@spottoai/types-package 1.0.2-beta.22 → 1.0.2-beta.220

package/LICENSE

@@ -1,43 +1,21 @@
-PROPRIETARY LICENSE AGREEMENT
+MIT License
 
 Copyright (c) 2024 Spotto AI (www.spotto.ai)
 
-This software and associated documentation files (the "Software") are the proprietary 
-and confidential information of Spotto AI. The Software is made available publicly 
-solely for internal use by Spotto AI and its authorized projects.
-
-RESTRICTIONS:
-
-1. NO PERMISSION TO USE: Except as expressly stated below, no person or entity is 
-   granted any right, title, or interest in or to the Software.
-
-2. INTERNAL USE ONLY: The Software may only be used internally by Spotto AI and its 
-   authorized projects for development, testing, and deployment purposes.
-
-3. NO REDISTRIBUTION: The Software may not be redistributed, sold, leased, or 
-   otherwise made available to third parties.
-
-4. NO DERIVATIVE WORKS: No derivative works based on the Software may be created 
-   without explicit written permission from Spotto AI.
-
-5. NO REVERSE ENGINEERING: Reverse engineering, disassembly, or decompilation of 
-   the Software is strictly prohibited.
-
-6. NO COMMERCIAL USE: Commercial use of the Software by any entity other than 
-   Spotto AI is strictly prohibited.
-
-DISCLAIMER:
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, 
-INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A 
-PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT 
-HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION 
-OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE 
-SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-VIOLATION:
-
-Any unauthorized use, distribution, or modification of this Software constitutes 
-a violation of this license agreement and may result in legal action.
-
-For licensing inquiries, contact: contact@spotto.ai
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,23 +1,17 @@
 # Types Package
 
-A shared TypeScript interfaces package for private repositories. This package contains common interfaces that can be reused across your API, frontend, and backend projects.
-**⚠️ RESTRICTED USE - INTERNAL SPOTTO AI ONLY ⚠️**
-
-This is a proprietary TypeScript interfaces package for internal use by Spotto AI (www.spotto.ai) only. This package contains common interfaces that can be reused across Spotto AI's API, frontend, and backend projects.
-
-**IMPORTANT**: This repository is made public solely for internal sharing between Spotto AI projects. External use, distribution, or modification is strictly prohibited. See LICENSE file for full terms.
+A shared TypeScript interfaces package. This package contains common interfaces that can be reused across your API, frontend, and backend projects.
 
 ## Features
 
 - **Shared Interfaces**: Common TypeScript interfaces for API requests/responses, database models, frontend components, and backend services
-- **Git Dependencies**: Designed to work with Git dependencies for private repositories
+- **Git Dependencies**: Designed to work with Git dependencies
 - **TypeScript Declaration Files**: Built with declaration files for better IDE support
 - **Modular Structure**: Organized by domain (API, Database, Frontend, Backend)
 
 ## Installation
 
-Since this is a private repository, you'll need to use Git dependencies instead of npm. Add this to your consuming project's `package.json`:
-Since this is an internal Spotto AI package, you'll need to use Git dependencies. Add this to your consuming project's `package.json`:
+Add this to your consuming project's `package.json`:
 
 ```json
 {
@@ -114,7 +108,4 @@ This package follows semantic versioning. When making changes:
 
 ## License
 
-MIT License - see LICENSE file for details
-**PROPRIETARY LICENSE** - This software is proprietary to Spotto AI and is made available publicly solely for internal use. External use, distribution, or modification is strictly prohibited. See LICENSE file for full terms and restrictions.
-
-For licensing inquiries, contact: legal@spotto.ai
+MIT License - see LICENSE file for details

package/dist/accounts/accounts.d.ts

@@ -1,10 +1,26 @@
 import { SurveyResponse } from '../company';
+import type { EffortEstimateProfileName } from '../azure/recommendations';
+export type SubscriptionType = 'Production' | 'Non-Production' | 'Mixed';
+export type CloudAccountAuthMode = 'servicePrincipal' | 'delegatedUser';
+export type CloudAccountTenantSyncSource = 'manual' | 'scheduled' | 'onboarding';
+export type CloudAccountTenantSyncStatus = 'Idle' | 'Requested' | 'Processing' | 'Completed' | 'Error';
+export type AzureDelegatedOnboardingStatus = 'subscriptionSelectionRequired' | 'active' | 'setupExpired';
+export type AzureDelegatedAuthErrorCode = 'invalid_grant' | 'interaction_required' | 'consent_required' | 'claims_challenge' | 'forbidden' | 'unknown';
+export type AzureDelegatedOAuthStatePhase = 'discoverTenants' | 'tenantSelectionRequired' | 'tenantConsent' | 'completed' | 'failed';
 export interface CloudAccount {
+    /** Partition Key */
     companyId: string;
+    /** Row Key (Azure Client ID, AWS Access Key ID) */
     id: string;
     name: string;
     companyName: string;
+    /** AWS, Azure, GCP, etc. */
     provider: string;
+    /** Missing authMode should be treated as servicePrincipal by consumers for backward compatibility. */
+    authMode?: CloudAccountAuthMode;
+    /** Optional list of subscription group names for this cloud account */
+    groupNames?: string[];
+    /** Azure Tenant ID */
     tenantId?: string;
     secret?: string;
     secretExpiresAt?: Date;
@@ -13,14 +29,50 @@ export interface CloudAccount {
     createdBy: string;
     status: string;
     objectives?: SurveyResponse[];
+    /** Preferred recommendation effort-estimate profile for this cloud account. */
+    effortProfile?: EffortEstimateProfileName;
+    writeSecret?: string;
+    writeSecretExpiresAt?: Date;
+    writeClientId?: string;
+    writeBitmask?: number;
+    readBitmask?: number;
+    tenantSyncStatus?: CloudAccountTenantSyncStatus;
+    tenantSyncRequestedAt?: Date;
+    tenantSyncStartedAt?: Date;
+    tenantSyncCompletedAt?: Date;
+    tenantSyncError?: string;
+    tenantSyncSource?: CloudAccountTenantSyncSource;
+    /** Internal delegated-user token cache. Do not expose this field in public API DTOs. */
+    delegatedTokenCache?: string;
+    onboardingStatus?: AzureDelegatedOnboardingStatus;
+    delegatedSetupExpiresAt?: Date | string;
+    delegatedTrialStartedAt?: Date | string;
+    delegatedTrialExpiresAt?: Date | string;
+    reauthRequired?: boolean;
+    lastAuthErrorCode?: AzureDelegatedAuthErrorCode;
+    lastAuthErrorAt?: Date | string;
+    connectedUserObjectId?: string;
+    connectedUserTenantId?: string;
+    connectedUserEmail?: string;
+    connectedUserDisplayName?: string;
+    connectedAt?: Date | string;
+    lastTokenRefreshAt?: Date | string;
+    lastDelegatedTokenCacheUpdatedAt?: Date | string;
 }
-export interface SubscriptionAccount {
-    id: string;
-    companyId: string;
+export type PublicCloudAccountDto = Omit<CloudAccount, 'delegatedTokenCache' | 'secret' | 'writeSecret'>;
+export interface SubscriptionInfoBase {
     name: string;
+    friendlyName?: string;
     cloudAccountId: string;
     cloudAccountName: string;
+    /** Optional group name for subscription-level grouping */
+    groupName?: string;
+    /** Optional emoji shortcode (Slack-style, e.g. "/face") */
+    icon?: string;
+    /** Optional subscription type (Production, Non-Production, Mixed) */
+    subscriptionType?: SubscriptionType;
     status?: string;
+    statusLabel?: string;
     error?: string;
     lastUpdated?: string;
     quotaId?: string;
@@ -29,5 +81,18 @@ export interface SubscriptionAccount {
     currencySymbol?: string;
     foundCurrency?: boolean;
     ready?: boolean;
+    secureScore?: number;
+    showAmortizedCosts?: boolean;
+    totalCost?: number;
+    billingItems?: number;
+    activityItems?: number;
+    eventId?: string;
+    readBitmask?: number;
+}
+export interface SubscriptionAccount extends SubscriptionInfoBase {
+    /** Partition Key (Azure Subscription ID) */
+    id: string;
+    /** Row Key */
+    companyId: string;
 }
 //# sourceMappingURL=accounts.d.ts.map

package/dist/accounts/accounts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accounts.d.ts","sourceRoot":"","sources":["../../src/accounts/accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB"}
+{"version":3,"file":"accounts.d.ts","sourceRoot":"","sources":["../../src/accounts/accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,gBAAgB,GAAG,OAAO,CAAC;AACzE,MAAM,MAAM,oBAAoB,GAAG,kBAAkB,GAAG,eAAe,CAAC;AACxE,MAAM,MAAM,4BAA4B,GAAG,QAAQ,GAAG,WAAW,GAAG,YAAY,CAAC;AACjF,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;AACvG,MAAM,MAAM,8BAA8B,GAAG,+BAA+B,GAAG,QAAQ,GAAG,cAAc,CAAC;AACzG,MAAM,MAAM,2BAA2B,GACnC,eAAe,GACf,sBAAsB,GACtB,kBAAkB,GAClB,kBAAkB,GAClB,WAAW,GACX,SAAS,CAAC;AACd,MAAM,MAAM,6BAA6B,GACrC,iBAAiB,GACjB,yBAAyB,GACzB,eAAe,GACf,WAAW,GACX,QAAQ,CAAC;AAEb,MAAM,WAAW,YAAY;IAC3B,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,sGAAsG;IACtG,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,+EAA+E;IAC/E,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IAChD,qBAAqB,CAAC,EAAE,IAAI,CAAC;IAC7B,mBAAmB,CAAC,EAAE,IAAI,CAAC;IAC3B,qBAAqB,CAAC,EAAE,IAAI,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IAChD,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,8BAA8B,CAAC;IAClD,uBAAuB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACxC,uBAAuB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACxC,uBAAuB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACxC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iBAAiB,CAAC,EAAE,2BAA2B,CAAC;IAChD,eAAe,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACnC,gCAAgC,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;CAClD;AAED,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,YAAY,EAAE,qBAAqB,GAAG,QAAQ,GAAG,aAAa,CAAC,CAAC;AAEzG,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,4CAA4C;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,cAAc;IACd,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/accounts/azureSpSetup.d.ts

@@ -0,0 +1,249 @@
+export type AzureSpSetupPhase = 'created' | 'authorizing' | 'authorized' | 'tenantSelectionRequired' | 'planning' | 'readyToExecute' | 'executing' | 'completed' | 'needsAdminAction' | 'failed' | 'cancelled' | 'expired';
+export type AzureSpSetupResult = 'none' | 'complete' | 'partial' | 'needsAdminAction' | 'failed' | 'cancelled' | 'expired';
+export type AzureSpSetupMode = 'createCloudAccount' | 'grantAdditionalPermissions';
+export type AzureSpSetupErrorCode = 'access_denied' | 'duplicate_tenant' | 'target_cloud_account_required' | 'target_cloud_account_not_found' | 'target_cloud_account_tenant_mismatch' | 'target_cloud_account_not_service_principal' | 'insufficient_entra_permission' | 'insufficient_rbac_permission' | 'tenant_selection_required' | 'no_readable_subscription_selected' | 'subscription_reader_assignment_failed' | 'service_principal_validation_failed' | 'graph_admin_consent_failed' | 'billing_export_storage_failed' | 'billing_export_failed' | 'billing_export_unavailable' | 'provider_registration_failed' | 'optional_assignment_failed' | 'setup_expired' | 'setup_cancelled' | 'azure_propagation_pending' | 'unknown';
+export type AzureSpPermissionRequirement = 'required' | 'recommended' | 'optional';
+export type AzureSpPermissionStatus = 'notStarted' | 'running' | 'succeeded' | 'failed' | 'skipped' | 'alreadyExists';
+export type AzureSpPermissionCapabilityStatus = 'unknown' | 'likelyAllowed' | 'likelyMissing';
+export type AzureSpPermissionFailureBehavior = 'blockSetup' | 'completePartial' | 'warnOnly';
+export type AzureSpPermissionScopeKind = 'tenant' | 'application' | 'servicePrincipal' | 'subscription' | 'tenantRoot' | 'managementGroup' | 'provider' | 'storageAccount' | 'storageContainer' | 'costManagementExport';
+export type AzureSpPermissionKey = 'entraApplication' | 'entraServicePrincipal' | 'entraClientSecret' | 'subscriptionReader' | 'tenantRootReader' | 'monitoringReader' | 'logAnalyticsReader' | 'rootManagementGroupReader' | 'managementGroupReader' | 'reservationsReader' | 'savingsPlanReader' | 'graphApplicationReadAll' | 'costManagementProviderRegistration' | 'billingExportStorage' | 'billingExportContainer' | 'billingExportStorageBlobReader' | 'billingExportActualDaily' | 'billingExportAmortizedDaily' | 'billingExportActualBackfill' | 'billingExportAmortizedBackfill' | 'customWriteRoleDefinition' | 'customWriteRoleAssignment';
+export type AzureSpOperationKind = 'discoverApplication' | 'createApplication' | 'discoverServicePrincipal' | 'createServicePrincipal' | 'createClientSecret' | 'assignAzureRole' | 'grantGraphAppRole' | 'registerProvider' | 'prepareStorage' | 'prepareContainer' | 'createOrUpdateCostExport' | 'queueCostExportRun' | 'createOrUpdateCustomRole' | 'validateServicePrincipal' | 'queueFirstSync';
+export type AzureSpOperationPlannedAction = 'none' | 'create' | 'update' | 'grant' | 'queue' | 'skip';
+export type AzureSpOperationCurrentState = 'missing' | 'alreadyExists' | 'unavailable' | 'unknown';
+export type AzureSpOperationResultStatus = 'notStarted' | 'running' | 'alreadyExists' | 'created' | 'updated' | 'granted' | 'queued' | 'skipped' | 'unavailable' | 'failed';
+export type AzureSpBillingExportMode = 'skip' | 'reuseExisting' | 'useExistingStorage' | 'createStorage';
+export type AzureSpBillingExportDataset = 'ActualCost' | 'AmortizedCost';
+export type AzureSpBillingExportEffectiveDefinitionType = 'ActualCost' | 'Usage' | 'AmortizedCost';
+export type AzureSpBillingExportResultStatus = 'notStarted' | 'existing' | 'created' | 'updated' | 'createdRunQueued' | 'queued' | 'requeued' | 'failed' | 'unavailable' | 'skipped';
+export interface AzureSpSetupStartRequest {
+    redirectAfter?: string;
+    mode?: AzureSpSetupMode;
+    targetCloudAccountId?: string;
+}
+export interface AzureSpSetupStartResponse {
+    setupId: string;
+    authorizationUrl: string;
+    expiresAt: string;
+}
+export interface AzureSpSetupTenant {
+    tenantId: string;
+    displayName?: string;
+    label: string;
+    isAlreadyConnected: boolean;
+    connectedCloudAccountId?: string;
+    requiresTenantAuthorization: boolean;
+}
+export interface AzureSpSetupSubscriptionOption {
+    subscriptionId: string;
+    displayName: string;
+    tenantId: string;
+    state?: string;
+    isVisible: boolean;
+    isReadableCandidate: boolean;
+    isSelectedByDefault: boolean;
+    warningCode?: string;
+    warningMessage?: string;
+}
+export interface AzureSpPermissionManifestItem {
+    key: AzureSpPermissionKey;
+    requirement: AzureSpPermissionRequirement;
+    displayName: string;
+    userFacingLabel: string;
+    description: string;
+    scopeKind: AzureSpPermissionScopeKind;
+    defaultSelected: boolean;
+    userDeselectable: boolean;
+    requiredPrivilege: string;
+    detectOperation: AzureSpOperationKind;
+    applyOperation: AzureSpOperationKind;
+    failureBehavior: AzureSpPermissionFailureBehavior;
+}
+export interface AzureSpSetupPermissionPlanItem {
+    key: AzureSpPermissionKey;
+    instanceKey: string;
+    requirement: AzureSpPermissionRequirement;
+    scopeKind: AzureSpPermissionScopeKind;
+    displayName: string;
+    userFacingLabel: string;
+    description: string;
+    scope: string;
+    externalResourceId?: string;
+    idempotencyKey: string;
+    roleDefinitionName?: string;
+    requiredPrivilege: string;
+    selectedByDefault: boolean;
+    isDeselectable: boolean;
+    capabilityStatus: AzureSpPermissionCapabilityStatus;
+    capabilityReason?: string;
+    currentState: AzureSpOperationCurrentState;
+    plannedAction: AzureSpOperationPlannedAction;
+    detectOperation: AzureSpOperationKind;
+    applyOperation: AzureSpOperationKind;
+    failureBehavior: AzureSpPermissionFailureBehavior;
+    status: AzureSpPermissionStatus;
+    errorCode?: AzureSpSetupErrorCode;
+    message?: string;
+}
+export interface AzureSpSetupOperationResult {
+    operationKey: string;
+    permissionKey?: AzureSpPermissionKey;
+    instanceKey?: string;
+    operationKind: AzureSpOperationKind;
+    idempotencyKey: string;
+    externalResourceId?: string;
+    status: AzureSpOperationResultStatus;
+    safeMessage?: string;
+    errorCode?: AzureSpSetupErrorCode;
+    startedAt?: string;
+    completedAt?: string;
+}
+export interface AzureSpSetupProgressStep {
+    key: 'microsoftAuthorization' | 'tenantSelection' | 'servicePrincipal' | 'credential' | 'readerAccess' | 'optionalPermissions' | 'billingExports' | 'spottoValidation' | 'cloudAccountSaved' | 'firstSyncQueued';
+    status: AzureSpPermissionStatus;
+    message?: string;
+}
+export interface AzureSpBillingExportStorageOption {
+    storageAccountResourceId: string;
+    subscriptionId: string;
+    resourceGroupName: string;
+    storageAccountName: string;
+    location?: string;
+    isFromCompatibleExistingExport: boolean;
+    containerName?: string;
+}
+export interface AzureSpBillingExportDetectedExport {
+    subscriptionId: string;
+    dataset: AzureSpBillingExportDataset;
+    effectiveDefinitionType?: AzureSpBillingExportEffectiveDefinitionType;
+    exportName: string;
+    exportResourceId: string;
+    storageAccountResourceId: string;
+    containerName: string;
+    rootFolderPath?: string;
+    isCompatible: boolean;
+    isActiveDaily?: boolean;
+    canBeReused?: boolean;
+}
+export interface AzureSpBillingExportPlan {
+    enabledByDefault: boolean;
+    selectedByDefault: boolean;
+    defaultContainerName: 'spotto-cost-exports';
+    defaultRootFolderPath: 'spotto';
+    defaultResourceGroupName: 'rg-spotto-cost-exports';
+    defaultLocation: 'australiaeast';
+    detectedCompatibleExports: AzureSpBillingExportDetectedExport[];
+    storageOptions: AzureSpBillingExportStorageOption[];
+    selectedMode?: AzureSpBillingExportMode;
+    selectedReuseDetectedExportResourceIds?: string[];
+    selectedStorageAccountResourceId?: string;
+    selectedContainerName?: string;
+    createStorage?: {
+        subscriptionId: string;
+        resourceGroupName: string;
+        location: string;
+        storageAccountName: string;
+        containerName: string;
+    };
+}
+export interface AzureSpBillingExportResult {
+    subscriptionId: string;
+    dataset?: AzureSpBillingExportDataset;
+    effectiveDefinitionType?: AzureSpBillingExportEffectiveDefinitionType;
+    exportKind: 'recurring' | 'backfill' | 'storage' | 'providerRegistration';
+    exportName?: string;
+    exportResourceId?: string;
+    periodName?: string;
+    status: AzureSpBillingExportResultStatus;
+    storageAccountResourceId?: string;
+    containerName?: string;
+    rootFolderPath?: string;
+    errorCode?: AzureSpSetupErrorCode;
+    message?: string;
+}
+export interface AzureSpSetupStatusResponse {
+    setupId: string;
+    companyId: string;
+    mode: AzureSpSetupMode;
+    phase: AzureSpSetupPhase;
+    result: AzureSpSetupResult;
+    selectedTenantId?: string;
+    targetCloudAccountId?: string;
+    targetCloudAccountName?: string;
+    targetAzureApplicationAppId?: string;
+    permissionManifestVersion?: string;
+    targetPermissionManifestVersion?: string;
+    tenants?: AzureSpSetupTenant[];
+    subscriptions?: AzureSpSetupSubscriptionOption[];
+    permissionPlan?: AzureSpSetupPermissionPlanItem[];
+    billingExportPlan?: AzureSpBillingExportPlan;
+    billingExportResults?: AzureSpBillingExportResult[];
+    operationResults?: AzureSpSetupOperationResult[];
+    progress?: AzureSpSetupProgressStep[];
+    resultCloudAccountId?: string;
+    resultCloudAccountName?: string;
+    errorCode?: AzureSpSetupErrorCode;
+    errorMessage?: string;
+    expiresAt: string;
+    canRetry: boolean;
+    canExecute: boolean;
+    executionId?: string;
+    executionAttempt?: number;
+    leaseExpiresAt?: string;
+}
+export interface AzureSpSetupSelectTenantRequest {
+    tenantId: string;
+}
+export interface AzureSpSetupSelectTenantResponse extends AzureSpSetupStatusResponse {
+    selectedTenantId: string;
+    authorizationUrl?: string;
+}
+export interface AzureSpSetupAuthorizeTenantResponse {
+    setupId: string;
+    authorizationUrl: string;
+    expiresAt: string;
+}
+export interface AzureSpSetupPlanRequest {
+    subscriptionIds: string[];
+    selectedPermissionInstanceKeys?: string[];
+    useTenantRootReader?: boolean;
+    billingExports?: {
+        enabled: boolean;
+        mode?: AzureSpBillingExportMode;
+        reuseDetectedExportResourceIds?: string[];
+        storageAccountResourceId?: string;
+        createStorage?: {
+            subscriptionId: string;
+            resourceGroupName: string;
+            location: string;
+            storageAccountName: string;
+            containerName: string;
+        };
+        containerName?: string;
+    };
+}
+export interface AzureSpSetupPlanResponse extends AzureSpSetupStatusResponse {
+    phase: 'readyToExecute';
+    permissionPlan: AzureSpSetupPermissionPlanItem[];
+    subscriptions: AzureSpSetupSubscriptionOption[];
+}
+export interface AzureSpSetupExecuteRequest {
+    subscriptionIds: string[];
+    selectedPermissionInstanceKeys: string[];
+    billingExports?: AzureSpSetupPlanRequest['billingExports'];
+    cloudAccountName?: string;
+    groupNames?: string[];
+    readBitmask?: number;
+    writeBitmask?: number;
+}
+export type AzureSpSetupExecuteResponse = AzureSpSetupStatusResponse;
+export interface AzureSpSetupExecuteSuccessResponse extends AzureSpSetupStatusResponse {
+    phase: 'completed';
+    result: 'complete' | 'partial';
+    resultCloudAccountId: string;
+}
+export interface AzureSpSetupCancelResponse extends AzureSpSetupStatusResponse {
+    phase: 'cancelled';
+    result: 'cancelled';
+}
+//# sourceMappingURL=azureSpSetup.d.ts.map

package/dist/accounts/azureSpSetup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azureSpSetup.d.ts","sourceRoot":"","sources":["../../src/accounts/azureSpSetup.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GACzB,SAAS,GACT,aAAa,GACb,YAAY,GACZ,yBAAyB,GACzB,UAAU,GACV,gBAAgB,GAChB,WAAW,GACX,WAAW,GACX,kBAAkB,GAClB,QAAQ,GACR,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,kBAAkB,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3H,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,4BAA4B,CAAC;AAEnF,MAAM,MAAM,qBAAqB,GAC7B,eAAe,GACf,kBAAkB,GAClB,+BAA+B,GAC/B,gCAAgC,GAChC,sCAAsC,GACtC,4CAA4C,GAC5C,+BAA+B,GAC/B,8BAA8B,GAC9B,2BAA2B,GAC3B,mCAAmC,GACnC,uCAAuC,GACvC,qCAAqC,GACrC,4BAA4B,GAC5B,+BAA+B,GAC/B,uBAAuB,GACvB,4BAA4B,GAC5B,8BAA8B,GAC9B,4BAA4B,GAC5B,eAAe,GACf,iBAAiB,GACjB,2BAA2B,GAC3B,SAAS,CAAC;AAEd,MAAM,MAAM,4BAA4B,GAAG,UAAU,GAAG,aAAa,GAAG,UAAU,CAAC;AACnF,MAAM,MAAM,uBAAuB,GAAG,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,eAAe,CAAC;AACtH,MAAM,MAAM,iCAAiC,GAAG,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;AAC9F,MAAM,MAAM,gCAAgC,GAAG,YAAY,GAAG,iBAAiB,GAAG,UAAU,CAAC;AAC7F,MAAM,MAAM,0BAA0B,GAClC,QAAQ,GACR,aAAa,GACb,kBAAkB,GAClB,cAAc,GACd,YAAY,GACZ,iBAAiB,GACjB,UAAU,GACV,gBAAgB,GAChB,kBAAkB,GAClB,sBAAsB,CAAC;AAE3B,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,uBAAuB,GACvB,mBAAmB,GACnB,oBAAoB,GACpB,kBAAkB,GAClB,kBAAkB,GAClB,oBAAoB,GACpB,2BAA2B,GAC3B,uBAAuB,GACvB,oBAAoB,GACpB,mBAAmB,GACnB,yBAAyB,GACzB,oCAAoC,GACpC,sBAAsB,GACtB,wBAAwB,GACxB,gCAAgC,GAChC,0BAA0B,GAC1B,6BAA6B,GAC7B,6BAA6B,GAC7B,gCAAgC,GAChC,2BAA2B,GAC3B,2BAA2B,CAAC;AAEhC,MAAM,MAAM,oBAAoB,GAC5B,qBAAqB,GACrB,mBAAmB,GACnB,0BAA0B,GAC1B,wBAAwB,GACxB,oBAAoB,GACpB,iBAAiB,GACjB,mBAAmB,GACnB,kBAAkB,GAClB,gBAAgB,GAChB,kBAAkB,GAClB,0BAA0B,GAC1B,oBAAoB,GACpB,0BAA0B,GAC1B,0BAA0B,GAC1B,gBAAgB,CAAC;AAErB,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;AACtG,MAAM,MAAM,4BAA4B,GAAG,SAAS,GAAG,eAAe,GAAG,aAAa,GAAG,SAAS,CAAC;AACnG,MAAM,MAAM,4BAA4B,GACpC,YAAY,GACZ,SAAS,GACT,eAAe,GACf,SAAS,GACT,SAAS,GACT,SAAS,GACT,QAAQ,GACR,SAAS,GACT,aAAa,GACb,QAAQ,CAAC;AAEb,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,eAAe,GAAG,oBAAoB,GAAG,eAAe,CAAC;AACzG,MAAM,MAAM,2BAA2B,GAAG,YAAY,GAAG,eAAe,CAAC;AACzE,MAAM,MAAM,2CAA2C,GAAG,YAAY,GAAG,OAAO,GAAG,eAAe,CAAC;AACnG,MAAM,MAAM,gCAAgC,GACxC,YAAY,GACZ,UAAU,GACV,SAAS,GACT,SAAS,GACT,kBAAkB,GAClB,QAAQ,GACR,UAAU,GACV,QAAQ,GACR,aAAa,GACb,SAAS,CAAC;AAEd,MAAM,WAAW,wBAAwB;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,EAAE,OAAO,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2BAA2B,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,8BAA8B;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC5C,GAAG,EAAE,oBAAoB,CAAC;IAC1B,WAAW,EAAE,4BAA4B,CAAC;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,0BAA0B,CAAC;IACtC,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,oBAAoB,CAAC;IACtC,cAAc,EAAE,oBAAoB,CAAC;IACrC,eAAe,EAAE,gCAAgC,CAAC;CACnD;AAED,MAAM,WAAW,8BAA8B;IAC7C,GAAG,EAAE,oBAAoB,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,4BAA4B,CAAC;IAC1C,SAAS,EAAE,0BAA0B,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,iCAAiC,CAAC;IACpD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,4BAA4B,CAAC;IAC3C,aAAa,EAAE,6BAA6B,CAAC;IAC7C,eAAe,EAAE,oBAAoB,CAAC;IACtC,cAAc,EAAE,oBAAoB,CAAC;IACrC,eAAe,EAAE,gCAAgC,CAAC;IAClD,MAAM,EAAE,uBAAuB,CAAC;IAChC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,oBAAoB,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,4BAA4B,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,EACC,wBAAwB,GACxB,iBAAiB,GACjB,kBAAkB,GAClB,YAAY,GACZ,cAAc,GACd,qBAAqB,GACrB,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,iBAAiB,CAAC;IACtB,MAAM,EAAE,uBAAuB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iCAAiC;IAChD,wBAAwB,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8BAA8B,EAAE,OAAO,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kCAAkC;IACjD,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,2BAA2B,CAAC;IACrC,uBAAuB,CAAC,EAAE,2CAA2C,CAAC;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,wBAAwB,EAAE,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oBAAoB,EAAE,qBAAqB,CAAC;IAC5C,qBAAqB,EAAE,QAAQ,CAAC;IAChC,wBAAwB,EAAE,wBAAwB,CAAC;IACnD,eAAe,EAAE,eAAe,CAAC;IACjC,yBAAyB,EAAE,kCAAkC,EAAE,CAAC;IAChE,cAAc,EAAE,iCAAiC,EAAE,CAAC;IACpD,YAAY,CAAC,EAAE,wBAAwB,CAAC;IACxC,sCAAsC,CAAC,EAAE,MAAM,EAAE,CAAC;IAClD,gCAAgC,CAAC,EAAE,MAAM,CAAC;IAC1C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,aAAa,CAAC,EAAE;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,2BAA2B,CAAC;IACtC,uBAAuB,CAAC,EAAE,2CAA2C,CAAC;IACtE,UAAU,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,sBAAsB,CAAC;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,gCAAgC,CAAC;IACzC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,iBAAiB,CAAC;IACzB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,OAAO,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,8BAA8B,EAAE,CAAC;IACjD,cAAc,CAAC,EAAE,8BAA8B,EAAE,CAAC;IAClD,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C,oBAAoB,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACpD,gBAAgB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACjD,QAAQ,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACtC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gCAAiC,SAAQ,0BAA0B;IAClF,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,mCAAmC;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,8BAA8B,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1C,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,cAAc,CAAC,EAAE;QACf,OAAO,EAAE,OAAO,CAAC;QACjB,IAAI,CAAC,EAAE,wBAAwB,CAAC;QAChC,8BAA8B,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1C,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,aAAa,CAAC,EAAE;YACd,cAAc,EAAE,MAAM,CAAC;YACvB,iBAAiB,EAAE,MAAM,CAAC;YAC1B,QAAQ,EAAE,MAAM,CAAC;YACjB,kBAAkB,EAAE,MAAM,CAAC;YAC3B,aAAa,EAAE,MAAM,CAAC;SACvB,CAAC;QACF,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,wBAAyB,SAAQ,0BAA0B;IAC1E,KAAK,EAAE,gBAAgB,CAAC;IACxB,cAAc,EAAE,8BAA8B,EAAE,CAAC;IACjD,aAAa,EAAE,8BAA8B,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,0BAA0B;IACzC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,8BAA8B,EAAE,MAAM,EAAE,CAAC;IACzC,cAAc,CAAC,EAAE,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAErE,MAAM,WAAW,kCAAmC,SAAQ,0BAA0B;IACpF,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA2B,SAAQ,0BAA0B;IAC5E,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;CACrB"}

package/dist/accounts/azureSpSetup.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=azureSpSetup.js.map

package/dist/accounts/azureSpSetup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azureSpSetup.js","sourceRoot":"","sources":["../../src/accounts/azureSpSetup.ts"],"names":[],"mappings":""}

package/dist/accounts/index.d.ts

@@ -1,2 +1,6 @@
 export * from './accounts';
+export * from './azureSpSetup';
+export * from './writePermissions';
+export * from './readPermissions';
+export * from './validation';
 //# sourceMappingURL=index.d.ts.map

package/dist/accounts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/accounts/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/accounts/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC"}

package/dist/accounts/index.js

@@ -15,4 +15,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./accounts"), exports);
+__exportStar(require("./azureSpSetup"), exports);
+__exportStar(require("./writePermissions"), exports);
+__exportStar(require("./readPermissions"), exports);
+__exportStar(require("./validation"), exports);
 //# sourceMappingURL=index.js.map

package/dist/accounts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/accounts/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/accounts/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,iDAA+B;AAC/B,qDAAmC;AACnC,oDAAkC;AAClC,+CAA6B"}

package/dist/accounts/readPermissions.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Subscription-scoped read capability bitmask enum.
+ * Each capability maps to a single bit.
+ */
+export declare enum SubscriptionReadPermission {
+    /** Permission to read Azure Monitor metrics. */
+    MonitoringReader = 1,// 1
+    /** Permission to run Log Analytics / App Insights data queries. */
+    LogAnalyticsDataReader = 2
+}
+/**
+ * Cloud-account-scoped read capability bitmask enum.
+ * Each capability maps to a single bit.
+ */
+export declare enum CloudAccountReadPermission {
+    /** Permission to read management group entities. */
+    ManagementGroupReader = 1,// 1
+    /** Permission to read reservation resources and related consumption artifacts. */
+    ReservationsReader = 2,// 2
+    /** Permission to read savings plan resources. */
+    SavingsPlanReader = 4,// 4
+    /** Permission to read Microsoft Graph applications/service principals. */
+    GraphApplicationReadAll = 8
+}
+/**
+ * Metadata for a subscription-scoped read capability.
+ */
+export interface SubscriptionReadPermissionMetadata {
+    id: SubscriptionReadPermission;
+    displayName: string;
+    description: string;
+    requiredRoles: string[];
+}
+/**
+ * Metadata for a cloud-account-scoped read capability.
+ */
+export interface CloudAccountReadPermissionMetadata {
+    id: CloudAccountReadPermission;
+    displayName: string;
+    description: string;
+    requiredRoles: string[];
+}
+export declare const SUBSCRIPTION_READ_PERMISSIONS_METADATA: SubscriptionReadPermissionMetadata[];
+export declare const CLOUD_ACCOUNT_READ_PERMISSIONS_METADATA: CloudAccountReadPermissionMetadata[];
+//# sourceMappingURL=readPermissions.d.ts.map

package/dist/accounts/readPermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPermissions.d.ts","sourceRoot":"","sources":["../../src/accounts/readPermissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,oBAAY,0BAA0B;IACpC,gDAAgD;IAChD,gBAAgB,IAAS,CAAE,IAAI;IAC/B,mEAAmE;IACnE,sBAAsB,IAAS;CAChC;AAED;;;GAGG;AACH,oBAAY,0BAA0B;IACpC,oDAAoD;IACpD,qBAAqB,IAAS,CAAE,IAAI;IACpC,kFAAkF;IAClF,kBAAkB,IAAS,CAAE,IAAI;IACjC,iDAAiD;IACjD,iBAAiB,IAAS,CAAE,IAAI;IAChC,0EAA0E;IAC1E,uBAAuB,IAAS;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,0BAA0B,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,0BAA0B,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,eAAO,MAAM,sCAAsC,EAAE,kCAAkC,EAatF,CAAC;AAEF,eAAO,MAAM,uCAAuC,EAAE,kCAAkC,EAyBvF,CAAC"}

package/dist/accounts/readPermissions.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CLOUD_ACCOUNT_READ_PERMISSIONS_METADATA = exports.SUBSCRIPTION_READ_PERMISSIONS_METADATA = exports.CloudAccountReadPermission = exports.SubscriptionReadPermission = void 0;
+/**
+ * Subscription-scoped read capability bitmask enum.
+ * Each capability maps to a single bit.
+ */
+var SubscriptionReadPermission;
+(function (SubscriptionReadPermission) {
+    /** Permission to read Azure Monitor metrics. */
+    SubscriptionReadPermission[SubscriptionReadPermission["MonitoringReader"] = 1] = "MonitoringReader";
+    /** Permission to run Log Analytics / App Insights data queries. */
+    SubscriptionReadPermission[SubscriptionReadPermission["LogAnalyticsDataReader"] = 2] = "LogAnalyticsDataReader";
+})(SubscriptionReadPermission || (exports.SubscriptionReadPermission = SubscriptionReadPermission = {}));
+/**
+ * Cloud-account-scoped read capability bitmask enum.
+ * Each capability maps to a single bit.
+ */
+var CloudAccountReadPermission;
+(function (CloudAccountReadPermission) {
+    /** Permission to read management group entities. */
+    CloudAccountReadPermission[CloudAccountReadPermission["ManagementGroupReader"] = 1] = "ManagementGroupReader";
+    /** Permission to read reservation resources and related consumption artifacts. */
+    CloudAccountReadPermission[CloudAccountReadPermission["ReservationsReader"] = 2] = "ReservationsReader";
+    /** Permission to read savings plan resources. */
+    CloudAccountReadPermission[CloudAccountReadPermission["SavingsPlanReader"] = 4] = "SavingsPlanReader";
+    /** Permission to read Microsoft Graph applications/service principals. */
+    CloudAccountReadPermission[CloudAccountReadPermission["GraphApplicationReadAll"] = 8] = "GraphApplicationReadAll";
+})(CloudAccountReadPermission || (exports.CloudAccountReadPermission = CloudAccountReadPermission = {}));
+exports.SUBSCRIPTION_READ_PERMISSIONS_METADATA = [
+    {
+        id: SubscriptionReadPermission.MonitoringReader,
+        displayName: 'Monitoring Reader',
+        description: 'Allows Spotto to read Azure Monitor metrics for subscription resources.',
+        requiredRoles: ['Monitoring Reader'],
+    },
+    {
+        id: SubscriptionReadPermission.LogAnalyticsDataReader,
+        displayName: 'Log Analytics Data Reader',
+        description: 'Allows Spotto to run Log Analytics and App Insights data queries.',
+        requiredRoles: ['Log Analytics Reader'],
+    },
+];
+exports.CLOUD_ACCOUNT_READ_PERMISSIONS_METADATA = [
+    {
+        id: CloudAccountReadPermission.ManagementGroupReader,
+        displayName: 'Management Group Reader',
+        description: 'Allows Spotto to read tenant management group entities.',
+        requiredRoles: ['Management Group Reader'],
+    },
+    {
+        id: CloudAccountReadPermission.ReservationsReader,
+        displayName: 'Reservations Reader',
+        description: 'Allows Spotto to read reservation resources and reservation usage artifacts.',
+        requiredRoles: ['Reader'],
+    },
+    {
+        id: CloudAccountReadPermission.SavingsPlanReader,
+        displayName: 'Savings Plan Reader',
+        description: 'Allows Spotto to read savings plan resources.',
+        requiredRoles: ['Reader'],
+    },
+    {
+        id: CloudAccountReadPermission.GraphApplicationReadAll,
+        displayName: 'Graph Application Read.All',
+        description: 'Allows Spotto to read Microsoft Graph applications and service principals.',
+        requiredRoles: ['Application.Read.All'],
+    },
+];
+//# sourceMappingURL=readPermissions.js.map

package/dist/accounts/readPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPermissions.js","sourceRoot":"","sources":["../../src/accounts/readPermissions.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,IAAY,0BAKX;AALD,WAAY,0BAA0B;IACpC,gDAAgD;IAChD,mGAAyB,CAAA;IACzB,mEAAmE;IACnE,+GAA+B,CAAA;AACjC,CAAC,EALW,0BAA0B,0CAA1B,0BAA0B,QAKrC;AAED;;;GAGG;AACH,IAAY,0BASX;AATD,WAAY,0BAA0B;IACpC,oDAAoD;IACpD,6GAA8B,CAAA;IAC9B,kFAAkF;IAClF,uGAA2B,CAAA;IAC3B,iDAAiD;IACjD,qGAA0B,CAAA;IAC1B,0EAA0E;IAC1E,iHAAgC,CAAA;AAClC,CAAC,EATW,0BAA0B,0CAA1B,0BAA0B,QASrC;AAsBY,QAAA,sCAAsC,GAAyC;IAC1F;QACE,EAAE,EAAE,0BAA0B,CAAC,gBAAgB;QAC/C,WAAW,EAAE,mBAAmB;QAChC,WAAW,EAAE,yEAAyE;QACtF,aAAa,EAAE,CAAC,mBAAmB,CAAC;KACrC;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,sBAAsB;QACrD,WAAW,EAAE,2BAA2B;QACxC,WAAW,EAAE,mEAAmE;QAChF,aAAa,EAAE,CAAC,sBAAsB,CAAC;KACxC;CACF,CAAC;AAEW,QAAA,uCAAuC,GAAyC;IAC3F;QACE,EAAE,EAAE,0BAA0B,CAAC,qBAAqB;QACpD,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE,yDAAyD;QACtE,aAAa,EAAE,CAAC,yBAAyB,CAAC;KAC3C;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,kBAAkB;QACjD,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,8EAA8E;QAC3F,aAAa,EAAE,CAAC,QAAQ,CAAC;KAC1B;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,iBAAiB;QAChD,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,+CAA+C;QAC5D,aAAa,EAAE,CAAC,QAAQ,CAAC;KAC1B;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,uBAAuB;QACtD,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,4EAA4E;QACzF,aAAa,EAAE,CAAC,sBAAsB,CAAC;KACxC;CACF,CAAC"}