@oddington/sdk 0.1.24 → 0.1.26

package/README.md

@@ -40,7 +40,7 @@ import { defineRoutine, file, schema } from '@oddington/sdk';
 
 export default defineRoutine({
   id: 'invoice-import',
-  input: schema.object({ document: file() }),
+  input: schema.object({ document: file({ storage: 'local', path: 'Statements' }) }),
   access: { files: 'read' },
   steps: {
     read: {
@@ -67,8 +67,10 @@ skipped. Omitted input normalizes to `{}`. A top-level schema can supply a valid
 immutable default with `.default(value)`, such as
 `schema.object({ files: schema.array(file(), { maxItems: 32 }) }).default({ files: [] })`.
 Nested defaults are unsupported and rejected. Omitted steps permit no step call;
-omitted result permits no returned value. `file()` declares a complete OS File descriptor;
-the trusted launcher separately verifies current File-use authority. The supplied
+omitted result permits no returned value. `file()` declares a complete OS File descriptor.
+Its optional `storage` selects local or remote placement and its optional `path`
+selects a managed OS parent such as `Statements`; it is never a machine or provider
+path. The trusted launcher separately verifies current File-use authority. The supplied
 runtime contains `run.id`, `data`, `files`, `connections`, `inbox`, and `step`.
 Accepted input and saved values are immutable snapshots. Access declarations set
 maximum named capabilities and grant no authority; the trusted host checks current

package/dist/browser.js

@@ -413,7 +413,14 @@ function parseFileDescriptor(value) {
   if (Object.keys(f).sort().join(",") !== "details,enrichments,id,mediaType,name,path,sha256,size" || typeof f.id != "string" || !FILE_ID_PATTERN.test(f.id) || !safeFileName(f.name) || !safeFilePath(f.path) || !Number.isSafeInteger(f.size) || f.size < 0 || f.size > FILE_ORIGINAL_MAX_BYTES || typeof f.sha256 != "string" || !/^[0-9a-f]{64}$/.test(f.sha256) || !f.enrichments || typeof f.enrichments != "object" || Array.isArray(f.enrichments) || !f.details || typeof f.details != "object" || Array.isArray(f.details)) return invalid8();
   let d = f.details;
   if (d.kind === "other") {
-    if (Object.keys(d).length !== 1 || f.mediaType !== "application/octet-stream") return invalid8();
+    if (Object.keys(d).length !== 1 || ![
+      "application/octet-stream",
+      "text/plain",
+      "text/markdown",
+      "application/json",
+      "image/png",
+      "image/jpeg"
+    ].includes(f.mediaType)) return invalid8();
   } else if (d.kind === "csv") {
     if (Object.keys(d).sort().join(",") !== "dataRows,delimiter,encoding,headerRow,kind" || f.mediaType !== "text/csv" || !["utf-8", "windows-1252"].includes(d.encoding) || ![",", ";", "	"].includes(d.delimiter) || !Number.isSafeInteger(d.headerRow) || d.headerRow < 1 || !Number.isSafeInteger(d.dataRows) || d.dataRows < 0) return invalid8();
   } else if (d.kind === "pdf") {
@@ -452,6 +459,14 @@ function safeFileName(value) {
 function safeFilePath(value) {
   return typeof value == "string" && value.length <= 1024 && value.split("/").every(safeFileName);
 }
+function safeManagedFilePath(value) {
+  return safeFilePath(value) && value.split("/")[0].toLowerCase() !== ".os";
+}
+var ORIGINAL_MEDIA_TYPES = ["application/pdf", "text/plain", "text/markdown", "application/json", "image/png", "image/jpeg"];
+function declaredOriginalMediaType(value) {
+  let normalized = value.split(";", 1)[0].trim().toLowerCase();
+  return ORIGINAL_MEDIA_TYPES.includes(normalized) ? normalized : void 0;
+}
 function parseFileCreateMetadata(value, maxBytes) {
   let invalid8 = () => {
     throw new FileOperationError("invalid_input", 400);
@@ -460,7 +475,7 @@ function parseFileCreateMetadata(value, maxBytes) {
   let input = value;
   if (Object.keys(input).some((key) => !["name", "path", "storage", "csv", "inputMediaType", "size", "requestKey"].includes(key))) return invalid8();
   let path = input.path === void 0 ? "Files" : input.path;
-  if (!safeFileName(input.name) || !safeFilePath(path) || path.split("/")[0].toLowerCase() === ".os" || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || input.inputMediaType !== void 0 && input.inputMediaType !== "application/pdf" || !Number.isSafeInteger(input.size) || input.size < 0) return invalid8();
+  if (!safeFileName(input.name) || !safeManagedFilePath(path) || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || input.inputMediaType !== void 0 && (typeof input.inputMediaType != "string" || !ORIGINAL_MEDIA_TYPES.includes(input.inputMediaType)) || !Number.isSafeInteger(input.size) || input.size < 0) return invalid8();
   if (input.size > maxBytes) throw new FileOperationError("request_too_large", 413);
   if (typeof input.requestKey != "string" || input.requestKey.length < 1 || input.requestKey.length > 256 || input.requestKey !== input.requestKey.trim() || /[\u0000-\u001f\u007f]/.test(input.requestKey)) return invalid8();
   let csv;
@@ -476,7 +491,7 @@ function parseFileCreateMetadata(value, maxBytes) {
     name: input.name,
     path,
     ...input.storage ? { storage: input.storage } : {},
-    ...input.inputMediaType === "application/pdf" ? { inputMediaType: input.inputMediaType } : {},
+    ...input.inputMediaType === void 0 ? {} : { inputMediaType: input.inputMediaType },
     ...csv ? { csv } : {},
     size: input.size,
     requestKey: input.requestKey
@@ -533,7 +548,11 @@ function parseAppRoutineContract(value) {
       case "boolean":
         return fields2(value2, ["type"]) ? { type: value2.type } : invalidContract();
       case "file":
-        return !fields2(value2, ["type"], ["storage"]) || owns(value2, "storage") && value2.storage !== "local" && value2.storage !== "remote" ? invalidContract() : { type: "file", ...owns(value2, "storage") ? { storage: value2.storage } : {} };
+        return !fields2(value2, ["type"], ["storage", "path"]) || owns(value2, "storage") && value2.storage !== "local" && value2.storage !== "remote" || owns(value2, "path") && !safeManagedFilePath(value2.path) ? invalidContract() : {
+          type: "file",
+          ...owns(value2, "storage") ? { storage: value2.storage } : {},
+          ...owns(value2, "path") ? { path: value2.path } : {}
+        };
       case "string":
         return !fields2(value2, ["type"], ["maxLength"]) || owns(value2, "maxLength") && (!Number.isSafeInteger(value2.maxLength) || value2.maxLength < 0 || value2.maxLength > 4096) ? invalidContract() : { type: "string", ...owns(value2, "maxLength") ? { maxLength: value2.maxLength } : {} };
       case "integer":
@@ -580,7 +599,9 @@ function validateRoutineSchemaValue(schema2, value) {
       return typeof value != "number" || !(schema2.type === "integer" ? Number.isSafeInteger(value) : Number.isFinite(value)) || schema2.minimum !== void 0 && value < schema2.minimum || schema2.maximum !== void 0 && value > schema2.maximum ? invalidValue() : void 0;
     case "file":
       try {
-        jsonData(value), parseFileDescriptor(value);
+        jsonData(value);
+        let file2 = parseFileDescriptor(value);
+        if (schema2.path !== void 0 && file2.path !== schema2.path) return invalidValue();
       } catch {
         return invalidValue();
       }
@@ -590,14 +611,16 @@ function validateRoutineSchemaValue(schema2, value) {
 var ROUTINE_DECLARATION_SCHEMA = "https://schemas.oddington.ai/routine/v1.json", ROUTINE_SOURCE_LIMITS = { files: 2e4, bytes: 256 * 1024 * 1024, declarationBytes: 64 * 1024 };
 var invalid = (field) => {
   throw new Error(`Invalid routine declaration: ${field}`);
-}, object2 = (value, fields5, field) => ((!value || typeof value != "object" || Array.isArray(value) || Object.keys(value).some((key) => !fields5.includes(key))) && invalid(field), value), routineAlias = (value) => typeof value == "string" && /^[a-z][a-z0-9-]{0,62}$/.test(value), list = (value, field, allowed, qualified = !1) => value === void 0 ? [] : ((!Array.isArray(value) || value.length > 64 || value.some((item) => !(routineAlias(item) || qualified && typeof item == "string" && item.split("/").length === 2 && item.split("/").every(routineAlias)) || allowed && !allowed.includes(item)) || new Set(value).size !== value.length) && invalid(field), [...value].sort());
+}, object2 = (value, fields5, field) => ((!value || typeof value != "object" || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null || Reflect.ownKeys(value).some((key) => typeof key != "string" || !fields5.includes(key) || !Object.getOwnPropertyDescriptor(value, key).enumerable || !Object.hasOwn(Object.getOwnPropertyDescriptor(value, key), "value"))) && invalid(field), value), routineAlias = (value) => typeof value == "string" && /^[a-z][a-z0-9-]{0,62}$/.test(value), list = (value, field, allowed, qualified = !1) => value === void 0 ? [] : ((!Array.isArray(value) || value.length > 64 || value.some((item) => !(routineAlias(item) || qualified && typeof item == "string" && item.split("/").length === 2 && item.split("/").every(routineAlias)) || allowed && !allowed.includes(item)) || new Set(value).size !== value.length) && invalid(field), [...value].sort());
 function routineAssetPattern(value) {
   return typeof value == "string" && value.length <= 512 && !value.startsWith("/") && !value.includes("\\") && !value.includes(":") && value.split("/").every((part) => !!part && part !== "." && part !== ".." && /^[a-zA-Z0-9_.*-]+$/.test(part));
 }
 function parseRoutineDeclaration(value) {
   let v = object2(value, ["$schema", "access", "runtime", "retry", "assets"], "fields");
   v.$schema !== ROUTINE_DECLARATION_SCHEMA && invalid("$schema");
-  let access = object2(v.access === void 0 ? {} : v.access, ["repositories", "connections", "models", "files", "publish"], "access"), rawRepositories = access.repositories === void 0 ? {} : access.repositories, repositories = object2(rawRepositories, rawRepositories && typeof rawRepositories == "object" ? Object.keys(rawRepositories) : [], "access.repositories");
+  let access = object2(v.access === void 0 ? {} : v.access, ["repositories", "connections", "ai", "files", "publish"], "access");
+  Object.hasOwn(access, "ai") && access.ai !== !0 && invalid("access.ai");
+  let rawRepositories = access.repositories === void 0 ? {} : access.repositories, repositories = object2(rawRepositories, rawRepositories && typeof rawRepositories == "object" ? Object.keys(rawRepositories) : [], "access.repositories");
   Object.keys(repositories).length > 64 && invalid("access.repositories");
   let grants = {};
   for (let key of Object.keys(repositories).sort())
@@ -615,7 +638,7 @@ function parseRoutineDeclaration(value) {
     access: {
       repositories: grants,
       connections: list(access.connections, "access.connections", void 0, !0),
-      models: list(access.models, "access.models"),
+      ...access.ai === !0 ? { ai: !0 } : {},
       ...access.files === void 0 ? {} : { files: access.files },
       publish: list(access.publish, "access.publish", ["asks", "digests"])
     },
@@ -663,7 +686,7 @@ function assertRoutineFields(value, allowed) {
 }
 function parseRoutineAccess(value) {
   try {
-    value !== void 0 && assertRoutineJson(value), assertRoutineFields(value ?? {}, ["repositories", "connections", "models", "files", "publish"]);
+    value !== void 0 && assertRoutineJson(value), assertRoutineFields(value ?? {}, ["repositories", "connections", "ai", "files", "publish"]);
     let access = value, names = access?.connections ?? [];
     if (!Array.isArray(names) || names.length > 64 || new Set(names).size !== names.length || names.some((name) => typeof name != "string" || name.split("/").length !== 2 || name.split("/").some((part) => !isAppRoutineName(part)))) return invalidContract2();
     let parsed = parseRoutineDeclaration({ $schema: ROUTINE_DECLARATION_SCHEMA, access: { ...access, connections: [] } }).access;
@@ -673,6 +696,52 @@ function parseRoutineAccess(value) {
   }
 }
 
+var ROUTINE_AI_VALUE_BYTES = 256 * 1024, ROUTINE_AI_EVIDENCE_BYTES = 4 * 1024;
+var RoutineAIError = class extends Error {
+  constructor(code) {
+    super(code);
+    this.code = code;
+    this.name = "RoutineAIError";
+  }
+  code;
+};
+function capture(value, invalid8, oversized) {
+  try {
+    assertRoutineJson(value);
+    let encoded = JSON.stringify(value);
+    if (new TextEncoder().encode(encoded).byteLength > ROUTINE_AI_VALUE_BYTES) throw new RoutineAIError(oversized);
+    return freezeRoutineMetadata(JSON.parse(encoded));
+  } catch (error) {
+    throw error instanceof RoutineAIError ? error : new RoutineAIError(invalid8);
+  }
+}
+function parseRoutineAIRequest(value) {
+  let v = capture(value, "invalid_input", "input_too_large");
+  try {
+    if (assertRoutineFields(v, v.kind === "generateObject" ? ["kind", "instructions", "input", "schema"] : ["kind", "instructions", "input"]), !["generateText", "generateObject"].includes(v.kind) || typeof v.instructions != "string" || !v.instructions.trim()) throw new Error();
+    let input = typeof v.input == "string" ? v.input : parseFileDescriptor(v.input);
+    if (v.kind === "generateText") return freezeRoutineMetadata({ kind: v.kind, instructions: v.instructions, input });
+    let schema2 = parseAppRoutineContract({ routine: "ai", input: v.schema, steps: [{ id: "generate" }] }).input;
+    return freezeRoutineMetadata({ kind: v.kind, instructions: v.instructions, input, schema: schema2 });
+  } catch {
+    throw new RoutineAIError("invalid_input");
+  }
+}
+function parseRoutineAIResult(request2, value) {
+  let v = capture(value, "invalid_output", "output_too_large");
+  try {
+    if (request2.kind === "generateText") {
+      if (assertRoutineFields(v, ["text"]), typeof v.text != "string" || !v.text.trim()) throw new Error();
+      return freezeRoutineMetadata({ text: v.text });
+    } else {
+      if (assertRoutineFields(v, ["object"]), !Object.hasOwn(v, "object")) throw new Error();
+      return validateRoutineSchemaValue(request2.schema, v.object), freezeRoutineMetadata({ object: v.object });
+    }
+  } catch {
+    throw new RoutineAIError("invalid_output");
+  }
+}
+
 var LIMIT = 256 * 1024, invalid3 = () => {
   throw new AppRoutineContractError("invalid_value");
 }, invalidContract3 = () => {
@@ -683,7 +752,7 @@ function captureJson(value) {
   let encoded = JSON.stringify(value);
   return new TextEncoder().encode(encoded).byteLength > LIMIT ? invalid3() : freezeRoutineMetadata(JSON.parse(encoded));
 }
-function capture(schema2, value) {
+function capture2(schema2, value) {
   let captured = captureJson(value);
   return validateRoutineSchemaValue(schema2, captured), captured;
 }
@@ -709,7 +778,7 @@ function declaration(value, defaults) {
   } catch {
     return invalidContract3();
   }
-  let parsed = freezeRoutineMetadata(parseAppRoutineContract({ routine: "definition", input: value, steps: [{ id: "inspect" }] }).input), captured = defaults ? capture(parsed, defaults.value) : void 0, builder = Object.defineProperty({ ...parsed }, "default", { value: (value2) => declaration(parsed, { value: value2 }) });
+  let parsed = freezeRoutineMetadata(parseAppRoutineContract({ routine: "definition", input: value, steps: [{ id: "inspect" }] }).input), captured = defaults ? capture2(parsed, defaults.value) : void 0, builder = Object.defineProperty({ ...parsed }, "default", { value: (value2) => declaration(parsed, { value: value2 }) });
   return schemas.set(builder, { schema: parsed, ...defaults ? { default: captured } : {} }), Object.freeze(builder);
 }
 var schema = {
@@ -731,7 +800,7 @@ var schema = {
   boolean() {
     return declaration({ type: "boolean" });
   }
-}, file = (options = {}) => (assertRoutineFields(options, ["storage"]), declaration({ type: "file", ...options })), definitions = /* @__PURE__ */ new WeakMap(), defineRoutine = (definition) => {
+}, file = (options = {}) => (assertRoutineFields(options, ["storage", "path"]), declaration({ type: "file", ...options })), definitions = /* @__PURE__ */ new WeakMap(), defineRoutine = (definition) => {
   if (assertRoutineFields(definition, ["id", "title", "input", "steps", "result", "access", "responses", "run"]), !isAppRoutineName(definition.id) || definition.title !== void 0 && !routineTitle(definition.title) || typeof definition.run != "function") return invalidContract3();
   let input = definition.input === void 0 ? { schema: empty, default: {} } : schemaMetadata(definition.input), result2 = definition.result === void 0 ? void 0 : schemaMetadata(definition.result).schema, access = parseRoutineAccess(definition.access);
   assertRoutineFields(definition.steps ?? {});
@@ -794,10 +863,32 @@ function inspectRoutineDefinition(definition) {
 }
 function captureRoutineInput(definition, input) {
   let contract = inspectRoutineDefinition(definition);
-  return capture(contract.input, input === void 0 && Object.hasOwn(contract, "inputDefault") ? contract.inputDefault : input);
+  return capture2(contract.input, input === void 0 && Object.hasOwn(contract, "inputDefault") ? contract.inputDefault : input);
 }
 async function executeRoutineDefinition(definition, input, runtime) {
-  let captured = captureRoutineInput(definition, input), { contract, steps, run } = definitions.get(definition), active2 = !0, accepting = !0, broken = !1, work = Promise.resolve(), called = /* @__PURE__ */ new Set(), reached = /* @__PURE__ */ new Set(), guarded = (value, receiver) => typeof value == "function" ? (...args) => {
+  let captured = captureRoutineInput(definition, input), { contract, steps, run } = definitions.get(definition), active2 = !0, accepting = !0, broken = !1, work = Promise.resolve(), aiFailure, aiWork = /* @__PURE__ */ new Set(), generate = (kind, value) => {
+    let operation2 = (async () => {
+      if (!active2 || broken || contract.access.ai !== !0) throw new RoutineAIError("access_denied");
+      if (!runtime.ai) throw new RoutineAIError("capability_unavailable");
+      let request2;
+      try {
+        assertRoutineFields(value, kind === "generateObject" ? ["instructions", "input", "schema"] : ["instructions", "input"]), request2 = parseRoutineAIRequest({
+          kind,
+          instructions: value.instructions,
+          input: value.input,
+          ...kind === "generateObject" ? { schema: schemaMetadata(value.schema).schema } : {}
+        });
+      } catch (error) {
+        throw error instanceof RoutineAIError ? error : new RoutineAIError("invalid_input");
+      }
+      let result3 = await runtime.ai[kind](request2);
+      if (!active2 || broken) throw new RoutineAIError("access_denied");
+      return parseRoutineAIResult(request2, result3);
+    })();
+    return aiWork.add(operation2), operation2.then(() => aiWork.delete(operation2), (error) => {
+      aiFailure ??= error, broken = !0, aiWork.delete(operation2);
+    }), operation2;
+  }, called = /* @__PURE__ */ new Set(), reached = /* @__PURE__ */ new Set(), guarded = (value, receiver) => typeof value == "function" ? (...args) => {
     if (!active2 || broken) throw new Error("Run authority ended");
     return guarded(Reflect.apply(value, receiver, args));
   } : value && typeof value == "object" && !(value instanceof Promise) ? new Proxy({ ...value }, {
@@ -810,6 +901,10 @@ async function executeRoutineDefinition(definition, input, runtime) {
     ...guarded({
       ...runtime,
       run: freezeRoutineMetadata({ ...runtime.run }),
+      ai: {
+        generateText: (value) => generate("generateText", value),
+        generateObject: (value) => generate("generateObject", value)
+      },
       connections: { ...runtime.connections, get: async (identity) => {
         if (!active2 || broken || !contract.access.connections?.includes(identity)) throw new Error("Connection unavailable");
         let value = await runtime.connections.get(identity);
@@ -850,10 +945,11 @@ async function executeRoutineDefinition(definition, input, runtime) {
   } catch (error) {
     failure = error, broken = !0;
   }
-  accepting = !1, await work, active2 = !1;
+  for (accepting = !1, await work; aiWork.size; ) await Promise.allSettled([...aiWork]);
+  active2 = !1;
   for (let step of contract.steps) reached.has(step.id) || await runtime.step(step.id, { status: "skipped" });
-  if (broken) throw failure ?? new AppRoutineContractError("invalid_value");
-  if (contract.result !== void 0) return capture(contract.result, result2);
+  if (broken) throw failure ?? aiFailure ?? new AppRoutineContractError("invalid_value");
+  if (contract.result !== void 0) return capture2(contract.result, result2);
   if (result2 !== void 0) return invalid3();
 }
 
@@ -1133,19 +1229,19 @@ var invalid6 = () => {
 }, unavailable = () => {
   throw new DataOperationError("unavailable");
 }, text2 = (value) => typeof value == "string" && value.length > 0;
-function capture2(value, ancestors = /* @__PURE__ */ new Set(), depth = 0) {
+function capture3(value, ancestors = /* @__PURE__ */ new Set(), depth = 0) {
   if (value === null || typeof value == "string" || typeof value == "boolean" || typeof value == "number" && Number.isFinite(value)) return value;
   if (!value || typeof value != "object" || ancestors.has(value) || depth > 32) return invalid6();
   ancestors.add(value);
   try {
-    return Array.isArray(value) ? historyArray(value).map((item) => capture2(item, ancestors, depth + 1)) : Object.fromEntries(Object.entries(historyProperties(value)).map(([key, descriptor]) => [key, capture2(descriptor.value, ancestors, depth + 1)]));
+    return Array.isArray(value) ? historyArray(value).map((item) => capture3(item, ancestors, depth + 1)) : Object.fromEntries(Object.entries(historyProperties(value)).map(([key, descriptor]) => [key, capture3(descriptor.value, ancestors, depth + 1)]));
   } finally {
     ancestors.delete(value);
   }
 }
 function recordPagination(select) {
   function pages(query) {
-    let captured = capture2(query), names = Object.keys(historyProperties(captured));
+    let captured = capture3(query), names = Object.keys(historyProperties(captured));
     for (let name of names) {
       let selection2 = historyProperties(captured[name]);
       if (Object.hasOwn(selection2, "$")) {
@@ -1167,7 +1263,7 @@ function recordPagination(select) {
           return [name, next === void 0 ? selection2 : { ...selection2, $: { ...selection2.$, after: next } }];
         })), response2 = await select(request2), page;
         try {
-          page = capture2(response2);
+          page = capture3(response2);
           let keys4 = Object.keys(historyProperties(page));
           (keys4.length !== active2.length + 1 || keys4.some((key) => key !== "$meta" && !active2.includes(key))) && unavailable();
           let meta = page.$meta;
@@ -1645,13 +1741,13 @@ var files = {
     if (intrinsic !== void 0 && input.size !== void 0 && input.size !== intrinsic) throw invalid7();
     let name = input.name;
     name === void 0 && blob && "name" in input.file && typeof input.file.name == "string" && (name = typeof globalThis.File < "u" && input.file instanceof globalThis.File ? input.file.name : input.file.name.split(/[\\/]/).at(-1));
-    let metadata = parseFileCreateMetadata({
+    let inputMediaType = blob ? declaredOriginalMediaType(input.file.type) : void 0, metadata = parseFileCreateMetadata({
       name,
       size: intrinsic ?? input.size,
       path: input.path,
       storage: input.storage,
       csv: input.csv,
-      ...blob && input.file.type === "application/pdf" ? { inputMediaType: "application/pdf" } : {},
+      ...inputMediaType === void 0 ? {} : { inputMediaType },
       requestKey: options?.requestKey === void 0 ? routineTransport()?.key("files") ?? crypto.randomUUID() : options.requestKey
     }, FILE_ORIGINAL_MAX_BYTES);
     if (!context2.local && !context2.localFiles && metadata.storage === "local") throw new FileOperationError("unsupported_context", 400);
@@ -1733,29 +1829,58 @@ var files = {
   read
 };
 
+function validDropboxRootPath(value) {
+  return typeof value == "string" && value.length <= 2048 && value.startsWith("/") && !/[\\\x00-\x1f\x7f]/.test(value) && value.slice(1).split("/").every((segment) => segment.length > 0 && segment.trim() === segment && segment !== "." && segment !== "..");
+}
 function validGoogleScopes(value) {
   return Array.isArray(value) && value.length > 0 && value.length <= 32 && value.every((scope) => typeof scope == "string" && scope.length <= 256 && /^(https:\/\/www\.googleapis\.com\/auth\/[A-Za-z0-9._-]+|https:\/\/mail\.google\.com\/|openid|email|profile)$/.test(scope)) && new Set(value).size === value.length;
 }
+var DROPBOX_FILE_SCOPES = ["account_info.read", "files.metadata.read", "files.content.read", "files.content.write"];
+function validDropboxFileScopes(value) {
+  return Array.isArray(value) && value.length === DROPBOX_FILE_SCOPES.length && new Set(value).size === value.length && DROPBOX_FILE_SCOPES.every((scope) => value.includes(scope));
+}
 
 var ROUTINE_CONNECTION_CREDENTIALS_ENV = "OS_ROUTINE_CONNECTION_CREDENTIALS";
+function parseRoutineConnectionNames(value) {
+  if (!Array.isArray(value) || value.some((name) => typeof name != "string" || !/^(gmail|airtable|dropbox)\/[a-z0-9][a-z0-9-]{0,62}$/.test(name)) || new Set(value).size !== value.length)
+    throw new Error("Invalid routine connections");
+  return value;
+}
 var connectionUuid = (v) => typeof v == "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(v);
 function runtimeConnection(lease) {
-  return lease.provider === "gmail" ? {
-    id: `gmail/${lease.name}`,
-    provider: lease.provider,
-    name: lease.name,
-    accountEmail: lease.accountEmail,
-    scopes: [...lease.scopes],
-    accessToken: lease.accessToken,
-    expiresAt: lease.expiresAt
-  } : {
-    id: `airtable/${lease.name}`,
-    provider: lease.provider,
-    name: lease.name,
-    baseId: lease.baseId,
-    accessToken: lease.accessToken,
-    runExpiresAt: lease.runExpiresAt
-  };
+  switch (lease.provider) {
+    case "gmail":
+      return {
+        id: `gmail/${lease.name}`,
+        provider: lease.provider,
+        name: lease.name,
+        accountEmail: lease.accountEmail,
+        scopes: [...lease.scopes],
+        accessToken: lease.accessToken,
+        expiresAt: lease.expiresAt
+      };
+    case "airtable":
+      return {
+        id: `airtable/${lease.name}`,
+        provider: lease.provider,
+        name: lease.name,
+        baseId: lease.baseId,
+        accessToken: lease.accessToken,
+        runExpiresAt: lease.runExpiresAt
+      };
+    case "dropbox":
+      return {
+        id: `dropbox/${lease.name}`,
+        provider: lease.provider,
+        name: lease.name,
+        accountId: lease.accountId,
+        access: lease.access,
+        rootPath: lease.rootPath,
+        scopes: [...lease.scopes],
+        accessToken: lease.accessToken,
+        expiresAt: lease.expiresAt
+      };
+  }
 }
 function parseConnectionLease(raw, now = Date.now()) {
   let v = raw;
@@ -1766,7 +1891,7 @@ function parseConnectionLease(raw, now = Date.now()) {
       throw new Error("Invalid connection credential");
     return v;
   }
-  if (v.provider === "airtable" && Object.keys(v).sort().join(",") === "accessToken,baseId,connectionId,name,provider,runExpiresAt,runId" && typeof v.baseId == "string" && /^app[A-Za-z0-9]+$/.test(v.baseId) && typeof v.runExpiresAt == "string" && Number.isFinite(Date.parse(v.runExpiresAt)) && Date.parse(v.runExpiresAt) > now + 6e4 && Date.parse(v.runExpiresAt) <= now + 15 * 6e4)
+  if (v.provider === "airtable" && Object.keys(v).sort().join(",") === "accessToken,baseId,connectionId,name,provider,runExpiresAt,runId" && typeof v.baseId == "string" && /^app[A-Za-z0-9]+$/.test(v.baseId) && typeof v.runExpiresAt == "string" && Number.isFinite(Date.parse(v.runExpiresAt)) && Date.parse(v.runExpiresAt) > now + 6e4 && Date.parse(v.runExpiresAt) <= now + 15 * 6e4 || v.provider === "dropbox" && Object.keys(v).sort().join(",") === "access,accessToken,accountId,connectionId,expiresAt,name,provider,rootPath,runId,scopes" && typeof v.accountId == "string" && /^dbid:[A-Za-z0-9_-]{1,128}$/.test(v.accountId) && v.access === "full_dropbox" && validDropboxRootPath(v.rootPath) && validDropboxFileScopes(v.scopes) && typeof v.expiresAt == "string" && Number.isFinite(Date.parse(v.expiresAt)) && Date.parse(v.expiresAt) > now + 6e4 && Date.parse(v.expiresAt) <= now + 144e5)
     return v;
   throw new Error("Invalid connection credential");
 }
@@ -2305,9 +2430,9 @@ function parseAnswerableQuestion(value) {
   let entry = object4(json(value));
   keys3(
     entry,
-    ["itemId", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "tags", "recordRefs", "instructions"],
-    ["itemId", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable"]
-  ), assert(id2(entry.itemId) && integer(entry.revision) && text4(entry.title) && text4(entry.inboxUrl));
+    ["itemId", "number", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "tags", "recordRefs", "instructions"],
+    ["itemId", "number", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable"]
+  ), assert(id2(entry.itemId) && integer(entry.number) && integer(entry.revision) && text4(entry.title) && text4(entry.inboxUrl));
   let link = new URL(entry.inboxUrl), slug = link.hostname.slice(0, -13);
   return assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && entry.inboxUrl === `https://${slug}.oddington.ai/inbox/${entry.itemId}`), assert(isAppRoutineName(entry.routine) && text4(entry.questionId) && entry.questionId === entry.questionId.trim() && text4(entry.prompt) && (!("instructions" in entry) || text4(entry.instructions, !0)) && typeof entry.answerable == "boolean"), responseDefinition(entry.response), askMetadata(entry), entry;
 }
@@ -2841,10 +2966,10 @@ var unavailable3 = () => new InboxOperationError(503, "unavailable"), stale = ()
 function hostFailure(error, context2) {
   return !context2.isCurrent() || context2.expiresAt <= Date.now() || error instanceof InboxContextError && error.status === 401 ? stale() : error instanceof InboxContextError && error.status === 403 ? new InboxOperationError(403, "access_denied") : unavailable3();
 }
-async function send2(operation2, input) {
+async function send2(operation2, input, admitted) {
   let envelope = parseInboxRequest({ operation: operation2, input }), context2;
   try {
-    context2 = await resolveAppContext();
+    context2 = admitted ?? await resolveAppContext();
   } catch {
     throw stale();
   }
@@ -3004,7 +3129,7 @@ var inbox = {
         let page = await send2("questions.list", {
           routines,
           ...beforeNumber === void 0 ? {} : { beforeNumber }
-        });
+        }, initial);
         if (check(), page.questions.some((question2) => question2.inboxUrl !== `https://${initial.workspace}.oddington.ai/inbox/${question2.itemId}` || !routines.includes(question2.routine)) || beforeNumber !== void 0 && page.nextBeforeNumber !== null && page.nextBeforeNumber >= beforeNumber) throw unavailable3();
         if (questions.push(...page.questions), page.nextBeforeNumber === null) return questions;
         beforeNumber = page.nextBeforeNumber;