@sequenceholdings/managed-functions 0.4.2 → 0.4.4

package/README.md

@@ -324,6 +324,20 @@ const page = await processes.listRunsPage({
 })
 ```
 
+The SDK 0.4.4 / CLI 0.6.6 release candidates (awaiting publication) add
+`processes.getCompletedNode({ process, runId, nodeId })`. It returns only
+`{ runId, processId, processVersion, nodeId, stepId, completedAt }` after both
+the run and its latest top-level step have committed successfully. The exact
+node must have no outgoing edges in the run's immutable pinned bundle. The
+existing invocation-bound process scope and current Process/Run Viewer grants
+apply. Historical successful steps in running, cancelled or failed runs,
+parallel child steps, and ambiguous serial positions are refused with
+`409 node_not_completed`; workers can retry without sending their side effect.
+The caller must separately check its expected process version and allowed
+terminal node. No authored metadata, state or output is exposed. This method
+requires the matching server deployment; the older `processes_read` capability
+alone does not advertise support for this new operation.
+
 With SDK 0.4.2 and both exact process and agent read declarations,
 `processes.getCompletedAgentReference({ process, runId, nodeId })` recovers only
 `{ stepId, attempt, agentId, agentRunId, threadId }` for a unique completed
@@ -451,6 +465,21 @@ const invocation = createFunctionInvocationClient({ request, baseUrl: platformOr
 const { receiver, caller } = await invocation.getInvocationContext()
 ```
 
+With `capabilities.invocation: { identity: true, caller_capabilities: true }`,
+`invocation.getCallerCapabilities()` returns `{ receiver, caller, capabilities }`.
+It accepts no subject or host selector. Atlas rechecks the exact live invocation,
+receiver/version and current human caller, resolves that caller's function
+access and custom-role grants, and intersects the result with the receiver's
+current declared capability vocabulary (at most 256 pins). Service/system
+callers are refused; this method cannot borrow a run starter or attached
+service account's grants. Revoked or undeclared grants are absent, and failures
+never supply capability authority. It does not accept unsigned claim headers.
+
+This opt-in requires deployed `invocation_caller_capabilities` support, SDK
+0.4.4 and CLI 0.6.6. Identity-only manifests retain their previous behavior.
+Do not cache this current observation as a lasting grant or expose the
+invocation credential to a browser.
+
 The receiver identifies this function, version, invocation, organization and
 attached service account. The caller is the authenticated human, service
 account or system principal that invoked it; the attached account and a
@@ -506,6 +535,16 @@ or context metadata are never substitutes. Older runs may omit this field or
 return `null`. A start stamp records the original admission decision, rather
 than granting current permissions or identifying a later human action.
 
+`getRunCreatorAccess()` returns current, invocation-bound evidence for the
+retained signed run starter: `{ creator: { sub, tenant, platformOperator } | null,
+observedAt, ...executionIdentity }`. The platform resolves a current active human
+and evaluates its shared operator policy; app-authored metadata and email domains
+cannot establish this authority. Missing provenance, deleted/disabled identities,
+or ambiguous aliases return `creator: null`; directory outages fail the request.
+Operator evaluation retains the shared platform policy, including its FGA cache
+and configured legacy-role fallback; this is not instantaneous role revocation. This is a current observation, not an impersonation credential or a
+replacement for business authorization. It accepts no subject or run selector.
+
 Human reads verify a platform-signed receipt against the actual completed step,
 current receiving invocation, frozen graph and causal subprocess lineage. The
 caller must still check the expected action, task, approval generation and
@@ -583,7 +622,7 @@ capabilities:
 ```
 
 Declarations grant no monitoring authority. The attached account needs the
-producer namespace's runtime floor and pinned `emit_monitoring` capability.
+producer namespace's runtime floor and pinned `emit-monitoring` capability.
 Continuous Improvement must also register that exact namespace and authorize
 publishing or catalog reads. Registrations default to inactive with both
 operations disabled. Only a human with current Monitoring Admin authority can
@@ -627,7 +666,7 @@ accepted. A legitimate zero-event result still receives a hash-bound receipt.
 Both publishing and lookup require producer authorization.
 
 `getBucketCatalog({ producer })` reads only the complete active taxonomy
-metadata under the separate namespace `read_monitoring_catalog` capability.
+metadata under the separate namespace `read-monitoring-catalog` capability.
 Freeze that catalog with the analysis inputs. More than 2000 buckets or 512 KiB
 returns an explicit size error; the client never treats a partial catalog as complete.
 
@@ -770,3 +809,48 @@ Successful reads of a Lattice process or run link to the owning process; direct
 HTTP run starts already use server-recorded spans and preserve the request chain.
 Transport classification is shared with the platform host; function authors
 do not need to import or configure instrumentation.
+
+## Scoped service group rosters
+
+`createFunctionServiceDirectoryClient().listGroupMembers()` reads bounded pages
+of active members of explicitly declared groups. It requires Managed Functions
+SDK 0.4.4, Studio CLI 0.6.6, and a host advertising `directory_rosters`.
+
+```yaml
+service_account: notification-worker
+capabilities:
+  directory:
+    resolve: [banksouth]
+    rosters: ["11111111-1111-4111-8111-111111111111"]
+```
+
+```ts
+const directory = createFunctionServiceDirectoryClient({ request, baseUrl })
+let cursor: string | undefined
+do {
+  const page = await directory.listGroupMembers({
+    tenant: 'banksouth', groupId, limit: 50, cursor,
+  })
+  await consume(page.members)
+  cursor = page.nextCursor ?? undefined
+} while (cursor)
+```
+
+The manifest permits at most 16 concrete group IDs. It does not grant access:
+the attached service account independently needs the tenant directory's Reader
+relation and the group's Member relation (direct membership or the group's Owner
+relation). Organization or application administration is not a fallback. The
+actual attached account is checked on every page; the invoking human/system
+identity never supplies its grants. No user-mode directory API gains service mode.
+
+Atlas intersects the signed invocation's groups with the current function
+manifest, verifies the live function/version/account/invocation, and checks both
+grants again before reading. Deleted groups and inactive, deleted, or foreign
+tenant users are excluded. The caller cannot request inactive identities or
+choose another principal. Results contain only `id`, `sub`, `name`, `email`, and
+`deactivated: false`. Membership is read live, not as a transaction-wide snapshot.
+
+Pagination scans membership positions, so a page may have zero members and a
+non-null `nextCursor`; continue until the cursor is null. Cursors expire after an
+hour and bind the tenant, group, function, immutable version and service account.
+They cannot be moved to another read scope. Access can be revoked between pages.

package/dist/capabilities.d.ts

@@ -13,6 +13,13 @@ export declare const MANAGED_FUNCTION_CAPABILITIES: {
         };
     };
     readonly features: {
+        readonly directory_rosters: {
+            readonly field: "capabilities.directory.rosters";
+            readonly supported: true;
+            readonly limit: "1 to 16 explicit groups; up to 50 active tenant members per page; directory Reader and group membership required";
+            readonly min_cli: "0.6.6";
+            readonly min_sdk: "0.4.4";
+        };
         readonly directory_members: {
             readonly field: "capabilities.directory.groups";
             readonly supported: true;
@@ -34,6 +41,13 @@ export declare const MANAGED_FUNCTION_CAPABILITIES: {
             readonly min_cli: "0.5.5";
             readonly min_sdk: "0.4.2";
         };
+        readonly invocation_caller_capabilities: {
+            readonly field: "capabilities.invocation.caller_capabilities";
+            readonly supported: true;
+            readonly limit: "current human caller capabilities declared by this exact active receiver; at most 256 pins";
+            readonly min_cli: "0.6.6";
+            readonly min_sdk: "0.4.4";
+        };
         readonly invocation_identity: {
             readonly field: "capabilities.invocation.identity";
             readonly supported: true;
@@ -134,6 +148,13 @@ export interface CapabilityTooling {
 export interface ManagedFunctionCapabilities {
     tooling: CapabilityTooling;
     features: {
+        directory_rosters?: {
+            field: string;
+            supported: boolean;
+            limit: string;
+            min_cli: string;
+            min_sdk: string;
+        };
         directory_members?: {
             field: string;
             supported: boolean;
@@ -155,6 +176,13 @@ export interface ManagedFunctionCapabilities {
             min_cli: string;
             min_sdk: string;
         };
+        invocation_caller_capabilities?: {
+            field: string;
+            supported: boolean;
+            limit: string;
+            min_cli: string;
+            min_sdk: string;
+        };
         invocation_identity?: {
             field: string;
             supported: boolean;

package/dist/capabilities.js

@@ -16,6 +16,7 @@ exports.MANAGED_FUNCTION_CAPABILITIES = {
         sdk: { package: exports.MANAGED_FUNCTION_SDK_PACKAGE, min: '0.3.0' },
     },
     features: {
+        directory_rosters: { field: 'capabilities.directory.rosters', supported: true, limit: '1 to 16 explicit groups; up to 50 active tenant members per page; directory Reader and group membership required', min_cli: '0.6.6', min_sdk: '0.4.4' },
         directory_members: {
             field: 'capabilities.directory.groups', supported: true,
             limit: '1 to 16 concrete groups; resolve 1 to 50 selected active members per call',
@@ -31,6 +32,11 @@ exports.MANAGED_FUNCTION_CAPABILITIES = {
             limit: 'a fresh function identity whose runtime cannot be redeployed after first activation',
             min_cli: '0.5.5', min_sdk: '0.4.2',
         },
+        invocation_caller_capabilities: {
+            field: 'capabilities.invocation.caller_capabilities', supported: true,
+            limit: 'current human caller capabilities declared by this exact active receiver; at most 256 pins',
+            min_cli: '0.6.6', min_sdk: '0.4.4',
+        },
         invocation_identity: {
             field: 'capabilities.invocation.identity', supported: true,
             limit: 'verified receiver and actual caller for this exact active invocation only',

package/dist/config.d.ts

@@ -2,7 +2,7 @@ export { DIRECTORY_TOKEN_HEADER, directoryGroupIdSchema, directoryScopesSchema,
 export { functionDirectoryManifestSchema } from './directory-manifest';
 export { functionLatticeContextCapabilitySchema, readFunctionLatticeContextCapability } from './lattice-capability';
 export * from './invocation-contract';
-export { FUNCTION_PROCESS_TOKEN_HEADER, FUNCTION_PROCESS_READ_PATH, functionProcessReadScopesSchema, readFunctionProcessScopes, functionProcessReadRequestSchema, functionProcessRunSummarySchema, functionProcessCompletedAgentReferenceSchema, functionProcessCompletedAgentReferenceQuerySchema } from './processes-contract';
+export { FUNCTION_PROCESS_TOKEN_HEADER, FUNCTION_PROCESS_READ_PATH, functionProcessReadScopesSchema, readFunctionProcessScopes, functionProcessReadRequestSchema, functionProcessRunSummarySchema, functionProcessCompletedAgentReferenceSchema, functionProcessCompletedAgentReferenceQuerySchema, functionProcessCompletedNodeSchema, functionProcessCompletedNodeQuerySchema } from './processes-contract';
 export { FUNCTION_AGENT_TOKEN_HEADER, FUNCTION_AGENT_READ_PATH, functionAgentReadScopesSchema, readFunctionAgentScopes, functionAgentReadRequestSchema, functionAgentCompletedRunQuerySchema, functionAgentCompletedRunSchema } from './agents-contract';
 export * from './agent-source-evidence-contract';
 export * from './workflow-source-contract';
@@ -36,3 +36,4 @@ export declare const cacheManifestSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type CacheConfiguration = z.infer<typeof cacheManifestSchema>;
 export declare function readCacheConfiguration(manifest: unknown): CacheConfiguration;
+export * from './directory-roster-contract';

package/dist/config.js

@@ -14,8 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.versionIsOlder = exports.sdkVersionLowerBound = exports.sdkSpecFromPackageJson = exports.sdkVersionFromPackageJson = exports.isPostgresEgress = exports.formatValidationDetail = exports.MANAGED_FUNCTION_SDK_PACKAGE = exports.MANAGED_FUNCTION_CLI_PACKAGE = exports.MANAGED_FUNCTION_CAPABILITIES = exports.managedFunctionWorkloadLimitsSchema = exports.MF_LIMITS_DEFAULTS = exports.MF_LIMITS_CAPS = exports.MANAGED_FUNCTION_LIMITS = exports.readFunctionImmutableRelease = exports.functionImmutableReleaseSchema = exports.shouldReportAtlasHttp = exports.directoryPrincipalResolutionSchema = exports.directoryPrincipalResolveRequestSchema = exports.readFunctionDirectoryScopes = exports.functionDirectoryScopesSchema = exports.FUNCTION_DIRECTORY_RESOLVE_PATH = exports.FUNCTION_DIRECTORY_TOKEN_HEADER = exports.FUNCTION_CALLER_DATA_TOKEN_HEADER = exports.readFunctionWorkflowEvidenceScopes = exports.readFunctionWorkflowScopes = exports.functionWorkflowScopesSchema = exports.functionAgentCompletedRunSchema = exports.functionAgentCompletedRunQuerySchema = exports.functionAgentReadRequestSchema = exports.readFunctionAgentScopes = exports.functionAgentReadScopesSchema = exports.FUNCTION_AGENT_READ_PATH = exports.FUNCTION_AGENT_TOKEN_HEADER = exports.functionProcessCompletedAgentReferenceQuerySchema = exports.functionProcessCompletedAgentReferenceSchema = exports.functionProcessRunSummarySchema = exports.functionProcessReadRequestSchema = exports.readFunctionProcessScopes = exports.functionProcessReadScopesSchema = exports.FUNCTION_PROCESS_READ_PATH = exports.FUNCTION_PROCESS_TOKEN_HEADER = exports.readFunctionLatticeContextCapability = exports.functionLatticeContextCapabilitySchema = exports.functionDirectoryManifestSchema = exports.readDirectoryGroups = exports.directoryMembersResponse = exports.directoryMembersInput = exports.directoryScopesSchema = exports.directoryGroupIdSchema = exports.DIRECTORY_TOKEN_HEADER = void 0;
-exports.cacheManifestSchema = exports.CACHE_MAX_TTL_SECONDS = exports.preflightManagedFunction = exports.parseDeployedPolicy = void 0;
+exports.sdkSpecFromPackageJson = exports.sdkVersionFromPackageJson = exports.isPostgresEgress = exports.formatValidationDetail = exports.MANAGED_FUNCTION_SDK_PACKAGE = exports.MANAGED_FUNCTION_CLI_PACKAGE = exports.MANAGED_FUNCTION_CAPABILITIES = exports.managedFunctionWorkloadLimitsSchema = exports.MF_LIMITS_DEFAULTS = exports.MF_LIMITS_CAPS = exports.MANAGED_FUNCTION_LIMITS = exports.readFunctionImmutableRelease = exports.functionImmutableReleaseSchema = exports.shouldReportAtlasHttp = exports.directoryPrincipalResolutionSchema = exports.directoryPrincipalResolveRequestSchema = exports.readFunctionDirectoryScopes = exports.functionDirectoryScopesSchema = exports.FUNCTION_DIRECTORY_RESOLVE_PATH = exports.FUNCTION_DIRECTORY_TOKEN_HEADER = exports.FUNCTION_CALLER_DATA_TOKEN_HEADER = exports.readFunctionWorkflowEvidenceScopes = exports.readFunctionWorkflowScopes = exports.functionWorkflowScopesSchema = exports.functionAgentCompletedRunSchema = exports.functionAgentCompletedRunQuerySchema = exports.functionAgentReadRequestSchema = exports.readFunctionAgentScopes = exports.functionAgentReadScopesSchema = exports.FUNCTION_AGENT_READ_PATH = exports.FUNCTION_AGENT_TOKEN_HEADER = exports.functionProcessCompletedNodeQuerySchema = exports.functionProcessCompletedNodeSchema = exports.functionProcessCompletedAgentReferenceQuerySchema = exports.functionProcessCompletedAgentReferenceSchema = exports.functionProcessRunSummarySchema = exports.functionProcessReadRequestSchema = exports.readFunctionProcessScopes = exports.functionProcessReadScopesSchema = exports.FUNCTION_PROCESS_READ_PATH = exports.FUNCTION_PROCESS_TOKEN_HEADER = exports.readFunctionLatticeContextCapability = exports.functionLatticeContextCapabilitySchema = exports.functionDirectoryManifestSchema = exports.readDirectoryGroups = exports.directoryMembersResponse = exports.directoryMembersInput = exports.directoryScopesSchema = exports.directoryGroupIdSchema = exports.DIRECTORY_TOKEN_HEADER = void 0;
+exports.cacheManifestSchema = exports.CACHE_MAX_TTL_SECONDS = exports.preflightManagedFunction = exports.parseDeployedPolicy = exports.versionIsOlder = exports.sdkVersionLowerBound = void 0;
 exports.readCacheConfiguration = readCacheConfiguration;
 var directory_config_1 = require("./directory-config");
 Object.defineProperty(exports, "DIRECTORY_TOKEN_HEADER", { enumerable: true, get: function () { return directory_config_1.DIRECTORY_TOKEN_HEADER; } });
@@ -39,6 +39,8 @@ Object.defineProperty(exports, "functionProcessReadRequestSchema", { enumerable:
 Object.defineProperty(exports, "functionProcessRunSummarySchema", { enumerable: true, get: function () { return processes_contract_1.functionProcessRunSummarySchema; } });
 Object.defineProperty(exports, "functionProcessCompletedAgentReferenceSchema", { enumerable: true, get: function () { return processes_contract_1.functionProcessCompletedAgentReferenceSchema; } });
 Object.defineProperty(exports, "functionProcessCompletedAgentReferenceQuerySchema", { enumerable: true, get: function () { return processes_contract_1.functionProcessCompletedAgentReferenceQuerySchema; } });
+Object.defineProperty(exports, "functionProcessCompletedNodeSchema", { enumerable: true, get: function () { return processes_contract_1.functionProcessCompletedNodeSchema; } });
+Object.defineProperty(exports, "functionProcessCompletedNodeQuerySchema", { enumerable: true, get: function () { return processes_contract_1.functionProcessCompletedNodeQuerySchema; } });
 var agents_contract_1 = require("./agents-contract");
 Object.defineProperty(exports, "FUNCTION_AGENT_TOKEN_HEADER", { enumerable: true, get: function () { return agents_contract_1.FUNCTION_AGENT_TOKEN_HEADER; } });
 Object.defineProperty(exports, "FUNCTION_AGENT_READ_PATH", { enumerable: true, get: function () { return agents_contract_1.FUNCTION_AGENT_READ_PATH; } });
@@ -115,3 +117,4 @@ function readCacheConfiguration(manifest) {
         : undefined;
     return exports.cacheManifestSchema.parse(cache ?? {});
 }
+__exportStar(require("./directory-roster-contract"), exports);

package/dist/deployed-policy.js

@@ -40,8 +40,10 @@ function normalizeCapabilities(value) {
         features: {
             immutable_release: normalizeImmutableRelease(features.immutable_release),
             invocation_identity: normalizeInvocationIdentity(features.invocation_identity),
+            invocation_caller_capabilities: normalizeInvocationIdentity(features.invocation_caller_capabilities, 'capabilities.invocation.caller_capabilities'),
             directory_members: normalizeDirectoryMembers(features.directory_members),
             directory_resolve: normalizeDirectory(features.directory_resolve),
+            directory_rosters: normalizeRosters(features.directory_rosters),
             abrigo_read: normalizeAbrigo(features.abrigo_read),
             lattice_context: normalizeLatticeContext(features.lattice_context),
             postgres_egress: normalizePostgres(features.postgres_egress),
@@ -89,13 +91,13 @@ function normalizeAbrigo(value) {
         return undefined;
     return { field: typeof value.field === 'string' ? value.field : 'capabilities.abrigo.read', supported: value.supported, limit: value.limit, min_cli: value.min_cli, min_sdk: value.min_sdk };
 }
-function normalizeInvocationIdentity(value) {
+function normalizeInvocationIdentity(value, defaultField = 'capabilities.invocation.identity') {
     if (!value || typeof value.supported !== 'boolean' || typeof value.limit !== 'string')
         return undefined;
     if (typeof value.min_cli !== 'string' || typeof value.min_sdk !== 'string')
         return undefined;
     return {
-        field: typeof value.field === 'string' ? value.field : 'capabilities.invocation.identity',
+        field: typeof value.field === 'string' ? value.field : defaultField,
         supported: value.supported, limit: value.limit, min_cli: value.min_cli, min_sdk: value.min_sdk,
     };
 }
@@ -202,3 +204,8 @@ function normalizeTimeout(value) {
         min_sdk: value.min_sdk,
     };
 }
+function normalizeRosters(value) {
+    if (!value || typeof value.supported !== 'boolean' || typeof value.limit !== 'string' || typeof value.min_cli !== 'string' || typeof value.min_sdk !== 'string')
+        return undefined;
+    return { field: typeof value.field === 'string' ? value.field : 'capabilities.directory.rosters', supported: value.supported, limit: value.limit, min_cli: value.min_cli, min_sdk: value.min_sdk };
+}

package/dist/directory-manifest.d.ts

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 export declare const functionDirectoryManifestSchema: z.ZodObject<{
+    rosters: z.ZodOptional<z.ZodArray<z.ZodString>>;
     groups: z.ZodOptional<z.ZodArray<z.ZodString>>;
     resolve: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;

package/dist/directory-manifest.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.functionDirectoryManifestSchema = void 0;
+const directory_roster_contract_1 = require("./directory-roster-contract");
 const zod_1 = require("zod");
 const directory_config_1 = require("./directory-config");
 const directory_contract_1 = require("./directory-contract");
 exports.functionDirectoryManifestSchema = zod_1.z.strictObject({
+    rosters: directory_roster_contract_1.functionDirectoryRostersSchema.optional(),
     groups: directory_config_1.directoryScopesSchema.shape.groups.optional(),
     resolve: directory_contract_1.functionDirectoryScopesSchema.shape.resolve.optional(),
-}).refine((value) => value.groups !== undefined || value.resolve !== undefined, 'Declare directory groups, tenant resolution scopes, or both');
+}).refine((value) => value.groups !== undefined || value.resolve !== undefined, 'Declare directory groups, tenant resolution scopes, or both').refine(value => value.rosters === undefined || value.resolve !== undefined, 'Service rosters also require directory resolve tenant scopes');

package/dist/directory-roster-contract.d.ts

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+export declare const FUNCTION_DIRECTORY_ROSTER_PATH = "/api/managed-functions/directory/roster";
+export declare const functionDirectoryRostersSchema: z.ZodArray<z.ZodString>;
+export declare const directoryRosterQuerySchema: z.ZodObject<{
+    tenant: z.ZodString;
+    groupId: z.ZodString;
+    limit: z.ZodDefault<z.ZodNumber>;
+    cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const directoryRosterPageSchema: z.ZodObject<{
+    members: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        sub: z.ZodString;
+        name: z.ZodString;
+        email: z.ZodString;
+        deactivated: z.ZodLiteral<false>;
+    }, z.core.$strict>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type DirectoryRosterQuery = z.input<typeof directoryRosterQuerySchema>;
+export type DirectoryRosterPage = z.infer<typeof directoryRosterPageSchema>;
+export declare function readFunctionDirectoryRosterGroups(manifest: unknown): string[];

package/dist/directory-roster-contract.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.directoryRosterPageSchema = exports.directoryRosterQuerySchema = exports.functionDirectoryRostersSchema = exports.FUNCTION_DIRECTORY_ROSTER_PATH = void 0;
+exports.readFunctionDirectoryRosterGroups = readFunctionDirectoryRosterGroups;
+const zod_1 = require("zod");
+const directory_config_1 = require("./directory-config");
+const directory_contract_1 = require("./directory-contract");
+exports.FUNCTION_DIRECTORY_ROSTER_PATH = '/api/managed-functions/directory/roster';
+exports.functionDirectoryRostersSchema = zod_1.z.array(directory_config_1.directoryGroupIdSchema).min(1).max(16)
+    .refine(groups => new Set(groups).size === groups.length, 'Roster groups must be distinct');
+exports.directoryRosterQuerySchema = zod_1.z.object({
+    tenant: directory_contract_1.directoryTenantSchema,
+    groupId: directory_config_1.directoryGroupIdSchema,
+    limit: zod_1.z.number().int().min(1).max(50).default(50),
+    cursor: zod_1.z.string().max(2048).optional(),
+}).strict();
+exports.directoryRosterPageSchema = zod_1.z.object({
+    members: zod_1.z.array(zod_1.z.object({ id: zod_1.z.string(), sub: zod_1.z.string(), name: zod_1.z.string(), email: zod_1.z.string(), deactivated: zod_1.z.literal(false) }).strict()).max(50),
+    nextCursor: zod_1.z.string().nullable(),
+}).strict();
+function readFunctionDirectoryRosterGroups(manifest) {
+    const parsed = zod_1.z.object({ capabilities: zod_1.z.object({ directory: zod_1.z.object({ rosters: exports.functionDirectoryRostersSchema.optional() }).optional() }).optional() }).safeParse(manifest);
+    return parsed.success ? parsed.data.capabilities?.directory?.rosters ?? [] : [];
+}

package/dist/index.d.ts

@@ -36,7 +36,7 @@ export type { MonitoringDeltaEvent, MonitoringPublish, MonitoringDeliveryKey, Mo
 export type { MonitoringCatalogQuery, MonitoringBucketCatalog } from './monitoring-contract';
 export type { FunctionMonitoringAnnotation, MonitoringJson } from './monitoring-annotations';
 export type { FunctionServiceMonitoringClient, FunctionServiceMonitoringOptions } from './monitoring';
-export type { FunctionServiceProcessesClient, FunctionServiceProcessesOptions, FunctionProcessRunQuery, FunctionProcessRunSummary, FunctionProcessRunStatus, FunctionProcessRunsPage, FunctionProcessRunsPageQuery, FunctionProcessReadRequest, FunctionProcessCompletedAgentReferenceQuery, FunctionProcessCompletedAgentReference } from './processes';
+export type { FunctionServiceProcessesClient, FunctionServiceProcessesOptions, FunctionProcessRunQuery, FunctionProcessRunSummary, FunctionProcessRunStatus, FunctionProcessRunsPage, FunctionProcessRunsPageQuery, FunctionProcessReadRequest, FunctionProcessCompletedAgentReferenceQuery, FunctionProcessCompletedAgentReference, FunctionProcessCompletedNode, FunctionProcessCompletedNodeQuery } from './processes';
 export { installFunctionTracing, runWithFunctionTracing } from './tracing';
 export { createFunctionStorageClient } from './storage';
 import { type CacheManager } from "./cache";
@@ -52,3 +52,6 @@ export declare function createManagedFunctionContext({ env, }?: {
 }): ManagedFunctionContext;
 export * from './directory-contract';
 export { createFunctionServiceDirectoryClient, type FunctionServiceDirectoryOptions, type FunctionServiceDirectoryClient } from './service-directory';
+export * from './directory-roster-contract';
+export { functionLatticeRunCreatorAccessSchema } from './lattice-provenance-contract';
+export type { FunctionLatticeRunCreatorAccess } from './lattice-provenance-contract';

package/dist/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createFunctionServiceDirectoryClient = exports.readCacheConfiguration = exports.cacheManifestSchema = exports.createCacheManager = exports.CacheError = exports.createFunctionStorageClient = exports.runWithFunctionTracing = exports.installFunctionTracing = exports.functionMonitoringAnnotationSchema = exports.monitoringPublishSchema = exports.monitoringEventsSchema = exports.monitoringPayloadHash = exports.FunctionMonitoringError = exports.createFunctionServiceMonitoringClient = exports.functionSourceJobAdmissionSchema = exports.functionAgentSourceExecutionSchema = exports.functionAgentConversationEvidenceRequestSchema = exports.functionAgentConversationEvidenceCaptureSchema = exports.functionAgentConversationEvidenceResponseSchema = exports.functionAgentSourceEvidenceCaptureSchema = exports.functionAgentSourceEvidenceRequestSchema = exports.functionAgentSourceResponseSchema = exports.createFunctionWorkflowEvidenceClient = exports.createFunctionServiceWorkflowsClient = exports.createFunctionAgentEvidenceClient = exports.FunctionAgentReadError = exports.createFunctionServiceAgentsClient = exports.FunctionProcessReadError = exports.createFunctionServiceProcessesClient = exports.functionLatticeHumanCompletionsPageSchema = exports.functionLatticeHumanCompletionsQuerySchema = exports.functionLatticeHumanCompletionSchema = exports.functionLatticeHumanCompletionQuerySchema = exports.functionLatticeExecutionContextSchema = exports.functionLatticeContextRequestSchema = exports.FunctionLatticeContextError = exports.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER = exports.FUNCTION_LATTICE_CONTEXT_PATH = exports.createFunctionInvocationClient = exports.functionLatticeStartProvenanceSchema = exports.functionLatticeParallelSnapshotQuerySchema = exports.functionLatticeParallelSnapshotSchema = exports.createFunctionLatticeClient = exports.readFunctionLatticeContextCapability = exports.functionLatticeContextCapabilitySchema = exports.FunctionDirectoryReadError = exports.createFunctionDirectoryClient = void 0;
+exports.functionLatticeRunCreatorAccessSchema = exports.createFunctionServiceDirectoryClient = exports.readCacheConfiguration = exports.cacheManifestSchema = exports.createCacheManager = exports.CacheError = exports.createFunctionStorageClient = exports.runWithFunctionTracing = exports.installFunctionTracing = exports.functionMonitoringAnnotationSchema = exports.monitoringPublishSchema = exports.monitoringEventsSchema = exports.monitoringPayloadHash = exports.FunctionMonitoringError = exports.createFunctionServiceMonitoringClient = exports.functionSourceJobAdmissionSchema = exports.functionAgentSourceExecutionSchema = exports.functionAgentConversationEvidenceRequestSchema = exports.functionAgentConversationEvidenceCaptureSchema = exports.functionAgentConversationEvidenceResponseSchema = exports.functionAgentSourceEvidenceCaptureSchema = exports.functionAgentSourceEvidenceRequestSchema = exports.functionAgentSourceResponseSchema = exports.createFunctionWorkflowEvidenceClient = exports.createFunctionServiceWorkflowsClient = exports.createFunctionAgentEvidenceClient = exports.FunctionAgentReadError = exports.createFunctionServiceAgentsClient = exports.FunctionProcessReadError = exports.createFunctionServiceProcessesClient = exports.functionLatticeHumanCompletionsPageSchema = exports.functionLatticeHumanCompletionsQuerySchema = exports.functionLatticeHumanCompletionSchema = exports.functionLatticeHumanCompletionQuerySchema = exports.functionLatticeExecutionContextSchema = exports.functionLatticeContextRequestSchema = exports.FunctionLatticeContextError = exports.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER = exports.FUNCTION_LATTICE_CONTEXT_PATH = exports.createFunctionInvocationClient = exports.functionLatticeStartProvenanceSchema = exports.functionLatticeParallelSnapshotQuerySchema = exports.functionLatticeParallelSnapshotSchema = exports.createFunctionLatticeClient = exports.readFunctionLatticeContextCapability = exports.functionLatticeContextCapabilitySchema = exports.FunctionDirectoryReadError = exports.createFunctionDirectoryClient = void 0;
 exports.createManagedFunctionContext = createManagedFunctionContext;
 var directory_1 = require("./directory");
 Object.defineProperty(exports, "createFunctionDirectoryClient", { enumerable: true, get: function () { return directory_1.createFunctionDirectoryClient; } });
@@ -139,3 +139,6 @@ function lazyValkeyStore(connection, local) {
 __exportStar(require("./directory-contract"), exports);
 var service_directory_1 = require("./service-directory");
 Object.defineProperty(exports, "createFunctionServiceDirectoryClient", { enumerable: true, get: function () { return service_directory_1.createFunctionServiceDirectoryClient; } });
+__exportStar(require("./directory-roster-contract"), exports);
+var lattice_provenance_contract_5 = require("./lattice-provenance-contract");
+Object.defineProperty(exports, "functionLatticeRunCreatorAccessSchema", { enumerable: true, get: function () { return lattice_provenance_contract_5.functionLatticeRunCreatorAccessSchema; } });

package/dist/invocation-contract.d.ts

@@ -3,11 +3,14 @@ export declare const FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER = "x-sequence-inv
 export declare const FUNCTION_INVOCATION_CONTEXT_PATH = "/api/managed-functions/invocation/context";
 export declare const functionInvocationIdentityCapabilitySchema: z.ZodObject<{
     identity: z.ZodLiteral<true>;
+    caller_capabilities: z.ZodOptional<z.ZodLiteral<true>>;
 }, z.core.$strict>;
 export declare function readFunctionInvocationIdentityCapability(manifest: unknown): boolean;
-export declare const functionInvocationContextRequestSchema: z.ZodObject<{
+export declare const functionInvocationContextRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     operation: z.ZodLiteral<"getInvocationContext">;
-}, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    operation: z.ZodLiteral<"getCallerCapabilities">;
+}, z.core.$strict>], "operation">;
 export type FunctionInvocationContextRequest = z.infer<typeof functionInvocationContextRequestSchema>;
 export declare const functionInvocationContextSchema: z.ZodObject<{
     receiver: z.ZodObject<{
@@ -34,3 +37,23 @@ export declare class FunctionInvocationContextError extends Error {
     readonly name = "FunctionInvocationContextError";
     constructor(status: number, code: string, message: string);
 }
+export declare const functionInvocationCapabilitiesSchema: z.ZodObject<{
+    receiver: z.ZodObject<{
+        functionId: z.ZodString;
+        versionId: z.ZodString;
+        invocationId: z.ZodString;
+        orgId: z.ZodString;
+        serviceAccountId: z.ZodString;
+        serviceAccountSub: z.ZodString;
+    }, z.core.$strict>;
+    caller: z.ZodObject<{
+        kind: z.ZodEnum<{
+            human: "human";
+            service_account: "service_account";
+            system: "system";
+        }>;
+        sub: z.ZodString;
+    }, z.core.$strict>;
+    capabilities: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type FunctionInvocationCapabilities = z.infer<typeof functionInvocationCapabilitiesSchema>;

package/dist/invocation-contract.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FunctionInvocationContextError = exports.functionInvocationContextSchema = exports.functionInvocationContextRequestSchema = exports.functionInvocationIdentityCapabilitySchema = exports.FUNCTION_INVOCATION_CONTEXT_PATH = exports.FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER = void 0;
+exports.functionInvocationCapabilitiesSchema = exports.FunctionInvocationContextError = exports.functionInvocationContextSchema = exports.functionInvocationContextRequestSchema = exports.functionInvocationIdentityCapabilitySchema = exports.FUNCTION_INVOCATION_CONTEXT_PATH = exports.FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER = void 0;
 exports.readFunctionInvocationIdentityCapability = readFunctionInvocationIdentityCapability;
 const zod_1 = require("zod");
 exports.FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER = 'x-sequence-invocation-identity-token';
@@ -9,6 +9,7 @@ const identifier = zod_1.z.string().min(1).max(255);
 const principal = zod_1.z.string().min(1).max(512);
 exports.functionInvocationIdentityCapabilitySchema = zod_1.z.strictObject({
     identity: zod_1.z.literal(true),
+    caller_capabilities: zod_1.z.literal(true).optional(),
 });
 function readFunctionInvocationIdentityCapability(manifest) {
     if (typeof manifest !== 'object' || manifest === null)
@@ -18,18 +19,21 @@ function readFunctionInvocationIdentityCapability(manifest) {
         return false;
     return exports.functionInvocationIdentityCapabilitySchema.safeParse(Reflect.get(capabilities, 'invocation')).success;
 }
-exports.functionInvocationContextRequestSchema = zod_1.z.strictObject({
-    operation: zod_1.z.literal('getInvocationContext'),
-});
+exports.functionInvocationContextRequestSchema = zod_1.z.discriminatedUnion('operation', [
+    zod_1.z.strictObject({ operation: zod_1.z.literal('getInvocationContext') }),
+    zod_1.z.strictObject({ operation: zod_1.z.literal('getCallerCapabilities') }),
+]);
 exports.functionInvocationContextSchema = zod_1.z.strictObject({
-    receiver: zod_1.z.strictObject({
+    receiver: zod_1.z
+        .strictObject({
         functionId: identifier,
         versionId: identifier,
         invocationId: identifier,
         orgId: identifier,
         serviceAccountId: identifier,
         serviceAccountSub: principal,
-    }).refine((value) => value.serviceAccountSub === `service-account|${value.serviceAccountId}`, 'The receiver subject must identify the attached service account'),
+    })
+        .refine((value) => value.serviceAccountSub === `service-account|${value.serviceAccountId}`, 'The receiver subject must identify the attached service account'),
     caller: zod_1.z.strictObject({
         kind: zod_1.z.enum(['human', 'service_account', 'system']),
         sub: principal,
@@ -46,3 +50,14 @@ class FunctionInvocationContextError extends Error {
     }
 }
 exports.FunctionInvocationContextError = FunctionInvocationContextError;
+exports.functionInvocationCapabilitiesSchema = exports.functionInvocationContextSchema
+    .extend({
+    capabilities: zod_1.z
+        .array(zod_1.z
+        .string()
+        .min(1)
+        .max(140)
+        .regex(/^[a-z0-9][a-z0-9/_.:-]*$/))
+        .max(256),
+})
+    .refine((value) => new Set(value.capabilities).size === value.capabilities.length, 'Capabilities must be unique');

package/dist/invocation.d.ts

@@ -1,8 +1,9 @@
-import { type FunctionInvocationContext } from './invocation-contract';
+import { type FunctionInvocationCapabilities, type FunctionInvocationContext } from './invocation-contract';
 export * from './invocation-contract';
 import type { FunctionInvocationClientOptions } from './invocation-client';
 export type { FunctionInvocationClientOptions } from './invocation-client';
 export interface FunctionInvocationClient {
     getInvocationContext(): Promise<FunctionInvocationContext>;
+    getCallerCapabilities(): Promise<FunctionInvocationCapabilities>;
 }
 export declare function createFunctionInvocationClient({ request, baseUrl, fetchImpl, }: FunctionInvocationClientOptions): FunctionInvocationClient;

package/dist/invocation.js

@@ -34,7 +34,11 @@ const tokenClaimsSchema = zod_1.z.strictObject({
     exp: zod_1.z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
 });
 const errorSchema = zod_1.z.strictObject({
-    code: zod_1.z.string().min(1).max(128).regex(/^[a-z][a-z0-9_]*$/),
+    code: zod_1.z
+        .string()
+        .min(1)
+        .max(128)
+        .regex(/^[a-z][a-z0-9_]*$/),
     detail: zod_1.z.string().min(1).max(2000),
 });
 const invalidContext = () => new invocation_contract_1.FunctionInvocationContextError(401, 'invalid_context', 'This invocation has no valid identity credential');
@@ -75,10 +79,13 @@ function trustedOrigin(baseUrl) {
     catch {
         throw invalid();
     }
-    const loopback = url.protocol === 'http:' &&
-        ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname);
-    if ((!loopback && url.protocol !== 'https:') || url.username || url.password ||
-        url.pathname !== '/' || url.search || url.hash)
+    const loopback = url.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname);
+    if ((!loopback && url.protocol !== 'https:') ||
+        url.username ||
+        url.password ||
+        url.pathname !== '/' ||
+        url.search ||
+        url.hash)
         throw invalid();
     return url.origin;
 }
@@ -88,47 +95,50 @@ function requireFresh(claims) {
 }
 function matchesInvocation({ context, claims, }) {
     const { receiver, caller } = context;
-    return receiver.functionId === claims.functionId &&
+    return (receiver.functionId === claims.functionId &&
         receiver.versionId === claims.versionId &&
         receiver.invocationId === claims.invocationId &&
         receiver.orgId === claims.org &&
         receiver.serviceAccountId === claims.serviceAccountId &&
-        caller.kind === claims.callerKind && caller.sub === claims.callerSub;
+        caller.kind === claims.callerKind &&
+        caller.sub === claims.callerSub);
 }
 function createFunctionInvocationClient({ request, baseUrl, fetchImpl = globalThis.fetch, }) {
     const url = `${trustedOrigin(baseUrl)}${invocation_contract_1.FUNCTION_INVOCATION_CONTEXT_PATH}`;
     const { token, claims } = readCredential({ request });
+    async function read(operation, schema) {
+        requireFresh(claims);
+        let response;
+        try {
+            response = await fetchImpl(url, {
+                method: 'POST',
+                headers: {
+                    'content-type': 'application/json',
+                    [invocation_contract_1.FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER]: token,
+                },
+                body: JSON.stringify(invocation_contract_1.functionInvocationContextRequestSchema.parse({ operation })),
+                redirect: 'error',
+                signal: AbortSignal.timeout(30_000),
+            });
+        }
+        catch {
+            throw new invocation_contract_1.FunctionInvocationContextError(502, 'context_request_failed', 'The invocation context request failed');
+        }
+        if (response.redirected || (response.status >= 300 && response.status < 400))
+            throw new invocation_contract_1.FunctionInvocationContextError(502, 'redirect_refused', 'The invocation context request must not redirect');
+        const result = await response.json().catch(() => null);
+        if (!response.ok) {
+            const error = errorSchema.safeParse(result);
+            throw new invocation_contract_1.FunctionInvocationContextError(response.status, error.success ? error.data.code : 'context_read_failed', error.success && !error.data.detail.includes(token) ? error.data.detail : 'Invocation context read failed');
+        }
+        requireFresh(claims);
+        const parsed = schema.safeParse(result);
+        if (!parsed.success || !matchesInvocation({ context: parsed.data, claims }))
+            throw new invocation_contract_1.FunctionInvocationContextError(502, 'malformed_response', 'Atlas returned an invalid invocation context response');
+        return parsed.data;
+    }
     return {
-        async getInvocationContext() {
-            requireFresh(claims);
-            let response;
-            try {
-                response = await fetchImpl(url, {
-                    method: 'POST',
-                    headers: {
-                        'content-type': 'application/json',
-                        [invocation_contract_1.FUNCTION_INVOCATION_IDENTITY_TOKEN_HEADER]: token,
-                    },
-                    body: JSON.stringify(invocation_contract_1.functionInvocationContextRequestSchema.parse({ operation: 'getInvocationContext' })),
-                    redirect: 'error', signal: AbortSignal.timeout(30_000),
-                });
-            }
-            catch {
-                throw new invocation_contract_1.FunctionInvocationContextError(502, 'context_request_failed', 'The invocation context request failed');
-            }
-            if (response.redirected || (response.status >= 300 && response.status < 400))
-                throw new invocation_contract_1.FunctionInvocationContextError(502, 'redirect_refused', 'The invocation context request must not redirect');
-            const result = await response.json().catch(() => null);
-            if (!response.ok) {
-                const error = errorSchema.safeParse(result);
-                throw new invocation_contract_1.FunctionInvocationContextError(response.status, error.success ? error.data.code : 'context_read_failed', error.success && !error.data.detail.includes(token)
-                    ? error.data.detail : 'Invocation context read failed');
-            }
-            requireFresh(claims);
-            const parsed = invocation_contract_1.functionInvocationContextSchema.safeParse(result);
-            if (!parsed.success || !matchesInvocation({ context: parsed.data, claims }))
-                throw new invocation_contract_1.FunctionInvocationContextError(502, 'malformed_response', 'Atlas returned an invalid invocation context response');
-            return parsed.data;
-        },
+        getInvocationContext: () => read('getInvocationContext', invocation_contract_1.functionInvocationContextSchema),
+        getCallerCapabilities: () => read('getCallerCapabilities', invocation_contract_1.functionInvocationCapabilitiesSchema),
     };
 }