@spottoai/types-package 1.0.2-dev1138.12 → 1.0.2-dev1138.13

package/dist/esm/scheduler/bastionScheduleProfile.js

@@ -1,206 +0,0 @@
-const MAX_IDENTIFIER_LENGTH = 2048;
-const MAX_ETAG_LENGTH = 4096;
-const MAX_LOCATION_LENGTH = 128;
-const MAX_IP_CONFIGURATION_NAME_LENGTH = 80;
-const MAX_TAG_COUNT = 50;
-const MAX_TAG_NAME_LENGTH = 512;
-const MAX_TAG_VALUE_LENGTH = 256;
-function isPlainRecord(value) {
-    if (typeof value !== 'object' || value === null || Array.isArray(value))
-        return false;
-    const prototype = Reflect.getPrototypeOf(value);
-    return prototype === Object.prototype || prototype === null;
-}
-function hasOnlyFields(value, fields) {
-    const allowed = new Set(fields);
-    return Object.keys(value).every(field => allowed.has(field));
-}
-function readString(value, maximumLength) {
-    if (typeof value !== 'string' || value.trim().length === 0 || value.length > maximumLength)
-        return undefined;
-    return value.trim();
-}
-function normalizeResourceId(value) {
-    const resourceId = readString(value, MAX_IDENTIFIER_LENGTH);
-    if (!resourceId || resourceId.includes('\\') || resourceId.includes('//') || resourceId.endsWith('/'))
-        return undefined;
-    return resourceId.toLowerCase();
-}
-function readBastionSubscriptionId(resourceId) {
-    return /^\/subscriptions\/([a-z0-9-]+)\/resourcegroups\/[a-z0-9._()-]+\/providers\/microsoft\.network\/bastionhosts\/[a-z0-9._()-]+$/.exec(resourceId)?.[1];
-}
-function readBoolean(value) {
-    return value === undefined ? false : typeof value === 'boolean' ? value : undefined;
-}
-function readTags(value) {
-    if (value === undefined)
-        return {};
-    if (!isPlainRecord(value) || Object.keys(value).length > MAX_TAG_COUNT)
-        return undefined;
-    const entries = [];
-    for (const key of Object.keys(value).sort()) {
-        const tagValue = value[key];
-        if (key.length === 0 || key.length > MAX_TAG_NAME_LENGTH || typeof tagValue !== 'string' || tagValue.length > MAX_TAG_VALUE_LENGTH) {
-            return undefined;
-        }
-        entries.push([key, tagValue]);
-    }
-    return Object.fromEntries(entries);
-}
-function readZones(value) {
-    if (value === undefined)
-        return undefined;
-    if (!Array.isArray(value) ||
-        value.length < 1 ||
-        value.length > 3 ||
-        !value.every(zone => typeof zone === 'string' && /^[1-3]$/.test(zone)) ||
-        new Set(value).size !== value.length) {
-        return false;
-    }
-    return [...value].sort();
-}
-function readSku(value) {
-    if (!isPlainRecord(value) || !hasOnlyFields(value, ['name']))
-        return undefined;
-    const name = value['name'];
-    return name === 'Basic' || name === 'Standard' || name === 'Premium' ? name : undefined;
-}
-/** Normalizes an eligible public dedicated Azure Bastion profile for schedule readiness and recovery. */
-export function readSupportedBastionScheduleProfileV1(value, expectedResourceId) {
-    try {
-        if (!isPlainRecord(value) ||
-            !hasOnlyFields(value, ['name', 'id', 'etag', 'type', 'location', 'tags', 'sku', 'properties', 'systemData', 'zones'])) {
-            return undefined;
-        }
-        const normalizedExpectedResourceId = normalizeResourceId(expectedResourceId);
-        const normalizedSourceResourceId = normalizeResourceId(value['id']);
-        const bastionSubscriptionId = normalizedSourceResourceId ? readBastionSubscriptionId(normalizedSourceResourceId) : undefined;
-        const resourceType = readString(value['type'], MAX_IDENTIFIER_LENGTH)?.toLowerCase();
-        const sourceEtag = readString(value['etag'], MAX_ETAG_LENGTH);
-        const location = readString(value['location'], MAX_LOCATION_LENGTH)?.toLowerCase();
-        const tags = readTags(value['tags']);
-        const skuName = readSku(value['sku']);
-        const zones = readZones(value['zones']);
-        if (!normalizedExpectedResourceId ||
-            normalizedSourceResourceId !== normalizedExpectedResourceId ||
-            !bastionSubscriptionId ||
-            resourceType !== 'microsoft.network/bastionhosts' ||
-            !sourceEtag ||
-            !location ||
-            !tags ||
-            !skuName ||
-            zones === false) {
-            return undefined;
-        }
-        if (!isPlainRecord(value['properties']) ||
-            !hasOnlyFields(value['properties'], [
-                'provisioningState',
-                'dnsName',
-                'publicUri',
-                'scaleUnits',
-                'disableCopyPaste',
-                'enableFileCopy',
-                'enableIpConnect',
-                'enableShareableLink',
-                'enableTunneling',
-                'enableKerberos',
-                'enableSessionRecording',
-                'enablePrivateOnlyBastion',
-                'ipConfigurations',
-                'networkAcls',
-                'virtualNetwork',
-            ]) ||
-            value['properties']['provisioningState'] !== 'Succeeded' ||
-            value['properties']['networkAcls'] !== undefined ||
-            value['properties']['virtualNetwork'] !== undefined) {
-            return undefined;
-        }
-        const properties = value['properties'];
-        const scaleUnits = properties['scaleUnits'];
-        if (typeof scaleUnits !== 'number' ||
-            !Number.isInteger(scaleUnits) ||
-            (skuName === 'Basic' ? scaleUnits !== 2 : scaleUnits < 2 || scaleUnits > 50)) {
-            return undefined;
-        }
-        const disableCopyPaste = readBoolean(properties['disableCopyPaste']);
-        const enableFileCopy = readBoolean(properties['enableFileCopy']);
-        const enableIpConnect = readBoolean(properties['enableIpConnect']);
-        const enableShareableLink = readBoolean(properties['enableShareableLink']);
-        const enableTunneling = readBoolean(properties['enableTunneling']);
-        const enableKerberos = readBoolean(properties['enableKerberos']);
-        const enableSessionRecording = readBoolean(properties['enableSessionRecording']);
-        const enablePrivateOnlyBastion = readBoolean(properties['enablePrivateOnlyBastion']);
-        if (disableCopyPaste === undefined ||
-            enableFileCopy === undefined ||
-            enableIpConnect === undefined ||
-            enableShareableLink === undefined ||
-            enableTunneling === undefined ||
-            enableKerberos === undefined ||
-            enableSessionRecording !== false ||
-            enablePrivateOnlyBastion !== false ||
-            (skuName === 'Basic' && (enableFileCopy || enableIpConnect || enableShareableLink || enableTunneling || enableKerberos))) {
-            return undefined;
-        }
-        const configurations = properties['ipConfigurations'];
-        if (!Array.isArray(configurations) || configurations.length !== 1)
-            return undefined;
-        const configuration = configurations[0];
-        if (!isPlainRecord(configuration) ||
-            !hasOnlyFields(configuration, ['name', 'id', 'etag', 'type', 'properties']) ||
-            !isPlainRecord(configuration['properties']) ||
-            !hasOnlyFields(configuration['properties'], ['provisioningState', 'privateIPAllocationMethod', 'publicIPAddress', 'subnet']) ||
-            (configuration['properties']['provisioningState'] !== undefined && configuration['properties']['provisioningState'] !== 'Succeeded') ||
-            configuration['properties']['privateIPAllocationMethod'] !== 'Dynamic') {
-            return undefined;
-        }
-        const ipConfigurationName = readString(configuration['name'], MAX_IP_CONFIGURATION_NAME_LENGTH);
-        const publicIp = configuration['properties']['publicIPAddress'];
-        const subnet = configuration['properties']['subnet'];
-        if (!ipConfigurationName ||
-            !isPlainRecord(publicIp) ||
-            !hasOnlyFields(publicIp, ['id']) ||
-            !isPlainRecord(subnet) ||
-            !hasOnlyFields(subnet, ['id'])) {
-            return undefined;
-        }
-        const publicIpId = normalizeResourceId(publicIp['id']);
-        const subnetId = normalizeResourceId(subnet['id']);
-        const publicIpMatch = publicIpId
-            ? /^\/subscriptions\/([a-z0-9-]+)\/resourcegroups\/[a-z0-9._()-]+\/providers\/microsoft\.network\/publicipaddresses\/[a-z0-9._()-]+$/.exec(publicIpId)
-            : undefined;
-        const subnetMatch = subnetId
-            ? /^\/subscriptions\/([a-z0-9-]+)\/resourcegroups\/[a-z0-9._()-]+\/providers\/microsoft\.network\/virtualnetworks\/[a-z0-9._()-]+\/subnets\/azurebastionsubnet$/.exec(subnetId)
-            : undefined;
-        if (!publicIpId ||
-            !publicIpMatch ||
-            publicIpMatch[1] !== bastionSubscriptionId ||
-            !subnetId ||
-            !subnetMatch ||
-            subnetMatch[1] !== bastionSubscriptionId) {
-            return undefined;
-        }
-        return {
-            skuName,
-            location,
-            ...(zones ? { zones } : {}),
-            scaleUnits,
-            disableCopyPaste,
-            enableFileCopy,
-            enableIpConnect,
-            enableShareableLink,
-            enableTunneling,
-            enableKerberos,
-            enableSessionRecording: false,
-            enablePrivateOnlyBastion: false,
-            tags,
-            ipConfigurationName,
-            publicIpId,
-            subnetId,
-            virtualNetworkId: subnetId.slice(0, subnetId.lastIndexOf('/subnets/')),
-            sourceEtag,
-        };
-    }
-    catch {
-        return undefined;
-    }
-}

package/dist/esm/scheduler/bastionScheduleValidation.js

@@ -1,401 +0,0 @@
-const MAX_ID_LENGTH = 2048;
-const MAX_NAME_LENGTH = 120;
-const MAX_NOTES_LENGTH = 1000;
-const MAX_ACTION_COUNT = 64;
-const MAX_WINDOWS = 14;
-const MAX_WRITE_REQUEST_BYTES = 32 * 1024;
-const MAX_PUBLIC_DTO_BYTES = 16 * 1024;
-const MINUTES_PER_WEEK = 7 * 24 * 60;
-const readinessStatuses = new Set(['confirmed', 'missing', 'unknown', 'unsupported']);
-const readinessReasonCodes = new Set([
-    'feature-disabled',
-    'resource-not-found',
-    'unsupported-profile',
-    'unsupported-region',
-    'missing-permission',
-    'permission-unknown',
-    'management-lock',
-]);
-const availabilityPhases = new Set(['available', 'removing', 'absent', 'restoring']);
-const availabilityResults = new Set(['succeeded', 'skipped', 'blocked', 'failed', 'pending']);
-const availabilityReasonCodes = new Set([
-    ...readinessReasonCodes,
-    'active-sessions',
-    'session-state-unknown',
-    'snapshot-failed',
-    'active-snapshot-missing',
-    'source-drift',
-    'dependency-missing',
-    'dependency-drift',
-    'stale-run',
-    'continuation-overdue',
-    'azure-operation-failed',
-    'restore-timeout',
-]);
-function isPlainRecord(value) {
-    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
-        return false;
-    }
-    try {
-        const prototype = Object.getPrototypeOf(value);
-        return prototype === Object.prototype || prototype === null;
-    }
-    catch {
-        return false;
-    }
-}
-function hasExactFields(value, requiredFields, optionalFields = []) {
-    if (!isPlainRecord(value)) {
-        return false;
-    }
-    try {
-        const allowedFields = new Set([...requiredFields, ...optionalFields]);
-        const keys = Object.keys(value);
-        return requiredFields.every(field => Object.prototype.hasOwnProperty.call(value, field)) && keys.every(field => allowedFields.has(field));
-    }
-    catch {
-        return false;
-    }
-}
-function utf8ByteLength(value) {
-    let bytes = 0;
-    for (let index = 0; index < value.length; index += 1) {
-        const code = value.charCodeAt(index);
-        if (code <= 0x7f) {
-            bytes += 1;
-        }
-        else if (code <= 0x7ff) {
-            bytes += 2;
-        }
-        else if (code >= 0xd800 &&
-            code <= 0xdbff &&
-            index + 1 < value.length &&
-            value.charCodeAt(index + 1) >= 0xdc00 &&
-            value.charCodeAt(index + 1) <= 0xdfff) {
-            bytes += 4;
-            index += 1;
-        }
-        else {
-            bytes += 3;
-        }
-    }
-    return bytes;
-}
-function isWithinJsonSize(value, maximumBytes) {
-    try {
-        const json = JSON.stringify(value);
-        return typeof json === 'string' && utf8ByteLength(json) <= maximumBytes;
-    }
-    catch {
-        return false;
-    }
-}
-function isBoundedString(value, maximumLength, allowEmpty = false) {
-    return typeof value === 'string' && value.length <= maximumLength && (allowEmpty || value.trim().length > 0);
-}
-function isPositiveSafeInteger(value) {
-    return Number.isSafeInteger(value) && typeof value === 'number' && value > 0;
-}
-function isIsoUtcTimestamp(value) {
-    if (typeof value !== 'string' || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?Z$/.test(value)) {
-        return false;
-    }
-    const parsed = new Date(value);
-    if (!Number.isFinite(parsed.getTime())) {
-        return false;
-    }
-    const normalizedInput = value.includes('.')
-        ? value.replace(/\.(\d{1,3})Z$/, (_, fraction) => `.${fraction.padEnd(3, '0')}Z`)
-        : value.replace('Z', '.000Z');
-    return parsed.toISOString() === normalizedInput;
-}
-function localTimeToMinutes(value) {
-    if (typeof value !== 'string' || !/^(?:[01]\d|2[0-3]):[0-5]\d$/.test(value)) {
-        return undefined;
-    }
-    const [hours, minutes] = value.split(':');
-    return Number(hours) * 60 + Number(minutes);
-}
-function isUniqueBoundedStringArray(value, minimumLength, maximumLength) {
-    if (!Array.isArray(value) ||
-        value.length < minimumLength ||
-        value.length > maximumLength ||
-        !value.every(item => isBoundedString(item, MAX_ID_LENGTH))) {
-        return false;
-    }
-    return new Set(value).size === value.length;
-}
-function isAvailabilityConfiguration(value) {
-    if (!hasExactFields(value, ['accessWindows'])) {
-        return false;
-    }
-    const windows = value.accessWindows;
-    if (!Array.isArray(windows) || windows.length < 1 || windows.length > MAX_WINDOWS) {
-        return false;
-    }
-    const windowIds = new Set();
-    const intervals = [];
-    for (const window of windows) {
-        if (!hasExactFields(window, ['windowId', 'daysOfWeek', 'accessStartTimeLocal', 'accessEndTimeLocal']) ||
-            !isBoundedString(window.windowId, MAX_ID_LENGTH) ||
-            windowIds.has(window.windowId)) {
-            return false;
-        }
-        windowIds.add(window.windowId);
-        if (!Array.isArray(window.daysOfWeek) ||
-            window.daysOfWeek.length < 1 ||
-            window.daysOfWeek.length > 7 ||
-            !window.daysOfWeek.every(day => Number.isInteger(day) && typeof day === 'number' && day >= 0 && day <= 6) ||
-            new Set(window.daysOfWeek).size !== window.daysOfWeek.length) {
-            return false;
-        }
-        const startTime = localTimeToMinutes(window.accessStartTimeLocal);
-        const endTime = localTimeToMinutes(window.accessEndTimeLocal);
-        if (startTime === undefined || endTime === undefined || startTime === endTime) {
-            return false;
-        }
-        for (const day of window.daysOfWeek) {
-            const start = day * 24 * 60 + startTime;
-            const end = day * 24 * 60 + endTime + (endTime <= startTime ? 24 * 60 : 0);
-            intervals.push({ start, end });
-        }
-    }
-    return !intervals.some((left, leftIndex) => intervals.some((right, rightIndex) => {
-        if (rightIndex <= leftIndex) {
-            return false;
-        }
-        return [-MINUTES_PER_WEEK, 0, MINUTES_PER_WEEK].some(offset => {
-            const shiftedStart = right.start + offset;
-            const shiftedEnd = right.end + offset;
-            return left.start < shiftedEnd && shiftedStart < left.end;
-        });
-    }));
-}
-export function isBastionAvailabilityWeeklyScheduleWriteRequest(value) {
-    if (!isWithinJsonSize(value, MAX_WRITE_REQUEST_BYTES) ||
-        !hasExactFields(value, [
-            'definitionType',
-            'name',
-            'providerName',
-            'providerScopeId',
-            'cloudAccountId',
-            'resourceId',
-            'timezone',
-            'acknowledgementVersion',
-            'configuration',
-        ], ['targetResourceType', 'notes'])) {
-        return false;
-    }
-    return (value.definitionType === 'bastion-availability-weekly' &&
-        isBoundedString(value.name, MAX_NAME_LENGTH) &&
-        isBoundedString(value.providerName, MAX_ID_LENGTH) &&
-        isBoundedString(value.providerScopeId, MAX_ID_LENGTH) &&
-        isBoundedString(value.cloudAccountId, MAX_ID_LENGTH) &&
-        isBoundedString(value.resourceId, MAX_ID_LENGTH) &&
-        isBoundedString(value.timezone, MAX_ID_LENGTH) &&
-        (value.targetResourceType === undefined || value.targetResourceType === 'Microsoft.Network/bastionHosts') &&
-        (value.notes === undefined || isBoundedString(value.notes, MAX_NOTES_LENGTH, true)) &&
-        value.acknowledgementVersion === 'bastion-delete-recreate-v1' &&
-        isAvailabilityConfiguration(value.configuration));
-}
-export function isBastionAvailabilityWeeklyScheduleDefinition(value) {
-    if (!isWithinJsonSize(value, MAX_PUBLIC_DTO_BYTES) ||
-        !hasExactFields(value, [
-            'definitionId',
-            'definitionClass',
-            'definitionType',
-            'companyId',
-            'providerName',
-            'providerScopeId',
-            'cloudAccountId',
-            'resourceId',
-            'targetResourceType',
-            'name',
-            'timezone',
-            'status',
-            'definitionRevision',
-            'acknowledgementVersion',
-            'configuration',
-            'createdAtUtc',
-            'updatedAtUtc',
-        ], ['notes', 'compiledScheduleIds', 'nextRunUtc', 'lastRunAtUtc', 'lastSuccessfulRunAtUtc', 'lastRunStatus', 'createdByUserId', 'updatedByUserId'])) {
-        return false;
-    }
-    return (value.definitionId !== undefined &&
-        isBoundedString(value.definitionId, MAX_ID_LENGTH) &&
-        value.definitionClass === 'composite' &&
-        value.definitionType === 'bastion-availability-weekly' &&
-        isBoundedString(value.companyId, MAX_ID_LENGTH) &&
-        isBoundedString(value.providerName, MAX_ID_LENGTH) &&
-        isBoundedString(value.providerScopeId, MAX_ID_LENGTH) &&
-        isBoundedString(value.cloudAccountId, MAX_ID_LENGTH) &&
-        isBoundedString(value.resourceId, MAX_ID_LENGTH) &&
-        value.targetResourceType === 'Microsoft.Network/bastionHosts' &&
-        isBoundedString(value.name, MAX_NAME_LENGTH) &&
-        isBoundedString(value.timezone, MAX_ID_LENGTH) &&
-        (value.status === 'active' || value.status === 'paused') &&
-        isPositiveSafeInteger(value.definitionRevision) &&
-        value.acknowledgementVersion === 'bastion-delete-recreate-v1' &&
-        isAvailabilityConfiguration(value.configuration) &&
-        (value.notes === undefined || isBoundedString(value.notes, MAX_NOTES_LENGTH, true)) &&
-        (value.compiledScheduleIds === undefined || isUniqueBoundedStringArray(value.compiledScheduleIds, 0, 28)) &&
-        (value.nextRunUtc === undefined || isIsoUtcTimestamp(value.nextRunUtc)) &&
-        (value.lastRunAtUtc === undefined || isIsoUtcTimestamp(value.lastRunAtUtc)) &&
-        (value.lastSuccessfulRunAtUtc === undefined || isIsoUtcTimestamp(value.lastSuccessfulRunAtUtc)) &&
-        (value.lastRunStatus === undefined ||
-            value.lastRunStatus === 'success' ||
-            value.lastRunStatus === 'dispatch-failed' ||
-            value.lastRunStatus === 'dispatching') &&
-        isIsoUtcTimestamp(value.createdAtUtc) &&
-        isIsoUtcTimestamp(value.updatedAtUtc) &&
-        (value.createdByUserId === undefined || isBoundedString(value.createdByUserId, MAX_ID_LENGTH)) &&
-        (value.updatedByUserId === undefined || isBoundedString(value.updatedByUserId, MAX_ID_LENGTH)));
-}
-export function isBastionScheduleRun(value) {
-    if (!isWithinJsonSize(value, MAX_PUBLIC_DTO_BYTES) ||
-        !isPlainRecord(value) ||
-        (value['compiledOperation'] !== 'remove' && value['compiledOperation'] !== 'restore')) {
-        return false;
-    }
-    const commonRequiredFields = [
-        'scheduleId',
-        'scheduleRunId',
-        'targetType',
-        'selectorType',
-        'scheduleType',
-        'providerScopeId',
-        'cloudAccountId',
-        'resourceId',
-        'definitionId',
-        'definitionClass',
-        'definitionType',
-        'compiledRuleId',
-        'compiledOperation',
-        'definitionRevision',
-        'scheduledForUtc',
-    ];
-    const requiredFields = value['compiledOperation'] === 'remove'
-        ? [...commonRequiredFields, 'controlGeneration']
-        : commonRequiredFields;
-    if (!hasExactFields(value, requiredFields, [
-        'scheduleName',
-        'scheduleGroupId',
-        'scheduleGroupType',
-        'targetCount',
-        'createdByUserId',
-        'updatedByUserId',
-    ])) {
-        return false;
-    }
-    return (isBoundedString(value.scheduleId, MAX_ID_LENGTH) &&
-        isBoundedString(value.scheduleRunId, MAX_ID_LENGTH) &&
-        (value.scheduleName === undefined || isBoundedString(value.scheduleName, MAX_NAME_LENGTH)) &&
-        value.targetType === 'resource-operation' &&
-        value.selectorType === 'single-resource' &&
-        value.scheduleType === 'recurring' &&
-        isBoundedString(value.providerScopeId, MAX_ID_LENGTH) &&
-        isBoundedString(value.cloudAccountId, MAX_ID_LENGTH) &&
-        isBoundedString(value.resourceId, MAX_ID_LENGTH) &&
-        isBoundedString(value.definitionId, MAX_ID_LENGTH) &&
-        value.definitionClass === 'composite' &&
-        value.definitionType === 'bastion-availability-weekly' &&
-        isBoundedString(value.compiledRuleId, MAX_ID_LENGTH) &&
-        isPositiveSafeInteger(value.definitionRevision) &&
-        isIsoUtcTimestamp(value.scheduledForUtc) &&
-        (value.scheduleGroupId === undefined || isBoundedString(value.scheduleGroupId, MAX_ID_LENGTH)) &&
-        (value.scheduleGroupType === undefined || value.scheduleGroupType === 'resource-schedule-definition') &&
-        (value.targetCount === undefined || value.targetCount === 1) &&
-        (value.createdByUserId === undefined || isBoundedString(value.createdByUserId, MAX_ID_LENGTH)) &&
-        (value.updatedByUserId === undefined || isBoundedString(value.updatedByUserId, MAX_ID_LENGTH)) &&
-        (value.compiledOperation === 'restore' || isPositiveSafeInteger(value.controlGeneration)));
-}
-export function isBastionScheduleControlV1(value) {
-    return (isWithinJsonSize(value, MAX_PUBLIC_DTO_BYTES) &&
-        hasExactFields(value, [
-            'schemaVersion',
-            'companyId',
-            'resourceId',
-            'definitionId',
-            'definitionRevision',
-            'controlGeneration',
-            'desiredStatus',
-            'updatedAtUtc',
-        ]) &&
-        value.schemaVersion === 1 &&
-        isBoundedString(value.companyId, MAX_ID_LENGTH) &&
-        isBoundedString(value.resourceId, MAX_ID_LENGTH) &&
-        isBoundedString(value.definitionId, MAX_ID_LENGTH) &&
-        isPositiveSafeInteger(value.definitionRevision) &&
-        isPositiveSafeInteger(value.controlGeneration) &&
-        (value.desiredStatus === 'active' || value.desiredStatus === 'paused') &&
-        isIsoUtcTimestamp(value.updatedAtUtc));
-}
-export function isBastionScheduleReadinessV1(value) {
-    if (!isWithinJsonSize(value, MAX_PUBLIC_DTO_BYTES) ||
-        !hasExactFields(value, ['schemaVersion', 'status', 'companyId', 'cloudAccountId', 'subscriptionId', 'resourceId', 'requiredActions', 'missingActions', 'checkedAtUtc'], ['reasonCode'])) {
-        return false;
-    }
-    const requiredActions = value.requiredActions;
-    const missingActions = value.missingActions;
-    if (value.schemaVersion !== 1 ||
-        typeof value.status !== 'string' ||
-        !readinessStatuses.has(value.status) ||
-        !isBoundedString(value.companyId, MAX_ID_LENGTH) ||
-        !isBoundedString(value.cloudAccountId, MAX_ID_LENGTH) ||
-        !isBoundedString(value.subscriptionId, MAX_ID_LENGTH) ||
-        !isBoundedString(value.resourceId, MAX_ID_LENGTH) ||
-        !isUniqueBoundedStringArray(requiredActions, 1, MAX_ACTION_COUNT) ||
-        !isUniqueBoundedStringArray(missingActions, 0, MAX_ACTION_COUNT) ||
-        !missingActions.every(action => requiredActions.includes(action)) ||
-        (value.status === 'confirmed' && missingActions.length !== 0) ||
-        (value.status === 'missing' && missingActions.length === 0) ||
-        !isIsoUtcTimestamp(value.checkedAtUtc)) {
-        return false;
-    }
-    return value.reasonCode === undefined || (typeof value.reasonCode === 'string' && readinessReasonCodes.has(value.reasonCode));
-}
-export function isBastionAvailabilityStatusV1(value) {
-    return (isWithinJsonSize(value, MAX_PUBLIC_DTO_BYTES) &&
-        hasExactFields(value, [
-            'schemaVersion',
-            'companyId',
-            'resourceId',
-            'definitionId',
-            'definitionRevision',
-            'phase',
-            'lastOperation',
-            'lastResult',
-            'restoreAvailable',
-            'updatedAtUtc',
-        ], ['reasonCode', 'snapshotCapturedAtUtc']) &&
-        value.schemaVersion === 1 &&
-        isBoundedString(value.companyId, MAX_ID_LENGTH) &&
-        isBoundedString(value.resourceId, MAX_ID_LENGTH) &&
-        isBoundedString(value.definitionId, MAX_ID_LENGTH) &&
-        isPositiveSafeInteger(value.definitionRevision) &&
-        typeof value.phase === 'string' &&
-        availabilityPhases.has(value.phase) &&
-        (value.lastOperation === 'remove' || value.lastOperation === 'restore') &&
-        typeof value.lastResult === 'string' &&
-        availabilityResults.has(value.lastResult) &&
-        (value.reasonCode === undefined || (typeof value.reasonCode === 'string' && availabilityReasonCodes.has(value.reasonCode))) &&
-        (value.snapshotCapturedAtUtc === undefined || isIsoUtcTimestamp(value.snapshotCapturedAtUtc)) &&
-        typeof value.restoreAvailable === 'boolean' &&
-        isIsoUtcTimestamp(value.updatedAtUtc));
-}
-export function isBastionPauseResponse(value) {
-    return (isWithinJsonSize(value, MAX_PUBLIC_DTO_BYTES) &&
-        hasExactFields(value, ['status', 'resourceId', 'controlGeneration', 'requestedAtUtc']) &&
-        (value.status === 'paused' || value.status === 'pause-pending') &&
-        isBoundedString(value.resourceId, MAX_ID_LENGTH) &&
-        isPositiveSafeInteger(value.controlGeneration) &&
-        isIsoUtcTimestamp(value.requestedAtUtc));
-}
-export function isBastionRestoreNowResponse(value) {
-    return (isWithinJsonSize(value, MAX_PUBLIC_DTO_BYTES) &&
-        hasExactFields(value, ['accepted', 'scheduleRunId', 'resourceId', 'requestedAtUtc']) &&
-        typeof value.accepted === 'boolean' &&
-        isBoundedString(value.scheduleRunId, MAX_ID_LENGTH) &&
-        isBoundedString(value.resourceId, MAX_ID_LENGTH) &&
-        isIsoUtcTimestamp(value.requestedAtUtc));
-}

package/dist/identity/microsoftSignInAdminConsent.d.ts

@@ -1,59 +0,0 @@
-/** The server-owned Microsoft admin-consent workflow this contract may start. */
-export type MicrosoftSignInAdminConsentPurpose = 'entraSignIn';
-/** Lifecycle of a tenant-bound Microsoft sign-in admin-consent handoff link. */
-export type MicrosoftSignInAdminConsentStatus = 'pending' | 'processing' | 'verificationRequired' | 'granted' | 'denied' | 'failed' | 'expired';
-/** Creates a handoff link for an administrator to approve Microsoft sign-in. */
-export interface CreateMicrosoftSignInAdminConsentLinkRequest {
-    purpose: MicrosoftSignInAdminConsentPurpose;
-    /** Microsoft Entra tenant ID the administrator must approve. */
-    tenantId: string;
-    /** Requested validity period. The API owns and enforces the allowed range. */
-    expiresInHours?: number;
-    /** Display-only name shown to the administrator. */
-    requestedByName?: string;
-}
-/** One delegated permission displayed before the administrator leaves Spotto. */
-export interface MicrosoftSignInAdminConsentPermission {
-    scope: string;
-    title: string;
-    description: string;
-    resource: string;
-}
-/** One-time creation response for a Microsoft sign-in admin-consent handoff. */
-export interface MicrosoftSignInAdminConsentLinkResponse {
-    purpose: MicrosoftSignInAdminConsentPurpose;
-    status: 'pending';
-    linkId: string;
-    companyId: string;
-    tenantId: string;
-    /** Spotto-hosted handoff URL containing the one-time public token. Clients must not log or persist it. */
-    url: string;
-    expiresAt: string;
-    createdAt: string;
-    createdByUserId?: string;
-}
-/** Public, non-consuming context shown to the Microsoft tenant administrator. */
-export interface MicrosoftSignInAdminConsentContextResponse {
-    purpose: MicrosoftSignInAdminConsentPurpose;
-    status: MicrosoftSignInAdminConsentStatus;
-    /** True only while this particular handoff link can still be started. */
-    usable: boolean;
-    applicationName: string;
-    tenantId: string;
-    permissions: MicrosoftSignInAdminConsentPermission[];
-    requestedByName?: string;
-    requestedByCompanyName?: string;
-    expiresAt: string;
-    completedAt?: string;
-    errorCode?: string;
-    /** Display-safe failure message. It must not contain credentials, tokens, or internal exception details. */
-    errorMessage?: string;
-}
-/** Result of consuming the handoff link immediately before redirecting to Microsoft. */
-export interface MicrosoftSignInAdminConsentStartResponse {
-    /** Microsoft admin-consent URL. It must not be an OAuth authorization-code URL and clients must not log it. */
-    redirectUrl: string;
-    tenantId: string;
-    expiresAt: string;
-}
-//# sourceMappingURL=microsoftSignInAdminConsent.d.ts.map

package/dist/identity/microsoftSignInAdminConsent.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"microsoftSignInAdminConsent.d.ts","sourceRoot":"","sources":["../../src/identity/microsoftSignInAdminConsent.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,MAAM,kCAAkC,GAAG,aAAa,CAAC;AAE/D,gFAAgF;AAChF,MAAM,MAAM,iCAAiC,GAAG,SAAS,GAAG,YAAY,GAAG,sBAAsB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEhJ,gFAAgF;AAChF,MAAM,WAAW,4CAA4C;IAC3D,OAAO,EAAE,kCAAkC,CAAC;IAC5C,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,iFAAiF;AACjF,MAAM,WAAW,qCAAqC;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,gFAAgF;AAChF,MAAM,WAAW,uCAAuC;IACtD,OAAO,EAAE,kCAAkC,CAAC;IAC5C,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,0GAA0G;IAC1G,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,iFAAiF;AACjF,MAAM,WAAW,0CAA0C;IACzD,OAAO,EAAE,kCAAkC,CAAC;IAC5C,MAAM,EAAE,iCAAiC,CAAC;IAC1C,yEAAyE;IACzE,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,qCAAqC,EAAE,CAAC;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4GAA4G;IAC5G,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wFAAwF;AACxF,MAAM,WAAW,wCAAwC;IACvD,+GAA+G;IAC/G,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/identity/microsoftSignInAdminConsent.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=microsoftSignInAdminConsent.js.map

package/dist/identity/microsoftSignInAdminConsent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"microsoftSignInAdminConsent.js","sourceRoot":"","sources":["../../src/identity/microsoftSignInAdminConsent.ts"],"names":[],"mappings":""}