@camunda/ccma-shared-types 0.2.0 → 0.5.0

package/dist/permissions/profile.permissions.js

@@ -1,92 +1,5 @@
-const CLOUD_TEAM_EMAILS = [
-  "adam.urban@camunda.com",
-  "collin.raddatz@camunda.com",
-  "tim.schuppener@camunda.com"
-];
-const LIMIT_EXTENDERS = [
-  "william.vonalt@camunda.com",
-  "victor.grund@camunda.com",
-  "ragnar.nevries@camunda.com",
-  "robert.emsbach@camunda.com",
-  "jared.mcmahon@camunda.com"
-];
-const SRE_TEAM_EMAILS = [
-  "jonathan.ballet@camunda.com",
-  "thanasis.petrovas@camunda.com",
-  "thomas.polnik@camunda.com"
-];
-const PLATFORM_SM_EMAILS = [
-  "immanuel.monma@camunda.com",
-  "jesse.simpson@camunda.com",
-  "hamza.masood@camunda.com",
-  "lars.lange@camunda.com",
-  "leo.journel@camunda.com",
-  "balazs.kenez@camunda.com"
-];
-const SUPPORT_MANAGERS_EMAILS = [
-  "garima.yadav@camunda.com",
-  "jeffrey.stokes@camunda.com",
-  "alexandra.corremans@camunda.com",
-  "chris.campbell@camunda.com"
-];
-const C8_ENGINEERING_MANAGERS_EMAILS = [
-  "sebastian.bathke@camunda.com",
-  "catalina.moisuc@camunda.com",
-  "immanuel.monma@camunda.com",
-  "joshua.windels@camunda.com",
-  "marcos.vieira@camunda.com",
-  "maximilian.trumpf@camunda.com",
-  "simon.buettner@camunda.com",
-  // schoetti is also some sort of engineering manager
-  "michael.schoettes@camunda.com",
-  "tassilo.weidner@camunda.com",
-  "nicolas.pepin-perreault@camunda.com",
-  "wolfgang.amann@camunda.com",
-  "mathieu.stennier@camunda.com",
-  "jason.hunter@camunda.com",
-  "maxim.danilov@camunda.com",
-  "stephan.epping@camunda.com",
-  "simon.zengerling@camunda.com",
-  "shay.matasaro@camunda.com"
-];
-const CONSULTING_MANAGER_EMAILS = [
-  "benjamin.hoffmann@camunda.com",
-  "chandan.dash@camunda.com",
-  "darren.devine@camunda.com",
-  "hurshid.kadirov@camunda.com",
-  "ivan.jovic@camunda.com",
-  "michael.ferber@camunda.com",
-  "ragnar.nevries@camunda.com",
-  "norbert.kuchenmeister@camunda.com",
-  "robert.emsbach@camunda.com",
-  "victor.grund@camunda.com"
-];
-const CSM_MANAGER_EMAIL = [
-  "aaron.laye@camunda.com",
-  "andreas.tollschein@camunda.com",
-  "betsy.burt@camunda.com",
-  "leona.schlosser@camunda.com",
-  "yulia.sinyanskaya@camunda.com",
-  "agnes.kelemen@camunda.com",
-  "thomas.schulz@camunda.com",
-  "shadia.jubril@camunda.com",
-  "kaitlin.leighton@camunda.com",
-  "ryan.warner@camunda.com",
-  "manjula.kularathne@camunda.com"
-];
-const ADR_MANAGER_EMAIL = ["jasmin.morfin-davila@camunda.com"];
-const PDF_WATERMARK_EMAILS = ["eyal.marantenboim@camunda.com"];
 const PROFILES = {
   readOnly: {
-    allowed: [
-      ...CLOUD_TEAM_EMAILS,
-      ...SUPPORT_MANAGERS_EMAILS,
-      ...C8_ENGINEERING_MANAGERS_EMAILS,
-      ...CONSULTING_MANAGER_EMAILS,
-      ...SRE_TEAM_EMAILS,
-      ...CSM_MANAGER_EMAIL,
-      "eric.lundberg@camunda.com"
-    ],
     rolesToAssign: ["accounts:read", "console:admin:readonly"],
     email: {
       handbookPages: [
@@ -95,7 +8,6 @@ const PROFILES = {
     }
   },
   supportEngineer: {
-    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],
     rolesToAssign: [
       "accounts:read",
       "accounts:connections:create",
@@ -110,7 +22,6 @@ const PROFILES = {
     }
   },
   ssoAdmin: {
-    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],
     rolesToAssign: [
       "accounts:read",
       "accounts:connections:create",
@@ -125,13 +36,22 @@ const PROFILES = {
       ]
     }
   },
-  supportAgent: {
-    allowed: [
-      ...CLOUD_TEAM_EMAILS,
-      ...SUPPORT_MANAGERS_EMAILS,
-      ...C8_ENGINEERING_MANAGERS_EMAILS,
-      ...CONSULTING_MANAGER_EMAILS
+  tam: {
+    rolesToAssign: [
+      "support:agent",
+      "accounts:trialExtender",
+      "accounts:limitExtender",
+      "accounts:enterpriseAdmin",
+      "accounts:read",
+      "console:admin:readonly"
     ],
+    email: {
+      handbookPages: [
+        "https://confluence.camunda.com/display/HAN/Access+to+a+customers+Organization+on+C8+SaaS"
+      ]
+    }
+  },
+  supportAgent: {
     rolesToAssign: ["support:agent"],
     email: {
       handbookPages: [
@@ -140,11 +60,6 @@ const PROFILES = {
     }
   },
   clusterUpdateSupportEngineer: {
-    allowed: [
-      ...CLOUD_TEAM_EMAILS,
-      ...SUPPORT_MANAGERS_EMAILS,
-      ...C8_ENGINEERING_MANAGERS_EMAILS
-    ],
     rolesToAssign: [
       "accounts:clusterUpdates",
       "support:agent",
@@ -157,7 +72,6 @@ const PROFILES = {
     }
   },
   c8ReleaseManager: {
-    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],
     rolesToAssign: [
       "console:C8ReleaseManager",
       "accounts:read",
@@ -170,7 +84,6 @@ const PROFILES = {
     }
   },
   incidentEngineer: {
-    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],
     rolesToAssign: [
       "accounts:read",
       "support:agent",
@@ -183,7 +96,6 @@ const PROFILES = {
     }
   },
   consulting: {
-    allowed: [...CLOUD_TEAM_EMAILS, ...CONSULTING_MANAGER_EMAILS],
     rolesToAssign: [
       "accounts:read",
       "console:admin:readonly",
@@ -199,7 +111,6 @@ const PROFILES = {
     }
   },
   csm: {
-    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],
     rolesToAssign: [
       "accounts:enterpriseAdmin",
       "accounts:read",
@@ -214,7 +125,6 @@ const PROFILES = {
     }
   },
   csmOffboard: {
-    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],
     rolesToAssign: ["accounts:enterpriseOffboarding", "accounts:read"],
     email: {
       handbookPages: [
@@ -223,7 +133,6 @@ const PROFILES = {
     }
   },
   adr: {
-    allowed: [...ADR_MANAGER_EMAIL, "javier.garcia-alzorriz@camunda.com"],
     rolesToAssign: ["accounts:trialExtender", "accounts:read"],
     email: {
       handbookPages: [
@@ -233,11 +142,6 @@ const PROFILES = {
     }
   },
   trialExtender: {
-    allowed: [
-      ...CLOUD_TEAM_EMAILS,
-      ...LIMIT_EXTENDERS,
-      "rory.tettey@camunda.com"
-    ],
     rolesToAssign: ["accounts:trialExtender", "accounts:read"],
     email: {
       handbookPages: [
@@ -247,7 +151,6 @@ const PROFILES = {
     }
   },
   limitExtender: {
-    allowed: [...CLOUD_TEAM_EMAILS, ...LIMIT_EXTENDERS],
     rolesToAssign: ["accounts:limitExtender", "accounts:read"],
     email: {
       handbookPages: [
@@ -257,7 +160,6 @@ const PROFILES = {
     }
   },
   workshopCreator: {
-    allowed: [...CLOUD_TEAM_EMAILS, "robert.emsbach@camunda.com"],
     rolesToAssign: ["accounts:orgCreator"],
     email: {
       handbookPages: [
@@ -266,14 +168,12 @@ const PROFILES = {
     }
   },
   pdfWatermarkRead: {
-    allowed: [...CLOUD_TEAM_EMAILS, ...PDF_WATERMARK_EMAILS],
     rolesToAssign: ["accounts:pdfWatermarkReader"],
     email: {
       handbookPages: []
     }
   },
   pdfWatermarkWrite: {
-    allowed: [...CLOUD_TEAM_EMAILS, ...PDF_WATERMARK_EMAILS],
     rolesToAssign: ["accounts:pdfWatermarkWriter"],
     email: {
       handbookPages: []
@@ -281,13 +181,6 @@ const PROFILES = {
   }
 };
 export {
-  C8_ENGINEERING_MANAGERS_EMAILS,
-  CLOUD_TEAM_EMAILS,
-  CONSULTING_MANAGER_EMAILS,
-  CSM_MANAGER_EMAIL,
-  PLATFORM_SM_EMAILS,
-  PROFILES,
-  SRE_TEAM_EMAILS,
-  SUPPORT_MANAGERS_EMAILS
+  PROFILES
 };
 //# sourceMappingURL=profile.permissions.js.map

package/dist/permissions/profile.permissions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/permissions/profile.permissions.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport const CLOUD_TEAM_EMAILS = [\n  'adam.urban@camunda.com',\n  'collin.raddatz@camunda.com',\n  'tim.schuppener@camunda.com',\n]\nconst LIMIT_EXTENDERS = [\n  'william.vonalt@camunda.com',\n  'victor.grund@camunda.com',\n  'ragnar.nevries@camunda.com',\n  'robert.emsbach@camunda.com',\n  'jared.mcmahon@camunda.com',\n]\nexport const SRE_TEAM_EMAILS = [\n  'jonathan.ballet@camunda.com',\n  'thanasis.petrovas@camunda.com',\n  'thomas.polnik@camunda.com',\n]\nexport const PLATFORM_SM_EMAILS = [\n  'immanuel.monma@camunda.com',\n  'jesse.simpson@camunda.com',\n  'hamza.masood@camunda.com',\n  'lars.lange@camunda.com',\n  'leo.journel@camunda.com',\n  'balazs.kenez@camunda.com',\n]\nexport const SUPPORT_MANAGERS_EMAILS = [\n  'garima.yadav@camunda.com',\n  'jeffrey.stokes@camunda.com',\n  'alexandra.corremans@camunda.com',\n  'chris.campbell@camunda.com',\n]\nexport const C8_ENGINEERING_MANAGERS_EMAILS = [\n  'sebastian.bathke@camunda.com',\n  'catalina.moisuc@camunda.com',\n  'immanuel.monma@camunda.com',\n  'joshua.windels@camunda.com',\n  'marcos.vieira@camunda.com',\n  'maximilian.trumpf@camunda.com',\n  'simon.buettner@camunda.com',\n  // schoetti is also some sort of engineering manager\n  'michael.schoettes@camunda.com',\n  'tassilo.weidner@camunda.com',\n  'nicolas.pepin-perreault@camunda.com',\n  'wolfgang.amann@camunda.com',\n  'mathieu.stennier@camunda.com',\n  'jason.hunter@camunda.com',\n  'maxim.danilov@camunda.com',\n  'stephan.epping@camunda.com',\n  'simon.zengerling@camunda.com',\n  'shay.matasaro@camunda.com',\n]\nexport const CONSULTING_MANAGER_EMAILS = [\n  'benjamin.hoffmann@camunda.com',\n  'chandan.dash@camunda.com',\n  'darren.devine@camunda.com',\n  'hurshid.kadirov@camunda.com',\n  'ivan.jovic@camunda.com',\n  'michael.ferber@camunda.com',\n  'ragnar.nevries@camunda.com',\n  'norbert.kuchenmeister@camunda.com',\n  'robert.emsbach@camunda.com',\n  'victor.grund@camunda.com',\n]\nexport const CSM_MANAGER_EMAIL = [\n  'aaron.laye@camunda.com',\n  'andreas.tollschein@camunda.com',\n  'betsy.burt@camunda.com',\n  'leona.schlosser@camunda.com',\n  'yulia.sinyanskaya@camunda.com',\n  'agnes.kelemen@camunda.com',\n  'thomas.schulz@camunda.com',\n  'shadia.jubril@camunda.com',\n  'kaitlin.leighton@camunda.com',\n  'ryan.warner@camunda.com',\n  'manjula.kularathne@camunda.com',\n]\nconst ADR_MANAGER_EMAIL = ['jasmin.morfin-davila@camunda.com']\nconst PDF_WATERMARK_EMAILS = ['eyal.marantenboim@camunda.com']\n\nexport interface OnboardConfig {\n  [unit: string]: {\n    allowed: string[]\n    rolesToAssign: Roles[]\n    email: {\n      handbookPages: string[]\n    }\n  }\n}\n\nexport const PROFILES: OnboardConfig = {\n  readOnly: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n      ...CONSULTING_MANAGER_EMAILS,\n      ...SRE_TEAM_EMAILS,\n      ...CSM_MANAGER_EMAIL,\n      'eric.lundberg@camunda.com',\n    ],\n    rolesToAssign: ['accounts:read', 'console:admin:readonly'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  supportEngineer: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  ssoAdmin: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...SUPPORT_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'accounts:connections:delete',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  supportAgent: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n      ...CONSULTING_MANAGER_EMAILS,\n    ],\n    rolesToAssign: ['support:agent'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  clusterUpdateSupportEngineer: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...SUPPORT_MANAGERS_EMAILS,\n      ...C8_ENGINEERING_MANAGERS_EMAILS,\n    ],\n    rolesToAssign: [\n      'accounts:clusterUpdates',\n      'support:agent',\n      'accounts:read',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md',\n      ],\n    },\n  },\n  c8ReleaseManager: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'console:C8ReleaseManager',\n      'accounts:read',\n      'console:C8UpdateEnforcer',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md',\n      ],\n    },\n  },\n  incidentEngineer: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...C8_ENGINEERING_MANAGERS_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'support:agent',\n      'console:operationsEngineer',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/tweaking-a-running-cluster/index.md',\n      ],\n    },\n  },\n  consulting: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CONSULTING_MANAGER_EMAILS],\n    rolesToAssign: [\n      'accounts:read',\n      'console:admin:readonly',\n      'accounts:trialExtender',\n      'accounts:limitExtender',\n      'accounts:enterpriseAdmin',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csm: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],\n    rolesToAssign: [\n      'accounts:enterpriseAdmin',\n      'accounts:read',\n      'accounts:trialExtender',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/FIELDOPS/Migrating+C8-SaaS+Organizations+to+Enterprise',\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/modify-a-running-c8-saas-enterprise-organisation/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csmOffboard: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...CSM_MANAGER_EMAIL],\n    rolesToAssign: ['accounts:enterpriseOffboarding', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/shutting-down-an-c8-saas-organization/index.md',\n      ],\n    },\n  },\n  adr: {\n    allowed: [...ADR_MANAGER_EMAIL, 'javier.garcia-alzorriz@camunda.com'],\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  trialExtender: {\n    allowed: [\n      ...CLOUD_TEAM_EMAILS,\n      ...LIMIT_EXTENDERS,\n      'rory.tettey@camunda.com',\n    ],\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  limitExtender: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...LIMIT_EXTENDERS],\n    rolesToAssign: ['accounts:limitExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Managing+Organization+Limits+on+C8+SaaS',\n      ],\n    },\n  },\n  workshopCreator: {\n    allowed: [...CLOUD_TEAM_EMAILS, 'robert.emsbach@camunda.com'],\n    rolesToAssign: ['accounts:orgCreator'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  pdfWatermarkRead: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...PDF_WATERMARK_EMAILS],\n    rolesToAssign: ['accounts:pdfWatermarkReader'],\n    email: {\n      handbookPages: [],\n    },\n  },\n  pdfWatermarkWrite: {\n    allowed: [...CLOUD_TEAM_EMAILS, ...PDF_WATERMARK_EMAILS],\n    rolesToAssign: ['accounts:pdfWatermarkWriter'],\n    email: {\n      handbookPages: [],\n    },\n  },\n}\n"],
-  "mappings": "AAQO,MAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF;AACA,MAAM,kBAAkB;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,kBAAkB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,qBAAqB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,iCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,MAAM,oBAAoB,CAAC,kCAAkC;AAC7D,MAAM,uBAAuB,CAAC,+BAA+B;AAYtD,MAAM,WAA0B;AAAA,EACrC,UAAU;AAAA,IACR,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA,eAAe,CAAC,iBAAiB,wBAAwB;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,SAAS,CAAC,GAAG,mBAAmB,GAAG,uBAAuB;AAAA,IAC1D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,SAAS,CAAC,GAAG,mBAAmB,GAAG,uBAAuB;AAAA,IAC1D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc;AAAA,IACZ,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAAA,IACA,eAAe,CAAC,eAAe;AAAA,IAC/B,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,8BAA8B;AAAA,IAC5B,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAAA,IACA,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS,CAAC,GAAG,mBAAmB,GAAG,8BAA8B;AAAA,IACjE,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS,CAAC,GAAG,mBAAmB,GAAG,8BAA8B;AAAA,IACjE,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,YAAY;AAAA,IACV,SAAS,CAAC,GAAG,mBAAmB,GAAG,yBAAyB;AAAA,IAC5D,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,SAAS,CAAC,GAAG,mBAAmB,GAAG,iBAAiB;AAAA,IACpD,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,SAAS,CAAC,GAAG,mBAAmB,GAAG,iBAAiB;AAAA,IACpD,eAAe,CAAC,kCAAkC,eAAe;AAAA,IACjE,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,SAAS,CAAC,GAAG,mBAAmB,oCAAoC;AAAA,IACpE,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,SAAS;AAAA,MACP,GAAG;AAAA,MACH,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,SAAS,CAAC,GAAG,mBAAmB,GAAG,eAAe;AAAA,IAClD,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,SAAS,CAAC,GAAG,mBAAmB,4BAA4B;AAAA,IAC5D,eAAe,CAAC,qBAAqB;AAAA,IACrC,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,SAAS,CAAC,GAAG,mBAAmB,GAAG,oBAAoB;AAAA,IACvD,eAAe,CAAC,6BAA6B;AAAA,IAC7C,OAAO;AAAA,MACL,eAAe,CAAC;AAAA,IAClB;AAAA,EACF;AAAA,EACA,mBAAmB;AAAA,IACjB,SAAS,CAAC,GAAG,mBAAmB,GAAG,oBAAoB;AAAA,IACvD,eAAe,CAAC,6BAA6B;AAAA,IAC7C,OAAO;AAAA,MACL,eAAe,CAAC;AAAA,IAClB;AAAA,EACF;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\n/**\n * NOTE: This package (`@camunda/ccma-shared-types`) is published publicly to\n * npmjs.org and is imported directly by frontend applications, so its contents\n * ship in the browser bundle and in every published npm version.\n *\n * For that reason this file MUST NOT contain the `allowed` email lists (real\n * Camunda employee names/emails) that gate who may run each onboarding\n * profile. Those lists live in the private, never-published\n * `@camunda-cloud/shared-backend` package instead\n * (see `packages/shared-backend/src/permissions/profile.permissions.ts`).\n *\n * This file only exposes the non-sensitive parts of each profile that are\n * safe to ship publicly: the roles to assign and the handbook links.\n */\nexport interface OnboardConfig {\n  [unit: string]: {\n    rolesToAssign: Roles[]\n    email: {\n      handbookPages: string[]\n    }\n  }\n}\n\nexport const PROFILES: OnboardConfig = {\n  readOnly: {\n    rolesToAssign: ['accounts:read', 'console:admin:readonly'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  supportEngineer: {\n    rolesToAssign: [\n      'accounts:read',\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  ssoAdmin: {\n    rolesToAssign: [\n      'accounts:read',\n      'accounts:connections:create',\n      'accounts:connections:update',\n      'accounts:connections:delete',\n      'support:agent',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/How+to+handle+requests+for+External+SSO+integration+in+C8-SaaS',\n      ],\n    },\n  },\n  tam: {\n    rolesToAssign: [\n      'support:agent',\n      'accounts:trialExtender',\n      'accounts:limitExtender',\n      'accounts:enterpriseAdmin',\n      'accounts:read',\n      'console:admin:readonly',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/HAN/Access+to+a+customers+Organization+on+C8+SaaS',\n      ],\n    },\n  },\n  supportAgent: {\n    rolesToAssign: ['support:agent'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/access-to-a-customers-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  clusterUpdateSupportEngineer: {\n    rolesToAssign: [\n      'accounts:clusterUpdates',\n      'support:agent',\n      'accounts:read',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md',\n      ],\n    },\n  },\n  c8ReleaseManager: {\n    rolesToAssign: [\n      'console:C8ReleaseManager',\n      'accounts:read',\n      'console:C8UpdateEnforcer',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/managing-generations-on-c8-saas/index.md',\n      ],\n    },\n  },\n  incidentEngineer: {\n    rolesToAssign: [\n      'accounts:read',\n      'support:agent',\n      'console:operationsEngineer',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/tweaking-a-running-cluster/index.md',\n      ],\n    },\n  },\n  consulting: {\n    rolesToAssign: [\n      'accounts:read',\n      'console:admin:readonly',\n      'accounts:trialExtender',\n      'accounts:limitExtender',\n      'accounts:enterpriseAdmin',\n    ],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csm: {\n    rolesToAssign: [\n      'accounts:enterpriseAdmin',\n      'accounts:read',\n      'accounts:trialExtender',\n    ],\n    email: {\n      handbookPages: [\n        'https://confluence.camunda.com/display/FIELDOPS/Migrating+C8-SaaS+Organizations+to+Enterprise',\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/modify-a-running-c8-saas-enterprise-organisation/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  csmOffboard: {\n    rolesToAssign: ['accounts:enterpriseOffboarding', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/shutting-down-an-c8-saas-organization/index.md',\n      ],\n    },\n  },\n  adr: {\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  trialExtender: {\n    rolesToAssign: ['accounts:trialExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Extend+a+Trial+Subscription+on+C8+SaaS',\n      ],\n    },\n  },\n  limitExtender: {\n    rolesToAssign: ['accounts:limitExtender', 'accounts:read'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n        'https://confluence.camunda.com/display/HAN/Managing+Organization+Limits+on+C8+SaaS',\n      ],\n    },\n  },\n  workshopCreator: {\n    rolesToAssign: ['accounts:orgCreator'],\n    email: {\n      handbookPages: [\n        'https://lamppost.camunda-it.rocks/handbook/#departments/products/engineering/finding-an-organization-on-c8-saas/index.md',\n      ],\n    },\n  },\n  pdfWatermarkRead: {\n    rolesToAssign: ['accounts:pdfWatermarkReader'],\n    email: {\n      handbookPages: [],\n    },\n  },\n  pdfWatermarkWrite: {\n    rolesToAssign: ['accounts:pdfWatermarkWriter'],\n    email: {\n      handbookPages: [],\n    },\n  },\n}\n"],
+  "mappings": "AA+BO,MAAM,WAA0B;AAAA,EACrC,UAAU;AAAA,IACR,eAAe,CAAC,iBAAiB,wBAAwB;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc;AAAA,IACZ,eAAe,CAAC,eAAe;AAAA,IAC/B,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,8BAA8B;AAAA,IAC5B,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,YAAY;AAAA,IACV,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,eAAe;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,eAAe,CAAC,kCAAkC,eAAe;AAAA,IACjE,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,eAAe,CAAC,0BAA0B,eAAe;AAAA,IACzD,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,eAAe,CAAC,qBAAqB;AAAA,IACrC,OAAO;AAAA,MACL,eAAe;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,eAAe,CAAC,6BAA6B;AAAA,IAC7C,OAAO;AAAA,MACL,eAAe,CAAC;AAAA,IAClB;AAAA,EACF;AAAA,EACA,mBAAmB;AAAA,IACjB,eAAe,CAAC,6BAA6B;AAAA,IAC7C,OAAO;AAAA,MACL,eAAe,CAAC;AAAA,IAClB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/search/ast.d.ts

@@ -0,0 +1,52 @@
+/** Comparison operators a single term can carry (`:` is plain match/equality). */
+export type SearchTermOperator = ':' | '>' | '>=' | '<' | '<=';
+/** A single `field:value` (or bare value) clause with an operator. */
+export interface TermNode {
+    kind: 'term';
+    /** Field name; `undefined` for a bare term (searches the default fields). */
+    field?: string;
+    operator: SearchTermOperator;
+    /** The raw (already unquoted) value the user typed. */
+    value: string;
+}
+/** A `field:[lower TO upper]` (or `{…}`) range clause. */
+export interface RangeNode {
+    kind: 'range';
+    field: string;
+    lower: string;
+    upper: string;
+    /** `[` is inclusive, `{` is exclusive. */
+    lowerInclusive: boolean;
+    upperInclusive: boolean;
+}
+export interface AndNode {
+    kind: 'and';
+    left: QueryNode;
+    right: QueryNode;
+}
+export interface OrNode {
+    kind: 'or';
+    left: QueryNode;
+    right: QueryNode;
+}
+export interface NotNode {
+    kind: 'not';
+    child: QueryNode;
+}
+/** Any node in a parsed query tree. */
+export type QueryNode = TermNode | RangeNode | AndNode | OrNode | NotNode;
+/**
+ * A user-facing problem with a query — a syntax error, an unknown field, an
+ * operator a field does not support, or an unparseable value. Thrown by the
+ * parser and the compiler; the `/v2` routers turn it into a 400 whose body is
+ * `message`, so the search box can show it verbatim.
+ */
+export declare class LuceneQueryError extends Error {
+    /** Discriminates the failure so the UI/router can branch without string-matching. */
+    readonly kind: 'syntax' | 'unknown-field' | 'bad-operator' | 'bad-value';
+    /** Best-effort "did you mean…" hint (unknown field / value). */
+    readonly suggestion?: string;
+    constructor(message: string, kind: LuceneQueryError['kind'], suggestion?: string);
+}
+/** Type guard usable across package boundaries (avoids `instanceof` pitfalls). */
+export declare const isLuceneQueryError: (error: unknown) => error is LuceneQueryError;

package/dist/search/ast.js

@@ -0,0 +1,18 @@
+class LuceneQueryError extends Error {
+  /** Discriminates the failure so the UI/router can branch without string-matching. */
+  kind;
+  /** Best-effort "did you mean…" hint (unknown field / value). */
+  suggestion;
+  constructor(message, kind, suggestion) {
+    super(message);
+    this.name = "LuceneQueryError";
+    this.kind = kind;
+    this.suggestion = suggestion;
+  }
+}
+const isLuceneQueryError = (error) => error instanceof LuceneQueryError || typeof error === "object" && error !== null && error.name === "LuceneQueryError";
+export {
+  LuceneQueryError,
+  isLuceneQueryError
+};
+//# sourceMappingURL=ast.js.map

package/dist/search/ast.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/search/ast.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Lucene-style query AST (Control table search)\n//\n// A small, hand-rolled subset of Lucene used by the Control frontend's table\n// search boxes: `field:value` clauses, quoted phrases, boolean AND/OR/NOT with\n// parentheses, `-` negation, comparison operators (`>`, `>=`, `<`, `<=`),\n// inclusive `[a TO b]` / exclusive `{a TO b}` ranges, and `*`/`?` wildcards on\n// strings. Parsed on the backend and compiled to parameterized SQL \u2014 no fuzzy\n// (`~`), boosting (`^`), or regex in this version.\n// ============================================================================\n\n/** Comparison operators a single term can carry (`:` is plain match/equality). */\nexport type SearchTermOperator = ':' | '>' | '>=' | '<' | '<='\n\n/** A single `field:value` (or bare value) clause with an operator. */\nexport interface TermNode {\n  kind: 'term'\n  /** Field name; `undefined` for a bare term (searches the default fields). */\n  field?: string\n  operator: SearchTermOperator\n  /** The raw (already unquoted) value the user typed. */\n  value: string\n}\n\n/** A `field:[lower TO upper]` (or `{\u2026}`) range clause. */\nexport interface RangeNode {\n  kind: 'range'\n  field: string\n  lower: string\n  upper: string\n  /** `[` is inclusive, `{` is exclusive. */\n  lowerInclusive: boolean\n  upperInclusive: boolean\n}\n\nexport interface AndNode {\n  kind: 'and'\n  left: QueryNode\n  right: QueryNode\n}\n\nexport interface OrNode {\n  kind: 'or'\n  left: QueryNode\n  right: QueryNode\n}\n\nexport interface NotNode {\n  kind: 'not'\n  child: QueryNode\n}\n\n/** Any node in a parsed query tree. */\nexport type QueryNode = TermNode | RangeNode | AndNode | OrNode | NotNode\n\n/**\n * A user-facing problem with a query \u2014 a syntax error, an unknown field, an\n * operator a field does not support, or an unparseable value. Thrown by the\n * parser and the compiler; the `/v2` routers turn it into a 400 whose body is\n * `message`, so the search box can show it verbatim.\n */\nexport class LuceneQueryError extends Error {\n  /** Discriminates the failure so the UI/router can branch without string-matching. */\n  public readonly kind:\n    | 'syntax'\n    | 'unknown-field'\n    | 'bad-operator'\n    | 'bad-value'\n  /** Best-effort \"did you mean\u2026\" hint (unknown field / value). */\n  public readonly suggestion?: string\n\n  constructor(\n    message: string,\n    kind: LuceneQueryError['kind'],\n    suggestion?: string,\n  ) {\n    super(message)\n    this.name = 'LuceneQueryError'\n    this.kind = kind\n    this.suggestion = suggestion\n  }\n}\n\n/** Type guard usable across package boundaries (avoids `instanceof` pitfalls). */\nexport const isLuceneQueryError = (error: unknown): error is LuceneQueryError =>\n  error instanceof LuceneQueryError ||\n  (typeof error === 'object' &&\n    error !== null &&\n    (error as { name?: unknown }).name === 'LuceneQueryError')\n"],
+  "mappings": "AAmEO,MAAM,yBAAyB,MAAM;AAAA;AAAA,EAE1B;AAAA;AAAA,EAMA;AAAA,EAEhB,YACE,SACA,MACA,YACA;AACA,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAGO,MAAM,qBAAqB,CAAC,UACjC,iBAAiB,oBAChB,OAAO,UAAU,YAChB,UAAU,QACT,MAA6B,SAAS;",
+  "names": []
+}

package/dist/search/cluster-search-fields.d.ts

@@ -0,0 +1,11 @@
+import type { SearchFieldSpec } from './fields.js';
+/**
+ * Searchable fields for the Clusters list (mirrors `ListClustersV2Params.filter`
+ * — the fields the endpoint already filters on). `status`, `region`, and
+ * `provider` are resolved server-side from live K8s state / context config, so
+ * they only support equality. A bare term searches
+ * {@link CLUSTER_DEFAULT_SEARCH_FIELDS}.
+ */
+export declare const CLUSTER_SEARCH_FIELDS: readonly SearchFieldSpec[];
+/** Fields a bare term searches for clusters (name substring — matches `q`). */
+export declare const CLUSTER_DEFAULT_SEARCH_FIELDS: readonly ["name"];

package/dist/search/cluster-search-fields.js

@@ -0,0 +1,136 @@
+const CLUSTER_SEARCH_FIELDS = [
+  {
+    field: "name",
+    label: "Name",
+    description: "Cluster name (substring match; supports * and ?).",
+    type: "string",
+    capabilities: ["match"],
+    example: "name:prod"
+  },
+  {
+    field: "id",
+    label: "ID",
+    description: "Cluster UUID (substring match).",
+    type: "string",
+    capabilities: ["match"],
+    example: "id:9c2b"
+  },
+  {
+    field: "orgId",
+    label: "Organization ID",
+    description: "Owning organization UUID.",
+    type: "string",
+    capabilities: ["match"],
+    example: "orgId:2f1a9c3e-4b7d-4c2a-9f1e-8a6b5c4d3e2f"
+  },
+  {
+    field: "status",
+    label: "Status",
+    description: "Live cluster health (e.g. healthy, unhealthy, updating).",
+    type: "string",
+    capabilities: ["match"],
+    example: "status:healthy"
+  },
+  {
+    field: "plan",
+    label: "Plan type",
+    description: "Cluster plan-type name (e.g. Trial, Production-S).",
+    type: "string",
+    capabilities: ["match"],
+    example: "plan:Production-S"
+  },
+  {
+    field: "planName",
+    label: "Plan name",
+    description: "The concrete cluster-plan name (not the type).",
+    type: "string",
+    capabilities: ["match"],
+    example: 'planName:"Trial Cluster"'
+  },
+  {
+    field: "generation",
+    label: "Generation",
+    description: "Cluster generation name.",
+    type: "string",
+    capabilities: ["match"],
+    example: 'generation:"Zeebe 8.6.0"'
+  },
+  {
+    field: "minorVersion",
+    label: "Minor version",
+    description: "Zeebe minor-version prefix (e.g. 8.7 matches 8.7.x).",
+    type: "string",
+    capabilities: ["match"],
+    example: "minorVersion:8.7"
+  },
+  {
+    field: "channel",
+    label: "Channel",
+    description: "Release channel name.",
+    type: "string",
+    capabilities: ["match"],
+    example: "channel:Stable"
+  },
+  {
+    field: "region",
+    label: "Region",
+    description: "Region name (resolved from the K8s context).",
+    type: "string",
+    capabilities: ["match"],
+    example: 'region:"Europe West"'
+  },
+  {
+    field: "provider",
+    label: "Cloud provider",
+    description: "Cloud provider (resolved from the K8s context).",
+    type: "string",
+    capabilities: ["match"],
+    example: "provider:gcp"
+  },
+  {
+    field: "k8sContext",
+    label: "K8s context",
+    description: "Exact K8s context UUID.",
+    type: "string",
+    capabilities: ["match"],
+    example: "k8sContext:7d3b2a10-9e5f-4c1b-b8a2-1f2e3d4c5b6a"
+  },
+  {
+    field: "autoUpdate",
+    label: "Auto-update",
+    description: "Whether auto-update is enabled.",
+    type: "boolean",
+    capabilities: ["match"],
+    example: "autoUpdate:false"
+  },
+  {
+    field: "internal",
+    label: "Internal",
+    description: "Whether the cluster is Camunda-owned.",
+    type: "boolean",
+    capabilities: ["match"],
+    example: "internal:true"
+  },
+  {
+    field: "hasActiveModification",
+    label: "Active modification",
+    description: "Whether the cluster has an active (non-archived) modification.",
+    type: "boolean",
+    capabilities: ["match"],
+    example: "hasActiveModification:true"
+  },
+  {
+    field: "created",
+    label: "Created",
+    description: "Creation date (ISO, e.g. 2024-01-31). Supports ranges.",
+    type: "date",
+    capabilities: ["match", "range"],
+    example: "created:>2024-01-01"
+  }
+];
+const CLUSTER_DEFAULT_SEARCH_FIELDS = ["name"];
+export {
+  CLUSTER_DEFAULT_SEARCH_FIELDS,
+  CLUSTER_SEARCH_FIELDS
+};
+//# sourceMappingURL=cluster-search-fields.js.map

package/dist/search/cluster-search-fields.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/search/cluster-search-fields.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { SearchFieldSpec } from './fields.js'\n\n/**\n * Searchable fields for the Clusters list (mirrors `ListClustersV2Params.filter`\n * \u2014 the fields the endpoint already filters on). `status`, `region`, and\n * `provider` are resolved server-side from live K8s state / context config, so\n * they only support equality. A bare term searches\n * {@link CLUSTER_DEFAULT_SEARCH_FIELDS}.\n */\nexport const CLUSTER_SEARCH_FIELDS: readonly SearchFieldSpec[] = [\n  {\n    field: 'name',\n    label: 'Name',\n    description: 'Cluster name (substring match; supports * and ?).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'name:prod',\n  },\n  {\n    field: 'id',\n    label: 'ID',\n    description: 'Cluster UUID (substring match).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'id:9c2b',\n  },\n  {\n    field: 'orgId',\n    label: 'Organization ID',\n    description: 'Owning organization UUID.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'orgId:2f1a9c3e-4b7d-4c2a-9f1e-8a6b5c4d3e2f',\n  },\n  {\n    field: 'status',\n    label: 'Status',\n    description: 'Live cluster health (e.g. healthy, unhealthy, updating).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'status:healthy',\n  },\n  {\n    field: 'plan',\n    label: 'Plan type',\n    description: 'Cluster plan-type name (e.g. Trial, Production-S).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'plan:Production-S',\n  },\n  {\n    field: 'planName',\n    label: 'Plan name',\n    description: 'The concrete cluster-plan name (not the type).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'planName:\"Trial Cluster\"',\n  },\n  {\n    field: 'generation',\n    label: 'Generation',\n    description: 'Cluster generation name.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'generation:\"Zeebe 8.6.0\"',\n  },\n  {\n    field: 'minorVersion',\n    label: 'Minor version',\n    description: 'Zeebe minor-version prefix (e.g. 8.7 matches 8.7.x).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'minorVersion:8.7',\n  },\n  {\n    field: 'channel',\n    label: 'Channel',\n    description: 'Release channel name.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'channel:Stable',\n  },\n  {\n    field: 'region',\n    label: 'Region',\n    description: 'Region name (resolved from the K8s context).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'region:\"Europe West\"',\n  },\n  {\n    field: 'provider',\n    label: 'Cloud provider',\n    description: 'Cloud provider (resolved from the K8s context).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'provider:gcp',\n  },\n  {\n    field: 'k8sContext',\n    label: 'K8s context',\n    description: 'Exact K8s context UUID.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'k8sContext:7d3b2a10-9e5f-4c1b-b8a2-1f2e3d4c5b6a',\n  },\n  {\n    field: 'autoUpdate',\n    label: 'Auto-update',\n    description: 'Whether auto-update is enabled.',\n    type: 'boolean',\n    capabilities: ['match'],\n    example: 'autoUpdate:false',\n  },\n  {\n    field: 'internal',\n    label: 'Internal',\n    description: 'Whether the cluster is Camunda-owned.',\n    type: 'boolean',\n    capabilities: ['match'],\n    example: 'internal:true',\n  },\n  {\n    field: 'hasActiveModification',\n    label: 'Active modification',\n    description:\n      'Whether the cluster has an active (non-archived) modification.',\n    type: 'boolean',\n    capabilities: ['match'],\n    example: 'hasActiveModification:true',\n  },\n  {\n    field: 'created',\n    label: 'Created',\n    description: 'Creation date (ISO, e.g. 2024-01-31). Supports ranges.',\n    type: 'date',\n    capabilities: ['match', 'range'],\n    example: 'created:>2024-01-01',\n  },\n] as const\n\n/** Fields a bare term searches for clusters (name substring \u2014 matches `q`). */\nexport const CLUSTER_DEFAULT_SEARCH_FIELDS = ['name'] as const\n"],
+  "mappings": "AAeO,MAAM,wBAAoD;AAAA,EAC/D;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,IACF,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,SAAS,OAAO;AAAA,IAC/B,SAAS;AAAA,EACX;AACF;AAGO,MAAM,gCAAgC,CAAC,MAAM;",
+  "names": []
+}

package/dist/search/compiler.d.ts

@@ -0,0 +1,48 @@
+import { type QueryNode } from './ast.js';
+/** SQL binding for one searchable field (values live backend-side, not in the FE). */
+export type FieldBinding = {
+    kind: 'string';
+    /** SQL column expression, e.g. `c.name` or `planType.name`. */
+    column: string;
+    /** Cast the column to text before matching (uuid columns). */
+    cast?: boolean;
+    /** `substring` → ILIKE %v%; `exact` → case-insensitive equality. */
+    match: 'substring' | 'exact';
+} | {
+    kind: 'boolean';
+    column: string;
+}
+/** Presence/absence of a nullable column (e.g. active-modification FK). */
+ | {
+    kind: 'nullable';
+    column: string;
+} | {
+    kind: 'date';
+    column: string;
+} | {
+    kind: 'computed';
+    /** Column the resolved id set is matched against (e.g. `c.uuid`). */
+    idColumn: string;
+    /** Resolve an equality value to matching ids (in-memory / config). */
+    resolve: (value: string) => string[];
+};
+export interface CompileContext {
+    /** Field name → SQL binding. Keys are the whitelisted, canonical field names. */
+    bindings: Record<string, FieldBinding>;
+    /** Fields a bare term ORs over (must be `string` bindings); always substring. */
+    defaultFields: readonly string[];
+    /** Unique-per-call-site parameter prefix (avoids clashing with other params). */
+    paramPrefix: string;
+}
+export interface CompiledQuery {
+    sql: string;
+    params: Record<string, unknown>;
+}
+/** Compile a parsed query into a single parameterized SQL fragment. */
+export declare const compileQuery: (node: QueryNode, ctx: CompileContext) => CompiledQuery;
+/**
+ * Turn a user value into an ILIKE argument: SQL wildcards (`%`, `_`, `\`) are
+ * escaped to literals, then the user's `*`/`?` become `%`/`_`; a plain
+ * substring value is wrapped in `%…%`.
+ */
+export declare const likeArgument: (value: string, match: "substring" | "exact") => string;