@tearleads/client-sdk 0.1.19 → 0.1.21

package/internal/validators/response/organizationPolicyHistory.d.ts

@@ -1,380 +1,198 @@
-import type { z } from "zod";
+import { z } from "zod";
+/** Display rows per private history page; the API also carries one predecessor. */
+export declare const PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE = 32;
 /** Signed evidence only. Display names are resolved on the client. */
 export declare const OrganizationPolicyHistoryResponseSchema: z.ZodType<{
     organizationId: string;
     stateHash: string;
-    organizationPayloads: {
-        cipherSuite: "aes-256-gcm";
-        ciphertext: string;
-        ciphertextHash: string;
-        createdAt: string;
-        principalId: string;
-        principalType: "group" | "organization";
-        stateHash: string;
-    }[];
-    groups: {
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
+    beforeVersion: number;
+    nextBeforeVersion: number | null;
+    evidence: {
+        organization: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        } | null;
+        organizationPayloads: {
+            reference: {
                 keyEpoch: number;
                 keyFingerprint: string;
                 principalId: string;
-                principalType: "group";
+                principalType: "group" | "organization";
                 stateHash: string;
                 version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
+            };
+            payload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
                 createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+        }[];
+        groups: {
+            head: {
                 keyEpoch: number;
                 keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
                 principalId: string;
                 principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
                 stateHash: string;
                 version: number;
             };
+            grant: string;
         }[];
-    }[];
+    };
 }, {
     organizationId: string;
     stateHash: string;
-    organizationPayloads: {
-        cipherSuite: "aes-256-gcm";
-        ciphertext: string;
-        ciphertextHash: string;
-        createdAt: string;
-        principalId: string;
-        principalType: "group" | "organization";
-        stateHash: string;
-    }[];
-    groups: {
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
+    beforeVersion: number;
+    nextBeforeVersion: number | null;
+    evidence: {
+        organization: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        } | null;
+        organizationPayloads: {
+            reference: {
                 keyEpoch: number;
                 keyFingerprint: string;
                 principalId: string;
-                principalType: "group";
+                principalType: "group" | "organization";
                 stateHash: string;
                 version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
+            };
+            payload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
                 createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+        }[];
+        groups: {
+            head: {
                 keyEpoch: number;
                 keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
                 principalId: string;
                 principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
                 stateHash: string;
                 version: number;
             };
+            grant: string;
         }[];
-    }[];
+    };
 }, z.core.$ZodTypeInternals<{
     organizationId: string;
     stateHash: string;
-    organizationPayloads: {
-        cipherSuite: "aes-256-gcm";
-        ciphertext: string;
-        ciphertextHash: string;
-        createdAt: string;
-        principalId: string;
-        principalType: "group" | "organization";
-        stateHash: string;
-    }[];
-    groups: {
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
+    beforeVersion: number;
+    nextBeforeVersion: number | null;
+    evidence: {
+        organization: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        } | null;
+        organizationPayloads: {
+            reference: {
                 keyEpoch: number;
                 keyFingerprint: string;
                 principalId: string;
-                principalType: "group";
+                principalType: "group" | "organization";
                 stateHash: string;
                 version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
+            };
+            payload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
                 createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+        }[];
+        groups: {
+            head: {
                 keyEpoch: number;
                 keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
                 principalId: string;
                 principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
                 stateHash: string;
                 version: number;
             };
+            grant: string;
         }[];
-    }[];
+    };
 }, {
     organizationId: string;
     stateHash: string;
-    organizationPayloads: {
-        cipherSuite: "aes-256-gcm";
-        ciphertext: string;
-        ciphertextHash: string;
-        createdAt: string;
-        principalId: string;
-        principalType: "group" | "organization";
-        stateHash: string;
-    }[];
-    groups: {
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
+    beforeVersion: number;
+    nextBeforeVersion: number | null;
+    evidence: {
+        organization: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        } | null;
+        organizationPayloads: {
+            reference: {
                 keyEpoch: number;
                 keyFingerprint: string;
                 principalId: string;
-                principalType: "group";
+                principalType: "group" | "organization";
                 stateHash: string;
                 version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
+            };
+            payload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
                 createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+        }[];
+        groups: {
+            head: {
                 keyEpoch: number;
                 keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
                 principalId: string;
                 principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
                 stateHash: string;
                 version: number;
             };
+            grant: string;
         }[];
-    }[];
+    };
 }>>;
 export type OrganizationPolicyHistoryResponse = z.infer<typeof OrganizationPolicyHistoryResponseSchema>;

package/internal/validators/response/organizationPolicyHistory.js

@@ -1,10 +1,16 @@
-import { arraySchema, loosePlainObject, nonEmptyStringSchema } from "../schema.js";
-import { PrincipalPolicySnapshotResponseSchema, PrincipalStatePayloadResponseSchema, } from "./principal.js";
+import { z } from "zod";
+import { registerJsonSchemaFragment } from "../jsonSchema.js";
+import { loosePlainObject, nonEmptyStringSchema } from "../schema.js";
+import { ProjectionPolicyEvidenceResponseSchema } from "./projectionPolicyEvidence.js";
+const cursorSchema = registerJsonSchemaFragment(z.custom((value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 2), { type: "integer", minimum: 2, maximum: Number.MAX_SAFE_INTEGER });
+/** Display rows per private history page; the API also carries one predecessor. */
+export const PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE = 32;
 /** Signed evidence only. Display names are resolved on the client. */
 export const OrganizationPolicyHistoryResponseSchema = loosePlainObject({
     organizationId: nonEmptyStringSchema,
     stateHash: nonEmptyStringSchema,
-    organizationPayloads: arraySchema(PrincipalStatePayloadResponseSchema),
-    groups: arraySchema(PrincipalPolicySnapshotResponseSchema),
+    beforeVersion: cursorSchema,
+    nextBeforeVersion: cursorSchema.nullable(),
+    evidence: ProjectionPolicyEvidenceResponseSchema,
 });
 //# sourceMappingURL=organizationPolicyHistory.js.map

package/internal/validators/response/organizationPolicyHistory.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationPolicyHistory.js","sourceRoot":"","sources":["organizationPolicyHistory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EACL,qCAAqC,EACrC,mCAAmC,GACpC,MAAM,aAAa,CAAC;AAErB,sEAAsE;AACtE,MAAM,CAAC,MAAM,uCAAuC,GAAG,gBAAgB,CAAC;IACtE,cAAc,EAAE,oBAAoB;IACpC,SAAS,EAAE,oBAAoB;IAC/B,oBAAoB,EAAE,WAAW,CAAC,mCAAmC,CAAC;IACtE,MAAM,EAAE,WAAW,CAAC,qCAAqC,CAAC;CAC3D,CAAC,CAAC","sourcesContent":["import type { z } from \"zod\";\nimport { arraySchema, loosePlainObject, nonEmptyStringSchema } from \"../schema\";\nimport {\n  PrincipalPolicySnapshotResponseSchema,\n  PrincipalStatePayloadResponseSchema,\n} from \"./principal\";\n\n/** Signed evidence only. Display names are resolved on the client. */\nexport const OrganizationPolicyHistoryResponseSchema = loosePlainObject({\n  organizationId: nonEmptyStringSchema,\n  stateHash: nonEmptyStringSchema,\n  organizationPayloads: arraySchema(PrincipalStatePayloadResponseSchema),\n  groups: arraySchema(PrincipalPolicySnapshotResponseSchema),\n});\n\nexport type OrganizationPolicyHistoryResponse = z.infer<\n  typeof OrganizationPolicyHistoryResponseSchema\n>;\n"]}
+{"version":3,"file":"organizationPolicyHistory.js","sourceRoot":"","sources":["organizationPolicyHistory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,sCAAsC,EAAE,MAAM,4BAA4B,CAAC;AAEpF,MAAM,YAAY,GAAG,0BAA0B,CAC7C,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CACzE,EACD,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAClE,CAAC;AAEF,mFAAmF;AACnF,MAAM,CAAC,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAEtD,sEAAsE;AACtE,MAAM,CAAC,MAAM,uCAAuC,GAAG,gBAAgB,CAAC;IACtE,cAAc,EAAE,oBAAoB;IACpC,SAAS,EAAE,oBAAoB;IAC/B,aAAa,EAAE,YAAY;IAC3B,iBAAiB,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,sCAAsC;CACjD,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaFragment } from \"../jsonSchema\";\nimport { loosePlainObject, nonEmptyStringSchema } from \"../schema\";\nimport { ProjectionPolicyEvidenceResponseSchema } from \"./projectionPolicyEvidence\";\n\nconst cursorSchema = registerJsonSchemaFragment(\n  z.custom<number>(\n    (value) =>\n      typeof value === \"number\" && Number.isSafeInteger(value) && value >= 2,\n  ),\n  { type: \"integer\", minimum: 2, maximum: Number.MAX_SAFE_INTEGER },\n);\n\n/** Display rows per private history page; the API also carries one predecessor. */\nexport const PRINCIPAL_DISPLAY_HISTORY_PAGE_SIZE = 32;\n\n/** Signed evidence only. Display names are resolved on the client. */\nexport const OrganizationPolicyHistoryResponseSchema = loosePlainObject({\n  organizationId: nonEmptyStringSchema,\n  stateHash: nonEmptyStringSchema,\n  beforeVersion: cursorSchema,\n  nextBeforeVersion: cursorSchema.nullable(),\n  evidence: ProjectionPolicyEvidenceResponseSchema,\n});\n\nexport type OrganizationPolicyHistoryResponse = z.infer<\n  typeof OrganizationPolicyHistoryResponseSchema\n>;\n"]}

package/internal/validators/response/organizationReadModel.d.ts

@@ -123,7 +123,7 @@ export type OrganizationReadModelGroupMembershipsResponse = z.infer<typeof Organ
 declare const OrganizationReadModelOrganizationPolicyResponseSchema: z.ZodObject<{
     currentState: z.ZodObject<{
         stateHash: z.ZodString;
-        keyEpoch: z.ZodNumber;
+        keyEpoch: z.ZodCustom<number, number>;
         keyFingerprint: z.ZodString;
         memberCount: z.ZodCustom<number, number>;
         version: z.ZodCustom<number, number>;
@@ -264,7 +264,7 @@ declare const OrganizationReadModelSnapshotResponseSchema: z.ZodObject<{
         organizationPolicy: z.ZodObject<{
             currentState: z.ZodObject<{
                 stateHash: z.ZodString;
-                keyEpoch: z.ZodNumber;
+                keyEpoch: z.ZodCustom<number, number>;
                 keyFingerprint: z.ZodString;
                 memberCount: z.ZodCustom<number, number>;
                 version: z.ZodCustom<number, number>;
@@ -413,7 +413,7 @@ declare const OrganizationReadModelDeltaResponseSchema: z.ZodObject<{
         organizationPolicy: z.ZodOptional<z.ZodObject<{
             currentState: z.ZodObject<{
                 stateHash: z.ZodString;
-                keyEpoch: z.ZodNumber;
+                keyEpoch: z.ZodCustom<number, number>;
                 keyFingerprint: z.ZodString;
                 memberCount: z.ZodCustom<number, number>;
                 version: z.ZodCustom<number, number>;
@@ -563,7 +563,7 @@ export declare const OrganizationReadModelResponseSchema: z.ZodDiscriminatedUnio
         organizationPolicy: z.ZodOptional<z.ZodObject<{
             currentState: z.ZodObject<{
                 stateHash: z.ZodString;
-                keyEpoch: z.ZodNumber;
+                keyEpoch: z.ZodCustom<number, number>;
                 keyFingerprint: z.ZodString;
                 memberCount: z.ZodCustom<number, number>;
                 version: z.ZodCustom<number, number>;
@@ -712,7 +712,7 @@ export declare const OrganizationReadModelResponseSchema: z.ZodDiscriminatedUnio
         organizationPolicy: z.ZodObject<{
             currentState: z.ZodObject<{
                 stateHash: z.ZodString;
-                keyEpoch: z.ZodNumber;
+                keyEpoch: z.ZodCustom<number, number>;
                 keyFingerprint: z.ZodString;
                 memberCount: z.ZodCustom<number, number>;
                 version: z.ZodCustom<number, number>;