@tearleads/client-sdk 0.1.19 → 0.1.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (211) hide show
  1. package/client/organizations/index.js +2 -2
  2. package/client/organizations/index.js.map +1 -1
  3. package/client/organizations/organizationHistory.js +66 -0
  4. package/client/organizations/organizationHistory.js.map +1 -0
  5. package/client/organizations/organizationReadModels.d.ts +1 -1
  6. package/client/organizations/organizationReadModels.js +7 -27
  7. package/client/organizations/organizationReadModels.js.map +1 -1
  8. package/client/organizations/organizationsTypes.d.ts +1 -1
  9. package/client/organizations/organizationsTypes.js.map +1 -1
  10. package/data/containers/shared/types.d.ts +2 -2
  11. package/data/containers/shared/types.js.map +1 -1
  12. package/data/documents/shared/syncSubmitFailure.d.ts +2 -2
  13. package/data/documents/shared/syncSubmitFailure.js.map +1 -1
  14. package/data/keyingProjectionVerification/documentPurgeCheckpointCurrency.js +34 -8
  15. package/data/keyingProjectionVerification/documentPurgeCheckpointCurrency.js.map +1 -1
  16. package/data/keyingProjectionVerification/documentPurgeDocumentChainVerification.js.map +1 -1
  17. package/data/keyingProjectionVerification/documentPurgePolicyCheckpoints.js +17 -0
  18. package/data/keyingProjectionVerification/documentPurgePolicyCheckpoints.js.map +1 -0
  19. package/data/keyingProjectionVerification/documentPurgePolicyCurrency.js +55 -0
  20. package/data/keyingProjectionVerification/documentPurgePolicyCurrency.js.map +1 -0
  21. package/data/keyingProjectionVerification/documentPurgePrincipalEvidence.js +25 -13
  22. package/data/keyingProjectionVerification/documentPurgePrincipalEvidence.js.map +1 -1
  23. package/data/keyingProjectionVerification/documentPurgeProofVerification.d.ts +5 -3
  24. package/data/keyingProjectionVerification/documentPurgeProofVerification.js +52 -8
  25. package/data/keyingProjectionVerification/documentPurgeProofVerification.js.map +1 -1
  26. package/data/keyingProjectionVerification/projectionPolicyEvidence.js.map +1 -1
  27. package/data/keyingProjectionVerification/types.d.ts +4 -0
  28. package/data/keyingProjectionVerification/types.js.map +1 -1
  29. package/data/persistence/principalAuthorizationCheckpoints.js +1 -1
  30. package/data/persistence/principalAuthorizationCheckpoints.js.map +1 -1
  31. package/data/persistence/principalCurrentAcknowledgementPersistence.d.ts +1 -0
  32. package/data/persistence/principalCurrentAcknowledgementPersistence.js +58 -12
  33. package/data/persistence/principalCurrentAcknowledgementPersistence.js.map +1 -1
  34. package/data/persistence/principalHistoryEvidencePersistence.d.ts +2 -0
  35. package/data/persistence/principalHistoryEvidencePersistence.js +2 -0
  36. package/data/persistence/principalHistoryEvidencePersistence.js.map +1 -1
  37. package/data/persistence/principalHistoryIncompleteRetention.js +32 -0
  38. package/data/persistence/principalHistoryIncompleteRetention.js.map +1 -0
  39. package/data/persistence/principalHistoryNodeRetention.js +76 -0
  40. package/data/persistence/principalHistoryNodeRetention.js.map +1 -0
  41. package/data/persistence/principalHistoryPrefixPersistence.d.ts +1 -0
  42. package/data/persistence/principalHistoryPrefixPersistence.js +30 -1
  43. package/data/persistence/principalHistoryPrefixPersistence.js.map +1 -1
  44. package/data/persistence/principalHistoryRootOwnership.js +71 -0
  45. package/data/persistence/principalHistoryRootOwnership.js.map +1 -0
  46. package/data/persistence/principalHistoryStagePersistence.js +45 -0
  47. package/data/persistence/principalHistoryStagePersistence.js.map +1 -1
  48. package/data/persistence/principalHistoryStageRetention.js +44 -0
  49. package/data/persistence/principalHistoryStageRetention.js.map +1 -0
  50. package/data/persistence/principalHistoryUnpublishedRetention.js +71 -0
  51. package/data/persistence/principalHistoryUnpublishedRetention.js.map +1 -0
  52. package/data/persistence/principalKeyEnvelopeArchivePersistence.js +63 -0
  53. package/data/persistence/principalKeyEnvelopeArchivePersistence.js.map +1 -0
  54. package/data/persistence/principalKeyEnvelopeCandidates.js +10 -1
  55. package/data/persistence/principalKeyEnvelopeCandidates.js.map +1 -1
  56. package/data/sqlite/principalHistoryEvidenceSchema.js +2 -0
  57. package/data/sqlite/principalHistoryEvidenceSchema.js.map +1 -1
  58. package/data/sqlite/principalHistoryNodeRetentionSchema.js +30 -0
  59. package/data/sqlite/principalHistoryNodeRetentionSchema.js.map +1 -0
  60. package/data/sqlite/principalHistoryRetentionSchema.js +40 -0
  61. package/data/sqlite/principalHistoryRetentionSchema.js.map +1 -0
  62. package/data/sqlite/principalHistoryStageSchema.js +2 -0
  63. package/data/sqlite/principalHistoryStageSchema.js.map +1 -1
  64. package/data/sqlite/schema.d.ts +453 -0
  65. package/data/sqlite/schema.js +6 -0
  66. package/data/sqlite/schema.js.map +1 -1
  67. package/data/sqlite/sqliteCommitGuards.js +49 -0
  68. package/data/sqlite/sqliteCommitGuards.js.map +1 -0
  69. package/data/sqlite/sqlitePersistenceRuntime.js +14 -2
  70. package/data/sqlite/sqlitePersistenceRuntime.js.map +1 -1
  71. package/index.d.ts +3 -1
  72. package/index.js.map +1 -1
  73. package/internal/api-client/ApiClient.d.ts +60 -137
  74. package/internal/api-client/ApiClient.js +7 -5
  75. package/internal/api-client/ApiClient.js.map +1 -1
  76. package/internal/api-client/apiRequestRuntime.js +7 -7
  77. package/internal/api-client/apiRequestRuntime.js.map +1 -1
  78. package/internal/api-client/documentPurge.js +25 -0
  79. package/internal/api-client/documentPurge.js.map +1 -0
  80. package/internal/api-client/organizationPolicyHistory.d.ts +53 -0
  81. package/internal/api-client/organizationPolicyHistory.js +15 -0
  82. package/internal/api-client/organizationPolicyHistory.js.map +1 -0
  83. package/internal/api-client/requestInternals.js +4 -4
  84. package/internal/api-client/requestInternals.js.map +1 -1
  85. package/internal/api-client/types.d.ts +2 -2
  86. package/internal/api-client/types.js.map +1 -1
  87. package/internal/crypto/keying/principalPolicyHistory.js +4 -0
  88. package/internal/crypto/keying/principalPolicyHistory.js.map +1 -1
  89. package/internal/crypto/keying/principalPolicyHistoryTypes.d.ts +2 -0
  90. package/internal/crypto/keying/principalPolicyHistoryTypes.js.map +1 -1
  91. package/internal/validators/operation/containerMutations.d.ts +448 -6528
  92. package/internal/validators/operation/documentMutations.d.ts +323 -579
  93. package/internal/validators/operation/documentMutations.js +22 -4
  94. package/internal/validators/operation/documentMutations.js.map +1 -1
  95. package/internal/validators/operation/documentSync.d.ts +26 -406
  96. package/internal/validators/operation/organizationPolicyHistory.d.ts +188 -310
  97. package/internal/validators/operation/organizationPolicyHistory.js +17 -3
  98. package/internal/validators/operation/organizationPolicyHistory.js.map +1 -1
  99. package/internal/validators/response/containerMutationError.d.ts +28 -408
  100. package/internal/validators/response/documentMutation.d.ts +232 -544
  101. package/internal/validators/response/documentMutation.js +1 -2
  102. package/internal/validators/response/documentMutation.js.map +1 -1
  103. package/internal/validators/response/documentSyncError.d.ts +26 -406
  104. package/internal/validators/response/documentSyncError.js +4 -3
  105. package/internal/validators/response/documentSyncError.js.map +1 -1
  106. package/internal/validators/response/index.d.ts +1 -1
  107. package/internal/validators/response/index.js +1 -1
  108. package/internal/validators/response/index.js.map +1 -1
  109. package/internal/validators/response/organizationPolicyHistory.d.ts +127 -309
  110. package/internal/validators/response/organizationPolicyHistory.js +10 -4
  111. package/internal/validators/response/organizationPolicyHistory.js.map +1 -1
  112. package/internal/validators/response/principal.d.ts +28 -408
  113. package/internal/validators/response/principal.js +3 -1
  114. package/internal/validators/response/principal.js.map +1 -1
  115. package/internal/validators/util/index.d.ts +1 -1
  116. package/internal/validators/util/index.js +1 -1
  117. package/internal/validators/util/index.js.map +1 -1
  118. package/internal/validators/util/principalHistoryWire.d.ts +2 -0
  119. package/internal/validators/util/principalHistoryWire.js +2 -0
  120. package/internal/validators/util/principalHistoryWire.js.map +1 -1
  121. package/package.json +1 -1
  122. package/workflows/container-contents/container-state/createWithMetadata.js +19 -49
  123. package/workflows/container-contents/container-state/createWithMetadata.js.map +1 -1
  124. package/workflows/container-contents/container-state/groupGrantVerification.js +29 -0
  125. package/workflows/container-contents/container-state/groupGrantVerification.js.map +1 -1
  126. package/workflows/container-contents/container-state/groupShareEpoch.js +33 -0
  127. package/workflows/container-contents/container-state/groupShareEpoch.js.map +1 -0
  128. package/workflows/container-contents/container-state/remote.js +4 -1
  129. package/workflows/container-contents/container-state/remote.js.map +1 -1
  130. package/workflows/container-contents/container-state/share.js +2 -24
  131. package/workflows/container-contents/container-state/share.js.map +1 -1
  132. package/workflows/container-contents/documentTombstoneEvidence.js +23 -12
  133. package/workflows/container-contents/documentTombstoneEvidence.js.map +1 -1
  134. package/workflows/containers/child/create.js +1 -3
  135. package/workflows/containers/child/create.js.map +1 -1
  136. package/workflows/containers/child/createSubmission.d.ts +1 -3
  137. package/workflows/containers/child/createSubmission.js +13 -15
  138. package/workflows/containers/child/createSubmission.js.map +1 -1
  139. package/workflows/containers/child/currentShareGrantMutation.js +82 -0
  140. package/workflows/containers/child/currentShareGrantMutation.js.map +1 -0
  141. package/workflows/containers/child/currentSharePrincipalPolicy.js +83 -0
  142. package/workflows/containers/child/currentSharePrincipalPolicy.js.map +1 -0
  143. package/workflows/containers/child/mutationSubmit.js +1 -1
  144. package/workflows/containers/child/mutationSubmit.js.map +1 -1
  145. package/workflows/containers/child/runtimeCurrentGroupShare.js +82 -0
  146. package/workflows/containers/child/runtimeCurrentGroupShare.js.map +1 -0
  147. package/workflows/containers/child/share.js +1 -14
  148. package/workflows/containers/child/share.js.map +1 -1
  149. package/workflows/containers/child/shareProjection.js +15 -0
  150. package/workflows/containers/child/shareProjection.js.map +1 -0
  151. package/workflows/documents/purge.d.ts +3 -0
  152. package/workflows/documents/purge.js +13 -0
  153. package/workflows/documents/purge.js.map +1 -1
  154. package/workflows/documents/sync.js +2 -0
  155. package/workflows/documents/sync.js.map +1 -1
  156. package/workflows/documents/syncFailures.js +2 -2
  157. package/workflows/documents/syncFailures.js.map +1 -1
  158. package/workflows/documents/syncPolicyRepair.js +15 -13
  159. package/workflows/documents/syncPolicyRepair.js.map +1 -1
  160. package/workflows/organizations/initialPrincipalCurrentPublication.js +2 -0
  161. package/workflows/organizations/initialPrincipalCurrentPublication.js.map +1 -1
  162. package/workflows/organizations/loadPolicyHistoryDetails.js +31 -32
  163. package/workflows/organizations/loadPolicyHistoryDetails.js.map +1 -1
  164. package/workflows/organizations/organizationPolicyHistoryDetails.js +37 -15
  165. package/workflows/organizations/organizationPolicyHistoryDetails.js.map +1 -1
  166. package/workflows/organizations/organizationPolicyHistoryVerification.js +56 -69
  167. package/workflows/organizations/organizationPolicyHistoryVerification.js.map +1 -1
  168. package/workflows/organizations/policyHistoryCache.js +5 -2
  169. package/workflows/organizations/policyHistoryCache.js.map +1 -1
  170. package/workflows/organizations/policyHistoryTypes.d.ts +1 -0
  171. package/workflows/organizations/policyHistoryTypes.js.map +1 -1
  172. package/workflows/organizations/retainAcknowledgedPrincipalCurrents.js +4 -1
  173. package/workflows/organizations/retainAcknowledgedPrincipalCurrents.js.map +1 -1
  174. package/workflows/principals/loadRecoveredPrincipalHistoryPage.d.ts +0 -1
  175. package/workflows/principals/loadRecoveredPrincipalHistoryPage.js +1 -2
  176. package/workflows/principals/loadRecoveredPrincipalHistoryPage.js.map +1 -1
  177. package/workflows/principals/policyRepair.js +38 -0
  178. package/workflows/principals/policyRepair.js.map +1 -0
  179. package/workflows/principals/policyRepairBudget.d.ts +2 -2
  180. package/workflows/principals/policyRepairBudget.js +3 -3
  181. package/workflows/principals/policyRepairBudget.js.map +1 -1
  182. package/workflows/principals/principalHistoryRecoveryPrefix.js +4 -0
  183. package/workflows/principals/principalHistoryRecoveryPrefix.js.map +1 -1
  184. package/workflows/principals/principalRecoveryLocalPreference.js +3 -2
  185. package/workflows/principals/principalRecoveryLocalPreference.js.map +1 -1
  186. package/workflows/principals/publicPrincipalHistoryPage.js +1 -0
  187. package/workflows/principals/publicPrincipalHistoryPage.js.map +1 -1
  188. package/workflows/principals/publicPrincipalHistoryProgress.js +1 -0
  189. package/workflows/principals/publicPrincipalHistoryProgress.js.map +1 -1
  190. package/workflows/principals/publicPrincipalHistoryTypes.d.ts +2 -0
  191. package/workflows/principals/publicPrincipalHistoryTypes.js.map +1 -1
  192. package/workflows/principals/publicProjectionPrincipal.js +1 -0
  193. package/workflows/principals/publicProjectionPrincipal.js.map +1 -1
  194. package/workflows/principals/recoverPrincipalHistoryPage.js +2 -1
  195. package/workflows/principals/recoverPrincipalHistoryPage.js.map +1 -1
  196. package/workflows/principals/recoverPrincipalPolicyHistory.js +1 -0
  197. package/workflows/principals/recoverPrincipalPolicyHistory.js.map +1 -1
  198. package/workflows/principals/recoverPublicPrincipalHistory.js +2 -0
  199. package/workflows/principals/recoverPublicPrincipalHistory.js.map +1 -1
  200. package/workflows/principals/runtimePolicyRecovery.js +2 -1
  201. package/workflows/principals/runtimePolicyRecovery.js.map +1 -1
  202. package/workflows/principals/selectPublicPrincipalHistory.js +21 -15
  203. package/workflows/principals/selectPublicPrincipalHistory.js.map +1 -1
  204. package/workflows/sync/remoteResetPrincipalScope.js +6 -0
  205. package/workflows/sync/remoteResetPrincipalScope.js.map +1 -1
  206. package/data/keyingProjectionVerification/principalPolicySnapshotVerification.js +0 -208
  207. package/data/keyingProjectionVerification/principalPolicySnapshotVerification.js.map +0 -1
  208. package/data/keyingProjectionVerification/snapshotVerificationCache.js +0 -39
  209. package/data/keyingProjectionVerification/snapshotVerificationCache.js.map +0 -1
  210. package/workflows/containers/child/policyRepair.js +0 -23
  211. package/workflows/containers/child/policyRepair.js.map +0 -1
@@ -339,88 +339,49 @@ export declare const DocumentPurgeProofResponseSchema: z.ZodType<{
339
339
  eventHash: string;
340
340
  };
341
341
  purgedAt: string;
342
- principalPolicySnapshots: {
343
- currentGrants: {
344
- accessLevel: "admin" | "read" | "write";
345
- containerId: string;
346
- }[];
347
- currentProjection: {
348
- role: "member" | "admin";
349
- userId: string;
350
- }[];
351
- currentState: {
352
- createdAt: string;
353
- encapsulationPublicKey: string;
354
- externalAuthority: {
342
+ policyEvidence: {
343
+ organization: {
344
+ head: {
355
345
  keyEpoch: number;
356
346
  keyFingerprint: string;
357
347
  principalId: string;
358
- principalType: "group";
348
+ principalType: "group" | "organization";
359
349
  stateHash: string;
360
350
  version: number;
361
- } | null;
362
- grantCount: number;
363
- grantRoot: string;
364
- keyEpoch: number;
365
- keyFingerprint: string;
366
- memberCount: number;
367
- memberEnvelopesRoot: string;
368
- membershipMode: "projection";
369
- membershipRoot: string;
370
- payloadCiphertextHash: string;
371
- prevStateHash: string | null;
372
- principalId: string;
373
- principalType: "group" | "organization";
374
- projectionRoot: string;
375
- signature: string;
376
- signedAt: string;
377
- signerUserId: string;
378
- signerUserKeyFingerprint: string;
379
- stateHash: string;
380
- version: number;
381
- };
382
- previousStates: {
383
- grants: {
384
- accessLevel: "admin" | "read" | "write";
385
- containerId: string;
386
- }[];
387
- projection: {
388
- role: "member" | "admin";
389
- userId: string;
390
- }[];
391
- state: {
351
+ };
352
+ grant: string;
353
+ } | null;
354
+ organizationPayloads: {
355
+ reference: {
356
+ keyEpoch: number;
357
+ keyFingerprint: string;
358
+ principalId: string;
359
+ principalType: "group" | "organization";
360
+ stateHash: string;
361
+ version: number;
362
+ };
363
+ payload: {
364
+ cipherSuite: "aes-256-gcm";
365
+ ciphertext: string;
366
+ ciphertextHash: string;
392
367
  createdAt: string;
393
- encapsulationPublicKey: string;
394
- externalAuthority: {
395
- keyEpoch: number;
396
- keyFingerprint: string;
397
- principalId: string;
398
- principalType: "group";
399
- stateHash: string;
400
- version: number;
401
- } | null;
402
- grantCount: number;
403
- grantRoot: string;
368
+ principalId: string;
369
+ principalType: "group" | "organization";
370
+ stateHash: string;
371
+ };
372
+ }[];
373
+ groups: {
374
+ head: {
404
375
  keyEpoch: number;
405
376
  keyFingerprint: string;
406
- memberCount: number;
407
- memberEnvelopesRoot: string;
408
- membershipMode: "projection";
409
- membershipRoot: string;
410
- payloadCiphertextHash: string;
411
- prevStateHash: string | null;
412
377
  principalId: string;
413
378
  principalType: "group" | "organization";
414
- projectionRoot: string;
415
- signature: string;
416
- signedAt: string;
417
- signerUserId: string;
418
- signerUserKeyFingerprint: string;
419
379
  stateHash: string;
420
380
  version: number;
421
381
  };
382
+ grant: string;
422
383
  }[];
423
- }[];
384
+ };
424
385
  }, {
425
386
  authorizingContainerPath: {
426
387
  event: {
@@ -479,88 +440,49 @@ export declare const DocumentPurgeProofResponseSchema: z.ZodType<{
479
440
  eventHash: string;
480
441
  };
481
442
  purgedAt: string;
482
- principalPolicySnapshots: {
483
- currentGrants: {
484
- accessLevel: "admin" | "read" | "write";
485
- containerId: string;
486
- }[];
487
- currentProjection: {
488
- role: "member" | "admin";
489
- userId: string;
490
- }[];
491
- currentState: {
492
- createdAt: string;
493
- encapsulationPublicKey: string;
494
- externalAuthority: {
443
+ policyEvidence: {
444
+ organization: {
445
+ head: {
495
446
  keyEpoch: number;
496
447
  keyFingerprint: string;
497
448
  principalId: string;
498
- principalType: "group";
449
+ principalType: "group" | "organization";
499
450
  stateHash: string;
500
451
  version: number;
501
- } | null;
502
- grantCount: number;
503
- grantRoot: string;
504
- keyEpoch: number;
505
- keyFingerprint: string;
506
- memberCount: number;
507
- memberEnvelopesRoot: string;
508
- membershipMode: "projection";
509
- membershipRoot: string;
510
- payloadCiphertextHash: string;
511
- prevStateHash: string | null;
512
- principalId: string;
513
- principalType: "group" | "organization";
514
- projectionRoot: string;
515
- signature: string;
516
- signedAt: string;
517
- signerUserId: string;
518
- signerUserKeyFingerprint: string;
519
- stateHash: string;
520
- version: number;
521
- };
522
- previousStates: {
523
- grants: {
524
- accessLevel: "admin" | "read" | "write";
525
- containerId: string;
526
- }[];
527
- projection: {
528
- role: "member" | "admin";
529
- userId: string;
530
- }[];
531
- state: {
452
+ };
453
+ grant: string;
454
+ } | null;
455
+ organizationPayloads: {
456
+ reference: {
457
+ keyEpoch: number;
458
+ keyFingerprint: string;
459
+ principalId: string;
460
+ principalType: "group" | "organization";
461
+ stateHash: string;
462
+ version: number;
463
+ };
464
+ payload: {
465
+ cipherSuite: "aes-256-gcm";
466
+ ciphertext: string;
467
+ ciphertextHash: string;
532
468
  createdAt: string;
533
- encapsulationPublicKey: string;
534
- externalAuthority: {
535
- keyEpoch: number;
536
- keyFingerprint: string;
537
- principalId: string;
538
- principalType: "group";
539
- stateHash: string;
540
- version: number;
541
- } | null;
542
- grantCount: number;
543
- grantRoot: string;
469
+ principalId: string;
470
+ principalType: "group" | "organization";
471
+ stateHash: string;
472
+ };
473
+ }[];
474
+ groups: {
475
+ head: {
544
476
  keyEpoch: number;
545
477
  keyFingerprint: string;
546
- memberCount: number;
547
- memberEnvelopesRoot: string;
548
- membershipMode: "projection";
549
- membershipRoot: string;
550
- payloadCiphertextHash: string;
551
- prevStateHash: string | null;
552
478
  principalId: string;
553
479
  principalType: "group" | "organization";
554
- projectionRoot: string;
555
- signature: string;
556
- signedAt: string;
557
- signerUserId: string;
558
- signerUserKeyFingerprint: string;
559
480
  stateHash: string;
560
481
  version: number;
561
482
  };
483
+ grant: string;
562
484
  }[];
563
- }[];
485
+ };
564
486
  }, z.core.$ZodTypeInternals<{
565
487
  authorizingContainerPath: {
566
488
  event: {
@@ -619,88 +541,49 @@ export declare const DocumentPurgeProofResponseSchema: z.ZodType<{
619
541
  eventHash: string;
620
542
  };
621
543
  purgedAt: string;
622
- principalPolicySnapshots: {
623
- currentGrants: {
624
- accessLevel: "admin" | "read" | "write";
625
- containerId: string;
626
- }[];
627
- currentProjection: {
628
- role: "member" | "admin";
629
- userId: string;
630
- }[];
631
- currentState: {
632
- createdAt: string;
633
- encapsulationPublicKey: string;
634
- externalAuthority: {
544
+ policyEvidence: {
545
+ organization: {
546
+ head: {
635
547
  keyEpoch: number;
636
548
  keyFingerprint: string;
637
549
  principalId: string;
638
- principalType: "group";
550
+ principalType: "group" | "organization";
639
551
  stateHash: string;
640
552
  version: number;
641
- } | null;
642
- grantCount: number;
643
- grantRoot: string;
644
- keyEpoch: number;
645
- keyFingerprint: string;
646
- memberCount: number;
647
- memberEnvelopesRoot: string;
648
- membershipMode: "projection";
649
- membershipRoot: string;
650
- payloadCiphertextHash: string;
651
- prevStateHash: string | null;
652
- principalId: string;
653
- principalType: "group" | "organization";
654
- projectionRoot: string;
655
- signature: string;
656
- signedAt: string;
657
- signerUserId: string;
658
- signerUserKeyFingerprint: string;
659
- stateHash: string;
660
- version: number;
661
- };
662
- previousStates: {
663
- grants: {
664
- accessLevel: "admin" | "read" | "write";
665
- containerId: string;
666
- }[];
667
- projection: {
668
- role: "member" | "admin";
669
- userId: string;
670
- }[];
671
- state: {
553
+ };
554
+ grant: string;
555
+ } | null;
556
+ organizationPayloads: {
557
+ reference: {
558
+ keyEpoch: number;
559
+ keyFingerprint: string;
560
+ principalId: string;
561
+ principalType: "group" | "organization";
562
+ stateHash: string;
563
+ version: number;
564
+ };
565
+ payload: {
566
+ cipherSuite: "aes-256-gcm";
567
+ ciphertext: string;
568
+ ciphertextHash: string;
672
569
  createdAt: string;
673
- encapsulationPublicKey: string;
674
- externalAuthority: {
675
- keyEpoch: number;
676
- keyFingerprint: string;
677
- principalId: string;
678
- principalType: "group";
679
- stateHash: string;
680
- version: number;
681
- } | null;
682
- grantCount: number;
683
- grantRoot: string;
570
+ principalId: string;
571
+ principalType: "group" | "organization";
572
+ stateHash: string;
573
+ };
574
+ }[];
575
+ groups: {
576
+ head: {
684
577
  keyEpoch: number;
685
578
  keyFingerprint: string;
686
- memberCount: number;
687
- memberEnvelopesRoot: string;
688
- membershipMode: "projection";
689
- membershipRoot: string;
690
- payloadCiphertextHash: string;
691
- prevStateHash: string | null;
692
579
  principalId: string;
693
580
  principalType: "group" | "organization";
694
- projectionRoot: string;
695
- signature: string;
696
- signedAt: string;
697
- signerUserId: string;
698
- signerUserKeyFingerprint: string;
699
581
  stateHash: string;
700
582
  version: number;
701
583
  };
584
+ grant: string;
702
585
  }[];
703
- }[];
586
+ };
704
587
  }, {
705
588
  authorizingContainerPath: {
706
589
  event: {
@@ -759,88 +642,49 @@ export declare const DocumentPurgeProofResponseSchema: z.ZodType<{
759
642
  eventHash: string;
760
643
  };
761
644
  purgedAt: string;
762
- principalPolicySnapshots: {
763
- currentGrants: {
764
- accessLevel: "admin" | "read" | "write";
765
- containerId: string;
766
- }[];
767
- currentProjection: {
768
- role: "member" | "admin";
769
- userId: string;
770
- }[];
771
- currentState: {
772
- createdAt: string;
773
- encapsulationPublicKey: string;
774
- externalAuthority: {
645
+ policyEvidence: {
646
+ organization: {
647
+ head: {
775
648
  keyEpoch: number;
776
649
  keyFingerprint: string;
777
650
  principalId: string;
778
- principalType: "group";
651
+ principalType: "group" | "organization";
779
652
  stateHash: string;
780
653
  version: number;
781
- } | null;
782
- grantCount: number;
783
- grantRoot: string;
784
- keyEpoch: number;
785
- keyFingerprint: string;
786
- memberCount: number;
787
- memberEnvelopesRoot: string;
788
- membershipMode: "projection";
789
- membershipRoot: string;
790
- payloadCiphertextHash: string;
791
- prevStateHash: string | null;
792
- principalId: string;
793
- principalType: "group" | "organization";
794
- projectionRoot: string;
795
- signature: string;
796
- signedAt: string;
797
- signerUserId: string;
798
- signerUserKeyFingerprint: string;
799
- stateHash: string;
800
- version: number;
801
- };
802
- previousStates: {
803
- grants: {
804
- accessLevel: "admin" | "read" | "write";
805
- containerId: string;
806
- }[];
807
- projection: {
808
- role: "member" | "admin";
809
- userId: string;
810
- }[];
811
- state: {
654
+ };
655
+ grant: string;
656
+ } | null;
657
+ organizationPayloads: {
658
+ reference: {
659
+ keyEpoch: number;
660
+ keyFingerprint: string;
661
+ principalId: string;
662
+ principalType: "group" | "organization";
663
+ stateHash: string;
664
+ version: number;
665
+ };
666
+ payload: {
667
+ cipherSuite: "aes-256-gcm";
668
+ ciphertext: string;
669
+ ciphertextHash: string;
812
670
  createdAt: string;
813
- encapsulationPublicKey: string;
814
- externalAuthority: {
815
- keyEpoch: number;
816
- keyFingerprint: string;
817
- principalId: string;
818
- principalType: "group";
819
- stateHash: string;
820
- version: number;
821
- } | null;
822
- grantCount: number;
823
- grantRoot: string;
671
+ principalId: string;
672
+ principalType: "group" | "organization";
673
+ stateHash: string;
674
+ };
675
+ }[];
676
+ groups: {
677
+ head: {
824
678
  keyEpoch: number;
825
679
  keyFingerprint: string;
826
- memberCount: number;
827
- memberEnvelopesRoot: string;
828
- membershipMode: "projection";
829
- membershipRoot: string;
830
- payloadCiphertextHash: string;
831
- prevStateHash: string | null;
832
680
  principalId: string;
833
681
  principalType: "group" | "organization";
834
- projectionRoot: string;
835
- signature: string;
836
- signedAt: string;
837
- signerUserId: string;
838
- signerUserKeyFingerprint: string;
839
682
  stateHash: string;
840
683
  version: number;
841
684
  };
685
+ grant: string;
842
686
  }[];
843
- }[];
687
+ };
844
688
  }>>;
845
689
  export type DocumentPurgeProofResponse = z.infer<typeof DocumentPurgeProofResponseSchema>;
846
690
  export declare const DocumentPurgeResponseSchema: z.ZodType<{
@@ -902,88 +746,49 @@ export declare const DocumentPurgeResponseSchema: z.ZodType<{
902
746
  eventHash: string;
903
747
  };
904
748
  purgedAt: string;
905
- principalPolicySnapshots: {
906
- currentGrants: {
907
- accessLevel: "admin" | "read" | "write";
908
- containerId: string;
909
- }[];
910
- currentProjection: {
911
- role: "member" | "admin";
912
- userId: string;
913
- }[];
914
- currentState: {
915
- createdAt: string;
916
- encapsulationPublicKey: string;
917
- externalAuthority: {
749
+ policyEvidence: {
750
+ organization: {
751
+ head: {
918
752
  keyEpoch: number;
919
753
  keyFingerprint: string;
920
754
  principalId: string;
921
- principalType: "group";
755
+ principalType: "group" | "organization";
922
756
  stateHash: string;
923
757
  version: number;
924
- } | null;
925
- grantCount: number;
926
- grantRoot: string;
927
- keyEpoch: number;
928
- keyFingerprint: string;
929
- memberCount: number;
930
- memberEnvelopesRoot: string;
931
- membershipMode: "projection";
932
- membershipRoot: string;
933
- payloadCiphertextHash: string;
934
- prevStateHash: string | null;
935
- principalId: string;
936
- principalType: "group" | "organization";
937
- projectionRoot: string;
938
- signature: string;
939
- signedAt: string;
940
- signerUserId: string;
941
- signerUserKeyFingerprint: string;
942
- stateHash: string;
943
- version: number;
944
- };
945
- previousStates: {
946
- grants: {
947
- accessLevel: "admin" | "read" | "write";
948
- containerId: string;
949
- }[];
950
- projection: {
951
- role: "member" | "admin";
952
- userId: string;
953
- }[];
954
- state: {
758
+ };
759
+ grant: string;
760
+ } | null;
761
+ organizationPayloads: {
762
+ reference: {
763
+ keyEpoch: number;
764
+ keyFingerprint: string;
765
+ principalId: string;
766
+ principalType: "group" | "organization";
767
+ stateHash: string;
768
+ version: number;
769
+ };
770
+ payload: {
771
+ cipherSuite: "aes-256-gcm";
772
+ ciphertext: string;
773
+ ciphertextHash: string;
955
774
  createdAt: string;
956
- encapsulationPublicKey: string;
957
- externalAuthority: {
958
- keyEpoch: number;
959
- keyFingerprint: string;
960
- principalId: string;
961
- principalType: "group";
962
- stateHash: string;
963
- version: number;
964
- } | null;
965
- grantCount: number;
966
- grantRoot: string;
775
+ principalId: string;
776
+ principalType: "group" | "organization";
777
+ stateHash: string;
778
+ };
779
+ }[];
780
+ groups: {
781
+ head: {
967
782
  keyEpoch: number;
968
783
  keyFingerprint: string;
969
- memberCount: number;
970
- memberEnvelopesRoot: string;
971
- membershipMode: "projection";
972
- membershipRoot: string;
973
- payloadCiphertextHash: string;
974
- prevStateHash: string | null;
975
784
  principalId: string;
976
785
  principalType: "group" | "organization";
977
- projectionRoot: string;
978
- signature: string;
979
- signedAt: string;
980
- signerUserId: string;
981
- signerUserKeyFingerprint: string;
982
786
  stateHash: string;
983
787
  version: number;
984
788
  };
789
+ grant: string;
985
790
  }[];
986
- }[];
791
+ };
987
792
  }, {
988
793
  reclaimedBlobStorageKeys: string[];
989
794
  authorizingContainerPath: {
@@ -1043,88 +848,49 @@ export declare const DocumentPurgeResponseSchema: z.ZodType<{
1043
848
  eventHash: string;
1044
849
  };
1045
850
  purgedAt: string;
1046
- principalPolicySnapshots: {
1047
- currentGrants: {
1048
- accessLevel: "admin" | "read" | "write";
1049
- containerId: string;
1050
- }[];
1051
- currentProjection: {
1052
- role: "member" | "admin";
1053
- userId: string;
1054
- }[];
1055
- currentState: {
1056
- createdAt: string;
1057
- encapsulationPublicKey: string;
1058
- externalAuthority: {
851
+ policyEvidence: {
852
+ organization: {
853
+ head: {
1059
854
  keyEpoch: number;
1060
855
  keyFingerprint: string;
1061
856
  principalId: string;
1062
- principalType: "group";
857
+ principalType: "group" | "organization";
1063
858
  stateHash: string;
1064
859
  version: number;
1065
- } | null;
1066
- grantCount: number;
1067
- grantRoot: string;
1068
- keyEpoch: number;
1069
- keyFingerprint: string;
1070
- memberCount: number;
1071
- memberEnvelopesRoot: string;
1072
- membershipMode: "projection";
1073
- membershipRoot: string;
1074
- payloadCiphertextHash: string;
1075
- prevStateHash: string | null;
1076
- principalId: string;
1077
- principalType: "group" | "organization";
1078
- projectionRoot: string;
1079
- signature: string;
1080
- signedAt: string;
1081
- signerUserId: string;
1082
- signerUserKeyFingerprint: string;
1083
- stateHash: string;
1084
- version: number;
1085
- };
1086
- previousStates: {
1087
- grants: {
1088
- accessLevel: "admin" | "read" | "write";
1089
- containerId: string;
1090
- }[];
1091
- projection: {
1092
- role: "member" | "admin";
1093
- userId: string;
1094
- }[];
1095
- state: {
860
+ };
861
+ grant: string;
862
+ } | null;
863
+ organizationPayloads: {
864
+ reference: {
865
+ keyEpoch: number;
866
+ keyFingerprint: string;
867
+ principalId: string;
868
+ principalType: "group" | "organization";
869
+ stateHash: string;
870
+ version: number;
871
+ };
872
+ payload: {
873
+ cipherSuite: "aes-256-gcm";
874
+ ciphertext: string;
875
+ ciphertextHash: string;
1096
876
  createdAt: string;
1097
- encapsulationPublicKey: string;
1098
- externalAuthority: {
1099
- keyEpoch: number;
1100
- keyFingerprint: string;
1101
- principalId: string;
1102
- principalType: "group";
1103
- stateHash: string;
1104
- version: number;
1105
- } | null;
1106
- grantCount: number;
1107
- grantRoot: string;
877
+ principalId: string;
878
+ principalType: "group" | "organization";
879
+ stateHash: string;
880
+ };
881
+ }[];
882
+ groups: {
883
+ head: {
1108
884
  keyEpoch: number;
1109
885
  keyFingerprint: string;
1110
- memberCount: number;
1111
- memberEnvelopesRoot: string;
1112
- membershipMode: "projection";
1113
- membershipRoot: string;
1114
- payloadCiphertextHash: string;
1115
- prevStateHash: string | null;
1116
886
  principalId: string;
1117
887
  principalType: "group" | "organization";
1118
- projectionRoot: string;
1119
- signature: string;
1120
- signedAt: string;
1121
- signerUserId: string;
1122
- signerUserKeyFingerprint: string;
1123
888
  stateHash: string;
1124
889
  version: number;
1125
890
  };
891
+ grant: string;
1126
892
  }[];
1127
- }[];
893
+ };
1128
894
  }, z.core.$ZodTypeInternals<{
1129
895
  reclaimedBlobStorageKeys: string[];
1130
896
  authorizingContainerPath: {
@@ -1184,88 +950,49 @@ export declare const DocumentPurgeResponseSchema: z.ZodType<{
1184
950
  eventHash: string;
1185
951
  };
1186
952
  purgedAt: string;
1187
- principalPolicySnapshots: {
1188
- currentGrants: {
1189
- accessLevel: "admin" | "read" | "write";
1190
- containerId: string;
1191
- }[];
1192
- currentProjection: {
1193
- role: "member" | "admin";
1194
- userId: string;
1195
- }[];
1196
- currentState: {
1197
- createdAt: string;
1198
- encapsulationPublicKey: string;
1199
- externalAuthority: {
953
+ policyEvidence: {
954
+ organization: {
955
+ head: {
1200
956
  keyEpoch: number;
1201
957
  keyFingerprint: string;
1202
958
  principalId: string;
1203
- principalType: "group";
959
+ principalType: "group" | "organization";
1204
960
  stateHash: string;
1205
961
  version: number;
1206
- } | null;
1207
- grantCount: number;
1208
- grantRoot: string;
1209
- keyEpoch: number;
1210
- keyFingerprint: string;
1211
- memberCount: number;
1212
- memberEnvelopesRoot: string;
1213
- membershipMode: "projection";
1214
- membershipRoot: string;
1215
- payloadCiphertextHash: string;
1216
- prevStateHash: string | null;
1217
- principalId: string;
1218
- principalType: "group" | "organization";
1219
- projectionRoot: string;
1220
- signature: string;
1221
- signedAt: string;
1222
- signerUserId: string;
1223
- signerUserKeyFingerprint: string;
1224
- stateHash: string;
1225
- version: number;
1226
- };
1227
- previousStates: {
1228
- grants: {
1229
- accessLevel: "admin" | "read" | "write";
1230
- containerId: string;
1231
- }[];
1232
- projection: {
1233
- role: "member" | "admin";
1234
- userId: string;
1235
- }[];
1236
- state: {
962
+ };
963
+ grant: string;
964
+ } | null;
965
+ organizationPayloads: {
966
+ reference: {
967
+ keyEpoch: number;
968
+ keyFingerprint: string;
969
+ principalId: string;
970
+ principalType: "group" | "organization";
971
+ stateHash: string;
972
+ version: number;
973
+ };
974
+ payload: {
975
+ cipherSuite: "aes-256-gcm";
976
+ ciphertext: string;
977
+ ciphertextHash: string;
1237
978
  createdAt: string;
1238
- encapsulationPublicKey: string;
1239
- externalAuthority: {
1240
- keyEpoch: number;
1241
- keyFingerprint: string;
1242
- principalId: string;
1243
- principalType: "group";
1244
- stateHash: string;
1245
- version: number;
1246
- } | null;
1247
- grantCount: number;
1248
- grantRoot: string;
979
+ principalId: string;
980
+ principalType: "group" | "organization";
981
+ stateHash: string;
982
+ };
983
+ }[];
984
+ groups: {
985
+ head: {
1249
986
  keyEpoch: number;
1250
987
  keyFingerprint: string;
1251
- memberCount: number;
1252
- memberEnvelopesRoot: string;
1253
- membershipMode: "projection";
1254
- membershipRoot: string;
1255
- payloadCiphertextHash: string;
1256
- prevStateHash: string | null;
1257
988
  principalId: string;
1258
989
  principalType: "group" | "organization";
1259
- projectionRoot: string;
1260
- signature: string;
1261
- signedAt: string;
1262
- signerUserId: string;
1263
- signerUserKeyFingerprint: string;
1264
990
  stateHash: string;
1265
991
  version: number;
1266
992
  };
993
+ grant: string;
1267
994
  }[];
1268
- }[];
995
+ };
1269
996
  }, {
1270
997
  reclaimedBlobStorageKeys: string[];
1271
998
  authorizingContainerPath: {
@@ -1325,88 +1052,49 @@ export declare const DocumentPurgeResponseSchema: z.ZodType<{
1325
1052
  eventHash: string;
1326
1053
  };
1327
1054
  purgedAt: string;
1328
- principalPolicySnapshots: {
1329
- currentGrants: {
1330
- accessLevel: "admin" | "read" | "write";
1331
- containerId: string;
1332
- }[];
1333
- currentProjection: {
1334
- role: "member" | "admin";
1335
- userId: string;
1336
- }[];
1337
- currentState: {
1338
- createdAt: string;
1339
- encapsulationPublicKey: string;
1340
- externalAuthority: {
1055
+ policyEvidence: {
1056
+ organization: {
1057
+ head: {
1341
1058
  keyEpoch: number;
1342
1059
  keyFingerprint: string;
1343
1060
  principalId: string;
1344
- principalType: "group";
1061
+ principalType: "group" | "organization";
1345
1062
  stateHash: string;
1346
1063
  version: number;
1347
- } | null;
1348
- grantCount: number;
1349
- grantRoot: string;
1350
- keyEpoch: number;
1351
- keyFingerprint: string;
1352
- memberCount: number;
1353
- memberEnvelopesRoot: string;
1354
- membershipMode: "projection";
1355
- membershipRoot: string;
1356
- payloadCiphertextHash: string;
1357
- prevStateHash: string | null;
1358
- principalId: string;
1359
- principalType: "group" | "organization";
1360
- projectionRoot: string;
1361
- signature: string;
1362
- signedAt: string;
1363
- signerUserId: string;
1364
- signerUserKeyFingerprint: string;
1365
- stateHash: string;
1366
- version: number;
1367
- };
1368
- previousStates: {
1369
- grants: {
1370
- accessLevel: "admin" | "read" | "write";
1371
- containerId: string;
1372
- }[];
1373
- projection: {
1374
- role: "member" | "admin";
1375
- userId: string;
1376
- }[];
1377
- state: {
1064
+ };
1065
+ grant: string;
1066
+ } | null;
1067
+ organizationPayloads: {
1068
+ reference: {
1069
+ keyEpoch: number;
1070
+ keyFingerprint: string;
1071
+ principalId: string;
1072
+ principalType: "group" | "organization";
1073
+ stateHash: string;
1074
+ version: number;
1075
+ };
1076
+ payload: {
1077
+ cipherSuite: "aes-256-gcm";
1078
+ ciphertext: string;
1079
+ ciphertextHash: string;
1378
1080
  createdAt: string;
1379
- encapsulationPublicKey: string;
1380
- externalAuthority: {
1381
- keyEpoch: number;
1382
- keyFingerprint: string;
1383
- principalId: string;
1384
- principalType: "group";
1385
- stateHash: string;
1386
- version: number;
1387
- } | null;
1388
- grantCount: number;
1389
- grantRoot: string;
1081
+ principalId: string;
1082
+ principalType: "group" | "organization";
1083
+ stateHash: string;
1084
+ };
1085
+ }[];
1086
+ groups: {
1087
+ head: {
1390
1088
  keyEpoch: number;
1391
1089
  keyFingerprint: string;
1392
- memberCount: number;
1393
- memberEnvelopesRoot: string;
1394
- membershipMode: "projection";
1395
- membershipRoot: string;
1396
- payloadCiphertextHash: string;
1397
- prevStateHash: string | null;
1398
1090
  principalId: string;
1399
1091
  principalType: "group" | "organization";
1400
- projectionRoot: string;
1401
- signature: string;
1402
- signedAt: string;
1403
- signerUserId: string;
1404
- signerUserKeyFingerprint: string;
1405
1092
  stateHash: string;
1406
1093
  version: number;
1407
1094
  };
1095
+ grant: string;
1408
1096
  }[];
1409
- }[];
1097
+ };
1410
1098
  }>>;
1411
1099
  export type DocumentPurgeResponse = z.infer<typeof DocumentPurgeResponseSchema>;
1412
1100
  export declare const DocumentWriterProjectionResponseSchema: z.ZodType<{