npm - @tearleads/client-sdk - Versions diffs - 0.1.48 → 0.1.49 - Mend

@tearleads/client-sdk 0.1.48 → 0.1.49

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (46) hide show

package/internal/validators/operation/principals.d.ts CHANGED Viewed

@@ -1802,6 +1802,89 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                 userRecipientKeys?: Record<string, unknown>[] | undefined;
             }[] | undefined;
         };
+        memberPolicy?: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistoryRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                destinationParentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                previousManifestRef?: {
+                    containerId: string;
+                    manifestHash: string;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        } | undefined;
     }, {
         groupPolicy: {
             encryptedPayload: {
@@ -1969,6 +2052,89 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                 userRecipientKeys?: Record<string, unknown>[] | undefined;
             }[] | undefined;
         };
+        memberPolicy?: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistoryRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                destinationParentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                previousManifestRef?: {
+                    containerId: string;
+                    manifestHash: string;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        } | undefined;
     }, z.core.$ZodTypeInternals<{
         groupPolicy: {
             encryptedPayload: {
@@ -2136,6 +2302,89 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                 userRecipientKeys?: Record<string, unknown>[] | undefined;
             }[] | undefined;
         };
+        memberPolicy?: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistoryRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                destinationParentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                previousManifestRef?: {
+                    containerId: string;
+                    manifestHash: string;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        } | undefined;
     }, {
         groupPolicy: {
             encryptedPayload: {
@@ -2246,204 +2495,776 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                     keyEpoch: number;
                     keyFingerprint: string;
                     principalId: string;
-                    principalType: "group";
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistoryRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                destinationParentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                previousManifestRef?: {
+                    containerId: string;
+                    manifestHash: string;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        };
+        memberPolicy?: {
+            encryptedPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+            };
+            grants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            memberEnvelopes: {
+                kemCipherText: string;
+                memberKeyFingerprint: string;
+                userId: string;
+                wrappedKey: string;
+            }[];
+            projection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            state: {
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                version: number;
+            };
+            containerMutations?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicies: Record<string, unknown>[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistoryRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                destinationParentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                previousManifestRef?: {
+                    containerId: string;
+                    manifestHash: string;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+        } | undefined;
+    }>>;
+    readonly failureResponses: {
+        readonly 400: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 401: z.ZodType<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }, {
+            error: string;
+            code?: "session_refresh_required" | undefined;
+        }>>;
+        readonly 402: z.ZodType<{
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, {
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }, {
+            error: string;
+            organizationId: string;
+            reason: "billing_inactive" | "sync_seat_unassigned";
+        }>>;
+        readonly 403: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 404: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>;
+        readonly 409: z.ZodUnion<readonly [z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+        }>>, z.ZodType<{
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }, {
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }, z.core.$ZodTypeInternals<{
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }, {
+            code: "container_descendant_rekeys_required";
+            error: string;
+            requiredContainerIds: string[];
+        }>>]>;
+        readonly 500: z.ZodType<{
+            error: string;
+        }, {
+            error: string;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+        }, {
+            error: string;
+        }>>;
+        readonly 503: z.ZodType<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
+        }, z.core.$ZodTypeInternals<{
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
+        }, {
+            error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
+        }>>;
+    };
+    readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503];
+    readonly id: "organizations.groups.policy.commit";
+    readonly method: "PUT";
+    readonly params: z.ZodObject<{
+        organizationId: z.ZodCustom<string, string>;
+        groupId: z.ZodCustom<string, string>;
+    }, z.core.$strict>;
+    readonly path: "/organizations/{organizationId}/groups/{groupId}/policy-commit";
+    readonly responseDescriptions: {
+        readonly 202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.";
+    };
+    readonly responses: {
+        readonly 200: z.ZodType<{
+            groupPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            };
+            organizationPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            };
+            memberPolicy?: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
+                    stateHash: string;
+                    version: number;
+                };
+            } | undefined;
+        }, {
+            groupPolicy: {
+                containerMutations: {
+                    createdAt: string;
+                    manifestHead: {
+                        epoch: number;
+                        manifestHash: string;
+                    };
+                    organizationId: string;
+                    parentId: string | null;
+                    referencedPrincipalHeads: {
+                        principalType: "group";
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        stateHash: string;
+                        version: number;
+                    }[];
+                    updatedAt: string;
+                    accessManifest: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    };
+                    containerId: string;
+                    containerKek: {
+                        accessManifestHash: string;
+                        containerId: string;
+                        containerKeyEpoch: number;
+                        containerKeyEpochId: string;
+                        containerManifestHistory: {
+                            event: {
+                                body: unknown;
+                                event: Record<string, unknown>;
+                                eventHash: string;
+                            };
+                            manifest: Record<string, unknown>;
+                            manifestHash: string;
+                            state: Record<string, unknown>;
+                        }[];
+                        keyEpoch: Record<string, unknown>;
+                        keyEpochHash: string;
+                        keyring: {
+                            containerId: string;
+                            containerKeyEpochId: string;
+                            iv: string;
+                            sealed: string;
+                            sealingSuite: string;
+                            version: number;
+                        } | null;
+                        keyTargetHash: string;
+                        parentContainerKeyEpochId: string | null;
+                        recipientTargets: Record<string, unknown>[];
+                        wraps: Record<string, unknown>[];
+                    };
+                    systemSlot?: string | null | undefined;
+                }[];
+                currentGrants: {
+                    accessLevel: "admin" | "read" | "write";
+                    containerId: string;
+                }[];
+                currentMemberEnvelopes: {
+                    envelopes: {
+                        kemCipherText: string;
+                        memberKeyFingerprint: string;
+                        userId: string;
+                        wrappedKey: string;
+                    }[];
+                    epoch: number;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentPayload: {
+                    cipherSuite: "aes-256-gcm";
+                    ciphertext: string;
+                    ciphertextHash: string;
+                    createdAt: string;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    stateHash: string;
+                };
+                currentProjection: {
+                    role: "member" | "admin";
+                    userId: string;
+                }[];
+                currentState: {
+                    createdAt: string;
+                    encapsulationPublicKey: string;
+                    externalAuthority: {
+                        keyEpoch: number;
+                        keyFingerprint: string;
+                        principalId: string;
+                        principalType: "group";
+                        stateHash: string;
+                        version: number;
+                    } | null;
+                    grantCount: number;
+                    grantRoot: string;
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    memberCount: number;
+                    memberEnvelopesRoot: string;
+                    membershipMode: "projection";
+                    membershipRoot: string;
+                    payloadCiphertextHash: string;
+                    prevStateHash: string | null;
+                    principalId: string;
+                    principalType: "group" | "organization";
+                    projectionRoot: string;
+                    signature: string;
+                    signedAt: string;
+                    signerUserId: string;
+                    signerUserKeyFingerprint: string;
                     stateHash: string;
                     version: number;
-                } | null;
-                grantCount: number;
-                grantRoot: string;
-                keyEpoch: number;
-                keyFingerprint: string;
-                memberCount: number;
-                memberEnvelopesRoot: string;
-                membershipMode: "projection";
-                membershipRoot: string;
-                payloadCiphertextHash: string;
-                prevStateHash: string | null;
-                principalId: string;
-                principalType: "group" | "organization";
-                projectionRoot: string;
-                signature: string;
-                signedAt: string;
-                signerUserId: string;
-                signerUserKeyFingerprint: string;
-                version: number;
+                };
             };
-            containerMutations?: {
-                body: unknown;
-                event: Record<string, unknown>;
-                expectedManifestHash: string;
-                keyEpoch: Record<string, unknown>;
-                keyring: Record<string, unknown> | null;
-                manifest: Record<string, unknown>;
-                predecessorBridge: Record<string, unknown> | null;
-                principalPolicies: Record<string, unknown>[];
-                wraps: Record<string, unknown>[];
-                containerManifestHistoryRefs?: {
-                    containerId: string;
-                    manifestHash: string;
-                }[] | undefined;
-                destinationParentContainerPathRefs?: {
-                    containerId: string;
-                    manifestHash: string;
-                }[] | undefined;
-                parentContainerPathRefs?: {
-                    containerId: string;
-                    manifestHash: string;
-                }[] | undefined;
-                parentKekState?: Record<string, unknown> | null | undefined;
-                previousContainerPathRefs?: {
-                    containerId: string;
-                    manifestHash: string;
-                }[] | undefined;
-                previousManifestRef?: {
-                    containerId: string;
-                    manifestHash: string;
-                } | null | undefined;
-                userRecipientKeys?: Record<string, unknown>[] | undefined;
-            }[] | undefined;
-        };
-    }>>;
-    readonly failureResponses: {
-        readonly 400: z.ZodType<{
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, {
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, z.core.$ZodTypeInternals<{
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, {
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }>>;
-        readonly 401: z.ZodType<{
-            error: string;
-            code?: "session_refresh_required" | undefined;
-        }, {
-            error: string;
-            code?: "session_refresh_required" | undefined;
-        }, z.core.$ZodTypeInternals<{
-            error: string;
-            code?: "session_refresh_required" | undefined;
-        }, {
-            error: string;
-            code?: "session_refresh_required" | undefined;
-        }>>;
-        readonly 402: z.ZodType<{
-            error: string;
-            organizationId: string;
-            reason: "billing_inactive" | "sync_seat_unassigned";
-        }, {
-            error: string;
-            organizationId: string;
-            reason: "billing_inactive" | "sync_seat_unassigned";
-        }, z.core.$ZodTypeInternals<{
-            error: string;
-            organizationId: string;
-            reason: "billing_inactive" | "sync_seat_unassigned";
-        }, {
-            error: string;
-            organizationId: string;
-            reason: "billing_inactive" | "sync_seat_unassigned";
-        }>>;
-        readonly 403: z.ZodType<{
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, {
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, z.core.$ZodTypeInternals<{
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, {
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }>>;
-        readonly 404: z.ZodType<{
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, {
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, z.core.$ZodTypeInternals<{
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, {
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }>>;
-        readonly 409: z.ZodUnion<readonly [z.ZodType<{
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, {
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, z.core.$ZodTypeInternals<{
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }, {
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
-        }>>, z.ZodType<{
-            code: "container_descendant_rekeys_required";
-            error: string;
-            requiredContainerIds: string[];
-        }, {
-            code: "container_descendant_rekeys_required";
-            error: string;
-            requiredContainerIds: string[];
-        }, z.core.$ZodTypeInternals<{
-            code: "container_descendant_rekeys_required";
-            error: string;
-            requiredContainerIds: string[];
-        }, {
-            code: "container_descendant_rekeys_required";
-            error: string;
-            requiredContainerIds: string[];
-        }>>]>;
-        readonly 500: z.ZodType<{
-            error: string;
-        }, {
-            error: string;
-        }, z.core.$ZodTypeInternals<{
-            error: string;
-        }, {
-            error: string;
-        }>>;
-        readonly 503: z.ZodType<{
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
-            committed?: boolean | undefined;
-        }, {
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
-            committed?: boolean | undefined;
-        }, z.core.$ZodTypeInternals<{
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
-            committed?: boolean | undefined;
-        }, {
-            error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
-            committed?: boolean | undefined;
-        }>>;
-    };
-    readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503];
-    readonly id: "organizations.groups.policy.commit";
-    readonly method: "PUT";
-    readonly params: z.ZodObject<{
-        organizationId: z.ZodCustom<string, string>;
-        groupId: z.ZodCustom<string, string>;
-    }, z.core.$strict>;
-    readonly path: "/organizations/{organizationId}/groups/{groupId}/policy-commit";
-    readonly responseDescriptions: {
-        readonly 202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.";
-    };
-    readonly responses: {
-        readonly 200: z.ZodType<{
-            groupPolicy: {
+            organizationPolicy: {
                 containerMutations: {
                     createdAt: string;
                     manifestHead: {
@@ -2565,7 +3386,7 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                     version: number;
                 };
             };
-            organizationPolicy: {
+            memberPolicy?: {
                 containerMutations: {
                     createdAt: string;
                     manifestHead: {
@@ -2686,8 +3507,8 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                     stateHash: string;
                     version: number;
                 };
-            };
-        }, {
+            } | undefined;
+        }, z.core.$ZodTypeInternals<{
             groupPolicy: {
                 containerMutations: {
                     createdAt: string;
@@ -2932,8 +3753,7 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                     version: number;
                 };
             };
-        }, z.core.$ZodTypeInternals<{
-            groupPolicy: {
+            memberPolicy?: {
                 containerMutations: {
                     createdAt: string;
                     manifestHead: {
@@ -3054,8 +3874,9 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                     stateHash: string;
                     version: number;
                 };
-            };
-            organizationPolicy: {
+            } | undefined;
+        }, {
+            groupPolicy: {
                 containerMutations: {
                     createdAt: string;
                     manifestHead: {
@@ -3177,8 +3998,7 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                     version: number;
                 };
             };
-        }, {
-            groupPolicy: {
+            organizationPolicy: {
                 containerMutations: {
                     createdAt: string;
                     manifestHead: {
@@ -3300,7 +4120,7 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                     version: number;
                 };
             };
-            organizationPolicy: {
+            memberPolicy?: {
                 containerMutations: {
                     createdAt: string;
                     manifestHead: {
@@ -3421,7 +4241,7 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
                     stateHash: string;
                     version: number;
                 };
-            };
+            } | undefined;
         }>>;
         readonly 202: z.ZodObject<{
             code: z.ZodLiteral<"principal_history_preparation_pending">;