@spottoai/types-package 1.0.2-dev1138.3 → 1.0.2-dev1138.5

package/dist/aws/organizationCommitmentsApiValidation.js

@@ -0,0 +1,226 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateAwsOrganizationCommitmentsRefreshAcceptedResponse = validateAwsOrganizationCommitmentsRefreshAcceptedResponse;
+exports.validateAwsOrganizationCommitmentsScopeListResponse = validateAwsOrganizationCommitmentsScopeListResponse;
+exports.validateAwsOrganizationCommitmentsRefreshStatusResponse = validateAwsOrganizationCommitmentsRefreshStatusResponse;
+const organizationCommitments_js_1 = require("./organizationCommitments.js");
+const portalPublicArtifactValidationCommon_js_1 = require("./portalPublicArtifactValidationCommon.js");
+const pluginPublicArtifactValidationHelpers_js_1 = require("./pluginPublicArtifactValidationHelpers.js");
+const ORGANIZATION_ID = /^o-[a-z0-9]{10,32}$/u;
+/** Validates one API-authored organization commitments refresh receipt. */
+function validateAwsOrganizationCommitmentsRefreshAcceptedResponse(value, expected) {
+    const response = (0, portalPublicArtifactValidationCommon_js_1.asRecord)(value, 'organizationCommitmentsAdmission');
+    const disposition = (0, portalPublicArtifactValidationCommon_js_1.requiredEnum)(response.disposition, ['accepted', 'already-running', 'cooldown'], 'organizationCommitmentsAdmission.disposition');
+    (0, portalPublicArtifactValidationCommon_js_1.assertExactKeys)(response, [
+        'schemaVersion',
+        'provider',
+        'scopeType',
+        'companyId',
+        'estateId',
+        'organizationId',
+        'managementAccountId',
+        'requestId',
+        'correlationId',
+        'manifestRevision',
+        'disposition',
+        'acceptedAt',
+        ...(disposition === 'cooldown' ? ['nextEligibleAt'] : []),
+    ], 'organizationCommitmentsAdmission');
+    validateOrganizationApiIdentity(response, expected, 'organizationCommitmentsAdmission');
+    (0, portalPublicArtifactValidationCommon_js_1.assertValue)(response.manifestRevision, expected.manifestRevision, 'organizationCommitmentsAdmission.manifestRevision');
+    (0, portalPublicArtifactValidationCommon_js_1.requiredString)(response.requestId, 'organizationCommitmentsAdmission.requestId');
+    (0, portalPublicArtifactValidationCommon_js_1.requiredString)(response.correlationId, 'organizationCommitmentsAdmission.correlationId');
+    const acceptedAt = (0, portalPublicArtifactValidationCommon_js_1.isoTimestamp)(response.acceptedAt, 'organizationCommitmentsAdmission.acceptedAt');
+    if (disposition === 'cooldown') {
+        const nextEligibleAt = (0, portalPublicArtifactValidationCommon_js_1.isoTimestamp)(response.nextEligibleAt, 'organizationCommitmentsAdmission.nextEligibleAt');
+        if (Date.parse(nextEligibleAt) <= Date.parse(acceptedAt)) {
+            throw new Error('organizationCommitmentsAdmission.nextEligibleAt must be later than acceptedAt.');
+        }
+    }
+    (0, portalPublicArtifactValidationCommon_js_1.assertPublicJson)(response, 'organizationCommitmentsAdmission');
+    return value;
+}
+/** Validates the safe organization scope selector response for one company. */
+function validateAwsOrganizationCommitmentsScopeListResponse(value, expectedCompanyId) {
+    const response = (0, portalPublicArtifactValidationCommon_js_1.asRecord)(value, 'organizationCommitmentsScopes');
+    (0, portalPublicArtifactValidationCommon_js_1.assertExactKeys)(response, ['schemaVersion', 'provider', 'companyId', 'organizations'], 'organizationCommitmentsScopes');
+    (0, portalPublicArtifactValidationCommon_js_1.assertValue)(response.schemaVersion, organizationCommitments_js_1.AWS_ORGANIZATION_COMMITMENTS_SCHEMA_VERSION, 'organizationCommitmentsScopes.schemaVersion');
+    (0, portalPublicArtifactValidationCommon_js_1.assertValue)(response.provider, 'AWS', 'organizationCommitmentsScopes.provider');
+    (0, portalPublicArtifactValidationCommon_js_1.assertValue)(response.companyId, (0, portalPublicArtifactValidationCommon_js_1.requiredString)(expectedCompanyId, 'expectedCompanyId'), 'organizationCommitmentsScopes.companyId');
+    if (!Array.isArray(response.organizations))
+        throw new Error('organizationCommitmentsScopes.organizations must be an array.');
+    const estateIds = [];
+    const organizationIds = [];
+    response.organizations.forEach((entry, index) => {
+        const field = `organizationCommitmentsScopes.organizations[${index}]`;
+        const scope = (0, portalPublicArtifactValidationCommon_js_1.asRecord)(entry, field);
+        (0, portalPublicArtifactValidationCommon_js_1.assertExactKeys)(scope, ['scopeType', 'estateId', 'name', 'organizationId', 'managementAccountId', 'accountCount', 'availability', 'canView', 'canRefresh', 'reason'], field);
+        (0, portalPublicArtifactValidationCommon_js_1.assertValue)(scope.scopeType, 'organization', `${field}.scopeType`);
+        estateIds.push((0, portalPublicArtifactValidationCommon_js_1.requiredString)(scope.estateId, `${field}.estateId`));
+        (0, portalPublicArtifactValidationCommon_js_1.requiredString)(scope.name, `${field}.name`);
+        organizationIds.push(requiredOrganizationId(scope.organizationId, `${field}.organizationId`));
+        requiredAccountId(scope.managementAccountId, `${field}.managementAccountId`);
+        const accountCount = (0, portalPublicArtifactValidationCommon_js_1.nonNegativeInteger)(scope.accountCount, `${field}.accountCount`);
+        if (accountCount < 1)
+            throw new Error(`${field}.accountCount must include the management account.`);
+        const availability = (0, portalPublicArtifactValidationCommon_js_1.requiredEnum)(scope.availability, ['available', 'unavailable'], `${field}.availability`);
+        (0, portalPublicArtifactValidationCommon_js_1.requiredBoolean)(scope.canView, `${field}.canView`);
+        const canRefresh = (0, portalPublicArtifactValidationCommon_js_1.requiredBoolean)(scope.canRefresh, `${field}.canRefresh`);
+        if (availability === 'available') {
+            if (scope.reason !== undefined)
+                throw new Error(`${field}.reason is not allowed when the scope is available.`);
+        }
+        else {
+            (0, portalPublicArtifactValidationCommon_js_1.requiredEnum)(scope.reason, organizationCommitments_js_1.AWS_ORGANIZATION_COMMITMENTS_SCOPE_UNAVAILABLE_REASONS, `${field}.reason`);
+            if (canRefresh)
+                throw new Error(`${field}.canRefresh must be false when the scope is unavailable.`);
+        }
+    });
+    assertUniqueSorted(estateIds, 'organizationCommitmentsScopes.organizations estateId');
+    assertUnique(organizationIds, 'organizationCommitmentsScopes.organizations organizationId');
+    (0, portalPublicArtifactValidationCommon_js_1.assertPublicJson)(response, 'organizationCommitmentsScopes');
+    return value;
+}
+/** Validates one sanitized Blob-backed organization commitments status projection. */
+function validateAwsOrganizationCommitmentsRefreshStatusResponse(value, expected) {
+    const response = (0, portalPublicArtifactValidationCommon_js_1.asRecord)(value, 'organizationCommitmentsStatus');
+    (0, portalPublicArtifactValidationCommon_js_1.assertExactKeys)(response, [
+        'schemaVersion',
+        'provider',
+        'scopeType',
+        'companyId',
+        'estateId',
+        'organizationId',
+        'managementAccountId',
+        'targetManifestRevision',
+        'state',
+        'requestId',
+        'correlationId',
+        'requestedAt',
+        'updatedAt',
+        'stages',
+        'failureCode',
+        'retryable',
+        'nextEligibleAt',
+        'latestArtifact',
+    ], 'organizationCommitmentsStatus');
+    validateOrganizationApiIdentity(response, expected, 'organizationCommitmentsStatus');
+    (0, portalPublicArtifactValidationCommon_js_1.assertValue)(response.targetManifestRevision, (0, portalPublicArtifactValidationCommon_js_1.requiredString)(expected.targetManifestRevision, 'expected.targetManifestRevision'), 'organizationCommitmentsStatus.targetManifestRevision');
+    const state = (0, portalPublicArtifactValidationCommon_js_1.requiredEnum)(response.state, organizationCommitments_js_1.AWS_ORGANIZATION_COMMITMENTS_REFRESH_STATES, 'organizationCommitmentsStatus.state');
+    (0, portalPublicArtifactValidationCommon_js_1.isoTimestamp)(response.updatedAt, 'organizationCommitmentsStatus.updatedAt');
+    if (state === 'not-started') {
+        for (const key of ['requestId', 'correlationId', 'requestedAt', 'failureCode', 'retryable']) {
+            if (response[key] !== undefined)
+                throw new Error(`organizationCommitmentsStatus.${key} is not allowed before a refresh starts.`);
+        }
+    }
+    else {
+        const requestId = (0, portalPublicArtifactValidationCommon_js_1.requiredString)(response.requestId, 'organizationCommitmentsStatus.requestId');
+        if (expected.requestId !== undefined)
+            (0, portalPublicArtifactValidationCommon_js_1.assertValue)(requestId, expected.requestId, 'organizationCommitmentsStatus.requestId');
+        (0, portalPublicArtifactValidationCommon_js_1.requiredString)(response.correlationId, 'organizationCommitmentsStatus.correlationId');
+        (0, portalPublicArtifactValidationCommon_js_1.isoTimestamp)(response.requestedAt, 'organizationCommitmentsStatus.requestedAt');
+    }
+    if (response.failureCode !== undefined) {
+        (0, portalPublicArtifactValidationCommon_js_1.requiredEnum)(response.failureCode, organizationCommitments_js_1.AWS_ORGANIZATION_COMMITMENTS_ISSUE_CODES, 'organizationCommitmentsStatus.failureCode');
+    }
+    if (state === 'failed' && response.failureCode === undefined) {
+        throw new Error('organizationCommitmentsStatus.failureCode is required when the refresh failed.');
+    }
+    if (response.retryable !== undefined)
+        (0, portalPublicArtifactValidationCommon_js_1.requiredBoolean)(response.retryable, 'organizationCommitmentsStatus.retryable');
+    if (response.nextEligibleAt !== undefined)
+        (0, portalPublicArtifactValidationCommon_js_1.isoTimestamp)(response.nextEligibleAt, 'organizationCommitmentsStatus.nextEligibleAt');
+    validateStages(response.stages);
+    if (response.latestArtifact !== undefined)
+        validateLatestArtifact(response.latestArtifact, state);
+    if (state === 'fresh' && response.latestArtifact === undefined) {
+        throw new Error('organizationCommitmentsStatus.latestArtifact is required when the refresh is fresh.');
+    }
+    (0, portalPublicArtifactValidationCommon_js_1.assertPublicJson)(response, 'organizationCommitmentsStatus');
+    return value;
+}
+function validateStages(value) {
+    if (!Array.isArray(value) || value.length !== organizationCommitments_js_1.AWS_ORGANIZATION_COMMITMENTS_REFRESH_STAGES.length) {
+        throw new Error('organizationCommitmentsStatus.stages must contain every canonical stage exactly once.');
+    }
+    value.forEach((entry, index) => {
+        const field = `organizationCommitmentsStatus.stages[${index}]`;
+        const stage = (0, portalPublicArtifactValidationCommon_js_1.asRecord)(entry, field);
+        (0, portalPublicArtifactValidationCommon_js_1.assertExactKeys)(stage, ['id', 'status', 'completedCount', 'totalCount', 'failureCode', 'retryable', 'updatedAt'], field);
+        (0, portalPublicArtifactValidationCommon_js_1.assertValue)(stage.id, organizationCommitments_js_1.AWS_ORGANIZATION_COMMITMENTS_REFRESH_STAGES[index], `${field}.id`);
+        const status = (0, portalPublicArtifactValidationCommon_js_1.requiredEnum)(stage.status, organizationCommitments_js_1.AWS_ORGANIZATION_COMMITMENTS_REFRESH_STAGE_STATUSES, `${field}.status`);
+        if ((stage.completedCount === undefined) !== (stage.totalCount === undefined)) {
+            throw new Error(`${field}.completedCount and totalCount must be supplied together.`);
+        }
+        if (stage.completedCount !== undefined) {
+            const completed = (0, portalPublicArtifactValidationCommon_js_1.nonNegativeInteger)(stage.completedCount, `${field}.completedCount`);
+            const total = (0, portalPublicArtifactValidationCommon_js_1.nonNegativeInteger)(stage.totalCount, `${field}.totalCount`);
+            if (completed > total)
+                throw new Error(`${field}.completedCount must not exceed totalCount.`);
+        }
+        if (stage.failureCode !== undefined)
+            (0, portalPublicArtifactValidationCommon_js_1.requiredEnum)(stage.failureCode, organizationCommitments_js_1.AWS_ORGANIZATION_COMMITMENTS_ISSUE_CODES, `${field}.failureCode`);
+        if (status === 'failed' && stage.failureCode === undefined)
+            throw new Error(`${field}.failureCode is required when the stage failed.`);
+        if (stage.retryable !== undefined)
+            (0, portalPublicArtifactValidationCommon_js_1.requiredBoolean)(stage.retryable, `${field}.retryable`);
+        (0, portalPublicArtifactValidationCommon_js_1.isoTimestamp)(stage.updatedAt, `${field}.updatedAt`);
+    });
+}
+function validateLatestArtifact(value, refreshState) {
+    const artifact = (0, portalPublicArtifactValidationCommon_js_1.asRecord)(value, 'organizationCommitmentsStatus.latestArtifact');
+    (0, portalPublicArtifactValidationCommon_js_1.assertExactKeys)(artifact, ['state', 'generatedAt', 'artifactGeneration'], 'organizationCommitmentsStatus.latestArtifact');
+    const state = (0, portalPublicArtifactValidationCommon_js_1.requiredEnum)(artifact.state, ['available', 'stale', 'unavailable'], 'organizationCommitmentsStatus.latestArtifact.state');
+    if (state === 'unavailable') {
+        if (artifact.generatedAt !== undefined || artifact.artifactGeneration !== undefined) {
+            throw new Error('organizationCommitmentsStatus.latestArtifact unavailable state cannot claim generation evidence.');
+        }
+    }
+    else {
+        const generatedAt = (0, portalPublicArtifactValidationCommon_js_1.isoTimestamp)(artifact.generatedAt, 'organizationCommitmentsStatus.latestArtifact.generatedAt');
+        const generation = (0, portalPublicArtifactValidationCommon_js_1.validateGeneration)(artifact.artifactGeneration, 'organizationCommitmentsStatus.latestArtifact.artifactGeneration');
+        if (Date.parse(generatedAt) > Date.parse(generation.generatedAt)) {
+            throw new Error('organizationCommitmentsStatus.latestArtifact.generatedAt must not exceed its generation time.');
+        }
+    }
+    if (refreshState === 'fresh' && state !== 'available') {
+        throw new Error('organizationCommitmentsStatus fresh state requires an available latest artifact.');
+    }
+}
+function validateOrganizationApiIdentity(value, expected, field) {
+    (0, portalPublicArtifactValidationCommon_js_1.assertValue)(value.schemaVersion, organizationCommitments_js_1.AWS_ORGANIZATION_COMMITMENTS_SCHEMA_VERSION, `${field}.schemaVersion`);
+    (0, portalPublicArtifactValidationCommon_js_1.assertValue)(value.provider, 'AWS', `${field}.provider`);
+    (0, portalPublicArtifactValidationCommon_js_1.assertValue)(value.scopeType, 'organization', `${field}.scopeType`);
+    (0, portalPublicArtifactValidationCommon_js_1.assertValue)(value.companyId, (0, portalPublicArtifactValidationCommon_js_1.requiredString)(expected.companyId, 'expected.companyId'), `${field}.companyId`);
+    (0, portalPublicArtifactValidationCommon_js_1.assertValue)(value.estateId, (0, portalPublicArtifactValidationCommon_js_1.requiredString)(expected.estateId, 'expected.estateId'), `${field}.estateId`);
+    const organizationId = requiredOrganizationId(value.organizationId, `${field}.organizationId`);
+    const managementAccountId = requiredAccountId(value.managementAccountId, `${field}.managementAccountId`);
+    if (expected.organizationId !== undefined)
+        (0, portalPublicArtifactValidationCommon_js_1.assertValue)(organizationId, expected.organizationId, `${field}.organizationId`);
+    if (expected.managementAccountId !== undefined) {
+        (0, portalPublicArtifactValidationCommon_js_1.assertValue)(managementAccountId, expected.managementAccountId, `${field}.managementAccountId`);
+    }
+}
+function requiredAccountId(value, field) {
+    const accountId = (0, portalPublicArtifactValidationCommon_js_1.requiredString)(value, field);
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertAccount)(value, accountId, field);
+    return accountId;
+}
+function requiredOrganizationId(value, field) {
+    const organizationId = (0, portalPublicArtifactValidationCommon_js_1.requiredString)(value, field);
+    if (!ORGANIZATION_ID.test(organizationId))
+        throw new Error(`${field} must be a canonical AWS organization id.`);
+    return organizationId;
+}
+function assertUniqueSorted(values, field) {
+    assertUnique(values, field);
+    const sorted = [...values].sort((left, right) => left.localeCompare(right));
+    if (JSON.stringify(values) !== JSON.stringify(sorted))
+        throw new Error(`${field} must be sorted.`);
+}
+function assertUnique(values, field) {
+    if (new Set(values).size !== values.length)
+        throw new Error(`${field} must not contain duplicates.`);
+}
+//# sourceMappingURL=organizationCommitmentsApiValidation.js.map

package/dist/aws/organizationCommitmentsApiValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationCommitmentsApiValidation.js","sourceRoot":"","sources":["../../src/aws/organizationCommitmentsApiValidation.ts"],"names":[],"mappings":";;AA2CA,8HA0CC;AAGD,kHAyCC;AAGD,0HA8DC;AAlMD,6EAUsC;AACtC,uGAWmD;AACnD,yGAA2E;AAE3E,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAiB/C,2EAA2E;AAC3E,SAAgB,yDAAyD,CACvE,KAAc,EACd,QAA6D;IAE7D,MAAM,QAAQ,GAAG,IAAA,kDAAQ,EAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,IAAA,sDAAY,EAC9B,QAAQ,CAAC,WAAW,EACpB,CAAC,UAAU,EAAE,iBAAiB,EAAE,UAAU,CAAU,EACpD,8CAA8C,CAC/C,CAAC;IACF,IAAA,yDAAe,EACb,QAAQ,EACR;QACE,eAAe;QACf,UAAU;QACV,WAAW;QACX,WAAW;QACX,UAAU;QACV,gBAAgB;QAChB,qBAAqB;QACrB,WAAW;QACX,eAAe;QACf,kBAAkB;QAClB,aAAa;QACb,YAAY;QACZ,GAAG,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,EACD,kCAAkC,CACnC,CAAC;IACF,+BAA+B,CAAC,QAAQ,EAAE,QAAQ,EAAE,kCAAkC,CAAC,CAAC;IACxF,IAAA,qDAAW,EAAC,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,mDAAmD,CAAC,CAAC;IACvH,IAAA,wDAAc,EAAC,QAAQ,CAAC,SAAS,EAAE,4CAA4C,CAAC,CAAC;IACjF,IAAA,wDAAc,EAAC,QAAQ,CAAC,aAAa,EAAE,gDAAgD,CAAC,CAAC;IACzF,MAAM,UAAU,GAAG,IAAA,sDAAY,EAAC,QAAQ,CAAC,UAAU,EAAE,6CAA6C,CAAC,CAAC;IACpG,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,IAAA,sDAAY,EAAC,QAAQ,CAAC,cAAc,EAAE,iDAAiD,CAAC,CAAC;QAChH,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IACD,IAAA,0DAAgB,EAAC,QAAQ,EAAE,kCAAkC,CAAC,CAAC;IAC/D,OAAO,KAA0D,CAAC;AACpE,CAAC;AAED,+EAA+E;AAC/E,SAAgB,mDAAmD,CACjE,KAAc,EACd,iBAAyB;IAEzB,MAAM,QAAQ,GAAG,IAAA,kDAAQ,EAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAClE,IAAA,yDAAe,EAAC,QAAQ,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACxH,IAAA,qDAAW,EAAC,QAAQ,CAAC,aAAa,EAAE,wEAA2C,EAAE,6CAA6C,CAAC,CAAC;IAChI,IAAA,qDAAW,EAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,wCAAwC,CAAC,CAAC;IAChF,IAAA,qDAAW,EAAC,QAAQ,CAAC,SAAS,EAAE,IAAA,wDAAc,EAAC,iBAAiB,EAAE,mBAAmB,CAAC,EAAE,yCAAyC,CAAC,CAAC;IACnI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC7H,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,+CAA+C,KAAK,GAAG,CAAC;QACtE,MAAM,KAAK,GAAG,IAAA,kDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,IAAA,yDAAe,EACb,KAAK,EACL,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,EAC7I,KAAK,CACN,CAAC;QACF,IAAA,qDAAW,EAAC,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;QACnE,SAAS,CAAC,IAAI,CAAC,IAAA,wDAAc,EAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC;QACpE,IAAA,wDAAc,EAAC,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QAC5C,eAAe,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC,CAAC;QAC9F,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,KAAK,sBAAsB,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,IAAA,4DAAkB,EAAC,KAAK,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC;QACrF,IAAI,YAAY,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oDAAoD,CAAC,CAAC;QACpG,MAAM,YAAY,GAAG,IAAA,sDAAY,EAAC,KAAK,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,aAAa,CAAU,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC;QACtH,IAAA,yDAAe,EAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,IAAA,yDAAe,EAAC,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;QAC5E,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qDAAqD,CAAC,CAAC;QACjH,CAAC;aAAM,CAAC;YACN,IAAA,sDAAY,EAAC,KAAK,CAAC,MAAM,EAAE,mFAAsD,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;YACtG,IAAI,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0DAA0D,CAAC,CAAC;QACtG,CAAC;IACH,CAAC,CAAC,CAAC;IACH,kBAAkB,CAAC,SAAS,EAAE,sDAAsD,CAAC,CAAC;IACtF,YAAY,CAAC,eAAe,EAAE,4DAA4D,CAAC,CAAC;IAC5F,IAAA,0DAAgB,EAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;IAC5D,OAAO,KAAoD,CAAC;AAC9D,CAAC;AAED,sFAAsF;AACtF,SAAgB,uDAAuD,CACrE,KAAc,EACd,QAA0D;IAE1D,MAAM,QAAQ,GAAG,IAAA,kDAAQ,EAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAClE,IAAA,yDAAe,EACb,QAAQ,EACR;QACE,eAAe;QACf,UAAU;QACV,WAAW;QACX,WAAW;QACX,UAAU;QACV,gBAAgB;QAChB,qBAAqB;QACrB,wBAAwB;QACxB,OAAO;QACP,WAAW;QACX,eAAe;QACf,aAAa;QACb,WAAW;QACX,QAAQ;QACR,aAAa;QACb,WAAW;QACX,gBAAgB;QAChB,gBAAgB;KACjB,EACD,+BAA+B,CAChC,CAAC;IACF,+BAA+B,CAAC,QAAQ,EAAE,QAAQ,EAAE,+BAA+B,CAAC,CAAC;IACrF,IAAA,qDAAW,EACT,QAAQ,CAAC,sBAAsB,EAC/B,IAAA,wDAAc,EAAC,QAAQ,CAAC,sBAAsB,EAAE,iCAAiC,CAAC,EAClF,sDAAsD,CACvD,CAAC;IACF,MAAM,KAAK,GAAG,IAAA,sDAAY,EAAC,QAAQ,CAAC,KAAK,EAAE,wEAA2C,EAAE,qCAAqC,CAAC,CAAC;IAC/H,IAAA,sDAAY,EAAC,QAAQ,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAC5E,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,CAAU,EAAE,CAAC;YACrG,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,0CAA0C,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,IAAA,wDAAc,EAAC,QAAQ,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;QAChG,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;YAAE,IAAA,qDAAW,EAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;QAC5H,IAAA,wDAAc,EAAC,QAAQ,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAC;QACtF,IAAA,sDAAY,EAAC,QAAQ,CAAC,WAAW,EAAE,2CAA2C,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACvC,IAAA,sDAAY,EAAC,QAAQ,CAAC,WAAW,EAAE,qEAAwC,EAAE,2CAA2C,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;QAAE,IAAA,yDAAe,EAAC,QAAQ,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;IACrH,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS;QAAE,IAAA,sDAAY,EAAC,QAAQ,CAAC,cAAc,EAAE,8CAA8C,CAAC,CAAC;IACjI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS;QAAE,sBAAsB,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAClG,IAAI,KAAK,KAAK,OAAO,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IACzG,CAAC;IACD,IAAA,0DAAgB,EAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;IAC5D,OAAO,KAAwD,CAAC;AAClE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,wEAA2C,CAAC,MAAM,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC3G,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,wCAAwC,KAAK,GAAG,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAA,kDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,IAAA,yDAAe,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;QACzH,IAAA,qDAAW,EAAC,KAAK,CAAC,EAAE,EAAE,wEAA2C,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,IAAA,sDAAY,EAAC,KAAK,CAAC,MAAM,EAAE,gFAAmD,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;QAClH,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2DAA2D,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,IAAA,4DAAkB,EAAC,KAAK,CAAC,cAAc,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,IAAA,4DAAkB,EAAC,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;YAC1E,IAAI,SAAS,GAAG,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,IAAA,sDAAY,EAAC,KAAK,CAAC,WAAW,EAAE,qEAAwC,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;QACvI,IAAI,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iDAAiD,CAAC,CAAC;QACvI,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,IAAA,yDAAe,EAAC,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;QAC1F,IAAA,sDAAY,EAAC,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,YAAoB;IAClE,MAAM,QAAQ,GAAG,IAAA,kDAAQ,EAAC,KAAK,EAAE,8CAA8C,CAAC,CAAC;IACjF,IAAA,yDAAe,EAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,oBAAoB,CAAC,EAAE,8CAA8C,CAAC,CAAC;IAC1H,MAAM,KAAK,GAAG,IAAA,sDAAY,EAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,aAAa,CAAU,EAAE,oDAAoD,CAAC,CAAC;IACjJ,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,IAAI,QAAQ,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,GAAG,IAAA,sDAAY,EAAC,QAAQ,CAAC,WAAW,EAAE,0DAA0D,CAAC,CAAC;QACnH,MAAM,UAAU,GAAG,IAAA,4DAAkB,EAAC,QAAQ,CAAC,kBAAkB,EAAE,iEAAiE,CAAC,CAAC;QACtI,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;IACD,IAAI,YAAY,KAAK,OAAO,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,KAA8B,EAC9B,QAAwG,EACxG,KAAa;IAEb,IAAA,qDAAW,EAAC,KAAK,CAAC,aAAa,EAAE,wEAA2C,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;IACxG,IAAA,qDAAW,EAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IACxD,IAAA,qDAAW,EAAC,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;IACnE,IAAA,qDAAW,EAAC,KAAK,CAAC,SAAS,EAAE,IAAA,wDAAc,EAAC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;IAC7G,IAAA,qDAAW,EAAC,KAAK,CAAC,QAAQ,EAAE,IAAA,wDAAc,EAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IACzG,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;IAC/F,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,KAAK,sBAAsB,CAAC,CAAC;IACzG,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS;QAAE,IAAA,qDAAW,EAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;IAC3H,IAAI,QAAQ,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC/C,IAAA,qDAAW,EAAC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,EAAE,GAAG,KAAK,sBAAsB,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,MAAM,SAAS,GAAG,IAAA,wDAAc,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAA,wDAAa,EAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAC3D,MAAM,cAAc,GAAG,IAAA,wDAAc,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IAChH,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAyB,EAAE,KAAa;IAClE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB,EAAE,KAAa;IAC5D,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;AACvG,CAAC"}

package/dist/aws/organizationCommitmentsValidation.d.ts

@@ -0,0 +1,12 @@
+import type { AwsOrganizationCommitmentsPlanningView } from './organizationCommitments.js';
+export interface AwsOrganizationCommitmentsExpectedIdentity {
+    companyId: string;
+    estateId: string;
+    organizationId: string;
+    managementAccountId: string;
+    manifestRevision: string;
+    memberAccountIds: readonly string[];
+}
+/** Validates the multi-account identity boundary of an AWS organization commitments view. */
+export declare function validateAwsOrganizationCommitmentsPlanningViewIdentity(value: unknown, expected: AwsOrganizationCommitmentsExpectedIdentity): asserts value is AwsOrganizationCommitmentsPlanningView;
+//# sourceMappingURL=organizationCommitmentsValidation.d.ts.map

package/dist/aws/organizationCommitmentsValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationCommitmentsValidation.d.ts","sourceRoot":"","sources":["../../src/aws/organizationCommitmentsValidation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,8BAA8B,CAAC;AAgC3F,MAAM,WAAW,0CAA0C;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,6FAA6F;AAC7F,wBAAgB,sDAAsD,CACpE,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,0CAA0C,GACnD,OAAO,CAAC,KAAK,IAAI,sCAAsC,CA8CzD"}

package/dist/aws/organizationCommitmentsValidation.js

@@ -0,0 +1,228 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateAwsOrganizationCommitmentsPlanningViewIdentity = validateAwsOrganizationCommitmentsPlanningViewIdentity;
+const provider_js_1 = require("../common/provider.js");
+const pluginPublicArtifactValidationHelpers_js_1 = require("./pluginPublicArtifactValidationHelpers.js");
+const ORGANIZATION_ID = /^o-[a-z0-9]{10,32}$/u;
+const FORBIDDEN_ORGANIZATION_COMMITMENTS_KEYS = new Set([
+    'billingScopeId',
+    'blobPath',
+    'checkpoint',
+    'cloudAccountId',
+    'connectionString',
+    'credentialHealth',
+    'credentialId',
+    'credentialReference',
+    'externalId',
+    'managementGroupId',
+    'pricingQuote',
+    'quotePolicy',
+    'resourceGroupId',
+    'roleArn',
+    'saga',
+    'sasToken',
+    'secretArn',
+    'secretReference',
+    'storageCapacity',
+    'storagePath',
+    'subscription',
+    'subscriptionId',
+    'tenantId',
+    'unlockFinancialLedger',
+]);
+/** Validates the multi-account identity boundary of an AWS organization commitments view. */
+function validateAwsOrganizationCommitmentsPlanningViewIdentity(value, expected) {
+    const view = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(value, 'organizationCommitmentsPlanning');
+    const providerScope = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(view.providerScope, 'organizationCommitmentsPlanning.providerScope');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertExactKeys)(providerScope, ['providerName', 'providerScopeId', 'scopeType', 'companyId', 'estateId', 'organizationId', 'managementAccountId'], 'organizationCommitmentsPlanning.providerScope');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(providerScope.providerName, provider_js_1.ProviderName.Aws, 'organizationCommitmentsPlanning.providerScope.providerName');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(providerScope.scopeType, 'organization', 'organizationCommitmentsPlanning.providerScope.scopeType');
+    const companyId = (0, pluginPublicArtifactValidationHelpers_js_1.requiredString)(providerScope.companyId, 'organizationCommitmentsPlanning.providerScope.companyId');
+    const estateId = (0, pluginPublicArtifactValidationHelpers_js_1.requiredString)(providerScope.estateId, 'organizationCommitmentsPlanning.providerScope.estateId');
+    const organizationId = requiredOrganizationId(providerScope.organizationId, 'organizationCommitmentsPlanning.providerScope.organizationId');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(providerScope.providerScopeId, organizationId, 'organizationCommitmentsPlanning.providerScope.providerScopeId');
+    const managementAccountId = requiredAccountId(providerScope.managementAccountId, 'organizationCommitmentsPlanning.providerScope.managementAccountId');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(expected.companyId, companyId, 'expected.companyId');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(expected.estateId, estateId, 'expected.estateId');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(expected.organizationId, organizationId, 'expected.organizationId');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(expected.managementAccountId, managementAccountId, 'expected.managementAccountId');
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(expected.manifestRevision, (0, pluginPublicArtifactValidationHelpers_js_1.requiredString)(view.manifestRevision, 'organizationCommitmentsPlanning.manifestRevision'), 'expected.manifestRevision');
+    const accountMembership = validateAccounts(view.accounts, managementAccountId);
+    validateExpectedMembers(expected.memberAccountIds, accountMembership.accountIds);
+    validateInventory(view.inventory, accountMembership.members);
+    validatePayerAggregates(view.payerAggregates, accountMembership.members, managementAccountId);
+    validatePurchaseRecommendations(view.purchaseRecommendations, accountMembership.members, managementAccountId);
+    validateAttribution(view.allocation, accountMembership.members, false, 'organizationCommitmentsPlanning.allocation');
+    validateAttribution(view.resourceAttribution, accountMembership.members, true, 'organizationCommitmentsPlanning.resourceAttribution');
+    validateBoundIdentities(view, accountMembership.members, organizationId, companyId, estateId, managementAccountId, 'organizationCommitmentsPlanning');
+}
+function validateAccounts(value, managementAccountId) {
+    if (!Array.isArray(value) || value.length === 0)
+        throw new Error('organizationCommitmentsPlanning.accounts must be a non-empty array.');
+    const accountIds = value.map((entry, index) => {
+        const field = `organizationCommitmentsPlanning.accounts[${index}]`;
+        const account = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(entry, field);
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertExactKeys)(account, ['accountId', 'displayName', 'role', 'inventoryStatus', 'lastSuccessfulRefreshAt'], field);
+        const accountId = requiredAccountId(account.accountId, `${field}.accountId`);
+        const role = (0, pluginPublicArtifactValidationHelpers_js_1.requiredEnum)(account.role, ['management', 'member'], `${field}.role`);
+        if ((accountId === managementAccountId) !== (role === 'management')) {
+            throw new Error(`${field}.role must identify the exact management account.`);
+        }
+        return accountId;
+    });
+    if (new Set(accountIds).size !== accountIds.length)
+        throw new Error('organizationCommitmentsPlanning.accounts must not contain duplicates.');
+    const sorted = [...accountIds].sort((left, right) => left.localeCompare(right));
+    if (JSON.stringify(sorted) !== JSON.stringify(accountIds))
+        throw new Error('organizationCommitmentsPlanning.accounts must be sorted by accountId.');
+    if (!accountIds.includes(managementAccountId))
+        throw new Error('organizationCommitmentsPlanning.accounts must contain the management account.');
+    return { accountIds, members: new Set(accountIds) };
+}
+function validateInventory(value, members) {
+    if (!Array.isArray(value))
+        throw new Error('organizationCommitmentsPlanning.inventory must be an array.');
+    value.forEach((entry, index) => {
+        const field = `organizationCommitmentsPlanning.inventory[${index}]`;
+        const item = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(entry, field);
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(item.sourceKind, 'aws-native', `${field}.sourceKind`);
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(item.provider, provider_js_1.ProviderName.Aws, `${field}.provider`);
+        requiredMember(item.ownerAccountId, members, `${field}.ownerAccountId`);
+        if (item.shape !== undefined)
+            validateAwsShape(item.shape, `${field}.shape`);
+    });
+}
+function validatePayerAggregates(value, members, managementAccountId) {
+    if (!Array.isArray(value))
+        throw new Error('organizationCommitmentsPlanning.payerAggregates must be an array.');
+    value.forEach((entry, index) => {
+        const field = `organizationCommitmentsPlanning.payerAggregates[${index}]`;
+        const aggregate = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(entry, field);
+        const payerAccountId = requiredMember(aggregate.payerAccountId, members, `${field}.payerAccountId`);
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(payerAccountId, managementAccountId, `${field}.payerAccountId`);
+        validateAwsSource(aggregate.source, `${field}.source`);
+    });
+}
+function validatePurchaseRecommendations(value, members, managementAccountId) {
+    if (value === undefined)
+        return;
+    if (!Array.isArray(value))
+        throw new Error('organizationCommitmentsPlanning.purchaseRecommendations must be an array.');
+    value.forEach((entry, index) => {
+        const field = `organizationCommitmentsPlanning.purchaseRecommendations[${index}]`;
+        const recommendation = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(entry, field);
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(recommendation.purchaseScope, 'payer', `${field}.purchaseScope`);
+        const payerAccountId = requiredMember(recommendation.payerAccountId, members, `${field}.payerAccountId`);
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(payerAccountId, managementAccountId, `${field}.payerAccountId`);
+        if (recommendation.recommendedAccountId !== undefined) {
+            requiredMember(recommendation.recommendedAccountId, members, `${field}.recommendedAccountId`);
+        }
+        validateAwsSource(recommendation.source, `${field}.source`);
+        validateAwsShape(recommendation.targetShape, `${field}.targetShape`);
+    });
+}
+function validateAttribution(value, members, resource, field) {
+    const evidence = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(value, field);
+    if (evidence.status === 'unavailable') {
+        (0, pluginPublicArtifactValidationHelpers_js_1.assertExactKeys)(evidence, ['status', 'reason'], field);
+        (0, pluginPublicArtifactValidationHelpers_js_1.requiredEnum)(evidence.reason, ['not-collected', 'not-proved', 'source-unavailable'], `${field}.reason`);
+        return;
+    }
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(evidence.status, 'available', `${field}.status`);
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertExactKeys)(evidence, ['status', 'source', 'records'], field);
+    validateAwsSource(evidence.source, `${field}.source`, true);
+    if (!Array.isArray(evidence.records) || evidence.records.length === 0) {
+        throw new Error(`${field}.records must be non-empty when attribution is available.`);
+    }
+    evidence.records.forEach((entry, index) => {
+        const record = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(entry, `${field}.records[${index}]`);
+        if (resource) {
+            requiredMember(record.accountId, members, `${field}.records[${index}].accountId`);
+        }
+        else {
+            requiredMember(record.beneficiaryAccountId, members, `${field}.records[${index}].beneficiaryAccountId`);
+            if (record.ownerAccountId !== undefined)
+                requiredMember(record.ownerAccountId, members, `${field}.records[${index}].ownerAccountId`);
+        }
+    });
+}
+function validateAwsSource(value, field, allowDerived = false) {
+    const source = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(value, field);
+    const allowed = allowDerived ? ['aws-native', 'spotto-derived'] : ['aws-native'];
+    (0, pluginPublicArtifactValidationHelpers_js_1.requiredEnum)(source.sourceKind, allowed, `${field}.sourceKind`);
+}
+function validateAwsShape(value, field) {
+    const shape = (0, pluginPublicArtifactValidationHelpers_js_1.asRecord)(value, field);
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(shape.provider, 'aws', `${field}.provider`);
+}
+function validateBoundIdentities(value, members, organizationId, companyId, estateId, managementAccountId, field) {
+    if (Array.isArray(value)) {
+        value.forEach((entry, index) => validateBoundIdentities(entry, members, organizationId, companyId, estateId, managementAccountId, `${field}[${index}]`));
+        return;
+    }
+    if (!value || typeof value !== 'object') {
+        if (typeof value === 'string')
+            validateArnAccount(value, members, field);
+        return;
+    }
+    for (const [key, child] of Object.entries(value)) {
+        if (FORBIDDEN_ORGANIZATION_COMMITMENTS_KEYS.has(key)) {
+            throw new Error(`${field}.${key} is not allowed in an AWS organization commitments artifact.`);
+        }
+        if (key === 'accountId' || key === 'ownerAccountId' || key === 'beneficiaryAccountId' || key === 'payerAccountId') {
+            requiredMember(child, members, `${field}.${key}`);
+        }
+        if (key === 'organizationId')
+            (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(child, organizationId, `${field}.${key}`);
+        if (key === 'companyId')
+            (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(child, companyId, `${field}.${key}`);
+        if (key === 'estateId')
+            (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(child, estateId, `${field}.${key}`);
+        if (key === 'managementAccountId')
+            (0, pluginPublicArtifactValidationHelpers_js_1.assertAccount)(child, managementAccountId, `${field}.${key}`);
+        if (key === 'providerName')
+            (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(child, provider_js_1.ProviderName.Aws, `${field}.${key}`);
+        if (key === 'provider')
+            (0, pluginPublicArtifactValidationHelpers_js_1.assertValue)(child, 'aws', `${field}.${key}`);
+        if (key === 'sourceKind' && child === 'azure-native') {
+            throw new Error(`${field}.${key} cannot contain Azure-native evidence.`);
+        }
+        validateBoundIdentities(child, members, organizationId, companyId, estateId, managementAccountId, `${field}.${key}`);
+    }
+}
+function validateArnAccount(value, members, field) {
+    if (!value.startsWith('arn:'))
+        return;
+    const arnAccountId = value.split(':', 6)[4];
+    if (arnAccountId && !members.has(arnAccountId))
+        throw new Error(`${field} contains an ARN outside the declared organization membership.`);
+}
+function requiredMember(value, members, field) {
+    const accountId = requiredAccountId(value, field);
+    if (!members.has(accountId))
+        throw new Error(`${field} must belong to the declared organization membership.`);
+    return accountId;
+}
+function requiredAccountId(value, field) {
+    const accountId = (0, pluginPublicArtifactValidationHelpers_js_1.requiredString)(value, field);
+    (0, pluginPublicArtifactValidationHelpers_js_1.assertAccount)(value, accountId, field);
+    return accountId;
+}
+function requiredOrganizationId(value, field) {
+    const organizationId = (0, pluginPublicArtifactValidationHelpers_js_1.requiredString)(value, field);
+    if (!ORGANIZATION_ID.test(organizationId))
+        throw new Error(`${field} must be a canonical AWS organization id.`);
+    return organizationId;
+}
+function validateExpectedMembers(expected, actual) {
+    const normalized = expected.map((accountId, index) => requiredAccountId(accountId, `expected.memberAccountIds[${index}]`));
+    if (new Set(normalized).size !== normalized.length)
+        throw new Error('expected.memberAccountIds must not contain duplicates.');
+    const sorted = [...normalized].sort((left, right) => left.localeCompare(right));
+    if (JSON.stringify(sorted) !== JSON.stringify(normalized))
+        throw new Error('expected.memberAccountIds must be sorted.');
+    if (JSON.stringify(normalized) !== JSON.stringify(actual)) {
+        throw new Error('expected.memberAccountIds must match the artifact membership exactly.');
+    }
+}
+//# sourceMappingURL=organizationCommitmentsValidation.js.map

package/dist/aws/organizationCommitmentsValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationCommitmentsValidation.js","sourceRoot":"","sources":["../../src/aws/organizationCommitmentsValidation.ts"],"names":[],"mappings":";;AA0CA,wHAiDC;AA1FD,uDAAqD;AACrD,yGAAiJ;AAEjJ,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAC/C,MAAM,uCAAuC,GAAG,IAAI,GAAG,CAAC;IACtD,gBAAgB;IAChB,UAAU;IACV,YAAY;IACZ,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;IAClB,cAAc;IACd,qBAAqB;IACrB,YAAY;IACZ,mBAAmB;IACnB,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,SAAS;IACT,MAAM;IACN,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,iBAAiB;IACjB,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,UAAU;IACV,uBAAuB;CACxB,CAAC,CAAC;AAWH,6FAA6F;AAC7F,SAAgB,sDAAsD,CACpE,KAAc,EACd,QAAoD;IAEpD,MAAM,IAAI,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,IAAA,mDAAQ,EAAC,IAAI,CAAC,aAAa,EAAE,+CAA+C,CAAC,CAAC;IACpG,IAAA,0DAAe,EACb,aAAa,EACb,CAAC,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,EAClH,+CAA+C,CAChD,CAAC;IACF,IAAA,sDAAW,EAAC,aAAa,CAAC,YAAY,EAAE,0BAAY,CAAC,GAAG,EAAE,4DAA4D,CAAC,CAAC;IACxH,IAAA,sDAAW,EAAC,aAAa,CAAC,SAAS,EAAE,cAAc,EAAE,yDAAyD,CAAC,CAAC;IAEhH,MAAM,SAAS,GAAG,IAAA,yDAAc,EAAC,aAAa,CAAC,SAAS,EAAE,yDAAyD,CAAC,CAAC;IACrH,MAAM,QAAQ,GAAG,IAAA,yDAAc,EAAC,aAAa,CAAC,QAAQ,EAAE,wDAAwD,CAAC,CAAC;IAClH,MAAM,cAAc,GAAG,sBAAsB,CAAC,aAAa,CAAC,cAAc,EAAE,8DAA8D,CAAC,CAAC;IAC5I,IAAA,sDAAW,EAAC,aAAa,CAAC,eAAe,EAAE,cAAc,EAAE,+DAA+D,CAAC,CAAC;IAC5H,MAAM,mBAAmB,GAAG,iBAAiB,CAC3C,aAAa,CAAC,mBAAmB,EACjC,mEAAmE,CACpE,CAAC;IAEF,IAAA,sDAAW,EAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACjE,IAAA,sDAAW,EAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC9D,IAAA,sDAAW,EAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,EAAE,yBAAyB,CAAC,CAAC;IAChF,IAAA,sDAAW,EAAC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,8BAA8B,CAAC,CAAC;IAC/F,IAAA,sDAAW,EACT,QAAQ,CAAC,gBAAgB,EACzB,IAAA,yDAAc,EAAC,IAAI,CAAC,gBAAgB,EAAE,kDAAkD,CAAC,EACzF,2BAA2B,CAC5B,CAAC;IAEF,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC/E,uBAAuB,CAAC,QAAQ,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACjF,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7D,uBAAuB,CAAC,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC9F,+BAA+B,CAAC,IAAI,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC9G,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,4CAA4C,CAAC,CAAC;IACrH,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,qDAAqD,CAAC,CAAC;IACtI,uBAAuB,CACrB,IAAI,EACJ,iBAAiB,CAAC,OAAO,EACzB,cAAc,EACd,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,iCAAiC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,mBAA2B;IACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACxI,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,4CAA4C,KAAK,GAAG,CAAC;QACnE,MAAM,OAAO,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACvC,IAAA,0DAAe,EAAC,OAAO,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,EAAE,KAAK,CAAC,CAAC;QACpH,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAA,uDAAY,EAAC,OAAO,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAU,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QAC5F,IAAI,CAAC,SAAS,KAAK,mBAAmB,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mDAAmD,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC7I,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACpJ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IAChJ,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,OAAoB;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC1G,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,6CAA6C,KAAK,GAAG,CAAC;QACpE,MAAM,IAAI,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,IAAA,sDAAW,EAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;QAClE,IAAA,sDAAW,EAAC,IAAI,CAAC,QAAQ,EAAE,0BAAY,CAAC,GAAG,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;QAClE,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,OAAoB,EAAE,mBAA2B;IAChG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IAChH,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,mDAAmD,KAAK,GAAG,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;QACpG,IAAA,sDAAW,EAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;QAC5E,iBAAiB,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc,EAAE,OAAoB,EAAE,mBAA2B;IACxG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IACxH,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,2DAA2D,KAAK,GAAG,CAAC;QAClF,MAAM,cAAc,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAA,sDAAW,EAAC,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;QAC7E,MAAM,cAAc,GAAG,cAAc,CAAC,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;QACzG,IAAA,sDAAW,EAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;QAC5E,IAAI,cAAc,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,oBAAoB,EAAE,OAAO,EAAE,GAAG,KAAK,uBAAuB,CAAC,CAAC;QAChG,CAAC;QACD,iBAAiB,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;QAC5D,gBAAgB,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,OAAoB,EAAE,QAAiB,EAAE,KAAa;IACjG,MAAM,QAAQ,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACtC,IAAA,0DAAe,EAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QACvD,IAAA,uDAAY,EAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,YAAY,EAAE,oBAAoB,CAAU,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;QACjH,OAAO;IACT,CAAC;IACD,IAAA,sDAAW,EAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IAC7D,IAAA,0DAAe,EAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IAClE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2DAA2D,CAAC,CAAC;IACvF,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,GAAG,KAAK,YAAY,KAAK,GAAG,CAAC,CAAC;QAC7D,IAAI,QAAQ,EAAE,CAAC;YACb,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,YAAY,KAAK,aAAa,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,EAAE,GAAG,KAAK,YAAY,KAAK,wBAAwB,CAAC,CAAC;YACxG,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;gBAAE,cAAc,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,KAAK,YAAY,KAAK,kBAAkB,CAAC,CAAC;QACvI,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa,EAAE,YAAY,GAAG,KAAK;IAC5E,MAAM,MAAM,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC,YAAY,EAAE,gBAAgB,CAAW,CAAC,CAAC,CAAE,CAAC,YAAY,CAAW,CAAC;IACvG,IAAA,uDAAY,EAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,MAAM,KAAK,GAAG,IAAA,mDAAQ,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,IAAA,sDAAW,EAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAc,EACd,OAAoB,EACpB,cAAsB,EACtB,SAAiB,EACjB,QAAgB,EAChB,mBAA2B,EAC3B,KAAa;IAEb,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC7B,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CACxH,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,uCAAuC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,8DAA8D,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,sBAAsB,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YAClH,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,GAAG,KAAK,gBAAgB;YAAE,IAAA,sDAAW,EAAC,KAAK,EAAE,cAAc,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QACpF,IAAI,GAAG,KAAK,WAAW;YAAE,IAAA,sDAAW,EAAC,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG,KAAK,UAAU;YAAE,IAAA,sDAAW,EAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QACxE,IAAI,GAAG,KAAK,qBAAqB;YAAE,IAAA,wDAAa,EAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QAChG,IAAI,GAAG,KAAK,cAAc;YAAE,IAAA,sDAAW,EAAC,KAAK,EAAE,0BAAY,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QACpF,IAAI,GAAG,KAAK,UAAU;YAAE,IAAA,sDAAW,EAAC,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QACrE,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,wCAAwC,CAAC,CAAC;QAC3E,CAAC;QACD,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;IACvH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,OAAoB,EAAE,KAAa;IAC5E,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO;IACtC,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gEAAgE,CAAC,CAAC;AAC5I,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,OAAoB,EAAE,KAAa;IACzE,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uDAAuD,CAAC,CAAC;IAC9G,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,MAAM,SAAS,GAAG,IAAA,yDAAc,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAA,wDAAa,EAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAC3D,MAAM,cAAc,GAAG,IAAA,yDAAc,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IAChH,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,uBAAuB,CAAC,QAA2B,EAAE,MAAyB;IACrF,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,6BAA6B,KAAK,GAAG,CAAC,CAAC,CAAC;IAC3H,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC9H,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxH,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC"}

package/dist/aws/portalOrganizationCommitmentsPlanningPublicArtifactValidation.d.ts

@@ -0,0 +1,9 @@
+import { type AwsOrganizationCommitmentsPlanningView } from './organizationCommitments.js';
+import { type AwsOrganizationCommitmentsExpectedIdentity } from './organizationCommitmentsValidation.js';
+import { type AwsPortalOrganizationCommitmentsPlanningArtifact } from './portalOrganizationCommitmentsPlanningPublicArtifacts.js';
+export type AwsPortalOrganizationCommitmentsExpectedIdentity = AwsOrganizationCommitmentsExpectedIdentity;
+/** Validates one untrusted organization Commitments Planning view without its Portal envelope. */
+export declare function validateAwsOrganizationCommitmentsPlanningView(value: unknown, expected: AwsOrganizationCommitmentsExpectedIdentity): AwsOrganizationCommitmentsPlanningView;
+/** Validates one untrusted immutable AWS organization Commitments Planning artifact. */
+export declare function validateAwsPortalOrganizationCommitmentsPlanningArtifact(value: unknown, expected: AwsPortalOrganizationCommitmentsExpectedIdentity): AwsPortalOrganizationCommitmentsPlanningArtifact;
+//# sourceMappingURL=portalOrganizationCommitmentsPlanningPublicArtifactValidation.d.ts.map

package/dist/aws/portalOrganizationCommitmentsPlanningPublicArtifactValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portalOrganizationCommitmentsPlanningPublicArtifactValidation.d.ts","sourceRoot":"","sources":["../../src/aws/portalOrganizationCommitmentsPlanningPublicArtifactValidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,sCAAsC,EAC5C,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEL,KAAK,0CAA0C,EAChD,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAGL,KAAK,gDAAgD,EACtD,MAAM,2DAA2D,CAAC;AAuCnE,MAAM,MAAM,gDAAgD,GAAG,0CAA0C,CAAC;AAE1G,kGAAkG;AAClG,wBAAgB,8CAA8C,CAC5D,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,0CAA0C,GACnD,sCAAsC,CAKxC;AAED,wFAAwF;AACxF,wBAAgB,wDAAwD,CACtE,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,gDAAgD,GACzD,gDAAgD,CAoBlD"}