@camunda/ccma-api 5.13.1 → 5.15.0

package/dist/services/accounts/users.service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/services/accounts/users.service.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport {\n  MINUTE,\n  type OrganizationRole,\n  type User,\n} from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { Cache } from '../../utils/cache.js'\nimport { HttpError } from '../../utils/errors.js'\nimport type { HibobSearchResponse } from '../hibob/hibob.service.js'\n\nconst userCache = new Cache<string, User>(5 * MINUTE)\nconst REGEX_EMAIL =\n  // eslint-disable-next-line prefer-named-capture-group, no-useless-escape\n  /^(([^<>()[\\]\\\\.,;:\\s@\"]+(\\.[^<>()[\\]\\\\.,;:\\s@\"]+)*)|(\".+\"))@((\\[[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\])|(([a-zA-Z\\-0-9]+\\.)+[a-zA-Z]{2,}))$/u\n\nexport interface SearchParams extends RequestBaseParams {\n  params: {\n    q: {\n      organization?: {\n        uuid: string\n        member: boolean\n      }\n      name?: string\n      userId?: string\n      roleId?: string\n      email?: string\n      signUpStatus?: {\n        verified: boolean\n        tokenExpired?: boolean\n      }\n      created?: {\n        after?: Date\n        before?: Date\n      }\n    }\n    onBehalfOf?: string\n  }\n}\n\nexport interface SimpleSearchParams extends RequestBaseParams {\n  params: {\n    query: string\n    type: 'by-email' | 'by-id' | 'fuzzy' | 'lucene'\n  }\n}\n\nexport interface AddUserToOrganizationRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    orgId: string\n    orgRoles: OrganizationRole[]\n    byEmail?: boolean\n  }\n}\n\nexport interface RemoveUserFromOrganizationRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    orgId: string\n    byEmail?: boolean\n  }\n}\n\nexport interface RemoveStaleOrganizationRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    orgId: string\n  }\n}\n\nexport interface UpdateUserRoleRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    roleToAdd?: string\n    roleToRemove?: string\n  }\n  headers?: {\n    'x-camunda-email'?: string\n  }\n}\n\nexport interface ChangeUserEmailRequest extends RequestBaseParams {\n  params: { userId: string; email: string }\n}\n\nexport interface ChangeUserNameRequest extends RequestBaseParams {\n  params: { userId: string; firstname: string; lastname: string }\n}\n\nexport interface UserIdRequest extends RequestBaseParams {\n  params: { userId: string }\n}\n\nexport interface DeleteMeRequest extends RequestBaseParams {\n  params: { reason: string; explanation: string }\n}\n\nexport interface SetDefaultOrgRequest extends RequestBaseParams {\n  params: { userId: string; orgId: string }\n}\n\nexport class UsersService {\n  public static async search(params: SearchParams): Promise<User[]> {\n    const queryParams = new URLSearchParams()\n    const urlParts: string[] = []\n    if (params.params.q.roleId) {\n      // API route different if roleId is present\n      // eslint-disable-next-line id-length\n      const q = {\n        roleId: params.params.q.roleId,\n        name: params.params.q.name || '',\n        email: params.params.q.email || '',\n      }\n      queryParams.append('q', JSON.stringify(q))\n      urlParts.push(...['api', 'users', `?${queryParams.toString()}`])\n    } else {\n      if (params.params.onBehalfOf) {\n        queryParams.append(\n          'onBehalfOf',\n          encodeURI(JSON.stringify(params.params.onBehalfOf)),\n        )\n      }\n      queryParams.append('q', encodeURI(JSON.stringify(params.params.q)))\n      urlParts.push(...['api', 'users', 'search', `?${queryParams.toString()}`])\n    }\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.search`,\n        url: urlParts.join(`/`),\n        normalizedUrl: `api/users/search`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    // Validation\n    if (params.params.q.userId) {\n      UsersService.validateUserId(serviceContext, params.params.q.userId)\n    }\n\n    const response = await request<User[]>({\n      config: params.config,\n      base: {\n        id: 'accounts',\n      },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  public static async simpleSearch(\n    params: SimpleSearchParams,\n  ): Promise<{ users: User[] }> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.simpleSearch`,\n        url: `api/users/search`,\n        normalizedUrl: `api/users/search`,\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    switch (params.params.type) {\n      case 'by-email':\n        UsersService.validateEmail(serviceContext, params.params.query)\n        break\n      case 'by-id':\n        UsersService.validateUserId(serviceContext, params.params.query)\n        break\n      case 'lucene':\n        UsersService.validateLuceneQuery(serviceContext, params.params.query)\n        break\n    }\n\n    const response = await request<{ users: User[] }>({\n      config: params.config,\n      base: {\n        id: 'accounts',\n      },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      body: {\n        query: params.params.query,\n        type: params.params.type,\n      },\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  public static async getUserInfo(\n    params: {\n      userId: string\n      basic?: boolean\n      roles?: boolean\n    } & RequestBaseParams,\n  ): Promise<User | undefined> {\n    // `roles=true` asks the backend to enrich the user with its Auth0\n    // platform (account-level) roles, which are omitted by default.\n    const cacheKey = `${params.basic === true ? 'basic-' : ''}${\n      params.roles === true ? 'roles-' : ''\n    }${params.userId}`\n    if (!params.cacheControl?.ignoreCache) {\n      const inCache = userCache.get(cacheKey)\n      if (inCache) {\n        return inCache\n      }\n    }\n\n    const searchParams = new URLSearchParams()\n    if (params.basic === true) {\n      searchParams.append('basic', 'true')\n    }\n    if (params.roles === true) {\n      searchParams.append('roles', 'true')\n    }\n    const queryParams = searchParams.toString()\n      ? `?${searchParams.toString()}`\n      : ''\n\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.getUserInfo`,\n        url: `api/users/${params.userId}${queryParams}`,\n        normalizedUrl: `api/users/:userId`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    // Validation\n    UsersService.validateUserId(serviceContext, params.userId)\n\n    const response = await request<User>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    userCache.set(cacheKey, response.body!)\n    return response.body\n  }\n\n  public static async addUserToOrganization(\n    params: AddUserToOrganizationRequest,\n  ) {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.addUserToOrganization`,\n        url: `api/users/${params.params.userId}/organization/${params.params.orgId}`,\n        normalizedUrl: `api/users/:userId/organization/:orgId`,\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: {\n        orgRoles: params.params.orgRoles,\n        byEmail: params.params.byEmail,\n      },\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async changeEmail(\n    params: ChangeUserEmailRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.changeEmail',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/email`,\n        normalizedUrl: 'api/users/:userId/email',\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: { email: params.params.email },\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async changeName(params: ChangeUserNameRequest): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.changeName',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/name`,\n        normalizedUrl: 'api/users/:userId/name',\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: {\n        firstname: params.params.firstname,\n        lastname: params.params.lastname,\n      },\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /** Admin-activate a user without an email token (POST api/admin/activate). */\n  public static async activateWithoutToken(\n    params: UserIdRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.activateWithoutToken',\n        url: 'api/admin/activate',\n        normalizedUrl: 'api/admin/activate',\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: { userId: params.params.userId },\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /** Refresh the verification token and resend the welcome mail. */\n  public static async resendWelcomeMail(params: UserIdRequest): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.resendWelcomeMail',\n        url: 'api/admin/resend-welcome-mail',\n        normalizedUrl: 'api/admin/resend-welcome-mail',\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: { userId: params.params.userId },\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async deleteUser(params: UserIdRequest): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.deleteUser',\n        url: `api/users/${encodeURIComponent(params.params.userId)}`,\n        normalizedUrl: 'api/users/:userId',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Delete the account of the caller (self-service `DELETE api/users/me`).\n   * The route reads the caller from the token, so it needs no `userId`.\n   *\n   * The backend reads the body field `explaination`, not `explanation`. This\n   * method keeps the misspelling only in the request body, not in its own\n   * parameter name.\n   */\n  public static async deleteMe(params: DeleteMeRequest): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.deleteMe',\n        url: 'api/users/me',\n        normalizedUrl: 'api/users/me',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: {\n        reason: params.params.reason,\n        explaination: params.params.explanation,\n      },\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Auth0 brute-force blocks for a user (`GET api/users/:userId/blocks`). The\n   * entries are Auth0's block records (identifier/IP), returned opaque for the\n   * caller to render.\n   */\n  public static async getBlocks(params: UserIdRequest): Promise<unknown[]> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.getBlocks',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/blocks`,\n        normalizedUrl: 'api/users/:userId/blocks',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request<unknown[]>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body ?? []\n  }\n\n  /** Clear a user's Auth0 blocks (`DELETE api/users/:userId/blocks`). */\n  public static async clearBlocks(params: UserIdRequest): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.clearBlocks',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/blocks`,\n        normalizedUrl: 'api/users/:userId/blocks',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /** Replace a user's Auth0 `app_metadata` (god-gated raw JSON edit). */\n  public static async updateAppMetadata(\n    params: {\n      params: { userId: string }\n      body: { appMetadata: object }\n    } & RequestBaseParams,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.updateAppMetadata',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/appmetadata`,\n        normalizedUrl: 'api/users/:userId/appmetadata',\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: params.body,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /** Replace a user's Auth0 `user_metadata` (god-gated raw JSON edit). */\n  public static async updateUserMetadata(\n    params: {\n      params: { userId: string }\n      body: { userMetadata: object }\n    } & RequestBaseParams,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.updateUserMetadata',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/usermetadata`,\n        normalizedUrl: 'api/users/:userId/usermetadata',\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: params.body,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async setDefaultOrg(\n    params: SetDefaultOrgRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.setDefaultOrg',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/organizations/${encodeURIComponent(params.params.orgId)}/default`,\n        normalizedUrl: 'api/users/:userId/organizations/:orgId/default',\n        type: 'patch',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async removeUserFromOrganization(\n    params: RemoveUserFromOrganizationRequest,\n  ) {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.removeUserFromOrganization`,\n        url: `api/users/${params.params.userId}/organization/${params.params.orgId}`,\n        normalizedUrl: `api/users/:userId/organization/:orgId`,\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: {\n        byEmail: params.params.byEmail,\n      },\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Remove a stale organization assignment from a user at Auth0. Use it when\n   * the organization has no row in the accounts database any more and only\n   * the Auth0 membership is left. The endpoint refuses an organization that\n   * still exists, thus `removeUserFromOrganization` stays the normal way.\n   */\n  public static async removeStaleOrganization(\n    params: RemoveStaleOrganizationRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.removeStaleOrganization`,\n        url: `api/users/${encodeURIComponent(params.params.userId)}/organization/${encodeURIComponent(params.params.orgId)}/stale`,\n        normalizedUrl: `api/users/:userId/organization/:orgId/stale`,\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Update a user's role by adding or removing a single role.\n   * This uses the PATCH /api/users/:userId/roles endpoint.\n   * Supports email-based auth middleware via the x-camunda-email header.\n   */\n  public static async updateUserRole(\n    params: UpdateUserRoleRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.updateUserRole`,\n        url: `api/users/${encodeURIComponent(params.params.userId)}/roles`,\n        normalizedUrl: `api/users/:userId/roles`,\n        type: 'patch',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    // Validation\n    UsersService.validateUserId(serviceContext, params.params.userId)\n\n    if (!params.params.roleToAdd && !params.params.roleToRemove) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - either roleToAdd or roleToRemove must be specified`,\n        400,\n        `Validation Error in API Package - either roleToAdd or roleToRemove must be specified`,\n      )\n    }\n\n    const body: { roleToAdd?: string; roleToRemove?: string } = {}\n    if (params.params.roleToAdd) {\n      body.roleToAdd = params.params.roleToAdd\n    }\n    if (params.params.roleToRemove) {\n      body.roleToRemove = params.params.roleToRemove\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body,\n      headers: params.headers,\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Get all Hibob users (for bulk ghost account checks).\n   * This fetches all active Hibob employees in a single request.\n   */\n  public static async getAllHibobUsers(\n    params: RequestBaseParams,\n  ): Promise<HibobSearchResponse> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.getAllHibobUsers',\n        url: 'api/users/hibob/all',\n        normalizedUrl: 'api/users/hibob/all',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request<HibobSearchResponse>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n\n    return response.body!\n  }\n\n  /**\n   * Get Hibob details for a specific user by their Auth0 user ID.\n   */\n  public static async getUserHibobDetails(\n    params: { userId: string } & RequestBaseParams,\n  ): Promise<HibobSearchResponse> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.getUserHibobDetails',\n        url: `api/users/${encodeURIComponent(params.userId)}/hibob`,\n        normalizedUrl: 'api/users/:userId/hibob',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request<HibobSearchResponse>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n\n    return response.body!\n  }\n\n  private static validateUserId(\n    serviceContext: RequestBaseServiceContext,\n    userId: string,\n  ) {\n    if (!userId || !userId.includes('|')) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - missing pipe '|'`,\n        400,\n        `Validation Error in API Package - missing pipe '|'`,\n      )\n    }\n  }\n\n  private static validateEmail(\n    serviceContext: RequestBaseServiceContext,\n    email: string,\n  ) {\n    if (!email || !REGEX_EMAIL.test(email)) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - invalid email format`,\n        400,\n        `Validation Error in API Package - invalid email format`,\n      )\n    }\n  }\n\n  /**\n   * Validates a Lucene query string for Auth0 user search.\n   * Auth0 supports Lucene query syntax including:\n   * - Field queries: field:value (e.g., email:john@example.com)\n   * - Wildcards: field:*value*, field:value*\n   * - Boolean operators: AND, OR, NOT\n   * - Grouping: (field:value OR field:value)\n   * - Range queries: field:[min TO max]\n   * - Exact phrase: field:\"exact phrase\"\n   *\n   * @see https://auth0.com/docs/manage-users/user-search/user-search-query-syntax\n   */\n  private static validateLuceneQuery(\n    serviceContext: RequestBaseServiceContext,\n    query: string,\n  ) {\n    if (!query || query.trim().length === 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - empty Lucene query`,\n        400,\n        `Validation Error in API Package - empty Lucene query`,\n      )\n    }\n\n    // Basic validation: query should contain at least a field:value pattern or be a valid search term\n    // Auth0 Lucene syntax requires queries to have field:value format for structured searches\n    const trimmedQuery = query.trim()\n\n    // Check for unbalanced parentheses\n    let parenCount = 0\n    for (const char of trimmedQuery) {\n      if (char === '(') parenCount++\n      if (char === ')') parenCount--\n      if (parenCount < 0) {\n        throw new HttpError(\n          `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced parentheses in Lucene query`,\n          400,\n          `Validation Error in API Package - unbalanced parentheses in Lucene query`,\n        )\n      }\n    }\n    if (parenCount !== 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced parentheses in Lucene query`,\n        400,\n        `Validation Error in API Package - unbalanced parentheses in Lucene query`,\n      )\n    }\n\n    // Check for unbalanced square brackets (range queries)\n    let bracketCount = 0\n    for (const char of trimmedQuery) {\n      if (char === '[') bracketCount++\n      if (char === ']') bracketCount--\n      if (bracketCount < 0) {\n        throw new HttpError(\n          `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced brackets in Lucene query`,\n          400,\n          `Validation Error in API Package - unbalanced brackets in Lucene query`,\n        )\n      }\n    }\n    if (bracketCount !== 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced brackets in Lucene query`,\n        400,\n        `Validation Error in API Package - unbalanced brackets in Lucene query`,\n      )\n    }\n\n    // Check for unbalanced quotes\n    const quoteCount = (trimmedQuery.match(/\"/gu) || []).length\n    if (quoteCount % 2 !== 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced quotes in Lucene query`,\n        400,\n        `Validation Error in API Package - unbalanced quotes in Lucene query`,\n      )\n    }\n\n    // Validate that query contains at least one valid field:value pattern or search term\n    // A valid Lucene query for Auth0 should have field:value syntax\n    // Use word boundary to match field:value patterns anywhere in the query\n    const hasFieldValue = /\\b\\w+:/u.test(trimmedQuery)\n    if (!hasFieldValue) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - Lucene query must contain field:value syntax (e.g., email:john@example.com)`,\n        400,\n        `Validation Error in API Package - Lucene query must contain field:value syntax (e.g., email:john@example.com)`,\n      )\n    }\n  }\n}\n"],
-  "mappings": "AAMA;AAAA,EACE;AAAA,OAGK;AAKP,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAG1B,MAAM,YAAY,IAAI,MAAoB,IAAI,MAAM;AACpD,MAAM;AAAA;AAAA,EAEJ;AAAA;AAwFK,MAAM,aAAa;AAAA,EACxB,aAAoB,OAAO,QAAuC;AAChE,UAAM,cAAc,IAAI,gBAAgB;AACxC,UAAM,WAAqB,CAAC;AAC5B,QAAI,OAAO,OAAO,EAAE,QAAQ;AAG1B,YAAM,IAAI;AAAA,QACR,QAAQ,OAAO,OAAO,EAAE;AAAA,QACxB,MAAM,OAAO,OAAO,EAAE,QAAQ;AAAA,QAC9B,OAAO,OAAO,OAAO,EAAE,SAAS;AAAA,MAClC;AACA,kBAAY,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC;AACzC,eAAS,KAAK,GAAG,CAAC,OAAO,SAAS,IAAI,YAAY,SAAS,CAAC,EAAE,CAAC;AAAA,IACjE,OAAO;AACL,UAAI,OAAO,OAAO,YAAY;AAC5B,oBAAY;AAAA,UACV;AAAA,UACA,UAAU,KAAK,UAAU,OAAO,OAAO,UAAU,CAAC;AAAA,QACpD;AAAA,MACF;AACA,kBAAY,OAAO,KAAK,UAAU,KAAK,UAAU,OAAO,OAAO,CAAC,CAAC,CAAC;AAClE,eAAS,KAAK,GAAG,CAAC,OAAO,SAAS,UAAU,IAAI,YAAY,SAAS,CAAC,EAAE,CAAC;AAAA,IAC3E;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,SAAS,KAAK,GAAG;AAAA,QACtB,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAGA,QAAI,OAAO,OAAO,EAAE,QAAQ;AAC1B,mBAAa,eAAe,gBAAgB,OAAO,OAAO,EAAE,MAAM;AAAA,IACpE;AAEA,UAAM,WAAW,MAAM,QAAgB;AAAA,MACrC,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,QACJ,IAAI;AAAA,MACN;AAAA,MACA,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,aAClB,QAC4B;AAC5B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,YAAQ,OAAO,OAAO,MAAM;AAAA,MAC1B,KAAK;AACH,qBAAa,cAAc,gBAAgB,OAAO,OAAO,KAAK;AAC9D;AAAA,MACF,KAAK;AACH,qBAAa,eAAe,gBAAgB,OAAO,OAAO,KAAK;AAC/D;AAAA,MACF,KAAK;AACH,qBAAa,oBAAoB,gBAAgB,OAAO,OAAO,KAAK;AACpE;AAAA,IACJ;AAEA,UAAM,WAAW,MAAM,QAA2B;AAAA,MAChD,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,QACJ,IAAI;AAAA,MACN;AAAA,MACA,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,MAAM;AAAA,QACJ,OAAO,OAAO,OAAO;AAAA,QACrB,MAAM,OAAO,OAAO;AAAA,MACtB;AAAA,MACA,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,YAClB,QAK2B;AAG3B,UAAM,WAAW,GAAG,OAAO,UAAU,OAAO,WAAW,EAAE,GACvD,OAAO,UAAU,OAAO,WAAW,EACrC,GAAG,OAAO,MAAM;AAChB,QAAI,CAAC,OAAO,cAAc,aAAa;AACrC,YAAM,UAAU,UAAU,IAAI,QAAQ;AACtC,UAAI,SAAS;AACX,eAAO;AAAA,MACT;AAAA,IACF;AAEA,UAAM,eAAe,IAAI,gBAAgB;AACzC,QAAI,OAAO,UAAU,MAAM;AACzB,mBAAa,OAAO,SAAS,MAAM;AAAA,IACrC;AACA,QAAI,OAAO,UAAU,MAAM;AACzB,mBAAa,OAAO,SAAS,MAAM;AAAA,IACrC;AACA,UAAM,cAAc,aAAa,SAAS,IACtC,IAAI,aAAa,SAAS,CAAC,KAC3B;AAEJ,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,OAAO,MAAM,GAAG,WAAW;AAAA,QAC7C,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAGA,iBAAa,eAAe,gBAAgB,OAAO,MAAM;AAEzD,UAAM,WAAW,MAAM,QAAc;AAAA,MACnC,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,cAAU,IAAI,UAAU,SAAS,IAAK;AACtC,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,sBAClB,QACA;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,OAAO,OAAO,MAAM,iBAAiB,OAAO,OAAO,KAAK;AAAA,QAC1E,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,UAAU,OAAO,OAAO;AAAA,QACxB,SAAS,OAAO,OAAO;AAAA,MACzB;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,YAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,EAAE,OAAO,OAAO,OAAO,MAAM;AAAA,MACnC,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,WAAW,QAA8C;AAC3E,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,WAAW,OAAO,OAAO;AAAA,QACzB,UAAU,OAAO,OAAO;AAAA,MAC1B;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,qBAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,EAAE,QAAQ,OAAO,OAAO,OAAO;AAAA,MACrC,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,kBAAkB,QAAsC;AAC1E,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,EAAE,QAAQ,OAAO,OAAO,OAAO;AAAA,MACrC,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,WAAW,QAAsC;AACnE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAoB,SAAS,QAAwC;AACnE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,QAAQ,OAAO,OAAO;AAAA,QACtB,cAAc,OAAO,OAAO;AAAA,MAC9B;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,UAAU,QAA2C;AACvE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAmB;AAAA,MACxC,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC3B;AAAA;AAAA,EAGA,aAAoB,YAAY,QAAsC;AACpE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,kBAClB,QAIe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,mBAClB,QAIe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,cAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC,kBAAkB,mBAAmB,OAAO,OAAO,KAAK,CAAC;AAAA,QACnH,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,2BAClB,QACA;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,OAAO,OAAO,MAAM,iBAAiB,OAAO,OAAO,KAAK;AAAA,QAC1E,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,SAAS,OAAO,OAAO;AAAA,MACzB;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,wBAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC,iBAAiB,mBAAmB,OAAO,OAAO,KAAK,CAAC;AAAA,QAClH,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,eAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAGA,iBAAa,eAAe,gBAAgB,OAAO,OAAO,MAAM;AAEhE,QAAI,CAAC,OAAO,OAAO,aAAa,CAAC,OAAO,OAAO,cAAc;AAC3D,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAsD,CAAC;AAC7D,QAAI,OAAO,OAAO,WAAW;AAC3B,WAAK,YAAY,OAAO,OAAO;AAAA,IACjC;AACA,QAAI,OAAO,OAAO,cAAc;AAC9B,WAAK,eAAe,OAAO,OAAO;AAAA,IACpC;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB;AAAA,MACA,SAAS,OAAO;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,iBAClB,QAC8B;AAC9B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAA6B;AAAA,MAClD,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAoB,oBAClB,QAC8B;AAC9B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,MAAM,CAAC;AAAA,QACnD,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAA6B;AAAA,MAClD,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,OAAe,eACb,gBACA,QACA;AACA,QAAI,CAAC,UAAU,CAAC,OAAO,SAAS,GAAG,GAAG;AACpC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAe,cACb,gBACA,OACA;AACA,QAAI,CAAC,SAAS,CAAC,YAAY,KAAK,KAAK,GAAG;AACtC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,OAAe,oBACb,gBACA,OACA;AACA,QAAI,CAAC,SAAS,MAAM,KAAK,EAAE,WAAW,GAAG;AACvC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAIA,UAAM,eAAe,MAAM,KAAK;AAGhC,QAAI,aAAa;AACjB,eAAW,QAAQ,cAAc;AAC/B,UAAI,SAAS,IAAK;AAClB,UAAI,SAAS,IAAK;AAClB,UAAI,aAAa,GAAG;AAClB,cAAM,IAAI;AAAA,UACR,GAAG,eAAe,OAAO,IAAI;AAAA,UAC7B;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,eAAe,GAAG;AACpB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAGA,QAAI,eAAe;AACnB,eAAW,QAAQ,cAAc;AAC/B,UAAI,SAAS,IAAK;AAClB,UAAI,SAAS,IAAK;AAClB,UAAI,eAAe,GAAG;AACpB,cAAM,IAAI;AAAA,UACR,GAAG,eAAe,OAAO,IAAI;AAAA,UAC7B;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,iBAAiB,GAAG;AACtB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAGA,UAAM,cAAc,aAAa,MAAM,KAAK,KAAK,CAAC,GAAG;AACrD,QAAI,aAAa,MAAM,GAAG;AACxB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAKA,UAAM,gBAAgB,UAAU,KAAK,YAAY;AACjD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport {\n  MINUTE,\n  type OrganizationRole,\n  type User,\n} from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { Cache } from '../../utils/cache.js'\nimport { HttpError } from '../../utils/errors.js'\nimport type { HibobSearchResponse } from '../hibob/hibob.service.js'\n\nconst userCache = new Cache<string, User>(5 * MINUTE)\nconst REGEX_EMAIL =\n  // eslint-disable-next-line prefer-named-capture-group, no-useless-escape\n  /^(([^<>()[\\]\\\\.,;:\\s@\"]+(\\.[^<>()[\\]\\\\.,;:\\s@\"]+)*)|(\".+\"))@((\\[[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\])|(([a-zA-Z\\-0-9]+\\.)+[a-zA-Z]{2,}))$/u\n\nexport interface SearchParams extends RequestBaseParams {\n  params: {\n    q: {\n      organization?: {\n        uuid: string\n        member: boolean\n      }\n      name?: string\n      userId?: string\n      roleId?: string\n      email?: string\n      signUpStatus?: {\n        verified: boolean\n        tokenExpired?: boolean\n      }\n      created?: {\n        after?: Date\n        before?: Date\n      }\n    }\n    onBehalfOf?: string\n  }\n}\n\nexport interface SimpleSearchParams extends RequestBaseParams {\n  params: {\n    query: string\n    type: 'by-email' | 'by-id' | 'fuzzy' | 'lucene'\n  }\n}\n\nexport interface AddUserToOrganizationRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    orgId: string\n    orgRoles: OrganizationRole[]\n    byEmail?: boolean\n  }\n}\n\nexport interface RemoveUserFromOrganizationRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    orgId: string\n    byEmail?: boolean\n  }\n}\n\nexport interface RemoveStaleOrganizationRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    orgId: string\n  }\n}\n\nexport interface UpdateUserRoleRequest extends RequestBaseParams {\n  params: {\n    userId: string\n    roleToAdd?: string\n    roleToRemove?: string\n  }\n  headers?: {\n    'x-camunda-email'?: string\n  }\n}\n\nexport interface ChangeUserEmailRequest extends RequestBaseParams {\n  params: { userId: string; email: string }\n}\n\nexport interface ChangeUserNameRequest extends RequestBaseParams {\n  params: { userId: string; firstname: string; lastname: string }\n}\n\nexport interface UserIdRequest extends RequestBaseParams {\n  params: { userId: string }\n}\n\n/** What accounts answers for one user of a purge. */\nexport interface PurgeUserResult {\n  userId: string\n  /** `false` when Auth0 had no such user, so nothing was deleted. */\n  deleted: boolean\n}\n\nexport interface DeleteMeRequest extends RequestBaseParams {\n  params: { reason: string; explanation: string }\n}\n\nexport interface SetDefaultOrgRequest extends RequestBaseParams {\n  params: { userId: string; orgId: string }\n}\n\nexport class UsersService {\n  public static async search(params: SearchParams): Promise<User[]> {\n    const queryParams = new URLSearchParams()\n    const urlParts: string[] = []\n    if (params.params.q.roleId) {\n      // API route different if roleId is present\n      // eslint-disable-next-line id-length\n      const q = {\n        roleId: params.params.q.roleId,\n        name: params.params.q.name || '',\n        email: params.params.q.email || '',\n      }\n      queryParams.append('q', JSON.stringify(q))\n      urlParts.push(...['api', 'users', `?${queryParams.toString()}`])\n    } else {\n      if (params.params.onBehalfOf) {\n        queryParams.append(\n          'onBehalfOf',\n          encodeURI(JSON.stringify(params.params.onBehalfOf)),\n        )\n      }\n      queryParams.append('q', encodeURI(JSON.stringify(params.params.q)))\n      urlParts.push(...['api', 'users', 'search', `?${queryParams.toString()}`])\n    }\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.search`,\n        url: urlParts.join(`/`),\n        normalizedUrl: `api/users/search`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    // Validation\n    if (params.params.q.userId) {\n      UsersService.validateUserId(serviceContext, params.params.q.userId)\n    }\n\n    const response = await request<User[]>({\n      config: params.config,\n      base: {\n        id: 'accounts',\n      },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  public static async simpleSearch(\n    params: SimpleSearchParams,\n  ): Promise<{ users: User[] }> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.simpleSearch`,\n        url: `api/users/search`,\n        normalizedUrl: `api/users/search`,\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    switch (params.params.type) {\n      case 'by-email':\n        UsersService.validateEmail(serviceContext, params.params.query)\n        break\n      case 'by-id':\n        UsersService.validateUserId(serviceContext, params.params.query)\n        break\n      case 'lucene':\n        UsersService.validateLuceneQuery(serviceContext, params.params.query)\n        break\n    }\n\n    const response = await request<{ users: User[] }>({\n      config: params.config,\n      base: {\n        id: 'accounts',\n      },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      body: {\n        query: params.params.query,\n        type: params.params.type,\n      },\n      metricsDetails: serviceContext,\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  public static async getUserInfo(\n    params: {\n      userId: string\n      basic?: boolean\n      roles?: boolean\n    } & RequestBaseParams,\n  ): Promise<User | undefined> {\n    // `roles=true` asks the backend to enrich the user with its Auth0\n    // platform (account-level) roles, which are omitted by default.\n    const cacheKey = `${params.basic === true ? 'basic-' : ''}${\n      params.roles === true ? 'roles-' : ''\n    }${params.userId}`\n    if (!params.cacheControl?.ignoreCache) {\n      const inCache = userCache.get(cacheKey)\n      if (inCache) {\n        return inCache\n      }\n    }\n\n    const searchParams = new URLSearchParams()\n    if (params.basic === true) {\n      searchParams.append('basic', 'true')\n    }\n    if (params.roles === true) {\n      searchParams.append('roles', 'true')\n    }\n    const queryParams = searchParams.toString()\n      ? `?${searchParams.toString()}`\n      : ''\n\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.getUserInfo`,\n        url: `api/users/${params.userId}${queryParams}`,\n        normalizedUrl: `api/users/:userId`,\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    // Validation\n    UsersService.validateUserId(serviceContext, params.userId)\n\n    const response = await request<User>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    userCache.set(cacheKey, response.body!)\n    return response.body\n  }\n\n  public static async addUserToOrganization(\n    params: AddUserToOrganizationRequest,\n  ) {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.addUserToOrganization`,\n        url: `api/users/${params.params.userId}/organization/${params.params.orgId}`,\n        normalizedUrl: `api/users/:userId/organization/:orgId`,\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: {\n        orgRoles: params.params.orgRoles,\n        byEmail: params.params.byEmail,\n      },\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async changeEmail(\n    params: ChangeUserEmailRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.changeEmail',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/email`,\n        normalizedUrl: 'api/users/:userId/email',\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: { email: params.params.email },\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async changeName(params: ChangeUserNameRequest): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.changeName',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/name`,\n        normalizedUrl: 'api/users/:userId/name',\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: {\n        firstname: params.params.firstname,\n        lastname: params.params.lastname,\n      },\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /** Admin-activate a user without an email token (POST api/admin/activate). */\n  public static async activateWithoutToken(\n    params: UserIdRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.activateWithoutToken',\n        url: 'api/admin/activate',\n        normalizedUrl: 'api/admin/activate',\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: { userId: params.params.userId },\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /** Refresh the verification token and resend the welcome mail. */\n  public static async resendWelcomeMail(params: UserIdRequest): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.resendWelcomeMail',\n        url: 'api/admin/resend-welcome-mail',\n        normalizedUrl: 'api/admin/resend-welcome-mail',\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: { userId: params.params.userId },\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async deleteUser(params: UserIdRequest): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.deleteUser',\n        url: `api/users/${encodeURIComponent(params.params.userId)}`,\n        normalizedUrl: 'api/users/:userId',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Deletes one user of a God Mode purge (`DELETE api/users/:userId/purge`).\n   * The route needs `admin.god.purgeUsers` and `admin.deleteUser`. A purge\n   * screen calls this for each user, and never `deleteUser`.\n   */\n  public static async purgeUser(\n    params: UserIdRequest,\n  ): Promise<PurgeUserResult> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.purgeUser',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/purge`,\n        normalizedUrl: 'api/users/:userId/purge',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request<PurgeUserResult>({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n    })\n    if (!response.ok || response.body === undefined) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n\n  /**\n   * Delete the account of the caller (self-service `DELETE api/users/me`).\n   * The route reads the caller from the token, so it needs no `userId`.\n   *\n   * The backend reads the body field `explaination`, not `explanation`. This\n   * method keeps the misspelling only in the request body, not in its own\n   * parameter name.\n   */\n  public static async deleteMe(params: DeleteMeRequest): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.deleteMe',\n        url: 'api/users/me',\n        normalizedUrl: 'api/users/me',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: {\n        reason: params.params.reason,\n        explaination: params.params.explanation,\n      },\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Auth0 brute-force blocks for a user (`GET api/users/:userId/blocks`). The\n   * entries are Auth0's block records (identifier/IP), returned opaque for the\n   * caller to render.\n   */\n  public static async getBlocks(params: UserIdRequest): Promise<unknown[]> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.getBlocks',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/blocks`,\n        normalizedUrl: 'api/users/:userId/blocks',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request<unknown[]>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body ?? []\n  }\n\n  /** Clear a user's Auth0 blocks (`DELETE api/users/:userId/blocks`). */\n  public static async clearBlocks(params: UserIdRequest): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.clearBlocks',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/blocks`,\n        normalizedUrl: 'api/users/:userId/blocks',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /** Replace a user's Auth0 `app_metadata` (god-gated raw JSON edit). */\n  public static async updateAppMetadata(\n    params: {\n      params: { userId: string }\n      body: { appMetadata: object }\n    } & RequestBaseParams,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.updateAppMetadata',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/appmetadata`,\n        normalizedUrl: 'api/users/:userId/appmetadata',\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: params.body,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /** Replace a user's Auth0 `user_metadata` (god-gated raw JSON edit). */\n  public static async updateUserMetadata(\n    params: {\n      params: { userId: string }\n      body: { userMetadata: object }\n    } & RequestBaseParams,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.updateUserMetadata',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/usermetadata`,\n        normalizedUrl: 'api/users/:userId/usermetadata',\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: params.body,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async setDefaultOrg(\n    params: SetDefaultOrgRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.setDefaultOrg',\n        url: `api/users/${encodeURIComponent(params.params.userId)}/organizations/${encodeURIComponent(params.params.orgId)}/default`,\n        normalizedUrl: 'api/users/:userId/organizations/:orgId/default',\n        type: 'patch',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'accounts', type: 'internal' },\n    }\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'none',\n    })\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  public static async removeUserFromOrganization(\n    params: RemoveUserFromOrganizationRequest,\n  ) {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.removeUserFromOrganization`,\n        url: `api/users/${params.params.userId}/organization/${params.params.orgId}`,\n        normalizedUrl: `api/users/:userId/organization/:orgId`,\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body: {\n        byEmail: params.params.byEmail,\n      },\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Remove a stale organization assignment from a user at Auth0. Use it when\n   * the organization has no row in the accounts database any more and only\n   * the Auth0 membership is left. The endpoint refuses an organization that\n   * still exists, thus `removeUserFromOrganization` stays the normal way.\n   */\n  public static async removeStaleOrganization(\n    params: RemoveStaleOrganizationRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.removeStaleOrganization`,\n        url: `api/users/${encodeURIComponent(params.params.userId)}/organization/${encodeURIComponent(params.params.orgId)}/stale`,\n        normalizedUrl: `api/users/:userId/organization/:orgId/stale`,\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Update a user's role by adding or removing a single role.\n   * This uses the PATCH /api/users/:userId/roles endpoint.\n   * Supports email-based auth middleware via the x-camunda-email header.\n   */\n  public static async updateUserRole(\n    params: UpdateUserRoleRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: `UsersService.updateUserRole`,\n        url: `api/users/${encodeURIComponent(params.params.userId)}/roles`,\n        normalizedUrl: `api/users/:userId/roles`,\n        type: 'patch',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    // Validation\n    UsersService.validateUserId(serviceContext, params.params.userId)\n\n    if (!params.params.roleToAdd && !params.params.roleToRemove) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - either roleToAdd or roleToRemove must be specified`,\n        400,\n        `Validation Error in API Package - either roleToAdd or roleToRemove must be specified`,\n      )\n    }\n\n    const body: { roleToAdd?: string; roleToRemove?: string } = {}\n    if (params.params.roleToAdd) {\n      body.roleToAdd = params.params.roleToAdd\n    }\n    if (params.params.roleToRemove) {\n      body.roleToRemove = params.params.roleToRemove\n    }\n\n    const response = await request({\n      config: params.config,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      body,\n      headers: params.headers,\n      responseType: 'none',\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /**\n   * Get all Hibob users (for bulk ghost account checks).\n   * This fetches all active Hibob employees in a single request.\n   */\n  public static async getAllHibobUsers(\n    params: RequestBaseParams,\n  ): Promise<HibobSearchResponse> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.getAllHibobUsers',\n        url: 'api/users/hibob/all',\n        normalizedUrl: 'api/users/hibob/all',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request<HibobSearchResponse>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n\n    return response.body!\n  }\n\n  /**\n   * Get Hibob details for a specific user by their Auth0 user ID.\n   */\n  public static async getUserHibobDetails(\n    params: { userId: string } & RequestBaseParams,\n  ): Promise<HibobSearchResponse> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'UsersService.getUserHibobDetails',\n        url: `api/users/${encodeURIComponent(params.userId)}/hibob`,\n        normalizedUrl: 'api/users/:userId/hibob',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: {\n        name: 'accounts',\n        type: 'internal',\n      },\n    }\n\n    const response = await request<HibobSearchResponse>({\n      ...params,\n      base: { id: 'accounts' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n\n    return response.body!\n  }\n\n  private static validateUserId(\n    serviceContext: RequestBaseServiceContext,\n    userId: string,\n  ) {\n    if (!userId || !userId.includes('|')) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - missing pipe '|'`,\n        400,\n        `Validation Error in API Package - missing pipe '|'`,\n      )\n    }\n  }\n\n  private static validateEmail(\n    serviceContext: RequestBaseServiceContext,\n    email: string,\n  ) {\n    if (!email || !REGEX_EMAIL.test(email)) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - invalid email format`,\n        400,\n        `Validation Error in API Package - invalid email format`,\n      )\n    }\n  }\n\n  /**\n   * Validates a Lucene query string for Auth0 user search.\n   * Auth0 supports Lucene query syntax including:\n   * - Field queries: field:value (e.g., email:john@example.com)\n   * - Wildcards: field:*value*, field:value*\n   * - Boolean operators: AND, OR, NOT\n   * - Grouping: (field:value OR field:value)\n   * - Range queries: field:[min TO max]\n   * - Exact phrase: field:\"exact phrase\"\n   *\n   * @see https://auth0.com/docs/manage-users/user-search/user-search-query-syntax\n   */\n  private static validateLuceneQuery(\n    serviceContext: RequestBaseServiceContext,\n    query: string,\n  ) {\n    if (!query || query.trim().length === 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - empty Lucene query`,\n        400,\n        `Validation Error in API Package - empty Lucene query`,\n      )\n    }\n\n    // Basic validation: query should contain at least a field:value pattern or be a valid search term\n    // Auth0 Lucene syntax requires queries to have field:value format for structured searches\n    const trimmedQuery = query.trim()\n\n    // Check for unbalanced parentheses\n    let parenCount = 0\n    for (const char of trimmedQuery) {\n      if (char === '(') parenCount++\n      if (char === ')') parenCount--\n      if (parenCount < 0) {\n        throw new HttpError(\n          `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced parentheses in Lucene query`,\n          400,\n          `Validation Error in API Package - unbalanced parentheses in Lucene query`,\n        )\n      }\n    }\n    if (parenCount !== 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced parentheses in Lucene query`,\n        400,\n        `Validation Error in API Package - unbalanced parentheses in Lucene query`,\n      )\n    }\n\n    // Check for unbalanced square brackets (range queries)\n    let bracketCount = 0\n    for (const char of trimmedQuery) {\n      if (char === '[') bracketCount++\n      if (char === ']') bracketCount--\n      if (bracketCount < 0) {\n        throw new HttpError(\n          `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced brackets in Lucene query`,\n          400,\n          `Validation Error in API Package - unbalanced brackets in Lucene query`,\n        )\n      }\n    }\n    if (bracketCount !== 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced brackets in Lucene query`,\n        400,\n        `Validation Error in API Package - unbalanced brackets in Lucene query`,\n      )\n    }\n\n    // Check for unbalanced quotes\n    const quoteCount = (trimmedQuery.match(/\"/gu) || []).length\n    if (quoteCount % 2 !== 0) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - unbalanced quotes in Lucene query`,\n        400,\n        `Validation Error in API Package - unbalanced quotes in Lucene query`,\n      )\n    }\n\n    // Validate that query contains at least one valid field:value pattern or search term\n    // A valid Lucene query for Auth0 should have field:value syntax\n    // Use word boundary to match field:value patterns anywhere in the query\n    const hasFieldValue = /\\b\\w+:/u.test(trimmedQuery)\n    if (!hasFieldValue) {\n      throw new HttpError(\n        `${serviceContext.method.name}: 400 - Validation Error in API Package - Lucene query must contain field:value syntax (e.g., email:john@example.com)`,\n        400,\n        `Validation Error in API Package - Lucene query must contain field:value syntax (e.g., email:john@example.com)`,\n      )\n    }\n  }\n}\n"],
+  "mappings": "AAMA;AAAA,EACE;AAAA,OAGK;AAKP,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAG1B,MAAM,YAAY,IAAI,MAAoB,IAAI,MAAM;AACpD,MAAM;AAAA;AAAA,EAEJ;AAAA;AA+FK,MAAM,aAAa;AAAA,EACxB,aAAoB,OAAO,QAAuC;AAChE,UAAM,cAAc,IAAI,gBAAgB;AACxC,UAAM,WAAqB,CAAC;AAC5B,QAAI,OAAO,OAAO,EAAE,QAAQ;AAG1B,YAAM,IAAI;AAAA,QACR,QAAQ,OAAO,OAAO,EAAE;AAAA,QACxB,MAAM,OAAO,OAAO,EAAE,QAAQ;AAAA,QAC9B,OAAO,OAAO,OAAO,EAAE,SAAS;AAAA,MAClC;AACA,kBAAY,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC;AACzC,eAAS,KAAK,GAAG,CAAC,OAAO,SAAS,IAAI,YAAY,SAAS,CAAC,EAAE,CAAC;AAAA,IACjE,OAAO;AACL,UAAI,OAAO,OAAO,YAAY;AAC5B,oBAAY;AAAA,UACV;AAAA,UACA,UAAU,KAAK,UAAU,OAAO,OAAO,UAAU,CAAC;AAAA,QACpD;AAAA,MACF;AACA,kBAAY,OAAO,KAAK,UAAU,KAAK,UAAU,OAAO,OAAO,CAAC,CAAC,CAAC;AAClE,eAAS,KAAK,GAAG,CAAC,OAAO,SAAS,UAAU,IAAI,YAAY,SAAS,CAAC,EAAE,CAAC;AAAA,IAC3E;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,SAAS,KAAK,GAAG;AAAA,QACtB,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAGA,QAAI,OAAO,OAAO,EAAE,QAAQ;AAC1B,mBAAa,eAAe,gBAAgB,OAAO,OAAO,EAAE,MAAM;AAAA,IACpE;AAEA,UAAM,WAAW,MAAM,QAAgB;AAAA,MACrC,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,QACJ,IAAI;AAAA,MACN;AAAA,MACA,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,aAClB,QAC4B;AAC5B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,YAAQ,OAAO,OAAO,MAAM;AAAA,MAC1B,KAAK;AACH,qBAAa,cAAc,gBAAgB,OAAO,OAAO,KAAK;AAC9D;AAAA,MACF,KAAK;AACH,qBAAa,eAAe,gBAAgB,OAAO,OAAO,KAAK;AAC/D;AAAA,MACF,KAAK;AACH,qBAAa,oBAAoB,gBAAgB,OAAO,OAAO,KAAK;AACpE;AAAA,IACJ;AAEA,UAAM,WAAW,MAAM,QAA2B;AAAA,MAChD,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,QACJ,IAAI;AAAA,MACN;AAAA,MACA,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,MAAM;AAAA,QACJ,OAAO,OAAO,OAAO;AAAA,QACrB,MAAM,OAAO,OAAO;AAAA,MACtB;AAAA,MACA,gBAAgB;AAAA,IAClB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,YAClB,QAK2B;AAG3B,UAAM,WAAW,GAAG,OAAO,UAAU,OAAO,WAAW,EAAE,GACvD,OAAO,UAAU,OAAO,WAAW,EACrC,GAAG,OAAO,MAAM;AAChB,QAAI,CAAC,OAAO,cAAc,aAAa;AACrC,YAAM,UAAU,UAAU,IAAI,QAAQ;AACtC,UAAI,SAAS;AACX,eAAO;AAAA,MACT;AAAA,IACF;AAEA,UAAM,eAAe,IAAI,gBAAgB;AACzC,QAAI,OAAO,UAAU,MAAM;AACzB,mBAAa,OAAO,SAAS,MAAM;AAAA,IACrC;AACA,QAAI,OAAO,UAAU,MAAM;AACzB,mBAAa,OAAO,SAAS,MAAM;AAAA,IACrC;AACA,UAAM,cAAc,aAAa,SAAS,IACtC,IAAI,aAAa,SAAS,CAAC,KAC3B;AAEJ,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,OAAO,MAAM,GAAG,WAAW;AAAA,QAC7C,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAGA,iBAAa,eAAe,gBAAgB,OAAO,MAAM;AAEzD,UAAM,WAAW,MAAM,QAAc;AAAA,MACnC,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,cAAU,IAAI,UAAU,SAAS,IAAK;AACtC,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,aAAoB,sBAClB,QACA;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,OAAO,OAAO,MAAM,iBAAiB,OAAO,OAAO,KAAK;AAAA,QAC1E,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,UAAU,OAAO,OAAO;AAAA,QACxB,SAAS,OAAO,OAAO;AAAA,MACzB;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,YAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,EAAE,OAAO,OAAO,OAAO,MAAM;AAAA,MACnC,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,WAAW,QAA8C;AAC3E,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,WAAW,OAAO,OAAO;AAAA,QACzB,UAAU,OAAO,OAAO;AAAA,MAC1B;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,qBAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,EAAE,QAAQ,OAAO,OAAO,OAAO;AAAA,MACrC,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,kBAAkB,QAAsC;AAC1E,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,EAAE,QAAQ,OAAO,OAAO,OAAO;AAAA,MACrC,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,WAAW,QAAsC;AACnE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,UAClB,QAC0B;AAC1B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAyB;AAAA,MAC9C,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,MAAM,SAAS,SAAS,QAAW;AAC/C,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAoB,SAAS,QAAwC;AACnE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,QAAQ,OAAO,OAAO;AAAA,QACtB,cAAc,OAAO,OAAO;AAAA,MAC9B;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,UAAU,QAA2C;AACvE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAmB;AAAA,MACxC,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC3B;AAAA;AAAA,EAGA,aAAoB,YAAY,QAAsC;AACpE,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,kBAClB,QAIe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,mBAClB,QAIe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,cAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC,kBAAkB,mBAAmB,OAAO,OAAO,KAAK,CAAC;AAAA,QACnH,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,YAAY,MAAM,WAAW;AAAA,IAC/C;AACA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAoB,2BAClB,QACA;AACA,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,OAAO,OAAO,MAAM,iBAAiB,OAAO,OAAO,KAAK;AAAA,QAC1E,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,MAAM;AAAA,QACJ,SAAS,OAAO,OAAO;AAAA,MACzB;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,wBAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC,iBAAiB,mBAAmB,OAAO,OAAO,KAAK,CAAC;AAAA,QAClH,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,eAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,OAAO,MAAM,CAAC;AAAA,QAC1D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAGA,iBAAa,eAAe,gBAAgB,OAAO,OAAO,MAAM;AAEhE,QAAI,CAAC,OAAO,OAAO,aAAa,CAAC,OAAO,OAAO,cAAc;AAC3D,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAsD,CAAC;AAC7D,QAAI,OAAO,OAAO,WAAW;AAC3B,WAAK,YAAY,OAAO,OAAO;AAAA,IACjC;AACA,QAAI,OAAO,OAAO,cAAc;AAC9B,WAAK,eAAe,OAAO,OAAO;AAAA,IACpC;AAEA,UAAM,WAAW,MAAM,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB;AAAA,MACA,SAAS,OAAO;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,iBAClB,QAC8B;AAC9B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAA6B;AAAA,MAClD,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAoB,oBAClB,QAC8B;AAC9B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,aAAa,mBAAmB,OAAO,MAAM,CAAC;AAAA,QACnD,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,QAA6B;AAAA,MAClD,GAAG;AAAA,MACH,MAAM,EAAE,IAAI,WAAW;AAAA,MACvB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,OAAe,eACb,gBACA,QACA;AACA,QAAI,CAAC,UAAU,CAAC,OAAO,SAAS,GAAG,GAAG;AACpC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAe,cACb,gBACA,OACA;AACA,QAAI,CAAC,SAAS,CAAC,YAAY,KAAK,KAAK,GAAG;AACtC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,OAAe,oBACb,gBACA,OACA;AACA,QAAI,CAAC,SAAS,MAAM,KAAK,EAAE,WAAW,GAAG;AACvC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAIA,UAAM,eAAe,MAAM,KAAK;AAGhC,QAAI,aAAa;AACjB,eAAW,QAAQ,cAAc;AAC/B,UAAI,SAAS,IAAK;AAClB,UAAI,SAAS,IAAK;AAClB,UAAI,aAAa,GAAG;AAClB,cAAM,IAAI;AAAA,UACR,GAAG,eAAe,OAAO,IAAI;AAAA,UAC7B;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,eAAe,GAAG;AACpB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAGA,QAAI,eAAe;AACnB,eAAW,QAAQ,cAAc;AAC/B,UAAI,SAAS,IAAK;AAClB,UAAI,SAAS,IAAK;AAClB,UAAI,eAAe,GAAG;AACpB,cAAM,IAAI;AAAA,UACR,GAAG,eAAe,OAAO,IAAI;AAAA,UAC7B;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,iBAAiB,GAAG;AACtB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAGA,UAAM,cAAc,aAAa,MAAM,KAAK,KAAK,CAAC,GAAG;AACrD,QAAI,aAAa,MAAM,GAAG;AACxB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAKA,UAAM,gBAAgB,UAAU,KAAK,YAAY;AACjD,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/services/console/console.approvals.m2m.service.d.ts

@@ -1,4 +1,4 @@
-import type { ApprovalM2mActor, BackupDto, ChangeClusterPlanTypeResult, ChangeGenerationVersionsResult, ClusterBulkStepRequestDto, ClusterBulkStepResultDto, ClusterModificationConfigDto, ClusterPlanModificationConfig, ClusterPlanTypeStateDto, ClusterTtlDeletionResult, GenerationImageVersionsDto, MoveClusterOwnerResult, ReleaseTrainPreview, ReleaseTrainPublishPayload, ReleaseTrainRollbackPayload } from '@camunda/ccma-shared-types';
+import type { ApprovalM2mActor, BackupDto, ChangeClusterPlanTypeResult, ChangeGenerationVersionsResult, ClusterBulkStepRequestDto, ClusterBulkStepResultDto, ClusterModificationConfigDto, ClusterPlanModificationConfig, ClusterPlanTypeClustersDto, ClusterPlanTypeStateDto, ClusterTtlDeletionResult, ForceDeleteClusterPlanTypeStepResult, GenerationImageVersionsDto, MoveClusterOwnerResult, ReleaseTrainPreview, ReleaseTrainPublishPayload, ReleaseTrainRollbackPayload } from '@camunda/ccma-shared-types';
 import type { RequestBaseParams } from '../../types/general.types.js';
 import type { GenerationService } from './generation.service.js';
 /**
@@ -48,6 +48,28 @@ export interface ChangeClusterPlanTypeThroughApprovalRequest extends RequestBase
         keepModification?: boolean;
     };
 }
+export interface ReadClusterPlanTypeClustersRequest extends RequestBaseParams {
+    params: {
+        planTypeId: string;
+    };
+}
+export interface DeleteClusterOfPlanTypeThroughApprovalRequest extends RequestBaseParams {
+    params: {
+        planTypeId: string;
+        clusterId: string;
+    };
+    body: {
+        actor: ApprovalM2mActor;
+    };
+}
+export interface DeleteClusterPlanTypeThroughApprovalRequest extends RequestBaseParams {
+    params: {
+        planTypeId: string;
+    };
+    body: {
+        actor: ApprovalM2mActor;
+    };
+}
 export interface ReadClusterPlanTypeStateRequest extends RequestBaseParams {
     params: {
         clusterId: string;
@@ -299,6 +321,23 @@ export declare class ConsoleApprovalsM2MService {
     static checkCustomGenerationRemoval(params: CheckCustomGenerationRemovalRequest): Promise<CustomGenerationThroughApprovalResult>;
     /** Deletes a custom generation that the Camundi created. It cannot be undone. */
     static deleteCustomGeneration(params: DeleteCustomGenerationThroughApprovalRequest): Promise<CustomGenerationThroughApprovalResult>;
+    /**
+     * The clusters of a plan type now, for the request that force deletes it.
+     * Console answers 404 when the plan type does not exist.
+     */
+    static readClusterPlanTypeClusters(params: ReadClusterPlanTypeClustersRequest): Promise<ClusterPlanTypeClustersDto>;
+    /**
+     * Deletes one cluster of a plan type, for a force delete request. It cannot
+     * be undone. Console answers `gone` for a cluster that does not exist or
+     * that is on another plan type now, and deletes nothing then.
+     */
+    static deleteClusterOfPlanType(params: DeleteClusterOfPlanTypeThroughApprovalRequest): Promise<ForceDeleteClusterPlanTypeStepResult>;
+    /**
+     * Deletes a plan type that no cluster uses, for a force delete request. It
+     * cannot be undone. Console answers 409 while a cluster still uses the
+     * type, and `gone` when the type does not exist.
+     */
+    static deleteClusterPlanType(params: DeleteClusterPlanTypeThroughApprovalRequest): Promise<ForceDeleteClusterPlanTypeStepResult>;
     /** Reads what a publish would change. It changes nothing. */
     static previewReleaseTrainPublish(params: PreviewReleaseTrainPublishRequest): Promise<ReleaseTrainPreview>;
     /** Publishes a release train generation. */

package/dist/services/console/console.approvals.m2m.service.js

@@ -369,6 +369,74 @@ class ConsoleApprovalsM2MService {
       }
     );
   }
+  /**
+   * The clusters of a plan type now, for the request that force deletes it.
+   * Console answers 404 when the plan type does not exist.
+   */
+  static async readClusterPlanTypeClusters(params) {
+    const serviceContext = {
+      method: {
+        name: "ConsoleApprovalsM2MService.readClusterPlanTypeClusters",
+        url: `api/admin/approvals/cluster-plan-types/${params.params.planTypeId}/clusters`,
+        normalizedUrl: "api/admin/approvals/cluster-plan-types/:planTypeId/clusters",
+        type: "get"
+      },
+      source: params.config.metrics?.source || "unset",
+      target: { name: "console", type: "internal" }
+    };
+    const response = await request({
+      config: params.config,
+      base: { id: "console" },
+      url: serviceContext.method.url,
+      method: serviceContext.method.type,
+      metricsDetails: serviceContext,
+      responseType: "json"
+    });
+    if (!response.ok || !response.body) {
+      throw new HttpError(
+        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,
+        response.status,
+        response.statusText
+      );
+    }
+    return response.body;
+  }
+  /**
+   * Deletes one cluster of a plan type, for a force delete request. It cannot
+   * be undone. Console answers `gone` for a cluster that does not exist or
+   * that is on another plan type now, and deletes nothing then.
+   */
+  static async deleteClusterOfPlanType(params) {
+    const { planTypeId, clusterId } = params.params;
+    return ConsoleApprovalsM2MService.callApprovalRoute(
+      {
+        config: params.config,
+        name: "ConsoleApprovalsM2MService.deleteClusterOfPlanType",
+        url: `api/admin/approvals/cluster-plan-types/${planTypeId}/clusters/${clusterId}`,
+        normalizedUrl: "api/admin/approvals/cluster-plan-types/:planTypeId/clusters/:clusterId",
+        type: "delete",
+        body: params.body
+      }
+    );
+  }
+  /**
+   * Deletes a plan type that no cluster uses, for a force delete request. It
+   * cannot be undone. Console answers 409 while a cluster still uses the
+   * type, and `gone` when the type does not exist.
+   */
+  static async deleteClusterPlanType(params) {
+    const { planTypeId } = params.params;
+    return ConsoleApprovalsM2MService.callApprovalRoute(
+      {
+        config: params.config,
+        name: "ConsoleApprovalsM2MService.deleteClusterPlanType",
+        url: `api/admin/approvals/cluster-plan-types/${planTypeId}`,
+        normalizedUrl: "api/admin/approvals/cluster-plan-types/:planTypeId",
+        type: "delete",
+        body: params.body
+      }
+    );
+  }
   /** Reads what a publish would change. It changes nothing. */
   static async previewReleaseTrainPublish(params) {
     return ConsoleApprovalsM2MService.callApprovalRoute({

package/dist/services/console/console.approvals.m2m.service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/services/console/console.approvals.m2m.service.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  ApprovalM2mActor,\n  BackupDto,\n  ChangeClusterPlanTypeResult,\n  ChangeGenerationVersionsResult,\n  ClusterBulkStepRequestDto,\n  ClusterBulkStepResultDto,\n  ClusterModificationConfigDto,\n  ClusterPlanModificationConfig,\n  ClusterPlanTypeStateDto,\n  ClusterTtlDeletionResult,\n  GenerationImageVersionsDto,\n  MoveClusterOwnerResult,\n  ReleaseTrainPreview,\n  ReleaseTrainPublishPayload,\n  ReleaseTrainRollbackPayload,\n} from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\nimport type { GenerationService } from './generation.service.js'\n\n/**\n * The route of `api/admin/approvals` in console-backend.\n *\n * The twin of `AccountsApprovalsM2MService`. Read the note there.\n */\n\nexport interface MoveClusterOwnerThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterId: string }\n  body: {\n    actor: ApprovalM2mActor\n    ownerId: string\n  }\n}\n\nexport interface ChangeClusterPlanTypeThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterId: string }\n  body: {\n    actor: ApprovalM2mActor\n    /** The organization that owns the cluster. Console refuses another one. */\n    orgId: string\n    toPlanTypeUuid: string\n    numberOfAllocatedHwPackages: number\n    /**\n     * The plan type that the person who asked READ. Console compares it with\n     * the plan type of the cluster when the action runs, and changes nothing\n     * when the two differ.\n     */\n    expectedPlanTypeUuid: string\n    /** The packages the person READ, 1 for a cluster that holds none. */\n    expectedNumberOfAllocatedHwPackages: number\n    /** The plan the cluster ran when the person read it. */\n    expectedClusterPlanUuid: string\n    /** The active modification config the person read, absent for none. */\n    expectedActiveModificationConfigUuid?: string\n    /** The active plan of the new plan type the person read. */\n    expectedTargetPlanUuid: string\n    /** Whether the cluster plan moves to that plan, as the person read it. */\n    expectedClusterPlanUpdate: boolean\n    /**\n     * Whether the active modification config stays on the cluster. Absent\n     * reads as false: the change removes it.\n     */\n    keepModification?: boolean\n  }\n}\n\nexport interface ReadClusterPlanTypeStateRequest extends RequestBaseParams {\n  params: { clusterId: string }\n  query: {\n    /** The organization that owns the cluster. Console refuses another one. */\n    orgId: string\n    /** The plan type of the question: its active plan is in the answer. */\n    toPlanTypeUuid: string\n  }\n}\n\nexport interface ChangeGenerationVersionsThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { generationId: string }\n  body: {\n    actor: ApprovalM2mActor\n    /**\n     * The image versions to write. A key that is absent keeps its value.\n     * An empty string clears an optional one. The env var fields are not\n     * accepted: see `GENERATION_IMAGE_VERSION_KEYS`.\n     */\n    versions: GenerationImageVersionsDto\n    /**\n     * The values that the person who asked READ, one for each key of\n     * `versions`. Console compares them with the generation when the action\n     * runs, and changes nothing when one differs.\n     */\n    expectedVersions: GenerationImageVersionsDto\n  }\n}\n\nexport interface RunClusterBulkStepThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterId: string }\n  body: ClusterBulkStepRequestDto & { actor: ApprovalM2mActor }\n}\n\nexport interface AnnounceClusterBulkPlanUpdateRequest\n  extends RequestBaseParams {\n  body: {\n    actor: ApprovalM2mActor\n    toPlanUuid: string\n    doneCount: number\n  }\n}\n\nexport interface DeleteInternalBackupThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterId: string; backupName: string }\n  body: { actor: ApprovalM2mActor }\n}\n\nexport interface DeleteClusterPastTtlThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterId: string }\n  body: {\n    actor: ApprovalM2mActor\n    /** The owner that the request names. Console keeps a cluster with another. */\n    orgId: string\n  }\n}\n\nexport interface CreateCustomClusterPlanThroughApprovalRequest\n  extends RequestBaseParams {\n  body: {\n    actor: ApprovalM2mActor\n    clusterPlanId: string\n    name: string\n    plan: Record<string, unknown>\n  }\n}\n\nexport interface CheckCustomClusterPlanRemovalRequest\n  extends RequestBaseParams {\n  params: { clusterPlanId: string }\n  body: { actor: ApprovalM2mActor; forDelete: boolean }\n}\n\nexport interface DeleteCustomClusterPlanThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterPlanId: string }\n  body: { actor: ApprovalM2mActor }\n}\n\n/** The publish and rollback requests carry no `preview`. Console reads it. */\nexport type ReleaseTrainPublishRequest = Omit<\n  ReleaseTrainPublishPayload,\n  'preview'\n>\nexport type ReleaseTrainRollbackRequest = Omit<\n  ReleaseTrainRollbackPayload,\n  'preview'\n>\n\n/** The answer of `GenerationService.publishReleaseTrain`. */\nexport type PublishReleaseTrainThroughApprovalResult = NonNullable<\n  Awaited<ReturnType<typeof GenerationService.publishReleaseTrain>>\n>\n\n/** The answer of `GenerationService.rollbackReleaseTrain`. */\nexport type RollbackReleaseTrainThroughApprovalResult = NonNullable<\n  Awaited<ReturnType<typeof GenerationService.rollbackReleaseTrain>>\n>\n\nexport interface PreviewReleaseTrainPublishRequest extends RequestBaseParams {\n  body: { request: ReleaseTrainPublishRequest }\n}\n\nexport interface PublishReleaseTrainThroughApprovalRequest\n  extends RequestBaseParams {\n  body: { actor: ApprovalM2mActor; request: ReleaseTrainPublishRequest }\n}\n\nexport interface PreviewReleaseTrainRollbackRequest extends RequestBaseParams {\n  body: { request: ReleaseTrainRollbackRequest }\n}\n\nexport interface RollbackReleaseTrainThroughApprovalRequest\n  extends RequestBaseParams {\n  body: { actor: ApprovalM2mActor; request: ReleaseTrainRollbackRequest }\n}\n\n/** What console answers for a custom cluster plan call. */\nexport interface CustomClusterPlanThroughApprovalResult {\n  clusterPlanId: string\n}\n\nexport interface CreateCustomGenerationThroughApprovalRequest\n  extends RequestBaseParams {\n  body: {\n    actor: ApprovalM2mActor\n    generationId: string\n    name: string\n    versions: Record<string, string>\n    upgradeableFrom?: string[]\n  }\n}\n\nexport interface CheckCustomGenerationRemovalRequest extends RequestBaseParams {\n  params: { generationId: string }\n  body: { actor: ApprovalM2mActor; forDelete: boolean }\n}\n\nexport interface DeleteCustomGenerationThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { generationId: string }\n  body: { actor: ApprovalM2mActor }\n}\n\n/** What console answers for a custom generation call. */\nexport interface CustomGenerationThroughApprovalResult {\n  generationId: string\n}\n\nexport interface ApplySelfServiceModificationRequest extends RequestBaseParams {\n  params: { clusterUuid: string }\n  body: {\n    actor: ApprovalM2mActor\n    /** The organization that owns the cluster. Console refuses another one. */\n    orgId: string\n    description: string\n    planModifications: ClusterPlanModificationConfig[]\n    /**\n     * An ISO date, today to 30 days ahead. With no date, the config does not\n     * expire.\n     */\n    expiresAt?: string\n  }\n}\n\nexport interface DeactivateSelfServiceModificationRequest\n  extends RequestBaseParams {\n  params: { clusterUuid: string }\n  body: {\n    actor: ApprovalM2mActor\n    orgId: string\n    configId: string\n  }\n}\n\nexport class ConsoleApprovalsM2MService {\n  public static async moveClusterOwner(\n    params: MoveClusterOwnerThroughApprovalRequest,\n  ): Promise<MoveClusterOwnerResult> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.moveClusterOwner',\n        url: `api/admin/approvals/clusters/${params.params.clusterId}/owner`,\n        normalizedUrl: 'api/admin/approvals/clusters/:clusterId/owner',\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<MoveClusterOwnerResult>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n\n    // This route is new, so there is no older backend that answers 204 with no\n    // body for the same-owner case. `ConsoleClusterService.moveClusterOwner`\n    // carries that case, and this one does not need it.\n    return response.body!\n  }\n\n  /**\n   * The cluster as a plan type change reads it: the fields of the stale\n   * guard of `changeClusterPlanType`, for a comparison before a request\n   * opens. See `ClusterPlanTypeStateDto`.\n   */\n  public static async readClusterPlanTypeState(\n    params: ReadClusterPlanTypeStateRequest,\n  ): Promise<ClusterPlanTypeStateDto> {\n    const query = new URLSearchParams({\n      orgId: params.query.orgId,\n      toPlanTypeUuid: params.query.toPlanTypeUuid,\n    })\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.readClusterPlanTypeState',\n        url: `api/admin/approvals/clusters/${params.params.clusterId}/plan-type-state?${query.toString()}`,\n        normalizedUrl:\n          'api/admin/approvals/clusters/:clusterId/plan-type-state',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ClusterPlanTypeStateDto>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n    })\n\n    if (!response.ok || !response.body) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n\n  /**\n   * Changes the mutable versions of one generation, and restarts its clusters.\n   *\n   * Console answers 409 when a value that the request expected is not the\n   * value of the generation any more.\n   */\n  public static async changeGenerationVersions(\n    params: ChangeGenerationVersionsThroughApprovalRequest,\n  ): Promise<ChangeGenerationVersionsResult> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.changeGenerationVersions',\n        url: `api/admin/approvals/generations/${params.params.generationId}/versions`,\n        normalizedUrl: 'api/admin/approvals/generations/:generationId/versions',\n        type: 'patch',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ChangeGenerationVersionsResult>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok || !response.body) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n\n  /**\n   * Changes the plan type and the hardware packages of one cluster.\n   *\n   * Console checks the reservations of the organization, and it moves the\n   * cluster plan to the active plan of the new type when that plan is\n   * migratable from the plan of the cluster. It answers 409 when one of the\n   * `expected\u2026` fields of the body differs at the run: the plan type, the\n   * hardware packages, the cluster plan or the active modification config\n   * of the cluster, or the active plan of the new type. A cluster that runs\n   * no plan and a type that has no active plan meet that guard too, because\n   * both fields of the body are required. It answers 400 when the request\n   * changes nothing, when the new type is retired, when its active plan is\n   * neither the plan of the cluster nor migratable from it, or when the\n   * organization has no free reservation.\n   */\n  public static async changeClusterPlanType(\n    params: ChangeClusterPlanTypeThroughApprovalRequest,\n  ): Promise<ChangeClusterPlanTypeResult> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.changeClusterPlanType',\n        url: `api/admin/approvals/clusters/${params.params.clusterId}/plan-type`,\n        normalizedUrl: 'api/admin/approvals/clusters/:clusterId/plan-type',\n        type: 'patch',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ChangeClusterPlanTypeResult>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok || !response.body) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n\n  /**\n   * Runs one step of a cluster bulk operation on one cluster.\n   *\n   * Every outcome of the STEP answers 200, including a cluster that refused.\n   * A thrown `HttpError` says that the CALL failed, and the caller then\n   * leaves the cluster to run again.\n   */\n  public static async runClusterBulkStep(\n    params: RunClusterBulkStepThroughApprovalRequest,\n  ): Promise<ClusterBulkStepResultDto> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.runClusterBulkStep',\n        url: `api/admin/approvals/clusters/${params.params.clusterId}/bulk-step`,\n        normalizedUrl: 'api/admin/approvals/clusters/:clusterId/bulk-step',\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ClusterBulkStepResultDto>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok || !response.body) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n\n  /**\n   * Posts the Slack message that ends an approved bulk plan update. The bulk\n   * operation of console-backend posts the same message after its run.\n   */\n  public static async announceClusterBulkPlanUpdate(\n    params: AnnounceClusterBulkPlanUpdateRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.announceClusterBulkPlanUpdate',\n        url: 'api/admin/approvals/cluster-bulk/plan-update-announcement',\n        normalizedUrl:\n          'api/admin/approvals/cluster-bulk/plan-update-announcement',\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<void>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'none',\n      body: params.body,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /** Deletes an internal (incident) backup of a cluster. It cannot be undone. */\n  public static async deleteInternalBackup(\n    params: DeleteInternalBackupThroughApprovalRequest,\n  ): Promise<BackupDto> {\n    const { clusterId, backupName } = params.params\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.deleteInternalBackup',\n        url: `api/admin/approvals/clusters/${clusterId}/internal-backups/${encodeURIComponent(backupName)}`,\n        normalizedUrl:\n          'api/admin/approvals/clusters/:clusterId/internal-backups/:backupName',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<BackupDto>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  /**\n   * Deletes a cluster whose TTL ran out. Console tests the TTL and the owner\n   * again first, and answers `kept` when the cluster stays.\n   */\n  public static async deleteClusterPastTtl(\n    params: DeleteClusterPastTtlThroughApprovalRequest,\n  ): Promise<ClusterTtlDeletionResult> {\n    const { clusterId } = params.params\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.deleteClusterPastTtl',\n        url: `api/admin/approvals/clusters/${clusterId}/ttl-expiry`,\n        normalizedUrl: 'api/admin/approvals/clusters/:clusterId/ttl-expiry',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ClusterTtlDeletionResult>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  /** Creates a cluster plan for a Camundi, with the uuid that the caller gives. */\n  public static async createCustomClusterPlan(\n    params: CreateCustomClusterPlanThroughApprovalRequest,\n  ): Promise<CustomClusterPlanThroughApprovalResult> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomClusterPlanThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.createCustomClusterPlan',\n        url: 'api/admin/approvals/cluster-plans',\n        normalizedUrl: 'api/admin/approvals/cluster-plans',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /**\n   * Asks whether a Camundi may remove a plan. Console answers 403 for a plan\n   * of another person, and 409 for a plan that a cluster uses.\n   */\n  public static async checkCustomClusterPlanRemoval(\n    params: CheckCustomClusterPlanRemovalRequest,\n  ): Promise<CustomClusterPlanThroughApprovalResult> {\n    const { clusterPlanId } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomClusterPlanThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.checkCustomClusterPlanRemoval',\n        url: `api/admin/approvals/cluster-plans/${clusterPlanId}/removal-check`,\n        normalizedUrl:\n          'api/admin/approvals/cluster-plans/:clusterPlanId/removal-check',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Deletes a cluster plan that the Camundi created. It cannot be undone. */\n  public static async deleteCustomClusterPlan(\n    params: DeleteCustomClusterPlanThroughApprovalRequest,\n  ): Promise<CustomClusterPlanThroughApprovalResult> {\n    const { clusterPlanId } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomClusterPlanThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.deleteCustomClusterPlan',\n        url: `api/admin/approvals/cluster-plans/${clusterPlanId}`,\n        normalizedUrl: 'api/admin/approvals/cluster-plans/:clusterPlanId',\n        type: 'delete',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Creates a bespoke generation for a Camundi, with the uuid that the caller gives. */\n  public static async createCustomGeneration(\n    params: CreateCustomGenerationThroughApprovalRequest,\n  ): Promise<CustomGenerationThroughApprovalResult> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomGenerationThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.createCustomGeneration',\n        url: 'api/admin/approvals/generations',\n        normalizedUrl: 'api/admin/approvals/generations',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /**\n   * Asks whether a Camundi may remove a generation. Console answers 404 for a\n   * generation of another person, or a generation that is not bespoke, and 409\n   * for a delete that it refuses. A bespoke generation that the Camundi\n   * created in the admin tool counts as theirs.\n   */\n  public static async checkCustomGenerationRemoval(\n    params: CheckCustomGenerationRemovalRequest,\n  ): Promise<CustomGenerationThroughApprovalResult> {\n    const { generationId } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomGenerationThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.checkCustomGenerationRemoval',\n        url: `api/admin/approvals/generations/${generationId}/removal-check`,\n        normalizedUrl:\n          'api/admin/approvals/generations/:generationId/removal-check',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Deletes a custom generation that the Camundi created. It cannot be undone. */\n  public static async deleteCustomGeneration(\n    params: DeleteCustomGenerationThroughApprovalRequest,\n  ): Promise<CustomGenerationThroughApprovalResult> {\n    const { generationId } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomGenerationThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.deleteCustomGeneration',\n        url: `api/admin/approvals/generations/${generationId}`,\n        normalizedUrl: 'api/admin/approvals/generations/:generationId',\n        type: 'delete',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Reads what a publish would change. It changes nothing. */\n  public static async previewReleaseTrainPublish(\n    params: PreviewReleaseTrainPublishRequest,\n  ): Promise<ReleaseTrainPreview> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<ReleaseTrainPreview>({\n      config: params.config,\n      name: 'ConsoleApprovalsM2MService.previewReleaseTrainPublish',\n      url: 'api/admin/approvals/release-train/publish/preview',\n      normalizedUrl: 'api/admin/approvals/release-train/publish/preview',\n      type: 'post',\n      body: params.body,\n    })\n  }\n\n  /** Publishes a release train generation. */\n  public static async publishReleaseTrain(\n    params: PublishReleaseTrainThroughApprovalRequest,\n  ): Promise<PublishReleaseTrainThroughApprovalResult> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<PublishReleaseTrainThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.publishReleaseTrain',\n        url: 'api/admin/approvals/release-train/publish',\n        normalizedUrl: 'api/admin/approvals/release-train/publish',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Reads what a rollback would change. It changes nothing. */\n  public static async previewReleaseTrainRollback(\n    params: PreviewReleaseTrainRollbackRequest,\n  ): Promise<ReleaseTrainPreview> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<ReleaseTrainPreview>({\n      config: params.config,\n      name: 'ConsoleApprovalsM2MService.previewReleaseTrainRollback',\n      url: 'api/admin/approvals/release-train/rollback/preview',\n      normalizedUrl: 'api/admin/approvals/release-train/rollback/preview',\n      type: 'post',\n      body: params.body,\n    })\n  }\n\n  /** Rolls back a release train generation. */\n  public static async rollbackReleaseTrain(\n    params: RollbackReleaseTrainThroughApprovalRequest,\n  ): Promise<RollbackReleaseTrainThroughApprovalResult> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<RollbackReleaseTrainThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.rollbackReleaseTrain',\n        url: 'api/admin/approvals/release-train/rollback',\n        normalizedUrl: 'api/admin/approvals/release-train/rollback',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /**\n   * Applies a cluster modification for the owner of the cluster, with no\n   * approval. Console answers the new config.\n   */\n  public static async applySelfServiceModification(\n    params: ApplySelfServiceModificationRequest,\n  ): Promise<ClusterModificationConfigDto> {\n    const { clusterUuid } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<ClusterModificationConfigDto>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.applySelfServiceModification',\n        url: `api/admin/approvals/clusters/${clusterUuid}/self-service-modification`,\n        normalizedUrl:\n          'api/admin/approvals/clusters/:clusterUuid/self-service-modification',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Deactivates the active config of a cluster for its owner. */\n  public static async deactivateSelfServiceModification(\n    params: DeactivateSelfServiceModificationRequest,\n  ): Promise<ClusterModificationConfigDto> {\n    const { clusterUuid } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<ClusterModificationConfigDto>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.deactivateSelfServiceModification',\n        url: `api/admin/approvals/clusters/${clusterUuid}/self-service-modification/deactivate`,\n        normalizedUrl:\n          'api/admin/approvals/clusters/:clusterUuid/self-service-modification/deactivate',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  private static async callApprovalRoute<T>(args: {\n    config: RequestBaseParams['config']\n    name: string\n    url: string\n    normalizedUrl: string\n    type: 'post' | 'delete'\n    body: unknown\n  }): Promise<T> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: args.name,\n        url: args.url,\n        normalizedUrl: args.normalizedUrl,\n        type: args.type,\n      },\n      source: args.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<T>({\n      config: args.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: args.body,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n}\n"],
-  "mappings": "AA2BA,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAsOnB,MAAM,2BAA2B;AAAA,EACtC,aAAoB,iBAClB,QACiC;AACjC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,OAAO,OAAO,SAAS;AAAA,QAC5D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAgC;AAAA,MACrD,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAKA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,yBAClB,QACkC;AAClC,UAAM,QAAQ,IAAI,gBAAgB;AAAA,MAChC,OAAO,OAAO,MAAM;AAAA,MACpB,gBAAgB,OAAO,MAAM;AAAA,IAC/B,CAAC;AACD,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,OAAO,OAAO,SAAS,oBAAoB,MAAM,SAAS,CAAC;AAAA,QAChG,eACE;AAAA,QACF,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAiC;AAAA,MACtD,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,MAAM,CAAC,SAAS,MAAM;AAClC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,yBAClB,QACyC;AACzC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,mCAAmC,OAAO,OAAO,YAAY;AAAA,QAClE,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAwC;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,MAAM,CAAC,SAAS,MAAM;AAClC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,aAAoB,sBAClB,QACsC;AACtC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,OAAO,OAAO,SAAS;AAAA,QAC5D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAqC;AAAA,MAC1D,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,MAAM,CAAC,SAAS,MAAM;AAClC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,mBAClB,QACmC;AACnC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,OAAO,OAAO,SAAS;AAAA,QAC5D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAkC;AAAA,MACvD,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,MAAM,CAAC,SAAS,MAAM;AAClC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,8BAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eACE;AAAA,QACF,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAc;AAAA,MACnC,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,qBAClB,QACoB;AACpB,UAAM,EAAE,WAAW,WAAW,IAAI,OAAO;AACzC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,SAAS,qBAAqB,mBAAmB,UAAU,CAAC;AAAA,QACjG,eACE;AAAA,QACF,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAmB;AAAA,MACxC,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,qBAClB,QACmC;AACnC,UAAM,EAAE,UAAU,IAAI,OAAO;AAC7B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,SAAS;AAAA,QAC9C,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAkC;AAAA,MACvD,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA,EAGA,aAAoB,wBAClB,QACiD;AACjD,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,8BAClB,QACiD;AACjD,UAAM,EAAE,cAAc,IAAI,OAAO;AACjC,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,qCAAqC,aAAa;AAAA,QACvD,eACE;AAAA,QACF,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,wBAClB,QACiD;AACjD,UAAM,EAAE,cAAc,IAAI,OAAO;AACjC,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,qCAAqC,aAAa;AAAA,QACvD,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,uBAClB,QACgD;AAChD,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,6BAClB,QACgD;AAChD,UAAM,EAAE,aAAa,IAAI,OAAO;AAChC,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,mCAAmC,YAAY;AAAA,QACpD,eACE;AAAA,QACF,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,uBAClB,QACgD;AAChD,UAAM,EAAE,aAAa,IAAI,OAAO;AAChC,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,mCAAmC,YAAY;AAAA,QACpD,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,2BAClB,QAC8B;AAC9B,WAAO,2BAA2B,kBAAuC;AAAA,MACvE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK;AAAA,MACL,eAAe;AAAA,MACf,MAAM;AAAA,MACN,MAAM,OAAO;AAAA,IACf,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,aAAoB,oBAClB,QACmD;AACnD,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,4BAClB,QAC8B;AAC9B,WAAO,2BAA2B,kBAAuC;AAAA,MACvE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK;AAAA,MACL,eAAe;AAAA,MACf,MAAM;AAAA,MACN,MAAM,OAAO;AAAA,IACf,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,aAAoB,qBAClB,QACoD;AACpD,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,6BAClB,QACuC;AACvC,UAAM,EAAE,YAAY,IAAI,OAAO;AAC/B,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,gCAAgC,WAAW;AAAA,QAChD,eACE;AAAA,QACF,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,kCAClB,QACuC;AACvC,UAAM,EAAE,YAAY,IAAI,OAAO;AAC/B,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,gCAAgC,WAAW;AAAA,QAChD,eACE;AAAA,QACF,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAqB,kBAAqB,MAO3B;AACb,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,QACV,eAAe,KAAK;AAAA,QACpB,MAAM,KAAK;AAAA,MACb;AAAA,MACA,QAAQ,KAAK,OAAO,SAAS,UAAU;AAAA,MACvC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAW;AAAA,MAChC,QAAQ,KAAK;AAAA,MACb,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,KAAK;AAAA,IACb,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  ApprovalM2mActor,\n  BackupDto,\n  ChangeClusterPlanTypeResult,\n  ChangeGenerationVersionsResult,\n  ClusterBulkStepRequestDto,\n  ClusterBulkStepResultDto,\n  ClusterModificationConfigDto,\n  ClusterPlanModificationConfig,\n  ClusterPlanTypeClustersDto,\n  ClusterPlanTypeStateDto,\n  ClusterTtlDeletionResult,\n  ForceDeleteClusterPlanTypeStepResult,\n  GenerationImageVersionsDto,\n  MoveClusterOwnerResult,\n  ReleaseTrainPreview,\n  ReleaseTrainPublishPayload,\n  ReleaseTrainRollbackPayload,\n} from '@camunda/ccma-shared-types'\nimport type {\n  RequestBaseParams,\n  RequestBaseServiceContext,\n} from '../../types/general.types.js'\nimport { request } from '../../utils/api.js'\nimport { HttpError } from '../../utils/errors.js'\nimport type { GenerationService } from './generation.service.js'\n\n/**\n * The route of `api/admin/approvals` in console-backend.\n *\n * The twin of `AccountsApprovalsM2MService`. Read the note there.\n */\n\nexport interface MoveClusterOwnerThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterId: string }\n  body: {\n    actor: ApprovalM2mActor\n    ownerId: string\n  }\n}\n\nexport interface ChangeClusterPlanTypeThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterId: string }\n  body: {\n    actor: ApprovalM2mActor\n    /** The organization that owns the cluster. Console refuses another one. */\n    orgId: string\n    toPlanTypeUuid: string\n    numberOfAllocatedHwPackages: number\n    /**\n     * The plan type that the person who asked READ. Console compares it with\n     * the plan type of the cluster when the action runs, and changes nothing\n     * when the two differ.\n     */\n    expectedPlanTypeUuid: string\n    /** The packages the person READ, 1 for a cluster that holds none. */\n    expectedNumberOfAllocatedHwPackages: number\n    /** The plan the cluster ran when the person read it. */\n    expectedClusterPlanUuid: string\n    /** The active modification config the person read, absent for none. */\n    expectedActiveModificationConfigUuid?: string\n    /** The active plan of the new plan type the person read. */\n    expectedTargetPlanUuid: string\n    /** Whether the cluster plan moves to that plan, as the person read it. */\n    expectedClusterPlanUpdate: boolean\n    /**\n     * Whether the active modification config stays on the cluster. Absent\n     * reads as false: the change removes it.\n     */\n    keepModification?: boolean\n  }\n}\n\nexport interface ReadClusterPlanTypeClustersRequest extends RequestBaseParams {\n  params: { planTypeId: string }\n}\n\nexport interface DeleteClusterOfPlanTypeThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { planTypeId: string; clusterId: string }\n  body: { actor: ApprovalM2mActor }\n}\n\nexport interface DeleteClusterPlanTypeThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { planTypeId: string }\n  body: { actor: ApprovalM2mActor }\n}\n\nexport interface ReadClusterPlanTypeStateRequest extends RequestBaseParams {\n  params: { clusterId: string }\n  query: {\n    /** The organization that owns the cluster. Console refuses another one. */\n    orgId: string\n    /** The plan type of the question: its active plan is in the answer. */\n    toPlanTypeUuid: string\n  }\n}\n\nexport interface ChangeGenerationVersionsThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { generationId: string }\n  body: {\n    actor: ApprovalM2mActor\n    /**\n     * The image versions to write. A key that is absent keeps its value.\n     * An empty string clears an optional one. The env var fields are not\n     * accepted: see `GENERATION_IMAGE_VERSION_KEYS`.\n     */\n    versions: GenerationImageVersionsDto\n    /**\n     * The values that the person who asked READ, one for each key of\n     * `versions`. Console compares them with the generation when the action\n     * runs, and changes nothing when one differs.\n     */\n    expectedVersions: GenerationImageVersionsDto\n  }\n}\n\nexport interface RunClusterBulkStepThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterId: string }\n  body: ClusterBulkStepRequestDto & { actor: ApprovalM2mActor }\n}\n\nexport interface AnnounceClusterBulkPlanUpdateRequest\n  extends RequestBaseParams {\n  body: {\n    actor: ApprovalM2mActor\n    toPlanUuid: string\n    doneCount: number\n  }\n}\n\nexport interface DeleteInternalBackupThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterId: string; backupName: string }\n  body: { actor: ApprovalM2mActor }\n}\n\nexport interface DeleteClusterPastTtlThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterId: string }\n  body: {\n    actor: ApprovalM2mActor\n    /** The owner that the request names. Console keeps a cluster with another. */\n    orgId: string\n  }\n}\n\nexport interface CreateCustomClusterPlanThroughApprovalRequest\n  extends RequestBaseParams {\n  body: {\n    actor: ApprovalM2mActor\n    clusterPlanId: string\n    name: string\n    plan: Record<string, unknown>\n  }\n}\n\nexport interface CheckCustomClusterPlanRemovalRequest\n  extends RequestBaseParams {\n  params: { clusterPlanId: string }\n  body: { actor: ApprovalM2mActor; forDelete: boolean }\n}\n\nexport interface DeleteCustomClusterPlanThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { clusterPlanId: string }\n  body: { actor: ApprovalM2mActor }\n}\n\n/** The publish and rollback requests carry no `preview`. Console reads it. */\nexport type ReleaseTrainPublishRequest = Omit<\n  ReleaseTrainPublishPayload,\n  'preview'\n>\nexport type ReleaseTrainRollbackRequest = Omit<\n  ReleaseTrainRollbackPayload,\n  'preview'\n>\n\n/** The answer of `GenerationService.publishReleaseTrain`. */\nexport type PublishReleaseTrainThroughApprovalResult = NonNullable<\n  Awaited<ReturnType<typeof GenerationService.publishReleaseTrain>>\n>\n\n/** The answer of `GenerationService.rollbackReleaseTrain`. */\nexport type RollbackReleaseTrainThroughApprovalResult = NonNullable<\n  Awaited<ReturnType<typeof GenerationService.rollbackReleaseTrain>>\n>\n\nexport interface PreviewReleaseTrainPublishRequest extends RequestBaseParams {\n  body: { request: ReleaseTrainPublishRequest }\n}\n\nexport interface PublishReleaseTrainThroughApprovalRequest\n  extends RequestBaseParams {\n  body: { actor: ApprovalM2mActor; request: ReleaseTrainPublishRequest }\n}\n\nexport interface PreviewReleaseTrainRollbackRequest extends RequestBaseParams {\n  body: { request: ReleaseTrainRollbackRequest }\n}\n\nexport interface RollbackReleaseTrainThroughApprovalRequest\n  extends RequestBaseParams {\n  body: { actor: ApprovalM2mActor; request: ReleaseTrainRollbackRequest }\n}\n\n/** What console answers for a custom cluster plan call. */\nexport interface CustomClusterPlanThroughApprovalResult {\n  clusterPlanId: string\n}\n\nexport interface CreateCustomGenerationThroughApprovalRequest\n  extends RequestBaseParams {\n  body: {\n    actor: ApprovalM2mActor\n    generationId: string\n    name: string\n    versions: Record<string, string>\n    upgradeableFrom?: string[]\n  }\n}\n\nexport interface CheckCustomGenerationRemovalRequest extends RequestBaseParams {\n  params: { generationId: string }\n  body: { actor: ApprovalM2mActor; forDelete: boolean }\n}\n\nexport interface DeleteCustomGenerationThroughApprovalRequest\n  extends RequestBaseParams {\n  params: { generationId: string }\n  body: { actor: ApprovalM2mActor }\n}\n\n/** What console answers for a custom generation call. */\nexport interface CustomGenerationThroughApprovalResult {\n  generationId: string\n}\n\nexport interface ApplySelfServiceModificationRequest extends RequestBaseParams {\n  params: { clusterUuid: string }\n  body: {\n    actor: ApprovalM2mActor\n    /** The organization that owns the cluster. Console refuses another one. */\n    orgId: string\n    description: string\n    planModifications: ClusterPlanModificationConfig[]\n    /**\n     * An ISO date, today to 30 days ahead. With no date, the config does not\n     * expire.\n     */\n    expiresAt?: string\n  }\n}\n\nexport interface DeactivateSelfServiceModificationRequest\n  extends RequestBaseParams {\n  params: { clusterUuid: string }\n  body: {\n    actor: ApprovalM2mActor\n    orgId: string\n    configId: string\n  }\n}\n\nexport class ConsoleApprovalsM2MService {\n  public static async moveClusterOwner(\n    params: MoveClusterOwnerThroughApprovalRequest,\n  ): Promise<MoveClusterOwnerResult> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.moveClusterOwner',\n        url: `api/admin/approvals/clusters/${params.params.clusterId}/owner`,\n        normalizedUrl: 'api/admin/approvals/clusters/:clusterId/owner',\n        type: 'put',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<MoveClusterOwnerResult>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n\n    // This route is new, so there is no older backend that answers 204 with no\n    // body for the same-owner case. `ConsoleClusterService.moveClusterOwner`\n    // carries that case, and this one does not need it.\n    return response.body!\n  }\n\n  /**\n   * The cluster as a plan type change reads it: the fields of the stale\n   * guard of `changeClusterPlanType`, for a comparison before a request\n   * opens. See `ClusterPlanTypeStateDto`.\n   */\n  public static async readClusterPlanTypeState(\n    params: ReadClusterPlanTypeStateRequest,\n  ): Promise<ClusterPlanTypeStateDto> {\n    const query = new URLSearchParams({\n      orgId: params.query.orgId,\n      toPlanTypeUuid: params.query.toPlanTypeUuid,\n    })\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.readClusterPlanTypeState',\n        url: `api/admin/approvals/clusters/${params.params.clusterId}/plan-type-state?${query.toString()}`,\n        normalizedUrl:\n          'api/admin/approvals/clusters/:clusterId/plan-type-state',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ClusterPlanTypeStateDto>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n    })\n\n    if (!response.ok || !response.body) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n\n  /**\n   * Changes the mutable versions of one generation, and restarts its clusters.\n   *\n   * Console answers 409 when a value that the request expected is not the\n   * value of the generation any more.\n   */\n  public static async changeGenerationVersions(\n    params: ChangeGenerationVersionsThroughApprovalRequest,\n  ): Promise<ChangeGenerationVersionsResult> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.changeGenerationVersions',\n        url: `api/admin/approvals/generations/${params.params.generationId}/versions`,\n        normalizedUrl: 'api/admin/approvals/generations/:generationId/versions',\n        type: 'patch',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ChangeGenerationVersionsResult>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok || !response.body) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n\n  /**\n   * Changes the plan type and the hardware packages of one cluster.\n   *\n   * Console checks the reservations of the organization, and it moves the\n   * cluster plan to the active plan of the new type when that plan is\n   * migratable from the plan of the cluster. It answers 409 when one of the\n   * `expected\u2026` fields of the body differs at the run: the plan type, the\n   * hardware packages, the cluster plan or the active modification config\n   * of the cluster, or the active plan of the new type. A cluster that runs\n   * no plan and a type that has no active plan meet that guard too, because\n   * both fields of the body are required. It answers 400 when the request\n   * changes nothing, when the new type is retired, when its active plan is\n   * neither the plan of the cluster nor migratable from it, or when the\n   * organization has no free reservation.\n   */\n  public static async changeClusterPlanType(\n    params: ChangeClusterPlanTypeThroughApprovalRequest,\n  ): Promise<ChangeClusterPlanTypeResult> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.changeClusterPlanType',\n        url: `api/admin/approvals/clusters/${params.params.clusterId}/plan-type`,\n        normalizedUrl: 'api/admin/approvals/clusters/:clusterId/plan-type',\n        type: 'patch',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ChangeClusterPlanTypeResult>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok || !response.body) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n\n  /**\n   * Runs one step of a cluster bulk operation on one cluster.\n   *\n   * Every outcome of the STEP answers 200, including a cluster that refused.\n   * A thrown `HttpError` says that the CALL failed, and the caller then\n   * leaves the cluster to run again.\n   */\n  public static async runClusterBulkStep(\n    params: RunClusterBulkStepThroughApprovalRequest,\n  ): Promise<ClusterBulkStepResultDto> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.runClusterBulkStep',\n        url: `api/admin/approvals/clusters/${params.params.clusterId}/bulk-step`,\n        normalizedUrl: 'api/admin/approvals/clusters/:clusterId/bulk-step',\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ClusterBulkStepResultDto>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok || !response.body) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n\n  /**\n   * Posts the Slack message that ends an approved bulk plan update. The bulk\n   * operation of console-backend posts the same message after its run.\n   */\n  public static async announceClusterBulkPlanUpdate(\n    params: AnnounceClusterBulkPlanUpdateRequest,\n  ): Promise<void> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.announceClusterBulkPlanUpdate',\n        url: 'api/admin/approvals/cluster-bulk/plan-update-announcement',\n        normalizedUrl:\n          'api/admin/approvals/cluster-bulk/plan-update-announcement',\n        type: 'post',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<void>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'none',\n      body: params.body,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n  }\n\n  /** Deletes an internal (incident) backup of a cluster. It cannot be undone. */\n  public static async deleteInternalBackup(\n    params: DeleteInternalBackupThroughApprovalRequest,\n  ): Promise<BackupDto> {\n    const { clusterId, backupName } = params.params\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.deleteInternalBackup',\n        url: `api/admin/approvals/clusters/${clusterId}/internal-backups/${encodeURIComponent(backupName)}`,\n        normalizedUrl:\n          'api/admin/approvals/clusters/:clusterId/internal-backups/:backupName',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<BackupDto>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  /**\n   * Deletes a cluster whose TTL ran out. Console tests the TTL and the owner\n   * again first, and answers `kept` when the cluster stays.\n   */\n  public static async deleteClusterPastTtl(\n    params: DeleteClusterPastTtlThroughApprovalRequest,\n  ): Promise<ClusterTtlDeletionResult> {\n    const { clusterId } = params.params\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.deleteClusterPastTtl',\n        url: `api/admin/approvals/clusters/${clusterId}/ttl-expiry`,\n        normalizedUrl: 'api/admin/approvals/clusters/:clusterId/ttl-expiry',\n        type: 'delete',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ClusterTtlDeletionResult>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: params.body,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n\n  /** Creates a cluster plan for a Camundi, with the uuid that the caller gives. */\n  public static async createCustomClusterPlan(\n    params: CreateCustomClusterPlanThroughApprovalRequest,\n  ): Promise<CustomClusterPlanThroughApprovalResult> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomClusterPlanThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.createCustomClusterPlan',\n        url: 'api/admin/approvals/cluster-plans',\n        normalizedUrl: 'api/admin/approvals/cluster-plans',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /**\n   * Asks whether a Camundi may remove a plan. Console answers 403 for a plan\n   * of another person, and 409 for a plan that a cluster uses.\n   */\n  public static async checkCustomClusterPlanRemoval(\n    params: CheckCustomClusterPlanRemovalRequest,\n  ): Promise<CustomClusterPlanThroughApprovalResult> {\n    const { clusterPlanId } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomClusterPlanThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.checkCustomClusterPlanRemoval',\n        url: `api/admin/approvals/cluster-plans/${clusterPlanId}/removal-check`,\n        normalizedUrl:\n          'api/admin/approvals/cluster-plans/:clusterPlanId/removal-check',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Deletes a cluster plan that the Camundi created. It cannot be undone. */\n  public static async deleteCustomClusterPlan(\n    params: DeleteCustomClusterPlanThroughApprovalRequest,\n  ): Promise<CustomClusterPlanThroughApprovalResult> {\n    const { clusterPlanId } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomClusterPlanThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.deleteCustomClusterPlan',\n        url: `api/admin/approvals/cluster-plans/${clusterPlanId}`,\n        normalizedUrl: 'api/admin/approvals/cluster-plans/:clusterPlanId',\n        type: 'delete',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Creates a bespoke generation for a Camundi, with the uuid that the caller gives. */\n  public static async createCustomGeneration(\n    params: CreateCustomGenerationThroughApprovalRequest,\n  ): Promise<CustomGenerationThroughApprovalResult> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomGenerationThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.createCustomGeneration',\n        url: 'api/admin/approvals/generations',\n        normalizedUrl: 'api/admin/approvals/generations',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /**\n   * Asks whether a Camundi may remove a generation. Console answers 404 for a\n   * generation of another person, or a generation that is not bespoke, and 409\n   * for a delete that it refuses. A bespoke generation that the Camundi\n   * created in the admin tool counts as theirs.\n   */\n  public static async checkCustomGenerationRemoval(\n    params: CheckCustomGenerationRemovalRequest,\n  ): Promise<CustomGenerationThroughApprovalResult> {\n    const { generationId } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomGenerationThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.checkCustomGenerationRemoval',\n        url: `api/admin/approvals/generations/${generationId}/removal-check`,\n        normalizedUrl:\n          'api/admin/approvals/generations/:generationId/removal-check',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Deletes a custom generation that the Camundi created. It cannot be undone. */\n  public static async deleteCustomGeneration(\n    params: DeleteCustomGenerationThroughApprovalRequest,\n  ): Promise<CustomGenerationThroughApprovalResult> {\n    const { generationId } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<CustomGenerationThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.deleteCustomGeneration',\n        url: `api/admin/approvals/generations/${generationId}`,\n        normalizedUrl: 'api/admin/approvals/generations/:generationId',\n        type: 'delete',\n        body: params.body,\n      },\n    )\n  }\n\n  /**\n   * The clusters of a plan type now, for the request that force deletes it.\n   * Console answers 404 when the plan type does not exist.\n   */\n  public static async readClusterPlanTypeClusters(\n    params: ReadClusterPlanTypeClustersRequest,\n  ): Promise<ClusterPlanTypeClustersDto> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: 'ConsoleApprovalsM2MService.readClusterPlanTypeClusters',\n        url: `api/admin/approvals/cluster-plan-types/${params.params.planTypeId}/clusters`,\n        normalizedUrl:\n          'api/admin/approvals/cluster-plan-types/:planTypeId/clusters',\n        type: 'get',\n      },\n      source: params.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<ClusterPlanTypeClustersDto>({\n      config: params.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n    })\n\n    if (!response.ok || !response.body) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body\n  }\n\n  /**\n   * Deletes one cluster of a plan type, for a force delete request. It cannot\n   * be undone. Console answers `gone` for a cluster that does not exist or\n   * that is on another plan type now, and deletes nothing then.\n   */\n  public static async deleteClusterOfPlanType(\n    params: DeleteClusterOfPlanTypeThroughApprovalRequest,\n  ): Promise<ForceDeleteClusterPlanTypeStepResult> {\n    const { planTypeId, clusterId } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<ForceDeleteClusterPlanTypeStepResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.deleteClusterOfPlanType',\n        url: `api/admin/approvals/cluster-plan-types/${planTypeId}/clusters/${clusterId}`,\n        normalizedUrl:\n          'api/admin/approvals/cluster-plan-types/:planTypeId/clusters/:clusterId',\n        type: 'delete',\n        body: params.body,\n      },\n    )\n  }\n\n  /**\n   * Deletes a plan type that no cluster uses, for a force delete request. It\n   * cannot be undone. Console answers 409 while a cluster still uses the\n   * type, and `gone` when the type does not exist.\n   */\n  public static async deleteClusterPlanType(\n    params: DeleteClusterPlanTypeThroughApprovalRequest,\n  ): Promise<ForceDeleteClusterPlanTypeStepResult> {\n    const { planTypeId } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<ForceDeleteClusterPlanTypeStepResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.deleteClusterPlanType',\n        url: `api/admin/approvals/cluster-plan-types/${planTypeId}`,\n        normalizedUrl: 'api/admin/approvals/cluster-plan-types/:planTypeId',\n        type: 'delete',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Reads what a publish would change. It changes nothing. */\n  public static async previewReleaseTrainPublish(\n    params: PreviewReleaseTrainPublishRequest,\n  ): Promise<ReleaseTrainPreview> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<ReleaseTrainPreview>({\n      config: params.config,\n      name: 'ConsoleApprovalsM2MService.previewReleaseTrainPublish',\n      url: 'api/admin/approvals/release-train/publish/preview',\n      normalizedUrl: 'api/admin/approvals/release-train/publish/preview',\n      type: 'post',\n      body: params.body,\n    })\n  }\n\n  /** Publishes a release train generation. */\n  public static async publishReleaseTrain(\n    params: PublishReleaseTrainThroughApprovalRequest,\n  ): Promise<PublishReleaseTrainThroughApprovalResult> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<PublishReleaseTrainThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.publishReleaseTrain',\n        url: 'api/admin/approvals/release-train/publish',\n        normalizedUrl: 'api/admin/approvals/release-train/publish',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Reads what a rollback would change. It changes nothing. */\n  public static async previewReleaseTrainRollback(\n    params: PreviewReleaseTrainRollbackRequest,\n  ): Promise<ReleaseTrainPreview> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<ReleaseTrainPreview>({\n      config: params.config,\n      name: 'ConsoleApprovalsM2MService.previewReleaseTrainRollback',\n      url: 'api/admin/approvals/release-train/rollback/preview',\n      normalizedUrl: 'api/admin/approvals/release-train/rollback/preview',\n      type: 'post',\n      body: params.body,\n    })\n  }\n\n  /** Rolls back a release train generation. */\n  public static async rollbackReleaseTrain(\n    params: RollbackReleaseTrainThroughApprovalRequest,\n  ): Promise<RollbackReleaseTrainThroughApprovalResult> {\n    return ConsoleApprovalsM2MService.callApprovalRoute<RollbackReleaseTrainThroughApprovalResult>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.rollbackReleaseTrain',\n        url: 'api/admin/approvals/release-train/rollback',\n        normalizedUrl: 'api/admin/approvals/release-train/rollback',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /**\n   * Applies a cluster modification for the owner of the cluster, with no\n   * approval. Console answers the new config.\n   */\n  public static async applySelfServiceModification(\n    params: ApplySelfServiceModificationRequest,\n  ): Promise<ClusterModificationConfigDto> {\n    const { clusterUuid } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<ClusterModificationConfigDto>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.applySelfServiceModification',\n        url: `api/admin/approvals/clusters/${clusterUuid}/self-service-modification`,\n        normalizedUrl:\n          'api/admin/approvals/clusters/:clusterUuid/self-service-modification',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  /** Deactivates the active config of a cluster for its owner. */\n  public static async deactivateSelfServiceModification(\n    params: DeactivateSelfServiceModificationRequest,\n  ): Promise<ClusterModificationConfigDto> {\n    const { clusterUuid } = params.params\n    return ConsoleApprovalsM2MService.callApprovalRoute<ClusterModificationConfigDto>(\n      {\n        config: params.config,\n        name: 'ConsoleApprovalsM2MService.deactivateSelfServiceModification',\n        url: `api/admin/approvals/clusters/${clusterUuid}/self-service-modification/deactivate`,\n        normalizedUrl:\n          'api/admin/approvals/clusters/:clusterUuid/self-service-modification/deactivate',\n        type: 'post',\n        body: params.body,\n      },\n    )\n  }\n\n  private static async callApprovalRoute<T>(args: {\n    config: RequestBaseParams['config']\n    name: string\n    url: string\n    normalizedUrl: string\n    type: 'post' | 'delete'\n    body: unknown\n  }): Promise<T> {\n    const serviceContext: RequestBaseServiceContext = {\n      method: {\n        name: args.name,\n        url: args.url,\n        normalizedUrl: args.normalizedUrl,\n        type: args.type,\n      },\n      source: args.config.metrics?.source || 'unset',\n      target: { name: 'console', type: 'internal' },\n    }\n\n    const response = await request<T>({\n      config: args.config,\n      base: { id: 'console' },\n      url: serviceContext.method.url,\n      method: serviceContext.method.type,\n      metricsDetails: serviceContext,\n      responseType: 'json',\n      body: args.body,\n    })\n\n    if (!response.ok) {\n      throw new HttpError(\n        `${serviceContext.method.name}: ${response.status} ${response.statusText}`,\n        response.status,\n        response.statusText,\n      )\n    }\n    return response.body!\n  }\n}\n"],
+  "mappings": "AA6BA,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAsPnB,MAAM,2BAA2B;AAAA,EACtC,aAAoB,iBAClB,QACiC;AACjC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,OAAO,OAAO,SAAS;AAAA,QAC5D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAgC;AAAA,MACrD,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAKA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,yBAClB,QACkC;AAClC,UAAM,QAAQ,IAAI,gBAAgB;AAAA,MAChC,OAAO,OAAO,MAAM;AAAA,MACpB,gBAAgB,OAAO,MAAM;AAAA,IAC/B,CAAC;AACD,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,OAAO,OAAO,SAAS,oBAAoB,MAAM,SAAS,CAAC;AAAA,QAChG,eACE;AAAA,QACF,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAiC;AAAA,MACtD,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,MAAM,CAAC,SAAS,MAAM;AAClC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,yBAClB,QACyC;AACzC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,mCAAmC,OAAO,OAAO,YAAY;AAAA,QAClE,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAwC;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,MAAM,CAAC,SAAS,MAAM;AAClC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,aAAoB,sBAClB,QACsC;AACtC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,OAAO,OAAO,SAAS;AAAA,QAC5D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAqC;AAAA,MAC1D,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,MAAM,CAAC,SAAS,MAAM;AAClC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAoB,mBAClB,QACmC;AACnC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,OAAO,OAAO,SAAS;AAAA,QAC5D,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAkC;AAAA,MACvD,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,MAAM,CAAC,SAAS,MAAM;AAClC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,8BAClB,QACe;AACf,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eACE;AAAA,QACF,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAc;AAAA,MACnC,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,qBAClB,QACoB;AACpB,UAAM,EAAE,WAAW,WAAW,IAAI,OAAO;AACzC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,SAAS,qBAAqB,mBAAmB,UAAU,CAAC;AAAA,QACjG,eACE;AAAA,QACF,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAmB;AAAA,MACxC,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,qBAClB,QACmC;AACnC,UAAM,EAAE,UAAU,IAAI,OAAO;AAC7B,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,gCAAgC,SAAS;AAAA,QAC9C,eAAe;AAAA,QACf,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAkC;AAAA,MACvD,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,OAAO;AAAA,IACf,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA,EAGA,aAAoB,wBAClB,QACiD;AACjD,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,8BAClB,QACiD;AACjD,UAAM,EAAE,cAAc,IAAI,OAAO;AACjC,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,qCAAqC,aAAa;AAAA,QACvD,eACE;AAAA,QACF,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,wBAClB,QACiD;AACjD,UAAM,EAAE,cAAc,IAAI,OAAO;AACjC,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,qCAAqC,aAAa;AAAA,QACvD,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,uBAClB,QACgD;AAChD,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAoB,6BAClB,QACgD;AAChD,UAAM,EAAE,aAAa,IAAI,OAAO;AAChC,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,mCAAmC,YAAY;AAAA,QACpD,eACE;AAAA,QACF,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,uBAClB,QACgD;AAChD,UAAM,EAAE,aAAa,IAAI,OAAO;AAChC,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,mCAAmC,YAAY;AAAA,QACpD,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,4BAClB,QACqC;AACrC,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK,0CAA0C,OAAO,OAAO,UAAU;AAAA,QACvE,eACE;AAAA,QACF,MAAM;AAAA,MACR;AAAA,MACA,QAAQ,OAAO,OAAO,SAAS,UAAU;AAAA,MACzC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAoC;AAAA,MACzD,QAAQ,OAAO;AAAA,MACf,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,CAAC,SAAS,MAAM,CAAC,SAAS,MAAM;AAClC,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,wBAClB,QAC+C;AAC/C,UAAM,EAAE,YAAY,UAAU,IAAI,OAAO;AACzC,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,0CAA0C,UAAU,aAAa,SAAS;AAAA,QAC/E,eACE;AAAA,QACF,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAoB,sBAClB,QAC+C;AAC/C,UAAM,EAAE,WAAW,IAAI,OAAO;AAC9B,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,0CAA0C,UAAU;AAAA,QACzD,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,2BAClB,QAC8B;AAC9B,WAAO,2BAA2B,kBAAuC;AAAA,MACvE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK;AAAA,MACL,eAAe;AAAA,MACf,MAAM;AAAA,MACN,MAAM,OAAO;AAAA,IACf,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,aAAoB,oBAClB,QACmD;AACnD,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,4BAClB,QAC8B;AAC9B,WAAO,2BAA2B,kBAAuC;AAAA,MACvE,QAAQ,OAAO;AAAA,MACf,MAAM;AAAA,MACN,KAAK;AAAA,MACL,eAAe;AAAA,MACf,MAAM;AAAA,MACN,MAAM,OAAO;AAAA,IACf,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,aAAoB,qBAClB,QACoD;AACpD,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK;AAAA,QACL,eAAe;AAAA,QACf,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAoB,6BAClB,QACuC;AACvC,UAAM,EAAE,YAAY,IAAI,OAAO;AAC/B,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,gCAAgC,WAAW;AAAA,QAChD,eACE;AAAA,QACF,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAoB,kCAClB,QACuC;AACvC,UAAM,EAAE,YAAY,IAAI,OAAO;AAC/B,WAAO,2BAA2B;AAAA,MAChC;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,MAAM;AAAA,QACN,KAAK,gCAAgC,WAAW;AAAA,QAChD,eACE;AAAA,QACF,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAqB,kBAAqB,MAO3B;AACb,UAAM,iBAA4C;AAAA,MAChD,QAAQ;AAAA,QACN,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,QACV,eAAe,KAAK;AAAA,QACpB,MAAM,KAAK;AAAA,MACb;AAAA,MACA,QAAQ,KAAK,OAAO,SAAS,UAAU;AAAA,MACvC,QAAQ,EAAE,MAAM,WAAW,MAAM,WAAW;AAAA,IAC9C;AAEA,UAAM,WAAW,MAAM,QAAW;AAAA,MAChC,QAAQ,KAAK;AAAA,MACb,MAAM,EAAE,IAAI,UAAU;AAAA,MACtB,KAAK,eAAe,OAAO;AAAA,MAC3B,QAAQ,eAAe,OAAO;AAAA,MAC9B,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,MAAM,KAAK;AAAA,IACb,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,GAAG,eAAe,OAAO,IAAI,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACxE,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AACF;",
   "names": []
 }