@camunda/ccma-api 3.1.0 → 5.0.0

package/dist/services/control/control.approvals.service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/services/control/control.approvals.service.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  ApprovalEntityType,\n  ApprovalJobDto,\n  ApprovalJobStatus,\n  ApprovalSortField,\n  ApprovalSortOrder,\n  ApprovalStatusCountsDto,\n  ApprovalUseCaseDto,\n  ClusterBulkOperationPayloadDto,\n  ClusterBulkOperationType,\n} from '@camunda/ccma-shared-types'\nimport { CLUSTER_BULK_OPERATION_RULES } from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\n\n/**\n * The four-eyes approval surface of control-backend.\n *\n * One service for the whole mechanism, and not one for each use case. The\n * generic routes (list, read, approve, reject, withdraw, run) carry no\n * knowledge of a use case, which is what lets one view in control-frontend\n * show every privileged action. Only the create calls are per use case,\n * because a payload can be validated only for the use case it belongs to.\n *\n * Every route answers 404 while the feature flag `control.approvals` is off on\n * the stage, and while the service reaches no stage at all.\n */\n\nconst BASE = { id: 'control' } as const\n\nexport interface ApprovalPageDto {\n  approvals: ApprovalJobDto[]\n  page: {\n    limit: number\n    offset: number\n    /** True when the next page holds more. Never read the length instead. */\n    hasMore: boolean\n  }\n}\n\n/**\n * What narrows the queue. The list and the counts read the same fields.\n *\n * `entityType` and `entityId` are ONE filter, not two. control-backend answers\n * 400 for one without the other, so the type carries both or neither.\n */\nexport type ApprovalFacetParams = {\n  type?: string\n  /**\n   * One organization, matched whole against `orgId` of the payload.\n   *\n   * It reads only the payload, so `entityType`/`entityId` is wider. That filter\n   * reads the entity link, so it finds a request that touches the organization\n   * through another field. The organization page of control-frontend asks the\n   * entity-link filter, not this one. `orgId` is also not `q`: the free text\n   * reads the whole payload as text.\n   */\n  orgId?: string\n  /**\n   * Free text. control-backend matches it in the reason, the person who\n   * opened the request, the action and its label, and the payload that the\n   * summary shows.\n   */\n  q?: string\n  /**\n   * The queue of one person: what they opened, or what waits for them.\n   *\n   * `actionable` is the rule of the Approve button asked in SQL \u2014 pending,\n   * opened by somebody else, not approved by this person yet, and guarded by\n   * permissions that they hold.\n   */\n  mine?: 'created' | 'actionable'\n} & (\n  | {\n      /**\n       * The kind of entity a request must touch. Read with `entityId`.\n       *\n       * It reads the entity link of control-backend, so it is wider and truer\n       * than `orgId`: a cluster-move request answers for its source\n       * organization, its target organization AND the cluster. The organization\n       * and cluster detail pages of control-frontend ask this.\n       */\n      entityType: ApprovalEntityType\n      /** The id of the entity a request must touch. Read with `entityType`. */\n      entityId: string\n    }\n  | { entityType?: never; entityId?: never }\n)\n\nexport interface ListApprovalsRequest extends RequestBaseParams {\n  params?: ApprovalFacetParams & {\n    status?: ApprovalJobStatus\n    sort?: ApprovalSortField\n    order?: ApprovalSortOrder\n    limit?: number\n    offset?: number\n  }\n}\n\nexport interface CountApprovalsRequest extends RequestBaseParams {\n  params?: ApprovalFacetParams\n}\n\nexport interface ApprovalIdRequest extends RequestBaseParams {\n  params: { id: string }\n}\n\nexport interface RejectApprovalRequest extends RequestBaseParams {\n  params: { id: string; reason: string }\n}\n\n/** A withdrawal says why, or says nothing. The reason is not demanded. */\nexport interface WithdrawApprovalRequest extends RequestBaseParams {\n  params: { id: string; reason?: string }\n}\n\n/** The envelope that every create route of every use case shares. */\nexport interface CreateApprovalRequest<TPayload> extends RequestBaseParams {\n  params: {\n    payload: TPayload\n    reason?: string\n    /** More approvals than the floor of the use case. Never fewer. */\n    requiredAcks?: number\n  }\n}\n\nexport interface SendToExpiredTrialPayloadDto {\n  orgId: string\n  orgName?: string\n}\n\nexport interface ExtendTrialPayloadDto {\n  orgId: string\n  orgName?: string\n  /**\n   * Days of trial counted from the moment the action RUNS.\n   *\n   * Never a date. Accounts holds the new expiry inside a window that it\n   * measures when the call arrives, and under approvals that is days after the\n   * person chose the value. See `use-cases/extend-trial.ts` in\n   * control-backend.\n   */\n  days: number\n}\n\nexport interface MoveClusterOrgPayloadDto {\n  clusterId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  clusterName?: string\n  targetOrgId: string\n  /** A copy, for the same reason as `clusterName`. */\n  targetOrgName?: string\n  // The SOURCE organization is not here on purpose. control-backend resolves it\n  // server-side from the cluster's current owner, so a caller cannot attach the\n  // request to an organization the cluster never belonged to.\n}\n\n/**\n * The query string of a read, with the fields that carry no value dropped.\n *\n * An empty value is not the same as an absent one: `q=` would reach the schema\n * of control-backend, which holds the text at one character and answers 400.\n */\nfunction querySuffix(params: object = {}): string {\n  const query = new URLSearchParams()\n  for (const [key, value] of Object.entries(params)) {\n    if (value !== undefined && value !== '') {\n      query.set(key, String(value))\n    }\n  }\n  return query.size > 0 ? `?${query.toString()}` : ''\n}\n\nfunction contextFor(\n  name: string,\n  url: string,\n  normalizedUrl: string,\n  type: 'get' | 'post',\n  source: string,\n): RequestBaseServiceContext {\n  return {\n    method: {\n      name: `ControlApprovalsService.${name}`,\n      url,\n      normalizedUrl,\n      type,\n    },\n    source,\n    target: { name: 'control', type: 'internal' },\n  }\n}\n\nexport class ControlApprovalsService {\n  /**\n   * The registered privileged actions, with the rules that guard each one.\n   *\n   * A frontend reads this to run the same policy as the service, so it never\n   * holds a copy of the registry. A new use case then needs no frontend\n   * deploy.\n   */\n  public static async listUseCases(\n    params: RequestBaseParams,\n  ): Promise<ApprovalUseCaseDto[]> {\n    const serviceContext = contextFor(\n      'listUseCases',\n      'api/approvals/use-cases',\n      'api/approvals/use-cases',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ useCases: ApprovalUseCaseDto[] }>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.useCases\n  }\n\n  /**\n   * One page of the requests that the caller can read.\n   *\n   * It is not the whole table: control-backend hides a request whose use case\n   * the caller cannot act on, unless the caller opened it.\n   */\n  public static async list(\n    params: ListApprovalsRequest,\n  ): Promise<ApprovalPageDto> {\n    const suffix = querySuffix(params.params)\n    const serviceContext = contextFor(\n      'list',\n      `api/approvals${suffix}`,\n      'api/approvals',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<ApprovalPageDto>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  /**\n   * How many requests each status holds, for the status filters of a queue.\n   *\n   * It is the same question as `list` without the status, so a filter that\n   * shows a number never opens an empty page.\n   */\n  public static async counts(\n    params: CountApprovalsRequest,\n  ): Promise<ApprovalStatusCountsDto> {\n    const suffix = querySuffix(params.params)\n    const serviceContext = contextFor(\n      'counts',\n      `api/approvals/counts${suffix}`,\n      'api/approvals/counts',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ counts: ApprovalStatusCountsDto }>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.counts\n  }\n\n  public static async get(params: ApprovalIdRequest): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'get',\n      `api/approvals/${params.params.id}`,\n      'api/approvals/:id',\n      'get',\n    )\n  }\n\n  /**\n   * What a create route answers, plus whether it opened a NEW request.\n   *\n   * The route answers 201 for a fresh request and 200 for the one already\n   * open for the same target \u2014 `create` deduplicates. A caller that must\n   * tell the two apart (a floor-of-one use case, where 200 is the ordinary\n   * path and not a failure) reads `created`.\n   */\n  public static async createMoveClusterOrg(\n    params: CreateApprovalRequest<MoveClusterOrgPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createMoveClusterOrg',\n      'api/approvals/move-cluster-org',\n    )\n  }\n\n  /**\n   * Opens a cluster bulk operation of one type.\n   *\n   * Each type is its own use case with its own route, because each one has\n   * its own permission. The floor of approvals is the same for every type,\n   * and it depends on the stage: 2 on prod, 1 on dev, int and local. The\n   * route is `api/approvals/<use case>`, as for every other use case. A 200\n   * means that the same operation over the same clusters is already open.\n   */\n  public static async createClusterBulkOperation<\n    T extends ClusterBulkOperationType,\n  >(\n    type: T,\n    params: CreateApprovalRequest<ClusterBulkOperationPayloadDto<T>>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    const useCase = CLUSTER_BULK_OPERATION_RULES[type].useCase\n    return ControlApprovalsService.create(\n      params,\n      'createClusterBulkOperation',\n      `api/approvals/${useCase}`,\n    )\n  }\n\n  /** Adds the approval of the caller. The last one can run the action. */\n  public static async acknowledge(\n    params: ApprovalIdRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'acknowledge',\n      `api/approvals/${params.params.id}/ack`,\n      'api/approvals/:id/ack',\n      'post',\n    )\n  }\n\n  /** Closes a request without running the action. The reason is necessary. */\n  public static async reject(\n    params: RejectApprovalRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'reject',\n      `api/approvals/${params.params.id}/reject`,\n      'api/approvals/:id/reject',\n      'post',\n      { reason: params.params.reason },\n    )\n  }\n\n  /**\n   * Takes back a request. Only the person who opened it can.\n   *\n   * The reason is optional, and it lands in the same field that a rejection\n   * writes. The creator cannot reject their own request, so this is where they\n   * say why they closed it.\n   */\n  public static async withdraw(\n    params: WithdrawApprovalRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'withdraw',\n      `api/approvals/${params.params.id}/withdraw`,\n      'api/approvals/:id/withdraw',\n      'post',\n      params.params.reason ? { reason: params.params.reason } : undefined,\n    )\n  }\n\n  /**\n   * Runs a request that holds its approvals.\n   *\n   * Only a use case in the explicit mode needs this. An action that throws\n   * leaves the request `failed`, and this call still answers 200 with it, so\n   * read `status` and `executionError` of the answer.\n   */\n  public static async execute(\n    params: ApprovalIdRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'execute',\n      `api/approvals/${params.params.id}/execute`,\n      'api/approvals/:id/execute',\n      'post',\n    )\n  }\n\n  /** Opens a send-to-expired-trial request. Any signed-in Camundi can. */\n  public static async createSendToExpiredTrial(\n    params: CreateApprovalRequest<SendToExpiredTrialPayloadDto>,\n  ): Promise<ApprovalJobDto> {\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'createSendToExpiredTrial',\n      'api/approvals/send-to-expired-trial',\n    )\n    return approval\n  }\n\n  /**\n   * Opens an extend-trial request.\n   *\n   * Opening one needs `accounts:admin:extendTrial`, the same permission that\n   * approving needs, and the reason is necessary.\n   */\n  public static async createExtendTrial(\n    params: CreateApprovalRequest<ExtendTrialPayloadDto>,\n  ): Promise<ApprovalJobDto> {\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'createExtendTrial',\n      'api/approvals/extend-trial',\n    )\n    return approval\n  }\n\n  /**\n   * The shared half of every call that answers one request.\n   *\n   * Six routes answer `{ approval }` and differ only in the verb and the path.\n   * One private helper keeps the metrics context, the status check and the\n   * unwrapping in one place.\n   */\n  private static async readOne(\n    params: RequestBaseParams,\n    name: string,\n    url: string,\n    normalizedUrl: string,\n    method: 'get' | 'post',\n    body?: Record<string, unknown>,\n  ): Promise<ApprovalJobDto> {\n    const serviceContext = contextFor(\n      name,\n      url,\n      normalizedUrl,\n      method,\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ approval: ApprovalJobDto }>({\n      config: params.config,\n      base: BASE,\n      url,\n      method,\n      metricsDetails: serviceContext,\n      body,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.approval\n  }\n\n  /**\n   * The shared half of every create route. See `approvalRequestBody`.\n   *\n   * The route answers 201 for a fresh request and 200 for the one already\n   * open for the same target (`create` deduplicates). `created` carries that\n   * difference. `createSendToExpiredTrial` and `createExtendTrial` do not\n   * need it, so they read `approval` alone off this result.\n   */\n  private static async create<TPayload>(\n    params: CreateApprovalRequest<TPayload>,\n    name: string,\n    url: string,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    const serviceContext = contextFor(\n      name,\n      url,\n      url,\n      'post',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ approval: ApprovalJobDto }>({\n      config: params.config,\n      base: BASE,\n      url,\n      method: 'post',\n      metricsDetails: serviceContext,\n      body: {\n        payload: params.params.payload,\n        reason: params.params.reason,\n        requiredAcks: params.params.requiredAcks,\n      },\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return {\n      approval: response.body!.approval,\n      created: response.status === 201,\n    }\n  }\n}\n"],
-  "mappings": "AAiBA,SAAS,oCAAoC;AAK7C,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAe1B,MAAM,OAAO,EAAE,IAAI,UAAU;AAuI7B,SAAS,YAAY,SAAiB,CAAC,GAAW;AAChD,QAAM,QAAQ,IAAI,gBAAgB;AAClC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,UAAU,UAAa,UAAU,IAAI;AACvC,YAAM,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,IAC9B;AAAA,EACF;AACA,SAAO,MAAM,OAAO,IAAI,IAAI,MAAM,SAAS,CAAC,KAAK;AACnD;AAEA,SAAS,WACP,MACA,KACA,eACA,MACA,QAC2B;AAC3B,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,MAAM,2BAA2B,IAAI;AAAA,MACrC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,EAC9C;AACF;AAEO,MAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQnC,aAAoB,aAClB,QAC+B;AAC/B,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAA4C;AAAA,MACjE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,KAClB,QAC0B;AAC1B,UAAM,SAAS,YAAY,OAAO,MAAM;AACxC,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAyB;AAAA,MAC9C,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,OAClB,QACkC;AAClC,UAAM,SAAS,YAAY,OAAO,MAAM;AACxC,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,uBAAuB,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAA6C;AAAA,MAClE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA,EAEA,aAAoB,IAAI,QAAoD;AAC1E,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAoB,qBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,aAAoB,2BAGlB,MACA,QACyD;AACzD,UAAM,UAAU,6BAA6B,IAAI,EAAE;AACnD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,YAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,OAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,OAAO,OAAO,OAAO;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,SAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,OAAO,IAAI;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,QAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,yBAClB,QACyB;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,kBAClB,QACyB;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAqB,QACnB,QACA,MACA,KACA,eACA,QACA,MACyB;AACzB,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAsC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAqB,OACnB,QACA,MACA,KACyD;AACzD,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAsC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,SAAS,OAAO,OAAO;AAAA,QACvB,QAAQ,OAAO,OAAO;AAAA,QACtB,cAAc,OAAO,OAAO;AAAA,MAC9B;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO;AAAA,MACL,UAAU,SAAS,KAAM;AAAA,MACzB,SAAS,SAAS,WAAW;AAAA,IAC/B;AAAA,EACF;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  ApprovalEntityType,\n  ApprovalJobDto,\n  ApprovalJobStatus,\n  ApprovalSortField,\n  ApprovalSortOrder,\n  ApprovalStatusCountsDto,\n  ApprovalUseCaseDto,\n  ClusterBulkOperationPayloadDto,\n  ClusterBulkOperationType,\n} from '@camunda/ccma-shared-types'\nimport { CLUSTER_BULK_OPERATION_RULES } from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\n\n/**\n * The four-eyes approval surface of control-backend.\n *\n * One service for the whole mechanism, and not one for each use case. The\n * generic routes (list, read, approve, reject, withdraw, run) carry no\n * knowledge of a use case, which is what lets one view in control-frontend\n * show every privileged action. Only the create calls are per use case,\n * because a payload can be validated only for the use case it belongs to.\n *\n * A use case that walks its own rollout behind a flag answers 404 on its\n * create route while that flag is off.\n */\n\nconst BASE = { id: 'control' } as const\n\nexport interface ApprovalPageDto {\n  approvals: ApprovalJobDto[]\n  page: {\n    limit: number\n    offset: number\n    /** True when the next page holds more. Never read the length instead. */\n    hasMore: boolean\n  }\n}\n\n/**\n * What narrows the queue. The list and the counts read the same fields.\n *\n * `entityType` and `entityId` are ONE filter, not two. control-backend answers\n * 400 for one without the other, so the type carries both or neither.\n */\nexport type ApprovalFacetParams = {\n  type?: string\n  /**\n   * One organization, matched whole against `orgId` of the payload.\n   *\n   * It reads only the payload, so `entityType`/`entityId` is wider. That filter\n   * reads the entity link, so it finds a request that touches the organization\n   * through another field. The organization page of control-frontend asks the\n   * entity-link filter, not this one. `orgId` is also not `q`: the free text\n   * reads the whole payload as text.\n   */\n  orgId?: string\n  /**\n   * Free text. control-backend matches it in the reason, the person who\n   * opened the request, the action and its label, and the payload that the\n   * summary shows.\n   */\n  q?: string\n  /**\n   * The queue of one person: what they opened, or what waits for them.\n   *\n   * `actionable` is the rule of the Approve button asked in SQL \u2014 pending,\n   * opened by somebody else, not approved by this person yet, and guarded by\n   * permissions that they hold.\n   */\n  mine?: 'created' | 'actionable'\n} & (\n  | {\n      /**\n       * The kind of entity a request must touch. Read with `entityId`.\n       *\n       * It reads the entity link of control-backend, so it is wider and truer\n       * than `orgId`: a cluster-move request answers for its source\n       * organization, its target organization AND the cluster. The organization\n       * and cluster detail pages of control-frontend ask this.\n       */\n      entityType: ApprovalEntityType\n      /** The id of the entity a request must touch. Read with `entityType`. */\n      entityId: string\n    }\n  | { entityType?: never; entityId?: never }\n)\n\nexport interface ListApprovalsRequest extends RequestBaseParams {\n  params?: ApprovalFacetParams & {\n    status?: ApprovalJobStatus\n    sort?: ApprovalSortField\n    order?: ApprovalSortOrder\n    limit?: number\n    offset?: number\n  }\n}\n\nexport interface CountApprovalsRequest extends RequestBaseParams {\n  params?: ApprovalFacetParams\n}\n\nexport interface ApprovalIdRequest extends RequestBaseParams {\n  params: { id: string }\n}\n\nexport interface RejectApprovalRequest extends RequestBaseParams {\n  params: { id: string; reason: string }\n}\n\n/** A withdrawal says why, or says nothing. The reason is not demanded. */\nexport interface WithdrawApprovalRequest extends RequestBaseParams {\n  params: { id: string; reason?: string }\n}\n\n/** The envelope that every create route of every use case shares. */\nexport interface CreateApprovalRequest<TPayload> extends RequestBaseParams {\n  params: {\n    payload: TPayload\n    reason?: string\n    /** More approvals than the floor of the use case. Never fewer. */\n    requiredAcks?: number\n  }\n}\n\nexport interface SendToExpiredTrialPayloadDto {\n  orgId: string\n  orgName?: string\n}\n\nexport interface CreatePersonalOrganisationPayloadDto {\n  /** 3 to 100 characters, after the spaces at both ends are cut. */\n  name: string\n}\n\n/**\n * The create call of `create-personal-organisation`.\n *\n * It has no `requiredAcks`: the request needs no approval, and the route\n * answers 400 to a body that names the field.\n */\nexport interface CreatePersonalOrganisationRequest extends RequestBaseParams {\n  params: {\n    payload: CreatePersonalOrganisationPayloadDto\n    reason?: string\n  }\n}\n\nexport interface CreateCustomerHardwareSizingPayloadDto {\n  /** The organization that gets the plan. The requester must own it. */\n  orgId: string\n  /** 3 to 100 characters, after the spaces at both ends are cut. */\n  name: string\n  /** The cluster plan, in the same format as the plan route of the admin tool. */\n  plan: Record<string, unknown>\n}\n\n/**\n * `unlink` removes the plan from one organization that the requester owns.\n * `delete` removes it from every organization of the requester, and deletes it.\n */\nexport type RemoveCustomerHardwareSizingPayloadDto =\n  | { mode: 'unlink'; clusterPlanId: string; orgId: string }\n  | { mode: 'delete'; clusterPlanId: string }\n\n/**\n * The create call of a customer hardware sizing use case. Like\n * `CreatePersonalOrganisationRequest`, it has no `requiredAcks`.\n */\nexport interface CustomerHardwareSizingRequest<TPayload>\n  extends RequestBaseParams {\n  params: {\n    payload: TPayload\n    reason?: string\n  }\n}\n\nexport interface ExtendTrialPayloadDto {\n  orgId: string\n  orgName?: string\n  /**\n   * Days of trial counted from the moment the action RUNS.\n   *\n   * Never a date. Accounts holds the new expiry inside a window that it\n   * measures when the call arrives, and under approvals that is days after the\n   * person chose the value. See `use-cases/extend-trial.ts` in\n   * control-backend.\n   */\n  days: number\n}\n\nexport interface MoveClusterOrgPayloadDto {\n  clusterId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  clusterName?: string\n  targetOrgId: string\n  /** A copy, for the same reason as `clusterName`. */\n  targetOrgName?: string\n  // The SOURCE organization is not here on purpose. control-backend resolves it\n  // server-side from the cluster's current owner, so a caller cannot attach the\n  // request to an organization the cluster never belonged to.\n}\n\nexport interface ChangePlatformRolesPayloadDto {\n  userId: string\n  /** A copy, so a list shows a person and not an Auth0 id. Nothing reads it. */\n  userEmail?: string\n  /**\n   * A CHANGE, and never the whole set. Accounts applies it over the roles that\n   * the user holds when the action RUNS, so a role change that somebody else\n   * made while the request waited stays.\n   */\n  rolesToAdd: string[]\n  rolesToRemove: string[]\n}\n\nexport interface ChangeOrgLimitsPayloadDto {\n  orgId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  orgName?: string\n  /** One key of `allSalesPlanLimits()`. One limit for each request. */\n  limitKey: string\n  /**\n   * The override that the person who asked READ. Absent for \"not set\".\n   *\n   * Accounts compares it with the override that it holds when the action\n   * runs, and writes nothing when the two differ. See `staleApprovalKeys`.\n   */\n  expected?: string | number | boolean\n  /** The new override. `null` clears it, and the default of the plan applies. */\n  value: string | number | boolean | null\n}\n\nexport interface ChangeClusterPlanTypePayloadDto {\n  clusterId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  clusterName?: string\n  /** The organization that owns the cluster. Console refuses another one. */\n  orgId: string\n  /** A copy, for the same reason as `clusterName`. */\n  orgName?: string\n  toPlanTypeUuid: string\n  /** A copy of the name of the new plan type, for the approver to read. */\n  toPlanTypeName?: string\n  /**\n   * The hardware packages of the cluster after the change, 1 at least.\n   *\n   * Always sent, also for a plan type with no availability class, where it is\n   * 1. Console checks the reservations of the organization only when the\n   * packages are in the call, and the check is the point of this use case.\n   */\n  numberOfAllocatedHwPackages: number\n  /**\n   * The plan type that the person who asked READ.\n   *\n   * Console compares it with the plan type of the cluster when the action\n   * runs, and changes nothing when the two differ.\n   */\n  expectedPlanTypeUuid: string\n  /** A copy of the name of the current plan type, for the approver to read. */\n  expectedPlanTypeName?: string\n  /**\n   * The hardware packages that the person who asked READ, 1 for a cluster\n   * that holds none. The same stale guard as `expectedPlanTypeUuid`.\n   */\n  expectedNumberOfAllocatedHwPackages: number\n  /**\n   * The cluster plan that the person who asked READ. Console decides the\n   * plan move from it, so it is part of the stale guard too, and Console\n   * refuses a cluster that runs none, so a request needs one.\n   */\n  expectedClusterPlanUuid: string\n  /** A copy of the name of that plan, for the approver to read. */\n  expectedClusterPlanName?: string\n  /**\n   * The active modification config that the person who asked READ, absent\n   * when the cluster has none. The change removes it, and an approver must\n   * read which one goes.\n   */\n  expectedActiveModificationConfigUuid?: string\n  /**\n   * The active plan of the NEW plan type that the person who asked READ. The\n   * cluster moves to it, so a plan that a Camundi changed on the type while\n   * the request waited fails the guard, and Console refuses a type that has\n   * none, so a request needs one.\n   */\n  expectedTargetPlanUuid: string\n  /** A copy of the name of that plan, for the approver to read. */\n  expectedTargetPlanName?: string\n  /**\n   * Whether the cluster plan moves to the active plan of the new type, as\n   * the dialog read it. The list of migratable plans can change while the\n   * request waits, and a verdict that moved changes whether the cluster\n   * restarts, so Console refuses a request whose verdict moved.\n   */\n  expectedClusterPlanUpdate: boolean\n}\n\nexport interface ChangeSalesPlanPayloadDto {\n  orgId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  orgName?: string\n  salesPlanId: string\n  /** A copy of the name of the new plan, for the approver to read. */\n  salesPlanName?: string\n  /**\n   * The plan that the person who asked READ. Absent for \"no plan\".\n   *\n   * Accounts compares it with the plan that it holds when the action runs,\n   * and switches nothing when the two differ.\n   */\n  expectedSalesPlanId?: string\n  /** A copy of the name of the current plan, for the approver to read. */\n  expectedSalesPlanName?: string\n  /** Skips the validation of the switch. The approver sees it. */\n  force: boolean\n}\n\n/** Every value of a flag row that a person can change. */\nexport interface FeatureFlagValuesDto {\n  description: string\n  enabled: boolean\n  orgIds: string[]\n  emailDomains: string[]\n  /** The team that owns the flag. A create needs it. An older row has none. */\n  owner?: string\n  /** `YYYY-MM-DD`, the day after which the flag is late. */\n  expiresAt?: string\n  /**\n   * The issue that tracks the flag. A create and an edit need it. An older\n   * row has none.\n   */\n  issueUrl?: string\n}\n\n/**\n * One change of the feature flag table: the action, and the whole row that it\n * asks for.\n *\n * An edit and a delete carry the row that the person who asked READ, as\n * `expected`. The action writes nothing when the row changed in the meantime.\n * `key` of an edit and a delete is a copy for the approver, and the action\n * compares it too.\n */\nexport type ChangeFeatureFlagPayloadDto =\n  | {\n      action: 'create'\n      key: string\n      value: FeatureFlagValuesDto & { owner: string; issueUrl: string }\n    }\n  | {\n      action: 'update'\n      id: string\n      key: string\n      expected: FeatureFlagValuesDto\n      value: FeatureFlagValuesDto & { issueUrl: string }\n    }\n  | {\n      action: 'delete'\n      id: string\n      key: string\n      expected: FeatureFlagValuesDto\n    }\n\nexport interface DeleteSsoConnectionPayloadDto {\n  strategy: 'waad' | 'samlp'\n  connectionId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  connectionName?: string\n  /**\n   * The organizations that the connection serves, as copies for the approver.\n   * The request is findable on the page of each one.\n   */\n  orgIds?: string[]\n}\n\nexport interface DeleteOrganizationPayloadDto {\n  orgId: string\n  /**\n   * The name that the approvers read. Accounts refuses the deletion when the\n   * organization has another name when the action runs.\n   */\n  orgName: string\n}\n\nexport interface DeleteUserPayloadDto {\n  userId: string\n  /**\n   * The address that the approvers read. Accounts refuses the deletion when\n   * the user has another address when the action runs.\n   */\n  userEmail: string\n}\n\nexport interface ChangeUserEmailPayloadDto {\n  userId: string\n  /**\n   * The address that the person who asked READ. Accounts compares it with\n   * the address that the user has when the action runs, and changes nothing\n   * when the two differ.\n   */\n  expectedEmail: string\n  newEmail: string\n}\n\nexport interface PurgeUsersPayloadDto {\n  /**\n   * The users to delete, at most `PURGE_USERS_MAX_USERS`. The address is a\n   * copy for the approver, and accounts refuses a user whose address is not\n   * that copy. A list that came from a file of ids carries none.\n   */\n  users: { userId: string; email?: string }[]\n}\n\nexport interface UpdateUserMetadataPayloadDto {\n  userId: string\n  /** A copy, so a list shows a person and not an Auth0 id. Nothing reads it. */\n  userEmail?: string\n  /** `app` writes `app_metadata`, `user` writes `user_metadata`. */\n  kind: 'app' | 'user'\n  /**\n   * The metadata that the person who asked READ. Absent for \"not set\".\n   * Accounts writes nothing when it holds another value when the action runs.\n   */\n  expected?: Record<string, unknown>\n  metadata: Record<string, unknown>\n}\n\nexport interface DeleteInternalBackupPayloadDto {\n  clusterId: string\n  /** A copy, so a list shows a name that a person knows. Nothing reads it. */\n  clusterName?: string\n  backupName: string\n  /** A copy of the Slack link of the incident, for the approver to read. */\n  incidentLink?: string\n}\n\n/**\n * The query string of a read, with the fields that carry no value dropped.\n *\n * An empty value is not the same as an absent one: `q=` would reach the schema\n * of control-backend, which holds the text at one character and answers 400.\n */\nfunction querySuffix(params: object = {}): string {\n  const query = new URLSearchParams()\n  for (const [key, value] of Object.entries(params)) {\n    if (value !== undefined && value !== '') {\n      query.set(key, String(value))\n    }\n  }\n  return query.size > 0 ? `?${query.toString()}` : ''\n}\n\nfunction contextFor(\n  name: string,\n  url: string,\n  normalizedUrl: string,\n  type: 'get' | 'post',\n  source: string,\n): RequestBaseServiceContext {\n  return {\n    method: {\n      name: `ControlApprovalsService.${name}`,\n      url,\n      normalizedUrl,\n      type,\n    },\n    source,\n    target: { name: 'control', type: 'internal' },\n  }\n}\n\nexport class ControlApprovalsService {\n  /**\n   * The registered privileged actions, with the rules that guard each one.\n   *\n   * A frontend reads this to run the same policy as the service, so it never\n   * holds a copy of the registry. A new use case then needs no frontend\n   * deploy.\n   */\n  public static async listUseCases(\n    params: RequestBaseParams,\n  ): Promise<ApprovalUseCaseDto[]> {\n    const serviceContext = contextFor(\n      'listUseCases',\n      'api/approvals/use-cases',\n      'api/approvals/use-cases',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ useCases: ApprovalUseCaseDto[] }>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.useCases\n  }\n\n  /**\n   * One page of the requests that the caller can read.\n   *\n   * It is not the whole table: control-backend hides a request whose use case\n   * the caller cannot act on, unless the caller opened it.\n   */\n  public static async list(\n    params: ListApprovalsRequest,\n  ): Promise<ApprovalPageDto> {\n    const suffix = querySuffix(params.params)\n    const serviceContext = contextFor(\n      'list',\n      `api/approvals${suffix}`,\n      'api/approvals',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<ApprovalPageDto>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  /**\n   * How many requests each status holds, for the status filters of a queue.\n   *\n   * It is the same question as `list` without the status, so a filter that\n   * shows a number never opens an empty page.\n   */\n  public static async counts(\n    params: CountApprovalsRequest,\n  ): Promise<ApprovalStatusCountsDto> {\n    const suffix = querySuffix(params.params)\n    const serviceContext = contextFor(\n      'counts',\n      `api/approvals/counts${suffix}`,\n      'api/approvals/counts',\n      'get',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ counts: ApprovalStatusCountsDto }>({\n      config: params.config,\n      base: BASE,\n      url: serviceContext.method.url,\n      method: 'get',\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.counts\n  }\n\n  public static async get(params: ApprovalIdRequest): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'get',\n      `api/approvals/${params.params.id}`,\n      'api/approvals/:id',\n      'get',\n    )\n  }\n\n  /**\n   * What a create route answers, plus whether it opened a NEW request.\n   *\n   * The route answers 201 for a fresh request and 200 for the one already\n   * open for the same target \u2014 `create` deduplicates. A caller that must\n   * tell the two apart (a floor-of-one use case, where 200 is the ordinary\n   * path and not a failure) reads `created`.\n   */\n  public static async createMoveClusterOrg(\n    params: CreateApprovalRequest<MoveClusterOrgPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createMoveClusterOrg',\n      'api/approvals/move-cluster-org',\n    )\n  }\n\n  /**\n   * Opens a cluster bulk operation of one type.\n   *\n   * Each type is its own use case with its own route, because each one has\n   * its own permission. The floor of approvals is the same for every type,\n   * and it depends on the stage: 2 on prod, 1 on dev, int and local. The\n   * route is `api/approvals/<use case>`, as for every other use case. A 200\n   * means that the same operation over the same clusters is already open.\n   */\n  public static async createClusterBulkOperation<\n    T extends ClusterBulkOperationType,\n  >(\n    type: T,\n    params: CreateApprovalRequest<ClusterBulkOperationPayloadDto<T>>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    const useCase = CLUSTER_BULK_OPERATION_RULES[type].useCase\n    return ControlApprovalsService.create(\n      params,\n      'createClusterBulkOperation',\n      `api/approvals/${useCase}`,\n    )\n  }\n\n  /**\n   * Opens a change-platform-roles request.\n   *\n   * Opening one needs `accounts:admin:changeRole`, the same permission that\n   * approving needs, and the reason is necessary. A 200 means that a request\n   * for the same user is already open.\n   */\n  public static async createChangePlatformRoles(\n    params: CreateApprovalRequest<ChangePlatformRolesPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangePlatformRoles',\n      'api/approvals/change-platform-roles',\n    )\n  }\n\n  /**\n   * Opens a delete-internal-backup request.\n   *\n   * Opening one needs `console:clusters:canCreateInternalBackup`, the same\n   * permission that approving needs. A 200 means that a request for the same\n   * backup is already open.\n   */\n  public static async createDeleteInternalBackup(\n    params: CreateApprovalRequest<DeleteInternalBackupPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createDeleteInternalBackup',\n      'api/approvals/delete-internal-backup',\n    )\n  }\n\n  /**\n   * Opens a change-org-limits request.\n   *\n   * Opening one needs `accounts:admin:mayChangeOrgLimits`, the same\n   * permission that approving needs. A 200 means that a request for the same\n   * limit of the same organization is already open.\n   */\n  public static async createChangeOrgLimits(\n    params: CreateApprovalRequest<ChangeOrgLimitsPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangeOrgLimits',\n      'api/approvals/change-org-limits',\n    )\n  }\n\n  /**\n   * Opens a delete-sso-connection request.\n   *\n   * Opening one needs `AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_DELETE`, the same\n   * permission that approving needs. A 200 means that a request for the same\n   * connection is already open.\n   */\n  public static async createDeleteSsoConnection(\n    params: CreateApprovalRequest<DeleteSsoConnectionPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createDeleteSsoConnection',\n      'api/approvals/delete-sso-connection',\n    )\n  }\n\n  /**\n   * Opens a change-sales-plan request.\n   *\n   * Opening one needs `AccountsPermissions.SALES_PLAN_SWITCH`, the same\n   * permission that approving needs. A 200 means that a request for the same\n   * organization is already open.\n   */\n  public static async createChangeSalesPlan(\n    params: CreateApprovalRequest<ChangeSalesPlanPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangeSalesPlan',\n      'api/approvals/change-sales-plan',\n    )\n  }\n\n  /**\n   * Opens a change-cluster-plan-type request.\n   *\n   * Opening one needs `ConsolePermissions.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE`,\n   * the same permission that approving needs. A 200 means that a request for\n   * the same cluster is already open. The route answers 404 while\n   * `control.changeClusterPlanType` is off.\n   */\n  public static async createChangeClusterPlanType(\n    params: CreateApprovalRequest<ChangeClusterPlanTypePayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangeClusterPlanType',\n      'api/approvals/change-cluster-plan-type',\n    )\n  }\n\n  /**\n   * Opens a delete-organization request.\n   *\n   * Opening one needs `AccountsPermissions.DELETE_ORG`, the same permission\n   * that approving needs. A 200 means that a request for the same\n   * organization is already open.\n   */\n  public static async createDeleteOrganization(\n    params: CreateApprovalRequest<DeleteOrganizationPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createDeleteOrganization',\n      'api/approvals/delete-organization',\n    )\n  }\n\n  /**\n   * Opens a delete-user request.\n   *\n   * Opening one needs `AccountsPermissions.DELETE_USER`, the same permission\n   * that approving needs. A 200 means that a request for the same user is\n   * already open.\n   */\n  public static async createDeleteUser(\n    params: CreateApprovalRequest<DeleteUserPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createDeleteUser',\n      'api/approvals/delete-user',\n    )\n  }\n\n  /**\n   * Opens a change-user-email request.\n   *\n   * Opening one needs `AccountsPermissions.ADMIN_CHANGE_EMAIL`, the same\n   * permission that approving needs. A 200 means that a request for the same\n   * user is already open.\n   */\n  public static async createChangeUserEmail(\n    params: CreateApprovalRequest<ChangeUserEmailPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangeUserEmail',\n      'api/approvals/change-user-email',\n    )\n  }\n\n  /**\n   * Opens a purge-users request.\n   *\n   * Opening one needs `AccountsPermissions.GOD_PURGE_USERS` and\n   * `AccountsPermissions.DELETE_USER`, the same permissions that approving\n   * needs. A 200 means that a request for the same set of users is already\n   * open.\n   */\n  public static async createPurgeUsers(\n    params: CreateApprovalRequest<PurgeUsersPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createPurgeUsers',\n      'api/approvals/purge-users',\n    )\n  }\n\n  /**\n   * Opens an update-user-metadata request.\n   *\n   * Opening one needs `AccountsPermissions.GOD_UPDATE_USER_METADATA`, the\n   * same permission that approving needs. A 200 means that a request for the\n   * same user and the same kind of metadata is already open.\n   */\n  public static async createUpdateUserMetadata(\n    params: CreateApprovalRequest<UpdateUserMetadataPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createUpdateUserMetadata',\n      'api/approvals/update-user-metadata',\n    )\n  }\n\n  /**\n   * Opens a change-feature-flag request.\n   *\n   * Opening one needs `aafw`, the same permission that approving needs. A 200\n   * means that a request for the same flag is already open. On int this is\n   * the only way to change a flag.\n   */\n  public static async createChangeFeatureFlag(\n    params: CreateApprovalRequest<ChangeFeatureFlagPayloadDto>,\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    return ControlApprovalsService.create(\n      params,\n      'createChangeFeatureFlag',\n      'api/approvals/change-feature-flag',\n    )\n  }\n\n  /** Adds the approval of the caller. The last one can run the action. */\n  public static async acknowledge(\n    params: ApprovalIdRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'acknowledge',\n      `api/approvals/${params.params.id}/ack`,\n      'api/approvals/:id/ack',\n      'post',\n    )\n  }\n\n  /** Closes a request without running the action. The reason is necessary. */\n  public static async reject(\n    params: RejectApprovalRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'reject',\n      `api/approvals/${params.params.id}/reject`,\n      'api/approvals/:id/reject',\n      'post',\n      { reason: params.params.reason },\n    )\n  }\n\n  /**\n   * Takes back a request. Only the person who opened it can.\n   *\n   * The reason is optional, and it lands in the same field that a rejection\n   * writes. The creator cannot reject their own request, so this is where they\n   * say why they closed it.\n   */\n  public static async withdraw(\n    params: WithdrawApprovalRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'withdraw',\n      `api/approvals/${params.params.id}/withdraw`,\n      'api/approvals/:id/withdraw',\n      'post',\n      params.params.reason ? { reason: params.params.reason } : undefined,\n    )\n  }\n\n  /**\n   * Runs a request that holds its approvals.\n   *\n   * Only a use case in the explicit mode needs this. An action that throws\n   * leaves the request `failed`, and this call still answers 200 with it, so\n   * read `status` and `executionError` of the answer.\n   */\n  public static async execute(\n    params: ApprovalIdRequest,\n  ): Promise<ApprovalJobDto> {\n    return ControlApprovalsService.readOne(\n      params,\n      'execute',\n      `api/approvals/${params.params.id}/execute`,\n      'api/approvals/:id/execute',\n      'post',\n    )\n  }\n\n  /** Opens a send-to-expired-trial request. Any signed-in Camundi can. */\n  public static async createSendToExpiredTrial(\n    params: CreateApprovalRequest<SendToExpiredTrialPayloadDto>,\n  ): Promise<ApprovalJobDto> {\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'createSendToExpiredTrial',\n      'api/approvals/send-to-expired-trial',\n    )\n    return approval\n  }\n\n  /**\n   * Opens an extend-trial request.\n   *\n   * Opening one needs `accounts:admin:extendTrial`, the same permission that\n   * approving needs, and the reason is necessary.\n   */\n  public static async createExtendTrial(\n    params: CreateApprovalRequest<ExtendTrialPayloadDto>,\n  ): Promise<ApprovalJobDto> {\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'createExtendTrial',\n      'api/approvals/extend-trial',\n    )\n    return approval\n  }\n\n  /**\n   * Opens a create-personal-organisation request. Any signed-in Camundi can.\n   *\n   * The request needs no approval, so the answer already holds the outcome,\n   * and the route answers 404 while `control.personalOrganisation` is off.\n   */\n  public static async createPersonalOrganisation(\n    params: CreatePersonalOrganisationRequest,\n  ): Promise<ApprovalJobDto> {\n    // The route answers 429 for the cap, and the cap does not go away. `request`\n    // tries a 429 up to 8 times with growing waits, so a person at the cap\n    // would wait minutes for the message. A rate limit of the service is a\n    // retry that the person can press.\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'createPersonalOrganisation',\n      'api/approvals/create-personal-organisation',\n      { retryRateLimit: false },\n    )\n    return approval\n  }\n\n  /**\n   * Opens a create-customer-hardware-sizing request. Any signed-in Camundi\n   * can. It runs on dev only, needs no approval, and the route answers 404\n   * while `control.customerHardwareSizing` is off.\n   */\n  public static async createCustomerHardwareSizing(\n    params: CustomerHardwareSizingRequest<CreateCustomerHardwareSizingPayloadDto>,\n  ): Promise<ApprovalJobDto> {\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'createCustomerHardwareSizing',\n      'api/approvals/create-customer-hardware-sizing',\n    )\n    return approval\n  }\n\n  /** Opens a remove-customer-hardware-sizing request. See the one above. */\n  public static async removeCustomerHardwareSizing(\n    params: CustomerHardwareSizingRequest<RemoveCustomerHardwareSizingPayloadDto>,\n  ): Promise<ApprovalJobDto> {\n    const { approval } = await ControlApprovalsService.create(\n      params,\n      'removeCustomerHardwareSizing',\n      'api/approvals/remove-customer-hardware-sizing',\n    )\n    return approval\n  }\n\n  /**\n   * The shared half of every call that answers one request.\n   *\n   * Six routes answer `{ approval }` and differ only in the verb and the path.\n   * One private helper keeps the metrics context, the status check and the\n   * unwrapping in one place.\n   */\n  private static async readOne(\n    params: RequestBaseParams,\n    name: string,\n    url: string,\n    normalizedUrl: string,\n    method: 'get' | 'post',\n    body?: Record<string, unknown>,\n  ): Promise<ApprovalJobDto> {\n    const serviceContext = contextFor(\n      name,\n      url,\n      normalizedUrl,\n      method,\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ approval: ApprovalJobDto }>({\n      config: params.config,\n      base: BASE,\n      url,\n      method,\n      metricsDetails: serviceContext,\n      body,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!.approval\n  }\n\n  /**\n   * The shared half of every create route. See `approvalRequestBody`.\n   *\n   * The route answers 201 for a fresh request and 200 for the one already\n   * open for the same target (`create` deduplicates). `created` carries that\n   * difference. `createSendToExpiredTrial` and `createExtendTrial` do not\n   * need it, so they read `approval` alone off this result.\n   */\n  private static async create<TPayload>(\n    params: CreateApprovalRequest<TPayload>,\n    name: string,\n    url: string,\n    options: {\n      /** False sends the call once, also when the answer is a 429. */\n      retryRateLimit?: boolean\n    } = {},\n  ): Promise<{ approval: ApprovalJobDto; created: boolean }> {\n    const serviceContext = contextFor(\n      name,\n      url,\n      url,\n      'post',\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<{ approval: ApprovalJobDto }>({\n      config: params.config,\n      base: BASE,\n      url,\n      method: 'post',\n      metricsDetails: serviceContext,\n      ...(options.retryRateLimit === false\n        ? { retry: { attempts: 1, remaining: 0 } }\n        : {}),\n      body: {\n        payload: params.params.payload,\n        reason: params.params.reason,\n        requiredAcks: params.params.requiredAcks,\n      },\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return {\n      approval: response.body!.approval,\n      created: response.status === 201,\n    }\n  }\n}\n"],
+  "mappings": "AAiBA,SAAS,oCAAoC;AAK7C,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAe1B,MAAM,OAAO,EAAE,IAAI,UAAU;AAga7B,SAAS,YAAY,SAAiB,CAAC,GAAW;AAChD,QAAM,QAAQ,IAAI,gBAAgB;AAClC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,UAAU,UAAa,UAAU,IAAI;AACvC,YAAM,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,IAC9B;AAAA,EACF;AACA,SAAO,MAAM,OAAO,IAAI,IAAI,MAAM,SAAS,CAAC,KAAK;AACnD;AAEA,SAAS,WACP,MACA,KACA,eACA,MACA,QAC2B;AAC3B,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,MAAM,2BAA2B,IAAI;AAAA,MACrC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,EAC9C;AACF;AAEO,MAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQnC,aAAoB,aAClB,QAC+B;AAC/B,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAA4C;AAAA,MACjE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,KAClB,QAC0B;AAC1B,UAAM,SAAS,YAAY,OAAO,MAAM;AACxC,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAyB;AAAA,MAC9C,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,OAClB,QACkC;AAClC,UAAM,SAAS,YAAY,OAAO,MAAM;AACxC,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA,uBAAuB,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAA6C;AAAA,MAClE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA,EAEA,aAAoB,IAAI,QAAoD;AAC1E,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAoB,qBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,aAAoB,2BAGlB,MACA,QACyD;AACzD,UAAM,UAAU,6BAA6B,IAAI,EAAE;AACnD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,0BAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,2BAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,sBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,0BAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,sBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAoB,4BAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,yBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,iBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,sBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAoB,iBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,yBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,wBAClB,QACyD;AACzD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,YAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,OAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,OAAO,OAAO,OAAO;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,SAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,OAAO,IAAI;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,QAClB,QACyB;AACzB,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,OAAO,EAAE;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,yBAClB,QACyB;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,kBAClB,QACyB;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,2BAClB,QACyB;AAKzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,gBAAgB,MAAM;AAAA,IAC1B;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,6BAClB,QACyB;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,aAAoB,6BAClB,QACyB;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAqB,QACnB,QACA,MACA,KACA,eACA,QACA,MACyB;AACzB,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAsC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,KAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAqB,OACnB,QACA,MACA,KACA,UAGI,CAAC,GACoD;AACzD,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAsC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,GAAI,QAAQ,mBAAmB,QAC3B,EAAE,OAAO,EAAE,UAAU,GAAG,WAAW,EAAE,EAAE,IACvC,CAAC;AAAA,MACL,MAAM;AAAA,QACJ,SAAS,OAAO,OAAO;AAAA,QACvB,QAAQ,OAAO,OAAO;AAAA,QACtB,cAAc,OAAO,OAAO;AAAA,MAC9B;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO;AAAA,MACL,UAAU,SAAS,KAAM;AAAA,MACzB,SAAS,SAAS,WAAW;AAAA,IAC/B;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/services/control/control.approvals.service.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/services/control/control.dashboards.service.d.ts

@@ -0,0 +1,76 @@
+import type { ChartQueryCheck, DashboardCatalogue, DashboardDefinition, DashboardDto, DashboardListDto, DashboardNewTile } from '@camunda/ccma-shared-types';
+import type { RequestBaseParams } from '../../types/general.types.js';
+export interface ListDashboardsRequest extends RequestBaseParams {
+    params?: {
+        archived?: boolean;
+        limit?: number;
+        offset?: number;
+    };
+}
+export interface DashboardIdRequest extends RequestBaseParams {
+    params: {
+        id: string;
+    };
+}
+export interface CreateDashboardRequest extends RequestBaseParams {
+    params: {
+        title: string;
+        definition?: DashboardDefinition;
+    };
+}
+export interface UpdateDashboardRequest extends RequestBaseParams {
+    params: {
+        id: string;
+        title: string;
+        definition: DashboardDefinition;
+        /**
+         * The `version` of the read that the edit started from. The backend
+         * answers 409 when the row moved on, so a stale tab never replaces a
+         * newer save.
+         */
+        version: number;
+    };
+}
+export interface AddDashboardTileRequest extends RequestBaseParams {
+    params: {
+        id: string;
+        tile: DashboardNewTile;
+    };
+}
+export interface CheckChartQueryRequest extends RequestBaseParams {
+    params: {
+        query: string;
+    };
+}
+export declare class ControlDashboardsService {
+    /**
+     * What a dashboard definition can hold on this stage: the kinds of tiles,
+     * the cards, the chart metrics and the limits. The chart metrics are empty
+     * where `control.dashboardCharts` is off.
+     */
+    static catalogue(params: RequestBaseParams): Promise<DashboardCatalogue>;
+    /**
+     * Checks a chart query and gives the spec of a chart tile. A query with a
+     * mistake is an answer with `valid: false`, and not a failure. Answers 404
+     * where `control.dashboardCharts` is off.
+     */
+    static checkChartQuery(params: CheckChartQueryRequest): Promise<ChartQueryCheck>;
+    /** One page of the live or the archived dashboards, with no tiles. */
+    static list(params: ListDashboardsRequest): Promise<DashboardListDto>;
+    static get(params: DashboardIdRequest): Promise<DashboardDto>;
+    static create(params: CreateDashboardRequest): Promise<DashboardDto>;
+    /** Saves the title and the tiles. Answers 409 for a stale `version`. */
+    static update(params: UpdateDashboardRequest): Promise<DashboardDto>;
+    /**
+     * Adds a tile after the last tile: to the right of the last row when it
+     * fits there, else under every tile. It needs no version.
+     */
+    static addTile(params: AddDashboardTileRequest): Promise<DashboardDto>;
+    static archive(params: DashboardIdRequest): Promise<DashboardDto>;
+    static restore(params: DashboardIdRequest): Promise<DashboardDto>;
+    /** Pins the dashboard for the caller alone. */
+    static pin(params: DashboardIdRequest): Promise<void>;
+    static unpin(params: DashboardIdRequest): Promise<void>;
+    private static action;
+    private static send;
+}

package/dist/services/control/control.dashboards.service.js

@@ -0,0 +1,180 @@
+import { request } from "../../utils/api.js";
+import { HttpError } from "../../utils/errors.js";
+const BASE = { id: "control" };
+function contextFor(name, url, normalizedUrl, type, source) {
+  return {
+    method: {
+      name: `ControlDashboardsService.${name}`,
+      url,
+      normalizedUrl,
+      type
+    },
+    source,
+    target: { name: "control", type: "internal" }
+  };
+}
+function queryOf(params = {}) {
+  const query = new URLSearchParams();
+  for (const [key, value] of Object.entries(params)) {
+    if (value !== void 0) {
+      query.set(key, String(value));
+    }
+  }
+  return query.size > 0 ? `?${query.toString()}` : "";
+}
+class ControlDashboardsService {
+  /**
+   * What a dashboard definition can hold on this stage: the kinds of tiles,
+   * the cards, the chart metrics and the limits. The chart metrics are empty
+   * where `control.dashboardCharts` is off.
+   */
+  static async catalogue(params) {
+    return ControlDashboardsService.send(
+      params,
+      "catalogue",
+      "api/dashboards/catalogue",
+      "api/dashboards/catalogue",
+      "get"
+    );
+  }
+  /**
+   * Checks a chart query and gives the spec of a chart tile. A query with a
+   * mistake is an answer with `valid: false`, and not a failure. Answers 404
+   * where `control.dashboardCharts` is off.
+   */
+  static async checkChartQuery(params) {
+    return ControlDashboardsService.send(
+      params,
+      "checkChartQuery",
+      "api/dashboards/chart-queries/check",
+      "api/dashboards/chart-queries/check",
+      "post",
+      { query: params.params.query }
+    );
+  }
+  /** One page of the live or the archived dashboards, with no tiles. */
+  static async list(params) {
+    const url = `api/dashboards${queryOf(params.params)}`;
+    return ControlDashboardsService.send(
+      params,
+      "list",
+      url,
+      "api/dashboards",
+      "get"
+    );
+  }
+  static async get(params) {
+    const { dashboard } = await ControlDashboardsService.send(
+      params,
+      "get",
+      `api/dashboards/${params.params.id}`,
+      "api/dashboards/:id",
+      "get"
+    );
+    return dashboard;
+  }
+  static async create(params) {
+    const { dashboard } = await ControlDashboardsService.send(
+      params,
+      "create",
+      "api/dashboards",
+      "api/dashboards",
+      "post",
+      params.params
+    );
+    return dashboard;
+  }
+  /** Saves the title and the tiles. Answers 409 for a stale `version`. */
+  static async update(params) {
+    const { id, ...body } = params.params;
+    const { dashboard } = await ControlDashboardsService.send(
+      params,
+      "update",
+      `api/dashboards/${id}`,
+      "api/dashboards/:id",
+      "put",
+      body
+    );
+    return dashboard;
+  }
+  /**
+   * Adds a tile after the last tile: to the right of the last row when it
+   * fits there, else under every tile. It needs no version.
+   */
+  static async addTile(params) {
+    const { dashboard } = await ControlDashboardsService.send(
+      params,
+      "addTile",
+      `api/dashboards/${params.params.id}/tiles`,
+      "api/dashboards/:id/tiles",
+      "post",
+      { tile: params.params.tile }
+    );
+    return dashboard;
+  }
+  static async archive(params) {
+    return ControlDashboardsService.action(params, "archive");
+  }
+  static async restore(params) {
+    return ControlDashboardsService.action(params, "restore");
+  }
+  /** Pins the dashboard for the caller alone. */
+  static async pin(params) {
+    await ControlDashboardsService.send(
+      params,
+      "pin",
+      `api/dashboards/${params.params.id}/pin`,
+      "api/dashboards/:id/pin",
+      "post"
+    );
+  }
+  static async unpin(params) {
+    await ControlDashboardsService.send(
+      params,
+      "unpin",
+      `api/dashboards/${params.params.id}/pin`,
+      "api/dashboards/:id/pin",
+      "delete"
+    );
+  }
+  static async action(params, name) {
+    const { dashboard } = await ControlDashboardsService.send(
+      params,
+      name,
+      `api/dashboards/${params.params.id}/${name}`,
+      `api/dashboards/:id/${name}`,
+      "post"
+    );
+    return dashboard;
+  }
+  static async send(params, name, url, normalizedUrl, method, body) {
+    const serviceContext = contextFor(
+      name,
+      url,
+      normalizedUrl,
+      method,
+      params.config.metrics?.source || "unset"
+    );
+    const response = await request({
+      ...params,
+      config: params.config,
+      base: BASE,
+      url,
+      method,
+      metricsDetails: serviceContext,
+      body
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    return response.body;
+  }
+}
+export {
+  ControlDashboardsService
+};
+//# sourceMappingURL=control.dashboards.service.js.map

package/dist/services/control/control.dashboards.service.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/services/control/control.dashboards.service.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  ChartQueryCheck,\n  DashboardCatalogue,\n  DashboardDefinition,\n  DashboardDto,\n  DashboardListDto,\n  DashboardNewTile,\n} from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseMethodType,\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\n\n/**\n * The dashboards of control-backend. A tile holds the filters of a page and\n * never its data, so the client runs each tile itself.\n *\n * Every route answers 404 while the feature flag `control.dashboards` is off\n * on the stage. The chart check answers 404 while `control.dashboardCharts` is\n * off too.\n */\n\nconst BASE = { id: 'control' } as const\n\nexport interface ListDashboardsRequest extends RequestBaseParams {\n  params?: { archived?: boolean; limit?: number; offset?: number }\n}\n\nexport interface DashboardIdRequest extends RequestBaseParams {\n  params: { id: string }\n}\n\nexport interface CreateDashboardRequest extends RequestBaseParams {\n  params: { title: string; definition?: DashboardDefinition }\n}\n\nexport interface UpdateDashboardRequest extends RequestBaseParams {\n  params: {\n    id: string\n    title: string\n    definition: DashboardDefinition\n    /**\n     * The `version` of the read that the edit started from. The backend\n     * answers 409 when the row moved on, so a stale tab never replaces a\n     * newer save.\n     */\n    version: number\n  }\n}\n\nexport interface AddDashboardTileRequest extends RequestBaseParams {\n  params: { id: string; tile: DashboardNewTile }\n}\n\nexport interface CheckChartQueryRequest extends RequestBaseParams {\n  params: { query: string }\n}\n\nfunction contextFor(\n  name: string,\n  url: string,\n  normalizedUrl: string,\n  type: RequestBaseMethodType,\n  source: string,\n): RequestBaseServiceContext {\n  return {\n    method: {\n      name: `ControlDashboardsService.${name}`,\n      url,\n      normalizedUrl,\n      type,\n    },\n    source,\n    target: { name: 'control', type: 'internal' },\n  }\n}\n\nfunction queryOf(params: Record<string, unknown> = {}): string {\n  const query = new URLSearchParams()\n  for (const [key, value] of Object.entries(params)) {\n    if (value !== undefined) {\n      query.set(key, String(value))\n    }\n  }\n  return query.size > 0 ? `?${query.toString()}` : ''\n}\n\nexport class ControlDashboardsService {\n  /**\n   * What a dashboard definition can hold on this stage: the kinds of tiles,\n   * the cards, the chart metrics and the limits. The chart metrics are empty\n   * where `control.dashboardCharts` is off.\n   */\n  public static async catalogue(\n    params: RequestBaseParams,\n  ): Promise<DashboardCatalogue> {\n    return ControlDashboardsService.send<DashboardCatalogue>(\n      params,\n      'catalogue',\n      'api/dashboards/catalogue',\n      'api/dashboards/catalogue',\n      'get',\n    )\n  }\n\n  /**\n   * Checks a chart query and gives the spec of a chart tile. A query with a\n   * mistake is an answer with `valid: false`, and not a failure. Answers 404\n   * where `control.dashboardCharts` is off.\n   */\n  public static async checkChartQuery(\n    params: CheckChartQueryRequest,\n  ): Promise<ChartQueryCheck> {\n    return ControlDashboardsService.send<ChartQueryCheck>(\n      params,\n      'checkChartQuery',\n      'api/dashboards/chart-queries/check',\n      'api/dashboards/chart-queries/check',\n      'post',\n      { query: params.params.query },\n    )\n  }\n\n  /** One page of the live or the archived dashboards, with no tiles. */\n  public static async list(\n    params: ListDashboardsRequest,\n  ): Promise<DashboardListDto> {\n    const url = `api/dashboards${queryOf(params.params)}`\n    return ControlDashboardsService.send<DashboardListDto>(\n      params,\n      'list',\n      url,\n      'api/dashboards',\n      'get',\n    )\n  }\n\n  public static async get(params: DashboardIdRequest): Promise<DashboardDto> {\n    const { dashboard } = await ControlDashboardsService.send<{\n      dashboard: DashboardDto\n    }>(\n      params,\n      'get',\n      `api/dashboards/${params.params.id}`,\n      'api/dashboards/:id',\n      'get',\n    )\n    return dashboard\n  }\n\n  public static async create(\n    params: CreateDashboardRequest,\n  ): Promise<DashboardDto> {\n    const { dashboard } = await ControlDashboardsService.send<{\n      dashboard: DashboardDto\n    }>(\n      params,\n      'create',\n      'api/dashboards',\n      'api/dashboards',\n      'post',\n      params.params,\n    )\n    return dashboard\n  }\n\n  /** Saves the title and the tiles. Answers 409 for a stale `version`. */\n  public static async update(\n    params: UpdateDashboardRequest,\n  ): Promise<DashboardDto> {\n    const { id, ...body } = params.params\n    const { dashboard } = await ControlDashboardsService.send<{\n      dashboard: DashboardDto\n    }>(\n      params,\n      'update',\n      `api/dashboards/${id}`,\n      'api/dashboards/:id',\n      'put',\n      body,\n    )\n    return dashboard\n  }\n\n  /**\n   * Adds a tile after the last tile: to the right of the last row when it\n   * fits there, else under every tile. It needs no version.\n   */\n  public static async addTile(\n    params: AddDashboardTileRequest,\n  ): Promise<DashboardDto> {\n    const { dashboard } = await ControlDashboardsService.send<{\n      dashboard: DashboardDto\n    }>(\n      params,\n      'addTile',\n      `api/dashboards/${params.params.id}/tiles`,\n      'api/dashboards/:id/tiles',\n      'post',\n      { tile: params.params.tile },\n    )\n    return dashboard\n  }\n\n  public static async archive(\n    params: DashboardIdRequest,\n  ): Promise<DashboardDto> {\n    return ControlDashboardsService.action(params, 'archive')\n  }\n\n  public static async restore(\n    params: DashboardIdRequest,\n  ): Promise<DashboardDto> {\n    return ControlDashboardsService.action(params, 'restore')\n  }\n\n  /** Pins the dashboard for the caller alone. */\n  public static async pin(params: DashboardIdRequest): Promise<void> {\n    await ControlDashboardsService.send<undefined>(\n      params,\n      'pin',\n      `api/dashboards/${params.params.id}/pin`,\n      'api/dashboards/:id/pin',\n      'post',\n    )\n  }\n\n  public static async unpin(params: DashboardIdRequest): Promise<void> {\n    await ControlDashboardsService.send<undefined>(\n      params,\n      'unpin',\n      `api/dashboards/${params.params.id}/pin`,\n      'api/dashboards/:id/pin',\n      'delete',\n    )\n  }\n\n  private static async action(\n    params: DashboardIdRequest,\n    name: 'archive' | 'restore',\n  ): Promise<DashboardDto> {\n    const { dashboard } = await ControlDashboardsService.send<{\n      dashboard: DashboardDto\n    }>(\n      params,\n      name,\n      `api/dashboards/${params.params.id}/${name}`,\n      `api/dashboards/:id/${name}`,\n      'post',\n    )\n    return dashboard\n  }\n\n  private static async send<TResponse>(\n    params: RequestBaseParams,\n    name: string,\n    url: string,\n    normalizedUrl: string,\n    method: RequestBaseMethodType,\n    body?: object,\n  ): Promise<TResponse> {\n    const serviceContext = contextFor(\n      name,\n      url,\n      normalizedUrl,\n      method,\n      params.config.metrics?.source || 'unset',\n    )\n    const response = await request<TResponse>({\n      ...params,\n      config: params.config,\n      base: BASE,\n      url,\n      method,\n      metricsDetails: serviceContext,\n      body,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    // `pin` and `unpin` answer 204 with no body, and their callers read\n    // nothing.\n    return response.body as TResponse\n  }\n}\n"],
+  "mappings": "AAmBA,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAW1B,MAAM,OAAO,EAAE,IAAI,UAAU;AAoC7B,SAAS,WACP,MACA,KACA,eACA,MACA,QAC2B;AAC3B,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,MAAM,4BAA4B,IAAI;AAAA,MACtC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,EAC9C;AACF;AAEA,SAAS,QAAQ,SAAkC,CAAC,GAAW;AAC7D,QAAM,QAAQ,IAAI,gBAAgB;AAClC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,UAAU,QAAW;AACvB,YAAM,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,IAC9B;AAAA,EACF;AACA,SAAO,MAAM,OAAO,IAAI,IAAI,MAAM,SAAS,CAAC,KAAK;AACnD;AAEO,MAAM,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpC,aAAoB,UAClB,QAC6B;AAC7B,WAAO,yBAAyB;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,gBAClB,QAC0B;AAC1B,WAAO,yBAAyB;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,OAAO,OAAO,MAAM;AAAA,IAC/B;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,KAClB,QAC2B;AAC3B,UAAM,MAAM,iBAAiB,QAAQ,OAAO,MAAM,CAAC;AACnD,WAAO,yBAAyB;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,IAAI,QAAmD;AACzE,UAAM,EAAE,UAAU,IAAI,MAAM,yBAAyB;AAAA,MAGnD;AAAA,MACA;AAAA,MACA,kBAAkB,OAAO,OAAO,EAAE;AAAA,MAClC;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,aAAoB,OAClB,QACuB;AACvB,UAAM,EAAE,UAAU,IAAI,MAAM,yBAAyB;AAAA,MAGnD;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,aAAoB,OAClB,QACuB;AACvB,UAAM,EAAE,IAAI,GAAG,KAAK,IAAI,OAAO;AAC/B,UAAM,EAAE,UAAU,IAAI,MAAM,yBAAyB;AAAA,MAGnD;AAAA,MACA;AAAA,MACA,kBAAkB,EAAE;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,QAClB,QACuB;AACvB,UAAM,EAAE,UAAU,IAAI,MAAM,yBAAyB;AAAA,MAGnD;AAAA,MACA;AAAA,MACA,kBAAkB,OAAO,OAAO,EAAE;AAAA,MAClC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,OAAO,OAAO,KAAK;AAAA,IAC7B;AACA,WAAO;AAAA,EACT;AAAA,EAEA,aAAoB,QAClB,QACuB;AACvB,WAAO,yBAAyB,OAAO,QAAQ,SAAS;AAAA,EAC1D;AAAA,EAEA,aAAoB,QAClB,QACuB;AACvB,WAAO,yBAAyB,OAAO,QAAQ,SAAS;AAAA,EAC1D;AAAA;AAAA,EAGA,aAAoB,IAAI,QAA2C;AACjE,UAAM,yBAAyB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,kBAAkB,OAAO,OAAO,EAAE;AAAA,MAClC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,MAAM,QAA2C;AACnE,UAAM,yBAAyB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,kBAAkB,OAAO,OAAO,EAAE;AAAA,MAClC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAqB,OACnB,QACA,MACuB;AACvB,UAAM,EAAE,UAAU,IAAI,MAAM,yBAAyB;AAAA,MAGnD;AAAA,MACA;AAAA,MACA,kBAAkB,OAAO,OAAO,EAAE,IAAI,IAAI;AAAA,MAC1C,sBAAsB,IAAI;AAAA,MAC1B;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,aAAqB,KACnB,QACA,MACA,KACA,eACA,QACA,MACoB;AACpB,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,OAAO,SAAS,UAAU;AAAA,IACnC;AACA,UAAM,WAAW,MAAM,QAAmB;AAAA,MACxC,GAAG;AAAA,MACH,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAGA,WAAO,SAAS;AAAA,EAClB;AACF;",
+  "names": []
+}

package/dist/services/control/control.dashboards.service.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/services/control/control.feature-flags.service.d.ts

@@ -0,0 +1,53 @@
+import type { CreateFeatureFlagDto, FeatureFlagAnswer, FeatureFlagDto, FeatureFlagListDto, UpdateFeatureFlagDto } from '@camunda/ccma-shared-types';
+import type { RequestBaseParams } from '../../types/general.types.js';
+/**
+ * How long `evaluate` waits, unless the caller gives its own `timeout`. A
+ * frontend waits for the first answer before its first page, thus a
+ * control-backend that does not answer must not hold the loading screen.
+ */
+export declare const EVALUATE_TIMEOUT_MS = 3000;
+export interface CreateFeatureFlagRequest extends RequestBaseParams {
+    params: CreateFeatureFlagDto;
+}
+export interface UpdateFeatureFlagRequest extends RequestBaseParams {
+    params: {
+        id: string;
+    } & UpdateFeatureFlagDto;
+}
+export interface FeatureFlagIdRequest extends RequestBaseParams {
+    params: {
+        id: string;
+    };
+}
+export interface EvaluateFeatureFlagsRequest extends RequestBaseParams {
+    /** The org of the caller. It must be in the org claim of the token. */
+    params: {
+        orgId?: string;
+    };
+}
+export declare class ControlFeatureFlagsService {
+    /** Every row of the stage, by key. Needs `READ_ALL`. */
+    static list(params: RequestBaseParams): Promise<FeatureFlagDto[]>;
+    /**
+     * The rows, and the versions of the table and of the Redis key. The page of
+     * Control compares the two, and warns while the other services read the
+     * rows before. Needs `READ_ALL`.
+     */
+    static listWithVersions(params: RequestBaseParams): Promise<FeatureFlagListDto>;
+    static create(params: CreateFeatureFlagRequest): Promise<FeatureFlagDto>;
+    /** A field that the request does not hold stays as it is. */
+    static update(params: UpdateFeatureFlagRequest): Promise<FeatureFlagDto>;
+    static remove(params: FeatureFlagIdRequest): Promise<void>;
+    /**
+     * The flags of the caller of the token. Needs a valid token and no
+     * permission. The email comes from the token alone.
+     *
+     * A 429 is NOT tried again. `request` tries a 429 up to 8 times with a
+     * growing wait, and `config.timeout` applies to each try, thus one call could
+     * hang for minutes. The caller has an answer of its own: the last answer,
+     * or the code before the first one. For the same reason the call stops
+     * after `EVALUATE_TIMEOUT_MS`, unless `config.timeout` says otherwise.
+     */
+    static evaluate(params: EvaluateFeatureFlagsRequest): Promise<FeatureFlagAnswer>;
+    private static send;
+}

package/dist/services/control/control.feature-flags.service.js

@@ -0,0 +1,123 @@
+import { request } from "../../utils/api.js";
+import { HttpError } from "../../utils/errors.js";
+const BASE = { id: "control" };
+const EVALUATE_TIMEOUT_MS = 3e3;
+class ControlFeatureFlagsService {
+  /** Every row of the stage, by key. Needs `READ_ALL`. */
+  static async list(params) {
+    const { flags } = await ControlFeatureFlagsService.listWithVersions(params);
+    return flags;
+  }
+  /**
+   * The rows, and the versions of the table and of the Redis key. The page of
+   * Control compares the two, and warns while the other services read the
+   * rows before. Needs `READ_ALL`.
+   */
+  static async listWithVersions(params) {
+    return ControlFeatureFlagsService.send(
+      params,
+      "list",
+      "api/feature-flags",
+      "api/feature-flags",
+      "get"
+    );
+  }
+  static async create(params) {
+    const { flag } = await ControlFeatureFlagsService.send(
+      params,
+      "create",
+      "api/feature-flags",
+      "api/feature-flags",
+      "post",
+      params.params
+    );
+    return flag;
+  }
+  /** A field that the request does not hold stays as it is. */
+  static async update(params) {
+    const { id, ...body } = params.params;
+    const { flag } = await ControlFeatureFlagsService.send(
+      params,
+      "update",
+      `api/feature-flags/${encodeURIComponent(id)}`,
+      "api/feature-flags/:id",
+      "patch",
+      body
+    );
+    return flag;
+  }
+  static async remove(params) {
+    await ControlFeatureFlagsService.send(
+      params,
+      "remove",
+      `api/feature-flags/${encodeURIComponent(params.params.id)}`,
+      "api/feature-flags/:id",
+      "delete"
+    );
+  }
+  /**
+   * The flags of the caller of the token. Needs a valid token and no
+   * permission. The email comes from the token alone.
+   *
+   * A 429 is NOT tried again. `request` tries a 429 up to 8 times with a
+   * growing wait, and `config.timeout` applies to each try, thus one call could
+   * hang for minutes. The caller has an answer of its own: the last answer,
+   * or the code before the first one. For the same reason the call stops
+   * after `EVALUATE_TIMEOUT_MS`, unless `config.timeout` says otherwise.
+   */
+  static async evaluate(params) {
+    const query = params.params.orgId ? `?orgId=${encodeURIComponent(params.params.orgId)}` : "";
+    return ControlFeatureFlagsService.send(
+      {
+        ...params,
+        config: {
+          ...params.config,
+          timeout: params.config.timeout ?? EVALUATE_TIMEOUT_MS
+        }
+      },
+      "evaluate",
+      `api/feature-flags/evaluate${query}`,
+      "api/feature-flags/evaluate",
+      "get",
+      void 0,
+      { attempts: 1, remaining: 0 }
+    );
+  }
+  static async send(params, name, url, normalizedUrl, method, body, retry) {
+    const serviceContext = {
+      method: {
+        name: `ControlFeatureFlagsService.${name}`,
+        url,
+        normalizedUrl,
+        type: method
+      },
+      source: params.config.metrics?.source || "unset",
+      target: { name: "control", type: "internal" }
+    };
+    const response = await request({
+      // `...params` first, so `cacheControl` and `onCachedResponse` reach the
+      // request. See the same note in `control.annotations.service.ts`.
+      ...params,
+      config: params.config,
+      base: BASE,
+      url,
+      method,
+      metricsDetails: serviceContext,
+      body,
+      retry
+    });
+    if (!response.ok) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    return response.body;
+  }
+}
+export {
+  ControlFeatureFlagsService,
+  EVALUATE_TIMEOUT_MS
+};
+//# sourceMappingURL=control.feature-flags.service.js.map