@spottoai/types-package 1.0.2-dev1138.13 → 1.0.2-dev1138.14

package/dist/aws/relationships.js.map

@@ -1 +1 @@
-{"version":3,"file":"relationships.js","sourceRoot":"","sources":["../../src/aws/relationships.ts"],"names":[],"mappings":";;;AAAA,2GAAqG;AAA5F,mKAAA,qCAAqC,OAAA"}
+{"version":3,"file":"relationships.js","sourceRoot":"","sources":["../../src/aws/relationships.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wHAAwH;AACxH,kDAAgC;AAChC,0DAAwC;AACxC,6DAA2C"}

package/dist/aws/requests.d.ts

@@ -3,15 +3,18 @@ export declare const AWS_COMMAND_SCHEMA_VERSION: 1;
 /** Canonical provider wire value for AWS commands. */
 export declare const AWS_COMMAND_PROVIDER: "aws";
 /** Entities handled by AWS estate orchestration. */
-export declare const AWS_COMMAND_ENTITIES: readonly ["estate", "account", "billing-source"];
+export declare const AWS_COMMAND_ENTITIES: readonly ["estate", "account", "billing-source", "organization-commitments", "scheduler"];
 /** Actions supported across AWS estate orchestration commands. */
-export declare const AWS_COMMAND_ACTIONS: readonly ["reconcile", "refresh", "delete"];
+export declare const AWS_COMMAND_ACTIONS: readonly ["reconcile", "refresh", "delete", "tick"];
+/** Scheduled AWS scan cadences emitted by the enqueue-only API scheduler. */
+export declare const AWS_SCHEDULED_REFRESH_SCAN_KINDS: readonly ["full", "components"];
 /** Credential-shaped keys forbidden from shared AWS configuration and commands. */
 export declare const AWS_FORBIDDEN_CREDENTIAL_FIELDS: readonly ["accessKeyId", "secretAccessKey", "sessionToken", "credentials", "resolvedCredentials", "secret", "encryptedSecret", "credentialReference"];
 export type AwsCommandSchemaVersion = typeof AWS_COMMAND_SCHEMA_VERSION;
 export type AwsCommandProvider = typeof AWS_COMMAND_PROVIDER;
 export type AwsCommandEntity = (typeof AWS_COMMAND_ENTITIES)[number];
 export type AwsCommandAction = (typeof AWS_COMMAND_ACTIONS)[number];
+export type AwsScheduledRefreshScanKind = (typeof AWS_SCHEDULED_REFRESH_SCAN_KINDS)[number];
 export type AwsForbiddenCredentialField = (typeof AWS_FORBIDDEN_CREDENTIAL_FIELDS)[number];
 /**
  * Makes raw, resolved, or stored AWS credential material unrepresentable.
@@ -29,6 +32,11 @@ export type AwsCommandForbiddenConfigurationFields = AwsForbiddenCredentialField
     externalId?: never;
     billingExport?: never;
     manifest?: never;
+    organizationId?: never;
+    managementAccountId?: never;
+    payerAccountId?: never;
+    accountIds?: never;
+    membership?: never;
 };
 /** Common secret-free envelope shared by every AWS orchestration command. */
 export interface AwsCommandBase extends AwsCommandForbiddenConfigurationFields {
@@ -79,6 +87,41 @@ export interface AwsBillingSourceRefreshCommand extends AwsCommandBase {
     estateId: string;
     billingSourceId: string;
 }
+/** Starts the dedicated commitments refresh for one desired organization estate. */
+export interface AwsOrganizationCommitmentsRefreshCommand extends AwsCommandBase {
+    entity: 'organization-commitments';
+    action: 'refresh';
+    estateId: string;
+}
+/**
+ * Wakes engine-owned AWS due selection for one exact scheduler slot.
+ * Account enumeration, desired state, credentials, Regions, and provider
+ * windows remain engine-owned and are intentionally absent.
+ */
+export interface AwsScheduledRefreshTickCommand extends AwsCommandForbiddenConfigurationFields {
+    schemaVersion: AwsCommandSchemaVersion;
+    provider: AwsCommandProvider;
+    entity: 'scheduler';
+    action: 'tick';
+    scanKind: AwsScheduledRefreshScanKind;
+    /** Exact ISO-8601 timestamp supplied by the triggering cron event. */
+    scheduledAt: string;
+    requestId: string;
+    correlationId: string;
+    requestedAt: string;
+    companyId?: never;
+    manifestRevision?: never;
+    estateId?: never;
+    accountId?: never;
+    cloudAccountId?: never;
+    billingSourceId?: never;
+    region?: never;
+    regions?: never;
+    startTime?: never;
+    endTime?: never;
+    timeWindow?: never;
+    billingDestination?: never;
+}
 /** Complete command union consumed by the dedicated AWS orchestration ingress. */
-export type AwsCommand = AwsEstateReconcileCommand | AwsEstateDeleteCommand | AwsAccountRefreshCommand | AwsAccountDeleteCommand | AwsBillingSourceRefreshCommand;
+export type AwsCommand = AwsEstateReconcileCommand | AwsEstateDeleteCommand | AwsAccountRefreshCommand | AwsAccountDeleteCommand | AwsBillingSourceRefreshCommand | AwsOrganizationCommitmentsRefreshCommand | AwsScheduledRefreshTickCommand;
 //# sourceMappingURL=requests.d.ts.map

package/dist/aws/requests.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../src/aws/requests.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAErD,sDAAsD;AACtD,eAAO,MAAM,oBAAoB,EAAG,KAAc,CAAC;AAEnD,oDAAoD;AACpD,eAAO,MAAM,oBAAoB,kDAAmD,CAAC;AAErF,kEAAkE;AAClE,eAAO,MAAM,mBAAmB,6CAA8C,CAAC;AAE/E,mFAAmF;AACnF,eAAO,MAAM,+BAA+B,uJASlC,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,OAAO,0BAA0B,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,OAAO,oBAAoB,CAAC;AAC7D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACpE,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GAAG;KACxC,KAAK,IAAI,2BAA2B,CAAC,CAAC,EAAE,KAAK;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,sCAAsC,GAAG,4BAA4B,GAAG;IAClF,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,WAAW,cAAe,SAAQ,sCAAsC;IAC5E,aAAa,EAAE,uBAAuB,CAAC;IACvC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,uEAAuE;AACvE,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAC/D,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,mFAAmF;AACnF,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,mFAAmF;AACnF,MAAM,WAAW,wBAAyB,SAAQ,cAAc;IAC9D,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wEAAwE;AACxE,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,0EAA0E;AAC1E,MAAM,WAAW,8BAA+B,SAAQ,cAAc;IACpE,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,kFAAkF;AAClF,MAAM,MAAM,UAAU,GAClB,yBAAyB,GACzB,sBAAsB,GACtB,wBAAwB,GACxB,uBAAuB,GACvB,8BAA8B,CAAC"}
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../src/aws/requests.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAErD,sDAAsD;AACtD,eAAO,MAAM,oBAAoB,EAAG,KAAc,CAAC;AAEnD,oDAAoD;AACpD,eAAO,MAAM,oBAAoB,2FAA4F,CAAC;AAE9H,kEAAkE;AAClE,eAAO,MAAM,mBAAmB,qDAAsD,CAAC;AAEvF,6EAA6E;AAC7E,eAAO,MAAM,gCAAgC,iCAAkC,CAAC;AAEhF,mFAAmF;AACnF,eAAO,MAAM,+BAA+B,uJASlC,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,OAAO,0BAA0B,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,OAAO,oBAAoB,CAAC;AAC7D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACpE,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5F,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GAAG;KACxC,KAAK,IAAI,2BAA2B,CAAC,CAAC,EAAE,KAAK;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,sCAAsC,GAAG,4BAA4B,GAAG;IAClF,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,cAAc,CAAC,EAAE,KAAK,CAAC;IACvB,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B,cAAc,CAAC,EAAE,KAAK,CAAC;IACvB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,WAAW,cAAe,SAAQ,sCAAsC;IAC5E,aAAa,EAAE,uBAAuB,CAAC;IACvC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,uEAAuE;AACvE,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAC/D,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,mFAAmF;AACnF,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,mFAAmF;AACnF,MAAM,WAAW,wBAAyB,SAAQ,cAAc;IAC9D,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wEAAwE;AACxE,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,0EAA0E;AAC1E,MAAM,WAAW,8BAA+B,SAAQ,cAAc;IACpE,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,oFAAoF;AACpF,MAAM,WAAW,wCAAyC,SAAQ,cAAc;IAC9E,MAAM,EAAE,0BAA0B,CAAC;IACnC,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA+B,SAAQ,sCAAsC;IAC5F,aAAa,EAAE,uBAAuB,CAAC;IACvC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,2BAA2B,CAAC;IACtC,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,cAAc,CAAC,EAAE,KAAK,CAAC;IACvB,eAAe,CAAC,EAAE,KAAK,CAAC;IACxB,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,kBAAkB,CAAC,EAAE,KAAK,CAAC;CAC5B;AAED,kFAAkF;AAClF,MAAM,MAAM,UAAU,GAClB,yBAAyB,GACzB,sBAAsB,GACtB,wBAAwB,GACxB,uBAAuB,GACvB,8BAA8B,GAC9B,wCAAwC,GACxC,8BAA8B,CAAC"}

package/dist/aws/requests.js

@@ -1,14 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AWS_FORBIDDEN_CREDENTIAL_FIELDS = exports.AWS_COMMAND_ACTIONS = exports.AWS_COMMAND_ENTITIES = exports.AWS_COMMAND_PROVIDER = exports.AWS_COMMAND_SCHEMA_VERSION = void 0;
+exports.AWS_FORBIDDEN_CREDENTIAL_FIELDS = exports.AWS_SCHEDULED_REFRESH_SCAN_KINDS = exports.AWS_COMMAND_ACTIONS = exports.AWS_COMMAND_ENTITIES = exports.AWS_COMMAND_PROVIDER = exports.AWS_COMMAND_SCHEMA_VERSION = void 0;
 /** Schema version for AWS estate orchestration commands. */
 exports.AWS_COMMAND_SCHEMA_VERSION = 1;
 /** Canonical provider wire value for AWS commands. */
 exports.AWS_COMMAND_PROVIDER = 'aws';
 /** Entities handled by AWS estate orchestration. */
-exports.AWS_COMMAND_ENTITIES = ['estate', 'account', 'billing-source'];
+exports.AWS_COMMAND_ENTITIES = ['estate', 'account', 'billing-source', 'organization-commitments', 'scheduler'];
 /** Actions supported across AWS estate orchestration commands. */
-exports.AWS_COMMAND_ACTIONS = ['reconcile', 'refresh', 'delete'];
+exports.AWS_COMMAND_ACTIONS = ['reconcile', 'refresh', 'delete', 'tick'];
+/** Scheduled AWS scan cadences emitted by the enqueue-only API scheduler. */
+exports.AWS_SCHEDULED_REFRESH_SCAN_KINDS = ['full', 'components'];
 /** Credential-shaped keys forbidden from shared AWS configuration and commands. */
 exports.AWS_FORBIDDEN_CREDENTIAL_FIELDS = [
     'accessKeyId',

package/dist/aws/requests.js.map

@@ -1 +1 @@
-{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../src/aws/requests.ts"],"names":[],"mappings":";;;AAAA,4DAA4D;AAC/C,QAAA,0BAA0B,GAAG,CAAU,CAAC;AAErD,sDAAsD;AACzC,QAAA,oBAAoB,GAAG,KAAc,CAAC;AAEnD,oDAAoD;AACvC,QAAA,oBAAoB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAU,CAAC;AAErF,kEAAkE;AACrD,QAAA,mBAAmB,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAE/E,mFAAmF;AACtE,QAAA,+BAA+B,GAAG;IAC7C,aAAa;IACb,iBAAiB;IACjB,cAAc;IACd,aAAa;IACb,qBAAqB;IACrB,QAAQ;IACR,iBAAiB;IACjB,qBAAqB;CACb,CAAC"}
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../src/aws/requests.ts"],"names":[],"mappings":";;;AAAA,4DAA4D;AAC/C,QAAA,0BAA0B,GAAG,CAAU,CAAC;AAErD,sDAAsD;AACzC,QAAA,oBAAoB,GAAG,KAAc,CAAC;AAEnD,oDAAoD;AACvC,QAAA,oBAAoB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,WAAW,CAAU,CAAC;AAE9H,kEAAkE;AACrD,QAAA,mBAAmB,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAEvF,6EAA6E;AAChE,QAAA,gCAAgC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAU,CAAC;AAEhF,mFAAmF;AACtE,QAAA,+BAA+B,GAAG;IAC7C,aAAa;IACb,iBAAiB;IACjB,cAAc;IACd,aAAa;IACb,qBAAqB;IACrB,QAAQ;IACR,iBAAiB;IACjB,qBAAqB;CACb,CAAC"}

package/dist/aws/resourceGraph.d.ts

@@ -0,0 +1,14 @@
+import type { ResourceGraphArtifact } from '../common/resourceGraph.js';
+import type { AwsPublicArtifactForbiddenCredentialFields } from './publicArtifacts.js';
+/** CloudFormation-style resource type, for example `AWS::EC2::Instance`. */
+export declare const AWS_RESOURCE_TYPE_PATTERN: RegExp;
+/** Region value for account-global resources such as IAM. */
+export declare const AWS_GLOBAL_REGION: "global";
+/** The AWS resource graph: the provider-neutral graph bound to one AWS account. */
+export type AwsResourceGraphArtifact<AccountId extends string = string, RunId extends string = string> = ResourceGraphArtifact<'aws', AccountId, RunId> & AwsPublicArtifactForbiddenCredentialFields;
+/**
+ * Validates one untrusted AWS resource graph. Adds AWS identifier formats to
+ * the generic structural checks; any discovery family is accepted.
+ */
+export declare function validateAwsResourceGraphArtifact(value: unknown): AwsResourceGraphArtifact;
+//# sourceMappingURL=resourceGraph.d.ts.map

package/dist/aws/resourceGraph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceGraph.d.ts","sourceRoot":"","sources":["../../src/aws/resourceGraph.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAOxE,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,sBAAsB,CAAC;AAGvF,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,QAAsC,CAAC;AAE7E,6DAA6D;AAC7D,eAAO,MAAM,iBAAiB,EAAG,QAAiB,CAAC;AAEnD,mFAAmF;AACnF,MAAM,MAAM,wBAAwB,CAAC,SAAS,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,qBAAqB,CAC5H,KAAK,EACL,SAAS,EACT,KAAK,CACN,GACC,0CAA0C,CAAC;AAkB7C;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAEzF"}

package/dist/aws/resourceGraph.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWS_GLOBAL_REGION = exports.AWS_RESOURCE_TYPE_PATTERN = void 0;
+exports.validateAwsResourceGraphArtifact = validateAwsResourceGraphArtifact;
+const resourceGraphValidation_js_1 = require("../common/resourceGraphValidation.js");
+const validationHelpers_js_1 = require("./validationHelpers.js");
+/** CloudFormation-style resource type, for example `AWS::EC2::Instance`. */
+exports.AWS_RESOURCE_TYPE_PATTERN = /^AWS::[A-Za-z0-9]+::[A-Za-z0-9]+$/;
+/** Region value for account-global resources such as IAM. */
+exports.AWS_GLOBAL_REGION = 'global';
+const ARN_PATTERN = /^arn:(aws(?:-[a-z0-9-]+)?):[^:]+:([^:]*):([^:]*):.+$/;
+const AVAILABILITY_ZONE_KEY_PATTERN = /(?:^a|A)vailabilityZone(?:Name)?s?$/;
+const AWS_RESOURCE_GRAPH_RULES = {
+    provider: 'aws',
+    isAccountId: value => validationHelpers_js_1.AWS_ACCOUNT_ID_PATTERN.test(value),
+    isRegion: value => value === exports.AWS_GLOBAL_REGION || validationHelpers_js_1.AWS_REGION_PATTERN.test(value),
+    isResourceType: value => exports.AWS_RESOURCE_TYPE_PATTERN.test(value),
+    validateNativeId: (nativeId, scope, field) => {
+        if (nativeId.startsWith('arn:'))
+            validateScopedArn(nativeId, scope, field, false);
+    },
+    validateZone: validateAvailabilityZone,
+    validateAttribute: validateAttributeFormat,
+    isForbiddenKey: (key, inAttributes) => (inAttributes ? (0, validationHelpers_js_1.isAwsCredentialKey)(key) : (0, validationHelpers_js_1.isForbiddenAwsPublicKey)(key)),
+};
+/**
+ * Validates one untrusted AWS resource graph. Adds AWS identifier formats to
+ * the generic structural checks; any discovery family is accepted.
+ */
+function validateAwsResourceGraphArtifact(value) {
+    return (0, resourceGraphValidation_js_1.validateResourceGraphArtifact)(value, AWS_RESOURCE_GRAPH_RULES);
+}
+/**
+ * An ARN must stay inside its node's account and Region. Empty ARN segments
+ * (S3, IAM) are allowed; attribute references may also name AWS-owned (`aws`) resources.
+ */
+function validateScopedArn(value, scope, field, allowAwsOwned) {
+    const match = ARN_PATTERN.exec(value);
+    if (!match)
+        throw new Error(`${field} must be a canonical AWS ARN.`);
+    const [, , arnRegion, arnAccountId] = match;
+    const expectedRegion = scope.region === exports.AWS_GLOBAL_REGION ? '' : scope.region;
+    if (arnRegion !== '' && arnRegion !== expectedRegion)
+        throw new Error(`${field} ARN Region must match its node Region.`);
+    if (arnAccountId !== '' && arnAccountId !== scope.accountId && !(allowAwsOwned && arnAccountId === 'aws'))
+        throw new Error(`${field} ARN account must match the artifact account.`);
+}
+function validateAvailabilityZone(value, region, field) {
+    if (region === exports.AWS_GLOBAL_REGION || value === region || !value.startsWith(region))
+        throw new Error(`${field} must belong to its node Region.`);
+}
+function validateAttributeFormat(key, value, scope, field) {
+    if (key.endsWith('Arn')) {
+        if (typeof value !== 'string')
+            throw new Error(`${field} must be an ARN string.`);
+        validateScopedArn(value, scope, field, true);
+    }
+    if (AVAILABILITY_ZONE_KEY_PATTERN.test(key)) {
+        const zones = Array.isArray(value) ? value : [value];
+        zones.forEach((zone, index) => {
+            const zoneField = Array.isArray(value) ? `${field}[${index}]` : field;
+            if (typeof zone !== 'string')
+                throw new Error(`${zoneField} must be an Availability Zone name.`);
+            validateAvailabilityZone(zone, scope.region ?? exports.AWS_GLOBAL_REGION, zoneField);
+        });
+    }
+}
+//# sourceMappingURL=resourceGraph.js.map

package/dist/aws/resourceGraph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceGraph.js","sourceRoot":"","sources":["../../src/aws/resourceGraph.ts"],"names":[],"mappings":";;;AA4CA,4EAEC;AA7CD,qFAI8C;AAG9C,iEAAiI;AAEjI,4EAA4E;AAC/D,QAAA,yBAAyB,GAAG,mCAAmC,CAAC;AAE7E,6DAA6D;AAChD,QAAA,iBAAiB,GAAG,QAAiB,CAAC;AAUnD,MAAM,WAAW,GAAG,sDAAsD,CAAC;AAC3E,MAAM,6BAA6B,GAAG,qCAAqC,CAAC;AAE5E,MAAM,wBAAwB,GAA0C;IACtE,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,6CAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;IACxD,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,yBAAiB,IAAI,yCAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;IAChF,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,iCAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;IAC9D,gBAAgB,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACpF,CAAC;IACD,YAAY,EAAE,wBAAwB;IACtC,iBAAiB,EAAE,uBAAuB;IAC1C,cAAc,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAA,yCAAkB,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,8CAAuB,EAAC,GAAG,CAAC,CAAC;CAC/G,CAAC;AAEF;;;GAGG;AACH,SAAgB,gCAAgC,CAAC,KAAc;IAC7D,OAAO,IAAA,0DAA6B,EAAC,KAAK,EAAE,wBAAwB,CAA6B,CAAC;AACpG,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,KAA6B,EAAE,KAAa,EAAE,aAAsB;IAC5G,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IACrE,MAAM,CAAC,EAAE,AAAD,EAAG,SAAS,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;IAC5C,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,KAAK,yBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;IAC9E,IAAI,SAAS,KAAK,EAAE,IAAI,SAAS,KAAK,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IACzH,IAAI,YAAY,KAAK,EAAE,IAAI,YAAY,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,aAAa,IAAI,YAAY,KAAK,KAAK,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+CAA+C,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa,EAAE,MAAc,EAAE,KAAa;IAC5E,IAAI,MAAM,KAAK,yBAAiB,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;AACjJ,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW,EAAE,KAAqB,EAAE,KAA6B,EAAE,KAAa;IAC/G,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;QAClF,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YACtE,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,qCAAqC,CAAC,CAAC;YACjG,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,IAAI,yBAAiB,EAAE,SAAS,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/aws/validationHelpers.d.ts

@@ -0,0 +1,8 @@
+export declare const AWS_ACCOUNT_ID_PATTERN: RegExp;
+export declare const AWS_REGION_PATTERN: RegExp;
+export declare const isAwsCredentialKey: (key: string) => boolean;
+export declare const isForbiddenAwsPublicKey: (key: string) => boolean;
+/** Rejects non-JSON values plus credential, physical-path, and operational-marker keys recursively. */
+export declare function assertAwsPublicJson(value: unknown, field: string): void;
+export declare function assertAccount(value: unknown, accountId: string, field: string): void;
+//# sourceMappingURL=validationHelpers.d.ts.map

package/dist/aws/validationHelpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validationHelpers.d.ts","sourceRoot":"","sources":["../../src/aws/validationHelpers.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,sBAAsB,QAAa,CAAC;AACjD,eAAO,MAAM,kBAAkB,QAAuC,CAAC;AAuCvE,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,KAAG,OAAiD,CAAC;AAEnG,eAAO,MAAM,uBAAuB,GAAI,KAAK,MAAM,KAAG,OACmD,CAAC;AAE1G,uGAAuG;AACvG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEvE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAGpF"}

package/dist/aws/validationHelpers.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isForbiddenAwsPublicKey = exports.isAwsCredentialKey = exports.AWS_REGION_PATTERN = exports.AWS_ACCOUNT_ID_PATTERN = void 0;
+exports.assertAwsPublicJson = assertAwsPublicJson;
+exports.assertAccount = assertAccount;
+const validationHelpers_js_1 = require("../common/validationHelpers.js");
+const requests_js_1 = require("./requests.js");
+exports.AWS_ACCOUNT_ID_PATTERN = /^\d{12}$/;
+exports.AWS_REGION_PATTERN = /^[a-z]{2}(?:-gov)?-[a-z0-9-]+-\d+$/;
+/** Credential material and setup secrets; rejected at every depth of a public artifact. */
+const CREDENTIAL_KEYS = new Set([...requests_js_1.AWS_FORBIDDEN_CREDENTIAL_FIELDS, 'externalId', 'secretReference', 'credentialReference'].map(key => key.toLowerCase()));
+/** Setup locators and engine-operational markers that never belong on a public envelope. */
+const OPERATIONAL_KEYS = new Set([
+    'roleArn',
+    'secretArn',
+    'storagePath',
+    'sourcePath',
+    'path',
+    'blobPath',
+    'containerPath',
+    'chunk',
+    'chunks',
+    'lease',
+    'retries',
+    'retry',
+    'refreshState',
+    'lastRefreshExecutionRequestId',
+    'lastRefreshExecutionRequestedAt',
+    'prompt',
+    'promptInput',
+    'sourceBytes',
+    'maxSourceBytes',
+    'bedrockRegion',
+    'guardrailId',
+    'guardrailVersion',
+    'etag',
+    'eTag',
+    'retiredAt',
+].map(key => key.toLowerCase()));
+const OPERATIONAL_KEY_PATTERN = /^(?:source|storage|blob|container)(?:path|uri|url|key)$|^s3(?:bucket|key|uri|url)$/i;
+const isAwsCredentialKey = (key) => CREDENTIAL_KEYS.has(key.toLowerCase());
+exports.isAwsCredentialKey = isAwsCredentialKey;
+const isForbiddenAwsPublicKey = (key) => (0, exports.isAwsCredentialKey)(key) || OPERATIONAL_KEYS.has(key.toLowerCase()) || OPERATIONAL_KEY_PATTERN.test(key);
+exports.isForbiddenAwsPublicKey = isForbiddenAwsPublicKey;
+/** Rejects non-JSON values plus credential, physical-path, and operational-marker keys recursively. */
+function assertAwsPublicJson(value, field) {
+    (0, validationHelpers_js_1.assertPlainJson)(value, field, exports.isForbiddenAwsPublicKey);
+}
+function assertAccount(value, accountId, field) {
+    (0, validationHelpers_js_1.assertValue)(value, accountId, field);
+    if (!exports.AWS_ACCOUNT_ID_PATTERN.test(accountId))
+        throw new Error(`${field} must be a 12-digit AWS account id.`);
+}
+//# sourceMappingURL=validationHelpers.js.map

package/dist/aws/validationHelpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validationHelpers.js","sourceRoot":"","sources":["../../src/aws/validationHelpers.ts"],"names":[],"mappings":";;;AAiDA,kDAEC;AAED,sCAGC;AAxDD,yEAA8E;AAC9E,+CAAgE;AAEnD,QAAA,sBAAsB,GAAG,UAAU,CAAC;AACpC,QAAA,kBAAkB,GAAG,oCAAoC,CAAC;AAEvE,2FAA2F;AAC3F,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,CAAC,GAAG,6CAA+B,EAAE,YAAY,EAAE,iBAAiB,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAC3H,CAAC;AAEF,4FAA4F;AAC5F,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B;IACE,SAAS;IACT,WAAW;IACX,aAAa;IACb,YAAY;IACZ,MAAM;IACN,UAAU;IACV,eAAe;IACf,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,cAAc;IACd,+BAA+B;IAC/B,iCAAiC;IACjC,QAAQ;IACR,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,kBAAkB;IAClB,MAAM;IACN,MAAM;IACN,WAAW;CACZ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAChC,CAAC;AACF,MAAM,uBAAuB,GAAG,qFAAqF,CAAC;AAE/G,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAAtF,QAAA,kBAAkB,sBAAoE;AAE5F,MAAM,uBAAuB,GAAG,CAAC,GAAW,EAAW,EAAE,CAC9D,IAAA,0BAAkB,EAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAD7F,QAAA,uBAAuB,2BACsE;AAE1G,uGAAuG;AACvG,SAAgB,mBAAmB,CAAC,KAAc,EAAE,KAAa;IAC/D,IAAA,sCAAe,EAAC,KAAK,EAAE,KAAK,EAAE,+BAAuB,CAAC,CAAC;AACzD,CAAC;AAED,SAAgB,aAAa,CAAC,KAAc,EAAE,SAAiB,EAAE,KAAa;IAC5E,IAAA,kCAAW,EAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,8BAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;AAC9G,CAAC"}

package/dist/azure/activityLogAnalysis.d.ts

@@ -0,0 +1,320 @@
+export declare const ACTIVITY_LOG_TAXONOMY_VERSION: "v1";
+export declare const ACTIVITY_LOG_ANALYSIS_VERSION: "v1";
+export declare const CONFORMED_ACTIVITY_ANALYSIS_SCHEMA_VERSION: 1;
+export declare const PORTAL_ACTIVITY_ANALYSIS_RESPONSE_SCHEMA_VERSION: 1;
+export declare const CONFORMED_ACTIVITY_ANALYSIS_LIMITS_V1: Readonly<{
+    readonly sourceShardFingerprintCodeUnits: number;
+}>;
+export declare const PORTAL_ACTIVITY_ANALYSIS_LIMITS_V1: Readonly<{
+    readonly tagAssignmentsPerEvent: 32;
+    readonly facetTagRows: 64;
+    readonly facetOperationRows: 4096;
+    readonly facetProviderRows: 512;
+    readonly facetResourceTypeRows: 4096;
+    readonly facetResultRows: 256;
+    readonly facetOperationEffectRows: 8;
+    readonly facetExecutionOriginRows: 8;
+    readonly activitySeries: 10000;
+    readonly resourceSummaries: 10000;
+    readonly operationSummaries: 4096;
+    readonly securitySensitive: 4096;
+    readonly powerPatterns: 4096;
+    readonly operationCountsPerItem: 256;
+    readonly resultCountsPerItem: 256;
+    readonly tagCountsPerItem: 64;
+    readonly executionOriginCountsPerItem: 8;
+    readonly evidenceIdsPerItem: 20;
+    readonly reasonCodesPerItem: 32;
+    readonly resourceIdCodeUnits: 2048;
+    readonly operationCodeUnits: 512;
+    readonly providerCodeUnits: 256;
+    readonly resourceTypeCodeUnits: 512;
+    readonly resourceNameCodeUnits: 512;
+    readonly reasonCodeUnits: 128;
+    readonly responseUtf8Bytes: 33554432;
+}>;
+export declare const ACTIVITY_LOG_TAG_IDS: readonly ["actor.manual", "actor.workload-automation", "actor.azure-platform", "actor.unknown", "change.material", "intent.credential-access", "intent.remote-execution", "intent.power-control", "security.sensitive-operation", "security.credential-access", "security.remote-execution", "security.privileged-access-change", "security.security-boundary-change", "security.protection-control-change", "security.destructive-action", "scheduler.power-operation"];
+export type ActivityLogTagId = (typeof ACTIVITY_LOG_TAG_IDS)[number];
+export type ActivityLogTagDimension = 'actor' | 'change' | 'intent' | 'security' | 'scheduler';
+export type ActivityLogClassificationConfidence = 'high' | 'medium' | 'low';
+export type ActivityLogExecutionOrigin = 'manual' | 'workloadAutomation' | 'azurePlatform' | 'unknown';
+export type ActivityLogOperationEffect = 'write' | 'delete' | 'action' | 'read' | 'other';
+export type ActivityLogScopeLevel = 'subscription' | 'resourceGroup' | 'resource' | 'unknown';
+export type ActivityLogPowerDataSufficiency = 'oneSided' | 'oneOff' | 'sameDayRepeat' | 'repeated';
+export type ActivityLogClassificationState = 'complete' | 'partial' | 'unavailable';
+export type PortalActivityEvidenceId = `aev1_${string}`;
+export type PortalActivityAnalysisGroupId = `aag1_${string}`;
+export type PortalActivityAnalysisReasonCode = 'derived.operation-summary' | 'derived.security-sensitive-activity' | 'derived.power-pattern-evidence' | `tag.${ActivityLogTagId}`;
+export interface PortalActivityLogAnalysisScope {
+    subscriptionId: string;
+    level: ActivityLogScopeLevel;
+    resourceId?: string;
+    resourceGroup?: string;
+    provider?: string;
+    resourceType?: string;
+    resourceName?: string;
+}
+export interface PortalActivityLogTagAssignment {
+    tagId: ActivityLogTagId;
+    dimension: ActivityLogTagDimension;
+    confidence: ActivityLogClassificationConfidence;
+}
+export interface PortalActivityLogClassification {
+    taxonomyVersion: typeof ACTIVITY_LOG_TAXONOMY_VERSION;
+    executionOrigin: ActivityLogExecutionOrigin;
+    operationEffect: ActivityLogOperationEffect;
+    scope: PortalActivityLogAnalysisScope;
+    tags: PortalActivityLogTagAssignment[];
+}
+export interface ActivityLogAnalysisCount<T extends string = string> {
+    value: T;
+    count: number;
+}
+export interface ConformedActivityAnalysisFacets {
+    tags: ActivityLogAnalysisCount<ActivityLogTagId>[];
+    operations: ActivityLogAnalysisCount[];
+    providers: ActivityLogAnalysisCount[];
+    resourceTypes: ActivityLogAnalysisCount[];
+    results: ActivityLogAnalysisCount[];
+    operationEffects: ActivityLogAnalysisCount<ActivityLogOperationEffect>[];
+    executionOrigins: ActivityLogAnalysisCount<ActivityLogExecutionOrigin>[];
+}
+export interface ConformedActivitySeries {
+    id: string;
+    analysisVersion: typeof ACTIVITY_LOG_ANALYSIS_VERSION;
+    taxonomyVersion: typeof ACTIVITY_LOG_TAXONOMY_VERSION;
+    subscriptionId: string;
+    month: string;
+    scope: PortalActivityLogAnalysisScope;
+    operation: string;
+    result: string;
+    executionOrigin: ActivityLogExecutionOrigin;
+    operationEffect: ActivityLogOperationEffect;
+    tagIds: ActivityLogTagId[];
+    eventCount: number;
+    firstTimestamp: string;
+    lastTimestamp: string;
+    dailyCounts: Array<{
+        date: string;
+        count: number;
+    }>;
+    utcWeekdayHourDistribution: Array<{
+        weekday: number;
+        hour: number;
+        count: number;
+    }>;
+    distinctActorCount: number;
+    confidence: ActivityLogClassificationConfidence;
+    evidenceEventKeys: string[];
+    evidenceTruncated: boolean;
+}
+export interface ConformedActivityAnalysisGroupBase {
+    id: string;
+    analysisVersion: typeof ACTIVITY_LOG_ANALYSIS_VERSION;
+    taxonomyVersion: typeof ACTIVITY_LOG_TAXONOMY_VERSION;
+    subscriptionId: string;
+    month: string;
+    scope: PortalActivityLogAnalysisScope;
+    eventCount: number;
+    firstTimestamp: string;
+    lastTimestamp: string;
+    confidence: ActivityLogClassificationConfidence;
+    reasons: string[];
+    tagIds: ActivityLogTagId[];
+    evidenceEventKeys: string[];
+    evidenceTruncated: boolean;
+}
+export interface ConformedActivityOperationSummary extends ConformedActivityAnalysisGroupBase {
+    type: 'operation-summary';
+    operation: string;
+    provider?: string;
+    resourceType?: string;
+    operationEffect: ActivityLogOperationEffect;
+    executionOrigin: ActivityLogExecutionOrigin;
+    distinctResourceCount: number;
+    resultCounts: Record<string, number>;
+}
+export interface ConformedActivitySecuritySensitiveEvidence extends ConformedActivityAnalysisGroupBase {
+    type: 'security-sensitive-activity';
+    capabilityTag: Exclude<ActivityLogTagId, `actor.${string}` | `change.${string}` | `intent.${string}` | `scheduler.${string}` | 'security.sensitive-operation'>;
+    operation: string;
+    executionOrigin: ActivityLogExecutionOrigin;
+    resultCounts: Record<string, number>;
+}
+export interface ConformedActivityPowerPatternEvidence extends ConformedActivityAnalysisGroupBase {
+    type: 'power-pattern-evidence';
+    patternId: string;
+    resourceId: string;
+    startCount: number;
+    stopCount: number;
+    opposingPairCount: number;
+    utcActiveDayCount: number;
+    utcHourDistribution: Record<string, number>;
+    executionOriginCounts: Partial<Record<ActivityLogExecutionOrigin, number>>;
+    resultCounts: Record<string, number>;
+    dataSufficiency: ActivityLogPowerDataSufficiency;
+}
+export type ConformedActivityAnalysisGroup = ConformedActivityOperationSummary | ConformedActivitySecuritySensitiveEvidence | ConformedActivityPowerPatternEvidence;
+export interface ConformedActivityResourceSummary {
+    scope: PortalActivityLogAnalysisScope & {
+        level: 'resource';
+        resourceId: string;
+    };
+    eventCount: number;
+    operationCounts: ActivityLogAnalysisCount[];
+    resultCounts: ActivityLogAnalysisCount[];
+    tagCounts: ActivityLogAnalysisCount<ActivityLogTagId>[];
+    executionOriginCounts: ActivityLogAnalysisCount<ActivityLogExecutionOrigin>[];
+    relatedEvidenceIds: string[];
+}
+export interface ConformedActivityAnalysisArtifact {
+    schemaVersion: typeof CONFORMED_ACTIVITY_ANALYSIS_SCHEMA_VERSION;
+    analysisVersion: typeof ACTIVITY_LOG_ANALYSIS_VERSION;
+    taxonomyVersion: typeof ACTIVITY_LOG_TAXONOMY_VERSION;
+    projection: 'activity-analysis';
+    subscriptionId: string;
+    month: string;
+    generatedAt: string;
+    source: {
+        portalProjectionSchemaVersion: number;
+        sourceHighWatermark?: string;
+        sourceShardFingerprint?: string;
+        retainedEventCount: number;
+        classifiedRetainedEventCount: number;
+        unclassifiedRetainedEventCount: number;
+        classificationState: ActivityLogClassificationState;
+    };
+    facets: ConformedActivityAnalysisFacets;
+    activitySeries: ConformedActivitySeries[];
+    resources: ConformedActivityResourceSummary[];
+    groups: ConformedActivityAnalysisGroup[];
+}
+export interface PortalActivityAnalysisCollection<T> {
+    totalCount: number;
+    returnedCount: number;
+    truncated: boolean;
+    items: T[];
+}
+export type PortalActivityAnalysisLimitationCode = 'source-coverage-partial' | 'unclassified-events' | 'facet-values-truncated' | 'resource-summaries-truncated' | 'operation-summaries-truncated' | 'security-sensitive-truncated' | 'power-patterns-truncated' | 'artifact-size-budget' | 'month-missing' | 'month-partial' | 'month-stale' | 'month-freshness-unknown' | 'nested-values-truncated' | 'mixed-analysis-versions' | 'mixed-taxonomy-versions' | 'response-truncated';
+export interface PortalActivityAnalysisFacets {
+    tags: PortalActivityAnalysisCollection<ActivityLogAnalysisCount<ActivityLogTagId>>;
+    operations: PortalActivityAnalysisCollection<ActivityLogAnalysisCount>;
+    providers: PortalActivityAnalysisCollection<ActivityLogAnalysisCount>;
+    resourceTypes: PortalActivityAnalysisCollection<ActivityLogAnalysisCount>;
+    results: PortalActivityAnalysisCollection<ActivityLogAnalysisCount>;
+    operationEffects: PortalActivityAnalysisCollection<ActivityLogAnalysisCount<ActivityLogOperationEffect>>;
+    executionOrigins: PortalActivityAnalysisCollection<ActivityLogAnalysisCount<ActivityLogExecutionOrigin>>;
+}
+export interface PortalActivitySeries {
+    seriesId: PortalActivityAnalysisGroupId;
+    scope: PortalActivityLogAnalysisScope;
+    operation: string;
+    result: string;
+    executionOrigin: ActivityLogExecutionOrigin;
+    operationEffect: ActivityLogOperationEffect;
+    tagIds: ActivityLogTagId[];
+    eventCount: number;
+    firstTimestamp: string;
+    lastTimestamp: string;
+    monthCounts: ActivityLogAnalysisCount[];
+    dailyCounts: Array<{
+        date: string;
+        count: number;
+    }>;
+    utcWeekdayHourDistribution: Array<{
+        weekday: number;
+        hour: number;
+        count: number;
+    }>;
+    confidence: ActivityLogClassificationConfidence;
+    evidenceIds: PortalActivityEvidenceId[];
+    evidenceTruncated: boolean;
+}
+export interface PortalActivityResourceSummary {
+    scope: PortalActivityLogAnalysisScope & {
+        level: 'resource';
+        resourceId: string;
+    };
+    eventCount: number;
+    firstTimestamp: string;
+    lastTimestamp: string;
+    operationCounts: ActivityLogAnalysisCount[];
+    resultCounts: ActivityLogAnalysisCount[];
+    tagCounts: ActivityLogAnalysisCount<ActivityLogTagId>[];
+    executionOriginCounts: ActivityLogAnalysisCount<ActivityLogExecutionOrigin>[];
+    relatedGroupIds: PortalActivityAnalysisGroupId[];
+    confidence: ActivityLogClassificationConfidence;
+}
+interface PortalActivityDerivedEvidenceBase {
+    scope: PortalActivityLogAnalysisScope;
+    eventCount: number;
+    firstTimestamp: string;
+    lastTimestamp: string;
+    confidence: ActivityLogClassificationConfidence;
+    tagIds: ActivityLogTagId[];
+    reasons: PortalActivityAnalysisReasonCode[];
+    evidenceIds: PortalActivityEvidenceId[];
+    evidenceTruncated: boolean;
+}
+export interface PortalActivityOperationSummary extends PortalActivityDerivedEvidenceBase {
+    groupId: PortalActivityAnalysisGroupId;
+    derivedType: 'operationSummary';
+    operation: string;
+    provider?: string;
+    resourceType?: string;
+    operationEffect: ActivityLogOperationEffect;
+    executionOrigin: ActivityLogExecutionOrigin;
+    distinctResourceCount: number;
+    resultCounts: ActivityLogAnalysisCount[];
+}
+export interface PortalActivitySecuritySensitiveEvidence extends PortalActivityDerivedEvidenceBase {
+    groupId: PortalActivityAnalysisGroupId;
+    derivedType: 'securitySensitiveActivity';
+    capabilityTag: Exclude<ActivityLogTagId, `actor.${string}` | `change.${string}` | `intent.${string}` | `scheduler.${string}` | 'security.sensitive-operation'>;
+    operation: string;
+    executionOrigin: ActivityLogExecutionOrigin;
+    resultCounts: ActivityLogAnalysisCount[];
+}
+export interface PortalActivityPowerPatternEvidence extends PortalActivityDerivedEvidenceBase {
+    patternId: PortalActivityAnalysisGroupId;
+    derivedType: 'powerPatternEvidence';
+    startCount: number;
+    stopCount: number;
+    opposingPairCount: number;
+    utcActiveDayCount: number;
+    utcHourDistribution: Array<{
+        hour: number;
+        count: number;
+    }>;
+    executionOriginCounts: ActivityLogAnalysisCount<ActivityLogExecutionOrigin>[];
+    resultCounts: ActivityLogAnalysisCount[];
+    dataSufficiency: ActivityLogPowerDataSufficiency;
+}
+export type PortalActivityDerivedEvidence = PortalActivityOperationSummary | PortalActivitySecuritySensitiveEvidence | PortalActivityPowerPatternEvidence;
+export interface PortalActivityAnalysisResponse {
+    schemaVersion: typeof PORTAL_ACTIVITY_ANALYSIS_RESPONSE_SCHEMA_VERSION;
+    generatedAt: string;
+    subscriptionId: string;
+    fromMonth: string;
+    toMonth: string;
+    resourceId?: string;
+    requestedMonths: string[];
+    availableMonths: string[];
+    missingMonths: string[];
+    partialMonths: string[];
+    staleMonths: string[];
+    freshnessUnknownMonths: string[];
+    analysisVersions: string[];
+    taxonomyVersions: string[];
+    facets: PortalActivityAnalysisFacets;
+    activitySeries: PortalActivityAnalysisCollection<PortalActivitySeries>;
+    resources: PortalActivityAnalysisCollection<PortalActivityResourceSummary>;
+    operationSummaries: PortalActivityAnalysisCollection<PortalActivityOperationSummary>;
+    securitySensitive: PortalActivityAnalysisCollection<PortalActivitySecuritySensitiveEvidence>;
+    powerPatterns: PortalActivityAnalysisCollection<PortalActivityPowerPatternEvidence>;
+    limitations: PortalActivityAnalysisLimitationCode[];
+}
+export declare function buildConformedActivityAnalysisLogicalName(month: string): string;
+export declare function parseConformedActivityAnalysisLogicalName(logicalName: string): string | undefined;
+export {};
+//# sourceMappingURL=activityLogAnalysis.d.ts.map

package/dist/azure/activityLogAnalysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activityLogAnalysis.d.ts","sourceRoot":"","sources":["../../src/azure/activityLogAnalysis.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,6BAA6B,EAAG,IAAa,CAAC;AAC3D,eAAO,MAAM,6BAA6B,EAAG,IAAa,CAAC;AAC3D,eAAO,MAAM,0CAA0C,EAAG,CAAU,CAAC;AACrE,eAAO,MAAM,gDAAgD,EAAG,CAAU,CAAC;AAE3E,eAAO,MAAM,qCAAqC;;EAEvC,CAAC;AAEZ,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BpC,CAAC;AAEZ,eAAO,MAAM,oBAAoB,0cAiBvB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;AAC/F,MAAM,MAAM,mCAAmC,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAC5E,MAAM,MAAM,0BAA0B,GAAG,QAAQ,GAAG,oBAAoB,GAAG,eAAe,GAAG,SAAS,CAAC;AACvG,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;AAC1F,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG,eAAe,GAAG,UAAU,GAAG,SAAS,CAAC;AAC9F,MAAM,MAAM,+BAA+B,GAAG,UAAU,GAAG,QAAQ,GAAG,eAAe,GAAG,UAAU,CAAC;AACnG,MAAM,MAAM,8BAA8B,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAC;AACpF,MAAM,MAAM,wBAAwB,GAAG,QAAQ,MAAM,EAAE,CAAC;AACxD,MAAM,MAAM,6BAA6B,GAAG,QAAQ,MAAM,EAAE,CAAC;AAE7D,MAAM,MAAM,gCAAgC,GACxC,2BAA2B,GAC3B,qCAAqC,GACrC,gCAAgC,GAChC,OAAO,gBAAgB,EAAE,CAAC;AAE9B,MAAM,WAAW,8BAA8B;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,qBAAqB,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,uBAAuB,CAAC;IACnC,UAAU,EAAE,mCAAmC,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,eAAe,EAAE,0BAA0B,CAAC;IAC5C,eAAe,EAAE,0BAA0B,CAAC;IAC5C,KAAK,EAAE,8BAA8B,CAAC;IACtC,IAAI,EAAE,8BAA8B,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,wBAAwB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;IACjE,KAAK,EAAE,CAAC,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,CAAC;IACnD,UAAU,EAAE,wBAAwB,EAAE,CAAC;IACvC,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,aAAa,EAAE,wBAAwB,EAAE,CAAC;IAC1C,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,gBAAgB,EAAE,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,CAAC;IACzE,gBAAgB,EAAE,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,CAAC;CAC1E;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,8BAA8B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,0BAA0B,CAAC;IAC5C,eAAe,EAAE,0BAA0B,CAAC;IAC5C,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,0BAA0B,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,mCAAmC,CAAC;IAChD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,8BAA8B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,mCAAmC,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,iCAAkC,SAAQ,kCAAkC;IAC3F,IAAI,EAAE,mBAAmB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,0BAA0B,CAAC;IAC5C,eAAe,EAAE,0BAA0B,CAAC;IAC5C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,0CAA2C,SAAQ,kCAAkC;IACpG,IAAI,EAAE,6BAA6B,CAAC;IACpC,aAAa,EAAE,OAAO,CACpB,gBAAgB,EAChB,SAAS,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,GAAG,aAAa,MAAM,EAAE,GAAG,8BAA8B,CACrH,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,0BAA0B,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,qCAAsC,SAAQ,kCAAkC;IAC/F,IAAI,EAAE,wBAAwB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,qBAAqB,EAAE,OAAO,CAAC,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,eAAe,EAAE,+BAA+B,CAAC;CAClD;AAED,MAAM,MAAM,8BAA8B,GACtC,iCAAiC,GACjC,0CAA0C,GAC1C,qCAAqC,CAAC;AAE1C,MAAM,WAAW,gCAAgC;IAC/C,KAAK,EAAE,8BAA8B,GAAG;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAClF,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,wBAAwB,EAAE,CAAC;IAC5C,YAAY,EAAE,wBAAwB,EAAE,CAAC;IACzC,SAAS,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,CAAC;IACxD,qBAAqB,EAAE,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,CAAC;IAC9E,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,OAAO,0CAA0C,CAAC;IACjE,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,UAAU,EAAE,mBAAmB,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QACN,6BAA6B,EAAE,MAAM,CAAC;QACtC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,kBAAkB,EAAE,MAAM,CAAC;QAC3B,4BAA4B,EAAE,MAAM,CAAC;QACrC,8BAA8B,EAAE,MAAM,CAAC;QACvC,mBAAmB,EAAE,8BAA8B,CAAC;KACrD,CAAC;IACF,MAAM,EAAE,+BAA+B,CAAC;IACxC,cAAc,EAAE,uBAAuB,EAAE,CAAC;IAC1C,SAAS,EAAE,gCAAgC,EAAE,CAAC;IAC9C,MAAM,EAAE,8BAA8B,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,gCAAgC,CAAC,CAAC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,CAAC,EAAE,CAAC;CACZ;AAED,MAAM,MAAM,oCAAoC,GAC5C,yBAAyB,GACzB,qBAAqB,GACrB,wBAAwB,GACxB,8BAA8B,GAC9B,+BAA+B,GAC/B,8BAA8B,GAC9B,0BAA0B,GAC1B,sBAAsB,GACtB,eAAe,GACf,eAAe,GACf,aAAa,GACb,yBAAyB,GACzB,yBAAyB,GACzB,yBAAyB,GACzB,yBAAyB,GACzB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACnF,UAAU,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,CAAC;IACvE,SAAS,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,CAAC;IACtE,aAAa,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,CAAC;IAC1E,OAAO,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,CAAC;IACpE,gBAAgB,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACzG,gBAAgB,EAAE,gCAAgC,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,CAAC,CAAC;CAC1G;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,6BAA6B,CAAC;IACxC,KAAK,EAAE,8BAA8B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,0BAA0B,CAAC;IAC5C,eAAe,EAAE,0BAA0B,CAAC;IAC5C,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACxC,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,0BAA0B,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpF,UAAU,EAAE,mCAAmC,CAAC;IAChD,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACxC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,8BAA8B,GAAG;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAClF,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,wBAAwB,EAAE,CAAC;IAC5C,YAAY,EAAE,wBAAwB,EAAE,CAAC;IACzC,SAAS,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,CAAC;IACxD,qBAAqB,EAAE,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,CAAC;IAC9E,eAAe,EAAE,6BAA6B,EAAE,CAAC;IACjD,UAAU,EAAE,mCAAmC,CAAC;CACjD;AAED,UAAU,iCAAiC;IACzC,KAAK,EAAE,8BAA8B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,mCAAmC,CAAC;IAChD,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,OAAO,EAAE,gCAAgC,EAAE,CAAC;IAC5C,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACxC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,8BAA+B,SAAQ,iCAAiC;IACvF,OAAO,EAAE,6BAA6B,CAAC;IACvC,WAAW,EAAE,kBAAkB,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,0BAA0B,CAAC;IAC5C,eAAe,EAAE,0BAA0B,CAAC;IAC5C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,uCAAwC,SAAQ,iCAAiC;IAChG,OAAO,EAAE,6BAA6B,CAAC;IACvC,WAAW,EAAE,2BAA2B,CAAC;IACzC,aAAa,EAAE,OAAO,CACpB,gBAAgB,EAChB,SAAS,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,GAAG,aAAa,MAAM,EAAE,GAAG,8BAA8B,CACrH,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,0BAA0B,CAAC;IAC5C,YAAY,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,kCAAmC,SAAQ,iCAAiC;IAC3F,SAAS,EAAE,6BAA6B,CAAC;IACzC,WAAW,EAAE,sBAAsB,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,qBAAqB,EAAE,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,CAAC;IAC9E,YAAY,EAAE,wBAAwB,EAAE,CAAC;IACzC,eAAe,EAAE,+BAA+B,CAAC;CAClD;AAED,MAAM,MAAM,6BAA6B,GACrC,8BAA8B,GAC9B,uCAAuC,GACvC,kCAAkC,CAAC;AAEvC,MAAM,WAAW,8BAA8B;IAC7C,aAAa,EAAE,OAAO,gDAAgD,CAAC;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,4BAA4B,CAAC;IACrC,cAAc,EAAE,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;IACvE,SAAS,EAAE,gCAAgC,CAAC,6BAA6B,CAAC,CAAC;IAC3E,kBAAkB,EAAE,gCAAgC,CAAC,8BAA8B,CAAC,CAAC;IACrF,iBAAiB,EAAE,gCAAgC,CAAC,uCAAuC,CAAC,CAAC;IAC7F,aAAa,EAAE,gCAAgC,CAAC,kCAAkC,CAAC,CAAC;IACpF,WAAW,EAAE,oCAAoC,EAAE,CAAC;CACrD;AAKD,wBAAgB,yCAAyC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAK/E;AAED,wBAAgB,yCAAyC,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjG"}