@tearleads/client-sdk 0.1.19 → 0.1.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (211) hide show
  1. package/client/organizations/index.js +2 -2
  2. package/client/organizations/index.js.map +1 -1
  3. package/client/organizations/organizationHistory.js +66 -0
  4. package/client/organizations/organizationHistory.js.map +1 -0
  5. package/client/organizations/organizationReadModels.d.ts +1 -1
  6. package/client/organizations/organizationReadModels.js +7 -27
  7. package/client/organizations/organizationReadModels.js.map +1 -1
  8. package/client/organizations/organizationsTypes.d.ts +1 -1
  9. package/client/organizations/organizationsTypes.js.map +1 -1
  10. package/data/containers/shared/types.d.ts +2 -2
  11. package/data/containers/shared/types.js.map +1 -1
  12. package/data/documents/shared/syncSubmitFailure.d.ts +2 -2
  13. package/data/documents/shared/syncSubmitFailure.js.map +1 -1
  14. package/data/keyingProjectionVerification/documentPurgeCheckpointCurrency.js +34 -8
  15. package/data/keyingProjectionVerification/documentPurgeCheckpointCurrency.js.map +1 -1
  16. package/data/keyingProjectionVerification/documentPurgeDocumentChainVerification.js.map +1 -1
  17. package/data/keyingProjectionVerification/documentPurgePolicyCheckpoints.js +17 -0
  18. package/data/keyingProjectionVerification/documentPurgePolicyCheckpoints.js.map +1 -0
  19. package/data/keyingProjectionVerification/documentPurgePolicyCurrency.js +55 -0
  20. package/data/keyingProjectionVerification/documentPurgePolicyCurrency.js.map +1 -0
  21. package/data/keyingProjectionVerification/documentPurgePrincipalEvidence.js +25 -13
  22. package/data/keyingProjectionVerification/documentPurgePrincipalEvidence.js.map +1 -1
  23. package/data/keyingProjectionVerification/documentPurgeProofVerification.d.ts +5 -3
  24. package/data/keyingProjectionVerification/documentPurgeProofVerification.js +52 -8
  25. package/data/keyingProjectionVerification/documentPurgeProofVerification.js.map +1 -1
  26. package/data/keyingProjectionVerification/projectionPolicyEvidence.js.map +1 -1
  27. package/data/keyingProjectionVerification/types.d.ts +4 -0
  28. package/data/keyingProjectionVerification/types.js.map +1 -1
  29. package/data/persistence/principalAuthorizationCheckpoints.js +1 -1
  30. package/data/persistence/principalAuthorizationCheckpoints.js.map +1 -1
  31. package/data/persistence/principalCurrentAcknowledgementPersistence.d.ts +1 -0
  32. package/data/persistence/principalCurrentAcknowledgementPersistence.js +58 -12
  33. package/data/persistence/principalCurrentAcknowledgementPersistence.js.map +1 -1
  34. package/data/persistence/principalHistoryEvidencePersistence.d.ts +2 -0
  35. package/data/persistence/principalHistoryEvidencePersistence.js +2 -0
  36. package/data/persistence/principalHistoryEvidencePersistence.js.map +1 -1
  37. package/data/persistence/principalHistoryIncompleteRetention.js +32 -0
  38. package/data/persistence/principalHistoryIncompleteRetention.js.map +1 -0
  39. package/data/persistence/principalHistoryNodeRetention.js +76 -0
  40. package/data/persistence/principalHistoryNodeRetention.js.map +1 -0
  41. package/data/persistence/principalHistoryPrefixPersistence.d.ts +1 -0
  42. package/data/persistence/principalHistoryPrefixPersistence.js +30 -1
  43. package/data/persistence/principalHistoryPrefixPersistence.js.map +1 -1
  44. package/data/persistence/principalHistoryRootOwnership.js +71 -0
  45. package/data/persistence/principalHistoryRootOwnership.js.map +1 -0
  46. package/data/persistence/principalHistoryStagePersistence.js +45 -0
  47. package/data/persistence/principalHistoryStagePersistence.js.map +1 -1
  48. package/data/persistence/principalHistoryStageRetention.js +44 -0
  49. package/data/persistence/principalHistoryStageRetention.js.map +1 -0
  50. package/data/persistence/principalHistoryUnpublishedRetention.js +71 -0
  51. package/data/persistence/principalHistoryUnpublishedRetention.js.map +1 -0
  52. package/data/persistence/principalKeyEnvelopeArchivePersistence.js +63 -0
  53. package/data/persistence/principalKeyEnvelopeArchivePersistence.js.map +1 -0
  54. package/data/persistence/principalKeyEnvelopeCandidates.js +10 -1
  55. package/data/persistence/principalKeyEnvelopeCandidates.js.map +1 -1
  56. package/data/sqlite/principalHistoryEvidenceSchema.js +2 -0
  57. package/data/sqlite/principalHistoryEvidenceSchema.js.map +1 -1
  58. package/data/sqlite/principalHistoryNodeRetentionSchema.js +30 -0
  59. package/data/sqlite/principalHistoryNodeRetentionSchema.js.map +1 -0
  60. package/data/sqlite/principalHistoryRetentionSchema.js +40 -0
  61. package/data/sqlite/principalHistoryRetentionSchema.js.map +1 -0
  62. package/data/sqlite/principalHistoryStageSchema.js +2 -0
  63. package/data/sqlite/principalHistoryStageSchema.js.map +1 -1
  64. package/data/sqlite/schema.d.ts +453 -0
  65. package/data/sqlite/schema.js +6 -0
  66. package/data/sqlite/schema.js.map +1 -1
  67. package/data/sqlite/sqliteCommitGuards.js +49 -0
  68. package/data/sqlite/sqliteCommitGuards.js.map +1 -0
  69. package/data/sqlite/sqlitePersistenceRuntime.js +14 -2
  70. package/data/sqlite/sqlitePersistenceRuntime.js.map +1 -1
  71. package/index.d.ts +3 -1
  72. package/index.js.map +1 -1
  73. package/internal/api-client/ApiClient.d.ts +60 -137
  74. package/internal/api-client/ApiClient.js +7 -5
  75. package/internal/api-client/ApiClient.js.map +1 -1
  76. package/internal/api-client/apiRequestRuntime.js +7 -7
  77. package/internal/api-client/apiRequestRuntime.js.map +1 -1
  78. package/internal/api-client/documentPurge.js +25 -0
  79. package/internal/api-client/documentPurge.js.map +1 -0
  80. package/internal/api-client/organizationPolicyHistory.d.ts +53 -0
  81. package/internal/api-client/organizationPolicyHistory.js +15 -0
  82. package/internal/api-client/organizationPolicyHistory.js.map +1 -0
  83. package/internal/api-client/requestInternals.js +4 -4
  84. package/internal/api-client/requestInternals.js.map +1 -1
  85. package/internal/api-client/types.d.ts +2 -2
  86. package/internal/api-client/types.js.map +1 -1
  87. package/internal/crypto/keying/principalPolicyHistory.js +4 -0
  88. package/internal/crypto/keying/principalPolicyHistory.js.map +1 -1
  89. package/internal/crypto/keying/principalPolicyHistoryTypes.d.ts +2 -0
  90. package/internal/crypto/keying/principalPolicyHistoryTypes.js.map +1 -1
  91. package/internal/validators/operation/containerMutations.d.ts +448 -6528
  92. package/internal/validators/operation/documentMutations.d.ts +323 -579
  93. package/internal/validators/operation/documentMutations.js +22 -4
  94. package/internal/validators/operation/documentMutations.js.map +1 -1
  95. package/internal/validators/operation/documentSync.d.ts +26 -406
  96. package/internal/validators/operation/organizationPolicyHistory.d.ts +188 -310
  97. package/internal/validators/operation/organizationPolicyHistory.js +17 -3
  98. package/internal/validators/operation/organizationPolicyHistory.js.map +1 -1
  99. package/internal/validators/response/containerMutationError.d.ts +28 -408
  100. package/internal/validators/response/documentMutation.d.ts +232 -544
  101. package/internal/validators/response/documentMutation.js +1 -2
  102. package/internal/validators/response/documentMutation.js.map +1 -1
  103. package/internal/validators/response/documentSyncError.d.ts +26 -406
  104. package/internal/validators/response/documentSyncError.js +4 -3
  105. package/internal/validators/response/documentSyncError.js.map +1 -1
  106. package/internal/validators/response/index.d.ts +1 -1
  107. package/internal/validators/response/index.js +1 -1
  108. package/internal/validators/response/index.js.map +1 -1
  109. package/internal/validators/response/organizationPolicyHistory.d.ts +127 -309
  110. package/internal/validators/response/organizationPolicyHistory.js +10 -4
  111. package/internal/validators/response/organizationPolicyHistory.js.map +1 -1
  112. package/internal/validators/response/principal.d.ts +28 -408
  113. package/internal/validators/response/principal.js +3 -1
  114. package/internal/validators/response/principal.js.map +1 -1
  115. package/internal/validators/util/index.d.ts +1 -1
  116. package/internal/validators/util/index.js +1 -1
  117. package/internal/validators/util/index.js.map +1 -1
  118. package/internal/validators/util/principalHistoryWire.d.ts +2 -0
  119. package/internal/validators/util/principalHistoryWire.js +2 -0
  120. package/internal/validators/util/principalHistoryWire.js.map +1 -1
  121. package/package.json +1 -1
  122. package/workflows/container-contents/container-state/createWithMetadata.js +19 -49
  123. package/workflows/container-contents/container-state/createWithMetadata.js.map +1 -1
  124. package/workflows/container-contents/container-state/groupGrantVerification.js +29 -0
  125. package/workflows/container-contents/container-state/groupGrantVerification.js.map +1 -1
  126. package/workflows/container-contents/container-state/groupShareEpoch.js +33 -0
  127. package/workflows/container-contents/container-state/groupShareEpoch.js.map +1 -0
  128. package/workflows/container-contents/container-state/remote.js +4 -1
  129. package/workflows/container-contents/container-state/remote.js.map +1 -1
  130. package/workflows/container-contents/container-state/share.js +2 -24
  131. package/workflows/container-contents/container-state/share.js.map +1 -1
  132. package/workflows/container-contents/documentTombstoneEvidence.js +23 -12
  133. package/workflows/container-contents/documentTombstoneEvidence.js.map +1 -1
  134. package/workflows/containers/child/create.js +1 -3
  135. package/workflows/containers/child/create.js.map +1 -1
  136. package/workflows/containers/child/createSubmission.d.ts +1 -3
  137. package/workflows/containers/child/createSubmission.js +13 -15
  138. package/workflows/containers/child/createSubmission.js.map +1 -1
  139. package/workflows/containers/child/currentShareGrantMutation.js +82 -0
  140. package/workflows/containers/child/currentShareGrantMutation.js.map +1 -0
  141. package/workflows/containers/child/currentSharePrincipalPolicy.js +83 -0
  142. package/workflows/containers/child/currentSharePrincipalPolicy.js.map +1 -0
  143. package/workflows/containers/child/mutationSubmit.js +1 -1
  144. package/workflows/containers/child/mutationSubmit.js.map +1 -1
  145. package/workflows/containers/child/runtimeCurrentGroupShare.js +82 -0
  146. package/workflows/containers/child/runtimeCurrentGroupShare.js.map +1 -0
  147. package/workflows/containers/child/share.js +1 -14
  148. package/workflows/containers/child/share.js.map +1 -1
  149. package/workflows/containers/child/shareProjection.js +15 -0
  150. package/workflows/containers/child/shareProjection.js.map +1 -0
  151. package/workflows/documents/purge.d.ts +3 -0
  152. package/workflows/documents/purge.js +13 -0
  153. package/workflows/documents/purge.js.map +1 -1
  154. package/workflows/documents/sync.js +2 -0
  155. package/workflows/documents/sync.js.map +1 -1
  156. package/workflows/documents/syncFailures.js +2 -2
  157. package/workflows/documents/syncFailures.js.map +1 -1
  158. package/workflows/documents/syncPolicyRepair.js +15 -13
  159. package/workflows/documents/syncPolicyRepair.js.map +1 -1
  160. package/workflows/organizations/initialPrincipalCurrentPublication.js +2 -0
  161. package/workflows/organizations/initialPrincipalCurrentPublication.js.map +1 -1
  162. package/workflows/organizations/loadPolicyHistoryDetails.js +31 -32
  163. package/workflows/organizations/loadPolicyHistoryDetails.js.map +1 -1
  164. package/workflows/organizations/organizationPolicyHistoryDetails.js +37 -15
  165. package/workflows/organizations/organizationPolicyHistoryDetails.js.map +1 -1
  166. package/workflows/organizations/organizationPolicyHistoryVerification.js +56 -69
  167. package/workflows/organizations/organizationPolicyHistoryVerification.js.map +1 -1
  168. package/workflows/organizations/policyHistoryCache.js +5 -2
  169. package/workflows/organizations/policyHistoryCache.js.map +1 -1
  170. package/workflows/organizations/policyHistoryTypes.d.ts +1 -0
  171. package/workflows/organizations/policyHistoryTypes.js.map +1 -1
  172. package/workflows/organizations/retainAcknowledgedPrincipalCurrents.js +4 -1
  173. package/workflows/organizations/retainAcknowledgedPrincipalCurrents.js.map +1 -1
  174. package/workflows/principals/loadRecoveredPrincipalHistoryPage.d.ts +0 -1
  175. package/workflows/principals/loadRecoveredPrincipalHistoryPage.js +1 -2
  176. package/workflows/principals/loadRecoveredPrincipalHistoryPage.js.map +1 -1
  177. package/workflows/principals/policyRepair.js +38 -0
  178. package/workflows/principals/policyRepair.js.map +1 -0
  179. package/workflows/principals/policyRepairBudget.d.ts +2 -2
  180. package/workflows/principals/policyRepairBudget.js +3 -3
  181. package/workflows/principals/policyRepairBudget.js.map +1 -1
  182. package/workflows/principals/principalHistoryRecoveryPrefix.js +4 -0
  183. package/workflows/principals/principalHistoryRecoveryPrefix.js.map +1 -1
  184. package/workflows/principals/principalRecoveryLocalPreference.js +3 -2
  185. package/workflows/principals/principalRecoveryLocalPreference.js.map +1 -1
  186. package/workflows/principals/publicPrincipalHistoryPage.js +1 -0
  187. package/workflows/principals/publicPrincipalHistoryPage.js.map +1 -1
  188. package/workflows/principals/publicPrincipalHistoryProgress.js +1 -0
  189. package/workflows/principals/publicPrincipalHistoryProgress.js.map +1 -1
  190. package/workflows/principals/publicPrincipalHistoryTypes.d.ts +2 -0
  191. package/workflows/principals/publicPrincipalHistoryTypes.js.map +1 -1
  192. package/workflows/principals/publicProjectionPrincipal.js +1 -0
  193. package/workflows/principals/publicProjectionPrincipal.js.map +1 -1
  194. package/workflows/principals/recoverPrincipalHistoryPage.js +2 -1
  195. package/workflows/principals/recoverPrincipalHistoryPage.js.map +1 -1
  196. package/workflows/principals/recoverPrincipalPolicyHistory.js +1 -0
  197. package/workflows/principals/recoverPrincipalPolicyHistory.js.map +1 -1
  198. package/workflows/principals/recoverPublicPrincipalHistory.js +2 -0
  199. package/workflows/principals/recoverPublicPrincipalHistory.js.map +1 -1
  200. package/workflows/principals/runtimePolicyRecovery.js +2 -1
  201. package/workflows/principals/runtimePolicyRecovery.js.map +1 -1
  202. package/workflows/principals/selectPublicPrincipalHistory.js +21 -15
  203. package/workflows/principals/selectPublicPrincipalHistory.js.map +1 -1
  204. package/workflows/sync/remoteResetPrincipalScope.js +6 -0
  205. package/workflows/sync/remoteResetPrincipalScope.js.map +1 -1
  206. package/data/keyingProjectionVerification/principalPolicySnapshotVerification.js +0 -208
  207. package/data/keyingProjectionVerification/principalPolicySnapshotVerification.js.map +0 -1
  208. package/data/keyingProjectionVerification/snapshotVerificationCache.js +0 -39
  209. package/data/keyingProjectionVerification/snapshotVerificationCache.js.map +0 -1
  210. package/workflows/containers/child/policyRepair.js +0 -23
  211. package/workflows/containers/child/policyRepair.js.map +0 -1
@@ -1915,6 +1915,23 @@ export declare const purgeDocumentOperation: Omit<{
1915
1915
  event: Record<string, unknown>;
1916
1916
  }>>;
1917
1917
  readonly failureResponses: {
1918
+ readonly 503: z.ZodType<{
1919
+ error: string;
1920
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
1921
+ committed?: boolean | undefined;
1922
+ }, {
1923
+ error: string;
1924
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
1925
+ committed?: boolean | undefined;
1926
+ }, z.core.$ZodTypeInternals<{
1927
+ error: string;
1928
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
1929
+ committed?: boolean | undefined;
1930
+ }, {
1931
+ error: string;
1932
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
1933
+ committed?: boolean | undefined;
1934
+ }>>;
1918
1935
  readonly 400: z.ZodType<{
1919
1936
  error: string;
1920
1937
  }, {
@@ -1980,15 +1997,6 @@ export declare const purgeDocumentOperation: Omit<{
1980
1997
  }, {
1981
1998
  error: string;
1982
1999
  }>>;
1983
- readonly 503: z.ZodType<{
1984
- error: string;
1985
- }, {
1986
- error: string;
1987
- }, z.core.$ZodTypeInternals<{
1988
- error: string;
1989
- }, {
1990
- error: string;
1991
- }>>;
1992
2000
  };
1993
2001
  readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503];
1994
2002
  readonly id: "documents.purge";
@@ -1997,6 +2005,9 @@ export declare const purgeDocumentOperation: Omit<{
1997
2005
  documentId: z.ZodString;
1998
2006
  }, z.core.$strict>;
1999
2007
  readonly path: "/documents/{documentId}/purge";
2008
+ readonly responseDescriptions: {
2009
+ readonly 202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.";
2010
+ };
2000
2011
  readonly responses: {
2001
2012
  readonly 200: z.ZodType<{
2002
2013
  reclaimedBlobStorageKeys: string[];
@@ -2057,88 +2068,49 @@ export declare const purgeDocumentOperation: Omit<{
2057
2068
  eventHash: string;
2058
2069
  };
2059
2070
  purgedAt: string;
2060
- principalPolicySnapshots: {
2061
- currentGrants: {
2062
- accessLevel: "admin" | "read" | "write";
2063
- containerId: string;
2064
- }[];
2065
- currentProjection: {
2066
- role: "member" | "admin";
2067
- userId: string;
2068
- }[];
2069
- currentState: {
2070
- createdAt: string;
2071
- encapsulationPublicKey: string;
2072
- externalAuthority: {
2071
+ policyEvidence: {
2072
+ organization: {
2073
+ head: {
2073
2074
  keyEpoch: number;
2074
2075
  keyFingerprint: string;
2075
2076
  principalId: string;
2076
- principalType: "group";
2077
+ principalType: "group" | "organization";
2077
2078
  stateHash: string;
2078
2079
  version: number;
2079
- } | null;
2080
- grantCount: number;
2081
- grantRoot: string;
2082
- keyEpoch: number;
2083
- keyFingerprint: string;
2084
- memberCount: number;
2085
- memberEnvelopesRoot: string;
2086
- membershipMode: "projection";
2087
- membershipRoot: string;
2088
- payloadCiphertextHash: string;
2089
- prevStateHash: string | null;
2090
- principalId: string;
2091
- principalType: "group" | "organization";
2092
- projectionRoot: string;
2093
- signature: string;
2094
- signedAt: string;
2095
- signerUserId: string;
2096
- signerUserKeyFingerprint: string;
2097
- stateHash: string;
2098
- version: number;
2099
- };
2100
- previousStates: {
2101
- grants: {
2102
- accessLevel: "admin" | "read" | "write";
2103
- containerId: string;
2104
- }[];
2105
- projection: {
2106
- role: "member" | "admin";
2107
- userId: string;
2108
- }[];
2109
- state: {
2080
+ };
2081
+ grant: string;
2082
+ } | null;
2083
+ organizationPayloads: {
2084
+ reference: {
2085
+ keyEpoch: number;
2086
+ keyFingerprint: string;
2087
+ principalId: string;
2088
+ principalType: "group" | "organization";
2089
+ stateHash: string;
2090
+ version: number;
2091
+ };
2092
+ payload: {
2093
+ cipherSuite: "aes-256-gcm";
2094
+ ciphertext: string;
2095
+ ciphertextHash: string;
2110
2096
  createdAt: string;
2111
- encapsulationPublicKey: string;
2112
- externalAuthority: {
2113
- keyEpoch: number;
2114
- keyFingerprint: string;
2115
- principalId: string;
2116
- principalType: "group";
2117
- stateHash: string;
2118
- version: number;
2119
- } | null;
2120
- grantCount: number;
2121
- grantRoot: string;
2097
+ principalId: string;
2098
+ principalType: "group" | "organization";
2099
+ stateHash: string;
2100
+ };
2101
+ }[];
2102
+ groups: {
2103
+ head: {
2122
2104
  keyEpoch: number;
2123
2105
  keyFingerprint: string;
2124
- memberCount: number;
2125
- memberEnvelopesRoot: string;
2126
- membershipMode: "projection";
2127
- membershipRoot: string;
2128
- payloadCiphertextHash: string;
2129
- prevStateHash: string | null;
2130
2106
  principalId: string;
2131
2107
  principalType: "group" | "organization";
2132
- projectionRoot: string;
2133
- signature: string;
2134
- signedAt: string;
2135
- signerUserId: string;
2136
- signerUserKeyFingerprint: string;
2137
2108
  stateHash: string;
2138
2109
  version: number;
2139
2110
  };
2111
+ grant: string;
2140
2112
  }[];
2141
- }[];
2113
+ };
2142
2114
  }, {
2143
2115
  reclaimedBlobStorageKeys: string[];
2144
2116
  authorizingContainerPath: {
@@ -2198,88 +2170,49 @@ export declare const purgeDocumentOperation: Omit<{
2198
2170
  eventHash: string;
2199
2171
  };
2200
2172
  purgedAt: string;
2201
- principalPolicySnapshots: {
2202
- currentGrants: {
2203
- accessLevel: "admin" | "read" | "write";
2204
- containerId: string;
2205
- }[];
2206
- currentProjection: {
2207
- role: "member" | "admin";
2208
- userId: string;
2209
- }[];
2210
- currentState: {
2211
- createdAt: string;
2212
- encapsulationPublicKey: string;
2213
- externalAuthority: {
2173
+ policyEvidence: {
2174
+ organization: {
2175
+ head: {
2214
2176
  keyEpoch: number;
2215
2177
  keyFingerprint: string;
2216
2178
  principalId: string;
2217
- principalType: "group";
2179
+ principalType: "group" | "organization";
2218
2180
  stateHash: string;
2219
2181
  version: number;
2220
- } | null;
2221
- grantCount: number;
2222
- grantRoot: string;
2223
- keyEpoch: number;
2224
- keyFingerprint: string;
2225
- memberCount: number;
2226
- memberEnvelopesRoot: string;
2227
- membershipMode: "projection";
2228
- membershipRoot: string;
2229
- payloadCiphertextHash: string;
2230
- prevStateHash: string | null;
2231
- principalId: string;
2232
- principalType: "group" | "organization";
2233
- projectionRoot: string;
2234
- signature: string;
2235
- signedAt: string;
2236
- signerUserId: string;
2237
- signerUserKeyFingerprint: string;
2238
- stateHash: string;
2239
- version: number;
2240
- };
2241
- previousStates: {
2242
- grants: {
2243
- accessLevel: "admin" | "read" | "write";
2244
- containerId: string;
2245
- }[];
2246
- projection: {
2247
- role: "member" | "admin";
2248
- userId: string;
2249
- }[];
2250
- state: {
2182
+ };
2183
+ grant: string;
2184
+ } | null;
2185
+ organizationPayloads: {
2186
+ reference: {
2187
+ keyEpoch: number;
2188
+ keyFingerprint: string;
2189
+ principalId: string;
2190
+ principalType: "group" | "organization";
2191
+ stateHash: string;
2192
+ version: number;
2193
+ };
2194
+ payload: {
2195
+ cipherSuite: "aes-256-gcm";
2196
+ ciphertext: string;
2197
+ ciphertextHash: string;
2251
2198
  createdAt: string;
2252
- encapsulationPublicKey: string;
2253
- externalAuthority: {
2254
- keyEpoch: number;
2255
- keyFingerprint: string;
2256
- principalId: string;
2257
- principalType: "group";
2258
- stateHash: string;
2259
- version: number;
2260
- } | null;
2261
- grantCount: number;
2262
- grantRoot: string;
2199
+ principalId: string;
2200
+ principalType: "group" | "organization";
2201
+ stateHash: string;
2202
+ };
2203
+ }[];
2204
+ groups: {
2205
+ head: {
2263
2206
  keyEpoch: number;
2264
2207
  keyFingerprint: string;
2265
- memberCount: number;
2266
- memberEnvelopesRoot: string;
2267
- membershipMode: "projection";
2268
- membershipRoot: string;
2269
- payloadCiphertextHash: string;
2270
- prevStateHash: string | null;
2271
2208
  principalId: string;
2272
2209
  principalType: "group" | "organization";
2273
- projectionRoot: string;
2274
- signature: string;
2275
- signedAt: string;
2276
- signerUserId: string;
2277
- signerUserKeyFingerprint: string;
2278
2210
  stateHash: string;
2279
2211
  version: number;
2280
2212
  };
2213
+ grant: string;
2281
2214
  }[];
2282
- }[];
2215
+ };
2283
2216
  }, z.core.$ZodTypeInternals<{
2284
2217
  reclaimedBlobStorageKeys: string[];
2285
2218
  authorizingContainerPath: {
@@ -2339,88 +2272,49 @@ export declare const purgeDocumentOperation: Omit<{
2339
2272
  eventHash: string;
2340
2273
  };
2341
2274
  purgedAt: string;
2342
- principalPolicySnapshots: {
2343
- currentGrants: {
2344
- accessLevel: "admin" | "read" | "write";
2345
- containerId: string;
2346
- }[];
2347
- currentProjection: {
2348
- role: "member" | "admin";
2349
- userId: string;
2350
- }[];
2351
- currentState: {
2352
- createdAt: string;
2353
- encapsulationPublicKey: string;
2354
- externalAuthority: {
2275
+ policyEvidence: {
2276
+ organization: {
2277
+ head: {
2355
2278
  keyEpoch: number;
2356
2279
  keyFingerprint: string;
2357
2280
  principalId: string;
2358
- principalType: "group";
2281
+ principalType: "group" | "organization";
2359
2282
  stateHash: string;
2360
2283
  version: number;
2361
- } | null;
2362
- grantCount: number;
2363
- grantRoot: string;
2364
- keyEpoch: number;
2365
- keyFingerprint: string;
2366
- memberCount: number;
2367
- memberEnvelopesRoot: string;
2368
- membershipMode: "projection";
2369
- membershipRoot: string;
2370
- payloadCiphertextHash: string;
2371
- prevStateHash: string | null;
2372
- principalId: string;
2373
- principalType: "group" | "organization";
2374
- projectionRoot: string;
2375
- signature: string;
2376
- signedAt: string;
2377
- signerUserId: string;
2378
- signerUserKeyFingerprint: string;
2379
- stateHash: string;
2380
- version: number;
2381
- };
2382
- previousStates: {
2383
- grants: {
2384
- accessLevel: "admin" | "read" | "write";
2385
- containerId: string;
2386
- }[];
2387
- projection: {
2388
- role: "member" | "admin";
2389
- userId: string;
2390
- }[];
2391
- state: {
2284
+ };
2285
+ grant: string;
2286
+ } | null;
2287
+ organizationPayloads: {
2288
+ reference: {
2289
+ keyEpoch: number;
2290
+ keyFingerprint: string;
2291
+ principalId: string;
2292
+ principalType: "group" | "organization";
2293
+ stateHash: string;
2294
+ version: number;
2295
+ };
2296
+ payload: {
2297
+ cipherSuite: "aes-256-gcm";
2298
+ ciphertext: string;
2299
+ ciphertextHash: string;
2392
2300
  createdAt: string;
2393
- encapsulationPublicKey: string;
2394
- externalAuthority: {
2395
- keyEpoch: number;
2396
- keyFingerprint: string;
2397
- principalId: string;
2398
- principalType: "group";
2399
- stateHash: string;
2400
- version: number;
2401
- } | null;
2402
- grantCount: number;
2403
- grantRoot: string;
2301
+ principalId: string;
2302
+ principalType: "group" | "organization";
2303
+ stateHash: string;
2304
+ };
2305
+ }[];
2306
+ groups: {
2307
+ head: {
2404
2308
  keyEpoch: number;
2405
2309
  keyFingerprint: string;
2406
- memberCount: number;
2407
- memberEnvelopesRoot: string;
2408
- membershipMode: "projection";
2409
- membershipRoot: string;
2410
- payloadCiphertextHash: string;
2411
- prevStateHash: string | null;
2412
2310
  principalId: string;
2413
2311
  principalType: "group" | "organization";
2414
- projectionRoot: string;
2415
- signature: string;
2416
- signedAt: string;
2417
- signerUserId: string;
2418
- signerUserKeyFingerprint: string;
2419
2312
  stateHash: string;
2420
2313
  version: number;
2421
2314
  };
2315
+ grant: string;
2422
2316
  }[];
2423
- }[];
2317
+ };
2424
2318
  }, {
2425
2319
  reclaimedBlobStorageKeys: string[];
2426
2320
  authorizingContainerPath: {
@@ -2480,92 +2374,79 @@ export declare const purgeDocumentOperation: Omit<{
2480
2374
  eventHash: string;
2481
2375
  };
2482
2376
  purgedAt: string;
2483
- principalPolicySnapshots: {
2484
- currentGrants: {
2485
- accessLevel: "admin" | "read" | "write";
2486
- containerId: string;
2487
- }[];
2488
- currentProjection: {
2489
- role: "member" | "admin";
2490
- userId: string;
2491
- }[];
2492
- currentState: {
2493
- createdAt: string;
2494
- encapsulationPublicKey: string;
2495
- externalAuthority: {
2377
+ policyEvidence: {
2378
+ organization: {
2379
+ head: {
2496
2380
  keyEpoch: number;
2497
2381
  keyFingerprint: string;
2498
2382
  principalId: string;
2499
- principalType: "group";
2383
+ principalType: "group" | "organization";
2500
2384
  stateHash: string;
2501
2385
  version: number;
2502
- } | null;
2503
- grantCount: number;
2504
- grantRoot: string;
2505
- keyEpoch: number;
2506
- keyFingerprint: string;
2507
- memberCount: number;
2508
- memberEnvelopesRoot: string;
2509
- membershipMode: "projection";
2510
- membershipRoot: string;
2511
- payloadCiphertextHash: string;
2512
- prevStateHash: string | null;
2513
- principalId: string;
2514
- principalType: "group" | "organization";
2515
- projectionRoot: string;
2516
- signature: string;
2517
- signedAt: string;
2518
- signerUserId: string;
2519
- signerUserKeyFingerprint: string;
2520
- stateHash: string;
2521
- version: number;
2522
- };
2523
- previousStates: {
2524
- grants: {
2525
- accessLevel: "admin" | "read" | "write";
2526
- containerId: string;
2527
- }[];
2528
- projection: {
2529
- role: "member" | "admin";
2530
- userId: string;
2531
- }[];
2532
- state: {
2386
+ };
2387
+ grant: string;
2388
+ } | null;
2389
+ organizationPayloads: {
2390
+ reference: {
2391
+ keyEpoch: number;
2392
+ keyFingerprint: string;
2393
+ principalId: string;
2394
+ principalType: "group" | "organization";
2395
+ stateHash: string;
2396
+ version: number;
2397
+ };
2398
+ payload: {
2399
+ cipherSuite: "aes-256-gcm";
2400
+ ciphertext: string;
2401
+ ciphertextHash: string;
2533
2402
  createdAt: string;
2534
- encapsulationPublicKey: string;
2535
- externalAuthority: {
2536
- keyEpoch: number;
2537
- keyFingerprint: string;
2538
- principalId: string;
2539
- principalType: "group";
2540
- stateHash: string;
2541
- version: number;
2542
- } | null;
2543
- grantCount: number;
2544
- grantRoot: string;
2403
+ principalId: string;
2404
+ principalType: "group" | "organization";
2405
+ stateHash: string;
2406
+ };
2407
+ }[];
2408
+ groups: {
2409
+ head: {
2545
2410
  keyEpoch: number;
2546
2411
  keyFingerprint: string;
2547
- memberCount: number;
2548
- memberEnvelopesRoot: string;
2549
- membershipMode: "projection";
2550
- membershipRoot: string;
2551
- payloadCiphertextHash: string;
2552
- prevStateHash: string | null;
2553
2412
  principalId: string;
2554
2413
  principalType: "group" | "organization";
2555
- projectionRoot: string;
2556
- signature: string;
2557
- signedAt: string;
2558
- signerUserId: string;
2559
- signerUserKeyFingerprint: string;
2560
2414
  stateHash: string;
2561
2415
  version: number;
2562
2416
  };
2417
+ grant: string;
2563
2418
  }[];
2564
- }[];
2419
+ };
2565
2420
  }>>;
2421
+ readonly 202: z.ZodObject<{
2422
+ code: z.ZodLiteral<"principal_history_preparation_pending">;
2423
+ committed: z.ZodLiteral<false>;
2424
+ progressToken: z.ZodCustom<string, string>;
2425
+ }, z.core.$strict>;
2566
2426
  };
2427
+ readonly runtimeRefinements: readonly [{
2428
+ readonly id: "response.principal-history-preparation-rollback";
2429
+ readonly description: "A 503 with code principal_history_preparation_unavailable requires committed:false; other 503 responses do not guarantee rollback.";
2430
+ }];
2567
2431
  }, "failureResponses" | "failureStatuses"> & {
2568
2432
  readonly failureResponses: {
2433
+ readonly 503: z.ZodType<{
2434
+ error: string;
2435
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
2436
+ committed?: boolean | undefined;
2437
+ }, {
2438
+ error: string;
2439
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
2440
+ committed?: boolean | undefined;
2441
+ }, z.core.$ZodTypeInternals<{
2442
+ error: string;
2443
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
2444
+ committed?: boolean | undefined;
2445
+ }, {
2446
+ error: string;
2447
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
2448
+ committed?: boolean | undefined;
2449
+ }>>;
2569
2450
  readonly 400: z.ZodType<{
2570
2451
  error: string;
2571
2452
  }, {
@@ -2631,23 +2512,31 @@ export declare const purgeDocumentOperation: Omit<{
2631
2512
  }, {
2632
2513
  error: string;
2633
2514
  }>>;
2515
+ } & {
2516
+ readonly 503: typeof ErrorResponseSchema;
2517
+ };
2518
+ readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503] | readonly [400, 401, 402, 403, 404, 409, 500, 503, 503];
2519
+ };
2520
+ export declare const getDocumentPurgeProofOperation: Omit<{
2521
+ readonly auth: "session";
2522
+ readonly failureResponses: {
2634
2523
  readonly 503: z.ZodType<{
2635
2524
  error: string;
2525
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
2526
+ committed?: boolean | undefined;
2636
2527
  }, {
2637
2528
  error: string;
2529
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
2530
+ committed?: boolean | undefined;
2638
2531
  }, z.core.$ZodTypeInternals<{
2639
2532
  error: string;
2533
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
2534
+ committed?: boolean | undefined;
2640
2535
  }, {
2641
2536
  error: string;
2537
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
2538
+ committed?: boolean | undefined;
2642
2539
  }>>;
2643
- } & {
2644
- readonly 503: typeof ErrorResponseSchema;
2645
- };
2646
- readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503] | readonly [400, 401, 402, 403, 404, 409, 500, 503, 503];
2647
- };
2648
- export declare const getDocumentPurgeProofOperation: Omit<{
2649
- readonly auth: "session";
2650
- readonly failureResponses: {
2651
2540
  readonly 400: z.ZodType<{
2652
2541
  error: string;
2653
2542
  }, {
@@ -2713,15 +2602,6 @@ export declare const getDocumentPurgeProofOperation: Omit<{
2713
2602
  }, {
2714
2603
  error: string;
2715
2604
  }>>;
2716
- readonly 503: z.ZodType<{
2717
- error: string;
2718
- }, {
2719
- error: string;
2720
- }, z.core.$ZodTypeInternals<{
2721
- error: string;
2722
- }, {
2723
- error: string;
2724
- }>>;
2725
2605
  };
2726
2606
  readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503];
2727
2607
  readonly id: "documents.purgeProof";
@@ -2733,6 +2613,9 @@ export declare const getDocumentPurgeProofOperation: Omit<{
2733
2613
  readonly query: z.ZodObject<{
2734
2614
  documentCheckpointManifestHash: z.ZodOptional<z.ZodString>;
2735
2615
  }, z.core.$strict>;
2616
+ readonly responseDescriptions: {
2617
+ readonly 202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.";
2618
+ };
2736
2619
  readonly responses: {
2737
2620
  readonly 200: z.ZodType<{
2738
2621
  authorizingContainerPath: {
@@ -2792,88 +2675,49 @@ export declare const getDocumentPurgeProofOperation: Omit<{
2792
2675
  eventHash: string;
2793
2676
  };
2794
2677
  purgedAt: string;
2795
- principalPolicySnapshots: {
2796
- currentGrants: {
2797
- accessLevel: "admin" | "read" | "write";
2798
- containerId: string;
2799
- }[];
2800
- currentProjection: {
2801
- role: "member" | "admin";
2802
- userId: string;
2803
- }[];
2804
- currentState: {
2805
- createdAt: string;
2806
- encapsulationPublicKey: string;
2807
- externalAuthority: {
2678
+ policyEvidence: {
2679
+ organization: {
2680
+ head: {
2808
2681
  keyEpoch: number;
2809
2682
  keyFingerprint: string;
2810
2683
  principalId: string;
2811
- principalType: "group";
2684
+ principalType: "group" | "organization";
2812
2685
  stateHash: string;
2813
2686
  version: number;
2814
- } | null;
2815
- grantCount: number;
2816
- grantRoot: string;
2817
- keyEpoch: number;
2818
- keyFingerprint: string;
2819
- memberCount: number;
2820
- memberEnvelopesRoot: string;
2821
- membershipMode: "projection";
2822
- membershipRoot: string;
2823
- payloadCiphertextHash: string;
2824
- prevStateHash: string | null;
2825
- principalId: string;
2826
- principalType: "group" | "organization";
2827
- projectionRoot: string;
2828
- signature: string;
2829
- signedAt: string;
2830
- signerUserId: string;
2831
- signerUserKeyFingerprint: string;
2832
- stateHash: string;
2833
- version: number;
2834
- };
2835
- previousStates: {
2836
- grants: {
2837
- accessLevel: "admin" | "read" | "write";
2838
- containerId: string;
2839
- }[];
2840
- projection: {
2841
- role: "member" | "admin";
2842
- userId: string;
2843
- }[];
2844
- state: {
2687
+ };
2688
+ grant: string;
2689
+ } | null;
2690
+ organizationPayloads: {
2691
+ reference: {
2692
+ keyEpoch: number;
2693
+ keyFingerprint: string;
2694
+ principalId: string;
2695
+ principalType: "group" | "organization";
2696
+ stateHash: string;
2697
+ version: number;
2698
+ };
2699
+ payload: {
2700
+ cipherSuite: "aes-256-gcm";
2701
+ ciphertext: string;
2702
+ ciphertextHash: string;
2845
2703
  createdAt: string;
2846
- encapsulationPublicKey: string;
2847
- externalAuthority: {
2848
- keyEpoch: number;
2849
- keyFingerprint: string;
2850
- principalId: string;
2851
- principalType: "group";
2852
- stateHash: string;
2853
- version: number;
2854
- } | null;
2855
- grantCount: number;
2856
- grantRoot: string;
2704
+ principalId: string;
2705
+ principalType: "group" | "organization";
2706
+ stateHash: string;
2707
+ };
2708
+ }[];
2709
+ groups: {
2710
+ head: {
2857
2711
  keyEpoch: number;
2858
2712
  keyFingerprint: string;
2859
- memberCount: number;
2860
- memberEnvelopesRoot: string;
2861
- membershipMode: "projection";
2862
- membershipRoot: string;
2863
- payloadCiphertextHash: string;
2864
- prevStateHash: string | null;
2865
2713
  principalId: string;
2866
2714
  principalType: "group" | "organization";
2867
- projectionRoot: string;
2868
- signature: string;
2869
- signedAt: string;
2870
- signerUserId: string;
2871
- signerUserKeyFingerprint: string;
2872
2715
  stateHash: string;
2873
2716
  version: number;
2874
2717
  };
2718
+ grant: string;
2875
2719
  }[];
2876
- }[];
2720
+ };
2877
2721
  }, {
2878
2722
  authorizingContainerPath: {
2879
2723
  event: {
@@ -2932,88 +2776,49 @@ export declare const getDocumentPurgeProofOperation: Omit<{
2932
2776
  eventHash: string;
2933
2777
  };
2934
2778
  purgedAt: string;
2935
- principalPolicySnapshots: {
2936
- currentGrants: {
2937
- accessLevel: "admin" | "read" | "write";
2938
- containerId: string;
2939
- }[];
2940
- currentProjection: {
2941
- role: "member" | "admin";
2942
- userId: string;
2943
- }[];
2944
- currentState: {
2945
- createdAt: string;
2946
- encapsulationPublicKey: string;
2947
- externalAuthority: {
2779
+ policyEvidence: {
2780
+ organization: {
2781
+ head: {
2948
2782
  keyEpoch: number;
2949
2783
  keyFingerprint: string;
2950
2784
  principalId: string;
2951
- principalType: "group";
2785
+ principalType: "group" | "organization";
2952
2786
  stateHash: string;
2953
2787
  version: number;
2954
- } | null;
2955
- grantCount: number;
2956
- grantRoot: string;
2957
- keyEpoch: number;
2958
- keyFingerprint: string;
2959
- memberCount: number;
2960
- memberEnvelopesRoot: string;
2961
- membershipMode: "projection";
2962
- membershipRoot: string;
2963
- payloadCiphertextHash: string;
2964
- prevStateHash: string | null;
2965
- principalId: string;
2966
- principalType: "group" | "organization";
2967
- projectionRoot: string;
2968
- signature: string;
2969
- signedAt: string;
2970
- signerUserId: string;
2971
- signerUserKeyFingerprint: string;
2972
- stateHash: string;
2973
- version: number;
2974
- };
2975
- previousStates: {
2976
- grants: {
2977
- accessLevel: "admin" | "read" | "write";
2978
- containerId: string;
2979
- }[];
2980
- projection: {
2981
- role: "member" | "admin";
2982
- userId: string;
2983
- }[];
2984
- state: {
2788
+ };
2789
+ grant: string;
2790
+ } | null;
2791
+ organizationPayloads: {
2792
+ reference: {
2793
+ keyEpoch: number;
2794
+ keyFingerprint: string;
2795
+ principalId: string;
2796
+ principalType: "group" | "organization";
2797
+ stateHash: string;
2798
+ version: number;
2799
+ };
2800
+ payload: {
2801
+ cipherSuite: "aes-256-gcm";
2802
+ ciphertext: string;
2803
+ ciphertextHash: string;
2985
2804
  createdAt: string;
2986
- encapsulationPublicKey: string;
2987
- externalAuthority: {
2988
- keyEpoch: number;
2989
- keyFingerprint: string;
2990
- principalId: string;
2991
- principalType: "group";
2992
- stateHash: string;
2993
- version: number;
2994
- } | null;
2995
- grantCount: number;
2996
- grantRoot: string;
2805
+ principalId: string;
2806
+ principalType: "group" | "organization";
2807
+ stateHash: string;
2808
+ };
2809
+ }[];
2810
+ groups: {
2811
+ head: {
2997
2812
  keyEpoch: number;
2998
2813
  keyFingerprint: string;
2999
- memberCount: number;
3000
- memberEnvelopesRoot: string;
3001
- membershipMode: "projection";
3002
- membershipRoot: string;
3003
- payloadCiphertextHash: string;
3004
- prevStateHash: string | null;
3005
2814
  principalId: string;
3006
2815
  principalType: "group" | "organization";
3007
- projectionRoot: string;
3008
- signature: string;
3009
- signedAt: string;
3010
- signerUserId: string;
3011
- signerUserKeyFingerprint: string;
3012
2816
  stateHash: string;
3013
2817
  version: number;
3014
2818
  };
2819
+ grant: string;
3015
2820
  }[];
3016
- }[];
2821
+ };
3017
2822
  }, z.core.$ZodTypeInternals<{
3018
2823
  authorizingContainerPath: {
3019
2824
  event: {
@@ -3072,88 +2877,49 @@ export declare const getDocumentPurgeProofOperation: Omit<{
3072
2877
  eventHash: string;
3073
2878
  };
3074
2879
  purgedAt: string;
3075
- principalPolicySnapshots: {
3076
- currentGrants: {
3077
- accessLevel: "admin" | "read" | "write";
3078
- containerId: string;
3079
- }[];
3080
- currentProjection: {
3081
- role: "member" | "admin";
3082
- userId: string;
3083
- }[];
3084
- currentState: {
3085
- createdAt: string;
3086
- encapsulationPublicKey: string;
3087
- externalAuthority: {
2880
+ policyEvidence: {
2881
+ organization: {
2882
+ head: {
3088
2883
  keyEpoch: number;
3089
2884
  keyFingerprint: string;
3090
2885
  principalId: string;
3091
- principalType: "group";
2886
+ principalType: "group" | "organization";
3092
2887
  stateHash: string;
3093
2888
  version: number;
3094
- } | null;
3095
- grantCount: number;
3096
- grantRoot: string;
3097
- keyEpoch: number;
3098
- keyFingerprint: string;
3099
- memberCount: number;
3100
- memberEnvelopesRoot: string;
3101
- membershipMode: "projection";
3102
- membershipRoot: string;
3103
- payloadCiphertextHash: string;
3104
- prevStateHash: string | null;
3105
- principalId: string;
3106
- principalType: "group" | "organization";
3107
- projectionRoot: string;
3108
- signature: string;
3109
- signedAt: string;
3110
- signerUserId: string;
3111
- signerUserKeyFingerprint: string;
3112
- stateHash: string;
3113
- version: number;
3114
- };
3115
- previousStates: {
3116
- grants: {
3117
- accessLevel: "admin" | "read" | "write";
3118
- containerId: string;
3119
- }[];
3120
- projection: {
3121
- role: "member" | "admin";
3122
- userId: string;
3123
- }[];
3124
- state: {
2889
+ };
2890
+ grant: string;
2891
+ } | null;
2892
+ organizationPayloads: {
2893
+ reference: {
2894
+ keyEpoch: number;
2895
+ keyFingerprint: string;
2896
+ principalId: string;
2897
+ principalType: "group" | "organization";
2898
+ stateHash: string;
2899
+ version: number;
2900
+ };
2901
+ payload: {
2902
+ cipherSuite: "aes-256-gcm";
2903
+ ciphertext: string;
2904
+ ciphertextHash: string;
3125
2905
  createdAt: string;
3126
- encapsulationPublicKey: string;
3127
- externalAuthority: {
3128
- keyEpoch: number;
3129
- keyFingerprint: string;
3130
- principalId: string;
3131
- principalType: "group";
3132
- stateHash: string;
3133
- version: number;
3134
- } | null;
3135
- grantCount: number;
3136
- grantRoot: string;
2906
+ principalId: string;
2907
+ principalType: "group" | "organization";
2908
+ stateHash: string;
2909
+ };
2910
+ }[];
2911
+ groups: {
2912
+ head: {
3137
2913
  keyEpoch: number;
3138
2914
  keyFingerprint: string;
3139
- memberCount: number;
3140
- memberEnvelopesRoot: string;
3141
- membershipMode: "projection";
3142
- membershipRoot: string;
3143
- payloadCiphertextHash: string;
3144
- prevStateHash: string | null;
3145
2915
  principalId: string;
3146
2916
  principalType: "group" | "organization";
3147
- projectionRoot: string;
3148
- signature: string;
3149
- signedAt: string;
3150
- signerUserId: string;
3151
- signerUserKeyFingerprint: string;
3152
2917
  stateHash: string;
3153
2918
  version: number;
3154
2919
  };
2920
+ grant: string;
3155
2921
  }[];
3156
- }[];
2922
+ };
3157
2923
  }, {
3158
2924
  authorizingContainerPath: {
3159
2925
  event: {
@@ -3212,92 +2978,79 @@ export declare const getDocumentPurgeProofOperation: Omit<{
3212
2978
  eventHash: string;
3213
2979
  };
3214
2980
  purgedAt: string;
3215
- principalPolicySnapshots: {
3216
- currentGrants: {
3217
- accessLevel: "admin" | "read" | "write";
3218
- containerId: string;
3219
- }[];
3220
- currentProjection: {
3221
- role: "member" | "admin";
3222
- userId: string;
3223
- }[];
3224
- currentState: {
3225
- createdAt: string;
3226
- encapsulationPublicKey: string;
3227
- externalAuthority: {
2981
+ policyEvidence: {
2982
+ organization: {
2983
+ head: {
3228
2984
  keyEpoch: number;
3229
2985
  keyFingerprint: string;
3230
2986
  principalId: string;
3231
- principalType: "group";
2987
+ principalType: "group" | "organization";
3232
2988
  stateHash: string;
3233
2989
  version: number;
3234
- } | null;
3235
- grantCount: number;
3236
- grantRoot: string;
3237
- keyEpoch: number;
3238
- keyFingerprint: string;
3239
- memberCount: number;
3240
- memberEnvelopesRoot: string;
3241
- membershipMode: "projection";
3242
- membershipRoot: string;
3243
- payloadCiphertextHash: string;
3244
- prevStateHash: string | null;
3245
- principalId: string;
3246
- principalType: "group" | "organization";
3247
- projectionRoot: string;
3248
- signature: string;
3249
- signedAt: string;
3250
- signerUserId: string;
3251
- signerUserKeyFingerprint: string;
3252
- stateHash: string;
3253
- version: number;
3254
- };
3255
- previousStates: {
3256
- grants: {
3257
- accessLevel: "admin" | "read" | "write";
3258
- containerId: string;
3259
- }[];
3260
- projection: {
3261
- role: "member" | "admin";
3262
- userId: string;
3263
- }[];
3264
- state: {
2990
+ };
2991
+ grant: string;
2992
+ } | null;
2993
+ organizationPayloads: {
2994
+ reference: {
2995
+ keyEpoch: number;
2996
+ keyFingerprint: string;
2997
+ principalId: string;
2998
+ principalType: "group" | "organization";
2999
+ stateHash: string;
3000
+ version: number;
3001
+ };
3002
+ payload: {
3003
+ cipherSuite: "aes-256-gcm";
3004
+ ciphertext: string;
3005
+ ciphertextHash: string;
3265
3006
  createdAt: string;
3266
- encapsulationPublicKey: string;
3267
- externalAuthority: {
3268
- keyEpoch: number;
3269
- keyFingerprint: string;
3270
- principalId: string;
3271
- principalType: "group";
3272
- stateHash: string;
3273
- version: number;
3274
- } | null;
3275
- grantCount: number;
3276
- grantRoot: string;
3007
+ principalId: string;
3008
+ principalType: "group" | "organization";
3009
+ stateHash: string;
3010
+ };
3011
+ }[];
3012
+ groups: {
3013
+ head: {
3277
3014
  keyEpoch: number;
3278
3015
  keyFingerprint: string;
3279
- memberCount: number;
3280
- memberEnvelopesRoot: string;
3281
- membershipMode: "projection";
3282
- membershipRoot: string;
3283
- payloadCiphertextHash: string;
3284
- prevStateHash: string | null;
3285
3016
  principalId: string;
3286
3017
  principalType: "group" | "organization";
3287
- projectionRoot: string;
3288
- signature: string;
3289
- signedAt: string;
3290
- signerUserId: string;
3291
- signerUserKeyFingerprint: string;
3292
3018
  stateHash: string;
3293
3019
  version: number;
3294
3020
  };
3021
+ grant: string;
3295
3022
  }[];
3296
- }[];
3023
+ };
3297
3024
  }>>;
3025
+ readonly 202: z.ZodObject<{
3026
+ code: z.ZodLiteral<"principal_history_preparation_pending">;
3027
+ committed: z.ZodLiteral<false>;
3028
+ progressToken: z.ZodCustom<string, string>;
3029
+ }, z.core.$strict>;
3298
3030
  };
3031
+ readonly runtimeRefinements: readonly [{
3032
+ readonly id: "response.principal-history-preparation-rollback";
3033
+ readonly description: "A 503 with code principal_history_preparation_unavailable requires committed:false; other 503 responses do not guarantee rollback.";
3034
+ }];
3299
3035
  }, "failureResponses" | "failureStatuses"> & {
3300
3036
  readonly failureResponses: {
3037
+ readonly 503: z.ZodType<{
3038
+ error: string;
3039
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
3040
+ committed?: boolean | undefined;
3041
+ }, {
3042
+ error: string;
3043
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
3044
+ committed?: boolean | undefined;
3045
+ }, z.core.$ZodTypeInternals<{
3046
+ error: string;
3047
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
3048
+ committed?: boolean | undefined;
3049
+ }, {
3050
+ error: string;
3051
+ code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
3052
+ committed?: boolean | undefined;
3053
+ }>>;
3301
3054
  readonly 400: z.ZodType<{
3302
3055
  error: string;
3303
3056
  }, {
@@ -3363,15 +3116,6 @@ export declare const getDocumentPurgeProofOperation: Omit<{
3363
3116
  }, {
3364
3117
  error: string;
3365
3118
  }>>;
3366
- readonly 503: z.ZodType<{
3367
- error: string;
3368
- }, {
3369
- error: string;
3370
- }, z.core.$ZodTypeInternals<{
3371
- error: string;
3372
- }, {
3373
- error: string;
3374
- }>>;
3375
3119
  } & {
3376
3120
  readonly 503: typeof ErrorResponseSchema;
3377
3121
  };