@oddington/sdk 0.1.30 → 0.1.31

package/dist/browser.js

@@ -15,22 +15,7 @@ function parseFileDescriptor(value) {
   };
   if (!value || typeof value != "object" || Array.isArray(value)) return invalid9();
   let f = value;
-  if (Object.keys(f).sort().join(",") !== "details,enrichments,id,mediaType,name,path,sha256,size" || typeof f.id != "string" || !FILE_ID_PATTERN.test(f.id) || !safeFileName(f.name) || !safeFilePath(f.path) || !Number.isSafeInteger(f.size) || f.size < 0 || f.size > FILE_ORIGINAL_MAX_BYTES || typeof f.sha256 != "string" || !/^[0-9a-f]{64}$/.test(f.sha256) || !f.enrichments || typeof f.enrichments != "object" || Array.isArray(f.enrichments) || !f.details || typeof f.details != "object" || Array.isArray(f.details)) return invalid9();
-  let d = f.details;
-  if (d.kind === "other") {
-    if (Object.keys(d).length !== 1 || ![
-      "application/octet-stream",
-      "text/plain",
-      "text/markdown",
-      "application/json",
-      "image/png",
-      "image/jpeg"
-    ].includes(f.mediaType)) return invalid9();
-  } else if (d.kind === "csv") {
-    if (Object.keys(d).sort().join(",") !== "dataRows,delimiter,encoding,headerRow,kind" || f.mediaType !== "text/csv" || !["utf-8", "windows-1252"].includes(d.encoding) || ![",", ";", "	"].includes(d.delimiter) || !Number.isSafeInteger(d.headerRow) || d.headerRow < 1 || !Number.isSafeInteger(d.dataRows) || d.dataRows < 0) return invalid9();
-  } else if (d.kind === "pdf") {
-    if (f.mediaType !== "application/pdf" || Object.keys(d).some((key) => !["kind", "pages"].includes(key)) || "pages" in d && (!Number.isSafeInteger(d.pages) || d.pages < 1)) return invalid9();
-  } else return invalid9();
+  if (Object.keys(f).sort().join(",") !== "enrichments,id,mediaType,name,path,sha256,size" || typeof f.id != "string" || !FILE_ID_PATTERN.test(f.id) || !safeFileName(f.name) || !safeFilePath(f.path) || !Number.isSafeInteger(f.size) || f.size < 0 || f.size > FILE_ORIGINAL_MAX_BYTES || typeof f.sha256 != "string" || !/^[0-9a-f]{64}$/.test(f.sha256) || !f.enrichments || typeof f.enrichments != "object" || Array.isArray(f.enrichments) || !isCanonicalOriginalMediaType(f.mediaType)) return invalid9();
   for (let [name2, descriptor] of Object.entries(f.enrichments)) {
     if (!safeEnrichmentName(name2)) return invalid9();
     parseEnrichmentDescriptor(descriptor);
@@ -67,10 +52,19 @@ function safeFilePath(value) {
 function safeManagedFilePath(value) {
   return safeFilePath(value) && value.split("/")[0].toLowerCase() !== ".os";
 }
-var ORIGINAL_MEDIA_TYPES = ["application/pdf", "text/plain", "text/markdown", "application/json", "image/png", "image/jpeg"];
 function declaredOriginalMediaType(value) {
-  let normalized = value.split(";", 1)[0].trim().toLowerCase();
-  return ORIGINAL_MEDIA_TYPES.includes(normalized) ? normalized : void 0;
+  if (typeof value != "string" || value.length > 255 || /[\u0000-\u001f\u007f-\u009f]/.test(value))
+    throw new FileOperationError("invalid_input", 400);
+  let normalized = value.split(";", 1)[0].trim().toLowerCase(), token = "[a-z0-9!#$%&'+.^_`|~-]+";
+  if (!new RegExp(`^${token}/${token}$`).test(normalized)) throw new FileOperationError("invalid_input", 400);
+  return normalized;
+}
+function isCanonicalOriginalMediaType(value) {
+  try {
+    return declaredOriginalMediaType(value) === value;
+  } catch {
+    return !1;
+  }
 }
 function parseFileCreateMetadata(value, maxBytes) {
   let invalid9 = () => {
@@ -78,26 +72,17 @@ function parseFileCreateMetadata(value, maxBytes) {
   };
   if (!value || typeof value != "object" || Array.isArray(value)) return invalid9();
   let input = value;
-  if (Object.keys(input).some((key) => !["name", "path", "storage", "csv", "inputMediaType", "size", "requestKey"].includes(key))) return invalid9();
+  if (Object.keys(input).some((key) => !["name", "path", "storage", "mediaType", "size", "requestKey"].includes(key))) return invalid9();
   let path = input.path === void 0 ? "Files" : input.path;
-  if (!safeFileName(input.name) || !safeManagedFilePath(path) || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || input.inputMediaType !== void 0 && (typeof input.inputMediaType != "string" || !ORIGINAL_MEDIA_TYPES.includes(input.inputMediaType)) || !Number.isSafeInteger(input.size) || input.size < 0) return invalid9();
+  if (!safeFileName(input.name) || !safeManagedFilePath(path) || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local") return invalid9();
+  let mediaType = input.mediaType === void 0 ? "application/octet-stream" : declaredOriginalMediaType(input.mediaType);
+  if (!Number.isSafeInteger(input.size) || input.size < 0) return invalid9();
   if (input.size > maxBytes) throw new FileOperationError("request_too_large", 413);
-  if (typeof input.requestKey != "string" || input.requestKey.length < 1 || input.requestKey.length > 256 || input.requestKey !== input.requestKey.trim() || /[\u0000-\u001f\u007f]/.test(input.requestKey)) return invalid9();
-  let csv;
-  if (input.csv !== void 0) {
-    if (!input.csv || typeof input.csv != "object" || Array.isArray(input.csv)) return invalid9();
-    let hints = input.csv;
-    if (Object.keys(hints).some((key) => !["encoding", "delimiter", "headerRow"].includes(key))) return invalid9();
-    let encoding = hints.encoding === void 0 ? "utf-8" : hints.encoding, delimiter = hints.delimiter === void 0 ? "," : hints.delimiter, headerRow = hints.headerRow === void 0 ? 1 : hints.headerRow;
-    if (encoding !== "utf-8" && encoding !== "windows-1252" || ![",", ";", "	"].includes(delimiter) || !Number.isSafeInteger(headerRow) || headerRow < 1 || headerRow > 1e5) return invalid9();
-    csv = { encoding, delimiter, headerRow };
-  }
-  return {
+  return typeof input.requestKey != "string" || input.requestKey.length < 1 || input.requestKey.length > 256 || input.requestKey !== input.requestKey.trim() || /[\u0000-\u001f\u007f]/.test(input.requestKey) ? invalid9() : {
     name: input.name,
     path,
     ...input.storage ? { storage: input.storage } : {},
-    ...input.inputMediaType === void 0 ? {} : { inputMediaType: input.inputMediaType },
-    ...csv ? { csv } : {},
+    mediaType,
     size: input.size,
     requestKey: input.requestKey
   };
@@ -166,32 +151,11 @@ function natural(value, label, minimum = 0) {
 }
 function validateInboxFile(value) {
   let v = object(serializable(value), "Inbox file");
-  keys(v, ["id", "name", "mediaType", "size", "sha256", "details"], "Inbox file");
+  keys(v, ["id", "name", "mediaType", "size", "sha256"], "Inbox file");
   let fileId = id(v.id, "Inbox file ID"), name2 = id(v.name, "filename"), mediaType = id(v.mediaType, "media type");
-  (!/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(fileId) || /[\x00-\x1f\x7f/\\]/.test(name2) || !/^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/.test(mediaType) || typeof v.sha256 != "string" || !/^[0-9a-f]{64}$/.test(v.sha256)) && fail("Invalid Inbox file identity or metadata");
+  (!/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(fileId) || /[\x00-\x1f\x7f/\\]/.test(name2) || !isCanonicalOriginalMediaType(mediaType) || typeof v.sha256 != "string" || !/^[0-9a-f]{64}$/.test(v.sha256)) && fail("Invalid Inbox file identity or metadata");
   let size = natural(v.size, "file size");
-  size > FILE_ORIGINAL_MAX_BYTES && fail("File exceeds supported size");
-  let d = object(v.details, "file details"), details;
-  switch (d.kind) {
-    case "csv":
-      keys(d, ["kind", "encoding", "delimiter", "headerRow", "dataRows"], "CSV details"), (mediaType !== "text/csv" || !["utf-8", "windows-1252"].includes(d.encoding) || ![",", ";", "	"].includes(d.delimiter)) && fail("Invalid CSV details"), details = {
-        kind: "csv",
-        encoding: d.encoding,
-        delimiter: d.delimiter,
-        headerRow: natural(d.headerRow, "header row"),
-        dataRows: natural(d.dataRows, "data rows")
-      };
-      break;
-    case "pdf":
-      keys(d, ["kind", "pages"], "PDF details"), mediaType !== "application/pdf" && fail("Invalid PDF media type"), details = { kind: "pdf", ...d.pages === void 0 ? {} : { pages: natural(d.pages, "PDF pages", 1) } };
-      break;
-    case "other":
-      keys(d, ["kind"], "other file details"), ["text/csv", "application/pdf"].includes(mediaType) && fail("File type and details differ"), details = { kind: "other" };
-      break;
-    default:
-      return fail("Unknown file details kind");
-  }
-  return { id: fileId, name: name2, mediaType, size, sha256: v.sha256, details };
+  return size > FILE_ORIGINAL_MAX_BYTES && fail("File exceeds supported size"), { id: fileId, name: name2, mediaType, size, sha256: v.sha256 };
 }
 function fields(value) {
   let result2 = array(value, "selected fields").map((entry) => {
@@ -258,8 +222,8 @@ function fileBlock(value) {
     } catch {
       return fail("Invalid shared File descriptor");
     }
-    let { id: id3, name: name2, mediaType, size, sha256, details } = file2;
-    return { id: id3, name: name2, mediaType, size, sha256, details };
+    let { id: id3, name: name2, mediaType, size, sha256 } = file2;
+    return { id: id3, name: name2, mediaType, size, sha256 };
   });
   return validateBlock({ ...input, kind: "files", files: files3 });
 }
@@ -1179,20 +1143,20 @@ function installMemberContext(resolve, retained = resolve) {
 async function resolveAppContext(retained = !1) {
   let host = memberContext;
   if (!host) throw new Error("App context unavailable.");
-  let context2 = await (retained ? retainedContext : host)();
-  if (host !== memberContext || !context2.isCurrent() || context2.expiresAt <= Date.now() || context2.kind !== "local" && (typeof context2.accessToken != "string" || !/^[^\s]{1,8192}$/.test(context2.accessToken)))
+  let context = await (retained ? retainedContext : host)();
+  if (host !== memberContext || !context.isCurrent() || context.expiresAt <= Date.now() || context.kind !== "local" && (typeof context.accessToken != "string" || !/^[^\s]{1,8192}$/.test(context.accessToken)))
     throw new Error("App context unavailable.");
-  return context2;
+  return context;
 }
 async function resolveDataContext() {
   try {
     let host = memberContext;
     if (host !== void 0) {
-      let context2 = await host();
-      if (host !== memberContext || !context2.isCurrent() || context2.expiresAt <= Date.now()) throw new Error();
-      if (context2.kind === "local") return { local: context2.requestData };
-      if (!context2 || !Number.isFinite(context2.expiresAt) || context2.expiresAt <= Date.now() || typeof context2.accessToken != "string" || !/^[^\s]{1,8192}$/.test(context2.accessToken)) throw new Error();
-      return checked(context2.workspace, context2.endpoint, { authorization: `Bearer ${context2.accessToken}` });
+      let context = await host();
+      if (host !== memberContext || !context.isCurrent() || context.expiresAt <= Date.now()) throw new Error();
+      if (context.kind === "local") return { local: context.requestData };
+      if (!context || !Number.isFinite(context.expiresAt) || context.expiresAt <= Date.now() || typeof context.accessToken != "string" || !/^[^\s]{1,8192}$/.test(context.accessToken)) throw new Error();
+      return checked(context.workspace, context.endpoint, { authorization: `Bearer ${context.accessToken}` });
     }
     throw new Error();
   } catch {
@@ -1203,20 +1167,20 @@ async function resolveFilesContext() {
   try {
     let environment = {}, host = memberContext;
     if (host) {
-      let context2 = await host();
-      if (host !== memberContext || !context2.isCurrent() || context2.expiresAt <= Date.now()) throw new Error();
-      if (context2.kind === "local") return {
-        url: `private:app:${context2.workspace}/${context2.memberId}`,
+      let context = await host();
+      if (host !== memberContext || !context.isCurrent() || context.expiresAt <= Date.now()) throw new Error();
+      if (context.kind === "local") return {
+        url: `private:app:${context.workspace}/${context.memberId}`,
         headers: {},
-        isCurrent: context2.isCurrent,
-        signal: context2.signal,
+        isCurrent: context.isCurrent,
+        signal: context.signal,
         local: void 0,
-        localFiles: context2.requestFiles
+        localFiles: context.requestFiles
       };
-      if (!Number.isFinite(context2.expiresAt) || context2.expiresAt <= Date.now() || typeof context2.accessToken != "string" || !/^[^\s]{1,8192}$/.test(context2.accessToken)) throw new Error();
+      if (!Number.isFinite(context.expiresAt) || context.expiresAt <= Date.now() || typeof context.accessToken != "string" || !/^[^\s]{1,8192}$/.test(context.accessToken)) throw new Error();
       return {
-        ...filesContext(context2.workspace, context2.endpoint, { authorization: `Bearer ${context2.accessToken}` }),
-        isCurrent: context2.isCurrent,
+        ...filesContext(context.workspace, context.endpoint, { authorization: `Bearer ${context.accessToken}` }),
+        isCurrent: context.isCurrent,
         local: void 0,
         localFiles: void 0,
         signal: void 0
@@ -1330,14 +1294,14 @@ function recordPagination(select) {
 var genericData = {
   repository(repository) {
     async function send3(input) {
-      let context2 = await resolveDataContext(), envelope = { repository, ...input };
-      if (checkDataRequestSize(envelope), "local" in context2) return await context2.local("data/query", envelope);
+      let context = await resolveDataContext(), envelope = { repository, ...input };
+      if (checkDataRequestSize(envelope), "local" in context) return await context.local("data/query", envelope);
       try {
-        let response2 = await fetch(context2.url, {
+        let response2 = await fetch(context.url, {
           method: "POST",
           redirect: "error",
           cache: "no-store",
-          headers: { "content-type": "application/json", ...context2.headers },
+          headers: { "content-type": "application/json", ...context.headers },
           body: JSON.stringify(envelope)
         }), result2 = await response2.json();
         if (!response2.ok)
@@ -1539,20 +1503,20 @@ async function result(response2, maximum = RESULT_BYTES) {
   }
 }
 async function send(suffix, init2, descriptor, initial, parent) {
-  let original = initial, checkCurrent = (context2 = original) => {
+  let original = initial, checkCurrent = (context = original) => {
     if (parent?.aborted) throw unavailable2();
-    if (!original.isCurrent() || context2.url !== original.url) throw new FileOperationError("unsupported_context", 400);
+    if (!original.isCurrent() || context.url !== original.url) throw new FileOperationError("unsupported_context", 400);
   };
   for (let attempt = 0; attempt < ATTEMPTS; attempt++) {
     checkCurrent();
-    let context2 = await resolveFilesContext();
-    checkCurrent(context2);
+    let context = await resolveFilesContext();
+    checkCurrent(context);
     try {
-      let response2 = context2.localFiles ? await context2.localFiles(suffix, init2, parent) : await (async () => {
-        let url = `${context2.url}${suffix}`, request2 = {
+      let response2 = context.localFiles ? await context.localFiles(suffix, init2, parent) : await (async () => {
+        let url = `${context.url}${suffix}`, request2 = {
           ...init2,
           signal: parent,
-          headers: { ...context2.headers, ...init2.headers },
+          headers: { ...context.headers, ...init2.headers },
           redirect: "error",
           cache: "no-store"
         };
@@ -1683,17 +1647,17 @@ async function multipartCreate(input, metadata, exchange, release = () => {
   }
 }
 async function operation(work, initial, parent) {
-  let context2 = initial ?? await resolveFilesContext();
+  let context = initial ?? await resolveFilesContext();
   if (active >= MAX_ACTIVE) throw new FileOperationError("capacity", 429, !0);
   active++;
   let execute = async (signal2) => {
     try {
-      return await work(context2, signal2);
+      return await work(context, signal2);
     } finally {
       active--;
     }
-  }, signal = context2.signal && parent ? AbortSignal.any([context2.signal, parent]) : context2.signal ?? parent;
-  return context2.localFiles ? execute(signal ?? new AbortController().signal) : timed(execute, signal).catch((error) => {
+  }, signal = context.signal && parent ? AbortSignal.any([context.signal, parent]) : context.signal ?? parent;
+  return context.localFiles ? execute(signal ?? new AbortController().signal) : timed(execute, signal).catch((error) => {
     throw error instanceof FileOperationError ? error : unavailable2();
   });
 }
@@ -1704,10 +1668,10 @@ function contentPath(id3, name2) {
   return `${path}/enrichments/${encodeURIComponent(name2)}/content`;
 }
 async function read(id3, names) {
-  let context2 = await resolveFilesContext();
+  let context = await resolveFilesContext();
   if (idPath(id3), names === void 0 || typeof names == "string") {
     let path = contentPath(id3, names);
-    return operation((context3, signal) => send(path, { method: "GET" }, !1, context3, signal), context2);
+    return operation((context2, signal) => send(path, { method: "GET" }, !1, context2, signal), context);
   }
   if (!Array.isArray(names)) throw invalid7();
   let distinct = [], seen = /* @__PURE__ */ new Set();
@@ -1723,10 +1687,10 @@ async function read(id3, names) {
     let responses = {};
     try {
       for (let i = 0; i < paths.length; i++) {
-        let response2 = await operation((context3, signal) => send(paths[i], { method: "GET" }, !1, context3, signal), context2, parent);
+        let response2 = await operation((context2, signal) => send(paths[i], { method: "GET" }, !1, context2, signal), context, parent);
         Object.defineProperty(responses, distinct[i], { value: response2, enumerable: !0 });
       }
-      if (!context2.isCurrent()) throw new FileOperationError("unsupported_context", 400);
+      if (!context.isCurrent()) throw new FileOperationError("unsupported_context", 400);
       return responses;
     } catch (error) {
       for (let response2 of Object.values(responses)) response2.body?.cancel().catch(() => {
@@ -1737,18 +1701,18 @@ async function read(id3, names) {
 }
 var files = {
   delete(id3) {
-    return operation((context2, signal) => send(idPath(id3), { method: "DELETE" }, 204, context2, signal));
+    return operation((context, signal) => send(idPath(id3), { method: "DELETE" }, 204, context, signal));
   },
   async upload(id3) {
-    return operation(async (context2, signal) => {
-      let file2 = await send(`${idPath(id3)}/upload`, { method: "POST" }, !0, context2, signal);
+    return operation(async (context, signal) => {
+      let file2 = await send(`${idPath(id3)}/upload`, { method: "POST" }, !0, context, signal);
       if (file2.id !== id3) throw unavailable2();
       return file2;
     });
   },
   async create(input, options) {
-    let context2 = await resolveFilesContext();
-    if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "size", "path", "name", "storage", "csv"].includes(key)) || options !== void 0 && (!options || typeof options != "object" || Array.isArray(options) || Object.keys(options).some((key) => key !== "requestKey")))
+    let context = await resolveFilesContext();
+    if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "size", "path", "name", "storage", "mediaType"].includes(key)) || options !== void 0 && (!options || typeof options != "object" || Array.isArray(options) || Object.keys(options).some((key) => key !== "requestKey")))
       throw invalid7();
     let blob = input.file instanceof Blob, array3 = input.file instanceof Uint8Array, stream = input.file instanceof ReadableStream;
     if (!blob && !array3 && !stream) throw invalid7();
@@ -1756,21 +1720,20 @@ var files = {
     if (intrinsic !== void 0 && input.size !== void 0 && input.size !== intrinsic) throw invalid7();
     let name2 = input.name;
     name2 === void 0 && blob && "name" in input.file && typeof input.file.name == "string" && (name2 = typeof globalThis.File < "u" && input.file instanceof globalThis.File ? input.file.name : input.file.name.split(/[\\/]/).at(-1));
-    let inputMediaType = blob ? declaredOriginalMediaType(input.file.type) : void 0, metadata = parseFileCreateMetadata({
+    let mediaType = declaredOriginalMediaType(input.mediaType === void 0 ? blob && input.file.type ? input.file.type : "application/octet-stream" : input.mediaType), metadata = parseFileCreateMetadata({
       name: name2,
       size: intrinsic ?? input.size,
       path: input.path,
       storage: input.storage,
-      csv: input.csv,
-      ...inputMediaType === void 0 ? {} : { inputMediaType },
+      mediaType,
       requestKey: options?.requestKey === void 0 ? routineTransport()?.key("files") ?? crypto.randomUUID() : options.requestKey
     }, FILE_ORIGINAL_MAX_BYTES);
-    if (!context2.local && !context2.localFiles && metadata.storage === "local") throw new FileOperationError("unsupported_context", 400);
+    if (!context.local && !context.localFiles && metadata.storage === "local") throw new FileOperationError("unsupported_context", 400);
     let header = encodeURIComponent(JSON.stringify(metadata));
     if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid7();
     if (active >= MAX_ACTIVE) throw new FileOperationError("capacity", 429, !0);
-    if (active++, context2.localFiles && !routineTransport() && metadata.size > MAX_BYTES) {
-      let signal = context2.signal ?? new AbortController().signal, file2 = input.file, offset = 0, body = file2 instanceof Blob ? context2.signal ? file2 : file2.stream() : file2 instanceof ReadableStream ? file2 : new ReadableStream({
+    if (active++, context.localFiles && !routineTransport() && metadata.size > MAX_BYTES) {
+      let signal = context.signal ?? new AbortController().signal, file2 = input.file, offset = 0, body = file2 instanceof Blob ? context.signal ? file2 : file2.stream() : file2 instanceof ReadableStream ? file2 : new ReadableStream({
         pull(controller) {
           if (offset === file2.byteLength) {
             controller.close();
@@ -1784,12 +1747,12 @@ var files = {
         return await send("", { method: "POST", headers: {
           "content-type": "application/octet-stream",
           "x-os-file": header
-        }, body }, !0, context2, signal);
+        }, body }, !0, context, signal);
       } finally {
         active--;
       }
     }
-    return metadata.size > MAX_BYTES ? multipartCreate(input, metadata, (suffix, init2, kind, signal) => kind === !0 ? send(suffix, init2, !0, context2, signal) : send(suffix, init2, "control", context2, signal)) : timed(async (signal) => {
+    return metadata.size > MAX_BYTES ? multipartCreate(input, metadata, (suffix, init2, kind, signal) => kind === !0 ? send(suffix, init2, !0, context, signal) : send(suffix, init2, "control", context, signal)) : timed(async (signal) => {
       try {
         let bytes = array3 ? input.file.slice() : await boundedBytes(
           blob ? input.file.stream() : input.file,
@@ -1802,21 +1765,21 @@ var files = {
           method: "POST",
           headers: { "content-type": "application/octet-stream", "x-os-file": header },
           body: bytes.buffer
-        }, !0, context2, signal);
+        }, !0, context, signal);
       } finally {
         active--;
       }
-    }, context2.signal).catch((error) => {
+    }, context.signal).catch((error) => {
       throw error instanceof FileOperationError ? error : unavailable2();
     });
   },
   async enrich(input) {
-    let context2 = await resolveFilesContext();
+    let context = await resolveFilesContext();
     if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "name", "content", "mediaType", "replace"].includes(key)) || typeof input.content != "string" && !(input.content instanceof Uint8Array)) throw invalid7();
     let path = `${idPath(input.file)}/enrichments`;
     if (typeof input.content == "string" ? input.content.length > MAX_BYTES : input.content.byteLength > MAX_BYTES)
       throw new FileOperationError("request_too_large", 413);
-    return operation(async (context3, signal) => {
+    return operation(async (context2, signal) => {
       let bytes;
       if (typeof input.content == "string") {
         let buffer = new Uint8Array(Math.min(MAX_BYTES, input.content.length * 3)), encoded = new TextEncoder().encodeInto(input.content, buffer);
@@ -1833,13 +1796,13 @@ var files = {
       let result2 = await send(path, { method: "POST", headers: {
         "content-type": "application/octet-stream",
         "x-os-enrichment": header
-      }, body: bytes.buffer }, "enrichment", context3, signal);
+      }, body: bytes.buffer }, "enrichment", context2, signal);
       if (result2.name !== metadata.name) throw unavailable2();
       return result2;
-    }, context2);
+    }, context);
   },
   async get(id3) {
-    return operation((context2, signal) => send(idPath(id3), { method: "GET" }, !0, context2, signal));
+    return operation((context, signal) => send(idPath(id3), { method: "GET" }, !0, context, signal));
   },
   read
 };
@@ -2143,6 +2106,15 @@ async function reportLocalRoutineEffect(value) {
 }
 
 var local;
+async function localLease(identity, reportUse = !0) {
+  let current2 = local;
+  if (!current2 || !current2.declared.includes(identity)) throw new Error("Connection unavailable");
+  reportUse && await current2.recheck(identity);
+  let lease = current2.acquire ? parseConnectionLease(await current2.acquire(identity)) : current2.leases.find((lease2) => `${lease2.provider}/${lease2.name}` === identity);
+  if (local !== current2 || !lease || lease.runId !== current2.runId || `${lease.provider}/${lease.name}` !== identity)
+    throw new Error("Connection unavailable");
+  return parseConnectionLease(lease);
+}
 var airtable = /* @__PURE__ */ createConnections(async (name2, operation2, input) => {
   throw new AirtableOperationError("Airtable connection unavailable");
 });
@@ -2335,10 +2307,7 @@ function responseDefinition(value) {
   assert(suggestions.length <= 8 && new Set(refs).size === refs.length);
 }
 function inboxFile(value) {
-  let file2 = object4(value);
-  keys3(file2, ["id", "name", "mediaType", "size", "sha256", "details"]), assert(id2(file2.id) && text4(file2.name) && !/[\x00-\x1f\x7f/\\]/.test(file2.name) && text4(file2.mediaType) && /^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/.test(file2.mediaType) && integer(file2.size, 0) && file2.size <= 25 * 1024 * 1024 && typeof file2.sha256 == "string" && /^[0-9a-f]{64}$/.test(file2.sha256));
-  let details = object4(file2.details);
-  details.kind === "csv" ? (keys3(details, ["kind", "encoding", "delimiter", "headerRow", "dataRows"]), assert(file2.mediaType === "text/csv" && ["utf-8", "windows-1252"].includes(String(details.encoding)) && [",", ";", "	"].includes(String(details.delimiter)) && integer(details.headerRow, 0) && integer(details.dataRows, 0))) : details.kind === "pdf" ? (keys3(details, ["kind", "pages"], ["kind"]), assert(file2.mediaType === "application/pdf" && (!("pages" in details) || integer(details.pages)))) : (keys3(details, ["kind"]), assert(details.kind === "other" && !["text/csv", "application/pdf"].includes(file2.mediaType)));
+  validateInboxFile(value);
 }
 function fields4(value) {
   let labels = array2(value).map((value2) => {
@@ -2583,15 +2552,15 @@ function hostedInboxContext() {
       if (check(), (response2.status === 401 || response2.status === 403) && (installed2 = void 0, revision++, settled = Math.max(settled, started)), !response2.ok || response2.status !== 200) throw new InboxContextError(response2.status);
       let bytes = await limitedBody(response2, 4096);
       if (check(), !bytes) throw new Error("Inbox context unavailable");
-      let context2 = parseInboxHostContext(JSON.parse(new TextDecoder("utf-8", { fatal: !0 }).decode(bytes)));
-      if (context2.memberId !== host.memberId) throw new Error("Inbox context unavailable");
-      if (JSON.stringify(installed2) !== JSON.stringify(context2)) {
+      let context = parseInboxHostContext(JSON.parse(new TextDecoder("utf-8", { fatal: !0 }).decode(bytes)));
+      if (context.memberId !== host.memberId) throw new Error("Inbox context unavailable");
+      if (JSON.stringify(installed2) !== JSON.stringify(context)) {
         if (started < settled) throw new Error("Inbox context unavailable");
-        installed2 = context2, revision++;
+        installed2 = context, revision++;
       }
       settled = Math.max(settled, started);
       let current2 = revision;
-      return Object.freeze({ context: context2, isCurrent: () => host.isCurrent() && host.expiresAt > Date.now() && current2 === revision });
+      return Object.freeze({ context, isCurrent: () => host.isCurrent() && host.expiresAt > Date.now() && current2 === revision });
     } finally {
       response2.body?.cancel().catch(() => {
       });
@@ -2895,7 +2864,7 @@ function appContext(origin, active2) {
       await check(), admitted === credential && current2() && value && typeof value == "object" && "error" in value && value.error === "authority_unavailable" && invalidate();
     }), response2;
   }
-  function context2() {
+  function context() {
     let issued = credential, signal = access.signal;
     return {
       kind: "local",
@@ -2926,24 +2895,24 @@ function appContext(origin, active2) {
       }
       if (expireAccess(), binding.expiresAt <= Date.now()) {
         if (await renew(), !current2()) throw new AppRenewalUnavailable();
-        return context2();
+        return context();
       }
       await synchronize();
       let candidate = stored(), retained2 = readPair(candidate);
       if (attempted = candidate ?? void 0, !current2()) throw new AppRenewalUnavailable();
       let value = await proof(retained2.credential);
       if (stored() !== candidate || serialized !== candidate)
-        return await synchronize(), context2();
+        return await synchronize(), context();
       if (!current2()) throw new Error();
       if (expiry && binding && value.expiresAt > binding.expiresAt) throw new Error();
-      return (!expiry || value.expiresAt !== binding.expiresAt) && install(value, retained2, candidate), context2();
+      return (!expiry || value.expiresAt !== binding.expiresAt) && install(value, retained2, candidate), context();
     } catch (error) {
       if (alive() && error instanceof AppRenewalUnavailable)
         throw new Error();
       try {
-        if (binding && current2() && attempted && attempted !== serialized) return context2();
+        if (binding && current2() && attempted && attempted !== serialized) return context();
         if (binding && alive() && stored() && stored() !== serialized)
-          return await synchronize(), context2();
+          return await synchronize(), context();
       } catch {
       }
       throw error instanceof AppContextDenied && binding && alive() && renewal ? new Error() : alive() && (error instanceof AppResponseReadError || pair && stored() === serialized && !current2()) ? new Error() : (invalidate(), new Error());
@@ -2955,7 +2924,7 @@ function appContext(origin, active2) {
     if (!expiry && alive() && (binding ? current2() && resolution2 : readPair(stored()).context.expiresAt > Date.now()))
       return resolve();
     if (!expiry || !current2()) throw new Error("Local app context unavailable.");
-    return context2();
+    return context();
   }, start: () => {
     startup = setTimeout(() => {
       alive() && !resolution2 && !binding && resolve().catch(() => {
@@ -2978,23 +2947,23 @@ function validPair(value) {
 }
 
 var unavailable3 = () => new InboxOperationError(503, "unavailable"), stale = () => new InboxOperationError(401, "authority_unavailable");
-function hostFailure(error, context2) {
-  return !context2.isCurrent() || context2.expiresAt <= Date.now() || error instanceof InboxContextError && error.status === 401 ? stale() : error instanceof InboxContextError && error.status === 403 ? new InboxOperationError(403, "access_denied") : unavailable3();
+function hostFailure(error, context) {
+  return !context.isCurrent() || context.expiresAt <= Date.now() || error instanceof InboxContextError && error.status === 401 ? stale() : error instanceof InboxContextError && error.status === 403 ? new InboxOperationError(403, "access_denied") : unavailable3();
 }
 async function send2(operation2, input, admitted) {
-  let envelope = parseInboxRequest({ operation: operation2, input }), context2;
+  let envelope = parseInboxRequest({ operation: operation2, input }), context;
   try {
-    context2 = admitted ?? await resolveAppContext();
+    context = admitted ?? await resolveAppContext();
   } catch {
     throw stale();
   }
-  if (context2.kind === "local") {
+  if (context.kind === "local") {
     if (!isAppQuestionOperation(operation2)) throw new InboxOperationError(403, "access_denied");
     let check2 = () => {
-      if (!context2.isCurrent() || context2.signal.aborted || context2.expiresAt <= Date.now()) throw stale();
+      if (!context.isCurrent() || context.signal.aborted || context.expiresAt <= Date.now()) throw stale();
     };
     try {
-      let response2 = await context2.requestInbox(operation2, envelope.input), value = await appResponse(response2, INBOX_RESULT_BYTES, context2.signal);
+      let response2 = await context.requestInbox(operation2, envelope.input), value = await appResponse(response2, INBOX_RESULT_BYTES, context.signal);
       if (check2(), !response2.ok) throw new InboxOperationError(
         [400, 401, 403, 409].includes(response2.status) ? response2.status : 503,
         response2.status === 400 ? "invalid_input" : response2.status === 401 ? "authority_unavailable" : response2.status === 403 ? "access_denied" : response2.status === 409 ? "conflict" : "unavailable"
@@ -3007,25 +2976,25 @@ async function send2(operation2, input, admitted) {
       throw check2(), error instanceof InboxOperationError ? error : unavailable3();
     }
   }
-  if (context2.endpoint !== `https://${context2.workspace}.oddington.ai` || ["auth", "www", "api", "os"].includes(context2.workspace)) throw stale();
+  if (context.endpoint !== `https://${context.workspace}.oddington.ai` || ["auth", "www", "api", "os"].includes(context.workspace)) throw stale();
   let host;
   if (!isAppQuestionOperation(operation2)) {
     try {
-      host = await resolveHostedInboxContext(context2);
+      host = await resolveHostedInboxContext(context);
     } catch (error) {
-      throw hostFailure(error, context2);
+      throw hostFailure(error, context);
     }
     if (!host) throw unavailable3();
   }
   let check = () => {
-    if (!context2.isCurrent() || host && !host.isCurrent() || !Number.isFinite(context2.expiresAt) || context2.expiresAt <= Date.now()) throw stale();
+    if (!context.isCurrent() || host && !host.isCurrent() || !Number.isFinite(context.expiresAt) || context.expiresAt <= Date.now()) throw stale();
   };
   if (check(), host?.context.kind === "focused")
     throw new InboxOperationError(403, "access_denied");
   try {
-    let response2 = await fetch(`${context2.endpoint}/api/inbox`, {
+    let response2 = await fetch(`${context.endpoint}/api/inbox`, {
       method: "POST",
-      headers: { authorization: `Bearer ${context2.accessToken}`, "content-type": "application/json" },
+      headers: { authorization: `Bearer ${context.accessToken}`, "content-type": "application/json" },
       body: JSON.stringify(envelope),
       redirect: "error",
       cache: "no-store",
@@ -3077,7 +3046,7 @@ async function send2(operation2, input, admitted) {
     let bytes = await limitedBody(response2, INBOX_RESULT_BYTES);
     if (check(), !bytes) throw unavailable3();
     let value = JSON.parse(new TextDecoder("utf-8", { fatal: !0 }).decode(bytes)), parsed = parseInboxResult(operation2, value);
-    if (check(), operation2 === "current" && parsed.workspace.slug !== context2.workspace) throw unavailable3();
+    if (check(), operation2 === "current" && parsed.workspace.slug !== context.workspace) throw unavailable3();
     if ("itemId" in envelope.input) {
       let item = operation2 === "items.read" ? parsed : operation2 === "items.rename" || operation2 === "items.setLifecycle" || operation2 === "items.addRecipient" ? parsed.item : void 0;
       if (item && (item.id !== envelope.input.itemId || "revision" in envelope.input && item.revision !== envelope.input.revision) || operation2 === "items.addRecipient" && parsed.addedPersonId !== envelope.input.personId || operation2 === "questions.answer" && typeof envelope.input.response.selection == "object" && !parsed.label?.trim()) throw unavailable3();
@@ -3700,56 +3669,56 @@ var identifier = /^[a-z0-9]+(?:-[a-z0-9]+)*(?![\s\S])/, uuid2 = /^[0-9a-f]{8}-[0
 }, fail3 = (reason) => {
   throw new AppRoutineError(reason);
 };
-function current(context2) {
-  (!context2.isCurrent() || context2.kind === "local" && context2.signal.aborted) && fail3("authority_unavailable");
+function current(context) {
+  (!context.isCurrent() || context.kind === "local" && context.signal.aborted) && fail3("authority_unavailable");
 }
 function appDescriptors() {
   return globalThis[/* @__PURE__ */ Symbol.for("oddington.app.descriptor")]?.routines ?? [];
 }
 async function authority(retained = !1) {
-  let context2 = await resolveAppContext(retained).catch(() => fail3("authority_unavailable"));
-  return current(context2), context2.kind !== "local" && (!context2.binding || !context2.memberId || !identifier.test(context2.workspace) || context2.workspace.length > 63 || ["auth", "api", "os", "www"].includes(context2.workspace) || context2.endpoint !== `https://${context2.workspace}.oddington.ai`) && fail3("authority_unavailable"), context2;
+  let context = await resolveAppContext(retained).catch(() => fail3("authority_unavailable"));
+  return current(context), context.kind !== "local" && (!context.binding || !context.memberId || !identifier.test(context.workspace) || context.workspace.length > 63 || ["auth", "api", "os", "www"].includes(context.workspace) || context.endpoint !== `https://${context.workspace}.oddington.ai`) && fail3("authority_unavailable"), context;
 }
-async function live(context2, read2) {
-  if (current(context2), context2.kind === "local") return context2;
+async function live(context, read2) {
+  if (current(context), context.kind === "local") return context;
   let resolved = await authority(read2);
-  return current(context2), (resolved.kind === "local" || resolved.binding !== context2.binding || resolved.memberId !== context2.memberId || resolved.workspace !== context2.workspace || resolved.endpoint !== context2.endpoint) && fail3("authority_unavailable"), resolved;
+  return current(context), (resolved.kind === "local" || resolved.binding !== context.binding || resolved.memberId !== context.memberId || resolved.workspace !== context.workspace || resolved.endpoint !== context.endpoint) && fail3("authority_unavailable"), resolved;
 }
 async function request(key, suffix, init2, maximum = SUMMARY_BYTES, retained, read2 = !1) {
   (!identifier.test(key) || !appDescriptors().some((item) => item.id === key)) && fail3("authority_unavailable");
-  let context2 = retained ? await live(retained, read2) : await authority(read2);
-  current(context2);
-  let deadline = new AbortController(), timeout = context2.kind === "local" ? void 0 : setTimeout(() => deadline.abort(), 2e4);
+  let context = retained ? await live(retained, read2) : await authority(read2);
+  current(context);
+  let deadline = new AbortController(), timeout = context.kind === "local" ? void 0 : setTimeout(() => deadline.abort(), 2e4);
   try {
-    let response2 = await (context2.kind === "local" ? read2 ? context2.requestRetainedRoutine(key, suffix) : context2.requestRoutine(key, suffix, init2) : fetch(`${context2.endpoint}/api/routines/${key}/${suffix}`, {
+    let response2 = await (context.kind === "local" ? read2 ? context.requestRetainedRoutine(key, suffix) : context.requestRoutine(key, suffix, init2) : fetch(`${context.endpoint}/api/routines/${key}/${suffix}`, {
       ...init2,
       credentials: "omit",
       redirect: "error",
       signal: deadline.signal,
-      headers: { authorization: `Bearer ${context2.accessToken}`, ...init2?.body ? { "content-type": "application/json" } : {} }
+      headers: { authorization: `Bearer ${context.accessToken}`, ...init2?.body ? { "content-type": "application/json" } : {} }
     }));
     response2.redirected && fail3("execution_unavailable");
-    let value = await appResponse(response2, maximum, context2.kind === "local" ? context2.signal : deadline.signal);
-    if (current(context2), context2.kind !== "local" && await live(context2, read2), !response2.ok) {
-      if (context2.kind !== "local") {
+    let value = await appResponse(response2, maximum, context.kind === "local" ? context.signal : deadline.signal);
+    if (current(context), context.kind !== "local" && await live(context, read2), !response2.ok) {
+      if (context.kind !== "local") {
         let code = value?.code;
         if ((code === "authentication_required" || code === "access_denied") && fail3("authority_unavailable"), (code === "input_invalid" || code === "file_not_remote") && fail3("invalid_input"), suffix === "describe" && (code === "current_deployment_unavailable" || code === "capability_unavailable"))
           return unavailable4(key, code === "current_deployment_unavailable" ? "not_deployed" : "capability_unavailable");
         fail3("execution_unavailable");
       }
       let reason = value?.error;
-      reason === "authority_unavailable" && (context2.kind === "local" && context2.invalidate(), fail3(reason)), (reason === "invalid_input" || reason === "execution_unavailable") && fail3(reason), fail3("execution_unavailable");
+      reason === "authority_unavailable" && (context.kind === "local" && context.invalidate(), fail3(reason)), (reason === "invalid_input" || reason === "execution_unavailable") && fail3(reason), fail3("execution_unavailable");
     }
     return value;
   } catch (error) {
-    if (current(context2), error instanceof AppRoutineError) throw error;
+    if (current(context), error instanceof AppRoutineError) throw error;
     fail3("execution_unavailable");
   } finally {
     clearTimeout(timeout);
   }
 }
-function summary(value, key, context2, id3) {
-  if (context2.kind !== "local")
+function summary(value, key, context, id3) {
+  if (context.kind !== "local")
     try {
       return (!only(value, "id,routine,placement,status,createdAt,startedAt,finishedAt,steps,result,failure") || !Array.isArray(value.steps) || value.steps.some((step) => !only(step, "id,title,status,startedAt,finishedAt,summary,detailAvailable")) || value.failure !== void 0 && !only(value.failure, "message")) && fail3("execution_unavailable"), parseRemoteRun(value, { routine: key, id: id3 });
     } catch {
@@ -3788,17 +3757,17 @@ function jsonInput(value, ancestors = /* @__PURE__ */ new Set()) {
 function structure(value) {
   return JSON.stringify(value, (_key, item) => item && typeof item == "object" && !Array.isArray(item) ? Object.fromEntries(Object.keys(item).sort().map((key) => [key, item[key]])) : item);
 }
-function handle(key, id3, context2) {
+function handle(key, id3, context) {
   (!identifier.test(key) || !appDescriptors().some((item) => item.id === key)) && fail3("authority_unavailable"), (typeof id3 != "string" || !uuid2.test(id3)) && fail3("invalid_input");
-  let read2 = async () => summary(await request(key, `runs/${id3}`, void 0, SUMMARY_BYTES, context2, !0), key, context2, id3);
+  let read2 = async () => summary(await request(key, `runs/${id3}`, void 0, SUMMARY_BYTES, context, !0), key, context, id3);
   return routineRunHandle({
     async current() {
-      return current(context2), read2();
+      return current(context), read2();
     },
     async step(step) {
       (typeof step != "string" || !identifier.test(step)) && fail3("invalid_input");
-      let value = await request(key, `runs/${id3}/steps/${step}`, void 0, 514 * 1024, context2, !0);
-      if (context2.kind !== "local")
+      let value = await request(key, `runs/${id3}/steps/${step}`, void 0, 514 * 1024, context, !0);
+      if (context.kind !== "local")
         try {
           return only(value, "id,title,status,startedAt,finishedAt,summary,data") || fail3("execution_unavailable"), parseRunStep(value, step);
         } catch {
@@ -3807,7 +3776,7 @@ function handle(key, id3, context2) {
       return (!only(value, "id,title,status,startedAt,finishedAt,summary,data") || value.id !== step || !validStep(value)) && fail3("execution_unavailable"), value;
     },
     async publish() {
-      return context2.kind !== "local" && fail3("execution_unavailable"), summary(await request(key, `runs/${id3}/publish`, { method: "POST" }, SUMMARY_BYTES, context2), key, context2, id3);
+      return context.kind !== "local" && fail3("execution_unavailable"), summary(await request(key, `runs/${id3}/publish`, { method: "POST" }, SUMMARY_BYTES, context), key, context, id3);
     }
   });
 }
@@ -3832,8 +3801,8 @@ async function describeAppRoutine(key) {
   let descriptor = appDescriptors().find((item) => item.id === key);
   if (!descriptor) return fail3("authority_unavailable");
   try {
-    let context2 = await authority(), value = await request(key, "describe", void 0, 1024 * 1024, context2);
-    return context2.kind !== "local" && deployedDescription(value, key), (!only(value, "id,title,input,connections,steps,readiness") || !value.readiness || !Array.isArray(value.connections) || context2.kind === "local" && structure({ ...value, readiness: void 0, connections: value.connections.map(({ available, ...item }) => item) }) !== structure(descriptor) || value.connections.some((item) => typeof item.available != "boolean") || !(value.readiness.state === "ready" && only(value.readiness, "state,placement") && value.readiness.placement === (context2.kind === "local" ? "local" : "remote") || value.readiness.state === "unavailable" && only(value.readiness, "state,reason,message") && ["not_deployed", "definition_invalid", "capability_unavailable"].includes(value.readiness.reason) && message(value.readiness.message))) && fail3("execution_unavailable"), value;
+    let context = await authority(), value = await request(key, "describe", void 0, 1024 * 1024, context);
+    return context.kind !== "local" && deployedDescription(value, key), (!only(value, "id,title,input,connections,steps,readiness") || !value.readiness || !Array.isArray(value.connections) || context.kind === "local" && structure({ ...value, readiness: void 0, connections: value.connections.map(({ available, ...item }) => item) }) !== structure(descriptor) || value.connections.some((item) => typeof item.available != "boolean") || !(value.readiness.state === "ready" && only(value.readiness, "state,placement") && value.readiness.placement === (context.kind === "local" ? "local" : "remote") || value.readiness.state === "unavailable" && only(value.readiness, "state,reason,message") && ["not_deployed", "definition_invalid", "capability_unavailable"].includes(value.readiness.reason) && message(value.readiness.message))) && fail3("execution_unavailable"), value;
   } catch {
     return unavailable4(key, "capability_unavailable");
   }
@@ -3854,16 +3823,16 @@ function appRoutineBinding(key) {
       } catch {
         return fail3("invalid_input");
       }
-      let context2 = await authority();
-      context2.kind !== "local" && (encoded = JSON.stringify({ ...JSON.parse(encoded), startKey: crypto.randomUUID() }));
-      let run = summary(await request(key, "runs", { method: "POST", body: encoded }, SUMMARY_BYTES, context2), key, context2);
-      return handle(key, run.id, context2);
+      let context = await authority();
+      context.kind !== "local" && (encoded = JSON.stringify({ ...JSON.parse(encoded), startKey: crypto.randomUUID() }));
+      let run = summary(await request(key, "runs", { method: "POST", body: encoded }, SUMMARY_BYTES, context), key, context);
+      return handle(key, run.id, context);
     },
     runs: Object.freeze({
       async list() {
-        let context2 = await authority(!0), value = await request(key, "runs", void 0, 20 * SUMMARY_BYTES, context2, !0);
+        let context = await authority(!0), value = await request(key, "runs", void 0, 20 * SUMMARY_BYTES, context, !0);
         if (!Array.isArray(value) || value.length > 20) return fail3("execution_unavailable");
-        let runs = value.map((run) => summary(run, key, context2));
+        let runs = value.map((run) => summary(run, key, context));
         return new Set(runs.map((run) => run.id)).size !== runs.length && fail3("execution_unavailable"), runs;
       },
       async get(id3) {
@@ -3887,24 +3856,11 @@ var app = /* @__PURE__ */ Object.freeze({
   })
 });
 
-var LIMIT2 = 16 * 1024, context;
-var appRun = {
-  current() {
-    return context;
-  }
-};
-
 function validateFileAddOptions(value) {
   let v = serializable(value);
-  if (!v || typeof v != "object" || Array.isArray(v) || Object.keys(v).some((k) => !["path", "name", "csv"].includes(k)) || typeof v.path != "string" || !v.path || v.path !== v.path.trim() || /[\\\x00-\x1f]/.test(v.path) || v.path.split("/").some((part) => !part || part === "." || part === "..") || /^[A-Za-z]:/.test(v.path))
+  if (!v || typeof v != "object" || Array.isArray(v) || Object.keys(v).some((k) => !["path", "name"].includes(k)) || typeof v.path != "string" || !v.path || v.path !== v.path.trim() || /[\\\x00-\x1f]/.test(v.path) || v.path.split("/").some((part) => !part || part === "." || part === "..") || /^[A-Za-z]:/.test(v.path))
     throw new InboxContractError("File path must be relative to the configured working root");
   if (v.name !== void 0 && (typeof v.name != "string" || !v.name || v.name !== v.name.trim() || v.name.length > 255 || /[\x00-\x1f\x7f/\\]/.test(v.name))) throw new InboxContractError("File name must be a safe filename");
-  return v.csv !== void 0 && validateCsvHints(v.csv), v;
-}
-function validateCsvHints(value) {
-  let v = serializable(value);
-  if (!v || typeof v != "object" || Array.isArray(v) || Object.keys(v).some((k) => !["encoding", "delimiter", "headerRow"].includes(k)) || v.encoding !== void 0 && !["utf-8", "windows-1252"].includes(v.encoding) || v.delimiter !== void 0 && ![",", ";", "	"].includes(v.delimiter) || v.headerRow !== void 0 && (!Number.isSafeInteger(v.headerRow) || v.headerRow < 0))
-    throw new InboxContractError("Invalid CSV parsing hints");
   return v;
 }
 
@@ -3994,7 +3950,6 @@ export {
   InboxOperationError,
   RoutineRecordWriteError,
   app,
-  appRun,
   asksBlock,
   auth,
   connections,