@oddington/sdk 0.1.8 → 0.1.10

package/dist/browser.js

@@ -717,31 +717,65 @@ var DataOperationError = class extends Error {
 
 var invalid = () => {
   throw new DataOperationError("invalid_query");
-}, scalarText = (value) => typeof value == "string" && !/[\u0000\uD800-\uDFFF]/u.test(value);
+}, historyText = (value) => typeof value == "string" && !/[\u0000\uD800-\uDFFF]/u.test(value);
+function historyVersion(value) {
+  return historyText(value) && value.length > 0 && new TextEncoder().encode(value).length <= 1024 && !/[\u0000-\u001f\u007f-\u009f]/.test(value) && !/^[0-9a-f]{40}$/i.test(value);
+}
+function historyProperties(value) {
+  if (!value || typeof value != "object" || Array.isArray(value) || ![Object.prototype, null].includes(Object.getPrototypeOf(value))) return invalid();
+  let descriptors = Object.getOwnPropertyDescriptors(value);
+  return Reflect.ownKeys(value).some((key) => typeof key != "string" || !descriptors[key]?.enumerable || !Object.hasOwn(descriptors[key], "value")) ? invalid() : descriptors;
+}
+function captureHistoryListOptions(value) {
+  if (value === void 0) return {};
+  let descriptors = historyProperties(value), result2 = {};
+  if (Object.keys(descriptors).some((key) => !["limit", "before"].includes(key))) return invalid();
+  if (Object.hasOwn(descriptors, "limit")) {
+    let limit = descriptors.limit.value;
+    if (!Number.isInteger(limit) || limit < 1 || limit > 100) return invalid();
+    result2.limit = limit;
+  }
+  if (Object.hasOwn(descriptors, "before")) {
+    let before = descriptors.before.value;
+    if (!historyVersion(before)) return invalid();
+    result2.before = before;
+  }
+  return result2;
+}
+function captureHistoryInstant(value) {
+  if (!historyText(value) || value.length > 1024) return invalid();
+  let match = /^(\d{4})-(\d{2})-(\d{2})[Tt](\d{2}):(\d{2}):(\d{2})(?:\.\d+)?([Zz]|([+-])(\d{2}):(\d{2}))$/.exec(value);
+  if (!match) return invalid();
+  let [year, month, day, hour, minute, second] = match.slice(1, 7).map(Number), days = new Date(Date.UTC(year, month, 0));
+  return days.setUTCFullYear(year), year < 1 || month < 1 || month > 12 || day < 1 || day > days.getUTCDate() || hour > 23 || minute > 59 || second > 59 || Number(match[9] ?? 0) > 23 || Number(match[10] ?? 0) > 59 ? invalid() : value;
+}
+
+var invalid2 = () => {
+  throw new DataOperationError("invalid_query");
+};
 function captureRecordsSearchInput(query, options) {
-  if (!scalarText(query)) return invalid();
+  if (!historyText(query)) return invalid2();
   let length = [...query.trim()].length;
-  if (length < 1 || length > 256) return invalid();
+  if (length < 1 || length > 256) return invalid2();
   if (options === void 0) return { query };
-  if (!options || typeof options != "object" || Array.isArray(options) || ![Object.prototype, null].includes(Object.getPrototypeOf(options))) return invalid();
-  let descriptors = Object.getOwnPropertyDescriptors(options);
-  if (Reflect.ownKeys(options).some((key) => typeof key != "string" || !["collections", "limit"].includes(key) || !descriptors[key]?.enumerable || !Object.hasOwn(descriptors[key], "value"))) return invalid();
+  let descriptors = historyProperties(options);
+  if (Object.keys(descriptors).some((key) => !["collections", "limit"].includes(key))) return invalid2();
   let captured = {};
   if (Object.hasOwn(descriptors, "collections")) {
     let supplied = descriptors.collections.value;
-    if (!Array.isArray(supplied) || supplied.length < 1 || supplied.length > 16 || Reflect.ownKeys(supplied).length !== supplied.length + 1) return invalid();
+    if (!Array.isArray(supplied) || supplied.length < 1 || supplied.length > 16 || Reflect.ownKeys(supplied).length !== supplied.length + 1) return invalid2();
     let collections = [];
     for (let index = 0; index < supplied.length; index++) {
       let descriptor2 = Object.getOwnPropertyDescriptor(supplied, String(index));
-      if (!descriptor2?.enumerable || !Object.hasOwn(descriptor2, "value") || !scalarText(descriptor2.value)) return invalid();
+      if (!descriptor2?.enumerable || !Object.hasOwn(descriptor2, "value") || !historyText(descriptor2.value)) return invalid2();
       collections.push(descriptor2.value);
     }
-    if (new Set(collections).size !== collections.length) return invalid();
+    if (new Set(collections).size !== collections.length) return invalid2();
     captured.collections = collections;
   }
   if (Object.hasOwn(descriptors, "limit")) {
     let supplied = descriptors.limit.value;
-    if (!Number.isInteger(supplied) || supplied < 1 || supplied > 100) return invalid();
+    if (!Number.isInteger(supplied) || supplied < 1 || supplied > 100) return invalid2();
     captured.limit = supplied;
   }
   return { query, options: captured };
@@ -842,42 +876,42 @@ var FileOperationError = class extends Error {
   retryable;
 }, FILE_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/, FILE_ORIGINAL_MAX_BYTES = 5 * 1024 ** 3;
 function parseFileDescriptor(value) {
-  let invalid3 = () => {
+  let invalid4 = () => {
     throw new FileOperationError("unavailable", 503, !0);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid3();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid4();
   let f = value;
-  if (Object.keys(f).sort().join(",") !== "details,enrichments,id,mediaType,name,path,sha256,size" || typeof f.id != "string" || !FILE_ID_PATTERN.test(f.id) || !safeFileName(f.name) || !safeFilePath(f.path) || !Number.isSafeInteger(f.size) || f.size < 0 || f.size > FILE_ORIGINAL_MAX_BYTES || typeof f.sha256 != "string" || !/^[0-9a-f]{64}$/.test(f.sha256) || !f.enrichments || typeof f.enrichments != "object" || Array.isArray(f.enrichments) || !f.details || typeof f.details != "object" || Array.isArray(f.details)) return invalid3();
+  if (Object.keys(f).sort().join(",") !== "details,enrichments,id,mediaType,name,path,sha256,size" || typeof f.id != "string" || !FILE_ID_PATTERN.test(f.id) || !safeFileName(f.name) || !safeFilePath(f.path) || !Number.isSafeInteger(f.size) || f.size < 0 || f.size > FILE_ORIGINAL_MAX_BYTES || typeof f.sha256 != "string" || !/^[0-9a-f]{64}$/.test(f.sha256) || !f.enrichments || typeof f.enrichments != "object" || Array.isArray(f.enrichments) || !f.details || typeof f.details != "object" || Array.isArray(f.details)) return invalid4();
   let d = f.details;
   if (d.kind === "other") {
-    if (Object.keys(d).length !== 1 || f.mediaType !== "application/octet-stream") return invalid3();
+    if (Object.keys(d).length !== 1 || f.mediaType !== "application/octet-stream") return invalid4();
   } else if (d.kind === "csv") {
-    if (Object.keys(d).sort().join(",") !== "dataRows,delimiter,encoding,headerRow,kind" || f.mediaType !== "text/csv" || !["utf-8", "windows-1252"].includes(d.encoding) || ![",", ";", "	"].includes(d.delimiter) || !Number.isSafeInteger(d.headerRow) || d.headerRow < 1 || !Number.isSafeInteger(d.dataRows) || d.dataRows < 0) return invalid3();
-  } else return invalid3();
+    if (Object.keys(d).sort().join(",") !== "dataRows,delimiter,encoding,headerRow,kind" || f.mediaType !== "text/csv" || !["utf-8", "windows-1252"].includes(d.encoding) || ![",", ";", "	"].includes(d.delimiter) || !Number.isSafeInteger(d.headerRow) || d.headerRow < 1 || !Number.isSafeInteger(d.dataRows) || d.dataRows < 0) return invalid4();
+  } else return invalid4();
   for (let [name, descriptor2] of Object.entries(f.enrichments)) {
-    if (!safeEnrichmentName(name)) return invalid3();
+    if (!safeEnrichmentName(name)) return invalid4();
     parseEnrichmentDescriptor(descriptor2);
   }
-  return new TextEncoder().encode(JSON.stringify(f)).byteLength > 16 * 1024 ? invalid3() : f;
+  return new TextEncoder().encode(JSON.stringify(f)).byteLength > 16 * 1024 ? invalid4() : f;
 }
 function parseEnrichmentDescriptor(value) {
-  let invalid3 = () => {
+  let invalid4 = () => {
     throw new FileOperationError("unavailable", 503, !0);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid3();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid4();
   let d = value;
-  return Object.keys(d).sort().join(",") !== "mediaType,sha256,size" || !["application/octet-stream", "text/plain", "text/markdown", "application/json"].includes(d.mediaType) || !Number.isSafeInteger(d.size) || d.size < 0 || d.size > 16 * 1024 * 1024 || typeof d.sha256 != "string" || !/^[0-9a-f]{64}$/.test(d.sha256) ? invalid3() : d;
+  return Object.keys(d).sort().join(",") !== "mediaType,sha256,size" || !["application/octet-stream", "text/plain", "text/markdown", "application/json"].includes(d.mediaType) || !Number.isSafeInteger(d.size) || d.size < 0 || d.size > 16 * 1024 * 1024 || typeof d.sha256 != "string" || !/^[0-9a-f]{64}$/.test(d.sha256) ? invalid4() : d;
 }
 function safeEnrichmentName(value) {
   return safeFileName(value) && !/^original(?:\.|$)/i.test(value);
 }
 function parseFileEnrichMetadata(value, maxBytes) {
-  let invalid3 = () => {
+  let invalid4 = () => {
     throw new FileOperationError("invalid_input", 400);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid3();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid4();
   let d = value;
-  if (Object.keys(d).some((key) => !["name", "size", "mediaType", "replace"].includes(key)) || !safeEnrichmentName(d.name) || !Number.isSafeInteger(d.size) || d.size < 0 || d.mediaType !== void 0 && (typeof d.mediaType != "string" || d.mediaType.length > 255 || /[\u0000-\u001f\u007f]/.test(d.mediaType)) || d.replace !== void 0 && (typeof d.replace != "string" || !/^[0-9a-f]{64}$/.test(d.replace))) return invalid3();
+  if (Object.keys(d).some((key) => !["name", "size", "mediaType", "replace"].includes(key)) || !safeEnrichmentName(d.name) || !Number.isSafeInteger(d.size) || d.size < 0 || d.mediaType !== void 0 && (typeof d.mediaType != "string" || d.mediaType.length > 255 || /[\u0000-\u001f\u007f]/.test(d.mediaType)) || d.replace !== void 0 && (typeof d.replace != "string" || !/^[0-9a-f]{64}$/.test(d.replace))) return invalid4();
   if (d.size > maxBytes) throw new FileOperationError("request_too_large", 413);
   return d;
 }
@@ -888,23 +922,23 @@ function safeFilePath(value) {
   return typeof value == "string" && value.length <= 1024 && value.split("/").every(safeFileName);
 }
 function parseFileCreateMetadata(value, maxBytes) {
-  let invalid3 = () => {
+  let invalid4 = () => {
     throw new FileOperationError("invalid_input", 400);
   };
-  if (!value || typeof value != "object" || Array.isArray(value)) return invalid3();
+  if (!value || typeof value != "object" || Array.isArray(value)) return invalid4();
   let input = value;
-  if (Object.keys(input).some((key) => !["name", "path", "storage", "csv", "size", "requestKey"].includes(key))) return invalid3();
+  if (Object.keys(input).some((key) => !["name", "path", "storage", "csv", "size", "requestKey"].includes(key))) return invalid4();
   let path = input.path === void 0 ? "Files" : input.path;
-  if (!safeFileName(input.name) || !safeFilePath(path) || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || !Number.isSafeInteger(input.size) || input.size < 0) return invalid3();
+  if (!safeFileName(input.name) || !safeFilePath(path) || input.storage !== void 0 && input.storage !== "remote" && input.storage !== "local" || !Number.isSafeInteger(input.size) || input.size < 0) return invalid4();
   if (input.size > maxBytes) throw new FileOperationError("request_too_large", 413);
-  if (typeof input.requestKey != "string" || input.requestKey.length < 1 || input.requestKey.length > 256 || input.requestKey !== input.requestKey.trim() || /[\u0000-\u001f\u007f]/.test(input.requestKey)) return invalid3();
+  if (typeof input.requestKey != "string" || input.requestKey.length < 1 || input.requestKey.length > 256 || input.requestKey !== input.requestKey.trim() || /[\u0000-\u001f\u007f]/.test(input.requestKey)) return invalid4();
   let csv;
   if (input.csv !== void 0) {
-    if (!input.csv || typeof input.csv != "object" || Array.isArray(input.csv)) return invalid3();
+    if (!input.csv || typeof input.csv != "object" || Array.isArray(input.csv)) return invalid4();
     let hints = input.csv;
-    if (Object.keys(hints).some((key) => !["encoding", "delimiter", "headerRow"].includes(key))) return invalid3();
+    if (Object.keys(hints).some((key) => !["encoding", "delimiter", "headerRow"].includes(key))) return invalid4();
     let encoding = hints.encoding === void 0 ? "utf-8" : hints.encoding, delimiter = hints.delimiter === void 0 ? "," : hints.delimiter, headerRow = hints.headerRow === void 0 ? 1 : hints.headerRow;
-    if (encoding !== "utf-8" && encoding !== "windows-1252" || ![",", ";", "	"].includes(delimiter) || !Number.isSafeInteger(headerRow) || headerRow < 1 || headerRow > 1e5) return invalid3();
+    if (encoding !== "utf-8" && encoding !== "windows-1252" || ![",", ";", "	"].includes(delimiter) || !Number.isSafeInteger(headerRow) || headerRow < 1 || headerRow > 1e5) return invalid4();
     csv = { encoding, delimiter, headerRow };
   }
   return {
@@ -992,13 +1026,14 @@ var data = {
     async function send2(input) {
       let context2 = await resolveDataContext();
       try {
-        if (checkDataRequestSize({ repository, ...input }), "local" in context2) return await context2.local("data/query", { repository, ...input });
+        let envelope = { repository, ...input };
+        if (checkDataRequestSize(envelope), "local" in context2) return await context2.local("data/query", envelope);
         let response = await fetch(context2.url, {
           method: "POST",
           redirect: "error",
           cache: "no-store",
           headers: { "content-type": "application/json", ...context2.headers },
-          body: JSON.stringify({ repository, ...input })
+          body: JSON.stringify(envelope)
         }), result2 = await response.json();
         if (!response.ok)
           throw dataTransportError(response.status, result2);
@@ -1014,13 +1049,11 @@ var data = {
       },
       records: {
         select: (query) => send2({ operation: "records.select", query }),
-        search: (query, options) => {
-          try {
-            return send2({ operation: "records.search", ...captureRecordsSearchInput(query, options) });
-          } catch (error) {
-            return Promise.reject(error);
-          }
-        }
+        search: async (query, options) => send2({ operation: "records.search", ...captureRecordsSearchInput(query, options) })
+      },
+      history: {
+        list: async (options) => send2({ operation: "history.list", options: captureHistoryListOptions(options) }),
+        at: async (instant) => send2({ operation: "history.at", instant: captureHistoryInstant(instant) })
       },
       changes() {
         let updates = [], creates = [], deletes = [], publicationId, pending, confirmed, snapshot = () => {
@@ -1104,7 +1137,7 @@ var data = {
   }
 };
 
-var MAX_BYTES = 16 * 1024 * 1024, PART_BYTES = 8 * 1024 * 1024, METADATA_BYTES = 4096, RESULT_BYTES = 16 * 1024, CONTROL_RESULT_BYTES = 128 * 1024, TIMEOUT_MS = 3e4, MAX_ACTIVE = 4, ATTEMPTS = 2, active = 0, invalid2 = () => new FileOperationError("invalid_input", 400), unavailable = () => new FileOperationError("unavailable", 503, !0), failures = {
+var MAX_BYTES = 16 * 1024 * 1024, PART_BYTES = 8 * 1024 * 1024, METADATA_BYTES = 4096, RESULT_BYTES = 16 * 1024, CONTROL_RESULT_BYTES = 128 * 1024, TIMEOUT_MS = 3e4, MAX_ACTIVE = 4, ATTEMPTS = 2, active = 0, invalid3 = () => new FileOperationError("invalid_input", 400), unavailable = () => new FileOperationError("unavailable", 503, !0), failures = {
   400: ["invalid_input", "unsupported_context"],
   401: ["unauthenticated"],
   403: ["access_denied"],
@@ -1121,7 +1154,7 @@ async function boundedBytes(stream, limit) {
     for (; ; ) {
       let { done, value } = await reader.read();
       if (done) break;
-      if (!(value instanceof Uint8Array)) throw invalid2();
+      if (!(value instanceof Uint8Array)) throw invalid3();
       if (size += value.byteLength, size > limit) throw new FileOperationError("request_too_large", 413);
       bytes.set(value, size - value.byteLength);
     }
@@ -1249,7 +1282,7 @@ async function send(suffix, init2, descriptor2, initial, parent) {
   throw unavailable();
 }
 function idPath(id2) {
-  if (typeof id2 != "string" || !FILE_ID_PATTERN.test(id2)) throw invalid2();
+  if (typeof id2 != "string" || !FILE_ID_PATTERN.test(id2)) throw invalid3();
   return `/${id2}`;
 }
 async function multipartCreate(input, metadata, exchange, release = () => {
@@ -1292,18 +1325,18 @@ async function multipartCreate(input, metadata, exchange, release = () => {
           if (!chunk || offset === chunk.byteLength) {
             chunk = void 0, offset = 0;
             let value2 = await next();
-            if (value2.done || !(value2.value instanceof Uint8Array) || (chunk = value2.value, chunk.byteLength > metadata.size - sent - filled)) throw invalid2();
+            if (value2.done || !(value2.value instanceof Uint8Array) || (chunk = value2.value, chunk.byteLength > metadata.size - sent - filled)) throw invalid3();
           }
           let take = Math.min(length - filled, chunk.byteLength - offset);
           part.set(chunk.subarray(offset, offset + take), filled), filled += take, offset += take, offset === chunk.byteLength && (chunk = void 0, offset = 0);
         }
       }
-      if (part.byteLength !== length) throw invalid2();
+      if (part.byteLength !== length) throw invalid3();
       if (reader && sent + length === metadata.size)
         for (lastProgress = Date.now(); ; ) {
           let value2 = await next();
           if (value2.done) break;
-          if (!(value2.value instanceof Uint8Array) || value2.value.byteLength) throw invalid2();
+          if (!(value2.value instanceof Uint8Array) || value2.value.byteLength) throw invalid3();
         }
       let value = await request((signal) => exchange(`${route}/part`, {
         method: "POST",
@@ -1317,7 +1350,7 @@ async function multipartCreate(input, metadata, exchange, release = () => {
     }
     if (upload) for (let name of Object.keys(upload.file.enrichments)) {
       let bytes = await request(() => upload.enrichment(name));
-      if (bytes.byteLength !== upload.file.enrichments[name].size || bytes.byteLength > MAX_BYTES) throw invalid2();
+      if (bytes.byteLength !== upload.file.enrichments[name].size || bytes.byteLength > MAX_BYTES) throw invalid3();
       await request((signal) => exchange(`${route}/enrichments/${encodeURIComponent(name)}`, {
         method: "POST",
         headers: { "content-type": "application/octet-stream", "x-oddington-transfer": ticket },
@@ -1361,7 +1394,7 @@ async function operation(work, initial, parent) {
 function contentPath(id2, name) {
   let path = idPath(id2);
   if (name === void 0) return `${path}/content`;
-  if (!safeEnrichmentName(name)) throw invalid2();
+  if (!safeEnrichmentName(name)) throw invalid3();
   return `${path}/enrichments/${encodeURIComponent(name)}/content`;
 }
 async function read(id2, names) {
@@ -1370,12 +1403,12 @@ async function read(id2, names) {
     let path = contentPath(id2, names);
     return operation((context3, signal) => send(path, { method: "GET" }, !1, context3, signal), context2);
   }
-  if (!Array.isArray(names)) throw invalid2();
+  if (!Array.isArray(names)) throw invalid3();
   let distinct = [], seen = /* @__PURE__ */ new Set();
   for (let name of names) {
-    if (typeof name != "string" || !safeEnrichmentName(name)) throw invalid2();
+    if (typeof name != "string" || !safeEnrichmentName(name)) throw invalid3();
     if (!seen.has(name)) {
-      if (seen.size === 16) throw invalid2();
+      if (seen.size === 16) throw invalid3();
       seen.add(name), distinct.push(name);
     }
   }
@@ -1407,11 +1440,11 @@ var files = {
   async create(input, options) {
     let context2 = await resolveFilesContext();
     if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "size", "path", "name", "storage", "csv"].includes(key)) || options !== void 0 && (!options || typeof options != "object" || Array.isArray(options) || Object.keys(options).some((key) => key !== "requestKey")))
-      throw invalid2();
+      throw invalid3();
     let blob = input.file instanceof Blob, array2 = input.file instanceof Uint8Array, stream = input.file instanceof ReadableStream;
-    if (!blob && !array2 && !stream) throw invalid2();
+    if (!blob && !array2 && !stream) throw invalid3();
     let intrinsic = blob ? input.file.size : array2 ? input.file.byteLength : void 0;
-    if (intrinsic !== void 0 && input.size !== void 0 && input.size !== intrinsic) throw invalid2();
+    if (intrinsic !== void 0 && input.size !== void 0 && input.size !== intrinsic) throw invalid3();
     let name = input.name;
     name === void 0 && blob && "name" in input.file && typeof input.file.name == "string" && (name = typeof globalThis.File < "u" && input.file instanceof globalThis.File ? input.file.name : input.file.name.split(/[\\/]/).at(-1));
     let metadata = parseFileCreateMetadata({
@@ -1424,7 +1457,7 @@ var files = {
     }, FILE_ORIGINAL_MAX_BYTES);
     if (!context2.local && metadata.storage === "local") throw new FileOperationError("unsupported_context", 400);
     let header = encodeURIComponent(JSON.stringify(metadata));
-    if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid2();
+    if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid3();
     if (active >= MAX_ACTIVE) throw new FileOperationError("capacity", 429, !0);
     if (active++, context2.localFiles && metadata.size > MAX_BYTES) {
       let controller = new AbortController(), file = input.file, offset = 0, body2 = file instanceof ReadableStream ? file : file instanceof Blob ? file.stream() : new ReadableStream({
@@ -1452,7 +1485,7 @@ var files = {
           blob ? input.file.stream() : input.file,
           metadata.size
         );
-        if (bytes.byteLength !== metadata.size) throw invalid2();
+        if (bytes.byteLength !== metadata.size) throw invalid3();
         if (signal.aborted) throw unavailable();
         return await send("", {
           method: "POST",
@@ -1468,7 +1501,7 @@ var files = {
   },
   async enrich(input) {
     let context2 = await resolveFilesContext();
-    if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "name", "content", "mediaType", "replace"].includes(key)) || typeof input.content != "string" && !(input.content instanceof Uint8Array)) throw invalid2();
+    if (!input || typeof input != "object" || Array.isArray(input) || Object.keys(input).some((key) => !["file", "name", "content", "mediaType", "replace"].includes(key)) || typeof input.content != "string" && !(input.content instanceof Uint8Array)) throw invalid3();
     let path = `${idPath(input.file)}/enrichments`;
     if (typeof input.content == "string" ? input.content.length > MAX_BYTES : input.content.byteLength > MAX_BYTES)
       throw new FileOperationError("request_too_large", 413);
@@ -1485,7 +1518,7 @@ var files = {
         ...input.mediaType === void 0 ? {} : { mediaType: input.mediaType },
         ...input.replace === void 0 ? {} : { replace: input.replace }
       }, MAX_BYTES), header = encodeURIComponent(JSON.stringify(metadata));
-      if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid2();
+      if (new TextEncoder().encode(header).byteLength > METADATA_BYTES) throw invalid3();
       let result2 = await send(path, { method: "POST", headers: {
         "content-type": "application/octet-stream",
         "x-oddington-enrichment": header
@@ -1500,7 +1533,9 @@ var files = {
   read
 };
 
-var sessionKey = "_os.app.session", AppResponseReadError = class extends Error {
+var sessionKey = "_os.app.session", responseChecks = /* @__PURE__ */ new WeakMap(), AppResponseReadError = class extends Error {
+}, AppContextDenied = class extends Error {
+}, AppRenewalUnavailable = class extends Error {
 };
 async function appResponse(response, maximum, signal) {
   if (signal.aborted || !response.body || response.headers.get("content-type")?.split(";")[0]?.trim().toLowerCase() !== "application/json") throw new Error();
@@ -1519,7 +1554,11 @@ async function appResponse(response, maximum, signal) {
         throw new AppResponseReadError();
       }
       if (signal.aborted) throw new Error();
-      if (chunk.done) return JSON.parse(text3 + decoder.decode());
+      if (chunk.done) {
+        let value = JSON.parse(text3 + decoder.decode());
+        if (await responseChecks.get(response)?.(value), signal.aborted) throw new Error();
+        return value;
+      }
       if (bytes += chunk.value.byteLength, bytes > maximum)
         throw abort(), new Error();
       text3 += decoder.decode(chunk.value, { stream: !0 });
@@ -1537,27 +1576,180 @@ function isAppOrigin(value) {
   }
 }
 function appContext(origin, active2) {
-  let binding, credential, denied = !1, controller = new AbortController(), expiry, invalidate = () => {
-    denied = !0, controller.abort(), clearTimeout(expiry), clearInterval(monitor);
+  let binding, credential, denied = !1, controller = new AbortController(), expiry, startup, renewalTimer, renewal, observation, resolution2, disposed = !1, stored = () => globalThis.localStorage.getItem(sessionKey), alive = () => {
+    try {
+      return !denied && !disposed && active2() && globalThis.location.origin === origin && (!binding || binding.expiresAt > Date.now());
+    } catch {
+      return !1;
+    }
+  }, cancel = () => {
+    controller.abort(), clearTimeout(expiry), clearTimeout(startup), clearTimeout(renewalTimer), clearInterval(monitor), globalThis.removeEventListener?.("storage", storageChanged);
+  }, invalidate = () => {
+    denied = !0, cancel();
     try {
-      active2() && globalThis.location.origin === origin && (!credential || globalThis.localStorage.getItem(sessionKey) === credential) && globalThis.localStorage.removeItem(sessionKey);
+      !disposed && active2() && globalThis.location.origin === origin && (!credential || globalThis.localStorage.getItem(sessionKey) === credential) && globalThis.localStorage.removeItem(sessionKey);
     } catch {
     }
   }, current2 = () => {
     try {
-      return !denied && active2() && globalThis.location.origin === origin && globalThis.localStorage.getItem(sessionKey) === credential && (!binding || binding.expiresAt > Date.now());
+      return alive() && stored() === credential;
     } catch {
       return !1;
     }
+  }, sameSession = (value) => !binding || value.appId === binding.appId && value.memberId === binding.memberId && value.workspace === binding.workspace && value.sessionId === binding.sessionId, bounded = (value) => validBinding(value) && value.expiresAt > Date.now() && value.expiresAt <= Date.now() + 6e5 && sameSession(value);
+  async function proof(candidate, signal = controller.signal) {
+    if (!alive() || !/^[A-Za-z0-9_-]{43}$/.test(candidate)) throw new Error();
+    let url = `${origin}/_os/app/context`, response = await fetch(url, {
+      credentials: "omit",
+      redirect: "error",
+      cache: "no-store",
+      referrerPolicy: "no-referrer",
+      headers: { authorization: `Bearer ${candidate}` },
+      signal
+    });
+    if (response.redirected || response.url && response.url !== url) throw new Error();
+    if (response.status === 401 || response.status === 403) throw new AppContextDenied();
+    if (!response.ok) throw new Error();
+    let value = await appResponse(response, 4096, signal);
+    if (!alive() || !bounded(value)) throw new Error();
+    return value;
+  }
+  function install(value, candidate) {
+    binding = { ...value }, credential = candidate, clearTimeout(expiry), clearTimeout(renewalTimer);
+    let remaining = binding.expiresAt - Date.now();
+    expiry = setTimeout(invalidate, remaining), renewalTimer = setTimeout(() => {
+      renew();
+    }, remaining - Math.min(6e4, remaining / 5));
+  }
+  async function synchronize() {
+    if (!alive()) throw new Error();
+    if (credential && stored() !== credential) {
+      if (!binding) throw new Error();
+      if (observation) return observation;
+      observation = (async () => {
+        for (; alive(); ) {
+          let candidate = stored();
+          if (!candidate) throw new Error();
+          let value;
+          try {
+            value = await proof(candidate);
+          } catch {
+            if (stored() !== candidate) continue;
+            throw new Error();
+          }
+          if (stored() === candidate) {
+            install(value, candidate);
+            return;
+          }
+        }
+        throw new Error();
+      })();
+      try {
+        await observation;
+      } catch {
+        throw invalidate(), new Error("Local app context unavailable.");
+      } finally {
+        observation = void 0;
+      }
+    }
+  }
+  async function renew() {
+    if (!(renewal || !binding || !alive())) {
+      renewal = (async () => {
+        let deadline = binding.expiresAt, requestController = new AbortController(), abort = () => requestController.abort();
+        controller.signal.addEventListener("abort", abort, { once: !0 });
+        let timeout = setTimeout(abort, Math.min(2e4, deadline - Date.now())), previous = credential;
+        try {
+          if (await synchronize(), credential !== previous) return;
+          let url = `${origin}/_os/app/renew`, response;
+          try {
+            response = await fetch(url, {
+              method: "POST",
+              credentials: "omit",
+              redirect: "error",
+              cache: "no-store",
+              referrerPolicy: "no-referrer",
+              signal: requestController.signal,
+              headers: { authorization: `Bearer ${previous}` }
+            });
+          } catch {
+            throw new AppRenewalUnavailable();
+          }
+          if (response.redirected || response.url && response.url !== url) throw new Error();
+          let value = await appResponse(response, 4096, requestController.signal);
+          if (response.status === 503 && value && typeof value == "object" && !Array.isArray(value) && Object.keys(value).join(",") === "error" && "error" in value && value.error === "renewal_unavailable")
+            throw new AppRenewalUnavailable();
+          if (response.status === 403 && value && typeof value == "object" && !Array.isArray(value) && Object.keys(value).join(",") === "error" && "error" in value && value.error === "renewal_conflict") {
+            for (; alive() && stored() === previous && !requestController.signal.aborted; )
+              await new Promise((resolve2, reject) => {
+                let abortWait = () => {
+                  clearTimeout(timer), reject(new Error());
+                }, timer = setTimeout(() => {
+                  requestController.signal.removeEventListener("abort", abortWait), resolve2();
+                }, 100);
+                requestController.signal.addEventListener("abort", abortWait, { once: !0 });
+              });
+            if (requestController.signal.aborted) throw new Error();
+            await synchronize();
+            return;
+          }
+          if (!response.ok) throw new Error();
+          if (!alive() || Date.now() >= deadline || !value || typeof value != "object" || Array.isArray(value) || Object.keys(value).sort().join(",") !== "context,credential") throw new Error();
+          let result2 = value;
+          if (!bounded(result2.context) || typeof result2.credential != "string" || !/^[A-Za-z0-9_-]{43}$/.test(result2.credential) || result2.credential === previous) throw new Error();
+          if (stored() !== previous) {
+            await synchronize();
+            return;
+          }
+          globalThis.localStorage.setItem(sessionKey, result2.credential), install(result2.context, result2.credential);
+        } catch (error) {
+          try {
+            if (alive() && stored() && stored() !== previous) {
+              await synchronize();
+              return;
+            }
+          } catch {
+          }
+          try {
+            if (alive() && stored() && stored() !== previous) {
+              await synchronize();
+              return;
+            }
+          } catch {
+          }
+          (error instanceof AppRenewalUnavailable || error instanceof AppResponseReadError || requestController.signal.aborted) && current2() && Date.now() < deadline ? renewalTimer = setTimeout(() => {
+            renew();
+          }, Math.min(5e3, (deadline - Date.now()) / 5)) : invalidate();
+        } finally {
+          clearTimeout(timeout), controller.signal.removeEventListener("abort", abort);
+        }
+      })();
+      try {
+        await renewal;
+      } finally {
+        renewal = void 0;
+      }
+    }
+  }
+  let storageChanged = () => {
+    if (credential) {
+      if (!alive()) {
+        invalidate();
+        return;
+      }
+      synchronize().catch(invalidate);
+    }
   }, monitor = setInterval(() => {
-    credential && !current2() && invalidate();
-  }, 100), dispose = () => {
-    controller.abort(), clearTimeout(expiry), clearInterval(monitor);
+    storageChanged();
+  }, 100);
+  globalThis.addEventListener?.("storage", storageChanged);
+  let dispose = () => {
+    disposed = !0, cancel();
   };
   async function requestData(operation2, input) {
     try {
       if (operation2 !== "data/query" || !current2()) throw new Error();
-      let url = `${origin}/_os/app/data`, response = await fetch(url, {
+      let url = `${origin}/_os/app/data`, admitted = credential, response = await fetch(url, {
         method: "POST",
         credentials: "omit",
         redirect: "error",
@@ -1567,10 +1759,12 @@ function appContext(origin, active2) {
         headers: { "content-type": "application/json", authorization: `Bearer ${credential}` },
         body: JSON.stringify(input)
       });
+      for (await synchronize(); alive() && stored() !== credential; ) await synchronize();
       if (!current2() || response.redirected || response.url && response.url !== url) throw new Error();
       if (response.status === 401 || response.status === 403)
-        throw invalidate(), new DataOperationError("access_denied");
+        throw admitted === credential && invalidate(), new DataOperationError("access_denied");
       let result2 = await appResponse(response, Number.MAX_SAFE_INTEGER, controller.signal);
+      for (await synchronize(); alive() && stored() !== credential; ) await synchronize();
       if (!current2()) throw new Error();
       if (!response.ok) throw dataTransportError(response.status, result2);
       return result2;
@@ -1581,7 +1775,7 @@ function appContext(origin, active2) {
   async function requestRoutine(key, suffix, init2 = {}) {
     if (!current2())
       throw invalidate(), new Error("Local app context unavailable.");
-    let url = `${origin}/_os/app/routines/${encodeURIComponent(key)}/${suffix}`, response = await fetch(url, {
+    let url = `${origin}/_os/app/routines/${encodeURIComponent(key)}/${suffix}`, admitted = credential, response = await fetch(url, {
       ...init2,
       credentials: "omit",
       redirect: "error",
@@ -1590,45 +1784,69 @@ function appContext(origin, active2) {
       signal: controller.signal,
       headers: { ...init2.body === void 0 ? {} : { "content-type": "application/json" }, authorization: `Bearer ${credential}` }
     });
+    for (await synchronize(); alive() && stored() !== credential; ) await synchronize();
     if (!current2() || response.redirected || response.url && response.url !== url)
       throw invalidate(), new Error("Local app context unavailable.");
-    return (response.status === 401 || response.status === 403) && invalidate(), response;
+    return (response.status === 401 || response.status === 403) && admitted === credential && invalidate(), responseChecks.set(response, async (value) => {
+      for (await synchronize(); alive() && stored() !== credential; ) await synchronize();
+      admitted === credential && value && typeof value == "object" && "error" in value && value.error === "authority_unavailable" && invalidate();
+    }), response;
   }
-  return { resolve: async () => {
+  function context2() {
+    let issued = credential;
+    return {
+      kind: "local",
+      ...binding,
+      get expiresAt() {
+        return binding.expiresAt;
+      },
+      isCurrent: current2,
+      signal: controller.signal,
+      invalidate: () => {
+        issued === credential && invalidate();
+      },
+      requestRoutine,
+      requestData,
+      requestAvailability: (key) => requestRoutine(key, "availability", { method: "GET" })
+    };
+  }
+  let resolveOnce = async () => {
+    let attempted;
     try {
       if (denied || !active2() || globalThis.location.origin !== origin) throw new Error();
-      let stored = globalThis.localStorage.getItem(sessionKey);
-      if (!stored || !/^[A-Za-z0-9_-]{43}$/.test(stored) || credential && stored !== credential) throw new Error();
-      if (credential = stored, !current2()) throw new Error();
-      let response = await fetch(`${origin}/_os/app/context`, {
-        credentials: "omit",
-        redirect: "error",
-        referrerPolicy: "no-referrer",
-        headers: { authorization: `Bearer ${credential}` },
-        signal: controller.signal
-      });
-      if (!response.ok || response.redirected || response.url && response.url !== `${origin}/_os/app/context` || !response.headers.get("content-type")?.startsWith("application/json")) throw new Error();
-      let value = await appResponse(response, 4096, controller.signal);
-      if (!validBinding(value) || !current2() || value.expiresAt <= Date.now() || value.expiresAt > Date.now() + 6e5 || binding && (value.appId !== binding.appId || value.memberId !== binding.memberId || value.workspace !== binding.workspace || value.expiresAt > binding.expiresAt)) throw new Error();
-      return binding = { ...value }, clearTimeout(expiry), expiry = setTimeout(invalidate, binding.expiresAt - Date.now()), {
-        kind: "local",
-        ...binding,
-        isCurrent: current2,
-        signal: controller.signal,
-        invalidate,
-        requestRoutine,
-        requestData,
-        requestAvailability: (key) => requestRoutine(key, "availability", { method: "GET" })
-      };
-    } catch {
-      throw invalidate(), new Error("Local app context unavailable.");
+      credential && await synchronize();
+      let candidate = stored();
+      if (!candidate || !/^[A-Za-z0-9_-]{43}$/.test(candidate)) throw new Error();
+      if (credential = candidate, attempted = candidate, !current2()) throw new Error();
+      let value = await proof(candidate);
+      if (stored() !== candidate || credential !== candidate)
+        return binding || (binding = { ...value }), await synchronize(), context2();
+      if (!current2()) throw new Error();
+      if (binding && value.expiresAt > binding.expiresAt) throw new Error();
+      return (!binding || value.expiresAt !== binding.expiresAt) && install(value, candidate), context2();
+    } catch (error) {
+      try {
+        if (binding && current2() && attempted && attempted !== credential) return context2();
+        if (binding && alive() && stored() && stored() !== credential)
+          return await synchronize(), context2();
+      } catch {
+      }
+      throw error instanceof AppContextDenied && binding && alive() && renewal ? new Error("Local app context unavailable.") : (invalidate(), new Error("Local app context unavailable."));
     }
+  }, resolve = () => resolution2 || (resolution2 = resolveOnce().finally(() => {
+    resolution2 = void 0;
+  }), resolution2);
+  return { resolve, start: () => {
+    startup = setTimeout(() => {
+      alive() && !resolution2 && !binding && resolve().catch(() => {
+      });
+    }, 0);
   }, invalidate, dispose };
 }
 function validBinding(value) {
-  if (!value || typeof value != "object" || Array.isArray(value) || Object.keys(value).sort().join(",") !== "appId,expiresAt,memberId,workspace") return !1;
+  if (!value || typeof value != "object" || Array.isArray(value) || Object.keys(value).sort().join(",") !== "appId,expiresAt,memberId,sessionId,workspace") return !1;
   let binding = value;
-  return typeof binding.appId == "string" && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(binding.appId) && typeof binding.workspace == "string" && /^[a-z0-9][a-z0-9-]{0,62}$/.test(binding.workspace) && typeof binding.memberId == "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(binding.memberId) && typeof binding.expiresAt == "number" && Number.isFinite(binding.expiresAt);
+  return typeof binding.appId == "string" && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(binding.appId) && typeof binding.workspace == "string" && /^[a-z0-9][a-z0-9-]{0,62}$/.test(binding.workspace) && typeof binding.memberId == "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(binding.memberId) && typeof binding.sessionId == "string" && /^[A-Za-z0-9_-]{43}$/.test(binding.sessionId) && typeof binding.expiresAt == "number" && Number.isFinite(binding.expiresAt);
 }
 
 var installedDispose;
@@ -1664,7 +1882,7 @@ function init({ auth }) {
   }), dispose = () => {
     active2 && (active2 = !1, local?.dispose(), revision++, subscription.unsubscribe(), uninstall(), installedDispose === dispose && (installedDispose = void 0));
   };
-  installedDispose = dispose;
+  installedDispose = dispose, local?.start();
 }
 var os = { init };