@stigmer/sdk 3.2.3 → 3.4.0

package/src/billing.ts

@@ -12,12 +12,21 @@ import {
   SetAutoRechargeConfigInputSchema,
   GetBillingUsageReportInputSchema,
   GetCustomerModelPricingInputSchema,
+  GetModelPricingGovernanceInputSchema,
+  DecideModelPricingOverrideInputSchema,
+  UpsertModelPricingBaselineInputSchema,
+  RetireModelPricingBaselineInputSchema,
+  ListModelPricingBaselinesInputSchema,
   type CreateCreditCheckoutSessionResponse,
   type CreateBillingPortalSessionResponse,
   type CreditLedgerResponse,
   type BillingUsageReportResponse,
   type CustomerModelPricingResponse,
+  type ModelPricingGovernanceResponse,
+  type ModelPricingBaselinesResponse,
 } from "@stigmer/protos/ai/stigmer/billing/v1/io_pb";
+import type { ModelPricingOverride } from "@stigmer/protos/ai/stigmer/billing/v1/pricing_override_pb";
+import type { ModelPricingBaseline } from "@stigmer/protos/ai/stigmer/billing/v1/model_pricing_baseline_pb";
 import type { BillingAccount, CreditBalance } from "@stigmer/protos/ai/stigmer/billing/v1/billing_account_pb";
 import type { LedgerEntryType, LedgerView } from "@stigmer/protos/ai/stigmer/billing/v1/enum_pb";
 import { PageInfoSchema } from "@stigmer/protos/ai/stigmer/commons/rpc/pagination_pb";
@@ -74,6 +83,49 @@ export interface GetCustomerModelPricingParams {
   readonly orgId?: string;
 }
 
+/** Parameters for creating or revising a model registry baseline entry. */
+export interface UpsertModelPricingBaselineParams {
+  /**
+   * The baseline entry to create or revise, keyed by
+   * (modelId, provider, harness). Lifecycle fields (baselineId, status,
+   * decision stamps, pricing effectiveAt) are server-owned and ignored.
+   */
+  readonly baseline: ModelPricingBaseline;
+  /** Optional operator note recorded on the revision for the audit trail. */
+  readonly revisionNote?: string;
+}
+
+/** Parameters for retiring a model from the registry catalog. */
+export interface RetireModelPricingBaselineParams {
+  readonly modelId: string;
+  readonly provider: string;
+  readonly harness: string;
+  /** Optional operator note recorded on the retirement. */
+  readonly revisionNote?: string;
+}
+
+/** Parameters for listing the model registry baseline catalog. */
+export interface ListModelPricingBaselinesParams {
+  /**
+   * When `true`, includes SUPERSEDED and RETIRED revisions (the full
+   * audit history). Default: ACTIVE documents only.
+   */
+  readonly includeHistory?: boolean;
+}
+
+/** Parameters for deciding a pending pricing override. */
+export interface DecideModelPricingOverrideParams {
+  /** The PENDING_SIGNOFF override to decide. */
+  readonly overrideId: string;
+  /**
+   * `true` approves (the override becomes ACTIVE and supersedes any
+   * current ACTIVE override on the same pricing key); `false` rejects.
+   */
+  readonly approve: boolean;
+  /** Optional note recorded on the decision for the audit trail. */
+  readonly decisionNote?: string;
+}
+
 /**
  * Client for the billing bounded context.
  *
@@ -270,4 +322,112 @@ export class BillingClient {
       throw wrapError(e);
     }
   }
+
+  /**
+   * Retrieve the platform pricing governance view: baseline vs effective
+   * rates per model, ACTIVE override provenance, and pending sign-off
+   * proposals from the pricing feedback loop.
+   *
+   * Platform-operator surface (`can_manage_model_pricing` on
+   * `platform:stigmer`): rates are raw provider prices, pre-markup.
+   */
+  async getModelPricingGovernance(): Promise<ModelPricingGovernanceResponse> {
+    try {
+      return await this.query.getModelPricingGovernance(
+        create(GetModelPricingGovernanceInputSchema, {}),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /**
+   * Record a human decision on a PENDING_SIGNOFF pricing override.
+   *
+   * Approving makes the override ACTIVE (superseding any current ACTIVE
+   * override on the same pricing key) and recomposes the effective
+   * registry; rejecting archives it for audit. Returns the decided
+   * override with the decision stamped.
+   */
+  async decideModelPricingOverride(
+    params: DecideModelPricingOverrideParams,
+  ): Promise<ModelPricingOverride> {
+    try {
+      return await this.command.decideModelPricingOverride(
+        create(DecideModelPricingOverrideInputSchema, {
+          overrideId: params.overrideId,
+          approve: params.approve,
+          decisionNote: params.decisionNote ?? "",
+        }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /**
+   * Retrieve the model registry baseline catalog: ACTIVE entries by
+   * default, or the full append-only revision history with
+   * `includeHistory`.
+   *
+   * Platform-operator surface (`can_manage_model_pricing` on
+   * `platform:stigmer`): rates are raw provider prices, pre-markup.
+   */
+  async listModelPricingBaselines(
+    params?: ListModelPricingBaselinesParams,
+  ): Promise<ModelPricingBaselinesResponse> {
+    try {
+      return await this.query.listModelPricingBaselines(
+        create(ListModelPricingBaselinesInputSchema, {
+          includeHistory: params?.includeHistory ?? false,
+        }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /**
+   * Create or revise one model registry baseline entry (catalog + list
+   * prices). Append-only: an existing ACTIVE entry for the same
+   * (modelId, provider, harness) key is superseded, never mutated, and
+   * the effective registry recomposes immediately. Returns the new
+   * revision with server-stamped lifecycle fields.
+   */
+  async upsertModelPricingBaseline(
+    params: UpsertModelPricingBaselineParams,
+  ): Promise<ModelPricingBaseline> {
+    try {
+      return await this.command.upsertModelPricingBaseline(
+        create(UpsertModelPricingBaselineInputSchema, {
+          baseline: params.baseline,
+          revisionNote: params.revisionNote ?? "",
+        }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /**
+   * Retire one model from the registry catalog. The model disappears
+   * from every price surface on the next composition pass; the document
+   * is kept for audit and the key can be revived by a subsequent upsert.
+   */
+  async retireModelPricingBaseline(
+    params: RetireModelPricingBaselineParams,
+  ): Promise<ModelPricingBaseline> {
+    try {
+      return await this.command.retireModelPricingBaseline(
+        create(RetireModelPricingBaselineInputSchema, {
+          modelId: params.modelId,
+          provider: params.provider,
+          harness: params.harness,
+          revisionNote: params.revisionNote ?? "",
+        }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
 }

package/src/cursor-accounts.ts

@@ -0,0 +1,207 @@
+import { createClient, type Client, type Transport } from "@connectrpc/connect";
+import { create } from "@bufbuild/protobuf";
+import { CursorAccountCommandController } from "@stigmer/protos/ai/stigmer/platform/cursoraccount/v1/command_pb";
+import { CursorAccountQueryController } from "@stigmer/protos/ai/stigmer/platform/cursoraccount/v1/query_pb";
+import {
+  UpsertCursorAccountInputSchema,
+  DeleteCursorAccountInputSchema,
+  AddCursorMemberKeyInputSchema,
+  RemoveCursorMemberKeyInputSchema,
+  SetCursorMemberKeyEnabledInputSchema,
+  SyncCursorAccountInputSchema,
+  ListCursorAccountsInputSchema,
+  GetCursorAccountViewInputSchema,
+  type CursorAccountsResponse,
+  type CursorAccountView,
+} from "@stigmer/protos/ai/stigmer/platform/cursoraccount/v1/io_pb";
+import type { CursorAccount } from "@stigmer/protos/ai/stigmer/platform/cursoraccount/v1/cursor_account_pb";
+import { wrapError } from "./gen/errors.js";
+
+/** Parameters for creating or updating a Cursor account. */
+export interface UpsertCursorAccountParams {
+  /**
+   * The account to create (empty `accountId`) or update. The admin key is
+   * plaintext to set/rotate or `"***REDACTED***"` to keep the stored
+   * value; member keys on this message are ignored — use
+   * {@link CursorAccountsClient.addMemberKey} and friends.
+   */
+  readonly account: CursorAccount;
+}
+
+/** Parameters for deleting a Cursor account. */
+export interface DeleteCursorAccountParams {
+  readonly accountId: string;
+  /**
+   * Deletion is refused while live sessions are pinned to the account's
+   * keys. `force: true` overrides — their Cursor agent handles will be
+   * orphaned at disposal.
+   */
+  readonly force?: boolean;
+}
+
+/** Parameters for adding one member key. */
+export interface AddCursorMemberKeyParams {
+  readonly accountId: string;
+  /**
+   * Plaintext user-scoped Cursor API key. Validated live against Cursor's
+   * `/v1/me` and bound to its owning team member server-side; admin and
+   * service-account keys are rejected with Cursor's own explanation.
+   */
+  readonly apiKey: string;
+  /** Optional operator label (e.g. `"zane — stigmer-prod"`). */
+  readonly label?: string;
+}
+
+/** Parameters for removing one member key. */
+export interface RemoveCursorMemberKeyParams {
+  readonly accountId: string;
+  readonly keyId: string;
+  /**
+   * Removal is refused while live sessions are pinned to this key.
+   * `force: true` overrides — prefer disabling instead (always safe).
+   */
+  readonly force?: boolean;
+}
+
+/** Parameters for enabling/disabling one member key. */
+export interface SetCursorMemberKeyEnabledParams {
+  readonly accountId: string;
+  readonly keyId: string;
+  /**
+   * `false` blocks NEW sessions immediately; sessions already pinned to
+   * the key keep working (conversation continuity + disposal need it).
+   */
+  readonly enabled: boolean;
+}
+
+/**
+ * Client for managed Cursor accounts (platform operators only).
+ *
+ * A Cursor account is one managed Cursor team: its Admin API key (roster
+ * and spend, never executions), its member execution keys, and its org
+ * assignments. Every method requires `can_manage_cursor_accounts` on
+ * `platform:stigmer`; key material is always redacted in responses.
+ */
+export class CursorAccountsClient {
+  private readonly command: Client<typeof CursorAccountCommandController>;
+  private readonly query: Client<typeof CursorAccountQueryController>;
+
+  constructor(transport: Transport) {
+    this.command = createClient(CursorAccountCommandController, transport);
+    this.query = createClient(CursorAccountQueryController, transport);
+  }
+
+  /** List all Cursor accounts with routing/sync summaries. */
+  async listAccounts(): Promise<CursorAccountsResponse> {
+    try {
+      return await this.query.listCursorAccounts(
+        create(ListCursorAccountsInputSchema, {}),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /**
+   * Retrieve one account's detail view: the redacted account, the latest
+   * roster/spend snapshot, and the computed key-coverage join.
+   */
+  async getAccountView(accountId: string): Promise<CursorAccountView> {
+    try {
+      return await this.query.getCursorAccountView(
+        create(GetCursorAccountViewInputSchema, { accountId }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /**
+   * Create or update a Cursor account. The admin key is validated live
+   * against Cursor's `/teams/members` before persistence.
+   */
+  async upsertAccount(params: UpsertCursorAccountParams): Promise<CursorAccount> {
+    try {
+      return await this.command.upsertCursorAccount(
+        create(UpsertCursorAccountInputSchema, { account: params.account }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /** Delete a Cursor account (guarded against live session pins). */
+  async deleteAccount(params: DeleteCursorAccountParams): Promise<CursorAccount> {
+    try {
+      return await this.command.deleteCursorAccount(
+        create(DeleteCursorAccountInputSchema, {
+          accountId: params.accountId,
+          force: params.force ?? false,
+        }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /** Add one execution-capable member key (identity bound via `/v1/me`). */
+  async addMemberKey(params: AddCursorMemberKeyParams): Promise<CursorAccount> {
+    try {
+      return await this.command.addCursorMemberKey(
+        create(AddCursorMemberKeyInputSchema, {
+          accountId: params.accountId,
+          apiKey: params.apiKey,
+          label: params.label ?? "",
+        }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /** Remove one member key (guarded against live session pins). */
+  async removeMemberKey(params: RemoveCursorMemberKeyParams): Promise<CursorAccount> {
+    try {
+      return await this.command.removeCursorMemberKey(
+        create(RemoveCursorMemberKeyInputSchema, {
+          accountId: params.accountId,
+          keyId: params.keyId,
+          force: params.force ?? false,
+        }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /** Enable or disable one member key for new-session selection. */
+  async setMemberKeyEnabled(
+    params: SetCursorMemberKeyEnabledParams,
+  ): Promise<CursorAccount> {
+    try {
+      return await this.command.setCursorMemberKeyEnabled(
+        create(SetCursorMemberKeyEnabledInputSchema, {
+          accountId: params.accountId,
+          keyId: params.keyId,
+          enabled: params.enabled,
+        }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+
+  /**
+   * Run an on-demand roster + spend sync and return the refreshed view.
+   * Rate-limited upstream (Cursor Admin API) — debounce in UIs.
+   */
+  async syncAccount(accountId: string): Promise<CursorAccountView> {
+    try {
+      return await this.command.syncCursorAccount(
+        create(SyncCursorAccountInputSchema, { accountId }),
+      );
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+}

package/src/errors.ts

@@ -303,6 +303,33 @@ export function getErrorReason(error: unknown): ErrorReason | null {
   return null;
 }
 
+/**
+ * The `google.rpc.ErrorInfo` domain attached by datastore record-RPC
+ * errors in both editions (a cross-edition contract; see the OSS
+ * `dserrors` package and its Java mirror).
+ */
+const RECORDS_ERROR_DOMAIN = "datastore.stigmer.ai";
+
+/**
+ * Extract the violated constraint's declared name from a datastore
+ * record-RPC error, or `null` when the error carries none.
+ *
+ * Record writes rejected by a declared constraint (`ALREADY_EXISTS` for
+ * uniques, `FAILED_PRECONDITION` for check/exists/not_exists) attach a
+ * `google.rpc.ErrorInfo` with reason `CONSTRAINT_VIOLATION` and the
+ * constraint's name in `metadata["constraint"]` — the same companion
+ * the MCP bridge's record tools surface to agents. Consumers map the
+ * name through the datastore spec to place the (verbatim) message next
+ * to the fields the constraint covers; `null` falls back to a
+ * form-level rendering of {@link getUserMessage}.
+ */
+export function getRecordConstraint(error: unknown): string | null {
+  const reason = getErrorReason(error);
+  if (!reason || reason.domain !== RECORDS_ERROR_DOMAIN) return null;
+  const constraint = reason.metadata["constraint"];
+  return constraint !== undefined && constraint !== "" ? constraint : null;
+}
+
 /**
  * Metadata about the RPC call that produced an error. Attached by the
  * SDK's metadata interceptor and readable via {@link getRpcMetadata}.

package/src/gen/agent.ts

@@ -9,7 +9,7 @@ import { AgentSchema, type Agent } from "@stigmer/protos/ai/stigmer/agentic/agen
 import { AgentCommandController } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/command_pb";
 import { AgentIdSchema, GetDefaultAgentRequestSchema, type GetDefaultAgentRequest } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/io_pb";
 import { AgentQueryController } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/query_pb";
-import { AgentSpecSchema, ToolApprovalOverrideSchema, McpServerUsageSchema, McpAccessSchema, SubAgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
+import { AgentSpecSchema, ToolApprovalOverrideSchema, McpServerUsageSchema, McpAccessSchema, SubAgentSchema, DatastoreUsageSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
 import { EnvVarDeclarationSchema } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/spec_pb";
 import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
 import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
@@ -112,6 +112,7 @@ export interface AgentInput {
   skillRefs?: ResourceRef[];
   subAgents?: SubAgentInput[];
   env?: Record<string, EnvVarDeclarationInput>;
+  datastoreUsages?: DatastoreUsageInput[];
 }
 
 /** SDK input type for McpServerUsage. */
@@ -151,6 +152,11 @@ export interface EnvVarDeclarationInput {
   optional?: boolean;
 }
 
+/** SDK input type for DatastoreUsage. */
+export interface DatastoreUsageInput {
+  datastoreRef: ResourceRef;
+}
+
 function buildToolApprovalOverrideProto(input: ToolApprovalOverrideInput) {
   return Object.assign(create(ToolApprovalOverrideSchema), stripUndefined({
     toolName: input.toolName,
@@ -193,6 +199,12 @@ function buildEnvVarDeclarationProto(input: EnvVarDeclarationInput) {
   }));
 }
 
+function buildDatastoreUsageProto(input: DatastoreUsageInput) {
+  const msg = create(DatastoreUsageSchema);
+  if (input.datastoreRef?.slug || input.datastoreRef?.org) msg.datastoreRef = create(ApiResourceReferenceSchema, { ...input.datastoreRef, kind: 49 });
+  return msg;
+}
+
 export function buildAgentProto(input: AgentInput): Agent {
   const mcpServerUsages = input.mcpServerUsages?.map(buildMcpServerUsageProto);
   const skillRefs = input.skillRefs?.map(r => create(ApiResourceReferenceSchema, { ...r, kind: 43 }));
@@ -201,6 +213,7 @@ export function buildAgentProto(input: AgentInput): Agent {
   if (input.env) {
     env = Object.fromEntries(Object.entries(input.env).map(([k, v]) => [k, buildEnvVarDeclarationProto(v)]));
   }
+  const datastoreUsages = input.datastoreUsages?.map(buildDatastoreUsageProto);
   return Object.assign(create(AgentSchema), {
     apiVersion: "agentic.stigmer.ai/v1",
     kind: "Agent",
@@ -219,6 +232,7 @@ export function buildAgentProto(input: AgentInput): Agent {
       skillRefs,
       subAgents,
       env,
+      datastoreUsages,
     })),
   }) as Agent;
 }

package/src/gen/agentexecution.ts

@@ -198,6 +198,7 @@ export interface SessionSpecInput {
   agentInstanceId?: string;
   subject?: string;
   harnessStateId?: string;
+  harnessStateIdHistory?: string[];
   metadata?: Record<string, string>;
   workspaceEntries?: WorkspaceEntryInput[];
   mcpServerUsages?: McpServerUsageInput[];
@@ -331,6 +332,7 @@ function buildSessionSpecProto(input: SessionSpecInput) {
   if (input.agentInstanceId !== undefined) msg.agentInstanceId = input.agentInstanceId;
   if (input.subject !== undefined) msg.subject = input.subject;
   if (input.harnessStateId !== undefined) msg.harnessStateId = input.harnessStateId;
+  if (input.harnessStateIdHistory) msg.harnessStateIdHistory = input.harnessStateIdHistory;
   if (input.metadata) Object.assign(msg.metadata, input.metadata);
   if (input.workspaceEntries) msg.workspaceEntries = input.workspaceEntries.map(buildWorkspaceEntryProto);
   if (input.mcpServerUsages) msg.mcpServerUsages = input.mcpServerUsages.map(buildMcpServerUsageProto);

package/src/gen/agentinstance.ts

@@ -90,6 +90,7 @@ export interface AgentInstanceInput {
   agentId?: string;
   description?: string;
   environmentRefs?: ResourceRef[];
+  datastorePartition?: string;
 }
 
 export function buildAgentInstanceProto(input: AgentInstanceInput): AgentInstance {
@@ -108,6 +109,7 @@ export function buildAgentInstanceProto(input: AgentInstanceInput): AgentInstanc
       agentId: input.agentId,
       description: input.description,
       environmentRefs,
+      datastorePartition: input.datastorePartition,
     })),
   }) as AgentInstance;
 }

package/src/gen/authorization-config.ts

@@ -26,6 +26,7 @@ export const GRANTABLE_ROLES: ReadonlyMap<ApiResourceKind, readonly IamRole[]> =
   [ApiResourceKind.agent_share, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.agent_channel, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.channel_app, [IamRole.owner, IamRole.viewer]],
+  [ApiResourceKind.datastore, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.workflow, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.workflow_instance, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.workflow_execution, [IamRole.owner, IamRole.viewer]],

package/src/gen/client.ts

@@ -9,6 +9,7 @@ import { AgentShareClient } from "./agentshare.js";
 import { ApiKeyClient } from "./apikey.js";
 import { ArtifactClient } from "./artifact.js";
 import { ChannelAppClient } from "./channelapp.js";
+import { DatastoreClient } from "./datastore.js";
 import { EnvironmentClient } from "./environment.js";
 import { ExecutionContextClient } from "./executioncontext.js";
 import { IamPolicyClient } from "./iampolicy.js";
@@ -36,6 +37,7 @@ export class GeneratedClient {
   readonly apiKey: ApiKeyClient;
   readonly artifact: ArtifactClient;
   readonly channelapp: ChannelAppClient;
+  readonly datastore: DatastoreClient;
   readonly environment: EnvironmentClient;
   readonly executionContext: ExecutionContextClient;
   readonly iamPolicy: IamPolicyClient;
@@ -62,6 +64,7 @@ export class GeneratedClient {
     this.apiKey = new ApiKeyClient(transport);
     this.artifact = new ArtifactClient(transport);
     this.channelapp = new ChannelAppClient(transport);
+    this.datastore = new DatastoreClient(transport);
     this.environment = new EnvironmentClient(transport);
     this.executionContext = new ExecutionContextClient(transport);
     this.iamPolicy = new IamPolicyClient(transport);
@@ -83,7 +86,7 @@ export class GeneratedClient {
 
 // Re-export all resource client types and input types.
 export { AgentClient } from "./agent.js";
-export { type AgentInput, type McpServerUsageInput, type ToolApprovalOverrideInput, type SubAgentInput, type McpAccessInput, type EnvVarDeclarationInput } from "./agent.js";
+export { type AgentInput, type McpServerUsageInput, type ToolApprovalOverrideInput, type SubAgentInput, type McpAccessInput, type EnvVarDeclarationInput, type DatastoreUsageInput } from "./agent.js";
 export { AgentChannelClient } from "./agentchannel.js";
 export { type AgentChannelInput, type SlackChannelConfigInput, type WhatsAppChannelConfigInput } from "./agentchannel.js";
 export { AgentExecutionClient } from "./agentexecution.js";
@@ -98,12 +101,14 @@ export { ArtifactClient } from "./artifact.js";
 export { type ArtifactInput, type ArtifactSourceInput, type RetentionPolicyInput } from "./artifact.js";
 export { ChannelAppClient } from "./channelapp.js";
 export { type ChannelAppInput, type SlackChannelAppConfigInput, type WhatsAppChannelAppConfigInput } from "./channelapp.js";
+export { DatastoreClient } from "./datastore.js";
+export { type DatastoreInput, type DatastoreAuthorizationInput, type DatastoreRoleInput, type DatastoreRoleBindingInput, type DatastoreSubjectInput, type ChannelSenderSubjectInput, type ApiResourceRefInput, type CollectionDeclarationInput, type FieldDeclarationInput, type UniqueConstraintInput, type UniqueWhereInput, type CheckConstraintInput, type ExistsConstraintInput, type DatastoreGrantInput } from "./datastore.js";
 export { EnvironmentClient } from "./environment.js";
 export { type EnvironmentInput } from "./environment.js";
 export { ExecutionContextClient } from "./executioncontext.js";
 export { type ExecutionContextInput } from "./executioncontext.js";
 export { IamPolicyClient } from "./iampolicy.js";
-export { type IamPolicyInput, type ApiResourceRefInput } from "./iampolicy.js";
+export { type IamPolicyInput } from "./iampolicy.js";
 export { IdentityAccountClient } from "./identityaccount.js";
 export { type IdentityAccountInput } from "./identityaccount.js";
 export { IdentityProviderClient } from "./identityprovider.js";