@oddington/sdk 0.1.44 → 0.1.45

package/dist/browser.js

@@ -319,6 +319,52 @@ function validateRoutineSchemaValue(schema2, value, rejected) {
   check(schema2, value, "$");
 }
 
+function validDropboxRootPath(value) {
+  return typeof value == "string" && value.length <= 2048 && value.startsWith("/") && !/[\\\x00-\x1f\x7f]/.test(value) && value.slice(1).split("/").every((segment) => segment.length > 0 && segment.trim() === segment && segment !== "." && segment !== "..");
+}
+function validMicrosoftId(value) {
+  return typeof value == "string" && /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(value);
+}
+function validMicrosoftMailbox(value) {
+  return typeof value == "string" && value.length <= 254 && /^[^\s@/?#\\\x00-\x1f\x7f]+@[^\s@/?#\\\x00-\x1f\x7f]+\.[^\s@/?#\\\x00-\x1f\x7f]+$/.test(value);
+}
+function sharePointHost(value) {
+  return /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.sharepoint\.com$/.test(value);
+}
+function canonicalSharePointSiteUrl(value) {
+  if (!(typeof value != "string" || value.length > 2048 || /[\s\\?#\x00-\x1f\x7f]/.test(value) || !/^https:\/\/[^/:@]+(?:\/|$)/i.test(value)))
+    try {
+      let url = new URL(value);
+      if (url.protocol !== "https:" || !sharePointHost(url.hostname) || url.username || url.password || url.port) return;
+      let rawPath = value.replace(/^https:\/\/[^/]+/i, "") || "/", path = rawPath.endsWith("/") ? rawPath.slice(0, -1) : rawPath, segments = path.slice(1).split("/");
+      if (path && segments.some((segment) => !segment)) return;
+      let encoded = path ? segments.map((segment) => {
+        let decoded = decodeURIComponent(segment);
+        if (decoded === "." || decoded === ".." || /[/%\\?#\x00-\x1f\x7f]/.test(decoded)) throw new Error();
+        return encodeURIComponent(decoded);
+      }).join("/") : "", canonical = `https://${url.hostname}/${encoded}`;
+      return canonical.length <= 2048 ? canonical : void 0;
+    } catch {
+      return;
+    }
+}
+function validSharePointSiteId(value, siteUrl) {
+  if (typeof value != "string" || value.length > 512) return !1;
+  let [host, collection, site, extra] = value.split(",");
+  return extra === void 0 && host === new URL(siteUrl).hostname && validMicrosoftId(collection) && validMicrosoftId(site);
+}
+function validGoogleScopes(value) {
+  return Array.isArray(value) && value.length > 0 && value.length <= 32 && value.every((scope) => typeof scope == "string" && scope.length <= 256 && /^(https:\/\/www\.googleapis\.com\/auth\/[A-Za-z0-9._-]+|https:\/\/mail\.google\.com\/|openid|email|profile)$/.test(scope)) && new Set(value).size === value.length;
+}
+var DROPBOX_FILE_SCOPES = ["account_info.read", "files.metadata.read", "files.content.read", "files.content.write"];
+function validDropboxFileScopes(value) {
+  return Array.isArray(value) && value.length === DROPBOX_FILE_SCOPES.length && new Set(value).size === value.length && DROPBOX_FILE_SCOPES.every((scope) => value.includes(scope));
+}
+
+function validDataRepositoryName(value) {
+  return typeof value == "string" && /^[a-z0-9][a-z0-9._-]{0,127}$/.test(value) && !value.includes("..");
+}
+
 var InboxContractError = class extends Error {
   constructor(message2) {
     super(message2), this.name = "InboxContractError";
@@ -575,9 +621,26 @@ function defineHandler(value) {
 function respond(handler, input) {
   return defineHandler(handler), handlerReference({ id: handler.id, input });
 }
+function recordRequirements(value) {
+  let source2 = object(value, "Record requirements");
+  keys(source2, ["repository", "records"], "Record requirements"), validDataRepositoryName(source2.repository) || fail("Invalid requirements repository");
+  let repository = source2.repository, records = array(source2.records, "required Records").map((entry) => {
+    let row = object(entry, "required Record");
+    keys(row, ["ref", "version"], "required Record");
+    let { ref } = validateRecordReference({ repository, ref: row.ref });
+    return (typeof row.version != "string" || !row.version.length || row.version.length > 512) && fail("Invalid required Record version"), { ref, version: row.version };
+  });
+  return new Set(records.map((record4) => record4.ref)).size !== records.length && fail("Duplicate required Record"), { repository, records };
+}
+function requireRecords(repository, records) {
+  return recordRequirements({ repository, records: array(records, "required Records").map((entry) => {
+    let record4 = object(entry, "Data Record");
+    return { ref: record4.$ref, version: record4.$version };
+  }) });
+}
 function question(value) {
   let source2 = object(value, "question");
-  keys(source2, ["id", "to", "allowedResponders", "prompt", "instructions", "response", "handler"], "question");
+  keys(source2, ["id", "to", "allowedResponders", "prompt", "instructions", "response", "handler", "requirements"], "question");
   let to = personReference(source2.to, "question assignee"), allowedResponders = source2.allowedResponders === void 0 ? [to] : distinctPeople(source2.allowedResponders, "allowed responders");
   return allowedResponders.includes(to) || fail("Allowed responders must include the assignee"), {
     id: id(source2.id, "question ID"),
@@ -586,7 +649,8 @@ function question(value) {
     prompt: text(source2.prompt, "question prompt"),
     ...source2.instructions === void 0 ? {} : { instructions: text(source2.instructions, "instructions") },
     response: validateResponseDefinition(source2.response),
-    ...Object.hasOwn(source2, "handler") ? { handler: handlerReference(source2.handler) } : {}
+    ...Object.hasOwn(source2, "handler") ? { handler: handlerReference(source2.handler) } : {},
+    ...Object.hasOwn(source2, "requirements") ? { requirements: recordRequirements(source2.requirements) } : {}
   };
 }
 function presentation(source2) {
@@ -2374,48 +2438,6 @@ var files = {
   read
 };
 
-function validDropboxRootPath(value) {
-  return typeof value == "string" && value.length <= 2048 && value.startsWith("/") && !/[\\\x00-\x1f\x7f]/.test(value) && value.slice(1).split("/").every((segment) => segment.length > 0 && segment.trim() === segment && segment !== "." && segment !== "..");
-}
-function validMicrosoftId(value) {
-  return typeof value == "string" && /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(value);
-}
-function validMicrosoftMailbox(value) {
-  return typeof value == "string" && value.length <= 254 && /^[^\s@/?#\\\x00-\x1f\x7f]+@[^\s@/?#\\\x00-\x1f\x7f]+\.[^\s@/?#\\\x00-\x1f\x7f]+$/.test(value);
-}
-function sharePointHost(value) {
-  return /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.sharepoint\.com$/.test(value);
-}
-function canonicalSharePointSiteUrl(value) {
-  if (!(typeof value != "string" || value.length > 2048 || /[\s\\?#\x00-\x1f\x7f]/.test(value) || !/^https:\/\/[^/:@]+(?:\/|$)/i.test(value)))
-    try {
-      let url = new URL(value);
-      if (url.protocol !== "https:" || !sharePointHost(url.hostname) || url.username || url.password || url.port) return;
-      let rawPath = value.replace(/^https:\/\/[^/]+/i, "") || "/", path = rawPath.endsWith("/") ? rawPath.slice(0, -1) : rawPath, segments = path.slice(1).split("/");
-      if (path && segments.some((segment) => !segment)) return;
-      let encoded = path ? segments.map((segment) => {
-        let decoded = decodeURIComponent(segment);
-        if (decoded === "." || decoded === ".." || /[/%\\?#\x00-\x1f\x7f]/.test(decoded)) throw new Error();
-        return encodeURIComponent(decoded);
-      }).join("/") : "", canonical = `https://${url.hostname}/${encoded}`;
-      return canonical.length <= 2048 ? canonical : void 0;
-    } catch {
-      return;
-    }
-}
-function validSharePointSiteId(value, siteUrl) {
-  if (typeof value != "string" || value.length > 512) return !1;
-  let [host, collection, site, extra] = value.split(",");
-  return extra === void 0 && host === new URL(siteUrl).hostname && validMicrosoftId(collection) && validMicrosoftId(site);
-}
-function validGoogleScopes(value) {
-  return Array.isArray(value) && value.length > 0 && value.length <= 32 && value.every((scope) => typeof scope == "string" && scope.length <= 256 && /^(https:\/\/www\.googleapis\.com\/auth\/[A-Za-z0-9._-]+|https:\/\/mail\.google\.com\/|openid|email|profile)$/.test(scope)) && new Set(value).size === value.length;
-}
-var DROPBOX_FILE_SCOPES = ["account_info.read", "files.metadata.read", "files.content.read", "files.content.write"];
-function validDropboxFileScopes(value) {
-  return Array.isArray(value) && value.length === DROPBOX_FILE_SCOPES.length && new Set(value).size === value.length && DROPBOX_FILE_SCOPES.every((scope) => value.includes(scope));
-}
-
 var ROUTINE_CONNECTION_CREDENTIALS_ENV = "OS_ROUTINE_CONNECTION_CREDENTIALS";
 function parseRoutineConnectionNames(value) {
   if (!Array.isArray(value) || value.some((name2) => typeof name2 != "string" || !/^(gmail|airtable|dropbox|outlook|sharepoint)\/[a-z0-9][a-z0-9-]{0,62}$/.test(name2)) || new Set(value).size !== value.length)
@@ -2903,14 +2925,41 @@ var source = {
 };
 
 var InboxOperationError = class extends Error {
-  constructor(status, reason) {
-    super(reason === "conflict" ? "This question already has an accepted answer" : reason === "unavailable" ? "Inbox request unavailable. Retry the same action." : reason === "invalid_input" ? "Invalid Inbox request" : "Inbox access unavailable");
+  constructor(status, reason, requirementsRepository) {
+    super(reason === "records_need_attention" ? "Records need to be pushed or reviewed." : reason === "records_unavailable" ? "Records temporarily unavailable. Try again shortly." : reason === "handler_unavailable" ? "Deploy the routine that owns this question\u2019s response handler." : reason === "conflict" ? "This question already has an accepted answer" : reason === "unavailable" ? "Inbox request unavailable. Retry the same action." : reason === "invalid_input" ? "Invalid Inbox request" : "Inbox access unavailable");
     this.status = status;
     this.reason = reason;
+    this.requirementsRepository = requirementsRepository;
   }
   status;
   reason;
-}, INBOX_RESULT_BYTES = 8 * 1024 * 1024, INBOX_INPUT_BYTES = 8192, INBOX_LOCAL_INPUT_BYTES = 256 * 1024, INBOX_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+  requirementsRepository;
+};
+function parseQuestionAvailability(value, available = !1) {
+  let state = object4(value);
+  return keys3(state, ["unavailableReason", "requirementsRepository"], []), "unavailableReason" in state ? (assert(!available && typeof state.unavailableReason == "string" && ["handler_unavailable", "records_need_attention", "records_unavailable"].includes(String(state.unavailableReason))), state.unavailableReason === "records_need_attention" ? assert(validDataRepositoryName(state.requirementsRepository)) : assert(!("requirementsRepository" in state)), {
+    unavailableReason: state.unavailableReason,
+    ...state.unavailableReason === "records_need_attention" ? { requirementsRepository: state.requirementsRepository } : {}
+  }) : (assert(!("requirementsRepository" in state)), {});
+}
+function questionAvailability(value, available = !1) {
+  return parseQuestionAvailability({
+    ..."unavailableReason" in value ? { unavailableReason: value.unavailableReason } : {},
+    ..."requirementsRepository" in value ? { requirementsRepository: value.requirementsRepository } : {}
+  }, available);
+}
+function parseInboxUnavailableFailure(value, status) {
+  try {
+    if (status !== 503) return;
+    let envelope = object4(value);
+    keys3(envelope, ["error", "unavailableReason", "requirementsRepository"], ["error", "unavailableReason"]), assert(text4(envelope.error));
+    let state = questionAvailability(envelope);
+    return new InboxOperationError(503, state.unavailableReason, state.requirementsRepository);
+  } catch {
+    return;
+  }
+}
+var INBOX_RESULT_BYTES = 8 * 1024 * 1024, INBOX_INPUT_BYTES = 8192, INBOX_LOCAL_INPUT_BYTES = 256 * 1024, INBOX_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function isAppQuestionOperation(operation2) {
   return operation2 === "questions.list" || operation2 === "questions.answer" || operation2 === "questions.searchRecords";
 }
@@ -3090,7 +3139,7 @@ function parseInboxItem(value) {
     assert(id2(person.id) && text4(person.name));
   }), array2(item.questions).forEach((value2) => {
     let question2 = object4(value2);
-    if (assert(text4(question2.id) && id2(question2.to) && text4(question2.prompt) && (question2.instructions === null || text4(question2.instructions, !0)) && typeof question2.available == "boolean"), responseDefinition(question2.response), assert(array2(question2.allowedResponders).every(id2)), question2.acceptedResponse !== null) {
+    if (assert(text4(question2.id) && id2(question2.to) && text4(question2.prompt) && (question2.instructions === null || text4(question2.instructions, !0)) && typeof question2.available == "boolean"), questionAvailability(question2, question2.available), assert(!("requirements" in question2) && !("handler" in question2)), responseDefinition(question2.response), assert(array2(question2.allowedResponders).every(id2)), question2.acceptedResponse !== null) {
       let accepted = object4(question2.acceptedResponse);
       assert(id2(accepted.id) && id2(accepted.userId) && date(accepted.acceptedAt)), response(accepted.response), accepted.label === null ? delete accepted.label : "label" in accepted && assert(text4(accepted.label)), "acceptanceOrder" in accepted && assert(integer(accepted.acceptanceOrder));
     }
@@ -3123,11 +3172,11 @@ function parseAnswerableQuestion(value) {
   let entry = object4(json(value));
   keys3(
     entry,
-    ["itemId", "number", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "tags", "recordRefs", "instructions"],
+    ["itemId", "number", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable", "tags", "recordRefs", "instructions", "unavailableReason", "requirementsRepository"],
     ["itemId", "number", "revision", "title", "inboxUrl", "questionId", "routine", "prompt", "response", "answerable"]
   ), assert(id2(entry.itemId) && integer(entry.number) && integer(entry.revision) && text4(entry.title) && text4(entry.inboxUrl));
   let link = new URL(entry.inboxUrl), slug = link.hostname.slice(0, -13);
-  return assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && entry.inboxUrl === `https://${slug}.oddington.ai/inbox/${entry.itemId}`), assert(isAppRoutineName(entry.routine) && text4(entry.questionId) && entry.questionId === entry.questionId.trim() && text4(entry.prompt) && (!("instructions" in entry) || text4(entry.instructions, !0)) && typeof entry.answerable == "boolean"), responseDefinition(entry.response), askMetadata(entry), entry;
+  return assert(link.hostname.endsWith(".oddington.ai") && slug.length <= 63 && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug) && !["auth", "www", "api", "os"].includes(slug) && entry.inboxUrl === `https://${slug}.oddington.ai/inbox/${entry.itemId}`), assert(isAppRoutineName(entry.routine) && text4(entry.questionId) && entry.questionId === entry.questionId.trim() && text4(entry.prompt) && (!("instructions" in entry) || text4(entry.instructions, !0)) && typeof entry.answerable == "boolean"), questionAvailability(entry, entry.answerable), responseDefinition(entry.response), askMetadata(entry), entry;
 }
 function askMetadata(entry) {
   let tags = array2(entry.tags === void 0 ? [] : entry.tags);
@@ -3436,7 +3485,7 @@ function appContext(origin, active2) {
       observation === observed && (observation = void 0);
     }
   }
-  async function renew() {
+  async function renew(initialConnection = !1) {
     if (renewal) return renewal;
     if (!binding || !pair || !alive()) throw new Error();
     renewal = (async () => {
@@ -3462,7 +3511,7 @@ function appContext(origin, active2) {
           await synchronize(requestController.signal);
           return;
         }
-        if (!response2.ok) throw new Error();
+        if (!response2.ok) throw response2.status === 401 || response2.status === 403 ? new AppContextDenied() : new Error();
         if (!alive() || !validPair(value) || !bounded3(value.context) || (/* @__PURE__ */ new Set([value.credential, value.renewalCredential, pair.credential, pair.renewalCredential])).size !== 4) throw new Error();
         if (stored() !== previous) {
           await synchronize(requestController.signal);
@@ -3471,6 +3520,7 @@ function appContext(origin, active2) {
         let raw = JSON.stringify(value);
         globalThis.localStorage.setItem(sessionKey, raw), install(value.context, value, raw);
       } catch (error) {
+        if (initialConnection && error instanceof AppContextDenied) throw error;
         try {
           if (alive() && stored() && stored() !== previous) {
             await synchronize(requestController.signal);
@@ -3599,8 +3649,32 @@ function appContext(origin, active2) {
     try {
       if (!alive()) throw new Error();
       if (!pair) {
-        let candidate2 = stored(), retained3 = readPair(candidate2);
-        pair = retained3, binding = { ...retained3.context }, credential = retained3.credential, serialized = candidate2;
+        let candidate2 = stored();
+        if (candidate2)
+          try {
+            let retained3 = readPair(candidate2);
+            if (retained3.context.expiresAt <= Date.now()) {
+              if (pair = retained3, binding = { ...retained3.context }, credential = retained3.credential, serialized = candidate2, await renew(!0), !current2()) throw new AppRenewalUnavailable();
+              return context();
+            }
+            let value3 = await proof(retained3.credential);
+            return stored() !== candidate2 ? resolveOnce() : (install(value3, retained3, candidate2), context());
+          } catch (error) {
+            if (error instanceof AppRenewalUnavailable || error instanceof AppResponseReadError || !(error instanceof AppContextDenied) || !alive() || expiry) throw error;
+            pair = void 0, binding = void 0, credential = void 0, serialized = void 0;
+          }
+        let response2 = await untilAborted(fetch(`${origin}/_os/app/connect`, {
+          method: "POST",
+          credentials: "omit",
+          redirect: "error",
+          cache: "no-store",
+          referrerPolicy: "no-referrer",
+          signal: controller.signal
+        }), controller.signal), value2 = await appResponse(response2, 4096, controller.signal);
+        if (!response2.ok || response2.redirected || response2.url && response2.url !== `${origin}/_os/app/connect` || !alive() || !validPair(value2) || !bounded3(value2.context)) throw new Error();
+        if (stored() !== candidate2 && stored()) return resolveOnce();
+        let raw = JSON.stringify(value2);
+        return globalThis.localStorage.setItem(sessionKey, raw), install(value2.context, value2, raw), context();
       }
       if (expireAccess(), binding.expiresAt <= Date.now()) {
         if (await renew(), !current2()) throw new AppRenewalUnavailable();
@@ -3630,7 +3704,7 @@ function appContext(origin, active2) {
     resolution2 = void 0;
   }), resolution2);
   return { resolve, retained: async () => {
-    if (!expiry && alive() && (binding ? current2() && resolution2 : readPair(stored()).context.expiresAt > Date.now()))
+    if (!expiry && alive() && (binding ? current2() && resolution2 : !stored() || readPair(stored()).context.expiresAt > Date.now()))
       return resolve();
     if (!expiry || !current2()) throw new Error("Local app context unavailable.");
     return context();
@@ -3681,7 +3755,7 @@ async function send2(operation2, input, resolved) {
     };
     try {
       let response2 = await context.requestInbox(operation2, envelope.input), value = await appResponse(response2, INBOX_RESULT_BYTES, context.signal);
-      if (check2(), !response2.ok) throw new InboxOperationError(
+      if (check2(), !response2.ok) throw parseInboxUnavailableFailure(value, response2.status) ?? new InboxOperationError(
         [400, 401, 403, 409].includes(response2.status) ? response2.status : 503,
         response2.status === 400 ? "invalid_input" : response2.status === 401 ? "authority_unavailable" : response2.status === 403 ? "access_denied" : response2.status === 409 ? "conflict" : "unavailable"
       );
@@ -3723,12 +3797,20 @@ async function send2(operation2, input, resolved) {
       throw response2.body?.cancel().catch(() => {
       }), error;
     }
-    if (!response2.ok)
-      throw response2.body?.cancel().catch(() => {
-      }), new InboxOperationError(
+    if (!response2.ok) {
+      let value2;
+      try {
+        let bytes2 = await limitedBody(response2, 8192);
+        check(), bytes2 && (value2 = JSON.parse(new TextDecoder().decode(bytes2)));
+      } catch {
+        check();
+      }
+      let refusal = parseInboxUnavailableFailure(value2, response2.status);
+      throw refusal || new InboxOperationError(
         [400, 401, 403, 409].includes(response2.status) ? response2.status : 503,
         response2.status === 400 ? "invalid_input" : response2.status === 401 ? "authority_unavailable" : response2.status === 403 ? "access_denied" : response2.status === 409 ? "conflict" : "unavailable"
       );
+    }
     if (response2.status !== 200)
       throw response2.body?.cancel().catch(() => {
       }), unavailable3();
@@ -4728,6 +4810,7 @@ export {
   question,
   recordBlock,
   recordsBlock,
+  requireRecords,
   resolveAsk,
   respond,
   richTextBlock,