@camunda/ccma-api 0.5.0 → 0.5.2

package/dist/services/accounts/trial-management.service.js

@@ -0,0 +1,101 @@
+import { request } from "../../utils/api.js";
+import { HttpError } from "../../utils/errors.js";
+class TrialManagementService {
+  static async get(params) {
+    const url = params.params.refresh ? `api/admin/trial-management?refresh=true` : `api/admin/trial-management`;
+    const serviceContext = {
+      method: {
+        name: `TrialManagementService.get`,
+        url,
+        normalizedUrl: `api/admin/trial-management`,
+        type: "get"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: { name: "accounts", type: "internal" }
+    };
+    const response = await request({
+      ...params,
+      base: { id: "accounts" },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    return response.body;
+  }
+  static async getOrgDetail(params) {
+    const serviceContext = {
+      method: {
+        name: `TrialManagementService.getOrgDetail`,
+        url: `api/admin/trial-management/orgs/${encodeURIComponent(params.params.orgId)}`,
+        normalizedUrl: `api/admin/trial-management/orgs/:orgId`,
+        type: "get"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: { name: "accounts", type: "internal" }
+    };
+    const response = await request({
+      ...params,
+      base: { id: "accounts" },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    return response.body;
+  }
+  static async getOrgs(params) {
+    const queryParams = new URLSearchParams({
+      page: String(params.params.page),
+      pageSize: String(params.params.pageSize)
+    });
+    for (const filter of params.params.surveyAnswers ?? []) {
+      queryParams.append(
+        "surveyAnswers",
+        `${filter.questionId}:${filter.value}`
+      );
+    }
+    const url = `api/admin/trial-management/orgs?${queryParams.toString()}`;
+    const serviceContext = {
+      method: {
+        name: `TrialManagementService.getOrgs`,
+        url,
+        normalizedUrl: `api/admin/trial-management/orgs`,
+        type: "get"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: { name: "accounts", type: "internal" }
+    };
+    const response = await request({
+      ...params,
+      base: { id: "accounts" },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    return response.body;
+  }
+}
+export {
+  TrialManagementService
+};
+//# sourceMappingURL=trial-management.service.js.map

package/dist/services/accounts/trial-management.service.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/services/accounts/trial-management.service.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  ExtensionListResponse,\n  OrgTrialDetail,\n  TrialManagementStats,\n} from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\n\nexport interface GetTrialManagementParams extends RequestBaseParams {\n  params: {\n    refresh?: boolean\n  }\n}\n\nexport interface GetOrgTrialDetailParams extends RequestBaseParams {\n  params: {\n    orgId: string\n  }\n}\n\nexport interface GetTrialManagementOrgsParams extends RequestBaseParams {\n  params: {\n    page: number\n    pageSize: number\n    surveyAnswers?: Array<{ questionId: string; value: string }>\n  }\n}\n\nexport class TrialManagementService {\n  public static async get(\n    params: GetTrialManagementParams,\n  ): Promise<TrialManagementStats> {\n    const url = params.params.refresh\n      ? `api/admin/trial-management?refresh=true`\n      : `api/admin/trial-management`\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `TrialManagementService.get`,\n        url,\n        normalizedUrl: `api/admin/trial-management`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request<TrialManagementStats>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  public static async getOrgDetail(\n    params: GetOrgTrialDetailParams,\n  ): Promise<OrgTrialDetail> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `TrialManagementService.getOrgDetail`,\n        url: `api/admin/trial-management/orgs/${encodeURIComponent(params.params.orgId)}`,\n        normalizedUrl: `api/admin/trial-management/orgs/:orgId`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request<OrgTrialDetail>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  public static async getOrgs(\n    params: GetTrialManagementOrgsParams,\n  ): Promise<ExtensionListResponse> {\n    const queryParams = new URLSearchParams({\n      page: String(params.params.page),\n      pageSize: String(params.params.pageSize),\n    })\n    for (const filter of params.params.surveyAnswers ?? []) {\n      queryParams.append(\n        'surveyAnswers',\n        `${filter.questionId}:${filter.value}`,\n      )\n    }\n    const url = `api/admin/trial-management/orgs?${queryParams.toString()}`\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `TrialManagementService.getOrgs`,\n        url,\n        normalizedUrl: `api/admin/trial-management/orgs`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request<ExtensionListResponse>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n}\n"],
+  "mappings": "AAeA,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAsBnB,MAAM,uBAAuB;AAAA,EAClC,aAAoB,IAClB,QAC+B;AAC/B,UAAM,MAAM,OAAO,OAAO,UACtB,4CACA;AACJ,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN;AAAA,QACA,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAA8B;AAAA,MACnD,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,aAClB,QACyB;AACzB,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,mCAAmC,mBAAmB,OAAO,OAAO,KAAK,CAAC;AAAA,QAC/E,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAwB;AAAA,MAC7C,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,QAClB,QACgC;AAChC,UAAM,cAAc,IAAI,gBAAgB;AAAA,MACtC,MAAM,OAAO,OAAO,OAAO,IAAI;AAAA,MAC/B,UAAU,OAAO,OAAO,OAAO,QAAQ;AAAA,IACzC,CAAC;AACD,eAAW,UAAU,OAAO,OAAO,iBAAiB,CAAC,GAAG;AACtD,kBAAY;AAAA,QACV;AAAA,QACA,GAAG,OAAO,UAAU,IAAI,OAAO,KAAK;AAAA,MACtC;AAAA,IACF;AACA,UAAM,MAAM,mCAAmC,YAAY,SAAS,CAAC;AACrE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN;AAAA,QACA,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAA+B;AAAA,MACpD,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AACF;",
+  "names": []
+}

package/dist/services/audit-logger/audit-logger.service.js

@@ -22,7 +22,16 @@ class AuditLoggerService {
       method: serviceContext.method.type,
       metricsDetails: serviceContext,
       body: params.params,
-      responseType: "none"
+      responseType: "none",
+      // AuditController.add is fire-and-forget: it logs the failure and
+      // returns, so a dropped connection silently loses a long-retention
+      // record. The observed loss was 11 audits inside 19ms — one
+      // connection-pool/envoy hangup during a pod restart, not an outage —
+      // which this retry absorbs entirely. Safe enough to retry deliberately:
+      // `Audit` has no idempotency key, so a request that landed but whose
+      // response was lost can produce a duplicate row. A duplicate audit entry
+      // is visible and harmless; a missing one is a gap in the trail.
+      retryTransientErrors: true
     });
     if (!response.ok) {
       throw new HttpError(

package/dist/services/audit-logger/audit-logger.service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/services/audit-logger/audit-logger.service.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { AuditDto } from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\n\nexport interface AddAuditRequest extends RequestBaseParams {\n  params: {\n    audit: AuditDto\n  }\n}\n\nexport interface GetAuditRequest extends RequestBaseParams {\n  params: {\n    orgId: string\n    pagination?: {\n      page: number\n      perPage: number\n    }\n    publicOnly?: boolean\n  }\n}\n\nexport interface GetClusterAuditRequest extends RequestBaseParams {\n  params: {\n    orgId: string\n    clusterId: string\n  }\n}\n\nexport class AuditLoggerService {\n  public static async addAudit(params: AddAuditRequest): Promise<boolean> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `AuditLoggerService.addAudit`,\n        url: `api/audit/orgs`,\n        normalizedUrl: `api/audit/orgs`,\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'audit-logger',\n        type: 'internal',\n      },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'audit-logger' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: params.params,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.status === 200\n  }\n\n  public static async getAudit(params: GetAuditRequest): Promise<AuditDto[]> {\n    let url = `api/audit/orgs/${params.params.orgId}`\n    const queryParams: string[] = []\n    if (params.params.pagination) {\n      queryParams.push(\n        `per_page=${params.params.pagination.perPage}&page=${params.params.pagination.page}`,\n      )\n    }\n    if (params.params.publicOnly) {\n      queryParams.push(`public_only=true`)\n    }\n    if (queryParams.length > 0) {\n      url = url.concat(`?${queryParams.join('&')}`)\n    }\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `AuditLoggerService.getAudit`,\n        url,\n        normalizedUrl: url,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'audit-logger',\n        type: 'internal',\n      },\n    }\n    const response = await request({\n      ...params,\n      base: { id: 'audit-logger' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body as AuditDto[]\n  }\n\n  public static async getClusterAudit(\n    params: GetClusterAuditRequest,\n  ): Promise<AuditDto[]> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `AuditLoggerService.getClusterAudit`,\n        url: `api/audit/orgs/${params.params.orgId}/cluster/${params.params.clusterId}`,\n        normalizedUrl: `api/audit/orgs/:orgId/cluster/:clusterId`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'audit-logger',\n        type: 'internal',\n      },\n    }\n\n    const response = await request<AuditDto[]>({\n      ...params,\n      base: { id: 'audit-logger' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n\n    return response.body ?? []\n  }\n}\n"],
-  "mappings": "AAWA,SAAS,eAAe;AACxB,SAAS,iBAAiB;AA0BnB,MAAM,mBAAmB;AAAA,EAC9B,aAAoB,SAAS,QAA2C;AACtE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,eAAe;AAAA,MAC3B,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,WAAW;AAAA,EAC7B;AAAA,EAEA,aAAoB,SAAS,QAA8C;AACzE,QAAI,MAAM,kBAAkB,OAAO,OAAO,KAAK;AAC/C,UAAM,cAAwB,CAAC;AAC/B,QAAI,OAAO,OAAO,YAAY;AAC5B,kBAAY;AAAA,QACV,YAAY,OAAO,OAAO,WAAW,OAAO,SAAS,OAAO,OAAO,WAAW,IAAI;AAAA,MACpF;AAAA,IACF;AACA,QAAI,OAAO,OAAO,YAAY;AAC5B,kBAAY,KAAK,kBAAkB;AAAA,IACrC;AACA,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,IAAI,OAAO,IAAI,YAAY,KAAK,GAAG,CAAC,EAAE;AAAA,IAC9C;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN;AAAA,QACA,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,eAAe;AAAA,MAC3B,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,gBAClB,QACqB;AACrB,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,kBAAkB,OAAO,OAAO,KAAK,YAAY,OAAO,OAAO,SAAS;AAAA,QAC7E,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAoB;AAAA,MACzC,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,eAAe;AAAA,MAC3B,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC3B;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { AuditDto } from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\n\nexport interface AddAuditRequest extends RequestBaseParams {\n  params: {\n    audit: AuditDto\n  }\n}\n\nexport interface GetAuditRequest extends RequestBaseParams {\n  params: {\n    orgId: string\n    pagination?: {\n      page: number\n      perPage: number\n    }\n    publicOnly?: boolean\n  }\n}\n\nexport interface GetClusterAuditRequest extends RequestBaseParams {\n  params: {\n    orgId: string\n    clusterId: string\n  }\n}\n\nexport class AuditLoggerService {\n  public static async addAudit(params: AddAuditRequest): Promise<boolean> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `AuditLoggerService.addAudit`,\n        url: `api/audit/orgs`,\n        normalizedUrl: `api/audit/orgs`,\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'audit-logger',\n        type: 'internal',\n      },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'audit-logger' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: params.params,\n      responseType: 'none',\n      // AuditController.add is fire-and-forget: it logs the failure and\n      // returns, so a dropped connection silently loses a long-retention\n      // record. The observed loss was 11 audits inside 19ms \u2014 one\n      // connection-pool/envoy hangup during a pod restart, not an outage \u2014\n      // which this retry absorbs entirely. Safe enough to retry deliberately:\n      // `Audit` has no idempotency key, so a request that landed but whose\n      // response was lost can produce a duplicate row. A duplicate audit entry\n      // is visible and harmless; a missing one is a gap in the trail.\n      retryTransientErrors: true,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.status === 200\n  }\n\n  public static async getAudit(params: GetAuditRequest): Promise<AuditDto[]> {\n    let url = `api/audit/orgs/${params.params.orgId}`\n    const queryParams: string[] = []\n    if (params.params.pagination) {\n      queryParams.push(\n        `per_page=${params.params.pagination.perPage}&page=${params.params.pagination.page}`,\n      )\n    }\n    if (params.params.publicOnly) {\n      queryParams.push(`public_only=true`)\n    }\n    if (queryParams.length > 0) {\n      url = url.concat(`?${queryParams.join('&')}`)\n    }\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `AuditLoggerService.getAudit`,\n        url,\n        normalizedUrl: url,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'audit-logger',\n        type: 'internal',\n      },\n    }\n    const response = await request({\n      ...params,\n      base: { id: 'audit-logger' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body as AuditDto[]\n  }\n\n  public static async getClusterAudit(\n    params: GetClusterAuditRequest,\n  ): Promise<AuditDto[]> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `AuditLoggerService.getClusterAudit`,\n        url: `api/audit/orgs/${params.params.orgId}/cluster/${params.params.clusterId}`,\n        normalizedUrl: `api/audit/orgs/:orgId/cluster/:clusterId`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'audit-logger',\n        type: 'internal',\n      },\n    }\n\n    const response = await request<AuditDto[]>({\n      ...params,\n      base: { id: 'audit-logger' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n\n    return response.body ?? []\n  }\n}\n"],
+  "mappings": "AAWA,SAAS,eAAe;AACxB,SAAS,iBAAiB;AA0BnB,MAAM,mBAAmB;AAAA,EAC9B,aAAoB,SAAS,QAA2C;AACtE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,eAAe;AAAA,MAC3B,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASd,sBAAsB;AAAA,IACxB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,WAAW;AAAA,EAC7B;AAAA,EAEA,aAAoB,SAAS,QAA8C;AACzE,QAAI,MAAM,kBAAkB,OAAO,OAAO,KAAK;AAC/C,UAAM,cAAwB,CAAC;AAC/B,QAAI,OAAO,OAAO,YAAY;AAC5B,kBAAY;AAAA,QACV,YAAY,OAAO,OAAO,WAAW,OAAO,SAAS,OAAO,OAAO,WAAW,IAAI;AAAA,MACpF;AAAA,IACF;AACA,QAAI,OAAO,OAAO,YAAY;AAC5B,kBAAY,KAAK,kBAAkB;AAAA,IACrC;AACA,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,IAAI,OAAO,IAAI,YAAY,KAAK,GAAG,CAAC,EAAE;AAAA,IAC9C;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN;AAAA,QACA,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,eAAe;AAAA,MAC3B,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,gBAClB,QACqB;AACrB,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,kBAAkB,OAAO,OAAO,KAAK,YAAY,OAAO,OAAO,SAAS;AAAA,QAC7E,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAoB;AAAA,MACzC,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,eAAe;AAAA,MAC3B,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC3B;AACF;",
   "names": []
 }

package/dist/services/audit-logger/audit-logger.service.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/services/auth0/auth0.service.d.ts

@@ -9,6 +9,13 @@ export interface Auth0Request extends RequestBaseParams {
         };
         body?: any;
     };
+    /**
+     * Opt-in transient retry (see `request()`). Auth0 is `external`, so it never
+     * receives our correlation headers, but a rejected fetch to it is still just
+     * a network blip — and an unretried one costs a user-visible 500. Only set it
+     * for idempotent calls; a retried POST may create twice.
+     */
+    retryTransientErrors?: boolean;
 }
 export declare class Auth0Service {
     static request(params: Auth0Request): Promise<any>;

package/dist/services/auth0/auth0.service.js

@@ -22,7 +22,8 @@ class Auth0Service {
       metricsDetails: serviceContext,
       headers: params.options.headers,
       body: params.options.body,
-      type: "json"
+      type: "json",
+      retryTransientErrors: params.retryTransientErrors
     });
     if (!response.ok) {
       throw new HttpError(

package/dist/services/auth0/auth0.service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/services/auth0/auth0.service.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  RequestBaseMethodType,\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\n\nexport interface Auth0Request extends RequestBaseParams {\n  options: {\n    url: string\n    normalizedUrl: string\n    method: RequestBaseMethodType\n    headers: { [key: string]: string }\n    body?: any\n  }\n}\n\nexport class Auth0Service {\n  public static async request(params: Auth0Request): Promise<any> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `Auth0Service.request`,\n        url: params.options.url,\n        normalizedUrl: params.options.normalizedUrl,\n        type: params.options.method,\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'auth0',\n        type: 'external',\n      },\n    }\n\n    const response = await request<any[]>({\n      config: params.config,\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      headers: params.options.headers,\n      body: params.options.body,\n      type: 'json',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n}\n"],
-  "mappings": "AAWA,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAYnB,MAAM,aAAa;AAAA,EACxB,aAAoB,QAAQ,QAAoC;AAC9D,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,OAAO,QAAQ;AAAA,QACpB,eAAe,OAAO,QAAQ;AAAA,QAC9B,MAAM,OAAO,QAAQ;AAAA,MACvB;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAe;AAAA,MACpC,QAAQ,OAAO;AAAA,MACf,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,SAAS,OAAO,QAAQ;AAAA,MACxB,MAAM,OAAO,QAAQ;AAAA,MACrB,MAAM;AAAA,IACR,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  RequestBaseMethodType,\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\n\nexport interface Auth0Request extends RequestBaseParams {\n  options: {\n    url: string\n    normalizedUrl: string\n    method: RequestBaseMethodType\n    headers: { [key: string]: string }\n    body?: any\n  }\n  /**\n   * Opt-in transient retry (see `request()`). Auth0 is `external`, so it never\n   * receives our correlation headers, but a rejected fetch to it is still just\n   * a network blip \u2014 and an unretried one costs a user-visible 500. Only set it\n   * for idempotent calls; a retried POST may create twice.\n   */\n  retryTransientErrors?: boolean\n}\n\nexport class Auth0Service {\n  public static async request(params: Auth0Request): Promise<any> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `Auth0Service.request`,\n        url: params.options.url,\n        normalizedUrl: params.options.normalizedUrl,\n        type: params.options.method,\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'auth0',\n        type: 'external',\n      },\n    }\n\n    const response = await request<any[]>({\n      config: params.config,\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      headers: params.options.headers,\n      body: params.options.body,\n      type: 'json',\n      retryTransientErrors: params.retryTransientErrors,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n}\n"],
+  "mappings": "AAWA,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAmBnB,MAAM,aAAa;AAAA,EACxB,aAAoB,QAAQ,QAAoC;AAC9D,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,OAAO,QAAQ;AAAA,QACpB,eAAe,OAAO,QAAQ;AAAA,QAC9B,MAAM,OAAO,QAAQ;AAAA,MACvB;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAe;AAAA,MACpC,QAAQ,OAAO;AAAA,MACf,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,SAAS,OAAO,QAAQ;AAAA,MACxB,MAAM,OAAO,QAAQ;AAAA,MACrB,MAAM;AAAA,MACN,sBAAsB,OAAO;AAAA,IAC/B,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AACF;",
   "names": []
 }

package/dist/services/auth0/auth0.service.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/services/console/console.admin.service.js

@@ -285,7 +285,13 @@ class ConsoleAdminService {
       headers: params.params.headers,
       url: serviceContext.method.url,
       method: serviceContext.method.type,
-      metricsDetails: serviceContext
+      metricsDetails: serviceContext,
+      // Read-only GET against console, so a replay has no side effects. Console
+      // rolling a pod answers with envoy's "upstream connect error or
+      // disconnect/reset before headers" 503, and without this opt-in that blip
+      // is reported as our failure — the same reason `OrgsService` and
+      // `NotificationsService` opt in.
+      retryTransientErrors: true
     });
     if (!response.ok) {
       throw new HttpError(
@@ -318,7 +324,12 @@ class ConsoleAdminService {
       headers: params.params.headers,
       url: serviceContext.method.url,
       method: serviceContext.method.type,
-      metricsDetails: serviceContext
+      metricsDetails: serviceContext,
+      // Same reasoning as `getClustersOfOrg` above, and it matters more here:
+      // `cron.cluster-plan-cache-refresh` is the main caller, so one envoy 503
+      // during a console rollout left the plan cache unrefreshed for a whole
+      // interval.
+      retryTransientErrors: true
     });
     if (!response.ok) {
       throw new HttpError(