@tearleads/client-sdk 0.1.19 → 0.1.20

package/internal/validators/response/documentMutation.js

@@ -4,7 +4,6 @@ import { AccessEventBundleWireResponseSchema, AccessManifestBundleWireResponseSc
 import { ProjectionHistoryPrefixesSchema } from "../util/projectionHistoryWire.js";
 import { ContainerKeyingPathResponseSchema } from "./container.js";
 import { DocumentContentKeyBundleResponseSchema, DocumentKekTargetsResponseSchema, DocumentSyncResponseSchema, } from "./documentSyncSchema.js";
-import { PrincipalPolicySnapshotResponseSchema } from "./principal.js";
 import { ProjectionPolicyEvidenceResponseSchema } from "./projectionPolicyEvidence.js";
 export { DocumentContentKeyBundleResponseSchema, DocumentContentKeyTargetEnvelopeResponseSchema, DocumentKekTargetsResponseSchema, DocumentSyncPullPageResponseSchema, DocumentSyncResponseSchema, DocumentSyncUpdateResponseSchema, } from "./documentSyncSchema.js";
 export const DocumentCreateResponseSchema = loosePlainObject({
@@ -29,7 +28,7 @@ const documentPurgeProofShape = {
     documentManifestPredecessors: arraySchema(AccessManifestBundleWireResponseSchema),
     purgeEvent: AccessEventBundleWireResponseSchema,
     purgedAt: nonEmptyStringSchema,
-    principalPolicySnapshots: arraySchema(PrincipalPolicySnapshotResponseSchema),
+    policyEvidence: ProjectionPolicyEvidenceResponseSchema,
 };
 export const DocumentPurgeProofResponseSchema = loosePlainObject(documentPurgeProofShape);
 export const DocumentPurgeResponseSchema = loosePlainObject({

package/internal/validators/response/documentMutation.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentMutation.js","sourceRoot":"","sources":["documentMutation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,mCAAmC,EACnC,sCAAsC,GACvC,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAEL,sCAAsC,EAEtC,gCAAgC,EAEhC,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qCAAqC,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,4BAA4B,CAAC;AAEpF,OAAO,EAEL,sCAAsC,EAEtC,8CAA8C,EAE9C,gCAAgC,EAEhC,kCAAkC,EAElC,0BAA0B,EAE1B,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;IAC3D,cAAc,EAAE,sCAAsC;IACtD,gBAAgB,EAAE,sCAAsC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,kBAAkB,EAAE,gCAAgC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,cAAc,EAAE,sCAAsC;IACtD,gBAAgB,EAAE,sCAAsC;IACxD,kBAAkB,EAAE,gCAAgC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC;AAMH,MAAM,uBAAuB,GAAG;IAC9B,wBAAwB,EAAE,mBAAmB,CAC3C,sCAAsC,CACvC;IACD,gCAAgC,EAAE,WAAW,CAC3C,sCAAsC,CACvC;IACD,UAAU,EAAE,oBAAoB;IAChC,gBAAgB,EAAE,sCAAsC;IACxD,8BAA8B,EAAE,WAAW,CACzC,WAAW,CAAC,sCAAsC,CAAC,CACpD;IACD,4BAA4B,EAAE,WAAW,CACvC,sCAAsC,CACvC;IACD,UAAU,EAAE,mCAAmC;IAC/C,QAAQ,EAAE,oBAAoB;IAC9B,wBAAwB,EAAE,WAAW,CAAC,qCAAqC,CAAC;CACpE,CAAC;AAEX,MAAM,CAAC,MAAM,gCAAgC,GAAG,gBAAgB,CAC9D,uBAAuB,CACxB,CAAC;AAMF,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;IAC1D,GAAG,uBAAuB;IAC1B,wBAAwB,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IACrE,eAAe,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IAC3D,cAAc,EAAE,sCAAsC;IACtD,yBAAyB,EAAE,mBAAmB,CAC5C,iCAAiC,CAClC;IACD,gBAAgB,EAAE,sCAAsC;IACxD,0EAA0E;IAC1E,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACjD,gCAAgC,EAAE,WAAW,CAC3C,sCAAsC,CACvC;IACD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kBAAkB,EAAE,gCAAgC;IACpD,gBAAgB,EAAE,sCAAsC;IACxD,8BAA8B,EAAE,WAAW,CACzC,WAAW,CAAC,sCAAsC,CAAC,CACpD;IACD,uBAAuB,EAAE,WAAW,CAAC,sCAAsC,CAAC;CAC7E,CAAC,CAAC;AAMH;;;;;;GAMG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAwC;IAExC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,qBAAqB,EAAE,MAAM,CAAC,UAAU;QACxC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,0BAA0B,EAAE,OAAO,CAAC,GAAG,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CACvC;QACD,6BAA6B,EAAE,OAAO,CAAC,GAAG,CACxC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CACzC;QACD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,sCAAsC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,OAAO,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,OAAO,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,OAAO,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,OAAO,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,sCAAsC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  arraySchema,\n  loosePlainObject,\n  nonEmptyArraySchema,\n  nonEmptyStringSchema,\n} from \"../schema\";\nimport {\n  AccessEventBundleWireResponseSchema,\n  AccessManifestBundleWireResponseSchema,\n} from \"../util\";\nimport { ProjectionHistoryPrefixesSchema } from \"../util/projectionHistoryWire\";\nimport { ContainerKeyingPathResponseSchema } from \"./container\";\nimport {\n  type DocumentContentKeyBundleResponse,\n  DocumentContentKeyBundleResponseSchema,\n  type DocumentKekTargetsResponse,\n  DocumentKekTargetsResponseSchema,\n  type DocumentSyncResponse,\n  DocumentSyncResponseSchema,\n} from \"./documentSyncSchema\";\nimport { PrincipalPolicySnapshotResponseSchema } from \"./principal\";\nimport { ProjectionPolicyEvidenceResponseSchema } from \"./projectionPolicyEvidence\";\n\nexport {\n  type DocumentContentKeyBundleResponse,\n  DocumentContentKeyBundleResponseSchema,\n  type DocumentContentKeyTargetEnvelopeResponse,\n  DocumentContentKeyTargetEnvelopeResponseSchema,\n  type DocumentKekTargetsResponse,\n  DocumentKekTargetsResponseSchema,\n  type DocumentSyncPullPageResponse,\n  DocumentSyncPullPageResponseSchema,\n  type DocumentSyncResponse,\n  DocumentSyncResponseSchema,\n  type DocumentSyncUpdateResponse,\n  DocumentSyncUpdateResponseSchema,\n} from \"./documentSyncSchema\";\n\nexport const DocumentCreateResponseSchema = loosePlainObject({\n  accessManifest: AccessManifestBundleWireResponseSchema,\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  createdAt: z.string(),\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  id: z.string(),\n});\n\nexport type DocumentCreateResponse = z.infer<\n  typeof DocumentCreateResponseSchema\n>;\n\nexport const DocumentLinkSetMutationResponseSchema = loosePlainObject({\n  accessManifest: AccessManifestBundleWireResponseSchema,\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  id: z.string(),\n});\n\nexport type DocumentLinkSetMutationResponse = z.infer<\n  typeof DocumentLinkSetMutationResponseSchema\n>;\n\nconst documentPurgeProofShape = {\n  authorizingContainerPath: nonEmptyArraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentContainerManifestHistory: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentId: nonEmptyStringSchema,\n  documentManifest: AccessManifestBundleWireResponseSchema,\n  documentManifestContainerPaths: arraySchema(\n    arraySchema(AccessManifestBundleWireResponseSchema),\n  ),\n  documentManifestPredecessors: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  purgeEvent: AccessEventBundleWireResponseSchema,\n  purgedAt: nonEmptyStringSchema,\n  principalPolicySnapshots: arraySchema(PrincipalPolicySnapshotResponseSchema),\n} as const;\n\nexport const DocumentPurgeProofResponseSchema = loosePlainObject(\n  documentPurgeProofShape,\n);\n\nexport type DocumentPurgeProofResponse = z.infer<\n  typeof DocumentPurgeProofResponseSchema\n>;\n\nexport const DocumentPurgeResponseSchema = loosePlainObject({\n  ...documentPurgeProofShape,\n  reclaimedBlobStorageKeys: arraySchema(z.string()),\n});\n\nexport type DocumentPurgeResponse = z.infer<typeof DocumentPurgeResponseSchema>;\n\nexport const DocumentWriterProjectionResponseSchema = loosePlainObject({\n  historyPrefixes: ProjectionHistoryPrefixesSchema.optional(),\n  policyEvidence: ProjectionPolicyEvidenceResponseSchema,\n  authorizingContainerPaths: nonEmptyArraySchema(\n    ContainerKeyingPathResponseSchema,\n  ),\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  /** Present only when the stored content-key bundle targets stale KEKs. */\n  contentKeyBundleStale: z.literal(true).optional(),\n  documentContainerManifestHistory: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentId: z.string(),\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  documentManifest: AccessManifestBundleWireResponseSchema,\n  documentManifestContainerPaths: arraySchema(\n    arraySchema(AccessManifestBundleWireResponseSchema),\n  ),\n  documentManifestHistory: arraySchema(AccessManifestBundleWireResponseSchema),\n});\n\nexport type DocumentWriterProjectionResponse = z.infer<\n  typeof DocumentWriterProjectionResponseSchema\n>;\n\n/**\n * Derives the KEK-target summary that corresponds to a content-key bundle,\n * preserving the bundle's served target order. Both the API (for stale-bundle\n * read-only sync responses) and clients (for plans built against a stale\n * bundle) must derive this identically so response/plan state comparisons\n * hold byte-for-byte.\n */\nexport function documentKekTargetsFromContentKeyBundle(\n  bundle: DocumentContentKeyBundleResponse,\n): DocumentKekTargetsResponse {\n  const targets = bundle.targets.map((target) => ({\n    containerId: target.containerId,\n    containerManifestHash: target.containerManifestHash,\n    containerKeyEpochId: target.containerKeyEpochId,\n    containerKeyEpoch: target.containerKeyEpoch,\n  }));\n\n  return {\n    documentId: bundle.documentId,\n    documentKeyTargetHash: bundle.targetHash,\n    linkSetManifestHash: bundle.linkSetManifestHash,\n    linkedContainerKeyEpochIds: targets.map(\n      (target) => target.containerKeyEpochId,\n    ),\n    linkedContainerManifestHashes: targets.map(\n      (target) => target.containerManifestHash,\n    ),\n    targets,\n  };\n}\n\nexport function isDocumentKekTargetsResponse(\n  value: unknown,\n): value is DocumentKekTargetsResponse {\n  return DocumentKekTargetsResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentContentKeyBundleResponse(\n  value: unknown,\n): value is DocumentContentKeyBundleResponse {\n  return DocumentContentKeyBundleResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentCreateResponse(\n  value: unknown,\n): value is DocumentCreateResponse {\n  return DocumentCreateResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentLinkSetMutationResponse(\n  value: unknown,\n): value is DocumentLinkSetMutationResponse {\n  return DocumentLinkSetMutationResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentPurgeResponse(\n  value: unknown,\n): value is DocumentPurgeResponse {\n  return DocumentPurgeResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentPurgeProofResponse(\n  value: unknown,\n): value is DocumentPurgeProofResponse {\n  return DocumentPurgeProofResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentSyncResponse(\n  value: unknown,\n): value is DocumentSyncResponse {\n  return DocumentSyncResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentWriterProjectionResponse(\n  value: unknown,\n): value is DocumentWriterProjectionResponse {\n  return DocumentWriterProjectionResponseSchema.safeParse(value).success;\n}\n"]}
+{"version":3,"file":"documentMutation.js","sourceRoot":"","sources":["documentMutation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,mCAAmC,EACnC,sCAAsC,GACvC,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAEL,sCAAsC,EAEtC,gCAAgC,EAEhC,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,sCAAsC,EAAE,MAAM,4BAA4B,CAAC;AAEpF,OAAO,EAEL,sCAAsC,EAEtC,8CAA8C,EAE9C,gCAAgC,EAEhC,kCAAkC,EAElC,0BAA0B,EAE1B,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;IAC3D,cAAc,EAAE,sCAAsC;IACtD,gBAAgB,EAAE,sCAAsC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,kBAAkB,EAAE,gCAAgC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,cAAc,EAAE,sCAAsC;IACtD,gBAAgB,EAAE,sCAAsC;IACxD,kBAAkB,EAAE,gCAAgC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC;AAMH,MAAM,uBAAuB,GAAG;IAC9B,wBAAwB,EAAE,mBAAmB,CAC3C,sCAAsC,CACvC;IACD,gCAAgC,EAAE,WAAW,CAC3C,sCAAsC,CACvC;IACD,UAAU,EAAE,oBAAoB;IAChC,gBAAgB,EAAE,sCAAsC;IACxD,8BAA8B,EAAE,WAAW,CACzC,WAAW,CAAC,sCAAsC,CAAC,CACpD;IACD,4BAA4B,EAAE,WAAW,CACvC,sCAAsC,CACvC;IACD,UAAU,EAAE,mCAAmC;IAC/C,QAAQ,EAAE,oBAAoB;IAC9B,cAAc,EAAE,sCAAsC;CAC9C,CAAC;AAEX,MAAM,CAAC,MAAM,gCAAgC,GAAG,gBAAgB,CAC9D,uBAAuB,CACxB,CAAC;AAMF,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;IAC1D,GAAG,uBAAuB;IAC1B,wBAAwB,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IACrE,eAAe,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IAC3D,cAAc,EAAE,sCAAsC;IACtD,yBAAyB,EAAE,mBAAmB,CAC5C,iCAAiC,CAClC;IACD,gBAAgB,EAAE,sCAAsC;IACxD,0EAA0E;IAC1E,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACjD,gCAAgC,EAAE,WAAW,CAC3C,sCAAsC,CACvC;IACD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kBAAkB,EAAE,gCAAgC;IACpD,gBAAgB,EAAE,sCAAsC;IACxD,8BAA8B,EAAE,WAAW,CACzC,WAAW,CAAC,sCAAsC,CAAC,CACpD;IACD,uBAAuB,EAAE,WAAW,CAAC,sCAAsC,CAAC;CAC7E,CAAC,CAAC;AAMH;;;;;;GAMG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAwC;IAExC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,qBAAqB,EAAE,MAAM,CAAC,UAAU;QACxC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,0BAA0B,EAAE,OAAO,CAAC,GAAG,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CACvC;QACD,6BAA6B,EAAE,OAAO,CAAC,GAAG,CACxC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CACzC;QACD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,sCAAsC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,OAAO,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,OAAO,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,OAAO,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,OAAO,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,sCAAsC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  arraySchema,\n  loosePlainObject,\n  nonEmptyArraySchema,\n  nonEmptyStringSchema,\n} from \"../schema\";\nimport {\n  AccessEventBundleWireResponseSchema,\n  AccessManifestBundleWireResponseSchema,\n} from \"../util\";\nimport { ProjectionHistoryPrefixesSchema } from \"../util/projectionHistoryWire\";\nimport { ContainerKeyingPathResponseSchema } from \"./container\";\nimport {\n  type DocumentContentKeyBundleResponse,\n  DocumentContentKeyBundleResponseSchema,\n  type DocumentKekTargetsResponse,\n  DocumentKekTargetsResponseSchema,\n  type DocumentSyncResponse,\n  DocumentSyncResponseSchema,\n} from \"./documentSyncSchema\";\nimport { ProjectionPolicyEvidenceResponseSchema } from \"./projectionPolicyEvidence\";\n\nexport {\n  type DocumentContentKeyBundleResponse,\n  DocumentContentKeyBundleResponseSchema,\n  type DocumentContentKeyTargetEnvelopeResponse,\n  DocumentContentKeyTargetEnvelopeResponseSchema,\n  type DocumentKekTargetsResponse,\n  DocumentKekTargetsResponseSchema,\n  type DocumentSyncPullPageResponse,\n  DocumentSyncPullPageResponseSchema,\n  type DocumentSyncResponse,\n  DocumentSyncResponseSchema,\n  type DocumentSyncUpdateResponse,\n  DocumentSyncUpdateResponseSchema,\n} from \"./documentSyncSchema\";\n\nexport const DocumentCreateResponseSchema = loosePlainObject({\n  accessManifest: AccessManifestBundleWireResponseSchema,\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  createdAt: z.string(),\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  id: z.string(),\n});\n\nexport type DocumentCreateResponse = z.infer<\n  typeof DocumentCreateResponseSchema\n>;\n\nexport const DocumentLinkSetMutationResponseSchema = loosePlainObject({\n  accessManifest: AccessManifestBundleWireResponseSchema,\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  id: z.string(),\n});\n\nexport type DocumentLinkSetMutationResponse = z.infer<\n  typeof DocumentLinkSetMutationResponseSchema\n>;\n\nconst documentPurgeProofShape = {\n  authorizingContainerPath: nonEmptyArraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentContainerManifestHistory: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentId: nonEmptyStringSchema,\n  documentManifest: AccessManifestBundleWireResponseSchema,\n  documentManifestContainerPaths: arraySchema(\n    arraySchema(AccessManifestBundleWireResponseSchema),\n  ),\n  documentManifestPredecessors: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  purgeEvent: AccessEventBundleWireResponseSchema,\n  purgedAt: nonEmptyStringSchema,\n  policyEvidence: ProjectionPolicyEvidenceResponseSchema,\n} as const;\n\nexport const DocumentPurgeProofResponseSchema = loosePlainObject(\n  documentPurgeProofShape,\n);\n\nexport type DocumentPurgeProofResponse = z.infer<\n  typeof DocumentPurgeProofResponseSchema\n>;\n\nexport const DocumentPurgeResponseSchema = loosePlainObject({\n  ...documentPurgeProofShape,\n  reclaimedBlobStorageKeys: arraySchema(z.string()),\n});\n\nexport type DocumentPurgeResponse = z.infer<typeof DocumentPurgeResponseSchema>;\n\nexport const DocumentWriterProjectionResponseSchema = loosePlainObject({\n  historyPrefixes: ProjectionHistoryPrefixesSchema.optional(),\n  policyEvidence: ProjectionPolicyEvidenceResponseSchema,\n  authorizingContainerPaths: nonEmptyArraySchema(\n    ContainerKeyingPathResponseSchema,\n  ),\n  contentKeyBundle: DocumentContentKeyBundleResponseSchema,\n  /** Present only when the stored content-key bundle targets stale KEKs. */\n  contentKeyBundleStale: z.literal(true).optional(),\n  documentContainerManifestHistory: arraySchema(\n    AccessManifestBundleWireResponseSchema,\n  ),\n  documentId: z.string(),\n  documentKekTargets: DocumentKekTargetsResponseSchema,\n  documentManifest: AccessManifestBundleWireResponseSchema,\n  documentManifestContainerPaths: arraySchema(\n    arraySchema(AccessManifestBundleWireResponseSchema),\n  ),\n  documentManifestHistory: arraySchema(AccessManifestBundleWireResponseSchema),\n});\n\nexport type DocumentWriterProjectionResponse = z.infer<\n  typeof DocumentWriterProjectionResponseSchema\n>;\n\n/**\n * Derives the KEK-target summary that corresponds to a content-key bundle,\n * preserving the bundle's served target order. Both the API (for stale-bundle\n * read-only sync responses) and clients (for plans built against a stale\n * bundle) must derive this identically so response/plan state comparisons\n * hold byte-for-byte.\n */\nexport function documentKekTargetsFromContentKeyBundle(\n  bundle: DocumentContentKeyBundleResponse,\n): DocumentKekTargetsResponse {\n  const targets = bundle.targets.map((target) => ({\n    containerId: target.containerId,\n    containerManifestHash: target.containerManifestHash,\n    containerKeyEpochId: target.containerKeyEpochId,\n    containerKeyEpoch: target.containerKeyEpoch,\n  }));\n\n  return {\n    documentId: bundle.documentId,\n    documentKeyTargetHash: bundle.targetHash,\n    linkSetManifestHash: bundle.linkSetManifestHash,\n    linkedContainerKeyEpochIds: targets.map(\n      (target) => target.containerKeyEpochId,\n    ),\n    linkedContainerManifestHashes: targets.map(\n      (target) => target.containerManifestHash,\n    ),\n    targets,\n  };\n}\n\nexport function isDocumentKekTargetsResponse(\n  value: unknown,\n): value is DocumentKekTargetsResponse {\n  return DocumentKekTargetsResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentContentKeyBundleResponse(\n  value: unknown,\n): value is DocumentContentKeyBundleResponse {\n  return DocumentContentKeyBundleResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentCreateResponse(\n  value: unknown,\n): value is DocumentCreateResponse {\n  return DocumentCreateResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentLinkSetMutationResponse(\n  value: unknown,\n): value is DocumentLinkSetMutationResponse {\n  return DocumentLinkSetMutationResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentPurgeResponse(\n  value: unknown,\n): value is DocumentPurgeResponse {\n  return DocumentPurgeResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentPurgeProofResponse(\n  value: unknown,\n): value is DocumentPurgeProofResponse {\n  return DocumentPurgeProofResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentSyncResponse(\n  value: unknown,\n): value is DocumentSyncResponse {\n  return DocumentSyncResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentWriterProjectionResponse(\n  value: unknown,\n): value is DocumentWriterProjectionResponse {\n  return DocumentWriterProjectionResponseSchema.safeParse(value).success;\n}\n"]}

package/internal/validators/response/documentSyncError.d.ts

@@ -12,419 +12,39 @@ export declare function isDocumentSyncErrorCode(value: unknown): value is Docume
 export declare const DocumentSyncStateStaleErrorResponseSchema: z.ZodObject<{
     code: z.ZodLiteral<"document_sync_state_stale">;
     error: z.ZodString;
-    principalPolicies: z.ZodOptional<z.ZodCustom<{
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
-                createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
-                keyEpoch: number;
-                keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
-                principalId: string;
-                principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
-                stateHash: string;
-                version: number;
-            };
-        }[];
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentMemberEnvelopes: {
-            envelopes: {
-                kemCipherText: string;
-                memberKeyFingerprint: string;
-                userId: string;
-                wrappedKey: string;
-            }[];
-            epoch: number;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentPayload: {
-            cipherSuite: "aes-256-gcm";
-            ciphertext: string;
-            ciphertextHash: string;
-            createdAt: string;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
-                keyEpoch: number;
-                keyFingerprint: string;
-                principalId: string;
-                principalType: "group";
-                stateHash: string;
-                version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
+    principalHeads: z.ZodOptional<z.ZodCustom<{
+        keyEpoch: number;
+        keyFingerprint: string;
+        principalId: string;
+        principalType: "group" | "organization";
+        stateHash: string;
+        version: number;
     }[], {
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
-                createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
-                keyEpoch: number;
-                keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
-                principalId: string;
-                principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
-                stateHash: string;
-                version: number;
-            };
-        }[];
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentMemberEnvelopes: {
-            envelopes: {
-                kemCipherText: string;
-                memberKeyFingerprint: string;
-                userId: string;
-                wrappedKey: string;
-            }[];
-            epoch: number;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentPayload: {
-            cipherSuite: "aes-256-gcm";
-            ciphertext: string;
-            ciphertextHash: string;
-            createdAt: string;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
-                keyEpoch: number;
-                keyFingerprint: string;
-                principalId: string;
-                principalType: "group";
-                stateHash: string;
-                version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
+        keyEpoch: number;
+        keyFingerprint: string;
+        principalId: string;
+        principalType: "group" | "organization";
+        stateHash: string;
+        version: number;
     }[]>>;
 }, z.core.$loose>;
 export declare const DocumentSyncErrorResponseSchema: z.ZodObject<{
     code: z.ZodLiteral<"document_sync_checkpoint_coverage_conflict" | "document_sync_conflict" | "document_sync_descendant_rekeys_required" | "document_sync_state_stale" | "document_sync_update_id_conflict">;
     error: z.ZodString;
-    principalPolicies: z.ZodOptional<z.ZodCustom<{
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
-                createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
-                keyEpoch: number;
-                keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
-                principalId: string;
-                principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
-                stateHash: string;
-                version: number;
-            };
-        }[];
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentMemberEnvelopes: {
-            envelopes: {
-                kemCipherText: string;
-                memberKeyFingerprint: string;
-                userId: string;
-                wrappedKey: string;
-            }[];
-            epoch: number;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentPayload: {
-            cipherSuite: "aes-256-gcm";
-            ciphertext: string;
-            ciphertextHash: string;
-            createdAt: string;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
-                keyEpoch: number;
-                keyFingerprint: string;
-                principalId: string;
-                principalType: "group";
-                stateHash: string;
-                version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
+    principalHeads: z.ZodOptional<z.ZodCustom<{
+        keyEpoch: number;
+        keyFingerprint: string;
+        principalId: string;
+        principalType: "group" | "organization";
+        stateHash: string;
+        version: number;
     }[], {
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
-                createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
-                keyEpoch: number;
-                keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
-                principalId: string;
-                principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
-                stateHash: string;
-                version: number;
-            };
-        }[];
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentMemberEnvelopes: {
-            envelopes: {
-                kemCipherText: string;
-                memberKeyFingerprint: string;
-                userId: string;
-                wrappedKey: string;
-            }[];
-            epoch: number;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentPayload: {
-            cipherSuite: "aes-256-gcm";
-            ciphertext: string;
-            ciphertextHash: string;
-            createdAt: string;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
-                keyEpoch: number;
-                keyFingerprint: string;
-                principalId: string;
-                principalType: "group";
-                stateHash: string;
-                version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
+        keyEpoch: number;
+        keyFingerprint: string;
+        principalId: string;
+        principalType: "group" | "organization";
+        stateHash: string;
+        version: number;
     }[]>>;
 }, z.core.$loose>;
 export type DocumentSyncErrorResponse = z.infer<typeof DocumentSyncErrorResponseSchema>;

package/internal/validators/response/documentSyncError.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { arraySchema } from "../schema.js";
-import { PrincipalPolicyBundleResponseSchema } from "./principal.js";
+import { PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT } from "../util/principalHistoryWire.js";
+import { ReferencedPrincipalStateResponseSchema } from "./principalReference.js";
 export const DOCUMENT_SYNC_ERROR_CODES = {
     checkpointCoverageConflict: "document_sync_checkpoint_coverage_conflict",
     conflict: "document_sync_conflict",
@@ -24,12 +25,12 @@ export function isDocumentSyncErrorCode(value) {
 export const DocumentSyncStateStaleErrorResponseSchema = z.looseObject({
     code: z.literal(DOCUMENT_SYNC_ERROR_CODES.stateStale),
     error: z.string().min(1),
-    principalPolicies: arraySchema(PrincipalPolicyBundleResponseSchema).optional(),
+    principalHeads: arraySchema(ReferencedPrincipalStateResponseSchema, PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT).optional(),
 });
 export const DocumentSyncErrorResponseSchema = z.looseObject({
     code: DocumentSyncErrorCodeSchema,
     error: z.string().min(1),
-    principalPolicies: arraySchema(PrincipalPolicyBundleResponseSchema).optional(),
+    principalHeads: arraySchema(ReferencedPrincipalStateResponseSchema, PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT).optional(),
 });
 export function isDocumentSyncErrorResponse(value) {
     return DocumentSyncErrorResponseSchema.safeParse(value).success;

package/internal/validators/response/documentSyncError.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentSyncError.js","sourceRoot":"","sources":["documentSyncError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,mCAAmC,EAAE,MAAM,aAAa,CAAC;AAElE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,0BAA0B,EAAE,4CAA4C;IACxE,QAAQ,EAAE,wBAAwB;IAClC,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,wBAAwB,EAAE,0CAA0C;IACpE,UAAU,EAAE,2BAA2B;IACvC,gBAAgB,EAAE,kCAAkC;CAC5C,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,OAAO,CAAC;IACnD,yBAAyB,CAAC,0BAA0B;IACpD,yBAAyB,CAAC,QAAQ;IAClC,yBAAyB,CAAC,wBAAwB;IAClD,yBAAyB,CAAC,UAAU;IACpC,yBAAyB,CAAC,gBAAgB;CAC3C,CAAC,CAAC;AAIH,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,OAAO,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,WAAW,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,UAAU,CAAC;IACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,iBAAiB,EAAE,WAAW,CAC5B,mCAAmC,CACpC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,WAAW,CAAC;IAC3D,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,iBAAiB,EAAE,WAAW,CAC5B,mCAAmC,CACpC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC;AAMH,MAAM,UAAU,2BAA2B,CACzC,KAAc;IAEd,OAAO,+BAA+B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,KAAc;IAEd,OAAO,yCAAyC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC5E,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAIlE,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,WAAW,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAMH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,iBAAiB,EAAE,wCAAwC;IAC3D,oBAAoB,EAAE,2CAA2C;IACjE,uBAAuB,EAAE,gDAAgD;IACzE,WAAW,EAAE,kCAAkC;IAC/C,qBAAqB,EAAE,6CAA6C;IACpE,YAAY,EAAE,mCAAmC;CACzC,CAAC;AAEX,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,OAAO,CAAC;IACzD,+BAA+B,CAAC,iBAAiB;IACjD,+BAA+B,CAAC,oBAAoB;IACpD,+BAA+B,CAAC,uBAAuB;IACvD,+BAA+B,CAAC,WAAW;IAC3C,+BAA+B,CAAC,qBAAqB;IACrD,+BAA+B,CAAC,YAAY;CAC7C,CAAC,CAAC;AAMH,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,2CAA2C,GAAG,CAAC,CAAC,OAAO,CAAC;IAC5D,yBAAyB,CAAC,QAAQ;IAClC,yBAAyB,CAAC,UAAU;IACpC,yBAAyB,CAAC,gBAAgB;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2CAA2C,GAAG,CAAC,CAAC,WAAW,CAAC;IACvE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;QACZ,iCAAiC;QACjC,2CAA2C;KAC5C,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { arraySchema } from \"../schema\";\nimport { PrincipalPolicyBundleResponseSchema } from \"./principal\";\n\nexport const DOCUMENT_SYNC_ERROR_CODES = {\n  checkpointCoverageConflict: \"document_sync_checkpoint_coverage_conflict\",\n  conflict: \"document_sync_conflict\",\n  // An inline container rekey would strand a level above a directly granted\n  // container. The write rolled back; the client repairs those containers\n  // standalone, where each rekey carries its own descendants, then retries.\n  descendantRekeysRequired: \"document_sync_descendant_rekeys_required\",\n  stateStale: \"document_sync_state_stale\",\n  updateIdConflict: \"document_sync_update_id_conflict\",\n} as const;\n\nexport const DocumentSyncErrorCodeSchema = z.literal([\n  DOCUMENT_SYNC_ERROR_CODES.checkpointCoverageConflict,\n  DOCUMENT_SYNC_ERROR_CODES.conflict,\n  DOCUMENT_SYNC_ERROR_CODES.descendantRekeysRequired,\n  DOCUMENT_SYNC_ERROR_CODES.stateStale,\n  DOCUMENT_SYNC_ERROR_CODES.updateIdConflict,\n]);\n\nexport type DocumentSyncErrorCode = z.infer<typeof DocumentSyncErrorCodeSchema>;\n\nexport function isDocumentSyncErrorCode(\n  value: unknown,\n): value is DocumentSyncErrorCode {\n  return DocumentSyncErrorCodeSchema.safeParse(value).success;\n}\n\nexport const DocumentSyncStateStaleErrorResponseSchema = z.looseObject({\n  code: z.literal(DOCUMENT_SYNC_ERROR_CODES.stateStale),\n  error: z.string().min(1),\n  principalPolicies: arraySchema(\n    PrincipalPolicyBundleResponseSchema,\n  ).optional(),\n});\n\nexport const DocumentSyncErrorResponseSchema = z.looseObject({\n  code: DocumentSyncErrorCodeSchema,\n  error: z.string().min(1),\n  principalPolicies: arraySchema(\n    PrincipalPolicyBundleResponseSchema,\n  ).optional(),\n});\n\nexport type DocumentSyncErrorResponse = z.infer<\n  typeof DocumentSyncErrorResponseSchema\n>;\n\nexport function isDocumentSyncErrorResponse(\n  value: unknown,\n): value is DocumentSyncErrorResponse {\n  return DocumentSyncErrorResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentSyncStateStaleErrorResponse(\n  value: unknown,\n): value is DocumentSyncStateStaleErrorResponse {\n  return DocumentSyncStateStaleErrorResponseSchema.safeParse(value).success;\n}\n\nexport type DocumentSyncStateStaleErrorResponse = z.infer<\n  typeof DocumentSyncStateStaleErrorResponseSchema\n>;\n\n/**\n * Positive server-verified \"this document does not exist\" signal. Clients run a\n * destructive local teardown when the upstream document is deleted, so that\n * action must never key off a bare HTTP 404 — proxy/tunnel error pages,\n * deploy-skew route misses, and container-level lookups all produce 404s that\n * say nothing about the document. Only the routes' genuine document-existence\n * checks emit this code.\n */\nexport const DOCUMENT_NOT_FOUND_ERROR_CODE = \"document_not_found\";\n\nexport type DocumentNotFoundErrorCode = typeof DOCUMENT_NOT_FOUND_ERROR_CODE;\n\nexport const DocumentNotFoundErrorResponseSchema = z.looseObject({\n  code: z.literal(DOCUMENT_NOT_FOUND_ERROR_CODE),\n  error: z.string().min(1),\n});\n\nexport type DocumentNotFoundErrorResponse = z.infer<\n  typeof DocumentNotFoundErrorResponseSchema\n>;\n\n/**\n * Stable codes for document writer-projection failures that surface as 409s.\n * The route deliberately remaps container-level and dependency 404s to 409\n * (a document-route 404 triggers a destructive client wipe), which used to\n * collapse every origin into an uncoded conflict. These codes let a client\n * report WHICH dependency refused without parsing message text.\n */\nexport const DOCUMENT_PROJECTION_ERROR_CODES = {\n  containerConflict: \"document_projection_container_conflict\",\n  containerUnavailable: \"document_projection_container_unavailable\",\n  contentKeyBundleMissing: \"document_projection_content_key_bundle_missing\",\n  headMissing: \"document_projection_head_missing\",\n  kekTargetsUnavailable: \"document_projection_kek_targets_unavailable\",\n  stateInvalid: \"document_projection_state_invalid\",\n} as const;\n\nexport const DocumentProjectionErrorCodeSchema = z.literal([\n  DOCUMENT_PROJECTION_ERROR_CODES.containerConflict,\n  DOCUMENT_PROJECTION_ERROR_CODES.containerUnavailable,\n  DOCUMENT_PROJECTION_ERROR_CODES.contentKeyBundleMissing,\n  DOCUMENT_PROJECTION_ERROR_CODES.headMissing,\n  DOCUMENT_PROJECTION_ERROR_CODES.kekTargetsUnavailable,\n  DOCUMENT_PROJECTION_ERROR_CODES.stateInvalid,\n]);\n\nexport type DocumentProjectionErrorCode = z.infer<\n  typeof DocumentProjectionErrorCodeSchema\n>;\n\n// Preserve the writer-projection route's existing sync-code surface. Rotation\n// checkpoint coverage is a document-sync submission concern and must not leak\n// into this read endpoint merely because both responses share this module.\nconst DocumentWriterProjectionSyncErrorCodeSchema = z.literal([\n  DOCUMENT_SYNC_ERROR_CODES.conflict,\n  DOCUMENT_SYNC_ERROR_CODES.stateStale,\n  DOCUMENT_SYNC_ERROR_CODES.updateIdConflict,\n]);\n\nexport const DocumentWriterProjectionErrorResponseSchema = z.looseObject({\n  code: z.union([\n    DocumentProjectionErrorCodeSchema,\n    DocumentWriterProjectionSyncErrorCodeSchema,\n  ]),\n  error: z.string().min(1),\n});\n\nexport type DocumentWriterProjectionErrorResponse = z.infer<\n  typeof DocumentWriterProjectionErrorResponseSchema\n>;\n"]}
+{"version":3,"file":"documentSyncError.js","sourceRoot":"","sources":["documentSyncError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,kCAAkC,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,sCAAsC,EAAE,MAAM,sBAAsB,CAAC;AAE9E,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,0BAA0B,EAAE,4CAA4C;IACxE,QAAQ,EAAE,wBAAwB;IAClC,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,wBAAwB,EAAE,0CAA0C;IACpE,UAAU,EAAE,2BAA2B;IACvC,gBAAgB,EAAE,kCAAkC;CAC5C,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,OAAO,CAAC;IACnD,yBAAyB,CAAC,0BAA0B;IACpD,yBAAyB,CAAC,QAAQ;IAClC,yBAAyB,CAAC,wBAAwB;IAClD,yBAAyB,CAAC,UAAU;IACpC,yBAAyB,CAAC,gBAAgB;CAC3C,CAAC,CAAC;AAIH,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,OAAO,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,WAAW,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,UAAU,CAAC;IACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,cAAc,EAAE,WAAW,CACzB,sCAAsC,EACtC,kCAAkC,CACnC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,WAAW,CAAC;IAC3D,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,cAAc,EAAE,WAAW,CACzB,sCAAsC,EACtC,kCAAkC,CACnC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC;AAMH,MAAM,UAAU,2BAA2B,CACzC,KAAc;IAEd,OAAO,+BAA+B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,KAAc;IAEd,OAAO,yCAAyC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC5E,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAIlE,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,WAAW,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAMH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,iBAAiB,EAAE,wCAAwC;IAC3D,oBAAoB,EAAE,2CAA2C;IACjE,uBAAuB,EAAE,gDAAgD;IACzE,WAAW,EAAE,kCAAkC;IAC/C,qBAAqB,EAAE,6CAA6C;IACpE,YAAY,EAAE,mCAAmC;CACzC,CAAC;AAEX,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,OAAO,CAAC;IACzD,+BAA+B,CAAC,iBAAiB;IACjD,+BAA+B,CAAC,oBAAoB;IACpD,+BAA+B,CAAC,uBAAuB;IACvD,+BAA+B,CAAC,WAAW;IAC3C,+BAA+B,CAAC,qBAAqB;IACrD,+BAA+B,CAAC,YAAY;CAC7C,CAAC,CAAC;AAMH,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,2CAA2C,GAAG,CAAC,CAAC,OAAO,CAAC;IAC5D,yBAAyB,CAAC,QAAQ;IAClC,yBAAyB,CAAC,UAAU;IACpC,yBAAyB,CAAC,gBAAgB;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2CAA2C,GAAG,CAAC,CAAC,WAAW,CAAC;IACvE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;QACZ,iCAAiC;QACjC,2CAA2C;KAC5C,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { arraySchema } from \"../schema\";\nimport { PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT } from \"../util/principalHistoryWire\";\nimport { ReferencedPrincipalStateResponseSchema } from \"./principalReference\";\n\nexport const DOCUMENT_SYNC_ERROR_CODES = {\n  checkpointCoverageConflict: \"document_sync_checkpoint_coverage_conflict\",\n  conflict: \"document_sync_conflict\",\n  // An inline container rekey would strand a level above a directly granted\n  // container. The write rolled back; the client repairs those containers\n  // standalone, where each rekey carries its own descendants, then retries.\n  descendantRekeysRequired: \"document_sync_descendant_rekeys_required\",\n  stateStale: \"document_sync_state_stale\",\n  updateIdConflict: \"document_sync_update_id_conflict\",\n} as const;\n\nexport const DocumentSyncErrorCodeSchema = z.literal([\n  DOCUMENT_SYNC_ERROR_CODES.checkpointCoverageConflict,\n  DOCUMENT_SYNC_ERROR_CODES.conflict,\n  DOCUMENT_SYNC_ERROR_CODES.descendantRekeysRequired,\n  DOCUMENT_SYNC_ERROR_CODES.stateStale,\n  DOCUMENT_SYNC_ERROR_CODES.updateIdConflict,\n]);\n\nexport type DocumentSyncErrorCode = z.infer<typeof DocumentSyncErrorCodeSchema>;\n\nexport function isDocumentSyncErrorCode(\n  value: unknown,\n): value is DocumentSyncErrorCode {\n  return DocumentSyncErrorCodeSchema.safeParse(value).success;\n}\n\nexport const DocumentSyncStateStaleErrorResponseSchema = z.looseObject({\n  code: z.literal(DOCUMENT_SYNC_ERROR_CODES.stateStale),\n  error: z.string().min(1),\n  principalHeads: arraySchema(\n    ReferencedPrincipalStateResponseSchema,\n    PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT,\n  ).optional(),\n});\n\nexport const DocumentSyncErrorResponseSchema = z.looseObject({\n  code: DocumentSyncErrorCodeSchema,\n  error: z.string().min(1),\n  principalHeads: arraySchema(\n    ReferencedPrincipalStateResponseSchema,\n    PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT,\n  ).optional(),\n});\n\nexport type DocumentSyncErrorResponse = z.infer<\n  typeof DocumentSyncErrorResponseSchema\n>;\n\nexport function isDocumentSyncErrorResponse(\n  value: unknown,\n): value is DocumentSyncErrorResponse {\n  return DocumentSyncErrorResponseSchema.safeParse(value).success;\n}\n\nexport function isDocumentSyncStateStaleErrorResponse(\n  value: unknown,\n): value is DocumentSyncStateStaleErrorResponse {\n  return DocumentSyncStateStaleErrorResponseSchema.safeParse(value).success;\n}\n\nexport type DocumentSyncStateStaleErrorResponse = z.infer<\n  typeof DocumentSyncStateStaleErrorResponseSchema\n>;\n\n/**\n * Positive server-verified \"this document does not exist\" signal. Clients run a\n * destructive local teardown when the upstream document is deleted, so that\n * action must never key off a bare HTTP 404 — proxy/tunnel error pages,\n * deploy-skew route misses, and container-level lookups all produce 404s that\n * say nothing about the document. Only the routes' genuine document-existence\n * checks emit this code.\n */\nexport const DOCUMENT_NOT_FOUND_ERROR_CODE = \"document_not_found\";\n\nexport type DocumentNotFoundErrorCode = typeof DOCUMENT_NOT_FOUND_ERROR_CODE;\n\nexport const DocumentNotFoundErrorResponseSchema = z.looseObject({\n  code: z.literal(DOCUMENT_NOT_FOUND_ERROR_CODE),\n  error: z.string().min(1),\n});\n\nexport type DocumentNotFoundErrorResponse = z.infer<\n  typeof DocumentNotFoundErrorResponseSchema\n>;\n\n/**\n * Stable codes for document writer-projection failures that surface as 409s.\n * The route deliberately remaps container-level and dependency 404s to 409\n * (a document-route 404 triggers a destructive client wipe), which used to\n * collapse every origin into an uncoded conflict. These codes let a client\n * report WHICH dependency refused without parsing message text.\n */\nexport const DOCUMENT_PROJECTION_ERROR_CODES = {\n  containerConflict: \"document_projection_container_conflict\",\n  containerUnavailable: \"document_projection_container_unavailable\",\n  contentKeyBundleMissing: \"document_projection_content_key_bundle_missing\",\n  headMissing: \"document_projection_head_missing\",\n  kekTargetsUnavailable: \"document_projection_kek_targets_unavailable\",\n  stateInvalid: \"document_projection_state_invalid\",\n} as const;\n\nexport const DocumentProjectionErrorCodeSchema = z.literal([\n  DOCUMENT_PROJECTION_ERROR_CODES.containerConflict,\n  DOCUMENT_PROJECTION_ERROR_CODES.containerUnavailable,\n  DOCUMENT_PROJECTION_ERROR_CODES.contentKeyBundleMissing,\n  DOCUMENT_PROJECTION_ERROR_CODES.headMissing,\n  DOCUMENT_PROJECTION_ERROR_CODES.kekTargetsUnavailable,\n  DOCUMENT_PROJECTION_ERROR_CODES.stateInvalid,\n]);\n\nexport type DocumentProjectionErrorCode = z.infer<\n  typeof DocumentProjectionErrorCodeSchema\n>;\n\n// Preserve the writer-projection route's existing sync-code surface. Rotation\n// checkpoint coverage is a document-sync submission concern and must not leak\n// into this read endpoint merely because both responses share this module.\nconst DocumentWriterProjectionSyncErrorCodeSchema = z.literal([\n  DOCUMENT_SYNC_ERROR_CODES.conflict,\n  DOCUMENT_SYNC_ERROR_CODES.stateStale,\n  DOCUMENT_SYNC_ERROR_CODES.updateIdConflict,\n]);\n\nexport const DocumentWriterProjectionErrorResponseSchema = z.looseObject({\n  code: z.union([\n    DocumentProjectionErrorCodeSchema,\n    DocumentWriterProjectionSyncErrorCodeSchema,\n  ]),\n  error: z.string().min(1),\n});\n\nexport type DocumentWriterProjectionErrorResponse = z.infer<\n  typeof DocumentWriterProjectionErrorResponseSchema\n>;\n"]}

package/internal/validators/response/index.d.ts

@@ -23,7 +23,7 @@ export { isOrganizationBillingHistoryResponse, type OrganizationBillingHistoryCa
 export { isOrganizationBillingManagementUrlResponse, type OrganizationBillingManagementUrlResponse, OrganizationBillingManagementUrlResponseSchema, } from "./organizationBillingManagementUrl.js";
 export { isOrganizationDataUsageResponse, ORGANIZATION_DOCUMENT_USAGE_CATEGORIES, type OrganizationBlobDataUsageResponse, type OrganizationDataUsageResponse, OrganizationDataUsageResponseSchema, type OrganizationDocumentDataUsageResponse, type OrganizationDocumentUsageCategory, type OrganizationDocumentUsageCategoryBreakdown, } from "./organizationDataUsage.js";
 export { isOrganizationNativePurchaseEligibilityResponse, type OrganizationNativePurchaseEligibilityResponse, OrganizationNativePurchaseEligibilityResponseSchema, type OrganizationNativePurchaseIneligibilityReason, OrganizationNativePurchaseIneligibilityReasonSchema, } from "./organizationNativePurchaseEligibility.js";
-export { type OrganizationPolicyHistoryResponse, OrganizationPolicyHistoryResponseSchema, } from "./organizationPolicyHistory.js";
+export { type OrganizationPolicyHistoryResponse, OrganizationPolicyHistoryResponseSchema, PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE, } from "./organizationPolicyHistory.js";
 export { ORGANIZATION_PRESENTATION_ERROR_CODES, type OrganizationPresentationErrorCode, OrganizationPresentationErrorCodeSchema, type OrganizationPresentationFailureResponse, OrganizationPresentationFailureResponseSchema, } from "./organizationPresentationError.js";
 export { type CreateOrganizationResponse, CreateOrganizationResponseSchema, isCreateOrganizationResponse, isOrganizationProvisioningResponse, type OrganizationProvisioningResponse, OrganizationProvisioningResponseSchema, } from "./organizationProvisioning.js";
 export { isOrganizationReadModelResponse, type OrganizationReadModelDeltaResponse, type OrganizationReadModelDirectoryResponse, type OrganizationReadModelGrantsResponse, type OrganizationReadModelGroupMembershipResponse, type OrganizationReadModelGroupMembershipsResponse, type OrganizationReadModelOrganizationPolicyResponse, type OrganizationReadModelResponse, OrganizationReadModelResponseSchema, type OrganizationReadModelSnapshotResponse, } from "./organizationReadModel.js";

package/internal/validators/response/index.js

@@ -23,7 +23,7 @@ export { isOrganizationBillingHistoryResponse, OrganizationBillingHistoryCategor
 export { isOrganizationBillingManagementUrlResponse, OrganizationBillingManagementUrlResponseSchema, } from "./organizationBillingManagementUrl.js";
 export { isOrganizationDataUsageResponse, ORGANIZATION_DOCUMENT_USAGE_CATEGORIES, OrganizationDataUsageResponseSchema, } from "./organizationDataUsage.js";
 export { isOrganizationNativePurchaseEligibilityResponse, OrganizationNativePurchaseEligibilityResponseSchema, OrganizationNativePurchaseIneligibilityReasonSchema, } from "./organizationNativePurchaseEligibility.js";
-export { OrganizationPolicyHistoryResponseSchema, } from "./organizationPolicyHistory.js";
+export { OrganizationPolicyHistoryResponseSchema, PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE, } from "./organizationPolicyHistory.js";
 export { ORGANIZATION_PRESENTATION_ERROR_CODES, OrganizationPresentationErrorCodeSchema, OrganizationPresentationFailureResponseSchema, } from "./organizationPresentationError.js";
 export { CreateOrganizationResponseSchema, isCreateOrganizationResponse, isOrganizationProvisioningResponse, OrganizationProvisioningResponseSchema, } from "./organizationProvisioning.js";
 export { isOrganizationReadModelResponse, OrganizationReadModelResponseSchema, } from "./organizationReadModel.js";