@tearleads/client-sdk 0.1.14 → 0.1.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (200) hide show
  1. package/client/containerContents.js +2 -1
  2. package/client/containerContents.js.map +1 -1
  3. package/data/documents/blob/shared/types.d.ts +4 -0
  4. package/data/documents/blob/shared/types.js.map +1 -1
  5. package/data/keyingProjectionVerification/accessManifestCheckpointEnforcement.js +2 -0
  6. package/data/keyingProjectionVerification/accessManifestCheckpointEnforcement.js.map +1 -1
  7. package/data/keyingProjectionVerification/checkpointContext.d.ts +2 -1
  8. package/data/keyingProjectionVerification/checkpointContext.js +22 -0
  9. package/data/keyingProjectionVerification/checkpointContext.js.map +1 -1
  10. package/data/keyingProjectionVerification/containerDestinationVerification.js +11 -1
  11. package/data/keyingProjectionVerification/containerDestinationVerification.js.map +1 -1
  12. package/data/keyingProjectionVerification/containerManifestVerification.js.map +1 -1
  13. package/data/keyingProjectionVerification/containerPathVerification.js.map +1 -1
  14. package/data/keyingProjectionVerification/containerProjectionVerification.d.ts +3 -2
  15. package/data/keyingProjectionVerification/containerProjectionVerification.js +10 -11
  16. package/data/keyingProjectionVerification/containerProjectionVerification.js.map +1 -1
  17. package/data/keyingProjectionVerification/documentManifestPolicies.js.map +1 -1
  18. package/data/keyingProjectionVerification/documentManifestVerification.js.map +1 -1
  19. package/data/keyingProjectionVerification/documentProjectionVerification.d.ts +2 -3
  20. package/data/keyingProjectionVerification/documentProjectionVerification.js +4 -0
  21. package/data/keyingProjectionVerification/documentProjectionVerification.js.map +1 -1
  22. package/data/keyingProjectionVerification/mergeProjectionPolicyEvidence.js +14 -12
  23. package/data/keyingProjectionVerification/mergeProjectionPolicyEvidence.js.map +1 -1
  24. package/data/keyingProjectionVerification/organizationFounderBinding.js.map +1 -1
  25. package/data/keyingProjectionVerification/projectionAuthorizationEvidence.js +33 -6
  26. package/data/keyingProjectionVerification/projectionAuthorizationEvidence.js.map +1 -1
  27. package/data/keyingProjectionVerification/projectionLifetimes.js +13 -0
  28. package/data/keyingProjectionVerification/projectionLifetimes.js.map +1 -0
  29. package/data/keyingProjectionVerification/projectionPolicyEvidence.js +19 -66
  30. package/data/keyingProjectionVerification/projectionPolicyEvidence.js.map +1 -1
  31. package/data/keyingProjectionVerification/types.d.ts +13 -2
  32. package/data/keyingProjectionVerification/types.js +15 -0
  33. package/data/keyingProjectionVerification/types.js.map +1 -1
  34. package/data/persistence/keyingCheckpointAdvancePersistence.js +4 -1
  35. package/data/persistence/keyingCheckpointAdvancePersistence.js.map +1 -1
  36. package/data/persistence/organizationFounderPersistence.js +2 -2
  37. package/data/persistence/organizationFounderPersistence.js.map +1 -1
  38. package/data/persistence/principalAuthorizationCheckpoints.js +29 -0
  39. package/data/persistence/principalAuthorizationCheckpoints.js.map +1 -0
  40. package/data/persistence/principalHistoryEvidencePersistence.d.ts +30 -0
  41. package/data/persistence/principalHistoryPrefixPersistence.d.ts +24 -0
  42. package/data/persistence/principalHistoryPrefixPersistence.js +6 -2
  43. package/data/persistence/principalHistoryPrefixPersistence.js.map +1 -1
  44. package/data/persistence/principalHistoryStagePersistence.d.ts +21 -0
  45. package/data/principals/principalHistoryRuntime.js +12 -0
  46. package/data/principals/principalHistoryRuntime.js.map +1 -0
  47. package/data/principals/principalHistoryStageProtection.js +2 -12
  48. package/data/principals/principalHistoryStageProtection.js.map +1 -1
  49. package/data/principals/principalPolicyEvidence.d.ts +2 -2
  50. package/data/principals/principalPolicyEvidence.js.map +1 -1
  51. package/data/sqlite/principalHistoryEvidenceSchema.d.ts +308 -0
  52. package/data/sqlite/principalHistoryStageSchema.d.ts +119 -0
  53. package/index.d.ts +2 -2
  54. package/index.js +1 -1
  55. package/index.js.map +1 -1
  56. package/internal/api-client/ApiCache.d.ts +54 -0
  57. package/internal/api-client/ApiClient.d.ts +255 -309
  58. package/internal/api-client/ApiClient.js +15 -6
  59. package/internal/api-client/ApiClient.js.map +1 -1
  60. package/internal/api-client/index.d.ts +1 -0
  61. package/internal/api-client/index.js.map +1 -1
  62. package/internal/api-client/principalHistoryDeadline.js +20 -0
  63. package/internal/api-client/principalHistoryDeadline.js.map +1 -0
  64. package/internal/api-client/principalHistoryRequest.js +59 -22
  65. package/internal/api-client/principalHistoryRequest.js.map +1 -1
  66. package/internal/api-client/principalHistoryRequestContext.js +18 -5
  67. package/internal/api-client/principalHistoryRequestContext.js.map +1 -1
  68. package/internal/api-client/principalPolicyRequests.d.ts +799 -0
  69. package/internal/api-client/principalPolicyRequests.js +9 -4
  70. package/internal/api-client/principalPolicyRequests.js.map +1 -1
  71. package/internal/api-client/projectionPolicyHistoryPages.d.ts +9 -0
  72. package/internal/api-client/projectionPolicyHistoryPages.js +88 -0
  73. package/internal/api-client/projectionPolicyHistoryPages.js.map +1 -0
  74. package/internal/api-client/writerProjectionRequests.js +26 -0
  75. package/internal/api-client/writerProjectionRequests.js.map +1 -0
  76. package/internal/crypto/keying/principalPolicyHistory.js +4 -0
  77. package/internal/crypto/keying/principalPolicyHistory.js.map +1 -1
  78. package/internal/crypto/keying/principalPolicyHistoryTypes.d.ts +2 -0
  79. package/internal/crypto/keying/principalPolicyHistoryTypes.js.map +1 -1
  80. package/internal/crypto/projectionHistorySlots.js +0 -4
  81. package/internal/crypto/projectionHistorySlots.js.map +1 -1
  82. package/internal/validators/operation/index.d.ts +1 -0
  83. package/internal/validators/operation/index.js +1 -0
  84. package/internal/validators/operation/index.js.map +1 -1
  85. package/internal/validators/operation/principals.d.ts +38 -16
  86. package/internal/validators/operation/principals.js +11 -5
  87. package/internal/validators/operation/principals.js.map +1 -1
  88. package/internal/validators/operation/projectionPolicyHistory.d.ts +512 -0
  89. package/internal/validators/operation/projectionPolicyHistory.js +37 -0
  90. package/internal/validators/operation/projectionPolicyHistory.js.map +1 -0
  91. package/internal/validators/operation/registry.d.ts +2 -0
  92. package/internal/validators/operation/registry.js +2 -0
  93. package/internal/validators/operation/registry.js.map +1 -1
  94. package/internal/validators/operation/writerProjections.d.ts +178 -1224
  95. package/internal/validators/operation/writerProjections.js +9 -2
  96. package/internal/validators/operation/writerProjections.js.map +1 -1
  97. package/internal/validators/response/container.d.ts +84 -612
  98. package/internal/validators/response/documentMutation.d.ts +84 -612
  99. package/internal/validators/response/index.d.ts +1 -0
  100. package/internal/validators/response/index.js +1 -0
  101. package/internal/validators/response/index.js.map +1 -1
  102. package/internal/validators/response/organizationBilling.d.ts +1 -0
  103. package/internal/validators/response/organizationBilling.js +1 -1
  104. package/internal/validators/response/organizationBilling.js.map +1 -1
  105. package/internal/validators/response/principalHistoryPreparation.js +28 -1
  106. package/internal/validators/response/principalHistoryPreparation.js.map +1 -1
  107. package/internal/validators/response/principalPolicySnapshotPage.d.ts +388 -0
  108. package/internal/validators/response/principalPolicySnapshotPage.js +24 -0
  109. package/internal/validators/response/principalPolicySnapshotPage.js.map +1 -0
  110. package/internal/validators/response/projectionPolicyEvidence.d.ts +85 -613
  111. package/internal/validators/response/projectionPolicyEvidence.js +10 -5
  112. package/internal/validators/response/projectionPolicyEvidence.js.map +1 -1
  113. package/package.json +1 -1
  114. package/stores/documents/documentStore/attachmentHydration.js +3 -0
  115. package/stores/documents/documentStore/attachmentHydration.js.map +1 -1
  116. package/stores/documents/documentStore/syncDetachedAttachments.js +3 -0
  117. package/stores/documents/documentStore/syncDetachedAttachments.js.map +1 -1
  118. package/workflows/blobs/decrypt.d.ts +1 -1
  119. package/workflows/blobs/decrypt.js +3 -1
  120. package/workflows/blobs/decrypt.js.map +1 -1
  121. package/workflows/blobs/detach.js +6 -1
  122. package/workflows/blobs/detach.js.map +1 -1
  123. package/workflows/blobs/hydrate.d.ts +3 -1
  124. package/workflows/blobs/hydrate.js +2 -0
  125. package/workflows/blobs/hydrate.js.map +1 -1
  126. package/workflows/blobs/retainedAttachmentVerification.js +2 -0
  127. package/workflows/blobs/retainedAttachmentVerification.js.map +1 -1
  128. package/workflows/container-contents/container-state/createAdoption.js +2 -0
  129. package/workflows/container-contents/container-state/createAdoption.js.map +1 -1
  130. package/workflows/container-contents/container-state/createWithMetadata.js +7 -39
  131. package/workflows/container-contents/container-state/createWithMetadata.js.map +1 -1
  132. package/workflows/container-contents/container-state/createWithMetadataPlan.js +68 -0
  133. package/workflows/container-contents/container-state/createWithMetadataPlan.js.map +1 -0
  134. package/workflows/container-contents/remoteContainerState.js +3 -1
  135. package/workflows/container-contents/remoteContainerState.js.map +1 -1
  136. package/workflows/container-contents/remoteHydration/verifiedDestination.js +3 -0
  137. package/workflows/container-contents/remoteHydration/verifiedDestination.js.map +1 -1
  138. package/workflows/container-contents/runtime.d.ts +3 -0
  139. package/workflows/container-contents/runtime.js +7 -6
  140. package/workflows/container-contents/runtime.js.map +1 -1
  141. package/workflows/documents/create.d.ts +2 -15
  142. package/workflows/documents/create.js +9 -64
  143. package/workflows/documents/create.js.map +1 -1
  144. package/workflows/documents/createProjection.d.ts +14 -0
  145. package/workflows/documents/createProjection.js +26 -0
  146. package/workflows/documents/createProjection.js.map +1 -0
  147. package/workflows/documents/createResponse.js +49 -0
  148. package/workflows/documents/createResponse.js.map +1 -0
  149. package/workflows/documents/linkSetBlobRewraps.js +2 -0
  150. package/workflows/documents/linkSetBlobRewraps.js.map +1 -1
  151. package/workflows/documents/runtime.d.ts +3 -0
  152. package/workflows/documents/runtime.js +3 -2
  153. package/workflows/documents/runtime.js.map +1 -1
  154. package/workflows/documents/syncFailureClassification.js +3 -1
  155. package/workflows/documents/syncFailureClassification.js.map +1 -1
  156. package/workflows/principals/index.d.ts +2 -0
  157. package/workflows/principals/index.js +1 -0
  158. package/workflows/principals/index.js.map +1 -1
  159. package/workflows/principals/policyVerification.js.map +1 -1
  160. package/workflows/principals/principalHistoryRecoveryAuthority.js +20 -0
  161. package/workflows/principals/principalHistoryRecoveryAuthority.js.map +1 -0
  162. package/workflows/principals/principalHistoryRecoveryStage.js +1 -1
  163. package/workflows/principals/principalHistoryRecoveryStage.js.map +1 -1
  164. package/workflows/principals/principalHistoryRecoveryTypes.d.ts +3 -3
  165. package/workflows/principals/principalHistoryRecoveryTypes.js.map +1 -1
  166. package/workflows/principals/principalHistoryRecoveryVerification.js +6 -1
  167. package/workflows/principals/principalHistoryRecoveryVerification.js.map +1 -1
  168. package/workflows/principals/principalRecoveryOutage.js +1 -1
  169. package/workflows/principals/principalRecoveryOutage.js.map +1 -1
  170. package/workflows/principals/publicPrincipalHistoryAuthority.js +60 -0
  171. package/workflows/principals/publicPrincipalHistoryAuthority.js.map +1 -0
  172. package/workflows/principals/publicPrincipalHistoryPage.js +87 -0
  173. package/workflows/principals/publicPrincipalHistoryPage.js.map +1 -0
  174. package/workflows/principals/publicPrincipalHistoryProgress.js +178 -0
  175. package/workflows/principals/publicPrincipalHistoryProgress.js.map +1 -0
  176. package/workflows/principals/publicPrincipalHistoryTypes.d.ts +39 -0
  177. package/workflows/principals/publicPrincipalHistoryTypes.js +2 -0
  178. package/workflows/principals/publicPrincipalHistoryTypes.js.map +1 -0
  179. package/workflows/principals/publicProjectionDirectory.js +40 -0
  180. package/workflows/principals/publicProjectionDirectory.js.map +1 -0
  181. package/workflows/principals/publicProjectionPrincipal.js +53 -0
  182. package/workflows/principals/publicProjectionPrincipal.js.map +1 -0
  183. package/workflows/principals/recoverPrincipalPolicyHistory.js +4 -1
  184. package/workflows/principals/recoverPrincipalPolicyHistory.js.map +1 -1
  185. package/workflows/principals/recoverProjectionPolicyHistory.d.ts +9 -0
  186. package/workflows/principals/recoverProjectionPolicyHistory.js +98 -0
  187. package/workflows/principals/recoverProjectionPolicyHistory.js.map +1 -0
  188. package/workflows/principals/recoverPublicPrincipalHistory.js +176 -0
  189. package/workflows/principals/recoverPublicPrincipalHistory.js.map +1 -0
  190. package/workflows/principals/recoverScopedPrincipalPolicyHistory.js +2 -5
  191. package/workflows/principals/recoverScopedPrincipalPolicyHistory.js.map +1 -1
  192. package/workflows/principals/runtimePolicyRecovery.js +2 -1
  193. package/workflows/principals/runtimePolicyRecovery.js.map +1 -1
  194. package/workflows/principals/runtimePolicyWarmer.js +2 -0
  195. package/workflows/principals/runtimePolicyWarmer.js.map +1 -1
  196. package/workflows/principals/runtimeProjectionPolicyRecovery.js +56 -0
  197. package/workflows/principals/runtimeProjectionPolicyRecovery.js.map +1 -0
  198. package/workflows/principals/selectPublicPrincipalHistory.js +90 -0
  199. package/workflows/principals/selectPublicPrincipalHistory.js.map +1 -0
  200. package/workflows/registration/provisioningBootstrapBuilders.d.ts +21 -153
@@ -1340,177 +1340,45 @@ export type ContainerKeyingPathResponse = z.infer<typeof ContainerKeyingPathResp
1340
1340
  export declare const ContainerWriterProjectionResponseSchema: z.ZodType<{
1341
1341
  policyEvidence: {
1342
1342
  organization: {
1343
- currentGrants: {
1344
- accessLevel: "admin" | "read" | "write";
1345
- containerId: string;
1346
- }[];
1347
- currentProjection: {
1348
- role: "member" | "admin";
1349
- userId: string;
1350
- }[];
1351
- currentState: {
1352
- createdAt: string;
1353
- encapsulationPublicKey: string;
1354
- externalAuthority: {
1355
- keyEpoch: number;
1356
- keyFingerprint: string;
1357
- principalId: string;
1358
- principalType: "group";
1359
- stateHash: string;
1360
- version: number;
1361
- } | null;
1362
- grantCount: number;
1363
- grantRoot: string;
1343
+ head: {
1364
1344
  keyEpoch: number;
1365
1345
  keyFingerprint: string;
1366
- memberCount: number;
1367
- memberEnvelopesRoot: string;
1368
- membershipMode: "projection";
1369
- membershipRoot: string;
1370
- payloadCiphertextHash: string;
1371
- prevStateHash: string | null;
1372
1346
  principalId: string;
1373
1347
  principalType: "group" | "organization";
1374
- projectionRoot: string;
1375
- signature: string;
1376
- signedAt: string;
1377
- signerUserId: string;
1378
- signerUserKeyFingerprint: string;
1379
1348
  stateHash: string;
1380
1349
  version: number;
1381
1350
  };
1382
- previousStates: {
1383
- grants: {
1384
- accessLevel: "admin" | "read" | "write";
1385
- containerId: string;
1386
- }[];
1387
- projection: {
1388
- role: "member" | "admin";
1389
- userId: string;
1390
- }[];
1391
- state: {
1392
- createdAt: string;
1393
- encapsulationPublicKey: string;
1394
- externalAuthority: {
1395
- keyEpoch: number;
1396
- keyFingerprint: string;
1397
- principalId: string;
1398
- principalType: "group";
1399
- stateHash: string;
1400
- version: number;
1401
- } | null;
1402
- grantCount: number;
1403
- grantRoot: string;
1404
- keyEpoch: number;
1405
- keyFingerprint: string;
1406
- memberCount: number;
1407
- memberEnvelopesRoot: string;
1408
- membershipMode: "projection";
1409
- membershipRoot: string;
1410
- payloadCiphertextHash: string;
1411
- prevStateHash: string | null;
1412
- principalId: string;
1413
- principalType: "group" | "organization";
1414
- projectionRoot: string;
1415
- signature: string;
1416
- signedAt: string;
1417
- signerUserId: string;
1418
- signerUserKeyFingerprint: string;
1419
- stateHash: string;
1420
- version: number;
1421
- };
1422
- }[];
1351
+ grant: string;
1423
1352
  } | null;
1424
1353
  organizationPayloads: {
1425
- cipherSuite: "aes-256-gcm";
1426
- ciphertext: string;
1427
- ciphertextHash: string;
1428
- createdAt: string;
1429
- principalId: string;
1430
- principalType: "group" | "organization";
1431
- stateHash: string;
1354
+ reference: {
1355
+ keyEpoch: number;
1356
+ keyFingerprint: string;
1357
+ principalId: string;
1358
+ principalType: "group" | "organization";
1359
+ stateHash: string;
1360
+ version: number;
1361
+ };
1362
+ payload: {
1363
+ cipherSuite: "aes-256-gcm";
1364
+ ciphertext: string;
1365
+ ciphertextHash: string;
1366
+ createdAt: string;
1367
+ principalId: string;
1368
+ principalType: "group" | "organization";
1369
+ stateHash: string;
1370
+ };
1432
1371
  }[];
1433
1372
  groups: {
1434
- currentGrants: {
1435
- accessLevel: "admin" | "read" | "write";
1436
- containerId: string;
1437
- }[];
1438
- currentProjection: {
1439
- role: "member" | "admin";
1440
- userId: string;
1441
- }[];
1442
- currentState: {
1443
- createdAt: string;
1444
- encapsulationPublicKey: string;
1445
- externalAuthority: {
1446
- keyEpoch: number;
1447
- keyFingerprint: string;
1448
- principalId: string;
1449
- principalType: "group";
1450
- stateHash: string;
1451
- version: number;
1452
- } | null;
1453
- grantCount: number;
1454
- grantRoot: string;
1373
+ head: {
1455
1374
  keyEpoch: number;
1456
1375
  keyFingerprint: string;
1457
- memberCount: number;
1458
- memberEnvelopesRoot: string;
1459
- membershipMode: "projection";
1460
- membershipRoot: string;
1461
- payloadCiphertextHash: string;
1462
- prevStateHash: string | null;
1463
1376
  principalId: string;
1464
1377
  principalType: "group" | "organization";
1465
- projectionRoot: string;
1466
- signature: string;
1467
- signedAt: string;
1468
- signerUserId: string;
1469
- signerUserKeyFingerprint: string;
1470
1378
  stateHash: string;
1471
1379
  version: number;
1472
1380
  };
1473
- previousStates: {
1474
- grants: {
1475
- accessLevel: "admin" | "read" | "write";
1476
- containerId: string;
1477
- }[];
1478
- projection: {
1479
- role: "member" | "admin";
1480
- userId: string;
1481
- }[];
1482
- state: {
1483
- createdAt: string;
1484
- encapsulationPublicKey: string;
1485
- externalAuthority: {
1486
- keyEpoch: number;
1487
- keyFingerprint: string;
1488
- principalId: string;
1489
- principalType: "group";
1490
- stateHash: string;
1491
- version: number;
1492
- } | null;
1493
- grantCount: number;
1494
- grantRoot: string;
1495
- keyEpoch: number;
1496
- keyFingerprint: string;
1497
- memberCount: number;
1498
- memberEnvelopesRoot: string;
1499
- membershipMode: "projection";
1500
- membershipRoot: string;
1501
- payloadCiphertextHash: string;
1502
- prevStateHash: string | null;
1503
- principalId: string;
1504
- principalType: "group" | "organization";
1505
- projectionRoot: string;
1506
- signature: string;
1507
- signedAt: string;
1508
- signerUserId: string;
1509
- signerUserKeyFingerprint: string;
1510
- stateHash: string;
1511
- version: number;
1512
- };
1513
- }[];
1381
+ grant: string;
1514
1382
  }[];
1515
1383
  };
1516
1384
  containerId: string;
@@ -1563,177 +1431,45 @@ export declare const ContainerWriterProjectionResponseSchema: z.ZodType<{
1563
1431
  }, {
1564
1432
  policyEvidence: {
1565
1433
  organization: {
1566
- currentGrants: {
1567
- accessLevel: "admin" | "read" | "write";
1568
- containerId: string;
1569
- }[];
1570
- currentProjection: {
1571
- role: "member" | "admin";
1572
- userId: string;
1573
- }[];
1574
- currentState: {
1575
- createdAt: string;
1576
- encapsulationPublicKey: string;
1577
- externalAuthority: {
1578
- keyEpoch: number;
1579
- keyFingerprint: string;
1580
- principalId: string;
1581
- principalType: "group";
1582
- stateHash: string;
1583
- version: number;
1584
- } | null;
1585
- grantCount: number;
1586
- grantRoot: string;
1434
+ head: {
1587
1435
  keyEpoch: number;
1588
1436
  keyFingerprint: string;
1589
- memberCount: number;
1590
- memberEnvelopesRoot: string;
1591
- membershipMode: "projection";
1592
- membershipRoot: string;
1593
- payloadCiphertextHash: string;
1594
- prevStateHash: string | null;
1595
1437
  principalId: string;
1596
1438
  principalType: "group" | "organization";
1597
- projectionRoot: string;
1598
- signature: string;
1599
- signedAt: string;
1600
- signerUserId: string;
1601
- signerUserKeyFingerprint: string;
1602
1439
  stateHash: string;
1603
1440
  version: number;
1604
1441
  };
1605
- previousStates: {
1606
- grants: {
1607
- accessLevel: "admin" | "read" | "write";
1608
- containerId: string;
1609
- }[];
1610
- projection: {
1611
- role: "member" | "admin";
1612
- userId: string;
1613
- }[];
1614
- state: {
1615
- createdAt: string;
1616
- encapsulationPublicKey: string;
1617
- externalAuthority: {
1618
- keyEpoch: number;
1619
- keyFingerprint: string;
1620
- principalId: string;
1621
- principalType: "group";
1622
- stateHash: string;
1623
- version: number;
1624
- } | null;
1625
- grantCount: number;
1626
- grantRoot: string;
1627
- keyEpoch: number;
1628
- keyFingerprint: string;
1629
- memberCount: number;
1630
- memberEnvelopesRoot: string;
1631
- membershipMode: "projection";
1632
- membershipRoot: string;
1633
- payloadCiphertextHash: string;
1634
- prevStateHash: string | null;
1635
- principalId: string;
1636
- principalType: "group" | "organization";
1637
- projectionRoot: string;
1638
- signature: string;
1639
- signedAt: string;
1640
- signerUserId: string;
1641
- signerUserKeyFingerprint: string;
1642
- stateHash: string;
1643
- version: number;
1644
- };
1645
- }[];
1442
+ grant: string;
1646
1443
  } | null;
1647
1444
  organizationPayloads: {
1648
- cipherSuite: "aes-256-gcm";
1649
- ciphertext: string;
1650
- ciphertextHash: string;
1651
- createdAt: string;
1652
- principalId: string;
1653
- principalType: "group" | "organization";
1654
- stateHash: string;
1445
+ reference: {
1446
+ keyEpoch: number;
1447
+ keyFingerprint: string;
1448
+ principalId: string;
1449
+ principalType: "group" | "organization";
1450
+ stateHash: string;
1451
+ version: number;
1452
+ };
1453
+ payload: {
1454
+ cipherSuite: "aes-256-gcm";
1455
+ ciphertext: string;
1456
+ ciphertextHash: string;
1457
+ createdAt: string;
1458
+ principalId: string;
1459
+ principalType: "group" | "organization";
1460
+ stateHash: string;
1461
+ };
1655
1462
  }[];
1656
1463
  groups: {
1657
- currentGrants: {
1658
- accessLevel: "admin" | "read" | "write";
1659
- containerId: string;
1660
- }[];
1661
- currentProjection: {
1662
- role: "member" | "admin";
1663
- userId: string;
1664
- }[];
1665
- currentState: {
1666
- createdAt: string;
1667
- encapsulationPublicKey: string;
1668
- externalAuthority: {
1669
- keyEpoch: number;
1670
- keyFingerprint: string;
1671
- principalId: string;
1672
- principalType: "group";
1673
- stateHash: string;
1674
- version: number;
1675
- } | null;
1676
- grantCount: number;
1677
- grantRoot: string;
1464
+ head: {
1678
1465
  keyEpoch: number;
1679
1466
  keyFingerprint: string;
1680
- memberCount: number;
1681
- memberEnvelopesRoot: string;
1682
- membershipMode: "projection";
1683
- membershipRoot: string;
1684
- payloadCiphertextHash: string;
1685
- prevStateHash: string | null;
1686
1467
  principalId: string;
1687
1468
  principalType: "group" | "organization";
1688
- projectionRoot: string;
1689
- signature: string;
1690
- signedAt: string;
1691
- signerUserId: string;
1692
- signerUserKeyFingerprint: string;
1693
1469
  stateHash: string;
1694
1470
  version: number;
1695
1471
  };
1696
- previousStates: {
1697
- grants: {
1698
- accessLevel: "admin" | "read" | "write";
1699
- containerId: string;
1700
- }[];
1701
- projection: {
1702
- role: "member" | "admin";
1703
- userId: string;
1704
- }[];
1705
- state: {
1706
- createdAt: string;
1707
- encapsulationPublicKey: string;
1708
- externalAuthority: {
1709
- keyEpoch: number;
1710
- keyFingerprint: string;
1711
- principalId: string;
1712
- principalType: "group";
1713
- stateHash: string;
1714
- version: number;
1715
- } | null;
1716
- grantCount: number;
1717
- grantRoot: string;
1718
- keyEpoch: number;
1719
- keyFingerprint: string;
1720
- memberCount: number;
1721
- memberEnvelopesRoot: string;
1722
- membershipMode: "projection";
1723
- membershipRoot: string;
1724
- payloadCiphertextHash: string;
1725
- prevStateHash: string | null;
1726
- principalId: string;
1727
- principalType: "group" | "organization";
1728
- projectionRoot: string;
1729
- signature: string;
1730
- signedAt: string;
1731
- signerUserId: string;
1732
- signerUserKeyFingerprint: string;
1733
- stateHash: string;
1734
- version: number;
1735
- };
1736
- }[];
1472
+ grant: string;
1737
1473
  }[];
1738
1474
  };
1739
1475
  containerId: string;
@@ -1786,177 +1522,45 @@ export declare const ContainerWriterProjectionResponseSchema: z.ZodType<{
1786
1522
  }, z.core.$ZodTypeInternals<{
1787
1523
  policyEvidence: {
1788
1524
  organization: {
1789
- currentGrants: {
1790
- accessLevel: "admin" | "read" | "write";
1791
- containerId: string;
1792
- }[];
1793
- currentProjection: {
1794
- role: "member" | "admin";
1795
- userId: string;
1796
- }[];
1797
- currentState: {
1798
- createdAt: string;
1799
- encapsulationPublicKey: string;
1800
- externalAuthority: {
1801
- keyEpoch: number;
1802
- keyFingerprint: string;
1803
- principalId: string;
1804
- principalType: "group";
1805
- stateHash: string;
1806
- version: number;
1807
- } | null;
1808
- grantCount: number;
1809
- grantRoot: string;
1525
+ head: {
1810
1526
  keyEpoch: number;
1811
1527
  keyFingerprint: string;
1812
- memberCount: number;
1813
- memberEnvelopesRoot: string;
1814
- membershipMode: "projection";
1815
- membershipRoot: string;
1816
- payloadCiphertextHash: string;
1817
- prevStateHash: string | null;
1818
1528
  principalId: string;
1819
1529
  principalType: "group" | "organization";
1820
- projectionRoot: string;
1821
- signature: string;
1822
- signedAt: string;
1823
- signerUserId: string;
1824
- signerUserKeyFingerprint: string;
1825
1530
  stateHash: string;
1826
1531
  version: number;
1827
1532
  };
1828
- previousStates: {
1829
- grants: {
1830
- accessLevel: "admin" | "read" | "write";
1831
- containerId: string;
1832
- }[];
1833
- projection: {
1834
- role: "member" | "admin";
1835
- userId: string;
1836
- }[];
1837
- state: {
1838
- createdAt: string;
1839
- encapsulationPublicKey: string;
1840
- externalAuthority: {
1841
- keyEpoch: number;
1842
- keyFingerprint: string;
1843
- principalId: string;
1844
- principalType: "group";
1845
- stateHash: string;
1846
- version: number;
1847
- } | null;
1848
- grantCount: number;
1849
- grantRoot: string;
1850
- keyEpoch: number;
1851
- keyFingerprint: string;
1852
- memberCount: number;
1853
- memberEnvelopesRoot: string;
1854
- membershipMode: "projection";
1855
- membershipRoot: string;
1856
- payloadCiphertextHash: string;
1857
- prevStateHash: string | null;
1858
- principalId: string;
1859
- principalType: "group" | "organization";
1860
- projectionRoot: string;
1861
- signature: string;
1862
- signedAt: string;
1863
- signerUserId: string;
1864
- signerUserKeyFingerprint: string;
1865
- stateHash: string;
1866
- version: number;
1867
- };
1868
- }[];
1533
+ grant: string;
1869
1534
  } | null;
1870
1535
  organizationPayloads: {
1871
- cipherSuite: "aes-256-gcm";
1872
- ciphertext: string;
1873
- ciphertextHash: string;
1874
- createdAt: string;
1875
- principalId: string;
1876
- principalType: "group" | "organization";
1877
- stateHash: string;
1536
+ reference: {
1537
+ keyEpoch: number;
1538
+ keyFingerprint: string;
1539
+ principalId: string;
1540
+ principalType: "group" | "organization";
1541
+ stateHash: string;
1542
+ version: number;
1543
+ };
1544
+ payload: {
1545
+ cipherSuite: "aes-256-gcm";
1546
+ ciphertext: string;
1547
+ ciphertextHash: string;
1548
+ createdAt: string;
1549
+ principalId: string;
1550
+ principalType: "group" | "organization";
1551
+ stateHash: string;
1552
+ };
1878
1553
  }[];
1879
1554
  groups: {
1880
- currentGrants: {
1881
- accessLevel: "admin" | "read" | "write";
1882
- containerId: string;
1883
- }[];
1884
- currentProjection: {
1885
- role: "member" | "admin";
1886
- userId: string;
1887
- }[];
1888
- currentState: {
1889
- createdAt: string;
1890
- encapsulationPublicKey: string;
1891
- externalAuthority: {
1892
- keyEpoch: number;
1893
- keyFingerprint: string;
1894
- principalId: string;
1895
- principalType: "group";
1896
- stateHash: string;
1897
- version: number;
1898
- } | null;
1899
- grantCount: number;
1900
- grantRoot: string;
1555
+ head: {
1901
1556
  keyEpoch: number;
1902
1557
  keyFingerprint: string;
1903
- memberCount: number;
1904
- memberEnvelopesRoot: string;
1905
- membershipMode: "projection";
1906
- membershipRoot: string;
1907
- payloadCiphertextHash: string;
1908
- prevStateHash: string | null;
1909
1558
  principalId: string;
1910
1559
  principalType: "group" | "organization";
1911
- projectionRoot: string;
1912
- signature: string;
1913
- signedAt: string;
1914
- signerUserId: string;
1915
- signerUserKeyFingerprint: string;
1916
1560
  stateHash: string;
1917
1561
  version: number;
1918
1562
  };
1919
- previousStates: {
1920
- grants: {
1921
- accessLevel: "admin" | "read" | "write";
1922
- containerId: string;
1923
- }[];
1924
- projection: {
1925
- role: "member" | "admin";
1926
- userId: string;
1927
- }[];
1928
- state: {
1929
- createdAt: string;
1930
- encapsulationPublicKey: string;
1931
- externalAuthority: {
1932
- keyEpoch: number;
1933
- keyFingerprint: string;
1934
- principalId: string;
1935
- principalType: "group";
1936
- stateHash: string;
1937
- version: number;
1938
- } | null;
1939
- grantCount: number;
1940
- grantRoot: string;
1941
- keyEpoch: number;
1942
- keyFingerprint: string;
1943
- memberCount: number;
1944
- memberEnvelopesRoot: string;
1945
- membershipMode: "projection";
1946
- membershipRoot: string;
1947
- payloadCiphertextHash: string;
1948
- prevStateHash: string | null;
1949
- principalId: string;
1950
- principalType: "group" | "organization";
1951
- projectionRoot: string;
1952
- signature: string;
1953
- signedAt: string;
1954
- signerUserId: string;
1955
- signerUserKeyFingerprint: string;
1956
- stateHash: string;
1957
- version: number;
1958
- };
1959
- }[];
1563
+ grant: string;
1960
1564
  }[];
1961
1565
  };
1962
1566
  containerId: string;
@@ -2009,177 +1613,45 @@ export declare const ContainerWriterProjectionResponseSchema: z.ZodType<{
2009
1613
  }, {
2010
1614
  policyEvidence: {
2011
1615
  organization: {
2012
- currentGrants: {
2013
- accessLevel: "admin" | "read" | "write";
2014
- containerId: string;
2015
- }[];
2016
- currentProjection: {
2017
- role: "member" | "admin";
2018
- userId: string;
2019
- }[];
2020
- currentState: {
2021
- createdAt: string;
2022
- encapsulationPublicKey: string;
2023
- externalAuthority: {
2024
- keyEpoch: number;
2025
- keyFingerprint: string;
2026
- principalId: string;
2027
- principalType: "group";
2028
- stateHash: string;
2029
- version: number;
2030
- } | null;
2031
- grantCount: number;
2032
- grantRoot: string;
1616
+ head: {
2033
1617
  keyEpoch: number;
2034
1618
  keyFingerprint: string;
2035
- memberCount: number;
2036
- memberEnvelopesRoot: string;
2037
- membershipMode: "projection";
2038
- membershipRoot: string;
2039
- payloadCiphertextHash: string;
2040
- prevStateHash: string | null;
2041
1619
  principalId: string;
2042
1620
  principalType: "group" | "organization";
2043
- projectionRoot: string;
2044
- signature: string;
2045
- signedAt: string;
2046
- signerUserId: string;
2047
- signerUserKeyFingerprint: string;
2048
1621
  stateHash: string;
2049
1622
  version: number;
2050
1623
  };
2051
- previousStates: {
2052
- grants: {
2053
- accessLevel: "admin" | "read" | "write";
2054
- containerId: string;
2055
- }[];
2056
- projection: {
2057
- role: "member" | "admin";
2058
- userId: string;
2059
- }[];
2060
- state: {
2061
- createdAt: string;
2062
- encapsulationPublicKey: string;
2063
- externalAuthority: {
2064
- keyEpoch: number;
2065
- keyFingerprint: string;
2066
- principalId: string;
2067
- principalType: "group";
2068
- stateHash: string;
2069
- version: number;
2070
- } | null;
2071
- grantCount: number;
2072
- grantRoot: string;
2073
- keyEpoch: number;
2074
- keyFingerprint: string;
2075
- memberCount: number;
2076
- memberEnvelopesRoot: string;
2077
- membershipMode: "projection";
2078
- membershipRoot: string;
2079
- payloadCiphertextHash: string;
2080
- prevStateHash: string | null;
2081
- principalId: string;
2082
- principalType: "group" | "organization";
2083
- projectionRoot: string;
2084
- signature: string;
2085
- signedAt: string;
2086
- signerUserId: string;
2087
- signerUserKeyFingerprint: string;
2088
- stateHash: string;
2089
- version: number;
2090
- };
2091
- }[];
1624
+ grant: string;
2092
1625
  } | null;
2093
1626
  organizationPayloads: {
2094
- cipherSuite: "aes-256-gcm";
2095
- ciphertext: string;
2096
- ciphertextHash: string;
2097
- createdAt: string;
2098
- principalId: string;
2099
- principalType: "group" | "organization";
2100
- stateHash: string;
1627
+ reference: {
1628
+ keyEpoch: number;
1629
+ keyFingerprint: string;
1630
+ principalId: string;
1631
+ principalType: "group" | "organization";
1632
+ stateHash: string;
1633
+ version: number;
1634
+ };
1635
+ payload: {
1636
+ cipherSuite: "aes-256-gcm";
1637
+ ciphertext: string;
1638
+ ciphertextHash: string;
1639
+ createdAt: string;
1640
+ principalId: string;
1641
+ principalType: "group" | "organization";
1642
+ stateHash: string;
1643
+ };
2101
1644
  }[];
2102
1645
  groups: {
2103
- currentGrants: {
2104
- accessLevel: "admin" | "read" | "write";
2105
- containerId: string;
2106
- }[];
2107
- currentProjection: {
2108
- role: "member" | "admin";
2109
- userId: string;
2110
- }[];
2111
- currentState: {
2112
- createdAt: string;
2113
- encapsulationPublicKey: string;
2114
- externalAuthority: {
2115
- keyEpoch: number;
2116
- keyFingerprint: string;
2117
- principalId: string;
2118
- principalType: "group";
2119
- stateHash: string;
2120
- version: number;
2121
- } | null;
2122
- grantCount: number;
2123
- grantRoot: string;
1646
+ head: {
2124
1647
  keyEpoch: number;
2125
1648
  keyFingerprint: string;
2126
- memberCount: number;
2127
- memberEnvelopesRoot: string;
2128
- membershipMode: "projection";
2129
- membershipRoot: string;
2130
- payloadCiphertextHash: string;
2131
- prevStateHash: string | null;
2132
1649
  principalId: string;
2133
1650
  principalType: "group" | "organization";
2134
- projectionRoot: string;
2135
- signature: string;
2136
- signedAt: string;
2137
- signerUserId: string;
2138
- signerUserKeyFingerprint: string;
2139
1651
  stateHash: string;
2140
1652
  version: number;
2141
1653
  };
2142
- previousStates: {
2143
- grants: {
2144
- accessLevel: "admin" | "read" | "write";
2145
- containerId: string;
2146
- }[];
2147
- projection: {
2148
- role: "member" | "admin";
2149
- userId: string;
2150
- }[];
2151
- state: {
2152
- createdAt: string;
2153
- encapsulationPublicKey: string;
2154
- externalAuthority: {
2155
- keyEpoch: number;
2156
- keyFingerprint: string;
2157
- principalId: string;
2158
- principalType: "group";
2159
- stateHash: string;
2160
- version: number;
2161
- } | null;
2162
- grantCount: number;
2163
- grantRoot: string;
2164
- keyEpoch: number;
2165
- keyFingerprint: string;
2166
- memberCount: number;
2167
- memberEnvelopesRoot: string;
2168
- membershipMode: "projection";
2169
- membershipRoot: string;
2170
- payloadCiphertextHash: string;
2171
- prevStateHash: string | null;
2172
- principalId: string;
2173
- principalType: "group" | "organization";
2174
- projectionRoot: string;
2175
- signature: string;
2176
- signedAt: string;
2177
- signerUserId: string;
2178
- signerUserKeyFingerprint: string;
2179
- stateHash: string;
2180
- version: number;
2181
- };
2182
- }[];
1654
+ grant: string;
2183
1655
  }[];
2184
1656
  };
2185
1657
  containerId: string;