@oddington/sdk 0.1.36 → 0.1.37

package/README.md

@@ -79,6 +79,12 @@ declared `review` handler crosses the Inbox publication seam as `review`; Inbox
 retains the canonical `invoice-import` routine identity separately, without
 deploying or executing that handler.
 
+Microsoft Connection configuration has a separate, optional `access` description.
+It preserves supplied strings, including existing `read` and `read-write` labels,
+and does not grant or restrict Microsoft permissions. Management results omit
+this metadata when absent. Setup and safe inspection are documented in the
+[CLI Connections guide](../../apps/cli/README.md#connections).
+
 With `access: { ai: true }`, `os.ai.generateText` returns non-empty `{ text }`.
 `os.ai.generateObject` returns `{ object }` validated against the requested
 `schema`, with its inferred type. An invalid answer throws `RoutineAIError`
@@ -504,6 +510,44 @@ revision and URL facts. Distinct objects and custom provider values remain.
 Helpers need no initialization and perform no I/O, choose no ref, and add no
 changes. File retention and Data validation/publication remain explicit.
 
+Microsoft helpers are also exported at the package root, with the corresponding
+`OutlookSourceLocation` and `SharePointSourceLocation` types:
+
+```ts
+const messageLocation = source.location.outlook({
+  connection: 'outlook/invoices', message: message.id, url: message.webLink,
+  // attachment: attachment.id, // Include for attachment bytes; omit for message MIME.
+});
+const itemLocation = source.location.sharepoint({
+  connection: 'sharepoint/operations', site: siteId, drive: driveId, item: item.id,
+  version: version.id, path: lastKnownPath, url: item.webUrl,
+});
+```
+
+Construct these only after successful provider reads establish the coordinates
+for the retained bytes, and save them alongside `source.location.os(file)` using
+ordinary Data publication. Request `Prefer: IdType="ImmutableId"` consistently
+when obtaining Outlook message and attachment IDs. These IDs are case-sensitive
+and survive folder moves within the same mailbox, but not archive-mailbox moves
+or export/reimport. Subjects, filenames and `internetMessageId` are not substitutes.
+Omit `attachment` for an exact message MIME File; supply it for an attachment File.
+
+For SharePoint, use the saved Graph site ID, the document library's drive ID and
+the file's driveItem ID. Optional `version` is an actual driveItemVersion ID
+established for those bytes, never an eTag or a guessed version. Omit it when no
+such version is established. Names, paths and URLs do not establish identity.
+Optional `path` is last-known context; `url` is the ordinary HTTPS message web
+link or SharePoint webUrl. Never retain temporary download, upload-session or
+copy-monitor URLs, authorization or credentials in Locations.
+
+Outlook merge identity is connection/message/attachment, with whole messages
+distinct from attachments. SharePoint identity is connection/site/drive/item/
+version, with absent versions distinct from present ones. Matching observations
+replace path/link context, including removing omitted context; distinct IDs,
+versions and copies remain separate. Incomplete coordinates gain no inferred
+identity. The retained OS File and hash own exact content; external edits do
+not change an existing Source's bytes. These helpers perform no provider I/O.
+
 Read a named repository through the authenticated host context:
 
 ```ts

package/dist/browser.js

@@ -1960,6 +1960,37 @@ var files = {
 function validDropboxRootPath(value) {
   return typeof value == "string" && value.length <= 2048 && value.startsWith("/") && !/[\\\x00-\x1f\x7f]/.test(value) && value.slice(1).split("/").every((segment) => segment.length > 0 && segment.trim() === segment && segment !== "." && segment !== "..");
 }
+function validMicrosoftId(value) {
+  return typeof value == "string" && /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(value);
+}
+function validMicrosoftMailbox(value) {
+  return typeof value == "string" && value.length <= 254 && /^[^\s@/?#\\\x00-\x1f\x7f]+@[^\s@/?#\\\x00-\x1f\x7f]+\.[^\s@/?#\\\x00-\x1f\x7f]+$/.test(value);
+}
+function sharePointHost(value) {
+  return /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.sharepoint\.com$/.test(value);
+}
+function canonicalSharePointSiteUrl(value) {
+  if (!(typeof value != "string" || value.length > 2048 || /[\s\\?#\x00-\x1f\x7f]/.test(value) || !/^https:\/\/[^/:@]+(?:\/|$)/i.test(value)))
+    try {
+      let url = new URL(value);
+      if (url.protocol !== "https:" || !sharePointHost(url.hostname) || url.username || url.password || url.port) return;
+      let rawPath = value.replace(/^https:\/\/[^/]+/i, "") || "/", path = rawPath.endsWith("/") ? rawPath.slice(0, -1) : rawPath, segments = path.slice(1).split("/");
+      if (path && segments.some((segment) => !segment)) return;
+      let encoded = path ? segments.map((segment) => {
+        let decoded = decodeURIComponent(segment);
+        if (decoded === "." || decoded === ".." || /[/%\\?#\x00-\x1f\x7f]/.test(decoded)) throw new Error();
+        return encodeURIComponent(decoded);
+      }).join("/") : "", canonical = `https://${url.hostname}/${encoded}`;
+      return canonical.length <= 2048 ? canonical : void 0;
+    } catch {
+      return;
+    }
+}
+function validSharePointSiteId(value, siteUrl) {
+  if (typeof value != "string" || value.length > 512) return !1;
+  let [host, collection, site, extra] = value.split(",");
+  return extra === void 0 && host === new URL(siteUrl).hostname && validMicrosoftId(collection) && validMicrosoftId(site);
+}
 function validGoogleScopes(value) {
   return Array.isArray(value) && value.length > 0 && value.length <= 32 && value.every((scope) => typeof scope == "string" && scope.length <= 256 && /^(https:\/\/www\.googleapis\.com\/auth\/[A-Za-z0-9._-]+|https:\/\/mail\.google\.com\/|openid|email|profile)$/.test(scope)) && new Set(value).size === value.length;
 }
@@ -1970,13 +2001,32 @@ function validDropboxFileScopes(value) {
 
 var ROUTINE_CONNECTION_CREDENTIALS_ENV = "OS_ROUTINE_CONNECTION_CREDENTIALS";
 function parseRoutineConnectionNames(value) {
-  if (!Array.isArray(value) || value.some((name2) => typeof name2 != "string" || !/^(gmail|airtable|dropbox)\/[a-z0-9][a-z0-9-]{0,62}$/.test(name2)) || new Set(value).size !== value.length)
+  if (!Array.isArray(value) || value.some((name2) => typeof name2 != "string" || !/^(gmail|airtable|dropbox|outlook|sharepoint)\/[a-z0-9][a-z0-9-]{0,62}$/.test(name2)) || new Set(value).size !== value.length)
     throw new Error("Invalid routine connections");
   return value;
 }
 var connectionUuid = (v) => typeof v == "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(v);
 function runtimeConnection(lease) {
   switch (lease.provider) {
+    case "outlook":
+      return {
+        id: `outlook/${lease.name}`,
+        provider: lease.provider,
+        name: lease.name,
+        mailboxEmail: lease.mailboxEmail,
+        accessToken: lease.accessToken,
+        expiresAt: lease.expiresAt
+      };
+    case "sharepoint":
+      return {
+        id: `sharepoint/${lease.name}`,
+        provider: lease.provider,
+        name: lease.name,
+        siteId: lease.siteId,
+        siteUrl: lease.siteUrl,
+        accessToken: lease.accessToken,
+        expiresAt: lease.expiresAt
+      };
     case "gmail":
       return {
         id: `gmail/${lease.name}`,
@@ -2014,6 +2064,11 @@ function parseConnectionLease(raw, now = Date.now()) {
   let v = raw;
   if (!v || typeof v != "object" || Array.isArray(v) || !connectionUuid(v.connectionId) || !connectionUuid(v.runId) || typeof v.name != "string" || !/^[a-z0-9][a-z0-9-]{0,62}$/.test(v.name) || typeof v.accessToken != "string" || !/^[A-Za-z0-9._~+/-]{1,8192}={0,2}$/.test(v.accessToken))
     throw new Error("Invalid connection credential");
+  if (v.provider === "outlook" || v.provider === "sharepoint") {
+    if (!(v.provider === "outlook" ? Object.keys(v).sort().join(",") === "accessToken,connectionId,expiresAt,mailboxEmail,name,provider,runId" && validMicrosoftMailbox(v.mailboxEmail) : Object.keys(v).sort().join(",") === "accessToken,connectionId,expiresAt,name,provider,runId,siteId,siteUrl" && typeof v.siteUrl == "string" && canonicalSharePointSiteUrl(v.siteUrl) === v.siteUrl && validSharePointSiteId(v.siteId, v.siteUrl)) || typeof v.expiresAt != "string" || !Number.isFinite(Date.parse(v.expiresAt)) || Date.parse(v.expiresAt) <= now + 6e4 || Date.parse(v.expiresAt) > now + 36e5)
+      throw new Error("Invalid connection credential");
+    return v;
+  }
   if (v.provider === "gmail") {
     if (Object.keys(v).sort().join(",") !== "accessToken,accountEmail,connectionId,expiresAt,name,provider,runId,scopes" || typeof v.accountEmail != "string" || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(v.accountEmail) || !validGoogleScopes(v.scopes) || typeof v.expiresAt != "string" || !Number.isFinite(Date.parse(v.expiresAt)) || Date.parse(v.expiresAt) <= now + 6e4 || Date.parse(v.expiresAt) > now + 36e5)
       throw new Error("Invalid connection credential");
@@ -2281,7 +2336,17 @@ var connections = /* @__PURE__ */ runtimeConnections();
 var LOCAL_ROUTINE_VALUE_BYTES = 256 * 1024;
 
 function locationIdentity(location) {
-  let coordinates = location.provider === "os" ? [location.file] : location.provider === "gmail" ? [location.connection, location.message, location.attachment] : location.provider === "dropbox" ? [location.connection, location.file] : void 0;
+  let coordinates = location.provider === "os" ? [location.file] : location.provider === "gmail" ? [location.connection, location.message, location.attachment] : location.provider === "dropbox" ? [location.connection, location.file] : location.provider === "outlook" ? [
+    location.connection,
+    location.message,
+    ...location.attachment === void 0 ? [] : [location.attachment]
+  ] : location.provider === "sharepoint" ? [
+    location.connection,
+    location.site,
+    location.drive,
+    location.item,
+    ...location.version === void 0 ? [] : [location.version]
+  ] : void 0;
   if (coordinates?.every((value) => typeof value == "string" && value.length > 0))
     return JSON.stringify([location.provider, ...coordinates]);
 }
@@ -2320,6 +2385,27 @@ var source = {
         ...input.path === void 0 ? {} : { path: input.path },
         ...input.url === void 0 ? {} : { url: input.url }
       };
+    },
+    outlook(input) {
+      return {
+        provider: "outlook",
+        connection: input.connection,
+        message: input.message,
+        ...input.attachment === void 0 ? {} : { attachment: input.attachment },
+        ...input.url === void 0 ? {} : { url: input.url }
+      };
+    },
+    sharepoint(input) {
+      return {
+        provider: "sharepoint",
+        connection: input.connection,
+        site: input.site,
+        drive: input.drive,
+        item: input.item,
+        ...input.version === void 0 ? {} : { version: input.version },
+        ...input.path === void 0 ? {} : { path: input.path },
+        ...input.url === void 0 ? {} : { url: input.url }
+      };
     }
   },
   locations: {