@sequenceholdings/managed-functions 0.4.1 → 0.4.2

package/dist/runtime.cjs

@@ -819,7 +819,7 @@ var require_util = __commonJS({
 var require_errors = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/core/errors.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -841,7 +841,7 @@ var require_errors = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -999,7 +999,7 @@ var require_errors = __commonJS({
 var require_parse = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/core/parse.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -1021,7 +1021,7 @@ var require_parse = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -1136,7 +1136,7 @@ var require_parse = __commonJS({
 var require_regexes = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/core/regexes.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -1158,7 +1158,7 @@ var require_regexes = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -1277,7 +1277,7 @@ var require_regexes = __commonJS({
 var require_checks = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/core/checks.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -1299,7 +1299,7 @@ var require_checks = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -1920,7 +1920,7 @@ var require_versions = __commonJS({
 var require_schemas = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/core/schemas.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -1942,7 +1942,7 @@ var require_schemas = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -4062,7 +4062,7 @@ var require_schemas = __commonJS({
 var require_ar = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ar.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -4084,7 +4084,7 @@ var require_ar = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -4205,7 +4205,7 @@ var require_ar = __commonJS({
 var require_az = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/az.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -4227,7 +4227,7 @@ var require_az = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -4347,7 +4347,7 @@ var require_az = __commonJS({
 var require_be = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/be.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -4369,7 +4369,7 @@ var require_be = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -4540,7 +4540,7 @@ var require_be = __commonJS({
 var require_bg = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/bg.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -4562,7 +4562,7 @@ var require_bg = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -4697,7 +4697,7 @@ var require_bg = __commonJS({
 var require_ca = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ca.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -4719,7 +4719,7 @@ var require_ca = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -4842,7 +4842,7 @@ var require_ca = __commonJS({
 var require_cs = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/cs.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -4864,7 +4864,7 @@ var require_cs = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -4990,7 +4990,7 @@ var require_cs = __commonJS({
 var require_da = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/da.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -5012,7 +5012,7 @@ var require_da = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -5142,7 +5142,7 @@ var require_da = __commonJS({
 var require_de = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/de.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -5164,7 +5164,7 @@ var require_de = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -5287,7 +5287,7 @@ var require_de = __commonJS({
 var require_el = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/el.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -5309,7 +5309,7 @@ var require_el = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -5433,7 +5433,7 @@ var require_el = __commonJS({
 var require_en = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/en.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -5455,7 +5455,7 @@ var require_en = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -5582,7 +5582,7 @@ var require_en = __commonJS({
 var require_eo = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/eo.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -5604,7 +5604,7 @@ var require_eo = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -5728,7 +5728,7 @@ var require_eo = __commonJS({
 var require_es = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/es.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -5750,7 +5750,7 @@ var require_es = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -5897,7 +5897,7 @@ var require_es = __commonJS({
 var require_fa = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/fa.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -5919,7 +5919,7 @@ var require_fa = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -6048,7 +6048,7 @@ var require_fa = __commonJS({
 var require_fi = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/fi.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -6070,7 +6070,7 @@ var require_fi = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -6197,7 +6197,7 @@ var require_fi = __commonJS({
 var require_fr = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/fr.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -6219,7 +6219,7 @@ var require_fr = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -6359,7 +6359,7 @@ var require_fr = __commonJS({
 var require_fr_CA = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/fr-CA.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -6381,7 +6381,7 @@ var require_fr_CA = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -6503,7 +6503,7 @@ var require_fr_CA = __commonJS({
 var require_he = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/he.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -6525,7 +6525,7 @@ var require_he = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -6734,7 +6734,7 @@ var require_he = __commonJS({
 var require_hr = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/hr.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -6756,7 +6756,7 @@ var require_hr = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -6893,7 +6893,7 @@ var require_hr = __commonJS({
 var require_hu = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/hu.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -6915,7 +6915,7 @@ var require_hu = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -7038,7 +7038,7 @@ var require_hu = __commonJS({
 var require_hy = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/hy.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -7060,7 +7060,7 @@ var require_hy = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -7222,7 +7222,7 @@ var require_hy = __commonJS({
 var require_id = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/id.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -7244,7 +7244,7 @@ var require_id = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -7365,7 +7365,7 @@ var require_id = __commonJS({
 var require_is = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/is.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -7387,7 +7387,7 @@ var require_is = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -7511,7 +7511,7 @@ var require_is = __commonJS({
 var require_it = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/it.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -7533,7 +7533,7 @@ var require_it = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -7656,7 +7656,7 @@ var require_it = __commonJS({
 var require_ja = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ja.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -7678,7 +7678,7 @@ var require_ja = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -7800,7 +7800,7 @@ var require_ja = __commonJS({
 var require_ka = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ka.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -7822,7 +7822,7 @@ var require_ka = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -7949,7 +7949,7 @@ var require_ka = __commonJS({
 var require_km = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/km.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -7971,7 +7971,7 @@ var require_km = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -8113,7 +8113,7 @@ var require_kh = __commonJS({
 var require_ko = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ko.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -8135,7 +8135,7 @@ var require_ko = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -8261,7 +8261,7 @@ var require_ko = __commonJS({
 var require_lt = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/lt.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -8283,7 +8283,7 @@ var require_lt = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -8501,7 +8501,7 @@ var require_lt = __commonJS({
 var require_mk = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/mk.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -8523,7 +8523,7 @@ var require_mk = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -8647,7 +8647,7 @@ var require_mk = __commonJS({
 var require_ms = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ms.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -8669,7 +8669,7 @@ var require_ms = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -8791,7 +8791,7 @@ var require_ms = __commonJS({
 var require_nl = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/nl.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -8813,7 +8813,7 @@ var require_nl = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -8938,7 +8938,7 @@ var require_nl = __commonJS({
 var require_no = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/no.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -8960,7 +8960,7 @@ var require_no = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -9083,7 +9083,7 @@ var require_no = __commonJS({
 var require_ota = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ota.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -9105,7 +9105,7 @@ var require_ota = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -9229,7 +9229,7 @@ var require_ota = __commonJS({
 var require_ps = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ps.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -9251,7 +9251,7 @@ var require_ps = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -9380,7 +9380,7 @@ var require_ps = __commonJS({
 var require_pl = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/pl.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -9402,7 +9402,7 @@ var require_pl = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -9526,7 +9526,7 @@ var require_pl = __commonJS({
 var require_pt = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/pt.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -9548,7 +9548,7 @@ var require_pt = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -9671,7 +9671,7 @@ var require_pt = __commonJS({
 var require_ro = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ro.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -9693,7 +9693,7 @@ var require_ro = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -9827,7 +9827,7 @@ var require_ro = __commonJS({
 var require_ru = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ru.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -9849,7 +9849,7 @@ var require_ru = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -10020,7 +10020,7 @@ var require_ru = __commonJS({
 var require_sl = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/sl.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -10042,7 +10042,7 @@ var require_sl = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -10166,7 +10166,7 @@ var require_sl = __commonJS({
 var require_sv = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/sv.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -10188,7 +10188,7 @@ var require_sv = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -10313,7 +10313,7 @@ var require_sv = __commonJS({
 var require_ta = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ta.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -10335,7 +10335,7 @@ var require_ta = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -10460,7 +10460,7 @@ var require_ta = __commonJS({
 var require_th = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/th.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -10482,7 +10482,7 @@ var require_th = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -10607,7 +10607,7 @@ var require_th = __commonJS({
 var require_tr = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/tr.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -10629,7 +10629,7 @@ var require_tr = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -10749,7 +10749,7 @@ var require_tr = __commonJS({
 var require_uk = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/uk.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -10771,7 +10771,7 @@ var require_uk = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -10911,7 +10911,7 @@ var require_ua = __commonJS({
 var require_ur = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/ur.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -10933,7 +10933,7 @@ var require_ur = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -11058,7 +11058,7 @@ var require_ur = __commonJS({
 var require_uz = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/uz.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -11080,7 +11080,7 @@ var require_uz = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -11205,7 +11205,7 @@ var require_uz = __commonJS({
 var require_vi = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/vi.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -11227,7 +11227,7 @@ var require_vi = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -11350,7 +11350,7 @@ var require_vi = __commonJS({
 var require_zh_CN = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/zh-CN.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -11372,7 +11372,7 @@ var require_zh_CN = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -11496,7 +11496,7 @@ var require_zh_CN = __commonJS({
 var require_zh_TW = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/zh-TW.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -11518,7 +11518,7 @@ var require_zh_TW = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -11640,7 +11640,7 @@ var require_zh_TW = __commonJS({
 var require_yo = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/locales/yo.cjs"(exports2, module2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -11662,7 +11662,7 @@ var require_yo = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -12064,7 +12064,7 @@ var require_registries = __commonJS({
 var require_api = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/core/api.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -12086,7 +12086,7 @@ var require_api = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -14320,7 +14320,7 @@ var require_json_schema = __commonJS({
 var require_core2 = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/core/index.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -14338,33 +14338,33 @@ var require_core2 = __commonJS({
     }) : function(o, v) {
       o["default"] = v;
     });
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     var __importStar = exports2 && exports2.__importStar || function(mod) {
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.JSONSchema = exports2.JSONSchemaGenerator = exports2.toJSONSchema = exports2.locales = exports2.regexes = exports2.util = void 0;
-    __exportStar(require_core(), exports2);
-    __exportStar(require_parse(), exports2);
-    __exportStar(require_errors(), exports2);
-    __exportStar(require_schemas(), exports2);
-    __exportStar(require_checks(), exports2);
-    __exportStar(require_versions(), exports2);
+    __exportStar2(require_core(), exports2);
+    __exportStar2(require_parse(), exports2);
+    __exportStar2(require_errors(), exports2);
+    __exportStar2(require_schemas(), exports2);
+    __exportStar2(require_checks(), exports2);
+    __exportStar2(require_versions(), exports2);
     exports2.util = __importStar(require_util());
     exports2.regexes = __importStar(require_regexes());
     exports2.locales = __importStar(require_locales());
-    __exportStar(require_registries(), exports2);
-    __exportStar(require_doc(), exports2);
-    __exportStar(require_api(), exports2);
-    __exportStar(require_to_json_schema(), exports2);
+    __exportStar2(require_registries(), exports2);
+    __exportStar2(require_doc(), exports2);
+    __exportStar2(require_api(), exports2);
+    __exportStar2(require_to_json_schema(), exports2);
     var json_schema_processors_js_1 = require_json_schema_processors();
     Object.defineProperty(exports2, "toJSONSchema", { enumerable: true, get: function() {
       return json_schema_processors_js_1.toJSONSchema;
@@ -14478,7 +14478,7 @@ var require_checks2 = __commonJS({
 var require_iso = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/iso.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -14500,7 +14500,7 @@ var require_iso = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -14548,7 +14548,7 @@ var require_iso = __commonJS({
 var require_errors2 = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/errors.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -14570,7 +14570,7 @@ var require_errors2 = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -14625,7 +14625,7 @@ var require_errors2 = __commonJS({
 var require_parse2 = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/parse.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -14647,7 +14647,7 @@ var require_parse2 = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -14675,7 +14675,7 @@ var require_parse2 = __commonJS({
 var require_schemas2 = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/schemas.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -14697,7 +14697,7 @@ var require_schemas2 = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -16103,7 +16103,7 @@ var require_schemas2 = __commonJS({
 var require_compat = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/compat.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -16125,7 +16125,7 @@ var require_compat = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -16173,7 +16173,7 @@ var require_compat = __commonJS({
 var require_from_json_schema = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/from-json-schema.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -16195,7 +16195,7 @@ var require_from_json_schema = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -16691,7 +16691,7 @@ var require_from_json_schema = __commonJS({
 var require_coerce = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/coerce.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -16713,7 +16713,7 @@ var require_coerce = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -16748,7 +16748,7 @@ var require_coerce = __commonJS({
 var require_external = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -16770,13 +16770,13 @@ var require_external = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
     };
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     var __importDefault = exports2 && exports2.__importDefault || function(mod) {
       return mod && mod.__esModule ? mod : { "default": mod };
@@ -16784,11 +16784,11 @@ var require_external = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.coerce = exports2.iso = exports2.ZodISODuration = exports2.ZodISOTime = exports2.ZodISODate = exports2.ZodISODateTime = exports2.locales = exports2.fromJSONSchema = exports2.toJSONSchema = exports2.NEVER = exports2.util = exports2.TimePrecision = exports2.flattenError = exports2.formatError = exports2.prettifyError = exports2.treeifyError = exports2.regexes = exports2.clone = exports2.$brand = exports2.$input = exports2.$output = exports2.config = exports2.registry = exports2.globalRegistry = exports2.core = void 0;
     exports2.core = __importStar(require_core2());
-    __exportStar(require_schemas2(), exports2);
-    __exportStar(require_checks2(), exports2);
-    __exportStar(require_errors2(), exports2);
-    __exportStar(require_parse2(), exports2);
-    __exportStar(require_compat(), exports2);
+    __exportStar2(require_schemas2(), exports2);
+    __exportStar2(require_checks2(), exports2);
+    __exportStar2(require_errors2(), exports2);
+    __exportStar2(require_parse2(), exports2);
+    __exportStar2(require_compat(), exports2);
     var index_js_1 = require_core2();
     var en_js_1 = __importDefault(require_en());
     (0, index_js_1.config)((0, en_js_1.default)());
@@ -16869,7 +16869,7 @@ var require_external = __commonJS({
 var require_zod = __commonJS({
   "../../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/index.cjs"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -16891,19 +16891,19 @@ var require_zod = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
     };
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.z = void 0;
     var z = __importStar(require_external());
     exports2.z = z;
-    __exportStar(require_external(), exports2);
+    __exportStar2(require_external(), exports2);
     exports2.default = z;
   }
 });
@@ -16934,7 +16934,7 @@ var require_directory_config = __commonJS({
       deactivated: zod_12.z.literal(false)
     }).strict()).max(50) }).strict();
     function readDirectoryGroups(manifest) {
-      const parsed = zod_12.z.object({ capabilities: zod_12.z.object({ directory: exports2.directoryScopesSchema.optional() }).optional() }).safeParse(manifest);
+      const parsed = zod_12.z.object({ capabilities: zod_12.z.object({ directory: zod_12.z.object({ groups: exports2.directoryScopesSchema.shape.groups.optional() }).optional() }).optional() }).safeParse(manifest);
       return parsed.success ? parsed.data.capabilities?.directory?.groups ?? [] : [];
     }
   }
@@ -16985,17 +16985,22 @@ var require_invocation_client = __commonJS({
       code: zod_12.z.string().max(128).optional(),
       detail: zod_12.z.string().max(2e3).optional()
     });
-    function createInvocationReadTransport({ baseUrl, fetchImpl = globalThis.fetch, path, header, credential, timeoutMs, error, failure }) {
+    function createInvocationReadTransport({ baseUrl, fetchImpl = globalThis.fetch, path, header, credential, additionalCredentials = [], timeoutMs, error, failure }) {
       const url = `${trustedOrigin({ baseUrl, error })}${path}`;
+      const credentials = [{ header, credential }, ...additionalCredentials];
+      const names = credentials.map((value) => value.header.toLowerCase());
+      if (new Set(names).size !== names.length || names.includes("content-type")) {
+        throw error(400, "invalid_configuration", "Credential headers must be distinct");
+      }
       return async function read({ body, schema }) {
-        if (credential.expiresAt <= Date.now() / 1e3) {
+        if (credentials.some((value) => value.credential.expiresAt <= Date.now() / 1e3)) {
           throw error(401, "expired_context", "The invocation credential expired; start a new invocation");
         }
         const response = await fetchImpl(url, {
           method: "POST",
           headers: {
             "content-type": "application/json",
-            [header]: credential.token
+            ...Object.fromEntries(credentials.map((value) => [value.header, value.credential.token]))
           },
           body: JSON.stringify(body),
           redirect: "error",
@@ -17079,12 +17084,797 @@ var require_directory = __commonJS({
   }
 });
 
+// dist/lattice-capability.js
+var require_lattice_capability = __commonJS({
+  "dist/lattice-capability.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.functionLatticeContextCapabilitySchema = void 0;
+    exports2.readFunctionLatticeContextCapability = readFunctionLatticeContextCapability;
+    var zod_12 = require_zod();
+    exports2.functionLatticeContextCapabilitySchema = zod_12.z.strictObject({
+      context: zod_12.z.literal(true)
+    });
+    function readFunctionLatticeContextCapability(manifest) {
+      if (typeof manifest !== "object" || manifest === null)
+        return false;
+      const capabilities = Reflect.get(manifest, "capabilities");
+      if (typeof capabilities !== "object" || capabilities === null)
+        return false;
+      return exports2.functionLatticeContextCapabilitySchema.safeParse(Reflect.get(capabilities, "lattice")).success;
+    }
+  }
+});
+
+// dist/lattice-provenance-contract.js
+var require_lattice_provenance_contract = __commonJS({
+  "dist/lattice-provenance-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.FunctionLatticeContextError = exports2.functionLatticeParallelSnapshotSchema = exports2.functionLatticeHumanCompletionsPageSchema = exports2.functionLatticeHumanCompletionSchema = exports2.functionLatticeExecutionContextSchema = exports2.functionLatticeContextRequestSchema = exports2.functionLatticeParallelSnapshotQuerySchema = exports2.functionLatticeHumanCompletionsQuerySchema = exports2.functionLatticeHumanCompletionQuerySchema = exports2.functionLatticeStartProvenanceSchema = exports2.FUNCTION_LATTICE_CONTEXT_PATH = exports2.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER = void 0;
+    var zod_12 = require_zod();
+    exports2.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER = "x-sequence-lattice-execution-token";
+    exports2.FUNCTION_LATTICE_CONTEXT_PATH = "/api/managed-functions/lattice/context";
+    var identifier = zod_12.z.string().min(1).max(255);
+    var principal = zod_12.z.string().min(1).max(512);
+    var record = zod_12.z.record(zod_12.z.string(), zod_12.z.unknown());
+    var attempt = zod_12.z.number().int().positive();
+    var startBasisByMode = {
+      manual: ["fga_invoker"],
+      trigger: ["trusted_trigger"],
+      schedule: ["schedule_author", "schedule_no_author"],
+      system: ["trusted_service"],
+      subprocess: ["subprocess_spawn_gate", "subprocess_parent_starter", "subprocess_existing_child"],
+      intervention: ["intervention_actor"]
+    };
+    exports2.functionLatticeStartProvenanceSchema = zod_12.z.strictObject({
+      version: zod_12.z.literal(1),
+      issuer: zod_12.z.string().min(1).max(8192),
+      runId: identifier,
+      processId: identifier,
+      processVersion: identifier,
+      bundleHash: identifier,
+      actorSub: principal,
+      startedBy: principal.nullable(),
+      mode: zod_12.z.enum(["manual", "trigger", "schedule", "system", "subprocess", "intervention"]),
+      basis: zod_12.z.enum(["fga_invoker", "schedule_author", "schedule_no_author", "trusted_service", "trusted_trigger", "subprocess_spawn_gate", "subprocess_parent_starter", "subprocess_existing_child", "intervention_actor"]),
+      authorizedAt: zod_12.z.iso.datetime(),
+      schedule: zod_12.z.strictObject({ scheduleId: identifier, scheduledAt: zod_12.z.iso.datetime() }).nullable()
+    }).refine((value) => startBasisByMode[value.mode].includes(value.basis) && value.mode === "schedule" === (value.schedule !== null), "Start basis and schedule must match the verified authorization mode");
+    exports2.functionLatticeHumanCompletionQuerySchema = zod_12.z.strictObject({
+      nodeId: identifier,
+      stepId: identifier.optional(),
+      ancestorNodeId: identifier.optional()
+    });
+    exports2.functionLatticeHumanCompletionsQuerySchema = exports2.functionLatticeHumanCompletionQuerySchema.omit({ stepId: true });
+    exports2.functionLatticeParallelSnapshotQuerySchema = zod_12.z.strictObject({ nodeId: identifier, ancestorNodeId: identifier });
+    exports2.functionLatticeContextRequestSchema = zod_12.z.discriminatedUnion("operation", [
+      zod_12.z.strictObject({ operation: zod_12.z.literal("getExecutionContext") }),
+      exports2.functionLatticeHumanCompletionQuerySchema.extend({
+        operation: zod_12.z.literal("getHumanCompletion")
+      }),
+      exports2.functionLatticeHumanCompletionsQuerySchema.extend({
+        operation: zod_12.z.literal("getHumanCompletions")
+      }),
+      exports2.functionLatticeParallelSnapshotQuerySchema.extend({ operation: zod_12.z.literal("getParallelSnapshot") })
+    ]);
+    var executionIdentity = zod_12.z.object({
+      receiverFunctionOrgId: identifier,
+      parent: zod_12.z.object({ runId: identifier, processId: identifier, processVersion: identifier, bundleHash: identifier, stepId: identifier, nodeId: identifier, attempt, input: zod_12.z.unknown(), branch: zod_12.z.object({ id: identifier, index: zod_12.z.number().int().nonnegative(), item: zod_12.z.unknown() }).nullable() }).nullable().optional(),
+      run: zod_12.z.object({
+        id: identifier,
+        processId: identifier,
+        processVersion: identifier,
+        bundleHash: identifier,
+        entity: zod_12.z.object({ type: identifier, id: identifier }).nullable(),
+        startProvenance: exports2.functionLatticeStartProvenanceSchema.nullable().optional()
+      }).refine((run) => !run.startProvenance || run.startProvenance.runId === run.id && run.startProvenance.processId === run.processId && run.startProvenance.processVersion === run.processVersion && run.startProvenance.bundleHash === run.bundleHash, "Start provenance must identify the exact executing run"),
+      step: zod_12.z.object({
+        id: identifier,
+        nodeId: identifier,
+        attempt,
+        runAsServiceAccount: principal.nullable()
+      }),
+      receiver: zod_12.z.object({
+        functionId: identifier,
+        versionId: identifier,
+        invocationId: identifier,
+        invoker: zod_12.z.object({ sub: principal, kind: identifier, authenticationMethod: identifier }),
+        attachedServiceAccountSub: principal
+      })
+    });
+    exports2.functionLatticeExecutionContextSchema = executionIdentity.extend({
+      input: zod_12.z.unknown(),
+      ctxSnapshot: zod_12.z.object({
+        entity: zod_12.z.unknown(),
+        upstream: record,
+        state: record,
+        run: zod_12.z.object({
+          id: identifier,
+          process_id: identifier,
+          version: identifier,
+          started_at: zod_12.z.iso.datetime({ offset: true }),
+          started_by: principal.nullable(),
+          metadata: record,
+          trigger_reason: record.nullable().optional()
+        }),
+        branch: zod_12.z.object({ id: identifier, index: zod_12.z.number().int().nonnegative(), item: zod_12.z.unknown() }).optional()
+      })
+    }).refine((value) => value.ctxSnapshot.run.id === value.run.id && value.ctxSnapshot.run.process_id === value.run.processId && value.ctxSnapshot.run.version === value.run.processVersion, "The context snapshot must identify the executing run");
+    exports2.functionLatticeHumanCompletionSchema = executionIdentity.extend({
+      human: zod_12.z.object({
+        receipt: zod_12.z.string().min(1).max(16384),
+        runId: identifier,
+        processId: identifier,
+        bundleHash: identifier,
+        actorSub: principal,
+        receiptId: identifier,
+        stepId: identifier,
+        nodeId: identifier,
+        attempt,
+        edgeId: identifier.nullable(),
+        payload: record,
+        completedAt: zod_12.z.iso.datetime({ offset: true }),
+        ancestor: zod_12.z.object({
+          runId: identifier,
+          processId: identifier,
+          bundleHash: identifier,
+          stepId: identifier,
+          nodeId: identifier,
+          attempt
+        }).optional()
+      })
+    }).refine((value) => value.human.receiptId === value.human.stepId, "The receipt identifier must be the actual human step identifier");
+    exports2.functionLatticeHumanCompletionsPageSchema = zod_12.z.object({
+      completions: zod_12.z.array(exports2.functionLatticeHumanCompletionSchema).max(64)
+    });
+    var parallelHumanStep = zod_12.z.object({ runId: identifier, stepId: identifier, nodeId: identifier, attempt, receiptId: identifier });
+    exports2.functionLatticeParallelSnapshotSchema = executionIdentity.extend({
+      parallel: zod_12.z.object({
+        runId: identifier,
+        processId: identifier,
+        processVersion: identifier,
+        bundleHash: identifier,
+        entity: zod_12.z.object({ type: identifier, id: identifier }).nullable(),
+        stepId: identifier,
+        nodeId: identifier,
+        attempt,
+        status: zod_12.z.literal("completed"),
+        observedAt: zod_12.z.iso.datetime({ offset: true }),
+        proof: zod_12.z.string().min(1).max(131072),
+        ancestor: zod_12.z.object({ runId: identifier, processId: identifier, bundleHash: identifier, stepId: identifier, nodeId: identifier, attempt, receipt: zod_12.z.string().min(1).max(16384), receiptId: identifier }),
+        branches: zod_12.z.array(zod_12.z.object({
+          branchId: identifier,
+          branchIndex: zod_12.z.number().int().nonnegative(),
+          item: zod_12.z.unknown(),
+          stepId: identifier,
+          nodeId: identifier,
+          attempt,
+          status: zod_12.z.enum(["pending", "running", "completed", "failed", "cancelled", "timed_out"]),
+          joinStatus: zod_12.z.enum(["pending", "completed", "failed", "cancelled", "timed_out"]),
+          humanStep: parallelHumanStep.nullable()
+        })).max(64)
+      })
+    }).refine((value) => {
+      const branches = value.parallel.branches;
+      return value.parallel.runId === value.run.id && value.parallel.bundleHash === value.run.bundleHash && value.parallel.processId === value.run.processId && value.parallel.processVersion === value.run.processVersion && value.parallel.entity?.id === value.run.entity?.id && value.parallel.entity?.type === value.run.entity?.type && value.parallel.ancestor.runId === value.run.id && value.parallel.ancestor.processId === value.run.processId && value.parallel.ancestor.bundleHash === value.run.bundleHash && value.parallel.ancestor.receiptId === value.parallel.ancestor.stepId && new Set(branches.map((branch) => branch.branchId)).size === branches.length && new Set(branches.map((branch) => branch.branchIndex)).size === branches.length && branches.every((branch) => !branch.humanStep || !["pending", "timed_out"].includes(branch.joinStatus) && branch.humanStep.runId === value.run.id && branch.humanStep.nodeId === branch.nodeId && branch.humanStep.stepId === branch.stepId && branch.humanStep.attempt === branch.attempt && branch.humanStep.receiptId === branch.stepId);
+    }, "Parallel snapshots must identify one complete causal execution with unique actual branches");
+    var FunctionLatticeContextError = class extends Error {
+      status;
+      code;
+      name = "FunctionLatticeContextError";
+      constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+      }
+    };
+    exports2.FunctionLatticeContextError = FunctionLatticeContextError;
+  }
+});
+
+// dist/lattice-provenance.js
+var require_lattice_provenance = __commonJS({
+  "dist/lattice-provenance.js"(exports2) {
+    "use strict";
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m2, k);
+      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m2[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m2[k];
+    }));
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
+    };
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.createFunctionLatticeClient = createFunctionLatticeClient;
+    var zod_12 = require_zod();
+    var lattice_provenance_contract_12 = require_lattice_provenance_contract();
+    __exportStar2(require_lattice_provenance_contract(), exports2);
+    var tokenClaimsSchema = zod_12.z.object({
+      audience: zod_12.z.literal("atlas-managed-function-lattice-execution"),
+      functionId: zod_12.z.string().min(1).max(255),
+      versionId: zod_12.z.string().min(1).max(255),
+      invocationId: zod_12.z.string().min(1).max(255),
+      org: zod_12.z.string().min(1).max(255),
+      runId: zod_12.z.string().min(1).max(255),
+      processId: zod_12.z.string().min(1).max(255),
+      processVersion: zod_12.z.string().min(1).max(255),
+      bundleHash: zod_12.z.string().min(1).max(255),
+      stepId: zod_12.z.string().min(1).max(255),
+      nodeId: zod_12.z.string().min(1).max(255),
+      stepAttempt: zod_12.z.number().int().positive(),
+      serviceAccountId: zod_12.z.string().min(1).max(255),
+      callerSub: zod_12.z.string().min(1).max(512),
+      callerKind: zod_12.z.string().min(1).max(64),
+      callerAuthenticationMethod: zod_12.z.string().min(1).max(64),
+      exp: zod_12.z.number().int().positive().max(Number.MAX_SAFE_INTEGER)
+    });
+    var invalidContext = () => new lattice_provenance_contract_12.FunctionLatticeContextError(401, "invalid_context", "This invocation has no valid Lattice execution credential");
+    function readCredential({ request }) {
+      const { headers } = request;
+      const matches = typeof headers.get === "function" ? [headers.get(lattice_provenance_contract_12.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER)] : Object.entries(headers).filter(([name]) => name.toLowerCase() === lattice_provenance_contract_12.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER).map(([, value2]) => value2);
+      const token = matches[0];
+      if (matches.length !== 1 || typeof token !== "string" || token.length > 16384)
+        throw invalidContext();
+      const envelope = /^([A-Za-z0-9_-]+)\.([A-Za-z0-9_-]{43})$/.exec(token);
+      if (!envelope?.[1])
+        throw invalidContext();
+      let value;
+      try {
+        const decoded = Buffer.from(envelope[1], "base64url");
+        if (decoded.toString("base64url") !== envelope[1])
+          throw invalidContext();
+        value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(decoded));
+      } catch {
+        throw invalidContext();
+      }
+      const parsed = tokenClaimsSchema.safeParse(value);
+      if (!parsed.success)
+        throw invalidContext();
+      return { token, claims: parsed.data };
+    }
+    function trustedOrigin(baseUrl) {
+      const invalid = () => new lattice_provenance_contract_12.FunctionLatticeContextError(400, "invalid_configuration", "Configure a trusted HTTPS Atlas origin without credentials, path, query or fragment");
+      let url;
+      try {
+        url = new URL(baseUrl);
+      } catch {
+        throw invalid();
+      }
+      const loopback = url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+      if (!loopback && url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash)
+        throw invalid();
+      return url.origin;
+    }
+    function matchesExecution({ execution, claims }) {
+      return execution.receiver.functionId === claims.functionId && execution.receiver.versionId === claims.versionId && execution.receiver.invocationId === claims.invocationId && execution.receiverFunctionOrgId === claims.org && execution.run.id === claims.runId && execution.run.processId === claims.processId && execution.run.processVersion === claims.processVersion && execution.run.bundleHash === claims.bundleHash && execution.step.id === claims.stepId && execution.step.nodeId === claims.nodeId && execution.step.attempt === claims.stepAttempt && execution.receiver.invoker.sub === claims.callerSub && execution.receiver.invoker.kind === claims.callerKind && execution.receiver.invoker.authenticationMethod === claims.callerAuthenticationMethod && execution.receiver.attachedServiceAccountSub === `service-account|${claims.serviceAccountId}`;
+    }
+    function validateHumanSelection({ completion, query }) {
+      if (completion.human.nodeId !== query.nodeId || query.stepId !== void 0 && completion.human.stepId !== query.stepId || query.ancestorNodeId !== void 0 && completion.human.ancestor?.nodeId !== query.ancestorNodeId)
+        throw new lattice_provenance_contract_12.FunctionLatticeContextError(502, "malformed_response", "Atlas returned a different completed human step");
+    }
+    function createFunctionLatticeClient({ request, baseUrl, fetchImpl = globalThis.fetch }) {
+      const url = `${trustedOrigin(baseUrl)}${lattice_provenance_contract_12.FUNCTION_LATTICE_CONTEXT_PATH}`;
+      const { token, claims } = readCredential({ request });
+      async function read({ body, schema, executions }) {
+        if (claims.exp <= Date.now() / 1e3)
+          throw new lattice_provenance_contract_12.FunctionLatticeContextError(401, "expired_context", "The execution credential expired; start a new invocation");
+        const parsed = lattice_provenance_contract_12.functionLatticeContextRequestSchema.safeParse(body);
+        if (!parsed.success)
+          throw new lattice_provenance_contract_12.FunctionLatticeContextError(400, "invalid_request", "Select a valid Lattice context operation and human step");
+        let response;
+        try {
+          response = await fetchImpl(url, {
+            method: "POST",
+            headers: {
+              "content-type": "application/json",
+              [lattice_provenance_contract_12.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER]: token
+            },
+            body: JSON.stringify(parsed.data),
+            redirect: "error",
+            signal: AbortSignal.timeout(3e4)
+          });
+        } catch {
+          throw new lattice_provenance_contract_12.FunctionLatticeContextError(502, "context_request_failed", "The Lattice context request failed");
+        }
+        if (response.redirected || response.status >= 300 && response.status < 400)
+          throw new lattice_provenance_contract_12.FunctionLatticeContextError(502, "redirect_refused", "The Lattice context request must not redirect");
+        const result = await response.json().catch(() => null);
+        if (!response.ok) {
+          const error = zod_12.z.object({ code: zod_12.z.string().min(1).max(128), detail: zod_12.z.string().min(1).max(2e3) }).safeParse(result);
+          throw new lattice_provenance_contract_12.FunctionLatticeContextError(response.status, error.success ? error.data.code : "context_read_failed", error.success ? error.data.detail : "Lattice context read failed");
+        }
+        const validated = schema.safeParse(result);
+        if (!validated.success || executions(validated.data).some((execution) => !matchesExecution({ execution, claims })))
+          throw new lattice_provenance_contract_12.FunctionLatticeContextError(502, "malformed_response", "Atlas returned an invalid Lattice context response");
+        return validated.data;
+      }
+      return {
+        getExecutionContext() {
+          return read({ body: { operation: "getExecutionContext" }, schema: lattice_provenance_contract_12.functionLatticeExecutionContextSchema, executions: (value) => [value] });
+        },
+        async getHumanCompletion(query) {
+          const completion = await read({
+            body: { ...query, operation: "getHumanCompletion" },
+            schema: lattice_provenance_contract_12.functionLatticeHumanCompletionSchema,
+            executions: (value) => [value]
+          });
+          validateHumanSelection({ completion, query });
+          return completion;
+        },
+        async getHumanCompletions(query) {
+          const page = await read({
+            body: { ...query, operation: "getHumanCompletions" },
+            schema: lattice_provenance_contract_12.functionLatticeHumanCompletionsPageSchema,
+            executions: (value) => value.completions
+          });
+          page.completions.forEach((completion) => validateHumanSelection({ completion, query }));
+          return page;
+        },
+        async getParallelSnapshot(query) {
+          const snapshot = await read({ body: { ...query, operation: "getParallelSnapshot" }, schema: lattice_provenance_contract_12.functionLatticeParallelSnapshotSchema, executions: (value) => [value] });
+          if (snapshot.parallel.nodeId !== query.nodeId || snapshot.parallel.ancestor.nodeId !== query.ancestorNodeId)
+            throw new lattice_provenance_contract_12.FunctionLatticeContextError(502, "malformed_response", "Atlas returned a different causal parallel execution");
+          return snapshot;
+        }
+      };
+    }
+  }
+});
+
+// dist/invocation-contract.js
+var require_invocation_contract = __commonJS({
+  "dist/invocation-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.FunctionInvocationContextError = exports2.functionInvocationContextSchema = exports2.functionInvocationContextRequestSchema = exports2.functionInvocationIdentityCapabilitySchema = exports2.FUNCTION_INVOCATION_CONTEXT_PATH = exports2.FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER = void 0;
+    exports2.readFunctionInvocationIdentityCapability = readFunctionInvocationIdentityCapability;
+    var zod_12 = require_zod();
+    exports2.FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER = "x-sequence-invocation-identity-token";
+    exports2.FUNCTION_INVOCATION_CONTEXT_PATH = "/api/managed-functions/invocation/context";
+    var identifier = zod_12.z.string().min(1).max(255);
+    var principal = zod_12.z.string().min(1).max(512);
+    exports2.functionInvocationIdentityCapabilitySchema = zod_12.z.strictObject({
+      identity: zod_12.z.literal(true)
+    });
+    function readFunctionInvocationIdentityCapability(manifest) {
+      if (typeof manifest !== "object" || manifest === null)
+        return false;
+      const capabilities = Reflect.get(manifest, "capabilities");
+      if (typeof capabilities !== "object" || capabilities === null)
+        return false;
+      return exports2.functionInvocationIdentityCapabilitySchema.safeParse(Reflect.get(capabilities, "invocation")).success;
+    }
+    exports2.functionInvocationContextRequestSchema = zod_12.z.strictObject({
+      operation: zod_12.z.literal("getInvocationContext")
+    });
+    exports2.functionInvocationContextSchema = zod_12.z.strictObject({
+      receiver: zod_12.z.strictObject({
+        functionId: identifier,
+        versionId: identifier,
+        invocationId: identifier,
+        orgId: identifier,
+        serviceAccountId: identifier,
+        serviceAccountSub: principal
+      }).refine((value) => value.serviceAccountSub === `service-account|${value.serviceAccountId}`, "The receiver subject must identify the attached service account"),
+      caller: zod_12.z.strictObject({
+        kind: zod_12.z.enum(["human", "service_account", "system"]),
+        sub: principal
+      })
+    });
+    var FunctionInvocationContextError = class extends Error {
+      status;
+      code;
+      name = "FunctionInvocationContextError";
+      constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+      }
+    };
+    exports2.FunctionInvocationContextError = FunctionInvocationContextError;
+  }
+});
+
+// dist/abrigo-contract.js
+var require_abrigo_contract = __commonJS({
+  "dist/abrigo-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.FunctionAbrigoReadError = exports2.functionAbrigoReadScopesSchema = exports2.functionAbrigoReadRequestSchema = exports2.abrigoReadOperationSchema = exports2.ABRIGO_READ_TIMEOUT_MS = exports2.ABRIGO_READ_MAX_RESPONSE_BYTES = exports2.FUNCTION_ABRIGO_READ_AUDIENCE = exports2.FUNCTION_ABRIGO_READ_PATH = exports2.FUNCTION_ABRIGO_READ_TOKEN_HEADER = void 0;
+    exports2.readFunctionAbrigoReadScopes = readFunctionAbrigoReadScopes;
+    var zod_12 = require_zod();
+    exports2.FUNCTION_ABRIGO_READ_TOKEN_HEADER = "x-sequence-abrigo-read-token";
+    exports2.FUNCTION_ABRIGO_READ_PATH = "/api/managed-functions/abrigo/read";
+    exports2.FUNCTION_ABRIGO_READ_AUDIENCE = "atlas-managed-function-abrigo-read";
+    exports2.ABRIGO_READ_MAX_RESPONSE_BYTES = 1024 * 1024;
+    exports2.ABRIGO_READ_TIMEOUT_MS = 3e4;
+    exports2.abrigoReadOperationSchema = zod_12.z.enum([
+      "workflow",
+      "entity",
+      "entityGroupSummary",
+      "loanRoles",
+      "relatedLoanRoles",
+      "workflowLoanMappings",
+      "workflowDocuments",
+      "customerDocuments",
+      "reviewWorkflow",
+      "reviewWorkflowDocuments",
+      "reviewWorkflowCustomerDocuments"
+    ]);
+    var id = zod_12.z.number().int().positive().max(Number.MAX_SAFE_INTEGER);
+    var page = zod_12.z.number().int().min(1).max(100);
+    var perPage = zod_12.z.number().int().min(1).max(500);
+    exports2.functionAbrigoReadRequestSchema = zod_12.z.discriminatedUnion("operation", [
+      zod_12.z.strictObject({ operation: zod_12.z.literal("workflow"), workflowId: id }),
+      zod_12.z.strictObject({ operation: zod_12.z.literal("entity"), entityId: id }),
+      zod_12.z.strictObject({ operation: zod_12.z.literal("entityGroupSummary"), entityId: id }),
+      zod_12.z.strictObject({ operation: zod_12.z.literal("loanRoles"), proposedLoanId: id, page, perPage }),
+      zod_12.z.strictObject({ operation: zod_12.z.literal("relatedLoanRoles"), proposedLoanId: id, page, perPage }),
+      zod_12.z.strictObject({ operation: zod_12.z.literal("workflowLoanMappings"), workflowId: id, page, perPage }),
+      zod_12.z.strictObject({ operation: zod_12.z.literal("workflowDocuments"), workflowId: id, page, perPage }),
+      zod_12.z.strictObject({ operation: zod_12.z.literal("customerDocuments"), customerId: id, page, perPage }),
+      zod_12.z.strictObject({ operation: zod_12.z.literal("reviewWorkflow"), workflowId: id }),
+      zod_12.z.strictObject({ operation: zod_12.z.literal("reviewWorkflowDocuments"), workflowId: id, page, perPage }),
+      zod_12.z.strictObject({ operation: zod_12.z.literal("reviewWorkflowCustomerDocuments"), workflowId: id, page, perPage })
+    ]);
+    exports2.functionAbrigoReadScopesSchema = zod_12.z.strictObject({
+      read: zod_12.z.array(exports2.abrigoReadOperationSchema).min(1).max(11).refine((operations) => new Set(operations).size === operations.length, "Abrigo read operations must be distinct")
+    });
+    function readFunctionAbrigoReadScopes(manifest) {
+      if (typeof manifest !== "object" || manifest === null)
+        return [];
+      const capabilities = Reflect.get(manifest, "capabilities");
+      if (typeof capabilities !== "object" || capabilities === null)
+        return [];
+      const abrigo = Reflect.get(capabilities, "abrigo");
+      return abrigo === void 0 ? [] : exports2.functionAbrigoReadScopesSchema.parse(abrigo).read;
+    }
+    var FunctionAbrigoReadError = class extends Error {
+      status;
+      code;
+      name = "FunctionAbrigoReadError";
+      constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+      }
+    };
+    exports2.FunctionAbrigoReadError = FunctionAbrigoReadError;
+  }
+});
+
+// dist/abrigo-response.js
+var require_abrigo_response = __commonJS({
+  "dist/abrigo-response.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.validateAbrigoReviewResponse = validateAbrigoReviewResponse;
+    var zod_12 = require_zod();
+    var abrigo_contract_1 = require_abrigo_contract();
+    var positiveId = zod_12.z.number().int().positive().max(Number.MAX_SAFE_INTEGER);
+    var reviewWorkflowSchema = zod_12.z.strictObject({ id: positiveId, customerId: positiveId });
+    var reviewDocumentsSchema = zod_12.z.object({ items: zod_12.z.array(zod_12.z.unknown()).max(500) }).passthrough();
+    var reviewCustomerDocumentsSchema = reviewDocumentsSchema.extend({ workflowId: positiveId, customerId: positiveId });
+    function validateAbrigoReviewResponse({ query, body }) {
+      const invalid = () => new abrigo_contract_1.FunctionAbrigoReadError(502, "malformed_response", "Atlas returned an invalid workflow document review response");
+      if (query.operation === "reviewWorkflow") {
+        const parsed = reviewWorkflowSchema.safeParse(body);
+        if (!parsed.success || parsed.data.id !== query.workflowId)
+          throw invalid();
+      } else if (query.operation === "reviewWorkflowDocuments") {
+        const parsed = reviewDocumentsSchema.safeParse(body);
+        if (!parsed.success || parsed.data.items.length > query.perPage)
+          throw invalid();
+      } else if (query.operation === "reviewWorkflowCustomerDocuments") {
+        const parsed = reviewCustomerDocumentsSchema.safeParse(body);
+        if (!parsed.success || parsed.data.workflowId !== query.workflowId || parsed.data.items.length > query.perPage)
+          throw invalid();
+      }
+    }
+  }
+});
+
+// dist/abrigo.js
+var require_abrigo = __commonJS({
+  "dist/abrigo.js"(exports2) {
+    "use strict";
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m2, k);
+      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m2[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m2[k];
+    }));
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
+    };
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.createFunctionCallerAbrigoClient = createFunctionCallerAbrigoClient;
+    var zod_12 = require_zod();
+    var abrigo_response_1 = require_abrigo_response();
+    var abrigo_contract_1 = require_abrigo_contract();
+    __exportStar2(require_abrigo_contract(), exports2);
+    var claimsSchema = zod_12.z.object({
+      audience: zod_12.z.literal(abrigo_contract_1.FUNCTION_ABRIGO_READ_AUDIENCE),
+      environment: zod_12.z.string().min(1).max(4096),
+      functionId: zod_12.z.uuid(),
+      versionId: zod_12.z.uuid(),
+      invocationId: zod_12.z.uuid(),
+      serviceAccountId: zod_12.z.uuid(),
+      org: zod_12.z.string().min(1).max(255),
+      callerKind: zod_12.z.literal("human"),
+      callerSub: zod_12.z.string().min(1).max(512).regex(/^[^\s:#|]+\|[^\s:#]+$/).refine((sub) => !sub.startsWith("service-account|") && !sub.startsWith("managed-function|") && !sub.startsWith("system|") && !sub.endsWith("@clients") && sub !== "google-apps|sequence.agent@seqholdings.com", "Only actual human callers may read Abrigo"),
+      callerAuthenticationMethod: zod_12.z.string().min(1).max(64),
+      exp: zod_12.z.number().int().positive().max(Number.MAX_SAFE_INTEGER)
+    });
+    function credential({ request }) {
+      const invalid = () => new abrigo_contract_1.FunctionAbrigoReadError(401, "invalid_context", "This invocation has no valid caller Abrigo read credential");
+      const headers = request.headers;
+      const matches = typeof headers.get === "function" ? [headers.get(abrigo_contract_1.FUNCTION_ABRIGO_READ_TOKEN_HEADER)] : Object.entries(headers).filter(([name]) => name.toLowerCase() === abrigo_contract_1.FUNCTION_ABRIGO_READ_TOKEN_HEADER).map(([, value2]) => value2);
+      const token = matches[0];
+      if (matches.length !== 1 || typeof token !== "string" || token.length > 16384)
+        throw invalid();
+      const envelope = /^([A-Za-z0-9_-]+)\.([A-Za-z0-9_-]{43})$/.exec(token);
+      if (!envelope?.[1])
+        throw invalid();
+      let value;
+      try {
+        const decoded = Buffer.from(envelope[1], "base64url");
+        if (decoded.toString("base64url") !== envelope[1])
+          throw invalid();
+        value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(decoded));
+      } catch {
+        throw invalid();
+      }
+      const parsed = claimsSchema.safeParse(value);
+      if (!parsed.success)
+        throw invalid();
+      return { token, expiresAt: parsed.data.exp };
+    }
+    function origin(baseUrl) {
+      const invalid = () => new abrigo_contract_1.FunctionAbrigoReadError(400, "invalid_configuration", "Configure a trusted HTTPS Atlas origin without credentials, path, query or fragment");
+      let url;
+      try {
+        url = new URL(baseUrl);
+      } catch {
+        throw invalid();
+      }
+      const loopback = url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+      if (!loopback && url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash)
+        throw invalid();
+      return url.origin;
+    }
+    function validJson(value, depth = 0) {
+      if (depth > 64)
+        return false;
+      if (value === null || typeof value === "string" || typeof value === "boolean")
+        return true;
+      if (typeof value === "number")
+        return Number.isFinite(value) && (!Number.isInteger(value) || Number.isSafeInteger(value));
+      if (Array.isArray(value))
+        return value.every((item) => validJson(item, depth + 1));
+      return typeof value === "object" && Object.values(value).every((item) => validJson(item, depth + 1));
+    }
+    async function boundedBody(response) {
+      const oversized = () => new abrigo_contract_1.FunctionAbrigoReadError(502, "response_too_large", "Abrigo read exceeded the bounded response size; reduce perPage");
+      const length = response.headers.get("content-length");
+      if (length && /^\d+$/.test(length) && Number(length) > abrigo_contract_1.ABRIGO_READ_MAX_RESPONSE_BYTES) {
+        await response.body?.cancel().catch(() => {
+        });
+        throw oversized();
+      }
+      if (!response.body)
+        throw new abrigo_contract_1.FunctionAbrigoReadError(502, "malformed_response", "Atlas returned invalid Abrigo JSON");
+      const reader = response.body.getReader();
+      const chunks = [];
+      let bytes = 0;
+      try {
+        for (; ; ) {
+          const chunk = await reader.read();
+          if (chunk.done)
+            break;
+          bytes += chunk.value.byteLength;
+          if (bytes > abrigo_contract_1.ABRIGO_READ_MAX_RESPONSE_BYTES) {
+            await reader.cancel().catch(() => {
+            });
+            throw oversized();
+          }
+          chunks.push(chunk.value);
+        }
+      } finally {
+        reader.releaseLock();
+      }
+      try {
+        return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks, bytes)));
+      } catch {
+        throw new abrigo_contract_1.FunctionAbrigoReadError(502, "malformed_response", "Atlas returned invalid Abrigo JSON");
+      }
+    }
+    function createFunctionCallerAbrigoClient({ request, baseUrl, fetchImpl = globalThis.fetch }) {
+      const url = `${origin(baseUrl)}${abrigo_contract_1.FUNCTION_ABRIGO_READ_PATH}`;
+      const { token, expiresAt } = credential({ request });
+      return {
+        async read(input) {
+          if (expiresAt <= Date.now() / 1e3)
+            throw new abrigo_contract_1.FunctionAbrigoReadError(401, "expired_context", "The Abrigo read credential expired; start a new invocation");
+          const query = abrigo_contract_1.functionAbrigoReadRequestSchema.safeParse(input);
+          if (!query.success)
+            throw new abrigo_contract_1.FunctionAbrigoReadError(400, "invalid_request", "Invalid bounded Abrigo read request");
+          try {
+            const response = await fetchImpl(url, { method: "POST", headers: { "content-type": "application/json", [abrigo_contract_1.FUNCTION_ABRIGO_READ_TOKEN_HEADER]: token }, body: JSON.stringify(query.data), redirect: "error", signal: AbortSignal.timeout(abrigo_contract_1.ABRIGO_READ_TIMEOUT_MS) });
+            const body = await boundedBody(response).catch((error) => {
+              if (!response.ok && error instanceof abrigo_contract_1.FunctionAbrigoReadError && error.code === "malformed_response")
+                return null;
+              throw error;
+            });
+            if (!response.ok) {
+              const error = zod_12.z.object({ code: zod_12.z.string().max(128).regex(/^[a-z][a-z0-9_]*$/).optional() }).safeParse(body);
+              throw new abrigo_contract_1.FunctionAbrigoReadError(response.status, error.success ? error.data.code ?? "abrigo_read_failed" : "abrigo_read_failed", "The authorized Abrigo read failed");
+            }
+            if (!validJson(body))
+              throw new abrigo_contract_1.FunctionAbrigoReadError(502, "malformed_response", "Atlas returned invalid Abrigo JSON");
+            (0, abrigo_response_1.validateAbrigoReviewResponse)({ query: query.data, body });
+            return body;
+          } catch (error) {
+            if (error instanceof abrigo_contract_1.FunctionAbrigoReadError)
+              throw error;
+            throw new abrigo_contract_1.FunctionAbrigoReadError(503, "abrigo_read_unavailable", "The authorized Abrigo read could not be completed");
+          }
+        }
+      };
+    }
+  }
+});
+
+// dist/invocation.js
+var require_invocation = __commonJS({
+  "dist/invocation.js"(exports2) {
+    "use strict";
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m2, k);
+      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m2[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m2[k];
+    }));
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
+    };
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.createFunctionInvocationClient = createFunctionInvocationClient;
+    var zod_12 = require_zod();
+    var invocation_contract_1 = require_invocation_contract();
+    __exportStar2(require_invocation_contract(), exports2);
+    var identifier = zod_12.z.string().min(1).max(255);
+    var principal = zod_12.z.string().min(1).max(512);
+    var tokenClaimsSchema = zod_12.z.strictObject({
+      audience: zod_12.z.literal("atlas-managed-function-invocation-identity"),
+      environment: zod_12.z.string().min(1).max(4096),
+      functionId: identifier,
+      versionId: identifier,
+      invocationId: identifier,
+      serviceAccountId: identifier,
+      org: identifier,
+      callerKind: zod_12.z.enum(["human", "service_account", "system"]),
+      callerSub: principal,
+      callerAuthenticationMethod: identifier,
+      exp: zod_12.z.number().int().positive().max(Number.MAX_SAFE_INTEGER)
+    });
+    var errorSchema = zod_12.z.strictObject({
+      code: zod_12.z.string().min(1).max(128).regex(/^[a-z][a-z0-9_]*$/),
+      detail: zod_12.z.string().min(1).max(2e3)
+    });
+    var invalidContext = () => new invocation_contract_1.FunctionInvocationContextError(401, "invalid_context", "This invocation has no valid identity credential");
+    function readCredential({ request }) {
+      const { headers } = request;
+      const matches = typeof headers.get === "function" ? [headers.get(invocation_contract_1.FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER)] : Object.entries(headers).filter(([name]) => name.toLowerCase() === invocation_contract_1.FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER).map(([, value2]) => value2);
+      const token = matches[0];
+      if (matches.length !== 1 || typeof token !== "string" || token.length > 16384)
+        throw invalidContext();
+      const envelope = /^([A-Za-z0-9_-]+)\.([A-Za-z0-9_-]{43})$/.exec(token);
+      if (!envelope?.[1])
+        throw invalidContext();
+      let value;
+      try {
+        const decoded = Buffer.from(envelope[1], "base64url");
+        if (decoded.toString("base64url") !== envelope[1])
+          throw invalidContext();
+        value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(decoded));
+      } catch {
+        throw invalidContext();
+      }
+      const parsed = tokenClaimsSchema.safeParse(value);
+      if (!parsed.success)
+        throw invalidContext();
+      return { token, claims: parsed.data };
+    }
+    function trustedOrigin(baseUrl) {
+      const invalid = () => new invocation_contract_1.FunctionInvocationContextError(400, "invalid_configuration", "Configure a trusted HTTPS Atlas origin without credentials, path, query or fragment");
+      let url;
+      try {
+        url = new URL(baseUrl);
+      } catch {
+        throw invalid();
+      }
+      const loopback = url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+      if (!loopback && url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash)
+        throw invalid();
+      return url.origin;
+    }
+    function requireFresh(claims) {
+      if (claims.exp <= Date.now() / 1e3)
+        throw new invocation_contract_1.FunctionInvocationContextError(401, "expired_context", "The identity credential expired; start a new invocation");
+    }
+    function matchesInvocation({ context: context2, claims }) {
+      const { receiver, caller } = context2;
+      return receiver.functionId === claims.functionId && receiver.versionId === claims.versionId && receiver.invocationId === claims.invocationId && receiver.orgId === claims.org && receiver.serviceAccountId === claims.serviceAccountId && caller.kind === claims.callerKind && caller.sub === claims.callerSub;
+    }
+    function createFunctionInvocationClient({ request, baseUrl, fetchImpl = globalThis.fetch }) {
+      const url = `${trustedOrigin(baseUrl)}${invocation_contract_1.FUNCTION_INVOCATION_CONTEXT_PATH}`;
+      const { token, claims } = readCredential({ request });
+      return {
+        async getInvocationContext() {
+          requireFresh(claims);
+          let response;
+          try {
+            response = await fetchImpl(url, {
+              method: "POST",
+              headers: {
+                "content-type": "application/json",
+                [invocation_contract_1.FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER]: token
+              },
+              body: JSON.stringify(invocation_contract_1.functionInvocationContextRequestSchema.parse({ operation: "getInvocationContext" })),
+              redirect: "error",
+              signal: AbortSignal.timeout(3e4)
+            });
+          } catch {
+            throw new invocation_contract_1.FunctionInvocationContextError(502, "context_request_failed", "The invocation context request failed");
+          }
+          if (response.redirected || response.status >= 300 && response.status < 400)
+            throw new invocation_contract_1.FunctionInvocationContextError(502, "redirect_refused", "The invocation context request must not redirect");
+          const result = await response.json().catch(() => null);
+          if (!response.ok) {
+            const error = errorSchema.safeParse(result);
+            throw new invocation_contract_1.FunctionInvocationContextError(response.status, error.success ? error.data.code : "context_read_failed", error.success && !error.data.detail.includes(token) ? error.data.detail : "Invocation context read failed");
+          }
+          requireFresh(claims);
+          const parsed = invocation_contract_1.functionInvocationContextSchema.safeParse(result);
+          if (!parsed.success || !matchesInvocation({ context: parsed.data, claims }))
+            throw new invocation_contract_1.FunctionInvocationContextError(502, "malformed_response", "Atlas returned an invalid invocation context response");
+          return parsed.data;
+        }
+      };
+    }
+  }
+});
+
 // dist/processes-contract.js
 var require_processes_contract = __commonJS({
   "dist/processes-contract.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.FunctionProcessReadError = exports2.functionProcessReadRequestSchema = exports2.functionProcessRunsPageSchema = exports2.functionProcessRunsPageQuerySchema = exports2.functionProcessRunQuerySchema = exports2.functionProcessRunSummarySchema = exports2.functionProcessRunStatusSchema = exports2.functionProcessReadScopesSchema = exports2.FUNCTION_PROCESS_READ_PATH = exports2.FUNCTION_PROCESS_TOKEN_HEADER = void 0;
+    exports2.FunctionProcessReadError = exports2.functionProcessReadRequestSchema = exports2.functionProcessRunsPageSchema = exports2.functionProcessCompletedAgentReferenceSchema = exports2.functionProcessCompletedAgentReferenceQuerySchema = exports2.functionProcessRunsPageQuerySchema = exports2.functionProcessRunQuerySchema = exports2.functionProcessRunSummarySchema = exports2.functionProcessRunStatusSchema = exports2.functionProcessReadScopesSchema = exports2.FUNCTION_PROCESS_READ_PATH = exports2.FUNCTION_PROCESS_TOKEN_HEADER = void 0;
     exports2.readFunctionProcessScopes = readFunctionProcessScopes;
     var zod_12 = require_zod();
     exports2.FUNCTION_PROCESS_TOKEN_HEADER = "x-sequence-process-service-token";
@@ -17138,12 +17928,22 @@ var require_processes_contract = __commonJS({
       cursor: zod_12.z.string().min(1).max(8192).optional(),
       archived: zod_12.z.boolean().optional()
     });
+    exports2.functionProcessCompletedAgentReferenceQuerySchema = exports2.functionProcessRunQuerySchema.extend({ nodeId: entityId });
+    exports2.functionProcessCompletedAgentReferenceSchema = zod_12.z.strictObject({
+      stepId: entityId,
+      attempt: zod_12.z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
+      agentId: entityId,
+      agentRunId: entityId,
+      threadId: entityId,
+      recoveryProof: zod_12.z.string().min(1).max(16384)
+    });
     exports2.functionProcessRunsPageSchema = zod_12.z.object({
       runs: zod_12.z.array(exports2.functionProcessRunSummarySchema).max(500),
       nextCursor: zod_12.z.string().nullable()
     });
     exports2.functionProcessReadRequestSchema = zod_12.z.discriminatedUnion("operation", [
       exports2.functionProcessRunQuerySchema.extend({ operation: zod_12.z.literal("getRun") }),
+      exports2.functionProcessCompletedAgentReferenceQuerySchema.extend({ operation: zod_12.z.literal("getCompletedAgentReference") }),
       exports2.functionProcessRunsPageQuerySchema.extend({
         operation: zod_12.z.literal("listRunsPage")
       })
@@ -17162,11 +17962,83 @@ var require_processes_contract = __commonJS({
   }
 });
 
+// dist/agents-contract.js
+var require_agents_contract = __commonJS({
+  "dist/agents-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.FunctionAgentReadError = exports2.functionAgentCompletedRunSchema = exports2.functionAgentMessageSchema = exports2.functionAgentReadRequestSchema = exports2.functionAgentCompletedRunQuerySchema = exports2.functionAgentReadScopesSchema = exports2.functionAgentEvidenceScopesSchema = exports2.FUNCTION_AGENT_CAPTURE_PATH = exports2.FUNCTION_AGENT_READ_PATH = exports2.FUNCTION_AGENT_TOKEN_HEADER = void 0;
+    exports2.readFunctionAgentScopes = readFunctionAgentScopes;
+    var zod_12 = require_zod();
+    exports2.FUNCTION_AGENT_TOKEN_HEADER = "x-sequence-agent-service-token";
+    exports2.FUNCTION_AGENT_READ_PATH = "/api/managed-functions/agents/read";
+    exports2.FUNCTION_AGENT_CAPTURE_PATH = "/api/managed-functions/agents/capture";
+    var resourceId = zod_12.z.string().min(1).max(255).regex(/^[A-Za-z0-9._-]+$/);
+    exports2.functionAgentEvidenceScopesSchema = zod_12.z.array(resourceId).min(1).max(64).refine((ids) => new Set(ids).size === ids.length, "Agent evidence ids must be distinct").refine((ids) => ids.reduce((bytes, id) => bytes + id.length, 0) <= 8192, "Agent evidence ids must fit within 8192 bytes");
+    exports2.functionAgentReadScopesSchema = zod_12.z.strictObject({
+      read: zod_12.z.array(resourceId).min(1).max(64).refine((ids) => new Set(ids).size === ids.length, "Agent ids must be distinct").refine((ids) => ids.reduce((bytes, id) => bytes + id.length, 0) <= 8192, "Agent ids must fit within 8192 bytes").optional(),
+      evidence: exports2.functionAgentEvidenceScopesSchema.optional()
+    }).refine((value) => value.read !== void 0 || value.evidence !== void 0, "Declare agent reads or evidence verification");
+    function readFunctionAgentScopes(manifest) {
+      if (typeof manifest !== "object" || manifest === null)
+        return [];
+      const capabilities = Reflect.get(manifest, "capabilities");
+      if (typeof capabilities !== "object" || capabilities === null)
+        return [];
+      const agents = Reflect.get(capabilities, "agents");
+      if (agents === void 0)
+        return [];
+      return exports2.functionAgentReadScopesSchema.parse(agents).read ?? [];
+    }
+    exports2.functionAgentCompletedRunQuerySchema = zod_12.z.strictObject({ agent: resourceId, runId: resourceId, recoveryProof: zod_12.z.string().min(1).max(16384).optional() });
+    exports2.functionAgentReadRequestSchema = exports2.functionAgentCompletedRunQuerySchema.extend({ operation: zod_12.z.literal("getCompletedRun") });
+    exports2.functionAgentMessageSchema = zod_12.z.strictObject({
+      id: zod_12.z.string().min(1).max(255),
+      role: zod_12.z.literal("assistant"),
+      parts: zod_12.z.array(zod_12.z.union([
+        zod_12.z.strictObject({ type: zod_12.z.literal("text"), text: zod_12.z.string() }),
+        zod_12.z.strictObject({ type: zod_12.z.literal("dynamic-tool"), output: zod_12.z.strictObject({ content: zod_12.z.array(zod_12.z.strictObject({ type: zod_12.z.literal("resource"), resource: zod_12.z.strictObject({ uri: zod_12.z.string().startsWith("citation://"), text: zod_12.z.string() }) })).max(1e3) }) })
+      ])).max(1e3),
+      metadata: zod_12.z.strictObject({ citations: zod_12.z.array(zod_12.z.json()).max(1e3) }).optional()
+    });
+    exports2.functionAgentCompletedRunSchema = zod_12.z.strictObject({
+      runId: resourceId,
+      agent: resourceId,
+      threadId: resourceId,
+      status: zod_12.z.literal("completed"),
+      output: zod_12.z.json(),
+      messages: zod_12.z.array(exports2.functionAgentMessageSchema).max(1e3),
+      conversation: zod_12.z.strictObject({
+        messageCount: zod_12.z.number().int().min(0).max(1e3),
+        userMessageCount: zod_12.z.number().int().min(0).max(1e3),
+        assistantMessageCount: zod_12.z.number().int().min(0).max(1e3),
+        messages: zod_12.z.array(zod_12.z.strictObject({
+          id: zod_12.z.string().min(1).max(255),
+          role: zod_12.z.enum(["user", "assistant"]),
+          textParts: zod_12.z.array(zod_12.z.string()).max(1e3),
+          tools: zod_12.z.array(zod_12.z.strictObject({ partType: zod_12.z.string().min(1).max(255), toolName: zod_12.z.string().max(255).nullable(), state: zod_12.z.string().max(255).nullable(), outputTruthy: zod_12.z.boolean() })).max(1e3)
+        })).max(1e3)
+      }).optional()
+    });
+    var FunctionAgentReadError = class extends Error {
+      status;
+      code;
+      name = "FunctionAgentReadError";
+      constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+      }
+    };
+    exports2.FunctionAgentReadError = FunctionAgentReadError;
+  }
+});
+
 // dist/processes.js
 var require_processes = __commonJS({
   "dist/processes.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -17179,15 +18051,37 @@ var require_processes = __commonJS({
       if (k2 === void 0) k2 = k;
       o[k2] = m2[k];
     }));
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.createFunctionServiceProcessesClient = createFunctionServiceProcessesClient;
     var zod_12 = require_zod();
     var processes_contract_1 = require_processes_contract();
     var invocation_client_1 = require_invocation_client();
-    __exportStar(require_processes_contract(), exports2);
+    var agents_contract_1 = require_agents_contract();
+    __exportStar2(require_processes_contract(), exports2);
+    function readAgentCredential({ request }) {
+      const { headers } = request;
+      const matches = typeof headers.get === "function" ? [headers.get(agents_contract_1.FUNCTION_AGENT_TOKEN_HEADER)] : Object.entries(headers).filter(([name]) => name.toLowerCase() === agents_contract_1.FUNCTION_AGENT_TOKEN_HEADER).map(([, value2]) => value2);
+      const token = matches[0];
+      const denied = () => new processes_contract_1.FunctionProcessReadError(401, "invalid_context", "Completed-agent reference lookup requires an agent-read credential");
+      if (matches.length !== 1 || typeof token !== "string" || token.length > 16384)
+        throw denied();
+      const body = /^([A-Za-z0-9_-]+)\.[A-Za-z0-9_-]{43}$/.exec(token)?.[1];
+      if (!body)
+        throw denied();
+      let value;
+      try {
+        value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+      } catch {
+        throw denied();
+      }
+      const claims = zod_12.z.object({ audience: zod_12.z.literal("atlas-managed-function-agent-read"), sub: zod_12.z.string().startsWith("service-account|"), functionId: zod_12.z.string().min(1), invocationId: zod_12.z.string().min(1), exp: zod_12.z.number().int() }).safeParse(value);
+      if (!claims.success)
+        throw denied();
+      return { token, expiresAt: claims.data.exp };
+    }
     var invalidContext = () => new processes_contract_1.FunctionProcessReadError(401, "invalid_context", "This invocation has no valid process-read credential");
     function createFunctionServiceProcessesClient({ request, baseUrl, fetchImpl = globalThis.fetch }) {
       const credential = (0, invocation_client_1.readInvocationCredential)({
@@ -17215,6 +18109,21 @@ var require_processes = __commonJS({
       });
       const read = ({ body, schema }) => transport({ body: processes_contract_1.functionProcessReadRequestSchema.parse(body), schema });
       return {
+        async getCompletedAgentReference(query) {
+          const agent = readAgentCredential({ request });
+          const readReference = (0, invocation_client_1.createInvocationReadTransport)({
+            baseUrl,
+            fetchImpl,
+            path: processes_contract_1.FUNCTION_PROCESS_READ_PATH,
+            header: processes_contract_1.FUNCTION_PROCESS_TOKEN_HEADER,
+            credential,
+            additionalCredentials: [{ header: agents_contract_1.FUNCTION_AGENT_TOKEN_HEADER, credential: agent }],
+            timeoutMs: 3e4,
+            error: (status, code, message) => new processes_contract_1.FunctionProcessReadError(status, code, message),
+            failure: { code: "process_read_failed", message: "Process read failed" }
+          });
+          return readReference({ body: processes_contract_1.functionProcessReadRequestSchema.parse({ ...query, operation: "getCompletedAgentReference" }), schema: processes_contract_1.functionProcessCompletedAgentReferenceSchema });
+        },
         async getRun(query) {
           const run = await read({
             body: { ...query, operation: "getRun" },
@@ -17238,6 +18147,906 @@ var require_processes = __commonJS({
   }
 });
 
+// dist/agent-source-evidence-contract.js
+var require_agent_source_evidence_contract = __commonJS({
+  "dist/agent-source-evidence-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.functionAgentSourceEvidenceVerificationSchema = exports2.functionAgentSourceEvidenceRequestSchema = exports2.functionAgentSourceEvidenceClaimsSchema = exports2.functionAgentHumanConversationEvidenceClaimsSchema = exports2.functionAgentRunSourceEvidenceClaimsSchema = exports2.functionAgentManagedFunctionSourceEvidenceClaimsSchema = exports2.functionAgentHumanSourceEvidenceClaimsSchema = exports2.functionAgentConversationEvidenceRequestSchema = exports2.functionAgentConversationEvidenceQuerySchema = exports2.functionAgentConversationEvidenceCaptureSchema = exports2.functionAgentConversationEvidenceResponseSchema = exports2.functionAgentSourceEvidenceCaptureSchema = exports2.functionAgentSourceResponseSchema = exports2.functionAgentConversationResponseSchema = exports2.functionAgentSourceExecutionSchema = exports2.functionSourceJobAdmissionSchema = exports2.AGENT_SOURCE_VERIFY_MAX_BYTES = exports2.AGENT_SOURCE_RESPONSE_MAX_BYTES = exports2.FUNCTION_AGENT_EVIDENCE_PATH = exports2.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER = exports2.functionAgentEvidenceScopesSchema = void 0;
+    exports2.readFunctionAgentEvidenceScopes = readFunctionAgentEvidenceScopes;
+    var zod_12 = require_zod();
+    var agents_contract_1 = require_agents_contract();
+    var agents_contract_2 = require_agents_contract();
+    Object.defineProperty(exports2, "functionAgentEvidenceScopesSchema", { enumerable: true, get: function() {
+      return agents_contract_2.functionAgentEvidenceScopesSchema;
+    } });
+    exports2.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER = "x-sequence-agent-evidence-token";
+    exports2.FUNCTION_AGENT_EVIDENCE_PATH = "/api/managed-functions/agents/evidence";
+    exports2.AGENT_SOURCE_RESPONSE_MAX_BYTES = 512 * 1024;
+    exports2.AGENT_SOURCE_VERIFY_MAX_BYTES = 768 * 1024;
+    var identifier = zod_12.z.string().min(1).max(255);
+    var hash = zod_12.z.string().regex(/^[a-f0-9]{64}$/);
+    exports2.functionSourceJobAdmissionSchema = zod_12.z.strictObject({
+      idempotencyKey: zod_12.z.string().min(1).max(128).regex(/^[\x21-\x7e]+$/),
+      requestHash: hash,
+      kind: zod_12.z.enum(["agent", "workflow"]),
+      resourceId: identifier,
+      actorSub: zod_12.z.string().min(1).max(512),
+      runId: identifier,
+      executionSnapshotId: zod_12.z.uuid()
+    });
+    exports2.functionAgentSourceExecutionSchema = zod_12.z.strictObject({
+      run: zod_12.z.strictObject({ id: identifier, processId: identifier, processVersion: identifier, bundleHash: identifier, entity: zod_12.z.strictObject({ type: identifier, id: identifier }).nullable() }),
+      step: zod_12.z.strictObject({ id: identifier, nodeId: identifier, attempt: zod_12.z.number().int().positive() }),
+      agent: zod_12.z.strictObject({ id: identifier, runId: identifier, threadId: identifier, identity: zod_12.z.strictObject({ id: identifier, version: identifier, definitionSha256: hash }) })
+    }).refine((source) => source.agent.id === source.agent.identity.id, "The source agent must match its private execution identity");
+    function readFunctionAgentEvidenceScopes(manifest) {
+      if (typeof manifest !== "object" || manifest === null)
+        return [];
+      const capabilities = Reflect.get(manifest, "capabilities");
+      if (typeof capabilities !== "object" || capabilities === null)
+        return [];
+      const agents = Reflect.get(capabilities, "agents");
+      if (typeof agents !== "object" || agents === null)
+        return [];
+      const evidence = Reflect.get(agents, "evidence");
+      return evidence === void 0 ? [] : agents_contract_1.functionAgentEvidenceScopesSchema.parse(evidence);
+    }
+    var textPart = zod_12.z.strictObject({ type: zod_12.z.literal("text"), text: zod_12.z.string() });
+    var toolPart = zod_12.z.strictObject({
+      type: zod_12.z.string().min(1).max(255).refine((type) => type !== "tool-result" && (type === "dynamic-tool" || type === "tool-invocation" || type.startsWith("tool-")), "Only tool parts are permitted"),
+      toolName: zod_12.z.string().max(255).optional(),
+      name: zod_12.z.string().max(255).optional(),
+      toolCallId: identifier.optional(),
+      state: zod_12.z.string().max(255).optional(),
+      input: zod_12.z.json().optional(),
+      output: zod_12.z.json().optional()
+    });
+    exports2.functionAgentConversationResponseSchema = agents_contract_1.functionAgentCompletedRunSchema.extend({
+      context: zod_12.z.strictObject({
+        messages: zod_12.z.array(zod_12.z.strictObject({ id: identifier, role: zod_12.z.enum(["user", "assistant"]), parts: zod_12.z.array(zod_12.z.union([textPart, toolPart])).max(1e3), metadata: zod_12.z.strictObject({ citations: zod_12.z.array(zod_12.z.json()).max(1e3) }).optional() })).max(1e3),
+        compactionSummary: zod_12.z.string().nullable()
+      })
+    });
+    exports2.functionAgentSourceResponseSchema = zod_12.z.union([agents_contract_1.functionAgentCompletedRunSchema, exports2.functionAgentConversationResponseSchema]);
+    exports2.functionAgentSourceEvidenceCaptureSchema = zod_12.z.strictObject({ response: exports2.functionAgentSourceResponseSchema, responseHash: hash, sourceReceipt: zod_12.z.string().min(1).max(16384) });
+    var conversationRevision = zod_12.z.number().int().min(1).max(Number.MAX_SAFE_INTEGER);
+    exports2.functionAgentConversationEvidenceResponseSchema = zod_12.z.strictObject({
+      agent: identifier,
+      threadId: identifier,
+      revision: conversationRevision,
+      cutoffAt: zod_12.z.iso.datetime({ offset: true }),
+      context: exports2.functionAgentConversationResponseSchema.shape.context.extend({ compactionSummary: zod_12.z.null() }),
+      conversation: agents_contract_1.functionAgentCompletedRunSchema.shape.conversation.unwrap()
+    });
+    exports2.functionAgentConversationEvidenceCaptureSchema = zod_12.z.strictObject({ response: exports2.functionAgentConversationEvidenceResponseSchema, responseHash: hash, sourceReceipt: zod_12.z.string().min(1).max(16384) });
+    exports2.functionAgentConversationEvidenceQuerySchema = zod_12.z.strictObject({ agent: identifier, threadId: identifier });
+    exports2.functionAgentConversationEvidenceRequestSchema = exports2.functionAgentConversationEvidenceQuerySchema.extend({ operation: zod_12.z.literal("verifyConversationEvidence"), response: exports2.functionAgentConversationEvidenceResponseSchema, responseHash: hash, sourceReceipt: zod_12.z.string().min(1).max(16384) });
+    var sourceEvidenceFields = {
+      environment: zod_12.z.string(),
+      org: identifier,
+      agentId: identifier,
+      runId: identifier,
+      threadId: identifier,
+      familyRunIds: zod_12.z.array(identifier).min(1).max(16),
+      cutoffAt: zod_12.z.iso.datetime({ offset: true }),
+      responseHash: hash,
+      sourceExecution: exports2.functionAgentSourceExecutionSchema.nullable(),
+      jobAdmission: exports2.functionSourceJobAdmissionSchema.nullable()
+    };
+    exports2.functionAgentHumanSourceEvidenceClaimsSchema = zod_12.z.strictObject({
+      ...sourceEvidenceFields,
+      sourceKind: zod_12.z.literal("human"),
+      audience: zod_12.z.literal("atlas-agent-source-evidence"),
+      actualUserSub: zod_12.z.string().min(1).max(512).refine((sub) => !sub.startsWith("service-account|"), "Human source evidence requires a user principal"),
+      projection: zod_12.z.enum(["completed-v1", "conversation-v1"])
+    });
+    exports2.functionAgentManagedFunctionSourceEvidenceClaimsSchema = zod_12.z.strictObject({
+      ...sourceEvidenceFields,
+      sourceKind: zod_12.z.literal("managed_function"),
+      audience: zod_12.z.literal("atlas-managed-function-source-evidence"),
+      actualServiceAccountSub: zod_12.z.string().min(1).max(512),
+      projection: zod_12.z.literal("completed-v1"),
+      sourceReceiver: zod_12.z.strictObject({ functionId: zod_12.z.uuid(), versionId: zod_12.z.uuid(), invocationId: zod_12.z.uuid(), serviceAccountId: zod_12.z.uuid(), org: identifier })
+    }).refine((source) => source.actualServiceAccountSub === `service-account|${source.sourceReceiver.serviceAccountId}` && source.org === source.sourceReceiver.org, "The service source must match its actual invocation identity");
+    exports2.functionAgentRunSourceEvidenceClaimsSchema = zod_12.z.discriminatedUnion("sourceKind", [exports2.functionAgentHumanSourceEvidenceClaimsSchema, exports2.functionAgentManagedFunctionSourceEvidenceClaimsSchema]).refine((source) => source.familyRunIds.includes(source.runId) && new Set(source.familyRunIds).size === source.familyRunIds.length, "The source family must contain its run and be distinct").refine((source) => source.sourceExecution === null || source.sourceExecution.agent.id === source.agentId && source.sourceExecution.agent.runId === source.runId && source.sourceExecution.agent.threadId === source.threadId, "The execution origin must match the captured source").refine((source) => source.jobAdmission === null || source.jobAdmission.kind === "agent" && source.jobAdmission.runId === source.runId && source.jobAdmission.resourceId === source.agentId && (source.sourceKind === "human" || source.jobAdmission.actorSub === source.actualServiceAccountSub), "The job admission must match the captured source");
+    exports2.functionAgentHumanConversationEvidenceClaimsSchema = zod_12.z.strictObject({
+      sourceKind: zod_12.z.literal("human"),
+      projection: zod_12.z.literal("thread-conversation-v1"),
+      audience: zod_12.z.literal("atlas-agent-source-evidence"),
+      actualUserSub: zod_12.z.string().min(1).max(512).refine((sub) => !sub.startsWith("service-account|"), "Human conversation evidence requires a user principal"),
+      environment: zod_12.z.string(),
+      org: identifier,
+      agentId: identifier,
+      threadId: identifier,
+      revision: conversationRevision,
+      cutoffAt: zod_12.z.iso.datetime({ offset: true }),
+      responseHash: hash
+    });
+    exports2.functionAgentSourceEvidenceClaimsSchema = zod_12.z.union([exports2.functionAgentRunSourceEvidenceClaimsSchema, exports2.functionAgentHumanConversationEvidenceClaimsSchema]);
+    exports2.functionAgentSourceEvidenceRequestSchema = zod_12.z.strictObject({ operation: zod_12.z.literal("verifySourceEvidence"), agent: identifier, runId: identifier, response: exports2.functionAgentSourceResponseSchema, responseHash: hash, sourceReceipt: zod_12.z.string().min(1).max(16384) });
+    exports2.functionAgentSourceEvidenceVerificationSchema = zod_12.z.strictObject({
+      source: exports2.functionAgentSourceEvidenceClaimsSchema,
+      receiver: zod_12.z.strictObject({ functionId: identifier, versionId: identifier, invocationId: identifier, serviceAccountId: identifier, org: identifier }),
+      lattice: zod_12.z.strictObject({
+        receiverFunctionOrgId: identifier,
+        run: zod_12.z.strictObject({ id: identifier, processId: identifier, processVersion: identifier, bundleHash: identifier, entity: zod_12.z.strictObject({ type: identifier, id: identifier }).nullable() }),
+        step: zod_12.z.strictObject({ id: identifier, nodeId: identifier, attempt: zod_12.z.number().int().positive(), runAsServiceAccount: zod_12.z.string().nullable() }),
+        receiver: zod_12.z.strictObject({ functionId: identifier, versionId: identifier, invocationId: identifier })
+      }).nullable()
+    });
+  }
+});
+
+// dist/agents.js
+var require_agents = __commonJS({
+  "dist/agents.js"(exports2) {
+    "use strict";
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m2, k);
+      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m2[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m2[k];
+    }));
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
+    };
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.createFunctionServiceAgentsClient = createFunctionServiceAgentsClient;
+    var zod_12 = require_zod();
+    var agents_contract_1 = require_agents_contract();
+    var agent_source_evidence_contract_12 = require_agent_source_evidence_contract();
+    var processes_contract_1 = require_processes_contract();
+    __exportStar2(require_agents_contract(), exports2);
+    function header({ request, name }) {
+      const { headers } = request;
+      const values = typeof headers.get === "function" ? [headers.get(name)] : Object.entries(headers).filter(([key]) => key.toLowerCase() === name).map(([, value]) => value);
+      return values.length === 1 && typeof values[0] === "string" ? values[0] : null;
+    }
+    function credential(request) {
+      const denied = () => new agents_contract_1.FunctionAgentReadError(401, "invalid_context", "This invocation has no valid agent-read credential");
+      const token = header({ request, name: agents_contract_1.FUNCTION_AGENT_TOKEN_HEADER });
+      if (!token || token.length > 16384)
+        throw denied();
+      const body = /^([A-Za-z0-9_-]+)\.[A-Za-z0-9_-]{43}$/.exec(token)?.[1];
+      if (!body)
+        throw denied();
+      let value;
+      try {
+        value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+      } catch {
+        throw denied();
+      }
+      const claims = zod_12.z.object({ audience: zod_12.z.literal("atlas-managed-function-agent-read"), sub: zod_12.z.string().startsWith("service-account|"), functionId: zod_12.z.string().min(1), invocationId: zod_12.z.string().min(1), exp: zod_12.z.number().int() }).safeParse(value);
+      if (!claims.success)
+        throw denied();
+      return { token, expiresAt: claims.data.exp };
+    }
+    function origin(baseUrl) {
+      let url;
+      try {
+        url = new URL(baseUrl);
+      } catch {
+        throw new agents_contract_1.FunctionAgentReadError(400, "invalid_configuration", "Configure a trusted Atlas origin");
+      }
+      const loopback = url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+      if (!loopback && url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash)
+        throw new agents_contract_1.FunctionAgentReadError(400, "invalid_configuration", "Configure an HTTPS Atlas origin without credentials, path, query or fragment");
+      return url.origin;
+    }
+    function recoveryProcessCredential(request) {
+      const denied = () => new agents_contract_1.FunctionAgentReadError(401, "invalid_context", "Recovery requires this invocation\u2019s process-read credential");
+      const token = header({ request, name: processes_contract_1.FUNCTION_PROCESS_TOKEN_HEADER });
+      if (!token || token.length > 16384)
+        throw denied();
+      const body = /^([A-Za-z0-9_-]+)\.[A-Za-z0-9_-]{43}$/.exec(token)?.[1];
+      if (!body)
+        throw denied();
+      let value;
+      try {
+        value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+      } catch {
+        throw denied();
+      }
+      const claims = zod_12.z.object({ audience: zod_12.z.literal("atlas-managed-function-process-read"), sub: zod_12.z.string().startsWith("service-account|"), functionId: zod_12.z.string().min(1), invocationId: zod_12.z.string().min(1), exp: zod_12.z.number().int() }).safeParse(value);
+      if (!claims.success)
+        throw denied();
+      if (claims.data.exp <= Date.now() / 1e3)
+        throw new agents_contract_1.FunctionAgentReadError(401, "expired_context", "The process-read credential expired; start a new invocation");
+      return token;
+    }
+    function createFunctionServiceAgentsClient({ request, baseUrl, fetchImpl = globalThis.fetch }) {
+      const base = origin(baseUrl);
+      const { token, expiresAt } = credential(request);
+      const lattice = header({ request, name: "x-sequence-lattice-execution-token" });
+      async function read(query, capture) {
+        if (expiresAt <= Date.now() / 1e3)
+          throw new agents_contract_1.FunctionAgentReadError(401, "expired_context", "The agent-read credential expired; start a new invocation");
+        const body = agents_contract_1.functionAgentCompletedRunQuerySchema.parse(query);
+        const process2 = body.recoveryProof ? recoveryProcessCredential(request) : null;
+        const evidence = capture ? header({ request, name: agent_source_evidence_contract_12.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER }) : null;
+        if (capture && !evidence)
+          throw new agents_contract_1.FunctionAgentReadError(401, "invalid_context", "Source capture requires this invocation\u2019s separate agent-evidence credential");
+        const response = await fetchImpl(`${base}${capture ? agents_contract_1.FUNCTION_AGENT_CAPTURE_PATH : agents_contract_1.FUNCTION_AGENT_READ_PATH}`, {
+          method: "POST",
+          headers: { "content-type": "application/json", [agents_contract_1.FUNCTION_AGENT_TOKEN_HEADER]: token, ...process2 ? { [processes_contract_1.FUNCTION_PROCESS_TOKEN_HEADER]: process2 } : {}, ...evidence ? { [agent_source_evidence_contract_12.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER]: evidence } : {}, ...lattice ? { "x-sequence-lattice-execution-token": lattice } : {} },
+          body: JSON.stringify({ ...body, operation: capture ? "captureCompletedRun" : "getCompletedRun" }),
+          redirect: "error",
+          signal: AbortSignal.timeout(3e4)
+        });
+        const result = await response.json().catch(() => null);
+        if (!response.ok) {
+          const error = zod_12.z.object({ code: zod_12.z.string().max(128).optional(), detail: zod_12.z.string().max(2e3).optional() }).safeParse(result);
+          throw new agents_contract_1.FunctionAgentReadError(response.status, error.success ? error.data.code ?? "agent_read_failed" : "agent_read_failed", error.success ? error.data.detail ?? "Agent read failed" : "Agent read failed");
+        }
+        return result;
+      }
+      return {
+        async getCompletedRun(query) {
+          const result = await read(query, false);
+          const parsed = agents_contract_1.functionAgentCompletedRunSchema.safeParse(result);
+          if (!parsed.success || parsed.data.runId !== query.runId || parsed.data.agent !== query.agent)
+            throw new agents_contract_1.FunctionAgentReadError(502, "malformed_response", "Atlas returned an invalid completed agent response");
+          return parsed.data;
+        },
+        async captureCompletedRun(query) {
+          const parsed = agent_source_evidence_contract_12.functionAgentSourceEvidenceCaptureSchema.safeParse(await read(query, true));
+          if (!parsed.success || parsed.data.response.runId !== query.runId || parsed.data.response.agent !== query.agent || "context" in parsed.data.response)
+            throw new agents_contract_1.FunctionAgentReadError(502, "malformed_response", "Atlas returned an invalid neutral source capture");
+          return parsed.data;
+        }
+      };
+    }
+  }
+});
+
+// dist/agent-evidence.js
+var require_agent_evidence = __commonJS({
+  "dist/agent-evidence.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.createFunctionAgentEvidenceClient = createFunctionAgentEvidenceClient;
+    var zod_12 = require_zod();
+    var agents_12 = require_agents();
+    var agent_source_evidence_contract_12 = require_agent_source_evidence_contract();
+    function header(request, name) {
+      const { headers } = request;
+      const values = typeof headers.get === "function" ? [headers.get(name)] : Object.entries(headers).filter(([key]) => key.toLowerCase() === name).map(([, value]) => value);
+      return values.length === 1 && typeof values[0] === "string" ? values[0] : null;
+    }
+    var bindingSchema = zod_12.z.object({ audience: zod_12.z.literal("atlas-managed-function-agent-evidence"), sub: zod_12.z.string().startsWith("service-account|"), functionId: zod_12.z.uuid(), versionId: zod_12.z.uuid(), invocationId: zod_12.z.uuid(), serviceAccountId: zod_12.z.uuid(), org: zod_12.z.string().min(1), exp: zod_12.z.number().int() });
+    function invocation(request) {
+      const denied = () => new agents_12.FunctionAgentReadError(401, "invalid_context", "This invocation has no valid agent-evidence credential");
+      const token = header(request, agent_source_evidence_contract_12.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER);
+      const body = token && token.length <= 16384 ? /^([A-Za-z0-9_-]+)\.[A-Za-z0-9_-]{43}$/.exec(token)?.[1] : null;
+      if (!body || !token)
+        throw denied();
+      let value;
+      try {
+        value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+      } catch {
+        throw denied();
+      }
+      const binding = bindingSchema.safeParse(value);
+      if (!binding.success || binding.data.sub !== `service-account|${binding.data.serviceAccountId}`)
+        throw denied();
+      return { token, binding: binding.data };
+    }
+    function origin(baseUrl) {
+      let url;
+      try {
+        url = new URL(baseUrl);
+      } catch {
+        throw new agents_12.FunctionAgentReadError(400, "invalid_configuration", "Configure a trusted Atlas origin");
+      }
+      const loopback = url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+      if (!loopback && url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash)
+        throw new agents_12.FunctionAgentReadError(400, "invalid_configuration", "Configure an HTTPS Atlas origin without credentials, path, query or fragment");
+      return url.origin;
+    }
+    function createFunctionAgentEvidenceClient({ request, baseUrl, fetchImpl = globalThis.fetch }) {
+      const url = `${origin(baseUrl)}${agent_source_evidence_contract_12.FUNCTION_AGENT_EVIDENCE_PATH}`;
+      const { token, binding } = invocation(request);
+      const lattice = header(request, "x-sequence-lattice-execution-token");
+      async function verify(input) {
+        if (binding.exp <= Date.now() / 1e3)
+          throw new agents_12.FunctionAgentReadError(401, "expired_context", "The agent-evidence credential expired; start a new invocation");
+        const body = JSON.stringify(input);
+        if (Buffer.byteLength(body, "utf8") > agent_source_evidence_contract_12.AGENT_SOURCE_VERIFY_MAX_BYTES)
+          throw new agents_12.FunctionAgentReadError(413, "source_evidence_too_large", "Source verification exceeds 768 KiB; capture a smaller source before writing");
+        const response = await fetchImpl(url, { method: "POST", headers: { "content-type": "application/json", [agent_source_evidence_contract_12.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER]: token, ...lattice ? { "x-sequence-lattice-execution-token": lattice } : {} }, body, redirect: "error", signal: AbortSignal.timeout(3e4) });
+        const result = await response.json().catch(() => null);
+        if (!response.ok) {
+          const error = zod_12.z.object({ detail: zod_12.z.string().max(2e3).optional(), code: zod_12.z.string().max(128).optional() }).safeParse(result);
+          throw new agents_12.FunctionAgentReadError(response.status, error.success ? error.data.code ?? "agent_evidence_failed" : "agent_evidence_failed", error.success ? error.data.detail ?? "Source verification failed" : "Source verification failed");
+        }
+        const verified = agent_source_evidence_contract_12.functionAgentSourceEvidenceVerificationSchema.safeParse(result);
+        if (!verified.success)
+          throw new agents_12.FunctionAgentReadError(502, "malformed_response", "Atlas returned invalid source verification");
+        const { source, receiver } = verified.data;
+        const execution = verified.data.lattice;
+        if (source.agentId !== input.agent || source.threadId !== input.response.threadId || source.responseHash !== input.responseHash || receiver.functionId !== binding.functionId || receiver.versionId !== binding.versionId || receiver.invocationId !== binding.invocationId || receiver.serviceAccountId !== binding.serviceAccountId || receiver.org !== binding.org || execution !== null && (execution.receiverFunctionOrgId !== receiver.org || execution.receiver.functionId !== receiver.functionId || execution.receiver.versionId !== receiver.versionId || execution.receiver.invocationId !== receiver.invocationId))
+          throw new agents_12.FunctionAgentReadError(502, "malformed_response", "Atlas returned source verification for another request or invocation");
+        return verified.data;
+      }
+      return {
+        async verifySourceEvidence(input) {
+          const result = await verify(agent_source_evidence_contract_12.functionAgentSourceEvidenceRequestSchema.parse({ ...input, operation: "verifySourceEvidence" }));
+          if (result.source.projection === "thread-conversation-v1" || result.source.runId !== input.runId)
+            throw new agents_12.FunctionAgentReadError(502, "malformed_response", "Atlas returned evidence for a different completed source");
+          return result;
+        },
+        async verifyConversationEvidence(input) {
+          const result = await verify(agent_source_evidence_contract_12.functionAgentConversationEvidenceRequestSchema.parse({ ...input, operation: "verifyConversationEvidence" }));
+          if (result.source.projection !== "thread-conversation-v1" || result.source.threadId !== input.threadId || result.source.revision !== input.response.revision || result.source.cutoffAt !== input.response.cutoffAt)
+            throw new agents_12.FunctionAgentReadError(502, "malformed_response", "Atlas returned evidence for a different settled conversation");
+          return result;
+        }
+      };
+    }
+  }
+});
+
+// dist/workflow-source-contract.js
+var require_workflow_source_contract = __commonJS({
+  "dist/workflow-source-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.FunctionWorkflowReadError = exports2.functionWorkflowSourceVerificationSchema = exports2.functionWorkflowSourceEvidenceRequestSchema = exports2.functionWorkflowSourceClaimsSchema = exports2.functionWorkflowHumanSourceClaimsSchema = exports2.functionWorkflowManagedFunctionSourceClaimsSchema = exports2.functionWorkflowSourceCaptureSchema = exports2.functionWorkflowCompletedRunSchema = exports2.functionWorkflowCompletedRunQuerySchema = exports2.functionWorkflowSourceExecutionSchema = exports2.functionWorkflowSourceRootSchema = exports2.FUNCTION_WORKFLOW_EVIDENCE_PATH = exports2.FUNCTION_WORKFLOW_CAPTURE_PATH = exports2.FUNCTION_WORKFLOW_EVIDENCE_TOKEN_HEADER = exports2.FUNCTION_WORKFLOW_TOKEN_HEADER = void 0;
+    var zod_12 = require_zod();
+    var agent_source_evidence_contract_12 = require_agent_source_evidence_contract();
+    exports2.FUNCTION_WORKFLOW_TOKEN_HEADER = "x-sequence-workflow-service-token";
+    exports2.FUNCTION_WORKFLOW_EVIDENCE_TOKEN_HEADER = "x-sequence-workflow-evidence-token";
+    exports2.FUNCTION_WORKFLOW_CAPTURE_PATH = "/api/managed-functions/workflows/capture";
+    exports2.FUNCTION_WORKFLOW_EVIDENCE_PATH = "/api/managed-functions/workflows/evidence";
+    var id = zod_12.z.string().min(1).max(255).regex(/^[A-Za-z0-9._-]+$/);
+    var hash = zod_12.z.string().regex(/^[a-f0-9]{64}$/);
+    var identity = zod_12.z.strictObject({ id, version: id, definitionSha256: hash });
+    exports2.functionWorkflowSourceRootSchema = zod_12.z.strictObject({
+      id,
+      runId: id,
+      identity,
+      branches: zod_12.z.array(zod_12.z.strictObject({
+        nodeId: id,
+        nodeRunId: id,
+        attempt: zod_12.z.number().int().positive(),
+        agentId: id,
+        runId: id.nullable(),
+        status: zod_12.z.enum(["completed", "failed", "cancelled", "skipped"]),
+        identity,
+        completedAt: zod_12.z.iso.datetime({ offset: true }).nullable()
+      }).refine((branch) => branch.agentId === branch.identity.id && (branch.status !== "completed" || branch.runId !== null && branch.completedAt !== null), "Completed branches require actual completed source records")).max(64)
+    }).refine((workflow) => workflow.id === workflow.identity.id, "The workflow must match its private identity");
+    exports2.functionWorkflowSourceExecutionSchema = zod_12.z.strictObject({
+      run: agent_source_evidence_contract_12.functionAgentSourceExecutionSchema.shape.run,
+      step: agent_source_evidence_contract_12.functionAgentSourceExecutionSchema.shape.step,
+      workflow: exports2.functionWorkflowSourceRootSchema
+    });
+    exports2.functionWorkflowCompletedRunQuerySchema = zod_12.z.strictObject({ workflow: id, runId: id });
+    exports2.functionWorkflowCompletedRunSchema = zod_12.z.strictObject({ workflow: id, runId: id, status: zod_12.z.literal("completed"), output: zod_12.z.json() });
+    exports2.functionWorkflowSourceCaptureSchema = zod_12.z.strictObject({ response: exports2.functionWorkflowCompletedRunSchema, responseHash: hash, sourceReceipt: zod_12.z.string().min(1).max(16384) });
+    var receiver = zod_12.z.strictObject({ functionId: zod_12.z.uuid(), versionId: zod_12.z.uuid(), invocationId: zod_12.z.uuid(), serviceAccountId: zod_12.z.uuid(), org: zod_12.z.string().min(1).max(255) });
+    var sourceFields = {
+      environment: zod_12.z.string(),
+      org: zod_12.z.string().min(1).max(255),
+      workflowId: id,
+      runId: id,
+      cutoffAt: zod_12.z.iso.datetime({ offset: true }),
+      outputHash: hash,
+      responseHash: hash,
+      jobAdmission: agent_source_evidence_contract_12.functionSourceJobAdmissionSchema.nullable()
+    };
+    exports2.functionWorkflowManagedFunctionSourceClaimsSchema = zod_12.z.strictObject({
+      sourceKind: zod_12.z.literal("managed_function"),
+      projection: zod_12.z.literal("workflow-completed-v1"),
+      audience: zod_12.z.literal("atlas-managed-function-workflow-source-evidence"),
+      ...sourceFields,
+      actualServiceAccountSub: zod_12.z.string().min(1).max(512),
+      sourceReceiver: receiver,
+      sourceExecution: exports2.functionWorkflowSourceExecutionSchema
+    }).refine((source) => source.actualServiceAccountSub === `service-account|${source.sourceReceiver.serviceAccountId}` && source.org === source.sourceReceiver.org && source.workflowId === source.sourceExecution.workflow.id && source.runId === source.sourceExecution.workflow.runId, "The workflow source must match its actual identity and execution");
+    exports2.functionWorkflowHumanSourceClaimsSchema = zod_12.z.strictObject({
+      ...sourceFields,
+      sourceKind: zod_12.z.literal("human"),
+      projection: zod_12.z.literal("workflow-completed-v1"),
+      audience: zod_12.z.literal("atlas-workflow-source-evidence"),
+      actualUserSub: zod_12.z.string().min(1).max(512).refine((sub) => !sub.startsWith("service-account|"), "Human workflow evidence requires an actual user"),
+      sourceExecution: zod_12.z.null(),
+      workflowSource: exports2.functionWorkflowSourceRootSchema
+    }).refine((source) => source.workflowId === source.workflowSource.id && source.runId === source.workflowSource.runId && source.jobAdmission !== null, "A standalone human workflow source requires its actual job admission");
+    exports2.functionWorkflowSourceClaimsSchema = zod_12.z.discriminatedUnion("sourceKind", [exports2.functionWorkflowManagedFunctionSourceClaimsSchema, exports2.functionWorkflowHumanSourceClaimsSchema]).refine((source) => source.jobAdmission === null || source.jobAdmission.kind === "workflow" && source.jobAdmission.runId === source.runId && source.jobAdmission.resourceId === source.workflowId && (source.sourceKind === "human" || source.jobAdmission.actorSub === source.actualServiceAccountSub), "The job admission must match the workflow source");
+    exports2.functionWorkflowSourceEvidenceRequestSchema = exports2.functionWorkflowCompletedRunQuerySchema.extend({ operation: zod_12.z.literal("verifySourceEvidence"), response: exports2.functionWorkflowCompletedRunSchema, responseHash: hash, sourceReceipt: zod_12.z.string().min(1).max(16384) });
+    exports2.functionWorkflowSourceVerificationSchema = zod_12.z.strictObject({ source: exports2.functionWorkflowSourceClaimsSchema, receiver });
+    var FunctionWorkflowReadError = class extends Error {
+      status;
+      code;
+      name = "FunctionWorkflowReadError";
+      constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+      }
+    };
+    exports2.FunctionWorkflowReadError = FunctionWorkflowReadError;
+  }
+});
+
+// dist/workflow-source.js
+var require_workflow_source = __commonJS({
+  "dist/workflow-source.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.createFunctionServiceWorkflowsClient = createFunctionServiceWorkflowsClient;
+    exports2.createFunctionWorkflowEvidenceClient = createFunctionWorkflowEvidenceClient;
+    var zod_12 = require_zod();
+    var agent_source_evidence_contract_12 = require_agent_source_evidence_contract();
+    var workflow_source_contract_1 = require_workflow_source_contract();
+    function header(request, name) {
+      const { headers } = request;
+      const values = typeof headers.get === "function" ? [headers.get(name)] : Object.entries(headers).filter(([key]) => key.toLowerCase() === name).map(([, value]) => value);
+      return values.length === 1 && typeof values[0] === "string" ? values[0] : null;
+    }
+    var receiverSchema = zod_12.z.object({ sub: zod_12.z.string(), functionId: zod_12.z.uuid(), versionId: zod_12.z.uuid(), invocationId: zod_12.z.uuid(), serviceAccountId: zod_12.z.uuid(), org: zod_12.z.string().min(1), exp: zod_12.z.number().int() });
+    function credential({ request, evidence }) {
+      const refused = () => new workflow_source_contract_1.FunctionWorkflowReadError(401, "invalid_context", "This invocation has no valid workflow-source credential");
+      const token = header(request, evidence ? workflow_source_contract_1.FUNCTION_WORKFLOW_EVIDENCE_TOKEN_HEADER : workflow_source_contract_1.FUNCTION_WORKFLOW_TOKEN_HEADER);
+      const body = token && token.length <= 16384 ? /^([A-Za-z0-9_-]+)\.[A-Za-z0-9_-]{43}$/.exec(token)?.[1] : null;
+      if (!body || !token)
+        throw refused();
+      let value;
+      try {
+        value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+      } catch {
+        throw refused();
+      }
+      const binding = receiverSchema.extend({ audience: zod_12.z.literal(evidence ? "atlas-managed-function-workflow-evidence" : "atlas-managed-function-workflow-read") }).safeParse(value);
+      if (!binding.success || binding.data.sub !== `service-account|${binding.data.serviceAccountId}`)
+        throw refused();
+      return { token, binding: binding.data };
+    }
+    function origin(baseUrl) {
+      let url;
+      try {
+        url = new URL(baseUrl);
+      } catch {
+        throw new workflow_source_contract_1.FunctionWorkflowReadError(400, "invalid_configuration", "Configure a trusted Atlas origin");
+      }
+      const loopback = url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+      if (!loopback && url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash)
+        throw new workflow_source_contract_1.FunctionWorkflowReadError(400, "invalid_configuration", "Configure an HTTPS Atlas origin without credentials, path, query or fragment");
+      return url.origin;
+    }
+    function sameReceiver(left, right) {
+      return left.functionId === right.functionId && left.versionId === right.versionId && left.invocationId === right.invocationId && left.serviceAccountId === right.serviceAccountId && left.org === right.org && left.sub === right.sub;
+    }
+    async function post({ options, path, body, credentials }) {
+      const serialized = JSON.stringify(body);
+      if (Buffer.byteLength(serialized, "utf8") > agent_source_evidence_contract_12.AGENT_SOURCE_VERIFY_MAX_BYTES)
+        throw new workflow_source_contract_1.FunctionWorkflowReadError(413, "workflow_source_too_large", "Workflow source verification exceeds 768 KiB; capture a smaller output before writing");
+      const lattice = header(options.request, "x-sequence-lattice-execution-token");
+      const response = await (options.fetchImpl ?? globalThis.fetch)(`${origin(options.baseUrl)}${path}`, { method: "POST", headers: { "content-type": "application/json", ...credentials, ...lattice ? { "x-sequence-lattice-execution-token": lattice } : {} }, body: serialized, redirect: "error", signal: AbortSignal.timeout(3e4) });
+      const result = await response.json().catch(() => null);
+      if (!response.ok) {
+        const error = zod_12.z.object({ detail: zod_12.z.string().max(2e3).optional(), code: zod_12.z.string().max(128).optional() }).safeParse(result);
+        throw new workflow_source_contract_1.FunctionWorkflowReadError(response.status, error.success ? error.data.code ?? "workflow_source_failed" : "workflow_source_failed", error.success ? error.data.detail ?? "Workflow source request failed" : "Workflow source request failed");
+      }
+      return result;
+    }
+    function assertLive(binding) {
+      if (binding.exp <= Date.now() / 1e3)
+        throw new workflow_source_contract_1.FunctionWorkflowReadError(401, "expired_context", "The workflow-source credential expired; start a new invocation");
+    }
+    function createFunctionServiceWorkflowsClient(options) {
+      origin(options.baseUrl);
+      const read = credential({ request: options.request, evidence: false });
+      const evidence = credential({ request: options.request, evidence: true });
+      if (!sameReceiver(read.binding, evidence.binding))
+        throw new workflow_source_contract_1.FunctionWorkflowReadError(401, "invalid_context", "Workflow capture credentials name different invocations");
+      return { async captureCompletedRun(query) {
+        assertLive(read.binding);
+        assertLive(evidence.binding);
+        const parsed = workflow_source_contract_1.functionWorkflowSourceCaptureSchema.safeParse(await post({ options, path: workflow_source_contract_1.FUNCTION_WORKFLOW_CAPTURE_PATH, body: { ...workflow_source_contract_1.functionWorkflowCompletedRunQuerySchema.parse(query), operation: "captureCompletedRun" }, credentials: { [workflow_source_contract_1.FUNCTION_WORKFLOW_TOKEN_HEADER]: read.token, [workflow_source_contract_1.FUNCTION_WORKFLOW_EVIDENCE_TOKEN_HEADER]: evidence.token } }));
+        if (!parsed.success || parsed.data.response.workflow !== query.workflow || parsed.data.response.runId !== query.runId)
+          throw new workflow_source_contract_1.FunctionWorkflowReadError(502, "malformed_response", "Atlas returned a different completed workflow source");
+        return parsed.data;
+      } };
+    }
+    function createFunctionWorkflowEvidenceClient(options) {
+      origin(options.baseUrl);
+      const evidence = credential({ request: options.request, evidence: true });
+      return { async verifySourceEvidence(input) {
+        assertLive(evidence.binding);
+        const parsed = workflow_source_contract_1.functionWorkflowSourceVerificationSchema.safeParse(await post({ options, path: workflow_source_contract_1.FUNCTION_WORKFLOW_EVIDENCE_PATH, body: workflow_source_contract_1.functionWorkflowSourceEvidenceRequestSchema.parse({ ...input, operation: "verifySourceEvidence" }), credentials: { [workflow_source_contract_1.FUNCTION_WORKFLOW_EVIDENCE_TOKEN_HEADER]: evidence.token } }));
+        if (!parsed.success)
+          throw new workflow_source_contract_1.FunctionWorkflowReadError(502, "malformed_response", "Atlas returned invalid workflow source verification");
+        const { source, receiver } = parsed.data;
+        if (source.workflowId !== input.workflow || source.runId !== input.runId || source.responseHash !== input.responseHash || receiver.functionId !== evidence.binding.functionId || receiver.versionId !== evidence.binding.versionId || receiver.invocationId !== evidence.binding.invocationId || receiver.serviceAccountId !== evidence.binding.serviceAccountId || receiver.org !== evidence.binding.org)
+          throw new workflow_source_contract_1.FunctionWorkflowReadError(502, "malformed_response", "Atlas returned workflow evidence for another request or invocation");
+        return parsed.data;
+      } };
+    }
+  }
+});
+
+// dist/monitoring-events.js
+var require_monitoring_events = __commonJS({
+  "dist/monitoring-events.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.emitDeltaEventsBodySchema = exports2.MAX_DELTA_EVENTS_PER_REQUEST = exports2.deltaEventSchema = exports2.docExtractEditContextSchema = exports2.dtiDeltaContextSchema = exports2.artifactDeltaContextSchema = exports2.PRODUCER_EVENT_KEY_PREFIX = exports2.MAX_CONTEXT_JSON_CHARS = exports2.MAX_SCALAR_STRING_CHARS = exports2.MAX_CONTEXT_TEXT_CHARS = void 0;
+    exports2.contentHashKey = contentHashKey;
+    exports2.scopedIdempotencyKey = scopedIdempotencyKey;
+    var node_crypto_1 = require("node:crypto");
+    var zod_12 = require_zod();
+    exports2.MAX_CONTEXT_TEXT_CHARS = 5e4;
+    exports2.MAX_SCALAR_STRING_CHARS = 8e3;
+    exports2.MAX_CONTEXT_JSON_CHARS = 1e5;
+    exports2.PRODUCER_EVENT_KEY_PREFIX = "producer:";
+    var scalarSchema = zod_12.z.union([
+      zod_12.z.string().max(exports2.MAX_SCALAR_STRING_CHARS),
+      zod_12.z.number(),
+      zod_12.z.boolean(),
+      zod_12.z.null()
+    ]);
+    var boundedText = zod_12.z.string().max(exports2.MAX_CONTEXT_TEXT_CHARS);
+    var boundedId = zod_12.z.string().min(1).max(512);
+    function assertBoundedContextJson(context2, ctx, path = ["context"]) {
+      if (JSON.stringify(context2).length > exports2.MAX_CONTEXT_JSON_CHARS) {
+        ctx.addIssue({
+          code: zod_12.z.ZodIssueCode.custom,
+          path: [...path],
+          message: `context JSON exceeds ${exports2.MAX_CONTEXT_JSON_CHARS} characters`
+        });
+      }
+    }
+    exports2.artifactDeltaContextSchema = zod_12.z.object({
+      artifactKind: boundedId,
+      sectionPath: boundedId,
+      before: boundedText,
+      after: boundedText,
+      changeKind: zod_12.z.enum(["added", "removed", "modified"]),
+      category: boundedId.optional(),
+      sourceRefs: zod_12.z.record(zod_12.z.string().max(128), zod_12.z.union([zod_12.z.string().max(exports2.MAX_SCALAR_STRING_CHARS), zod_12.z.number()])),
+      workflowId: boundedId.optional()
+    }).strict().superRefine((context2, ctx) => assertBoundedContextJson(context2, ctx, []));
+    exports2.dtiDeltaContextSchema = zod_12.z.object({
+      stageId: boundedId,
+      loanId: zod_12.z.string().max(512).nullable().optional(),
+      fieldPath: boundedId,
+      before: scalarSchema,
+      after: scalarSchema,
+      section: zod_12.z.enum(["debt", "income", "other"]).optional(),
+      itemLabel: zod_12.z.string().max(exports2.MAX_SCALAR_STRING_CHARS).optional(),
+      calculatorType: zod_12.z.enum(["basic", "advanced"]).optional(),
+      workflowId: boundedId.optional(),
+      sourceDocRefs: zod_12.z.array(zod_12.z.string().max(512)).max(50).optional()
+    }).strict().superRefine((context2, ctx) => assertBoundedContextJson(context2, ctx, []));
+    exports2.docExtractEditContextSchema = zod_12.z.object({
+      documentId: boundedId,
+      docType: boundedId,
+      fieldPath: boundedId,
+      oldValue: scalarSchema,
+      newValue: scalarSchema,
+      rowKey: zod_12.z.record(zod_12.z.string().max(128), scalarSchema).optional(),
+      stageId: zod_12.z.string().max(512).optional(),
+      workflowId: zod_12.z.string().max(512).optional(),
+      citation: zod_12.z.object({
+        page: zod_12.z.number().int(),
+        region: zod_12.z.string().max(exports2.MAX_SCALAR_STRING_CHARS).optional()
+      }).strict().optional()
+    }).strict().superRefine((context2, ctx) => assertBoundedContextJson(context2, ctx, []));
+    var deltaEventBaseFields = {
+      idempotencyKey: zod_12.z.string().min(1).max(512),
+      subjectId: zod_12.z.string().min(1).max(512),
+      subjectKind: zod_12.z.enum(["agent", "workflow"]),
+      occurredAt: zod_12.z.string().datetime({ offset: true }),
+      deltaReason: zod_12.z.string().max(exports2.MAX_CONTEXT_TEXT_CHARS).nullable().optional(),
+      deltaSource: zod_12.z.enum(["human", "llm", "unknown"]).default("unknown"),
+      actionability: zod_12.z.literal("unknown").default("unknown")
+    };
+    exports2.deltaEventSchema = zod_12.z.discriminatedUnion("contextType", [
+      zod_12.z.object({
+        ...deltaEventBaseFields,
+        contextType: zod_12.z.literal("artifact_delta"),
+        context: exports2.artifactDeltaContextSchema
+      }).strict(),
+      zod_12.z.object({
+        ...deltaEventBaseFields,
+        contextType: zod_12.z.literal("dti_delta"),
+        context: exports2.dtiDeltaContextSchema
+      }).strict(),
+      zod_12.z.object({
+        ...deltaEventBaseFields,
+        contextType: zod_12.z.literal("doc_extract_edit"),
+        context: exports2.docExtractEditContextSchema
+      }).strict()
+    ]);
+    exports2.MAX_DELTA_EVENTS_PER_REQUEST = 100;
+    exports2.emitDeltaEventsBodySchema = zod_12.z.object({
+      events: zod_12.z.array(exports2.deltaEventSchema).min(1).max(exports2.MAX_DELTA_EVENTS_PER_REQUEST)
+    }).strict().superRefine((body, ctx) => {
+      const seen = /* @__PURE__ */ new Set();
+      body.events.forEach((event, index) => {
+        if (event.idempotencyKey.startsWith(exports2.PRODUCER_EVENT_KEY_PREFIX)) {
+          ctx.addIssue({ code: zod_12.z.ZodIssueCode.custom, path: ["events", index, "idempotencyKey"], message: "Producer event storage keys are reserved for scoped monitoring delivery" });
+        }
+        if (seen.has(event.idempotencyKey)) {
+          ctx.addIssue({
+            code: zod_12.z.ZodIssueCode.custom,
+            path: ["events", index, "idempotencyKey"],
+            message: `Duplicate idempotencyKey in batch: ${event.idempotencyKey}`
+          });
+        }
+        seen.add(event.idempotencyKey);
+      });
+    });
+    function contentHashKey(parts) {
+      return (0, node_crypto_1.createHash)("sha256").update(parts.join("|")).digest("hex").slice(0, 16);
+    }
+    function scopedIdempotencyKey(args) {
+      return `${args.scope}:${contentHashKey(args.parts)}`;
+    }
+  }
+});
+
+// dist/monitoring-annotations.js
+var require_monitoring_annotations = __commonJS({
+  "dist/monitoring-annotations.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.functionMonitoringAnnotationSchema = void 0;
+    var zod_12 = require_zod();
+    function boundedJson(value, depth = 0) {
+      if (depth > 6)
+        return false;
+      if (value === null || typeof value === "boolean")
+        return true;
+      if (typeof value === "number")
+        return Number.isFinite(value);
+      if (typeof value === "string")
+        return value.length <= 5e4;
+      if (Array.isArray(value)) {
+        if (Object.getPrototypeOf(value) !== Array.prototype || value.length > 100 || Object.getOwnPropertyNames(value).length !== value.length + 1 || Object.getOwnPropertySymbols(value).length > 0)
+          return false;
+        for (let index = 0; index < value.length; index++) {
+          const entry = Object.getOwnPropertyDescriptor(value, String(index));
+          if (!entry?.enumerable || !("value" in entry) || !boundedJson(entry.value, depth + 1))
+            return false;
+        }
+        return true;
+      }
+      if (typeof value !== "object")
+        return false;
+      const prototype = Object.getPrototypeOf(value);
+      if (prototype !== Object.prototype && prototype !== null || Object.getOwnPropertySymbols(value).length > 0)
+        return false;
+      const entries = Object.entries(Object.getOwnPropertyDescriptors(value));
+      return entries.length <= 64 && entries.every(([key, entry]) => key.length <= 128 && entry.enumerable && "value" in entry && boundedJson(entry.value, depth + 1));
+    }
+    var json = zod_12.z.custom((value) => boundedJson(value) && Buffer.byteLength(JSON.stringify(value), "utf8") <= 1e5, "Expected bounded JSON metrics");
+    var text = zod_12.z.string().max(5e4);
+    var id = zod_12.z.string().min(1).max(512);
+    var severity = zod_12.z.enum(["critical", "high", "medium", "low"]);
+    var inputTag = zod_12.z.strictObject({ type: zod_12.z.string().min(1).max(128), value: zod_12.z.string().max(8e3) });
+    exports2.functionMonitoringAnnotationSchema = zod_12.z.strictObject({
+      sourceType: id,
+      sourceRef: zod_12.z.record(zod_12.z.string().min(1).max(128), zod_12.z.union([zod_12.z.string().max(8e3), zod_12.z.number().finite()])).refine((ref) => Object.keys(ref).length > 0 && Object.keys(ref).length <= 64, "Source references must be bounded and nonempty"),
+      generatingSubject: zod_12.z.strictObject({ subjectId: id, subjectKind: zod_12.z.enum(["agent", "workflow"]) }),
+      occurredAt: zod_12.z.iso.datetime({ offset: true }),
+      summary: text.nullable(),
+      metrics: json,
+      conversationFindings: zod_12.z.array(zod_12.z.strictObject({ type: id, description: text, excerpt: text, severity: zod_12.z.enum(["high", "medium", "low"]) })).max(100),
+      classifications: zod_12.z.array(zod_12.z.strictObject({
+        matchedBucketSlug: id.nullable(),
+        newBucketProposal: zod_12.z.strictObject({ name: id, description: text, severity, category: id }).nullable(),
+        excerpt: text,
+        inputTags: zod_12.z.array(inputTag).max(64)
+      }).refine((classification) => classification.matchedBucketSlug === null !== (classification.newBucketProposal === null), "Name exactly one matched bucket or proposal")).max(100),
+      coarseFallbacks: zod_12.z.array(zod_12.z.strictObject({ bucketSlug: id, excerpt: text, coarseCategory: id })).max(100)
+    }).superRefine((annotation, context2) => {
+      if (Buffer.byteLength(JSON.stringify(annotation), "utf8") > 256 * 1024)
+        context2.addIssue({ code: "custom", message: "Monitoring annotations exceed the size limit" });
+    });
+  }
+});
+
+// dist/monitoring-contract.js
+var require_monitoring_contract = __commonJS({
+  "dist/monitoring-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.FunctionMonitoringError = exports2.monitoringDeliveryReceiptSchema = exports2.functionMonitoringRequestSchema = exports2.monitoringPublishSchema = exports2.monitoringBucketCatalogSchema = exports2.monitoringCatalogQuerySchema = exports2.monitoringDeliveryKeySchema = exports2.monitoringEventsSchema = exports2.functionMonitoringScopesSchema = exports2.MAX_MONITORING_DELIVERY_BYTES = exports2.MONITORING_CATALOG_CAPABILITY = exports2.MONITORING_PRODUCER_CAPABILITY = exports2.FUNCTION_MONITORING_DELIVERIES_PATH = exports2.FUNCTION_MONITORING_TOKEN_HEADER = void 0;
+    exports2.readFunctionMonitoringScopes = readFunctionMonitoringScopes;
+    exports2.monitoringPayloadHash = monitoringPayloadHash;
+    var node_crypto_1 = require("node:crypto");
+    var zod_12 = require_zod();
+    var monitoring_events_1 = require_monitoring_events();
+    var monitoring_annotations_12 = require_monitoring_annotations();
+    exports2.FUNCTION_MONITORING_TOKEN_HEADER = "x-sequence-monitoring-service-token";
+    exports2.FUNCTION_MONITORING_DELIVERIES_PATH = "/api/managed-functions/monitoring/deliveries";
+    exports2.MONITORING_PRODUCER_CAPABILITY = "emit_monitoring";
+    exports2.MONITORING_CATALOG_CAPABILITY = "read_monitoring_catalog";
+    exports2.MAX_MONITORING_DELIVERY_BYTES = 512 * 1024;
+    var producer = zod_12.z.string().min(1).max(41).regex(/^[a-z][a-z0-9_]{0,40}$/);
+    exports2.functionMonitoringScopesSchema = zod_12.z.strictObject({
+      producers: zod_12.z.array(producer).min(1).max(16).refine((ids) => new Set(ids).size === ids.length, "Producer namespaces must be distinct")
+    });
+    function readFunctionMonitoringScopes(manifest) {
+      if (typeof manifest !== "object" || manifest === null)
+        return [];
+      const capabilities = Reflect.get(manifest, "capabilities");
+      if (typeof capabilities !== "object" || capabilities === null)
+        return [];
+      const monitoring = Reflect.get(capabilities, "monitoring");
+      return monitoring === void 0 ? [] : exports2.functionMonitoringScopesSchema.parse(monitoring).producers;
+    }
+    exports2.monitoringEventsSchema = zod_12.z.array(monitoring_events_1.deltaEventSchema).max(monitoring_events_1.MAX_DELTA_EVENTS_PER_REQUEST).superRefine((events, context2) => {
+      const seen = /* @__PURE__ */ new Set();
+      for (const [index, event] of events.entries()) {
+        if (seen.has(event.idempotencyKey))
+          context2.addIssue({ code: "custom", path: [index, "idempotencyKey"], message: "Event keys must be distinct within a delivery" });
+        seen.add(event.idempotencyKey);
+      }
+      if (Buffer.byteLength(JSON.stringify(events), "utf8") > exports2.MAX_MONITORING_DELIVERY_BYTES) {
+        context2.addIssue({ code: "custom", message: "Monitoring events exceed the delivery size limit" });
+      }
+    });
+    function canonical(value) {
+      if (Array.isArray(value))
+        return `[${value.map(canonical).join(",")}]`;
+      if (typeof value === "object" && value !== null) {
+        return `{${Object.entries(value).filter(([, entry]) => entry !== void 0).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key2, entry]) => `${JSON.stringify(key2)}:${canonical(entry)}`).join(",")}}`;
+      }
+      const serialized = JSON.stringify(value);
+      if (serialized === void 0)
+        throw new Error("Monitoring payload is not JSON");
+      return serialized;
+    }
+    function monitoringPayloadHash({ events, observation }) {
+      return (0, node_crypto_1.createHash)("sha256").update(canonical({ events: exports2.monitoringEventsSchema.parse(events), ...observation === void 0 ? {} : { observation: monitoring_annotations_12.functionMonitoringAnnotationSchema.parse(observation) } })).digest("hex");
+    }
+    var key = zod_12.z.string().min(1).max(512);
+    exports2.monitoringDeliveryKeySchema = zod_12.z.strictObject({ producer, businessKey: key });
+    exports2.monitoringCatalogQuerySchema = zod_12.z.strictObject({ producer });
+    exports2.monitoringBucketCatalogSchema = zod_12.z.strictObject({
+      producer,
+      complete: zod_12.z.literal(true),
+      buckets: zod_12.z.array(zod_12.z.strictObject({
+        slug: zod_12.z.string().min(1).max(512),
+        name: zod_12.z.string().max(512),
+        description: zod_12.z.string().max(5e4),
+        severity: zod_12.z.enum(["critical", "high", "medium", "low"]),
+        category: zod_12.z.string().max(512)
+      })).max(2e3)
+    });
+    exports2.monitoringPublishSchema = exports2.monitoringDeliveryKeySchema.extend({
+      payloadHash: zod_12.z.string().regex(/^[a-f0-9]{64}$/),
+      events: exports2.monitoringEventsSchema,
+      observation: monitoring_annotations_12.functionMonitoringAnnotationSchema.optional()
+    });
+    exports2.functionMonitoringRequestSchema = zod_12.z.discriminatedUnion("operation", [
+      exports2.monitoringPublishSchema.extend({ operation: zod_12.z.literal("publish") }),
+      exports2.monitoringDeliveryKeySchema.extend({ operation: zod_12.z.literal("get") }),
+      exports2.monitoringCatalogQuerySchema.extend({ operation: zod_12.z.literal("getBucketCatalog") })
+    ]).superRefine((request, context2) => {
+      if (Buffer.byteLength(JSON.stringify(request), "utf8") > exports2.MAX_MONITORING_DELIVERY_BYTES)
+        context2.addIssue({ code: "custom", message: "Monitoring delivery exceeds the size limit" });
+    });
+    exports2.monitoringDeliveryReceiptSchema = zod_12.z.strictObject({
+      id: zod_12.z.uuid(),
+      producer,
+      businessKey: key,
+      payloadHash: zod_12.z.string().regex(/^[a-f0-9]{64}$/),
+      status: zod_12.z.literal("confirmed"),
+      eventCount: zod_12.z.number().int().min(0).max(monitoring_events_1.MAX_DELTA_EVENTS_PER_REQUEST),
+      confirmedAt: zod_12.z.iso.datetime({ offset: true }),
+      eventIds: zod_12.z.array(zod_12.z.uuid()).max(monitoring_events_1.MAX_DELTA_EVENTS_PER_REQUEST)
+    }).refine((receipt) => receipt.eventCount === receipt.eventIds.length && new Set(receipt.eventIds).size === receipt.eventIds.length, "Receipt count must match distinct event ids");
+    var FunctionMonitoringError = class extends Error {
+      status;
+      code;
+      name = "FunctionMonitoringError";
+      constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+      }
+    };
+    exports2.FunctionMonitoringError = FunctionMonitoringError;
+  }
+});
+
+// dist/monitoring.js
+var require_monitoring = __commonJS({
+  "dist/monitoring.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.createFunctionServiceMonitoringClient = createFunctionServiceMonitoringClient;
+    var zod_12 = require_zod();
+    var monitoring_contract_12 = require_monitoring_contract();
+    function credential(request) {
+      const headers = request.headers;
+      const matches = typeof headers.get === "function" ? [headers.get(monitoring_contract_12.FUNCTION_MONITORING_TOKEN_HEADER)] : Object.entries(headers).filter(([name]) => name.toLowerCase() === monitoring_contract_12.FUNCTION_MONITORING_TOKEN_HEADER).map(([, value2]) => value2);
+      const token = matches[0];
+      const invalid = () => new monitoring_contract_12.FunctionMonitoringError(401, "invalid_context", "This invocation has no valid monitoring credential");
+      if (matches.length !== 1 || typeof token !== "string" || token.length > 16384)
+        throw invalid();
+      const envelope = /^([A-Za-z0-9_-]+)\.([A-Za-z0-9_-]{43})$/.exec(token);
+      if (!envelope?.[1])
+        throw invalid();
+      let value;
+      try {
+        value = JSON.parse(Buffer.from(envelope[1], "base64url").toString("utf8"));
+      } catch {
+        throw invalid();
+      }
+      const parsed = zod_12.z.object({ audience: zod_12.z.literal("atlas-managed-function-monitoring"), sub: zod_12.z.string().startsWith("service-account|"), exp: zod_12.z.number().int() }).safeParse(value);
+      if (!parsed.success)
+        throw invalid();
+      return { token, expiresAt: parsed.data.exp };
+    }
+    function origin(baseUrl) {
+      let url;
+      try {
+        url = new URL(baseUrl);
+      } catch {
+        throw new monitoring_contract_12.FunctionMonitoringError(400, "invalid_configuration", "Configure a trusted Atlas origin");
+      }
+      const local = url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+      if (!local && url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash) {
+        throw new monitoring_contract_12.FunctionMonitoringError(400, "invalid_configuration", "Configure an HTTPS Atlas origin without credentials, path, query or fragment");
+      }
+      return url.origin;
+    }
+    function createFunctionServiceMonitoringClient({ request, baseUrl, fetchImpl = globalThis.fetch }) {
+      const url = `${origin(baseUrl)}${monitoring_contract_12.FUNCTION_MONITORING_DELIVERIES_PATH}`;
+      const { token, expiresAt } = credential(request);
+      async function call(body) {
+        if (expiresAt <= Date.now() / 1e3)
+          throw new monitoring_contract_12.FunctionMonitoringError(401, "expired_context", "The monitoring credential expired; start a new invocation");
+        const input = monitoring_contract_12.functionMonitoringRequestSchema.parse(body);
+        const response = await fetchImpl(url, {
+          method: "POST",
+          headers: { "content-type": "application/json", [monitoring_contract_12.FUNCTION_MONITORING_TOKEN_HEADER]: token },
+          body: JSON.stringify(input),
+          redirect: "error",
+          signal: AbortSignal.timeout(3e4)
+        });
+        const result = await response.json().catch(() => null);
+        if (!response.ok) {
+          const error = zod_12.z.object({ code: zod_12.z.string().max(128).optional(), detail: zod_12.z.string().max(2e3).optional() }).safeParse(result);
+          throw new monitoring_contract_12.FunctionMonitoringError(response.status, error.success ? error.data.code ?? "monitoring_failed" : "monitoring_failed", error.success ? error.data.detail ?? "Monitoring delivery failed" : "Monitoring delivery failed");
+        }
+        return result;
+      }
+      async function delivery(input, operation) {
+        const validated = monitoring_contract_12.monitoringDeliveryReceiptSchema.safeParse(await call({ ...input, operation }));
+        if (!validated.success || validated.data.producer !== input.producer || validated.data.businessKey !== input.businessKey || "payloadHash" in input && validated.data.payloadHash !== input.payloadHash || "events" in input && validated.data.eventCount !== input.events.length) {
+          throw new monitoring_contract_12.FunctionMonitoringError(502, "malformed_response", "Atlas returned an invalid monitoring receipt");
+        }
+        return validated.data;
+      }
+      return {
+        publish: (input) => delivery(input, "publish"),
+        get: (input) => delivery(input, "get"),
+        async getBucketCatalog(input) {
+          const validated = monitoring_contract_12.monitoringBucketCatalogSchema.safeParse(await call({ ...input, operation: "getBucketCatalog" }));
+          if (!validated.success || validated.data.producer !== input.producer)
+            throw new monitoring_contract_12.FunctionMonitoringError(502, "malformed_response", "Atlas returned an invalid monitoring catalog");
+          return validated.data;
+        }
+      };
+    }
+  }
+});
+
 // dist/http-tracing.js
 var require_http_tracing = __commonJS({
   "dist/http-tracing.js"(exports2) {
@@ -17261,6 +19070,8 @@ var require_http_tracing = __commonJS({
         return false;
       if (method === "POST" && /^\/api\/lattice\/(runs|processes\/[^/]+\/runs)\/?$/.test(pathname))
         return false;
+      if (method === "POST" && /^\/api\/external-systems\/call\/?$/.test(pathname))
+        return false;
       return true;
     }
   }
@@ -27982,7 +29793,7 @@ var require_scope = __commonJS({
 var require_dist = __commonJS({
   "../storage/dist/index.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -27995,16 +29806,16 @@ var require_dist = __commonJS({
       if (k2 === void 0) k2 = k;
       o[k2] = m2[k];
     }));
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
-    __exportStar(require_contracts(), exports2);
-    __exportStar(require_paths(), exports2);
-    __exportStar(require_client(), exports2);
-    __exportStar(require_transfer(), exports2);
-    __exportStar(require_crc32c(), exports2);
-    __exportStar(require_scope(), exports2);
+    __exportStar2(require_contracts(), exports2);
+    __exportStar2(require_paths(), exports2);
+    __exportStar2(require_client(), exports2);
+    __exportStar2(require_transfer(), exports2);
+    __exportStar2(require_crc32c(), exports2);
+    __exportStar2(require_scope(), exports2);
   }
 });
 
@@ -28027,6 +29838,144 @@ var require_storage = __commonJS({
   }
 });
 
+// dist/directory-contract.js
+var require_directory_contract = __commonJS({
+  "dist/directory-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.DirectoryPrincipalResolveError = exports2.functionDirectoryScopesSchema = exports2.directoryPrincipalResolutionSchema = exports2.directoryResolvedPrincipalSchema = exports2.directoryPrincipalResolveRequestSchema = exports2.directoryPrincipalLookupSchema = exports2.directoryTenantSchema = exports2.DIRECTORY_PRINCIPALS_PER_REQUEST = exports2.FUNCTION_DIRECTORY_RESOLVE_PATH = exports2.FUNCTION_DIRECTORY_TOKEN_HEADER = void 0;
+    exports2.readFunctionDirectoryScopes = readFunctionDirectoryScopes;
+    var zod_12 = require_zod();
+    exports2.FUNCTION_DIRECTORY_TOKEN_HEADER = "x-sequence-directory-service-token";
+    exports2.FUNCTION_DIRECTORY_RESOLVE_PATH = "/api/managed-functions/directory/resolve";
+    exports2.DIRECTORY_PRINCIPALS_PER_REQUEST = 50;
+    exports2.directoryTenantSchema = zod_12.z.string().min(1).max(32).regex(/^[a-z][a-z0-9]*(?:_[a-z0-9]+)*$/);
+    var subject = zod_12.z.string().min(3).max(255).regex(/^[^\s:#]+\|[^\s:#]+$/);
+    var email = zod_12.z.email().max(255).transform((value) => value.trim().toLowerCase());
+    exports2.directoryPrincipalLookupSchema = zod_12.z.discriminatedUnion("type", [
+      zod_12.z.strictObject({ type: zod_12.z.literal("email"), value: email }),
+      zod_12.z.strictObject({ type: zod_12.z.literal("sub"), value: subject })
+    ]);
+    exports2.directoryPrincipalResolveRequestSchema = zod_12.z.strictObject({
+      tenant: exports2.directoryTenantSchema,
+      lookups: zod_12.z.array(exports2.directoryPrincipalLookupSchema).min(1).max(exports2.DIRECTORY_PRINCIPALS_PER_REQUEST).refine((values) => new Set(values.map((value) => `${value.type}:${value.value}`)).size === values.length, "Lookups must be distinct")
+    });
+    exports2.directoryResolvedPrincipalSchema = zod_12.z.strictObject({
+      lookup: exports2.directoryPrincipalLookupSchema,
+      sub: subject.refine((value) => !value.startsWith("service-account|") && !value.startsWith("managed-function|") && !value.endsWith("@clients") && value !== "google-apps|sequence.agent@seqholdings.com", "Only human directory principals can resolve"),
+      email: zod_12.z.union([email, zod_12.z.literal("")]),
+      name: zod_12.z.string().max(255)
+    });
+    exports2.directoryPrincipalResolutionSchema = zod_12.z.strictObject({
+      resolved: zod_12.z.array(exports2.directoryResolvedPrincipalSchema).max(exports2.DIRECTORY_PRINCIPALS_PER_REQUEST),
+      unresolved: zod_12.z.array(exports2.directoryPrincipalLookupSchema).max(exports2.DIRECTORY_PRINCIPALS_PER_REQUEST)
+    });
+    exports2.functionDirectoryScopesSchema = zod_12.z.strictObject({
+      resolve: zod_12.z.array(exports2.directoryTenantSchema).min(1).max(16).refine((values) => new Set(values).size === values.length, "Tenant scopes must be distinct")
+    });
+    function readFunctionDirectoryScopes(manifest) {
+      if (typeof manifest !== "object" || manifest === null)
+        return [];
+      const capabilities = Reflect.get(manifest, "capabilities");
+      if (typeof capabilities !== "object" || capabilities === null)
+        return [];
+      const directory = Reflect.get(capabilities, "directory");
+      if (typeof directory !== "object" || directory === null)
+        return [];
+      const resolve = Reflect.get(directory, "resolve");
+      return resolve === void 0 ? [] : exports2.functionDirectoryScopesSchema.parse({ resolve }).resolve;
+    }
+    var DirectoryPrincipalResolveError = class extends Error {
+      status;
+      code;
+      name = "DirectoryPrincipalResolveError";
+      constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+      }
+    };
+    exports2.DirectoryPrincipalResolveError = DirectoryPrincipalResolveError;
+  }
+});
+
+// dist/directory-manifest.js
+var require_directory_manifest = __commonJS({
+  "dist/directory-manifest.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.functionDirectoryManifestSchema = void 0;
+    var zod_12 = require_zod();
+    var directory_config_1 = require_directory_config();
+    var directory_contract_1 = require_directory_contract();
+    exports2.functionDirectoryManifestSchema = zod_12.z.strictObject({
+      groups: directory_config_1.directoryScopesSchema.shape.groups.optional(),
+      resolve: directory_contract_1.functionDirectoryScopesSchema.shape.resolve.optional()
+    }).refine((value) => value.groups !== void 0 || value.resolve !== void 0, "Declare directory groups, tenant resolution scopes, or both");
+  }
+});
+
+// dist/workflow-scopes-contract.js
+var require_workflow_scopes_contract = __commonJS({
+  "dist/workflow-scopes-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.functionWorkflowScopesSchema = void 0;
+    exports2.readFunctionWorkflowScopes = readFunctionWorkflowScopes;
+    exports2.readFunctionWorkflowEvidenceScopes = readFunctionWorkflowEvidenceScopes;
+    var zod_12 = require_zod();
+    var workflowId = zod_12.z.string().min(1).max(255).regex(/^[A-Za-z0-9._-]+$/);
+    var exactWorkflowIds = zod_12.z.array(workflowId).min(1).max(64).refine((ids) => new Set(ids).size === ids.length, "Workflow ids must be distinct").refine((ids) => ids.reduce((bytes, id) => bytes + id.length, 0) <= 8192, "Workflow ids must fit within 8192 bytes");
+    exports2.functionWorkflowScopesSchema = zod_12.z.strictObject({
+      read: exactWorkflowIds.optional(),
+      evidence: exactWorkflowIds.optional()
+    }).refine((scopes) => scopes.read !== void 0 || scopes.evidence !== void 0, "Declare workflow reads or evidence verification");
+    function readWorkflowCapabilities({ manifest }) {
+      if (typeof manifest !== "object" || manifest === null)
+        return null;
+      const capabilities = Reflect.get(manifest, "capabilities");
+      if (typeof capabilities !== "object" || capabilities === null)
+        return null;
+      const workflows = Reflect.get(capabilities, "workflows");
+      return workflows === void 0 ? null : exports2.functionWorkflowScopesSchema.parse(workflows);
+    }
+    function readFunctionWorkflowScopes(manifest) {
+      return readWorkflowCapabilities({ manifest })?.read ?? [];
+    }
+    function readFunctionWorkflowEvidenceScopes(manifest) {
+      return readWorkflowCapabilities({ manifest })?.evidence ?? [];
+    }
+  }
+});
+
+// dist/orm-contract.js
+var require_orm_contract = __commonJS({
+  "dist/orm-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.FUNCTION_CALLER_DATA_TOKEN_HEADER = void 0;
+    exports2.FUNCTION_CALLER_DATA_TOKEN_HEADER = "x-sequence-caller-data-token";
+  }
+});
+
+// dist/immutable-release-contract.js
+var require_immutable_release_contract = __commonJS({
+  "dist/immutable-release-contract.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.functionImmutableReleaseSchema = void 0;
+    exports2.readFunctionImmutableRelease = readFunctionImmutableRelease;
+    var zod_12 = require_zod();
+    exports2.functionImmutableReleaseSchema = zod_12.z.boolean();
+    function readFunctionImmutableRelease(manifest) {
+      if (typeof manifest !== "object" || manifest === null)
+        return false;
+      const fn = Reflect.get(manifest, "function");
+      return typeof fn === "object" && fn !== null && Reflect.get(fn, "immutable_release") === true;
+    }
+  }
+});
+
 // dist/limits.js
 var require_limits = __commonJS({
   "dist/limits.js"(exports2) {
@@ -28153,6 +30102,7 @@ var require_sdk_range = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.concreteOrStaleSdkSpec = concreteOrStaleSdkSpec;
     exports2.sdkConstraintIsOlder = sdkConstraintIsOlder;
+    exports2.sdkSpecAllowsOnlyAtOrAbove = sdkSpecAllowsOnlyAtOrAbove;
     function parseSemver(raw) {
       const match = /^v?(\d+)\.(\d+)\.(\d+)$/.exec(raw.trim());
       if (!match)
@@ -28290,6 +30240,29 @@ var require_sdk_range = __commonJS({
       }
       return concreteOrStaleSdkSpec(declared, minimum) === declared;
     }
+    function sdkSpecAllowsOnlyAtOrAbove(declared, minimum) {
+      const target = parseSemver(minimum);
+      if (!target || !target.every(Number.isSafeInteger))
+        return false;
+      const alternatives = declared.trim().split("||");
+      if (alternatives.some((alternative) => alternative.trim() === ""))
+        return false;
+      return alternatives.every((alternative) => {
+        const versions = alternative.match(/\d+\.\d+\.\d+/g) ?? [];
+        if (!versions.every((version) => /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)$/.test(version)))
+          return false;
+        const bounds = clauseBounds(alternative);
+        if (!bounds || !bounds.min.every(Number.isSafeInteger) || bounds.max && !bounds.max.every(Number.isSafeInteger))
+          return false;
+        const first = bounds.minInclusive ? bounds.min : [bounds.min[0], bounds.min[1], bounds.min[2] + 1];
+        if (!first.every(Number.isSafeInteger) || compare(first, target) < 0)
+          return false;
+        if (!bounds.max)
+          return true;
+        const relation = compare(first, bounds.max);
+        return relation < 0 || relation === 0 && bounds.maxInclusive;
+      });
+    }
   }
 });
 
@@ -28302,6 +30275,7 @@ var require_capabilities = __commonJS({
     exports2.versionIsOlder = versionIsOlder;
     exports2.sdkVersionLowerBound = sdkVersionLowerBound;
     exports2.sdkVersionFromPackageJson = sdkVersionFromPackageJson;
+    exports2.sdkSpecFromPackageJson = sdkSpecFromPackageJson;
     exports2.isPostgresEgress = isPostgresEgress;
     exports2.formatValidationDetail = formatValidationDetail;
     var sdk_range_1 = require_sdk_range();
@@ -28320,6 +30294,76 @@ var require_capabilities = __commonJS({
           min_cli: "0.5.2",
           min_sdk: "0.4.1"
         },
+        abrigo_read: {
+          field: "capabilities.abrigo.read",
+          supported: true,
+          limit: "eleven fixed human reads: eight integration reads and three workflow-scoped document-review reads; pages 1 to 100 with 1 to 500 rows; 1 MiB JSON responses",
+          min_cli: "0.5.5",
+          min_sdk: "0.4.2"
+        },
+        immutable_release: {
+          field: "function.immutable_release",
+          supported: true,
+          limit: "a fresh function identity whose runtime cannot be redeployed after first activation",
+          min_cli: "0.5.5",
+          min_sdk: "0.4.2"
+        },
+        invocation_identity: {
+          field: "capabilities.invocation.identity",
+          supported: true,
+          limit: "verified receiver and actual caller for this exact active invocation only",
+          min_cli: "0.5.5",
+          min_sdk: "0.4.2"
+        },
+        directory_resolve: {
+          field: "capabilities.directory.resolve",
+          supported: true,
+          limit: "1 to 16 exact tenant scopes; at most 50 exact active human principal lookups",
+          min_cli: "0.5.5",
+          min_sdk: "0.4.2"
+        },
+        lattice_context: {
+          field: "capabilities.lattice.context",
+          supported: true,
+          limit: "verified context and causal human completion for the receiving Lattice step only",
+          min_cli: "0.5.5",
+          min_sdk: "0.4.2"
+        },
+        agents_read: {
+          field: "capabilities.agents.read",
+          supported: true,
+          limit: "1 to 64 exact agent ids; completed owned or verified upstream responses only",
+          min_cli: "0.5.5",
+          min_sdk: "0.4.2"
+        },
+        agents_evidence_verify: {
+          field: "capabilities.agents.evidence",
+          supported: true,
+          limit: "1 to 64 exact agent ids; verify bounded supplied historical source evidence only",
+          min_cli: "0.5.5",
+          min_sdk: "0.4.2"
+        },
+        workflows_read: {
+          field: "capabilities.workflows.read",
+          supported: true,
+          limit: "1 to 64 exact workflow ids; completed owned root outputs only",
+          min_cli: "0.5.5",
+          min_sdk: "0.4.2"
+        },
+        workflows_evidence_verify: {
+          field: "capabilities.workflows.evidence",
+          supported: true,
+          limit: "1 to 64 exact workflow ids; verify bounded supplied historical root-output evidence only",
+          min_cli: "0.5.5",
+          min_sdk: "0.4.2"
+        },
+        monitoring_deliveries: {
+          field: "capabilities.monitoring.producers",
+          supported: true,
+          limit: "1 to 16 producer namespaces; immutable publish and receipt lookup",
+          min_cli: "0.5.5",
+          min_sdk: "0.4.2"
+        },
         processes_read: {
           field: "capabilities.processes.read",
           supported: true,
@@ -28370,6 +30414,9 @@ var require_capabilities = __commonJS({
       return (0, sdk_range_1.concreteOrStaleSdkSpec)(spec, minimum);
     }
     function sdkVersionFromPackageJson(raw) {
+      return sdkVersionLowerBound(sdkSpecFromPackageJson(raw) ?? void 0);
+    }
+    function sdkSpecFromPackageJson(raw) {
       let parsed;
       try {
         parsed = JSON.parse(raw);
@@ -28380,7 +30427,8 @@ var require_capabilities = __commonJS({
         return null;
       const dependencies = Reflect.get(parsed, "dependencies");
       const devDependencies = Reflect.get(parsed, "devDependencies");
-      return sdkVersionLowerBound(dependencySpec(dependencies) ?? dependencySpec(devDependencies));
+      const spec = dependencySpec(dependencies) ?? dependencySpec(devDependencies);
+      return spec?.trim() || null;
     }
     function dependencySpec(block) {
       if (!block || typeof block !== "object")
@@ -28448,15 +30496,38 @@ var require_deployed_policy = __commonJS({
       return {
         tooling: value.tooling,
         features: {
+          immutable_release: normalizeImmutableRelease(features.immutable_release),
+          invocation_identity: normalizeInvocationIdentity(features.invocation_identity),
+          directory_members: normalizeDirectoryMembers(features.directory_members),
+          directory_resolve: normalizeDirectory(features.directory_resolve),
+          abrigo_read: normalizeAbrigo(features.abrigo_read),
+          lattice_context: normalizeLatticeContext(features.lattice_context),
           postgres_egress: normalizePostgres(features.postgres_egress),
           http_headers: normalizeHeaders(features.http_headers),
           invoke_timeout: normalizeTimeout(features.invoke_timeout),
           processes_read: normalizeProcesses(features.processes_read),
-          directory_members: normalizeDirectory(features.directory_members)
+          agents_read: normalizeAgents(features.agents_read),
+          agents_evidence_verify: normalizeAgentEvidence(features.agents_evidence_verify),
+          workflows_read: normalizeWorkflowRead(features.workflows_read),
+          workflows_evidence_verify: normalizeWorkflowEvidence(features.workflows_evidence_verify),
+          monitoring_deliveries: normalizeMonitoring(features.monitoring_deliveries)
         }
       };
     }
-    function normalizeDirectory(value) {
+    function normalizeImmutableRelease(value) {
+      if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
+        return void 0;
+      if (typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
+        return void 0;
+      return {
+        field: typeof value.field === "string" ? value.field : "function.immutable_release",
+        supported: value.supported,
+        limit: value.limit,
+        min_cli: value.min_cli,
+        min_sdk: value.min_sdk
+      };
+    }
+    function normalizeDirectoryMembers(value) {
       if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
         return void 0;
       if (typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
@@ -28469,6 +30540,55 @@ var require_deployed_policy = __commonJS({
         min_sdk: value.min_sdk
       };
     }
+    function normalizeDirectory(value) {
+      if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string" || typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
+        return void 0;
+      return { field: typeof value.field === "string" ? value.field : "capabilities.directory.resolve", supported: value.supported, limit: value.limit, min_cli: value.min_cli, min_sdk: value.min_sdk };
+    }
+    function normalizeAbrigo(value) {
+      if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string" || typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
+        return void 0;
+      return { field: typeof value.field === "string" ? value.field : "capabilities.abrigo.read", supported: value.supported, limit: value.limit, min_cli: value.min_cli, min_sdk: value.min_sdk };
+    }
+    function normalizeInvocationIdentity(value) {
+      if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
+        return void 0;
+      if (typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
+        return void 0;
+      return {
+        field: typeof value.field === "string" ? value.field : "capabilities.invocation.identity",
+        supported: value.supported,
+        limit: value.limit,
+        min_cli: value.min_cli,
+        min_sdk: value.min_sdk
+      };
+    }
+    function normalizeLatticeContext(value) {
+      if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
+        return void 0;
+      if (typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
+        return void 0;
+      return {
+        field: typeof value.field === "string" ? value.field : "capabilities.lattice.context",
+        supported: value.supported,
+        limit: value.limit,
+        min_cli: value.min_cli,
+        min_sdk: value.min_sdk
+      };
+    }
+    function normalizeMonitoring(value) {
+      if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
+        return void 0;
+      if (typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
+        return void 0;
+      return {
+        field: typeof value.field === "string" ? value.field : "capabilities.monitoring.producers",
+        supported: value.supported,
+        limit: value.limit,
+        min_cli: value.min_cli,
+        min_sdk: value.min_sdk
+      };
+    }
     function normalizeProcesses(value) {
       if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
         return void 0;
@@ -28482,6 +30602,34 @@ var require_deployed_policy = __commonJS({
         min_sdk: value.min_sdk
       };
     }
+    function normalizeAgents(value) {
+      if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
+        return void 0;
+      if (typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
+        return void 0;
+      return { field: typeof value.field === "string" ? value.field : "capabilities.agents.read", supported: value.supported, limit: value.limit, min_cli: value.min_cli, min_sdk: value.min_sdk };
+    }
+    function normalizeAgentEvidence(value) {
+      if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
+        return void 0;
+      if (typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
+        return void 0;
+      return { field: typeof value.field === "string" ? value.field : "capabilities.agents.evidence", supported: value.supported, limit: value.limit, min_cli: value.min_cli, min_sdk: value.min_sdk };
+    }
+    function normalizeWorkflowRead(value) {
+      if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
+        return void 0;
+      if (typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
+        return void 0;
+      return { field: typeof value.field === "string" ? value.field : "capabilities.workflows.read", supported: value.supported, limit: value.limit, min_cli: value.min_cli, min_sdk: value.min_sdk };
+    }
+    function normalizeWorkflowEvidence(value) {
+      if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
+        return void 0;
+      if (typeof value.min_cli !== "string" || typeof value.min_sdk !== "string")
+        return void 0;
+      return { field: typeof value.field === "string" ? value.field : "capabilities.workflows.evidence", supported: value.supported, limit: value.limit, min_cli: value.min_cli, min_sdk: value.min_sdk };
+    }
     function normalizePostgres(value) {
       if (!value || typeof value.supported !== "boolean" || typeof value.limit !== "string")
         return void 0;
@@ -28598,6 +30746,347 @@ var require_preflight_processes = __commonJS({
   }
 });
 
+// dist/preflight-lattice.js
+var require_preflight_lattice = __commonJS({
+  "dist/preflight-lattice.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.checkLatticeContext = checkLatticeContext;
+    var capabilities_1 = require_capabilities();
+    var lattice_capability_12 = require_lattice_capability();
+    var preflight_issue_1 = require_preflight_issue();
+    var sdk_range_1 = require_sdk_range();
+    function checkLatticeContext({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues }) {
+      const lattice = manifest.capabilities?.lattice;
+      if (lattice === void 0)
+        return;
+      const deployed = capabilities?.features.lattice_context;
+      const feature = deployed ?? capabilities_1.MANAGED_FUNCTION_CAPABILITIES.features.lattice_context;
+      const details = {
+        limit: feature.limit,
+        tooling,
+        requiredCli: feature.min_cli,
+        requiredSdk: feature.min_sdk,
+        cliVersion,
+        sdkVersion
+      };
+      const parsed = lattice_capability_12.functionLatticeContextCapabilitySchema.safeParse(lattice);
+      if (!parsed.success) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          field: "capabilities.lattice",
+          problem: (0, capabilities_1.formatValidationDetail)(parsed.error.issues)
+        }));
+        return;
+      }
+      if (checkDeployment && deployed?.supported !== true) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          field: feature.field,
+          problem: "Lattice execution context reads are not supported by this deployment"
+        }));
+        return;
+      }
+      if ((0, capabilities_1.versionIsOlder)(cliVersion, feature.min_cli) || sdkVersion && (0, sdk_range_1.sdkConstraintIsOlder)(sdkVersion, feature.min_sdk)) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          field: feature.field,
+          problem: "the installed tooling does not support managed function Lattice context reads"
+        }));
+      }
+    }
+  }
+});
+
+// dist/preflight-invocation.js
+var require_preflight_invocation = __commonJS({
+  "dist/preflight-invocation.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.checkInvocationIdentity = checkInvocationIdentity;
+    var capabilities_1 = require_capabilities();
+    var invocation_contract_1 = require_invocation_contract();
+    var preflight_issue_1 = require_preflight_issue();
+    var sdk_range_1 = require_sdk_range();
+    function checkInvocationIdentity({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues }) {
+      const invocation = manifest.capabilities?.invocation;
+      if (invocation === void 0)
+        return;
+      const deployed = capabilities?.features.invocation_identity;
+      const feature = deployed ?? capabilities_1.MANAGED_FUNCTION_CAPABILITIES.features.invocation_identity;
+      const details = {
+        limit: feature.limit,
+        tooling,
+        requiredCli: feature.min_cli,
+        requiredSdk: feature.min_sdk,
+        cliVersion,
+        sdkVersion
+      };
+      const parsed = invocation_contract_1.functionInvocationIdentityCapabilitySchema.safeParse(invocation);
+      if (!parsed.success) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          field: "capabilities.invocation",
+          problem: (0, capabilities_1.formatValidationDetail)(parsed.error.issues)
+        }));
+        return;
+      }
+      if (checkDeployment && deployed?.supported !== true) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          field: feature.field,
+          problem: "Invocation identity reads are not supported by this deployment"
+        }));
+        return;
+      }
+      if ((0, capabilities_1.versionIsOlder)(cliVersion, feature.min_cli) || sdkVersion && (0, sdk_range_1.sdkConstraintIsOlder)(sdkVersion, feature.min_sdk)) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          field: feature.field,
+          problem: "the installed tooling does not support managed function invocation identity reads"
+        }));
+      }
+    }
+  }
+});
+
+// dist/preflight-immutable-release.js
+var require_preflight_immutable_release = __commonJS({
+  "dist/preflight-immutable-release.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.checkImmutableRelease = checkImmutableRelease;
+    var capabilities_1 = require_capabilities();
+    var preflight_issue_1 = require_preflight_issue();
+    var immutable_release_contract_1 = require_immutable_release_contract();
+    var sdk_range_1 = require_sdk_range();
+    function checkImmutableRelease({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues }) {
+      const declaration = manifest.function?.immutable_release;
+      if (declaration === void 0 || declaration === false)
+        return;
+      const deployed = capabilities?.features.immutable_release;
+      const feature = deployed ?? capabilities_1.MANAGED_FUNCTION_CAPABILITIES.features.immutable_release;
+      const details = {
+        field: "function.immutable_release",
+        limit: feature.limit,
+        tooling,
+        requiredCli: feature.min_cli,
+        requiredSdk: feature.min_sdk,
+        cliVersion,
+        sdkVersion
+      };
+      if (!immutable_release_contract_1.functionImmutableReleaseSchema.safeParse(declaration).success) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({ ...details, problem: "must be a boolean" }));
+        return;
+      }
+      if (checkDeployment && deployed?.supported !== true) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          problem: "Immutable function releases are not supported by this deployment"
+        }));
+        return;
+      }
+      if ((0, capabilities_1.versionIsOlder)(cliVersion, feature.min_cli) || sdkVersion && (0, sdk_range_1.sdkConstraintIsOlder)(sdkVersion, feature.min_sdk)) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          problem: "the installed tooling does not support immutable function releases"
+        }));
+      }
+    }
+  }
+});
+
+// dist/preflight-agents.js
+var require_preflight_agents = __commonJS({
+  "dist/preflight-agents.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.checkAgents = checkAgents;
+    var capabilities_1 = require_capabilities();
+    var preflight_issue_1 = require_preflight_issue();
+    var agents_contract_1 = require_agents_contract();
+    var sdk_range_1 = require_sdk_range();
+    function checkAgents({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues }) {
+      const agents = manifest.capabilities?.agents;
+      if (agents === void 0)
+        return;
+      const parsed = agents_contract_1.functionAgentReadScopesSchema.safeParse(agents);
+      const keys = parsed.success && parsed.data.read === void 0 ? [] : ["agents_read"];
+      if (parsed.success && parsed.data.evidence !== void 0)
+        keys.push("agents_evidence_verify");
+      for (const key of keys) {
+        const deployed = capabilities?.features[key];
+        const feature = deployed ?? capabilities_1.MANAGED_FUNCTION_CAPABILITIES.features[key];
+        const details = {
+          limit: feature.limit,
+          tooling,
+          requiredCli: feature.min_cli,
+          requiredSdk: feature.min_sdk,
+          cliVersion,
+          sdkVersion
+        };
+        if (!parsed.success) {
+          issues.push((0, preflight_issue_1.createPreflightIssue)({
+            ...details,
+            field: "capabilities.agents",
+            problem: (0, capabilities_1.formatValidationDetail)(parsed.error.issues)
+          }));
+          return;
+        }
+        if (checkDeployment && deployed?.supported !== true) {
+          issues.push((0, preflight_issue_1.createPreflightIssue)({
+            ...details,
+            field: feature.field,
+            problem: "the declared agent capability is not supported by this deployment"
+          }));
+          continue;
+        }
+        if ((0, capabilities_1.versionIsOlder)(cliVersion, feature.min_cli) || sdkVersion && (0, sdk_range_1.sdkConstraintIsOlder)(sdkVersion, feature.min_sdk)) {
+          issues.push((0, preflight_issue_1.createPreflightIssue)({
+            ...details,
+            field: feature.field,
+            problem: "the installed tooling does not support the declared agent capability"
+          }));
+        }
+      }
+    }
+  }
+});
+
+// dist/preflight-workflows.js
+var require_preflight_workflows = __commonJS({
+  "dist/preflight-workflows.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.checkWorkflows = checkWorkflows;
+    var capabilities_1 = require_capabilities();
+    var preflight_issue_1 = require_preflight_issue();
+    var sdk_range_1 = require_sdk_range();
+    var workflow_scopes_contract_1 = require_workflow_scopes_contract();
+    function checkWorkflows({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues }) {
+      const workflows = manifest.capabilities?.workflows;
+      if (workflows === void 0)
+        return;
+      const parsed = workflow_scopes_contract_1.functionWorkflowScopesSchema.safeParse(workflows);
+      if (!parsed.success) {
+        const feature = capabilities_1.MANAGED_FUNCTION_CAPABILITIES.features.workflows_read;
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          limit: feature.limit,
+          tooling,
+          requiredCli: feature.min_cli,
+          requiredSdk: feature.min_sdk,
+          cliVersion,
+          sdkVersion,
+          field: "capabilities.workflows",
+          problem: (0, capabilities_1.formatValidationDetail)(parsed.error.issues)
+        }));
+        return;
+      }
+      const keys = [];
+      if (parsed.data.read !== void 0)
+        keys.push("workflows_read");
+      if (parsed.data.evidence !== void 0)
+        keys.push("workflows_evidence_verify");
+      for (const key of keys) {
+        const deployed = capabilities?.features[key];
+        const feature = deployed ?? capabilities_1.MANAGED_FUNCTION_CAPABILITIES.features[key];
+        const details = { limit: feature.limit, tooling, requiredCli: feature.min_cli, requiredSdk: feature.min_sdk, cliVersion, sdkVersion };
+        if (checkDeployment && deployed?.supported !== true) {
+          issues.push((0, preflight_issue_1.createPreflightIssue)({ ...details, field: feature.field, problem: "the declared workflow capability is not supported by this deployment" }));
+          continue;
+        }
+        if ((0, capabilities_1.versionIsOlder)(cliVersion, feature.min_cli) || sdkVersion && (0, sdk_range_1.sdkConstraintIsOlder)(sdkVersion, feature.min_sdk)) {
+          issues.push((0, preflight_issue_1.createPreflightIssue)({ ...details, field: feature.field, problem: "the installed tooling does not support the declared workflow capability" }));
+        }
+      }
+    }
+  }
+});
+
+// dist/preflight-monitoring.js
+var require_preflight_monitoring = __commonJS({
+  "dist/preflight-monitoring.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.checkMonitoring = checkMonitoring;
+    var capabilities_1 = require_capabilities();
+    var preflight_issue_1 = require_preflight_issue();
+    var monitoring_contract_12 = require_monitoring_contract();
+    var sdk_range_1 = require_sdk_range();
+    function checkMonitoring({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues }) {
+      const monitoring = manifest.capabilities?.monitoring;
+      if (monitoring === void 0)
+        return;
+      const deployedFeature = capabilities?.features.monitoring_deliveries;
+      const feature = deployedFeature ?? capabilities_1.MANAGED_FUNCTION_CAPABILITIES.features.monitoring_deliveries;
+      const details = {
+        limit: feature.limit,
+        tooling,
+        requiredCli: feature.min_cli,
+        requiredSdk: feature.min_sdk,
+        cliVersion,
+        sdkVersion
+      };
+      const parsed = monitoring_contract_12.functionMonitoringScopesSchema.safeParse(monitoring);
+      if (!parsed.success) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          field: "capabilities.monitoring",
+          problem: (0, capabilities_1.formatValidationDetail)(parsed.error.issues)
+        }));
+        return;
+      }
+      if (checkDeployment && deployedFeature?.supported !== true) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          field: feature.field,
+          problem: "monitoring deliveries are not supported by this deployment"
+        }));
+        return;
+      }
+      if ((0, capabilities_1.versionIsOlder)(cliVersion, feature.min_cli) || sdkVersion && (0, sdk_range_1.sdkConstraintIsOlder)(sdkVersion, feature.min_sdk)) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({
+          ...details,
+          field: feature.field,
+          problem: "the installed tooling does not support managed function monitoring deliveries"
+        }));
+      }
+    }
+  }
+});
+
+// dist/preflight-service-directory.js
+var require_preflight_service_directory = __commonJS({
+  "dist/preflight-service-directory.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.checkDirectory = checkDirectory;
+    var capabilities_1 = require_capabilities();
+    var preflight_issue_1 = require_preflight_issue();
+    var directory_contract_1 = require_directory_contract();
+    var sdk_range_1 = require_sdk_range();
+    function checkDirectory({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues }) {
+      const directory = manifest.capabilities?.directory;
+      if (directory === void 0)
+        return;
+      const deployed = capabilities?.features.directory_resolve;
+      const feature = deployed ?? capabilities_1.MANAGED_FUNCTION_CAPABILITIES.features.directory_resolve;
+      const details = { limit: feature.limit, tooling, requiredCli: feature.min_cli, requiredSdk: feature.min_sdk, cliVersion, sdkVersion };
+      const parsed = directory_contract_1.functionDirectoryScopesSchema.safeParse(directory);
+      if (!parsed.success) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({ ...details, field: "capabilities.directory", problem: (0, capabilities_1.formatValidationDetail)(parsed.error.issues) }));
+        return;
+      }
+      if (checkDeployment && deployed?.supported !== true) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({ ...details, field: feature.field, problem: "exact directory resolution is not supported by this deployment" }));
+        return;
+      }
+      if ((0, capabilities_1.versionIsOlder)(cliVersion, feature.min_cli) || sdkVersion && (0, sdk_range_1.sdkConstraintIsOlder)(sdkVersion, feature.min_sdk))
+        issues.push((0, preflight_issue_1.createPreflightIssue)({ ...details, field: feature.field, problem: "the installed tooling does not support managed function directory resolution" }));
+    }
+  }
+});
+
 // dist/preflight-directory.js
 var require_preflight_directory = __commonJS({
   "dist/preflight-directory.js"(exports2) {
@@ -28650,6 +31139,38 @@ var require_preflight_directory = __commonJS({
   }
 });
 
+// dist/preflight-abrigo.js
+var require_preflight_abrigo = __commonJS({
+  "dist/preflight-abrigo.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.checkAbrigo = checkAbrigo;
+    var capabilities_1 = require_capabilities();
+    var preflight_issue_1 = require_preflight_issue();
+    var abrigo_contract_1 = require_abrigo_contract();
+    var sdk_range_1 = require_sdk_range();
+    function checkAbrigo({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues }) {
+      const abrigo = manifest.capabilities?.abrigo;
+      if (abrigo === void 0)
+        return;
+      const deployed = capabilities?.features.abrigo_read;
+      const feature = deployed ?? capabilities_1.MANAGED_FUNCTION_CAPABILITIES.features.abrigo_read;
+      const details = { limit: feature.limit, tooling, requiredCli: feature.min_cli, requiredSdk: feature.min_sdk, cliVersion, sdkVersion };
+      const parsed = abrigo_contract_1.functionAbrigoReadScopesSchema.safeParse(abrigo);
+      if (!parsed.success) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({ ...details, field: "capabilities.abrigo", problem: (0, capabilities_1.formatValidationDetail)(parsed.error.issues) }));
+        return;
+      }
+      if (checkDeployment && deployed?.supported !== true) {
+        issues.push((0, preflight_issue_1.createPreflightIssue)({ ...details, field: feature.field, problem: "caller-scoped Abrigo reads are not supported by this deployment" }));
+        return;
+      }
+      if ((0, capabilities_1.versionIsOlder)(cliVersion, feature.min_cli) || !sdkVersion || !(0, sdk_range_1.sdkSpecAllowsOnlyAtOrAbove)(sdkVersion, feature.min_sdk))
+        issues.push((0, preflight_issue_1.createPreflightIssue)({ ...details, field: feature.field, problem: "declare compatible tooling for caller-scoped Abrigo reads" }));
+    }
+  }
+});
+
 // dist/preflight.js
 var require_preflight = __commonJS({
   "dist/preflight.js"(exports2) {
@@ -28660,8 +31181,22 @@ var require_preflight = __commonJS({
     var sdk_range_1 = require_sdk_range();
     var preflight_issue_1 = require_preflight_issue();
     var preflight_processes_1 = require_preflight_processes();
+    var preflight_lattice_1 = require_preflight_lattice();
+    var lattice_capability_12 = require_lattice_capability();
+    var preflight_invocation_1 = require_preflight_invocation();
+    var preflight_immutable_release_1 = require_preflight_immutable_release();
+    var invocation_contract_1 = require_invocation_contract();
+    var preflight_agents_1 = require_preflight_agents();
+    var agents_contract_1 = require_agents_contract();
+    var preflight_workflows_1 = require_preflight_workflows();
+    var workflow_scopes_contract_1 = require_workflow_scopes_contract();
+    var preflight_monitoring_1 = require_preflight_monitoring();
+    var preflight_service_directory_1 = require_preflight_service_directory();
     var preflight_directory_1 = require_preflight_directory();
-    var directory_config_1 = require_directory_config();
+    var directory_manifest_1 = require_directory_manifest();
+    var preflight_abrigo_1 = require_preflight_abrigo();
+    var abrigo_contract_1 = require_abrigo_contract();
+    var monitoring_contract_12 = require_monitoring_contract();
     var processes_contract_1 = require_processes_contract();
     var WORKLOAD_FIELDS = [
       "memory_mb",
@@ -28676,9 +31211,16 @@ var require_preflight = __commonJS({
       const tooling = capabilities?.tooling ?? capabilities_1.MANAGED_FUNCTION_CAPABILITIES.tooling;
       const issues = [];
       checkWorkload({ manifest, limits, tooling, cliVersion, sdkVersion, issues });
+      (0, preflight_immutable_release_1.checkImmutableRelease)({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues });
       checkPostgres({ manifest, capabilities, tooling, cliVersion, sdkVersion, issues });
       (0, preflight_processes_1.checkProcesses)({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues });
-      (0, preflight_directory_1.checkDirectory)({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues });
+      (0, preflight_lattice_1.checkLatticeContext)({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues });
+      (0, preflight_invocation_1.checkInvocationIdentity)({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues });
+      (0, preflight_agents_1.checkAgents)({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues });
+      (0, preflight_workflows_1.checkWorkflows)({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues });
+      (0, preflight_monitoring_1.checkMonitoring)({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues });
+      checkDirectoryDeclarations({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues });
+      (0, preflight_abrigo_1.checkAbrigo)({ manifest, capabilities, tooling, cliVersion, sdkVersion, checkDeployment, issues });
       checkHeaders({ manifest, capabilities, tooling, cliVersion, sdkVersion, issues });
       checkSdkTimeout({ manifest, limits, capabilities, tooling, cliVersion, sdkVersion, issues });
       return issues;
@@ -28780,8 +31322,14 @@ var require_preflight = __commonJS({
       const hasData = !!data && Object.keys(data).length > 0;
       const hasStorage = !!storage && typeof storage === "object" && Object.keys(storage).length > 0;
       const hasProcesses = processes_contract_1.functionProcessReadScopesSchema.safeParse(manifest.capabilities?.processes).success;
-      const hasDirectory = directory_config_1.directoryScopesSchema.safeParse(manifest.capabilities?.directory).success;
-      return hasData || hasStorage || hasProcesses || hasDirectory;
+      const hasAgents = agents_contract_1.functionAgentReadScopesSchema.safeParse(manifest.capabilities?.agents).success;
+      const hasWorkflows = workflow_scopes_contract_1.functionWorkflowScopesSchema.safeParse(manifest.capabilities?.workflows).success;
+      const hasMonitoring = monitoring_contract_12.functionMonitoringScopesSchema.safeParse(manifest.capabilities?.monitoring).success;
+      const hasLattice = (0, lattice_capability_12.readFunctionLatticeContextCapability)(manifest);
+      const hasInvocation = (0, invocation_contract_1.readFunctionInvocationIdentityCapability)(manifest);
+      const hasDirectory = directory_manifest_1.functionDirectoryManifestSchema.safeParse(manifest.capabilities?.directory).success;
+      const hasAbrigo = abrigo_contract_1.functionAbrigoReadScopesSchema.safeParse(manifest.capabilities?.abrigo).success;
+      return hasData || hasStorage || hasProcesses || hasMonitoring || hasAgents || hasWorkflows || hasLattice || hasInvocation || hasDirectory || hasAbrigo;
     }
     function checkHeaders({ manifest, capabilities, tooling, cliVersion, sdkVersion, issues }) {
       const feature = capabilities?.features.http_headers;
@@ -28792,7 +31340,7 @@ var require_preflight = __commonJS({
         return;
       issues.push((0, preflight_issue_1.createPreflightIssue)({
         field: feature.field,
-        problem: `invocation headers for capabilities.data, capabilities.storage, capabilities.processes, or capabilities.directory exceed ${feature.max_bytes} bytes and will fail with HTTP 431`,
+        problem: `invocation headers for capability credentials, including capabilities.data, capabilities.storage, capabilities.processes, capabilities.lattice, capabilities.invocation and capabilities.directory, exceed ${feature.max_bytes} bytes and will fail with HTTP 431`,
         limit: feature.limit,
         tooling,
         requiredCli: feature.min_cli,
@@ -28822,6 +31370,30 @@ var require_preflight = __commonJS({
         sdkVersion
       }));
     }
+    function checkDirectoryDeclarations(args) {
+      const directory = args.manifest.capabilities?.directory;
+      if (directory === void 0)
+        return;
+      const parsed = directory_manifest_1.functionDirectoryManifestSchema.safeParse(directory);
+      if (!parsed.success) {
+        args.issues.push((0, preflight_issue_1.createPreflightIssue)({
+          field: "capabilities.directory",
+          problem: (0, capabilities_1.formatValidationDetail)(parsed.error.issues),
+          limit: "concrete groups and/or exact tenant resolution scopes",
+          tooling: args.tooling,
+          requiredCli: args.tooling.cli.min,
+          requiredSdk: args.tooling.sdk.min,
+          cliVersion: args.cliVersion,
+          sdkVersion: args.sdkVersion
+        }));
+        return;
+      }
+      const scoped = (directory2) => ({ ...args, manifest: { ...args.manifest, capabilities: { ...args.manifest.capabilities, directory: directory2 } } });
+      if (parsed.data.groups)
+        (0, preflight_directory_1.checkDirectory)(scoped({ groups: parsed.data.groups }));
+      if (parsed.data.resolve)
+        (0, preflight_service_directory_1.checkDirectory)(scoped({ resolve: parsed.data.resolve }));
+    }
   }
 });
 
@@ -28829,8 +31401,25 @@ var require_preflight = __commonJS({
 var require_config2 = __commonJS({
   "dist/config.js"(exports2) {
     "use strict";
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m2, k);
+      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m2[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m2[k];
+    }));
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
+    };
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.cacheManifestSchema = exports2.CACHE_MAX_TTL_SECONDS = exports2.preflightManagedFunction = exports2.parseDeployedPolicy = exports2.versionIsOlder = exports2.sdkVersionLowerBound = exports2.sdkVersionFromPackageJson = exports2.isPostgresEgress = exports2.formatValidationDetail = exports2.MANAGED_FUNCTION_SDK_PACKAGE = exports2.MANAGED_FUNCTION_CLI_PACKAGE = exports2.MANAGED_FUNCTION_CAPABILITIES = exports2.managedFunctionWorkloadLimitsSchema = exports2.MF_LIMITS_DEFAULTS = exports2.MF_LIMITS_CAPS = exports2.MANAGED_FUNCTION_LIMITS = exports2.shouldReportAtlasHttp = exports2.functionProcessRunSummarySchema = exports2.functionProcessReadRequestSchema = exports2.readFunctionProcessScopes = exports2.functionProcessReadScopesSchema = exports2.FUNCTION_PROCESS_READ_PATH = exports2.FUNCTION_PROCESS_TOKEN_HEADER = exports2.readDirectoryGroups = exports2.directoryMembersResponse = exports2.directoryMembersInput = exports2.directoryScopesSchema = exports2.directoryGroupIdSchema = exports2.DIRECTORY_TOKEN_HEADER = void 0;
+    exports2.versionIsOlder = exports2.sdkVersionLowerBound = exports2.sdkSpecFromPackageJson = exports2.sdkVersionFromPackageJson = exports2.isPostgresEgress = exports2.formatValidationDetail = exports2.MANAGED_FUNCTION_SDK_PACKAGE = exports2.MANAGED_FUNCTION_CLI_PACKAGE = exports2.MANAGED_FUNCTION_CAPABILITIES = exports2.managedFunctionWorkloadLimitsSchema = exports2.MF_LIMITS_DEFAULTS = exports2.MF_LIMITS_CAPS = exports2.MANAGED_FUNCTION_LIMITS = exports2.readFunctionImmutableRelease = exports2.functionImmutableReleaseSchema = exports2.shouldReportAtlasHttp = exports2.directoryPrincipalResolutionSchema = exports2.directoryPrincipalResolveRequestSchema = exports2.readFunctionDirectoryScopes = exports2.functionDirectoryScopesSchema = exports2.FUNCTION_DIRECTORY_RESOLVE_PATH = exports2.FUNCTION_DIRECTORY_TOKEN_HEADER = exports2.FUNCTION_CALLER_DATA_TOKEN_HEADER = exports2.readFunctionWorkflowEvidenceScopes = exports2.readFunctionWorkflowScopes = exports2.functionWorkflowScopesSchema = exports2.functionAgentCompletedRunSchema = exports2.functionAgentCompletedRunQuerySchema = exports2.functionAgentReadRequestSchema = exports2.readFunctionAgentScopes = exports2.functionAgentReadScopesSchema = exports2.FUNCTION_AGENT_READ_PATH = exports2.FUNCTION_AGENT_TOKEN_HEADER = exports2.functionProcessCompletedAgentReferenceQuerySchema = exports2.functionProcessCompletedAgentReferenceSchema = exports2.functionProcessRunSummarySchema = exports2.functionProcessReadRequestSchema = exports2.readFunctionProcessScopes = exports2.functionProcessReadScopesSchema = exports2.FUNCTION_PROCESS_READ_PATH = exports2.FUNCTION_PROCESS_TOKEN_HEADER = exports2.readFunctionLatticeContextCapability = exports2.functionLatticeContextCapabilitySchema = exports2.functionDirectoryManifestSchema = exports2.readDirectoryGroups = exports2.directoryMembersResponse = exports2.directoryMembersInput = exports2.directoryScopesSchema = exports2.directoryGroupIdSchema = exports2.DIRECTORY_TOKEN_HEADER = void 0;
+    exports2.cacheManifestSchema = exports2.CACHE_MAX_TTL_SECONDS = exports2.preflightManagedFunction = exports2.parseDeployedPolicy = void 0;
     exports2.readCacheConfiguration = readCacheConfiguration;
     var directory_config_1 = require_directory_config();
     Object.defineProperty(exports2, "DIRECTORY_TOKEN_HEADER", { enumerable: true, get: function() {
@@ -28851,6 +31440,18 @@ var require_config2 = __commonJS({
     Object.defineProperty(exports2, "readDirectoryGroups", { enumerable: true, get: function() {
       return directory_config_1.readDirectoryGroups;
     } });
+    var directory_manifest_1 = require_directory_manifest();
+    Object.defineProperty(exports2, "functionDirectoryManifestSchema", { enumerable: true, get: function() {
+      return directory_manifest_1.functionDirectoryManifestSchema;
+    } });
+    var lattice_capability_12 = require_lattice_capability();
+    Object.defineProperty(exports2, "functionLatticeContextCapabilitySchema", { enumerable: true, get: function() {
+      return lattice_capability_12.functionLatticeContextCapabilitySchema;
+    } });
+    Object.defineProperty(exports2, "readFunctionLatticeContextCapability", { enumerable: true, get: function() {
+      return lattice_capability_12.readFunctionLatticeContextCapability;
+    } });
+    __exportStar2(require_invocation_contract(), exports2);
     var processes_contract_1 = require_processes_contract();
     Object.defineProperty(exports2, "FUNCTION_PROCESS_TOKEN_HEADER", { enumerable: true, get: function() {
       return processes_contract_1.FUNCTION_PROCESS_TOKEN_HEADER;
@@ -28870,10 +31471,84 @@ var require_config2 = __commonJS({
     Object.defineProperty(exports2, "functionProcessRunSummarySchema", { enumerable: true, get: function() {
       return processes_contract_1.functionProcessRunSummarySchema;
     } });
+    Object.defineProperty(exports2, "functionProcessCompletedAgentReferenceSchema", { enumerable: true, get: function() {
+      return processes_contract_1.functionProcessCompletedAgentReferenceSchema;
+    } });
+    Object.defineProperty(exports2, "functionProcessCompletedAgentReferenceQuerySchema", { enumerable: true, get: function() {
+      return processes_contract_1.functionProcessCompletedAgentReferenceQuerySchema;
+    } });
+    var agents_contract_1 = require_agents_contract();
+    Object.defineProperty(exports2, "FUNCTION_AGENT_TOKEN_HEADER", { enumerable: true, get: function() {
+      return agents_contract_1.FUNCTION_AGENT_TOKEN_HEADER;
+    } });
+    Object.defineProperty(exports2, "FUNCTION_AGENT_READ_PATH", { enumerable: true, get: function() {
+      return agents_contract_1.FUNCTION_AGENT_READ_PATH;
+    } });
+    Object.defineProperty(exports2, "functionAgentReadScopesSchema", { enumerable: true, get: function() {
+      return agents_contract_1.functionAgentReadScopesSchema;
+    } });
+    Object.defineProperty(exports2, "readFunctionAgentScopes", { enumerable: true, get: function() {
+      return agents_contract_1.readFunctionAgentScopes;
+    } });
+    Object.defineProperty(exports2, "functionAgentReadRequestSchema", { enumerable: true, get: function() {
+      return agents_contract_1.functionAgentReadRequestSchema;
+    } });
+    Object.defineProperty(exports2, "functionAgentCompletedRunQuerySchema", { enumerable: true, get: function() {
+      return agents_contract_1.functionAgentCompletedRunQuerySchema;
+    } });
+    Object.defineProperty(exports2, "functionAgentCompletedRunSchema", { enumerable: true, get: function() {
+      return agents_contract_1.functionAgentCompletedRunSchema;
+    } });
+    __exportStar2(require_agent_source_evidence_contract(), exports2);
+    __exportStar2(require_workflow_source_contract(), exports2);
+    var workflow_scopes_contract_1 = require_workflow_scopes_contract();
+    Object.defineProperty(exports2, "functionWorkflowScopesSchema", { enumerable: true, get: function() {
+      return workflow_scopes_contract_1.functionWorkflowScopesSchema;
+    } });
+    Object.defineProperty(exports2, "readFunctionWorkflowScopes", { enumerable: true, get: function() {
+      return workflow_scopes_contract_1.readFunctionWorkflowScopes;
+    } });
+    Object.defineProperty(exports2, "readFunctionWorkflowEvidenceScopes", { enumerable: true, get: function() {
+      return workflow_scopes_contract_1.readFunctionWorkflowEvidenceScopes;
+    } });
+    __exportStar2(require_monitoring_events(), exports2);
+    __exportStar2(require_monitoring_contract(), exports2);
+    __exportStar2(require_monitoring_annotations(), exports2);
+    var orm_contract_1 = require_orm_contract();
+    Object.defineProperty(exports2, "FUNCTION_CALLER_DATA_TOKEN_HEADER", { enumerable: true, get: function() {
+      return orm_contract_1.FUNCTION_CALLER_DATA_TOKEN_HEADER;
+    } });
+    var directory_contract_1 = require_directory_contract();
+    Object.defineProperty(exports2, "FUNCTION_DIRECTORY_TOKEN_HEADER", { enumerable: true, get: function() {
+      return directory_contract_1.FUNCTION_DIRECTORY_TOKEN_HEADER;
+    } });
+    Object.defineProperty(exports2, "FUNCTION_DIRECTORY_RESOLVE_PATH", { enumerable: true, get: function() {
+      return directory_contract_1.FUNCTION_DIRECTORY_RESOLVE_PATH;
+    } });
+    Object.defineProperty(exports2, "functionDirectoryScopesSchema", { enumerable: true, get: function() {
+      return directory_contract_1.functionDirectoryScopesSchema;
+    } });
+    Object.defineProperty(exports2, "readFunctionDirectoryScopes", { enumerable: true, get: function() {
+      return directory_contract_1.readFunctionDirectoryScopes;
+    } });
+    Object.defineProperty(exports2, "directoryPrincipalResolveRequestSchema", { enumerable: true, get: function() {
+      return directory_contract_1.directoryPrincipalResolveRequestSchema;
+    } });
+    Object.defineProperty(exports2, "directoryPrincipalResolutionSchema", { enumerable: true, get: function() {
+      return directory_contract_1.directoryPrincipalResolutionSchema;
+    } });
+    __exportStar2(require_abrigo_contract(), exports2);
     var http_tracing_1 = require_http_tracing();
     Object.defineProperty(exports2, "shouldReportAtlasHttp", { enumerable: true, get: function() {
       return http_tracing_1.shouldReportAtlasHttp;
     } });
+    var immutable_release_contract_1 = require_immutable_release_contract();
+    Object.defineProperty(exports2, "functionImmutableReleaseSchema", { enumerable: true, get: function() {
+      return immutable_release_contract_1.functionImmutableReleaseSchema;
+    } });
+    Object.defineProperty(exports2, "readFunctionImmutableRelease", { enumerable: true, get: function() {
+      return immutable_release_contract_1.readFunctionImmutableRelease;
+    } });
     var zod_12 = require_zod();
     var limits_1 = require_limits();
     var limits_2 = require_limits();
@@ -28908,6 +31583,9 @@ var require_config2 = __commonJS({
     Object.defineProperty(exports2, "sdkVersionFromPackageJson", { enumerable: true, get: function() {
       return capabilities_1.sdkVersionFromPackageJson;
     } });
+    Object.defineProperty(exports2, "sdkSpecFromPackageJson", { enumerable: true, get: function() {
+      return capabilities_1.sdkSpecFromPackageJson;
+    } });
     Object.defineProperty(exports2, "sdkVersionLowerBound", { enumerable: true, get: function() {
       return capabilities_1.sdkVersionLowerBound;
     } });
@@ -30542,7 +33220,7 @@ var require_src4 = __commonJS({
 var require_helpers = __commonJS({
   "../../../node_modules/.pnpm/agent-base@7.1.4/node_modules/agent-base/dist/helpers.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -30564,7 +33242,7 @@ var require_helpers = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -30612,7 +33290,7 @@ var require_helpers = __commonJS({
 var require_dist2 = __commonJS({
   "../../../node_modules/.pnpm/agent-base@7.1.4/node_modules/agent-base/dist/index.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -30634,20 +33312,20 @@ var require_dist2 = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
     };
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.Agent = void 0;
     var net = __importStar(require("net"));
     var http3 = __importStar(require("http"));
     var https_1 = require("https");
-    __exportStar(require_helpers(), exports2);
+    __exportStar2(require_helpers(), exports2);
     var INTERNAL = Symbol("AgentBaseInternalState");
     var Agent = class extends http3.Agent {
       constructor(opts) {
@@ -30864,7 +33542,7 @@ var require_parse_proxy_response = __commonJS({
 var require_dist3 = __commonJS({
   "../../../node_modules/.pnpm/https-proxy-agent@7.0.6/node_modules/https-proxy-agent/dist/index.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -30886,7 +33564,7 @@ var require_dist3 = __commonJS({
       if (mod && mod.__esModule) return mod;
       var result = {};
       if (mod != null) {
-        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+        for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding2(result, mod, k);
       }
       __setModuleDefault(result, mod);
       return result;
@@ -37975,7 +40653,7 @@ Content-Type: ${partContentType}\r
 var require_src5 = __commonJS({
   "../../../node_modules/.pnpm/gaxios@7.1.4/node_modules/gaxios/build/cjs/src/index.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -37988,8 +40666,8 @@ var require_src5 = __commonJS({
       if (k2 === void 0) k2 = k;
       o[k2] = m2[k];
     }));
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.instance = exports2.Gaxios = exports2.GaxiosError = void 0;
@@ -38002,7 +40680,7 @@ var require_src5 = __commonJS({
     Object.defineProperty(exports2, "GaxiosError", { enumerable: true, get: function() {
       return common_js_1.GaxiosError;
     } });
-    __exportStar(require_interceptor(), exports2);
+    __exportStar2(require_interceptor(), exports2);
     exports2.instance = new gaxios_js_1.Gaxios();
     async function request(opts) {
       return exports2.instance.request(opts);
@@ -39890,7 +42568,7 @@ var require_colours = __commonJS({
 var require_logging_utils = __commonJS({
   "../../../node_modules/.pnpm/google-logging-utils@1.1.3/node_modules/google-logging-utils/build/src/logging-utils.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -39921,7 +42599,7 @@ var require_logging_utils = __commonJS({
         if (mod && mod.__esModule) return mod;
         var result = {};
         if (mod != null) {
-          for (var k = ownKeys(mod), i2 = 0; i2 < k.length; i2++) if (k[i2] !== "default") __createBinding(result, mod, k[i2]);
+          for (var k = ownKeys(mod), i2 = 0; i2 < k.length; i2++) if (k[i2] !== "default") __createBinding2(result, mod, k[i2]);
         }
         __setModuleDefault(result, mod);
         return result;
@@ -40179,7 +42857,7 @@ var require_logging_utils = __commonJS({
 var require_src6 = __commonJS({
   "../../../node_modules/.pnpm/google-logging-utils@1.1.3/node_modules/google-logging-utils/build/src/index.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -40192,11 +42870,11 @@ var require_src6 = __commonJS({
       if (k2 === void 0) k2 = k;
       o[k2] = m2[k];
     }));
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
-    __exportStar(require_logging_utils(), exports2);
+    __exportStar2(require_logging_utils(), exports2);
   }
 });
 
@@ -40204,7 +42882,7 @@ var require_src6 = __commonJS({
 var require_src7 = __commonJS({
   "../../../node_modules/.pnpm/gcp-metadata@8.1.2/node_modules/gcp-metadata/build/src/index.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -40235,14 +42913,14 @@ var require_src7 = __commonJS({
         if (mod && mod.__esModule) return mod;
         var result = {};
         if (mod != null) {
-          for (var k = ownKeys(mod), i2 = 0; i2 < k.length; i2++) if (k[i2] !== "default") __createBinding(result, mod, k[i2]);
+          for (var k = ownKeys(mod), i2 = 0; i2 < k.length; i2++) if (k[i2] !== "default") __createBinding2(result, mod, k[i2]);
         }
         __setModuleDefault(result, mod);
         return result;
       };
     })();
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.gcpResidencyCache = exports2.METADATA_SERVER_DETECTION = exports2.HEADERS = exports2.HEADER_VALUE = exports2.HEADER_NAME = exports2.SECONDARY_HOST_ADDRESS = exports2.HOST_ADDRESS = exports2.BASE_PATH = void 0;
@@ -40452,7 +43130,7 @@ var require_src7 = __commonJS({
     function requestTimeout() {
       return getGCPResidency() ? 0 : 3e3;
     }
-    __exportStar(require_gcp_residency(), exports2);
+    __exportStar2(require_gcp_residency(), exports2);
   }
 });
 
@@ -40741,7 +43419,7 @@ var require_crypto2 = __commonJS({
 var require_crypto3 = __commonJS({
   "../../../node_modules/.pnpm/google-auth-library@10.6.2/node_modules/google-auth-library/build/src/crypto/crypto.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -40754,15 +43432,15 @@ var require_crypto3 = __commonJS({
       if (k2 === void 0) k2 = k;
       o[k2] = m2[k];
     }));
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.createCrypto = createCrypto;
     exports2.hasBrowserCrypto = hasBrowserCrypto;
     var crypto_1 = require_crypto();
     var crypto_2 = require_crypto2();
-    __exportStar(require_shared(), exports2);
+    __exportStar2(require_shared(), exports2);
     function createCrypto() {
       if (hasBrowserCrypto()) {
         return new crypto_1.BrowserCrypto();
@@ -47259,7 +49937,7 @@ var require_passthrough = __commonJS({
 var require_src8 = __commonJS({
   "../../../node_modules/.pnpm/google-auth-library@10.6.2/node_modules/google-auth-library/build/src/index.js"(exports2) {
     "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? (function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
       var desc = Object.getOwnPropertyDescriptor(m2, k);
       if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -47272,8 +49950,8 @@ var require_src8 = __commonJS({
       if (k2 === void 0) k2 = k;
       o[k2] = m2[k];
     }));
-    var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m2, p);
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m2, exports3) {
+      for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m2, p);
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.GoogleAuth = exports2.auth = exports2.PassThroughClient = exports2.ExternalAccountAuthorizedUserClient = exports2.EXTERNAL_ACCOUNT_AUTHORIZED_USER_TYPE = exports2.ExecutableError = exports2.PluggableAuthClient = exports2.DownscopedClient = exports2.BaseExternalAccountClient = exports2.ExternalAccountClient = exports2.IdentityPoolClient = exports2.AwsRequestSigner = exports2.AwsClient = exports2.UserRefreshClient = exports2.LoginTicket = exports2.ClientAuthentication = exports2.OAuth2Client = exports2.CodeChallengeMethod = exports2.Impersonated = exports2.JWT = exports2.JWTAccess = exports2.IdTokenClient = exports2.IAMAuth = exports2.GCPEnv = exports2.Compute = exports2.DEFAULT_UNIVERSE = exports2.AuthClient = exports2.gaxios = exports2.gcpMetadata = void 0;
@@ -47378,7 +50056,7 @@ var require_src8 = __commonJS({
     Object.defineProperty(exports2, "PassThroughClient", { enumerable: true, get: function() {
       return passthrough_1.PassThroughClient;
     } });
-    __exportStar(require_googleToken(), exports2);
+    __exportStar2(require_googleToken(), exports2);
     var auth = new googleauth_1.GoogleAuth();
     exports2.auth = auth;
   }
@@ -57181,9 +59859,99 @@ var require_valkey = __commonJS({
   }
 });
 
+// dist/service-directory.js
+var require_service_directory = __commonJS({
+  "dist/service-directory.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.createFunctionServiceDirectoryClient = createFunctionServiceDirectoryClient;
+    var zod_12 = require_zod();
+    var directory_contract_1 = require_directory_contract();
+    function credential({ request }) {
+      const headers = request.headers;
+      const matches = typeof headers.get === "function" ? [headers.get(directory_contract_1.FUNCTION_DIRECTORY_TOKEN_HEADER)] : Object.entries(headers).filter(([key]) => key.toLowerCase() === directory_contract_1.FUNCTION_DIRECTORY_TOKEN_HEADER).map(([, value2]) => value2);
+      const token = matches[0];
+      const refused = () => new directory_contract_1.DirectoryPrincipalResolveError(401, "invalid_context", "This invocation has no valid directory credential");
+      if (matches.length !== 1 || typeof token !== "string" || token.length > 16384)
+        throw refused();
+      const envelope = /^([A-Za-z0-9_-]+)\.([A-Za-z0-9_-]{43})$/.exec(token);
+      if (!envelope?.[1])
+        throw refused();
+      let value;
+      try {
+        value = JSON.parse(Buffer.from(envelope[1], "base64url").toString("utf8"));
+      } catch {
+        throw refused();
+      }
+      const parsed = zod_12.z.object({ audience: zod_12.z.literal("atlas-managed-function-directory-resolve"), sub: zod_12.z.string().startsWith("service-account|"), functionId: zod_12.z.string().min(1), invocationId: zod_12.z.string().min(1), exp: zod_12.z.number() }).safeParse(value);
+      if (!parsed.success)
+        throw refused();
+      return { token, expiresAt: parsed.data.exp };
+    }
+    function origin(baseUrl) {
+      const refused = () => new directory_contract_1.DirectoryPrincipalResolveError(400, "invalid_configuration", "Configure a trusted HTTPS Atlas origin without credentials, path, query or fragment");
+      let url;
+      try {
+        url = new URL(baseUrl);
+      } catch {
+        throw refused();
+      }
+      const loopback = url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+      if (!loopback && url.protocol !== "https:" || url.username || url.password || url.pathname !== "/" || url.search || url.hash)
+        throw refused();
+      return url.origin;
+    }
+    function completeResolution({ result, query }) {
+      const expected = new Set(query.lookups.map((lookup) => `${lookup.type}:${lookup.value}`));
+      const received = [...result.resolved.map((value) => value.lookup), ...result.unresolved];
+      const actual = new Set(received.map((lookup) => `${lookup.type}:${lookup.value}`));
+      return received.length === expected.size && actual.size === expected.size && [...actual].every((key) => expected.has(key)) && result.resolved.every((value) => value.lookup.type !== "email" || value.email === value.lookup.value);
+    }
+    function createFunctionServiceDirectoryClient({ request, baseUrl, fetchImpl = globalThis.fetch }) {
+      const url = `${origin(baseUrl)}${directory_contract_1.FUNCTION_DIRECTORY_RESOLVE_PATH}`;
+      const { token, expiresAt } = credential({ request });
+      return {
+        async resolve(input) {
+          if (expiresAt <= Date.now() / 1e3)
+            throw new directory_contract_1.DirectoryPrincipalResolveError(401, "expired_context", "The directory credential expired; start a new invocation");
+          const query = directory_contract_1.directoryPrincipalResolveRequestSchema.safeParse(input);
+          if (!query.success)
+            throw new directory_contract_1.DirectoryPrincipalResolveError(400, "invalid_request", "Invalid exact directory resolution request");
+          const response = await fetchImpl(url, { method: "POST", headers: { "content-type": "application/json", [directory_contract_1.FUNCTION_DIRECTORY_TOKEN_HEADER]: token }, body: JSON.stringify(query.data), redirect: "error", signal: AbortSignal.timeout(3e4) });
+          const body = await response.json().catch(() => null);
+          if (!response.ok) {
+            const error = zod_12.z.object({ code: zod_12.z.string().max(128).optional(), detail: zod_12.z.string().max(2e3).optional() }).safeParse(body);
+            throw new directory_contract_1.DirectoryPrincipalResolveError(response.status, error.success ? error.data.code ?? "directory_resolve_failed" : "directory_resolve_failed", error.success ? error.data.detail ?? "Directory resolution failed" : "Directory resolution failed");
+          }
+          const result = directory_contract_1.directoryPrincipalResolutionSchema.safeParse(body);
+          if (!result.success || !completeResolution({ result: result.data, query: query.data }))
+            throw new directory_contract_1.DirectoryPrincipalResolveError(502, "malformed_response", "Atlas returned an invalid directory resolution");
+          return result.data;
+        }
+      };
+    }
+  }
+});
+
 // dist/index.js
+var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m2, k, k2) {
+  if (k2 === void 0) k2 = k;
+  var desc = Object.getOwnPropertyDescriptor(m2, k);
+  if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+    desc = { enumerable: true, get: function() {
+      return m2[k];
+    } };
+  }
+  Object.defineProperty(o, k2, desc);
+}) : (function(o, m2, k, k2) {
+  if (k2 === void 0) k2 = k;
+  o[k2] = m2[k];
+}));
+var __exportStar = exports && exports.__exportStar || function(m2, exports2) {
+  for (var p in m2) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports2, p)) __createBinding(exports2, m2, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.readCacheConfiguration = exports.cacheManifestSchema = exports.createCacheManager = exports.CacheError = exports.createFunctionStorageClient = exports.runWithFunctionTracing = exports.installFunctionTracing = exports.FunctionProcessReadError = exports.createFunctionServiceProcessesClient = exports.FunctionDirectoryReadError = exports.createFunctionDirectoryClient = void 0;
+exports.createFunctionServiceDirectoryClient = exports.readCacheConfiguration = exports.cacheManifestSchema = exports.createCacheManager = exports.CacheError = exports.createFunctionStorageClient = exports.runWithFunctionTracing = exports.installFunctionTracing = exports.functionMonitoringAnnotationSchema = exports.monitoringPublishSchema = exports.monitoringEventsSchema = exports.monitoringPayloadHash = exports.FunctionMonitoringError = exports.createFunctionServiceMonitoringClient = exports.functionSourceJobAdmissionSchema = exports.functionAgentSourceExecutionSchema = exports.functionAgentConversationEvidenceRequestSchema = exports.functionAgentConversationEvidenceCaptureSchema = exports.functionAgentConversationEvidenceResponseSchema = exports.functionAgentSourceEvidenceCaptureSchema = exports.functionAgentSourceEvidenceRequestSchema = exports.functionAgentSourceResponseSchema = exports.createFunctionWorkflowEvidenceClient = exports.createFunctionServiceWorkflowsClient = exports.createFunctionAgentEvidenceClient = exports.FunctionAgentReadError = exports.createFunctionServiceAgentsClient = exports.FunctionProcessReadError = exports.createFunctionServiceProcessesClient = exports.functionLatticeHumanCompletionsPageSchema = exports.functionLatticeHumanCompletionsQuerySchema = exports.functionLatticeHumanCompletionSchema = exports.functionLatticeHumanCompletionQuerySchema = exports.functionLatticeExecutionContextSchema = exports.functionLatticeContextRequestSchema = exports.FunctionLatticeContextError = exports.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER = exports.FUNCTION_LATTICE_CONTEXT_PATH = exports.createFunctionInvocationClient = exports.functionLatticeStartProvenanceSchema = exports.functionLatticeParallelSnapshotQuerySchema = exports.functionLatticeParallelSnapshotSchema = exports.createFunctionLatticeClient = exports.readFunctionLatticeContextCapability = exports.functionLatticeContextCapabilitySchema = exports.FunctionDirectoryReadError = exports.createFunctionDirectoryClient = void 0;
 exports.createManagedFunctionContext = createManagedFunctionContext;
 var directory_1 = require_directory();
 Object.defineProperty(exports, "createFunctionDirectoryClient", { enumerable: true, get: function() {
@@ -57192,6 +59960,63 @@ Object.defineProperty(exports, "createFunctionDirectoryClient", { enumerable: tr
 Object.defineProperty(exports, "FunctionDirectoryReadError", { enumerable: true, get: function() {
   return directory_1.FunctionDirectoryReadError;
 } });
+var lattice_capability_1 = require_lattice_capability();
+Object.defineProperty(exports, "functionLatticeContextCapabilitySchema", { enumerable: true, get: function() {
+  return lattice_capability_1.functionLatticeContextCapabilitySchema;
+} });
+Object.defineProperty(exports, "readFunctionLatticeContextCapability", { enumerable: true, get: function() {
+  return lattice_capability_1.readFunctionLatticeContextCapability;
+} });
+var lattice_provenance_1 = require_lattice_provenance();
+Object.defineProperty(exports, "createFunctionLatticeClient", { enumerable: true, get: function() {
+  return lattice_provenance_1.createFunctionLatticeClient;
+} });
+var lattice_provenance_contract_1 = require_lattice_provenance_contract();
+Object.defineProperty(exports, "functionLatticeParallelSnapshotSchema", { enumerable: true, get: function() {
+  return lattice_provenance_contract_1.functionLatticeParallelSnapshotSchema;
+} });
+Object.defineProperty(exports, "functionLatticeParallelSnapshotQuerySchema", { enumerable: true, get: function() {
+  return lattice_provenance_contract_1.functionLatticeParallelSnapshotQuerySchema;
+} });
+var lattice_provenance_contract_2 = require_lattice_provenance_contract();
+Object.defineProperty(exports, "functionLatticeStartProvenanceSchema", { enumerable: true, get: function() {
+  return lattice_provenance_contract_2.functionLatticeStartProvenanceSchema;
+} });
+__exportStar(require_invocation_contract(), exports);
+__exportStar(require_abrigo(), exports);
+var invocation_1 = require_invocation();
+Object.defineProperty(exports, "createFunctionInvocationClient", { enumerable: true, get: function() {
+  return invocation_1.createFunctionInvocationClient;
+} });
+var lattice_provenance_contract_3 = require_lattice_provenance_contract();
+Object.defineProperty(exports, "FUNCTION_LATTICE_CONTEXT_PATH", { enumerable: true, get: function() {
+  return lattice_provenance_contract_3.FUNCTION_LATTICE_CONTEXT_PATH;
+} });
+Object.defineProperty(exports, "FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER", { enumerable: true, get: function() {
+  return lattice_provenance_contract_3.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER;
+} });
+Object.defineProperty(exports, "FunctionLatticeContextError", { enumerable: true, get: function() {
+  return lattice_provenance_contract_3.FunctionLatticeContextError;
+} });
+Object.defineProperty(exports, "functionLatticeContextRequestSchema", { enumerable: true, get: function() {
+  return lattice_provenance_contract_3.functionLatticeContextRequestSchema;
+} });
+Object.defineProperty(exports, "functionLatticeExecutionContextSchema", { enumerable: true, get: function() {
+  return lattice_provenance_contract_3.functionLatticeExecutionContextSchema;
+} });
+Object.defineProperty(exports, "functionLatticeHumanCompletionQuerySchema", { enumerable: true, get: function() {
+  return lattice_provenance_contract_3.functionLatticeHumanCompletionQuerySchema;
+} });
+Object.defineProperty(exports, "functionLatticeHumanCompletionSchema", { enumerable: true, get: function() {
+  return lattice_provenance_contract_3.functionLatticeHumanCompletionSchema;
+} });
+var lattice_provenance_contract_4 = require_lattice_provenance_contract();
+Object.defineProperty(exports, "functionLatticeHumanCompletionsQuerySchema", { enumerable: true, get: function() {
+  return lattice_provenance_contract_4.functionLatticeHumanCompletionsQuerySchema;
+} });
+Object.defineProperty(exports, "functionLatticeHumanCompletionsPageSchema", { enumerable: true, get: function() {
+  return lattice_provenance_contract_4.functionLatticeHumanCompletionsPageSchema;
+} });
 var processes_1 = require_processes();
 Object.defineProperty(exports, "createFunctionServiceProcessesClient", { enumerable: true, get: function() {
   return processes_1.createFunctionServiceProcessesClient;
@@ -57199,6 +60024,73 @@ Object.defineProperty(exports, "createFunctionServiceProcessesClient", { enumera
 Object.defineProperty(exports, "FunctionProcessReadError", { enumerable: true, get: function() {
   return processes_1.FunctionProcessReadError;
 } });
+var agents_1 = require_agents();
+Object.defineProperty(exports, "createFunctionServiceAgentsClient", { enumerable: true, get: function() {
+  return agents_1.createFunctionServiceAgentsClient;
+} });
+Object.defineProperty(exports, "FunctionAgentReadError", { enumerable: true, get: function() {
+  return agents_1.FunctionAgentReadError;
+} });
+var agent_evidence_1 = require_agent_evidence();
+Object.defineProperty(exports, "createFunctionAgentEvidenceClient", { enumerable: true, get: function() {
+  return agent_evidence_1.createFunctionAgentEvidenceClient;
+} });
+var workflow_source_1 = require_workflow_source();
+Object.defineProperty(exports, "createFunctionServiceWorkflowsClient", { enumerable: true, get: function() {
+  return workflow_source_1.createFunctionServiceWorkflowsClient;
+} });
+Object.defineProperty(exports, "createFunctionWorkflowEvidenceClient", { enumerable: true, get: function() {
+  return workflow_source_1.createFunctionWorkflowEvidenceClient;
+} });
+__exportStar(require_workflow_source_contract(), exports);
+var agent_source_evidence_contract_1 = require_agent_source_evidence_contract();
+Object.defineProperty(exports, "functionAgentSourceResponseSchema", { enumerable: true, get: function() {
+  return agent_source_evidence_contract_1.functionAgentSourceResponseSchema;
+} });
+Object.defineProperty(exports, "functionAgentSourceEvidenceRequestSchema", { enumerable: true, get: function() {
+  return agent_source_evidence_contract_1.functionAgentSourceEvidenceRequestSchema;
+} });
+Object.defineProperty(exports, "functionAgentSourceEvidenceCaptureSchema", { enumerable: true, get: function() {
+  return agent_source_evidence_contract_1.functionAgentSourceEvidenceCaptureSchema;
+} });
+Object.defineProperty(exports, "functionAgentConversationEvidenceResponseSchema", { enumerable: true, get: function() {
+  return agent_source_evidence_contract_1.functionAgentConversationEvidenceResponseSchema;
+} });
+Object.defineProperty(exports, "functionAgentConversationEvidenceCaptureSchema", { enumerable: true, get: function() {
+  return agent_source_evidence_contract_1.functionAgentConversationEvidenceCaptureSchema;
+} });
+Object.defineProperty(exports, "functionAgentConversationEvidenceRequestSchema", { enumerable: true, get: function() {
+  return agent_source_evidence_contract_1.functionAgentConversationEvidenceRequestSchema;
+} });
+Object.defineProperty(exports, "functionAgentSourceExecutionSchema", { enumerable: true, get: function() {
+  return agent_source_evidence_contract_1.functionAgentSourceExecutionSchema;
+} });
+var agent_source_evidence_contract_2 = require_agent_source_evidence_contract();
+Object.defineProperty(exports, "functionSourceJobAdmissionSchema", { enumerable: true, get: function() {
+  return agent_source_evidence_contract_2.functionSourceJobAdmissionSchema;
+} });
+var monitoring_1 = require_monitoring();
+Object.defineProperty(exports, "createFunctionServiceMonitoringClient", { enumerable: true, get: function() {
+  return monitoring_1.createFunctionServiceMonitoringClient;
+} });
+var monitoring_contract_1 = require_monitoring_contract();
+Object.defineProperty(exports, "FunctionMonitoringError", { enumerable: true, get: function() {
+  return monitoring_contract_1.FunctionMonitoringError;
+} });
+Object.defineProperty(exports, "monitoringPayloadHash", { enumerable: true, get: function() {
+  return monitoring_contract_1.monitoringPayloadHash;
+} });
+var monitoring_contract_2 = require_monitoring_contract();
+Object.defineProperty(exports, "monitoringEventsSchema", { enumerable: true, get: function() {
+  return monitoring_contract_2.monitoringEventsSchema;
+} });
+Object.defineProperty(exports, "monitoringPublishSchema", { enumerable: true, get: function() {
+  return monitoring_contract_2.monitoringPublishSchema;
+} });
+var monitoring_annotations_1 = require_monitoring_annotations();
+Object.defineProperty(exports, "functionMonitoringAnnotationSchema", { enumerable: true, get: function() {
+  return monitoring_annotations_1.functionMonitoringAnnotationSchema;
+} });
 var tracing_1 = require_tracing();
 Object.defineProperty(exports, "installFunctionTracing", { enumerable: true, get: function() {
   return tracing_1.installFunctionTracing;
@@ -57261,6 +60153,11 @@ function lazyValkeyStore(connection, local) {
     delete: async (key) => (await client()).delete(key)
   };
 }
+__exportStar(require_directory_contract(), exports);
+var service_directory_1 = require_service_directory();
+Object.defineProperty(exports, "createFunctionServiceDirectoryClient", { enumerable: true, get: function() {
+  return service_directory_1.createFunctionServiceDirectoryClient;
+} });
 /*! Bundled license information:
 
 web-streams-polyfill/dist/ponyfill.es2018.js: