@spottoai/types-package 1.0.2-beta.33 → 1.0.2-beta.331

package/dist/accounts/accounts.d.ts

@@ -1,10 +1,365 @@
 import { SurveyResponse } from '../company';
-export interface CloudAccount {
+import type { EffortEstimateProfileName } from '../azure/recommendations';
+import type { AwsEstateAccountPurpose } from '../aws/estates';
+import type { AwsForbiddenCredentialFields } from '../aws/requests';
+import type { SyncProgressIssue, SyncProgressStatus, SyncProgressStepStatus, SyncProgressSubStepStatus } from '../common/syncProgress';
+export type { SyncProgressIssue, SyncProgressIssueMetadataValue, SyncProgressIssueScope, SyncProgressIssueType } from '../common/syncProgress';
+export type SubscriptionType = 'Production' | 'Non-Production' | 'Mixed';
+export type CloudAccountAuthMode = 'servicePrincipal' | 'delegatedUser' | 'gdap' | 'crossAccountRole';
+export type CloudAccountTenantSyncSource = 'manual' | 'scheduled' | 'onboarding';
+export type CloudAccountTenantSyncStatus = 'Idle' | 'Requested' | 'Processing' | 'Completed' | 'Error';
+export type CloudAccountFirstSyncNotificationStatus = 'Pending' | 'Sending' | 'Sent' | 'Error';
+export type BillingExportLocatorScopeType = 'tenant' | 'billingAccount';
+export type AzureGdapRelationshipStatus = 'unknown' | 'created' | 'approvalPending' | 'active' | 'terminated' | 'expired';
+export type AzureGdapAccessAssignmentStatus = 'unknown' | 'pending' | 'active' | 'deleting' | 'deleted' | 'error';
+export type AzureGdapValidationStatus = 'notValidated' | 'ready' | 'degraded' | 'blocked' | 'expired' | 'reauthRequired';
+export type AzureGdapCapabilityKey = 'partnerAuthorization' | 'relationship' | 'accessAssignment' | 'appConsent' | 'subscriptionDiscovery' | 'resourceInventory' | 'resourceGraph' | 'costRead' | 'partnerBillingCostRead' | 'billingExportSetup' | 'monitoringRead' | 'graphInventory' | 'scheduledScan';
+export type AzureGdapCapabilityStatusValue = 'ready' | 'degraded' | 'blocked' | 'unsupported' | 'notChecked';
+export interface AzureGdapCapabilityStatus {
+    key: AzureGdapCapabilityKey;
+    status: AzureGdapCapabilityStatusValue;
+    reason?: string;
+    checkedAt?: string;
+    requiredRoles?: string[];
+    requiredAzureRoles?: string[];
+}
+/** Internal CSP partner billing scope used for customer-scope Cost Management queries. */
+export interface AzureCspPartnerBillingScope {
+    billingAccountId: string;
+    customerId: string;
+    scopePath: string;
+    validatedAt: string;
+}
+export interface AzureGdapRoleAssignment {
+    roleId?: string;
+    roleTemplateId?: string;
+    displayName: string;
+}
+/** Non-secret lifecycle details for the customer-specific GDAP relationship used by a child cloud account. */
+export interface AzureGdapRelationshipLifecycle {
+    relationshipId: string;
+    customerTenantId: string;
+    status: AzureGdapRelationshipStatus;
+    displayName?: string;
+    accessAssignmentId?: string;
+    accessAssignmentStatus?: AzureGdapAccessAssignmentStatus;
+    securityGroupId?: string;
+    securityGroupDisplayName?: string;
+    roles?: AzureGdapRoleAssignment[];
+    expiresAt?: string;
+    autoExtendEnabled?: boolean;
+}
+/** Readable Azure subscription offered for explicit selection during child-company GDAP setup. */
+export interface AzureGdapSubscriptionOption {
+    subscriptionId: string;
+    displayName: string;
+    tenantId: string;
+    state?: string;
+}
+export interface AzureGdapCloudAccountMetadata {
+    gdapAuthorizationCompanyId?: string;
+    gdapAuthorizationProfileId?: string;
+    gdapPartnerTenantId: string;
+    gdapCustomerTenantId: string;
+    gdapRelationshipId: string;
+    gdapRelationshipDisplayName?: string;
+    gdapRelationshipStatus?: AzureGdapRelationshipStatus;
+    gdapAccessAssignmentId?: string;
+    gdapAccessAssignmentStatus?: AzureGdapAccessAssignmentStatus;
+    gdapSecurityGroupId?: string;
+    gdapSecurityGroupDisplayName?: string;
+    gdapRoles?: AzureGdapRoleAssignment[];
+    gdapExpiresAt?: string;
+    gdapAutoExtendEnabled?: boolean;
+    gdapPartnerAuthorizationStatus?: AzureGdapValidationStatus;
+    gdapAppConsentStatus?: AzureGdapValidationStatus;
+    gdapLastValidatedAt?: string;
+    gdapLastValidationStatus?: AzureGdapValidationStatus;
+    gdapLastValidationErrorCode?: string;
+    gdapLastValidationMessage?: string;
+    gdapScheduledEligible?: boolean;
+    gdapScheduledEligibilityReason?: string;
+    gdapCapabilities?: AzureGdapCapabilityStatus[];
+    /** Internal partner billing scope. Do not expose billing account/customer identifiers in public API DTOs. */
+    cspPartnerBillingScope?: AzureCspPartnerBillingScope;
+}
+export interface AzureCloudAccountAuthContext {
+    authMode?: CloudAccountAuthMode;
+    cloudAccountId: string;
+    gdapAuthorizationCompanyId?: string;
+    gdapAuthorizationProfileId?: string;
+    customerTenantId?: string;
+    authorityTenantId?: string;
+    partnerTenantId?: string;
+    principalClientId?: string;
+    credentialReference?: string;
+}
+export interface AzureGdapAuthorizationProfileSummary {
+    id: string;
+    companyId: string;
+    displayName: string;
+    partnerTenantId: string;
+    authorizationStatus: AzureGdapValidationStatus;
+    hasCredential: boolean;
+    authorizedAt?: string;
+    expiresAt?: string;
+    lastValidatedAt?: string;
+    lastValidationStatus?: AzureGdapValidationStatus;
+    lastValidationErrorCode?: string;
+    lastValidationMessage?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+export interface AzureGdapAuthorizationProfileListResponse {
+    profiles: AzureGdapAuthorizationProfileSummary[];
+}
+export interface AzureGdapEligibleAuthorizationProfilesResponse {
+    rootCompanyId: string;
+    profiles: AzureGdapAuthorizationProfileSummary[];
+}
+export interface AzureGdapCreateAuthorizationProfileRequest {
+    displayName?: string;
+    partnerTenantId?: string;
+}
+export interface AzureGdapStartPartnerAuthorizationRequest {
+    redirectAfter?: string;
+}
+export interface AzureGdapPartnerAuthorizationStartResponse {
+    profileId: string;
+    authorizationUrl: string;
+    expiresAt: string;
+}
+export interface AzureGdapDraftValidationRequest {
+    gdapAuthorizationCompanyId?: string;
+    gdapAuthorizationProfileId?: string;
+    gdapPartnerTenantId?: string;
+    gdapCustomerTenantId?: string;
+    tenantId?: string;
+    gdapRelationshipId?: string;
+    gdapAccessAssignmentId?: string;
+    gdapSecurityGroupId?: string;
+}
+interface AzureGdapDraftValidationResponseBase {
+    status: AzureGdapValidationStatus;
+    profile?: AzureGdapAuthorizationProfileSummary;
+    capabilities: AzureGdapCapabilityStatus[];
+    customerTenantId?: string;
+    appConsentStatus?: AzureGdapValidationStatus;
+    relationship?: AzureGdapRelationshipLifecycle;
+    message?: string;
+}
+export interface AzureGdapReadyDraftValidationResponse extends AzureGdapDraftValidationResponseBase {
+    valid: true;
+    status: 'ready';
+    customerTenantId: string;
+    appConsentStatus: 'ready';
+    relationship: AzureGdapRelationshipLifecycle;
+    subscriptions: AzureGdapSubscriptionOption[];
+    /** Opaque, short-lived proof that the API must validate when creating the child cloud account. */
+    validationReceipt: string;
+    validationExpiresAt: string;
+}
+export interface AzureGdapUnreadyDraftValidationResponse extends AzureGdapDraftValidationResponseBase {
+    valid: false;
+    status: Exclude<AzureGdapValidationStatus, 'ready'>;
+    subscriptions?: AzureGdapSubscriptionOption[];
+}
+export type AzureGdapDraftValidationResponse = AzureGdapReadyDraftValidationResponse | AzureGdapUnreadyDraftValidationResponse;
+export interface AzureGdapCloudAccountStatusResponse {
+    cloudAccountId: string;
+    companyId: string;
+    status: AzureGdapValidationStatus;
+    customerTenantId?: string;
+    partnerAuthorizationStatus?: AzureGdapValidationStatus;
+    appConsentStatus?: AzureGdapValidationStatus;
+    lastValidatedAt?: string | Date;
+    lastValidationStatus?: AzureGdapValidationStatus;
+    lastValidationErrorCode?: string;
+    lastValidationMessage?: string;
+    scheduledEligible?: boolean;
+    scheduledEligibilityReason?: string;
+    capabilities?: AzureGdapCapabilityStatus[];
+    relationship?: AzureGdapRelationshipLifecycle;
+    subscriptions?: AzureGdapSubscriptionOption[];
+}
+export interface AzureGdapCloudAccountCreateRequest {
     companyId: string;
+    name: string;
+    provider: 'Azure';
+    authMode: 'gdap';
+    tenantId: string;
+    gdapCustomerTenantId: string;
+    gdapPartnerTenantId: string;
+    gdapRelationshipId: string;
+    gdapAccessAssignmentId?: string;
+    gdapSecurityGroupId?: string;
+    gdapAuthorizationCompanyId: string;
+    gdapAuthorizationProfileId: string;
+    subscriptionIds: string[];
+    /** Opaque proof returned by a successful customer-scoped GDAP draft validation. */
+    validationReceipt: string;
+}
+export interface BillingExportLocatorEntry {
+    scopeType: BillingExportLocatorScopeType;
+    scopePath: string;
+    exportName: string;
+    storageAccountName: string;
+    container: string;
+    rootFolderPath: string;
+}
+export interface CloudAccountBillingExportLocator {
+    actual?: BillingExportLocatorEntry;
+    amortized?: BillingExportLocatorEntry;
+}
+export declare const AZURE_SYNC_FEATURE_ORDER: readonly ["activityMonitoring", "metrics", "billing", "pricing", "costEstimation", "commitments", "relationshipGraphs", "governance", "availabilityZones", "reliability", "perimeterInsights", "reportEvidencePack"];
+export type AzureSyncFeatureId = (typeof AZURE_SYNC_FEATURE_ORDER)[number];
+export type AzureSyncFeatureConfigurationScope = 'cloudAccount' | 'subscription';
+export interface AzureSyncFeatureMetadata {
+    id: AzureSyncFeatureId;
+    displayName: string;
+    description: string;
+    supportedScopes: readonly AzureSyncFeatureConfigurationScope[];
+    warning?: string;
+}
+export declare const AZURE_SYNC_FEATURE_METADATA: readonly [{
+    readonly id: "activityMonitoring";
+    readonly displayName: "Activity monitoring";
+    readonly description: "Collects Azure activity logs and activity-derived operational events.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+    readonly warning: "Disabling activity monitoring prevents activity log collection and related detections.";
+}, {
+    readonly id: "metrics";
+    readonly displayName: "Metrics";
+    readonly description: "Collects subscription resource metrics used for utilization and rightsizing insights.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+}, {
+    readonly id: "billing";
+    readonly displayName: "Billing";
+    readonly description: "Collects billing and cost usage data.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+}, {
+    readonly id: "pricing";
+    readonly displayName: "Pricing";
+    readonly description: "Collects Azure price data used for cost calculations.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+}, {
+    readonly id: "costEstimation";
+    readonly displayName: "Cost estimation";
+    readonly description: "Builds estimated costs when billing-backed usage is unavailable or incomplete.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+}, {
+    readonly id: "commitments";
+    readonly displayName: "Reservations and commitments";
+    readonly description: "Collects reserved instances, savings plans, and commitment utilization data.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+}, {
+    readonly id: "relationshipGraphs";
+    readonly displayName: "Relationship graphs";
+    readonly description: "Builds relationship graph artifacts from scanned Azure resources.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+}, {
+    readonly id: "governance";
+    readonly displayName: "Governance";
+    readonly description: "Builds tenant and subscription governance reports and graph artifacts.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+}, {
+    readonly id: "availabilityZones";
+    readonly displayName: "Availability zones";
+    readonly description: "Collects tenant-level availability zone mappings.";
+    readonly supportedScopes: readonly ["cloudAccount"];
+}, {
+    readonly id: "reliability";
+    readonly displayName: "Reliability";
+    readonly description: "Collects reliability signals and recommendations for subscription resources.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+}, {
+    readonly id: "perimeterInsights";
+    readonly displayName: "Perimeter insights";
+    readonly description: "Builds public IP and perimeter exposure insights.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+}, {
+    readonly id: "reportEvidencePack";
+    readonly displayName: "Report evidence pack";
+    readonly description: "Builds evidence artifacts used by reports and review workflows.";
+    readonly supportedScopes: readonly ["cloudAccount", "subscription"];
+}];
+type AzureSyncFeatureMetadataEntry = (typeof AZURE_SYNC_FEATURE_METADATA)[number];
+type AzureSyncFeatureIdsForScope<Scope extends AzureSyncFeatureConfigurationScope> = AzureSyncFeatureMetadataEntry extends infer Feature ? Feature extends {
+    id: AzureSyncFeatureId;
+    supportedScopes: readonly AzureSyncFeatureConfigurationScope[];
+} ? Scope extends Feature['supportedScopes'][number] ? Feature['id'] : never : never : never;
+export type AzureCloudAccountSyncFeatureId = AzureSyncFeatureIdsForScope<'cloudAccount'>;
+export type AzureSubscriptionSyncFeatureId = AzureSyncFeatureIdsForScope<'subscription'>;
+export declare const isAzureSyncFeatureId: (value: string) => value is AzureSyncFeatureId;
+export declare const getAzureSyncFeatureMetadata: (featureId: AzureSyncFeatureId) => AzureSyncFeatureMetadata;
+export declare const isAzureSyncFeatureSupportedInScope: (featureId: AzureSyncFeatureId, scope: AzureSyncFeatureConfigurationScope) => boolean;
+export declare const sortAzureSyncFeatureIds: (featureIds: readonly AzureSyncFeatureId[]) => AzureSyncFeatureId[];
+export declare const getAzureSyncFeatureOptions: (scope: AzureSyncFeatureConfigurationScope) => AzureSyncFeatureMetadata[];
+export declare const getAzureSyncFeatureIdsForScope: (scope: AzureSyncFeatureConfigurationScope) => AzureSyncFeatureId[];
+export interface CloudAccountSyncFeatureOptOutsUpdateRequest {
+    syncFeatureOptOuts: AzureCloudAccountSyncFeatureId[];
+}
+export interface SubscriptionSyncFeatureOptOutsUpdateRequest {
+    syncFeatureOptOuts: AzureSubscriptionSyncFeatureId[];
+}
+export declare const SUBSCRIPTION_SYNC_STEP_ORDER: readonly ["metrics", "resourcegroups", "activities", "queries", "reliability", "billing", "costestimation", "pricing", "commitments", "views"];
+export type SubscriptionSyncStepId = (typeof SUBSCRIPTION_SYNC_STEP_ORDER)[number];
+export type AzureDelegatedOnboardingStatus = 'subscriptionSelectionRequired' | 'active' | 'setupExpired';
+export type AzureDelegatedAuthErrorCode = 'invalid_grant' | 'interaction_required' | 'consent_required' | 'claims_challenge' | 'forbidden' | 'unknown';
+export type AzureDelegatedOAuthStatePhase = 'discoverTenants' | 'tenantSelectionRequired' | 'tenantConsent' | 'completed' | 'failed';
+export type CloudAccountScanSchedulingMode = 'every12Hours' | 'daily' | 'weekly' | 'onDemandOnly';
+export type AzureGuestAccessScanSchedulingMode = 'onDemandOnly';
+export type AzureGuestAccessStatus = 'created' | 'deviceCodePending' | 'tenantDiscoveryRequired' | 'tenantSelectionRequired' | 'tenantAuthorizationRequired' | 'subscriptionSelectionRequired' | 'queued' | 'scanning' | 'completed' | 'partial' | 'failed' | 'reauthRequired' | 'cancelled' | 'expired';
+export type AzureGuestAccessStatusReason = 'device_code_expired' | 'tenant_discovery_failed' | 'tenant_selection_required' | 'tenant_authorization_required' | 'microsoft_account_mismatch' | 'no_readable_subscriptions' | 'subscription_read_forbidden' | 'token_relay_missing' | 'setup_expired' | 'stale_message' | 'refresh_token_expired' | 'token_refresh_failed' | 'refresh_requires_interaction' | 'resource_inventory_failed' | 'resource_graph_failed' | 'billing_2m_failed' | 'scan_failed' | 'cancelled_by_user' | 'unknown';
+export interface AzureGuestAccessCloudAccountFields {
+    /** Public-safe guest access lifecycle status. Token relay payloads are never stored in this field. */
+    guestAccessStatus?: AzureGuestAccessStatus;
+    /** Public-safe reason for the current guest access lifecycle state. */
+    guestAccessStatusReason?: AzureGuestAccessStatusReason;
+    /** Current guest access run correlation ID. This is not a token relay storage locator. */
+    guestAccessRunId?: string;
+    /** Previous guest access run correlation ID. This is not a token relay storage locator. */
+    guestAccessLastRunId?: string;
+    /** Timestamp for when the current guest access run was queued. */
+    guestAccessQueuedAt?: Date | string;
+    /** Timestamp for when the current guest access scan started. */
+    guestAccessScanStartedAt?: Date | string;
+    /** Timestamp for when the current guest access scan completed. */
+    guestAccessScanCompletedAt?: Date | string;
+    /** Timestamp for the last completed guest access scan with usable results. */
+    guestAccessLastSuccessfulScanAt?: Date | string;
+}
+/** Secret-free AWS fields shared by generic cloud-account list and detail responses. */
+export interface AwsPublicCloudAccountFields {
+    /** Canonical 12-digit AWS account identifier. */
+    accountId?: string;
+    /** AWS estate containing this connected account. */
+    awsEstateId?: string;
+    /** Cross-account role ARN. This is role metadata, not a credential. */
+    roleArn?: string;
+    /** Capabilities for which the connected role is used. */
+    awsRolePurposes?: AwsEstateAccountPurpose[];
+    /** Sanitized machine-readable reason for the current lifecycle state. */
+    statusReason?: string;
+    /** Sanitized user-facing lifecycle detail. */
+    statusMessage?: string;
+    /** Evidence that a provider sync produced usable artifacts, when available. */
+    lastSuccessfulSyncAt?: string;
+}
+export interface CloudAccount extends AzureGuestAccessCloudAccountFields, AwsPublicCloudAccountFields {
+    /** Partition Key */
+    companyId: string;
+    /** Stable cloud-account row identifier. Provider account metadata is carried in provider-specific fields. */
     id: string;
     name: string;
     companyName: string;
+    /** AWS, Azure, GCP, etc. */
     provider: string;
+    /** Missing authMode should be treated as servicePrincipal by consumers for backward compatibility. */
+    authMode?: CloudAccountAuthMode;
+    /** Optional list of subscription group names for this cloud account */
+    groupNames?: string[];
+    /** Azure Tenant ID */
     tenantId?: string;
     secret?: string;
     secretExpiresAt?: Date;
@@ -13,14 +368,146 @@ export interface CloudAccount {
     createdBy: string;
     status: string;
     objectives?: SurveyResponse[];
+    /** Preferred recommendation effort-estimate profile for this cloud account. */
+    effortProfile?: EffortEstimateProfileName;
+    writeSecret?: string;
+    writeSecretExpiresAt?: Date;
+    writeClientId?: string;
+    writeBitmask?: number;
+    readBitmask?: number;
+    tenantSyncStatus?: CloudAccountTenantSyncStatus;
+    tenantSyncRequestedAt?: Date;
+    tenantSyncStartedAt?: Date;
+    tenantSyncCompletedAt?: Date;
+    tenantSyncError?: string;
+    tenantSyncSource?: CloudAccountTenantSyncSource;
+    firstSyncNotificationStatus?: CloudAccountFirstSyncNotificationStatus;
+    firstSyncNotificationUserId?: string;
+    /** Azure sync features disabled for this cloud account. Cloud-account opt-outs are hard denies for subscriptions. */
+    syncFeatureOptOuts?: AzureSyncFeatureId[];
+    /**
+     * Internal legacy delegated-user token cache. Do not expose this field in public API DTOs.
+     * Guest access token relay payloads use AzureGuestAccessTokenRelayPayload and must not be
+     * stored on CloudAccount or returned through PublicCloudAccountDto.
+     */
+    delegatedTokenCache?: string;
+    /** Legacy delegated-user onboarding status. Guest access lifecycle state uses guestAccessStatus fields. */
+    onboardingStatus?: AzureDelegatedOnboardingStatus;
+    scanSchedulingMode?: CloudAccountScanSchedulingMode;
+    delegatedSetupExpiresAt?: Date | string;
+    delegatedTrialStartedAt?: Date | string;
+    delegatedTrialExpiresAt?: Date | string;
+    reauthRequired?: boolean;
+    lastAuthErrorCode?: AzureDelegatedAuthErrorCode;
+    lastAuthErrorAt?: Date | string;
+    connectedUserObjectId?: string;
+    connectedUserTenantId?: string;
+    connectedUserEmail?: string;
+    connectedUserDisplayName?: string;
+    connectedAt?: Date | string;
+    lastTokenRefreshAt?: Date | string;
+    lastDelegatedTokenCacheUpdatedAt?: Date | string;
+    gdapAuthorizationCompanyId?: string;
+    gdapAuthorizationProfileId?: string;
+    gdapPartnerTenantId?: string;
+    gdapCustomerTenantId?: string;
+    gdapRelationshipId?: string;
+    gdapRelationshipDisplayName?: string;
+    gdapRelationshipStatus?: AzureGdapRelationshipStatus;
+    gdapAccessAssignmentId?: string;
+    gdapAccessAssignmentStatus?: AzureGdapAccessAssignmentStatus;
+    gdapSecurityGroupId?: string;
+    gdapSecurityGroupDisplayName?: string;
+    gdapRolesJson?: string;
+    gdapExpiresAt?: Date | string;
+    gdapAutoExtendEnabled?: boolean;
+    gdapPartnerAuthorizationStatus?: AzureGdapValidationStatus;
+    gdapAppConsentStatus?: AzureGdapValidationStatus;
+    gdapLastValidatedAt?: Date | string;
+    gdapLastValidationStatus?: AzureGdapValidationStatus;
+    gdapLastValidationErrorCode?: string;
+    /** Sanitized public-safe validation message. Do not store raw Microsoft claims or token errors here. */
+    gdapLastValidationMessage?: string;
+    gdapScheduledEligible?: boolean;
+    gdapScheduledEligibilityReason?: string;
+    gdapCapabilities?: AzureGdapCapabilityStatus[];
+    /** Internal partner billing scope. Do not expose billing account/customer identifiers in public API DTOs. */
+    cspPartnerBillingScope?: AzureCspPartnerBillingScope;
+    /** Internal GDAP credential locator. Do not expose this field in public API DTOs. */
+    gdapCredentialReference?: string;
+    /** Internal manual billing export locator override. Do not expose this field in public API DTOs. */
+    billingExportLocator?: string | CloudAccountBillingExportLocator;
 }
-export interface SubscriptionAccount {
+export type PublicCloudAccountDto = Omit<CloudAccount, 'delegatedTokenCache' | 'secret' | 'writeSecret' | 'billingExportLocator' | 'gdapCredentialReference' | 'cspPartnerBillingScope'> & AwsForbiddenCredentialFields & {
+    /** Display-only masked preview of the stored read secret. Never contains the full secret value. */
+    secretPreview?: string;
+    /** Display-only masked preview of the stored write secret. Never contains the full secret value. */
+    writeSecretPreview?: string;
+    /** Guest access token relay payloads are internal only and must never appear in public DTOs. */
+    guestAccessTokenRelayPayload?: never;
+    /** Guest access token relay storage locators are internal only and must never appear in public DTOs. */
+    guestAccessTokenRelayReference?: never;
+    /** AWS trust-policy external IDs are setup-only and must never appear in public DTOs. */
+    externalId?: never;
+    awsOnboardingCommandFingerprint?: never;
+    awsDeleteRequestedAt?: never;
+};
+/** Subscription-specific compatibility alias for the shared progress-stage vocabulary. */
+export type SubscriptionSyncProgressStepStatus = SyncProgressStepStatus;
+/** Subscription-specific compatibility alias for the shared progress-substage vocabulary. */
+export type SubscriptionSyncProgressSubStepStatus = SyncProgressSubStepStatus;
+export type SubscriptionSyncProgressContextValue = string | number | boolean;
+export interface SubscriptionSyncProgressSubStep {
     id: string;
-    companyId: string;
+    status: SubscriptionSyncProgressSubStepStatus;
+    label?: string;
+    attempts?: number;
+    lastUpdated?: string;
+    lastError?: string;
+    durationMs?: number;
+    context?: Record<string, SubscriptionSyncProgressContextValue>;
+}
+export interface SubscriptionSyncProgressStep {
+    id: SubscriptionSyncStepId;
+    status: SubscriptionSyncProgressStepStatus;
+    attempts: number;
+    lastUpdated: string;
+    lastError?: string;
+    runId?: string;
+    active: boolean;
+    callCount?: number;
+    note?: string;
+    issue?: SyncProgressIssue;
+    subSteps?: SubscriptionSyncProgressSubStep[];
+}
+export interface SubscriptionSyncProgress {
+    runId?: string;
+    overallStatus: SyncProgressStatus;
+    progressLabel: string;
+    completedSteps: number;
+    totalSteps: number;
+    activeComponents: SubscriptionSyncStepId[];
+    currentStepId?: SubscriptionSyncStepId;
+    lastErrorComponent?: SubscriptionSyncStepId;
+    lastErrorMessage?: string;
+    initiatedAt?: string;
+    completedAt?: string;
+    lastUpdated: string;
+    steps: SubscriptionSyncProgressStep[];
+}
+export interface SubscriptionInfoBase {
     name: string;
+    friendlyName?: string;
     cloudAccountId: string;
     cloudAccountName: string;
+    /** Optional group name for subscription-level grouping */
+    groupName?: string;
+    /** Optional emoji shortcode (Slack-style, e.g. "/face") */
+    icon?: string;
+    /** Optional subscription type (Production, Non-Production, Mixed) */
+    subscriptionType?: SubscriptionType;
     status?: string;
+    statusLabel?: string;
     error?: string;
     lastUpdated?: string;
     quotaId?: string;
@@ -30,6 +517,34 @@ export interface SubscriptionAccount {
     foundCurrency?: boolean;
     ready?: boolean;
     secureScore?: number;
+    advisorScore?: number;
+    advisorScoreCost?: number;
+    advisorScoreSecurity?: number;
+    advisorScorePerformance?: number;
+    advisorScoreReliability?: number;
+    advisorScoreOperationalExcellence?: number;
     showAmortizedCosts?: boolean;
+    totalCost?: number;
+    billingItems?: number;
+    activityItems?: number;
+    eventId?: string;
+    readBitmask?: number;
+    syncProgress?: SubscriptionSyncProgress | string | null;
+    /** Azure sync features disabled for this subscription in addition to cloud-account opt-outs. */
+    syncFeatureOptOuts?: AzureSyncFeatureId[];
+    /** Azure sync features disabled by the parent cloud account. Returned to administrators only. */
+    cloudAccountSyncFeatureOptOuts?: AzureSyncFeatureId[];
+    /** Effective Azure sync features disabled after applying cloud-account hard denies. Returned to administrators only. */
+    effectiveSyncFeatureOptOuts?: AzureSyncFeatureId[];
+    /** Purpose bound to the current delegated guest-access run. */
+    guestAccessWorkloadKind?: 'fullScan' | 'reviewChecklist';
+    /** Normalized checklist identifier when the current guest-access run is review-checklist-only. */
+    guestAccessChecklistId?: string;
+}
+export interface SubscriptionAccount extends SubscriptionInfoBase {
+    /** Partition Key (Azure Subscription ID) */
+    id: string;
+    /** Row Key */
+    companyId: string;
 }
 //# sourceMappingURL=accounts.d.ts.map

package/dist/accounts/accounts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accounts.d.ts","sourceRoot":"","sources":["../../src/accounts/accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B"}
+{"version":3,"file":"accounts.d.ts","sourceRoot":"","sources":["../../src/accounts/accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEvI,YAAY,EAAE,iBAAiB,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/I,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,gBAAgB,GAAG,OAAO,CAAC;AACzE,MAAM,MAAM,oBAAoB,GAAG,kBAAkB,GAAG,eAAe,GAAG,MAAM,GAAG,kBAAkB,CAAC;AACtG,MAAM,MAAM,4BAA4B,GAAG,QAAQ,GAAG,WAAW,GAAG,YAAY,CAAC;AACjF,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;AACvG,MAAM,MAAM,uCAAuC,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAC/F,MAAM,MAAM,6BAA6B,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AACxE,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,SAAS,GAAG,iBAAiB,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAC;AAC1H,MAAM,MAAM,+BAA+B,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;AAClH,MAAM,MAAM,yBAAyB,GAAG,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAC;AACzH,MAAM,MAAM,sBAAsB,GAC9B,sBAAsB,GACtB,cAAc,GACd,kBAAkB,GAClB,YAAY,GACZ,uBAAuB,GACvB,mBAAmB,GACnB,eAAe,GACf,UAAU,GACV,wBAAwB,GACxB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,eAAe,CAAC;AACpB,MAAM,MAAM,8BAA8B,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,YAAY,CAAC;AAE7G,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,sBAAsB,CAAC;IAC5B,MAAM,EAAE,8BAA8B,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,0FAA0F;AAC1F,MAAM,WAAW,2BAA2B;IAC1C,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,8GAA8G;AAC9G,MAAM,WAAW,8BAA8B;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,2BAA2B,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,+BAA+B,CAAC;IACzD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,KAAK,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,kGAAkG;AAClG,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,6BAA6B;IAC5C,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;IACrD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0BAA0B,CAAC,EAAE,+BAA+B,CAAC;IAC7D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,8BAA8B,CAAC,EAAE,yBAAyB,CAAC;IAC3D,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wBAAwB,CAAC,EAAE,yBAAyB,CAAC;IACrD,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC/C,6GAA6G;IAC7G,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;CACtD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oCAAoC;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,yBAAyB,CAAC;IAC/C,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yCAAyC;IACxD,QAAQ,EAAE,oCAAoC,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,8CAA8C;IAC7D,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,oCAAoC,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,0CAA0C;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yCAAyC;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0CAA0C;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC9C,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,oCAAoC;IAC5C,MAAM,EAAE,yBAAyB,CAAC;IAClC,OAAO,CAAC,EAAE,oCAAoC,CAAC;IAC/C,YAAY,EAAE,yBAAyB,EAAE,CAAC;IAC1C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;IAC7C,YAAY,CAAC,EAAE,8BAA8B,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qCAAsC,SAAQ,oCAAoC;IACjG,KAAK,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,8BAA8B,CAAC;IAC7C,aAAa,EAAE,2BAA2B,EAAE,CAAC;IAC7C,kGAAkG;IAClG,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uCAAwC,SAAQ,oCAAoC;IACnG,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,OAAO,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC;IACpD,aAAa,CAAC,EAAE,2BAA2B,EAAE,CAAC;CAC/C;AAED,MAAM,MAAM,gCAAgC,GAAG,qCAAqC,GAAG,uCAAuC,CAAC;AAE/H,MAAM,WAAW,mCAAmC;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,yBAAyB,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0BAA0B,CAAC,EAAE,yBAAyB,CAAC;IACvD,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;IAC7C,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,YAAY,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC3C,YAAY,CAAC,EAAE,8BAA8B,CAAC;IAC9C,aAAa,CAAC,EAAE,2BAA2B,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,kCAAkC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,mFAAmF;IACnF,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,6BAA6B,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,SAAS,CAAC,EAAE,yBAAyB,CAAC;CACvC;AAED,eAAO,MAAM,wBAAwB,sNAa3B,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3E,MAAM,MAAM,kCAAkC,GAAG,cAAc,GAAG,cAAc,CAAC;AAEjF,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,kBAAkB,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,SAAS,kCAAkC,EAAE,CAAC;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0EgB,CAAC;AAEzD,KAAK,6BAA6B,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAClF,KAAK,2BAA2B,CAAC,KAAK,SAAS,kCAAkC,IAAI,6BAA6B,SAAS,MAAM,OAAO,GACpI,OAAO,SAAS;IAAE,EAAE,EAAE,kBAAkB,CAAC;IAAC,eAAe,EAAE,SAAS,kCAAkC,EAAE,CAAA;CAAE,GACxG,KAAK,SAAS,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,GAC9C,OAAO,CAAC,IAAI,CAAC,GACb,KAAK,GACP,KAAK,GACP,KAAK,CAAC;AAEV,MAAM,MAAM,8BAA8B,GAAG,2BAA2B,CAAC,cAAc,CAAC,CAAC;AACzF,MAAM,MAAM,8BAA8B,GAAG,2BAA2B,CAAC,cAAc,CAAC,CAAC;AAMzF,eAAO,MAAM,oBAAoB,GAAI,OAAO,MAAM,KAAG,KAAK,IAAI,kBAAuD,CAAC;AAEtH,eAAO,MAAM,2BAA2B,GAAI,WAAW,kBAAkB,KAAG,wBAMzE,CAAC;AAEJ,eAAO,MAAM,kCAAkC,GAAI,WAAW,kBAAkB,EAAE,OAAO,kCAAkC,KAAG,OACtD,CAAC;AAEzE,eAAO,MAAM,uBAAuB,GAAI,YAAY,SAAS,kBAAkB,EAAE,KAAG,kBAAkB,EAInG,CAAC;AAKJ,eAAO,MAAM,0BAA0B,GAAI,OAAO,kCAAkC,KAAG,wBAAwB,EACjB,CAAC;AAE/F,eAAO,MAAM,8BAA8B,GAAI,OAAO,kCAAkC,KAAG,kBAAkB,EAC/C,CAAC;AAE/D,MAAM,WAAW,2CAA2C;IAC1D,kBAAkB,EAAE,8BAA8B,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,2CAA2C;IAC1D,kBAAkB,EAAE,8BAA8B,EAAE,CAAC;CACtD;AAED,eAAO,MAAM,4BAA4B,gJAW/B,CAAC;AACX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AACnF,MAAM,MAAM,8BAA8B,GAAG,+BAA+B,GAAG,QAAQ,GAAG,cAAc,CAAC;AACzG,MAAM,MAAM,2BAA2B,GACnC,eAAe,GACf,sBAAsB,GACtB,kBAAkB,GAClB,kBAAkB,GAClB,WAAW,GACX,SAAS,CAAC;AACd,MAAM,MAAM,6BAA6B,GAAG,iBAAiB,GAAG,yBAAyB,GAAG,eAAe,GAAG,WAAW,GAAG,QAAQ,CAAC;AACrI,MAAM,MAAM,8BAA8B,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAC;AAClG,MAAM,MAAM,kCAAkC,GAAG,cAAc,CAAC;AAChE,MAAM,MAAM,sBAAsB,GAC9B,SAAS,GACT,mBAAmB,GACnB,yBAAyB,GACzB,yBAAyB,GACzB,6BAA6B,GAC7B,+BAA+B,GAC/B,QAAQ,GACR,UAAU,GACV,WAAW,GACX,SAAS,GACT,QAAQ,GACR,gBAAgB,GAChB,WAAW,GACX,SAAS,CAAC;AACd,MAAM,MAAM,4BAA4B,GACpC,qBAAqB,GACrB,yBAAyB,GACzB,2BAA2B,GAC3B,+BAA+B,GAC/B,4BAA4B,GAC5B,2BAA2B,GAC3B,6BAA6B,GAC7B,qBAAqB,GACrB,eAAe,GACf,eAAe,GACf,uBAAuB,GACvB,sBAAsB,GACtB,8BAA8B,GAC9B,2BAA2B,GAC3B,uBAAuB,GACvB,mBAAmB,GACnB,aAAa,GACb,mBAAmB,GACnB,SAAS,CAAC;AAEd,MAAM,WAAW,kCAAkC;IACjD,sGAAsG;IACtG,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,uEAAuE;IACvE,uBAAuB,CAAC,EAAE,4BAA4B,CAAC;IACvD,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2FAA2F;IAC3F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACpC,gEAAgE;IAChE,wBAAwB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACzC,kEAAkE;IAClE,0BAA0B,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC3C,8EAA8E;IAC9E,+BAA+B,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;CACjD;AAED,wFAAwF;AACxF,MAAM,WAAW,2BAA2B;IAC1C,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,eAAe,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAC5C,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,YAAa,SAAQ,kCAAkC,EAAE,2BAA2B;IACnG,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,6GAA6G;IAC7G,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,sGAAsG;IACtG,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,+EAA+E;IAC/E,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IAChD,qBAAqB,CAAC,EAAE,IAAI,CAAC;IAC7B,mBAAmB,CAAC,EAAE,IAAI,CAAC;IAC3B,qBAAqB,CAAC,EAAE,IAAI,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IAChD,2BAA2B,CAAC,EAAE,uCAAuC,CAAC;IACtE,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,qHAAqH;IACrH,kBAAkB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC1C;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2GAA2G;IAC3G,gBAAgB,CAAC,EAAE,8BAA8B,CAAC;IAClD,kBAAkB,CAAC,EAAE,8BAA8B,CAAC;IACpD,uBAAuB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACxC,uBAAuB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACxC,uBAAuB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACxC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iBAAiB,CAAC,EAAE,2BAA2B,CAAC;IAChD,eAAe,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACnC,gCAAgC,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACjD,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;IACrD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0BAA0B,CAAC,EAAE,+BAA+B,CAAC;IAC7D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,8BAA8B,CAAC,EAAE,yBAAyB,CAAC;IAC3D,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,mBAAmB,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACpC,wBAAwB,CAAC,EAAE,yBAAyB,CAAC;IACrD,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,wGAAwG;IACxG,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC/C,6GAA6G;IAC7G,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;IACrD,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,oGAAoG;IACpG,oBAAoB,CAAC,EAAE,MAAM,GAAG,gCAAgC,CAAC;CAClE;AAED,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,YAAY,EACZ,qBAAqB,GAAG,QAAQ,GAAG,aAAa,GAAG,sBAAsB,GAAG,yBAAyB,GAAG,wBAAwB,CACjI,GACC,4BAA4B,GAAG;IAC7B,mGAAmG;IACnG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oGAAoG;IACpG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gGAAgG;IAChG,4BAA4B,CAAC,EAAE,KAAK,CAAC;IACrC,wGAAwG;IACxG,8BAA8B,CAAC,EAAE,KAAK,CAAC;IACvC,yFAAyF;IACzF,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,+BAA+B,CAAC,EAAE,KAAK,CAAC;IACxC,oBAAoB,CAAC,EAAE,KAAK,CAAC;CAC9B,CAAC;AAEJ,0FAA0F;AAC1F,MAAM,MAAM,kCAAkC,GAAG,sBAAsB,CAAC;AACxE,6FAA6F;AAC7F,MAAM,MAAM,qCAAqC,GAAG,yBAAyB,CAAC;AAC9E,MAAM,MAAM,oCAAoC,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7E,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,qCAAqC,CAAC;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,sBAAsB,CAAC;IAC3B,MAAM,EAAE,kCAAkC,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,CAAC,EAAE,+BAA+B,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,kBAAkB,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;IAC3C,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,4BAA4B,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,wBAAwB,GAAG,MAAM,GAAG,IAAI,CAAC;IACxD,gGAAgG;IAChG,kBAAkB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC1C,iGAAiG;IACjG,8BAA8B,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACtD,wHAAwH;IACxH,2BAA2B,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnD,+DAA+D;IAC/D,uBAAuB,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAAC;IACzD,kGAAkG;IAClG,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,4CAA4C;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,cAAc;IACd,SAAS,EAAE,MAAM,CAAC;CACnB"}