@oddington/sdk 0.1.43 → 0.1.45

package/README.md

@@ -171,13 +171,22 @@ finite numbers and safe integers with optional inclusive bounds, and Files.
 Omitting `maxItems` imposes no item-count ceiling; the complete serialized input
 still shares the Run's byte bound, including every File descriptor and other field.
 Definitions allow at most 64 steps, 64 total object properties across their schemas,
-and eight schema levels. Run input, each summary, each detail value, and the result
-accept at most 256 KiB of UTF-8 serialized JSON, without truncation. Step inputs
-remain closed, immutable JSON but have no separate byte ceiling because they are
-transient in-process values rather than transported or retained Run evidence.
-Across 64 steps, retained summary plus detail is at most 32 MiB, plus 512 KiB for
-Run input and result. Schema defaults share the input bound. Titles contain at
-most 256 UTF-16 code units;
+and eight schema levels. Run input, the result, and each step summary accept at
+most 256 KiB of compact UTF-8 JSON. Each step accepts at most 1 MiB across its
+summary and data together, measured as the sum of their compact UTF-8 JSON sizes
+(including JSON quotes and escapes, excluding transport envelopes), without
+truncation. Step inputs remain closed, immutable JSON but have no separate byte
+ceiling because they are transient in-process values rather than transported or
+retained Run evidence.
+Across 64 steps, retained summary plus data is at most 64 MiB without a separate
+aggregate output limit, plus 512 KiB for Run input and result. An oversized output
+fails the step and Run once, even if routine code catches the rejection; later
+steps do not execute and customer code is not automatically retried. The rejected
+summary and data are not retained. The safe `step_output_too_large` failure keeps
+only `step`, `sizeBytes`, `limitBytes`, `summaryBytes`, and `dataBytes` and explains
+how to return fewer fields or process a smaller batch. `limitBytes` identifies
+the violated summary or combined bound. Schema defaults share the input bound.
+Titles contain at most 256 UTF-16 code units;
 access dimensions and response handlers each have at most 64 entries. Functions,
 accessors, sparse arrays, cycles and non-JSON values reject. The canonical routine
 ID is a bounded lowercase alphanumeric/hyphen name, independent of its directory.
@@ -186,8 +195,9 @@ No entry, workspace, credentials or placement are authored in this definition.
 Local Run history returns the newest 20 summaries per canonical routine, without
 deleting older Runs or unpublished changes. Step titles and bounded summary/detail
 values are saved with the accepted Run, so later source edits cannot rewrite them.
-Each checkout-private execution/preparation JSON file has a 64 MiB total bound,
-including private diagnostics; app summaries never include those diagnostics.
+Checkout-private execution JSON has a 128 MiB read envelope for up to 64 MiB
+of step output plus existing evidence; other local state files keep their 64 MiB
+envelope, including private diagnostics; app summaries never include those diagnostics.
 Publication reads the existing confirmed-receipt journal independently from the
 successful execution status. Refresh reads materialized state; watching provides
 connected updates without replay or interrupted-execution recovery.
@@ -349,9 +359,11 @@ the current remote Run owner through the same bindings. Operations reject with
 `AppRoutineError.reason`: `authority_unavailable`, `execution_unavailable`, or
 `invalid_input`. Starts are not automatically retried. A
 disconnected watch ends and requires `current()`. History returns at most 20
-summaries without deleting older Runs. Each JSON value is bounded to 256 KiB.
-Transport envelopes allow 17 MiB per summary, 514 KiB per detail and 20 summaries
-per list; execution retains at most 10 MiB of report evidence. Raw process
+summaries without deleting older Runs. Input, result and each step summary are
+bounded to 256 KiB; each step's summary plus on-demand data is bounded to 1 MiB.
+Transport envelopes allow 17 MiB per summary, 1 MiB plus 4 KiB per detail and
+20 summaries per list. Local child reports allow 1 MiB plus 64 KiB of framing;
+non-output report evidence retains its 10 MiB bound independently of step output. Raw process
 output and private authority stay private.
 
 The exact-origin browser credential survives document disposal, reload and tab

package/dist/browser.js

@@ -319,6 +319,52 @@ function validateRoutineSchemaValue(schema2, value, rejected) {
   check(schema2, value, "$");
 }
 
+function validDropboxRootPath(value) {
+  return typeof value == "string" && value.length <= 2048 && value.startsWith("/") && !/[\\\x00-\x1f\x7f]/.test(value) && value.slice(1).split("/").every((segment) => segment.length > 0 && segment.trim() === segment && segment !== "." && segment !== "..");
+}
+function validMicrosoftId(value) {
+  return typeof value == "string" && /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(value);
+}
+function validMicrosoftMailbox(value) {
+  return typeof value == "string" && value.length <= 254 && /^[^\s@/?#\\\x00-\x1f\x7f]+@[^\s@/?#\\\x00-\x1f\x7f]+\.[^\s@/?#\\\x00-\x1f\x7f]+$/.test(value);
+}
+function sharePointHost(value) {
+  return /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.sharepoint\.com$/.test(value);
+}
+function canonicalSharePointSiteUrl(value) {
+  if (!(typeof value != "string" || value.length > 2048 || /[\s\\?#\x00-\x1f\x7f]/.test(value) || !/^https:\/\/[^/:@]+(?:\/|$)/i.test(value)))
+    try {
+      let url = new URL(value);
+      if (url.protocol !== "https:" || !sharePointHost(url.hostname) || url.username || url.password || url.port) return;
+      let rawPath = value.replace(/^https:\/\/[^/]+/i, "") || "/", path = rawPath.endsWith("/") ? rawPath.slice(0, -1) : rawPath, segments = path.slice(1).split("/");
+      if (path && segments.some((segment) => !segment)) return;
+      let encoded = path ? segments.map((segment) => {
+        let decoded = decodeURIComponent(segment);
+        if (decoded === "." || decoded === ".." || /[/%\\?#\x00-\x1f\x7f]/.test(decoded)) throw new Error();
+        return encodeURIComponent(decoded);
+      }).join("/") : "", canonical = `https://${url.hostname}/${encoded}`;
+      return canonical.length <= 2048 ? canonical : void 0;
+    } catch {
+      return;
+    }
+}
+function validSharePointSiteId(value, siteUrl) {
+  if (typeof value != "string" || value.length > 512) return !1;
+  let [host, collection, site, extra] = value.split(",");
+  return extra === void 0 && host === new URL(siteUrl).hostname && validMicrosoftId(collection) && validMicrosoftId(site);
+}
+function validGoogleScopes(value) {
+  return Array.isArray(value) && value.length > 0 && value.length <= 32 && value.every((scope) => typeof scope == "string" && scope.length <= 256 && /^(https:\/\/www\.googleapis\.com\/auth\/[A-Za-z0-9._-]+|https:\/\/mail\.google\.com\/|openid|email|profile)$/.test(scope)) && new Set(value).size === value.length;
+}
+var DROPBOX_FILE_SCOPES = ["account_info.read", "files.metadata.read", "files.content.read", "files.content.write"];
+function validDropboxFileScopes(value) {
+  return Array.isArray(value) && value.length === DROPBOX_FILE_SCOPES.length && new Set(value).size === value.length && DROPBOX_FILE_SCOPES.every((scope) => value.includes(scope));
+}
+
+function validDataRepositoryName(value) {
+  return typeof value == "string" && /^[a-z0-9][a-z0-9._-]{0,127}$/.test(value) && !value.includes("..");
+}
+
 var InboxContractError = class extends Error {
   constructor(message2) {
     super(message2), this.name = "InboxContractError";
@@ -575,9 +621,26 @@ function defineHandler(value) {
 function respond(handler, input) {
   return defineHandler(handler), handlerReference({ id: handler.id, input });
 }
+function recordRequirements(value) {
+  let source2 = object(value, "Record requirements");
+  keys(source2, ["repository", "records"], "Record requirements"), validDataRepositoryName(source2.repository) || fail("Invalid requirements repository");
+  let repository = source2.repository, records = array(source2.records, "required Records").map((entry) => {
+    let row = object(entry, "required Record");
+    keys(row, ["ref", "version"], "required Record");
+    let { ref } = validateRecordReference({ repository, ref: row.ref });
+    return (typeof row.version != "string" || !row.version.length || row.version.length > 512) && fail("Invalid required Record version"), { ref, version: row.version };
+  });
+  return new Set(records.map((record4) => record4.ref)).size !== records.length && fail("Duplicate required Record"), { repository, records };
+}
+function requireRecords(repository, records) {
+  return recordRequirements({ repository, records: array(records, "required Records").map((entry) => {
+    let record4 = object(entry, "Data Record");
+    return { ref: record4.$ref, version: record4.$version };
+  }) });
+}
 function question(value) {
   let source2 = object(value, "question");
-  keys(source2, ["id", "to", "allowedResponders", "prompt", "instructions", "response", "handler"], "question");
+  keys(source2, ["id", "to", "allowedResponders", "prompt", "instructions", "response", "handler", "requirements"], "question");
   let to = personReference(source2.to, "question assignee"), allowedResponders = source2.allowedResponders === void 0 ? [to] : distinctPeople(source2.allowedResponders, "allowed responders");
   return allowedResponders.includes(to) || fail("Allowed responders must include the assignee"), {
     id: id(source2.id, "question ID"),
@@ -586,7 +649,8 @@ function question(value) {
     prompt: text(source2.prompt, "question prompt"),
     ...source2.instructions === void 0 ? {} : { instructions: text(source2.instructions, "instructions") },
     response: validateResponseDefinition(source2.response),
-    ...Object.hasOwn(source2, "handler") ? { handler: handlerReference(source2.handler) } : {}
+    ...Object.hasOwn(source2, "handler") ? { handler: handlerReference(source2.handler) } : {},
+    ...Object.hasOwn(source2, "requirements") ? { requirements: recordRequirements(source2.requirements) } : {}
   };
 }
 function presentation(source2) {
@@ -998,6 +1062,42 @@ function acceptText(request2, text5) {
   return validateObject(request2.schema, object5, text5), capture({ object: object5 }, "invalid_output", "output_too_large");
 }
 
+var ROUTINE_STEP_SUMMARY_BYTES = 256 * 1024, ROUTINE_STEP_OUTPUT_BYTES = 1024 * 1024;
+function parseRoutineStepOutputDetail(value) {
+  let invalid9 = () => {
+    throw new AppRoutineContractError("invalid_value");
+  };
+  assertRoutineFields(value, ["step", "sizeBytes", "limitBytes", "summaryBytes", "dataBytes"]);
+  let { step, sizeBytes, limitBytes, summaryBytes, dataBytes } = value;
+  return !isAppRoutineName(step) || ![sizeBytes, limitBytes, summaryBytes, dataBytes].every((bytes) => Number.isSafeInteger(bytes) && bytes > 0) || sizeBytes !== summaryBytes + dataBytes || limitBytes !== (summaryBytes > ROUTINE_STEP_SUMMARY_BYTES ? ROUTINE_STEP_SUMMARY_BYTES : ROUTINE_STEP_OUTPUT_BYTES) || (limitBytes === ROUTINE_STEP_SUMMARY_BYTES ? summaryBytes : sizeBytes) <= limitBytes ? invalid9() : freezeRoutineMetadata({ step, sizeBytes, limitBytes, summaryBytes, dataBytes });
+}
+function routineStepOutputMessage(value) {
+  let detail = parseRoutineStepOutputDetail(value), size = `${(detail.sizeBytes / (1024 * 1024)).toFixed(1)} MB`, bound = detail.limitBytes === ROUTINE_STEP_SUMMARY_BYTES ? `, including ${(detail.summaryBytes / 1024).toFixed(1)} KB of summary. Each step's summary can return up to 256 KB.` : ". Each step can return up to 1 MB across its summary and data.";
+  return `Step ${detail.step} returned ${size} of output${bound} Return fewer fields or process a smaller batch, then try again.`;
+}
+var RoutineStepOutputError = class extends Error {
+  code = "step_output_too_large";
+  detail;
+  constructor(detail) {
+    let captured = parseRoutineStepOutputDetail(detail);
+    super(routineStepOutputMessage(captured)), this.detail = captured, Object.freeze(this);
+  }
+};
+function captureRoutineStepOutput(step, summary2, data3) {
+  assertRoutineJson(summary2), assertRoutineJson(data3);
+  let summaryJson = JSON.stringify(summary2), dataJson = JSON.stringify(data3), summaryBytes = new TextEncoder().encode(summaryJson).byteLength, dataBytes = new TextEncoder().encode(dataJson).byteLength, sizeBytes = summaryBytes + dataBytes, limitBytes = summaryBytes > ROUTINE_STEP_SUMMARY_BYTES ? ROUTINE_STEP_SUMMARY_BYTES : ROUTINE_STEP_OUTPUT_BYTES;
+  if (summaryBytes > ROUTINE_STEP_SUMMARY_BYTES || sizeBytes > ROUTINE_STEP_OUTPUT_BYTES)
+    throw new RoutineStepOutputError({ step, sizeBytes, limitBytes, summaryBytes, dataBytes });
+  return freezeRoutineMetadata({ summary: JSON.parse(summaryJson), data: JSON.parse(dataJson) });
+}
+function captureRetainedStepOutput(step, value) {
+  let hasSummary = Object.hasOwn(value, "summary"), hasData = Object.hasOwn(value, "data");
+  if (hasSummary && hasData) return captureRoutineStepOutput(step, value.summary, value.data);
+  for (let key of ["summary", "data"]) if (Object.hasOwn(value, key) && (assertRoutineJson(value[key]), new TextEncoder().encode(JSON.stringify(value[key])).byteLength > (key === "summary" ? ROUTINE_STEP_SUMMARY_BYTES : ROUTINE_STEP_OUTPUT_BYTES)))
+    throw new AppRoutineContractError("invalid_value");
+  return freezeRoutineMetadata(JSON.parse(JSON.stringify(value)));
+}
+
 var LIMIT = 256 * 1024, invalid3 = () => {
   throw new AppRoutineContractError("invalid_value");
 }, invalidContract3 = () => {
@@ -1122,7 +1222,7 @@ function captureRoutineInput(definition, input) {
   return capture2(contract.input, input === void 0 && Object.hasOwn(contract, "inputDefault") ? contract.inputDefault : input);
 }
 async function executeRoutineDefinition(definition, input, runtime) {
-  let captured = captureRoutineInput(definition, input), { contract, steps, run } = definitions.get(definition), active2 = !0, accepting = !0, broken = !1, work = Promise.resolve(), aiWork = /* @__PURE__ */ new Set(), generate = (kind, value) => {
+  let captured = captureRoutineInput(definition, input), { contract, steps, run } = definitions.get(definition), active2 = !0, accepting = !0, broken = !1, outputFailure, work = Promise.resolve(), aiWork = /* @__PURE__ */ new Set(), generate = (kind, value) => {
     let operation2 = (async () => {
       if (!active2 || broken || contract.access.ai !== !0) throw new AIError("access_denied");
       if (!runtime.ai) throw new AIError("capability_unavailable");
@@ -1192,10 +1292,10 @@ async function executeRoutineDefinition(definition, input, runtime) {
           await runtime.step(id3, { status: "running" }), activeStep = id3;
           let output = await steps[id3].run(saved, os2);
           if (assertRoutineFields(output, ["summary", "data"]), !Object.hasOwn(output, "summary") || !Object.hasOwn(output, "data")) return invalid3();
-          let summary2 = captureJson(output.summary), data3 = captureJson(output.data);
+          let { summary: summary2, data: data3 } = captureRoutineStepOutput(id3, output.summary, output.data);
           return await runtime.step(id3, { status: "completed", summary: summary2, data: data3 }), activeStep = void 0, freezeRoutineMetadata({ summary: summary2, data: data3 });
         } catch (error) {
-          throw broken = !0, activeStep = void 0, await runtime.step(id3, { status: "failed" }), error;
+          throw error instanceof RoutineStepOutputError && (outputFailure ??= error), broken = !0, activeStep = void 0, await runtime.step(id3, { status: "failed" }), error;
         }
       });
       return work = next.then(() => {
@@ -1211,8 +1311,12 @@ async function executeRoutineDefinition(definition, input, runtime) {
   }
   for (accepting = !1, await work; aiWork.size; ) await Promise.allSettled([...aiWork]);
   active2 = !1;
-  for (let step of contract.steps) reached.has(step.id) || await runtime.step(step.id, { status: "skipped" });
-  if (broken) throw failure ?? new AppRoutineContractError("invalid_value");
+  try {
+    for (let step of contract.steps) reached.has(step.id) || await runtime.step(step.id, { status: "skipped" });
+  } catch (error) {
+    throw outputFailure ?? error;
+  }
+  if (broken) throw outputFailure ?? failure ?? new AppRoutineContractError("invalid_value");
   if (contract.result !== void 0) return capture2(contract.result, result2);
   if (result2 !== void 0) return invalid3();
 }
@@ -2334,48 +2438,6 @@ var files = {
   read
 };
 
-function validDropboxRootPath(value) {
-  return typeof value == "string" && value.length <= 2048 && value.startsWith("/") && !/[\\\x00-\x1f\x7f]/.test(value) && value.slice(1).split("/").every((segment) => segment.length > 0 && segment.trim() === segment && segment !== "." && segment !== "..");
-}
-function validMicrosoftId(value) {
-  return typeof value == "string" && /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(value);
-}
-function validMicrosoftMailbox(value) {
-  return typeof value == "string" && value.length <= 254 && /^[^\s@/?#\\\x00-\x1f\x7f]+@[^\s@/?#\\\x00-\x1f\x7f]+\.[^\s@/?#\\\x00-\x1f\x7f]+$/.test(value);
-}
-function sharePointHost(value) {
-  return /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.sharepoint\.com$/.test(value);
-}
-function canonicalSharePointSiteUrl(value) {
-  if (!(typeof value != "string" || value.length > 2048 || /[\s\\?#\x00-\x1f\x7f]/.test(value) || !/^https:\/\/[^/:@]+(?:\/|$)/i.test(value)))
-    try {
-      let url = new URL(value);
-      if (url.protocol !== "https:" || !sharePointHost(url.hostname) || url.username || url.password || url.port) return;
-      let rawPath = value.replace(/^https:\/\/[^/]+/i, "") || "/", path = rawPath.endsWith("/") ? rawPath.slice(0, -1) : rawPath, segments = path.slice(1).split("/");
-      if (path && segments.some((segment) => !segment)) return;
-      let encoded = path ? segments.map((segment) => {
-        let decoded = decodeURIComponent(segment);
-        if (decoded === "." || decoded === ".." || /[/%\\?#\x00-\x1f\x7f]/.test(decoded)) throw new Error();
-        return encodeURIComponent(decoded);
-      }).join("/") : "", canonical = `https://${url.hostname}/${encoded}`;
-      return canonical.length <= 2048 ? canonical : void 0;
-    } catch {
-      return;
-    }
-}
-function validSharePointSiteId(value, siteUrl) {
-  if (typeof value != "string" || value.length > 512) return !1;
-  let [host, collection, site, extra] = value.split(",");
-  return extra === void 0 && host === new URL(siteUrl).hostname && validMicrosoftId(collection) && validMicrosoftId(site);
-}
-function validGoogleScopes(value) {
-  return Array.isArray(value) && value.length > 0 && value.length <= 32 && value.every((scope) => typeof scope == "string" && scope.length <= 256 && /^(https:\/\/www\.googleapis\.com\/auth\/[A-Za-z0-9._-]+|https:\/\/mail\.google\.com\/|openid|email|profile)$/.test(scope)) && new Set(value).size === value.length;
-}
-var DROPBOX_FILE_SCOPES = ["account_info.read", "files.metadata.read", "files.content.read", "files.content.write"];
-function validDropboxFileScopes(value) {
-  return Array.isArray(value) && value.length === DROPBOX_FILE_SCOPES.length && new Set(value).size === value.length && DROPBOX_FILE_SCOPES.every((scope) => value.includes(scope));
-}
-
 var ROUTINE_CONNECTION_CREDENTIALS_ENV = "OS_ROUTINE_CONNECTION_CREDENTIALS";
 function parseRoutineConnectionNames(value) {
   if (!Array.isArray(value) || value.some((name2) => typeof name2 != "string" || !/^(gmail|airtable|dropbox|outlook|sharepoint)\/[a-z0-9][a-z0-9-]{0,62}$/.test(name2)) || new Set(value).size !== value.length)
@@ -2769,8 +2831,6 @@ function runtimeConnections() {
 }
 var connections = /* @__PURE__ */ runtimeConnections();
 
-var LOCAL_ROUTINE_VALUE_BYTES = 256 * 1024;
-
 function locationIdentity(location) {
   let coordinates = location.provider === "os" ? [location.file] : location.provider === "gmail" ? [location.connection, location.message, location.attachment] : location.provider === "dropbox" ? [location.connection, location.file] : location.provider === "outlook" ? [
     location.connection,
@@ -2865,14 +2925,41 @@ var source = {
 };
 
 var InboxOperationError = class extends Error {
-  constructor(status, reason) {
-    super(reason === "conflict" ? "This question already has an accepted answer" : reason === "unavailable" ? "Inbox request unavailable. Retry the same action." : reason === "invalid_input" ? "Invalid Inbox request" : "Inbox access unavailable");
+  constructor(status, reason, requirementsRepository) {
+    super(reason === "records_need_attention" ? "Records need to be pushed or reviewed." : reason === "records_unavailable" ? "Records temporarily unavailable. Try again shortly." : reason === "handler_unavailable" ? "Deploy the routine that owns this question\u2019s response handler." : reason === "conflict" ? "This question already has an accepted answer" : reason === "unavailable" ? "Inbox request unavailable. Retry the same action." : reason === "invalid_input" ? "Invalid Inbox request" : "Inbox access unavailable");
     this.status = status;
     this.reason = reason;
+    this.requirementsRepository = requirementsRepository;
   }
   status;
   reason;
-}, INBOX_RESULT_BYTES = 8 * 1024 * 1024, INBOX_INPUT_BYTES = 8192, INBOX_LOCAL_INPUT_BYTES = 256 * 1024, INBOX_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+  requirementsRepository;
+};
+function parseQuestionAvailability(value, available = !1) {
+  let state = object4(value);
+  return keys3(state, ["unavailableReason", "requirementsRepository"], []), "unavailableReason" in state ? (assert(!available && typeof state.unavailableReason == "string" && ["handler_unavailable", "records_need_attention", "records_unavailable"].includes(String(state.unavailableReason))), state.unavailableReason === "records_need_attention" ? assert(validDataRepositoryName(state.requirementsRepository)) : assert(!("requirementsRepository" in state)), {
+    unavailableReason: state.unavailableReason,
+    ...state.unavailableReason === "records_need_attention" ? { requirementsRepository: state.requirementsRepository } : {}
+  }) : (assert(!("requirementsRepository" in state)), {});
+}
+function questionAvailability(value, available = !1) {
+  return parseQuestionAvailability({
+    ..."unavailableReason" in value ? { unavailableReason: value.unavailableReason } : {},
+    ..."requirementsRepository" in value ? { requirementsRepository: value.requirementsRepository } : {}
+  }, available);
+}
+function parseInboxUnavailableFailure(value, status) {
+  try {
+    if (status !== 503) return;
+    let envelope = object4(value);
+    keys3(envelope, ["error", "unavailableReason", "requirementsRepository"], ["error", "unavailableReason"]), assert(text4(envelope.error));
+    let state = questionAvailability(envelope);
+    return new InboxOperationError(503, state.unavailableReason, state.requirementsRepository);
+  } catch {
+    return;
+  }
+}
+var INBOX_RESULT_BYTES = 8 * 1024 * 1024, INBOX_INPUT_BYTES = 8192, INBOX_LOCAL_INPUT_BYTES = 256 * 1024, INBOX_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function isAppQuestionOperation(operation2) {
   return operation2 === "questions.list" || operation2 === "questions.answer" || operation2 === "questions.searchRecords";
 }
@@ -3052,7 +3139,7 @@ function parseInboxItem(value) {
     assert(id2(person.id) && text4(person.name));
   }), array2(item.questions).forEach((value2) => {
     let question2 = object4(value2);
-    if (assert(text4(question2.id) && id2(question2.to) && text4(question2.prompt) && (question2.instructions === null || text4(question2.instructions, !0)) && typeof question2.available == "boolean"), responseDefinition(question2.response), assert(array2(question2.allowedResponders).every(id2)), question2.acceptedResponse !== null) {
+    if (assert(text4(question2.id) && id2(question2.to) && text4(question2.prompt) && (question2.instructions === null || text4(question2.instructions, !0)) && typeof question2.available == "boolean"), questionAvailability(question2, question2.available), assert(!("requirements" in question2) && !("handler" in question2)), responseDefinition(question2.response), assert(array2(question2.allowedResponders).every(id2)), question2.acceptedResponse !== null) {
       let accepted = object4(question2.acceptedResponse);
       assert(id2(accepted.id) && id2(accepted.userId) && date(accepted.acceptedAt)), response(accepted.response), accepted.label === null ? delete accepted.label : "label" in accepted && assert(text4(accepted.label)), "acceptanceOrder" in accepted && assert(integer(accepted.acceptanceOrder));
     }
@@ -3085,11 +3172,11 @@ function parseAnswerableQuestion(value) {
   let entry = object4(json(value));
   keys3(
     entry,
-    ["itemId", "number", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "tags", "recordRefs", "instructions"],
+    ["itemId", "number", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "tags", "recordRefs", "instructions", "unavailableReason", "requirementsRepository"],
     ["itemId", "number", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable"]
   ), assert(id2(entry.itemId) && integer(entry.number) && integer(entry.revision) && text4(entry.title) && text4(entry.inboxUrl));
   let link = new URL(entry.inboxUrl), slug = link.hostname.slice(0, -13);
-  return assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && entry.inboxUrl === `https://${slug}.oddington.ai/inbox/${entry.itemId}`), assert(isAppRoutineName(entry.routine) && text4(entry.questionId) && entry.questionId === entry.questionId.trim() && text4(entry.prompt) && (!("instructions" in entry) || text4(entry.instructions, !0)) && typeof entry.answerable == "boolean"), responseDefinition(entry.response), askMetadata(entry), entry;
+  return assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && entry.inboxUrl === `https://${slug}.oddington.ai/inbox/${entry.itemId}`), assert(isAppRoutineName(entry.routine) && text4(entry.questionId) && entry.questionId === entry.questionId.trim() && text4(entry.prompt) && (!("instructions" in entry) || text4(entry.instructions, !0)) && typeof entry.answerable == "boolean"), questionAvailability(entry, entry.answerable), responseDefinition(entry.response), askMetadata(entry), entry;
 }
 function askMetadata(entry) {
   let tags = array2(entry.tags === void 0 ? [] : entry.tags);
@@ -3398,7 +3485,7 @@ function appContext(origin, active2) {
       observation === observed && (observation = void 0);
     }
   }
-  async function renew() {
+  async function renew(initialConnection = !1) {
     if (renewal) return renewal;
     if (!binding || !pair || !alive()) throw new Error();
     renewal = (async () => {
@@ -3424,7 +3511,7 @@ function appContext(origin, active2) {
           await synchronize(requestController.signal);
           return;
         }
-        if (!response2.ok) throw new Error();
+        if (!response2.ok) throw response2.status === 401 || response2.status === 403 ? new AppContextDenied() : new Error();
         if (!alive() || !validPair(value) || !bounded3(value.context) || (/* @__PURE__ */ new Set([value.credential, value.renewalCredential, pair.credential, pair.renewalCredential])).size !== 4) throw new Error();
         if (stored() !== previous) {
           await synchronize(requestController.signal);
@@ -3433,6 +3520,7 @@ function appContext(origin, active2) {
         let raw = JSON.stringify(value);
         globalThis.localStorage.setItem(sessionKey, raw), install(value.context, value, raw);
       } catch (error) {
+        if (initialConnection && error instanceof AppContextDenied) throw error;
         try {
           if (alive() && stored() && stored() !== previous) {
             await synchronize(requestController.signal);
@@ -3561,8 +3649,32 @@ function appContext(origin, active2) {
     try {
       if (!alive()) throw new Error();
       if (!pair) {
-        let candidate2 = stored(), retained3 = readPair(candidate2);
-        pair = retained3, binding = { ...retained3.context }, credential = retained3.credential, serialized = candidate2;
+        let candidate2 = stored();
+        if (candidate2)
+          try {
+            let retained3 = readPair(candidate2);
+            if (retained3.context.expiresAt <= Date.now()) {
+              if (pair = retained3, binding = { ...retained3.context }, credential = retained3.credential, serialized = candidate2, await renew(!0), !current2()) throw new AppRenewalUnavailable();
+              return context();
+            }
+            let value3 = await proof(retained3.credential);
+            return stored() !== candidate2 ? resolveOnce() : (install(value3, retained3, candidate2), context());
+          } catch (error) {
+            if (error instanceof AppRenewalUnavailable || error instanceof AppResponseReadError || !(error instanceof AppContextDenied) || !alive() || expiry) throw error;
+            pair = void 0, binding = void 0, credential = void 0, serialized = void 0;
+          }
+        let response2 = await untilAborted(fetch(`${origin}/_os/app/connect`, {
+          method: "POST",
+          credentials: "omit",
+          redirect: "error",
+          cache: "no-store",
+          referrerPolicy: "no-referrer",
+          signal: controller.signal
+        }), controller.signal), value2 = await appResponse(response2, 4096, controller.signal);
+        if (!response2.ok || response2.redirected || response2.url && response2.url !== `${origin}/_os/app/connect` || !alive() || !validPair(value2) || !bounded3(value2.context)) throw new Error();
+        if (stored() !== candidate2 && stored()) return resolveOnce();
+        let raw = JSON.stringify(value2);
+        return globalThis.localStorage.setItem(sessionKey, raw), install(value2.context, value2, raw), context();
       }
       if (expireAccess(), binding.expiresAt <= Date.now()) {
         if (await renew(), !current2()) throw new AppRenewalUnavailable();
@@ -3592,7 +3704,7 @@ function appContext(origin, active2) {
     resolution2 = void 0;
   }), resolution2);
   return { resolve, retained: async () => {
-    if (!expiry && alive() && (binding ? current2() && resolution2 : readPair(stored()).context.expiresAt > Date.now()))
+    if (!expiry && alive() && (binding ? current2() && resolution2 : !stored() || readPair(stored()).context.expiresAt > Date.now()))
       return resolve();
     if (!expiry || !current2()) throw new Error("Local app context unavailable.");
     return context();
@@ -3643,7 +3755,7 @@ async function send2(operation2, input, resolved) {
     };
     try {
       let response2 = await context.requestInbox(operation2, envelope.input), value = await appResponse(response2, INBOX_RESULT_BYTES, context.signal);
-      if (check2(), !response2.ok) throw new InboxOperationError(
+      if (check2(), !response2.ok) throw parseInboxUnavailableFailure(value, response2.status) ?? new InboxOperationError(
         [400, 401, 403, 409].includes(response2.status) ? response2.status : 503,
         response2.status === 400 ? "invalid_input" : response2.status === 401 ? "authority_unavailable" : response2.status === 403 ? "access_denied" : response2.status === 409 ? "conflict" : "unavailable"
       );
@@ -3685,12 +3797,20 @@ async function send2(operation2, input, resolved) {
       throw response2.body?.cancel().catch(() => {
       }), error;
     }
-    if (!response2.ok)
-      throw response2.body?.cancel().catch(() => {
-      }), new InboxOperationError(
+    if (!response2.ok) {
+      let value2;
+      try {
+        let bytes2 = await limitedBody(response2, 8192);
+        check(), bytes2 && (value2 = JSON.parse(new TextDecoder().decode(bytes2)));
+      } catch {
+        check();
+      }
+      let refusal = parseInboxUnavailableFailure(value2, response2.status);
+      throw refusal || new InboxOperationError(
         [400, 401, 403, 409].includes(response2.status) ? response2.status : 503,
         response2.status === 400 ? "invalid_input" : response2.status === 401 ? "authority_unavailable" : response2.status === 403 ? "access_denied" : response2.status === 409 ? "conflict" : "unavailable"
       );
+    }
     if (response2.status !== 200)
       throw response2.body?.cancel().catch(() => {
       }), unavailable3();
@@ -3929,6 +4049,7 @@ function createBrowserAuth(runtime) {
       let revision = c.revision;
       try {
         if (!allowedOrigin(origin)) throw runtime.failure("unavailable");
+        runtime.prepare?.();
         let response2 = await fetch(`${origin}/api/auth`, { method: "GET", credentials: "same-origin", redirect: "error", cache: "no-store" });
         if (!response2.ok) throw runtime.failure("unavailable");
         let configuration = validateConfiguration(await response2.json());
@@ -4198,9 +4319,9 @@ var BrowserAuthError = class extends Error {
     this.name = "BrowserAuthError";
   }
   reason;
-};
+}, providerModule, prepareProvider = () => providerModule ??= import("./auth-provider.js");
 async function provider(configuration, guard) {
-  let { AuthClient } = await import("./auth-provider.js");
+  let { AuthClient } = await prepareProvider();
   if (!guard.current(guard.revision())) throw new BrowserAuthError("stale");
   let provenance = /* @__PURE__ */ new Map(), removalRevision, authorizationRequest, authorizationQueue = Promise.resolve(), storage = globalThis.localStorage, client = new AuthClient({
     url: `${configuration.providerUrl}/auth/v1`,
@@ -4282,7 +4403,16 @@ async function provider(configuration, guard) {
     }
   };
 }
-var auth = /* @__PURE__ */ createBrowserAuth({ provider, failure: (reason) => new BrowserAuthError(reason) });
+var auth = /* @__PURE__ */ createBrowserAuth({
+  // Preloading is opportunistic. Construction below still observes and
+  // normalizes a failed import, without leaving an unhandled preload promise.
+  prepare: () => {
+    prepareProvider().catch(() => {
+    });
+  },
+  provider,
+  failure: (reason) => new BrowserAuthError(reason)
+});
 
 function routineRunHandle(operations2) {
   return Object.freeze({
@@ -4321,14 +4451,19 @@ function progress(value) {
 }
 function parseRunStep(value, expected) {
   let v = record3(value);
-  return typeof v.id != "string" || !name.test(v.id) || expected !== void 0 && v.id !== expected || typeof v.title != "string" || !v.title.trim() || v.title.length > 256 || !["pending", "running", "completed", "failed", "skipped"].includes(v.status) ? invalid8() : {
+  if (typeof v.id != "string" || !name.test(v.id) || expected !== void 0 && v.id !== expected || typeof v.title != "string" || !v.title.trim() || v.title.length > 256 || !["pending", "running", "completed", "failed", "skipped"].includes(v.status)) return invalid8();
+  let output = captureRetainedStepOutput(v.id, {
+    ...Object.hasOwn(v, "summary") ? { summary: v.summary } : {},
+    ...Object.hasOwn(v, "data") ? { data: v.data } : {}
+  });
+  return {
     id: v.id,
     title: v.title,
     status: v.status,
     ...times(v),
     ...progress(v.progress),
     ...Object.hasOwn(v, "summary") ? { summary: bounded(v.summary) } : {},
-    ...Object.hasOwn(v, "data") ? { data: bounded(v.data) } : {}
+    ...Object.hasOwn(output, "data") ? { data: output.data } : {}
   };
 }
 function parseRemoteRun(value, expected = {}) {
@@ -4343,7 +4478,11 @@ function parseRemoteRun(value, expected = {}) {
   if (v.failure !== void 0) {
     let f = record3(v.failure);
     if (v.status !== "failed" || typeof f.message != "string" || !f.message || f.message.length > 512) return invalid8();
-    failure = { message: f.message };
+    if (f.code === "step_output_too_large") {
+      let { code, message: message2, ...facts } = f, detail = parseRoutineStepOutputDetail(facts);
+      if (!steps.some((step) => step.id === detail.step && step.status === "failed") || message2 !== routineStepOutputMessage(detail)) return invalid8();
+      failure = { code, message: message2, ...detail };
+    } else failure = { message: f.message };
   }
   return Object.hasOwn(v, "result") && v.status !== "succeeded" ? invalid8() : {
     id: v.id,
@@ -4430,12 +4569,23 @@ async function request(key, suffix, init2, maximum = SUMMARY_BYTES, retained, re
 function summary(value, key, context, id3) {
   if (context.kind !== "local")
     try {
-      return (!only(value, "id,routine,placement,status,createdAt,startedAt,finishedAt,steps,result,failure") || !Array.isArray(value.steps) || value.steps.some((step) => !only(step, "id,title,status,startedAt,finishedAt,progress,summary,detailAvailable")) || value.failure !== void 0 && !only(value.failure, "message")) && fail3("execution_unavailable"), parseRemoteRun(value, { routine: key, id: id3 });
+      return (!only(value, "id,routine,placement,status,createdAt,startedAt,finishedAt,steps,result,failure") || !Array.isArray(value.steps) || value.steps.some((step) => !only(step, "id,title,status,startedAt,finishedAt,progress,summary,detailAvailable")) || value.failure !== void 0 && !validFailure(value.failure, value.steps)) && fail3("execution_unavailable"), parseRemoteRun(value, { routine: key, id: id3 });
     } catch {
       return fail3("execution_unavailable");
     }
   let run = value;
-  return (!only(run, "id,routine,placement,status,createdAt,startedAt,finishedAt,steps,result,failure,local") || typeof run.id != "string" || !uuid2.test(run.id) || id3 !== void 0 && run.id !== id3 || run.routine !== key || run.placement !== "local" || !["queued", "running", "succeeded", "failed"].includes(run.status) || !timestamp(run.createdAt) || !optionalTimes(run) || !Array.isArray(run.steps) || run.steps.length > 64 || run.steps.some((step) => !only(step, "id,title,status,startedAt,finishedAt,progress,summary,detailAvailable") || typeof step.detailAvailable != "boolean" || !validStep(step)) || new Set(run.steps.map((step) => step.id)).size !== run.steps.length || Object.hasOwn(run, "result") && (run.status !== "succeeded" || !bounded2(run.result)) || run.failure !== void 0 && (run.status !== "failed" || !only(run.failure, "message") || !message(run.failure.message)) || run.local !== void 0 && !validLocalActivity(run.local)) && fail3("execution_unavailable"), run;
+  return (!only(run, "id,routine,placement,status,createdAt,startedAt,finishedAt,steps,result,failure,local") || typeof run.id != "string" || !uuid2.test(run.id) || id3 !== void 0 && run.id !== id3 || run.routine !== key || run.placement !== "local" || !["queued", "running", "succeeded", "failed"].includes(run.status) || !timestamp(run.createdAt) || !optionalTimes(run) || !Array.isArray(run.steps) || run.steps.length > 64 || run.steps.some((step) => !only(step, "id,title,status,startedAt,finishedAt,progress,summary,detailAvailable") || typeof step.detailAvailable != "boolean" || !validStep(step)) || new Set(run.steps.map((step) => step.id)).size !== run.steps.length || Object.hasOwn(run, "result") && (run.status !== "succeeded" || !bounded2(run.result)) || run.failure !== void 0 && (run.status !== "failed" || !validFailure(run.failure, run.steps)) || run.local !== void 0 && !validLocalActivity(run.local)) && fail3("execution_unavailable"), run;
+}
+function validFailure(value, steps) {
+  if (!only(value, "message,code,step,sizeBytes,limitBytes,summaryBytes,dataBytes") || !message(value.message)) return !1;
+  if (value.code === void 0) return only(value, "message");
+  if (value.code !== "step_output_too_large") return !1;
+  try {
+    let { code: _, message: message2, ...facts } = value, detail = parseRoutineStepOutputDetail(facts);
+    return message2 === routineStepOutputMessage(detail) && steps.some((step) => step.id === detail.step && step.status === "failed");
+  } catch {
+    return !1;
+  }
 }
 function only(value, allowed) {
   return !!value && typeof value == "object" && !Array.isArray(value) && Object.keys(value).every((key) => allowed.split(",").includes(key));
@@ -4445,7 +4595,16 @@ function optionalTimes(value) {
   return (value.startedAt === void 0 || timestamp(value.startedAt)) && (value.finishedAt === void 0 || timestamp(value.finishedAt));
 }
 function validStep(step) {
-  return typeof step.id == "string" && identifier.test(step.id) && typeof step.title == "string" && step.title.length > 0 && step.title.length <= 256 && ["pending", "running", "completed", "failed", "skipped"].includes(step.status) && optionalTimes(step) && (step.progress === void 0 || only(step.progress, "completed,total") && Number.isSafeInteger(step.progress.completed) && Number.isSafeInteger(step.progress.total) && step.progress.completed > 0 && step.progress.completed <= step.progress.total) && (!Object.hasOwn(step, "summary") || bounded2(step.summary)) && (!Object.hasOwn(step, "data") || bounded2(step.data));
+  return typeof step.id == "string" && identifier.test(step.id) && typeof step.title == "string" && step.title.length > 0 && step.title.length <= 256 && ["pending", "running", "completed", "failed", "skipped"].includes(step.status) && optionalTimes(step) && (step.progress === void 0 || only(step.progress, "completed,total") && Number.isSafeInteger(step.progress.completed) && Number.isSafeInteger(step.progress.total) && step.progress.completed > 0 && step.progress.completed <= step.progress.total) && (() => {
+    try {
+      return captureRetainedStepOutput(step.id, {
+        ...Object.hasOwn(step, "summary") ? { summary: step.summary } : {},
+        ...Object.hasOwn(step, "data") ? { data: step.data } : {}
+      }), !0;
+    } catch {
+      return !1;
+    }
+  })();
 }
 function validLocalActivity(value) {
   let paths = (value2) => Array.isArray(value2) && value2.every((path) => typeof path == "string" && path.length > 0 && path.length <= 4096 && !path.startsWith("/") && !path.includes("\\") && !path.split("/").some((part) => !part || part === "." || part === "..") && !/[\x00-\x1f\x7f]/.test(path));
@@ -4483,7 +4642,7 @@ function handle(key, id3, context) {
     },
     async step(step) {
       (typeof step != "string" || !identifier.test(step)) && fail3("invalid_input");
-      let value = await request(key, `runs/${id3}/steps/${step}`, void 0, 514 * 1024, context, !0);
+      let value = await request(key, `runs/${id3}/steps/${step}`, void 0, ROUTINE_STEP_OUTPUT_BYTES + 4096, context, !0);
       if (context.kind !== "local")
         try {
           return only(value, "id,title,status,startedAt,finishedAt,progress,summary,data") || fail3("execution_unavailable"), parseRunStep(value, step);
@@ -4651,6 +4810,7 @@ export {
   question,
   recordBlock,
   recordsBlock,
+  requireRecords,
   resolveAsk,
   respond,
   richTextBlock,