@spottoai/types-package 1.0.2-beta.353 → 1.0.2-beta.356

package/dist/esm/aws/portalRelationshipResourceNodeValidation.js

@@ -0,0 +1,368 @@
+import { AWS_PORTAL_RELATIONSHIP_DISCOVERY_FAMILIES } from './portalRelationshipPublicArtifacts.js';
+import { validateResourceBillingEvidence } from './portalPublicArtifactNestedEvidenceValidation.js';
+import { asRecord, assertExactKeys, assertValue, finiteNumber, requiredBoolean, requiredEnum, requiredString, stringArray, } from './portalPublicArtifactValidationCommon.js';
+import { assertAccount, assertRequiredKeys } from './pluginPublicArtifactValidationHelpers.js';
+const RESOURCE_COMMON_KEYS = ['provider', 'accountId', 'family', 'resourceRegion', 'stableKey', 'resourceType', 'tags', 'billing'];
+const RESOURCE_KEYS = {
+    'ec2-instance': ['instanceId', 'instanceArn', 'name', 'state', 'instanceType', 'availabilityZone', 'subnetId', 'vpcId'],
+    'ebs-volume': ['volumeId', 'volumeArn', 'state', 'availabilityZone', 'volumeType', 'sizeGiB', 'encrypted', 'snapshotId', 'attachments'],
+    vpc: [
+        'vpcId',
+        'vpcArn',
+        'state',
+        'cidrBlock',
+        'dhcpOptionsId',
+        'instanceTenancy',
+        'isDefault',
+        'ownerId',
+        'cidrBlockAssociations',
+        'ipv6CidrBlockAssociations',
+    ],
+    subnet: [
+        'subnetArn',
+        'subnetId',
+        'vpcId',
+        'availabilityZone',
+        'availabilityZoneId',
+        'state',
+        'cidrBlock',
+        'availableIpAddressCount',
+        'defaultForAz',
+        'mapPublicIpOnLaunch',
+        'assignIpv6AddressOnCreation',
+        'ipv6Native',
+        'ownerId',
+        'customerOwnedIpv4Pool',
+        'mapCustomerOwnedIpOnLaunch',
+        'outpostArn',
+        'enableDns64',
+        'enableLniAtDeviceIndex',
+        'privateDnsHostnameType',
+        'privateDnsEnableResourceNameDnsARecord',
+        'privateDnsEnableResourceNameDnsAAAARecord',
+        'ipv6CidrBlockAssociations',
+    ],
+    'route-table': ['routeTableArn', 'routeTableId', 'vpcId', 'ownerId', 'hasMainAssociation', 'associations'],
+    'internet-gateway': ['internetGatewayArn', 'internetGatewayId', 'ownerId', 'attachments', 'attachedVpcIds'],
+    'virtual-private-gateway': [
+        'virtualPrivateGatewayArn',
+        'virtualPrivateGatewayId',
+        'amazonSideAsn',
+        'availabilityZone',
+        'state',
+        'type',
+        'attachments',
+        'attachedVpcIds',
+    ],
+    'network-interface': [
+        'networkInterfaceId',
+        'ownerId',
+        'subnetId',
+        'vpcId',
+        'availabilityZone',
+        'status',
+        'interfaceType',
+        'requesterManaged',
+        'requesterId',
+        'privateIpAddress',
+        'attachmentInstanceId',
+    ],
+    'nat-gateway': [
+        'natGatewayId',
+        'natGatewayArn',
+        'subnetId',
+        'vpcId',
+        'availabilityZone',
+        'state',
+        'connectivityType',
+        'failureCode',
+        'failureMessage',
+        'createTime',
+        'deleteTime',
+        'addresses',
+    ],
+    'security-group': ['groupId', 'securityGroupArn', 'groupName', 'description', 'vpcId', 'ownerId'],
+    'rds-db-cluster': [
+        'dbClusterResourceId',
+        'dbClusterIdentifier',
+        'dbClusterArn',
+        'engine',
+        'engineVersion',
+        'engineMode',
+        'status',
+        'serverlessV2MinCapacityAcu',
+        'serverlessV2MaxCapacityAcu',
+        'serverlessV2SecondsUntilAutoPause',
+        'serverlessV2PlatformVersion',
+        'globalClusterIdentifier',
+        'clusterScalabilityType',
+        'limitlessDatabaseStatus',
+        'endpointAddress',
+        'readerEndpointAddress',
+        'hostedZoneId',
+        'endpointPort',
+        'availabilityZones',
+        'storageEncrypted',
+        'kmsKeyId',
+        'deletionProtection',
+        'copyTagsToSnapshot',
+        'dbProxyNames',
+        'dbClusterMemberIdentifiers',
+        'dbClusterMembers',
+    ],
+    'rds-db-instance': [
+        'dbInstanceIdentifier',
+        'dbiResourceId',
+        'dbInstanceArn',
+        'engine',
+        'engineVersion',
+        'dbInstanceClass',
+        'status',
+        'availabilityZone',
+        'vpcId',
+        'dbSubnetGroupName',
+        'dbClusterIdentifier',
+    ],
+    'load-balancer-v2': ['loadBalancerArn', 'loadBalancerName', 'loadBalancerType', 'scheme', 'state', 'vpcId', 'subnetIds', 'availabilityZoneNames'],
+    'classic-load-balancer': ['loadBalancerName', 'scheme', 'vpcId', 'subnetIds', 'availabilityZoneNames', 'securityGroupIds', 'instanceIds'],
+    'elasticache-cache-cluster': [
+        'cacheClusterId',
+        'cacheClusterArn',
+        'engine',
+        'engineVersion',
+        'status',
+        'cacheNodeType',
+        'preferredAvailabilityZone',
+        'cacheSubnetGroupName',
+        'replicationGroupId',
+        'replicationGroupGlobalReplicationGroupId',
+        'kmsKeyId',
+    ],
+    'elasticache-serverless-cache': ['serverlessCacheName', 'serverlessCacheArn', 'engine', 'majorEngineVersion', 'status', 'subnetIds', 'kmsKeyId'],
+    'efs-file-system': ['fileSystemId', 'fileSystemArn', 'name', 'state', 'availabilityZoneName', 'encrypted', 'kmsKeyId'],
+};
+const REQUIRED_RESOURCE_KEYS = {
+    'ec2-instance': ['instanceId', 'instanceArn'],
+    'ebs-volume': ['volumeId', 'volumeArn', 'attachments'],
+    vpc: ['vpcId', 'vpcArn', 'cidrBlockAssociations', 'ipv6CidrBlockAssociations'],
+    subnet: ['subnetArn', 'subnetId', 'ipv6CidrBlockAssociations'],
+    'route-table': ['routeTableArn', 'routeTableId', 'hasMainAssociation', 'associations'],
+    'internet-gateway': ['internetGatewayArn', 'internetGatewayId', 'attachments', 'attachedVpcIds'],
+    'virtual-private-gateway': ['virtualPrivateGatewayArn', 'virtualPrivateGatewayId', 'attachments', 'attachedVpcIds'],
+    'network-interface': ['networkInterfaceId'],
+    'nat-gateway': ['natGatewayId', 'natGatewayArn', 'addresses'],
+    'security-group': ['groupId', 'groupName'],
+    'rds-db-cluster': [
+        'dbClusterResourceId',
+        'dbClusterIdentifier',
+        'dbClusterArn',
+        'availabilityZones',
+        'dbProxyNames',
+        'dbClusterMemberIdentifiers',
+        'dbClusterMembers',
+    ],
+    'rds-db-instance': ['dbInstanceIdentifier', 'dbiResourceId', 'dbInstanceArn'],
+    'load-balancer-v2': ['loadBalancerArn', 'loadBalancerName', 'subnetIds', 'availabilityZoneNames'],
+    'classic-load-balancer': ['loadBalancerName', 'subnetIds', 'availabilityZoneNames', 'securityGroupIds', 'instanceIds'],
+    'elasticache-cache-cluster': ['cacheClusterId', 'cacheClusterArn'],
+    'elasticache-serverless-cache': ['serverlessCacheName', 'serverlessCacheArn', 'subnetIds'],
+    'efs-file-system': ['fileSystemId', 'fileSystemArn'],
+};
+const STRING_FIELDS = new Set([
+    'stableKey',
+    'resourceType',
+    ...Object.values(RESOURCE_KEYS)
+        .flat()
+        .filter(field => ![
+        'attachments',
+        'addresses',
+        'associations',
+        'attachedVpcIds',
+        'availabilityZoneNames',
+        'availabilityZones',
+        'cidrBlockAssociations',
+        'dbClusterMemberIdentifiers',
+        'dbClusterMembers',
+        'dbProxyNames',
+        'instanceIds',
+        'ipv6CidrBlockAssociations',
+        'securityGroupIds',
+        'subnetIds',
+        'availableIpAddressCount',
+        'amazonSideAsn',
+        'enableLniAtDeviceIndex',
+        'endpointPort',
+        'serverlessV2MaxCapacityAcu',
+        'serverlessV2MinCapacityAcu',
+        'serverlessV2SecondsUntilAutoPause',
+        'sizeGiB',
+        'assignIpv6AddressOnCreation',
+        'copyTagsToSnapshot',
+        'defaultForAz',
+        'deletionProtection',
+        'enableDns64',
+        'encrypted',
+        'hasMainAssociation',
+        'ipv6Native',
+        'isDefault',
+        'mapCustomerOwnedIpOnLaunch',
+        'mapPublicIpOnLaunch',
+        'privateDnsEnableResourceNameDnsARecord',
+        'privateDnsEnableResourceNameDnsAAAARecord',
+        'requesterManaged',
+        'storageEncrypted',
+    ].includes(field)),
+]);
+const NUMBER_FIELDS = new Set([
+    'amazonSideAsn',
+    'availableIpAddressCount',
+    'enableLniAtDeviceIndex',
+    'endpointPort',
+    'serverlessV2MaxCapacityAcu',
+    'serverlessV2MinCapacityAcu',
+    'serverlessV2SecondsUntilAutoPause',
+    'sizeGiB',
+]);
+const BOOLEAN_FIELDS = new Set([
+    'assignIpv6AddressOnCreation',
+    'copyTagsToSnapshot',
+    'defaultForAz',
+    'deletionProtection',
+    'enableDns64',
+    'encrypted',
+    'hasMainAssociation',
+    'ipv6Native',
+    'isDefault',
+    'mapCustomerOwnedIpOnLaunch',
+    'mapPublicIpOnLaunch',
+    'privateDnsEnableResourceNameDnsARecord',
+    'privateDnsEnableResourceNameDnsAAAARecord',
+    'requesterManaged',
+    'storageEncrypted',
+]);
+const STRING_ARRAY_FIELDS = new Set([
+    'attachedVpcIds',
+    'availabilityZoneNames',
+    'availabilityZones',
+    'dbClusterMemberIdentifiers',
+    'dbProxyNames',
+    'instanceIds',
+    'securityGroupIds',
+    'subnetIds',
+]);
+export function validateAwsPortalRelationshipResourceNode(data, accountId, regions, field) {
+    assertValue(data.provider, 'aws', `${field}.provider`);
+    assertAccount(data.accountId, accountId, `${field}.accountId`);
+    const resourceRegion = requiredString(data.resourceRegion, `${field}.resourceRegion`);
+    if (!regions.has(resourceRegion))
+        throw new Error(`${field}.resourceRegion is outside artifact scope.`);
+    const family = requiredEnum(data.family, AWS_PORTAL_RELATIONSHIP_DISCOVERY_FAMILIES, `${field}.family`);
+    assertExactKeys(data, [...RESOURCE_COMMON_KEYS, ...RESOURCE_KEYS[family]], field);
+    assertRequiredKeys(data, ['provider', 'accountId', 'family', 'resourceRegion', 'stableKey', 'resourceType', ...REQUIRED_RESOURCE_KEYS[family]], field);
+    for (const key of Object.keys(data)) {
+        if (STRING_FIELDS.has(key) && data[key] !== undefined)
+            requiredString(data[key], `${field}.${key}`);
+        if (NUMBER_FIELDS.has(key) && data[key] !== undefined)
+            finiteNumber(data[key], `${field}.${key}`);
+        if (BOOLEAN_FIELDS.has(key) && data[key] !== undefined)
+            requiredBoolean(data[key], `${field}.${key}`);
+        if (STRING_ARRAY_FIELDS.has(key) && data[key] !== undefined)
+            stringArray(data[key], `${field}.${key}`);
+    }
+    if (data.tags !== undefined)
+        validateTags(data.tags, `${field}.tags`);
+    if (data.billing !== undefined)
+        validateResourceBillingEvidence(data.billing, `${field}.billing`);
+    validateNativeScopeIdentity(data, accountId, resourceRegion, field);
+    validateNestedResourceArrays(data, family, field);
+}
+function validateNativeScopeIdentity(data, accountId, resourceRegion, field) {
+    if (data.ownerId !== undefined)
+        assertAccount(data.ownerId, accountId, `${field}.ownerId`);
+    Object.entries(data).forEach(([key, value]) => {
+        if (typeof value !== 'string')
+            return;
+        if (key.endsWith('Arn') || key === 'stableKey' || key === 'kmsKeyId') {
+            if (value.startsWith('arn:'))
+                validateScopedArn(value, accountId, resourceRegion, `${field}.${key}`);
+        }
+        if (['availabilityZone', 'availabilityZoneName', 'preferredAvailabilityZone'].includes(key))
+            validateAvailabilityZone(value, resourceRegion, `${field}.${key}`);
+    });
+    for (const key of ['availabilityZones', 'availabilityZoneNames']) {
+        if (!Array.isArray(data[key]))
+            continue;
+        data[key].forEach((value, index) => {
+            if (typeof value === 'string')
+                validateAvailabilityZone(value, resourceRegion, `${field}.${key}[${index}]`);
+        });
+    }
+}
+function validateScopedArn(value, accountId, resourceRegion, field) {
+    const match = /^arn:(aws(?:-[a-z0-9-]+)?):[^:]+:([^:]*):([^:]*):.+$/.exec(value);
+    if (!match)
+        throw new Error(`${field} must be a canonical AWS ARN.`);
+    const [, , arnRegion, arnAccountId] = match;
+    if (arnRegion !== resourceRegion)
+        throw new Error(`${field} ARN Region must match its resource node.`);
+    if (arnAccountId !== accountId)
+        throw new Error(`${field} ARN account must match its resource node.`);
+}
+function validateAvailabilityZone(value, resourceRegion, field) {
+    if (resourceRegion === 'global' || value === resourceRegion || !value.startsWith(resourceRegion))
+        throw new Error(`${field} must belong to its resource Region.`);
+}
+function validateTags(value, field) {
+    const tags = asRecord(value, field);
+    Object.entries(tags).forEach(([key, tagValue]) => {
+        requiredString(key, `${field} key`);
+        requiredString(tagValue, `${field}.${key}`);
+    });
+}
+function validateNestedResourceArrays(data, family, field) {
+    if (family === 'vpc') {
+        validateObjectArray(data.cidrBlockAssociations, ['associationId', 'cidrBlock', 'state'], ['cidrBlock'], `${field}.cidrBlockAssociations`);
+        validateObjectArray(data.ipv6CidrBlockAssociations, ['associationId', 'ipv6CidrBlock', 'state'], ['ipv6CidrBlock'], `${field}.ipv6CidrBlockAssociations`);
+    }
+    else if (family === 'subnet') {
+        validateObjectArray(data.ipv6CidrBlockAssociations, ['associationId', 'ipv6CidrBlock', 'state'], ['ipv6CidrBlock'], `${field}.ipv6CidrBlockAssociations`);
+    }
+    else if (family === 'route-table') {
+        validateObjectArray(data.associations, ['associationId', 'subnetId', 'gatewayId', 'main', 'associationState', 'associationStateMessage'], [], `${field}.associations`);
+    }
+    else if (family === 'internet-gateway' || family === 'virtual-private-gateway') {
+        validateObjectArray(data.attachments, ['vpcId', 'state'], [], `${field}.attachments`);
+    }
+    else if (family === 'ebs-volume') {
+        validateObjectArray(data.attachments, ['instanceId', 'device', 'state', 'attachTime', 'deleteOnTermination'], [], `${field}.attachments`);
+    }
+    else if (family === 'nat-gateway') {
+        validateObjectArray(data.addresses, ['allocationId', 'associationId', 'isPrimary', 'networkInterfaceId', 'privateIp', 'publicIp', 'status'], [], `${field}.addresses`);
+    }
+    else if (family === 'rds-db-cluster') {
+        validateObjectArray(data.dbClusterMembers, ['dbInstanceIdentifier', 'isClusterWriter', 'promotionTier'], ['dbInstanceIdentifier'], `${field}.dbClusterMembers`);
+    }
+}
+function validateObjectArray(value, keys, required, field) {
+    asArray(value, field).forEach((entry, index) => {
+        const itemField = `${field}[${index}]`;
+        const item = asRecord(entry, itemField);
+        assertExactKeys(item, keys, itemField);
+        assertRequiredKeys(item, required, itemField);
+        Object.entries(item).forEach(([key, itemValue]) => {
+            if (itemValue === undefined)
+                return;
+            if (['main', 'deleteOnTermination', 'isPrimary', 'isClusterWriter'].includes(key))
+                requiredBoolean(itemValue, `${itemField}.${key}`);
+            else if (key === 'promotionTier')
+                finiteNumber(itemValue, `${itemField}.${key}`);
+            else
+                requiredString(itemValue, `${itemField}.${key}`);
+        });
+    });
+}
+function asArray(value, field) {
+    if (!Array.isArray(value))
+        throw new Error(`${field} must be an array.`);
+    return value;
+}

package/dist/esm/aws/publicArtifacts.js

@@ -0,0 +1,13 @@
+export const AWS_PUBLIC_ARTIFACT_SCHEMA_VERSION = 1;
+export const AWS_PUBLIC_ARTIFACT_TYPES = [
+    'resource-collection',
+    'resource-collection-history',
+    'account-summary',
+    'account-summary-history',
+    'account-summary-ai-cost-summary',
+    'commitments-planning',
+    'relationships',
+    'lifecycle',
+    'plugin-subscription',
+    'plugin-resource',
+];

package/dist/esm/aws/relationships.js

@@ -0,0 +1 @@
+export { validateAwsPortalRelationshipArtifact } from './portalRelationshipPublicArtifactValidation.js';

package/dist/esm/aws/requests.js

@@ -0,0 +1,19 @@
+/** Schema version for AWS estate orchestration commands. */
+export const AWS_COMMAND_SCHEMA_VERSION = 1;
+/** Canonical provider wire value for AWS commands. */
+export const AWS_COMMAND_PROVIDER = 'aws';
+/** Entities handled by AWS estate orchestration. */
+export const AWS_COMMAND_ENTITIES = ['estate', 'account', 'billing-source'];
+/** Actions supported across AWS estate orchestration commands. */
+export const AWS_COMMAND_ACTIONS = ['reconcile', 'refresh', 'delete'];
+/** Credential-shaped keys forbidden from shared AWS configuration and commands. */
+export const AWS_FORBIDDEN_CREDENTIAL_FIELDS = [
+    'accessKeyId',
+    'secretAccessKey',
+    'sessionToken',
+    'credentials',
+    'resolvedCredentials',
+    'secret',
+    'encryptedSecret',
+    'credentialReference',
+];

package/dist/esm/azure/activityLogs.js

@@ -0,0 +1,2 @@
+export const PORTAL_ACTIVITY_LOG_SCHEMA_VERSION = '2026-05-02.change-monitoring-v1';
+export const PORTAL_ACTIVITY_LOG_FILE = 'activity-logs.json';

package/dist/esm/azure/advisorScore.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/benefits.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/billingGeneration.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/billingPlots.js

@@ -0,0 +1,4 @@
+/**
+ * Billing cost analysis types for Azure cost visualization.
+ */
+export {};

package/dist/esm/azure/budgets.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/commitmentsPlanning.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/common.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/configs.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/costComposition.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/dataProtection.js

@@ -0,0 +1,5 @@
+export const DATA_PROTECTION_SCHEMA_VERSION = '2026-06-24';
+export const DATA_PROTECTION_SOURCE = 'Spotto.DataProtectionPosture';
+export const DATA_PROTECTION_PORTAL_FILE = 'data-protection.json.gz';
+export const DATA_PROTECTION_BACKUP_COST_DIAGNOSTICS_FILE = 'data-protection/backup-costs.json.gz';
+export const DATA_PROTECTION_BILLING_SOURCE_FILE = 'history/billing/cost-last-30-days.json';

package/dist/esm/azure/governance.js

@@ -0,0 +1,14 @@
+export const GOVERNANCE_REPORT_SCHEMA_VERSION = '2026-05-01.slim-v1';
+export const GOVERNANCE_GRAPH_SCHEMA_VERSION = '2026-05-02.graph-v1';
+export const GOVERNANCE_ACCESS_SCHEMA_VERSION = '2026-05-14.identity-access-v2';
+export const TENANT_GOVERNANCE_REPORT_SCHEMA_VERSION = '2026-05-02.tenant-slim-v1';
+export const TENANT_GOVERNANCE_GRAPH_SCHEMA_VERSION = '2026-05-02.tenant-graph-v1';
+export const GLOBAL_ADMIN_RAW_SCHEMA_VERSION = '2026-06-24.global-admin-raw-v1';
+export const PRIVILEGED_ROLE_SUMMARY_SCHEMA_VERSION = '2026-06-24.privileged-role-summary-v1';
+export const TENANT_GOVERNANCE_ACCESS_SCHEMA_VERSION = '2026-06-24.tenant-governance-access-v1';
+export const GOVERNANCE_REPORT_PORTAL_FILE = 'governance.json.gz';
+export const GOVERNANCE_GRAPH_PORTAL_FILE = 'governance-graph.json.gz';
+export const GOVERNANCE_ACCESS_PORTAL_FILE = 'governance-access.json.gz';
+export const TENANT_GOVERNANCE_REPORT_PORTAL_FILE = 'governance.json.gz';
+export const TENANT_GOVERNANCE_GRAPH_PORTAL_FILE = 'governance-graph.json.gz';
+export const TENANT_GOVERNANCE_ACCESS_PORTAL_FILE = 'governance-access.json.gz';

package/dist/esm/azure/licensing.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/metrics.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/payloads.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/portalArtifacts.js

@@ -0,0 +1 @@
+export const AZURE_PORTAL_ARTIFACT_SCHEMA_VERSION = 1;

package/dist/esm/azure/prices.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/publicIpAddresses.js

@@ -0,0 +1,2 @@
+export const PUBLIC_IP_ADDRESSES_SCHEMA_VERSION = '2026-05-02.public-ip-addresses-v1';
+export const PUBLIC_IP_ADDRESSES_PORTAL_FILE = 'public-ip-addresses.json';

package/dist/esm/azure/recommendationAudit.js

@@ -0,0 +1,16 @@
+export const RecommendationAuditRowKinds = {
+    resourceTarget: 'resource-view:target',
+    subscriptionTarget: 'scope-view:target',
+    resourceProviderScopeFeed: 'resource-view:providerScope-feed',
+    subscriptionProviderScopeFeed: 'scope-view:providerScope-feed',
+};
+export const RecommendationWorkflowAuditEventTypes = {
+    assigned: 'WorkflowAssigned',
+    laneChanged: 'WorkflowLaneChanged',
+    blocked: 'WorkflowBlocked',
+    unblocked: 'WorkflowUnblocked',
+    returnedToSuggestions: 'ReturnedToSuggestions',
+    repaired: 'WorkflowRepaired',
+    sourceChanged: 'WorkflowSourceChanged',
+};
+export const RECOMMENDATION_WORKFLOW_AUDIT_DETAILS_SCHEMA_VERSION = 1;

package/dist/esm/azure/recommendationState.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/recommendationTracks.js

@@ -0,0 +1,40 @@
+export const SystemTrackIds = {
+    resourceHygiene: 'resource-hygiene',
+    capacityRightsizing: 'capacity-rightsizing',
+    securityPosture: 'security-posture',
+    patchingLifecycle: 'patching-lifecycle',
+    commitmentsLicensing: 'commitments-licensing',
+    backupRecovery: 'backup-recovery',
+    perimeterExposure: 'perimeter-exposure',
+    identityPrivilege: 'identity-privilege',
+    governanceOwnership: 'governance-ownership',
+    spendExceptions: 'spend-exceptions',
+};
+export const RecommendationFocusModes = {
+    all: 'all',
+    finops: 'finops',
+    securityGovernance: 'securityGovernance',
+    operationalHealth: 'operationalHealth',
+    optimizationDelivery: 'optimizationDelivery',
+    serviceDelivery: 'serviceDelivery',
+};
+export const RecommendationTrackFacets = {
+    orphaned: 'orphaned',
+    unattached: 'unattached',
+    idle: 'idle',
+    underutilized: 'underutilized',
+    unprotected: 'unprotected',
+    staleBackup: 'stale-backup',
+    expiring: 'expiring',
+    unpatched: 'unpatched',
+    unsupported: 'unsupported',
+    publicIngress: 'public-ingress',
+    overprivileged: 'overprivileged',
+    missingOwnership: 'missing-ownership',
+    missingTags: 'missing-tags',
+    costAnomaly: 'cost-anomaly',
+};
+export const SystemTrackCardGranularities = {
+    recommendation: 'recommendation',
+    resource: 'resource',
+};

package/dist/esm/azure/recommendationWorkflow.js

@@ -0,0 +1,13 @@
+export const RecommendationWorkflowLanes = {
+    prioritized: 'prioritized',
+    todo: 'todo',
+    inProgress: 'in-progress',
+    blocked: 'blocked',
+    completed: 'completed',
+};
+export const RecommendationWorkflowSelectionModes = {
+    allAffected: 'all-affected',
+    selectedSubset: 'selected-subset',
+    subscriptionWide: 'subscription-wide',
+};
+export const RECOMMENDATION_WORKFLOW_REPAIR_PAGE_LIMIT = 250;

package/dist/esm/azure/recommendations.js

@@ -0,0 +1,10 @@
+export var RecommendationCategory;
+(function (RecommendationCategory) {
+    RecommendationCategory["Cost"] = "Cost";
+    RecommendationCategory["Performance"] = "Performance";
+    RecommendationCategory["Reliability"] = "Reliability";
+    RecommendationCategory["Security"] = "Security";
+    RecommendationCategory["Compliance"] = "Compliance";
+    RecommendationCategory["OperationalExcellence"] = "OperationalExcellence";
+    RecommendationCategory["OperationalExcellenceAlternative"] = "Operational Excellence";
+})(RecommendationCategory || (RecommendationCategory = {}));

package/dist/esm/azure/regulatoryCompliance.js

@@ -0,0 +1,6 @@
+export const REGULATORY_COMPLIANCE_REPORT_SCHEMA_VERSION = '2026-07-29.regulatory-compliance-v1';
+export const REGULATORY_COMPLIANCE_ASSIGNMENT_DETAIL_SCHEMA_VERSION = '2026-07-29.regulatory-compliance-assignment-v1';
+export const POLICY_EXEMPTION_COMMAND_SCHEMA_VERSION = '2026-07-29.policy-exemption-command-v1';
+export const REGULATORY_COMPLIANCE_PORTAL_FILE = 'regulatory-compliance.json.gz';
+export const REGULATORY_COMPLIANCE_ASSIGNMENT_DETAIL_DIRECTORY = 'regulatory-compliance/assignments';
+export const REGULATORY_COMPLIANCE_NOTE_TARGET_TYPES = ['assignment', 'control', 'policy'];

package/dist/esm/azure/relationships.js

@@ -0,0 +1,2 @@
+export const RELATIONSHIP_GRAPH_MANIFEST_SCHEMA_VERSION = 1;
+export const RELATIONSHIP_GRAPH_INDEX_SCHEMA_VERSION = 1;

package/dist/esm/azure/reportingTemplates.js

@@ -0,0 +1 @@
+export const REPORTING_TEMPLATE_REPORT_TYPES = ['sdm', 'sow', 'review-checklist', 'architecture-assessment'];

package/dist/esm/azure/reports.js

@@ -0,0 +1,12 @@
+/** Specific reason types for cost changes */
+export var ChangeReasonType;
+(function (ChangeReasonType) {
+    ChangeReasonType["NEW_RESOURCE"] = "new_resource";
+    ChangeReasonType["REMOVED_RESOURCE"] = "removed_resource";
+    ChangeReasonType["QUANTITY_INCREASE"] = "quantity_increase";
+    ChangeReasonType["QUANTITY_DECREASE"] = "quantity_decrease";
+    ChangeReasonType["RATE_CHANGE"] = "rate_change";
+    ChangeReasonType["SKU_CHANGE"] = "sku_change";
+    ChangeReasonType["NEW_METER"] = "new_meter";
+    ChangeReasonType["REMOVED_METER"] = "removed_meter";
+})(ChangeReasonType || (ChangeReasonType = {}));

package/dist/esm/azure/resourceHealth.js

@@ -0,0 +1,12 @@
+export const RESOURCE_HEALTH_EVENTS_FILE_NAME = 'microsoft.resourcehealth-events.json';
+export const RESOURCE_HEALTH_EVENTS_IMPACTED_RESOURCES_FILE_NAME = 'microsoft.resourcehealth-events-impactedresources.json';
+export const RESOURCE_HEALTH_AVAILABILITY_STATUSES_FILE_NAME = 'microsoft.resourcehealth-availabilitystatuses.json';
+export const RESOURCE_HEALTH_EVENTS_PORTAL_FILE_NAME = 'health-events.json';
+export const RESOURCE_HEALTH_AVAILABILITY_STATUSES_PORTAL_FILE_NAME = 'health-availability-statuses.json';
+export const RESOURCE_HEALTH_INDEX_FILE_NAME = 'history/resource-health/index.json';
+export const AZURE_RESOURCE_HEALTH_EVENTS_SOURCE = 'Microsoft.ResourceHealth/events';
+export const AZURE_RESOURCE_HEALTH_IMPACTED_RESOURCES_SOURCE = 'Microsoft.ResourceHealth/events/impactedResources';
+export const AZURE_RESOURCE_HEALTH_AVAILABILITY_STATUSES_SOURCE = 'Microsoft.ResourceHealth/availabilityStatuses';
+export const RESOURCE_HEALTH_EVENTS_SOURCE = AZURE_RESOURCE_HEALTH_EVENTS_SOURCE;
+export const RESOURCE_HEALTH_EVENTS_IMPACTED_RESOURCES_SOURCE = AZURE_RESOURCE_HEALTH_IMPACTED_RESOURCES_SOURCE;
+export const RESOURCE_HEALTH_AVAILABILITY_STATUSES_SOURCE = AZURE_RESOURCE_HEALTH_AVAILABILITY_STATUSES_SOURCE;

package/dist/esm/azure/resourceOptimization.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/resources.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/reviewChecklist.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/secureScore.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/security.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/serviceRetirement.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/serviceRetirementState.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/serviceRetirementWorkManagement.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/storage-inventory.js

@@ -0,0 +1 @@
+export {};