@camunda/ccma-shared-types 0.1.3 → 0.4.0

package/dist/config/camundi-permission-rules.types.d.ts

@@ -44,6 +44,11 @@ export interface HibobEmployee {
     [DEPARTMENT]?: {
         value: string;
     };
+    '/work/reportsTo'?: {
+        value?: {
+            email?: string;
+        };
+    };
     work: {
         reportsTo: {
             email?: string;

package/dist/config/camundi-permission-rules.types.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/config/camundi-permission-rules.types.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\n/**\n * Configuration for automatic permission augmentation for Camundis\n * based on their organizational structure (department, division, subdivision).\n */\nexport interface CamundiPermissionRules {\n  /**\n   * Rules based on department ID or name\n   * Key: department ID (e.g., \"205882305\") or department name (e.g., \"Products\")\n   * Value: array of roles to grant\n   */\n  departmentRules: Record<string, Roles[]>\n\n  /**\n   * Rules based on division name\n   * Key: division name (e.g., \"Engineering\")\n   * Value: array of roles to grant\n   */\n  divisionRules: Record<string, Roles[]>\n\n  /**\n   * Rules based on subdivision ID or name\n   * Key: subdivision ID (e.g., \"256909487\") or name\n   * Value: array of roles to grant\n   */\n  subdivisionRules: Record<string, Roles[]>\n}\n\n// HiBob field paths as constants\nexport const DEPARTMENT = '/work/department'\nexport const DIVISION = '/work/customColumns/column_1629151319875'\nexport const SUB_DIVISION = '/work/customColumns/column_1642024758438'\n\n/**\n * HiBob employee interface (subset of fields we need)\n */\nexport interface HibobEmployee {\n  id: string\n  email?: string\n  '/root/email'?: {\n    value: string\n  }\n  [DIVISION]?: {\n    value: string\n  }\n  [SUB_DIVISION]?: {\n    value: string\n  }\n  [DEPARTMENT]?: {\n    value: string\n  }\n  work: {\n    reportsTo: {\n      email?: string\n    }\n  }\n}\n"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\n/**\n * Configuration for automatic permission augmentation for Camundis\n * based on their organizational structure (department, division, subdivision).\n */\nexport interface CamundiPermissionRules {\n  /**\n   * Rules based on department ID or name\n   * Key: department ID (e.g., \"205882305\") or department name (e.g., \"Products\")\n   * Value: array of roles to grant\n   */\n  departmentRules: Record<string, Roles[]>\n\n  /**\n   * Rules based on division name\n   * Key: division name (e.g., \"Engineering\")\n   * Value: array of roles to grant\n   */\n  divisionRules: Record<string, Roles[]>\n\n  /**\n   * Rules based on subdivision ID or name\n   * Key: subdivision ID (e.g., \"256909487\") or name\n   * Value: array of roles to grant\n   */\n  subdivisionRules: Record<string, Roles[]>\n}\n\n// HiBob field paths as constants\nexport const DEPARTMENT = '/work/department'\nexport const DIVISION = '/work/customColumns/column_1629151319875'\nexport const SUB_DIVISION = '/work/customColumns/column_1642024758438'\n\n/**\n * HiBob employee interface (subset of fields we need)\n */\nexport interface HibobEmployee {\n  id: string\n  email?: string\n  '/root/email'?: {\n    value: string\n  }\n  [DIVISION]?: {\n    value: string\n  }\n  [SUB_DIVISION]?: {\n    value: string\n  }\n  [DEPARTMENT]?: {\n    value: string\n  }\n  '/work/reportsTo'?: {\n    value?: {\n      email?: string\n    }\n  }\n  work: {\n    reportsTo: {\n      email?: string\n    }\n  }\n}\n"],
   "mappings": "AAoCO,MAAM,aAAa;AACnB,MAAM,WAAW;AACjB,MAAM,eAAe;",
   "names": []
 }

package/dist/constants/failoverRegionPairs.const.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Region pairs supported for cross-region failover (#9120). Failover is only
+ * offered for dual-region clusters whose primary and secondary regions form
+ * one of these reverse-region pairs — cluster creation must be supported in
+ * both directions. Both directions of each pair are listed.
+ *
+ * Shared between console-backend (FailoverRouter guard) and c4 (hiding the
+ * failover action for unsupported pairs).
+ */
+export declare const SUPPORTED_FAILOVER_REGION_PAIRS: ReadonlySet<string>;
+export declare function isSupportedFailoverRegionPair(regionA: string | undefined, regionB: string | undefined): boolean;

package/dist/constants/failoverRegionPairs.const.js

@@ -0,0 +1,17 @@
+const SUPPORTED_FAILOVER_REGION_PAIRS = /* @__PURE__ */ new Set([
+  "us-east-2:us-west-2",
+  "us-west-2:us-east-2",
+  "us-east-2:us-east-1",
+  "us-east-1:us-east-2"
+]);
+function isSupportedFailoverRegionPair(regionA, regionB) {
+  if (!regionA || !regionB) return false;
+  return SUPPORTED_FAILOVER_REGION_PAIRS.has(
+    `${regionA.toLowerCase()}:${regionB.toLowerCase()}`
+  );
+}
+export {
+  SUPPORTED_FAILOVER_REGION_PAIRS,
+  isSupportedFailoverRegionPair
+};
+//# sourceMappingURL=failoverRegionPairs.const.js.map

package/dist/constants/failoverRegionPairs.const.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/constants/failoverRegionPairs.const.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/**\n * Region pairs supported for cross-region failover (#9120). Failover is only\n * offered for dual-region clusters whose primary and secondary regions form\n * one of these reverse-region pairs \u2014 cluster creation must be supported in\n * both directions. Both directions of each pair are listed.\n *\n * Shared between console-backend (FailoverRouter guard) and c4 (hiding the\n * failover action for unsupported pairs).\n */\nexport const SUPPORTED_FAILOVER_REGION_PAIRS: ReadonlySet<string> = new Set([\n  'us-east-2:us-west-2',\n  'us-west-2:us-east-2',\n  'us-east-2:us-east-1',\n  'us-east-1:us-east-2',\n])\n\nexport function isSupportedFailoverRegionPair(\n  regionA: string | undefined,\n  regionB: string | undefined,\n): boolean {\n  if (!regionA || !regionB) return false\n  return SUPPORTED_FAILOVER_REGION_PAIRS.has(\n    `${regionA.toLowerCase()}:${regionB.toLowerCase()}`,\n  )\n}\n"],
+  "mappings": "AAeO,MAAM,kCAAuD,oBAAI,IAAI;AAAA,EAC1E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,8BACd,SACA,SACS;AACT,MAAI,CAAC,WAAW,CAAC,QAAS,QAAO;AACjC,SAAO,gCAAgC;AAAA,IACrC,GAAG,QAAQ,YAAY,CAAC,IAAI,QAAQ,YAAY,CAAC;AAAA,EACnD;AACF;",
+  "names": []
+}

package/dist/constants/misc.const.d.ts

@@ -16,6 +16,13 @@ export declare const MINIMUM_EYEPAIRS: {
     CLUSTER_MODIFICATION: number;
 };
 export declare const MAX_HARDWARE_PACKAGE_COUNT = 4;
+/**
+ * Minimum cluster (zeebe) version for the Optimize data-filters feature. Shared by
+ * the c4 settings tile, the new-cluster default, and CRD spec generation so the gate
+ * stays consistent. Stricter than the operator's own gate (Camunda >= 8.9.0-alpha1,
+ * where the exporter starts honoring the filters) — this is the product rollout gate.
+ */
+export declare const OPTIMIZE_FILTERING_MIN_VERSION = "8.10.0-alpha1";
 export declare const SENTRY: {
     dsn: {
         trial: string;

package/dist/constants/misc.const.js

@@ -18,6 +18,7 @@ const MINIMUM_EYEPAIRS = {
   CLUSTER_MODIFICATION: 1
 };
 const MAX_HARDWARE_PACKAGE_COUNT = 4;
+const OPTIMIZE_FILTERING_MIN_VERSION = "8.10.0-alpha1";
 const SENTRY = {
   dsn: {
     trial: "https://a91625f8d3e1b34690588504ed020e14@o4507463051378688.ingest.de.sentry.io/4507463055376464",
@@ -107,6 +108,7 @@ export {
   MAX_LENGTH_CLUSTER_NAME,
   MINIMUM_EYEPAIRS,
   NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,
+  OPTIMIZE_FILTERING_MIN_VERSION,
   SECRETS_MAX_LENGTH,
   SENTRY,
   STARTING_PRICE_PER_MONTH_IN_EURO,

package/dist/constants/misc.const.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/constants/misc.const.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n\nexport const SENTRY = {\n  dsn: {\n    trial:\n      'https://a91625f8d3e1b34690588504ed020e14@o4507463051378688.ingest.de.sentry.io/4507463055376464',\n    console: {\n      frontend:\n        'https://bbf8e6b13f91f7a49ab0b7f079ae8cc0@o132036.ingest.us.sentry.io/4507537062494208',\n      backend:\n        'https://43de708d3ad0199f8c23975a3fd43aa0@o132036.ingest.us.sentry.io/4507537080188928',\n    },\n    accounts: {\n      frontend:\n        'https://49c5d54e4d05418feb80cd4085fa32bd@o132036.ingest.us.sentry.io/4507537094541312',\n      backend:\n        'https://d120a5f0acbf132b1edf58008c674164@o132036.ingest.us.sentry.io/4507537100505088',\n    },\n  },\n  applicationKey: {\n    console: 'ccma-console-frontend-0xDEADBEEF',\n    accounts: 'ccma-accounts-frontend-0xDEADBEEF',\n  },\n  enabled: ['dev', 'int', 'prod'],\n  ignoreTransactions: ['/events', '/assets', '/metrics'],\n  ignoreErrors: [\n    'No activity within 120000 milliseconds. No response received. Reconnecting.',\n    'network error',\n    'Load failed',\n    'Non-Error promise rejection captured with value: Could not clear consent from root domain.',\n    'NetworkError when attempting to fetch resource.',\n    'The initialization timeout of 3000ms has been hit before the network request has completed.',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:update, ParamCount:4',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:simulateEvent, ParamCount:1',\n    `Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node.`,\n    `Failed to execute 'createPolicy' on 'TrustedTypePolicyFactory': Policy with name \"default\" already exists.`,\n    // SSE errors after reload\n    `TypeError: Error in input stream`,\n    `TypeError: Failed to fetch`,\n    `that is not 200. Aborting the connection.`,\n    `chars received. Reconnecting.`,\n  ],\n  // value pair: [preprod, prod]\n  config: {\n    tracesSampleRate: {\n      frontend: {\n        accounts: [0.1, 0.005],\n        console: [0.2, 0.01],\n      },\n      backend: {\n        accounts: [0.1, 0.005],\n        console: [0.0002, 0.0005],\n      },\n    },\n    replaysSessionSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    replaysOnErrorSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    profilesSampleRate: {\n      backend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n      frontend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n    },\n  },\n  configWeight: (env: string, values: number[]) => {\n    if (values && values.length === 2) {\n      if (env === 'prod') {\n        return values[1]\n      } else {\n        return values[0]\n      }\n    }\n    return 0.1\n  },\n}\n"],
-  "mappings": "AAMO,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;AAEnC,MAAM,SAAS;AAAA,EACpB,KAAK;AAAA,IACH,OACE;AAAA,IACF,SAAS;AAAA,MACP,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,MACR,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA,SAAS,CAAC,OAAO,OAAO,MAAM;AAAA,EAC9B,oBAAoB,CAAC,WAAW,WAAW,UAAU;AAAA,EACrD,cAAc;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA;AAAA,EAEA,QAAQ;AAAA,IACN,kBAAkB;AAAA,MAChB,UAAU;AAAA,QACR,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,KAAK,IAAI;AAAA,MACrB;AAAA,MACA,SAAS;AAAA,QACP,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,MAAQ,IAAM;AAAA,MAC1B;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,oBAAoB;AAAA,MAClB,SAAS;AAAA,QACP,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc,CAAC,KAAa,WAAqB;AAC/C,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,UAAI,QAAQ,QAAQ;AAClB,eAAO,OAAO,CAAC;AAAA,MACjB,OAAO;AACL,eAAO,OAAO,CAAC;AAAA,MACjB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n\n/**\n * Minimum cluster (zeebe) version for the Optimize data-filters feature. Shared by\n * the c4 settings tile, the new-cluster default, and CRD spec generation so the gate\n * stays consistent. Stricter than the operator's own gate (Camunda >= 8.9.0-alpha1,\n * where the exporter starts honoring the filters) \u2014 this is the product rollout gate.\n */\nexport const OPTIMIZE_FILTERING_MIN_VERSION = '8.10.0-alpha1'\n\nexport const SENTRY = {\n  dsn: {\n    trial:\n      'https://a91625f8d3e1b34690588504ed020e14@o4507463051378688.ingest.de.sentry.io/4507463055376464',\n    console: {\n      frontend:\n        'https://bbf8e6b13f91f7a49ab0b7f079ae8cc0@o132036.ingest.us.sentry.io/4507537062494208',\n      backend:\n        'https://43de708d3ad0199f8c23975a3fd43aa0@o132036.ingest.us.sentry.io/4507537080188928',\n    },\n    accounts: {\n      frontend:\n        'https://49c5d54e4d05418feb80cd4085fa32bd@o132036.ingest.us.sentry.io/4507537094541312',\n      backend:\n        'https://d120a5f0acbf132b1edf58008c674164@o132036.ingest.us.sentry.io/4507537100505088',\n    },\n  },\n  applicationKey: {\n    console: 'ccma-console-frontend-0xDEADBEEF',\n    accounts: 'ccma-accounts-frontend-0xDEADBEEF',\n  },\n  enabled: ['dev', 'int', 'prod'],\n  ignoreTransactions: ['/events', '/assets', '/metrics'],\n  ignoreErrors: [\n    'No activity within 120000 milliseconds. No response received. Reconnecting.',\n    'network error',\n    'Load failed',\n    'Non-Error promise rejection captured with value: Could not clear consent from root domain.',\n    'NetworkError when attempting to fetch resource.',\n    'The initialization timeout of 3000ms has been hit before the network request has completed.',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:update, ParamCount:4',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:simulateEvent, ParamCount:1',\n    `Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node.`,\n    `Failed to execute 'createPolicy' on 'TrustedTypePolicyFactory': Policy with name \"default\" already exists.`,\n    // SSE errors after reload\n    `TypeError: Error in input stream`,\n    `TypeError: Failed to fetch`,\n    `that is not 200. Aborting the connection.`,\n    `chars received. Reconnecting.`,\n  ],\n  // value pair: [preprod, prod]\n  config: {\n    tracesSampleRate: {\n      frontend: {\n        accounts: [0.1, 0.005],\n        console: [0.2, 0.01],\n      },\n      backend: {\n        accounts: [0.1, 0.005],\n        console: [0.0002, 0.0005],\n      },\n    },\n    replaysSessionSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    replaysOnErrorSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    profilesSampleRate: {\n      backend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n      frontend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n    },\n  },\n  configWeight: (env: string, values: number[]) => {\n    if (values && values.length === 2) {\n      if (env === 'prod') {\n        return values[1]\n      } else {\n        return values[0]\n      }\n    }\n    return 0.1\n  },\n}\n"],
+  "mappings": "AAMO,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;AAQnC,MAAM,iCAAiC;AAEvC,MAAM,SAAS;AAAA,EACpB,KAAK;AAAA,IACH,OACE;AAAA,IACF,SAAS;AAAA,MACP,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,MACR,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA,SAAS,CAAC,OAAO,OAAO,MAAM;AAAA,EAC9B,oBAAoB,CAAC,WAAW,WAAW,UAAU;AAAA,EACrD,cAAc;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA;AAAA,EAEA,QAAQ;AAAA,IACN,kBAAkB;AAAA,MAChB,UAAU;AAAA,QACR,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,KAAK,IAAI;AAAA,MACrB;AAAA,MACA,SAAS;AAAA,QACP,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,MAAQ,IAAM;AAAA,MAC1B;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,oBAAoB;AAAA,MAClB,SAAS;AAAA,QACP,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc,CAAC,KAAa,WAAqB;AAC/C,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,UAAI,QAAQ,QAAQ;AAClB,eAAO,OAAO,CAAC;AAAA,MACjB,OAAO;AACL,eAAO,OAAO,CAAC;AAAA,MACjB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/dist/constants/trialExtensionSurvey.const.js

@@ -1,49 +1,33 @@
 const TRIAL_EXTENSION_SURVEY_QUESTIONS = [
   {
-    id: "use_case",
-    question: "What is the primary use case you are evaluating Camunda for?",
-    type: "select",
-    options: [
-      "Microservices orchestration",
-      "Human workflow / task management",
-      "Event-driven automation",
-      "RPA / legacy system integration",
-      "Other"
-    ],
-    required: true
-  },
-  {
-    id: "blockers",
-    question: "What prevented you from completing your evaluation during the initial trial?",
+    id: "evaluating",
+    question: "What are you evaluating during this trial?",
     type: "multiselect",
     options: [
-      "Not enough time",
-      "Technical complexity",
-      "Missing features or integrations",
-      "Waiting for stakeholder approval",
-      "Comparing with alternatives",
-      "Other"
+      "A specific use case / proof of concept / demo",
+      "Testing a new capability or alpha feature",
+      "Just exploring \u2014 no specific project yet"
     ],
     required: true
   },
   {
-    id: "missing_features",
-    question: "Which specific features or integrations do you still need to evaluate?",
-    type: "text",
-    required: false
-  },
-  {
-    id: "team_size",
-    question: "How many people in your organization would be using Camunda regularly?",
+    id: "timeline",
+    question: "What's your timeline for a production decision?",
     type: "select",
-    options: ["1\u20135", "6\u201320", "21\u2013100", "100+"],
+    options: ["1\u20133 months", "3\u20136 months", "6+ months"],
     required: true
   },
   {
-    id: "decision_timeline",
-    question: "What would help you make a purchase decision in the next 30 days?",
-    type: "text",
-    required: false
+    id: "next_steps",
+    question: "What would help you move forward?",
+    type: "multiselect",
+    options: [
+      "More time to run tests",
+      "Technical guidance / architecture review",
+      "A conversation with our team",
+      "Nothing \u2014 just need more time"
+    ],
+    required: true
   }
 ];
 export {

package/dist/constants/trialExtensionSurvey.const.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/constants/trialExtensionSurvey.const.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport interface TrialExtensionSurveyQuestion {\n  id: string\n  question: string\n  type: 'text' | 'select' | 'multiselect'\n  options?: string[]\n  required: boolean\n}\n\nexport interface TrialExtensionSurveyAnswer {\n  questionId: string\n  answer: string | string[]\n}\n\nexport const TRIAL_EXTENSION_SURVEY_QUESTIONS: TrialExtensionSurveyQuestion[] =\n  [\n    {\n      id: 'use_case',\n      question: 'What is the primary use case you are evaluating Camunda for?',\n      type: 'select',\n      options: [\n        'Microservices orchestration',\n        'Human workflow / task management',\n        'Event-driven automation',\n        'RPA / legacy system integration',\n        'Other',\n      ],\n      required: true,\n    },\n    {\n      id: 'blockers',\n      question:\n        'What prevented you from completing your evaluation during the initial trial?',\n      type: 'multiselect',\n      options: [\n        'Not enough time',\n        'Technical complexity',\n        'Missing features or integrations',\n        'Waiting for stakeholder approval',\n        'Comparing with alternatives',\n        'Other',\n      ],\n      required: true,\n    },\n    {\n      id: 'missing_features',\n      question:\n        'Which specific features or integrations do you still need to evaluate?',\n      type: 'text',\n      required: false,\n    },\n    {\n      id: 'team_size',\n      question:\n        'How many people in your organization would be using Camunda regularly?',\n      type: 'select',\n      options: ['1\u20135', '6\u201320', '21\u2013100', '100+'],\n      required: true,\n    },\n    {\n      id: 'decision_timeline',\n      question:\n        'What would help you make a purchase decision in the next 30 days?',\n      type: 'text',\n      required: false,\n    },\n  ]\n"],
-  "mappings": "AAmBO,MAAM,mCACX;AAAA,EACE;AAAA,IACE,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,MAAM;AAAA,IACN,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,UACE;AAAA,IACF,MAAM;AAAA,IACN,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,UACE;AAAA,IACF,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,UACE;AAAA,IACF,MAAM;AAAA,IACN,SAAS,CAAC,YAAO,aAAQ,eAAU,MAAM;AAAA,IACzC,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,UACE;AAAA,IACF,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport interface TrialExtensionSurveyQuestion {\n  id: string\n  question: string\n  type: 'text' | 'select' | 'multiselect'\n  options?: string[]\n  required: boolean\n}\n\nexport interface TrialExtensionSurveyAnswer {\n  questionId: string\n  answer: string | string[]\n}\n\nexport const TRIAL_EXTENSION_SURVEY_QUESTIONS: TrialExtensionSurveyQuestion[] =\n  [\n    {\n      id: 'evaluating',\n      question: 'What are you evaluating during this trial?',\n      type: 'multiselect',\n      options: [\n        'A specific use case / proof of concept / demo',\n        'Testing a new capability or alpha feature',\n        'Just exploring \u2014 no specific project yet',\n      ],\n      required: true,\n    },\n    {\n      id: 'timeline',\n      question: \"What's your timeline for a production decision?\",\n      type: 'select',\n      options: ['1\u20133 months', '3\u20136 months', '6+ months'],\n      required: true,\n    },\n    {\n      id: 'next_steps',\n      question: 'What would help you move forward?',\n      type: 'multiselect',\n      options: [\n        'More time to run tests',\n        'Technical guidance / architecture review',\n        'A conversation with our team',\n        'Nothing \u2014 just need more time',\n      ],\n      required: true,\n    },\n  ]\n"],
+  "mappings": "AAmBO,MAAM,mCACX;AAAA,EACE;AAAA,IACE,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,MAAM;AAAA,IACN,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,MAAM;AAAA,IACN,SAAS,CAAC,mBAAc,mBAAc,WAAW;AAAA,IACjD,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,MAAM;AAAA,IACN,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,EACZ;AACF;",
   "names": []
 }

package/dist/dtos/ClusterSpecHistory.dto.d.ts

@@ -0,0 +1,24 @@
+/** Who made a cluster spec change (mirrors the console-backend entity). */
+export interface ClusterSpecChangeActor {
+    type: 'user' | 'system' | 'migration';
+    id: string;
+}
+/**
+ * One entry in a cluster's spec-change history. `snapshot` carries a full spec
+ * in `data`; `diff` carries per-key `{ from, to }` changes.
+ */
+export interface ClusterSpecChange {
+    timestamp: string;
+    type: 'snapshot' | 'diff';
+    actor: ClusterSpecChangeActor;
+    data: Record<string, unknown>;
+}
+/**
+ * Cluster spec-change history, exposed on the cluster detail read for callers
+ * with read-all-cluster-info. Populated by the console backend
+ * (`ClusterSpecHistoryData`).
+ */
+export interface ClusterSpecHistory {
+    lastFullSpec: Record<string, unknown>;
+    changes: ClusterSpecChange[];
+}

package/dist/dtos/ClusterSpecHistory.dto.js

@@ -0,0 +1 @@
+//# sourceMappingURL=ClusterSpecHistory.dto.js.map

package/dist/dtos/ClusterSpecHistory.dto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/dtos/CommonCluster.dto.d.ts

@@ -1,4 +1,59 @@
 import type { ClusterPlanTypeDto } from './ClusterPlanType.dto.js';
+/** Inclusion/exclusion pattern lists. Exclusion takes precedence over inclusion;
+ *  an empty inclusion list includes everything. */
+export interface OptimizeFilteringIncludeExclude {
+    inclusion?: string[];
+    exclusion?: string[];
+}
+/**
+ * Optimize Elasticsearch-exporter record filters. Mirrors the operator CRD shape
+ * (`spec.zeebe.exporterFilters`, camunda-operator#5683) so it maps through 1:1.
+ * `variableName.startWith` matches variable names by prefix — the nesting keeps
+ * room for `endWith`/exact match types without a breaking change.
+ */
+export interface OptimizeFilteringConfig {
+    processDefinition?: OptimizeFilteringIncludeExclude;
+    variableName?: {
+        startWith?: OptimizeFilteringIncludeExclude;
+    };
+}
+/**
+ * PATCH-request variant of OptimizeFilteringConfig. Lists may arrive as null (older
+ * clients sent null for empty lists); the controller coerces null to undefined and
+ * reconstructs a clean OptimizeFilteringConfig before persisting.
+ */
+export interface OptimizeFilteringPatch {
+    processDefinition?: {
+        inclusion?: string[] | null;
+        exclusion?: string[] | null;
+    };
+    variableName?: {
+        startWith?: {
+            inclusion?: string[] | null;
+            exclusion?: string[] | null;
+        };
+    };
+}
+/**
+ * BYOIDP Phase 1 (#3190): non-secret config for one custom OIDC provider.
+ * The client secret is NEVER part of this shape — it is written as a K8s Secret
+ * (`idp-config-{clusterId}`, keyed by `name`) and referenced from the CR only.
+ */
+export interface ExternalIdpConfig {
+    /** Registration id. Uppercase letters + digits, starts with a letter (`^[A-Z][A-Z0-9]*$`).
+     *  Doubles as the Secret data key, the `..._OIDC_<NAME>_*` env-var segment, and `clientSecretRef.key`. */
+    name: string;
+    /** Friendly display name shown on the login picker. */
+    clientName: string;
+    issuerUri: string;
+    clientId: string;
+    scopes?: string[];
+    usernameClaim?: string;
+    groupsClaim?: string;
+    clientIdClaim?: string;
+    /** Rotation marker — bumped on every secret write so the CR changes and pods roll. */
+    secretUpdatedAt?: string;
+}
 export interface CommonClusterDto {
     ownerId: string;
     uuid: string;
@@ -45,6 +100,11 @@ export interface CommonClusterDto {
      */
     backupRegionCodes?: string[];
     backupRegionId?: string | null;
+    /**
+     * True once the operator's initial primary→secondary bucket sync has
+     * completed. Failover is only offered when this is true.
+     */
+    secondaryBucketSyncCompleted?: boolean;
     encryption?: string;
     primaryEncryptionKeyId?: string | null;
     secondaryEncryptionKeyId?: string | null;
@@ -55,17 +115,15 @@ export interface CommonClusterDto {
             clientCategories?: string[];
         };
         swagger?: boolean;
+        appIntegrationsEnabled?: boolean;
         optimizeEnabled?: boolean;
-        optimizeFiltering?: {
-            includeProcessIds?: string[];
-            excludeProcessIds?: string[];
-            includeVariableNames?: string[];
-            excludeVariableNames?: string[];
-        };
+        optimizeFiltering?: OptimizeFilteringConfig;
     };
     rba?: boolean;
     identityBackendChecksEnabled?: boolean;
     multiTenancyEnabled?: boolean;
+    externalIdpEnabled?: boolean;
+    externalIdpConfig?: ExternalIdpConfig;
     enforceGroups?: boolean;
     playMode?: boolean;
     mcpEnabled?: boolean;

package/dist/dtos/ConsoleCluster.dto.d.ts

@@ -1,6 +1,7 @@
 import type { ClusterLabels } from '../types/CamundaClusterLabels.type.js';
 import type { ClusterIpWhitelistDto } from './ClusterIpWhitelist.dto.js';
 import type { ClusterPlanDto } from './ClusterPlan.dto.js';
+import type { ClusterSpecHistory } from './ClusterSpecHistory.dto.js';
 import type { CommonClusterDto } from './CommonCluster.dto.js';
 import type { GenerationDto } from './Generations.dto.js';
 import type { K8sContextDto } from './K8sContext.dto.js';
@@ -13,4 +14,10 @@ export interface ConsoleClusterDto extends CommonClusterDto {
     hasOptimize?: boolean;
     hasIdentity?: boolean;
     ipWhitelist?: ClusterIpWhitelistDto[];
+    /**
+     * Spec-change history, present when the caller has read-all-cluster-info
+     * (the backend exposes it under that permission group). Backs the cluster
+     * "Spec Changes" tab.
+     */
+    specHistory?: ClusterSpecHistory;
 }

package/dist/dtos/ControlV2.dto.d.ts

@@ -0,0 +1,177 @@
+import type { SalesPlanType } from '../types/SalesPlanType.type.js';
+/** Generic cursor-paginated response. `nextCursor === null` on the last page. */
+export interface CursorPage<T> {
+    items: T[];
+    nextCursor: string | null;
+}
+/** Cursor pagination query params shared by all v2 list endpoints. */
+export interface CursorParams {
+    cursor?: string;
+    limit?: number;
+}
+export interface ControlSessionUser {
+    id: string;
+    email: string;
+    name: string;
+}
+/**
+ * Flat map of resolved capability flags for the signed-in user, computed
+ * server-side from the existing JWT-claim + Auth0-metadata model (kept as-is,
+ * spec Q12). The shell uses these to gate navigation; the backend flattens its
+ * `Features` object into the subset the nav needs.
+ */
+export type ControlResolvedPermissions = Record<string, boolean>;
+export interface OrgSummaryV2Dto {
+    id: string;
+    name: string;
+    role: string;
+    clusterCount: number;
+}
+export interface ControlSessionDto {
+    user: ControlSessionUser;
+    permissions: ControlResolvedPermissions;
+    organizations: OrgSummaryV2Dto[];
+}
+export interface OrgListItemV2Dto {
+    id: string;
+    name: string;
+    /** ISO-8601; part of the cursor key. */
+    created: string;
+    internal: boolean;
+    salesPlanType?: SalesPlanType;
+    salesForceId?: string;
+    /** Batched per page (spec §9.4 B3); absent if the count lookup failed. */
+    clusterCount?: number;
+}
+export interface ListOrganizationsV2Params extends CursorParams {
+    q?: string;
+    sort?: 'name' | 'created' | 'internal';
+    order?: 'asc' | 'desc';
+    filter?: {
+        internal?: boolean;
+        salesPlanType?: SalesPlanType;
+        /** ISO-8601 lower bound on `created` (age-bucket filters). */
+        createdAfter?: string;
+        /** ISO-8601 upper bound on `created` (age-bucket filters). */
+        createdBefore?: string;
+        /**
+         * Restrict to these org uuids. Backs cross-backend lookups (e.g. org by
+         * cluster name / client id: resolve owner ids on console, then filter
+         * here — spec §14.1 L).
+         */
+        ids?: string[];
+    };
+}
+export interface OrgDetailV2Dto extends OrgListItemV2Dto {
+    /** Full detail fields are added as the detail page is built (Phase 3). */
+    metadata?: Record<string, unknown>;
+}
+export interface OrgMemberV2Dto {
+    userId: string;
+    email: string;
+    name?: string;
+    roles: string[];
+    status: 'active' | 'invited';
+    /** ISO-8601. */
+    invitedAt?: string;
+    /** ISO-8601. */
+    joinedAt?: string;
+}
+export interface ListOrgMembersV2Params extends CursorParams {
+    q?: string;
+}
+export interface ClusterListItemV2Dto {
+    id: string;
+    name: string;
+    orgId: string;
+    orgName: string;
+    /** Normalized server-side; augmented on the fly from the K8s watcher (§9.4 B1). */
+    status: string;
+    plan: string;
+    generation: string;
+    region: string;
+    /** Display-only; not a sort/filter key (§9.4 B2). */
+    load?: number;
+    updateAvailable: boolean;
+    /** Auto-update setting (distinct from `updateAvailable`). */
+    autoUpdate: boolean;
+    /** Release channel name, when the cluster is on one. */
+    channel?: string;
+    /** ISO-8601; part of the cursor key. */
+    created: string;
+}
+/** Detail extends the list shape; richer fields are added in Phase 3. */
+export type ClusterDetailV2Dto = ClusterListItemV2Dto;
+export interface ListClustersV2Params extends CursorParams {
+    q?: string;
+    sort?: 'name' | 'created';
+    order?: 'asc' | 'desc';
+    filter?: {
+        status?: string;
+        /** Cluster plan TYPE name (maps to `planType.name`; legacy param name). */
+        plan?: string;
+        /** Cluster plan name (the concrete `plan.name`, not the type). */
+        planName?: string;
+        generation?: string;
+        region?: string;
+        /** Cloud provider (resolved via the k8s-context config, like `region`). */
+        provider?: string;
+        /** Exact k8s context uuid. */
+        k8sContext?: string;
+        orgId?: string;
+        /** Restrict to these owner org uuids (cross-backend sales-plan filters). */
+        orgIds?: string[];
+        /** Restrict to these cluster uuids (prefilter-by-id). */
+        ids?: string[];
+        /** Auto-update on/off. */
+        autoUpdate?: boolean;
+        /** Internal (Camunda-owned) clusters only / excluded. */
+        internal?: boolean;
+        /** Only clusters with (true) / without (false) an active modification. */
+        hasActiveModification?: boolean;
+        /**
+         * Zeebe minor-version prefix match on the generation's versions (e.g.
+         * "8.7" matches zeebe 8.7.x).
+         */
+        minorVersion?: string;
+        /** Release channel name. */
+        channel?: string;
+        /** ISO-8601 lower bound on `created` (e.g. "created in the last 7 days"). */
+        createdAfter?: string;
+    };
+}
+export interface ClusterParameterOptionV2Dto {
+    id: string;
+    name: string;
+}
+export interface ClusterParametersV2Dto {
+    plans: ClusterParameterOptionV2Dto[];
+    generations: ClusterParameterOptionV2Dto[];
+    regions: ClusterParameterOptionV2Dto[];
+}
+/**
+ * Aggregated cluster distribution counts (GET /v2/clusters/facets), backing
+ * the list page's distribution charts and quick-filter tiles without a
+ * client-side full-table scan (spec §14.0 hybrid model). SQL-backed facets
+ * (generation/planType/channel/autoUpdate) come from GROUP BYs; status and
+ * provider are aggregated in-app from the K8s watcher / context config.
+ */
+export interface ClusterFacetsV2Dto {
+    total: number;
+    status: Record<string, number>;
+    generation: Record<string, number>;
+    planType: Record<string, number>;
+    channel: Record<string, number>;
+    provider: Record<string, number>;
+    autoUpdate: {
+        on: number;
+        off: number;
+    };
+    /** Clusters with an active (non-archived) modification. */
+    activeModifications: number;
+}
+/** Cluster/owner resolution for a Zeebe client id (cross-backend org search). */
+export interface ClusterByClientV2Dto {
+    clusterId: string;
+    orgId: string;
+}

package/dist/dtos/ControlV2.dto.js

@@ -0,0 +1 @@
+//# sourceMappingURL=ControlV2.dto.js.map

package/dist/dtos/ControlV2.dto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}