@camunda/ccma-shared-types 0.4.0 → 0.5.1

package/dist/_tests/constants/failoverRegionPairs.const.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_tests/search/compiler.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_tests/search/parser.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_tests/search/registry.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_tests/types/ClusterPlanFields.type.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_tests/utils/failoverKeyPolicy.utils.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/constants/failoverRegionPairs.const.d.ts

@@ -4,8 +4,15 @@
  * one of these reverse-region pairs — cluster creation must be supported in
  * both directions. Both directions of each pair are listed.
  *
+ * This is the base set, enabled on every stage.
+ *
  * Shared between console-backend (FailoverRouter guard) and c4 (hiding the
  * failover action for unsupported pairs).
  */
 export declare const SUPPORTED_FAILOVER_REGION_PAIRS: ReadonlySet<string>;
-export declare function isSupportedFailoverRegionPair(regionA: string | undefined, regionB: string | undefined): boolean;
+/**
+ * `stage` mirrors the featureflags `onlyDev` gate: the EU test pairs unlock only
+ * on 'local'/'dev'. Omitting stage (or passing any non-dev stage) allows the
+ * base set only, so prod never sees the dev pairs.
+ */
+export declare function isSupportedFailoverRegionPair(regionA: string | undefined, regionB: string | undefined, stage?: string): boolean;

package/dist/constants/failoverRegionPairs.const.js

@@ -4,11 +4,16 @@ const SUPPORTED_FAILOVER_REGION_PAIRS = /* @__PURE__ */ new Set([
   "us-east-2:us-east-1",
   "us-east-1:us-east-2"
 ]);
-function isSupportedFailoverRegionPair(regionA, regionB) {
+const DEV_FAILOVER_REGION_PAIRS = /* @__PURE__ */ new Set([
+  "eu-west-1:eu-west-2",
+  "eu-west-2:eu-west-1"
+]);
+function isSupportedFailoverRegionPair(regionA, regionB, stage) {
   if (!regionA || !regionB) return false;
-  return SUPPORTED_FAILOVER_REGION_PAIRS.has(
-    `${regionA.toLowerCase()}:${regionB.toLowerCase()}`
-  );
+  const pair = `${regionA.toLowerCase()}:${regionB.toLowerCase()}`;
+  if (SUPPORTED_FAILOVER_REGION_PAIRS.has(pair)) return true;
+  const isDev = stage === "local" || stage === "dev";
+  return isDev && DEV_FAILOVER_REGION_PAIRS.has(pair);
 }
 export {
   SUPPORTED_FAILOVER_REGION_PAIRS,

package/dist/constants/failoverRegionPairs.const.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/constants/failoverRegionPairs.const.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/**\n * Region pairs supported for cross-region failover (#9120). Failover is only\n * offered for dual-region clusters whose primary and secondary regions form\n * one of these reverse-region pairs \u2014 cluster creation must be supported in\n * both directions. Both directions of each pair are listed.\n *\n * Shared between console-backend (FailoverRouter guard) and c4 (hiding the\n * failover action for unsupported pairs).\n */\nexport const SUPPORTED_FAILOVER_REGION_PAIRS: ReadonlySet<string> = new Set([\n  'us-east-2:us-west-2',\n  'us-west-2:us-east-2',\n  'us-east-2:us-east-1',\n  'us-east-1:us-east-2',\n])\n\nexport function isSupportedFailoverRegionPair(\n  regionA: string | undefined,\n  regionB: string | undefined,\n): boolean {\n  if (!regionA || !regionB) return false\n  return SUPPORTED_FAILOVER_REGION_PAIRS.has(\n    `${regionA.toLowerCase()}:${regionB.toLowerCase()}`,\n  )\n}\n"],
-  "mappings": "AAeO,MAAM,kCAAuD,oBAAI,IAAI;AAAA,EAC1E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,8BACd,SACA,SACS;AACT,MAAI,CAAC,WAAW,CAAC,QAAS,QAAO;AACjC,SAAO,gCAAgC;AAAA,IACrC,GAAG,QAAQ,YAAY,CAAC,IAAI,QAAQ,YAAY,CAAC;AAAA,EACnD;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/**\n * Region pairs supported for cross-region failover (#9120). Failover is only\n * offered for dual-region clusters whose primary and secondary regions form\n * one of these reverse-region pairs \u2014 cluster creation must be supported in\n * both directions. Both directions of each pair are listed.\n *\n * This is the base set, enabled on every stage.\n *\n * Shared between console-backend (FailoverRouter guard) and c4 (hiding the\n * failover action for unsupported pairs).\n */\nexport const SUPPORTED_FAILOVER_REGION_PAIRS: ReadonlySet<string> = new Set([\n  'us-east-2:us-west-2',\n  'us-west-2:us-east-2',\n  'us-east-2:us-east-1',\n  'us-east-1:us-east-2',\n])\n\n// Dev-only test pairs: EU failover validation on dev/local before prod rollout.\nconst DEV_FAILOVER_REGION_PAIRS: ReadonlySet<string> = new Set([\n  'eu-west-1:eu-west-2',\n  'eu-west-2:eu-west-1',\n])\n\n/**\n * `stage` mirrors the featureflags `onlyDev` gate: the EU test pairs unlock only\n * on 'local'/'dev'. Omitting stage (or passing any non-dev stage) allows the\n * base set only, so prod never sees the dev pairs.\n */\nexport function isSupportedFailoverRegionPair(\n  regionA: string | undefined,\n  regionB: string | undefined,\n  stage?: string,\n): boolean {\n  if (!regionA || !regionB) return false\n  const pair = `${regionA.toLowerCase()}:${regionB.toLowerCase()}`\n  if (SUPPORTED_FAILOVER_REGION_PAIRS.has(pair)) return true\n  const isDev = stage === 'local' || stage === 'dev'\n  return isDev && DEV_FAILOVER_REGION_PAIRS.has(pair)\n}\n"],
+  "mappings": "AAiBO,MAAM,kCAAuD,oBAAI,IAAI;AAAA,EAC1E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,MAAM,4BAAiD,oBAAI,IAAI;AAAA,EAC7D;AAAA,EACA;AACF,CAAC;AAOM,SAAS,8BACd,SACA,SACA,OACS;AACT,MAAI,CAAC,WAAW,CAAC,QAAS,QAAO;AACjC,QAAM,OAAO,GAAG,QAAQ,YAAY,CAAC,IAAI,QAAQ,YAAY,CAAC;AAC9D,MAAI,gCAAgC,IAAI,IAAI,EAAG,QAAO;AACtD,QAAM,QAAQ,UAAU,WAAW,UAAU;AAC7C,SAAO,SAAS,0BAA0B,IAAI,IAAI;AACpD;",
   "names": []
 }

package/dist/constants/misc.const.d.ts

@@ -23,58 +23,3 @@ export declare const MAX_HARDWARE_PACKAGE_COUNT = 4;
  * where the exporter starts honoring the filters) — this is the product rollout gate.
  */
 export declare const OPTIMIZE_FILTERING_MIN_VERSION = "8.10.0-alpha1";
-export declare const SENTRY: {
-    dsn: {
-        trial: string;
-        console: {
-            frontend: string;
-            backend: string;
-        };
-        accounts: {
-            frontend: string;
-            backend: string;
-        };
-    };
-    applicationKey: {
-        console: string;
-        accounts: string;
-    };
-    enabled: string[];
-    ignoreTransactions: string[];
-    ignoreErrors: string[];
-    config: {
-        tracesSampleRate: {
-            frontend: {
-                accounts: number[];
-                console: number[];
-            };
-            backend: {
-                accounts: number[];
-                console: number[];
-            };
-        };
-        replaysSessionSampleRate: {
-            frontend: {
-                accounts: number[];
-                console: number[];
-            };
-        };
-        replaysOnErrorSampleRate: {
-            frontend: {
-                accounts: number[];
-                console: number[];
-            };
-        };
-        profilesSampleRate: {
-            backend: {
-                accounts: number[];
-                console: number[];
-            };
-            frontend: {
-                accounts: number[];
-                console: number[];
-            };
-        };
-    };
-    configWeight: (env: string, values: number[]) => number;
-};

package/dist/constants/misc.const.js

@@ -19,87 +19,6 @@ const MINIMUM_EYEPAIRS = {
 };
 const MAX_HARDWARE_PACKAGE_COUNT = 4;
 const OPTIMIZE_FILTERING_MIN_VERSION = "8.10.0-alpha1";
-const SENTRY = {
-  dsn: {
-    trial: "https://a91625f8d3e1b34690588504ed020e14@o4507463051378688.ingest.de.sentry.io/4507463055376464",
-    console: {
-      frontend: "https://bbf8e6b13f91f7a49ab0b7f079ae8cc0@o132036.ingest.us.sentry.io/4507537062494208",
-      backend: "https://43de708d3ad0199f8c23975a3fd43aa0@o132036.ingest.us.sentry.io/4507537080188928"
-    },
-    accounts: {
-      frontend: "https://49c5d54e4d05418feb80cd4085fa32bd@o132036.ingest.us.sentry.io/4507537094541312",
-      backend: "https://d120a5f0acbf132b1edf58008c674164@o132036.ingest.us.sentry.io/4507537100505088"
-    }
-  },
-  applicationKey: {
-    console: "ccma-console-frontend-0xDEADBEEF",
-    accounts: "ccma-accounts-frontend-0xDEADBEEF"
-  },
-  enabled: ["dev", "int", "prod"],
-  ignoreTransactions: ["/events", "/assets", "/metrics"],
-  ignoreErrors: [
-    "No activity within 120000 milliseconds. No response received. Reconnecting.",
-    "network error",
-    "Load failed",
-    "Non-Error promise rejection captured with value: Could not clear consent from root domain.",
-    "NetworkError when attempting to fetch resource.",
-    "The initialization timeout of 3000ms has been hit before the network request has completed.",
-    "Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:update, ParamCount:4",
-    "Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:simulateEvent, ParamCount:1",
-    `Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node.`,
-    `Failed to execute 'createPolicy' on 'TrustedTypePolicyFactory': Policy with name "default" already exists.`,
-    // SSE errors after reload
-    `TypeError: Error in input stream`,
-    `TypeError: Failed to fetch`,
-    `that is not 200. Aborting the connection.`,
-    `chars received. Reconnecting.`
-  ],
-  // value pair: [preprod, prod]
-  config: {
-    tracesSampleRate: {
-      frontend: {
-        accounts: [0.1, 5e-3],
-        console: [0.2, 0.01]
-      },
-      backend: {
-        accounts: [0.1, 5e-3],
-        console: [2e-4, 5e-4]
-      }
-    },
-    replaysSessionSampleRate: {
-      frontend: {
-        accounts: [5e-3, 1e-3],
-        console: [5e-3, 1e-3]
-      }
-    },
-    replaysOnErrorSampleRate: {
-      frontend: {
-        accounts: [5e-3, 1e-3],
-        console: [5e-3, 1e-3]
-      }
-    },
-    profilesSampleRate: {
-      backend: {
-        accounts: [1e-3, 2e-4],
-        console: [1e-3, 2e-4]
-      },
-      frontend: {
-        accounts: [1e-3, 2e-4],
-        console: [1e-3, 2e-4]
-      }
-    }
-  },
-  configWeight: (env, values) => {
-    if (values && values.length === 2) {
-      if (env === "prod") {
-        return values[1];
-      } else {
-        return values[0];
-      }
-    }
-    return 0.1;
-  }
-};
 export {
   CONSOLE_API_USER_ID,
   FIRSTNAME_LASTNAME_MAX_LENGTH,
@@ -110,7 +29,6 @@ export {
   NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,
   OPTIMIZE_FILTERING_MIN_VERSION,
   SECRETS_MAX_LENGTH,
-  SENTRY,
   STARTING_PRICE_PER_MONTH_IN_EURO,
   TEMPORARY_CLUSTER_NAME
 };

package/dist/constants/misc.const.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/constants/misc.const.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n\n/**\n * Minimum cluster (zeebe) version for the Optimize data-filters feature. Shared by\n * the c4 settings tile, the new-cluster default, and CRD spec generation so the gate\n * stays consistent. Stricter than the operator's own gate (Camunda >= 8.9.0-alpha1,\n * where the exporter starts honoring the filters) \u2014 this is the product rollout gate.\n */\nexport const OPTIMIZE_FILTERING_MIN_VERSION = '8.10.0-alpha1'\n\nexport const SENTRY = {\n  dsn: {\n    trial:\n      'https://a91625f8d3e1b34690588504ed020e14@o4507463051378688.ingest.de.sentry.io/4507463055376464',\n    console: {\n      frontend:\n        'https://bbf8e6b13f91f7a49ab0b7f079ae8cc0@o132036.ingest.us.sentry.io/4507537062494208',\n      backend:\n        'https://43de708d3ad0199f8c23975a3fd43aa0@o132036.ingest.us.sentry.io/4507537080188928',\n    },\n    accounts: {\n      frontend:\n        'https://49c5d54e4d05418feb80cd4085fa32bd@o132036.ingest.us.sentry.io/4507537094541312',\n      backend:\n        'https://d120a5f0acbf132b1edf58008c674164@o132036.ingest.us.sentry.io/4507537100505088',\n    },\n  },\n  applicationKey: {\n    console: 'ccma-console-frontend-0xDEADBEEF',\n    accounts: 'ccma-accounts-frontend-0xDEADBEEF',\n  },\n  enabled: ['dev', 'int', 'prod'],\n  ignoreTransactions: ['/events', '/assets', '/metrics'],\n  ignoreErrors: [\n    'No activity within 120000 milliseconds. No response received. Reconnecting.',\n    'network error',\n    'Load failed',\n    'Non-Error promise rejection captured with value: Could not clear consent from root domain.',\n    'NetworkError when attempting to fetch resource.',\n    'The initialization timeout of 3000ms has been hit before the network request has completed.',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:update, ParamCount:4',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:simulateEvent, ParamCount:1',\n    `Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node.`,\n    `Failed to execute 'createPolicy' on 'TrustedTypePolicyFactory': Policy with name \"default\" already exists.`,\n    // SSE errors after reload\n    `TypeError: Error in input stream`,\n    `TypeError: Failed to fetch`,\n    `that is not 200. Aborting the connection.`,\n    `chars received. Reconnecting.`,\n  ],\n  // value pair: [preprod, prod]\n  config: {\n    tracesSampleRate: {\n      frontend: {\n        accounts: [0.1, 0.005],\n        console: [0.2, 0.01],\n      },\n      backend: {\n        accounts: [0.1, 0.005],\n        console: [0.0002, 0.0005],\n      },\n    },\n    replaysSessionSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    replaysOnErrorSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    profilesSampleRate: {\n      backend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n      frontend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n    },\n  },\n  configWeight: (env: string, values: number[]) => {\n    if (values && values.length === 2) {\n      if (env === 'prod') {\n        return values[1]\n      } else {\n        return values[0]\n      }\n    }\n    return 0.1\n  },\n}\n"],
-  "mappings": "AAMO,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;AAQnC,MAAM,iCAAiC;AAEvC,MAAM,SAAS;AAAA,EACpB,KAAK;AAAA,IACH,OACE;AAAA,IACF,SAAS;AAAA,MACP,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,MACR,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA,SAAS,CAAC,OAAO,OAAO,MAAM;AAAA,EAC9B,oBAAoB,CAAC,WAAW,WAAW,UAAU;AAAA,EACrD,cAAc;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA;AAAA,EAEA,QAAQ;AAAA,IACN,kBAAkB;AAAA,MAChB,UAAU;AAAA,QACR,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,KAAK,IAAI;AAAA,MACrB;AAAA,MACA,SAAS;AAAA,QACP,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,MAAQ,IAAM;AAAA,MAC1B;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,oBAAoB;AAAA,MAClB,SAAS;AAAA,QACP,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc,CAAC,KAAa,WAAqB;AAC/C,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,UAAI,QAAQ,QAAQ;AAClB,eAAO,OAAO,CAAC;AAAA,MACjB,OAAO;AACL,eAAO,OAAO,CAAC;AAAA,MACjB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n\n/**\n * Minimum cluster (zeebe) version for the Optimize data-filters feature. Shared by\n * the c4 settings tile, the new-cluster default, and CRD spec generation so the gate\n * stays consistent. Stricter than the operator's own gate (Camunda >= 8.9.0-alpha1,\n * where the exporter starts honoring the filters) \u2014 this is the product rollout gate.\n */\nexport const OPTIMIZE_FILTERING_MIN_VERSION = '8.10.0-alpha1'\n"],
+  "mappings": "AAMO,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;AAQnC,MAAM,iCAAiC;",
   "names": []
 }

package/dist/dtos/Backup.dto.d.ts

@@ -18,4 +18,9 @@ export interface BackupDto {
      * backup has no `generationUuid` at all (legacy backups).
      */
     generationName?: string;
+    /**
+     * Link to the incident Slack channel, from the `incident-link` annotation
+     * on the Backup CR. Only set on internal (incident) backups.
+     */
+    incidentLink?: string;
 }

package/dist/dtos/ClusterPlan.dto.d.ts

@@ -7,4 +7,9 @@ export interface ClusterPlanDto {
     createdBy?: string;
     createdByName?: string;
     performanceExpectations?: string | null;
+    /**
+     * Number of clusters on this plan. Populated by the list endpoint
+     * (`GET api/plans`); absent on responses that don't compute it.
+     */
+    clusterCount?: number;
 }

package/dist/dtos/ClusterPlanType.dto.d.ts

@@ -1,5 +1,6 @@
 import type { ClusterPlanTypeCategory } from '../types/ClusterPlanTypeCategory.type.js';
 import type { ClusterPlanDto } from './ClusterPlan.dto.js';
+import type { ClusterLimits } from './SalesPlan.dto.js';
 export interface ClusterPlanTypeDto {
     uuid: string;
     name: string;
@@ -12,4 +13,9 @@ export interface ClusterPlanTypeDto {
     availabilityClass?: string;
     deprecated?: boolean;
     category: ClusterPlanTypeCategory;
+    /**
+     * Per-component data-retention overrides, set via the Set Limits action.
+     * Returned by the plan-type endpoints (the entity column is `@Expose`d).
+     */
+    limits?: ClusterLimits;
 }

package/dist/dtos/CommonCluster.dto.d.ts

@@ -75,7 +75,12 @@ export interface CommonClusterDto {
         connectorsUrl?: string;
         conditions?: Array<{
             type: string;
+            /** k8s condition status: 'True' | 'False' | 'Unknown'. Present on the wire
+             *  (the operator sets it); consumers use it to tell an active condition from
+             *  a resolved one rather than relying on presence/absence alone. */
+            status?: string;
             reason?: string;
+            message?: string;
             lastTransitionTime?: string;
         }>;
         updateClusterStatus?: {
@@ -105,6 +110,17 @@ export interface CommonClusterDto {
      * completed. Failover is only offered when this is true.
      */
     secondaryBucketSyncCompleted?: boolean;
+    /**
+     * True once this cluster's reservation slot has been transferred to a
+     * failover cluster. It remains visible but can never be resumed again.
+     */
+    isFailoverSource?: boolean;
+    /**
+     * Stable durable identity shared by both halves of a failover pair. Used to
+     * pair a failover cluster with its source, and to derive the pre-staged
+     * `clone-backup-<stableId>` IAM role ARN.
+     */
+    stableId?: string;
     encryption?: string;
     primaryEncryptionKeyId?: string | null;
     secondaryEncryptionKeyId?: string | null;
@@ -138,6 +154,8 @@ export interface CommonClusterDto {
     planType: ClusterPlanTypeDto;
     numberOfAllocatedHwPackages?: number;
     restoreInProgress?: boolean;
+    restoreFailed?: boolean;
+    failedRestoreId?: string;
     overrideEnvVars?: {
         zeebeBroker: string | undefined;
         zeebeGateway: string | undefined;

package/dist/dtos/ControlV2.dto.d.ts

@@ -39,17 +39,28 @@ export interface OrgListItemV2Dto {
     created: string;
     internal: boolean;
     salesPlanType?: SalesPlanType;
+    /** Concrete plan name (`SalesPlan.name`), distinct from the tier `salesPlanType`. */
+    salesPlanName?: string;
     salesForceId?: string;
-    /** Batched per page (spec §9.4 B3); absent if the count lookup failed. */
-    clusterCount?: number;
 }
 export interface ListOrganizationsV2Params extends CursorParams {
     q?: string;
+    /**
+     * Lucene-style query over the org fields (see `ORGANIZATION_SEARCH_FIELDS`).
+     * ANDed with `q`/`filter` server-side; a bare term behaves like `q`.
+     */
+    query?: string;
     sort?: 'name' | 'created' | 'internal';
     order?: 'asc' | 'desc';
     filter?: {
         internal?: boolean;
-        salesPlanType?: SalesPlanType;
+        /** Sales plan tiers (`SalesPlanType`); multi-select, matched with `IN (...)`. */
+        salesPlanTypes?: SalesPlanType[];
+        /**
+         * Concrete plan names (`SalesPlan.name`, distinct from the tier); backs the
+         * "Sales plan name" filter. Multi-select, matched with `IN (...)`.
+         */
+        salesPlanNames?: string[];
         /** ISO-8601 lower bound on `created` (age-bucket filters). */
         createdAfter?: string;
         /** ISO-8601 upper bound on `created` (age-bucket filters). */
@@ -87,7 +98,10 @@ export interface ClusterListItemV2Dto {
     orgName: string;
     /** Normalized server-side; augmented on the fly from the K8s watcher (§9.4 B1). */
     status: string;
-    plan: string;
+    /** Plan type name (`ClusterPlanType.name`). Backs the "Plan type" column. */
+    planTypeName: string;
+    /** Concrete plan name (`ClusterPlan.name`). Backs the "Plan" column. */
+    planName?: string;
     generation: string;
     region: string;
     /** Display-only; not a sort/filter key (§9.4 B2). */
@@ -104,18 +118,52 @@ export interface ClusterListItemV2Dto {
 export type ClusterDetailV2Dto = ClusterListItemV2Dto;
 export interface ListClustersV2Params extends CursorParams {
     q?: string;
-    sort?: 'name' | 'created';
+    /**
+     * Lucene-style query over the cluster fields (see `CLUSTER_SEARCH_FIELDS`).
+     * ANDed with `q`/`filter` server-side; a bare term behaves like `q`.
+     */
+    query?: string;
+    /**
+     * Server-side sort key. Beyond `name`/`created`, the clusters list also sorts
+     * by the DB-backed columns behind these list columns (the values are the
+     * frontend column `key`s, mapped to SQL expressions in the controller):
+     * `orgName` (owner id), `autoUpdate`, `planName`, `planTypeName`, `generation`,
+     * `channel`. `status`/`region` are intentionally excluded — they're computed
+     * from live K8s state / context config, not SQL columns.
+     */
+    sort?: 'name' | 'created' | 'orgName' | 'autoUpdate' | 'planName' | 'planTypeName' | 'generation' | 'channel';
     order?: 'asc' | 'desc';
     filter?: {
         status?: string;
-        /** Cluster plan TYPE name (maps to `planType.name`; legacy param name). */
+        /**
+         * Cluster plan TYPE name (maps to `planType.name`; legacy single-value
+         * param, still used by the plan-type detail page's cluster-distribution
+         * read — kept alongside `planTypeNames` rather than replaced).
+         */
         plan?: string;
-        /** Cluster plan name (the concrete `plan.name`, not the type). */
-        planName?: string;
-        generation?: string;
-        region?: string;
-        /** Cloud provider (resolved via the k8s-context config, like `region`). */
-        provider?: string;
+        /**
+         * Restrict to these plan TYPE names (`planType.name`); the Control
+         * clusters list's multi-select "Plan type" filter.
+         */
+        planTypeNames?: string[];
+        /**
+         * Restrict to these concrete plan names (`plan.name`, the `ClusterPlan`
+         * entity — NOT the plan type); backs the Control clusters list's "Plan"
+         * filter, whose dropdown is sourced from `ClusterPlan` via
+         * `/clusters/parameters`. Corrected in #9325 (second pass): a prior fix
+         * on this branch mistakenly repointed this at `planType.name` to match a
+         * dropdown that was, at the time, wrongly sourced from `ClusterPlanType`
+         * — but the dropdown was the actual bug. Both the dropdown and this query
+         * now consistently reference `ClusterPlan`. Distinct from `planTypeNames`
+         * above, which is the separate "Plan type" filter over `ClusterPlanType`.
+         */
+        planNames?: string[];
+        /** Restrict to these generation names (`generation.name`). */
+        generationNames?: string[];
+        /** Restrict to these region names (resolved via the k8s-context config). */
+        regions?: string[];
+        /** Restrict to these cloud providers (resolved via the k8s-context config). */
+        providers?: string[];
         /** Exact k8s context uuid. */
         k8sContext?: string;
         orgId?: string;
@@ -134,8 +182,8 @@ export interface ListClustersV2Params extends CursorParams {
          * "8.7" matches zeebe 8.7.x).
          */
         minorVersion?: string;
-        /** Release channel name. */
-        channel?: string;
+        /** Restrict to these release channel names. */
+        channels?: string[];
         /** ISO-8601 lower bound on `created` (e.g. "created in the last 7 days"). */
         createdAfter?: string;
     };

package/dist/dtos/K8sContext.dto.d.ts

@@ -33,6 +33,12 @@ export interface K8sContext {
     project_id?: string;
     project_name?: string;
     tsuga_cluster_id?: string;
+    /**
+     * Number of clusters on this context. Set by `GET api/admin/k8sContexts` only
+     * when queried with `withClusterCounts` (requires the `multiCluster.admin`
+     * permission); absent otherwise.
+     */
+    clusterCount?: number;
 }
 export interface K8sConfig {
     kubernetes_context: {

package/dist/dtos/Organization.dto.d.ts

@@ -15,6 +15,8 @@ export interface OrganizationMetadata {
         tenantKey: string;
         teamId: string;
         created: number;
+        /** Epoch ms of the last key rotation — set when the tenant key is regenerated. */
+        updated?: number;
     };
 }
 export interface AutoJoinAssignment {

package/dist/dtos/Organization.dto.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/dtos/Organization.dto.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationPermissions } from '../types/OrganizationPermission.type.js'\nimport type { SalesPlanType } from '../types/SalesPlanType.type.js'\nimport type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js'\n\nexport type LicensingModelType = 'legacy' | '2025'\n\nexport const VALID_LICENSING_MODELS: readonly LicensingModelType[] = [\n  'legacy',\n  '2025',\n] as const\n\nexport const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string> =\n  {\n    legacy: 'Legacy (PI, DI, TU)',\n    '2025': '2025 (PI+Tenant)',\n  } as const\n\nexport interface OrganizationMetadata {\n  clickedRequestPaidPlan?: boolean\n  salesForceId?: string\n  enterpriseDevOnly?: boolean\n  awsOnly?: boolean\n  licensingModel?: LicensingModelType\n  autoJoin?: AutoJoinAssignment\n  llm?: {\n    tenantKey: string\n    teamId: string\n    created: number\n  }\n}\n\nexport interface AutoJoinAssignment {\n  departments: Array<{ hibobId: string; roles: string[] }>\n  divisions: Array<{ hibobId: string; roles: string[] }>\n  subdivisions: Array<{ hibobId: string; roles: string[] }>\n}\nexport interface OrganizationDto {\n  uuid: string\n  name: string\n  organizationToSalesPlan?: OrganizationToSalesPlanDto\n  permissions?: OrganizationPermissions\n  metadata?: OrganizationMetadata\n  created: Date\n  internal: boolean\n}\n\nexport interface OrgOwner {\n  owner: string\n  email: string\n  first: string\n  last: string\n}\n\nexport interface OrgWithNameAndSalesPlan {\n  uuid: string\n  name: string | undefined\n  salesPlanName: string | undefined\n  salesPlanUuid: string | undefined\n  salesPlanType: SalesPlanType | undefined\n}\n"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationPermissions } from '../types/OrganizationPermission.type.js'\nimport type { SalesPlanType } from '../types/SalesPlanType.type.js'\nimport type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js'\n\nexport type LicensingModelType = 'legacy' | '2025'\n\nexport const VALID_LICENSING_MODELS: readonly LicensingModelType[] = [\n  'legacy',\n  '2025',\n] as const\n\nexport const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string> =\n  {\n    legacy: 'Legacy (PI, DI, TU)',\n    '2025': '2025 (PI+Tenant)',\n  } as const\n\nexport interface OrganizationMetadata {\n  clickedRequestPaidPlan?: boolean\n  salesForceId?: string\n  enterpriseDevOnly?: boolean\n  awsOnly?: boolean\n  licensingModel?: LicensingModelType\n  autoJoin?: AutoJoinAssignment\n  llm?: {\n    tenantKey: string\n    teamId: string\n    created: number\n    /** Epoch ms of the last key rotation \u2014 set when the tenant key is regenerated. */\n    updated?: number\n  }\n}\n\nexport interface AutoJoinAssignment {\n  departments: Array<{ hibobId: string; roles: string[] }>\n  divisions: Array<{ hibobId: string; roles: string[] }>\n  subdivisions: Array<{ hibobId: string; roles: string[] }>\n}\nexport interface OrganizationDto {\n  uuid: string\n  name: string\n  organizationToSalesPlan?: OrganizationToSalesPlanDto\n  permissions?: OrganizationPermissions\n  metadata?: OrganizationMetadata\n  created: Date\n  internal: boolean\n}\n\nexport interface OrgOwner {\n  owner: string\n  email: string\n  first: string\n  last: string\n}\n\nexport interface OrgWithNameAndSalesPlan {\n  uuid: string\n  name: string | undefined\n  salesPlanName: string | undefined\n  salesPlanUuid: string | undefined\n  salesPlanType: SalesPlanType | undefined\n}\n"],
   "mappings": "AAYO,MAAM,yBAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,gCACX;AAAA,EACE,QAAQ;AAAA,EACR,QAAQ;AACV;",
   "names": []
 }

package/dist/dtos/ReleaseTrainSanity.dto.d.ts

@@ -0,0 +1,51 @@
+export type SanitySeverity = 'error' | 'warning';
+/**
+ * Machine-applicable fix proposal attached to a violation. Edge fixes mutate
+ * `generationUuid`'s upgradeableFrom list; `edgeUuid` is the entry to
+ * add/remove. Names ride along for human-readable review UI.
+ */
+export type SanityFix = {
+    type: 'remove-upgrade-edge';
+    generationUuid: string;
+    generationName: string;
+    edgeUuid: string;
+    edgeName: string;
+} | {
+    type: 'add-upgrade-edge';
+    generationUuid: string;
+    generationName: string;
+    edgeUuid: string;
+    edgeName: string;
+} | {
+    type: 'delete-generation';
+    generationUuid: string;
+    generationName: string;
+    /** When set, the delete must not be offered as selectable (e.g. clusters still run it). */
+    blockedReason?: string;
+};
+export interface SanityViolation {
+    ruleId: string;
+    severity: SanitySeverity;
+    message: string;
+    generationUuid?: string;
+    generationName?: string;
+    details?: Record<string, unknown>;
+    fix?: SanityFix;
+}
+export interface SanityRuleInfo {
+    id: string;
+    title: string;
+    severity: SanitySeverity;
+}
+export interface ReleaseTrainSanityReport {
+    /** ISO 8601 timestamp of when the check ran. */
+    checkedAt: string;
+    summary: {
+        errors: number;
+        warnings: number;
+        rules: number;
+    };
+    /** The rules that ran, in order. */
+    rules: SanityRuleInfo[];
+    violations: SanityViolation[];
+}

package/dist/dtos/ReleaseTrainSanity.dto.js

@@ -0,0 +1 @@
+//# sourceMappingURL=ReleaseTrainSanity.dto.js.map

package/dist/dtos/ReleaseTrainSanity.dto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/dtos/SalesPlan.dto.d.ts

@@ -27,6 +27,17 @@ export interface ClusterLimits {
 export interface Limits extends ClusterLimits {
     maxMembers?: number;
     hotBackup?: boolean;
+    /**
+     * Overrides the operator's default retained count (3) for manual (on-demand)
+     * hot backups (ZeebeCluster spec.backup.retainedCount).
+     */
+    hotBackupManualRetainedCount?: number;
+    /**
+     * Overrides the operator's default retained count (3) for scheduled hot
+     * backups (BackupSchedule spec.successfulBackupsHistoryLimit /
+     * failedBackupsHistoryLimit).
+     */
+    hotBackupScheduledRetainedCount?: number;
     ipWhiteList?: boolean;
     secureConnectivity?: boolean;
     failover?: boolean;

package/dist/dtos/SalesPlan.dto.js

@@ -71,6 +71,20 @@ function allSalesPlanLimits() {
       description: "used to activate the hot backup functionality in organizations. default = not active",
       isClusterBasedLimit: false
     },
+    {
+      key: "hotBackupManualRetainedCount",
+      type: "number",
+      description: "overrides how many manual (on-demand) hot backups the operator retains before deleting the oldest. default = 3",
+      isClusterBasedLimit: false,
+      validate: (input) => Number.isInteger(input) && input >= 1
+    },
+    {
+      key: "hotBackupScheduledRetainedCount",
+      type: "number",
+      description: "overrides how many scheduled hot backups the operator retains before deleting the oldest. default = 3",
+      isClusterBasedLimit: false,
+      validate: (input) => Number.isInteger(input) && input >= 1
+    },
     {
       key: "ipWhiteList",
       type: "boolean",