@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/internal/validators/operation/principals.d.ts

@@ -0,0 +1,3672 @@
+import { z } from "zod";
+import { isCommitOrganizationGroupPolicyRequest, isOrganizationPrincipalPolicyRequest } from "../request/index.js";
+import { ErrorResponseSchema, isCommitOrganizationGroupPolicyResponse, isPrincipalPolicyMutationResponse, isPrincipalPolicyPageResponse } from "../response/index.js";
+export declare const PrincipalPolicyPathParamsSchema: z.ZodObject<{
+    principalType: z.ZodLiteral<"group" | "organization">;
+    principalId: z.ZodCustom<string, string>;
+}, z.core.$strict>;
+export type PrincipalPolicyPathParams = z.infer<typeof PrincipalPolicyPathParamsSchema>;
+export declare const OrganizationGroupPolicyPathParamsSchema: z.ZodObject<{
+    organizationId: z.ZodCustom<string, string>;
+    groupId: z.ZodCustom<string, string>;
+}, z.core.$strict>;
+export type OrganizationGroupPolicyPathParams = z.infer<typeof OrganizationGroupPolicyPathParamsSchema>;
+export declare const getPrincipalPolicyOperation: Omit<{
+    readonly auth: "session";
+    readonly failureResponses: {
+        readonly 400: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 401: z.ZodType<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }>>;
+        readonly 403: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 409: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 500: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+    };
+    readonly failureStatuses: readonly [400, 401, 403, 409, 500];
+    readonly id: "principals.policy.get";
+    readonly method: "GET";
+    readonly params: z.ZodObject<{
+        principalType: z.ZodLiteral<"group" | "organization">;
+        principalId: z.ZodCustom<string, string>;
+    }, z.core.$strict>;
+    readonly path: "/principals/{principalType}/{principalId}/policy";
+    readonly query: z.ZodObject<{
+        afterVersion: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>, z.ZodTransform<number, string | number>>>;
+        stateHash: z.ZodOptional<z.ZodCustom<string, string>>;
+    }, z.core.$strict>;
+    readonly responseDescriptions: {
+        readonly 202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.";
+    };
+    readonly responses: {
+        readonly 200: z.ZodType<{
+            previousStates: {
+                grants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                projection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                state: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            }[];
+            historyPage: {
+                afterVersion: number;
+                nextAfterVersion: number | null;
+            };
+            currentGrants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            currentMemberEnvelopes: {
+                envelopes: {
+                    kemCipherText: string;
+                    memberKeyFingerprint: string;
+                    userId: string;
+                    wrappedKey: string;
+                }[];
+                epoch: number;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentProjection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            currentState: {
+                createdAt: string;
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                stateHash: string;
+                version: number;
+            };
+        }, {
+            previousStates: {
+                grants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                projection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                state: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            }[];
+            historyPage: {
+                afterVersion: number;
+                nextAfterVersion: number | null;
+            };
+            currentGrants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            currentMemberEnvelopes: {
+                envelopes: {
+                    kemCipherText: string;
+                    memberKeyFingerprint: string;
+                    userId: string;
+                    wrappedKey: string;
+                }[];
+                epoch: number;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentProjection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            currentState: {
+                createdAt: string;
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                stateHash: string;
+                version: number;
+            };
+        }, z.core.$ZodTypeInternals<{
+            previousStates: {
+                grants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                projection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                state: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            }[];
+            historyPage: {
+                afterVersion: number;
+                nextAfterVersion: number | null;
+            };
+            currentGrants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            currentMemberEnvelopes: {
+                envelopes: {
+                    kemCipherText: string;
+                    memberKeyFingerprint: string;
+                    userId: string;
+                    wrappedKey: string;
+                }[];
+                epoch: number;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentProjection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            currentState: {
+                createdAt: string;
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                stateHash: string;
+                version: number;
+            };
+        }, {
+            previousStates: {
+                grants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                projection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                state: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            }[];
+            historyPage: {
+                afterVersion: number;
+                nextAfterVersion: number | null;
+            };
+            currentGrants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            currentMemberEnvelopes: {
+                envelopes: {
+                    kemCipherText: string;
+                    memberKeyFingerprint: string;
+                    userId: string;
+                    wrappedKey: string;
+                }[];
+                epoch: number;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentProjection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            currentState: {
+                createdAt: string;
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                stateHash: string;
+                version: number;
+            };
+        }>>;
+        readonly 202: z.ZodObject<{
+            code: z.ZodLiteral<"principal_history_preparation_pending">;
+            committed: z.ZodLiteral<false>;
+            progressToken: z.ZodCustom<string, string>;
+        }, z.core.$strict>;
+    };
+}, "failureResponses" | "failureStatuses"> & {
+    readonly failureResponses: {
+        readonly 400: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 401: z.ZodType<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }>>;
+        readonly 403: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 409: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 500: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+    } & {
+        readonly 503: typeof ErrorResponseSchema;
+    };
+    readonly failureStatuses: readonly [400, 401, 403, 409, 500] | readonly [400, 401, 403, 409, 500, 503];
+};
+export declare const putPrincipalPolicyOperation: Omit<{
+    readonly auth: "session";
+    readonly body: z.ZodType<{
+        encryptedPayload: {
+            cipherSuite: "aes-256-gcm";
+            ciphertext: string;
+            ciphertextHash: string;
+        };
+        grants: {
+            accessLevel: "admin" | "read" | "write";
+            containerId: string;
+        }[];
+        memberEnvelopes: {
+            kemCipherText: string;
+            memberKeyFingerprint: string;
+            userId: string;
+            wrappedKey: string;
+        }[];
+        projection: {
+            role: "member" | "admin";
+            userId: string;
+        }[];
+        state: {
+            encapsulationPublicKey: string;
+            externalAuthority: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group";
+                stateHash: string;
+                version: number;
+            } | null;
+            grantCount: number;
+            grantRoot: string;
+            keyEpoch: number;
+            keyFingerprint: string;
+            memberCount: number;
+            memberEnvelopesRoot: string;
+            membershipMode: "projection";
+            membershipRoot: string;
+            payloadCiphertextHash: string;
+            prevStateHash: string | null;
+            principalId: string;
+            principalType: "group" | "organization";
+            projectionRoot: string;
+            signature: string;
+            signedAt: string;
+            signerUserId: string;
+            signerUserKeyFingerprint: string;
+            version: number;
+        };
+        containerMutations?: {
+            body: unknown;
+            event: Record<string, unknown>;
+            expectedManifestHash: string;
+            keyEpoch: Record<string, unknown>;
+            keyring: Record<string, unknown> | null;
+            manifest: Record<string, unknown>;
+            predecessorBridge: Record<string, unknown> | null;
+            principalPolicies: Record<string, unknown>[];
+            wraps: Record<string, unknown>[];
+            containerManifestHistory?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            destinationParentContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            parentContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            parentKekState?: Record<string, unknown> | null | undefined;
+            previousContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            previousManifest?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            } | null | undefined;
+            userRecipientKeys?: Record<string, unknown>[] | undefined;
+        }[] | undefined;
+    }, {
+        encryptedPayload: {
+            cipherSuite: "aes-256-gcm";
+            ciphertext: string;
+            ciphertextHash: string;
+        };
+        grants: {
+            accessLevel: "admin" | "read" | "write";
+            containerId: string;
+        }[];
+        memberEnvelopes: {
+            kemCipherText: string;
+            memberKeyFingerprint: string;
+            userId: string;
+            wrappedKey: string;
+        }[];
+        projection: {
+            role: "member" | "admin";
+            userId: string;
+        }[];
+        state: {
+            encapsulationPublicKey: string;
+            externalAuthority: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group";
+                stateHash: string;
+                version: number;
+            } | null;
+            grantCount: number;
+            grantRoot: string;
+            keyEpoch: number;
+            keyFingerprint: string;
+            memberCount: number;
+            memberEnvelopesRoot: string;
+            membershipMode: "projection";
+            membershipRoot: string;
+            payloadCiphertextHash: string;
+            prevStateHash: string | null;
+            principalId: string;
+            principalType: "group" | "organization";
+            projectionRoot: string;
+            signature: string;
+            signedAt: string;
+            signerUserId: string;
+            signerUserKeyFingerprint: string;
+            version: number;
+        };
+        containerMutations?: {
+            body: unknown;
+            event: Record<string, unknown>;
+            expectedManifestHash: string;
+            keyEpoch: Record<string, unknown>;
+            keyring: Record<string, unknown> | null;
+            manifest: Record<string, unknown>;
+            predecessorBridge: Record<string, unknown> | null;
+            principalPolicies: Record<string, unknown>[];
+            wraps: Record<string, unknown>[];
+            containerManifestHistory?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            destinationParentContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            parentContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            parentKekState?: Record<string, unknown> | null | undefined;
+            previousContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            previousManifest?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            } | null | undefined;
+            userRecipientKeys?: Record<string, unknown>[] | undefined;
+        }[] | undefined;
+    }, z.core.$ZodTypeInternals<{
+        encryptedPayload: {
+            cipherSuite: "aes-256-gcm";
+            ciphertext: string;
+            ciphertextHash: string;
+        };
+        grants: {
+            accessLevel: "admin" | "read" | "write";
+            containerId: string;
+        }[];
+        memberEnvelopes: {
+            kemCipherText: string;
+            memberKeyFingerprint: string;
+            userId: string;
+            wrappedKey: string;
+        }[];
+        projection: {
+            role: "member" | "admin";
+            userId: string;
+        }[];
+        state: {
+            encapsulationPublicKey: string;
+            externalAuthority: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group";
+                stateHash: string;
+                version: number;
+            } | null;
+            grantCount: number;
+            grantRoot: string;
+            keyEpoch: number;
+            keyFingerprint: string;
+            memberCount: number;
+            memberEnvelopesRoot: string;
+            membershipMode: "projection";
+            membershipRoot: string;
+            payloadCiphertextHash: string;
+            prevStateHash: string | null;
+            principalId: string;
+            principalType: "group" | "organization";
+            projectionRoot: string;
+            signature: string;
+            signedAt: string;
+            signerUserId: string;
+            signerUserKeyFingerprint: string;
+            version: number;
+        };
+        containerMutations?: {
+            body: unknown;
+            event: Record<string, unknown>;
+            expectedManifestHash: string;
+            keyEpoch: Record<string, unknown>;
+            keyring: Record<string, unknown> | null;
+            manifest: Record<string, unknown>;
+            predecessorBridge: Record<string, unknown> | null;
+            principalPolicies: Record<string, unknown>[];
+            wraps: Record<string, unknown>[];
+            containerManifestHistory?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            destinationParentContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            parentContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            parentKekState?: Record<string, unknown> | null | undefined;
+            previousContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            previousManifest?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            } | null | undefined;
+            userRecipientKeys?: Record<string, unknown>[] | undefined;
+        }[] | undefined;
+    }, {
+        encryptedPayload: {
+            cipherSuite: "aes-256-gcm";
+            ciphertext: string;
+            ciphertextHash: string;
+        };
+        grants: {
+            accessLevel: "admin" | "read" | "write";
+            containerId: string;
+        }[];
+        memberEnvelopes: {
+            kemCipherText: string;
+            memberKeyFingerprint: string;
+            userId: string;
+            wrappedKey: string;
+        }[];
+        projection: {
+            role: "member" | "admin";
+            userId: string;
+        }[];
+        state: {
+            encapsulationPublicKey: string;
+            externalAuthority: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group";
+                stateHash: string;
+                version: number;
+            } | null;
+            grantCount: number;
+            grantRoot: string;
+            keyEpoch: number;
+            keyFingerprint: string;
+            memberCount: number;
+            memberEnvelopesRoot: string;
+            membershipMode: "projection";
+            membershipRoot: string;
+            payloadCiphertextHash: string;
+            prevStateHash: string | null;
+            principalId: string;
+            principalType: "group" | "organization";
+            projectionRoot: string;
+            signature: string;
+            signedAt: string;
+            signerUserId: string;
+            signerUserKeyFingerprint: string;
+            version: number;
+        };
+        containerMutations?: {
+            body: unknown;
+            event: Record<string, unknown>;
+            expectedManifestHash: string;
+            keyEpoch: Record<string, unknown>;
+            keyring: Record<string, unknown> | null;
+            manifest: Record<string, unknown>;
+            predecessorBridge: Record<string, unknown> | null;
+            principalPolicies: Record<string, unknown>[];
+            wraps: Record<string, unknown>[];
+            containerManifestHistory?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            destinationParentContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            parentContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            parentKekState?: Record<string, unknown> | null | undefined;
+            previousContainerPath?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            }[] | undefined;
+            previousManifest?: {
+                event: Record<string, unknown>;
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            } | null | undefined;
+            userRecipientKeys?: Record<string, unknown>[] | undefined;
+        }[] | undefined;
+    }>>;
+    readonly failureResponses: {
+        readonly 400: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 401: z.ZodType<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }>>;
+        readonly 402: z.ZodType<{
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, {
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, {
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }>>;
+        readonly 403: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 404: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 409: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 500: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 503: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+    };
+    readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503];
+    readonly id: "principals.policy.update";
+    readonly method: "PUT";
+    readonly params: z.ZodObject<{
+        principalType: z.ZodLiteral<"group" | "organization">;
+        principalId: z.ZodCustom<string, string>;
+    }, z.core.$strict>;
+    readonly path: "/principals/{principalType}/{principalId}/policy";
+    readonly responseDescriptions: {
+        readonly 202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.";
+    };
+    readonly responses: {
+        readonly 200: z.ZodType<{
+            containerMutations: {
+                createdAt: string;
+                manifestHead: {
+                    epoch: number;
+                    manifestHash: string;
+                };
+                organizationId: string;
+                parentId: string | null;
+                referencedPrincipalHeads: {
+                    principalType: "group";
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    stateHash: string;
+                    version: number;
+                }[];
+                updatedAt: string;
+                accessManifest: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                };
+                containerId: string;
+                containerKek: {
+                    accessManifestHash: string;
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHistory: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    }[];
+                    keyEpoch: Record<string, unknown>;
+                    keyEpochHash: string;
+                    keyring: {
+                        containerId: string;
+                        containerKeyEpochId: string;
+                        iv: string;
+                        sealed: string;
+                        sealingSuite: string;
+                        version: number;
+                    } | null;
+                    keyTargetHash: string;
+                    parentContainerKeyEpochId: string | null;
+                    recipientTargets: Record<string, unknown>[];
+                    wraps: Record<string, unknown>[];
+                };
+                systemSlot?: string | null | undefined;
+            }[];
+            currentGrants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            currentMemberEnvelopes: {
+                envelopes: {
+                    kemCipherText: string;
+                    memberKeyFingerprint: string;
+                    userId: string;
+                    wrappedKey: string;
+                }[];
+                epoch: number;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentProjection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            currentState: {
+                createdAt: string;
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                stateHash: string;
+                version: number;
+            };
+        }, {
+            containerMutations: {
+                createdAt: string;
+                manifestHead: {
+                    epoch: number;
+                    manifestHash: string;
+                };
+                organizationId: string;
+                parentId: string | null;
+                referencedPrincipalHeads: {
+                    principalType: "group";
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    stateHash: string;
+                    version: number;
+                }[];
+                updatedAt: string;
+                accessManifest: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                };
+                containerId: string;
+                containerKek: {
+                    accessManifestHash: string;
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHistory: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    }[];
+                    keyEpoch: Record<string, unknown>;
+                    keyEpochHash: string;
+                    keyring: {
+                        containerId: string;
+                        containerKeyEpochId: string;
+                        iv: string;
+                        sealed: string;
+                        sealingSuite: string;
+                        version: number;
+                    } | null;
+                    keyTargetHash: string;
+                    parentContainerKeyEpochId: string | null;
+                    recipientTargets: Record<string, unknown>[];
+                    wraps: Record<string, unknown>[];
+                };
+                systemSlot?: string | null | undefined;
+            }[];
+            currentGrants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            currentMemberEnvelopes: {
+                envelopes: {
+                    kemCipherText: string;
+                    memberKeyFingerprint: string;
+                    userId: string;
+                    wrappedKey: string;
+                }[];
+                epoch: number;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentProjection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            currentState: {
+                createdAt: string;
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                stateHash: string;
+                version: number;
+            };
+        }, z.core.$ZodTypeInternals<{
+            containerMutations: {
+                createdAt: string;
+                manifestHead: {
+                    epoch: number;
+                    manifestHash: string;
+                };
+                organizationId: string;
+                parentId: string | null;
+                referencedPrincipalHeads: {
+                    principalType: "group";
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    stateHash: string;
+                    version: number;
+                }[];
+                updatedAt: string;
+                accessManifest: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                };
+                containerId: string;
+                containerKek: {
+                    accessManifestHash: string;
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHistory: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    }[];
+                    keyEpoch: Record<string, unknown>;
+                    keyEpochHash: string;
+                    keyring: {
+                        containerId: string;
+                        containerKeyEpochId: string;
+                        iv: string;
+                        sealed: string;
+                        sealingSuite: string;
+                        version: number;
+                    } | null;
+                    keyTargetHash: string;
+                    parentContainerKeyEpochId: string | null;
+                    recipientTargets: Record<string, unknown>[];
+                    wraps: Record<string, unknown>[];
+                };
+                systemSlot?: string | null | undefined;
+            }[];
+            currentGrants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            currentMemberEnvelopes: {
+                envelopes: {
+                    kemCipherText: string;
+                    memberKeyFingerprint: string;
+                    userId: string;
+                    wrappedKey: string;
+                }[];
+                epoch: number;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentProjection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            currentState: {
+                createdAt: string;
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                stateHash: string;
+                version: number;
+            };
+        }, {
+            containerMutations: {
+                createdAt: string;
+                manifestHead: {
+                    epoch: number;
+                    manifestHash: string;
+                };
+                organizationId: string;
+                parentId: string | null;
+                referencedPrincipalHeads: {
+                    principalType: "group";
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    stateHash: string;
+                    version: number;
+                }[];
+                updatedAt: string;
+                accessManifest: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                };
+                containerId: string;
+                containerKek: {
+                    accessManifestHash: string;
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHistory: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    }[];
+                    keyEpoch: Record<string, unknown>;
+                    keyEpochHash: string;
+                    keyring: {
+                        containerId: string;
+                        containerKeyEpochId: string;
+                        iv: string;
+                        sealed: string;
+                        sealingSuite: string;
+                        version: number;
+                    } | null;
+                    keyTargetHash: string;
+                    parentContainerKeyEpochId: string | null;
+                    recipientTargets: Record<string, unknown>[];
+                    wraps: Record<string, unknown>[];
+                };
+                systemSlot?: string | null | undefined;
+            }[];
+            currentGrants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            currentMemberEnvelopes: {
+                envelopes: {
+                    kemCipherText: string;
+                    memberKeyFingerprint: string;
+                    userId: string;
+                    wrappedKey: string;
+                }[];
+                epoch: number;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentProjection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            currentState: {
+                createdAt: string;
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                stateHash: string;
+                version: number;
+            };
+        }>>;
+        readonly 202: z.ZodObject<{
+            code: z.ZodLiteral<"principal_history_preparation_pending">;
+            committed: z.ZodLiteral<false>;
+            progressToken: z.ZodCustom<string, string>;
+        }, z.core.$strict>;
+    };
+    readonly runtimeRefinements: readonly [{
+        readonly description: "a container response keyring is null exactly for container key epoch 1";
+        readonly id: "response.organization-provisioning-container-keyring";
+    }];
+}, "failureResponses" | "failureStatuses"> & {
+    readonly failureResponses: {
+        readonly 400: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 401: z.ZodType<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }>>;
+        readonly 402: z.ZodType<{
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, {
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, {
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }>>;
+        readonly 403: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 404: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 409: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 500: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 503: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+    } & {
+        readonly 503: typeof ErrorResponseSchema;
+    };
+    readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503] | readonly [400, 401, 402, 403, 404, 409, 500, 503, 503];
+};
+export declare const commitOrganizationGroupPolicyOperation: Omit<{
+    readonly auth: "session";
+    readonly body: z.ZodType<{
+        groupPolicy: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistory?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                destinationParentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                previousManifest?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        };
+        organizationPolicy: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistory?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                destinationParentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                previousManifest?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        };
+    }, {
+        groupPolicy: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistory?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                destinationParentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                previousManifest?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        };
+        organizationPolicy: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistory?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                destinationParentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                previousManifest?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        };
+    }, z.core.$ZodTypeInternals<{
+        groupPolicy: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistory?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                destinationParentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                previousManifest?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        };
+        organizationPolicy: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistory?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                destinationParentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                previousManifest?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        };
+    }, {
+        groupPolicy: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistory?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                destinationParentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                previousManifest?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        };
+        organizationPolicy: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistory?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                destinationParentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPath?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[] | undefined;
+                previousManifest?: {
+                    event: Record<string, unknown>;
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        };
+    }>>;
+    readonly failureResponses: {
+        readonly 400: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 401: z.ZodType<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }>>;
+        readonly 402: z.ZodType<{
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, {
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, {
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }>>;
+        readonly 403: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 404: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 409: z.ZodUnion<readonly [z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>, z.ZodType<{
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }, {
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }, z.core.$ZodTypeInternals<{
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }, {
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }>>]>;
+        readonly 500: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 503: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+    };
+    readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503];
+    readonly id: "organizations.groups.policy.commit";
+    readonly method: "PUT";
+    readonly params: z.ZodObject<{
+        organizationId: z.ZodCustom<string, string>;
+        groupId: z.ZodCustom<string, string>;
+    }, z.core.$strict>;
+    readonly path: "/organizations/{organizationId}/groups/{groupId}/policy-commit";
+    readonly responseDescriptions: {
+        readonly 202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.";
+    };
+    readonly responses: {
+        readonly 200: z.ZodType<{
+            groupPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            };
+            organizationPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            };
+        }, {
+            groupPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            };
+            organizationPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            };
+        }, z.core.$ZodTypeInternals<{
+            groupPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            };
+            organizationPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            };
+        }, {
+            groupPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            };
+            organizationPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            };
+        }>>;
+        readonly 202: z.ZodObject<{
+            code: z.ZodLiteral<"principal_history_preparation_pending">;
+            committed: z.ZodLiteral<false>;
+            progressToken: z.ZodCustom<string, string>;
+        }, z.core.$strict>;
+    };
+    readonly runtimeRefinements: readonly [{
+        readonly description: "a container response keyring is null exactly for container key epoch 1";
+        readonly id: "response.organization-provisioning-container-keyring";
+    }];
+}, "failureResponses" | "failureStatuses"> & {
+    readonly failureResponses: {
+        readonly 400: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 401: z.ZodType<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }>>;
+        readonly 402: z.ZodType<{
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, {
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, {
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }>>;
+        readonly 403: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 404: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 409: z.ZodUnion<readonly [z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>, z.ZodType<{
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }, {
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }, z.core.$ZodTypeInternals<{
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }, {
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }>>]>;
+        readonly 500: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 503: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+    } & {
+        readonly 503: typeof ErrorResponseSchema;
+    };
+    readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503] | readonly [400, 401, 402, 403, 404, 409, 500, 503, 503];
+};
+export declare const isCommitOrganizationGroupPolicyOperationRequest: typeof isCommitOrganizationGroupPolicyRequest;
+export declare const isCommitOrganizationGroupPolicyOperationResponse: typeof isCommitOrganizationGroupPolicyResponse;
+export declare const isGetPrincipalPolicyOperationResponse: typeof isPrincipalPolicyPageResponse;
+export declare const isPutPrincipalPolicyOperationRequest: typeof isOrganizationPrincipalPolicyRequest;
+export declare const isPutPrincipalPolicyOperationResponse: typeof isPrincipalPolicyMutationResponse;