@spottoai/types-package 1.0.2-beta.35 → 1.0.2-beta.351

package/dist/accounts/azureSpSetupDurable.d.ts

@@ -0,0 +1,115 @@
+import type { AzureSpBillingExportPlan, AzureSpBillingExportResult, AzureSpSetupAccountReadiness, AzureSpSetupDispatchStatus, AzureSpSetupErrorCode, AzureSpSetupExecutionOwner, AzureSpSetupExecutionRequestV1, AzureSpSetupMode, AzureSpSetupOperationResult, AzureSpSetupPermissionPlanItem, AzureSpSetupPhase, AzureSpSetupProgressStep, AzureSpSetupResult, AzureSpSetupSubscriptionOption, AzureSpSetupSubscriptionReadiness, AzureSpSetupTenant } from './azureSpSetup';
+export interface AzureSpSetupManagementGroupOption {
+    managementGroupId: string;
+    displayName: string;
+    scope: string;
+}
+export type AzureSpSetupRetryCategory = 'throttling' | 'transient' | 'propagation' | 'reauthorization' | 'stateConflict' | 'unknown';
+export type AzureSpSetupTargetedRefreshStatus = 'none' | 'pending' | 'queued' | 'completed' | 'failed';
+export interface AzureSpSetupTargetedRefreshCheckpoint {
+    subscriptionId?: string;
+    refreshKind: string;
+    idempotencyKey: string;
+    status: AzureSpSetupTargetedRefreshStatus;
+    pendingAt?: string;
+    queuedAt?: string;
+    completedAt?: string;
+    errorCode?: AzureSpSetupErrorCode;
+}
+/**
+ * Authoritative version-1 setup persistence shared by the API and cloud-engine.
+ * @internal protected persistence — never return or log this shape as a public DTO.
+ */
+export interface AzureSpSetupDurableStateV1 {
+    schemaVersion: 1;
+    stateRevision: number;
+    setupId: string;
+    mode: AzureSpSetupMode;
+    companyId: string;
+    initiatedByUserId: string;
+    initiatedByEmail?: string;
+    phase: AzureSpSetupPhase;
+    result: AzureSpSetupResult;
+    codeVerifier: string;
+    nonce: string;
+    redirectAfter?: string;
+    selectedTenantId?: string;
+    /** @internal protected persistence */
+    encryptedMicrosoftTokenCache?: string;
+    microsoftTokenCacheTenantId?: string;
+    microsoftTokenCacheUpdatedAt?: string;
+    targetCloudAccountId?: string;
+    targetCloudAccountName?: string;
+    targetAzureApplicationAppId?: string;
+    targetAzureServicePrincipalObjectId?: string;
+    azureApplicationObjectId?: string;
+    azureApplicationAppId?: string;
+    azureServicePrincipalObjectId?: string;
+    /** @internal protected persistence */
+    generatedClientSecretEncrypted?: string;
+    generatedClientSecretKeyId?: string;
+    generatedClientSecretExpiresAt?: string;
+    permissionManifestVersion: string;
+    targetPermissionManifestVersion?: string;
+    discoveredTenants?: AzureSpSetupTenant[];
+    selectedSubscriptionIds?: string[];
+    subscriptions?: AzureSpSetupSubscriptionOption[];
+    managementGroups?: AzureSpSetupManagementGroupOption[];
+    permissionPlan?: AzureSpSetupPermissionPlanItem[];
+    billingExportPlan?: AzureSpBillingExportPlan;
+    billingExportResults?: AzureSpBillingExportResult[];
+    billingExportBackfillMarkers?: string[];
+    operationResults?: AzureSpSetupOperationResult[];
+    progress?: AzureSpSetupProgressStep[];
+    selectedPermissionInstanceKeys?: string[];
+    resultCloudAccountId?: string;
+    resultCloudAccountName?: string;
+    errorCode?: AzureSpSetupErrorCode;
+    errorMessage?: string;
+    authorizationCodeReceivedAt?: string;
+    createdAt: string;
+    updatedAt: string;
+    expiresAt: string;
+    completedAt?: string;
+    cancelledAt?: string;
+    executionId?: string;
+    executionAttempt?: number;
+    leaseOwner?: string;
+    leaseExpiresAt?: string;
+    lastHeartbeatAt?: string;
+    /** @internal storage-adapter metadata */
+    stateBlobPath?: string;
+    stateBlobUpdatedAt?: string;
+    previousStateRevision?: number;
+    /** @internal storage-adapter metadata */
+    stateBlobETag?: string;
+    executionRequest?: AzureSpSetupExecutionRequestV1;
+    executionRequestHash?: string;
+    executionOwner?: AzureSpSetupExecutionOwner;
+    dispatchStatus?: AzureSpSetupDispatchStatus;
+    dispatchSequence?: number;
+    dispatchMessageId?: string;
+    dispatchPendingAt?: string;
+    dispatchAcknowledgedAt?: string;
+    dispatchAttemptCount?: number;
+    dispatchNextAttemptAt?: string;
+    dispatchLastErrorCode?: AzureSpSetupErrorCode;
+    cancellationRequestedAt?: string;
+    currentCheckpoint?: string;
+    retryCategory?: AzureSpSetupRetryCategory;
+    retryCount?: number;
+    retryAfterAt?: string;
+    nextDispatchSequence?: number;
+    continuationMessageId?: string;
+    continuationPendingAt?: string;
+    continuationQueuedAt?: string;
+    accountReadiness?: AzureSpSetupAccountReadiness;
+    subscriptionReadiness?: AzureSpSetupSubscriptionReadiness[];
+    targetReadinessVersion?: string;
+    targetSummaryBaselineVersion?: string;
+    targetClaimId?: string;
+    targetClaimOwner?: string;
+    targetClaimExpiresAt?: string;
+    targetedRefreshCheckpoints?: AzureSpSetupTargetedRefreshCheckpoint[];
+}
+//# sourceMappingURL=azureSpSetupDurable.d.ts.map

package/dist/accounts/azureSpSetupDurable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azureSpSetupDurable.d.ts","sourceRoot":"","sources":["../../src/accounts/azureSpSetupDurable.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,8BAA8B,EAC9B,gBAAgB,EAChB,2BAA2B,EAC3B,8BAA8B,EAC9B,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,8BAA8B,EAC9B,iCAAiC,EACjC,kBAAkB,EACnB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,iCAAiC;IAChD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,yBAAyB,GAAG,YAAY,GAAG,WAAW,GAAG,aAAa,GAAG,iBAAiB,GAAG,eAAe,GAAG,SAAS,CAAC;AAErI,MAAM,MAAM,iCAAiC,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEvG,MAAM,WAAW,qCAAqC;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,iCAAiC,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,qBAAqB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,CAAC,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,iBAAiB,CAAC;IACzB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sCAAsC;IACtC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,mCAAmC,CAAC,EAAE,MAAM,CAAC;IAC7C,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,sCAAsC;IACtC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,yBAAyB,EAAE,MAAM,CAAC;IAClC,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,iBAAiB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACzC,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,aAAa,CAAC,EAAE,8BAA8B,EAAE,CAAC;IACjD,gBAAgB,CAAC,EAAE,iCAAiC,EAAE,CAAC;IACvD,cAAc,CAAC,EAAE,8BAA8B,EAAE,CAAC;IAClD,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C,oBAAoB,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACpD,4BAA4B,CAAC,EAAE,MAAM,EAAE,CAAC;IACxC,gBAAgB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACjD,QAAQ,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACtC,8BAA8B,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,8BAA8B,CAAC;IAClD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IAChD,qBAAqB,CAAC,EAAE,iCAAiC,EAAE,CAAC;IAC5D,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,0BAA0B,CAAC,EAAE,qCAAqC,EAAE,CAAC;CACtE"}

package/dist/accounts/azureSpSetupDurable.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=azureSpSetupDurable.js.map

package/dist/accounts/azureSpSetupDurable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azureSpSetupDurable.js","sourceRoot":"","sources":["../../src/accounts/azureSpSetupDurable.ts"],"names":[],"mappings":""}

package/dist/accounts/index.d.ts

@@ -1,2 +1,6 @@
 export * from './accounts';
+export * from './azureSpSetup';
+export * from './azureSpSetupDurable';
+export * from './writePermissions';
+export * from './readPermissions';
 //# sourceMappingURL=index.d.ts.map

package/dist/accounts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/accounts/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/accounts/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC"}

package/dist/accounts/index.js

@@ -15,4 +15,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./accounts"), exports);
+__exportStar(require("./azureSpSetup"), exports);
+__exportStar(require("./azureSpSetupDurable"), exports);
+__exportStar(require("./writePermissions"), exports);
+__exportStar(require("./readPermissions"), exports);
 //# sourceMappingURL=index.js.map

package/dist/accounts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/accounts/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/accounts/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,iDAA+B;AAC/B,wDAAsC;AACtC,qDAAmC;AACnC,oDAAkC"}

package/dist/accounts/readPermissions.d.ts

@@ -0,0 +1,76 @@
+export type { CloudAccountCapabilityValidationPlan, CloudAccountCapabilityValidationProgress, CloudAccountCapabilityValidationResult, CloudAccountCapabilityValidationScope, CloudAccountCapabilityValidationStatus, CloudAccountReadAccessValidation, CloudAccountValidationResult, CloudAccountValidationStreamEvent, CloudAccountWriteAccessValidation, SubscriptionReadValidationResult, SubscriptionValidationStatus, } from './validation';
+/**
+ * Subscription-scoped read capability bitmask enum.
+ * Each capability maps to a single bit.
+ */
+export declare enum SubscriptionReadPermission {
+    /** Permission to read Azure Monitor metrics. */
+    MonitoringReader = 1,// 1
+    /** Permission to run Log Analytics / App Insights data queries. */
+    LogAnalyticsDataReader = 2,// 2
+    /** Permission to read subscription resource groups. */
+    ResourceGroupsReader = 4,// 4
+    /** Permission to read subscription resource inventory. */
+    ResourceInventoryReader = 8,// 8
+    /** Permission to read Azure Activity Log events. */
+    ActivityLogReader = 16,// 16
+    /** Permission to run Azure Resource Graph queries. */
+    ResourceGraphReader = 32,// 32
+    /** Permission to read Azure Cost Management query results. */
+    CostManagementReader = 64,// 64
+    /** Permission to read Azure Consumption usage details. */
+    ConsumptionUsageReader = 128,// 128
+    /** Permission to read Azure Advisor recommendations and Advisor score. */
+    AdvisorRecommendationsReader = 256,// 256
+    /** Permission to read Defender for Cloud security posture data. */
+    SecurityReader = 512
+}
+/**
+ * Cloud-account-scoped read capability bitmask enum.
+ * Each capability maps to a single bit.
+ */
+export declare enum CloudAccountReadPermission {
+    /** Permission to read management group entities. */
+    ManagementGroupReader = 1,// 1
+    /** Permission to read reservation resources and related consumption artifacts. */
+    ReservationsReader = 2,// 2
+    /** Permission to read savings plan resources. */
+    SavingsPlanReader = 4,// 4
+    /** Permission to read Microsoft Graph applications/service principals. */
+    GraphApplicationReadAll = 8,// 8
+    /** Permission to read Microsoft Graph privileged role assignment schedules. */
+    GraphRoleAssignmentScheduleReadDirectory = 16,// 16
+    /** Permission to read Microsoft Graph privileged role eligibility schedules. */
+    GraphRoleEligibilityScheduleReadDirectory = 32,// 32
+    /** Permission to read Microsoft Graph role-management metadata. */
+    GraphRoleManagementReadDirectory = 64,// 64
+    /** Permission to read Microsoft Graph group memberships. */
+    GraphGroupMemberReadAll = 128,// 128
+    /** Permission to read Microsoft Graph user metadata. */
+    GraphUserReadAll = 256,// 256
+    /** Permission to read Microsoft Graph audit logs. */
+    GraphAuditLogReadAll = 1024
+}
+/**
+ * Metadata for a subscription-scoped read capability.
+ */
+export interface SubscriptionReadPermissionMetadata {
+    id: SubscriptionReadPermission;
+    displayName: string;
+    description: string;
+    requiredRoles: string[];
+    documentationUrl?: string;
+}
+/**
+ * Metadata for a cloud-account-scoped read capability.
+ */
+export interface CloudAccountReadPermissionMetadata {
+    id: CloudAccountReadPermission;
+    displayName: string;
+    description: string;
+    requiredRoles: string[];
+    documentationUrl?: string;
+}
+export declare const SUBSCRIPTION_READ_PERMISSIONS_METADATA: SubscriptionReadPermissionMetadata[];
+export declare const CLOUD_ACCOUNT_READ_PERMISSIONS_METADATA: CloudAccountReadPermissionMetadata[];
+//# sourceMappingURL=readPermissions.d.ts.map

package/dist/accounts/readPermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPermissions.d.ts","sourceRoot":"","sources":["../../src/accounts/readPermissions.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,oCAAoC,EACpC,wCAAwC,EACxC,sCAAsC,EACtC,qCAAqC,EACrC,sCAAsC,EACtC,gCAAgC,EAChC,4BAA4B,EAC5B,iCAAiC,EACjC,iCAAiC,EACjC,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,cAAc,CAAC;AAEtB;;;GAGG;AACH,oBAAY,0BAA0B;IACpC,gDAAgD;IAChD,gBAAgB,IAAS,CAAE,IAAI;IAC/B,mEAAmE;IACnE,sBAAsB,IAAS,CAAE,IAAI;IACrC,uDAAuD;IACvD,oBAAoB,IAAS,CAAE,IAAI;IACnC,0DAA0D;IAC1D,uBAAuB,IAAS,CAAE,IAAI;IACtC,oDAAoD;IACpD,iBAAiB,KAAS,CAAE,KAAK;IACjC,sDAAsD;IACtD,mBAAmB,KAAS,CAAE,KAAK;IACnC,8DAA8D;IAC9D,oBAAoB,KAAS,CAAE,KAAK;IACpC,0DAA0D;IAC1D,sBAAsB,MAAS,CAAE,MAAM;IACvC,0EAA0E;IAC1E,4BAA4B,MAAS,CAAE,MAAM;IAC7C,mEAAmE;IACnE,cAAc,MAAS;CACxB;AAED;;;GAGG;AACH,oBAAY,0BAA0B;IACpC,oDAAoD;IACpD,qBAAqB,IAAS,CAAE,IAAI;IACpC,kFAAkF;IAClF,kBAAkB,IAAS,CAAE,IAAI;IACjC,iDAAiD;IACjD,iBAAiB,IAAS,CAAE,IAAI;IAChC,0EAA0E;IAC1E,uBAAuB,IAAS,CAAE,IAAI;IACtC,+EAA+E;IAC/E,wCAAwC,KAAS,CAAE,KAAK;IACxD,gFAAgF;IAChF,yCAAyC,KAAS,CAAE,KAAK;IACzD,mEAAmE;IACnE,gCAAgC,KAAS,CAAE,KAAK;IAChD,4DAA4D;IAC5D,uBAAuB,MAAS,CAAE,MAAM;IACxC,wDAAwD;IACxD,gBAAgB,MAAS,CAAE,MAAM;IACjC,qDAAqD;IACrD,oBAAoB,OAAU;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,0BAA0B,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,0BAA0B,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,sCAAsC,EAAE,kCAAkC,EAuEtF,CAAC;AAEF,eAAO,MAAM,uCAAuC,EAAE,kCAAkC,EAuEvF,CAAC"}

package/dist/accounts/readPermissions.js

@@ -0,0 +1,202 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CLOUD_ACCOUNT_READ_PERMISSIONS_METADATA = exports.SUBSCRIPTION_READ_PERMISSIONS_METADATA = exports.CloudAccountReadPermission = exports.SubscriptionReadPermission = void 0;
+/**
+ * Subscription-scoped read capability bitmask enum.
+ * Each capability maps to a single bit.
+ */
+var SubscriptionReadPermission;
+(function (SubscriptionReadPermission) {
+    /** Permission to read Azure Monitor metrics. */
+    SubscriptionReadPermission[SubscriptionReadPermission["MonitoringReader"] = 1] = "MonitoringReader";
+    /** Permission to run Log Analytics / App Insights data queries. */
+    SubscriptionReadPermission[SubscriptionReadPermission["LogAnalyticsDataReader"] = 2] = "LogAnalyticsDataReader";
+    /** Permission to read subscription resource groups. */
+    SubscriptionReadPermission[SubscriptionReadPermission["ResourceGroupsReader"] = 4] = "ResourceGroupsReader";
+    /** Permission to read subscription resource inventory. */
+    SubscriptionReadPermission[SubscriptionReadPermission["ResourceInventoryReader"] = 8] = "ResourceInventoryReader";
+    /** Permission to read Azure Activity Log events. */
+    SubscriptionReadPermission[SubscriptionReadPermission["ActivityLogReader"] = 16] = "ActivityLogReader";
+    /** Permission to run Azure Resource Graph queries. */
+    SubscriptionReadPermission[SubscriptionReadPermission["ResourceGraphReader"] = 32] = "ResourceGraphReader";
+    /** Permission to read Azure Cost Management query results. */
+    SubscriptionReadPermission[SubscriptionReadPermission["CostManagementReader"] = 64] = "CostManagementReader";
+    /** Permission to read Azure Consumption usage details. */
+    SubscriptionReadPermission[SubscriptionReadPermission["ConsumptionUsageReader"] = 128] = "ConsumptionUsageReader";
+    /** Permission to read Azure Advisor recommendations and Advisor score. */
+    SubscriptionReadPermission[SubscriptionReadPermission["AdvisorRecommendationsReader"] = 256] = "AdvisorRecommendationsReader";
+    /** Permission to read Defender for Cloud security posture data. */
+    SubscriptionReadPermission[SubscriptionReadPermission["SecurityReader"] = 512] = "SecurityReader";
+})(SubscriptionReadPermission || (exports.SubscriptionReadPermission = SubscriptionReadPermission = {}));
+/**
+ * Cloud-account-scoped read capability bitmask enum.
+ * Each capability maps to a single bit.
+ */
+var CloudAccountReadPermission;
+(function (CloudAccountReadPermission) {
+    /** Permission to read management group entities. */
+    CloudAccountReadPermission[CloudAccountReadPermission["ManagementGroupReader"] = 1] = "ManagementGroupReader";
+    /** Permission to read reservation resources and related consumption artifacts. */
+    CloudAccountReadPermission[CloudAccountReadPermission["ReservationsReader"] = 2] = "ReservationsReader";
+    /** Permission to read savings plan resources. */
+    CloudAccountReadPermission[CloudAccountReadPermission["SavingsPlanReader"] = 4] = "SavingsPlanReader";
+    /** Permission to read Microsoft Graph applications/service principals. */
+    CloudAccountReadPermission[CloudAccountReadPermission["GraphApplicationReadAll"] = 8] = "GraphApplicationReadAll";
+    /** Permission to read Microsoft Graph privileged role assignment schedules. */
+    CloudAccountReadPermission[CloudAccountReadPermission["GraphRoleAssignmentScheduleReadDirectory"] = 16] = "GraphRoleAssignmentScheduleReadDirectory";
+    /** Permission to read Microsoft Graph privileged role eligibility schedules. */
+    CloudAccountReadPermission[CloudAccountReadPermission["GraphRoleEligibilityScheduleReadDirectory"] = 32] = "GraphRoleEligibilityScheduleReadDirectory";
+    /** Permission to read Microsoft Graph role-management metadata. */
+    CloudAccountReadPermission[CloudAccountReadPermission["GraphRoleManagementReadDirectory"] = 64] = "GraphRoleManagementReadDirectory";
+    /** Permission to read Microsoft Graph group memberships. */
+    CloudAccountReadPermission[CloudAccountReadPermission["GraphGroupMemberReadAll"] = 128] = "GraphGroupMemberReadAll";
+    /** Permission to read Microsoft Graph user metadata. */
+    CloudAccountReadPermission[CloudAccountReadPermission["GraphUserReadAll"] = 256] = "GraphUserReadAll";
+    /** Permission to read Microsoft Graph audit logs. */
+    CloudAccountReadPermission[CloudAccountReadPermission["GraphAuditLogReadAll"] = 1024] = "GraphAuditLogReadAll";
+})(CloudAccountReadPermission || (exports.CloudAccountReadPermission = CloudAccountReadPermission = {}));
+exports.SUBSCRIPTION_READ_PERMISSIONS_METADATA = [
+    {
+        id: SubscriptionReadPermission.MonitoringReader,
+        displayName: 'Monitoring Reader',
+        description: 'Allows Spotto to read Azure Monitor metrics for subscription resources.',
+        requiredRoles: ['Monitoring Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/azure-monitor/roles-permissions-security',
+    },
+    {
+        id: SubscriptionReadPermission.LogAnalyticsDataReader,
+        displayName: 'Log Analytics Data Reader',
+        description: 'Allows Spotto to run Log Analytics and App Insights data queries.',
+        requiredRoles: ['Log Analytics Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/azure-monitor/logs/manage-access',
+    },
+    {
+        id: SubscriptionReadPermission.ResourceGroupsReader,
+        displayName: 'Resource Groups Reader',
+        description: 'Allows Spotto to read resource groups for subscription inventory and grouping.',
+        requiredRoles: ['Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/general#reader',
+    },
+    {
+        id: SubscriptionReadPermission.ResourceInventoryReader,
+        displayName: 'Resource Inventory Reader',
+        description: 'Allows Spotto to read subscription resources for inventory, recommendations, relationship graph, and portal/plugin views.',
+        requiredRoles: ['Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/general#reader',
+    },
+    {
+        id: SubscriptionReadPermission.ActivityLogReader,
+        displayName: 'Activity Log Reader',
+        description: 'Allows Spotto to read Azure Activity Log events for operational context and refresh decisions.',
+        requiredRoles: ['Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log',
+    },
+    {
+        id: SubscriptionReadPermission.ResourceGraphReader,
+        displayName: 'Resource Graph Reader',
+        description: 'Allows Spotto to run Azure Resource Graph queries used by inventory, governance, reliability, and security checks.',
+        requiredRoles: ['Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/governance/resource-graph/overview',
+    },
+    {
+        id: SubscriptionReadPermission.CostManagementReader,
+        displayName: 'Cost Management Reader',
+        description: 'Allows Spotto to read scoped Azure Cost Management data for costs, budgets, and savings calculations.',
+        requiredRoles: ['Cost Management Reader', 'Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/cost-management-billing/costs/assign-access-acm-data',
+    },
+    {
+        id: SubscriptionReadPermission.ConsumptionUsageReader,
+        displayName: 'Consumption Usage Reader',
+        description: 'Allows Spotto to read Azure usage detail rows for usage attribution and commitment analysis.',
+        requiredRoles: ['Cost Management Reader', 'Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/rest/api/consumption/usage-details/list',
+    },
+    {
+        id: SubscriptionReadPermission.AdvisorRecommendationsReader,
+        displayName: 'Advisor Reader',
+        description: 'Allows Spotto to read Azure Advisor recommendations and Advisor score for recommendation import and optimization workflows.',
+        requiredRoles: ['Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/advisor/advisor-overview',
+    },
+    {
+        id: SubscriptionReadPermission.SecurityReader,
+        displayName: 'Security Reader',
+        description: 'Allows Spotto to read Defender for Cloud assessments, secure score, and security posture data.',
+        requiredRoles: ['Security Reader', 'Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/defender-for-cloud/permissions',
+    },
+];
+exports.CLOUD_ACCOUNT_READ_PERMISSIONS_METADATA = [
+    {
+        id: CloudAccountReadPermission.ManagementGroupReader,
+        displayName: 'Management Group Reader',
+        description: 'Allows Spotto to read tenant management group entities.',
+        requiredRoles: ['Management Group Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/governance/management-groups/how-to/protect-resource-hierarchy',
+    },
+    {
+        id: CloudAccountReadPermission.ReservationsReader,
+        displayName: 'Reservations Reader',
+        description: 'Allows Spotto to read reservation resources and reservation usage artifacts.',
+        requiredRoles: ['Reservations Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/cost-management-billing/reservations/view-reservations',
+    },
+    {
+        id: CloudAccountReadPermission.SavingsPlanReader,
+        displayName: 'Savings Plan Reader',
+        description: 'Allows Spotto to read savings plan resources.',
+        requiredRoles: ['Savings plan Reader'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/azure/cost-management-billing/savings-plan/view-utilization',
+    },
+    {
+        id: CloudAccountReadPermission.GraphApplicationReadAll,
+        displayName: 'Graph Application Read.All',
+        description: 'Allows Spotto to read Microsoft Graph applications and service principals.',
+        requiredRoles: ['Application.Read.All'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/graph/permissions-reference#applicationreadall',
+    },
+    {
+        id: CloudAccountReadPermission.GraphRoleAssignmentScheduleReadDirectory,
+        displayName: 'Graph RoleAssignmentSchedule Read.Directory',
+        description: 'Allows Spotto to read active Microsoft Graph role assignment schedules.',
+        requiredRoles: ['RoleAssignmentSchedule.Read.Directory'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/graph/permissions-reference#roleassignmentschedulereaddirectory',
+    },
+    {
+        id: CloudAccountReadPermission.GraphRoleEligibilityScheduleReadDirectory,
+        displayName: 'Graph RoleEligibilitySchedule Read.Directory',
+        description: 'Allows Spotto to read eligible Microsoft Graph role schedules.',
+        requiredRoles: ['RoleEligibilitySchedule.Read.Directory'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/graph/permissions-reference#roleeligibilityschedulereaddirectory',
+    },
+    {
+        id: CloudAccountReadPermission.GraphRoleManagementReadDirectory,
+        displayName: 'Graph RoleManagement Read.Directory',
+        description: 'Allows Spotto to read Microsoft Graph role-management metadata.',
+        requiredRoles: ['RoleManagement.Read.Directory'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/graph/permissions-reference#rolemanagementreaddirectory',
+    },
+    {
+        id: CloudAccountReadPermission.GraphGroupMemberReadAll,
+        displayName: 'Graph GroupMember Read.All',
+        description: 'Allows Spotto to read Microsoft Graph group memberships.',
+        requiredRoles: ['GroupMember.Read.All'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/graph/permissions-reference#groupmemberreadall',
+    },
+    {
+        id: CloudAccountReadPermission.GraphUserReadAll,
+        displayName: 'Graph User Read.All',
+        description: 'Allows Spotto to read Microsoft Graph user metadata.',
+        requiredRoles: ['User.Read.All'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/graph/permissions-reference#userreadall',
+    },
+    {
+        id: CloudAccountReadPermission.GraphAuditLogReadAll,
+        displayName: 'Graph AuditLog Read.All',
+        description: 'Allows Spotto to read Microsoft Graph audit logs.',
+        requiredRoles: ['AuditLog.Read.All'],
+        documentationUrl: 'https://learn.microsoft.com/en-us/graph/permissions-reference#auditlogreadall',
+    },
+];
+//# sourceMappingURL=readPermissions.js.map

package/dist/accounts/readPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPermissions.js","sourceRoot":"","sources":["../../src/accounts/readPermissions.ts"],"names":[],"mappings":";;;AAcA;;;GAGG;AACH,IAAY,0BAqBX;AArBD,WAAY,0BAA0B;IACpC,gDAAgD;IAChD,mGAAyB,CAAA;IACzB,mEAAmE;IACnE,+GAA+B,CAAA;IAC/B,uDAAuD;IACvD,2GAA6B,CAAA;IAC7B,0DAA0D;IAC1D,iHAAgC,CAAA;IAChC,oDAAoD;IACpD,sGAA0B,CAAA;IAC1B,sDAAsD;IACtD,0GAA4B,CAAA;IAC5B,8DAA8D;IAC9D,4GAA6B,CAAA;IAC7B,0DAA0D;IAC1D,iHAA+B,CAAA;IAC/B,0EAA0E;IAC1E,6HAAqC,CAAA;IACrC,mEAAmE;IACnE,iGAAuB,CAAA;AACzB,CAAC,EArBW,0BAA0B,0CAA1B,0BAA0B,QAqBrC;AAED;;;GAGG;AACH,IAAY,0BAqBX;AArBD,WAAY,0BAA0B;IACpC,oDAAoD;IACpD,6GAA8B,CAAA;IAC9B,kFAAkF;IAClF,uGAA2B,CAAA;IAC3B,iDAAiD;IACjD,qGAA0B,CAAA;IAC1B,0EAA0E;IAC1E,iHAAgC,CAAA;IAChC,+EAA+E;IAC/E,oJAAiD,CAAA;IACjD,gFAAgF;IAChF,sJAAkD,CAAA;IAClD,mEAAmE;IACnE,oIAAyC,CAAA;IACzC,4DAA4D;IAC5D,mHAAgC,CAAA;IAChC,wDAAwD;IACxD,qGAAyB,CAAA;IACzB,qDAAqD;IACrD,8GAA8B,CAAA;AAChC,CAAC,EArBW,0BAA0B,0CAA1B,0BAA0B,QAqBrC;AAwBY,QAAA,sCAAsC,GAAyC;IAC1F;QACE,EAAE,EAAE,0BAA0B,CAAC,gBAAgB;QAC/C,WAAW,EAAE,mBAAmB;QAChC,WAAW,EAAE,yEAAyE;QACtF,aAAa,EAAE,CAAC,mBAAmB,CAAC;QACpC,gBAAgB,EAAE,kFAAkF;KACrG;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,sBAAsB;QACrD,WAAW,EAAE,2BAA2B;QACxC,WAAW,EAAE,mEAAmE;QAChF,aAAa,EAAE,CAAC,sBAAsB,CAAC;QACvC,gBAAgB,EAAE,0EAA0E;KAC7F;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,oBAAoB;QACnD,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE,gFAAgF;QAC7F,aAAa,EAAE,CAAC,QAAQ,CAAC;QACzB,gBAAgB,EAAE,iGAAiG;KACpH;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,uBAAuB;QACtD,WAAW,EAAE,2BAA2B;QACxC,WAAW,EAAE,2HAA2H;QACxI,aAAa,EAAE,CAAC,QAAQ,CAAC;QACzB,gBAAgB,EAAE,iGAAiG;KACpH;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,iBAAiB;QAChD,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,gGAAgG;QAC7G,aAAa,EAAE,CAAC,QAAQ,CAAC;QACzB,gBAAgB,EAAE,+EAA+E;KAClG;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,mBAAmB;QAClD,WAAW,EAAE,uBAAuB;QACpC,WAAW,EAAE,oHAAoH;QACjI,aAAa,EAAE,CAAC,QAAQ,CAAC;QACzB,gBAAgB,EAAE,4EAA4E;KAC/F;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,oBAAoB;QACnD,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE,uGAAuG;QACpH,aAAa,EAAE,CAAC,wBAAwB,EAAE,QAAQ,CAAC;QACnD,gBAAgB,EAAE,8FAA8F;KACjH;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,sBAAsB;QACrD,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE,8FAA8F;QAC3G,aAAa,EAAE,CAAC,wBAAwB,EAAE,QAAQ,CAAC;QACnD,gBAAgB,EAAE,2EAA2E;KAC9F;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,4BAA4B;QAC3D,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,6HAA6H;QAC1I,aAAa,EAAE,CAAC,QAAQ,CAAC;QACzB,gBAAgB,EAAE,kEAAkE;KACrF;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,cAAc;QAC7C,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,gGAAgG;QAC7G,aAAa,EAAE,CAAC,iBAAiB,EAAE,QAAQ,CAAC;QAC5C,gBAAgB,EAAE,wEAAwE;KAC3F;CACF,CAAC;AAEW,QAAA,uCAAuC,GAAyC;IAC3F;QACE,EAAE,EAAE,0BAA0B,CAAC,qBAAqB;QACpD,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE,yDAAyD;QACtE,aAAa,EAAE,CAAC,yBAAyB,CAAC;QAC1C,gBAAgB,EAAE,wGAAwG;KAC3H;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,kBAAkB;QACjD,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,8EAA8E;QAC3F,aAAa,EAAE,CAAC,qBAAqB,CAAC;QACtC,gBAAgB,EAAE,gGAAgG;KACnH;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,iBAAiB;QAChD,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,+CAA+C;QAC5D,aAAa,EAAE,CAAC,qBAAqB,CAAC;QACtC,gBAAgB,EAAE,+FAA+F;KAClH;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,uBAAuB;QACtD,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,4EAA4E;QACzF,aAAa,EAAE,CAAC,sBAAsB,CAAC;QACvC,gBAAgB,EAAE,kFAAkF;KACrG;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,wCAAwC;QACvE,WAAW,EAAE,6CAA6C;QAC1D,WAAW,EAAE,yEAAyE;QACtF,aAAa,EAAE,CAAC,uCAAuC,CAAC;QACxD,gBAAgB,EAAE,mGAAmG;KACtH;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,yCAAyC;QACxE,WAAW,EAAE,8CAA8C;QAC3D,WAAW,EAAE,gEAAgE;QAC7E,aAAa,EAAE,CAAC,wCAAwC,CAAC;QACzD,gBAAgB,EAAE,oGAAoG;KACvH;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,gCAAgC;QAC/D,WAAW,EAAE,qCAAqC;QAClD,WAAW,EAAE,iEAAiE;QAC9E,aAAa,EAAE,CAAC,+BAA+B,CAAC;QAChD,gBAAgB,EAAE,2FAA2F;KAC9G;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,uBAAuB;QACtD,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,0DAA0D;QACvE,aAAa,EAAE,CAAC,sBAAsB,CAAC;QACvC,gBAAgB,EAAE,kFAAkF;KACrG;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,gBAAgB;QAC/C,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,sDAAsD;QACnE,aAAa,EAAE,CAAC,eAAe,CAAC;QAChC,gBAAgB,EAAE,2EAA2E;KAC9F;IACD;QACE,EAAE,EAAE,0BAA0B,CAAC,oBAAoB;QACnD,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,CAAC,mBAAmB,CAAC;QACpC,gBAAgB,EAAE,+EAA+E;KAClG;CACF,CAAC"}

package/dist/accounts/validation.d.ts

@@ -0,0 +1,91 @@
+import type { SubscriptionAccount } from './accounts';
+export type SubscriptionValidationStatus = 'confirmed' | 'forbidden' | 'unauthorized' | 'throttled' | 'unavailable';
+export interface SubscriptionReadValidationResult {
+    subscription: SubscriptionAccount;
+    valid: boolean;
+    status: SubscriptionValidationStatus;
+    statusCode: number;
+    message?: string;
+}
+export interface CloudAccountReadAccessValidation {
+    valid: boolean;
+    subscriptions: SubscriptionAccount[];
+    subscriptionResults: SubscriptionReadValidationResult[];
+}
+export interface CloudAccountWriteAccessValidation {
+    valid: boolean;
+    subscriptions: SubscriptionAccount[];
+}
+export type CloudAccountCapabilityValidationStatus = 'confirmed' | 'missing' | 'notApplicable' | 'notTested' | 'warning' | 'unknown';
+export type CloudAccountCapabilityValidationScope = 'tenant' | 'subscription' | 'resource' | 'write';
+export interface CloudAccountCapabilityValidationResult {
+    key: string;
+    section: string;
+    scope: CloudAccountCapabilityValidationScope;
+    status: CloudAccountCapabilityValidationStatus;
+    severity: 'required' | 'recommended' | 'optional';
+    displayName: string;
+    description: string;
+    requiredRoles: string[];
+    affectedFeatures: string[];
+    documentationUrl?: string;
+    testedBy: string;
+    subscriptionId?: string;
+    statusCode?: number;
+    message?: string;
+}
+export interface CloudAccountValidationResult {
+    valid: boolean;
+    readAccess: CloudAccountReadAccessValidation;
+    writeAccess?: CloudAccountWriteAccessValidation;
+    capabilityChecks?: CloudAccountCapabilityValidationResult[];
+}
+export interface CloudAccountCapabilityValidationProgress {
+    result: CloudAccountCapabilityValidationResult;
+    completed: number;
+    total: number;
+}
+export interface CloudAccountCapabilityValidationPlan {
+    tenantCheckCount: number;
+    subscriptionCheckCount: number;
+    subscriptionCount: number;
+    totalCheckCount: number;
+}
+export type CloudAccountValidationStreamEvent = {
+    event: 'started';
+    message: string;
+} | {
+    event: 'readAccessStarted';
+    message: string;
+} | {
+    event: 'subscriptionsDiscovered';
+    message: string;
+    readAccess: CloudAccountReadAccessValidation;
+    visibleSubscriptionCount: number;
+    readableSubscriptionCount: number;
+} | {
+    event: 'capabilityStarted';
+    message: string;
+    plan: CloudAccountCapabilityValidationPlan;
+} | {
+    event: 'capabilityResult';
+    message: string;
+    result: CloudAccountCapabilityValidationResult;
+    completed: number;
+    total: number;
+} | {
+    event: 'writeAccessStarted';
+    message: string;
+} | {
+    event: 'writeAccessCompleted';
+    message: string;
+    writeAccess: CloudAccountWriteAccessValidation;
+} | {
+    event: 'completed';
+    message: string;
+    result: CloudAccountValidationResult;
+} | {
+    event: 'error';
+    message: string;
+};
+//# sourceMappingURL=validation.d.ts.map

package/dist/accounts/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/accounts/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,MAAM,4BAA4B,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,WAAW,GAAG,aAAa,CAAC;AAEpH,MAAM,WAAW,gCAAgC;IAC/C,YAAY,EAAE,mBAAmB,CAAC;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,4BAA4B,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gCAAgC;IAC/C,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,mBAAmB,EAAE,CAAC;IACrC,mBAAmB,EAAE,gCAAgC,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,mBAAmB,EAAE,CAAC;CACtC;AAED,MAAM,MAAM,sCAAsC,GAC9C,WAAW,GACX,SAAS,GACT,eAAe,GACf,WAAW,GACX,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,MAAM,qCAAqC,GAAG,QAAQ,GAAG,cAAc,GAAG,UAAU,GAAG,OAAO,CAAC;AAErG,MAAM,WAAW,sCAAsC;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,qCAAqC,CAAC;IAC7C,MAAM,EAAE,sCAAsC,CAAC;IAC/C,QAAQ,EAAE,UAAU,GAAG,aAAa,GAAG,UAAU,CAAC;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,gCAAgC,CAAC;IAC7C,WAAW,CAAC,EAAE,iCAAiC,CAAC;IAChD,gBAAgB,CAAC,EAAE,sCAAsC,EAAE,CAAC;CAC7D;AAED,MAAM,WAAW,wCAAwC;IACvD,MAAM,EAAE,sCAAsC,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oCAAoC;IACnD,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,iCAAiC,GACzC;IACE,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,KAAK,EAAE,mBAAmB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,KAAK,EAAE,yBAAyB,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,gCAAgC,CAAC;IAC7C,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;CACnC,GACD;IACE,KAAK,EAAE,mBAAmB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,oCAAoC,CAAC;CAC5C,GACD;IACE,KAAK,EAAE,kBAAkB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,sCAAsC,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE,KAAK,EAAE,oBAAoB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,KAAK,EAAE,sBAAsB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,iCAAiC,CAAC;CAChD,GACD;IACE,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,4BAA4B,CAAC;CACtC,GACD;IACE,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/accounts/validation.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=validation.js.map

package/dist/accounts/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/accounts/validation.ts"],"names":[],"mappings":""}

package/dist/accounts/writePermissions.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Write Permission Bitmask Enum
+ * Each permission gets a unique bit position for efficient storage
+ */
+export declare enum WritePermission {
+    /** Permission to dismiss Azure Advisor recommendations */
+    DismissRecommendations = 1,// 1
+    /** Permission to enable storage inventory reports on storage accounts */
+    StorageInventory = 2,// 2
+    /** Permission to create scoped Azure Policy exemptions */
+    PolicyExemptions = 4
+}
+/**
+ * Metadata for a write permission
+ * Contains display information, required roles, and documentation links
+ */
+export interface WritePermissionMetadata {
+    /** Unique identifier matching the WritePermission enum */
+    id: WritePermission;
+    /** Human-readable display name */
+    displayName: string;
+    /** Description of what this permission allows */
+    description: string;
+    /** Required Azure RBAC role(s) for this permission */
+    requiredRoles: string[];
+    /** URL to documentation about this permission */
+    documentationUrl?: string;
+    /** URL to script generator for creating custom roles */
+    scriptGeneratorUrl?: string;
+}
+/**
+ * Permission metadata array
+ * Define all available write permissions with their metadata
+ */
+export declare const WRITE_PERMISSIONS_METADATA: WritePermissionMetadata[];
+//# sourceMappingURL=writePermissions.d.ts.map

package/dist/accounts/writePermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writePermissions.d.ts","sourceRoot":"","sources":["../../src/accounts/writePermissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,oBAAY,eAAe;IACzB,0DAA0D;IAC1D,sBAAsB,IAAS,CAAE,IAAI;IACrC,yEAAyE;IACzE,gBAAgB,IAAS,CAAE,IAAI;IAC/B,0DAA0D;IAC1D,gBAAgB,IAAS;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,0DAA0D;IAC1D,EAAE,EAAE,eAAe,CAAC;IACpB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EAAE,uBAAuB,EAyB/D,CAAC"}