@spottoai/types-package 1.0.2-dev1138.12 → 1.0.2-dev1138.14

package/dist/esm/azure/reportEvidenceValidation.js

@@ -1,8 +1,10 @@
 import { isCompactRecommendation, isInventoryCatalogueResource } from './reportEvidenceCatalogueValidation.js';
 import { isReportDailySpend } from './reportDailySpendValidation.js';
 import { isReportSavingsBasis, isReportSpendProjection } from './reportSpendValidation.js';
-import { REPORT_EVIDENCE_LIMITS, } from './reportEvidence.js';
+import { isCommitmentsFreshnessEntry, isCommitmentsFreshnessStatus } from './commitmentsPlanningValidation.js';
+import { REPORT_EVIDENCE_LIMITS, REPORT_PRINCIPAL_TYPES, } from './reportEvidence.js';
 import { countTotal, hasOptionalNumbers, hasOptionalStrings, hasRequiredRecords, isBoundedRows, isCommitmentExpirySummary, isCostSummary, isCount, isCountRecord, isDateTime, isEvidenceReference, isFiniteNumber, isOptionalBoolean, isOptionalFiniteNumber, isOptionalString, isProjectionRows, isRecommendationSummary, isRecord, isResourceSummary, isRetirementSummary, isSourceFileStatus, isString, isStringArray, isTagCoverage, } from './reportEvidenceValidationHelpers.js';
+import { isReportingStories, isStoryFingerprintRows } from '../common/utilizationStoriesValidation.js';
 export const isReportSecureScoreEvidence = (value) => {
     if (!isRecord(value) || !['available', 'unavailable', 'stale'].includes(value.status))
         return false;
@@ -22,6 +24,54 @@ const isCostSavingsCategory = (value) => isRecord(value) &&
     isCount(value.recommendationCount) &&
     isCount(value.resourceCount) &&
     ['currentMonthlyCost', 'potentialMonthlyCost', 'minimumMonthlySavings', 'maximumMonthlySavings'].every(key => isFiniteNumber(value[key]));
+const REPORT_COST_CHANGE_LEVELS = new Set(['service', 'resource-group', 'resource', 'meter']);
+const REPORT_COST_CHANGE_TYPES = new Set(['increase', 'decrease', 'no_change', 'new_resource', 'removed_resource']);
+const REPORT_COST_CHANGE_REASON_TYPES = new Set([
+    'new_resource',
+    'removed_resource',
+    'quantity_increase',
+    'quantity_decrease',
+    'rate_change',
+    'sku_change',
+    'new_meter',
+    'removed_meter',
+]);
+const isStringOrFiniteNumber = (value) => isString(value) || isFiniteNumber(value);
+const isCostChangeReason = (value) => isRecord(value) &&
+    isString(value.type) &&
+    REPORT_COST_CHANGE_REASON_TYPES.has(value.type) &&
+    isFiniteNumber(value.impact) &&
+    isOptionalFiniteNumber(value.impactPercent) &&
+    isString(value.description) &&
+    (value.oldValue === undefined || isStringOrFiniteNumber(value.oldValue)) &&
+    (value.newValue === undefined || isStringOrFiniteNumber(value.newValue));
+const isCostChangeDriver = (value) => isRecord(value) &&
+    isString(value.key) &&
+    isString(value.level) &&
+    REPORT_COST_CHANGE_LEVELS.has(value.level) &&
+    isString(value.label) &&
+    isOptionalString(value.resourceId) &&
+    isFiniteNumber(value.currentCost) &&
+    isFiniteNumber(value.previousCost) &&
+    isFiniteNumber(value.change) &&
+    isOptionalFiniteNumber(value.changePercent) &&
+    isString(value.changeType) &&
+    REPORT_COST_CHANGE_TYPES.has(value.changeType) &&
+    isOptionalString(value.summary) &&
+    isBoundedRows(value.reasons, REPORT_EVIDENCE_LIMITS.costChangeReasons, isCostChangeReason);
+const isCostChangePeriod = (value) => isRecord(value) &&
+    isString(value.period) &&
+    /^\d{4}-(0[1-9]|1[0-2])$/u.test(value.period) &&
+    isString(value.previousPeriod) &&
+    /^\d{4}-(0[1-9]|1[0-2])$/u.test(value.previousPeriod) &&
+    value.previousPeriod < value.period &&
+    isString(value.currency) &&
+    /^[A-Z]{3}$/u.test(value.currency) &&
+    isFiniteNumber(value.currentCost) &&
+    isFiniteNumber(value.previousCost) &&
+    isFiniteNumber(value.change) &&
+    isOptionalFiniteNumber(value.changePercent) &&
+    isBoundedRows(value.drivers, REPORT_EVIDENCE_LIMITS.costChangeDrivers, isCostChangeDriver);
 const hasRequiredCountKeys = (value, keys) => isCountRecord(value) && keys.every(key => Object.prototype.hasOwnProperty.call(value, key));
 const isRecommendationPortfolio = (value) => {
     if (!isRecord(value))
@@ -114,6 +164,8 @@ const isPrivilegedAccess = (value) => isRecord(value) &&
     isString(value.principalId) &&
     isString(value.displayName) &&
     isString(value.roleName) &&
+    (value.principalType === undefined ||
+        (typeof value.principalType === 'string' && REPORT_PRINCIPAL_TYPES.includes(value.principalType))) &&
     hasOptionalStrings(value, ['userPrincipalName', 'scope', 'scopeType', 'lastLogonDate', 'mfaStatus']);
 const isGovernance = (value) => isRecord(value) &&
     isOptionalString(value.generatedAt) &&
@@ -142,13 +194,61 @@ const isCommitments = (value) => {
         return false;
     }
     if (value.inventorySummary.totalCount !== value.inventory.totalCount ||
-        countTotal(value.inventorySummary.statusCounts) !== value.inventorySummary.totalCount) {
+        countTotal(value.inventorySummary.statusCounts) !== value.inventorySummary.totalCount ||
+        (value.inventorySummary.benefitTypeCounts !== undefined &&
+            (!isCountRecord(value.inventorySummary.benefitTypeCounts) ||
+                countTotal(value.inventorySummary.benefitTypeCounts) !== value.inventorySummary.totalCount))) {
         return false;
     }
     if (value.resourceCoverage !== undefined && !isProjectionRows(value.resourceCoverage))
         return false;
+    if (value.freshness !== undefined && !isReportCommitmentsFreshness(value.freshness))
+        return false;
     return ['coverage', 'obsoleteCandidates', 'reallocationOpportunities', 'purchaseRecommendations', 'renewals'].every(key => isProjectionRows(value[key]));
 };
+/** Status and generatedAt appear together; without them the projection carries no entries. Older packs omit entries. */
+const isReportCommitmentsFreshness = (value) => isRecord(value) &&
+    (value.status === undefined) === (value.generatedAt === undefined) &&
+    (value.status === undefined || (isCommitmentsFreshnessStatus(value.status) && isDateTime(value.generatedAt))) &&
+    (value.entries === undefined ||
+        (Array.isArray(value.entries) &&
+            value.entries.length <= REPORT_EVIDENCE_LIMITS.commitmentsFreshnessEntries &&
+            (value.status !== undefined || value.entries.length === 0) &&
+            value.entries.every(isCommitmentsFreshnessEntry))) &&
+    (value.warnings === undefined || (isStringArray(value.warnings) && value.warnings.length <= REPORT_EVIDENCE_LIMITS.commitmentsFreshnessWarnings));
+const isDataProtectionCostSummary = (value) => isRecord(value) &&
+    hasOptionalStrings(value, ['currencyCode', 'currencySymbol']) &&
+    (value.billingWindow === undefined || isRecord(value.billingWindow)) &&
+    (value.totals === undefined ||
+        (isRecord(value.totals) &&
+            hasOptionalNumbers(value.totals, [
+                'actualCostLast30Days',
+                'actualAmortizedCostLast30Days',
+                'allocatedCostLast30Days',
+                'estimatedMonthlyCostForUnprotected',
+            ])));
+const isResourceHealthEvent = (value) => isRecord(value) &&
+    hasOptionalStrings(value, [
+        'id',
+        'trackingId',
+        'eventType',
+        'status',
+        'level',
+        'title',
+        'summary',
+        'impactStartTime',
+        'impactMitigationTime',
+        'lastUpdateTime',
+    ]) &&
+    isOptionalFiniteNumber(value.priority) &&
+    (value.durationSeconds === undefined || (isFiniteNumber(value.durationSeconds) && value.durationSeconds >= 0)) &&
+    (value.impactedResourceCount === undefined || isCount(value.impactedResourceCount)) &&
+    (value.impactedServices === undefined || isStringArray(value.impactedServices)) &&
+    (value.impactedRegions === undefined || isStringArray(value.impactedRegions));
+const isCommitmentUtilization = (value) => isRecord(value) &&
+    (value.sevenDay !== undefined || value.thirtyDay !== undefined) &&
+    ['sevenDay', 'thirtyDay'].every(key => value[key] === undefined || (isFiniteNumber(value[key]) && value[key] >= 0)) &&
+    (value.source === undefined || ['aggregate', 'usage', 'reservation-summary'].includes(value.source));
 function isCommitmentInventoryRow(value) {
     return (isRecord(value) &&
         hasOptionalStrings(value, [
@@ -165,6 +265,7 @@ function isCommitmentInventoryRow(value) {
         ]) &&
         hasOptionalNumbers(value, ['daysToExpiry', 'reservedQuantity']) &&
         isOptionalBoolean(value.renew) &&
+        (value.utilization === undefined || isCommitmentUtilization(value.utilization)) &&
         (value.annualCommittedCost === undefined || isRecord(value.annualCommittedCost)) &&
         (value.doNotRenewAnnualImpact === undefined || isRecord(value.doNotRenewAnnualImpact)));
 }
@@ -175,6 +276,13 @@ const isReportingProjection = (value) => {
         return false;
     if (value.spend !== undefined && !isReportSpendProjection(value.spend))
         return false;
+    if (value.stories !== undefined && !isReportingStories(value.stories))
+        return false;
+    if (value.costChangePeriods !== undefined &&
+        (!isBoundedRows(value.costChangePeriods, REPORT_EVIDENCE_LIMITS.costChangePeriods, isCostChangePeriod) ||
+            new Set(value.costChangePeriods.rows.map(period => period.period)).size !== value.costChangePeriods.rows.length)) {
+        return false;
+    }
     const subscription = isRecord(value.dashboard.subscription) ? value.dashboard.subscription : undefined;
     const properties = subscription && isRecord(subscription.properties) ? subscription.properties : undefined;
     if (properties?.secureScoreEvidence !== undefined && !isReportSecureScoreEvidence(properties.secureScoreEvidence))
@@ -186,6 +294,11 @@ const isReportingProjection = (value) => {
             (!isBoundedRows(value.recommendationCatalogue, REPORT_EVIDENCE_LIMITS.recommendationCatalogue, isCompactRecommendation) ||
                 value.recommendationCatalogue.totalCount !== value.recommendationPortfolio.activeRecommendationCount)) ||
         !isProjectionRows(value.serviceRetirements) ||
+        (value.credentialDeadlines !== undefined &&
+            (!isRecord(value.credentialDeadlines) ||
+                !isDateTime(value.credentialDeadlines.asOf) ||
+                !isCount(value.credentialDeadlines.overdueCount) ||
+                !isCount(value.credentialDeadlines.upcomingSixMonthsCount))) ||
         !isInventory(value.inventory) ||
         !isGovernance(value.governance) ||
         !isCommitments(value.commitmentsPlanning)) {
@@ -205,13 +318,14 @@ const isReportingProjection = (value) => {
     return (isRecord(patch) &&
         isProjectionRows(patch.machines) &&
         isRecord(protection) &&
+        (protection.costSummary === undefined || isDataProtectionCostSummary(protection.costSummary)) &&
         isProjectionRows(protection.items) &&
         isProjectionRows(protection.issues) &&
         isRecord(health) &&
-        (health.eventCatalogue === undefined || isBoundedRows(health.eventCatalogue, REPORT_EVIDENCE_LIMITS.healthCatalogue, isRecord)) &&
+        (health.eventCatalogue === undefined || isBoundedRows(health.eventCatalogue, REPORT_EVIDENCE_LIMITS.healthCatalogue, isResourceHealthEvent)) &&
         (health.availabilityCatalogue === undefined || isBoundedRows(health.availabilityCatalogue, REPORT_EVIDENCE_LIMITS.healthCatalogue, isRecord)) &&
         isRecord(health.events) &&
-        isProjectionRows(health.events.events) &&
+        isBoundedRows(health.events.events, REPORT_EVIDENCE_LIMITS.detailRows, isResourceHealthEvent) &&
         (health.eventCatalogue === undefined || health.eventCatalogue.totalCount === health.events.events.totalCount) &&
         isRecord(health.availabilityStatuses) &&
         isProjectionRows(health.availabilityStatuses.statuses) &&
@@ -229,10 +343,13 @@ const isReportingProjection = (value) => {
             (isBoundedRows(activity.dailySummary, REPORT_EVIDENCE_LIMITS.activityDays, isActivityDailySummary) &&
                 new Set(activity.dailySummary.rows.map(row => row.date)).size === activity.dailySummary.rows.length)) &&
         (activity.undatedSummary === undefined || isActivityCounts(activity.undatedSummary)) &&
+        isActivityMonthEvidence(activity.verifiedMonths, activity.monthCoverage) &&
         ['changes', 'security', 'health', 'suppressed'].every(key => isProjectionRows(activity[key])));
 };
 const isActivityCounts = (value) => isRecord(value) &&
     ['visibleEvents', 'materialChanges', 'securitySensitive', 'healthEvents', 'failedEvents', 'highFindingCount'].every(key => isCount(value[key])) &&
+    (value.automatedSnapshotEvents === undefined ||
+        (isCount(value.automatedSnapshotEvents) && value.automatedSnapshotEvents <= value.materialChanges)) &&
     ['materialChanges', 'securitySensitive', 'healthEvents', 'failedEvents'].every(key => value[key] <= value.visibleEvents);
 const isActivityMonthlyFindings = (value) => isRecord(value) &&
     isString(value.month) &&
@@ -245,6 +362,64 @@ const isActivityMonthlyFindings = (value) => isRecord(value) &&
         ((typeof row.importance === 'string' && row.importance.toLowerCase() === 'high') ||
             row.isSecuritySensitive === true ||
             (typeof row.status === 'string' && row.status.toLowerCase() === 'failed')));
+const MONTH_PATTERN = /^\d{4}-(0[1-9]|1[0-2])$/;
+const DATE_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
+const DAY_MS = 86400000;
+const daysInMonth = (month) => new Date(Date.UTC(Number(month.slice(0, 4)), Number(month.slice(5, 7)), 0)).getUTCDate();
+const isCalendarDateInMonth = (value, month) => typeof value === 'string' &&
+    DATE_PATTERN.test(value) &&
+    value.slice(0, 7) === month &&
+    Number.isFinite(Date.parse(value)) &&
+    new Date(value).toISOString().slice(0, 10) === value;
+const isActivityMonthCoverage = (value) => {
+    if (!isRecord(value) ||
+        typeof value.month !== 'string' ||
+        !MONTH_PATTERN.test(value.month) ||
+        !['complete', 'partial', 'unavailable'].includes(value.status) ||
+        !['monthly-archive', 'rolling-feed'].includes(value.source) ||
+        !isCount(value.coveredDayCount) ||
+        !isCount(value.expectedDayCount) ||
+        value.expectedDayCount !== daysInMonth(value.month) ||
+        value.coveredDayCount > value.expectedDayCount) {
+        return false;
+    }
+    const covered = value.coveredDayCount;
+    const statusMatches = value.status === 'complete'
+        ? covered === value.expectedDayCount
+        : value.status === 'unavailable'
+            ? covered === 0
+            : covered > 0 && covered < value.expectedDayCount;
+    if (!statusMatches)
+        return false;
+    if (value.coveredFrom === undefined && value.coveredTo === undefined)
+        return true;
+    return (covered > 0 &&
+        isCalendarDateInMonth(value.coveredFrom, value.month) &&
+        isCalendarDateInMonth(value.coveredTo, value.month) &&
+        value.coveredFrom <= value.coveredTo &&
+        (Date.parse(value.coveredTo) - Date.parse(value.coveredFrom)) / DAY_MS + 1 >= covered);
+};
+/** Verified months are unique YYYY-MM values; any verified month listed in coverage is complete, and untruncated coverage lists every verified month. */
+const isActivityMonthEvidence = (verifiedMonths, monthCoverage) => {
+    if (verifiedMonths !== undefined &&
+        (!Array.isArray(verifiedMonths) ||
+            verifiedMonths.length > REPORT_EVIDENCE_LIMITS.activityMonths ||
+            !verifiedMonths.every(month => typeof month === 'string' && MONTH_PATTERN.test(month)) ||
+            new Set(verifiedMonths).size !== verifiedMonths.length)) {
+        return false;
+    }
+    if (monthCoverage === undefined)
+        return true;
+    if (!isBoundedRows(monthCoverage, REPORT_EVIDENCE_LIMITS.activityMonths, isActivityMonthCoverage) ||
+        new Set(monthCoverage.rows.map(row => row.month)).size !== monthCoverage.rows.length) {
+        return false;
+    }
+    const coverageByMonth = new Map(monthCoverage.rows.map(row => [row.month, row.status]));
+    return (verifiedMonths ?? []).every(month => {
+        const status = coverageByMonth.get(month);
+        return status === undefined ? monthCoverage.omittedCount > 0 : status === 'complete';
+    });
+};
 const isActivityDailySummary = (value) => isActivityCounts(value) &&
     isRecord(value) &&
     isString(value.date) &&
@@ -324,6 +499,12 @@ const isHistoryMetrics = (value) => isRecord(value) &&
     value.securityRecommendationCount <= value.recommendationCount &&
     value.securityImpactedResourceCount <= value.impactedResourceCount &&
     isOptionalFiniteNumber(value.maximumMonthlySavings);
+const isUniqueIdentityRows = (value, itemValidator = isString) => isBoundedRows(value, REPORT_EVIDENCE_LIMITS.historyComparisonIdentities, itemValidator) &&
+    new Set(value.rows).size === value.rows.length;
+const isHistoryComparisonIdentities = (value) => isRecord(value) &&
+    isUniqueIdentityRows(value.costRecommendationIds) &&
+    isUniqueIdentityRows(value.undersizedResourceIds) &&
+    isUniqueIdentityRows(value.regulatoryAssessmentKeys, (item) => isString(item) && /^[a-f0-9]{64}$/u.test(item));
 export const isSubscriptionReportHistory = (value) => {
     if (!isRecord(value) ||
         !isString(value.subscriptionId) ||
@@ -343,7 +524,9 @@ export const isSubscriptionReportHistory = (value) => {
             !isString(period.sourceRunId) ||
             !isDateTime(period.sourceGeneratedAt) ||
             !isHistoryMetrics(period.metrics) ||
-            !isBoundedRows(period.recommendations, REPORT_EVIDENCE_LIMITS.historyRecommendations, isRecommendationFingerprint)) {
+            !isBoundedRows(period.recommendations, REPORT_EVIDENCE_LIMITS.historyRecommendations, isRecommendationFingerprint) ||
+            (period.comparisonIdentities !== undefined && !isHistoryComparisonIdentities(period.comparisonIdentities)) ||
+            (period.stories !== undefined && !isStoryFingerprintRows(period.stories))) {
             return false;
         }
         if (period.recommendations.omittedCount === 0 &&
@@ -383,6 +566,7 @@ const isTenantCoverage = (value) => isRecord(value) &&
         (section.requiredPermissions === undefined || isStringArray(section.requiredPermissions)) &&
         (!Array.isArray(section.requiredPermissions) || section.requiredPermissions.length <= 10) &&
         isOptionalFiniteNumber(section.maximumSourceLagHours));
+const isTenantSignInCoverage = (value) => isRecord(value) && ['complete', 'partial', 'unavailable', 'skipped'].includes(value.state);
 const isTenantPrincipal = (value) => isRecord(value) &&
     isString(value.principalId) &&
     isString(value.principalType) &&
@@ -392,7 +576,11 @@ const isTenantPrincipal = (value) => isRecord(value) &&
     typeof value.isPimBacked === 'boolean' &&
     isString(value.lastActivatedEvidence) &&
     hasOptionalStrings(value, ['displayName', 'userPrincipalName', 'mfaStatus', 'lastActivatedAt']) &&
-    isOptionalBoolean(value.accountEnabled);
+    isOptionalBoolean(value.accountEnabled) &&
+    ((value.lastSignInAt === undefined && value.lastSignInEvidence === undefined) ||
+        (value.lastSignInAt === undefined && value.lastSignInEvidence === 'unavailable') ||
+        (isDateTime(value.lastSignInAt) &&
+            (value.lastSignInEvidence === 'last-successful-sign-in' || value.lastSignInEvidence === 'last-interactive-sign-in')));
 export const isTenantReportEvidencePack = (value) => {
     if (!isRecord(value) ||
         !isDateTime(value.generatedAt) ||
@@ -409,5 +597,13 @@ export const isTenantReportEvidencePack = (value) => {
         !isBoundedRows(value.globalAdmins.principals, REPORT_EVIDENCE_LIMITS.tenantGlobalAdministrators, isTenantPrincipal)) {
         return false;
     }
+    const signInCoverage = value.globalAdmins.coverage.userSignInActivity;
+    if (signInCoverage !== undefined && !isTenantSignInCoverage(signInCoverage))
+        return false;
+    if (isRecord(signInCoverage) &&
+        (signInCoverage.state === 'unavailable' || signInCoverage.state === 'skipped') &&
+        value.globalAdmins.principals.rows.some(principal => principal.lastSignInAt !== undefined)) {
+        return false;
+    }
     return true;
 };

package/dist/esm/azure/reportEvidenceValidationHelpers.js

@@ -1,22 +1,6 @@
 import { REPORT_EVIDENCE_LIMITS } from './reportEvidence.js';
-export const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
-export const isString = (value) => typeof value === 'string' && value.trim().length > 0;
-export const isOptionalString = (value) => value === undefined || isString(value);
-export const isFiniteNumber = (value) => typeof value === 'number' && Number.isFinite(value);
-export const isOptionalFiniteNumber = (value) => value === undefined || isFiniteNumber(value);
-export const isOptionalBoolean = (value) => value === undefined || typeof value === 'boolean';
-export const isCount = (value) => isFiniteNumber(value) && Number.isInteger(value) && value >= 0;
-export const isDateTime = (value) => isString(value) && Number.isFinite(Date.parse(value));
-export const isStringArray = (value) => Array.isArray(value) && value.every(isString);
-export const isCountRecord = (value) => isRecord(value) && Object.values(value).every(isCount);
-export const countTotal = (value) => Object.values(value).reduce((total, count) => total + count, 0);
-export const hasOptionalStrings = (value, keys) => keys.every(key => isOptionalString(value[key]));
-export const hasOptionalNumbers = (value, keys) => keys.every(key => isOptionalFiniteNumber(value[key]));
-export const isBoundedRows = (value, limit, isRow) => {
-    if (!isRecord(value) || !isCount(value.totalCount) || !isCount(value.omittedCount) || !Array.isArray(value.rows))
-        return false;
-    return value.rows.length <= limit && value.rows.every(isRow) && value.totalCount === value.rows.length + value.omittedCount;
-};
+import { isBoundedRows, isCount, isCountRecord, isFiniteNumber, isOptionalFiniteNumber, isOptionalString, isRecord, isString, isStringArray, hasOptionalNumbers, hasOptionalStrings, } from '../common/validationHelpers.js';
+export { isRecord, isString, isOptionalString, isFiniteNumber, isOptionalFiniteNumber, isOptionalBoolean, isCount, isDateTime, isStringArray, isCountRecord, countTotal, hasOptionalStrings, hasOptionalNumbers, isBoundedRows, } from '../common/validationHelpers.js';
 export const isProjectionRows = (value, limit = REPORT_EVIDENCE_LIMITS.detailRows) => isBoundedRows(value, limit, isRecord);
 export const hasRequiredRecords = (value, keys) => keys.every(key => isRecord(value[key]));
 export const isSourceFileStatus = (value) => isRecord(value) &&
@@ -52,12 +36,16 @@ export const isResourceSummary = (value) => isRecord(value) &&
     Array.isArray(value.topSpendResources) &&
     value.topSpendResources.length <= REPORT_EVIDENCE_LIMITS.summaryRows &&
     value.topSpendResources.every(isTopSpendResource);
+const isReportBudgetProjection = (value) => isRecord(value) &&
+    hasOptionalStrings(value, ['name', 'startDate', 'endDate', 'timeGrain', 'category', 'currencyCode']) &&
+    hasOptionalNumbers(value, ['amount', 'currentSpend', 'forecastedSpend']) &&
+    (value.filter === undefined || isRecord(value.filter));
 export const isCostSummary = (value) => {
     if (!isRecord(value) || !isRecord(value.sourceMetadata) || !Array.isArray(value.topSpendResources))
         return false;
     if (!hasOptionalStrings(value, ['currency', 'currencySymbol']) ||
         !hasOptionalNumbers(value, ['spend30Days', 'spend30DaysAmortized', 'totalRetailCost', 'miscCost', 'rollingCostRecordCount']) ||
-        (value.budget !== undefined && !isRecord(value.budget)) ||
+        (value.budget !== undefined && !isReportBudgetProjection(value.budget)) ||
         !isString(value.sourceMetadata.spend30DaysSource) ||
         !isString(value.sourceMetadata.spend30DaysAmortizedSource) ||
         !isString(value.sourceMetadata.totalRetailCostSource) ||

package/dist/esm/azure/resilienceFacts.js

@@ -0,0 +1,16 @@
+/**
+ * Resilience facts: the small per-resource property reads the resilience story needs that no other collection
+ * carries — storage blob-service data-protection settings and lifecycle management, Azure SQL database backup
+ * retention and failover groups. Collected in the reliability component beside the data-protection posture and
+ * published as `azure-portal/subscriptions/{id}/resilience-facts.json`. Consumed by the cloud-engine
+ * `ProtectionProfileBuilder` (`data-protection:<selector>` capability sources) and available to the resilience story page.
+ *
+ * Spec: `Specs/reporting/utilization-stories-types-package.md` (parent: core `specs/reporting/utilization-stories.md`).
+ * Additive: consumers tolerate unknown fields. Field semantics: `undefined` = not read (the request failed, was not
+ * applicable or was skipped) and resolves to an `unknown` capability; `null` = read and absent/disabled. A failed
+ * read must never be presented as "disabled".
+ */
+export const RESILIENCE_FACTS_SCHEMA_VERSION = 1;
+export const RESILIENCE_FACTS_SOURCE = 'AzureResilienceFacts';
+export const RESILIENCE_FACTS_PORTAL_FILE = 'resilience-facts.json';
+export const RESILIENCE_FACTS_RAW_FILE = 'data-protection/resilience-facts.json.gz';

package/dist/esm/azure/resilienceFactsValidation.js

@@ -0,0 +1,64 @@
+import { isCount, isDateTime, isFiniteNumber, isRecord, isString, isStringArray } from '../common/validationHelpers.js';
+import { RESILIENCE_FACTS_SCHEMA_VERSION, RESILIENCE_FACTS_SOURCE, } from './resilienceFacts.js';
+const STATUSES = new Set(['collected', 'partial', 'failed', 'not-applicable']);
+const isNullableBoolean = (value) => value === null || typeof value === 'boolean';
+const isNullableNumber = (value) => value === null || isFiniteNumber(value);
+const isOptionalNullableNumber = (value) => value === undefined || isNullableNumber(value);
+const isOptionalNullableString = (value) => value === undefined || value === null || isString(value);
+const isRetention = (value) => value === undefined || value === null || (isRecord(value) && typeof value.enabled === 'boolean' && isOptionalNullableNumber(value.days));
+const isOptionalNullableBoolean = (value) => value === undefined || isNullableBoolean(value);
+const isStorageFacts = (value) => isRecord(value) &&
+    isRetention(value.blobSoftDelete) &&
+    isRetention(value.containerSoftDelete) &&
+    isOptionalNullableBoolean(value.versioning) &&
+    isRetention(value.changeFeed) &&
+    isRetention(value.pointInTimeRestore) &&
+    isOptionalNullableString(value.kind) &&
+    (value.managementPolicy === undefined ||
+        value.managementPolicy === null ||
+        (isRecord(value.managementPolicy) &&
+            typeof value.managementPolicy.present === 'boolean' &&
+            (value.managementPolicy.ruleCount === undefined || isCount(value.managementPolicy.ruleCount))));
+const isSqlFacts = (value) => isRecord(value) &&
+    isOptionalNullableNumber(value.shortTermRetentionDays) &&
+    isOptionalNullableNumber(value.diffBackupIntervalHours) &&
+    (value.longTermRetention === undefined ||
+        value.longTermRetention === null ||
+        (isRecord(value.longTermRetention) &&
+            typeof value.longTermRetention.enabled === 'boolean' &&
+            isOptionalNullableString(value.longTermRetention.weekly) &&
+            isOptionalNullableString(value.longTermRetention.monthly) &&
+            isOptionalNullableString(value.longTermRetention.yearly) &&
+            isOptionalNullableNumber(value.longTermRetention.weekOfYear))) &&
+    (value.failoverGroup === undefined ||
+        value.failoverGroup === null ||
+        (isRecord(value.failoverGroup) &&
+            isString(value.failoverGroup.id) &&
+            isString(value.failoverGroup.name) &&
+            isStringArray(value.failoverGroup.partnerServers) &&
+            isOptionalNullableString(value.failoverGroup.readWriteFailoverPolicy) &&
+            isOptionalNullableString(value.failoverGroup.role))) &&
+    isOptionalNullableString(value.backupStorageRedundancy);
+export const isResilienceFactsItem = (value) => isRecord(value) &&
+    isString(value.resourceId) &&
+    isString(value.resourceType) &&
+    isString(value.status) &&
+    STATUSES.has(value.status) &&
+    isDateTime(value.observedAt) &&
+    isCount(value.requestCount) &&
+    (value.errors === undefined || isStringArray(value.errors)) &&
+    (value.storage === undefined || isStorageFacts(value.storage)) &&
+    (value.sql === undefined || isSqlFacts(value.sql));
+export const isResilienceFactsProjection = (value) => isRecord(value) &&
+    value.schemaVersion === RESILIENCE_FACTS_SCHEMA_VERSION &&
+    value.source === RESILIENCE_FACTS_SOURCE &&
+    isString(value.subscriptionId) &&
+    (value.tenantId === undefined || isString(value.tenantId)) &&
+    isDateTime(value.generatedAt) &&
+    isRecord(value.summary) &&
+    (value.summary.notApplicable === undefined || isCount(value.summary.notApplicable)) &&
+    ['storageAccounts', 'sqlDatabases', 'sqlServers', 'collected', 'partial', 'failed', 'requestCount'].every(key => isCount(value.summary[key])) &&
+    Array.isArray(value.items) &&
+    value.items.every(isResilienceFactsItem) &&
+    Array.isArray(value.issues) &&
+    value.issues.every(issue => isRecord(issue) && (issue.severity === 'warning' || issue.severity === 'error') && isString(issue.code) && isString(issue.message));

package/dist/esm/common/index.js

@@ -4,6 +4,9 @@ export * from './pagination.js';
 export * from './provider.js';
 export * from './providerSyncProgress.js';
 export * from './relationships.js';
+export * from './resourceGraph.js';
+export * from './resourceGraphValidation.js';
+export * from './resourceIdentity.js';
 export * from './syncProgress.js';
 export * from './sha256.js';
 export * from './exactDecimal.js';

package/dist/esm/common/resourceGraph.js

@@ -0,0 +1,13 @@
+/**
+ * Provider-neutral resource relationship graph published for one provider
+ * account. Families, relationship types, and synthetic types are open
+ * identifiers: a new provider service needs no package change.
+ */
+export const RESOURCE_GRAPH_SCHEMA_VERSION = 1;
+/** Package-owned logical artifact name; storage paths remain producer-owned. */
+export const RESOURCE_GRAPH_LOGICAL_NAME = 'relationships.json.gz';
+export const RESOURCE_GRAPH_NODE_KINDS = ['scope', 'region', 'zone', 'group', 'resource', 'synthetic'];
+export const RESOURCE_GRAPH_NODE_ROLES = ['network-baseline', 'topology', 'workload'];
+export const RESOURCE_GRAPH_EDGE_KINDS = ['contains', 'depends_on'];
+export const RESOURCE_GRAPH_EDGE_CONFIDENCES = ['high', 'medium', 'low'];
+export const RESOURCE_GRAPH_EVIDENCE_METHODS = ['field-derived', 'field-reference', 'persisted-inventory', 'request-scope'];