@camunda/ccma-api 3.0.0 → 4.0.0

package/dist/services/control/control.approvals.service.d.ts

@@ -121,6 +121,160 @@ export interface MoveClusterOrgPayloadDto {
     /** A copy, for the same reason as `clusterName`. */
     targetOrgName?: string;
 }
+export interface ChangePlatformRolesPayloadDto {
+    userId: string;
+    /** A copy, so a list shows a person and not an Auth0 id. Nothing reads it. */
+    userEmail?: string;
+    /**
+     * A CHANGE, and never the whole set. Accounts applies it over the roles that
+     * the user holds when the action RUNS, so a role change that somebody else
+     * made while the request waited stays.
+     */
+    rolesToAdd: string[];
+    rolesToRemove: string[];
+}
+export interface ChangeOrgLimitsPayloadDto {
+    orgId: string;
+    /** A copy, so a list shows a name that a person knows. Nothing reads it. */
+    orgName?: string;
+    /** One key of `allSalesPlanLimits()`. One limit for each request. */
+    limitKey: string;
+    /**
+     * The override that the person who asked READ. Absent for "not set".
+     *
+     * Accounts compares it with the override that it holds when the action
+     * runs, and writes nothing when the two differ. See `staleApprovalKeys`.
+     */
+    expected?: string | number | boolean;
+    /** The new override. `null` clears it, and the default of the plan applies. */
+    value: string | number | boolean | null;
+}
+export interface ChangeSalesPlanPayloadDto {
+    orgId: string;
+    /** A copy, so a list shows a name that a person knows. Nothing reads it. */
+    orgName?: string;
+    salesPlanId: string;
+    /** A copy of the name of the new plan, for the approver to read. */
+    salesPlanName?: string;
+    /**
+     * The plan that the person who asked READ. Absent for "no plan".
+     *
+     * Accounts compares it with the plan that it holds when the action runs,
+     * and switches nothing when the two differ.
+     */
+    expectedSalesPlanId?: string;
+    /** A copy of the name of the current plan, for the approver to read. */
+    expectedSalesPlanName?: string;
+    /** Skips the validation of the switch. The approver sees it. */
+    force: boolean;
+}
+/** Every value of a flag row that a person can change. */
+export interface FeatureFlagValuesDto {
+    description: string;
+    enabled: boolean;
+    orgIds: string[];
+    emailDomains: string[];
+    /** The team that owns the flag. A create needs it. An older row has none. */
+    owner?: string;
+    /** `YYYY-MM-DD`, the day after which the flag is late. */
+    expiresAt?: string;
+}
+/**
+ * One change of the feature flag table: the action, and the whole row that it
+ * asks for.
+ *
+ * An edit and a delete carry the row that the person who asked READ, as
+ * `expected`. The action writes nothing when the row changed in the meantime.
+ * `key` of an edit and a delete is a copy for the approver, and the action
+ * compares it too.
+ */
+export type ChangeFeatureFlagPayloadDto = {
+    action: 'create';
+    key: string;
+    value: FeatureFlagValuesDto & {
+        owner: string;
+    };
+} | {
+    action: 'update';
+    id: string;
+    key: string;
+    expected: FeatureFlagValuesDto;
+    value: FeatureFlagValuesDto;
+} | {
+    action: 'delete';
+    id: string;
+    key: string;
+    expected: FeatureFlagValuesDto;
+};
+export interface DeleteSsoConnectionPayloadDto {
+    strategy: 'waad' | 'samlp';
+    connectionId: string;
+    /** A copy, so a list shows a name that a person knows. Nothing reads it. */
+    connectionName?: string;
+    /**
+     * The organizations that the connection serves, as copies for the approver.
+     * The request is findable on the page of each one.
+     */
+    orgIds?: string[];
+}
+export interface DeleteOrganizationPayloadDto {
+    orgId: string;
+    /**
+     * The name that the approvers read. Accounts refuses the deletion when the
+     * organization has another name when the action runs.
+     */
+    orgName: string;
+}
+export interface DeleteUserPayloadDto {
+    userId: string;
+    /**
+     * The address that the approvers read. Accounts refuses the deletion when
+     * the user has another address when the action runs.
+     */
+    userEmail: string;
+}
+export interface ChangeUserEmailPayloadDto {
+    userId: string;
+    /**
+     * The address that the person who asked READ. Accounts compares it with
+     * the address that the user has when the action runs, and changes nothing
+     * when the two differ.
+     */
+    expectedEmail: string;
+    newEmail: string;
+}
+export interface PurgeUsersPayloadDto {
+    /**
+     * The users to delete, at most `PURGE_USERS_MAX_USERS`. The address is a
+     * copy for the approver, and accounts refuses a user whose address is not
+     * that copy. A list that came from a file of ids carries none.
+     */
+    users: {
+        userId: string;
+        email?: string;
+    }[];
+}
+export interface UpdateUserMetadataPayloadDto {
+    userId: string;
+    /** A copy, so a list shows a person and not an Auth0 id. Nothing reads it. */
+    userEmail?: string;
+    /** `app` writes `app_metadata`, `user` writes `user_metadata`. */
+    kind: 'app' | 'user';
+    /**
+     * The metadata that the person who asked READ. Absent for "not set".
+     * Accounts writes nothing when it holds another value when the action runs.
+     */
+    expected?: Record<string, unknown>;
+    metadata: Record<string, unknown>;
+}
+export interface DeleteInternalBackupPayloadDto {
+    clusterId: string;
+    /** A copy, so a list shows a name that a person knows. Nothing reads it. */
+    clusterName?: string;
+    backupName: string;
+    /** A copy of the Slack link of the incident, for the approver to read. */
+    incidentLink?: string;
+}
 export declare class ControlApprovalsService {
     /**
      * The registered privileged actions, with the rules that guard each one.
@@ -170,6 +324,128 @@ export declare class ControlApprovalsService {
         approval: ApprovalJobDto;
         created: boolean;
     }>;
+    /**
+     * Opens a change-platform-roles request.
+     *
+     * Opening one needs `accounts:admin:changeRole`, the same permission that
+     * approving needs, and the reason is necessary. A 200 means that a request
+     * for the same user is already open.
+     */
+    static createChangePlatformRoles(params: CreateApprovalRequest<ChangePlatformRolesPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
+    /**
+     * Opens a delete-internal-backup request.
+     *
+     * Opening one needs `console:clusters:canCreateInternalBackup`, the same
+     * permission that approving needs. A 200 means that a request for the same
+     * backup is already open.
+     */
+    static createDeleteInternalBackup(params: CreateApprovalRequest<DeleteInternalBackupPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
+    /**
+     * Opens a change-org-limits request.
+     *
+     * Opening one needs `accounts:admin:mayChangeOrgLimits`, the same
+     * permission that approving needs. A 200 means that a request for the same
+     * limit of the same organization is already open.
+     */
+    static createChangeOrgLimits(params: CreateApprovalRequest<ChangeOrgLimitsPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
+    /**
+     * Opens a delete-sso-connection request.
+     *
+     * Opening one needs `AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_DELETE`, the same
+     * permission that approving needs. A 200 means that a request for the same
+     * connection is already open.
+     */
+    static createDeleteSsoConnection(params: CreateApprovalRequest<DeleteSsoConnectionPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
+    /**
+     * Opens a change-sales-plan request.
+     *
+     * Opening one needs `AccountsPermissions.SALES_PLAN_SWITCH`, the same
+     * permission that approving needs. A 200 means that a request for the same
+     * organization is already open.
+     */
+    static createChangeSalesPlan(params: CreateApprovalRequest<ChangeSalesPlanPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
+    /**
+     * Opens a delete-organization request.
+     *
+     * Opening one needs `AccountsPermissions.DELETE_ORG`, the same permission
+     * that approving needs. A 200 means that a request for the same
+     * organization is already open.
+     */
+    static createDeleteOrganization(params: CreateApprovalRequest<DeleteOrganizationPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
+    /**
+     * Opens a delete-user request.
+     *
+     * Opening one needs `AccountsPermissions.DELETE_USER`, the same permission
+     * that approving needs. A 200 means that a request for the same user is
+     * already open.
+     */
+    static createDeleteUser(params: CreateApprovalRequest<DeleteUserPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
+    /**
+     * Opens a change-user-email request.
+     *
+     * Opening one needs `AccountsPermissions.ADMIN_CHANGE_EMAIL`, the same
+     * permission that approving needs. A 200 means that a request for the same
+     * user is already open.
+     */
+    static createChangeUserEmail(params: CreateApprovalRequest<ChangeUserEmailPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
+    /**
+     * Opens a purge-users request.
+     *
+     * Opening one needs `AccountsPermissions.GOD_PURGE_USERS` and
+     * `AccountsPermissions.DELETE_USER`, the same permissions that approving
+     * needs. A 200 means that a request for the same set of users is already
+     * open.
+     */
+    static createPurgeUsers(params: CreateApprovalRequest<PurgeUsersPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
+    /**
+     * Opens an update-user-metadata request.
+     *
+     * Opening one needs `AccountsPermissions.GOD_UPDATE_USER_METADATA`, the
+     * same permission that approving needs. A 200 means that a request for the
+     * same user and the same kind of metadata is already open.
+     */
+    static createUpdateUserMetadata(params: CreateApprovalRequest<UpdateUserMetadataPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
+    /**
+     * Opens a change-feature-flag request.
+     *
+     * Opening one needs `aafw`, the same permission that approving needs. A 200
+     * means that a request for the same flag is already open. On int this is
+     * the only way to change a flag.
+     */
+    static createChangeFeatureFlag(params: CreateApprovalRequest<ChangeFeatureFlagPayloadDto>): Promise<{
+        approval: ApprovalJobDto;
+        created: boolean;
+    }>;
     /** Adds the approval of the caller. The last one can run the action. */
     static acknowledge(params: ApprovalIdRequest): Promise<ApprovalJobDto>;
     /** Closes a request without running the action. The reason is necessary. */

package/dist/services/control/control.approvals.service.js

@@ -158,6 +158,161 @@ class ControlApprovalsService {
       `api/approvals/${useCase}`
     );
   }
+  /**
+   * Opens a change-platform-roles request.
+   *
+   * Opening one needs `accounts:admin:changeRole`, the same permission that
+   * approving needs, and the reason is necessary. A 200 means that a request
+   * for the same user is already open.
+   */
+  static async createChangePlatformRoles(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createChangePlatformRoles",
+      "api/approvals/change-platform-roles"
+    );
+  }
+  /**
+   * Opens a delete-internal-backup request.
+   *
+   * Opening one needs `console:clusters:canCreateInternalBackup`, the same
+   * permission that approving needs. A 200 means that a request for the same
+   * backup is already open.
+   */
+  static async createDeleteInternalBackup(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createDeleteInternalBackup",
+      "api/approvals/delete-internal-backup"
+    );
+  }
+  /**
+   * Opens a change-org-limits request.
+   *
+   * Opening one needs `accounts:admin:mayChangeOrgLimits`, the same
+   * permission that approving needs. A 200 means that a request for the same
+   * limit of the same organization is already open.
+   */
+  static async createChangeOrgLimits(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createChangeOrgLimits",
+      "api/approvals/change-org-limits"
+    );
+  }
+  /**
+   * Opens a delete-sso-connection request.
+   *
+   * Opening one needs `AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_DELETE`, the same
+   * permission that approving needs. A 200 means that a request for the same
+   * connection is already open.
+   */
+  static async createDeleteSsoConnection(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createDeleteSsoConnection",
+      "api/approvals/delete-sso-connection"
+    );
+  }
+  /**
+   * Opens a change-sales-plan request.
+   *
+   * Opening one needs `AccountsPermissions.SALES_PLAN_SWITCH`, the same
+   * permission that approving needs. A 200 means that a request for the same
+   * organization is already open.
+   */
+  static async createChangeSalesPlan(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createChangeSalesPlan",
+      "api/approvals/change-sales-plan"
+    );
+  }
+  /**
+   * Opens a delete-organization request.
+   *
+   * Opening one needs `AccountsPermissions.DELETE_ORG`, the same permission
+   * that approving needs. A 200 means that a request for the same
+   * organization is already open.
+   */
+  static async createDeleteOrganization(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createDeleteOrganization",
+      "api/approvals/delete-organization"
+    );
+  }
+  /**
+   * Opens a delete-user request.
+   *
+   * Opening one needs `AccountsPermissions.DELETE_USER`, the same permission
+   * that approving needs. A 200 means that a request for the same user is
+   * already open.
+   */
+  static async createDeleteUser(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createDeleteUser",
+      "api/approvals/delete-user"
+    );
+  }
+  /**
+   * Opens a change-user-email request.
+   *
+   * Opening one needs `AccountsPermissions.ADMIN_CHANGE_EMAIL`, the same
+   * permission that approving needs. A 200 means that a request for the same
+   * user is already open.
+   */
+  static async createChangeUserEmail(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createChangeUserEmail",
+      "api/approvals/change-user-email"
+    );
+  }
+  /**
+   * Opens a purge-users request.
+   *
+   * Opening one needs `AccountsPermissions.GOD_PURGE_USERS` and
+   * `AccountsPermissions.DELETE_USER`, the same permissions that approving
+   * needs. A 200 means that a request for the same set of users is already
+   * open.
+   */
+  static async createPurgeUsers(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createPurgeUsers",
+      "api/approvals/purge-users"
+    );
+  }
+  /**
+   * Opens an update-user-metadata request.
+   *
+   * Opening one needs `AccountsPermissions.GOD_UPDATE_USER_METADATA`, the
+   * same permission that approving needs. A 200 means that a request for the
+   * same user and the same kind of metadata is already open.
+   */
+  static async createUpdateUserMetadata(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createUpdateUserMetadata",
+      "api/approvals/update-user-metadata"
+    );
+  }
+  /**
+   * Opens a change-feature-flag request.
+   *
+   * Opening one needs `aafw`, the same permission that approving needs. A 200
+   * means that a request for the same flag is already open. On int this is
+   * the only way to change a flag.
+   */
+  static async createChangeFeatureFlag(params) {
+    return ControlApprovalsService.create(
+      params,
+      "createChangeFeatureFlag",
+      "api/approvals/change-feature-flag"
+    );
+  }
   /** Adds the approval of the caller. The last one can run the action. */
   static async acknowledge(params) {
     return ControlApprovalsService.readOne(

package/dist/services/control/control.approvals.service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/services/control/control.approvals.service.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  ApprovalEntityType,\n  ApprovalJobDto,\n  ApprovalJobStatus,\n  ApprovalSortField,\n  ApprovalSortOrder,\n  ApprovalStatusCountsDto,\n  ApprovalUseCaseDto,\n  ClusterBulkOperationPayloadDto,\n  ClusterBulkOperationType,\n} from '@camunda/ccma-shared-types'\nimport { CLUSTER_BULK_OPERATION_RULES } from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\n\n/**\n * The four-eyes approval surface of control-backend.\n *\n * One service for the whole mechanism, and not one for each use case. The\n * generic routes (list, read, approve, reject, withdraw, run) carry no\n * knowledge of a use case, which is what lets one view in control-frontend\n * show every privileged action. Only the create calls are per use case,\n * because a payload can be validated only for the use case it belongs to.\n *\n * Every route answers 404 while the feature flag `control.approvals` is off on\n * the stage, and while the service reaches no stage at all.\n */\n\nconst BASE = { id: 'control' } as const\n\nexport interface ApprovalPageDto {\n  approvals: ApprovalJobDto[]\n  page: {\n    limit: number\n    offset: number\n    /** True when the next page holds more. Never read the length instead. */\n    hasMore: boolean\n  }\n}\n\n/**\n * What narrows the queue. The list and the counts read the same fields.\n *\n * `entityType` and `entityId` are ONE filter, not two. control-backend answers\n * 400 for one without the other, so the type carries both or neither.\n */\nexport type ApprovalFacetParams = {\n  type?: string\n  /**\n   * One organization, matched whole against `orgId` of the payload.\n   *\n   * It reads only the payload, so `entityType`/`entityId` is wider. That filter\n   * reads the entity link, so it finds a request that touches the organization\n   * through another field. The organization page of control-frontend asks the\n   * entity-link filter, not this one. `orgId` is also not `q`: the free text\n   * reads the whole payload as text.\n   */\n  orgId?: string\n  /**\n   * Free text. control-backend matches it in the reason, the person who\n   * opened the request, the action and its label, and the payload that the\n   * summary shows.\n   */\n  q?: string\n  /**\n   * The queue of one person: what they opened, or what waits for them.\n   *\n   * `actionable` is the rule of the Approve button asked in SQL \u2014 pending,\n   * opened by somebody else, not approved by this person yet, and guarded by\n   * permissions that they hold.\n   */\n  mine?: 'created' | 'actionable'\n} & (\n  | {\n      /**\n       * The kind of entity a request must touch. Read with `entityId`.\n       *\n       * It reads the entity link of control-backend, so it is wider and truer\n       * than `orgId`: a cluster-move request answers for its source\n       * organization, its target organization AND the cluster. The organization\n       * and cluster detail pages of control-frontend ask this.\n       */\n      entityType: ApprovalEntityType\n      /** The id of the entity a request must touch. Read with `entityType`. */\n      entityId: string\n    }\n  | { entityType?: never; entityId?: never }\n)\n\nexport interface ListApprovalsRequest extends RequestBaseParams {\n  params?: ApprovalFacetParams & {\n    status?: ApprovalJobStatus\n    sort?: ApprovalSortField\n    order?: ApprovalSortOrder\n    limit?: number\n    offset?: number\n  }\n}\n\nexport interface CountApprovalsRequest extends RequestBaseParams {\n  params?: ApprovalFacetParams\n}\n\nexport interface ApprovalIdRequest extends RequestBaseParams {\n  params: { id: string }\n}\n\nexport interface RejectApprovalRequest extends RequestBaseParams {\n  params: { id: string; reason: string }\n}\n\n/** A withdrawal says why, or says nothing. The reason is not demanded. */\nexport interface WithdrawApprovalRequest extends RequestBaseParams {\n  params: { id: string; reason?: string }\n}\n\n/** The envelope that every create route of every use case shares. */\nexport interface CreateApprovalRequest<TPayload> extends RequestBaseParams {\n  params: {\n    payload: TPayload\n    reason?: string\n    /** More approvals than the floor of the use case. Never fewer. */\n    requiredAcks?: number\n  }\n}\n\nexport interface SendToExpiredTrialPayloadDto {\n  orgId: string\n  orgName?: string\n}\n\nexport interface ExtendTrialPayloadDto {\n  orgId: string\n  orgName?: string\n  /**\n   * Days of trial counted from the moment the action RUNS.\n   *\n   * Never a date. Accounts holds the new expiry inside a window that it\n   * measures when the call arrives, and under approvals that is days after the\n   * person chose the value. See `use-cases/extend-trial.ts` in\n   * control-backend.\n   */\n  days: number\n}\n\nexport interface MoveClusterOrgPayloadDto {\n  clusterId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  clusterName?: string\n  targetOrgId: string\n  /** A copy, for the same reason as `clusterName`. */\n  targetOrgName?: string\n  // The SOURCE organization is not here on purpose. control-backend resolves it\n  // server-side from the cluster's current owner, so a caller cannot attach the\n  // request to an organization the cluster never belonged to.\n}\n\n/**\n * The query string of a read, with the fields that carry no value dropped.\n *\n * An empty value is not the same as an absent one: `q=` would reach the schema\n * of control-backend, which holds the text at one character and answers 400.\n */\nfunction querySuffix(params: object = {}): string {\n  const query = new URLSearchParams()\n  for (const [key, value] of Object.entries(params)) {\n    if (value !== undefined && value !== '') {\n      query.set(key, String(value))\n    }\n  }\n  return query.size > 0 ? `?${query.toString()}` : ''\n}\n\nfunction contextFor(\n  name: string,\n  url: string,\n  normalizedUrl: string,\n  type: 'get' | 'post',\n  source: string,\n): RequestBaseServiceContext {\n  return {\n    method: {\n      name: `ControlApprovalsService.${name}`,\n      url,\n      normalizedUrl,\n      type,\n    },\n    source,\n    target: { name: 'control', type: 'internal' },\n  }\n}\n\nexport class ControlApprovalsService {\n  /**\n   * The registered privileged actions, with the rules that guard each one.\n   *\n   * A frontend reads this to run the same policy as the service, so it never\n   * holds a copy of the registry. A new use case then needs no frontend\n   * deploy.\n   */\n  public static async listUseCases(\n    params: RequestBaseParams,\n  ): Promise<ApprovalUseCaseDto[]> {\n    const serviceContext = contextFor(\n      'listUseCases',\n      'api/approvals/use-cases',\n      'api/approvals/use-cases',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ useCases: ApprovalUseCaseDto[] }>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.useCases\n  }\n\n  /**\n   * One page of the requests that the caller can read.\n   *\n   * It is not the whole table: control-backend hides a request whose use case\n   * the caller cannot act on, unless the caller opened it.\n   */\n  public static async list(\n    params: ListApprovalsRequest,\n  ): Promise<ApprovalPageDto> {\n    const suffix = querySuffix(params.params)\n    const serviceContext = contextFor(\n      'list',\n      `api/approvals${suffix}`,\n      'api/approvals',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<ApprovalPageDto>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  /**\n   * How many requests each status holds, for the status filters of a queue.\n   *\n   * It is the same question as `list` without the status, so a filter that\n   * shows a number never opens an empty page.\n   */\n  public static async counts(\n    params: CountApprovalsRequest,\n  ): Promise<ApprovalStatusCountsDto> {\n    const suffix = querySuffix(params.params)\n    const serviceContext = contextFor(\n      'counts',\n      `api/approvals/counts${suffix}`,\n      'api/approvals/counts',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ counts: ApprovalStatusCountsDto }>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.counts\n  }\n\n  public static async get(params: ApprovalIdRequest): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'get',\n      `api/approvals/${params.params.id}`,\n      'api/approvals/:id',\n      'get',\n    )\n  }\n\n  /**\n   * What a create route answers, plus whether it opened a NEW request.\n   *\n   * The route answers 201 for a fresh request and 200 for the one already\n   * open for the same target \u2014 `create` deduplicates. A caller that must\n   * tell the two apart (a floor-of-one use case, where 200 is the ordinary\n   * path and not a failure) reads `created`.\n   */\n  public static async createMoveClusterOrg(\n    params: CreateApprovalRequest<MoveClusterOrgPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createMoveClusterOrg',\n      'api/approvals/move-cluster-org',\n    )\n  }\n\n  /**\n   * Opens a cluster bulk operation of one type.\n   *\n   * Each type is its own use case with its own route, because each one has\n   * its own permission. The floor of approvals is the same for every type,\n   * and it depends on the stage: 2 on prod, 1 on dev, int and local. The\n   * route is `api/approvals/<use case>`, as for every other use case. A 200\n   * means that the same operation over the same clusters is already open.\n   */\n  public static async createClusterBulkOperation<\n    T extends ClusterBulkOperationType,\n  >(\n    type: T,\n    params: CreateApprovalRequest<ClusterBulkOperationPayloadDto<T>>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    const useCase = CLUSTER_BULK_OPERATION_RULES[type].useCase\n    return ControlApprovalsService.create(\n      params,\n      'createClusterBulkOperation',\n      `api/approvals/${useCase}`,\n    )\n  }\n\n  /** Adds the approval of the caller. The last one can run the action. */\n  public static async acknowledge(\n    params: ApprovalIdRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'acknowledge',\n      `api/approvals/${params.params.id}/ack`,\n      'api/approvals/:id/ack',\n      'post',\n    )\n  }\n\n  /** Closes a request without running the action. The reason is necessary. */\n  public static async reject(\n    params: RejectApprovalRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'reject',\n      `api/approvals/${params.params.id}/reject`,\n      'api/approvals/:id/reject',\n      'post',\n      { reason: params.params.reason },\n    )\n  }\n\n  /**\n   * Takes back a request. Only the person who opened it can.\n   *\n   * The reason is optional, and it lands in the same field that a rejection\n   * writes. The creator cannot reject their own request, so this is where they\n   * say why they closed it.\n   */\n  public static async withdraw(\n    params: WithdrawApprovalRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'withdraw',\n      `api/approvals/${params.params.id}/withdraw`,\n      'api/approvals/:id/withdraw',\n      'post',\n      params.params.reason ? { reason: params.params.reason } : undefined,\n    )\n  }\n\n  /**\n   * Runs a request that holds its approvals.\n   *\n   * Only a use case in the explicit mode needs this. An action that throws\n   * leaves the request `failed`, and this call still answers 200 with it, so\n   * read `status` and `executionError` of the answer.\n   */\n  public static async execute(\n    params: ApprovalIdRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'execute',\n      `api/approvals/${params.params.id}/execute`,\n      'api/approvals/:id/execute',\n      'post',\n    )\n  }\n\n  /** Opens a send-to-expired-trial request. Any signed-in Camundi can. */\n  public static async createSendToExpiredTrial(\n    params: CreateApprovalRequest<SendToExpiredTrialPayloadDto>,\n  ): Promise<ApprovalJobDto> {\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'createSendToExpiredTrial',\n      'api/approvals/send-to-expired-trial',\n    )\n    return approval\n  }\n\n  /**\n   * Opens an extend-trial request.\n   *\n   * Opening one needs `accounts:admin:extendTrial`, the same permission that\n   * approving needs, and the reason is necessary.\n   */\n  public static async createExtendTrial(\n    params: CreateApprovalRequest<ExtendTrialPayloadDto>,\n  ): Promise<ApprovalJobDto> {\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'createExtendTrial',\n      'api/approvals/extend-trial',\n    )\n    return approval\n  }\n\n  /**\n   * The shared half of every call that answers one request.\n   *\n   * Six routes answer `{ approval }` and differ only in the verb and the path.\n   * One private helper keeps the metrics context, the status check and the\n   * unwrapping in one place.\n   */\n  private static async readOne(\n    params: RequestBaseParams,\n    name: string,\n    url: string,\n    normalizedUrl: string,\n    method: 'get' | 'post',\n    body?: Record<string, unknown>,\n  ): Promise<ApprovalJobDto> {\n    const serviceContext = contextFor(\n      name,\n      url,\n      normalizedUrl,\n      method,\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ approval: ApprovalJobDto }>({\n      config: params.config,\n      base: BASE,\n      url,\n      method,\n      metricsDetails: serviceContext,\n      body,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.approval\n  }\n\n  /**\n   * The shared half of every create route. See `approvalRequestBody`.\n   *\n   * The route answers 201 for a fresh request and 200 for the one already\n   * open for the same target (`create` deduplicates). `created` carries that\n   * difference. `createSendToExpiredTrial` and `createExtendTrial` do not\n   * need it, so they read `approval` alone off this result.\n   */\n  private static async create<TPayload>(\n    params: CreateApprovalRequest<TPayload>,\n    name: string,\n    url: string,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    const serviceContext = contextFor(\n      name,\n      url,\n      url,\n      'post',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ approval: ApprovalJobDto }>({\n      config: params.config,\n      base: BASE,\n      url,\n      method: 'post',\n      metricsDetails: serviceContext,\n      body: {\n        payload: params.params.payload,\n        reason: params.params.reason,\n        requiredAcks: params.params.requiredAcks,\n      },\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return {\n      approval: response.body!.approval,\n      created: response.status === 201,\n    }\n  }\n}\n"],
-  "mappings": "AAiBA,SAAS,oCAAoC;AAK7C,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAe1B,MAAM,OAAO,EAAE,IAAI,UAAU;AAuI7B,SAAS,YAAY,SAAiB,CAAC,GAAW;AAChD,QAAM,QAAQ,IAAI,gBAAgB;AAClC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,UAAU,UAAa,UAAU,IAAI;AACvC,YAAM,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,IAC9B;AAAA,EACF;AACA,SAAO,MAAM,OAAO,IAAI,IAAI,MAAM,SAAS,CAAC,KAAK;AACnD;AAEA,SAAS,WACP,MACA,KACA,eACA,MACA,QAC2B;AAC3B,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,MAAM,2BAA2B,IAAI;AAAA,MACrC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,EAC9C;AACF;AAEO,MAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQnC,aAAoB,aAClB,QAC+B;AAC/B,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAA4C;AAAA,MACjE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,KAClB,QAC0B;AAC1B,UAAM,SAAS,YAAY,OAAO,MAAM;AACxC,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAyB;AAAA,MAC9C,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,OAClB,QACkC;AAClC,UAAM,SAAS,YAAY,OAAO,MAAM;AACxC,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,uBAAuB,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAA6C;AAAA,MAClE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA,EAEA,aAAoB,IAAI,QAAoD;AAC1E,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAoB,qBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,aAAoB,2BAGlB,MACA,QACyD;AACzD,UAAM,UAAU,6BAA6B,IAAI,EAAE;AACnD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,YAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,OAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,OAAO,OAAO,OAAO;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,SAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,OAAO,IAAI;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,QAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,yBAClB,QACyB;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,kBAClB,QACyB;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAqB,QACnB,QACA,MACA,KACA,eACA,QACA,MACyB;AACzB,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAsC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAqB,OACnB,QACA,MACA,KACyD;AACzD,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAsC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,SAAS,OAAO,OAAO;AAAA,QACvB,QAAQ,OAAO,OAAO;AAAA,QACtB,cAAc,OAAO,OAAO;AAAA,MAC9B;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO;AAAA,MACL,UAAU,SAAS,KAAM;AAAA,MACzB,SAAS,SAAS,WAAW;AAAA,IAC/B;AAAA,EACF;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  ApprovalEntityType,\n  ApprovalJobDto,\n  ApprovalJobStatus,\n  ApprovalSortField,\n  ApprovalSortOrder,\n  ApprovalStatusCountsDto,\n  ApprovalUseCaseDto,\n  ClusterBulkOperationPayloadDto,\n  ClusterBulkOperationType,\n} from '@camunda/ccma-shared-types'\nimport { CLUSTER_BULK_OPERATION_RULES } from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\n\n/**\n * The four-eyes approval surface of control-backend.\n *\n * One service for the whole mechanism, and not one for each use case. The\n * generic routes (list, read, approve, reject, withdraw, run) carry no\n * knowledge of a use case, which is what lets one view in control-frontend\n * show every privileged action. Only the create calls are per use case,\n * because a payload can be validated only for the use case it belongs to.\n *\n * A use case that walks its own rollout behind a flag answers 404 on its\n * create route while that flag is off.\n */\n\nconst BASE = { id: 'control' } as const\n\nexport interface ApprovalPageDto {\n  approvals: ApprovalJobDto[]\n  page: {\n    limit: number\n    offset: number\n    /** True when the next page holds more. Never read the length instead. */\n    hasMore: boolean\n  }\n}\n\n/**\n * What narrows the queue. The list and the counts read the same fields.\n *\n * `entityType` and `entityId` are ONE filter, not two. control-backend answers\n * 400 for one without the other, so the type carries both or neither.\n */\nexport type ApprovalFacetParams = {\n  type?: string\n  /**\n   * One organization, matched whole against `orgId` of the payload.\n   *\n   * It reads only the payload, so `entityType`/`entityId` is wider. That filter\n   * reads the entity link, so it finds a request that touches the organization\n   * through another field. The organization page of control-frontend asks the\n   * entity-link filter, not this one. `orgId` is also not `q`: the free text\n   * reads the whole payload as text.\n   */\n  orgId?: string\n  /**\n   * Free text. control-backend matches it in the reason, the person who\n   * opened the request, the action and its label, and the payload that the\n   * summary shows.\n   */\n  q?: string\n  /**\n   * The queue of one person: what they opened, or what waits for them.\n   *\n   * `actionable` is the rule of the Approve button asked in SQL \u2014 pending,\n   * opened by somebody else, not approved by this person yet, and guarded by\n   * permissions that they hold.\n   */\n  mine?: 'created' | 'actionable'\n} & (\n  | {\n      /**\n       * The kind of entity a request must touch. Read with `entityId`.\n       *\n       * It reads the entity link of control-backend, so it is wider and truer\n       * than `orgId`: a cluster-move request answers for its source\n       * organization, its target organization AND the cluster. The organization\n       * and cluster detail pages of control-frontend ask this.\n       */\n      entityType: ApprovalEntityType\n      /** The id of the entity a request must touch. Read with `entityType`. */\n      entityId: string\n    }\n  | { entityType?: never; entityId?: never }\n)\n\nexport interface ListApprovalsRequest extends RequestBaseParams {\n  params?: ApprovalFacetParams & {\n    status?: ApprovalJobStatus\n    sort?: ApprovalSortField\n    order?: ApprovalSortOrder\n    limit?: number\n    offset?: number\n  }\n}\n\nexport interface CountApprovalsRequest extends RequestBaseParams {\n  params?: ApprovalFacetParams\n}\n\nexport interface ApprovalIdRequest extends RequestBaseParams {\n  params: { id: string }\n}\n\nexport interface RejectApprovalRequest extends RequestBaseParams {\n  params: { id: string; reason: string }\n}\n\n/** A withdrawal says why, or says nothing. The reason is not demanded. */\nexport interface WithdrawApprovalRequest extends RequestBaseParams {\n  params: { id: string; reason?: string }\n}\n\n/** The envelope that every create route of every use case shares. */\nexport interface CreateApprovalRequest<TPayload> extends RequestBaseParams {\n  params: {\n    payload: TPayload\n    reason?: string\n    /** More approvals than the floor of the use case. Never fewer. */\n    requiredAcks?: number\n  }\n}\n\nexport interface SendToExpiredTrialPayloadDto {\n  orgId: string\n  orgName?: string\n}\n\nexport interface ExtendTrialPayloadDto {\n  orgId: string\n  orgName?: string\n  /**\n   * Days of trial counted from the moment the action RUNS.\n   *\n   * Never a date. Accounts holds the new expiry inside a window that it\n   * measures when the call arrives, and under approvals that is days after the\n   * person chose the value. See `use-cases/extend-trial.ts` in\n   * control-backend.\n   */\n  days: number\n}\n\nexport interface MoveClusterOrgPayloadDto {\n  clusterId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  clusterName?: string\n  targetOrgId: string\n  /** A copy, for the same reason as `clusterName`. */\n  targetOrgName?: string\n  // The SOURCE organization is not here on purpose. control-backend resolves it\n  // server-side from the cluster's current owner, so a caller cannot attach the\n  // request to an organization the cluster never belonged to.\n}\n\nexport interface ChangePlatformRolesPayloadDto {\n  userId: string\n  /** A copy, so a list shows a person and not an Auth0 id. Nothing reads it. */\n  userEmail?: string\n  /**\n   * A CHANGE, and never the whole set. Accounts applies it over the roles that\n   * the user holds when the action RUNS, so a role change that somebody else\n   * made while the request waited stays.\n   */\n  rolesToAdd: string[]\n  rolesToRemove: string[]\n}\n\nexport interface ChangeOrgLimitsPayloadDto {\n  orgId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  orgName?: string\n  /** One key of `allSalesPlanLimits()`. One limit for each request. */\n  limitKey: string\n  /**\n   * The override that the person who asked READ. Absent for \"not set\".\n   *\n   * Accounts compares it with the override that it holds when the action\n   * runs, and writes nothing when the two differ. See `staleApprovalKeys`.\n   */\n  expected?: string | number | boolean\n  /** The new override. `null` clears it, and the default of the plan applies. */\n  value: string | number | boolean | null\n}\n\nexport interface ChangeSalesPlanPayloadDto {\n  orgId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  orgName?: string\n  salesPlanId: string\n  /** A copy of the name of the new plan, for the approver to read. */\n  salesPlanName?: string\n  /**\n   * The plan that the person who asked READ. Absent for \"no plan\".\n   *\n   * Accounts compares it with the plan that it holds when the action runs,\n   * and switches nothing when the two differ.\n   */\n  expectedSalesPlanId?: string\n  /** A copy of the name of the current plan, for the approver to read. */\n  expectedSalesPlanName?: string\n  /** Skips the validation of the switch. The approver sees it. */\n  force: boolean\n}\n\n/** Every value of a flag row that a person can change. */\nexport interface FeatureFlagValuesDto {\n  description: string\n  enabled: boolean\n  orgIds: string[]\n  emailDomains: string[]\n  /** The team that owns the flag. A create needs it. An older row has none. */\n  owner?: string\n  /** `YYYY-MM-DD`, the day after which the flag is late. */\n  expiresAt?: string\n}\n\n/**\n * One change of the feature flag table: the action, and the whole row that it\n * asks for.\n *\n * An edit and a delete carry the row that the person who asked READ, as\n * `expected`. The action writes nothing when the row changed in the meantime.\n * `key` of an edit and a delete is a copy for the approver, and the action\n * compares it too.\n */\nexport type ChangeFeatureFlagPayloadDto =\n  | {\n      action: 'create'\n      key: string\n      value: FeatureFlagValuesDto & { owner: string }\n    }\n  | {\n      action: 'update'\n      id: string\n      key: string\n      expected: FeatureFlagValuesDto\n      value: FeatureFlagValuesDto\n    }\n  | {\n      action: 'delete'\n      id: string\n      key: string\n      expected: FeatureFlagValuesDto\n    }\n\nexport interface DeleteSsoConnectionPayloadDto {\n  strategy: 'waad' | 'samlp'\n  connectionId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  connectionName?: string\n  /**\n   * The organizations that the connection serves, as copies for the approver.\n   * The request is findable on the page of each one.\n   */\n  orgIds?: string[]\n}\n\nexport interface DeleteOrganizationPayloadDto {\n  orgId: string\n  /**\n   * The name that the approvers read. Accounts refuses the deletion when the\n   * organization has another name when the action runs.\n   */\n  orgName: string\n}\n\nexport interface DeleteUserPayloadDto {\n  userId: string\n  /**\n   * The address that the approvers read. Accounts refuses the deletion when\n   * the user has another address when the action runs.\n   */\n  userEmail: string\n}\n\nexport interface ChangeUserEmailPayloadDto {\n  userId: string\n  /**\n   * The address that the person who asked READ. Accounts compares it with\n   * the address that the user has when the action runs, and changes nothing\n   * when the two differ.\n   */\n  expectedEmail: string\n  newEmail: string\n}\n\nexport interface PurgeUsersPayloadDto {\n  /**\n   * The users to delete, at most `PURGE_USERS_MAX_USERS`. The address is a\n   * copy for the approver, and accounts refuses a user whose address is not\n   * that copy. A list that came from a file of ids carries none.\n   */\n  users: { userId: string; email?: string }[]\n}\n\nexport interface UpdateUserMetadataPayloadDto {\n  userId: string\n  /** A copy, so a list shows a person and not an Auth0 id. Nothing reads it. */\n  userEmail?: string\n  /** `app` writes `app_metadata`, `user` writes `user_metadata`. */\n  kind: 'app' | 'user'\n  /**\n   * The metadata that the person who asked READ. Absent for \"not set\".\n   * Accounts writes nothing when it holds another value when the action runs.\n   */\n  expected?: Record<string, unknown>\n  metadata: Record<string, unknown>\n}\n\nexport interface DeleteInternalBackupPayloadDto {\n  clusterId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  clusterName?: string\n  backupName: string\n  /** A copy of the Slack link of the incident, for the approver to read. */\n  incidentLink?: string\n}\n\n/**\n * The query string of a read, with the fields that carry no value dropped.\n *\n * An empty value is not the same as an absent one: `q=` would reach the schema\n * of control-backend, which holds the text at one character and answers 400.\n */\nfunction querySuffix(params: object = {}): string {\n  const query = new URLSearchParams()\n  for (const [key, value] of Object.entries(params)) {\n    if (value !== undefined && value !== '') {\n      query.set(key, String(value))\n    }\n  }\n  return query.size > 0 ? `?${query.toString()}` : ''\n}\n\nfunction contextFor(\n  name: string,\n  url: string,\n  normalizedUrl: string,\n  type: 'get' | 'post',\n  source: string,\n): RequestBaseServiceContext {\n  return {\n    method: {\n      name: `ControlApprovalsService.${name}`,\n      url,\n      normalizedUrl,\n      type,\n    },\n    source,\n    target: { name: 'control', type: 'internal' },\n  }\n}\n\nexport class ControlApprovalsService {\n  /**\n   * The registered privileged actions, with the rules that guard each one.\n   *\n   * A frontend reads this to run the same policy as the service, so it never\n   * holds a copy of the registry. A new use case then needs no frontend\n   * deploy.\n   */\n  public static async listUseCases(\n    params: RequestBaseParams,\n  ): Promise<ApprovalUseCaseDto[]> {\n    const serviceContext = contextFor(\n      'listUseCases',\n      'api/approvals/use-cases',\n      'api/approvals/use-cases',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ useCases: ApprovalUseCaseDto[] }>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.useCases\n  }\n\n  /**\n   * One page of the requests that the caller can read.\n   *\n   * It is not the whole table: control-backend hides a request whose use case\n   * the caller cannot act on, unless the caller opened it.\n   */\n  public static async list(\n    params: ListApprovalsRequest,\n  ): Promise<ApprovalPageDto> {\n    const suffix = querySuffix(params.params)\n    const serviceContext = contextFor(\n      'list',\n      `api/approvals${suffix}`,\n      'api/approvals',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<ApprovalPageDto>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  /**\n   * How many requests each status holds, for the status filters of a queue.\n   *\n   * It is the same question as `list` without the status, so a filter that\n   * shows a number never opens an empty page.\n   */\n  public static async counts(\n    params: CountApprovalsRequest,\n  ): Promise<ApprovalStatusCountsDto> {\n    const suffix = querySuffix(params.params)\n    const serviceContext = contextFor(\n      'counts',\n      `api/approvals/counts${suffix}`,\n      'api/approvals/counts',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ counts: ApprovalStatusCountsDto }>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.counts\n  }\n\n  public static async get(params: ApprovalIdRequest): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'get',\n      `api/approvals/${params.params.id}`,\n      'api/approvals/:id',\n      'get',\n    )\n  }\n\n  /**\n   * What a create route answers, plus whether it opened a NEW request.\n   *\n   * The route answers 201 for a fresh request and 200 for the one already\n   * open for the same target \u2014 `create` deduplicates. A caller that must\n   * tell the two apart (a floor-of-one use case, where 200 is the ordinary\n   * path and not a failure) reads `created`.\n   */\n  public static async createMoveClusterOrg(\n    params: CreateApprovalRequest<MoveClusterOrgPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createMoveClusterOrg',\n      'api/approvals/move-cluster-org',\n    )\n  }\n\n  /**\n   * Opens a cluster bulk operation of one type.\n   *\n   * Each type is its own use case with its own route, because each one has\n   * its own permission. The floor of approvals is the same for every type,\n   * and it depends on the stage: 2 on prod, 1 on dev, int and local. The\n   * route is `api/approvals/<use case>`, as for every other use case. A 200\n   * means that the same operation over the same clusters is already open.\n   */\n  public static async createClusterBulkOperation<\n    T extends ClusterBulkOperationType,\n  >(\n    type: T,\n    params: CreateApprovalRequest<ClusterBulkOperationPayloadDto<T>>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    const useCase = CLUSTER_BULK_OPERATION_RULES[type].useCase\n    return ControlApprovalsService.create(\n      params,\n      'createClusterBulkOperation',\n      `api/approvals/${useCase}`,\n    )\n  }\n\n  /**\n   * Opens a change-platform-roles request.\n   *\n   * Opening one needs `accounts:admin:changeRole`, the same permission that\n   * approving needs, and the reason is necessary. A 200 means that a request\n   * for the same user is already open.\n   */\n  public static async createChangePlatformRoles(\n    params: CreateApprovalRequest<ChangePlatformRolesPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangePlatformRoles',\n      'api/approvals/change-platform-roles',\n    )\n  }\n\n  /**\n   * Opens a delete-internal-backup request.\n   *\n   * Opening one needs `console:clusters:canCreateInternalBackup`, the same\n   * permission that approving needs. A 200 means that a request for the same\n   * backup is already open.\n   */\n  public static async createDeleteInternalBackup(\n    params: CreateApprovalRequest<DeleteInternalBackupPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createDeleteInternalBackup',\n      'api/approvals/delete-internal-backup',\n    )\n  }\n\n  /**\n   * Opens a change-org-limits request.\n   *\n   * Opening one needs `accounts:admin:mayChangeOrgLimits`, the same\n   * permission that approving needs. A 200 means that a request for the same\n   * limit of the same organization is already open.\n   */\n  public static async createChangeOrgLimits(\n    params: CreateApprovalRequest<ChangeOrgLimitsPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangeOrgLimits',\n      'api/approvals/change-org-limits',\n    )\n  }\n\n  /**\n   * Opens a delete-sso-connection request.\n   *\n   * Opening one needs `AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_DELETE`, the same\n   * permission that approving needs. A 200 means that a request for the same\n   * connection is already open.\n   */\n  public static async createDeleteSsoConnection(\n    params: CreateApprovalRequest<DeleteSsoConnectionPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createDeleteSsoConnection',\n      'api/approvals/delete-sso-connection',\n    )\n  }\n\n  /**\n   * Opens a change-sales-plan request.\n   *\n   * Opening one needs `AccountsPermissions.SALES_PLAN_SWITCH`, the same\n   * permission that approving needs. A 200 means that a request for the same\n   * organization is already open.\n   */\n  public static async createChangeSalesPlan(\n    params: CreateApprovalRequest<ChangeSalesPlanPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangeSalesPlan',\n      'api/approvals/change-sales-plan',\n    )\n  }\n\n  /**\n   * Opens a delete-organization request.\n   *\n   * Opening one needs `AccountsPermissions.DELETE_ORG`, the same permission\n   * that approving needs. A 200 means that a request for the same\n   * organization is already open.\n   */\n  public static async createDeleteOrganization(\n    params: CreateApprovalRequest<DeleteOrganizationPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createDeleteOrganization',\n      'api/approvals/delete-organization',\n    )\n  }\n\n  /**\n   * Opens a delete-user request.\n   *\n   * Opening one needs `AccountsPermissions.DELETE_USER`, the same permission\n   * that approving needs. A 200 means that a request for the same user is\n   * already open.\n   */\n  public static async createDeleteUser(\n    params: CreateApprovalRequest<DeleteUserPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createDeleteUser',\n      'api/approvals/delete-user',\n    )\n  }\n\n  /**\n   * Opens a change-user-email request.\n   *\n   * Opening one needs `AccountsPermissions.ADMIN_CHANGE_EMAIL`, the same\n   * permission that approving needs. A 200 means that a request for the same\n   * user is already open.\n   */\n  public static async createChangeUserEmail(\n    params: CreateApprovalRequest<ChangeUserEmailPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangeUserEmail',\n      'api/approvals/change-user-email',\n    )\n  }\n\n  /**\n   * Opens a purge-users request.\n   *\n   * Opening one needs `AccountsPermissions.GOD_PURGE_USERS` and\n   * `AccountsPermissions.DELETE_USER`, the same permissions that approving\n   * needs. A 200 means that a request for the same set of users is already\n   * open.\n   */\n  public static async createPurgeUsers(\n    params: CreateApprovalRequest<PurgeUsersPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createPurgeUsers',\n      'api/approvals/purge-users',\n    )\n  }\n\n  /**\n   * Opens an update-user-metadata request.\n   *\n   * Opening one needs `AccountsPermissions.GOD_UPDATE_USER_METADATA`, the\n   * same permission that approving needs. A 200 means that a request for the\n   * same user and the same kind of metadata is already open.\n   */\n  public static async createUpdateUserMetadata(\n    params: CreateApprovalRequest<UpdateUserMetadataPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createUpdateUserMetadata',\n      'api/approvals/update-user-metadata',\n    )\n  }\n\n  /**\n   * Opens a change-feature-flag request.\n   *\n   * Opening one needs `aafw`, the same permission that approving needs. A 200\n   * means that a request for the same flag is already open. On int this is\n   * the only way to change a flag.\n   */\n  public static async createChangeFeatureFlag(\n    params: CreateApprovalRequest<ChangeFeatureFlagPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangeFeatureFlag',\n      'api/approvals/change-feature-flag',\n    )\n  }\n\n  /** Adds the approval of the caller. The last one can run the action. */\n  public static async acknowledge(\n    params: ApprovalIdRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'acknowledge',\n      `api/approvals/${params.params.id}/ack`,\n      'api/approvals/:id/ack',\n      'post',\n    )\n  }\n\n  /** Closes a request without running the action. The reason is necessary. */\n  public static async reject(\n    params: RejectApprovalRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'reject',\n      `api/approvals/${params.params.id}/reject`,\n      'api/approvals/:id/reject',\n      'post',\n      { reason: params.params.reason },\n    )\n  }\n\n  /**\n   * Takes back a request. Only the person who opened it can.\n   *\n   * The reason is optional, and it lands in the same field that a rejection\n   * writes. The creator cannot reject their own request, so this is where they\n   * say why they closed it.\n   */\n  public static async withdraw(\n    params: WithdrawApprovalRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'withdraw',\n      `api/approvals/${params.params.id}/withdraw`,\n      'api/approvals/:id/withdraw',\n      'post',\n      params.params.reason ? { reason: params.params.reason } : undefined,\n    )\n  }\n\n  /**\n   * Runs a request that holds its approvals.\n   *\n   * Only a use case in the explicit mode needs this. An action that throws\n   * leaves the request `failed`, and this call still answers 200 with it, so\n   * read `status` and `executionError` of the answer.\n   */\n  public static async execute(\n    params: ApprovalIdRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'execute',\n      `api/approvals/${params.params.id}/execute`,\n      'api/approvals/:id/execute',\n      'post',\n    )\n  }\n\n  /** Opens a send-to-expired-trial request. Any signed-in Camundi can. */\n  public static async createSendToExpiredTrial(\n    params: CreateApprovalRequest<SendToExpiredTrialPayloadDto>,\n  ): Promise<ApprovalJobDto> {\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'createSendToExpiredTrial',\n      'api/approvals/send-to-expired-trial',\n    )\n    return approval\n  }\n\n  /**\n   * Opens an extend-trial request.\n   *\n   * Opening one needs `accounts:admin:extendTrial`, the same permission that\n   * approving needs, and the reason is necessary.\n   */\n  public static async createExtendTrial(\n    params: CreateApprovalRequest<ExtendTrialPayloadDto>,\n  ): Promise<ApprovalJobDto> {\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'createExtendTrial',\n      'api/approvals/extend-trial',\n    )\n    return approval\n  }\n\n  /**\n   * The shared half of every call that answers one request.\n   *\n   * Six routes answer `{ approval }` and differ only in the verb and the path.\n   * One private helper keeps the metrics context, the status check and the\n   * unwrapping in one place.\n   */\n  private static async readOne(\n    params: RequestBaseParams,\n    name: string,\n    url: string,\n    normalizedUrl: string,\n    method: 'get' | 'post',\n    body?: Record<string, unknown>,\n  ): Promise<ApprovalJobDto> {\n    const serviceContext = contextFor(\n      name,\n      url,\n      normalizedUrl,\n      method,\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ approval: ApprovalJobDto }>({\n      config: params.config,\n      base: BASE,\n      url,\n      method,\n      metricsDetails: serviceContext,\n      body,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.approval\n  }\n\n  /**\n   * The shared half of every create route. See `approvalRequestBody`.\n   *\n   * The route answers 201 for a fresh request and 200 for the one already\n   * open for the same target (`create` deduplicates). `created` carries that\n   * difference. `createSendToExpiredTrial` and `createExtendTrial` do not\n   * need it, so they read `approval` alone off this result.\n   */\n  private static async create<TPayload>(\n    params: CreateApprovalRequest<TPayload>,\n    name: string,\n    url: string,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    const serviceContext = contextFor(\n      name,\n      url,\n      url,\n      'post',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ approval: ApprovalJobDto }>({\n      config: params.config,\n      base: BASE,\n      url,\n      method: 'post',\n      metricsDetails: serviceContext,\n      body: {\n        payload: params.params.payload,\n        reason: params.params.reason,\n        requiredAcks: params.params.requiredAcks,\n      },\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return {\n      approval: response.body!.approval,\n      created: response.status === 201,\n    }\n  }\n}\n"],
+  "mappings": "AAiBA,SAAS,oCAAoC;AAK7C,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAe1B,MAAM,OAAO,EAAE,IAAI,UAAU;AA2S7B,SAAS,YAAY,SAAiB,CAAC,GAAW;AAChD,QAAM,QAAQ,IAAI,gBAAgB;AAClC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,UAAU,UAAa,UAAU,IAAI;AACvC,YAAM,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,IAC9B;AAAA,EACF;AACA,SAAO,MAAM,OAAO,IAAI,IAAI,MAAM,SAAS,CAAC,KAAK;AACnD;AAEA,SAAS,WACP,MACA,KACA,eACA,MACA,QAC2B;AAC3B,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,MAAM,2BAA2B,IAAI;AAAA,MACrC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,EAC9C;AACF;AAEO,MAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQnC,aAAoB,aAClB,QAC+B;AAC/B,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAA4C;AAAA,MACjE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,KAClB,QAC0B;AAC1B,UAAM,SAAS,YAAY,OAAO,MAAM;AACxC,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAyB;AAAA,MAC9C,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,OAClB,QACkC;AAClC,UAAM,SAAS,YAAY,OAAO,MAAM;AACxC,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,uBAAuB,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAA6C;AAAA,MAClE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA,EAEA,aAAoB,IAAI,QAAoD;AAC1E,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAoB,qBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,aAAoB,2BAGlB,MACA,QACyD;AACzD,UAAM,UAAU,6BAA6B,IAAI,EAAE;AACnD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,0BAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,2BAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,sBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,0BAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,sBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,yBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,iBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,sBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAoB,iBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,yBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,wBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,YAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,OAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,OAAO,OAAO,OAAO;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,SAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,OAAO,IAAI;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,QAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,yBAClB,QACyB;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,kBAClB,QACyB;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAqB,QACnB,QACA,MACA,KACA,eACA,QACA,MACyB;AACzB,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAsC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAqB,OACnB,QACA,MACA,KACyD;AACzD,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAsC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,SAAS,OAAO,OAAO;AAAA,QACvB,QAAQ,OAAO,OAAO;AAAA,QACtB,cAAc,OAAO,OAAO;AAAA,MAC9B;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO;AAAA,MACL,UAAU,SAAS,KAAM;AAAA,MACzB,SAAS,SAAS,WAAW;AAAA,IAC/B;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/services/control/control.dashboards.service.d.ts

@@ -0,0 +1,76 @@
+import type { ChartQueryCheck, DashboardCatalogue, DashboardDefinition, DashboardDto, DashboardListDto, DashboardNewTile } from '@camunda/ccma-shared-types';
+import type { RequestBaseParams } from '../../types/general.types.js';
+export interface ListDashboardsRequest extends RequestBaseParams {
+    params?: {
+        archived?: boolean;
+        limit?: number;
+        offset?: number;
+    };
+}
+export interface DashboardIdRequest extends RequestBaseParams {
+    params: {
+        id: string;
+    };
+}
+export interface CreateDashboardRequest extends RequestBaseParams {
+    params: {
+        title: string;
+        definition?: DashboardDefinition;
+    };
+}
+export interface UpdateDashboardRequest extends RequestBaseParams {
+    params: {
+        id: string;
+        title: string;
+        definition: DashboardDefinition;
+        /**
+         * The `version` of the read that the edit started from. The backend
+         * answers 409 when the row moved on, so a stale tab never replaces a
+         * newer save.
+         */
+        version: number;
+    };
+}
+export interface AddDashboardTileRequest extends RequestBaseParams {
+    params: {
+        id: string;
+        tile: DashboardNewTile;
+    };
+}
+export interface CheckChartQueryRequest extends RequestBaseParams {
+    params: {
+        query: string;
+    };
+}
+export declare class ControlDashboardsService {
+    /**
+     * What a dashboard definition can hold on this stage: the kinds of tiles,
+     * the cards, the chart metrics and the limits. The chart metrics are empty
+     * where `control.dashboardCharts` is off.
+     */
+    static catalogue(params: RequestBaseParams): Promise<DashboardCatalogue>;
+    /**
+     * Checks a chart query and gives the spec of a chart tile. A query with a
+     * mistake is an answer with `valid: false`, and not a failure. Answers 404
+     * where `control.dashboardCharts` is off.
+     */
+    static checkChartQuery(params: CheckChartQueryRequest): Promise<ChartQueryCheck>;
+    /** One page of the live or the archived dashboards, with no tiles. */
+    static list(params: ListDashboardsRequest): Promise<DashboardListDto>;
+    static get(params: DashboardIdRequest): Promise<DashboardDto>;
+    static create(params: CreateDashboardRequest): Promise<DashboardDto>;
+    /** Saves the title and the tiles. Answers 409 for a stale `version`. */
+    static update(params: UpdateDashboardRequest): Promise<DashboardDto>;
+    /**
+     * Adds a tile after the last tile: to the right of the last row when it
+     * fits there, else under every tile. It needs no version.
+     */
+    static addTile(params: AddDashboardTileRequest): Promise<DashboardDto>;
+    static archive(params: DashboardIdRequest): Promise<DashboardDto>;
+    static restore(params: DashboardIdRequest): Promise<DashboardDto>;
+    /** Pins the dashboard for the caller alone. */
+    static pin(params: DashboardIdRequest): Promise<void>;
+    static unpin(params: DashboardIdRequest): Promise<void>;
+    private static action;
+    private static send;
+}