@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/internal/validators/request/blob.js

@@ -0,0 +1,68 @@
+import { arraySchema, loosePlainObject, nonEmptyArraySchema, nonEmptyStringSchema, plainObjectSchema, positiveIntegerSchema, requiredUnknownSchema, uuidV4StringSchema, } from "../schema.js";
+import { MAX_INLINE_CONTAINER_REKEYS } from "../util/index.js";
+import { ContainerMutationRequestSchema } from "./container.js";
+import { ContentKeyWrappedKeySchema, contentKeyWrappingMetadataSchema, } from "./contentKeyEnvelopeSchema.js";
+import { ContainerManifestRefArrayArraySchema } from "./document.js";
+export const InitiateMultipartBlobStageRequestSchema = loosePlainObject({
+    organizationId: uuidV4StringSchema,
+    byteLength: positiveIntegerSchema,
+    sha256: nonEmptyStringSchema,
+});
+export const MultipartBlobPartCommitRequestSchema = loosePlainObject({
+    etag: nonEmptyStringSchema,
+    partNumber: positiveIntegerSchema,
+});
+export const CompleteMultipartBlobStageRequestSchema = loosePlainObject({
+    parts: nonEmptyArraySchema(MultipartBlobPartCommitRequestSchema),
+    uploadId: nonEmptyStringSchema,
+});
+export const BlobContentKeyTargetEnvelopeRequestSchema = loosePlainObject({
+    bindingId: nonEmptyStringSchema,
+    containerId: nonEmptyStringSchema,
+    containerKeyEpoch: positiveIntegerSchema,
+    containerKeyEpochId: nonEmptyStringSchema,
+    containerManifestHash: nonEmptyStringSchema,
+    documentId: nonEmptyStringSchema,
+    wrappedKey: ContentKeyWrappedKeySchema,
+    wrappingMetadata: contentKeyWrappingMetadataSchema("blob"),
+});
+export const BlobContentKeyBundleRequestSchema = loosePlainObject({
+    contentKeyEpoch: positiveIntegerSchema,
+    targetHash: nonEmptyStringSchema,
+    targets: arraySchema(BlobContentKeyTargetEnvelopeRequestSchema),
+});
+export const BlobStagedBlobRequestSchema = loosePlainObject({
+    stageId: nonEmptyStringSchema,
+    writeHeader: plainObjectSchema,
+});
+const OptionalContainerRekeysSchema = arraySchema(ContainerMutationRequestSchema, MAX_INLINE_CONTAINER_REKEYS).optional();
+export const BlobAttachmentBindRequestSchema = loosePlainObject({
+    // The attachment's document link-set manifest is the document's current
+    // head. The server resolves it from its own store, while these path refs
+    // authorize the write against current container manifests.
+    authorizingContainerPathRefs: ContainerManifestRefArrayArraySchema,
+    body: requiredUnknownSchema,
+    containerRekeys: OptionalContainerRekeysSchema,
+    contentKeyBundle: BlobContentKeyBundleRequestSchema,
+    event: plainObjectSchema,
+    stagedBlob: BlobStagedBlobRequestSchema.optional(),
+});
+export const BlobAttachmentDetachRequestSchema = loosePlainObject({
+    authorizingContainerPathRefs: ContainerManifestRefArrayArraySchema,
+    body: requiredUnknownSchema,
+    containerRekeys: OptionalContainerRekeysSchema,
+    event: plainObjectSchema,
+});
+export function isInitiateMultipartBlobStageRequest(value) {
+    return InitiateMultipartBlobStageRequestSchema.safeParse(value).success;
+}
+export function isCompleteMultipartBlobStageRequest(value) {
+    return CompleteMultipartBlobStageRequestSchema.safeParse(value).success;
+}
+export function isBlobAttachmentBindRequest(value) {
+    return BlobAttachmentBindRequestSchema.safeParse(value).success;
+}
+export function isBlobAttachmentDetachRequest(value) {
+    return BlobAttachmentDetachRequestSchema.safeParse(value).success;
+}
+//# sourceMappingURL=blob.js.map

package/internal/validators/request/blob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob.js","sourceRoot":"","sources":["blob.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,2BAA2B,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oCAAoC,EAAE,MAAM,YAAY,CAAC;AAElE,MAAM,CAAC,MAAM,uCAAuC,GAAG,gBAAgB,CAAC;IACtE,cAAc,EAAE,kBAAkB;IAClC,UAAU,EAAE,qBAAqB;IACjC,MAAM,EAAE,oBAAoB;CAC7B,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,oCAAoC,GAAG,gBAAgB,CAAC;IACnE,IAAI,EAAE,oBAAoB;IAC1B,UAAU,EAAE,qBAAqB;CAClC,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,uCAAuC,GAAG,gBAAgB,CAAC;IACtE,KAAK,EAAE,mBAAmB,CAAC,oCAAoC,CAAC;IAChE,QAAQ,EAAE,oBAAoB;CAC/B,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,yCAAyC,GAAG,gBAAgB,CAAC;IACxE,SAAS,EAAE,oBAAoB;IAC/B,WAAW,EAAE,oBAAoB;IACjC,iBAAiB,EAAE,qBAAqB;IACxC,mBAAmB,EAAE,oBAAoB;IACzC,qBAAqB,EAAE,oBAAoB;IAC3C,UAAU,EAAE,oBAAoB;IAChC,UAAU,EAAE,0BAA0B;IACtC,gBAAgB,EAAE,gCAAgC,CAAC,MAAM,CAAC;CAC3D,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;IAChE,eAAe,EAAE,qBAAqB;IACtC,UAAU,EAAE,oBAAoB;IAChC,OAAO,EAAE,WAAW,CAAC,yCAAyC,CAAC;CAChE,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;IAC1D,OAAO,EAAE,oBAAoB;IAC7B,WAAW,EAAE,iBAAiB;CAC/B,CAAC,CAAC;AAIH,MAAM,6BAA6B,GAAG,WAAW,CAC/C,8BAA8B,EAC9B,2BAA2B,CAC5B,CAAC,QAAQ,EAAE,CAAC;AAEb,MAAM,CAAC,MAAM,+BAA+B,GAAG,gBAAgB,CAAC;IAC9D,wEAAwE;IACxE,yEAAyE;IACzE,2DAA2D;IAC3D,4BAA4B,EAAE,oCAAoC;IAClE,IAAI,EAAE,qBAAqB;IAC3B,eAAe,EAAE,6BAA6B;IAC9C,gBAAgB,EAAE,iCAAiC;IACnD,KAAK,EAAE,iBAAiB;IACxB,UAAU,EAAE,2BAA2B,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;IAChE,4BAA4B,EAAE,oCAAoC;IAClE,IAAI,EAAE,qBAAqB;IAC3B,eAAe,EAAE,6BAA6B;IAC9C,KAAK,EAAE,iBAAiB;CACzB,CAAC,CAAC;AAMH,MAAM,UAAU,mCAAmC,CACjD,KAAc;IAEd,OAAO,uCAAuC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAc;IAEd,OAAO,uCAAuC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc;IAEd,OAAO,+BAA+B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAc;IAEd,OAAO,iCAAiC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACpE,CAAC","sourcesContent":["import type { z } from \"zod\";\nimport {\n  arraySchema,\n  loosePlainObject,\n  nonEmptyArraySchema,\n  nonEmptyStringSchema,\n  plainObjectSchema,\n  positiveIntegerSchema,\n  requiredUnknownSchema,\n  uuidV4StringSchema,\n} from \"../schema\";\nimport { MAX_INLINE_CONTAINER_REKEYS } from \"../util\";\nimport { ContainerMutationRequestSchema } from \"./container\";\nimport {\n  ContentKeyWrappedKeySchema,\n  contentKeyWrappingMetadataSchema,\n} from \"./contentKeyEnvelopeSchema\";\nimport { ContainerManifestRefArrayArraySchema } from \"./document\";\n\nexport const InitiateMultipartBlobStageRequestSchema = loosePlainObject({\n  organizationId: uuidV4StringSchema,\n  byteLength: positiveIntegerSchema,\n  sha256: nonEmptyStringSchema,\n});\n\nexport type InitiateMultipartBlobStageRequest = z.infer<\n  typeof InitiateMultipartBlobStageRequestSchema\n>;\n\nexport const MultipartBlobPartCommitRequestSchema = loosePlainObject({\n  etag: nonEmptyStringSchema,\n  partNumber: positiveIntegerSchema,\n});\n\nexport type MultipartBlobPartCommitRequest = z.infer<\n  typeof MultipartBlobPartCommitRequestSchema\n>;\n\nexport const CompleteMultipartBlobStageRequestSchema = loosePlainObject({\n  parts: nonEmptyArraySchema(MultipartBlobPartCommitRequestSchema),\n  uploadId: nonEmptyStringSchema,\n});\n\nexport type CompleteMultipartBlobStageRequest = z.infer<\n  typeof CompleteMultipartBlobStageRequestSchema\n>;\n\nexport const BlobContentKeyTargetEnvelopeRequestSchema = loosePlainObject({\n  bindingId: nonEmptyStringSchema,\n  containerId: nonEmptyStringSchema,\n  containerKeyEpoch: positiveIntegerSchema,\n  containerKeyEpochId: nonEmptyStringSchema,\n  containerManifestHash: nonEmptyStringSchema,\n  documentId: nonEmptyStringSchema,\n  wrappedKey: ContentKeyWrappedKeySchema,\n  wrappingMetadata: contentKeyWrappingMetadataSchema(\"blob\"),\n});\n\nexport type BlobContentKeyTargetEnvelopeRequest = z.infer<\n  typeof BlobContentKeyTargetEnvelopeRequestSchema\n>;\n\nexport const BlobContentKeyBundleRequestSchema = loosePlainObject({\n  contentKeyEpoch: positiveIntegerSchema,\n  targetHash: nonEmptyStringSchema,\n  targets: arraySchema(BlobContentKeyTargetEnvelopeRequestSchema),\n});\n\nexport type BlobContentKeyBundleRequest = z.infer<\n  typeof BlobContentKeyBundleRequestSchema\n>;\n\nexport const BlobStagedBlobRequestSchema = loosePlainObject({\n  stageId: nonEmptyStringSchema,\n  writeHeader: plainObjectSchema,\n});\n\nexport type BlobStagedBlobRequest = z.infer<typeof BlobStagedBlobRequestSchema>;\n\nconst OptionalContainerRekeysSchema = arraySchema(\n  ContainerMutationRequestSchema,\n  MAX_INLINE_CONTAINER_REKEYS,\n).optional();\n\nexport const BlobAttachmentBindRequestSchema = loosePlainObject({\n  // The attachment's document link-set manifest is the document's current\n  // head. The server resolves it from its own store, while these path refs\n  // authorize the write against current container manifests.\n  authorizingContainerPathRefs: ContainerManifestRefArrayArraySchema,\n  body: requiredUnknownSchema,\n  containerRekeys: OptionalContainerRekeysSchema,\n  contentKeyBundle: BlobContentKeyBundleRequestSchema,\n  event: plainObjectSchema,\n  stagedBlob: BlobStagedBlobRequestSchema.optional(),\n});\n\nexport type BlobAttachmentBindRequest = z.infer<\n  typeof BlobAttachmentBindRequestSchema\n>;\n\nexport const BlobAttachmentDetachRequestSchema = loosePlainObject({\n  authorizingContainerPathRefs: ContainerManifestRefArrayArraySchema,\n  body: requiredUnknownSchema,\n  containerRekeys: OptionalContainerRekeysSchema,\n  event: plainObjectSchema,\n});\n\nexport type BlobAttachmentDetachRequest = z.infer<\n  typeof BlobAttachmentDetachRequestSchema\n>;\n\nexport function isInitiateMultipartBlobStageRequest(\n  value: unknown,\n): value is InitiateMultipartBlobStageRequest {\n  return InitiateMultipartBlobStageRequestSchema.safeParse(value).success;\n}\n\nexport function isCompleteMultipartBlobStageRequest(\n  value: unknown,\n): value is CompleteMultipartBlobStageRequest {\n  return CompleteMultipartBlobStageRequestSchema.safeParse(value).success;\n}\n\nexport function isBlobAttachmentBindRequest(\n  value: unknown,\n): value is BlobAttachmentBindRequest {\n  return BlobAttachmentBindRequestSchema.safeParse(value).success;\n}\n\nexport function isBlobAttachmentDetachRequest(\n  value: unknown,\n): value is BlobAttachmentDetachRequest {\n  return BlobAttachmentDetachRequestSchema.safeParse(value).success;\n}\n"]}

package/internal/validators/request/container.d.ts

@@ -0,0 +1,598 @@
+import { z } from "zod";
+export declare const ContainerMutationRequestSchema: z.ZodType<{
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    keyEpoch: Record<string, unknown>;
+    keyring: Record<string, unknown> | null;
+    manifest: Record<string, unknown>;
+    predecessorBridge: Record<string, unknown> | null;
+    principalPolicies: Record<string, unknown>[];
+    wraps: Record<string, unknown>[];
+    containerManifestHistory?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    destinationParentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentKekState?: Record<string, unknown> | null | undefined;
+    previousContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    previousManifest?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    } | null | undefined;
+    userRecipientKeys?: Record<string, unknown>[] | undefined;
+}, {
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    keyEpoch: Record<string, unknown>;
+    keyring: Record<string, unknown> | null;
+    manifest: Record<string, unknown>;
+    predecessorBridge: Record<string, unknown> | null;
+    principalPolicies: Record<string, unknown>[];
+    wraps: Record<string, unknown>[];
+    containerManifestHistory?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    destinationParentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentKekState?: Record<string, unknown> | null | undefined;
+    previousContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    previousManifest?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    } | null | undefined;
+    userRecipientKeys?: Record<string, unknown>[] | undefined;
+}, z.core.$ZodTypeInternals<{
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    keyEpoch: Record<string, unknown>;
+    keyring: Record<string, unknown> | null;
+    manifest: Record<string, unknown>;
+    predecessorBridge: Record<string, unknown> | null;
+    principalPolicies: Record<string, unknown>[];
+    wraps: Record<string, unknown>[];
+    containerManifestHistory?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    destinationParentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentKekState?: Record<string, unknown> | null | undefined;
+    previousContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    previousManifest?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    } | null | undefined;
+    userRecipientKeys?: Record<string, unknown>[] | undefined;
+}, {
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    keyEpoch: Record<string, unknown>;
+    keyring: Record<string, unknown> | null;
+    manifest: Record<string, unknown>;
+    predecessorBridge: Record<string, unknown> | null;
+    principalPolicies: Record<string, unknown>[];
+    wraps: Record<string, unknown>[];
+    containerManifestHistory?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    destinationParentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentKekState?: Record<string, unknown> | null | undefined;
+    previousContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    previousManifest?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    } | null | undefined;
+    userRecipientKeys?: Record<string, unknown>[] | undefined;
+}>>;
+export type ContainerMutationRequest = z.infer<typeof ContainerMutationRequestSchema>;
+/**
+ * A rekey, revoke, or move: the rotation plus the descendant rekeys it must
+ * commit with. `containerRekeys` names, parent-first, the descendants above a
+ * directly granted container; they commit with the rotation or not at all.
+ * Only these three routes take it, so the carriers that already hold a flat
+ * rekey list (document and blob writes) stay as they are.
+ */
+export declare const ContainerRotationRequestSchema: z.ZodType<{
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    keyEpoch: Record<string, unknown>;
+    keyring: Record<string, unknown> | null;
+    manifest: Record<string, unknown>;
+    predecessorBridge: Record<string, unknown> | null;
+    principalPolicies: Record<string, unknown>[];
+    wraps: Record<string, unknown>[];
+    containerRekeys?: {
+        body: unknown;
+        event: Record<string, unknown>;
+        expectedManifestHash: string;
+        keyEpoch: Record<string, unknown>;
+        keyring: Record<string, unknown> | null;
+        manifest: Record<string, unknown>;
+        predecessorBridge: Record<string, unknown> | null;
+        principalPolicies: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+        containerManifestHistory?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        destinationParentContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        parentContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        parentKekState?: Record<string, unknown> | null | undefined;
+        previousContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        previousManifest?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        } | null | undefined;
+        userRecipientKeys?: Record<string, unknown>[] | undefined;
+    }[] | undefined;
+    containerManifestHistory?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    destinationParentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentKekState?: Record<string, unknown> | null | undefined;
+    previousContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    previousManifest?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    } | null | undefined;
+    userRecipientKeys?: Record<string, unknown>[] | undefined;
+}, {
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    keyEpoch: Record<string, unknown>;
+    keyring: Record<string, unknown> | null;
+    manifest: Record<string, unknown>;
+    predecessorBridge: Record<string, unknown> | null;
+    principalPolicies: Record<string, unknown>[];
+    wraps: Record<string, unknown>[];
+    containerRekeys?: {
+        body: unknown;
+        event: Record<string, unknown>;
+        expectedManifestHash: string;
+        keyEpoch: Record<string, unknown>;
+        keyring: Record<string, unknown> | null;
+        manifest: Record<string, unknown>;
+        predecessorBridge: Record<string, unknown> | null;
+        principalPolicies: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+        containerManifestHistory?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        destinationParentContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        parentContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        parentKekState?: Record<string, unknown> | null | undefined;
+        previousContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        previousManifest?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        } | null | undefined;
+        userRecipientKeys?: Record<string, unknown>[] | undefined;
+    }[] | undefined;
+    containerManifestHistory?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    destinationParentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentKekState?: Record<string, unknown> | null | undefined;
+    previousContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    previousManifest?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    } | null | undefined;
+    userRecipientKeys?: Record<string, unknown>[] | undefined;
+}, z.core.$ZodTypeInternals<{
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    keyEpoch: Record<string, unknown>;
+    keyring: Record<string, unknown> | null;
+    manifest: Record<string, unknown>;
+    predecessorBridge: Record<string, unknown> | null;
+    principalPolicies: Record<string, unknown>[];
+    wraps: Record<string, unknown>[];
+    containerRekeys?: {
+        body: unknown;
+        event: Record<string, unknown>;
+        expectedManifestHash: string;
+        keyEpoch: Record<string, unknown>;
+        keyring: Record<string, unknown> | null;
+        manifest: Record<string, unknown>;
+        predecessorBridge: Record<string, unknown> | null;
+        principalPolicies: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+        containerManifestHistory?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        destinationParentContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        parentContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        parentKekState?: Record<string, unknown> | null | undefined;
+        previousContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        previousManifest?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        } | null | undefined;
+        userRecipientKeys?: Record<string, unknown>[] | undefined;
+    }[] | undefined;
+    containerManifestHistory?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    destinationParentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentKekState?: Record<string, unknown> | null | undefined;
+    previousContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    previousManifest?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    } | null | undefined;
+    userRecipientKeys?: Record<string, unknown>[] | undefined;
+}, {
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    keyEpoch: Record<string, unknown>;
+    keyring: Record<string, unknown> | null;
+    manifest: Record<string, unknown>;
+    predecessorBridge: Record<string, unknown> | null;
+    principalPolicies: Record<string, unknown>[];
+    wraps: Record<string, unknown>[];
+    containerRekeys?: {
+        body: unknown;
+        event: Record<string, unknown>;
+        expectedManifestHash: string;
+        keyEpoch: Record<string, unknown>;
+        keyring: Record<string, unknown> | null;
+        manifest: Record<string, unknown>;
+        predecessorBridge: Record<string, unknown> | null;
+        principalPolicies: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+        containerManifestHistory?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        destinationParentContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        parentContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        parentKekState?: Record<string, unknown> | null | undefined;
+        previousContainerPath?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        }[] | undefined;
+        previousManifest?: {
+            event: Record<string, unknown>;
+            manifest: Record<string, unknown>;
+            manifestHash: string;
+            state: Record<string, unknown>;
+        } | null | undefined;
+        userRecipientKeys?: Record<string, unknown>[] | undefined;
+    }[] | undefined;
+    containerManifestHistory?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    destinationParentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    parentKekState?: Record<string, unknown> | null | undefined;
+    previousContainerPath?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[] | undefined;
+    previousManifest?: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    } | null | undefined;
+    userRecipientKeys?: Record<string, unknown>[] | undefined;
+}>>;
+export type ContainerRotationRequest = z.infer<typeof ContainerRotationRequestSchema>;
+export declare const ContainerReciteRequestSchema: z.ZodType<{
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    manifest: Record<string, unknown>;
+    previousContainerPath: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[];
+    previousManifest: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    };
+    principalPolicies: Record<string, unknown>[];
+}, {
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    manifest: Record<string, unknown>;
+    previousContainerPath: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[];
+    previousManifest: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    };
+    principalPolicies: Record<string, unknown>[];
+}, z.core.$ZodTypeInternals<{
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    manifest: Record<string, unknown>;
+    previousContainerPath: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[];
+    previousManifest: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    };
+    principalPolicies: Record<string, unknown>[];
+}, {
+    body: unknown;
+    event: Record<string, unknown>;
+    expectedManifestHash: string;
+    manifest: Record<string, unknown>;
+    previousContainerPath: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }[];
+    previousManifest: {
+        event: Record<string, unknown>;
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    };
+    principalPolicies: Record<string, unknown>[];
+}>>;
+export type ContainerReciteRequest = z.infer<typeof ContainerReciteRequestSchema>;
+export declare function isContainerReciteRequest(value: unknown): value is ContainerReciteRequest;
+export declare function isContainerRotationRequest(value: unknown): value is ContainerRotationRequest;
+export declare function isContainerMutationRequest(value: unknown): value is ContainerMutationRequest;
+export declare function isOptionalContainerMutationRequestArray(value: unknown): value is ContainerMutationRequest[] | undefined;