@spottoai/types-package 1.0.2-beta.43 → 1.0.2-beta.430

package/dist/environment/tenant.js

@@ -0,0 +1,203 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isEnvironmentTenantLogicalReferenceV1 = exports.isEnvironmentTenantCompiledGenerationPointerV1 = exports.buildEnvironmentTenantTreeDigestPreimageV1 = exports.isEnvironmentTenantDocumentDescriptorSetV1 = exports.isEnvironmentTenantDocumentDescriptorV1 = exports.isEnvironmentTenantProjectionV1 = exports.isEnvironmentTenantSourceBindingV1 = exports.isEnvironmentTenantScopeV1 = exports.buildEnvironmentTenantScopeQualifiedSubjectV1 = exports.ENVIRONMENT_TENANT_DOCUMENT_NAMES_V1 = void 0;
+const contracts_js_1 = require("./contracts.js");
+const internal_js_1 = require("./internal.js");
+const references_js_1 = require("./references.js");
+const validation_js_1 = require("./validation.js");
+exports.ENVIRONMENT_TENANT_DOCUMENT_NAMES_V1 = [
+    'projection.json',
+    'environment-index.md',
+    'identity.md',
+    'governance.md',
+    'commitments.md',
+];
+const REFERENCE_PATTERN = /^spotto:\/\/(?:artifact|resource)\/v1\//u;
+const SEVERITIES = new Set(['critical', 'high', 'medium', 'low', 'informational', 'unknown']);
+const PRINCIPAL_TYPES = new Set(['user', 'group', 'servicePrincipal', 'unknown']);
+const ASSIGNMENT_MODES = new Set(['permanent', 'eligible', 'active', 'unknown']);
+/** Builds the canonical logical subject for a tenant environment artifact. */
+const buildEnvironmentTenantScopeQualifiedSubjectV1 = (scope) => {
+    if (!(0, exports.isEnvironmentTenantScopeV1)(scope))
+        throw new TypeError('Invalid tenant environment scope.');
+    return JSON.stringify([scope.kind, scope.tenantId]);
+};
+exports.buildEnvironmentTenantScopeQualifiedSubjectV1 = buildEnvironmentTenantScopeQualifiedSubjectV1;
+/** Validates a tenant environment scope. */
+const isEnvironmentTenantScopeV1 = (value) => (0, internal_js_1.isRecord)(value) && (0, internal_js_1.hasExactKeys)(value, ['kind', 'tenantId']) && value.kind === 'azure-tenant' && (0, internal_js_1.isScopeIdentifier)(value.tenantId);
+exports.isEnvironmentTenantScopeV1 = isEnvironmentTenantScopeV1;
+/** Validates the completed tenant-sync generation bound to a tenant environment generation. */
+const isEnvironmentTenantSourceBindingV1 = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['kind', 'scope', 'tenantSyncRunId', 'completedAt']) &&
+    value.kind === 'azure-tenant-sync' &&
+    (0, exports.isEnvironmentTenantScopeV1)(value.scope) &&
+    (0, internal_js_1.isSourceIdentity)(value.tenantSyncRunId) &&
+    (0, internal_js_1.isCanonicalUtcTimestamp)(value.completedAt);
+exports.isEnvironmentTenantSourceBindingV1 = isEnvironmentTenantSourceBindingV1;
+const scopesEqual = (left, right) => left.tenantId === right.tenantId;
+const isReferenceArray = (value) => Array.isArray(value) && value.length <= contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.boundedListItems && value.every(references_js_1.isEnvironmentLogicalEvidenceReferenceV1);
+const isBoundedList = (value, itemGuard) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['items', 'totalCount', 'includedCount', 'truncated'], ['continuationReference']) &&
+    Array.isArray(value.items) &&
+    value.items.length <= contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.boundedListItems &&
+    value.items.every(itemGuard) &&
+    (0, internal_js_1.isNonNegativeInteger)(value.totalCount) &&
+    value.includedCount === value.items.length &&
+    value.totalCount >= value.includedCount &&
+    value.truncated === value.totalCount > value.includedCount &&
+    (value.continuationReference === undefined || (0, references_js_1.isEnvironmentLogicalEvidenceReferenceV1)(value.continuationReference)) &&
+    (!value.truncated || value.continuationReference !== undefined);
+const isCountRecord = (value, keys) => (0, internal_js_1.isRecord)(value) && (0, internal_js_1.hasExactKeys)(value, keys) && keys.every(key => (0, internal_js_1.isNonNegativeInteger)(value[key]));
+const isGlobalAdministrator = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['principalId', 'safeLabel', 'principalType', 'assignmentModes', 'mfaStatus', 'sourceReferences']) &&
+    (0, internal_js_1.isScopeIdentifier)(value.principalId) &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel) &&
+    typeof value.principalType === 'string' &&
+    PRINCIPAL_TYPES.has(value.principalType) &&
+    Array.isArray(value.assignmentModes) &&
+    value.assignmentModes.length <= 4 &&
+    value.assignmentModes.every(mode => typeof mode === 'string' && ASSIGNMENT_MODES.has(mode)) &&
+    new Set(value.assignmentModes).size === value.assignmentModes.length &&
+    (value.mfaStatus === 'mfa' || value.mfaStatus === 'unknown') &&
+    isReferenceArray(value.sourceReferences);
+const isGovernanceFinding = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['findingId', 'safeLabel', 'severity', 'sourceReferences'], ['category', 'scopeType']) &&
+    (0, internal_js_1.isScopeIdentifier)(value.findingId) &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel) &&
+    typeof value.severity === 'string' &&
+    SEVERITIES.has(value.severity) &&
+    (value.category === undefined || (0, internal_js_1.isSafeLabel)(value.category)) &&
+    (value.scopeType === undefined || (0, internal_js_1.isSafeLabel)(value.scopeType)) &&
+    isReferenceArray(value.sourceReferences);
+const isCommitment = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['commitmentId', 'kind', 'safeLabel', 'sourceReferences'], ['status', 'expiry', 'quantity']) &&
+    (0, internal_js_1.isScopeIdentifier)(value.commitmentId) &&
+    (value.kind === 'reservation' || value.kind === 'savings-plan') &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel) &&
+    (value.status === undefined || (0, internal_js_1.isSafeLabel)(value.status)) &&
+    (value.expiry === undefined || (0, internal_js_1.isCanonicalUtcTimestamp)(value.expiry)) &&
+    (value.quantity === undefined || (0, internal_js_1.isNonNegativeInteger)(value.quantity)) &&
+    isReferenceArray(value.sourceReferences);
+const isWarning = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['code', 'safeLabel', 'sourceReferences'], ['pillar', 'detail']) &&
+    (0, internal_js_1.isScopeIdentifier)(value.code) &&
+    (0, internal_js_1.isSafeLabel)(value.safeLabel) &&
+    value.pillar === undefined &&
+    (value.detail === undefined || (0, internal_js_1.isBoundedString)(value.detail, contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.customerStringScalars, { controls: true })) &&
+    isReferenceArray(value.sourceReferences);
+/** Validates the strict tenant environment projection. */
+const isEnvironmentTenantProjectionV1 = (value) => {
+    if (!(0, internal_js_1.hasSafeContainerShape)(value) || !(0, internal_js_1.isRecord)(value))
+        return false;
+    if (!(0, internal_js_1.hasExactKeys)(value, [
+        'schemaVersion',
+        'scope',
+        'sourceBinding',
+        'generatedAt',
+        'tenant',
+        'sourceCoverage',
+        'identitySummary',
+        'governanceSummary',
+        'commitmentSummary',
+        'globalAdministrators',
+        'governanceFindings',
+        'commitments',
+        'warnings',
+        'sourceReferences',
+    ]) ||
+        value.schemaVersion !== 1 ||
+        !(0, exports.isEnvironmentTenantScopeV1)(value.scope) ||
+        !(0, exports.isEnvironmentTenantSourceBindingV1)(value.sourceBinding) ||
+        !scopesEqual(value.scope, value.sourceBinding.scope) ||
+        !(0, internal_js_1.isCanonicalUtcTimestamp)(value.generatedAt) ||
+        Date.parse(value.generatedAt) < Date.parse(value.sourceBinding.completedAt) ||
+        !(0, internal_js_1.isRecord)(value.tenant) ||
+        !(0, internal_js_1.hasExactKeys)(value.tenant, ['safeLabel']) ||
+        !(0, internal_js_1.isSafeLabel)(value.tenant.safeLabel) ||
+        !(0, internal_js_1.isRecord)(value.sourceCoverage) ||
+        !(0, internal_js_1.hasExactKeys)(value.sourceCoverage, ['tenantSync', 'governance', 'identity', 'commitments']) ||
+        !Object.values(value.sourceCoverage).every(validation_js_1.isEnvironmentCoverageStateV1) ||
+        !isCountRecord(value.identitySummary, [
+            'applicationCount',
+            'servicePrincipalCount',
+            'globalAdministratorCount',
+            'permanentGlobalAdministratorCount',
+            'eligibleGlobalAdministratorCount',
+            'mfaKnownGlobalAdministratorCount',
+        ]) ||
+        !isCountRecord(value.governanceSummary, [
+            'managementGroupCount',
+            'subscriptionCount',
+            'policyAssignmentCount',
+            'policyExemptionCount',
+            'roleAssignmentCount',
+            'privilegedAssignmentCount',
+            'customRoleCount',
+            'findingCount',
+        ]) ||
+        !isCountRecord(value.commitmentSummary, ['reservationCount', 'savingsPlanCount', 'expiringWithin90DaysCount']) ||
+        !isBoundedList(value.globalAdministrators, isGlobalAdministrator) ||
+        !isBoundedList(value.governanceFindings, isGovernanceFinding) ||
+        !isBoundedList(value.commitments, isCommitment) ||
+        !isBoundedList(value.warnings, isWarning) ||
+        !isReferenceArray(value.sourceReferences)) {
+        return false;
+    }
+    return (0, internal_js_1.utf8ByteLength)(JSON.stringify(value)) <= contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.projectionBytes;
+};
+exports.isEnvironmentTenantProjectionV1 = isEnvironmentTenantProjectionV1;
+const descriptorLimit = (name) => name === 'projection.json' ? contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.projectionBytes : contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.environmentIndexBytes;
+/** Validates one tenant environment document descriptor. */
+const isEnvironmentTenantDocumentDescriptorV1 = (value) => (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['name', 'mediaType', 'byteCount', 'contentSha256', 'approximateTokenCount']) &&
+    typeof value.name === 'string' &&
+    exports.ENVIRONMENT_TENANT_DOCUMENT_NAMES_V1.includes(value.name) &&
+    value.mediaType === (value.name === 'projection.json' ? 'application/json' : 'text/markdown; charset=utf-8') &&
+    (0, internal_js_1.isNonNegativeInteger)(value.byteCount) &&
+    value.byteCount > 0 &&
+    value.byteCount <= descriptorLimit(value.name) &&
+    typeof value.contentSha256 === 'string' &&
+    internal_js_1.SHA256_PATTERN.test(value.contentSha256) &&
+    (0, internal_js_1.isNonNegativeInteger)(value.approximateTokenCount);
+exports.isEnvironmentTenantDocumentDescriptorV1 = isEnvironmentTenantDocumentDescriptorV1;
+/** Validates the exact five-file tenant environment descriptor set. */
+const isEnvironmentTenantDocumentDescriptorSetV1 = (value) => Array.isArray(value) &&
+    value.length === exports.ENVIRONMENT_TENANT_DOCUMENT_NAMES_V1.length &&
+    value.every(exports.isEnvironmentTenantDocumentDescriptorV1) &&
+    new Set(value.map(item => item.name)).size === exports.ENVIRONMENT_TENANT_DOCUMENT_NAMES_V1.length;
+exports.isEnvironmentTenantDocumentDescriptorSetV1 = isEnvironmentTenantDocumentDescriptorSetV1;
+/** Builds the canonical tenant tree-digest preimage. */
+const buildEnvironmentTenantTreeDigestPreimageV1 = (descriptors) => {
+    if (!(0, exports.isEnvironmentTenantDocumentDescriptorSetV1)(descriptors))
+        throw new TypeError('Invalid tenant environment descriptor set.');
+    return JSON.stringify(descriptors
+        .map(descriptor => [descriptor.name, descriptor.contentSha256])
+        .sort((left, right) => (left[0] < right[0] ? -1 : left[0] > right[0] ? 1 : 0)));
+};
+exports.buildEnvironmentTenantTreeDigestPreimageV1 = buildEnvironmentTenantTreeDigestPreimageV1;
+/** Validates the atomically visible tenant environment completion pointer. */
+const isEnvironmentTenantCompiledGenerationPointerV1 = (value) => (0, internal_js_1.hasSafeContainerShape)(value) &&
+    (0, internal_js_1.isRecord)(value) &&
+    (0, internal_js_1.hasExactKeys)(value, ['schemaVersion', 'status', 'environmentRunId', 'scope', 'sourceBinding', 'treeDigestSha256', 'fileCount', 'generatedAt']) &&
+    value.schemaVersion === 1 &&
+    value.status === 'completed' &&
+    typeof value.environmentRunId === 'string' &&
+    value.environmentRunId.length <= contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.environmentRunIdAsciiCharacters &&
+    internal_js_1.ENVIRONMENT_RUN_ID_PATTERN.test(value.environmentRunId) &&
+    value.environmentRunId !== '.' &&
+    value.environmentRunId !== '..' &&
+    (0, exports.isEnvironmentTenantScopeV1)(value.scope) &&
+    (0, exports.isEnvironmentTenantSourceBindingV1)(value.sourceBinding) &&
+    scopesEqual(value.scope, value.sourceBinding.scope) &&
+    value.environmentRunId !== value.sourceBinding.tenantSyncRunId &&
+    typeof value.treeDigestSha256 === 'string' &&
+    internal_js_1.SHA256_PATTERN.test(value.treeDigestSha256) &&
+    value.fileCount === exports.ENVIRONMENT_TENANT_DOCUMENT_NAMES_V1.length &&
+    (0, internal_js_1.isCanonicalUtcTimestamp)(value.generatedAt) &&
+    Date.parse(value.generatedAt) >= Date.parse(value.sourceBinding.completedAt) &&
+    (0, internal_js_1.utf8ByteLength)(JSON.stringify(value)) <= contracts_js_1.ENVIRONMENT_CONTRACT_LIMITS_V1.completedPointerBytes;
+exports.isEnvironmentTenantCompiledGenerationPointerV1 = isEnvironmentTenantCompiledGenerationPointerV1;
+/** Narrow syntax guard used before tenant references are passed to the common parser. */
+const isEnvironmentTenantLogicalReferenceV1 = (value) => typeof value === 'string' && REFERENCE_PATTERN.test(value) && (0, references_js_1.isEnvironmentLogicalEvidenceReferenceV1)(value);
+exports.isEnvironmentTenantLogicalReferenceV1 = isEnvironmentTenantLogicalReferenceV1;
+//# sourceMappingURL=tenant.js.map

package/dist/environment/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../../src/environment/tenant.ts"],"names":[],"mappings":";;;AAOA,iDAAgE;AAChE,+CAauB;AACvB,mDAA0E;AAC1E,mDAA+D;AAElD,QAAA,oCAAoC,GAAG;IAClD,iBAAiB;IACjB,sBAAsB;IACtB,aAAa;IACb,eAAe;IACf,gBAAgB;CACR,CAAC;AA0HX,MAAM,iBAAiB,GAAG,0CAA0C,CAAC;AACrE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9F,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC;AAClF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEjF,8EAA8E;AACvE,MAAM,6CAA6C,GAAG,CAAC,KAA+B,EAAU,EAAE;IACvG,IAAI,CAAC,IAAA,kCAA0B,EAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IACjG,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC,CAAC;AAHW,QAAA,6CAA6C,iDAGxD;AAEF,4CAA4C;AACrC,MAAM,0BAA0B,GAAG,CAAC,KAAc,EAAqC,EAAE,CAC9F,IAAA,sBAAQ,EAAC,KAAK,CAAC,IAAI,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,IAAA,+BAAiB,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AADxH,QAAA,0BAA0B,8BAC8F;AAErI,+FAA+F;AACxF,MAAM,kCAAkC,GAAG,CAAC,KAAc,EAA6C,EAAE,CAC9G,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,KAAK,mBAAmB;IAClC,IAAA,kCAA0B,EAAC,KAAK,CAAC,KAAK,CAAC;IACvC,IAAA,8BAAgB,EAAC,KAAK,CAAC,eAAe,CAAC;IACvC,IAAA,qCAAuB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AANhC,QAAA,kCAAkC,sCAMF;AAE7C,MAAM,WAAW,GAAG,CAAC,IAA8B,EAAE,KAA+B,EAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;AAEnI,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAoD,EAAE,CAC5F,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,6CAA8B,CAAC,gBAAgB,IAAI,KAAK,CAAC,KAAK,CAAC,uDAAuC,CAAC,CAAC;AAElJ,MAAM,aAAa,GAAG,CAAI,KAAc,EAAE,SAAuC,EAAwC,EAAE,CACzH,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC;IACrG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1B,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,6CAA8B,CAAC,gBAAgB;IACrE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,IAAA,kCAAoB,EAAC,KAAK,CAAC,UAAU,CAAC;IACtC,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;IAC1C,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,aAAa;IACvC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,aAAa;IAC1D,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS,IAAI,IAAA,uDAAuC,EAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACnH,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC;AAElE,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,IAAuB,EAAW,EAAE,CACzE,IAAA,sBAAQ,EAAC,KAAK,CAAC,IAAI,IAAA,0BAAY,EAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAA,kCAAoB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEtG,MAAM,qBAAqB,GAAG,CAAC,KAAc,EAAmD,EAAE,CAChG,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACtH,IAAA,+BAAiB,EAAC,KAAK,CAAC,WAAW,CAAC;IACpC,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;IACvC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;IACxC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC;IACpC,KAAK,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC;IACjC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3F,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,eAAe,CAAC,MAAM;IACpE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;IAC5D,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,mBAAmB,GAAG,CAAC,KAAc,EAAiD,EAAE,CAC5F,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC1G,IAAA,+BAAiB,EAAC,KAAK,CAAC,SAAS,CAAC;IAClC,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;IAClC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC9B,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAA,yBAAW,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/D,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,YAAY,GAAG,CAAC,KAAc,EAA0C,EAAE,CAC9E,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAChH,IAAA,+BAAiB,EAAC,KAAK,CAAC,YAAY,CAAC;IACrC,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;IAC/D,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,IAAA,yBAAW,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,IAAA,qCAAuB,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAA,kCAAoB,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtE,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,MAAM,SAAS,GAAG,CAAC,KAAc,EAA2C,EAAE,CAC5E,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpF,IAAA,+BAAiB,EAAC,KAAK,CAAC,IAAI,CAAC;IAC7B,IAAA,yBAAW,EAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,KAAK,CAAC,MAAM,KAAK,SAAS;IAC1B,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,IAAA,6BAAe,EAAC,KAAK,CAAC,MAAM,EAAE,6CAA8B,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvI,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE3C,0DAA0D;AACnD,MAAM,+BAA+B,GAAG,CAAC,KAAc,EAA0C,EAAE;IACxG,IAAI,CAAC,IAAA,mCAAqB,EAAC,KAAK,CAAC,IAAI,CAAC,IAAA,sBAAQ,EAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IACE,CAAC,IAAA,0BAAY,EAAC,KAAK,EAAE;QACnB,eAAe;QACf,OAAO;QACP,eAAe;QACf,aAAa;QACb,QAAQ;QACR,gBAAgB;QAChB,iBAAiB;QACjB,mBAAmB;QACnB,mBAAmB;QACnB,sBAAsB;QACtB,oBAAoB;QACpB,aAAa;QACb,UAAU;QACV,kBAAkB;KACnB,CAAC;QACF,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,CAAC,IAAA,kCAA0B,EAAC,KAAK,CAAC,KAAK,CAAC;QACxC,CAAC,IAAA,0CAAkC,EAAC,KAAK,CAAC,aAAa,CAAC;QACxD,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC;QACpD,CAAC,IAAA,qCAAuB,EAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC;QAC3E,CAAC,IAAA,sBAAQ,EAAC,KAAK,CAAC,MAAM,CAAC;QACvB,CAAC,IAAA,0BAAY,EAAC,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC,IAAA,yBAAW,EAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;QACpC,CAAC,IAAA,sBAAQ,EAAC,KAAK,CAAC,cAAc,CAAC;QAC/B,CAAC,IAAA,0BAAY,EAAC,KAAK,CAAC,cAAc,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QAC5F,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,4CAA4B,CAAC;QACxE,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE;YACpC,kBAAkB;YAClB,uBAAuB;YACvB,0BAA0B;YAC1B,mCAAmC;YACnC,kCAAkC;YAClC,kCAAkC;SACnC,CAAC;QACF,CAAC,aAAa,CAAC,KAAK,CAAC,iBAAiB,EAAE;YACtC,sBAAsB;YACtB,mBAAmB;YACnB,uBAAuB;YACvB,sBAAsB;YACtB,qBAAqB;YACrB,2BAA2B;YAC3B,iBAAiB;YACjB,cAAc;SACf,CAAC;QACF,CAAC,aAAa,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,2BAA2B,CAAC,CAAC;QAC9G,CAAC,aAAa,CAAC,KAAK,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;QACjE,CAAC,aAAa,CAAC,KAAK,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;QAC7D,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC;QAC/C,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;QACzC,CAAC,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EACzC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAA,4BAAc,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,6CAA8B,CAAC,eAAe,CAAC;AACjG,CAAC,CAAC;AA3DW,QAAA,+BAA+B,mCA2D1C;AAEF,MAAM,eAAe,GAAG,CAAC,IAAqC,EAAU,EAAE,CACxE,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,6CAA8B,CAAC,eAAe,CAAC,CAAC,CAAC,6CAA8B,CAAC,qBAAqB,CAAC;AAErI,4DAA4D;AACrD,MAAM,uCAAuC,GAAG,CAAC,KAAc,EAAkD,EAAE,CACxH,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,uBAAuB,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;IAC9B,4CAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAuC,CAAC;IAC5F,KAAK,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,8BAA8B,CAAC;IAC5G,IAAA,kCAAoB,EAAC,KAAK,CAAC,SAAS,CAAC;IACrC,KAAK,CAAC,SAAS,GAAG,CAAC;IACnB,KAAK,CAAC,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,IAAuC,CAAC;IACjF,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;IACvC,4BAAc,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;IACxC,IAAA,kCAAoB,EAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAXvC,QAAA,uCAAuC,2CAWA;AAEpD,uEAAuE;AAChE,MAAM,0CAA0C,GAAG,CAAC,KAAc,EAAoD,EAAE,CAC7H,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IACpB,KAAK,CAAC,MAAM,KAAK,4CAAoC,CAAC,MAAM;IAC5D,KAAK,CAAC,KAAK,CAAC,+CAAuC,CAAC;IACpD,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,4CAAoC,CAAC,MAAM,CAAC;AAJhF,QAAA,0CAA0C,8CAIsC;AAE7F,wDAAwD;AACjD,MAAM,0CAA0C,GAAG,CAAC,WAA6D,EAAU,EAAE;IAClI,IAAI,CAAC,IAAA,kDAA0C,EAAC,WAAW,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IAChI,OAAO,IAAI,CAAC,SAAS,CACnB,WAAW;SACR,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,aAAa,CAAU,CAAC;SACvE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACjF,CAAC;AACJ,CAAC,CAAC;AAPW,QAAA,0CAA0C,8CAOrD;AAEF,8EAA8E;AACvE,MAAM,8CAA8C,GAAG,CAAC,KAAc,EAAyD,EAAE,CACtI,IAAA,mCAAqB,EAAC,KAAK,CAAC;IAC5B,IAAA,sBAAQ,EAAC,KAAK,CAAC;IACf,IAAA,0BAAY,EAAC,KAAK,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAC9I,KAAK,CAAC,aAAa,KAAK,CAAC;IACzB,KAAK,CAAC,MAAM,KAAK,WAAW;IAC5B,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;IAC1C,KAAK,CAAC,gBAAgB,CAAC,MAAM,IAAI,6CAA8B,CAAC,+BAA+B;IAC/F,wCAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACvD,KAAK,CAAC,gBAAgB,KAAK,GAAG;IAC9B,KAAK,CAAC,gBAAgB,KAAK,IAAI;IAC/B,IAAA,kCAA0B,EAAC,KAAK,CAAC,KAAK,CAAC;IACvC,IAAA,0CAAkC,EAAC,KAAK,CAAC,aAAa,CAAC;IACvD,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC;IACnD,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,aAAa,CAAC,eAAe;IAC9D,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;IAC1C,4BAAc,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC3C,KAAK,CAAC,SAAS,KAAK,4CAAoC,CAAC,MAAM;IAC/D,IAAA,qCAAuB,EAAC,KAAK,CAAC,WAAW,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC;IAC5E,IAAA,4BAAc,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,6CAA8B,CAAC,qBAAqB,CAAC;AApBnF,QAAA,8CAA8C,kDAoBqC;AAEhG,yFAAyF;AAClF,MAAM,qCAAqC,GAAG,CAAC,KAAc,EAAkD,EAAE,CACtH,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAA,uDAAuC,EAAC,KAAK,CAAC,CAAC;AADlG,QAAA,qCAAqC,yCAC6D"}

package/dist/environment/validation.d.ts

@@ -0,0 +1,34 @@
+import { type EnvironmentArtifactKindV1, type EnvironmentCardinalityV1, type EnvironmentCompiledGenerationPointerV1, type EnvironmentCoverageStateV1, type EnvironmentDocumentDescriptorV1, type EnvironmentMoneyValueV1, type EnvironmentSavingsBasisV1, type EnvironmentPillarV1, type EnvironmentScopeV1, type EnvironmentSourceBindingV1, type EnvironmentSourceGenerationV1, type EnvironmentSubscriptionProjectionV1 } from './contracts.js';
+/** Validates a bounded, local Portal route suitable for client-visible evidence. */
+export declare const isEnvironmentPortalRouteV1: (value: unknown) => value is string;
+/** Validates one admitted environment pillar. */
+export declare const isEnvironmentPillarV1: (value: unknown) => value is EnvironmentPillarV1;
+/** Validates the closed phase-one Azure subscription scope. */
+export declare const isEnvironmentScopeV1: (value: unknown) => value is EnvironmentScopeV1;
+/** Validates the client-safe identity of one authoritative source generation. */
+export declare const isEnvironmentSourceGenerationV1: (value: unknown) => value is EnvironmentSourceGenerationV1;
+/** Validates a byte-preserving binding to an authoritative CompletedAzureViewSetV1. */
+export declare const isEnvironmentSourceBindingV1: (value: unknown) => value is EnvironmentSourceBindingV1;
+/** Validates a storage-safe environment run identity independently from source identities. */
+export declare const isEnvironmentRunIdV1: (value: unknown) => value is string;
+/** Validates the producer projection rule and window behind a savings amount. */
+export declare const isEnvironmentSavingsBasisV1: (value: unknown) => value is EnvironmentSavingsBasisV1;
+/** Validates canonical decimal money with explicit currency, basis, period, and provenance. */
+export declare const isEnvironmentMoneyValueV1: (value: unknown) => value is EnvironmentMoneyValueV1;
+/** Validates the closed coverage-state union and state-specific freshness rules. */
+export declare const isEnvironmentCoverageStateV1: (value: unknown) => value is EnvironmentCoverageStateV1;
+/** Validates exact, lower-bound, and unavailable count evidence without ambiguous totals. */
+export declare const isEnvironmentCardinalityV1: (value: unknown) => value is EnvironmentCardinalityV1;
+/** Validates the strict, bounded multi-pillar subscription environment projection. */
+export declare const isEnvironmentSubscriptionProjectionV1: (value: unknown) => value is EnvironmentSubscriptionProjectionV1;
+/** Validates one descriptor from the exact V1 multi-pillar document allowlist. */
+export declare const isEnvironmentDocumentDescriptorV1: (value: unknown) => value is EnvironmentDocumentDescriptorV1;
+/** Validates that descriptors contain every allowlisted V1 document exactly once. */
+export declare const isEnvironmentDocumentDescriptorSetV1: (value: unknown) => value is EnvironmentDocumentDescriptorV1[];
+/** Validates an atomically visible completed environment-generation pointer. */
+export declare const isEnvironmentCompiledGenerationPointerV1: (value: unknown) => value is EnvironmentCompiledGenerationPointerV1;
+/** Validates an artifact kind without widening the closed V1 union. */
+export declare const isEnvironmentArtifactKindV1: (value: unknown) => value is EnvironmentArtifactKindV1;
+/** Validates the V1 safe-label bound used by customer-visible evidence metadata. */
+export declare const isEnvironmentSafeLabelV1: (value: unknown) => value is string;
+//# sourceMappingURL=validation.d.ts.map

package/dist/environment/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/environment/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EASL,KAAK,yBAAyB,EAI9B,KAAK,wBAAwB,EAM7B,KAAK,sCAAsC,EAG3C,KAAK,0BAA0B,EAE/B,KAAK,+BAA+B,EAOpC,KAAK,uBAAuB,EAE5B,KAAK,yBAAyB,EAO9B,KAAK,mBAAmB,EAGxB,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,mCAAmC,EACzC,MAAM,gBAAgB,CAAC;AA2ExB,oFAAoF;AACpF,eAAO,MAAM,0BAA0B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAQ3B,CAAC;AA8C3C,iDAAiD;AACjD,eAAO,MAAM,qBAAqB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,mBAAsE,CAAC;AAEvI,+DAA+D;AAC/D,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,kBAMtB,CAAC;AAE1C,iFAAiF;AACjF,eAAO,MAAM,+BAA+B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,6BAiB9B,CAAC;AAE7C,uFAAuF;AACvF,eAAO,MAAM,4BAA4B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,0BAwBnE,CAAC;AAEL,8FAA8F;AAC9F,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAMvB,CAAC;AAazC,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,yBAO2B,CAAC;AAElG,+FAA+F;AAC/F,eAAO,MAAM,yBAAyB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,uBAqByE,CAAC;AAQ9I,oFAAoF;AACpF,eAAO,MAAM,4BAA4B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,0BA+BtE,CAAC;AAyCF,6FAA6F;AAC7F,eAAO,MAAM,0BAA0B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,wBAYpE,CAAC;AAwUF,sFAAsF;AACtF,eAAO,MAAM,qCAAqC,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,mCAyE/E,CAAC;AAQF,kFAAkF;AAClF,eAAO,MAAM,iCAAiC,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,+BAa3E,CAAC;AAEF,qFAAqF;AACrF,eAAO,MAAM,oCAAoC,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,+BAA+B,EAKb,CAAC;AAElG,gFAAgF;AAChF,eAAO,MAAM,wCAAwC,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,sCA6BlF,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,2BAA2B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,yBACd,CAAC;AAEzD,oFAAoF;AACpF,eAAO,MAAM,wBAAwB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAA4B,CAAC"}