@tearleads/client-sdk 0.1.13 → 0.1.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (204) hide show
  1. package/README.md +32 -7
  2. package/client/containerContents.js +2 -1
  3. package/client/containerContents.js.map +1 -1
  4. package/data/documents/blob/shared/types.d.ts +4 -0
  5. package/data/documents/blob/shared/types.js.map +1 -1
  6. package/data/keyingProjectionVerification/accessManifestCheckpointEnforcement.js +2 -0
  7. package/data/keyingProjectionVerification/accessManifestCheckpointEnforcement.js.map +1 -1
  8. package/data/keyingProjectionVerification/checkpointContext.d.ts +2 -1
  9. package/data/keyingProjectionVerification/checkpointContext.js +22 -0
  10. package/data/keyingProjectionVerification/checkpointContext.js.map +1 -1
  11. package/data/keyingProjectionVerification/containerDestinationVerification.js +11 -1
  12. package/data/keyingProjectionVerification/containerDestinationVerification.js.map +1 -1
  13. package/data/keyingProjectionVerification/containerManifestVerification.js.map +1 -1
  14. package/data/keyingProjectionVerification/containerPathVerification.js.map +1 -1
  15. package/data/keyingProjectionVerification/containerProjectionVerification.d.ts +3 -2
  16. package/data/keyingProjectionVerification/containerProjectionVerification.js +10 -11
  17. package/data/keyingProjectionVerification/containerProjectionVerification.js.map +1 -1
  18. package/data/keyingProjectionVerification/documentManifestPolicies.js.map +1 -1
  19. package/data/keyingProjectionVerification/documentManifestVerification.js.map +1 -1
  20. package/data/keyingProjectionVerification/documentProjectionVerification.d.ts +2 -3
  21. package/data/keyingProjectionVerification/documentProjectionVerification.js +4 -0
  22. package/data/keyingProjectionVerification/documentProjectionVerification.js.map +1 -1
  23. package/data/keyingProjectionVerification/mergeProjectionPolicyEvidence.js +14 -12
  24. package/data/keyingProjectionVerification/mergeProjectionPolicyEvidence.js.map +1 -1
  25. package/data/keyingProjectionVerification/organizationFounderBinding.js.map +1 -1
  26. package/data/keyingProjectionVerification/projectionAuthorizationEvidence.js +33 -6
  27. package/data/keyingProjectionVerification/projectionAuthorizationEvidence.js.map +1 -1
  28. package/data/keyingProjectionVerification/projectionLifetimes.js +13 -0
  29. package/data/keyingProjectionVerification/projectionLifetimes.js.map +1 -0
  30. package/data/keyingProjectionVerification/projectionPolicyEvidence.js +19 -66
  31. package/data/keyingProjectionVerification/projectionPolicyEvidence.js.map +1 -1
  32. package/data/keyingProjectionVerification/types.d.ts +13 -2
  33. package/data/keyingProjectionVerification/types.js +15 -0
  34. package/data/keyingProjectionVerification/types.js.map +1 -1
  35. package/data/persistence/keyingCheckpointAdvancePersistence.js +4 -1
  36. package/data/persistence/keyingCheckpointAdvancePersistence.js.map +1 -1
  37. package/data/persistence/organizationFounderPersistence.js +2 -2
  38. package/data/persistence/organizationFounderPersistence.js.map +1 -1
  39. package/data/persistence/principalAuthorizationCheckpoints.js +29 -0
  40. package/data/persistence/principalAuthorizationCheckpoints.js.map +1 -0
  41. package/data/persistence/principalHistoryEvidencePersistence.d.ts +30 -0
  42. package/data/persistence/principalHistoryPrefixPersistence.d.ts +24 -0
  43. package/data/persistence/principalHistoryPrefixPersistence.js +6 -2
  44. package/data/persistence/principalHistoryPrefixPersistence.js.map +1 -1
  45. package/data/persistence/principalHistoryStagePersistence.d.ts +21 -0
  46. package/data/principals/principalHistoryRuntime.js +12 -0
  47. package/data/principals/principalHistoryRuntime.js.map +1 -0
  48. package/data/principals/principalHistoryStageProtection.js +2 -12
  49. package/data/principals/principalHistoryStageProtection.js.map +1 -1
  50. package/data/principals/principalPolicyEvidence.d.ts +2 -2
  51. package/data/principals/principalPolicyEvidence.js.map +1 -1
  52. package/data/sqlite/principalHistoryEvidenceSchema.d.ts +308 -0
  53. package/data/sqlite/principalHistoryStageSchema.d.ts +119 -0
  54. package/index.d.ts +2 -2
  55. package/index.js +1 -1
  56. package/index.js.map +1 -1
  57. package/internal/api-client/ApiCache.d.ts +54 -0
  58. package/internal/api-client/ApiClient.d.ts +255 -309
  59. package/internal/api-client/ApiClient.js +15 -6
  60. package/internal/api-client/ApiClient.js.map +1 -1
  61. package/internal/api-client/index.d.ts +1 -0
  62. package/internal/api-client/index.js.map +1 -1
  63. package/internal/api-client/principalHistoryDeadline.js +20 -0
  64. package/internal/api-client/principalHistoryDeadline.js.map +1 -0
  65. package/internal/api-client/principalHistoryRequest.js +59 -22
  66. package/internal/api-client/principalHistoryRequest.js.map +1 -1
  67. package/internal/api-client/principalHistoryRequestContext.js +18 -5
  68. package/internal/api-client/principalHistoryRequestContext.js.map +1 -1
  69. package/internal/api-client/principalPolicyRequests.d.ts +799 -0
  70. package/internal/api-client/principalPolicyRequests.js +9 -4
  71. package/internal/api-client/principalPolicyRequests.js.map +1 -1
  72. package/internal/api-client/projectionPolicyHistoryPages.d.ts +9 -0
  73. package/internal/api-client/projectionPolicyHistoryPages.js +88 -0
  74. package/internal/api-client/projectionPolicyHistoryPages.js.map +1 -0
  75. package/internal/api-client/writerProjectionRequests.js +26 -0
  76. package/internal/api-client/writerProjectionRequests.js.map +1 -0
  77. package/internal/crypto/keying/principalPolicyHistory.js +4 -0
  78. package/internal/crypto/keying/principalPolicyHistory.js.map +1 -1
  79. package/internal/crypto/keying/principalPolicyHistoryTypes.d.ts +2 -0
  80. package/internal/crypto/keying/principalPolicyHistoryTypes.js.map +1 -1
  81. package/internal/crypto/projectionHistorySlots.js +0 -4
  82. package/internal/crypto/projectionHistorySlots.js.map +1 -1
  83. package/internal/validators/operation/index.d.ts +1 -0
  84. package/internal/validators/operation/index.js +1 -0
  85. package/internal/validators/operation/index.js.map +1 -1
  86. package/internal/validators/operation/principals.d.ts +38 -16
  87. package/internal/validators/operation/principals.js +11 -5
  88. package/internal/validators/operation/principals.js.map +1 -1
  89. package/internal/validators/operation/projectionPolicyHistory.d.ts +512 -0
  90. package/internal/validators/operation/projectionPolicyHistory.js +37 -0
  91. package/internal/validators/operation/projectionPolicyHistory.js.map +1 -0
  92. package/internal/validators/operation/registry.d.ts +2 -0
  93. package/internal/validators/operation/registry.js +2 -0
  94. package/internal/validators/operation/registry.js.map +1 -1
  95. package/internal/validators/operation/writerProjections.d.ts +178 -1224
  96. package/internal/validators/operation/writerProjections.js +9 -2
  97. package/internal/validators/operation/writerProjections.js.map +1 -1
  98. package/internal/validators/response/container.d.ts +84 -612
  99. package/internal/validators/response/documentMutation.d.ts +84 -612
  100. package/internal/validators/response/index.d.ts +1 -0
  101. package/internal/validators/response/index.js +1 -0
  102. package/internal/validators/response/index.js.map +1 -1
  103. package/internal/validators/response/organizationBilling.d.ts +1 -0
  104. package/internal/validators/response/organizationBilling.js +1 -1
  105. package/internal/validators/response/organizationBilling.js.map +1 -1
  106. package/internal/validators/response/principalHistoryPreparation.js +28 -1
  107. package/internal/validators/response/principalHistoryPreparation.js.map +1 -1
  108. package/internal/validators/response/principalPolicySnapshotPage.d.ts +388 -0
  109. package/internal/validators/response/principalPolicySnapshotPage.js +24 -0
  110. package/internal/validators/response/principalPolicySnapshotPage.js.map +1 -0
  111. package/internal/validators/response/projectionPolicyEvidence.d.ts +85 -613
  112. package/internal/validators/response/projectionPolicyEvidence.js +10 -5
  113. package/internal/validators/response/projectionPolicyEvidence.js.map +1 -1
  114. package/package.json +4 -1
  115. package/sqlite/sqlite3-licenses.md +38 -0
  116. package/sqlite/sqlite3.wasm +0 -0
  117. package/sqlite/worker.js +4 -0
  118. package/stores/documents/documentStore/attachmentHydration.js +3 -0
  119. package/stores/documents/documentStore/attachmentHydration.js.map +1 -1
  120. package/stores/documents/documentStore/syncDetachedAttachments.js +3 -0
  121. package/stores/documents/documentStore/syncDetachedAttachments.js.map +1 -1
  122. package/workflows/blobs/decrypt.d.ts +1 -1
  123. package/workflows/blobs/decrypt.js +3 -1
  124. package/workflows/blobs/decrypt.js.map +1 -1
  125. package/workflows/blobs/detach.js +6 -1
  126. package/workflows/blobs/detach.js.map +1 -1
  127. package/workflows/blobs/hydrate.d.ts +3 -1
  128. package/workflows/blobs/hydrate.js +2 -0
  129. package/workflows/blobs/hydrate.js.map +1 -1
  130. package/workflows/blobs/retainedAttachmentVerification.js +2 -0
  131. package/workflows/blobs/retainedAttachmentVerification.js.map +1 -1
  132. package/workflows/container-contents/container-state/createAdoption.js +2 -0
  133. package/workflows/container-contents/container-state/createAdoption.js.map +1 -1
  134. package/workflows/container-contents/container-state/createWithMetadata.js +7 -39
  135. package/workflows/container-contents/container-state/createWithMetadata.js.map +1 -1
  136. package/workflows/container-contents/container-state/createWithMetadataPlan.js +68 -0
  137. package/workflows/container-contents/container-state/createWithMetadataPlan.js.map +1 -0
  138. package/workflows/container-contents/remoteContainerState.js +3 -1
  139. package/workflows/container-contents/remoteContainerState.js.map +1 -1
  140. package/workflows/container-contents/remoteHydration/verifiedDestination.js +3 -0
  141. package/workflows/container-contents/remoteHydration/verifiedDestination.js.map +1 -1
  142. package/workflows/container-contents/runtime.d.ts +3 -0
  143. package/workflows/container-contents/runtime.js +7 -6
  144. package/workflows/container-contents/runtime.js.map +1 -1
  145. package/workflows/documents/create.d.ts +2 -15
  146. package/workflows/documents/create.js +9 -64
  147. package/workflows/documents/create.js.map +1 -1
  148. package/workflows/documents/createProjection.d.ts +14 -0
  149. package/workflows/documents/createProjection.js +26 -0
  150. package/workflows/documents/createProjection.js.map +1 -0
  151. package/workflows/documents/createResponse.js +49 -0
  152. package/workflows/documents/createResponse.js.map +1 -0
  153. package/workflows/documents/linkSetBlobRewraps.js +2 -0
  154. package/workflows/documents/linkSetBlobRewraps.js.map +1 -1
  155. package/workflows/documents/runtime.d.ts +3 -0
  156. package/workflows/documents/runtime.js +3 -2
  157. package/workflows/documents/runtime.js.map +1 -1
  158. package/workflows/documents/syncFailureClassification.js +3 -1
  159. package/workflows/documents/syncFailureClassification.js.map +1 -1
  160. package/workflows/principals/index.d.ts +2 -0
  161. package/workflows/principals/index.js +1 -0
  162. package/workflows/principals/index.js.map +1 -1
  163. package/workflows/principals/policyVerification.js.map +1 -1
  164. package/workflows/principals/principalHistoryRecoveryAuthority.js +20 -0
  165. package/workflows/principals/principalHistoryRecoveryAuthority.js.map +1 -0
  166. package/workflows/principals/principalHistoryRecoveryStage.js +1 -1
  167. package/workflows/principals/principalHistoryRecoveryStage.js.map +1 -1
  168. package/workflows/principals/principalHistoryRecoveryTypes.d.ts +3 -3
  169. package/workflows/principals/principalHistoryRecoveryTypes.js.map +1 -1
  170. package/workflows/principals/principalHistoryRecoveryVerification.js +6 -1
  171. package/workflows/principals/principalHistoryRecoveryVerification.js.map +1 -1
  172. package/workflows/principals/principalRecoveryOutage.js +1 -1
  173. package/workflows/principals/principalRecoveryOutage.js.map +1 -1
  174. package/workflows/principals/publicPrincipalHistoryAuthority.js +60 -0
  175. package/workflows/principals/publicPrincipalHistoryAuthority.js.map +1 -0
  176. package/workflows/principals/publicPrincipalHistoryPage.js +87 -0
  177. package/workflows/principals/publicPrincipalHistoryPage.js.map +1 -0
  178. package/workflows/principals/publicPrincipalHistoryProgress.js +178 -0
  179. package/workflows/principals/publicPrincipalHistoryProgress.js.map +1 -0
  180. package/workflows/principals/publicPrincipalHistoryTypes.d.ts +39 -0
  181. package/workflows/principals/publicPrincipalHistoryTypes.js +2 -0
  182. package/workflows/principals/publicPrincipalHistoryTypes.js.map +1 -0
  183. package/workflows/principals/publicProjectionDirectory.js +40 -0
  184. package/workflows/principals/publicProjectionDirectory.js.map +1 -0
  185. package/workflows/principals/publicProjectionPrincipal.js +53 -0
  186. package/workflows/principals/publicProjectionPrincipal.js.map +1 -0
  187. package/workflows/principals/recoverPrincipalPolicyHistory.js +4 -1
  188. package/workflows/principals/recoverPrincipalPolicyHistory.js.map +1 -1
  189. package/workflows/principals/recoverProjectionPolicyHistory.d.ts +9 -0
  190. package/workflows/principals/recoverProjectionPolicyHistory.js +98 -0
  191. package/workflows/principals/recoverProjectionPolicyHistory.js.map +1 -0
  192. package/workflows/principals/recoverPublicPrincipalHistory.js +176 -0
  193. package/workflows/principals/recoverPublicPrincipalHistory.js.map +1 -0
  194. package/workflows/principals/recoverScopedPrincipalPolicyHistory.js +2 -5
  195. package/workflows/principals/recoverScopedPrincipalPolicyHistory.js.map +1 -1
  196. package/workflows/principals/runtimePolicyRecovery.js +2 -1
  197. package/workflows/principals/runtimePolicyRecovery.js.map +1 -1
  198. package/workflows/principals/runtimePolicyWarmer.js +2 -0
  199. package/workflows/principals/runtimePolicyWarmer.js.map +1 -1
  200. package/workflows/principals/runtimeProjectionPolicyRecovery.js +56 -0
  201. package/workflows/principals/runtimeProjectionPolicyRecovery.js.map +1 -0
  202. package/workflows/principals/selectPublicPrincipalHistory.js +90 -0
  203. package/workflows/principals/selectPublicPrincipalHistory.js.map +1 -0
  204. package/workflows/registration/provisioningBootstrapBuilders.d.ts +21 -153
@@ -83,177 +83,45 @@ export declare const getContainerWriterProjectionOperation: Omit<{
83
83
  readonly 200: z.ZodType<{
84
84
  policyEvidence: {
85
85
  organization: {
86
- currentGrants: {
87
- accessLevel: "admin" | "read" | "write";
88
- containerId: string;
89
- }[];
90
- currentProjection: {
91
- role: "member" | "admin";
92
- userId: string;
93
- }[];
94
- currentState: {
95
- createdAt: string;
96
- encapsulationPublicKey: string;
97
- externalAuthority: {
98
- keyEpoch: number;
99
- keyFingerprint: string;
100
- principalId: string;
101
- principalType: "group";
102
- stateHash: string;
103
- version: number;
104
- } | null;
105
- grantCount: number;
106
- grantRoot: string;
86
+ head: {
107
87
  keyEpoch: number;
108
88
  keyFingerprint: string;
109
- memberCount: number;
110
- memberEnvelopesRoot: string;
111
- membershipMode: "projection";
112
- membershipRoot: string;
113
- payloadCiphertextHash: string;
114
- prevStateHash: string | null;
115
89
  principalId: string;
116
90
  principalType: "group" | "organization";
117
- projectionRoot: string;
118
- signature: string;
119
- signedAt: string;
120
- signerUserId: string;
121
- signerUserKeyFingerprint: string;
122
91
  stateHash: string;
123
92
  version: number;
124
93
  };
125
- previousStates: {
126
- grants: {
127
- accessLevel: "admin" | "read" | "write";
128
- containerId: string;
129
- }[];
130
- projection: {
131
- role: "member" | "admin";
132
- userId: string;
133
- }[];
134
- state: {
135
- createdAt: string;
136
- encapsulationPublicKey: string;
137
- externalAuthority: {
138
- keyEpoch: number;
139
- keyFingerprint: string;
140
- principalId: string;
141
- principalType: "group";
142
- stateHash: string;
143
- version: number;
144
- } | null;
145
- grantCount: number;
146
- grantRoot: string;
147
- keyEpoch: number;
148
- keyFingerprint: string;
149
- memberCount: number;
150
- memberEnvelopesRoot: string;
151
- membershipMode: "projection";
152
- membershipRoot: string;
153
- payloadCiphertextHash: string;
154
- prevStateHash: string | null;
155
- principalId: string;
156
- principalType: "group" | "organization";
157
- projectionRoot: string;
158
- signature: string;
159
- signedAt: string;
160
- signerUserId: string;
161
- signerUserKeyFingerprint: string;
162
- stateHash: string;
163
- version: number;
164
- };
165
- }[];
94
+ grant: string;
166
95
  } | null;
167
96
  organizationPayloads: {
168
- cipherSuite: "aes-256-gcm";
169
- ciphertext: string;
170
- ciphertextHash: string;
171
- createdAt: string;
172
- principalId: string;
173
- principalType: "group" | "organization";
174
- stateHash: string;
97
+ reference: {
98
+ keyEpoch: number;
99
+ keyFingerprint: string;
100
+ principalId: string;
101
+ principalType: "group" | "organization";
102
+ stateHash: string;
103
+ version: number;
104
+ };
105
+ payload: {
106
+ cipherSuite: "aes-256-gcm";
107
+ ciphertext: string;
108
+ ciphertextHash: string;
109
+ createdAt: string;
110
+ principalId: string;
111
+ principalType: "group" | "organization";
112
+ stateHash: string;
113
+ };
175
114
  }[];
176
115
  groups: {
177
- currentGrants: {
178
- accessLevel: "admin" | "read" | "write";
179
- containerId: string;
180
- }[];
181
- currentProjection: {
182
- role: "member" | "admin";
183
- userId: string;
184
- }[];
185
- currentState: {
186
- createdAt: string;
187
- encapsulationPublicKey: string;
188
- externalAuthority: {
189
- keyEpoch: number;
190
- keyFingerprint: string;
191
- principalId: string;
192
- principalType: "group";
193
- stateHash: string;
194
- version: number;
195
- } | null;
196
- grantCount: number;
197
- grantRoot: string;
116
+ head: {
198
117
  keyEpoch: number;
199
118
  keyFingerprint: string;
200
- memberCount: number;
201
- memberEnvelopesRoot: string;
202
- membershipMode: "projection";
203
- membershipRoot: string;
204
- payloadCiphertextHash: string;
205
- prevStateHash: string | null;
206
119
  principalId: string;
207
120
  principalType: "group" | "organization";
208
- projectionRoot: string;
209
- signature: string;
210
- signedAt: string;
211
- signerUserId: string;
212
- signerUserKeyFingerprint: string;
213
121
  stateHash: string;
214
122
  version: number;
215
123
  };
216
- previousStates: {
217
- grants: {
218
- accessLevel: "admin" | "read" | "write";
219
- containerId: string;
220
- }[];
221
- projection: {
222
- role: "member" | "admin";
223
- userId: string;
224
- }[];
225
- state: {
226
- createdAt: string;
227
- encapsulationPublicKey: string;
228
- externalAuthority: {
229
- keyEpoch: number;
230
- keyFingerprint: string;
231
- principalId: string;
232
- principalType: "group";
233
- stateHash: string;
234
- version: number;
235
- } | null;
236
- grantCount: number;
237
- grantRoot: string;
238
- keyEpoch: number;
239
- keyFingerprint: string;
240
- memberCount: number;
241
- memberEnvelopesRoot: string;
242
- membershipMode: "projection";
243
- membershipRoot: string;
244
- payloadCiphertextHash: string;
245
- prevStateHash: string | null;
246
- principalId: string;
247
- principalType: "group" | "organization";
248
- projectionRoot: string;
249
- signature: string;
250
- signedAt: string;
251
- signerUserId: string;
252
- signerUserKeyFingerprint: string;
253
- stateHash: string;
254
- version: number;
255
- };
256
- }[];
124
+ grant: string;
257
125
  }[];
258
126
  };
259
127
  containerId: string;
@@ -306,177 +174,45 @@ export declare const getContainerWriterProjectionOperation: Omit<{
306
174
  }, {
307
175
  policyEvidence: {
308
176
  organization: {
309
- currentGrants: {
310
- accessLevel: "admin" | "read" | "write";
311
- containerId: string;
312
- }[];
313
- currentProjection: {
314
- role: "member" | "admin";
315
- userId: string;
316
- }[];
317
- currentState: {
318
- createdAt: string;
319
- encapsulationPublicKey: string;
320
- externalAuthority: {
321
- keyEpoch: number;
322
- keyFingerprint: string;
323
- principalId: string;
324
- principalType: "group";
325
- stateHash: string;
326
- version: number;
327
- } | null;
328
- grantCount: number;
329
- grantRoot: string;
177
+ head: {
330
178
  keyEpoch: number;
331
179
  keyFingerprint: string;
332
- memberCount: number;
333
- memberEnvelopesRoot: string;
334
- membershipMode: "projection";
335
- membershipRoot: string;
336
- payloadCiphertextHash: string;
337
- prevStateHash: string | null;
338
180
  principalId: string;
339
181
  principalType: "group" | "organization";
340
- projectionRoot: string;
341
- signature: string;
342
- signedAt: string;
343
- signerUserId: string;
344
- signerUserKeyFingerprint: string;
345
182
  stateHash: string;
346
183
  version: number;
347
184
  };
348
- previousStates: {
349
- grants: {
350
- accessLevel: "admin" | "read" | "write";
351
- containerId: string;
352
- }[];
353
- projection: {
354
- role: "member" | "admin";
355
- userId: string;
356
- }[];
357
- state: {
358
- createdAt: string;
359
- encapsulationPublicKey: string;
360
- externalAuthority: {
361
- keyEpoch: number;
362
- keyFingerprint: string;
363
- principalId: string;
364
- principalType: "group";
365
- stateHash: string;
366
- version: number;
367
- } | null;
368
- grantCount: number;
369
- grantRoot: string;
370
- keyEpoch: number;
371
- keyFingerprint: string;
372
- memberCount: number;
373
- memberEnvelopesRoot: string;
374
- membershipMode: "projection";
375
- membershipRoot: string;
376
- payloadCiphertextHash: string;
377
- prevStateHash: string | null;
378
- principalId: string;
379
- principalType: "group" | "organization";
380
- projectionRoot: string;
381
- signature: string;
382
- signedAt: string;
383
- signerUserId: string;
384
- signerUserKeyFingerprint: string;
385
- stateHash: string;
386
- version: number;
387
- };
388
- }[];
185
+ grant: string;
389
186
  } | null;
390
187
  organizationPayloads: {
391
- cipherSuite: "aes-256-gcm";
392
- ciphertext: string;
393
- ciphertextHash: string;
394
- createdAt: string;
395
- principalId: string;
396
- principalType: "group" | "organization";
397
- stateHash: string;
188
+ reference: {
189
+ keyEpoch: number;
190
+ keyFingerprint: string;
191
+ principalId: string;
192
+ principalType: "group" | "organization";
193
+ stateHash: string;
194
+ version: number;
195
+ };
196
+ payload: {
197
+ cipherSuite: "aes-256-gcm";
198
+ ciphertext: string;
199
+ ciphertextHash: string;
200
+ createdAt: string;
201
+ principalId: string;
202
+ principalType: "group" | "organization";
203
+ stateHash: string;
204
+ };
398
205
  }[];
399
206
  groups: {
400
- currentGrants: {
401
- accessLevel: "admin" | "read" | "write";
402
- containerId: string;
403
- }[];
404
- currentProjection: {
405
- role: "member" | "admin";
406
- userId: string;
407
- }[];
408
- currentState: {
409
- createdAt: string;
410
- encapsulationPublicKey: string;
411
- externalAuthority: {
412
- keyEpoch: number;
413
- keyFingerprint: string;
414
- principalId: string;
415
- principalType: "group";
416
- stateHash: string;
417
- version: number;
418
- } | null;
419
- grantCount: number;
420
- grantRoot: string;
207
+ head: {
421
208
  keyEpoch: number;
422
209
  keyFingerprint: string;
423
- memberCount: number;
424
- memberEnvelopesRoot: string;
425
- membershipMode: "projection";
426
- membershipRoot: string;
427
- payloadCiphertextHash: string;
428
- prevStateHash: string | null;
429
210
  principalId: string;
430
211
  principalType: "group" | "organization";
431
- projectionRoot: string;
432
- signature: string;
433
- signedAt: string;
434
- signerUserId: string;
435
- signerUserKeyFingerprint: string;
436
212
  stateHash: string;
437
213
  version: number;
438
214
  };
439
- previousStates: {
440
- grants: {
441
- accessLevel: "admin" | "read" | "write";
442
- containerId: string;
443
- }[];
444
- projection: {
445
- role: "member" | "admin";
446
- userId: string;
447
- }[];
448
- state: {
449
- createdAt: string;
450
- encapsulationPublicKey: string;
451
- externalAuthority: {
452
- keyEpoch: number;
453
- keyFingerprint: string;
454
- principalId: string;
455
- principalType: "group";
456
- stateHash: string;
457
- version: number;
458
- } | null;
459
- grantCount: number;
460
- grantRoot: string;
461
- keyEpoch: number;
462
- keyFingerprint: string;
463
- memberCount: number;
464
- memberEnvelopesRoot: string;
465
- membershipMode: "projection";
466
- membershipRoot: string;
467
- payloadCiphertextHash: string;
468
- prevStateHash: string | null;
469
- principalId: string;
470
- principalType: "group" | "organization";
471
- projectionRoot: string;
472
- signature: string;
473
- signedAt: string;
474
- signerUserId: string;
475
- signerUserKeyFingerprint: string;
476
- stateHash: string;
477
- version: number;
478
- };
479
- }[];
215
+ grant: string;
480
216
  }[];
481
217
  };
482
218
  containerId: string;
@@ -529,177 +265,45 @@ export declare const getContainerWriterProjectionOperation: Omit<{
529
265
  }, z.core.$ZodTypeInternals<{
530
266
  policyEvidence: {
531
267
  organization: {
532
- currentGrants: {
533
- accessLevel: "admin" | "read" | "write";
534
- containerId: string;
535
- }[];
536
- currentProjection: {
537
- role: "member" | "admin";
538
- userId: string;
539
- }[];
540
- currentState: {
541
- createdAt: string;
542
- encapsulationPublicKey: string;
543
- externalAuthority: {
544
- keyEpoch: number;
545
- keyFingerprint: string;
546
- principalId: string;
547
- principalType: "group";
548
- stateHash: string;
549
- version: number;
550
- } | null;
551
- grantCount: number;
552
- grantRoot: string;
268
+ head: {
553
269
  keyEpoch: number;
554
270
  keyFingerprint: string;
555
- memberCount: number;
556
- memberEnvelopesRoot: string;
557
- membershipMode: "projection";
558
- membershipRoot: string;
559
- payloadCiphertextHash: string;
560
- prevStateHash: string | null;
561
271
  principalId: string;
562
272
  principalType: "group" | "organization";
563
- projectionRoot: string;
564
- signature: string;
565
- signedAt: string;
566
- signerUserId: string;
567
- signerUserKeyFingerprint: string;
568
273
  stateHash: string;
569
274
  version: number;
570
275
  };
571
- previousStates: {
572
- grants: {
573
- accessLevel: "admin" | "read" | "write";
574
- containerId: string;
575
- }[];
576
- projection: {
577
- role: "member" | "admin";
578
- userId: string;
579
- }[];
580
- state: {
581
- createdAt: string;
582
- encapsulationPublicKey: string;
583
- externalAuthority: {
584
- keyEpoch: number;
585
- keyFingerprint: string;
586
- principalId: string;
587
- principalType: "group";
588
- stateHash: string;
589
- version: number;
590
- } | null;
591
- grantCount: number;
592
- grantRoot: string;
593
- keyEpoch: number;
594
- keyFingerprint: string;
595
- memberCount: number;
596
- memberEnvelopesRoot: string;
597
- membershipMode: "projection";
598
- membershipRoot: string;
599
- payloadCiphertextHash: string;
600
- prevStateHash: string | null;
601
- principalId: string;
602
- principalType: "group" | "organization";
603
- projectionRoot: string;
604
- signature: string;
605
- signedAt: string;
606
- signerUserId: string;
607
- signerUserKeyFingerprint: string;
608
- stateHash: string;
609
- version: number;
610
- };
611
- }[];
276
+ grant: string;
612
277
  } | null;
613
278
  organizationPayloads: {
614
- cipherSuite: "aes-256-gcm";
615
- ciphertext: string;
616
- ciphertextHash: string;
617
- createdAt: string;
618
- principalId: string;
619
- principalType: "group" | "organization";
620
- stateHash: string;
279
+ reference: {
280
+ keyEpoch: number;
281
+ keyFingerprint: string;
282
+ principalId: string;
283
+ principalType: "group" | "organization";
284
+ stateHash: string;
285
+ version: number;
286
+ };
287
+ payload: {
288
+ cipherSuite: "aes-256-gcm";
289
+ ciphertext: string;
290
+ ciphertextHash: string;
291
+ createdAt: string;
292
+ principalId: string;
293
+ principalType: "group" | "organization";
294
+ stateHash: string;
295
+ };
621
296
  }[];
622
297
  groups: {
623
- currentGrants: {
624
- accessLevel: "admin" | "read" | "write";
625
- containerId: string;
626
- }[];
627
- currentProjection: {
628
- role: "member" | "admin";
629
- userId: string;
630
- }[];
631
- currentState: {
632
- createdAt: string;
633
- encapsulationPublicKey: string;
634
- externalAuthority: {
635
- keyEpoch: number;
636
- keyFingerprint: string;
637
- principalId: string;
638
- principalType: "group";
639
- stateHash: string;
640
- version: number;
641
- } | null;
642
- grantCount: number;
643
- grantRoot: string;
298
+ head: {
644
299
  keyEpoch: number;
645
300
  keyFingerprint: string;
646
- memberCount: number;
647
- memberEnvelopesRoot: string;
648
- membershipMode: "projection";
649
- membershipRoot: string;
650
- payloadCiphertextHash: string;
651
- prevStateHash: string | null;
652
301
  principalId: string;
653
302
  principalType: "group" | "organization";
654
- projectionRoot: string;
655
- signature: string;
656
- signedAt: string;
657
- signerUserId: string;
658
- signerUserKeyFingerprint: string;
659
303
  stateHash: string;
660
304
  version: number;
661
305
  };
662
- previousStates: {
663
- grants: {
664
- accessLevel: "admin" | "read" | "write";
665
- containerId: string;
666
- }[];
667
- projection: {
668
- role: "member" | "admin";
669
- userId: string;
670
- }[];
671
- state: {
672
- createdAt: string;
673
- encapsulationPublicKey: string;
674
- externalAuthority: {
675
- keyEpoch: number;
676
- keyFingerprint: string;
677
- principalId: string;
678
- principalType: "group";
679
- stateHash: string;
680
- version: number;
681
- } | null;
682
- grantCount: number;
683
- grantRoot: string;
684
- keyEpoch: number;
685
- keyFingerprint: string;
686
- memberCount: number;
687
- memberEnvelopesRoot: string;
688
- membershipMode: "projection";
689
- membershipRoot: string;
690
- payloadCiphertextHash: string;
691
- prevStateHash: string | null;
692
- principalId: string;
693
- principalType: "group" | "organization";
694
- projectionRoot: string;
695
- signature: string;
696
- signedAt: string;
697
- signerUserId: string;
698
- signerUserKeyFingerprint: string;
699
- stateHash: string;
700
- version: number;
701
- };
702
- }[];
306
+ grant: string;
703
307
  }[];
704
308
  };
705
309
  containerId: string;
@@ -752,177 +356,45 @@ export declare const getContainerWriterProjectionOperation: Omit<{
752
356
  }, {
753
357
  policyEvidence: {
754
358
  organization: {
755
- currentGrants: {
756
- accessLevel: "admin" | "read" | "write";
757
- containerId: string;
758
- }[];
759
- currentProjection: {
760
- role: "member" | "admin";
761
- userId: string;
762
- }[];
763
- currentState: {
764
- createdAt: string;
765
- encapsulationPublicKey: string;
766
- externalAuthority: {
767
- keyEpoch: number;
768
- keyFingerprint: string;
769
- principalId: string;
770
- principalType: "group";
771
- stateHash: string;
772
- version: number;
773
- } | null;
774
- grantCount: number;
775
- grantRoot: string;
359
+ head: {
776
360
  keyEpoch: number;
777
361
  keyFingerprint: string;
778
- memberCount: number;
779
- memberEnvelopesRoot: string;
780
- membershipMode: "projection";
781
- membershipRoot: string;
782
- payloadCiphertextHash: string;
783
- prevStateHash: string | null;
784
362
  principalId: string;
785
363
  principalType: "group" | "organization";
786
- projectionRoot: string;
787
- signature: string;
788
- signedAt: string;
789
- signerUserId: string;
790
- signerUserKeyFingerprint: string;
791
364
  stateHash: string;
792
365
  version: number;
793
366
  };
794
- previousStates: {
795
- grants: {
796
- accessLevel: "admin" | "read" | "write";
797
- containerId: string;
798
- }[];
799
- projection: {
800
- role: "member" | "admin";
801
- userId: string;
802
- }[];
803
- state: {
804
- createdAt: string;
805
- encapsulationPublicKey: string;
806
- externalAuthority: {
807
- keyEpoch: number;
808
- keyFingerprint: string;
809
- principalId: string;
810
- principalType: "group";
811
- stateHash: string;
812
- version: number;
813
- } | null;
814
- grantCount: number;
815
- grantRoot: string;
816
- keyEpoch: number;
817
- keyFingerprint: string;
818
- memberCount: number;
819
- memberEnvelopesRoot: string;
820
- membershipMode: "projection";
821
- membershipRoot: string;
822
- payloadCiphertextHash: string;
823
- prevStateHash: string | null;
824
- principalId: string;
825
- principalType: "group" | "organization";
826
- projectionRoot: string;
827
- signature: string;
828
- signedAt: string;
829
- signerUserId: string;
830
- signerUserKeyFingerprint: string;
831
- stateHash: string;
832
- version: number;
833
- };
834
- }[];
367
+ grant: string;
835
368
  } | null;
836
369
  organizationPayloads: {
837
- cipherSuite: "aes-256-gcm";
838
- ciphertext: string;
839
- ciphertextHash: string;
840
- createdAt: string;
841
- principalId: string;
842
- principalType: "group" | "organization";
843
- stateHash: string;
370
+ reference: {
371
+ keyEpoch: number;
372
+ keyFingerprint: string;
373
+ principalId: string;
374
+ principalType: "group" | "organization";
375
+ stateHash: string;
376
+ version: number;
377
+ };
378
+ payload: {
379
+ cipherSuite: "aes-256-gcm";
380
+ ciphertext: string;
381
+ ciphertextHash: string;
382
+ createdAt: string;
383
+ principalId: string;
384
+ principalType: "group" | "organization";
385
+ stateHash: string;
386
+ };
844
387
  }[];
845
388
  groups: {
846
- currentGrants: {
847
- accessLevel: "admin" | "read" | "write";
848
- containerId: string;
849
- }[];
850
- currentProjection: {
851
- role: "member" | "admin";
852
- userId: string;
853
- }[];
854
- currentState: {
855
- createdAt: string;
856
- encapsulationPublicKey: string;
857
- externalAuthority: {
858
- keyEpoch: number;
859
- keyFingerprint: string;
860
- principalId: string;
861
- principalType: "group";
862
- stateHash: string;
863
- version: number;
864
- } | null;
865
- grantCount: number;
866
- grantRoot: string;
389
+ head: {
867
390
  keyEpoch: number;
868
391
  keyFingerprint: string;
869
- memberCount: number;
870
- memberEnvelopesRoot: string;
871
- membershipMode: "projection";
872
- membershipRoot: string;
873
- payloadCiphertextHash: string;
874
- prevStateHash: string | null;
875
392
  principalId: string;
876
393
  principalType: "group" | "organization";
877
- projectionRoot: string;
878
- signature: string;
879
- signedAt: string;
880
- signerUserId: string;
881
- signerUserKeyFingerprint: string;
882
394
  stateHash: string;
883
395
  version: number;
884
396
  };
885
- previousStates: {
886
- grants: {
887
- accessLevel: "admin" | "read" | "write";
888
- containerId: string;
889
- }[];
890
- projection: {
891
- role: "member" | "admin";
892
- userId: string;
893
- }[];
894
- state: {
895
- createdAt: string;
896
- encapsulationPublicKey: string;
897
- externalAuthority: {
898
- keyEpoch: number;
899
- keyFingerprint: string;
900
- principalId: string;
901
- principalType: "group";
902
- stateHash: string;
903
- version: number;
904
- } | null;
905
- grantCount: number;
906
- grantRoot: string;
907
- keyEpoch: number;
908
- keyFingerprint: string;
909
- memberCount: number;
910
- memberEnvelopesRoot: string;
911
- membershipMode: "projection";
912
- membershipRoot: string;
913
- payloadCiphertextHash: string;
914
- prevStateHash: string | null;
915
- principalId: string;
916
- principalType: "group" | "organization";
917
- projectionRoot: string;
918
- signature: string;
919
- signedAt: string;
920
- signerUserId: string;
921
- signerUserKeyFingerprint: string;
922
- stateHash: string;
923
- version: number;
924
- };
925
- }[];
397
+ grant: string;
926
398
  }[];
927
399
  };
928
400
  containerId: string;
@@ -973,6 +445,11 @@ export declare const getContainerWriterProjectionOperation: Omit<{
973
445
  digest: string;
974
446
  }[] | undefined;
975
447
  }>>;
448
+ readonly 202: z.ZodObject<{
449
+ code: z.ZodLiteral<"principal_history_preparation_pending">;
450
+ committed: z.ZodLiteral<false>;
451
+ progressToken: z.ZodCustom<string, string>;
452
+ }, z.core.$strict>;
976
453
  };
977
454
  readonly runtimeRefinements: readonly [{
978
455
  readonly description: "containerKeks must contain exactly one entry for every manifest in path";
@@ -1114,177 +591,45 @@ export declare const getDocumentWriterProjectionOperation: Omit<{
1114
591
  readonly 200: z.ZodType<{
1115
592
  policyEvidence: {
1116
593
  organization: {
1117
- currentGrants: {
1118
- accessLevel: "admin" | "read" | "write";
1119
- containerId: string;
1120
- }[];
1121
- currentProjection: {
1122
- role: "member" | "admin";
1123
- userId: string;
1124
- }[];
1125
- currentState: {
1126
- createdAt: string;
1127
- encapsulationPublicKey: string;
1128
- externalAuthority: {
1129
- keyEpoch: number;
1130
- keyFingerprint: string;
1131
- principalId: string;
1132
- principalType: "group";
1133
- stateHash: string;
1134
- version: number;
1135
- } | null;
1136
- grantCount: number;
1137
- grantRoot: string;
594
+ head: {
1138
595
  keyEpoch: number;
1139
596
  keyFingerprint: string;
1140
- memberCount: number;
1141
- memberEnvelopesRoot: string;
1142
- membershipMode: "projection";
1143
- membershipRoot: string;
1144
- payloadCiphertextHash: string;
1145
- prevStateHash: string | null;
1146
597
  principalId: string;
1147
598
  principalType: "group" | "organization";
1148
- projectionRoot: string;
1149
- signature: string;
1150
- signedAt: string;
1151
- signerUserId: string;
1152
- signerUserKeyFingerprint: string;
1153
599
  stateHash: string;
1154
600
  version: number;
1155
601
  };
1156
- previousStates: {
1157
- grants: {
1158
- accessLevel: "admin" | "read" | "write";
1159
- containerId: string;
1160
- }[];
1161
- projection: {
1162
- role: "member" | "admin";
1163
- userId: string;
1164
- }[];
1165
- state: {
1166
- createdAt: string;
1167
- encapsulationPublicKey: string;
1168
- externalAuthority: {
1169
- keyEpoch: number;
1170
- keyFingerprint: string;
1171
- principalId: string;
1172
- principalType: "group";
1173
- stateHash: string;
1174
- version: number;
1175
- } | null;
1176
- grantCount: number;
1177
- grantRoot: string;
1178
- keyEpoch: number;
1179
- keyFingerprint: string;
1180
- memberCount: number;
1181
- memberEnvelopesRoot: string;
1182
- membershipMode: "projection";
1183
- membershipRoot: string;
1184
- payloadCiphertextHash: string;
1185
- prevStateHash: string | null;
1186
- principalId: string;
1187
- principalType: "group" | "organization";
1188
- projectionRoot: string;
1189
- signature: string;
1190
- signedAt: string;
1191
- signerUserId: string;
1192
- signerUserKeyFingerprint: string;
1193
- stateHash: string;
1194
- version: number;
1195
- };
1196
- }[];
602
+ grant: string;
1197
603
  } | null;
1198
604
  organizationPayloads: {
1199
- cipherSuite: "aes-256-gcm";
1200
- ciphertext: string;
1201
- ciphertextHash: string;
1202
- createdAt: string;
1203
- principalId: string;
1204
- principalType: "group" | "organization";
1205
- stateHash: string;
605
+ reference: {
606
+ keyEpoch: number;
607
+ keyFingerprint: string;
608
+ principalId: string;
609
+ principalType: "group" | "organization";
610
+ stateHash: string;
611
+ version: number;
612
+ };
613
+ payload: {
614
+ cipherSuite: "aes-256-gcm";
615
+ ciphertext: string;
616
+ ciphertextHash: string;
617
+ createdAt: string;
618
+ principalId: string;
619
+ principalType: "group" | "organization";
620
+ stateHash: string;
621
+ };
1206
622
  }[];
1207
623
  groups: {
1208
- currentGrants: {
1209
- accessLevel: "admin" | "read" | "write";
1210
- containerId: string;
1211
- }[];
1212
- currentProjection: {
1213
- role: "member" | "admin";
1214
- userId: string;
1215
- }[];
1216
- currentState: {
1217
- createdAt: string;
1218
- encapsulationPublicKey: string;
1219
- externalAuthority: {
1220
- keyEpoch: number;
1221
- keyFingerprint: string;
1222
- principalId: string;
1223
- principalType: "group";
1224
- stateHash: string;
1225
- version: number;
1226
- } | null;
1227
- grantCount: number;
1228
- grantRoot: string;
624
+ head: {
1229
625
  keyEpoch: number;
1230
626
  keyFingerprint: string;
1231
- memberCount: number;
1232
- memberEnvelopesRoot: string;
1233
- membershipMode: "projection";
1234
- membershipRoot: string;
1235
- payloadCiphertextHash: string;
1236
- prevStateHash: string | null;
1237
627
  principalId: string;
1238
628
  principalType: "group" | "organization";
1239
- projectionRoot: string;
1240
- signature: string;
1241
- signedAt: string;
1242
- signerUserId: string;
1243
- signerUserKeyFingerprint: string;
1244
629
  stateHash: string;
1245
630
  version: number;
1246
631
  };
1247
- previousStates: {
1248
- grants: {
1249
- accessLevel: "admin" | "read" | "write";
1250
- containerId: string;
1251
- }[];
1252
- projection: {
1253
- role: "member" | "admin";
1254
- userId: string;
1255
- }[];
1256
- state: {
1257
- createdAt: string;
1258
- encapsulationPublicKey: string;
1259
- externalAuthority: {
1260
- keyEpoch: number;
1261
- keyFingerprint: string;
1262
- principalId: string;
1263
- principalType: "group";
1264
- stateHash: string;
1265
- version: number;
1266
- } | null;
1267
- grantCount: number;
1268
- grantRoot: string;
1269
- keyEpoch: number;
1270
- keyFingerprint: string;
1271
- memberCount: number;
1272
- memberEnvelopesRoot: string;
1273
- membershipMode: "projection";
1274
- membershipRoot: string;
1275
- payloadCiphertextHash: string;
1276
- prevStateHash: string | null;
1277
- principalId: string;
1278
- principalType: "group" | "organization";
1279
- projectionRoot: string;
1280
- signature: string;
1281
- signedAt: string;
1282
- signerUserId: string;
1283
- signerUserKeyFingerprint: string;
1284
- stateHash: string;
1285
- version: number;
1286
- };
1287
- }[];
632
+ grant: string;
1288
633
  }[];
1289
634
  };
1290
635
  authorizingContainerPaths: {
@@ -1403,177 +748,45 @@ export declare const getDocumentWriterProjectionOperation: Omit<{
1403
748
  }, {
1404
749
  policyEvidence: {
1405
750
  organization: {
1406
- currentGrants: {
1407
- accessLevel: "admin" | "read" | "write";
1408
- containerId: string;
1409
- }[];
1410
- currentProjection: {
1411
- role: "member" | "admin";
1412
- userId: string;
1413
- }[];
1414
- currentState: {
1415
- createdAt: string;
1416
- encapsulationPublicKey: string;
1417
- externalAuthority: {
1418
- keyEpoch: number;
1419
- keyFingerprint: string;
1420
- principalId: string;
1421
- principalType: "group";
1422
- stateHash: string;
1423
- version: number;
1424
- } | null;
1425
- grantCount: number;
1426
- grantRoot: string;
751
+ head: {
1427
752
  keyEpoch: number;
1428
753
  keyFingerprint: string;
1429
- memberCount: number;
1430
- memberEnvelopesRoot: string;
1431
- membershipMode: "projection";
1432
- membershipRoot: string;
1433
- payloadCiphertextHash: string;
1434
- prevStateHash: string | null;
1435
754
  principalId: string;
1436
755
  principalType: "group" | "organization";
1437
- projectionRoot: string;
1438
- signature: string;
1439
- signedAt: string;
1440
- signerUserId: string;
1441
- signerUserKeyFingerprint: string;
1442
756
  stateHash: string;
1443
757
  version: number;
1444
758
  };
1445
- previousStates: {
1446
- grants: {
1447
- accessLevel: "admin" | "read" | "write";
1448
- containerId: string;
1449
- }[];
1450
- projection: {
1451
- role: "member" | "admin";
1452
- userId: string;
1453
- }[];
1454
- state: {
1455
- createdAt: string;
1456
- encapsulationPublicKey: string;
1457
- externalAuthority: {
1458
- keyEpoch: number;
1459
- keyFingerprint: string;
1460
- principalId: string;
1461
- principalType: "group";
1462
- stateHash: string;
1463
- version: number;
1464
- } | null;
1465
- grantCount: number;
1466
- grantRoot: string;
1467
- keyEpoch: number;
1468
- keyFingerprint: string;
1469
- memberCount: number;
1470
- memberEnvelopesRoot: string;
1471
- membershipMode: "projection";
1472
- membershipRoot: string;
1473
- payloadCiphertextHash: string;
1474
- prevStateHash: string | null;
1475
- principalId: string;
1476
- principalType: "group" | "organization";
1477
- projectionRoot: string;
1478
- signature: string;
1479
- signedAt: string;
1480
- signerUserId: string;
1481
- signerUserKeyFingerprint: string;
1482
- stateHash: string;
1483
- version: number;
1484
- };
1485
- }[];
759
+ grant: string;
1486
760
  } | null;
1487
761
  organizationPayloads: {
1488
- cipherSuite: "aes-256-gcm";
1489
- ciphertext: string;
1490
- ciphertextHash: string;
1491
- createdAt: string;
1492
- principalId: string;
1493
- principalType: "group" | "organization";
1494
- stateHash: string;
762
+ reference: {
763
+ keyEpoch: number;
764
+ keyFingerprint: string;
765
+ principalId: string;
766
+ principalType: "group" | "organization";
767
+ stateHash: string;
768
+ version: number;
769
+ };
770
+ payload: {
771
+ cipherSuite: "aes-256-gcm";
772
+ ciphertext: string;
773
+ ciphertextHash: string;
774
+ createdAt: string;
775
+ principalId: string;
776
+ principalType: "group" | "organization";
777
+ stateHash: string;
778
+ };
1495
779
  }[];
1496
780
  groups: {
1497
- currentGrants: {
1498
- accessLevel: "admin" | "read" | "write";
1499
- containerId: string;
1500
- }[];
1501
- currentProjection: {
1502
- role: "member" | "admin";
1503
- userId: string;
1504
- }[];
1505
- currentState: {
1506
- createdAt: string;
1507
- encapsulationPublicKey: string;
1508
- externalAuthority: {
1509
- keyEpoch: number;
1510
- keyFingerprint: string;
1511
- principalId: string;
1512
- principalType: "group";
1513
- stateHash: string;
1514
- version: number;
1515
- } | null;
1516
- grantCount: number;
1517
- grantRoot: string;
781
+ head: {
1518
782
  keyEpoch: number;
1519
783
  keyFingerprint: string;
1520
- memberCount: number;
1521
- memberEnvelopesRoot: string;
1522
- membershipMode: "projection";
1523
- membershipRoot: string;
1524
- payloadCiphertextHash: string;
1525
- prevStateHash: string | null;
1526
784
  principalId: string;
1527
785
  principalType: "group" | "organization";
1528
- projectionRoot: string;
1529
- signature: string;
1530
- signedAt: string;
1531
- signerUserId: string;
1532
- signerUserKeyFingerprint: string;
1533
786
  stateHash: string;
1534
787
  version: number;
1535
788
  };
1536
- previousStates: {
1537
- grants: {
1538
- accessLevel: "admin" | "read" | "write";
1539
- containerId: string;
1540
- }[];
1541
- projection: {
1542
- role: "member" | "admin";
1543
- userId: string;
1544
- }[];
1545
- state: {
1546
- createdAt: string;
1547
- encapsulationPublicKey: string;
1548
- externalAuthority: {
1549
- keyEpoch: number;
1550
- keyFingerprint: string;
1551
- principalId: string;
1552
- principalType: "group";
1553
- stateHash: string;
1554
- version: number;
1555
- } | null;
1556
- grantCount: number;
1557
- grantRoot: string;
1558
- keyEpoch: number;
1559
- keyFingerprint: string;
1560
- memberCount: number;
1561
- memberEnvelopesRoot: string;
1562
- membershipMode: "projection";
1563
- membershipRoot: string;
1564
- payloadCiphertextHash: string;
1565
- prevStateHash: string | null;
1566
- principalId: string;
1567
- principalType: "group" | "organization";
1568
- projectionRoot: string;
1569
- signature: string;
1570
- signedAt: string;
1571
- signerUserId: string;
1572
- signerUserKeyFingerprint: string;
1573
- stateHash: string;
1574
- version: number;
1575
- };
1576
- }[];
789
+ grant: string;
1577
790
  }[];
1578
791
  };
1579
792
  authorizingContainerPaths: {
@@ -1692,177 +905,45 @@ export declare const getDocumentWriterProjectionOperation: Omit<{
1692
905
  }, z.core.$ZodTypeInternals<{
1693
906
  policyEvidence: {
1694
907
  organization: {
1695
- currentGrants: {
1696
- accessLevel: "admin" | "read" | "write";
1697
- containerId: string;
1698
- }[];
1699
- currentProjection: {
1700
- role: "member" | "admin";
1701
- userId: string;
1702
- }[];
1703
- currentState: {
1704
- createdAt: string;
1705
- encapsulationPublicKey: string;
1706
- externalAuthority: {
1707
- keyEpoch: number;
1708
- keyFingerprint: string;
1709
- principalId: string;
1710
- principalType: "group";
1711
- stateHash: string;
1712
- version: number;
1713
- } | null;
1714
- grantCount: number;
1715
- grantRoot: string;
908
+ head: {
1716
909
  keyEpoch: number;
1717
910
  keyFingerprint: string;
1718
- memberCount: number;
1719
- memberEnvelopesRoot: string;
1720
- membershipMode: "projection";
1721
- membershipRoot: string;
1722
- payloadCiphertextHash: string;
1723
- prevStateHash: string | null;
1724
911
  principalId: string;
1725
912
  principalType: "group" | "organization";
1726
- projectionRoot: string;
1727
- signature: string;
1728
- signedAt: string;
1729
- signerUserId: string;
1730
- signerUserKeyFingerprint: string;
1731
913
  stateHash: string;
1732
914
  version: number;
1733
915
  };
1734
- previousStates: {
1735
- grants: {
1736
- accessLevel: "admin" | "read" | "write";
1737
- containerId: string;
1738
- }[];
1739
- projection: {
1740
- role: "member" | "admin";
1741
- userId: string;
1742
- }[];
1743
- state: {
1744
- createdAt: string;
1745
- encapsulationPublicKey: string;
1746
- externalAuthority: {
1747
- keyEpoch: number;
1748
- keyFingerprint: string;
1749
- principalId: string;
1750
- principalType: "group";
1751
- stateHash: string;
1752
- version: number;
1753
- } | null;
1754
- grantCount: number;
1755
- grantRoot: string;
1756
- keyEpoch: number;
1757
- keyFingerprint: string;
1758
- memberCount: number;
1759
- memberEnvelopesRoot: string;
1760
- membershipMode: "projection";
1761
- membershipRoot: string;
1762
- payloadCiphertextHash: string;
1763
- prevStateHash: string | null;
1764
- principalId: string;
1765
- principalType: "group" | "organization";
1766
- projectionRoot: string;
1767
- signature: string;
1768
- signedAt: string;
1769
- signerUserId: string;
1770
- signerUserKeyFingerprint: string;
1771
- stateHash: string;
1772
- version: number;
1773
- };
1774
- }[];
916
+ grant: string;
1775
917
  } | null;
1776
918
  organizationPayloads: {
1777
- cipherSuite: "aes-256-gcm";
1778
- ciphertext: string;
1779
- ciphertextHash: string;
1780
- createdAt: string;
1781
- principalId: string;
1782
- principalType: "group" | "organization";
1783
- stateHash: string;
919
+ reference: {
920
+ keyEpoch: number;
921
+ keyFingerprint: string;
922
+ principalId: string;
923
+ principalType: "group" | "organization";
924
+ stateHash: string;
925
+ version: number;
926
+ };
927
+ payload: {
928
+ cipherSuite: "aes-256-gcm";
929
+ ciphertext: string;
930
+ ciphertextHash: string;
931
+ createdAt: string;
932
+ principalId: string;
933
+ principalType: "group" | "organization";
934
+ stateHash: string;
935
+ };
1784
936
  }[];
1785
937
  groups: {
1786
- currentGrants: {
1787
- accessLevel: "admin" | "read" | "write";
1788
- containerId: string;
1789
- }[];
1790
- currentProjection: {
1791
- role: "member" | "admin";
1792
- userId: string;
1793
- }[];
1794
- currentState: {
1795
- createdAt: string;
1796
- encapsulationPublicKey: string;
1797
- externalAuthority: {
1798
- keyEpoch: number;
1799
- keyFingerprint: string;
1800
- principalId: string;
1801
- principalType: "group";
1802
- stateHash: string;
1803
- version: number;
1804
- } | null;
1805
- grantCount: number;
1806
- grantRoot: string;
938
+ head: {
1807
939
  keyEpoch: number;
1808
940
  keyFingerprint: string;
1809
- memberCount: number;
1810
- memberEnvelopesRoot: string;
1811
- membershipMode: "projection";
1812
- membershipRoot: string;
1813
- payloadCiphertextHash: string;
1814
- prevStateHash: string | null;
1815
941
  principalId: string;
1816
942
  principalType: "group" | "organization";
1817
- projectionRoot: string;
1818
- signature: string;
1819
- signedAt: string;
1820
- signerUserId: string;
1821
- signerUserKeyFingerprint: string;
1822
943
  stateHash: string;
1823
944
  version: number;
1824
945
  };
1825
- previousStates: {
1826
- grants: {
1827
- accessLevel: "admin" | "read" | "write";
1828
- containerId: string;
1829
- }[];
1830
- projection: {
1831
- role: "member" | "admin";
1832
- userId: string;
1833
- }[];
1834
- state: {
1835
- createdAt: string;
1836
- encapsulationPublicKey: string;
1837
- externalAuthority: {
1838
- keyEpoch: number;
1839
- keyFingerprint: string;
1840
- principalId: string;
1841
- principalType: "group";
1842
- stateHash: string;
1843
- version: number;
1844
- } | null;
1845
- grantCount: number;
1846
- grantRoot: string;
1847
- keyEpoch: number;
1848
- keyFingerprint: string;
1849
- memberCount: number;
1850
- memberEnvelopesRoot: string;
1851
- membershipMode: "projection";
1852
- membershipRoot: string;
1853
- payloadCiphertextHash: string;
1854
- prevStateHash: string | null;
1855
- principalId: string;
1856
- principalType: "group" | "organization";
1857
- projectionRoot: string;
1858
- signature: string;
1859
- signedAt: string;
1860
- signerUserId: string;
1861
- signerUserKeyFingerprint: string;
1862
- stateHash: string;
1863
- version: number;
1864
- };
1865
- }[];
946
+ grant: string;
1866
947
  }[];
1867
948
  };
1868
949
  authorizingContainerPaths: {
@@ -1981,177 +1062,45 @@ export declare const getDocumentWriterProjectionOperation: Omit<{
1981
1062
  }, {
1982
1063
  policyEvidence: {
1983
1064
  organization: {
1984
- currentGrants: {
1985
- accessLevel: "admin" | "read" | "write";
1986
- containerId: string;
1987
- }[];
1988
- currentProjection: {
1989
- role: "member" | "admin";
1990
- userId: string;
1991
- }[];
1992
- currentState: {
1993
- createdAt: string;
1994
- encapsulationPublicKey: string;
1995
- externalAuthority: {
1996
- keyEpoch: number;
1997
- keyFingerprint: string;
1998
- principalId: string;
1999
- principalType: "group";
2000
- stateHash: string;
2001
- version: number;
2002
- } | null;
2003
- grantCount: number;
2004
- grantRoot: string;
1065
+ head: {
2005
1066
  keyEpoch: number;
2006
1067
  keyFingerprint: string;
2007
- memberCount: number;
2008
- memberEnvelopesRoot: string;
2009
- membershipMode: "projection";
2010
- membershipRoot: string;
2011
- payloadCiphertextHash: string;
2012
- prevStateHash: string | null;
2013
1068
  principalId: string;
2014
1069
  principalType: "group" | "organization";
2015
- projectionRoot: string;
2016
- signature: string;
2017
- signedAt: string;
2018
- signerUserId: string;
2019
- signerUserKeyFingerprint: string;
2020
1070
  stateHash: string;
2021
1071
  version: number;
2022
1072
  };
2023
- previousStates: {
2024
- grants: {
2025
- accessLevel: "admin" | "read" | "write";
2026
- containerId: string;
2027
- }[];
2028
- projection: {
2029
- role: "member" | "admin";
2030
- userId: string;
2031
- }[];
2032
- state: {
2033
- createdAt: string;
2034
- encapsulationPublicKey: string;
2035
- externalAuthority: {
2036
- keyEpoch: number;
2037
- keyFingerprint: string;
2038
- principalId: string;
2039
- principalType: "group";
2040
- stateHash: string;
2041
- version: number;
2042
- } | null;
2043
- grantCount: number;
2044
- grantRoot: string;
2045
- keyEpoch: number;
2046
- keyFingerprint: string;
2047
- memberCount: number;
2048
- memberEnvelopesRoot: string;
2049
- membershipMode: "projection";
2050
- membershipRoot: string;
2051
- payloadCiphertextHash: string;
2052
- prevStateHash: string | null;
2053
- principalId: string;
2054
- principalType: "group" | "organization";
2055
- projectionRoot: string;
2056
- signature: string;
2057
- signedAt: string;
2058
- signerUserId: string;
2059
- signerUserKeyFingerprint: string;
2060
- stateHash: string;
2061
- version: number;
2062
- };
2063
- }[];
1073
+ grant: string;
2064
1074
  } | null;
2065
1075
  organizationPayloads: {
2066
- cipherSuite: "aes-256-gcm";
2067
- ciphertext: string;
2068
- ciphertextHash: string;
2069
- createdAt: string;
2070
- principalId: string;
2071
- principalType: "group" | "organization";
2072
- stateHash: string;
1076
+ reference: {
1077
+ keyEpoch: number;
1078
+ keyFingerprint: string;
1079
+ principalId: string;
1080
+ principalType: "group" | "organization";
1081
+ stateHash: string;
1082
+ version: number;
1083
+ };
1084
+ payload: {
1085
+ cipherSuite: "aes-256-gcm";
1086
+ ciphertext: string;
1087
+ ciphertextHash: string;
1088
+ createdAt: string;
1089
+ principalId: string;
1090
+ principalType: "group" | "organization";
1091
+ stateHash: string;
1092
+ };
2073
1093
  }[];
2074
1094
  groups: {
2075
- currentGrants: {
2076
- accessLevel: "admin" | "read" | "write";
2077
- containerId: string;
2078
- }[];
2079
- currentProjection: {
2080
- role: "member" | "admin";
2081
- userId: string;
2082
- }[];
2083
- currentState: {
2084
- createdAt: string;
2085
- encapsulationPublicKey: string;
2086
- externalAuthority: {
2087
- keyEpoch: number;
2088
- keyFingerprint: string;
2089
- principalId: string;
2090
- principalType: "group";
2091
- stateHash: string;
2092
- version: number;
2093
- } | null;
2094
- grantCount: number;
2095
- grantRoot: string;
1095
+ head: {
2096
1096
  keyEpoch: number;
2097
1097
  keyFingerprint: string;
2098
- memberCount: number;
2099
- memberEnvelopesRoot: string;
2100
- membershipMode: "projection";
2101
- membershipRoot: string;
2102
- payloadCiphertextHash: string;
2103
- prevStateHash: string | null;
2104
1098
  principalId: string;
2105
1099
  principalType: "group" | "organization";
2106
- projectionRoot: string;
2107
- signature: string;
2108
- signedAt: string;
2109
- signerUserId: string;
2110
- signerUserKeyFingerprint: string;
2111
1100
  stateHash: string;
2112
1101
  version: number;
2113
1102
  };
2114
- previousStates: {
2115
- grants: {
2116
- accessLevel: "admin" | "read" | "write";
2117
- containerId: string;
2118
- }[];
2119
- projection: {
2120
- role: "member" | "admin";
2121
- userId: string;
2122
- }[];
2123
- state: {
2124
- createdAt: string;
2125
- encapsulationPublicKey: string;
2126
- externalAuthority: {
2127
- keyEpoch: number;
2128
- keyFingerprint: string;
2129
- principalId: string;
2130
- principalType: "group";
2131
- stateHash: string;
2132
- version: number;
2133
- } | null;
2134
- grantCount: number;
2135
- grantRoot: string;
2136
- keyEpoch: number;
2137
- keyFingerprint: string;
2138
- memberCount: number;
2139
- memberEnvelopesRoot: string;
2140
- membershipMode: "projection";
2141
- membershipRoot: string;
2142
- payloadCiphertextHash: string;
2143
- prevStateHash: string | null;
2144
- principalId: string;
2145
- principalType: "group" | "organization";
2146
- projectionRoot: string;
2147
- signature: string;
2148
- signedAt: string;
2149
- signerUserId: string;
2150
- signerUserKeyFingerprint: string;
2151
- stateHash: string;
2152
- version: number;
2153
- };
2154
- }[];
1103
+ grant: string;
2155
1104
  }[];
2156
1105
  };
2157
1106
  authorizingContainerPaths: {
@@ -2268,6 +1217,11 @@ export declare const getDocumentWriterProjectionOperation: Omit<{
2268
1217
  }[] | undefined;
2269
1218
  contentKeyBundleStale?: true | undefined;
2270
1219
  }>>;
1220
+ readonly 202: z.ZodObject<{
1221
+ code: z.ZodLiteral<"principal_history_preparation_pending">;
1222
+ committed: z.ZodLiteral<false>;
1223
+ progressToken: z.ZodCustom<string, string>;
1224
+ }, z.core.$strict>;
2271
1225
  };
2272
1226
  readonly runtimeRefinements: readonly [{
2273
1227
  readonly description: "containerKeks must contain exactly one entry for every manifest in path";