@relyio/sdk 0.17.0 → 0.19.0

package/dist/{chunk-6E22GYPB.cjs → chunk-P23G5NXD.cjs}

@@ -1,30 +1,31 @@
 'use strict';
 
-var chunkLSRPMNPT_cjs = require('./chunk-LSRPMNPT.cjs');
-var chunk6PTRZP5U_cjs = require('./chunk-6PTRZP5U.cjs');
-var chunkTZL374LS_cjs = require('./chunk-TZL374LS.cjs');
-var chunkMWMSFIWN_cjs = require('./chunk-MWMSFIWN.cjs');
+var chunkM7MWNV3Q_cjs = require('./chunk-M7MWNV3Q.cjs');
+var chunkZO6QDYJG_cjs = require('./chunk-ZO6QDYJG.cjs');
+var chunk7I3SC7SV_cjs = require('./chunk-7I3SC7SV.cjs');
+var chunkNN45CSPZ_cjs = require('./chunk-NN45CSPZ.cjs');
+var chunkL6DXCKVQ_cjs = require('./chunk-L6DXCKVQ.cjs');
 
 /* RelyIO SDK - Built with ❤️ by the RelyIO Team */
 
 // src/config/key-kind.ts
 var PUBLISHABLE_KEY_PREFIX = "rly_pub_";
-var isPublishableKey = /* @__PURE__ */ chunkMWMSFIWN_cjs.__name((apiKey) => apiKey?.startsWith(PUBLISHABLE_KEY_PREFIX) === true, "isPublishableKey");
+var isPublishableKey = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name((apiKey) => apiKey?.startsWith(PUBLISHABLE_KEY_PREFIX) === true, "isPublishableKey");
 var PREVIEW_KEY_PREFIX = "rly_prev_";
-var isPreviewKey = /* @__PURE__ */ chunkMWMSFIWN_cjs.__name((apiKey) => apiKey?.startsWith(PREVIEW_KEY_PREFIX) === true, "isPreviewKey");
+var isPreviewKey = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name((apiKey) => apiKey?.startsWith(PREVIEW_KEY_PREFIX) === true, "isPreviewKey");
 
 // src/errors/sdk-error.ts
 var _SDKError = class _SDKError extends Error {
   constructor(message, statusCode, cause, context) {
     super(message);
     /** HTTP status code if applicable */
-    chunkMWMSFIWN_cjs.__publicField(this, "statusCode");
+    chunkL6DXCKVQ_cjs.__publicField(this, "statusCode");
     /** Original error that caused this error */
-    chunkMWMSFIWN_cjs.__publicField(this, "cause");
+    chunkL6DXCKVQ_cjs.__publicField(this, "cause");
     /** Additional context about the error */
-    chunkMWMSFIWN_cjs.__publicField(this, "context");
+    chunkL6DXCKVQ_cjs.__publicField(this, "context");
     /** Timestamp when the error occurred */
-    chunkMWMSFIWN_cjs.__publicField(this, "timestamp");
+    chunkL6DXCKVQ_cjs.__publicField(this, "timestamp");
     this.name = this.constructor.name;
     this.statusCode = statusCode;
     this.cause = cause;
@@ -90,15 +91,15 @@ var _SDKError = class _SDKError extends Error {
     });
   }
 };
-chunkMWMSFIWN_cjs.__name(_SDKError, "SDKError");
+chunkL6DXCKVQ_cjs.__name(_SDKError, "SDKError");
 var SDKError = _SDKError;
 
 // src/errors/content-errors.ts
 var _ResourceNotFoundError = class _ResourceNotFoundError extends SDKError {
   constructor(message = "Resource not found", statusCode = 404, cause, context) {
     super(message, statusCode, cause, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "RESOURCE_NOT_FOUND");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "RESOURCE_NOT_FOUND");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
   }
   getUserMessage() {
     const resourceType = this.context?.resourceType;
@@ -109,90 +110,154 @@ var _ResourceNotFoundError = class _ResourceNotFoundError extends SDKError {
     return "The requested resource was not found.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_ResourceNotFoundError, "ResourceNotFoundError");
+chunkL6DXCKVQ_cjs.__name(_ResourceNotFoundError, "ResourceNotFoundError");
 var ResourceNotFoundError = _ResourceNotFoundError;
 var _ResourceConflictError = class _ResourceConflictError extends SDKError {
   constructor(message = "Resource conflict", statusCode = 409, cause, context) {
     super(message, statusCode, cause, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "RESOURCE_CONFLICT");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "RESOURCE_CONFLICT");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
   }
   getUserMessage() {
     return "The resource could not be created or updated due to a conflict.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_ResourceConflictError, "ResourceConflictError");
+chunkL6DXCKVQ_cjs.__name(_ResourceConflictError, "ResourceConflictError");
 var ResourceConflictError = _ResourceConflictError;
 var _ResourceExpiredError = class _ResourceExpiredError extends SDKError {
   constructor(message = "Resource has expired", statusCode = 410, cause, context) {
     super(message, statusCode, cause, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "RESOURCE_EXPIRED");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "RESOURCE_EXPIRED");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
   }
   getUserMessage() {
     return "The resource is no longer available.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_ResourceExpiredError, "ResourceExpiredError");
+chunkL6DXCKVQ_cjs.__name(_ResourceExpiredError, "ResourceExpiredError");
 var ResourceExpiredError = _ResourceExpiredError;
 function isResourceNotFound(error) {
   return error instanceof ResourceNotFoundError;
 }
-chunkMWMSFIWN_cjs.__name(isResourceNotFound, "isResourceNotFound");
+chunkL6DXCKVQ_cjs.__name(isResourceNotFound, "isResourceNotFound");
 function isMissingEntry(error) {
   return error instanceof ResourceNotFoundError && error.context?.resourceType === "entry";
 }
-chunkMWMSFIWN_cjs.__name(isMissingEntry, "isMissingEntry");
+chunkL6DXCKVQ_cjs.__name(isMissingEntry, "isMissingEntry");
 
 // src/errors/contract-errors.ts
 var _MissingApiKeyError = class _MissingApiKeyError extends SDKError {
   constructor(message = "No API key was sent", context) {
     super(message, 401, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "MISSING_API_KEY");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "MISSING_API_KEY");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
   }
   getUserMessage() {
     return "No API key was sent. Set `apiKey` when creating the client.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_MissingApiKeyError, "MissingApiKeyError");
+chunkL6DXCKVQ_cjs.__name(_MissingApiKeyError, "MissingApiKeyError");
 var MissingApiKeyError = _MissingApiKeyError;
 var _ReadOnlyKeyError = class _ReadOnlyKeyError extends SDKError {
   constructor(message = "This API key is read-only", context) {
     super(message, 403, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "READ_ONLY_KEY");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "READ_ONLY_KEY");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
   }
   getUserMessage() {
     return "This API key is read-only. Use a key with write access for this operation.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_ReadOnlyKeyError, "ReadOnlyKeyError");
+chunkL6DXCKVQ_cjs.__name(_ReadOnlyKeyError, "ReadOnlyKeyError");
 var ReadOnlyKeyError = _ReadOnlyKeyError;
+var _PublishableKeyRefusedError = class _PublishableKeyRefusedError extends SDKError {
+  constructor(message = "A publishable key writes a Record only for a signed-in End user", context) {
+    super(message, 403, void 0, context);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "PUBLISHABLE_KEY_REFUSED");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
+  }
+  getUserMessage() {
+    return "A publishable key writes a Record only with a signed-in End user's token, and runs only a Function declaring endUsers. Send the End user's token, declare endUsers on the Function, or call it from your server with a secret key.";
+  }
+};
+chunkL6DXCKVQ_cjs.__name(_PublishableKeyRefusedError, "PublishableKeyRefusedError");
+var PublishableKeyRefusedError = _PublishableKeyRefusedError;
+var _FunctionRunFailedError = class _FunctionRunFailedError extends SDKError {
+  constructor(message = "The Function ended without an answer", run = {}, context) {
+    super(message, 500, void 0, context);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "FUNCTION_RUN_FAILED");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "runId");
+    chunkL6DXCKVQ_cjs.__publicField(this, "failure");
+    chunkL6DXCKVQ_cjs.__publicField(this, "runError");
+    this.runId = run.runId;
+    this.failure = run.failure;
+    this.runError = run.runError;
+  }
+  getUserMessage() {
+    return this.runId === void 0 ? "The Function ended without an answer." : `The Function ended without an answer; its run is ${this.runId}.`;
+  }
+};
+chunkL6DXCKVQ_cjs.__name(_FunctionRunFailedError, "FunctionRunFailedError");
+var FunctionRunFailedError = _FunctionRunFailedError;
+var _FunctionContainersBusyError = class _FunctionContainersBusyError extends SDKError {
+  constructor(message = "The project is running as many Containers as its plan includes", name, context, retryAfterMs) {
+    super(message, 429, void 0, context);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "FUNCTION_CONTAINERS_BUSY");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
+    /** The Function that was not started. */
+    chunkL6DXCKVQ_cjs.__publicField(this, "function");
+    /** `Retry-After`, in milliseconds, where the response carried a readable one. */
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryAfterMs");
+    this.function = name;
+    this.retryAfterMs = retryAfterMs;
+  }
+  getUserMessage() {
+    return "Every Container this project may run at once is busy. Call again shortly.";
+  }
+};
+chunkL6DXCKVQ_cjs.__name(_FunctionContainersBusyError, "FunctionContainersBusyError");
+var FunctionContainersBusyError = _FunctionContainersBusyError;
+var _FunctionRunTimedOutError = class _FunctionRunTimedOutError extends SDKError {
+  constructor(message = "The Function had not answered within the wait", run = {}, context) {
+    super(message, 504, void 0, context);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "FUNCTION_RUN_TIMED_OUT");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "runId");
+    chunkL6DXCKVQ_cjs.__publicField(this, "waitedMs");
+    this.runId = run.runId;
+    this.waitedMs = run.waitedMs;
+  }
+  getUserMessage() {
+    return this.runId === void 0 ? "The Function had not answered within the wait; it runs on." : `The Function had not answered within the wait; run ${this.runId} runs on.`;
+  }
+};
+chunkL6DXCKVQ_cjs.__name(_FunctionRunTimedOutError, "FunctionRunTimedOutError");
+var FunctionRunTimedOutError = _FunctionRunTimedOutError;
 var _PlanFeatureUnavailableError = class _PlanFeatureUnavailableError extends SDKError {
   constructor(message = "This feature is not available on the current plan", feature, context) {
     super(message, 403, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "PLAN_FEATURE_UNAVAILABLE");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "PLAN_FEATURE_UNAVAILABLE");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
     /** The entitlement key the service named, when it named one. */
-    chunkMWMSFIWN_cjs.__publicField(this, "feature");
+    chunkL6DXCKVQ_cjs.__publicField(this, "feature");
     this.feature = feature;
   }
   getUserMessage() {
     return this.feature === void 0 ? "This feature is not available on the current plan." : `The current plan does not include "${this.feature}".`;
   }
 };
-chunkMWMSFIWN_cjs.__name(_PlanFeatureUnavailableError, "PlanFeatureUnavailableError");
+chunkL6DXCKVQ_cjs.__name(_PlanFeatureUnavailableError, "PlanFeatureUnavailableError");
 var PlanFeatureUnavailableError = _PlanFeatureUnavailableError;
 var _UsageQuotaExceededError = class _UsageQuotaExceededError extends SDKError {
   constructor(message = "Usage quota exceeded", meter, limit, context) {
     super(message, 403, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "USAGE_QUOTA_EXCEEDED");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "USAGE_QUOTA_EXCEEDED");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
     /** The meter the service named. Always present on a refusal from the contract. */
-    chunkMWMSFIWN_cjs.__publicField(this, "meter");
+    chunkL6DXCKVQ_cjs.__publicField(this, "meter");
     /** The threshold, where the deciding seam carried one — often it does not. */
-    chunkMWMSFIWN_cjs.__publicField(this, "limit");
+    chunkL6DXCKVQ_cjs.__publicField(this, "limit");
     this.meter = meter;
     this.limit = limit;
   }
@@ -200,17 +265,17 @@ var _UsageQuotaExceededError = class _UsageQuotaExceededError extends SDKError {
     return this.meter === void 0 ? "A usage quota for this account has been exceeded." : `The "${this.meter}" quota for this account has been exceeded.`;
   }
 };
-chunkMWMSFIWN_cjs.__name(_UsageQuotaExceededError, "UsageQuotaExceededError");
+chunkL6DXCKVQ_cjs.__name(_UsageQuotaExceededError, "UsageQuotaExceededError");
 var UsageQuotaExceededError = _UsageQuotaExceededError;
 var _RateLimitError = class _RateLimitError extends SDKError {
   constructor(message = "Rate limit exceeded", limit, resetAt, context, retryAfterMs) {
     super(message, 429, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "RATE_LIMIT_EXCEEDED");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", true);
-    chunkMWMSFIWN_cjs.__publicField(this, "limit");
-    chunkMWMSFIWN_cjs.__publicField(this, "resetAt");
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "RATE_LIMIT_EXCEEDED");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", true);
+    chunkL6DXCKVQ_cjs.__publicField(this, "limit");
+    chunkL6DXCKVQ_cjs.__publicField(this, "resetAt");
     /** `Retry-After`, in milliseconds, where the response carried a readable one. */
-    chunkMWMSFIWN_cjs.__publicField(this, "retryAfterMs");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryAfterMs");
     this.limit = limit;
     this.resetAt = resetAt;
     this.retryAfterMs = retryAfterMs;
@@ -219,56 +284,56 @@ var _RateLimitError = class _RateLimitError extends SDKError {
     return this.resetAt === void 0 ? "Too many requests. Please retry shortly." : `Too many requests. The window resets at ${this.resetAt}.`;
   }
 };
-chunkMWMSFIWN_cjs.__name(_RateLimitError, "RateLimitError");
+chunkL6DXCKVQ_cjs.__name(_RateLimitError, "RateLimitError");
 var RateLimitError = _RateLimitError;
 var _MethodNotAllowedError = class _MethodNotAllowedError extends SDKError {
   constructor(message = "Method not allowed", context) {
     super(message, 405, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "METHOD_NOT_ALLOWED");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "METHOD_NOT_ALLOWED");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
   }
   getUserMessage() {
     return "That operation is not available on this resource.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_MethodNotAllowedError, "MethodNotAllowedError");
+chunkL6DXCKVQ_cjs.__name(_MethodNotAllowedError, "MethodNotAllowedError");
 var MethodNotAllowedError = _MethodNotAllowedError;
 var _PayloadTooLargeError = class _PayloadTooLargeError extends SDKError {
   constructor(message = "Payload too large", limitBytes, context) {
     super(message, 413, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "PAYLOAD_TOO_LARGE");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
-    chunkMWMSFIWN_cjs.__publicField(this, "limitBytes");
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "PAYLOAD_TOO_LARGE");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "limitBytes");
     this.limitBytes = limitBytes;
   }
   getUserMessage() {
     return this.limitBytes === void 0 ? "The request body is larger than this endpoint accepts." : `The request body is larger than the ${this.limitBytes}-byte limit.`;
   }
 };
-chunkMWMSFIWN_cjs.__name(_PayloadTooLargeError, "PayloadTooLargeError");
+chunkL6DXCKVQ_cjs.__name(_PayloadTooLargeError, "PayloadTooLargeError");
 var PayloadTooLargeError = _PayloadTooLargeError;
 var _TransactionRolledBackError = class _TransactionRolledBackError extends SDKError {
   constructor(message = "Transaction rolled back", failedIndex, context) {
     super(message, 409, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "TRANSACTION_ROLLED_BACK");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
-    chunkMWMSFIWN_cjs.__publicField(this, "failedIndex");
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "TRANSACTION_ROLLED_BACK");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "failedIndex");
     this.failedIndex = failedIndex;
   }
   getUserMessage() {
     return this.failedIndex === void 0 ? "The batch was rolled back; nothing was written." : `The batch was rolled back; nothing was written. This refusal is for operation ${this.failedIndex} of the batch, which is not necessarily the one that failed.`;
   }
 };
-chunkMWMSFIWN_cjs.__name(_TransactionRolledBackError, "TransactionRolledBackError");
+chunkL6DXCKVQ_cjs.__name(_TransactionRolledBackError, "TransactionRolledBackError");
 var TransactionRolledBackError = _TransactionRolledBackError;
 var _ServiceIndeterminateError = class _ServiceIndeterminateError extends SDKError {
   constructor(message = "The service could not decide this request", missing, context, retryAfterMs) {
     super(message, 503, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "SERVICE_INDETERMINATE");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", true);
-    chunkMWMSFIWN_cjs.__publicField(this, "missing");
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "SERVICE_INDETERMINATE");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", true);
+    chunkL6DXCKVQ_cjs.__publicField(this, "missing");
     /** `Retry-After`, in milliseconds. The contract requires the header on this code. */
-    chunkMWMSFIWN_cjs.__publicField(this, "retryAfterMs");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryAfterMs");
     this.missing = missing;
     this.retryAfterMs = retryAfterMs;
   }
@@ -276,72 +341,85 @@ var _ServiceIndeterminateError = class _ServiceIndeterminateError extends SDKErr
     return "The service is temporarily unable to answer. Please retry.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_ServiceIndeterminateError, "ServiceIndeterminateError");
+chunkL6DXCKVQ_cjs.__name(_ServiceIndeterminateError, "ServiceIndeterminateError");
 var ServiceIndeterminateError = _ServiceIndeterminateError;
 var _ServerError = class _ServerError extends SDKError {
   constructor(message = "The service failed to handle the request", statusCode = 500, context) {
     super(message, statusCode, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "INTERNAL_ERROR");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", true);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "INTERNAL_ERROR");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", true);
   }
   getUserMessage() {
     return "Something went wrong on the RelyIO side. Please retry.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_ServerError, "ServerError");
+chunkL6DXCKVQ_cjs.__name(_ServerError, "ServerError");
 var ServerError = _ServerError;
 var _UnknownContractError = class _UnknownContractError extends SDKError {
   constructor(code, message, statusCode, context) {
     super(message, statusCode, void 0, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
     this.code = code;
   }
   getUserMessage() {
     return `The service refused this request with "${this.code}".`;
   }
 };
-chunkMWMSFIWN_cjs.__name(_UnknownContractError, "UnknownContractError");
+chunkL6DXCKVQ_cjs.__name(_UnknownContractError, "UnknownContractError");
 var UnknownContractError = _UnknownContractError;
 
 // src/errors/auth-errors.ts
 var _AuthorizationError = class _AuthorizationError extends SDKError {
   constructor(message = "Authorization failed", statusCode = 403, cause, context) {
     super(message, statusCode, cause, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "AUTHORIZATION_ERROR");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "AUTHORIZATION_ERROR");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
   }
   getUserMessage() {
     return "You do not have permission to access this resource.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_AuthorizationError, "AuthorizationError");
+chunkL6DXCKVQ_cjs.__name(_AuthorizationError, "AuthorizationError");
 var AuthorizationError = _AuthorizationError;
 var _InvalidApiKeyError = class _InvalidApiKeyError extends SDKError {
   constructor(message = "Invalid API key", cause, context) {
     super(message, 401, cause, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "INVALID_API_KEY");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "INVALID_API_KEY");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
   }
   getUserMessage() {
     return "Invalid API key. Please check your API key and try again.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_InvalidApiKeyError, "InvalidApiKeyError");
+chunkL6DXCKVQ_cjs.__name(_InvalidApiKeyError, "InvalidApiKeyError");
 var InvalidApiKeyError = _InvalidApiKeyError;
+var _EndUserTokenInvalidError = class _EndUserTokenInvalidError extends SDKError {
+  constructor(message, reason, context) {
+    super(message, 401, void 0, context);
+    this.reason = reason;
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "END_USER_TOKEN_INVALID");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
+  }
+  getUserMessage() {
+    return "Your session is not valid. Please sign in again.";
+  }
+};
+chunkL6DXCKVQ_cjs.__name(_EndUserTokenInvalidError, "EndUserTokenInvalidError");
+var EndUserTokenInvalidError = _EndUserTokenInvalidError;
 
 // src/errors/network-errors.ts
 var _NetworkError = class _NetworkError extends SDKError {
   constructor(message = "Network request failed", statusCode, cause, context) {
     super(message, statusCode, cause, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "NETWORK_ERROR");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", true);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "NETWORK_ERROR");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", true);
   }
   getUserMessage() {
     return "Network connection failed. Please check your internet connection and try again.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_NetworkError, "NetworkError");
+chunkL6DXCKVQ_cjs.__name(_NetworkError, "NetworkError");
 var NetworkError = _NetworkError;
 var _TimeoutError = class _TimeoutError extends SDKError {
   /**
@@ -350,27 +428,27 @@ var _TimeoutError = class _TimeoutError extends SDKError {
    */
   constructor(message = "Request timed out", timeout, statusCode, cause, context) {
     super(message, statusCode, cause, { ...context, timeout });
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "TIMEOUT_ERROR");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", true);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "TIMEOUT_ERROR");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", true);
   }
   getUserMessage() {
     const timeout = this.context?.timeout;
     return `Request timed out${timeout != null ? ` after ${timeout}ms` : ""}. Please try again.`;
   }
 };
-chunkMWMSFIWN_cjs.__name(_TimeoutError, "TimeoutError");
+chunkL6DXCKVQ_cjs.__name(_TimeoutError, "TimeoutError");
 var TimeoutError = _TimeoutError;
 var _ConnectionError = class _ConnectionError extends SDKError {
   constructor(message = "Connection failed", statusCode, cause, context) {
     super(message, statusCode, cause, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "CONNECTION_ERROR");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", true);
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "CONNECTION_ERROR");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", true);
   }
   getUserMessage() {
     return "Failed to connect to RelyIO servers. Please check your connection and try again.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_ConnectionError, "ConnectionError");
+chunkL6DXCKVQ_cjs.__name(_ConnectionError, "ConnectionError");
 var ConnectionError = _ConnectionError;
 
 // src/errors/validation-errors.ts
@@ -382,8 +460,8 @@ var _BaseValidationError = class _BaseValidationError extends SDKError {
    */
   constructor(message = "Validation failed", violations = [], statusCode = 400, cause, context) {
     super(message, statusCode, cause, { ...context, violations });
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable", false);
-    chunkMWMSFIWN_cjs.__publicField(this, "violations");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "violations");
     this.violations = violations;
   }
   getUserMessage() {
@@ -415,26 +493,26 @@ var _BaseValidationError = class _BaseValidationError extends SDKError {
     return this.violations.map((v) => `${v.field}: ${v.message}`).join("\n");
   }
 };
-chunkMWMSFIWN_cjs.__name(_BaseValidationError, "BaseValidationError");
+chunkL6DXCKVQ_cjs.__name(_BaseValidationError, "BaseValidationError");
 var BaseValidationError = _BaseValidationError;
 var _ValidationError = class _ValidationError extends BaseValidationError {
   constructor() {
     super(...arguments);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "VALIDATION_ERROR");
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "VALIDATION_ERROR");
   }
 };
-chunkMWMSFIWN_cjs.__name(_ValidationError, "ValidationError");
+chunkL6DXCKVQ_cjs.__name(_ValidationError, "ValidationError");
 var ValidationError = _ValidationError;
 var _InvalidPayloadError = class _InvalidPayloadError extends BaseValidationError {
   constructor(message = "Invalid payload", violations = [], cause, context) {
     super(message, violations, 400, cause, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "INVALID_PAYLOAD");
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "INVALID_PAYLOAD");
   }
   getUserMessage() {
     return "The request payload is invalid. Please check your data and try again.";
   }
 };
-chunkMWMSFIWN_cjs.__name(_InvalidPayloadError, "InvalidPayloadError");
+chunkL6DXCKVQ_cjs.__name(_InvalidPayloadError, "InvalidPayloadError");
 var InvalidPayloadError = _InvalidPayloadError;
 
 // ../../platform/api-contract/dist/client/index.js
@@ -442,11 +520,11 @@ var _a;
 var ContractBodyError = (_a = class extends Error {
   constructor(message, body) {
     super(message);
-    chunkMWMSFIWN_cjs.__publicField(this, "body");
+    chunkL6DXCKVQ_cjs.__publicField(this, "body");
     this.name = "ContractBodyError";
     this.body = body;
   }
-}, chunkMWMSFIWN_cjs.__name(_a, "ContractBodyError"), _a);
+}, chunkL6DXCKVQ_cjs.__name(_a, "ContractBodyError"), _a);
 function describe(body) {
   try {
     return JSON.stringify(body)?.slice(0, 200) ?? String(body);
@@ -454,7 +532,7 @@ function describe(body) {
     return String(body);
   }
 }
-chunkMWMSFIWN_cjs.__name(describe, "describe");
+chunkL6DXCKVQ_cjs.__name(describe, "describe");
 function readPayload(body) {
   if (typeof body !== "object" || body === null || !("data" in body)) {
     throw new ContractBodyError(
@@ -464,7 +542,7 @@ function readPayload(body) {
   }
   return body.data;
 }
-chunkMWMSFIWN_cjs.__name(readPayload, "readPayload");
+chunkL6DXCKVQ_cjs.__name(readPayload, "readPayload");
 function readError(body) {
   if (typeof body !== "object" || body === null || !("error" in body)) return void 0;
   const error = body.error;
@@ -478,7 +556,7 @@ function readError(body) {
     ..."details" in error ? { details: error.details } : {}
   };
 }
-chunkMWMSFIWN_cjs.__name(readError, "readError");
+chunkL6DXCKVQ_cjs.__name(readError, "readError");
 
 // src/http/retry-after.ts
 function headerValue(headers, name) {
@@ -489,7 +567,7 @@ function headerValue(headers, name) {
   }
   return void 0;
 }
-chunkMWMSFIWN_cjs.__name(headerValue, "headerValue");
+chunkL6DXCKVQ_cjs.__name(headerValue, "headerValue");
 function parseRetryAfterMs(value, nowMs) {
   if (value === void 0) return void 0;
   const trimmed = value.trim();
@@ -502,7 +580,7 @@ function parseRetryAfterMs(value, nowMs) {
   if (Number.isNaN(at)) return void 0;
   return Math.max(0, at - nowMs);
 }
-chunkMWMSFIWN_cjs.__name(parseRetryAfterMs, "parseRetryAfterMs");
+chunkL6DXCKVQ_cjs.__name(parseRetryAfterMs, "parseRetryAfterMs");
 
 // src/errors/error-mapper.ts
 var STALE_VERSION_GUIDANCE = "The entry changed since it was read: re-read it with `fresh: true` and retry the write with what that read returns.";
@@ -516,7 +594,7 @@ var _ErrorMapper = class _ErrorMapper {
       return new NetworkError(`HTTP ${status}: ${statusText}`.trim(), status, void 0, context);
     }
     const retryAfterMs = parseRetryAfterMs(
-      headerValue(headers, chunk6PTRZP5U_cjs.HEADER_RETRY_AFTER.name),
+      headerValue(headers, chunkNN45CSPZ_cjs.HEADER_RETRY_AFTER.name),
       Date.now()
     );
     return this.fromContractCode(refusal, status, context, retryAfterMs);
@@ -530,12 +608,18 @@ var _ErrorMapper = class _ErrorMapper {
       case "INVALID_API_KEY": {
         return new InvalidApiKeyError(message, void 0, context);
       }
+      case "END_USER_TOKEN_INVALID": {
+        return new EndUserTokenInvalidError(message, endUserTokenReasonOf(refusal), context);
+      }
       case "ACCESS_DENIED": {
         return new AuthorizationError(message, 403, void 0, context);
       }
       case "READ_ONLY_KEY": {
         return new ReadOnlyKeyError(message, context);
       }
+      case "PUBLISHABLE_KEY_REFUSED": {
+        return new PublishableKeyRefusedError(message, context);
+      }
       case "PLAN_FEATURE_UNAVAILABLE": {
         return new PlanFeatureUnavailableError(message, detailString(refusal, "feature"), context);
       }
@@ -579,7 +663,8 @@ var _ErrorMapper = class _ErrorMapper {
         return new ResourceConflictError(guidance, 409, void 0, {
           ...context,
           // What stands in the way, as a declared kind a program switches on: `draft-exists`,
-          // `release-locked` or `slug-taken` from the Content API (REL-2446).
+          // `release-locked`, `slug-taken` or `value-taken` from the Content API (REL-2446,
+          // REL-3767).
           blockage,
           expectedVersion,
           actualVersion: detailNumber(refusal, "actualVersion"),
@@ -616,6 +701,32 @@ var _ErrorMapper = class _ErrorMapper {
           retryAfterMs
         );
       }
+      case "FUNCTION_RUN_FAILED": {
+        return new FunctionRunFailedError(
+          message,
+          {
+            runId: detailString(refusal, "runId"),
+            failure: detailString(refusal, "failure"),
+            runError: runErrorOf(refusal)
+          },
+          context
+        );
+      }
+      case "FUNCTION_RUN_TIMED_OUT": {
+        return new FunctionRunTimedOutError(
+          message,
+          { runId: detailString(refusal, "runId"), waitedMs: detailNumber(refusal, "waitedMs") },
+          context
+        );
+      }
+      case "FUNCTION_CONTAINERS_BUSY": {
+        return new FunctionContainersBusyError(
+          message,
+          detailString(refusal, "function"),
+          context,
+          retryAfterMs
+        );
+      }
       case "INTERNAL_ERROR": {
         return new ServerError(message, status, context);
       }
@@ -657,29 +768,36 @@ var _ErrorMapper = class _ErrorMapper {
     return error.name === "TypeError" && error.message.includes("fetch") || error.message.includes("timeout") || error.message.includes("Network Error") || error.message.includes("ECONNREFUSED");
   }
 };
-chunkMWMSFIWN_cjs.__name(_ErrorMapper, "ErrorMapper");
+chunkL6DXCKVQ_cjs.__name(_ErrorMapper, "ErrorMapper");
 var ErrorMapper = _ErrorMapper;
 function knownCode(refusal) {
   return typeof refusal.code === "string" ? refusal.code : void 0;
 }
-chunkMWMSFIWN_cjs.__name(knownCode, "knownCode");
+chunkL6DXCKVQ_cjs.__name(knownCode, "knownCode");
 function detailBag(refusal) {
   if (knownCode(refusal) === void 0) return void 0;
   const details = refusal.details;
   if (typeof details !== "object" || details === null) return void 0;
   return details;
 }
-chunkMWMSFIWN_cjs.__name(detailBag, "detailBag");
+chunkL6DXCKVQ_cjs.__name(detailBag, "detailBag");
 function detailString(refusal, key) {
   const value = detailBag(refusal)?.[key];
   return typeof value === "string" ? value : void 0;
 }
-chunkMWMSFIWN_cjs.__name(detailString, "detailString");
+chunkL6DXCKVQ_cjs.__name(detailString, "detailString");
 function detailNumber(refusal, key) {
   const value = detailBag(refusal)?.[key];
   return typeof value === "number" ? value : void 0;
 }
-chunkMWMSFIWN_cjs.__name(detailNumber, "detailNumber");
+chunkL6DXCKVQ_cjs.__name(detailNumber, "detailNumber");
+function runErrorOf(refusal) {
+  const error = detailBag(refusal)?.error;
+  if (typeof error !== "object" || error === null) return void 0;
+  const { name, message } = error;
+  return typeof name === "string" && typeof message === "string" ? { name, message } : void 0;
+}
+chunkL6DXCKVQ_cjs.__name(runErrorOf, "runErrorOf");
 function blockageOf(refusal) {
   const blockage = detailBag(refusal)?.blockage;
   if (typeof blockage !== "object" || blockage === null) return void 0;
@@ -688,7 +806,7 @@ function blockageOf(refusal) {
   const named = typeof facts === "object" && facts !== null && !Array.isArray(facts) ? facts : {};
   return { kind, facts: named };
 }
-chunkMWMSFIWN_cjs.__name(blockageOf, "blockageOf");
+chunkL6DXCKVQ_cjs.__name(blockageOf, "blockageOf");
 function violationsOf(refusal) {
   const issues = detailBag(refusal)?.issues;
   if (!Array.isArray(issues)) return [];
@@ -699,7 +817,16 @@ function violationsOf(refusal) {
     path: issue.path === "" ? void 0 : issue.path.split(".")
   }));
 }
-chunkMWMSFIWN_cjs.__name(violationsOf, "violationsOf");
+chunkL6DXCKVQ_cjs.__name(violationsOf, "violationsOf");
+function endUserTokenReasonOf(refusal) {
+  const reason = detailString(refusal, "reason");
+  return isEndUserTokenReason(reason) ? reason : void 0;
+}
+chunkL6DXCKVQ_cjs.__name(endUserTokenReasonOf, "endUserTokenReasonOf");
+function isEndUserTokenReason(value) {
+  return value !== void 0 && chunkNN45CSPZ_cjs.END_USER_TOKEN_REFUSAL_REASONS.includes(value);
+}
+chunkL6DXCKVQ_cjs.__name(isEndUserTokenReason, "isEndUserTokenReason");
 
 // src/http/api-routes.ts
 function fillPath(template, params) {
@@ -721,12 +848,23 @@ function fillPath(template, params) {
   }
   return filled;
 }
-chunkMWMSFIWN_cjs.__name(fillPath, "fillPath");
+chunkL6DXCKVQ_cjs.__name(fillPath, "fillPath");
 var DECLARED_PATHS = {
   "/health": true,
   "/health/cache": true,
   "/health/live": true,
   "/health/ready": true,
+  "/internal/functions/runs/{runId}/actions": true,
+  "/internal/functions/runs/{runId}/bundle": true,
+  "/internal/functions/runs/{runId}/content": true,
+  "/internal/functions/runs/{runId}/outcome": true,
+  "/internal/functions/runs/{runId}/recorded": true,
+  "/internal/functions/runs/{runId}/records/batch": true,
+  "/internal/functions/runs/{runId}/records/file": true,
+  "/internal/functions/runs/{runId}/records/read": true,
+  "/internal/functions/tasks/{taskId}/run": true,
+  "/internal/functions/test-runs/{projectId}/{name}": true,
+  "/internal/functions/tool-calls/{projectId}/{name}": true,
   "/internal/live/visitor-feed/{projectId}/{datasetId}/changes": true,
   "/internal/live/visitor-key": true,
   "/internal/media/claim": true,
@@ -763,6 +901,11 @@ var DECLARED_PATHS = {
   "/v1/project": true,
   "/v1/queries/{name}": true,
   "/v1/query": true,
+  "/v1/functions/{name}": true,
+  "/v1/records/batch": true,
+  "/v1/records/{recordType}": true,
+  "/v1/records/{recordType}/files": true,
+  "/v1/records/{recordType}/{uid}": true,
   "/v1/search": true,
   "/v1/search/autocomplete": true,
   "/v1/search/similar": true,
@@ -784,7 +927,7 @@ function compile(path) {
   });
   return { path, segments };
 }
-chunkMWMSFIWN_cjs.__name(compile, "compile");
+chunkL6DXCKVQ_cjs.__name(compile, "compile");
 function byRouterPrecedence(a, b) {
   const shared = Math.min(a.segments.length, b.segments.length);
   for (let index = 0; index < shared; index += 1) {
@@ -794,7 +937,7 @@ function byRouterPrecedence(a, b) {
   }
   return 0;
 }
-chunkMWMSFIWN_cjs.__name(byRouterPrecedence, "byRouterPrecedence");
+chunkL6DXCKVQ_cjs.__name(byRouterPrecedence, "byRouterPrecedence");
 var COMPILED_ROUTES = Object.keys(DECLARED_PATHS).map(compile).sort(byRouterPrecedence);
 function matchRoute(url, options = {}) {
   const parsed = new URL(url, "http://relative.invalid");
@@ -822,7 +965,7 @@ function matchRoute(url, options = {}) {
   }
   return null;
 }
-chunkMWMSFIWN_cjs.__name(matchRoute, "matchRoute");
+chunkL6DXCKVQ_cjs.__name(matchRoute, "matchRoute");
 function readQuery(searchParams) {
   const query = {};
   for (const key of new Set(searchParams.keys())) {
@@ -831,7 +974,7 @@ function readQuery(searchParams) {
   }
   return query;
 }
-chunkMWMSFIWN_cjs.__name(readQuery, "readQuery");
+chunkL6DXCKVQ_cjs.__name(readQuery, "readQuery");
 
 // src/errors/instructed-delay.ts
 function serviceInstructedDelayMs(error, nowMs) {
@@ -846,7 +989,7 @@ function serviceInstructedDelayMs(error, nowMs) {
   const wait = resetAtMs - nowMs;
   return wait > 0 ? wait : void 0;
 }
-chunkMWMSFIWN_cjs.__name(serviceInstructedDelayMs, "serviceInstructedDelayMs");
+chunkL6DXCKVQ_cjs.__name(serviceInstructedDelayMs, "serviceInstructedDelayMs");
 
 // src/http/retry-policy.ts
 var IDEMPOTENT_METHODS = /* @__PURE__ */ new Set([
@@ -859,9 +1002,9 @@ var IDEMPOTENT_METHODS = /* @__PURE__ */ new Set([
 ]);
 function isReplaySafe(request) {
   if (IDEMPOTENT_METHODS.has(request.method.toUpperCase())) return true;
-  return headerValue(request.headers, chunk6PTRZP5U_cjs.HEADER_IDEMPOTENCY_KEY.name) !== void 0;
+  return headerValue(request.headers, chunkNN45CSPZ_cjs.HEADER_IDEMPOTENCY_KEY.name) !== void 0;
 }
-chunkMWMSFIWN_cjs.__name(isReplaySafe, "isReplaySafe");
+chunkL6DXCKVQ_cjs.__name(isReplaySafe, "isReplaySafe");
 var UNREACHABLE_CODES = /* @__PURE__ */ new Set(["ECONNREFUSED", "ENOTFOUND"]);
 function isUnreachableHost(error, depth = 0) {
   if (depth > 4 || typeof error !== "object" || error === null) return false;
@@ -872,10 +1015,10 @@ function isUnreachableHost(error, depth = 0) {
   }
   return isUnreachableHost(cause, depth + 1);
 }
-chunkMWMSFIWN_cjs.__name(isUnreachableHost, "isUnreachableHost");
+chunkL6DXCKVQ_cjs.__name(isUnreachableHost, "isUnreachableHost");
 var _DefaultRetryPolicy = class _DefaultRetryPolicy {
   constructor(config) {
-    chunkMWMSFIWN_cjs.__publicField(this, "config");
+    chunkL6DXCKVQ_cjs.__publicField(this, "config");
     this.config = config;
   }
   shouldRetry(attempt, error, request) {
@@ -892,7 +1035,7 @@ var _DefaultRetryPolicy = class _DefaultRetryPolicy {
     return this.config.jitter ? delay * (0.5 + Math.random() * 0.5) : delay;
   }
 };
-chunkMWMSFIWN_cjs.__name(_DefaultRetryPolicy, "DefaultRetryPolicy");
+chunkL6DXCKVQ_cjs.__name(_DefaultRetryPolicy, "DefaultRetryPolicy");
 var DefaultRetryPolicy = _DefaultRetryPolicy;
 function retryPolicyFor(maxAttempts) {
   return new DefaultRetryPolicy({
@@ -903,7 +1046,7 @@ function retryPolicyFor(maxAttempts) {
     jitter: true
   });
 }
-chunkMWMSFIWN_cjs.__name(retryPolicyFor, "retryPolicyFor");
+chunkL6DXCKVQ_cjs.__name(retryPolicyFor, "retryPolicyFor");
 
 // src/config/preview-read.ts
 var derived = /* @__PURE__ */ new Set();
@@ -912,19 +1055,19 @@ var announced = /* @__PURE__ */ new Set();
 function noteDerivedPreview(dataset) {
   derived.add(dataset);
 }
-chunkMWMSFIWN_cjs.__name(noteDerivedPreview, "noteDerivedPreview");
+chunkL6DXCKVQ_cjs.__name(noteDerivedPreview, "noteDerivedPreview");
 function isDerivedPreview(dataset) {
   return derived.has(dataset);
 }
-chunkMWMSFIWN_cjs.__name(isDerivedPreview, "isDerivedPreview");
+chunkL6DXCKVQ_cjs.__name(isDerivedPreview, "isDerivedPreview");
 function isUnknownPreview(dataset) {
   const since = unknown.get(dataset);
   if (since === void 0) return false;
-  if (Date.now() - since < chunk6PTRZP5U_cjs.UNKNOWN_PREVIEW_RECHECK_MS) return true;
+  if (Date.now() - since < chunk7I3SC7SV_cjs.UNKNOWN_PREVIEW_RECHECK_MS) return true;
   unknown.delete(dataset);
   return false;
 }
-chunkMWMSFIWN_cjs.__name(isUnknownPreview, "isUnknownPreview");
+chunkL6DXCKVQ_cjs.__name(isUnknownPreview, "isUnknownPreview");
 function rememberUnknownPreview(dataset) {
   unknown.set(dataset, Date.now());
   if (announced.has(dataset)) return;
@@ -933,11 +1076,11 @@ function rememberUnknownPreview(dataset) {
     `[RelyIO] No preview dataset "${dataset}" exists for this deployment's branch \u2014 reading the key's default dataset instead, and asking again in a minute.`
   );
 }
-chunkMWMSFIWN_cjs.__name(rememberUnknownPreview, "rememberUnknownPreview");
+chunkL6DXCKVQ_cjs.__name(rememberUnknownPreview, "rememberUnknownPreview");
 function answersUnknownDataset(error, dataset) {
   return error instanceof ResourceNotFoundError && error.context?.resourceType === "dataset" && error.context.resourceId === dataset;
 }
-chunkMWMSFIWN_cjs.__name(answersUnknownDataset, "answersUnknownDataset");
+chunkL6DXCKVQ_cjs.__name(answersUnknownDataset, "answersUnknownDataset");
 
 // src/http/abortable-sleep.ts
 function sleep(ms, signal) {
@@ -946,7 +1089,7 @@ function sleep(ms, signal) {
       resolve();
       return;
     }
-    const done = /* @__PURE__ */ chunkMWMSFIWN_cjs.__name(() => {
+    const done = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name(() => {
       clearTimeout(timer);
       signal?.removeEventListener("abort", done);
       resolve();
@@ -955,37 +1098,37 @@ function sleep(ms, signal) {
     signal?.addEventListener("abort", done, { once: true });
   });
 }
-chunkMWMSFIWN_cjs.__name(sleep, "sleep");
+chunkL6DXCKVQ_cjs.__name(sleep, "sleep");
 function isAborted(signal) {
   return signal?.aborted === true;
 }
-chunkMWMSFIWN_cjs.__name(isAborted, "isAborted");
+chunkL6DXCKVQ_cjs.__name(isAborted, "isAborted");
 
 // src/http/request-timeout.ts
 var MAX_TIMER_DELAY_MS = 2147483647;
 function isTimerDelay(value) {
   return typeof value === "number" && value >= 1 && value <= MAX_TIMER_DELAY_MS;
 }
-chunkMWMSFIWN_cjs.__name(isTimerDelay, "isTimerDelay");
+chunkL6DXCKVQ_cjs.__name(isTimerDelay, "isTimerDelay");
 function assertRequestTimeout(timeout) {
   if (isTimerDelay(timeout)) return;
   throw new Error(
     `timeout must be a number of milliseconds from 1 to ${MAX_TIMER_DELAY_MS} \u2014 a timer given 0, NaN, Infinity or more fires at once and ends every request \u2014 and got ${String(timeout)}`
   );
 }
-chunkMWMSFIWN_cjs.__name(assertRequestTimeout, "assertRequestTimeout");
+chunkL6DXCKVQ_cjs.__name(assertRequestTimeout, "assertRequestTimeout");
 
 // src/http/http-client.ts
 var _HttpClient = class _HttpClient {
   constructor(config) {
     /** What every request reads off the configuration, derived by {@link configure} and nowhere else. */
-    chunkMWMSFIWN_cjs.__publicField(this, "connection");
+    chunkL6DXCKVQ_cjs.__publicField(this, "connection");
     /**
      * Set on a view {@link withHeaders} made: the client every request is sent through, and the
      * headers laid beneath each request's own. A view keeps no connection of its own that matters —
      * everything it is asked to change, it changes on that client.
      */
-    chunkMWMSFIWN_cjs.__publicField(this, "view");
+    chunkL6DXCKVQ_cjs.__publicField(this, "view");
     this.connection = connectionFor(config);
     this.announce();
   }
@@ -994,7 +1137,7 @@ var _HttpClient = class _HttpClient {
       baseUrl: this.connection.baseUrl,
       timeout: this.connection.timeout,
       retryAttempts: this.connection.config.retryAttempts,
-      environment: chunkTZL374LS_cjs.isBrowser() ? "browser" : "node"
+      environment: chunkM7MWNV3Q_cjs.isBrowser() ? "browser" : "node"
     });
   }
   /**
@@ -1056,22 +1199,33 @@ var _HttpClient = class _HttpClient {
    * constructor accepts one so that a module-scope client can be evaluated by a
    * build that holds no key (REL-1120) — and so does one whose `setApiKey` was
    * given none.
+   *
+   * The End user's token is asked for once, after the key is known to be there and before the first
+   * attempt — of `getToken`, the nearest view's function, or the configuration's — so every retry
+   * of one call sends the token its first attempt sent. See `RelyIOConfig.getToken`.
    */
-  async request(config) {
+  async request(config, getToken) {
     if (this.view !== void 0) {
-      return this.view.client.request({
-        ...config,
-        headers: layerHeaders(this.view.headers, config.headers)
-      });
+      return this.view.client.request(
+        { ...config, headers: layerHeaders(this.view.headers, config.headers) },
+        getToken ?? this.view.getToken
+      );
     }
     if (config.timeout !== void 0) assertRequestTimeout(config.timeout);
     const mergedConfig = this.mergeRequestConfig(config);
-    if (presentKey(headerValue(mergedConfig.headers, API_KEY_HEADER)) === void 0) {
+    if (presentCredential(headerValue(mergedConfig.headers, API_KEY_HEADER)) === void 0) {
       throw new MissingApiKeyError(
         "`apiKey` is missing: this client holds no API key, so the request was not sent. Pass `apiKey` to createClient \u2014 the documented setup reads it from RELYIO_API_KEY.",
         { url: mergedConfig.url, method: mergedConfig.method, sent: false }
       );
     }
+    const tokenSource = getToken ?? this.connection.config.getToken;
+    if (tokenSource !== void 0) {
+      const token = presentCredential(await tokenSource());
+      mergedConfig.headers = layerHeaders(mergedConfig.headers ?? {}, {
+        [END_USER_HEADER]: token ?? null
+      });
+    }
     this.log("debug", "Making request", {
       method: mergedConfig.method,
       url: mergedConfig.url
@@ -1115,7 +1269,7 @@ var _HttpClient = class _HttpClient {
         });
         if (preview !== void 0 && answersUnknownDataset(sdkError, preview)) {
           rememberUnknownPreview(preview);
-          return this.request(config);
+          return this.request(config, getToken);
         }
         this.log("error", "Request failed after all retries", {
           error: sdkError.toJSON(),
@@ -1146,7 +1300,7 @@ var _HttpClient = class _HttpClient {
       timedOut = true;
       controller.abort();
     }, config.timeout ?? this.connection.timeout);
-    const onCallerAbort = /* @__PURE__ */ chunkMWMSFIWN_cjs.__name(() => controller.abort(), "onCallerAbort");
+    const onCallerAbort = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name(() => controller.abort(), "onCallerAbort");
     caller?.addEventListener("abort", onCallerAbort, { once: true });
     try {
       const filteredHeaders = this.filterHeadersForBrowser(config.headers ?? {});
@@ -1159,7 +1313,7 @@ var _HttpClient = class _HttpClient {
         // runtime has no cookie jar for the mode to govern, so the field is left off and the
         // runtime's default stands; that includes Deno 1.x, whose global is a `window` with no
         // `document`. A Web Worker gets that default too: it has cookies but no `window`.
-        ...chunkTZL374LS_cjs.isBrowser() && {
+        ...chunkM7MWNV3Q_cjs.isBrowser() && {
           credentials: credentialsModeFor(this.connection.config.browser.includeCredentials)
         }
       };
@@ -1212,7 +1366,7 @@ var _HttpClient = class _HttpClient {
           }
         );
         const { onCorsError } = this.connection.config.browser;
-        if (chunkTZL374LS_cjs.isBrowser() && onCorsError) {
+        if (chunkM7MWNV3Q_cjs.isBrowser() && onCorsError) {
           try {
             onCorsError(corsError, {
               url: config.url,
@@ -1239,7 +1393,7 @@ var _HttpClient = class _HttpClient {
    * spellings, so `Origin` and `User-Agent` — how people write them — reached `fetch` (REL-1409).
    */
   filterHeadersForBrowser(headers) {
-    if (!chunkTZL374LS_cjs.isBrowser()) return headers;
+    if (!chunkM7MWNV3Q_cjs.isBrowser()) return headers;
     return Object.fromEntries(
       Object.entries(headers).filter(
         ([name]) => !BROWSER_CONTROLLED_HEADERS.has(name.toLowerCase())
@@ -1327,7 +1481,7 @@ var _HttpClient = class _HttpClient {
     }
   }
 };
-chunkMWMSFIWN_cjs.__name(_HttpClient, "HttpClient");
+chunkL6DXCKVQ_cjs.__name(_HttpClient, "HttpClient");
 var HttpClient = _HttpClient;
 var _ControlledHttpClient = class _ControlledHttpClient extends HttpClient {
   /**
@@ -1336,10 +1490,17 @@ var _ControlledHttpClient = class _ControlledHttpClient extends HttpClient {
    * retries and `fetch` are this client's as they are when each request is sent, so a later
    * `configure()` or `setApiKey()` on this client reaches the view, and one on the view reaches
    * this client. `client.with({ dataset })` is one (REL-2417).
+   *
+   * `options.getToken` is the End user's token function the view asks in place of this client's,
+   * and of any view it is made from: `client.with({ getToken })` (REL-3882).
    */
-  withHeaders(headers) {
+  withHeaders(headers, options = {}) {
     const view = new _ControlledHttpClient(this.connection.config);
-    view.view = { client: this, headers: { ...headers } };
+    view.view = {
+      client: this,
+      headers: { ...headers },
+      ...options.getToken === void 0 ? {} : { getToken: options.getToken }
+    };
     return view;
   }
   /**
@@ -1361,7 +1522,7 @@ var _ControlledHttpClient = class _ControlledHttpClient extends HttpClient {
    * Replace the key every later request sends as `X-API-Key`, and the `apiKey` the configuration
    * reports.
    *
-   * The key is read the way construction reads it (`presentKey`): an absent, empty or blank key is
+   * The key is read the way construction reads it (`presentCredential`): an absent, empty or blank key is
    * no key, so the header is dropped and the next request is refused with `MissingApiKeyError`
    * before anything is sent. A key header of any other spelling — one given in `headers` — goes
    * too, from the headers sent and from the headers the configuration reports, so the old key is
@@ -1382,20 +1543,21 @@ var _ControlledHttpClient = class _ControlledHttpClient extends HttpClient {
     this.connection = {
       ...this.connection,
       defaultHeaders: layerHeaders(this.connection.defaultHeaders, {
-        [API_KEY_HEADER]: presentKey(apiKey) ?? null
+        [API_KEY_HEADER]: presentCredential(apiKey) ?? null
       })
     };
   }
 };
-chunkMWMSFIWN_cjs.__name(_ControlledHttpClient, "ControlledHttpClient");
+chunkL6DXCKVQ_cjs.__name(_ControlledHttpClient, "ControlledHttpClient");
 var ControlledHttpClient = _ControlledHttpClient;
 var API_KEY_HEADER = "X-API-Key";
 var DATASET_HEADER = "X-RelyIO-Dataset";
+var END_USER_HEADER = chunkNN45CSPZ_cjs.HEADER_END_USER.name;
 function derivedPreviewIn(headers) {
   const dataset = headerValue(headers, DATASET_HEADER);
   return dataset !== void 0 && isDerivedPreview(dataset) ? dataset : void 0;
 }
-chunkMWMSFIWN_cjs.__name(derivedPreviewIn, "derivedPreviewIn");
+chunkL6DXCKVQ_cjs.__name(derivedPreviewIn, "derivedPreviewIn");
 var BROWSER_CONTROLLED_HEADERS = /* @__PURE__ */ new Set([
   "user-agent",
   "referer",
@@ -1409,11 +1571,11 @@ function connectionFor(config) {
   const defaultHeaders = layerHeaders(
     layerHeaders({ "Content-Type": "application/json" }, config.headers),
     {
-      [API_KEY_HEADER]: presentKey(config.apiKey),
+      [API_KEY_HEADER]: presentCredential(config.apiKey),
       [DATASET_HEADER]: config.dataset,
       // Only outside a browser, which controls this header. "A browser" is the core's one
       // definition, `isBrowser()` — every environment question in this file asks it.
-      "User-Agent": chunkTZL374LS_cjs.isBrowser() ? void 0 : `RelyIO-SDK/${globalWithVersion.__VERSION__ ?? "0.0.0"}`
+      "User-Agent": chunkM7MWNV3Q_cjs.isBrowser() ? void 0 : `RelyIO-SDK/${globalWithVersion.__VERSION__ ?? "0.0.0"}`
     }
   );
   return {
@@ -1427,7 +1589,7 @@ function connectionFor(config) {
     retryPolicy: retryPolicyFor(config.retryAttempts)
   };
 }
-chunkMWMSFIWN_cjs.__name(connectionFor, "connectionFor");
+chunkL6DXCKVQ_cjs.__name(connectionFor, "connectionFor");
 function layerHeaders(base, over) {
   const layered = { ...base };
   for (const [name, value] of Object.entries(over ?? {})) {
@@ -1440,62 +1602,62 @@ function layerHeaders(base, over) {
   }
   return layered;
 }
-chunkMWMSFIWN_cjs.__name(layerHeaders, "layerHeaders");
-function presentKey(value) {
+chunkL6DXCKVQ_cjs.__name(layerHeaders, "layerHeaders");
+function presentCredential(value) {
   return typeof value === "string" && value.trim() !== "" ? value : void 0;
 }
-chunkMWMSFIWN_cjs.__name(presentKey, "presentKey");
+chunkL6DXCKVQ_cjs.__name(presentCredential, "presentCredential");
 function credentialsModeFor(includeCredentials) {
   return includeCredentials ? "include" : "same-origin";
 }
-chunkMWMSFIWN_cjs.__name(credentialsModeFor, "credentialsModeFor");
+chunkL6DXCKVQ_cjs.__name(credentialsModeFor, "credentialsModeFor");
 
 // src/http/write-options.ts
 function versionCheckOf(entry) {
   const { id, locale, version, sharedVersion } = entry._metadata;
-  return { id, locale, ifMatch: chunk6PTRZP5U_cjs.entityTag({ entryUid: id, locale, version, sharedVersion }) };
+  return { id, locale, ifMatch: chunkNN45CSPZ_cjs.entityTag({ entryUid: id, locale, version, sharedVersion }) };
 }
-chunkMWMSFIWN_cjs.__name(versionCheckOf, "versionCheckOf");
+chunkL6DXCKVQ_cjs.__name(versionCheckOf, "versionCheckOf");
 function mintIdempotencyKey() {
   const webCrypto = globalThis.crypto;
   if (typeof webCrypto?.randomUUID !== "function") return void 0;
   return webCrypto.randomUUID();
 }
-chunkMWMSFIWN_cjs.__name(mintIdempotencyKey, "mintIdempotencyKey");
+chunkL6DXCKVQ_cjs.__name(mintIdempotencyKey, "mintIdempotencyKey");
 function writeHeaders(options) {
   const headers = {};
   if (options?.ifMatch !== void 0) {
-    headers[chunk6PTRZP5U_cjs.HEADER_IF_MATCH.name] = options.ifMatch;
+    headers[chunkNN45CSPZ_cjs.HEADER_IF_MATCH.name] = options.ifMatch;
   }
   const idempotencyKey = options?.idempotencyKey ?? mintIdempotencyKey();
   if (idempotencyKey !== void 0) {
-    headers[chunk6PTRZP5U_cjs.HEADER_IDEMPOTENCY_KEY.name] = idempotencyKey;
+    headers[chunkNN45CSPZ_cjs.HEADER_IDEMPOTENCY_KEY.name] = idempotencyKey;
   }
   return Object.keys(headers).length > 0 ? headers : void 0;
 }
-chunkMWMSFIWN_cjs.__name(writeHeaders, "writeHeaders");
+chunkL6DXCKVQ_cjs.__name(writeHeaders, "writeHeaders");
 
 // src/content/client-locale.ts
 function callLocale(named, clientLocale) {
   if (named !== void 0) return named;
   return clientLocale === void 0 || clientLocale === "" ? void 0 : clientLocale;
 }
-chunkMWMSFIWN_cjs.__name(callLocale, "callLocale");
+chunkL6DXCKVQ_cjs.__name(callLocale, "callLocale");
 function readClientLocale(locale) {
   return typeof locale === "function" ? locale : () => locale;
 }
-chunkMWMSFIWN_cjs.__name(readClientLocale, "readClientLocale");
+chunkL6DXCKVQ_cjs.__name(readClientLocale, "readClientLocale");
 
 // src/content/read-terms.ts
 function writeChildrenQuery(params, options) {
   params.children = options.depth === void 0 ? "true" : `${options.depth}`;
   if (options.limit !== void 0) params.childrenLimit = options.limit;
 }
-chunkMWMSFIWN_cjs.__name(writeChildrenQuery, "writeChildrenQuery");
+chunkL6DXCKVQ_cjs.__name(writeChildrenQuery, "writeChildrenQuery");
 function namesMetadata(key) {
   return key === "_metadata" || key.startsWith("_metadata.");
 }
-chunkMWMSFIWN_cjs.__name(namesMetadata, "namesMetadata");
+chunkL6DXCKVQ_cjs.__name(namesMetadata, "namesMetadata");
 function refuseMetadataConditions(conditions) {
   const named = Object.keys(conditions).filter(namesMetadata);
   if (named.length === 0) return;
@@ -1508,7 +1670,7 @@ function refuseMetadataConditions(conditions) {
     }))
   );
 }
-chunkMWMSFIWN_cjs.__name(refuseMetadataConditions, "refuseMetadataConditions");
+chunkL6DXCKVQ_cjs.__name(refuseMetadataConditions, "refuseMetadataConditions");
 
 // src/content/read-options.ts
 function listQuery(options, clientLocale) {
@@ -1532,7 +1694,7 @@ function listQuery(options, clientLocale) {
   writeReadTerms(query, options, clientLocale);
   return query;
 }
-chunkMWMSFIWN_cjs.__name(listQuery, "listQuery");
+chunkL6DXCKVQ_cjs.__name(listQuery, "listQuery");
 function childrenQuery(options, clientLocale) {
   const query = {};
   if (options.limit !== void 0) query.limit = options.limit;
@@ -1541,34 +1703,34 @@ function childrenQuery(options, clientLocale) {
   writeReadTerms(query, options, clientLocale);
   return query;
 }
-chunkMWMSFIWN_cjs.__name(childrenQuery, "childrenQuery");
+chunkL6DXCKVQ_cjs.__name(childrenQuery, "childrenQuery");
 function entryQuery(options, clientLocale) {
   const query = {};
   writeReadTerms(query, options, clientLocale);
   return query;
 }
-chunkMWMSFIWN_cjs.__name(entryQuery, "entryQuery");
+chunkL6DXCKVQ_cjs.__name(entryQuery, "entryQuery");
 function documentQuery(options, clientLocale) {
   const query = {};
   writeDocumentTerms(query, options, clientLocale);
   return query;
 }
-chunkMWMSFIWN_cjs.__name(documentQuery, "documentQuery");
+chunkL6DXCKVQ_cjs.__name(documentQuery, "documentQuery");
 function writeReadTerms(query, options, clientLocale) {
   writeDocumentTerms(query, options, clientLocale);
   if (options.children !== void 0) {
     writeChildrenQuery(query, options.children === true ? {} : options.children);
   }
 }
-chunkMWMSFIWN_cjs.__name(writeReadTerms, "writeReadTerms");
+chunkL6DXCKVQ_cjs.__name(writeReadTerms, "writeReadTerms");
 function writeDocumentTerms(query, options, clientLocale) {
   if (options.include !== void 0 && options.include.length > 0) {
     query.include = options.include.join(",");
   }
   writeLocale(query, options.locale ?? clientLocale);
-  if (typeof options.fresh === "string") query[chunk6PTRZP5U_cjs.FRESH_PARAMETER] = options.fresh;
+  if (typeof options.fresh === "string") query[chunkNN45CSPZ_cjs.FRESH_PARAMETER] = options.fresh;
 }
-chunkMWMSFIWN_cjs.__name(writeDocumentTerms, "writeDocumentTerms");
+chunkL6DXCKVQ_cjs.__name(writeDocumentTerms, "writeDocumentTerms");
 function writeLocale(query, locale) {
   if (locale === void 0) return;
   if (typeof locale === "string") {
@@ -1583,18 +1745,18 @@ function writeLocale(query, locale) {
   }
   query.locales = locale.join(",");
 }
-chunkMWMSFIWN_cjs.__name(writeLocale, "writeLocale");
+chunkL6DXCKVQ_cjs.__name(writeLocale, "writeLocale");
 function signalOf(options) {
   return options.signal === void 0 ? {} : { signal: options.signal };
 }
-chunkMWMSFIWN_cjs.__name(signalOf, "signalOf");
+chunkL6DXCKVQ_cjs.__name(signalOf, "signalOf");
 function readHeaders(options) {
   const headers = {};
   if (options.dataset !== void 0) headers[DATASET_HEADER] = options.dataset;
   if (options.fresh === true) headers["Cache-Control"] = "no-cache";
   return Object.keys(headers).length > 0 ? headers : void 0;
 }
-chunkMWMSFIWN_cjs.__name(readHeaders, "readHeaders");
+chunkL6DXCKVQ_cjs.__name(readHeaders, "readHeaders");
 
 // src/content/entry-handle.ts
 var _EntryHandle = class _EntryHandle {
@@ -1607,7 +1769,7 @@ var _EntryHandle = class _EntryHandle {
     this.httpClient = httpClient;
     this.typeName = typeName;
     /** The client's locale, asked on every call rather than copied when this handle was taken. */
-    chunkMWMSFIWN_cjs.__publicField(this, "clientLocale");
+    chunkL6DXCKVQ_cjs.__publicField(this, "clientLocale");
     this.clientLocale = readClientLocale(locale);
   }
   /**
@@ -1730,7 +1892,7 @@ var _EntryHandle = class _EntryHandle {
     });
   }
 };
-chunkMWMSFIWN_cjs.__name(_EntryHandle, "EntryHandle");
+chunkL6DXCKVQ_cjs.__name(_EntryHandle, "EntryHandle");
 var EntryHandle = _EntryHandle;
 
 // src/content/content-client.ts
@@ -1853,15 +2015,15 @@ var _ContentClient = class _ContentClient extends EntryHandle {
     return response.body;
   }
 };
-chunkMWMSFIWN_cjs.__name(_ContentClient, "ContentClient");
+chunkL6DXCKVQ_cjs.__name(_ContentClient, "ContentClient");
 var ContentClient = _ContentClient;
 
 // src/errors/file-errors.ts
 var _FileUploadError = class _FileUploadError extends SDKError {
   constructor(code, message, options = {}) {
     super(message, options.statusCode, options.cause, { ...options.context, fileErrorCode: code });
-    chunkMWMSFIWN_cjs.__publicField(this, "code");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable");
+    chunkL6DXCKVQ_cjs.__publicField(this, "code");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable");
     this.code = code;
     this.retryable = options.retriable ?? false;
   }
@@ -1869,19 +2031,19 @@ var _FileUploadError = class _FileUploadError extends SDKError {
     return this.message;
   }
 };
-chunkMWMSFIWN_cjs.__name(_FileUploadError, "FileUploadError");
+chunkL6DXCKVQ_cjs.__name(_FileUploadError, "FileUploadError");
 var FileUploadError = _FileUploadError;
 var _FileValidationError = class _FileValidationError extends BaseValidationError {
   constructor(message, violations = [], cause) {
     super(message, violations, 400, cause);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "FILE_VALIDATION_ERROR");
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "FILE_VALIDATION_ERROR");
   }
   getUserMessage() {
     if (this.violations.length === 1) return this.violations[0]?.message ?? this.message;
     return this.message;
   }
 };
-chunkMWMSFIWN_cjs.__name(_FileValidationError, "FileValidationError");
+chunkL6DXCKVQ_cjs.__name(_FileValidationError, "FileValidationError");
 var FileValidationError = _FileValidationError;
 function validateFile(file, constraints = {}) {
   const violations = [];
@@ -1904,7 +2066,7 @@ function validateFile(file, constraints = {}) {
   }
   return violations;
 }
-chunkMWMSFIWN_cjs.__name(validateFile, "validateFile");
+chunkL6DXCKVQ_cjs.__name(validateFile, "validateFile");
 
 // src/errors/file-error-codes.ts
 var FILE_ERROR_CODES = [
@@ -1934,11 +2096,11 @@ function assertWaitOptions(options) {
     );
   }
 }
-chunkMWMSFIWN_cjs.__name(assertWaitOptions, "assertWaitOptions");
+chunkL6DXCKVQ_cjs.__name(assertWaitOptions, "assertWaitOptions");
 function hasText(value) {
   return value != null && value !== "";
 }
-chunkMWMSFIWN_cjs.__name(hasText, "hasText");
+chunkL6DXCKVQ_cjs.__name(hasText, "hasText");
 function processingFailure(subject, stored) {
   const storedCode = stored?.code;
   const code = FILE_ERROR_CODES.find((known) => known === storedCode) ?? "PROCESSING_FAILED";
@@ -1951,7 +2113,7 @@ function processingFailure(subject, stored) {
     }
   );
 }
-chunkMWMSFIWN_cjs.__name(processingFailure, "processingFailure");
+chunkL6DXCKVQ_cjs.__name(processingFailure, "processingFailure");
 async function computeSha256Hex(blob) {
   try {
     const subtle = globalThis.crypto?.subtle;
@@ -1965,7 +2127,7 @@ async function computeSha256Hex(blob) {
     return void 0;
   }
 }
-chunkMWMSFIWN_cjs.__name(computeSha256Hex, "computeSha256Hex");
+chunkL6DXCKVQ_cjs.__name(computeSha256Hex, "computeSha256Hex");
 var _AssetFileBuilder = class _AssetFileBuilder {
   /**
    * @param locale - The client's locale, sent when a call names none: the function
@@ -1976,7 +2138,7 @@ var _AssetFileBuilder = class _AssetFileBuilder {
     this.assetType = assetType;
     this.entryUid = entryUid;
     /** The client's locale, asked on every call rather than copied when this builder was taken. */
-    chunkMWMSFIWN_cjs.__publicField(this, "clientLocale");
+    chunkL6DXCKVQ_cjs.__publicField(this, "clientLocale");
     this.clientLocale = readClientLocale(locale);
   }
   /**
@@ -2233,7 +2395,7 @@ var _AssetFileBuilder = class _AssetFileBuilder {
     }
   }
 };
-chunkMWMSFIWN_cjs.__name(_AssetFileBuilder, "AssetFileBuilder");
+chunkL6DXCKVQ_cjs.__name(_AssetFileBuilder, "AssetFileBuilder");
 var AssetFileBuilder = _AssetFileBuilder;
 var _AssetUploadBuilder = class _AssetUploadBuilder {
   /**
@@ -2244,19 +2406,19 @@ var _AssetUploadBuilder = class _AssetUploadBuilder {
     this.httpClient = httpClient;
     this.assetType = assetType;
     this.file = file;
-    chunkMWMSFIWN_cjs.__publicField(this, "_fileName");
-    chunkMWMSFIWN_cjs.__publicField(this, "_visibility");
-    chunkMWMSFIWN_cjs.__publicField(this, "_locale");
-    chunkMWMSFIWN_cjs.__publicField(this, "_publish");
-    chunkMWMSFIWN_cjs.__publicField(this, "_content", {});
-    chunkMWMSFIWN_cjs.__publicField(this, "_slug");
-    chunkMWMSFIWN_cjs.__publicField(this, "_waitForReady", false);
-    chunkMWMSFIWN_cjs.__publicField(this, "_waitOptions", {});
-    chunkMWMSFIWN_cjs.__publicField(this, "_onProgress");
-    chunkMWMSFIWN_cjs.__publicField(this, "_validate");
-    chunkMWMSFIWN_cjs.__publicField(this, "_maxPartRetries", 3);
+    chunkL6DXCKVQ_cjs.__publicField(this, "_fileName");
+    chunkL6DXCKVQ_cjs.__publicField(this, "_visibility");
+    chunkL6DXCKVQ_cjs.__publicField(this, "_locale");
+    chunkL6DXCKVQ_cjs.__publicField(this, "_publish");
+    chunkL6DXCKVQ_cjs.__publicField(this, "_content", {});
+    chunkL6DXCKVQ_cjs.__publicField(this, "_slug");
+    chunkL6DXCKVQ_cjs.__publicField(this, "_waitForReady", false);
+    chunkL6DXCKVQ_cjs.__publicField(this, "_waitOptions", {});
+    chunkL6DXCKVQ_cjs.__publicField(this, "_onProgress");
+    chunkL6DXCKVQ_cjs.__publicField(this, "_validate");
+    chunkL6DXCKVQ_cjs.__publicField(this, "_maxPartRetries", 3);
     /** The client's locale, read once when the upload starts. */
-    chunkMWMSFIWN_cjs.__publicField(this, "clientLocale");
+    chunkL6DXCKVQ_cjs.__publicField(this, "clientLocale");
     this.clientLocale = readClientLocale(locale);
   }
   /** Subscribe to client → storage upload progress (single PUT + multipart). */
@@ -2492,7 +2654,7 @@ var _AssetUploadBuilder = class _AssetUploadBuilder {
     this._onProgress({ phase: "upload", loaded, total, progress });
   }
 };
-chunkMWMSFIWN_cjs.__name(_AssetUploadBuilder, "AssetUploadBuilder");
+chunkL6DXCKVQ_cjs.__name(_AssetUploadBuilder, "AssetUploadBuilder");
 var AssetUploadBuilder = _AssetUploadBuilder;
 var _AssetClient = class _AssetClient extends EntryHandle {
   /**
@@ -2523,14 +2685,14 @@ var _AssetClient = class _AssetClient extends EntryHandle {
     return new AssetUploadBuilder(this.httpClient, this.typeName, file, this.clientLocale);
   }
 };
-chunkMWMSFIWN_cjs.__name(_AssetClient, "AssetClient");
+chunkL6DXCKVQ_cjs.__name(_AssetClient, "AssetClient");
 var AssetClient = _AssetClient;
 function isAssetEntry(entry) {
   if (entry == null || typeof entry !== "object") return false;
   const metadata = entry._metadata;
   return metadata?.entryType === "asset";
 }
-chunkMWMSFIWN_cjs.__name(isAssetEntry, "isAssetEntry");
+chunkL6DXCKVQ_cjs.__name(isAssetEntry, "isAssetEntry");
 
 // src/content/document-handle.ts
 var _DocumentHandle = class _DocumentHandle {
@@ -2543,7 +2705,7 @@ var _DocumentHandle = class _DocumentHandle {
     this.httpClient = httpClient;
     this.name = name;
     /** The client's locale, asked on every call rather than copied when this handle was taken. */
-    chunkMWMSFIWN_cjs.__publicField(this, "clientLocale");
+    chunkL6DXCKVQ_cjs.__publicField(this, "clientLocale");
     this.clientLocale = readClientLocale(locale);
   }
   async update(...args) {
@@ -2603,16 +2765,16 @@ var _DocumentHandle = class _DocumentHandle {
     return writeHeaders({ idempotencyKey: options?.idempotencyKey, ifMatch: write.ifMatch });
   }
 };
-chunkMWMSFIWN_cjs.__name(_DocumentHandle, "DocumentHandle");
+chunkL6DXCKVQ_cjs.__name(_DocumentHandle, "DocumentHandle");
 var DocumentHandle = _DocumentHandle;
 function isCheckedUpdate(args) {
   return isRead(args[0]);
 }
-chunkMWMSFIWN_cjs.__name(isCheckedUpdate, "isCheckedUpdate");
+chunkL6DXCKVQ_cjs.__name(isCheckedUpdate, "isCheckedUpdate");
 function isRead(value) {
   return "_metadata" in value && typeof value._metadata === "object" && value._metadata !== null;
 }
-chunkMWMSFIWN_cjs.__name(isRead, "isRead");
+chunkL6DXCKVQ_cjs.__name(isRead, "isRead");
 
 // src/content/singleton-client.ts
 var _SingletonClient = class _SingletonClient extends DocumentHandle {
@@ -2670,7 +2832,7 @@ var _SingletonClient = class _SingletonClient extends DocumentHandle {
     });
   }
 };
-chunkMWMSFIWN_cjs.__name(_SingletonClient, "SingletonClient");
+chunkL6DXCKVQ_cjs.__name(_SingletonClient, "SingletonClient");
 var SingletonClient = _SingletonClient;
 
 // src/content/settings-client.ts
@@ -2743,9 +2905,203 @@ var _SettingsClient = class _SettingsClient extends DocumentHandle {
     });
   }
 };
-chunkMWMSFIWN_cjs.__name(_SettingsClient, "SettingsClient");
+chunkL6DXCKVQ_cjs.__name(_SettingsClient, "SettingsClient");
 var SettingsClient = _SettingsClient;
 
+// src/content/records-client.ts
+function isMissingRecord(error) {
+  return error instanceof ResourceNotFoundError && error.context?.resourceType === "record";
+}
+chunkL6DXCKVQ_cjs.__name(isMissingRecord, "isMissingRecord");
+var _RecordsClient = class _RecordsClient {
+  constructor(httpClient, recordType) {
+    this.httpClient = httpClient;
+    this.recordType = recordType;
+  }
+  /**
+   * Store a Record, live the moment it lands. Values that break the Record type's fields are
+   * refused with `ValidationError` naming each field, and nothing is stored. Values a unique set of
+   * the type claims, held by another Record, are refused with `ResourceConflictError` — its
+   * `blockage` is `{ kind: 'value-taken', facts: { fields, recordId } }` (REL-3782) — with no
+   * `recordId` for an End user's write, whose read Policy may hide the holder (REL-3863).
+   */
+  async create(fields, options = {}) {
+    return this.httpClient.fetchPayload(
+      "/v1/records/{recordType}",
+      "post",
+      {
+        path: { recordType: this.recordType },
+        body: { fields },
+        headers: readHeaders(options),
+        ...signalOf(options)
+      }
+    );
+  }
+  /** One page of the Records `where` keeps, newest first unless `sort` names one key. */
+  async list(options = {}) {
+    const response = await this.httpClient.send(
+      "/v1/records/{recordType}",
+      "get",
+      {
+        path: { recordType: this.recordType },
+        query: {
+          ...options.where === void 0 ? {} : { filters: JSON.stringify(options.where) },
+          ...options.sort === void 0 ? {} : { sort: options.sort },
+          ...options.limit === void 0 ? {} : { limit: options.limit },
+          ...options.cursor === void 0 ? {} : { cursor: options.cursor },
+          ...options.count === true ? { count: "true" } : {},
+          ...options.facets === void 0 || options.facets.length === 0 ? {} : { facets: options.facets.join(",") },
+          ...includeQuery(options)
+        },
+        headers: readHeaders(options),
+        ...signalOf(options)
+      }
+    );
+    return response.body;
+  }
+  /**
+   * Upload a File for one of this Record type's file fields (REL-3824), and answer what a create or
+   * update sets the field to. The bytes go straight to object storage at the address the upload
+   * names, never through RelyIO; a File outside the field's `accept` or over its `maxSize` is
+   * refused with `ValidationError` naming the field before any byte is sent. An upload no write
+   * names within a day is deleted with its bytes. Server-side only, as every Record call is.
+   *
+   * @example
+   * ```typescript
+   * const invoice = await relyio.records('order').upload('invoice', pdfBytes, {
+   *   name: 'invoice-1001.pdf',
+   *   type: 'application/pdf',
+   * })
+   * await relyio.records('order').update(id, { invoice }, { revision })
+   * ```
+   */
+  async upload(field, bytes, options) {
+    const size = bytes instanceof Blob ? bytes.size : bytes.byteLength;
+    const upload = await this.httpClient.fetchPayload("/v1/records/{recordType}/files", "post", {
+      path: { recordType: this.recordType },
+      body: { field, name: options.name, type: options.type, size },
+      headers: readHeaders(options),
+      ...signalOf(options)
+    });
+    const response = await HttpClient.transfer(this.httpClient, upload.url, {
+      method: upload.method,
+      headers: upload.headers,
+      body: bytes,
+      ...signalOf(options)
+    });
+    if (!response.ok) {
+      throw new FileUploadError(
+        "INTERNAL",
+        `Upload failed (${response.status} ${response.statusText}) for ${this.recordType}.${field}`,
+        { retriable: response.status >= 500, statusCode: response.status }
+      );
+    }
+    return { upload: upload.id };
+  }
+  /**
+   * One Record by its id, or `null` when none is stored. A Record type nobody deployed throws
+   * `ResourceNotFoundError` naming it, so it never reads as a missing Record.
+   */
+  async get(id, options = {}) {
+    try {
+      return await this.httpClient.fetchPayload(
+        "/v1/records/{recordType}/{uid}",
+        "get",
+        {
+          path: { recordType: this.recordType, uid: id },
+          query: includeQuery(options),
+          headers: readHeaders(options),
+          ...signalOf(options)
+        }
+      );
+    } catch (error) {
+      if (isMissingRecord(error)) return null;
+      throw error;
+    }
+  }
+  /**
+   * Change the fields named, against the revision the change was made on, and answer the Record at
+   * its next revision. A field given `null` is removed; one not named keeps its value. A Record
+   * written since `revision` is refused with `ResourceConflictError` — its `blockage` is
+   * `{ kind: 'revision-stale', facts: { changedFields } }` — and nothing is written. Values that
+   * break the Record type are refused with `ValidationError` naming each field, and values another
+   * Record holds under a unique set with `ResourceConflictError`, its blockage `value-taken`.
+   *
+   * @example
+   * ```typescript
+   * const order = await relyio.records('order').get(id)
+   * await relyio.records('order').update(id, { status: 'shipped' }, {
+   *   revision: order._metadata.revision,
+   * })
+   * ```
+   */
+  async update(id, fields, options) {
+    return this.httpClient.fetchPayload(
+      "/v1/records/{recordType}/{uid}",
+      "patch",
+      {
+        path: { recordType: this.recordType, uid: id },
+        body: { fields },
+        headers: { ...readHeaders(options), "If-Match": `"${options.revision}"` },
+        ...signalOf(options)
+      }
+    );
+  }
+  /**
+   * Remove a Record. Another Record holding it through a reference declared to block its delete —
+   * the default — is refused with `ResourceConflictError`, its `blockage`
+   * (`{ kind: 'referenced', facts: { referrers } }`) naming each; one declared `nullify` is cleared.
+   */
+  async delete(id, options = {}) {
+    await this.httpClient.send(
+      "/v1/records/{recordType}/{uid}",
+      "delete",
+      {
+        path: { recordType: this.recordType, uid: id },
+        headers: readHeaders(options),
+        ...signalOf(options)
+      }
+    );
+  }
+};
+chunkL6DXCKVQ_cjs.__name(_RecordsClient, "RecordsClient");
+var RecordsClient = _RecordsClient;
+function includeQuery(options) {
+  return {
+    ...options.include === void 0 || options.include.length === 0 ? {} : { include: options.include.join(",") },
+    ...options.locale === void 0 ? {} : { locale: options.locale }
+  };
+}
+chunkL6DXCKVQ_cjs.__name(includeQuery, "includeQuery");
+
+// src/content/record-batch.ts
+async function sendRecordBatch(httpClient, operations, options = {}) {
+  const { idempotencyKey, ...call } = options;
+  return httpClient.fetchPayload(
+    "/v1/records/batch",
+    "post",
+    {
+      body: { operations },
+      headers: { ...readHeaders(call), ...writeHeaders({ idempotencyKey }) },
+      ...signalOf(call)
+    }
+  );
+}
+chunkL6DXCKVQ_cjs.__name(sendRecordBatch, "sendRecordBatch");
+var OPERATION_PATH = /^operations\[(\d+)\]/;
+function refusedOperationOf(error) {
+  if (typeof error !== "object" || error === null) return void 0;
+  const { context, violations } = error;
+  const operation = context?.blockage?.facts?.operation;
+  if (typeof operation === "number") return operation;
+  for (const violation of violations ?? []) {
+    const match = typeof violation.field === "string" ? OPERATION_PATH.exec(violation.field) : null;
+    if (match?.[1] !== void 0) return Number(match[1]);
+  }
+  return void 0;
+}
+chunkL6DXCKVQ_cjs.__name(refusedOperationOf, "refusedOperationOf");
+
 // src/changes/changes.ts
 var CHANGES_POLL_TIMEOUT_MS = 25e3 + 5e3;
 var EXPIRED_REASONS2 = {
@@ -2759,14 +3115,14 @@ var _ChangesExpiredError = class _ChangesExpiredError extends ResourceExpiredErr
   /** The base class's signature, so `withContext` can rebuild one; then the position resynced to. */
   constructor(message, statusCode = 410, cause, context, fresh) {
     super(message, statusCode, cause, context);
-    chunkMWMSFIWN_cjs.__publicField(this, "reason");
+    chunkL6DXCKVQ_cjs.__publicField(this, "reason");
     /**
      * The position the feed resynced to, which a refetch of everything names as `?_fresh`, as a
      * change's {@link FeedChange.fresh} is named: the head a `/v1/changes` resync took, or the cursor
      * the edge's `feed.resync` sent. `undefined` when there was no resync to take one — the error was
      * thrown (`onExpired: 'throw'`) — and on an error a caller built itself.
      */
-    chunkMWMSFIWN_cjs.__publicField(this, "fresh");
+    chunkL6DXCKVQ_cjs.__publicField(this, "fresh");
     this.name = "ChangesExpiredError";
     this.reason = expiredReasonOf(context?.reason);
     this.fresh = fresh;
@@ -2803,7 +3159,7 @@ var _ChangesExpiredError = class _ChangesExpiredError extends ResourceExpiredErr
     );
   }
 };
-chunkMWMSFIWN_cjs.__name(_ChangesExpiredError, "ChangesExpiredError");
+chunkL6DXCKVQ_cjs.__name(_ChangesExpiredError, "ChangesExpiredError");
 var ChangesExpiredError = _ChangesExpiredError;
 function expiredReasonOf(named) {
   for (const reason of Object.values(EXPIRED_REASONS2)) {
@@ -2811,7 +3167,7 @@ function expiredReasonOf(named) {
   }
   return "unknown";
 }
-chunkMWMSFIWN_cjs.__name(expiredReasonOf, "expiredReasonOf");
+chunkL6DXCKVQ_cjs.__name(expiredReasonOf, "expiredReasonOf");
 async function* pollChanges(http, options = {}) {
   const { signal } = options;
   let since = options.since;
@@ -2857,7 +3213,7 @@ async function* pollChanges(http, options = {}) {
     }
   }
 }
-chunkMWMSFIWN_cjs.__name(pollChanges, "pollChanges");
+chunkL6DXCKVQ_cjs.__name(pollChanges, "pollChanges");
 async function readChangesHead(http, options = {}) {
   const response = await http.send("/v1/changes", "get", {
     query: {},
@@ -2872,7 +3228,7 @@ async function readChangesHead(http, options = {}) {
   }
   return page.nextCursor;
 }
-chunkMWMSFIWN_cjs.__name(readChangesHead, "readChangesHead");
+chunkL6DXCKVQ_cjs.__name(readChangesHead, "readChangesHead");
 async function pollOnce(http, since, options) {
   const query = {};
   if (since !== void 0) query.since = since;
@@ -2885,18 +3241,18 @@ async function pollOnce(http, since, options) {
     ...options.signal === void 0 ? {} : { signal: options.signal }
   });
 }
-chunkMWMSFIWN_cjs.__name(pollOnce, "pollOnce");
+chunkL6DXCKVQ_cjs.__name(pollOnce, "pollOnce");
 
 // src/errors/live-errors.ts
 var _LiveEdgeError = class _LiveEdgeError extends SDKError {
   constructor(message, end, retry, options = {}) {
     super(message, options.statusCode, options.cause, options.context);
-    chunkMWMSFIWN_cjs.__publicField(this, "code", "LIVE_EDGE_ENDED");
-    chunkMWMSFIWN_cjs.__publicField(this, "retryable");
-    chunkMWMSFIWN_cjs.__publicField(this, "end");
-    chunkMWMSFIWN_cjs.__publicField(this, "retry");
+    chunkL6DXCKVQ_cjs.__publicField(this, "code", "LIVE_EDGE_ENDED");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryable");
+    chunkL6DXCKVQ_cjs.__publicField(this, "end");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retry");
     /** A refused poll's `Retry-After`, in milliseconds, where it carried a readable one. */
-    chunkMWMSFIWN_cjs.__publicField(this, "retryAfterMs");
+    chunkL6DXCKVQ_cjs.__publicField(this, "retryAfterMs");
     this.end = end;
     this.retry = retry;
     this.retryable = retry !== "stop";
@@ -2906,7 +3262,7 @@ var _LiveEdgeError = class _LiveEdgeError extends SDKError {
     return this.message;
   }
 };
-chunkMWMSFIWN_cjs.__name(_LiveEdgeError, "LiveEdgeError");
+chunkL6DXCKVQ_cjs.__name(_LiveEdgeError, "LiveEdgeError");
 var LiveEdgeError = _LiveEdgeError;
 
 // src/config/live-url.ts
@@ -2929,7 +3285,7 @@ function liveEdgeAddress(config) {
     message: `Live updates need the address of RelyIO\u2019s live edge, and this client cannot derive it: \`baseUrl\` is not RelyIO\u2019s API (${Object.keys(LIVE_EDGE_OF_API).join(", ")}). Set \`liveUrl\` in createClient() to the live edge this API belongs with. Nothing was sent.`
   };
 }
-chunkMWMSFIWN_cjs.__name(liveEdgeAddress, "liveEdgeAddress");
+chunkL6DXCKVQ_cjs.__name(liveEdgeAddress, "liveEdgeAddress");
 function readLiveUrl(liveUrl) {
   let url;
   try {
@@ -2949,7 +3305,7 @@ function readLiveUrl(liveUrl) {
   url.hash = "";
   return { ok: true, url };
 }
-chunkMWMSFIWN_cjs.__name(readLiveUrl, "readLiveUrl");
+chunkL6DXCKVQ_cjs.__name(readLiveUrl, "readLiveUrl");
 function originOf(baseUrl) {
   try {
     return new URL(baseUrl).origin;
@@ -2957,11 +3313,11 @@ function originOf(baseUrl) {
     return void 0;
   }
 }
-chunkMWMSFIWN_cjs.__name(originOf, "originOf");
+chunkL6DXCKVQ_cjs.__name(originOf, "originOf");
 
 // src/changes/live-edge.ts
 var LIVE_KEEPALIVE_INTERVAL_MS = 3e4;
-var LIVE_SOCKET_OPEN_TIMEOUT_MS = chunk6PTRZP5U_cjs.VISITOR_POLL_INTERVAL_MS;
+var LIVE_SOCKET_OPEN_TIMEOUT_MS = chunkNN45CSPZ_cjs.VISITOR_POLL_INTERVAL_MS;
 var LIVE_POLLS_BEFORE_SOCKET = 4;
 async function* subscribeLiveEdge(client, options = {}) {
   const { signal } = options;
@@ -2978,14 +3334,14 @@ async function* subscribeLiveEdge(client, options = {}) {
     if (polled === "aborted") return;
   }
 }
-chunkMWMSFIWN_cjs.__name(subscribeLiveEdge, "subscribeLiveEdge");
+chunkL6DXCKVQ_cjs.__name(subscribeLiveEdge, "subscribeLiveEdge");
 var SOCKET_CONNECTING = 0;
 var SOCKET_OPEN = 1;
 function runtimeWebSocket() {
   const candidate = globalThis.WebSocket;
   return typeof candidate === "function" ? candidate : void 0;
 }
-chunkMWMSFIWN_cjs.__name(runtimeWebSocket, "runtimeWebSocket");
+chunkL6DXCKVQ_cjs.__name(runtimeWebSocket, "runtimeWebSocket");
 function openSocket(client, url) {
   const Socket = client.webSocket ?? runtimeWebSocket();
   if (Socket === void 0) return void 0;
@@ -2995,7 +3351,7 @@ function openSocket(client, url) {
     return void 0;
   }
 }
-chunkMWMSFIWN_cjs.__name(openSocket, "openSocket");
+chunkL6DXCKVQ_cjs.__name(openSocket, "openSocket");
 async function* followSocket(socket, reach, options) {
   const { signal } = options;
   const inbox = socketInbox(socket, signal);
@@ -3031,12 +3387,12 @@ async function* followSocket(socket, reach, options) {
           return "unopened";
         }
         case "message": {
-          if (event.data === chunk6PTRZP5U_cjs.VISITOR_KEEPALIVE.response) continue;
-          const frame = typeof event.data === "string" ? chunk6PTRZP5U_cjs.parseVisitorFrame(event.data) : null;
+          if (event.data === chunkNN45CSPZ_cjs.VISITOR_KEEPALIVE.response) continue;
+          const frame = typeof event.data === "string" ? chunkNN45CSPZ_cjs.parseVisitorFrame(event.data) : null;
           if (frame === null)
             throw unreadable(`a frame the wire does not declare: ${sample(event.data)}`);
           switch (frame.type) {
-            case chunk6PTRZP5U_cjs.VISITOR_FRAMES.opened: {
+            case chunkNN45CSPZ_cjs.VISITOR_FRAMES.opened: {
               caughtUp = true;
               inbox.caughtUp();
               reach.position = frame.cursor;
@@ -3044,7 +3400,7 @@ async function* followSocket(socket, reach, options) {
               options.reached?.(frame.cursor);
               continue;
             }
-            case chunk6PTRZP5U_cjs.VISITOR_FRAMES.changes: {
+            case chunkNN45CSPZ_cjs.VISITOR_FRAMES.changes: {
               const prior = reach.position;
               if (prior === void 0) throw unreadable("changes before the socket had a position");
               for (const change of changesOf(frame.changes, frame.cursor, prior)) {
@@ -3055,7 +3411,7 @@ async function* followSocket(socket, reach, options) {
               if (frame.changes.length === 0) options.reached?.(frame.cursor);
               continue;
             }
-            case chunk6PTRZP5U_cjs.VISITOR_FRAMES.resync: {
+            case chunkNN45CSPZ_cjs.VISITOR_FRAMES.resync: {
               await expire(frame.reason, frame.cursor, options);
               if (isAborted(signal)) return "aborted";
               reach.position = frame.cursor;
@@ -3070,19 +3426,19 @@ async function* followSocket(socket, reach, options) {
     inbox.dispose();
   }
 }
-chunkMWMSFIWN_cjs.__name(followSocket, "followSocket");
+chunkL6DXCKVQ_cjs.__name(followSocket, "followSocket");
 function socketInbox(socket, signal) {
   const events = [];
   let wake;
   let disposed = false;
   let heard = true;
   let keepalive;
-  const rouse = /* @__PURE__ */ chunkMWMSFIWN_cjs.__name(() => {
+  const rouse = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name(() => {
     const waking = wake;
     wake = void 0;
     waking?.();
   }, "rouse");
-  const push = /* @__PURE__ */ chunkMWMSFIWN_cjs.__name((event) => {
+  const push = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name((event) => {
     if (disposed) return;
     events.push(event);
     rouse();
@@ -3127,7 +3483,7 @@ function socketInbox(socket, signal) {
           return;
         }
         heard = false;
-        if (socket.readyState === SOCKET_OPEN) socket.send(chunk6PTRZP5U_cjs.VISITOR_KEEPALIVE.request);
+        if (socket.readyState === SOCKET_OPEN) socket.send(chunkNN45CSPZ_cjs.VISITOR_KEEPALIVE.request);
       }, LIVE_KEEPALIVE_INTERVAL_MS);
     },
     caughtUp() {
@@ -3145,7 +3501,7 @@ function socketInbox(socket, signal) {
     }
   };
 }
-chunkMWMSFIWN_cjs.__name(socketInbox, "socketInbox");
+chunkL6DXCKVQ_cjs.__name(socketInbox, "socketInbox");
 function closedBy(code, reason) {
   const retry = closeRetryOf(code);
   const meaning = hasOwn(CLOSE_MEANING, code) ? CLOSE_MEANING[code] : code < 4e3 ? "the connection dropped" : "a refusal this version of the SDK does not know";
@@ -3156,26 +3512,26 @@ function closedBy(code, reason) {
     retry
   );
 }
-chunkMWMSFIWN_cjs.__name(closedBy, "closedBy");
+chunkL6DXCKVQ_cjs.__name(closedBy, "closedBy");
 var AFTER_A_CLOSE = {
   stop: "The same request would be refused again, so it was not retried.",
   retry: "Reconnecting from the last cursor after a short back-off.",
   "back-off": "Retrying after a back-off of at least a minute, without polling, which the same admission refuses."
 };
 function closeRetryOf(code) {
-  if (hasOwn(chunk6PTRZP5U_cjs.VISITOR_CLOSE_RETRY, code)) return chunk6PTRZP5U_cjs.VISITOR_CLOSE_RETRY[code];
+  if (hasOwn(chunkNN45CSPZ_cjs.VISITOR_CLOSE_RETRY, code)) return chunkNN45CSPZ_cjs.VISITOR_CLOSE_RETRY[code];
   return code < 4e3 ? "retry" : "stop";
 }
-chunkMWMSFIWN_cjs.__name(closeRetryOf, "closeRetryOf");
+chunkL6DXCKVQ_cjs.__name(closeRetryOf, "closeRetryOf");
 var CLOSE_MEANING = {
-  [chunk6PTRZP5U_cjs.VISITOR_CLOSE_CODES.requestInvalid]: "the edge could not read the request \u2014 a malformed cursor or filter",
-  [chunk6PTRZP5U_cjs.VISITOR_CLOSE_CODES.keyRefused]: "the key is not a publishable key the edge accepts \u2014 unknown, revoked or expired",
-  [chunk6PTRZP5U_cjs.VISITOR_CLOSE_CODES.originRefused]: "this page\u2019s origin is not on the publishable key\u2019s allowed origins",
-  [chunk6PTRZP5U_cjs.VISITOR_CLOSE_CODES.datasetRefused]: "`dataset` names no dataset the key reaches",
-  [chunk6PTRZP5U_cjs.VISITOR_CLOSE_CODES.unavailable]: "the edge could not serve this connection just now \u2014 it could not reach what it needed",
-  [chunk6PTRZP5U_cjs.VISITOR_CLOSE_CODES.allowanceReached]: "the project holds as many live connections as its plan allows",
-  [chunk6PTRZP5U_cjs.VISITOR_CLOSE_CODES.addressLimitReached]: "this address holds as many live connections to the project as one address may",
-  [chunk6PTRZP5U_cjs.VISITOR_CLOSE_CODES.ceilingReached]: "the project is at its safety ceiling of live connections"
+  [chunkNN45CSPZ_cjs.VISITOR_CLOSE_CODES.requestInvalid]: "the edge could not read the request \u2014 a malformed cursor or filter",
+  [chunkNN45CSPZ_cjs.VISITOR_CLOSE_CODES.keyRefused]: "the key is not a publishable key the edge accepts \u2014 unknown, revoked or expired",
+  [chunkNN45CSPZ_cjs.VISITOR_CLOSE_CODES.originRefused]: "this page\u2019s origin is not on the publishable key\u2019s allowed origins",
+  [chunkNN45CSPZ_cjs.VISITOR_CLOSE_CODES.datasetRefused]: "`dataset` names no dataset the key reaches",
+  [chunkNN45CSPZ_cjs.VISITOR_CLOSE_CODES.unavailable]: "the edge could not serve this connection just now \u2014 it could not reach what it needed",
+  [chunkNN45CSPZ_cjs.VISITOR_CLOSE_CODES.allowanceReached]: "the project holds as many live connections as its plan allows",
+  [chunkNN45CSPZ_cjs.VISITOR_CLOSE_CODES.addressLimitReached]: "this address holds as many live connections to the project as one address may",
+  [chunkNN45CSPZ_cjs.VISITOR_CLOSE_CODES.ceilingReached]: "the project is at its safety ceiling of live connections"
 };
 async function* followPolls(client, request, reach, options) {
   const { signal } = options;
@@ -3203,11 +3559,11 @@ async function* followPolls(client, request, reach, options) {
       if (starting) options.reached?.(answer.cursor);
     }
     starting = false;
-    await sleep(chunk6PTRZP5U_cjs.VISITOR_POLL_INTERVAL_MS, signal);
+    await sleep(chunkNN45CSPZ_cjs.VISITOR_POLL_INTERVAL_MS, signal);
   }
   return isAborted(signal) ? "aborted" : "socket";
 }
-chunkMWMSFIWN_cjs.__name(followPolls, "followPolls");
+chunkL6DXCKVQ_cjs.__name(followPolls, "followPolls");
 async function pollOnce2(client, request, since, signal) {
   if (isAborted(signal)) return void 0;
   const url = edgeUrl(request, since, "poll", client.clientId);
@@ -3218,7 +3574,7 @@ async function pollOnce2(client, request, since, signal) {
     timedOut = true;
     controller.abort();
   }, client.timeout);
-  const onAbort = /* @__PURE__ */ chunkMWMSFIWN_cjs.__name(() => controller.abort(), "onAbort");
+  const onAbort = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name(() => controller.abort(), "onAbort");
   signal?.addEventListener("abort", onAbort, { once: true });
   try {
     let response;
@@ -3245,7 +3601,7 @@ async function pollOnce2(client, request, since, signal) {
     }
     const body = parseJson(text);
     if (!response.ok) throw refusedPoll(response, body, context);
-    const answer = chunk6PTRZP5U_cjs.readVisitorPollAnswer(isRecord(body) ? body["data"] : void 0);
+    const answer = chunkNN45CSPZ_cjs.readVisitorPollAnswer(isRecord(body) ? body["data"] : void 0);
     if (answer === null)
       throw unreadable(`a poll answer the wire does not declare: ${sample(text)}`);
     return answer;
@@ -3254,7 +3610,7 @@ async function pollOnce2(client, request, since, signal) {
     signal?.removeEventListener("abort", onAbort);
   }
 }
-chunkMWMSFIWN_cjs.__name(pollOnce2, "pollOnce");
+chunkL6DXCKVQ_cjs.__name(pollOnce2, "pollOnce");
 function refusedPoll(response, body, context) {
   const headers = {};
   response.headers.forEach((value, name) => {
@@ -3265,13 +3621,13 @@ function refusedPoll(response, body, context) {
     { ...context, method: "GET" }
   );
   const refusal = readError(body);
-  if (refusal === void 0 || !hasOwn(chunk6PTRZP5U_cjs.VISITOR_POLL_RETRY, refusal.code)) return mapped;
+  if (refusal === void 0 || !hasOwn(chunkNN45CSPZ_cjs.VISITOR_POLL_RETRY, refusal.code)) return mapped;
   const code = refusal.code;
   const retryAfterMs = parseRetryAfterMs(headerValue(headers, "Retry-After"), Date.now());
   return new LiveEdgeError(
     `The live edge refused a poll (${code}): ${refusal.messages[0] ?? mapped.message}`,
     { kind: "refused", code },
-    chunk6PTRZP5U_cjs.VISITOR_POLL_RETRY[code],
+    chunkNN45CSPZ_cjs.VISITOR_POLL_RETRY[code],
     {
       statusCode: response.status,
       cause: mapped,
@@ -3280,7 +3636,7 @@ function refusedPoll(response, body, context) {
     }
   );
 }
-chunkMWMSFIWN_cjs.__name(refusedPoll, "refusedPoll");
+chunkL6DXCKVQ_cjs.__name(refusedPoll, "refusedPoll");
 function edgeRequest(client, filter) {
   const key = client.apiKey;
   if (key === void 0 || !isPublishableKey(key)) {
@@ -3296,24 +3652,24 @@ function edgeRequest(client, filter) {
     ids: filter.ids
   };
 }
-chunkMWMSFIWN_cjs.__name(edgeRequest, "edgeRequest");
+chunkL6DXCKVQ_cjs.__name(edgeRequest, "edgeRequest");
 function edgeUrl(request, since, transport, clientId) {
   const url = new URL(request.base.href);
-  url.pathname = `${url.pathname.replace(/\/+$/, "")}${chunk6PTRZP5U_cjs.VISITOR_LIVE_PATH}`;
+  url.pathname = `${url.pathname.replace(/\/+$/, "")}${chunkNN45CSPZ_cjs.VISITOR_LIVE_PATH}`;
   if (transport === "socket") url.protocol = url.protocol === "http:" ? "ws:" : "wss:";
   const query = new URLSearchParams();
-  if (request.key !== void 0) query.set(chunk6PTRZP5U_cjs.VISITOR_QUERY.key, request.key);
+  if (request.key !== void 0) query.set(chunkNN45CSPZ_cjs.VISITOR_QUERY.key, request.key);
   if (request.dataset !== void 0 && request.dataset !== "") {
-    query.set(chunk6PTRZP5U_cjs.VISITOR_QUERY.dataset, request.dataset);
+    query.set(chunkNN45CSPZ_cjs.VISITOR_QUERY.dataset, request.dataset);
   }
-  if (since !== void 0) query.set(chunk6PTRZP5U_cjs.VISITOR_QUERY.since, since);
-  if (request.types !== void 0) query.set(chunk6PTRZP5U_cjs.VISITOR_QUERY.types, request.types.join(","));
-  if (request.ids !== void 0) query.set(chunk6PTRZP5U_cjs.VISITOR_QUERY.ids, request.ids.join(","));
-  if (transport === "poll" && clientId !== void 0) query.set(chunk6PTRZP5U_cjs.VISITOR_QUERY.client, clientId);
+  if (since !== void 0) query.set(chunkNN45CSPZ_cjs.VISITOR_QUERY.since, since);
+  if (request.types !== void 0) query.set(chunkNN45CSPZ_cjs.VISITOR_QUERY.types, request.types.join(","));
+  if (request.ids !== void 0) query.set(chunkNN45CSPZ_cjs.VISITOR_QUERY.ids, request.ids.join(","));
+  if (transport === "poll" && clientId !== void 0) query.set(chunkNN45CSPZ_cjs.VISITOR_QUERY.client, clientId);
   url.search = query.toString();
   return url.href;
 }
-chunkMWMSFIWN_cjs.__name(edgeUrl, "edgeUrl");
+chunkL6DXCKVQ_cjs.__name(edgeUrl, "edgeUrl");
 function changesOf(changes, cursor, prior) {
   const last = changes.length - 1;
   return changes.map((change, index) => ({
@@ -3325,14 +3681,14 @@ function changesOf(changes, cursor, prior) {
     fresh: cursor
   }));
 }
-chunkMWMSFIWN_cjs.__name(changesOf, "changesOf");
+chunkL6DXCKVQ_cjs.__name(changesOf, "changesOf");
 async function expire(reason, cursor, options) {
   const expired = ChangesExpiredError.resync(reason, cursor);
   const onExpired = options.onExpired ?? "throw";
   if (onExpired === "throw") throw expired;
   if (typeof onExpired === "function") await onExpired(expired);
 }
-chunkMWMSFIWN_cjs.__name(expire, "expire");
+chunkL6DXCKVQ_cjs.__name(expire, "expire");
 function unreadable(what) {
   return new LiveEdgeError(
     `The live edge sent ${what}. This version of the SDK cannot follow it, so it stopped.`,
@@ -3340,13 +3696,13 @@ function unreadable(what) {
     "stop"
   );
 }
-chunkMWMSFIWN_cjs.__name(unreadable, "unreadable");
+chunkL6DXCKVQ_cjs.__name(unreadable, "unreadable");
 var NEEDS_PUBLISHABLE_KEY = `Live updates at RelyIO\u2019s edge need a publishable key (\`${PUBLISHABLE_KEY_PREFIX}\u2026\`), and this client holds none. A secret or preview key is never sent to the edge; on a server, follow \`changes()\` with it instead. Nothing was sent.`;
 function sample(value) {
   const text = typeof value === "string" ? value : `(${typeof value})`;
   return text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
 }
-chunkMWMSFIWN_cjs.__name(sample, "sample");
+chunkL6DXCKVQ_cjs.__name(sample, "sample");
 function parseJson(text) {
   try {
     return JSON.parse(text);
@@ -3354,15 +3710,41 @@ function parseJson(text) {
     return void 0;
   }
 }
-chunkMWMSFIWN_cjs.__name(parseJson, "parseJson");
+chunkL6DXCKVQ_cjs.__name(parseJson, "parseJson");
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-chunkMWMSFIWN_cjs.__name(isRecord, "isRecord");
+chunkL6DXCKVQ_cjs.__name(isRecord, "isRecord");
 function hasOwn(object, key) {
   return Object.prototype.hasOwnProperty.call(object, key);
 }
-chunkMWMSFIWN_cjs.__name(hasOwn, "hasOwn");
+chunkL6DXCKVQ_cjs.__name(hasOwn, "hasOwn");
+
+// src/content/functions-client.ts
+var FUNCTION_CALL_TIMEOUT_MS = 31e4;
+async function callFunction(http, name, input, options) {
+  return await http.fetchPayload("/v1/functions/{name}", "post", {
+    path: { name },
+    body: { input },
+    headers: {
+      ...readHeaders({ dataset: options.dataset }),
+      ...options.idempotencyKey === void 0 ? {} : { [chunkNN45CSPZ_cjs.HEADER_IDEMPOTENCY_KEY.name]: options.idempotencyKey }
+    },
+    timeout: options.timeout ?? FUNCTION_CALL_TIMEOUT_MS,
+    ...signalOf(options)
+  });
+}
+chunkL6DXCKVQ_cjs.__name(callFunction, "callFunction");
+function functionsAccessor(http) {
+  return new Proxy({}, {
+    get: /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name((_target, property) => {
+      if (typeof property !== "string" || property === "then") return void 0;
+      const call = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name((input = {}, options = {}) => callFunction(http(), property, input, options), "call");
+      return call;
+    }, "get")
+  });
+}
+chunkL6DXCKVQ_cjs.__name(functionsAccessor, "functionsAccessor");
 
 // src/search/search-options.ts
 function scopeOf(contentType) {
@@ -3370,36 +3752,36 @@ function scopeOf(contentType) {
   if (typeof contentType === "string") return { contentType };
   return { contentTypes: [...contentType] };
 }
-chunkMWMSFIWN_cjs.__name(scopeOf, "scopeOf");
+chunkL6DXCKVQ_cjs.__name(scopeOf, "scopeOf");
 function selectedFields(select) {
   if (select === void 0 || select.length === 0) return {};
   return { fields: Object.fromEntries(select.map((field) => [field, field])) };
 }
-chunkMWMSFIWN_cjs.__name(selectedFields, "selectedFields");
+chunkL6DXCKVQ_cjs.__name(selectedFields, "selectedFields");
 function localeOf(own, client) {
   const locale = own ?? client;
   return locale === void 0 || locale === "" ? {} : { locale };
 }
-chunkMWMSFIWN_cjs.__name(localeOf, "localeOf");
+chunkL6DXCKVQ_cjs.__name(localeOf, "localeOf");
 function whereOf(where) {
   if (where === void 0) return {};
   refuseMetadataConditions(where);
   return Object.keys(where).length === 0 ? {} : { where };
 }
-chunkMWMSFIWN_cjs.__name(whereOf, "whereOf");
+chunkL6DXCKVQ_cjs.__name(whereOf, "whereOf");
 function given(options) {
   return Object.fromEntries(Object.entries(options).filter(([, value]) => value !== void 0));
 }
-chunkMWMSFIWN_cjs.__name(given, "given");
+chunkL6DXCKVQ_cjs.__name(given, "given");
 function transportOf(options) {
   const headers = readHeaders(options);
   return {
     ...signalOf(options),
     ...headers === void 0 ? {} : { headers },
-    ...typeof options.fresh === "string" ? { query: { [chunk6PTRZP5U_cjs.FRESH_PARAMETER]: options.fresh } } : {}
+    ...typeof options.fresh === "string" ? { query: { [chunkNN45CSPZ_cjs.FRESH_PARAMETER]: options.fresh } } : {}
   };
 }
-chunkMWMSFIWN_cjs.__name(transportOf, "transportOf");
+chunkL6DXCKVQ_cjs.__name(transportOf, "transportOf");
 async function runSearch(http, q, options, clientLocale) {
   const sort = options.sort === void 0 ? [] : Object.entries(options.sort).flatMap(
     ([field, direction]) => direction === void 0 ? [] : [{ field, direction }]
@@ -3433,7 +3815,7 @@ async function runSearch(http, q, options, clientLocale) {
   );
   return response.body;
 }
-chunkMWMSFIWN_cjs.__name(runSearch, "runSearch");
+chunkL6DXCKVQ_cjs.__name(runSearch, "runSearch");
 async function runAutocomplete(http, q, options, clientLocale) {
   const body = {
     q,
@@ -3451,7 +3833,7 @@ async function runAutocomplete(http, q, options, clientLocale) {
   );
   return response.body;
 }
-chunkMWMSFIWN_cjs.__name(runAutocomplete, "runAutocomplete");
+chunkL6DXCKVQ_cjs.__name(runAutocomplete, "runAutocomplete");
 async function runSimilar(http, source, options, clientLocale) {
   const body = {
     source,
@@ -3467,7 +3849,7 @@ async function runSimilar(http, source, options, clientLocale) {
   );
   return response.body;
 }
-chunkMWMSFIWN_cjs.__name(runSimilar, "runSimilar");
+chunkL6DXCKVQ_cjs.__name(runSimilar, "runSimilar");
 
 // src/batch/batch-operations.ts
 var VERBS = ["create", "update", "replace", "delete", "singleton"];
@@ -3490,7 +3872,7 @@ async function runBatch(http, operations, options, clientLocale) {
   });
   return response.body;
 }
-chunkMWMSFIWN_cjs.__name(runBatch, "runBatch");
+chunkL6DXCKVQ_cjs.__name(runBatch, "runBatch");
 function operationOf(operation, index, clientLocale) {
   const named = VERBS.filter((verb2) => operation[verb2] !== void 0);
   const verb = named[0];
@@ -3506,7 +3888,7 @@ function operationOf(operation, index, clientLocale) {
     ...parentId === void 0 ? {} : { parentId },
     ...sortOrder === void 0 ? {} : { sortOrder }
   };
-  const located = /* @__PURE__ */ chunkMWMSFIWN_cjs.__name((locale) => locale === void 0 ? {} : { locale }, "located");
+  const located = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name((locale) => locale === void 0 ? {} : { locale }, "located");
   switch (verb) {
     case "create": {
       return {
@@ -3546,7 +3928,7 @@ function operationOf(operation, index, clientLocale) {
     }
   }
 }
-chunkMWMSFIWN_cjs.__name(operationOf, "operationOf");
+chunkL6DXCKVQ_cjs.__name(operationOf, "operationOf");
 function targetOf(operation, clientLocale) {
   if (operation.entry !== void 0) return versionCheckOf(operation.entry);
   if (operation.id === void 0) {
@@ -3557,7 +3939,7 @@ function targetOf(operation, clientLocale) {
   const locale = callLocale(operation.locale, clientLocale);
   return { id: operation.id, ...locale === void 0 ? {} : { locale } };
 }
-chunkMWMSFIWN_cjs.__name(targetOf, "targetOf");
+chunkL6DXCKVQ_cjs.__name(targetOf, "targetOf");
 
 // src/queries/query-call.ts
 async function runAdhocQuery(http, query, clientLocale) {
@@ -3577,7 +3959,7 @@ async function runAdhocQuery(http, query, clientLocale) {
   const terms = {};
   if (query.cursor !== void 0) terms.cursor = query.cursor;
   writeLocale(terms, query.locale ?? clientLocale);
-  if (typeof query.fresh === "string") terms[chunk6PTRZP5U_cjs.FRESH_PARAMETER] = query.fresh;
+  if (typeof query.fresh === "string") terms[chunkNN45CSPZ_cjs.FRESH_PARAMETER] = query.fresh;
   const parameters = { ...query.params };
   const body = {
     query: {
@@ -3597,7 +3979,7 @@ async function runAdhocQuery(http, query, clientLocale) {
   });
   return response.body;
 }
-chunkMWMSFIWN_cjs.__name(runAdhocQuery, "runAdhocQuery");
+chunkL6DXCKVQ_cjs.__name(runAdhocQuery, "runAdhocQuery");
 function offsetOf(page, limit) {
   if (limit === void 0 || !Number.isInteger(page) || page < 1) {
     throw new ValidationError(
@@ -3607,12 +3989,12 @@ function offsetOf(page, limit) {
   }
   return (page - 1) * limit;
 }
-chunkMWMSFIWN_cjs.__name(offsetOf, "offsetOf");
+chunkL6DXCKVQ_cjs.__name(offsetOf, "offsetOf");
 async function runNamedQuery(http, name, options, clientLocale) {
   const locale = options.locale ?? clientLocale;
   const terms = {};
   if (locale !== void 0 && locale !== "") terms.locale = locale;
-  if (typeof options.fresh === "string") terms[chunk6PTRZP5U_cjs.FRESH_PARAMETER] = options.fresh;
+  if (typeof options.fresh === "string") terms[chunkNN45CSPZ_cjs.FRESH_PARAMETER] = options.fresh;
   const headers = readHeaders(options);
   const response = await http.send(
     "/v1/queries/{name}",
@@ -3627,17 +4009,17 @@ async function runNamedQuery(http, name, options, clientLocale) {
   );
   return response.body;
 }
-chunkMWMSFIWN_cjs.__name(runNamedQuery, "runNamedQuery");
+chunkL6DXCKVQ_cjs.__name(runNamedQuery, "runNamedQuery");
 
 // src/config/dev-detection.ts
 function sandboxStateOf(resolution) {
   return resolution.state === "active" ? resolution.sandbox : resolution;
 }
-chunkMWMSFIWN_cjs.__name(sandboxStateOf, "sandboxStateOf");
+chunkL6DXCKVQ_cjs.__name(sandboxStateOf, "sandboxStateOf");
 function getProcess() {
   return typeof process !== "undefined" ? process : void 0;
 }
-chunkMWMSFIWN_cjs.__name(getProcess, "getProcess");
+chunkL6DXCKVQ_cjs.__name(getProcess, "getProcess");
 function getBuiltin(proc, id) {
   if (proc == null || typeof proc.getBuiltinModule !== "function") return null;
   try {
@@ -3646,13 +4028,13 @@ function getBuiltin(proc, id) {
     return null;
   }
 }
-chunkMWMSFIWN_cjs.__name(getBuiltin, "getBuiltin");
+chunkL6DXCKVQ_cjs.__name(getBuiltin, "getBuiltin");
 function isProduction(proc) {
   return proc?.env?.NODE_ENV === "production";
 }
-chunkMWMSFIWN_cjs.__name(isProduction, "isProduction");
+chunkL6DXCKVQ_cjs.__name(isProduction, "isProduction");
 function resolveFromEnv(proc, now) {
-  const verdict = chunkLSRPMNPT_cjs.parseDevEnv(proc?.env, now);
+  const verdict = chunkZO6QDYJG_cjs.parseDevEnv(proc?.env, now);
   switch (verdict.state) {
     case "active":
       return {
@@ -3674,7 +4056,7 @@ function resolveFromEnv(proc, now) {
       return { state: "absent" };
   }
 }
-chunkMWMSFIWN_cjs.__name(resolveFromEnv, "resolveFromEnv");
+chunkL6DXCKVQ_cjs.__name(resolveFromEnv, "resolveFromEnv");
 function resolveFromFile(proc, now) {
   if (proc == null || typeof proc.cwd !== "function") return { state: "absent" };
   const fs = getBuiltin(proc, "node:fs");
@@ -3682,7 +4064,7 @@ function resolveFromFile(proc, now) {
   if (fs == null || path == null) return { state: "absent" };
   let dir = proc.cwd();
   for (; ; ) {
-    const candidate = path.join(dir, chunkLSRPMNPT_cjs.DEV_CONTEXT_DIR, chunkLSRPMNPT_cjs.DEV_CONTEXT_FILENAME);
+    const candidate = path.join(dir, chunkZO6QDYJG_cjs.DEV_CONTEXT_DIR, chunkZO6QDYJG_cjs.DEV_CONTEXT_FILENAME);
     let raw = null;
     try {
       if (fs.existsSync(candidate)) raw = fs.readFileSync(candidate, "utf8");
@@ -3690,7 +4072,7 @@ function resolveFromFile(proc, now) {
       return { state: "absent" };
     }
     if (raw !== null) {
-      const verdict = chunkLSRPMNPT_cjs.parseDevContextFile(raw, now);
+      const verdict = chunkZO6QDYJG_cjs.parseDevContextFile(raw, now);
       switch (verdict.state) {
         case "active":
           return {
@@ -3718,7 +4100,7 @@ function resolveFromFile(proc, now) {
   }
   return { state: "absent" };
 }
-chunkMWMSFIWN_cjs.__name(resolveFromFile, "resolveFromFile");
+chunkL6DXCKVQ_cjs.__name(resolveFromFile, "resolveFromFile");
 function resolveDevOverride(dev) {
   if (dev === false) return { state: "disabled" };
   const proc = getProcess();
@@ -3728,18 +4110,18 @@ function resolveDevOverride(dev) {
   if (fromEnv.state !== "absent") return fromEnv;
   return resolveFromFile(proc, now);
 }
-chunkMWMSFIWN_cjs.__name(resolveDevOverride, "resolveDevOverride");
+chunkL6DXCKVQ_cjs.__name(resolveDevOverride, "resolveDevOverride");
 
 // src/config/preview-environment.ts
 function readPreviewAtRequest() {
   const env = typeof process === "undefined" ? void 0 : process.env;
-  return chunk6PTRZP5U_cjs.previewAtRequest(isEnvironment(env) ? env : {});
+  return chunk7I3SC7SV_cjs.previewAtRequest(isEnvironment(env) ? env : {});
 }
-chunkMWMSFIWN_cjs.__name(readPreviewAtRequest, "readPreviewAtRequest");
+chunkL6DXCKVQ_cjs.__name(readPreviewAtRequest, "readPreviewAtRequest");
 function isEnvironment(value) {
   return typeof value === "object" && value !== null;
 }
-chunkMWMSFIWN_cjs.__name(isEnvironment, "isEnvironment");
+chunkL6DXCKVQ_cjs.__name(isEnvironment, "isEnvironment");
 
 // src/config/types.ts
 var DEFAULT_CONFIG = {
@@ -3782,6 +4164,9 @@ function validateConfig(config) {
   if (config.webSocket != null && typeof config.webSocket !== "function") {
     throw new Error("webSocket must be a WebSocket class");
   }
+  if (config.getToken != null && typeof config.getToken !== "function") {
+    throw new Error("getToken must be a function that answers the End user\u2019s token, or null");
+  }
   if (config.timeout != null) assertRequestTimeout(config.timeout);
   if (config.retryAttempts != null && !(Number.isInteger(config.retryAttempts) && config.retryAttempts >= 1)) {
     throw new Error(
@@ -3789,27 +4174,27 @@ function validateConfig(config) {
     );
   }
 }
-chunkMWMSFIWN_cjs.__name(validateConfig, "validateConfig");
+chunkL6DXCKVQ_cjs.__name(validateConfig, "validateConfig");
 var devOverrideNotified = false;
 function resolveConfig(userConfig) {
   validateConfig(userConfig);
   return withHandshake(withDefaults(DEFAULT_CONFIG, userConfig, DEFAULT_CONFIG));
 }
-chunkMWMSFIWN_cjs.__name(resolveConfig, "resolveConfig");
+chunkL6DXCKVQ_cjs.__name(resolveConfig, "resolveConfig");
 function resolveConfigUpdate(configured, update) {
   validateConfig(update);
   const base = update.apiKey === void 0 ? configured : withoutKeyHeader(configured);
   return withHandshake(withDefaults(base, update, DEFAULT_CONFIG));
 }
-chunkMWMSFIWN_cjs.__name(resolveConfigUpdate, "resolveConfigUpdate");
+chunkL6DXCKVQ_cjs.__name(resolveConfigUpdate, "resolveConfigUpdate");
 function withConfiguredKey(configured, apiKey) {
   return { ...withoutKeyHeader(configured), apiKey };
 }
-chunkMWMSFIWN_cjs.__name(withConfiguredKey, "withConfiguredKey");
+chunkL6DXCKVQ_cjs.__name(withConfiguredKey, "withConfiguredKey");
 function withoutKeyHeader(configured) {
   return { ...configured, headers: layerHeaders(configured.headers, { [API_KEY_HEADER]: null }) };
 }
-chunkMWMSFIWN_cjs.__name(withoutKeyHeader, "withoutKeyHeader");
+chunkL6DXCKVQ_cjs.__name(withoutKeyHeader, "withoutKeyHeader");
 function withHandshake(configured) {
   const dev = resolveDevOverride(configured.dev);
   const merged = withDefaults(
@@ -3837,13 +4222,13 @@ function withHandshake(configured) {
   }
   return { config: merged, sandbox: sandboxStateOf(dev), configured };
 }
-chunkMWMSFIWN_cjs.__name(withHandshake, "withHandshake");
+chunkL6DXCKVQ_cjs.__name(withHandshake, "withHandshake");
 var previewNotified = false;
 function withPreview(configured) {
   if (configured.dataset !== void 0 || !isPreviewKey(configured.apiKey)) return configured;
   const preview = readPreviewAtRequest();
   if (preview.state !== "preview") return configured;
-  const dataset = chunk6PTRZP5U_cjs.previewDatasetSlug(preview.branch);
+  const dataset = chunkNN45CSPZ_cjs.previewDatasetSlug(preview.branch);
   noteDerivedPreview(dataset);
   if (!previewNotified) {
     previewNotified = true;
@@ -3853,7 +4238,7 @@ function withPreview(configured) {
   }
   return { ...configured, dataset };
 }
-chunkMWMSFIWN_cjs.__name(withPreview, "withPreview");
+chunkL6DXCKVQ_cjs.__name(withPreview, "withPreview");
 function withDefaults(base, given2, defaults) {
   const merged = new Map(Object.entries(base));
   const givenValues = new Map(Object.entries(given2 ?? {}));
@@ -3876,11 +4261,11 @@ function withDefaults(base, given2, defaults) {
   }
   return Object.fromEntries(merged);
 }
-chunkMWMSFIWN_cjs.__name(withDefaults, "withDefaults");
+chunkL6DXCKVQ_cjs.__name(withDefaults, "withDefaults");
 function isOptionBag(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-chunkMWMSFIWN_cjs.__name(isOptionBag, "isOptionBag");
+chunkL6DXCKVQ_cjs.__name(isOptionBag, "isOptionBag");
 
 // src/client/create-client.ts
 var _TypedRelyIOClient = class _TypedRelyIOClient {
@@ -3889,31 +4274,78 @@ var _TypedRelyIOClient = class _TypedRelyIOClient {
      * The one HTTP client every sub-client sends through. `updateConfig()` and `setApiKey()` change it
      * in place rather than replacing it, so a sub-client taken before either sends through the change.
      */
-    chunkMWMSFIWN_cjs.__publicField(this, "httpClient");
-    chunkMWMSFIWN_cjs.__publicField(this, "config");
+    chunkL6DXCKVQ_cjs.__publicField(this, "httpClient");
+    chunkL6DXCKVQ_cjs.__publicField(this, "config");
     /**
      * The configuration as `createClient()`, `setApiKey()` and `updateConfig()` gave it, before the
      * `relyio dev` handshake: what the next update is laid over, and what `with()` starts from.
      */
-    chunkMWMSFIWN_cjs.__publicField(this, "configured");
-    chunkMWMSFIWN_cjs.__publicField(this, "_sandbox");
-    chunkMWMSFIWN_cjs.__publicField(this, "_schema");
+    chunkL6DXCKVQ_cjs.__publicField(this, "configured");
+    chunkL6DXCKVQ_cjs.__publicField(this, "_sandbox");
+    chunkL6DXCKVQ_cjs.__publicField(this, "_schema");
     /**
      * The client's locale as it is when a call is made. Every sub-client and builder is handed this
      * rather than a copy of the locale, so one taken before `updateConfig({ locale })` sends the new
      * locale, or none after `locale: null` (REL-1453).
      */
-    chunkMWMSFIWN_cjs.__publicField(this, "currentLocale", /* @__PURE__ */ chunkMWMSFIWN_cjs.__name(() => this.defaults.locale ?? (this.parent === void 0 ? this.config.locale : this.parent.currentLocale()), "currentLocale"));
+    chunkL6DXCKVQ_cjs.__publicField(this, "currentLocale", /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name(() => this.defaults.locale ?? (this.parent === void 0 ? this.config.locale : this.parent.currentLocale()), "currentLocale"));
     /**
      * The client `with()` was called on, for a client it made: whose key, base URL and configuration
      * this one reads with as they are when each request is sent. `undefined` for a client
      * `createClient()` made, which reads its own.
      */
-    chunkMWMSFIWN_cjs.__publicField(this, "parent");
-    /** What `with()` gave this client over its parent's: the locale and dataset it names, and no other. */
-    chunkMWMSFIWN_cjs.__publicField(this, "defaults", {});
+    chunkL6DXCKVQ_cjs.__publicField(this, "parent");
+    /**
+     * What `with()` gave this client over its parent's: the locale, dataset and End user's token
+     * function it names, and no other.
+     */
+    chunkL6DXCKVQ_cjs.__publicField(this, "defaults", {});
     /** The live edge's poll client id: chosen once, when first needed, and kept for this client's life. */
-    chunkMWMSFIWN_cjs.__publicField(this, "_liveClientId");
+    chunkL6DXCKVQ_cjs.__publicField(this, "_liveClientId");
+    /**
+     * The Records of one Record type (spec 1, REL-3771): `create`, `list`, `get`, `update`, `delete`.
+     * Type-safe when a schema is provided — the names autocomplete its `recordTypes` and the fields
+     * are the type's. `relyio.records.batch([...])` writes Records of any types in one transaction,
+     * all or none (REL-3774).
+     *
+     * A Record is an app's data, written by your server with a secret key and live the moment it
+     * lands. A publishable key reads the Records a Record type's read Policy grants it (spec 4,
+     * REL-3883), and writes them only for the End user whose token it carries, as the type's write
+     * Policy allows (REL-3884); with no token it writes nothing (`PUBLISHABLE_KEY_REFUSED`).
+     *
+     * @example
+     * ```typescript
+     * const order = await relyio.records('order').create({ shopperEmail: 'ada@example.com', total: 19 })
+     * const { data: orders } = await relyio.records('order').list({ where: { status: 'paid' } })
+     * await relyio.records.batch([
+     *   { op: 'decrement', type: 'inventory', where: { product: mugId }, field: 'available', by: 1 },
+     *   { op: 'create', type: 'order', fields: { shopperEmail: 'ada@example.com', total: 19 } },
+     * ])
+     * ```
+     */
+    chunkL6DXCKVQ_cjs.__publicField(this, "records", Object.assign(
+      (recordType) => new RecordsClient(this.httpClient, recordType),
+      {
+        // Read when called, never when made: `with()` and `updateConfig()` move `httpClient`
+        batch: /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name((operations, options) => sendRecordBatch(this.httpClient, operations, options), "batch")
+      }
+      // The one function both call signatures describe; the cast restates the schema's typing of its
+      // argument and answer, as `content()` does, and widens nothing it is called with.
+    ));
+    /**
+     * The project's Functions, by name (spec 2, REL-3821): `relyio.functions.checkout({ cartId })`
+     * runs the Function `checkout` that the key's Branch runs, on the key's Dataset, and answers its
+     * output. Call it from your server with a secret key; a run that failed throws
+     * `FunctionRunFailedError` and one past five minutes `FunctionRunTimedOutError`, each naming the
+     * run. Never retried: a Function may write.
+     *
+     * @example
+     * ```typescript
+     * const { orderId } = (await relyio.functions.checkout({ cartId })) as { orderId: string }
+     * ```
+     */
+    // Read when called, never when made: `with()` and `updateConfig()` move `httpClient`
+    chunkL6DXCKVQ_cjs.__publicField(this, "functions", functionsAccessor(() => this.httpClient));
     const { schema, ...clientConfig } = config;
     this._schema = schema;
     const resolved = resolveConfig(clientConfig);
@@ -3957,7 +4389,7 @@ var _TypedRelyIOClient = class _TypedRelyIOClient {
    * its own.
    */
   get query() {
-    const call = /* @__PURE__ */ chunkMWMSFIWN_cjs.__name((target, options = {}) => typeof target === "string" ? runNamedQuery(this.httpClient, target, options, this.currentLocale()) : runAdhocQuery(this.httpClient, target, this.currentLocale()), "call");
+    const call = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name((target, options = {}) => typeof target === "string" ? runNamedQuery(this.httpClient, target, options, this.currentLocale()) : runAdhocQuery(this.httpClient, target, this.currentLocale()), "call");
     return call;
   }
   // ============================================================================
@@ -4363,6 +4795,9 @@ var _TypedRelyIOClient = class _TypedRelyIOClient {
    * const { data } = await staging.content('post').list({ limit: 10 })
    *
    * const french = relyio.with({ locale: 'fr-FR' }) // ← autocompletes the schema's locales
+   *
+   * // Every request this one sends carries the signed-in End user's token (REL-3882)
+   * const visitor = relyio.with({ getToken: () => session.getToken() })
    * ```
    */
   with(defaults) {
@@ -4376,14 +4811,16 @@ var _TypedRelyIOClient = class _TypedRelyIOClient {
   }
   /** Make this client one `with()` made from `parent`: see {@link with}. */
   follow(parent, defaults) {
-    const { locale, dataset } = defaults;
+    const { locale, dataset, getToken } = defaults;
     this.parent = parent;
     this.defaults = {
       ...locale === void 0 ? {} : { locale },
-      ...dataset === void 0 ? {} : { dataset }
+      ...dataset === void 0 ? {} : { dataset },
+      ...getToken === void 0 ? {} : { getToken }
     };
     this.httpClient = parent.httpClient.withHeaders(
-      dataset === void 0 ? {} : { [DATASET_HEADER]: dataset }
+      dataset === void 0 ? {} : { [DATASET_HEADER]: dataset },
+      getToken === void 0 ? {} : { getToken }
     );
   }
   /**
@@ -4414,12 +4851,12 @@ var _TypedRelyIOClient = class _TypedRelyIOClient {
     return locales.map((locale) => ({ ...locale, default: locale.code === defaultLocale }));
   }
 };
-chunkMWMSFIWN_cjs.__name(_TypedRelyIOClient, "TypedRelyIOClient");
+chunkL6DXCKVQ_cjs.__name(_TypedRelyIOClient, "TypedRelyIOClient");
 var TypedRelyIOClient = _TypedRelyIOClient;
 function createClient(config) {
   return new TypedRelyIOClient(config);
 }
-chunkMWMSFIWN_cjs.__name(createClient, "createClient");
+chunkL6DXCKVQ_cjs.__name(createClient, "createClient");
 function randomClientId() {
   const bytes = new Uint8Array(16);
   const random = globalThis.crypto;
@@ -4432,7 +4869,7 @@ function randomClientId() {
   }
   return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
-chunkMWMSFIWN_cjs.__name(randomClientId, "randomClientId");
+chunkL6DXCKVQ_cjs.__name(randomClientId, "randomClientId");
 
 exports.AssetClient = AssetClient;
 exports.AssetFileBuilder = AssetFileBuilder;
@@ -4443,9 +4880,13 @@ exports.ChangesExpiredError = ChangesExpiredError;
 exports.ConnectionError = ConnectionError;
 exports.ContentClient = ContentClient;
 exports.DefaultRetryPolicy = DefaultRetryPolicy;
+exports.EndUserTokenInvalidError = EndUserTokenInvalidError;
 exports.ErrorMapper = ErrorMapper;
 exports.FileUploadError = FileUploadError;
 exports.FileValidationError = FileValidationError;
+exports.FunctionContainersBusyError = FunctionContainersBusyError;
+exports.FunctionRunFailedError = FunctionRunFailedError;
+exports.FunctionRunTimedOutError = FunctionRunTimedOutError;
 exports.HttpClient = HttpClient;
 exports.InvalidApiKeyError = InvalidApiKeyError;
 exports.InvalidPayloadError = InvalidPayloadError;
@@ -4459,8 +4900,10 @@ exports.PREVIEW_KEY_PREFIX = PREVIEW_KEY_PREFIX;
 exports.PUBLISHABLE_KEY_PREFIX = PUBLISHABLE_KEY_PREFIX;
 exports.PayloadTooLargeError = PayloadTooLargeError;
 exports.PlanFeatureUnavailableError = PlanFeatureUnavailableError;
+exports.PublishableKeyRefusedError = PublishableKeyRefusedError;
 exports.RateLimitError = RateLimitError;
 exports.ReadOnlyKeyError = ReadOnlyKeyError;
+exports.RecordsClient = RecordsClient;
 exports.ResourceConflictError = ResourceConflictError;
 exports.ResourceExpiredError = ResourceExpiredError;
 exports.ResourceNotFoundError = ResourceNotFoundError;
@@ -4484,10 +4927,11 @@ exports.isPublishableKey = isPublishableKey;
 exports.isReplaySafe = isReplaySafe;
 exports.isResourceNotFound = isResourceNotFound;
 exports.matchRoute = matchRoute;
+exports.refusedOperationOf = refusedOperationOf;
 exports.retryPolicyFor = retryPolicyFor;
 exports.serviceInstructedDelayMs = serviceInstructedDelayMs;
 exports.sleep = sleep;
 exports.validateFile = validateFile;
 exports.versionCheckOf = versionCheckOf;
-//# sourceMappingURL=chunk-6E22GYPB.cjs.map
-//# sourceMappingURL=chunk-6E22GYPB.cjs.map
+//# sourceMappingURL=chunk-P23G5NXD.cjs.map
+//# sourceMappingURL=chunk-P23G5NXD.cjs.map