@camunda/ccma-shared-types 0.1.0 → 0.1.2

package/dist/_tests/utils/envVars.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/dtos/CommonCluster.dto.d.ts

@@ -55,9 +55,11 @@ export interface CommonClusterDto {
             clientCategories?: string[];
         };
         swagger?: boolean;
+        optimizeEnabled?: boolean;
     };
     rba?: boolean;
     identityBackendChecksEnabled?: boolean;
+    multiTenancyEnabled?: boolean;
     enforceGroups?: boolean;
     playMode?: boolean;
     mcpEnabled?: boolean;

package/dist/dtos/Generations.dto.d.ts

@@ -10,10 +10,15 @@ export interface GenerationDto {
     updatedBy: string;
     updated: Date;
     isUnsupportedStarting?: Date;
+    isBespoke?: boolean;
 }
 export interface GenerationWithClusterCountDto extends GenerationDto {
     clusterCount: number;
 }
+export interface UpgradableGenerationsDto {
+    preferred: GenerationDto | null;
+    options: GenerationDto[];
+}
 export declare function sortGenerationBySemverOfZeebe(generationA: {
     name: string;
     versions?: {

package/dist/dtos/Generations.dto.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/dtos/Generations.dto.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport semver from 'semver'\nimport type { ZeebeClusterVersionsDto } from '../types/C8ClusterComponentVersions.type.js'\n\nexport interface GenerationDto {\n  name: string\n  uuid: string\n  versions: ZeebeClusterVersionsDto\n  upgradeableFrom: GenerationDto[]\n  createdBy: string\n  createdByName?: string\n  created: Date\n  updatedBy: string\n  updated: Date\n  isUnsupportedStarting?: Date\n}\n\nexport interface GenerationWithClusterCountDto extends GenerationDto {\n  clusterCount: number\n}\n\nexport function sortGenerationBySemverOfZeebe(\n  generationA: { name: string; versions?: { zeebe: string } },\n  generationB: { name: string; versions?: { zeebe: string } },\n) {\n  // magic sorting algorithm\n  // uses the generation version of zeebe for comparison\n  // if version invalid: use localeCompare\n\n  const versionAvalid: boolean =\n    generationA.versions?.zeebe !== undefined &&\n    semver.valid(generationA.versions.zeebe.split(':')[1]) !== null\n  const versionBvalid: boolean =\n    generationB.versions?.zeebe !== undefined &&\n    semver.valid(generationB.versions.zeebe.split(':')[1]) !== null\n\n  if (versionAvalid && versionBvalid) {\n    return semver.compare(\n      generationB.versions.zeebe.split(':')[1],\n      generationA.versions.zeebe.split(':')[1],\n    )\n  } else if (versionAvalid) {\n    return -1\n  } else if (versionBvalid) {\n    return 1\n  } else {\n    return generationB.name.localeCompare(generationA.name)\n  }\n}\n"],
-  "mappings": "AAMA,OAAO,YAAY;AAoBZ,SAAS,8BACd,aACA,aACA;AAKA,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAC7D,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAE7D,MAAI,iBAAiB,eAAe;AAClC,WAAO,OAAO;AAAA,MACZ,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MACvC,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,IACzC;AAAA,EACF,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,OAAO;AACL,WAAO,YAAY,KAAK,cAAc,YAAY,IAAI;AAAA,EACxD;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport semver from 'semver'\nimport type { ZeebeClusterVersionsDto } from '../types/C8ClusterComponentVersions.type.js'\n\nexport interface GenerationDto {\n  name: string\n  uuid: string\n  versions: ZeebeClusterVersionsDto\n  upgradeableFrom: GenerationDto[]\n  createdBy: string\n  createdByName?: string\n  created: Date\n  updatedBy: string\n  updated: Date\n  isUnsupportedStarting?: Date\n  isBespoke?: boolean\n}\n\nexport interface GenerationWithClusterCountDto extends GenerationDto {\n  clusterCount: number\n}\n\nexport interface UpgradableGenerationsDto {\n  preferred: GenerationDto | null\n  options: GenerationDto[]\n}\n\nexport function sortGenerationBySemverOfZeebe(\n  generationA: { name: string; versions?: { zeebe: string } },\n  generationB: { name: string; versions?: { zeebe: string } },\n) {\n  // magic sorting algorithm\n  // uses the generation version of zeebe for comparison\n  // if version invalid: use localeCompare\n\n  const versionAvalid: boolean =\n    generationA.versions?.zeebe !== undefined &&\n    semver.valid(generationA.versions.zeebe.split(':')[1]) !== null\n  const versionBvalid: boolean =\n    generationB.versions?.zeebe !== undefined &&\n    semver.valid(generationB.versions.zeebe.split(':')[1]) !== null\n\n  if (versionAvalid && versionBvalid) {\n    return semver.compare(\n      generationB.versions.zeebe.split(':')[1],\n      generationA.versions.zeebe.split(':')[1],\n    )\n  } else if (versionAvalid) {\n    return -1\n  } else if (versionBvalid) {\n    return 1\n  } else {\n    return generationB.name.localeCompare(generationA.name)\n  }\n}\n"],
+  "mappings": "AAMA,OAAO,YAAY;AA0BZ,SAAS,8BACd,aACA,aACA;AAKA,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAC7D,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAE7D,MAAI,iBAAiB,eAAe;AAClC,WAAO,OAAO;AAAA,MACZ,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MACvC,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,IACzC;AAAA,EACF,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,OAAO;AACL,WAAO,YAAY,KAAK,cAAc,YAAY,IAAI;AAAA,EACxD;AACF;",
   "names": []
 }

package/dist/enums/AuditEntity.enum.d.ts

@@ -29,6 +29,7 @@ export declare enum AuditEntityAttribute {
     CLUSTER_MCP_ENABLED = "MCP Support",
     CLUSTER_SWAGGER = "Cluster Swagger",
     CLUSTER_BUSINESS_ID_UNIQUENESS = "Business ID Uniqueness",
+    CLUSTER_MULTI_TENANCY = "Multi-tenancy",
     CLUSTER_ENABLE_LOW_LATENCY = "Enable low latency",
     CLUSTER_AUTOUPDATE = "Auto Update",
     CLUSTER_OWNER = "Owner",

package/dist/enums/AuditEntity.enum.js

@@ -30,6 +30,7 @@ var AuditEntityAttribute = /* @__PURE__ */ ((AuditEntityAttribute2) => {
   AuditEntityAttribute2["CLUSTER_MCP_ENABLED"] = "MCP Support";
   AuditEntityAttribute2["CLUSTER_SWAGGER"] = "Cluster Swagger";
   AuditEntityAttribute2["CLUSTER_BUSINESS_ID_UNIQUENESS"] = "Business ID Uniqueness";
+  AuditEntityAttribute2["CLUSTER_MULTI_TENANCY"] = "Multi-tenancy";
   AuditEntityAttribute2["CLUSTER_ENABLE_LOW_LATENCY"] = "Enable low latency";
   AuditEntityAttribute2["CLUSTER_AUTOUPDATE"] = "Auto Update";
   AuditEntityAttribute2["CLUSTER_OWNER"] = "Owner";

package/dist/enums/AuditEntity.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/AuditEntity.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum AuditEntity {\n  CLUSTER = 'Cluster',\n  CLIENT = 'Client',\n  ALERT_SUBSCRIPTION = 'Alert Subscription',\n  API_CLIENT = 'API Client',\n  SECURE_CONNECTIVITY_CRD = 'Private networking',\n  BYOM_CLIENT = 'External Monitoring Client',\n  BYOM_CRD = 'External Monitoring',\n  INVITATION = 'Invitation',\n  MEMBER = 'Member',\n  ORGANIZATION = 'Organization',\n  SALES_PLAN = 'SalesPlan',\n  CLUSTER_PLAN = 'ClusterPlan',\n  GENERATION = 'Generation',\n  BILLING = 'Billing',\n  USAGE_ALERT = 'Usage Alert',\n  ACCEPT_BETA_TERMS = 'Accept Alpha terms',\n  TOGGLE_BETA_FEATURE = 'Toggle Alpha feature',\n  CONNECTOR_SECRET = 'Connector Secret',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n}\n\nexport enum AuditEntityAttribute {\n  CLUSTER_CLUSTER_PLAN = 'ClusterPlan',\n  CLUSTER_GENERATION = 'Generation',\n  CLUSTER_NAME = 'Name',\n  CLUSTER_RBA = 'Resource Based Authorizations',\n  CLUSTER_ENFORCE_GROUPS = 'Enforce Group Management',\n  CLUSTER_PLAYMODE = 'Cluster Play Mode',\n  CLUSTER_MCP_ENABLED = 'MCP Support',\n  CLUSTER_SWAGGER = 'Cluster Swagger',\n  CLUSTER_BUSINESS_ID_UNIQUENESS = 'Business ID Uniqueness',\n  CLUSTER_ENABLE_LOW_LATENCY = 'Enable low latency',\n  CLUSTER_AUTOUPDATE = 'Auto Update',\n  CLUSTER_OWNER = 'Owner',\n  CLUSTER_STATUS = 'Status',\n  CLUSTER_TASKLIST_V2_ENABLED = 'Taklist V2 Enabled',\n  CLUSTER_AUDIT_LOG = 'Audit Log',\n  INVITATION_ROLE = 'Role',\n  ORGANIZATION_NAME = 'Name',\n  SALES_PLAN = 'Plan',\n  BILLING_RESERVATION = 'Reservation',\n  BILLING_GENERAL_USERS = 'GeneralUsers', // paid cc legaly - only kept for audit logs compatibility\n  MEMBER_ROLE = 'Role',\n  USAGE_ALERT_THRESHOLD = 'Threshold',\n  USAGE_ALERT_STATUS = 'Status',\n  CLUSTER_AUDIT_LOGS = 'Audit Logging',\n  LLM_BUDGET = 'LLM Budget',\n  LLM_KEY_BLOCKED = 'LLM Key Blocked',\n  ORGANIZATION_LIMIT = 'Limit',\n  CLUSTER_MODIFICATION = 'Modification',\n  ORGANIZATION_TRIAL_EXPIRES_AT = 'Trial Expiration Date',\n}\n"],
-  "mappings": "AAOO,IAAK,cAAL,kBAAKA,iBAAL;AACL,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,wBAAqB;AACrB,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,6BAA0B;AAC1B,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,uBAAoB;AACpB,EAAAA,aAAA,yBAAsB;AACtB,EAAAA,aAAA,sBAAmB;AACnB,EAAAA,aAAA,0BAAuB;AAnBb,SAAAA;AAAA,GAAA;AAsBL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kBAAe;AACf,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,sBAAmB;AACnB,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,oCAAiC;AACjC,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,mBAAgB;AAChB,EAAAA,sBAAA,oBAAiB;AACjB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,mCAAgC;AA7BtB,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum AuditEntity {\n  CLUSTER = 'Cluster',\n  CLIENT = 'Client',\n  ALERT_SUBSCRIPTION = 'Alert Subscription',\n  API_CLIENT = 'API Client',\n  SECURE_CONNECTIVITY_CRD = 'Private networking',\n  BYOM_CLIENT = 'External Monitoring Client',\n  BYOM_CRD = 'External Monitoring',\n  INVITATION = 'Invitation',\n  MEMBER = 'Member',\n  ORGANIZATION = 'Organization',\n  SALES_PLAN = 'SalesPlan',\n  CLUSTER_PLAN = 'ClusterPlan',\n  GENERATION = 'Generation',\n  BILLING = 'Billing',\n  USAGE_ALERT = 'Usage Alert',\n  ACCEPT_BETA_TERMS = 'Accept Alpha terms',\n  TOGGLE_BETA_FEATURE = 'Toggle Alpha feature',\n  CONNECTOR_SECRET = 'Connector Secret',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n}\n\nexport enum AuditEntityAttribute {\n  CLUSTER_CLUSTER_PLAN = 'ClusterPlan',\n  CLUSTER_GENERATION = 'Generation',\n  CLUSTER_NAME = 'Name',\n  CLUSTER_RBA = 'Resource Based Authorizations',\n  CLUSTER_ENFORCE_GROUPS = 'Enforce Group Management',\n  CLUSTER_PLAYMODE = 'Cluster Play Mode',\n  CLUSTER_MCP_ENABLED = 'MCP Support',\n  CLUSTER_SWAGGER = 'Cluster Swagger',\n  CLUSTER_BUSINESS_ID_UNIQUENESS = 'Business ID Uniqueness',\n  CLUSTER_MULTI_TENANCY = 'Multi-tenancy',\n  CLUSTER_ENABLE_LOW_LATENCY = 'Enable low latency',\n  CLUSTER_AUTOUPDATE = 'Auto Update',\n  CLUSTER_OWNER = 'Owner',\n  CLUSTER_STATUS = 'Status',\n  CLUSTER_TASKLIST_V2_ENABLED = 'Taklist V2 Enabled',\n  CLUSTER_AUDIT_LOG = 'Audit Log',\n  INVITATION_ROLE = 'Role',\n  ORGANIZATION_NAME = 'Name',\n  SALES_PLAN = 'Plan',\n  BILLING_RESERVATION = 'Reservation',\n  BILLING_GENERAL_USERS = 'GeneralUsers', // paid cc legaly - only kept for audit logs compatibility\n  MEMBER_ROLE = 'Role',\n  USAGE_ALERT_THRESHOLD = 'Threshold',\n  USAGE_ALERT_STATUS = 'Status',\n  CLUSTER_AUDIT_LOGS = 'Audit Logging',\n  LLM_BUDGET = 'LLM Budget',\n  LLM_KEY_BLOCKED = 'LLM Key Blocked',\n  ORGANIZATION_LIMIT = 'Limit',\n  CLUSTER_MODIFICATION = 'Modification',\n  ORGANIZATION_TRIAL_EXPIRES_AT = 'Trial Expiration Date',\n}\n"],
+  "mappings": "AAOO,IAAK,cAAL,kBAAKA,iBAAL;AACL,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,wBAAqB;AACrB,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,6BAA0B;AAC1B,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,uBAAoB;AACpB,EAAAA,aAAA,yBAAsB;AACtB,EAAAA,aAAA,sBAAmB;AACnB,EAAAA,aAAA,0BAAuB;AAnBb,SAAAA;AAAA,GAAA;AAsBL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kBAAe;AACf,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,sBAAmB;AACnB,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,oCAAiC;AACjC,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,mBAAgB;AAChB,EAAAA,sBAAA,oBAAiB;AACjB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,mCAAgC;AA9BtB,SAAAA;AAAA,GAAA;",
   "names": ["AuditEntity", "AuditEntityAttribute"]
 }

package/dist/enums/ConsoleApiClientPermission.enum.d.ts

@@ -3,6 +3,7 @@ export declare enum ConsoleAPIClientPermission {
     DeleteCluster = "DeleteCluster",
     GetCluster = "GetCluster",
     UpdateCluster = "UpdateCluster",
+    UpdateClusterEncryption = "UpdateClusterEncryption",
     CreateZeebeClient = "CreateZeebeClient",
     DeleteZeebeClient = "DeleteZeebeClient",
     GetZeebeClient = "GetZeebeClient",
@@ -22,6 +23,8 @@ export declare enum ConsoleAPIClientPermission {
     GetHotBackups = "GetHotBackups",
     DeleteHotBackups = "DeleteHotBackups",
     CreateHotBackups = "CreateHotBackups",
+    RestoreHotBackup = "RestoreHotBackup",
+    GetHotBackupRestore = "GetHotBackupRestore",
     DownloadActivity = "DownloadActivity",
     GetByomClient = "GetByomClient",
     ActivateByom = "ActivateByom",

package/dist/enums/ConsoleApiClientPermission.enum.js

@@ -3,6 +3,7 @@ var ConsoleAPIClientPermission = /* @__PURE__ */ ((ConsoleAPIClientPermission2)
   ConsoleAPIClientPermission2["DeleteCluster"] = "DeleteCluster";
   ConsoleAPIClientPermission2["GetCluster"] = "GetCluster";
   ConsoleAPIClientPermission2["UpdateCluster"] = "UpdateCluster";
+  ConsoleAPIClientPermission2["UpdateClusterEncryption"] = "UpdateClusterEncryption";
   ConsoleAPIClientPermission2["CreateZeebeClient"] = "CreateZeebeClient";
   ConsoleAPIClientPermission2["DeleteZeebeClient"] = "DeleteZeebeClient";
   ConsoleAPIClientPermission2["GetZeebeClient"] = "GetZeebeClient";
@@ -22,6 +23,8 @@ var ConsoleAPIClientPermission = /* @__PURE__ */ ((ConsoleAPIClientPermission2)
   ConsoleAPIClientPermission2["GetHotBackups"] = "GetHotBackups";
   ConsoleAPIClientPermission2["DeleteHotBackups"] = "DeleteHotBackups";
   ConsoleAPIClientPermission2["CreateHotBackups"] = "CreateHotBackups";
+  ConsoleAPIClientPermission2["RestoreHotBackup"] = "RestoreHotBackup";
+  ConsoleAPIClientPermission2["GetHotBackupRestore"] = "GetHotBackupRestore";
   ConsoleAPIClientPermission2["DownloadActivity"] = "DownloadActivity";
   ConsoleAPIClientPermission2["GetByomClient"] = "GetByomClient";
   ConsoleAPIClientPermission2["ActivateByom"] = "ActivateByom";

package/dist/enums/ConsoleApiClientPermission.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/ConsoleApiClientPermission.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum ConsoleAPIClientPermission {\n  CreateCluster = 'CreateCluster',\n  DeleteCluster = 'DeleteCluster',\n  GetCluster = 'GetCluster',\n  UpdateCluster = 'UpdateCluster',\n  CreateZeebeClient = 'CreateZeebeClient',\n  DeleteZeebeClient = 'DeleteZeebeClient',\n  GetZeebeClient = 'GetZeebeClient',\n  CreateModel = 'CreateModel',\n  UpdateModel = 'UpdateModel',\n  DeleteModel = 'DeleteModel',\n  GetModel = 'GetModel',\n\n  GetWhitelists = 'GetWhitelists',\n  UpdateWhitelists = 'UpdateWhitelists',\n\n  GetSecrets = 'GetSecrets',\n  DeleteSecrets = 'DeleteSecrets',\n  CreateSecrets = 'CreateSecrets',\n  UpdateSecrets = 'UpdateSecrets',\n\n  GetMembers = 'GetMembers',\n  UpdateMembers = 'UpdateMembers',\n  DeleteMembers = 'DeleteMembers',\n  GetHotBackups = 'GetHotBackups',\n  DeleteHotBackups = 'DeleteHotBackups',\n  CreateHotBackups = 'CreateHotBackups',\n  DownloadActivity = 'DownloadActivity',\n  GetByomClient = 'GetByomClient',\n  ActivateByom = 'ActivateByom',\n  DeactivateByom = 'DeactivateByom',\n  CreateByomClient = 'CreateByomClient',\n  UpdateByomClient = 'UpdateByomClient',\n  DeleteByomClient = 'DeleteByomClient',\n  GetSecureConnectivity = 'GetSecureConnectivity',\n  ActivateSecureConnectivity = 'ActivateSecureConnectivity',\n  DeactivateSecureConnectivity = 'DeactivateSecureConnectivity',\n}\n"],
-  "mappings": "AAOO,IAAK,6BAAL,kBAAKA,gCAAL;AACL,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,cAAW;AAEX,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AAEnB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAEhB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,kBAAe;AACf,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,2BAAwB;AACxB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,kCAA+B;AApCrB,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum ConsoleAPIClientPermission {\n  CreateCluster = 'CreateCluster',\n  DeleteCluster = 'DeleteCluster',\n  GetCluster = 'GetCluster',\n  UpdateCluster = 'UpdateCluster',\n  UpdateClusterEncryption = 'UpdateClusterEncryption',\n  CreateZeebeClient = 'CreateZeebeClient',\n  DeleteZeebeClient = 'DeleteZeebeClient',\n  GetZeebeClient = 'GetZeebeClient',\n  CreateModel = 'CreateModel',\n  UpdateModel = 'UpdateModel',\n  DeleteModel = 'DeleteModel',\n  GetModel = 'GetModel',\n\n  GetWhitelists = 'GetWhitelists',\n  UpdateWhitelists = 'UpdateWhitelists',\n\n  GetSecrets = 'GetSecrets',\n  DeleteSecrets = 'DeleteSecrets',\n  CreateSecrets = 'CreateSecrets',\n  UpdateSecrets = 'UpdateSecrets',\n\n  GetMembers = 'GetMembers',\n  UpdateMembers = 'UpdateMembers',\n  DeleteMembers = 'DeleteMembers',\n  GetHotBackups = 'GetHotBackups',\n  DeleteHotBackups = 'DeleteHotBackups',\n  CreateHotBackups = 'CreateHotBackups',\n  RestoreHotBackup = 'RestoreHotBackup',\n  GetHotBackupRestore = 'GetHotBackupRestore',\n  DownloadActivity = 'DownloadActivity',\n  GetByomClient = 'GetByomClient',\n  ActivateByom = 'ActivateByom',\n  DeactivateByom = 'DeactivateByom',\n  CreateByomClient = 'CreateByomClient',\n  UpdateByomClient = 'UpdateByomClient',\n  DeleteByomClient = 'DeleteByomClient',\n  GetSecureConnectivity = 'GetSecureConnectivity',\n  ActivateSecureConnectivity = 'ActivateSecureConnectivity',\n  DeactivateSecureConnectivity = 'DeactivateSecureConnectivity',\n}\n"],
+  "mappings": "AAOO,IAAK,6BAAL,kBAAKA,gCAAL;AACL,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,cAAW;AAEX,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AAEnB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAEhB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,kBAAe;AACf,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,2BAAwB;AACxB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,kCAA+B;AAvCrB,SAAAA;AAAA,GAAA;",
   "names": ["ConsoleAPIClientPermission"]
 }

package/dist/index.d.ts

@@ -17,7 +17,7 @@ export type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js';
 export type { CommonClusterDto } from './dtos/CommonCluster.dto.js';
 export type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js';
 export type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js';
-export { type GenerationDto, type GenerationWithClusterCountDto, sortGenerationBySemverOfZeebe, } from './dtos/Generations.dto.js';
+export { type GenerationDto, type GenerationWithClusterCountDto, sortGenerationBySemverOfZeebe, type UpgradableGenerationsDto, } from './dtos/Generations.dto.js';
 export type { Hdp } from './dtos/Hdp.dto.js';
 export type { K8sConfig, K8sConfigLegacyFormat, K8sContext, K8sContextDto, } from './dtos/K8sContext.dto.js';
 export type { MetaDto } from './dtos/Meta.dto.js';
@@ -79,7 +79,7 @@ export { ConsoleSM } from './types/ConsoleSelfManaged.type.js';
 export type { ConsoleSMAdminApi } from './types/ConsoleSelfManagedAdminApi.type.js';
 export type { DashboardConfig, DashboardMappingItem, DashboardMappingTarget, DashboardResultPrimitive, DashboardResultRow, EngineeringOperationsDashboardResponse, } from './types/Dashboard.types.js';
 export type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js';
-export type { AlertSubscription as HdpAlertSubscription, Audit as HdpAudit, Channel as HdpChannel, Cluster as HdpCluster, ClusterBackup as HdpClusterBackup, ClusterBackupSchedule as HdpClusterBackupSchedule, ClusterBulkOperation as HdpClusterBulkOperation, ClusterClient as HdpClusterClient, ClusterModification as HdpClusterModification, ClusterPlan as HdpClusterPlan, ClusterPlanType as HdpClusterPlanType, ConnectorSecret as HdpConnectorSecret, ConsoleApiClient as HdpConsoleApiClient, Datacenter as HdpDatacenter, Generation as HdpGeneration, HdpBackendChangeEvent, HdpClusterModificationConfig, HdpEntity, HdpPrometheusDataCapacityDataPoint, Invite as HdpInvite, LlmSpend as HdpLlmSpend, Organization as HdpOrganization, TelemetryData as HdpTelemetryData, UsageAlert as HdpUsageAlert, User as HdpUser, UserLogin as HdpUserLogin, } from './types/hdp.types.js';
+export type { AlertSubscription as HdpAlertSubscription, Audit as HdpAudit, ByomClient as HdpByomClient, Channel as HdpChannel, Cluster as HdpCluster, ClusterBackup as HdpClusterBackup, ClusterBackupSchedule as HdpClusterBackupSchedule, ClusterBulkOperation as HdpClusterBulkOperation, ClusterClient as HdpClusterClient, ClusterModification as HdpClusterModification, ClusterPlan as HdpClusterPlan, ClusterPlanType as HdpClusterPlanType, ConnectorSecret as HdpConnectorSecret, ConsoleApiClient as HdpConsoleApiClient, Datacenter as HdpDatacenter, Generation as HdpGeneration, HdpBackendChangeEvent, HdpClusterModificationConfig, HdpEntity, HdpPrometheusDataCapacityDataPoint, Invite as HdpInvite, LlmSpend as HdpLlmSpend, Organization as HdpOrganization, SecureConnectivity as HdpSecureConnectivity, TelemetryData as HdpTelemetryData, UsageAlert as HdpUsageAlert, User as HdpUser, UserLogin as HdpUserLogin, } from './types/hdp.types.js';
 export { AlertSubscriptionReportType as HdpAlertSubscriptionReportType, AlertSubscriptionType as HdpAlertSubscriptionType, } from './types/hdp.types.js';
 export type { GlobalNotification, NotificationDto, NotificationMeta, NotificationOptions, NotificationPermission, NotificationSource, NotificationState, NotificationType, OrgNotification, UserNotification, UserOrgNotification, } from './types/notification.type.js';
 export { NotificationPermissionValues, NotificationSourceEnum, NotificationStateEnum, NotificationTypeEnum, } from './types/notification.type.js';
@@ -88,7 +88,7 @@ export { OrganizationPermissionsDescriptions, PermissionsForOrganizationRole, }
 export type { AccountRoles, ConsoleRoles, ModelerRoles, Roles, } from './types/Roles.js';
 export { SAFE_ROLES } from './types/Roles.js';
 export type { DisplayedSalesPlan, RevisitedSalesPlanName, } from './types/SalesPlanType.type.js';
-export { AnalyticsSalesPlanType, getAnalyticsSalesPlanFromOrgSalesPlan, getDisplayedSalesPlan, getRevisitedSalesPlanName, SalesPlanType, } from './types/SalesPlanType.type.js';
+export { AnalyticsSalesPlanType, getAnalyticsSalesPlanFromOrgSalesPlan, getDisplayedSalesPlan, getRevisitedSalesPlanName, OPTIMIZE_DISABLED_PLAN_TYPES, SalesPlanType, } from './types/SalesPlanType.type.js';
 export type { SpamDetectionPatterns } from './types/SpamDetection.type.js';
 export { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js';
 export type { AlertSubscriptionSseEvent, BackupSseEvent, ClusterClientSseEvent, ClusterSseEvent, ConnectorSecretsSseEvent, ConsoleApiClientSseEvent, ConsoleSseEvent, MonitoringSseEvent, SecureConnectivitySseEvent, SseClusterPayload, SseMonitoringPayload, SseSecureConnectivityPayload, } from './types/SseEvent.type.js';
@@ -102,8 +102,12 @@ export type { AccountsData, AppMetadata, BasicUser, BlockedFor, Identity, OrgMem
 export { UserMetadataEvent } from './types/User.type.js';
 export type { UniqueTaskUser, ValueMetrics, ValueMetricsPerYearMonth, } from './types/ValueMetrics.type.js';
 export { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js';
+export { deriveEncryptionStatus, type EncryptionStatus, isEncryptionStatus, } from './utils/encryptionStatus.utils.js';
 export type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js';
 export { enterpriseConnectionMetadataToOrganizationAssignments, organizationAssignmentsToEnterpriseConnectionMetadata, } from './utils/enterprise-connection.utils.js';
+export type { EnvVarEntry } from './utils/envVars.js';
+export { parseEnvVars, serializeEnvVars } from './utils/envVars.js';
+export { KMS_ARN, KMS_MRK_ARN, type KmsArnValidationError, type ParsedKmsArn, parseKmsArn, validateKmsArnForRegion, } from './utils/kmsArn.utils.js';
 export { validateLabels } from './utils/labelValidator.utils.js';
 export { ObjectMergeUtils } from './utils/objectMerge.utils.js';
 export { getPermissionsByRoles, getUserPermissionsForOrg, } from './utils/orgs/OrgHelper.js';

package/dist/index.js

@@ -149,6 +149,7 @@ import {
   getAnalyticsSalesPlanFromOrgSalesPlan,
   getDisplayedSalesPlan,
   getRevisitedSalesPlanName,
+  OPTIMIZE_DISABLED_PLAN_TYPES,
   SalesPlanType
 } from "./types/SalesPlanType.type.js";
 import { TEERGRUBE_PATTERNS } from "./types/SpamDetection.type.js";
@@ -157,10 +158,21 @@ import { getSuspendStrategy } from "./types/SuspendStrategy.type.js";
 import { Telemetry } from "./types/Telemetry.type.js";
 import { UserMetadataEvent } from "./types/User.type.js";
 import { ConsoleSelfManagedUtils } from "./utils/console-sm.utils.js";
+import {
+  deriveEncryptionStatus,
+  isEncryptionStatus
+} from "./utils/encryptionStatus.utils.js";
 import {
   enterpriseConnectionMetadataToOrganizationAssignments,
   organizationAssignmentsToEnterpriseConnectionMetadata
 } from "./utils/enterprise-connection.utils.js";
+import { parseEnvVars, serializeEnvVars } from "./utils/envVars.js";
+import {
+  KMS_ARN,
+  KMS_MRK_ARN,
+  parseKmsArn,
+  validateKmsArnForRegion
+} from "./utils/kmsArn.utils.js";
 import { validateLabels } from "./utils/labelValidator.utils.js";
 import { ObjectMergeUtils } from "./utils/objectMerge.utils.js";
 import {
@@ -247,6 +259,8 @@ export {
   AlertSubscriptionType2 as HdpAlertSubscriptionType,
   INTERNAL_LOW_HARDWARE_PLAN_NAME,
   ImmutableThings,
+  KMS_ARN,
+  KMS_MRK_ARN,
   LICENSING_MODEL_DISPLAY_NAMES,
   MAX_CLUSTER_CLIENTS_DEFAULT,
   MAX_CLUSTER_CLIENTS_DEV,
@@ -261,6 +275,7 @@ export {
   NotificationSourceEnum,
   NotificationStateEnum,
   NotificationTypeEnum,
+  OPTIMIZE_DISABLED_PLAN_TYPES,
   ObjectMergeUtils,
   OrganizationPermissionsDescriptions,
   OrganizationRole,
@@ -309,6 +324,7 @@ export {
   checkVersion,
   consoleUserFeaturesFromPermissions,
   deprecatedLimit,
+  deriveEncryptionStatus,
   enterpriseConnectionMetadataToOrganizationAssignments,
   expandRolesToPermissions,
   extractCamundaUserEmail,
@@ -333,6 +349,7 @@ export {
   isBulkClusterPlanUpdateItem,
   isCamundaUserId,
   isClusterTagEligibleForSleepCron,
+  isEncryptionStatus,
   isIsBulkClusterGenerationUpdateIten,
   isManager,
   isPre89AffectedPath,
@@ -345,12 +362,16 @@ export {
   isValidHostname,
   isValidPrivateLinkRegion,
   organizationAssignmentsToEnterpriseConnectionMetadata,
+  parseEnvVars,
+  parseKmsArn,
   passwordPolicyCheck,
+  serializeEnvVars,
   sortByAvailabilityClasses,
   sortByClusterPlanTypeCategory,
   sortGenerationBySemverOfZeebe,
   unusedClusterBasedLimits,
   unusedSalesPlanLimits,
+  validateKmsArnForRegion,
   validateLabels
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/index.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Constants (runtime values)\n// ============================================================================\n\nexport { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js'\nexport type { Stage } from './constants/misc.const.js'\nexport {\n  CONSOLE_API_USER_ID,\n  FIRSTNAME_LASTNAME_MAX_LENGTH,\n  HOTBACKUP_MIN_CREATE_PERIOD,\n  MAX_HARDWARE_PACKAGE_COUNT,\n  MAX_LENGTH_CLUSTER_NAME,\n  MINIMUM_EYEPAIRS,\n  NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,\n  SECRETS_MAX_LENGTH,\n  SENTRY,\n  STARTING_PRICE_PER_MONTH_IN_EURO,\n  TEMPORARY_CLUSTER_NAME,\n} from './constants/misc.const.js'\n\nexport {\n  getGatewayPropertyHint,\n  getGatewayPropertyPath,\n  isAffectedByStreamlinedDeployment,\n  isPre89AffectedPath,\n  PRE89_AFFECTED_PATHS,\n  PRE89_AFFECTED_PROPERTY_PREFIXES,\n  PRE89_GATEWAY_PROPERTY_PATHS,\n  PRE89_GATEWAY_RESOURCE_PREFIXES,\n} from './constants/pre89EnvVarMapping.const.js'\n\nexport { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js'\nexport { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js'\n\n// ============================================================================\n// DTOs - Types (interfaces and type aliases)\n// ============================================================================\n\nexport type {\n  ALERT_SUBSCRIPTION_REPORT_TYPES,\n  ALERT_SUBSCRIPTION_TYPES,\n  AlertSubscriptionDto,\n  AlertSubscriptionEntryDto,\n  AlertSubscriptionWebhookAuth,\n  CheckFailedReason,\n} from './dtos/AlertSubscription.dto.js'\n\n// DTOs - Values (constants)\nexport {\n  FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,\n  HMAC_HEADER_POSITION,\n  HMAC_SUPPORTED_ALGORITHM,\n} from './dtos/AlertSubscription.dto.js'\n\nexport type { AuditDto } from './dtos/Audit.dto.js'\nexport type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js'\nexport type { BackupDto } from './dtos/Backup.dto.js'\nexport type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js'\nexport type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js'\nexport type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js'\nexport type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js'\nexport type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js'\nexport type { CommonClusterDto } from './dtos/CommonCluster.dto.js'\nexport type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js'\nexport type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js'\n// Functions\nexport {\n  type GenerationDto,\n  type GenerationWithClusterCountDto,\n  sortGenerationBySemverOfZeebe,\n} from './dtos/Generations.dto.js'\n// Namespace (type-only - contains only interfaces)\nexport type { Hdp } from './dtos/Hdp.dto.js'\nexport type {\n  K8sConfig,\n  K8sConfigLegacyFormat,\n  K8sContext,\n  K8sContextDto,\n} from './dtos/K8sContext.dto.js'\nexport type { MetaDto } from './dtos/Meta.dto.js'\nexport type {\n  AutoJoinAssignment,\n  LicensingModelType,\n  OrganizationDto,\n  OrganizationMetadata,\n  OrgOwner,\n  OrgWithNameAndSalesPlan,\n} from './dtos/Organization.dto.js'\nexport {\n  LICENSING_MODEL_DISPLAY_NAMES,\n  VALID_LICENSING_MODELS,\n} from './dtos/Organization.dto.js'\nexport type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js'\nexport type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js'\nexport type { RestoreDto, RestoreState } from './dtos/Restore.dto.js'\n// SalesPlan.dto - Types\nexport type {\n  ClusterLimits,\n  ConsumptionDataItem,\n  Limits,\n  SalesPlanDto,\n  SalesPlanMetadata,\n} from './dtos/SalesPlan.dto.js'\n// SalesPlan.dto - Values (constants and functions)\nexport {\n  allClusterBasedLimits,\n  allSalesPlanLimits,\n  deprecatedLimit,\n  MAX_CLUSTER_CLIENTS_DEFAULT,\n  MAX_CLUSTER_CLIENTS_DEV,\n  RETENTION_LIMIT_DEFAULT,\n  RETENTION_LIMIT_MAXIMUM,\n  RETENTION_LIMIT_MINIMUM,\n  unusedClusterBasedLimits,\n  unusedSalesPlanLimits,\n} from './dtos/SalesPlan.dto.js'\nexport type { SecureConnectivityDto } from './dtos/SecureConnectivity.dto.js'\nexport type { SignupDto } from './dtos/Signup.dto.js'\n\n// UsageAlert.dto - Types\nexport type { UsageAlertDto } from './dtos/UsageAlert.dto.js'\n\n// UsageAlert.dto - Values (enum and constants)\nexport {\n  UsageAlertInitValues,\n  UsageAlertMetric,\n  UsageAlertThresholdLimits,\n} from './dtos/UsageAlert.dto.js'\n\nexport type { UserMetaDataDto } from './dtos/UserMetaData.dto.js'\n\n// ============================================================================\n// Enums (runtime values)\n// ============================================================================\n\nexport {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from './enums/AlertSubscription.enum.js'\nexport { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js'\nexport { AuditService } from './enums/AuditService.enum.js'\nexport { BackupStatus } from './enums/BackupStatus.enum.js'\nexport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from './enums/ClusterBulkOperation.enum.js'\nexport { ClusterClientPermission } from './enums/ClusterClientPermissions.enum.js'\nexport { ClusterEncryptionKey } from './enums/ClusterEncryptionKey.enum.js'\nexport { ClusterStatus } from './enums/ClusterStatus.enum.js'\nexport { ConsoleAPIClientPermission } from './enums/ConsoleApiClientPermission.enum.js'\nexport { ErrorType } from './enums/ErrorType.enum.js'\nexport type {\n  AssignableOrganizationRoleType,\n  OrganizationRoleType,\n  UnassignableOrganizationRoleType,\n} from './enums/OrganizationRole.enum.js'\nexport {\n  AssignableOrganizationRole,\n  OrganizationRole,\n  UnassignableOrganizationRole,\n} from './enums/OrganizationRole.enum.js'\nexport { SseEntity, SseType } from './enums/Sse.enum.js'\n\n// ============================================================================\n// Permissions - Namespaces (runtime values)\n// ============================================================================\n\nexport { AccountsPermissions } from './permissions/accounts.permissions.js'\nexport { AlertDistributorPermissions } from './permissions/alert-distributor.permissions.js'\nexport { AuditLoggerPermissions } from './permissions/auditlogger.permissions.js'\nexport {\n  accountsUserFeaturesFromPermissions,\n  consoleUserFeaturesFromPermissions,\n} from './permissions/combo.js'\nexport { ConsolePermissions } from './permissions/console.permissions.js'\nexport { NotificationPermissions } from './permissions/notification.permissions.js'\n// profile.permissions - Types\nexport type { OnboardConfig } from './permissions/profile.permissions.js'\n// profile.permissions - Values (constants)\nexport {\n  C8_ENGINEERING_MANAGERS_EMAILS,\n  CLOUD_TEAM_EMAILS,\n  CONSULTING_MANAGER_EMAILS,\n  CSM_MANAGER_EMAIL,\n  PLATFORM_SM_EMAILS,\n  PROFILES,\n  SRE_TEAM_EMAILS,\n  SUPPORT_MANAGERS_EMAILS,\n} from './permissions/profile.permissions.js'\nexport { expandRolesToPermissions } from './permissions/roleExpansion.utils.js'\n\n// ============================================================================\n// Types - Type-only exports (interfaces and type aliases)\n// ============================================================================\n\nexport type { AuditData } from './types/AuditData.type.js'\n// AutoSleep.type - Types\nexport type {\n  ActivitySleepEligibilityOptions,\n  SleepCronEligibilityOptions,\n} from './types/AutoSleep.type.js'\n// AutoSleep.type - Values (constants and functions)\nexport {\n  INTERNAL_LOW_HARDWARE_PLAN_NAME,\n  isActivitySleepEligible,\n  isClusterTagEligibleForSleepCron,\n  isSalesPlanEligibleForSleepCron,\n  isSleepCronEligible,\n  SLEEP_CRON_ELIGIBLE_TAGS,\n} from './types/AutoSleep.type.js'\nexport type {\n  BotContext,\n  BotOptions,\n  BotRequest,\n  GetUserDetailsResponse,\n  ListRolesForUserResponse,\n  UpdateUserRolesRequest,\n  UpdateUserRolesResponse,\n  UserContext,\n  UserDetails,\n} from './types/Bot.types.js'\n// BulkOperation.type - Types\nexport type {\n  BulkClusterDeletionContent,\n  BulkClusterDeletionItem,\n  BulkClusterGenerationUpdateItem,\n  BulkClusterPlanTypeUpdateContent,\n  BulkClusterPlanTypeUpdateItem,\n  BulkClusterPlanUpdateContent,\n  BulkClusterPlanUpdateItem,\n  BulkGenerationUpdateContent,\n  GenericBulkClusterOperationContent,\n  GenericBulkOperationContent,\n  GenericClusterBulkOperationItem,\n} from './types/BulkOperation.type.js'\n// BulkOperation.type - Functions (type guards)\nexport {\n  isBulkClusterDeletionItem,\n  isBulkClusterPlanTypeUpdateItem,\n  isBulkClusterPlanUpdateItem,\n  isIsBulkClusterGenerationUpdateIten,\n} from './types/BulkOperation.type.js'\n// C8ClusterComponentVersions.type - Types\nexport type {\n  ImmutableZeebeClusterVersionsDto,\n  MutableZeebeClusterVersionsDto,\n  ZeebeClusterVersionsDto,\n} from './types/C8ClusterComponentVersions.type.js'\n// C8ClusterComponentVersions.type - Values (constants)\nexport {\n  AllThings,\n  ImmutableThings,\n  MutableThings,\n} from './types/C8ClusterComponentVersions.type.js'\n// CamundaClusterLabels.type - Types\nexport type {\n  CamundaClusterStage,\n  CamundaClusterStageLabel,\n  ClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// CamundaClusterLabels.type - Values (constants)\nexport {\n  ALLOWED_CAMUNDA_LABELS,\n  StageClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// Chargebee.type - Types\nexport type { SubscriptionItem } from './types/Chargebee.type.js'\n// Chargebee.type - Values (enums)\nexport { ConsumptionData, ConsumptionDataType } from './types/Chargebee.type.js'\n// ClusterBulkOperation.type - Types\nexport type {\n  ClusterBulkOperationAck,\n  ClusterBulkOperationClusterDto,\n  ClusterBulkOperationContent,\n  ClusterBulkOperationDto,\n  ClusterBulkOperationGenerationUpdateParameter,\n  ClusterBulkOperationParameter,\n  ClusterBulkOperationPlanTypeUpdateParameter,\n  ClusterBulkOperationPlanUpdateParameter,\n  ClusterBulkOperationPostContent,\n  ClusterSleepWakeupParameter,\n} from './types/ClusterBulkOperation.type.js'\nexport type {\n  ClusterModificationConfigDto,\n  ClusterModificationDto,\n} from './types/ClusterModification.type.js'\nexport type {\n  ClusterPlanModificationAck,\n  ClusterPlanModificationConfig,\n  ClusterPlanModificationDto,\n} from './types/ClusterPlanModification.type.js'\n// ClusterPlanTypeAvailabilityClass.type - Values (enum and function)\nexport {\n  ClusterPlanTypeAvailabilityClass,\n  sortByAvailabilityClasses,\n} from './types/ClusterPlanTypeAvailabilityClass.type.js'\n// ClusterPlanTypeCategory.type - Values (enum and functions)\nexport {\n  ClusterPlanTypeCategory,\n  hasAvailabilityClass,\n  sortByClusterPlanTypeCategory,\n} from './types/ClusterPlanTypeCategory.type.js'\nexport type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js'\nexport type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js'\nexport type {\n  ClusterUsageDataRequest,\n  ClusterUsageMetricsAddRequestByMetricHeap,\n  ClusterUsageMetricsData,\n  ClusterUsageMetricsFilter,\n  ClusterUsageOrgStartDate,\n} from './types/ClusterUsageMetrics.type.js'\n// Namespace with runtime values (consts, functions, enums)\nexport { ConsoleSM } from './types/ConsoleSelfManaged.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { ConsoleSMAdminApi } from './types/ConsoleSelfManagedAdminApi.type.js'\n// Dashboard.types - Types\nexport type {\n  DashboardConfig,\n  DashboardMappingItem,\n  DashboardMappingTarget,\n  DashboardResultPrimitive,\n  DashboardResultRow,\n  EngineeringOperationsDashboardResponse,\n} from './types/Dashboard.types.js'\nexport type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js'\n// hdp.types - Types (interfaces)\nexport type {\n  AlertSubscription as HdpAlertSubscription,\n  Audit as HdpAudit,\n  Channel as HdpChannel,\n  Cluster as HdpCluster,\n  ClusterBackup as HdpClusterBackup,\n  ClusterBackupSchedule as HdpClusterBackupSchedule,\n  ClusterBulkOperation as HdpClusterBulkOperation,\n  ClusterClient as HdpClusterClient,\n  ClusterModification as HdpClusterModification,\n  ClusterPlan as HdpClusterPlan,\n  ClusterPlanType as HdpClusterPlanType,\n  ConnectorSecret as HdpConnectorSecret,\n  ConsoleApiClient as HdpConsoleApiClient,\n  Datacenter as HdpDatacenter,\n  Generation as HdpGeneration,\n  HdpBackendChangeEvent,\n  HdpClusterModificationConfig,\n  HdpEntity,\n  HdpPrometheusDataCapacityDataPoint,\n  Invite as HdpInvite,\n  LlmSpend as HdpLlmSpend,\n  Organization as HdpOrganization,\n  TelemetryData as HdpTelemetryData,\n  UsageAlert as HdpUsageAlert,\n  User as HdpUser,\n  UserLogin as HdpUserLogin,\n} from './types/hdp.types.js'\n// hdp.types - Values (enums)\nexport {\n  AlertSubscriptionReportType as HdpAlertSubscriptionReportType,\n  AlertSubscriptionType as HdpAlertSubscriptionType,\n} from './types/hdp.types.js'\n// notification.type - Types\nexport type {\n  GlobalNotification,\n  NotificationDto,\n  NotificationMeta,\n  NotificationOptions,\n  NotificationPermission,\n  NotificationSource,\n  NotificationState,\n  NotificationType,\n  OrgNotification,\n  UserNotification,\n  UserOrgNotification,\n} from './types/notification.type.js'\n// notification.type - Values (enums and constants)\nexport {\n  NotificationPermissionValues,\n  NotificationSourceEnum,\n  NotificationStateEnum,\n  NotificationTypeEnum,\n} from './types/notification.type.js'\n// OrganizationPermission.type - Types\nexport type {\n  CreateReadUpdateDelete,\n  OrganizationPermissions,\n} from './types/OrganizationPermission.type.js'\n// OrganizationPermission.type - Values (constants)\nexport {\n  OrganizationPermissionsDescriptions,\n  PermissionsForOrganizationRole,\n} from './types/OrganizationPermission.type.js'\n// Roles.js - Types\nexport type {\n  AccountRoles,\n  ConsoleRoles,\n  ModelerRoles,\n  Roles,\n} from './types/Roles.js'\n// Roles.js - Values (constants)\nexport { SAFE_ROLES } from './types/Roles.js'\n// SalesPlanType.type - Types\nexport type {\n  DisplayedSalesPlan,\n  RevisitedSalesPlanName,\n} from './types/SalesPlanType.type.js'\n// SalesPlanType.type - Values (enums and functions)\nexport {\n  AnalyticsSalesPlanType,\n  getAnalyticsSalesPlanFromOrgSalesPlan,\n  getDisplayedSalesPlan,\n  getRevisitedSalesPlanName,\n  SalesPlanType,\n} from './types/SalesPlanType.type.js'\n// SpamDetection.type - Types\nexport type { SpamDetectionPatterns } from './types/SpamDetection.type.js'\n// SpamDetection.type - Values (constants)\nexport { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js'\nexport type {\n  AlertSubscriptionSseEvent,\n  BackupSseEvent,\n  ClusterClientSseEvent,\n  ClusterSseEvent,\n  ConnectorSecretsSseEvent,\n  ConsoleApiClientSseEvent,\n  ConsoleSseEvent,\n  MonitoringSseEvent,\n  SecureConnectivitySseEvent,\n  SseClusterPayload,\n  SseMonitoringPayload,\n  SseSecureConnectivityPayload,\n} from './types/SseEvent.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { AccountsStats } from './types/Stats.types.js'\n// Survey.type - Types\nexport type { Persona, SurveyDto } from './types/Survey.type.js'\n// Survey.type - Values (enum)\nexport { FeedbackType } from './types/Survey.type.js'\n// SuspendStrategy.type - Types\nexport type {\n  GetSuspendStrategyOptions,\n  SuspendStrategy,\n} from './types/SuspendStrategy.type.js'\n// SuspendStrategy.type - Values (function)\nexport { getSuspendStrategy } from './types/SuspendStrategy.type.js'\n\n// Namespace (runtime value)\nexport { Telemetry } from './types/Telemetry.type.js'\n\n// User.type - Types\nexport type {\n  AccountsData,\n  AppMetadata,\n  BasicUser,\n  BlockedFor,\n  Identity,\n  OrgMembership,\n  User,\n  UserMetadata,\n  UserRequest,\n} from './types/User.type.js'\n\n// User.type - Values (enum)\nexport { UserMetadataEvent } from './types/User.type.js'\n\nexport type {\n  UniqueTaskUser,\n  ValueMetrics,\n  ValueMetricsPerYearMonth,\n} from './types/ValueMetrics.type.js'\n\n// ============================================================================\n// Utils - Classes (runtime values)\n// ============================================================================\n\nexport { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js'\n\n// enterprise-connection.utils - Types\nexport type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js'\n\n// enterprise-connection.utils - Values (functions)\nexport {\n  enterpriseConnectionMetadataToOrganizationAssignments,\n  organizationAssignmentsToEnterpriseConnectionMetadata,\n} from './utils/enterprise-connection.utils.js'\n\nexport { validateLabels } from './utils/labelValidator.utils.js'\nexport { ObjectMergeUtils } from './utils/objectMerge.utils.js'\nexport {\n  getPermissionsByRoles,\n  getUserPermissionsForOrg,\n} from './utils/orgs/OrgHelper.js'\n\n// PasswordPolicy - Types\nexport type {\n  PasswordPolicyRequest,\n  PasswordPolicyResult,\n} from './utils/PasswordPolicy.js'\n\n// PasswordPolicy - Values (constants and function)\nexport {\n  MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,\n  MINLENGTH as PASSWORD_POLICY_MINLENGTH,\n  passwordPolicyCheck,\n} from './utils/PasswordPolicy.js'\n\nexport {\n  allSettledResultsCounts,\n  getFulfilledPromises,\n  getRejectedPromises,\n  getSettledSummary,\n} from './utils/settledPromises.util.js'\n\nexport {\n  isValidAwsArn,\n  isValidCIDR,\n  isValidCIDRList,\n  isValidClientName,\n  isValidHostname,\n  isValidPrivateLinkRegion,\n} from './utils/string-validation.utils.js'\nexport {\n  extractCamundaUserEmail,\n  guessName,\n  isCamundaUserId,\n} from './utils/user.utils.js'\n\n// versionCheck.utils - Values (enum and function)\nexport {\n  checkVersion,\n  VersionCheckOperator,\n} from './utils/versionCheck.utils.js'\n\n// ============================================================================\n// Config - Configuration files and types\n// ============================================================================\n\nexport { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js'\nexport type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js'\n\nexport {\n  augmentCamundiPermissions,\n  getApplicableRolesForEmployee,\n  isManager,\n} from './utils/camundiPermissionAugmenter.utils.js'\n"],
-  "mappings": "AAUA,SAAS,KAAK,MAAM,QAAQ,QAAQ,YAAY;AAEhD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,4BAA4B;AACrC,SAAS,iDAAiD;AAgB1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP;AAAA,EAGE;AAAA,OACK;AAkBP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAaP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,4BAA4B;AAClD,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC;AAC3C,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,eAAe;AAMnC,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AAC5C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAIxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AAazC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,SAAS,iBAAiB,2BAA2B;AAwBrD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,SAAS,iBAAiB;AA2C1B;AAAA,EACiC,+BAA/BA;AAAA,EACyB,yBAAzBC;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB;AAO3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,0BAA0B;AAoBnC,SAAS,oBAAoB;AAO7B,SAAS,0BAA0B;AAGnC,SAAS,iBAAiB;AAgB1B,SAAS,yBAAyB;AAYlC,SAAS,+BAA+B;AAMxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACe;AAAA,EACA;AAAA,EACb;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAoB,WAAXC,gBAA2C;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Constants (runtime values)\n// ============================================================================\n\nexport { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js'\nexport type { Stage } from './constants/misc.const.js'\nexport {\n  CONSOLE_API_USER_ID,\n  FIRSTNAME_LASTNAME_MAX_LENGTH,\n  HOTBACKUP_MIN_CREATE_PERIOD,\n  MAX_HARDWARE_PACKAGE_COUNT,\n  MAX_LENGTH_CLUSTER_NAME,\n  MINIMUM_EYEPAIRS,\n  NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,\n  SECRETS_MAX_LENGTH,\n  SENTRY,\n  STARTING_PRICE_PER_MONTH_IN_EURO,\n  TEMPORARY_CLUSTER_NAME,\n} from './constants/misc.const.js'\n\nexport {\n  getGatewayPropertyHint,\n  getGatewayPropertyPath,\n  isAffectedByStreamlinedDeployment,\n  isPre89AffectedPath,\n  PRE89_AFFECTED_PATHS,\n  PRE89_AFFECTED_PROPERTY_PREFIXES,\n  PRE89_GATEWAY_PROPERTY_PATHS,\n  PRE89_GATEWAY_RESOURCE_PREFIXES,\n} from './constants/pre89EnvVarMapping.const.js'\n\nexport { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js'\nexport { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js'\n\n// ============================================================================\n// DTOs - Types (interfaces and type aliases)\n// ============================================================================\n\nexport type {\n  ALERT_SUBSCRIPTION_REPORT_TYPES,\n  ALERT_SUBSCRIPTION_TYPES,\n  AlertSubscriptionDto,\n  AlertSubscriptionEntryDto,\n  AlertSubscriptionWebhookAuth,\n  CheckFailedReason,\n} from './dtos/AlertSubscription.dto.js'\n\n// DTOs - Values (constants)\nexport {\n  FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,\n  HMAC_HEADER_POSITION,\n  HMAC_SUPPORTED_ALGORITHM,\n} from './dtos/AlertSubscription.dto.js'\n\nexport type { AuditDto } from './dtos/Audit.dto.js'\nexport type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js'\nexport type { BackupDto } from './dtos/Backup.dto.js'\nexport type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js'\nexport type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js'\nexport type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js'\nexport type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js'\nexport type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js'\nexport type { CommonClusterDto } from './dtos/CommonCluster.dto.js'\nexport type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js'\nexport type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js'\n// Functions\nexport {\n  type GenerationDto,\n  type GenerationWithClusterCountDto,\n  sortGenerationBySemverOfZeebe,\n  type UpgradableGenerationsDto,\n} from './dtos/Generations.dto.js'\n// Namespace (type-only - contains only interfaces)\nexport type { Hdp } from './dtos/Hdp.dto.js'\nexport type {\n  K8sConfig,\n  K8sConfigLegacyFormat,\n  K8sContext,\n  K8sContextDto,\n} from './dtos/K8sContext.dto.js'\nexport type { MetaDto } from './dtos/Meta.dto.js'\nexport type {\n  AutoJoinAssignment,\n  LicensingModelType,\n  OrganizationDto,\n  OrganizationMetadata,\n  OrgOwner,\n  OrgWithNameAndSalesPlan,\n} from './dtos/Organization.dto.js'\nexport {\n  LICENSING_MODEL_DISPLAY_NAMES,\n  VALID_LICENSING_MODELS,\n} from './dtos/Organization.dto.js'\nexport type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js'\nexport type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js'\nexport type { RestoreDto, RestoreState } from './dtos/Restore.dto.js'\n// SalesPlan.dto - Types\nexport type {\n  ClusterLimits,\n  ConsumptionDataItem,\n  Limits,\n  SalesPlanDto,\n  SalesPlanMetadata,\n} from './dtos/SalesPlan.dto.js'\n// SalesPlan.dto - Values (constants and functions)\nexport {\n  allClusterBasedLimits,\n  allSalesPlanLimits,\n  deprecatedLimit,\n  MAX_CLUSTER_CLIENTS_DEFAULT,\n  MAX_CLUSTER_CLIENTS_DEV,\n  RETENTION_LIMIT_DEFAULT,\n  RETENTION_LIMIT_MAXIMUM,\n  RETENTION_LIMIT_MINIMUM,\n  unusedClusterBasedLimits,\n  unusedSalesPlanLimits,\n} from './dtos/SalesPlan.dto.js'\nexport type { SecureConnectivityDto } from './dtos/SecureConnectivity.dto.js'\nexport type { SignupDto } from './dtos/Signup.dto.js'\n\n// UsageAlert.dto - Types\nexport type { UsageAlertDto } from './dtos/UsageAlert.dto.js'\n\n// UsageAlert.dto - Values (enum and constants)\nexport {\n  UsageAlertInitValues,\n  UsageAlertMetric,\n  UsageAlertThresholdLimits,\n} from './dtos/UsageAlert.dto.js'\n\nexport type { UserMetaDataDto } from './dtos/UserMetaData.dto.js'\n\n// ============================================================================\n// Enums (runtime values)\n// ============================================================================\n\nexport {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from './enums/AlertSubscription.enum.js'\nexport { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js'\nexport { AuditService } from './enums/AuditService.enum.js'\nexport { BackupStatus } from './enums/BackupStatus.enum.js'\nexport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from './enums/ClusterBulkOperation.enum.js'\nexport { ClusterClientPermission } from './enums/ClusterClientPermissions.enum.js'\nexport { ClusterEncryptionKey } from './enums/ClusterEncryptionKey.enum.js'\nexport { ClusterStatus } from './enums/ClusterStatus.enum.js'\nexport { ConsoleAPIClientPermission } from './enums/ConsoleApiClientPermission.enum.js'\nexport { ErrorType } from './enums/ErrorType.enum.js'\nexport type {\n  AssignableOrganizationRoleType,\n  OrganizationRoleType,\n  UnassignableOrganizationRoleType,\n} from './enums/OrganizationRole.enum.js'\nexport {\n  AssignableOrganizationRole,\n  OrganizationRole,\n  UnassignableOrganizationRole,\n} from './enums/OrganizationRole.enum.js'\nexport { SseEntity, SseType } from './enums/Sse.enum.js'\n\n// ============================================================================\n// Permissions - Namespaces (runtime values)\n// ============================================================================\n\nexport { AccountsPermissions } from './permissions/accounts.permissions.js'\nexport { AlertDistributorPermissions } from './permissions/alert-distributor.permissions.js'\nexport { AuditLoggerPermissions } from './permissions/auditlogger.permissions.js'\nexport {\n  accountsUserFeaturesFromPermissions,\n  consoleUserFeaturesFromPermissions,\n} from './permissions/combo.js'\nexport { ConsolePermissions } from './permissions/console.permissions.js'\nexport { NotificationPermissions } from './permissions/notification.permissions.js'\n// profile.permissions - Types\nexport type { OnboardConfig } from './permissions/profile.permissions.js'\n// profile.permissions - Values (constants)\nexport {\n  C8_ENGINEERING_MANAGERS_EMAILS,\n  CLOUD_TEAM_EMAILS,\n  CONSULTING_MANAGER_EMAILS,\n  CSM_MANAGER_EMAIL,\n  PLATFORM_SM_EMAILS,\n  PROFILES,\n  SRE_TEAM_EMAILS,\n  SUPPORT_MANAGERS_EMAILS,\n} from './permissions/profile.permissions.js'\nexport { expandRolesToPermissions } from './permissions/roleExpansion.utils.js'\n\n// ============================================================================\n// Types - Type-only exports (interfaces and type aliases)\n// ============================================================================\n\nexport type { AuditData } from './types/AuditData.type.js'\n// AutoSleep.type - Types\nexport type {\n  ActivitySleepEligibilityOptions,\n  SleepCronEligibilityOptions,\n} from './types/AutoSleep.type.js'\n// AutoSleep.type - Values (constants and functions)\nexport {\n  INTERNAL_LOW_HARDWARE_PLAN_NAME,\n  isActivitySleepEligible,\n  isClusterTagEligibleForSleepCron,\n  isSalesPlanEligibleForSleepCron,\n  isSleepCronEligible,\n  SLEEP_CRON_ELIGIBLE_TAGS,\n} from './types/AutoSleep.type.js'\nexport type {\n  BotContext,\n  BotOptions,\n  BotRequest,\n  GetUserDetailsResponse,\n  ListRolesForUserResponse,\n  UpdateUserRolesRequest,\n  UpdateUserRolesResponse,\n  UserContext,\n  UserDetails,\n} from './types/Bot.types.js'\n// BulkOperation.type - Types\nexport type {\n  BulkClusterDeletionContent,\n  BulkClusterDeletionItem,\n  BulkClusterGenerationUpdateItem,\n  BulkClusterPlanTypeUpdateContent,\n  BulkClusterPlanTypeUpdateItem,\n  BulkClusterPlanUpdateContent,\n  BulkClusterPlanUpdateItem,\n  BulkGenerationUpdateContent,\n  GenericBulkClusterOperationContent,\n  GenericBulkOperationContent,\n  GenericClusterBulkOperationItem,\n} from './types/BulkOperation.type.js'\n// BulkOperation.type - Functions (type guards)\nexport {\n  isBulkClusterDeletionItem,\n  isBulkClusterPlanTypeUpdateItem,\n  isBulkClusterPlanUpdateItem,\n  isIsBulkClusterGenerationUpdateIten,\n} from './types/BulkOperation.type.js'\n// C8ClusterComponentVersions.type - Types\nexport type {\n  ImmutableZeebeClusterVersionsDto,\n  MutableZeebeClusterVersionsDto,\n  ZeebeClusterVersionsDto,\n} from './types/C8ClusterComponentVersions.type.js'\n// C8ClusterComponentVersions.type - Values (constants)\nexport {\n  AllThings,\n  ImmutableThings,\n  MutableThings,\n} from './types/C8ClusterComponentVersions.type.js'\n// CamundaClusterLabels.type - Types\nexport type {\n  CamundaClusterStage,\n  CamundaClusterStageLabel,\n  ClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// CamundaClusterLabels.type - Values (constants)\nexport {\n  ALLOWED_CAMUNDA_LABELS,\n  StageClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// Chargebee.type - Types\nexport type { SubscriptionItem } from './types/Chargebee.type.js'\n// Chargebee.type - Values (enums)\nexport { ConsumptionData, ConsumptionDataType } from './types/Chargebee.type.js'\n// ClusterBulkOperation.type - Types\nexport type {\n  ClusterBulkOperationAck,\n  ClusterBulkOperationClusterDto,\n  ClusterBulkOperationContent,\n  ClusterBulkOperationDto,\n  ClusterBulkOperationGenerationUpdateParameter,\n  ClusterBulkOperationParameter,\n  ClusterBulkOperationPlanTypeUpdateParameter,\n  ClusterBulkOperationPlanUpdateParameter,\n  ClusterBulkOperationPostContent,\n  ClusterSleepWakeupParameter,\n} from './types/ClusterBulkOperation.type.js'\nexport type {\n  ClusterModificationConfigDto,\n  ClusterModificationDto,\n} from './types/ClusterModification.type.js'\nexport type {\n  ClusterPlanModificationAck,\n  ClusterPlanModificationConfig,\n  ClusterPlanModificationDto,\n} from './types/ClusterPlanModification.type.js'\n// ClusterPlanTypeAvailabilityClass.type - Values (enum and function)\nexport {\n  ClusterPlanTypeAvailabilityClass,\n  sortByAvailabilityClasses,\n} from './types/ClusterPlanTypeAvailabilityClass.type.js'\n// ClusterPlanTypeCategory.type - Values (enum and functions)\nexport {\n  ClusterPlanTypeCategory,\n  hasAvailabilityClass,\n  sortByClusterPlanTypeCategory,\n} from './types/ClusterPlanTypeCategory.type.js'\nexport type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js'\nexport type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js'\nexport type {\n  ClusterUsageDataRequest,\n  ClusterUsageMetricsAddRequestByMetricHeap,\n  ClusterUsageMetricsData,\n  ClusterUsageMetricsFilter,\n  ClusterUsageOrgStartDate,\n} from './types/ClusterUsageMetrics.type.js'\n// Namespace with runtime values (consts, functions, enums)\nexport { ConsoleSM } from './types/ConsoleSelfManaged.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { ConsoleSMAdminApi } from './types/ConsoleSelfManagedAdminApi.type.js'\n// Dashboard.types - Types\nexport type {\n  DashboardConfig,\n  DashboardMappingItem,\n  DashboardMappingTarget,\n  DashboardResultPrimitive,\n  DashboardResultRow,\n  EngineeringOperationsDashboardResponse,\n} from './types/Dashboard.types.js'\nexport type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js'\n// hdp.types - Types (interfaces)\nexport type {\n  AlertSubscription as HdpAlertSubscription,\n  Audit as HdpAudit,\n  ByomClient as HdpByomClient,\n  Channel as HdpChannel,\n  Cluster as HdpCluster,\n  ClusterBackup as HdpClusterBackup,\n  ClusterBackupSchedule as HdpClusterBackupSchedule,\n  ClusterBulkOperation as HdpClusterBulkOperation,\n  ClusterClient as HdpClusterClient,\n  ClusterModification as HdpClusterModification,\n  ClusterPlan as HdpClusterPlan,\n  ClusterPlanType as HdpClusterPlanType,\n  ConnectorSecret as HdpConnectorSecret,\n  ConsoleApiClient as HdpConsoleApiClient,\n  Datacenter as HdpDatacenter,\n  Generation as HdpGeneration,\n  HdpBackendChangeEvent,\n  HdpClusterModificationConfig,\n  HdpEntity,\n  HdpPrometheusDataCapacityDataPoint,\n  Invite as HdpInvite,\n  LlmSpend as HdpLlmSpend,\n  Organization as HdpOrganization,\n  SecureConnectivity as HdpSecureConnectivity,\n  TelemetryData as HdpTelemetryData,\n  UsageAlert as HdpUsageAlert,\n  User as HdpUser,\n  UserLogin as HdpUserLogin,\n} from './types/hdp.types.js'\n// hdp.types - Values (enums)\nexport {\n  AlertSubscriptionReportType as HdpAlertSubscriptionReportType,\n  AlertSubscriptionType as HdpAlertSubscriptionType,\n} from './types/hdp.types.js'\n// notification.type - Types\nexport type {\n  GlobalNotification,\n  NotificationDto,\n  NotificationMeta,\n  NotificationOptions,\n  NotificationPermission,\n  NotificationSource,\n  NotificationState,\n  NotificationType,\n  OrgNotification,\n  UserNotification,\n  UserOrgNotification,\n} from './types/notification.type.js'\n// notification.type - Values (enums and constants)\nexport {\n  NotificationPermissionValues,\n  NotificationSourceEnum,\n  NotificationStateEnum,\n  NotificationTypeEnum,\n} from './types/notification.type.js'\n// OrganizationPermission.type - Types\nexport type {\n  CreateReadUpdateDelete,\n  OrganizationPermissions,\n} from './types/OrganizationPermission.type.js'\n// OrganizationPermission.type - Values (constants)\nexport {\n  OrganizationPermissionsDescriptions,\n  PermissionsForOrganizationRole,\n} from './types/OrganizationPermission.type.js'\n// Roles.js - Types\nexport type {\n  AccountRoles,\n  ConsoleRoles,\n  ModelerRoles,\n  Roles,\n} from './types/Roles.js'\n// Roles.js - Values (constants)\nexport { SAFE_ROLES } from './types/Roles.js'\n// SalesPlanType.type - Types\nexport type {\n  DisplayedSalesPlan,\n  RevisitedSalesPlanName,\n} from './types/SalesPlanType.type.js'\n// SalesPlanType.type - Values (enums and functions)\nexport {\n  AnalyticsSalesPlanType,\n  getAnalyticsSalesPlanFromOrgSalesPlan,\n  getDisplayedSalesPlan,\n  getRevisitedSalesPlanName,\n  OPTIMIZE_DISABLED_PLAN_TYPES,\n  SalesPlanType,\n} from './types/SalesPlanType.type.js'\n// SpamDetection.type - Types\nexport type { SpamDetectionPatterns } from './types/SpamDetection.type.js'\n// SpamDetection.type - Values (constants)\nexport { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js'\nexport type {\n  AlertSubscriptionSseEvent,\n  BackupSseEvent,\n  ClusterClientSseEvent,\n  ClusterSseEvent,\n  ConnectorSecretsSseEvent,\n  ConsoleApiClientSseEvent,\n  ConsoleSseEvent,\n  MonitoringSseEvent,\n  SecureConnectivitySseEvent,\n  SseClusterPayload,\n  SseMonitoringPayload,\n  SseSecureConnectivityPayload,\n} from './types/SseEvent.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { AccountsStats } from './types/Stats.types.js'\n// Survey.type - Types\nexport type { Persona, SurveyDto } from './types/Survey.type.js'\n// Survey.type - Values (enum)\nexport { FeedbackType } from './types/Survey.type.js'\n// SuspendStrategy.type - Types\nexport type {\n  GetSuspendStrategyOptions,\n  SuspendStrategy,\n} from './types/SuspendStrategy.type.js'\n// SuspendStrategy.type - Values (function)\nexport { getSuspendStrategy } from './types/SuspendStrategy.type.js'\n\n// Namespace (runtime value)\nexport { Telemetry } from './types/Telemetry.type.js'\n\n// User.type - Types\nexport type {\n  AccountsData,\n  AppMetadata,\n  BasicUser,\n  BlockedFor,\n  Identity,\n  OrgMembership,\n  User,\n  UserMetadata,\n  UserRequest,\n} from './types/User.type.js'\n\n// User.type - Values (enum)\nexport { UserMetadataEvent } from './types/User.type.js'\n\nexport type {\n  UniqueTaskUser,\n  ValueMetrics,\n  ValueMetricsPerYearMonth,\n} from './types/ValueMetrics.type.js'\n\n// ============================================================================\n// Utils - Classes (runtime values)\n// ============================================================================\n\nexport { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js'\nexport {\n  deriveEncryptionStatus,\n  type EncryptionStatus,\n  isEncryptionStatus,\n} from './utils/encryptionStatus.utils.js'\n// enterprise-connection.utils - Types\nexport type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js'\n// enterprise-connection.utils - Values (functions)\nexport {\n  enterpriseConnectionMetadataToOrganizationAssignments,\n  organizationAssignmentsToEnterpriseConnectionMetadata,\n} from './utils/enterprise-connection.utils.js'\nexport type { EnvVarEntry } from './utils/envVars.js'\nexport { parseEnvVars, serializeEnvVars } from './utils/envVars.js'\nexport {\n  KMS_ARN,\n  KMS_MRK_ARN,\n  type KmsArnValidationError,\n  type ParsedKmsArn,\n  parseKmsArn,\n  validateKmsArnForRegion,\n} from './utils/kmsArn.utils.js'\nexport { validateLabels } from './utils/labelValidator.utils.js'\nexport { ObjectMergeUtils } from './utils/objectMerge.utils.js'\nexport {\n  getPermissionsByRoles,\n  getUserPermissionsForOrg,\n} from './utils/orgs/OrgHelper.js'\n\n// PasswordPolicy - Types\nexport type {\n  PasswordPolicyRequest,\n  PasswordPolicyResult,\n} from './utils/PasswordPolicy.js'\n\n// PasswordPolicy - Values (constants and function)\nexport {\n  MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,\n  MINLENGTH as PASSWORD_POLICY_MINLENGTH,\n  passwordPolicyCheck,\n} from './utils/PasswordPolicy.js'\n\nexport {\n  allSettledResultsCounts,\n  getFulfilledPromises,\n  getRejectedPromises,\n  getSettledSummary,\n} from './utils/settledPromises.util.js'\n\nexport {\n  isValidAwsArn,\n  isValidCIDR,\n  isValidCIDRList,\n  isValidClientName,\n  isValidHostname,\n  isValidPrivateLinkRegion,\n} from './utils/string-validation.utils.js'\nexport {\n  extractCamundaUserEmail,\n  guessName,\n  isCamundaUserId,\n} from './utils/user.utils.js'\n\n// versionCheck.utils - Values (enum and function)\nexport {\n  checkVersion,\n  VersionCheckOperator,\n} from './utils/versionCheck.utils.js'\n\n// ============================================================================\n// Config - Configuration files and types\n// ============================================================================\n\nexport { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js'\nexport type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js'\n\nexport {\n  augmentCamundiPermissions,\n  getApplicableRolesForEmployee,\n  isManager,\n} from './utils/camundiPermissionAugmenter.utils.js'\n"],
+  "mappings": "AAUA,SAAS,KAAK,MAAM,QAAQ,QAAQ,YAAY;AAEhD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,4BAA4B;AACrC,SAAS,iDAAiD;AAgB1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP;AAAA,EAGE;AAAA,OAEK;AAkBP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAaP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,4BAA4B;AAClD,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC;AAC3C,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,eAAe;AAMnC,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AAC5C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAIxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AAazC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,SAAS,iBAAiB,2BAA2B;AAwBrD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,SAAS,iBAAiB;AA6C1B;AAAA,EACiC,+BAA/BA;AAAA,EACyB,yBAAzBC;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB;AAO3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,0BAA0B;AAoBnC,SAAS,oBAAoB;AAO7B,SAAS,0BAA0B;AAGnC,SAAS,iBAAiB;AAgB1B,SAAS,yBAAyB;AAYlC,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,cAAc,wBAAwB;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACe;AAAA,EACA;AAAA,EACb;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAoB,WAAXC,gBAA2C;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
   "names": ["AlertSubscriptionReportType", "AlertSubscriptionType", "default"]
 }

package/dist/permissions/profile.permissions.js

@@ -89,7 +89,7 @@ const PROFILES = {
     rolesToAssign: ["accounts:read", "console:admin:readonly"],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS"
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md"
       ]
     }
   },
@@ -102,7 +102,7 @@ const PROFILES = {
     ],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Access+to+a+customers+Organization+on+C8+SaaS",
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md",
         "https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS"
       ]
     }
@@ -117,7 +117,7 @@ const PROFILES = {
     ],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Access+to+a+customers+Organization+on+C8+SaaS",
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md",
         "https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS"
       ]
     }
@@ -132,7 +132,7 @@ const PROFILES = {
     rolesToAssign: ["support:agent"],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Access+to+a+customers+Organization+on+C8+SaaS"
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md"
       ]
     }
   },
@@ -145,7 +145,7 @@ const PROFILES = {
     rolesToAssign: ["accounts:clusterUpdates", "support:agent"],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Allowing+C8+SaaS+Customers+to+use+an+older+generation+for+a+cluster"
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md"
       ]
     }
   },
@@ -158,7 +158,7 @@ const PROFILES = {
     ],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Managing+Generations+on+C8+SaaS"
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md"
       ]
     }
   },
@@ -171,7 +171,7 @@ const PROFILES = {
     ],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/pages/viewpage.action?spaceKey=HAN&title=Tweaking+a+running+Cluster#TweakingarunningCluster-OverridingEnvironmentVariablesOverridingEnvVars"
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/tweaking-a-running-cluster/index.md"
       ]
     }
   },
@@ -186,7 +186,7 @@ const PROFILES = {
     ],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS",
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md",
         "https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS"
       ]
     }
@@ -201,7 +201,7 @@ const PROFILES = {
     email: {
       handbookPages: [
         "https://confluence.camunda.com/display/FIELDOPS/Migrating+C8-SaaS+Organizations+to+Enterprise",
-        "https://confluence.camunda.com/display/HAN/Modify+a+running+C8+SaaS+Enterprise+Organisation",
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/modify-a-running-c8-saas-enterprise-organisation/index.md",
         "https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS"
       ]
     }
@@ -211,7 +211,7 @@ const PROFILES = {
     rolesToAssign: ["accounts:enterpriseOffboarding", "accounts:read"],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Shutting+down+an+C8+SaaS+Organization"
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/shutting-down-an-c8-saas-organization/index.md"
       ]
     }
   },
@@ -220,7 +220,7 @@ const PROFILES = {
     rolesToAssign: ["accounts:trialExtender", "accounts:read"],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS",
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md",
         "https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS"
       ]
     }
@@ -234,7 +234,7 @@ const PROFILES = {
     rolesToAssign: ["accounts:trialExtender", "accounts:read"],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS",
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md",
         "https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS"
       ]
     }
@@ -244,7 +244,7 @@ const PROFILES = {
     rolesToAssign: ["accounts:limitExtender", "accounts:read"],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS",
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md",
         "https://confluence.camunda.com/display/HAN/Managing+Organization+Limits+on+C8+SaaS"
       ]
     }
@@ -254,7 +254,7 @@ const PROFILES = {
     rolesToAssign: ["accounts:orgCreator"],
     email: {
       handbookPages: [
-        "https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS"
+        "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md"
       ]
     }
   }

package/dist/permissions/profile.permissions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/permissions/profile.permissions.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport const CLOUD_TEAM_EMAILS = [\n  'adam.urban@camunda.com',\n  'collin.raddatz@camunda.com',\n  'tim.schuppener@camunda.com',\n]\nconst LIMIT_EXTENDERS = [\n  'william.vonalt@camunda.com',\n  'victor.grund@camunda.com',\n  'ragnar.nevries@camunda.com',\n  'robert.emsbach@camunda.com',\n  'jared.mcmahon@camunda.com',\n]\nexport const SRE_TEAM_EMAILS = [\n  'jonathan.ballet@camunda.com',\n  'thanasis.petrovas@camunda.com',\n  'thomas.polnik@camunda.com',\n]\nexport const PLATFORM_SM_EMAILS = [\n  'immanuel.monma@camunda.com',\n  'jesse.simpson@camunda.com',\n  'hamza.masood@camunda.com',\n  'lars.lange@camunda.com',\n  'leo.journel@camunda.com',\n  'balazs.kenez@camunda.com',\n]\nexport const SUPPORT_MANAGERS_EMAILS = [\n  'garima.yadav@camunda.com',\n  'jeffrey.stokes@camunda.com',\n  'alexandra.corremans@camunda.com',\n  'chris.campbell@camunda.com',\n]\nexport const C8_ENGINEERING_MANAGERS_EMAILS = [\n  'sebastian.bathke@camunda.com',\n  'catalina.moisuc@camunda.com',\n  'immanuel.monma@camunda.com',\n  'joshua.windels@camunda.com',\n  'marcos.vieira@camunda.com',\n  'maximilian.trumpf@camunda.com',\n  'simon.buettner@camunda.com',\n  // schoetti is also some sort of engineering manager\n  'michael.schoettes@camunda.com',\n  'tassilo.weidner@camunda.com',\n  'nicolas.pepin-perreault@camunda.com',\n  'wolfgang.amann@camunda.com',\n  'mathieu.stennier@camunda.com',\n  'jason.hunter@camunda.com',\n  'maxim.danilov@camunda.com',\n  'stephan.epping@camunda.com',\n  'simon.zengerling@camunda.com',\n  'shay.matasaro@camunda.com',\n]\nexport const CONSULTING_MANAGER_EMAILS = [\n  'benjamin.hoffmann@camunda.com',\n  'chandan.dash@camunda.com',\n  'darren.devine@camunda.com',\n  'hurshid.kadirov@camunda.com',\n  'ivan.jovic@camunda.com',\n  'michael.ferber@camunda.com',\n  'ragnar.nevries@camunda.com',\n  'norbert.kuchenmeister@camunda.com',\n  'robert.emsbach@camunda.com',\n  'victor.grund@camunda.com',\n]\nexport const CSM_MANAGER_EMAIL = [\n  'aaron.laye@camunda.com',\n  'andreas.tollschein@camunda.com',\n  'betsy.burt@camunda.com',\n  'leona.schlosser@camunda.com',\n  'yulia.sinyanskaya@camunda.com',\n  'agnes.kelemen@camunda.com',\n  'thomas.schulz@camunda.com',\n  'shadia.jubril@camunda.com',\n  'kaitlin.leighton@camunda.com',\n  'ryan.warner@camunda.com',\n  'manjula.kularathne@camunda.com',\n]\nconst ADR_MANAGER_EMAIL = ['jasmin.morfin-davila@camunda.com']\n\nexport interface OnboardConfig {\n  [unit: string]: {\n    allowed: string[]\n    rolesToAssign: Roles[]\n    email: {\n      handbookPages: string[]\n    }\n  }\n}\n\nexport const PROFILES: OnboardConfig = {\n  readOnly: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n      ...CONSULTING_MANAGER_EMAILS,\n      ...SRE_TEAM_EMAILS,\n      ...CSM_MANAGER_EMAIL,\n      'eric.lundberg@camunda.com',\n    ],\n    rolesToAssign: ['accounts:read', 'console:admin:readonly'],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS',\n      ],\n    },\n  },\n  supportEngineer: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Access+to+a+customers+Organization+on+C8+SaaS',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  ssoAdmin: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'accounts:connections:delete',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Access+to+a+customers+Organization+on+C8+SaaS',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  supportAgent: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n      ...CONSULTING_MANAGER_EMAILS,\n    ],\n    rolesToAssign: ['support:agent'],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Access+to+a+customers+Organization+on+C8+SaaS',\n      ],\n    },\n  },\n  clusterUpdateSupportEngineer: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n    ],\n    rolesToAssign: ['accounts:clusterUpdates', 'support:agent'],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Allowing+C8+SaaS+Customers+to+use+an+older+generation+for+a+cluster',\n      ],\n    },\n  },\n  c8ReleaseManager: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'console:C8ReleaseManager',\n      'accounts:read',\n      'console:C8UpdateEnforcer',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Managing+Generations+on+C8+SaaS',\n      ],\n    },\n  },\n  incidentEngineer: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'support:agent',\n      'console:operationsEngineer',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/pages/viewpage.action?spaceKey=HAN&title=Tweaking+a+running+Cluster#TweakingarunningCluster-OverridingEnvironmentVariablesOverridingEnvVars',\n      ],\n    },\n  },\n  consulting: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CONSULTING_MANAGER_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'console:admin:readonly',\n      'accounts:trialExtender',\n      'accounts:limitExtender',\n      'accounts:enterpriseAdmin',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csm: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],\n    rolesToAssign: [\n      'accounts:enterpriseAdmin',\n      'accounts:read',\n      'accounts:trialExtender',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/FIELDOPS/Migrating+C8-SaaS+Organizations+to+Enterprise',\n        'https://confluence.camunda.com/display/HAN/Modify+a+running+C8+SaaS+Enterprise+Organisation',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csmOffboard: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],\n    rolesToAssign: ['accounts:enterpriseOffboarding', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Shutting+down+an+C8+SaaS+Organization',\n      ],\n    },\n  },\n  adr: {\n    allowed: [...ADR_MANAGER_EMAIL, 'javier.garcia-alzorriz@camunda.com'],\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  trialExtender: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...LIMIT_EXTENDERS,\n      'rory.tettey@camunda.com',\n    ],\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  limitExtender: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...LIMIT_EXTENDERS],\n    rolesToAssign: ['accounts:limitExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS',\n        'https://confluence.camunda.com/display/HAN/Managing+Organization+Limits+on+C8+SaaS',\n      ],\n    },\n  },\n  workshopCreator: {\n    allowed: [...CLOUD_TEAM_EMAILS, 'robert.emsbach@camunda.com'],\n    rolesToAssign: ['accounts:orgCreator'],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Finding+an+Organization+on+C8+SaaS',\n      ],\n    },\n  },\n}\n"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport const CLOUD_TEAM_EMAILS = [\n  'adam.urban@camunda.com',\n  'collin.raddatz@camunda.com',\n  'tim.schuppener@camunda.com',\n]\nconst LIMIT_EXTENDERS = [\n  'william.vonalt@camunda.com',\n  'victor.grund@camunda.com',\n  'ragnar.nevries@camunda.com',\n  'robert.emsbach@camunda.com',\n  'jared.mcmahon@camunda.com',\n]\nexport const SRE_TEAM_EMAILS = [\n  'jonathan.ballet@camunda.com',\n  'thanasis.petrovas@camunda.com',\n  'thomas.polnik@camunda.com',\n]\nexport const PLATFORM_SM_EMAILS = [\n  'immanuel.monma@camunda.com',\n  'jesse.simpson@camunda.com',\n  'hamza.masood@camunda.com',\n  'lars.lange@camunda.com',\n  'leo.journel@camunda.com',\n  'balazs.kenez@camunda.com',\n]\nexport const SUPPORT_MANAGERS_EMAILS = [\n  'garima.yadav@camunda.com',\n  'jeffrey.stokes@camunda.com',\n  'alexandra.corremans@camunda.com',\n  'chris.campbell@camunda.com',\n]\nexport const C8_ENGINEERING_MANAGERS_EMAILS = [\n  'sebastian.bathke@camunda.com',\n  'catalina.moisuc@camunda.com',\n  'immanuel.monma@camunda.com',\n  'joshua.windels@camunda.com',\n  'marcos.vieira@camunda.com',\n  'maximilian.trumpf@camunda.com',\n  'simon.buettner@camunda.com',\n  // schoetti is also some sort of engineering manager\n  'michael.schoettes@camunda.com',\n  'tassilo.weidner@camunda.com',\n  'nicolas.pepin-perreault@camunda.com',\n  'wolfgang.amann@camunda.com',\n  'mathieu.stennier@camunda.com',\n  'jason.hunter@camunda.com',\n  'maxim.danilov@camunda.com',\n  'stephan.epping@camunda.com',\n  'simon.zengerling@camunda.com',\n  'shay.matasaro@camunda.com',\n]\nexport const CONSULTING_MANAGER_EMAILS = [\n  'benjamin.hoffmann@camunda.com',\n  'chandan.dash@camunda.com',\n  'darren.devine@camunda.com',\n  'hurshid.kadirov@camunda.com',\n  'ivan.jovic@camunda.com',\n  'michael.ferber@camunda.com',\n  'ragnar.nevries@camunda.com',\n  'norbert.kuchenmeister@camunda.com',\n  'robert.emsbach@camunda.com',\n  'victor.grund@camunda.com',\n]\nexport const CSM_MANAGER_EMAIL = [\n  'aaron.laye@camunda.com',\n  'andreas.tollschein@camunda.com',\n  'betsy.burt@camunda.com',\n  'leona.schlosser@camunda.com',\n  'yulia.sinyanskaya@camunda.com',\n  'agnes.kelemen@camunda.com',\n  'thomas.schulz@camunda.com',\n  'shadia.jubril@camunda.com',\n  'kaitlin.leighton@camunda.com',\n  'ryan.warner@camunda.com',\n  'manjula.kularathne@camunda.com',\n]\nconst ADR_MANAGER_EMAIL = ['jasmin.morfin-davila@camunda.com']\n\nexport interface OnboardConfig {\n  [unit: string]: {\n    allowed: string[]\n    rolesToAssign: Roles[]\n    email: {\n      handbookPages: string[]\n    }\n  }\n}\n\nexport const PROFILES: OnboardConfig = {\n  readOnly: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n      ...CONSULTING_MANAGER_EMAILS,\n      ...SRE_TEAM_EMAILS,\n      ...CSM_MANAGER_EMAIL,\n      'eric.lundberg@camunda.com',\n    ],\n    rolesToAssign: ['accounts:read', 'console:admin:readonly'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  supportEngineer: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  ssoAdmin: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'accounts:connections:delete',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  supportAgent: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n      ...CONSULTING_MANAGER_EMAILS,\n    ],\n    rolesToAssign: ['support:agent'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  clusterUpdateSupportEngineer: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n    ],\n    rolesToAssign: ['accounts:clusterUpdates', 'support:agent'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md',\n      ],\n    },\n  },\n  c8ReleaseManager: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'console:C8ReleaseManager',\n      'accounts:read',\n      'console:C8UpdateEnforcer',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md',\n      ],\n    },\n  },\n  incidentEngineer: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'support:agent',\n      'console:operationsEngineer',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/tweaking-a-running-cluster/index.md',\n      ],\n    },\n  },\n  consulting: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CONSULTING_MANAGER_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'console:admin:readonly',\n      'accounts:trialExtender',\n      'accounts:limitExtender',\n      'accounts:enterpriseAdmin',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csm: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],\n    rolesToAssign: [\n      'accounts:enterpriseAdmin',\n      'accounts:read',\n      'accounts:trialExtender',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/FIELDOPS/Migrating+C8-SaaS+Organizations+to+Enterprise',\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/modify-a-running-c8-saas-enterprise-organisation/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csmOffboard: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],\n    rolesToAssign: ['accounts:enterpriseOffboarding', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/shutting-down-an-c8-saas-organization/index.md',\n      ],\n    },\n  },\n  adr: {\n    allowed: [...ADR_MANAGER_EMAIL, 'javier.garcia-alzorriz@camunda.com'],\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  trialExtender: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...LIMIT_EXTENDERS,\n      'rory.tettey@camunda.com',\n    ],\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  limitExtender: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...LIMIT_EXTENDERS],\n    rolesToAssign: ['accounts:limitExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Managing+Organization+Limits+on+C8+SaaS',\n      ],\n    },\n  },\n  workshopCreator: {\n    allowed: [...CLOUD_TEAM_EMAILS, 'robert.emsbach@camunda.com'],\n    rolesToAssign: ['accounts:orgCreator'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n}\n"],
   "mappings": "AAQO,MAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF;AACA,MAAM,kBAAkB;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,kBAAkB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,qBAAqB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,iCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,MAAM,oBAAoB,CAAC,kCAAkC;AAYtD,MAAM,WAA0B;AAAA,EACrC,UAAU;AAAA,IACR,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA,eAAe,CAAC,iBAAiB,wBAAwB;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,SAAS,CAAC,GAAG,mBAAmB,GAAG,uBAAuB;AAAA,IAC1D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,SAAS,CAAC,GAAG,mBAAmB,GAAG,uBAAuB;AAAA,IAC1D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc;AAAA,IACZ,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAAA,IACA,eAAe,CAAC,eAAe;AAAA,IAC/B,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,8BAA8B;AAAA,IAC5B,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAAA,IACA,eAAe,CAAC,2BAA2B,eAAe;AAAA,IAC1D,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS,CAAC,GAAG,mBAAmB,GAAG,8BAA8B;AAAA,IACjE,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS,CAAC,GAAG,mBAAmB,GAAG,8BAA8B;AAAA,IACjE,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,YAAY;AAAA,IACV,SAAS,CAAC,GAAG,mBAAmB,GAAG,yBAAyB;AAAA,IAC5D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,SAAS,CAAC,GAAG,mBAAmB,GAAG,iBAAiB;AAAA,IACpD,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,SAAS,CAAC,GAAG,mBAAmB,GAAG,iBAAiB;AAAA,IACpD,eAAe,CAAC,kCAAkC,eAAe;AAAA,IACjE,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,SAAS,CAAC,GAAG,mBAAmB,oCAAoC;AAAA,IACpE,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,SAAS,CAAC,GAAG,mBAAmB,GAAG,eAAe;AAAA,IAClD,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,SAAS,CAAC,GAAG,mBAAmB,4BAA4B;AAAA,IAC5D,eAAe,CAAC,qBAAqB;AAAA,IACrC,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/types/C8ClusterComponentVersions.type.d.ts

@@ -2,9 +2,9 @@ export interface ZeebeClusterVersionsDto extends MutableZeebeClusterVersionsDto,
 }
 export interface ImmutableZeebeClusterVersionsDto {
     elasticSearchOss: string;
-    operate: string;
+    operate?: string;
     zeebe: string;
-    tasklist: string;
+    tasklist?: string;
     optimize: string;
     connectorBridge?: string;
 }

package/dist/types/C8ClusterComponentVersions.type.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/C8ClusterComponentVersions.type.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport interface ZeebeClusterVersionsDto\n  extends MutableZeebeClusterVersionsDto,\n    ImmutableZeebeClusterVersionsDto {}\n\nexport interface ImmutableZeebeClusterVersionsDto {\n  // make sure if you modify something here to also modify ImmutableThings\n  elasticSearchOss: string\n  operate: string\n  zeebe: string\n  tasklist: string\n  optimize: string\n  connectorBridge?: string\n}\nexport const ImmutableThings: string[] = [\n  'elasticSearchOss',\n  'operate',\n  'zeebe',\n  'tasklist',\n  'optimize',\n  'connectorBridge',\n]\n\nexport interface MutableZeebeClusterVersionsDto {\n  // make sure if you modify something here to also modify MutableThings\n  zeebeAnalytics?: string\n  elasticSearchCurator?: string\n  operateEnvVars?: string\n  zeebeBrokerEnvVars?: string\n  zeebeGatewayEnvVars?: string\n  tasklistEnvVars?: string\n  optimizeEnvVars?: string\n  zeebeAnalyticsEnvVars?: string\n  connectorBridgeEnvVars?: string\n  gatewayEnvVars?: string\n}\nexport const MutableThings: string[] = [\n  'zeebeAnalytics',\n  'elasticSearchCurator',\n  'operateEnvVars',\n  'zeebeBrokerEnvVars',\n  'zeebeGatewayEnvVars',\n  'tasklistEnvVars',\n  'optimizeEnvVars',\n  'zeebeAnalyticsEnvVars',\n  'connectorBridgeEnvVars',\n  'gatewayEnvVars',\n]\nexport const AllThings: string[] = ImmutableThings.concat(MutableThings)\n"],
-  "mappings": "AAmBO,MAAM,kBAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAeO,MAAM,gBAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,YAAsB,gBAAgB,OAAO,aAAa;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport interface ZeebeClusterVersionsDto\n  extends MutableZeebeClusterVersionsDto,\n    ImmutableZeebeClusterVersionsDto {}\n\nexport interface ImmutableZeebeClusterVersionsDto {\n  // make sure if you modify something here to also modify ImmutableThings\n  elasticSearchOss: string\n  // Optional on 8.9+ generations where tasklist + operate run inside the\n  // zeebe gateway pod and no longer ship as standalone images.\n  operate?: string\n  zeebe: string\n  // Optional on 8.9+ generations \u2014 see operate above.\n  tasklist?: string\n  optimize: string\n  connectorBridge?: string\n}\nexport const ImmutableThings: string[] = [\n  'elasticSearchOss',\n  'operate',\n  'zeebe',\n  'tasklist',\n  'optimize',\n  'connectorBridge',\n]\n\nexport interface MutableZeebeClusterVersionsDto {\n  // make sure if you modify something here to also modify MutableThings\n  zeebeAnalytics?: string\n  elasticSearchCurator?: string\n  operateEnvVars?: string\n  zeebeBrokerEnvVars?: string\n  zeebeGatewayEnvVars?: string\n  tasklistEnvVars?: string\n  optimizeEnvVars?: string\n  zeebeAnalyticsEnvVars?: string\n  connectorBridgeEnvVars?: string\n  gatewayEnvVars?: string\n}\nexport const MutableThings: string[] = [\n  'zeebeAnalytics',\n  'elasticSearchCurator',\n  'operateEnvVars',\n  'zeebeBrokerEnvVars',\n  'zeebeGatewayEnvVars',\n  'tasklistEnvVars',\n  'optimizeEnvVars',\n  'zeebeAnalyticsEnvVars',\n  'connectorBridgeEnvVars',\n  'gatewayEnvVars',\n]\nexport const AllThings: string[] = ImmutableThings.concat(MutableThings)\n"],
+  "mappings": "AAsBO,MAAM,kBAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAeO,MAAM,gBAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,YAAsB,gBAAgB,OAAO,aAAa;",
   "names": []
 }

package/dist/types/OrganizationPermission.type.js

@@ -480,7 +480,7 @@ const PermissionsForOrganizationRole = /* @__PURE__ */ new Map([
         secureConnectivity: CRUD_TRUE,
         encryption: CRUD_TRUE,
         connectorSecrets: CRUD_TRUE,
-        connectors: CRUD_FALSE,
+        connectors: CRUD_READ_TRUE,
         settings: {
           resourceBasedAuthorizations: {
             activate: CRUD_FALSE,
@@ -660,7 +660,7 @@ const PermissionsForOrganizationRole = /* @__PURE__ */ new Map([
         secureConnectivity: CRUD_READ_TRUE,
         encryption: CRUD_FALSE,
         connectorSecrets: CRUD_TRUE,
-        connectors: CRUD_FALSE,
+        connectors: CRUD_READ_TRUE,
         settings: {
           resourceBasedAuthorizations: {
             activate: CRUD_FALSE,

package/dist/types/OrganizationPermission.type.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/OrganizationPermission.type.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { OrganizationRole } from '../enums/OrganizationRole.enum.js'\n\n// new roles and permissions according to\n// https://docs.google.com/document/d/1FZYFn9fK2sn6ksjh7drSNad1vyMEIwK6p4KlG353yfM/edit#heading=h.kjgwc8d48e3a\n\nconst CRUD_TRUE: CreateReadUpdateDelete = {\n  create: true,\n  read: true,\n  update: true,\n  delete: true,\n}\n\nconst CRUD_FALSE: CreateReadUpdateDelete = {\n  create: false,\n  read: false,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_UPDATE_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: true,\n  delete: false,\n}\n\nexport interface CreateReadUpdateDelete {\n  create: boolean\n  read: boolean\n  update: boolean\n  delete: boolean\n}\n\nexport interface CreateReadUpdateDeleteDescriptions {\n  create: string\n  read: string\n  update: string\n  delete: string\n}\n\nexport interface OrganizationPermissionsInternal<T> {\n  org: {\n    clusters: T\n    clients: T\n    settings: T\n    usage: T\n    billing: T\n    users: {\n      general: T\n      owner: T\n      admin: T\n      member: T\n    }\n    activity: T\n    diagrams: T\n    forms: T\n    instances: T // create === start new instances\n    workflows: T // create === deploy diagrams\n    webide: T\n    earlyAccessFeatures: T\n  }\n  cluster: {\n    clients: T\n    alerts: T\n    operate: T\n    tasklist: T\n    optimize: T\n    identity: T\n    ipWhitelist: T\n    secureConnectivity: T\n    encryption: T\n    connectorSecrets: T\n    connectors: T\n    settings: {\n      resourceBasedAuthorizations: {\n        activate: T\n        configure: T\n      }\n      identityBasedAuthorizations: {\n        activate: T\n      }\n      multiTenancy: {\n        activate: T\n      }\n    }\n  }\n}\n\nexport interface OrganizationPermissions\n  extends OrganizationPermissionsInternal<CreateReadUpdateDelete> {}\n\nexport const OrganizationPermissionsDescriptions: OrganizationPermissionsInternal<CreateReadUpdateDeleteDescriptions> =\n  {\n    org: {\n      clusters: {\n        create: 'Create new clusters',\n        read: 'View clusters',\n        update: 'Update clusters',\n        delete: 'Delete clusters',\n      },\n      clients: {\n        create: 'Create new console clients',\n        read: 'View console clients',\n        update: 'Update console clients',\n        delete: 'Delete console clients',\n      },\n      settings: {\n        create: 'unused',\n        read: 'View settings',\n        update: 'Update settings',\n        delete: 'Delete settings',\n      },\n      usage: {\n        create: 'unused',\n        read: 'View usage metrics',\n        update: 'unused',\n        delete: 'unused',\n      },\n      billing: {\n        create: 'unused',\n        read: 'View billing information',\n        update: 'Update billing information',\n        delete: 'unused',\n      },\n      users: {\n        general: {\n          create: 'Add users',\n          read: 'View users',\n          update: 'Update users',\n          delete: 'Remove users',\n        },\n        owner: {\n          create: 'Initiate owner change',\n          read: 'Read owners',\n          update: 'Update owners',\n          delete: 'Remove owners',\n        },\n        admin: {\n          create: 'Add admins',\n          read: 'Read admins',\n          update: 'Update admins',\n          delete: 'Remove admins',\n        },\n        member: {\n          create: 'Add members',\n          read: 'Read members',\n          update: 'Update members',\n          delete: 'Remove members',\n        },\n      },\n      activity: {\n        create: 'unused',\n        read: 'View activity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      diagrams: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      forms: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      instances: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      workflows: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      webide: {\n        create: 'unused',\n        read: 'Open Web Modeler',\n        update: 'unused',\n        delete: 'unused',\n      },\n      earlyAccessFeatures: {\n        create: 'Enable early access features',\n        read: 'View early access features',\n        update: 'Update early access features',\n        delete: 'Disable early access features',\n      },\n    },\n    cluster: {\n      clients: {\n        create: 'Create cluster clients',\n        read: 'View cluster clients',\n        update: 'Update cluster clients',\n        delete: 'Delete cluster clients',\n      },\n      alerts: {\n        create: 'Create cluster alerts',\n        read: 'View cluster alerts',\n        update: 'Update cluster alerts',\n        delete: 'Delete cluster alerts',\n      },\n      operate: {\n        create: 'unused',\n        read: 'Open Operate',\n        update: 'unused',\n        delete: 'unused',\n      },\n      tasklist: {\n        create: 'unused',\n        read: 'Open Task List',\n        update: 'unused',\n        delete: 'unused',\n      },\n      optimize: {\n        create: 'unused',\n        read: 'Open Optimize',\n        update: 'unused',\n        delete: 'unused',\n      },\n      identity: {\n        create: 'unused',\n        read: 'Open Identity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      ipWhitelist: {\n        create: 'Create IP Whitelist',\n        read: 'Read IP Whitelist',\n        update: 'Update IP Whitelist',\n        delete: 'Delete IP Whitelist',\n      },\n      secureConnectivity: {\n        create: 'Create Secure Connectivity',\n        read: 'Read Secure Connectivity',\n        update: 'Update Secure Connectivity',\n        delete: 'Delete Secure Connectivity',\n      },\n      encryption: {\n        create: 'Create BYO Encryption',\n        read: 'Read BYO Encryption',\n        update: 'Update BYO Encryption',\n        delete: 'Delete BYO Encryption',\n      },\n      connectorSecrets: {\n        create: 'Create Connector Secrets',\n        read: 'View Connector Secrets',\n        update: 'Update Connector Secrets',\n        delete: 'Delete Connector Secrets',\n      },\n      connectors: {\n        create: 'unused',\n        read: 'Read Manage Connectors View',\n        update: 'unused',\n        delete: 'unused',\n      },\n      settings: {\n        resourceBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View resource-based authorizations settings',\n            update: 'Enable/Disable resource-based authorizations',\n            delete: 'unused',\n          },\n          configure: {\n            create: 'unused',\n            read: 'Read resource-based authorizations for users',\n            update: 'Update resource-based authorizations for users',\n            delete: 'unused',\n          },\n        },\n        identityBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View identity-based authorizations settings',\n            update: 'Enable/Disable identity-based authorizations',\n            delete: 'unused',\n          },\n        },\n        multiTenancy: {\n          activate: {\n            create: 'unused',\n            read: 'View Multi-tenency settings',\n            update: 'Enable/Disable Multi-tenancy',\n            delete: 'unused',\n          },\n        },\n      },\n    },\n  }\n\nexport const PermissionsForOrganizationRole: Map<\n  OrganizationRole,\n  OrganizationPermissions\n> = new Map([\n  [\n    OrganizationRole.MEMBER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ADMIN,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OWNER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: {\n          create: false,\n          read: true,\n          update: true,\n          delete: true,\n        },\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_TRUE,\n          admin: CRUD_TRUE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.SUPPORTAGENT,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_READ_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_TRUE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_READ_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_READ_TRUE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_READ_TRUE,\n        connectorSecrets: CRUD_READ_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OPERATIONS_ENGINEER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.TASK_USER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ANALYST,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.DEVELOPER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: false,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_READ_TRUE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.VISITOR,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.MODELER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n])\n"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { OrganizationRole } from '../enums/OrganizationRole.enum.js'\n\n// new roles and permissions according to\n// https://docs.google.com/document/d/1FZYFn9fK2sn6ksjh7drSNad1vyMEIwK6p4KlG353yfM/edit#heading=h.kjgwc8d48e3a\n\nconst CRUD_TRUE: CreateReadUpdateDelete = {\n  create: true,\n  read: true,\n  update: true,\n  delete: true,\n}\n\nconst CRUD_FALSE: CreateReadUpdateDelete = {\n  create: false,\n  read: false,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_UPDATE_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: true,\n  delete: false,\n}\n\nexport interface CreateReadUpdateDelete {\n  create: boolean\n  read: boolean\n  update: boolean\n  delete: boolean\n}\n\nexport interface CreateReadUpdateDeleteDescriptions {\n  create: string\n  read: string\n  update: string\n  delete: string\n}\n\nexport interface OrganizationPermissionsInternal<T> {\n  org: {\n    clusters: T\n    clients: T\n    settings: T\n    usage: T\n    billing: T\n    users: {\n      general: T\n      owner: T\n      admin: T\n      member: T\n    }\n    activity: T\n    diagrams: T\n    forms: T\n    instances: T // create === start new instances\n    workflows: T // create === deploy diagrams\n    webide: T\n    earlyAccessFeatures: T\n  }\n  cluster: {\n    clients: T\n    alerts: T\n    operate: T\n    tasklist: T\n    optimize: T\n    identity: T\n    ipWhitelist: T\n    secureConnectivity: T\n    encryption: T\n    connectorSecrets: T\n    connectors: T\n    settings: {\n      resourceBasedAuthorizations: {\n        activate: T\n        configure: T\n      }\n      identityBasedAuthorizations: {\n        activate: T\n      }\n      multiTenancy: {\n        activate: T\n      }\n    }\n  }\n}\n\nexport interface OrganizationPermissions\n  extends OrganizationPermissionsInternal<CreateReadUpdateDelete> {}\n\nexport const OrganizationPermissionsDescriptions: OrganizationPermissionsInternal<CreateReadUpdateDeleteDescriptions> =\n  {\n    org: {\n      clusters: {\n        create: 'Create new clusters',\n        read: 'View clusters',\n        update: 'Update clusters',\n        delete: 'Delete clusters',\n      },\n      clients: {\n        create: 'Create new console clients',\n        read: 'View console clients',\n        update: 'Update console clients',\n        delete: 'Delete console clients',\n      },\n      settings: {\n        create: 'unused',\n        read: 'View settings',\n        update: 'Update settings',\n        delete: 'Delete settings',\n      },\n      usage: {\n        create: 'unused',\n        read: 'View usage metrics',\n        update: 'unused',\n        delete: 'unused',\n      },\n      billing: {\n        create: 'unused',\n        read: 'View billing information',\n        update: 'Update billing information',\n        delete: 'unused',\n      },\n      users: {\n        general: {\n          create: 'Add users',\n          read: 'View users',\n          update: 'Update users',\n          delete: 'Remove users',\n        },\n        owner: {\n          create: 'Initiate owner change',\n          read: 'Read owners',\n          update: 'Update owners',\n          delete: 'Remove owners',\n        },\n        admin: {\n          create: 'Add admins',\n          read: 'Read admins',\n          update: 'Update admins',\n          delete: 'Remove admins',\n        },\n        member: {\n          create: 'Add members',\n          read: 'Read members',\n          update: 'Update members',\n          delete: 'Remove members',\n        },\n      },\n      activity: {\n        create: 'unused',\n        read: 'View activity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      diagrams: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      forms: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      instances: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      workflows: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      webide: {\n        create: 'unused',\n        read: 'Open Web Modeler',\n        update: 'unused',\n        delete: 'unused',\n      },\n      earlyAccessFeatures: {\n        create: 'Enable early access features',\n        read: 'View early access features',\n        update: 'Update early access features',\n        delete: 'Disable early access features',\n      },\n    },\n    cluster: {\n      clients: {\n        create: 'Create cluster clients',\n        read: 'View cluster clients',\n        update: 'Update cluster clients',\n        delete: 'Delete cluster clients',\n      },\n      alerts: {\n        create: 'Create cluster alerts',\n        read: 'View cluster alerts',\n        update: 'Update cluster alerts',\n        delete: 'Delete cluster alerts',\n      },\n      operate: {\n        create: 'unused',\n        read: 'Open Operate',\n        update: 'unused',\n        delete: 'unused',\n      },\n      tasklist: {\n        create: 'unused',\n        read: 'Open Task List',\n        update: 'unused',\n        delete: 'unused',\n      },\n      optimize: {\n        create: 'unused',\n        read: 'Open Optimize',\n        update: 'unused',\n        delete: 'unused',\n      },\n      identity: {\n        create: 'unused',\n        read: 'Open Identity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      ipWhitelist: {\n        create: 'Create IP Whitelist',\n        read: 'Read IP Whitelist',\n        update: 'Update IP Whitelist',\n        delete: 'Delete IP Whitelist',\n      },\n      secureConnectivity: {\n        create: 'Create Secure Connectivity',\n        read: 'Read Secure Connectivity',\n        update: 'Update Secure Connectivity',\n        delete: 'Delete Secure Connectivity',\n      },\n      encryption: {\n        create: 'Create BYO Encryption',\n        read: 'Read BYO Encryption',\n        update: 'Update BYO Encryption',\n        delete: 'Delete BYO Encryption',\n      },\n      connectorSecrets: {\n        create: 'Create Connector Secrets',\n        read: 'View Connector Secrets',\n        update: 'Update Connector Secrets',\n        delete: 'Delete Connector Secrets',\n      },\n      connectors: {\n        create: 'unused',\n        read: 'Read Manage Connectors View',\n        update: 'unused',\n        delete: 'unused',\n      },\n      settings: {\n        resourceBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View resource-based authorizations settings',\n            update: 'Enable/Disable resource-based authorizations',\n            delete: 'unused',\n          },\n          configure: {\n            create: 'unused',\n            read: 'Read resource-based authorizations for users',\n            update: 'Update resource-based authorizations for users',\n            delete: 'unused',\n          },\n        },\n        identityBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View identity-based authorizations settings',\n            update: 'Enable/Disable identity-based authorizations',\n            delete: 'unused',\n          },\n        },\n        multiTenancy: {\n          activate: {\n            create: 'unused',\n            read: 'View Multi-tenency settings',\n            update: 'Enable/Disable Multi-tenancy',\n            delete: 'unused',\n          },\n        },\n      },\n    },\n  }\n\nexport const PermissionsForOrganizationRole: Map<\n  OrganizationRole,\n  OrganizationPermissions\n> = new Map([\n  [\n    OrganizationRole.MEMBER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ADMIN,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OWNER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: {\n          create: false,\n          read: true,\n          update: true,\n          delete: true,\n        },\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_TRUE,\n          admin: CRUD_TRUE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.SUPPORTAGENT,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_READ_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_TRUE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_READ_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_READ_TRUE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_READ_TRUE,\n        connectorSecrets: CRUD_READ_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OPERATIONS_ENGINEER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.TASK_USER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ANALYST,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.DEVELOPER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: false,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_READ_TRUE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.VISITOR,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.MODELER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n])\n"],
   "mappings": "AAMA,SAAS,wBAAwB;AAKjC,MAAM,YAAoC;AAAA,EACxC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,aAAqC;AAAA,EACzC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,iBAAyC;AAAA,EAC7C,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,wBAAgD;AAAA,EACpD,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAmEO,MAAM,sCACX;AAAA,EACE,KAAK;AAAA,IACH,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,qBAAqB;AAAA,MACnB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,aAAa;AAAA,MACX,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,oBAAoB;AAAA,MAClB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,kBAAkB;AAAA,MAChB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,UACT,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEK,MAAM,iCAGT,oBAAI,IAAI;AAAA,EACV;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;",
   "names": []
 }

package/dist/types/SalesPlanType.type.d.ts

@@ -6,6 +6,7 @@ export declare enum SalesPlanType {
     IN_NEGOTIATION = "in-negotiation",
     INTERNAL = "internal"
 }
+export declare const OPTIMIZE_DISABLED_PLAN_TYPES: SalesPlanType[];
 export declare enum AnalyticsSalesPlanType {
     TRIAL = "trial",
     ENTERPRISE = "enterprise",

package/dist/types/SalesPlanType.type.js

@@ -7,6 +7,9 @@ var SalesPlanType = /* @__PURE__ */ ((SalesPlanType2) => {
   SalesPlanType2["INTERNAL"] = "internal";
   return SalesPlanType2;
 })(SalesPlanType || {});
+const OPTIMIZE_DISABLED_PLAN_TYPES = [
+  "trial" /* TRIAL */
+];
 var AnalyticsSalesPlanType = /* @__PURE__ */ ((AnalyticsSalesPlanType2) => {
   AnalyticsSalesPlanType2["TRIAL"] = "trial";
   AnalyticsSalesPlanType2["ENTERPRISE"] = "enterprise";
@@ -66,6 +69,7 @@ function getDisplayedSalesPlan(organization) {
 }
 export {
   AnalyticsSalesPlanType,
+  OPTIMIZE_DISABLED_PLAN_TYPES,
   SalesPlanType,
   getAnalyticsSalesPlanFromOrgSalesPlan,
   getDisplayedSalesPlan,

package/dist/types/SalesPlanType.type.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/SalesPlanType.type.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum SalesPlanType {\n  ENTERPRISE = 'enterprise',\n  TRIAL = 'trial',\n  FREE = 'free',\n  FREE_TP_PAID_REQUEST = 'free-to-paid-request',\n  IN_NEGOTIATION = 'in-negotiation',\n  INTERNAL = 'internal',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AnalyticsSalesPlanType {\n  TRIAL = 'trial',\n  ENTERPRISE = 'enterprise',\n  EARLY_ACCESS = 'early-access',\n  IN_NEGOTIATION = 'in-negotiation',\n  FREE = 'free',\n  INTERNAL = 'internal',\n}\n\nexport const getAnalyticsSalesPlanFromOrgSalesPlan = (organization: {\n  organizationToSalesPlan?: {\n    trialStateExpired?: boolean\n    salesPlan: {\n      salesPlanType: SalesPlanType | string\n      version: number\n    }\n  }\n}) => {\n  if (!organization.organizationToSalesPlan) {\n    return undefined\n  }\n  switch (organization.organizationToSalesPlan.salesPlan.salesPlanType) {\n    case SalesPlanType.TRIAL:\n      return AnalyticsSalesPlanType.TRIAL\n    case SalesPlanType.ENTERPRISE:\n      return AnalyticsSalesPlanType.ENTERPRISE\n    case SalesPlanType.INTERNAL:\n      return AnalyticsSalesPlanType.INTERNAL\n    case SalesPlanType.IN_NEGOTIATION:\n      return AnalyticsSalesPlanType.IN_NEGOTIATION\n    default:\n      return undefined\n  }\n}\n\n// https://github.com/camunda/camunda-cloud-management-apps/issues/2809\nexport type RevisitedSalesPlanName =\n  | 'Camunda SaaS Trial'\n  | 'Camunda SaaS Modeling'\n  | 'Enterprise'\n  | 'In Negotiation'\n  | 'Internal'\n\nexport function getRevisitedSalesPlanName(\n  displayedSalesPlanName: DisplayedSalesPlan | undefined,\n): RevisitedSalesPlanName | undefined {\n  switch (displayedSalesPlanName) {\n    case 'Free Trial':\n      return 'Camunda SaaS Trial'\n    case 'Free':\n      return 'Camunda SaaS Modeling'\n    default:\n      return displayedSalesPlanName\n  }\n}\n\nexport type DisplayedSalesPlan =\n  | 'Free Trial'\n  | 'Free'\n  | 'Enterprise'\n  | 'In Negotiation'\n  | 'Internal'\n\nexport function getDisplayedSalesPlan(organization: {\n  organizationToSalesPlan?: {\n    trialStateExpired?: boolean\n    salesPlan: {\n      salesPlanType: SalesPlanType | string\n    }\n  }\n}): DisplayedSalesPlan | undefined {\n  if (!organization.organizationToSalesPlan) {\n    return undefined\n  }\n  switch (organization.organizationToSalesPlan.salesPlan.salesPlanType) {\n    case SalesPlanType.TRIAL:\n      if (organization.organizationToSalesPlan.trialStateExpired) {\n        return 'Free'\n      } else {\n        return 'Free Trial'\n      }\n    case SalesPlanType.ENTERPRISE:\n      return 'Enterprise'\n    case SalesPlanType.INTERNAL:\n      return 'Internal'\n    case SalesPlanType.IN_NEGOTIATION:\n      return 'In Negotiation'\n    default:\n      return undefined\n  }\n}\n"],
-  "mappings": "AAOO,IAAK,gBAAL,kBAAKA,mBAAL;AACL,EAAAA,eAAA,gBAAa;AACb,EAAAA,eAAA,WAAQ;AACR,EAAAA,eAAA,UAAO;AACP,EAAAA,eAAA,0BAAuB;AACvB,EAAAA,eAAA,oBAAiB;AACjB,EAAAA,eAAA,cAAW;AAND,SAAAA;AAAA,GAAA;AAUL,IAAK,yBAAL,kBAAKC,4BAAL;AACL,EAAAA,wBAAA,WAAQ;AACR,EAAAA,wBAAA,gBAAa;AACb,EAAAA,wBAAA,kBAAe;AACf,EAAAA,wBAAA,oBAAiB;AACjB,EAAAA,wBAAA,UAAO;AACP,EAAAA,wBAAA,cAAW;AAND,SAAAA;AAAA,GAAA;AASL,MAAM,wCAAwC,CAAC,iBAQhD;AACJ,MAAI,CAAC,aAAa,yBAAyB;AACzC,WAAO;AAAA,EACT;AACA,UAAQ,aAAa,wBAAwB,UAAU,eAAe;AAAA,IACpE,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAUO,SAAS,0BACd,wBACoC;AACpC,UAAQ,wBAAwB;AAAA,IAC9B,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AASO,SAAS,sBAAsB,cAOH;AACjC,MAAI,CAAC,aAAa,yBAAyB;AACzC,WAAO;AAAA,EACT;AACA,UAAQ,aAAa,wBAAwB,UAAU,eAAe;AAAA,IACpE,KAAK;AACH,UAAI,aAAa,wBAAwB,mBAAmB;AAC1D,eAAO;AAAA,MACT,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum SalesPlanType {\n  ENTERPRISE = 'enterprise',\n  TRIAL = 'trial',\n  FREE = 'free',\n  FREE_TP_PAID_REQUEST = 'free-to-paid-request',\n  IN_NEGOTIATION = 'in-negotiation',\n  INTERNAL = 'internal',\n}\n\nexport const OPTIMIZE_DISABLED_PLAN_TYPES: SalesPlanType[] = [\n  SalesPlanType.TRIAL,\n]\n\n// eslint-disable-next-line no-shadow\nexport enum AnalyticsSalesPlanType {\n  TRIAL = 'trial',\n  ENTERPRISE = 'enterprise',\n  EARLY_ACCESS = 'early-access',\n  IN_NEGOTIATION = 'in-negotiation',\n  FREE = 'free',\n  INTERNAL = 'internal',\n}\n\nexport const getAnalyticsSalesPlanFromOrgSalesPlan = (organization: {\n  organizationToSalesPlan?: {\n    trialStateExpired?: boolean\n    salesPlan: {\n      salesPlanType: SalesPlanType | string\n      version: number\n    }\n  }\n}) => {\n  if (!organization.organizationToSalesPlan) {\n    return undefined\n  }\n  switch (organization.organizationToSalesPlan.salesPlan.salesPlanType) {\n    case SalesPlanType.TRIAL:\n      return AnalyticsSalesPlanType.TRIAL\n    case SalesPlanType.ENTERPRISE:\n      return AnalyticsSalesPlanType.ENTERPRISE\n    case SalesPlanType.INTERNAL:\n      return AnalyticsSalesPlanType.INTERNAL\n    case SalesPlanType.IN_NEGOTIATION:\n      return AnalyticsSalesPlanType.IN_NEGOTIATION\n    default:\n      return undefined\n  }\n}\n\n// https://github.com/camunda/camunda-cloud-management-apps/issues/2809\nexport type RevisitedSalesPlanName =\n  | 'Camunda SaaS Trial'\n  | 'Camunda SaaS Modeling'\n  | 'Enterprise'\n  | 'In Negotiation'\n  | 'Internal'\n\nexport function getRevisitedSalesPlanName(\n  displayedSalesPlanName: DisplayedSalesPlan | undefined,\n): RevisitedSalesPlanName | undefined {\n  switch (displayedSalesPlanName) {\n    case 'Free Trial':\n      return 'Camunda SaaS Trial'\n    case 'Free':\n      return 'Camunda SaaS Modeling'\n    default:\n      return displayedSalesPlanName\n  }\n}\n\nexport type DisplayedSalesPlan =\n  | 'Free Trial'\n  | 'Free'\n  | 'Enterprise'\n  | 'In Negotiation'\n  | 'Internal'\n\nexport function getDisplayedSalesPlan(organization: {\n  organizationToSalesPlan?: {\n    trialStateExpired?: boolean\n    salesPlan: {\n      salesPlanType: SalesPlanType | string\n    }\n  }\n}): DisplayedSalesPlan | undefined {\n  if (!organization.organizationToSalesPlan) {\n    return undefined\n  }\n  switch (organization.organizationToSalesPlan.salesPlan.salesPlanType) {\n    case SalesPlanType.TRIAL:\n      if (organization.organizationToSalesPlan.trialStateExpired) {\n        return 'Free'\n      } else {\n        return 'Free Trial'\n      }\n    case SalesPlanType.ENTERPRISE:\n      return 'Enterprise'\n    case SalesPlanType.INTERNAL:\n      return 'Internal'\n    case SalesPlanType.IN_NEGOTIATION:\n      return 'In Negotiation'\n    default:\n      return undefined\n  }\n}\n"],
+  "mappings": "AAOO,IAAK,gBAAL,kBAAKA,mBAAL;AACL,EAAAA,eAAA,gBAAa;AACb,EAAAA,eAAA,WAAQ;AACR,EAAAA,eAAA,UAAO;AACP,EAAAA,eAAA,0BAAuB;AACvB,EAAAA,eAAA,oBAAiB;AACjB,EAAAA,eAAA,cAAW;AAND,SAAAA;AAAA,GAAA;AASL,MAAM,+BAAgD;AAAA,EAC3D;AACF;AAGO,IAAK,yBAAL,kBAAKC,4BAAL;AACL,EAAAA,wBAAA,WAAQ;AACR,EAAAA,wBAAA,gBAAa;AACb,EAAAA,wBAAA,kBAAe;AACf,EAAAA,wBAAA,oBAAiB;AACjB,EAAAA,wBAAA,UAAO;AACP,EAAAA,wBAAA,cAAW;AAND,SAAAA;AAAA,GAAA;AASL,MAAM,wCAAwC,CAAC,iBAQhD;AACJ,MAAI,CAAC,aAAa,yBAAyB;AACzC,WAAO;AAAA,EACT;AACA,UAAQ,aAAa,wBAAwB,UAAU,eAAe;AAAA,IACpE,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAUO,SAAS,0BACd,wBACoC;AACpC,UAAQ,wBAAwB;AAAA,IAC9B,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AASO,SAAS,sBAAsB,cAOH;AACjC,MAAI,CAAC,aAAa,yBAAyB;AACzC,WAAO;AAAA,EACT;AACA,UAAQ,aAAa,wBAAwB,UAAU,eAAe;AAAA,IACpE,KAAK;AACH,UAAI,aAAa,wBAAwB,mBAAmB;AAC1D,eAAO;AAAA,MACT,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;",
   "names": ["SalesPlanType", "AnalyticsSalesPlanType"]
 }

package/dist/types/hdp.types.d.ts

@@ -18,6 +18,7 @@ export interface Cluster {
     autoUpdate: boolean;
     mcpEnabled?: boolean;
     businessIdUniquenessEnabled?: boolean;
+    optimizeEnabled?: boolean;
     tags?: string[];
     sleeping?: boolean;
     activeModifications: boolean;
@@ -126,6 +127,16 @@ export interface ConnectorSecret {
     clusterUuid: string;
     amountOfSecrets: number;
 }
+export interface ByomClient {
+    uuid: string;
+    clusterUuid?: string;
+    username: string;
+}
+export interface SecureConnectivity {
+    clusterUuid: string;
+    allowedRegions: string[];
+    allowedPrincipals: string[];
+}
 export interface ClusterClient {
     uuid: string;
     name: string;
@@ -222,7 +233,7 @@ export interface LlmSpend {
     spend: number;
     maxBudget: number;
 }
-export type HdpEntity = 'cluster' | 'clusterBackup' | 'clusterBackupSchedule' | 'clusterRestore' | 'datacenter' | 'generation' | 'channel' | 'clusterPlan' | 'clusterPlanType' | 'alertSubscription' | 'consoleApiClient' | 'connectorSecret' | 'clusterClient' | 'organization' | 'user' | 'invite' | 'usageAlert' | 'audit' | 'telemetry' | 'userlogin' | 'clusterBulkOperation' | 'clusterModification' | 'clusterModificationConfig' | 'llmSpend';
+export type HdpEntity = 'cluster' | 'clusterBackup' | 'clusterBackupSchedule' | 'clusterRestore' | 'datacenter' | 'generation' | 'channel' | 'clusterPlan' | 'clusterPlanType' | 'alertSubscription' | 'consoleApiClient' | 'connectorSecret' | 'byomClient' | 'secureConnectivity' | 'clusterClient' | 'organization' | 'user' | 'invite' | 'usageAlert' | 'audit' | 'telemetry' | 'userlogin' | 'clusterBulkOperation' | 'clusterModification' | 'clusterModificationConfig' | 'llmSpend';
 export interface HdpPrometheusDataCapacityDataPoint {
     clusterId?: string;
     ts: number;

package/dist/types/hdp.types.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/hdp.types.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Limits } from '../dtos/SalesPlan.dto.js'\nimport type { UsageAlertMetric } from '../dtos/UsageAlert.dto.js'\nimport type { ClusterClientPermission } from '../enums/ClusterClientPermissions.enum.js'\nimport type { ConsoleAPIClientPermission } from '../enums/ConsoleApiClientPermission.enum.js'\nimport type { OrganizationRole } from '../enums/OrganizationRole.enum.js'\nimport type { DisplayedSalesPlan, SalesPlanType } from './SalesPlanType.type.js'\n\nexport interface Cluster {\n  uuid: string\n  name: string\n  clusterPlanType: ClusterPlanType\n  clusterPlan: ClusterPlan\n  generation: Generation\n  channel: Channel\n  datacenter?: Datacenter // is not fetched eagerly, if we do not have it we just gonna omit it\n  amountOfIpWhitelistRules: number\n  ownerUuid: string\n  created: Date\n  autoUpdate: boolean\n  mcpEnabled?: boolean\n  businessIdUniquenessEnabled?: boolean\n  tags?: string[]\n  sleeping?: boolean\n  activeModifications: boolean\n  encryptionKeysSet?: {\n    primaryConfigured: boolean\n    secondaryConfigured: boolean\n  }\n}\nexport interface ClusterBackup {\n  clusterId: string\n  backupId?: string\n}\n\nexport interface ClusterModification {\n  uuid: string\n  clusterUuid: string\n  owner: string\n  createdAt?: Date\n  archivedAt?: Date\n}\n\nexport interface ClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n  yoloJustification?: string\n}\n\n/**\n * HDP-specific interface for ClusterModificationConfig.\n * Used for Holy Data Platform integration - keeps Date objects for timestamp fields.\n */\nexport interface HdpClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n}\n\nexport interface ClusterBackupSchedule {\n  clusterId: string\n  schedule?: string\n}\n\nexport interface ClusterPlanType {\n  uuid: string\n  name: string\n  availabilityClass: string\n  isDevelopment: boolean\n}\n\nexport interface ClusterPlan {\n  uuid: string\n  name: string\n}\n\nexport interface Datacenter {\n  uuid: string\n  name: string\n}\nexport interface Generation {\n  uuid: string\n  name: string\n}\nexport interface Channel {\n  uuid: string\n  name: string\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionType {\n  ClusterAlert = 'ClusterAlert',\n  ProcessAlert = 'ProcessAlert',\n  AllAlerts = 'AllAlerts',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionReportType {\n  Email = 'Email',\n  Webhook = 'Webhook',\n}\nexport interface AlertSubscription {\n  uuid: string\n  clusterUuid?: string\n  target: string // userIdOrWebhook\n  reportType: AlertSubscriptionReportType\n  type: AlertSubscriptionType\n}\n\nexport interface ConsoleApiClient {\n  uuid: string\n  name: string\n  organizationUuid: string\n  permissions: ConsoleAPIClientPermission[]\n}\n\nexport interface ConnectorSecret {\n  clusterUuid: string\n  amountOfSecrets: number\n}\n\nexport interface ClusterClient {\n  uuid: string\n  name: string\n  clusterUuid?: string\n  clientId: string\n  permissions: ClusterClientPermission[]\n}\n\nexport interface Organization {\n  uuid: string\n  name: string\n  salesplan?: {\n    type: SalesPlanType // might be undefined when in limbo\n    displayedType?: DisplayedSalesPlan // might be undefined when in limbo\n    uuid: string // might be undefined when in limbo\n    name: string // might be undefined when in limbo\n    expireDate?: Date\n  }\n  reservations?: {\n    [key: string]: number\n  }\n  earlyAccessFeatures?: string[]\n  justOptedForTheBetaTerms?: boolean\n  salesForceProjectId?: string\n  awsOnly?: boolean\n  limits?: Limits\n}\n\nexport interface User {\n  name: string\n  email: string\n  userId: string\n  orgMemberships?: Array<{ orgUuid: string; roles: OrganizationRole[] }> // can be undefined which means: no new info ;)\n}\n\nexport interface UserLogin {\n  userId: string\n}\n\nexport interface Invite {\n  email: string\n  orgUuid: string\n  roles: OrganizationRole[]\n}\n\nexport interface UsageAlert {\n  orgId: string\n  metric: UsageAlertMetric\n  threshold: number\n  enabled: boolean\n  triggered: boolean\n}\n\nexport interface Audit {\n  service: string\n  orgId: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string\n  entityAttributeValueFrom?: string\n  entityAttributeValueTo?: string\n  parentEntity?: string\n  parentEntityId?: string\n}\n\nexport interface TelemetryData {\n  customerId: string\n  installationId: string\n  entities: Array<{ id: string; type: string }>\n  key: string\n  value: string | number | boolean\n  tags?: Record<string, string>\n  timestampFrom: number\n  timestampTo?: number\n}\n\nexport interface ClusterBulkOperation {\n  uuid: string\n  name: string\n  reason: string\n  eyes: number\n  clusterUuids: string[]\n  type: string\n  created: Date\n  updated?: Date\n  executedAt?: Date\n  createdBy: string\n}\n\nexport interface LlmSpend {\n  orgId: string\n  salesPlanType: SalesPlanType\n  spend: number\n  maxBudget: number\n}\n\nexport type HdpEntity =\n  | 'cluster'\n  | 'clusterBackup'\n  | 'clusterBackupSchedule'\n  | 'clusterRestore'\n  | 'datacenter'\n  | 'generation'\n  | 'channel'\n  | 'clusterPlan'\n  | 'clusterPlanType'\n  | 'alertSubscription'\n  | 'consoleApiClient'\n  | 'connectorSecret'\n  | 'clusterClient'\n  | 'organization'\n  | 'user'\n  | 'invite'\n  | 'usageAlert'\n  | 'audit'\n  | 'telemetry'\n  | 'userlogin'\n  | 'clusterBulkOperation'\n  | 'clusterModification'\n  | 'clusterModificationConfig'\n  | 'llmSpend'\n\nexport interface HdpPrometheusDataCapacityDataPoint {\n  clusterId?: string\n  ts: number\n  avg: number\n  min: number\n  max: number\n}\n\nexport interface HdpBackendChangeEvent {\n  ts: number\n  data: {\n    stage: string\n    entity: string\n    operation: string\n    data: any\n  }\n}\n"],
-  "mappings": "AAsHO,IAAK,wBAAL,kBAAKA,2BAAL;AACL,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAOL,IAAK,8BAAL,kBAAKC,iCAAL;AACL,EAAAA,6BAAA,WAAQ;AACR,EAAAA,6BAAA,aAAU;AAFA,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Limits } from '../dtos/SalesPlan.dto.js'\nimport type { UsageAlertMetric } from '../dtos/UsageAlert.dto.js'\nimport type { ClusterClientPermission } from '../enums/ClusterClientPermissions.enum.js'\nimport type { ConsoleAPIClientPermission } from '../enums/ConsoleApiClientPermission.enum.js'\nimport type { OrganizationRole } from '../enums/OrganizationRole.enum.js'\nimport type { DisplayedSalesPlan, SalesPlanType } from './SalesPlanType.type.js'\n\nexport interface Cluster {\n  uuid: string\n  name: string\n  clusterPlanType: ClusterPlanType\n  clusterPlan: ClusterPlan\n  generation: Generation\n  channel: Channel\n  datacenter?: Datacenter // is not fetched eagerly, if we do not have it we just gonna omit it\n  amountOfIpWhitelistRules: number\n  ownerUuid: string\n  created: Date\n  autoUpdate: boolean\n  mcpEnabled?: boolean\n  businessIdUniquenessEnabled?: boolean\n  optimizeEnabled?: boolean\n  tags?: string[]\n  sleeping?: boolean\n  activeModifications: boolean\n  encryptionKeysSet?: {\n    primaryConfigured: boolean\n    secondaryConfigured: boolean\n  }\n}\nexport interface ClusterBackup {\n  clusterId: string\n  backupId?: string\n}\n\nexport interface ClusterModification {\n  uuid: string\n  clusterUuid: string\n  owner: string\n  createdAt?: Date\n  archivedAt?: Date\n}\n\nexport interface ClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n  yoloJustification?: string\n}\n\n/**\n * HDP-specific interface for ClusterModificationConfig.\n * Used for Holy Data Platform integration - keeps Date objects for timestamp fields.\n */\nexport interface HdpClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n}\n\nexport interface ClusterBackupSchedule {\n  clusterId: string\n  schedule?: string\n}\n\nexport interface ClusterPlanType {\n  uuid: string\n  name: string\n  availabilityClass: string\n  isDevelopment: boolean\n}\n\nexport interface ClusterPlan {\n  uuid: string\n  name: string\n}\n\nexport interface Datacenter {\n  uuid: string\n  name: string\n}\nexport interface Generation {\n  uuid: string\n  name: string\n}\nexport interface Channel {\n  uuid: string\n  name: string\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionType {\n  ClusterAlert = 'ClusterAlert',\n  ProcessAlert = 'ProcessAlert',\n  AllAlerts = 'AllAlerts',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionReportType {\n  Email = 'Email',\n  Webhook = 'Webhook',\n}\nexport interface AlertSubscription {\n  uuid: string\n  clusterUuid?: string\n  target: string // userIdOrWebhook\n  reportType: AlertSubscriptionReportType\n  type: AlertSubscriptionType\n}\n\nexport interface ConsoleApiClient {\n  uuid: string\n  name: string\n  organizationUuid: string\n  permissions: ConsoleAPIClientPermission[]\n}\n\nexport interface ConnectorSecret {\n  clusterUuid: string\n  amountOfSecrets: number\n}\n\nexport interface ByomClient {\n  uuid: string\n  clusterUuid?: string\n  username: string\n}\n\nexport interface SecureConnectivity {\n  clusterUuid: string\n  allowedRegions: string[]\n  allowedPrincipals: string[]\n}\n\nexport interface ClusterClient {\n  uuid: string\n  name: string\n  clusterUuid?: string\n  clientId: string\n  permissions: ClusterClientPermission[]\n}\n\nexport interface Organization {\n  uuid: string\n  name: string\n  salesplan?: {\n    type: SalesPlanType // might be undefined when in limbo\n    displayedType?: DisplayedSalesPlan // might be undefined when in limbo\n    uuid: string // might be undefined when in limbo\n    name: string // might be undefined when in limbo\n    expireDate?: Date\n  }\n  reservations?: {\n    [key: string]: number\n  }\n  earlyAccessFeatures?: string[]\n  justOptedForTheBetaTerms?: boolean\n  salesForceProjectId?: string\n  awsOnly?: boolean\n  limits?: Limits\n}\n\nexport interface User {\n  name: string\n  email: string\n  userId: string\n  orgMemberships?: Array<{ orgUuid: string; roles: OrganizationRole[] }> // can be undefined which means: no new info ;)\n}\n\nexport interface UserLogin {\n  userId: string\n}\n\nexport interface Invite {\n  email: string\n  orgUuid: string\n  roles: OrganizationRole[]\n}\n\nexport interface UsageAlert {\n  orgId: string\n  metric: UsageAlertMetric\n  threshold: number\n  enabled: boolean\n  triggered: boolean\n}\n\nexport interface Audit {\n  service: string\n  orgId: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string\n  entityAttributeValueFrom?: string\n  entityAttributeValueTo?: string\n  parentEntity?: string\n  parentEntityId?: string\n}\n\nexport interface TelemetryData {\n  customerId: string\n  installationId: string\n  entities: Array<{ id: string; type: string }>\n  key: string\n  value: string | number | boolean\n  tags?: Record<string, string>\n  timestampFrom: number\n  timestampTo?: number\n}\n\nexport interface ClusterBulkOperation {\n  uuid: string\n  name: string\n  reason: string\n  eyes: number\n  clusterUuids: string[]\n  type: string\n  created: Date\n  updated?: Date\n  executedAt?: Date\n  createdBy: string\n}\n\nexport interface LlmSpend {\n  orgId: string\n  salesPlanType: SalesPlanType\n  spend: number\n  maxBudget: number\n}\n\nexport type HdpEntity =\n  | 'cluster'\n  | 'clusterBackup'\n  | 'clusterBackupSchedule'\n  | 'clusterRestore'\n  | 'datacenter'\n  | 'generation'\n  | 'channel'\n  | 'clusterPlan'\n  | 'clusterPlanType'\n  | 'alertSubscription'\n  | 'consoleApiClient'\n  | 'connectorSecret'\n  | 'byomClient'\n  | 'secureConnectivity'\n  | 'clusterClient'\n  | 'organization'\n  | 'user'\n  | 'invite'\n  | 'usageAlert'\n  | 'audit'\n  | 'telemetry'\n  | 'userlogin'\n  | 'clusterBulkOperation'\n  | 'clusterModification'\n  | 'clusterModificationConfig'\n  | 'llmSpend'\n\nexport interface HdpPrometheusDataCapacityDataPoint {\n  clusterId?: string\n  ts: number\n  avg: number\n  min: number\n  max: number\n}\n\nexport interface HdpBackendChangeEvent {\n  ts: number\n  data: {\n    stage: string\n    entity: string\n    operation: string\n    data: any\n  }\n}\n"],
+  "mappings": "AAuHO,IAAK,wBAAL,kBAAKA,2BAAL;AACL,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAOL,IAAK,8BAAL,kBAAKC,iCAAL;AACL,EAAAA,6BAAA,WAAQ;AACR,EAAAA,6BAAA,aAAU;AAFA,SAAAA;AAAA,GAAA;",
   "names": ["AlertSubscriptionType", "AlertSubscriptionReportType"]
 }

package/dist/utils/encryptionStatus.utils.d.ts

@@ -0,0 +1,15 @@
+export type EncryptionStatus = 'Ready' | 'ProviderError' | 'ExternalEncryptionKeyNotReady' | 'ExternalEncryptionKeyNotSupplied' | 'CreationError' | 'EncryptedStorageNotReady';
+export declare function isEncryptionStatus(value: string): value is EncryptionStatus;
+interface EncryptionStatusCondition {
+    type?: string;
+    reason?: string;
+    lastTransitionTime?: string | Date;
+}
+/**
+ * Pick the most recent `EncryptionReady` condition from the operator-reported
+ * status conditions list and map its `reason` to an `EncryptionStatus`.
+ * Falls back to `ExternalEncryptionKeyNotSupplied` if no condition exists or
+ * the reason is unrecognised.
+ */
+export declare function deriveEncryptionStatus(conditions: EncryptionStatusCondition[] | undefined): EncryptionStatus;
+export {};

package/dist/utils/encryptionStatus.utils.js

@@ -0,0 +1,17 @@
+function isEncryptionStatus(value) {
+  return value === "Ready" || value === "ProviderError" || value === "ExternalEncryptionKeyNotReady" || value === "ExternalEncryptionKeyNotSupplied" || value === "CreationError" || value === "EncryptedStorageNotReady";
+}
+function deriveEncryptionStatus(conditions) {
+  const encryptionReady = (conditions ?? []).filter((c) => c.type === "EncryptionReady").slice().sort((a, b) => {
+    const aTime = new Date(a.lastTransitionTime ?? 0).getTime();
+    const bTime = new Date(b.lastTransitionTime ?? 0).getTime();
+    return (Number.isFinite(bTime) ? bTime : 0) - (Number.isFinite(aTime) ? aTime : 0);
+  })[0];
+  const reason = encryptionReady?.reason ?? "ExternalEncryptionKeyNotSupplied";
+  return isEncryptionStatus(reason) ? reason : "ExternalEncryptionKeyNotSupplied";
+}
+export {
+  deriveEncryptionStatus,
+  isEncryptionStatus
+};
+//# sourceMappingURL=encryptionStatus.utils.js.map

package/dist/utils/encryptionStatus.utils.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/encryptionStatus.utils.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// Reason values the operator emits on the EncryptionReady condition. Shared\n// between the C4 encryption tab and the customer API's GET /clusters/:id\n// response so both surfaces report the same status string.\nexport type EncryptionStatus =\n  | 'Ready'\n  | 'ProviderError'\n  | 'ExternalEncryptionKeyNotReady'\n  | 'ExternalEncryptionKeyNotSupplied'\n  | 'CreationError'\n  | 'EncryptedStorageNotReady'\n\nexport function isEncryptionStatus(value: string): value is EncryptionStatus {\n  return (\n    value === 'Ready' ||\n    value === 'ProviderError' ||\n    value === 'ExternalEncryptionKeyNotReady' ||\n    value === 'ExternalEncryptionKeyNotSupplied' ||\n    value === 'CreationError' ||\n    value === 'EncryptedStorageNotReady'\n  )\n}\n\ninterface EncryptionStatusCondition {\n  type?: string\n  reason?: string\n  lastTransitionTime?: string | Date\n}\n\n/**\n * Pick the most recent `EncryptionReady` condition from the operator-reported\n * status conditions list and map its `reason` to an `EncryptionStatus`.\n * Falls back to `ExternalEncryptionKeyNotSupplied` if no condition exists or\n * the reason is unrecognised.\n */\nexport function deriveEncryptionStatus(\n  conditions: EncryptionStatusCondition[] | undefined,\n): EncryptionStatus {\n  const encryptionReady = (conditions ?? [])\n    .filter((c) => c.type === 'EncryptionReady')\n    .slice()\n    .sort((a, b) => {\n      const aTime = new Date(a.lastTransitionTime ?? 0).getTime()\n      const bTime = new Date(b.lastTransitionTime ?? 0).getTime()\n      return (\n        (Number.isFinite(bTime) ? bTime : 0) -\n        (Number.isFinite(aTime) ? aTime : 0)\n      )\n    })[0]\n\n  const reason = encryptionReady?.reason ?? 'ExternalEncryptionKeyNotSupplied'\n  return isEncryptionStatus(reason)\n    ? reason\n    : 'ExternalEncryptionKeyNotSupplied'\n}\n"],
+  "mappings": "AAiBO,SAAS,mBAAmB,OAA0C;AAC3E,SACE,UAAU,WACV,UAAU,mBACV,UAAU,mCACV,UAAU,sCACV,UAAU,mBACV,UAAU;AAEd;AAcO,SAAS,uBACd,YACkB;AAClB,QAAM,mBAAmB,cAAc,CAAC,GACrC,OAAO,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAC1C,MAAM,EACN,KAAK,CAAC,GAAG,MAAM;AACd,UAAM,QAAQ,IAAI,KAAK,EAAE,sBAAsB,CAAC,EAAE,QAAQ;AAC1D,UAAM,QAAQ,IAAI,KAAK,EAAE,sBAAsB,CAAC,EAAE,QAAQ;AAC1D,YACG,OAAO,SAAS,KAAK,IAAI,QAAQ,MACjC,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,EAEtC,CAAC,EAAE,CAAC;AAEN,QAAM,SAAS,iBAAiB,UAAU;AAC1C,SAAO,mBAAmB,MAAM,IAC5B,SACA;AACN;",
+  "names": []
+}

package/dist/utils/envVars.d.ts

@@ -0,0 +1,6 @@
+export interface EnvVarEntry {
+    name: string;
+    value: string;
+}
+export declare function parseEnvVars(raw: string | undefined): EnvVarEntry[];
+export declare function serializeEnvVars(entries: EnvVarEntry[]): string;

package/dist/utils/envVars.js

@@ -0,0 +1,91 @@
+function parseEnvVars(raw) {
+  if (!raw) return [];
+  const entries = [];
+  const n = raw.length;
+  let i = 0;
+  const isWhitespace = (ch) => /\s/.test(ch);
+  const isNameChar = (ch) => /[A-Za-z0-9_.-]/.test(ch);
+  const isNameStartChar = (ch) => /[A-Za-z_]/.test(ch);
+  while (i < n) {
+    while (i < n && isWhitespace(raw[i])) i++;
+    if (i >= n) break;
+    const nameStart = i;
+    while (i < n && isNameChar(raw[i])) i++;
+    const name = raw.slice(nameStart, i);
+    const nameValid = name.length > 0 && isNameStartChar(name[0]);
+    if (!nameValid || raw[i] !== "=") {
+      while (i < n && !isWhitespace(raw[i])) i++;
+      continue;
+    }
+    i++;
+    let value = "";
+    let malformed = false;
+    while (i < n && !isWhitespace(raw[i])) {
+      const ch = raw[i];
+      if (ch === '"') {
+        i++;
+        let closed = false;
+        while (i < n) {
+          const c = raw[i];
+          if (c === "\\" && i + 1 < n) {
+            const next = raw[i + 1];
+            if (next === '"' || next === "\\") {
+              value += next;
+              i += 2;
+              continue;
+            }
+            value += c;
+            i++;
+            continue;
+          }
+          if (c === '"') {
+            i++;
+            closed = true;
+            break;
+          }
+          value += c;
+          i++;
+        }
+        if (!closed) {
+          malformed = true;
+          break;
+        }
+      } else if (ch === "'") {
+        i++;
+        let closed = false;
+        while (i < n) {
+          if (raw[i] === "'") {
+            i++;
+            closed = true;
+            break;
+          }
+          value += raw[i];
+          i++;
+        }
+        if (!closed) {
+          malformed = true;
+          break;
+        }
+      } else {
+        value += ch;
+        i++;
+      }
+    }
+    if (malformed) continue;
+    entries.push({ name, value });
+  }
+  return entries;
+}
+function serializeEnvVars(entries) {
+  return entries.map(({ name, value }) => {
+    if (value === "") return `${name}=""`;
+    if (/^[^\s"'=\\]+$/.test(value)) return `${name}=${value}`;
+    const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+    return `${name}="${escaped}"`;
+  }).join(" ");
+}
+export {
+  parseEnvVars,
+  serializeEnvVars
+};
+//# sourceMappingURL=envVars.js.map

package/dist/utils/envVars.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/envVars.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport interface EnvVarEntry {\n  name: string\n  value: string\n}\n\nexport function parseEnvVars(raw: string | undefined): EnvVarEntry[] {\n  if (!raw) return []\n\n  const entries: EnvVarEntry[] = []\n  const n = raw.length\n  let i = 0\n\n  const isWhitespace = (ch: string): boolean => /\\s/.test(ch)\n  // Permissive name grammar: first char must be a letter or underscore (to\n  // disambiguate from values), subsequent chars also allow digits, hyphens,\n  // and dots. Real production data contains names like\n  // `CAMUNDA_CLIENT_ZEEBE_REST-ADDRESS` (k8s container env names allow `-`\n  // and `.`), so we cannot restrict to POSIX shell variable names here.\n  const isNameChar = (ch: string): boolean => /[A-Za-z0-9_.-]/.test(ch)\n  const isNameStartChar = (ch: string): boolean => /[A-Za-z_]/.test(ch)\n\n  while (i < n) {\n    while (i < n && isWhitespace(raw[i])) i++\n    if (i >= n) break\n\n    const nameStart = i\n    while (i < n && isNameChar(raw[i])) i++\n    const name = raw.slice(nameStart, i)\n\n    const nameValid = name.length > 0 && isNameStartChar(name[0])\n\n    if (!nameValid || raw[i] !== '=') {\n      while (i < n && !isWhitespace(raw[i])) i++\n      continue\n    }\n    i++\n\n    let value = ''\n    let malformed = false\n    while (i < n && !isWhitespace(raw[i])) {\n      const ch = raw[i]\n      if (ch === '\"') {\n        i++\n        let closed = false\n        while (i < n) {\n          const c = raw[i]\n          if (c === '\\\\' && i + 1 < n) {\n            const next = raw[i + 1]\n            if (next === '\"' || next === '\\\\') {\n              value += next\n              i += 2\n              continue\n            }\n            value += c\n            i++\n            continue\n          }\n          if (c === '\"') {\n            i++\n            closed = true\n            break\n          }\n          value += c\n          i++\n        }\n        if (!closed) {\n          malformed = true\n          break\n        }\n      } else if (ch === \"'\") {\n        i++\n        let closed = false\n        while (i < n) {\n          if (raw[i] === \"'\") {\n            i++\n            closed = true\n            break\n          }\n          value += raw[i]\n          i++\n        }\n        if (!closed) {\n          malformed = true\n          break\n        }\n      } else {\n        value += ch\n        i++\n      }\n    }\n\n    if (malformed) continue\n    entries.push({ name, value })\n  }\n\n  return entries\n}\n\nexport function serializeEnvVars(entries: EnvVarEntry[]): string {\n  return entries\n    .map(({ name, value }) => {\n      if (value === '') return `${name}=\"\"`\n      if (/^[^\\s\"'=\\\\]+$/.test(value)) return `${name}=${value}`\n      const escaped = value.replace(/\\\\/g, '\\\\\\\\').replace(/\"/g, '\\\\\"')\n      return `${name}=\"${escaped}\"`\n    })\n    .join(' ')\n}\n"],
+  "mappings": "AAWO,SAAS,aAAa,KAAwC;AACnE,MAAI,CAAC,IAAK,QAAO,CAAC;AAElB,QAAM,UAAyB,CAAC;AAChC,QAAM,IAAI,IAAI;AACd,MAAI,IAAI;AAER,QAAM,eAAe,CAAC,OAAwB,KAAK,KAAK,EAAE;AAM1D,QAAM,aAAa,CAAC,OAAwB,iBAAiB,KAAK,EAAE;AACpE,QAAM,kBAAkB,CAAC,OAAwB,YAAY,KAAK,EAAE;AAEpE,SAAO,IAAI,GAAG;AACZ,WAAO,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,EAAG;AACtC,QAAI,KAAK,EAAG;AAEZ,UAAM,YAAY;AAClB,WAAO,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,EAAG;AACpC,UAAM,OAAO,IAAI,MAAM,WAAW,CAAC;AAEnC,UAAM,YAAY,KAAK,SAAS,KAAK,gBAAgB,KAAK,CAAC,CAAC;AAE5D,QAAI,CAAC,aAAa,IAAI,CAAC,MAAM,KAAK;AAChC,aAAO,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,EAAG;AACvC;AAAA,IACF;AACA;AAEA,QAAI,QAAQ;AACZ,QAAI,YAAY;AAChB,WAAO,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG;AACrC,YAAM,KAAK,IAAI,CAAC;AAChB,UAAI,OAAO,KAAK;AACd;AACA,YAAI,SAAS;AACb,eAAO,IAAI,GAAG;AACZ,gBAAM,IAAI,IAAI,CAAC;AACf,cAAI,MAAM,QAAQ,IAAI,IAAI,GAAG;AAC3B,kBAAM,OAAO,IAAI,IAAI,CAAC;AACtB,gBAAI,SAAS,OAAO,SAAS,MAAM;AACjC,uBAAS;AACT,mBAAK;AACL;AAAA,YACF;AACA,qBAAS;AACT;AACA;AAAA,UACF;AACA,cAAI,MAAM,KAAK;AACb;AACA,qBAAS;AACT;AAAA,UACF;AACA,mBAAS;AACT;AAAA,QACF;AACA,YAAI,CAAC,QAAQ;AACX,sBAAY;AACZ;AAAA,QACF;AAAA,MACF,WAAW,OAAO,KAAK;AACrB;AACA,YAAI,SAAS;AACb,eAAO,IAAI,GAAG;AACZ,cAAI,IAAI,CAAC,MAAM,KAAK;AAClB;AACA,qBAAS;AACT;AAAA,UACF;AACA,mBAAS,IAAI,CAAC;AACd;AAAA,QACF;AACA,YAAI,CAAC,QAAQ;AACX,sBAAY;AACZ;AAAA,QACF;AAAA,MACF,OAAO;AACL,iBAAS;AACT;AAAA,MACF;AAAA,IACF;AAEA,QAAI,UAAW;AACf,YAAQ,KAAK,EAAE,MAAM,MAAM,CAAC;AAAA,EAC9B;AAEA,SAAO;AACT;AAEO,SAAS,iBAAiB,SAAgC;AAC/D,SAAO,QACJ,IAAI,CAAC,EAAE,MAAM,MAAM,MAAM;AACxB,QAAI,UAAU,GAAI,QAAO,GAAG,IAAI;AAChC,QAAI,gBAAgB,KAAK,KAAK,EAAG,QAAO,GAAG,IAAI,IAAI,KAAK;AACxD,UAAM,UAAU,MAAM,QAAQ,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAK;AAChE,WAAO,GAAG,IAAI,KAAK,OAAO;AAAA,EAC5B,CAAC,EACA,KAAK,GAAG;AACb;",
+  "names": []
+}

package/dist/utils/kmsArn.utils.d.ts

@@ -0,0 +1,17 @@
+export declare const KMS_ARN: RegExp;
+export declare const KMS_MRK_ARN: RegExp;
+export interface ParsedKmsArn {
+    region: string;
+    isMultiRegion: boolean;
+}
+/**
+ * Parse an AWS KMS key ARN. Returns null for malformed input.
+ * Accepts both single-region and multi-region key ARNs.
+ */
+export declare function parseKmsArn(arn: string): ParsedKmsArn | null;
+export type KmsArnValidationError = 'INVALID_FORMAT' | 'WRONG_REGION';
+/**
+ * Validate that a KMS ARN is well-formed AND its embedded region matches
+ * the expected region (case-insensitive). Returns null on success.
+ */
+export declare function validateKmsArnForRegion(arn: string, expectedRegion: string): KmsArnValidationError | null;

package/dist/utils/kmsArn.utils.js

@@ -0,0 +1,28 @@
+const KMS_ARN = /^arn:aws:kms:(?<region>[a-z0-9-]+):\d{12}:key\/[a-f0-9-]{36}$/u;
+const KMS_MRK_ARN = /^arn:aws:kms:(?<region>[a-z0-9-]+):\d{12}:key\/mrk-[a-f0-9-]{32}$/u;
+function parseKmsArn(arn) {
+  const mrk = KMS_MRK_ARN.exec(arn);
+  if (mrk?.groups?.region) {
+    return { region: mrk.groups.region, isMultiRegion: true };
+  }
+  const single = KMS_ARN.exec(arn);
+  if (single?.groups?.region) {
+    return { region: single.groups.region, isMultiRegion: false };
+  }
+  return null;
+}
+function validateKmsArnForRegion(arn, expectedRegion) {
+  const parsed = parseKmsArn(arn);
+  if (!parsed) return "INVALID_FORMAT";
+  if (parsed.region.toLowerCase() !== expectedRegion.toLowerCase()) {
+    return "WRONG_REGION";
+  }
+  return null;
+}
+export {
+  KMS_ARN,
+  KMS_MRK_ARN,
+  parseKmsArn,
+  validateKmsArnForRegion
+};
+//# sourceMappingURL=kmsArn.utils.js.map

package/dist/utils/kmsArn.utils.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/kmsArn.utils.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// Single-region KMS key: 36-char UUID with dashes (8-4-4-4-12 hex).\nexport const KMS_ARN =\n  /^arn:aws:kms:(?<region>[a-z0-9-]+):\\d{12}:key\\/[a-f0-9-]{36}$/u\n\n// Multi-region KMS key: \"mrk-\" prefix + 32 hex characters.\nexport const KMS_MRK_ARN =\n  /^arn:aws:kms:(?<region>[a-z0-9-]+):\\d{12}:key\\/mrk-[a-f0-9-]{32}$/u\n\nexport interface ParsedKmsArn {\n  region: string\n  isMultiRegion: boolean\n}\n\n/**\n * Parse an AWS KMS key ARN. Returns null for malformed input.\n * Accepts both single-region and multi-region key ARNs.\n */\nexport function parseKmsArn(arn: string): ParsedKmsArn | null {\n  const mrk = KMS_MRK_ARN.exec(arn)\n  if (mrk?.groups?.region) {\n    return { region: mrk.groups.region, isMultiRegion: true }\n  }\n  const single = KMS_ARN.exec(arn)\n  if (single?.groups?.region) {\n    return { region: single.groups.region, isMultiRegion: false }\n  }\n  return null\n}\n\nexport type KmsArnValidationError = 'INVALID_FORMAT' | 'WRONG_REGION'\n/**\n * Validate that a KMS ARN is well-formed AND its embedded region matches\n * the expected region (case-insensitive). Returns null on success.\n */\nexport function validateKmsArnForRegion(\n  arn: string,\n  expectedRegion: string,\n): KmsArnValidationError | null {\n  const parsed = parseKmsArn(arn)\n  if (!parsed) return 'INVALID_FORMAT'\n  if (parsed.region.toLowerCase() !== expectedRegion.toLowerCase()) {\n    return 'WRONG_REGION'\n  }\n  return null\n}\n"],
+  "mappings": "AAOO,MAAM,UACX;AAGK,MAAM,cACX;AAWK,SAAS,YAAY,KAAkC;AAC5D,QAAM,MAAM,YAAY,KAAK,GAAG;AAChC,MAAI,KAAK,QAAQ,QAAQ;AACvB,WAAO,EAAE,QAAQ,IAAI,OAAO,QAAQ,eAAe,KAAK;AAAA,EAC1D;AACA,QAAM,SAAS,QAAQ,KAAK,GAAG;AAC/B,MAAI,QAAQ,QAAQ,QAAQ;AAC1B,WAAO,EAAE,QAAQ,OAAO,OAAO,QAAQ,eAAe,MAAM;AAAA,EAC9D;AACA,SAAO;AACT;AAOO,SAAS,wBACd,KACA,gBAC8B;AAC9B,QAAM,SAAS,YAAY,GAAG;AAC9B,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,OAAO,OAAO,YAAY,MAAM,eAAe,YAAY,GAAG;AAChE,WAAO;AAAA,EACT;AACA,SAAO;AACT;",
+  "names": []
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camunda/ccma-shared-types",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Shared TypeScript types for Camunda Cloud Management Apps",
   "bugs": {
     "url": "https://github.com/camunda/camunda-cloud-management-apps/issues"
@@ -23,7 +23,7 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "semver": "7.8.0"
+    "semver": "7.8.4"
   },
   "scripts": {
     "build": "node esbuild.mjs && tsc --emitDeclarationOnly --outDir dist",