@spottoai/types-package 1.0.2-dev1138.13 → 1.0.2-dev1138.14

package/dist/azure/vmPatchManagement.d.ts

@@ -0,0 +1,109 @@
+export declare const VM_PATCH_MANAGEMENT_SCHEMA_VERSION: 1;
+export declare const PATCH_MANAGEMENT_PORTAL_FILE_NAME: "patch-management.json.gz";
+export declare const AZURE_VM_PATCH_MANAGEMENT_RESOURCE_TYPE: "microsoft.compute/virtualmachines";
+export type VmPatchManagementStatus = 'protected' | 'unprotected' | 'unknown';
+export type VmPatchManagementEvidenceCoverageStatus = 'current' | 'stale' | 'unavailable';
+export type VmPatchManagementAssignmentType = 'direct' | 'dynamic';
+export type VmPatchPeriodicAssessmentStatus = 'enabled' | 'disabled' | 'unknown';
+export interface VmPatchSchedule {
+    assignmentId: string;
+    assignmentName?: string;
+    assignmentType: VmPatchManagementAssignmentType;
+    maintenanceConfigurationId: string;
+    maintenanceConfigurationName?: string;
+    startDateTime?: string;
+    expirationDateTime?: string;
+    duration?: string;
+    timeZone?: string;
+    recurEvery?: string;
+    rebootSetting?: string;
+}
+export interface VmPatchAssessmentSummary {
+    status?: string;
+    activityId?: string;
+    startedAt?: string;
+    lastModifiedAt?: string;
+    rebootPending?: boolean;
+    installedPatchCount: number;
+    failedPatchCount: number;
+    pendingPatchCount: number;
+    excludedPatchCount: number;
+    notSelectedPatchCount: number;
+    criticalUpdateCount: number;
+    securityUpdateCount: number;
+    otherUpdateCount: number;
+}
+export interface VmPatchInstallationSummary {
+    status?: string;
+    activityId?: string;
+    startedAt?: string;
+    lastModifiedAt?: string;
+    rebootStatus?: string;
+    startedBy?: string;
+    maintenanceWindowExceeded?: boolean;
+    installedPatchCount: number;
+    failedPatchCount: number;
+    pendingPatchCount: number;
+    excludedPatchCount: number;
+    notSelectedPatchCount: number;
+}
+export interface VmPatchManagementMachine {
+    id: string;
+    name?: string;
+    resourceGroup?: string;
+    location?: string;
+    resourceType: typeof AZURE_VM_PATCH_MANAGEMENT_RESOURCE_TYPE;
+    osType?: string;
+    patchMode?: string;
+    assessmentMode?: string;
+    enableAutomaticUpdates?: boolean;
+    periodicAssessment: VmPatchPeriodicAssessmentStatus;
+    managementStatus: VmPatchManagementStatus;
+    managementReason: string;
+    schedules: VmPatchSchedule[];
+    assessment?: VmPatchAssessmentSummary;
+    latestInstallation?: VmPatchInstallationSummary;
+}
+export interface VmPatchManagementScope {
+    resourceTypes: [typeof AZURE_VM_PATCH_MANAGEMENT_RESOURCE_TYPE];
+    includesArcMachines: false;
+    includesScaleSetInstances: false;
+    includesIndividualPatchDetails: false;
+}
+export interface VmPatchManagementCoverage {
+    status: VmPatchManagementEvidenceCoverageStatus;
+    staleAfterHours: number;
+    warnings: string[];
+    sourceRecordCounts: Record<string, number>;
+}
+export interface VmPatchManagementSummary {
+    totalMachines: number;
+    protectedMachines: number;
+    unprotectedMachines: number;
+    unknownMachines: number;
+    periodicAssessmentEnabledMachines: number;
+    periodicAssessmentDisabledMachines: number;
+    periodicAssessmentUnknownMachines: number;
+    assessedMachines: number;
+    machinesWithPendingUpdates: number;
+    pendingUpdateCount: number;
+    criticalUpdateCount: number;
+    securityUpdateCount: number;
+    machinesWithDeploymentEvidence: number;
+    latestDeploymentSucceededMachines: number;
+    latestDeploymentFailedMachines: number;
+    latestDeploymentInProgressMachines: number;
+    latestDeploymentOtherMachines: number;
+    machinesWithoutDeploymentEvidence: number;
+}
+export interface VmPatchManagementArtifact {
+    schemaVersion: typeof VM_PATCH_MANAGEMENT_SCHEMA_VERSION;
+    generatedAt: string;
+    sourceObservedAt?: string;
+    subscriptionId: string;
+    scope: VmPatchManagementScope;
+    coverage: VmPatchManagementCoverage;
+    summary: VmPatchManagementSummary;
+    machines: VmPatchManagementMachine[];
+}
+//# sourceMappingURL=vmPatchManagement.d.ts.map

package/dist/azure/vmPatchManagement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vmPatchManagement.d.ts","sourceRoot":"","sources":["../../src/azure/vmPatchManagement.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAC7D,eAAO,MAAM,iCAAiC,EAAG,0BAAmC,CAAC;AACrF,eAAO,MAAM,uCAAuC,EAAG,mCAA4C,CAAC;AAEpG,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AAC9E,MAAM,MAAM,uCAAuC,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;AAC1F,MAAM,MAAM,+BAA+B,GAAG,QAAQ,GAAG,SAAS,CAAC;AACnE,MAAM,MAAM,+BAA+B,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjF,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,+BAA+B,CAAC;IAChD,0BAA0B,EAAE,MAAM,CAAC;IACnC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,uCAAuC,CAAC;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,kBAAkB,EAAE,+BAA+B,CAAC;IACpD,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC;CACjD;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,CAAC,OAAO,uCAAuC,CAAC,CAAC;IAChE,mBAAmB,EAAE,KAAK,CAAC;IAC3B,yBAAyB,EAAE,KAAK,CAAC;IACjC,8BAA8B,EAAE,KAAK,CAAC;CACvC;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,uCAAuC,CAAC;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,iCAAiC,EAAE,MAAM,CAAC;IAC1C,kCAAkC,EAAE,MAAM,CAAC;IAC3C,iCAAiC,EAAE,MAAM,CAAC;IAC1C,gBAAgB,EAAE,MAAM,CAAC;IACzB,0BAA0B,EAAE,MAAM,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,8BAA8B,EAAE,MAAM,CAAC;IACvC,iCAAiC,EAAE,MAAM,CAAC;IAC1C,8BAA8B,EAAE,MAAM,CAAC;IACvC,kCAAkC,EAAE,MAAM,CAAC;IAC3C,6BAA6B,EAAE,MAAM,CAAC;IACtC,iCAAiC,EAAE,MAAM,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,OAAO,kCAAkC,CAAC;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,sBAAsB,CAAC;IAC9B,QAAQ,EAAE,yBAAyB,CAAC;IACpC,OAAO,EAAE,wBAAwB,CAAC;IAClC,QAAQ,EAAE,wBAAwB,EAAE,CAAC;CACtC"}

package/dist/azure/vmPatchManagement.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AZURE_VM_PATCH_MANAGEMENT_RESOURCE_TYPE = exports.PATCH_MANAGEMENT_PORTAL_FILE_NAME = exports.VM_PATCH_MANAGEMENT_SCHEMA_VERSION = void 0;
+exports.VM_PATCH_MANAGEMENT_SCHEMA_VERSION = 1;
+exports.PATCH_MANAGEMENT_PORTAL_FILE_NAME = 'patch-management.json.gz';
+exports.AZURE_VM_PATCH_MANAGEMENT_RESOURCE_TYPE = 'microsoft.compute/virtualmachines';
+//# sourceMappingURL=vmPatchManagement.js.map

package/dist/azure/vmPatchManagement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vmPatchManagement.js","sourceRoot":"","sources":["../../src/azure/vmPatchManagement.ts"],"names":[],"mappings":";;;AAAa,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAChD,QAAA,iCAAiC,GAAG,0BAAmC,CAAC;AACxE,QAAA,uCAAuC,GAAG,mCAA4C,CAAC"}

package/dist/common/boundedRows.d.ts

@@ -0,0 +1,7 @@
+/** Bounded row collection: `totalCount === rows.length + omittedCount`. Shared by report evidence and utilization stories. */
+export interface ReportBoundedRows<T> {
+    totalCount: number;
+    rows: T[];
+    omittedCount: number;
+}
+//# sourceMappingURL=boundedRows.d.ts.map

package/dist/common/boundedRows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundedRows.d.ts","sourceRoot":"","sources":["../../src/common/boundedRows.ts"],"names":[],"mappings":"AAAA,8HAA8H;AAC9H,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/dist/{scheduler/scheduler.js → common/boundedRows.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=scheduler.js.map
+//# sourceMappingURL=boundedRows.js.map

package/dist/common/boundedRows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundedRows.js","sourceRoot":"","sources":["../../src/common/boundedRows.ts"],"names":[],"mappings":""}

package/dist/common/index.d.ts

@@ -4,6 +4,9 @@ export * from './pagination';
 export * from './provider';
 export * from './providerSyncProgress';
 export * from './relationships';
+export * from './resourceGraph';
+export * from './resourceGraphValidation';
+export * from './resourceIdentity';
 export * from './syncProgress';
 export * from './sha256';
 export * from './exactDecimal';

package/dist/common/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC"}

package/dist/common/index.js

@@ -20,6 +20,9 @@ __exportStar(require("./pagination"), exports);
 __exportStar(require("./provider"), exports);
 __exportStar(require("./providerSyncProgress"), exports);
 __exportStar(require("./relationships"), exports);
+__exportStar(require("./resourceGraph"), exports);
+__exportStar(require("./resourceGraphValidation"), exports);
+__exportStar(require("./resourceIdentity"), exports);
 __exportStar(require("./syncProgress"), exports);
 __exportStar(require("./sha256"), exports);
 __exportStar(require("./exactDecimal"), exports);

package/dist/common/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,uDAAqC;AACrC,+CAA6B;AAC7B,6CAA2B;AAC3B,yDAAuC;AACvC,kDAAgC;AAChC,iDAA+B;AAC/B,2CAAyB;AACzB,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,uDAAqC;AACrC,+CAA6B;AAC7B,6CAA2B;AAC3B,yDAAuC;AACvC,kDAAgC;AAChC,kDAAgC;AAChC,4DAA0C;AAC1C,qDAAmC;AACnC,iDAA+B;AAC/B,2CAAyB;AACzB,iDAA+B"}

package/dist/common/metricStats.d.ts

@@ -0,0 +1,29 @@
+/** Provider-neutral descriptive statistics for one metric series (shared by azure metrics and utilization stories). */
+export interface MetricStats {
+    average: number;
+    median: number;
+    p50: number;
+    p75: number;
+    p90: number;
+    p95: number;
+    p99: number;
+    min: number;
+    max: number;
+    frequency: number;
+    trend: number;
+    variance: number;
+    count: number;
+    /** for availability metrics */
+    uptime?: number;
+    peakHours?: number;
+    offPeakHours?: number;
+    totalDataPoints: number;
+    runningDataPoints: number;
+    nonRunningDataPoints: number;
+    runningTimePercentage: number;
+    longestRunningStreak: number;
+    longestDowntimeStreak: number;
+    averageUptimeStreak: number;
+    averageDowntimeStreak: number;
+}
+//# sourceMappingURL=metricStats.d.ts.map

package/dist/common/metricStats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metricStats.d.ts","sourceRoot":"","sources":["../../src/common/metricStats.ts"],"names":[],"mappings":"AAAA,uHAAuH;AACvH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;CAC/B"}

package/dist/{aws/portalPublicArtifactNestedEvidence.js → common/metricStats.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=portalPublicArtifactNestedEvidence.js.map
+//# sourceMappingURL=metricStats.js.map

package/dist/common/metricStats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metricStats.js","sourceRoot":"","sources":["../../src/common/metricStats.ts"],"names":[],"mappings":""}

package/dist/common/provider.d.ts

@@ -2,6 +2,10 @@ export declare enum ProviderName {
     Azure = "azure",
     Aws = "aws"
 }
+/** Provider-neutral user classification for a connected cloud environment. */
+export type EnvironmentType = 'Production' | 'Non-Production' | 'Mixed';
+/** Lifecycle states returned by AWS Account Management. */
+export type AwsAccountState = 'PENDING_ACTIVATION' | 'ACTIVE' | 'SUSPENDED' | 'CLOSED';
 /** Provider-owned resource boundary kind used by indexed scope records. */
 export declare enum ProviderScopeType {
     Subscription = "subscription",
@@ -12,6 +16,51 @@ export interface ProviderScope {
     providerName: ProviderName;
     providerScopeId: string;
 }
+/** User-owned display metadata shared by provider scopes and cloud accounts. */
+export interface ProviderScopeDisplayMetadata {
+    /** Raw user override. This is distinct from provider and configured names. */
+    friendlyName?: string;
+    groupName?: string;
+    icon?: string;
+    environmentType?: EnvironmentType;
+}
+/** Provider-aware scope data returned to shared selectors and account displays. */
+export interface ProviderScopeSelectionItem extends ProviderScopeDisplayMetadata, ProviderScope {
+    companyId: string;
+    scopeType: ProviderScopeType;
+    /** Legacy provider-scope name retained for mixed-version consumers. */
+    name: string;
+    /** Server-computed effective name after applying the documented fallback order. */
+    displayName?: string;
+    /** Account name supplied during provider setup or manifest configuration. */
+    configuredName?: string;
+    /** Native provider account name. This value is read-only provider data. */
+    providerAccountName?: string;
+    /** ISO-8601 native provider account creation timestamp. */
+    providerAccountCreatedAt?: string;
+    /** Native AWS account lifecycle state. */
+    providerAccountState?: AwsAccountState;
+    cloudAccountId: string;
+    cloudAccountName: string;
+    /** Opaque Spotto AWS estate association. Present only for linked AWS account scopes. */
+    awsEstateId?: string;
+    /** Azure compatibility field; new provider-neutral consumers use environmentType. */
+    subscriptionType?: EnvironmentType;
+    status?: string;
+    statusLabel?: string;
+    currencyCode?: string;
+    currencySymbol?: string;
+    ready: boolean;
+    secureScore?: number;
+    spend30Days?: number;
+}
+/** Partial provider-scope display update; omitted fields stay unchanged and null clears an override. */
+export interface ProviderScopeDisplayMetadataUpdateRequest {
+    friendlyName?: string | null;
+    groupName?: string | null;
+    icon?: string | null;
+    environmentType?: EnvironmentType | null;
+}
 /** Shared indexed-scope fields. Prefer ProviderScopeRecord for concrete records. */
 export interface ProviderScopeRecordBase extends ProviderScope {
     companyId: string;
@@ -27,6 +76,12 @@ export interface AzureSubscriptionProviderScope extends ProviderScopeRecordBase
 export interface AwsAccountProviderScope extends ProviderScopeRecordBase {
     providerName: ProviderName.Aws;
     scopeType: ProviderScopeType.Account;
+    /** Native AWS Account Management name, when enrichment is permitted. */
+    providerAccountName?: string;
+    /** ISO-8601 AWS account creation timestamp, when enrichment is permitted. */
+    providerAccountCreatedAt?: string;
+    /** Native AWS Account Management lifecycle state, when enrichment is permitted. */
+    providerAccountState?: AwsAccountState;
 }
 /** Canonical indexed provider-scope record. */
 export type ProviderScopeRecord = AzureSubscriptionProviderScope | AwsAccountProviderScope;

package/dist/common/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/common/provider.ts"],"names":[],"mappings":"AAAA,oBAAY,YAAY;IACtB,KAAK,UAAU;IACf,GAAG,QAAQ;CACZ;AAED,2EAA2E;AAC3E,oBAAY,iBAAiB;IAC3B,YAAY,iBAAiB;IAC7B,OAAO,YAAY;CACpB;AAED,qFAAqF;AACrF,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,oFAAoF;AACpF,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,8BAA+B,SAAQ,uBAAuB;IAC7E,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC;IACjC,SAAS,EAAE,iBAAiB,CAAC,YAAY,CAAC;CAC3C;AAED,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACtE,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC;IAC/B,SAAS,EAAE,iBAAiB,CAAC,OAAO,CAAC;CACtC;AAED,+CAA+C;AAC/C,MAAM,MAAM,mBAAmB,GAAG,8BAA8B,GAAG,uBAAuB,CAAC"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/common/provider.ts"],"names":[],"mappings":"AAAA,oBAAY,YAAY;IACtB,KAAK,UAAU;IACf,GAAG,QAAQ;CACZ;AAED,8EAA8E;AAC9E,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAExE,2DAA2D;AAC3D,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEvF,2EAA2E;AAC3E,oBAAY,iBAAiB;IAC3B,YAAY,iBAAiB;IAC7B,OAAO,YAAY;CACpB;AAED,qFAAqF;AACrF,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,gFAAgF;AAChF,MAAM,WAAW,4BAA4B;IAC3C,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,mFAAmF;AACnF,MAAM,WAAW,0BAA2B,SAAQ,4BAA4B,EAAE,aAAa;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,0CAA0C;IAC1C,oBAAoB,CAAC,EAAE,eAAe,CAAC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,eAAe,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wGAAwG;AACxG,MAAM,WAAW,yCAAyC;IACxD,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAC1C;AAED,oFAAoF;AACpF,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,8BAA+B,SAAQ,uBAAuB;IAC7E,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC;IACjC,SAAS,EAAE,iBAAiB,CAAC,YAAY,CAAC;CAC3C;AAED,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACtE,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC;IAC/B,SAAS,EAAE,iBAAiB,CAAC,OAAO,CAAC;IACrC,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,6EAA6E;IAC7E,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,mFAAmF;IACnF,oBAAoB,CAAC,EAAE,eAAe,CAAC;CACxC;AAED,+CAA+C;AAC/C,MAAM,MAAM,mBAAmB,GAAG,8BAA8B,GAAG,uBAAuB,CAAC"}

package/dist/common/provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/common/provider.ts"],"names":[],"mappings":";;;AAAA,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,+BAAe,CAAA;IACf,2BAAW,CAAA;AACb,CAAC,EAHW,YAAY,4BAAZ,YAAY,QAGvB;AAED,2EAA2E;AAC3E,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IAC3B,kDAA6B,CAAA;IAC7B,wCAAmB,CAAA;AACrB,CAAC,EAHW,iBAAiB,iCAAjB,iBAAiB,QAG5B"}
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/common/provider.ts"],"names":[],"mappings":";;;AAAA,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,+BAAe,CAAA;IACf,2BAAW,CAAA;AACb,CAAC,EAHW,YAAY,4BAAZ,YAAY,QAGvB;AAQD,2EAA2E;AAC3E,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IAC3B,kDAA6B,CAAA;IAC7B,wCAAmB,CAAA;AACrB,CAAC,EAHW,iBAAiB,iCAAjB,iBAAiB,QAG5B"}

package/dist/common/relationships.d.ts

@@ -1,8 +1,8 @@
-import type { AwsPortalRelationshipArtifact } from '../aws/portalRelationshipPublicArtifacts';
 import type { RelationshipSnapshot } from '../azure/relationships';
 import type { ProviderScope } from './provider';
+import type { ResourceGraphArtifact } from './resourceGraph';
 /** Canonical provider scope used to select a provider-specific relationship artifact. */
 export type PublicRelationshipProviderScope = ProviderScope;
-/** Public relationship bodies accepted by provider-aware API and UI consumers. */
-export type PublicRelationshipArtifact = RelationshipSnapshot | AwsPortalRelationshipArtifact;
+/** Public relationship bodies accepted by provider-aware API and UI consumers: the Azure snapshot or the provider-neutral resource graph. */
+export type PublicRelationshipArtifact = RelationshipSnapshot | ResourceGraphArtifact;
 //# sourceMappingURL=relationships.d.ts.map

package/dist/common/relationships.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relationships.d.ts","sourceRoot":"","sources":["../../src/common/relationships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,yFAAyF;AACzF,MAAM,MAAM,+BAA+B,GAAG,aAAa,CAAC;AAE5D,kFAAkF;AAClF,MAAM,MAAM,0BAA0B,GAAG,oBAAoB,GAAG,6BAA6B,CAAC"}
+{"version":3,"file":"relationships.d.ts","sourceRoot":"","sources":["../../src/common/relationships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAE7D,yFAAyF;AACzF,MAAM,MAAM,+BAA+B,GAAG,aAAa,CAAC;AAE5D,6IAA6I;AAC7I,MAAM,MAAM,0BAA0B,GAAG,oBAAoB,GAAG,qBAAqB,CAAC"}

package/dist/common/resourceGraph.d.ts

@@ -0,0 +1,137 @@
+import type { ArtifactAccountBinding, ArtifactGeneration, ArtifactProvider } from './artifactGeneration.js';
+import type { CapabilityReasonCode } from './capabilityPassport.js';
+import type { ProviderResourceType, ResourceAttributes, ResourceFamilyId } from './resourceIdentity.js';
+/**
+ * Provider-neutral resource relationship graph published for one provider
+ * account. Families, relationship types, and synthetic types are open
+ * identifiers: a new provider service needs no package change.
+ */
+export declare const RESOURCE_GRAPH_SCHEMA_VERSION: 1;
+/** Package-owned logical artifact name; storage paths remain producer-owned. */
+export declare const RESOURCE_GRAPH_LOGICAL_NAME: "relationships.json.gz";
+export declare const RESOURCE_GRAPH_NODE_KINDS: readonly ["scope", "region", "zone", "group", "resource", "synthetic"];
+export declare const RESOURCE_GRAPH_NODE_ROLES: readonly ["network-baseline", "topology", "workload"];
+export declare const RESOURCE_GRAPH_EDGE_KINDS: readonly ["contains", "depends_on"];
+export declare const RESOURCE_GRAPH_EDGE_CONFIDENCES: readonly ["high", "medium", "low"];
+export declare const RESOURCE_GRAPH_EVIDENCE_METHODS: readonly ["field-derived", "field-reference", "persisted-inventory", "request-scope"];
+export type ResourceGraphSchemaVersion = typeof RESOURCE_GRAPH_SCHEMA_VERSION;
+export type ResourceGraphNodeKind = (typeof RESOURCE_GRAPH_NODE_KINDS)[number];
+/** Presentation role that lets readers separate baseline networking from workloads without a family list. */
+export type ResourceGraphNodeRole = (typeof RESOURCE_GRAPH_NODE_ROLES)[number];
+export type ResourceGraphEdgeKind = (typeof RESOURCE_GRAPH_EDGE_KINDS)[number];
+export type ResourceGraphEdgeConfidence = (typeof RESOURCE_GRAPH_EDGE_CONFIDENCES)[number];
+export type ResourceGraphEvidenceMethod = (typeof RESOURCE_GRAPH_EVIDENCE_METHODS)[number];
+/** Open, kebab-case relationship identifier, for example `subnet-membership`. */
+export type ResourceGraphRelationshipType = string;
+/** Open, kebab-case synthetic node identifier, for example `db-subnet-group`. */
+export type ResourceGraphSyntheticType = string;
+export interface ResourceGraphNodeCosts {
+    spend30d?: number;
+    spend30dAmortized?: number;
+}
+/**
+ * One graph node. `family` and `resourceType` are required on resource nodes,
+ * `syntheticType` on synthetic nodes, and `region` on every node except the
+ * single scope node.
+ */
+export interface ResourceGraphNode {
+    id: string;
+    kind: ResourceGraphNodeKind;
+    family?: ResourceFamilyId;
+    resourceType?: ProviderResourceType;
+    syntheticType?: ResourceGraphSyntheticType;
+    region?: string;
+    name: string;
+    displayName?: string;
+    icon?: string;
+    /** Provider-native identity such as an AWS ARN. */
+    nativeId?: string;
+    role?: ResourceGraphNodeRole;
+    tags?: Record<string, string>;
+    attributes?: ResourceAttributes;
+    costs?: ResourceGraphNodeCosts;
+}
+export interface ResourceGraphEvidence {
+    method: ResourceGraphEvidenceMethod;
+    /** Family whose data proved the edge; `graph-scope` for structural scope edges. */
+    sourceFamily: ResourceFamilyId;
+    field?: string;
+    matchedValue?: string;
+}
+/** `contains` edges point from the child to its parent. */
+export interface ResourceGraphEdge {
+    id: string;
+    from: string;
+    to: string;
+    kind: ResourceGraphEdgeKind;
+    relationshipTypes: [ResourceGraphRelationshipType, ...ResourceGraphRelationshipType[]];
+    confidence: ResourceGraphEdgeConfidence;
+    evidence: [ResourceGraphEvidence, ...ResourceGraphEvidence[]];
+}
+/** A reference a producer observed but could not resolve to a node. */
+export interface ResourceGraphUnresolved {
+    sourceNodeId: string;
+    relationshipType: ResourceGraphRelationshipType;
+    sourceFamily: ResourceFamilyId;
+    field: string;
+    matchedValue: string;
+    expectedTargetFamily: ResourceFamilyId;
+}
+interface ResourceGraphFamilyCoverageBase {
+    family: ResourceFamilyId;
+    /** Regions the family covers; a subset of the artifact scope Regions. */
+    regions: string[];
+}
+export type ResourceGraphFamilyCoverage = (ResourceGraphFamilyCoverageBase & {
+    status: 'available';
+    lastSuccessfulRefreshAt: string;
+    emptyScope: boolean;
+    reason?: never;
+}) | (ResourceGraphFamilyCoverageBase & {
+    status: 'incomplete';
+    lastSuccessfulRefreshAt?: never;
+    emptyScope?: never;
+    reason: CapabilityReasonCode;
+});
+/** Self-closing coverage: every resource node family must be declared here. */
+export interface ResourceGraphCoverage {
+    families: ResourceGraphFamilyCoverage[];
+}
+interface ResourceGraphStatsBase {
+    totalNodes: number;
+    totalEdges: number;
+    unresolvedCount: number;
+    buildMs?: number;
+    snapshotBytes?: number;
+}
+export type ResourceGraphStats = ResourceGraphStatsBase & ({
+    truncated: false;
+    truncation?: never;
+} | {
+    truncated: true;
+    truncation: {
+        reason: 'snapshot-size-limit';
+        edgesDroppedCount: number;
+        unresolvedDroppedCount: number;
+        tagsRemovedFromNodeCount: number;
+    };
+});
+export interface ResourceGraphScope {
+    regions: string[];
+}
+export type ResourceGraphArtifact<Provider extends ArtifactProvider = ArtifactProvider, AccountId extends string = string, RunId extends string = string> = ArtifactAccountBinding<Provider, AccountId> & {
+    schemaVersion: ResourceGraphSchemaVersion;
+    artifactGeneration: ArtifactGeneration<RunId>;
+    generatedAt: string;
+    scope: ResourceGraphScope;
+    /** Required when any node carries costs. */
+    currency?: string;
+    currencySymbol?: string;
+    nodes: ResourceGraphNode[];
+    edges: ResourceGraphEdge[];
+    unresolved: ResourceGraphUnresolved[];
+    coverage: ResourceGraphCoverage;
+    stats: ResourceGraphStats;
+};
+export {};
+//# sourceMappingURL=resourceGraph.d.ts.map

package/dist/common/resourceGraph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceGraph.d.ts","sourceRoot":"","sources":["../../src/common/resourceGraph.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC5G,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAExG;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAG,CAAU,CAAC;AAExD,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,EAAG,uBAAgC,CAAC;AAE5E,eAAO,MAAM,yBAAyB,wEAAyE,CAAC;AAChH,eAAO,MAAM,yBAAyB,uDAAwD,CAAC;AAC/F,eAAO,MAAM,yBAAyB,qCAAsC,CAAC;AAC7E,eAAO,MAAM,+BAA+B,oCAAqC,CAAC;AAClF,eAAO,MAAM,+BAA+B,uFAAwF,CAAC;AAErI,MAAM,MAAM,0BAA0B,GAAG,OAAO,6BAA6B,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/E,6GAA6G;AAC7G,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/E,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/E,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3F,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3F,iFAAiF;AACjF,MAAM,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEnD,iFAAiF;AACjF,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,qBAAqB,CAAC;IAC5B,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,aAAa,CAAC,EAAE,0BAA0B,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,2BAA2B,CAAC;IACpC,mFAAmF;IACnF,YAAY,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,qBAAqB,CAAC;IAC5B,iBAAiB,EAAE,CAAC,6BAA6B,EAAE,GAAG,6BAA6B,EAAE,CAAC,CAAC;IACvF,UAAU,EAAE,2BAA2B,CAAC;IACxC,QAAQ,EAAE,CAAC,qBAAqB,EAAE,GAAG,qBAAqB,EAAE,CAAC,CAAC;CAC/D;AAED,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,6BAA6B,CAAC;IAChD,YAAY,EAAE,gBAAgB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,gBAAgB,CAAC;CACxC;AAED,UAAU,+BAA+B;IACvC,MAAM,EAAE,gBAAgB,CAAC;IACzB,yEAAyE;IACzE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,MAAM,2BAA2B,GACnC,CAAC,+BAA+B,GAAG;IACjC,MAAM,EAAE,WAAW,CAAC;IACpB,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,CAAC;CAChB,CAAC,GACF,CAAC,+BAA+B,GAAG;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB,uBAAuB,CAAC,EAAE,KAAK,CAAC;IAChC,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,MAAM,EAAE,oBAAoB,CAAC;CAC9B,CAAC,CAAC;AAEP,+EAA+E;AAC/E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,2BAA2B,EAAE,CAAC;CACzC;AAED,UAAU,sBAAsB;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,GACrD,CACI;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAA;CAAE,GACxC;IACE,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE;QACV,MAAM,EAAE,qBAAqB,CAAC;QAC9B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,wBAAwB,EAAE,MAAM,CAAC;KAClC,CAAC;CACH,CACJ,CAAC;AAEJ,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,MAAM,qBAAqB,CAC/B,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EACpD,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,KAAK,SAAS,MAAM,GAAG,MAAM,IAC3B,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IAChD,aAAa,EAAE,0BAA0B,CAAC;IAC1C,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,KAAK,EAAE,kBAAkB,CAAC;CAC3B,CAAC"}

package/dist/common/resourceGraph.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RESOURCE_GRAPH_EVIDENCE_METHODS = exports.RESOURCE_GRAPH_EDGE_CONFIDENCES = exports.RESOURCE_GRAPH_EDGE_KINDS = exports.RESOURCE_GRAPH_NODE_ROLES = exports.RESOURCE_GRAPH_NODE_KINDS = exports.RESOURCE_GRAPH_LOGICAL_NAME = exports.RESOURCE_GRAPH_SCHEMA_VERSION = void 0;
+/**
+ * Provider-neutral resource relationship graph published for one provider
+ * account. Families, relationship types, and synthetic types are open
+ * identifiers: a new provider service needs no package change.
+ */
+exports.RESOURCE_GRAPH_SCHEMA_VERSION = 1;
+/** Package-owned logical artifact name; storage paths remain producer-owned. */
+exports.RESOURCE_GRAPH_LOGICAL_NAME = 'relationships.json.gz';
+exports.RESOURCE_GRAPH_NODE_KINDS = ['scope', 'region', 'zone', 'group', 'resource', 'synthetic'];
+exports.RESOURCE_GRAPH_NODE_ROLES = ['network-baseline', 'topology', 'workload'];
+exports.RESOURCE_GRAPH_EDGE_KINDS = ['contains', 'depends_on'];
+exports.RESOURCE_GRAPH_EDGE_CONFIDENCES = ['high', 'medium', 'low'];
+exports.RESOURCE_GRAPH_EVIDENCE_METHODS = ['field-derived', 'field-reference', 'persisted-inventory', 'request-scope'];
+//# sourceMappingURL=resourceGraph.js.map

package/dist/common/resourceGraph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceGraph.js","sourceRoot":"","sources":["../../src/common/resourceGraph.ts"],"names":[],"mappings":";;;AAIA;;;;GAIG;AACU,QAAA,6BAA6B,GAAG,CAAU,CAAC;AAExD,gFAAgF;AACnE,QAAA,2BAA2B,GAAG,uBAAgC,CAAC;AAE/D,QAAA,yBAAyB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AACnG,QAAA,yBAAyB,GAAG,CAAC,kBAAkB,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AAClF,QAAA,yBAAyB,GAAG,CAAC,UAAU,EAAE,YAAY,CAAU,CAAC;AAChE,QAAA,+BAA+B,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAU,CAAC;AACrE,QAAA,+BAA+B,GAAG,CAAC,eAAe,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,eAAe,CAAU,CAAC"}

package/dist/common/resourceGraphValidation.d.ts

@@ -0,0 +1,30 @@
+import type { ArtifactProvider } from './artifactGeneration.js';
+import { type ResourceGraphArtifact } from './resourceGraph.js';
+import { type AttributeValue } from './resourceIdentity.js';
+/** Account and Region a node's provider-native values must stay within. */
+export interface ResourceGraphNodeScope {
+    accountId: string;
+    region?: string;
+}
+/**
+ * Provider format rules. The generic validator checks structure only; each
+ * provider supplies identifier formats here. Every callback throws on failure.
+ */
+export interface ResourceGraphValidationOptions<Provider extends ArtifactProvider = ArtifactProvider> {
+    provider: Provider;
+    isAccountId?: (value: string) => boolean;
+    isRegion?: (value: string) => boolean;
+    isResourceType?: (value: string) => boolean;
+    validateNativeId?: (nativeId: string, scope: ResourceGraphNodeScope, field: string) => void;
+    /** Validates a zone node name against its Region. */
+    validateZone?: (zone: string, region: string, field: string) => void;
+    validateAttribute?: (key: string, value: AttributeValue, scope: ResourceGraphNodeScope, field: string) => void;
+    /** Rejects keys at every depth; `inAttributes` is true inside a node's provider-native attributes. */
+    isForbiddenKey?: (key: string, inAttributes: boolean) => boolean;
+}
+/**
+ * Validates one untrusted resource graph artifact. It checks structure and
+ * identifier formats only; families are never checked against a service list.
+ */
+export declare function validateResourceGraphArtifact<Provider extends ArtifactProvider>(value: unknown, options: ResourceGraphValidationOptions<Provider>): ResourceGraphArtifact<Provider>;
+//# sourceMappingURL=resourceGraphValidation.d.ts.map

package/dist/common/resourceGraphValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceGraphValidation.d.ts","sourceRoot":"","sources":["../../src/common/resourceGraphValidation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,OAAO,EAOL,KAAK,qBAAqB,EAE3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAwD,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAkBlH,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB;IAClG,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5F,qDAAqD;IACrD,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/G,sGAAsG;IACtG,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,KAAK,OAAO,CAAC;CAClE;AA6DD;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,SAAS,gBAAgB,EAC7E,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,8BAA8B,CAAC,QAAQ,CAAC,GAChD,qBAAqB,CAAC,QAAQ,CAAC,CAuBjC"}