@tearleads/client-sdk 0.1.47 → 0.1.49
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/client/organizations/currentPrincipalMutations.js +36 -17
- package/client/organizations/currentPrincipalMutations.js.map +1 -1
- package/client/organizations/principalContainerMutations.js +1 -0
- package/client/organizations/principalContainerMutations.js.map +1 -1
- package/client/organizations/principalMutations.js +2 -2
- package/client/organizations/principalMutations.js.map +1 -1
- package/data/persistence/documents/internal/documentRows.js +37 -41
- package/data/persistence/documents/internal/documentRows.js.map +1 -1
- package/data/persistence/principalHistoryEvidencePersistence.js +17 -18
- package/data/persistence/principalHistoryEvidencePersistence.js.map +1 -1
- package/data/persistence/principalHistoryNodeRetention.js +164 -39
- package/data/persistence/principalHistoryNodeRetention.js.map +1 -1
- package/data/persistence/principalPolicyReferenceIndexPersistence.js +101 -38
- package/data/persistence/principalPolicyReferenceIndexPersistence.js.map +1 -1
- package/data/principals/principalMutationJournalShape.js +6 -0
- package/data/principals/principalMutationJournalShape.js.map +1 -1
- package/data/sqlite/sqliteUpsert.js +9 -0
- package/data/sqlite/sqliteUpsert.js.map +1 -0
- package/internal/api-client/ApiClient.d.ts +122 -0
- package/internal/api-client/principalPolicyRequests.d.ts +122 -0
- package/internal/validators/operation/principals.d.ts +1026 -206
- package/internal/validators/request/principal.d.ts +332 -0
- package/internal/validators/request/principal.js +1 -0
- package/internal/validators/request/principal.js.map +1 -1
- package/internal/validators/response/principal.d.ts +488 -0
- package/internal/validators/response/principal.js +1 -0
- package/internal/validators/response/principal.js.map +1 -1
- package/package.json +1 -1
- package/workflows/containers/child/rekeyProjection.d.ts +6 -1
- package/workflows/containers/child/rekeyProjection.js +41 -0
- package/workflows/containers/child/rekeyProjection.js.map +1 -1
- package/workflows/organizations/authoredPrincipalPolicyWarmer.js +25 -0
- package/workflows/organizations/authoredPrincipalPolicyWarmer.js.map +1 -0
- package/workflows/organizations/commitCurrentGroupPolicyMutation.js +101 -34
- package/workflows/organizations/commitCurrentGroupPolicyMutation.js.map +1 -1
- package/workflows/organizations/groupPolicyMutationContext.d.ts +5 -52
- package/workflows/organizations/groupPolicyMutationContext.js +2 -65
- package/workflows/organizations/groupPolicyMutationContext.js.map +1 -1
- package/workflows/organizations/precedingPrincipalRematerialization.js +31 -0
- package/workflows/organizations/precedingPrincipalRematerialization.js.map +1 -0
- package/workflows/organizations/principalContainerRematerialization.js +39 -7
- package/workflows/organizations/principalContainerRematerialization.js.map +1 -1
- package/workflows/organizations/principalContainerRematerializationPlanning.js +6 -1
- package/workflows/organizations/principalContainerRematerializationPlanning.js.map +1 -1
- package/workflows/organizations/principalContainerRematerializationTargets.js +0 -11
- package/workflows/organizations/principalContainerRematerializationTargets.js.map +1 -1
- package/workflows/organizations/principalMutationReceipt.js +6 -0
- package/workflows/organizations/principalMutationReceipt.js.map +1 -1
- package/workflows/organizations/principalPolicyApi.d.ts +33 -0
- package/workflows/organizations/principalPolicyApi.js +2 -0
- package/workflows/organizations/principalPolicyApi.js.map +1 -0
- package/workflows/organizations/runtimeCurrentGroupMutation.js +36 -19
- package/workflows/organizations/runtimeCurrentGroupMutation.js.map +1 -1
- package/workflows/organizations/submitGroupPolicyCommit.d.ts +22 -0
- package/workflows/organizations/submitGroupPolicyCommit.js +71 -0
- package/workflows/organizations/submitGroupPolicyCommit.js.map +1 -0
|
@@ -1750,6 +1750,128 @@ export declare class ApiClient {
|
|
|
1750
1750
|
version: number;
|
|
1751
1751
|
};
|
|
1752
1752
|
};
|
|
1753
|
+
memberPolicy?: {
|
|
1754
|
+
containerMutations: {
|
|
1755
|
+
createdAt: string;
|
|
1756
|
+
manifestHead: {
|
|
1757
|
+
epoch: number;
|
|
1758
|
+
manifestHash: string;
|
|
1759
|
+
};
|
|
1760
|
+
organizationId: string;
|
|
1761
|
+
parentId: string | null;
|
|
1762
|
+
referencedPrincipalHeads: {
|
|
1763
|
+
principalType: "group";
|
|
1764
|
+
keyEpoch: number;
|
|
1765
|
+
keyFingerprint: string;
|
|
1766
|
+
principalId: string;
|
|
1767
|
+
stateHash: string;
|
|
1768
|
+
version: number;
|
|
1769
|
+
}[];
|
|
1770
|
+
updatedAt: string;
|
|
1771
|
+
accessManifest: {
|
|
1772
|
+
event: {
|
|
1773
|
+
body: unknown;
|
|
1774
|
+
event: Record<string, unknown>;
|
|
1775
|
+
eventHash: string;
|
|
1776
|
+
};
|
|
1777
|
+
manifest: Record<string, unknown>;
|
|
1778
|
+
manifestHash: string;
|
|
1779
|
+
state: Record<string, unknown>;
|
|
1780
|
+
};
|
|
1781
|
+
containerId: string;
|
|
1782
|
+
containerKek: {
|
|
1783
|
+
accessManifestHash: string;
|
|
1784
|
+
containerId: string;
|
|
1785
|
+
containerKeyEpoch: number;
|
|
1786
|
+
containerKeyEpochId: string;
|
|
1787
|
+
containerManifestHistory: {
|
|
1788
|
+
event: {
|
|
1789
|
+
body: unknown;
|
|
1790
|
+
event: Record<string, unknown>;
|
|
1791
|
+
eventHash: string;
|
|
1792
|
+
};
|
|
1793
|
+
manifest: Record<string, unknown>;
|
|
1794
|
+
manifestHash: string;
|
|
1795
|
+
state: Record<string, unknown>;
|
|
1796
|
+
}[];
|
|
1797
|
+
keyEpoch: Record<string, unknown>;
|
|
1798
|
+
keyEpochHash: string;
|
|
1799
|
+
keyring: {
|
|
1800
|
+
containerId: string;
|
|
1801
|
+
containerKeyEpochId: string;
|
|
1802
|
+
iv: string;
|
|
1803
|
+
sealed: string;
|
|
1804
|
+
sealingSuite: string;
|
|
1805
|
+
version: number;
|
|
1806
|
+
} | null;
|
|
1807
|
+
keyTargetHash: string;
|
|
1808
|
+
parentContainerKeyEpochId: string | null;
|
|
1809
|
+
recipientTargets: Record<string, unknown>[];
|
|
1810
|
+
wraps: Record<string, unknown>[];
|
|
1811
|
+
};
|
|
1812
|
+
systemSlot?: string | null | undefined;
|
|
1813
|
+
}[];
|
|
1814
|
+
currentGrants: {
|
|
1815
|
+
accessLevel: "admin" | "read" | "write";
|
|
1816
|
+
containerId: string;
|
|
1817
|
+
}[];
|
|
1818
|
+
currentMemberEnvelopes: {
|
|
1819
|
+
envelopes: {
|
|
1820
|
+
kemCipherText: string;
|
|
1821
|
+
memberKeyFingerprint: string;
|
|
1822
|
+
userId: string;
|
|
1823
|
+
wrappedKey: string;
|
|
1824
|
+
}[];
|
|
1825
|
+
epoch: number;
|
|
1826
|
+
principalId: string;
|
|
1827
|
+
principalType: "group" | "organization";
|
|
1828
|
+
stateHash: string;
|
|
1829
|
+
};
|
|
1830
|
+
currentPayload: {
|
|
1831
|
+
cipherSuite: "aes-256-gcm";
|
|
1832
|
+
ciphertext: string;
|
|
1833
|
+
ciphertextHash: string;
|
|
1834
|
+
createdAt: string;
|
|
1835
|
+
principalId: string;
|
|
1836
|
+
principalType: "group" | "organization";
|
|
1837
|
+
stateHash: string;
|
|
1838
|
+
};
|
|
1839
|
+
currentProjection: {
|
|
1840
|
+
role: "member" | "admin";
|
|
1841
|
+
userId: string;
|
|
1842
|
+
}[];
|
|
1843
|
+
currentState: {
|
|
1844
|
+
createdAt: string;
|
|
1845
|
+
encapsulationPublicKey: string;
|
|
1846
|
+
externalAuthority: {
|
|
1847
|
+
keyEpoch: number;
|
|
1848
|
+
keyFingerprint: string;
|
|
1849
|
+
principalId: string;
|
|
1850
|
+
principalType: "group";
|
|
1851
|
+
stateHash: string;
|
|
1852
|
+
version: number;
|
|
1853
|
+
} | null;
|
|
1854
|
+
grantCount: number;
|
|
1855
|
+
grantRoot: string;
|
|
1856
|
+
keyEpoch: number;
|
|
1857
|
+
keyFingerprint: string;
|
|
1858
|
+
memberCount: number;
|
|
1859
|
+
memberEnvelopesRoot: string;
|
|
1860
|
+
membershipMode: "projection";
|
|
1861
|
+
membershipRoot: string;
|
|
1862
|
+
payloadCiphertextHash: string;
|
|
1863
|
+
prevStateHash: string | null;
|
|
1864
|
+
principalId: string;
|
|
1865
|
+
principalType: "group" | "organization";
|
|
1866
|
+
projectionRoot: string;
|
|
1867
|
+
signature: string;
|
|
1868
|
+
signedAt: string;
|
|
1869
|
+
signerUserId: string;
|
|
1870
|
+
signerUserKeyFingerprint: string;
|
|
1871
|
+
stateHash: string;
|
|
1872
|
+
version: number;
|
|
1873
|
+
};
|
|
1874
|
+
} | undefined;
|
|
1753
1875
|
} | null>;
|
|
1754
1876
|
/**
|
|
1755
1877
|
* Status-bearing group policy commit. A rematerialized rotation the server
|
|
@@ -1060,5 +1060,127 @@ export declare class PrincipalPolicyRequests {
|
|
|
1060
1060
|
version: number;
|
|
1061
1061
|
};
|
|
1062
1062
|
};
|
|
1063
|
+
memberPolicy?: {
|
|
1064
|
+
containerMutations: {
|
|
1065
|
+
createdAt: string;
|
|
1066
|
+
manifestHead: {
|
|
1067
|
+
epoch: number;
|
|
1068
|
+
manifestHash: string;
|
|
1069
|
+
};
|
|
1070
|
+
organizationId: string;
|
|
1071
|
+
parentId: string | null;
|
|
1072
|
+
referencedPrincipalHeads: {
|
|
1073
|
+
principalType: "group";
|
|
1074
|
+
keyEpoch: number;
|
|
1075
|
+
keyFingerprint: string;
|
|
1076
|
+
principalId: string;
|
|
1077
|
+
stateHash: string;
|
|
1078
|
+
version: number;
|
|
1079
|
+
}[];
|
|
1080
|
+
updatedAt: string;
|
|
1081
|
+
accessManifest: {
|
|
1082
|
+
event: {
|
|
1083
|
+
body: unknown;
|
|
1084
|
+
event: Record<string, unknown>;
|
|
1085
|
+
eventHash: string;
|
|
1086
|
+
};
|
|
1087
|
+
manifest: Record<string, unknown>;
|
|
1088
|
+
manifestHash: string;
|
|
1089
|
+
state: Record<string, unknown>;
|
|
1090
|
+
};
|
|
1091
|
+
containerId: string;
|
|
1092
|
+
containerKek: {
|
|
1093
|
+
accessManifestHash: string;
|
|
1094
|
+
containerId: string;
|
|
1095
|
+
containerKeyEpoch: number;
|
|
1096
|
+
containerKeyEpochId: string;
|
|
1097
|
+
containerManifestHistory: {
|
|
1098
|
+
event: {
|
|
1099
|
+
body: unknown;
|
|
1100
|
+
event: Record<string, unknown>;
|
|
1101
|
+
eventHash: string;
|
|
1102
|
+
};
|
|
1103
|
+
manifest: Record<string, unknown>;
|
|
1104
|
+
manifestHash: string;
|
|
1105
|
+
state: Record<string, unknown>;
|
|
1106
|
+
}[];
|
|
1107
|
+
keyEpoch: Record<string, unknown>;
|
|
1108
|
+
keyEpochHash: string;
|
|
1109
|
+
keyring: {
|
|
1110
|
+
containerId: string;
|
|
1111
|
+
containerKeyEpochId: string;
|
|
1112
|
+
iv: string;
|
|
1113
|
+
sealed: string;
|
|
1114
|
+
sealingSuite: string;
|
|
1115
|
+
version: number;
|
|
1116
|
+
} | null;
|
|
1117
|
+
keyTargetHash: string;
|
|
1118
|
+
parentContainerKeyEpochId: string | null;
|
|
1119
|
+
recipientTargets: Record<string, unknown>[];
|
|
1120
|
+
wraps: Record<string, unknown>[];
|
|
1121
|
+
};
|
|
1122
|
+
systemSlot?: string | null | undefined;
|
|
1123
|
+
}[];
|
|
1124
|
+
currentGrants: {
|
|
1125
|
+
accessLevel: "admin" | "read" | "write";
|
|
1126
|
+
containerId: string;
|
|
1127
|
+
}[];
|
|
1128
|
+
currentMemberEnvelopes: {
|
|
1129
|
+
envelopes: {
|
|
1130
|
+
kemCipherText: string;
|
|
1131
|
+
memberKeyFingerprint: string;
|
|
1132
|
+
userId: string;
|
|
1133
|
+
wrappedKey: string;
|
|
1134
|
+
}[];
|
|
1135
|
+
epoch: number;
|
|
1136
|
+
principalId: string;
|
|
1137
|
+
principalType: "group" | "organization";
|
|
1138
|
+
stateHash: string;
|
|
1139
|
+
};
|
|
1140
|
+
currentPayload: {
|
|
1141
|
+
cipherSuite: "aes-256-gcm";
|
|
1142
|
+
ciphertext: string;
|
|
1143
|
+
ciphertextHash: string;
|
|
1144
|
+
createdAt: string;
|
|
1145
|
+
principalId: string;
|
|
1146
|
+
principalType: "group" | "organization";
|
|
1147
|
+
stateHash: string;
|
|
1148
|
+
};
|
|
1149
|
+
currentProjection: {
|
|
1150
|
+
role: "member" | "admin";
|
|
1151
|
+
userId: string;
|
|
1152
|
+
}[];
|
|
1153
|
+
currentState: {
|
|
1154
|
+
createdAt: string;
|
|
1155
|
+
encapsulationPublicKey: string;
|
|
1156
|
+
externalAuthority: {
|
|
1157
|
+
keyEpoch: number;
|
|
1158
|
+
keyFingerprint: string;
|
|
1159
|
+
principalId: string;
|
|
1160
|
+
principalType: "group";
|
|
1161
|
+
stateHash: string;
|
|
1162
|
+
version: number;
|
|
1163
|
+
} | null;
|
|
1164
|
+
grantCount: number;
|
|
1165
|
+
grantRoot: string;
|
|
1166
|
+
keyEpoch: number;
|
|
1167
|
+
keyFingerprint: string;
|
|
1168
|
+
memberCount: number;
|
|
1169
|
+
memberEnvelopesRoot: string;
|
|
1170
|
+
membershipMode: "projection";
|
|
1171
|
+
membershipRoot: string;
|
|
1172
|
+
payloadCiphertextHash: string;
|
|
1173
|
+
prevStateHash: string | null;
|
|
1174
|
+
principalId: string;
|
|
1175
|
+
principalType: "group" | "organization";
|
|
1176
|
+
projectionRoot: string;
|
|
1177
|
+
signature: string;
|
|
1178
|
+
signedAt: string;
|
|
1179
|
+
signerUserId: string;
|
|
1180
|
+
signerUserKeyFingerprint: string;
|
|
1181
|
+
stateHash: string;
|
|
1182
|
+
version: number;
|
|
1183
|
+
};
|
|
1184
|
+
} | undefined;
|
|
1063
1185
|
}>>;
|
|
1064
1186
|
}
|