@camunda/ccma-shared-types 0.1.2 → 0.1.3

package/dist/permissions/console.permissions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/permissions/console.permissions.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport namespace ConsolePermissions {\n  export const MULTICLUSTER_ADMIN = 'cmca'\n\n  export const CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS = 'cmgda'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_SEE = 'cmgas'\n  export const CHANNELS_AND_GENERATIONS_ADMIN = 'cmga'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL = 'cmgap'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE = 'cmgam'\n  export const CHANNELS_AND_GENERATIONS_MIGRATE = 'cmgm'\n  export const ALL_CHANNELS_AND_GENERATIONS: string[] = [\n    CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n    CHANNELS_AND_GENERATIONS_ADMIN,\n    CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n  ]\n  export const CLUSTERS_READALLCLUSTERINFO = 'ccrai'\n  export const CLUSTERS_DELETE_CLUSTER = 'ccda'\n  export const CLUSTERS_CAN_MOVE_TO_OTHER_ORG = 'ccmoo'\n  export const CLUSTERS_CAN_SEND_TO_SLEEP = 'ccsts'\n  export const CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE = 'ccucp'\n  export const CLUSTERS_CAN_UPDATE_GENERATION = 'ccug'\n  export const CLUSTERS_CAN_UPDATE_GENERATION_YOLO = 'ccugy'\n\n  export const CLUSTER_PLAN_SEE_ALL = 'ccpa'\n  export const CLUSTER_PLAN_CREATE = 'ccpc'\n  export const CLUSTER_PLAN_DELETE = 'ccpd'\n\n  export const CLUSTER_PLAN_TYPE_CREATE = 'cptc'\n  export const CLUSTER_PLAN_TYPE_MODIFY = 'cptm'\n  export const CLUSTER_PLAN_TYPE_DELETE = 'cptd'\n  export const CLUSTER_PLAN_TYPE_FORCE_DELETE = 'cptfd'\n\n  export const CLUSTER_PLAN_MIGRATE = 'ccpm'\n  export const CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN = 'ccpda'\n  export const CLUSTER_PLAN_CAN_MODIFY = 'ccpmo'\n\n  export const M2M_UPDATE_CRD = 'cmuc'\n  export const M2M_SIGNUP = 'cms'\n  export const M2M_TRIGGER_ALERT = 'cmta'\n  export const M2M_DELETE_ORG_CLUSTERS = 'cmdoc'\n  export const M2M_UPDATE_ORG_CLUSTERS = 'cmuoc'\n  export const M2M_ADD_CLUSTER_USAGE_METRICS = 'cmacm'\n  export const M2M_SEND_SSE_EVENT = 'cmsse'\n  export const M2M_EXTERNAL_INTERNAL_CLIENT = 'cmeic'\n  export const M2M_FETCH_MIGRATION_DATA = 'cmfmd'\n  export const M2M_MANAGE_GENERATION_UPGRADE_PATH = 'cmmgup'\n  export const CLUSTER_CREATE_ON_BEHALF = 'cccob'\n  export const FEATURE_NEW_HOME = 'cfnh'\n  export const FEATURE_TEMPLATE_PICKER = 'cftp'\n  export const USER_SETTINGS = 'cus'\n  export const CLUSTERS_CAN_OVERRIDE_ENV_VARS = 'ccoev'\n\n  export const DEBUG = 'cdbg'\n  export const GOD_TRIGGER_CRONS = 'gtc'\n\n  export const APICLIENT_READ = 'capr'\n  export const APICLIENT_DELETE = 'capd'\n\n  export interface Features {\n    apiClient: {\n      read: boolean\n      delete: boolean\n    }\n    multiCluster: {\n      admin: boolean\n    }\n    multiGen: {\n      admin: {\n        see: boolean\n        modify: boolean\n        patchExistingChannel: boolean\n        migrate: boolean\n        deleteAllClustersOfGeneration: boolean\n      }\n    }\n    clusters: {\n      canReadAllClusterInfo: boolean\n      canDeleteAllClusters: boolean\n      canMoveToOtherOrg: boolean\n      createOnBehalf: boolean\n      canSendToSleep: boolean\n      canUpdateClusterPlanType: boolean\n      canOverrideEnvVars: boolean\n      canUpgradeGeneration: boolean\n      canUpgradeGenerationYolo: boolean\n    }\n    clusterPlan: {\n      seeAll: boolean\n      create: boolean\n      delete: boolean\n      type: {\n        create: boolean\n        modify: boolean\n        delete: boolean\n        forceDelete: boolean\n      }\n      migrate: boolean\n      deleteAllClustersOfPlan: boolean\n      modify: boolean\n    }\n    features: {\n      newHome: boolean\n      templatePicker: boolean\n      userSettings: boolean\n      debug: boolean\n    }\n    m2m: {\n      updateCrd: boolean\n      signup: boolean\n      triggerAlert: boolean\n      deleteOrgClusters: boolean\n      updateOrgClusters: boolean\n      addUsageMetrics: boolean\n      sendSseEvent: boolean\n      external: {\n        internalClient: boolean\n      }\n      fetchMigrationData: boolean\n      manageGenerationUpgradePath: boolean\n    }\n  }\n\n  export function createEmptyFeatures(): Features {\n    return {\n      apiClient: {\n        read: false,\n        delete: false,\n      },\n      multiCluster: { admin: false },\n      multiGen: {\n        admin: {\n          migrate: false,\n          modify: false,\n          patchExistingChannel: false,\n          see: false,\n          deleteAllClustersOfGeneration: false,\n        },\n      },\n      clusters: {\n        canReadAllClusterInfo: false,\n        canDeleteAllClusters: false,\n        canMoveToOtherOrg: false,\n        createOnBehalf: false,\n        canSendToSleep: false,\n        canUpdateClusterPlanType: false,\n        canOverrideEnvVars: false,\n        canUpgradeGeneration: false,\n        canUpgradeGenerationYolo: false,\n      },\n      clusterPlan: {\n        seeAll: false,\n        create: false,\n        delete: false,\n        type: {\n          create: false,\n          modify: false,\n          delete: false,\n          forceDelete: false,\n        },\n        migrate: false,\n        deleteAllClustersOfPlan: false,\n        modify: false,\n      },\n      features: {\n        newHome: false,\n        templatePicker: false,\n        userSettings: false,\n        debug: false,\n      },\n      m2m: {\n        updateCrd: false,\n        signup: false,\n        triggerAlert: false,\n        deleteOrgClusters: false,\n        updateOrgClusters: false,\n        addUsageMetrics: false,\n        sendSseEvent: false,\n        external: {\n          internalClient: false,\n        },\n        fetchMigrationData: false,\n        manageGenerationUpgradePath: false,\n      },\n    }\n  }\n\n  export const PermissionsAtAuth0: Array<{\n    value: string\n    description: string\n    initialRoles: Roles[]\n  }> = [\n    {\n      value: MULTICLUSTER_ADMIN,\n      description: 'can create and delete k8s clusters',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n      description: 'can go to the admin section for MultiGen, but no touch!',\n      initialRoles: [\n        'console:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n        'console:C8UpdateEnforcer',\n      ],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN,\n      description: 'can create channels, generations and combine them',\n      initialRoles: ['console:admin', 'console:C8ReleaseManager'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL,\n      description: 'can modify existing channels and combine them',\n      initialRoles: [\n        'console:admin',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n      ],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n      description:\n        'can migrate clusters of generations to supported other generations',\n      initialRoles: ['console:admin', 'console:C8UpdateEnforcer'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS,\n      description: 'can delete all clusters of a generation',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_MIGRATE,\n      description:\n        'can migrate owned clusters of generations to supported other generations',\n      initialRoles: [],\n    },\n    {\n      value: CLUSTERS_READALLCLUSTERINFO,\n      description: 'can read clusterInfo for all clusters',\n      initialRoles: [\n        'accounts:read',\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:editSalesPlans',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'console:admin',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTERS_DELETE_CLUSTER,\n      description: 'can delete clusters in all orgs',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: CLUSTERS_CAN_MOVE_TO_OTHER_ORG,\n      description: 'can move a cluster to another org the user is part of',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_SEE_ALL,\n      description: 'can see all ClusterPlans',\n      initialRoles: [\n        'console:admin',\n        'accounts:read',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:onboard',\n        'accounts:editSalesPlans',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTER_PLAN_CREATE,\n      description: 'can create ClusterPlans',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_DELETE,\n      description: 'can delete ClusterPlans',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_CREATE,\n      description: 'can create ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_DELETE,\n      description: 'can delete ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_FORCE_DELETE,\n      description: 'can delete ClusterPlanTypes',\n      initialRoles: ['console:god'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_MODIFY,\n      description: 'can modify ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_MIGRATE,\n      description: 'can migrate Clusters from one plan to another',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN,\n      description: 'can delete all clusters of a plan',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_CREATE_ON_BEHALF,\n      description:\n        'enables accounts to create clusters on signup (not a user permission)',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SIGNUP,\n      description: 'allows to signal to Console new user signups',\n      initialRoles: [],\n    },\n    { value: M2M_UPDATE_CRD, description: 'may update crds', initialRoles: [] },\n    {\n      value: M2M_TRIGGER_ALERT,\n      description: 'allows Infra and Operate to trigger alerts',\n      initialRoles: [],\n    },\n    {\n      value: M2M_DELETE_ORG_CLUSTERS,\n      description:\n        'allows trigger console to delete all clusters of an Organization',\n      initialRoles: [],\n    },\n    {\n      value: M2M_UPDATE_ORG_CLUSTERS,\n      description: 'allows to update clusters of an Organization',\n      initialRoles: [],\n    },\n    {\n      value: M2M_ADD_CLUSTER_USAGE_METRICS,\n      description: 'allows to trigger update of value metrics',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SEND_SSE_EVENT,\n      description: 'allows to trigger SSE events',\n      initialRoles: [],\n    },\n    {\n      value: M2M_EXTERNAL_INTERNAL_CLIENT,\n      description: 'allows to fetch internal clients',\n      initialRoles: [],\n    },\n    {\n      value: M2M_FETCH_MIGRATION_DATA,\n      description: 'allows to fetch migration data',\n      initialRoles: [],\n    },\n    {\n      value: M2M_MANAGE_GENERATION_UPGRADE_PATH,\n      description:\n        'allows to manage upgrade paths for generations via external API',\n      initialRoles: [],\n    },\n    {\n      value: FEATURE_NEW_HOME,\n      description: 'allows users to see new home',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: USER_SETTINGS,\n      description: 'allows users to see user settings',\n      initialRoles: ['console:admin', 'betatester:true'],\n    },\n    {\n      value: FEATURE_TEMPLATE_PICKER,\n      description: 'allows users to see template picker',\n      initialRoles: ['console:admin', 'betatester:true'],\n    },\n    {\n      value: CLUSTERS_CAN_SEND_TO_SLEEP,\n      description: 'may send a cluster to sleep and wake up',\n      initialRoles: [\n        'console:admin',\n        'accounts:admin',\n        'console:operationsEngineer',\n      ],\n    },\n    {\n      value: DEBUG,\n      description: 'can see additional debugging tools',\n      initialRoles: ['console:admin:readonly', 'console:admin'],\n    },\n    {\n      value: CLUSTERS_CAN_OVERRIDE_ENV_VARS,\n      description:\n        'can set Env Vars on cluster level that override all ClusterPlan Env Vars',\n      initialRoles: ['console:admin', 'console:operationsEngineer'],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n      description: 'can update clusterplantype of a running cluster',\n      initialRoles: [\n        'console:admin',\n        'accounts:onboard',\n        'console:operationsEngineer',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_GENERATION,\n      description: 'can update generation of a running cluster',\n      initialRoles: [\n        'console:admin',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_GENERATION_YOLO,\n      description:\n        'can update generation of a running cluster even if the generation is not reachable',\n      initialRoles: ['console:god'],\n    },\n    {\n      value: CLUSTER_PLAN_CAN_MODIFY,\n      description: 'can trigger modifications of a clusterplan',\n      initialRoles: ['console:admin', 'console:clusterPlanManager'],\n    },\n    {\n      value: APICLIENT_READ,\n      description: 'can read API Clients Names of Organizations',\n      initialRoles: ['accounts:read', 'accounts:orgCreator'],\n    },\n    {\n      value: APICLIENT_DELETE,\n      description: 'can read API Clients Names of Organizations',\n      initialRoles: ['accounts:god'],\n    },\n  ]\n}\n"],
-  "mappings": "AAQO,IAAU;AAAA,CAAV,CAAUA,wBAAV;AACE,EAAMA,oBAAA,qBAAqB;AAE3B,EAAMA,oBAAA,qDAAqD;AAC3D,EAAMA,oBAAA,qCAAqC;AAC3C,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,wDAAwD;AAC9D,EAAMA,oBAAA,yCAAyC;AAC/C,EAAMA,oBAAA,mCAAmC;AACzC,EAAMA,oBAAA,+BAAyC;AAAA,IACpDA,oBAAA;AAAA,IACAA,oBAAA;AAAA,IACAA,oBAAA;AAAA,EACF;AACO,EAAMA,oBAAA,8BAA8B;AACpC,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,6BAA6B;AACnC,EAAMA,oBAAA,sCAAsC;AAC5C,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,sCAAsC;AAE5C,EAAMA,oBAAA,uBAAuB;AAC7B,EAAMA,oBAAA,sBAAsB;AAC5B,EAAMA,oBAAA,sBAAsB;AAE5B,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,iCAAiC;AAEvC,EAAMA,oBAAA,uBAAuB;AAC7B,EAAMA,oBAAA,+CAA+C;AACrD,EAAMA,oBAAA,0BAA0B;AAEhC,EAAMA,oBAAA,iBAAiB;AACvB,EAAMA,oBAAA,aAAa;AACnB,EAAMA,oBAAA,oBAAoB;AAC1B,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,gCAAgC;AACtC,EAAMA,oBAAA,qBAAqB;AAC3B,EAAMA,oBAAA,+BAA+B;AACrC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,qCAAqC;AAC3C,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,mBAAmB;AACzB,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,gBAAgB;AACtB,EAAMA,oBAAA,iCAAiC;AAEvC,EAAMA,oBAAA,QAAQ;AACd,EAAMA,oBAAA,oBAAoB;AAE1B,EAAMA,oBAAA,iBAAiB;AACvB,EAAMA,oBAAA,mBAAmB;AAkEzB,WAAS,sBAAgC;AAC9C,WAAO;AAAA,MACL,WAAW;AAAA,QACT,MAAM;AAAA,QACN,QAAQ;AAAA,MACV;AAAA,MACA,cAAc,EAAE,OAAO,MAAM;AAAA,MAC7B,UAAU;AAAA,QACR,OAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,sBAAsB;AAAA,UACtB,KAAK;AAAA,UACL,+BAA+B;AAAA,QACjC;AAAA,MACF;AAAA,MACA,UAAU;AAAA,QACR,uBAAuB;AAAA,QACvB,sBAAsB;AAAA,QACtB,mBAAmB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,0BAA0B;AAAA,QAC1B,oBAAoB;AAAA,QACpB,sBAAsB;AAAA,QACtB,0BAA0B;AAAA,MAC5B;AAAA,MACA,aAAa;AAAA,QACX,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,aAAa;AAAA,QACf;AAAA,QACA,SAAS;AAAA,QACT,yBAAyB;AAAA,QACzB,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,SAAS;AAAA,QACT,gBAAgB;AAAA,QAChB,cAAc;AAAA,QACd,OAAO;AAAA,MACT;AAAA,MACA,KAAK;AAAA,QACH,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,mBAAmB;AAAA,QACnB,mBAAmB;AAAA,QACnB,iBAAiB;AAAA,QACjB,cAAc;AAAA,QACd,UAAU;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,QACA,oBAAoB;AAAA,QACpB,6BAA6B;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AA9DO,EAAAA,oBAAS;AAgET,EAAMA,oBAAA,qBAIR;AAAA,IACH;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,EAAE,OAAOA,oBAAA,gBAAgB,aAAa,mBAAmB,cAAc,CAAC,EAAE;AAAA,IAC1E;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,iBAAiB;AAAA,IACnD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,iBAAiB;AAAA,IACnD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,0BAA0B,eAAe;AAAA,IAC1D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,qBAAqB;AAAA,IACvD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,EACF;AAAA,GApce;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport namespace ConsolePermissions {\n  export const MULTICLUSTER_ADMIN = 'cmca'\n\n  export const CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS = 'cmgda'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_SEE = 'cmgas'\n  export const CHANNELS_AND_GENERATIONS_ADMIN = 'cmga'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL = 'cmgap'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE = 'cmgam'\n  export const CHANNELS_AND_GENERATIONS_MIGRATE = 'cmgm'\n  export const ALL_CHANNELS_AND_GENERATIONS: string[] = [\n    CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n    CHANNELS_AND_GENERATIONS_ADMIN,\n    CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n  ]\n  export const CLUSTERS_READALLCLUSTERINFO = 'ccrai'\n  export const CLUSTERS_DELETE_CLUSTER = 'ccda'\n  export const CLUSTERS_CAN_MOVE_TO_OTHER_ORG = 'ccmoo'\n  export const CLUSTERS_CAN_SEND_TO_SLEEP = 'ccsts'\n  export const CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE = 'ccucp'\n  export const CLUSTERS_CAN_UPDATE_GENERATION = 'ccug'\n  export const CLUSTERS_CAN_UPDATE_GENERATION_YOLO = 'ccugy'\n\n  export const CLUSTER_PLAN_SEE_ALL = 'ccpa'\n  export const CLUSTER_PLAN_CREATE = 'ccpc'\n  export const CLUSTER_PLAN_DELETE = 'ccpd'\n\n  export const CLUSTER_PLAN_TYPE_CREATE = 'cptc'\n  export const CLUSTER_PLAN_TYPE_MODIFY = 'cptm'\n  export const CLUSTER_PLAN_TYPE_DELETE = 'cptd'\n  export const CLUSTER_PLAN_TYPE_FORCE_DELETE = 'cptfd'\n\n  export const CLUSTER_PLAN_MIGRATE = 'ccpm'\n  export const CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN = 'ccpda'\n  export const CLUSTER_PLAN_CAN_MODIFY = 'ccpmo'\n\n  export const M2M_UPDATE_CRD = 'cmuc'\n  export const M2M_SIGNUP = 'cms'\n  export const M2M_TRIGGER_ALERT = 'cmta'\n  export const M2M_DELETE_ORG_CLUSTERS = 'cmdoc'\n  export const M2M_UPDATE_ORG_CLUSTERS = 'cmuoc'\n  export const M2M_ADD_CLUSTER_USAGE_METRICS = 'cmacm'\n  export const M2M_SEND_SSE_EVENT = 'cmsse'\n  export const M2M_EXTERNAL_INTERNAL_CLIENT = 'cmeic'\n  export const M2M_FETCH_MIGRATION_DATA = 'cmfmd'\n  export const M2M_MANAGE_GENERATION_UPGRADE_PATH = 'cmmgup'\n  export const CLUSTER_CREATE_ON_BEHALF = 'cccob'\n  export const FEATURE_NEW_HOME = 'cfnh'\n  export const FEATURE_TEMPLATE_PICKER = 'cftp'\n  export const USER_SETTINGS = 'cus'\n  export const CLUSTERS_CAN_OVERRIDE_ENV_VARS = 'ccoev'\n\n  export const DEBUG = 'cdbg'\n  export const GOD_TRIGGER_CRONS = 'gtc'\n\n  export const RELEASE_TRAIN_PUBLISH = 'crtp'\n\n  export const APICLIENT_READ = 'capr'\n  export const APICLIENT_DELETE = 'capd'\n\n  export interface Features {\n    apiClient: {\n      read: boolean\n      delete: boolean\n    }\n    multiCluster: {\n      admin: boolean\n    }\n    multiGen: {\n      admin: {\n        see: boolean\n        modify: boolean\n        patchExistingChannel: boolean\n        migrate: boolean\n        deleteAllClustersOfGeneration: boolean\n      }\n      releaseTrain: {\n        publish: boolean\n      }\n    }\n    clusters: {\n      canReadAllClusterInfo: boolean\n      canDeleteAllClusters: boolean\n      canMoveToOtherOrg: boolean\n      createOnBehalf: boolean\n      canSendToSleep: boolean\n      canUpdateClusterPlanType: boolean\n      canOverrideEnvVars: boolean\n      canUpgradeGeneration: boolean\n      canUpgradeGenerationYolo: boolean\n    }\n    clusterPlan: {\n      seeAll: boolean\n      create: boolean\n      delete: boolean\n      type: {\n        create: boolean\n        modify: boolean\n        delete: boolean\n        forceDelete: boolean\n      }\n      migrate: boolean\n      deleteAllClustersOfPlan: boolean\n      modify: boolean\n    }\n    features: {\n      newHome: boolean\n      templatePicker: boolean\n      userSettings: boolean\n      debug: boolean\n    }\n    m2m: {\n      updateCrd: boolean\n      signup: boolean\n      triggerAlert: boolean\n      deleteOrgClusters: boolean\n      updateOrgClusters: boolean\n      addUsageMetrics: boolean\n      sendSseEvent: boolean\n      external: {\n        internalClient: boolean\n      }\n      fetchMigrationData: boolean\n      manageGenerationUpgradePath: boolean\n    }\n  }\n\n  export function createEmptyFeatures(): Features {\n    return {\n      apiClient: {\n        read: false,\n        delete: false,\n      },\n      multiCluster: { admin: false },\n      multiGen: {\n        admin: {\n          migrate: false,\n          modify: false,\n          patchExistingChannel: false,\n          see: false,\n          deleteAllClustersOfGeneration: false,\n        },\n        releaseTrain: {\n          publish: false,\n        },\n      },\n      clusters: {\n        canReadAllClusterInfo: false,\n        canDeleteAllClusters: false,\n        canMoveToOtherOrg: false,\n        createOnBehalf: false,\n        canSendToSleep: false,\n        canUpdateClusterPlanType: false,\n        canOverrideEnvVars: false,\n        canUpgradeGeneration: false,\n        canUpgradeGenerationYolo: false,\n      },\n      clusterPlan: {\n        seeAll: false,\n        create: false,\n        delete: false,\n        type: {\n          create: false,\n          modify: false,\n          delete: false,\n          forceDelete: false,\n        },\n        migrate: false,\n        deleteAllClustersOfPlan: false,\n        modify: false,\n      },\n      features: {\n        newHome: false,\n        templatePicker: false,\n        userSettings: false,\n        debug: false,\n      },\n      m2m: {\n        updateCrd: false,\n        signup: false,\n        triggerAlert: false,\n        deleteOrgClusters: false,\n        updateOrgClusters: false,\n        addUsageMetrics: false,\n        sendSseEvent: false,\n        external: {\n          internalClient: false,\n        },\n        fetchMigrationData: false,\n        manageGenerationUpgradePath: false,\n      },\n    }\n  }\n\n  export const PermissionsAtAuth0: Array<{\n    value: string\n    description: string\n    initialRoles: Roles[]\n  }> = [\n    {\n      value: MULTICLUSTER_ADMIN,\n      description: 'can create and delete k8s clusters',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n      description: 'can go to the admin section for MultiGen, but no touch!',\n      initialRoles: [\n        'console:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n        'console:C8UpdateEnforcer',\n      ],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN,\n      description: 'can create channels, generations and combine them',\n      initialRoles: ['console:admin', 'console:C8ReleaseManager'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL,\n      description: 'can modify existing channels and combine them',\n      initialRoles: [\n        'console:admin',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n      ],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n      description:\n        'can migrate clusters of generations to supported other generations',\n      initialRoles: ['console:admin', 'console:C8UpdateEnforcer'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS,\n      description: 'can delete all clusters of a generation',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_MIGRATE,\n      description:\n        'can migrate owned clusters of generations to supported other generations',\n      initialRoles: [],\n    },\n    {\n      value: CLUSTERS_READALLCLUSTERINFO,\n      description: 'can read clusterInfo for all clusters',\n      initialRoles: [\n        'accounts:read',\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:editSalesPlans',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'console:admin',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTERS_DELETE_CLUSTER,\n      description: 'can delete clusters in all orgs',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: CLUSTERS_CAN_MOVE_TO_OTHER_ORG,\n      description: 'can move a cluster to another org the user is part of',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_SEE_ALL,\n      description: 'can see all ClusterPlans',\n      initialRoles: [\n        'console:admin',\n        'accounts:read',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:onboard',\n        'accounts:editSalesPlans',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTER_PLAN_CREATE,\n      description: 'can create ClusterPlans',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_DELETE,\n      description: 'can delete ClusterPlans',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_CREATE,\n      description: 'can create ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_DELETE,\n      description: 'can delete ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_FORCE_DELETE,\n      description: 'can delete ClusterPlanTypes',\n      initialRoles: ['console:god'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_MODIFY,\n      description: 'can modify ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_MIGRATE,\n      description: 'can migrate Clusters from one plan to another',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN,\n      description: 'can delete all clusters of a plan',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_CREATE_ON_BEHALF,\n      description:\n        'enables accounts to create clusters on signup (not a user permission)',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SIGNUP,\n      description: 'allows to signal to Console new user signups',\n      initialRoles: [],\n    },\n    { value: M2M_UPDATE_CRD, description: 'may update crds', initialRoles: [] },\n    {\n      value: M2M_TRIGGER_ALERT,\n      description: 'allows Infra and Operate to trigger alerts',\n      initialRoles: [],\n    },\n    {\n      value: M2M_DELETE_ORG_CLUSTERS,\n      description:\n        'allows trigger console to delete all clusters of an Organization',\n      initialRoles: [],\n    },\n    {\n      value: M2M_UPDATE_ORG_CLUSTERS,\n      description: 'allows to update clusters of an Organization',\n      initialRoles: [],\n    },\n    {\n      value: M2M_ADD_CLUSTER_USAGE_METRICS,\n      description: 'allows to trigger update of value metrics',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SEND_SSE_EVENT,\n      description: 'allows to trigger SSE events',\n      initialRoles: [],\n    },\n    {\n      value: M2M_EXTERNAL_INTERNAL_CLIENT,\n      description: 'allows to fetch internal clients',\n      initialRoles: [],\n    },\n    {\n      value: M2M_FETCH_MIGRATION_DATA,\n      description: 'allows to fetch migration data',\n      initialRoles: [],\n    },\n    {\n      value: M2M_MANAGE_GENERATION_UPGRADE_PATH,\n      description:\n        'allows to manage upgrade paths for generations via external API',\n      initialRoles: [],\n    },\n    {\n      value: FEATURE_NEW_HOME,\n      description: 'allows users to see new home',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: USER_SETTINGS,\n      description: 'allows users to see user settings',\n      initialRoles: ['console:admin', 'betatester:true'],\n    },\n    {\n      value: FEATURE_TEMPLATE_PICKER,\n      description: 'allows users to see template picker',\n      initialRoles: ['console:admin', 'betatester:true'],\n    },\n    {\n      value: CLUSTERS_CAN_SEND_TO_SLEEP,\n      description: 'may send a cluster to sleep and wake up',\n      initialRoles: [\n        'console:admin',\n        'accounts:admin',\n        'console:operationsEngineer',\n      ],\n    },\n    {\n      value: DEBUG,\n      description: 'can see additional debugging tools',\n      initialRoles: ['console:admin:readonly', 'console:admin'],\n    },\n    {\n      value: CLUSTERS_CAN_OVERRIDE_ENV_VARS,\n      description:\n        'can set Env Vars on cluster level that override all ClusterPlan Env Vars',\n      initialRoles: ['console:admin', 'console:operationsEngineer'],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n      description: 'can update clusterplantype of a running cluster',\n      initialRoles: [\n        'console:admin',\n        'accounts:onboard',\n        'console:operationsEngineer',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_GENERATION,\n      description: 'can update generation of a running cluster',\n      initialRoles: [\n        'console:admin',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_GENERATION_YOLO,\n      description:\n        'can update generation of a running cluster even if the generation is not reachable',\n      initialRoles: ['console:god'],\n    },\n    {\n      value: CLUSTER_PLAN_CAN_MODIFY,\n      description: 'can trigger modifications of a clusterplan',\n      initialRoles: ['console:admin', 'console:clusterPlanManager'],\n    },\n    {\n      value: RELEASE_TRAIN_PUBLISH,\n      description: 'can publish new generations via the release train endpoint',\n      initialRoles: ['console:admin', 'console:C8ReleaseManager'],\n    },\n    {\n      value: APICLIENT_READ,\n      description: 'can read API Clients Names of Organizations',\n      initialRoles: ['accounts:read', 'accounts:orgCreator'],\n    },\n    {\n      value: APICLIENT_DELETE,\n      description: 'can read API Clients Names of Organizations',\n      initialRoles: ['accounts:god'],\n    },\n  ]\n}\n"],
+  "mappings": "AAQO,IAAU;AAAA,CAAV,CAAUA,wBAAV;AACE,EAAMA,oBAAA,qBAAqB;AAE3B,EAAMA,oBAAA,qDAAqD;AAC3D,EAAMA,oBAAA,qCAAqC;AAC3C,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,wDAAwD;AAC9D,EAAMA,oBAAA,yCAAyC;AAC/C,EAAMA,oBAAA,mCAAmC;AACzC,EAAMA,oBAAA,+BAAyC;AAAA,IACpDA,oBAAA;AAAA,IACAA,oBAAA;AAAA,IACAA,oBAAA;AAAA,EACF;AACO,EAAMA,oBAAA,8BAA8B;AACpC,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,6BAA6B;AACnC,EAAMA,oBAAA,sCAAsC;AAC5C,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,sCAAsC;AAE5C,EAAMA,oBAAA,uBAAuB;AAC7B,EAAMA,oBAAA,sBAAsB;AAC5B,EAAMA,oBAAA,sBAAsB;AAE5B,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,iCAAiC;AAEvC,EAAMA,oBAAA,uBAAuB;AAC7B,EAAMA,oBAAA,+CAA+C;AACrD,EAAMA,oBAAA,0BAA0B;AAEhC,EAAMA,oBAAA,iBAAiB;AACvB,EAAMA,oBAAA,aAAa;AACnB,EAAMA,oBAAA,oBAAoB;AAC1B,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,gCAAgC;AACtC,EAAMA,oBAAA,qBAAqB;AAC3B,EAAMA,oBAAA,+BAA+B;AACrC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,qCAAqC;AAC3C,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,mBAAmB;AACzB,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,gBAAgB;AACtB,EAAMA,oBAAA,iCAAiC;AAEvC,EAAMA,oBAAA,QAAQ;AACd,EAAMA,oBAAA,oBAAoB;AAE1B,EAAMA,oBAAA,wBAAwB;AAE9B,EAAMA,oBAAA,iBAAiB;AACvB,EAAMA,oBAAA,mBAAmB;AAqEzB,WAAS,sBAAgC;AAC9C,WAAO;AAAA,MACL,WAAW;AAAA,QACT,MAAM;AAAA,QACN,QAAQ;AAAA,MACV;AAAA,MACA,cAAc,EAAE,OAAO,MAAM;AAAA,MAC7B,UAAU;AAAA,QACR,OAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,sBAAsB;AAAA,UACtB,KAAK;AAAA,UACL,+BAA+B;AAAA,QACjC;AAAA,QACA,cAAc;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA,UAAU;AAAA,QACR,uBAAuB;AAAA,QACvB,sBAAsB;AAAA,QACtB,mBAAmB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,0BAA0B;AAAA,QAC1B,oBAAoB;AAAA,QACpB,sBAAsB;AAAA,QACtB,0BAA0B;AAAA,MAC5B;AAAA,MACA,aAAa;AAAA,QACX,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,aAAa;AAAA,QACf;AAAA,QACA,SAAS;AAAA,QACT,yBAAyB;AAAA,QACzB,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,SAAS;AAAA,QACT,gBAAgB;AAAA,QAChB,cAAc;AAAA,QACd,OAAO;AAAA,MACT;AAAA,MACA,KAAK;AAAA,QACH,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,mBAAmB;AAAA,QACnB,mBAAmB;AAAA,QACnB,iBAAiB;AAAA,QACjB,cAAc;AAAA,QACd,UAAU;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,QACA,oBAAoB;AAAA,QACpB,6BAA6B;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAjEO,EAAAA,oBAAS;AAmET,EAAMA,oBAAA,qBAIR;AAAA,IACH;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,EAAE,OAAOA,oBAAA,gBAAgB,aAAa,mBAAmB,cAAc,CAAC,EAAE;AAAA,IAC1E;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,iBAAiB;AAAA,IACnD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,iBAAiB;AAAA,IACnD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,0BAA0B,eAAe;AAAA,IAC1D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,qBAAqB;AAAA,IACvD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,EACF;AAAA,GAjde;",
   "names": ["ConsolePermissions"]
 }

package/dist/permissions/profile.permissions.js

@@ -75,6 +75,7 @@ const CSM_MANAGER_EMAIL = [
   "manjula.kularathne@camunda.com"
 ];
 const ADR_MANAGER_EMAIL = ["jasmin.morfin-davila@camunda.com"];
+const PDF_WATERMARK_EMAILS = ["eyal.marantenboim@camunda.com"];
 const PROFILES = {
   readOnly: {
     allowed: [
@@ -257,6 +258,20 @@ const PROFILES = {
         "https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md"
       ]
     }
+  },
+  pdfWatermarkRead: {
+    allowed: [...CLOUD_TEAM_EMAILS, ...PDF_WATERMARK_EMAILS],
+    rolesToAssign: ["accounts:pdfWatermarkReader"],
+    email: {
+      handbookPages: []
+    }
+  },
+  pdfWatermarkWrite: {
+    allowed: [...CLOUD_TEAM_EMAILS, ...PDF_WATERMARK_EMAILS],
+    rolesToAssign: ["accounts:pdfWatermarkWriter"],
+    email: {
+      handbookPages: []
+    }
   }
 };
 export {

package/dist/permissions/profile.permissions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/permissions/profile.permissions.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport const CLOUD_TEAM_EMAILS = [\n  'adam.urban@camunda.com',\n  'collin.raddatz@camunda.com',\n  'tim.schuppener@camunda.com',\n]\nconst LIMIT_EXTENDERS = [\n  'william.vonalt@camunda.com',\n  'victor.grund@camunda.com',\n  'ragnar.nevries@camunda.com',\n  'robert.emsbach@camunda.com',\n  'jared.mcmahon@camunda.com',\n]\nexport const SRE_TEAM_EMAILS = [\n  'jonathan.ballet@camunda.com',\n  'thanasis.petrovas@camunda.com',\n  'thomas.polnik@camunda.com',\n]\nexport const PLATFORM_SM_EMAILS = [\n  'immanuel.monma@camunda.com',\n  'jesse.simpson@camunda.com',\n  'hamza.masood@camunda.com',\n  'lars.lange@camunda.com',\n  'leo.journel@camunda.com',\n  'balazs.kenez@camunda.com',\n]\nexport const SUPPORT_MANAGERS_EMAILS = [\n  'garima.yadav@camunda.com',\n  'jeffrey.stokes@camunda.com',\n  'alexandra.corremans@camunda.com',\n  'chris.campbell@camunda.com',\n]\nexport const C8_ENGINEERING_MANAGERS_EMAILS = [\n  'sebastian.bathke@camunda.com',\n  'catalina.moisuc@camunda.com',\n  'immanuel.monma@camunda.com',\n  'joshua.windels@camunda.com',\n  'marcos.vieira@camunda.com',\n  'maximilian.trumpf@camunda.com',\n  'simon.buettner@camunda.com',\n  // schoetti is also some sort of engineering manager\n  'michael.schoettes@camunda.com',\n  'tassilo.weidner@camunda.com',\n  'nicolas.pepin-perreault@camunda.com',\n  'wolfgang.amann@camunda.com',\n  'mathieu.stennier@camunda.com',\n  'jason.hunter@camunda.com',\n  'maxim.danilov@camunda.com',\n  'stephan.epping@camunda.com',\n  'simon.zengerling@camunda.com',\n  'shay.matasaro@camunda.com',\n]\nexport const CONSULTING_MANAGER_EMAILS = [\n  'benjamin.hoffmann@camunda.com',\n  'chandan.dash@camunda.com',\n  'darren.devine@camunda.com',\n  'hurshid.kadirov@camunda.com',\n  'ivan.jovic@camunda.com',\n  'michael.ferber@camunda.com',\n  'ragnar.nevries@camunda.com',\n  'norbert.kuchenmeister@camunda.com',\n  'robert.emsbach@camunda.com',\n  'victor.grund@camunda.com',\n]\nexport const CSM_MANAGER_EMAIL = [\n  'aaron.laye@camunda.com',\n  'andreas.tollschein@camunda.com',\n  'betsy.burt@camunda.com',\n  'leona.schlosser@camunda.com',\n  'yulia.sinyanskaya@camunda.com',\n  'agnes.kelemen@camunda.com',\n  'thomas.schulz@camunda.com',\n  'shadia.jubril@camunda.com',\n  'kaitlin.leighton@camunda.com',\n  'ryan.warner@camunda.com',\n  'manjula.kularathne@camunda.com',\n]\nconst ADR_MANAGER_EMAIL = ['jasmin.morfin-davila@camunda.com']\n\nexport interface OnboardConfig {\n  [unit: string]: {\n    allowed: string[]\n    rolesToAssign: Roles[]\n    email: {\n      handbookPages: string[]\n    }\n  }\n}\n\nexport const PROFILES: OnboardConfig = {\n  readOnly: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n      ...CONSULTING_MANAGER_EMAILS,\n      ...SRE_TEAM_EMAILS,\n      ...CSM_MANAGER_EMAIL,\n      'eric.lundberg@camunda.com',\n    ],\n    rolesToAssign: ['accounts:read', 'console:admin:readonly'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  supportEngineer: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  ssoAdmin: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'accounts:connections:delete',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  supportAgent: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n      ...CONSULTING_MANAGER_EMAILS,\n    ],\n    rolesToAssign: ['support:agent'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  clusterUpdateSupportEngineer: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n    ],\n    rolesToAssign: ['accounts:clusterUpdates', 'support:agent'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md',\n      ],\n    },\n  },\n  c8ReleaseManager: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'console:C8ReleaseManager',\n      'accounts:read',\n      'console:C8UpdateEnforcer',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md',\n      ],\n    },\n  },\n  incidentEngineer: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'support:agent',\n      'console:operationsEngineer',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/tweaking-a-running-cluster/index.md',\n      ],\n    },\n  },\n  consulting: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CONSULTING_MANAGER_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'console:admin:readonly',\n      'accounts:trialExtender',\n      'accounts:limitExtender',\n      'accounts:enterpriseAdmin',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csm: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],\n    rolesToAssign: [\n      'accounts:enterpriseAdmin',\n      'accounts:read',\n      'accounts:trialExtender',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/FIELDOPS/Migrating+C8-SaaS+Organizations+to+Enterprise',\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/modify-a-running-c8-saas-enterprise-organisation/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csmOffboard: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],\n    rolesToAssign: ['accounts:enterpriseOffboarding', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/shutting-down-an-c8-saas-organization/index.md',\n      ],\n    },\n  },\n  adr: {\n    allowed: [...ADR_MANAGER_EMAIL, 'javier.garcia-alzorriz@camunda.com'],\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  trialExtender: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...LIMIT_EXTENDERS,\n      'rory.tettey@camunda.com',\n    ],\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  limitExtender: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...LIMIT_EXTENDERS],\n    rolesToAssign: ['accounts:limitExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Managing+Organization+Limits+on+C8+SaaS',\n      ],\n    },\n  },\n  workshopCreator: {\n    allowed: [...CLOUD_TEAM_EMAILS, 'robert.emsbach@camunda.com'],\n    rolesToAssign: ['accounts:orgCreator'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAQO,MAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF;AACA,MAAM,kBAAkB;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,kBAAkB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,qBAAqB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,iCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,MAAM,oBAAoB,CAAC,kCAAkC;AAYtD,MAAM,WAA0B;AAAA,EACrC,UAAU;AAAA,IACR,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA,eAAe,CAAC,iBAAiB,wBAAwB;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,SAAS,CAAC,GAAG,mBAAmB,GAAG,uBAAuB;AAAA,IAC1D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,SAAS,CAAC,GAAG,mBAAmB,GAAG,uBAAuB;AAAA,IAC1D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc;AAAA,IACZ,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAAA,IACA,eAAe,CAAC,eAAe;AAAA,IAC/B,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,8BAA8B;AAAA,IAC5B,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAAA,IACA,eAAe,CAAC,2BAA2B,eAAe;AAAA,IAC1D,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS,CAAC,GAAG,mBAAmB,GAAG,8BAA8B;AAAA,IACjE,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS,CAAC,GAAG,mBAAmB,GAAG,8BAA8B;AAAA,IACjE,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,YAAY;AAAA,IACV,SAAS,CAAC,GAAG,mBAAmB,GAAG,yBAAyB;AAAA,IAC5D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,SAAS,CAAC,GAAG,mBAAmB,GAAG,iBAAiB;AAAA,IACpD,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,SAAS,CAAC,GAAG,mBAAmB,GAAG,iBAAiB;AAAA,IACpD,eAAe,CAAC,kCAAkC,eAAe;AAAA,IACjE,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,SAAS,CAAC,GAAG,mBAAmB,oCAAoC;AAAA,IACpE,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,SAAS,CAAC,GAAG,mBAAmB,GAAG,eAAe;AAAA,IAClD,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,SAAS,CAAC,GAAG,mBAAmB,4BAA4B;AAAA,IAC5D,eAAe,CAAC,qBAAqB;AAAA,IACrC,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport const CLOUD_TEAM_EMAILS = [\n  'adam.urban@camunda.com',\n  'collin.raddatz@camunda.com',\n  'tim.schuppener@camunda.com',\n]\nconst LIMIT_EXTENDERS = [\n  'william.vonalt@camunda.com',\n  'victor.grund@camunda.com',\n  'ragnar.nevries@camunda.com',\n  'robert.emsbach@camunda.com',\n  'jared.mcmahon@camunda.com',\n]\nexport const SRE_TEAM_EMAILS = [\n  'jonathan.ballet@camunda.com',\n  'thanasis.petrovas@camunda.com',\n  'thomas.polnik@camunda.com',\n]\nexport const PLATFORM_SM_EMAILS = [\n  'immanuel.monma@camunda.com',\n  'jesse.simpson@camunda.com',\n  'hamza.masood@camunda.com',\n  'lars.lange@camunda.com',\n  'leo.journel@camunda.com',\n  'balazs.kenez@camunda.com',\n]\nexport const SUPPORT_MANAGERS_EMAILS = [\n  'garima.yadav@camunda.com',\n  'jeffrey.stokes@camunda.com',\n  'alexandra.corremans@camunda.com',\n  'chris.campbell@camunda.com',\n]\nexport const C8_ENGINEERING_MANAGERS_EMAILS = [\n  'sebastian.bathke@camunda.com',\n  'catalina.moisuc@camunda.com',\n  'immanuel.monma@camunda.com',\n  'joshua.windels@camunda.com',\n  'marcos.vieira@camunda.com',\n  'maximilian.trumpf@camunda.com',\n  'simon.buettner@camunda.com',\n  // schoetti is also some sort of engineering manager\n  'michael.schoettes@camunda.com',\n  'tassilo.weidner@camunda.com',\n  'nicolas.pepin-perreault@camunda.com',\n  'wolfgang.amann@camunda.com',\n  'mathieu.stennier@camunda.com',\n  'jason.hunter@camunda.com',\n  'maxim.danilov@camunda.com',\n  'stephan.epping@camunda.com',\n  'simon.zengerling@camunda.com',\n  'shay.matasaro@camunda.com',\n]\nexport const CONSULTING_MANAGER_EMAILS = [\n  'benjamin.hoffmann@camunda.com',\n  'chandan.dash@camunda.com',\n  'darren.devine@camunda.com',\n  'hurshid.kadirov@camunda.com',\n  'ivan.jovic@camunda.com',\n  'michael.ferber@camunda.com',\n  'ragnar.nevries@camunda.com',\n  'norbert.kuchenmeister@camunda.com',\n  'robert.emsbach@camunda.com',\n  'victor.grund@camunda.com',\n]\nexport const CSM_MANAGER_EMAIL = [\n  'aaron.laye@camunda.com',\n  'andreas.tollschein@camunda.com',\n  'betsy.burt@camunda.com',\n  'leona.schlosser@camunda.com',\n  'yulia.sinyanskaya@camunda.com',\n  'agnes.kelemen@camunda.com',\n  'thomas.schulz@camunda.com',\n  'shadia.jubril@camunda.com',\n  'kaitlin.leighton@camunda.com',\n  'ryan.warner@camunda.com',\n  'manjula.kularathne@camunda.com',\n]\nconst ADR_MANAGER_EMAIL = ['jasmin.morfin-davila@camunda.com']\nconst PDF_WATERMARK_EMAILS = ['eyal.marantenboim@camunda.com']\n\nexport interface OnboardConfig {\n  [unit: string]: {\n    allowed: string[]\n    rolesToAssign: Roles[]\n    email: {\n      handbookPages: string[]\n    }\n  }\n}\n\nexport const PROFILES: OnboardConfig = {\n  readOnly: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n      ...CONSULTING_MANAGER_EMAILS,\n      ...SRE_TEAM_EMAILS,\n      ...CSM_MANAGER_EMAIL,\n      'eric.lundberg@camunda.com',\n    ],\n    rolesToAssign: ['accounts:read', 'console:admin:readonly'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  supportEngineer: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  ssoAdmin: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'accounts:connections:delete',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  supportAgent: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n      ...CONSULTING_MANAGER_EMAILS,\n    ],\n    rolesToAssign: ['support:agent'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  clusterUpdateSupportEngineer: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n    ],\n    rolesToAssign: ['accounts:clusterUpdates', 'support:agent'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md',\n      ],\n    },\n  },\n  c8ReleaseManager: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'console:C8ReleaseManager',\n      'accounts:read',\n      'console:C8UpdateEnforcer',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md',\n      ],\n    },\n  },\n  incidentEngineer: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'support:agent',\n      'console:operationsEngineer',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/tweaking-a-running-cluster/index.md',\n      ],\n    },\n  },\n  consulting: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CONSULTING_MANAGER_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'console:admin:readonly',\n      'accounts:trialExtender',\n      'accounts:limitExtender',\n      'accounts:enterpriseAdmin',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csm: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],\n    rolesToAssign: [\n      'accounts:enterpriseAdmin',\n      'accounts:read',\n      'accounts:trialExtender',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/FIELDOPS/Migrating+C8-SaaS+Organizations+to+Enterprise',\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/modify-a-running-c8-saas-enterprise-organisation/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csmOffboard: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],\n    rolesToAssign: ['accounts:enterpriseOffboarding', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/shutting-down-an-c8-saas-organization/index.md',\n      ],\n    },\n  },\n  adr: {\n    allowed: [...ADR_MANAGER_EMAIL, 'javier.garcia-alzorriz@camunda.com'],\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  trialExtender: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...LIMIT_EXTENDERS,\n      'rory.tettey@camunda.com',\n    ],\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  limitExtender: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...LIMIT_EXTENDERS],\n    rolesToAssign: ['accounts:limitExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Managing+Organization+Limits+on+C8+SaaS',\n      ],\n    },\n  },\n  workshopCreator: {\n    allowed: [...CLOUD_TEAM_EMAILS, 'robert.emsbach@camunda.com'],\n    rolesToAssign: ['accounts:orgCreator'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  pdfWatermarkRead: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...PDF_WATERMARK_EMAILS],\n    rolesToAssign: ['accounts:pdfWatermarkReader'],\n    email: {\n      handbookPages: [],\n    },\n  },\n  pdfWatermarkWrite: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...PDF_WATERMARK_EMAILS],\n    rolesToAssign: ['accounts:pdfWatermarkWriter'],\n    email: {\n      handbookPages: [],\n    },\n  },\n}\n"],
+  "mappings": "AAQO,MAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF;AACA,MAAM,kBAAkB;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,kBAAkB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,qBAAqB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,iCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,MAAM,oBAAoB,CAAC,kCAAkC;AAC7D,MAAM,uBAAuB,CAAC,+BAA+B;AAYtD,MAAM,WAA0B;AAAA,EACrC,UAAU;AAAA,IACR,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA,eAAe,CAAC,iBAAiB,wBAAwB;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,SAAS,CAAC,GAAG,mBAAmB,GAAG,uBAAuB;AAAA,IAC1D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,SAAS,CAAC,GAAG,mBAAmB,GAAG,uBAAuB;AAAA,IAC1D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc;AAAA,IACZ,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAAA,IACA,eAAe,CAAC,eAAe;AAAA,IAC/B,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,8BAA8B;AAAA,IAC5B,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAAA,IACA,eAAe,CAAC,2BAA2B,eAAe;AAAA,IAC1D,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS,CAAC,GAAG,mBAAmB,GAAG,8BAA8B;AAAA,IACjE,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS,CAAC,GAAG,mBAAmB,GAAG,8BAA8B;AAAA,IACjE,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,YAAY;AAAA,IACV,SAAS,CAAC,GAAG,mBAAmB,GAAG,yBAAyB;AAAA,IAC5D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,SAAS,CAAC,GAAG,mBAAmB,GAAG,iBAAiB;AAAA,IACpD,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,SAAS,CAAC,GAAG,mBAAmB,GAAG,iBAAiB;AAAA,IACpD,eAAe,CAAC,kCAAkC,eAAe;AAAA,IACjE,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,SAAS,CAAC,GAAG,mBAAmB,oCAAoC;AAAA,IACpE,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,SAAS,CAAC,GAAG,mBAAmB,GAAG,eAAe;AAAA,IAClD,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,SAAS,CAAC,GAAG,mBAAmB,4BAA4B;AAAA,IAC5D,eAAe,CAAC,qBAAqB;AAAA,IACrC,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS,CAAC,GAAG,mBAAmB,GAAG,oBAAoB;AAAA,IACvD,eAAe,CAAC,6BAA6B;AAAA,IAC7C,OAAO;AAAA,MACL,eAAe,CAAC;AAAA,IAClB;AAAA,EACF;AAAA,EACA,mBAAmB;AAAA,IACjB,SAAS,CAAC,GAAG,mBAAmB,GAAG,oBAAoB;AAAA,IACvD,eAAe,CAAC,6BAA6B;AAAA,IAC7C,OAAO;AAAA,MACL,eAAe,CAAC;AAAA,IAClB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/types/Roles.d.ts

@@ -1,4 +1,4 @@
-export type AccountRoles = 'accounts:read' | 'accounts:onboard' | 'accounts:orgCreator' | 'accounts:enterpriseAdmin' | 'accounts:enterpriseOffboarding' | 'accounts:admin' | 'accounts:god' | 'accounts:editSalesPlans' | 'support:agent' | 'supersupport:agent' | 'accounts:trialExtender' | 'accounts:limitExtender' | 'accounts:connections:create' | 'accounts:connections:update' | 'accounts:connections:delete' | 'accounts:clusterUpdates' | 'accounts:notifications:global' | 'accounts:addSafeRoles' | 'accounts:consultingManager' | 'accounts:earlyAccessEditor';
+export type AccountRoles = 'accounts:read' | 'accounts:onboard' | 'accounts:orgCreator' | 'accounts:enterpriseAdmin' | 'accounts:enterpriseOffboarding' | 'accounts:admin' | 'accounts:god' | 'accounts:editSalesPlans' | 'support:agent' | 'supersupport:agent' | 'accounts:trialExtender' | 'accounts:limitExtender' | 'accounts:connections:create' | 'accounts:connections:update' | 'accounts:connections:delete' | 'accounts:clusterUpdates' | 'accounts:notifications:global' | 'accounts:addSafeRoles' | 'accounts:consultingManager' | 'accounts:earlyAccessEditor' | 'accounts:pdfWatermarkReader' | 'accounts:pdfWatermarkWriter';
 export type ConsoleRoles = 'console:admin' | 'betatester:true' | 'console:admin:readonly' | 'console:god' | 'consoleTeam' | 'console:operationsEngineer' | 'console:C8ReleaseManager' | 'console:C8UpdateEnforcer' | 'console:clusterPlanManager';
 export type ModelerRoles = 'modeler:admin';
 export type Roles = AccountRoles | ConsoleRoles | ModelerRoles;

package/dist/types/Roles.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/Roles.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport type AccountRoles =\n  | 'accounts:read'\n  | 'accounts:onboard'\n  | 'accounts:orgCreator'\n  | 'accounts:enterpriseAdmin'\n  | 'accounts:enterpriseOffboarding'\n  | 'accounts:admin'\n  | 'accounts:god'\n  | 'accounts:editSalesPlans'\n  | 'support:agent'\n  | 'supersupport:agent'\n  | 'accounts:trialExtender'\n  | 'accounts:limitExtender'\n  | 'accounts:connections:create'\n  | 'accounts:connections:update'\n  | 'accounts:connections:delete'\n  | 'accounts:clusterUpdates'\n  | 'accounts:notifications:global'\n  | 'accounts:addSafeRoles'\n  | 'accounts:consultingManager'\n  | 'accounts:earlyAccessEditor'\nexport type ConsoleRoles =\n  | 'console:admin'\n  | 'betatester:true'\n  | 'console:admin:readonly'\n  | 'console:god'\n  | 'consoleTeam'\n  | 'console:operationsEngineer'\n  | 'console:C8ReleaseManager'\n  | 'console:C8UpdateEnforcer'\n  | 'console:clusterPlanManager'\nexport type ModelerRoles = 'modeler:admin'\nexport type Roles = AccountRoles | ConsoleRoles | ModelerRoles\nexport const SAFE_ROLES: Roles[] = [\n  'accounts:read',\n  'console:admin:readonly',\n  'accounts:trialExtender',\n]\n"],
-  "mappings": "AAuCO,MAAM,aAAsB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport type AccountRoles =\n  | 'accounts:read'\n  | 'accounts:onboard'\n  | 'accounts:orgCreator'\n  | 'accounts:enterpriseAdmin'\n  | 'accounts:enterpriseOffboarding'\n  | 'accounts:admin'\n  | 'accounts:god'\n  | 'accounts:editSalesPlans'\n  | 'support:agent'\n  | 'supersupport:agent'\n  | 'accounts:trialExtender'\n  | 'accounts:limitExtender'\n  | 'accounts:connections:create'\n  | 'accounts:connections:update'\n  | 'accounts:connections:delete'\n  | 'accounts:clusterUpdates'\n  | 'accounts:notifications:global'\n  | 'accounts:addSafeRoles'\n  | 'accounts:consultingManager'\n  | 'accounts:earlyAccessEditor'\n  | 'accounts:pdfWatermarkReader'\n  | 'accounts:pdfWatermarkWriter'\nexport type ConsoleRoles =\n  | 'console:admin'\n  | 'betatester:true'\n  | 'console:admin:readonly'\n  | 'console:god'\n  | 'consoleTeam'\n  | 'console:operationsEngineer'\n  | 'console:C8ReleaseManager'\n  | 'console:C8UpdateEnforcer'\n  | 'console:clusterPlanManager'\nexport type ModelerRoles = 'modeler:admin'\nexport type Roles = AccountRoles | ConsoleRoles | ModelerRoles\nexport const SAFE_ROLES: Roles[] = [\n  'accounts:read',\n  'console:admin:readonly',\n  'accounts:trialExtender',\n]\n"],
+  "mappings": "AAyCO,MAAM,aAAsB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AACF;",
   "names": []
 }

package/dist/types/SystemAuditData.type.d.ts

@@ -0,0 +1,21 @@
+import type { SystemAuditEntity, SystemAuditEntityAttribute } from '../enums/SystemAuditEntity.enum.js';
+export interface SystemAuditData {
+    entity: SystemAuditEntity;
+    entityName: string;
+    entityId: string;
+    entityAttribute?: SystemAuditEntityAttribute;
+    entityValueFrom?: {
+        readable: string;
+        id: string;
+    };
+    entityValueTo?: {
+        readable: string;
+        id: string;
+    };
+    userId: string;
+    /** See SystemAuditDto.orgId — org-only entities (e.g. Connection). */
+    orgId?: string;
+    /** See SystemAuditDto.clusterId — entities with a cluster relation. */
+    clusterId?: string;
+    additionalAuditText?: string;
+}

package/dist/types/SystemAuditData.type.js

@@ -0,0 +1 @@
+//# sourceMappingURL=SystemAuditData.type.js.map

package/dist/types/SystemAuditData.type.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/types/hdp.types.d.ts

@@ -202,6 +202,20 @@ export interface Audit {
     parentEntity?: string;
     parentEntityId?: string;
 }
+export interface SystemAudit {
+    service: string;
+    timestamp: number;
+    audit: string;
+    auditType: 'c' | 'r' | 'u' | 'd';
+    entity: string;
+    entityId: string;
+    userId: string;
+    entityAttribute?: string | null;
+    entityAttributeValueFrom?: string | null;
+    entityAttributeValueTo?: string | null;
+    orgId?: string | null;
+    clusterId?: string | null;
+}
 export interface TelemetryData {
     customerId: string;
     installationId: string;
@@ -233,7 +247,7 @@ export interface LlmSpend {
     spend: number;
     maxBudget: number;
 }
-export type HdpEntity = 'cluster' | 'clusterBackup' | 'clusterBackupSchedule' | 'clusterRestore' | 'datacenter' | 'generation' | 'channel' | 'clusterPlan' | 'clusterPlanType' | 'alertSubscription' | 'consoleApiClient' | 'connectorSecret' | 'byomClient' | 'secureConnectivity' | 'clusterClient' | 'organization' | 'user' | 'invite' | 'usageAlert' | 'audit' | 'telemetry' | 'userlogin' | 'clusterBulkOperation' | 'clusterModification' | 'clusterModificationConfig' | 'llmSpend';
+export type HdpEntity = 'cluster' | 'clusterBackup' | 'clusterBackupSchedule' | 'clusterRestore' | 'datacenter' | 'generation' | 'channel' | 'clusterPlan' | 'clusterPlanType' | 'alertSubscription' | 'consoleApiClient' | 'connectorSecret' | 'byomClient' | 'secureConnectivity' | 'clusterClient' | 'organization' | 'user' | 'invite' | 'usageAlert' | 'audit' | 'systemAudit' | 'telemetry' | 'userlogin' | 'clusterBulkOperation' | 'clusterModification' | 'clusterModificationConfig' | 'llmSpend';
 export interface HdpPrometheusDataCapacityDataPoint {
     clusterId?: string;
     ts: number;

package/dist/types/hdp.types.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/hdp.types.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Limits } from '../dtos/SalesPlan.dto.js'\nimport type { UsageAlertMetric } from '../dtos/UsageAlert.dto.js'\nimport type { ClusterClientPermission } from '../enums/ClusterClientPermissions.enum.js'\nimport type { ConsoleAPIClientPermission } from '../enums/ConsoleApiClientPermission.enum.js'\nimport type { OrganizationRole } from '../enums/OrganizationRole.enum.js'\nimport type { DisplayedSalesPlan, SalesPlanType } from './SalesPlanType.type.js'\n\nexport interface Cluster {\n  uuid: string\n  name: string\n  clusterPlanType: ClusterPlanType\n  clusterPlan: ClusterPlan\n  generation: Generation\n  channel: Channel\n  datacenter?: Datacenter // is not fetched eagerly, if we do not have it we just gonna omit it\n  amountOfIpWhitelistRules: number\n  ownerUuid: string\n  created: Date\n  autoUpdate: boolean\n  mcpEnabled?: boolean\n  businessIdUniquenessEnabled?: boolean\n  optimizeEnabled?: boolean\n  tags?: string[]\n  sleeping?: boolean\n  activeModifications: boolean\n  encryptionKeysSet?: {\n    primaryConfigured: boolean\n    secondaryConfigured: boolean\n  }\n}\nexport interface ClusterBackup {\n  clusterId: string\n  backupId?: string\n}\n\nexport interface ClusterModification {\n  uuid: string\n  clusterUuid: string\n  owner: string\n  createdAt?: Date\n  archivedAt?: Date\n}\n\nexport interface ClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n  yoloJustification?: string\n}\n\n/**\n * HDP-specific interface for ClusterModificationConfig.\n * Used for Holy Data Platform integration - keeps Date objects for timestamp fields.\n */\nexport interface HdpClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n}\n\nexport interface ClusterBackupSchedule {\n  clusterId: string\n  schedule?: string\n}\n\nexport interface ClusterPlanType {\n  uuid: string\n  name: string\n  availabilityClass: string\n  isDevelopment: boolean\n}\n\nexport interface ClusterPlan {\n  uuid: string\n  name: string\n}\n\nexport interface Datacenter {\n  uuid: string\n  name: string\n}\nexport interface Generation {\n  uuid: string\n  name: string\n}\nexport interface Channel {\n  uuid: string\n  name: string\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionType {\n  ClusterAlert = 'ClusterAlert',\n  ProcessAlert = 'ProcessAlert',\n  AllAlerts = 'AllAlerts',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionReportType {\n  Email = 'Email',\n  Webhook = 'Webhook',\n}\nexport interface AlertSubscription {\n  uuid: string\n  clusterUuid?: string\n  target: string // userIdOrWebhook\n  reportType: AlertSubscriptionReportType\n  type: AlertSubscriptionType\n}\n\nexport interface ConsoleApiClient {\n  uuid: string\n  name: string\n  organizationUuid: string\n  permissions: ConsoleAPIClientPermission[]\n}\n\nexport interface ConnectorSecret {\n  clusterUuid: string\n  amountOfSecrets: number\n}\n\nexport interface ByomClient {\n  uuid: string\n  clusterUuid?: string\n  username: string\n}\n\nexport interface SecureConnectivity {\n  clusterUuid: string\n  allowedRegions: string[]\n  allowedPrincipals: string[]\n}\n\nexport interface ClusterClient {\n  uuid: string\n  name: string\n  clusterUuid?: string\n  clientId: string\n  permissions: ClusterClientPermission[]\n}\n\nexport interface Organization {\n  uuid: string\n  name: string\n  salesplan?: {\n    type: SalesPlanType // might be undefined when in limbo\n    displayedType?: DisplayedSalesPlan // might be undefined when in limbo\n    uuid: string // might be undefined when in limbo\n    name: string // might be undefined when in limbo\n    expireDate?: Date\n  }\n  reservations?: {\n    [key: string]: number\n  }\n  earlyAccessFeatures?: string[]\n  justOptedForTheBetaTerms?: boolean\n  salesForceProjectId?: string\n  awsOnly?: boolean\n  limits?: Limits\n}\n\nexport interface User {\n  name: string\n  email: string\n  userId: string\n  orgMemberships?: Array<{ orgUuid: string; roles: OrganizationRole[] }> // can be undefined which means: no new info ;)\n}\n\nexport interface UserLogin {\n  userId: string\n}\n\nexport interface Invite {\n  email: string\n  orgUuid: string\n  roles: OrganizationRole[]\n}\n\nexport interface UsageAlert {\n  orgId: string\n  metric: UsageAlertMetric\n  threshold: number\n  enabled: boolean\n  triggered: boolean\n}\n\nexport interface Audit {\n  service: string\n  orgId: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string\n  entityAttributeValueFrom?: string\n  entityAttributeValueTo?: string\n  parentEntity?: string\n  parentEntityId?: string\n}\n\nexport interface TelemetryData {\n  customerId: string\n  installationId: string\n  entities: Array<{ id: string; type: string }>\n  key: string\n  value: string | number | boolean\n  tags?: Record<string, string>\n  timestampFrom: number\n  timestampTo?: number\n}\n\nexport interface ClusterBulkOperation {\n  uuid: string\n  name: string\n  reason: string\n  eyes: number\n  clusterUuids: string[]\n  type: string\n  created: Date\n  updated?: Date\n  executedAt?: Date\n  createdBy: string\n}\n\nexport interface LlmSpend {\n  orgId: string\n  salesPlanType: SalesPlanType\n  spend: number\n  maxBudget: number\n}\n\nexport type HdpEntity =\n  | 'cluster'\n  | 'clusterBackup'\n  | 'clusterBackupSchedule'\n  | 'clusterRestore'\n  | 'datacenter'\n  | 'generation'\n  | 'channel'\n  | 'clusterPlan'\n  | 'clusterPlanType'\n  | 'alertSubscription'\n  | 'consoleApiClient'\n  | 'connectorSecret'\n  | 'byomClient'\n  | 'secureConnectivity'\n  | 'clusterClient'\n  | 'organization'\n  | 'user'\n  | 'invite'\n  | 'usageAlert'\n  | 'audit'\n  | 'telemetry'\n  | 'userlogin'\n  | 'clusterBulkOperation'\n  | 'clusterModification'\n  | 'clusterModificationConfig'\n  | 'llmSpend'\n\nexport interface HdpPrometheusDataCapacityDataPoint {\n  clusterId?: string\n  ts: number\n  avg: number\n  min: number\n  max: number\n}\n\nexport interface HdpBackendChangeEvent {\n  ts: number\n  data: {\n    stage: string\n    entity: string\n    operation: string\n    data: any\n  }\n}\n"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Limits } from '../dtos/SalesPlan.dto.js'\nimport type { UsageAlertMetric } from '../dtos/UsageAlert.dto.js'\nimport type { ClusterClientPermission } from '../enums/ClusterClientPermissions.enum.js'\nimport type { ConsoleAPIClientPermission } from '../enums/ConsoleApiClientPermission.enum.js'\nimport type { OrganizationRole } from '../enums/OrganizationRole.enum.js'\nimport type { DisplayedSalesPlan, SalesPlanType } from './SalesPlanType.type.js'\n\nexport interface Cluster {\n  uuid: string\n  name: string\n  clusterPlanType: ClusterPlanType\n  clusterPlan: ClusterPlan\n  generation: Generation\n  channel: Channel\n  datacenter?: Datacenter // is not fetched eagerly, if we do not have it we just gonna omit it\n  amountOfIpWhitelistRules: number\n  ownerUuid: string\n  created: Date\n  autoUpdate: boolean\n  mcpEnabled?: boolean\n  businessIdUniquenessEnabled?: boolean\n  optimizeEnabled?: boolean\n  tags?: string[]\n  sleeping?: boolean\n  activeModifications: boolean\n  encryptionKeysSet?: {\n    primaryConfigured: boolean\n    secondaryConfigured: boolean\n  }\n}\nexport interface ClusterBackup {\n  clusterId: string\n  backupId?: string\n}\n\nexport interface ClusterModification {\n  uuid: string\n  clusterUuid: string\n  owner: string\n  createdAt?: Date\n  archivedAt?: Date\n}\n\nexport interface ClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n  yoloJustification?: string\n}\n\n/**\n * HDP-specific interface for ClusterModificationConfig.\n * Used for Holy Data Platform integration - keeps Date objects for timestamp fields.\n */\nexport interface HdpClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n}\n\nexport interface ClusterBackupSchedule {\n  clusterId: string\n  schedule?: string\n}\n\nexport interface ClusterPlanType {\n  uuid: string\n  name: string\n  availabilityClass: string\n  isDevelopment: boolean\n}\n\nexport interface ClusterPlan {\n  uuid: string\n  name: string\n}\n\nexport interface Datacenter {\n  uuid: string\n  name: string\n}\nexport interface Generation {\n  uuid: string\n  name: string\n}\nexport interface Channel {\n  uuid: string\n  name: string\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionType {\n  ClusterAlert = 'ClusterAlert',\n  ProcessAlert = 'ProcessAlert',\n  AllAlerts = 'AllAlerts',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionReportType {\n  Email = 'Email',\n  Webhook = 'Webhook',\n}\nexport interface AlertSubscription {\n  uuid: string\n  clusterUuid?: string\n  target: string // userIdOrWebhook\n  reportType: AlertSubscriptionReportType\n  type: AlertSubscriptionType\n}\n\nexport interface ConsoleApiClient {\n  uuid: string\n  name: string\n  organizationUuid: string\n  permissions: ConsoleAPIClientPermission[]\n}\n\nexport interface ConnectorSecret {\n  clusterUuid: string\n  amountOfSecrets: number\n}\n\nexport interface ByomClient {\n  uuid: string\n  clusterUuid?: string\n  username: string\n}\n\nexport interface SecureConnectivity {\n  clusterUuid: string\n  allowedRegions: string[]\n  allowedPrincipals: string[]\n}\n\nexport interface ClusterClient {\n  uuid: string\n  name: string\n  clusterUuid?: string\n  clientId: string\n  permissions: ClusterClientPermission[]\n}\n\nexport interface Organization {\n  uuid: string\n  name: string\n  salesplan?: {\n    type: SalesPlanType // might be undefined when in limbo\n    displayedType?: DisplayedSalesPlan // might be undefined when in limbo\n    uuid: string // might be undefined when in limbo\n    name: string // might be undefined when in limbo\n    expireDate?: Date\n  }\n  reservations?: {\n    [key: string]: number\n  }\n  earlyAccessFeatures?: string[]\n  justOptedForTheBetaTerms?: boolean\n  salesForceProjectId?: string\n  awsOnly?: boolean\n  limits?: Limits\n}\n\nexport interface User {\n  name: string\n  email: string\n  userId: string\n  orgMemberships?: Array<{ orgUuid: string; roles: OrganizationRole[] }> // can be undefined which means: no new info ;)\n}\n\nexport interface UserLogin {\n  userId: string\n}\n\nexport interface Invite {\n  email: string\n  orgUuid: string\n  roles: OrganizationRole[]\n}\n\nexport interface UsageAlert {\n  orgId: string\n  metric: UsageAlertMetric\n  threshold: number\n  enabled: boolean\n  triggered: boolean\n}\n\nexport interface Audit {\n  service: string\n  orgId: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string\n  entityAttributeValueFrom?: string\n  entityAttributeValueTo?: string\n  parentEntity?: string\n  parentEntityId?: string\n}\n\nexport interface SystemAudit {\n  service: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string | null\n  entityAttributeValueFrom?: string | null\n  entityAttributeValueTo?: string | null\n  orgId?: string | null\n  clusterId?: string | null\n}\n\nexport interface TelemetryData {\n  customerId: string\n  installationId: string\n  entities: Array<{ id: string; type: string }>\n  key: string\n  value: string | number | boolean\n  tags?: Record<string, string>\n  timestampFrom: number\n  timestampTo?: number\n}\n\nexport interface ClusterBulkOperation {\n  uuid: string\n  name: string\n  reason: string\n  eyes: number\n  clusterUuids: string[]\n  type: string\n  created: Date\n  updated?: Date\n  executedAt?: Date\n  createdBy: string\n}\n\nexport interface LlmSpend {\n  orgId: string\n  salesPlanType: SalesPlanType\n  spend: number\n  maxBudget: number\n}\n\nexport type HdpEntity =\n  | 'cluster'\n  | 'clusterBackup'\n  | 'clusterBackupSchedule'\n  | 'clusterRestore'\n  | 'datacenter'\n  | 'generation'\n  | 'channel'\n  | 'clusterPlan'\n  | 'clusterPlanType'\n  | 'alertSubscription'\n  | 'consoleApiClient'\n  | 'connectorSecret'\n  | 'byomClient'\n  | 'secureConnectivity'\n  | 'clusterClient'\n  | 'organization'\n  | 'user'\n  | 'invite'\n  | 'usageAlert'\n  | 'audit'\n  | 'systemAudit'\n  | 'telemetry'\n  | 'userlogin'\n  | 'clusterBulkOperation'\n  | 'clusterModification'\n  | 'clusterModificationConfig'\n  | 'llmSpend'\n\nexport interface HdpPrometheusDataCapacityDataPoint {\n  clusterId?: string\n  ts: number\n  avg: number\n  min: number\n  max: number\n}\n\nexport interface HdpBackendChangeEvent {\n  ts: number\n  data: {\n    stage: string\n    entity: string\n    operation: string\n    data: any\n  }\n}\n"],
   "mappings": "AAuHO,IAAK,wBAAL,kBAAKA,2BAAL;AACL,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAOL,IAAK,8BAAL,kBAAKC,iCAAL;AACL,EAAAA,6BAAA,WAAQ;AACR,EAAAA,6BAAA,aAAU;AAFA,SAAAA;AAAA,GAAA;",
   "names": ["AlertSubscriptionType", "AlertSubscriptionReportType"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camunda/ccma-shared-types",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Shared TypeScript types for Camunda Cloud Management Apps",
   "bugs": {
     "url": "https://github.com/camunda/camunda-cloud-management-apps/issues"