@sequenceholdings/managed-functions 0.3.5 → 0.4.1

package/README.md

@@ -1,5 +1,75 @@
 # `@sequenceholdings/managed-functions`
 
+## Group-member directory lookup (internal rollout)
+
+Functions can resolve selected members of existing Atlas groups to active,
+canonical user identities. This is an opt-in read capability, not a staff
+registry, permission grant, arbitrary directory search, or authentication API.
+
+```yaml
+capabilities:
+  directory:
+    groups: ["<existing-group-id>"]
+```
+
+```ts
+import { createFunctionDirectoryClient } from '@sequenceholdings/managed-functions'
+
+const directory = createFunctionDirectoryClient({
+  baseUrl: process.env.ATLAS_ORIGIN!,
+  request: req,
+})
+const { members } = await directory.resolveMembers({
+  groupId,
+  subs: [selectedCanonicalSubject],
+})
+```
+
+Use `userIds` instead of `subs` to resolve row IDs selected from the existing
+group picker; never submit both. Each call accepts 1–50 selectors. Missing,
+disabled, tombstoned, wrong-tenant, or nonmember selections are omitted. Exact
+subject lookup does not accept an email alias. For a save, require the selected
+subject to appear exactly in the response; a failed request is not an empty
+successful lookup. Historical display labels may retain inactive identities,
+but cannot validate a new assignment.
+
+Atlas supplies a dedicated five-minute `x-sequence-directory-token` only for
+declared groups on direct human invocations. System runners and service accounts
+are not supported. Each read rechecks current function invocation access,
+active version, declared group scope, active caller, caller group visibility,
+and active target identities inside the function's tenant. No service identity
+widens the caller's directory visibility. The function still enforces its own
+application action permissions. Validation is point-in-time, not atomic with
+an application's later transaction.
+
+Directory and process-read clients share the SDK's invocation transport and
+`{ request, baseUrl, fetchImpl? }` options. Both accept Fetch `Headers` or Node
+request headers (case-insensitively), reject duplicate credentials, check expiry
+before each read, and validate responses. `FunctionDirectoryReadError` exposes
+`status` and `code`, like `FunctionProcessReadError`; failures are never an empty
+member list. Directory replies must contain only distinct requested identities.
+Sharing transport does not share authority: process reads retain service-account
+credentials, while directory reads retain their separate human-caller credential.
+
+The internal SDK bridge is `POST /api/managed-functions/directory/members`;
+ordinary Auth0 bearers, storage tokens and ORM tokens do not authenticate it.
+Results are not cached; successful reads emit an audit event. The client never
+follows redirects or forwards an unrelated credential. Allow the Atlas origin
+in the function's existing egress policy. Reviewed Atlas/CLI and SDK releases
+are required before consumers opt in (SDK 0.4.1+, CLI 0.5.2+, and Atlas
+advertising `directory_members`). Preflight rejects absent/disabled support
+and incompatible tooling before upload; older deployments do not supply the
+header. This addition does not activate or redeploy any consumer. The existing
+package root remains Preview/blocked on publication; the raw HTTP route is
+internal, not a new public API contract.
+
+Tenant deployments reuse `ATLAS_ARTIFACT_STUDIO_SIGNING_KEY`, already provided
+by the OpCo secrets catalog for Managed Functions. Delegation uses a separate
+HMAC domain, audience, environment, function version and invocation binding.
+There are no new secrets, migrations, groups or grants. Missing signing
+configuration fails closed, including local development.
+
+
 `@sequenceholdings/managed-functions` is the TypeScript SDK for Managed
 Functions. It provides caller-scoped ORM access, explicit service-account ORM
 access, and opt-in caching. The
@@ -13,6 +83,29 @@ function consumer or branch on a function ID.
 
 ## ORM as the invoking user
 
+### Default SQL (planned SDK 0.4.0)
+
+With the matching Atlas runtime, use the same caller-scoped executor without
+an operation manifest:
+
+```ts
+const orm = createFunctionOrmExecutor({ request, baseUrl: platformOrigin, namespace: 'lending' })
+const result = await orm.sql({
+  sql: `SELECT l.id, c.name FROM lending.loans l
+    JOIN party.customers c ON c.id = l."customerId"`,
+})
+```
+
+The invocation still needs its existing declared data bindings covering every
+read object, including policy dependencies. SQL does not grant extra access.
+Namespace access, row policies, foreign exports and optional consumer contracts
+remain enforced. Results contain `columns`, array-valued `rows`, and `truncated`;
+numeric/bigint SQL results are always exact strings. Read-only SELECT queries
+are bounded to 1,000 rows / 8 MiB. Source versions are not proof of publication
+or server rollout; the registered-operation workflow below remains supported.
+
+### Registered operations
+
 Available in SDK **0.2.0 and later**. Install the SDK in the function package;
 the separate ORM authoring/compiler package is not needed in the deployed
 function. Copy the namespace's generated `operations.manifest.json` into that

package/dist/capabilities.d.ts

@@ -13,6 +13,13 @@ export declare const MANAGED_FUNCTION_CAPABILITIES: {
         };
     };
     readonly features: {
+        readonly directory_members: {
+            readonly field: "capabilities.directory.groups";
+            readonly supported: true;
+            readonly limit: "1 to 16 concrete groups; resolve 1 to 50 selected active members per call";
+            readonly min_cli: "0.5.2";
+            readonly min_sdk: "0.4.1";
+        };
         readonly processes_read: {
             readonly field: "capabilities.processes.read";
             readonly supported: true;
@@ -57,6 +64,13 @@ export interface CapabilityTooling {
 export interface ManagedFunctionCapabilities {
     tooling: CapabilityTooling;
     features: {
+        directory_members?: {
+            field: string;
+            supported: boolean;
+            limit: string;
+            min_cli: string;
+            min_sdk: string;
+        };
         processes_read?: {
             field: string;
             supported: boolean;
@@ -108,6 +122,7 @@ export interface PreflightManifest {
         data?: Readonly<Record<string, unknown>>;
         storage?: unknown;
         processes?: unknown;
+        directory?: unknown;
     };
 }
 export interface PreflightIssue {

package/dist/capabilities.js

@@ -15,6 +15,13 @@ exports.MANAGED_FUNCTION_CAPABILITIES = {
         sdk: { package: exports.MANAGED_FUNCTION_SDK_PACKAGE, min: '0.3.0' },
     },
     features: {
+        directory_members: {
+            field: 'capabilities.directory.groups',
+            supported: true,
+            limit: '1 to 16 concrete groups; resolve 1 to 50 selected active members per call',
+            min_cli: '0.5.2',
+            min_sdk: '0.4.1',
+        },
         processes_read: {
             field: 'capabilities.processes.read',
             supported: true,

package/dist/config.d.ts

@@ -1,3 +1,4 @@
+export { DIRECTORY_TOKEN_HEADER, directoryGroupIdSchema, directoryScopesSchema, directoryMembersInput, directoryMembersResponse, readDirectoryGroups } from './directory-config';
 export { FUNCTION_PROCESS_TOKEN_HEADER, FUNCTION_PROCESS_READ_PATH, functionProcessReadScopesSchema, readFunctionProcessScopes, functionProcessReadRequestSchema, functionProcessRunSummarySchema } from './processes-contract';
 export { shouldReportAtlasHttp } from './http-tracing';
 import { z } from 'zod';

package/dist/config.js

@@ -1,7 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.cacheManifestSchema = exports.CACHE_MAX_TTL_SECONDS = exports.preflightManagedFunction = exports.parseDeployedPolicy = exports.versionIsOlder = exports.sdkVersionLowerBound = exports.sdkVersionFromPackageJson = exports.isPostgresEgress = exports.formatValidationDetail = exports.MANAGED_FUNCTION_SDK_PACKAGE = exports.MANAGED_FUNCTION_CLI_PACKAGE = exports.MANAGED_FUNCTION_CAPABILITIES = exports.managedFunctionWorkloadLimitsSchema = exports.MF_LIMITS_DEFAULTS = exports.MF_LIMITS_CAPS = exports.MANAGED_FUNCTION_LIMITS = exports.shouldReportAtlasHttp = exports.functionProcessRunSummarySchema = exports.functionProcessReadRequestSchema = exports.readFunctionProcessScopes = exports.functionProcessReadScopesSchema = exports.FUNCTION_PROCESS_READ_PATH = exports.FUNCTION_PROCESS_TOKEN_HEADER = void 0;
+exports.cacheManifestSchema = exports.CACHE_MAX_TTL_SECONDS = exports.preflightManagedFunction = exports.parseDeployedPolicy = exports.versionIsOlder = exports.sdkVersionLowerBound = exports.sdkVersionFromPackageJson = exports.isPostgresEgress = exports.formatValidationDetail = exports.MANAGED_FUNCTION_SDK_PACKAGE = exports.MANAGED_FUNCTION_CLI_PACKAGE = exports.MANAGED_FUNCTION_CAPABILITIES = exports.managedFunctionWorkloadLimitsSchema = exports.MF_LIMITS_DEFAULTS = exports.MF_LIMITS_CAPS = exports.MANAGED_FUNCTION_LIMITS = exports.shouldReportAtlasHttp = exports.functionProcessRunSummarySchema = exports.functionProcessReadRequestSchema = exports.readFunctionProcessScopes = exports.functionProcessReadScopesSchema = exports.FUNCTION_PROCESS_READ_PATH = exports.FUNCTION_PROCESS_TOKEN_HEADER = exports.readDirectoryGroups = exports.directoryMembersResponse = exports.directoryMembersInput = exports.directoryScopesSchema = exports.directoryGroupIdSchema = exports.DIRECTORY_TOKEN_HEADER = void 0;
 exports.readCacheConfiguration = readCacheConfiguration;
+var directory_config_1 = require("./directory-config");
+Object.defineProperty(exports, "DIRECTORY_TOKEN_HEADER", { enumerable: true, get: function () { return directory_config_1.DIRECTORY_TOKEN_HEADER; } });
+Object.defineProperty(exports, "directoryGroupIdSchema", { enumerable: true, get: function () { return directory_config_1.directoryGroupIdSchema; } });
+Object.defineProperty(exports, "directoryScopesSchema", { enumerable: true, get: function () { return directory_config_1.directoryScopesSchema; } });
+Object.defineProperty(exports, "directoryMembersInput", { enumerable: true, get: function () { return directory_config_1.directoryMembersInput; } });
+Object.defineProperty(exports, "directoryMembersResponse", { enumerable: true, get: function () { return directory_config_1.directoryMembersResponse; } });
+Object.defineProperty(exports, "readDirectoryGroups", { enumerable: true, get: function () { return directory_config_1.readDirectoryGroups; } });
 var processes_contract_1 = require("./processes-contract");
 Object.defineProperty(exports, "FUNCTION_PROCESS_TOKEN_HEADER", { enumerable: true, get: function () { return processes_contract_1.FUNCTION_PROCESS_TOKEN_HEADER; } });
 Object.defineProperty(exports, "FUNCTION_PROCESS_READ_PATH", { enumerable: true, get: function () { return processes_contract_1.FUNCTION_PROCESS_READ_PATH; } });

package/dist/deployed-policy.js

@@ -42,9 +42,23 @@ function normalizeCapabilities(value) {
             http_headers: normalizeHeaders(features.http_headers),
             invoke_timeout: normalizeTimeout(features.invoke_timeout),
             processes_read: normalizeProcesses(features.processes_read),
+            directory_members: normalizeDirectory(features.directory_members),
         },
     };
 }
+function normalizeDirectory(value) {
+    if (!value || typeof value.supported !== 'boolean' || typeof value.limit !== 'string')
+        return undefined;
+    if (typeof value.min_cli !== 'string' || typeof value.min_sdk !== 'string')
+        return undefined;
+    return {
+        field: typeof value.field === 'string' ? value.field : 'capabilities.directory.groups',
+        supported: value.supported,
+        limit: value.limit,
+        min_cli: value.min_cli,
+        min_sdk: value.min_sdk,
+    };
+}
 function normalizeProcesses(value) {
     if (!value || typeof value.supported !== 'boolean' || typeof value.limit !== 'string')
         return undefined;

package/dist/directory-config.d.ts

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+export declare const DIRECTORY_TOKEN_HEADER = "x-sequence-directory-token";
+export declare const directoryGroupIdSchema: z.ZodString;
+export declare const directoryScopesSchema: z.ZodObject<{
+    groups: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export declare const directoryMembersInput: z.ZodUnion<readonly [z.ZodObject<{
+    groupId: z.ZodString;
+    userIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    groupId: z.ZodString;
+    subs: z.ZodArray<z.ZodString>;
+}, z.core.$strict>]>;
+export declare const directoryMembersResponse: z.ZodObject<{
+    members: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        sub: z.ZodString;
+        name: z.ZodString;
+        email: z.ZodString;
+        deactivated: z.ZodLiteral<false>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare function readDirectoryGroups(manifest: unknown): string[];

package/dist/directory-config.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.directoryMembersResponse = exports.directoryMembersInput = exports.directoryScopesSchema = exports.directoryGroupIdSchema = exports.DIRECTORY_TOKEN_HEADER = void 0;
+exports.readDirectoryGroups = readDirectoryGroups;
+const zod_1 = require("zod");
+exports.DIRECTORY_TOKEN_HEADER = 'x-sequence-directory-token';
+exports.directoryGroupIdSchema = zod_1.z.string().regex(/^(?:[a-f0-9]{24}|[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})$/i);
+exports.directoryScopesSchema = zod_1.z.object({
+    groups: zod_1.z.array(exports.directoryGroupIdSchema).min(1).max(16),
+}).strict();
+const identity = zod_1.z.string().min(1).max(256).regex(/^[^\x00-\x1f\x7f]+$/);
+exports.directoryMembersInput = zod_1.z.union([
+    zod_1.z.object({ groupId: exports.directoryGroupIdSchema, userIds: zod_1.z.array(identity).min(1).max(50) }).strict(),
+    zod_1.z.object({ groupId: exports.directoryGroupIdSchema, subs: zod_1.z.array(identity).min(1).max(50) }).strict(),
+]);
+exports.directoryMembersResponse = zod_1.z.object({ members: zod_1.z.array(zod_1.z.object({
+        id: zod_1.z.string(), sub: identity, name: zod_1.z.string(), email: zod_1.z.string(), deactivated: zod_1.z.literal(false),
+    }).strict()).max(50) }).strict();
+function readDirectoryGroups(manifest) {
+    const parsed = zod_1.z.object({ capabilities: zod_1.z.object({ directory: exports.directoryScopesSchema.optional() }).optional() }).safeParse(manifest);
+    return parsed.success ? parsed.data.capabilities?.directory?.groups ?? [] : [];
+}

package/dist/directory.d.ts

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+import { directoryMembersInput, directoryMembersResponse } from './directory-config';
+import { type FunctionInvocationClientOptions } from './invocation-client';
+export type FunctionDirectoryOptions = FunctionInvocationClientOptions;
+export type FunctionDirectoryMembersQuery = z.infer<typeof directoryMembersInput>;
+export type FunctionDirectoryMembers = z.infer<typeof directoryMembersResponse>;
+export interface FunctionDirectoryClient {
+    resolveMembers(input: FunctionDirectoryMembersQuery): Promise<FunctionDirectoryMembers>;
+}
+export declare class FunctionDirectoryReadError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(status: number, code: string, message: string);
+}
+export declare function createFunctionDirectoryClient({ request, baseUrl, fetchImpl, }: FunctionDirectoryOptions): FunctionDirectoryClient;

package/dist/directory.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FunctionDirectoryReadError = void 0;
+exports.createFunctionDirectoryClient = createFunctionDirectoryClient;
+const zod_1 = require("zod");
+const directory_config_1 = require("./directory-config");
+const invocation_client_1 = require("./invocation-client");
+class FunctionDirectoryReadError extends Error {
+    status;
+    code;
+    constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = 'FunctionDirectoryReadError';
+    }
+}
+exports.FunctionDirectoryReadError = FunctionDirectoryReadError;
+function createFunctionDirectoryClient({ request, baseUrl, fetchImpl, }) {
+    const credential = (0, invocation_client_1.readInvocationCredential)({
+        request,
+        header: directory_config_1.DIRECTORY_TOKEN_HEADER,
+        maxBytes: 8192,
+        invalidContext: () => new FunctionDirectoryReadError(401, 'invalid_context', 'This invocation has no valid directory-read credential'),
+        claimsSchema: zod_1.z.object({
+            audience: zod_1.z.literal('atlas-function-group-directory-v1'),
+            sub: zod_1.z
+                .string()
+                .min(1)
+                .max(256)
+                .refine((sub) => sub.includes('|') &&
+                !sub.startsWith('service-account|') &&
+                !sub.endsWith('@clients')),
+            functionId: zod_1.z.string().min(1),
+            invocationId: zod_1.z.string().min(1),
+            exp: zod_1.z.number().int(),
+        }),
+    });
+    const read = (0, invocation_client_1.createInvocationReadTransport)({
+        baseUrl,
+        fetchImpl,
+        path: '/api/managed-functions/directory/members',
+        header: directory_config_1.DIRECTORY_TOKEN_HEADER,
+        credential,
+        timeoutMs: 10_000,
+        error: (status, code, message) => new FunctionDirectoryReadError(status, code, message),
+        failure: {
+            code: 'directory_read_failed',
+            message: 'Directory read failed',
+        },
+    });
+    return {
+        async resolveMembers(input) {
+            const body = directory_config_1.directoryMembersInput.parse(input);
+            const result = await read({ body, schema: directory_config_1.directoryMembersResponse });
+            const selectors = new Set('userIds' in body ? body.userIds : body.subs);
+            const returned = result.members.map((member) => 'userIds' in body ? member.id : member.sub);
+            if (new Set(returned).size !== returned.length ||
+                returned.some((value) => !selectors.has(value))) {
+                throw new FunctionDirectoryReadError(502, 'malformed_response', 'Atlas returned duplicate or unrequested directory members');
+            }
+            return result;
+        },
+    };
+}

package/dist/index.d.ts

@@ -1,3 +1,6 @@
+export { createFunctionDirectoryClient, FunctionDirectoryReadError } from './directory';
+export type { FunctionDirectoryClient, FunctionDirectoryOptions, FunctionDirectoryMembers, FunctionDirectoryMembersQuery } from './directory';
+export type { FunctionInvocationClientOptions } from './invocation-client';
 export { createFunctionServiceProcessesClient, FunctionProcessReadError } from './processes';
 export type { FunctionServiceProcessesClient, FunctionServiceProcessesOptions, FunctionProcessRunQuery, FunctionProcessRunSummary, FunctionProcessRunStatus, FunctionProcessRunsPage, FunctionProcessRunsPageQuery, FunctionProcessReadRequest } from './processes';
 export { installFunctionTracing, runWithFunctionTracing } from './tracing';

package/dist/index.js

@@ -1,7 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.readCacheConfiguration = exports.cacheManifestSchema = exports.createCacheManager = exports.CacheError = exports.createFunctionStorageClient = exports.runWithFunctionTracing = exports.installFunctionTracing = exports.FunctionProcessReadError = exports.createFunctionServiceProcessesClient = void 0;
+exports.readCacheConfiguration = exports.cacheManifestSchema = exports.createCacheManager = exports.CacheError = exports.createFunctionStorageClient = exports.runWithFunctionTracing = exports.installFunctionTracing = exports.FunctionProcessReadError = exports.createFunctionServiceProcessesClient = exports.FunctionDirectoryReadError = exports.createFunctionDirectoryClient = void 0;
 exports.createManagedFunctionContext = createManagedFunctionContext;
+var directory_1 = require("./directory");
+Object.defineProperty(exports, "createFunctionDirectoryClient", { enumerable: true, get: function () { return directory_1.createFunctionDirectoryClient; } });
+Object.defineProperty(exports, "FunctionDirectoryReadError", { enumerable: true, get: function () { return directory_1.FunctionDirectoryReadError; } });
 var processes_1 = require("./processes");
 Object.defineProperty(exports, "createFunctionServiceProcessesClient", { enumerable: true, get: function () { return processes_1.createFunctionServiceProcessesClient; } });
 Object.defineProperty(exports, "FunctionProcessReadError", { enumerable: true, get: function () { return processes_1.FunctionProcessReadError; } });

package/dist/invocation-client.d.ts

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+export interface FunctionInvocationClientOptions {
+    request: {
+        headers: Pick<Headers, 'get'> | Readonly<Record<string, string | readonly string[] | undefined>>;
+    };
+    baseUrl: string;
+    fetchImpl?: typeof globalThis.fetch;
+}
+type ClientErrorFactory = (status: number, code: string, message: string) => Error;
+export declare function readInvocationCredential<T extends {
+    exp: number;
+}>({ request, header, maxBytes, claimsSchema, invalidContext, }: Pick<FunctionInvocationClientOptions, 'request'> & {
+    header: string;
+    maxBytes: number;
+    claimsSchema: z.ZodType<T>;
+    invalidContext: () => Error;
+}): {
+    token: string;
+    expiresAt: number;
+};
+export declare function createInvocationReadTransport({ baseUrl, fetchImpl, path, header, credential, timeoutMs, error, failure, }: Pick<FunctionInvocationClientOptions, 'baseUrl' | 'fetchImpl'> & {
+    path: string;
+    header: string;
+    credential: {
+        token: string;
+        expiresAt: number;
+    };
+    timeoutMs: number;
+    error: ClientErrorFactory;
+    failure: {
+        code: string;
+        message: string;
+    };
+}): <T>({ body, schema, }: {
+    body: unknown;
+    schema: z.ZodType<T>;
+}) => Promise<T>;
+export {};

package/dist/invocation-client.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readInvocationCredential = readInvocationCredential;
+exports.createInvocationReadTransport = createInvocationReadTransport;
+const zod_1 = require("zod");
+function readInvocationCredential({ request, header, maxBytes, claimsSchema, invalidContext, }) {
+    const { headers } = request;
+    const matches = typeof headers.get === 'function'
+        ? [headers.get(header)]
+        : Object.entries(headers)
+            .filter(([name]) => name.toLowerCase() === header)
+            .map(([, value]) => value);
+    const token = matches[0];
+    if (matches.length !== 1 ||
+        typeof token !== 'string' ||
+        token.length > maxBytes)
+        throw invalidContext();
+    const envelope = /^([A-Za-z0-9_-]+)\.([A-Za-z0-9_-]{43})$/.exec(token);
+    if (!envelope?.[1])
+        throw invalidContext();
+    let value;
+    try {
+        value = JSON.parse(Buffer.from(envelope[1], 'base64url').toString('utf8'));
+    }
+    catch {
+        throw invalidContext();
+    }
+    const parsed = claimsSchema.safeParse(value);
+    if (!parsed.success)
+        throw invalidContext();
+    return { token, expiresAt: parsed.data.exp };
+}
+function trustedOrigin({ baseUrl, error, }) {
+    let url;
+    try {
+        url = new URL(baseUrl);
+    }
+    catch {
+        throw error(400, 'invalid_configuration', 'Configure a trusted Atlas origin');
+    }
+    const loopback = url.protocol === 'http:' &&
+        ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname);
+    if ((!loopback && url.protocol !== 'https:') ||
+        url.username ||
+        url.password ||
+        url.pathname !== '/' ||
+        url.search ||
+        url.hash) {
+        throw error(400, 'invalid_configuration', 'Configure an HTTPS Atlas origin without credentials, path, query or fragment');
+    }
+    return url.origin;
+}
+const errorResponseSchema = zod_1.z.object({
+    code: zod_1.z.string().max(128).optional(),
+    detail: zod_1.z.string().max(2000).optional(),
+});
+function createInvocationReadTransport({ baseUrl, fetchImpl = globalThis.fetch, path, header, credential, timeoutMs, error, failure, }) {
+    const url = `${trustedOrigin({ baseUrl, error })}${path}`;
+    return async function read({ body, schema, }) {
+        if (credential.expiresAt <= Date.now() / 1000) {
+            throw error(401, 'expired_context', 'The invocation credential expired; start a new invocation');
+        }
+        const response = await fetchImpl(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                [header]: credential.token,
+            },
+            body: JSON.stringify(body),
+            redirect: 'error',
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+        const result = await response.json().catch(() => null);
+        if (!response.ok) {
+            const parsed = errorResponseSchema.safeParse(result);
+            throw error(response.status, parsed.success ? (parsed.data.code ?? failure.code) : failure.code, parsed.success
+                ? (parsed.data.detail ?? failure.message)
+                : failure.message);
+        }
+        const validated = schema.safeParse(result);
+        if (!validated.success)
+            throw error(502, 'malformed_response', 'Atlas returned an invalid capability response');
+        return validated.data;
+    };
+}

package/dist/orm.d.ts

@@ -15,6 +15,29 @@ declare class OrmOperationError extends OrmClientError {
     readonly name = "OrmOperationError";
     constructor(message: string, status: number | null, code: string | null, errors?: readonly OperationErrorEntry[]);
 }
+type SqlQueryParameter = {
+    type: 'text' | 'uuid' | 'date' | 'timestamptz' | 'numeric' | 'bigint';
+    value: string | null;
+} | {
+    type: 'integer' | 'double';
+    value: number | null;
+} | {
+    type: 'boolean';
+    value: boolean | null;
+};
+type SqlQueryVariables = {
+    sql: string;
+    parameters?: Record<string, SqlQueryParameter>;
+};
+interface SqlQueryResult {
+    columns: Array<{
+        name: string;
+        type: string;
+        nullable: boolean;
+    }>;
+    rows: Array<Array<string | number | boolean | null>>;
+    truncated: boolean;
+}
 
 /** One entry of `operations.manifest.json` (generated by `orm generate`). */
 interface ManifestOperation {
@@ -38,6 +61,11 @@ interface OperationExecutor {
     /** Execute a manifest operation by name (or a raw `sha256:` hash). */
     execute<TData = Record<string, unknown>>(op: string, variables?: Record<string, unknown>, options?: OperationExecutionOptions): Promise<TData>;
 }
+/** Additive factory result; existing host wrappers implementing OperationExecutor remain valid. */
+interface SqlOperationExecutor extends OperationExecutor {
+    /** Default read-only ontology SQL; no authored operation or manifest needed. */
+    sql(variables: SqlQueryVariables): Promise<SqlQueryResult>;
+}
 
 type FunctionOrmErrorCode = 'INVALID_CONFIGURATION' | 'MISSING_CALLER_CONTEXT' | 'INVALID_CALLER_CONTEXT' | 'UNSUPPORTED_CALLER' | 'EXPIRED_CALLER_CONTEXT';
 declare class FunctionOrmError extends Error {
@@ -55,11 +83,11 @@ interface FunctionOrmExecutorOptions {
     request: FunctionOrmRequest;
     baseUrl: string;
     namespace: string;
-    manifest: unknown;
+    manifest?: unknown;
     fetchImpl?: typeof globalThis.fetch;
     jsonScalars?: FunctionOrmJsonScalars;
 }
-declare function createFunctionOrmExecutor({ request, fetchImpl, ...options }: FunctionOrmExecutorOptions): OperationExecutor;
-declare function createFunctionServiceOrmExecutor({ request, fetchImpl, ...options }: FunctionOrmExecutorOptions): OperationExecutor;
+declare function createFunctionOrmExecutor({ request, fetchImpl, ...options }: FunctionOrmExecutorOptions): SqlOperationExecutor;
+declare function createFunctionServiceOrmExecutor({ request, fetchImpl, ...options }: FunctionOrmExecutorOptions): SqlOperationExecutor;
 
-export { FunctionOrmError, type FunctionOrmErrorCode, type FunctionOrmExecutorOptions, type FunctionOrmJsonScalars, type FunctionOrmRequest, ORM_JSON_SCALARS_HEADER, ORM_LOSSLESS_JSON_SCALARS, type OperationExecutor, type OperationsManifest, OrmClientError, OrmOperationError, createFunctionOrmExecutor, createFunctionServiceOrmExecutor };
+export { FunctionOrmError, type FunctionOrmErrorCode, type FunctionOrmExecutorOptions, type FunctionOrmJsonScalars, type FunctionOrmRequest, ORM_JSON_SCALARS_HEADER, ORM_LOSSLESS_JSON_SCALARS, type OperationExecutor, type OperationsManifest, OrmClientError, OrmOperationError, type SqlOperationExecutor, createFunctionOrmExecutor, createFunctionServiceOrmExecutor };

package/dist/orm.js

@@ -82,6 +82,7 @@ function readOperationResponse({
   }
   return payload.data;
 }
+var BUILTIN_SQL_READ_HASH = "sha256:a50c477c952a5e0fe68ed158a4530e4aab573c09bcbb1a8ac454dc88a39a6258";
 function validateIdempotencyKey(key) {
   if (key !== void 0 && !/^[A-Za-z0-9._:-]{1,128}$/.test(key)) {
     throw new OrmClientError("idempotencyKey must be 1\u2013128 letters, digits, dots, underscores, colons or hyphens");
@@ -103,13 +104,13 @@ function readManifestHashes(manifest) {
 }
 function createOperationExecutorWithTransport({ namespace, manifest, transport }) {
   if (typeof namespace !== "string" || !NAMESPACE_PATTERN.test(namespace)) throw new OrmClientError("invalid ORM namespace \u2014 expected a lowercase identifier of at most 41 characters");
-  const hashes = readManifestHashes(manifest);
+  const hashes = manifest === void 0 ? /* @__PURE__ */ new Map() : readManifestHashes(manifest);
   const knownHashes = new Set(hashes.values());
   async function execute(op, variables = {}, options = {}) {
     validateIdempotencyKey(options.idempotencyKey);
     if (typeof op !== "string" && op.namespace !== namespace) throw new OrmClientError("operation belongs to a different namespace");
     const selector = typeof op === "string" ? op : op.hash;
-    const hash = hashes.get(selector) ?? (knownHashes.has(selector) ? selector : void 0);
+    const hash = selector === BUILTIN_SQL_READ_HASH ? selector : hashes.get(selector) ?? (knownHashes.has(selector) ? selector : void 0);
     if (!hash) throw new OrmClientError(`unknown operation "${op}" \u2014 not in the manifest (${hashes.size} known). Re-run seq-studio orm generate.`);
     if (!isRecord(variables)) throw new OrmClientError("operation variables must be an object");
     const response = await transport({
@@ -123,7 +124,7 @@ function createOperationExecutorWithTransport({ namespace, manifest, transport }
     }
     return readOperationResponse(response);
   }
-  return { execute };
+  return { execute, sql: (variables) => execute(BUILTIN_SQL_READ_HASH, variables) };
 }
 
 // src/orm.ts

package/dist/preflight-directory.d.ts

@@ -0,0 +1,10 @@
+import { type CapabilityTooling, type ManagedFunctionCapabilities, type PreflightIssue, type PreflightManifest } from './capabilities';
+export declare function checkDirectory({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues, }: {
+    manifest: PreflightManifest;
+    capabilities: ManagedFunctionCapabilities | null;
+    tooling: CapabilityTooling;
+    cliVersion: string;
+    sdkVersion: string | null;
+    checkDeployment: boolean;
+    issues: PreflightIssue[];
+}): void;

package/dist/preflight-directory.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkDirectory = checkDirectory;
+const capabilities_1 = require("./capabilities");
+const preflight_issue_1 = require("./preflight-issue");
+const directory_config_1 = require("./directory-config");
+const sdk_range_1 = require("./sdk-range");
+function checkDirectory({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues, }) {
+    const directory = manifest.capabilities?.directory;
+    if (directory === undefined)
+        return;
+    const deployed = capabilities?.features.directory_members;
+    const feature = deployed ?? capabilities_1.MANAGED_FUNCTION_CAPABILITIES.features.directory_members;
+    const details = {
+        limit: feature.limit, tooling, requiredCli: feature.min_cli,
+        requiredSdk: feature.min_sdk, cliVersion, sdkVersion,
+    };
+    const parsed = directory_config_1.directoryScopesSchema.safeParse(directory);
+    if (!parsed.success) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+            ...details, field: 'capabilities.directory', problem: (0, capabilities_1.formatValidationDetail)(parsed.error.issues),
+        }));
+        return;
+    }
+    if (checkDeployment && deployed?.supported !== true) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+            ...details, field: feature.field, problem: 'group-member directory reads are not supported by this deployment',
+        }));
+        return;
+    }
+    if ((0, capabilities_1.versionIsOlder)(cliVersion, feature.min_cli) || (sdkVersion && (0, sdk_range_1.sdkConstraintIsOlder)(sdkVersion, feature.min_sdk))) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+            ...details, field: feature.field, problem: 'the installed tooling does not support managed function group-member directory reads',
+        }));
+    }
+}