@spottoai/types-package 1.0.2-beta.32 → 1.0.2-beta.320

package/dist/aws/portalPublicArtifacts.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWS_PORTAL_ACCOUNT_SUMMARY_AI_COST_SUMMARY_LOGICAL_NAME = exports.AWS_PORTAL_ACCOUNT_SUMMARY_LOGICAL_NAME = exports.AWS_PORTAL_RESOURCE_COLLECTION_LOGICAL_NAME = exports.AWS_PORTAL_PUBLIC_ARTIFACT_SCHEMA_VERSION = void 0;
+exports.buildAwsPortalResourceCollectionHistoryLogicalName = buildAwsPortalResourceCollectionHistoryLogicalName;
+exports.buildAwsPortalAccountSummaryHistoryLogicalName = buildAwsPortalAccountSummaryHistoryLogicalName;
+exports.buildAwsPortalResourceCollectionHistoryIdentityKey = buildAwsPortalResourceCollectionHistoryIdentityKey;
+exports.buildAwsPortalResourceCollectionHistoryLogicalNameForScope = buildAwsPortalResourceCollectionHistoryLogicalNameForScope;
+exports.buildAwsPortalAccountSummaryHistoryIdentityKey = buildAwsPortalAccountSummaryHistoryIdentityKey;
+exports.buildAwsPortalAccountSummaryHistoryLogicalNameForScope = buildAwsPortalAccountSummaryHistoryLogicalNameForScope;
+exports.buildAwsPortalAccountSummaryTargetKey = buildAwsPortalAccountSummaryTargetKey;
+exports.buildAwsPortalAccountSummaryAiCostSummaryTargetKey = buildAwsPortalAccountSummaryAiCostSummaryTargetKey;
+const pluginPublicArtifacts_1 = require("./pluginPublicArtifacts");
+exports.AWS_PORTAL_PUBLIC_ARTIFACT_SCHEMA_VERSION = 1;
+exports.AWS_PORTAL_RESOURCE_COLLECTION_LOGICAL_NAME = 'resources.json.gz';
+exports.AWS_PORTAL_ACCOUNT_SUMMARY_LOGICAL_NAME = 'account-summary.json.gz';
+exports.AWS_PORTAL_ACCOUNT_SUMMARY_AI_COST_SUMMARY_LOGICAL_NAME = 'account-summary-ai-cost-summary.json.gz';
+function buildAwsPortalResourceCollectionHistoryLogicalName(identitySha256) {
+    assertSha256(identitySha256, 'identitySha256');
+    return `resources-history--${identitySha256}.json.gz`;
+}
+function buildAwsPortalAccountSummaryHistoryLogicalName(identitySha256) {
+    assertSha256(identitySha256, 'identitySha256');
+    return `account-summary-history--${identitySha256}.json.gz`;
+}
+function buildAwsPortalResourceCollectionHistoryIdentityKey(scope, generatedAt) {
+    return [
+        'resource-collection-history',
+        scope.provider,
+        scope.accountId,
+        scope.billing.source,
+        scope.billing.source === 'cur' ? `report:${scope.billing.reportName}` : `export:${scope.billing.exportName}`,
+        scope.billing.billingPeriod.start,
+        scope.billing.billingPeriod.end,
+        scope.resourceRegions.join(','),
+        scope.metricTimeWindow.start,
+        scope.metricTimeWindow.end,
+        ...(scope.tagRuleScope ? [`tag-rules:company:${scope.tagRuleScope.companyId}`] : []),
+        generatedAt,
+    ].join('|');
+}
+function buildAwsPortalResourceCollectionHistoryLogicalNameForScope(scope, generatedAt) {
+    return buildAwsPortalResourceCollectionHistoryLogicalName(sha256Text(buildAwsPortalResourceCollectionHistoryIdentityKey(scope, generatedAt)));
+}
+function buildAwsPortalAccountSummaryHistoryIdentityKey(scope) {
+    return [
+        'account-summary-history',
+        scope.provider,
+        scope.accountId,
+        scope.billing.source,
+        scope.billing.source === 'cur' ? `report:${scope.billing.reportName}` : `export:${scope.billing.exportName}`,
+        scope.resourceRegions.join(','),
+        scope.billing.billingPeriod.start,
+        scope.billing.billingPeriod.end,
+    ].join('|');
+}
+function buildAwsPortalAccountSummaryHistoryLogicalNameForScope(scope) {
+    return buildAwsPortalAccountSummaryHistoryLogicalName(sha256Text(buildAwsPortalAccountSummaryHistoryIdentityKey(scope)));
+}
+function buildAwsPortalAccountSummaryTargetKey(scope) {
+    return [
+        'account-summary',
+        scope.provider,
+        scope.accountId,
+        scope.billing.source,
+        scope.billing.source === 'cur' ? `report:${scope.billing.reportName}` : `export:${scope.billing.exportName}`,
+        scope.billing.billingPeriod.start,
+        scope.billing.billingPeriod.end,
+        scope.resourceRegions.join(','),
+        scope.metricTimeWindow.start,
+        scope.metricTimeWindow.end,
+        ...(scope.comparisonBillingPeriod ? [`comparison:${scope.comparisonBillingPeriod.start}:${scope.comparisonBillingPeriod.end}`] : []),
+    ].join('|');
+}
+function buildAwsPortalAccountSummaryAiCostSummaryTargetKey(scope, audience) {
+    const sourceTargetKey = buildAwsPortalAccountSummaryTargetKey(scope);
+    return `account-summary-ai-cost-summary|${sourceTargetKey.slice('account-summary|'.length)}|audience:${audience}`;
+}
+function assertSha256(value, field) {
+    if (!/^[a-f0-9]{64}$/.test(value))
+        throw new Error(`${field} must be a lowercase hexadecimal SHA-256.`);
+}
+function sha256Text(value) {
+    return (0, pluginPublicArtifacts_1.sha256AwsPluginIdentity)(value);
+}
+//# sourceMappingURL=portalPublicArtifacts.js.map

package/dist/aws/portalPublicArtifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portalPublicArtifacts.js","sourceRoot":"","sources":["../../src/aws/portalPublicArtifacts.ts"],"names":[],"mappings":";;;AA6BA,gHAKC;AAED,wGAGC;AAkCD,gHAeC;AAED,gIAKC;AAED,wGAaC;AAED,wHAIC;AAED,sFAcC;AAED,gHAGC;AA7HD,mEAAkE;AAErD,QAAA,yCAAyC,GAAG,CAAU,CAAC;AACvD,QAAA,2CAA2C,GAAG,mBAA4B,CAAC;AAC3E,QAAA,uCAAuC,GAAG,yBAAkC,CAAC;AAC7E,QAAA,uDAAuD,GAAG,yCAAkD,CAAC;AAY1H,SAAgB,kDAAkD,CAChE,cAAsC;IAEtC,YAAY,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC/C,OAAO,sBAAsB,cAAc,UAAU,CAAC;AACxD,CAAC;AAED,SAAgB,8CAA8C,CAAC,cAAsC;IACnG,YAAY,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC/C,OAAO,4BAA4B,cAAc,UAAU,CAAC;AAC9D,CAAC;AAkCD,SAAgB,kDAAkD,CAAC,KAAuC,EAAE,WAAmB;IAC7H,OAAO;QACL,6BAA6B;QAC7B,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,OAAO,CAAC,MAAM;QACpB,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE;QAC5G,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK;QACjC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG;QAC/B,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/B,KAAK,CAAC,gBAAgB,CAAC,KAAK;QAC5B,KAAK,CAAC,gBAAgB,CAAC,GAAG;QAC1B,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,qBAAqB,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,WAAW;KACZ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAgB,0DAA0D,CACxE,KAAuC,EACvC,WAAmB;IAEnB,OAAO,kDAAkD,CAAC,UAAU,CAAC,kDAAkD,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AAChJ,CAAC;AAED,SAAgB,8CAA8C,CAC5D,KAAyF;IAEzF,OAAO;QACL,yBAAyB;QACzB,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,OAAO,CAAC,MAAM;QACpB,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE;QAC5G,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/B,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK;QACjC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG;KAChC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAgB,sDAAsD,CACpE,KAAyF;IAEzF,OAAO,8CAA8C,CAAC,UAAU,CAAC,8CAA8C,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3H,CAAC;AAED,SAAgB,qCAAqC,CAAC,KAAmC;IACvF,OAAO;QACL,iBAAiB;QACjB,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,OAAO,CAAC,MAAM;QACpB,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE;QAC5G,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK;QACjC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG;QAC/B,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/B,KAAK,CAAC,gBAAgB,CAAC,KAAK;QAC5B,KAAK,CAAC,gBAAgB,CAAC,GAAG;QAC1B,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,uBAAuB,CAAC,KAAK,IAAI,KAAK,CAAC,uBAAuB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAgB,kDAAkD,CAAC,KAAmC,EAAE,QAA6B;IACnI,MAAM,eAAe,GAAG,qCAAqC,CAAC,KAAK,CAAC,CAAC;IACrE,OAAO,mCAAmC,eAAe,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,QAAQ,EAAE,CAAC;AACpH,CAAC;AAyVD,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAA,+CAAuB,EAAC,KAAK,CAAC,CAAC;AACxC,CAAC"}

package/dist/aws/publicArtifacts.d.ts

@@ -0,0 +1,106 @@
+import type { ArtifactAccountBinding, ArtifactGeneration } from '../common/artifactGeneration';
+import type { RelationshipSnapshotCostOverlay, RelationshipSnapshotEdge, RelationshipSnapshotEdgeKind, RelationshipSnapshotEdgeEvidence, RelationshipSnapshotNodeData, RelationshipSnapshotNodeKind, RelationshipSnapshotStats, UnresolvedRelationshipReference } from '../azure/relationships';
+import type { Recommendation } from '../azure/recommendations';
+import type { ServiceRetirementPortalResource } from '../azure/serviceRetirement';
+import type { AzureDashboardView, AzureResourcePluginItemDetailed, AzureResourcePortalItem, AzureResourcesView } from '../azure/views';
+import type { AwsRequestForbiddenCredentialFields } from './requests';
+export declare const AWS_PUBLIC_ARTIFACT_SCHEMA_VERSION: 1;
+export declare const AWS_PUBLIC_ARTIFACT_TYPES: readonly ["resource-collection", "resource-collection-history", "account-summary", "account-summary-history", "account-summary-ai-cost-summary", "relationships", "lifecycle", "plugin-subscription", "plugin-resource"];
+export type AwsPublicArtifactSchemaVersion = typeof AWS_PUBLIC_ARTIFACT_SCHEMA_VERSION;
+export type AwsPublicArtifactType = (typeof AWS_PUBLIC_ARTIFACT_TYPES)[number];
+/** Public artifacts must not expose setup values or credential-store locators. */
+export type AwsPublicArtifactForbiddenCredentialFields = AwsRequestForbiddenCredentialFields & {
+    externalId?: never;
+    roleArn?: never;
+    secretArn?: never;
+    secretReference?: never;
+};
+export type AwsPublicArtifactEnvelope<ArtifactType extends AwsPublicArtifactType = AwsPublicArtifactType, AccountId extends string = string, RunId extends string = string> = ArtifactAccountBinding<'aws', AccountId> & AwsPublicArtifactForbiddenCredentialFields & {
+    schemaVersion: AwsPublicArtifactSchemaVersion;
+    artifactType: ArtifactType;
+    artifactGeneration: ArtifactGeneration<RunId>;
+};
+export type AwsPublicAccountReference<AccountId extends string = string> = ArtifactAccountBinding<'aws', AccountId> & AwsPublicArtifactForbiddenCredentialFields & {
+    companyId?: string;
+    displayName: string;
+};
+export type AwsPortalAccountSummaryBody<AccountId extends string = string> = Pick<AzureDashboardView, 'timestamp' | 'costStartDate' | 'costEndDate' | 'calendarSummary' | 'billingPeriodSummary' | 'summary' | 'dailySummary' | 'costSavingsSummary'> & {
+    account: AwsPublicAccountReference<AccountId>;
+};
+export type AwsPortalAccountSummaryArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'account-summary', AccountId, RunId> & AwsPortalAccountSummaryBody<AccountId>;
+export type AwsPortalResourceItem<AccountId extends string = string> = Omit<AzureResourcePortalItem, 'location' | 'resourceHealth' | 'vmPricePerformance'> & ArtifactAccountBinding<'aws', AccountId> & AwsPublicArtifactForbiddenCredentialFields & {
+    arn?: string;
+    region: string;
+    location: string;
+};
+export type AwsPortalResourceCollectionArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'resource-collection', AccountId, RunId> & Omit<AzureResourcesView, 'schemaVersion' | 'artifactGeneration' | 'subscription' | 'resources'> & {
+    account: AwsPublicAccountReference<AccountId>;
+    resources: AwsPortalResourceItem<AccountId>[];
+};
+export type AwsPortalRelationshipNodeKind = Exclude<RelationshipSnapshotNodeKind, 'subscription' | 'resourceGroup' | 'managementGroup'> | 'account' | 'region';
+export type AwsPortalRelationshipNodeData<AccountId extends string = string> = Omit<RelationshipSnapshotNodeData, 'resourceGroup' | 'properties'> & AwsPublicArtifactForbiddenCredentialFields & {
+    accountId: AccountId;
+    region?: string;
+    resourceGroup?: never;
+    properties?: never;
+};
+export interface AwsPortalRelationshipNode<AccountId extends string = string> {
+    id: string;
+    kind: AwsPortalRelationshipNodeKind;
+    data: AwsPortalRelationshipNodeData<AccountId>;
+    cost?: RelationshipSnapshotCostOverlay;
+}
+export type AwsPortalRelationshipEdgeKind = RelationshipSnapshotEdgeKind;
+export type AwsPortalRelationshipEdgeEvidence = RelationshipSnapshotEdgeEvidence;
+export type AwsPortalRelationshipEdge = RelationshipSnapshotEdge;
+export type AwsPortalRelationshipArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'relationships', AccountId, RunId> & Omit<RelationshipSnapshotShape, 'schemaVersion' | 'nodes'> & {
+    nodes: AwsPortalRelationshipNode<AccountId>[];
+};
+type RelationshipSnapshotShape = {
+    schemaVersion: 1;
+    generatedAt: string;
+    currency?: string;
+    currencySymbol?: string;
+    nodes: AwsPortalRelationshipNode[];
+    edges: AwsPortalRelationshipEdge[];
+    unresolved: UnresolvedRelationshipReference[];
+    stats: RelationshipSnapshotStats;
+};
+export type AwsPortalLifecycleResource<AccountId extends string = string> = ServiceRetirementPortalResource & ArtifactAccountBinding<'aws', AccountId> & AwsPublicArtifactForbiddenCredentialFields & {
+    arn?: string;
+    region?: string;
+};
+export type AwsPortalLifecycleClass = 'service-retirement' | 'credential-expiry' | 'commitment-expiry';
+export type AwsPortalLifecycleSeverity = 'information' | 'warning' | 'critical';
+export type AwsPortalLifecycleEntry<AccountId extends string = string> = AwsPublicArtifactForbiddenCredentialFields & {
+    id: string;
+    lifecycleClass: AwsPortalLifecycleClass;
+    title: string;
+    summary?: string;
+    effectiveAt: string;
+    severity: AwsPortalLifecycleSeverity;
+    resources: AwsPortalLifecycleResource<AccountId>[];
+};
+export type AwsPortalLifecycleArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'lifecycle', AccountId, RunId> & {
+    generatedAt: string;
+    entries: AwsPortalLifecycleEntry<AccountId>[];
+};
+export type AwsPublicRecommendation = Pick<Recommendation, 'id' | 'name' | 'category' | 'subCategory' | 'aggregateDescription' | 'type' | 'description' | 'remediation' | 'impact' | 'impactReason' | 'links' | 'considerations' | 'currency' | 'potentialBenefits' | 'potentialMonthlySavings' | 'effort' | 'effortReason' | 'effortHours' | 'effortEstimates' | 'risk' | 'riskReason' | 'severity' | 'costImpact' | 'costImpactUnit' | 'costImpactReason' | 'performanceImpact' | 'performanceImpactReason' | 'confidencePercentage' | 'confidenceReason' | 'resourceIds' | 'resourcesCount' | 'resolved' | 'solution' | 'source' | 'service' | 'createdTime' | 'lastUpdatedTime' | 'title' | 'headline' | 'bottomLine' | 'plainSummary' | 'quickSteps' | 'businessOwner' | 'keyConstraint' | 'validationEvidence' | 'read' | 'technicalPlaybook' | 'baseScores' | 'overallBaseScore' | 'overallBaseReason' | 'priorityTier' | 'adjustedScore' | 'objectiveMultiplier' | 'finalScore' | 'normalizedScore'> & AwsPublicArtifactForbiddenCredentialFields & {
+    resources?: never;
+    securityImpactDetails?: never;
+    linkingIds?: never;
+    renderData?: never;
+    action?: never;
+};
+/** @deprecated Use AwsPluginSubscriptionDetailArtifact for lossless plugin publication. */
+export type AwsPluginSubscriptionArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'plugin-subscription', AccountId, RunId> & AwsPortalAccountSummaryBody<AccountId>;
+/** @deprecated Use AwsPluginResourceDetailArtifact for lossless plugin publication. */
+export type AwsPluginResourceArtifact<AccountId extends string = string, RunId extends string = string> = AwsPublicArtifactEnvelope<'plugin-resource', AccountId, RunId> & Omit<AzureResourcePluginItemDetailed, 'subscription' | 'resourceGroup' | 'properties' | 'recommendations' | 'vmPricePerformance' | 'computeAlternatives'> & {
+    arn?: string;
+    region: string;
+    resourceGroup?: never;
+    properties?: never;
+    recommendations?: AwsPublicRecommendation[];
+};
+export {};
+//# sourceMappingURL=publicArtifacts.d.ts.map

package/dist/aws/publicArtifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicArtifacts.d.ts","sourceRoot":"","sources":["../../src/aws/publicArtifacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,KAAK,EACV,+BAA+B,EAC/B,wBAAwB,EACxB,4BAA4B,EAC5B,gCAAgC,EAChC,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACvI,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEtE,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAE7D,eAAO,MAAM,yBAAyB,0NAU5B,CAAC;AAEX,MAAM,MAAM,8BAA8B,GAAG,OAAO,kCAAkC,CAAC;AAEvF,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,kFAAkF;AAClF,MAAM,MAAM,0CAA0C,GAAG,mCAAmC,GAAG;IAC7F,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,eAAe,CAAC,EAAE,KAAK,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,yBAAyB,CACnC,YAAY,SAAS,qBAAqB,GAAG,qBAAqB,EAClE,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,KAAK,SAAS,MAAM,GAAG,MAAM,IAC3B,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,GAC1C,0CAA0C,GAAG;IAC3C,aAAa,EAAE,8BAA8B,CAAC;IAC9C,YAAY,EAAE,YAAY,CAAC;IAC3B,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;CAC/C,CAAC;AAEJ,MAAM,MAAM,yBAAyB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,GACjH,0CAA0C,GAAG;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEJ,MAAM,MAAM,2BAA2B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,IAAI,CAC/E,kBAAkB,EAClB,WAAW,GAAG,eAAe,GAAG,aAAa,GAAG,iBAAiB,GAAG,sBAAsB,GAAG,SAAS,GAAG,cAAc,GAAG,oBAAoB,CAC/I,GAAG;IACF,OAAO,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,+BAA+B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CACvI,iBAAiB,EACjB,SAAS,EACT,KAAK,CACN,GACC,2BAA2B,CAAC,SAAS,CAAC,CAAC;AAEzC,MAAM,MAAM,qBAAqB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,IAAI,CACzE,uBAAuB,EACvB,UAAU,GAAG,gBAAgB,GAAG,oBAAoB,CACrD,GACC,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,GACxC,0CAA0C,GAAG;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEJ,MAAM,MAAM,mCAAmC,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CAC3I,qBAAqB,EACrB,SAAS,EACT,KAAK,CACN,GACC,IAAI,CAAC,kBAAkB,EAAE,eAAe,GAAG,oBAAoB,GAAG,cAAc,GAAG,WAAW,CAAC,GAAG;IAChG,OAAO,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC9C,SAAS,EAAE,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;CAC/C,CAAC;AAEJ,MAAM,MAAM,6BAA6B,GACrC,OAAO,CAAC,4BAA4B,EAAE,cAAc,GAAG,eAAe,GAAG,iBAAiB,CAAC,GAC3F,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,MAAM,6BAA6B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC,4BAA4B,EAAE,eAAe,GAAG,YAAY,CAAC,GAC/I,0CAA0C,GAAG;IAC3C,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB,CAAC;AAEJ,MAAM,WAAW,yBAAyB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,6BAA6B,CAAC;IACpC,IAAI,EAAE,6BAA6B,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,+BAA+B,CAAC;CACxC;AAED,MAAM,MAAM,6BAA6B,GAAG,4BAA4B,CAAC;AAEzE,MAAM,MAAM,iCAAiC,GAAG,gCAAgC,CAAC;AAEjF,MAAM,MAAM,yBAAyB,GAAG,wBAAwB,CAAC;AAEjE,MAAM,MAAM,6BAA6B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CACrI,eAAe,EACf,SAAS,EACT,KAAK,CACN,GACC,IAAI,CAAC,yBAAyB,EAAE,eAAe,GAAG,OAAO,CAAC,GAAG;IAC3D,KAAK,EAAE,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAAC;CAC/C,CAAC;AAEJ,KAAK,yBAAyB,GAAG;IAC/B,aAAa,EAAE,CAAC,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACnC,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACnC,UAAU,EAAE,+BAA+B,EAAE,CAAC;IAC9C,KAAK,EAAE,yBAAyB,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,0BAA0B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,+BAA+B,GACzG,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,GACxC,0CAA0C,GAAG;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEJ,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAEvG,MAAM,MAAM,0BAA0B,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,CAAC;AAEhF,MAAM,MAAM,uBAAuB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,0CAA0C,GAAG;IACpH,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,uBAAuB,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,0BAA0B,CAAC;IACrC,SAAS,EAAE,0BAA0B,CAAC,SAAS,CAAC,EAAE,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,0BAA0B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CAClI,WAAW,EACX,SAAS,EACT,KAAK,CACN,GAAG;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,cAAc,EACZ,IAAI,GACJ,MAAM,GACN,UAAU,GACV,aAAa,GACb,sBAAsB,GACtB,MAAM,GACN,aAAa,GACb,aAAa,GACb,QAAQ,GACR,cAAc,GACd,OAAO,GACP,gBAAgB,GAChB,UAAU,GACV,mBAAmB,GACnB,yBAAyB,GACzB,QAAQ,GACR,cAAc,GACd,aAAa,GACb,iBAAiB,GACjB,MAAM,GACN,YAAY,GACZ,UAAU,GACV,YAAY,GACZ,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,yBAAyB,GACzB,sBAAsB,GACtB,kBAAkB,GAClB,aAAa,GACb,gBAAgB,GAChB,UAAU,GACV,UAAU,GACV,QAAQ,GACR,SAAS,GACT,aAAa,GACb,iBAAiB,GACjB,OAAO,GACP,UAAU,GACV,YAAY,GACZ,cAAc,GACd,YAAY,GACZ,eAAe,GACf,eAAe,GACf,oBAAoB,GACpB,MAAM,GACN,mBAAmB,GACnB,YAAY,GACZ,kBAAkB,GAClB,mBAAmB,GACnB,cAAc,GACd,eAAe,GACf,qBAAqB,GACrB,YAAY,GACZ,iBAAiB,CACpB,GACC,0CAA0C,GAAG;IAC3C,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,qBAAqB,CAAC,EAAE,KAAK,CAAC;IAC9B,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,MAAM,CAAC,EAAE,KAAK,CAAC;CAChB,CAAC;AAEJ,2FAA2F;AAC3F,MAAM,MAAM,6BAA6B,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CACrI,qBAAqB,EACrB,SAAS,EACT,KAAK,CACN,GACC,2BAA2B,CAAC,SAAS,CAAC,CAAC;AAEzC,uFAAuF;AACvF,MAAM,MAAM,yBAAyB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,yBAAyB,CACjI,iBAAiB,EACjB,SAAS,EACT,KAAK,CACN,GACC,IAAI,CACF,+BAA+B,EAC/B,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,iBAAiB,GAAG,oBAAoB,GAAG,qBAAqB,CACnH,GAAG;IACF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,eAAe,CAAC,EAAE,uBAAuB,EAAE,CAAC;CAC7C,CAAC"}

package/dist/aws/publicArtifacts.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWS_PUBLIC_ARTIFACT_TYPES = exports.AWS_PUBLIC_ARTIFACT_SCHEMA_VERSION = void 0;
+exports.AWS_PUBLIC_ARTIFACT_SCHEMA_VERSION = 1;
+exports.AWS_PUBLIC_ARTIFACT_TYPES = [
+    'resource-collection',
+    'resource-collection-history',
+    'account-summary',
+    'account-summary-history',
+    'account-summary-ai-cost-summary',
+    'relationships',
+    'lifecycle',
+    'plugin-subscription',
+    'plugin-resource',
+];
+//# sourceMappingURL=publicArtifacts.js.map

package/dist/aws/publicArtifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicArtifacts.js","sourceRoot":"","sources":["../../src/aws/publicArtifacts.ts"],"names":[],"mappings":";;;AAgBa,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAEhD,QAAA,yBAAyB,GAAG;IACvC,qBAAqB;IACrB,6BAA6B;IAC7B,iBAAiB;IACjB,yBAAyB;IACzB,iCAAiC;IACjC,eAAe;IACf,WAAW;IACX,qBAAqB;IACrB,iBAAiB;CACT,CAAC"}

package/dist/aws/requests.d.ts

@@ -0,0 +1,64 @@
+import type { AwsBillingExportConfiguration } from './cloudAccounts';
+/** Schema version for the first AWS cloud-account Service Bus ingress contract. */
+export declare const AWS_REQUEST_SCHEMA_VERSION: 1;
+/** Canonical provider wire value for AWS request messages. */
+export declare const AWS_REQUEST_PROVIDER: "aws";
+/** Entity handled by the first AWS Service Bus ingress contract. */
+export declare const AWS_REQUEST_ENTITY: "cloudaccount";
+/** Actions supported by the first AWS Service Bus ingress contract. */
+export declare const AWS_REQUEST_ACTIONS: readonly ["onboard", "refresh", "delete"];
+/** Credential-shaped keys rejected at the AWS request boundary. */
+export declare const AWS_REQUEST_FORBIDDEN_CREDENTIAL_FIELDS: readonly ["accessKeyId", "secretAccessKey", "sessionToken", "credentials", "resolvedCredentials", "secret", "encryptedSecret", "credentialReference"];
+export type AwsRequestSchemaVersion = typeof AWS_REQUEST_SCHEMA_VERSION;
+export type AwsRequestProvider = typeof AWS_REQUEST_PROVIDER;
+export type AwsRequestEntity = typeof AWS_REQUEST_ENTITY;
+export type AwsRequestActionV1 = (typeof AWS_REQUEST_ACTIONS)[number];
+export type AwsRequestForbiddenCredentialField = (typeof AWS_REQUEST_FORBIDDEN_CREDENTIAL_FIELDS)[number];
+/**
+ * Makes raw or resolved AWS credential material unrepresentable on typed ingress messages.
+ * Runtime queue boundaries must also reject these keys on untyped input.
+ */
+export type AwsRequestForbiddenCredentialFields = {
+    [Field in AwsRequestForbiddenCredentialField]?: never;
+};
+/** Common secret-free envelope fields shared by every AWS request v1 action. */
+export interface AwsRequestMessageV1Base extends AwsRequestForbiddenCredentialFields {
+    schemaVersion: AwsRequestSchemaVersion;
+    provider: AwsRequestProvider;
+    entity: AwsRequestEntity;
+    action: AwsRequestActionV1;
+    companyId: string;
+    cloudAccountId: string;
+    awsAccountId: string;
+    requestId: string;
+    correlationId: string;
+    /** ISO-8601 timestamp assigned by the API when the command is admitted. */
+    requestedAt: string;
+}
+/** Starts AWS AssumeRole validation, persistence, and the first asynchronous sync. */
+export interface AwsOnboardRequestMessageV1 extends AwsRequestMessageV1Base {
+    action: 'onboard';
+    roleArn: string;
+    /** Server-issued setup metadata used for AssumeRole trust verification; never return it in public status DTOs. */
+    externalId: string;
+    /** Optional non-secret billing-export locator validated and persisted by the API. */
+    billingExport?: AwsBillingExportConfiguration;
+}
+/** Starts a refresh from persisted AWS onboarding state. */
+export interface AwsRefreshRequestMessageV1 extends AwsRequestMessageV1Base {
+    action: 'refresh';
+    roleArn?: never;
+    externalId?: never;
+    billingExport?: never;
+}
+/** Removes the AWS cloud-account connection and its engine-owned onboarding state. */
+export interface AwsDeleteRequestMessageV1 extends AwsRequestMessageV1Base {
+    action: 'delete';
+    roleArn?: never;
+    externalId?: never;
+    billingExport?: never;
+}
+/** Versioned, credential-free command consumed only by the dedicated AWS Service Bus ingress. */
+export type AwsRequestMessageV1 = AwsOnboardRequestMessageV1 | AwsRefreshRequestMessageV1 | AwsDeleteRequestMessageV1;
+export type AwsRequestMessage = AwsRequestMessageV1;
+//# sourceMappingURL=requests.d.ts.map

package/dist/aws/requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../src/aws/requests.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAErE,mFAAmF;AACnF,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAErD,8DAA8D;AAC9D,eAAO,MAAM,oBAAoB,EAAG,KAAc,CAAC;AAEnD,oEAAoE;AACpE,eAAO,MAAM,kBAAkB,EAAG,cAAuB,CAAC;AAE1D,uEAAuE;AACvE,eAAO,MAAM,mBAAmB,2CAA4C,CAAC;AAE7E,mEAAmE;AACnE,eAAO,MAAM,uCAAuC,uJAS1C,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,OAAO,0BAA0B,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,OAAO,oBAAoB,CAAC;AAC7D,MAAM,MAAM,gBAAgB,GAAG,OAAO,kBAAkB,CAAC;AACzD,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,MAAM,MAAM,kCAAkC,GAAG,CAAC,OAAO,uCAAuC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1G;;;GAGG;AACH,MAAM,MAAM,mCAAmC,GAAG;KAC/C,KAAK,IAAI,kCAAkC,CAAC,CAAC,EAAE,KAAK;CACtD,CAAC;AAEF,gFAAgF;AAChF,MAAM,WAAW,uBAAwB,SAAQ,mCAAmC;IAClF,aAAa,EAAE,uBAAuB,CAAC;IACvC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,sFAAsF;AACtF,MAAM,WAAW,0BAA2B,SAAQ,uBAAuB;IACzE,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,kHAAkH;IAClH,UAAU,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,aAAa,CAAC,EAAE,6BAA6B,CAAC;CAC/C;AAED,4DAA4D;AAC5D,MAAM,WAAW,0BAA2B,SAAQ,uBAAuB;IACzE,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB;AAED,sFAAsF;AACtF,MAAM,WAAW,yBAA0B,SAAQ,uBAAuB;IACxE,MAAM,EAAE,QAAQ,CAAC;IACjB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB;AAED,iGAAiG;AACjG,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,GAAG,0BAA0B,GAAG,yBAAyB,CAAC;AACtH,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,CAAC"}

package/dist/aws/requests.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWS_REQUEST_FORBIDDEN_CREDENTIAL_FIELDS = exports.AWS_REQUEST_ACTIONS = exports.AWS_REQUEST_ENTITY = exports.AWS_REQUEST_PROVIDER = exports.AWS_REQUEST_SCHEMA_VERSION = void 0;
+/** Schema version for the first AWS cloud-account Service Bus ingress contract. */
+exports.AWS_REQUEST_SCHEMA_VERSION = 1;
+/** Canonical provider wire value for AWS request messages. */
+exports.AWS_REQUEST_PROVIDER = 'aws';
+/** Entity handled by the first AWS Service Bus ingress contract. */
+exports.AWS_REQUEST_ENTITY = 'cloudaccount';
+/** Actions supported by the first AWS Service Bus ingress contract. */
+exports.AWS_REQUEST_ACTIONS = ['onboard', 'refresh', 'delete'];
+/** Credential-shaped keys rejected at the AWS request boundary. */
+exports.AWS_REQUEST_FORBIDDEN_CREDENTIAL_FIELDS = [
+    'accessKeyId',
+    'secretAccessKey',
+    'sessionToken',
+    'credentials',
+    'resolvedCredentials',
+    'secret',
+    'encryptedSecret',
+    'credentialReference',
+];
+//# sourceMappingURL=requests.js.map

package/dist/aws/requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../src/aws/requests.ts"],"names":[],"mappings":";;;AAEA,mFAAmF;AACtE,QAAA,0BAA0B,GAAG,CAAU,CAAC;AAErD,8DAA8D;AACjD,QAAA,oBAAoB,GAAG,KAAc,CAAC;AAEnD,oEAAoE;AACvD,QAAA,kBAAkB,GAAG,cAAuB,CAAC;AAE1D,uEAAuE;AAC1D,QAAA,mBAAmB,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAE7E,mEAAmE;AACtD,QAAA,uCAAuC,GAAG;IACrD,aAAa;IACb,iBAAiB;IACjB,cAAc;IACd,aAAa;IACb,qBAAqB;IACrB,QAAQ;IACR,iBAAiB;IACjB,qBAAqB;CACb,CAAC"}

package/dist/azure/activityLogs.d.ts

@@ -0,0 +1,71 @@
+export declare const PORTAL_ACTIVITY_LOG_SCHEMA_VERSION: "2026-05-02.change-monitoring-v1";
+export declare const PORTAL_ACTIVITY_LOG_FILE: "activity-logs.json";
+export type PortalActivityLogActorType = 'user' | 'servicePrincipal' | 'managedIdentity' | 'platform' | 'unknown';
+export type PortalActivityLogActorResolutionSource = 'caller' | 'arg' | 'entra-signin' | 'entra-audit' | 'derived' | 'tenant-principals';
+export type PortalActivityLogKind = 'change' | 'security' | 'operation' | 'health';
+export type PortalActivityLogImportance = 'high' | 'medium' | 'low';
+export type PortalActivityLogFeedMode = 'all-advanced' | 'changes-default' | 'security' | 'health';
+export type PortalActivityLogSuppressionReason = 'autoscale' | 'operational-lookup' | 'platform' | 'non-change';
+export interface PortalActivityLogSource {
+    rawEventCount: number;
+    retainedEventCount: number;
+    changeCount: number;
+    securityCount: number;
+    healthCount: number;
+    suppressedCount: number;
+    latestRawTimestamp?: string;
+}
+export interface PortalActivityLogEntry {
+    /**
+     * Stable identity for the collapsed activity group within one subscription.
+     * Consumers must scope this value by subscription before using it as a
+     * cross-subscription entity or persistence key.
+     */
+    activityGroupId?: string;
+    eventTimestamp: string;
+    firstEventTimestamp: string;
+    lastEventTimestamp: string;
+    eventCount: number;
+    statusCounts: Record<string, number>;
+    collapsed: boolean;
+    category: string;
+    level: string;
+    status: string;
+    statusDetail?: string;
+    operationName: string;
+    operation: string;
+    caller: string;
+    resourceId?: string;
+    resourceName?: string;
+    eventId?: string;
+    description?: string;
+    feedModes: PortalActivityLogFeedMode[];
+    actorType: PortalActivityLogActorType;
+    actorDisplay: string;
+    actorRaw: string;
+    actorId?: string;
+    actorResolutionSource: PortalActivityLogActorResolutionSource;
+    clientType?: string;
+    kind: PortalActivityLogKind;
+    subtype: string;
+    isMaterialChange: boolean;
+    isSecuritySensitive: boolean;
+    isPlatformEvent: boolean;
+    importance: PortalActivityLogImportance;
+}
+export interface PortalActivityLogSuppressedSummary {
+    reason: PortalActivityLogSuppressionReason;
+    count: number;
+    sampleOperation?: string;
+    sampleResourceName?: string;
+}
+export interface PortalActivityLog {
+    schemaVersion: typeof PORTAL_ACTIVITY_LOG_SCHEMA_VERSION;
+    generatedAt: string;
+    source: PortalActivityLogSource;
+    changes: PortalActivityLogEntry[];
+    security: PortalActivityLogEntry[];
+    health: PortalActivityLogEntry[];
+    suppressed: PortalActivityLogSuppressedSummary[];
+}
+//# sourceMappingURL=activityLogs.d.ts.map

package/dist/azure/activityLogs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activityLogs.d.ts","sourceRoot":"","sources":["../../src/azure/activityLogs.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kCAAkC,EAAG,iCAA0C,CAAC;AAE7F,eAAO,MAAM,wBAAwB,EAAG,oBAA6B,CAAC;AAEtE,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,kBAAkB,GAAG,iBAAiB,GAAG,UAAU,GAAG,SAAS,CAAC;AAElH,MAAM,MAAM,sCAAsC,GAAG,QAAQ,GAAG,KAAK,GAAG,cAAc,GAAG,aAAa,GAAG,SAAS,GAAG,mBAAmB,CAAC;AAEzI,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEnF,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEpE,MAAM,MAAM,yBAAyB,GAAG,cAAc,GAAG,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEnG,MAAM,MAAM,kCAAkC,GAAG,WAAW,GAAG,oBAAoB,GAAG,UAAU,GAAG,YAAY,CAAC;AAEhH,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,yBAAyB,EAAE,CAAC;IACvC,SAAS,EAAE,0BAA0B,CAAC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qBAAqB,EAAE,sCAAsC,CAAC;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,2BAA2B,CAAC;CACzC;AAED,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE,kCAAkC,CAAC;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,OAAO,kCAAkC,CAAC;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,uBAAuB,CAAC;IAChC,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAClC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjC,UAAU,EAAE,kCAAkC,EAAE,CAAC;CAClD"}

package/dist/azure/activityLogs.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PORTAL_ACTIVITY_LOG_FILE = exports.PORTAL_ACTIVITY_LOG_SCHEMA_VERSION = void 0;
+exports.PORTAL_ACTIVITY_LOG_SCHEMA_VERSION = '2026-05-02.change-monitoring-v1';
+exports.PORTAL_ACTIVITY_LOG_FILE = 'activity-logs.json';
+//# sourceMappingURL=activityLogs.js.map

package/dist/azure/activityLogs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activityLogs.js","sourceRoot":"","sources":["../../src/azure/activityLogs.ts"],"names":[],"mappings":";;;AAAa,QAAA,kCAAkC,GAAG,iCAA0C,CAAC;AAEhF,QAAA,wBAAwB,GAAG,oBAA6B,CAAC"}

package/dist/azure/advisorScore.d.ts

@@ -0,0 +1,39 @@
+export type AdvisorScorePillar = 'overall' | 'cost' | 'security' | 'performance' | 'reliability' | 'operationalExcellence';
+export interface AdvisorScorePoint {
+    date: string;
+    /** Normalized 0-100 score. */
+    score: number;
+    /** Raw API value retained while validating live tenant behavior. */
+    rawScore?: number;
+    consumptionUnits?: number;
+    impactedResourceCount?: number;
+    potentialScoreIncrease?: number;
+    categoryCount?: number;
+}
+export interface AdvisorScoreCategory {
+    pillar: AdvisorScorePillar;
+    rawName: string;
+    lastRefreshedScore?: AdvisorScorePoint;
+    timeSeries?: {
+        day?: AdvisorScorePoint[];
+        week?: AdvisorScorePoint[];
+        month?: AdvisorScorePoint[];
+    };
+}
+export interface AdvisorScoreSummary {
+    overall?: AdvisorScoreCategory;
+    cost?: AdvisorScoreCategory;
+    security?: AdvisorScoreCategory;
+    performance?: AdvisorScoreCategory;
+    reliability?: AdvisorScoreCategory;
+    operationalExcellence?: AdvisorScoreCategory;
+    lastRefreshedDate?: string;
+}
+export interface AdvisorScorePillarScores {
+    cost?: number;
+    security?: number;
+    performance?: number;
+    reliability?: number;
+    operationalExcellence?: number;
+}
+//# sourceMappingURL=advisorScore.d.ts.map

package/dist/azure/advisorScore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advisorScore.d.ts","sourceRoot":"","sources":["../../src/azure/advisorScore.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAC1B,SAAS,GACT,MAAM,GACN,UAAU,GACV,aAAa,GACb,aAAa,GACb,uBAAuB,CAAC;AAE5B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,iBAAiB,CAAC;IACvC,UAAU,CAAC,EAAE;QACX,GAAG,CAAC,EAAE,iBAAiB,EAAE,CAAC;QAC1B,IAAI,CAAC,EAAE,iBAAiB,EAAE,CAAC;QAC3B,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,qBAAqB,CAAC,EAAE,oBAAoB,CAAC;IAC7C,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC"}

package/dist/azure/advisorScore.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=advisorScore.js.map

package/dist/azure/advisorScore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advisorScore.js","sourceRoot":"","sources":["../../src/azure/advisorScore.ts"],"names":[],"mappings":""}

package/dist/azure/benefits.d.ts

@@ -0,0 +1,161 @@
+import type { SubscriptionSummaryLite } from './subscriptions.js';
+export type BenefitType = 'reservation' | 'savings-plan';
+export type BenefitScope = 'Shared' | 'Single' | 'ManagementGroup' | 'Unknown';
+export type BenefitBucket = 'expired' | 'expiring-30d' | 'expiring-60d' | 'expiring-180d' | 'active-gt-180d' | 'underutilized-30d';
+export type BenefitCostBasis = 'actual' | 'amortized';
+export type OdeSource = 'pricing_model' | 'retail_rate' | 'discount_delta' | 'unknown';
+export type EsrStatus = 'computed' | 'estimated' | 'unavailable';
+export interface IBenefitUtilization {
+    trend?: string;
+    oneDay?: number;
+    sevenDay?: number;
+    thirtyDay?: number;
+    source?: 'aggregate' | 'usage' | 'reservation-summary';
+}
+export type BenefitUtilizationAggregateUnit = 'hours' | 'quantity' | 'currency';
+/**
+ * Lossless utilization numerator and denominator for weighted aggregation.
+ * `used` and `reserved` use the same unit. Keep separate entries when unit or
+ * currency differs, then aggregate only compatible entries.
+ */
+export interface IBenefitWeightedUtilizationAggregateBase {
+    used: number;
+    reserved: number;
+    /** Derived percentage on a 0-100 scale. */
+    percentage?: number;
+    sampleCount?: number;
+}
+export type IBenefitWeightedUtilizationAggregate = IBenefitWeightedUtilizationAggregateBase & ({
+    unit: Exclude<BenefitUtilizationAggregateUnit, 'currency'>;
+    currency?: never;
+} | {
+    unit: 'currency';
+    currency: string;
+});
+export interface IBenefit {
+    id: string;
+    benefitType: BenefitType;
+    scope: BenefitScope;
+    type: string;
+    displayName?: string;
+    expiryDate?: string | null;
+    status: 'active' | 'expired';
+    subscriptionId?: string;
+    purchaseDate?: string | null;
+    reservedQuantity?: number;
+    commitmentAmount?: number;
+    commitmentCurrencyCode?: string;
+    commitmentGrain?: string;
+    commitmentUnit?: string;
+    skuName?: string;
+    skuDescription?: string;
+    location?: string;
+    term?: string;
+    billingPlan?: string;
+    billingScopeId?: string;
+    appliedScopeDisplayName?: string;
+    provisioningState?: string;
+    renew?: boolean;
+    purchasedQuantity?: number;
+    usedQuantity?: number;
+    remainingQuantity?: number;
+    totalReservedQuantity?: number;
+    reservedHours?: number;
+    usedHours?: number;
+    utilization?: IBenefitUtilization;
+}
+export interface IBenefitBucketSummary {
+    bucket: BenefitBucket;
+    total: number;
+    byType: Array<{
+        type: string;
+        count: number;
+    }>;
+    byScope: Array<{
+        scope: BenefitScope;
+        count: number;
+    }>;
+    byBenefitType: Array<{
+        benefitType: BenefitType;
+        count: number;
+    }>;
+}
+export interface IBenefitUtilizationSummary {
+    total: number;
+    withData: number;
+    sevenDayAverage?: number;
+    thirtyDayAverage?: number;
+    sevenDayAggregates?: IBenefitWeightedUtilizationAggregate[];
+    thirtyDayAggregates?: IBenefitWeightedUtilizationAggregate[];
+    byBenefitType: Array<{
+        benefitType: BenefitType;
+        total: number;
+        withData: number;
+        sevenDayAverage?: number;
+        thirtyDayAverage?: number;
+        sevenDayAggregates?: IBenefitWeightedUtilizationAggregate[];
+        thirtyDayAggregates?: IBenefitWeightedUtilizationAggregate[];
+    }>;
+}
+export interface IBenefitInventorySummary {
+    generatedAt: string;
+    summary: {
+        total: number;
+        active: number;
+        expired: number;
+    };
+    buckets: IBenefitBucketSummary[];
+    utilization: IBenefitUtilizationSummary;
+}
+export interface IBenefitCoverageServiceEntry {
+    serviceName: string;
+    eligibleQuantity?: number;
+    coveredQuantity?: number;
+    eligibleCost?: number;
+    coveredCost?: number;
+    uncoveredCost?: number;
+    coveragePercent?: number;
+}
+export interface IBenefitCoverageServiceSummary {
+    basis: BenefitCostBasis;
+    windowStart?: string;
+    windowEnd?: string;
+    eligibleQuantity?: number;
+    coveredQuantity?: number;
+    eligibleCost?: number;
+    coveredCost?: number;
+    uncoveredCost?: number;
+    coveragePercent?: number;
+    services: IBenefitCoverageServiceEntry[];
+}
+export interface IBenefitCoverageBreakdownEntry {
+    benefitId?: string;
+    benefitName?: string;
+    coveredQuantity?: number;
+    coveredCost?: number;
+}
+export interface IEffectiveSavingsRateSummary {
+    basis: BenefitCostBasis;
+    windowStart?: string;
+    windowEnd?: string;
+    odeCost?: number;
+    actualCost?: number;
+    amortizedCost?: number;
+    esrPercent?: number;
+    odeSource?: OdeSource;
+    esrStatus?: EsrStatus;
+}
+export interface ISubscriptionBenefitsSummary {
+    version: string;
+    generatedAt: string;
+    subscription?: SubscriptionSummaryLite;
+    inventorySummary: IBenefitInventorySummary;
+    inventory: IBenefit[];
+    sharedInventorySummary?: IBenefitInventorySummary;
+    sharedInventory?: IBenefit[];
+    utilization: IBenefitUtilizationSummary;
+    coverage: IBenefitCoverageServiceSummary[];
+    esr: IEffectiveSavingsRateSummary[];
+    warnings?: string[];
+}
+//# sourceMappingURL=benefits.d.ts.map