@camunda/ccma-shared-types 0.0.1

package/dist/utils/enterprise-connection.utils.js

@@ -0,0 +1,34 @@
+import { OrganizationRole } from "../enums/OrganizationRole.enum.js";
+const ORG_PREFIX = "org:";
+function enterpriseConnectionMetadataToOrganizationAssignments(metadata) {
+  const orgAssignments = [];
+  if (metadata) {
+    for (const key in metadata) {
+      if (key.startsWith(ORG_PREFIX)) {
+        const orgId = key.replace(ORG_PREFIX, "");
+        const orgRolesAsStrings = metadata[key].split(",").map((orgRoles) => {
+          return orgRoles.trim();
+        });
+        if (orgRolesAsStrings.length === 0) {
+          orgRolesAsStrings.push(OrganizationRole.VISITOR);
+        }
+        orgAssignments.push({ orgId, roles: orgRolesAsStrings });
+      }
+    }
+  }
+  return orgAssignments;
+}
+function organizationAssignmentsToEnterpriseConnectionMetadata(orgAssignments) {
+  const metadata = {};
+  for (const assignment of orgAssignments) {
+    const orgRolesAsString = assignment.roles.join(",");
+    const key = `${ORG_PREFIX}${assignment.orgId}`;
+    metadata[key] = orgRolesAsString;
+  }
+  return metadata;
+}
+export {
+  enterpriseConnectionMetadataToOrganizationAssignments,
+  organizationAssignmentsToEnterpriseConnectionMetadata
+};
+//# sourceMappingURL=enterprise-connection.utils.js.map

package/dist/utils/enterprise-connection.utils.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/enterprise-connection.utils.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { OrganizationRole } from '../enums/OrganizationRole.enum.js'\n\nexport interface EnterpriseConnectionOrganizationAssignment {\n  orgId: string\n  roles: OrganizationRole[]\n}\n\n/**\n * Helper function to convert metadata from an enterprise connection to organization assignments\n * Pattern:\n * \"org:<orgId>\": \"orgRole1,orgRole2,...\"\n * Metadata of auth0 connections only allows for string values, so we need to serialize the roles\n * We can add a max of 10 attributes, see https://auth0.com/docs/api/management/v2/connections/post-connections\n * Hint: Obviously the metadata is only added and not overwritten. To remove a key, set it to an empty string.\n */\nconst ORG_PREFIX = 'org:'\n\nexport function enterpriseConnectionMetadataToOrganizationAssignments(\n  metadata: Record<string, string>,\n): EnterpriseConnectionOrganizationAssignment[] {\n  const orgAssignments: EnterpriseConnectionOrganizationAssignment[] = []\n  if (metadata) {\n    for (const key in metadata) {\n      if (key.startsWith(ORG_PREFIX)) {\n        const orgId = key.replace(ORG_PREFIX, '')\n        const orgRolesAsStrings = metadata[key].split(',').map((orgRoles) => {\n          return orgRoles.trim() as OrganizationRole\n        })\n        if (orgRolesAsStrings.length === 0) {\n          // This is a fallback in case the metadata is not set correctly\n          orgRolesAsStrings.push(OrganizationRole.VISITOR)\n        }\n        orgAssignments.push({ orgId, roles: orgRolesAsStrings })\n      }\n    }\n  }\n  return orgAssignments\n}\n\nexport function organizationAssignmentsToEnterpriseConnectionMetadata(\n  orgAssignments: EnterpriseConnectionOrganizationAssignment[],\n): Record<string, string> {\n  const metadata: Record<string, string> = {}\n  for (const assignment of orgAssignments) {\n    const orgRolesAsString = assignment.roles.join(',')\n    const key = `${ORG_PREFIX}${assignment.orgId}`\n    metadata[key] = orgRolesAsString\n  }\n  return metadata\n}\n"],
+  "mappings": "AAMA,SAAS,wBAAwB;AAejC,MAAM,aAAa;AAEZ,SAAS,sDACd,UAC8C;AAC9C,QAAM,iBAA+D,CAAC;AACtE,MAAI,UAAU;AACZ,eAAW,OAAO,UAAU;AAC1B,UAAI,IAAI,WAAW,UAAU,GAAG;AAC9B,cAAM,QAAQ,IAAI,QAAQ,YAAY,EAAE;AACxC,cAAM,oBAAoB,SAAS,GAAG,EAAE,MAAM,GAAG,EAAE,IAAI,CAAC,aAAa;AACnE,iBAAO,SAAS,KAAK;AAAA,QACvB,CAAC;AACD,YAAI,kBAAkB,WAAW,GAAG;AAElC,4BAAkB,KAAK,iBAAiB,OAAO;AAAA,QACjD;AACA,uBAAe,KAAK,EAAE,OAAO,OAAO,kBAAkB,CAAC;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,sDACd,gBACwB;AACxB,QAAM,WAAmC,CAAC;AAC1C,aAAW,cAAc,gBAAgB;AACvC,UAAM,mBAAmB,WAAW,MAAM,KAAK,GAAG;AAClD,UAAM,MAAM,GAAG,UAAU,GAAG,WAAW,KAAK;AAC5C,aAAS,GAAG,IAAI;AAAA,EAClB;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/utils/labelValidator.utils.d.ts

@@ -0,0 +1,5 @@
+import { type CamundaClusterStage } from '../types/CamundaClusterLabels.type.js';
+export declare function validateLabels(labels: {
+    custom?: string[];
+    camunda?: CamundaClusterStage[];
+}): boolean;

package/dist/utils/labelValidator.utils.js

@@ -0,0 +1,17 @@
+import {
+  ALLOWED_CAMUNDA_LABELS
+} from "../types/CamundaClusterLabels.type.js";
+function validateLabels(labels) {
+  if (labels.camunda?.length > 0) {
+    if (!labels.camunda.every(
+      (camundaLabelToBeSet) => ALLOWED_CAMUNDA_LABELS.includes(camundaLabelToBeSet)
+    )) {
+      return false;
+    }
+  }
+  return true;
+}
+export {
+  validateLabels
+};
+//# sourceMappingURL=labelValidator.utils.js.map

package/dist/utils/labelValidator.utils.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/labelValidator.utils.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport {\n  ALLOWED_CAMUNDA_LABELS,\n  type CamundaClusterStage,\n} from '../types/CamundaClusterLabels.type.js'\n\nexport function validateLabels(labels: {\n  custom?: string[]\n  camunda?: CamundaClusterStage[]\n}): boolean {\n  if (labels.camunda?.length > 0) {\n    if (\n      !labels.camunda.every((camundaLabelToBeSet) =>\n        ALLOWED_CAMUNDA_LABELS.includes(camundaLabelToBeSet),\n      )\n    ) {\n      return false\n    }\n  }\n  return true\n}\n"],
+  "mappings": "AAMA;AAAA,EACE;AAAA,OAEK;AAEA,SAAS,eAAe,QAGnB;AACV,MAAI,OAAO,SAAS,SAAS,GAAG;AAC9B,QACE,CAAC,OAAO,QAAQ;AAAA,MAAM,CAAC,wBACrB,uBAAuB,SAAS,mBAAmB;AAAA,IACrD,GACA;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/utils/objectMerge.utils.d.ts

@@ -0,0 +1,20 @@
+export interface SameObjectIdentifier {
+    path: string;
+    keys: string[];
+}
+export interface ObjectMergeOptions {
+    objectA: any;
+    objectB: any;
+    sameObjectIdentifier?: SameObjectIdentifier[];
+    arrayMergeStrategy?: 'replace' | 'merge';
+    path?: string[];
+}
+export declare class ObjectMergeUtils {
+    /**
+     * Merges two objects together. If a key exists in both objects, the value of the second object will be used.
+     * @param options objectB will be merged into objectA
+     * @returns
+     */
+    static merge(options: ObjectMergeOptions): any;
+    static mergeArray(options: ObjectMergeOptions): any[];
+}

package/dist/utils/objectMerge.utils.js

@@ -0,0 +1,90 @@
+class ObjectMergeUtils {
+  /**
+   * Merges two objects together. If a key exists in both objects, the value of the second object will be used.
+   * @param options objectB will be merged into objectA
+   * @returns
+   */
+  static merge(options) {
+    const sameObjectIdentifier = options.sameObjectIdentifier ?? [];
+    const newObject = { ...options.objectA };
+    for (const key of Object.keys(options.objectB ?? {})) {
+      const currentPath = options.path ? [...options.path] : [];
+      currentPath.push(key);
+      if (newObject[key] === void 0) {
+        newObject[key] = options.objectB[key];
+      } else {
+        if (Array.isArray(newObject[key])) {
+          newObject[key] = ObjectMergeUtils.mergeArray({
+            objectA: newObject[key],
+            objectB: options.objectB[key],
+            sameObjectIdentifier,
+            path: currentPath
+          });
+        } else if (typeof newObject[key] === "object") {
+          newObject[key] = ObjectMergeUtils.merge({
+            objectA: newObject[key],
+            objectB: options.objectB[key],
+            sameObjectIdentifier,
+            path: currentPath
+          });
+        } else {
+          newObject[key] = options.objectB[key];
+        }
+      }
+    }
+    return newObject;
+  }
+  static mergeArray(options) {
+    const newArray = [...options.objectA];
+    if (!Array.isArray(options.objectB)) {
+      return newArray;
+    }
+    const currentPath = options.path ? [...options.path] : [];
+    const currentPathAsString = currentPath.join(".");
+    const sameObjectIdentifier = options.sameObjectIdentifier ?? [];
+    const foundSameObjectIdentifier = sameObjectIdentifier.find(
+      (item) => item.path === currentPathAsString
+    );
+    if (foundSameObjectIdentifier) {
+      let newArrayIndex = 0;
+      const foundTargetObjects = [];
+      for (const sourceObject of newArray) {
+        const foundTargetObject = options.objectB.find((targetItem) => {
+          return foundSameObjectIdentifier.keys.every(
+            (key) => sourceObject[key] === targetItem[key]
+          );
+        });
+        if (foundTargetObject) {
+          newArray[newArrayIndex] = ObjectMergeUtils.merge({
+            objectA: sourceObject,
+            objectB: foundTargetObject,
+            sameObjectIdentifier,
+            path: currentPath
+          });
+          foundTargetObjects.push(foundTargetObject);
+        }
+        newArrayIndex++;
+      }
+      const otherTargetObjects = options.objectB.filter(
+        (targetItem) => !foundTargetObjects.includes(targetItem)
+      );
+      if (otherTargetObjects.length > 0) {
+        newArray.push(...otherTargetObjects);
+      }
+    } else {
+      switch (options.arrayMergeStrategy) {
+        case "merge":
+          newArray.push(...options.objectB);
+          break;
+        default:
+          newArray.splice(0, newArray.length, ...options.objectB);
+          break;
+      }
+    }
+    return newArray;
+  }
+}
+export {
+  ObjectMergeUtils
+};
+//# sourceMappingURL=objectMerge.utils.js.map

package/dist/utils/objectMerge.utils.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/objectMerge.utils.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport interface SameObjectIdentifier {\n  path: string\n  keys: string[]\n}\n\nexport interface ObjectMergeOptions {\n  objectA: any\n  objectB: any\n  sameObjectIdentifier?: SameObjectIdentifier[]\n  arrayMergeStrategy?: 'replace' | 'merge'\n  path?: string[]\n}\n\nexport class ObjectMergeUtils {\n  /**\n   * Merges two objects together. If a key exists in both objects, the value of the second object will be used.\n   * @param options objectB will be merged into objectA\n   * @returns\n   */\n  public static merge(options: ObjectMergeOptions): any {\n    const sameObjectIdentifier = options.sameObjectIdentifier ?? []\n    const newObject = { ...options.objectA }\n    for (const key of Object.keys(options.objectB ?? {})) {\n      const currentPath = options.path ? [...options.path] : []\n      currentPath.push(key)\n      if (newObject[key] === undefined) {\n        newObject[key] = options.objectB[key]\n      } else {\n        if (Array.isArray(newObject[key])) {\n          newObject[key] = ObjectMergeUtils.mergeArray({\n            objectA: newObject[key],\n            objectB: options.objectB[key],\n            sameObjectIdentifier,\n            path: currentPath,\n          })\n        } else if (typeof newObject[key] === 'object') {\n          newObject[key] = ObjectMergeUtils.merge({\n            objectA: newObject[key],\n            objectB: options.objectB[key],\n            sameObjectIdentifier,\n            path: currentPath,\n          })\n        } else {\n          newObject[key] = options.objectB[key]\n        }\n      }\n    }\n    return newObject\n  }\n\n  public static mergeArray(options: ObjectMergeOptions) {\n    const newArray = [...options.objectA]\n    if (!Array.isArray(options.objectB)) {\n      // early return if object B is not an array\n      return newArray\n    }\n    const currentPath = options.path ? [...options.path] : []\n    const currentPathAsString = currentPath.join('.')\n    const sameObjectIdentifier = options.sameObjectIdentifier ?? []\n    const foundSameObjectIdentifier = sameObjectIdentifier.find(\n      (item) => item.path === currentPathAsString,\n    )\n    if (foundSameObjectIdentifier) {\n      // options contain a path that matches the current one\n      let newArrayIndex = 0\n      const foundTargetObjects: any[] = []\n      for (const sourceObject of newArray) {\n        const foundTargetObject = options.objectB.find((targetItem) => {\n          return foundSameObjectIdentifier.keys.every(\n            (key) => sourceObject[key] === targetItem[key],\n          )\n        })\n        if (foundTargetObject) {\n          newArray[newArrayIndex] = ObjectMergeUtils.merge({\n            objectA: sourceObject,\n            objectB: foundTargetObject,\n            sameObjectIdentifier,\n            path: currentPath,\n          })\n          foundTargetObjects.push(foundTargetObject)\n        }\n        newArrayIndex++\n      }\n      const otherTargetObjects = options.objectB.filter(\n        (targetItem) => !foundTargetObjects.includes(targetItem),\n      )\n      if (otherTargetObjects.length > 0) {\n        newArray.push(...otherTargetObjects)\n      }\n    } else {\n      switch (options.arrayMergeStrategy) {\n        case 'merge':\n          newArray.push(...options.objectB)\n          break\n        default:\n          newArray.splice(0, newArray.length, ...options.objectB)\n          break\n      }\n    }\n    return newArray\n  }\n}\n"],
+  "mappings": "AAmBO,MAAM,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5B,OAAc,MAAM,SAAkC;AACpD,UAAM,uBAAuB,QAAQ,wBAAwB,CAAC;AAC9D,UAAM,YAAY,EAAE,GAAG,QAAQ,QAAQ;AACvC,eAAW,OAAO,OAAO,KAAK,QAAQ,WAAW,CAAC,CAAC,GAAG;AACpD,YAAM,cAAc,QAAQ,OAAO,CAAC,GAAG,QAAQ,IAAI,IAAI,CAAC;AACxD,kBAAY,KAAK,GAAG;AACpB,UAAI,UAAU,GAAG,MAAM,QAAW;AAChC,kBAAU,GAAG,IAAI,QAAQ,QAAQ,GAAG;AAAA,MACtC,OAAO;AACL,YAAI,MAAM,QAAQ,UAAU,GAAG,CAAC,GAAG;AACjC,oBAAU,GAAG,IAAI,iBAAiB,WAAW;AAAA,YAC3C,SAAS,UAAU,GAAG;AAAA,YACtB,SAAS,QAAQ,QAAQ,GAAG;AAAA,YAC5B;AAAA,YACA,MAAM;AAAA,UACR,CAAC;AAAA,QACH,WAAW,OAAO,UAAU,GAAG,MAAM,UAAU;AAC7C,oBAAU,GAAG,IAAI,iBAAiB,MAAM;AAAA,YACtC,SAAS,UAAU,GAAG;AAAA,YACtB,SAAS,QAAQ,QAAQ,GAAG;AAAA,YAC5B;AAAA,YACA,MAAM;AAAA,UACR,CAAC;AAAA,QACH,OAAO;AACL,oBAAU,GAAG,IAAI,QAAQ,QAAQ,GAAG;AAAA,QACtC;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAc,WAAW,SAA6B;AACpD,UAAM,WAAW,CAAC,GAAG,QAAQ,OAAO;AACpC,QAAI,CAAC,MAAM,QAAQ,QAAQ,OAAO,GAAG;AAEnC,aAAO;AAAA,IACT;AACA,UAAM,cAAc,QAAQ,OAAO,CAAC,GAAG,QAAQ,IAAI,IAAI,CAAC;AACxD,UAAM,sBAAsB,YAAY,KAAK,GAAG;AAChD,UAAM,uBAAuB,QAAQ,wBAAwB,CAAC;AAC9D,UAAM,4BAA4B,qBAAqB;AAAA,MACrD,CAAC,SAAS,KAAK,SAAS;AAAA,IAC1B;AACA,QAAI,2BAA2B;AAE7B,UAAI,gBAAgB;AACpB,YAAM,qBAA4B,CAAC;AACnC,iBAAW,gBAAgB,UAAU;AACnC,cAAM,oBAAoB,QAAQ,QAAQ,KAAK,CAAC,eAAe;AAC7D,iBAAO,0BAA0B,KAAK;AAAA,YACpC,CAAC,QAAQ,aAAa,GAAG,MAAM,WAAW,GAAG;AAAA,UAC/C;AAAA,QACF,CAAC;AACD,YAAI,mBAAmB;AACrB,mBAAS,aAAa,IAAI,iBAAiB,MAAM;AAAA,YAC/C,SAAS;AAAA,YACT,SAAS;AAAA,YACT;AAAA,YACA,MAAM;AAAA,UACR,CAAC;AACD,6BAAmB,KAAK,iBAAiB;AAAA,QAC3C;AACA;AAAA,MACF;AACA,YAAM,qBAAqB,QAAQ,QAAQ;AAAA,QACzC,CAAC,eAAe,CAAC,mBAAmB,SAAS,UAAU;AAAA,MACzD;AACA,UAAI,mBAAmB,SAAS,GAAG;AACjC,iBAAS,KAAK,GAAG,kBAAkB;AAAA,MACrC;AAAA,IACF,OAAO;AACL,cAAQ,QAAQ,oBAAoB;AAAA,QAClC,KAAK;AACH,mBAAS,KAAK,GAAG,QAAQ,OAAO;AAChC;AAAA,QACF;AACE,mBAAS,OAAO,GAAG,SAAS,QAAQ,GAAG,QAAQ,OAAO;AACtD;AAAA,MACJ;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/utils/orgs/OrgHelper.d.ts

@@ -0,0 +1,4 @@
+import type { OrganizationRole } from '../../enums/OrganizationRole.enum.js';
+import { type OrganizationPermissions } from '../../types/OrganizationPermission.type.js';
+export declare function getUserPermissionsForOrg(orgs: any, orgId: string): OrganizationPermissions | undefined;
+export declare function getPermissionsByRoles(roles: OrganizationRole[]): OrganizationPermissions | undefined;

package/dist/utils/orgs/OrgHelper.js

@@ -0,0 +1,234 @@
+import {
+  PermissionsForOrganizationRole
+} from "../../types/OrganizationPermission.type.js";
+function getUserPermissionsForOrg(orgs, orgId) {
+  const relatedOrg = orgs ? orgs.find((org) => org.id === orgId) : void 0;
+  return relatedOrg ? getPermissionsByRoles(relatedOrg.roles) : void 0;
+}
+function getPermissionsByRoles(roles) {
+  const orgPermissions = {
+    org: {
+      clusters: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      clients: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      settings: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      usage: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      billing: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      users: {
+        general: {
+          create: false,
+          read: false,
+          update: false,
+          delete: false
+        },
+        owner: {
+          create: false,
+          read: false,
+          update: false,
+          delete: false
+        },
+        admin: {
+          create: false,
+          read: false,
+          update: false,
+          delete: false
+        },
+        member: {
+          create: false,
+          read: false,
+          update: false,
+          delete: false
+        }
+      },
+      activity: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      diagrams: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      forms: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      instances: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      // create === start new instances
+      workflows: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      // create === deploy diagrams
+      webide: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      earlyAccessFeatures: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      }
+    },
+    cluster: {
+      clients: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      alerts: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      operate: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      tasklist: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      optimize: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      identity: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      ipWhitelist: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      secureConnectivity: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      encryption: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      connectorSecrets: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      connectors: {
+        create: false,
+        read: false,
+        update: false,
+        delete: false
+      },
+      settings: {
+        resourceBasedAuthorizations: {
+          activate: {
+            create: false,
+            read: false,
+            update: false,
+            delete: false
+          },
+          configure: {
+            create: false,
+            read: false,
+            update: false,
+            delete: false
+          }
+        },
+        identityBasedAuthorizations: {
+          activate: {
+            create: false,
+            read: false,
+            update: false,
+            delete: false
+          }
+        },
+        multiTenancy: {
+          activate: {
+            create: false,
+            read: false,
+            update: false,
+            delete: false
+          }
+        }
+      }
+    }
+  };
+  const permissionsForRoles = roles.map(
+    (role) => PermissionsForOrganizationRole.get(role)
+  );
+  for (const orgRolePermissions of permissionsForRoles) {
+    mergePermissions(orgPermissions, orgRolePermissions);
+  }
+  return orgPermissions;
+}
+function mergePermissions(target, permission) {
+  for (const key of Object.keys(target)) {
+    if (typeof target[key] === "boolean") {
+      target[key] = target[key] || permission[key];
+    } else {
+      mergePermissions(target[key], permission[key]);
+    }
+  }
+}
+export {
+  getPermissionsByRoles,
+  getUserPermissionsForOrg
+};
+//# sourceMappingURL=OrgHelper.js.map

package/dist/utils/orgs/OrgHelper.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/utils/orgs/OrgHelper.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationRole } from '../../enums/OrganizationRole.enum.js'\nimport {\n  type OrganizationPermissions,\n  PermissionsForOrganizationRole,\n} from '../../types/OrganizationPermission.type.js'\n\nexport function getUserPermissionsForOrg(\n  orgs: any,\n  orgId: string,\n): OrganizationPermissions | undefined {\n  const relatedOrg = orgs ? orgs.find((org) => org.id === orgId) : undefined\n  return relatedOrg ? getPermissionsByRoles(relatedOrg.roles) : undefined\n}\n\nexport function getPermissionsByRoles(\n  roles: OrganizationRole[],\n): OrganizationPermissions | undefined {\n  const orgPermissions: OrganizationPermissions = {\n    org: {\n      clusters: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      clients: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      settings: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      usage: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      billing: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      users: {\n        general: {\n          create: false,\n          read: false,\n          update: false,\n          delete: false,\n        },\n        owner: {\n          create: false,\n          read: false,\n          update: false,\n          delete: false,\n        },\n        admin: {\n          create: false,\n          read: false,\n          update: false,\n          delete: false,\n        },\n        member: {\n          create: false,\n          read: false,\n          update: false,\n          delete: false,\n        },\n      },\n      activity: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      diagrams: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      forms: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      instances: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      }, // create === start new instances\n      workflows: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      }, // create === deploy diagrams\n      webide: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      earlyAccessFeatures: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n    },\n    cluster: {\n      clients: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      alerts: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      operate: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      tasklist: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      optimize: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      identity: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      ipWhitelist: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      secureConnectivity: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      encryption: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      connectorSecrets: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      connectors: {\n        create: false,\n        read: false,\n        update: false,\n        delete: false,\n      },\n      settings: {\n        resourceBasedAuthorizations: {\n          activate: {\n            create: false,\n            read: false,\n            update: false,\n            delete: false,\n          },\n          configure: {\n            create: false,\n            read: false,\n            update: false,\n            delete: false,\n          },\n        },\n        identityBasedAuthorizations: {\n          activate: {\n            create: false,\n            read: false,\n            update: false,\n            delete: false,\n          },\n        },\n        multiTenancy: {\n          activate: {\n            create: false,\n            read: false,\n            update: false,\n            delete: false,\n          },\n        },\n      },\n    },\n  }\n  const permissionsForRoles: any[] = roles.map((role) =>\n    PermissionsForOrganizationRole.get(role),\n  )\n  for (const orgRolePermissions of permissionsForRoles) {\n    mergePermissions(orgPermissions, orgRolePermissions)\n  }\n  return orgPermissions\n}\n\n// recursive check all permissions\nfunction mergePermissions(target: any, permission: any): any {\n  for (const key of Object.keys(target)) {\n    if (typeof target[key] === 'boolean') {\n      target[key] = target[key] || permission[key]\n    } else {\n      mergePermissions(target[key], permission[key])\n    }\n  }\n}\n"],
+  "mappings": "AAOA;AAAA,EAEE;AAAA,OACK;AAEA,SAAS,yBACd,MACA,OACqC;AACrC,QAAM,aAAa,OAAO,KAAK,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,IAAI;AACjE,SAAO,aAAa,sBAAsB,WAAW,KAAK,IAAI;AAChE;AAEO,SAAS,sBACd,OACqC;AACrC,QAAM,iBAA0C;AAAA,IAC9C,KAAK;AAAA,MACH,UAAU;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,UAAU;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA;AAAA,MACA,WAAW;AAAA,QACT,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,qBAAqB;AAAA,QACnB,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,aAAa;AAAA,QACX,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,oBAAoB;AAAA,QAClB,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,YAAY;AAAA,QACV,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,kBAAkB;AAAA,QAChB,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,YAAY;AAAA,QACV,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,6BAA6B;AAAA,UAC3B,UAAU;AAAA,YACR,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ;AAAA,YACR,QAAQ;AAAA,UACV;AAAA,UACA,WAAW;AAAA,YACT,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ;AAAA,YACR,QAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,6BAA6B;AAAA,UAC3B,UAAU;AAAA,YACR,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ;AAAA,YACR,QAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,cAAc;AAAA,UACZ,UAAU;AAAA,YACR,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ;AAAA,YACR,QAAQ;AAAA,UACV;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,QAAM,sBAA6B,MAAM;AAAA,IAAI,CAAC,SAC5C,+BAA+B,IAAI,IAAI;AAAA,EACzC;AACA,aAAW,sBAAsB,qBAAqB;AACpD,qBAAiB,gBAAgB,kBAAkB;AAAA,EACrD;AACA,SAAO;AACT;AAGA,SAAS,iBAAiB,QAAa,YAAsB;AAC3D,aAAW,OAAO,OAAO,KAAK,MAAM,GAAG;AACrC,QAAI,OAAO,OAAO,GAAG,MAAM,WAAW;AACpC,aAAO,GAAG,IAAI,OAAO,GAAG,KAAK,WAAW,GAAG;AAAA,IAC7C,OAAO;AACL,uBAAiB,OAAO,GAAG,GAAG,WAAW,GAAG,CAAC;AAAA,IAC/C;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/utils/settledPromises.util.d.ts

@@ -0,0 +1,13 @@
+export declare const allSettledResultsCounts: (results: PromiseSettledResult<any>[]) => {
+    fulfilled: number;
+    rejected: number;
+    total: number;
+};
+export declare function getFulfilledPromises<T>(results: PromiseSettledResult<T>[]): T[];
+export declare function getRejectedPromises<T>(results: PromiseSettledResult<T>[]): any[];
+export declare function getSettledSummary<T>(results: PromiseSettledResult<T>[]): {
+    reasons: any[];
+    fulfilled: number;
+    rejected: number;
+    total: number;
+};

package/dist/utils/settledPromises.util.js

@@ -0,0 +1,26 @@
+const allSettledResultsCounts = (results) => ({
+  // eslint-disable-next-line id-length
+  fulfilled: results.filter((r) => r.status === "fulfilled").length,
+  // eslint-disable-next-line id-length
+  rejected: results.filter((r) => r.status === "rejected").length,
+  total: results.length
+});
+function getFulfilledPromises(results) {
+  return results.filter((r) => r.status === "fulfilled").map((r) => r.value);
+}
+function getRejectedPromises(results) {
+  return results.filter((r) => r.status === "rejected").map((r) => r.reason);
+}
+function getSettledSummary(results) {
+  return {
+    ...allSettledResultsCounts(results),
+    reasons: getRejectedPromises(results)
+  };
+}
+export {
+  allSettledResultsCounts,
+  getFulfilledPromises,
+  getRejectedPromises,
+  getSettledSummary
+};
+//# sourceMappingURL=settledPromises.util.js.map

package/dist/utils/settledPromises.util.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/settledPromises.util.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const allSettledResultsCounts = (\n  results: PromiseSettledResult<any>[],\n) => ({\n  // eslint-disable-next-line id-length\n  fulfilled: results.filter((r) => r.status === 'fulfilled').length,\n  // eslint-disable-next-line id-length\n  rejected: results.filter((r) => r.status === 'rejected').length,\n  total: results.length,\n})\n\nexport function getFulfilledPromises<T>(\n  results: PromiseSettledResult<T>[],\n): T[] {\n  return (\n    results\n      // eslint-disable-next-line id-length\n      .filter((r) => r.status === 'fulfilled')\n      // eslint-disable-next-line id-length\n      .map((r) => (r as PromiseFulfilledResult<T>).value)\n  )\n}\nexport function getRejectedPromises<T>(results: PromiseSettledResult<T>[]) {\n  return (\n    results\n      // eslint-disable-next-line id-length\n      .filter((r) => r.status === 'rejected')\n      // eslint-disable-next-line id-length\n      .map((r) => (r as PromiseRejectedResult).reason)\n  )\n}\nexport function getSettledSummary<T>(results: PromiseSettledResult<T>[]) {\n  return {\n    ...allSettledResultsCounts(results),\n    reasons: getRejectedPromises(results),\n  }\n}\n"],
+  "mappings": "AAMO,MAAM,0BAA0B,CACrC,aACI;AAAA;AAAA,EAEJ,WAAW,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,EAAE;AAAA;AAAA,EAE3D,UAAU,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,UAAU,EAAE;AAAA,EACzD,OAAO,QAAQ;AACjB;AAEO,SAAS,qBACd,SACK;AACL,SACE,QAEG,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,EAEtC,IAAI,CAAC,MAAO,EAAgC,KAAK;AAExD;AACO,SAAS,oBAAuB,SAAoC;AACzE,SACE,QAEG,OAAO,CAAC,MAAM,EAAE,WAAW,UAAU,EAErC,IAAI,CAAC,MAAO,EAA4B,MAAM;AAErD;AACO,SAAS,kBAAqB,SAAoC;AACvE,SAAO;AAAA,IACL,GAAG,wBAAwB,OAAO;AAAA,IAClC,SAAS,oBAAoB,OAAO;AAAA,EACtC;AACF;",
+  "names": []
+}

package/dist/utils/string-validation.utils.d.ts

@@ -0,0 +1,44 @@
+export declare function isValidHostname(value: string): boolean;
+/**
+ * Validates that a client name contains only allowed characters:
+ * letters, digits, dashes, and underscores.
+ *
+ * @param name - The client name to validate
+ * @returns true if the name is valid, false otherwise
+ */
+export declare function isValidClientName(name: string): boolean;
+/**
+ * Validates a single IPv4 address or CIDR notation.
+ *
+ * Valid examples:
+ * - 192.168.1.1
+ * - 10.0.0.0/8
+ * - 0.0.0.0/0
+ * - 255.255.255.255/32
+ *
+ * Invalid examples:
+ * - 999.999.999.999 (octets must be 0-255)
+ * - 1.2.3.4/55 (prefix must be 0-32)
+ * - 256.1.1.1 (octets must be 0-255)
+ * - 1.2.3 (must have 4 octets)
+ *
+ * @param cidr - The IPv4 address or CIDR notation to validate
+ * @returns true if the CIDR is valid, false otherwise
+ */
+export declare function isValidCIDR(cidr: string): boolean;
+/**
+ * Validates a comma-separated list of IPv4 addresses and/or CIDR notations.
+ *
+ * Valid examples:
+ * - "192.168.1.1"
+ * - "192.168.1.1,10.0.0.0/8"
+ * - "192.168.1.1, 10.0.0.0/8" (spaces are trimmed)
+ *
+ * Invalid examples:
+ * - "192.168.1.1,999.999.999.999" (second entry is invalid)
+ * - "1.2.3.4/55" (prefix is invalid)
+ *
+ * @param cidrList - A comma-separated list of IPv4 addresses or CIDR notations
+ * @returns true if all entries in the list are valid, false otherwise
+ */
+export declare function isValidCIDRList(cidrList: string): boolean;

package/dist/utils/string-validation.utils.js

@@ -0,0 +1,94 @@
+function isValidHostname(value) {
+  if (typeof value !== "string") {
+    return false;
+  }
+  const validHostnameChars = /^[a-zA-Z0-9-.]{1,253}\.?$/gu;
+  if (!validHostnameChars.test(value)) {
+    return false;
+  }
+  if (value.endsWith(".")) {
+    value = value.slice(0, value.length - 1);
+  }
+  if (value.length > 253) {
+    return false;
+  }
+  const labels = value.split(".");
+  const isValid = labels.every((label) => {
+    const validLabelChars = /^([a-zA-Z0-9-]+)$/gu;
+    const validLabel = validLabelChars.test(label) && label.length < 64 && !label.startsWith("-") && !label.endsWith("-");
+    return validLabel;
+  });
+  return isValid;
+}
+const CLIENT_NAME_REGEX = /^[a-zA-Z0-9_-]+$/u;
+function isValidClientName(name) {
+  if (typeof name !== "string") {
+    return false;
+  }
+  if (name.trim().length === 0) {
+    return false;
+  }
+  return CLIENT_NAME_REGEX.test(name);
+}
+function isValidCIDR(cidr) {
+  if (typeof cidr !== "string") {
+    return false;
+  }
+  const trimmed = cidr.trim();
+  if (trimmed.length === 0) {
+    return false;
+  }
+  const parts = trimmed.split("/");
+  if (parts.length > 2) {
+    return false;
+  }
+  const ip = parts[0];
+  const prefix = parts[1];
+  const octets = ip.split(".");
+  if (octets.length !== 4) {
+    return false;
+  }
+  for (const octet of octets) {
+    if (!/^\d+$/u.test(octet)) {
+      return false;
+    }
+    const num = parseInt(octet, 10);
+    if (num < 0 || num > 255) {
+      return false;
+    }
+    if (octet.length > 1 && octet.startsWith("0")) {
+      return false;
+    }
+  }
+  if (prefix !== void 0) {
+    if (!/^\d+$/u.test(prefix)) {
+      return false;
+    }
+    const prefixNum = parseInt(prefix, 10);
+    if (prefixNum < 0 || prefixNum > 32) {
+      return false;
+    }
+  }
+  return true;
+}
+function isValidCIDRList(cidrList) {
+  if (typeof cidrList !== "string") {
+    return false;
+  }
+  const trimmed = cidrList.trim();
+  if (trimmed.length === 0) {
+    return false;
+  }
+  const entries = trimmed.split(",");
+  if (entries.length === 0) {
+    return false;
+  }
+  return entries.every((entry) => isValidCIDR(entry));
+}
+export {
+  isValidCIDR,
+  isValidCIDRList,
+  isValidClientName,
+  isValidHostname
+};
+//# sourceMappingURL=string-validation.utils.js.map