@tearleads/client-sdk 0.1.41 → 0.1.43

package/internal/validators/request/container.js

@@ -1,23 +1,29 @@
 import { z } from "zod";
 import { registerJsonSchemaView } from "../jsonSchema.js";
-import { arraySchema, boundedNonEmptyArraySchema, loosePlainObject, nonEmptyStringSchema, plainObjectSchema, requiredUnknownSchema, } from "../schema.js";
-import { AccessManifestBundleWireSchema, ContainerKekKeyringWireRecordSchema, MAX_CONTAINER_PATH_LENGTH, MAX_INLINE_CONTAINER_REKEYS, MAX_ROTATION_CONTAINER_REKEYS, } from "../util/index.js";
-const AccessManifestBundleWireArraySchema = arraySchema(AccessManifestBundleWireSchema);
+import { arraySchema, loosePlainObject, nonEmptyStringSchema, plainObjectSchema, requiredUnknownSchema, } from "../schema.js";
+import { ContainerKekKeyringWireRecordSchema, MAX_INLINE_CONTAINER_REKEYS, MAX_ROTATION_CONTAINER_REKEYS, } from "../util/index.js";
+import { ContainerManifestPathSchema, ContainerManifestRefListSchema, ContainerManifestRefSchema, OptionalContainerManifestPathSchema, } from "./containerManifestRef.js";
 const ContainerMutationKeyringSchema = registerJsonSchemaView(z.custom((value) => ContainerKekKeyringWireRecordSchema.safeParse(value).success), ContainerKekKeyringWireRecordSchema);
+// Every manifest a mutation cites that the server already stores travels as a
+// {containerId, manifestHash} reference. The server resolves each one from its
+// own verified store (or from an earlier mutation of the same batch) and pins
+// paths and the previous manifest to current heads; the signed event binds the
+// same hashes as its dependencies, so no request copy of a stored bundle is
+// ever needed. Only the new manifest this mutation commits travels in full.
 const containerMutationRequestShape = {
     body: requiredUnknownSchema,
-    containerManifestHistory: AccessManifestBundleWireArraySchema.optional(),
-    destinationParentContainerPath: AccessManifestBundleWireArraySchema.optional(),
+    containerManifestHistoryRefs: ContainerManifestRefListSchema.optional(),
+    destinationParentContainerPathRefs: OptionalContainerManifestPathSchema.optional(),
     event: plainObjectSchema,
     expectedManifestHash: nonEmptyStringSchema,
     keyEpoch: plainObjectSchema,
     keyring: ContainerMutationKeyringSchema.nullable(),
     manifest: plainObjectSchema,
-    parentContainerPath: AccessManifestBundleWireArraySchema.optional(),
+    parentContainerPathRefs: OptionalContainerManifestPathSchema.optional(),
     parentKekState: plainObjectSchema.nullable().optional(),
     predecessorBridge: plainObjectSchema.nullable(),
-    previousContainerPath: AccessManifestBundleWireArraySchema.optional(),
-    previousManifest: AccessManifestBundleWireSchema.nullable().optional(),
+    previousContainerPathRefs: OptionalContainerManifestPathSchema.optional(),
+    previousManifestRef: ContainerManifestRefSchema.nullable().optional(),
     principalPolicies: arraySchema(plainObjectSchema),
     userRecipientKeys: arraySchema(plainObjectSchema).optional(),
     wraps: arraySchema(plainObjectSchema),
@@ -39,8 +45,8 @@ export const ContainerReciteRequestSchema = loosePlainObject({
     event: plainObjectSchema,
     expectedManifestHash: nonEmptyStringSchema,
     manifest: plainObjectSchema,
-    previousContainerPath: boundedNonEmptyArraySchema(AccessManifestBundleWireSchema, MAX_CONTAINER_PATH_LENGTH),
-    previousManifest: AccessManifestBundleWireSchema,
+    previousContainerPathRefs: ContainerManifestPathSchema,
+    previousManifestRef: ContainerManifestRefSchema,
     principalPolicies: arraySchema(plainObjectSchema),
 });
 export function isContainerReciteRequest(value) {

package/internal/validators/request/container.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.js","sourceRoot":"","sources":["container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,WAAW,EACX,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,EACnC,yBAAyB,EACzB,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,SAAS,CAAC;AAEjB,MAAM,mCAAmC,GAAG,WAAW,CACrD,8BAA8B,CAC/B,CAAC;AAEF,MAAM,8BAA8B,GAAG,sBAAsB,CAC3D,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,mCAAmC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CACxE,EACD,mCAAmC,CACpC,CAAC;AAEF,MAAM,6BAA6B,GAAG;IACpC,IAAI,EAAE,qBAAqB;IAC3B,wBAAwB,EAAE,mCAAmC,CAAC,QAAQ,EAAE;IACxE,8BAA8B,EAC5B,mCAAmC,CAAC,QAAQ,EAAE;IAChD,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,iBAAiB;IAC3B,mBAAmB,EAAE,mCAAmC,CAAC,QAAQ,EAAE;IACnE,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC/C,qBAAqB,EAAE,mCAAmC,CAAC,QAAQ,EAAE;IACrE,gBAAgB,EAAE,8BAA8B,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtE,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC;IACjD,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAC5D,KAAK,EAAE,WAAW,CAAC,iBAAiB,CAAC;CACtC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,gBAAgB,CAC5D,6BAA6B,CAC9B,CAAC;AAMF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,gBAAgB,CAAC;IAC7D,GAAG,6BAA6B;IAChC,eAAe,EAAE,WAAW,CAC1B,8BAA8B,EAC9B,6BAA6B,CAC9B,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;IAC3D,IAAI,EAAE,qBAAqB;IAC3B,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,qBAAqB,EAAE,0BAA0B,CAC/C,8BAA8B,EAC9B,yBAAyB,CAC1B;IACD,gBAAgB,EAAE,8BAA8B;IAChD,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC;CAClD,CAAC,CAAC;AAMH,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,OAAO,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAc;IAEd,OAAO,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAc;IAEd,OAAO,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAc;IAEd,OAAO,WAAW,CAChB,8BAA8B,EAC9B,2BAA2B,CAC5B;SACE,QAAQ,EAAE;SACV,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9B,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaView } from \"../jsonSchema\";\nimport {\n  arraySchema,\n  boundedNonEmptyArraySchema,\n  loosePlainObject,\n  nonEmptyStringSchema,\n  plainObjectSchema,\n  requiredUnknownSchema,\n} from \"../schema\";\nimport {\n  AccessManifestBundleWireSchema,\n  ContainerKekKeyringWireRecordSchema,\n  MAX_CONTAINER_PATH_LENGTH,\n  MAX_INLINE_CONTAINER_REKEYS,\n  MAX_ROTATION_CONTAINER_REKEYS,\n} from \"../util\";\n\nconst AccessManifestBundleWireArraySchema = arraySchema(\n  AccessManifestBundleWireSchema,\n);\n\nconst ContainerMutationKeyringSchema = registerJsonSchemaView(\n  z.custom<Record<string, unknown>>(\n    (value) => ContainerKekKeyringWireRecordSchema.safeParse(value).success,\n  ),\n  ContainerKekKeyringWireRecordSchema,\n);\n\nconst containerMutationRequestShape = {\n  body: requiredUnknownSchema,\n  containerManifestHistory: AccessManifestBundleWireArraySchema.optional(),\n  destinationParentContainerPath:\n    AccessManifestBundleWireArraySchema.optional(),\n  event: plainObjectSchema,\n  expectedManifestHash: nonEmptyStringSchema,\n  keyEpoch: plainObjectSchema,\n  keyring: ContainerMutationKeyringSchema.nullable(),\n  manifest: plainObjectSchema,\n  parentContainerPath: AccessManifestBundleWireArraySchema.optional(),\n  parentKekState: plainObjectSchema.nullable().optional(),\n  predecessorBridge: plainObjectSchema.nullable(),\n  previousContainerPath: AccessManifestBundleWireArraySchema.optional(),\n  previousManifest: AccessManifestBundleWireSchema.nullable().optional(),\n  principalPolicies: arraySchema(plainObjectSchema),\n  userRecipientKeys: arraySchema(plainObjectSchema).optional(),\n  wraps: arraySchema(plainObjectSchema),\n};\n\nexport const ContainerMutationRequestSchema = loosePlainObject(\n  containerMutationRequestShape,\n);\n\nexport type ContainerMutationRequest = z.infer<\n  typeof ContainerMutationRequestSchema\n>;\n\n/**\n * A rekey, revoke, or move: the rotation plus the descendant rekeys it must\n * commit with. `containerRekeys` names, parent-first, the descendants above a\n * directly granted container; they commit with the rotation or not at all.\n * Only these three routes take it, so the carriers that already hold a flat\n * rekey list (document and blob writes) stay as they are.\n */\nexport const ContainerRotationRequestSchema = loosePlainObject({\n  ...containerMutationRequestShape,\n  containerRekeys: arraySchema(\n    ContainerMutationRequestSchema,\n    MAX_ROTATION_CONTAINER_REKEYS,\n  ).optional(),\n});\n\nexport type ContainerRotationRequest = z.infer<\n  typeof ContainerRotationRequestSchema\n>;\n\nexport const ContainerReciteRequestSchema = loosePlainObject({\n  body: requiredUnknownSchema,\n  event: plainObjectSchema,\n  expectedManifestHash: nonEmptyStringSchema,\n  manifest: plainObjectSchema,\n  previousContainerPath: boundedNonEmptyArraySchema(\n    AccessManifestBundleWireSchema,\n    MAX_CONTAINER_PATH_LENGTH,\n  ),\n  previousManifest: AccessManifestBundleWireSchema,\n  principalPolicies: arraySchema(plainObjectSchema),\n});\n\nexport type ContainerReciteRequest = z.infer<\n  typeof ContainerReciteRequestSchema\n>;\n\nexport function isContainerReciteRequest(\n  value: unknown,\n): value is ContainerReciteRequest {\n  return ContainerReciteRequestSchema.safeParse(value).success;\n}\n\nexport function isContainerRotationRequest(\n  value: unknown,\n): value is ContainerRotationRequest {\n  return ContainerRotationRequestSchema.safeParse(value).success;\n}\n\nexport function isContainerMutationRequest(\n  value: unknown,\n): value is ContainerMutationRequest {\n  return ContainerMutationRequestSchema.safeParse(value).success;\n}\n\nexport function isOptionalContainerMutationRequestArray(\n  value: unknown,\n): value is ContainerMutationRequest[] | undefined {\n  return arraySchema(\n    ContainerMutationRequestSchema,\n    MAX_INLINE_CONTAINER_REKEYS,\n  )\n    .optional()\n    .safeParse(value).success;\n}\n"]}
+{"version":3,"file":"container.js","sourceRoot":"","sources":["container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,mCAAmC,EACnC,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,EAC1B,mCAAmC,GACpC,MAAM,wBAAwB,CAAC;AAEhC,MAAM,8BAA8B,GAAG,sBAAsB,CAC3D,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,mCAAmC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CACxE,EACD,mCAAmC,CACpC,CAAC;AAEF,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,6BAA6B,GAAG;IACpC,IAAI,EAAE,qBAAqB;IAC3B,4BAA4B,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IACvE,kCAAkC,EAChC,mCAAmC,CAAC,QAAQ,EAAE;IAChD,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,iBAAiB;IAC3B,uBAAuB,EAAE,mCAAmC,CAAC,QAAQ,EAAE;IACvE,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC/C,yBAAyB,EAAE,mCAAmC,CAAC,QAAQ,EAAE;IACzE,mBAAmB,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrE,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC;IACjD,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAC5D,KAAK,EAAE,WAAW,CAAC,iBAAiB,CAAC;CACtC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,gBAAgB,CAC5D,6BAA6B,CAC9B,CAAC;AAMF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,gBAAgB,CAAC;IAC7D,GAAG,6BAA6B;IAChC,eAAe,EAAE,WAAW,CAC1B,8BAA8B,EAC9B,6BAA6B,CAC9B,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;IAC3D,IAAI,EAAE,qBAAqB;IAC3B,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,yBAAyB,EAAE,2BAA2B;IACtD,mBAAmB,EAAE,0BAA0B;IAC/C,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC;CAClD,CAAC,CAAC;AAMH,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,OAAO,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAc;IAEd,OAAO,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAc;IAEd,OAAO,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAc;IAEd,OAAO,WAAW,CAChB,8BAA8B,EAC9B,2BAA2B,CAC5B;SACE,QAAQ,EAAE;SACV,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC9B,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaView } from \"../jsonSchema\";\nimport {\n  arraySchema,\n  loosePlainObject,\n  nonEmptyStringSchema,\n  plainObjectSchema,\n  requiredUnknownSchema,\n} from \"../schema\";\nimport {\n  ContainerKekKeyringWireRecordSchema,\n  MAX_INLINE_CONTAINER_REKEYS,\n  MAX_ROTATION_CONTAINER_REKEYS,\n} from \"../util\";\nimport {\n  ContainerManifestPathSchema,\n  ContainerManifestRefListSchema,\n  ContainerManifestRefSchema,\n  OptionalContainerManifestPathSchema,\n} from \"./containerManifestRef\";\n\nconst ContainerMutationKeyringSchema = registerJsonSchemaView(\n  z.custom<Record<string, unknown>>(\n    (value) => ContainerKekKeyringWireRecordSchema.safeParse(value).success,\n  ),\n  ContainerKekKeyringWireRecordSchema,\n);\n\n// Every manifest a mutation cites that the server already stores travels as a\n// {containerId, manifestHash} reference. The server resolves each one from its\n// own verified store (or from an earlier mutation of the same batch) and pins\n// paths and the previous manifest to current heads; the signed event binds the\n// same hashes as its dependencies, so no request copy of a stored bundle is\n// ever needed. Only the new manifest this mutation commits travels in full.\nconst containerMutationRequestShape = {\n  body: requiredUnknownSchema,\n  containerManifestHistoryRefs: ContainerManifestRefListSchema.optional(),\n  destinationParentContainerPathRefs:\n    OptionalContainerManifestPathSchema.optional(),\n  event: plainObjectSchema,\n  expectedManifestHash: nonEmptyStringSchema,\n  keyEpoch: plainObjectSchema,\n  keyring: ContainerMutationKeyringSchema.nullable(),\n  manifest: plainObjectSchema,\n  parentContainerPathRefs: OptionalContainerManifestPathSchema.optional(),\n  parentKekState: plainObjectSchema.nullable().optional(),\n  predecessorBridge: plainObjectSchema.nullable(),\n  previousContainerPathRefs: OptionalContainerManifestPathSchema.optional(),\n  previousManifestRef: ContainerManifestRefSchema.nullable().optional(),\n  principalPolicies: arraySchema(plainObjectSchema),\n  userRecipientKeys: arraySchema(plainObjectSchema).optional(),\n  wraps: arraySchema(plainObjectSchema),\n};\n\nexport const ContainerMutationRequestSchema = loosePlainObject(\n  containerMutationRequestShape,\n);\n\nexport type ContainerMutationRequest = z.infer<\n  typeof ContainerMutationRequestSchema\n>;\n\n/**\n * A rekey, revoke, or move: the rotation plus the descendant rekeys it must\n * commit with. `containerRekeys` names, parent-first, the descendants above a\n * directly granted container; they commit with the rotation or not at all.\n * Only these three routes take it, so the carriers that already hold a flat\n * rekey list (document and blob writes) stay as they are.\n */\nexport const ContainerRotationRequestSchema = loosePlainObject({\n  ...containerMutationRequestShape,\n  containerRekeys: arraySchema(\n    ContainerMutationRequestSchema,\n    MAX_ROTATION_CONTAINER_REKEYS,\n  ).optional(),\n});\n\nexport type ContainerRotationRequest = z.infer<\n  typeof ContainerRotationRequestSchema\n>;\n\nexport const ContainerReciteRequestSchema = loosePlainObject({\n  body: requiredUnknownSchema,\n  event: plainObjectSchema,\n  expectedManifestHash: nonEmptyStringSchema,\n  manifest: plainObjectSchema,\n  previousContainerPathRefs: ContainerManifestPathSchema,\n  previousManifestRef: ContainerManifestRefSchema,\n  principalPolicies: arraySchema(plainObjectSchema),\n});\n\nexport type ContainerReciteRequest = z.infer<\n  typeof ContainerReciteRequestSchema\n>;\n\nexport function isContainerReciteRequest(\n  value: unknown,\n): value is ContainerReciteRequest {\n  return ContainerReciteRequestSchema.safeParse(value).success;\n}\n\nexport function isContainerRotationRequest(\n  value: unknown,\n): value is ContainerRotationRequest {\n  return ContainerRotationRequestSchema.safeParse(value).success;\n}\n\nexport function isContainerMutationRequest(\n  value: unknown,\n): value is ContainerMutationRequest {\n  return ContainerMutationRequestSchema.safeParse(value).success;\n}\n\nexport function isOptionalContainerMutationRequestArray(\n  value: unknown,\n): value is ContainerMutationRequest[] | undefined {\n  return arraySchema(\n    ContainerMutationRequestSchema,\n    MAX_INLINE_CONTAINER_REKEYS,\n  )\n    .optional()\n    .safeParse(value).success;\n}\n"]}

package/internal/validators/request/containerManifestRef.d.ts

@@ -0,0 +1,54 @@
+import type { z } from "zod";
+/**
+ * A reference to a container access manifest the server already stores, in lieu
+ * of re-embedding the full signed manifest bundle. The server resolves the full
+ * manifest from its own store by `manifestHash` and pins it to the container's
+ * current head, so the reference carries the same authority as the full bundle
+ * without the multi-KB signature. `containerId` is advisory: the server keys the
+ * head lookup off the resolved bundle's own containerId and rejects a mismatch.
+ */
+export declare const ContainerManifestRefSchema: z.ZodType<{
+    containerId: string;
+    manifestHash: string;
+}, {
+    containerId: string;
+    manifestHash: string;
+}, z.core.$ZodTypeInternals<{
+    containerId: string;
+    manifestHash: string;
+}, {
+    containerId: string;
+    manifestHash: string;
+}>>;
+export type ContainerManifestRef = z.infer<typeof ContainerManifestRefSchema>;
+/** A root→leaf container path, cited by manifest reference. */
+export declare const ContainerManifestPathSchema: z.ZodCustom<{
+    containerId: string;
+    manifestHash: string;
+}[], {
+    containerId: string;
+    manifestHash: string;
+}[]>;
+/**
+ * A path that may be empty: a root container create cites no parent. Bounded
+ * by the same depth ceiling as a non-empty path.
+ */
+export declare const OptionalContainerManifestPathSchema: z.ZodCustom<{
+    containerId: string;
+    manifestHash: string;
+}[], {
+    containerId: string;
+    manifestHash: string;
+}[]>;
+/**
+ * Stored manifests of one container, cited by reference. A container's lineage
+ * has no fixed length; the ceiling keeps the capacity inline bundles had under
+ * the request-body bound (see `MAX_CONTAINER_MANIFEST_HISTORY_REFS`).
+ */
+export declare const ContainerManifestRefListSchema: z.ZodCustom<{
+    containerId: string;
+    manifestHash: string;
+}[], {
+    containerId: string;
+    manifestHash: string;
+}[]>;

package/internal/validators/request/containerManifestRef.js

@@ -0,0 +1,28 @@
+import { arraySchema, boundedNonEmptyArraySchema, loosePlainObject, nonEmptyStringSchema, } from "../schema.js";
+import { MAX_CONTAINER_MANIFEST_HISTORY_REFS, MAX_CONTAINER_PATH_LENGTH, } from "../util/containerLimits.js";
+/**
+ * A reference to a container access manifest the server already stores, in lieu
+ * of re-embedding the full signed manifest bundle. The server resolves the full
+ * manifest from its own store by `manifestHash` and pins it to the container's
+ * current head, so the reference carries the same authority as the full bundle
+ * without the multi-KB signature. `containerId` is advisory: the server keys the
+ * head lookup off the resolved bundle's own containerId and rejects a mismatch.
+ */
+export const ContainerManifestRefSchema = loosePlainObject({
+    containerId: nonEmptyStringSchema,
+    manifestHash: nonEmptyStringSchema,
+});
+/** A root→leaf container path, cited by manifest reference. */
+export const ContainerManifestPathSchema = boundedNonEmptyArraySchema(ContainerManifestRefSchema, MAX_CONTAINER_PATH_LENGTH);
+/**
+ * A path that may be empty: a root container create cites no parent. Bounded
+ * by the same depth ceiling as a non-empty path.
+ */
+export const OptionalContainerManifestPathSchema = arraySchema(ContainerManifestRefSchema, MAX_CONTAINER_PATH_LENGTH);
+/**
+ * Stored manifests of one container, cited by reference. A container's lineage
+ * has no fixed length; the ceiling keeps the capacity inline bundles had under
+ * the request-body bound (see `MAX_CONTAINER_MANIFEST_HISTORY_REFS`).
+ */
+export const ContainerManifestRefListSchema = arraySchema(ContainerManifestRefSchema, MAX_CONTAINER_MANIFEST_HISTORY_REFS);
+//# sourceMappingURL=containerManifestRef.js.map

package/internal/validators/request/containerManifestRef.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerManifestRef.js","sourceRoot":"","sources":["containerManifestRef.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,mCAAmC,EACnC,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;IACzD,WAAW,EAAE,oBAAoB;IACjC,YAAY,EAAE,oBAAoB;CACnC,CAAC,CAAC;AAIH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CACnE,0BAA0B,EAC1B,yBAAyB,CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,WAAW,CAC5D,0BAA0B,EAC1B,yBAAyB,CAC1B,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,WAAW,CACvD,0BAA0B,EAC1B,mCAAmC,CACpC,CAAC","sourcesContent":["import type { z } from \"zod\";\nimport {\n  arraySchema,\n  boundedNonEmptyArraySchema,\n  loosePlainObject,\n  nonEmptyStringSchema,\n} from \"../schema\";\nimport {\n  MAX_CONTAINER_MANIFEST_HISTORY_REFS,\n  MAX_CONTAINER_PATH_LENGTH,\n} from \"../util/containerLimits\";\n\n/**\n * A reference to a container access manifest the server already stores, in lieu\n * of re-embedding the full signed manifest bundle. The server resolves the full\n * manifest from its own store by `manifestHash` and pins it to the container's\n * current head, so the reference carries the same authority as the full bundle\n * without the multi-KB signature. `containerId` is advisory: the server keys the\n * head lookup off the resolved bundle's own containerId and rejects a mismatch.\n */\nexport const ContainerManifestRefSchema = loosePlainObject({\n  containerId: nonEmptyStringSchema,\n  manifestHash: nonEmptyStringSchema,\n});\n\nexport type ContainerManifestRef = z.infer<typeof ContainerManifestRefSchema>;\n\n/** A root→leaf container path, cited by manifest reference. */\nexport const ContainerManifestPathSchema = boundedNonEmptyArraySchema(\n  ContainerManifestRefSchema,\n  MAX_CONTAINER_PATH_LENGTH,\n);\n\n/**\n * A path that may be empty: a root container create cites no parent. Bounded\n * by the same depth ceiling as a non-empty path.\n */\nexport const OptionalContainerManifestPathSchema = arraySchema(\n  ContainerManifestRefSchema,\n  MAX_CONTAINER_PATH_LENGTH,\n);\n\n/**\n * Stored manifests of one container, cited by reference. A container's lineage\n * has no fixed length; the ceiling keeps the capacity inline bundles had under\n * the request-body bound (see `MAX_CONTAINER_MANIFEST_HISTORY_REFS`).\n */\nexport const ContainerManifestRefListSchema = arraySchema(\n  ContainerManifestRefSchema,\n  MAX_CONTAINER_MANIFEST_HISTORY_REFS,\n);\n"]}