@camunda/ccma-shared-types 0.2.0 → 0.5.0

package/dist/_tests/constants/failoverRegionPairs.const.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_tests/search/compiler.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_tests/search/parser.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_tests/search/registry.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_tests/types/ClusterPlanFields.type.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/constants/failoverRegionPairs.const.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Region pairs supported for cross-region failover (#9120). Failover is only
+ * offered for dual-region clusters whose primary and secondary regions form
+ * one of these reverse-region pairs — cluster creation must be supported in
+ * both directions. Both directions of each pair are listed.
+ *
+ * This is the base set, enabled on every stage.
+ *
+ * Shared between console-backend (FailoverRouter guard) and c4 (hiding the
+ * failover action for unsupported pairs).
+ */
+export declare const SUPPORTED_FAILOVER_REGION_PAIRS: ReadonlySet<string>;
+/**
+ * `stage` mirrors the featureflags `onlyDev` gate: the EU test pairs unlock only
+ * on 'local'/'dev'. Omitting stage (or passing any non-dev stage) allows the
+ * base set only, so prod never sees the dev pairs.
+ */
+export declare function isSupportedFailoverRegionPair(regionA: string | undefined, regionB: string | undefined, stage?: string): boolean;

package/dist/constants/failoverRegionPairs.const.js

@@ -0,0 +1,22 @@
+const SUPPORTED_FAILOVER_REGION_PAIRS = /* @__PURE__ */ new Set([
+  "us-east-2:us-west-2",
+  "us-west-2:us-east-2",
+  "us-east-2:us-east-1",
+  "us-east-1:us-east-2"
+]);
+const DEV_FAILOVER_REGION_PAIRS = /* @__PURE__ */ new Set([
+  "eu-west-1:eu-west-2",
+  "eu-west-2:eu-west-1"
+]);
+function isSupportedFailoverRegionPair(regionA, regionB, stage) {
+  if (!regionA || !regionB) return false;
+  const pair = `${regionA.toLowerCase()}:${regionB.toLowerCase()}`;
+  if (SUPPORTED_FAILOVER_REGION_PAIRS.has(pair)) return true;
+  const isDev = stage === "local" || stage === "dev";
+  return isDev && DEV_FAILOVER_REGION_PAIRS.has(pair);
+}
+export {
+  SUPPORTED_FAILOVER_REGION_PAIRS,
+  isSupportedFailoverRegionPair
+};
+//# sourceMappingURL=failoverRegionPairs.const.js.map

package/dist/constants/failoverRegionPairs.const.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/constants/failoverRegionPairs.const.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/**\n * Region pairs supported for cross-region failover (#9120). Failover is only\n * offered for dual-region clusters whose primary and secondary regions form\n * one of these reverse-region pairs \u2014 cluster creation must be supported in\n * both directions. Both directions of each pair are listed.\n *\n * This is the base set, enabled on every stage.\n *\n * Shared between console-backend (FailoverRouter guard) and c4 (hiding the\n * failover action for unsupported pairs).\n */\nexport const SUPPORTED_FAILOVER_REGION_PAIRS: ReadonlySet<string> = new Set([\n  'us-east-2:us-west-2',\n  'us-west-2:us-east-2',\n  'us-east-2:us-east-1',\n  'us-east-1:us-east-2',\n])\n\n// Dev-only test pairs: EU failover validation on dev/local before prod rollout.\nconst DEV_FAILOVER_REGION_PAIRS: ReadonlySet<string> = new Set([\n  'eu-west-1:eu-west-2',\n  'eu-west-2:eu-west-1',\n])\n\n/**\n * `stage` mirrors the featureflags `onlyDev` gate: the EU test pairs unlock only\n * on 'local'/'dev'. Omitting stage (or passing any non-dev stage) allows the\n * base set only, so prod never sees the dev pairs.\n */\nexport function isSupportedFailoverRegionPair(\n  regionA: string | undefined,\n  regionB: string | undefined,\n  stage?: string,\n): boolean {\n  if (!regionA || !regionB) return false\n  const pair = `${regionA.toLowerCase()}:${regionB.toLowerCase()}`\n  if (SUPPORTED_FAILOVER_REGION_PAIRS.has(pair)) return true\n  const isDev = stage === 'local' || stage === 'dev'\n  return isDev && DEV_FAILOVER_REGION_PAIRS.has(pair)\n}\n"],
+  "mappings": "AAiBO,MAAM,kCAAuD,oBAAI,IAAI;AAAA,EAC1E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,MAAM,4BAAiD,oBAAI,IAAI;AAAA,EAC7D;AAAA,EACA;AACF,CAAC;AAOM,SAAS,8BACd,SACA,SACA,OACS;AACT,MAAI,CAAC,WAAW,CAAC,QAAS,QAAO;AACjC,QAAM,OAAO,GAAG,QAAQ,YAAY,CAAC,IAAI,QAAQ,YAAY,CAAC;AAC9D,MAAI,gCAAgC,IAAI,IAAI,EAAG,QAAO;AACtD,QAAM,QAAQ,UAAU,WAAW,UAAU;AAC7C,SAAO,SAAS,0BAA0B,IAAI,IAAI;AACpD;",
+  "names": []
+}

package/dist/constants/misc.const.d.ts

@@ -16,6 +16,13 @@ export declare const MINIMUM_EYEPAIRS: {
     CLUSTER_MODIFICATION: number;
 };
 export declare const MAX_HARDWARE_PACKAGE_COUNT = 4;
+/**
+ * Minimum cluster (zeebe) version for the Optimize data-filters feature. Shared by
+ * the c4 settings tile, the new-cluster default, and CRD spec generation so the gate
+ * stays consistent. Stricter than the operator's own gate (Camunda >= 8.9.0-alpha1,
+ * where the exporter starts honoring the filters) — this is the product rollout gate.
+ */
+export declare const OPTIMIZE_FILTERING_MIN_VERSION = "8.10.0-alpha1";
 export declare const SENTRY: {
     dsn: {
         trial: string;

package/dist/constants/misc.const.js

@@ -18,6 +18,7 @@ const MINIMUM_EYEPAIRS = {
   CLUSTER_MODIFICATION: 1
 };
 const MAX_HARDWARE_PACKAGE_COUNT = 4;
+const OPTIMIZE_FILTERING_MIN_VERSION = "8.10.0-alpha1";
 const SENTRY = {
   dsn: {
     trial: "https://a91625f8d3e1b34690588504ed020e14@o4507463051378688.ingest.de.sentry.io/4507463055376464",
@@ -107,6 +108,7 @@ export {
   MAX_LENGTH_CLUSTER_NAME,
   MINIMUM_EYEPAIRS,
   NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,
+  OPTIMIZE_FILTERING_MIN_VERSION,
   SECRETS_MAX_LENGTH,
   SENTRY,
   STARTING_PRICE_PER_MONTH_IN_EURO,

package/dist/constants/misc.const.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/constants/misc.const.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n\nexport const SENTRY = {\n  dsn: {\n    trial:\n      'https://a91625f8d3e1b34690588504ed020e14@o4507463051378688.ingest.de.sentry.io/4507463055376464',\n    console: {\n      frontend:\n        'https://bbf8e6b13f91f7a49ab0b7f079ae8cc0@o132036.ingest.us.sentry.io/4507537062494208',\n      backend:\n        'https://43de708d3ad0199f8c23975a3fd43aa0@o132036.ingest.us.sentry.io/4507537080188928',\n    },\n    accounts: {\n      frontend:\n        'https://49c5d54e4d05418feb80cd4085fa32bd@o132036.ingest.us.sentry.io/4507537094541312',\n      backend:\n        'https://d120a5f0acbf132b1edf58008c674164@o132036.ingest.us.sentry.io/4507537100505088',\n    },\n  },\n  applicationKey: {\n    console: 'ccma-console-frontend-0xDEADBEEF',\n    accounts: 'ccma-accounts-frontend-0xDEADBEEF',\n  },\n  enabled: ['dev', 'int', 'prod'],\n  ignoreTransactions: ['/events', '/assets', '/metrics'],\n  ignoreErrors: [\n    'No activity within 120000 milliseconds. No response received. Reconnecting.',\n    'network error',\n    'Load failed',\n    'Non-Error promise rejection captured with value: Could not clear consent from root domain.',\n    'NetworkError when attempting to fetch resource.',\n    'The initialization timeout of 3000ms has been hit before the network request has completed.',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:update, ParamCount:4',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:simulateEvent, ParamCount:1',\n    `Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node.`,\n    `Failed to execute 'createPolicy' on 'TrustedTypePolicyFactory': Policy with name \"default\" already exists.`,\n    // SSE errors after reload\n    `TypeError: Error in input stream`,\n    `TypeError: Failed to fetch`,\n    `that is not 200. Aborting the connection.`,\n    `chars received. Reconnecting.`,\n  ],\n  // value pair: [preprod, prod]\n  config: {\n    tracesSampleRate: {\n      frontend: {\n        accounts: [0.1, 0.005],\n        console: [0.2, 0.01],\n      },\n      backend: {\n        accounts: [0.1, 0.005],\n        console: [0.0002, 0.0005],\n      },\n    },\n    replaysSessionSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    replaysOnErrorSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    profilesSampleRate: {\n      backend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n      frontend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n    },\n  },\n  configWeight: (env: string, values: number[]) => {\n    if (values && values.length === 2) {\n      if (env === 'prod') {\n        return values[1]\n      } else {\n        return values[0]\n      }\n    }\n    return 0.1\n  },\n}\n"],
-  "mappings": "AAMO,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;AAEnC,MAAM,SAAS;AAAA,EACpB,KAAK;AAAA,IACH,OACE;AAAA,IACF,SAAS;AAAA,MACP,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,MACR,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA,SAAS,CAAC,OAAO,OAAO,MAAM;AAAA,EAC9B,oBAAoB,CAAC,WAAW,WAAW,UAAU;AAAA,EACrD,cAAc;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA;AAAA,EAEA,QAAQ;AAAA,IACN,kBAAkB;AAAA,MAChB,UAAU;AAAA,QACR,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,KAAK,IAAI;AAAA,MACrB;AAAA,MACA,SAAS;AAAA,QACP,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,MAAQ,IAAM;AAAA,MAC1B;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,oBAAoB;AAAA,MAClB,SAAS;AAAA,QACP,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc,CAAC,KAAa,WAAqB;AAC/C,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,UAAI,QAAQ,QAAQ;AAClB,eAAO,OAAO,CAAC;AAAA,MACjB,OAAO;AACL,eAAO,OAAO,CAAC;AAAA,MACjB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n\n/**\n * Minimum cluster (zeebe) version for the Optimize data-filters feature. Shared by\n * the c4 settings tile, the new-cluster default, and CRD spec generation so the gate\n * stays consistent. Stricter than the operator's own gate (Camunda >= 8.9.0-alpha1,\n * where the exporter starts honoring the filters) \u2014 this is the product rollout gate.\n */\nexport const OPTIMIZE_FILTERING_MIN_VERSION = '8.10.0-alpha1'\n\nexport const SENTRY = {\n  dsn: {\n    trial:\n      'https://a91625f8d3e1b34690588504ed020e14@o4507463051378688.ingest.de.sentry.io/4507463055376464',\n    console: {\n      frontend:\n        'https://bbf8e6b13f91f7a49ab0b7f079ae8cc0@o132036.ingest.us.sentry.io/4507537062494208',\n      backend:\n        'https://43de708d3ad0199f8c23975a3fd43aa0@o132036.ingest.us.sentry.io/4507537080188928',\n    },\n    accounts: {\n      frontend:\n        'https://49c5d54e4d05418feb80cd4085fa32bd@o132036.ingest.us.sentry.io/4507537094541312',\n      backend:\n        'https://d120a5f0acbf132b1edf58008c674164@o132036.ingest.us.sentry.io/4507537100505088',\n    },\n  },\n  applicationKey: {\n    console: 'ccma-console-frontend-0xDEADBEEF',\n    accounts: 'ccma-accounts-frontend-0xDEADBEEF',\n  },\n  enabled: ['dev', 'int', 'prod'],\n  ignoreTransactions: ['/events', '/assets', '/metrics'],\n  ignoreErrors: [\n    'No activity within 120000 milliseconds. No response received. Reconnecting.',\n    'network error',\n    'Load failed',\n    'Non-Error promise rejection captured with value: Could not clear consent from root domain.',\n    'NetworkError when attempting to fetch resource.',\n    'The initialization timeout of 3000ms has been hit before the network request has completed.',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:update, ParamCount:4',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:simulateEvent, ParamCount:1',\n    `Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node.`,\n    `Failed to execute 'createPolicy' on 'TrustedTypePolicyFactory': Policy with name \"default\" already exists.`,\n    // SSE errors after reload\n    `TypeError: Error in input stream`,\n    `TypeError: Failed to fetch`,\n    `that is not 200. Aborting the connection.`,\n    `chars received. Reconnecting.`,\n  ],\n  // value pair: [preprod, prod]\n  config: {\n    tracesSampleRate: {\n      frontend: {\n        accounts: [0.1, 0.005],\n        console: [0.2, 0.01],\n      },\n      backend: {\n        accounts: [0.1, 0.005],\n        console: [0.0002, 0.0005],\n      },\n    },\n    replaysSessionSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    replaysOnErrorSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    profilesSampleRate: {\n      backend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n      frontend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n    },\n  },\n  configWeight: (env: string, values: number[]) => {\n    if (values && values.length === 2) {\n      if (env === 'prod') {\n        return values[1]\n      } else {\n        return values[0]\n      }\n    }\n    return 0.1\n  },\n}\n"],
+  "mappings": "AAMO,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;AAQnC,MAAM,iCAAiC;AAEvC,MAAM,SAAS;AAAA,EACpB,KAAK;AAAA,IACH,OACE;AAAA,IACF,SAAS;AAAA,MACP,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,MACR,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA,SAAS,CAAC,OAAO,OAAO,MAAM;AAAA,EAC9B,oBAAoB,CAAC,WAAW,WAAW,UAAU;AAAA,EACrD,cAAc;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA;AAAA,EAEA,QAAQ;AAAA,IACN,kBAAkB;AAAA,MAChB,UAAU;AAAA,QACR,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,KAAK,IAAI;AAAA,MACrB;AAAA,MACA,SAAS;AAAA,QACP,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,MAAQ,IAAM;AAAA,MAC1B;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,oBAAoB;AAAA,MAClB,SAAS;AAAA,QACP,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc,CAAC,KAAa,WAAqB;AAC/C,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,UAAI,QAAQ,QAAQ;AAClB,eAAO,OAAO,CAAC;AAAA,MACjB,OAAO;AACL,eAAO,OAAO,CAAC;AAAA,MACjB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/dist/dtos/Backup.dto.d.ts

@@ -18,4 +18,9 @@ export interface BackupDto {
      * backup has no `generationUuid` at all (legacy backups).
      */
     generationName?: string;
+    /**
+     * Link to the incident Slack channel, from the `incident-link` annotation
+     * on the Backup CR. Only set on internal (incident) backups.
+     */
+    incidentLink?: string;
 }

package/dist/dtos/ClusterPlan.dto.d.ts

@@ -7,4 +7,9 @@ export interface ClusterPlanDto {
     createdBy?: string;
     createdByName?: string;
     performanceExpectations?: string | null;
+    /**
+     * Number of clusters on this plan. Populated by the list endpoint
+     * (`GET api/plans`); absent on responses that don't compute it.
+     */
+    clusterCount?: number;
 }

package/dist/dtos/ClusterPlanType.dto.d.ts

@@ -1,5 +1,6 @@
 import type { ClusterPlanTypeCategory } from '../types/ClusterPlanTypeCategory.type.js';
 import type { ClusterPlanDto } from './ClusterPlan.dto.js';
+import type { ClusterLimits } from './SalesPlan.dto.js';
 export interface ClusterPlanTypeDto {
     uuid: string;
     name: string;
@@ -12,4 +13,9 @@ export interface ClusterPlanTypeDto {
     availabilityClass?: string;
     deprecated?: boolean;
     category: ClusterPlanTypeCategory;
+    /**
+     * Per-component data-retention overrides, set via the Set Limits action.
+     * Returned by the plan-type endpoints (the entity column is `@Expose`d).
+     */
+    limits?: ClusterLimits;
 }

package/dist/dtos/ClusterSpecHistory.dto.d.ts

@@ -0,0 +1,24 @@
+/** Who made a cluster spec change (mirrors the console-backend entity). */
+export interface ClusterSpecChangeActor {
+    type: 'user' | 'system' | 'migration';
+    id: string;
+}
+/**
+ * One entry in a cluster's spec-change history. `snapshot` carries a full spec
+ * in `data`; `diff` carries per-key `{ from, to }` changes.
+ */
+export interface ClusterSpecChange {
+    timestamp: string;
+    type: 'snapshot' | 'diff';
+    actor: ClusterSpecChangeActor;
+    data: Record<string, unknown>;
+}
+/**
+ * Cluster spec-change history, exposed on the cluster detail read for callers
+ * with read-all-cluster-info. Populated by the console backend
+ * (`ClusterSpecHistoryData`).
+ */
+export interface ClusterSpecHistory {
+    lastFullSpec: Record<string, unknown>;
+    changes: ClusterSpecChange[];
+}

package/dist/dtos/ClusterSpecHistory.dto.js

@@ -0,0 +1 @@
+//# sourceMappingURL=ClusterSpecHistory.dto.js.map

package/dist/dtos/ClusterSpecHistory.dto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/dtos/CommonCluster.dto.d.ts

@@ -1,4 +1,59 @@
 import type { ClusterPlanTypeDto } from './ClusterPlanType.dto.js';
+/** Inclusion/exclusion pattern lists. Exclusion takes precedence over inclusion;
+ *  an empty inclusion list includes everything. */
+export interface OptimizeFilteringIncludeExclude {
+    inclusion?: string[];
+    exclusion?: string[];
+}
+/**
+ * Optimize Elasticsearch-exporter record filters. Mirrors the operator CRD shape
+ * (`spec.zeebe.exporterFilters`, camunda-operator#5683) so it maps through 1:1.
+ * `variableName.startWith` matches variable names by prefix — the nesting keeps
+ * room for `endWith`/exact match types without a breaking change.
+ */
+export interface OptimizeFilteringConfig {
+    processDefinition?: OptimizeFilteringIncludeExclude;
+    variableName?: {
+        startWith?: OptimizeFilteringIncludeExclude;
+    };
+}
+/**
+ * PATCH-request variant of OptimizeFilteringConfig. Lists may arrive as null (older
+ * clients sent null for empty lists); the controller coerces null to undefined and
+ * reconstructs a clean OptimizeFilteringConfig before persisting.
+ */
+export interface OptimizeFilteringPatch {
+    processDefinition?: {
+        inclusion?: string[] | null;
+        exclusion?: string[] | null;
+    };
+    variableName?: {
+        startWith?: {
+            inclusion?: string[] | null;
+            exclusion?: string[] | null;
+        };
+    };
+}
+/**
+ * BYOIDP Phase 1 (#3190): non-secret config for one custom OIDC provider.
+ * The client secret is NEVER part of this shape — it is written as a K8s Secret
+ * (`idp-config-{clusterId}`, keyed by `name`) and referenced from the CR only.
+ */
+export interface ExternalIdpConfig {
+    /** Registration id. Uppercase letters + digits, starts with a letter (`^[A-Z][A-Z0-9]*$`).
+     *  Doubles as the Secret data key, the `..._OIDC_<NAME>_*` env-var segment, and `clientSecretRef.key`. */
+    name: string;
+    /** Friendly display name shown on the login picker. */
+    clientName: string;
+    issuerUri: string;
+    clientId: string;
+    scopes?: string[];
+    usernameClaim?: string;
+    groupsClaim?: string;
+    clientIdClaim?: string;
+    /** Rotation marker — bumped on every secret write so the CR changes and pods roll. */
+    secretUpdatedAt?: string;
+}
 export interface CommonClusterDto {
     ownerId: string;
     uuid: string;
@@ -20,7 +75,12 @@ export interface CommonClusterDto {
         connectorsUrl?: string;
         conditions?: Array<{
             type: string;
+            /** k8s condition status: 'True' | 'False' | 'Unknown'. Present on the wire
+             *  (the operator sets it); consumers use it to tell an active condition from
+             *  a resolved one rather than relying on presence/absence alone. */
+            status?: string;
             reason?: string;
+            message?: string;
             lastTransitionTime?: string;
         }>;
         updateClusterStatus?: {
@@ -45,6 +105,11 @@ export interface CommonClusterDto {
      */
     backupRegionCodes?: string[];
     backupRegionId?: string | null;
+    /**
+     * True once the operator's initial primary→secondary bucket sync has
+     * completed. Failover is only offered when this is true.
+     */
+    secondaryBucketSyncCompleted?: boolean;
     encryption?: string;
     primaryEncryptionKeyId?: string | null;
     secondaryEncryptionKeyId?: string | null;
@@ -55,17 +120,15 @@ export interface CommonClusterDto {
             clientCategories?: string[];
         };
         swagger?: boolean;
+        appIntegrationsEnabled?: boolean;
         optimizeEnabled?: boolean;
-        optimizeFiltering?: {
-            includeProcessIds?: string[];
-            excludeProcessIds?: string[];
-            includeVariableNames?: string[];
-            excludeVariableNames?: string[];
-        };
+        optimizeFiltering?: OptimizeFilteringConfig;
     };
     rba?: boolean;
     identityBackendChecksEnabled?: boolean;
     multiTenancyEnabled?: boolean;
+    externalIdpEnabled?: boolean;
+    externalIdpConfig?: ExternalIdpConfig;
     enforceGroups?: boolean;
     playMode?: boolean;
     mcpEnabled?: boolean;
@@ -80,6 +143,8 @@ export interface CommonClusterDto {
     planType: ClusterPlanTypeDto;
     numberOfAllocatedHwPackages?: number;
     restoreInProgress?: boolean;
+    restoreFailed?: boolean;
+    failedRestoreId?: string;
     overrideEnvVars?: {
         zeebeBroker: string | undefined;
         zeebeGateway: string | undefined;

package/dist/dtos/ConsoleCluster.dto.d.ts

@@ -1,6 +1,7 @@
 import type { ClusterLabels } from '../types/CamundaClusterLabels.type.js';
 import type { ClusterIpWhitelistDto } from './ClusterIpWhitelist.dto.js';
 import type { ClusterPlanDto } from './ClusterPlan.dto.js';
+import type { ClusterSpecHistory } from './ClusterSpecHistory.dto.js';
 import type { CommonClusterDto } from './CommonCluster.dto.js';
 import type { GenerationDto } from './Generations.dto.js';
 import type { K8sContextDto } from './K8sContext.dto.js';
@@ -13,4 +14,10 @@ export interface ConsoleClusterDto extends CommonClusterDto {
     hasOptimize?: boolean;
     hasIdentity?: boolean;
     ipWhitelist?: ClusterIpWhitelistDto[];
+    /**
+     * Spec-change history, present when the caller has read-all-cluster-info
+     * (the backend exposes it under that permission group). Backs the cluster
+     * "Spec Changes" tab.
+     */
+    specHistory?: ClusterSpecHistory;
 }

package/dist/dtos/ControlV2.dto.d.ts

@@ -39,17 +39,38 @@ export interface OrgListItemV2Dto {
     created: string;
     internal: boolean;
     salesPlanType?: SalesPlanType;
+    /** Concrete plan name (`SalesPlan.name`), distinct from the tier `salesPlanType`. */
+    salesPlanName?: string;
     salesForceId?: string;
-    /** Batched per page (spec §9.4 B3); absent if the count lookup failed. */
-    clusterCount?: number;
 }
 export interface ListOrganizationsV2Params extends CursorParams {
     q?: string;
+    /**
+     * Lucene-style query over the org fields (see `ORGANIZATION_SEARCH_FIELDS`).
+     * ANDed with `q`/`filter` server-side; a bare term behaves like `q`.
+     */
+    query?: string;
     sort?: 'name' | 'created' | 'internal';
     order?: 'asc' | 'desc';
     filter?: {
         internal?: boolean;
-        salesPlanType?: SalesPlanType;
+        /** Sales plan tiers (`SalesPlanType`); multi-select, matched with `IN (...)`. */
+        salesPlanTypes?: SalesPlanType[];
+        /**
+         * Concrete plan names (`SalesPlan.name`, distinct from the tier); backs the
+         * "Sales plan name" filter. Multi-select, matched with `IN (...)`.
+         */
+        salesPlanNames?: string[];
+        /** ISO-8601 lower bound on `created` (age-bucket filters). */
+        createdAfter?: string;
+        /** ISO-8601 upper bound on `created` (age-bucket filters). */
+        createdBefore?: string;
+        /**
+         * Restrict to these org uuids. Backs cross-backend lookups (e.g. org by
+         * cluster name / client id: resolve owner ids on console, then filter
+         * here — spec §14.1 L).
+         */
+        ids?: string[];
     };
 }
 export interface OrgDetailV2Dto extends OrgListItemV2Dto {
@@ -77,12 +98,19 @@ export interface ClusterListItemV2Dto {
     orgName: string;
     /** Normalized server-side; augmented on the fly from the K8s watcher (§9.4 B1). */
     status: string;
-    plan: string;
+    /** Plan type name (`ClusterPlanType.name`). Backs the "Plan type" column. */
+    planTypeName: string;
+    /** Concrete plan name (`ClusterPlan.name`). Backs the "Plan" column. */
+    planName?: string;
     generation: string;
     region: string;
     /** Display-only; not a sort/filter key (§9.4 B2). */
     load?: number;
     updateAvailable: boolean;
+    /** Auto-update setting (distinct from `updateAvailable`). */
+    autoUpdate: boolean;
+    /** Release channel name, when the cluster is on one. */
+    channel?: string;
     /** ISO-8601; part of the cursor key. */
     created: string;
 }
@@ -90,14 +118,74 @@ export interface ClusterListItemV2Dto {
 export type ClusterDetailV2Dto = ClusterListItemV2Dto;
 export interface ListClustersV2Params extends CursorParams {
     q?: string;
-    sort?: 'name' | 'created';
+    /**
+     * Lucene-style query over the cluster fields (see `CLUSTER_SEARCH_FIELDS`).
+     * ANDed with `q`/`filter` server-side; a bare term behaves like `q`.
+     */
+    query?: string;
+    /**
+     * Server-side sort key. Beyond `name`/`created`, the clusters list also sorts
+     * by the DB-backed columns behind these list columns (the values are the
+     * frontend column `key`s, mapped to SQL expressions in the controller):
+     * `orgName` (owner id), `autoUpdate`, `planName`, `planTypeName`, `generation`,
+     * `channel`. `status`/`region` are intentionally excluded — they're computed
+     * from live K8s state / context config, not SQL columns.
+     */
+    sort?: 'name' | 'created' | 'orgName' | 'autoUpdate' | 'planName' | 'planTypeName' | 'generation' | 'channel';
     order?: 'asc' | 'desc';
     filter?: {
         status?: string;
+        /**
+         * Cluster plan TYPE name (maps to `planType.name`; legacy single-value
+         * param, still used by the plan-type detail page's cluster-distribution
+         * read — kept alongside `planTypeNames` rather than replaced).
+         */
         plan?: string;
-        generation?: string;
-        region?: string;
+        /**
+         * Restrict to these plan TYPE names (`planType.name`); the Control
+         * clusters list's multi-select "Plan type" filter.
+         */
+        planTypeNames?: string[];
+        /**
+         * Restrict to these concrete plan names (`plan.name`, the `ClusterPlan`
+         * entity — NOT the plan type); backs the Control clusters list's "Plan"
+         * filter, whose dropdown is sourced from `ClusterPlan` via
+         * `/clusters/parameters`. Corrected in #9325 (second pass): a prior fix
+         * on this branch mistakenly repointed this at `planType.name` to match a
+         * dropdown that was, at the time, wrongly sourced from `ClusterPlanType`
+         * — but the dropdown was the actual bug. Both the dropdown and this query
+         * now consistently reference `ClusterPlan`. Distinct from `planTypeNames`
+         * above, which is the separate "Plan type" filter over `ClusterPlanType`.
+         */
+        planNames?: string[];
+        /** Restrict to these generation names (`generation.name`). */
+        generationNames?: string[];
+        /** Restrict to these region names (resolved via the k8s-context config). */
+        regions?: string[];
+        /** Restrict to these cloud providers (resolved via the k8s-context config). */
+        providers?: string[];
+        /** Exact k8s context uuid. */
+        k8sContext?: string;
         orgId?: string;
+        /** Restrict to these owner org uuids (cross-backend sales-plan filters). */
+        orgIds?: string[];
+        /** Restrict to these cluster uuids (prefilter-by-id). */
+        ids?: string[];
+        /** Auto-update on/off. */
+        autoUpdate?: boolean;
+        /** Internal (Camunda-owned) clusters only / excluded. */
+        internal?: boolean;
+        /** Only clusters with (true) / without (false) an active modification. */
+        hasActiveModification?: boolean;
+        /**
+         * Zeebe minor-version prefix match on the generation's versions (e.g.
+         * "8.7" matches zeebe 8.7.x).
+         */
+        minorVersion?: string;
+        /** Restrict to these release channel names. */
+        channels?: string[];
+        /** ISO-8601 lower bound on `created` (e.g. "created in the last 7 days"). */
+        createdAfter?: string;
     };
 }
 export interface ClusterParameterOptionV2Dto {
@@ -109,3 +197,29 @@ export interface ClusterParametersV2Dto {
     generations: ClusterParameterOptionV2Dto[];
     regions: ClusterParameterOptionV2Dto[];
 }
+/**
+ * Aggregated cluster distribution counts (GET /v2/clusters/facets), backing
+ * the list page's distribution charts and quick-filter tiles without a
+ * client-side full-table scan (spec §14.0 hybrid model). SQL-backed facets
+ * (generation/planType/channel/autoUpdate) come from GROUP BYs; status and
+ * provider are aggregated in-app from the K8s watcher / context config.
+ */
+export interface ClusterFacetsV2Dto {
+    total: number;
+    status: Record<string, number>;
+    generation: Record<string, number>;
+    planType: Record<string, number>;
+    channel: Record<string, number>;
+    provider: Record<string, number>;
+    autoUpdate: {
+        on: number;
+        off: number;
+    };
+    /** Clusters with an active (non-archived) modification. */
+    activeModifications: number;
+}
+/** Cluster/owner resolution for a Zeebe client id (cross-backend org search). */
+export interface ClusterByClientV2Dto {
+    clusterId: string;
+    orgId: string;
+}

package/dist/dtos/ExternalWebapp.dto.d.ts

@@ -0,0 +1,89 @@
+/**
+ * DTOs for the Console/Accounts **external** API surface
+ * (`external/organizations/my`, `external/organizations/:orgId/clusters`).
+ *
+ * These are the cross-origin, CORS-enabled shapes a Camunda webapp
+ * (console, modeler, operate, …) receives when it builds navigation. They are
+ * intentionally *not* the internal `OrganizationDto` / `ConsoleClusterDto`
+ * (those carry admin-only fields and a different permission model). Keep these
+ * in sync with the console-backend `external/*` routers.
+ */
+/**
+ * A navigable Camunda webapp. `identity` is the legacy alias of `admin`
+ * (renamed in 8.9.0-alpha5); both are kept so older clusters that still expose
+ * `identity` endpoints/status render correctly. Prefer `admin` for new code and
+ * resolve the display alias per cluster with `resolveAdminAppName`.
+ */
+export type CamundaWebApp = 'console' | 'modeler' | 'tasklist' | 'operate' | 'optimize' | 'identity' | 'admin';
+/**
+ * `CamundaWebApp` plus `zeebe`. Cluster health is keyed by this: admin/identity
+ * have no dedicated health status and ride zeebe's ingress, so navigation uses
+ * `zeebe` as their health proxy (see `isAppHealthyOnCluster`).
+ */
+export type CamundaWebAppWithZeebe = CamundaWebApp | 'zeebe';
+interface ExternalOrgClusterPermission {
+    read: boolean;
+}
+interface ExternalOrgCrudPermission {
+    read: boolean;
+    create: boolean;
+    update: boolean;
+    delete: boolean;
+}
+/**
+ * Organization as returned by `GET external/organizations/my`.
+ *
+ * Only the fields navigation needs are typed. `permissions` mirrors the
+ * external accounts shape and backs `hasReadPermissionForApp` and the
+ * cluster-create gate; every level is optional because the backend omits
+ * branches the caller has no access to.
+ */
+export interface ExternalOrganizationDto {
+    uuid: string;
+    name: string;
+    salesPlan?: {
+        type: string;
+        trialExpired?: boolean;
+    };
+    permissions?: {
+        cluster?: Partial<Record<CamundaWebApp, ExternalOrgClusterPermission>>;
+        org?: {
+            billing?: ExternalOrgCrudPermission;
+            clusters?: ExternalOrgCrudPermission;
+            webide?: ExternalOrgCrudPermission;
+            settings?: ExternalOrgCrudPermission;
+            users?: {
+                owner?: ExternalOrgCrudPermission;
+            };
+        };
+    };
+}
+/**
+ * Cluster as returned by `GET external/organizations/:orgId/clusters`.
+ *
+ * `endpoints` and `status` are keyed per webapp; both are partial because a
+ * cluster only exposes the apps its generation/plan includes. `status` values
+ * are backend health strings (e.g. `'Healthy'`); navigation treats a link as
+ * usable only when the app (or its zeebe proxy) is `'Healthy'`. `labels.camunda`
+ * carries the stage tag (`[0]` is the `CamundaClusterStage`).
+ */
+export interface ExternalClusterDto {
+    uuid: string;
+    name: string;
+    status?: Partial<Record<CamundaWebAppWithZeebe, string>>;
+    endpoints?: Partial<Record<CamundaWebApp, string>>;
+    labels?: {
+        camunda?: string[];
+    };
+    generation?: {
+        name?: string;
+        versions?: {
+            zeebe?: string;
+            operate?: string;
+            tasklist?: string;
+            optimize?: string;
+            connectors?: string;
+        };
+    };
+}
+export {};

package/dist/dtos/ExternalWebapp.dto.js

@@ -0,0 +1 @@
+//# sourceMappingURL=ExternalWebapp.dto.js.map

package/dist/dtos/ExternalWebapp.dto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/dtos/K8sContext.dto.d.ts

@@ -32,6 +32,13 @@ export interface K8sContext {
     docker_registry: string;
     project_id?: string;
     project_name?: string;
+    tsuga_cluster_id?: string;
+    /**
+     * Number of clusters on this context. Set by `GET api/admin/k8sContexts` only
+     * when queried with `withClusterCounts` (requires the `multiCluster.admin`
+     * permission); absent otherwise.
+     */
+    clusterCount?: number;
 }
 export interface K8sConfig {
     kubernetes_context: {

package/dist/dtos/Organization.dto.d.ts

@@ -15,6 +15,8 @@ export interface OrganizationMetadata {
         tenantKey: string;
         teamId: string;
         created: number;
+        /** Epoch ms of the last key rotation — set when the tenant key is regenerated. */
+        updated?: number;
     };
 }
 export interface AutoJoinAssignment {