@tearleads/client-sdk 0.1.19 → 0.1.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (238) hide show
  1. package/client/organizations/index.js +2 -2
  2. package/client/organizations/index.js.map +1 -1
  3. package/client/organizations/organizationHistory.js +66 -0
  4. package/client/organizations/organizationHistory.js.map +1 -0
  5. package/client/organizations/organizationReadModels.d.ts +1 -1
  6. package/client/organizations/organizationReadModels.js +7 -27
  7. package/client/organizations/organizationReadModels.js.map +1 -1
  8. package/client/organizations/organizationsTypes.d.ts +1 -1
  9. package/client/organizations/organizationsTypes.js.map +1 -1
  10. package/data/containers/shared/types.d.ts +2 -2
  11. package/data/containers/shared/types.js.map +1 -1
  12. package/data/documents/shared/syncSubmitFailure.d.ts +2 -2
  13. package/data/documents/shared/syncSubmitFailure.js.map +1 -1
  14. package/data/keyingProjectionVerification/documentPurgeCheckpointCurrency.js +34 -8
  15. package/data/keyingProjectionVerification/documentPurgeCheckpointCurrency.js.map +1 -1
  16. package/data/keyingProjectionVerification/documentPurgeDocumentChainVerification.js.map +1 -1
  17. package/data/keyingProjectionVerification/documentPurgePolicyCheckpoints.js +17 -0
  18. package/data/keyingProjectionVerification/documentPurgePolicyCheckpoints.js.map +1 -0
  19. package/data/keyingProjectionVerification/documentPurgePolicyCurrency.js +55 -0
  20. package/data/keyingProjectionVerification/documentPurgePolicyCurrency.js.map +1 -0
  21. package/data/keyingProjectionVerification/documentPurgePrincipalEvidence.js +25 -13
  22. package/data/keyingProjectionVerification/documentPurgePrincipalEvidence.js.map +1 -1
  23. package/data/keyingProjectionVerification/documentPurgeProofVerification.d.ts +5 -3
  24. package/data/keyingProjectionVerification/documentPurgeProofVerification.js +52 -8
  25. package/data/keyingProjectionVerification/documentPurgeProofVerification.js.map +1 -1
  26. package/data/keyingProjectionVerification/projectionPolicyEvidence.js.map +1 -1
  27. package/data/keyingProjectionVerification/types.d.ts +4 -0
  28. package/data/keyingProjectionVerification/types.js.map +1 -1
  29. package/data/persistence/organizations/organizationReadModelProjection.js +2 -2
  30. package/data/persistence/organizations/organizationReadModelProjection.js.map +1 -1
  31. package/data/persistence/principalAuthorizationCheckpoints.js +1 -1
  32. package/data/persistence/principalAuthorizationCheckpoints.js.map +1 -1
  33. package/data/persistence/principalCurrentAcknowledgementPersistence.d.ts +1 -0
  34. package/data/persistence/principalCurrentAcknowledgementPersistence.js +58 -12
  35. package/data/persistence/principalCurrentAcknowledgementPersistence.js.map +1 -1
  36. package/data/persistence/principalHistoryEvidencePersistence.d.ts +2 -0
  37. package/data/persistence/principalHistoryEvidencePersistence.js +2 -0
  38. package/data/persistence/principalHistoryEvidencePersistence.js.map +1 -1
  39. package/data/persistence/principalHistoryIncompleteRetention.js +32 -0
  40. package/data/persistence/principalHistoryIncompleteRetention.js.map +1 -0
  41. package/data/persistence/principalHistoryNodeRetention.js +76 -0
  42. package/data/persistence/principalHistoryNodeRetention.js.map +1 -0
  43. package/data/persistence/principalHistoryPrefixPersistence.d.ts +1 -0
  44. package/data/persistence/principalHistoryPrefixPersistence.js +30 -1
  45. package/data/persistence/principalHistoryPrefixPersistence.js.map +1 -1
  46. package/data/persistence/principalHistoryRootOwnership.js +71 -0
  47. package/data/persistence/principalHistoryRootOwnership.js.map +1 -0
  48. package/data/persistence/principalHistoryStagePersistence.js +45 -0
  49. package/data/persistence/principalHistoryStagePersistence.js.map +1 -1
  50. package/data/persistence/principalHistoryStageRetention.js +44 -0
  51. package/data/persistence/principalHistoryStageRetention.js.map +1 -0
  52. package/data/persistence/principalHistoryUnpublishedRetention.js +71 -0
  53. package/data/persistence/principalHistoryUnpublishedRetention.js.map +1 -0
  54. package/data/persistence/principalKeyEnvelopeArchivePersistence.js +63 -0
  55. package/data/persistence/principalKeyEnvelopeArchivePersistence.js.map +1 -0
  56. package/data/persistence/principalKeyEnvelopeCandidates.js +10 -1
  57. package/data/persistence/principalKeyEnvelopeCandidates.js.map +1 -1
  58. package/data/persistence/principalPolicyReferencePersistence.js +2 -2
  59. package/data/persistence/principalPolicyReferencePersistence.js.map +1 -1
  60. package/data/sqlite/principalHistoryEvidenceSchema.js +2 -0
  61. package/data/sqlite/principalHistoryEvidenceSchema.js.map +1 -1
  62. package/data/sqlite/principalHistoryNodeRetentionSchema.js +30 -0
  63. package/data/sqlite/principalHistoryNodeRetentionSchema.js.map +1 -0
  64. package/data/sqlite/principalHistoryRetentionSchema.js +40 -0
  65. package/data/sqlite/principalHistoryRetentionSchema.js.map +1 -0
  66. package/data/sqlite/principalHistoryStageSchema.js +2 -0
  67. package/data/sqlite/principalHistoryStageSchema.js.map +1 -1
  68. package/data/sqlite/schema.d.ts +453 -0
  69. package/data/sqlite/schema.js +6 -0
  70. package/data/sqlite/schema.js.map +1 -1
  71. package/data/sqlite/sqliteCommitGuards.js +49 -0
  72. package/data/sqlite/sqliteCommitGuards.js.map +1 -0
  73. package/data/sqlite/sqlitePersistenceRuntime.js +14 -2
  74. package/data/sqlite/sqlitePersistenceRuntime.js.map +1 -1
  75. package/index.d.ts +3 -1
  76. package/index.js.map +1 -1
  77. package/internal/api-client/ApiClient.d.ts +60 -137
  78. package/internal/api-client/ApiClient.js +7 -5
  79. package/internal/api-client/ApiClient.js.map +1 -1
  80. package/internal/api-client/apiRequestRuntime.js +7 -7
  81. package/internal/api-client/apiRequestRuntime.js.map +1 -1
  82. package/internal/api-client/documentPurge.js +25 -0
  83. package/internal/api-client/documentPurge.js.map +1 -0
  84. package/internal/api-client/organizationPolicyHistory.d.ts +53 -0
  85. package/internal/api-client/organizationPolicyHistory.js +15 -0
  86. package/internal/api-client/organizationPolicyHistory.js.map +1 -0
  87. package/internal/api-client/requestInternals.js +4 -4
  88. package/internal/api-client/requestInternals.js.map +1 -1
  89. package/internal/api-client/types.d.ts +2 -2
  90. package/internal/api-client/types.js.map +1 -1
  91. package/internal/crypto/keying/accessEvent.js +11 -9
  92. package/internal/crypto/keying/accessEvent.js.map +1 -1
  93. package/internal/crypto/keying/principalPolicyChainEntry.js +3 -0
  94. package/internal/crypto/keying/principalPolicyChainEntry.js.map +1 -1
  95. package/internal/crypto/keying/principalPolicyHistory.js +4 -0
  96. package/internal/crypto/keying/principalPolicyHistory.js.map +1 -1
  97. package/internal/crypto/keying/principalPolicyHistoryTypes.d.ts +2 -0
  98. package/internal/crypto/keying/principalPolicyHistoryTypes.js.map +1 -1
  99. package/internal/crypto/keying/principalPolicyTransition.d.ts +2 -1
  100. package/internal/crypto/keying/principalPolicyTransition.js +5 -0
  101. package/internal/crypto/keying/principalPolicyTransition.js.map +1 -1
  102. package/internal/crypto/principalState.js +2 -2
  103. package/internal/crypto/principalState.js.map +1 -1
  104. package/internal/validators/operation/containerMutations.d.ts +448 -6528
  105. package/internal/validators/operation/documentMutations.d.ts +323 -579
  106. package/internal/validators/operation/documentMutations.js +22 -4
  107. package/internal/validators/operation/documentMutations.js.map +1 -1
  108. package/internal/validators/operation/documentSync.d.ts +26 -406
  109. package/internal/validators/operation/organizationPolicyHistory.d.ts +188 -310
  110. package/internal/validators/operation/organizationPolicyHistory.js +17 -3
  111. package/internal/validators/operation/organizationPolicyHistory.js.map +1 -1
  112. package/internal/validators/operation/organizations.d.ts +2 -2
  113. package/internal/validators/request/principal.js +2 -2
  114. package/internal/validators/request/principal.js.map +1 -1
  115. package/internal/validators/response/containerMutationError.d.ts +28 -408
  116. package/internal/validators/response/documentMutation.d.ts +232 -544
  117. package/internal/validators/response/documentMutation.js +1 -2
  118. package/internal/validators/response/documentMutation.js.map +1 -1
  119. package/internal/validators/response/documentSyncError.d.ts +26 -406
  120. package/internal/validators/response/documentSyncError.js +4 -3
  121. package/internal/validators/response/documentSyncError.js.map +1 -1
  122. package/internal/validators/response/index.d.ts +1 -1
  123. package/internal/validators/response/index.js +1 -1
  124. package/internal/validators/response/index.js.map +1 -1
  125. package/internal/validators/response/organization.d.ts +1 -1
  126. package/internal/validators/response/organization.js +1 -1
  127. package/internal/validators/response/organization.js.map +1 -1
  128. package/internal/validators/response/organizationPolicyHistory.d.ts +127 -309
  129. package/internal/validators/response/organizationPolicyHistory.js +10 -4
  130. package/internal/validators/response/organizationPolicyHistory.js.map +1 -1
  131. package/internal/validators/response/organizationReadModel.d.ts +5 -5
  132. package/internal/validators/response/principal.d.ts +28 -408
  133. package/internal/validators/response/principal.js +3 -1
  134. package/internal/validators/response/principal.js.map +1 -1
  135. package/internal/validators/response/principalReference.d.ts +1 -1
  136. package/internal/validators/response/principalReference.js +1 -1
  137. package/internal/validators/response/principalReference.js.map +1 -1
  138. package/internal/validators/response/principalSnapshot.js +4 -4
  139. package/internal/validators/response/principalSnapshot.js.map +1 -1
  140. package/internal/validators/util/index.d.ts +1 -1
  141. package/internal/validators/util/index.js +1 -1
  142. package/internal/validators/util/index.js.map +1 -1
  143. package/internal/validators/util/principalHistoryWire.d.ts +2 -0
  144. package/internal/validators/util/principalHistoryWire.js +2 -0
  145. package/internal/validators/util/principalHistoryWire.js.map +1 -1
  146. package/package.json +1 -1
  147. package/workflows/container-contents/container-state/createWithMetadata.js +19 -49
  148. package/workflows/container-contents/container-state/createWithMetadata.js.map +1 -1
  149. package/workflows/container-contents/container-state/groupGrantVerification.js +29 -0
  150. package/workflows/container-contents/container-state/groupGrantVerification.js.map +1 -1
  151. package/workflows/container-contents/container-state/groupShareEpoch.js +33 -0
  152. package/workflows/container-contents/container-state/groupShareEpoch.js.map +1 -0
  153. package/workflows/container-contents/container-state/remote.js +4 -1
  154. package/workflows/container-contents/container-state/remote.js.map +1 -1
  155. package/workflows/container-contents/container-state/share.js +2 -24
  156. package/workflows/container-contents/container-state/share.js.map +1 -1
  157. package/workflows/container-contents/documentTombstoneEvidence.js +23 -12
  158. package/workflows/container-contents/documentTombstoneEvidence.js.map +1 -1
  159. package/workflows/containers/child/create.js +1 -3
  160. package/workflows/containers/child/create.js.map +1 -1
  161. package/workflows/containers/child/createSubmission.d.ts +1 -3
  162. package/workflows/containers/child/createSubmission.js +13 -15
  163. package/workflows/containers/child/createSubmission.js.map +1 -1
  164. package/workflows/containers/child/currentShareGrantMutation.js +82 -0
  165. package/workflows/containers/child/currentShareGrantMutation.js.map +1 -0
  166. package/workflows/containers/child/currentSharePrincipalPolicy.js +83 -0
  167. package/workflows/containers/child/currentSharePrincipalPolicy.js.map +1 -0
  168. package/workflows/containers/child/mutationSubmit.js +1 -1
  169. package/workflows/containers/child/mutationSubmit.js.map +1 -1
  170. package/workflows/containers/child/runtimeCurrentGroupShare.js +82 -0
  171. package/workflows/containers/child/runtimeCurrentGroupShare.js.map +1 -0
  172. package/workflows/containers/child/share.js +1 -14
  173. package/workflows/containers/child/share.js.map +1 -1
  174. package/workflows/containers/child/shareProjection.js +15 -0
  175. package/workflows/containers/child/shareProjection.js.map +1 -0
  176. package/workflows/containers/mutationResponse.js +1 -1
  177. package/workflows/containers/mutationResponse.js.map +1 -1
  178. package/workflows/documents/purge.d.ts +3 -0
  179. package/workflows/documents/purge.js +13 -0
  180. package/workflows/documents/purge.js.map +1 -1
  181. package/workflows/documents/sync.js +2 -0
  182. package/workflows/documents/sync.js.map +1 -1
  183. package/workflows/documents/syncFailures.js +2 -2
  184. package/workflows/documents/syncFailures.js.map +1 -1
  185. package/workflows/documents/syncPolicyRepair.js +15 -13
  186. package/workflows/documents/syncPolicyRepair.js.map +1 -1
  187. package/workflows/organizations/initialPrincipalCurrentPublication.js +2 -0
  188. package/workflows/organizations/initialPrincipalCurrentPublication.js.map +1 -1
  189. package/workflows/organizations/loadPolicyHistoryDetails.js +31 -32
  190. package/workflows/organizations/loadPolicyHistoryDetails.js.map +1 -1
  191. package/workflows/organizations/organizationPolicyHistoryDetails.js +37 -15
  192. package/workflows/organizations/organizationPolicyHistoryDetails.js.map +1 -1
  193. package/workflows/organizations/organizationPolicyHistoryVerification.js +56 -69
  194. package/workflows/organizations/organizationPolicyHistoryVerification.js.map +1 -1
  195. package/workflows/organizations/policyHistoryCache.js +5 -2
  196. package/workflows/organizations/policyHistoryCache.js.map +1 -1
  197. package/workflows/organizations/policyHistoryTypes.d.ts +1 -0
  198. package/workflows/organizations/policyHistoryTypes.js.map +1 -1
  199. package/workflows/organizations/retainAcknowledgedPrincipalCurrents.js +4 -1
  200. package/workflows/organizations/retainAcknowledgedPrincipalCurrents.js.map +1 -1
  201. package/workflows/principals/loadRecoveredPrincipalHistoryPage.d.ts +0 -1
  202. package/workflows/principals/loadRecoveredPrincipalHistoryPage.js +1 -2
  203. package/workflows/principals/loadRecoveredPrincipalHistoryPage.js.map +1 -1
  204. package/workflows/principals/policyRepair.js +38 -0
  205. package/workflows/principals/policyRepair.js.map +1 -0
  206. package/workflows/principals/policyRepairBudget.d.ts +2 -2
  207. package/workflows/principals/policyRepairBudget.js +3 -3
  208. package/workflows/principals/policyRepairBudget.js.map +1 -1
  209. package/workflows/principals/principalHistoryRecoveryPrefix.js +4 -0
  210. package/workflows/principals/principalHistoryRecoveryPrefix.js.map +1 -1
  211. package/workflows/principals/principalRecoveryLocalPreference.js +3 -2
  212. package/workflows/principals/principalRecoveryLocalPreference.js.map +1 -1
  213. package/workflows/principals/publicPrincipalHistoryPage.js +1 -0
  214. package/workflows/principals/publicPrincipalHistoryPage.js.map +1 -1
  215. package/workflows/principals/publicPrincipalHistoryProgress.js +1 -0
  216. package/workflows/principals/publicPrincipalHistoryProgress.js.map +1 -1
  217. package/workflows/principals/publicPrincipalHistoryTypes.d.ts +2 -0
  218. package/workflows/principals/publicPrincipalHistoryTypes.js.map +1 -1
  219. package/workflows/principals/publicProjectionPrincipal.js +1 -0
  220. package/workflows/principals/publicProjectionPrincipal.js.map +1 -1
  221. package/workflows/principals/recoverPrincipalHistoryPage.js +2 -1
  222. package/workflows/principals/recoverPrincipalHistoryPage.js.map +1 -1
  223. package/workflows/principals/recoverPrincipalPolicyHistory.js +1 -0
  224. package/workflows/principals/recoverPrincipalPolicyHistory.js.map +1 -1
  225. package/workflows/principals/recoverPublicPrincipalHistory.js +2 -0
  226. package/workflows/principals/recoverPublicPrincipalHistory.js.map +1 -1
  227. package/workflows/principals/runtimePolicyRecovery.js +2 -1
  228. package/workflows/principals/runtimePolicyRecovery.js.map +1 -1
  229. package/workflows/principals/selectPublicPrincipalHistory.js +21 -15
  230. package/workflows/principals/selectPublicPrincipalHistory.js.map +1 -1
  231. package/workflows/sync/remoteResetPrincipalScope.js +6 -0
  232. package/workflows/sync/remoteResetPrincipalScope.js.map +1 -1
  233. package/data/keyingProjectionVerification/principalPolicySnapshotVerification.js +0 -208
  234. package/data/keyingProjectionVerification/principalPolicySnapshotVerification.js.map +0 -1
  235. package/data/keyingProjectionVerification/snapshotVerificationCache.js +0 -39
  236. package/data/keyingProjectionVerification/snapshotVerificationCache.js.map +0 -1
  237. package/workflows/containers/child/policyRepair.js +0 -23
  238. package/workflows/containers/child/policyRepair.js.map +0 -1
@@ -339,88 +339,49 @@ export declare const DocumentPurgeProofResponseSchema: z.ZodType<{
339
339
  eventHash: string;
340
340
  };
341
341
  purgedAt: string;
342
- principalPolicySnapshots: {
343
- currentGrants: {
344
- accessLevel: "admin" | "read" | "write";
345
- containerId: string;
346
- }[];
347
- currentProjection: {
348
- role: "member" | "admin";
349
- userId: string;
350
- }[];
351
- currentState: {
352
- createdAt: string;
353
- encapsulationPublicKey: string;
354
- externalAuthority: {
342
+ policyEvidence: {
343
+ organization: {
344
+ head: {
355
345
  keyEpoch: number;
356
346
  keyFingerprint: string;
357
347
  principalId: string;
358
- principalType: "group";
348
+ principalType: "group" | "organization";
359
349
  stateHash: string;
360
350
  version: number;
361
- } | null;
362
- grantCount: number;
363
- grantRoot: string;
364
- keyEpoch: number;
365
- keyFingerprint: string;
366
- memberCount: number;
367
- memberEnvelopesRoot: string;
368
- membershipMode: "projection";
369
- membershipRoot: string;
370
- payloadCiphertextHash: string;
371
- prevStateHash: string | null;
372
- principalId: string;
373
- principalType: "group" | "organization";
374
- projectionRoot: string;
375
- signature: string;
376
- signedAt: string;
377
- signerUserId: string;
378
- signerUserKeyFingerprint: string;
379
- stateHash: string;
380
- version: number;
381
- };
382
- previousStates: {
383
- grants: {
384
- accessLevel: "admin" | "read" | "write";
385
- containerId: string;
386
- }[];
387
- projection: {
388
- role: "member" | "admin";
389
- userId: string;
390
- }[];
391
- state: {
351
+ };
352
+ grant: string;
353
+ } | null;
354
+ organizationPayloads: {
355
+ reference: {
356
+ keyEpoch: number;
357
+ keyFingerprint: string;
358
+ principalId: string;
359
+ principalType: "group" | "organization";
360
+ stateHash: string;
361
+ version: number;
362
+ };
363
+ payload: {
364
+ cipherSuite: "aes-256-gcm";
365
+ ciphertext: string;
366
+ ciphertextHash: string;
392
367
  createdAt: string;
393
- encapsulationPublicKey: string;
394
- externalAuthority: {
395
- keyEpoch: number;
396
- keyFingerprint: string;
397
- principalId: string;
398
- principalType: "group";
399
- stateHash: string;
400
- version: number;
401
- } | null;
402
- grantCount: number;
403
- grantRoot: string;
368
+ principalId: string;
369
+ principalType: "group" | "organization";
370
+ stateHash: string;
371
+ };
372
+ }[];
373
+ groups: {
374
+ head: {
404
375
  keyEpoch: number;
405
376
  keyFingerprint: string;
406
- memberCount: number;
407
- memberEnvelopesRoot: string;
408
- membershipMode: "projection";
409
- membershipRoot: string;
410
- payloadCiphertextHash: string;
411
- prevStateHash: string | null;
412
377
  principalId: string;
413
378
  principalType: "group" | "organization";
414
- projectionRoot: string;
415
- signature: string;
416
- signedAt: string;
417
- signerUserId: string;
418
- signerUserKeyFingerprint: string;
419
379
  stateHash: string;
420
380
  version: number;
421
381
  };
382
+ grant: string;
422
383
  }[];
423
- }[];
384
+ };
424
385
  }, {
425
386
  authorizingContainerPath: {
426
387
  event: {
@@ -479,88 +440,49 @@ export declare const DocumentPurgeProofResponseSchema: z.ZodType<{
479
440
  eventHash: string;
480
441
  };
481
442
  purgedAt: string;
482
- principalPolicySnapshots: {
483
- currentGrants: {
484
- accessLevel: "admin" | "read" | "write";
485
- containerId: string;
486
- }[];
487
- currentProjection: {
488
- role: "member" | "admin";
489
- userId: string;
490
- }[];
491
- currentState: {
492
- createdAt: string;
493
- encapsulationPublicKey: string;
494
- externalAuthority: {
443
+ policyEvidence: {
444
+ organization: {
445
+ head: {
495
446
  keyEpoch: number;
496
447
  keyFingerprint: string;
497
448
  principalId: string;
498
- principalType: "group";
449
+ principalType: "group" | "organization";
499
450
  stateHash: string;
500
451
  version: number;
501
- } | null;
502
- grantCount: number;
503
- grantRoot: string;
504
- keyEpoch: number;
505
- keyFingerprint: string;
506
- memberCount: number;
507
- memberEnvelopesRoot: string;
508
- membershipMode: "projection";
509
- membershipRoot: string;
510
- payloadCiphertextHash: string;
511
- prevStateHash: string | null;
512
- principalId: string;
513
- principalType: "group" | "organization";
514
- projectionRoot: string;
515
- signature: string;
516
- signedAt: string;
517
- signerUserId: string;
518
- signerUserKeyFingerprint: string;
519
- stateHash: string;
520
- version: number;
521
- };
522
- previousStates: {
523
- grants: {
524
- accessLevel: "admin" | "read" | "write";
525
- containerId: string;
526
- }[];
527
- projection: {
528
- role: "member" | "admin";
529
- userId: string;
530
- }[];
531
- state: {
452
+ };
453
+ grant: string;
454
+ } | null;
455
+ organizationPayloads: {
456
+ reference: {
457
+ keyEpoch: number;
458
+ keyFingerprint: string;
459
+ principalId: string;
460
+ principalType: "group" | "organization";
461
+ stateHash: string;
462
+ version: number;
463
+ };
464
+ payload: {
465
+ cipherSuite: "aes-256-gcm";
466
+ ciphertext: string;
467
+ ciphertextHash: string;
532
468
  createdAt: string;
533
- encapsulationPublicKey: string;
534
- externalAuthority: {
535
- keyEpoch: number;
536
- keyFingerprint: string;
537
- principalId: string;
538
- principalType: "group";
539
- stateHash: string;
540
- version: number;
541
- } | null;
542
- grantCount: number;
543
- grantRoot: string;
469
+ principalId: string;
470
+ principalType: "group" | "organization";
471
+ stateHash: string;
472
+ };
473
+ }[];
474
+ groups: {
475
+ head: {
544
476
  keyEpoch: number;
545
477
  keyFingerprint: string;
546
- memberCount: number;
547
- memberEnvelopesRoot: string;
548
- membershipMode: "projection";
549
- membershipRoot: string;
550
- payloadCiphertextHash: string;
551
- prevStateHash: string | null;
552
478
  principalId: string;
553
479
  principalType: "group" | "organization";
554
- projectionRoot: string;
555
- signature: string;
556
- signedAt: string;
557
- signerUserId: string;
558
- signerUserKeyFingerprint: string;
559
480
  stateHash: string;
560
481
  version: number;
561
482
  };
483
+ grant: string;
562
484
  }[];
563
- }[];
485
+ };
564
486
  }, z.core.$ZodTypeInternals<{
565
487
  authorizingContainerPath: {
566
488
  event: {
@@ -619,88 +541,49 @@ export declare const DocumentPurgeProofResponseSchema: z.ZodType<{
619
541
  eventHash: string;
620
542
  };
621
543
  purgedAt: string;
622
- principalPolicySnapshots: {
623
- currentGrants: {
624
- accessLevel: "admin" | "read" | "write";
625
- containerId: string;
626
- }[];
627
- currentProjection: {
628
- role: "member" | "admin";
629
- userId: string;
630
- }[];
631
- currentState: {
632
- createdAt: string;
633
- encapsulationPublicKey: string;
634
- externalAuthority: {
544
+ policyEvidence: {
545
+ organization: {
546
+ head: {
635
547
  keyEpoch: number;
636
548
  keyFingerprint: string;
637
549
  principalId: string;
638
- principalType: "group";
550
+ principalType: "group" | "organization";
639
551
  stateHash: string;
640
552
  version: number;
641
- } | null;
642
- grantCount: number;
643
- grantRoot: string;
644
- keyEpoch: number;
645
- keyFingerprint: string;
646
- memberCount: number;
647
- memberEnvelopesRoot: string;
648
- membershipMode: "projection";
649
- membershipRoot: string;
650
- payloadCiphertextHash: string;
651
- prevStateHash: string | null;
652
- principalId: string;
653
- principalType: "group" | "organization";
654
- projectionRoot: string;
655
- signature: string;
656
- signedAt: string;
657
- signerUserId: string;
658
- signerUserKeyFingerprint: string;
659
- stateHash: string;
660
- version: number;
661
- };
662
- previousStates: {
663
- grants: {
664
- accessLevel: "admin" | "read" | "write";
665
- containerId: string;
666
- }[];
667
- projection: {
668
- role: "member" | "admin";
669
- userId: string;
670
- }[];
671
- state: {
553
+ };
554
+ grant: string;
555
+ } | null;
556
+ organizationPayloads: {
557
+ reference: {
558
+ keyEpoch: number;
559
+ keyFingerprint: string;
560
+ principalId: string;
561
+ principalType: "group" | "organization";
562
+ stateHash: string;
563
+ version: number;
564
+ };
565
+ payload: {
566
+ cipherSuite: "aes-256-gcm";
567
+ ciphertext: string;
568
+ ciphertextHash: string;
672
569
  createdAt: string;
673
- encapsulationPublicKey: string;
674
- externalAuthority: {
675
- keyEpoch: number;
676
- keyFingerprint: string;
677
- principalId: string;
678
- principalType: "group";
679
- stateHash: string;
680
- version: number;
681
- } | null;
682
- grantCount: number;
683
- grantRoot: string;
570
+ principalId: string;
571
+ principalType: "group" | "organization";
572
+ stateHash: string;
573
+ };
574
+ }[];
575
+ groups: {
576
+ head: {
684
577
  keyEpoch: number;
685
578
  keyFingerprint: string;
686
- memberCount: number;
687
- memberEnvelopesRoot: string;
688
- membershipMode: "projection";
689
- membershipRoot: string;
690
- payloadCiphertextHash: string;
691
- prevStateHash: string | null;
692
579
  principalId: string;
693
580
  principalType: "group" | "organization";
694
- projectionRoot: string;
695
- signature: string;
696
- signedAt: string;
697
- signerUserId: string;
698
- signerUserKeyFingerprint: string;
699
581
  stateHash: string;
700
582
  version: number;
701
583
  };
584
+ grant: string;
702
585
  }[];
703
- }[];
586
+ };
704
587
  }, {
705
588
  authorizingContainerPath: {
706
589
  event: {
@@ -759,88 +642,49 @@ export declare const DocumentPurgeProofResponseSchema: z.ZodType<{
759
642
  eventHash: string;
760
643
  };
761
644
  purgedAt: string;
762
- principalPolicySnapshots: {
763
- currentGrants: {
764
- accessLevel: "admin" | "read" | "write";
765
- containerId: string;
766
- }[];
767
- currentProjection: {
768
- role: "member" | "admin";
769
- userId: string;
770
- }[];
771
- currentState: {
772
- createdAt: string;
773
- encapsulationPublicKey: string;
774
- externalAuthority: {
645
+ policyEvidence: {
646
+ organization: {
647
+ head: {
775
648
  keyEpoch: number;
776
649
  keyFingerprint: string;
777
650
  principalId: string;
778
- principalType: "group";
651
+ principalType: "group" | "organization";
779
652
  stateHash: string;
780
653
  version: number;
781
- } | null;
782
- grantCount: number;
783
- grantRoot: string;
784
- keyEpoch: number;
785
- keyFingerprint: string;
786
- memberCount: number;
787
- memberEnvelopesRoot: string;
788
- membershipMode: "projection";
789
- membershipRoot: string;
790
- payloadCiphertextHash: string;
791
- prevStateHash: string | null;
792
- principalId: string;
793
- principalType: "group" | "organization";
794
- projectionRoot: string;
795
- signature: string;
796
- signedAt: string;
797
- signerUserId: string;
798
- signerUserKeyFingerprint: string;
799
- stateHash: string;
800
- version: number;
801
- };
802
- previousStates: {
803
- grants: {
804
- accessLevel: "admin" | "read" | "write";
805
- containerId: string;
806
- }[];
807
- projection: {
808
- role: "member" | "admin";
809
- userId: string;
810
- }[];
811
- state: {
654
+ };
655
+ grant: string;
656
+ } | null;
657
+ organizationPayloads: {
658
+ reference: {
659
+ keyEpoch: number;
660
+ keyFingerprint: string;
661
+ principalId: string;
662
+ principalType: "group" | "organization";
663
+ stateHash: string;
664
+ version: number;
665
+ };
666
+ payload: {
667
+ cipherSuite: "aes-256-gcm";
668
+ ciphertext: string;
669
+ ciphertextHash: string;
812
670
  createdAt: string;
813
- encapsulationPublicKey: string;
814
- externalAuthority: {
815
- keyEpoch: number;
816
- keyFingerprint: string;
817
- principalId: string;
818
- principalType: "group";
819
- stateHash: string;
820
- version: number;
821
- } | null;
822
- grantCount: number;
823
- grantRoot: string;
671
+ principalId: string;
672
+ principalType: "group" | "organization";
673
+ stateHash: string;
674
+ };
675
+ }[];
676
+ groups: {
677
+ head: {
824
678
  keyEpoch: number;
825
679
  keyFingerprint: string;
826
- memberCount: number;
827
- memberEnvelopesRoot: string;
828
- membershipMode: "projection";
829
- membershipRoot: string;
830
- payloadCiphertextHash: string;
831
- prevStateHash: string | null;
832
680
  principalId: string;
833
681
  principalType: "group" | "organization";
834
- projectionRoot: string;
835
- signature: string;
836
- signedAt: string;
837
- signerUserId: string;
838
- signerUserKeyFingerprint: string;
839
682
  stateHash: string;
840
683
  version: number;
841
684
  };
685
+ grant: string;
842
686
  }[];
843
- }[];
687
+ };
844
688
  }>>;
845
689
  export type DocumentPurgeProofResponse = z.infer<typeof DocumentPurgeProofResponseSchema>;
846
690
  export declare const DocumentPurgeResponseSchema: z.ZodType<{
@@ -902,88 +746,49 @@ export declare const DocumentPurgeResponseSchema: z.ZodType<{
902
746
  eventHash: string;
903
747
  };
904
748
  purgedAt: string;
905
- principalPolicySnapshots: {
906
- currentGrants: {
907
- accessLevel: "admin" | "read" | "write";
908
- containerId: string;
909
- }[];
910
- currentProjection: {
911
- role: "member" | "admin";
912
- userId: string;
913
- }[];
914
- currentState: {
915
- createdAt: string;
916
- encapsulationPublicKey: string;
917
- externalAuthority: {
749
+ policyEvidence: {
750
+ organization: {
751
+ head: {
918
752
  keyEpoch: number;
919
753
  keyFingerprint: string;
920
754
  principalId: string;
921
- principalType: "group";
755
+ principalType: "group" | "organization";
922
756
  stateHash: string;
923
757
  version: number;
924
- } | null;
925
- grantCount: number;
926
- grantRoot: string;
927
- keyEpoch: number;
928
- keyFingerprint: string;
929
- memberCount: number;
930
- memberEnvelopesRoot: string;
931
- membershipMode: "projection";
932
- membershipRoot: string;
933
- payloadCiphertextHash: string;
934
- prevStateHash: string | null;
935
- principalId: string;
936
- principalType: "group" | "organization";
937
- projectionRoot: string;
938
- signature: string;
939
- signedAt: string;
940
- signerUserId: string;
941
- signerUserKeyFingerprint: string;
942
- stateHash: string;
943
- version: number;
944
- };
945
- previousStates: {
946
- grants: {
947
- accessLevel: "admin" | "read" | "write";
948
- containerId: string;
949
- }[];
950
- projection: {
951
- role: "member" | "admin";
952
- userId: string;
953
- }[];
954
- state: {
758
+ };
759
+ grant: string;
760
+ } | null;
761
+ organizationPayloads: {
762
+ reference: {
763
+ keyEpoch: number;
764
+ keyFingerprint: string;
765
+ principalId: string;
766
+ principalType: "group" | "organization";
767
+ stateHash: string;
768
+ version: number;
769
+ };
770
+ payload: {
771
+ cipherSuite: "aes-256-gcm";
772
+ ciphertext: string;
773
+ ciphertextHash: string;
955
774
  createdAt: string;
956
- encapsulationPublicKey: string;
957
- externalAuthority: {
958
- keyEpoch: number;
959
- keyFingerprint: string;
960
- principalId: string;
961
- principalType: "group";
962
- stateHash: string;
963
- version: number;
964
- } | null;
965
- grantCount: number;
966
- grantRoot: string;
775
+ principalId: string;
776
+ principalType: "group" | "organization";
777
+ stateHash: string;
778
+ };
779
+ }[];
780
+ groups: {
781
+ head: {
967
782
  keyEpoch: number;
968
783
  keyFingerprint: string;
969
- memberCount: number;
970
- memberEnvelopesRoot: string;
971
- membershipMode: "projection";
972
- membershipRoot: string;
973
- payloadCiphertextHash: string;
974
- prevStateHash: string | null;
975
784
  principalId: string;
976
785
  principalType: "group" | "organization";
977
- projectionRoot: string;
978
- signature: string;
979
- signedAt: string;
980
- signerUserId: string;
981
- signerUserKeyFingerprint: string;
982
786
  stateHash: string;
983
787
  version: number;
984
788
  };
789
+ grant: string;
985
790
  }[];
986
- }[];
791
+ };
987
792
  }, {
988
793
  reclaimedBlobStorageKeys: string[];
989
794
  authorizingContainerPath: {
@@ -1043,88 +848,49 @@ export declare const DocumentPurgeResponseSchema: z.ZodType<{
1043
848
  eventHash: string;
1044
849
  };
1045
850
  purgedAt: string;
1046
- principalPolicySnapshots: {
1047
- currentGrants: {
1048
- accessLevel: "admin" | "read" | "write";
1049
- containerId: string;
1050
- }[];
1051
- currentProjection: {
1052
- role: "member" | "admin";
1053
- userId: string;
1054
- }[];
1055
- currentState: {
1056
- createdAt: string;
1057
- encapsulationPublicKey: string;
1058
- externalAuthority: {
851
+ policyEvidence: {
852
+ organization: {
853
+ head: {
1059
854
  keyEpoch: number;
1060
855
  keyFingerprint: string;
1061
856
  principalId: string;
1062
- principalType: "group";
857
+ principalType: "group" | "organization";
1063
858
  stateHash: string;
1064
859
  version: number;
1065
- } | null;
1066
- grantCount: number;
1067
- grantRoot: string;
1068
- keyEpoch: number;
1069
- keyFingerprint: string;
1070
- memberCount: number;
1071
- memberEnvelopesRoot: string;
1072
- membershipMode: "projection";
1073
- membershipRoot: string;
1074
- payloadCiphertextHash: string;
1075
- prevStateHash: string | null;
1076
- principalId: string;
1077
- principalType: "group" | "organization";
1078
- projectionRoot: string;
1079
- signature: string;
1080
- signedAt: string;
1081
- signerUserId: string;
1082
- signerUserKeyFingerprint: string;
1083
- stateHash: string;
1084
- version: number;
1085
- };
1086
- previousStates: {
1087
- grants: {
1088
- accessLevel: "admin" | "read" | "write";
1089
- containerId: string;
1090
- }[];
1091
- projection: {
1092
- role: "member" | "admin";
1093
- userId: string;
1094
- }[];
1095
- state: {
860
+ };
861
+ grant: string;
862
+ } | null;
863
+ organizationPayloads: {
864
+ reference: {
865
+ keyEpoch: number;
866
+ keyFingerprint: string;
867
+ principalId: string;
868
+ principalType: "group" | "organization";
869
+ stateHash: string;
870
+ version: number;
871
+ };
872
+ payload: {
873
+ cipherSuite: "aes-256-gcm";
874
+ ciphertext: string;
875
+ ciphertextHash: string;
1096
876
  createdAt: string;
1097
- encapsulationPublicKey: string;
1098
- externalAuthority: {
1099
- keyEpoch: number;
1100
- keyFingerprint: string;
1101
- principalId: string;
1102
- principalType: "group";
1103
- stateHash: string;
1104
- version: number;
1105
- } | null;
1106
- grantCount: number;
1107
- grantRoot: string;
877
+ principalId: string;
878
+ principalType: "group" | "organization";
879
+ stateHash: string;
880
+ };
881
+ }[];
882
+ groups: {
883
+ head: {
1108
884
  keyEpoch: number;
1109
885
  keyFingerprint: string;
1110
- memberCount: number;
1111
- memberEnvelopesRoot: string;
1112
- membershipMode: "projection";
1113
- membershipRoot: string;
1114
- payloadCiphertextHash: string;
1115
- prevStateHash: string | null;
1116
886
  principalId: string;
1117
887
  principalType: "group" | "organization";
1118
- projectionRoot: string;
1119
- signature: string;
1120
- signedAt: string;
1121
- signerUserId: string;
1122
- signerUserKeyFingerprint: string;
1123
888
  stateHash: string;
1124
889
  version: number;
1125
890
  };
891
+ grant: string;
1126
892
  }[];
1127
- }[];
893
+ };
1128
894
  }, z.core.$ZodTypeInternals<{
1129
895
  reclaimedBlobStorageKeys: string[];
1130
896
  authorizingContainerPath: {
@@ -1184,88 +950,49 @@ export declare const DocumentPurgeResponseSchema: z.ZodType<{
1184
950
  eventHash: string;
1185
951
  };
1186
952
  purgedAt: string;
1187
- principalPolicySnapshots: {
1188
- currentGrants: {
1189
- accessLevel: "admin" | "read" | "write";
1190
- containerId: string;
1191
- }[];
1192
- currentProjection: {
1193
- role: "member" | "admin";
1194
- userId: string;
1195
- }[];
1196
- currentState: {
1197
- createdAt: string;
1198
- encapsulationPublicKey: string;
1199
- externalAuthority: {
953
+ policyEvidence: {
954
+ organization: {
955
+ head: {
1200
956
  keyEpoch: number;
1201
957
  keyFingerprint: string;
1202
958
  principalId: string;
1203
- principalType: "group";
959
+ principalType: "group" | "organization";
1204
960
  stateHash: string;
1205
961
  version: number;
1206
- } | null;
1207
- grantCount: number;
1208
- grantRoot: string;
1209
- keyEpoch: number;
1210
- keyFingerprint: string;
1211
- memberCount: number;
1212
- memberEnvelopesRoot: string;
1213
- membershipMode: "projection";
1214
- membershipRoot: string;
1215
- payloadCiphertextHash: string;
1216
- prevStateHash: string | null;
1217
- principalId: string;
1218
- principalType: "group" | "organization";
1219
- projectionRoot: string;
1220
- signature: string;
1221
- signedAt: string;
1222
- signerUserId: string;
1223
- signerUserKeyFingerprint: string;
1224
- stateHash: string;
1225
- version: number;
1226
- };
1227
- previousStates: {
1228
- grants: {
1229
- accessLevel: "admin" | "read" | "write";
1230
- containerId: string;
1231
- }[];
1232
- projection: {
1233
- role: "member" | "admin";
1234
- userId: string;
1235
- }[];
1236
- state: {
962
+ };
963
+ grant: string;
964
+ } | null;
965
+ organizationPayloads: {
966
+ reference: {
967
+ keyEpoch: number;
968
+ keyFingerprint: string;
969
+ principalId: string;
970
+ principalType: "group" | "organization";
971
+ stateHash: string;
972
+ version: number;
973
+ };
974
+ payload: {
975
+ cipherSuite: "aes-256-gcm";
976
+ ciphertext: string;
977
+ ciphertextHash: string;
1237
978
  createdAt: string;
1238
- encapsulationPublicKey: string;
1239
- externalAuthority: {
1240
- keyEpoch: number;
1241
- keyFingerprint: string;
1242
- principalId: string;
1243
- principalType: "group";
1244
- stateHash: string;
1245
- version: number;
1246
- } | null;
1247
- grantCount: number;
1248
- grantRoot: string;
979
+ principalId: string;
980
+ principalType: "group" | "organization";
981
+ stateHash: string;
982
+ };
983
+ }[];
984
+ groups: {
985
+ head: {
1249
986
  keyEpoch: number;
1250
987
  keyFingerprint: string;
1251
- memberCount: number;
1252
- memberEnvelopesRoot: string;
1253
- membershipMode: "projection";
1254
- membershipRoot: string;
1255
- payloadCiphertextHash: string;
1256
- prevStateHash: string | null;
1257
988
  principalId: string;
1258
989
  principalType: "group" | "organization";
1259
- projectionRoot: string;
1260
- signature: string;
1261
- signedAt: string;
1262
- signerUserId: string;
1263
- signerUserKeyFingerprint: string;
1264
990
  stateHash: string;
1265
991
  version: number;
1266
992
  };
993
+ grant: string;
1267
994
  }[];
1268
- }[];
995
+ };
1269
996
  }, {
1270
997
  reclaimedBlobStorageKeys: string[];
1271
998
  authorizingContainerPath: {
@@ -1325,88 +1052,49 @@ export declare const DocumentPurgeResponseSchema: z.ZodType<{
1325
1052
  eventHash: string;
1326
1053
  };
1327
1054
  purgedAt: string;
1328
- principalPolicySnapshots: {
1329
- currentGrants: {
1330
- accessLevel: "admin" | "read" | "write";
1331
- containerId: string;
1332
- }[];
1333
- currentProjection: {
1334
- role: "member" | "admin";
1335
- userId: string;
1336
- }[];
1337
- currentState: {
1338
- createdAt: string;
1339
- encapsulationPublicKey: string;
1340
- externalAuthority: {
1055
+ policyEvidence: {
1056
+ organization: {
1057
+ head: {
1341
1058
  keyEpoch: number;
1342
1059
  keyFingerprint: string;
1343
1060
  principalId: string;
1344
- principalType: "group";
1061
+ principalType: "group" | "organization";
1345
1062
  stateHash: string;
1346
1063
  version: number;
1347
- } | null;
1348
- grantCount: number;
1349
- grantRoot: string;
1350
- keyEpoch: number;
1351
- keyFingerprint: string;
1352
- memberCount: number;
1353
- memberEnvelopesRoot: string;
1354
- membershipMode: "projection";
1355
- membershipRoot: string;
1356
- payloadCiphertextHash: string;
1357
- prevStateHash: string | null;
1358
- principalId: string;
1359
- principalType: "group" | "organization";
1360
- projectionRoot: string;
1361
- signature: string;
1362
- signedAt: string;
1363
- signerUserId: string;
1364
- signerUserKeyFingerprint: string;
1365
- stateHash: string;
1366
- version: number;
1367
- };
1368
- previousStates: {
1369
- grants: {
1370
- accessLevel: "admin" | "read" | "write";
1371
- containerId: string;
1372
- }[];
1373
- projection: {
1374
- role: "member" | "admin";
1375
- userId: string;
1376
- }[];
1377
- state: {
1064
+ };
1065
+ grant: string;
1066
+ } | null;
1067
+ organizationPayloads: {
1068
+ reference: {
1069
+ keyEpoch: number;
1070
+ keyFingerprint: string;
1071
+ principalId: string;
1072
+ principalType: "group" | "organization";
1073
+ stateHash: string;
1074
+ version: number;
1075
+ };
1076
+ payload: {
1077
+ cipherSuite: "aes-256-gcm";
1078
+ ciphertext: string;
1079
+ ciphertextHash: string;
1378
1080
  createdAt: string;
1379
- encapsulationPublicKey: string;
1380
- externalAuthority: {
1381
- keyEpoch: number;
1382
- keyFingerprint: string;
1383
- principalId: string;
1384
- principalType: "group";
1385
- stateHash: string;
1386
- version: number;
1387
- } | null;
1388
- grantCount: number;
1389
- grantRoot: string;
1081
+ principalId: string;
1082
+ principalType: "group" | "organization";
1083
+ stateHash: string;
1084
+ };
1085
+ }[];
1086
+ groups: {
1087
+ head: {
1390
1088
  keyEpoch: number;
1391
1089
  keyFingerprint: string;
1392
- memberCount: number;
1393
- memberEnvelopesRoot: string;
1394
- membershipMode: "projection";
1395
- membershipRoot: string;
1396
- payloadCiphertextHash: string;
1397
- prevStateHash: string | null;
1398
1090
  principalId: string;
1399
1091
  principalType: "group" | "organization";
1400
- projectionRoot: string;
1401
- signature: string;
1402
- signedAt: string;
1403
- signerUserId: string;
1404
- signerUserKeyFingerprint: string;
1405
1092
  stateHash: string;
1406
1093
  version: number;
1407
1094
  };
1095
+ grant: string;
1408
1096
  }[];
1409
- }[];
1097
+ };
1410
1098
  }>>;
1411
1099
  export type DocumentPurgeResponse = z.infer<typeof DocumentPurgeResponseSchema>;
1412
1100
  export declare const DocumentWriterProjectionResponseSchema: z.ZodType<{