@oddington/sdk 0.1.27 → 0.1.28

package/README.md

@@ -75,8 +75,9 @@ runtime contains `run.id`, `data`, `files`, `connections`, `inbox`, and `step`.
 Accepted input and saved values are immutable snapshots. Access declarations set
 maximum named capabilities and grant no authority; the trusted host checks current
 authority. Response handler IDs are local to the routine and must be unique. A
-declared `review` handler crosses the Inbox publication seam as
-`invoice-import/review`, without deploying or executing that handler.
+declared `review` handler crosses the Inbox publication seam as `review`; Inbox
+retains the canonical `invoice-import` routine identity separately, without
+deploying or executing that handler.
 
 The bounded grammar supports closed objects with required properties, arrays with
 an explicit `maxItems` from 1 to 64, booleans, strings (at most 4096 code points),

package/dist/browser.js

@@ -909,7 +909,10 @@ async function executeRoutineDefinition(definition, input, runtime) {
     get(_target, key) {
       return guarded(Reflect.get(value, key, value), value);
     }
-  }) : value, qualify = (value) => value.questions === void 0 ? value : { ...value, questions: value.questions.map((question2) => question2.handler ? contract.responses.some((handler) => handler.id === question2.handler.id) ? { ...question2, handler: { ...question2.handler, id: `${contract.id}/${question2.handler.id}` } } : invalid3() : question2) }, os2 = Object.freeze({
+  }) : value, validateHandlers = (value) => {
+    for (let question2 of value.questions ?? []) if (question2.handler && !contract.responses.some((handler) => handler.id === question2.handler.id)) return invalid3();
+    return value;
+  }, os2 = Object.freeze({
     ...guarded({
       ...runtime,
       run: freezeRoutineMetadata({ ...runtime.run }),
@@ -923,7 +926,7 @@ async function executeRoutineDefinition(definition, input, runtime) {
         if (!active2 || broken) throw new Error("Run authority ended");
         return value;
       } },
-      inbox: { ...runtime.inbox, publishAsk: (value, options) => runtime.inbox.publishAsk(qualify(value), options) }
+      inbox: { ...runtime.inbox, publishAsk: (value, options) => runtime.inbox.publishAsk(validateHandlers(value), options) }
     }),
     step(id3, ...input2) {
       let saved;
@@ -3280,7 +3283,7 @@ function createBrowserAuth(runtime) {
     }
     c.session = session;
     let email = typeof session.user.email == "string" ? session.user.email.trim() : "", metadata = session.user.user_metadata, name = ["name", "full_name", "first_name"].map((key) => metadata?.[key]).find((value) => typeof value == "string" && value.trim())?.trim() || email, account = !replaced && c.state.account?.email === email && c.state.account.displayName === name ? c.state.account : Object.freeze({ email, displayName: name });
-    publish(c, { status: "signed_in", account, ...pending ? { pending } : {} }), notify(c, event);
+    notify(c, event), publish(c, { status: "signed_in", account, ...pending ? { pending } : {} });
     let checkExpiry = () => {
       if (!c.active || !c.session) return;
       let remaining = c.session.expires_at * 1e3 - Date.now();