@tearleads/client-sdk 0.1.117 → 0.1.118

package/internal/validators/response/documentMutation.d.ts

@@ -1808,7 +1808,7 @@ export declare const DocumentWriterProjectionWireResponseSchema: z.ZodType<{
     };
     authorizingContainerPaths: {
         containerId: string;
-        containerKeks: {
+        containerKeks: ({
             containerManifestHistory: string[];
             accessManifestHash: string;
             containerId: string;
@@ -1828,7 +1828,10 @@ export declare const DocumentWriterProjectionWireResponseSchema: z.ZodType<{
             parentContainerKeyEpochId: string | null;
             recipientTargets: Record<string, unknown>[];
             wraps: Record<string, unknown>[];
-        }[];
+        } | {
+            levelDigest: string;
+            containerManifestHistory: string[];
+        })[];
         organizationId: string;
         path: string[];
     }[];
@@ -1917,7 +1920,7 @@ export declare const DocumentWriterProjectionWireResponseSchema: z.ZodType<{
     };
     authorizingContainerPaths: {
         containerId: string;
-        containerKeks: {
+        containerKeks: ({
             containerManifestHistory: string[];
             accessManifestHash: string;
             containerId: string;
@@ -1937,7 +1940,10 @@ export declare const DocumentWriterProjectionWireResponseSchema: z.ZodType<{
             parentContainerKeyEpochId: string | null;
             recipientTargets: Record<string, unknown>[];
             wraps: Record<string, unknown>[];
-        }[];
+        } | {
+            levelDigest: string;
+            containerManifestHistory: string[];
+        })[];
         organizationId: string;
         path: string[];
     }[];
@@ -2026,7 +2032,7 @@ export declare const DocumentWriterProjectionWireResponseSchema: z.ZodType<{
     };
     authorizingContainerPaths: {
         containerId: string;
-        containerKeks: {
+        containerKeks: ({
             containerManifestHistory: string[];
             accessManifestHash: string;
             containerId: string;
@@ -2046,7 +2052,10 @@ export declare const DocumentWriterProjectionWireResponseSchema: z.ZodType<{
             parentContainerKeyEpochId: string | null;
             recipientTargets: Record<string, unknown>[];
             wraps: Record<string, unknown>[];
-        }[];
+        } | {
+            levelDigest: string;
+            containerManifestHistory: string[];
+        })[];
         organizationId: string;
         path: string[];
     }[];
@@ -2135,7 +2144,7 @@ export declare const DocumentWriterProjectionWireResponseSchema: z.ZodType<{
     };
     authorizingContainerPaths: {
         containerId: string;
-        containerKeks: {
+        containerKeks: ({
             containerManifestHistory: string[];
             accessManifestHash: string;
             containerId: string;
@@ -2155,7 +2164,10 @@ export declare const DocumentWriterProjectionWireResponseSchema: z.ZodType<{
             parentContainerKeyEpochId: string | null;
             recipientTargets: Record<string, unknown>[];
             wraps: Record<string, unknown>[];
-        }[];
+        } | {
+            levelDigest: string;
+            containerManifestHistory: string[];
+        })[];
         organizationId: string;
         path: string[];
     }[];

package/internal/validators/response/index.d.ts

@@ -4,7 +4,7 @@ export { type ChallengeErrorResponse, ChallengeErrorResponseSchema, type Challen
 export { isRevenueCatWebhookResponse, isStripeWebhookResponse, type RevenueCatWebhookResponse, RevenueCatWebhookResponseSchema, type StripeWebhookResponse, StripeWebhookResponseSchema, } from "./billingWebhooks.js";
 export { type BlobAttachmentBindResponse, BlobAttachmentBindResponseSchema, type BlobAttachmentDetachResponse, BlobAttachmentDetachResponseSchema, type BlobAttachmentSummary, BlobAttachmentSummarySchema, type BlobContentKeyBundleResponse, BlobContentKeyBundleResponseSchema, type BlobContentKeyTargetEnvelopeResponse, BlobContentKeyTargetEnvelopeResponseSchema, type BlobKekTargetsResponse, BlobKekTargetsResponseSchema, type InitiateMultipartBlobStageResponse, InitiateMultipartBlobStageResponseSchema, isBlobAttachmentBindResponse, isBlobAttachmentDetachResponse, isInitiateMultipartBlobStageResponse, isListDocumentAttachmentsResponse, isMultipartBlobStageStatusResponse, isUploadMultipartBlobPartResponse, type ListDocumentAttachmentsResponse, ListDocumentAttachmentsResponseSchema, type MultipartBlobStagePart, MultipartBlobStagePartSchema, type MultipartBlobStageStatusResponse, MultipartBlobStageStatusResponseSchema, type UploadMultipartBlobPartResponse, UploadMultipartBlobPartResponseSchema, } from "./blob.js";
 export { BLOB_MUTATION_ERROR_CODES, type BlobMutationErrorCode, type BlobMutationFailureResponse, BlobMutationFailureResponseSchema, } from "./blobMutationError.js";
-export { CONTAINER_PROJECTION_STATE_INVALID_ERROR_CODE, type ContainerDeleteResponse, ContainerDeleteResponseSchema, type ContainerKekKeyringWireResponse, type ContainerKekLogEpochResponse, ContainerKekLogEpochResponseSchema, type ContainerKekLogResponse, ContainerKekLogResponseSchema, type ContainerKekResponse, type ContainerKeyingPathResponse, ContainerKeyingPathResponseSchema, type ContainerMutationResponse, ContainerMutationResponseSchema, type ContainerReciteResponse, ContainerReciteResponseSchema, type ContainerRotationResponse, ContainerRotationResponseSchema, type ContainerSummary, ContainerSummaryResponseSchema, type ContainerSyncTombstone, ContainerSyncTombstoneResponseSchema, ContainerWriterProjectionErrorResponseSchema, type ContainerWriterProjectionResponse, ContainerWriterProjectionResponseSchema, type ContainerWriterProjectionWireResponse, ContainerWriterProjectionWireResponseSchema, isContainerDeleteResponse, isContainerKekLogResponse, isContainerMutationResponse, isContainerReciteResponse, isContainerRotationResponse, isContainerWriterProjectionResponse, isContainerWriterProjectionWireResponse, isListContainersResponse, type ListContainersResponse, ListContainersResponseSchema, } from "./container.js";
+export { type CitedContainerKekLevel, CitedContainerKekLevelSchema, CONTAINER_PROJECTION_STATE_INVALID_ERROR_CODE, type ContainerDeleteResponse, ContainerDeleteResponseSchema, type ContainerKekKeyringWireResponse, type ContainerKekLogEpochResponse, ContainerKekLogEpochResponseSchema, type ContainerKekLogResponse, ContainerKekLogResponseSchema, type ContainerKekResponse, type ContainerKekWireLevel, type ContainerKeyingPathResponse, ContainerKeyingPathResponseSchema, type ContainerMutationResponse, ContainerMutationResponseSchema, type ContainerReciteResponse, ContainerReciteResponseSchema, type ContainerRotationResponse, ContainerRotationResponseSchema, type ContainerSummary, ContainerSummaryResponseSchema, type ContainerSyncTombstone, ContainerSyncTombstoneResponseSchema, ContainerWriterProjectionErrorResponseSchema, type ContainerWriterProjectionResponse, ContainerWriterProjectionResponseSchema, type ContainerWriterProjectionWireResponse, ContainerWriterProjectionWireResponseSchema, isCitedContainerKekLevel, isContainerDeleteResponse, isContainerKekLogResponse, isContainerKekWireLevel, isContainerMutationResponse, isContainerReciteResponse, isContainerRotationResponse, isContainerWriterProjectionResponse, isContainerWriterProjectionWireResponse, isListContainersResponse, type ListContainersResponse, ListContainersResponseSchema, } from "./container.js";
 export type { ListContainerDocumentLanesResponse } from "./containerDocumentLanes.js";
 export { type ContainerCreateWithMetadataDocumentResponse, ContainerCreateWithMetadataDocumentResponseSchema, isContainerCreateWithMetadataDocumentResponse, } from "./containerMetadata.js";
 export { CONTAINER_MUTATION_ERROR_CODES, ContainerMutationBehaviorErrorCodeSchema, type ContainerMutationErrorCode, ContainerMutationErrorCodeSchema, type ContainerMutationFailureResponse, ContainerMutationFailureResponseSchema, } from "./containerMutationError.js";
@@ -43,4 +43,4 @@ export { type RootDataUsageReportResponse, RootDataUsageReportResponseSchema, ty
 export { ROOT_REVENUECAT_DISPOSITIONS, ROOT_REVENUECAT_EVENT_ROLES, type RootOrganizationRevenuecatEventResponse, RootOrganizationRevenuecatEventResponseSchema, type RootOrganizationRevenuecatEventsResponse, RootOrganizationRevenuecatEventsResponseSchema, type RootRevenuecatDisposition, RootRevenuecatDispositionSchema, type RootRevenuecatEventResponse, RootRevenuecatEventResponseSchema, type RootRevenuecatEventsReportResponse, RootRevenuecatEventsReportResponseSchema, } from "./rootRevenuecat.js";
 export { isStripeCancelResponse, isStripeCheckoutIntentResponse, isStripeCheckoutOptionsResponse, isStripeCheckoutSessionResponse, isStripePortalResponse, type StripeCancelResponse, StripeCancelResponseSchema, type StripeCheckoutIntentResponse, StripeCheckoutIntentResponseSchema, type StripeCheckoutOptionsResponse, StripeCheckoutOptionsResponseSchema, type StripeCheckoutSessionResponse, StripeCheckoutSessionResponseSchema, type StripePortalResponse, StripePortalResponseSchema, type StripeSyncOptionResponse, StripeSyncOptionResponseSchema, } from "./stripeCheckout.js";
 export { isSyncWatermark, type SyncWatermark, SyncWatermarkSchema, } from "./syncWatermark.js";
-export { decodeContainerWriterProjection, decodeDocumentWriterProjection, encodeContainerWriterProjection, encodeDocumentWriterProjection, } from "./writerProjectionWire.js";
+export { containerKekWireLevel, decodeContainerWriterProjection, decodeDocumentWriterProjection, encodeContainerWriterProjection, encodeDocumentWriterProjection, type HeldKekLevelDigest, } from "./writerProjectionWire.js";

package/internal/validators/response/index.js

@@ -4,7 +4,7 @@ export { ChallengeErrorResponseSchema, ChallengeResponseSchema, DestroySessionRe
 export { isRevenueCatWebhookResponse, isStripeWebhookResponse, RevenueCatWebhookResponseSchema, StripeWebhookResponseSchema, } from "./billingWebhooks.js";
 export { BlobAttachmentBindResponseSchema, BlobAttachmentDetachResponseSchema, BlobAttachmentSummarySchema, BlobContentKeyBundleResponseSchema, BlobContentKeyTargetEnvelopeResponseSchema, BlobKekTargetsResponseSchema, InitiateMultipartBlobStageResponseSchema, isBlobAttachmentBindResponse, isBlobAttachmentDetachResponse, isInitiateMultipartBlobStageResponse, isListDocumentAttachmentsResponse, isMultipartBlobStageStatusResponse, isUploadMultipartBlobPartResponse, ListDocumentAttachmentsResponseSchema, MultipartBlobStagePartSchema, MultipartBlobStageStatusResponseSchema, UploadMultipartBlobPartResponseSchema, } from "./blob.js";
 export { BLOB_MUTATION_ERROR_CODES, BlobMutationFailureResponseSchema, } from "./blobMutationError.js";
-export { CONTAINER_PROJECTION_STATE_INVALID_ERROR_CODE, ContainerDeleteResponseSchema, ContainerKekLogEpochResponseSchema, ContainerKekLogResponseSchema, ContainerKeyingPathResponseSchema, ContainerMutationResponseSchema, ContainerReciteResponseSchema, ContainerRotationResponseSchema, ContainerSummaryResponseSchema, ContainerSyncTombstoneResponseSchema, ContainerWriterProjectionErrorResponseSchema, ContainerWriterProjectionResponseSchema, ContainerWriterProjectionWireResponseSchema, isContainerDeleteResponse, isContainerKekLogResponse, isContainerMutationResponse, isContainerReciteResponse, isContainerRotationResponse, isContainerWriterProjectionResponse, isContainerWriterProjectionWireResponse, isListContainersResponse, ListContainersResponseSchema, } from "./container.js";
+export { CitedContainerKekLevelSchema, CONTAINER_PROJECTION_STATE_INVALID_ERROR_CODE, ContainerDeleteResponseSchema, ContainerKekLogEpochResponseSchema, ContainerKekLogResponseSchema, ContainerKeyingPathResponseSchema, ContainerMutationResponseSchema, ContainerReciteResponseSchema, ContainerRotationResponseSchema, ContainerSummaryResponseSchema, ContainerSyncTombstoneResponseSchema, ContainerWriterProjectionErrorResponseSchema, ContainerWriterProjectionResponseSchema, ContainerWriterProjectionWireResponseSchema, isCitedContainerKekLevel, isContainerDeleteResponse, isContainerKekLogResponse, isContainerKekWireLevel, isContainerMutationResponse, isContainerReciteResponse, isContainerRotationResponse, isContainerWriterProjectionResponse, isContainerWriterProjectionWireResponse, isListContainersResponse, ListContainersResponseSchema, } from "./container.js";
 export { ContainerCreateWithMetadataDocumentResponseSchema, isContainerCreateWithMetadataDocumentResponse, } from "./containerMetadata.js";
 export { CONTAINER_MUTATION_ERROR_CODES, ContainerMutationBehaviorErrorCodeSchema, ContainerMutationErrorCodeSchema, ContainerMutationFailureResponseSchema, } from "./containerMutationError.js";
 export { CONTAINER_NOT_FOUND_ERROR_CODE, ContainerNotFoundErrorResponseSchema, } from "./containerNotFoundError.js";
@@ -42,5 +42,5 @@ export { RootDataUsageReportResponseSchema, RootOrganizationDetailResponseSchema
 export { ROOT_REVENUECAT_DISPOSITIONS, ROOT_REVENUECAT_EVENT_ROLES, RootOrganizationRevenuecatEventResponseSchema, RootOrganizationRevenuecatEventsResponseSchema, RootRevenuecatDispositionSchema, RootRevenuecatEventResponseSchema, RootRevenuecatEventsReportResponseSchema, } from "./rootRevenuecat.js";
 export { isStripeCancelResponse, isStripeCheckoutIntentResponse, isStripeCheckoutOptionsResponse, isStripeCheckoutSessionResponse, isStripePortalResponse, StripeCancelResponseSchema, StripeCheckoutIntentResponseSchema, StripeCheckoutOptionsResponseSchema, StripeCheckoutSessionResponseSchema, StripePortalResponseSchema, StripeSyncOptionResponseSchema, } from "./stripeCheckout.js";
 export { isSyncWatermark, SyncWatermarkSchema, } from "./syncWatermark.js";
-export { decodeContainerWriterProjection, decodeDocumentWriterProjection, encodeContainerWriterProjection, encodeDocumentWriterProjection, } from "./writerProjectionWire.js";
+export { containerKekWireLevel, decodeContainerWriterProjection, decodeDocumentWriterProjection, encodeContainerWriterProjection, encodeDocumentWriterProjection, } from "./writerProjectionWire.js";
 //# sourceMappingURL=index.js.map

package/internal/validators/response/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kCAAkC,GACnC,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,4BAA4B,EAE5B,uBAAuB,EAEvB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,+BAA+B,EAC/B,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,yBAAyB,EAEzB,0BAA0B,EAC1B,mBAAmB,EAEnB,sBAAsB,EAEtB,4BAA4B,EAE5B,0BAA0B,EAE1B,yBAAyB,EACzB,kBAAkB,EAElB,2BAA2B,EAG3B,2BAA2B,EAE3B,6BAA6B,GAC9B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EAEvB,+BAA+B,EAE/B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,gCAAgC,EAEhC,kCAAkC,EAElC,2BAA2B,EAE3B,kCAAkC,EAElC,0CAA0C,EAE1C,4BAA4B,EAE5B,wCAAwC,EACxC,4BAA4B,EAC5B,8BAA8B,EAC9B,oCAAoC,EACpC,iCAAiC,EACjC,kCAAkC,EAClC,iCAAiC,EAEjC,qCAAqC,EAErC,4BAA4B,EAE5B,sCAAsC,EAEtC,qCAAqC,GACtC,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,yBAAyB,EAGzB,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,6CAA6C,EAE7C,6BAA6B,EAG7B,kCAAkC,EAElC,6BAA6B,EAG7B,iCAAiC,EAEjC,+BAA+B,EAE/B,6BAA6B,EAE7B,+BAA+B,EAE/B,8BAA8B,EAE9B,oCAAoC,EACpC,4CAA4C,EAE5C,uCAAuC,EAEvC,2CAA2C,EAC3C,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,2BAA2B,EAC3B,mCAAmC,EACnC,uCAAuC,EACvC,wBAAwB,EAExB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,iDAAiD,EACjD,6CAA6C,GAC9C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,8BAA8B,EAC9B,wCAAwC,EAExC,gCAAgC,EAEhC,sCAAsC,GACvC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,8BAA8B,EAE9B,oCAAoC,GACrC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,kCAAkC,EAElC,sCAAsC,GACvC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gCAAgC,GAEjC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,sCAAsC,EAEtC,4CAA4C,EAE5C,0CAA0C,EAE1C,qCAAqC,EAErC,4CAA4C,EAC5C,iCAAiC,EACjC,2CAA2C,EAE3C,oCAAoC,EAEpC,+CAA+C,GAChD,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,sCAAsC,EAEtC,8CAA8C,EAE9C,4BAA4B,EAG5B,gCAAgC,EAEhC,qCAAqC,EAErC,gCAAgC,EAEhC,2BAA2B,EAE3B,kCAAkC,EAElC,0BAA0B,EAE1B,gCAAgC,EAEhC,sCAAsC,EAEtC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,wBAAwB,EACxB,4BAA4B,EAC5B,iCAAiC,EACjC,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,6BAA6B,EAC7B,uCAAuC,EAEvC,+BAA+B,EAE/B,qCAAqC,GACtC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,yBAAyB,EAGzB,mCAAmC,EAEnC,iCAAiC,EAEjC,2BAA2B,EAE3B,+BAA+B,EAE/B,yCAAyC,EAEzC,2CAA2C,EAC3C,uBAAuB,EACvB,2BAA2B,EAC3B,qCAAqC,GACtC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,mBAAmB,EACnB,eAAe,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,gCAAgC,EAEhC,6CAA6C,EAG7C,4CAA4C,EAE5C,6CAA6C,GAC9C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,qCAAqC,EAErC,qCAAqC,EACrC,iCAAiC,EACjC,iCAAiC,EACjC,gCAAgC,EAChC,oCAAoC,EACpC,uCAAuC,EACvC,qCAAqC,EACrC,+BAA+B,EAC/B,mCAAmC,EACnC,uCAAuC,EACvC,oCAAoC,EACpC,qCAAqC,EACrC,uCAAuC,EACvC,iCAAiC,EACjC,kCAAkC,EAClC,kCAAkC,EAClC,6BAA6B,EAC7B,sCAAsC,EACtC,gCAAgC,EAEhC,oCAAoC,EAEpC,wCAAwC,EAGxC,yCAAyC,EAEzC,mCAAmC,EAEnC,uCAAuC,EAGvC,wCAAwC,EAExC,yCAAyC,EAEzC,2CAA2C,EAE3C,qCAAqC,EAErC,sCAAsC,EAEtC,sCAAsC,EAEtC,iCAAiC,EAIjC,0CAA0C,EAE1C,oCAAoC,GACrC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,8BAA8B,EAE9B,iCAAiC,EAEjC,iCAAiC,EAEjC,+BAA+B,EAE/B,2CAA2C,EAE3C,kCAAkC,GACnC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oCAAoC,EAEpC,wCAAwC,EAExC,qCAAqC,EAErC,2CAA2C,EAE3C,uCAAuC,EAEvC,wCAAwC,EAExC,wCAAwC,GACzC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,0CAA0C,EAE1C,8CAA8C,GAC/C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,+BAA+B,EAC/B,sCAAsC,EAGtC,mCAAmC,GAIpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,gCAAgC,EAChC,iCAAiC,EAEjC,oCAAoC,EAEpC,qCAAqC,GACtC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,+CAA+C,EAE/C,mDAAmD,EAEnD,mDAAmD,GACpD,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAEL,uCAAuC,EACvC,mCAAmC,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,qCAAqC,EAErC,uCAAuC,EAEvC,6CAA6C,GAC9C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAElC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,+BAA+B,EAS/B,mCAAmC,GAEpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mCAAmC,EAEnC,oCAAoC,EAEpC,0CAA0C,GAC3C,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,mDAAmD,EAEnD,2CAA2C,EAE3C,6CAA6C,EAC7C,uCAAuC,EACvC,yCAAyC,EACzC,+BAA+B,EAC/B,iCAAiC,EACjC,mCAAmC,EACnC,wCAAwC,EACxC,+BAA+B,EAC/B,wBAAwB,EAExB,qCAAqC,EAErC,qCAAqC,EAErC,mCAAmC,EAEnC,kCAAkC,EAElC,qCAAqC,EAErC,qCAAqC,EAErC,uCAAuC,EAEvC,4CAA4C,EAE5C,uCAAuC,EAEvC,6CAA6C,EAE7C,mCAAmC,EAEnC,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAElC,iCAAiC,EAEjC,iCAAiC,EAEjC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qCAAqC,EAErC,0CAA0C,EAE1C,yCAAyC,GAC1C,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,kCAAkC,EAElC,sCAAsC,GACvC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EAEtB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,mCAAmC,EACnC,gCAAgC,EAEhC,4BAA4B,EAE5B,gCAAgC,EAEhC,6CAA6C,EAE7C,sCAAsC,EAEtC,uCAAuC,EAEvC,iCAAiC,EAEjC,iCAAiC,EAEjC,oCAAoC,GACrC,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,kBAAkB,EAElB,qBAAqB,EAErB,4BAA4B,EAE5B,6BAA6B,GAC9B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,+BAA+B,EAC/B,6BAA6B,EAC7B,6BAA6B,EAC7B,yBAAyB,EAEzB,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,iCAAiC,EAEjC,oCAAoC,EAEpC,wCAAwC,EAExC,sCAAsC,EAEtC,qCAAqC,EAErC,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAE3B,6CAA6C,EAE7C,8CAA8C,EAE9C,+BAA+B,EAE/B,iCAAiC,EAEjC,wCAAwC,GACzC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,+BAA+B,EAC/B,+BAA+B,EAC/B,sBAAsB,EAEtB,0BAA0B,EAE1B,kCAAkC,EAElC,mCAAmC,EAEnC,mCAAmC,EAEnC,0BAA0B,EAE1B,8BAA8B,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,eAAe,EAEf,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC","sourcesContent":["export {\n  type AccessManifestBundleWireResponse,\n  isAccessManifestBundleWireResponse,\n} from \"../util\";\nexport {\n  type EffectiveAccessLevel,\n  EffectiveAccessLevelSchema,\n  isEffectiveAccessLevel,\n} from \"./accessLevel\";\nexport {\n  type ChallengeErrorResponse,\n  ChallengeErrorResponseSchema,\n  type ChallengeResponse,\n  ChallengeResponseSchema,\n  type DestroySessionResponse,\n  DestroySessionResponseSchema,\n  isChallengeErrorResponse,\n  isChallengeResponse,\n  isDestroySessionResponse,\n  isListSessionsResponse,\n  isSessionRefreshRequiredFailure,\n  isUserIdentityResponse,\n  isUserSessionResponse,\n  isVerifyResponse,\n  isWebSocketTicketResponse,\n  type ListSessionsResponse,\n  ListSessionsResponseSchema,\n  SESSION_ERROR_CODES,\n  type SessionErrorCode,\n  SessionErrorCodeSchema,\n  type SessionFailureResponse,\n  SessionFailureResponseSchema,\n  type UserIdentityResponse,\n  UserIdentityResponseSchema,\n  type UserSessionResponse,\n  UserSessionResponseSchema,\n  VERIFY_ERROR_CODES,\n  type VerifyFailureResponse,\n  VerifyFailureResponseSchema,\n  type VerifyResponse,\n  type VerifySuccessResponse,\n  VerifySuccessResponseSchema,\n  type WebSocketTicketResponse,\n  WebSocketTicketResponseSchema,\n} from \"./auth\";\nexport {\n  isRevenueCatWebhookResponse,\n  isStripeWebhookResponse,\n  type RevenueCatWebhookResponse,\n  RevenueCatWebhookResponseSchema,\n  type StripeWebhookResponse,\n  StripeWebhookResponseSchema,\n} from \"./billingWebhooks\";\nexport {\n  type BlobAttachmentBindResponse,\n  BlobAttachmentBindResponseSchema,\n  type BlobAttachmentDetachResponse,\n  BlobAttachmentDetachResponseSchema,\n  type BlobAttachmentSummary,\n  BlobAttachmentSummarySchema,\n  type BlobContentKeyBundleResponse,\n  BlobContentKeyBundleResponseSchema,\n  type BlobContentKeyTargetEnvelopeResponse,\n  BlobContentKeyTargetEnvelopeResponseSchema,\n  type BlobKekTargetsResponse,\n  BlobKekTargetsResponseSchema,\n  type InitiateMultipartBlobStageResponse,\n  InitiateMultipartBlobStageResponseSchema,\n  isBlobAttachmentBindResponse,\n  isBlobAttachmentDetachResponse,\n  isInitiateMultipartBlobStageResponse,\n  isListDocumentAttachmentsResponse,\n  isMultipartBlobStageStatusResponse,\n  isUploadMultipartBlobPartResponse,\n  type ListDocumentAttachmentsResponse,\n  ListDocumentAttachmentsResponseSchema,\n  type MultipartBlobStagePart,\n  MultipartBlobStagePartSchema,\n  type MultipartBlobStageStatusResponse,\n  MultipartBlobStageStatusResponseSchema,\n  type UploadMultipartBlobPartResponse,\n  UploadMultipartBlobPartResponseSchema,\n} from \"./blob\";\nexport {\n  BLOB_MUTATION_ERROR_CODES,\n  type BlobMutationErrorCode,\n  type BlobMutationFailureResponse,\n  BlobMutationFailureResponseSchema,\n} from \"./blobMutationError\";\nexport {\n  CONTAINER_PROJECTION_STATE_INVALID_ERROR_CODE,\n  type ContainerDeleteResponse,\n  ContainerDeleteResponseSchema,\n  type ContainerKekKeyringWireResponse,\n  type ContainerKekLogEpochResponse,\n  ContainerKekLogEpochResponseSchema,\n  type ContainerKekLogResponse,\n  ContainerKekLogResponseSchema,\n  type ContainerKekResponse,\n  type ContainerKeyingPathResponse,\n  ContainerKeyingPathResponseSchema,\n  type ContainerMutationResponse,\n  ContainerMutationResponseSchema,\n  type ContainerReciteResponse,\n  ContainerReciteResponseSchema,\n  type ContainerRotationResponse,\n  ContainerRotationResponseSchema,\n  type ContainerSummary,\n  ContainerSummaryResponseSchema,\n  type ContainerSyncTombstone,\n  ContainerSyncTombstoneResponseSchema,\n  ContainerWriterProjectionErrorResponseSchema,\n  type ContainerWriterProjectionResponse,\n  ContainerWriterProjectionResponseSchema,\n  type ContainerWriterProjectionWireResponse,\n  ContainerWriterProjectionWireResponseSchema,\n  isContainerDeleteResponse,\n  isContainerKekLogResponse,\n  isContainerMutationResponse,\n  isContainerReciteResponse,\n  isContainerRotationResponse,\n  isContainerWriterProjectionResponse,\n  isContainerWriterProjectionWireResponse,\n  isListContainersResponse,\n  type ListContainersResponse,\n  ListContainersResponseSchema,\n} from \"./container\";\nexport type { ListContainerDocumentLanesResponse } from \"./containerDocumentLanes\";\nexport {\n  type ContainerCreateWithMetadataDocumentResponse,\n  ContainerCreateWithMetadataDocumentResponseSchema,\n  isContainerCreateWithMetadataDocumentResponse,\n} from \"./containerMetadata\";\nexport {\n  CONTAINER_MUTATION_ERROR_CODES,\n  ContainerMutationBehaviorErrorCodeSchema,\n  type ContainerMutationErrorCode,\n  ContainerMutationErrorCodeSchema,\n  type ContainerMutationFailureResponse,\n  ContainerMutationFailureResponseSchema,\n} from \"./containerMutationError\";\nexport {\n  CONTAINER_NOT_FOUND_ERROR_CODE,\n  type ContainerNotFoundErrorResponse,\n  ContainerNotFoundErrorResponseSchema,\n} from \"./containerNotFoundError\";\nexport {\n  isListContainerParentLanesResponse,\n  type ListContainerParentLanesResponse,\n  ListContainerParentLanesResponseSchema,\n} from \"./containerParentLanes\";\nexport {\n  CONTAINER_UNAVAILABLE_ERROR_CODE,\n  type ContainerUnavailableErrorCode,\n} from \"./containerUnavailableError\";\nexport {\n  type ContainerDocumentSummary,\n  ContainerDocumentSummaryResponseSchema,\n  type ContainerDocumentSyncTombstone,\n  ContainerDocumentSyncTombstoneResponseSchema,\n  type DocumentEditAttributionRangeResponse,\n  DocumentEditAttributionRangeResponseSchema,\n  type DocumentEditAttributionResponse,\n  DocumentEditAttributionResponseSchema,\n  type DocumentEditAttributionSegmentResponse,\n  DocumentEditAttributionSegmentResponseSchema,\n  isDocumentEditAttributionResponse,\n  isListDocumentEditAttributionRangesResponse,\n  type ListContainerDocumentsResponse,\n  ListContainerDocumentsResponseSchema,\n  type ListDocumentEditAttributionRangesResponse,\n  ListDocumentEditAttributionRangesResponseSchema,\n} from \"./document\";\nexport {\n  type DocumentContentKeyBundleResponse,\n  DocumentContentKeyBundleResponseSchema,\n  type DocumentContentKeyTargetEnvelopeResponse,\n  DocumentContentKeyTargetEnvelopeResponseSchema,\n  type DocumentCreateResponse,\n  DocumentCreateResponseSchema,\n  type DocumentCreateSeedResponse,\n  type DocumentKekTargetsResponse,\n  DocumentKekTargetsResponseSchema,\n  type DocumentLinkSetMutationResponse,\n  DocumentLinkSetMutationResponseSchema,\n  type DocumentPurgeProofResponse,\n  DocumentPurgeProofResponseSchema,\n  type DocumentPurgeResponse,\n  DocumentPurgeResponseSchema,\n  type DocumentSyncPullPageResponse,\n  DocumentSyncPullPageResponseSchema,\n  type DocumentSyncResponse,\n  DocumentSyncResponseSchema,\n  type DocumentSyncUpdateResponse,\n  DocumentSyncUpdateResponseSchema,\n  type DocumentWriterProjectionResponse,\n  DocumentWriterProjectionResponseSchema,\n  type DocumentWriterProjectionWireResponse,\n  DocumentWriterProjectionWireResponseSchema,\n  documentKekTargetsFromContentKeyBundle,\n  isDocumentContentKeyBundleResponse,\n  isDocumentCreateResponse,\n  isDocumentKekTargetsResponse,\n  isDocumentLinkSetMutationResponse,\n  isDocumentPurgeProofResponse,\n  isDocumentPurgeResponse,\n  isDocumentSyncResponse,\n  isDocumentWriterProjectionResponse,\n  isDocumentWriterProjectionWireResponse,\n} from \"./documentMutation\";\nexport {\n  DOCUMENT_MUTATION_ERROR_CODES,\n  DocumentMutationBehaviorErrorCodeSchema,\n  type DocumentMutationErrorCode,\n  DocumentMutationErrorCodeSchema,\n  type DocumentMutationFailureResponse,\n  DocumentMutationFailureResponseSchema,\n} from \"./documentMutationError\";\nexport {\n  DOCUMENT_NOT_FOUND_ERROR_CODE,\n  DOCUMENT_PROJECTION_ERROR_CODES,\n  DOCUMENT_SYNC_ERROR_CODES,\n  type DocumentNotFoundErrorCode,\n  type DocumentNotFoundErrorResponse,\n  DocumentNotFoundErrorResponseSchema,\n  type DocumentProjectionErrorCode,\n  DocumentProjectionErrorCodeSchema,\n  type DocumentSyncErrorCode,\n  DocumentSyncErrorCodeSchema,\n  type DocumentSyncErrorResponse,\n  DocumentSyncErrorResponseSchema,\n  type DocumentSyncStateStaleErrorResponse,\n  DocumentSyncStateStaleErrorResponseSchema,\n  type DocumentWriterProjectionErrorResponse,\n  DocumentWriterProjectionErrorResponseSchema,\n  isDocumentSyncErrorCode,\n  isDocumentSyncErrorResponse,\n  isDocumentSyncStateStaleErrorResponse,\n} from \"./documentSyncError\";\nexport {\n  type ErrorResponse,\n  ErrorResponseSchema,\n  isErrorResponse,\n} from \"./error\";\nexport {\n  type HealthResponse,\n  HealthResponseSchema,\n  isHealthResponse,\n} from \"./health\";\nexport {\n  MULTIPART_BLOB_STAGE_ERROR_CODES,\n  type MultipartBlobStageConflictErrorResponse,\n  MultipartBlobStageConflictErrorResponseSchema,\n  type MultipartBlobStageErrorCode,\n  type MultipartBlobStageExpiredErrorResponse,\n  MultipartBlobStageExpiredErrorResponseSchema,\n  type MultipartBlobStageNotFoundErrorResponse,\n  MultipartBlobStageNotFoundErrorResponseSchema,\n} from \"./multipartBlobStageError\";\nexport {\n  type CreateOrganizationGroupResponse,\n  CreateOrganizationGroupResponseSchema,\n  type DeleteOrganizationGroupResponse,\n  DeleteOrganizationGroupResponseSchema,\n  isCreateOrganizationGroupResponse,\n  isDeleteOrganizationGroupResponse,\n  isListOrganizationGroupsResponse,\n  isOrganizationContainerGrantResponse,\n  isOrganizationContainerGrantSubjectType,\n  isOrganizationContainerGrantsResponse,\n  isOrganizationDirectoryResponse,\n  isOrganizationDirectoryUserResponse,\n  isOrganizationGroupContainerAccessLevel,\n  isOrganizationGroupContainerResponse,\n  isOrganizationGroupContainersResponse,\n  isOrganizationGroupCurrentStateResponse,\n  isOrganizationGroupMemberResponse,\n  isOrganizationGroupMembersResponse,\n  isOrganizationGroupSummaryResponse,\n  isOrganizationProfileResponse,\n  isOrganizationUserDetailGrantsResponse,\n  isOrganizationUserDetailResponse,\n  type ListOrganizationGroupsResponse,\n  ListOrganizationGroupsResponseSchema,\n  type OrganizationContainerGrantResponse,\n  OrganizationContainerGrantResponseSchema,\n  type OrganizationContainerGrantSubjectType,\n  type OrganizationContainerGrantsResponse,\n  OrganizationContainerGrantsResponseSchema,\n  type OrganizationDirectoryResponse,\n  OrganizationDirectoryResponseSchema,\n  type OrganizationDirectoryUserResponse,\n  OrganizationDirectoryUserResponseSchema,\n  type OrganizationGroupContainerAccessLevel,\n  type OrganizationGroupContainerResponse,\n  OrganizationGroupContainerResponseSchema,\n  type OrganizationGroupContainersResponse,\n  OrganizationGroupContainersResponseSchema,\n  type OrganizationGroupCurrentStateResponse,\n  OrganizationGroupCurrentStateResponseSchema,\n  type OrganizationGroupMemberResponse,\n  OrganizationGroupMemberResponseSchema,\n  type OrganizationGroupMembersResponse,\n  OrganizationGroupMembersResponseSchema,\n  type OrganizationGroupSummaryResponse,\n  OrganizationGroupSummaryResponseSchema,\n  type OrganizationProfileResponse,\n  OrganizationProfileResponseSchema,\n  type OrganizationRole,\n  type OrganizationRosterStatus,\n  type OrganizationUserDetailGrantsResponse,\n  OrganizationUserDetailGrantsResponseSchema,\n  type OrganizationUserDetailResponse,\n  OrganizationUserDetailResponseSchema,\n} from \"./organization\";\nexport {\n  type BillingErrorResponse,\n  BillingErrorResponseSchema,\n  isOrganizationBillingProvider,\n  isOrganizationBillingResponse,\n  isOrganizationBillingStatus,\n  isPaymentRequiredErrorResponse,\n  type OrganizationBillingProvider,\n  OrganizationBillingProviderSchema,\n  type OrganizationBillingResponse,\n  OrganizationBillingResponseSchema,\n  type OrganizationBillingStatus,\n  OrganizationBillingStatusSchema,\n  type OrganizationBillingSubscriptionSource,\n  OrganizationBillingSubscriptionSourceSchema,\n  type PaymentRequiredErrorResponse,\n  PaymentRequiredErrorResponseSchema,\n} from \"./organizationBilling\";\nexport {\n  isOrganizationBillingHistoryResponse,\n  type OrganizationBillingHistoryCategory,\n  OrganizationBillingHistoryCategorySchema,\n  type OrganizationBillingHistoryEntry,\n  OrganizationBillingHistoryEntrySchema,\n  type OrganizationBillingHistoryEnvironment,\n  OrganizationBillingHistoryEnvironmentSchema,\n  type OrganizationBillingHistoryOutcome,\n  OrganizationBillingHistoryOutcomeSchema,\n  type OrganizationBillingHistoryProvider,\n  OrganizationBillingHistoryProviderSchema,\n  type OrganizationBillingHistoryResponse,\n  OrganizationBillingHistoryResponseSchema,\n} from \"./organizationBillingHistory\";\nexport {\n  isOrganizationBillingManagementUrlResponse,\n  type OrganizationBillingManagementUrlResponse,\n  OrganizationBillingManagementUrlResponseSchema,\n} from \"./organizationBillingManagementUrl\";\nexport {\n  isOrganizationDataUsageResponse,\n  ORGANIZATION_DOCUMENT_USAGE_CATEGORIES,\n  type OrganizationBlobDataUsageResponse,\n  type OrganizationDataUsageResponse,\n  OrganizationDataUsageResponseSchema,\n  type OrganizationDocumentDataUsageResponse,\n  type OrganizationDocumentUsageCategory,\n  type OrganizationDocumentUsageCategoryBreakdown,\n} from \"./organizationDataUsage\";\nexport {\n  isOrganizationMembershipResponse,\n  isOrganizationMembershipsResponse,\n  type OrganizationMembershipResponse,\n  OrganizationMembershipResponseSchema,\n  type OrganizationMembershipsResponse,\n  OrganizationMembershipsResponseSchema,\n} from \"./organizationMembership\";\nexport {\n  isOrganizationNativePurchaseEligibilityResponse,\n  type OrganizationNativePurchaseEligibilityResponse,\n  OrganizationNativePurchaseEligibilityResponseSchema,\n  type OrganizationNativePurchaseIneligibilityReason,\n  OrganizationNativePurchaseIneligibilityReasonSchema,\n} from \"./organizationNativePurchaseEligibility\";\nexport {\n  type OrganizationPolicyHistoryResponse,\n  OrganizationPolicyHistoryResponseSchema,\n  PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE,\n} from \"./organizationPolicyHistory\";\nexport {\n  ORGANIZATION_PRESENTATION_ERROR_CODES,\n  type OrganizationPresentationErrorCode,\n  OrganizationPresentationErrorCodeSchema,\n  type OrganizationPresentationFailureResponse,\n  OrganizationPresentationFailureResponseSchema,\n} from \"./organizationPresentationError\";\nexport {\n  type CreateOrganizationResponse,\n  CreateOrganizationResponseSchema,\n  isCreateOrganizationResponse,\n  isOrganizationProvisioningResponse,\n  type OrganizationProvisioningResponse,\n  OrganizationProvisioningResponseSchema,\n} from \"./organizationProvisioning\";\nexport {\n  isOrganizationReadModelResponse,\n  type OrganizationReadModelDeltaResponse,\n  type OrganizationReadModelDirectoryResponse,\n  type OrganizationReadModelGrantsResponse,\n  type OrganizationReadModelGroupMemberResponse,\n  type OrganizationReadModelGroupMembershipResponse,\n  type OrganizationReadModelGroupMembershipsResponse,\n  type OrganizationReadModelOrganizationPolicyResponse,\n  type OrganizationReadModelResponse,\n  OrganizationReadModelResponseSchema,\n  type OrganizationReadModelSnapshotResponse,\n} from \"./organizationReadModel\";\nexport {\n  ORGANIZATION_READ_MODEL_ERROR_CODES,\n  type OrganizationReadModelErrorCode,\n  OrganizationReadModelErrorCodeSchema,\n  type OrganizationReadModelFailureResponse,\n  OrganizationReadModelFailureResponseSchema,\n} from \"./organizationReadModelError\";\nexport {\n  CommitOrganizationGroupPolicyConflictResponseSchema,\n  type CommitOrganizationGroupPolicyResponse,\n  CommitOrganizationGroupPolicyResponseSchema,\n  type CurrentPrincipalMemberEnvelopesResponse,\n  CurrentPrincipalMemberEnvelopesResponseSchema,\n  isCommitOrganizationGroupPolicyResponse,\n  isCurrentPrincipalMemberEnvelopesResponse,\n  isPrincipalPolicyBundleResponse,\n  isPrincipalPolicyMutationResponse,\n  isPrincipalPolicyStaleErrorResponse,\n  isPrincipalPolicyStateChainEntryResponse,\n  isPrincipalStatePayloadResponse,\n  isPrincipalStateResponse,\n  type PrincipalContainerGrantResponse,\n  PrincipalContainerGrantResponseSchema,\n  type PrincipalMemberEnvelopeResponse,\n  PrincipalMemberEnvelopeResponseSchema,\n  type PrincipalPolicyBundleResponse,\n  PrincipalPolicyBundleResponseSchema,\n  type PrincipalPolicyErrorResponse,\n  PrincipalPolicyErrorResponseSchema,\n  type PrincipalPolicyMutationResponse,\n  PrincipalPolicyMutationResponseSchema,\n  type PrincipalPolicySnapshotResponse,\n  PrincipalPolicySnapshotResponseSchema,\n  type PrincipalPolicyStaleErrorResponse,\n  PrincipalPolicyStaleErrorResponseSchema,\n  type PrincipalPolicyStateChainEntryResponse,\n  PrincipalPolicyStateChainEntryResponseSchema,\n  type PrincipalProjectionMemberResponse,\n  PrincipalProjectionMemberResponseSchema,\n  type PrincipalStateExternalAuthorityResponse,\n  PrincipalStateExternalAuthorityResponseSchema,\n  type PrincipalStatePayloadResponse,\n  PrincipalStatePayloadResponseSchema,\n  type PrincipalStateResponse,\n  PrincipalStateResponseSchema,\n} from \"./principal\";\nexport {\n  isPrincipalPolicyPageResponse,\n  isPrincipalPolicyUnchangedResponse,\n  type PrincipalPolicyPageResponse,\n  PrincipalPolicyPageResponseSchema,\n  type PrincipalPolicyReadResponse,\n  PrincipalPolicyReadResponseSchema,\n  type PrincipalPolicyUnchangedResponse,\n  PrincipalPolicyUnchangedResponseSchema,\n} from \"./principalPolicyPage\";\nexport {\n  isPrincipalPolicySnapshotPageResponse,\n  type PrincipalPolicyHistorySourceResponse,\n  PrincipalPolicyHistorySourceResponseSchema,\n  type PrincipalPolicySnapshotPageResponse,\n  PrincipalPolicySnapshotPageResponseSchema,\n} from \"./principalPolicySnapshotPage\";\nexport {\n  isReferencedPrincipalStateResponse,\n  type ReferencedPrincipalStateResponse,\n  ReferencedPrincipalStateResponseSchema,\n} from \"./principalReference\";\nexport {\n  type ProjectionPolicyEvidenceResponse,\n  ProjectionPolicyEvidenceResponseSchema,\n} from \"./projectionPolicyEvidence\";\nexport {\n  isRegistrationResponse,\n  type RegistrationResponse,\n  RegistrationResponseSchema,\n} from \"./registration\";\nexport {\n  isRootIdentitiesResponse,\n  isRootIdentityDetailResponse,\n  isRootIdentityOrganizationsResponse,\n  isRootIdentitySuspensionResponse,\n  type RootIdentitiesResponse,\n  RootIdentitiesResponseSchema,\n  type RootIdentityDetailResponse,\n  RootIdentityDetailResponseSchema,\n  type RootIdentityOrganizationBillingResponse,\n  RootIdentityOrganizationBillingResponseSchema,\n  type RootIdentityOrganizationResponse,\n  RootIdentityOrganizationResponseSchema,\n  type RootIdentityOrganizationsResponse,\n  RootIdentityOrganizationsResponseSchema,\n  type RootIdentitySessionResponse,\n  RootIdentitySessionResponseSchema,\n  type RootIdentitySummaryResponse,\n  RootIdentitySummaryResponseSchema,\n  type RootIdentitySuspensionResponse,\n  RootIdentitySuspensionResponseSchema,\n} from \"./root\";\nexport {\n  ROOT_AUDIT_ACTIONS,\n  type RootAuditAction,\n  RootAuditActionSchema,\n  type RootAuditEventResponse,\n  RootAuditEventResponseSchema,\n  type RootAuditEventsResponse,\n  RootAuditEventsResponseSchema,\n} from \"./rootAudit\";\nexport {\n  ROOT_OPS_HEALTH_OVERDUE_MINUTES,\n  ROOT_OPS_HEALTH_SECTION_LIMIT,\n  ROOT_OPS_HEALTH_UPCOMING_DAYS,\n  ROOT_SEAT_SYNC_CONDITIONS,\n  type RootOpsHealthReportResponse,\n  RootOpsHealthReportResponseSchema,\n  RootSeatSyncConditionSchema,\n} from \"./rootOpsHealth\";\nexport {\n  type RootDataUsageReportResponse,\n  RootDataUsageReportResponseSchema,\n  type RootOrganizationDetailResponse,\n  RootOrganizationDetailResponseSchema,\n  type RootOrganizationIdentitiesResponse,\n  RootOrganizationIdentitiesResponseSchema,\n  type RootOrganizationIdentityResponse,\n  RootOrganizationIdentityResponseSchema,\n  type RootOrganizationSummaryResponse,\n  RootOrganizationSummaryResponseSchema,\n  type RootOrganizationsResponse,\n  RootOrganizationsResponseSchema,\n} from \"./rootOrganizations\";\nexport {\n  ROOT_REVENUECAT_DISPOSITIONS,\n  ROOT_REVENUECAT_EVENT_ROLES,\n  type RootOrganizationRevenuecatEventResponse,\n  RootOrganizationRevenuecatEventResponseSchema,\n  type RootOrganizationRevenuecatEventsResponse,\n  RootOrganizationRevenuecatEventsResponseSchema,\n  type RootRevenuecatDisposition,\n  RootRevenuecatDispositionSchema,\n  type RootRevenuecatEventResponse,\n  RootRevenuecatEventResponseSchema,\n  type RootRevenuecatEventsReportResponse,\n  RootRevenuecatEventsReportResponseSchema,\n} from \"./rootRevenuecat\";\nexport {\n  isStripeCancelResponse,\n  isStripeCheckoutIntentResponse,\n  isStripeCheckoutOptionsResponse,\n  isStripeCheckoutSessionResponse,\n  isStripePortalResponse,\n  type StripeCancelResponse,\n  StripeCancelResponseSchema,\n  type StripeCheckoutIntentResponse,\n  StripeCheckoutIntentResponseSchema,\n  type StripeCheckoutOptionsResponse,\n  StripeCheckoutOptionsResponseSchema,\n  type StripeCheckoutSessionResponse,\n  StripeCheckoutSessionResponseSchema,\n  type StripePortalResponse,\n  StripePortalResponseSchema,\n  type StripeSyncOptionResponse,\n  StripeSyncOptionResponseSchema,\n} from \"./stripeCheckout\";\nexport {\n  isSyncWatermark,\n  type SyncWatermark,\n  SyncWatermarkSchema,\n} from \"./syncWatermark\";\nexport {\n  decodeContainerWriterProjection,\n  decodeDocumentWriterProjection,\n  encodeContainerWriterProjection,\n  encodeDocumentWriterProjection,\n} from \"./writerProjectionWire\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kCAAkC,GACnC,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,4BAA4B,EAE5B,uBAAuB,EAEvB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,+BAA+B,EAC/B,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,yBAAyB,EAEzB,0BAA0B,EAC1B,mBAAmB,EAEnB,sBAAsB,EAEtB,4BAA4B,EAE5B,0BAA0B,EAE1B,yBAAyB,EACzB,kBAAkB,EAElB,2BAA2B,EAG3B,2BAA2B,EAE3B,6BAA6B,GAC9B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EAEvB,+BAA+B,EAE/B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,gCAAgC,EAEhC,kCAAkC,EAElC,2BAA2B,EAE3B,kCAAkC,EAElC,0CAA0C,EAE1C,4BAA4B,EAE5B,wCAAwC,EACxC,4BAA4B,EAC5B,8BAA8B,EAC9B,oCAAoC,EACpC,iCAAiC,EACjC,kCAAkC,EAClC,iCAAiC,EAEjC,qCAAqC,EAErC,4BAA4B,EAE5B,sCAAsC,EAEtC,qCAAqC,GACtC,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,yBAAyB,EAGzB,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,4BAA4B,EAC5B,6CAA6C,EAE7C,6BAA6B,EAG7B,kCAAkC,EAElC,6BAA6B,EAI7B,iCAAiC,EAEjC,+BAA+B,EAE/B,6BAA6B,EAE7B,+BAA+B,EAE/B,8BAA8B,EAE9B,oCAAoC,EACpC,4CAA4C,EAE5C,uCAAuC,EAEvC,2CAA2C,EAC3C,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EACzB,2BAA2B,EAC3B,mCAAmC,EACnC,uCAAuC,EACvC,wBAAwB,EAExB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,iDAAiD,EACjD,6CAA6C,GAC9C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,8BAA8B,EAC9B,wCAAwC,EAExC,gCAAgC,EAEhC,sCAAsC,GACvC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,8BAA8B,EAE9B,oCAAoC,GACrC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,kCAAkC,EAElC,sCAAsC,GACvC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gCAAgC,GAEjC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,sCAAsC,EAEtC,4CAA4C,EAE5C,0CAA0C,EAE1C,qCAAqC,EAErC,4CAA4C,EAC5C,iCAAiC,EACjC,2CAA2C,EAE3C,oCAAoC,EAEpC,+CAA+C,GAChD,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,sCAAsC,EAEtC,8CAA8C,EAE9C,4BAA4B,EAG5B,gCAAgC,EAEhC,qCAAqC,EAErC,gCAAgC,EAEhC,2BAA2B,EAE3B,kCAAkC,EAElC,0BAA0B,EAE1B,gCAAgC,EAEhC,sCAAsC,EAEtC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,wBAAwB,EACxB,4BAA4B,EAC5B,iCAAiC,EACjC,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,6BAA6B,EAC7B,uCAAuC,EAEvC,+BAA+B,EAE/B,qCAAqC,GACtC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,yBAAyB,EAGzB,mCAAmC,EAEnC,iCAAiC,EAEjC,2BAA2B,EAE3B,+BAA+B,EAE/B,yCAAyC,EAEzC,2CAA2C,EAC3C,uBAAuB,EACvB,2BAA2B,EAC3B,qCAAqC,GACtC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,mBAAmB,EACnB,eAAe,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,gCAAgC,EAEhC,6CAA6C,EAG7C,4CAA4C,EAE5C,6CAA6C,GAC9C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,qCAAqC,EAErC,qCAAqC,EACrC,iCAAiC,EACjC,iCAAiC,EACjC,gCAAgC,EAChC,oCAAoC,EACpC,uCAAuC,EACvC,qCAAqC,EACrC,+BAA+B,EAC/B,mCAAmC,EACnC,uCAAuC,EACvC,oCAAoC,EACpC,qCAAqC,EACrC,uCAAuC,EACvC,iCAAiC,EACjC,kCAAkC,EAClC,kCAAkC,EAClC,6BAA6B,EAC7B,sCAAsC,EACtC,gCAAgC,EAEhC,oCAAoC,EAEpC,wCAAwC,EAGxC,yCAAyC,EAEzC,mCAAmC,EAEnC,uCAAuC,EAGvC,wCAAwC,EAExC,yCAAyC,EAEzC,2CAA2C,EAE3C,qCAAqC,EAErC,sCAAsC,EAEtC,sCAAsC,EAEtC,iCAAiC,EAIjC,0CAA0C,EAE1C,oCAAoC,GACrC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,8BAA8B,EAE9B,iCAAiC,EAEjC,iCAAiC,EAEjC,+BAA+B,EAE/B,2CAA2C,EAE3C,kCAAkC,GACnC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oCAAoC,EAEpC,wCAAwC,EAExC,qCAAqC,EAErC,2CAA2C,EAE3C,uCAAuC,EAEvC,wCAAwC,EAExC,wCAAwC,GACzC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,0CAA0C,EAE1C,8CAA8C,GAC/C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,+BAA+B,EAC/B,sCAAsC,EAGtC,mCAAmC,GAIpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,gCAAgC,EAChC,iCAAiC,EAEjC,oCAAoC,EAEpC,qCAAqC,GACtC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,+CAA+C,EAE/C,mDAAmD,EAEnD,mDAAmD,GACpD,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAEL,uCAAuC,EACvC,mCAAmC,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,qCAAqC,EAErC,uCAAuC,EAEvC,6CAA6C,GAC9C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAElC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,+BAA+B,EAS/B,mCAAmC,GAEpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mCAAmC,EAEnC,oCAAoC,EAEpC,0CAA0C,GAC3C,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,mDAAmD,EAEnD,2CAA2C,EAE3C,6CAA6C,EAC7C,uCAAuC,EACvC,yCAAyC,EACzC,+BAA+B,EAC/B,iCAAiC,EACjC,mCAAmC,EACnC,wCAAwC,EACxC,+BAA+B,EAC/B,wBAAwB,EAExB,qCAAqC,EAErC,qCAAqC,EAErC,mCAAmC,EAEnC,kCAAkC,EAElC,qCAAqC,EAErC,qCAAqC,EAErC,uCAAuC,EAEvC,4CAA4C,EAE5C,uCAAuC,EAEvC,6CAA6C,EAE7C,mCAAmC,EAEnC,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAElC,iCAAiC,EAEjC,iCAAiC,EAEjC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qCAAqC,EAErC,0CAA0C,EAE1C,yCAAyC,GAC1C,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,kCAAkC,EAElC,sCAAsC,GACvC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EAEtB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,mCAAmC,EACnC,gCAAgC,EAEhC,4BAA4B,EAE5B,gCAAgC,EAEhC,6CAA6C,EAE7C,sCAAsC,EAEtC,uCAAuC,EAEvC,iCAAiC,EAEjC,iCAAiC,EAEjC,oCAAoC,GACrC,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,kBAAkB,EAElB,qBAAqB,EAErB,4BAA4B,EAE5B,6BAA6B,GAC9B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,+BAA+B,EAC/B,6BAA6B,EAC7B,6BAA6B,EAC7B,yBAAyB,EAEzB,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,iCAAiC,EAEjC,oCAAoC,EAEpC,wCAAwC,EAExC,sCAAsC,EAEtC,qCAAqC,EAErC,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAE3B,6CAA6C,EAE7C,8CAA8C,EAE9C,+BAA+B,EAE/B,iCAAiC,EAEjC,wCAAwC,GACzC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,+BAA+B,EAC/B,+BAA+B,EAC/B,sBAAsB,EAEtB,0BAA0B,EAE1B,kCAAkC,EAElC,mCAAmC,EAEnC,mCAAmC,EAEnC,0BAA0B,EAE1B,8BAA8B,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,eAAe,EAEf,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,+BAA+B,EAC/B,8BAA8B,EAC9B,+BAA+B,EAC/B,8BAA8B,GAE/B,MAAM,wBAAwB,CAAC","sourcesContent":["export {\n  type AccessManifestBundleWireResponse,\n  isAccessManifestBundleWireResponse,\n} from \"../util\";\nexport {\n  type EffectiveAccessLevel,\n  EffectiveAccessLevelSchema,\n  isEffectiveAccessLevel,\n} from \"./accessLevel\";\nexport {\n  type ChallengeErrorResponse,\n  ChallengeErrorResponseSchema,\n  type ChallengeResponse,\n  ChallengeResponseSchema,\n  type DestroySessionResponse,\n  DestroySessionResponseSchema,\n  isChallengeErrorResponse,\n  isChallengeResponse,\n  isDestroySessionResponse,\n  isListSessionsResponse,\n  isSessionRefreshRequiredFailure,\n  isUserIdentityResponse,\n  isUserSessionResponse,\n  isVerifyResponse,\n  isWebSocketTicketResponse,\n  type ListSessionsResponse,\n  ListSessionsResponseSchema,\n  SESSION_ERROR_CODES,\n  type SessionErrorCode,\n  SessionErrorCodeSchema,\n  type SessionFailureResponse,\n  SessionFailureResponseSchema,\n  type UserIdentityResponse,\n  UserIdentityResponseSchema,\n  type UserSessionResponse,\n  UserSessionResponseSchema,\n  VERIFY_ERROR_CODES,\n  type VerifyFailureResponse,\n  VerifyFailureResponseSchema,\n  type VerifyResponse,\n  type VerifySuccessResponse,\n  VerifySuccessResponseSchema,\n  type WebSocketTicketResponse,\n  WebSocketTicketResponseSchema,\n} from \"./auth\";\nexport {\n  isRevenueCatWebhookResponse,\n  isStripeWebhookResponse,\n  type RevenueCatWebhookResponse,\n  RevenueCatWebhookResponseSchema,\n  type StripeWebhookResponse,\n  StripeWebhookResponseSchema,\n} from \"./billingWebhooks\";\nexport {\n  type BlobAttachmentBindResponse,\n  BlobAttachmentBindResponseSchema,\n  type BlobAttachmentDetachResponse,\n  BlobAttachmentDetachResponseSchema,\n  type BlobAttachmentSummary,\n  BlobAttachmentSummarySchema,\n  type BlobContentKeyBundleResponse,\n  BlobContentKeyBundleResponseSchema,\n  type BlobContentKeyTargetEnvelopeResponse,\n  BlobContentKeyTargetEnvelopeResponseSchema,\n  type BlobKekTargetsResponse,\n  BlobKekTargetsResponseSchema,\n  type InitiateMultipartBlobStageResponse,\n  InitiateMultipartBlobStageResponseSchema,\n  isBlobAttachmentBindResponse,\n  isBlobAttachmentDetachResponse,\n  isInitiateMultipartBlobStageResponse,\n  isListDocumentAttachmentsResponse,\n  isMultipartBlobStageStatusResponse,\n  isUploadMultipartBlobPartResponse,\n  type ListDocumentAttachmentsResponse,\n  ListDocumentAttachmentsResponseSchema,\n  type MultipartBlobStagePart,\n  MultipartBlobStagePartSchema,\n  type MultipartBlobStageStatusResponse,\n  MultipartBlobStageStatusResponseSchema,\n  type UploadMultipartBlobPartResponse,\n  UploadMultipartBlobPartResponseSchema,\n} from \"./blob\";\nexport {\n  BLOB_MUTATION_ERROR_CODES,\n  type BlobMutationErrorCode,\n  type BlobMutationFailureResponse,\n  BlobMutationFailureResponseSchema,\n} from \"./blobMutationError\";\nexport {\n  type CitedContainerKekLevel,\n  CitedContainerKekLevelSchema,\n  CONTAINER_PROJECTION_STATE_INVALID_ERROR_CODE,\n  type ContainerDeleteResponse,\n  ContainerDeleteResponseSchema,\n  type ContainerKekKeyringWireResponse,\n  type ContainerKekLogEpochResponse,\n  ContainerKekLogEpochResponseSchema,\n  type ContainerKekLogResponse,\n  ContainerKekLogResponseSchema,\n  type ContainerKekResponse,\n  type ContainerKekWireLevel,\n  type ContainerKeyingPathResponse,\n  ContainerKeyingPathResponseSchema,\n  type ContainerMutationResponse,\n  ContainerMutationResponseSchema,\n  type ContainerReciteResponse,\n  ContainerReciteResponseSchema,\n  type ContainerRotationResponse,\n  ContainerRotationResponseSchema,\n  type ContainerSummary,\n  ContainerSummaryResponseSchema,\n  type ContainerSyncTombstone,\n  ContainerSyncTombstoneResponseSchema,\n  ContainerWriterProjectionErrorResponseSchema,\n  type ContainerWriterProjectionResponse,\n  ContainerWriterProjectionResponseSchema,\n  type ContainerWriterProjectionWireResponse,\n  ContainerWriterProjectionWireResponseSchema,\n  isCitedContainerKekLevel,\n  isContainerDeleteResponse,\n  isContainerKekLogResponse,\n  isContainerKekWireLevel,\n  isContainerMutationResponse,\n  isContainerReciteResponse,\n  isContainerRotationResponse,\n  isContainerWriterProjectionResponse,\n  isContainerWriterProjectionWireResponse,\n  isListContainersResponse,\n  type ListContainersResponse,\n  ListContainersResponseSchema,\n} from \"./container\";\nexport type { ListContainerDocumentLanesResponse } from \"./containerDocumentLanes\";\nexport {\n  type ContainerCreateWithMetadataDocumentResponse,\n  ContainerCreateWithMetadataDocumentResponseSchema,\n  isContainerCreateWithMetadataDocumentResponse,\n} from \"./containerMetadata\";\nexport {\n  CONTAINER_MUTATION_ERROR_CODES,\n  ContainerMutationBehaviorErrorCodeSchema,\n  type ContainerMutationErrorCode,\n  ContainerMutationErrorCodeSchema,\n  type ContainerMutationFailureResponse,\n  ContainerMutationFailureResponseSchema,\n} from \"./containerMutationError\";\nexport {\n  CONTAINER_NOT_FOUND_ERROR_CODE,\n  type ContainerNotFoundErrorResponse,\n  ContainerNotFoundErrorResponseSchema,\n} from \"./containerNotFoundError\";\nexport {\n  isListContainerParentLanesResponse,\n  type ListContainerParentLanesResponse,\n  ListContainerParentLanesResponseSchema,\n} from \"./containerParentLanes\";\nexport {\n  CONTAINER_UNAVAILABLE_ERROR_CODE,\n  type ContainerUnavailableErrorCode,\n} from \"./containerUnavailableError\";\nexport {\n  type ContainerDocumentSummary,\n  ContainerDocumentSummaryResponseSchema,\n  type ContainerDocumentSyncTombstone,\n  ContainerDocumentSyncTombstoneResponseSchema,\n  type DocumentEditAttributionRangeResponse,\n  DocumentEditAttributionRangeResponseSchema,\n  type DocumentEditAttributionResponse,\n  DocumentEditAttributionResponseSchema,\n  type DocumentEditAttributionSegmentResponse,\n  DocumentEditAttributionSegmentResponseSchema,\n  isDocumentEditAttributionResponse,\n  isListDocumentEditAttributionRangesResponse,\n  type ListContainerDocumentsResponse,\n  ListContainerDocumentsResponseSchema,\n  type ListDocumentEditAttributionRangesResponse,\n  ListDocumentEditAttributionRangesResponseSchema,\n} from \"./document\";\nexport {\n  type DocumentContentKeyBundleResponse,\n  DocumentContentKeyBundleResponseSchema,\n  type DocumentContentKeyTargetEnvelopeResponse,\n  DocumentContentKeyTargetEnvelopeResponseSchema,\n  type DocumentCreateResponse,\n  DocumentCreateResponseSchema,\n  type DocumentCreateSeedResponse,\n  type DocumentKekTargetsResponse,\n  DocumentKekTargetsResponseSchema,\n  type DocumentLinkSetMutationResponse,\n  DocumentLinkSetMutationResponseSchema,\n  type DocumentPurgeProofResponse,\n  DocumentPurgeProofResponseSchema,\n  type DocumentPurgeResponse,\n  DocumentPurgeResponseSchema,\n  type DocumentSyncPullPageResponse,\n  DocumentSyncPullPageResponseSchema,\n  type DocumentSyncResponse,\n  DocumentSyncResponseSchema,\n  type DocumentSyncUpdateResponse,\n  DocumentSyncUpdateResponseSchema,\n  type DocumentWriterProjectionResponse,\n  DocumentWriterProjectionResponseSchema,\n  type DocumentWriterProjectionWireResponse,\n  DocumentWriterProjectionWireResponseSchema,\n  documentKekTargetsFromContentKeyBundle,\n  isDocumentContentKeyBundleResponse,\n  isDocumentCreateResponse,\n  isDocumentKekTargetsResponse,\n  isDocumentLinkSetMutationResponse,\n  isDocumentPurgeProofResponse,\n  isDocumentPurgeResponse,\n  isDocumentSyncResponse,\n  isDocumentWriterProjectionResponse,\n  isDocumentWriterProjectionWireResponse,\n} from \"./documentMutation\";\nexport {\n  DOCUMENT_MUTATION_ERROR_CODES,\n  DocumentMutationBehaviorErrorCodeSchema,\n  type DocumentMutationErrorCode,\n  DocumentMutationErrorCodeSchema,\n  type DocumentMutationFailureResponse,\n  DocumentMutationFailureResponseSchema,\n} from \"./documentMutationError\";\nexport {\n  DOCUMENT_NOT_FOUND_ERROR_CODE,\n  DOCUMENT_PROJECTION_ERROR_CODES,\n  DOCUMENT_SYNC_ERROR_CODES,\n  type DocumentNotFoundErrorCode,\n  type DocumentNotFoundErrorResponse,\n  DocumentNotFoundErrorResponseSchema,\n  type DocumentProjectionErrorCode,\n  DocumentProjectionErrorCodeSchema,\n  type DocumentSyncErrorCode,\n  DocumentSyncErrorCodeSchema,\n  type DocumentSyncErrorResponse,\n  DocumentSyncErrorResponseSchema,\n  type DocumentSyncStateStaleErrorResponse,\n  DocumentSyncStateStaleErrorResponseSchema,\n  type DocumentWriterProjectionErrorResponse,\n  DocumentWriterProjectionErrorResponseSchema,\n  isDocumentSyncErrorCode,\n  isDocumentSyncErrorResponse,\n  isDocumentSyncStateStaleErrorResponse,\n} from \"./documentSyncError\";\nexport {\n  type ErrorResponse,\n  ErrorResponseSchema,\n  isErrorResponse,\n} from \"./error\";\nexport {\n  type HealthResponse,\n  HealthResponseSchema,\n  isHealthResponse,\n} from \"./health\";\nexport {\n  MULTIPART_BLOB_STAGE_ERROR_CODES,\n  type MultipartBlobStageConflictErrorResponse,\n  MultipartBlobStageConflictErrorResponseSchema,\n  type MultipartBlobStageErrorCode,\n  type MultipartBlobStageExpiredErrorResponse,\n  MultipartBlobStageExpiredErrorResponseSchema,\n  type MultipartBlobStageNotFoundErrorResponse,\n  MultipartBlobStageNotFoundErrorResponseSchema,\n} from \"./multipartBlobStageError\";\nexport {\n  type CreateOrganizationGroupResponse,\n  CreateOrganizationGroupResponseSchema,\n  type DeleteOrganizationGroupResponse,\n  DeleteOrganizationGroupResponseSchema,\n  isCreateOrganizationGroupResponse,\n  isDeleteOrganizationGroupResponse,\n  isListOrganizationGroupsResponse,\n  isOrganizationContainerGrantResponse,\n  isOrganizationContainerGrantSubjectType,\n  isOrganizationContainerGrantsResponse,\n  isOrganizationDirectoryResponse,\n  isOrganizationDirectoryUserResponse,\n  isOrganizationGroupContainerAccessLevel,\n  isOrganizationGroupContainerResponse,\n  isOrganizationGroupContainersResponse,\n  isOrganizationGroupCurrentStateResponse,\n  isOrganizationGroupMemberResponse,\n  isOrganizationGroupMembersResponse,\n  isOrganizationGroupSummaryResponse,\n  isOrganizationProfileResponse,\n  isOrganizationUserDetailGrantsResponse,\n  isOrganizationUserDetailResponse,\n  type ListOrganizationGroupsResponse,\n  ListOrganizationGroupsResponseSchema,\n  type OrganizationContainerGrantResponse,\n  OrganizationContainerGrantResponseSchema,\n  type OrganizationContainerGrantSubjectType,\n  type OrganizationContainerGrantsResponse,\n  OrganizationContainerGrantsResponseSchema,\n  type OrganizationDirectoryResponse,\n  OrganizationDirectoryResponseSchema,\n  type OrganizationDirectoryUserResponse,\n  OrganizationDirectoryUserResponseSchema,\n  type OrganizationGroupContainerAccessLevel,\n  type OrganizationGroupContainerResponse,\n  OrganizationGroupContainerResponseSchema,\n  type OrganizationGroupContainersResponse,\n  OrganizationGroupContainersResponseSchema,\n  type OrganizationGroupCurrentStateResponse,\n  OrganizationGroupCurrentStateResponseSchema,\n  type OrganizationGroupMemberResponse,\n  OrganizationGroupMemberResponseSchema,\n  type OrganizationGroupMembersResponse,\n  OrganizationGroupMembersResponseSchema,\n  type OrganizationGroupSummaryResponse,\n  OrganizationGroupSummaryResponseSchema,\n  type OrganizationProfileResponse,\n  OrganizationProfileResponseSchema,\n  type OrganizationRole,\n  type OrganizationRosterStatus,\n  type OrganizationUserDetailGrantsResponse,\n  OrganizationUserDetailGrantsResponseSchema,\n  type OrganizationUserDetailResponse,\n  OrganizationUserDetailResponseSchema,\n} from \"./organization\";\nexport {\n  type BillingErrorResponse,\n  BillingErrorResponseSchema,\n  isOrganizationBillingProvider,\n  isOrganizationBillingResponse,\n  isOrganizationBillingStatus,\n  isPaymentRequiredErrorResponse,\n  type OrganizationBillingProvider,\n  OrganizationBillingProviderSchema,\n  type OrganizationBillingResponse,\n  OrganizationBillingResponseSchema,\n  type OrganizationBillingStatus,\n  OrganizationBillingStatusSchema,\n  type OrganizationBillingSubscriptionSource,\n  OrganizationBillingSubscriptionSourceSchema,\n  type PaymentRequiredErrorResponse,\n  PaymentRequiredErrorResponseSchema,\n} from \"./organizationBilling\";\nexport {\n  isOrganizationBillingHistoryResponse,\n  type OrganizationBillingHistoryCategory,\n  OrganizationBillingHistoryCategorySchema,\n  type OrganizationBillingHistoryEntry,\n  OrganizationBillingHistoryEntrySchema,\n  type OrganizationBillingHistoryEnvironment,\n  OrganizationBillingHistoryEnvironmentSchema,\n  type OrganizationBillingHistoryOutcome,\n  OrganizationBillingHistoryOutcomeSchema,\n  type OrganizationBillingHistoryProvider,\n  OrganizationBillingHistoryProviderSchema,\n  type OrganizationBillingHistoryResponse,\n  OrganizationBillingHistoryResponseSchema,\n} from \"./organizationBillingHistory\";\nexport {\n  isOrganizationBillingManagementUrlResponse,\n  type OrganizationBillingManagementUrlResponse,\n  OrganizationBillingManagementUrlResponseSchema,\n} from \"./organizationBillingManagementUrl\";\nexport {\n  isOrganizationDataUsageResponse,\n  ORGANIZATION_DOCUMENT_USAGE_CATEGORIES,\n  type OrganizationBlobDataUsageResponse,\n  type OrganizationDataUsageResponse,\n  OrganizationDataUsageResponseSchema,\n  type OrganizationDocumentDataUsageResponse,\n  type OrganizationDocumentUsageCategory,\n  type OrganizationDocumentUsageCategoryBreakdown,\n} from \"./organizationDataUsage\";\nexport {\n  isOrganizationMembershipResponse,\n  isOrganizationMembershipsResponse,\n  type OrganizationMembershipResponse,\n  OrganizationMembershipResponseSchema,\n  type OrganizationMembershipsResponse,\n  OrganizationMembershipsResponseSchema,\n} from \"./organizationMembership\";\nexport {\n  isOrganizationNativePurchaseEligibilityResponse,\n  type OrganizationNativePurchaseEligibilityResponse,\n  OrganizationNativePurchaseEligibilityResponseSchema,\n  type OrganizationNativePurchaseIneligibilityReason,\n  OrganizationNativePurchaseIneligibilityReasonSchema,\n} from \"./organizationNativePurchaseEligibility\";\nexport {\n  type OrganizationPolicyHistoryResponse,\n  OrganizationPolicyHistoryResponseSchema,\n  PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE,\n} from \"./organizationPolicyHistory\";\nexport {\n  ORGANIZATION_PRESENTATION_ERROR_CODES,\n  type OrganizationPresentationErrorCode,\n  OrganizationPresentationErrorCodeSchema,\n  type OrganizationPresentationFailureResponse,\n  OrganizationPresentationFailureResponseSchema,\n} from \"./organizationPresentationError\";\nexport {\n  type CreateOrganizationResponse,\n  CreateOrganizationResponseSchema,\n  isCreateOrganizationResponse,\n  isOrganizationProvisioningResponse,\n  type OrganizationProvisioningResponse,\n  OrganizationProvisioningResponseSchema,\n} from \"./organizationProvisioning\";\nexport {\n  isOrganizationReadModelResponse,\n  type OrganizationReadModelDeltaResponse,\n  type OrganizationReadModelDirectoryResponse,\n  type OrganizationReadModelGrantsResponse,\n  type OrganizationReadModelGroupMemberResponse,\n  type OrganizationReadModelGroupMembershipResponse,\n  type OrganizationReadModelGroupMembershipsResponse,\n  type OrganizationReadModelOrganizationPolicyResponse,\n  type OrganizationReadModelResponse,\n  OrganizationReadModelResponseSchema,\n  type OrganizationReadModelSnapshotResponse,\n} from \"./organizationReadModel\";\nexport {\n  ORGANIZATION_READ_MODEL_ERROR_CODES,\n  type OrganizationReadModelErrorCode,\n  OrganizationReadModelErrorCodeSchema,\n  type OrganizationReadModelFailureResponse,\n  OrganizationReadModelFailureResponseSchema,\n} from \"./organizationReadModelError\";\nexport {\n  CommitOrganizationGroupPolicyConflictResponseSchema,\n  type CommitOrganizationGroupPolicyResponse,\n  CommitOrganizationGroupPolicyResponseSchema,\n  type CurrentPrincipalMemberEnvelopesResponse,\n  CurrentPrincipalMemberEnvelopesResponseSchema,\n  isCommitOrganizationGroupPolicyResponse,\n  isCurrentPrincipalMemberEnvelopesResponse,\n  isPrincipalPolicyBundleResponse,\n  isPrincipalPolicyMutationResponse,\n  isPrincipalPolicyStaleErrorResponse,\n  isPrincipalPolicyStateChainEntryResponse,\n  isPrincipalStatePayloadResponse,\n  isPrincipalStateResponse,\n  type PrincipalContainerGrantResponse,\n  PrincipalContainerGrantResponseSchema,\n  type PrincipalMemberEnvelopeResponse,\n  PrincipalMemberEnvelopeResponseSchema,\n  type PrincipalPolicyBundleResponse,\n  PrincipalPolicyBundleResponseSchema,\n  type PrincipalPolicyErrorResponse,\n  PrincipalPolicyErrorResponseSchema,\n  type PrincipalPolicyMutationResponse,\n  PrincipalPolicyMutationResponseSchema,\n  type PrincipalPolicySnapshotResponse,\n  PrincipalPolicySnapshotResponseSchema,\n  type PrincipalPolicyStaleErrorResponse,\n  PrincipalPolicyStaleErrorResponseSchema,\n  type PrincipalPolicyStateChainEntryResponse,\n  PrincipalPolicyStateChainEntryResponseSchema,\n  type PrincipalProjectionMemberResponse,\n  PrincipalProjectionMemberResponseSchema,\n  type PrincipalStateExternalAuthorityResponse,\n  PrincipalStateExternalAuthorityResponseSchema,\n  type PrincipalStatePayloadResponse,\n  PrincipalStatePayloadResponseSchema,\n  type PrincipalStateResponse,\n  PrincipalStateResponseSchema,\n} from \"./principal\";\nexport {\n  isPrincipalPolicyPageResponse,\n  isPrincipalPolicyUnchangedResponse,\n  type PrincipalPolicyPageResponse,\n  PrincipalPolicyPageResponseSchema,\n  type PrincipalPolicyReadResponse,\n  PrincipalPolicyReadResponseSchema,\n  type PrincipalPolicyUnchangedResponse,\n  PrincipalPolicyUnchangedResponseSchema,\n} from \"./principalPolicyPage\";\nexport {\n  isPrincipalPolicySnapshotPageResponse,\n  type PrincipalPolicyHistorySourceResponse,\n  PrincipalPolicyHistorySourceResponseSchema,\n  type PrincipalPolicySnapshotPageResponse,\n  PrincipalPolicySnapshotPageResponseSchema,\n} from \"./principalPolicySnapshotPage\";\nexport {\n  isReferencedPrincipalStateResponse,\n  type ReferencedPrincipalStateResponse,\n  ReferencedPrincipalStateResponseSchema,\n} from \"./principalReference\";\nexport {\n  type ProjectionPolicyEvidenceResponse,\n  ProjectionPolicyEvidenceResponseSchema,\n} from \"./projectionPolicyEvidence\";\nexport {\n  isRegistrationResponse,\n  type RegistrationResponse,\n  RegistrationResponseSchema,\n} from \"./registration\";\nexport {\n  isRootIdentitiesResponse,\n  isRootIdentityDetailResponse,\n  isRootIdentityOrganizationsResponse,\n  isRootIdentitySuspensionResponse,\n  type RootIdentitiesResponse,\n  RootIdentitiesResponseSchema,\n  type RootIdentityDetailResponse,\n  RootIdentityDetailResponseSchema,\n  type RootIdentityOrganizationBillingResponse,\n  RootIdentityOrganizationBillingResponseSchema,\n  type RootIdentityOrganizationResponse,\n  RootIdentityOrganizationResponseSchema,\n  type RootIdentityOrganizationsResponse,\n  RootIdentityOrganizationsResponseSchema,\n  type RootIdentitySessionResponse,\n  RootIdentitySessionResponseSchema,\n  type RootIdentitySummaryResponse,\n  RootIdentitySummaryResponseSchema,\n  type RootIdentitySuspensionResponse,\n  RootIdentitySuspensionResponseSchema,\n} from \"./root\";\nexport {\n  ROOT_AUDIT_ACTIONS,\n  type RootAuditAction,\n  RootAuditActionSchema,\n  type RootAuditEventResponse,\n  RootAuditEventResponseSchema,\n  type RootAuditEventsResponse,\n  RootAuditEventsResponseSchema,\n} from \"./rootAudit\";\nexport {\n  ROOT_OPS_HEALTH_OVERDUE_MINUTES,\n  ROOT_OPS_HEALTH_SECTION_LIMIT,\n  ROOT_OPS_HEALTH_UPCOMING_DAYS,\n  ROOT_SEAT_SYNC_CONDITIONS,\n  type RootOpsHealthReportResponse,\n  RootOpsHealthReportResponseSchema,\n  RootSeatSyncConditionSchema,\n} from \"./rootOpsHealth\";\nexport {\n  type RootDataUsageReportResponse,\n  RootDataUsageReportResponseSchema,\n  type RootOrganizationDetailResponse,\n  RootOrganizationDetailResponseSchema,\n  type RootOrganizationIdentitiesResponse,\n  RootOrganizationIdentitiesResponseSchema,\n  type RootOrganizationIdentityResponse,\n  RootOrganizationIdentityResponseSchema,\n  type RootOrganizationSummaryResponse,\n  RootOrganizationSummaryResponseSchema,\n  type RootOrganizationsResponse,\n  RootOrganizationsResponseSchema,\n} from \"./rootOrganizations\";\nexport {\n  ROOT_REVENUECAT_DISPOSITIONS,\n  ROOT_REVENUECAT_EVENT_ROLES,\n  type RootOrganizationRevenuecatEventResponse,\n  RootOrganizationRevenuecatEventResponseSchema,\n  type RootOrganizationRevenuecatEventsResponse,\n  RootOrganizationRevenuecatEventsResponseSchema,\n  type RootRevenuecatDisposition,\n  RootRevenuecatDispositionSchema,\n  type RootRevenuecatEventResponse,\n  RootRevenuecatEventResponseSchema,\n  type RootRevenuecatEventsReportResponse,\n  RootRevenuecatEventsReportResponseSchema,\n} from \"./rootRevenuecat\";\nexport {\n  isStripeCancelResponse,\n  isStripeCheckoutIntentResponse,\n  isStripeCheckoutOptionsResponse,\n  isStripeCheckoutSessionResponse,\n  isStripePortalResponse,\n  type StripeCancelResponse,\n  StripeCancelResponseSchema,\n  type StripeCheckoutIntentResponse,\n  StripeCheckoutIntentResponseSchema,\n  type StripeCheckoutOptionsResponse,\n  StripeCheckoutOptionsResponseSchema,\n  type StripeCheckoutSessionResponse,\n  StripeCheckoutSessionResponseSchema,\n  type StripePortalResponse,\n  StripePortalResponseSchema,\n  type StripeSyncOptionResponse,\n  StripeSyncOptionResponseSchema,\n} from \"./stripeCheckout\";\nexport {\n  isSyncWatermark,\n  type SyncWatermark,\n  SyncWatermarkSchema,\n} from \"./syncWatermark\";\nexport {\n  containerKekWireLevel,\n  decodeContainerWriterProjection,\n  decodeDocumentWriterProjection,\n  encodeContainerWriterProjection,\n  encodeDocumentWriterProjection,\n  type HeldKekLevelDigest,\n} from \"./writerProjectionWire\";\n"]}

package/internal/validators/response/writerProjectionWire.d.ts

@@ -1,19 +1,30 @@
 import type { AccessManifestBundleWireResponse } from "../util/index.js";
-import { type ContainerWriterProjectionResponse, type ContainerWriterProjectionWireResponse } from "./container.js";
+import { type ContainerKekResponse, type ContainerKekWireLevel, type ContainerWriterProjectionResponse, type ContainerWriterProjectionWireResponse } from "./container.js";
 import { type DocumentWriterProjectionResponse, type DocumentWriterProjectionWireResponse } from "./documentMutation.js";
 type Bundle = AccessManifestBundleWireResponse;
+type HeldLevels = ReadonlyMap<string, ContainerKekWireLevel>;
+/** A KEK level's wire form: its manifest history cited by hash. */
+export declare function containerKekWireLevel(kek: ContainerKekResponse): ContainerKekWireLevel;
+/**
+ * The digest a request declared for a KEK level it holds, or null when the
+ * level travels in full. The caller derives it from the level's own served
+ * bytes, so a level is omitted only when the held copy is exactly these.
+ */
+export type HeldKekLevelDigest = (kek: ContainerKekResponse) => string | null;
 /**
  * Call only after authorization and stored-evidence verification. `known`
- * holds the request's hints; only hashes this projection cites are omitted.
+ * holds the request's manifest hints; only hashes this projection cites are
+ * omitted. `heldLevel` names each KEK level the request holds exactly.
  */
-export declare function encodeContainerWriterProjection(projection: ContainerWriterProjectionResponse, known?: ReadonlySet<string>): ContainerWriterProjectionWireResponse;
+export declare function encodeContainerWriterProjection(projection: ContainerWriterProjectionResponse, known?: ReadonlySet<string>, heldLevel?: HeldKekLevelDigest): ContainerWriterProjectionWireResponse;
 /** See {@link encodeContainerWriterProjection}. */
-export declare function encodeDocumentWriterProjection(projection: DocumentWriterProjectionResponse, known?: ReadonlySet<string>): DocumentWriterProjectionWireResponse;
+export declare function encodeDocumentWriterProjection(projection: DocumentWriterProjectionResponse, known?: ReadonlySet<string>, heldLevel?: HeldKekLevelDigest): DocumentWriterProjectionWireResponse;
 /**
- * Null for any wire inconsistency or an omission `held` cannot fill; the
- * caller treats either as a shape failure.
+ * Null for any wire inconsistency or an omission `held` (bundles) or
+ * `heldLevels` (KEK levels by digest) cannot fill; the caller treats either
+ * as a shape failure.
  */
-export declare function decodeContainerWriterProjection(value: unknown, held?: ReadonlyMap<string, Bundle>): ContainerWriterProjectionResponse | null;
+export declare function decodeContainerWriterProjection(value: unknown, held?: ReadonlyMap<string, Bundle>, heldLevels?: HeldLevels): ContainerWriterProjectionResponse | null;
 /** See {@link decodeContainerWriterProjection}. */
-export declare function decodeDocumentWriterProjection(value: unknown, held?: ReadonlyMap<string, Bundle>): DocumentWriterProjectionResponse | null;
+export declare function decodeDocumentWriterProjection(value: unknown, held?: ReadonlyMap<string, Bundle>, heldLevels?: HeldLevels): DocumentWriterProjectionResponse | null;
 export {};

package/internal/validators/response/writerProjectionWire.js

@@ -1,4 +1,4 @@
-import { ContainerWriterProjectionWireResponseSchema, } from "./container.js";
+import { ContainerWriterProjectionWireResponseSchema, isCitedContainerKekLevel, } from "./container.js";
 import { DocumentWriterProjectionWireResponseSchema, } from "./documentMutation.js";
 /**
  * Collects each distinct manifest once. Every slot a server fills for one
@@ -23,23 +23,41 @@ function bundleCitations(known) {
         omitted: () => [...omitted],
     };
 }
-function encodeKeyingPath(path, cite) {
+/** A KEK level's wire form: its manifest history cited by hash. */
+export function containerKekWireLevel(kek) {
+    return {
+        ...kek,
+        containerManifestHistory: kek.containerManifestHistory.map((bundle) => bundle.manifestHash),
+    };
+}
+function encodeKeyingPath(path, cite, heldLevel) {
     return {
         ...path,
         path: path.path.map(cite),
-        containerKeks: path.containerKeks.map((kek) => ({
-            ...kek,
-            containerManifestHistory: kek.containerManifestHistory.map(cite),
-        })),
+        containerKeks: path.containerKeks.map((kek) => {
+            const level = {
+                ...kek,
+                containerManifestHistory: kek.containerManifestHistory.map(cite),
+            };
+            const levelDigest = heldLevel(kek);
+            return levelDigest === null
+                ? level
+                : {
+                    levelDigest,
+                    containerManifestHistory: level.containerManifestHistory,
+                };
+        }),
     };
 }
+const noHeldLevels = () => null;
 /**
  * Call only after authorization and stored-evidence verification. `known`
- * holds the request's hints; only hashes this projection cites are omitted.
+ * holds the request's manifest hints; only hashes this projection cites are
+ * omitted. `heldLevel` names each KEK level the request holds exactly.
  */
-export function encodeContainerWriterProjection(projection, known = new Set()) {
+export function encodeContainerWriterProjection(projection, known = new Set(), heldLevel = noHeldLevels) {
     const citations = bundleCitations(known);
-    const encoded = encodeKeyingPath(projection, citations.cite);
+    const encoded = encodeKeyingPath(projection, citations.cite, heldLevel);
     return {
         ...projection,
         ...encoded,
@@ -48,9 +66,9 @@ export function encodeContainerWriterProjection(projection, known = new Set()) {
     };
 }
 /** See {@link encodeContainerWriterProjection}. */
-export function encodeDocumentWriterProjection(projection, known = new Set()) {
+export function encodeDocumentWriterProjection(projection, known = new Set(), heldLevel = noHeldLevels) {
     const { cite, bundles, omitted } = bundleCitations(known);
-    const authorizingContainerPaths = projection.authorizingContainerPaths.map((path) => encodeKeyingPath(path, cite));
+    const authorizingContainerPaths = projection.authorizingContainerPaths.map((path) => encodeKeyingPath(path, cite, heldLevel));
     return {
         ...projection,
         authorizingContainerPaths,
@@ -84,33 +102,63 @@ function bundleResolver(bundles, omittedBundles, held) {
         return structuredClone(bundle);
     };
 }
-function decodeKeyingPath(path, resolve) {
+function sameHashes(left, right) {
+    return (left.length === right.length &&
+        left.every((hash, index) => hash === right[index]));
+}
+/**
+ * Each cited KEK level becomes its own copy of the exact held level this
+ * request declared under that digest. A digest the request did not cite, or
+ * a held level whose manifest citations differ from the stub's, makes the
+ * path unusable: the caller refetches in full.
+ */
+function fillKekLevels(path, heldLevels) {
+    const levels = [];
+    for (const kek of path.containerKeks) {
+        if (!isCitedContainerKekLevel(kek)) {
+            levels.push(kek);
+            continue;
+        }
+        const held = heldLevels.get(kek.levelDigest);
+        if (!held ||
+            !sameHashes(held.containerManifestHistory, kek.containerManifestHistory))
+            return null;
+        levels.push(structuredClone(held));
+    }
+    return levels;
+}
+function decodeKeyingPath(path, resolve, heldLevels) {
+    const levels = fillKekLevels(path, heldLevels);
+    if (!levels)
+        return null;
     return {
         ...path,
         path: path.path.map(resolve),
-        containerKeks: path.containerKeks.map((kek) => ({
+        containerKeks: levels.map((kek) => ({
             ...kek,
             containerManifestHistory: kek.containerManifestHistory.map(resolve),
         })),
     };
 }
 /**
- * Null for any wire inconsistency or an omission `held` cannot fill; the
- * caller treats either as a shape failure.
+ * Null for any wire inconsistency or an omission `held` (bundles) or
+ * `heldLevels` (KEK levels by digest) cannot fill; the caller treats either
+ * as a shape failure.
  */
-export function decodeContainerWriterProjection(value, held = new Map()) {
+export function decodeContainerWriterProjection(value, held = new Map(), heldLevels = new Map()) {
     const parsed = ContainerWriterProjectionWireResponseSchema.safeParse(value);
     if (!parsed.success) {
         return null;
     }
     const { bundles, omittedBundles, ...projection } = parsed.data;
     const resolve = bundleResolver(bundles, omittedBundles, held);
-    return resolve
-        ? { ...projection, ...decodeKeyingPath(projection, resolve) }
+    const path = resolve
+        ? decodeKeyingPath(projection, resolve, heldLevels)
         : null;
+    return path ? { ...projection, ...path } : null;
 }
 /** See {@link decodeContainerWriterProjection}. */
-export function decodeDocumentWriterProjection(value, held = new Map()) {
+export function decodeDocumentWriterProjection(value, held = new Map(), heldLevels = new Map()) {
     const parsed = DocumentWriterProjectionWireResponseSchema.safeParse(value);
     if (!parsed.success) {
         return null;
@@ -120,9 +168,19 @@ export function decodeDocumentWriterProjection(value, held = new Map()) {
     if (!resolve) {
         return null;
     }
+    const authorizingContainerPaths = [];
+    for (const path of projection.authorizingContainerPaths) {
+        const decoded = decodeKeyingPath(path, resolve, heldLevels);
+        if (!decoded)
+            return null;
+        authorizingContainerPaths.push(decoded);
+    }
+    const [firstPath, ...otherPaths] = authorizingContainerPaths;
+    if (!firstPath)
+        return null;
     return {
         ...projection,
-        authorizingContainerPaths: projection.authorizingContainerPaths.map((path) => decodeKeyingPath(path, resolve)),
+        authorizingContainerPaths: [firstPath, ...otherPaths],
         documentContainerManifestHistory: projection.documentContainerManifestHistory.map(resolve),
         documentManifest: resolve(projection.documentManifest),
         documentManifestContainerPaths: projection.documentManifestContainerPaths.map((path) => path.map(resolve)),

package/internal/validators/response/writerProjectionWire.js.map

@@ -1 +1 @@
-{"version":3,"file":"writerProjectionWire.js","sourceRoot":"","sources":["writerProjectionWire.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,2CAA2C,GAC5C,MAAM,aAAa,CAAC;AACrB,OAAO,EAGL,0CAA0C,GAC3C,MAAM,oBAAoB,CAAC;AAI5B;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAA0B;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO;QACL,IAAI,CAAC,MAAc;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;YACjC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;iBAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,uEAAuE;QACvE,OAAO,EAAE,GAA2B,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;QACjE,OAAO,EAAE,GAAa,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAiC,EACjC,IAAgC;IAEhC,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9C,GAAG,GAAG;YACN,wBAAwB,EAAE,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC;SACjE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAA6C,EAC7C,QAA6B,IAAI,GAAG,EAAE;IAEtC,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO;QACL,GAAG,UAAU;QACb,GAAG,OAAO;QACV,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE;QAC5B,cAAc,EAAE,SAAS,CAAC,OAAO,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,8BAA8B,CAC5C,UAA4C,EAC5C,QAA6B,IAAI,GAAG,EAAE;IAEtC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,yBAAyB,GAAG,UAAU,CAAC,yBAAyB,CAAC,GAAG,CACxE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CACvC,CAAC;IACF,OAAO;QACL,GAAG,UAAU;QACb,yBAAyB;QACzB,gCAAgC,EAC9B,UAAU,CAAC,gCAAgC,CAAC,GAAG,CAAC,IAAI,CAAC;QACvD,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACnD,8BAA8B,EAC5B,UAAU,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzE,uBAAuB,EAAE,UAAU,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;QACrE,OAAO,EAAE,OAAO,EAAE;QAClB,cAAc,EAAE,OAAO,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CACrB,OAA+B,EAC/B,cAAiC,EACjC,IAAiC;IAEjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,MAAM,EAAE,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,IAAY,EAAU,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,4BAA4B,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAqC,EACrC,OAAiC;IAEjC,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QAC5B,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9C,GAAG,GAAG;YACN,wBAAwB,EAAE,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC;SACpE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,KAAc,EACd,OAAoC,IAAI,GAAG,EAAE;IAE7C,MAAM,MAAM,GAAG,2CAA2C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9D,OAAO,OAAO;QACZ,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE;QAC7D,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,8BAA8B,CAC5C,KAAc,EACd,OAAoC,IAAI,GAAG,EAAE;IAE7C,MAAM,MAAM,GAAG,0CAA0C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,GAAG,UAAU;QACb,yBAAyB,EAAE,UAAU,CAAC,yBAAyB,CAAC,GAAG,CACjE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAC1C;QACD,gCAAgC,EAC9B,UAAU,CAAC,gCAAgC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC1D,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACtD,8BAA8B,EAC5B,UAAU,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACrD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAClB;QACH,uBAAuB,EAAE,UAAU,CAAC,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC;KACzE,CAAC;AACJ,CAAC","sourcesContent":["import type { AccessManifestBundleWireResponse } from \"../util\";\nimport {\n  type ContainerKeyingPathResponse,\n  type ContainerKeyingPathWireResponse,\n  type ContainerWriterProjectionResponse,\n  type ContainerWriterProjectionWireResponse,\n  ContainerWriterProjectionWireResponseSchema,\n} from \"./container\";\nimport {\n  type DocumentWriterProjectionResponse,\n  type DocumentWriterProjectionWireResponse,\n  DocumentWriterProjectionWireResponseSchema,\n} from \"./documentMutation\";\n\ntype Bundle = AccessManifestBundleWireResponse;\n\n/**\n * Collects each distinct manifest once. Every slot a server fills for one\n * hash comes from the same stored row, and the client verifies the bundle it\n * receives wherever that hash is cited, so the first occurrence stands. A\n * hash the request declared known is cited but not served.\n */\nfunction bundleCitations(known: ReadonlySet<string>) {\n  const byHash = new Map<string, Bundle>();\n  const omitted = new Set<string>();\n  return {\n    cite(bundle: Bundle): string {\n      const hash = bundle.manifestHash;\n      if (known.has(hash)) omitted.add(hash);\n      else if (!byHash.has(hash)) byHash.set(hash, bundle);\n      return hash;\n    },\n    // fromEntries defines own data properties, even for a \"__proto__\" key.\n    bundles: (): Record<string, Bundle> => Object.fromEntries(byHash),\n    omitted: (): string[] => [...omitted],\n  };\n}\n\nfunction encodeKeyingPath(\n  path: ContainerKeyingPathResponse,\n  cite: (bundle: Bundle) => string,\n): ContainerKeyingPathWireResponse {\n  return {\n    ...path,\n    path: path.path.map(cite),\n    containerKeks: path.containerKeks.map((kek) => ({\n      ...kek,\n      containerManifestHistory: kek.containerManifestHistory.map(cite),\n    })),\n  };\n}\n\n/**\n * Call only after authorization and stored-evidence verification. `known`\n * holds the request's hints; only hashes this projection cites are omitted.\n */\nexport function encodeContainerWriterProjection(\n  projection: ContainerWriterProjectionResponse,\n  known: ReadonlySet<string> = new Set(),\n): ContainerWriterProjectionWireResponse {\n  const citations = bundleCitations(known);\n  const encoded = encodeKeyingPath(projection, citations.cite);\n  return {\n    ...projection,\n    ...encoded,\n    bundles: citations.bundles(),\n    omittedBundles: citations.omitted(),\n  };\n}\n\n/** See {@link encodeContainerWriterProjection}. */\nexport function encodeDocumentWriterProjection(\n  projection: DocumentWriterProjectionResponse,\n  known: ReadonlySet<string> = new Set(),\n): DocumentWriterProjectionWireResponse {\n  const { cite, bundles, omitted } = bundleCitations(known);\n  const authorizingContainerPaths = projection.authorizingContainerPaths.map(\n    (path) => encodeKeyingPath(path, cite),\n  );\n  return {\n    ...projection,\n    authorizingContainerPaths,\n    documentContainerManifestHistory:\n      projection.documentContainerManifestHistory.map(cite),\n    documentManifest: cite(projection.documentManifest),\n    documentManifestContainerPaths:\n      projection.documentManifestContainerPaths.map((path) => path.map(cite)),\n    documentManifestHistory: projection.documentManifestHistory.map(cite),\n    bundles: bundles(),\n    omittedBundles: omitted(),\n  };\n}\n\n/**\n * Served bundles plus the exact held bytes for each omitted hash. An omission\n * the caller cannot fill from `held` (which carries only what its request\n * cited) makes the response unusable. Each cited position receives its own\n * copy, as when every slot carried its own JSON.\n */\nfunction bundleResolver(\n  bundles: Record<string, Bundle>,\n  omittedBundles: readonly string[],\n  held: ReadonlyMap<string, Bundle>,\n): ((hash: string) => Bundle) | null {\n  const byHash = new Map(Object.entries(bundles));\n  for (const hash of omittedBundles) {\n    const bundle = held.get(hash);\n    if (bundle?.manifestHash !== hash) return null;\n    byHash.set(hash, bundle);\n  }\n  return (hash: string): Bundle => {\n    const bundle = byHash.get(hash);\n    if (!bundle) {\n      throw new Error(`manifest ${hash} is cited without a bundle`);\n    }\n    return structuredClone(bundle);\n  };\n}\n\nfunction decodeKeyingPath(\n  path: ContainerKeyingPathWireResponse,\n  resolve: (hash: string) => Bundle,\n): ContainerKeyingPathResponse {\n  return {\n    ...path,\n    path: path.path.map(resolve),\n    containerKeks: path.containerKeks.map((kek) => ({\n      ...kek,\n      containerManifestHistory: kek.containerManifestHistory.map(resolve),\n    })),\n  };\n}\n\n/**\n * Null for any wire inconsistency or an omission `held` cannot fill; the\n * caller treats either as a shape failure.\n */\nexport function decodeContainerWriterProjection(\n  value: unknown,\n  held: ReadonlyMap<string, Bundle> = new Map(),\n): ContainerWriterProjectionResponse | null {\n  const parsed = ContainerWriterProjectionWireResponseSchema.safeParse(value);\n  if (!parsed.success) {\n    return null;\n  }\n  const { bundles, omittedBundles, ...projection } = parsed.data;\n  const resolve = bundleResolver(bundles, omittedBundles, held);\n  return resolve\n    ? { ...projection, ...decodeKeyingPath(projection, resolve) }\n    : null;\n}\n\n/** See {@link decodeContainerWriterProjection}. */\nexport function decodeDocumentWriterProjection(\n  value: unknown,\n  held: ReadonlyMap<string, Bundle> = new Map(),\n): DocumentWriterProjectionResponse | null {\n  const parsed = DocumentWriterProjectionWireResponseSchema.safeParse(value);\n  if (!parsed.success) {\n    return null;\n  }\n  const { bundles, omittedBundles, ...projection } = parsed.data;\n  const resolve = bundleResolver(bundles, omittedBundles, held);\n  if (!resolve) {\n    return null;\n  }\n  return {\n    ...projection,\n    authorizingContainerPaths: projection.authorizingContainerPaths.map(\n      (path) => decodeKeyingPath(path, resolve),\n    ),\n    documentContainerManifestHistory:\n      projection.documentContainerManifestHistory.map(resolve),\n    documentManifest: resolve(projection.documentManifest),\n    documentManifestContainerPaths:\n      projection.documentManifestContainerPaths.map((path) =>\n        path.map(resolve),\n      ),\n    documentManifestHistory: projection.documentManifestHistory.map(resolve),\n  };\n}\n"]}
+{"version":3,"file":"writerProjectionWire.js","sourceRoot":"","sources":["writerProjectionWire.ts"],"names":[],"mappings":"AACA,OAAO,EAOL,2CAA2C,EAC3C,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAGL,0CAA0C,GAC3C,MAAM,oBAAoB,CAAC;AAK5B;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAA0B;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO;QACL,IAAI,CAAC,MAAc;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;YACjC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;iBAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,uEAAuE;QACvE,OAAO,EAAE,GAA2B,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;QACjE,OAAO,EAAE,GAAa,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CACnC,GAAyB;IAEzB,OAAO;QACL,GAAG,GAAG;QACN,wBAAwB,EAAE,GAAG,CAAC,wBAAwB,CAAC,GAAG,CACxD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAChC;KACF,CAAC;AACJ,CAAC;AASD,SAAS,gBAAgB,CACvB,IAAiC,EACjC,IAAgC,EAChC,SAA6B;IAE7B,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG;gBACZ,GAAG,GAAG;gBACN,wBAAwB,EAAE,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC;aACjE,CAAC;YACF,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YACnC,OAAO,WAAW,KAAK,IAAI;gBACzB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC;oBACE,WAAW;oBACX,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;iBACzD,CAAC;QACR,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAuB,GAAG,EAAE,CAAC,IAAI,CAAC;AAEpD;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAA6C,EAC7C,QAA6B,IAAI,GAAG,EAAE,EACtC,YAAgC,YAAY;IAE5C,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxE,OAAO;QACL,GAAG,UAAU;QACb,GAAG,OAAO;QACV,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE;QAC5B,cAAc,EAAE,SAAS,CAAC,OAAO,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,8BAA8B,CAC5C,UAA4C,EAC5C,QAA6B,IAAI,GAAG,EAAE,EACtC,YAAgC,YAAY;IAE5C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,yBAAyB,GAAG,UAAU,CAAC,yBAAyB,CAAC,GAAG,CACxE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAClD,CAAC;IACF,OAAO;QACL,GAAG,UAAU;QACb,yBAAyB;QACzB,gCAAgC,EAC9B,UAAU,CAAC,gCAAgC,CAAC,GAAG,CAAC,IAAI,CAAC;QACvD,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACnD,8BAA8B,EAC5B,UAAU,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzE,uBAAuB,EAAE,UAAU,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;QACrE,OAAO,EAAE,OAAO,EAAE;QAClB,cAAc,EAAE,OAAO,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CACrB,OAA+B,EAC/B,cAAiC,EACjC,IAAiC;IAEjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,MAAM,EAAE,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,IAAY,EAAU,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,4BAA4B,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAuB,EAAE,KAAwB;IACnE,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC5B,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,IAAqC,EACrC,UAAsB;IAEtB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,IACE,CAAC,IAAI;YACL,CAAC,UAAU,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,CAAC,wBAAwB,CAAC;YAExE,OAAO,IAAI,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAqC,EACrC,OAAiC,EACjC,UAAsB;IAEtB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QAC5B,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,GAAG;YACN,wBAAwB,EAAE,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC;SACpE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,KAAc,EACd,OAAoC,IAAI,GAAG,EAAE,EAC7C,aAAyB,IAAI,GAAG,EAAE;IAElC,MAAM,MAAM,GAAG,2CAA2C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,OAAO;QAClB,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC;IACT,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,8BAA8B,CAC5C,KAAc,EACd,OAAoC,IAAI,GAAG,EAAE,EAC7C,aAAyB,IAAI,GAAG,EAAE;IAElC,MAAM,MAAM,GAAG,0CAA0C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,yBAAyB,GAAkC,EAAE,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,yBAAyB,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC,GAAG,yBAAyB,CAAC;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO;QACL,GAAG,UAAU;QACb,yBAAyB,EAAE,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC;QACrD,gCAAgC,EAC9B,UAAU,CAAC,gCAAgC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC1D,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACtD,8BAA8B,EAC5B,UAAU,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACrD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAClB;QACH,uBAAuB,EAAE,UAAU,CAAC,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC;KACzE,CAAC;AACJ,CAAC","sourcesContent":["import type { AccessManifestBundleWireResponse } from \"../util\";\nimport {\n  type ContainerKekResponse,\n  type ContainerKekWireLevel,\n  type ContainerKeyingPathResponse,\n  type ContainerKeyingPathWireResponse,\n  type ContainerWriterProjectionResponse,\n  type ContainerWriterProjectionWireResponse,\n  ContainerWriterProjectionWireResponseSchema,\n  isCitedContainerKekLevel,\n} from \"./container\";\nimport {\n  type DocumentWriterProjectionResponse,\n  type DocumentWriterProjectionWireResponse,\n  DocumentWriterProjectionWireResponseSchema,\n} from \"./documentMutation\";\n\ntype Bundle = AccessManifestBundleWireResponse;\ntype HeldLevels = ReadonlyMap<string, ContainerKekWireLevel>;\n\n/**\n * Collects each distinct manifest once. Every slot a server fills for one\n * hash comes from the same stored row, and the client verifies the bundle it\n * receives wherever that hash is cited, so the first occurrence stands. A\n * hash the request declared known is cited but not served.\n */\nfunction bundleCitations(known: ReadonlySet<string>) {\n  const byHash = new Map<string, Bundle>();\n  const omitted = new Set<string>();\n  return {\n    cite(bundle: Bundle): string {\n      const hash = bundle.manifestHash;\n      if (known.has(hash)) omitted.add(hash);\n      else if (!byHash.has(hash)) byHash.set(hash, bundle);\n      return hash;\n    },\n    // fromEntries defines own data properties, even for a \"__proto__\" key.\n    bundles: (): Record<string, Bundle> => Object.fromEntries(byHash),\n    omitted: (): string[] => [...omitted],\n  };\n}\n\n/** A KEK level's wire form: its manifest history cited by hash. */\nexport function containerKekWireLevel(\n  kek: ContainerKekResponse,\n): ContainerKekWireLevel {\n  return {\n    ...kek,\n    containerManifestHistory: kek.containerManifestHistory.map(\n      (bundle) => bundle.manifestHash,\n    ),\n  };\n}\n\n/**\n * The digest a request declared for a KEK level it holds, or null when the\n * level travels in full. The caller derives it from the level's own served\n * bytes, so a level is omitted only when the held copy is exactly these.\n */\nexport type HeldKekLevelDigest = (kek: ContainerKekResponse) => string | null;\n\nfunction encodeKeyingPath(\n  path: ContainerKeyingPathResponse,\n  cite: (bundle: Bundle) => string,\n  heldLevel: HeldKekLevelDigest,\n): ContainerKeyingPathWireResponse {\n  return {\n    ...path,\n    path: path.path.map(cite),\n    containerKeks: path.containerKeks.map((kek) => {\n      const level = {\n        ...kek,\n        containerManifestHistory: kek.containerManifestHistory.map(cite),\n      };\n      const levelDigest = heldLevel(kek);\n      return levelDigest === null\n        ? level\n        : {\n            levelDigest,\n            containerManifestHistory: level.containerManifestHistory,\n          };\n    }),\n  };\n}\n\nconst noHeldLevels: HeldKekLevelDigest = () => null;\n\n/**\n * Call only after authorization and stored-evidence verification. `known`\n * holds the request's manifest hints; only hashes this projection cites are\n * omitted. `heldLevel` names each KEK level the request holds exactly.\n */\nexport function encodeContainerWriterProjection(\n  projection: ContainerWriterProjectionResponse,\n  known: ReadonlySet<string> = new Set(),\n  heldLevel: HeldKekLevelDigest = noHeldLevels,\n): ContainerWriterProjectionWireResponse {\n  const citations = bundleCitations(known);\n  const encoded = encodeKeyingPath(projection, citations.cite, heldLevel);\n  return {\n    ...projection,\n    ...encoded,\n    bundles: citations.bundles(),\n    omittedBundles: citations.omitted(),\n  };\n}\n\n/** See {@link encodeContainerWriterProjection}. */\nexport function encodeDocumentWriterProjection(\n  projection: DocumentWriterProjectionResponse,\n  known: ReadonlySet<string> = new Set(),\n  heldLevel: HeldKekLevelDigest = noHeldLevels,\n): DocumentWriterProjectionWireResponse {\n  const { cite, bundles, omitted } = bundleCitations(known);\n  const authorizingContainerPaths = projection.authorizingContainerPaths.map(\n    (path) => encodeKeyingPath(path, cite, heldLevel),\n  );\n  return {\n    ...projection,\n    authorizingContainerPaths,\n    documentContainerManifestHistory:\n      projection.documentContainerManifestHistory.map(cite),\n    documentManifest: cite(projection.documentManifest),\n    documentManifestContainerPaths:\n      projection.documentManifestContainerPaths.map((path) => path.map(cite)),\n    documentManifestHistory: projection.documentManifestHistory.map(cite),\n    bundles: bundles(),\n    omittedBundles: omitted(),\n  };\n}\n\n/**\n * Served bundles plus the exact held bytes for each omitted hash. An omission\n * the caller cannot fill from `held` (which carries only what its request\n * cited) makes the response unusable. Each cited position receives its own\n * copy, as when every slot carried its own JSON.\n */\nfunction bundleResolver(\n  bundles: Record<string, Bundle>,\n  omittedBundles: readonly string[],\n  held: ReadonlyMap<string, Bundle>,\n): ((hash: string) => Bundle) | null {\n  const byHash = new Map(Object.entries(bundles));\n  for (const hash of omittedBundles) {\n    const bundle = held.get(hash);\n    if (bundle?.manifestHash !== hash) return null;\n    byHash.set(hash, bundle);\n  }\n  return (hash: string): Bundle => {\n    const bundle = byHash.get(hash);\n    if (!bundle) {\n      throw new Error(`manifest ${hash} is cited without a bundle`);\n    }\n    return structuredClone(bundle);\n  };\n}\n\nfunction sameHashes(left: readonly string[], right: readonly string[]) {\n  return (\n    left.length === right.length &&\n    left.every((hash, index) => hash === right[index])\n  );\n}\n\n/**\n * Each cited KEK level becomes its own copy of the exact held level this\n * request declared under that digest. A digest the request did not cite, or\n * a held level whose manifest citations differ from the stub's, makes the\n * path unusable: the caller refetches in full.\n */\nfunction fillKekLevels(\n  path: ContainerKeyingPathWireResponse,\n  heldLevels: HeldLevels,\n): ContainerKekWireLevel[] | null {\n  const levels: ContainerKekWireLevel[] = [];\n  for (const kek of path.containerKeks) {\n    if (!isCitedContainerKekLevel(kek)) {\n      levels.push(kek);\n      continue;\n    }\n    const held = heldLevels.get(kek.levelDigest);\n    if (\n      !held ||\n      !sameHashes(held.containerManifestHistory, kek.containerManifestHistory)\n    )\n      return null;\n    levels.push(structuredClone(held));\n  }\n  return levels;\n}\n\nfunction decodeKeyingPath(\n  path: ContainerKeyingPathWireResponse,\n  resolve: (hash: string) => Bundle,\n  heldLevels: HeldLevels,\n): ContainerKeyingPathResponse | null {\n  const levels = fillKekLevels(path, heldLevels);\n  if (!levels) return null;\n  return {\n    ...path,\n    path: path.path.map(resolve),\n    containerKeks: levels.map((kek) => ({\n      ...kek,\n      containerManifestHistory: kek.containerManifestHistory.map(resolve),\n    })),\n  };\n}\n\n/**\n * Null for any wire inconsistency or an omission `held` (bundles) or\n * `heldLevels` (KEK levels by digest) cannot fill; the caller treats either\n * as a shape failure.\n */\nexport function decodeContainerWriterProjection(\n  value: unknown,\n  held: ReadonlyMap<string, Bundle> = new Map(),\n  heldLevels: HeldLevels = new Map(),\n): ContainerWriterProjectionResponse | null {\n  const parsed = ContainerWriterProjectionWireResponseSchema.safeParse(value);\n  if (!parsed.success) {\n    return null;\n  }\n  const { bundles, omittedBundles, ...projection } = parsed.data;\n  const resolve = bundleResolver(bundles, omittedBundles, held);\n  const path = resolve\n    ? decodeKeyingPath(projection, resolve, heldLevels)\n    : null;\n  return path ? { ...projection, ...path } : null;\n}\n\n/** See {@link decodeContainerWriterProjection}. */\nexport function decodeDocumentWriterProjection(\n  value: unknown,\n  held: ReadonlyMap<string, Bundle> = new Map(),\n  heldLevels: HeldLevels = new Map(),\n): DocumentWriterProjectionResponse | null {\n  const parsed = DocumentWriterProjectionWireResponseSchema.safeParse(value);\n  if (!parsed.success) {\n    return null;\n  }\n  const { bundles, omittedBundles, ...projection } = parsed.data;\n  const resolve = bundleResolver(bundles, omittedBundles, held);\n  if (!resolve) {\n    return null;\n  }\n  const authorizingContainerPaths: ContainerKeyingPathResponse[] = [];\n  for (const path of projection.authorizingContainerPaths) {\n    const decoded = decodeKeyingPath(path, resolve, heldLevels);\n    if (!decoded) return null;\n    authorizingContainerPaths.push(decoded);\n  }\n  const [firstPath, ...otherPaths] = authorizingContainerPaths;\n  if (!firstPath) return null;\n  return {\n    ...projection,\n    authorizingContainerPaths: [firstPath, ...otherPaths],\n    documentContainerManifestHistory:\n      projection.documentContainerManifestHistory.map(resolve),\n    documentManifest: resolve(projection.documentManifest),\n    documentManifestContainerPaths:\n      projection.documentManifestContainerPaths.map((path) =>\n        path.map(resolve),\n      ),\n    documentManifestHistory: projection.documentManifestHistory.map(resolve),\n  };\n}\n"]}

package/internal/validators/util/index.d.ts

@@ -5,7 +5,7 @@ export { CONTAINER_KEK_LOG_PAGE_LIMIT, CONTAINER_KEK_LOG_PRINCIPAL_SCOPE_LIMIT,
 export { MAX_CONTAINER_PATH_LENGTH } from "./containerLimits.js";
 export { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS, MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS, MAX_DOCUMENT_SYNC_OUTGOING_UPDATES, MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH, MAX_DOCUMENT_SYNC_REQUEST_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES, MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES, } from "./documentSyncLimits.js";
 export { isSerializedKeyEnvelope, isSerializedKeyEnvelopeArray, type SerializedKeyEnvelope, } from "./keyEnvelope.js";
-export { KNOWN_MANIFEST_HINT_LIMIT, KnownManifestsHeadersSchema, parseKnownManifestHints, } from "./knownManifestWire.js";
+export { formatKnownManifestHints, KNOWN_MANIFEST_HINT_LIMIT, type KnownManifestHints, KnownManifestsHeadersSchema, parseKnownManifestHints, } from "./knownManifestWire.js";
 export { isOrganizationLeaveRequest, type OrganizationLeaveRequest, type OrganizationLeaveRequestMembersHead, OrganizationLeaveRequestSchema, } from "./organizationLeaveRequest.js";
 export { isOrganizationReplacementAuthorization, type OrganizationReplacementAuthorization, OrganizationReplacementAuthorizationSchema, } from "./organizationReplacement.js";
 export { PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT, PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT, } from "./principalHistoryWire.js";

package/internal/validators/util/index.js

@@ -5,7 +5,7 @@ export { CONTAINER_KEK_LOG_PAGE_LIMIT, CONTAINER_KEK_LOG_PRINCIPAL_SCOPE_LIMIT,
 export { MAX_CONTAINER_PATH_LENGTH } from "./containerLimits.js";
 export { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS, MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS, MAX_DOCUMENT_SYNC_OUTGOING_UPDATES, MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH, MAX_DOCUMENT_SYNC_REQUEST_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES, MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES, } from "./documentSyncLimits.js";
 export { isSerializedKeyEnvelope, isSerializedKeyEnvelopeArray, } from "./keyEnvelope.js";
-export { KNOWN_MANIFEST_HINT_LIMIT, KnownManifestsHeadersSchema, parseKnownManifestHints, } from "./knownManifestWire.js";
+export { formatKnownManifestHints, KNOWN_MANIFEST_HINT_LIMIT, KnownManifestsHeadersSchema, parseKnownManifestHints, } from "./knownManifestWire.js";
 export { isOrganizationLeaveRequest, OrganizationLeaveRequestSchema, } from "./organizationLeaveRequest.js";
 export { isOrganizationReplacementAuthorization, OrganizationReplacementAuthorizationSchema, } from "./organizationReplacement.js";
 export { PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT, PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT, } from "./principalHistoryWire.js";

package/internal/validators/util/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,mCAAmC,EAGnC,sCAAsC,EACtC,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,kCAAkC,EAClC,uCAAuC,GACxC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAE9B,iCAAiC,EAEjC,6BAA6B,EAE7B,mCAAmC,EACnC,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,uCAAuC,EACvC,mCAAmC,EACnC,mCAAmC,EACnC,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,8CAA8C,EAC9C,gDAAgD,EAChD,wCAAwC,EACxC,yCAAyC,EACzC,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EACL,yCAAyC,EACzC,qCAAqC,EACrC,qCAAqC,EACrC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,EAC/B,yCAAyC,EACzC,qCAAqC,EACrC,uCAAuC,EACvC,4CAA4C,GAC7C,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAE7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0BAA0B,EAG1B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sCAAsC,EAEtC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,0BAA0B,EAC1B,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC","sourcesContent":["export {\n  type AccessEventBundleWireResponse,\n  AccessEventBundleWireResponseSchema,\n  type AccessManifestBundleWire,\n  type AccessManifestBundleWireResponse,\n  AccessManifestBundleWireResponseSchema,\n  AccessManifestBundleWireSchema,\n  isAccessEventBundleWireResponse,\n  isAccessManifestBundleWire,\n  isAccessManifestBundleWireArray,\n  isAccessManifestBundleWireResponse,\n  isOptionalAccessManifestBundleWireArray,\n} from \"./accessManifestBundle\";\nexport {\n  MAX_INITIATE_PART_UPLOADS,\n  MAX_MULTIPART_BLOB_PART_BYTES,\n} from \"./blob\";\nexport {\n  blobPartContentMd5Schema,\n  MAX_MULTIPART_BLOB_PART_NUMBER,\n  type MultipartBlobPartDescriptor,\n  MultipartBlobPartDescriptorSchema,\n  type MultipartBlobPartUpload,\n  MultipartBlobPartUploadSchema,\n  type MultipartBlobPartUploadSource,\n  MultipartBlobPartUploadSourceSchema,\n  signedBlobUrlExpirySchema,\n  signedBlobUrlSchema,\n} from \"./blobTransferSchemas\";\nexport {\n  CONTAINER_KEK_LOG_PAGE_LIMIT,\n  CONTAINER_KEK_LOG_PRINCIPAL_SCOPE_LIMIT,\n  CONTAINER_KEK_WRAPS_PER_EPOCH_LIMIT,\n  ContainerKekKeyringWireRecordSchema,\n  isContainerKekKeyringWireRecord,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_INLINE_CONTAINER_REKEYS,\n  MAX_ROTATION_CONTAINER_REKEYS,\n  MAX_SEALED_CONTAINER_KEK_KEYRING_BASE64_LENGTH,\n  SEALED_CONTAINER_KEK_KEYRING_AEAD_OVERHEAD_BYTES,\n  SEALED_CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  SEALED_CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  sealedContainerKekKeyringBytes,\n} from \"./containerKekKeyringWire\";\nexport { MAX_CONTAINER_PATH_LENGTH } from \"./containerLimits\";\nexport {\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n  MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n  MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n  MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES,\n  MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES,\n} from \"./documentSyncLimits\";\nexport {\n  isSerializedKeyEnvelope,\n  isSerializedKeyEnvelopeArray,\n  type SerializedKeyEnvelope,\n} from \"./keyEnvelope\";\nexport {\n  KNOWN_MANIFEST_HINT_LIMIT,\n  KnownManifestsHeadersSchema,\n  parseKnownManifestHints,\n} from \"./knownManifestWire\";\nexport {\n  isOrganizationLeaveRequest,\n  type OrganizationLeaveRequest,\n  type OrganizationLeaveRequestMembersHead,\n  OrganizationLeaveRequestSchema,\n} from \"./organizationLeaveRequest\";\nexport {\n  isOrganizationReplacementAuthorization,\n  type OrganizationReplacementAuthorization,\n  OrganizationReplacementAuthorizationSchema,\n} from \"./organizationReplacement\";\nexport {\n  PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT,\n  PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT,\n} from \"./principalHistoryWire\";\nexport {\n  hasArrayProperty,\n  hasBooleanProperty,\n  hasNonEmptyStringProperty,\n  hasNullableNumberProperty,\n  hasNullableStringProperty,\n  hasNumberProperty,\n  hasObjectProperty,\n  hasOptionalStringProperty,\n  hasPositiveIntegerProperty,\n  hasPropertyValue,\n  hasStringProperty,\n  isNonEmptyStringArray,\n  isOptionalRecordArray,\n  isOptionalRecordArrayArray,\n  isRecordArray,\n  isRecordArrayArray,\n  isStringArray,\n} from \"./properties\";\nexport {\n  AUTH_CHALLENGE_HEX_LENGTH,\n  isAuthChallengeHexString,\n  isByteArray,\n  isByteArrayOfLength,\n  isSha256HexString,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  SHA256_HEX_LENGTH,\n} from \"./protocol\";\nexport {\n  CANONICAL_SIGNED_AT_PATTERN,\n  isCanonicalSignedAt,\n  MAX_SIGNED_AT_YEAR,\n  MIN_SIGNED_AT_YEAR,\n  SIGNED_AT_CONTRACT,\n} from \"./signedAt\";\nexport { isUuidV4String } from \"./uuid\";\nexport { isWalLsnString, parseWalLsn } from \"./walLsn\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,mCAAmC,EAGnC,sCAAsC,EACtC,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,kCAAkC,EAClC,uCAAuC,GACxC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAE9B,iCAAiC,EAEjC,6BAA6B,EAE7B,mCAAmC,EACnC,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,uCAAuC,EACvC,mCAAmC,EACnC,mCAAmC,EACnC,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,8CAA8C,EAC9C,gDAAgD,EAChD,wCAAwC,EACxC,yCAAyC,EACzC,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EACL,yCAAyC,EACzC,qCAAqC,EACrC,qCAAqC,EACrC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,EAC/B,yCAAyC,EACzC,qCAAqC,EACrC,uCAAuC,EACvC,4CAA4C,GAC7C,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAE7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EAEzB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0BAA0B,EAG1B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sCAAsC,EAEtC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,0BAA0B,EAC1B,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC","sourcesContent":["export {\n  type AccessEventBundleWireResponse,\n  AccessEventBundleWireResponseSchema,\n  type AccessManifestBundleWire,\n  type AccessManifestBundleWireResponse,\n  AccessManifestBundleWireResponseSchema,\n  AccessManifestBundleWireSchema,\n  isAccessEventBundleWireResponse,\n  isAccessManifestBundleWire,\n  isAccessManifestBundleWireArray,\n  isAccessManifestBundleWireResponse,\n  isOptionalAccessManifestBundleWireArray,\n} from \"./accessManifestBundle\";\nexport {\n  MAX_INITIATE_PART_UPLOADS,\n  MAX_MULTIPART_BLOB_PART_BYTES,\n} from \"./blob\";\nexport {\n  blobPartContentMd5Schema,\n  MAX_MULTIPART_BLOB_PART_NUMBER,\n  type MultipartBlobPartDescriptor,\n  MultipartBlobPartDescriptorSchema,\n  type MultipartBlobPartUpload,\n  MultipartBlobPartUploadSchema,\n  type MultipartBlobPartUploadSource,\n  MultipartBlobPartUploadSourceSchema,\n  signedBlobUrlExpirySchema,\n  signedBlobUrlSchema,\n} from \"./blobTransferSchemas\";\nexport {\n  CONTAINER_KEK_LOG_PAGE_LIMIT,\n  CONTAINER_KEK_LOG_PRINCIPAL_SCOPE_LIMIT,\n  CONTAINER_KEK_WRAPS_PER_EPOCH_LIMIT,\n  ContainerKekKeyringWireRecordSchema,\n  isContainerKekKeyringWireRecord,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_INLINE_CONTAINER_REKEYS,\n  MAX_ROTATION_CONTAINER_REKEYS,\n  MAX_SEALED_CONTAINER_KEK_KEYRING_BASE64_LENGTH,\n  SEALED_CONTAINER_KEK_KEYRING_AEAD_OVERHEAD_BYTES,\n  SEALED_CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  SEALED_CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  sealedContainerKekKeyringBytes,\n} from \"./containerKekKeyringWire\";\nexport { MAX_CONTAINER_PATH_LENGTH } from \"./containerLimits\";\nexport {\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n  MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n  MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n  MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES,\n  MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES,\n  MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES,\n} from \"./documentSyncLimits\";\nexport {\n  isSerializedKeyEnvelope,\n  isSerializedKeyEnvelopeArray,\n  type SerializedKeyEnvelope,\n} from \"./keyEnvelope\";\nexport {\n  formatKnownManifestHints,\n  KNOWN_MANIFEST_HINT_LIMIT,\n  type KnownManifestHints,\n  KnownManifestsHeadersSchema,\n  parseKnownManifestHints,\n} from \"./knownManifestWire\";\nexport {\n  isOrganizationLeaveRequest,\n  type OrganizationLeaveRequest,\n  type OrganizationLeaveRequestMembersHead,\n  OrganizationLeaveRequestSchema,\n} from \"./organizationLeaveRequest\";\nexport {\n  isOrganizationReplacementAuthorization,\n  type OrganizationReplacementAuthorization,\n  OrganizationReplacementAuthorizationSchema,\n} from \"./organizationReplacement\";\nexport {\n  PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT,\n  PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT,\n} from \"./principalHistoryWire\";\nexport {\n  hasArrayProperty,\n  hasBooleanProperty,\n  hasNonEmptyStringProperty,\n  hasNullableNumberProperty,\n  hasNullableStringProperty,\n  hasNumberProperty,\n  hasObjectProperty,\n  hasOptionalStringProperty,\n  hasPositiveIntegerProperty,\n  hasPropertyValue,\n  hasStringProperty,\n  isNonEmptyStringArray,\n  isOptionalRecordArray,\n  isOptionalRecordArrayArray,\n  isRecordArray,\n  isRecordArrayArray,\n  isStringArray,\n} from \"./properties\";\nexport {\n  AUTH_CHALLENGE_HEX_LENGTH,\n  isAuthChallengeHexString,\n  isByteArray,\n  isByteArrayOfLength,\n  isSha256HexString,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  SHA256_HEX_LENGTH,\n} from \"./protocol\";\nexport {\n  CANONICAL_SIGNED_AT_PATTERN,\n  isCanonicalSignedAt,\n  MAX_SIGNED_AT_YEAR,\n  MIN_SIGNED_AT_YEAR,\n  SIGNED_AT_CONTRACT,\n} from \"./signedAt\";\nexport { isUuidV4String } from \"./uuid\";\nexport { isWalLsnString, parseWalLsn } from \"./walLsn\";\n"]}

package/internal/validators/util/knownManifestWire.d.ts

@@ -1,11 +1,21 @@
 import { z } from "zod";
 /**
  * Hints bound the omission a request can ask for, never the history a reader
- * receives: an uncited manifest always travels.
+ * receives: an uncited manifest or KEK level always travels.
  */
 export declare const KNOWN_MANIFEST_HINT_LIMIT = 48;
-/** Null unless the header is 1–48 unique lowercase SHA-256 manifest hashes. */
-export declare function parseKnownManifestHints(value: string): string[] | null;
+/** The typed digests one request declares held. */
+export interface KnownManifestHints {
+    readonly manifests: readonly string[];
+    readonly kekLevels: readonly string[];
+}
+/**
+ * Null unless the header is 1–48 unique typed entries, each `m:` or `k:`
+ * followed by a lowercase SHA-256 hex digest.
+ */
+export declare function parseKnownManifestHints(value: string): KnownManifestHints | null;
+/** The header value for `hints`; callers keep the total within the limit. */
+export declare function formatKnownManifestHints(hints: KnownManifestHints): string;
 export declare const KnownManifestsHeadersSchema: z.ZodObject<{
     "x-known-manifests": z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;