@sequenceholdings/managed-functions 0.4.5 → 0.5.1

package/dist/agent-source-evidence-contract.js

@@ -1,96 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.functionAgentSourceEvidenceVerificationSchema = exports.functionAgentSourceEvidenceRequestSchema = exports.functionAgentSourceEvidenceClaimsSchema = exports.functionAgentHumanConversationEvidenceClaimsSchema = exports.functionAgentRunSourceEvidenceClaimsSchema = exports.functionAgentManagedFunctionSourceEvidenceClaimsSchema = exports.functionAgentHumanSourceEvidenceClaimsSchema = exports.functionAgentConversationEvidenceRequestSchema = exports.functionAgentConversationEvidenceQuerySchema = exports.functionAgentConversationEvidenceCaptureSchema = exports.functionAgentConversationEvidenceResponseSchema = exports.functionAgentSourceEvidenceCaptureSchema = exports.functionAgentSourceResponseSchema = exports.functionAgentConversationResponseSchema = exports.functionAgentSourceExecutionSchema = exports.functionSourceJobAdmissionSchema = exports.AGENT_SOURCE_VERIFY_MAX_BYTES = exports.AGENT_SOURCE_RESPONSE_MAX_BYTES = exports.FUNCTION_AGENT_EVIDENCE_PATH = exports.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER = exports.functionAgentEvidenceScopesSchema = void 0;
-exports.readFunctionAgentEvidenceScopes = readFunctionAgentEvidenceScopes;
-const zod_1 = require("zod");
-const agents_contract_1 = require("./agents-contract");
-var agents_contract_2 = require("./agents-contract");
-Object.defineProperty(exports, "functionAgentEvidenceScopesSchema", { enumerable: true, get: function () { return agents_contract_2.functionAgentEvidenceScopesSchema; } });
-exports.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER = 'x-sequence-agent-evidence-token';
-exports.FUNCTION_AGENT_EVIDENCE_PATH = '/api/managed-functions/agents/evidence';
-exports.AGENT_SOURCE_RESPONSE_MAX_BYTES = 512 * 1024;
-exports.AGENT_SOURCE_VERIFY_MAX_BYTES = 768 * 1024;
-const identifier = zod_1.z.string().min(1).max(255);
-const hash = zod_1.z.string().regex(/^[a-f0-9]{64}$/);
-exports.functionSourceJobAdmissionSchema = zod_1.z.strictObject({
-    idempotencyKey: zod_1.z.string().min(1).max(128).regex(/^[\x21-\x7e]+$/), requestHash: hash,
-    kind: zod_1.z.enum(['agent', 'workflow']), resourceId: identifier, actorSub: zod_1.z.string().min(1).max(512),
-    runId: identifier, executionSnapshotId: zod_1.z.uuid(),
-});
-exports.functionAgentSourceExecutionSchema = zod_1.z.strictObject({
-    run: zod_1.z.strictObject({ id: identifier, processId: identifier, processVersion: identifier, bundleHash: identifier, entity: zod_1.z.strictObject({ type: identifier, id: identifier }).nullable() }),
-    step: zod_1.z.strictObject({ id: identifier, nodeId: identifier, attempt: zod_1.z.number().int().positive() }),
-    agent: zod_1.z.strictObject({ id: identifier, runId: identifier, threadId: identifier, identity: zod_1.z.strictObject({ id: identifier, version: identifier, definitionSha256: hash }) }),
-}).refine((source) => source.agent.id === source.agent.identity.id, 'The source agent must match its private execution identity');
-function readFunctionAgentEvidenceScopes(manifest) {
-    if (typeof manifest !== 'object' || manifest === null)
-        return [];
-    const capabilities = Reflect.get(manifest, 'capabilities');
-    if (typeof capabilities !== 'object' || capabilities === null)
-        return [];
-    const agents = Reflect.get(capabilities, 'agents');
-    if (typeof agents !== 'object' || agents === null)
-        return [];
-    const evidence = Reflect.get(agents, 'evidence');
-    return evidence === undefined ? [] : agents_contract_1.functionAgentEvidenceScopesSchema.parse(evidence);
-}
-const textPart = zod_1.z.strictObject({ type: zod_1.z.literal('text'), text: zod_1.z.string() });
-const toolPart = zod_1.z.strictObject({
-    type: zod_1.z.string().min(1).max(255).refine((type) => type !== 'tool-result' && (type === 'dynamic-tool' || type === 'tool-invocation' || type.startsWith('tool-')), 'Only tool parts are permitted'),
-    toolName: zod_1.z.string().max(255).optional(), name: zod_1.z.string().max(255).optional(), toolCallId: identifier.optional(), state: zod_1.z.string().max(255).optional(),
-    input: zod_1.z.json().optional(), output: zod_1.z.json().optional(),
-});
-exports.functionAgentConversationResponseSchema = agents_contract_1.functionAgentCompletedRunSchema.extend({
-    context: zod_1.z.strictObject({
-        messages: zod_1.z.array(zod_1.z.strictObject({ id: identifier, role: zod_1.z.enum(['user', 'assistant']), parts: zod_1.z.array(zod_1.z.union([textPart, toolPart])).max(1000), metadata: zod_1.z.strictObject({ citations: zod_1.z.array(zod_1.z.json()).max(1000) }).optional() })).max(1000),
-        compactionSummary: zod_1.z.string().nullable(),
-    }),
-});
-exports.functionAgentSourceResponseSchema = zod_1.z.union([agents_contract_1.functionAgentCompletedRunSchema, exports.functionAgentConversationResponseSchema]);
-exports.functionAgentSourceEvidenceCaptureSchema = zod_1.z.strictObject({ response: exports.functionAgentSourceResponseSchema, responseHash: hash, sourceReceipt: zod_1.z.string().min(1).max(16_384) });
-const conversationRevision = zod_1.z.number().int().min(1).max(Number.MAX_SAFE_INTEGER);
-exports.functionAgentConversationEvidenceResponseSchema = zod_1.z.strictObject({
-    agent: identifier, threadId: identifier, revision: conversationRevision, cutoffAt: zod_1.z.iso.datetime({ offset: true }),
-    context: exports.functionAgentConversationResponseSchema.shape.context.extend({ compactionSummary: zod_1.z.null() }),
-    conversation: agents_contract_1.functionAgentCompletedRunSchema.shape.conversation.unwrap(),
-});
-exports.functionAgentConversationEvidenceCaptureSchema = zod_1.z.strictObject({ response: exports.functionAgentConversationEvidenceResponseSchema, responseHash: hash, sourceReceipt: zod_1.z.string().min(1).max(16_384) });
-exports.functionAgentConversationEvidenceQuerySchema = zod_1.z.strictObject({ agent: identifier, threadId: identifier });
-exports.functionAgentConversationEvidenceRequestSchema = exports.functionAgentConversationEvidenceQuerySchema.extend({ operation: zod_1.z.literal('verifyConversationEvidence'), response: exports.functionAgentConversationEvidenceResponseSchema, responseHash: hash, sourceReceipt: zod_1.z.string().min(1).max(16_384) });
-const sourceEvidenceFields = {
-    environment: zod_1.z.string(), org: identifier, agentId: identifier, runId: identifier, threadId: identifier,
-    familyRunIds: zod_1.z.array(identifier).min(1).max(16), cutoffAt: zod_1.z.iso.datetime({ offset: true }),
-    responseHash: hash, sourceExecution: exports.functionAgentSourceExecutionSchema.nullable(), jobAdmission: exports.functionSourceJobAdmissionSchema.nullable(),
-};
-exports.functionAgentHumanSourceEvidenceClaimsSchema = zod_1.z.strictObject({
-    ...sourceEvidenceFields, sourceKind: zod_1.z.literal('human'), audience: zod_1.z.literal('atlas-agent-source-evidence'),
-    actualUserSub: zod_1.z.string().min(1).max(512).refine((sub) => !sub.startsWith('service-account|'), 'Human source evidence requires a user principal'),
-    projection: zod_1.z.enum(['completed-v1', 'conversation-v1']),
-});
-exports.functionAgentManagedFunctionSourceEvidenceClaimsSchema = zod_1.z.strictObject({
-    ...sourceEvidenceFields, sourceKind: zod_1.z.literal('managed_function'), audience: zod_1.z.literal('atlas-managed-function-source-evidence'),
-    actualServiceAccountSub: zod_1.z.string().min(1).max(512), projection: zod_1.z.literal('completed-v1'),
-    sourceReceiver: zod_1.z.strictObject({ functionId: zod_1.z.uuid(), versionId: zod_1.z.uuid(), invocationId: zod_1.z.uuid(), serviceAccountId: zod_1.z.uuid(), org: identifier }),
-}).refine((source) => source.actualServiceAccountSub === `service-account|${source.sourceReceiver.serviceAccountId}` && source.org === source.sourceReceiver.org, 'The service source must match its actual invocation identity');
-exports.functionAgentRunSourceEvidenceClaimsSchema = zod_1.z.discriminatedUnion('sourceKind', [exports.functionAgentHumanSourceEvidenceClaimsSchema, exports.functionAgentManagedFunctionSourceEvidenceClaimsSchema])
-    .refine((source) => source.familyRunIds.includes(source.runId) && new Set(source.familyRunIds).size === source.familyRunIds.length, 'The source family must contain its run and be distinct')
-    .refine((source) => source.sourceExecution === null || (source.sourceExecution.agent.id === source.agentId && source.sourceExecution.agent.runId === source.runId && source.sourceExecution.agent.threadId === source.threadId), 'The execution origin must match the captured source')
-    .refine((source) => source.jobAdmission === null || (source.jobAdmission.kind === 'agent' && source.jobAdmission.runId === source.runId && source.jobAdmission.resourceId === source.agentId && (source.sourceKind === 'human' || source.jobAdmission.actorSub === source.actualServiceAccountSub)), 'The job admission must match the captured source');
-exports.functionAgentHumanConversationEvidenceClaimsSchema = zod_1.z.strictObject({
-    sourceKind: zod_1.z.literal('human'), projection: zod_1.z.literal('thread-conversation-v1'), audience: zod_1.z.literal('atlas-agent-source-evidence'),
-    actualUserSub: zod_1.z.string().min(1).max(512).refine((sub) => !sub.startsWith('service-account|'), 'Human conversation evidence requires a user principal'),
-    environment: zod_1.z.string(), org: identifier, agentId: identifier, threadId: identifier,
-    revision: conversationRevision, cutoffAt: zod_1.z.iso.datetime({ offset: true }), responseHash: hash,
-});
-exports.functionAgentSourceEvidenceClaimsSchema = zod_1.z.union([exports.functionAgentRunSourceEvidenceClaimsSchema, exports.functionAgentHumanConversationEvidenceClaimsSchema]);
-exports.functionAgentSourceEvidenceRequestSchema = zod_1.z.strictObject({ operation: zod_1.z.literal('verifySourceEvidence'), agent: identifier, runId: identifier, response: exports.functionAgentSourceResponseSchema, responseHash: hash, sourceReceipt: zod_1.z.string().min(1).max(16_384) });
-exports.functionAgentSourceEvidenceVerificationSchema = zod_1.z.strictObject({
-    source: exports.functionAgentSourceEvidenceClaimsSchema,
-    receiver: zod_1.z.strictObject({ functionId: identifier, versionId: identifier, invocationId: identifier, serviceAccountId: identifier, org: identifier }),
-    lattice: zod_1.z.strictObject({
-        receiverFunctionOrgId: identifier,
-        run: zod_1.z.strictObject({ id: identifier, processId: identifier, processVersion: identifier, bundleHash: identifier, entity: zod_1.z.strictObject({ type: identifier, id: identifier }).nullable() }),
-        step: zod_1.z.strictObject({ id: identifier, nodeId: identifier, attempt: zod_1.z.number().int().positive(), runAsServiceAccount: zod_1.z.string().nullable() }),
-        receiver: zod_1.z.strictObject({ functionId: identifier, versionId: identifier, invocationId: identifier }),
-    }).nullable(),
-});
+exports.functionAgentEvidenceScopesSchema = exports.functionAgentSourceEvidenceVerificationSchema = exports.functionAgentSourceEvidenceRequestSchema = exports.functionAgentSourceEvidenceClaimsSchema = exports.functionAgentHumanConversationEvidenceClaimsSchema = exports.functionAgentRunSourceEvidenceClaimsSchema = exports.functionAgentManagedFunctionSourceEvidenceClaimsSchema = exports.functionAgentHumanSourceEvidenceClaimsSchema = exports.functionAgentConversationEvidenceRequestSchema = exports.functionAgentConversationEvidenceQuerySchema = exports.functionAgentConversationEvidenceCaptureSchema = exports.functionAgentConversationEvidenceResponseSchema = exports.functionAgentSourceEvidenceCaptureSchema = exports.functionAgentSourceResponseSchema = exports.functionAgentConversationResponseSchema = exports.readFunctionAgentEvidenceScopes = exports.functionAgentSourceExecutionSchema = exports.functionSourceJobAdmissionSchema = exports.AGENT_SOURCE_VERIFY_MAX_BYTES = exports.AGENT_SOURCE_RESPONSE_MAX_BYTES = exports.FUNCTION_AGENT_EVIDENCE_PATH = exports.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER = void 0;
+var contracts_1 = require("@sequenceholdings/platform/contracts");
+Object.defineProperty(exports, "FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER", { enumerable: true, get: function () { return contracts_1.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER; } });
+Object.defineProperty(exports, "FUNCTION_AGENT_EVIDENCE_PATH", { enumerable: true, get: function () { return contracts_1.FUNCTION_AGENT_EVIDENCE_PATH; } });
+Object.defineProperty(exports, "AGENT_SOURCE_RESPONSE_MAX_BYTES", { enumerable: true, get: function () { return contracts_1.AGENT_SOURCE_RESPONSE_MAX_BYTES; } });
+Object.defineProperty(exports, "AGENT_SOURCE_VERIFY_MAX_BYTES", { enumerable: true, get: function () { return contracts_1.AGENT_SOURCE_VERIFY_MAX_BYTES; } });
+Object.defineProperty(exports, "functionSourceJobAdmissionSchema", { enumerable: true, get: function () { return contracts_1.functionSourceJobAdmissionSchema; } });
+Object.defineProperty(exports, "functionAgentSourceExecutionSchema", { enumerable: true, get: function () { return contracts_1.functionAgentSourceExecutionSchema; } });
+Object.defineProperty(exports, "readFunctionAgentEvidenceScopes", { enumerable: true, get: function () { return contracts_1.readFunctionAgentEvidenceScopes; } });
+Object.defineProperty(exports, "functionAgentConversationResponseSchema", { enumerable: true, get: function () { return contracts_1.functionAgentConversationResponseSchema; } });
+Object.defineProperty(exports, "functionAgentSourceResponseSchema", { enumerable: true, get: function () { return contracts_1.functionAgentSourceResponseSchema; } });
+Object.defineProperty(exports, "functionAgentSourceEvidenceCaptureSchema", { enumerable: true, get: function () { return contracts_1.functionAgentSourceEvidenceCaptureSchema; } });
+Object.defineProperty(exports, "functionAgentConversationEvidenceResponseSchema", { enumerable: true, get: function () { return contracts_1.functionAgentConversationEvidenceResponseSchema; } });
+Object.defineProperty(exports, "functionAgentConversationEvidenceCaptureSchema", { enumerable: true, get: function () { return contracts_1.functionAgentConversationEvidenceCaptureSchema; } });
+Object.defineProperty(exports, "functionAgentConversationEvidenceQuerySchema", { enumerable: true, get: function () { return contracts_1.functionAgentConversationEvidenceQuerySchema; } });
+Object.defineProperty(exports, "functionAgentConversationEvidenceRequestSchema", { enumerable: true, get: function () { return contracts_1.functionAgentConversationEvidenceRequestSchema; } });
+Object.defineProperty(exports, "functionAgentHumanSourceEvidenceClaimsSchema", { enumerable: true, get: function () { return contracts_1.functionAgentHumanSourceEvidenceClaimsSchema; } });
+Object.defineProperty(exports, "functionAgentManagedFunctionSourceEvidenceClaimsSchema", { enumerable: true, get: function () { return contracts_1.functionAgentManagedFunctionSourceEvidenceClaimsSchema; } });
+Object.defineProperty(exports, "functionAgentRunSourceEvidenceClaimsSchema", { enumerable: true, get: function () { return contracts_1.functionAgentRunSourceEvidenceClaimsSchema; } });
+Object.defineProperty(exports, "functionAgentHumanConversationEvidenceClaimsSchema", { enumerable: true, get: function () { return contracts_1.functionAgentHumanConversationEvidenceClaimsSchema; } });
+Object.defineProperty(exports, "functionAgentSourceEvidenceClaimsSchema", { enumerable: true, get: function () { return contracts_1.functionAgentSourceEvidenceClaimsSchema; } });
+Object.defineProperty(exports, "functionAgentSourceEvidenceRequestSchema", { enumerable: true, get: function () { return contracts_1.functionAgentSourceEvidenceRequestSchema; } });
+Object.defineProperty(exports, "functionAgentSourceEvidenceVerificationSchema", { enumerable: true, get: function () { return contracts_1.functionAgentSourceEvidenceVerificationSchema; } });
+Object.defineProperty(exports, "functionAgentEvidenceScopesSchema", { enumerable: true, get: function () { return contracts_1.functionAgentEvidenceScopesSchema; } });

package/dist/agents-contract.d.ts

@@ -1,99 +1,2 @@
-import { z } from 'zod';
-export declare const FUNCTION_AGENT_TOKEN_HEADER = "x-sequence-agent-service-token";
-export declare const FUNCTION_AGENT_READ_PATH = "/api/managed-functions/agents/read";
-export declare const FUNCTION_AGENT_CAPTURE_PATH = "/api/managed-functions/agents/capture";
-export declare const functionAgentEvidenceScopesSchema: z.ZodArray<z.ZodString>;
-export declare const functionAgentReadScopesSchema: z.ZodObject<{
-    read: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    evidence: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strict>;
-export declare function readFunctionAgentScopes(manifest: unknown): string[];
-export declare const functionAgentCompletedRunQuerySchema: z.ZodObject<{
-    agent: z.ZodString;
-    runId: z.ZodString;
-    recoveryProof: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-export type FunctionAgentCompletedRunQuery = z.infer<typeof functionAgentCompletedRunQuerySchema>;
-export declare const functionAgentReadRequestSchema: z.ZodObject<{
-    agent: z.ZodString;
-    runId: z.ZodString;
-    recoveryProof: z.ZodOptional<z.ZodString>;
-    operation: z.ZodLiteral<"getCompletedRun">;
-}, z.core.$strict>;
-export declare const functionAgentMessageSchema: z.ZodObject<{
-    id: z.ZodString;
-    role: z.ZodLiteral<"assistant">;
-    parts: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
-        type: z.ZodLiteral<"text">;
-        text: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        type: z.ZodLiteral<"dynamic-tool">;
-        output: z.ZodObject<{
-            content: z.ZodArray<z.ZodObject<{
-                type: z.ZodLiteral<"resource">;
-                resource: z.ZodObject<{
-                    uri: z.ZodString;
-                    text: z.ZodString;
-                }, z.core.$strict>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>;
-    }, z.core.$strict>]>>;
-    metadata: z.ZodOptional<z.ZodObject<{
-        citations: z.ZodArray<z.ZodJSONSchema>;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-export declare const functionAgentCompletedRunSchema: z.ZodObject<{
-    runId: z.ZodString;
-    agent: z.ZodString;
-    threadId: z.ZodString;
-    status: z.ZodLiteral<"completed">;
-    output: z.ZodJSONSchema;
-    messages: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        role: z.ZodLiteral<"assistant">;
-        parts: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
-            type: z.ZodLiteral<"text">;
-            text: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-            type: z.ZodLiteral<"dynamic-tool">;
-            output: z.ZodObject<{
-                content: z.ZodArray<z.ZodObject<{
-                    type: z.ZodLiteral<"resource">;
-                    resource: z.ZodObject<{
-                        uri: z.ZodString;
-                        text: z.ZodString;
-                    }, z.core.$strict>;
-                }, z.core.$strict>>;
-            }, z.core.$strict>;
-        }, z.core.$strict>]>>;
-        metadata: z.ZodOptional<z.ZodObject<{
-            citations: z.ZodArray<z.ZodJSONSchema>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>>;
-    conversation: z.ZodOptional<z.ZodObject<{
-        messageCount: z.ZodNumber;
-        userMessageCount: z.ZodNumber;
-        assistantMessageCount: z.ZodNumber;
-        messages: z.ZodArray<z.ZodObject<{
-            id: z.ZodString;
-            role: z.ZodEnum<{
-                assistant: "assistant";
-                user: "user";
-            }>;
-            textParts: z.ZodArray<z.ZodString>;
-            tools: z.ZodArray<z.ZodObject<{
-                partType: z.ZodString;
-                toolName: z.ZodNullable<z.ZodString>;
-                state: z.ZodNullable<z.ZodString>;
-                outputTruthy: z.ZodBoolean;
-            }, z.core.$strict>>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-export type FunctionAgentCompletedRun = z.infer<typeof functionAgentCompletedRunSchema>;
-export declare class FunctionAgentReadError extends Error {
-    readonly status: number;
-    readonly code: string;
-    readonly name = "FunctionAgentReadError";
-    constructor(status: number, code: string, message: string);
-}
+export { FUNCTION_AGENT_TOKEN_HEADER, FUNCTION_AGENT_READ_PATH, FUNCTION_AGENT_CAPTURE_PATH, functionAgentEvidenceScopesSchema, functionAgentReadScopesSchema, readFunctionAgentScopes, functionAgentCompletedRunQuerySchema, functionAgentReadRequestSchema, functionAgentMessageSchema, functionAgentCompletedRunSchema, FunctionAgentReadError, } from "@sequenceholdings/platform/contracts";
+export type { FunctionAgentCompletedRunQuery, FunctionAgentCompletedRun, } from "@sequenceholdings/platform/contracts";

package/dist/agents-contract.js

@@ -1,69 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FunctionAgentReadError = exports.functionAgentCompletedRunSchema = exports.functionAgentMessageSchema = exports.functionAgentReadRequestSchema = exports.functionAgentCompletedRunQuerySchema = exports.functionAgentReadScopesSchema = exports.functionAgentEvidenceScopesSchema = exports.FUNCTION_AGENT_CAPTURE_PATH = exports.FUNCTION_AGENT_READ_PATH = exports.FUNCTION_AGENT_TOKEN_HEADER = void 0;
-exports.readFunctionAgentScopes = readFunctionAgentScopes;
-const zod_1 = require("zod");
-exports.FUNCTION_AGENT_TOKEN_HEADER = 'x-sequence-agent-service-token';
-exports.FUNCTION_AGENT_READ_PATH = '/api/managed-functions/agents/read';
-exports.FUNCTION_AGENT_CAPTURE_PATH = '/api/managed-functions/agents/capture';
-const resourceId = zod_1.z.string().min(1).max(255).regex(/^[A-Za-z0-9._-]+$/);
-exports.functionAgentEvidenceScopesSchema = zod_1.z.array(resourceId).min(1).max(64)
-    .refine((ids) => new Set(ids).size === ids.length, 'Agent evidence ids must be distinct')
-    .refine((ids) => ids.reduce((bytes, id) => bytes + id.length, 0) <= 8192, 'Agent evidence ids must fit within 8192 bytes');
-exports.functionAgentReadScopesSchema = zod_1.z.strictObject({
-    read: zod_1.z.array(resourceId).min(1).max(64)
-        .refine((ids) => new Set(ids).size === ids.length, 'Agent ids must be distinct')
-        .refine((ids) => ids.reduce((bytes, id) => bytes + id.length, 0) <= 8192, 'Agent ids must fit within 8192 bytes').optional(),
-    evidence: exports.functionAgentEvidenceScopesSchema.optional(),
-}).refine((value) => value.read !== undefined || value.evidence !== undefined, 'Declare agent reads or evidence verification');
-function readFunctionAgentScopes(manifest) {
-    if (typeof manifest !== 'object' || manifest === null)
-        return [];
-    const capabilities = Reflect.get(manifest, 'capabilities');
-    if (typeof capabilities !== 'object' || capabilities === null)
-        return [];
-    const agents = Reflect.get(capabilities, 'agents');
-    if (agents === undefined)
-        return [];
-    return exports.functionAgentReadScopesSchema.parse(agents).read ?? [];
-}
-exports.functionAgentCompletedRunQuerySchema = zod_1.z.strictObject({ agent: resourceId, runId: resourceId, recoveryProof: zod_1.z.string().min(1).max(16_384).optional() });
-exports.functionAgentReadRequestSchema = exports.functionAgentCompletedRunQuerySchema.extend({ operation: zod_1.z.literal('getCompletedRun') });
-exports.functionAgentMessageSchema = zod_1.z.strictObject({
-    id: zod_1.z.string().min(1).max(255),
-    role: zod_1.z.literal('assistant'),
-    parts: zod_1.z.array(zod_1.z.union([
-        zod_1.z.strictObject({ type: zod_1.z.literal('text'), text: zod_1.z.string() }),
-        zod_1.z.strictObject({ type: zod_1.z.literal('dynamic-tool'), output: zod_1.z.strictObject({ content: zod_1.z.array(zod_1.z.strictObject({ type: zod_1.z.literal('resource'), resource: zod_1.z.strictObject({ uri: zod_1.z.string().startsWith('citation://'), text: zod_1.z.string() }) })).max(1000) }) }),
-    ])).max(1000),
-    metadata: zod_1.z.strictObject({ citations: zod_1.z.array(zod_1.z.json()).max(1000) }).optional(),
-});
-exports.functionAgentCompletedRunSchema = zod_1.z.strictObject({
-    runId: resourceId,
-    agent: resourceId,
-    threadId: resourceId,
-    status: zod_1.z.literal('completed'),
-    output: zod_1.z.json(),
-    messages: zod_1.z.array(exports.functionAgentMessageSchema).max(1000),
-    conversation: zod_1.z.strictObject({
-        messageCount: zod_1.z.number().int().min(0).max(1000),
-        userMessageCount: zod_1.z.number().int().min(0).max(1000),
-        assistantMessageCount: zod_1.z.number().int().min(0).max(1000),
-        messages: zod_1.z.array(zod_1.z.strictObject({
-            id: zod_1.z.string().min(1).max(255), role: zod_1.z.enum(['user', 'assistant']),
-            textParts: zod_1.z.array(zod_1.z.string()).max(1000),
-            tools: zod_1.z.array(zod_1.z.strictObject({ partType: zod_1.z.string().min(1).max(255), toolName: zod_1.z.string().max(255).nullable(), state: zod_1.z.string().max(255).nullable(), outputTruthy: zod_1.z.boolean() })).max(1000),
-        })).max(1000),
-    }).optional(),
-});
-class FunctionAgentReadError extends Error {
-    status;
-    code;
-    name = 'FunctionAgentReadError';
-    constructor(status, code, message) {
-        super(message);
-        this.status = status;
-        this.code = code;
-    }
-}
-exports.FunctionAgentReadError = FunctionAgentReadError;
+exports.FunctionAgentReadError = exports.functionAgentCompletedRunSchema = exports.functionAgentMessageSchema = exports.functionAgentReadRequestSchema = exports.functionAgentCompletedRunQuerySchema = exports.readFunctionAgentScopes = exports.functionAgentReadScopesSchema = exports.functionAgentEvidenceScopesSchema = exports.FUNCTION_AGENT_CAPTURE_PATH = exports.FUNCTION_AGENT_READ_PATH = exports.FUNCTION_AGENT_TOKEN_HEADER = void 0;
+var contracts_1 = require("@sequenceholdings/platform/contracts");
+Object.defineProperty(exports, "FUNCTION_AGENT_TOKEN_HEADER", { enumerable: true, get: function () { return contracts_1.FUNCTION_AGENT_TOKEN_HEADER; } });
+Object.defineProperty(exports, "FUNCTION_AGENT_READ_PATH", { enumerable: true, get: function () { return contracts_1.FUNCTION_AGENT_READ_PATH; } });
+Object.defineProperty(exports, "FUNCTION_AGENT_CAPTURE_PATH", { enumerable: true, get: function () { return contracts_1.FUNCTION_AGENT_CAPTURE_PATH; } });
+Object.defineProperty(exports, "functionAgentEvidenceScopesSchema", { enumerable: true, get: function () { return contracts_1.functionAgentEvidenceScopesSchema; } });
+Object.defineProperty(exports, "functionAgentReadScopesSchema", { enumerable: true, get: function () { return contracts_1.functionAgentReadScopesSchema; } });
+Object.defineProperty(exports, "readFunctionAgentScopes", { enumerable: true, get: function () { return contracts_1.readFunctionAgentScopes; } });
+Object.defineProperty(exports, "functionAgentCompletedRunQuerySchema", { enumerable: true, get: function () { return contracts_1.functionAgentCompletedRunQuerySchema; } });
+Object.defineProperty(exports, "functionAgentReadRequestSchema", { enumerable: true, get: function () { return contracts_1.functionAgentReadRequestSchema; } });
+Object.defineProperty(exports, "functionAgentMessageSchema", { enumerable: true, get: function () { return contracts_1.functionAgentMessageSchema; } });
+Object.defineProperty(exports, "functionAgentCompletedRunSchema", { enumerable: true, get: function () { return contracts_1.functionAgentCompletedRunSchema; } });
+Object.defineProperty(exports, "FunctionAgentReadError", { enumerable: true, get: function () { return contracts_1.FunctionAgentReadError; } });

package/dist/agents.d.ts

@@ -1,9 +1,9 @@
-import { type FunctionAgentCompletedRun, type FunctionAgentCompletedRunQuery } from './agents-contract';
-import { type FunctionAgentSourceEvidenceCapture } from './agent-source-evidence-contract';
-export * from './agents-contract';
+import { type FunctionAgentCompletedRun, type FunctionAgentCompletedRunQuery } from "./agents-contract";
+import { type FunctionAgentSourceEvidenceCapture } from "./agent-source-evidence-contract";
+export * from "./agents-contract";
 export interface FunctionServiceAgentsOptions {
     request: {
-        headers: Pick<Headers, 'get'> | Readonly<Record<string, string | readonly string[] | undefined>>;
+        headers: Pick<Headers, "get"> | Readonly<Record<string, string | readonly string[] | undefined>>;
     };
     baseUrl: string;
     fetchImpl?: typeof globalThis.fetch;
@@ -12,4 +12,4 @@ export interface FunctionServiceAgentsClient {
     getCompletedRun(query: FunctionAgentCompletedRunQuery): Promise<FunctionAgentCompletedRun>;
     captureCompletedRun(query: FunctionAgentCompletedRunQuery): Promise<FunctionAgentSourceEvidenceCapture>;
 }
-export declare function createFunctionServiceAgentsClient({ request, baseUrl, fetchImpl }: FunctionServiceAgentsOptions): FunctionServiceAgentsClient;
+export declare function createFunctionServiceAgentsClient({ request, baseUrl, fetchImpl, }: FunctionServiceAgentsOptions): FunctionServiceAgentsClient;

package/dist/agents.js

@@ -15,18 +15,25 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createFunctionServiceAgentsClient = createFunctionServiceAgentsClient;
+const adapters_1 = require("@sequenceholdings/platform/adapters");
 const zod_1 = require("zod");
 const agents_contract_1 = require("./agents-contract");
 const agent_source_evidence_contract_1 = require("./agent-source-evidence-contract");
 const processes_contract_1 = require("./processes-contract");
 __exportStar(require("./agents-contract"), exports);
-function header({ request, name }) {
+function header({ request, name, }) {
     const { headers } = request;
-    const values = typeof headers.get === 'function' ? [headers.get(name)] : Object.entries(headers).filter(([key]) => key.toLowerCase() === name).map(([, value]) => value);
-    return values.length === 1 && typeof values[0] === 'string' ? values[0] : null;
+    const values = typeof headers.get === "function"
+        ? [headers.get(name)]
+        : Object.entries(headers)
+            .filter(([key]) => key.toLowerCase() === name)
+            .map(([, value]) => value);
+    return values.length === 1 && typeof values[0] === "string"
+        ? values[0]
+        : null;
 }
 function credential(request) {
-    const denied = () => new agents_contract_1.FunctionAgentReadError(401, 'invalid_context', 'This invocation has no valid agent-read credential');
+    const denied = () => new agents_contract_1.FunctionAgentReadError(401, "invalid_context", "This invocation has no valid agent-read credential");
     const token = header({ request, name: agents_contract_1.FUNCTION_AGENT_TOKEN_HEADER });
     if (!token || token.length > 16_384)
         throw denied();
@@ -35,12 +42,20 @@ function credential(request) {
         throw denied();
     let value;
     try {
-        value = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));
+        value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
     }
     catch {
         throw denied();
     }
-    const claims = zod_1.z.object({ audience: zod_1.z.literal('atlas-managed-function-agent-read'), sub: zod_1.z.string().startsWith('service-account|'), functionId: zod_1.z.string().min(1), invocationId: zod_1.z.string().min(1), exp: zod_1.z.number().int() }).safeParse(value);
+    const claims = zod_1.z
+        .object({
+        audience: zod_1.z.literal("atlas-managed-function-agent-read"),
+        sub: zod_1.z.string().startsWith("service-account|"),
+        functionId: zod_1.z.string().min(1),
+        invocationId: zod_1.z.string().min(1),
+        exp: zod_1.z.number().int(),
+    })
+        .safeParse(value);
     if (!claims.success)
         throw denied();
     return { token, expiresAt: claims.data.exp };
@@ -51,15 +66,21 @@ function origin(baseUrl) {
         url = new URL(baseUrl);
     }
     catch {
-        throw new agents_contract_1.FunctionAgentReadError(400, 'invalid_configuration', 'Configure a trusted Atlas origin');
+        throw new agents_contract_1.FunctionAgentReadError(400, "invalid_configuration", "Configure a trusted Atlas origin");
     }
-    const loopback = url.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname);
-    if ((!loopback && url.protocol !== 'https:') || url.username || url.password || url.pathname !== '/' || url.search || url.hash)
-        throw new agents_contract_1.FunctionAgentReadError(400, 'invalid_configuration', 'Configure an HTTPS Atlas origin without credentials, path, query or fragment');
+    const loopback = url.protocol === "http:" &&
+        ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+    if ((!loopback && url.protocol !== "https:") ||
+        url.username ||
+        url.password ||
+        url.pathname !== "/" ||
+        url.search ||
+        url.hash)
+        throw new agents_contract_1.FunctionAgentReadError(400, "invalid_configuration", "Configure an HTTPS Atlas origin without credentials, path, query or fragment");
     return url.origin;
 }
 function recoveryProcessCredential(request) {
-    const denied = () => new agents_contract_1.FunctionAgentReadError(401, 'invalid_context', 'Recovery requires this invocation’s process-read credential');
+    const denied = () => new agents_contract_1.FunctionAgentReadError(401, "invalid_context", "Recovery requires this invocation’s process-read credential");
     const token = header({ request, name: processes_contract_1.FUNCTION_PROCESS_TOKEN_HEADER });
     if (!token || token.length > 16_384)
         throw denied();
@@ -68,54 +89,68 @@ function recoveryProcessCredential(request) {
         throw denied();
     let value;
     try {
-        value = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));
+        value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
     }
     catch {
         throw denied();
     }
-    const claims = zod_1.z.object({ audience: zod_1.z.literal('atlas-managed-function-process-read'), sub: zod_1.z.string().startsWith('service-account|'), functionId: zod_1.z.string().min(1), invocationId: zod_1.z.string().min(1), exp: zod_1.z.number().int() }).safeParse(value);
+    const claims = zod_1.z
+        .object({
+        audience: zod_1.z.literal("atlas-managed-function-process-read"),
+        sub: zod_1.z.string().startsWith("service-account|"),
+        functionId: zod_1.z.string().min(1),
+        invocationId: zod_1.z.string().min(1),
+        exp: zod_1.z.number().int(),
+    })
+        .safeParse(value);
     if (!claims.success)
         throw denied();
     if (claims.data.exp <= Date.now() / 1000)
-        throw new agents_contract_1.FunctionAgentReadError(401, 'expired_context', 'The process-read credential expired; start a new invocation');
+        throw new agents_contract_1.FunctionAgentReadError(401, "expired_context", "The process-read credential expired; start a new invocation");
     return token;
 }
-function createFunctionServiceAgentsClient({ request, baseUrl, fetchImpl = globalThis.fetch }) {
+function createFunctionServiceAgentsClient({ request, baseUrl, fetchImpl = globalThis.fetch, }) {
     const base = origin(baseUrl);
     const { token, expiresAt } = credential(request);
-    const lattice = header({ request, name: 'x-sequence-lattice-execution-token' });
+    const lattice = header({
+        request,
+        name: "x-sequence-lattice-execution-token",
+    });
     async function read(query, capture) {
         if (expiresAt <= Date.now() / 1000)
-            throw new agents_contract_1.FunctionAgentReadError(401, 'expired_context', 'The agent-read credential expired; start a new invocation');
+            throw new agents_contract_1.FunctionAgentReadError(401, "expired_context", "The agent-read credential expired; start a new invocation");
         const body = agents_contract_1.functionAgentCompletedRunQuerySchema.parse(query);
-        const process = body.recoveryProof ? recoveryProcessCredential(request) : null;
-        const evidence = capture ? header({ request, name: agent_source_evidence_contract_1.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER }) : null;
+        const process = body.recoveryProof
+            ? recoveryProcessCredential(request)
+            : null;
+        const evidence = capture
+            ? header({ request, name: agent_source_evidence_contract_1.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER })
+            : null;
         if (capture && !evidence)
-            throw new agents_contract_1.FunctionAgentReadError(401, 'invalid_context', 'Source capture requires this invocation’s separate agent-evidence credential');
-        const response = await fetchImpl(`${base}${capture ? agents_contract_1.FUNCTION_AGENT_CAPTURE_PATH : agents_contract_1.FUNCTION_AGENT_READ_PATH}`, {
-            method: 'POST', headers: { 'content-type': 'application/json', [agents_contract_1.FUNCTION_AGENT_TOKEN_HEADER]: token, ...(process ? { [processes_contract_1.FUNCTION_PROCESS_TOKEN_HEADER]: process } : {}), ...(evidence ? { [agent_source_evidence_contract_1.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER]: evidence } : {}), ...(lattice ? { 'x-sequence-lattice-execution-token': lattice } : {}) },
-            body: JSON.stringify({ ...body, operation: capture ? 'captureCompletedRun' : 'getCompletedRun' }), redirect: 'error', signal: AbortSignal.timeout(30_000),
+            throw new agents_contract_1.FunctionAgentReadError(401, "invalid_context", "Source capture requires this invocation’s separate agent-evidence credential");
+        const send = (0, adapters_1.createInvocationDomainTransport)({
+            baseUrl: base,
+            fetchImpl,
+            domain: capture ? "agents-capture" : "agents-read",
+            credentials: [
+                { header: agents_contract_1.FUNCTION_AGENT_TOKEN_HEADER, token, expiresAt },
+                ...(process
+                    ? [{ header: processes_contract_1.FUNCTION_PROCESS_TOKEN_HEADER, token: process }]
+                    : []),
+                ...(evidence
+                    ? [{ header: agent_source_evidence_contract_1.FUNCTION_AGENT_EVIDENCE_TOKEN_HEADER, token: evidence }]
+                    : []),
+                ...(lattice
+                    ? [{ header: "x-sequence-lattice-execution-token", token: lattice }]
+                    : []),
+            ],
+            error: (status, code, message) => new agents_contract_1.FunctionAgentReadError(status, code, message),
+            failure: { code: "agent_read_failed", message: "Agent read failed" },
+        });
+        return send({
+            ...body,
+            operation: capture ? "captureCompletedRun" : "getCompletedRun",
         });
-        const result = await response.json().catch(() => null);
-        if (!response.ok) {
-            const error = zod_1.z.object({ code: zod_1.z.string().max(128).optional(), detail: zod_1.z.string().max(2000).optional() }).safeParse(result);
-            throw new agents_contract_1.FunctionAgentReadError(response.status, error.success ? (error.data.code ?? 'agent_read_failed') : 'agent_read_failed', error.success ? (error.data.detail ?? 'Agent read failed') : 'Agent read failed');
-        }
-        return result;
     }
-    return {
-        async getCompletedRun(query) {
-            const result = await read(query, false);
-            const parsed = agents_contract_1.functionAgentCompletedRunSchema.safeParse(result);
-            if (!parsed.success || parsed.data.runId !== query.runId || parsed.data.agent !== query.agent)
-                throw new agents_contract_1.FunctionAgentReadError(502, 'malformed_response', 'Atlas returned an invalid completed agent response');
-            return parsed.data;
-        },
-        async captureCompletedRun(query) {
-            const parsed = agent_source_evidence_contract_1.functionAgentSourceEvidenceCaptureSchema.safeParse(await read(query, true));
-            if (!parsed.success || parsed.data.response.runId !== query.runId || parsed.data.response.agent !== query.agent || 'context' in parsed.data.response)
-                throw new agents_contract_1.FunctionAgentReadError(502, 'malformed_response', 'Atlas returned an invalid neutral source capture');
-            return parsed.data;
-        },
-    };
+    return (0, adapters_1.createAgentResponseClient)({ read });
 }

package/dist/capabilities.d.ts

@@ -16,7 +16,7 @@ export declare const MANAGED_FUNCTION_CAPABILITIES: {
         readonly directory_rosters: {
             readonly field: "capabilities.directory.rosters";
             readonly supported: true;
-            readonly limit: "1 to 16 explicit groups; up to 50 active tenant members per page; directory Reader and group membership required";
+            readonly limit: "1 to 16 explicit groups; up to 50 active tenant members per page; directory Reader and group roster Reader required";
             readonly min_cli: "0.6.6";
             readonly min_sdk: "0.4.4";
         };

package/dist/capabilities.js

@@ -16,7 +16,7 @@ exports.MANAGED_FUNCTION_CAPABILITIES = {
         sdk: { package: exports.MANAGED_FUNCTION_SDK_PACKAGE, min: '0.3.0' },
     },
     features: {
-        directory_rosters: { field: 'capabilities.directory.rosters', supported: true, limit: '1 to 16 explicit groups; up to 50 active tenant members per page; directory Reader and group membership required', min_cli: '0.6.6', min_sdk: '0.4.4' },
+        directory_rosters: { field: 'capabilities.directory.rosters', supported: true, limit: '1 to 16 explicit groups; up to 50 active tenant members per page; directory Reader and group roster Reader required', min_cli: '0.6.6', min_sdk: '0.4.4' },
         directory_members: {
             field: 'capabilities.directory.groups', supported: true,
             limit: '1 to 16 concrete groups; resolve 1 to 50 selected active members per call',

package/dist/config.d.ts

@@ -37,3 +37,4 @@ export declare const cacheManifestSchema: z.ZodObject<{
 export type CacheConfiguration = z.infer<typeof cacheManifestSchema>;
 export declare function readCacheConfiguration(manifest: unknown): CacheConfiguration;
 export * from './directory-roster-contract';
+export { groupRosterAccessTargetSchema, groupRosterAccessResultSchema } from '@sequenceholdings/platform/contracts';

package/dist/config.js

@@ -15,7 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.sdkSpecFromPackageJson = exports.sdkVersionFromPackageJson = exports.isPostgresEgress = exports.formatValidationDetail = exports.MANAGED_FUNCTION_SDK_PACKAGE = exports.MANAGED_FUNCTION_CLI_PACKAGE = exports.MANAGED_FUNCTION_CAPABILITIES = exports.managedFunctionWorkloadLimitsSchema = exports.MF_LIMITS_DEFAULTS = exports.MF_LIMITS_CAPS = exports.MANAGED_FUNCTION_LIMITS = exports.readFunctionImmutableRelease = exports.functionImmutableReleaseSchema = exports.shouldReportAtlasHttp = exports.directoryPrincipalResolutionSchema = exports.directoryPrincipalResolveRequestSchema = exports.readFunctionDirectoryScopes = exports.functionDirectoryScopesSchema = exports.FUNCTION_DIRECTORY_RESOLVE_PATH = exports.FUNCTION_DIRECTORY_TOKEN_HEADER = exports.FUNCTION_CALLER_DATA_TOKEN_HEADER = exports.readFunctionWorkflowEvidenceScopes = exports.readFunctionWorkflowScopes = exports.functionWorkflowScopesSchema = exports.functionAgentCompletedRunSchema = exports.functionAgentCompletedRunQuerySchema = exports.functionAgentReadRequestSchema = exports.readFunctionAgentScopes = exports.functionAgentReadScopesSchema = exports.FUNCTION_AGENT_READ_PATH = exports.FUNCTION_AGENT_TOKEN_HEADER = exports.functionProcessCompletedNodeQuerySchema = exports.functionProcessCompletedNodeSchema = exports.functionProcessCompletedAgentReferenceQuerySchema = exports.functionProcessCompletedAgentReferenceSchema = exports.functionProcessRunSummarySchema = exports.functionProcessReadRequestSchema = exports.readFunctionProcessScopes = exports.functionProcessReadScopesSchema = exports.FUNCTION_PROCESS_READ_PATH = exports.FUNCTION_PROCESS_TOKEN_HEADER = exports.readFunctionLatticeContextCapability = exports.functionLatticeContextCapabilitySchema = exports.functionDirectoryManifestSchema = exports.readDirectoryGroups = exports.directoryMembersResponse = exports.directoryMembersInput = exports.directoryScopesSchema = exports.directoryGroupIdSchema = exports.DIRECTORY_TOKEN_HEADER = void 0;
-exports.cacheManifestSchema = exports.CACHE_MAX_TTL_SECONDS = exports.preflightManagedFunction = exports.parseDeployedPolicy = exports.versionIsOlder = exports.sdkVersionLowerBound = void 0;
+exports.groupRosterAccessResultSchema = exports.groupRosterAccessTargetSchema = exports.cacheManifestSchema = exports.CACHE_MAX_TTL_SECONDS = exports.preflightManagedFunction = exports.parseDeployedPolicy = exports.versionIsOlder = exports.sdkVersionLowerBound = void 0;
 exports.readCacheConfiguration = readCacheConfiguration;
 var directory_config_1 = require("./directory-config");
 Object.defineProperty(exports, "DIRECTORY_TOKEN_HEADER", { enumerable: true, get: function () { return directory_config_1.DIRECTORY_TOKEN_HEADER; } });
@@ -118,3 +118,6 @@ function readCacheConfiguration(manifest) {
     return exports.cacheManifestSchema.parse(cache ?? {});
 }
 __exportStar(require("./directory-roster-contract"), exports);
+var contracts_1 = require("@sequenceholdings/platform/contracts");
+Object.defineProperty(exports, "groupRosterAccessTargetSchema", { enumerable: true, get: function () { return contracts_1.groupRosterAccessTargetSchema; } });
+Object.defineProperty(exports, "groupRosterAccessResultSchema", { enumerable: true, get: function () { return contracts_1.groupRosterAccessResultSchema; } });

package/dist/directory-config.d.ts

@@ -1,23 +1 @@
-import { z } from 'zod';
-export declare const DIRECTORY_TOKEN_HEADER = "x-sequence-directory-token";
-export declare const directoryGroupIdSchema: z.ZodString;
-export declare const directoryScopesSchema: z.ZodObject<{
-    groups: z.ZodArray<z.ZodString>;
-}, z.core.$strict>;
-export declare const directoryMembersInput: z.ZodUnion<readonly [z.ZodObject<{
-    groupId: z.ZodString;
-    userIds: z.ZodArray<z.ZodString>;
-}, z.core.$strict>, z.ZodObject<{
-    groupId: z.ZodString;
-    subs: z.ZodArray<z.ZodString>;
-}, z.core.$strict>]>;
-export declare const directoryMembersResponse: z.ZodObject<{
-    members: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        sub: z.ZodString;
-        name: z.ZodString;
-        email: z.ZodString;
-        deactivated: z.ZodLiteral<false>;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-export declare function readDirectoryGroups(manifest: unknown): string[];
+export { DIRECTORY_TOKEN_HEADER, directoryGroupIdSchema, directoryScopesSchema, directoryMembersInput, directoryMembersResponse, readDirectoryGroups, } from "@sequenceholdings/platform/contracts";