@tearleads/client-sdk 0.1.68 → 0.1.71

package/internal/validators/operation/containerMutations.d.ts

@@ -15,7 +15,12 @@ export declare const createContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerManifestHistoryRefs?: {
             containerId: string;
@@ -47,7 +52,12 @@ export declare const createContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerManifestHistoryRefs?: {
             containerId: string;
@@ -79,7 +89,12 @@ export declare const createContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerManifestHistoryRefs?: {
             containerId: string;
@@ -111,7 +126,12 @@ export declare const createContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerManifestHistoryRefs?: {
             containerId: string;
@@ -634,7 +654,12 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -689,7 +714,12 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                 keyring: Record<string, unknown> | null;
                 manifest: Record<string, unknown>;
                 predecessorBridge: Record<string, unknown> | null;
-                principalPolicies: Record<string, unknown>[];
+                principalPolicyRefs: {
+                    principalType: "group" | "organization";
+                    principalId: string;
+                    version: number;
+                    stateHash: string;
+                }[];
                 wraps: Record<string, unknown>[];
                 containerManifestHistoryRefs?: {
                     containerId: string;
@@ -719,6 +749,83 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                 manifestHash: string;
             }[] | undefined;
         };
+        initialMetadataSync?: {
+            contentKeyEpoch: number;
+            expectedLinkSetManifestHash: string;
+            expectedTargetHash: string;
+            localVersionVector: string | null;
+            outgoingUpdates: {
+                encryptedData: string;
+                id: string;
+                partialEndVersionVector: string;
+                partialStartVersionVector: string;
+                plaintextHash: string;
+                writeHeader: Record<string, unknown>;
+                checkpointKind?: "rotate_baseline" | undefined;
+                checkpointPayloadKind?: "full_history_snapshot" | undefined;
+                sourceVersionVector?: string | undefined;
+            }[];
+            supportsPullPagination: true;
+            authorizingContainerPathRefs?: {
+                containerId: string;
+                manifestHash: string;
+            }[][] | undefined;
+            containerRekeys?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicyRefs: {
+                    principalType: "group" | "organization";
+                    principalId: string;
+                    version: number;
+                    stateHash: string;
+                }[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistoryRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                destinationParentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                previousManifestRef?: {
+                    containerId: string;
+                    manifestHash: string;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+            contentKeyBundle?: {
+                contentKeyEpoch: number;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            } | undefined;
+            historyMode?: "raw" | undefined;
+            inlineRekeyCommitId?: string | undefined;
+            minLsn?: string | undefined;
+            pullCursor?: string | undefined;
+        } | undefined;
         systemSlot?: string | null | undefined;
     }, {
         container: {
@@ -729,7 +836,12 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -784,7 +896,12 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                 keyring: Record<string, unknown> | null;
                 manifest: Record<string, unknown>;
                 predecessorBridge: Record<string, unknown> | null;
-                principalPolicies: Record<string, unknown>[];
+                principalPolicyRefs: {
+                    principalType: "group" | "organization";
+                    principalId: string;
+                    version: number;
+                    stateHash: string;
+                }[];
                 wraps: Record<string, unknown>[];
                 containerManifestHistoryRefs?: {
                     containerId: string;
@@ -814,6 +931,83 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                 manifestHash: string;
             }[] | undefined;
         };
+        initialMetadataSync?: {
+            contentKeyEpoch: number;
+            expectedLinkSetManifestHash: string;
+            expectedTargetHash: string;
+            localVersionVector: string | null;
+            outgoingUpdates: {
+                encryptedData: string;
+                id: string;
+                partialEndVersionVector: string;
+                partialStartVersionVector: string;
+                plaintextHash: string;
+                writeHeader: Record<string, unknown>;
+                checkpointKind?: "rotate_baseline" | undefined;
+                checkpointPayloadKind?: "full_history_snapshot" | undefined;
+                sourceVersionVector?: string | undefined;
+            }[];
+            supportsPullPagination: true;
+            authorizingContainerPathRefs?: {
+                containerId: string;
+                manifestHash: string;
+            }[][] | undefined;
+            containerRekeys?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicyRefs: {
+                    principalType: "group" | "organization";
+                    principalId: string;
+                    version: number;
+                    stateHash: string;
+                }[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistoryRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                destinationParentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                previousManifestRef?: {
+                    containerId: string;
+                    manifestHash: string;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+            contentKeyBundle?: {
+                contentKeyEpoch: number;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            } | undefined;
+            historyMode?: "raw" | undefined;
+            inlineRekeyCommitId?: string | undefined;
+            minLsn?: string | undefined;
+            pullCursor?: string | undefined;
+        } | undefined;
         systemSlot?: string | null | undefined;
     }, z.core.$ZodTypeInternals<{
         container: {
@@ -824,7 +1018,12 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -879,7 +1078,12 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                 keyring: Record<string, unknown> | null;
                 manifest: Record<string, unknown>;
                 predecessorBridge: Record<string, unknown> | null;
-                principalPolicies: Record<string, unknown>[];
+                principalPolicyRefs: {
+                    principalType: "group" | "organization";
+                    principalId: string;
+                    version: number;
+                    stateHash: string;
+                }[];
                 wraps: Record<string, unknown>[];
                 containerManifestHistoryRefs?: {
                     containerId: string;
@@ -909,6 +1113,83 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                 manifestHash: string;
             }[] | undefined;
         };
+        initialMetadataSync?: {
+            contentKeyEpoch: number;
+            expectedLinkSetManifestHash: string;
+            expectedTargetHash: string;
+            localVersionVector: string | null;
+            outgoingUpdates: {
+                encryptedData: string;
+                id: string;
+                partialEndVersionVector: string;
+                partialStartVersionVector: string;
+                plaintextHash: string;
+                writeHeader: Record<string, unknown>;
+                checkpointKind?: "rotate_baseline" | undefined;
+                checkpointPayloadKind?: "full_history_snapshot" | undefined;
+                sourceVersionVector?: string | undefined;
+            }[];
+            supportsPullPagination: true;
+            authorizingContainerPathRefs?: {
+                containerId: string;
+                manifestHash: string;
+            }[][] | undefined;
+            containerRekeys?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicyRefs: {
+                    principalType: "group" | "organization";
+                    principalId: string;
+                    version: number;
+                    stateHash: string;
+                }[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistoryRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                destinationParentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                previousManifestRef?: {
+                    containerId: string;
+                    manifestHash: string;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+            contentKeyBundle?: {
+                contentKeyEpoch: number;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            } | undefined;
+            historyMode?: "raw" | undefined;
+            inlineRekeyCommitId?: string | undefined;
+            minLsn?: string | undefined;
+            pullCursor?: string | undefined;
+        } | undefined;
         systemSlot?: string | null | undefined;
     }, {
         container: {
@@ -919,7 +1200,12 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -974,7 +1260,12 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                 keyring: Record<string, unknown> | null;
                 manifest: Record<string, unknown>;
                 predecessorBridge: Record<string, unknown> | null;
-                principalPolicies: Record<string, unknown>[];
+                principalPolicyRefs: {
+                    principalType: "group" | "organization";
+                    principalId: string;
+                    version: number;
+                    stateHash: string;
+                }[];
                 wraps: Record<string, unknown>[];
                 containerManifestHistoryRefs?: {
                     containerId: string;
@@ -1004,6 +1295,83 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                 manifestHash: string;
             }[] | undefined;
         };
+        initialMetadataSync?: {
+            contentKeyEpoch: number;
+            expectedLinkSetManifestHash: string;
+            expectedTargetHash: string;
+            localVersionVector: string | null;
+            outgoingUpdates: {
+                encryptedData: string;
+                id: string;
+                partialEndVersionVector: string;
+                partialStartVersionVector: string;
+                plaintextHash: string;
+                writeHeader: Record<string, unknown>;
+                checkpointKind?: "rotate_baseline" | undefined;
+                checkpointPayloadKind?: "full_history_snapshot" | undefined;
+                sourceVersionVector?: string | undefined;
+            }[];
+            supportsPullPagination: true;
+            authorizingContainerPathRefs?: {
+                containerId: string;
+                manifestHash: string;
+            }[][] | undefined;
+            containerRekeys?: {
+                body: unknown;
+                event: Record<string, unknown>;
+                expectedManifestHash: string;
+                keyEpoch: Record<string, unknown>;
+                keyring: Record<string, unknown> | null;
+                manifest: Record<string, unknown>;
+                predecessorBridge: Record<string, unknown> | null;
+                principalPolicyRefs: {
+                    principalType: "group" | "organization";
+                    principalId: string;
+                    version: number;
+                    stateHash: string;
+                }[];
+                wraps: Record<string, unknown>[];
+                containerManifestHistoryRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                destinationParentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                parentKekState?: Record<string, unknown> | null | undefined;
+                previousContainerPathRefs?: {
+                    containerId: string;
+                    manifestHash: string;
+                }[] | undefined;
+                previousManifestRef?: {
+                    containerId: string;
+                    manifestHash: string;
+                } | null | undefined;
+                userRecipientKeys?: Record<string, unknown>[] | undefined;
+            }[] | undefined;
+            contentKeyBundle?: {
+                contentKeyEpoch: number;
+                linkSetManifestHash: string;
+                targetHash: string;
+                targets: {
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHash: string;
+                    wrappedKey: string;
+                    wrappingMetadata: Record<string, unknown>;
+                }[];
+            } | undefined;
+            historyMode?: "raw" | undefined;
+            inlineRekeyCommitId?: string | undefined;
+            minLsn?: string | undefined;
+            pullCursor?: string | undefined;
+        } | undefined;
         systemSlot?: string | null | undefined;
     }>>;
     readonly failureResponses: {
@@ -1234,6 +1602,11 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                     targets: Record<string, unknown>[];
                 };
                 id: string;
+                initialSync?: {
+                    commitLsn: string | null;
+                    commitLsnMode: "tracked" | "untracked";
+                    acceptedOutgoingUpdateIds: string[];
+                } | undefined;
             };
         }, {
             container: {
@@ -1331,6 +1704,11 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                     targets: Record<string, unknown>[];
                 };
                 id: string;
+                initialSync?: {
+                    commitLsn: string | null;
+                    commitLsnMode: "tracked" | "untracked";
+                    acceptedOutgoingUpdateIds: string[];
+                } | undefined;
             };
         }, z.core.$ZodTypeInternals<{
             container: {
@@ -1428,6 +1806,11 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                     targets: Record<string, unknown>[];
                 };
                 id: string;
+                initialSync?: {
+                    commitLsn: string | null;
+                    commitLsnMode: "tracked" | "untracked";
+                    acceptedOutgoingUpdateIds: string[];
+                } | undefined;
             };
         }, {
             container: {
@@ -1525,12 +1908,44 @@ export declare const createContainerWithMetadataDocumentOperation: Omit<{
                     targets: Record<string, unknown>[];
                 };
                 id: string;
+                initialSync?: {
+                    commitLsn: string | null;
+                    commitLsnMode: "tracked" | "untracked";
+                    acceptedOutgoingUpdateIds: string[];
+                } | undefined;
             };
         }>>;
     };
     readonly runtimeRefinements: readonly [{
         readonly description: "a container response keyring is null exactly for container key epoch 1";
         readonly id: "response.organization-provisioning-container-keyring";
+    }, {
+        readonly description: "a container create metadata seed must contain exactly one outgoing update and no container rekeys, and serialize within the document sync request limit";
+        readonly id: "request.container-create-metadata-seed";
+    }, {
+        readonly description: "inlineRekeyCommitId must be present exactly when containerRekeys is non-empty";
+        readonly id: "request.inline-rekey-commit-marker";
+    }, {
+        readonly description: "authorizingContainerPathRefs is required when outgoingUpdates is non-empty";
+        readonly id: "request.authorizing-paths-for-writes";
+    }, {
+        readonly description: "containerRekeys may be non-empty only when outgoingUpdates is non-empty";
+        readonly id: "request.container-rekeys-require-write";
+    }, {
+        readonly description: "outgoing update ids must be unique within the request";
+        readonly id: "request.unique-outgoing-update-ids";
+    }, {
+        readonly description: "a request carrying pullCursor must not contain outgoing updates, container rekeys, a content-key bundle, or authorizing paths";
+        readonly id: "request.pull-continuation-read-only";
+    }, {
+        readonly description: "historyMode \"raw\" must not be combined with outgoing updates, container rekeys, a content-key bundle, or authorizing paths";
+        readonly id: "request.raw-history-read-only";
+    }, {
+        readonly description: "historyMode \"raw\" requires localVersionVector to be null so the complete retained history is requested";
+        readonly id: "request.raw-history-null-frontier";
+    }, {
+        readonly description: "checkpointKind, checkpointPayloadKind, and sourceVersionVector must be absent together or form a rotation baseline";
+        readonly id: "request.rotation-checkpoint-fields";
     }];
 }, "failureResponses" | "failureStatuses"> & {
     readonly failureResponses: {
@@ -1673,7 +2088,12 @@ export declare const shareContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerManifestHistoryRefs?: {
             containerId: string;
@@ -1705,7 +2125,12 @@ export declare const shareContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerManifestHistoryRefs?: {
             containerId: string;
@@ -1737,7 +2162,12 @@ export declare const shareContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerManifestHistoryRefs?: {
             containerId: string;
@@ -1769,7 +2199,12 @@ export declare const shareContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerManifestHistoryRefs?: {
             containerId: string;
@@ -2298,7 +2733,12 @@ export declare const reciteContainerOperation: Omit<{
             containerId: string;
             manifestHash: string;
         };
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
     }, {
         body: unknown;
         event: Record<string, unknown>;
@@ -2312,7 +2752,12 @@ export declare const reciteContainerOperation: Omit<{
             containerId: string;
             manifestHash: string;
         };
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
     }, z.core.$ZodTypeInternals<{
         body: unknown;
         event: Record<string, unknown>;
@@ -2326,7 +2771,12 @@ export declare const reciteContainerOperation: Omit<{
             containerId: string;
             manifestHash: string;
         };
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
     }, {
         body: unknown;
         event: Record<string, unknown>;
@@ -2340,7 +2790,12 @@ export declare const reciteContainerOperation: Omit<{
             containerId: string;
             manifestHash: string;
         };
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
     }>>;
     readonly failureResponses: {
         readonly 400: z.ZodType<{
@@ -2717,7 +3172,12 @@ export declare const revokeContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -2727,7 +3187,12 @@ export declare const revokeContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -2782,7 +3247,12 @@ export declare const revokeContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -2792,7 +3262,12 @@ export declare const revokeContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -2847,7 +3322,12 @@ export declare const revokeContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -2857,7 +3337,12 @@ export declare const revokeContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -2912,7 +3397,12 @@ export declare const revokeContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -2922,7 +3412,12 @@ export declare const revokeContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -3709,7 +4204,12 @@ export declare const rekeyContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -3719,7 +4219,12 @@ export declare const rekeyContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -3774,7 +4279,12 @@ export declare const rekeyContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -3784,7 +4294,12 @@ export declare const rekeyContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -3839,7 +4354,12 @@ export declare const rekeyContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -3849,7 +4369,12 @@ export declare const rekeyContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -3904,7 +4429,12 @@ export declare const rekeyContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -3914,7 +4444,12 @@ export declare const rekeyContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -4701,7 +5236,12 @@ export declare const moveContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -4711,7 +5251,12 @@ export declare const moveContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -4766,7 +5311,12 @@ export declare const moveContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -4776,7 +5326,12 @@ export declare const moveContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -4831,7 +5386,12 @@ export declare const moveContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -4841,7 +5401,12 @@ export declare const moveContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;
@@ -4896,7 +5461,12 @@ export declare const moveContainerOperation: Omit<{
         keyring: Record<string, unknown> | null;
         manifest: Record<string, unknown>;
         predecessorBridge: Record<string, unknown> | null;
-        principalPolicies: Record<string, unknown>[];
+        principalPolicyRefs: {
+            principalType: "group" | "organization";
+            principalId: string;
+            version: number;
+            stateHash: string;
+        }[];
         wraps: Record<string, unknown>[];
         containerRekeys?: {
             body: unknown;
@@ -4906,7 +5476,12 @@ export declare const moveContainerOperation: Omit<{
             keyring: Record<string, unknown> | null;
             manifest: Record<string, unknown>;
             predecessorBridge: Record<string, unknown> | null;
-            principalPolicies: Record<string, unknown>[];
+            principalPolicyRefs: {
+                principalType: "group" | "organization";
+                principalId: string;
+                version: number;
+                stateHash: string;
+            }[];
             wraps: Record<string, unknown>[];
             containerManifestHistoryRefs?: {
                 containerId: string;