@tearleads/client-sdk 0.1.40 → 0.1.42

package/internal/validators/operation/writerProjections.js

@@ -1,8 +1,8 @@
 import { z } from "zod";
-import { projectionHistoryHeaderRefinement } from "../projectionHistoryRefinements.js";
-import { ContainerNotFoundErrorResponseSchema, ContainerWriterProjectionErrorResponseSchema, ContainerWriterProjectionResponseSchema, DocumentNotFoundErrorResponseSchema, DocumentWriterProjectionErrorResponseSchema, DocumentWriterProjectionResponseSchema, ErrorResponseSchema, isContainerWriterProjectionResponse, isDocumentWriterProjectionResponse, SessionFailureResponseSchema, } from "../response/index.js";
+import { knownManifestsHeaderRefinement } from "../knownManifestsRefinements.js";
+import { ContainerNotFoundErrorResponseSchema, ContainerWriterProjectionErrorResponseSchema, ContainerWriterProjectionWireResponseSchema, DocumentNotFoundErrorResponseSchema, DocumentWriterProjectionErrorResponseSchema, DocumentWriterProjectionWireResponseSchema, ErrorResponseSchema, isContainerWriterProjectionWireResponse, isDocumentWriterProjectionWireResponse, SessionFailureResponseSchema, } from "../response/index.js";
 import { PrincipalHistoryPreparationResponseSchema } from "../response/principalHistoryPreparation.js";
-import { ProjectionHistoryHeadersSchema } from "../util/projectionHistoryWire.js";
+import { KnownManifestsHeadersSchema } from "../util/knownManifestWire.js";
 import { writerProjectionResponseRuntimeRefinements } from "../writerProjectionRefinements.js";
 import { defineJsonOperation } from "./definition.js";
 export const ContainerWriterProjectionPathParamsSchema = z.strictObject({
@@ -24,16 +24,16 @@ export const getContainerWriterProjectionOperation = defineJsonOperation({
     failureStatuses: [400, 401, 403, 404, 409, 500],
     id: "containers.writerProjection.get",
     method: "GET",
-    headers: ProjectionHistoryHeadersSchema,
+    headers: KnownManifestsHeadersSchema,
     params: ContainerWriterProjectionPathParamsSchema,
     path: "/containers/{containerId}/writer-projection",
     responses: {
-        200: ContainerWriterProjectionResponseSchema,
+        200: ContainerWriterProjectionWireResponseSchema,
         202: PrincipalHistoryPreparationResponseSchema,
     },
     runtimeRefinements: [
         ...writerProjectionResponseRuntimeRefinements,
-        projectionHistoryHeaderRefinement,
+        knownManifestsHeaderRefinement,
     ],
 });
 export const getDocumentWriterProjectionOperation = defineJsonOperation({
@@ -49,18 +49,18 @@ export const getDocumentWriterProjectionOperation = defineJsonOperation({
     failureStatuses: [400, 401, 403, 404, 409, 500],
     id: "documents.writerProjection.get",
     method: "GET",
-    headers: ProjectionHistoryHeadersSchema,
+    headers: KnownManifestsHeadersSchema,
     params: DocumentWriterProjectionPathParamsSchema,
     path: "/documents/{documentId}/writer-projection",
     responses: {
-        200: DocumentWriterProjectionResponseSchema,
+        200: DocumentWriterProjectionWireResponseSchema,
         202: PrincipalHistoryPreparationResponseSchema,
     },
     runtimeRefinements: [
         ...writerProjectionResponseRuntimeRefinements,
-        projectionHistoryHeaderRefinement,
+        knownManifestsHeaderRefinement,
     ],
 });
-export const isGetContainerWriterProjectionOperationResponse = isContainerWriterProjectionResponse;
-export const isGetDocumentWriterProjectionOperationResponse = isDocumentWriterProjectionResponse;
+export const isGetContainerWriterProjectionOperationResponse = isContainerWriterProjectionWireResponse;
+export const isGetDocumentWriterProjectionOperationResponse = isDocumentWriterProjectionWireResponse;
 //# sourceMappingURL=writerProjections.js.map

package/internal/validators/operation/writerProjections.js.map

@@ -1 +1 @@
-{"version":3,"file":"writerProjections.js","sourceRoot":"","sources":["writerProjections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,EACL,oCAAoC,EACpC,4CAA4C,EAC5C,uCAAuC,EACvC,mCAAmC,EACnC,2CAA2C,EAC3C,sCAAsC,EACtC,mBAAmB,EACnB,mCAAmC,EACnC,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,yCAAyC,EAAE,MAAM,yCAAyC,CAAC;AACpG,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,0CAA0C,EAAE,MAAM,gCAAgC,CAAC;AAC5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,YAAY,CAAC;IACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,YAAY,CAAC;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AASH,MAAM,CAAC,MAAM,qCAAqC,GAAG,mBAAmB,CAAC;IACvE,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,4BAA4B;QACjC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,oCAAoC;QACzC,GAAG,EAAE,4CAA4C;QACjD,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAC/C,EAAE,EAAE,iCAAiC;IACrC,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,8BAA8B;IACvC,MAAM,EAAE,yCAAyC;IACjD,IAAI,EAAE,6CAA6C;IACnD,SAAS,EAAE;QACT,GAAG,EAAE,uCAAuC;QAC5C,GAAG,EAAE,yCAAyC;KAC/C;IACD,kBAAkB,EAAE;QAClB,GAAG,0CAA0C;QAC7C,iCAAiC;KAClC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,mBAAmB,CAAC;IACtE,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,4BAA4B;QACjC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,mCAAmC;QACxC,GAAG,EAAE,2CAA2C;QAChD,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAC/C,EAAE,EAAE,gCAAgC;IACpC,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,8BAA8B;IACvC,MAAM,EAAE,wCAAwC;IAChD,IAAI,EAAE,2CAA2C;IACjD,SAAS,EAAE;QACT,GAAG,EAAE,sCAAsC;QAC3C,GAAG,EAAE,yCAAyC;KAC/C;IACD,kBAAkB,EAAE;QAClB,GAAG,0CAA0C;QAC7C,iCAAiC;KAClC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+CAA+C,GAC1D,mCAAmC,CAAC;AACtC,MAAM,CAAC,MAAM,8CAA8C,GACzD,kCAAkC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { projectionHistoryHeaderRefinement } from \"../projectionHistoryRefinements\";\nimport {\n  ContainerNotFoundErrorResponseSchema,\n  ContainerWriterProjectionErrorResponseSchema,\n  ContainerWriterProjectionResponseSchema,\n  DocumentNotFoundErrorResponseSchema,\n  DocumentWriterProjectionErrorResponseSchema,\n  DocumentWriterProjectionResponseSchema,\n  ErrorResponseSchema,\n  isContainerWriterProjectionResponse,\n  isDocumentWriterProjectionResponse,\n  SessionFailureResponseSchema,\n} from \"../response\";\nimport { PrincipalHistoryPreparationResponseSchema } from \"../response/principalHistoryPreparation\";\nimport { ProjectionHistoryHeadersSchema } from \"../util/projectionHistoryWire\";\nimport { writerProjectionResponseRuntimeRefinements } from \"../writerProjectionRefinements\";\nimport { defineJsonOperation } from \"./definition\";\n\nexport const ContainerWriterProjectionPathParamsSchema = z.strictObject({\n  containerId: z.string(),\n});\n\nexport const DocumentWriterProjectionPathParamsSchema = z.strictObject({\n  documentId: z.string(),\n});\n\nexport type ContainerWriterProjectionPathParams = z.infer<\n  typeof ContainerWriterProjectionPathParamsSchema\n>;\nexport type DocumentWriterProjectionPathParams = z.infer<\n  typeof DocumentWriterProjectionPathParamsSchema\n>;\n\nexport const getContainerWriterProjectionOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    400: ErrorResponseSchema,\n    401: SessionFailureResponseSchema,\n    403: ErrorResponseSchema,\n    404: ContainerNotFoundErrorResponseSchema,\n    409: ContainerWriterProjectionErrorResponseSchema,\n    500: ErrorResponseSchema,\n  },\n  failureStatuses: [400, 401, 403, 404, 409, 500],\n  id: \"containers.writerProjection.get\",\n  method: \"GET\",\n  headers: ProjectionHistoryHeadersSchema,\n  params: ContainerWriterProjectionPathParamsSchema,\n  path: \"/containers/{containerId}/writer-projection\",\n  responses: {\n    200: ContainerWriterProjectionResponseSchema,\n    202: PrincipalHistoryPreparationResponseSchema,\n  },\n  runtimeRefinements: [\n    ...writerProjectionResponseRuntimeRefinements,\n    projectionHistoryHeaderRefinement,\n  ],\n});\n\nexport const getDocumentWriterProjectionOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    400: ErrorResponseSchema,\n    401: SessionFailureResponseSchema,\n    403: ErrorResponseSchema,\n    404: DocumentNotFoundErrorResponseSchema,\n    409: DocumentWriterProjectionErrorResponseSchema,\n    500: ErrorResponseSchema,\n  },\n  failureStatuses: [400, 401, 403, 404, 409, 500],\n  id: \"documents.writerProjection.get\",\n  method: \"GET\",\n  headers: ProjectionHistoryHeadersSchema,\n  params: DocumentWriterProjectionPathParamsSchema,\n  path: \"/documents/{documentId}/writer-projection\",\n  responses: {\n    200: DocumentWriterProjectionResponseSchema,\n    202: PrincipalHistoryPreparationResponseSchema,\n  },\n  runtimeRefinements: [\n    ...writerProjectionResponseRuntimeRefinements,\n    projectionHistoryHeaderRefinement,\n  ],\n});\n\nexport const isGetContainerWriterProjectionOperationResponse =\n  isContainerWriterProjectionResponse;\nexport const isGetDocumentWriterProjectionOperationResponse =\n  isDocumentWriterProjectionResponse;\n"]}
+{"version":3,"file":"writerProjections.js","sourceRoot":"","sources":["writerProjections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EACL,oCAAoC,EACpC,4CAA4C,EAC5C,2CAA2C,EAC3C,mCAAmC,EACnC,2CAA2C,EAC3C,0CAA0C,EAC1C,mBAAmB,EACnB,uCAAuC,EACvC,sCAAsC,EACtC,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,yCAAyC,EAAE,MAAM,yCAAyC,CAAC;AACpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,0CAA0C,EAAE,MAAM,gCAAgC,CAAC;AAC5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,YAAY,CAAC;IACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,YAAY,CAAC;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AASH,MAAM,CAAC,MAAM,qCAAqC,GAAG,mBAAmB,CAAC;IACvE,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,4BAA4B;QACjC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,oCAAoC;QACzC,GAAG,EAAE,4CAA4C;QACjD,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAC/C,EAAE,EAAE,iCAAiC;IACrC,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,2BAA2B;IACpC,MAAM,EAAE,yCAAyC;IACjD,IAAI,EAAE,6CAA6C;IACnD,SAAS,EAAE;QACT,GAAG,EAAE,2CAA2C;QAChD,GAAG,EAAE,yCAAyC;KAC/C;IACD,kBAAkB,EAAE;QAClB,GAAG,0CAA0C;QAC7C,8BAA8B;KAC/B;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,mBAAmB,CAAC;IACtE,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,4BAA4B;QACjC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,mCAAmC;QACxC,GAAG,EAAE,2CAA2C;QAChD,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAC/C,EAAE,EAAE,gCAAgC;IACpC,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,2BAA2B;IACpC,MAAM,EAAE,wCAAwC;IAChD,IAAI,EAAE,2CAA2C;IACjD,SAAS,EAAE;QACT,GAAG,EAAE,0CAA0C;QAC/C,GAAG,EAAE,yCAAyC;KAC/C;IACD,kBAAkB,EAAE;QAClB,GAAG,0CAA0C;QAC7C,8BAA8B;KAC/B;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+CAA+C,GAC1D,uCAAuC,CAAC;AAC1C,MAAM,CAAC,MAAM,8CAA8C,GACzD,sCAAsC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { knownManifestsHeaderRefinement } from \"../knownManifestsRefinements\";\nimport {\n  ContainerNotFoundErrorResponseSchema,\n  ContainerWriterProjectionErrorResponseSchema,\n  ContainerWriterProjectionWireResponseSchema,\n  DocumentNotFoundErrorResponseSchema,\n  DocumentWriterProjectionErrorResponseSchema,\n  DocumentWriterProjectionWireResponseSchema,\n  ErrorResponseSchema,\n  isContainerWriterProjectionWireResponse,\n  isDocumentWriterProjectionWireResponse,\n  SessionFailureResponseSchema,\n} from \"../response\";\nimport { PrincipalHistoryPreparationResponseSchema } from \"../response/principalHistoryPreparation\";\nimport { KnownManifestsHeadersSchema } from \"../util/knownManifestWire\";\nimport { writerProjectionResponseRuntimeRefinements } from \"../writerProjectionRefinements\";\nimport { defineJsonOperation } from \"./definition\";\n\nexport const ContainerWriterProjectionPathParamsSchema = z.strictObject({\n  containerId: z.string(),\n});\n\nexport const DocumentWriterProjectionPathParamsSchema = z.strictObject({\n  documentId: z.string(),\n});\n\nexport type ContainerWriterProjectionPathParams = z.infer<\n  typeof ContainerWriterProjectionPathParamsSchema\n>;\nexport type DocumentWriterProjectionPathParams = z.infer<\n  typeof DocumentWriterProjectionPathParamsSchema\n>;\n\nexport const getContainerWriterProjectionOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    400: ErrorResponseSchema,\n    401: SessionFailureResponseSchema,\n    403: ErrorResponseSchema,\n    404: ContainerNotFoundErrorResponseSchema,\n    409: ContainerWriterProjectionErrorResponseSchema,\n    500: ErrorResponseSchema,\n  },\n  failureStatuses: [400, 401, 403, 404, 409, 500],\n  id: \"containers.writerProjection.get\",\n  method: \"GET\",\n  headers: KnownManifestsHeadersSchema,\n  params: ContainerWriterProjectionPathParamsSchema,\n  path: \"/containers/{containerId}/writer-projection\",\n  responses: {\n    200: ContainerWriterProjectionWireResponseSchema,\n    202: PrincipalHistoryPreparationResponseSchema,\n  },\n  runtimeRefinements: [\n    ...writerProjectionResponseRuntimeRefinements,\n    knownManifestsHeaderRefinement,\n  ],\n});\n\nexport const getDocumentWriterProjectionOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    400: ErrorResponseSchema,\n    401: SessionFailureResponseSchema,\n    403: ErrorResponseSchema,\n    404: DocumentNotFoundErrorResponseSchema,\n    409: DocumentWriterProjectionErrorResponseSchema,\n    500: ErrorResponseSchema,\n  },\n  failureStatuses: [400, 401, 403, 404, 409, 500],\n  id: \"documents.writerProjection.get\",\n  method: \"GET\",\n  headers: KnownManifestsHeadersSchema,\n  params: DocumentWriterProjectionPathParamsSchema,\n  path: \"/documents/{documentId}/writer-projection\",\n  responses: {\n    200: DocumentWriterProjectionWireResponseSchema,\n    202: PrincipalHistoryPreparationResponseSchema,\n  },\n  runtimeRefinements: [\n    ...writerProjectionResponseRuntimeRefinements,\n    knownManifestsHeaderRefinement,\n  ],\n});\n\nexport const isGetContainerWriterProjectionOperationResponse =\n  isContainerWriterProjectionWireResponse;\nexport const isGetDocumentWriterProjectionOperationResponse =\n  isDocumentWriterProjectionWireResponse;\n"]}

package/internal/validators/response/container.d.ts

@@ -1337,6 +1337,10 @@ export declare const ContainerKeyingPathResponseSchema: z.ZodType<{
     }[];
 }>>;
 export type ContainerKeyingPathResponse = z.infer<typeof ContainerKeyingPathResponseSchema>;
+/**
+ * The decoded projection a client verifies: every manifest position holds
+ * its bundle. `decodeContainerWriterProjection` builds it from the wire.
+ */
 export declare const ContainerWriterProjectionResponseSchema: z.ZodType<{
     policyEvidence: {
         organization: {
@@ -1423,11 +1427,6 @@ export declare const ContainerWriterProjectionResponseSchema: z.ZodType<{
         manifestHash: string;
         state: Record<string, unknown>;
     }[];
-    historyPrefixes?: {
-        key: string;
-        count: number;
-        digest: string;
-    }[] | undefined;
 }, {
     policyEvidence: {
         organization: {
@@ -1514,11 +1513,6 @@ export declare const ContainerWriterProjectionResponseSchema: z.ZodType<{
         manifestHash: string;
         state: Record<string, unknown>;
     }[];
-    historyPrefixes?: {
-        key: string;
-        count: number;
-        digest: string;
-    }[] | undefined;
 }, z.core.$ZodTypeInternals<{
     policyEvidence: {
         organization: {
@@ -1605,11 +1599,6 @@ export declare const ContainerWriterProjectionResponseSchema: z.ZodType<{
         manifestHash: string;
         state: Record<string, unknown>;
     }[];
-    historyPrefixes?: {
-        key: string;
-        count: number;
-        digest: string;
-    }[] | undefined;
 }, {
     policyEvidence: {
         organization: {
@@ -1696,13 +1685,432 @@ export declare const ContainerWriterProjectionResponseSchema: z.ZodType<{
         manifestHash: string;
         state: Record<string, unknown>;
     }[];
-    historyPrefixes?: {
-        key: string;
-        count: number;
-        digest: string;
-    }[] | undefined;
 }>>;
 export type ContainerWriterProjectionResponse = z.infer<typeof ContainerWriterProjectionResponseSchema>;
+export declare const ContainerKeyingPathWireResponseSchema: z.ZodType<{
+    containerId: string;
+    containerKeks: {
+        containerManifestHistory: string[];
+        accessManifestHash: string;
+        containerId: string;
+        containerKeyEpoch: number;
+        containerKeyEpochId: string;
+        keyEpoch: Record<string, unknown>;
+        keyEpochHash: string;
+        keyring: {
+            containerId: string;
+            containerKeyEpochId: string;
+            iv: string;
+            sealed: string;
+            sealingSuite: string;
+            version: number;
+        } | null;
+        keyTargetHash: string;
+        parentContainerKeyEpochId: string | null;
+        recipientTargets: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+    }[];
+    organizationId: string;
+    path: string[];
+}, {
+    containerId: string;
+    containerKeks: {
+        containerManifestHistory: string[];
+        accessManifestHash: string;
+        containerId: string;
+        containerKeyEpoch: number;
+        containerKeyEpochId: string;
+        keyEpoch: Record<string, unknown>;
+        keyEpochHash: string;
+        keyring: {
+            containerId: string;
+            containerKeyEpochId: string;
+            iv: string;
+            sealed: string;
+            sealingSuite: string;
+            version: number;
+        } | null;
+        keyTargetHash: string;
+        parentContainerKeyEpochId: string | null;
+        recipientTargets: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+    }[];
+    organizationId: string;
+    path: string[];
+}, z.core.$ZodTypeInternals<{
+    containerId: string;
+    containerKeks: {
+        containerManifestHistory: string[];
+        accessManifestHash: string;
+        containerId: string;
+        containerKeyEpoch: number;
+        containerKeyEpochId: string;
+        keyEpoch: Record<string, unknown>;
+        keyEpochHash: string;
+        keyring: {
+            containerId: string;
+            containerKeyEpochId: string;
+            iv: string;
+            sealed: string;
+            sealingSuite: string;
+            version: number;
+        } | null;
+        keyTargetHash: string;
+        parentContainerKeyEpochId: string | null;
+        recipientTargets: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+    }[];
+    organizationId: string;
+    path: string[];
+}, {
+    containerId: string;
+    containerKeks: {
+        containerManifestHistory: string[];
+        accessManifestHash: string;
+        containerId: string;
+        containerKeyEpoch: number;
+        containerKeyEpochId: string;
+        keyEpoch: Record<string, unknown>;
+        keyEpochHash: string;
+        keyring: {
+            containerId: string;
+            containerKeyEpochId: string;
+            iv: string;
+            sealed: string;
+            sealingSuite: string;
+            version: number;
+        } | null;
+        keyTargetHash: string;
+        parentContainerKeyEpochId: string | null;
+        recipientTargets: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+    }[];
+    organizationId: string;
+    path: string[];
+}>>;
+export type ContainerKeyingPathWireResponse = z.infer<typeof ContainerKeyingPathWireResponseSchema>;
+/**
+ * The served shape: manifest positions cite `bundles` by hash, except hashes
+ * the request declared already held, which `omittedBundles` lists instead.
+ */
+export declare const ContainerWriterProjectionWireResponseSchema: z.ZodType<{
+    policyEvidence: {
+        organization: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        } | null;
+        organizationPayloads: {
+            reference: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            payload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+        }[];
+        groups: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        }[];
+    };
+    containerId: string;
+    containerKeks: {
+        containerManifestHistory: string[];
+        accessManifestHash: string;
+        containerId: string;
+        containerKeyEpoch: number;
+        containerKeyEpochId: string;
+        keyEpoch: Record<string, unknown>;
+        keyEpochHash: string;
+        keyring: {
+            containerId: string;
+            containerKeyEpochId: string;
+            iv: string;
+            sealed: string;
+            sealingSuite: string;
+            version: number;
+        } | null;
+        keyTargetHash: string;
+        parentContainerKeyEpochId: string | null;
+        recipientTargets: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+    }[];
+    organizationId: string;
+    path: string[];
+    bundles: Record<string, {
+        event: {
+            body: unknown;
+            event: Record<string, unknown>;
+            eventHash: string;
+        };
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }>;
+    omittedBundles: string[];
+}, {
+    policyEvidence: {
+        organization: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        } | null;
+        organizationPayloads: {
+            reference: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            payload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+        }[];
+        groups: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        }[];
+    };
+    containerId: string;
+    containerKeks: {
+        containerManifestHistory: string[];
+        accessManifestHash: string;
+        containerId: string;
+        containerKeyEpoch: number;
+        containerKeyEpochId: string;
+        keyEpoch: Record<string, unknown>;
+        keyEpochHash: string;
+        keyring: {
+            containerId: string;
+            containerKeyEpochId: string;
+            iv: string;
+            sealed: string;
+            sealingSuite: string;
+            version: number;
+        } | null;
+        keyTargetHash: string;
+        parentContainerKeyEpochId: string | null;
+        recipientTargets: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+    }[];
+    organizationId: string;
+    path: string[];
+    bundles: Record<string, {
+        event: {
+            body: unknown;
+            event: Record<string, unknown>;
+            eventHash: string;
+        };
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }>;
+    omittedBundles: string[];
+}, z.core.$ZodTypeInternals<{
+    policyEvidence: {
+        organization: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        } | null;
+        organizationPayloads: {
+            reference: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            payload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+        }[];
+        groups: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        }[];
+    };
+    containerId: string;
+    containerKeks: {
+        containerManifestHistory: string[];
+        accessManifestHash: string;
+        containerId: string;
+        containerKeyEpoch: number;
+        containerKeyEpochId: string;
+        keyEpoch: Record<string, unknown>;
+        keyEpochHash: string;
+        keyring: {
+            containerId: string;
+            containerKeyEpochId: string;
+            iv: string;
+            sealed: string;
+            sealingSuite: string;
+            version: number;
+        } | null;
+        keyTargetHash: string;
+        parentContainerKeyEpochId: string | null;
+        recipientTargets: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+    }[];
+    organizationId: string;
+    path: string[];
+    bundles: Record<string, {
+        event: {
+            body: unknown;
+            event: Record<string, unknown>;
+            eventHash: string;
+        };
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }>;
+    omittedBundles: string[];
+}, {
+    policyEvidence: {
+        organization: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        } | null;
+        organizationPayloads: {
+            reference: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            payload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+        }[];
+        groups: {
+            head: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+                version: number;
+            };
+            grant: string;
+        }[];
+    };
+    containerId: string;
+    containerKeks: {
+        containerManifestHistory: string[];
+        accessManifestHash: string;
+        containerId: string;
+        containerKeyEpoch: number;
+        containerKeyEpochId: string;
+        keyEpoch: Record<string, unknown>;
+        keyEpochHash: string;
+        keyring: {
+            containerId: string;
+            containerKeyEpochId: string;
+            iv: string;
+            sealed: string;
+            sealingSuite: string;
+            version: number;
+        } | null;
+        keyTargetHash: string;
+        parentContainerKeyEpochId: string | null;
+        recipientTargets: Record<string, unknown>[];
+        wraps: Record<string, unknown>[];
+    }[];
+    organizationId: string;
+    path: string[];
+    bundles: Record<string, {
+        event: {
+            body: unknown;
+            event: Record<string, unknown>;
+            eventHash: string;
+        };
+        manifest: Record<string, unknown>;
+        manifestHash: string;
+        state: Record<string, unknown>;
+    }>;
+    omittedBundles: string[];
+}>>;
+export type ContainerWriterProjectionWireResponse = z.infer<typeof ContainerWriterProjectionWireResponseSchema>;
 export declare const ContainerSummaryResponseSchema: z.ZodType<{
     createdAt: string;
     depth: number;
@@ -1953,4 +2361,5 @@ export declare function isListContainersResponse(value: unknown): value is ListC
 export declare function isContainerMutationResponse(value: unknown): value is ContainerMutationResponse;
 export declare function isContainerDeleteResponse(value: unknown): value is ContainerDeleteResponse;
 export declare function isContainerWriterProjectionResponse(value: unknown): value is ContainerWriterProjectionResponse;
+export declare function isContainerWriterProjectionWireResponse(value: unknown): value is ContainerWriterProjectionWireResponse;
 export {};

package/internal/validators/response/container.js

@@ -5,9 +5,9 @@ import { registerJsonSchemaRuntimeRefinements } from "../jsonSchema.js";
 import { organizationProvisioningContainerKeyringRefinement } from "../organizationProvisioningRefinements.js";
 import { arraySchema, loosePlainObject, nonEmptyArraySchema, nonEmptyStringSchema, nonNegativeIntegerSchema, plainObjectSchema, positiveIntegerSchema, } from "../schema.js";
 import { AccessManifestBundleWireResponseSchema, CONTAINER_KEK_LOG_PAGE_LIMIT, CONTAINER_KEK_WRAPS_PER_EPOCH_LIMIT, ContainerKekKeyringWireRecordSchema, } from "../util/index.js";
-import { ProjectionHistoryPrefixesSchema } from "../util/projectionHistoryWire.js";
-import { containerWriterProjectionPathKekCountRefinement } from "../writerProjectionRefinements.js";
+import { containerWriterProjectionPathKekCountRefinement, writerProjectionManifestBundlesRefinement, } from "../writerProjectionRefinements.js";
 import { EffectiveAccessLevelSchema } from "./accessLevel.js";
+import { containerKeyingPathReferences, ManifestBundlesSchema, ManifestHashReferenceSchema, OmittedManifestBundlesSchema, refineManifestBundleReferences, } from "./manifestBundleReferences.js";
 import { ReferencedPrincipalStateResponseSchema, ReferencedPrincipalStateResponseShape, } from "./principalReference.js";
 import { ProjectionPolicyEvidenceResponseSchema } from "./projectionPolicyEvidence.js";
 import { SyncWatermarkSchema } from "./syncWatermark.js";
@@ -35,7 +35,7 @@ const containerKekResponseShape = {
     recipientTargets: nonEmptyArraySchema(plainObjectSchema),
     wraps: nonEmptyArraySchema(plainObjectSchema),
 };
-const ContainerKekResponseSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject(containerKekResponseShape).superRefine((value, context) => {
+function refineContainerKekKeyring(value, context) {
     if ((value.keyring === null) !== (value.containerKeyEpoch === 1)) {
         context.addIssue({
             code: "custom",
@@ -43,7 +43,13 @@ const ContainerKekResponseSchema = registerJsonSchemaRuntimeRefinements(loosePla
             path: ["keyring"],
         });
     }
-}), [organizationProvisioningContainerKeyringRefinement]);
+}
+const ContainerKekResponseSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject(containerKekResponseShape).superRefine(refineContainerKekKeyring), [organizationProvisioningContainerKeyringRefinement]);
+/** On the writer-projection wire, KEK history cites manifests by hash. */
+const ContainerKekWireResponseSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject({
+    ...containerKekResponseShape,
+    containerManifestHistory: arraySchema(ManifestHashReferenceSchema),
+}).superRefine(refineContainerKekKeyring), [organizationProvisioningContainerKeyringRefinement]);
 /**
  * The append-only rotation log for one container: every epoch with its
  * write-once bridge and sealed keyring. This is the rebuild/repair read
@@ -141,11 +147,37 @@ function refineContainerKeyingPath(projection, context) {
         });
 }
 export const ContainerKeyingPathResponseSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject(containerKeyingPathShape).superRefine(refineContainerKeyingPath), [containerWriterProjectionPathKekCountRefinement]);
+/**
+ * The decoded projection a client verifies: every manifest position holds
+ * its bundle. `decodeContainerWriterProjection` builds it from the wire.
+ */
 export const ContainerWriterProjectionResponseSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject({
     ...containerKeyingPathShape,
     policyEvidence: ProjectionPolicyEvidenceResponseSchema,
-    historyPrefixes: ProjectionHistoryPrefixesSchema.optional(),
 }).superRefine(refineContainerKeyingPath), [containerWriterProjectionPathKekCountRefinement]);
+const containerKeyingPathWireShape = {
+    containerId: z.string(),
+    containerKeks: arraySchema(ContainerKekWireResponseSchema),
+    organizationId: z.string(),
+    path: nonEmptyArraySchema(ManifestHashReferenceSchema),
+};
+export const ContainerKeyingPathWireResponseSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject(containerKeyingPathWireShape).superRefine(refineContainerKeyingPath), [containerWriterProjectionPathKekCountRefinement]);
+/**
+ * The served shape: manifest positions cite `bundles` by hash, except hashes
+ * the request declared already held, which `omittedBundles` lists instead.
+ */
+export const ContainerWriterProjectionWireResponseSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject({
+    bundles: ManifestBundlesSchema,
+    omittedBundles: OmittedManifestBundlesSchema,
+    ...containerKeyingPathWireShape,
+    policyEvidence: ProjectionPolicyEvidenceResponseSchema,
+}).superRefine((projection, context) => {
+    refineContainerKeyingPath(projection, context);
+    refineManifestBundleReferences(projection, containerKeyingPathReferences(projection), context);
+}), [
+    containerWriterProjectionPathKekCountRefinement,
+    writerProjectionManifestBundlesRefinement,
+]);
 export const ContainerSummaryResponseSchema = loosePlainObject({
     createdAt: z.string(),
     depth: nonNegativeIntegerSchema,
@@ -185,4 +217,7 @@ export function isContainerDeleteResponse(value) {
 export function isContainerWriterProjectionResponse(value) {
     return ContainerWriterProjectionResponseSchema.safeParse(value).success;
 }
+export function isContainerWriterProjectionWireResponse(value) {
+    return ContainerWriterProjectionWireResponseSchema.safeParse(value).success;
+}
 //# sourceMappingURL=container.js.map