@spottoai/types-package 1.0.2-dev1138.1 → 1.0.2-dev1138.12

package/dist/azure/activityLogAnalysis.d.ts

@@ -0,0 +1,320 @@
+export declare const ACTIVITY_LOG_TAXONOMY_VERSION: "v1";
+export declare const ACTIVITY_LOG_ANALYSIS_VERSION: "v1";
+export declare const CONFORMED_ACTIVITY_ANALYSIS_SCHEMA_VERSION: 1;
+export declare const PORTAL_ACTIVITY_ANALYSIS_RESPONSE_SCHEMA_VERSION: 1;
+export declare const CONFORMED_ACTIVITY_ANALYSIS_LIMITS_V1: Readonly<{
+    readonly sourceShardFingerprintCodeUnits: number;
+}>;
+export declare const PORTAL_ACTIVITY_ANALYSIS_LIMITS_V1: Readonly<{
+    readonly tagAssignmentsPerEvent: 32;
+    readonly facetTagRows: 64;
+    readonly facetOperationRows: 4096;
+    readonly facetProviderRows: 512;
+    readonly facetResourceTypeRows: 4096;
+    readonly facetResultRows: 256;
+    readonly facetOperationEffectRows: 8;
+    readonly facetExecutionOriginRows: 8;
+    readonly activitySeries: 10000;
+    readonly resourceSummaries: 10000;
+    readonly operationSummaries: 4096;
+    readonly securitySensitive: 4096;
+    readonly powerPatterns: 4096;
+    readonly operationCountsPerItem: 256;
+    readonly resultCountsPerItem: 256;
+    readonly tagCountsPerItem: 64;
+    readonly executionOriginCountsPerItem: 8;
+    readonly evidenceIdsPerItem: 20;
+    readonly reasonCodesPerItem: 32;
+    readonly resourceIdCodeUnits: 2048;
+    readonly operationCodeUnits: 512;
+    readonly providerCodeUnits: 256;
+    readonly resourceTypeCodeUnits: 512;
+    readonly resourceNameCodeUnits: 512;
+    readonly reasonCodeUnits: 128;
+    readonly responseUtf8Bytes: 33554432;
+}>;
+export declare const ACTIVITY_LOG_TAG_IDS: readonly ["actor.manual", "actor.workload-automation", "actor.azure-platform", "actor.unknown", "change.material", "intent.credential-access", "intent.remote-execution", "intent.power-control", "security.sensitive-operation", "security.credential-access", "security.remote-execution", "security.privileged-access-change", "security.security-boundary-change", "security.protection-control-change", "security.destructive-action", "scheduler.power-operation"];
+export type ActivityLogTagId = (typeof ACTIVITY_LOG_TAG_IDS)[number];
+export type ActivityLogTagDimension = 'actor' | 'change' | 'intent' | 'security' | 'scheduler';
+export type ActivityLogClassificationConfidence = 'high' | 'medium' | 'low';
+export type ActivityLogExecutionOrigin = 'manual' | 'workloadAutomation' | 'azurePlatform' | 'unknown';
+export type ActivityLogOperationEffect = 'write' | 'delete' | 'action' | 'read' | 'other';
+export type ActivityLogScopeLevel = 'subscription' | 'resourceGroup' | 'resource' | 'unknown';
+export type ActivityLogPowerDataSufficiency = 'oneSided' | 'oneOff' | 'sameDayRepeat' | 'repeated';
+export type ActivityLogClassificationState = 'complete' | 'partial' | 'unavailable';
+export type PortalActivityEvidenceId = `aev1_${string}`;
+export type PortalActivityAnalysisGroupId = `aag1_${string}`;
+export type PortalActivityAnalysisReasonCode = 'derived.operation-summary' | 'derived.security-sensitive-activity' | 'derived.power-pattern-evidence' | `tag.${ActivityLogTagId}`;
+export interface PortalActivityLogAnalysisScope {
+    subscriptionId: string;
+    level: ActivityLogScopeLevel;
+    resourceId?: string;
+    resourceGroup?: string;
+    provider?: string;
+    resourceType?: string;
+    resourceName?: string;
+}
+export interface PortalActivityLogTagAssignment {
+    tagId: ActivityLogTagId;
+    dimension: ActivityLogTagDimension;
+    confidence: ActivityLogClassificationConfidence;
+}
+export interface PortalActivityLogClassification {
+    taxonomyVersion: typeof ACTIVITY_LOG_TAXONOMY_VERSION;
+    executionOrigin: ActivityLogExecutionOrigin;
+    operationEffect: ActivityLogOperationEffect;
+    scope: PortalActivityLogAnalysisScope;
+    tags: PortalActivityLogTagAssignment[];
+}
+export interface ActivityLogAnalysisCount<T extends string = string> {
+    value: T;
+    count: number;
+}
+export interface ConformedActivityAnalysisFacets {
+    tags: ActivityLogAnalysisCount<ActivityLogTagId>[];
+    operations: ActivityLogAnalysisCount[];
+    providers: ActivityLogAnalysisCount[];
+    resourceTypes: ActivityLogAnalysisCount[];
+    results: ActivityLogAnalysisCount[];
+    operationEffects: ActivityLogAnalysisCount<ActivityLogOperationEffect>[];
+    executionOrigins: ActivityLogAnalysisCount<ActivityLogExecutionOrigin>[];
+}
+export interface ConformedActivitySeries {
+    id: string;
+    analysisVersion: typeof ACTIVITY_LOG_ANALYSIS_VERSION;
+    taxonomyVersion: typeof ACTIVITY_LOG_TAXONOMY_VERSION;
+    subscriptionId: string;
+    month: string;
+    scope: PortalActivityLogAnalysisScope;
+    operation: string;
+    result: string;
+    executionOrigin: ActivityLogExecutionOrigin;
+    operationEffect: ActivityLogOperationEffect;
+    tagIds: ActivityLogTagId[];
+    eventCount: number;
+    firstTimestamp: string;
+    lastTimestamp: string;
+    dailyCounts: Array<{
+        date: string;
+        count: number;
+    }>;
+    utcWeekdayHourDistribution: Array<{
+        weekday: number;
+        hour: number;
+        count: number;
+    }>;
+    distinctActorCount: number;
+    confidence: ActivityLogClassificationConfidence;
+    evidenceEventKeys: string[];
+    evidenceTruncated: boolean;
+}
+export interface ConformedActivityAnalysisGroupBase {
+    id: string;
+    analysisVersion: typeof ACTIVITY_LOG_ANALYSIS_VERSION;
+    taxonomyVersion: typeof ACTIVITY_LOG_TAXONOMY_VERSION;
+    subscriptionId: string;
+    month: string;
+    scope: PortalActivityLogAnalysisScope;
+    eventCount: number;
+    firstTimestamp: string;
+    lastTimestamp: string;
+    confidence: ActivityLogClassificationConfidence;
+    reasons: string[];
+    tagIds: ActivityLogTagId[];
+    evidenceEventKeys: string[];
+    evidenceTruncated: boolean;
+}
+export interface ConformedActivityOperationSummary extends ConformedActivityAnalysisGroupBase {
+    type: 'operation-summary';
+    operation: string;
+    provider?: string;
+    resourceType?: string;
+    operationEffect: ActivityLogOperationEffect;
+    executionOrigin: ActivityLogExecutionOrigin;
+    distinctResourceCount: number;
+    resultCounts: Record<string, number>;
+}
+export interface ConformedActivitySecuritySensitiveEvidence extends ConformedActivityAnalysisGroupBase {
+    type: 'security-sensitive-activity';
+    capabilityTag: Exclude<ActivityLogTagId, `actor.${string}` | `change.${string}` | `intent.${string}` | `scheduler.${string}` | 'security.sensitive-operation'>;
+    operation: string;
+    executionOrigin: ActivityLogExecutionOrigin;
+    resultCounts: Record<string, number>;
+}
+export interface ConformedActivityPowerPatternEvidence extends ConformedActivityAnalysisGroupBase {
+    type: 'power-pattern-evidence';
+    patternId: string;
+    resourceId: string;
+    startCount: number;
+    stopCount: number;
+    opposingPairCount: number;
+    utcActiveDayCount: number;
+    utcHourDistribution: Record<string, number>;
+    executionOriginCounts: Partial<Record<ActivityLogExecutionOrigin, number>>;
+    resultCounts: Record<string, number>;
+    dataSufficiency: ActivityLogPowerDataSufficiency;
+}
+export type ConformedActivityAnalysisGroup = ConformedActivityOperationSummary | ConformedActivitySecuritySensitiveEvidence | ConformedActivityPowerPatternEvidence;
+export interface ConformedActivityResourceSummary {
+    scope: PortalActivityLogAnalysisScope & {
+        level: 'resource';
+        resourceId: string;
+    };
+    eventCount: number;
+    operationCounts: ActivityLogAnalysisCount[];
+    resultCounts: ActivityLogAnalysisCount[];
+    tagCounts: ActivityLogAnalysisCount<ActivityLogTagId>[];
+    executionOriginCounts: ActivityLogAnalysisCount<ActivityLogExecutionOrigin>[];
+    relatedEvidenceIds: string[];
+}
+export interface ConformedActivityAnalysisArtifact {
+    schemaVersion: typeof CONFORMED_ACTIVITY_ANALYSIS_SCHEMA_VERSION;
+    analysisVersion: typeof ACTIVITY_LOG_ANALYSIS_VERSION;
+    taxonomyVersion: typeof ACTIVITY_LOG_TAXONOMY_VERSION;
+    projection: 'activity-analysis';
+    subscriptionId: string;
+    month: string;
+    generatedAt: string;
+    source: {
+        portalProjectionSchemaVersion: number;
+        sourceHighWatermark?: string;
+        sourceShardFingerprint?: string;
+        retainedEventCount: number;
+        classifiedRetainedEventCount: number;
+        unclassifiedRetainedEventCount: number;
+        classificationState: ActivityLogClassificationState;
+    };
+    facets: ConformedActivityAnalysisFacets;
+    activitySeries: ConformedActivitySeries[];
+    resources: ConformedActivityResourceSummary[];
+    groups: ConformedActivityAnalysisGroup[];
+}
+export interface PortalActivityAnalysisCollection<T> {
+    totalCount: number;
+    returnedCount: number;
+    truncated: boolean;
+    items: T[];
+}
+export type PortalActivityAnalysisLimitationCode = 'source-coverage-partial' | 'unclassified-events' | 'facet-values-truncated' | 'resource-summaries-truncated' | 'operation-summaries-truncated' | 'security-sensitive-truncated' | 'power-patterns-truncated' | 'artifact-size-budget' | 'month-missing' | 'month-partial' | 'month-stale' | 'month-freshness-unknown' | 'nested-values-truncated' | 'mixed-analysis-versions' | 'mixed-taxonomy-versions' | 'response-truncated';
+export interface PortalActivityAnalysisFacets {
+    tags: PortalActivityAnalysisCollection<ActivityLogAnalysisCount<ActivityLogTagId>>;
+    operations: PortalActivityAnalysisCollection<ActivityLogAnalysisCount>;
+    providers: PortalActivityAnalysisCollection<ActivityLogAnalysisCount>;
+    resourceTypes: PortalActivityAnalysisCollection<ActivityLogAnalysisCount>;
+    results: PortalActivityAnalysisCollection<ActivityLogAnalysisCount>;
+    operationEffects: PortalActivityAnalysisCollection<ActivityLogAnalysisCount<ActivityLogOperationEffect>>;
+    executionOrigins: PortalActivityAnalysisCollection<ActivityLogAnalysisCount<ActivityLogExecutionOrigin>>;
+}
+export interface PortalActivitySeries {
+    seriesId: PortalActivityAnalysisGroupId;
+    scope: PortalActivityLogAnalysisScope;
+    operation: string;
+    result: string;
+    executionOrigin: ActivityLogExecutionOrigin;
+    operationEffect: ActivityLogOperationEffect;
+    tagIds: ActivityLogTagId[];
+    eventCount: number;
+    firstTimestamp: string;
+    lastTimestamp: string;
+    monthCounts: ActivityLogAnalysisCount[];
+    dailyCounts: Array<{
+        date: string;
+        count: number;
+    }>;
+    utcWeekdayHourDistribution: Array<{
+        weekday: number;
+        hour: number;
+        count: number;
+    }>;
+    confidence: ActivityLogClassificationConfidence;
+    evidenceIds: PortalActivityEvidenceId[];
+    evidenceTruncated: boolean;
+}
+export interface PortalActivityResourceSummary {
+    scope: PortalActivityLogAnalysisScope & {
+        level: 'resource';
+        resourceId: string;
+    };
+    eventCount: number;
+    firstTimestamp: string;
+    lastTimestamp: string;
+    operationCounts: ActivityLogAnalysisCount[];
+    resultCounts: ActivityLogAnalysisCount[];
+    tagCounts: ActivityLogAnalysisCount<ActivityLogTagId>[];
+    executionOriginCounts: ActivityLogAnalysisCount<ActivityLogExecutionOrigin>[];
+    relatedGroupIds: PortalActivityAnalysisGroupId[];
+    confidence: ActivityLogClassificationConfidence;
+}
+interface PortalActivityDerivedEvidenceBase {
+    scope: PortalActivityLogAnalysisScope;
+    eventCount: number;
+    firstTimestamp: string;
+    lastTimestamp: string;
+    confidence: ActivityLogClassificationConfidence;
+    tagIds: ActivityLogTagId[];
+    reasons: PortalActivityAnalysisReasonCode[];
+    evidenceIds: PortalActivityEvidenceId[];
+    evidenceTruncated: boolean;
+}
+export interface PortalActivityOperationSummary extends PortalActivityDerivedEvidenceBase {
+    groupId: PortalActivityAnalysisGroupId;
+    derivedType: 'operationSummary';
+    operation: string;
+    provider?: string;
+    resourceType?: string;
+    operationEffect: ActivityLogOperationEffect;
+    executionOrigin: ActivityLogExecutionOrigin;
+    distinctResourceCount: number;
+    resultCounts: ActivityLogAnalysisCount[];
+}
+export interface PortalActivitySecuritySensitiveEvidence extends PortalActivityDerivedEvidenceBase {
+    groupId: PortalActivityAnalysisGroupId;
+    derivedType: 'securitySensitiveActivity';
+    capabilityTag: Exclude<ActivityLogTagId, `actor.${string}` | `change.${string}` | `intent.${string}` | `scheduler.${string}` | 'security.sensitive-operation'>;
+    operation: string;
+    executionOrigin: ActivityLogExecutionOrigin;
+    resultCounts: ActivityLogAnalysisCount[];
+}
+export interface PortalActivityPowerPatternEvidence extends PortalActivityDerivedEvidenceBase {
+    patternId: PortalActivityAnalysisGroupId;
+    derivedType: 'powerPatternEvidence';
+    startCount: number;
+    stopCount: number;
+    opposingPairCount: number;
+    utcActiveDayCount: number;
+    utcHourDistribution: Array<{
+        hour: number;
+        count: number;
+    }>;
+    executionOriginCounts: ActivityLogAnalysisCount<ActivityLogExecutionOrigin>[];
+    resultCounts: ActivityLogAnalysisCount[];
+    dataSufficiency: ActivityLogPowerDataSufficiency;
+}
+export type PortalActivityDerivedEvidence = PortalActivityOperationSummary | PortalActivitySecuritySensitiveEvidence | PortalActivityPowerPatternEvidence;
+export interface PortalActivityAnalysisResponse {
+    schemaVersion: typeof PORTAL_ACTIVITY_ANALYSIS_RESPONSE_SCHEMA_VERSION;
+    generatedAt: string;
+    subscriptionId: string;
+    fromMonth: string;
+    toMonth: string;
+    resourceId?: string;
+    requestedMonths: string[];
+    availableMonths: string[];
+    missingMonths: string[];
+    partialMonths: string[];
+    staleMonths: string[];
+    freshnessUnknownMonths: string[];
+    analysisVersions: string[];
+    taxonomyVersions: string[];
+    facets: PortalActivityAnalysisFacets;
+    activitySeries: PortalActivityAnalysisCollection<PortalActivitySeries>;
+    resources: PortalActivityAnalysisCollection<PortalActivityResourceSummary>;
+    operationSummaries: PortalActivityAnalysisCollection<PortalActivityOperationSummary>;
+    securitySensitive: PortalActivityAnalysisCollection<PortalActivitySecuritySensitiveEvidence>;
+    powerPatterns: PortalActivityAnalysisCollection<PortalActivityPowerPatternEvidence>;
+    limitations: PortalActivityAnalysisLimitationCode[];
+}
+export declare function buildConformedActivityAnalysisLogicalName(month: string): string;
+export declare function parseConformedActivityAnalysisLogicalName(logicalName: string): string | undefined;
+export {};
+//# sourceMappingURL=activityLogAnalysis.d.ts.map

package/dist/azure/activityLogAnalysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activityLogAnalysis.d.ts","sourceRoot":"","sources":["../../src/azure/activityLogAnalysis.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,6BAA6B,EAAG,IAAa,CAAC;AAC3D,eAAO,MAAM,6BAA6B,EAAG,IAAa,CAAC;AAC3D,eAAO,MAAM,0CAA0C,EAAG,CAAU,CAAC;AACrE,eAAO,MAAM,gDAAgD,EAAG,CAAU,CAAC;AAE3E,eAAO,MAAM,qCAAqC;;EAEvC,CAAC;AAEZ,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BpC,CAAC;AAEZ,eAAO,MAAM,oBAAoB,0cAiBvB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;AAC/F,MAAM,MAAM,mCAAmC,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAC5E,MAAM,MAAM,0BAA0B,GAAG,QAAQ,GAAG,oBAAoB,GAAG,eAAe,GAAG,SAAS,CAAC;AACvG,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;AAC1F,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG,eAAe,GAAG,UAAU,GAAG,SAAS,CAAC;AAC9F,MAAM,MAAM,+BAA+B,GAAG,UAAU,GAAG,QAAQ,GAAG,eAAe,GAAG,UAAU,CAAC;AACnG,MAAM,MAAM,8BAA8B,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAC;AACpF,MAAM,MAAM,wBAAwB,GAAG,QAAQ,MAAM,EAAE,CAAC;AACxD,MAAM,MAAM,6BAA6B,GAAG,QAAQ,MAAM,EAAE,CAAC;AAE7D,MAAM,MAAM,gCAAgC,GACxC,2BAA2B,GAC3B,qCAAqC,GACrC,gCAAgC,GAChC,OAAO,gBAAgB,EAAE,CAAC;AAE9B,MAAM,WAAW,8BAA8B;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,qBAAqB,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,uBAAuB,CAAC;IACnC,UAAU,EAAE,mCAAmC,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,eAAe,EAAE,0BAA0B,CAAC;IAC5C,eAAe,EAAE,0BAA0B,CAAC;IAC5C,KAAK,EAAE,8BAA8B,CAAC;IACtC,IAAI,EAAE,8BAA8B,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,wBAAwB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;IACjE,KAAK,EAAE,CAAC,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,CAAC;IACnD,UAAU,EAAE,wBAAwB,EAAE,CAAC;IACvC,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,aAAa,EAAE,wBAAwB,EAAE,CAAC;IAC1C,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,gBAAgB,EAAE,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,CAAC;IACzE,gBAAgB,EAAE,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,CAAC;CAC1E;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,8BAA8B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,0BAA0B,CAAC;IAC5C,eAAe,EAAE,0BAA0B,CAAC;IAC5C,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,0BAA0B,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,mCAAmC,CAAC;IAChD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,8BAA8B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,mCAAmC,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,iCAAkC,SAAQ,kCAAkC;IAC3F,IAAI,EAAE,mBAAmB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,0BAA0B,CAAC;IAC5C,eAAe,EAAE,0BAA0B,CAAC;IAC5C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,0CAA2C,SAAQ,kCAAkC;IACpG,IAAI,EAAE,6BAA6B,CAAC;IACpC,aAAa,EAAE,OAAO,CACpB,gBAAgB,EAChB,SAAS,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,GAAG,aAAa,MAAM,EAAE,GAAG,8BAA8B,CACrH,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,0BAA0B,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,qCAAsC,SAAQ,kCAAkC;IAC/F,IAAI,EAAE,wBAAwB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,qBAAqB,EAAE,OAAO,CAAC,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,eAAe,EAAE,+BAA+B,CAAC;CAClD;AAED,MAAM,MAAM,8BAA8B,GACtC,iCAAiC,GACjC,0CAA0C,GAC1C,qCAAqC,CAAC;AAE1C,MAAM,WAAW,gCAAgC;IAC/C,KAAK,EAAE,8BAA8B,GAAG;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAClF,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,wBAAwB,EAAE,CAAC;IAC5C,YAAY,EAAE,wBAAwB,EAAE,CAAC;IACzC,SAAS,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,CAAC;IACxD,qBAAqB,EAAE,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,CAAC;IAC9E,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,OAAO,0CAA0C,CAAC;IACjE,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,UAAU,EAAE,mBAAmB,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QACN,6BAA6B,EAAE,MAAM,CAAC;QACtC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,kBAAkB,EAAE,MAAM,CAAC;QAC3B,4BAA4B,EAAE,MAAM,CAAC;QACrC,8BAA8B,EAAE,MAAM,CAAC;QACvC,mBAAmB,EAAE,8BAA8B,CAAC;KACrD,CAAC;IACF,MAAM,EAAE,+BAA+B,CAAC;IACxC,cAAc,EAAE,uBAAuB,EAAE,CAAC;IAC1C,SAAS,EAAE,gCAAgC,EAAE,CAAC;IAC9C,MAAM,EAAE,8BAA8B,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,gCAAgC,CAAC,CAAC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,CAAC,EAAE,CAAC;CACZ;AAED,MAAM,MAAM,oCAAoC,GAC5C,yBAAyB,GACzB,qBAAqB,GACrB,wBAAwB,GACxB,8BAA8B,GAC9B,+BAA+B,GAC/B,8BAA8B,GAC9B,0BAA0B,GAC1B,sBAAsB,GACtB,eAAe,GACf,eAAe,GACf,aAAa,GACb,yBAAyB,GACzB,yBAAyB,GACzB,yBAAyB,GACzB,yBAAyB,GACzB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACnF,UAAU,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,CAAC;IACvE,SAAS,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,CAAC;IACtE,aAAa,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,CAAC;IAC1E,OAAO,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,CAAC;IACpE,gBAAgB,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACzG,gBAAgB,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,CAAC,CAAC;CAC1G;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,6BAA6B,CAAC;IACxC,KAAK,EAAE,8BAA8B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,0BAA0B,CAAC;IAC5C,eAAe,EAAE,0BAA0B,CAAC;IAC5C,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACxC,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,0BAA0B,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpF,UAAU,EAAE,mCAAmC,CAAC;IAChD,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACxC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,8BAA8B,GAAG;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAClF,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,wBAAwB,EAAE,CAAC;IAC5C,YAAY,EAAE,wBAAwB,EAAE,CAAC;IACzC,SAAS,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,CAAC;IACxD,qBAAqB,EAAE,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,CAAC;IAC9E,eAAe,EAAE,6BAA6B,EAAE,CAAC;IACjD,UAAU,EAAE,mCAAmC,CAAC;CACjD;AAED,UAAU,iCAAiC;IACzC,KAAK,EAAE,8BAA8B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,mCAAmC,CAAC;IAChD,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,OAAO,EAAE,gCAAgC,EAAE,CAAC;IAC5C,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACxC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,8BAA+B,SAAQ,iCAAiC;IACvF,OAAO,EAAE,6BAA6B,CAAC;IACvC,WAAW,EAAE,kBAAkB,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,0BAA0B,CAAC;IAC5C,eAAe,EAAE,0BAA0B,CAAC;IAC5C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,uCAAwC,SAAQ,iCAAiC;IAChG,OAAO,EAAE,6BAA6B,CAAC;IACvC,WAAW,EAAE,2BAA2B,CAAC;IACzC,aAAa,EAAE,OAAO,CACpB,gBAAgB,EAChB,SAAS,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,GAAG,aAAa,MAAM,EAAE,GAAG,8BAA8B,CACrH,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,0BAA0B,CAAC;IAC5C,YAAY,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,kCAAmC,SAAQ,iCAAiC;IAC3F,SAAS,EAAE,6BAA6B,CAAC;IACzC,WAAW,EAAE,sBAAsB,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,qBAAqB,EAAE,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,CAAC;IAC9E,YAAY,EAAE,wBAAwB,EAAE,CAAC;IACzC,eAAe,EAAE,+BAA+B,CAAC;CAClD;AAED,MAAM,MAAM,6BAA6B,GACrC,8BAA8B,GAC9B,uCAAuC,GACvC,kCAAkC,CAAC;AAEvC,MAAM,WAAW,8BAA8B;IAC7C,aAAa,EAAE,OAAO,gDAAgD,CAAC;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,4BAA4B,CAAC;IACrC,cAAc,EAAE,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;IACvE,SAAS,EAAE,gCAAgC,CAAC,6BAA6B,CAAC,CAAC;IAC3E,kBAAkB,EAAE,gCAAgC,CAAC,8BAA8B,CAAC,CAAC;IACrF,iBAAiB,EAAE,gCAAgC,CAAC,uCAAuC,CAAC,CAAC;IAC7F,aAAa,EAAE,gCAAgC,CAAC,kCAAkC,CAAC,CAAC;IACpF,WAAW,EAAE,oCAAoC,EAAE,CAAC;CACrD;AAKD,wBAAgB,yCAAyC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAK/E;AAED,wBAAgB,yCAAyC,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjG"}

package/dist/azure/activityLogAnalysis.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ACTIVITY_LOG_TAG_IDS = exports.PORTAL_ACTIVITY_ANALYSIS_LIMITS_V1 = exports.CONFORMED_ACTIVITY_ANALYSIS_LIMITS_V1 = exports.PORTAL_ACTIVITY_ANALYSIS_RESPONSE_SCHEMA_VERSION = exports.CONFORMED_ACTIVITY_ANALYSIS_SCHEMA_VERSION = exports.ACTIVITY_LOG_ANALYSIS_VERSION = exports.ACTIVITY_LOG_TAXONOMY_VERSION = void 0;
+exports.buildConformedActivityAnalysisLogicalName = buildConformedActivityAnalysisLogicalName;
+exports.parseConformedActivityAnalysisLogicalName = parseConformedActivityAnalysisLogicalName;
+exports.ACTIVITY_LOG_TAXONOMY_VERSION = 'v1';
+exports.ACTIVITY_LOG_ANALYSIS_VERSION = 'v1';
+exports.CONFORMED_ACTIVITY_ANALYSIS_SCHEMA_VERSION = 1;
+exports.PORTAL_ACTIVITY_ANALYSIS_RESPONSE_SCHEMA_VERSION = 1;
+exports.CONFORMED_ACTIVITY_ANALYSIS_LIMITS_V1 = Object.freeze({
+    sourceShardFingerprintCodeUnits: 512 * 1024,
+});
+exports.PORTAL_ACTIVITY_ANALYSIS_LIMITS_V1 = Object.freeze({
+    tagAssignmentsPerEvent: 32,
+    facetTagRows: 64,
+    facetOperationRows: 4096,
+    facetProviderRows: 512,
+    facetResourceTypeRows: 4096,
+    facetResultRows: 256,
+    facetOperationEffectRows: 8,
+    facetExecutionOriginRows: 8,
+    activitySeries: 10000,
+    resourceSummaries: 10000,
+    operationSummaries: 4096,
+    securitySensitive: 4096,
+    powerPatterns: 4096,
+    operationCountsPerItem: 256,
+    resultCountsPerItem: 256,
+    tagCountsPerItem: 64,
+    executionOriginCountsPerItem: 8,
+    evidenceIdsPerItem: 20,
+    reasonCodesPerItem: 32,
+    resourceIdCodeUnits: 2048,
+    operationCodeUnits: 512,
+    providerCodeUnits: 256,
+    resourceTypeCodeUnits: 512,
+    resourceNameCodeUnits: 512,
+    reasonCodeUnits: 128,
+    responseUtf8Bytes: 33554432,
+});
+exports.ACTIVITY_LOG_TAG_IDS = [
+    'actor.manual',
+    'actor.workload-automation',
+    'actor.azure-platform',
+    'actor.unknown',
+    'change.material',
+    'intent.credential-access',
+    'intent.remote-execution',
+    'intent.power-control',
+    'security.sensitive-operation',
+    'security.credential-access',
+    'security.remote-execution',
+    'security.privileged-access-change',
+    'security.security-boundary-change',
+    'security.protection-control-change',
+    'security.destructive-action',
+    'scheduler.power-operation',
+];
+const CANONICAL_MONTH = /^\d{4}-(0[1-9]|1[0-2])$/;
+const CONFORMED_ACTIVITY_ANALYSIS_NAME = /^activity-logs\/activity_analysis-(\d{4}-(?:0[1-9]|1[0-2]))\.json$/;
+function buildConformedActivityAnalysisLogicalName(month) {
+    if (!CANONICAL_MONTH.test(month)) {
+        throw new Error('Activity Analysis month must use canonical YYYY-MM format.');
+    }
+    return `activity-logs/activity_analysis-${month}.json`;
+}
+function parseConformedActivityAnalysisLogicalName(logicalName) {
+    return CONFORMED_ACTIVITY_ANALYSIS_NAME.exec(logicalName)?.[1];
+}
+//# sourceMappingURL=activityLogAnalysis.js.map

package/dist/azure/activityLogAnalysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activityLogAnalysis.js","sourceRoot":"","sources":["../../src/azure/activityLogAnalysis.ts"],"names":[],"mappings":";;;AAuXA,8FAKC;AAED,8FAEC;AAhYY,QAAA,6BAA6B,GAAG,IAAa,CAAC;AAC9C,QAAA,6BAA6B,GAAG,IAAa,CAAC;AAC9C,QAAA,0CAA0C,GAAG,CAAU,CAAC;AACxD,QAAA,gDAAgD,GAAG,CAAU,CAAC;AAE9D,QAAA,qCAAqC,GAAG,MAAM,CAAC,MAAM,CAAC;IACjE,+BAA+B,EAAE,GAAG,GAAG,IAAI;CACnC,CAAC,CAAC;AAEC,QAAA,kCAAkC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9D,sBAAsB,EAAE,EAAE;IAC1B,YAAY,EAAE,EAAE;IAChB,kBAAkB,EAAE,IAAK;IACzB,iBAAiB,EAAE,GAAG;IACtB,qBAAqB,EAAE,IAAK;IAC5B,eAAe,EAAE,GAAG;IACpB,wBAAwB,EAAE,CAAC;IAC3B,wBAAwB,EAAE,CAAC;IAC3B,cAAc,EAAE,KAAM;IACtB,iBAAiB,EAAE,KAAM;IACzB,kBAAkB,EAAE,IAAK;IACzB,iBAAiB,EAAE,IAAK;IACxB,aAAa,EAAE,IAAK;IACpB,sBAAsB,EAAE,GAAG;IAC3B,mBAAmB,EAAE,GAAG;IACxB,gBAAgB,EAAE,EAAE;IACpB,4BAA4B,EAAE,CAAC;IAC/B,kBAAkB,EAAE,EAAE;IACtB,kBAAkB,EAAE,EAAE;IACtB,mBAAmB,EAAE,IAAK;IAC1B,kBAAkB,EAAE,GAAG;IACvB,iBAAiB,EAAE,GAAG;IACtB,qBAAqB,EAAE,GAAG;IAC1B,qBAAqB,EAAE,GAAG;IAC1B,eAAe,EAAE,GAAG;IACpB,iBAAiB,EAAE,QAAU;CACrB,CAAC,CAAC;AAEC,QAAA,oBAAoB,GAAG;IAClC,cAAc;IACd,2BAA2B;IAC3B,sBAAsB;IACtB,eAAe;IACf,iBAAiB;IACjB,0BAA0B;IAC1B,yBAAyB;IACzB,sBAAsB;IACtB,8BAA8B;IAC9B,4BAA4B;IAC5B,2BAA2B;IAC3B,mCAAmC;IACnC,mCAAmC;IACnC,oCAAoC;IACpC,6BAA6B;IAC7B,2BAA2B;CACnB,CAAC;AA6TX,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAClD,MAAM,gCAAgC,GAAG,oEAAoE,CAAC;AAE9G,SAAgB,yCAAyC,CAAC,KAAa;IACrE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,mCAAmC,KAAK,OAAO,CAAC;AACzD,CAAC;AAED,SAAgB,yCAAyC,CAAC,WAAmB;IAC3E,OAAO,gCAAgC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/dist/azure/activityLogAnalysisPublicValidation.d.ts

@@ -0,0 +1,8 @@
+import { type PortalActivityAnalysisResponse } from './activityLogAnalysis';
+import { isPortalActivityAnalysisGroupId, isPortalActivityEvidenceId, isPortalActivityLogClassification } from './activityLogAnalysisPublicValidationHelpers';
+export { isPortalActivityAnalysisGroupId, isPortalActivityEvidenceId, isPortalActivityLogClassification };
+/** Validates the exact, bounded, consumer-safe V1 Activity Analysis response. */
+export declare const isPortalActivityAnalysisResponse: (value: unknown) => value is PortalActivityAnalysisResponse;
+/** Throws when a value is not the exact public V1 Activity Analysis response. */
+export declare function assertPortalActivityAnalysisResponse(value: unknown): asserts value is PortalActivityAnalysisResponse;
+//# sourceMappingURL=activityLogAnalysisPublicValidation.d.ts.map

package/dist/azure/activityLogAnalysisPublicValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activityLogAnalysisPublicValidation.d.ts","sourceRoot":"","sources":["../../src/azure/activityLogAnalysisPublicValidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,8BAA8B,EAQpC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAiBL,+BAA+B,EAC/B,0BAA0B,EAC1B,iCAAiC,EAUlC,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAAE,+BAA+B,EAAE,0BAA0B,EAAE,iCAAiC,EAAE,CAAC;AA0S1G,iFAAiF;AACjF,eAAO,MAAM,gCAAgC,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,8BAsI1E,CAAC;AAEF,iFAAiF;AACjF,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,8BAA8B,CAEpH"}