@spottoai/types-package 1.0.2-dev1138.12 → 1.0.2-dev1138.14

package/dist/common/resourceGraph.d.ts

@@ -0,0 +1,137 @@
+import type { ArtifactAccountBinding, ArtifactGeneration, ArtifactProvider } from './artifactGeneration.js';
+import type { CapabilityReasonCode } from './capabilityPassport.js';
+import type { ProviderResourceType, ResourceAttributes, ResourceFamilyId } from './resourceIdentity.js';
+/**
+ * Provider-neutral resource relationship graph published for one provider
+ * account. Families, relationship types, and synthetic types are open
+ * identifiers: a new provider service needs no package change.
+ */
+export declare const RESOURCE_GRAPH_SCHEMA_VERSION: 1;
+/** Package-owned logical artifact name; storage paths remain producer-owned. */
+export declare const RESOURCE_GRAPH_LOGICAL_NAME: "relationships.json.gz";
+export declare const RESOURCE_GRAPH_NODE_KINDS: readonly ["scope", "region", "zone", "group", "resource", "synthetic"];
+export declare const RESOURCE_GRAPH_NODE_ROLES: readonly ["network-baseline", "topology", "workload"];
+export declare const RESOURCE_GRAPH_EDGE_KINDS: readonly ["contains", "depends_on"];
+export declare const RESOURCE_GRAPH_EDGE_CONFIDENCES: readonly ["high", "medium", "low"];
+export declare const RESOURCE_GRAPH_EVIDENCE_METHODS: readonly ["field-derived", "field-reference", "persisted-inventory", "request-scope"];
+export type ResourceGraphSchemaVersion = typeof RESOURCE_GRAPH_SCHEMA_VERSION;
+export type ResourceGraphNodeKind = (typeof RESOURCE_GRAPH_NODE_KINDS)[number];
+/** Presentation role that lets readers separate baseline networking from workloads without a family list. */
+export type ResourceGraphNodeRole = (typeof RESOURCE_GRAPH_NODE_ROLES)[number];
+export type ResourceGraphEdgeKind = (typeof RESOURCE_GRAPH_EDGE_KINDS)[number];
+export type ResourceGraphEdgeConfidence = (typeof RESOURCE_GRAPH_EDGE_CONFIDENCES)[number];
+export type ResourceGraphEvidenceMethod = (typeof RESOURCE_GRAPH_EVIDENCE_METHODS)[number];
+/** Open, kebab-case relationship identifier, for example `subnet-membership`. */
+export type ResourceGraphRelationshipType = string;
+/** Open, kebab-case synthetic node identifier, for example `db-subnet-group`. */
+export type ResourceGraphSyntheticType = string;
+export interface ResourceGraphNodeCosts {
+    spend30d?: number;
+    spend30dAmortized?: number;
+}
+/**
+ * One graph node. `family` and `resourceType` are required on resource nodes,
+ * `syntheticType` on synthetic nodes, and `region` on every node except the
+ * single scope node.
+ */
+export interface ResourceGraphNode {
+    id: string;
+    kind: ResourceGraphNodeKind;
+    family?: ResourceFamilyId;
+    resourceType?: ProviderResourceType;
+    syntheticType?: ResourceGraphSyntheticType;
+    region?: string;
+    name: string;
+    displayName?: string;
+    icon?: string;
+    /** Provider-native identity such as an AWS ARN. */
+    nativeId?: string;
+    role?: ResourceGraphNodeRole;
+    tags?: Record<string, string>;
+    attributes?: ResourceAttributes;
+    costs?: ResourceGraphNodeCosts;
+}
+export interface ResourceGraphEvidence {
+    method: ResourceGraphEvidenceMethod;
+    /** Family whose data proved the edge; `graph-scope` for structural scope edges. */
+    sourceFamily: ResourceFamilyId;
+    field?: string;
+    matchedValue?: string;
+}
+/** `contains` edges point from the child to its parent. */
+export interface ResourceGraphEdge {
+    id: string;
+    from: string;
+    to: string;
+    kind: ResourceGraphEdgeKind;
+    relationshipTypes: [ResourceGraphRelationshipType, ...ResourceGraphRelationshipType[]];
+    confidence: ResourceGraphEdgeConfidence;
+    evidence: [ResourceGraphEvidence, ...ResourceGraphEvidence[]];
+}
+/** A reference a producer observed but could not resolve to a node. */
+export interface ResourceGraphUnresolved {
+    sourceNodeId: string;
+    relationshipType: ResourceGraphRelationshipType;
+    sourceFamily: ResourceFamilyId;
+    field: string;
+    matchedValue: string;
+    expectedTargetFamily: ResourceFamilyId;
+}
+interface ResourceGraphFamilyCoverageBase {
+    family: ResourceFamilyId;
+    /** Regions the family covers; a subset of the artifact scope Regions. */
+    regions: string[];
+}
+export type ResourceGraphFamilyCoverage = (ResourceGraphFamilyCoverageBase & {
+    status: 'available';
+    lastSuccessfulRefreshAt: string;
+    emptyScope: boolean;
+    reason?: never;
+}) | (ResourceGraphFamilyCoverageBase & {
+    status: 'incomplete';
+    lastSuccessfulRefreshAt?: never;
+    emptyScope?: never;
+    reason: CapabilityReasonCode;
+});
+/** Self-closing coverage: every resource node family must be declared here. */
+export interface ResourceGraphCoverage {
+    families: ResourceGraphFamilyCoverage[];
+}
+interface ResourceGraphStatsBase {
+    totalNodes: number;
+    totalEdges: number;
+    unresolvedCount: number;
+    buildMs?: number;
+    snapshotBytes?: number;
+}
+export type ResourceGraphStats = ResourceGraphStatsBase & ({
+    truncated: false;
+    truncation?: never;
+} | {
+    truncated: true;
+    truncation: {
+        reason: 'snapshot-size-limit';
+        edgesDroppedCount: number;
+        unresolvedDroppedCount: number;
+        tagsRemovedFromNodeCount: number;
+    };
+});
+export interface ResourceGraphScope {
+    regions: string[];
+}
+export type ResourceGraphArtifact<Provider extends ArtifactProvider = ArtifactProvider, AccountId extends string = string, RunId extends string = string> = ArtifactAccountBinding<Provider, AccountId> & {
+    schemaVersion: ResourceGraphSchemaVersion;
+    artifactGeneration: ArtifactGeneration<RunId>;
+    generatedAt: string;
+    scope: ResourceGraphScope;
+    /** Required when any node carries costs. */
+    currency?: string;
+    currencySymbol?: string;
+    nodes: ResourceGraphNode[];
+    edges: ResourceGraphEdge[];
+    unresolved: ResourceGraphUnresolved[];
+    coverage: ResourceGraphCoverage;
+    stats: ResourceGraphStats;
+};
+export {};
+//# sourceMappingURL=resourceGraph.d.ts.map

package/dist/common/resourceGraph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceGraph.d.ts","sourceRoot":"","sources":["../../src/common/resourceGraph.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC5G,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAExG;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAG,CAAU,CAAC;AAExD,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,EAAG,uBAAgC,CAAC;AAE5E,eAAO,MAAM,yBAAyB,wEAAyE,CAAC;AAChH,eAAO,MAAM,yBAAyB,uDAAwD,CAAC;AAC/F,eAAO,MAAM,yBAAyB,qCAAsC,CAAC;AAC7E,eAAO,MAAM,+BAA+B,oCAAqC,CAAC;AAClF,eAAO,MAAM,+BAA+B,uFAAwF,CAAC;AAErI,MAAM,MAAM,0BAA0B,GAAG,OAAO,6BAA6B,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/E,6GAA6G;AAC7G,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/E,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/E,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3F,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3F,iFAAiF;AACjF,MAAM,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEnD,iFAAiF;AACjF,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,qBAAqB,CAAC;IAC5B,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,aAAa,CAAC,EAAE,0BAA0B,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,2BAA2B,CAAC;IACpC,mFAAmF;IACnF,YAAY,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,qBAAqB,CAAC;IAC5B,iBAAiB,EAAE,CAAC,6BAA6B,EAAE,GAAG,6BAA6B,EAAE,CAAC,CAAC;IACvF,UAAU,EAAE,2BAA2B,CAAC;IACxC,QAAQ,EAAE,CAAC,qBAAqB,EAAE,GAAG,qBAAqB,EAAE,CAAC,CAAC;CAC/D;AAED,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,6BAA6B,CAAC;IAChD,YAAY,EAAE,gBAAgB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,gBAAgB,CAAC;CACxC;AAED,UAAU,+BAA+B;IACvC,MAAM,EAAE,gBAAgB,CAAC;IACzB,yEAAyE;IACzE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,MAAM,2BAA2B,GACnC,CAAC,+BAA+B,GAAG;IACjC,MAAM,EAAE,WAAW,CAAC;IACpB,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,CAAC;CAChB,CAAC,GACF,CAAC,+BAA+B,GAAG;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB,uBAAuB,CAAC,EAAE,KAAK,CAAC;IAChC,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,MAAM,EAAE,oBAAoB,CAAC;CAC9B,CAAC,CAAC;AAEP,+EAA+E;AAC/E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,2BAA2B,EAAE,CAAC;CACzC;AAED,UAAU,sBAAsB;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,GACrD,CACI;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAA;CAAE,GACxC;IACE,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE;QACV,MAAM,EAAE,qBAAqB,CAAC;QAC9B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,wBAAwB,EAAE,MAAM,CAAC;KAClC,CAAC;CACH,CACJ,CAAC;AAEJ,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,MAAM,qBAAqB,CAC/B,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EACpD,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,KAAK,SAAS,MAAM,GAAG,MAAM,IAC3B,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IAChD,aAAa,EAAE,0BAA0B,CAAC;IAC1C,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,KAAK,EAAE,kBAAkB,CAAC;CAC3B,CAAC"}

package/dist/common/resourceGraph.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RESOURCE_GRAPH_EVIDENCE_METHODS = exports.RESOURCE_GRAPH_EDGE_CONFIDENCES = exports.RESOURCE_GRAPH_EDGE_KINDS = exports.RESOURCE_GRAPH_NODE_ROLES = exports.RESOURCE_GRAPH_NODE_KINDS = exports.RESOURCE_GRAPH_LOGICAL_NAME = exports.RESOURCE_GRAPH_SCHEMA_VERSION = void 0;
+/**
+ * Provider-neutral resource relationship graph published for one provider
+ * account. Families, relationship types, and synthetic types are open
+ * identifiers: a new provider service needs no package change.
+ */
+exports.RESOURCE_GRAPH_SCHEMA_VERSION = 1;
+/** Package-owned logical artifact name; storage paths remain producer-owned. */
+exports.RESOURCE_GRAPH_LOGICAL_NAME = 'relationships.json.gz';
+exports.RESOURCE_GRAPH_NODE_KINDS = ['scope', 'region', 'zone', 'group', 'resource', 'synthetic'];
+exports.RESOURCE_GRAPH_NODE_ROLES = ['network-baseline', 'topology', 'workload'];
+exports.RESOURCE_GRAPH_EDGE_KINDS = ['contains', 'depends_on'];
+exports.RESOURCE_GRAPH_EDGE_CONFIDENCES = ['high', 'medium', 'low'];
+exports.RESOURCE_GRAPH_EVIDENCE_METHODS = ['field-derived', 'field-reference', 'persisted-inventory', 'request-scope'];
+//# sourceMappingURL=resourceGraph.js.map

package/dist/common/resourceGraph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceGraph.js","sourceRoot":"","sources":["../../src/common/resourceGraph.ts"],"names":[],"mappings":";;;AAIA;;;;GAIG;AACU,QAAA,6BAA6B,GAAG,CAAU,CAAC;AAExD,gFAAgF;AACnE,QAAA,2BAA2B,GAAG,uBAAgC,CAAC;AAE/D,QAAA,yBAAyB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AACnG,QAAA,yBAAyB,GAAG,CAAC,kBAAkB,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AAClF,QAAA,yBAAyB,GAAG,CAAC,UAAU,EAAE,YAAY,CAAU,CAAC;AAChE,QAAA,+BAA+B,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAU,CAAC;AACrE,QAAA,+BAA+B,GAAG,CAAC,eAAe,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,eAAe,CAAU,CAAC"}

package/dist/common/resourceGraphValidation.d.ts

@@ -0,0 +1,30 @@
+import type { ArtifactProvider } from './artifactGeneration.js';
+import { type ResourceGraphArtifact } from './resourceGraph.js';
+import { type AttributeValue } from './resourceIdentity.js';
+/** Account and Region a node's provider-native values must stay within. */
+export interface ResourceGraphNodeScope {
+    accountId: string;
+    region?: string;
+}
+/**
+ * Provider format rules. The generic validator checks structure only; each
+ * provider supplies identifier formats here. Every callback throws on failure.
+ */
+export interface ResourceGraphValidationOptions<Provider extends ArtifactProvider = ArtifactProvider> {
+    provider: Provider;
+    isAccountId?: (value: string) => boolean;
+    isRegion?: (value: string) => boolean;
+    isResourceType?: (value: string) => boolean;
+    validateNativeId?: (nativeId: string, scope: ResourceGraphNodeScope, field: string) => void;
+    /** Validates a zone node name against its Region. */
+    validateZone?: (zone: string, region: string, field: string) => void;
+    validateAttribute?: (key: string, value: AttributeValue, scope: ResourceGraphNodeScope, field: string) => void;
+    /** Rejects keys at every depth; `inAttributes` is true inside a node's provider-native attributes. */
+    isForbiddenKey?: (key: string, inAttributes: boolean) => boolean;
+}
+/**
+ * Validates one untrusted resource graph artifact. It checks structure and
+ * identifier formats only; families are never checked against a service list.
+ */
+export declare function validateResourceGraphArtifact<Provider extends ArtifactProvider>(value: unknown, options: ResourceGraphValidationOptions<Provider>): ResourceGraphArtifact<Provider>;
+//# sourceMappingURL=resourceGraphValidation.d.ts.map

package/dist/common/resourceGraphValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceGraphValidation.d.ts","sourceRoot":"","sources":["../../src/common/resourceGraphValidation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,OAAO,EAOL,KAAK,qBAAqB,EAE3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAwD,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAkBlH,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB;IAClG,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5F,qDAAqD;IACrD,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/G,sGAAsG;IACtG,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,KAAK,OAAO,CAAC;CAClE;AA6DD;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,SAAS,gBAAgB,EAC7E,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,8BAA8B,CAAC,QAAQ,CAAC,GAChD,qBAAqB,CAAC,QAAQ,CAAC,CAuBjC"}

package/dist/common/resourceGraphValidation.js

@@ -0,0 +1,369 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateResourceGraphArtifact = validateResourceGraphArtifact;
+const capabilityPassport_js_1 = require("./capabilityPassport.js");
+const resourceGraph_js_1 = require("./resourceGraph.js");
+const resourceIdentity_js_1 = require("./resourceIdentity.js");
+const validationHelpers_js_1 = require("./validationHelpers.js");
+const ARTIFACT_KEYS = [
+    'schemaVersion',
+    'provider',
+    'accountId',
+    'artifactGeneration',
+    'generatedAt',
+    'scope',
+    'currency',
+    'currencySymbol',
+    'nodes',
+    'edges',
+    'unresolved',
+    'coverage',
+    'stats',
+];
+const NODE_KEYS = [
+    'id',
+    'kind',
+    'family',
+    'resourceType',
+    'syntheticType',
+    'region',
+    'name',
+    'displayName',
+    'icon',
+    'nativeId',
+    'role',
+    'tags',
+    'attributes',
+    'costs',
+];
+/** Node fields each kind may carry; anything else is rejected. */
+const NODE_FIELDS = {
+    scope: ['nativeId', 'attributes'],
+    region: [],
+    zone: ['nativeId', 'attributes'],
+    group: ['family', 'nativeId', 'role', 'tags', 'attributes'],
+    resource: ['family', 'resourceType', 'nativeId', 'role', 'tags', 'attributes', 'costs'],
+    synthetic: ['family', 'syntheticType', 'nativeId', 'role', 'tags', 'attributes'],
+};
+/** Allowed `contains` parents: containment is strictly downward, so the graph stays acyclic. */
+const CONTAINMENT_PARENTS = {
+    scope: [],
+    region: ['scope'],
+    zone: ['region'],
+    group: ['region', 'zone'],
+    resource: ['region', 'zone', 'group'],
+    synthetic: ['region', 'zone', 'group'],
+};
+const DEPENDENCY_KINDS = ['group', 'resource', 'synthetic'];
+/**
+ * Validates one untrusted resource graph artifact. It checks structure and
+ * identifier formats only; families are never checked against a service list.
+ */
+function validateResourceGraphArtifact(value, options) {
+    const artifact = (0, validationHelpers_js_1.asRecord)(value, 'artifact');
+    (0, validationHelpers_js_1.assertExactKeys)(artifact, ARTIFACT_KEYS, 'artifact');
+    (0, validationHelpers_js_1.assertValue)(artifact.schemaVersion, resourceGraph_js_1.RESOURCE_GRAPH_SCHEMA_VERSION, 'artifact.schemaVersion');
+    (0, validationHelpers_js_1.assertValue)(artifact.provider, options.provider, 'artifact.provider');
+    const accountId = (0, validationHelpers_js_1.requiredString)(artifact.accountId, 'artifact.accountId');
+    if (options.isAccountId && !options.isAccountId(accountId))
+        throw new Error('artifact.accountId is not a valid provider account id.');
+    const generation = (0, validationHelpers_js_1.validateGeneration)(artifact.artifactGeneration, 'artifact.artifactGeneration');
+    const outputAt = Date.parse(generation.generatedAt);
+    const generatedAt = (0, validationHelpers_js_1.isoTimestamp)(artifact.generatedAt, 'artifact.generatedAt');
+    if (Date.parse(generatedAt) > outputAt)
+        throw new Error('artifact.generatedAt must not be newer than the artifact generation.');
+    const regions = validateScope(artifact.scope, options);
+    if (artifact.currency !== undefined)
+        (0, validationHelpers_js_1.requiredString)(artifact.currency, 'artifact.currency');
+    if (artifact.currencySymbol !== undefined)
+        (0, validationHelpers_js_1.requiredString)(artifact.currencySymbol, 'artifact.currencySymbol');
+    const nodes = validateNodes(artifact.nodes, accountId, regions, options);
+    if (nodes.hasCosts && artifact.currency === undefined)
+        throw new Error('artifact.currency is required when nodes carry costs.');
+    const edgeCount = validateEdges(artifact.edges, nodes.byId);
+    const unresolvedCount = validateUnresolved(artifact.unresolved, nodes.byId);
+    validateCoverage(artifact.coverage, regions, outputAt, nodes.byId);
+    validateStats(artifact.stats, nodes.byId.size, edgeCount, unresolvedCount);
+    assertPublicGraphJson(artifact, options.isForbiddenKey);
+    return value;
+}
+function validateScope(value, options) {
+    const scope = (0, validationHelpers_js_1.asRecord)(value, 'artifact.scope');
+    (0, validationHelpers_js_1.assertExactKeys)(scope, ['regions'], 'artifact.scope');
+    const regions = (0, validationHelpers_js_1.asArray)(scope.regions, 'artifact.scope.regions', true).map((region, index) => {
+        const field = `artifact.scope.regions[${index}]`;
+        const name = (0, validationHelpers_js_1.requiredString)(region, field);
+        if (options.isRegion && !options.isRegion(name))
+            throw new Error(`${field} is not a valid provider Region.`);
+        return name;
+    });
+    (0, validationHelpers_js_1.assertUnique)(regions, 'artifact.scope.regions');
+    return new Set(regions);
+}
+function validateNodes(value, accountId, regions, options) {
+    const byId = new Map();
+    const regionNodes = [];
+    let scopeCount = 0;
+    let hasCosts = false;
+    (0, validationHelpers_js_1.asArray)(value, 'artifact.nodes').forEach((entry, index) => {
+        const field = `artifact.nodes[${index}]`;
+        const node = (0, validationHelpers_js_1.asRecord)(entry, field);
+        (0, validationHelpers_js_1.assertExactKeys)(node, NODE_KEYS, field);
+        const id = (0, validationHelpers_js_1.requiredString)(node.id, `${field}.id`);
+        if (byId.has(id))
+            throw new Error('artifact node ids must be unique.');
+        const kind = (0, validationHelpers_js_1.requiredEnum)(node.kind, resourceGraph_js_1.RESOURCE_GRAPH_NODE_KINDS, `${field}.kind`);
+        const allowed = NODE_FIELDS[kind];
+        const undeclared = ['family', 'resourceType', 'syntheticType', 'nativeId', 'role', 'tags', 'attributes', 'costs'].filter(key => node[key] !== undefined && !allowed.includes(key));
+        if (undeclared.length > 0)
+            throw new Error(`${field} ${kind} nodes must not carry: ${undeclared.join(', ')}.`);
+        (0, validationHelpers_js_1.requiredString)(node.name, `${field}.name`);
+        if (node.displayName !== undefined)
+            (0, validationHelpers_js_1.requiredString)(node.displayName, `${field}.displayName`);
+        if (node.icon !== undefined)
+            (0, validationHelpers_js_1.requiredString)(node.icon, `${field}.icon`);
+        let region;
+        if (kind === 'scope') {
+            scopeCount += 1;
+            if (node.region !== undefined)
+                throw new Error(`${field}.region is not allowed on the scope node.`);
+        }
+        else {
+            region = (0, validationHelpers_js_1.requiredString)(node.region, `${field}.region`);
+            if (!regions.has(region))
+                throw new Error(`${field}.region is outside artifact scope.`);
+        }
+        if (kind === 'region')
+            regionNodes.push(region);
+        if (kind === 'zone')
+            options.validateZone?.(String(node.name), region, `${field}.name`);
+        if (kind === 'resource' || node.family !== undefined)
+            kebab(node.family, `${field}.family`);
+        if (kind === 'resource') {
+            const resourceType = (0, validationHelpers_js_1.requiredString)(node.resourceType, `${field}.resourceType`);
+            if (options.isResourceType && !options.isResourceType(resourceType))
+                throw new Error(`${field}.resourceType is not a valid provider resource type.`);
+        }
+        if (kind === 'synthetic')
+            kebab(node.syntheticType, `${field}.syntheticType`);
+        if (node.role !== undefined)
+            (0, validationHelpers_js_1.requiredEnum)(node.role, resourceGraph_js_1.RESOURCE_GRAPH_NODE_ROLES, `${field}.role`);
+        const scope = { accountId, region };
+        if (node.nativeId !== undefined)
+            options.validateNativeId?.((0, validationHelpers_js_1.requiredString)(node.nativeId, `${field}.nativeId`), scope, `${field}.nativeId`);
+        if (node.tags !== undefined)
+            validateTags(node.tags, `${field}.tags`);
+        if (node.attributes !== undefined)
+            validateAttributes(node.attributes, scope, options, `${field}.attributes`);
+        if (node.costs !== undefined) {
+            validateCosts(node.costs, `${field}.costs`);
+            hasCosts = true;
+        }
+        byId.set(id, { kind, region, family: node.family === undefined ? undefined : String(node.family) });
+    });
+    if (scopeCount !== 1)
+        throw new Error('artifact must contain exactly one scope node.');
+    (0, validationHelpers_js_1.assertUnique)(regionNodes, 'artifact Region nodes');
+    if (regionNodes.length !== regions.size)
+        throw new Error('artifact Region nodes must exactly match artifact scope Regions.');
+    return { byId, hasCosts };
+}
+function kebab(value, field) {
+    if (!(0, resourceIdentity_js_1.isKebabIdentifier)(value))
+        throw new Error(`${field} must be a kebab-case identifier.`);
+    return value;
+}
+function validateTags(value, field) {
+    Object.entries((0, validationHelpers_js_1.asRecord)(value, field)).forEach(([key, tagValue]) => {
+        if (key.length === 0)
+            throw new Error(`${field} keys must be non-empty.`);
+        if (typeof tagValue !== 'string')
+            throw new Error(`${field}.${key} must be a string.`);
+    });
+}
+function validateAttributes(value, scope, options, field) {
+    Object.entries((0, validationHelpers_js_1.asRecord)(value, field)).forEach(([key, item]) => {
+        const itemField = `${field}.${key}`;
+        if (!(0, resourceIdentity_js_1.isAttributeKey)(key))
+            throw new Error(`${itemField} key must be camelCase.`);
+        validateAttributeValue(item, itemField);
+        options.validateAttribute?.(key, item, scope, itemField);
+    });
+}
+function validateAttributeValue(value, field) {
+    if ((0, resourceIdentity_js_1.isAttributeScalar)(value))
+        return;
+    if (!Array.isArray(value))
+        throw new Error(`${field} must be a scalar, a scalar array, or an array of flat records.`);
+    if (value.every(resourceIdentity_js_1.isAttributeScalar))
+        return;
+    value.forEach((entry, index) => {
+        const entryField = `${field}[${index}]`;
+        Object.entries((0, validationHelpers_js_1.asRecord)(entry, entryField)).forEach(([key, item]) => {
+            if (!(0, resourceIdentity_js_1.isAttributeKey)(key))
+                throw new Error(`${entryField}.${key} key must be camelCase.`);
+            if (!(0, resourceIdentity_js_1.isAttributeScalar)(item))
+                throw new Error(`${entryField}.${key} must be a string, finite number, or boolean.`);
+        });
+    });
+}
+function validateCosts(value, field) {
+    const costs = (0, validationHelpers_js_1.asRecord)(value, field);
+    (0, validationHelpers_js_1.assertExactKeys)(costs, ['spend30d', 'spend30dAmortized'], field);
+    if (Object.keys(costs).length === 0)
+        throw new Error(`${field} must report at least one amount.`);
+    Object.entries(costs).forEach(([key, amount]) => (0, validationHelpers_js_1.finiteNumber)(amount, `${field}.${key}`));
+}
+function validateEdges(value, nodes) {
+    const edges = (0, validationHelpers_js_1.asArray)(value, 'artifact.edges');
+    const ids = new Set();
+    const parents = new Map();
+    edges.forEach((entry, index) => {
+        const field = `artifact.edges[${index}]`;
+        const edge = (0, validationHelpers_js_1.asRecord)(entry, field);
+        (0, validationHelpers_js_1.assertExactKeys)(edge, ['id', 'from', 'to', 'kind', 'relationshipTypes', 'confidence', 'evidence'], field);
+        const id = (0, validationHelpers_js_1.requiredString)(edge.id, `${field}.id`);
+        if (ids.has(id))
+            throw new Error('artifact edge ids must be unique.');
+        ids.add(id);
+        const from = (0, validationHelpers_js_1.requiredString)(edge.from, `${field}.from`);
+        const to = (0, validationHelpers_js_1.requiredString)(edge.to, `${field}.to`);
+        const child = nodes.get(from);
+        const parent = nodes.get(to);
+        if (!child || !parent)
+            throw new Error(`${field} references a missing node.`);
+        if (from === to)
+            throw new Error(`${field} must not be a self edge.`);
+        const kind = (0, validationHelpers_js_1.requiredEnum)(edge.kind, resourceGraph_js_1.RESOURCE_GRAPH_EDGE_KINDS, `${field}.kind`);
+        const relationshipTypes = (0, validationHelpers_js_1.asArray)(edge.relationshipTypes, `${field}.relationshipTypes`, true).map((type, typeIndex) => kebab(type, `${field}.relationshipTypes[${typeIndex}]`));
+        (0, validationHelpers_js_1.assertUnique)(relationshipTypes, `${field}.relationshipTypes`);
+        (0, validationHelpers_js_1.requiredEnum)(edge.confidence, resourceGraph_js_1.RESOURCE_GRAPH_EDGE_CONFIDENCES, `${field}.confidence`);
+        validateEvidence(edge.evidence, `${field}.evidence`);
+        if (kind === 'contains') {
+            if (!CONTAINMENT_PARENTS[child.kind].includes(parent.kind))
+                throw new Error(`${field} ${child.kind} nodes cannot be contained by ${parent.kind} nodes; contains edges point child to parent.`);
+            if (parent.region !== undefined && child.region !== parent.region)
+                throw new Error(`${field} containment must not cross Regions.`);
+            parents.set(from, (parents.get(from) ?? 0) + 1);
+        }
+        else if (!DEPENDENCY_KINDS.includes(child.kind) || !DEPENDENCY_KINDS.includes(parent.kind)) {
+            throw new Error(`${field} depends_on edges must connect group, resource, or synthetic nodes.`);
+        }
+    });
+    nodes.forEach((node, id) => {
+        const expected = node.kind === 'scope' ? 0 : 1;
+        if ((parents.get(id) ?? 0) !== expected)
+            throw new Error(`artifact node ${id} must have exactly ${expected} contains parent edge${expected === 1 ? '' : 's'}.`);
+    });
+    return edges.length;
+}
+function validateEvidence(value, field) {
+    (0, validationHelpers_js_1.asArray)(value, field, true).forEach((entry, index) => {
+        const itemField = `${field}[${index}]`;
+        const item = (0, validationHelpers_js_1.asRecord)(entry, itemField);
+        (0, validationHelpers_js_1.assertExactKeys)(item, ['method', 'sourceFamily', 'field', 'matchedValue'], itemField);
+        (0, validationHelpers_js_1.requiredEnum)(item.method, resourceGraph_js_1.RESOURCE_GRAPH_EVIDENCE_METHODS, `${itemField}.method`);
+        kebab(item.sourceFamily, `${itemField}.sourceFamily`);
+        if (item.field !== undefined)
+            (0, validationHelpers_js_1.requiredString)(item.field, `${itemField}.field`);
+        if (item.matchedValue !== undefined)
+            (0, validationHelpers_js_1.requiredString)(item.matchedValue, `${itemField}.matchedValue`);
+    });
+}
+function validateUnresolved(value, nodes) {
+    const unresolved = (0, validationHelpers_js_1.asArray)(value, 'artifact.unresolved');
+    unresolved.forEach((entry, index) => {
+        const field = `artifact.unresolved[${index}]`;
+        const reference = (0, validationHelpers_js_1.asRecord)(entry, field);
+        (0, validationHelpers_js_1.assertExactKeys)(reference, ['sourceNodeId', 'relationshipType', 'sourceFamily', 'field', 'matchedValue', 'expectedTargetFamily'], field);
+        const source = nodes.get((0, validationHelpers_js_1.requiredString)(reference.sourceNodeId, `${field}.sourceNodeId`));
+        if (!source)
+            throw new Error(`${field}.sourceNodeId references a missing node.`);
+        kebab(reference.relationshipType, `${field}.relationshipType`);
+        const sourceFamily = kebab(reference.sourceFamily, `${field}.sourceFamily`);
+        if (source.family !== undefined && source.family !== sourceFamily)
+            throw new Error(`${field}.sourceFamily must match its source node family.`);
+        (0, validationHelpers_js_1.requiredString)(reference.field, `${field}.field`);
+        (0, validationHelpers_js_1.requiredString)(reference.matchedValue, `${field}.matchedValue`);
+        kebab(reference.expectedTargetFamily, `${field}.expectedTargetFamily`);
+    });
+    return unresolved.length;
+}
+/** Coverage is self-closing: it must declare every family that appears on a resource node. */
+function validateCoverage(value, regions, outputAt, nodes) {
+    const coverage = (0, validationHelpers_js_1.asRecord)(value, 'artifact.coverage');
+    (0, validationHelpers_js_1.assertExactKeys)(coverage, ['families'], 'artifact.coverage');
+    const declared = new Map();
+    (0, validationHelpers_js_1.asArray)(coverage.families, 'artifact.coverage.families').forEach((entry, index) => {
+        const field = `artifact.coverage.families[${index}]`;
+        const family = (0, validationHelpers_js_1.asRecord)(entry, field);
+        (0, validationHelpers_js_1.assertExactKeys)(family, ['family', 'regions', 'status', 'lastSuccessfulRefreshAt', 'emptyScope', 'reason'], field);
+        const name = kebab(family.family, `${field}.family`);
+        if (declared.has(name))
+            throw new Error('artifact.coverage family identities must not contain duplicates.');
+        const familyRegions = (0, validationHelpers_js_1.asArray)(family.regions, `${field}.regions`, true).map((region, regionIndex) => (0, validationHelpers_js_1.requiredString)(region, `${field}.regions[${regionIndex}]`));
+        (0, validationHelpers_js_1.assertUnique)(familyRegions, `${field}.regions`);
+        if (familyRegions.some(region => !regions.has(region)))
+            throw new Error(`${field}.regions must be within artifact scope Regions.`);
+        let emptyScope = false;
+        if ((0, validationHelpers_js_1.requiredEnum)(family.status, ['available', 'incomplete'], `${field}.status`) === 'available') {
+            const refreshedAt = (0, validationHelpers_js_1.isoTimestamp)(family.lastSuccessfulRefreshAt, `${field}.lastSuccessfulRefreshAt`);
+            if (Date.parse(refreshedAt) > outputAt)
+                throw new Error(`${field}.lastSuccessfulRefreshAt must not be newer than the artifact generation.`);
+            emptyScope = (0, validationHelpers_js_1.requiredBoolean)(family.emptyScope, `${field}.emptyScope`);
+            if (family.reason !== undefined)
+                throw new Error(`${field}.reason is not allowed for available coverage.`);
+        }
+        else {
+            (0, validationHelpers_js_1.requiredEnum)(family.reason, capabilityPassport_js_1.CAPABILITY_REASON_CODES, `${field}.reason`);
+            if (family.lastSuccessfulRefreshAt !== undefined || family.emptyScope !== undefined)
+                throw new Error(`${field} incomplete coverage cannot claim successful refresh evidence.`);
+        }
+        declared.set(name, { regions: new Set(familyRegions), emptyScope });
+    });
+    nodes.forEach((node, id) => {
+        if (node.kind !== 'resource')
+            return;
+        const family = declared.get(node.family);
+        if (!family)
+            throw new Error(`artifact.coverage must declare family ${node.family} of resource node ${id}.`);
+        if (!family.regions.has(node.region))
+            throw new Error(`artifact.coverage for ${node.family} must include Region ${node.region}.`);
+        if (family.emptyScope)
+            throw new Error(`artifact.coverage for ${node.family} claims an empty scope but resource node ${id} exists.`);
+    });
+}
+function validateStats(value, nodeCount, edgeCount, unresolvedCount) {
+    const stats = (0, validationHelpers_js_1.asRecord)(value, 'artifact.stats');
+    (0, validationHelpers_js_1.assertExactKeys)(stats, ['totalNodes', 'totalEdges', 'unresolvedCount', 'truncated', 'truncation', 'buildMs', 'snapshotBytes'], 'artifact.stats');
+    (0, validationHelpers_js_1.assertValue)((0, validationHelpers_js_1.nonNegativeInteger)(stats.totalNodes, 'artifact.stats.totalNodes'), nodeCount, 'artifact.stats.totalNodes');
+    (0, validationHelpers_js_1.assertValue)((0, validationHelpers_js_1.nonNegativeInteger)(stats.totalEdges, 'artifact.stats.totalEdges'), edgeCount, 'artifact.stats.totalEdges');
+    (0, validationHelpers_js_1.assertValue)((0, validationHelpers_js_1.nonNegativeInteger)(stats.unresolvedCount, 'artifact.stats.unresolvedCount'), unresolvedCount, 'artifact.stats.unresolvedCount');
+    if ((0, validationHelpers_js_1.requiredBoolean)(stats.truncated, 'artifact.stats.truncated')) {
+        const truncation = (0, validationHelpers_js_1.asRecord)(stats.truncation, 'artifact.stats.truncation');
+        const counts = ['edgesDroppedCount', 'unresolvedDroppedCount', 'tagsRemovedFromNodeCount'];
+        (0, validationHelpers_js_1.assertExactKeys)(truncation, ['reason', ...counts], 'artifact.stats.truncation');
+        (0, validationHelpers_js_1.assertValue)(truncation.reason, 'snapshot-size-limit', 'artifact.stats.truncation.reason');
+        if (counts.map(key => (0, validationHelpers_js_1.nonNegativeInteger)(truncation[key], `artifact.stats.truncation.${key}`)).every(count => count === 0))
+            throw new Error('artifact.stats.truncation must report at least one omitted item.');
+    }
+    else if (stats.truncation !== undefined) {
+        throw new Error('artifact.stats.truncation is only allowed when truncated is true.');
+    }
+    if (stats.buildMs !== undefined)
+        (0, validationHelpers_js_1.nonNegativeInteger)(stats.buildMs, 'artifact.stats.buildMs');
+    if (stats.snapshotBytes !== undefined)
+        (0, validationHelpers_js_1.nonNegativeInteger)(stats.snapshotBytes, 'artifact.stats.snapshotBytes');
+}
+/** Rejects non-plain JSON everywhere, applying the provider key guard with attribute context. */
+function assertPublicGraphJson(artifact, isForbiddenKey) {
+    const { nodes, ...envelope } = artifact;
+    (0, validationHelpers_js_1.assertPlainJson)(envelope, 'artifact', key => isForbiddenKey?.(key, false) ?? false);
+    nodes.forEach((node, index) => {
+        const { attributes, ...rest } = node;
+        (0, validationHelpers_js_1.assertPlainJson)(rest, `artifact.nodes[${index}]`, key => isForbiddenKey?.(key, false) ?? false);
+        if (attributes !== undefined)
+            (0, validationHelpers_js_1.assertPlainJson)(attributes, `artifact.nodes[${index}].attributes`, key => isForbiddenKey?.(key, true) ?? false);
+    });
+}
+//# sourceMappingURL=resourceGraphValidation.js.map

package/dist/common/resourceGraphValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceGraphValidation.js","sourceRoot":"","sources":["../../src/common/resourceGraphValidation.ts"],"names":[],"mappings":";;AAoHA,sEA0BC;AA7ID,mEAAkE;AAClE,yDAS4B;AAC5B,+DAAkH;AAClH,iEAegC;AAyBhC,MAAM,aAAa,GAAG;IACpB,eAAe;IACf,UAAU;IACV,WAAW;IACX,oBAAoB;IACpB,aAAa;IACb,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,OAAO;IACP,OAAO;IACP,YAAY;IACZ,UAAU;IACV,OAAO;CACC,CAAC;AAEX,MAAM,SAAS,GAAG;IAChB,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,cAAc;IACd,eAAe;IACf,QAAQ;IACR,MAAM;IACN,aAAa;IACb,MAAM;IACN,UAAU;IACV,MAAM;IACN,MAAM;IACN,YAAY;IACZ,OAAO;CACC,CAAC;AAIX,kEAAkE;AAClE,MAAM,WAAW,GAAwD;IACvE,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;IACjC,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;IAChC,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC;IAC3D,QAAQ,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC;IACvF,SAAS,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC;CACjF,CAAC;AAEF,gGAAgG;AAChG,MAAM,mBAAmB,GAAoE;IAC3F,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;IAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;IACrC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;CACvC,CAAC;AAEF,MAAM,gBAAgB,GAAqC,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAI9F;;;GAGG;AACH,SAAgB,6BAA6B,CAC3C,KAAc,EACd,OAAiD;IAEjD,MAAM,QAAQ,GAAG,IAAA,+BAAQ,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAA,sCAAe,EAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IACrD,IAAA,kCAAW,EAAC,QAAQ,CAAC,aAAa,EAAE,gDAA6B,EAAE,wBAAwB,CAAC,CAAC;IAC7F,IAAA,kCAAW,EAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,IAAA,qCAAc,EAAC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACtI,MAAM,UAAU,GAAG,IAAA,yCAAkB,EAAC,QAAQ,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAA,mCAAY,EAAC,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAChI,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAA,qCAAc,EAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC5F,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS;QAAE,IAAA,qCAAc,EAAC,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC;IAE9G,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAChI,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACnE,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC3E,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,OAAO,KAAwC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,OAAuC;IAC5E,MAAM,KAAK,GAAG,IAAA,+BAAQ,EAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAChD,IAAA,sCAAe,EAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,IAAA,8BAAO,EAAC,KAAK,CAAC,OAAO,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC3F,MAAM,KAAK,GAAG,0BAA0B,KAAK,GAAG,CAAC;QACjD,MAAM,IAAI,GAAG,IAAA,qCAAc,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;QAC7G,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAA,mCAAY,EAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAChD,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,SAAiB,EACjB,OAA4B,EAC5B,OAAuC;IAEvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC9C,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAA,8BAAO,EAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,kBAAkB,KAAK,GAAG,CAAC;QACzC,MAAM,IAAI,GAAG,IAAA,+BAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,IAAA,sCAAe,EAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,IAAA,qCAAc,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,IAAA,mCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,4CAAyB,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,UAAU,GAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAW,CAAC,MAAM,CACjI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CACzD,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,0BAA0B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/G,IAAA,qCAAc,EAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,IAAA,qCAAc,EAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;QAC7F,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,IAAA,qCAAc,EAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QAExE,IAAI,MAA0B,CAAC;QAC/B,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,UAAU,IAAI,CAAC,CAAC;YAChB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;QACtG,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,IAAA,qCAAc,EAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ;YAAE,WAAW,CAAC,IAAI,CAAC,MAAgB,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAgB,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QAElG,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;QAC5F,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,IAAA,qCAAc,EAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC;YAChF,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC;gBACjE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sDAAsD,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,IAAI,KAAK,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,IAAA,mCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,4CAAyB,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QAEjG,MAAM,KAAK,GAA2B,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,IAAA,qCAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;QAC5I,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QACtE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;QAC9G,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;YAC5C,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACvF,IAAA,mCAAY,EAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IACnD,IAAI,WAAW,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAC7H,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,KAAa;IAC1C,IAAI,CAAC,IAAA,uCAAiB,EAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,MAAM,CAAC,OAAO,CAAC,IAAA,+BAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE;QACjE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;QAC1E,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,oBAAoB,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAA6B,EAAE,OAAuC,EAAE,KAAa;IAC/H,MAAM,CAAC,OAAO,CAAC,IAAA,+BAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;QAC7D,MAAM,SAAS,GAAG,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC;QACpC,IAAI,CAAC,IAAA,oCAAc,EAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,yBAAyB,CAAC,CAAC;QACjF,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACxC,OAAO,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,IAAsB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAC3D,IAAI,IAAA,uCAAiB,EAAC,KAAK,CAAC;QAAE,OAAO;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iEAAiE,CAAC,CAAC;IACtH,IAAI,KAAK,CAAC,KAAK,CAAC,uCAAiB,CAAC;QAAE,OAAO;IAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,UAAU,GAAG,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,IAAA,+BAAQ,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;YAClE,IAAI,CAAC,IAAA,oCAAc,EAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,GAAG,yBAAyB,CAAC,CAAC;YACzF,IAAI,CAAC,IAAA,uCAAiB,EAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,GAAG,+CAA+C,CAAC,CAAC;QACrH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,MAAM,KAAK,GAAG,IAAA,+BAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,IAAA,sCAAe,EAAC,KAAK,EAAE,CAAC,UAAU,EAAE,mBAAmB,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAClG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,IAAA,mCAAY,EAAC,MAAM,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAyC;IAC9E,MAAM,KAAK,GAAG,IAAA,8BAAO,EAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,kBAAkB,KAAK,GAAG,CAAC;QACzC,MAAM,IAAI,GAAG,IAAA,+BAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,IAAA,sCAAe,EAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1G,MAAM,EAAE,GAAG,IAAA,qCAAc,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;QAClD,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACtE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,IAAI,GAAG,IAAA,qCAAc,EAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAA,qCAAc,EAAC,IAAI,CAAC,EAAE,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;QAC9E,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,IAAA,mCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,4CAAyB,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QACjF,MAAM,iBAAiB,GAAG,IAAA,8BAAO,EAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,KAAK,oBAAoB,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CACpH,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,sBAAsB,SAAS,GAAG,CAAC,CACxD,CAAC;QACF,IAAA,mCAAY,EAAC,iBAAiB,EAAE,GAAG,KAAK,oBAAoB,CAAC,CAAC;QAC9D,IAAA,mCAAY,EAAC,IAAI,CAAC,UAAU,EAAE,kDAA+B,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;QACtF,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,iCAAiC,MAAM,CAAC,IAAI,+CAA+C,CAAC,CAAC;YACrI,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;YACnI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qEAAqE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,QAAQ;YACrC,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,sBAAsB,QAAQ,wBAAwB,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAC3H,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,IAAA,8BAAO,EAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACnD,MAAM,SAAS,GAAG,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC;QACvC,MAAM,IAAI,GAAG,IAAA,+BAAQ,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACxC,IAAA,sCAAe,EAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,SAAS,CAAC,CAAC;QACtF,IAAA,mCAAY,EAAC,IAAI,CAAC,MAAM,EAAE,kDAA+B,EAAE,GAAG,SAAS,SAAS,CAAC,CAAC;QAClF,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,SAAS,eAAe,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAA,qCAAc,EAAC,IAAI,CAAC,KAAK,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;YAAE,IAAA,qCAAc,EAAC,IAAI,CAAC,YAAY,EAAE,GAAG,SAAS,eAAe,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAyC;IACnF,MAAM,UAAU,GAAG,IAAA,8BAAO,EAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACzD,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,uBAAuB,KAAK,GAAG,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAA,+BAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,IAAA,sCAAe,EAAC,SAAS,EAAE,CAAC,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE,sBAAsB,CAAC,EAAE,KAAK,CAAC,CAAC;QACzI,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAA,qCAAc,EAAC,SAAS,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0CAA0C,CAAC,CAAC;QACjF,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kDAAkD,CAAC,CAAC;QAC/I,IAAA,qCAAc,EAAC,SAAS,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;QAClD,IAAA,qCAAc,EAAC,SAAS,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC;QAChE,KAAK,CAAC,SAAS,CAAC,oBAAoB,EAAE,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,8FAA8F;AAC9F,SAAS,gBAAgB,CAAC,KAAc,EAAE,OAA4B,EAAE,QAAgB,EAAE,KAAyC;IACjI,MAAM,QAAQ,GAAG,IAAA,+BAAQ,EAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACtD,IAAA,sCAAe,EAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyD,CAAC;IAClF,IAAA,8BAAO,EAAC,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAChF,MAAM,KAAK,GAAG,8BAA8B,KAAK,GAAG,CAAC;QACrD,MAAM,MAAM,GAAG,IAAA,+BAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtC,IAAA,sCAAe,EAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,yBAAyB,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QACnH,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAC5G,MAAM,aAAa,GAAG,IAAA,8BAAO,EAAC,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAClG,IAAA,qCAAc,EAAC,MAAM,EAAE,GAAG,KAAK,YAAY,WAAW,GAAG,CAAC,CAC3D,CAAC;QACF,IAAA,mCAAY,EAAC,aAAa,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;QAChD,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iDAAiD,CAAC,CAAC;QACnI,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,IAAA,mCAAY,EAAC,MAAM,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,GAAG,KAAK,SAAS,CAAC,KAAK,WAAW,EAAE,CAAC;YAChG,MAAM,WAAW,GAAG,IAAA,mCAAY,EAAC,MAAM,CAAC,uBAAuB,EAAE,GAAG,KAAK,0BAA0B,CAAC,CAAC;YACrG,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0EAA0E,CAAC,CAAC;YAC5I,UAAU,GAAG,IAAA,sCAAe,EAAC,MAAM,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;YACvE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gDAAgD,CAAC,CAAC;QAC7G,CAAC;aAAM,CAAC;YACN,IAAA,mCAAY,EAAC,MAAM,CAAC,MAAM,EAAE,+CAAuB,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;YACxE,IAAI,MAAM,CAAC,uBAAuB,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;gBACjF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gEAAgE,CAAC,CAAC;QAC9F,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAgB,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,MAAM,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC7G,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAgB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,MAAM,wBAAwB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5I,IAAI,MAAM,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,MAAM,4CAA4C,EAAE,UAAU,CAAC,CAAC;IACvI,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,SAAiB,EAAE,SAAiB,EAAE,eAAuB;IAClG,MAAM,KAAK,GAAG,IAAA,+BAAQ,EAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAChD,IAAA,sCAAe,EAAC,KAAK,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACjJ,IAAA,kCAAW,EAAC,IAAA,yCAAkB,EAAC,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;IACvH,IAAA,kCAAW,EAAC,IAAA,yCAAkB,EAAC,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;IACvH,IAAA,kCAAW,EAAC,IAAA,yCAAkB,EAAC,KAAK,CAAC,eAAe,EAAE,gCAAgC,CAAC,EAAE,eAAe,EAAE,gCAAgC,CAAC,CAAC;IAC5I,IAAI,IAAA,sCAAe,EAAC,KAAK,CAAC,SAAS,EAAE,0BAA0B,CAAC,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,IAAA,+BAAQ,EAAC,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,CAAC,mBAAmB,EAAE,wBAAwB,EAAE,0BAA0B,CAAU,CAAC;QACpG,IAAA,sCAAe,EAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAChF,IAAA,kCAAW,EAAC,UAAU,CAAC,MAAM,EAAE,qBAAqB,EAAE,kCAAkC,CAAC,CAAC;QAC1F,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAA,yCAAkB,EAAC,UAAU,CAAC,GAAG,CAAC,EAAE,6BAA6B,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC;YACxH,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACxF,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,IAAA,yCAAkB,EAAC,KAAK,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAC7F,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,IAAA,yCAAkB,EAAC,KAAK,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;AACjH,CAAC;AAED,iGAAiG;AACjG,SAAS,qBAAqB,CAAC,QAAoB,EAAE,cAAgE;IACnH,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;IACxC,IAAA,sCAAe,EAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;IACnF,KAAsB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC9C,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACrC,IAAA,sCAAe,EAAC,IAAI,EAAE,kBAAkB,KAAK,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;QAChG,IAAI,UAAU,KAAK,SAAS;YAAE,IAAA,sCAAe,EAAC,UAAU,EAAE,kBAAkB,KAAK,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;IAChJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/common/resourceIdentity.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Provider-neutral resource identity vocabulary.
+ *
+ * Families, relationship types, and synthetic types are open kebab-case
+ * identifiers so a provider can add a service without a package change.
+ * Validators check identifier format only, never membership in a list.
+ */
+/** Open, kebab-case discovery family identifier, for example `ec2-instance`. */
+export type ResourceFamilyId = string;
+/** Provider-native resource type, for example `AWS::EC2::Instance`. */
+export type ProviderResourceType = string;
+/** Open, kebab-case identifier of the capability or source that produced evidence. */
+export type CapabilitySourceId = string;
+export type AttributeScalar = string | number | boolean;
+/** A scalar, a list of scalars, or a list of flat records of scalars. */
+export type AttributeValue = AttributeScalar | AttributeScalar[] | Array<Record<string, AttributeScalar>>;
+/** Provider-native resource attributes keyed by camelCase names. */
+export type ResourceAttributes = Record<string, AttributeValue>;
+export declare const KEBAB_IDENTIFIER_PATTERN: RegExp;
+export declare const ATTRIBUTE_KEY_PATTERN: RegExp;
+export declare const isKebabIdentifier: (value: unknown) => value is string;
+export declare const isResourceFamilyId: (value: unknown) => value is ResourceFamilyId;
+export declare const isCapabilitySourceId: (value: unknown) => value is CapabilitySourceId;
+export declare const isAttributeKey: (value: unknown) => value is string;
+export declare const isAttributeScalar: (value: unknown) => value is AttributeScalar;
+export declare const isAttributeValue: (value: unknown) => value is AttributeValue;
+export declare const isResourceAttributes: (value: unknown) => value is ResourceAttributes;
+//# sourceMappingURL=resourceIdentity.d.ts.map