@sequenceholdings/managed-functions 0.4.5 → 0.5.1

package/dist/directory-config.js

@@ -1,22 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.directoryMembersResponse = exports.directoryMembersInput = exports.directoryScopesSchema = exports.directoryGroupIdSchema = exports.DIRECTORY_TOKEN_HEADER = void 0;
-exports.readDirectoryGroups = readDirectoryGroups;
-const zod_1 = require("zod");
-exports.DIRECTORY_TOKEN_HEADER = 'x-sequence-directory-token';
-exports.directoryGroupIdSchema = zod_1.z.string().regex(/^(?:[a-f0-9]{24}|[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})$/i);
-exports.directoryScopesSchema = zod_1.z.object({
-    groups: zod_1.z.array(exports.directoryGroupIdSchema).min(1).max(16),
-}).strict();
-const identity = zod_1.z.string().min(1).max(256).regex(/^[^\x00-\x1f\x7f]+$/);
-exports.directoryMembersInput = zod_1.z.union([
-    zod_1.z.object({ groupId: exports.directoryGroupIdSchema, userIds: zod_1.z.array(identity).min(1).max(50) }).strict(),
-    zod_1.z.object({ groupId: exports.directoryGroupIdSchema, subs: zod_1.z.array(identity).min(1).max(50) }).strict(),
-]);
-exports.directoryMembersResponse = zod_1.z.object({ members: zod_1.z.array(zod_1.z.object({
-        id: zod_1.z.string(), sub: identity, name: zod_1.z.string(), email: zod_1.z.string(), deactivated: zod_1.z.literal(false),
-    }).strict()).max(50) }).strict();
-function readDirectoryGroups(manifest) {
-    const parsed = zod_1.z.object({ capabilities: zod_1.z.object({ directory: zod_1.z.object({ groups: exports.directoryScopesSchema.shape.groups.optional() }).optional() }).optional() }).safeParse(manifest);
-    return parsed.success ? parsed.data.capabilities?.directory?.groups ?? [] : [];
-}
+exports.readDirectoryGroups = exports.directoryMembersResponse = exports.directoryMembersInput = exports.directoryScopesSchema = exports.directoryGroupIdSchema = exports.DIRECTORY_TOKEN_HEADER = void 0;
+var contracts_1 = require("@sequenceholdings/platform/contracts");
+Object.defineProperty(exports, "DIRECTORY_TOKEN_HEADER", { enumerable: true, get: function () { return contracts_1.DIRECTORY_TOKEN_HEADER; } });
+Object.defineProperty(exports, "directoryGroupIdSchema", { enumerable: true, get: function () { return contracts_1.directoryGroupIdSchema; } });
+Object.defineProperty(exports, "directoryScopesSchema", { enumerable: true, get: function () { return contracts_1.directoryScopesSchema; } });
+Object.defineProperty(exports, "directoryMembersInput", { enumerable: true, get: function () { return contracts_1.directoryMembersInput; } });
+Object.defineProperty(exports, "directoryMembersResponse", { enumerable: true, get: function () { return contracts_1.directoryMembersResponse; } });
+Object.defineProperty(exports, "readDirectoryGroups", { enumerable: true, get: function () { return contracts_1.readDirectoryGroups; } });

package/dist/directory-contract.d.ts

@@ -1,68 +1,2 @@
-import { z } from 'zod';
-export declare const FUNCTION_DIRECTORY_TOKEN_HEADER = "x-sequence-directory-service-token";
-export declare const FUNCTION_DIRECTORY_RESOLVE_PATH = "/api/managed-functions/directory/resolve";
-export declare const DIRECTORY_PRINCIPALS_PER_REQUEST = 50;
-export declare const directoryTenantSchema: z.ZodString;
-export declare const directoryPrincipalLookupSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
-    type: z.ZodLiteral<"email">;
-    value: z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>;
-}, z.core.$strict>, z.ZodObject<{
-    type: z.ZodLiteral<"sub">;
-    value: z.ZodString;
-}, z.core.$strict>], "type">;
-export type DirectoryPrincipalLookup = z.infer<typeof directoryPrincipalLookupSchema>;
-export declare const directoryPrincipalResolveRequestSchema: z.ZodObject<{
-    tenant: z.ZodString;
-    lookups: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"email">;
-        value: z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>;
-    }, z.core.$strict>, z.ZodObject<{
-        type: z.ZodLiteral<"sub">;
-        value: z.ZodString;
-    }, z.core.$strict>], "type">>;
-}, z.core.$strict>;
-export type DirectoryPrincipalResolveRequest = z.infer<typeof directoryPrincipalResolveRequestSchema>;
-export declare const directoryResolvedPrincipalSchema: z.ZodObject<{
-    lookup: z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"email">;
-        value: z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>;
-    }, z.core.$strict>, z.ZodObject<{
-        type: z.ZodLiteral<"sub">;
-        value: z.ZodString;
-    }, z.core.$strict>], "type">;
-    sub: z.ZodString;
-    email: z.ZodUnion<readonly [z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>, z.ZodLiteral<"">]>;
-    name: z.ZodString;
-}, z.core.$strict>;
-export declare const directoryPrincipalResolutionSchema: z.ZodObject<{
-    resolved: z.ZodArray<z.ZodObject<{
-        lookup: z.ZodDiscriminatedUnion<[z.ZodObject<{
-            type: z.ZodLiteral<"email">;
-            value: z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>;
-        }, z.core.$strict>, z.ZodObject<{
-            type: z.ZodLiteral<"sub">;
-            value: z.ZodString;
-        }, z.core.$strict>], "type">;
-        sub: z.ZodString;
-        email: z.ZodUnion<readonly [z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>, z.ZodLiteral<"">]>;
-        name: z.ZodString;
-    }, z.core.$strict>>;
-    unresolved: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"email">;
-        value: z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>;
-    }, z.core.$strict>, z.ZodObject<{
-        type: z.ZodLiteral<"sub">;
-        value: z.ZodString;
-    }, z.core.$strict>], "type">>;
-}, z.core.$strict>;
-export type DirectoryPrincipalResolution = z.infer<typeof directoryPrincipalResolutionSchema>;
-export declare const functionDirectoryScopesSchema: z.ZodObject<{
-    resolve: z.ZodArray<z.ZodString>;
-}, z.core.$strict>;
-export declare function readFunctionDirectoryScopes(manifest: unknown): string[];
-export declare class DirectoryPrincipalResolveError extends Error {
-    readonly status: number;
-    readonly code: string;
-    readonly name = "DirectoryPrincipalResolveError";
-    constructor(status: number, code: string, message: string);
-}
+export { FUNCTION_DIRECTORY_TOKEN_HEADER, FUNCTION_DIRECTORY_RESOLVE_PATH, DIRECTORY_PRINCIPALS_PER_REQUEST, directoryTenantSchema, directoryPrincipalLookupSchema, directoryPrincipalResolveRequestSchema, directoryResolvedPrincipalSchema, directoryPrincipalResolutionSchema, functionDirectoryScopesSchema, readFunctionDirectoryScopes, DirectoryPrincipalResolveError, } from "@sequenceholdings/platform/contracts";
+export type { DirectoryPrincipalLookup, DirectoryPrincipalResolveRequest, DirectoryPrincipalResolution, } from "@sequenceholdings/platform/contracts";

package/dist/directory-contract.js

@@ -1,57 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DirectoryPrincipalResolveError = exports.functionDirectoryScopesSchema = exports.directoryPrincipalResolutionSchema = exports.directoryResolvedPrincipalSchema = exports.directoryPrincipalResolveRequestSchema = exports.directoryPrincipalLookupSchema = exports.directoryTenantSchema = exports.DIRECTORY_PRINCIPALS_PER_REQUEST = exports.FUNCTION_DIRECTORY_RESOLVE_PATH = exports.FUNCTION_DIRECTORY_TOKEN_HEADER = void 0;
-exports.readFunctionDirectoryScopes = readFunctionDirectoryScopes;
-const zod_1 = require("zod");
-exports.FUNCTION_DIRECTORY_TOKEN_HEADER = 'x-sequence-directory-service-token';
-exports.FUNCTION_DIRECTORY_RESOLVE_PATH = '/api/managed-functions/directory/resolve';
-exports.DIRECTORY_PRINCIPALS_PER_REQUEST = 50;
-exports.directoryTenantSchema = zod_1.z.string().min(1).max(32).regex(/^[a-z][a-z0-9]*(?:_[a-z0-9]+)*$/);
-const subject = zod_1.z.string().min(3).max(255).regex(/^[^\s:#]+\|[^\s:#]+$/);
-const email = zod_1.z.email().max(255).transform((value) => value.trim().toLowerCase());
-exports.directoryPrincipalLookupSchema = zod_1.z.discriminatedUnion('type', [
-    zod_1.z.strictObject({ type: zod_1.z.literal('email'), value: email }),
-    zod_1.z.strictObject({ type: zod_1.z.literal('sub'), value: subject }),
-]);
-exports.directoryPrincipalResolveRequestSchema = zod_1.z.strictObject({
-    tenant: exports.directoryTenantSchema,
-    lookups: zod_1.z.array(exports.directoryPrincipalLookupSchema).min(1).max(exports.DIRECTORY_PRINCIPALS_PER_REQUEST)
-        .refine((values) => new Set(values.map((value) => `${value.type}:${value.value}`)).size === values.length, 'Lookups must be distinct'),
-});
-exports.directoryResolvedPrincipalSchema = zod_1.z.strictObject({
-    lookup: exports.directoryPrincipalLookupSchema,
-    sub: subject.refine((value) => !value.startsWith('service-account|') && !value.startsWith('managed-function|') && !value.endsWith('@clients') && value !== 'google-apps|sequence.agent@seqholdings.com', 'Only human directory principals can resolve'),
-    email: zod_1.z.union([email, zod_1.z.literal('')]),
-    name: zod_1.z.string().max(255),
-});
-exports.directoryPrincipalResolutionSchema = zod_1.z.strictObject({
-    resolved: zod_1.z.array(exports.directoryResolvedPrincipalSchema).max(exports.DIRECTORY_PRINCIPALS_PER_REQUEST),
-    unresolved: zod_1.z.array(exports.directoryPrincipalLookupSchema).max(exports.DIRECTORY_PRINCIPALS_PER_REQUEST),
-});
-exports.functionDirectoryScopesSchema = zod_1.z.strictObject({
-    resolve: zod_1.z.array(exports.directoryTenantSchema).min(1).max(16)
-        .refine((values) => new Set(values).size === values.length, 'Tenant scopes must be distinct'),
-});
-function readFunctionDirectoryScopes(manifest) {
-    if (typeof manifest !== 'object' || manifest === null)
-        return [];
-    const capabilities = Reflect.get(manifest, 'capabilities');
-    if (typeof capabilities !== 'object' || capabilities === null)
-        return [];
-    const directory = Reflect.get(capabilities, 'directory');
-    if (typeof directory !== 'object' || directory === null)
-        return [];
-    const resolve = Reflect.get(directory, 'resolve');
-    return resolve === undefined ? [] : exports.functionDirectoryScopesSchema.parse({ resolve }).resolve;
-}
-class DirectoryPrincipalResolveError extends Error {
-    status;
-    code;
-    name = 'DirectoryPrincipalResolveError';
-    constructor(status, code, message) {
-        super(message);
-        this.status = status;
-        this.code = code;
-    }
-}
-exports.DirectoryPrincipalResolveError = DirectoryPrincipalResolveError;
+exports.DirectoryPrincipalResolveError = exports.readFunctionDirectoryScopes = exports.functionDirectoryScopesSchema = exports.directoryPrincipalResolutionSchema = exports.directoryResolvedPrincipalSchema = exports.directoryPrincipalResolveRequestSchema = exports.directoryPrincipalLookupSchema = exports.directoryTenantSchema = exports.DIRECTORY_PRINCIPALS_PER_REQUEST = exports.FUNCTION_DIRECTORY_RESOLVE_PATH = exports.FUNCTION_DIRECTORY_TOKEN_HEADER = void 0;
+var contracts_1 = require("@sequenceholdings/platform/contracts");
+Object.defineProperty(exports, "FUNCTION_DIRECTORY_TOKEN_HEADER", { enumerable: true, get: function () { return contracts_1.FUNCTION_DIRECTORY_TOKEN_HEADER; } });
+Object.defineProperty(exports, "FUNCTION_DIRECTORY_RESOLVE_PATH", { enumerable: true, get: function () { return contracts_1.FUNCTION_DIRECTORY_RESOLVE_PATH; } });
+Object.defineProperty(exports, "DIRECTORY_PRINCIPALS_PER_REQUEST", { enumerable: true, get: function () { return contracts_1.DIRECTORY_PRINCIPALS_PER_REQUEST; } });
+Object.defineProperty(exports, "directoryTenantSchema", { enumerable: true, get: function () { return contracts_1.directoryTenantSchema; } });
+Object.defineProperty(exports, "directoryPrincipalLookupSchema", { enumerable: true, get: function () { return contracts_1.directoryPrincipalLookupSchema; } });
+Object.defineProperty(exports, "directoryPrincipalResolveRequestSchema", { enumerable: true, get: function () { return contracts_1.directoryPrincipalResolveRequestSchema; } });
+Object.defineProperty(exports, "directoryResolvedPrincipalSchema", { enumerable: true, get: function () { return contracts_1.directoryResolvedPrincipalSchema; } });
+Object.defineProperty(exports, "directoryPrincipalResolutionSchema", { enumerable: true, get: function () { return contracts_1.directoryPrincipalResolutionSchema; } });
+Object.defineProperty(exports, "functionDirectoryScopesSchema", { enumerable: true, get: function () { return contracts_1.functionDirectoryScopesSchema; } });
+Object.defineProperty(exports, "readFunctionDirectoryScopes", { enumerable: true, get: function () { return contracts_1.readFunctionDirectoryScopes; } });
+Object.defineProperty(exports, "DirectoryPrincipalResolveError", { enumerable: true, get: function () { return contracts_1.DirectoryPrincipalResolveError; } });

package/dist/directory-roster-contract.d.ts

@@ -1,22 +1,2 @@
-import { z } from 'zod';
-export declare const FUNCTION_DIRECTORY_ROSTER_PATH = "/api/managed-functions/directory/roster";
-export declare const functionDirectoryRostersSchema: z.ZodArray<z.ZodString>;
-export declare const directoryRosterQuerySchema: z.ZodObject<{
-    tenant: z.ZodString;
-    groupId: z.ZodString;
-    limit: z.ZodDefault<z.ZodNumber>;
-    cursor: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-export declare const directoryRosterPageSchema: z.ZodObject<{
-    members: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        sub: z.ZodString;
-        name: z.ZodString;
-        email: z.ZodString;
-        deactivated: z.ZodLiteral<false>;
-    }, z.core.$strict>>;
-    nextCursor: z.ZodNullable<z.ZodString>;
-}, z.core.$strict>;
-export type DirectoryRosterQuery = z.input<typeof directoryRosterQuerySchema>;
-export type DirectoryRosterPage = z.infer<typeof directoryRosterPageSchema>;
-export declare function readFunctionDirectoryRosterGroups(manifest: unknown): string[];
+export { FUNCTION_DIRECTORY_ROSTER_PATH, functionDirectoryRostersSchema, directoryRosterQuerySchema, directoryRosterPageSchema, readFunctionDirectoryRosterGroups, } from "@sequenceholdings/platform/contracts";
+export type { DirectoryRosterQuery, DirectoryRosterPage, } from "@sequenceholdings/platform/contracts";

package/dist/directory-roster-contract.js

@@ -1,24 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.directoryRosterPageSchema = exports.directoryRosterQuerySchema = exports.functionDirectoryRostersSchema = exports.FUNCTION_DIRECTORY_ROSTER_PATH = void 0;
-exports.readFunctionDirectoryRosterGroups = readFunctionDirectoryRosterGroups;
-const zod_1 = require("zod");
-const directory_config_1 = require("./directory-config");
-const directory_contract_1 = require("./directory-contract");
-exports.FUNCTION_DIRECTORY_ROSTER_PATH = '/api/managed-functions/directory/roster';
-exports.functionDirectoryRostersSchema = zod_1.z.array(directory_config_1.directoryGroupIdSchema).min(1).max(16)
-    .refine(groups => new Set(groups).size === groups.length, 'Roster groups must be distinct');
-exports.directoryRosterQuerySchema = zod_1.z.object({
-    tenant: directory_contract_1.directoryTenantSchema,
-    groupId: directory_config_1.directoryGroupIdSchema,
-    limit: zod_1.z.number().int().min(1).max(50).default(50),
-    cursor: zod_1.z.string().max(2048).optional(),
-}).strict();
-exports.directoryRosterPageSchema = zod_1.z.object({
-    members: zod_1.z.array(zod_1.z.object({ id: zod_1.z.string(), sub: zod_1.z.string(), name: zod_1.z.string(), email: zod_1.z.string(), deactivated: zod_1.z.literal(false) }).strict()).max(50),
-    nextCursor: zod_1.z.string().nullable(),
-}).strict();
-function readFunctionDirectoryRosterGroups(manifest) {
-    const parsed = zod_1.z.object({ capabilities: zod_1.z.object({ directory: zod_1.z.object({ rosters: exports.functionDirectoryRostersSchema.optional() }).optional() }).optional() }).safeParse(manifest);
-    return parsed.success ? parsed.data.capabilities?.directory?.rosters ?? [] : [];
-}
+exports.readFunctionDirectoryRosterGroups = exports.directoryRosterPageSchema = exports.directoryRosterQuerySchema = exports.functionDirectoryRostersSchema = exports.FUNCTION_DIRECTORY_ROSTER_PATH = void 0;
+var contracts_1 = require("@sequenceholdings/platform/contracts");
+Object.defineProperty(exports, "FUNCTION_DIRECTORY_ROSTER_PATH", { enumerable: true, get: function () { return contracts_1.FUNCTION_DIRECTORY_ROSTER_PATH; } });
+Object.defineProperty(exports, "functionDirectoryRostersSchema", { enumerable: true, get: function () { return contracts_1.functionDirectoryRostersSchema; } });
+Object.defineProperty(exports, "directoryRosterQuerySchema", { enumerable: true, get: function () { return contracts_1.directoryRosterQuerySchema; } });
+Object.defineProperty(exports, "directoryRosterPageSchema", { enumerable: true, get: function () { return contracts_1.directoryRosterPageSchema; } });
+Object.defineProperty(exports, "readFunctionDirectoryRosterGroups", { enumerable: true, get: function () { return contracts_1.readFunctionDirectoryRosterGroups; } });

package/dist/directory.d.ts

@@ -1,15 +1,11 @@
-import { z } from 'zod';
-import { directoryMembersInput, directoryMembersResponse } from './directory-config';
-import { type FunctionInvocationClientOptions } from './invocation-client';
+import { z } from "zod";
+import { directoryMembersInput, directoryMembersResponse } from "./directory-config";
+import { type FunctionInvocationClientOptions } from "./invocation-client";
 export type FunctionDirectoryOptions = FunctionInvocationClientOptions;
 export type FunctionDirectoryMembersQuery = z.infer<typeof directoryMembersInput>;
 export type FunctionDirectoryMembers = z.infer<typeof directoryMembersResponse>;
 export interface FunctionDirectoryClient {
     resolveMembers(input: FunctionDirectoryMembersQuery): Promise<FunctionDirectoryMembers>;
 }
-export declare class FunctionDirectoryReadError extends Error {
-    readonly status: number;
-    readonly code: string;
-    constructor(status: number, code: string, message: string);
-}
+export { FunctionDirectoryReadError } from "@sequenceholdings/platform/adapters";
 export declare function createFunctionDirectoryClient({ request, baseUrl, fetchImpl, }: FunctionDirectoryOptions): FunctionDirectoryClient;

package/dist/directory.js

@@ -2,35 +2,27 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FunctionDirectoryReadError = void 0;
 exports.createFunctionDirectoryClient = createFunctionDirectoryClient;
+const adapters_1 = require("@sequenceholdings/platform/adapters");
 const zod_1 = require("zod");
 const directory_config_1 = require("./directory-config");
 const invocation_client_1 = require("./invocation-client");
-class FunctionDirectoryReadError extends Error {
-    status;
-    code;
-    constructor(status, code, message) {
-        super(message);
-        this.status = status;
-        this.code = code;
-        this.name = 'FunctionDirectoryReadError';
-    }
-}
-exports.FunctionDirectoryReadError = FunctionDirectoryReadError;
+var adapters_2 = require("@sequenceholdings/platform/adapters");
+Object.defineProperty(exports, "FunctionDirectoryReadError", { enumerable: true, get: function () { return adapters_2.FunctionDirectoryReadError; } });
 function createFunctionDirectoryClient({ request, baseUrl, fetchImpl, }) {
     const credential = (0, invocation_client_1.readInvocationCredential)({
         request,
         header: directory_config_1.DIRECTORY_TOKEN_HEADER,
         maxBytes: 8192,
-        invalidContext: () => new FunctionDirectoryReadError(401, 'invalid_context', 'This invocation has no valid directory-read credential'),
+        invalidContext: () => new adapters_1.FunctionDirectoryReadError(401, "invalid_context", "This invocation has no valid directory-read credential"),
         claimsSchema: zod_1.z.object({
-            audience: zod_1.z.literal('atlas-function-group-directory-v1'),
+            audience: zod_1.z.literal("atlas-function-group-directory-v1"),
             sub: zod_1.z
                 .string()
                 .min(1)
                 .max(256)
-                .refine((sub) => sub.includes('|') &&
-                !sub.startsWith('service-account|') &&
-                !sub.endsWith('@clients')),
+                .refine((sub) => sub.includes("|") &&
+                !sub.startsWith("service-account|") &&
+                !sub.endsWith("@clients")),
             functionId: zod_1.z.string().min(1),
             invocationId: zod_1.z.string().min(1),
             exp: zod_1.z.number().int(),
@@ -39,27 +31,17 @@ function createFunctionDirectoryClient({ request, baseUrl, fetchImpl, }) {
     const read = (0, invocation_client_1.createInvocationReadTransport)({
         baseUrl,
         fetchImpl,
-        path: '/api/managed-functions/directory/members',
+        path: "/api/managed-functions/directory/members",
         header: directory_config_1.DIRECTORY_TOKEN_HEADER,
         credential,
         timeoutMs: 10_000,
-        error: (status, code, message) => new FunctionDirectoryReadError(status, code, message),
+        error: (status, code, message) => new adapters_1.FunctionDirectoryReadError(status, code, message),
         failure: {
-            code: 'directory_read_failed',
-            message: 'Directory read failed',
+            code: "directory_read_failed",
+            message: "Directory read failed",
         },
     });
-    return {
-        async resolveMembers(input) {
-            const body = directory_config_1.directoryMembersInput.parse(input);
-            const result = await read({ body, schema: directory_config_1.directoryMembersResponse });
-            const selectors = new Set('userIds' in body ? body.userIds : body.subs);
-            const returned = result.members.map((member) => 'userIds' in body ? member.id : member.sub);
-            if (new Set(returned).size !== returned.length ||
-                returned.some((value) => !selectors.has(value))) {
-                throw new FunctionDirectoryReadError(502, 'malformed_response', 'Atlas returned duplicate or unrequested directory members');
-            }
-            return result;
-        },
-    };
+    return (0, adapters_1.createCallerDirectoryClient)({
+        send: (body) => read({ body, schema: zod_1.z.unknown() }),
+    });
 }

package/dist/group-roster-access.d.ts

@@ -0,0 +1,7 @@
+export { createGroupRosterAccessClient } from "@sequenceholdings/platform/server";
+export type { GroupRosterAccessClient } from "@sequenceholdings/platform/server";
+export { groupRosterAccessTargetSchema, groupRosterAccessResultSchema, } from "@sequenceholdings/platform/contracts";
+export type { GroupRosterAccessTarget, GroupRosterAccessResult, } from "@sequenceholdings/platform/contracts";
+export type GroupRosterAccessOptions = {
+    transport: import("@sequenceholdings/platform/browser").PlatformTransport<"operator">;
+};

package/dist/group-roster-access.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.groupRosterAccessResultSchema = exports.groupRosterAccessTargetSchema = exports.createGroupRosterAccessClient = void 0;
+var server_1 = require("@sequenceholdings/platform/server");
+Object.defineProperty(exports, "createGroupRosterAccessClient", { enumerable: true, get: function () { return server_1.createGroupRosterAccessClient; } });
+var contracts_1 = require("@sequenceholdings/platform/contracts");
+Object.defineProperty(exports, "groupRosterAccessTargetSchema", { enumerable: true, get: function () { return contracts_1.groupRosterAccessTargetSchema; } });
+Object.defineProperty(exports, "groupRosterAccessResultSchema", { enumerable: true, get: function () { return contracts_1.groupRosterAccessResultSchema; } });

package/dist/index.d.ts

@@ -1,44 +1,44 @@
-export { createFunctionDirectoryClient, FunctionDirectoryReadError } from './directory';
-export type { FunctionDirectoryClient, FunctionDirectoryOptions, FunctionDirectoryMembers, FunctionDirectoryMembersQuery } from './directory';
-export type { FunctionInvocationClientOptions } from './invocation-client';
-export { functionLatticeContextCapabilitySchema, readFunctionLatticeContextCapability } from './lattice-capability';
-export { createFunctionLatticeClient } from './lattice-provenance';
-export { functionLatticeParallelSnapshotSchema, functionLatticeParallelSnapshotQuerySchema } from './lattice-provenance-contract';
-export type { FunctionLatticeParallelSnapshot, FunctionLatticeParallelSnapshotQuery } from './lattice-provenance-contract';
-export { functionLatticeStartProvenanceSchema } from './lattice-provenance-contract';
-export type { FunctionLatticeStartProvenance } from './lattice-provenance-contract';
-export * from './invocation-contract';
-export * from './abrigo';
-export { createFunctionInvocationClient } from './invocation';
-export type { FunctionInvocationClient } from './invocation';
-export { FUNCTION_LATTICE_CONTEXT_PATH, FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER, FunctionLatticeContextError, functionLatticeContextRequestSchema, functionLatticeExecutionContextSchema, functionLatticeHumanCompletionQuerySchema, functionLatticeHumanCompletionSchema } from './lattice-provenance-contract';
-export type { FunctionLatticeClient, FunctionLatticeClientOptions } from './lattice-provenance';
-export { functionLatticeHumanCompletionsQuerySchema, functionLatticeHumanCompletionsPageSchema } from './lattice-provenance-contract';
-export type { FunctionLatticeHumanCompletionsQuery, FunctionLatticeHumanCompletionsPage } from './lattice-provenance-contract';
-export type { FunctionLatticeContextRequest, FunctionLatticeExecutionContext, FunctionLatticeHumanCompletion, FunctionLatticeHumanCompletionQuery } from './lattice-provenance-contract';
-export { createFunctionServiceProcessesClient, FunctionProcessReadError } from './processes';
-export { createFunctionServiceAgentsClient, FunctionAgentReadError } from './agents';
-export { createFunctionAgentEvidenceClient } from './agent-evidence';
-export { createFunctionServiceWorkflowsClient, createFunctionWorkflowEvidenceClient } from './workflow-source';
-export type { FunctionServiceWorkflowsClient, FunctionServiceWorkflowsOptions, FunctionWorkflowEvidenceClient, FunctionWorkflowSourceEvidenceInput } from './workflow-source';
-export * from './workflow-source-contract';
-export type { FunctionAgentEvidenceClient, FunctionAgentSourceEvidenceInput, FunctionAgentConversationEvidenceInput } from './agent-evidence';
-export type { FunctionAgentSourceEvidenceCapture, FunctionAgentSourceEvidenceClaims, FunctionAgentSourceEvidenceVerification, FunctionAgentConversationResponse, FunctionAgentConversationEvidenceResponse, FunctionAgentConversationEvidenceCapture, FunctionAgentSourceExecution } from './agent-source-evidence-contract';
-export { functionAgentSourceResponseSchema, functionAgentSourceEvidenceRequestSchema, functionAgentSourceEvidenceCaptureSchema, functionAgentConversationEvidenceResponseSchema, functionAgentConversationEvidenceCaptureSchema, functionAgentConversationEvidenceRequestSchema, functionAgentSourceExecutionSchema } from './agent-source-evidence-contract';
-export { functionSourceJobAdmissionSchema } from './agent-source-evidence-contract';
-export type { FunctionSourceJobAdmission } from './agent-source-evidence-contract';
-export type { FunctionServiceAgentsClient, FunctionServiceAgentsOptions, FunctionAgentCompletedRunQuery, FunctionAgentCompletedRun } from './agents';
-export { createFunctionServiceMonitoringClient } from './monitoring';
-export { FunctionMonitoringError, monitoringPayloadHash } from './monitoring-contract';
-export { monitoringEventsSchema, monitoringPublishSchema } from './monitoring-contract';
-export { functionMonitoringAnnotationSchema } from './monitoring-annotations';
-export type { MonitoringDeltaEvent, MonitoringPublish, MonitoringDeliveryKey, MonitoringDeliveryReceipt } from './monitoring-contract';
-export type { MonitoringCatalogQuery, MonitoringBucketCatalog } from './monitoring-contract';
-export type { FunctionMonitoringAnnotation, MonitoringJson } from './monitoring-annotations';
-export type { FunctionServiceMonitoringClient, FunctionServiceMonitoringOptions } from './monitoring';
-export type { FunctionServiceProcessesClient, FunctionServiceProcessesOptions, FunctionProcessRunQuery, FunctionProcessRunSummary, FunctionProcessRunStatus, FunctionProcessRunsPage, FunctionProcessRunsPageQuery, FunctionProcessReadRequest, FunctionProcessCompletedAgentReferenceQuery, FunctionProcessCompletedAgentReference, FunctionProcessCompletedNode, FunctionProcessCompletedNodeQuery } from './processes';
-export { installFunctionTracing, runWithFunctionTracing } from './tracing';
-export { createFunctionStorageClient } from './storage';
+export { createFunctionDirectoryClient, FunctionDirectoryReadError, } from "./directory";
+export type { FunctionDirectoryClient, FunctionDirectoryOptions, FunctionDirectoryMembers, FunctionDirectoryMembersQuery, } from "./directory";
+export type { FunctionInvocationClientOptions } from "./invocation-client";
+export { functionLatticeContextCapabilitySchema, readFunctionLatticeContextCapability, } from "./lattice-capability";
+export { createFunctionLatticeClient } from "./lattice-provenance";
+export { functionLatticeParallelSnapshotSchema, functionLatticeParallelSnapshotQuerySchema, } from "./lattice-provenance-contract";
+export type { FunctionLatticeParallelSnapshot, FunctionLatticeParallelSnapshotQuery, } from "./lattice-provenance-contract";
+export { functionLatticeStartProvenanceSchema } from "./lattice-provenance-contract";
+export type { FunctionLatticeStartProvenance } from "./lattice-provenance-contract";
+export * from "./invocation-contract";
+export * from "./abrigo";
+export { createFunctionInvocationClient } from "./invocation";
+export type { FunctionInvocationClient } from "./invocation";
+export { FUNCTION_LATTICE_CONTEXT_PATH, FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER, FunctionLatticeContextError, functionLatticeContextRequestSchema, functionLatticeExecutionContextSchema, functionLatticeHumanCompletionQuerySchema, functionLatticeHumanCompletionSchema, } from "./lattice-provenance-contract";
+export type { FunctionLatticeClient, FunctionLatticeClientOptions, } from "./lattice-provenance";
+export { functionLatticeHumanCompletionsQuerySchema, functionLatticeHumanCompletionsPageSchema, } from "./lattice-provenance-contract";
+export type { FunctionLatticeHumanCompletionsQuery, FunctionLatticeHumanCompletionsPage, } from "./lattice-provenance-contract";
+export type { FunctionLatticeContextRequest, FunctionLatticeExecutionContext, FunctionLatticeHumanCompletion, FunctionLatticeHumanCompletionQuery, } from "./lattice-provenance-contract";
+export { createFunctionServiceProcessesClient, FunctionProcessReadError, } from "./processes";
+export { createFunctionServiceAgentsClient, FunctionAgentReadError, } from "./agents";
+export { createFunctionAgentEvidenceClient } from "./agent-evidence";
+export { createFunctionServiceWorkflowsClient, createFunctionWorkflowEvidenceClient, } from "./workflow-source";
+export type { FunctionServiceWorkflowsClient, FunctionServiceWorkflowsOptions, FunctionWorkflowEvidenceClient, FunctionWorkflowSourceEvidenceInput, } from "./workflow-source";
+export * from "./workflow-source-contract";
+export type { FunctionAgentEvidenceClient, FunctionAgentSourceEvidenceInput, FunctionAgentConversationEvidenceInput, } from "./agent-evidence";
+export type { FunctionAgentSourceEvidenceCapture, FunctionAgentSourceEvidenceClaims, FunctionAgentSourceEvidenceVerification, FunctionAgentConversationResponse, FunctionAgentConversationEvidenceResponse, FunctionAgentConversationEvidenceCapture, FunctionAgentSourceExecution, } from "./agent-source-evidence-contract";
+export { functionAgentSourceResponseSchema, functionAgentSourceEvidenceRequestSchema, functionAgentSourceEvidenceCaptureSchema, functionAgentConversationEvidenceResponseSchema, functionAgentConversationEvidenceCaptureSchema, functionAgentConversationEvidenceRequestSchema, functionAgentSourceExecutionSchema, } from "./agent-source-evidence-contract";
+export { functionSourceJobAdmissionSchema } from "./agent-source-evidence-contract";
+export type { FunctionSourceJobAdmission } from "./agent-source-evidence-contract";
+export type { FunctionServiceAgentsClient, FunctionServiceAgentsOptions, FunctionAgentCompletedRunQuery, FunctionAgentCompletedRun, } from "./agents";
+export { createFunctionServiceMonitoringClient } from "./monitoring";
+export { FunctionMonitoringError, monitoringPayloadHash, } from "./monitoring-contract";
+export { monitoringEventsSchema, monitoringPublishSchema, } from "./monitoring-contract";
+export { functionMonitoringAnnotationSchema } from "./monitoring-annotations";
+export type { MonitoringDeltaEvent, MonitoringPublish, MonitoringDeliveryKey, MonitoringDeliveryReceipt, } from "./monitoring-contract";
+export type { MonitoringCatalogQuery, MonitoringBucketCatalog, } from "./monitoring-contract";
+export type { FunctionMonitoringAnnotation, MonitoringJson, } from "./monitoring-annotations";
+export type { FunctionServiceMonitoringClient, FunctionServiceMonitoringOptions, } from "./monitoring";
+export type { FunctionServiceProcessesClient, FunctionServiceProcessesOptions, FunctionProcessRunQuery, FunctionProcessRunSummary, FunctionProcessRunStatus, FunctionProcessRunsPage, FunctionProcessRunsPageQuery, FunctionProcessReadRequest, FunctionProcessCompletedAgentReferenceQuery, FunctionProcessCompletedAgentReference, FunctionProcessCompletedNode, FunctionProcessCompletedNodeQuery, } from "./processes";
+export { installFunctionTracing, runWithFunctionTracing } from "./tracing";
+export { createFunctionStorageClient } from "./storage";
 import { type CacheManager } from "./cache";
 export { CacheError, createCacheManager } from "./cache";
 export type { CacheManager, CacheOptions, CacheErrorCode, JsonValue, } from "./cache";
@@ -50,8 +50,11 @@ export interface ManagedFunctionContext {
 export declare function createManagedFunctionContext({ env, }?: {
     env?: NodeJS.ProcessEnv;
 }): ManagedFunctionContext;
-export * from './directory-contract';
-export { createFunctionServiceDirectoryClient, type FunctionServiceDirectoryOptions, type FunctionServiceDirectoryClient } from './service-directory';
-export * from './directory-roster-contract';
-export { functionLatticeRunCreatorAccessSchema } from './lattice-provenance-contract';
-export type { FunctionLatticeRunCreatorAccess } from './lattice-provenance-contract';
+export * from "./directory-contract";
+export { createFunctionServiceDirectoryClient, type FunctionServiceDirectoryOptions, type FunctionServiceDirectoryClient, } from "./service-directory";
+export * from "./directory-roster-contract";
+export { functionLatticeRunCreatorAccessSchema } from "./lattice-provenance-contract";
+export type { FunctionLatticeRunCreatorAccess } from "./lattice-provenance-contract";
+export { createGroupRosterAccessClient, groupRosterAccessTargetSchema, groupRosterAccessResultSchema, } from "./group-roster-access";
+export type { GroupRosterAccessClient, GroupRosterAccessOptions, GroupRosterAccessTarget, GroupRosterAccessResult, } from "./group-roster-access";
+export { createFunctionPlatformClient, type FunctionPlatformClient, type FunctionPlatformClientOptions, } from "./platform-client";

package/dist/index.js

@@ -14,7 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.functionLatticeRunCreatorAccessSchema = exports.createFunctionServiceDirectoryClient = exports.readCacheConfiguration = exports.cacheManifestSchema = exports.createCacheManager = exports.CacheError = exports.createFunctionStorageClient = exports.runWithFunctionTracing = exports.installFunctionTracing = exports.functionMonitoringAnnotationSchema = exports.monitoringPublishSchema = exports.monitoringEventsSchema = exports.monitoringPayloadHash = exports.FunctionMonitoringError = exports.createFunctionServiceMonitoringClient = exports.functionSourceJobAdmissionSchema = exports.functionAgentSourceExecutionSchema = exports.functionAgentConversationEvidenceRequestSchema = exports.functionAgentConversationEvidenceCaptureSchema = exports.functionAgentConversationEvidenceResponseSchema = exports.functionAgentSourceEvidenceCaptureSchema = exports.functionAgentSourceEvidenceRequestSchema = exports.functionAgentSourceResponseSchema = exports.createFunctionWorkflowEvidenceClient = exports.createFunctionServiceWorkflowsClient = exports.createFunctionAgentEvidenceClient = exports.FunctionAgentReadError = exports.createFunctionServiceAgentsClient = exports.FunctionProcessReadError = exports.createFunctionServiceProcessesClient = exports.functionLatticeHumanCompletionsPageSchema = exports.functionLatticeHumanCompletionsQuerySchema = exports.functionLatticeHumanCompletionSchema = exports.functionLatticeHumanCompletionQuerySchema = exports.functionLatticeExecutionContextSchema = exports.functionLatticeContextRequestSchema = exports.FunctionLatticeContextError = exports.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER = exports.FUNCTION_LATTICE_CONTEXT_PATH = exports.createFunctionInvocationClient = exports.functionLatticeStartProvenanceSchema = exports.functionLatticeParallelSnapshotQuerySchema = exports.functionLatticeParallelSnapshotSchema = exports.createFunctionLatticeClient = exports.readFunctionLatticeContextCapability = exports.functionLatticeContextCapabilitySchema = exports.FunctionDirectoryReadError = exports.createFunctionDirectoryClient = void 0;
+exports.groupRosterAccessTargetSchema = exports.createGroupRosterAccessClient = exports.functionLatticeRunCreatorAccessSchema = exports.createFunctionServiceDirectoryClient = exports.readCacheConfiguration = exports.cacheManifestSchema = exports.createCacheManager = exports.CacheError = exports.createFunctionStorageClient = exports.runWithFunctionTracing = exports.installFunctionTracing = exports.functionMonitoringAnnotationSchema = exports.monitoringPublishSchema = exports.monitoringEventsSchema = exports.monitoringPayloadHash = exports.FunctionMonitoringError = exports.createFunctionServiceMonitoringClient = exports.functionSourceJobAdmissionSchema = exports.functionAgentSourceExecutionSchema = exports.functionAgentConversationEvidenceRequestSchema = exports.functionAgentConversationEvidenceCaptureSchema = exports.functionAgentConversationEvidenceResponseSchema = exports.functionAgentSourceEvidenceCaptureSchema = exports.functionAgentSourceEvidenceRequestSchema = exports.functionAgentSourceResponseSchema = exports.createFunctionWorkflowEvidenceClient = exports.createFunctionServiceWorkflowsClient = exports.createFunctionAgentEvidenceClient = exports.FunctionAgentReadError = exports.createFunctionServiceAgentsClient = exports.FunctionProcessReadError = exports.createFunctionServiceProcessesClient = exports.functionLatticeHumanCompletionsPageSchema = exports.functionLatticeHumanCompletionsQuerySchema = exports.functionLatticeHumanCompletionSchema = exports.functionLatticeHumanCompletionQuerySchema = exports.functionLatticeExecutionContextSchema = exports.functionLatticeContextRequestSchema = exports.FunctionLatticeContextError = exports.FUNCTION_LATTICE_EXECUTION_TOKEN_HEADER = exports.FUNCTION_LATTICE_CONTEXT_PATH = exports.createFunctionInvocationClient = exports.functionLatticeStartProvenanceSchema = exports.functionLatticeParallelSnapshotQuerySchema = exports.functionLatticeParallelSnapshotSchema = exports.createFunctionLatticeClient = exports.readFunctionLatticeContextCapability = exports.functionLatticeContextCapabilitySchema = exports.FunctionDirectoryReadError = exports.createFunctionDirectoryClient = void 0;
+exports.createFunctionPlatformClient = exports.groupRosterAccessResultSchema = void 0;
 exports.createManagedFunctionContext = createManagedFunctionContext;
 var directory_1 = require("./directory");
 Object.defineProperty(exports, "createFunctionDirectoryClient", { enumerable: true, get: function () { return directory_1.createFunctionDirectoryClient; } });
@@ -142,3 +143,9 @@ Object.defineProperty(exports, "createFunctionServiceDirectoryClient", { enumera
 __exportStar(require("./directory-roster-contract"), exports);
 var lattice_provenance_contract_5 = require("./lattice-provenance-contract");
 Object.defineProperty(exports, "functionLatticeRunCreatorAccessSchema", { enumerable: true, get: function () { return lattice_provenance_contract_5.functionLatticeRunCreatorAccessSchema; } });
+var group_roster_access_1 = require("./group-roster-access");
+Object.defineProperty(exports, "createGroupRosterAccessClient", { enumerable: true, get: function () { return group_roster_access_1.createGroupRosterAccessClient; } });
+Object.defineProperty(exports, "groupRosterAccessTargetSchema", { enumerable: true, get: function () { return group_roster_access_1.groupRosterAccessTargetSchema; } });
+Object.defineProperty(exports, "groupRosterAccessResultSchema", { enumerable: true, get: function () { return group_roster_access_1.groupRosterAccessResultSchema; } });
+var platform_client_1 = require("./platform-client");
+Object.defineProperty(exports, "createFunctionPlatformClient", { enumerable: true, get: function () { return platform_client_1.createFunctionPlatformClient; } });

package/dist/invocation-client.d.ts

@@ -1,7 +1,7 @@
-import { z } from 'zod';
+import { z } from "zod";
 export interface FunctionInvocationClientOptions {
     request: {
-        headers: Pick<Headers, 'get'> | Readonly<Record<string, string | readonly string[] | undefined>>;
+        headers: Pick<Headers, "get"> | Readonly<Record<string, string | readonly string[] | undefined>>;
     };
     baseUrl: string;
     fetchImpl?: typeof globalThis.fetch;
@@ -9,7 +9,7 @@ export interface FunctionInvocationClientOptions {
 type ClientErrorFactory = (status: number, code: string, message: string) => Error;
 export declare function readInvocationCredential<T extends {
     exp: number;
-}>({ request, header, maxBytes, claimsSchema, invalidContext, }: Pick<FunctionInvocationClientOptions, 'request'> & {
+}>({ request, header, maxBytes, claimsSchema, invalidContext, }: Pick<FunctionInvocationClientOptions, "request"> & {
     header: string;
     maxBytes: number;
     claimsSchema: z.ZodType<T>;
@@ -18,7 +18,7 @@ export declare function readInvocationCredential<T extends {
     token: string;
     expiresAt: number;
 };
-export declare function createInvocationReadTransport({ baseUrl, fetchImpl, path, header, credential, additionalCredentials, timeoutMs, error, failure, }: Pick<FunctionInvocationClientOptions, 'baseUrl' | 'fetchImpl'> & {
+export declare function createInvocationReadTransport({ baseUrl, fetchImpl, path, header, credential, additionalCredentials, timeoutMs, error, failure, }: Pick<FunctionInvocationClientOptions, "baseUrl" | "fetchImpl"> & {
     path: string;
     header: string;
     credential: {