@spottoai/types-package 1.0.2-beta.34 → 1.0.2-beta.340

package/dist/assessments/run.d.ts

@@ -0,0 +1,62 @@
+import type { AssessmentFailureMetadata, AssessmentScope, AssessmentStorageReference } from './common';
+import type { AssessmentProviderName, AssessmentRunStatus, AssessmentType } from './status';
+export interface AssessmentRunTimestamps {
+    createdAt: string;
+    queuedAt?: string;
+    startedAt?: string;
+    generatedAt?: string;
+    reviewedAt?: string;
+    approvedAt?: string;
+    publishedAt?: string;
+    failedAt?: string;
+}
+export interface AssessmentRunSummary extends AssessmentRunTimestamps {
+    assessmentRunId: string;
+    companyId: string;
+    assessmentType: AssessmentType;
+    providerName: AssessmentProviderName;
+    scope: AssessmentScope;
+    status: AssessmentRunStatus;
+    createdByUserId?: string;
+    reviewedByUserId?: string;
+    approvedByUserId?: string;
+    sourceVersion?: string;
+    artifactPath?: string;
+    documentPath?: string;
+    failure?: AssessmentFailureMetadata;
+}
+export interface AssessmentRun extends AssessmentRunSummary {
+    schemaVersion: 1;
+    contextPackReference?: AssessmentStorageReference;
+    evidencePackReference?: AssessmentStorageReference;
+    artifactReference?: AssessmentStorageReference;
+    reviewReference?: AssessmentStorageReference;
+    exportIndexReference?: AssessmentStorageReference;
+    generationAttemptId?: string;
+    correlationId?: string;
+}
+export interface CreateAssessmentRunRequest {
+    assessmentType: AssessmentType;
+    providerName: AssessmentProviderName;
+    cloudAccountIds: string[];
+    subscriptionIds: string[];
+}
+export interface CreateAssessmentRunResponse {
+    assessmentRun: AssessmentRun;
+    queued: true;
+}
+export interface ListAssessmentRunsQuery {
+    status?: AssessmentRunStatus;
+    assessmentType?: AssessmentType;
+    records?: number;
+    continuationToken?: string;
+}
+export interface ListAssessmentRunsResponse {
+    runs: AssessmentRunSummary[];
+    continuationToken?: string;
+}
+export interface AssessmentRunIndex {
+    version: 1;
+    runs: AssessmentRunSummary[];
+}
+//# sourceMappingURL=run.d.ts.map

package/dist/assessments/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/assessments/run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AACvG,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE5F,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAqB,SAAQ,uBAAuB;IACnE,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,sBAAsB,CAAC;IACrC,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC;AAED,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,aAAa,EAAE,CAAC,CAAC;IACjB,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,qBAAqB,CAAC,EAAE,0BAA0B,CAAC;IACnD,iBAAiB,CAAC,EAAE,0BAA0B,CAAC;IAC/C,eAAe,CAAC,EAAE,0BAA0B,CAAC;IAC7C,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,sBAAsB,CAAC;IACrC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,IAAI,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,oBAAoB,EAAE,CAAC;CAC9B"}

package/dist/assessments/run.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=run.js.map

package/dist/assessments/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/assessments/run.ts"],"names":[],"mappings":""}

package/dist/assessments/sow.d.ts

@@ -0,0 +1,30 @@
+import type { AssessmentTraceabilityReference } from './common';
+export type AssessmentSelectedActionItemIds = [string, ...string[]];
+export interface CreateAssessmentSowHandoffRequest {
+    actionItemIds: AssessmentSelectedActionItemIds;
+    title?: string;
+}
+export interface AssessmentSowDraftActionItem extends AssessmentTraceabilityReference {
+    actionItemId: string;
+    title: string;
+    description: string;
+    benefit: string;
+    effortHours?: number;
+    dependencies?: string[];
+    assumptions?: string[];
+    suggestedDeliveryPackage?: string;
+}
+export interface AssessmentSowDraftSource {
+    source: 'assessment';
+    assessmentRunId: string;
+    companyId: string;
+    title: string;
+    actionItems: AssessmentSowDraftActionItem[];
+}
+export interface CreateAssessmentSowHandoffResponse {
+    assessmentRunId: string;
+    actionItemIds: string[];
+    draftId?: string;
+    draftSource: AssessmentSowDraftSource;
+}
+//# sourceMappingURL=sow.d.ts.map

package/dist/assessments/sow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sow.d.ts","sourceRoot":"","sources":["../../src/assessments/sow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,MAAM,+BAA+B,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAEpE,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,+BAA+B,CAAC;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA6B,SAAQ,+BAA+B;IACnF,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,YAAY,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,4BAA4B,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,kCAAkC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,wBAAwB,CAAC;CACvC"}

package/dist/assessments/sow.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=sow.js.map

package/dist/assessments/sow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sow.js","sourceRoot":"","sources":["../../src/assessments/sow.ts"],"names":[],"mappings":""}

package/dist/assessments/status.d.ts

@@ -0,0 +1,27 @@
+export declare const ARCHITECTURE_ASSESSMENT_TYPE: "architecture";
+export declare const ASSESSMENT_TYPES: readonly ["architecture"];
+export type ArchitectureAssessmentType = typeof ARCHITECTURE_ASSESSMENT_TYPE;
+export type AssessmentType = (typeof ASSESSMENT_TYPES)[number];
+export declare const ASSESSMENT_PROVIDER_NAMES: readonly ["azure"];
+export type AssessmentProviderName = (typeof ASSESSMENT_PROVIDER_NAMES)[number];
+export declare const ASSESSMENT_RELEASE_STAGES: readonly ["preview", "ga"];
+export type AssessmentReleaseStage = (typeof ASSESSMENT_RELEASE_STAGES)[number];
+export declare const ASSESSMENT_RUN_STATUSES: readonly ["draft", "queued", "running", "needs_review", "approved", "published", "failed"];
+export type AssessmentRunStatus = (typeof ASSESSMENT_RUN_STATUSES)[number];
+export declare const ASSESSMENT_EXPORT_FORMATS: readonly ["docx"];
+export type AssessmentExportFormat = (typeof ASSESSMENT_EXPORT_FORMATS)[number];
+export declare const ASSESSMENT_EXPORT_STATUSES: readonly ["requested", "completed", "failed"];
+export type AssessmentExportStatus = (typeof ASSESSMENT_EXPORT_STATUSES)[number];
+export declare const ASSESSMENT_EVIDENCE_SOURCE_TYPES: readonly ["company_context_note", "subscription_report_evidence_pack", "portal_artifact", "raw_artifact", "conformed_artifact", "review_checklist", "derived_summary", "ai_inference", "evidence_gap"];
+export type AssessmentEvidenceSourceType = (typeof ASSESSMENT_EVIDENCE_SOURCE_TYPES)[number];
+export declare const ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS: readonly ["confirmed", "customer_supplied", "derived", "inferred", "gap"];
+export type AssessmentEvidenceConfidence = (typeof ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS)[number];
+export declare const ASSESSMENT_PRIORITY_LEVELS: readonly ["critical", "high", "medium", "low", "informational"];
+export type AssessmentPriority = (typeof ASSESSMENT_PRIORITY_LEVELS)[number];
+export declare const ASSESSMENT_EFFORT_BANDS: readonly ["low", "medium", "high", "unknown"];
+export type AssessmentEffortBand = (typeof ASSESSMENT_EFFORT_BANDS)[number];
+export declare const ASSESSMENT_IMPACT_LEVELS: readonly ["low", "medium", "high", "unknown"];
+export type AssessmentImpactLevel = (typeof ASSESSMENT_IMPACT_LEVELS)[number];
+export declare const ASSESSMENT_PILLARS: readonly ["architecture", "security", "reliability", "performance", "operations", "finops", "roadmap"];
+export type AssessmentPillar = (typeof ASSESSMENT_PILLARS)[number];
+//# sourceMappingURL=status.d.ts.map

package/dist/assessments/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/assessments/status.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,EAAG,cAAuB,CAAC;AACpE,eAAO,MAAM,gBAAgB,2BAA0C,CAAC;AACxE,MAAM,MAAM,0BAA0B,GAAG,OAAO,4BAA4B,CAAC;AAC7E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,yBAAyB,oBAAqB,CAAC;AAC5D,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,yBAAyB,4BAA6B,CAAC;AACpE,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,uBAAuB,4FAA6F,CAAC;AAClI,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E,eAAO,MAAM,yBAAyB,mBAAoB,CAAC;AAC3D,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,0BAA0B,+CAAgD,CAAC;AACxF,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,eAAO,MAAM,gCAAgC,wMAUnC,CAAC;AACX,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7F,eAAO,MAAM,qCAAqC,2EAA4E,CAAC;AAC/H,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,qCAAqC,CAAC,CAAC,MAAM,CAAC,CAAC;AAElG,eAAO,MAAM,0BAA0B,iEAAkE,CAAC;AAC1G,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,eAAO,MAAM,uBAAuB,+CAAgD,CAAC;AACrF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,wBAAwB,+CAAgD,CAAC;AACtF,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,eAAO,MAAM,kBAAkB,wGAAyG,CAAC;AACzI,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/assessments/status.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ASSESSMENT_PILLARS = exports.ASSESSMENT_IMPACT_LEVELS = exports.ASSESSMENT_EFFORT_BANDS = exports.ASSESSMENT_PRIORITY_LEVELS = exports.ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS = exports.ASSESSMENT_EVIDENCE_SOURCE_TYPES = exports.ASSESSMENT_EXPORT_STATUSES = exports.ASSESSMENT_EXPORT_FORMATS = exports.ASSESSMENT_RUN_STATUSES = exports.ASSESSMENT_RELEASE_STAGES = exports.ASSESSMENT_PROVIDER_NAMES = exports.ASSESSMENT_TYPES = exports.ARCHITECTURE_ASSESSMENT_TYPE = void 0;
+exports.ARCHITECTURE_ASSESSMENT_TYPE = 'architecture';
+exports.ASSESSMENT_TYPES = [exports.ARCHITECTURE_ASSESSMENT_TYPE];
+exports.ASSESSMENT_PROVIDER_NAMES = ['azure'];
+exports.ASSESSMENT_RELEASE_STAGES = ['preview', 'ga'];
+exports.ASSESSMENT_RUN_STATUSES = ['draft', 'queued', 'running', 'needs_review', 'approved', 'published', 'failed'];
+exports.ASSESSMENT_EXPORT_FORMATS = ['docx'];
+exports.ASSESSMENT_EXPORT_STATUSES = ['requested', 'completed', 'failed'];
+exports.ASSESSMENT_EVIDENCE_SOURCE_TYPES = [
+    'company_context_note',
+    'subscription_report_evidence_pack',
+    'portal_artifact',
+    'raw_artifact',
+    'conformed_artifact',
+    'review_checklist',
+    'derived_summary',
+    'ai_inference',
+    'evidence_gap',
+];
+exports.ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS = ['confirmed', 'customer_supplied', 'derived', 'inferred', 'gap'];
+exports.ASSESSMENT_PRIORITY_LEVELS = ['critical', 'high', 'medium', 'low', 'informational'];
+exports.ASSESSMENT_EFFORT_BANDS = ['low', 'medium', 'high', 'unknown'];
+exports.ASSESSMENT_IMPACT_LEVELS = ['low', 'medium', 'high', 'unknown'];
+exports.ASSESSMENT_PILLARS = ['architecture', 'security', 'reliability', 'performance', 'operations', 'finops', 'roadmap'];
+//# sourceMappingURL=status.js.map

package/dist/assessments/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/assessments/status.ts"],"names":[],"mappings":";;;AAAa,QAAA,4BAA4B,GAAG,cAAuB,CAAC;AACvD,QAAA,gBAAgB,GAAG,CAAC,oCAA4B,CAAU,CAAC;AAI3D,QAAA,yBAAyB,GAAG,CAAC,OAAO,CAAU,CAAC;AAG/C,QAAA,yBAAyB,GAAG,CAAC,SAAS,EAAE,IAAI,CAAU,CAAC;AAGvD,QAAA,uBAAuB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAGrH,QAAA,yBAAyB,GAAG,CAAC,MAAM,CAAU,CAAC;AAG9C,QAAA,0BAA0B,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAG3E,QAAA,gCAAgC,GAAG;IAC9C,sBAAsB;IACtB,mCAAmC;IACnC,iBAAiB;IACjB,cAAc;IACd,oBAAoB;IACpB,kBAAkB;IAClB,iBAAiB;IACjB,cAAc;IACd,cAAc;CACN,CAAC;AAGE,QAAA,qCAAqC,GAAG,CAAC,WAAW,EAAE,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAU,CAAC;AAGlH,QAAA,0BAA0B,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAU,CAAC;AAG7F,QAAA,uBAAuB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAGxE,QAAA,wBAAwB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAGzE,QAAA,kBAAkB,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC"}

package/dist/aws/estates.d.ts

@@ -0,0 +1,153 @@
+import { type AwsForbiddenCredentialFields } from './requests';
+/** Schema version for the API-owned AWS company estate manifest. */
+export declare const AWS_ESTATES_MANIFEST_SCHEMA_VERSION: 1;
+/** Public provider discriminator used by the AWS estate manifest API. */
+export declare const AWS_ESTATES_MANIFEST_PROVIDER: "AWS";
+export declare const AWS_ESTATE_KINDS: readonly ["standalone", "organization"];
+export declare const AWS_ESTATE_ACCOUNT_SOURCES: readonly ["manual"];
+export declare const AWS_ESTATE_ROLE_DEPLOYMENT_MODES: readonly ["customer-managed"];
+export declare const AWS_ESTATE_ACCOUNT_PURPOSES: readonly ["resource-discovery", "organization-discovery", "billing-definition", "billing-storage"];
+/**
+ * Credential-shaped fields that manifest API boundaries must reject
+ * recursively before persisting untyped JSON.
+ */
+export declare const AWS_ESTATES_MANIFEST_FORBIDDEN_CREDENTIAL_FIELDS: readonly ["accessKeyId", "secretAccessKey", "sessionToken", "credentials", "resolvedCredentials", "secret", "encryptedSecret", "credentialReference", "externalId", "accessToken", "connectionString", "sasToken", "storageCredential"];
+export type AwsEstatesManifestSchemaVersion = typeof AWS_ESTATES_MANIFEST_SCHEMA_VERSION;
+export type AwsEstatesManifestProvider = typeof AWS_ESTATES_MANIFEST_PROVIDER;
+export type AwsEstateKind = (typeof AWS_ESTATE_KINDS)[number];
+export type AwsEstateAccountSource = (typeof AWS_ESTATE_ACCOUNT_SOURCES)[number];
+export type AwsEstateRoleDeploymentMode = (typeof AWS_ESTATE_ROLE_DEPLOYMENT_MODES)[number];
+export type AwsEstateAccountPurpose = (typeof AWS_ESTATE_ACCOUNT_PURPOSES)[number];
+export type AwsEstatesManifestForbiddenCredentialField = (typeof AWS_ESTATES_MANIFEST_FORBIDDEN_CREDENTIAL_FIELDS)[number];
+/**
+ * Makes setup secrets and storage credentials unrepresentable in persisted
+ * estate-manifest DTOs.
+ */
+export type AwsEstatesManifestForbiddenCredentialFields = AwsForbiddenCredentialFields & {
+    externalId?: never;
+    accessToken?: never;
+    connectionString?: never;
+    sasToken?: never;
+    storageCredential?: never;
+};
+/** Commercial-partition AssumeRole ARN bound to one exact AWS account. */
+export type AwsEstateRoleArn<TAccountId extends string = string> = `arn:aws:iam::${TAccountId}:role/${string}`;
+/**
+ * One AWS account intentionally included in an estate. Repeated company and
+ * estate identities make accidentally cross-scoped objects detectable.
+ */
+export interface AwsEstateAccountMembership<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: 1;
+    companyId: TCompanyId;
+    estateId: TEstateId;
+    accountId: TAccountId;
+    name: string;
+    roleArn: AwsEstateRoleArn<TAccountId>;
+    purposes: AwsEstateAccountPurpose[];
+    enabled: boolean;
+    /** Existing Spotto cloud-account identity once this membership is connected. */
+    cloudAccountId?: string;
+}
+/** One intentionally excluded account in a manually maintained organization estate. */
+export interface AwsEstateExcludedAccount<TCompanyId extends string = string, TEstateId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: 1;
+    companyId: TCompanyId;
+    estateId: TEstateId;
+    accountId: string;
+    name?: string;
+    reason?: string;
+}
+export interface AwsEstateWideBillingCoverage extends AwsEstatesManifestForbiddenCredentialFields {
+    type: 'estate';
+    accountIds?: never;
+}
+export interface AwsEstateAccountBillingCoverage<TAccountId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    type: 'accounts';
+    accountIds: TAccountId[];
+}
+export type AwsEstateBillingCoverage<TAccountId extends string = string> = AwsEstateWideBillingCoverage | AwsEstateAccountBillingCoverage<TAccountId>;
+export interface AwsEstateBillingDestination extends AwsEstatesManifestForbiddenCredentialFields {
+    bucketName: string;
+    /** Customer-configured S3 base prefix before AWS-appended export path segments. */
+    basePrefix: string;
+    region: string;
+    /** Optional when bucket ownership was not supplied or discovered during setup. */
+    bucketOwnerAccountId?: string;
+    kmsKeyArn?: string;
+}
+export interface AwsEstateCurBillingExport extends AwsEstatesManifestForbiddenCredentialFields {
+    type: 'CUR';
+    reportName: string;
+    destination: AwsEstateBillingDestination;
+    exportArn?: never;
+}
+export interface AwsEstateDataExportsBillingExport<TDefinitionAccountId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    type: 'DATA_EXPORTS';
+    /** ARN returned by BCM Data Exports; its account is the definition role account. */
+    exportArn: `arn:aws:bcm-data-exports:${string}:${TDefinitionAccountId}:export/${string}`;
+    /** Exact BCM Data Exports Export.Name used to scope the delivered S3 root. */
+    exportName: string;
+    destination: AwsEstateBillingDestination;
+    reportName?: never;
+}
+export type AwsEstateBillingExport<TDefinitionAccountId extends string = string> = AwsEstateCurBillingExport | AwsEstateDataExportsBillingExport<TDefinitionAccountId>;
+/**
+ * One billing export used by an estate. Definition, payer, storage, and access
+ * identities are explicit because large AWS estates can split these roles
+ * across different accounts.
+ */
+export interface AwsEstateBillingSource<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string, TDefinitionRoleAccountId extends TAccountId = TAccountId, TStorageRoleAccountId extends TAccountId = TAccountId> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: 1;
+    companyId: TCompanyId;
+    estateId: TEstateId;
+    billingSourceId: string;
+    name: string;
+    /** Account whose role can read/validate the CUR or Data Exports definition. */
+    definitionRoleAccountId: TDefinitionRoleAccountId;
+    payerAccountId: TAccountId;
+    /** Account whose role can list/read the S3 export destination. */
+    storageRoleAccountId: TStorageRoleAccountId;
+    export: AwsEstateBillingExport<TDefinitionRoleAccountId>;
+    coverage: AwsEstateBillingCoverage<TAccountId>;
+    enabled: boolean;
+}
+/** Organization identity and how its desired account membership is maintained. */
+export interface AwsEstateOrganization<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: 1;
+    companyId: TCompanyId;
+    estateId: TEstateId;
+    organizationId: string;
+    managementAccountId: TAccountId;
+    accountSource: AwsEstateAccountSource;
+    roleDeploymentMode: AwsEstateRoleDeploymentMode;
+    excludedAccounts: AwsEstateExcludedAccount<TCompanyId, TEstateId>[];
+}
+interface AwsEstateBase<TCompanyId extends string, TEstateId extends string, TAccountId extends string> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: 1;
+    companyId: TCompanyId;
+    estateId: TEstateId;
+    name: string;
+    enabled: boolean;
+    accounts: AwsEstateAccountMembership<TCompanyId, TEstateId, TAccountId>[];
+    billingSources: AwsEstateBillingSource<TCompanyId, TEstateId, TAccountId>[];
+}
+export interface AwsStandaloneEstate<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string> extends AwsEstateBase<TCompanyId, TEstateId, TAccountId> {
+    kind: 'standalone';
+    organization?: never;
+}
+export interface AwsOrganizationEstate<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string> extends AwsEstateBase<TCompanyId, TEstateId, TAccountId> {
+    kind: 'organization';
+    organization: AwsEstateOrganization<TCompanyId, TEstateId, TAccountId>;
+}
+export type AwsEstate<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string> = AwsStandaloneEstate<TCompanyId, TEstateId, TAccountId> | AwsOrganizationEstate<TCompanyId, TEstateId, TAccountId>;
+/** Complete API-owned desired state stored at companies/{companyId}/aws/aws-estates.json. */
+export interface AwsEstatesManifest<TCompanyId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: AwsEstatesManifestSchemaVersion;
+    provider: AwsEstatesManifestProvider;
+    companyId: TCompanyId;
+    /** ISO-8601 timestamp assigned by the API after validating the complete document. */
+    updatedAt: string;
+    estates: AwsEstate<TCompanyId>[];
+}
+export {};
+//# sourceMappingURL=estates.d.ts.map

package/dist/aws/estates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"estates.d.ts","sourceRoot":"","sources":["../../src/aws/estates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAEhG,oEAAoE;AACpE,eAAO,MAAM,mCAAmC,EAAG,CAAU,CAAC;AAE9D,yEAAyE;AACzE,eAAO,MAAM,6BAA6B,EAAG,KAAc,CAAC;AAE5D,eAAO,MAAM,gBAAgB,yCAA0C,CAAC;AACxE,eAAO,MAAM,0BAA0B,qBAAsB,CAAC;AAC9D,eAAO,MAAM,gCAAgC,+BAAgC,CAAC;AAC9E,eAAO,MAAM,2BAA2B,oGAAqG,CAAC;AAE9I;;;GAGG;AACH,eAAO,MAAM,gDAAgD,yOAOnD,CAAC;AAEX,MAAM,MAAM,+BAA+B,GAAG,OAAO,mCAAmC,CAAC;AACzF,MAAM,MAAM,0BAA0B,GAAG,OAAO,6BAA6B,CAAC;AAC9E,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AACjF,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5F,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AACnF,MAAM,MAAM,0CAA0C,GAAG,CAAC,OAAO,gDAAgD,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3H;;;GAGG;AACH,MAAM,MAAM,2CAA2C,GAAG,4BAA4B,GAAG;IACvF,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,iBAAiB,CAAC,EAAE,KAAK,CAAC;CAC3B,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,gBAAgB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,IAAI,gBAAgB,UAAU,SAAS,MAAM,EAAE,CAAC;AAE/G;;;GAGG;AACH,MAAM,WAAW,0BAA0B,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,UAAU,SAAS,MAAM,GAAG,MAAM,CACnJ,SAAQ,2CAA2C;IACnD,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,EAAE,UAAU,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACtC,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,uFAAuF;AACvF,MAAM,WAAW,wBAAwB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,CAC7G,SAAQ,2CAA2C;IACnD,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,4BAA6B,SAAQ,2CAA2C;IAC/F,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB;AAED,MAAM,WAAW,+BAA+B,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,2CAA2C;IACtI,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,UAAU,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,wBAAwB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,IAAI,4BAA4B,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC;AAEtJ,MAAM,WAAW,2BAA4B,SAAQ,2CAA2C;IAC9F,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAA0B,SAAQ,2CAA2C;IAC5F,IAAI,EAAE,KAAK,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,2BAA2B,CAAC;IACzC,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED,MAAM,WAAW,iCAAiC,CAAC,oBAAoB,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,2CAA2C;IAClJ,IAAI,EAAE,cAAc,CAAC;IACrB,oFAAoF;IACpF,SAAS,EAAE,4BAA4B,MAAM,IAAI,oBAAoB,WAAW,MAAM,EAAE,CAAC;IACzF,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,2BAA2B,CAAC;IACzC,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB;AAED,MAAM,MAAM,sBAAsB,CAAC,oBAAoB,SAAS,MAAM,GAAG,MAAM,IAC3E,yBAAyB,GACzB,iCAAiC,CAAC,oBAAoB,CAAC,CAAC;AAE5D;;;;GAIG;AACH,MAAM,WAAW,sBAAsB,CACrC,UAAU,SAAS,MAAM,GAAG,MAAM,EAClC,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,UAAU,SAAS,MAAM,GAAG,MAAM,EAClC,wBAAwB,SAAS,UAAU,GAAG,UAAU,EACxD,qBAAqB,SAAS,UAAU,GAAG,UAAU,CACrD,SAAQ,2CAA2C;IACnD,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,SAAS,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,uBAAuB,EAAE,wBAAwB,CAAC;IAClD,cAAc,EAAE,UAAU,CAAC;IAC3B,kEAAkE;IAClE,oBAAoB,EAAE,qBAAqB,CAAC;IAC5C,MAAM,EAAE,sBAAsB,CAAC,wBAAwB,CAAC,CAAC;IACzD,QAAQ,EAAE,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,kFAAkF;AAClF,MAAM,WAAW,qBAAqB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,UAAU,SAAS,MAAM,GAAG,MAAM,CAC9I,SAAQ,2CAA2C;IACnD,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,SAAS,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,UAAU,CAAC;IAChC,aAAa,EAAE,sBAAsB,CAAC;IACtC,kBAAkB,EAAE,2BAA2B,CAAC;IAChD,gBAAgB,EAAE,wBAAwB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;CACrE;AAED,UAAU,aAAa,CAAC,UAAU,SAAS,MAAM,EAAE,SAAS,SAAS,MAAM,EAAE,UAAU,SAAS,MAAM,CACpG,SAAQ,2CAA2C;IACnD,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,SAAS,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,0BAA0B,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;IAC1E,cAAc,EAAE,sBAAsB,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;CAC7E;AAED,MAAM,WAAW,mBAAmB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,UAAU,SAAS,MAAM,GAAG,MAAM,CAC5I,SAAQ,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;IACxD,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,CAAC,EAAE,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,UAAU,SAAS,MAAM,GAAG,MAAM,CAC9I,SAAQ,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;IACxD,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,qBAAqB,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;CACxE;AAED,MAAM,MAAM,SAAS,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,UAAU,SAAS,MAAM,GAAG,MAAM,IAC3H,mBAAmB,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,GACtD,qBAAqB,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAE7D,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,2CAA2C;IACzH,aAAa,EAAE,+BAA+B,CAAC;IAC/C,QAAQ,EAAE,0BAA0B,CAAC;IACrC,SAAS,EAAE,UAAU,CAAC;IACtB,qFAAqF;IACrF,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;CAClC"}

package/dist/aws/estates.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWS_ESTATES_MANIFEST_FORBIDDEN_CREDENTIAL_FIELDS = exports.AWS_ESTATE_ACCOUNT_PURPOSES = exports.AWS_ESTATE_ROLE_DEPLOYMENT_MODES = exports.AWS_ESTATE_ACCOUNT_SOURCES = exports.AWS_ESTATE_KINDS = exports.AWS_ESTATES_MANIFEST_PROVIDER = exports.AWS_ESTATES_MANIFEST_SCHEMA_VERSION = void 0;
+const requests_1 = require("./requests");
+/** Schema version for the API-owned AWS company estate manifest. */
+exports.AWS_ESTATES_MANIFEST_SCHEMA_VERSION = 1;
+/** Public provider discriminator used by the AWS estate manifest API. */
+exports.AWS_ESTATES_MANIFEST_PROVIDER = 'AWS';
+exports.AWS_ESTATE_KINDS = ['standalone', 'organization'];
+exports.AWS_ESTATE_ACCOUNT_SOURCES = ['manual'];
+exports.AWS_ESTATE_ROLE_DEPLOYMENT_MODES = ['customer-managed'];
+exports.AWS_ESTATE_ACCOUNT_PURPOSES = ['resource-discovery', 'organization-discovery', 'billing-definition', 'billing-storage'];
+/**
+ * Credential-shaped fields that manifest API boundaries must reject
+ * recursively before persisting untyped JSON.
+ */
+exports.AWS_ESTATES_MANIFEST_FORBIDDEN_CREDENTIAL_FIELDS = [
+    ...requests_1.AWS_FORBIDDEN_CREDENTIAL_FIELDS,
+    'externalId',
+    'accessToken',
+    'connectionString',
+    'sasToken',
+    'storageCredential',
+];
+//# sourceMappingURL=estates.js.map

package/dist/aws/estates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"estates.js","sourceRoot":"","sources":["../../src/aws/estates.ts"],"names":[],"mappings":";;;AAAA,yCAAgG;AAEhG,oEAAoE;AACvD,QAAA,mCAAmC,GAAG,CAAU,CAAC;AAE9D,yEAAyE;AAC5D,QAAA,6BAA6B,GAAG,KAAc,CAAC;AAE/C,QAAA,gBAAgB,GAAG,CAAC,YAAY,EAAE,cAAc,CAAU,CAAC;AAC3D,QAAA,0BAA0B,GAAG,CAAC,QAAQ,CAAU,CAAC;AACjD,QAAA,gCAAgC,GAAG,CAAC,kBAAkB,CAAU,CAAC;AACjE,QAAA,2BAA2B,GAAG,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,iBAAiB,CAAU,CAAC;AAE9I;;;GAGG;AACU,QAAA,gDAAgD,GAAG;IAC9D,GAAG,0CAA+B;IAClC,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,UAAU;IACV,mBAAmB;CACX,CAAC"}

package/dist/aws/index.d.ts

@@ -0,0 +1,13 @@
+export * from './estates';
+export * from './onboarding';
+export * from './pluginPublicArtifacts';
+export * from './pluginPublicArtifactEvidence';
+export * from './pluginPublicArtifactValidation';
+export * from './portalPublicArtifacts';
+export * from './portalPublicArtifactHistoryTypes';
+export * from './portalPublicArtifactNestedEvidence';
+export * from './portalPublicArtifactNestedEvidenceValidation';
+export * from './portalPublicArtifactValidation';
+export * from './publicArtifacts';
+export * from './requests';
+//# sourceMappingURL=index.d.ts.map

package/dist/aws/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/aws/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,kCAAkC,CAAC;AACjD,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC"}

package/dist/aws/index.js

@@ -0,0 +1,29 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./estates"), exports);
+__exportStar(require("./onboarding"), exports);
+__exportStar(require("./pluginPublicArtifacts"), exports);
+__exportStar(require("./pluginPublicArtifactEvidence"), exports);
+__exportStar(require("./pluginPublicArtifactValidation"), exports);
+__exportStar(require("./portalPublicArtifacts"), exports);
+__exportStar(require("./portalPublicArtifactHistoryTypes"), exports);
+__exportStar(require("./portalPublicArtifactNestedEvidence"), exports);
+__exportStar(require("./portalPublicArtifactNestedEvidenceValidation"), exports);
+__exportStar(require("./portalPublicArtifactValidation"), exports);
+__exportStar(require("./publicArtifacts"), exports);
+__exportStar(require("./requests"), exports);
+//# sourceMappingURL=index.js.map

package/dist/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/aws/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,+CAA6B;AAC7B,0DAAwC;AACxC,iEAA+C;AAC/C,mEAAiD;AACjD,0DAAwC;AACxC,qEAAmD;AACnD,uEAAqD;AACrD,iFAA+D;AAC/D,mEAAiD;AACjD,oDAAkC;AAClC,6CAA2B"}

package/dist/aws/onboarding.d.ts

@@ -0,0 +1,54 @@
+import type { AwsEstateAccountPurpose } from './estates';
+import type { AwsForbiddenCredentialFields } from './requests';
+export interface AwsIamPolicyStatement {
+    Sid: string;
+    Effect: 'Allow' | 'Deny';
+    Principal?: {
+        AWS: string;
+    };
+    Action: string | string[];
+    Resource?: string | string[];
+    NotResource?: string | string[];
+    Condition?: Record<string, Record<string, string | string[]>>;
+}
+export interface AwsIamPolicyDocument {
+    Version: '2012-10-17';
+    Statement: AwsIamPolicyStatement[];
+}
+export interface AwsIamManagedPolicyDescriptor {
+    name: string;
+    arn: string;
+    /** AWS-managed preview policies can be broader than the final least-privilege policy. */
+    accessScope: 'broad-read-only-preview';
+    warning: string;
+}
+/**
+ * API-authored customer artifact for creating one purpose-scoped Spotto role.
+ * External ID is returned separately by the authorized company setup response.
+ */
+export interface AwsRoleOnboardingBundle extends AwsForbiddenCredentialFields {
+    schemaVersion: 1;
+    roleName: string;
+    rolePurposes: AwsEstateAccountPurpose[];
+    trustedPrincipalArn: string;
+    trustedPrincipalAccountId: string;
+    trustPolicy: AwsIamPolicyDocument;
+    managedPolicies: AwsIamManagedPolicyDescriptor[];
+    /** Stable inline policy name; later bundles replace rather than duplicate it. */
+    guardrailPolicyName: 'SpottoGuardrails';
+    guardrailPolicy: AwsIamPolicyDocument;
+    /** Optional policy used for billing definition, storage, and KMS access. */
+    billingAccessPolicyName?: 'SpottoBillingExportRead';
+    billingAccessPolicy?: AwsIamPolicyDocument;
+    /** Complete customer-facing artifact suitable for direct copy or download. */
+    instructionsMarkdown: string;
+}
+/** Authorized company-scoped response used before customer role deployment. */
+export interface AwsCompanyTrustSetupResponse extends AwsForbiddenCredentialFields {
+    provider: 'AWS';
+    externalId: string;
+    /** ISO-8601 timestamp for the original immutable server-side issuance. */
+    createdAt: string;
+    onboardingBundle: AwsRoleOnboardingBundle;
+}
+//# sourceMappingURL=onboarding.d.ts.map

package/dist/aws/onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../src/aws/onboarding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE/D,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,qBAAqB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,yFAAyF;IACzF,WAAW,EAAE,yBAAyB,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAwB,SAAQ,4BAA4B;IAC3E,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,uBAAuB,EAAE,CAAC;IACxC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,yBAAyB,EAAE,MAAM,CAAC;IAClC,WAAW,EAAE,oBAAoB,CAAC;IAClC,eAAe,EAAE,6BAA6B,EAAE,CAAC;IACjD,iFAAiF;IACjF,mBAAmB,EAAE,kBAAkB,CAAC;IACxC,eAAe,EAAE,oBAAoB,CAAC;IACtC,4EAA4E;IAC5E,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;IACpD,mBAAmB,CAAC,EAAE,oBAAoB,CAAC;IAC3C,8EAA8E;IAC9E,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,+EAA+E;AAC/E,MAAM,WAAW,4BAA6B,SAAQ,4BAA4B;IAChF,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,uBAAuB,CAAC;CAC3C"}

package/dist/aws/onboarding.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=onboarding.js.map

package/dist/aws/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../src/aws/onboarding.ts"],"names":[],"mappings":""}

package/dist/aws/pluginPublicArtifactBodyValidation.d.ts

@@ -0,0 +1,10 @@
+import { type AwsPluginArtifactTarget, type AwsPluginResourceDetailArtifact, type AwsPluginSubscriptionDetailArtifact } from './pluginPublicArtifacts';
+export { validateSourceBinding } from './pluginPublicArtifactSectionValidation';
+/** Validates and returns one lossless AWS plugin subscription-detail body. */
+export declare function validateAwsPluginSubscriptionDetailArtifact(value: unknown): AwsPluginSubscriptionDetailArtifact;
+/** Validates and returns one lossless AWS plugin resource-detail body. */
+export declare function validateAwsPluginResourceDetailArtifact(value: unknown): AwsPluginResourceDetailArtifact;
+export declare function validateTarget<Kind extends 'subscription-detail' | 'resource-detail'>(value: unknown, kind: Kind): Extract<AwsPluginArtifactTarget, {
+    kind: Kind;
+}>;
+//# sourceMappingURL=pluginPublicArtifactBodyValidation.d.ts.map

package/dist/aws/pluginPublicArtifactBodyValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginPublicArtifactBodyValidation.d.ts","sourceRoot":"","sources":["../../src/aws/pluginPublicArtifactBodyValidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,uBAAuB,EAC5B,KAAK,+BAA+B,EACpC,KAAK,mCAAmC,EACzC,MAAM,yBAAyB,CAAC;AAsBjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,8EAA8E;AAC9E,wBAAgB,2CAA2C,CAAC,KAAK,EAAE,OAAO,GAAG,mCAAmC,CA0B/G;AAED,0EAA0E;AAC1E,wBAAgB,uCAAuC,CAAC,KAAK,EAAE,OAAO,GAAG,+BAA+B,CA8BvG;AAqBD,wBAAgB,cAAc,CAAC,IAAI,SAAS,qBAAqB,GAAG,iBAAiB,EACnF,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,uBAAuB,EAAE;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,CAAC,CA6FlD"}