@camunda/ccma-shared-types 0.0.6 → 0.1.1

package/dist/permissions/accounts.permissions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/permissions/accounts.permissions.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport namespace AccountsPermissions {\n  export const READ_ALL = 'aara'\n  export const CREATE_ORG = 'aaco'\n  export const CHANGE_ORG_NAME = 'aacn'\n  export const DELETE_ORG = 'aado'\n  export const RESET_TOKEN_VERIFICATION = 'aart'\n  export const DELETE_USER = 'aadu'\n  export const DELETE_NOT_ACTIVATED_USER = 'aadn'\n  export const ADD_TO_ORG = 'aaao'\n  export const REMOVE_FROM_ORG = 'aaro'\n  export const SET_DEFAULT_ORG = 'aasd'\n  export const CANCEL_INVITE = 'aaci'\n  export const CHANGE_ROLE = 'aacr'\n  export const CHANGE_SAFE_ROLE = 'aacs'\n  export const EXTEND_TRIAL = 'aaet'\n  export const INVALIDATE_TOKEN = 'aait'\n  export const SALES_PLAN_CREATE = 'asc'\n  export const SALES_PLAN_MODIFY = 'asm'\n  export const SALES_PLAN_FORCE_MODIFY = 'asfm'\n  export const SALES_PLAN_SWITCH = 'ass'\n  export const SALES_PLAN_DELETE = 'asd'\n  export const SALES_PLAN_DELETE_AS_GOD = 'asdg'\n  export const SUPPORT_AGENT_REMOVE_AGENTS_FROM_ORG = 'asar'\n  export const SUPPORT_AGENT_SEE_ORG_MEMBERSHIPS = 'asas'\n  export const SUPPORT_AGENT_ADD_TO_ORG = 'asaa'\n  export const MODIFY_CLUSTER_PLAN_TYPE_RESERVATIONS = 'acpm'\n  export const M2M_SALESPLAN_GET = 'amsg'\n  export const M2M_SALESPLAN_SWITCH = 'amss'\n\n  export const ENTERPRISE_ORG_CONVERT = 'aeoc'\n\n  export const ENTERPRISE_ORG_MODIFY = 'aeom'\n\n  export const ENTERPRISE_ORG_MODIFY_START_DATE = 'aeos'\n\n  export const TRIAL_TO_IN_NEGOTIATION_CONVERT = 'atin'\n\n  export const EXTERNAL_M2M_GET_ORG_MEMBERS = 'amog'\n  export const EXTERNAL_M2M_SEARCH_ORGS = 'amos'\n  export const EXTERNAL_M2M_QA_ORG_CREATE = 'amqc'\n  export const EXTERNAL_M2M_OFFBOARD_CAMUNDI = 'amoc'\n\n  export const ORG_MAY_CHANGE_LIMITS = 'alc'\n  export const ORG_MAY_CHANGE_GENERATION_WHITELIST = 'algw'\n  export const ORG_CANCEL_PAID = 'aacp'\n\n  export const ADMIN_SQL = 'aasq'\n\n  export const ADMIN_AUTH0_CONNECTIONS_CREATE = 'aa0c'\n  export const ADMIN_AUTH0_CONNECTIONS_READ = 'aa0r'\n  export const ADMIN_AUTH0_CONNECTIONS_UPDATE = 'aa0u'\n  export const ADMIN_AUTH0_CONNECTIONS_DELETE = 'aa0d'\n  export const UNBLOCK_USER = 'aaub'\n\n  export const ADMIN_CHANGE_EMAIL = 'aace'\n  export const ADMIN_CHANGE_USER_NAME = 'aacu'\n\n  export const BOT = 'abot'\n\n  // OBACHT: NOT THIS ONE\n  export const MODELER_DELETE_USER = 'mdu'\n\n  export const GOD_CRON = 'gcr'\n  export const GOD_SIGNUP_SPAM_PATTERNS = 'gsp'\n  export const GOD_PURGE_USERS = 'gpu'\n  export const GOD_UPDATE_USER_METADATA = 'gum'\n\n  export const ADMIN_EARLY_ACCESS_FEATURES_READ = 'aaer'\n  export const ADMIN_EARLY_ACCESS_FEATURES_CREATE = 'aaec'\n  export const ADMIN_EARLY_ACCESS_FEATURES_DELETE = 'aaed'\n  export const ADMIN_EARLY_ACCESS_FEATURES_UPDATE = 'aaeu'\n  export const ROLE_SUPPORT_AGENT = 'support:agent'\n  export const FORCE_SALES_PLAN_ON_ORG = 'aafs'\n\n  export interface Features {\n    admin: {\n      readAll: boolean\n      createOrg: boolean\n      changeOrgName: boolean\n      deleteOrg: boolean\n      resetTokenVerification: boolean\n      deleteUser: boolean\n      deleteNotActivatedUser: boolean\n      addToOrg: boolean\n      removeFromOrg: boolean\n      setDefaultOrg: boolean\n      cancelInvite: boolean\n      changeRole: boolean\n      addSafeRole: boolean\n      deleteClusters: boolean\n      extendTrial: boolean\n      invalidateToken: boolean\n      cancelPaid: boolean\n      searchForOrgs: boolean\n      readAudit: boolean\n      modifyClusterPlanTypeReservations: boolean\n      mayChangeOrgLimits: boolean\n      mayChangeGenerationWhiteList: boolean\n      sql: boolean\n      modelerDeleteUser: boolean\n      unblockUser: boolean\n      god: {\n        triggerCrons: boolean\n        forceSalesPlanOnOrg: boolean\n        changeSignupSpamPatterns: boolean\n        purgeUsers: boolean\n        updateUserMetadata: boolean\n      }\n      bot: boolean\n      changeEmail: boolean\n      changeUserName: boolean\n    }\n    salesPlan: {\n      create: boolean\n      modify: boolean\n      forceModify: boolean\n      switch: boolean\n      delete: boolean\n      godDelete: boolean\n    }\n    enterprise: {\n      org: {\n        convert: boolean\n        modify: boolean\n        modifyStartDate: boolean\n      }\n    }\n    trial: {\n      convertToInNegotiation: boolean\n    }\n    supportAgent: {\n      removeAgentsFromOrg: boolean\n      seeOrgMemberships: boolean\n      addAgentsToOrg: boolean\n    }\n    m2m: {\n      salesplan: {\n        get: boolean\n        switch: boolean\n      }\n\n      fetchMigrationData: boolean\n    }\n    externalM2m: {\n      org: {\n        members: {\n          get: boolean\n        }\n        search: boolean\n      }\n      qa: {\n        org: {\n          create: boolean\n        }\n      }\n      offboarding: {\n        camundi: boolean\n      }\n    }\n    auth0: {\n      connections: {\n        create: boolean\n        read: boolean\n        update: boolean\n        delete: boolean\n      }\n    }\n    notifications: {\n      global: {\n        read: boolean\n        delete: boolean\n        create: boolean\n      }\n    }\n    earlyAccessFeatures: {\n      read: boolean\n      create: boolean\n      delete: boolean\n      update: boolean\n    }\n  }\n\n  export function createEmptyFeatures(): Features {\n    return {\n      admin: {\n        readAll: false,\n        createOrg: false,\n        changeOrgName: false,\n        deleteOrg: false,\n        resetTokenVerification: false,\n        deleteUser: false,\n        deleteNotActivatedUser: false,\n        addToOrg: false,\n        removeFromOrg: false,\n        setDefaultOrg: false,\n        cancelInvite: false,\n        changeRole: false,\n        addSafeRole: false,\n        deleteClusters: false,\n        extendTrial: false,\n        invalidateToken: false,\n        cancelPaid: false,\n        searchForOrgs: false,\n        readAudit: false,\n        modifyClusterPlanTypeReservations: false,\n        mayChangeOrgLimits: false,\n        mayChangeGenerationWhiteList: false,\n        sql: false,\n        modelerDeleteUser: false,\n        unblockUser: false,\n        god: {\n          triggerCrons: false,\n          forceSalesPlanOnOrg: false,\n          changeSignupSpamPatterns: false,\n          purgeUsers: false,\n          updateUserMetadata: false,\n        },\n        bot: false,\n        changeEmail: false,\n        changeUserName: false,\n      },\n      salesPlan: {\n        create: false,\n        modify: false,\n        forceModify: false,\n        switch: false,\n        delete: false,\n        godDelete: false,\n      },\n      enterprise: {\n        org: { convert: false, modify: false, modifyStartDate: false },\n      },\n      trial: {\n        convertToInNegotiation: false,\n      },\n      supportAgent: {\n        removeAgentsFromOrg: false,\n        seeOrgMemberships: false,\n        addAgentsToOrg: false,\n      },\n      m2m: {\n        salesplan: {\n          get: false,\n          switch: false,\n        },\n        fetchMigrationData: false,\n      },\n      externalM2m: {\n        org: {\n          members: {\n            get: false,\n          },\n          search: false,\n        },\n        // eslint-disable-next-line id-length\n        qa: {\n          org: {\n            create: false,\n          },\n        },\n        offboarding: {\n          camundi: false,\n        },\n      },\n      auth0: {\n        connections: {\n          create: false,\n          read: false,\n          update: false,\n          delete: false,\n        },\n      },\n      notifications: {\n        global: {\n          read: false,\n          delete: false,\n          create: false,\n        },\n      },\n      earlyAccessFeatures: {\n        read: false,\n        create: false,\n        delete: false,\n        update: false,\n      },\n    }\n  }\n\n  export const PermissionsAtAuth0: Array<{\n    value: string\n    description: string\n    initialRoles: Roles[]\n  }> = [\n    {\n      value: READ_ALL,\n      description: 'read access to all orgs and users',\n      initialRoles: [\n        'accounts:read',\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:editSalesPlans',\n        'console:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:trialExtender',\n        'accounts:limitExtender',\n        'accounts:enterpriseAdmin',\n        'accounts:enterpriseOffboarding',\n        'console:C8ReleaseManager',\n        'console:C8UpdateEnforcer',\n        'accounts:addSafeRoles',\n        'accounts:consultingManager',\n        'accounts:earlyAccessEditor',\n      ],\n    },\n    {\n      value: CREATE_ORG,\n      description: 'can create organisations',\n      initialRoles: [\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CHANGE_ORG_NAME,\n      description: 'can change name of organisations',\n      initialRoles: [\n        'accounts:admin',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:onboard',\n        'accounts:enterpriseAdmin',\n        'accounts:trialExtender',\n      ],\n    },\n    {\n      value: DELETE_ORG,\n      description: 'can delete organisations',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: RESET_TOKEN_VERIFICATION,\n      description: 'can reset a verification token of a pending user',\n      initialRoles: [\n        'accounts:onboard',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: DELETE_USER,\n      description: 'can delete users',\n      initialRoles: ['accounts:god'],\n    },\n    {\n      value: DELETE_NOT_ACTIVATED_USER,\n      description: 'can delete users that are not activated yet',\n      initialRoles: [\n        'accounts:onboard',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: ADD_TO_ORG,\n      description: 'can add someone to an org',\n      initialRoles: [\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n        'supersupport:agent',\n      ],\n    },\n    {\n      value: REMOVE_FROM_ORG,\n      description: 'can remove someone from an org',\n      initialRoles: [\n        'accounts:admin',\n        'supersupport:agent',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: SET_DEFAULT_ORG,\n      description: 'can set an org as default for any user',\n      initialRoles: [\n        'support:agent',\n        'supersupport:agent',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n        'accounts:onboard',\n      ],\n    },\n    {\n      value: CANCEL_INVITE,\n      description: 'can cancelpending invites',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:onboard',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CHANGE_ROLE,\n      description: 'can change the role of a user',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:onboard',\n        'accounts:enterpriseAdmin',\n        'supersupport:agent',\n      ],\n    },\n    {\n      value: EXTEND_TRIAL,\n      description: 'can extend the trial period of an organization',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:onboard',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: INVALIDATE_TOKEN,\n      description: 'can invalidate tokens in TokenIssuer',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: SALES_PLAN_CREATE,\n      description: 'can create a SalesPlan',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: SALES_PLAN_MODIFY,\n      description: 'can modify a SalesPlan',\n      initialRoles: ['accounts:admin', 'accounts:editSalesPlans'],\n    },\n    {\n      value: SALES_PLAN_FORCE_MODIFY,\n      description:\n        'can force modify a SalesPlan without caring about the orgs actual reservations/cluster usage',\n      initialRoles: [],\n    },\n    {\n      value: SALES_PLAN_SWITCH,\n      description: 'can switch an organization to another SalesPlan',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:enterpriseOffboarding',\n        'accounts:consultingManager',\n      ],\n    },\n    {\n      value: SALES_PLAN_DELETE,\n      description:\n        'can delete a SalesPlan if it is not used by any Organization',\n      initialRoles: ['accounts:admin'],\n    },\n\n    {\n      value: SALES_PLAN_DELETE_AS_GOD,\n      description: `can delete salesplans even if there is no replacement salesplan for this type. use with great caution`,\n      initialRoles: [],\n    },\n    {\n      value: SUPPORT_AGENT_REMOVE_AGENTS_FROM_ORG,\n      description: 'can remove support agents from organizations',\n      initialRoles: ['support:agent', 'supersupport:agent'],\n    },\n    {\n      value: SUPPORT_AGENT_SEE_ORG_MEMBERSHIPS,\n      description: 'can see all org memberships of support agents',\n      initialRoles: ['support:agent', 'supersupport:agent'],\n    },\n    {\n      value: SUPPORT_AGENT_ADD_TO_ORG,\n      description: 'can add users as support agent to an organization',\n      initialRoles: ['support:agent', 'supersupport:agent'],\n    },\n    {\n      value: MODIFY_CLUSTER_PLAN_TYPE_RESERVATIONS,\n      description: 'can modify cluster plan type reservations of an org',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SALESPLAN_GET,\n      description: 'm2m can get salesplans',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SALESPLAN_SWITCH,\n      description: 'm2m can switch salesplans',\n      initialRoles: [],\n    },\n    {\n      value: ENTERPRISE_ORG_CONVERT,\n      description: 'can convert orgs to enterprise plans',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:onboard',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: ENTERPRISE_ORG_MODIFY,\n      description:\n        'can modify value metrics and contract duration of enterprise orgs',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n        'accounts:enterpriseOffboarding',\n      ],\n    },\n    {\n      value: ENTERPRISE_ORG_MODIFY_START_DATE,\n      description: 'can modify start date of enterprise orgs',\n      initialRoles: [\n        'accounts:god',\n        'accounts:enterpriseOffboarding',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: TRIAL_TO_IN_NEGOTIATION_CONVERT,\n      description: 'can convert trial orgs to in-negotiation plans',\n      initialRoles: ['accounts:admin', 'accounts:enterpriseAdmin'],\n    },\n    {\n      value: EXTERNAL_M2M_GET_ORG_MEMBERS,\n      description: 'external m2m can get all members of all orgs',\n      initialRoles: [],\n    },\n    {\n      value: EXTERNAL_M2M_QA_ORG_CREATE,\n      description:\n        'external m2m can create orgs, initially add users to org and assign sales plan',\n      initialRoles: [],\n    },\n    {\n      value: EXTERNAL_M2M_OFFBOARD_CAMUNDI,\n      description:\n        'external m2m can trigger offboarding process for Camunda employees',\n      initialRoles: ['accounts:god'],\n    },\n    {\n      value: EXTERNAL_M2M_SEARCH_ORGS,\n      description: 'external m2m can search organizations',\n      initialRoles: [],\n    },\n    {\n      value: ORG_MAY_CHANGE_LIMITS,\n      description: 'may change limits of an organization',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n        'accounts:limitExtender',\n      ],\n    },\n    {\n      value: ORG_MAY_CHANGE_GENERATION_WHITELIST,\n      description: 'may change the generation whitelist of an organization',\n      initialRoles: ['accounts:admin', 'accounts:clusterUpdates'],\n    },\n    {\n      value: ORG_CANCEL_PAID,\n      description: 'may terminate a running paid organisation',\n      initialRoles: ['accounts:admin', 'accounts:enterpriseOffboarding'],\n    },\n    {\n      value: ADMIN_SQL,\n      description: 'may query the DB',\n      initialRoles: ['accounts:god'],\n    },\n    {\n      value: ADMIN_AUTH0_CONNECTIONS_READ,\n      description: 'may read connections from auth0',\n      initialRoles: [\n        'accounts:read',\n        'accounts:orgCreator',\n        'support:agent',\n        'supersupport:agent',\n      ],\n    },\n    {\n      value: ADMIN_AUTH0_CONNECTIONS_CREATE,\n      description: 'may create new connections at auth0',\n      initialRoles: ['accounts:connections:create', 'accounts:god'],\n    },\n    {\n      value: ADMIN_AUTH0_CONNECTIONS_UPDATE,\n      description: 'may update connections at auth0',\n      initialRoles: ['accounts:connections:update', 'accounts:god'],\n    },\n    {\n      value: ADMIN_AUTH0_CONNECTIONS_DELETE,\n      description: 'may delete connections at auth0',\n      initialRoles: ['accounts:connections:delete', 'accounts:god'],\n    },\n    {\n      value: MODELER_DELETE_USER,\n      description: 'can delete a user within the modeler',\n      initialRoles: ['modeler:admin'],\n    },\n    {\n      value: UNBLOCK_USER,\n      description: 'can unblock a user',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: GOD_CRON,\n      description: 'can run cron jobs',\n      initialRoles: ['consoleTeam'],\n    },\n    {\n      value: GOD_SIGNUP_SPAM_PATTERNS,\n      description: 'can read and change signup spam patterns',\n      initialRoles: ['consoleTeam', 'accounts:god'],\n    },\n    {\n      value: GOD_PURGE_USERS,\n      description: 'can purge user records based on create date / name pattern',\n      initialRoles: ['consoleTeam', 'accounts:god'],\n    },\n    {\n      value: GOD_UPDATE_USER_METADATA,\n      description: 'can update auth0 user_metadata and app_metadata',\n      initialRoles: ['accounts:god'],\n    },\n    {\n      value: FORCE_SALES_PLAN_ON_ORG,\n      description: 'can force a sales plan on an org',\n      initialRoles: ['consoleTeam'],\n    },\n    {\n      value: CHANGE_SAFE_ROLE,\n      description: 'Can assign/unassign safe roles',\n      initialRoles: ['accounts:addSafeRoles', 'accounts:consultingManager'],\n    },\n    {\n      value: BOT,\n      description: 'Can execute bot commands',\n      initialRoles: [],\n    },\n    {\n      value: ADMIN_EARLY_ACCESS_FEATURES_READ,\n      description: 'may read Alpha Features',\n      initialRoles: [\n        'accounts:read',\n        'accounts:orgCreator',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:admin',\n        'accounts:earlyAccessEditor',\n      ],\n    },\n    {\n      value: ADMIN_EARLY_ACCESS_FEATURES_CREATE,\n      description: 'may create new Alpha Features',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:god',\n        'accounts:earlyAccessEditor',\n      ],\n    },\n    {\n      value: ADMIN_EARLY_ACCESS_FEATURES_DELETE,\n      description: 'may delete Alpha Features',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:god',\n        'accounts:earlyAccessEditor',\n      ],\n    },\n    {\n      value: ADMIN_EARLY_ACCESS_FEATURES_UPDATE,\n      description: 'may delete Alpha Features',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:god',\n        'accounts:earlyAccessEditor',\n      ],\n    },\n    {\n      value: ADMIN_CHANGE_EMAIL,\n      description: 'can change the email of an user',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: ADMIN_CHANGE_USER_NAME,\n      description: 'can change the name of an user',\n      initialRoles: ['accounts:admin'],\n    },\n  ]\n}\n"],
-  "mappings": "AAQO,IAAU;AAAA,CAAV,CAAUA,yBAAV;AACE,EAAMA,qBAAA,WAAW;AACjB,EAAMA,qBAAA,aAAa;AACnB,EAAMA,qBAAA,kBAAkB;AACxB,EAAMA,qBAAA,aAAa;AACnB,EAAMA,qBAAA,2BAA2B;AACjC,EAAMA,qBAAA,cAAc;AACpB,EAAMA,qBAAA,4BAA4B;AAClC,EAAMA,qBAAA,aAAa;AACnB,EAAMA,qBAAA,kBAAkB;AACxB,EAAMA,qBAAA,kBAAkB;AACxB,EAAMA,qBAAA,gBAAgB;AACtB,EAAMA,qBAAA,cAAc;AACpB,EAAMA,qBAAA,mBAAmB;AACzB,EAAMA,qBAAA,eAAe;AACrB,EAAMA,qBAAA,mBAAmB;AACzB,EAAMA,qBAAA,oBAAoB;AAC1B,EAAMA,qBAAA,oBAAoB;AAC1B,EAAMA,qBAAA,0BAA0B;AAChC,EAAMA,qBAAA,oBAAoB;AAC1B,EAAMA,qBAAA,oBAAoB;AAC1B,EAAMA,qBAAA,2BAA2B;AACjC,EAAMA,qBAAA,uCAAuC;AAC7C,EAAMA,qBAAA,oCAAoC;AAC1C,EAAMA,qBAAA,2BAA2B;AACjC,EAAMA,qBAAA,wCAAwC;AAC9C,EAAMA,qBAAA,oBAAoB;AAC1B,EAAMA,qBAAA,uBAAuB;AAE7B,EAAMA,qBAAA,yBAAyB;AAE/B,EAAMA,qBAAA,wBAAwB;AAE9B,EAAMA,qBAAA,mCAAmC;AAEzC,EAAMA,qBAAA,kCAAkC;AAExC,EAAMA,qBAAA,+BAA+B;AACrC,EAAMA,qBAAA,2BAA2B;AACjC,EAAMA,qBAAA,6BAA6B;AACnC,EAAMA,qBAAA,gCAAgC;AAEtC,EAAMA,qBAAA,wBAAwB;AAC9B,EAAMA,qBAAA,sCAAsC;AAC5C,EAAMA,qBAAA,kBAAkB;AAExB,EAAMA,qBAAA,YAAY;AAElB,EAAMA,qBAAA,iCAAiC;AACvC,EAAMA,qBAAA,+BAA+B;AACrC,EAAMA,qBAAA,iCAAiC;AACvC,EAAMA,qBAAA,iCAAiC;AACvC,EAAMA,qBAAA,eAAe;AAErB,EAAMA,qBAAA,qBAAqB;AAC3B,EAAMA,qBAAA,yBAAyB;AAE/B,EAAMA,qBAAA,MAAM;AAGZ,EAAMA,qBAAA,sBAAsB;AAE5B,EAAMA,qBAAA,WAAW;AACjB,EAAMA,qBAAA,2BAA2B;AACjC,EAAMA,qBAAA,kBAAkB;AACxB,EAAMA,qBAAA,2BAA2B;AAEjC,EAAMA,qBAAA,mCAAmC;AACzC,EAAMA,qBAAA,qCAAqC;AAC3C,EAAMA,qBAAA,qCAAqC;AAC3C,EAAMA,qBAAA,qCAAqC;AAC3C,EAAMA,qBAAA,qBAAqB;AAC3B,EAAMA,qBAAA,0BAA0B;AA8GhC,WAAS,sBAAgC;AAC9C,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,WAAW;AAAA,QACX,eAAe;AAAA,QACf,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,YAAY;AAAA,QACZ,wBAAwB;AAAA,QACxB,UAAU;AAAA,QACV,eAAe;AAAA,QACf,eAAe;AAAA,QACf,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,aAAa;AAAA,QACb,gBAAgB;AAAA,QAChB,aAAa;AAAA,QACb,iBAAiB;AAAA,QACjB,YAAY;AAAA,QACZ,eAAe;AAAA,QACf,WAAW;AAAA,QACX,mCAAmC;AAAA,QACnC,oBAAoB;AAAA,QACpB,8BAA8B;AAAA,QAC9B,KAAK;AAAA,QACL,mBAAmB;AAAA,QACnB,aAAa;AAAA,QACb,KAAK;AAAA,UACH,cAAc;AAAA,UACd,qBAAqB;AAAA,UACrB,0BAA0B;AAAA,UAC1B,YAAY;AAAA,UACZ,oBAAoB;AAAA,QACtB;AAAA,QACA,KAAK;AAAA,QACL,aAAa;AAAA,QACb,gBAAgB;AAAA,MAClB;AAAA,MACA,WAAW;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,WAAW;AAAA,MACb;AAAA,MACA,YAAY;AAAA,QACV,KAAK,EAAE,SAAS,OAAO,QAAQ,OAAO,iBAAiB,MAAM;AAAA,MAC/D;AAAA,MACA,OAAO;AAAA,QACL,wBAAwB;AAAA,MAC1B;AAAA,MACA,cAAc;AAAA,QACZ,qBAAqB;AAAA,QACrB,mBAAmB;AAAA,QACnB,gBAAgB;AAAA,MAClB;AAAA,MACA,KAAK;AAAA,QACH,WAAW;AAAA,UACT,KAAK;AAAA,UACL,QAAQ;AAAA,QACV;AAAA,QACA,oBAAoB;AAAA,MACtB;AAAA,MACA,aAAa;AAAA,QACX,KAAK;AAAA,UACH,SAAS;AAAA,YACP,KAAK;AAAA,UACP;AAAA,UACA,QAAQ;AAAA,QACV;AAAA;AAAA,QAEA,IAAI;AAAA,UACF,KAAK;AAAA,YACH,QAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,aAAa;AAAA,UACX,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA,OAAO;AAAA,QACL,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,eAAe;AAAA,QACb,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,qBAAqB;AAAA,QACnB,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAxGO,EAAAA,qBAAS;AA0GT,EAAMA,qBAAA,qBAIR;AAAA,IACH;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,kBAAkB,yBAAyB;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IAEA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,oBAAoB;AAAA,IACtD;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,oBAAoB;AAAA,IACtD;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,oBAAoB;AAAA,IACtD;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,kBAAkB,0BAA0B;AAAA,IAC7D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,kBAAkB,yBAAyB;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,kBAAkB,gCAAgC;AAAA,IACnE;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,+BAA+B,cAAc;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,+BAA+B,cAAc;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,+BAA+B,cAAc;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe,cAAc;AAAA,IAC9C;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe,cAAc;AAAA,IAC9C;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,yBAAyB,4BAA4B;AAAA,IACtE;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,EACF;AAAA,GA5rBe;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport namespace AccountsPermissions {\n  export const READ_ALL = 'aara'\n  export const CREATE_ORG = 'aaco'\n  export const CHANGE_ORG_NAME = 'aacn'\n  export const DELETE_ORG = 'aado'\n  export const RESET_TOKEN_VERIFICATION = 'aart'\n  export const DELETE_USER = 'aadu'\n  export const DELETE_NOT_ACTIVATED_USER = 'aadn'\n  export const ADD_TO_ORG = 'aaao'\n  export const REMOVE_FROM_ORG = 'aaro'\n  export const SET_DEFAULT_ORG = 'aasd'\n  export const CANCEL_INVITE = 'aaci'\n  export const CHANGE_ROLE = 'aacr'\n  export const CHANGE_SAFE_ROLE = 'aacs'\n  export const EXTEND_TRIAL = 'aaet'\n  export const INVALIDATE_TOKEN = 'aait'\n  export const SALES_PLAN_CREATE = 'asc'\n  export const SALES_PLAN_MODIFY = 'asm'\n  export const SALES_PLAN_FORCE_MODIFY = 'asfm'\n  export const SALES_PLAN_SWITCH = 'ass'\n  export const SALES_PLAN_DELETE = 'asd'\n  export const SALES_PLAN_DELETE_AS_GOD = 'asdg'\n  export const SUPPORT_AGENT_REMOVE_AGENTS_FROM_ORG = 'asar'\n  export const SUPPORT_AGENT_SEE_ORG_MEMBERSHIPS = 'asas'\n  export const SUPPORT_AGENT_ADD_TO_ORG = 'asaa'\n  export const MODIFY_CLUSTER_PLAN_TYPE_RESERVATIONS = 'acpm'\n  export const M2M_SALESPLAN_GET = 'amsg'\n  export const M2M_SALESPLAN_SWITCH = 'amss'\n\n  export const ENTERPRISE_ORG_CONVERT = 'aeoc'\n\n  export const ENTERPRISE_ORG_MODIFY = 'aeom'\n\n  export const ENTERPRISE_ORG_MODIFY_START_DATE = 'aeos'\n\n  export const TRIAL_TO_IN_NEGOTIATION_CONVERT = 'atin'\n\n  export const EXTERNAL_M2M_GET_ORG_MEMBERS = 'amog'\n  export const EXTERNAL_M2M_SEARCH_ORGS = 'amos'\n  export const EXTERNAL_M2M_QA_ORG_CREATE = 'amqc'\n  export const EXTERNAL_M2M_OFFBOARD_CAMUNDI = 'amoc'\n\n  export const ORG_MAY_CHANGE_LIMITS = 'alc'\n  export const ORG_MAY_CHANGE_GENERATION_WHITELIST = 'algw'\n  export const ORG_CANCEL_PAID = 'aacp'\n\n  export const ADMIN_SQL = 'aasq'\n\n  export const ADMIN_AUTH0_CONNECTIONS_CREATE = 'aa0c'\n  export const ADMIN_AUTH0_CONNECTIONS_READ = 'aa0r'\n  export const ADMIN_AUTH0_CONNECTIONS_UPDATE = 'aa0u'\n  export const ADMIN_AUTH0_CONNECTIONS_DELETE = 'aa0d'\n  export const UNBLOCK_USER = 'aaub'\n\n  export const ADMIN_CHANGE_EMAIL = 'aace'\n  export const ADMIN_CHANGE_USER_NAME = 'aacu'\n\n  export const BOT = 'abot'\n\n  // OBACHT: NOT THIS ONE\n  export const MODELER_DELETE_USER = 'mdu'\n\n  export const GOD_CRON = 'gcr'\n  export const GOD_SIGNUP_SPAM_PATTERNS = 'gsp'\n  export const GOD_PURGE_USERS = 'gpu'\n  export const GOD_UPDATE_USER_METADATA = 'gum'\n\n  export const ADMIN_EARLY_ACCESS_FEATURES_READ = 'aaer'\n  export const ADMIN_EARLY_ACCESS_FEATURES_CREATE = 'aaec'\n  export const ADMIN_EARLY_ACCESS_FEATURES_DELETE = 'aaed'\n  export const ADMIN_EARLY_ACCESS_FEATURES_UPDATE = 'aaeu'\n  export const ROLE_SUPPORT_AGENT = 'support:agent'\n  export const FORCE_SALES_PLAN_ON_ORG = 'aafs'\n\n  export interface Features {\n    admin: {\n      readAll: boolean\n      createOrg: boolean\n      changeOrgName: boolean\n      deleteOrg: boolean\n      resetTokenVerification: boolean\n      deleteUser: boolean\n      deleteNotActivatedUser: boolean\n      addToOrg: boolean\n      removeFromOrg: boolean\n      setDefaultOrg: boolean\n      cancelInvite: boolean\n      changeRole: boolean\n      addSafeRole: boolean\n      deleteClusters: boolean\n      extendTrial: boolean\n      invalidateToken: boolean\n      cancelPaid: boolean\n      searchForOrgs: boolean\n      readAudit: boolean\n      modifyClusterPlanTypeReservations: boolean\n      mayChangeOrgLimits: boolean\n      mayChangeGenerationWhiteList: boolean\n      sql: boolean\n      modelerDeleteUser: boolean\n      unblockUser: boolean\n      god: {\n        triggerCrons: boolean\n        forceSalesPlanOnOrg: boolean\n        changeSignupSpamPatterns: boolean\n        purgeUsers: boolean\n        updateUserMetadata: boolean\n      }\n      bot: boolean\n      changeEmail: boolean\n      changeUserName: boolean\n    }\n    salesPlan: {\n      create: boolean\n      modify: boolean\n      forceModify: boolean\n      switch: boolean\n      delete: boolean\n      godDelete: boolean\n    }\n    enterprise: {\n      org: {\n        convert: boolean\n        modify: boolean\n        modifyStartDate: boolean\n      }\n    }\n    trial: {\n      convertToInNegotiation: boolean\n    }\n    supportAgent: {\n      removeAgentsFromOrg: boolean\n      seeOrgMemberships: boolean\n      addAgentsToOrg: boolean\n    }\n    m2m: {\n      salesplan: {\n        get: boolean\n        switch: boolean\n      }\n\n      fetchMigrationData: boolean\n    }\n    externalM2m: {\n      org: {\n        members: {\n          get: boolean\n        }\n        search: boolean\n      }\n      qa: {\n        org: {\n          create: boolean\n        }\n      }\n      offboarding: {\n        camundi: boolean\n      }\n    }\n    auth0: {\n      connections: {\n        create: boolean\n        read: boolean\n        update: boolean\n        delete: boolean\n      }\n    }\n    notifications: {\n      global: {\n        read: boolean\n        delete: boolean\n        create: boolean\n      }\n    }\n    earlyAccessFeatures: {\n      read: boolean\n      create: boolean\n      delete: boolean\n      update: boolean\n    }\n  }\n\n  export function createEmptyFeatures(): Features {\n    return {\n      admin: {\n        readAll: false,\n        createOrg: false,\n        changeOrgName: false,\n        deleteOrg: false,\n        resetTokenVerification: false,\n        deleteUser: false,\n        deleteNotActivatedUser: false,\n        addToOrg: false,\n        removeFromOrg: false,\n        setDefaultOrg: false,\n        cancelInvite: false,\n        changeRole: false,\n        addSafeRole: false,\n        deleteClusters: false,\n        extendTrial: false,\n        invalidateToken: false,\n        cancelPaid: false,\n        searchForOrgs: false,\n        readAudit: false,\n        modifyClusterPlanTypeReservations: false,\n        mayChangeOrgLimits: false,\n        mayChangeGenerationWhiteList: false,\n        sql: false,\n        modelerDeleteUser: false,\n        unblockUser: false,\n        god: {\n          triggerCrons: false,\n          forceSalesPlanOnOrg: false,\n          changeSignupSpamPatterns: false,\n          purgeUsers: false,\n          updateUserMetadata: false,\n        },\n        bot: false,\n        changeEmail: false,\n        changeUserName: false,\n      },\n      salesPlan: {\n        create: false,\n        modify: false,\n        forceModify: false,\n        switch: false,\n        delete: false,\n        godDelete: false,\n      },\n      enterprise: {\n        org: { convert: false, modify: false, modifyStartDate: false },\n      },\n      trial: {\n        convertToInNegotiation: false,\n      },\n      supportAgent: {\n        removeAgentsFromOrg: false,\n        seeOrgMemberships: false,\n        addAgentsToOrg: false,\n      },\n      m2m: {\n        salesplan: {\n          get: false,\n          switch: false,\n        },\n        fetchMigrationData: false,\n      },\n      externalM2m: {\n        org: {\n          members: {\n            get: false,\n          },\n          search: false,\n        },\n        // eslint-disable-next-line id-length\n        qa: {\n          org: {\n            create: false,\n          },\n        },\n        offboarding: {\n          camundi: false,\n        },\n      },\n      auth0: {\n        connections: {\n          create: false,\n          read: false,\n          update: false,\n          delete: false,\n        },\n      },\n      notifications: {\n        global: {\n          read: false,\n          delete: false,\n          create: false,\n        },\n      },\n      earlyAccessFeatures: {\n        read: false,\n        create: false,\n        delete: false,\n        update: false,\n      },\n    }\n  }\n\n  export const PermissionsAtAuth0: Array<{\n    value: string\n    description: string\n    initialRoles: Roles[]\n  }> = [\n    {\n      value: READ_ALL,\n      description: 'read access to all orgs and users',\n      initialRoles: [\n        'accounts:read',\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:editSalesPlans',\n        'console:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:trialExtender',\n        'accounts:limitExtender',\n        'accounts:enterpriseAdmin',\n        'accounts:enterpriseOffboarding',\n        'console:C8ReleaseManager',\n        'console:C8UpdateEnforcer',\n        'accounts:addSafeRoles',\n        'accounts:consultingManager',\n        'accounts:earlyAccessEditor',\n      ],\n    },\n    {\n      value: CREATE_ORG,\n      description: 'can create organisations',\n      initialRoles: [\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CHANGE_ORG_NAME,\n      description: 'can change name of organisations',\n      initialRoles: [\n        'accounts:admin',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:onboard',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: DELETE_ORG,\n      description: 'can delete organisations',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: RESET_TOKEN_VERIFICATION,\n      description: 'can reset a verification token of a pending user',\n      initialRoles: [\n        'accounts:onboard',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: DELETE_USER,\n      description: 'can delete users',\n      initialRoles: ['accounts:god'],\n    },\n    {\n      value: DELETE_NOT_ACTIVATED_USER,\n      description: 'can delete users that are not activated yet',\n      initialRoles: [\n        'accounts:onboard',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: ADD_TO_ORG,\n      description: 'can add someone to an org',\n      initialRoles: [\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n        'supersupport:agent',\n      ],\n    },\n    {\n      value: REMOVE_FROM_ORG,\n      description: 'can remove someone from an org',\n      initialRoles: [\n        'accounts:admin',\n        'supersupport:agent',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: SET_DEFAULT_ORG,\n      description: 'can set an org as default for any user',\n      initialRoles: [\n        'support:agent',\n        'supersupport:agent',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n        'accounts:onboard',\n      ],\n    },\n    {\n      value: CANCEL_INVITE,\n      description: 'can cancelpending invites',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:onboard',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CHANGE_ROLE,\n      description: 'can change the role of a user',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:onboard',\n        'accounts:enterpriseAdmin',\n        'supersupport:agent',\n      ],\n    },\n    {\n      value: EXTEND_TRIAL,\n      description: 'can extend the trial period of an organization',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:onboard',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: INVALIDATE_TOKEN,\n      description: 'can invalidate tokens in TokenIssuer',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: SALES_PLAN_CREATE,\n      description: 'can create a SalesPlan',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: SALES_PLAN_MODIFY,\n      description: 'can modify a SalesPlan',\n      initialRoles: ['accounts:admin', 'accounts:editSalesPlans'],\n    },\n    {\n      value: SALES_PLAN_FORCE_MODIFY,\n      description:\n        'can force modify a SalesPlan without caring about the orgs actual reservations/cluster usage',\n      initialRoles: [],\n    },\n    {\n      value: SALES_PLAN_SWITCH,\n      description: 'can switch an organization to another SalesPlan',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:enterpriseOffboarding',\n        'accounts:consultingManager',\n      ],\n    },\n    {\n      value: SALES_PLAN_DELETE,\n      description:\n        'can delete a SalesPlan if it is not used by any Organization',\n      initialRoles: ['accounts:admin'],\n    },\n\n    {\n      value: SALES_PLAN_DELETE_AS_GOD,\n      description: `can delete salesplans even if there is no replacement salesplan for this type. use with great caution`,\n      initialRoles: [],\n    },\n    {\n      value: SUPPORT_AGENT_REMOVE_AGENTS_FROM_ORG,\n      description: 'can remove support agents from organizations',\n      initialRoles: ['support:agent', 'supersupport:agent'],\n    },\n    {\n      value: SUPPORT_AGENT_SEE_ORG_MEMBERSHIPS,\n      description: 'can see all org memberships of support agents',\n      initialRoles: ['support:agent', 'supersupport:agent'],\n    },\n    {\n      value: SUPPORT_AGENT_ADD_TO_ORG,\n      description: 'can add users as support agent to an organization',\n      initialRoles: ['support:agent', 'supersupport:agent'],\n    },\n    {\n      value: MODIFY_CLUSTER_PLAN_TYPE_RESERVATIONS,\n      description: 'can modify cluster plan type reservations of an org',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SALESPLAN_GET,\n      description: 'm2m can get salesplans',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SALESPLAN_SWITCH,\n      description: 'm2m can switch salesplans',\n      initialRoles: [],\n    },\n    {\n      value: ENTERPRISE_ORG_CONVERT,\n      description: 'can convert orgs to enterprise plans',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:onboard',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: ENTERPRISE_ORG_MODIFY,\n      description:\n        'can modify value metrics and contract duration of enterprise orgs',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n        'accounts:enterpriseOffboarding',\n      ],\n    },\n    {\n      value: ENTERPRISE_ORG_MODIFY_START_DATE,\n      description: 'can modify start date of enterprise orgs',\n      initialRoles: [\n        'accounts:god',\n        'accounts:enterpriseOffboarding',\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: TRIAL_TO_IN_NEGOTIATION_CONVERT,\n      description: 'can convert trial orgs to in-negotiation plans',\n      initialRoles: ['accounts:admin', 'accounts:enterpriseAdmin'],\n    },\n    {\n      value: EXTERNAL_M2M_GET_ORG_MEMBERS,\n      description: 'external m2m can get all members of all orgs',\n      initialRoles: [],\n    },\n    {\n      value: EXTERNAL_M2M_QA_ORG_CREATE,\n      description:\n        'external m2m can create orgs, initially add users to org and assign sales plan',\n      initialRoles: [],\n    },\n    {\n      value: EXTERNAL_M2M_OFFBOARD_CAMUNDI,\n      description:\n        'external m2m can trigger offboarding process for Camunda employees',\n      initialRoles: ['accounts:god'],\n    },\n    {\n      value: EXTERNAL_M2M_SEARCH_ORGS,\n      description: 'external m2m can search organizations',\n      initialRoles: [],\n    },\n    {\n      value: ORG_MAY_CHANGE_LIMITS,\n      description: 'may change limits of an organization',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:enterpriseAdmin',\n        'accounts:limitExtender',\n      ],\n    },\n    {\n      value: ORG_MAY_CHANGE_GENERATION_WHITELIST,\n      description: 'may change the generation whitelist of an organization',\n      initialRoles: ['accounts:admin', 'accounts:clusterUpdates'],\n    },\n    {\n      value: ORG_CANCEL_PAID,\n      description: 'may terminate a running paid organisation',\n      initialRoles: ['accounts:admin', 'accounts:enterpriseOffboarding'],\n    },\n    {\n      value: ADMIN_SQL,\n      description: 'may query the DB',\n      initialRoles: ['accounts:god'],\n    },\n    {\n      value: ADMIN_AUTH0_CONNECTIONS_READ,\n      description: 'may read connections from auth0',\n      initialRoles: [\n        'accounts:read',\n        'accounts:orgCreator',\n        'support:agent',\n        'supersupport:agent',\n      ],\n    },\n    {\n      value: ADMIN_AUTH0_CONNECTIONS_CREATE,\n      description: 'may create new connections at auth0',\n      initialRoles: ['accounts:connections:create', 'accounts:god'],\n    },\n    {\n      value: ADMIN_AUTH0_CONNECTIONS_UPDATE,\n      description: 'may update connections at auth0',\n      initialRoles: ['accounts:connections:update', 'accounts:god'],\n    },\n    {\n      value: ADMIN_AUTH0_CONNECTIONS_DELETE,\n      description: 'may delete connections at auth0',\n      initialRoles: ['accounts:connections:delete', 'accounts:god'],\n    },\n    {\n      value: MODELER_DELETE_USER,\n      description: 'can delete a user within the modeler',\n      initialRoles: ['modeler:admin'],\n    },\n    {\n      value: UNBLOCK_USER,\n      description: 'can unblock a user',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: GOD_CRON,\n      description: 'can run cron jobs',\n      initialRoles: ['consoleTeam'],\n    },\n    {\n      value: GOD_SIGNUP_SPAM_PATTERNS,\n      description: 'can read and change signup spam patterns',\n      initialRoles: ['consoleTeam', 'accounts:god'],\n    },\n    {\n      value: GOD_PURGE_USERS,\n      description: 'can purge user records based on create date / name pattern',\n      initialRoles: ['consoleTeam', 'accounts:god'],\n    },\n    {\n      value: GOD_UPDATE_USER_METADATA,\n      description: 'can update auth0 user_metadata and app_metadata',\n      initialRoles: ['accounts:god'],\n    },\n    {\n      value: FORCE_SALES_PLAN_ON_ORG,\n      description: 'can force a sales plan on an org',\n      initialRoles: ['consoleTeam'],\n    },\n    {\n      value: CHANGE_SAFE_ROLE,\n      description: 'Can assign/unassign safe roles',\n      initialRoles: ['accounts:addSafeRoles', 'accounts:consultingManager'],\n    },\n    {\n      value: BOT,\n      description: 'Can execute bot commands',\n      initialRoles: [],\n    },\n    {\n      value: ADMIN_EARLY_ACCESS_FEATURES_READ,\n      description: 'may read Alpha Features',\n      initialRoles: [\n        'accounts:read',\n        'accounts:orgCreator',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:admin',\n        'accounts:earlyAccessEditor',\n      ],\n    },\n    {\n      value: ADMIN_EARLY_ACCESS_FEATURES_CREATE,\n      description: 'may create new Alpha Features',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:god',\n        'accounts:earlyAccessEditor',\n      ],\n    },\n    {\n      value: ADMIN_EARLY_ACCESS_FEATURES_DELETE,\n      description: 'may delete Alpha Features',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:god',\n        'accounts:earlyAccessEditor',\n      ],\n    },\n    {\n      value: ADMIN_EARLY_ACCESS_FEATURES_UPDATE,\n      description: 'may delete Alpha Features',\n      initialRoles: [\n        'accounts:admin',\n        'accounts:god',\n        'accounts:earlyAccessEditor',\n      ],\n    },\n    {\n      value: ADMIN_CHANGE_EMAIL,\n      description: 'can change the email of an user',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: ADMIN_CHANGE_USER_NAME,\n      description: 'can change the name of an user',\n      initialRoles: ['accounts:admin'],\n    },\n  ]\n}\n"],
+  "mappings": "AAQO,IAAU;AAAA,CAAV,CAAUA,yBAAV;AACE,EAAMA,qBAAA,WAAW;AACjB,EAAMA,qBAAA,aAAa;AACnB,EAAMA,qBAAA,kBAAkB;AACxB,EAAMA,qBAAA,aAAa;AACnB,EAAMA,qBAAA,2BAA2B;AACjC,EAAMA,qBAAA,cAAc;AACpB,EAAMA,qBAAA,4BAA4B;AAClC,EAAMA,qBAAA,aAAa;AACnB,EAAMA,qBAAA,kBAAkB;AACxB,EAAMA,qBAAA,kBAAkB;AACxB,EAAMA,qBAAA,gBAAgB;AACtB,EAAMA,qBAAA,cAAc;AACpB,EAAMA,qBAAA,mBAAmB;AACzB,EAAMA,qBAAA,eAAe;AACrB,EAAMA,qBAAA,mBAAmB;AACzB,EAAMA,qBAAA,oBAAoB;AAC1B,EAAMA,qBAAA,oBAAoB;AAC1B,EAAMA,qBAAA,0BAA0B;AAChC,EAAMA,qBAAA,oBAAoB;AAC1B,EAAMA,qBAAA,oBAAoB;AAC1B,EAAMA,qBAAA,2BAA2B;AACjC,EAAMA,qBAAA,uCAAuC;AAC7C,EAAMA,qBAAA,oCAAoC;AAC1C,EAAMA,qBAAA,2BAA2B;AACjC,EAAMA,qBAAA,wCAAwC;AAC9C,EAAMA,qBAAA,oBAAoB;AAC1B,EAAMA,qBAAA,uBAAuB;AAE7B,EAAMA,qBAAA,yBAAyB;AAE/B,EAAMA,qBAAA,wBAAwB;AAE9B,EAAMA,qBAAA,mCAAmC;AAEzC,EAAMA,qBAAA,kCAAkC;AAExC,EAAMA,qBAAA,+BAA+B;AACrC,EAAMA,qBAAA,2BAA2B;AACjC,EAAMA,qBAAA,6BAA6B;AACnC,EAAMA,qBAAA,gCAAgC;AAEtC,EAAMA,qBAAA,wBAAwB;AAC9B,EAAMA,qBAAA,sCAAsC;AAC5C,EAAMA,qBAAA,kBAAkB;AAExB,EAAMA,qBAAA,YAAY;AAElB,EAAMA,qBAAA,iCAAiC;AACvC,EAAMA,qBAAA,+BAA+B;AACrC,EAAMA,qBAAA,iCAAiC;AACvC,EAAMA,qBAAA,iCAAiC;AACvC,EAAMA,qBAAA,eAAe;AAErB,EAAMA,qBAAA,qBAAqB;AAC3B,EAAMA,qBAAA,yBAAyB;AAE/B,EAAMA,qBAAA,MAAM;AAGZ,EAAMA,qBAAA,sBAAsB;AAE5B,EAAMA,qBAAA,WAAW;AACjB,EAAMA,qBAAA,2BAA2B;AACjC,EAAMA,qBAAA,kBAAkB;AACxB,EAAMA,qBAAA,2BAA2B;AAEjC,EAAMA,qBAAA,mCAAmC;AACzC,EAAMA,qBAAA,qCAAqC;AAC3C,EAAMA,qBAAA,qCAAqC;AAC3C,EAAMA,qBAAA,qCAAqC;AAC3C,EAAMA,qBAAA,qBAAqB;AAC3B,EAAMA,qBAAA,0BAA0B;AA8GhC,WAAS,sBAAgC;AAC9C,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,WAAW;AAAA,QACX,eAAe;AAAA,QACf,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,YAAY;AAAA,QACZ,wBAAwB;AAAA,QACxB,UAAU;AAAA,QACV,eAAe;AAAA,QACf,eAAe;AAAA,QACf,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,aAAa;AAAA,QACb,gBAAgB;AAAA,QAChB,aAAa;AAAA,QACb,iBAAiB;AAAA,QACjB,YAAY;AAAA,QACZ,eAAe;AAAA,QACf,WAAW;AAAA,QACX,mCAAmC;AAAA,QACnC,oBAAoB;AAAA,QACpB,8BAA8B;AAAA,QAC9B,KAAK;AAAA,QACL,mBAAmB;AAAA,QACnB,aAAa;AAAA,QACb,KAAK;AAAA,UACH,cAAc;AAAA,UACd,qBAAqB;AAAA,UACrB,0BAA0B;AAAA,UAC1B,YAAY;AAAA,UACZ,oBAAoB;AAAA,QACtB;AAAA,QACA,KAAK;AAAA,QACL,aAAa;AAAA,QACb,gBAAgB;AAAA,MAClB;AAAA,MACA,WAAW;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,WAAW;AAAA,MACb;AAAA,MACA,YAAY;AAAA,QACV,KAAK,EAAE,SAAS,OAAO,QAAQ,OAAO,iBAAiB,MAAM;AAAA,MAC/D;AAAA,MACA,OAAO;AAAA,QACL,wBAAwB;AAAA,MAC1B;AAAA,MACA,cAAc;AAAA,QACZ,qBAAqB;AAAA,QACrB,mBAAmB;AAAA,QACnB,gBAAgB;AAAA,MAClB;AAAA,MACA,KAAK;AAAA,QACH,WAAW;AAAA,UACT,KAAK;AAAA,UACL,QAAQ;AAAA,QACV;AAAA,QACA,oBAAoB;AAAA,MACtB;AAAA,MACA,aAAa;AAAA,QACX,KAAK;AAAA,UACH,SAAS;AAAA,YACP,KAAK;AAAA,UACP;AAAA,UACA,QAAQ;AAAA,QACV;AAAA;AAAA,QAEA,IAAI;AAAA,UACF,KAAK;AAAA,YACH,QAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,aAAa;AAAA,UACX,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA,OAAO;AAAA,QACL,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,eAAe;AAAA,QACb,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,qBAAqB;AAAA,QACnB,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAxGO,EAAAA,qBAAS;AA0GT,EAAMA,qBAAA,qBAIR;AAAA,IACH;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,kBAAkB,yBAAyB;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IAEA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,oBAAoB;AAAA,IACtD;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,oBAAoB;AAAA,IACtD;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,oBAAoB;AAAA,IACtD;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,kBAAkB,0BAA0B;AAAA,IAC7D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,kBAAkB,yBAAyB;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,kBAAkB,gCAAgC;AAAA,IACnE;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,+BAA+B,cAAc;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,+BAA+B,cAAc;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,+BAA+B,cAAc;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe,cAAc;AAAA,IAC9C;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe,cAAc;AAAA,IAC9C;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,yBAAyB,4BAA4B;AAAA,IACtE;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,qBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,EACF;AAAA,GA3rBe;",
   "names": ["AccountsPermissions"]
 }

package/dist/types/OrganizationPermission.type.js

@@ -480,7 +480,7 @@ const PermissionsForOrganizationRole = /* @__PURE__ */ new Map([
         secureConnectivity: CRUD_TRUE,
         encryption: CRUD_TRUE,
         connectorSecrets: CRUD_TRUE,
-        connectors: CRUD_FALSE,
+        connectors: CRUD_READ_TRUE,
         settings: {
           resourceBasedAuthorizations: {
             activate: CRUD_FALSE,
@@ -660,7 +660,7 @@ const PermissionsForOrganizationRole = /* @__PURE__ */ new Map([
         secureConnectivity: CRUD_READ_TRUE,
         encryption: CRUD_FALSE,
         connectorSecrets: CRUD_TRUE,
-        connectors: CRUD_FALSE,
+        connectors: CRUD_READ_TRUE,
         settings: {
           resourceBasedAuthorizations: {
             activate: CRUD_FALSE,

package/dist/types/OrganizationPermission.type.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/OrganizationPermission.type.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { OrganizationRole } from '../enums/OrganizationRole.enum.js'\n\n// new roles and permissions according to\n// https://docs.google.com/document/d/1FZYFn9fK2sn6ksjh7drSNad1vyMEIwK6p4KlG353yfM/edit#heading=h.kjgwc8d48e3a\n\nconst CRUD_TRUE: CreateReadUpdateDelete = {\n  create: true,\n  read: true,\n  update: true,\n  delete: true,\n}\n\nconst CRUD_FALSE: CreateReadUpdateDelete = {\n  create: false,\n  read: false,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_UPDATE_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: true,\n  delete: false,\n}\n\nexport interface CreateReadUpdateDelete {\n  create: boolean\n  read: boolean\n  update: boolean\n  delete: boolean\n}\n\nexport interface CreateReadUpdateDeleteDescriptions {\n  create: string\n  read: string\n  update: string\n  delete: string\n}\n\nexport interface OrganizationPermissionsInternal<T> {\n  org: {\n    clusters: T\n    clients: T\n    settings: T\n    usage: T\n    billing: T\n    users: {\n      general: T\n      owner: T\n      admin: T\n      member: T\n    }\n    activity: T\n    diagrams: T\n    forms: T\n    instances: T // create === start new instances\n    workflows: T // create === deploy diagrams\n    webide: T\n    earlyAccessFeatures: T\n  }\n  cluster: {\n    clients: T\n    alerts: T\n    operate: T\n    tasklist: T\n    optimize: T\n    identity: T\n    ipWhitelist: T\n    secureConnectivity: T\n    encryption: T\n    connectorSecrets: T\n    connectors: T\n    settings: {\n      resourceBasedAuthorizations: {\n        activate: T\n        configure: T\n      }\n      identityBasedAuthorizations: {\n        activate: T\n      }\n      multiTenancy: {\n        activate: T\n      }\n    }\n  }\n}\n\nexport interface OrganizationPermissions\n  extends OrganizationPermissionsInternal<CreateReadUpdateDelete> {}\n\nexport const OrganizationPermissionsDescriptions: OrganizationPermissionsInternal<CreateReadUpdateDeleteDescriptions> =\n  {\n    org: {\n      clusters: {\n        create: 'Create new clusters',\n        read: 'View clusters',\n        update: 'Update clusters',\n        delete: 'Delete clusters',\n      },\n      clients: {\n        create: 'Create new console clients',\n        read: 'View console clients',\n        update: 'Update console clients',\n        delete: 'Delete console clients',\n      },\n      settings: {\n        create: 'unused',\n        read: 'View settings',\n        update: 'Update settings',\n        delete: 'Delete settings',\n      },\n      usage: {\n        create: 'unused',\n        read: 'View usage metrics',\n        update: 'unused',\n        delete: 'unused',\n      },\n      billing: {\n        create: 'unused',\n        read: 'View billing information',\n        update: 'Update billing information',\n        delete: 'unused',\n      },\n      users: {\n        general: {\n          create: 'Add users',\n          read: 'View users',\n          update: 'Update users',\n          delete: 'Remove users',\n        },\n        owner: {\n          create: 'Initiate owner change',\n          read: 'Read owners',\n          update: 'Update owners',\n          delete: 'Remove owners',\n        },\n        admin: {\n          create: 'Add admins',\n          read: 'Read admins',\n          update: 'Update admins',\n          delete: 'Remove admins',\n        },\n        member: {\n          create: 'Add members',\n          read: 'Read members',\n          update: 'Update members',\n          delete: 'Remove members',\n        },\n      },\n      activity: {\n        create: 'unused',\n        read: 'View activity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      diagrams: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      forms: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      instances: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      workflows: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      webide: {\n        create: 'unused',\n        read: 'Open Web Modeler',\n        update: 'unused',\n        delete: 'unused',\n      },\n      earlyAccessFeatures: {\n        create: 'Enable early access features',\n        read: 'View early access features',\n        update: 'Update early access features',\n        delete: 'Disable early access features',\n      },\n    },\n    cluster: {\n      clients: {\n        create: 'Create cluster clients',\n        read: 'View cluster clients',\n        update: 'Update cluster clients',\n        delete: 'Delete cluster clients',\n      },\n      alerts: {\n        create: 'Create cluster alerts',\n        read: 'View cluster alerts',\n        update: 'Update cluster alerts',\n        delete: 'Delete cluster alerts',\n      },\n      operate: {\n        create: 'unused',\n        read: 'Open Operate',\n        update: 'unused',\n        delete: 'unused',\n      },\n      tasklist: {\n        create: 'unused',\n        read: 'Open Task List',\n        update: 'unused',\n        delete: 'unused',\n      },\n      optimize: {\n        create: 'unused',\n        read: 'Open Optimize',\n        update: 'unused',\n        delete: 'unused',\n      },\n      identity: {\n        create: 'unused',\n        read: 'Open Identity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      ipWhitelist: {\n        create: 'Create IP Whitelist',\n        read: 'Read IP Whitelist',\n        update: 'Update IP Whitelist',\n        delete: 'Delete IP Whitelist',\n      },\n      secureConnectivity: {\n        create: 'Create Secure Connectivity',\n        read: 'Read Secure Connectivity',\n        update: 'Update Secure Connectivity',\n        delete: 'Delete Secure Connectivity',\n      },\n      encryption: {\n        create: 'Create BYO Encryption',\n        read: 'Read BYO Encryption',\n        update: 'Update BYO Encryption',\n        delete: 'Delete BYO Encryption',\n      },\n      connectorSecrets: {\n        create: 'Create Connector Secrets',\n        read: 'View Connector Secrets',\n        update: 'Update Connector Secrets',\n        delete: 'Delete Connector Secrets',\n      },\n      connectors: {\n        create: 'unused',\n        read: 'Read Manage Connectors View',\n        update: 'unused',\n        delete: 'unused',\n      },\n      settings: {\n        resourceBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View resource-based authorizations settings',\n            update: 'Enable/Disable resource-based authorizations',\n            delete: 'unused',\n          },\n          configure: {\n            create: 'unused',\n            read: 'Read resource-based authorizations for users',\n            update: 'Update resource-based authorizations for users',\n            delete: 'unused',\n          },\n        },\n        identityBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View identity-based authorizations settings',\n            update: 'Enable/Disable identity-based authorizations',\n            delete: 'unused',\n          },\n        },\n        multiTenancy: {\n          activate: {\n            create: 'unused',\n            read: 'View Multi-tenency settings',\n            update: 'Enable/Disable Multi-tenancy',\n            delete: 'unused',\n          },\n        },\n      },\n    },\n  }\n\nexport const PermissionsForOrganizationRole: Map<\n  OrganizationRole,\n  OrganizationPermissions\n> = new Map([\n  [\n    OrganizationRole.MEMBER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ADMIN,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OWNER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: {\n          create: false,\n          read: true,\n          update: true,\n          delete: true,\n        },\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_TRUE,\n          admin: CRUD_TRUE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.SUPPORTAGENT,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_READ_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_TRUE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_READ_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_READ_TRUE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_READ_TRUE,\n        connectorSecrets: CRUD_READ_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OPERATIONS_ENGINEER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.TASK_USER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ANALYST,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.DEVELOPER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: false,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_READ_TRUE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.VISITOR,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.MODELER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n])\n"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { OrganizationRole } from '../enums/OrganizationRole.enum.js'\n\n// new roles and permissions according to\n// https://docs.google.com/document/d/1FZYFn9fK2sn6ksjh7drSNad1vyMEIwK6p4KlG353yfM/edit#heading=h.kjgwc8d48e3a\n\nconst CRUD_TRUE: CreateReadUpdateDelete = {\n  create: true,\n  read: true,\n  update: true,\n  delete: true,\n}\n\nconst CRUD_FALSE: CreateReadUpdateDelete = {\n  create: false,\n  read: false,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_UPDATE_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: true,\n  delete: false,\n}\n\nexport interface CreateReadUpdateDelete {\n  create: boolean\n  read: boolean\n  update: boolean\n  delete: boolean\n}\n\nexport interface CreateReadUpdateDeleteDescriptions {\n  create: string\n  read: string\n  update: string\n  delete: string\n}\n\nexport interface OrganizationPermissionsInternal<T> {\n  org: {\n    clusters: T\n    clients: T\n    settings: T\n    usage: T\n    billing: T\n    users: {\n      general: T\n      owner: T\n      admin: T\n      member: T\n    }\n    activity: T\n    diagrams: T\n    forms: T\n    instances: T // create === start new instances\n    workflows: T // create === deploy diagrams\n    webide: T\n    earlyAccessFeatures: T\n  }\n  cluster: {\n    clients: T\n    alerts: T\n    operate: T\n    tasklist: T\n    optimize: T\n    identity: T\n    ipWhitelist: T\n    secureConnectivity: T\n    encryption: T\n    connectorSecrets: T\n    connectors: T\n    settings: {\n      resourceBasedAuthorizations: {\n        activate: T\n        configure: T\n      }\n      identityBasedAuthorizations: {\n        activate: T\n      }\n      multiTenancy: {\n        activate: T\n      }\n    }\n  }\n}\n\nexport interface OrganizationPermissions\n  extends OrganizationPermissionsInternal<CreateReadUpdateDelete> {}\n\nexport const OrganizationPermissionsDescriptions: OrganizationPermissionsInternal<CreateReadUpdateDeleteDescriptions> =\n  {\n    org: {\n      clusters: {\n        create: 'Create new clusters',\n        read: 'View clusters',\n        update: 'Update clusters',\n        delete: 'Delete clusters',\n      },\n      clients: {\n        create: 'Create new console clients',\n        read: 'View console clients',\n        update: 'Update console clients',\n        delete: 'Delete console clients',\n      },\n      settings: {\n        create: 'unused',\n        read: 'View settings',\n        update: 'Update settings',\n        delete: 'Delete settings',\n      },\n      usage: {\n        create: 'unused',\n        read: 'View usage metrics',\n        update: 'unused',\n        delete: 'unused',\n      },\n      billing: {\n        create: 'unused',\n        read: 'View billing information',\n        update: 'Update billing information',\n        delete: 'unused',\n      },\n      users: {\n        general: {\n          create: 'Add users',\n          read: 'View users',\n          update: 'Update users',\n          delete: 'Remove users',\n        },\n        owner: {\n          create: 'Initiate owner change',\n          read: 'Read owners',\n          update: 'Update owners',\n          delete: 'Remove owners',\n        },\n        admin: {\n          create: 'Add admins',\n          read: 'Read admins',\n          update: 'Update admins',\n          delete: 'Remove admins',\n        },\n        member: {\n          create: 'Add members',\n          read: 'Read members',\n          update: 'Update members',\n          delete: 'Remove members',\n        },\n      },\n      activity: {\n        create: 'unused',\n        read: 'View activity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      diagrams: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      forms: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      instances: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      workflows: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      webide: {\n        create: 'unused',\n        read: 'Open Web Modeler',\n        update: 'unused',\n        delete: 'unused',\n      },\n      earlyAccessFeatures: {\n        create: 'Enable early access features',\n        read: 'View early access features',\n        update: 'Update early access features',\n        delete: 'Disable early access features',\n      },\n    },\n    cluster: {\n      clients: {\n        create: 'Create cluster clients',\n        read: 'View cluster clients',\n        update: 'Update cluster clients',\n        delete: 'Delete cluster clients',\n      },\n      alerts: {\n        create: 'Create cluster alerts',\n        read: 'View cluster alerts',\n        update: 'Update cluster alerts',\n        delete: 'Delete cluster alerts',\n      },\n      operate: {\n        create: 'unused',\n        read: 'Open Operate',\n        update: 'unused',\n        delete: 'unused',\n      },\n      tasklist: {\n        create: 'unused',\n        read: 'Open Task List',\n        update: 'unused',\n        delete: 'unused',\n      },\n      optimize: {\n        create: 'unused',\n        read: 'Open Optimize',\n        update: 'unused',\n        delete: 'unused',\n      },\n      identity: {\n        create: 'unused',\n        read: 'Open Identity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      ipWhitelist: {\n        create: 'Create IP Whitelist',\n        read: 'Read IP Whitelist',\n        update: 'Update IP Whitelist',\n        delete: 'Delete IP Whitelist',\n      },\n      secureConnectivity: {\n        create: 'Create Secure Connectivity',\n        read: 'Read Secure Connectivity',\n        update: 'Update Secure Connectivity',\n        delete: 'Delete Secure Connectivity',\n      },\n      encryption: {\n        create: 'Create BYO Encryption',\n        read: 'Read BYO Encryption',\n        update: 'Update BYO Encryption',\n        delete: 'Delete BYO Encryption',\n      },\n      connectorSecrets: {\n        create: 'Create Connector Secrets',\n        read: 'View Connector Secrets',\n        update: 'Update Connector Secrets',\n        delete: 'Delete Connector Secrets',\n      },\n      connectors: {\n        create: 'unused',\n        read: 'Read Manage Connectors View',\n        update: 'unused',\n        delete: 'unused',\n      },\n      settings: {\n        resourceBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View resource-based authorizations settings',\n            update: 'Enable/Disable resource-based authorizations',\n            delete: 'unused',\n          },\n          configure: {\n            create: 'unused',\n            read: 'Read resource-based authorizations for users',\n            update: 'Update resource-based authorizations for users',\n            delete: 'unused',\n          },\n        },\n        identityBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View identity-based authorizations settings',\n            update: 'Enable/Disable identity-based authorizations',\n            delete: 'unused',\n          },\n        },\n        multiTenancy: {\n          activate: {\n            create: 'unused',\n            read: 'View Multi-tenency settings',\n            update: 'Enable/Disable Multi-tenancy',\n            delete: 'unused',\n          },\n        },\n      },\n    },\n  }\n\nexport const PermissionsForOrganizationRole: Map<\n  OrganizationRole,\n  OrganizationPermissions\n> = new Map([\n  [\n    OrganizationRole.MEMBER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ADMIN,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OWNER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: {\n          create: false,\n          read: true,\n          update: true,\n          delete: true,\n        },\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_TRUE,\n          admin: CRUD_TRUE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.SUPPORTAGENT,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_READ_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_TRUE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_READ_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_READ_TRUE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_READ_TRUE,\n        connectorSecrets: CRUD_READ_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OPERATIONS_ENGINEER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.TASK_USER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ANALYST,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.DEVELOPER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: false,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_READ_TRUE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.VISITOR,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.MODELER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n])\n"],
   "mappings": "AAMA,SAAS,wBAAwB;AAKjC,MAAM,YAAoC;AAAA,EACxC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,aAAqC;AAAA,EACzC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,iBAAyC;AAAA,EAC7C,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,wBAAgD;AAAA,EACpD,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAmEO,MAAM,sCACX;AAAA,EACE,KAAK;AAAA,IACH,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,qBAAqB;AAAA,MACnB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,aAAa;AAAA,MACX,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,oBAAoB;AAAA,MAClB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,kBAAkB;AAAA,MAChB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,UACT,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEK,MAAM,iCAGT,oBAAI,IAAI;AAAA,EACV;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;",
   "names": []
 }

package/dist/types/SalesPlanType.type.d.ts

@@ -6,6 +6,7 @@ export declare enum SalesPlanType {
     IN_NEGOTIATION = "in-negotiation",
     INTERNAL = "internal"
 }
+export declare const OPTIMIZE_DISABLED_PLAN_TYPES: SalesPlanType[];
 export declare enum AnalyticsSalesPlanType {
     TRIAL = "trial",
     ENTERPRISE = "enterprise",

package/dist/types/SalesPlanType.type.js

@@ -7,6 +7,9 @@ var SalesPlanType = /* @__PURE__ */ ((SalesPlanType2) => {
   SalesPlanType2["INTERNAL"] = "internal";
   return SalesPlanType2;
 })(SalesPlanType || {});
+const OPTIMIZE_DISABLED_PLAN_TYPES = [
+  "trial" /* TRIAL */
+];
 var AnalyticsSalesPlanType = /* @__PURE__ */ ((AnalyticsSalesPlanType2) => {
   AnalyticsSalesPlanType2["TRIAL"] = "trial";
   AnalyticsSalesPlanType2["ENTERPRISE"] = "enterprise";
@@ -66,6 +69,7 @@ function getDisplayedSalesPlan(organization) {
 }
 export {
   AnalyticsSalesPlanType,
+  OPTIMIZE_DISABLED_PLAN_TYPES,
   SalesPlanType,
   getAnalyticsSalesPlanFromOrgSalesPlan,
   getDisplayedSalesPlan,

package/dist/types/SalesPlanType.type.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/SalesPlanType.type.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum SalesPlanType {\n  ENTERPRISE = 'enterprise',\n  TRIAL = 'trial',\n  FREE = 'free',\n  FREE_TP_PAID_REQUEST = 'free-to-paid-request',\n  IN_NEGOTIATION = 'in-negotiation',\n  INTERNAL = 'internal',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AnalyticsSalesPlanType {\n  TRIAL = 'trial',\n  ENTERPRISE = 'enterprise',\n  EARLY_ACCESS = 'early-access',\n  IN_NEGOTIATION = 'in-negotiation',\n  FREE = 'free',\n  INTERNAL = 'internal',\n}\n\nexport const getAnalyticsSalesPlanFromOrgSalesPlan = (organization: {\n  organizationToSalesPlan?: {\n    trialStateExpired?: boolean\n    salesPlan: {\n      salesPlanType: SalesPlanType | string\n      version: number\n    }\n  }\n}) => {\n  if (!organization.organizationToSalesPlan) {\n    return undefined\n  }\n  switch (organization.organizationToSalesPlan.salesPlan.salesPlanType) {\n    case SalesPlanType.TRIAL:\n      return AnalyticsSalesPlanType.TRIAL\n    case SalesPlanType.ENTERPRISE:\n      return AnalyticsSalesPlanType.ENTERPRISE\n    case SalesPlanType.INTERNAL:\n      return AnalyticsSalesPlanType.INTERNAL\n    case SalesPlanType.IN_NEGOTIATION:\n      return AnalyticsSalesPlanType.IN_NEGOTIATION\n    default:\n      return undefined\n  }\n}\n\n// https://github.com/camunda/camunda-cloud-management-apps/issues/2809\nexport type RevisitedSalesPlanName =\n  | 'Camunda SaaS Trial'\n  | 'Camunda SaaS Modeling'\n  | 'Enterprise'\n  | 'In Negotiation'\n  | 'Internal'\n\nexport function getRevisitedSalesPlanName(\n  displayedSalesPlanName: DisplayedSalesPlan | undefined,\n): RevisitedSalesPlanName | undefined {\n  switch (displayedSalesPlanName) {\n    case 'Free Trial':\n      return 'Camunda SaaS Trial'\n    case 'Free':\n      return 'Camunda SaaS Modeling'\n    default:\n      return displayedSalesPlanName\n  }\n}\n\nexport type DisplayedSalesPlan =\n  | 'Free Trial'\n  | 'Free'\n  | 'Enterprise'\n  | 'In Negotiation'\n  | 'Internal'\n\nexport function getDisplayedSalesPlan(organization: {\n  organizationToSalesPlan?: {\n    trialStateExpired?: boolean\n    salesPlan: {\n      salesPlanType: SalesPlanType | string\n    }\n  }\n}): DisplayedSalesPlan | undefined {\n  if (!organization.organizationToSalesPlan) {\n    return undefined\n  }\n  switch (organization.organizationToSalesPlan.salesPlan.salesPlanType) {\n    case SalesPlanType.TRIAL:\n      if (organization.organizationToSalesPlan.trialStateExpired) {\n        return 'Free'\n      } else {\n        return 'Free Trial'\n      }\n    case SalesPlanType.ENTERPRISE:\n      return 'Enterprise'\n    case SalesPlanType.INTERNAL:\n      return 'Internal'\n    case SalesPlanType.IN_NEGOTIATION:\n      return 'In Negotiation'\n    default:\n      return undefined\n  }\n}\n"],
-  "mappings": "AAOO,IAAK,gBAAL,kBAAKA,mBAAL;AACL,EAAAA,eAAA,gBAAa;AACb,EAAAA,eAAA,WAAQ;AACR,EAAAA,eAAA,UAAO;AACP,EAAAA,eAAA,0BAAuB;AACvB,EAAAA,eAAA,oBAAiB;AACjB,EAAAA,eAAA,cAAW;AAND,SAAAA;AAAA,GAAA;AAUL,IAAK,yBAAL,kBAAKC,4BAAL;AACL,EAAAA,wBAAA,WAAQ;AACR,EAAAA,wBAAA,gBAAa;AACb,EAAAA,wBAAA,kBAAe;AACf,EAAAA,wBAAA,oBAAiB;AACjB,EAAAA,wBAAA,UAAO;AACP,EAAAA,wBAAA,cAAW;AAND,SAAAA;AAAA,GAAA;AASL,MAAM,wCAAwC,CAAC,iBAQhD;AACJ,MAAI,CAAC,aAAa,yBAAyB;AACzC,WAAO;AAAA,EACT;AACA,UAAQ,aAAa,wBAAwB,UAAU,eAAe;AAAA,IACpE,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAUO,SAAS,0BACd,wBACoC;AACpC,UAAQ,wBAAwB;AAAA,IAC9B,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AASO,SAAS,sBAAsB,cAOH;AACjC,MAAI,CAAC,aAAa,yBAAyB;AACzC,WAAO;AAAA,EACT;AACA,UAAQ,aAAa,wBAAwB,UAAU,eAAe;AAAA,IACpE,KAAK;AACH,UAAI,aAAa,wBAAwB,mBAAmB;AAC1D,eAAO;AAAA,MACT,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum SalesPlanType {\n  ENTERPRISE = 'enterprise',\n  TRIAL = 'trial',\n  FREE = 'free',\n  FREE_TP_PAID_REQUEST = 'free-to-paid-request',\n  IN_NEGOTIATION = 'in-negotiation',\n  INTERNAL = 'internal',\n}\n\nexport const OPTIMIZE_DISABLED_PLAN_TYPES: SalesPlanType[] = [\n  SalesPlanType.TRIAL,\n]\n\n// eslint-disable-next-line no-shadow\nexport enum AnalyticsSalesPlanType {\n  TRIAL = 'trial',\n  ENTERPRISE = 'enterprise',\n  EARLY_ACCESS = 'early-access',\n  IN_NEGOTIATION = 'in-negotiation',\n  FREE = 'free',\n  INTERNAL = 'internal',\n}\n\nexport const getAnalyticsSalesPlanFromOrgSalesPlan = (organization: {\n  organizationToSalesPlan?: {\n    trialStateExpired?: boolean\n    salesPlan: {\n      salesPlanType: SalesPlanType | string\n      version: number\n    }\n  }\n}) => {\n  if (!organization.organizationToSalesPlan) {\n    return undefined\n  }\n  switch (organization.organizationToSalesPlan.salesPlan.salesPlanType) {\n    case SalesPlanType.TRIAL:\n      return AnalyticsSalesPlanType.TRIAL\n    case SalesPlanType.ENTERPRISE:\n      return AnalyticsSalesPlanType.ENTERPRISE\n    case SalesPlanType.INTERNAL:\n      return AnalyticsSalesPlanType.INTERNAL\n    case SalesPlanType.IN_NEGOTIATION:\n      return AnalyticsSalesPlanType.IN_NEGOTIATION\n    default:\n      return undefined\n  }\n}\n\n// https://github.com/camunda/camunda-cloud-management-apps/issues/2809\nexport type RevisitedSalesPlanName =\n  | 'Camunda SaaS Trial'\n  | 'Camunda SaaS Modeling'\n  | 'Enterprise'\n  | 'In Negotiation'\n  | 'Internal'\n\nexport function getRevisitedSalesPlanName(\n  displayedSalesPlanName: DisplayedSalesPlan | undefined,\n): RevisitedSalesPlanName | undefined {\n  switch (displayedSalesPlanName) {\n    case 'Free Trial':\n      return 'Camunda SaaS Trial'\n    case 'Free':\n      return 'Camunda SaaS Modeling'\n    default:\n      return displayedSalesPlanName\n  }\n}\n\nexport type DisplayedSalesPlan =\n  | 'Free Trial'\n  | 'Free'\n  | 'Enterprise'\n  | 'In Negotiation'\n  | 'Internal'\n\nexport function getDisplayedSalesPlan(organization: {\n  organizationToSalesPlan?: {\n    trialStateExpired?: boolean\n    salesPlan: {\n      salesPlanType: SalesPlanType | string\n    }\n  }\n}): DisplayedSalesPlan | undefined {\n  if (!organization.organizationToSalesPlan) {\n    return undefined\n  }\n  switch (organization.organizationToSalesPlan.salesPlan.salesPlanType) {\n    case SalesPlanType.TRIAL:\n      if (organization.organizationToSalesPlan.trialStateExpired) {\n        return 'Free'\n      } else {\n        return 'Free Trial'\n      }\n    case SalesPlanType.ENTERPRISE:\n      return 'Enterprise'\n    case SalesPlanType.INTERNAL:\n      return 'Internal'\n    case SalesPlanType.IN_NEGOTIATION:\n      return 'In Negotiation'\n    default:\n      return undefined\n  }\n}\n"],
+  "mappings": "AAOO,IAAK,gBAAL,kBAAKA,mBAAL;AACL,EAAAA,eAAA,gBAAa;AACb,EAAAA,eAAA,WAAQ;AACR,EAAAA,eAAA,UAAO;AACP,EAAAA,eAAA,0BAAuB;AACvB,EAAAA,eAAA,oBAAiB;AACjB,EAAAA,eAAA,cAAW;AAND,SAAAA;AAAA,GAAA;AASL,MAAM,+BAAgD;AAAA,EAC3D;AACF;AAGO,IAAK,yBAAL,kBAAKC,4BAAL;AACL,EAAAA,wBAAA,WAAQ;AACR,EAAAA,wBAAA,gBAAa;AACb,EAAAA,wBAAA,kBAAe;AACf,EAAAA,wBAAA,oBAAiB;AACjB,EAAAA,wBAAA,UAAO;AACP,EAAAA,wBAAA,cAAW;AAND,SAAAA;AAAA,GAAA;AASL,MAAM,wCAAwC,CAAC,iBAQhD;AACJ,MAAI,CAAC,aAAa,yBAAyB;AACzC,WAAO;AAAA,EACT;AACA,UAAQ,aAAa,wBAAwB,UAAU,eAAe;AAAA,IACpE,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAUO,SAAS,0BACd,wBACoC;AACpC,UAAQ,wBAAwB;AAAA,IAC9B,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AASO,SAAS,sBAAsB,cAOH;AACjC,MAAI,CAAC,aAAa,yBAAyB;AACzC,WAAO;AAAA,EACT;AACA,UAAQ,aAAa,wBAAwB,UAAU,eAAe;AAAA,IACpE,KAAK;AACH,UAAI,aAAa,wBAAwB,mBAAmB;AAC1D,eAAO;AAAA,MACT,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;",
   "names": ["SalesPlanType", "AnalyticsSalesPlanType"]
 }

package/dist/types/hdp.types.d.ts

@@ -18,6 +18,7 @@ export interface Cluster {
     autoUpdate: boolean;
     mcpEnabled?: boolean;
     businessIdUniquenessEnabled?: boolean;
+    optimizeEnabled?: boolean;
     tags?: string[];
     sleeping?: boolean;
     activeModifications: boolean;
@@ -126,6 +127,16 @@ export interface ConnectorSecret {
     clusterUuid: string;
     amountOfSecrets: number;
 }
+export interface ByomClient {
+    uuid: string;
+    clusterUuid?: string;
+    username: string;
+}
+export interface SecureConnectivity {
+    clusterUuid: string;
+    allowedRegions: string[];
+    allowedPrincipals: string[];
+}
 export interface ClusterClient {
     uuid: string;
     name: string;
@@ -222,7 +233,7 @@ export interface LlmSpend {
     spend: number;
     maxBudget: number;
 }
-export type HdpEntity = 'cluster' | 'clusterBackup' | 'clusterBackupSchedule' | 'datacenter' | 'generation' | 'channel' | 'clusterPlan' | 'clusterPlanType' | 'alertSubscription' | 'consoleApiClient' | 'connectorSecret' | 'clusterClient' | 'organization' | 'user' | 'invite' | 'usageAlert' | 'audit' | 'telemetry' | 'userlogin' | 'clusterBulkOperation' | 'clusterModification' | 'clusterModificationConfig' | 'llmSpend';
+export type HdpEntity = 'cluster' | 'clusterBackup' | 'clusterBackupSchedule' | 'clusterRestore' | 'datacenter' | 'generation' | 'channel' | 'clusterPlan' | 'clusterPlanType' | 'alertSubscription' | 'consoleApiClient' | 'connectorSecret' | 'byomClient' | 'secureConnectivity' | 'clusterClient' | 'organization' | 'user' | 'invite' | 'usageAlert' | 'audit' | 'telemetry' | 'userlogin' | 'clusterBulkOperation' | 'clusterModification' | 'clusterModificationConfig' | 'llmSpend';
 export interface HdpPrometheusDataCapacityDataPoint {
     clusterId?: string;
     ts: number;

package/dist/types/hdp.types.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/hdp.types.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Limits } from '../dtos/SalesPlan.dto.js'\nimport type { UsageAlertMetric } from '../dtos/UsageAlert.dto.js'\nimport type { ClusterClientPermission } from '../enums/ClusterClientPermissions.enum.js'\nimport type { ConsoleAPIClientPermission } from '../enums/ConsoleApiClientPermission.enum.js'\nimport type { OrganizationRole } from '../enums/OrganizationRole.enum.js'\nimport type { DisplayedSalesPlan, SalesPlanType } from './SalesPlanType.type.js'\n\nexport interface Cluster {\n  uuid: string\n  name: string\n  clusterPlanType: ClusterPlanType\n  clusterPlan: ClusterPlan\n  generation: Generation\n  channel: Channel\n  datacenter?: Datacenter // is not fetched eagerly, if we do not have it we just gonna omit it\n  amountOfIpWhitelistRules: number\n  ownerUuid: string\n  created: Date\n  autoUpdate: boolean\n  mcpEnabled?: boolean\n  businessIdUniquenessEnabled?: boolean\n  tags?: string[]\n  sleeping?: boolean\n  activeModifications: boolean\n  encryptionKeysSet?: {\n    primaryConfigured: boolean\n    secondaryConfigured: boolean\n  }\n}\nexport interface ClusterBackup {\n  clusterId: string\n  backupId?: string\n}\n\nexport interface ClusterModification {\n  uuid: string\n  clusterUuid: string\n  owner: string\n  createdAt?: Date\n  archivedAt?: Date\n}\n\nexport interface ClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n  yoloJustification?: string\n}\n\n/**\n * HDP-specific interface for ClusterModificationConfig.\n * Used for Holy Data Platform integration - keeps Date objects for timestamp fields.\n */\nexport interface HdpClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n}\n\nexport interface ClusterBackupSchedule {\n  clusterId: string\n  schedule?: string\n}\n\nexport interface ClusterPlanType {\n  uuid: string\n  name: string\n  availabilityClass: string\n  isDevelopment: boolean\n}\n\nexport interface ClusterPlan {\n  uuid: string\n  name: string\n}\n\nexport interface Datacenter {\n  uuid: string\n  name: string\n}\nexport interface Generation {\n  uuid: string\n  name: string\n}\nexport interface Channel {\n  uuid: string\n  name: string\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionType {\n  ClusterAlert = 'ClusterAlert',\n  ProcessAlert = 'ProcessAlert',\n  AllAlerts = 'AllAlerts',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionReportType {\n  Email = 'Email',\n  Webhook = 'Webhook',\n}\nexport interface AlertSubscription {\n  uuid: string\n  clusterUuid?: string\n  target: string // userIdOrWebhook\n  reportType: AlertSubscriptionReportType\n  type: AlertSubscriptionType\n}\n\nexport interface ConsoleApiClient {\n  uuid: string\n  name: string\n  organizationUuid: string\n  permissions: ConsoleAPIClientPermission[]\n}\n\nexport interface ConnectorSecret {\n  clusterUuid: string\n  amountOfSecrets: number\n}\n\nexport interface ClusterClient {\n  uuid: string\n  name: string\n  clusterUuid?: string\n  clientId: string\n  permissions: ClusterClientPermission[]\n}\n\nexport interface Organization {\n  uuid: string\n  name: string\n  salesplan?: {\n    type: SalesPlanType // might be undefined when in limbo\n    displayedType?: DisplayedSalesPlan // might be undefined when in limbo\n    uuid: string // might be undefined when in limbo\n    name: string // might be undefined when in limbo\n    expireDate?: Date\n  }\n  reservations?: {\n    [key: string]: number\n  }\n  earlyAccessFeatures?: string[]\n  justOptedForTheBetaTerms?: boolean\n  salesForceProjectId?: string\n  awsOnly?: boolean\n  limits?: Limits\n}\n\nexport interface User {\n  name: string\n  email: string\n  userId: string\n  orgMemberships?: Array<{ orgUuid: string; roles: OrganizationRole[] }> // can be undefined which means: no new info ;)\n}\n\nexport interface UserLogin {\n  userId: string\n}\n\nexport interface Invite {\n  email: string\n  orgUuid: string\n  roles: OrganizationRole[]\n}\n\nexport interface UsageAlert {\n  orgId: string\n  metric: UsageAlertMetric\n  threshold: number\n  enabled: boolean\n  triggered: boolean\n}\n\nexport interface Audit {\n  service: string\n  orgId: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string\n  entityAttributeValueFrom?: string\n  entityAttributeValueTo?: string\n  parentEntity?: string\n  parentEntityId?: string\n}\n\nexport interface TelemetryData {\n  customerId: string\n  installationId: string\n  entities: Array<{ id: string; type: string }>\n  key: string\n  value: string | number | boolean\n  tags?: Record<string, string>\n  timestampFrom: number\n  timestampTo?: number\n}\n\nexport interface ClusterBulkOperation {\n  uuid: string\n  name: string\n  reason: string\n  eyes: number\n  clusterUuids: string[]\n  type: string\n  created: Date\n  updated?: Date\n  executedAt?: Date\n  createdBy: string\n}\n\nexport interface LlmSpend {\n  orgId: string\n  salesPlanType: SalesPlanType\n  spend: number\n  maxBudget: number\n}\n\nexport type HdpEntity =\n  | 'cluster'\n  | 'clusterBackup'\n  | 'clusterBackupSchedule'\n  | 'datacenter'\n  | 'generation'\n  | 'channel'\n  | 'clusterPlan'\n  | 'clusterPlanType'\n  | 'alertSubscription'\n  | 'consoleApiClient'\n  | 'connectorSecret'\n  | 'clusterClient'\n  | 'organization'\n  | 'user'\n  | 'invite'\n  | 'usageAlert'\n  | 'audit'\n  | 'telemetry'\n  | 'userlogin'\n  | 'clusterBulkOperation'\n  | 'clusterModification'\n  | 'clusterModificationConfig'\n  | 'llmSpend'\n\nexport interface HdpPrometheusDataCapacityDataPoint {\n  clusterId?: string\n  ts: number\n  avg: number\n  min: number\n  max: number\n}\n\nexport interface HdpBackendChangeEvent {\n  ts: number\n  data: {\n    stage: string\n    entity: string\n    operation: string\n    data: any\n  }\n}\n"],
-  "mappings": "AAsHO,IAAK,wBAAL,kBAAKA,2BAAL;AACL,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAOL,IAAK,8BAAL,kBAAKC,iCAAL;AACL,EAAAA,6BAAA,WAAQ;AACR,EAAAA,6BAAA,aAAU;AAFA,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Limits } from '../dtos/SalesPlan.dto.js'\nimport type { UsageAlertMetric } from '../dtos/UsageAlert.dto.js'\nimport type { ClusterClientPermission } from '../enums/ClusterClientPermissions.enum.js'\nimport type { ConsoleAPIClientPermission } from '../enums/ConsoleApiClientPermission.enum.js'\nimport type { OrganizationRole } from '../enums/OrganizationRole.enum.js'\nimport type { DisplayedSalesPlan, SalesPlanType } from './SalesPlanType.type.js'\n\nexport interface Cluster {\n  uuid: string\n  name: string\n  clusterPlanType: ClusterPlanType\n  clusterPlan: ClusterPlan\n  generation: Generation\n  channel: Channel\n  datacenter?: Datacenter // is not fetched eagerly, if we do not have it we just gonna omit it\n  amountOfIpWhitelistRules: number\n  ownerUuid: string\n  created: Date\n  autoUpdate: boolean\n  mcpEnabled?: boolean\n  businessIdUniquenessEnabled?: boolean\n  optimizeEnabled?: boolean\n  tags?: string[]\n  sleeping?: boolean\n  activeModifications: boolean\n  encryptionKeysSet?: {\n    primaryConfigured: boolean\n    secondaryConfigured: boolean\n  }\n}\nexport interface ClusterBackup {\n  clusterId: string\n  backupId?: string\n}\n\nexport interface ClusterModification {\n  uuid: string\n  clusterUuid: string\n  owner: string\n  createdAt?: Date\n  archivedAt?: Date\n}\n\nexport interface ClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n  yoloJustification?: string\n}\n\n/**\n * HDP-specific interface for ClusterModificationConfig.\n * Used for Holy Data Platform integration - keeps Date objects for timestamp fields.\n */\nexport interface HdpClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n}\n\nexport interface ClusterBackupSchedule {\n  clusterId: string\n  schedule?: string\n}\n\nexport interface ClusterPlanType {\n  uuid: string\n  name: string\n  availabilityClass: string\n  isDevelopment: boolean\n}\n\nexport interface ClusterPlan {\n  uuid: string\n  name: string\n}\n\nexport interface Datacenter {\n  uuid: string\n  name: string\n}\nexport interface Generation {\n  uuid: string\n  name: string\n}\nexport interface Channel {\n  uuid: string\n  name: string\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionType {\n  ClusterAlert = 'ClusterAlert',\n  ProcessAlert = 'ProcessAlert',\n  AllAlerts = 'AllAlerts',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionReportType {\n  Email = 'Email',\n  Webhook = 'Webhook',\n}\nexport interface AlertSubscription {\n  uuid: string\n  clusterUuid?: string\n  target: string // userIdOrWebhook\n  reportType: AlertSubscriptionReportType\n  type: AlertSubscriptionType\n}\n\nexport interface ConsoleApiClient {\n  uuid: string\n  name: string\n  organizationUuid: string\n  permissions: ConsoleAPIClientPermission[]\n}\n\nexport interface ConnectorSecret {\n  clusterUuid: string\n  amountOfSecrets: number\n}\n\nexport interface ByomClient {\n  uuid: string\n  clusterUuid?: string\n  username: string\n}\n\nexport interface SecureConnectivity {\n  clusterUuid: string\n  allowedRegions: string[]\n  allowedPrincipals: string[]\n}\n\nexport interface ClusterClient {\n  uuid: string\n  name: string\n  clusterUuid?: string\n  clientId: string\n  permissions: ClusterClientPermission[]\n}\n\nexport interface Organization {\n  uuid: string\n  name: string\n  salesplan?: {\n    type: SalesPlanType // might be undefined when in limbo\n    displayedType?: DisplayedSalesPlan // might be undefined when in limbo\n    uuid: string // might be undefined when in limbo\n    name: string // might be undefined when in limbo\n    expireDate?: Date\n  }\n  reservations?: {\n    [key: string]: number\n  }\n  earlyAccessFeatures?: string[]\n  justOptedForTheBetaTerms?: boolean\n  salesForceProjectId?: string\n  awsOnly?: boolean\n  limits?: Limits\n}\n\nexport interface User {\n  name: string\n  email: string\n  userId: string\n  orgMemberships?: Array<{ orgUuid: string; roles: OrganizationRole[] }> // can be undefined which means: no new info ;)\n}\n\nexport interface UserLogin {\n  userId: string\n}\n\nexport interface Invite {\n  email: string\n  orgUuid: string\n  roles: OrganizationRole[]\n}\n\nexport interface UsageAlert {\n  orgId: string\n  metric: UsageAlertMetric\n  threshold: number\n  enabled: boolean\n  triggered: boolean\n}\n\nexport interface Audit {\n  service: string\n  orgId: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string\n  entityAttributeValueFrom?: string\n  entityAttributeValueTo?: string\n  parentEntity?: string\n  parentEntityId?: string\n}\n\nexport interface TelemetryData {\n  customerId: string\n  installationId: string\n  entities: Array<{ id: string; type: string }>\n  key: string\n  value: string | number | boolean\n  tags?: Record<string, string>\n  timestampFrom: number\n  timestampTo?: number\n}\n\nexport interface ClusterBulkOperation {\n  uuid: string\n  name: string\n  reason: string\n  eyes: number\n  clusterUuids: string[]\n  type: string\n  created: Date\n  updated?: Date\n  executedAt?: Date\n  createdBy: string\n}\n\nexport interface LlmSpend {\n  orgId: string\n  salesPlanType: SalesPlanType\n  spend: number\n  maxBudget: number\n}\n\nexport type HdpEntity =\n  | 'cluster'\n  | 'clusterBackup'\n  | 'clusterBackupSchedule'\n  | 'clusterRestore'\n  | 'datacenter'\n  | 'generation'\n  | 'channel'\n  | 'clusterPlan'\n  | 'clusterPlanType'\n  | 'alertSubscription'\n  | 'consoleApiClient'\n  | 'connectorSecret'\n  | 'byomClient'\n  | 'secureConnectivity'\n  | 'clusterClient'\n  | 'organization'\n  | 'user'\n  | 'invite'\n  | 'usageAlert'\n  | 'audit'\n  | 'telemetry'\n  | 'userlogin'\n  | 'clusterBulkOperation'\n  | 'clusterModification'\n  | 'clusterModificationConfig'\n  | 'llmSpend'\n\nexport interface HdpPrometheusDataCapacityDataPoint {\n  clusterId?: string\n  ts: number\n  avg: number\n  min: number\n  max: number\n}\n\nexport interface HdpBackendChangeEvent {\n  ts: number\n  data: {\n    stage: string\n    entity: string\n    operation: string\n    data: any\n  }\n}\n"],
+  "mappings": "AAuHO,IAAK,wBAAL,kBAAKA,2BAAL;AACL,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAOL,IAAK,8BAAL,kBAAKC,iCAAL;AACL,EAAAA,6BAAA,WAAQ;AACR,EAAAA,6BAAA,aAAU;AAFA,SAAAA;AAAA,GAAA;",
   "names": ["AlertSubscriptionType", "AlertSubscriptionReportType"]
 }

package/dist/utils/encryptionStatus.utils.d.ts

@@ -0,0 +1,15 @@
+export type EncryptionStatus = 'Ready' | 'ProviderError' | 'ExternalEncryptionKeyNotReady' | 'ExternalEncryptionKeyNotSupplied' | 'CreationError' | 'EncryptedStorageNotReady';
+export declare function isEncryptionStatus(value: string): value is EncryptionStatus;
+interface EncryptionStatusCondition {
+    type?: string;
+    reason?: string;
+    lastTransitionTime?: string | Date;
+}
+/**
+ * Pick the most recent `EncryptionReady` condition from the operator-reported
+ * status conditions list and map its `reason` to an `EncryptionStatus`.
+ * Falls back to `ExternalEncryptionKeyNotSupplied` if no condition exists or
+ * the reason is unrecognised.
+ */
+export declare function deriveEncryptionStatus(conditions: EncryptionStatusCondition[] | undefined): EncryptionStatus;
+export {};

package/dist/utils/encryptionStatus.utils.js

@@ -0,0 +1,17 @@
+function isEncryptionStatus(value) {
+  return value === "Ready" || value === "ProviderError" || value === "ExternalEncryptionKeyNotReady" || value === "ExternalEncryptionKeyNotSupplied" || value === "CreationError" || value === "EncryptedStorageNotReady";
+}
+function deriveEncryptionStatus(conditions) {
+  const encryptionReady = (conditions ?? []).filter((c) => c.type === "EncryptionReady").slice().sort((a, b) => {
+    const aTime = new Date(a.lastTransitionTime ?? 0).getTime();
+    const bTime = new Date(b.lastTransitionTime ?? 0).getTime();
+    return (Number.isFinite(bTime) ? bTime : 0) - (Number.isFinite(aTime) ? aTime : 0);
+  })[0];
+  const reason = encryptionReady?.reason ?? "ExternalEncryptionKeyNotSupplied";
+  return isEncryptionStatus(reason) ? reason : "ExternalEncryptionKeyNotSupplied";
+}
+export {
+  deriveEncryptionStatus,
+  isEncryptionStatus
+};
+//# sourceMappingURL=encryptionStatus.utils.js.map

package/dist/utils/encryptionStatus.utils.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/encryptionStatus.utils.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// Reason values the operator emits on the EncryptionReady condition. Shared\n// between the C4 encryption tab and the customer API's GET /clusters/:id\n// response so both surfaces report the same status string.\nexport type EncryptionStatus =\n  | 'Ready'\n  | 'ProviderError'\n  | 'ExternalEncryptionKeyNotReady'\n  | 'ExternalEncryptionKeyNotSupplied'\n  | 'CreationError'\n  | 'EncryptedStorageNotReady'\n\nexport function isEncryptionStatus(value: string): value is EncryptionStatus {\n  return (\n    value === 'Ready' ||\n    value === 'ProviderError' ||\n    value === 'ExternalEncryptionKeyNotReady' ||\n    value === 'ExternalEncryptionKeyNotSupplied' ||\n    value === 'CreationError' ||\n    value === 'EncryptedStorageNotReady'\n  )\n}\n\ninterface EncryptionStatusCondition {\n  type?: string\n  reason?: string\n  lastTransitionTime?: string | Date\n}\n\n/**\n * Pick the most recent `EncryptionReady` condition from the operator-reported\n * status conditions list and map its `reason` to an `EncryptionStatus`.\n * Falls back to `ExternalEncryptionKeyNotSupplied` if no condition exists or\n * the reason is unrecognised.\n */\nexport function deriveEncryptionStatus(\n  conditions: EncryptionStatusCondition[] | undefined,\n): EncryptionStatus {\n  const encryptionReady = (conditions ?? [])\n    .filter((c) => c.type === 'EncryptionReady')\n    .slice()\n    .sort((a, b) => {\n      const aTime = new Date(a.lastTransitionTime ?? 0).getTime()\n      const bTime = new Date(b.lastTransitionTime ?? 0).getTime()\n      return (\n        (Number.isFinite(bTime) ? bTime : 0) -\n        (Number.isFinite(aTime) ? aTime : 0)\n      )\n    })[0]\n\n  const reason = encryptionReady?.reason ?? 'ExternalEncryptionKeyNotSupplied'\n  return isEncryptionStatus(reason)\n    ? reason\n    : 'ExternalEncryptionKeyNotSupplied'\n}\n"],
+  "mappings": "AAiBO,SAAS,mBAAmB,OAA0C;AAC3E,SACE,UAAU,WACV,UAAU,mBACV,UAAU,mCACV,UAAU,sCACV,UAAU,mBACV,UAAU;AAEd;AAcO,SAAS,uBACd,YACkB;AAClB,QAAM,mBAAmB,cAAc,CAAC,GACrC,OAAO,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAC1C,MAAM,EACN,KAAK,CAAC,GAAG,MAAM;AACd,UAAM,QAAQ,IAAI,KAAK,EAAE,sBAAsB,CAAC,EAAE,QAAQ;AAC1D,UAAM,QAAQ,IAAI,KAAK,EAAE,sBAAsB,CAAC,EAAE,QAAQ;AAC1D,YACG,OAAO,SAAS,KAAK,IAAI,QAAQ,MACjC,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,EAEtC,CAAC,EAAE,CAAC;AAEN,QAAM,SAAS,iBAAiB,UAAU;AAC1C,SAAO,mBAAmB,MAAM,IAC5B,SACA;AACN;",
+  "names": []
+}

package/dist/utils/envVars.d.ts

@@ -0,0 +1,6 @@
+export interface EnvVarEntry {
+    name: string;
+    value: string;
+}
+export declare function parseEnvVars(raw: string | undefined): EnvVarEntry[];
+export declare function serializeEnvVars(entries: EnvVarEntry[]): string;

package/dist/utils/envVars.js

@@ -0,0 +1,91 @@
+function parseEnvVars(raw) {
+  if (!raw) return [];
+  const entries = [];
+  const n = raw.length;
+  let i = 0;
+  const isWhitespace = (ch) => /\s/.test(ch);
+  const isNameChar = (ch) => /[A-Za-z0-9_.-]/.test(ch);
+  const isNameStartChar = (ch) => /[A-Za-z_]/.test(ch);
+  while (i < n) {
+    while (i < n && isWhitespace(raw[i])) i++;
+    if (i >= n) break;
+    const nameStart = i;
+    while (i < n && isNameChar(raw[i])) i++;
+    const name = raw.slice(nameStart, i);
+    const nameValid = name.length > 0 && isNameStartChar(name[0]);
+    if (!nameValid || raw[i] !== "=") {
+      while (i < n && !isWhitespace(raw[i])) i++;
+      continue;
+    }
+    i++;
+    let value = "";
+    let malformed = false;
+    while (i < n && !isWhitespace(raw[i])) {
+      const ch = raw[i];
+      if (ch === '"') {
+        i++;
+        let closed = false;
+        while (i < n) {
+          const c = raw[i];
+          if (c === "\\" && i + 1 < n) {
+            const next = raw[i + 1];
+            if (next === '"' || next === "\\") {
+              value += next;
+              i += 2;
+              continue;
+            }
+            value += c;
+            i++;
+            continue;
+          }
+          if (c === '"') {
+            i++;
+            closed = true;
+            break;
+          }
+          value += c;
+          i++;
+        }
+        if (!closed) {
+          malformed = true;
+          break;
+        }
+      } else if (ch === "'") {
+        i++;
+        let closed = false;
+        while (i < n) {
+          if (raw[i] === "'") {
+            i++;
+            closed = true;
+            break;
+          }
+          value += raw[i];
+          i++;
+        }
+        if (!closed) {
+          malformed = true;
+          break;
+        }
+      } else {
+        value += ch;
+        i++;
+      }
+    }
+    if (malformed) continue;
+    entries.push({ name, value });
+  }
+  return entries;
+}
+function serializeEnvVars(entries) {
+  return entries.map(({ name, value }) => {
+    if (value === "") return `${name}=""`;
+    if (/^[^\s"'=\\]+$/.test(value)) return `${name}=${value}`;
+    const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+    return `${name}="${escaped}"`;
+  }).join(" ");
+}
+export {
+  parseEnvVars,
+  serializeEnvVars
+};
+//# sourceMappingURL=envVars.js.map