@tearleads/client-sdk 0.1.14 → 0.1.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (200) hide show
  1. package/client/containerContents.js +2 -1
  2. package/client/containerContents.js.map +1 -1
  3. package/data/documents/blob/shared/types.d.ts +4 -0
  4. package/data/documents/blob/shared/types.js.map +1 -1
  5. package/data/keyingProjectionVerification/accessManifestCheckpointEnforcement.js +2 -0
  6. package/data/keyingProjectionVerification/accessManifestCheckpointEnforcement.js.map +1 -1
  7. package/data/keyingProjectionVerification/checkpointContext.d.ts +2 -1
  8. package/data/keyingProjectionVerification/checkpointContext.js +22 -0
  9. package/data/keyingProjectionVerification/checkpointContext.js.map +1 -1
  10. package/data/keyingProjectionVerification/containerDestinationVerification.js +11 -1
  11. package/data/keyingProjectionVerification/containerDestinationVerification.js.map +1 -1
  12. package/data/keyingProjectionVerification/containerManifestVerification.js.map +1 -1
  13. package/data/keyingProjectionVerification/containerPathVerification.js.map +1 -1
  14. package/data/keyingProjectionVerification/containerProjectionVerification.d.ts +3 -2
  15. package/data/keyingProjectionVerification/containerProjectionVerification.js +10 -11
  16. package/data/keyingProjectionVerification/containerProjectionVerification.js.map +1 -1
  17. package/data/keyingProjectionVerification/documentManifestPolicies.js.map +1 -1
  18. package/data/keyingProjectionVerification/documentManifestVerification.js.map +1 -1
  19. package/data/keyingProjectionVerification/documentProjectionVerification.d.ts +2 -3
  20. package/data/keyingProjectionVerification/documentProjectionVerification.js +4 -0
  21. package/data/keyingProjectionVerification/documentProjectionVerification.js.map +1 -1
  22. package/data/keyingProjectionVerification/mergeProjectionPolicyEvidence.js +14 -12
  23. package/data/keyingProjectionVerification/mergeProjectionPolicyEvidence.js.map +1 -1
  24. package/data/keyingProjectionVerification/organizationFounderBinding.js.map +1 -1
  25. package/data/keyingProjectionVerification/projectionAuthorizationEvidence.js +33 -6
  26. package/data/keyingProjectionVerification/projectionAuthorizationEvidence.js.map +1 -1
  27. package/data/keyingProjectionVerification/projectionLifetimes.js +13 -0
  28. package/data/keyingProjectionVerification/projectionLifetimes.js.map +1 -0
  29. package/data/keyingProjectionVerification/projectionPolicyEvidence.js +19 -66
  30. package/data/keyingProjectionVerification/projectionPolicyEvidence.js.map +1 -1
  31. package/data/keyingProjectionVerification/types.d.ts +13 -2
  32. package/data/keyingProjectionVerification/types.js +15 -0
  33. package/data/keyingProjectionVerification/types.js.map +1 -1
  34. package/data/persistence/keyingCheckpointAdvancePersistence.js +4 -1
  35. package/data/persistence/keyingCheckpointAdvancePersistence.js.map +1 -1
  36. package/data/persistence/organizationFounderPersistence.js +2 -2
  37. package/data/persistence/organizationFounderPersistence.js.map +1 -1
  38. package/data/persistence/principalAuthorizationCheckpoints.js +29 -0
  39. package/data/persistence/principalAuthorizationCheckpoints.js.map +1 -0
  40. package/data/persistence/principalHistoryEvidencePersistence.d.ts +30 -0
  41. package/data/persistence/principalHistoryPrefixPersistence.d.ts +24 -0
  42. package/data/persistence/principalHistoryPrefixPersistence.js +6 -2
  43. package/data/persistence/principalHistoryPrefixPersistence.js.map +1 -1
  44. package/data/persistence/principalHistoryStagePersistence.d.ts +21 -0
  45. package/data/principals/principalHistoryRuntime.js +12 -0
  46. package/data/principals/principalHistoryRuntime.js.map +1 -0
  47. package/data/principals/principalHistoryStageProtection.js +2 -12
  48. package/data/principals/principalHistoryStageProtection.js.map +1 -1
  49. package/data/principals/principalPolicyEvidence.d.ts +2 -2
  50. package/data/principals/principalPolicyEvidence.js.map +1 -1
  51. package/data/sqlite/principalHistoryEvidenceSchema.d.ts +308 -0
  52. package/data/sqlite/principalHistoryStageSchema.d.ts +119 -0
  53. package/index.d.ts +2 -2
  54. package/index.js +1 -1
  55. package/index.js.map +1 -1
  56. package/internal/api-client/ApiCache.d.ts +54 -0
  57. package/internal/api-client/ApiClient.d.ts +255 -309
  58. package/internal/api-client/ApiClient.js +15 -6
  59. package/internal/api-client/ApiClient.js.map +1 -1
  60. package/internal/api-client/index.d.ts +1 -0
  61. package/internal/api-client/index.js.map +1 -1
  62. package/internal/api-client/principalHistoryDeadline.js +20 -0
  63. package/internal/api-client/principalHistoryDeadline.js.map +1 -0
  64. package/internal/api-client/principalHistoryRequest.js +59 -22
  65. package/internal/api-client/principalHistoryRequest.js.map +1 -1
  66. package/internal/api-client/principalHistoryRequestContext.js +18 -5
  67. package/internal/api-client/principalHistoryRequestContext.js.map +1 -1
  68. package/internal/api-client/principalPolicyRequests.d.ts +799 -0
  69. package/internal/api-client/principalPolicyRequests.js +9 -4
  70. package/internal/api-client/principalPolicyRequests.js.map +1 -1
  71. package/internal/api-client/projectionPolicyHistoryPages.d.ts +9 -0
  72. package/internal/api-client/projectionPolicyHistoryPages.js +88 -0
  73. package/internal/api-client/projectionPolicyHistoryPages.js.map +1 -0
  74. package/internal/api-client/writerProjectionRequests.js +26 -0
  75. package/internal/api-client/writerProjectionRequests.js.map +1 -0
  76. package/internal/crypto/keying/principalPolicyHistory.js +4 -0
  77. package/internal/crypto/keying/principalPolicyHistory.js.map +1 -1
  78. package/internal/crypto/keying/principalPolicyHistoryTypes.d.ts +2 -0
  79. package/internal/crypto/keying/principalPolicyHistoryTypes.js.map +1 -1
  80. package/internal/crypto/projectionHistorySlots.js +0 -4
  81. package/internal/crypto/projectionHistorySlots.js.map +1 -1
  82. package/internal/validators/operation/index.d.ts +1 -0
  83. package/internal/validators/operation/index.js +1 -0
  84. package/internal/validators/operation/index.js.map +1 -1
  85. package/internal/validators/operation/principals.d.ts +38 -16
  86. package/internal/validators/operation/principals.js +11 -5
  87. package/internal/validators/operation/principals.js.map +1 -1
  88. package/internal/validators/operation/projectionPolicyHistory.d.ts +512 -0
  89. package/internal/validators/operation/projectionPolicyHistory.js +37 -0
  90. package/internal/validators/operation/projectionPolicyHistory.js.map +1 -0
  91. package/internal/validators/operation/registry.d.ts +2 -0
  92. package/internal/validators/operation/registry.js +2 -0
  93. package/internal/validators/operation/registry.js.map +1 -1
  94. package/internal/validators/operation/writerProjections.d.ts +178 -1224
  95. package/internal/validators/operation/writerProjections.js +9 -2
  96. package/internal/validators/operation/writerProjections.js.map +1 -1
  97. package/internal/validators/response/container.d.ts +84 -612
  98. package/internal/validators/response/documentMutation.d.ts +84 -612
  99. package/internal/validators/response/index.d.ts +1 -0
  100. package/internal/validators/response/index.js +1 -0
  101. package/internal/validators/response/index.js.map +1 -1
  102. package/internal/validators/response/organizationBilling.d.ts +1 -0
  103. package/internal/validators/response/organizationBilling.js +1 -1
  104. package/internal/validators/response/organizationBilling.js.map +1 -1
  105. package/internal/validators/response/principalHistoryPreparation.js +28 -1
  106. package/internal/validators/response/principalHistoryPreparation.js.map +1 -1
  107. package/internal/validators/response/principalPolicySnapshotPage.d.ts +388 -0
  108. package/internal/validators/response/principalPolicySnapshotPage.js +24 -0
  109. package/internal/validators/response/principalPolicySnapshotPage.js.map +1 -0
  110. package/internal/validators/response/projectionPolicyEvidence.d.ts +85 -613
  111. package/internal/validators/response/projectionPolicyEvidence.js +10 -5
  112. package/internal/validators/response/projectionPolicyEvidence.js.map +1 -1
  113. package/package.json +1 -1
  114. package/stores/documents/documentStore/attachmentHydration.js +3 -0
  115. package/stores/documents/documentStore/attachmentHydration.js.map +1 -1
  116. package/stores/documents/documentStore/syncDetachedAttachments.js +3 -0
  117. package/stores/documents/documentStore/syncDetachedAttachments.js.map +1 -1
  118. package/workflows/blobs/decrypt.d.ts +1 -1
  119. package/workflows/blobs/decrypt.js +3 -1
  120. package/workflows/blobs/decrypt.js.map +1 -1
  121. package/workflows/blobs/detach.js +6 -1
  122. package/workflows/blobs/detach.js.map +1 -1
  123. package/workflows/blobs/hydrate.d.ts +3 -1
  124. package/workflows/blobs/hydrate.js +2 -0
  125. package/workflows/blobs/hydrate.js.map +1 -1
  126. package/workflows/blobs/retainedAttachmentVerification.js +2 -0
  127. package/workflows/blobs/retainedAttachmentVerification.js.map +1 -1
  128. package/workflows/container-contents/container-state/createAdoption.js +2 -0
  129. package/workflows/container-contents/container-state/createAdoption.js.map +1 -1
  130. package/workflows/container-contents/container-state/createWithMetadata.js +7 -39
  131. package/workflows/container-contents/container-state/createWithMetadata.js.map +1 -1
  132. package/workflows/container-contents/container-state/createWithMetadataPlan.js +68 -0
  133. package/workflows/container-contents/container-state/createWithMetadataPlan.js.map +1 -0
  134. package/workflows/container-contents/remoteContainerState.js +3 -1
  135. package/workflows/container-contents/remoteContainerState.js.map +1 -1
  136. package/workflows/container-contents/remoteHydration/verifiedDestination.js +3 -0
  137. package/workflows/container-contents/remoteHydration/verifiedDestination.js.map +1 -1
  138. package/workflows/container-contents/runtime.d.ts +3 -0
  139. package/workflows/container-contents/runtime.js +7 -6
  140. package/workflows/container-contents/runtime.js.map +1 -1
  141. package/workflows/documents/create.d.ts +2 -15
  142. package/workflows/documents/create.js +9 -64
  143. package/workflows/documents/create.js.map +1 -1
  144. package/workflows/documents/createProjection.d.ts +14 -0
  145. package/workflows/documents/createProjection.js +26 -0
  146. package/workflows/documents/createProjection.js.map +1 -0
  147. package/workflows/documents/createResponse.js +49 -0
  148. package/workflows/documents/createResponse.js.map +1 -0
  149. package/workflows/documents/linkSetBlobRewraps.js +2 -0
  150. package/workflows/documents/linkSetBlobRewraps.js.map +1 -1
  151. package/workflows/documents/runtime.d.ts +3 -0
  152. package/workflows/documents/runtime.js +3 -2
  153. package/workflows/documents/runtime.js.map +1 -1
  154. package/workflows/documents/syncFailureClassification.js +3 -1
  155. package/workflows/documents/syncFailureClassification.js.map +1 -1
  156. package/workflows/principals/index.d.ts +2 -0
  157. package/workflows/principals/index.js +1 -0
  158. package/workflows/principals/index.js.map +1 -1
  159. package/workflows/principals/policyVerification.js.map +1 -1
  160. package/workflows/principals/principalHistoryRecoveryAuthority.js +20 -0
  161. package/workflows/principals/principalHistoryRecoveryAuthority.js.map +1 -0
  162. package/workflows/principals/principalHistoryRecoveryStage.js +1 -1
  163. package/workflows/principals/principalHistoryRecoveryStage.js.map +1 -1
  164. package/workflows/principals/principalHistoryRecoveryTypes.d.ts +3 -3
  165. package/workflows/principals/principalHistoryRecoveryTypes.js.map +1 -1
  166. package/workflows/principals/principalHistoryRecoveryVerification.js +6 -1
  167. package/workflows/principals/principalHistoryRecoveryVerification.js.map +1 -1
  168. package/workflows/principals/principalRecoveryOutage.js +1 -1
  169. package/workflows/principals/principalRecoveryOutage.js.map +1 -1
  170. package/workflows/principals/publicPrincipalHistoryAuthority.js +60 -0
  171. package/workflows/principals/publicPrincipalHistoryAuthority.js.map +1 -0
  172. package/workflows/principals/publicPrincipalHistoryPage.js +87 -0
  173. package/workflows/principals/publicPrincipalHistoryPage.js.map +1 -0
  174. package/workflows/principals/publicPrincipalHistoryProgress.js +178 -0
  175. package/workflows/principals/publicPrincipalHistoryProgress.js.map +1 -0
  176. package/workflows/principals/publicPrincipalHistoryTypes.d.ts +39 -0
  177. package/workflows/principals/publicPrincipalHistoryTypes.js +2 -0
  178. package/workflows/principals/publicPrincipalHistoryTypes.js.map +1 -0
  179. package/workflows/principals/publicProjectionDirectory.js +40 -0
  180. package/workflows/principals/publicProjectionDirectory.js.map +1 -0
  181. package/workflows/principals/publicProjectionPrincipal.js +53 -0
  182. package/workflows/principals/publicProjectionPrincipal.js.map +1 -0
  183. package/workflows/principals/recoverPrincipalPolicyHistory.js +4 -1
  184. package/workflows/principals/recoverPrincipalPolicyHistory.js.map +1 -1
  185. package/workflows/principals/recoverProjectionPolicyHistory.d.ts +9 -0
  186. package/workflows/principals/recoverProjectionPolicyHistory.js +98 -0
  187. package/workflows/principals/recoverProjectionPolicyHistory.js.map +1 -0
  188. package/workflows/principals/recoverPublicPrincipalHistory.js +176 -0
  189. package/workflows/principals/recoverPublicPrincipalHistory.js.map +1 -0
  190. package/workflows/principals/recoverScopedPrincipalPolicyHistory.js +2 -5
  191. package/workflows/principals/recoverScopedPrincipalPolicyHistory.js.map +1 -1
  192. package/workflows/principals/runtimePolicyRecovery.js +2 -1
  193. package/workflows/principals/runtimePolicyRecovery.js.map +1 -1
  194. package/workflows/principals/runtimePolicyWarmer.js +2 -0
  195. package/workflows/principals/runtimePolicyWarmer.js.map +1 -1
  196. package/workflows/principals/runtimeProjectionPolicyRecovery.js +56 -0
  197. package/workflows/principals/runtimeProjectionPolicyRecovery.js.map +1 -0
  198. package/workflows/principals/selectPublicPrincipalHistory.js +90 -0
  199. package/workflows/principals/selectPublicPrincipalHistory.js.map +1 -0
  200. package/workflows/registration/provisioningBootstrapBuilders.d.ts +21 -153
@@ -1412,177 +1412,45 @@ export type DocumentPurgeResponse = z.infer<typeof DocumentPurgeResponseSchema>;
1412
1412
  export declare const DocumentWriterProjectionResponseSchema: z.ZodType<{
1413
1413
  policyEvidence: {
1414
1414
  organization: {
1415
- currentGrants: {
1416
- accessLevel: "admin" | "read" | "write";
1417
- containerId: string;
1418
- }[];
1419
- currentProjection: {
1420
- role: "member" | "admin";
1421
- userId: string;
1422
- }[];
1423
- currentState: {
1424
- createdAt: string;
1425
- encapsulationPublicKey: string;
1426
- externalAuthority: {
1427
- keyEpoch: number;
1428
- keyFingerprint: string;
1429
- principalId: string;
1430
- principalType: "group";
1431
- stateHash: string;
1432
- version: number;
1433
- } | null;
1434
- grantCount: number;
1435
- grantRoot: string;
1415
+ head: {
1436
1416
  keyEpoch: number;
1437
1417
  keyFingerprint: string;
1438
- memberCount: number;
1439
- memberEnvelopesRoot: string;
1440
- membershipMode: "projection";
1441
- membershipRoot: string;
1442
- payloadCiphertextHash: string;
1443
- prevStateHash: string | null;
1444
1418
  principalId: string;
1445
1419
  principalType: "group" | "organization";
1446
- projectionRoot: string;
1447
- signature: string;
1448
- signedAt: string;
1449
- signerUserId: string;
1450
- signerUserKeyFingerprint: string;
1451
1420
  stateHash: string;
1452
1421
  version: number;
1453
1422
  };
1454
- previousStates: {
1455
- grants: {
1456
- accessLevel: "admin" | "read" | "write";
1457
- containerId: string;
1458
- }[];
1459
- projection: {
1460
- role: "member" | "admin";
1461
- userId: string;
1462
- }[];
1463
- state: {
1464
- createdAt: string;
1465
- encapsulationPublicKey: string;
1466
- externalAuthority: {
1467
- keyEpoch: number;
1468
- keyFingerprint: string;
1469
- principalId: string;
1470
- principalType: "group";
1471
- stateHash: string;
1472
- version: number;
1473
- } | null;
1474
- grantCount: number;
1475
- grantRoot: string;
1476
- keyEpoch: number;
1477
- keyFingerprint: string;
1478
- memberCount: number;
1479
- memberEnvelopesRoot: string;
1480
- membershipMode: "projection";
1481
- membershipRoot: string;
1482
- payloadCiphertextHash: string;
1483
- prevStateHash: string | null;
1484
- principalId: string;
1485
- principalType: "group" | "organization";
1486
- projectionRoot: string;
1487
- signature: string;
1488
- signedAt: string;
1489
- signerUserId: string;
1490
- signerUserKeyFingerprint: string;
1491
- stateHash: string;
1492
- version: number;
1493
- };
1494
- }[];
1423
+ grant: string;
1495
1424
  } | null;
1496
1425
  organizationPayloads: {
1497
- cipherSuite: "aes-256-gcm";
1498
- ciphertext: string;
1499
- ciphertextHash: string;
1500
- createdAt: string;
1501
- principalId: string;
1502
- principalType: "group" | "organization";
1503
- stateHash: string;
1426
+ reference: {
1427
+ keyEpoch: number;
1428
+ keyFingerprint: string;
1429
+ principalId: string;
1430
+ principalType: "group" | "organization";
1431
+ stateHash: string;
1432
+ version: number;
1433
+ };
1434
+ payload: {
1435
+ cipherSuite: "aes-256-gcm";
1436
+ ciphertext: string;
1437
+ ciphertextHash: string;
1438
+ createdAt: string;
1439
+ principalId: string;
1440
+ principalType: "group" | "organization";
1441
+ stateHash: string;
1442
+ };
1504
1443
  }[];
1505
1444
  groups: {
1506
- currentGrants: {
1507
- accessLevel: "admin" | "read" | "write";
1508
- containerId: string;
1509
- }[];
1510
- currentProjection: {
1511
- role: "member" | "admin";
1512
- userId: string;
1513
- }[];
1514
- currentState: {
1515
- createdAt: string;
1516
- encapsulationPublicKey: string;
1517
- externalAuthority: {
1518
- keyEpoch: number;
1519
- keyFingerprint: string;
1520
- principalId: string;
1521
- principalType: "group";
1522
- stateHash: string;
1523
- version: number;
1524
- } | null;
1525
- grantCount: number;
1526
- grantRoot: string;
1445
+ head: {
1527
1446
  keyEpoch: number;
1528
1447
  keyFingerprint: string;
1529
- memberCount: number;
1530
- memberEnvelopesRoot: string;
1531
- membershipMode: "projection";
1532
- membershipRoot: string;
1533
- payloadCiphertextHash: string;
1534
- prevStateHash: string | null;
1535
1448
  principalId: string;
1536
1449
  principalType: "group" | "organization";
1537
- projectionRoot: string;
1538
- signature: string;
1539
- signedAt: string;
1540
- signerUserId: string;
1541
- signerUserKeyFingerprint: string;
1542
1450
  stateHash: string;
1543
1451
  version: number;
1544
1452
  };
1545
- previousStates: {
1546
- grants: {
1547
- accessLevel: "admin" | "read" | "write";
1548
- containerId: string;
1549
- }[];
1550
- projection: {
1551
- role: "member" | "admin";
1552
- userId: string;
1553
- }[];
1554
- state: {
1555
- createdAt: string;
1556
- encapsulationPublicKey: string;
1557
- externalAuthority: {
1558
- keyEpoch: number;
1559
- keyFingerprint: string;
1560
- principalId: string;
1561
- principalType: "group";
1562
- stateHash: string;
1563
- version: number;
1564
- } | null;
1565
- grantCount: number;
1566
- grantRoot: string;
1567
- keyEpoch: number;
1568
- keyFingerprint: string;
1569
- memberCount: number;
1570
- memberEnvelopesRoot: string;
1571
- membershipMode: "projection";
1572
- membershipRoot: string;
1573
- payloadCiphertextHash: string;
1574
- prevStateHash: string | null;
1575
- principalId: string;
1576
- principalType: "group" | "organization";
1577
- projectionRoot: string;
1578
- signature: string;
1579
- signedAt: string;
1580
- signerUserId: string;
1581
- signerUserKeyFingerprint: string;
1582
- stateHash: string;
1583
- version: number;
1584
- };
1585
- }[];
1453
+ grant: string;
1586
1454
  }[];
1587
1455
  };
1588
1456
  authorizingContainerPaths: {
@@ -1701,177 +1569,45 @@ export declare const DocumentWriterProjectionResponseSchema: z.ZodType<{
1701
1569
  }, {
1702
1570
  policyEvidence: {
1703
1571
  organization: {
1704
- currentGrants: {
1705
- accessLevel: "admin" | "read" | "write";
1706
- containerId: string;
1707
- }[];
1708
- currentProjection: {
1709
- role: "member" | "admin";
1710
- userId: string;
1711
- }[];
1712
- currentState: {
1713
- createdAt: string;
1714
- encapsulationPublicKey: string;
1715
- externalAuthority: {
1716
- keyEpoch: number;
1717
- keyFingerprint: string;
1718
- principalId: string;
1719
- principalType: "group";
1720
- stateHash: string;
1721
- version: number;
1722
- } | null;
1723
- grantCount: number;
1724
- grantRoot: string;
1572
+ head: {
1725
1573
  keyEpoch: number;
1726
1574
  keyFingerprint: string;
1727
- memberCount: number;
1728
- memberEnvelopesRoot: string;
1729
- membershipMode: "projection";
1730
- membershipRoot: string;
1731
- payloadCiphertextHash: string;
1732
- prevStateHash: string | null;
1733
1575
  principalId: string;
1734
1576
  principalType: "group" | "organization";
1735
- projectionRoot: string;
1736
- signature: string;
1737
- signedAt: string;
1738
- signerUserId: string;
1739
- signerUserKeyFingerprint: string;
1740
1577
  stateHash: string;
1741
1578
  version: number;
1742
1579
  };
1743
- previousStates: {
1744
- grants: {
1745
- accessLevel: "admin" | "read" | "write";
1746
- containerId: string;
1747
- }[];
1748
- projection: {
1749
- role: "member" | "admin";
1750
- userId: string;
1751
- }[];
1752
- state: {
1753
- createdAt: string;
1754
- encapsulationPublicKey: string;
1755
- externalAuthority: {
1756
- keyEpoch: number;
1757
- keyFingerprint: string;
1758
- principalId: string;
1759
- principalType: "group";
1760
- stateHash: string;
1761
- version: number;
1762
- } | null;
1763
- grantCount: number;
1764
- grantRoot: string;
1765
- keyEpoch: number;
1766
- keyFingerprint: string;
1767
- memberCount: number;
1768
- memberEnvelopesRoot: string;
1769
- membershipMode: "projection";
1770
- membershipRoot: string;
1771
- payloadCiphertextHash: string;
1772
- prevStateHash: string | null;
1773
- principalId: string;
1774
- principalType: "group" | "organization";
1775
- projectionRoot: string;
1776
- signature: string;
1777
- signedAt: string;
1778
- signerUserId: string;
1779
- signerUserKeyFingerprint: string;
1780
- stateHash: string;
1781
- version: number;
1782
- };
1783
- }[];
1580
+ grant: string;
1784
1581
  } | null;
1785
1582
  organizationPayloads: {
1786
- cipherSuite: "aes-256-gcm";
1787
- ciphertext: string;
1788
- ciphertextHash: string;
1789
- createdAt: string;
1790
- principalId: string;
1791
- principalType: "group" | "organization";
1792
- stateHash: string;
1583
+ reference: {
1584
+ keyEpoch: number;
1585
+ keyFingerprint: string;
1586
+ principalId: string;
1587
+ principalType: "group" | "organization";
1588
+ stateHash: string;
1589
+ version: number;
1590
+ };
1591
+ payload: {
1592
+ cipherSuite: "aes-256-gcm";
1593
+ ciphertext: string;
1594
+ ciphertextHash: string;
1595
+ createdAt: string;
1596
+ principalId: string;
1597
+ principalType: "group" | "organization";
1598
+ stateHash: string;
1599
+ };
1793
1600
  }[];
1794
1601
  groups: {
1795
- currentGrants: {
1796
- accessLevel: "admin" | "read" | "write";
1797
- containerId: string;
1798
- }[];
1799
- currentProjection: {
1800
- role: "member" | "admin";
1801
- userId: string;
1802
- }[];
1803
- currentState: {
1804
- createdAt: string;
1805
- encapsulationPublicKey: string;
1806
- externalAuthority: {
1807
- keyEpoch: number;
1808
- keyFingerprint: string;
1809
- principalId: string;
1810
- principalType: "group";
1811
- stateHash: string;
1812
- version: number;
1813
- } | null;
1814
- grantCount: number;
1815
- grantRoot: string;
1602
+ head: {
1816
1603
  keyEpoch: number;
1817
1604
  keyFingerprint: string;
1818
- memberCount: number;
1819
- memberEnvelopesRoot: string;
1820
- membershipMode: "projection";
1821
- membershipRoot: string;
1822
- payloadCiphertextHash: string;
1823
- prevStateHash: string | null;
1824
1605
  principalId: string;
1825
1606
  principalType: "group" | "organization";
1826
- projectionRoot: string;
1827
- signature: string;
1828
- signedAt: string;
1829
- signerUserId: string;
1830
- signerUserKeyFingerprint: string;
1831
1607
  stateHash: string;
1832
1608
  version: number;
1833
1609
  };
1834
- previousStates: {
1835
- grants: {
1836
- accessLevel: "admin" | "read" | "write";
1837
- containerId: string;
1838
- }[];
1839
- projection: {
1840
- role: "member" | "admin";
1841
- userId: string;
1842
- }[];
1843
- state: {
1844
- createdAt: string;
1845
- encapsulationPublicKey: string;
1846
- externalAuthority: {
1847
- keyEpoch: number;
1848
- keyFingerprint: string;
1849
- principalId: string;
1850
- principalType: "group";
1851
- stateHash: string;
1852
- version: number;
1853
- } | null;
1854
- grantCount: number;
1855
- grantRoot: string;
1856
- keyEpoch: number;
1857
- keyFingerprint: string;
1858
- memberCount: number;
1859
- memberEnvelopesRoot: string;
1860
- membershipMode: "projection";
1861
- membershipRoot: string;
1862
- payloadCiphertextHash: string;
1863
- prevStateHash: string | null;
1864
- principalId: string;
1865
- principalType: "group" | "organization";
1866
- projectionRoot: string;
1867
- signature: string;
1868
- signedAt: string;
1869
- signerUserId: string;
1870
- signerUserKeyFingerprint: string;
1871
- stateHash: string;
1872
- version: number;
1873
- };
1874
- }[];
1610
+ grant: string;
1875
1611
  }[];
1876
1612
  };
1877
1613
  authorizingContainerPaths: {
@@ -1990,177 +1726,45 @@ export declare const DocumentWriterProjectionResponseSchema: z.ZodType<{
1990
1726
  }, z.core.$ZodTypeInternals<{
1991
1727
  policyEvidence: {
1992
1728
  organization: {
1993
- currentGrants: {
1994
- accessLevel: "admin" | "read" | "write";
1995
- containerId: string;
1996
- }[];
1997
- currentProjection: {
1998
- role: "member" | "admin";
1999
- userId: string;
2000
- }[];
2001
- currentState: {
2002
- createdAt: string;
2003
- encapsulationPublicKey: string;
2004
- externalAuthority: {
2005
- keyEpoch: number;
2006
- keyFingerprint: string;
2007
- principalId: string;
2008
- principalType: "group";
2009
- stateHash: string;
2010
- version: number;
2011
- } | null;
2012
- grantCount: number;
2013
- grantRoot: string;
1729
+ head: {
2014
1730
  keyEpoch: number;
2015
1731
  keyFingerprint: string;
2016
- memberCount: number;
2017
- memberEnvelopesRoot: string;
2018
- membershipMode: "projection";
2019
- membershipRoot: string;
2020
- payloadCiphertextHash: string;
2021
- prevStateHash: string | null;
2022
1732
  principalId: string;
2023
1733
  principalType: "group" | "organization";
2024
- projectionRoot: string;
2025
- signature: string;
2026
- signedAt: string;
2027
- signerUserId: string;
2028
- signerUserKeyFingerprint: string;
2029
1734
  stateHash: string;
2030
1735
  version: number;
2031
1736
  };
2032
- previousStates: {
2033
- grants: {
2034
- accessLevel: "admin" | "read" | "write";
2035
- containerId: string;
2036
- }[];
2037
- projection: {
2038
- role: "member" | "admin";
2039
- userId: string;
2040
- }[];
2041
- state: {
2042
- createdAt: string;
2043
- encapsulationPublicKey: string;
2044
- externalAuthority: {
2045
- keyEpoch: number;
2046
- keyFingerprint: string;
2047
- principalId: string;
2048
- principalType: "group";
2049
- stateHash: string;
2050
- version: number;
2051
- } | null;
2052
- grantCount: number;
2053
- grantRoot: string;
2054
- keyEpoch: number;
2055
- keyFingerprint: string;
2056
- memberCount: number;
2057
- memberEnvelopesRoot: string;
2058
- membershipMode: "projection";
2059
- membershipRoot: string;
2060
- payloadCiphertextHash: string;
2061
- prevStateHash: string | null;
2062
- principalId: string;
2063
- principalType: "group" | "organization";
2064
- projectionRoot: string;
2065
- signature: string;
2066
- signedAt: string;
2067
- signerUserId: string;
2068
- signerUserKeyFingerprint: string;
2069
- stateHash: string;
2070
- version: number;
2071
- };
2072
- }[];
1737
+ grant: string;
2073
1738
  } | null;
2074
1739
  organizationPayloads: {
2075
- cipherSuite: "aes-256-gcm";
2076
- ciphertext: string;
2077
- ciphertextHash: string;
2078
- createdAt: string;
2079
- principalId: string;
2080
- principalType: "group" | "organization";
2081
- stateHash: string;
1740
+ reference: {
1741
+ keyEpoch: number;
1742
+ keyFingerprint: string;
1743
+ principalId: string;
1744
+ principalType: "group" | "organization";
1745
+ stateHash: string;
1746
+ version: number;
1747
+ };
1748
+ payload: {
1749
+ cipherSuite: "aes-256-gcm";
1750
+ ciphertext: string;
1751
+ ciphertextHash: string;
1752
+ createdAt: string;
1753
+ principalId: string;
1754
+ principalType: "group" | "organization";
1755
+ stateHash: string;
1756
+ };
2082
1757
  }[];
2083
1758
  groups: {
2084
- currentGrants: {
2085
- accessLevel: "admin" | "read" | "write";
2086
- containerId: string;
2087
- }[];
2088
- currentProjection: {
2089
- role: "member" | "admin";
2090
- userId: string;
2091
- }[];
2092
- currentState: {
2093
- createdAt: string;
2094
- encapsulationPublicKey: string;
2095
- externalAuthority: {
2096
- keyEpoch: number;
2097
- keyFingerprint: string;
2098
- principalId: string;
2099
- principalType: "group";
2100
- stateHash: string;
2101
- version: number;
2102
- } | null;
2103
- grantCount: number;
2104
- grantRoot: string;
1759
+ head: {
2105
1760
  keyEpoch: number;
2106
1761
  keyFingerprint: string;
2107
- memberCount: number;
2108
- memberEnvelopesRoot: string;
2109
- membershipMode: "projection";
2110
- membershipRoot: string;
2111
- payloadCiphertextHash: string;
2112
- prevStateHash: string | null;
2113
1762
  principalId: string;
2114
1763
  principalType: "group" | "organization";
2115
- projectionRoot: string;
2116
- signature: string;
2117
- signedAt: string;
2118
- signerUserId: string;
2119
- signerUserKeyFingerprint: string;
2120
1764
  stateHash: string;
2121
1765
  version: number;
2122
1766
  };
2123
- previousStates: {
2124
- grants: {
2125
- accessLevel: "admin" | "read" | "write";
2126
- containerId: string;
2127
- }[];
2128
- projection: {
2129
- role: "member" | "admin";
2130
- userId: string;
2131
- }[];
2132
- state: {
2133
- createdAt: string;
2134
- encapsulationPublicKey: string;
2135
- externalAuthority: {
2136
- keyEpoch: number;
2137
- keyFingerprint: string;
2138
- principalId: string;
2139
- principalType: "group";
2140
- stateHash: string;
2141
- version: number;
2142
- } | null;
2143
- grantCount: number;
2144
- grantRoot: string;
2145
- keyEpoch: number;
2146
- keyFingerprint: string;
2147
- memberCount: number;
2148
- memberEnvelopesRoot: string;
2149
- membershipMode: "projection";
2150
- membershipRoot: string;
2151
- payloadCiphertextHash: string;
2152
- prevStateHash: string | null;
2153
- principalId: string;
2154
- principalType: "group" | "organization";
2155
- projectionRoot: string;
2156
- signature: string;
2157
- signedAt: string;
2158
- signerUserId: string;
2159
- signerUserKeyFingerprint: string;
2160
- stateHash: string;
2161
- version: number;
2162
- };
2163
- }[];
1767
+ grant: string;
2164
1768
  }[];
2165
1769
  };
2166
1770
  authorizingContainerPaths: {
@@ -2279,177 +1883,45 @@ export declare const DocumentWriterProjectionResponseSchema: z.ZodType<{
2279
1883
  }, {
2280
1884
  policyEvidence: {
2281
1885
  organization: {
2282
- currentGrants: {
2283
- accessLevel: "admin" | "read" | "write";
2284
- containerId: string;
2285
- }[];
2286
- currentProjection: {
2287
- role: "member" | "admin";
2288
- userId: string;
2289
- }[];
2290
- currentState: {
2291
- createdAt: string;
2292
- encapsulationPublicKey: string;
2293
- externalAuthority: {
2294
- keyEpoch: number;
2295
- keyFingerprint: string;
2296
- principalId: string;
2297
- principalType: "group";
2298
- stateHash: string;
2299
- version: number;
2300
- } | null;
2301
- grantCount: number;
2302
- grantRoot: string;
1886
+ head: {
2303
1887
  keyEpoch: number;
2304
1888
  keyFingerprint: string;
2305
- memberCount: number;
2306
- memberEnvelopesRoot: string;
2307
- membershipMode: "projection";
2308
- membershipRoot: string;
2309
- payloadCiphertextHash: string;
2310
- prevStateHash: string | null;
2311
1889
  principalId: string;
2312
1890
  principalType: "group" | "organization";
2313
- projectionRoot: string;
2314
- signature: string;
2315
- signedAt: string;
2316
- signerUserId: string;
2317
- signerUserKeyFingerprint: string;
2318
1891
  stateHash: string;
2319
1892
  version: number;
2320
1893
  };
2321
- previousStates: {
2322
- grants: {
2323
- accessLevel: "admin" | "read" | "write";
2324
- containerId: string;
2325
- }[];
2326
- projection: {
2327
- role: "member" | "admin";
2328
- userId: string;
2329
- }[];
2330
- state: {
2331
- createdAt: string;
2332
- encapsulationPublicKey: string;
2333
- externalAuthority: {
2334
- keyEpoch: number;
2335
- keyFingerprint: string;
2336
- principalId: string;
2337
- principalType: "group";
2338
- stateHash: string;
2339
- version: number;
2340
- } | null;
2341
- grantCount: number;
2342
- grantRoot: string;
2343
- keyEpoch: number;
2344
- keyFingerprint: string;
2345
- memberCount: number;
2346
- memberEnvelopesRoot: string;
2347
- membershipMode: "projection";
2348
- membershipRoot: string;
2349
- payloadCiphertextHash: string;
2350
- prevStateHash: string | null;
2351
- principalId: string;
2352
- principalType: "group" | "organization";
2353
- projectionRoot: string;
2354
- signature: string;
2355
- signedAt: string;
2356
- signerUserId: string;
2357
- signerUserKeyFingerprint: string;
2358
- stateHash: string;
2359
- version: number;
2360
- };
2361
- }[];
1894
+ grant: string;
2362
1895
  } | null;
2363
1896
  organizationPayloads: {
2364
- cipherSuite: "aes-256-gcm";
2365
- ciphertext: string;
2366
- ciphertextHash: string;
2367
- createdAt: string;
2368
- principalId: string;
2369
- principalType: "group" | "organization";
2370
- stateHash: string;
1897
+ reference: {
1898
+ keyEpoch: number;
1899
+ keyFingerprint: string;
1900
+ principalId: string;
1901
+ principalType: "group" | "organization";
1902
+ stateHash: string;
1903
+ version: number;
1904
+ };
1905
+ payload: {
1906
+ cipherSuite: "aes-256-gcm";
1907
+ ciphertext: string;
1908
+ ciphertextHash: string;
1909
+ createdAt: string;
1910
+ principalId: string;
1911
+ principalType: "group" | "organization";
1912
+ stateHash: string;
1913
+ };
2371
1914
  }[];
2372
1915
  groups: {
2373
- currentGrants: {
2374
- accessLevel: "admin" | "read" | "write";
2375
- containerId: string;
2376
- }[];
2377
- currentProjection: {
2378
- role: "member" | "admin";
2379
- userId: string;
2380
- }[];
2381
- currentState: {
2382
- createdAt: string;
2383
- encapsulationPublicKey: string;
2384
- externalAuthority: {
2385
- keyEpoch: number;
2386
- keyFingerprint: string;
2387
- principalId: string;
2388
- principalType: "group";
2389
- stateHash: string;
2390
- version: number;
2391
- } | null;
2392
- grantCount: number;
2393
- grantRoot: string;
1916
+ head: {
2394
1917
  keyEpoch: number;
2395
1918
  keyFingerprint: string;
2396
- memberCount: number;
2397
- memberEnvelopesRoot: string;
2398
- membershipMode: "projection";
2399
- membershipRoot: string;
2400
- payloadCiphertextHash: string;
2401
- prevStateHash: string | null;
2402
1919
  principalId: string;
2403
1920
  principalType: "group" | "organization";
2404
- projectionRoot: string;
2405
- signature: string;
2406
- signedAt: string;
2407
- signerUserId: string;
2408
- signerUserKeyFingerprint: string;
2409
1921
  stateHash: string;
2410
1922
  version: number;
2411
1923
  };
2412
- previousStates: {
2413
- grants: {
2414
- accessLevel: "admin" | "read" | "write";
2415
- containerId: string;
2416
- }[];
2417
- projection: {
2418
- role: "member" | "admin";
2419
- userId: string;
2420
- }[];
2421
- state: {
2422
- createdAt: string;
2423
- encapsulationPublicKey: string;
2424
- externalAuthority: {
2425
- keyEpoch: number;
2426
- keyFingerprint: string;
2427
- principalId: string;
2428
- principalType: "group";
2429
- stateHash: string;
2430
- version: number;
2431
- } | null;
2432
- grantCount: number;
2433
- grantRoot: string;
2434
- keyEpoch: number;
2435
- keyFingerprint: string;
2436
- memberCount: number;
2437
- memberEnvelopesRoot: string;
2438
- membershipMode: "projection";
2439
- membershipRoot: string;
2440
- payloadCiphertextHash: string;
2441
- prevStateHash: string | null;
2442
- principalId: string;
2443
- principalType: "group" | "organization";
2444
- projectionRoot: string;
2445
- signature: string;
2446
- signedAt: string;
2447
- signerUserId: string;
2448
- signerUserKeyFingerprint: string;
2449
- stateHash: string;
2450
- version: number;
2451
- };
2452
- }[];
1924
+ grant: string;
2453
1925
  }[];
2454
1926
  };
2455
1927
  authorizingContainerPaths: {