Optimize role principal data in schedule-instance exports

[Naga Praneeth Chukka (praneeth-0000)]

Summary

• Reduce schedule-instance payload size by expanding principals with only their IDs.
• Resolve and cache the minimal principal details needed for role processing across export pages.
• Handle users, groups, service principals, agent subtypes, and unresolved principals.
• Reduce the principal fields retained in the role assignment and eligibility schedule-instance models.
• Add regression coverage for enrichment, caching, and lookup failures.

Overall result

Export	Dev data JSON	Branch data JSON	Size reduction
Role assignment schedule instances	568,483 B	44,551 B	92.2%
Role eligibility schedule instances	1,060,932 B	32,001 B	97.0%

[Copilot]

🟡 Changes recommended

Failed batch-member lookups are cached as completed, preventing enrichment retries on later pages.

1 open finding

• Failed batch members are incorrectly marked completed · New

What changed in this PR

Reduces schedule-instance export payloads while retaining principal details needed for role processing.

Changes:

• Requests ID-only principals and enriches them through a shared per-export cache.
• Trims both schedule-instance models to minimal principal fields.
• Adds regression coverage for enrichment, caching, and lookup failures.

File	Description
src/​powershell/​private/​export/​Resolve-ZtRoleAssignmentPrincipal.ps1	Adds principal resolution and caching.
src/​powershell/​private/​export/​Export-ZtGraphEntity.ps1	Enriches principals before exporting each page.
src/​powershell/​assets/​export-tenant.config.psd1	Enables ID-only expansion and enrichment.
src/​powershell/​assets/​export-model/​RoleEligibilityScheduleInstance-model.json	Removes unused principal fields.
src/​powershell/​assets/​export-model/​RoleAssignmentScheduleInstance-model.json	Removes unused principal fields.
code-tests/​commands/​Export-ZtGraphEntity.Tests.ps1	Covers principal enrichment and cache behavior.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

🟡 Changes recommended

Later-page lookup recovery leaves earlier saved assignments unresolved, potentially excluding them from downstream role processing.

1 open finding

• Reconcile earlier pages after principal type discovery recovers · New

1 resolved since last review

• Failed batch members are incorrectly marked completed

🧠 Review effort: Balanced

[Copilot]

🔵 Needs a closer look

Graph response handling and cross-page reconciliation need runtime validation; the regression tests were not executed.

0 open findings

1 resolved since last review

• Reconcile earlier pages after principal type discovery recovers

🧠 Review effort: Balanced