@spottoai/types-package 1.0.2-beta.35 → 1.0.2-beta.351

package/dist/assessments/run.d.ts

@@ -0,0 +1,62 @@
+import type { AssessmentFailureMetadata, AssessmentScope, AssessmentStorageReference } from './common';
+import type { AssessmentProviderName, AssessmentRunStatus, AssessmentType } from './status';
+export interface AssessmentRunTimestamps {
+    createdAt: string;
+    queuedAt?: string;
+    startedAt?: string;
+    generatedAt?: string;
+    reviewedAt?: string;
+    approvedAt?: string;
+    publishedAt?: string;
+    failedAt?: string;
+}
+export interface AssessmentRunSummary extends AssessmentRunTimestamps {
+    assessmentRunId: string;
+    companyId: string;
+    assessmentType: AssessmentType;
+    providerName: AssessmentProviderName;
+    scope: AssessmentScope;
+    status: AssessmentRunStatus;
+    createdByUserId?: string;
+    reviewedByUserId?: string;
+    approvedByUserId?: string;
+    sourceVersion?: string;
+    artifactPath?: string;
+    documentPath?: string;
+    failure?: AssessmentFailureMetadata;
+}
+export interface AssessmentRun extends AssessmentRunSummary {
+    schemaVersion: 1;
+    contextPackReference?: AssessmentStorageReference;
+    evidencePackReference?: AssessmentStorageReference;
+    artifactReference?: AssessmentStorageReference;
+    reviewReference?: AssessmentStorageReference;
+    exportIndexReference?: AssessmentStorageReference;
+    generationAttemptId?: string;
+    correlationId?: string;
+}
+export interface CreateAssessmentRunRequest {
+    assessmentType: AssessmentType;
+    providerName: AssessmentProviderName;
+    cloudAccountIds: string[];
+    subscriptionIds: string[];
+}
+export interface CreateAssessmentRunResponse {
+    assessmentRun: AssessmentRun;
+    queued: true;
+}
+export interface ListAssessmentRunsQuery {
+    status?: AssessmentRunStatus;
+    assessmentType?: AssessmentType;
+    records?: number;
+    continuationToken?: string;
+}
+export interface ListAssessmentRunsResponse {
+    runs: AssessmentRunSummary[];
+    continuationToken?: string;
+}
+export interface AssessmentRunIndex {
+    version: 1;
+    runs: AssessmentRunSummary[];
+}
+//# sourceMappingURL=run.d.ts.map

package/dist/assessments/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/assessments/run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AACvG,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE5F,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAqB,SAAQ,uBAAuB;IACnE,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,sBAAsB,CAAC;IACrC,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC;AAED,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,aAAa,EAAE,CAAC,CAAC;IACjB,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,qBAAqB,CAAC,EAAE,0BAA0B,CAAC;IACnD,iBAAiB,CAAC,EAAE,0BAA0B,CAAC;IAC/C,eAAe,CAAC,EAAE,0BAA0B,CAAC;IAC7C,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,sBAAsB,CAAC;IACrC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,IAAI,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,oBAAoB,EAAE,CAAC;CAC9B"}

package/dist/assessments/run.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=run.js.map

package/dist/assessments/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/assessments/run.ts"],"names":[],"mappings":""}

package/dist/assessments/sow.d.ts

@@ -0,0 +1,30 @@
+import type { AssessmentTraceabilityReference } from './common';
+export type AssessmentSelectedActionItemIds = [string, ...string[]];
+export interface CreateAssessmentSowHandoffRequest {
+    actionItemIds: AssessmentSelectedActionItemIds;
+    title?: string;
+}
+export interface AssessmentSowDraftActionItem extends AssessmentTraceabilityReference {
+    actionItemId: string;
+    title: string;
+    description: string;
+    benefit: string;
+    effortHours?: number;
+    dependencies?: string[];
+    assumptions?: string[];
+    suggestedDeliveryPackage?: string;
+}
+export interface AssessmentSowDraftSource {
+    source: 'assessment';
+    assessmentRunId: string;
+    companyId: string;
+    title: string;
+    actionItems: AssessmentSowDraftActionItem[];
+}
+export interface CreateAssessmentSowHandoffResponse {
+    assessmentRunId: string;
+    actionItemIds: string[];
+    draftId?: string;
+    draftSource: AssessmentSowDraftSource;
+}
+//# sourceMappingURL=sow.d.ts.map

package/dist/assessments/sow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sow.d.ts","sourceRoot":"","sources":["../../src/assessments/sow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,MAAM,+BAA+B,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAEpE,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,+BAA+B,CAAC;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA6B,SAAQ,+BAA+B;IACnF,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,YAAY,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,4BAA4B,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,kCAAkC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,wBAAwB,CAAC;CACvC"}

package/dist/assessments/sow.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=sow.js.map

package/dist/assessments/sow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sow.js","sourceRoot":"","sources":["../../src/assessments/sow.ts"],"names":[],"mappings":""}

package/dist/assessments/status.d.ts

@@ -0,0 +1,27 @@
+export declare const ARCHITECTURE_ASSESSMENT_TYPE: "architecture";
+export declare const ASSESSMENT_TYPES: readonly ["architecture"];
+export type ArchitectureAssessmentType = typeof ARCHITECTURE_ASSESSMENT_TYPE;
+export type AssessmentType = (typeof ASSESSMENT_TYPES)[number];
+export declare const ASSESSMENT_PROVIDER_NAMES: readonly ["azure"];
+export type AssessmentProviderName = (typeof ASSESSMENT_PROVIDER_NAMES)[number];
+export declare const ASSESSMENT_RELEASE_STAGES: readonly ["preview", "ga"];
+export type AssessmentReleaseStage = (typeof ASSESSMENT_RELEASE_STAGES)[number];
+export declare const ASSESSMENT_RUN_STATUSES: readonly ["draft", "queued", "running", "needs_review", "approved", "published", "failed"];
+export type AssessmentRunStatus = (typeof ASSESSMENT_RUN_STATUSES)[number];
+export declare const ASSESSMENT_EXPORT_FORMATS: readonly ["docx"];
+export type AssessmentExportFormat = (typeof ASSESSMENT_EXPORT_FORMATS)[number];
+export declare const ASSESSMENT_EXPORT_STATUSES: readonly ["requested", "completed", "failed"];
+export type AssessmentExportStatus = (typeof ASSESSMENT_EXPORT_STATUSES)[number];
+export declare const ASSESSMENT_EVIDENCE_SOURCE_TYPES: readonly ["company_context_note", "subscription_report_evidence_pack", "portal_artifact", "raw_artifact", "conformed_artifact", "review_checklist", "derived_summary", "ai_inference", "evidence_gap"];
+export type AssessmentEvidenceSourceType = (typeof ASSESSMENT_EVIDENCE_SOURCE_TYPES)[number];
+export declare const ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS: readonly ["confirmed", "customer_supplied", "derived", "inferred", "gap"];
+export type AssessmentEvidenceConfidence = (typeof ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS)[number];
+export declare const ASSESSMENT_PRIORITY_LEVELS: readonly ["critical", "high", "medium", "low", "informational"];
+export type AssessmentPriority = (typeof ASSESSMENT_PRIORITY_LEVELS)[number];
+export declare const ASSESSMENT_EFFORT_BANDS: readonly ["low", "medium", "high", "unknown"];
+export type AssessmentEffortBand = (typeof ASSESSMENT_EFFORT_BANDS)[number];
+export declare const ASSESSMENT_IMPACT_LEVELS: readonly ["low", "medium", "high", "unknown"];
+export type AssessmentImpactLevel = (typeof ASSESSMENT_IMPACT_LEVELS)[number];
+export declare const ASSESSMENT_PILLARS: readonly ["architecture", "security", "reliability", "performance", "operations", "finops", "roadmap"];
+export type AssessmentPillar = (typeof ASSESSMENT_PILLARS)[number];
+//# sourceMappingURL=status.d.ts.map

package/dist/assessments/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/assessments/status.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,EAAG,cAAuB,CAAC;AACpE,eAAO,MAAM,gBAAgB,2BAA0C,CAAC;AACxE,MAAM,MAAM,0BAA0B,GAAG,OAAO,4BAA4B,CAAC;AAC7E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,yBAAyB,oBAAqB,CAAC;AAC5D,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,yBAAyB,4BAA6B,CAAC;AACpE,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,uBAAuB,4FAA6F,CAAC;AAClI,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E,eAAO,MAAM,yBAAyB,mBAAoB,CAAC;AAC3D,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,0BAA0B,+CAAgD,CAAC;AACxF,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,eAAO,MAAM,gCAAgC,wMAUnC,CAAC;AACX,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7F,eAAO,MAAM,qCAAqC,2EAA4E,CAAC;AAC/H,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,qCAAqC,CAAC,CAAC,MAAM,CAAC,CAAC;AAElG,eAAO,MAAM,0BAA0B,iEAAkE,CAAC;AAC1G,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,eAAO,MAAM,uBAAuB,+CAAgD,CAAC;AACrF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,wBAAwB,+CAAgD,CAAC;AACtF,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,eAAO,MAAM,kBAAkB,wGAAyG,CAAC;AACzI,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/assessments/status.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ASSESSMENT_PILLARS = exports.ASSESSMENT_IMPACT_LEVELS = exports.ASSESSMENT_EFFORT_BANDS = exports.ASSESSMENT_PRIORITY_LEVELS = exports.ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS = exports.ASSESSMENT_EVIDENCE_SOURCE_TYPES = exports.ASSESSMENT_EXPORT_STATUSES = exports.ASSESSMENT_EXPORT_FORMATS = exports.ASSESSMENT_RUN_STATUSES = exports.ASSESSMENT_RELEASE_STAGES = exports.ASSESSMENT_PROVIDER_NAMES = exports.ASSESSMENT_TYPES = exports.ARCHITECTURE_ASSESSMENT_TYPE = void 0;
+exports.ARCHITECTURE_ASSESSMENT_TYPE = 'architecture';
+exports.ASSESSMENT_TYPES = [exports.ARCHITECTURE_ASSESSMENT_TYPE];
+exports.ASSESSMENT_PROVIDER_NAMES = ['azure'];
+exports.ASSESSMENT_RELEASE_STAGES = ['preview', 'ga'];
+exports.ASSESSMENT_RUN_STATUSES = ['draft', 'queued', 'running', 'needs_review', 'approved', 'published', 'failed'];
+exports.ASSESSMENT_EXPORT_FORMATS = ['docx'];
+exports.ASSESSMENT_EXPORT_STATUSES = ['requested', 'completed', 'failed'];
+exports.ASSESSMENT_EVIDENCE_SOURCE_TYPES = [
+    'company_context_note',
+    'subscription_report_evidence_pack',
+    'portal_artifact',
+    'raw_artifact',
+    'conformed_artifact',
+    'review_checklist',
+    'derived_summary',
+    'ai_inference',
+    'evidence_gap',
+];
+exports.ASSESSMENT_EVIDENCE_CONFIDENCE_LEVELS = ['confirmed', 'customer_supplied', 'derived', 'inferred', 'gap'];
+exports.ASSESSMENT_PRIORITY_LEVELS = ['critical', 'high', 'medium', 'low', 'informational'];
+exports.ASSESSMENT_EFFORT_BANDS = ['low', 'medium', 'high', 'unknown'];
+exports.ASSESSMENT_IMPACT_LEVELS = ['low', 'medium', 'high', 'unknown'];
+exports.ASSESSMENT_PILLARS = ['architecture', 'security', 'reliability', 'performance', 'operations', 'finops', 'roadmap'];
+//# sourceMappingURL=status.js.map

package/dist/assessments/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/assessments/status.ts"],"names":[],"mappings":";;;AAAa,QAAA,4BAA4B,GAAG,cAAuB,CAAC;AACvD,QAAA,gBAAgB,GAAG,CAAC,oCAA4B,CAAU,CAAC;AAI3D,QAAA,yBAAyB,GAAG,CAAC,OAAO,CAAU,CAAC;AAG/C,QAAA,yBAAyB,GAAG,CAAC,SAAS,EAAE,IAAI,CAAU,CAAC;AAGvD,QAAA,uBAAuB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAGrH,QAAA,yBAAyB,GAAG,CAAC,MAAM,CAAU,CAAC;AAG9C,QAAA,0BAA0B,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAG3E,QAAA,gCAAgC,GAAG;IAC9C,sBAAsB;IACtB,mCAAmC;IACnC,iBAAiB;IACjB,cAAc;IACd,oBAAoB;IACpB,kBAAkB;IAClB,iBAAiB;IACjB,cAAc;IACd,cAAc;CACN,CAAC;AAGE,QAAA,qCAAqC,GAAG,CAAC,WAAW,EAAE,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAU,CAAC;AAGlH,QAAA,0BAA0B,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAU,CAAC;AAG7F,QAAA,uBAAuB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAGxE,QAAA,wBAAwB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAGzE,QAAA,kBAAkB,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC"}

package/dist/aws/commitmentsPlanningValidation.d.ts

@@ -0,0 +1,7 @@
+import type { AwsCommitmentsPlanningView } from '../azure/commitmentsPlanning.js';
+/**
+ * Validates the security-sensitive AWS identity boundary of a commitments view.
+ * A full public-artifact validator should call this before publication or response.
+ */
+export declare function validateAwsCommitmentsPlanningViewIdentity(value: unknown, expectedAccountId?: string): asserts value is AwsCommitmentsPlanningView;
+//# sourceMappingURL=commitmentsPlanningValidation.d.ts.map

package/dist/aws/commitmentsPlanningValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commitmentsPlanningValidation.d.ts","sourceRoot":"","sources":["../../src/aws/commitmentsPlanningValidation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAqBlF;;;GAGG;AACH,wBAAgB,0CAA0C,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,0BAA0B,CAelJ"}

package/dist/aws/commitmentsPlanningValidation.js

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateAwsCommitmentsPlanningViewIdentity = validateAwsCommitmentsPlanningViewIdentity;
+const provider_js_1 = require("../common/provider.js");
+const pluginPublicArtifactValidationHelpers_js_1 = require("./pluginPublicArtifactValidationHelpers.js");
+const FORBIDDEN_AWS_COMMITMENTS_KEYS = new Set([
+    'billingScopeId',
+    'cloudAccountId',
+    'companyId',
+    'credentialHealth',
+    'credentialId',
+    'managementGroupId',
+    'pricingQuote',
+    'quotePolicy',
+    'resourceGroupId',
+    'storageCapacity',
+    'subscription',
+    'subscriptionId',
+    'tenantId',
+    'unlockFinancialLedger',
+]);
+/**
+ * Validates the security-sensitive AWS identity boundary of a commitments view.
+ * A full public-artifact validator should call this before publication or response.
+ */
+function validateAwsCommitmentsPlanningViewIdentity(value, expectedAccountId) {
+    const view = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(value, 'commitmentsPlanning');
+    const providerScope = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(view.providerScope, 'commitmentsPlanning.providerScope');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertExactKeys)(providerScope, ['providerName', 'providerScopeId'], 'commitmentsPlanning.providerScope');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(providerScope.providerName, provider_js_1.ProviderName.Aws, 'commitmentsPlanning.providerScope.providerName');
+    const accountId = String(providerScope.providerScopeId ?? '');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertAccount)(providerScope.providerScopeId, accountId, 'commitmentsPlanning.providerScope.providerScopeId');
+    if (expectedAccountId !== undefined) {
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertAccount)(expectedAccountId, accountId, 'expectedAccountId');
+    }
+    validateInventory(view.inventory, accountId);
+    validatePurchaseRecommendations(view.purchaseRecommendations, accountId);
+    validateBoundIdentities(view, accountId, 'commitmentsPlanning');
+}
+function validateInventory(value, accountId) {
+    if (!Array.isArray(value))
+        throw new Error('commitmentsPlanning.inventory must be an array.');
+    value.forEach((item, index) => {
+        const field = `commitmentsPlanning.inventory[${index}]`;
+        const record = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(item, field);
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(record.sourceKind, 'aws-native', `${field}.sourceKind`);
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(record.provider, provider_js_1.ProviderName.Aws, `${field}.provider`);
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(record.appliedScopeType, 'linked-account', `${field}.appliedScopeType`);
+        validateAppliedScope(record.appliedScopeProperties, accountId, `${field}.appliedScopeProperties`);
+        validateAwsShape(record.shape, `${field}.shape`);
+    });
+}
+function validatePurchaseRecommendations(value, accountId) {
+    if (value === undefined)
+        return;
+    if (!Array.isArray(value))
+        throw new Error('commitmentsPlanning.purchaseRecommendations must be an array.');
+    value.forEach((item, index) => {
+        const field = `commitmentsPlanning.purchaseRecommendations[${index}]`;
+        const record = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(item, field);
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(record.purchaseScope, 'linked-account', `${field}.purchaseScope`);
+        validateAppliedScope(record.appliedScopeProperties, accountId, `${field}.appliedScopeProperties`);
+        validateAwsSource(record.source, `${field}.source`);
+        validateAwsShape(record.currentShape, `${field}.currentShape`);
+        validateAwsShape(record.targetShape, `${field}.targetShape`, true);
+        if (record.eligibility !== undefined) {
+            const eligibility = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(record.eligibility, `${field}.eligibility`);
+            validateAwsShape(eligibility.currentShape, `${field}.eligibility.currentShape`);
+            validateAwsShape(eligibility.targetShape, `${field}.eligibility.targetShape`);
+            if (eligibility.source !== undefined)
+                validateAwsSource(eligibility.source, `${field}.eligibility.source`);
+        }
+    });
+}
+function validateAppliedScope(value, accountId, field) {
+    const scope = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(value, field);
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertExactKeys)(scope, ['accountId', 'region', 'availabilityZone'], field);
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertAccount)(scope.accountId, accountId, `${field}.accountId`);
+}
+function validateAwsSource(value, field) {
+    const source = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(value, field);
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(source.sourceKind, 'aws-native', `${field}.sourceKind`);
+}
+function validateAwsShape(value, field, required = false) {
+    if (value === undefined && !required)
+        return;
+    const shape = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(value, field);
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(shape.provider, 'aws', `${field}.provider`);
+}
+function validateBoundIdentities(value, accountId, field) {
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => validateBoundIdentities(item, accountId, `${field}[${index}]`));
+        return;
+    }
+    if (!value || typeof value !== 'object') {
+        if (typeof value === 'string')
+            validateArnAccount(value, accountId, field);
+        return;
+    }
+    for (const [key, child] of Object.entries(value)) {
+        if (FORBIDDEN_AWS_COMMITMENTS_KEYS.has(key)) {
+            throw new Error(`${field}.${key} is not allowed in an AWS commitments artifact.`);
+        }
+        if (key === 'accountId')
+            (0, pluginPublicArtifactValidationHelpers_js_1.assertAccount)(child, accountId, `${field}.${key}`);
+        if (key === 'providerName')
+            (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(child, provider_js_1.ProviderName.Aws, `${field}.${key}`);
+        if (key === 'provider')
+            (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(child, 'aws', `${field}.${key}`);
+        if (key === 'sourceKind' && child === 'azure-native') {
+            throw new Error(`${field}.${key} cannot contain Azure-native evidence.`);
+        }
+        validateBoundIdentities(child, accountId, `${field}.${key}`);
+    }
+}
+function validateArnAccount(value, accountId, field) {
+    if (!value.startsWith('arn:'))
+        return;
+    const arnAccountId = value.split(':', 6)[4];
+    if (arnAccountId)
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertAccount)(arnAccountId, accountId, field);
+}
+//# sourceMappingURL=commitmentsPlanningValidation.js.map

package/dist/aws/commitmentsPlanningValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commitmentsPlanningValidation.js","sourceRoot":"","sources":["../../src/aws/commitmentsPlanningValidation.ts"],"names":[],"mappings":";;AAyBA,gGAeC;AAvCD,uDAAqD;AACrD,yGAAmH;AAEnH,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC;IAC7C,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,kBAAkB;IAClB,cAAc;IACd,mBAAmB;IACnB,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,gBAAgB;IAChB,UAAU;IACV,uBAAuB;CACxB,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAgB,0CAA0C,CAAC,KAAc,EAAE,iBAA0B;IACnG,MAAM,IAAI,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,IAAA,mDAAQ,EAAC,IAAI,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;IACxF,IAAA,0DAAe,EAAC,aAAa,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC,EAAE,mCAAmC,CAAC,CAAC;IACzG,IAAA,sDAAW,EAAC,aAAa,CAAC,YAAY,EAAE,0BAAY,CAAC,GAAG,EAAE,gDAAgD,CAAC,CAAC;IAE5G,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IAC9D,IAAA,wDAAa,EAAC,aAAa,CAAC,eAAe,EAAE,SAAS,EAAE,mDAAmD,CAAC,CAAC;IAC7G,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,IAAA,wDAAa,EAAC,iBAAiB,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACnE,CAAC;IAED,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7C,+BAA+B,CAAC,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;IACzE,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,SAAiB;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC9F,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,iCAAiC,KAAK,GAAG,CAAC;QACxD,MAAM,MAAM,GAAG,IAAA,mDAAQ,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrC,IAAA,sDAAW,EAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;QACpE,IAAA,sDAAW,EAAC,MAAM,CAAC,QAAQ,EAAE,0BAAY,CAAC,GAAG,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;QACpE,IAAA,sDAAW,EAAC,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;QACpF,oBAAoB,CAAC,MAAM,CAAC,sBAAsB,EAAE,SAAS,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;QAClG,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc,EAAE,SAAiB;IACxE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC5G,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,+CAA+C,KAAK,GAAG,CAAC;QACtE,MAAM,MAAM,GAAG,IAAA,mDAAQ,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrC,IAAA,sDAAW,EAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;QAC9E,oBAAoB,CAAC,MAAM,CAAC,sBAAsB,EAAE,SAAS,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;QAClG,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;QACpD,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC;QAC/D,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,EAAE,IAAI,CAAC,CAAC;QAEnE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,IAAA,mDAAQ,EAAC,MAAM,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;YACzE,gBAAgB,CAAC,WAAW,CAAC,YAAY,EAAE,GAAG,KAAK,2BAA2B,CAAC,CAAC;YAChF,gBAAgB,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,KAAK,0BAA0B,CAAC,CAAC;YAC9E,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS;gBAAE,iBAAiB,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,KAAK,qBAAqB,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,SAAiB,EAAE,KAAa;IAC5E,MAAM,KAAK,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,IAAA,0DAAe,EAAC,KAAK,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,kBAAkB,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3E,IAAA,wDAAa,EAAC,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,MAAM,MAAM,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtC,IAAA,sDAAW,EAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa,EAAE,QAAQ,GAAG,KAAK;IACvE,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO;IAC7C,MAAM,KAAK,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,IAAA,sDAAW,EAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,SAAiB,EAAE,KAAa;IAC/E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAC/F,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,8BAA8B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,iDAAiD,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,GAAG,KAAK,WAAW;YAAE,IAAA,wDAAa,EAAC,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QAC5E,IAAI,GAAG,KAAK,cAAc;YAAE,IAAA,sDAAW,EAAC,KAAK,EAAE,0BAAY,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QACpF,IAAI,GAAG,KAAK,UAAU;YAAE,IAAA,sDAAW,EAAC,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QACrE,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,wCAAwC,CAAC,CAAC;QAC3E,CAAC;QACD,uBAAuB,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,SAAiB,EAAE,KAAa;IACzE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO;IACtC,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,YAAY;QAAE,IAAA,wDAAa,EAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC"}

package/dist/aws/estates.d.ts

@@ -0,0 +1,153 @@
+import { type AwsForbiddenCredentialFields } from './requests';
+/** Schema version for the API-owned AWS company estate manifest. */
+export declare const AWS_ESTATES_MANIFEST_SCHEMA_VERSION: 1;
+/** Public provider discriminator used by the AWS estate manifest API. */
+export declare const AWS_ESTATES_MANIFEST_PROVIDER: "AWS";
+export declare const AWS_ESTATE_KINDS: readonly ["standalone", "organization"];
+export declare const AWS_ESTATE_ACCOUNT_SOURCES: readonly ["manual"];
+export declare const AWS_ESTATE_ROLE_DEPLOYMENT_MODES: readonly ["customer-managed"];
+export declare const AWS_ESTATE_ACCOUNT_PURPOSES: readonly ["resource-discovery", "organization-discovery", "billing-definition", "billing-storage"];
+/**
+ * Credential-shaped fields that manifest API boundaries must reject
+ * recursively before persisting untyped JSON.
+ */
+export declare const AWS_ESTATES_MANIFEST_FORBIDDEN_CREDENTIAL_FIELDS: readonly ["accessKeyId", "secretAccessKey", "sessionToken", "credentials", "resolvedCredentials", "secret", "encryptedSecret", "credentialReference", "externalId", "accessToken", "connectionString", "sasToken", "storageCredential"];
+export type AwsEstatesManifestSchemaVersion = typeof AWS_ESTATES_MANIFEST_SCHEMA_VERSION;
+export type AwsEstatesManifestProvider = typeof AWS_ESTATES_MANIFEST_PROVIDER;
+export type AwsEstateKind = (typeof AWS_ESTATE_KINDS)[number];
+export type AwsEstateAccountSource = (typeof AWS_ESTATE_ACCOUNT_SOURCES)[number];
+export type AwsEstateRoleDeploymentMode = (typeof AWS_ESTATE_ROLE_DEPLOYMENT_MODES)[number];
+export type AwsEstateAccountPurpose = (typeof AWS_ESTATE_ACCOUNT_PURPOSES)[number];
+export type AwsEstatesManifestForbiddenCredentialField = (typeof AWS_ESTATES_MANIFEST_FORBIDDEN_CREDENTIAL_FIELDS)[number];
+/**
+ * Makes setup secrets and storage credentials unrepresentable in persisted
+ * estate-manifest DTOs.
+ */
+export type AwsEstatesManifestForbiddenCredentialFields = AwsForbiddenCredentialFields & {
+    externalId?: never;
+    accessToken?: never;
+    connectionString?: never;
+    sasToken?: never;
+    storageCredential?: never;
+};
+/** Commercial-partition AssumeRole ARN bound to one exact AWS account. */
+export type AwsEstateRoleArn<TAccountId extends string = string> = `arn:aws:iam::${TAccountId}:role/${string}`;
+/**
+ * One AWS account intentionally included in an estate. Repeated company and
+ * estate identities make accidentally cross-scoped objects detectable.
+ */
+export interface AwsEstateAccountMembership<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: 1;
+    companyId: TCompanyId;
+    estateId: TEstateId;
+    accountId: TAccountId;
+    name: string;
+    roleArn: AwsEstateRoleArn<TAccountId>;
+    purposes: AwsEstateAccountPurpose[];
+    enabled: boolean;
+    /** Existing Spotto cloud-account identity once this membership is connected. */
+    cloudAccountId?: string;
+}
+/** One intentionally excluded account in a manually maintained organization estate. */
+export interface AwsEstateExcludedAccount<TCompanyId extends string = string, TEstateId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: 1;
+    companyId: TCompanyId;
+    estateId: TEstateId;
+    accountId: string;
+    name?: string;
+    reason?: string;
+}
+export interface AwsEstateWideBillingCoverage extends AwsEstatesManifestForbiddenCredentialFields {
+    type: 'estate';
+    accountIds?: never;
+}
+export interface AwsEstateAccountBillingCoverage<TAccountId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    type: 'accounts';
+    accountIds: TAccountId[];
+}
+export type AwsEstateBillingCoverage<TAccountId extends string = string> = AwsEstateWideBillingCoverage | AwsEstateAccountBillingCoverage<TAccountId>;
+export interface AwsEstateBillingDestination extends AwsEstatesManifestForbiddenCredentialFields {
+    bucketName: string;
+    /** Customer-configured S3 base prefix before AWS-appended export path segments. */
+    basePrefix: string;
+    region: string;
+    /** Optional when bucket ownership was not supplied or discovered during setup. */
+    bucketOwnerAccountId?: string;
+    kmsKeyArn?: string;
+}
+export interface AwsEstateCurBillingExport extends AwsEstatesManifestForbiddenCredentialFields {
+    type: 'CUR';
+    reportName: string;
+    destination: AwsEstateBillingDestination;
+    exportArn?: never;
+}
+export interface AwsEstateDataExportsBillingExport<TDefinitionAccountId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    type: 'DATA_EXPORTS';
+    /** ARN returned by BCM Data Exports; its account is the definition role account. */
+    exportArn: `arn:aws:bcm-data-exports:${string}:${TDefinitionAccountId}:export/${string}`;
+    /** Exact BCM Data Exports Export.Name used to scope the delivered S3 root. */
+    exportName: string;
+    destination: AwsEstateBillingDestination;
+    reportName?: never;
+}
+export type AwsEstateBillingExport<TDefinitionAccountId extends string = string> = AwsEstateCurBillingExport | AwsEstateDataExportsBillingExport<TDefinitionAccountId>;
+/**
+ * One billing export used by an estate. Definition, payer, storage, and access
+ * identities are explicit because large AWS estates can split these roles
+ * across different accounts.
+ */
+export interface AwsEstateBillingSource<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string, TDefinitionRoleAccountId extends TAccountId = TAccountId, TStorageRoleAccountId extends TAccountId = TAccountId> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: 1;
+    companyId: TCompanyId;
+    estateId: TEstateId;
+    billingSourceId: string;
+    name: string;
+    /** Account whose role can read/validate the CUR or Data Exports definition. */
+    definitionRoleAccountId: TDefinitionRoleAccountId;
+    payerAccountId: TAccountId;
+    /** Account whose role can list/read the S3 export destination. */
+    storageRoleAccountId: TStorageRoleAccountId;
+    export: AwsEstateBillingExport<TDefinitionRoleAccountId>;
+    coverage: AwsEstateBillingCoverage<TAccountId>;
+    enabled: boolean;
+}
+/** Organization identity and how its desired account membership is maintained. */
+export interface AwsEstateOrganization<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: 1;
+    companyId: TCompanyId;
+    estateId: TEstateId;
+    organizationId: string;
+    managementAccountId: TAccountId;
+    accountSource: AwsEstateAccountSource;
+    roleDeploymentMode: AwsEstateRoleDeploymentMode;
+    excludedAccounts: AwsEstateExcludedAccount<TCompanyId, TEstateId>[];
+}
+interface AwsEstateBase<TCompanyId extends string, TEstateId extends string, TAccountId extends string> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: 1;
+    companyId: TCompanyId;
+    estateId: TEstateId;
+    name: string;
+    enabled: boolean;
+    accounts: AwsEstateAccountMembership<TCompanyId, TEstateId, TAccountId>[];
+    billingSources: AwsEstateBillingSource<TCompanyId, TEstateId, TAccountId>[];
+}
+export interface AwsStandaloneEstate<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string> extends AwsEstateBase<TCompanyId, TEstateId, TAccountId> {
+    kind: 'standalone';
+    organization?: never;
+}
+export interface AwsOrganizationEstate<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string> extends AwsEstateBase<TCompanyId, TEstateId, TAccountId> {
+    kind: 'organization';
+    organization: AwsEstateOrganization<TCompanyId, TEstateId, TAccountId>;
+}
+export type AwsEstate<TCompanyId extends string = string, TEstateId extends string = string, TAccountId extends string = string> = AwsStandaloneEstate<TCompanyId, TEstateId, TAccountId> | AwsOrganizationEstate<TCompanyId, TEstateId, TAccountId>;
+/** Complete API-owned desired state stored at companies/{companyId}/aws/aws-estates.json. */
+export interface AwsEstatesManifest<TCompanyId extends string = string> extends AwsEstatesManifestForbiddenCredentialFields {
+    schemaVersion: AwsEstatesManifestSchemaVersion;
+    provider: AwsEstatesManifestProvider;
+    companyId: TCompanyId;
+    /** ISO-8601 timestamp assigned by the API after validating the complete document. */
+    updatedAt: string;
+    estates: AwsEstate<TCompanyId>[];
+}
+export {};
+//# sourceMappingURL=estates.d.ts.map

package/dist/aws/estates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"estates.d.ts","sourceRoot":"","sources":["../../src/aws/estates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAEhG,oEAAoE;AACpE,eAAO,MAAM,mCAAmC,EAAG,CAAU,CAAC;AAE9D,yEAAyE;AACzE,eAAO,MAAM,6BAA6B,EAAG,KAAc,CAAC;AAE5D,eAAO,MAAM,gBAAgB,yCAA0C,CAAC;AACxE,eAAO,MAAM,0BAA0B,qBAAsB,CAAC;AAC9D,eAAO,MAAM,gCAAgC,+BAAgC,CAAC;AAC9E,eAAO,MAAM,2BAA2B,oGAAqG,CAAC;AAE9I;;;GAGG;AACH,eAAO,MAAM,gDAAgD,yOAOnD,CAAC;AAEX,MAAM,MAAM,+BAA+B,GAAG,OAAO,mCAAmC,CAAC;AACzF,MAAM,MAAM,0BAA0B,GAAG,OAAO,6BAA6B,CAAC;AAC9E,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AACjF,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5F,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AACnF,MAAM,MAAM,0CAA0C,GAAG,CAAC,OAAO,gDAAgD,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3H;;;GAGG;AACH,MAAM,MAAM,2CAA2C,GAAG,4BAA4B,GAAG;IACvF,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,iBAAiB,CAAC,EAAE,KAAK,CAAC;CAC3B,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,gBAAgB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,IAAI,gBAAgB,UAAU,SAAS,MAAM,EAAE,CAAC;AAE/G;;;GAGG;AACH,MAAM,WAAW,0BAA0B,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,UAAU,SAAS,MAAM,GAAG,MAAM,CACnJ,SAAQ,2CAA2C;IACnD,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,EAAE,UAAU,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACtC,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,uFAAuF;AACvF,MAAM,WAAW,wBAAwB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,CAC7G,SAAQ,2CAA2C;IACnD,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,4BAA6B,SAAQ,2CAA2C;IAC/F,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB;AAED,MAAM,WAAW,+BAA+B,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,2CAA2C;IACtI,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,UAAU,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,wBAAwB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,IAAI,4BAA4B,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC;AAEtJ,MAAM,WAAW,2BAA4B,SAAQ,2CAA2C;IAC9F,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAA0B,SAAQ,2CAA2C;IAC5F,IAAI,EAAE,KAAK,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,2BAA2B,CAAC;IACzC,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED,MAAM,WAAW,iCAAiC,CAAC,oBAAoB,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,2CAA2C;IAClJ,IAAI,EAAE,cAAc,CAAC;IACrB,oFAAoF;IACpF,SAAS,EAAE,4BAA4B,MAAM,IAAI,oBAAoB,WAAW,MAAM,EAAE,CAAC;IACzF,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,2BAA2B,CAAC;IACzC,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB;AAED,MAAM,MAAM,sBAAsB,CAAC,oBAAoB,SAAS,MAAM,GAAG,MAAM,IAC3E,yBAAyB,GACzB,iCAAiC,CAAC,oBAAoB,CAAC,CAAC;AAE5D;;;;GAIG;AACH,MAAM,WAAW,sBAAsB,CACrC,UAAU,SAAS,MAAM,GAAG,MAAM,EAClC,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,UAAU,SAAS,MAAM,GAAG,MAAM,EAClC,wBAAwB,SAAS,UAAU,GAAG,UAAU,EACxD,qBAAqB,SAAS,UAAU,GAAG,UAAU,CACrD,SAAQ,2CAA2C;IACnD,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,SAAS,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,uBAAuB,EAAE,wBAAwB,CAAC;IAClD,cAAc,EAAE,UAAU,CAAC;IAC3B,kEAAkE;IAClE,oBAAoB,EAAE,qBAAqB,CAAC;IAC5C,MAAM,EAAE,sBAAsB,CAAC,wBAAwB,CAAC,CAAC;IACzD,QAAQ,EAAE,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,kFAAkF;AAClF,MAAM,WAAW,qBAAqB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,UAAU,SAAS,MAAM,GAAG,MAAM,CAC9I,SAAQ,2CAA2C;IACnD,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,SAAS,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,UAAU,CAAC;IAChC,aAAa,EAAE,sBAAsB,CAAC;IACtC,kBAAkB,EAAE,2BAA2B,CAAC;IAChD,gBAAgB,EAAE,wBAAwB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;CACrE;AAED,UAAU,aAAa,CAAC,UAAU,SAAS,MAAM,EAAE,SAAS,SAAS,MAAM,EAAE,UAAU,SAAS,MAAM,CACpG,SAAQ,2CAA2C;IACnD,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,SAAS,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,0BAA0B,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;IAC1E,cAAc,EAAE,sBAAsB,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;CAC7E;AAED,MAAM,WAAW,mBAAmB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,UAAU,SAAS,MAAM,GAAG,MAAM,CAC5I,SAAQ,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;IACxD,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,CAAC,EAAE,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,UAAU,SAAS,MAAM,GAAG,MAAM,CAC9I,SAAQ,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;IACxD,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,qBAAqB,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;CACxE;AAED,MAAM,MAAM,SAAS,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,UAAU,SAAS,MAAM,GAAG,MAAM,IAC3H,mBAAmB,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,GACtD,qBAAqB,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAE7D,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,2CAA2C;IACzH,aAAa,EAAE,+BAA+B,CAAC;IAC/C,QAAQ,EAAE,0BAA0B,CAAC;IACrC,SAAS,EAAE,UAAU,CAAC;IACtB,qFAAqF;IACrF,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;CAClC"}

package/dist/aws/estates.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWS_ESTATES_MANIFEST_FORBIDDEN_CREDENTIAL_FIELDS = exports.AWS_ESTATE_ACCOUNT_PURPOSES = exports.AWS_ESTATE_ROLE_DEPLOYMENT_MODES = exports.AWS_ESTATE_ACCOUNT_SOURCES = exports.AWS_ESTATE_KINDS = exports.AWS_ESTATES_MANIFEST_PROVIDER = exports.AWS_ESTATES_MANIFEST_SCHEMA_VERSION = void 0;
+const requests_1 = require("./requests");
+/** Schema version for the API-owned AWS company estate manifest. */
+exports.AWS_ESTATES_MANIFEST_SCHEMA_VERSION = 1;
+/** Public provider discriminator used by the AWS estate manifest API. */
+exports.AWS_ESTATES_MANIFEST_PROVIDER = 'AWS';
+exports.AWS_ESTATE_KINDS = ['standalone', 'organization'];
+exports.AWS_ESTATE_ACCOUNT_SOURCES = ['manual'];
+exports.AWS_ESTATE_ROLE_DEPLOYMENT_MODES = ['customer-managed'];
+exports.AWS_ESTATE_ACCOUNT_PURPOSES = ['resource-discovery', 'organization-discovery', 'billing-definition', 'billing-storage'];
+/**
+ * Credential-shaped fields that manifest API boundaries must reject
+ * recursively before persisting untyped JSON.
+ */
+exports.AWS_ESTATES_MANIFEST_FORBIDDEN_CREDENTIAL_FIELDS = [
+    ...requests_1.AWS_FORBIDDEN_CREDENTIAL_FIELDS,
+    'externalId',
+    'accessToken',
+    'connectionString',
+    'sasToken',
+    'storageCredential',
+];
+//# sourceMappingURL=estates.js.map

package/dist/aws/estates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"estates.js","sourceRoot":"","sources":["../../src/aws/estates.ts"],"names":[],"mappings":";;;AAAA,yCAAgG;AAEhG,oEAAoE;AACvD,QAAA,mCAAmC,GAAG,CAAU,CAAC;AAE9D,yEAAyE;AAC5D,QAAA,6BAA6B,GAAG,KAAc,CAAC;AAE/C,QAAA,gBAAgB,GAAG,CAAC,YAAY,EAAE,cAAc,CAAU,CAAC;AAC3D,QAAA,0BAA0B,GAAG,CAAC,QAAQ,CAAU,CAAC;AACjD,QAAA,gCAAgC,GAAG,CAAC,kBAAkB,CAAU,CAAC;AACjE,QAAA,2BAA2B,GAAG,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,iBAAiB,CAAU,CAAC;AAE9I;;;GAGG;AACU,QAAA,gDAAgD,GAAG;IAC9D,GAAG,0CAA+B;IAClC,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,UAAU;IACV,mBAAmB;CACX,CAAC"}

package/dist/aws/index.d.ts

@@ -0,0 +1,18 @@
+export * from './estates';
+export * from './commitmentsPlanningValidation';
+export * from './onboarding';
+export * from './pluginPublicArtifacts';
+export * from './pluginPublicArtifactEvidence';
+export * from './pluginPublicArtifactValidation';
+export * from './portalPublicArtifacts';
+export * from './portalRelationshipPublicArtifacts';
+export * from './portalRelationshipResourceNodeTypes';
+export * from './portalRelationshipPublicArtifactValidation';
+export type { PublicRelationshipArtifact, PublicRelationshipProviderScope } from '../common/relationships';
+export * from './portalPublicArtifactHistoryTypes';
+export * from './portalPublicArtifactNestedEvidence';
+export * from './portalPublicArtifactNestedEvidenceValidation';
+export * from './portalPublicArtifactValidation';
+export * from './publicArtifacts';
+export * from './requests';
+//# sourceMappingURL=index.d.ts.map

package/dist/aws/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/aws/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,iCAAiC,CAAC;AAChD,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,qCAAqC,CAAC;AACpD,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,YAAY,EAAE,0BAA0B,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAC3G,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,kCAAkC,CAAC;AACjD,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC"}

package/dist/aws/index.js

@@ -0,0 +1,33 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./estates"), exports);
+__exportStar(require("./commitmentsPlanningValidation"), exports);
+__exportStar(require("./onboarding"), exports);
+__exportStar(require("./pluginPublicArtifacts"), exports);
+__exportStar(require("./pluginPublicArtifactEvidence"), exports);
+__exportStar(require("./pluginPublicArtifactValidation"), exports);
+__exportStar(require("./portalPublicArtifacts"), exports);
+__exportStar(require("./portalRelationshipPublicArtifacts"), exports);
+__exportStar(require("./portalRelationshipResourceNodeTypes"), exports);
+__exportStar(require("./portalRelationshipPublicArtifactValidation"), exports);
+__exportStar(require("./portalPublicArtifactHistoryTypes"), exports);
+__exportStar(require("./portalPublicArtifactNestedEvidence"), exports);
+__exportStar(require("./portalPublicArtifactNestedEvidenceValidation"), exports);
+__exportStar(require("./portalPublicArtifactValidation"), exports);
+__exportStar(require("./publicArtifacts"), exports);
+__exportStar(require("./requests"), exports);
+//# sourceMappingURL=index.js.map

package/dist/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/aws/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,kEAAgD;AAChD,+CAA6B;AAC7B,0DAAwC;AACxC,iEAA+C;AAC/C,mEAAiD;AACjD,0DAAwC;AACxC,sEAAoD;AACpD,wEAAsD;AACtD,+EAA6D;AAE7D,qEAAmD;AACnD,uEAAqD;AACrD,iFAA+D;AAC/D,mEAAiD;AACjD,oDAAkC;AAClC,6CAA2B"}