@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/internal/validators/response/organizationProvisioning.d.ts

@@ -0,0 +1,4799 @@
+import { z } from "zod";
+export declare const organizationProvisioningResponseShape: {
+    committedCoreMetadataUpdateIds: z.ZodCustom<string[], string[]>;
+    committedProfileUpdateIds: z.ZodCustom<string[], string[]>;
+    organizationId: z.ZodString;
+    organizationMetadataContainer: z.ZodType<{
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }, {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }, z.core.$ZodTypeInternals<{
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }, {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }>>;
+    organizationMetadataContainerId: z.ZodString;
+    organizationProfileDocument: z.ZodOptional<z.ZodType<{
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }, {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }, z.core.$ZodTypeInternals<{
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }, {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }>>>;
+    organizationProfileDocumentId: z.ZodOptional<z.ZodString>;
+    rootContainerId: z.ZodString;
+    rootMetadataAccessEpoch: z.ZodNumber;
+    rootMetadataAccessStateHash: z.ZodString;
+    rootMetadataDocument: z.ZodType<{
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }, {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }, z.core.$ZodTypeInternals<{
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }, {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }>>;
+    rootMetadataDocumentId: z.ZodString;
+    rosterProfileContainer: z.ZodOptional<z.ZodType<{
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }, {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }, z.core.$ZodTypeInternals<{
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }, {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }>>>;
+    rosterProfileContainerId: z.ZodOptional<z.ZodString>;
+    rosterProfileDocument: z.ZodOptional<z.ZodType<{
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }, {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }, z.core.$ZodTypeInternals<{
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }, {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    }>>>;
+    rosterProfileDocumentId: z.ZodOptional<z.ZodString>;
+    systemContainers: z.ZodCustom<{
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }[], {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }[]>;
+    userId: z.ZodString;
+};
+export declare function addCommittedUpdateIdIssues(value: z.output<z.ZodObject<typeof organizationProvisioningResponseShape>>, context: z.core.$RefinementCtx<unknown>): void;
+export declare const OrganizationProvisioningResponseSchema: z.ZodType<{
+    committedCoreMetadataUpdateIds: string[];
+    committedProfileUpdateIds: string[];
+    organizationId: string;
+    organizationMetadataContainer: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    };
+    organizationMetadataContainerId: string;
+    rootContainerId: string;
+    rootMetadataAccessEpoch: number;
+    rootMetadataAccessStateHash: string;
+    rootMetadataDocument: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    };
+    rootMetadataDocumentId: string;
+    systemContainers: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }[];
+    userId: string;
+    organizationProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    organizationProfileDocumentId?: string | undefined;
+    rosterProfileContainer?: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    } | undefined;
+    rosterProfileContainerId?: string | undefined;
+    rosterProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    rosterProfileDocumentId?: string | undefined;
+}, {
+    committedCoreMetadataUpdateIds: string[];
+    committedProfileUpdateIds: string[];
+    organizationId: string;
+    organizationMetadataContainer: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    };
+    organizationMetadataContainerId: string;
+    rootContainerId: string;
+    rootMetadataAccessEpoch: number;
+    rootMetadataAccessStateHash: string;
+    rootMetadataDocument: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    };
+    rootMetadataDocumentId: string;
+    systemContainers: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }[];
+    userId: string;
+    organizationProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    organizationProfileDocumentId?: string | undefined;
+    rosterProfileContainer?: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    } | undefined;
+    rosterProfileContainerId?: string | undefined;
+    rosterProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    rosterProfileDocumentId?: string | undefined;
+}, z.core.$ZodTypeInternals<{
+    committedCoreMetadataUpdateIds: string[];
+    committedProfileUpdateIds: string[];
+    organizationId: string;
+    organizationMetadataContainer: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    };
+    organizationMetadataContainerId: string;
+    rootContainerId: string;
+    rootMetadataAccessEpoch: number;
+    rootMetadataAccessStateHash: string;
+    rootMetadataDocument: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    };
+    rootMetadataDocumentId: string;
+    systemContainers: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }[];
+    userId: string;
+    organizationProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    organizationProfileDocumentId?: string | undefined;
+    rosterProfileContainer?: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    } | undefined;
+    rosterProfileContainerId?: string | undefined;
+    rosterProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    rosterProfileDocumentId?: string | undefined;
+}, {
+    committedCoreMetadataUpdateIds: string[];
+    committedProfileUpdateIds: string[];
+    organizationId: string;
+    organizationMetadataContainer: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    };
+    organizationMetadataContainerId: string;
+    rootContainerId: string;
+    rootMetadataAccessEpoch: number;
+    rootMetadataAccessStateHash: string;
+    rootMetadataDocument: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    };
+    rootMetadataDocumentId: string;
+    systemContainers: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }[];
+    userId: string;
+    organizationProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    organizationProfileDocumentId?: string | undefined;
+    rosterProfileContainer?: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    } | undefined;
+    rosterProfileContainerId?: string | undefined;
+    rosterProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    rosterProfileDocumentId?: string | undefined;
+}>>;
+export type OrganizationProvisioningResponse = z.infer<typeof OrganizationProvisioningResponseSchema>;
+export declare function isOrganizationProvisioningResponse(value: unknown): value is OrganizationProvisioningResponse;
+/**
+ * Response to creating an additional organization for the authenticated user.
+ * The user is already registered, so unlike registration this carries no auth
+ * challenge. Replacements additionally carry identity-signed recovery intent.
+ */
+export declare const CreateOrganizationResponseSchema: z.ZodType<{
+    replacementAuthorization: {
+        replacesOrganizationId: string;
+        organizationId: string;
+        rootContainerId: string;
+        userId: string;
+        organizationStateHash: string;
+        adminGroupId: string;
+        adminGroupStateHash: string;
+        memberGroupId: string;
+        memberGroupStateHash: string;
+        rootManifestHash: string;
+        rootMetadataDocumentId: string;
+        signature: string;
+    } | null;
+    committedCoreMetadataUpdateIds: string[];
+    committedProfileUpdateIds: string[];
+    organizationId: string;
+    organizationMetadataContainer: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    };
+    organizationMetadataContainerId: string;
+    rootContainerId: string;
+    rootMetadataAccessEpoch: number;
+    rootMetadataAccessStateHash: string;
+    rootMetadataDocument: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    };
+    rootMetadataDocumentId: string;
+    systemContainers: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }[];
+    userId: string;
+    organizationProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    organizationProfileDocumentId?: string | undefined;
+    rosterProfileContainer?: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    } | undefined;
+    rosterProfileContainerId?: string | undefined;
+    rosterProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    rosterProfileDocumentId?: string | undefined;
+}, {
+    replacementAuthorization: {
+        replacesOrganizationId: string;
+        organizationId: string;
+        rootContainerId: string;
+        userId: string;
+        organizationStateHash: string;
+        adminGroupId: string;
+        adminGroupStateHash: string;
+        memberGroupId: string;
+        memberGroupStateHash: string;
+        rootManifestHash: string;
+        rootMetadataDocumentId: string;
+        signature: string;
+    } | null;
+    committedCoreMetadataUpdateIds: string[];
+    committedProfileUpdateIds: string[];
+    organizationId: string;
+    organizationMetadataContainer: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    };
+    organizationMetadataContainerId: string;
+    rootContainerId: string;
+    rootMetadataAccessEpoch: number;
+    rootMetadataAccessStateHash: string;
+    rootMetadataDocument: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    };
+    rootMetadataDocumentId: string;
+    systemContainers: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }[];
+    userId: string;
+    organizationProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    organizationProfileDocumentId?: string | undefined;
+    rosterProfileContainer?: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    } | undefined;
+    rosterProfileContainerId?: string | undefined;
+    rosterProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    rosterProfileDocumentId?: string | undefined;
+}, z.core.$ZodTypeInternals<{
+    replacementAuthorization: {
+        replacesOrganizationId: string;
+        organizationId: string;
+        rootContainerId: string;
+        userId: string;
+        organizationStateHash: string;
+        adminGroupId: string;
+        adminGroupStateHash: string;
+        memberGroupId: string;
+        memberGroupStateHash: string;
+        rootManifestHash: string;
+        rootMetadataDocumentId: string;
+        signature: string;
+    } | null;
+    committedCoreMetadataUpdateIds: string[];
+    committedProfileUpdateIds: string[];
+    organizationId: string;
+    organizationMetadataContainer: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    };
+    organizationMetadataContainerId: string;
+    rootContainerId: string;
+    rootMetadataAccessEpoch: number;
+    rootMetadataAccessStateHash: string;
+    rootMetadataDocument: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    };
+    rootMetadataDocumentId: string;
+    systemContainers: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }[];
+    userId: string;
+    organizationProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    organizationProfileDocumentId?: string | undefined;
+    rosterProfileContainer?: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    } | undefined;
+    rosterProfileContainerId?: string | undefined;
+    rosterProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    rosterProfileDocumentId?: string | undefined;
+}, {
+    replacementAuthorization: {
+        replacesOrganizationId: string;
+        organizationId: string;
+        rootContainerId: string;
+        userId: string;
+        organizationStateHash: string;
+        adminGroupId: string;
+        adminGroupStateHash: string;
+        memberGroupId: string;
+        memberGroupStateHash: string;
+        rootManifestHash: string;
+        rootMetadataDocumentId: string;
+        signature: string;
+    } | null;
+    committedCoreMetadataUpdateIds: string[];
+    committedProfileUpdateIds: string[];
+    organizationId: string;
+    organizationMetadataContainer: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    };
+    organizationMetadataContainerId: string;
+    rootContainerId: string;
+    rootMetadataAccessEpoch: number;
+    rootMetadataAccessStateHash: string;
+    rootMetadataDocument: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    };
+    rootMetadataDocumentId: string;
+    systemContainers: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    }[];
+    userId: string;
+    organizationProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    organizationProfileDocumentId?: string | undefined;
+    rosterProfileContainer?: {
+        container: {
+            createdAt: string;
+            manifestHead: {
+                epoch: number;
+                manifestHash: string;
+            };
+            organizationId: string;
+            parentId: string | null;
+            referencedPrincipalHeads: {
+                principalType: "group";
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                stateHash: string;
+                version: number;
+            }[];
+            updatedAt: string;
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            containerId: string;
+            containerKek: {
+                accessManifestHash: string;
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHistory: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                }[];
+                keyEpoch: Record<string, unknown>;
+                keyEpochHash: string;
+                keyring: {
+                    containerId: string;
+                    containerKeyEpochId: string;
+                    iv: string;
+                    sealed: string;
+                    sealingSuite: string;
+                    version: number;
+                } | null;
+                keyTargetHash: string;
+                parentContainerKeyEpochId: string | null;
+                recipientTargets: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+            };
+            systemSlot?: string | null | undefined;
+        };
+        metadataDocument: {
+            accessManifest: {
+                event: {
+                    body: unknown;
+                    event: Record<string, unknown>;
+                    eventHash: string;
+                };
+                manifest: Record<string, unknown>;
+                manifestHash: string;
+                state: Record<string, unknown>;
+            };
+            contentKeyBundle: {
+                contentKeyEpoch: number;
+                documentId: string;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            };
+            createdAt: string;
+            documentKekTargets: {
+                documentId: string;
+                documentKeyTargetHash: string;
+                linkedContainerKeyEpochIds: string[];
+                linkedContainerManifestHashes: string[];
+                linkSetManifestHash: string;
+                targets: Record<string, unknown>[];
+            };
+            id: string;
+        };
+    } | undefined;
+    rosterProfileContainerId?: string | undefined;
+    rosterProfileDocument?: {
+        accessManifest: {
+            event: {
+                body: unknown;
+                event: Record<string, unknown>;
+                eventHash: string;
+            };
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        };
+        contentKeyBundle: {
+            contentKeyEpoch: number;
+            documentId: string;
+            linkSetManifestHash: string;
+            targetHash: string;
+            targets: {
+                containerId: string;
+                containerKeyEpoch: number;
+                containerKeyEpochId: string;
+                containerManifestHash: string;
+                wrappedKey: string;
+                wrappingMetadata: Record<string, unknown>;
+            }[];
+        };
+        createdAt: string;
+        documentKekTargets: {
+            documentId: string;
+            documentKeyTargetHash: string;
+            linkedContainerKeyEpochIds: string[];
+            linkedContainerManifestHashes: string[];
+            linkSetManifestHash: string;
+            targets: Record<string, unknown>[];
+        };
+        id: string;
+    } | undefined;
+    rosterProfileDocumentId?: string | undefined;
+}>>;
+export type CreateOrganizationResponse = z.infer<typeof CreateOrganizationResponseSchema>;
+export declare function isCreateOrganizationResponse(value: unknown): value is CreateOrganizationResponse;