@spottoai/types-package 1.0.2-beta.31 → 1.0.2-beta.310

package/dist/assessments/run.d.ts

@@ -0,0 +1,62 @@
+import type { AssessmentFailureMetadata, AssessmentScope, AssessmentStorageReference } from './common';
+import type { AssessmentProviderName, AssessmentRunStatus, AssessmentType } from './status';
+export interface AssessmentRunTimestamps {
+    createdAt: string;
+    queuedAt?: string;
+    startedAt?: string;
+    generatedAt?: string;
+    reviewedAt?: string;
+    approvedAt?: string;
+    publishedAt?: string;
+    failedAt?: string;
+}
+export interface AssessmentRunSummary extends AssessmentRunTimestamps {
+    assessmentRunId: string;
+    companyId: string;
+    assessmentType: AssessmentType;
+    providerName: AssessmentProviderName;
+    scope: AssessmentScope;
+    status: AssessmentRunStatus;
+    createdByUserId?: string;
+    reviewedByUserId?: string;
+    approvedByUserId?: string;
+    sourceVersion?: string;
+    artifactPath?: string;
+    documentPath?: string;
+    failure?: AssessmentFailureMetadata;
+}
+export interface AssessmentRun extends AssessmentRunSummary {
+    schemaVersion: 1;
+    contextPackReference?: AssessmentStorageReference;
+    evidencePackReference?: AssessmentStorageReference;
+    artifactReference?: AssessmentStorageReference;
+    reviewReference?: AssessmentStorageReference;
+    exportIndexReference?: AssessmentStorageReference;
+    generationAttemptId?: string;
+    correlationId?: string;
+}
+export interface CreateAssessmentRunRequest {
+    assessmentType: AssessmentType;
+    providerName: AssessmentProviderName;
+    cloudAccountIds: string[];
+    subscriptionIds: string[];
+}
+export interface CreateAssessmentRunResponse {
+    assessmentRun: AssessmentRun;
+    queued: true;
+}
+export interface ListAssessmentRunsQuery {
+    status?: AssessmentRunStatus;
+    assessmentType?: AssessmentType;
+    records?: number;
+    continuationToken?: string;
+}
+export interface ListAssessmentRunsResponse {
+    runs: AssessmentRunSummary[];
+    continuationToken?: string;
+}
+export interface AssessmentRunIndex {
+    version: 1;
+    runs: AssessmentRunSummary[];
+}
+//# sourceMappingURL=run.d.ts.map

package/dist/assessments/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/assessments/run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AACvG,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE5F,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAqB,SAAQ,uBAAuB;IACnE,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,sBAAsB,CAAC;IACrC,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC;AAED,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,aAAa,EAAE,CAAC,CAAC;IACjB,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,qBAAqB,CAAC,EAAE,0BAA0B,CAAC;IACnD,iBAAiB,CAAC,EAAE,0BAA0B,CAAC;IAC/C,eAAe,CAAC,EAAE,0BAA0B,CAAC;IAC7C,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,sBAAsB,CAAC;IACrC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,IAAI,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,oBAAoB,EAAE,CAAC;CAC9B"}

package/dist/assessments/run.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=run.js.map

package/dist/assessments/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/assessments/run.ts"],"names":[],"mappings":""}

package/dist/assessments/sow.d.ts

@@ -0,0 +1,30 @@
+import type { AssessmentTraceabilityReference } from './common';
+export type AssessmentSelectedActionItemIds = [string, ...string[]];
+export interface CreateAssessmentSowHandoffRequest {
+    actionItemIds: AssessmentSelectedActionItemIds;
+    title?: string;
+}
+export interface AssessmentSowDraftActionItem extends AssessmentTraceabilityReference {
+    actionItemId: string;
+    title: string;
+    description: string;
+    benefit: string;
+    effortHours?: number;
+    dependencies?: string[];
+    assumptions?: string[];
+    suggestedDeliveryPackage?: string;
+}
+export interface AssessmentSowDraftSource {
+    source: 'assessment';
+    assessmentRunId: string;
+    companyId: string;
+    title: string;
+    actionItems: AssessmentSowDraftActionItem[];
+}
+export interface CreateAssessmentSowHandoffResponse {
+    assessmentRunId: string;
+    actionItemIds: string[];
+    draftId?: string;
+    draftSource: AssessmentSowDraftSource;
+}
+//# sourceMappingURL=sow.d.ts.map

package/dist/assessments/sow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sow.d.ts","sourceRoot":"","sources":["../../src/assessments/sow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,MAAM,+BAA+B,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAEpE,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,+BAA+B,CAAC;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA6B,SAAQ,+BAA+B;IACnF,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,YAAY,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,4BAA4B,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,kCAAkC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,wBAAwB,CAAC;CACvC"}

package/dist/assessments/sow.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=sow.js.map

package/dist/assessments/sow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sow.js","sourceRoot":"","sources":["../../src/assessments/sow.ts"],"names":[],"mappings":""}

package/dist/assessments/status.d.ts

@@ -0,0 +1,27 @@
+export declare const ARCHITECTURE_ASSESSMENT_TYPE: "architecture";
+export declare const ASSESSMENT_TYPES: readonly ["architecture"];
+export type ArchitectureAssessmentType = typeof ARCHITECTURE_ASSESSMENT_TYPE;
+export type AssessmentType = (typeof ASSESSMENT_TYPES)[number];
+export declare const ASSESSMENT_PROVIDER_NAMES: readonly ["azure"];
+export type AssessmentProviderName = (typeof ASSESSMENT_PROVIDER_NAMES)[number];
+export declare const ASSESSMENT_RELEASE_STAGES: readonly ["preview", "ga"];
+export type AssessmentReleaseStage = (typeof ASSESSMENT_RELEASE_STAGES)[number];
+export declare const ASSESSMENT_RUN_STATUSES: readonly ["draft", "queued", "running", "needs_review", "approved", "published", "failed"];
+export type AssessmentRunStatus = (typeof ASSESSMENT_RUN_STATUSES)[number];
+export declare const ASSESSMENT_EXPORT_FORMATS: readonly ["docx"];
+export type AssessmentExportFormat = (typeof ASSESSMENT_EXPORT_FORMATS)[number];
+export declare const ASSESSMENT_EXPORT_STATUSES: readonly ["requested", "completed", "failed"];
+export type AssessmentExportStatus = (typeof ASSESSMENT_EXPORT_STATUSES)[number];
+export declare const ASSESSMENT_EVIDENCE_SOURCE_TYPES: readonly ["company_context_note", "subscription_report_evidence_pack", "portal_artifact", "raw_artifact", "conformed_artifact", "review_checklist", "derived_summary", "ai_inference", "evidence_gap"];
+export type AssessmentEvidenceSourceType = (typeof ASSESSMENT_EVIDENCE_SOURCE_TYPES)[number];
+export declare const ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS: readonly ["confirmed", "customer_supplied", "derived", "inferred", "gap"];
+export type AssessmentEvidenceConfidence = (typeof ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS)[number];
+export declare const ASSESSMENT_PRIORITY_LEVELS: readonly ["critical", "high", "medium", "low", "informational"];
+export type AssessmentPriority = (typeof ASSESSMENT_PRIORITY_LEVELS)[number];
+export declare const ASSESSMENT_EFFORT_BANDS: readonly ["low", "medium", "high", "unknown"];
+export type AssessmentEffortBand = (typeof ASSESSMENT_EFFORT_BANDS)[number];
+export declare const ASSESSMENT_IMPACT_LEVELS: readonly ["low", "medium", "high", "unknown"];
+export type AssessmentImpactLevel = (typeof ASSESSMENT_IMPACT_LEVELS)[number];
+export declare const ASSESSMENT_PILLARS: readonly ["architecture", "security", "reliability", "performance", "operations", "finops", "roadmap"];
+export type AssessmentPillar = (typeof ASSESSMENT_PILLARS)[number];
+//# sourceMappingURL=status.d.ts.map

package/dist/assessments/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/assessments/status.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,EAAG,cAAuB,CAAC;AACpE,eAAO,MAAM,gBAAgB,2BAA0C,CAAC;AACxE,MAAM,MAAM,0BAA0B,GAAG,OAAO,4BAA4B,CAAC;AAC7E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,yBAAyB,oBAAqB,CAAC;AAC5D,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,yBAAyB,4BAA6B,CAAC;AACpE,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,uBAAuB,4FAA6F,CAAC;AAClI,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E,eAAO,MAAM,yBAAyB,mBAAoB,CAAC;AAC3D,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,0BAA0B,+CAAgD,CAAC;AACxF,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,eAAO,MAAM,gCAAgC,wMAUnC,CAAC;AACX,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7F,eAAO,MAAM,qCAAqC,2EAA4E,CAAC;AAC/H,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,qCAAqC,CAAC,CAAC,MAAM,CAAC,CAAC;AAElG,eAAO,MAAM,0BAA0B,iEAAkE,CAAC;AAC1G,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,eAAO,MAAM,uBAAuB,+CAAgD,CAAC;AACrF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,wBAAwB,+CAAgD,CAAC;AACtF,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,eAAO,MAAM,kBAAkB,wGAAyG,CAAC;AACzI,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/assessments/status.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ASSESSMENT_PILLARS = exports.ASSESSMENT_IMPACT_LEVELS = exports.ASSESSMENT_EFFORT_BANDS = exports.ASSESSMENT_PRIORITY_LEVELS = exports.ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS = exports.ASSESSMENT_EVIDENCE_SOURCE_TYPES = exports.ASSESSMENT_EXPORT_STATUSES = exports.ASSESSMENT_EXPORT_FORMATS = exports.ASSESSMENT_RUN_STATUSES = exports.ASSESSMENT_RELEASE_STAGES = exports.ASSESSMENT_PROVIDER_NAMES = exports.ASSESSMENT_TYPES = exports.ARCHITECTURE_ASSESSMENT_TYPE = void 0;
+exports.ARCHITECTURE_ASSESSMENT_TYPE = 'architecture';
+exports.ASSESSMENT_TYPES = [exports.ARCHITECTURE_ASSESSMENT_TYPE];
+exports.ASSESSMENT_PROVIDER_NAMES = ['azure'];
+exports.ASSESSMENT_RELEASE_STAGES = ['preview', 'ga'];
+exports.ASSESSMENT_RUN_STATUSES = ['draft', 'queued', 'running', 'needs_review', 'approved', 'published', 'failed'];
+exports.ASSESSMENT_EXPORT_FORMATS = ['docx'];
+exports.ASSESSMENT_EXPORT_STATUSES = ['requested', 'completed', 'failed'];
+exports.ASSESSMENT_EVIDENCE_SOURCE_TYPES = [
+    'company_context_note',
+    'subscription_report_evidence_pack',
+    'portal_artifact',
+    'raw_artifact',
+    'conformed_artifact',
+    'review_checklist',
+    'derived_summary',
+    'ai_inference',
+    'evidence_gap',
+];
+exports.ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS = ['confirmed', 'customer_supplied', 'derived', 'inferred', 'gap'];
+exports.ASSESSMENT_PRIORITY_LEVELS = ['critical', 'high', 'medium', 'low', 'informational'];
+exports.ASSESSMENT_EFFORT_BANDS = ['low', 'medium', 'high', 'unknown'];
+exports.ASSESSMENT_IMPACT_LEVELS = ['low', 'medium', 'high', 'unknown'];
+exports.ASSESSMENT_PILLARS = ['architecture', 'security', 'reliability', 'performance', 'operations', 'finops', 'roadmap'];
+//# sourceMappingURL=status.js.map

package/dist/assessments/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/assessments/status.ts"],"names":[],"mappings":";;;AAAa,QAAA,4BAA4B,GAAG,cAAuB,CAAC;AACvD,QAAA,gBAAgB,GAAG,CAAC,oCAA4B,CAAU,CAAC;AAI3D,QAAA,yBAAyB,GAAG,CAAC,OAAO,CAAU,CAAC;AAG/C,QAAA,yBAAyB,GAAG,CAAC,SAAS,EAAE,IAAI,CAAU,CAAC;AAGvD,QAAA,uBAAuB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAGrH,QAAA,yBAAyB,GAAG,CAAC,MAAM,CAAU,CAAC;AAG9C,QAAA,0BAA0B,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAG3E,QAAA,gCAAgC,GAAG;IAC9C,sBAAsB;IACtB,mCAAmC;IACnC,iBAAiB;IACjB,cAAc;IACd,oBAAoB;IACpB,kBAAkB;IAClB,iBAAiB;IACjB,cAAc;IACd,cAAc;CACN,CAAC;AAGE,QAAA,qCAAqC,GAAG,CAAC,WAAW,EAAE,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAU,CAAC;AAGlH,QAAA,0BAA0B,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAU,CAAC;AAG7F,QAAA,uBAAuB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAGxE,QAAA,wBAAwB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAGzE,QAAA,kBAAkB,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC"}

package/dist/aws/cloudAccounts.d.ts

@@ -0,0 +1,158 @@
+import type { AwsRequestForbiddenCredentialFields } from './requests';
+export interface AwsBillingExportConfigurationBase extends AwsRequestForbiddenCredentialFields {
+    bucketName: string;
+    /** AWS-configured S3 path prefix, excluding the AWS-appended report or export name. */
+    prefix: string;
+    region: string;
+    ownerAccountId: string;
+    kmsKeyArn?: string;
+}
+export interface AwsCurBillingExportConfiguration extends AwsBillingExportConfigurationBase {
+    type: 'CUR';
+    reportName: string;
+    exportArn?: never;
+}
+export interface AwsDataExportsBillingExportConfiguration extends AwsBillingExportConfigurationBase {
+    type: 'DATA_EXPORTS';
+    exportArn: string;
+    reportName?: never;
+}
+/** Canonical, non-secret AWS billing-export locator accepted by the public setup flow. */
+export type AwsBillingExportConfiguration = AwsCurBillingExportConfiguration | AwsDataExportsBillingExportConfiguration;
+export interface AwsIamPolicyStatement {
+    Sid: string;
+    Effect: 'Allow' | 'Deny';
+    Principal?: {
+        AWS: string;
+    };
+    Action: string | string[];
+    Resource?: string | string[];
+    NotResource?: string | string[];
+    Condition?: Record<string, Record<string, string | string[]>>;
+}
+export interface AwsIamPolicyDocument {
+    Version: '2012-10-17';
+    Statement: AwsIamPolicyStatement[];
+}
+export interface AwsIamManagedPolicyDescriptor {
+    name: string;
+    arn: string;
+    /** These AWS-managed preview policies are broad read-only grants, not least-privilege policies. */
+    accessScope: 'broad-read-only-preview';
+    warning: string;
+}
+export interface AwsCloudAccountOnboardingBundleV1 {
+    schemaVersion: 1;
+    roleName: string;
+    trustedPrincipalArn: string;
+    trustedPrincipalAccountId: string;
+    trustPolicy: AwsIamPolicyDocument;
+    managedPolicies: AwsIamManagedPolicyDescriptor[];
+    /** Stable IAM inline policy name. Later bundles replace/update this policy; they must not attach a second guardrail. */
+    guardrailPolicyName: 'SpottoGuardrails';
+    guardrailPolicy: AwsIamPolicyDocument;
+    /** Stable IAM inline policy name used when billing access is configured. */
+    billingAccessPolicyName?: 'SpottoBillingExportRead';
+    billingAccessPolicy?: AwsIamPolicyDocument;
+    /** Complete API-authored customer artifact suitable for direct copy or download. */
+    instructionsMarkdown: string;
+}
+/** Public lifecycle states for an asynchronously onboarded AWS cloud account. */
+export type AwsCloudAccountOnboardingStatus = 'pending' | 'validating' | 'syncing' | 'active' | 'failed' | 'deleting' | 'deleted';
+/** Portal-to-API request for the supported AWS cross-account AssumeRole setup path. */
+export interface AwsCloudAccountSetupRequest extends AwsRequestForbiddenCredentialFields {
+    /** Public setup-provider discriminator. The queue adapter normalizes it to lowercase `aws`. */
+    provider: 'AWS';
+    /** Optional body echo; API routes must treat the route company ID as authoritative. */
+    companyId?: string;
+    name: string;
+    authMode: 'crossAccountRole';
+    roleArn: string;
+    /** Optional for connections that do not yet configure billing export ingestion. */
+    billingExport?: AwsBillingExportConfiguration;
+    /** The API owns External ID issuance; callers must use the prepared value and must not submit an override. */
+    externalId?: never;
+}
+/** Empty Portal-to-API request to issue or retrieve the company-scoped AWS External ID. */
+export interface AwsCloudAccountSetupPreparationRequest extends AwsRequestForbiddenCredentialFields {
+    /** Used only to render a concrete policy bundle; preparation does not persist this value. */
+    billingExport?: AwsBillingExportConfiguration;
+    /** AWS account details are intentionally not accepted during company-scoped preparation. */
+    accountId?: never;
+    /** The API owns External ID issuance; callers cannot submit an override. */
+    externalId?: never;
+}
+/** Company-scoped, immutable trust-policy value issued by Spotto before AWS role creation. */
+export interface AwsCloudAccountSetupPreparationResponse extends AwsRequestForbiddenCredentialFields {
+    provider: 'AWS';
+    externalId: string;
+    /** ISO-8601 timestamp for the original server-side issuance. */
+    createdAt: string;
+    onboardingBundle: AwsCloudAccountOnboardingBundleV1;
+}
+/** API response confirming that live access validation passed and AWS onboarding was admitted to asynchronous processing. */
+export interface AwsCloudAccountSetupAcceptedResponse extends AwsRequestForbiddenCredentialFields {
+    provider: 'AWS';
+    cloudAccountId: string;
+    accountId: string;
+    requestId: string;
+    correlationId: string;
+    status: 'pending';
+    /** ISO-8601 timestamp for API admission. */
+    acceptedAt: string;
+    externalId?: never;
+}
+/** Public, secret-free status for one AWS cloud-account onboarding lifecycle. */
+export interface AwsCloudAccountStatusResponse extends AwsRequestForbiddenCredentialFields {
+    provider: 'AWS';
+    companyId: string;
+    cloudAccountId: string;
+    accountId: string;
+    name: string;
+    authMode: 'crossAccountRole';
+    roleArn: string;
+    status: AwsCloudAccountOnboardingStatus;
+    /** Sanitized machine-readable reason for a blocked or failed lifecycle state. */
+    statusReason?: string;
+    /** Sanitized user-facing status detail. Raw provider failures must not be returned here. */
+    statusMessage?: string;
+    currentRequestId?: string;
+    correlationId?: string;
+    /** ISO-8601 timestamp for the latest status update. */
+    updatedAt: string;
+    /** ISO-8601 timestamp for the latest sync that produced usable AWS artifacts. */
+    lastSuccessfulSyncAt?: string;
+    billingStatus?: AwsCloudAccountBillingStatus;
+    billingStatusReason?: string;
+    billingStatusMessage?: string;
+    externalId?: never;
+}
+export type AwsCloudAccountBillingStatus = 'not-configured' | 'validating' | 'configured-pending-delivery' | 'active' | 'failed';
+/** Credential-free engine-owned status row contract used by the API read-only projection seam. */
+export interface AwsCloudAccountEngineRequestStatusRecord extends AwsRequestForbiddenCredentialFields {
+    provider: 'aws';
+    companyId: string;
+    cloudAccountId: string;
+    awsAccountId: string;
+    requestId: string;
+    correlationId: string;
+    action: 'onboard' | 'refresh' | 'delete';
+    requestedAt: string;
+    state: 'processing' | 'completed' | 'failed';
+    attemptCount: number;
+    outcome?: 'onboarded' | 'refresh-admitted' | 'credential-reference-deleted';
+    metadataRetained?: boolean;
+    syncRequestId?: string;
+    failureCode?: string;
+    retryable?: boolean;
+    ownershipGeneration?: number;
+    /** Engine-internal exact-command identity. Public projections must omit it. */
+    commandFingerprint?: string;
+    billingStatus?: 'not-requested' | 'validated' | 'configured-pending-delivery';
+    /** Engine-owned evidence that the admitted sync produced usable artifacts. */
+    lastSuccessfulSyncAt?: string;
+    updatedAt: string;
+    externalId?: never;
+    billingExport?: never;
+}
+//# sourceMappingURL=cloudAccounts.d.ts.map

package/dist/aws/cloudAccounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudAccounts.d.ts","sourceRoot":"","sources":["../../src/aws/cloudAccounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEtE,MAAM,WAAW,iCAAkC,SAAQ,mCAAmC;IAC5F,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gCAAiC,SAAQ,iCAAiC;IACzF,IAAI,EAAE,KAAK,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED,MAAM,WAAW,wCAAyC,SAAQ,iCAAiC;IACjG,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB;AAED,0FAA0F;AAC1F,MAAM,MAAM,6BAA6B,GAAG,gCAAgC,GAAG,wCAAwC,CAAC;AAExH,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,qBAAqB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,mGAAmG;IACnG,WAAW,EAAE,yBAAyB,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,yBAAyB,EAAE,MAAM,CAAC;IAClC,WAAW,EAAE,oBAAoB,CAAC;IAClC,eAAe,EAAE,6BAA6B,EAAE,CAAC;IACjD,wHAAwH;IACxH,mBAAmB,EAAE,kBAAkB,CAAC;IACxC,eAAe,EAAE,oBAAoB,CAAC;IACtC,4EAA4E;IAC5E,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;IACpD,mBAAmB,CAAC,EAAE,oBAAoB,CAAC;IAC3C,oFAAoF;IACpF,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,iFAAiF;AACjF,MAAM,MAAM,+BAA+B,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAElI,uFAAuF;AACvF,MAAM,WAAW,2BAA4B,SAAQ,mCAAmC;IACtF,+FAA+F;IAC/F,QAAQ,EAAE,KAAK,CAAC;IAChB,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,aAAa,CAAC,EAAE,6BAA6B,CAAC;IAC9C,8GAA8G;IAC9G,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB;AAED,2FAA2F;AAC3F,MAAM,WAAW,sCAAuC,SAAQ,mCAAmC;IACjG,6FAA6F;IAC7F,aAAa,CAAC,EAAE,6BAA6B,CAAC;IAC9C,4FAA4F;IAC5F,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB;AAED,8FAA8F;AAC9F,MAAM,WAAW,uCAAwC,SAAQ,mCAAmC;IAClG,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,iCAAiC,CAAC;CACrD;AAED,6HAA6H;AAC7H,MAAM,WAAW,oCAAqC,SAAQ,mCAAmC;IAC/F,QAAQ,EAAE,KAAK,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,SAAS,CAAC;IAClB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB;AAED,iFAAiF;AACjF,MAAM,WAAW,6BAA8B,SAAQ,mCAAmC;IACxF,QAAQ,EAAE,KAAK,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,+BAA+B,CAAC;IACxC,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4FAA4F;IAC5F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,aAAa,CAAC,EAAE,4BAA4B,CAAC;IAC7C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB;AAED,MAAM,MAAM,4BAA4B,GAAG,gBAAgB,GAAG,YAAY,GAAG,6BAA6B,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjI,kGAAkG;AAClG,MAAM,WAAW,wCAAyC,SAAQ,mCAAmC;IACnG,QAAQ,EAAE,KAAK,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,WAAW,GAAG,kBAAkB,GAAG,8BAA8B,CAAC;IAC5E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,eAAe,GAAG,WAAW,GAAG,6BAA6B,CAAC;IAC9E,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB"}

package/dist/aws/cloudAccounts.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=cloudAccounts.js.map

package/dist/aws/cloudAccounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudAccounts.js","sourceRoot":"","sources":["../../src/aws/cloudAccounts.ts"],"names":[],"mappings":""}

package/dist/aws/index.d.ts

@@ -0,0 +1,4 @@
+export * from './cloudAccounts';
+export * from './publicArtifacts';
+export * from './requests';
+//# sourceMappingURL=index.d.ts.map

package/dist/aws/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/aws/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC"}

package/dist/aws/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./cloudAccounts"), exports);
+__exportStar(require("./publicArtifacts"), exports);
+__exportStar(require("./requests"), exports);
+//# sourceMappingURL=index.js.map

package/dist/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/aws/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAgC;AAChC,oDAAkC;AAClC,6CAA2B"}

package/dist/aws/publicArtifacts.d.ts

@@ -0,0 +1,105 @@
+import type { ArtifactAccountBinding, ArtifactGeneration } from '../common/artifactGeneration';
+import type { RelationshipSnapshotCostOverlay, RelationshipSnapshotEdge, RelationshipSnapshotEdgeKind, RelationshipSnapshotEdgeEvidence, RelationshipSnapshotNodeData, RelationshipSnapshotNodeKind, RelationshipSnapshotStats, UnresolvedRelationshipReference } from '../azure/relationships';
+import type { Recommendation } from '../azure/recommendations';
+import type { ServiceRetirementPortalResource } from '../azure/serviceRetirement';
+import type { AzureDashboardView, AzureResourcePluginItemDetailed, AzureResourcePortalItem, AzureResourcesView } from '../azure/views';
+import type { AwsRequestForbiddenCredentialFields } from './requests';
+export declare const AWS_PUBLIC_ARTIFACT_SCHEMA_VERSION: 1;
+export declare const AWS_PUBLIC_ARTIFACT_TYPES: readonly ["resource-collection", "account-summary", "relationships", "lifecycle", "plugin-subscription", "plugin-resource"];
+export type AwsPublicArtifactSchemaVersion = typeof AWS_PUBLIC_ARTIFACT_SCHEMA_VERSION;
+export type AwsPublicArtifactType = (typeof AWS_PUBLIC_ARTIFACT_TYPES)[number];
+/** Public artifacts must not expose setup values or credential-store locators. */
+export type AwsPublicArtifactForbiddenCredentialFields = AwsRequestForbiddenCredentialFields & {
+    externalId?: never;
+    roleArn?: never;
+    secretArn?: never;
+    secretReference?: never;
+};
+export type AwsPublicArtifactEnvelope<ArtifactType extends AwsPublicArtifactType = AwsPublicArtifactType, AccountId extends string = string, RunId extends string = string> = ArtifactAccountBinding<'aws', AccountId> & AwsPublicArtifactForbiddenCredentialFields & {
+    schemaVersion: AwsPublicArtifactSchemaVersion;
+    artifactType: ArtifactType;
+    artifactGeneration: ArtifactGeneration<RunId>;
+};
+export type AwsPublicAccountReference<AccountId extends string = string> = ArtifactAccountBinding<'aws', AccountId> & AwsPublicArtifactForbiddenCredentialFields & {
+    companyId?: string;
+    displayName: string;
+};
+export type AwsPortalAccountSummaryBody<AccountId extends string = string> = Pick<AzureDashboardView, 'timestamp' | 'costStartDate' | 'costEndDate' | 'calendarSummary' | 'billingPeriodSummary' | 'summary' | 'dailySummary' | 'costSavingsSummary'> & {
+    account: AwsPublicAccountReference<AccountId>;
+};
+export type AwsPortalAccountSummaryArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'account-summary', AccountId, RunId> & AwsPortalAccountSummaryBody<AccountId>;
+export type AwsPortalResourceItem<AccountId extends string = string> = Omit<AzureResourcePortalItem, 'location' | 'resourceHealth' | 'vmPricePerformance'> & ArtifactAccountBinding<'aws', AccountId> & AwsPublicArtifactForbiddenCredentialFields & {
+    arn?: string;
+    region: string;
+    location: string;
+};
+export type AwsPortalResourceCollectionArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'resource-collection', AccountId, RunId> & Omit<AzureResourcesView, 'schemaVersion' | 'artifactGeneration' | 'subscription' | 'resources'> & {
+    account: AwsPublicAccountReference<AccountId>;
+    resources: AwsPortalResourceItem<AccountId>[];
+};
+export type AwsPortalRelationshipNodeKind = Exclude<RelationshipSnapshotNodeKind, 'subscription' | 'resourceGroup' | 'managementGroup'> | 'account' | 'region';
+export type AwsPortalRelationshipNodeData<AccountId extends string = string> = Omit<RelationshipSnapshotNodeData, 'resourceGroup' | 'properties'> & AwsPublicArtifactForbiddenCredentialFields & {
+    accountId: AccountId;
+    region?: string;
+    resourceGroup?: never;
+    properties?: never;
+};
+export interface AwsPortalRelationshipNode<AccountId extends string = string> {
+    id: string;
+    kind: AwsPortalRelationshipNodeKind;
+    data: AwsPortalRelationshipNodeData<AccountId>;
+    cost?: RelationshipSnapshotCostOverlay;
+}
+export type AwsPortalRelationshipEdgeKind = RelationshipSnapshotEdgeKind;
+export type AwsPortalRelationshipEdgeEvidence = RelationshipSnapshotEdgeEvidence;
+export type AwsPortalRelationshipEdge = RelationshipSnapshotEdge;
+export type AwsPortalRelationshipArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'relationships', AccountId, RunId> & Omit<RelationshipSnapshotShape, 'schemaVersion' | 'nodes'> & {
+    nodes: AwsPortalRelationshipNode<AccountId>[];
+};
+type RelationshipSnapshotShape = {
+    schemaVersion: 1;
+    generatedAt: string;
+    currency?: string;
+    currencySymbol?: string;
+    nodes: AwsPortalRelationshipNode[];
+    edges: AwsPortalRelationshipEdge[];
+    unresolved: UnresolvedRelationshipReference[];
+    stats: RelationshipSnapshotStats;
+};
+export type AwsPortalLifecycleResource<AccountId extends string = string> = ServiceRetirementPortalResource & ArtifactAccountBinding<'aws', AccountId> & AwsPublicArtifactForbiddenCredentialFields & {
+    arn?: string;
+    region?: string;
+};
+export type AwsPortalLifecycleClass = 'service-retirement' | 'credential-expiry' | 'commitment-expiry';
+export type AwsPortalLifecycleSeverity = 'information' | 'warning' | 'critical';
+export type AwsPortalLifecycleEntry<AccountId extends string = string> = AwsPublicArtifactForbiddenCredentialFields & {
+    id: string;
+    lifecycleClass: AwsPortalLifecycleClass;
+    title: string;
+    summary?: string;
+    effectiveAt: string;
+    severity: AwsPortalLifecycleSeverity;
+    resources: AwsPortalLifecycleResource<AccountId>[];
+};
+export type AwsPortalLifecycleArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'lifecycle', AccountId, RunId> & {
+    generatedAt: string;
+    entries: AwsPortalLifecycleEntry<AccountId>[];
+};
+export type AwsPublicRecommendation = Pick<Recommendation, 'id' | 'name' | 'category' | 'subCategory' | 'aggregateDescription' | 'type' | 'description' | 'remediation' | 'impact' | 'impactReason' | 'links' | 'considerations' | 'currency' | 'potentialBenefits' | 'potentialMonthlySavings' | 'effort' | 'effortReason' | 'effortHours' | 'effortEstimates' | 'risk' | 'riskReason' | 'severity' | 'costImpact' | 'costImpactUnit' | 'costImpactReason' | 'performanceImpact' | 'performanceImpactReason' | 'confidencePercentage' | 'confidenceReason' | 'resourceIds' | 'resourcesCount' | 'resolved' | 'solution' | 'source' | 'service' | 'createdTime' | 'lastUpdatedTime' | 'title' | 'headline' | 'bottomLine' | 'plainSummary' | 'quickSteps' | 'businessOwner' | 'keyConstraint' | 'validationEvidence' | 'read' | 'technicalPlaybook' | 'baseScores' | 'overallBaseScore' | 'overallBaseReason' | 'priorityTier' | 'adjustedScore' | 'objectiveMultiplier' | 'finalScore' | 'normalizedScore'> & AwsPublicArtifactForbiddenCredentialFields & {
+    resources?: never;
+    securityImpactDetails?: never;
+    linkingIds?: never;
+    renderData?: never;
+    action?: never;
+};
+/** AWS plugin subscription summary reuses the Azure dashboard field contract. */
+export type AwsPluginSubscriptionArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'plugin-subscription', AccountId, RunId> & AwsPortalAccountSummaryBody<AccountId>;
+export type AwsPluginResourceArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'plugin-resource', AccountId, RunId> & Omit<AzureResourcePluginItemDetailed, 'subscription' | 'resourceGroup' | 'properties' | 'recommendations' | 'vmPricePerformance' | 'computeAlternatives'> & {
+    arn?: string;
+    region: string;
+    resourceGroup?: never;
+    properties?: never;
+    recommendations?: AwsPublicRecommendation[];
+};
+export {};
+//# sourceMappingURL=publicArtifacts.d.ts.map

package/dist/aws/publicArtifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicArtifacts.d.ts","sourceRoot":"","sources":["../../src/aws/publicArtifacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,KAAK,EACV,+BAA+B,EAC/B,wBAAwB,EACxB,4BAA4B,EAC5B,gCAAgC,EAChC,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACvI,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEtE,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAE7D,eAAO,MAAM,yBAAyB,6HAO5B,CAAC;AAEX,MAAM,MAAM,8BAA8B,GAAG,OAAO,kCAAkC,CAAC;AAEvF,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,kFAAkF;AAClF,MAAM,MAAM,0CAA0C,GAAG,mCAAmC,GAAG;IAC7F,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,eAAe,CAAC,EAAE,KAAK,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,yBAAyB,CACnC,YAAY,SAAS,qBAAqB,GAAG,qBAAqB,EAClE,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,KAAK,SAAS,MAAM,GAAG,MAAM,IAC3B,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,GAC1C,0CAA0C,GAAG;IAC3C,aAAa,EAAE,8BAA8B,CAAC;IAC9C,YAAY,EAAE,YAAY,CAAC;IAC3B,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;CAC/C,CAAC;AAEJ,MAAM,MAAM,yBAAyB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,GACjH,0CAA0C,GAAG;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEJ,MAAM,MAAM,2BAA2B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,IAAI,CAC/E,kBAAkB,EAClB,WAAW,GAAG,eAAe,GAAG,aAAa,GAAG,iBAAiB,GAAG,sBAAsB,GAAG,SAAS,GAAG,cAAc,GAAG,oBAAoB,CAC/I,GAAG;IACF,OAAO,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,+BAA+B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CACvI,iBAAiB,EACjB,SAAS,EACT,KAAK,CACN,GACC,2BAA2B,CAAC,SAAS,CAAC,CAAC;AAEzC,MAAM,MAAM,qBAAqB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,IAAI,CACzE,uBAAuB,EACvB,UAAU,GAAG,gBAAgB,GAAG,oBAAoB,CACrD,GACC,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,GACxC,0CAA0C,GAAG;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEJ,MAAM,MAAM,mCAAmC,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CAC3I,qBAAqB,EACrB,SAAS,EACT,KAAK,CACN,GACC,IAAI,CAAC,kBAAkB,EAAE,eAAe,GAAG,oBAAoB,GAAG,cAAc,GAAG,WAAW,CAAC,GAAG;IAChG,OAAO,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC9C,SAAS,EAAE,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;CAC/C,CAAC;AAEJ,MAAM,MAAM,6BAA6B,GACrC,OAAO,CAAC,4BAA4B,EAAE,cAAc,GAAG,eAAe,GAAG,iBAAiB,CAAC,GAC3F,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,MAAM,6BAA6B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC,4BAA4B,EAAE,eAAe,GAAG,YAAY,CAAC,GAC/I,0CAA0C,GAAG;IAC3C,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB,CAAC;AAEJ,MAAM,WAAW,yBAAyB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,6BAA6B,CAAC;IACpC,IAAI,EAAE,6BAA6B,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,+BAA+B,CAAC;CACxC;AAED,MAAM,MAAM,6BAA6B,GAAG,4BAA4B,CAAC;AAEzE,MAAM,MAAM,iCAAiC,GAAG,gCAAgC,CAAC;AAEjF,MAAM,MAAM,yBAAyB,GAAG,wBAAwB,CAAC;AAEjE,MAAM,MAAM,6BAA6B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CACrI,eAAe,EACf,SAAS,EACT,KAAK,CACN,GACC,IAAI,CAAC,yBAAyB,EAAE,eAAe,GAAG,OAAO,CAAC,GAAG;IAC3D,KAAK,EAAE,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAAC;CAC/C,CAAC;AAEJ,KAAK,yBAAyB,GAAG;IAC/B,aAAa,EAAE,CAAC,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACnC,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACnC,UAAU,EAAE,+BAA+B,EAAE,CAAC;IAC9C,KAAK,EAAE,yBAAyB,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,0BAA0B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,+BAA+B,GACzG,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,GACxC,0CAA0C,GAAG;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEJ,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAEvG,MAAM,MAAM,0BAA0B,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,CAAC;AAEhF,MAAM,MAAM,uBAAuB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,0CAA0C,GAAG;IACpH,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,uBAAuB,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,0BAA0B,CAAC;IACrC,SAAS,EAAE,0BAA0B,CAAC,SAAS,CAAC,EAAE,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,0BAA0B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CAClI,WAAW,EACX,SAAS,EACT,KAAK,CACN,GAAG;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,cAAc,EACZ,IAAI,GACJ,MAAM,GACN,UAAU,GACV,aAAa,GACb,sBAAsB,GACtB,MAAM,GACN,aAAa,GACb,aAAa,GACb,QAAQ,GACR,cAAc,GACd,OAAO,GACP,gBAAgB,GAChB,UAAU,GACV,mBAAmB,GACnB,yBAAyB,GACzB,QAAQ,GACR,cAAc,GACd,aAAa,GACb,iBAAiB,GACjB,MAAM,GACN,YAAY,GACZ,UAAU,GACV,YAAY,GACZ,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,yBAAyB,GACzB,sBAAsB,GACtB,kBAAkB,GAClB,aAAa,GACb,gBAAgB,GAChB,UAAU,GACV,UAAU,GACV,QAAQ,GACR,SAAS,GACT,aAAa,GACb,iBAAiB,GACjB,OAAO,GACP,UAAU,GACV,YAAY,GACZ,cAAc,GACd,YAAY,GACZ,eAAe,GACf,eAAe,GACf,oBAAoB,GACpB,MAAM,GACN,mBAAmB,GACnB,YAAY,GACZ,kBAAkB,GAClB,mBAAmB,GACnB,cAAc,GACd,eAAe,GACf,qBAAqB,GACrB,YAAY,GACZ,iBAAiB,CACpB,GACC,0CAA0C,GAAG;IAC3C,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,qBAAqB,CAAC,EAAE,KAAK,CAAC;IAC9B,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,MAAM,CAAC,EAAE,KAAK,CAAC;CAChB,CAAC;AAEJ,iFAAiF;AACjF,MAAM,MAAM,6BAA6B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CACrI,qBAAqB,EACrB,SAAS,EACT,KAAK,CACN,GACC,2BAA2B,CAAC,SAAS,CAAC,CAAC;AAEzC,MAAM,MAAM,yBAAyB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CACjI,iBAAiB,EACjB,SAAS,EACT,KAAK,CACN,GACC,IAAI,CACF,+BAA+B,EAC/B,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,iBAAiB,GAAG,oBAAoB,GAAG,qBAAqB,CACnH,GAAG;IACF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,eAAe,CAAC,EAAE,uBAAuB,EAAE,CAAC;CAC7C,CAAC"}

package/dist/aws/publicArtifacts.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWS_PUBLIC_ARTIFACT_TYPES = exports.AWS_PUBLIC_ARTIFACT_SCHEMA_VERSION = void 0;
+exports.AWS_PUBLIC_ARTIFACT_SCHEMA_VERSION = 1;
+exports.AWS_PUBLIC_ARTIFACT_TYPES = [
+    'resource-collection',
+    'account-summary',
+    'relationships',
+    'lifecycle',
+    'plugin-subscription',
+    'plugin-resource',
+];
+//# sourceMappingURL=publicArtifacts.js.map

package/dist/aws/publicArtifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicArtifacts.js","sourceRoot":"","sources":["../../src/aws/publicArtifacts.ts"],"names":[],"mappings":";;;AAgBa,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAEhD,QAAA,yBAAyB,GAAG;IACvC,qBAAqB;IACrB,iBAAiB;IACjB,eAAe;IACf,WAAW;IACX,qBAAqB;IACrB,iBAAiB;CACT,CAAC"}

package/dist/aws/requests.d.ts

@@ -0,0 +1,64 @@
+import type { AwsBillingExportConfiguration } from './cloudAccounts';
+/** Schema version for the first AWS cloud-account Service Bus ingress contract. */
+export declare const AWS_REQUEST_SCHEMA_VERSION: 1;
+/** Canonical provider wire value for AWS request messages. */
+export declare const AWS_REQUEST_PROVIDER: "aws";
+/** Entity handled by the first AWS Service Bus ingress contract. */
+export declare const AWS_REQUEST_ENTITY: "cloudaccount";
+/** Actions supported by the first AWS Service Bus ingress contract. */
+export declare const AWS_REQUEST_ACTIONS: readonly ["onboard", "refresh", "delete"];
+/** Credential-shaped keys rejected at the AWS request boundary. */
+export declare const AWS_REQUEST_FORBIDDEN_CREDENTIAL_FIELDS: readonly ["accessKeyId", "secretAccessKey", "sessionToken", "credentials", "resolvedCredentials", "secret", "encryptedSecret", "credentialReference"];
+export type AwsRequestSchemaVersion = typeof AWS_REQUEST_SCHEMA_VERSION;
+export type AwsRequestProvider = typeof AWS_REQUEST_PROVIDER;
+export type AwsRequestEntity = typeof AWS_REQUEST_ENTITY;
+export type AwsRequestActionV1 = (typeof AWS_REQUEST_ACTIONS)[number];
+export type AwsRequestForbiddenCredentialField = (typeof AWS_REQUEST_FORBIDDEN_CREDENTIAL_FIELDS)[number];
+/**
+ * Makes raw or resolved AWS credential material unrepresentable on typed ingress messages.
+ * Runtime queue boundaries must also reject these keys on untyped input.
+ */
+export type AwsRequestForbiddenCredentialFields = {
+    [Field in AwsRequestForbiddenCredentialField]?: never;
+};
+/** Common secret-free envelope fields shared by every AWS request v1 action. */
+export interface AwsRequestMessageV1Base extends AwsRequestForbiddenCredentialFields {
+    schemaVersion: AwsRequestSchemaVersion;
+    provider: AwsRequestProvider;
+    entity: AwsRequestEntity;
+    action: AwsRequestActionV1;
+    companyId: string;
+    cloudAccountId: string;
+    awsAccountId: string;
+    requestId: string;
+    correlationId: string;
+    /** ISO-8601 timestamp assigned by the API when the command is admitted. */
+    requestedAt: string;
+}
+/** Starts AWS AssumeRole validation, persistence, and the first asynchronous sync. */
+export interface AwsOnboardRequestMessageV1 extends AwsRequestMessageV1Base {
+    action: 'onboard';
+    roleArn: string;
+    /** Server-issued setup metadata used for AssumeRole trust verification; never return it in public status DTOs. */
+    externalId: string;
+    /** Optional non-secret billing-export locator validated and persisted by the API. */
+    billingExport?: AwsBillingExportConfiguration;
+}
+/** Starts a refresh from persisted AWS onboarding state. */
+export interface AwsRefreshRequestMessageV1 extends AwsRequestMessageV1Base {
+    action: 'refresh';
+    roleArn?: never;
+    externalId?: never;
+    billingExport?: never;
+}
+/** Removes the AWS cloud-account connection and its engine-owned onboarding state. */
+export interface AwsDeleteRequestMessageV1 extends AwsRequestMessageV1Base {
+    action: 'delete';
+    roleArn?: never;
+    externalId?: never;
+    billingExport?: never;
+}
+/** Versioned, credential-free command consumed only by the dedicated AWS Service Bus ingress. */
+export type AwsRequestMessageV1 = AwsOnboardRequestMessageV1 | AwsRefreshRequestMessageV1 | AwsDeleteRequestMessageV1;
+export type AwsRequestMessage = AwsRequestMessageV1;
+//# sourceMappingURL=requests.d.ts.map

package/dist/aws/requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../src/aws/requests.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAErE,mFAAmF;AACnF,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAErD,8DAA8D;AAC9D,eAAO,MAAM,oBAAoB,EAAG,KAAc,CAAC;AAEnD,oEAAoE;AACpE,eAAO,MAAM,kBAAkB,EAAG,cAAuB,CAAC;AAE1D,uEAAuE;AACvE,eAAO,MAAM,mBAAmB,2CAA4C,CAAC;AAE7E,mEAAmE;AACnE,eAAO,MAAM,uCAAuC,uJAS1C,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,OAAO,0BAA0B,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,OAAO,oBAAoB,CAAC;AAC7D,MAAM,MAAM,gBAAgB,GAAG,OAAO,kBAAkB,CAAC;AACzD,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,MAAM,MAAM,kCAAkC,GAAG,CAAC,OAAO,uCAAuC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1G;;;GAGG;AACH,MAAM,MAAM,mCAAmC,GAAG;KAC/C,KAAK,IAAI,kCAAkC,CAAC,CAAC,EAAE,KAAK;CACtD,CAAC;AAEF,gFAAgF;AAChF,MAAM,WAAW,uBAAwB,SAAQ,mCAAmC;IAClF,aAAa,EAAE,uBAAuB,CAAC;IACvC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,sFAAsF;AACtF,MAAM,WAAW,0BAA2B,SAAQ,uBAAuB;IACzE,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,kHAAkH;IAClH,UAAU,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,aAAa,CAAC,EAAE,6BAA6B,CAAC;CAC/C;AAED,4DAA4D;AAC5D,MAAM,WAAW,0BAA2B,SAAQ,uBAAuB;IACzE,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB;AAED,sFAAsF;AACtF,MAAM,WAAW,yBAA0B,SAAQ,uBAAuB;IACxE,MAAM,EAAE,QAAQ,CAAC;IACjB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB;AAED,iGAAiG;AACjG,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,GAAG,0BAA0B,GAAG,yBAAyB,CAAC;AACtH,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,CAAC"}