@intentius/chant-lexicon-azure 0.41.20 → 0.44.1

package/dist/api/read-client.d.ts

@@ -48,6 +48,14 @@ export interface ArmResourceBody {
     properties?: Record<string, unknown>;
     [key: string]: unknown;
 }
+/**
+ * GET the resource-group's resource list — the enumeration half live export
+ * needs (#1214). Real ARM returns envelopes (id/name/type/location/tags);
+ * callers wanting the full body follow up with {@link getResourceById}.
+ */
+export declare function listResources(options: AzureReadClientOptions): Promise<ArmResourceBody[]>;
+/** GET one resource by its full ARM id — the read for a list entry, nested types included. */
+export declare function getResourceById(options: AzureReadClientOptions, id: string, apiVersion?: string): Promise<ArmResourceBody>;
 /** GET one resource. Throws {@link AzureReadError}; 404 means absent, which callers check with {@link isNotFound}. */
 export declare function getResource(options: AzureReadClientOptions, type: string, name: string, apiVersion?: string): Promise<ArmResourceBody>;
 //# sourceMappingURL=read-client.d.ts.map

package/dist/api/read-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read-client.d.ts","sourceRoot":"","sources":["../../src/api/read-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,2BAA2B,CAAC;AASxD,MAAM,WAAW,sBAAsB;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,qFAAqF;AACrF,qBAAa,cAAe,SAAQ,KAAK;IAGrC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBAFtB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,YAAA;CAKzB;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEhD;AAgBD,sFAAsF;AACtF,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,sBAAsB,EAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,SAAsB,GAC/B,MAAM,CAIR;AAwBD,sCAAsC;AACtC,MAAM,WAAW,eAAe;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,sHAAsH;AACtH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,sBAAsB,EAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,eAAe,CAAC,CAa1B"}
+{"version":3,"file":"read-client.d.ts","sourceRoot":"","sources":["../../src/api/read-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,2BAA2B,CAAC;AASxD,MAAM,WAAW,sBAAsB;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,qFAAqF;AACrF,qBAAa,cAAe,SAAQ,KAAK;IAGrC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBAFtB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,YAAA;CAKzB;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEhD;AAgBD,sFAAsF;AACtF,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,sBAAsB,EAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,SAAsB,GAC/B,MAAM,CAIR;AAwBD,sCAAsC;AACtC,MAAM,WAAW,eAAe;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAgB/F;AAED,8FAA8F;AAC9F,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,EAC/B,EAAE,EAAE,MAAM,EACV,UAAU,SAAsB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAc1B;AAED,sHAAsH;AACtH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,sBAAsB,EAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,eAAe,CAAC,CAa1B"}

package/dist/codegen/generate-lexicon.d.ts

@@ -21,6 +21,11 @@ export interface LexiconEntry {
     };
     createOnly?: string[];
     writeOnly?: string[];
+    /**
+     * ARM deployment scopes the resource can be declared at (#1545).
+     * Absent means plain resource-group scope.
+     */
+    deployScopes?: string[];
 }
 /**
  * Generate the lexicon-azure.json content.

package/dist/codegen/generate-lexicon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate-lexicon.d.ts","sourceRoot":"","sources":["../../src/codegen/generate-lexicon.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAOhF,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC1D,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAiCD;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,oBAAoB,EAAE,EAC/B,MAAM,EAAE,cAAc,GACrB,MAAM,CAuCR"}
+{"version":3,"file":"generate-lexicon.d.ts","sourceRoot":"","sources":["../../src/codegen/generate-lexicon.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAOhF,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC1D,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAiCD;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,oBAAoB,EAAE,EAC/B,MAAM,EAAE,cAAc,GACrB,MAAM,CAwCR"}

package/dist/codegen/naming.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"naming.d.ts","sourceRoot":"","sources":["../../src/codegen/naming.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,cAAc,IAAI,kBAAkB,EAGrC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEnF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAuH1D;;GAEG;AACH,qBAAa,cAAe,SAAQ,kBAAkB;gBACxC,OAAO,EAAE,oBAAoB,EAAE;CAO5C"}
+{"version":3,"file":"naming.d.ts","sourceRoot":"","sources":["../../src/codegen/naming.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,cAAc,IAAI,kBAAkB,EAGrC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEnF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AA8H1D;;GAEG;AACH,qBAAa,cAAe,SAAQ,kBAAkB;gBACxC,OAAO,EAAE,oBAAoB,EAAE;CAO5C"}

package/dist/composites/index.d.ts

@@ -28,4 +28,6 @@ export { RedisCache } from "./redis-cache.js";
 export type { RedisCacheProps, RedisCacheResult } from "./redis-cache.js";
 export { PrivateEndpoint } from "./private-endpoint.js";
 export type { PrivateEndpointProps, PrivateEndpointResult } from "./private-endpoint.js";
+export { GovernanceFoundation, GovernanceBaseline, LocationRestriction, ActivityLogSink } from "./landing-zone.js";
+export type { GovernanceFoundationProps, GovernanceFoundationResult, GovernanceBaselineProps, GovernanceBaselineResult, LocationRestrictionProps, LocationRestrictionResult, ActivityLogSinkProps, ActivityLogSinkResult, } from "./landing-zone.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/composites/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/composites/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,YAAY,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,YAAY,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,YAAY,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/composites/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,YAAY,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,YAAY,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,YAAY,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAChH,YAAY,EACV,yBAAyB,EAAE,0BAA0B,EACrD,uBAAuB,EAAE,wBAAwB,EACjD,wBAAwB,EAAE,yBAAyB,EACnD,oBAAoB,EAAE,qBAAqB,GAC5C,MAAM,gBAAgB,CAAC"}

package/dist/composites/landing-zone.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Landing-zone bootstrap composites (#791, epic #787 C1) — the Azure slice.
+ *
+ * Fixed-shape resources for greenfield creation of the recommended
+ * governance foundation. The evaluability rules (EVL002/004) require
+ * composites to declare a fixed set of resources, so these carry the
+ * foundation only; arbitrary management-group/subscription trees are
+ * authored as config with `landingZoneConfig()` (../governance.ts) and
+ * reconciled by the Azure cloud warden, and further groups/subscriptions
+ * are declared as ordinary resources.
+ *
+ * A single ARM template cannot mix deployment scopes (AZR030, #1545), so
+ * unlike the AWS/GCP slices the foundation splits per scope — each
+ * composite emits at exactly one scope and belongs in its own project:
+ *
+ *   // tenant-scope project (management groups + subscription tenant policy)
+ *   const lz = GovernanceFoundation({});
+ *   // management-group-scope project, deployed to the tenant root group —
+ *   // policy resources also deploy at subscription scope, so the project
+ *   // pins the scope explicitly
+ *   export const scope = deploymentScope("managementGroup");
+ *   const gb = GovernanceBaseline({});
+ *   const lr = LocationRestriction({ locations: ["westeurope"] });
+ *   const al = ActivityLogSink({ workspaceId: "/subscriptions/.../workspaces/audit", location: "westeurope" });
+ *
+ * There is no OrganizationRoot analog — the tenant and its root management
+ * group come from Entra ID, not the resource API, so greenfield and
+ * brownfield both start from the existing tenant.
+ */
+import { ManagementGroup, PolicyAssignment, PolicyDefinition, policies as SubscriptionTenantPolicy } from "../generated/index.js";
+export interface GovernanceFoundationProps {
+    /** Management group the foundation hangs under. Default: the tenant root group. */
+    parentId?: string;
+    /** Block subscriptions from leaving the tenant (default true). */
+    blockSubscriptionsLeavingTenant?: boolean;
+}
+export type GovernanceFoundationResult = {
+    mgSecurity: InstanceType<typeof ManagementGroup>;
+    mgInfrastructure: InstanceType<typeof ManagementGroup>;
+    mgSandbox: InstanceType<typeof ManagementGroup>;
+    mgWorkloads: InstanceType<typeof ManagementGroup>;
+    subscriptionTenantPolicy: InstanceType<typeof SubscriptionTenantPolicy>;
+};
+/**
+ * Security / Infrastructure / Sandbox / Workloads management groups with
+ * subscriptions blocked from leaving the tenant — the same baseline
+ * `landingZoneConfig()` declares. Deploys at tenant scope.
+ */
+export declare const GovernanceFoundation: import("@intentius/chant").CompositeDefinition<GovernanceFoundationProps, GovernanceFoundationResult>;
+export type GovernanceBaselineProps = Record<string, never>;
+export type GovernanceBaselineResult = {
+    definitionDenyClassicResources: InstanceType<typeof PolicyDefinition>;
+    definitionDenyUnmanagedDisks: InstanceType<typeof PolicyDefinition>;
+    assignmentDenyClassicResources: InstanceType<typeof PolicyAssignment>;
+    assignmentDenyUnmanagedDisks: InstanceType<typeof PolicyAssignment>;
+};
+/**
+ * `deny-classic-resources` and `deny-unmanaged-disks` defined and assigned
+ * at the management group the project deploys to (the tenant root group for
+ * the `landingZoneConfig()` baseline). Custom policy definitions cannot
+ * deploy at tenant scope, which is why this is not part of
+ * GovernanceFoundation.
+ */
+export declare const GovernanceBaseline: import("@intentius/chant").CompositeDefinition<GovernanceBaselineProps, GovernanceBaselineResult>;
+export interface LocationRestrictionProps {
+    /** The only locations resources may be created in ("global" is always excepted). */
+    locations: string[];
+}
+export type LocationRestrictionResult = {
+    definitionLocationRestriction: InstanceType<typeof PolicyDefinition>;
+    assignmentLocationRestriction: InstanceType<typeof PolicyAssignment>;
+};
+export declare const LocationRestriction: import("@intentius/chant").CompositeDefinition<LocationRestrictionProps, LocationRestrictionResult>;
+export interface ActivityLogSinkProps {
+    /** Resource id of the Log Analytics workspace activity logs flow into. */
+    workspaceId: string;
+    /** Region for the assignment's managed identity (DeployIfNotExists remediation). */
+    location: string;
+}
+export type ActivityLogSinkResult = {
+    assignmentActivityLogSink: InstanceType<typeof PolicyAssignment>;
+};
+/**
+ * Assigns the built-in DeployIfNotExists policy that streams every
+ * subscription's activity log into a Log Analytics workspace — current and
+ * future subscriptions under the management group alike.
+ */
+export declare const ActivityLogSink: import("@intentius/chant").CompositeDefinition<ActivityLogSinkProps, ActivityLogSinkResult>;
+//# sourceMappingURL=landing-zone.d.ts.map

package/dist/composites/landing-zone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"landing-zone.d.ts","sourceRoot":"","sources":["../../src/composites/landing-zone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,QAAQ,IAAI,wBAAwB,EACrC,MAAM,cAAc,CAAC;AA8CtB,MAAM,WAAW,yBAAyB;IACxC,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,+BAA+B,CAAC,EAAE,OAAO,CAAC;CAC3C;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,YAAY,CAAC,OAAO,eAAe,CAAC,CAAC;IACjD,gBAAgB,EAAE,YAAY,CAAC,OAAO,eAAe,CAAC,CAAC;IACvD,SAAS,EAAE,YAAY,CAAC,OAAO,eAAe,CAAC,CAAC;IAChD,WAAW,EAAE,YAAY,CAAC,OAAO,eAAe,CAAC,CAAC;IAClD,wBAAwB,EAAE,YAAY,CAAC,OAAO,wBAAwB,CAAC,CAAC;CACzE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,uGAsBP,CAAC;AAM3B,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAE5D,MAAM,MAAM,wBAAwB,GAAG;IACrC,8BAA8B,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACtE,4BAA4B,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACpE,8BAA8B,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACtE,4BAA4B,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;CACrE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,mGAOP,CAAC;AAMzB,MAAM,WAAW,wBAAwB;IACvC,oFAAoF;IACpF,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,6BAA6B,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACrE,6BAA6B,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;CACtE,CAAC;AAEF,eAAO,MAAM,mBAAmB,qGAMP,CAAC;AAM1B,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,yBAAyB,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;CAClE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,eAAe,6FAUP,CAAC"}

package/dist/deep-observe.d.ts

@@ -47,7 +47,7 @@
  * the same ARM JSON `az resource show` was relaying, so the normalization below
  * is untouched by the move.
  */
-import type { AzHttp } from "./op/activities/az-apply.js";
+import { type AzHttp } from "./op/activities/az-apply.js";
 import type { DeepNormalizationHooks, DeepObservationResult } from "@intentius/chant/lexicon";
 /**
  * Server-populated wherever they appear — matched on the final path segment,
@@ -60,6 +60,17 @@ import type { DeepNormalizationHooks, DeepObservationResult } from "@intentius/c
  * see the module doc — precisely so this list never has to touch `id` at all.)
  */
 export declare const AZURE_READ_ONLY_NAMES: ReadonlySet<string>;
+/**
+ * Server-computed surfaces ARM fills in on its own (#1214, the AKS row of the
+ * CC round-trip): a managed cluster always comes back with `fqdn`,
+ * `currentKubernetesVersion` and `nodeResourceGroup` whether or not the
+ * declaration said anything about them. Unlike `AZURE_READ_ONLY_NAMES` these
+ * are counterpart-gated rather than pruned outright: `nodeResourceGroup` IS
+ * declarable at create time, so a declared value is still compared — only the
+ * purely server-filled appearance is noise. Sparse and evidence-based, like
+ * `AZURE_SERVICE_DEFAULTS`.
+ */
+export declare const AZURE_SERVER_COMPUTED_NAMES: ReadonlySet<string>;
 /**
  * ARM service defaults, per type, as index-erased property paths. Subtracted
  * only where source never declared the property — cdk-real-drift's default

package/dist/deep-observe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deep-observe.d.ts","sourceRoot":"","sources":["../src/deep-observe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,KAAK,EAGV,sBAAsB,EACtB,qBAAqB,EAGtB,MAAM,0BAA0B,CAAC;AAiDlC;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAKpD,CAAC;AAUH;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAI1E,CAAC;AAuCF;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,EAAE,sBAiCzC,CAAC;AAIF,MAAM,WAAW,uBAAuB;IACtC,4FAA4F;IAC5F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CAkEhC"}
+{"version":3,"file":"deep-observe.d.ts","sourceRoot":"","sources":["../src/deep-observe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAIH,OAAO,EAA4B,KAAK,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,KAAK,EAGV,sBAAsB,EACtB,qBAAqB,EAGtB,MAAM,0BAA0B,CAAC;AA+DlC;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CASpD,CAAC;AAUH;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAI1D,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAI1E,CAAC;AA+DF;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,EAAE,sBAyEzC,CAAC;AAIF,MAAM,WAAW,uBAAuB;IACtC,4FAA4F;IAC5F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CAkEhC"}

package/dist/deploy-scopes.d.ts

@@ -0,0 +1,67 @@
+/**
+ * ARM deployment-scope metadata (#1545).
+ *
+ * The generated lexicon records `deployScopes` for resources that exist
+ * somewhere other than plain resource-group scope (management groups,
+ * subscription aliases, policy definitions). This module loads that map and
+ * resolves which deployment scope a template targets, shared by the
+ * serializer (picks the template $schema) and AZR030 (flags resources
+ * emitted at a scope their schema does not define).
+ *
+ * Lazy-loaded and cached for the lifetime of the process.
+ */
+import { DECLARABLE_MARKER, type Declarable } from "@intentius/chant/declarable";
+export type DeployScope = "resourceGroup" | "subscription" | "managementGroup" | "tenant";
+/** Marker symbol for deployment-scope pin identification. */
+export declare const DEPLOYMENT_SCOPE_MARKER: unique symbol;
+/**
+ * A deployment-scope pin — wraps a scope into a Declarable the serializer
+ * uses instead of inferring the scope from the resource set.
+ */
+export interface DeploymentScope extends Declarable {
+    readonly [DEPLOYMENT_SCOPE_MARKER]: true;
+    readonly [DECLARABLE_MARKER]: true;
+    readonly lexicon: "azure";
+    readonly entityType: "chant:azure:deploymentScope";
+    readonly scope: DeployScope;
+}
+/** Type guard for DeploymentScope. */
+export declare function isDeploymentScope(value: unknown): value is DeploymentScope;
+/**
+ * Pin the project's deployment scope. Without a pin the serializer picks
+ * the scope every resource supports that is closest to a resource group,
+ * which cannot tell a management-group policy project from a subscription
+ * one — policy definitions and assignments deploy at both. One pin per
+ * project; AZR030 flags resources whose schema does not define the pinned
+ * scope.
+ *
+ * @example
+ * ```ts
+ * export const scope = deploymentScope("managementGroup");
+ * ```
+ */
+export declare function deploymentScope(scope: DeployScope): DeploymentScope;
+/** Template $schema URL per deployment scope. */
+export declare const TEMPLATE_SCHEMAS: Record<DeployScope, string>;
+/**
+ * Load per-resource deployment scopes from the lexicon JSON.
+ * Only resources with a non-default scope set appear; everything else is
+ * plain resource-group scope. Result is cached after first call.
+ */
+export declare function loadDeployScopes(): Map<string, DeployScope[]>;
+/** Deployment scopes for one ARM resource type (defaults to resource group). */
+export declare function deployScopesFor(resourceType: string): DeployScope[];
+/**
+ * Resolve the deployment scope for a template containing the given resource
+ * types: the scopes every resource supports, intersected.
+ *
+ * Resource-group scope wins whenever the intersection allows it (the
+ * pre-#1545 behavior for every template that could already be emitted).
+ * Otherwise the scope closest to a resource group is chosen. An empty
+ * intersection has no valid single-template answer; resource-group scope is
+ * returned and AZR030 reports the resources that cannot deploy there.
+ */
+export declare function resolveTemplateScope(resourceTypes: Iterable<string>): DeployScope;
+/** Map a template $schema URL back to its deployment scope. */
+export declare function scopeForTemplateSchema(schema: unknown): DeployScope;
+//# sourceMappingURL=deploy-scopes.d.ts.map

package/dist/deploy-scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-scopes.d.ts","sourceRoot":"","sources":["../src/deploy-scopes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAE,iBAAiB,EAAE,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEjF,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,cAAc,GAAG,iBAAiB,GAAG,QAAQ,CAAC;AAE1F,6DAA6D;AAC7D,eAAO,MAAM,uBAAuB,eAA4C,CAAC;AAEjF;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,QAAQ,CAAC,CAAC,uBAAuB,CAAC,EAAE,IAAI,CAAC;IACzC,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;CAC7B;AAED,sCAAsC;AACtC,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAO1E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,eAAe,CAQnE;AAED,iDAAiD;AACjD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAKxD,CAAC;AAeF;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CA2B7D;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,EAAE,CAEnE;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,WAAW,CAiBjF;AAED,+DAA+D;AAC/D,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,GAAG,WAAW,CAOnE"}

package/dist/export-resources.d.ts

@@ -3,5 +3,6 @@ export declare function exportResources(options: {
     environment: string;
     selector?: ResourceSelector;
     owned?: boolean;
+    verbatim?: boolean;
 }): Promise<ExportedTemplate>;
 //# sourceMappingURL=export-resources.d.ts.map

package/dist/export-resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"export-resources.d.ts","sourceRoot":"","sources":["../src/export-resources.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAKnF,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgB5B"}
+{"version":3,"file":"export-resources.d.ts","sourceRoot":"","sources":["../src/export-resources.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAyEnF,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmB5B"}

package/dist/generated/index.d.ts

@@ -945,6 +945,9 @@ export declare const managedNetworks: new (props: Record<string, unknown>, attri
 export declare const managedNetworks_managedNetworkGroups: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const managedNetworks_managedNetworkPeeringPolicies: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const ManagementConfigurations: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const ManagementGroup: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const managementGroups_settings: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const ManagementGroupSubscription: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const manufacturingDataServices: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const maps: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const maps_discoverySources: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
@@ -1150,6 +1153,13 @@ export declare const peeringServices_prefixes: new (props: Record<string, unknow
 export declare const pipelineGroups: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const pipelines_flowProfiles: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const playwrightWorkspaces: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const policies: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const PolicyAssignment: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const PolicyDefinition: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const policyDefinitions_versions: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const PolicyExemption: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const PolicySetDefinition: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const policySetDefinitions_versions: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const pools_snapshots: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const pools_volumes: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const Portaldashboards: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
@@ -1760,6 +1770,7 @@ export declare const streamingjobs_inputs: new (props: Record<string, unknown>,
 export declare const streamingjobs_outputs: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const streamingjobs_transformations: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const Subnet: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
+export declare const SubscriptionAlias: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const supercomputers: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const supercomputers_nodePools: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
 export declare const Synapseworkspaces: new (props: Record<string, unknown>, attributes?: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, string>;
@@ -3739,8 +3750,10 @@ export declare const CostManagementscheduledActions_ScheduledActionProperties: n
 export declare const CostManagementscheduledActions_SystemAssignedServiceIdentity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const CreateDataLakeAnalyticsAccountPropertiesOrDataLakeAnalyticsAccountProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const CreateDataLakeStoreAccountPropertiesOrDataLakeStoreAccountProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const CreateManagementGroupPropertiesOrManagementGroupProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const CreateNetworkMappingInputProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const CreateOrUpdateComputePolicyPropertiesOrComputePolicyProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const CreateOrUpdateSettingsPropertiesOrHierarchySettingsProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const CreateOrUpdateTrustedIdProviderPropertiesOrTrustedIdProviderProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const CreateOrUpdateVirtualNetworkRulePropertiesOrVirtualNetworkRuleProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const CreatePolicyInputProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
@@ -7860,6 +7873,8 @@ export declare const ManagedTransparentDataEncryptionProperties: new (props: Rec
 export declare const ManagedVirtualNetwork: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const ManagementConfigurationProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const ManagementConfigurations_ManagementConfigurationProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const ManagementGroup_CreateManagementGroupPropertiesOrManagementGroupProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const managementGroups_settings_CreateOrUpdateSettingsPropertiesOrHierarchySettingsProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const ManagementPolicyProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const manufacturingDataServices_ManagedServiceIdentity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const manufacturingDataServices_MdsResourceProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
@@ -9938,9 +9953,31 @@ export declare const PlaywrightWorkspaceProperties: new (props: Record<string, u
 export declare const playwrightWorkspaces_ManagedServiceIdentity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const playwrightWorkspaces_PlaywrightWorkspaceProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const playwrightWorkspaces_UserAssignedIdentity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyAssignment_Identity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyAssignment_IdentityUserAssignedIdentities: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyAssignment_PolicyAssignmentProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyAssignmentProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyDefinition_Identity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyDefinition_IdentityUserAssignedIdentities: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyDefinition_PolicyDefinitionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyDefinitionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const policyDefinitions_versions_Identity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const policyDefinitions_versions_IdentityUserAssignedIdentities: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const policyDefinitions_versions_PolicyDefinitionVersionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyDefinitionVersionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyExemption_PolicyExemptionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicyExemptionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const PolicyModelProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const PolicyProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const PolicyRestrictionContractProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicySetDefinition_Identity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicySetDefinition_IdentityUserAssignedIdentities: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicySetDefinition_PolicySetDefinitionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicySetDefinitionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const policySetDefinitions_versions_Identity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const policySetDefinitions_versions_IdentityUserAssignedIdentities: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const policySetDefinitions_versions_PolicySetDefinitionVersionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PolicySetDefinitionVersionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const pools_snapshots_ManagedServiceIdentity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const pools_snapshots_SnapshotProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const pools_snapshots_UserAssignedIdentity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
@@ -10491,6 +10528,7 @@ export declare const Purviewaccounts_privateEndpointConnections_IdentityUserAssi
 export declare const Purviewaccounts_privateEndpointConnections_PrivateEndpointConnectionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const Purviewaccounts_privateEndpointConnections_UserAssignedIdentity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const Purviewaccounts_UserAssignedIdentity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const PutAliasRequestPropertiesOrSubscriptionAliasResponseProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const Quantumworkspaces_ManagedServiceIdentity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const Quantumworkspaces_UserAssignedIdentity: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const Quantumworkspaces_WorkspaceResourceProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
@@ -14226,6 +14264,7 @@ export declare const Subnet_Sku: new (props: Record<string, unknown>) => import(
 export declare const Subnet_VirtualApplianceSkuProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const Subnet_VirtualNetworkGatewaySku: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const SubnetProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
+export declare const SubscriptionAlias_PutAliasRequestPropertiesOrSubscriptionAliasResponseProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const SubscriptionProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const SubvolumeProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;
 export declare const SummaryLogsProperties: new (props: Record<string, unknown>) => import("packages/core/src").Declarable & Record<string, unknown>;