@camunda/ccma-api 0.0.2 → 0.0.4

package/dist/services/accounts/users.service.js

@@ -0,0 +1,444 @@
+import {
+  MINUTE
+} from "@camunda/ccma-shared-types";
+import { request } from "../../utils/api.js";
+import { Cache } from "../../utils/cache.js";
+import { HttpError } from "../../utils/errors.js";
+const userCache = new Cache(5 * MINUTE);
+const REGEX_EMAIL = (
+  // eslint-disable-next-line prefer-named-capture-group, no-useless-escape
+  /^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/u
+);
+class UsersService {
+  static async search(params) {
+    const queryParams = new URLSearchParams();
+    const urlParts = [];
+    if (params.params.q.roleId) {
+      const q = {
+        roleId: params.params.q.roleId,
+        name: params.params.q.name || "",
+        email: params.params.q.email || ""
+      };
+      queryParams.append("q", JSON.stringify(q));
+      urlParts.push(...["api", "users", `?${queryParams.toString()}`]);
+    } else {
+      if (params.params.onBehalfOf) {
+        queryParams.append(
+          "onBehalfOf",
+          encodeURI(JSON.stringify(params.params.onBehalfOf))
+        );
+      }
+      queryParams.append("q", encodeURI(JSON.stringify(params.params.q)));
+      urlParts.push(...["api", "users", "search", `?${queryParams.toString()}`]);
+    }
+    const serviceContext = {
+      method: {
+        name: `UsersService.search`,
+        url: urlParts.join(`/`),
+        normalizedUrl: `api/users/search`,
+        type: "get"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: {
+        name: "accounts",
+        type: "internal"
+      }
+    };
+    if (params.params.q.userId) {
+      UsersService.validateUserId(serviceContext, params.params.q.userId);
+    }
+    const response = await request({
+      config: params.config,
+      base: {
+        id: "accounts"
+      },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    return response.body;
+  }
+  static async simpleSearch(params) {
+    const serviceContext = {
+      method: {
+        name: `UsersService.simpleSearch`,
+        url: `api/users/search`,
+        normalizedUrl: `api/users/search`,
+        type: "post"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: {
+        name: "accounts",
+        type: "internal"
+      }
+    };
+    switch (params.params.type) {
+      case "by-email":
+        UsersService.validateEmail(serviceContext, params.params.query);
+        break;
+      case "by-id":
+        UsersService.validateUserId(serviceContext, params.params.query);
+        break;
+      case "lucene":
+        UsersService.validateLuceneQuery(serviceContext, params.params.query);
+        break;
+    }
+    const response = await request({
+      config: params.config,
+      base: {
+        id: "accounts"
+      },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      body: {
+        query: params.params.query,
+        type: params.params.type
+      },
+      metricsDetails: serviceContext
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    return response.body;
+  }
+  static async getUserInfo(params) {
+    const cacheKey = params.basic === true ? `basic-${params.userId}` : params.userId;
+    if (!params.cacheControl?.ignoreCache) {
+      const inCache = userCache.get(cacheKey);
+      if (inCache) {
+        return inCache;
+      }
+    }
+    let queryParams = "";
+    if (params.basic === true) {
+      const searchParams = new URLSearchParams();
+      searchParams.append("basic", "true");
+      queryParams = `?${searchParams.toString()}`;
+    }
+    const serviceContext = {
+      method: {
+        name: `UsersService.getUserInfo`,
+        url: `api/users/${params.userId}${queryParams}`,
+        normalizedUrl: `api/users/:userId`,
+        type: "get"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: {
+        name: "accounts",
+        type: "internal"
+      }
+    };
+    UsersService.validateUserId(serviceContext, params.userId);
+    const response = await request({
+      ...params,
+      base: { id: "accounts" },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    userCache.set(cacheKey, response.body);
+    return response.body;
+  }
+  static async addUserToOrganization(params) {
+    const serviceContext = {
+      method: {
+        name: `UsersService.addUserToOrganization`,
+        url: `api/users/${params.params.userId}/organization/${params.params.orgId}`,
+        normalizedUrl: `api/users/:userId/organization/:orgId`,
+        type: "put"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: {
+        name: "accounts",
+        type: "internal"
+      }
+    };
+    const response = await request({
+      config: params.config,
+      base: { id: "accounts" },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext,
+      body: {
+        orgRoles: params.params.orgRoles,
+        byEmail: params.params.byEmail
+      },
+      responseType: "none"
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+  }
+  static async removeUserFromOrganization(params) {
+    const serviceContext = {
+      method: {
+        name: `UsersService.removeUserFromOrganization`,
+        url: `api/users/${params.params.userId}/organization/${params.params.orgId}`,
+        normalizedUrl: `api/users/:userId/organization/:orgId`,
+        type: "delete"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: {
+        name: "accounts",
+        type: "internal"
+      }
+    };
+    const response = await request({
+      config: params.config,
+      base: { id: "accounts" },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext,
+      body: {
+        byEmail: params.params.byEmail
+      },
+      responseType: "none"
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+  }
+  /**
+   * Update a user's role by adding or removing a single role.
+   * This uses the PATCH /api/users/:userId/roles endpoint.
+   * Supports email-based auth middleware via the x-camunda-email header.
+   */
+  static async updateUserRole(params) {
+    const serviceContext = {
+      method: {
+        name: `UsersService.updateUserRole`,
+        url: `api/users/${encodeURIComponent(params.params.userId)}/roles`,
+        normalizedUrl: `api/users/:userId/roles`,
+        type: "patch"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: {
+        name: "accounts",
+        type: "internal"
+      }
+    };
+    UsersService.validateUserId(serviceContext, params.params.userId);
+    if (!params.params.roleToAdd && !params.params.roleToRemove) {
+      throw new HttpError(
+        `${serviceContext.method.name}: 400 - Validation Error in API Package - either roleToAdd or roleToRemove must be specified`,
+        400,
+        `Validation Error in API Package - either roleToAdd or roleToRemove must be specified`
+      );
+    }
+    const body = {};
+    if (params.params.roleToAdd) {
+      body.roleToAdd = params.params.roleToAdd;
+    }
+    if (params.params.roleToRemove) {
+      body.roleToRemove = params.params.roleToRemove;
+    }
+    const response = await request({
+      config: params.config,
+      base: { id: "accounts" },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext,
+      body,
+      headers: params.headers,
+      responseType: "none"
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+  }
+  /**
+   * Get all Hibob users (for bulk ghost account checks).
+   * This fetches all active Hibob employees in a single request.
+   */
+  static async getAllHibobUsers(params) {
+    const serviceContext = {
+      method: {
+        name: "UsersService.getAllHibobUsers",
+        url: "api/users/hibob/all",
+        normalizedUrl: "api/users/hibob/all",
+        type: "get"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: {
+        name: "accounts",
+        type: "internal"
+      }
+    };
+    const response = await request({
+      ...params,
+      base: { id: "accounts" },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    return response.body;
+  }
+  /**
+   * Get Hibob details for a specific user by their Auth0 user ID.
+   */
+  static async getUserHibobDetails(params) {
+    const serviceContext = {
+      method: {
+        name: "UsersService.getUserHibobDetails",
+        url: `api/users/${encodeURIComponent(params.userId)}/hibob`,
+        normalizedUrl: "api/users/:userId/hibob",
+        type: "get"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: {
+        name: "accounts",
+        type: "internal"
+      }
+    };
+    const response = await request({
+      ...params,
+      base: { id: "accounts" },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    return response.body;
+  }
+  static validateUserId(serviceContext, userId) {
+    if (!userId || !userId.includes("|")) {
+      throw new HttpError(
+        `${serviceContext.method.name}: 400 - Validation Error in API Package - missing pipe '|'`,
+        400,
+        `Validation Error in API Package - missing pipe '|'`
+      );
+    }
+  }
+  static validateEmail(serviceContext, email) {
+    if (!email || !REGEX_EMAIL.test(email)) {
+      throw new HttpError(
+        `${serviceContext.method.name}: 400 - Validation Error in API Package - invalid email format`,
+        400,
+        `Validation Error in API Package - invalid email format`
+      );
+    }
+  }
+  /**
+   * Validates a Lucene query string for Auth0 user search.
+   * Auth0 supports Lucene query syntax including:
+   * - Field queries: field:value (e.g., email:john@example.com)
+   * - Wildcards: field:*value*, field:value*
+   * - Boolean operators: AND, OR, NOT
+   * - Grouping: (field:value OR field:value)
+   * - Range queries: field:[min TO max]
+   * - Exact phrase: field:"exact phrase"
+   *
+   * @see https://auth0.com/docs/manage-users/user-search/user-search-query-syntax
+   */
+  static validateLuceneQuery(serviceContext, query) {
+    if (!query || query.trim().length === 0) {
+      throw new HttpError(
+        `${serviceContext.method.name}: 400 - Validation Error in API Package - empty Lucene query`,
+        400,
+        `Validation Error in API Package - empty Lucene query`
+      );
+    }
+    const trimmedQuery = query.trim();
+    let parenCount = 0;
+    for (const char of trimmedQuery) {
+      if (char === "(") parenCount++;
+      if (char === ")") parenCount--;
+      if (parenCount < 0) {
+        throw new HttpError(
+          `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced parentheses in Lucene query`,
+          400,
+          `Validation Error in API Package - unbalanced parentheses in Lucene query`
+        );
+      }
+    }
+    if (parenCount !== 0) {
+      throw new HttpError(
+        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced parentheses in Lucene query`,
+        400,
+        `Validation Error in API Package - unbalanced parentheses in Lucene query`
+      );
+    }
+    let bracketCount = 0;
+    for (const char of trimmedQuery) {
+      if (char === "[") bracketCount++;
+      if (char === "]") bracketCount--;
+      if (bracketCount < 0) {
+        throw new HttpError(
+          `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced brackets in Lucene query`,
+          400,
+          `Validation Error in API Package - unbalanced brackets in Lucene query`
+        );
+      }
+    }
+    if (bracketCount !== 0) {
+      throw new HttpError(
+        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced brackets in Lucene query`,
+        400,
+        `Validation Error in API Package - unbalanced brackets in Lucene query`
+      );
+    }
+    const quoteCount = (trimmedQuery.match(/"/gu) || []).length;
+    if (quoteCount % 2 !== 0) {
+      throw new HttpError(
+        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced quotes in Lucene query`,
+        400,
+        `Validation Error in API Package - unbalanced quotes in Lucene query`
+      );
+    }
+    const hasFieldValue = /\b\w+:/u.test(trimmedQuery);
+    if (!hasFieldValue) {
+      throw new HttpError(
+        `${serviceContext.method.name}: 400 - Validation Error in API Package - Lucene query must contain field:value syntax (e.g., email:john@example.com)`,
+        400,
+        `Validation Error in API Package - Lucene query must contain field:value syntax (e.g., email:john@example.com)`
+      );
+    }
+  }
+}
+export {
+  UsersService
+};
+//# sourceMappingURL=users.service.js.map

package/dist/services/accounts/users.service.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/services/accounts/users.service.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport {\n  MINUTE,\n  type OrganizationRole,\n  type User,\n} from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { Cache } from '../../utils/cache.js'\nimport { HttpError } from '../../utils/errors.js'\nimport type { HibobSearchResponse } from '../hibob/hibob.service.js'\n\nconst userCache = new Cache<string, User>(5 * MINUTE)\nconst REGEX_EMAIL =\n  // eslint-disable-next-line prefer-named-capture-group, no-useless-escape\n  /^(([^<>()[\\]\\\\.,;:\\s@\"]+(\\.[^<>()[\\]\\\\.,;:\\s@\"]+)*)|(\".+\"))@((\\[[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\])|(([a-zA-Z\\-0-9]+\\.)+[a-zA-Z]{2,}))$/u\n\nexport interface SearchParams extends RequestBaseParams {\n  params: {\n    q: {\n      organization?: {\n        uuid: string\n        member: boolean\n      }\n      name?: string\n      userId?: string\n      roleId?: string\n      email?: string\n      signUpStatus?: {\n        verified: boolean\n        tokenExpired?: boolean\n      }\n      created?: {\n        after?: Date\n        before?: Date\n      }\n    }\n    onBehalfOf?: string\n  }\n}\n\nexport interface SimpleSearchParams extends RequestBaseParams {\n  params: {\n    query: string\n    type: 'by-email' | 'by-id' | 'fuzzy' | 'lucene'\n  }\n}\n\nexport interface AddUserToOrganizationRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    orgId: string\n    orgRoles: OrganizationRole[]\n    byEmail?: boolean\n  }\n}\n\nexport interface RemoveUserFromOrganizationRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    orgId: string\n    byEmail?: boolean\n  }\n}\n\nexport interface UpdateUserRoleRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    roleToAdd?: string\n    roleToRemove?: string\n  }\n  headers?: {\n    'x-camunda-email'?: string\n  }\n}\n\nexport class UsersService {\n  public static async search(params: SearchParams): Promise<User[]> {\n    const queryParams = new URLSearchParams()\n    const urlParts: string[] = []\n    if (params.params.q.roleId) {\n      // API route different if roleId is present\n      // eslint-disable-next-line id-length\n      const q = {\n        roleId: params.params.q.roleId,\n        name: params.params.q.name || '',\n        email: params.params.q.email || '',\n      }\n      queryParams.append('q', JSON.stringify(q))\n      urlParts.push(...['api', 'users', `?${queryParams.toString()}`])\n    } else {\n      if (params.params.onBehalfOf) {\n        queryParams.append(\n          'onBehalfOf',\n          encodeURI(JSON.stringify(params.params.onBehalfOf)),\n        )\n      }\n      queryParams.append('q', encodeURI(JSON.stringify(params.params.q)))\n      urlParts.push(...['api', 'users', 'search', `?${queryParams.toString()}`])\n    }\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.search`,\n        url: urlParts.join(`/`),\n        normalizedUrl: `api/users/search`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    // Validation\n    if (params.params.q.userId) {\n      UsersService.validateUserId(serviceContext, params.params.q.userId)\n    }\n\n    const response = await request<User[]>({\n      config: params.config,\n      base: {\n        id: 'accounts',\n      },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  public static async simpleSearch(\n    params: SimpleSearchParams,\n  ): Promise<{ users: User[] }> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.simpleSearch`,\n        url: `api/users/search`,\n        normalizedUrl: `api/users/search`,\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    switch (params.params.type) {\n      case 'by-email':\n        UsersService.validateEmail(serviceContext, params.params.query)\n        break\n      case 'by-id':\n        UsersService.validateUserId(serviceContext, params.params.query)\n        break\n      case 'lucene':\n        UsersService.validateLuceneQuery(serviceContext, params.params.query)\n        break\n    }\n\n    const response = await request<{ users: User[] }>({\n      config: params.config,\n      base: {\n        id: 'accounts',\n      },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      body: {\n        query: params.params.query,\n        type: params.params.type,\n      },\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  public static async getUserInfo(\n    params: { userId: string; basic?: boolean } & RequestBaseParams,\n  ): Promise<User | undefined> {\n    const cacheKey =\n      params.basic === true ? `basic-${params.userId}` : params.userId\n    if (!params.cacheControl?.ignoreCache) {\n      const inCache = userCache.get(cacheKey)\n      if (inCache) {\n        return inCache\n      }\n    }\n\n    let queryParams: string = ''\n    if (params.basic === true) {\n      const searchParams = new URLSearchParams()\n      searchParams.append('basic', 'true')\n      queryParams = `?${searchParams.toString()}`\n    }\n\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.getUserInfo`,\n        url: `api/users/${params.userId}${queryParams}`,\n        normalizedUrl: `api/users/:userId`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    // Validation\n    UsersService.validateUserId(serviceContext, params.userId)\n\n    const response = await request<User>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    userCache.set(cacheKey, response.body!)\n    return response.body\n  }\n\n  public static async addUserToOrganization(\n    params: AddUserToOrganizationRequest,\n  ) {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.addUserToOrganization`,\n        url: `api/users/${params.params.userId}/organization/${params.params.orgId}`,\n        normalizedUrl: `api/users/:userId/organization/:orgId`,\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: {\n        orgRoles: params.params.orgRoles,\n        byEmail: params.params.byEmail,\n      },\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async removeUserFromOrganization(\n    params: RemoveUserFromOrganizationRequest,\n  ) {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.removeUserFromOrganization`,\n        url: `api/users/${params.params.userId}/organization/${params.params.orgId}`,\n        normalizedUrl: `api/users/:userId/organization/:orgId`,\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: {\n        byEmail: params.params.byEmail,\n      },\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Update a user's role by adding or removing a single role.\n   * This uses the PATCH /api/users/:userId/roles endpoint.\n   * Supports email-based auth middleware via the x-camunda-email header.\n   */\n  public static async updateUserRole(\n    params: UpdateUserRoleRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.updateUserRole`,\n        url: `api/users/${encodeURIComponent(params.params.userId)}/roles`,\n        normalizedUrl: `api/users/:userId/roles`,\n        type: 'patch',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    // Validation\n    UsersService.validateUserId(serviceContext, params.params.userId)\n\n    if (!params.params.roleToAdd && !params.params.roleToRemove) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - either roleToAdd or roleToRemove must be specified`,\n        400,\n        `Validation Error in API Package - either roleToAdd or roleToRemove must be specified`,\n      )\n    }\n\n    const body: { roleToAdd?: string; roleToRemove?: string } = {}\n    if (params.params.roleToAdd) {\n      body.roleToAdd = params.params.roleToAdd\n    }\n    if (params.params.roleToRemove) {\n      body.roleToRemove = params.params.roleToRemove\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body,\n      headers: params.headers,\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Get all Hibob users (for bulk ghost account checks).\n   * This fetches all active Hibob employees in a single request.\n   */\n  public static async getAllHibobUsers(\n    params: RequestBaseParams,\n  ): Promise<HibobSearchResponse> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.getAllHibobUsers',\n        url: 'api/users/hibob/all',\n        normalizedUrl: 'api/users/hibob/all',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request<HibobSearchResponse>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n\n    return response.body!\n  }\n\n  /**\n   * Get Hibob details for a specific user by their Auth0 user ID.\n   */\n  public static async getUserHibobDetails(\n    params: { userId: string } & RequestBaseParams,\n  ): Promise<HibobSearchResponse> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.getUserHibobDetails',\n        url: `api/users/${encodeURIComponent(params.userId)}/hibob`,\n        normalizedUrl: 'api/users/:userId/hibob',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request<HibobSearchResponse>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n\n    return response.body!\n  }\n\n  private static validateUserId(\n    serviceContext: RequestBaseServiceContext,\n    userId: string,\n  ) {\n    if (!userId || !userId.includes('|')) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - missing pipe '|'`,\n        400,\n        `Validation Error in API Package - missing pipe '|'`,\n      )\n    }\n  }\n\n  private static validateEmail(\n    serviceContext: RequestBaseServiceContext,\n    email: string,\n  ) {\n    if (!email || !REGEX_EMAIL.test(email)) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - invalid email format`,\n        400,\n        `Validation Error in API Package - invalid email format`,\n      )\n    }\n  }\n\n  /**\n   * Validates a Lucene query string for Auth0 user search.\n   * Auth0 supports Lucene query syntax including:\n   * - Field queries: field:value (e.g., email:john@example.com)\n   * - Wildcards: field:*value*, field:value*\n   * - Boolean operators: AND, OR, NOT\n   * - Grouping: (field:value OR field:value)\n   * - Range queries: field:[min TO max]\n   * - Exact phrase: field:\"exact phrase\"\n   *\n   * @see https://auth0.com/docs/manage-users/user-search/user-search-query-syntax\n   */\n  private static validateLuceneQuery(\n    serviceContext: RequestBaseServiceContext,\n    query: string,\n  ) {\n    if (!query || query.trim().length === 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - empty Lucene query`,\n        400,\n        `Validation Error in API Package - empty Lucene query`,\n      )\n    }\n\n    // Basic validation: query should contain at least a field:value pattern or be a valid search term\n    // Auth0 Lucene syntax requires queries to have field:value format for structured searches\n    const trimmedQuery = query.trim()\n\n    // Check for unbalanced parentheses\n    let parenCount = 0\n    for (const char of trimmedQuery) {\n      if (char === '(') parenCount++\n      if (char === ')') parenCount--\n      if (parenCount < 0) {\n        throw new HttpError(\n          `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced parentheses in Lucene query`,\n          400,\n          `Validation Error in API Package - unbalanced parentheses in Lucene query`,\n        )\n      }\n    }\n    if (parenCount !== 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced parentheses in Lucene query`,\n        400,\n        `Validation Error in API Package - unbalanced parentheses in Lucene query`,\n      )\n    }\n\n    // Check for unbalanced square brackets (range queries)\n    let bracketCount = 0\n    for (const char of trimmedQuery) {\n      if (char === '[') bracketCount++\n      if (char === ']') bracketCount--\n      if (bracketCount < 0) {\n        throw new HttpError(\n          `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced brackets in Lucene query`,\n          400,\n          `Validation Error in API Package - unbalanced brackets in Lucene query`,\n        )\n      }\n    }\n    if (bracketCount !== 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced brackets in Lucene query`,\n        400,\n        `Validation Error in API Package - unbalanced brackets in Lucene query`,\n      )\n    }\n\n    // Check for unbalanced quotes\n    const quoteCount = (trimmedQuery.match(/\"/gu) || []).length\n    if (quoteCount % 2 !== 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced quotes in Lucene query`,\n        400,\n        `Validation Error in API Package - unbalanced quotes in Lucene query`,\n      )\n    }\n\n    // Validate that query contains at least one valid field:value pattern or search term\n    // A valid Lucene query for Auth0 should have field:value syntax\n    // Use word boundary to match field:value patterns anywhere in the query\n    const hasFieldValue = /\\b\\w+:/u.test(trimmedQuery)\n    if (!hasFieldValue) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - Lucene query must contain field:value syntax (e.g., email:john@example.com)`,\n        400,\n        `Validation Error in API Package - Lucene query must contain field:value syntax (e.g., email:john@example.com)`,\n      )\n    }\n  }\n}\n"],
+  "mappings": "AAMA;AAAA,EACE;AAAA,OAGK;AAKP,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAG1B,MAAM,YAAY,IAAI,MAAoB,IAAI,MAAM;AACpD,MAAM;AAAA;AAAA,EAEJ;AAAA;AA6DK,MAAM,aAAa;AAAA,EACxB,aAAoB,OAAO,QAAuC;AAChE,UAAM,cAAc,IAAI,gBAAgB;AACxC,UAAM,WAAqB,CAAC;AAC5B,QAAI,OAAO,OAAO,EAAE,QAAQ;AAG1B,YAAM,IAAI;AAAA,QACR,QAAQ,OAAO,OAAO,EAAE;AAAA,QACxB,MAAM,OAAO,OAAO,EAAE,QAAQ;AAAA,QAC9B,OAAO,OAAO,OAAO,EAAE,SAAS;AAAA,MAClC;AACA,kBAAY,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC;AACzC,eAAS,KAAK,GAAG,CAAC,OAAO,SAAS,IAAI,YAAY,SAAS,CAAC,EAAE,CAAC;AAAA,IACjE,OAAO;AACL,UAAI,OAAO,OAAO,YAAY;AAC5B,oBAAY;AAAA,UACV;AAAA,UACA,UAAU,KAAK,UAAU,OAAO,OAAO,UAAU,CAAC;AAAA,QACpD;AAAA,MACF;AACA,kBAAY,OAAO,KAAK,UAAU,KAAK,UAAU,OAAO,OAAO,CAAC,CAAC,CAAC;AAClE,eAAS,KAAK,GAAG,CAAC,OAAO,SAAS,UAAU,IAAI,YAAY,SAAS,CAAC,EAAE,CAAC;AAAA,IAC3E;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,SAAS,KAAK,GAAG;AAAA,QACtB,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAGA,QAAI,OAAO,OAAO,EAAE,QAAQ;AAC1B,mBAAa,eAAe,gBAAgB,OAAO,OAAO,EAAE,MAAM;AAAA,IACpE;AAEA,UAAM,WAAW,MAAM,QAAgB;AAAA,MACrC,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,QACJ,IAAI;AAAA,MACN;AAAA,MACA,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,aAClB,QAC4B;AAC5B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,YAAQ,OAAO,OAAO,MAAM;AAAA,MAC1B,KAAK;AACH,qBAAa,cAAc,gBAAgB,OAAO,OAAO,KAAK;AAC9D;AAAA,MACF,KAAK;AACH,qBAAa,eAAe,gBAAgB,OAAO,OAAO,KAAK;AAC/D;AAAA,MACF,KAAK;AACH,qBAAa,oBAAoB,gBAAgB,OAAO,OAAO,KAAK;AACpE;AAAA,IACJ;AAEA,UAAM,WAAW,MAAM,QAA2B;AAAA,MAChD,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,QACJ,IAAI;AAAA,MACN;AAAA,MACA,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,MAAM;AAAA,QACJ,OAAO,OAAO,OAAO;AAAA,QACrB,MAAM,OAAO,OAAO;AAAA,MACtB;AAAA,MACA,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,YAClB,QAC2B;AAC3B,UAAM,WACJ,OAAO,UAAU,OAAO,SAAS,OAAO,MAAM,KAAK,OAAO;AAC5D,QAAI,CAAC,OAAO,cAAc,aAAa;AACrC,YAAM,UAAU,UAAU,IAAI,QAAQ;AACtC,UAAI,SAAS;AACX,eAAO;AAAA,MACT;AAAA,IACF;AAEA,QAAI,cAAsB;AAC1B,QAAI,OAAO,UAAU,MAAM;AACzB,YAAM,eAAe,IAAI,gBAAgB;AACzC,mBAAa,OAAO,SAAS,MAAM;AACnC,oBAAc,IAAI,aAAa,SAAS,CAAC;AAAA,IAC3C;AAEA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,OAAO,MAAM,GAAG,WAAW;AAAA,QAC7C,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAGA,iBAAa,eAAe,gBAAgB,OAAO,MAAM;AAEzD,UAAM,WAAW,MAAM,QAAc;AAAA,MACnC,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,cAAU,IAAI,UAAU,SAAS,IAAK;AACtC,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,sBAClB,QACA;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,OAAO,OAAO,MAAM,iBAAiB,OAAO,OAAO,KAAK;AAAA,QAC1E,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,UAAU,OAAO,OAAO;AAAA,QACxB,SAAS,OAAO,OAAO;AAAA,MACzB;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,2BAClB,QACA;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,OAAO,OAAO,MAAM,iBAAiB,OAAO,OAAO,KAAK;AAAA,QAC1E,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,SAAS,OAAO,OAAO;AAAA,MACzB;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,eAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAGA,iBAAa,eAAe,gBAAgB,OAAO,OAAO,MAAM;AAEhE,QAAI,CAAC,OAAO,OAAO,aAAa,CAAC,OAAO,OAAO,cAAc;AAC3D,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAsD,CAAC;AAC7D,QAAI,OAAO,OAAO,WAAW;AAC3B,WAAK,YAAY,OAAO,OAAO;AAAA,IACjC;AACA,QAAI,OAAO,OAAO,cAAc;AAC9B,WAAK,eAAe,OAAO,OAAO;AAAA,IACpC;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB;AAAA,MACA,SAAS,OAAO;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,iBAClB,QAC8B;AAC9B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAA6B;AAAA,MAClD,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAoB,oBAClB,QAC8B;AAC9B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,MAAM,CAAC;AAAA,QACnD,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAA6B;AAAA,MAClD,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,OAAe,eACb,gBACA,QACA;AACA,QAAI,CAAC,UAAU,CAAC,OAAO,SAAS,GAAG,GAAG;AACpC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAe,cACb,gBACA,OACA;AACA,QAAI,CAAC,SAAS,CAAC,YAAY,KAAK,KAAK,GAAG;AACtC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,OAAe,oBACb,gBACA,OACA;AACA,QAAI,CAAC,SAAS,MAAM,KAAK,EAAE,WAAW,GAAG;AACvC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAIA,UAAM,eAAe,MAAM,KAAK;AAGhC,QAAI,aAAa;AACjB,eAAW,QAAQ,cAAc;AAC/B,UAAI,SAAS,IAAK;AAClB,UAAI,SAAS,IAAK;AAClB,UAAI,aAAa,GAAG;AAClB,cAAM,IAAI;AAAA,UACR,GAAG,eAAe,OAAO,IAAI;AAAA,UAC7B;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,eAAe,GAAG;AACpB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAGA,QAAI,eAAe;AACnB,eAAW,QAAQ,cAAc;AAC/B,UAAI,SAAS,IAAK;AAClB,UAAI,SAAS,IAAK;AAClB,UAAI,eAAe,GAAG;AACpB,cAAM,IAAI;AAAA,UACR,GAAG,eAAe,OAAO,IAAI;AAAA,UAC7B;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,iBAAiB,GAAG;AACtB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAGA,UAAM,cAAc,aAAa,MAAM,KAAK,KAAK,CAAC,GAAG;AACrD,QAAI,aAAa,MAAM,GAAG;AACxB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAKA,UAAM,gBAAgB,UAAU,KAAK,YAAY;AACjD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/services/alerts/alerts.service.d.ts

@@ -0,0 +1,59 @@
+import type { AlertSubscriptionDto, AlertSubscriptionEntryDto, AlertSubscriptionReportType, AlertSubscriptionType, AlertSubscriptionWebhookAuth } from '@camunda/ccma-shared-types';
+import type { RequestBaseParams } from '../../types/general.types.js';
+export interface GetAlertSubscriptions extends RequestBaseParams {
+    params: {
+        clusterUuid: string;
+    };
+}
+export interface CreateAlertSubscription extends RequestBaseParams {
+    params: {
+        creator: string;
+        clusterUuid: string;
+        userIdOrWebhook: string;
+        type: AlertSubscriptionType;
+        report: AlertSubscriptionReportType;
+        options?: {
+            webhookAuth?: AlertSubscriptionWebhookAuth;
+            ignoreHead?: boolean;
+        };
+    };
+}
+export interface UpdateAlertSubscription extends RequestBaseParams {
+    params: {
+        alertSubscriptionUuid: string;
+        updater: string;
+        clusterUuid: string;
+        userIdOrWebhook: string;
+        type: AlertSubscriptionType;
+        report: AlertSubscriptionReportType;
+        options?: {
+            webhookAuth?: AlertSubscriptionWebhookAuth;
+            ignoreHead?: boolean;
+        };
+    };
+}
+export interface DeleteAlertSubscription extends RequestBaseParams {
+    params: {
+        alertSubscriptionUuid: string;
+    };
+}
+export interface DeleteAlertSubscriptionForCluster extends RequestBaseParams {
+    params: {
+        clusterUuid: string;
+    };
+}
+export interface PushAlert extends RequestBaseParams {
+    params: {
+        clusterUuid: string;
+        alerts: AlertSubscriptionEntryDto[];
+    };
+}
+export declare class AlertsService {
+    static getSubscriptions(params: GetAlertSubscriptions): Promise<AlertSubscriptionDto[]>;
+    static createNewSubscription(params: CreateAlertSubscription): Promise<AlertSubscriptionDto>;
+    static update(params: UpdateAlertSubscription): Promise<AlertSubscriptionDto>;
+    static delete(params: DeleteAlertSubscription): Promise<AlertSubscriptionDto>;
+    static deleteForCluster(params: DeleteAlertSubscriptionForCluster): Promise<AlertSubscriptionDto>;
+    static pushWorkflowAlerts(params: PushAlert): Promise<void>;
+    static pushClusterAlerts(params: PushAlert): Promise<void>;
+}