@spottoai/types-package 1.0.2-beta.39 → 1.0.2-beta.391

package/dist/environment/validation.js

@@ -0,0 +1,394 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isEnvironmentSafeLabelV1 = exports.isEnvironmentArtifactKindV1 = exports.isEnvironmentCompiledGenerationPointerV1 = exports.isEnvironmentDocumentDescriptorSetV1 = exports.isEnvironmentDocumentDescriptorV1 = exports.isEnvironmentSubscriptionProjectionV1 = exports.isEnvironmentCoverageStateV1 = exports.isEnvironmentMoneyValueV1 = exports.isEnvironmentRunIdV1 = exports.isEnvironmentSourceBindingV1 = exports.isEnvironmentSourceGenerationV1 = exports.isEnvironmentScopeV1 = exports.isEnvironmentPillarV1 = exports.isEnvironmentPortalRouteV1 = void 0;
+const contracts_js_1 = require("./contracts.js");
+const internal_js_1 = require("./internal.js");
+const references_js_1 = require("./references.js");
+const DOCUMENT_NAMES = new Set(contracts_js_1.ENVIRONMENT_DOCUMENT_NAMES_V1);
+const ARTIFACT_KINDS = new Set(contracts_js_1.ENVIRONMENT_ARTIFACT_KINDS_V1);
+const PILLARS = new Set(contracts_js_1.ENVIRONMENT_PILLARS_V1);
+const FINDING_KINDS = new Set(contracts_js_1.ENVIRONMENT_FINDING_KINDS_V1);
+const SEVERITIES = new Set(contracts_js_1.ENVIRONMENT_SEVERITIES_V1);
+const IMPACTS = new Set(contracts_js_1.ENVIRONMENT_IMPACTS_V1);
+const EFFORTS = new Set(contracts_js_1.ENVIRONMENT_EFFORTS_V1);
+const MONEY_BASES = new Set(['billed', 'amortized']);
+const MONEY_PROVENANCE = new Set([
+    'subscription-summary',
+    'subscription-resources',
+    'cost-savings-summary',
+    'savings-aggregate',
+    'recommendation',
+]);
+const SAVINGS_ADDITIVITY = new Set(['additive', 'scenario-non-additive']);
+const CHANGE_DIRECTIONS = new Set(['increase', 'decrease', 'unchanged', 'unknown']);
+const scopesEqual = (left, right) => left.kind === right.kind && left.tenantId === right.tenantId && left.companyId === right.companyId && left.subscriptionId === right.subscriptionId;
+/** Validates a bounded, local Portal route suitable for client-visible evidence. */
+const isEnvironmentPortalRouteV1 = (value) => (0, internal_js_1.isBoundedString)(value, contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.customerStringScalars, { trimmed: true, controls: true }) &&
+    value.startsWith('/') &&
+    !value.startsWith('//') &&
+    !value.includes('\\') &&
+    !value.includes('://') &&
+    !value.includes('?') &&
+    !value.includes('#') &&
+    !value.includes('%') &&
+    value.split('/').every(segment => segment !== '.' && segment !== '..');
+exports.isEnvironmentPortalRouteV1 = isEnvironmentPortalRouteV1;
+const isGeneralKey = (value) => (0, internal_js_1.isBoundedString)(value, contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.safeLabelScalars, { trimmed: true, controls: true });
+const isReferenceArray = (value) => Array.isArray(value) &&
+    value.length <= contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.boundedListItems &&
+    value.every(references_js_1.isEnvironmentLogicalEvidenceReferenceV1) &&
+    new Set(value).size === value.length;
+const isResourceReferenceArray = (value) => Array.isArray(value) &&
+    value.length <= contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.boundedListItems &&
+    value.every(references_js_1.isEnvironmentLogicalResourceReferenceV1) &&
+    new Set(value).size === value.length;
+const isPercentage = (value) => typeof value === 'string' && internal_js_1.DECIMAL_PATTERN.test(value) && Number(value) <= 100;
+/** Validates one admitted environment pillar. */
+const isEnvironmentPillarV1 = (value) => typeof value === 'string' && PILLARS.has(value);
+exports.isEnvironmentPillarV1 = isEnvironmentPillarV1;
+/** Validates the closed phase-one Azure subscription scope. */
+const isEnvironmentScopeV1 = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['kind', 'tenantId', 'companyId', 'subscriptionId']) &&
+    value.kind === 'azure-subscription' &&
+    (0, internal_js_1.isScopeIdentifier)(value.tenantId) &&
+    (0, internal_js_1.isScopeIdentifier)(value.companyId) &&
+    (0, internal_js_1.isScopeIdentifier)(value.subscriptionId);
+exports.isEnvironmentScopeV1 = isEnvironmentScopeV1;
+/** Validates the client-safe identity of one authoritative source generation. */
+const isEnvironmentSourceGenerationV1 = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, [
+        'viewSetSchemaVersion',
+        'publicationId',
+        'portalRunId',
+        'pluginRunId',
+        'economicsGenerationId',
+        'economicsFingerprint',
+        'completedAt',
+    ]) &&
+    value.viewSetSchemaVersion === 1 &&
+    (0, internal_js_1.isSourceIdentity)(value.publicationId) &&
+    (0, internal_js_1.isSourceIdentity)(value.portalRunId) &&
+    (0, internal_js_1.isSourceIdentity)(value.pluginRunId) &&
+    (0, internal_js_1.isSourceIdentity)(value.economicsGenerationId) &&
+    (0, internal_js_1.isSourceIdentity)(value.economicsFingerprint) &&
+    (0, internal_js_1.isCanonicalUtcTimestamp)(value.completedAt);
+exports.isEnvironmentSourceGenerationV1 = isEnvironmentSourceGenerationV1;
+/** Validates a byte-preserving binding to an authoritative CompletedAzureViewSetV1. */
+const isEnvironmentSourceBindingV1 = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, [
+        'kind',
+        'viewSetSchemaVersion',
+        'scope',
+        'publicationId',
+        'portalRunId',
+        'pluginRunId',
+        'economicsGenerationId',
+        'economicsFingerprint',
+        'completedAt',
+    ]) &&
+    value.kind === 'azure-subscription-view-set' &&
+    value.viewSetSchemaVersion === 1 &&
+    (0, exports.isEnvironmentScopeV1)(value.scope) &&
+    (0, exports.isEnvironmentSourceGenerationV1)({
+        viewSetSchemaVersion: value.viewSetSchemaVersion,
+        publicationId: value.publicationId,
+        portalRunId: value.portalRunId,
+        pluginRunId: value.pluginRunId,
+        economicsGenerationId: value.economicsGenerationId,
+        economicsFingerprint: value.economicsFingerprint,
+        completedAt: value.completedAt,
+    });
+exports.isEnvironmentSourceBindingV1 = isEnvironmentSourceBindingV1;
+/** Validates a storage-safe environment run identity independently from source identities. */
+const isEnvironmentRunIdV1 = (value) => typeof value === 'string' &&
+    value.length > 0 &&
+    value.length <= contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.environmentRunIdAsciiCharacters &&
+    value !== '.' &&
+    value !== '..' &&
+    internal_js_1.ENVIRONMENT_RUN_ID_PATTERN.test(value);
+exports.isEnvironmentRunIdV1 = isEnvironmentRunIdV1;
+/** Validates canonical decimal money with explicit currency, basis, period, and provenance. */
+const isEnvironmentMoneyValueV1 = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['amount', 'currencyCode', 'basis', 'period', 'provenance'], ['savingsAdditivity']) &&
+    typeof value.amount === 'string' &&
+    internal_js_1.DECIMAL_PATTERN.test(value.amount) &&
+    typeof value.currencyCode === 'string' &&
+    internal_js_1.CURRENCY_PATTERN.test(value.currencyCode) &&
+    typeof value.basis === 'string' &&
+    MONEY_BASES.has(value.basis) &&
+    (0, internal_js_1.isBoundedString)(value.period, contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.safeLabelScalars, { trimmed: true, controls: true }) &&
+    typeof value.provenance === 'string' &&
+    MONEY_PROVENANCE.has(value.provenance) &&
+    (value.savingsAdditivity === undefined || (typeof value.savingsAdditivity === 'string' && SAVINGS_ADDITIVITY.has(value.savingsAdditivity)));
+exports.isEnvironmentMoneyValueV1 = isEnvironmentMoneyValueV1;
+const isObservedMoney = (value) => (0, exports.isEnvironmentMoneyValueV1)(value) && value.savingsAdditivity === undefined;
+const isSavingsMoney = (value) => (0, exports.isEnvironmentMoneyValueV1)(value) && value.savingsAdditivity !== undefined;
+/** Validates the closed coverage-state union and state-specific freshness rules. */
+const isEnvironmentCoverageStateV1 = (value) => {
+    if (!(0, internal_js_1.isRecord)(value) || typeof value.status !== 'string')
+        return false;
+    const hasValidFreshness = (value.observedAt === undefined || (0, internal_js_1.isCanonicalUtcTimestamp)(value.observedAt)) &&
+        (value.completeThrough === undefined || (0, internal_js_1.isCanonicalUtcTimestamp)(value.completeThrough)) &&
+        (value.observedAt === undefined ||
+            value.completeThrough === undefined ||
+            Date.parse(value.completeThrough) <= Date.parse(value.observedAt));
+    if (value.status === 'complete') {
+        return (0, internal_js_1.hasExactKeys)(value, ['status'], ['observedAt', 'completeThrough']) && hasValidFreshness;
+    }
+    if (value.status === 'partial') {
+        return ((0, internal_js_1.hasExactKeys)(value, ['status', 'reason'], ['observedAt', 'completeThrough']) &&
+            (0, internal_js_1.isCustomerString)(value.reason) &&
+            value.reason.length > 0 &&
+            hasValidFreshness);
+    }
+    if (value.status === 'stale') {
+        return ((0, internal_js_1.hasExactKeys)(value, ['status', 'reason', 'observedAt'], ['completeThrough']) &&
+            (0, internal_js_1.isCustomerString)(value.reason) &&
+            value.reason.length > 0 &&
+            hasValidFreshness);
+    }
+    if (value.status === 'unavailable' || value.status === 'not-collected') {
+        return (0, internal_js_1.hasExactKeys)(value, ['status', 'reason']) && (0, internal_js_1.isCustomerString)(value.reason) && value.reason.length > 0;
+    }
+    return false;
+};
+exports.isEnvironmentCoverageStateV1 = isEnvironmentCoverageStateV1;
+const isBoundedList = (value, itemValidator) => {
+    if (!(0, internal_js_1.isRecord)(value) || !(0, internal_js_1.hasExactKeys)(value, ['items', 'totalCount', 'includedCount', 'truncated'], ['continuationReference']))
+        return false;
+    if (!Array.isArray(value.items) || value.items.length > contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.boundedListItems || !value.items.every(itemValidator))
+        return false;
+    if (!(0, internal_js_1.isNonNegativeInteger)(value.totalCount) || !(0, internal_js_1.isNonNegativeInteger)(value.includedCount))
+        return false;
+    if (value.includedCount !== value.items.length || value.totalCount < value.includedCount || typeof value.truncated !== 'boolean')
+        return false;
+    if (value.truncated !== value.totalCount > value.includedCount)
+        return false;
+    if (value.continuationReference !== undefined && !(0, references_js_1.isEnvironmentLogicalEvidenceReferenceV1)(value.continuationReference))
+        return false;
+    return !value.truncated || value.continuationReference !== undefined;
+};
+const isCostRollup = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['key', 'safeLabel', 'resourceCount', 'sourceReferences'], ['observedCost', 'potentialSavings']) &&
+    isGeneralKey(value.key) &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel) &&
+    (0, internal_js_1.isNonNegativeInteger)(value.resourceCount) &&
+    (value.observedCost === undefined || isObservedMoney(value.observedCost)) &&
+    (value.potentialSavings === undefined || isSavingsMoney(value.potentialSavings)) &&
+    isReferenceArray(value.sourceReferences);
+const isCostDriver = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['key', 'safeLabel', 'sourceReferences'], ['description', 'observedCost', 'portalRoute', 'resourceReference']) &&
+    isGeneralKey(value.key) &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel) &&
+    (value.description === undefined || (0, internal_js_1.isCustomerString)(value.description)) &&
+    (value.observedCost === undefined || isObservedMoney(value.observedCost)) &&
+    (value.portalRoute === undefined || (0, exports.isEnvironmentPortalRouteV1)(value.portalRoute)) &&
+    (value.resourceReference === undefined || (0, references_js_1.isEnvironmentLogicalResourceReferenceV1)(value.resourceReference)) &&
+    isReferenceArray(value.sourceReferences);
+const isPillarScore = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['value', 'maximum', 'safeLabel']) &&
+    isPercentage(value.value) &&
+    value.maximum === '100' &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel);
+const isPillarSummary = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['pillar', 'coverage', 'findingCount', 'recommendationCount', 'affectedResourceCount', 'portalRoute', 'sourceReferences'], ['score']) &&
+    (0, exports.isEnvironmentPillarV1)(value.pillar) &&
+    (0, exports.isEnvironmentCoverageStateV1)(value.coverage) &&
+    (0, internal_js_1.isNonNegativeInteger)(value.findingCount) &&
+    (0, internal_js_1.isNonNegativeInteger)(value.recommendationCount) &&
+    (0, internal_js_1.isNonNegativeInteger)(value.affectedResourceCount) &&
+    (0, exports.isEnvironmentPortalRouteV1)(value.portalRoute) &&
+    (value.score === undefined || isPillarScore(value.score)) &&
+    isReferenceArray(value.sourceReferences);
+const isPillarSummaries = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, contracts_js_1.ENVIRONMENT_PILLARS_V1) &&
+    contracts_js_1.ENVIRONMENT_PILLARS_V1.every(pillar => isPillarSummary(value[pillar]) && value[pillar]?.pillar === pillar);
+const isFinding = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['findingId', 'pillar', 'kind', 'safeLabel', 'severity', 'resourceReferences', 'sourceReferences'], ['description', 'impact', 'effort', 'confidencePercentage', 'affectedResourceCount', 'portalRoute']) &&
+    (0, internal_js_1.isScopeIdentifier)(value.findingId) &&
+    (0, exports.isEnvironmentPillarV1)(value.pillar) &&
+    typeof value.kind === 'string' &&
+    FINDING_KINDS.has(value.kind) &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel) &&
+    typeof value.severity === 'string' &&
+    SEVERITIES.has(value.severity) &&
+    (value.description === undefined || (0, internal_js_1.isCustomerString)(value.description)) &&
+    (value.impact === undefined || (typeof value.impact === 'string' && IMPACTS.has(value.impact))) &&
+    (value.effort === undefined || (typeof value.effort === 'string' && EFFORTS.has(value.effort))) &&
+    (value.confidencePercentage === undefined || isPercentage(value.confidencePercentage)) &&
+    (value.affectedResourceCount === undefined || (0, internal_js_1.isNonNegativeInteger)(value.affectedResourceCount)) &&
+    (value.portalRoute === undefined || (0, exports.isEnvironmentPortalRouteV1)(value.portalRoute)) &&
+    isResourceReferenceArray(value.resourceReferences) &&
+    isReferenceArray(value.sourceReferences);
+const isRecommendation = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['recommendationId', 'pillar', 'safeLabel', 'portalRoute', 'resourceReferences', 'sourceReferences'], ['description', 'impact', 'effort', 'confidencePercentage', 'affectedResourceCount', 'potentialSavings']) &&
+    (0, internal_js_1.isScopeIdentifier)(value.recommendationId) &&
+    (0, exports.isEnvironmentPillarV1)(value.pillar) &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel) &&
+    (0, exports.isEnvironmentPortalRouteV1)(value.portalRoute) &&
+    (value.description === undefined || (0, internal_js_1.isCustomerString)(value.description)) &&
+    (value.impact === undefined || (typeof value.impact === 'string' && IMPACTS.has(value.impact))) &&
+    (value.effort === undefined || (typeof value.effort === 'string' && EFFORTS.has(value.effort))) &&
+    (value.confidencePercentage === undefined || isPercentage(value.confidencePercentage)) &&
+    (value.affectedResourceCount === undefined || (0, internal_js_1.isNonNegativeInteger)(value.affectedResourceCount)) &&
+    (value.potentialSavings === undefined || isSavingsMoney(value.potentialSavings)) &&
+    isResourceReferenceArray(value.resourceReferences) &&
+    isReferenceArray(value.sourceReferences);
+const isChange = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['key', 'pillars', 'safeLabel', 'description', 'direction', 'sourceReferences'], ['amount']) &&
+    isGeneralKey(value.key) &&
+    Array.isArray(value.pillars) &&
+    value.pillars.length > 0 &&
+    value.pillars.length <= contracts_js_1.ENVIRONMENT_PILLARS_V1.length &&
+    value.pillars.every(exports.isEnvironmentPillarV1) &&
+    new Set(value.pillars).size === value.pillars.length &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel) &&
+    (0, internal_js_1.isCustomerString)(value.description) &&
+    typeof value.direction === 'string' &&
+    CHANGE_DIRECTIONS.has(value.direction) &&
+    (value.amount === undefined || isObservedMoney(value.amount)) &&
+    isReferenceArray(value.sourceReferences);
+const isWarning = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['code', 'safeLabel', 'sourceReferences'], ['pillar', 'detail']) &&
+    isGeneralKey(value.code) &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel) &&
+    (value.pillar === undefined || (0, exports.isEnvironmentPillarV1)(value.pillar)) &&
+    (value.detail === undefined || (0, internal_js_1.isCustomerString)(value.detail)) &&
+    isReferenceArray(value.sourceReferences);
+const isSourceCoverage = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, [
+        'completedViewSet',
+        'subscriptionSummary',
+        'resources',
+        'recommendations',
+        'serviceRetirements',
+        'monitorAlerts',
+        'pluginMetrics',
+    ]) &&
+    Object.values(value).every(exports.isEnvironmentCoverageStateV1);
+const isEstateSummary = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['resourceCount', 'serviceFamilyCount', 'locationCount']) &&
+    (0, internal_js_1.isNonNegativeInteger)(value.resourceCount) &&
+    (0, internal_js_1.isNonNegativeInteger)(value.serviceFamilyCount) &&
+    (0, internal_js_1.isNonNegativeInteger)(value.locationCount);
+const isCostSummary = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, [], ['observedCost', 'potentialSavings', 'costRecommendationCount']) &&
+    (value.observedCost === undefined || isObservedMoney(value.observedCost)) &&
+    (value.potentialSavings === undefined || isSavingsMoney(value.potentialSavings)) &&
+    (value.costRecommendationCount === undefined || (0, internal_js_1.isNonNegativeInteger)(value.costRecommendationCount));
+/** Validates the strict, bounded multi-pillar subscription environment projection. */
+const isEnvironmentSubscriptionProjectionV1 = (value) => {
+    if (!(0, internal_js_1.hasSafeContainerShape)(value) || !(0, internal_js_1.isRecord)(value))
+        return false;
+    if (!(0, internal_js_1.hasExactKeys)(value, [
+        'schemaVersion',
+        'scope',
+        'sourceBinding',
+        'generatedAt',
+        'subscription',
+        'sourceCoverage',
+        'estateSummary',
+        'costSummary',
+        'serviceFamilyRollups',
+        'estateCostRollups',
+        'costDrivers',
+        'pillars',
+        'findings',
+        'recommendations',
+        'changes',
+        'warnings',
+        'sourceReferences',
+    ]) ||
+        value.schemaVersion !== 1 ||
+        !(0, exports.isEnvironmentScopeV1)(value.scope) ||
+        !(0, exports.isEnvironmentSourceBindingV1)(value.sourceBinding) ||
+        !scopesEqual(value.scope, value.sourceBinding.scope) ||
+        !(0, internal_js_1.isCanonicalUtcTimestamp)(value.generatedAt) ||
+        Date.parse(value.generatedAt) < Date.parse(value.sourceBinding.completedAt) ||
+        !(0, internal_js_1.isRecord)(value.subscription) ||
+        !(0, internal_js_1.hasExactKeys)(value.subscription, ['safeLabel', 'portalRoute']) ||
+        !(0, internal_js_1.isSafeLabel)(value.subscription.safeLabel) ||
+        !(0, exports.isEnvironmentPortalRouteV1)(value.subscription.portalRoute) ||
+        !isSourceCoverage(value.sourceCoverage) ||
+        !isEstateSummary(value.estateSummary) ||
+        !isCostSummary(value.costSummary) ||
+        !isBoundedList(value.serviceFamilyRollups, isCostRollup) ||
+        !isBoundedList(value.estateCostRollups, isCostRollup) ||
+        !isBoundedList(value.costDrivers, isCostDriver) ||
+        !isPillarSummaries(value.pillars) ||
+        !isBoundedList(value.findings, isFinding) ||
+        !isBoundedList(value.recommendations, isRecommendation) ||
+        !isBoundedList(value.changes, isChange) ||
+        !isBoundedList(value.warnings, isWarning) ||
+        !isReferenceArray(value.sourceReferences)) {
+        return false;
+    }
+    return (0, internal_js_1.utf8ByteLength)(JSON.stringify(value)) <= contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.projectionBytes;
+};
+exports.isEnvironmentSubscriptionProjectionV1 = isEnvironmentSubscriptionProjectionV1;
+const descriptorByteLimit = (name) => {
+    if (name === 'projection.json')
+        return contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.projectionBytes;
+    if (name === 'environment-index.md')
+        return contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.environmentIndexBytes;
+    return contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.pillarDocumentBytes;
+};
+/** Validates one descriptor from the exact V1 multi-pillar document allowlist. */
+const isEnvironmentDocumentDescriptorV1 = (value) => {
+    if (!(0, internal_js_1.isRecord)(value) || !(0, internal_js_1.hasExactKeys)(value, ['name', 'mediaType', 'byteCount', 'contentSha256', 'approximateTokenCount']))
+        return false;
+    if (typeof value.name !== 'string' || !DOCUMENT_NAMES.has(value.name))
+        return false;
+    const expectedMediaType = value.name === 'projection.json' ? 'application/json' : 'text/markdown; charset=utf-8';
+    return (value.mediaType === expectedMediaType &&
+        (0, internal_js_1.isNonNegativeInteger)(value.byteCount) &&
+        value.byteCount > 0 &&
+        value.byteCount <= descriptorByteLimit(value.name) &&
+        typeof value.contentSha256 === 'string' &&
+        internal_js_1.SHA256_PATTERN.test(value.contentSha256) &&
+        (0, internal_js_1.isNonNegativeInteger)(value.approximateTokenCount));
+};
+exports.isEnvironmentDocumentDescriptorV1 = isEnvironmentDocumentDescriptorV1;
+/** Validates that descriptors contain every allowlisted V1 document exactly once. */
+const isEnvironmentDocumentDescriptorSetV1 = (value) => Array.isArray(value) &&
+    value.length === contracts_js_1.ENVIRONMENT_DOCUMENT_NAMES_V1.length &&
+    value.every(exports.isEnvironmentDocumentDescriptorV1) &&
+    new Set(value.map(descriptor => descriptor.name)).size === contracts_js_1.ENVIRONMENT_DOCUMENT_NAMES_V1.length &&
+    contracts_js_1.ENVIRONMENT_DOCUMENT_NAMES_V1.every(name => value.some(descriptor => descriptor.name === name));
+exports.isEnvironmentDocumentDescriptorSetV1 = isEnvironmentDocumentDescriptorSetV1;
+/** Validates an atomically visible completed environment-generation pointer. */
+const isEnvironmentCompiledGenerationPointerV1 = (value) => {
+    if (!(0, internal_js_1.hasSafeContainerShape)(value) || !(0, internal_js_1.isRecord)(value))
+        return false;
+    if (!(0, internal_js_1.hasExactKeys)(value, ['schemaVersion', 'status', 'environmentRunId', 'scope', 'sourceBinding', 'treeDigestSha256', 'fileCount', 'generatedAt']) ||
+        value.schemaVersion !== 1 ||
+        value.status !== 'completed' ||
+        !(0, exports.isEnvironmentRunIdV1)(value.environmentRunId) ||
+        !(0, exports.isEnvironmentScopeV1)(value.scope) ||
+        !(0, exports.isEnvironmentSourceBindingV1)(value.sourceBinding) ||
+        !scopesEqual(value.scope, value.sourceBinding.scope) ||
+        typeof value.treeDigestSha256 !== 'string' ||
+        !internal_js_1.SHA256_PATTERN.test(value.treeDigestSha256) ||
+        value.fileCount !== contracts_js_1.ENVIRONMENT_DOCUMENT_NAMES_V1.length ||
+        !(0, internal_js_1.isCanonicalUtcTimestamp)(value.generatedAt) ||
+        Date.parse(value.generatedAt) < Date.parse(value.sourceBinding.completedAt)) {
+        return false;
+    }
+    const sourceIdentities = [
+        value.sourceBinding.publicationId,
+        value.sourceBinding.portalRunId,
+        value.sourceBinding.pluginRunId,
+        value.sourceBinding.economicsGenerationId,
+        value.sourceBinding.economicsFingerprint,
+    ];
+    return (!sourceIdentities.includes(value.environmentRunId) &&
+        (0, internal_js_1.utf8ByteLength)(JSON.stringify(value)) <= contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.completedPointerBytes);
+};
+exports.isEnvironmentCompiledGenerationPointerV1 = isEnvironmentCompiledGenerationPointerV1;
+/** Validates an artifact kind without widening the closed V1 union. */
+const isEnvironmentArtifactKindV1 = (value) => typeof value === 'string' && ARTIFACT_KINDS.has(value);
+exports.isEnvironmentArtifactKindV1 = isEnvironmentArtifactKindV1;
+/** Validates the V1 safe-label bound used by customer-visible evidence metadata. */
+const isEnvironmentSafeLabelV1 = (value) => (0, internal_js_1.isSafeLabel)(value);
+exports.isEnvironmentSafeLabelV1 = isEnvironmentSafeLabelV1;
+//# sourceMappingURL=validation.js.map

package/dist/environment/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/environment/validation.ts"],"names":[],"mappings":";;;AAAA,iDA2BwB;AACxB,+CAgBuB;AACvB,mDAAmH;AAEnH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,4CAA6B,CAAC,CAAC;AACtE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,4CAA6B,CAAC,CAAC;AACtE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,qCAAsB,CAAC,CAAC;AACxD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,2CAA4B,CAAC,CAAC;AACpE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,wCAAyB,CAAC,CAAC;AAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,qCAAsB,CAAC,CAAC;AACxD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,qCAAsB,CAAC,CAAC;AACxD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAC7D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,mBAAmB;IACnB,gBAAgB;CACjB,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAClF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAE5F,MAAM,WAAW,GAAG,CAAC,IAAwB,EAAE,KAAyB,EAAW,EAAE,CACnF,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC;AAErJ,oFAAoF;AAC7E,MAAM,0BAA0B,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC5E,IAAA,6BAAe,EAAC,KAAK,EAAE,6CAA8B,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/G,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACrB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;IACvB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IACrB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;IACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;IACpB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;IACpB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;IACpB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AAT5D,QAAA,0BAA0B,8BASkC;AAEzE,MAAM,YAAY,GAAG,CAAC,KAAc,EAAmB,EAAE,CACvD,IAAA,6BAAe,EAAC,KAAK,EAAE,6CAA8B,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAE7G,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAW,EAAE,CACnD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IACpB,KAAK,CAAC,MAAM,IAAI,6CAA8B,CAAC,gBAAgB;IAC/D,KAAK,CAAC,KAAK,CAAC,uDAAuC,CAAC;IACpD,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;AAEvC,MAAM,wBAAwB,GAAG,CAAC,KAAc,EAAW,EAAE,CAC3D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IACpB,KAAK,CAAC,MAAM,IAAI,6CAA8B,CAAC,gBAAgB;IAC/D,KAAK,CAAC,KAAK,CAAC,uDAAuC,CAAC;IACpD,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;AAEvC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,6BAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;AAE3I,iDAAiD;AAC1C,MAAM,qBAAqB,GAAG,CAAC,KAAc,EAAgC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAA1H,QAAA,qBAAqB,yBAAqG;AAEvI,+DAA+D;AACxD,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAA+B,EAAE,CAClF,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,KAAK,oBAAoB;IACnC,IAAA,+BAAiB,EAAC,KAAK,CAAC,QAAQ,CAAC;IACjC,IAAA,+BAAiB,EAAC,KAAK,CAAC,SAAS,CAAC;IAClC,IAAA,+BAAiB,EAAC,KAAK,CAAC,cAAc,CAAC,CAAC;AAN7B,QAAA,oBAAoB,wBAMS;AAE1C,iFAAiF;AAC1E,MAAM,+BAA+B,GAAG,CAAC,KAAc,EAA0C,EAAE,CACxG,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE;QAClB,sBAAsB;QACtB,eAAe;QACf,aAAa;QACb,aAAa;QACb,uBAAuB;QACvB,sBAAsB;QACtB,aAAa;KACd,CAAC;IACF,KAAK,CAAC,oBAAoB,KAAK,CAAC;IAChC,IAAA,8BAAgB,EAAC,KAAK,CAAC,aAAa,CAAC;IACrC,IAAA,8BAAgB,EAAC,KAAK,CAAC,WAAW,CAAC;IACnC,IAAA,8BAAgB,EAAC,KAAK,CAAC,WAAW,CAAC;IACnC,IAAA,8BAAgB,EAAC,KAAK,CAAC,qBAAqB,CAAC;IAC7C,IAAA,8BAAgB,EAAC,KAAK,CAAC,oBAAoB,CAAC;IAC5C,IAAA,qCAAuB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAjBhC,QAAA,+BAA+B,mCAiBC;AAE7C,uFAAuF;AAChF,MAAM,4BAA4B,GAAG,CAAC,KAAc,EAAuC,EAAE,CAClG,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE;QAClB,MAAM;QACN,sBAAsB;QACtB,OAAO;QACP,eAAe;QACf,aAAa;QACb,aAAa;QACb,uBAAuB;QACvB,sBAAsB;QACtB,aAAa;KACd,CAAC;IACF,KAAK,CAAC,IAAI,KAAK,6BAA6B;IAC5C,KAAK,CAAC,oBAAoB,KAAK,CAAC;IAChC,IAAA,4BAAoB,EAAC,KAAK,CAAC,KAAK,CAAC;IACjC,IAAA,uCAA+B,EAAC;QAC9B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;AAxBQ,QAAA,4BAA4B,gCAwBpC;AAEL,8FAA8F;AACvF,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAmB,EAAE,CACtE,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,CAAC,MAAM,GAAG,CAAC;IAChB,KAAK,CAAC,MAAM,IAAI,6CAA8B,CAAC,+BAA+B;IAC9E,KAAK,KAAK,GAAG;IACb,KAAK,KAAK,IAAI;IACd,wCAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAN5B,QAAA,oBAAoB,wBAMQ;AAEzC,+FAA+F;AACxF,MAAM,yBAAyB,GAAG,CAAC,KAAc,EAAoC,EAAE,CAC5F,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC;IACvG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;IAChC,6BAAe,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAClC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;IACtC,8BAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;IACzC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;IAC/B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;IAC5B,IAAA,6BAAe,EAAC,KAAK,CAAC,MAAM,EAAE,6CAA8B,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjH,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;IACpC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;IACtC,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAZjI,QAAA,yBAAyB,6BAYwG;AAE9I,MAAM,eAAe,GAAG,CAAC,KAAc,EAAoC,EAAE,CAC3E,IAAA,iCAAyB,EAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC;AAE5E,MAAM,cAAc,GAAG,CAAC,KAAc,EAAoC,EAAE,CAC1E,IAAA,iCAAyB,EAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC;AAE5E,oFAAoF;AAC7E,MAAM,4BAA4B,GAAG,CAAC,KAAc,EAAuC,EAAE;IAClG,IAAI,CAAC,IAAA,sBAAQ,EAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,iBAAiB,GACrB,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,IAAA,qCAAuB,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7E,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,IAAA,qCAAuB,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACvF,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;YAC7B,KAAK,CAAC,eAAe,KAAK,SAAS;YACnC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAyB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAoB,CAAC,CAAC,CAAC;IAC3F,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC,IAAI,iBAAiB,CAAC;IACjG,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CACL,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;YAC5E,IAAA,8BAAgB,EAAC,KAAK,CAAC,MAAM,CAAC;YAC9B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACvB,iBAAiB,CAClB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,CACL,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC;YAC5E,IAAA,8BAAgB,EAAC,KAAK,CAAC,MAAM,CAAC;YAC9B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACvB,iBAAiB,CAClB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QACvE,OAAO,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAA,8BAAgB,EAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AA/BW,QAAA,4BAA4B,gCA+BvC;AAEF,MAAM,aAAa,GAAG,CAAI,KAAc,EAAE,aAA2C,EAAwC,EAAE;IAC7H,IAAI,CAAC,IAAA,sBAAQ,EAAC,KAAK,CAAC,IAAI,CAAC,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,6CAA8B,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;QAC1I,OAAO,KAAK,CAAC;IACf,IAAI,CAAC,IAAA,kCAAoB,EAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAA,kCAAoB,EAAC,KAAK,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IACxG,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,aAAa,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/I,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,IAAI,CAAC,IAAA,uDAAuC,EAAC,KAAK,CAAC,qBAAqB,CAAC;QAAE,OAAO,KAAK,CAAC;IACrI,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAoC,EAAE,CACxE,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,CAAC,EAAE,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACpH,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;IACvB,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,IAAA,kCAAoB,EAAC,KAAK,CAAC,aAAa,CAAC;IACzC,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChF,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,YAAY,GAAG,CAAC,KAAc,EAAoC,EAAE,CACxE,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;IAClI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;IACvB,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,IAAA,8BAAgB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,IAAA,kCAA0B,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClF,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,IAAA,uDAAuC,EAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC3G,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,aAAa,GAAG,CAAC,KAAc,EAAW,EAAE,CAChD,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACtD,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC;IACzB,KAAK,CAAC,OAAO,KAAK,KAAK;IACvB,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAE/B,MAAM,eAAe,GAAG,CAAC,KAAc,EAAuC,EAAE,CAC9E,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EACV,KAAK,EACL,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,aAAa,EAAE,kBAAkB,CAAC,EACzH,CAAC,OAAO,CAAC,CACV;IACD,IAAA,6BAAqB,EAAC,KAAK,CAAC,MAAM,CAAC;IACnC,IAAA,oCAA4B,EAAC,KAAK,CAAC,QAAQ,CAAC;IAC5C,IAAA,kCAAoB,EAAC,KAAK,CAAC,YAAY,CAAC;IACxC,IAAA,kCAAoB,EAAC,KAAK,CAAC,mBAAmB,CAAC;IAC/C,IAAA,kCAAoB,EAAC,KAAK,CAAC,qBAAqB,CAAC;IACjD,IAAA,kCAA0B,EAAC,KAAK,CAAC,WAAW,CAAC;IAC7C,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAW,EAAE,CACpD,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,qCAAsB,CAAC;IAC3C,qCAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;AAE7G,MAAM,SAAS,GAAG,CAAC,KAAc,EAAiC,EAAE,CAClE,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EACV,KAAK,EACL,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,EAClG,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,aAAa,CAAC,CACpG;IACD,IAAA,+BAAiB,EAAC,KAAK,CAAC,SAAS,CAAC;IAClC,IAAA,6BAAqB,EAAC,KAAK,CAAC,MAAM,CAAC;IACnC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;IAC9B,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;IAC7B,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;IAClC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC9B,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,IAAA,8BAAgB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/F,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/F,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACtF,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS,IAAI,IAAA,kCAAoB,EAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,IAAA,kCAA0B,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClF,wBAAwB,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAClD,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAwC,EAAE,CAChF,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EACV,KAAK,EACL,CAAC,kBAAkB,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,EACpG,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,kBAAkB,CAAC,CACzG;IACD,IAAA,+BAAiB,EAAC,KAAK,CAAC,gBAAgB,CAAC;IACzC,IAAA,6BAAqB,EAAC,KAAK,CAAC,MAAM,CAAC;IACnC,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,IAAA,kCAA0B,EAAC,KAAK,CAAC,WAAW,CAAC;IAC7C,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,IAAA,8BAAgB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/F,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/F,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACtF,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS,IAAI,IAAA,kCAAoB,EAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChF,wBAAwB,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAClD,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAgC,EAAE,CAChE,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAChH,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;IACvB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5B,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;IACxB,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,qCAAsB,CAAC,MAAM;IACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,6BAAqB,CAAC;IAC1C,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;IACpD,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,IAAA,8BAAgB,EAAC,KAAK,CAAC,WAAW,CAAC;IACnC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;IACnC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;IACtC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,SAAS,GAAG,CAAC,KAAc,EAA2C,EAAE,CAC5E,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpF,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,IAAA,6BAAqB,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,IAAA,8BAAgB,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAW,EAAE,CACnD,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE;QAClB,kBAAkB;QAClB,qBAAqB;QACrB,WAAW;QACX,iBAAiB;QACjB,oBAAoB;QACpB,eAAe;QACf,eAAe;KAChB,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,oCAA4B,CAAC,CAAC;AAE3D,MAAM,eAAe,GAAG,CAAC,KAAc,EAAW,EAAE,CAClD,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,eAAe,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC;IAC7E,IAAA,kCAAoB,EAAC,KAAK,CAAC,aAAa,CAAC;IACzC,IAAA,kCAAoB,EAAC,KAAK,CAAC,kBAAkB,CAAC;IAC9C,IAAA,kCAAoB,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC;AAE5C,MAAM,aAAa,GAAG,CAAC,KAAc,EAAW,EAAE,CAChD,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,EAAE,EAAE,CAAC,cAAc,EAAE,kBAAkB,EAAE,yBAAyB,CAAC,CAAC;IACxF,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChF,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS,IAAI,IAAA,kCAAoB,EAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAEvG,sFAAsF;AAC/E,MAAM,qCAAqC,GAAG,CAAC,KAAc,EAAgD,EAAE;IACpH,IAAI,CAAC,IAAA,mCAAqB,EAAC,KAAK,CAAC,IAAI,CAAC,IAAA,sBAAQ,EAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IACE,CAAC,IAAA,0BAAY,EAAC,KAAK,EAAE;QACnB,eAAe;QACf,OAAO;QACP,eAAe;QACf,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,eAAe;QACf,aAAa;QACb,sBAAsB;QACtB,mBAAmB;QACnB,aAAa;QACb,SAAS;QACT,UAAU;QACV,iBAAiB;QACjB,SAAS;QACT,UAAU;QACV,kBAAkB;KACnB,CAAC;QACF,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,CAAC,IAAA,4BAAoB,EAAC,KAAK,CAAC,KAAK,CAAC;QAClC,CAAC,IAAA,oCAA4B,EAAC,KAAK,CAAC,aAAa,CAAC;QAClD,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC;QACpD,CAAC,IAAA,qCAAuB,EAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC;QAC3E,CAAC,IAAA,sBAAQ,EAAC,KAAK,CAAC,YAAY,CAAC;QAC7B,CAAC,IAAA,0BAAY,EAAC,KAAK,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC/D,CAAC,IAAA,yBAAW,EAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;QAC1C,CAAC,IAAA,kCAA0B,EAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC;QAC3D,CAAC,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC;QACvC,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC;QACrC,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC;QACjC,CAAC,aAAa,CAAC,KAAK,CAAC,oBAAoB,EAAE,YAAY,CAAC;QACxD,CAAC,aAAa,CAAC,KAAK,CAAC,iBAAiB,EAAE,YAAY,CAAC;QACrD,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC;QAC/C,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC;QACjC,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;QACzC,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE,gBAAgB,CAAC;QACvD,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;QACvC,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;QACzC,CAAC,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EACzC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAA,4BAAc,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,6CAA8B,CAAC,eAAe,CAAC;AACjG,CAAC,CAAC;AAhDW,QAAA,qCAAqC,yCAgDhD;AAEF,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAU,EAAE;IACnD,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,6CAA8B,CAAC,eAAe,CAAC;IACtF,IAAI,IAAI,KAAK,sBAAsB;QAAE,OAAO,6CAA8B,CAAC,qBAAqB,CAAC;IACjG,OAAO,6CAA8B,CAAC,mBAAmB,CAAC;AAC5D,CAAC,CAAC;AAEF,kFAAkF;AAC3E,MAAM,iCAAiC,GAAG,CAAC,KAAc,EAA4C,EAAE;IAC5G,IAAI,CAAC,IAAA,sBAAQ,EAAC,KAAK,CAAC,IAAI,CAAC,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,uBAAuB,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,8BAA8B,CAAC;IACjH,OAAO,CACL,KAAK,CAAC,SAAS,KAAK,iBAAiB;QACrC,IAAA,kCAAoB,EAAC,KAAK,CAAC,SAAS,CAAC;QACrC,KAAK,CAAC,SAAS,GAAG,CAAC;QACnB,KAAK,CAAC,SAAS,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;QAClD,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,4BAAc,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;QACxC,IAAA,kCAAoB,EAAC,KAAK,CAAC,qBAAqB,CAAC,CAClD,CAAC;AACJ,CAAC,CAAC;AAbW,QAAA,iCAAiC,qCAa5C;AAEF,qFAAqF;AAC9E,MAAM,oCAAoC,GAAG,CAAC,KAAc,EAA8C,EAAE,CACjH,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IACpB,KAAK,CAAC,MAAM,KAAK,4CAA6B,CAAC,MAAM;IACrD,KAAK,CAAC,KAAK,CAAC,yCAAiC,CAAC;IAC9C,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,4CAA6B,CAAC,MAAM;IAC/F,4CAA6B,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AALrF,QAAA,oCAAoC,wCAKiD;AAElG,gFAAgF;AACzE,MAAM,wCAAwC,GAAG,CAAC,KAAc,EAAmD,EAAE;IAC1H,IAAI,CAAC,IAAA,mCAAqB,EAAC,KAAK,CAAC,IAAI,CAAC,IAAA,sBAAQ,EAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IACE,CAAC,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAC/I,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,KAAK,CAAC,MAAM,KAAK,WAAW;QAC5B,CAAC,IAAA,4BAAoB,EAAC,KAAK,CAAC,gBAAgB,CAAC;QAC7C,CAAC,IAAA,4BAAoB,EAAC,KAAK,CAAC,KAAK,CAAC;QAClC,CAAC,IAAA,oCAA4B,EAAC,KAAK,CAAC,aAAa,CAAC;QAClD,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC;QACpD,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;QAC1C,CAAC,4BAAc,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC5C,KAAK,CAAC,SAAS,KAAK,4CAA6B,CAAC,MAAM;QACxD,CAAC,IAAA,qCAAuB,EAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,EAC3E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,gBAAgB,GAAG;QACvB,KAAK,CAAC,aAAa,CAAC,aAAa;QACjC,KAAK,CAAC,aAAa,CAAC,WAAW;QAC/B,KAAK,CAAC,aAAa,CAAC,WAAW;QAC/B,KAAK,CAAC,aAAa,CAAC,qBAAqB;QACzC,KAAK,CAAC,aAAa,CAAC,oBAAoB;KACzC,CAAC;IACF,OAAO,CACL,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAClD,IAAA,4BAAc,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,6CAA8B,CAAC,qBAAqB,CAC9F,CAAC;AACJ,CAAC,CAAC;AA7BW,QAAA,wCAAwC,4CA6BnD;AAEF,uEAAuE;AAChE,MAAM,2BAA2B,GAAG,CAAC,KAAc,EAAsC,EAAE,CAChG,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAD5C,QAAA,2BAA2B,+BACiB;AAEzD,oFAAoF;AAC7E,MAAM,wBAAwB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,IAAA,yBAAW,EAAC,KAAK,CAAC,CAAC;AAAnF,QAAA,wBAAwB,4BAA2D"}

package/dist/esm/accounts/accounts.js

@@ -0,0 +1,116 @@
+export const CLOUD_ACCOUNT_BILLING_EXPORT_LOCATOR_SCHEMA_VERSION = 1;
+export const AZURE_SYNC_FEATURE_ORDER = [
+    'activityMonitoring',
+    'metrics',
+    'billing',
+    'pricing',
+    'costEstimation',
+    'commitments',
+    'relationshipGraphs',
+    'governance',
+    'availabilityZones',
+    'reliability',
+    'perimeterInsights',
+    'reportEvidencePack',
+];
+export const AZURE_SYNC_FEATURE_METADATA = [
+    {
+        id: 'activityMonitoring',
+        displayName: 'Activity monitoring',
+        description: 'Collects Azure activity logs and activity-derived operational events.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+        warning: 'Disabling activity monitoring prevents activity log collection and related detections.',
+    },
+    {
+        id: 'metrics',
+        displayName: 'Metrics',
+        description: 'Collects subscription resource metrics used for utilization and rightsizing insights.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+    },
+    {
+        id: 'billing',
+        displayName: 'Billing',
+        description: 'Collects billing and cost usage data.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+    },
+    {
+        id: 'pricing',
+        displayName: 'Pricing',
+        description: 'Collects Azure price data used for cost calculations.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+    },
+    {
+        id: 'costEstimation',
+        displayName: 'Cost estimation',
+        description: 'Builds estimated costs when billing-backed usage is unavailable or incomplete.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+    },
+    {
+        id: 'commitments',
+        displayName: 'Reservations and commitments',
+        description: 'Collects reserved instances, savings plans, and commitment utilization data.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+    },
+    {
+        id: 'relationshipGraphs',
+        displayName: 'Relationship graphs',
+        description: 'Builds relationship graph artifacts from scanned Azure resources.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+    },
+    {
+        id: 'governance',
+        displayName: 'Governance',
+        description: 'Builds tenant and subscription governance reports and graph artifacts.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+    },
+    {
+        id: 'availabilityZones',
+        displayName: 'Availability zones',
+        description: 'Collects tenant-level availability zone mappings.',
+        supportedScopes: ['cloudAccount'],
+    },
+    {
+        id: 'reliability',
+        displayName: 'Reliability',
+        description: 'Collects reliability signals and recommendations for subscription resources.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+    },
+    {
+        id: 'perimeterInsights',
+        displayName: 'Perimeter insights',
+        description: 'Builds public IP and perimeter exposure insights.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+    },
+    {
+        id: 'reportEvidencePack',
+        displayName: 'Report evidence pack',
+        description: 'Builds evidence artifacts used by reports and review workflows.',
+        supportedScopes: ['cloudAccount', 'subscription'],
+    },
+];
+const AZURE_SYNC_FEATURE_ORDER_INDEX = new Map(AZURE_SYNC_FEATURE_ORDER.map((featureId, index) => [featureId, index]));
+const AZURE_SYNC_FEATURE_IDS = new Set(AZURE_SYNC_FEATURE_ORDER);
+export const isAzureSyncFeatureId = (value) => AZURE_SYNC_FEATURE_IDS.has(value);
+export const getAzureSyncFeatureMetadata = (featureId) => AZURE_SYNC_FEATURE_METADATA.find(feature => feature.id === featureId) ?? {
+    id: featureId,
+    displayName: featureId,
+    description: '',
+    supportedScopes: ['cloudAccount', 'subscription'],
+};
+export const isAzureSyncFeatureSupportedInScope = (featureId, scope) => getAzureSyncFeatureMetadata(featureId).supportedScopes.includes(scope);
+export const sortAzureSyncFeatureIds = (featureIds) => [...featureIds].sort((left, right) => (AZURE_SYNC_FEATURE_ORDER_INDEX.get(left) ?? Number.MAX_SAFE_INTEGER) - (AZURE_SYNC_FEATURE_ORDER_INDEX.get(right) ?? Number.MAX_SAFE_INTEGER));
+const supportsAzureSyncFeatureScope = (feature, scope) => feature.supportedScopes.includes(scope);
+export const getAzureSyncFeatureOptions = (scope) => AZURE_SYNC_FEATURE_METADATA.filter(feature => supportsAzureSyncFeatureScope(feature, scope));
+export const getAzureSyncFeatureIdsForScope = (scope) => getAzureSyncFeatureOptions(scope).map(feature => feature.id);
+export const SUBSCRIPTION_SYNC_STEP_ORDER = [
+    'metrics',
+    'resourcegroups',
+    'activities',
+    'queries',
+    'reliability',
+    'billing',
+    'costestimation',
+    'pricing',
+    'commitments',
+    'views',
+];

package/dist/esm/accounts/azureManualOnboarding.js

@@ -0,0 +1,8 @@
+/** Shared producer/consumer bounds for the optional V1 discovery projection. */
+export const AZURE_MANUAL_ONBOARDING_BILLING_EXPORT_DISCOVERY_LIMITS_V1 = {
+    detectedSources: 50,
+    storageOptions: 50,
+    warnings: 20,
+};
+export const AZURE_MANUAL_ONBOARDING_IMPORT_SCHEMA_VERSION = 1;
+export const AZURE_MANUAL_ONBOARDING_IMPORT_KIND = 'spotto.azure.manual-onboarding';

package/dist/esm/accounts/azureSpSetup.js

@@ -0,0 +1,14 @@
+/** Maximum subscriptions accepted by one assisted Azure setup execution. */
+export const AZURE_SP_SETUP_MAX_SELECTED_SUBSCRIPTIONS = 100;
+/** Versioned storage identity shared by assisted and manual Azure onboarding. */
+export const AZURE_SP_BILLING_STORAGE_CONVENTION_V1 = {
+    version: 1,
+    namePrefix: 'billingexports',
+    candidateCount: 20,
+    defaultLocation: 'australiaeast',
+    purposeTagName: 'SpottoPurpose',
+    purposeTagValue: 'BillingExports',
+    tenantTagName: 'SpottoTenantId',
+    aliasTagName: 'spotto',
+    aliasTagValue: 'billing-exports',
+};

package/dist/esm/accounts/azureSpSetupDurable.js

@@ -0,0 +1,27 @@
+/**
+ * Durable setup fields stored only in the protected blob projection.
+ * API and cloud-engine storage adapters must consume this exact list.
+ */
+export const AZURE_SP_SETUP_DURABLE_STATE_BLOB_ONLY_FIELDS_V1 = [
+    'codeVerifier',
+    'nonce',
+    'encryptedMicrosoftTokenCache',
+    'generatedClientSecretEncrypted',
+    'discoveredTenants',
+    'selectedSubscriptionIds',
+    'subscriptions',
+    'managementGroups',
+    'permissionPlan',
+    'billingExportPlan',
+    'billingExportResults',
+    'billingExportBackfillMarkers',
+    'operationResults',
+    'progress',
+    'selectedPermissionInstanceKeys',
+    'executionRequest',
+    'targetCredentialBaselineHash',
+    'retryAttemptsByOperation',
+    'accountReadiness',
+    'subscriptionReadiness',
+    'targetedRefreshCheckpoints',
+];

package/dist/esm/accounts/index.js

@@ -0,0 +1,6 @@
+export * from './accounts.js';
+export * from './azureManualOnboarding.js';
+export * from './azureSpSetup.js';
+export * from './azureSpSetupDurable.js';
+export * from './writePermissions.js';
+export * from './readPermissions.js';