@tearleads/client-sdk 0.1.19 → 0.1.21

package/internal/validators/response/principal.d.ts

@@ -2144,426 +2144,46 @@ export declare const CommitOrganizationGroupPolicyConflictResponseSchema: z.ZodU
 export declare const PrincipalPolicyStaleErrorResponseSchema: z.ZodType<{
     code: "principal_policy_stale";
     error: string;
-    principalPolicies: {
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
-                createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
-                keyEpoch: number;
-                keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
-                principalId: string;
-                principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
-                stateHash: string;
-                version: number;
-            };
-        }[];
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentMemberEnvelopes: {
-            envelopes: {
-                kemCipherText: string;
-                memberKeyFingerprint: string;
-                userId: string;
-                wrappedKey: string;
-            }[];
-            epoch: number;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentPayload: {
-            cipherSuite: "aes-256-gcm";
-            ciphertext: string;
-            ciphertextHash: string;
-            createdAt: string;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
-                keyEpoch: number;
-                keyFingerprint: string;
-                principalId: string;
-                principalType: "group";
-                stateHash: string;
-                version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
+    principalHeads: {
+        keyEpoch: number;
+        keyFingerprint: string;
+        principalId: string;
+        principalType: "group" | "organization";
+        stateHash: string;
+        version: number;
     }[];
 }, {
     code: "principal_policy_stale";
     error: string;
-    principalPolicies: {
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
-                createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
-                keyEpoch: number;
-                keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
-                principalId: string;
-                principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
-                stateHash: string;
-                version: number;
-            };
-        }[];
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentMemberEnvelopes: {
-            envelopes: {
-                kemCipherText: string;
-                memberKeyFingerprint: string;
-                userId: string;
-                wrappedKey: string;
-            }[];
-            epoch: number;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentPayload: {
-            cipherSuite: "aes-256-gcm";
-            ciphertext: string;
-            ciphertextHash: string;
-            createdAt: string;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
-                keyEpoch: number;
-                keyFingerprint: string;
-                principalId: string;
-                principalType: "group";
-                stateHash: string;
-                version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
+    principalHeads: {
+        keyEpoch: number;
+        keyFingerprint: string;
+        principalId: string;
+        principalType: "group" | "organization";
+        stateHash: string;
+        version: number;
     }[];
 }, z.core.$ZodTypeInternals<{
     code: "principal_policy_stale";
     error: string;
-    principalPolicies: {
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
-                createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
-                keyEpoch: number;
-                keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
-                principalId: string;
-                principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
-                stateHash: string;
-                version: number;
-            };
-        }[];
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentMemberEnvelopes: {
-            envelopes: {
-                kemCipherText: string;
-                memberKeyFingerprint: string;
-                userId: string;
-                wrappedKey: string;
-            }[];
-            epoch: number;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentPayload: {
-            cipherSuite: "aes-256-gcm";
-            ciphertext: string;
-            ciphertextHash: string;
-            createdAt: string;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
-                keyEpoch: number;
-                keyFingerprint: string;
-                principalId: string;
-                principalType: "group";
-                stateHash: string;
-                version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
+    principalHeads: {
+        keyEpoch: number;
+        keyFingerprint: string;
+        principalId: string;
+        principalType: "group" | "organization";
+        stateHash: string;
+        version: number;
     }[];
 }, {
     code: "principal_policy_stale";
     error: string;
-    principalPolicies: {
-        previousStates: {
-            grants: {
-                accessLevel: "admin" | "read" | "write";
-                containerId: string;
-            }[];
-            projection: {
-                role: "member" | "admin";
-                userId: string;
-            }[];
-            state: {
-                createdAt: string;
-                encapsulationPublicKey: string;
-                externalAuthority: {
-                    keyEpoch: number;
-                    keyFingerprint: string;
-                    principalId: string;
-                    principalType: "group";
-                    stateHash: string;
-                    version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
-                keyEpoch: number;
-                keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
-                principalId: string;
-                principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
-                stateHash: string;
-                version: number;
-            };
-        }[];
-        currentGrants: {
-            accessLevel: "admin" | "read" | "write";
-            containerId: string;
-        }[];
-        currentMemberEnvelopes: {
-            envelopes: {
-                kemCipherText: string;
-                memberKeyFingerprint: string;
-                userId: string;
-                wrappedKey: string;
-            }[];
-            epoch: number;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentPayload: {
-            cipherSuite: "aes-256-gcm";
-            ciphertext: string;
-            ciphertextHash: string;
-            createdAt: string;
-            principalId: string;
-            principalType: "group" | "organization";
-            stateHash: string;
-        };
-        currentProjection: {
-            role: "member" | "admin";
-            userId: string;
-        }[];
-        currentState: {
-            createdAt: string;
-            encapsulationPublicKey: string;
-            externalAuthority: {
-                keyEpoch: number;
-                keyFingerprint: string;
-                principalId: string;
-                principalType: "group";
-                stateHash: string;
-                version: number;
-            } | null;
-            grantCount: number;
-            grantRoot: string;
-            keyEpoch: number;
-            keyFingerprint: string;
-            memberCount: number;
-            memberEnvelopesRoot: string;
-            membershipMode: "projection";
-            membershipRoot: string;
-            payloadCiphertextHash: string;
-            prevStateHash: string | null;
-            principalId: string;
-            principalType: "group" | "organization";
-            projectionRoot: string;
-            signature: string;
-            signedAt: string;
-            signerUserId: string;
-            signerUserKeyFingerprint: string;
-            stateHash: string;
-            version: number;
-        };
+    principalHeads: {
+        keyEpoch: number;
+        keyFingerprint: string;
+        principalId: string;
+        principalType: "group" | "organization";
+        stateHash: string;
+        version: number;
     }[];
 }>>;
 export type PrincipalPolicyStaleErrorResponse = z.infer<typeof PrincipalPolicyStaleErrorResponseSchema>;

package/internal/validators/response/principal.js

@@ -1,9 +1,11 @@
 import { z } from "zod";
 import { arraySchema, loosePlainObject, nonEmptyStringSchema } from "../schema.js";
 import { MAX_ROTATION_CONTAINER_REKEYS } from "../util/index.js";
+import { PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT } from "../util/principalHistoryWire.js";
 import { ContainerMutationResponseSchema } from "./container.js";
 import { CONTAINER_DESCENDANT_REKEYS_REQUIRED_ERROR_CODE } from "./descendantRekeysRequiredError.js";
 import { BillingErrorResponseSchema } from "./organizationBilling.js";
+import { ReferencedPrincipalStateResponseSchema } from "./principalReference.js";
 import { CurrentPrincipalMemberEnvelopesResponseSchema, PrincipalContainerGrantResponseSchema, PrincipalPolicyStateChainEntryResponseSchema, PrincipalProjectionMemberResponseSchema, PrincipalStatePayloadResponseSchema, PrincipalStateResponseSchema, } from "./principalSnapshot.js";
 export { CurrentPrincipalMemberEnvelopesResponseSchema, isCurrentPrincipalMemberEnvelopesResponse, isPrincipalPolicyStateChainEntryResponse, isPrincipalStatePayloadResponse, isPrincipalStateResponse, PrincipalContainerGrantResponseSchema, PrincipalMemberEnvelopeResponseSchema, PrincipalPolicySnapshotResponseSchema, PrincipalPolicyStateChainEntryResponseSchema, PrincipalProjectionMemberResponseSchema, PrincipalStateExternalAuthorityResponseSchema, PrincipalStatePayloadResponseSchema, PrincipalStateResponseSchema, } from "./principalSnapshot.js";
 export const principalPolicyCurrentResponseShape = {
@@ -49,7 +51,7 @@ export const CommitOrganizationGroupPolicyConflictResponseSchema = z.union([
 export const PrincipalPolicyStaleErrorResponseSchema = loosePlainObject({
     code: z.literal("principal_policy_stale"),
     error: z.string().min(1),
-    principalPolicies: arraySchema(PrincipalPolicyBundleResponseSchema),
+    principalHeads: arraySchema(ReferencedPrincipalStateResponseSchema, PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT),
 });
 export function isPrincipalPolicyBundleResponse(value) {
     return PrincipalPolicyBundleResponseSchema.safeParse(value).success;

package/internal/validators/response/principal.js.map

@@ -1 +1 @@
-{"version":3,"file":"principal.js","sourceRoot":"","sources":["principal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,+CAA+C,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EACL,6CAA6C,EAC7C,qCAAqC,EACrC,4CAA4C,EAC5C,uCAAuC,EACvC,mCAAmC,EACnC,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAEL,6CAA6C,EAC7C,yCAAyC,EACzC,wCAAwC,EACxC,+BAA+B,EAC/B,wBAAwB,EAExB,qCAAqC,EAErC,qCAAqC,EAErC,qCAAqC,EAErC,4CAA4C,EAE5C,uCAAuC,EAEvC,6CAA6C,EAE7C,mCAAmC,EAEnC,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,aAAa,EAAE,WAAW,CAAC,qCAAqC,CAAC;IACjE,sBAAsB,EAAE,6CAA6C;IACrE,cAAc,EAAE,mCAAmC;IACnD,iBAAiB,EAAE,WAAW,CAAC,uCAAuC,CAAC;IACvE,YAAY,EAAE,4BAA4B;CAC3C,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;IAClE,GAAG,mCAAmC;IACtC,cAAc,EAAE,WAAW,CAAC,4CAA4C,CAAC;CAC1E,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,GAAG,mCAAmC;IACtC,kBAAkB,EAAE,WAAW,CAAC,+BAA+B,CAAC;CACjE,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,2CAA2C,GAAG,gBAAgB,CAAC;IAC1E,WAAW,EAAE,qCAAqC;IAClD,kBAAkB,EAAE,qCAAqC;CAC1D,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,kCAAkC,GAAG,0BAA0B,CAAC;AAM7E;;;;;GAKG;AACH,MAAM,qDAAqD,GAAG,gBAAgB,CAAC;IAC7E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,+CAA+C,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,oBAAoB,EAAE,WAAW,CAC/B,oBAAoB,EACpB,6BAA6B,CAC9B;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAG,CAAC,CAAC,KAAK,CAAC;IACzE,kCAAkC;IAClC,qDAAqD;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uCAAuC,GAAG,gBAAgB,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,iBAAiB,EAAE,WAAW,CAAC,mCAAmC,CAAC;CACpE,CAAC,CAAC;AAMH,MAAM,UAAU,+BAA+B,CAC7C,KAAc;IAEd,OAAO,mCAAmC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,OAAO,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAc;IAEd,OAAO,2CAA2C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAc;IAEd,OAAO,uCAAuC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC1E,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { arraySchema, loosePlainObject, nonEmptyStringSchema } from \"../schema\";\nimport { MAX_ROTATION_CONTAINER_REKEYS } from \"../util\";\nimport { ContainerMutationResponseSchema } from \"./container\";\nimport { CONTAINER_DESCENDANT_REKEYS_REQUIRED_ERROR_CODE } from \"./descendantRekeysRequiredError\";\nimport { BillingErrorResponseSchema } from \"./organizationBilling\";\n\nimport {\n  CurrentPrincipalMemberEnvelopesResponseSchema,\n  PrincipalContainerGrantResponseSchema,\n  PrincipalPolicyStateChainEntryResponseSchema,\n  PrincipalProjectionMemberResponseSchema,\n  PrincipalStatePayloadResponseSchema,\n  PrincipalStateResponseSchema,\n} from \"./principalSnapshot\";\n\nexport {\n  type CurrentPrincipalMemberEnvelopesResponse,\n  CurrentPrincipalMemberEnvelopesResponseSchema,\n  isCurrentPrincipalMemberEnvelopesResponse,\n  isPrincipalPolicyStateChainEntryResponse,\n  isPrincipalStatePayloadResponse,\n  isPrincipalStateResponse,\n  type PrincipalContainerGrantResponse,\n  PrincipalContainerGrantResponseSchema,\n  type PrincipalMemberEnvelopeResponse,\n  PrincipalMemberEnvelopeResponseSchema,\n  type PrincipalPolicySnapshotResponse,\n  PrincipalPolicySnapshotResponseSchema,\n  type PrincipalPolicyStateChainEntryResponse,\n  PrincipalPolicyStateChainEntryResponseSchema,\n  type PrincipalProjectionMemberResponse,\n  PrincipalProjectionMemberResponseSchema,\n  type PrincipalStateExternalAuthorityResponse,\n  PrincipalStateExternalAuthorityResponseSchema,\n  type PrincipalStatePayloadResponse,\n  PrincipalStatePayloadResponseSchema,\n  type PrincipalStateResponse,\n  PrincipalStateResponseSchema,\n} from \"./principalSnapshot\";\n\nexport const principalPolicyCurrentResponseShape = {\n  currentGrants: arraySchema(PrincipalContainerGrantResponseSchema),\n  currentMemberEnvelopes: CurrentPrincipalMemberEnvelopesResponseSchema,\n  currentPayload: PrincipalStatePayloadResponseSchema,\n  currentProjection: arraySchema(PrincipalProjectionMemberResponseSchema),\n  currentState: PrincipalStateResponseSchema,\n};\n\nexport const PrincipalPolicyBundleResponseSchema = loosePlainObject({\n  ...principalPolicyCurrentResponseShape,\n  previousStates: arraySchema(PrincipalPolicyStateChainEntryResponseSchema),\n});\n\nexport type PrincipalPolicyBundleResponse = z.infer<\n  typeof PrincipalPolicyBundleResponseSchema\n>;\n\nexport const PrincipalPolicyMutationResponseSchema = loosePlainObject({\n  ...principalPolicyCurrentResponseShape,\n  containerMutations: arraySchema(ContainerMutationResponseSchema),\n});\n\nexport type PrincipalPolicyMutationResponse = z.infer<\n  typeof PrincipalPolicyMutationResponseSchema\n>;\n\nexport const CommitOrganizationGroupPolicyResponseSchema = loosePlainObject({\n  groupPolicy: PrincipalPolicyMutationResponseSchema,\n  organizationPolicy: PrincipalPolicyMutationResponseSchema,\n});\n\nexport type CommitOrganizationGroupPolicyResponse = z.infer<\n  typeof CommitOrganizationGroupPolicyResponseSchema\n>;\n\nexport const PrincipalPolicyErrorResponseSchema = BillingErrorResponseSchema;\n\nexport type PrincipalPolicyErrorResponse = z.infer<\n  typeof PrincipalPolicyErrorResponseSchema\n>;\n\n/**\n * A group policy change rematerializes its granted containers, and a rekey or\n * revoke among them is a rotation like any other: one that would leave a level\n * above a directly granted container pinned to a retired epoch is refused, and\n * this names the descendant rekeys the batch must carry, parent-first.\n */\nconst PrincipalPolicyDescendantRekeysRequiredResponseSchema = loosePlainObject({\n  code: z.literal(CONTAINER_DESCENDANT_REKEYS_REQUIRED_ERROR_CODE),\n  error: z.string().min(1),\n  requiredContainerIds: arraySchema(\n    nonEmptyStringSchema,\n    MAX_ROTATION_CONTAINER_REKEYS,\n  ),\n});\n\n/**\n * The commit's conflict envelope alone: only a group commit carries container\n * mutations, so only it can be refused for what they strand. The principal\n * policy read and the organization policy write keep the plain envelope.\n */\nexport const CommitOrganizationGroupPolicyConflictResponseSchema = z.union([\n  PrincipalPolicyErrorResponseSchema,\n  PrincipalPolicyDescendantRekeysRequiredResponseSchema,\n]);\n\nexport const PrincipalPolicyStaleErrorResponseSchema = loosePlainObject({\n  code: z.literal(\"principal_policy_stale\"),\n  error: z.string().min(1),\n  principalPolicies: arraySchema(PrincipalPolicyBundleResponseSchema),\n});\n\nexport type PrincipalPolicyStaleErrorResponse = z.infer<\n  typeof PrincipalPolicyStaleErrorResponseSchema\n>;\n\nexport function isPrincipalPolicyBundleResponse(\n  value: unknown,\n): value is PrincipalPolicyBundleResponse {\n  return PrincipalPolicyBundleResponseSchema.safeParse(value).success;\n}\n\nexport function isPrincipalPolicyMutationResponse(\n  value: unknown,\n): value is PrincipalPolicyMutationResponse {\n  return PrincipalPolicyMutationResponseSchema.safeParse(value).success;\n}\n\nexport function isCommitOrganizationGroupPolicyResponse(\n  value: unknown,\n): value is CommitOrganizationGroupPolicyResponse {\n  return CommitOrganizationGroupPolicyResponseSchema.safeParse(value).success;\n}\n\nexport function isPrincipalPolicyStaleErrorResponse(\n  value: unknown,\n): value is PrincipalPolicyStaleErrorResponse {\n  return PrincipalPolicyStaleErrorResponseSchema.safeParse(value).success;\n}\n"]}
+{"version":3,"file":"principal.js","sourceRoot":"","sources":["principal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,kCAAkC,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,+CAA+C,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,sCAAsC,EAAE,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EACL,6CAA6C,EAC7C,qCAAqC,EACrC,4CAA4C,EAC5C,uCAAuC,EACvC,mCAAmC,EACnC,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAEL,6CAA6C,EAC7C,yCAAyC,EACzC,wCAAwC,EACxC,+BAA+B,EAC/B,wBAAwB,EAExB,qCAAqC,EAErC,qCAAqC,EAErC,qCAAqC,EAErC,4CAA4C,EAE5C,uCAAuC,EAEvC,6CAA6C,EAE7C,mCAAmC,EAEnC,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,aAAa,EAAE,WAAW,CAAC,qCAAqC,CAAC;IACjE,sBAAsB,EAAE,6CAA6C;IACrE,cAAc,EAAE,mCAAmC;IACnD,iBAAiB,EAAE,WAAW,CAAC,uCAAuC,CAAC;IACvE,YAAY,EAAE,4BAA4B;CAC3C,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;IAClE,GAAG,mCAAmC;IACtC,cAAc,EAAE,WAAW,CAAC,4CAA4C,CAAC;CAC1E,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,GAAG,mCAAmC;IACtC,kBAAkB,EAAE,WAAW,CAAC,+BAA+B,CAAC;CACjE,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,2CAA2C,GAAG,gBAAgB,CAAC;IAC1E,WAAW,EAAE,qCAAqC;IAClD,kBAAkB,EAAE,qCAAqC;CAC1D,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,kCAAkC,GAAG,0BAA0B,CAAC;AAM7E;;;;;GAKG;AACH,MAAM,qDAAqD,GAAG,gBAAgB,CAAC;IAC7E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,+CAA+C,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,oBAAoB,EAAE,WAAW,CAC/B,oBAAoB,EACpB,6BAA6B,CAC9B;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAG,CAAC,CAAC,KAAK,CAAC;IACzE,kCAAkC;IAClC,qDAAqD;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uCAAuC,GAAG,gBAAgB,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,cAAc,EAAE,WAAW,CACzB,sCAAsC,EACtC,kCAAkC,CACnC;CACF,CAAC,CAAC;AAMH,MAAM,UAAU,+BAA+B,CAC7C,KAAc;IAEd,OAAO,mCAAmC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,OAAO,qCAAqC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAc;IAEd,OAAO,2CAA2C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAc;IAEd,OAAO,uCAAuC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC1E,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { arraySchema, loosePlainObject, nonEmptyStringSchema } from \"../schema\";\nimport { MAX_ROTATION_CONTAINER_REKEYS } from \"../util\";\nimport { PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT } from \"../util/principalHistoryWire\";\nimport { ContainerMutationResponseSchema } from \"./container\";\nimport { CONTAINER_DESCENDANT_REKEYS_REQUIRED_ERROR_CODE } from \"./descendantRekeysRequiredError\";\nimport { BillingErrorResponseSchema } from \"./organizationBilling\";\nimport { ReferencedPrincipalStateResponseSchema } from \"./principalReference\";\n\nimport {\n  CurrentPrincipalMemberEnvelopesResponseSchema,\n  PrincipalContainerGrantResponseSchema,\n  PrincipalPolicyStateChainEntryResponseSchema,\n  PrincipalProjectionMemberResponseSchema,\n  PrincipalStatePayloadResponseSchema,\n  PrincipalStateResponseSchema,\n} from \"./principalSnapshot\";\n\nexport {\n  type CurrentPrincipalMemberEnvelopesResponse,\n  CurrentPrincipalMemberEnvelopesResponseSchema,\n  isCurrentPrincipalMemberEnvelopesResponse,\n  isPrincipalPolicyStateChainEntryResponse,\n  isPrincipalStatePayloadResponse,\n  isPrincipalStateResponse,\n  type PrincipalContainerGrantResponse,\n  PrincipalContainerGrantResponseSchema,\n  type PrincipalMemberEnvelopeResponse,\n  PrincipalMemberEnvelopeResponseSchema,\n  type PrincipalPolicySnapshotResponse,\n  PrincipalPolicySnapshotResponseSchema,\n  type PrincipalPolicyStateChainEntryResponse,\n  PrincipalPolicyStateChainEntryResponseSchema,\n  type PrincipalProjectionMemberResponse,\n  PrincipalProjectionMemberResponseSchema,\n  type PrincipalStateExternalAuthorityResponse,\n  PrincipalStateExternalAuthorityResponseSchema,\n  type PrincipalStatePayloadResponse,\n  PrincipalStatePayloadResponseSchema,\n  type PrincipalStateResponse,\n  PrincipalStateResponseSchema,\n} from \"./principalSnapshot\";\n\nexport const principalPolicyCurrentResponseShape = {\n  currentGrants: arraySchema(PrincipalContainerGrantResponseSchema),\n  currentMemberEnvelopes: CurrentPrincipalMemberEnvelopesResponseSchema,\n  currentPayload: PrincipalStatePayloadResponseSchema,\n  currentProjection: arraySchema(PrincipalProjectionMemberResponseSchema),\n  currentState: PrincipalStateResponseSchema,\n};\n\nexport const PrincipalPolicyBundleResponseSchema = loosePlainObject({\n  ...principalPolicyCurrentResponseShape,\n  previousStates: arraySchema(PrincipalPolicyStateChainEntryResponseSchema),\n});\n\nexport type PrincipalPolicyBundleResponse = z.infer<\n  typeof PrincipalPolicyBundleResponseSchema\n>;\n\nexport const PrincipalPolicyMutationResponseSchema = loosePlainObject({\n  ...principalPolicyCurrentResponseShape,\n  containerMutations: arraySchema(ContainerMutationResponseSchema),\n});\n\nexport type PrincipalPolicyMutationResponse = z.infer<\n  typeof PrincipalPolicyMutationResponseSchema\n>;\n\nexport const CommitOrganizationGroupPolicyResponseSchema = loosePlainObject({\n  groupPolicy: PrincipalPolicyMutationResponseSchema,\n  organizationPolicy: PrincipalPolicyMutationResponseSchema,\n});\n\nexport type CommitOrganizationGroupPolicyResponse = z.infer<\n  typeof CommitOrganizationGroupPolicyResponseSchema\n>;\n\nexport const PrincipalPolicyErrorResponseSchema = BillingErrorResponseSchema;\n\nexport type PrincipalPolicyErrorResponse = z.infer<\n  typeof PrincipalPolicyErrorResponseSchema\n>;\n\n/**\n * A group policy change rematerializes its granted containers, and a rekey or\n * revoke among them is a rotation like any other: one that would leave a level\n * above a directly granted container pinned to a retired epoch is refused, and\n * this names the descendant rekeys the batch must carry, parent-first.\n */\nconst PrincipalPolicyDescendantRekeysRequiredResponseSchema = loosePlainObject({\n  code: z.literal(CONTAINER_DESCENDANT_REKEYS_REQUIRED_ERROR_CODE),\n  error: z.string().min(1),\n  requiredContainerIds: arraySchema(\n    nonEmptyStringSchema,\n    MAX_ROTATION_CONTAINER_REKEYS,\n  ),\n});\n\n/**\n * The commit's conflict envelope alone: only a group commit carries container\n * mutations, so only it can be refused for what they strand. The principal\n * policy read and the organization policy write keep the plain envelope.\n */\nexport const CommitOrganizationGroupPolicyConflictResponseSchema = z.union([\n  PrincipalPolicyErrorResponseSchema,\n  PrincipalPolicyDescendantRekeysRequiredResponseSchema,\n]);\n\nexport const PrincipalPolicyStaleErrorResponseSchema = loosePlainObject({\n  code: z.literal(\"principal_policy_stale\"),\n  error: z.string().min(1),\n  principalHeads: arraySchema(\n    ReferencedPrincipalStateResponseSchema,\n    PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT,\n  ),\n});\n\nexport type PrincipalPolicyStaleErrorResponse = z.infer<\n  typeof PrincipalPolicyStaleErrorResponseSchema\n>;\n\nexport function isPrincipalPolicyBundleResponse(\n  value: unknown,\n): value is PrincipalPolicyBundleResponse {\n  return PrincipalPolicyBundleResponseSchema.safeParse(value).success;\n}\n\nexport function isPrincipalPolicyMutationResponse(\n  value: unknown,\n): value is PrincipalPolicyMutationResponse {\n  return PrincipalPolicyMutationResponseSchema.safeParse(value).success;\n}\n\nexport function isCommitOrganizationGroupPolicyResponse(\n  value: unknown,\n): value is CommitOrganizationGroupPolicyResponse {\n  return CommitOrganizationGroupPolicyResponseSchema.safeParse(value).success;\n}\n\nexport function isPrincipalPolicyStaleErrorResponse(\n  value: unknown,\n): value is PrincipalPolicyStaleErrorResponse {\n  return PrincipalPolicyStaleErrorResponseSchema.safeParse(value).success;\n}\n"]}

package/internal/validators/response/principalReference.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
 export declare const ReferencedPrincipalStateResponseShape: {
-    keyEpoch: z.ZodNumber;
+    keyEpoch: z.ZodCustom<number, number>;
     keyFingerprint: z.ZodString;
     principalId: z.ZodString;
     principalType: z.ZodLiteral<"group" | "organization">;

package/internal/validators/response/principalReference.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { boundedPositiveIntegerSchema, loosePlainObject } from "../schema.js";
 export const ReferencedPrincipalStateResponseShape = {
-    keyEpoch: z.number(),
+    keyEpoch: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),
     keyFingerprint: z.string(),
     principalId: z.string(),
     principalType: z.literal(["group", "organization"]),

package/internal/validators/response/principalReference.js.map

@@ -1 +1 @@
-{"version":3,"file":"principalReference.js","sourceRoot":"","sources":["principalReference.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;CAC/D,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CACpE,qCAAqC,CACtC,CAAC;AAMF,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,sCAAsC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { boundedPositiveIntegerSchema, loosePlainObject } from \"../schema\";\n\nexport const ReferencedPrincipalStateResponseShape = {\n  keyEpoch: z.number(),\n  keyFingerprint: z.string(),\n  principalId: z.string(),\n  principalType: z.literal([\"group\", \"organization\"]),\n  stateHash: z.string(),\n  version: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n};\n\nexport const ReferencedPrincipalStateResponseSchema = loosePlainObject(\n  ReferencedPrincipalStateResponseShape,\n);\n\nexport type ReferencedPrincipalStateResponse = z.infer<\n  typeof ReferencedPrincipalStateResponseSchema\n>;\n\nexport function isReferencedPrincipalStateResponse(\n  value: unknown,\n): value is ReferencedPrincipalStateResponse {\n  return ReferencedPrincipalStateResponseSchema.safeParse(value).success;\n}\n"]}
+{"version":3,"file":"principalReference.js","sourceRoot":"","sources":["principalReference.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,QAAQ,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC/D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;CAC/D,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CACpE,qCAAqC,CACtC,CAAC;AAMF,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,sCAAsC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { boundedPositiveIntegerSchema, loosePlainObject } from \"../schema\";\n\nexport const ReferencedPrincipalStateResponseShape = {\n  keyEpoch: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n  keyFingerprint: z.string(),\n  principalId: z.string(),\n  principalType: z.literal([\"group\", \"organization\"]),\n  stateHash: z.string(),\n  version: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n};\n\nexport const ReferencedPrincipalStateResponseSchema = loosePlainObject(\n  ReferencedPrincipalStateResponseShape,\n);\n\nexport type ReferencedPrincipalStateResponse = z.infer<\n  typeof ReferencedPrincipalStateResponseSchema\n>;\n\nexport function isReferencedPrincipalStateResponse(\n  value: unknown,\n): value is ReferencedPrincipalStateResponse {\n  return ReferencedPrincipalStateResponseSchema.safeParse(value).success;\n}\n"]}

package/internal/validators/response/principalSnapshot.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
-import { arraySchema, boundedPositiveIntegerSchema, loosePlainObject, nonNegativeIntegerSchema, positiveIntegerSchema, } from "../schema.js";
+import { arraySchema, boundedPositiveIntegerSchema, loosePlainObject, nonNegativeIntegerSchema, } from "../schema.js";
 export const PrincipalStateExternalAuthorityResponseSchema = loosePlainObject({
-    keyEpoch: positiveIntegerSchema,
+    keyEpoch: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),
     keyFingerprint: z.string(),
     principalId: z.string(),
     principalType: z.literal("group"),
@@ -14,7 +14,7 @@ export const PrincipalStateResponseSchema = loosePlainObject({
     externalAuthority: PrincipalStateExternalAuthorityResponseSchema.nullable(),
     grantCount: nonNegativeIntegerSchema,
     grantRoot: z.string(),
-    keyEpoch: z.number(),
+    keyEpoch: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),
     keyFingerprint: z.string(),
     memberCount: nonNegativeIntegerSchema,
     memberEnvelopesRoot: z.string(),
@@ -57,7 +57,7 @@ export const PrincipalMemberEnvelopeResponseSchema = loosePlainObject({
 });
 export const CurrentPrincipalMemberEnvelopesResponseSchema = loosePlainObject({
     envelopes: arraySchema(PrincipalMemberEnvelopeResponseSchema),
-    epoch: z.number(),
+    epoch: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),
     principalId: z.string(),
     principalType: z.literal(["group", "organization"]),
     stateHash: z.string(),

package/internal/validators/response/principalSnapshot.js.map

@@ -1 +1 @@
-{"version":3,"file":"principalSnapshot.js","sourceRoot":"","sources":["principalSnapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,WAAW,EACX,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AAEnB,MAAM,CAAC,MAAM,6CAA6C,GAAG,gBAAgB,CAAC;IAC5E,QAAQ,EAAE,qBAAqB;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;CAC/D,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE;IAClC,iBAAiB,EAAE,6CAA6C,CAAC,QAAQ,EAAE;IAC3E,UAAU,EAAE,wBAAwB;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,wBAAwB;IACrC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/B,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;CAC/D,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,uCAAuC,GAAG,gBAAgB,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;IAClE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,6CAA6C,GAAG,gBAAgB,CAAC;IAC5E,SAAS,EAAE,WAAW,CAAC,qCAAqC,CAAC;IAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,4CAA4C,GAAG,gBAAgB,CAAC;IAC3E,MAAM,EAAE,WAAW,CAAC,qCAAqC,CAAC;IAC1D,UAAU,EAAE,WAAW,CAAC,uCAAuC,CAAC;IAChE,KAAK,EAAE,4BAA4B;CACpC,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,aAAa,EAAE,WAAW,CAAC,qCAAqC,CAAC;IACjE,iBAAiB,EAAE,WAAW,CAAC,uCAAuC,CAAC;IACvE,YAAY,EAAE,4BAA4B;IAC1C,cAAc,EAAE,WAAW,CAAC,4CAA4C,CAAC;CAC1E,CAAC,CAAC;AAMH,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,OAAO,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAAc;IAEd,OAAO,mCAAmC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,yCAAyC,CACvD,KAAc;IAEd,OAAO,6CAA6C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,KAAc;IAEd,OAAO,4CAA4C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC/E,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  arraySchema,\n  boundedPositiveIntegerSchema,\n  loosePlainObject,\n  nonNegativeIntegerSchema,\n  positiveIntegerSchema,\n} from \"../schema\";\n\nexport const PrincipalStateExternalAuthorityResponseSchema = loosePlainObject({\n  keyEpoch: positiveIntegerSchema,\n  keyFingerprint: z.string(),\n  principalId: z.string(),\n  principalType: z.literal(\"group\"),\n  stateHash: z.string(),\n  version: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n});\n\nexport type PrincipalStateExternalAuthorityResponse = z.infer<\n  typeof PrincipalStateExternalAuthorityResponseSchema\n>;\n\nexport const PrincipalStateResponseSchema = loosePlainObject({\n  createdAt: z.string(),\n  encapsulationPublicKey: z.string(),\n  externalAuthority: PrincipalStateExternalAuthorityResponseSchema.nullable(),\n  grantCount: nonNegativeIntegerSchema,\n  grantRoot: z.string(),\n  keyEpoch: z.number(),\n  keyFingerprint: z.string(),\n  memberCount: nonNegativeIntegerSchema,\n  memberEnvelopesRoot: z.string(),\n  membershipMode: z.literal(\"projection\"),\n  membershipRoot: z.string(),\n  payloadCiphertextHash: z.string(),\n  prevStateHash: z.string().nullable(),\n  principalId: z.string(),\n  principalType: z.literal([\"group\", \"organization\"]),\n  projectionRoot: z.string(),\n  signature: z.string(),\n  signedAt: z.string(),\n  signerUserId: z.string(),\n  signerUserKeyFingerprint: z.string(),\n  stateHash: z.string(),\n  version: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n});\n\nexport type PrincipalStateResponse = z.infer<\n  typeof PrincipalStateResponseSchema\n>;\n\nexport const PrincipalProjectionMemberResponseSchema = loosePlainObject({\n  role: z.literal([\"member\", \"admin\"]),\n  userId: z.string(),\n});\n\nexport type PrincipalProjectionMemberResponse = z.infer<\n  typeof PrincipalProjectionMemberResponseSchema\n>;\n\nexport const PrincipalContainerGrantResponseSchema = loosePlainObject({\n  accessLevel: z.literal([\"admin\", \"read\", \"write\"]),\n  containerId: z.string(),\n});\n\nexport type PrincipalContainerGrantResponse = z.infer<\n  typeof PrincipalContainerGrantResponseSchema\n>;\n\nexport const PrincipalStatePayloadResponseSchema = loosePlainObject({\n  cipherSuite: z.literal(\"aes-256-gcm\"),\n  ciphertext: z.string(),\n  ciphertextHash: z.string(),\n  createdAt: z.string(),\n  principalId: z.string(),\n  principalType: z.literal([\"group\", \"organization\"]),\n  stateHash: z.string(),\n});\n\nexport type PrincipalStatePayloadResponse = z.infer<\n  typeof PrincipalStatePayloadResponseSchema\n>;\n\nexport const PrincipalMemberEnvelopeResponseSchema = loosePlainObject({\n  kemCipherText: z.string(),\n  memberKeyFingerprint: z.string(),\n  userId: z.string(),\n  wrappedKey: z.string(),\n});\n\nexport type PrincipalMemberEnvelopeResponse = z.infer<\n  typeof PrincipalMemberEnvelopeResponseSchema\n>;\n\nexport const CurrentPrincipalMemberEnvelopesResponseSchema = loosePlainObject({\n  envelopes: arraySchema(PrincipalMemberEnvelopeResponseSchema),\n  epoch: z.number(),\n  principalId: z.string(),\n  principalType: z.literal([\"group\", \"organization\"]),\n  stateHash: z.string(),\n});\n\nexport type CurrentPrincipalMemberEnvelopesResponse = z.infer<\n  typeof CurrentPrincipalMemberEnvelopesResponseSchema\n>;\n\nexport const PrincipalPolicyStateChainEntryResponseSchema = loosePlainObject({\n  grants: arraySchema(PrincipalContainerGrantResponseSchema),\n  projection: arraySchema(PrincipalProjectionMemberResponseSchema),\n  state: PrincipalStateResponseSchema,\n});\n\nexport type PrincipalPolicyStateChainEntryResponse = z.infer<\n  typeof PrincipalPolicyStateChainEntryResponseSchema\n>;\n\nexport const PrincipalPolicySnapshotResponseSchema = loosePlainObject({\n  currentGrants: arraySchema(PrincipalContainerGrantResponseSchema),\n  currentProjection: arraySchema(PrincipalProjectionMemberResponseSchema),\n  currentState: PrincipalStateResponseSchema,\n  previousStates: arraySchema(PrincipalPolicyStateChainEntryResponseSchema),\n});\n\nexport type PrincipalPolicySnapshotResponse = z.infer<\n  typeof PrincipalPolicySnapshotResponseSchema\n>;\n\nexport function isPrincipalStateResponse(\n  value: unknown,\n): value is PrincipalStateResponse {\n  return PrincipalStateResponseSchema.safeParse(value).success;\n}\n\nexport function isPrincipalStatePayloadResponse(\n  value: unknown,\n): value is PrincipalStatePayloadResponse {\n  return PrincipalStatePayloadResponseSchema.safeParse(value).success;\n}\n\nexport function isCurrentPrincipalMemberEnvelopesResponse(\n  value: unknown,\n): value is CurrentPrincipalMemberEnvelopesResponse {\n  return CurrentPrincipalMemberEnvelopesResponseSchema.safeParse(value).success;\n}\n\nexport function isPrincipalPolicyStateChainEntryResponse(\n  value: unknown,\n): value is PrincipalPolicyStateChainEntryResponse {\n  return PrincipalPolicyStateChainEntryResponseSchema.safeParse(value).success;\n}\n"]}
+{"version":3,"file":"principalSnapshot.js","sourceRoot":"","sources":["principalSnapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,WAAW,EACX,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,WAAW,CAAC;AAEnB,MAAM,CAAC,MAAM,6CAA6C,GAAG,gBAAgB,CAAC;IAC5E,QAAQ,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC/D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;CAC/D,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE;IAClC,iBAAiB,EAAE,6CAA6C,CAAC,QAAQ,EAAE;IAC3E,UAAU,EAAE,wBAAwB;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC/D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,wBAAwB;IACrC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/B,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;CAC/D,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,uCAAuC,GAAG,gBAAgB,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;IAClE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,6CAA6C,GAAG,gBAAgB,CAAC;IAC5E,SAAS,EAAE,WAAW,CAAC,qCAAqC,CAAC;IAC7D,KAAK,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,4CAA4C,GAAG,gBAAgB,CAAC;IAC3E,MAAM,EAAE,WAAW,CAAC,qCAAqC,CAAC;IAC1D,UAAU,EAAE,WAAW,CAAC,uCAAuC,CAAC;IAChE,KAAK,EAAE,4BAA4B;CACpC,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,aAAa,EAAE,WAAW,CAAC,qCAAqC,CAAC;IACjE,iBAAiB,EAAE,WAAW,CAAC,uCAAuC,CAAC;IACvE,YAAY,EAAE,4BAA4B;IAC1C,cAAc,EAAE,WAAW,CAAC,4CAA4C,CAAC;CAC1E,CAAC,CAAC;AAMH,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,OAAO,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAAc;IAEd,OAAO,mCAAmC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,yCAAyC,CACvD,KAAc;IAEd,OAAO,6CAA6C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,KAAc;IAEd,OAAO,4CAA4C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC/E,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  arraySchema,\n  boundedPositiveIntegerSchema,\n  loosePlainObject,\n  nonNegativeIntegerSchema,\n} from \"../schema\";\n\nexport const PrincipalStateExternalAuthorityResponseSchema = loosePlainObject({\n  keyEpoch: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n  keyFingerprint: z.string(),\n  principalId: z.string(),\n  principalType: z.literal(\"group\"),\n  stateHash: z.string(),\n  version: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n});\n\nexport type PrincipalStateExternalAuthorityResponse = z.infer<\n  typeof PrincipalStateExternalAuthorityResponseSchema\n>;\n\nexport const PrincipalStateResponseSchema = loosePlainObject({\n  createdAt: z.string(),\n  encapsulationPublicKey: z.string(),\n  externalAuthority: PrincipalStateExternalAuthorityResponseSchema.nullable(),\n  grantCount: nonNegativeIntegerSchema,\n  grantRoot: z.string(),\n  keyEpoch: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n  keyFingerprint: z.string(),\n  memberCount: nonNegativeIntegerSchema,\n  memberEnvelopesRoot: z.string(),\n  membershipMode: z.literal(\"projection\"),\n  membershipRoot: z.string(),\n  payloadCiphertextHash: z.string(),\n  prevStateHash: z.string().nullable(),\n  principalId: z.string(),\n  principalType: z.literal([\"group\", \"organization\"]),\n  projectionRoot: z.string(),\n  signature: z.string(),\n  signedAt: z.string(),\n  signerUserId: z.string(),\n  signerUserKeyFingerprint: z.string(),\n  stateHash: z.string(),\n  version: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n});\n\nexport type PrincipalStateResponse = z.infer<\n  typeof PrincipalStateResponseSchema\n>;\n\nexport const PrincipalProjectionMemberResponseSchema = loosePlainObject({\n  role: z.literal([\"member\", \"admin\"]),\n  userId: z.string(),\n});\n\nexport type PrincipalProjectionMemberResponse = z.infer<\n  typeof PrincipalProjectionMemberResponseSchema\n>;\n\nexport const PrincipalContainerGrantResponseSchema = loosePlainObject({\n  accessLevel: z.literal([\"admin\", \"read\", \"write\"]),\n  containerId: z.string(),\n});\n\nexport type PrincipalContainerGrantResponse = z.infer<\n  typeof PrincipalContainerGrantResponseSchema\n>;\n\nexport const PrincipalStatePayloadResponseSchema = loosePlainObject({\n  cipherSuite: z.literal(\"aes-256-gcm\"),\n  ciphertext: z.string(),\n  ciphertextHash: z.string(),\n  createdAt: z.string(),\n  principalId: z.string(),\n  principalType: z.literal([\"group\", \"organization\"]),\n  stateHash: z.string(),\n});\n\nexport type PrincipalStatePayloadResponse = z.infer<\n  typeof PrincipalStatePayloadResponseSchema\n>;\n\nexport const PrincipalMemberEnvelopeResponseSchema = loosePlainObject({\n  kemCipherText: z.string(),\n  memberKeyFingerprint: z.string(),\n  userId: z.string(),\n  wrappedKey: z.string(),\n});\n\nexport type PrincipalMemberEnvelopeResponse = z.infer<\n  typeof PrincipalMemberEnvelopeResponseSchema\n>;\n\nexport const CurrentPrincipalMemberEnvelopesResponseSchema = loosePlainObject({\n  envelopes: arraySchema(PrincipalMemberEnvelopeResponseSchema),\n  epoch: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n  principalId: z.string(),\n  principalType: z.literal([\"group\", \"organization\"]),\n  stateHash: z.string(),\n});\n\nexport type CurrentPrincipalMemberEnvelopesResponse = z.infer<\n  typeof CurrentPrincipalMemberEnvelopesResponseSchema\n>;\n\nexport const PrincipalPolicyStateChainEntryResponseSchema = loosePlainObject({\n  grants: arraySchema(PrincipalContainerGrantResponseSchema),\n  projection: arraySchema(PrincipalProjectionMemberResponseSchema),\n  state: PrincipalStateResponseSchema,\n});\n\nexport type PrincipalPolicyStateChainEntryResponse = z.infer<\n  typeof PrincipalPolicyStateChainEntryResponseSchema\n>;\n\nexport const PrincipalPolicySnapshotResponseSchema = loosePlainObject({\n  currentGrants: arraySchema(PrincipalContainerGrantResponseSchema),\n  currentProjection: arraySchema(PrincipalProjectionMemberResponseSchema),\n  currentState: PrincipalStateResponseSchema,\n  previousStates: arraySchema(PrincipalPolicyStateChainEntryResponseSchema),\n});\n\nexport type PrincipalPolicySnapshotResponse = z.infer<\n  typeof PrincipalPolicySnapshotResponseSchema\n>;\n\nexport function isPrincipalStateResponse(\n  value: unknown,\n): value is PrincipalStateResponse {\n  return PrincipalStateResponseSchema.safeParse(value).success;\n}\n\nexport function isPrincipalStatePayloadResponse(\n  value: unknown,\n): value is PrincipalStatePayloadResponse {\n  return PrincipalStatePayloadResponseSchema.safeParse(value).success;\n}\n\nexport function isCurrentPrincipalMemberEnvelopesResponse(\n  value: unknown,\n): value is CurrentPrincipalMemberEnvelopesResponse {\n  return CurrentPrincipalMemberEnvelopesResponseSchema.safeParse(value).success;\n}\n\nexport function isPrincipalPolicyStateChainEntryResponse(\n  value: unknown,\n): value is PrincipalPolicyStateChainEntryResponse {\n  return PrincipalPolicyStateChainEntryResponseSchema.safeParse(value).success;\n}\n"]}

package/internal/validators/util/index.d.ts

@@ -5,7 +5,7 @@ export { MAX_CONTAINER_PATH_LENGTH } from "./containerLimits.js";
 export { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS, MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS, MAX_DOCUMENT_SYNC_OUTGOING_UPDATES, MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH, MAX_DOCUMENT_SYNC_REQUEST_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES, MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES, } from "./documentSyncLimits.js";
 export { isSerializedKeyEnvelope, isSerializedKeyEnvelopeArray, type SerializedKeyEnvelope, } from "./keyEnvelope.js";
 export { isOrganizationReplacementAuthorization, type OrganizationReplacementAuthorization, OrganizationReplacementAuthorizationSchema, } from "./organizationReplacement.js";
-export { PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT } from "./principalHistoryWire.js";
+export { PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT, PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT, } from "./principalHistoryWire.js";
 export { PROJECTION_HISTORY_HINT_CHARACTERS, ProjectionHistoryHeadersSchema, type ProjectionHistoryPrefix, ProjectionHistoryPrefixesSchema, parseProjectionHistoryHints, } from "./projectionHistoryWire.js";
 export { hasArrayProperty, hasBooleanProperty, hasNonEmptyStringProperty, hasNullableNumberProperty, hasNullableStringProperty, hasNumberProperty, hasObjectProperty, hasOptionalStringProperty, hasPositiveIntegerProperty, hasPropertyValue, hasStringProperty, isNonEmptyStringArray, isOptionalRecordArray, isOptionalRecordArrayArray, isRecordArray, isRecordArrayArray, isStringArray, } from "./properties.js";
 export { AUTH_CHALLENGE_HEX_LENGTH, isAuthChallengeHexString, isByteArray, isByteArrayOfLength, isSha256HexString, ML_DSA87_PUBLIC_KEY_BYTES, ML_DSA87_SIGNATURE_BYTES, ML_KEM1024_PUBLIC_KEY_BYTES, SHA256_HEX_LENGTH, } from "./protocol.js";

package/internal/validators/util/index.js

@@ -5,7 +5,7 @@ export { MAX_CONTAINER_PATH_LENGTH } from "./containerLimits.js";
 export { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS, MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS, MAX_DOCUMENT_SYNC_OUTGOING_UPDATES, MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH, MAX_DOCUMENT_SYNC_REQUEST_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES, MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES, } from "./documentSyncLimits.js";
 export { isSerializedKeyEnvelope, isSerializedKeyEnvelopeArray, } from "./keyEnvelope.js";
 export { isOrganizationReplacementAuthorization, OrganizationReplacementAuthorizationSchema, } from "./organizationReplacement.js";
-export { PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT } from "./principalHistoryWire.js";
+export { PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT, PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT, } from "./principalHistoryWire.js";
 export { PROJECTION_HISTORY_HINT_CHARACTERS, ProjectionHistoryHeadersSchema, ProjectionHistoryPrefixesSchema, parseProjectionHistoryHints, } from "./projectionHistoryWire.js";
 export { hasArrayProperty, hasBooleanProperty, hasNonEmptyStringProperty, hasNullableNumberProperty, hasNullableStringProperty, hasNumberProperty, hasObjectProperty, hasOptionalStringProperty, hasPositiveIntegerProperty, hasPropertyValue, hasStringProperty, isNonEmptyStringArray, isOptionalRecordArray, isOptionalRecordArrayArray, isRecordArray, isRecordArrayArray, isStringArray, } from "./properties.js";
 export { AUTH_CHALLENGE_HEX_LENGTH, isAuthChallengeHexString, isByteArray, isByteArrayOfLength, isSha256HexString, ML_DSA87_PUBLIC_KEY_BYTES, ML_DSA87_SIGNATURE_BYTES, ML_KEM1024_PUBLIC_KEY_BYTES, SHA256_HEX_LENGTH, } from "./protocol.js";