@oddington/sdk 0.1.25 → 0.1.26

package/README.md

@@ -40,7 +40,7 @@ import { defineRoutine, file, schema } from '@oddington/sdk';
 
 export default defineRoutine({
   id: 'invoice-import',
-  input: schema.object({ document: file() }),
+  input: schema.object({ document: file({ storage: 'local', path: 'Statements' }) }),
   access: { files: 'read' },
   steps: {
     read: {
@@ -67,8 +67,10 @@ skipped. Omitted input normalizes to `{}`. A top-level schema can supply a valid
 immutable default with `.default(value)`, such as
 `schema.object({ files: schema.array(file(), { maxItems: 32 }) }).default({ files: [] })`.
 Nested defaults are unsupported and rejected. Omitted steps permit no step call;
-omitted result permits no returned value. `file()` declares a complete OS File descriptor;
-the trusted launcher separately verifies current File-use authority. The supplied
+omitted result permits no returned value. `file()` declares a complete OS File descriptor.
+Its optional `storage` selects local or remote placement and its optional `path`
+selects a managed OS parent such as `Statements`; it is never a machine or provider
+path. The trusted launcher separately verifies current File-use authority. The supplied
 runtime contains `run.id`, `data`, `files`, `connections`, `inbox`, and `step`.
 Accepted input and saved values are immutable snapshots. Access declarations set
 maximum named capabilities and grant no authority; the trusted host checks current

package/dist/browser.js

@@ -459,6 +459,9 @@ function safeFileName(value) {
 function safeFilePath(value) {
   return typeof value == "string" && value.length <= 1024 && value.split("/").every(safeFileName);
 }
+function safeManagedFilePath(value) {
+  return safeFilePath(value) && value.split("/")[0].toLowerCase() !== ".os";
+}
 var ORIGINAL_MEDIA_TYPES = ["application/pdf", "text/plain", "text/markdown", "application/json", "image/png", "image/jpeg"];
 function declaredOriginalMediaType(value) {
   let normalized = value.split(";", 1)[0].trim().toLowerCase();
@@ -472,7 +475,7 @@ function parseFileCreateMetadata(value, maxBytes) {
   let input = value;
   if (Object.keys(input).some((key) => !["name", "path", "storage", "csv", "inputMediaType", "size", "requestKey"].includes(key))) return invalid8();
   let path = input.path === void 0 ? "Files" : input.path;
-  if (!safeFileName(input.name) || !safeFilePath(path) || path.split("/")[0].toLowerCase() === ".os" || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || input.inputMediaType !== void 0 && (typeof input.inputMediaType != "string" || !ORIGINAL_MEDIA_TYPES.includes(input.inputMediaType)) || !Number.isSafeInteger(input.size) || input.size < 0) return invalid8();
+  if (!safeFileName(input.name) || !safeManagedFilePath(path) || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || input.inputMediaType !== void 0 && (typeof input.inputMediaType != "string" || !ORIGINAL_MEDIA_TYPES.includes(input.inputMediaType)) || !Number.isSafeInteger(input.size) || input.size < 0) return invalid8();
   if (input.size > maxBytes) throw new FileOperationError("request_too_large", 413);
   if (typeof input.requestKey != "string" || input.requestKey.length < 1 || input.requestKey.length > 256 || input.requestKey !== input.requestKey.trim() || /[\u0000-\u001f\u007f]/.test(input.requestKey)) return invalid8();
   let csv;
@@ -545,7 +548,11 @@ function parseAppRoutineContract(value) {
       case "boolean":
         return fields2(value2, ["type"]) ? { type: value2.type } : invalidContract();
       case "file":
-        return !fields2(value2, ["type"], ["storage"]) || owns(value2, "storage") && value2.storage !== "local" && value2.storage !== "remote" ? invalidContract() : { type: "file", ...owns(value2, "storage") ? { storage: value2.storage } : {} };
+        return !fields2(value2, ["type"], ["storage", "path"]) || owns(value2, "storage") && value2.storage !== "local" && value2.storage !== "remote" || owns(value2, "path") && !safeManagedFilePath(value2.path) ? invalidContract() : {
+          type: "file",
+          ...owns(value2, "storage") ? { storage: value2.storage } : {},
+          ...owns(value2, "path") ? { path: value2.path } : {}
+        };
       case "string":
         return !fields2(value2, ["type"], ["maxLength"]) || owns(value2, "maxLength") && (!Number.isSafeInteger(value2.maxLength) || value2.maxLength < 0 || value2.maxLength > 4096) ? invalidContract() : { type: "string", ...owns(value2, "maxLength") ? { maxLength: value2.maxLength } : {} };
       case "integer":
@@ -592,7 +599,9 @@ function validateRoutineSchemaValue(schema2, value) {
       return typeof value != "number" || !(schema2.type === "integer" ? Number.isSafeInteger(value) : Number.isFinite(value)) || schema2.minimum !== void 0 && value < schema2.minimum || schema2.maximum !== void 0 && value > schema2.maximum ? invalidValue() : void 0;
     case "file":
       try {
-        jsonData(value), parseFileDescriptor(value);
+        jsonData(value);
+        let file2 = parseFileDescriptor(value);
+        if (schema2.path !== void 0 && file2.path !== schema2.path) return invalidValue();
       } catch {
         return invalidValue();
       }
@@ -791,7 +800,7 @@ var schema = {
   boolean() {
     return declaration({ type: "boolean" });
   }
-}, file = (options = {}) => (assertRoutineFields(options, ["storage"]), declaration({ type: "file", ...options })), definitions = /* @__PURE__ */ new WeakMap(), defineRoutine = (definition) => {
+}, file = (options = {}) => (assertRoutineFields(options, ["storage", "path"]), declaration({ type: "file", ...options })), definitions = /* @__PURE__ */ new WeakMap(), defineRoutine = (definition) => {
   if (assertRoutineFields(definition, ["id", "title", "input", "steps", "result", "access", "responses", "run"]), !isAppRoutineName(definition.id) || definition.title !== void 0 && !routineTitle(definition.title) || typeof definition.run != "function") return invalidContract3();
   let input = definition.input === void 0 ? { schema: empty, default: {} } : schemaMetadata(definition.input), result2 = definition.result === void 0 ? void 0 : schemaMetadata(definition.result).schema, access = parseRoutineAccess(definition.access);
   assertRoutineFields(definition.steps ?? {});
@@ -2957,10 +2966,10 @@ var unavailable3 = () => new InboxOperationError(503, "unavailable"), stale = ()
 function hostFailure(error, context2) {
   return !context2.isCurrent() || context2.expiresAt <= Date.now() || error instanceof InboxContextError && error.status === 401 ? stale() : error instanceof InboxContextError && error.status === 403 ? new InboxOperationError(403, "access_denied") : unavailable3();
 }
-async function send2(operation2, input) {
+async function send2(operation2, input, admitted) {
   let envelope = parseInboxRequest({ operation: operation2, input }), context2;
   try {
-    context2 = await resolveAppContext();
+    context2 = admitted ?? await resolveAppContext();
   } catch {
     throw stale();
   }
@@ -3120,7 +3129,7 @@ var inbox = {
         let page = await send2("questions.list", {
           routines,
           ...beforeNumber === void 0 ? {} : { beforeNumber }
-        });
+        }, initial);
         if (check(), page.questions.some((question2) => question2.inboxUrl !== `https://${initial.workspace}.oddington.ai/inbox/${question2.itemId}` || !routines.includes(question2.routine)) || beforeNumber !== void 0 && page.nextBeforeNumber !== null && page.nextBeforeNumber >= beforeNumber) throw unavailable3();
         if (questions.push(...page.questions), page.nextBeforeNumber === null) return questions;
         beforeNumber = page.nextBeforeNumber;