefinition(entry.response);
-  let refs = array2(entry.recordRefs);
-  return refs.forEach((value2) => {
-    let ref = object4(value2);
-    keys3(ref, ["repository", "id"]), assert(validRepositoryAlias(ref.repository) && text3(ref.id) && /^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/.test(ref.id) && !ref.id.split("/").some((part) => !part || part === "." || part === ".."));
-  }), assert(new Set(refs.map((value2) => {
-    let ref = object4(value2);
+  return assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && entry.inboxUrl === `https://${slug}.oddington.ai/inbox/${entry.itemId}`), assert(isAppRoutineName(entry.routine) && text3(entry.questionId) && entry.questionId === entry.questionId.trim() && text3(entry.prompt) && (!("instructions" in entry) || text3(entry.instructions, !0)) && typeof entry.answerable == "boolean"), responseDefinition(entry.response), askMetadata(entry), entry;
+}
+function askMetadata(entry) {
+  let tags = array2(entry.tags === void 0 ? [] : entry.tags);
+  assert(tags.length <= 32 && tags.every((tag) => text3(tag) && new TextEncoder().encode(tag).byteLength <= 64)), assert(new Set(tags).size === tags.length);
+  let refs = array2(entry.recordRefs === void 0 ? [] : entry.recordRefs);
+  refs.forEach((value) => {
+    let ref = object4(value);
+    keys3(ref, ["repository", "id"]), recordReference({ repository: ref.repository, ref: ref.id });
+  }), assert(new Set(refs.map((value) => {
+    let ref = object4(value);
     return JSON.stringify([ref.repository, ref.id]);
-  })).size === refs.length), entry;
+  })).size === refs.length), entry.tags = tags, entry.recordRefs = refs;
 }
 function parseInboxAcceptance(value) {
   let accepted = object4(value);
@@ -2376,10 +2447,12 @@ function appContext(origin, active2) {
         credentials: "omit",
         redirect: "error",
         cache: "no-store",
+        ...init2.body instanceof ReadableStream ? { duplex: "half" } : {},
         referrerPolicy: "no-referrer",
         signal,
         headers: {
           ...init2.body === void 0 ? {} : { "content-type": "application/json" },
+          ...Object.fromEntries(new Headers(init2.headers)),
           authorization: `Bearer ${candidate}`
         }
       });
@@ -2545,11 +2618,37 @@ function appContext(origin, active2) {
   async function requestRoutine(key, suffix, init2 = {}) {
     return requestChecked(`routines/${encodeURIComponent(key)}/${suffix}`, init2);
   }
-  async function requestChecked(path, init2, inbox2 = !1) {
+  async function requestRetainedRoutine(key, suffix) {
+    return requestChecked(`routines/${encodeURIComponent(key)}/${suffix}`, {}, !1, !0);
+  }
+  async function requestFiles(suffix, init2, parent) {
+    let unavailable3 = () => new FileOperationError("unsupported_context", 400);
+    if (!current2() || !/^(?:|\/[0-9a-f-]{36}(?:\/(?:content|upload|enrichments(?:\/[^/?#]+\/content)?))?)$/i.test(suffix))
+      throw unavailable3();
+    let admitted = credential, signal = parent ? AbortSignal.any([access.signal, parent]) : access.signal, failure = () => current2() && !signal.aborted ? new FileOperationError("unavailable", 503, !0) : unavailable3();
+    try {
+      return await hostedContent("", init2, signal, (_url, request2) => untilAborted(
+        send3(`files${suffix}`, admitted, signal, request2).then((value) => {
+          if (signal.aborted)
+            throw value.body?.cancel().catch(() => {
+            }), unavailable3();
+          return value;
+        }),
+        signal
+      ), () => settledAccess(signal), failure);
+    } catch {
+      throw failure();
+    }
+  }
+  async function requestChecked(path, init2, inbox2 = !1, retained2 = !1) {
     if (!current2()) throw new Error("Local app context unavailable.");
-    let admitted = credential, signal = access.signal, response2 = await send3(path, credential, signal, init2);
-    return await settledAccess(signal), (response2.status === 401 || !inbox2 && response2.status === 403) && admitted === credential && current2() && invalidate(), responseChecks.set(response2, async (value) => {
-      await settledAccess(signal), admitted === credential && current2() && value && typeof value == "object" && "error" in value && value.error === "authority_unavailable" && invalidate();
+    let admitted = credential, signal = access.signal, response2 = await send3(path, credential, signal, init2), check = async () => {
+      if (retained2) {
+        if (signal.aborted || !current2()) throw new Error("Local app context unavailable.");
+      } else await settledAccess(signal);
+    };
+    return await check(), (response2.status === 401 || !inbox2 && response2.status === 403) && admitted === credential && current2() && invalidate(), responseChecks.set(response2, async (value) => {
+      await check(), admitted === credential && current2() && value && typeof value == "object" && "error" in value && value.error === "authority_unavailable" && invalidate();
     }), response2;
   }
   function context2() {
@@ -2566,8 +2665,10 @@ function appContext(origin, active2) {
         issued === credential && current2() && invalidate();
       },
       requestRoutine,
+      requestRetainedRoutine,
       requestData,
       requestInbox,
+      requestFiles,
       requestAvailability: (key) => requestRoutine(key, "availability", { method: "GET" })
     };
   }
@@ -2576,22 +2677,22 @@ function appContext(origin, active2) {
     try {
       if (!alive()) throw new Error();
       if (!pair) {
-        let candidate2 = stored(), retained2 = readPair(candidate2);
-        pair = retained2, binding = { ...retained2.context }, credential = retained2.credential, serialized = candidate2;
+        let candidate2 = stored(), retained3 = readPair(candidate2);
+        pair = retained3, binding = { ...retained3.context }, credential = retained3.credential, serialized = candidate2;
       }
       if (expireAccess(), binding.expiresAt <= Date.now()) {
         if (await renew(), !current2()) throw new AppRenewalUnavailable();
         return context2();
       }
       await synchronize();
-      let candidate = stored(), retained = readPair(candidate);
+      let candidate = stored(), retained2 = readPair(candidate);
       if (attempted = candidate ?? void 0, !current2()) throw new AppRenewalUnavailable();
-      let value = await proof(retained.credential);
+      let value = await proof(retained2.credential);
       if (stored() !== candidate || serialized !== candidate)
         return await synchronize(), context2();
       if (!current2()) throw new Error();
       if (expiry && binding && value.expiresAt > binding.expiresAt) throw new Error();
-      return (!expiry || value.expiresAt !== binding.expiresAt) && install(value, retained, candidate), context2();
+      return (!expiry || value.expiresAt !== binding.expiresAt) && install(value, retained2, candidate), context2();
     } catch (error) {
       if (alive() && error instanceof AppRenewalUnavailable)
         throw new Error();
@@ -2606,7 +2707,12 @@ function appContext(origin, active2) {
   }, resolve = () => resolution2 || (resolution2 = resolveOnce().finally(() => {
     resolution2 = void 0;
   }), resolution2);
-  return { resolve, start: () => {
+  return { resolve, retained: async () => {
+    if (!expiry && alive() && (binding ? current2() && resolution2 : readPair(stored()).context.expiresAt > Date.now()))
+      return resolve();
+    if (!expiry || !current2()) throw new Error("Local app context unavailable.");
+    return context2();
+  }, start: () => {
     startup = setTimeout(() => {
       alive() && !resolution2 && !binding && resolve().catch(() => {
       });
@@ -2832,8 +2938,8 @@ function init({ auth: input }) {
     url.protocol === "https:" && !url.port && !url.username && !url.password && !url.search && !url.hash && url.pathname === "/" && /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(slug) && slug !== "auth" && (endpoint = url.origin, workspace = slug);
   } catch {
   }
-  let active2 = !0, revision = 0, person, token, binding = {}, local2 = localOrigin ? appContext(localOrigin, () => active2) : void 0, subscription, stopDisposal, uninstall = installMemberContext(async () => {
-    if (local2) return local2.resolve();
+  let active2 = !0, revision = 0, person, token, binding = {}, local3 = localOrigin ? appContext(localOrigin, () => active2) : void 0, subscription, stopDisposal, resolve = async () => {
+    if (local3) return local3.resolve();
     if (!active2 || !endpoint || !workspace || globalThis.location.origin !== endpoint) throw new Error("Hosted Data context unavailable.");
     let started = revision, { data: { session }, error } = await auth2.getSession();
     if (!active2 || globalThis.location.origin !== endpoint || started !== revision || error || !session || person !== void 0 && person !== session.user.id)
@@ -2852,13 +2958,13 @@ function init({ auth: input }) {
       memberId: session.user.id,
       binding
     };
-  }), dispose = () => {
-    active2 && (active2 = !1, local2?.dispose(), revision++, subscription?.unsubscribe(), stopDisposal?.(), uninstall(), installedDispose === dispose && (installedDispose = void 0));
+  }, uninstall = installMemberContext(resolve, local3 ? local3.retained : resolve), dispose = () => {
+    active2 && (active2 = !1, local3?.dispose(), revision++, subscription?.unsubscribe(), stopDisposal?.(), uninstall(), installedDispose === dispose && (installedDispose = void 0));
   };
   installedDispose = dispose, stopDisposal = registered?.onDispose(dispose), active2 && (subscription = auth2.onAuthStateChange((event, session) => {
     let next = session?.user.id ?? null;
-    (event === "SIGNED_OUT" || person !== void 0 && next !== person || registered && person !== void 0 && event === "SIGNED_IN" && token !== session?.access_token) && (revision++, local2?.invalidate()), person = next, token = session?.access_token;
-  }).data.subscription, local2?.start());
+    (event === "SIGNED_OUT" || person !== void 0 && next !== person || registered && person !== void 0 && event === "SIGNED_IN" && token !== session?.access_token) && (revision++, local3?.invalidate()), person = next, token = session?.access_token;
+  }).data.subscription, local3?.start());
 }
 var os = { init };
 
@@ -3303,16 +3409,16 @@ function current(context2) {
 function appDescriptors() {
   return globalThis[/* @__PURE__ */ Symbol.for("oddington.app.descriptor")]?.routines ?? [];
 }
-async function local() {
-  let context2 = await resolveAppContext().catch(() => fail3("authority_unavailable"));
+async function local2(retained = !1) {
+  let context2 = await resolveAppContext(retained).catch(() => fail3("authority_unavailable"));
   return context2.kind !== "local" ? fail3("execution_unavailable") : (current(context2), context2);
 }
-async function request(key, suffix, init2, maximum = SUMMARY_BYTES, retained) {
+async function request(key, suffix, init2, maximum = SUMMARY_BYTES, retained, read2 = !1) {
   (!identifier.test(key) || !appDescriptors().some((item) => item.id === key)) && fail3("authority_unavailable");
-  let context2 = retained ?? await local();
+  let context2 = retained ?? await local2(read2);
   current(context2);
   try {
-    let response2 = await context2.requestRoutine(key, suffix, init2), value = await appResponse(response2, maximum, context2.signal);
+    let response2 = await (read2 ? context2.requestRetainedRoutine(key, suffix) : context2.requestRoutine(key, suffix, init2)), value = await appResponse(response2, maximum, context2.signal);
     if (current(context2), !response2.ok) {
       let reason = value?.error;
       reason === "authority_unavailable" && (context2.invalidate(), fail3(reason)), (reason === "invalid_input" || reason === "execution_unavailable") && fail3(reason), fail3("execution_unavailable");
@@ -3358,11 +3464,15 @@ function structure(value) {
   return JSON.stringify(value, (_key, item) => item && typeof item == "object" && !Array.isArray(item) ? Object.fromEntries(Object.keys(item).sort().map((key) => [key, item[key]])) : item);
 }
 function handle(key, id3, context2) {
-  return (typeof id3 != "string" || !uuid.test(id3)) && fail3("invalid_input"), routineRunHandle({
-    current: async () => summary(await request(key, `runs/${id3}`, void 0, SUMMARY_BYTES, context2), key, id3),
+  (!identifier.test(key) || !appDescriptors().some((item) => item.id === key)) && fail3("authority_unavailable"), (typeof id3 != "string" || !uuid.test(id3)) && fail3("invalid_input");
+  let read2 = async () => summary(await request(key, `runs/${id3}`, void 0, SUMMARY_BYTES, context2, !0), key, id3);
+  return routineRunHandle({
+    async current() {
+      return current(context2), read2();
+    },
     async step(step) {
       (typeof step != "string" || !identifier.test(step)) && fail3("invalid_input");
-      let value = await request(key, `runs/${id3}/steps/${step}`, void 0, 514 * 1024, context2);
+      let value = await request(key, `runs/${id3}/steps/${step}`, void 0, 514 * 1024, context2, !0);
       return (!only(value, "id,title,status,startedAt,finishedAt,summary,data") || value.id !== step || !validStep(value)) && fail3("execution_unavailable"), value;
     },
     async publish() {
@@ -3401,19 +3511,18 @@ function appRoutineBinding(key) {
       } catch {
         return fail3("invalid_input");
       }
-      let context2 = await local(), run = summary(await request(key, "runs", { method: "POST", body: encoded }, SUMMARY_BYTES, context2), key);
+      let context2 = await local2(), run = summary(await request(key, "runs", { method: "POST", body: encoded }, SUMMARY_BYTES, context2), key);
       return handle(key, run.id, context2);
     },
     runs: Object.freeze({
       async list() {
-        let value = await request(key, "runs", void 0, 20 * SUMMARY_BYTES);
+        let value = await request(key, "runs", void 0, 20 * SUMMARY_BYTES, void 0, !0);
         if (!Array.isArray(value) || value.length > 20) return fail3("execution_unavailable");
         let runs = value.map((run) => summary(run, key));
         return new Set(runs.map((run) => run.id)).size !== runs.length && fail3("execution_unavailable"), runs;
       },
       async get(id3) {
-        let run = handle(key, id3, await local());
-        return await run.current(), run;
+        return (typeof id3 != "string" || !uuid.test(id3)) && fail3("invalid_input"), (!identifier.test(key) || !appDescriptors().some((item) => item.id === key)) && fail3("authority_unavailable"), handle(key, id3, await local2(!0));
       }
     })
   });
@@ -3460,7 +3569,7 @@ function routineDataEnvelope(command) {
 }
 
 function routinePublicationClient2(options = {}) {
-  let environment = {}, installed2 = routineTransport(), local2 = installed2?.request ?? void 0, workspace = installed2 ? "installed" : options.workspace ?? environment.ODDINGTON_ROUTINE_WORKSPACE, capability = options.capability ?? environment.ODDINGTON_ROUTINE_RUN;
+  let environment = {}, installed2 = routineTransport(), local3 = installed2?.request ?? void 0, workspace = installed2 ? "installed" : options.workspace ?? environment.ODDINGTON_ROUTINE_WORKSPACE, capability = options.capability ?? environment.ODDINGTON_ROUTINE_RUN;
   if (!workspace || !/^[a-z0-9][a-z0-9-]*$/.test(workspace) || capability !== void 0 && !/^[0-9a-f]{64}$/.test(capability))
     throw new Error("A workspace and valid optional routine capability are required");
   let workingRoot = options.workingRoot ?? environment.ODDINGTON_INBOX_WORKING_ROOT ?? void 0, headers = capability ? { "x-oddington-run": capability } : {}, request2 = options.request ?? (capability ? async (path, init2) => {
@@ -3473,7 +3582,7 @@ function routinePublicationClient2(options = {}) {
     throw new Error("Member publication requires a host-supplied request");
   });
   async function send3(operation2, body) {
-    if (local2) return await local2(operation2, body);
+    if (local3) return await local3(operation2, body);
     let writing = operation2 === "records/update", reading = operation2 === "records/read", response2 = await request2(writing || reading ? "/api/data" : `/api/inbox/${operation2}`, {
       method: "POST",
       headers: {
@@ -3520,7 +3629,7 @@ function routinePublicationClient2(options = {}) {
     files: {
       async add(value) {
         let input = validateFileAddOptions(value);
-        if (local2) return validateInboxFile(await local2("files/add", input));
+        if (local3) return validateInboxFile(await local3("files/add", input));
         throw workingRoot ? new Error("Inbox file reads require a Node working root") : new Error("Inbox file reads require a working root");
       }
     },