@spottoai/types-package 1.0.2-beta.41 → 1.0.2-beta.411

package/dist/esm/azure/reportEvidenceValidation.js

@@ -0,0 +1,435 @@
+import { REPORT_EVIDENCE_LIMITS, } from './reportEvidence.js';
+import { countTotal, hasOptionalNumbers, hasOptionalStrings, hasRequiredRecords, isBoundedRows, isCommitmentExpirySummary, isCostSummary, isCount, isCountRecord, isDateTime, isEvidenceReference, isFiniteNumber, isOptionalBoolean, isOptionalFiniteNumber, isOptionalString, isProjectionRows, isRecommendationSummary, isRecord, isResourceSummary, isRetirementSummary, isSourceFileStatus, isString, isStringArray, isTagCoverage, } from './reportEvidenceValidationHelpers.js';
+export const isReportSecureScoreEvidence = (value) => {
+    if (!isRecord(value) || !['available', 'unavailable', 'stale'].includes(value.status))
+        return false;
+    if (!hasOptionalNumbers(value, ['percentage', 'currentScore', 'maxScore', 'weight']) ||
+        (value.percentage !== undefined && (value.percentage < 0 || value.percentage > 100)) ||
+        ['currentScore', 'maxScore', 'weight'].some(key => value[key] !== undefined && value[key] < 0) ||
+        (isFiniteNumber(value.currentScore) && isFiniteNumber(value.maxScore) && value.currentScore > value.maxScore) ||
+        (value.assessedResourceCount !== undefined && !isCount(value.assessedResourceCount)) ||
+        (value.observedAt !== undefined && !isDateTime(value.observedAt)))
+        return false;
+    return true;
+};
+const isCompactRecommendationResource = (value) => isRecord(value) &&
+    isString(value.id) &&
+    ['name', 'type', 'resourceGroup', 'location', 'currency', 'currencySymbol'].every(key => isOptionalString(value[key])) &&
+    ['spend', 'spendAmortized'].every(key => isOptionalFiniteNumber(value[key])) &&
+    (value.savings === undefined ||
+        (isRecord(value.savings) && isOptionalFiniteNumber(value.savings.minAmount) && isOptionalFiniteNumber(value.savings.maxAmount)));
+const isCompactRecommendation = (value) => {
+    if (!isRecord(value) || !isRecord(value.recommendation) || !Array.isArray(value.resources))
+        return false;
+    const recommendation = value.recommendation;
+    const assessment = recommendation.securityAssessmentSummary;
+    if (assessment !== undefined &&
+        (!isRecord(assessment) ||
+            !isCount(assessment.unhealthyCount) ||
+            !isCount(assessment.totalCount) ||
+            assessment.unhealthyCount > assessment.totalCount))
+        return false;
+    if (recommendation.securityImpactDetails !== undefined &&
+        (!isRecord(recommendation.securityImpactDetails) ||
+            !hasOptionalStrings(recommendation.securityImpactDetails, ['controlName', 'controlDisplayName'])))
+        return false;
+    if (!isString(recommendation.id) ||
+        !isString(recommendation.title) ||
+        recommendation.resolved === true ||
+        !isCount(value.resourcesCount) ||
+        !isCount(value.omittedResourceCount) ||
+        value.resources.length > REPORT_EVIDENCE_LIMITS.recommendationResources ||
+        !value.resources.every(isCompactRecommendationResource) ||
+        value.resourcesCount !== value.resources.length + value.omittedResourceCount) {
+        return false;
+    }
+    if (!hasOptionalStrings(recommendation, [
+        'name',
+        'headline',
+        'plainSummary',
+        'bottomLine',
+        'description',
+        'remediation',
+        'impactReason',
+        'effortReason',
+        'potentialBenefits',
+        'considerations',
+        'technicalPlaybook',
+        'category',
+        'subCategory',
+        'impact',
+        'effort',
+        'severity',
+        'risk',
+        'priority',
+        'priorityLabel',
+        'priorityTier',
+        'manualPriority',
+        'costImpactUnit',
+    ]) ||
+        !hasOptionalNumbers(recommendation, [
+            'effortHours',
+            'costImpact',
+            'potentialMonthlySavings',
+            'confidencePercentage',
+            'adjustedScore',
+            'finalScore',
+            'normalizedScore',
+        ]) ||
+        !isOptionalBoolean(recommendation.resolved) ||
+        !isOptionalBoolean(recommendation.reportingTextTruncated) ||
+        !hasOptionalStrings(value, ['currency', 'currencySymbol'])) {
+        return false;
+    }
+    return (value.savings === undefined ||
+        (isRecord(value.savings) && isOptionalFiniteNumber(value.savings.minAmount) && isOptionalFiniteNumber(value.savings.maxAmount)));
+};
+const isCostSavingsCategory = (value) => isRecord(value) &&
+    isString(value.key) &&
+    isString(value.label) &&
+    isCount(value.recommendationCount) &&
+    isCount(value.resourceCount) &&
+    ['currentMonthlyCost', 'potentialMonthlyCost', 'minimumMonthlySavings', 'maximumMonthlySavings'].every(key => isFiniteNumber(value[key]));
+const hasRequiredCountKeys = (value, keys) => isCountRecord(value) && keys.every(key => Object.prototype.hasOwnProperty.call(value, key));
+const isRecommendationPortfolio = (value) => {
+    if (!isRecord(value))
+        return false;
+    const impactBands = new Set(['High', 'Medium', 'Low', 'Unknown']);
+    const effortBands = new Set(['Low', 'Medium', 'High', 'Unknown']);
+    if (!isCount(value.sourceRecommendationCount) ||
+        !isCount(value.activeRecommendationCount) ||
+        !isCount(value.resolvedRecommendationCount) ||
+        !isCount(value.highImpactCount) ||
+        !isCount(value.quickWinCount) ||
+        value.sourceRecommendationCount !== value.activeRecommendationCount + value.resolvedRecommendationCount ||
+        value.highImpactCount > value.activeRecommendationCount ||
+        value.quickWinCount > value.activeRecommendationCount ||
+        !isCountRecord(value.byCategory) ||
+        !hasRequiredCountKeys(value.byImpact, ['High', 'Medium', 'Low', 'Unknown']) ||
+        !hasRequiredCountKeys(value.byEffort, ['Low', 'Medium', 'High', 'Unknown']) ||
+        countTotal(value.byCategory) !== value.activeRecommendationCount ||
+        countTotal(value.byImpact) !== value.activeRecommendationCount ||
+        countTotal(value.byEffort) !== value.activeRecommendationCount ||
+        !Array.isArray(value.impactEffortMatrix) ||
+        value.impactEffortMatrix.length !== 16 ||
+        !value.impactEffortMatrix.every(row => isRecord(row) &&
+            isString(row.impact) &&
+            impactBands.has(row.impact) &&
+            isString(row.effort) &&
+            effortBands.has(row.effort) &&
+            isCount(row.count)) ||
+        new Set(value.impactEffortMatrix.map(row => `${row.impact}|${row.effort}`)).size !== 16 ||
+        value.impactEffortMatrix.reduce((total, row) => total + row.count, 0) !== value.activeRecommendationCount ||
+        !isRecord(value.affectedResources) ||
+        !isCount(value.affectedResources.count) ||
+        !isCount(value.affectedResources.identifiedCount) ||
+        !isCount(value.affectedResources.largestReportedRecommendationCount) ||
+        (value.affectedResources.basis !== 'exact' && value.affectedResources.basis !== 'lower-bound')) {
+        return false;
+    }
+    if (value.affectedResources.count < value.affectedResources.identifiedCount ||
+        value.affectedResources.count < value.affectedResources.largestReportedRecommendationCount ||
+        (value.affectedResources.basis === 'exact' && value.affectedResources.count !== value.affectedResources.identifiedCount)) {
+        return false;
+    }
+    if (value.costSavings === undefined)
+        return true;
+    if (!isRecord(value.costSavings) || !isString(value.costSavings.currency) || !isCount(value.costSavings.contributingRecommendationCount)) {
+        return false;
+    }
+    const monthly = value.costSavings.monthly;
+    const annual = value.costSavings.annual;
+    return (isRecord(monthly) &&
+        ['currentCost', 'potentialCost', 'minimumSavings', 'maximumSavings'].every(key => isFiniteNumber(monthly[key])) &&
+        isRecord(annual) &&
+        isFiniteNumber(annual.minimumSavings) &&
+        isFiniteNumber(annual.maximumSavings) &&
+        isBoundedRows(value.costSavings.categories, REPORT_EVIDENCE_LIMITS.detailRows, isCostSavingsCategory) &&
+        isOptionalString(value.costSavings.currencySymbol) &&
+        isOptionalFiniteNumber(monthly.minimumSavingsPercent) &&
+        isOptionalFiniteNumber(monthly.maximumSavingsPercent) &&
+        (value.costSavings.basis === undefined ||
+            (isRecord(value.costSavings.basis) &&
+                isString(value.costSavings.basis.categoryScope) &&
+                isString(value.costSavings.basis.projection) &&
+                isString(value.costSavings.basis.observedPeriod) &&
+                typeof value.costSavings.basis.excludesEstimatedRows === 'boolean' &&
+                isString(value.costSavings.basis.appliesTo) &&
+                typeof value.costSavings.basis.containsLegacySavings === 'boolean')));
+};
+const isResourceExample = (value) => isRecord(value) && isString(value.name) && hasOptionalStrings(value, ['type', 'resourceGroup', 'location']);
+const isSnapshot = (value) => isRecord(value) && isString(value.name) && isOptionalString(value.resourceGroup) && isOptionalFiniteNumber(value.createdTime);
+const isAppliedTagCost = (value) => isRecord(value) && isString(value.tagKey) && isString(value.tagValue) && isCount(value.resourceCount) && isFiniteNumber(value.spend30Days);
+const isInventoryResource = (value) => isRecord(value) &&
+    isString(value.id) &&
+    hasOptionalStrings(value, ['name', 'type', 'resourceGroup', 'location']) &&
+    hasOptionalNumbers(value, ['spend30Days', 'spend30DaysAmortized', 'createdTime']);
+const isInventory = (value) => isRecord(value) &&
+    isCount(value.totalResources) &&
+    isCount(value.untaggedResourceCount) &&
+    value.untaggedResourceCount <= value.totalResources &&
+    isBoundedRows(value.untaggedExamples, REPORT_EVIDENCE_LIMITS.detailRows, isResourceExample) &&
+    isBoundedRows(value.snapshots, REPORT_EVIDENCE_LIMITS.detailRows, isSnapshot) &&
+    isBoundedRows(value.appliedTagCosts, REPORT_EVIDENCE_LIMITS.detailRows, isAppliedTagCost) &&
+    isBoundedRows(value.topSpendResources, REPORT_EVIDENCE_LIMITS.detailRows, isInventoryResource);
+const isPrivilegedAccess = (value) => isRecord(value) &&
+    isString(value.principalId) &&
+    isString(value.displayName) &&
+    isString(value.roleName) &&
+    hasOptionalStrings(value, ['userPrincipalName', 'scope', 'scopeType', 'lastLogonDate', 'mfaStatus']);
+const isGovernance = (value) => isRecord(value) &&
+    isOptionalString(value.generatedAt) &&
+    (value.coverage === undefined || isRecord(value.coverage)) &&
+    hasRequiredRecords(value, ['policySummary', 'rbacSummary', 'globalAdministratorSummary']) &&
+    isProjectionRows(value.complianceRows) &&
+    (value.complianceAssessments === undefined ||
+        isBoundedRows(value.complianceAssessments, REPORT_EVIDENCE_LIMITS.complianceAssessments, (row) => isRecord(row) &&
+            isCount(row.nonCompliantResourceCount) &&
+            (row.assessmentKey === undefined || (typeof row.assessmentKey === 'string' && /^[a-f0-9]{64}$/.test(row.assessmentKey))) &&
+            hasOptionalStrings(row, [
+                'policySetDisplayName',
+                'policyAssignmentDisplayName',
+                'policyDefinitionReferenceId',
+                'policyDefinitionDisplayName',
+                'resourceType',
+                'effect',
+            ]))) &&
+    isBoundedRows(value.privilegedAccessRows, REPORT_EVIDENCE_LIMITS.detailRows, isPrivilegedAccess) &&
+    isProjectionRows(value.findings) &&
+    isProjectionRows(value.limitations);
+const isCommitments = (value) => {
+    if (!isRecord(value) || !isRecord(value.inventorySummary) || !isCountRecord(value.inventorySummary.statusCounts))
+        return false;
+    if (!isCount(value.inventorySummary.totalCount) || !isBoundedRows(value.inventory, REPORT_EVIDENCE_LIMITS.detailRows, isCommitmentInventoryRow)) {
+        return false;
+    }
+    if (value.inventorySummary.totalCount !== value.inventory.totalCount ||
+        countTotal(value.inventorySummary.statusCounts) !== value.inventorySummary.totalCount) {
+        return false;
+    }
+    return ['coverage', 'obsoleteCandidates', 'reallocationOpportunities', 'purchaseRecommendations', 'renewals'].every(key => isProjectionRows(value[key]));
+};
+function isCommitmentInventoryRow(value) {
+    return (isRecord(value) &&
+        hasOptionalStrings(value, [
+            'id',
+            'benefitType',
+            'type',
+            'displayName',
+            'status',
+            'expiryDate',
+            'skuName',
+            'skuDescription',
+            'location',
+            'term',
+        ]) &&
+        hasOptionalNumbers(value, ['daysToExpiry', 'reservedQuantity']) &&
+        isOptionalBoolean(value.renew) &&
+        (value.annualCommittedCost === undefined || isRecord(value.annualCommittedCost)) &&
+        (value.doNotRenewAnnualImpact === undefined || isRecord(value.doNotRenewAnnualImpact)));
+}
+const isReportingProjection = (value) => {
+    if (!isRecord(value) || !isRecord(value.dashboard) || !isRecommendationPortfolio(value.recommendationPortfolio))
+        return false;
+    const subscription = isRecord(value.dashboard.subscription) ? value.dashboard.subscription : undefined;
+    const properties = subscription && isRecord(subscription.properties) ? subscription.properties : undefined;
+    if (properties?.secureScoreEvidence !== undefined && !isReportSecureScoreEvidence(properties.secureScoreEvidence))
+        return false;
+    if (!isBoundedRows(value.recommendations, REPORT_EVIDENCE_LIMITS.currentRecommendations, isCompactRecommendation) ||
+        value.recommendations.totalCount !==
+            value.recommendationPortfolio.activeRecommendationCount ||
+        (value.recommendationCatalogue !== undefined &&
+            (!isBoundedRows(value.recommendationCatalogue, REPORT_EVIDENCE_LIMITS.recommendationCatalogue, isCompactRecommendation) ||
+                value.recommendationCatalogue.totalCount !== value.recommendationPortfolio.activeRecommendationCount)) ||
+        !isProjectionRows(value.serviceRetirements) ||
+        !isInventory(value.inventory) ||
+        !isGovernance(value.governance) ||
+        !isCommitments(value.commitmentsPlanning)) {
+        return false;
+    }
+    const patch = value.patchManagement;
+    const protection = value.dataProtection;
+    const health = value.resourceHealth;
+    const uptime = value.serverUptime;
+    const publicIps = value.publicIpAddresses;
+    const activity = value.activity;
+    return (isRecord(patch) &&
+        isProjectionRows(patch.machines) &&
+        isRecord(protection) &&
+        isProjectionRows(protection.items) &&
+        isProjectionRows(protection.issues) &&
+        isRecord(health) &&
+        isRecord(health.events) &&
+        isProjectionRows(health.events.events) &&
+        isRecord(health.availabilityStatuses) &&
+        isProjectionRows(health.availabilityStatuses.statuses) &&
+        isRecord(uptime) &&
+        ['workspaces', 'gaps', 'servers'].every(key => isProjectionRows(uptime[key])) &&
+        isRecord(publicIps) &&
+        isProjectionRows(publicIps.items) &&
+        isRecord(activity) &&
+        (activity.dailySummary === undefined ||
+            (isBoundedRows(activity.dailySummary, REPORT_EVIDENCE_LIMITS.activityDays, isActivityDailySummary) &&
+                new Set(activity.dailySummary.rows.map(row => row.date)).size === activity.dailySummary.rows.length)) &&
+        (activity.undatedSummary === undefined || isActivityCounts(activity.undatedSummary)) &&
+        ['changes', 'security', 'health', 'suppressed'].every(key => isProjectionRows(activity[key])));
+};
+const isActivityCounts = (value) => isRecord(value) &&
+    ['visibleEvents', 'materialChanges', 'securitySensitive', 'healthEvents', 'failedEvents', 'highFindingCount'].every(key => isCount(value[key])) &&
+    ['materialChanges', 'securitySensitive', 'healthEvents', 'failedEvents'].every(key => value[key] <= value.visibleEvents);
+const isActivityDailySummary = (value) => isActivityCounts(value) &&
+    isRecord(value) &&
+    isString(value.date) &&
+    /^\d{4}-\d{2}-\d{2}$/.test(value.date) &&
+    Number.isFinite(Date.parse(value.date)) &&
+    new Date(value.date).toISOString().slice(0, 10) === value.date;
+export const isSubscriptionReportEvidencePack = (value) => {
+    if (!isRecord(value) || !isDateTime(value.generatedAt)) {
+        return false;
+    }
+    if (!isRecord(value.generation) ||
+        !isRecord(value.scope) ||
+        !isString(value.scope.subscriptionId) ||
+        !isRecord(value.coverage) ||
+        !isRecord(value.coverage.sourceFiles) ||
+        !isStringArray(value.coverage.gaps) ||
+        !Object.values(value.coverage.sourceFiles).every(isSourceFileStatus) ||
+        !isResourceSummary(value.estate) ||
+        !isCostSummary(value.cost) ||
+        !isRecommendationSummary(value.recommendations) ||
+        !isRecord(value.security) ||
+        !isOptionalFiniteNumber(value.security.secureScore) ||
+        (value.security.governance !== undefined &&
+            (!isRecord(value.security.governance) || !isOptionalFiniteNumber(value.security.governance.findingCount))) ||
+        !isRecord(value.reliability) ||
+        !isRetirementSummary(value.reliability.serviceRetirements) ||
+        !isCount(value.reliability.recommendationCount) ||
+        !isRecord(value.commitments) ||
+        !isCommitmentExpirySummary(value.commitments.expiries) ||
+        !isRecord(value.performance) ||
+        !isCount(value.performance.recommendationCount) ||
+        !isStringArray(value.performance.topRecommendationIds) ||
+        !isRecord(value.operationalExcellence) ||
+        !isCount(value.operationalExcellence.recommendationCount) ||
+        !isTagCoverage(value.operationalExcellence.tagCoverage) ||
+        !isReportingProjection(value.reporting) ||
+        !Array.isArray(value.evidence) ||
+        !value.evidence.every(isEvidenceReference)) {
+        return false;
+    }
+    if (!hasOptionalStrings(value.generation, ['sourceRunId', 'sourceGeneratedAt']) ||
+        !hasOptionalStrings(value.scope, ['companyId', 'tenantId', 'displayName', 'currency', 'currencySymbol'])) {
+        return false;
+    }
+    return (value.reliability.relationshipGraph === undefined ||
+        (isRecord(value.reliability.relationshipGraph) &&
+            hasOptionalNumbers(value.reliability.relationshipGraph, ['totalNodes', 'totalEdges', 'unresolvedCount', 'buildMs'])));
+};
+const isRecommendationFingerprint = (value) => isRecord(value) &&
+    isString(value.id) &&
+    isString(value.title) &&
+    hasOptionalStrings(value, ['category', 'impact', 'severity', 'currency']) &&
+    isOptionalBoolean(value.resolved) &&
+    isCount(value.affectedResourceCount) &&
+    isOptionalFiniteNumber(value.potentialMonthlySavings) &&
+    isOptionalFiniteNumber(value.maximumMonthlySavings) &&
+    isOptionalFiniteNumber(value.costImpact);
+const isHistoryMetrics = (value) => isRecord(value) &&
+    hasOptionalStrings(value, ['subscriptionName', 'currency', 'currencySymbol']) &&
+    hasOptionalNumbers(value, ['secureScore', 'advisorScore', 'spend30Days', 'spend30DaysAmortized']) &&
+    (value.secureScoreEvidence === undefined || isReportSecureScoreEvidence(value.secureScoreEvidence)) &&
+    isCount(value.resourceCount) &&
+    isCount(value.recommendationCount) &&
+    isCount(value.impactedResourceCount) &&
+    isCount(value.securityRecommendationCount) &&
+    isCount(value.securityImpactedResourceCount) &&
+    value.securityRecommendationCount <= value.recommendationCount &&
+    value.securityImpactedResourceCount <= value.impactedResourceCount &&
+    isOptionalFiniteNumber(value.maximumMonthlySavings);
+export const isSubscriptionReportHistory = (value) => {
+    if (!isRecord(value) ||
+        !isString(value.subscriptionId) ||
+        !isDateTime(value.generatedAt) ||
+        !isRecord(value.retention) ||
+        value.retention.maxPeriods !== REPORT_EVIDENCE_LIMITS.historyPeriods ||
+        !Array.isArray(value.periods) ||
+        value.periods.length > REPORT_EVIDENCE_LIMITS.historyPeriods) {
+        return false;
+    }
+    const periods = new Set();
+    for (const period of value.periods) {
+        if (!isRecord(period) ||
+            !isString(period.period) ||
+            !/^\d{4}-(0[1-9]|1[0-2])$/u.test(period.period) ||
+            periods.has(period.period) ||
+            !isString(period.sourceRunId) ||
+            !isDateTime(period.sourceGeneratedAt) ||
+            !isHistoryMetrics(period.metrics) ||
+            !isBoundedRows(period.recommendations, REPORT_EVIDENCE_LIMITS.historyRecommendations, isRecommendationFingerprint)) {
+            return false;
+        }
+        if (period.recommendations.omittedCount === 0 &&
+            period.metrics.recommendationCount !== period.recommendations.rows.filter(row => row.resolved !== true).length) {
+            return false;
+        }
+        periods.add(period.period);
+    }
+    return true;
+};
+const isTenantMfaSummary = (value) => {
+    if (!isRecord(value) || typeof value.countsAreLowerBounds !== 'boolean' || !isRecord(value.enforcement))
+        return false;
+    const enforcement = value.enforcement;
+    const enforcementKeys = ['enforced', 'conditionallyEnforced', 'notEnforced', 'unknown'];
+    if (!isCount(value.enumeratedUsers) ||
+        !isCount(value.activeUsers) ||
+        !isCount(value.disabledUsers) ||
+        !isCount(value.assessedActiveUsers) ||
+        !isCount(value.enforcementKnownUsers) ||
+        !isCount(value.enforcementUnknownUsers) ||
+        !isOptionalString(value.assessmentState) ||
+        !['mfaCapableUsers', 'notMfaCapableUsers', 'unknownRegistrationUsers'].every(key => value[key] === undefined || isCount(value[key])) ||
+        Object.keys(enforcement).some(key => !enforcementKeys.includes(key)) ||
+        !enforcementKeys.every(key => isCount(enforcement[key]))) {
+        return false;
+    }
+    return (value.enumeratedUsers === value.assessedActiveUsers + value.disabledUsers &&
+        value.activeUsers === value.enforcementKnownUsers + value.enforcementUnknownUsers &&
+        value.activeUsers === countTotal(enforcement) &&
+        value.enforcementUnknownUsers === enforcement.unknown &&
+        (value.countsAreLowerBounds || value.assessedActiveUsers === value.activeUsers));
+};
+const isTenantCoverage = (value) => isRecord(value) &&
+    Object.values(value).every(section => isRecord(section) &&
+        hasOptionalStrings(section, ['state', 'source', 'reason', 'message', 'lastAttemptedAt', 'lastSuccessfulAt']) &&
+        (section.requiredPermissions === undefined || isStringArray(section.requiredPermissions)) &&
+        (!Array.isArray(section.requiredPermissions) || section.requiredPermissions.length <= 10) &&
+        isOptionalFiniteNumber(section.maximumSourceLagHours));
+const isTenantPrincipal = (value) => isRecord(value) &&
+    isString(value.principalId) &&
+    isString(value.principalType) &&
+    isString(value.assignmentSource) &&
+    isStringArray(value.assignmentModes) &&
+    value.assignmentModes.length <= 4 &&
+    typeof value.isPimBacked === 'boolean' &&
+    isString(value.lastActivatedEvidence) &&
+    hasOptionalStrings(value, ['displayName', 'userPrincipalName', 'mfaStatus', 'lastActivatedAt']) &&
+    isOptionalBoolean(value.accountEnabled);
+export const isTenantReportEvidencePack = (value) => {
+    if (!isRecord(value) ||
+        !isDateTime(value.generatedAt) ||
+        !isRecord(value.scope) ||
+        !isString(value.scope.tenantId) ||
+        !isRecord(value.mfa) ||
+        (value.mfa.summary !== undefined && !isTenantMfaSummary(value.mfa.summary)) ||
+        (value.mfa.tenantPolicy !== undefined && !isRecord(value.mfa.tenantPolicy)) ||
+        (value.mfa.coverage !== undefined && !isTenantCoverage(value.mfa.coverage)) ||
+        !isRecord(value.globalAdmins) ||
+        !isRecord(value.globalAdmins.summary) ||
+        !isTenantCoverage(value.globalAdmins.coverage) ||
+        !isBoundedRows(value.globalAdmins.warnings, REPORT_EVIDENCE_LIMITS.tenantGlobalAdministrators, isRecord) ||
+        !isBoundedRows(value.globalAdmins.principals, REPORT_EVIDENCE_LIMITS.tenantGlobalAdministrators, isTenantPrincipal)) {
+        return false;
+    }
+    return true;
+};

package/dist/esm/azure/reportEvidenceValidationHelpers.js

@@ -0,0 +1,106 @@
+import { REPORT_EVIDENCE_LIMITS } from './reportEvidence.js';
+export const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+export const isString = (value) => typeof value === 'string' && value.trim().length > 0;
+export const isOptionalString = (value) => value === undefined || isString(value);
+export const isFiniteNumber = (value) => typeof value === 'number' && Number.isFinite(value);
+export const isOptionalFiniteNumber = (value) => value === undefined || isFiniteNumber(value);
+export const isOptionalBoolean = (value) => value === undefined || typeof value === 'boolean';
+export const isCount = (value) => isFiniteNumber(value) && Number.isInteger(value) && value >= 0;
+export const isDateTime = (value) => isString(value) && Number.isFinite(Date.parse(value));
+export const isStringArray = (value) => Array.isArray(value) && value.every(isString);
+export const isCountRecord = (value) => isRecord(value) && Object.values(value).every(isCount);
+export const countTotal = (value) => Object.values(value).reduce((total, count) => total + count, 0);
+export const hasOptionalStrings = (value, keys) => keys.every(key => isOptionalString(value[key]));
+export const hasOptionalNumbers = (value, keys) => keys.every(key => isOptionalFiniteNumber(value[key]));
+export const isBoundedRows = (value, limit, isRow) => {
+    if (!isRecord(value) || !isCount(value.totalCount) || !isCount(value.omittedCount) || !Array.isArray(value.rows))
+        return false;
+    return value.rows.length <= limit && value.rows.every(isRow) && value.totalCount === value.rows.length + value.omittedCount;
+};
+export const isProjectionRows = (value, limit = REPORT_EVIDENCE_LIMITS.detailRows) => isBoundedRows(value, limit, isRecord);
+export const hasRequiredRecords = (value, keys) => keys.every(key => isRecord(value[key]));
+export const isSourceFileStatus = (value) => isRecord(value) &&
+    isString(value.path) &&
+    typeof value.available === 'boolean' &&
+    (value.recordCount === undefined || isCount(value.recordCount)) &&
+    isOptionalString(value.note);
+export const isTagCoverage = (value) => isRecord(value) &&
+    isCount(value.withTags) &&
+    isCount(value.withoutTags) &&
+    isFiniteNumber(value.coveragePercentage) &&
+    Array.isArray(value.topTagKeys) &&
+    value.topTagKeys.every(row => isRecord(row) && isString(row.key) && isCount(row.count));
+const isTopSpendResource = (value) => isRecord(value) &&
+    isString(value.id) &&
+    isString(value.name) &&
+    isString(value.type) &&
+    isOptionalString(value.location) &&
+    isFiniteNumber(value.spend30Days) &&
+    isOptionalFiniteNumber(value.spend30DaysAmortized);
+export const isResourceSummary = (value) => isRecord(value) &&
+    isCount(value.total) &&
+    Array.isArray(value.byType) &&
+    value.byType.length <= REPORT_EVIDENCE_LIMITS.summaryDimensions &&
+    value.byType.every(row => isRecord(row) && isString(row.type) && isCount(row.count) && isOptionalFiniteNumber(row.spend30Days)) &&
+    Array.isArray(value.byLocation) &&
+    value.byLocation.length <= REPORT_EVIDENCE_LIMITS.summaryDimensions &&
+    value.byLocation.every(row => isRecord(row) && isString(row.location) && isCount(row.count) && isOptionalFiniteNumber(row.spend30Days)) &&
+    isRecord(value.tagCoverage) &&
+    isTagCoverage(value.tagCoverage) &&
+    Array.isArray(value.tagCoverage.topTagKeys) &&
+    value.tagCoverage.topTagKeys.length <= REPORT_EVIDENCE_LIMITS.summaryRows &&
+    Array.isArray(value.topSpendResources) &&
+    value.topSpendResources.length <= REPORT_EVIDENCE_LIMITS.summaryRows &&
+    value.topSpendResources.every(isTopSpendResource);
+export const isCostSummary = (value) => {
+    if (!isRecord(value) || !isRecord(value.sourceMetadata) || !Array.isArray(value.topSpendResources))
+        return false;
+    if (!hasOptionalStrings(value, ['currency', 'currencySymbol']) ||
+        !hasOptionalNumbers(value, ['spend30Days', 'spend30DaysAmortized', 'totalRetailCost', 'miscCost', 'rollingCostRecordCount']) ||
+        (value.budget !== undefined && !isRecord(value.budget)) ||
+        !isString(value.sourceMetadata.spend30DaysSource) ||
+        !isString(value.sourceMetadata.spend30DaysAmortizedSource) ||
+        !isString(value.sourceMetadata.totalRetailCostSource) ||
+        !isString(value.sourceMetadata.rollingCostFile) ||
+        !isOptionalFiniteNumber(value.sourceMetadata.rollingCostRecordCount) ||
+        !value.topSpendResources.every(isTopSpendResource)) {
+        return false;
+    }
+    return (value.period === undefined ||
+        (isRecord(value.period) &&
+            value.period.type === 'rolling_30_days' &&
+            isString(value.period.source) &&
+            hasOptionalStrings(value.period, ['startDate', 'endDate'])));
+};
+export const isRecommendationSummary = (value) => isRecord(value) &&
+    isCount(value.total) &&
+    isCountRecord(value.byPillar) &&
+    isCountRecord(value.byImpact) &&
+    isCountRecord(value.byEffort) &&
+    isStringArray(value.topRecommendationIds) &&
+    value.topRecommendationIds.length <= REPORT_EVIDENCE_LIMITS.topRecommendationIds &&
+    isRecord(value.topRecommendationIdsByPillar) &&
+    Object.values(value.topRecommendationIdsByPillar).every(ids => isStringArray(ids) && ids.length <= REPORT_EVIDENCE_LIMITS.topRecommendationIdsPerPillar);
+export const isRetirementSummary = (value) => isRecord(value) &&
+    isCount(value.total) &&
+    isCount(value.sourceRecordCount) &&
+    isCount(value.excludedUnlinked) &&
+    isCount(value.excludedCommitmentExpiries) &&
+    isCount(value.within180Days) &&
+    isCount(value.expiredOrPastDue) &&
+    Array.isArray(value.upcoming) &&
+    value.upcoming.length <= REPORT_EVIDENCE_LIMITS.upcomingEvents &&
+    value.upcoming.every(row => isRecord(row) && isOptionalString(row.id) && isOptionalString(row.title) && isOptionalString(row.retirementDate) && isCount(row.resourceCount));
+export const isCommitmentExpirySummary = (value) => isRecord(value) &&
+    isCount(value.total) &&
+    isCount(value.sourceRecordCount) &&
+    isCount(value.within180Days) &&
+    isCount(value.expiredOrPastDue) &&
+    Array.isArray(value.upcoming) &&
+    value.upcoming.length <= REPORT_EVIDENCE_LIMITS.upcomingEvents &&
+    value.upcoming.every(row => isRecord(row) && isOptionalString(row.id) && isOptionalString(row.title) && isOptionalString(row.expiryDate) && isCount(row.resourceCount));
+export const isEvidenceReference = (value) => isRecord(value) &&
+    isString(value.source) &&
+    isString(value.summary) &&
+    (value.value === undefined || ['string', 'number', 'boolean'].includes(typeof value.value)) &&
+    (typeof value.value !== 'number' || Number.isFinite(value.value));

package/dist/esm/azure/reportingTemplates.js

@@ -0,0 +1 @@
+export const REPORTING_TEMPLATE_REPORT_TYPES = ['sdm', 'sow', 'review-checklist', 'architecture-assessment'];

package/dist/esm/azure/reports.js

@@ -0,0 +1,12 @@
+/** Specific reason types for cost changes */
+export var ChangeReasonType;
+(function (ChangeReasonType) {
+    ChangeReasonType["NEW_RESOURCE"] = "new_resource";
+    ChangeReasonType["REMOVED_RESOURCE"] = "removed_resource";
+    ChangeReasonType["QUANTITY_INCREASE"] = "quantity_increase";
+    ChangeReasonType["QUANTITY_DECREASE"] = "quantity_decrease";
+    ChangeReasonType["RATE_CHANGE"] = "rate_change";
+    ChangeReasonType["SKU_CHANGE"] = "sku_change";
+    ChangeReasonType["NEW_METER"] = "new_meter";
+    ChangeReasonType["REMOVED_METER"] = "removed_meter";
+})(ChangeReasonType || (ChangeReasonType = {}));

package/dist/esm/azure/resourceHealth.js

@@ -0,0 +1,12 @@
+export const RESOURCE_HEALTH_EVENTS_FILE_NAME = 'microsoft.resourcehealth-events.json';
+export const RESOURCE_HEALTH_EVENTS_IMPACTED_RESOURCES_FILE_NAME = 'microsoft.resourcehealth-events-impactedresources.json';
+export const RESOURCE_HEALTH_AVAILABILITY_STATUSES_FILE_NAME = 'microsoft.resourcehealth-availabilitystatuses.json';
+export const RESOURCE_HEALTH_EVENTS_PORTAL_FILE_NAME = 'health-events.json';
+export const RESOURCE_HEALTH_AVAILABILITY_STATUSES_PORTAL_FILE_NAME = 'health-availability-statuses.json';
+export const RESOURCE_HEALTH_INDEX_FILE_NAME = 'history/resource-health/index.json';
+export const AZURE_RESOURCE_HEALTH_EVENTS_SOURCE = 'Microsoft.ResourceHealth/events';
+export const AZURE_RESOURCE_HEALTH_IMPACTED_RESOURCES_SOURCE = 'Microsoft.ResourceHealth/events/impactedResources';
+export const AZURE_RESOURCE_HEALTH_AVAILABILITY_STATUSES_SOURCE = 'Microsoft.ResourceHealth/availabilityStatuses';
+export const RESOURCE_HEALTH_EVENTS_SOURCE = AZURE_RESOURCE_HEALTH_EVENTS_SOURCE;
+export const RESOURCE_HEALTH_EVENTS_IMPACTED_RESOURCES_SOURCE = AZURE_RESOURCE_HEALTH_IMPACTED_RESOURCES_SOURCE;
+export const RESOURCE_HEALTH_AVAILABILITY_STATUSES_SOURCE = AZURE_RESOURCE_HEALTH_AVAILABILITY_STATUSES_SOURCE;

package/dist/esm/azure/resourceOptimization.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/resources.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/reviewChecklist.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/savings.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/secureScore.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/security.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/serviceRetirement.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/serviceRetirementState.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/serviceRetirementWorkManagement.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/storage-inventory.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/azure/subscriptions.js

@@ -0,0 +1,33 @@
+import { isAzureProviderScopeFinancialChargeSpendBreakdownV1, } from './financialChargePolicy.js';
+const AZURE_NATIVE_STATS_OPTIONAL_MONEY_FIELDS = [
+    'spend30Days',
+    'spend30DaysAmortized',
+    'spendPrevious30Days',
+    'spendPrevious30DaysAmortized',
+    'spend7Days',
+    'spend7DaysAmortized',
+    'spendPrevious7Days',
+    'spendPrevious7DaysAmortized',
+    'spend30DaysBillingBacked',
+    'spend30DaysAmortizedBillingBacked',
+    'spend30DaysEstimated',
+    'spend30DaysAmortizedEstimated',
+];
+const isFinancialStatsRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+/** Exact top-level validator for the dashboard Azure-native display projection. */
+export const isAzureNativeSubscriptionFinancialStatsV1 = (value) => {
+    if (!isFinancialStatsRecord(value))
+        return false;
+    const required = ['contractVersion', 'policyRef', 'status', 'resourcesByLocation', 'resourcesByType'];
+    const allowed = new Set([...required, 'financialChargeSpend', ...AZURE_NATIVE_STATS_OPTIONAL_MONEY_FIELDS]);
+    if (!required.every(field => Object.prototype.hasOwnProperty.call(value, field)) || !Object.keys(value).every(field => allowed.has(field))) {
+        return false;
+    }
+    return (value.contractVersion === 'azure-native-subscription-financial-stats/v1' &&
+        value.policyRef === 'azure-cloud-services-excluding-marketplace/v1' &&
+        (value.status === 'complete' || value.status === 'partial') &&
+        (value.financialChargeSpend === undefined || isAzureProviderScopeFinancialChargeSpendBreakdownV1(value.financialChargeSpend)) &&
+        Array.isArray(value.resourcesByLocation) &&
+        Array.isArray(value.resourcesByType) &&
+        AZURE_NATIVE_STATS_OPTIONAL_MONEY_FIELDS.every(field => value[field] === undefined || (typeof value[field] === 'number' && Number.isFinite(value[field]))));
+};