@camunda/ccma-shared-types 0.5.0 → 0.6.0

package/dist/_tests/utils/failoverKeyPolicy.utils.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/constants/misc.const.d.ts

@@ -23,58 +23,78 @@ export declare const MAX_HARDWARE_PACKAGE_COUNT = 4;
  * where the exporter starts honoring the filters) — this is the product rollout gate.
  */
 export declare const OPTIMIZE_FILTERING_MIN_VERSION = "8.10.0-alpha1";
-export declare const SENTRY: {
-    dsn: {
-        trial: string;
-        console: {
-            frontend: string;
-            backend: string;
-        };
-        accounts: {
-            frontend: string;
-            backend: string;
-        };
-    };
-    applicationKey: {
-        console: string;
-        accounts: string;
-    };
-    enabled: string[];
-    ignoreTransactions: string[];
-    ignoreErrors: string[];
-    config: {
-        tracesSampleRate: {
-            frontend: {
-                accounts: number[];
-                console: number[];
-            };
-            backend: {
-                accounts: number[];
-                console: number[];
-            };
-        };
-        replaysSessionSampleRate: {
-            frontend: {
-                accounts: number[];
-                console: number[];
-            };
-        };
-        replaysOnErrorSampleRate: {
-            frontend: {
-                accounts: number[];
-                console: number[];
-            };
-        };
-        profilesSampleRate: {
-            backend: {
-                accounts: number[];
-                console: number[];
-            };
-            frontend: {
-                accounts: number[];
-                console: number[];
-            };
-        };
-    };
-    configWeight: (env: string, values: number[]) => number;
-};
+/**
+ * Minimum cluster (zeebe) version at which the operator understands the new
+ * cluster-secret CRDs (camunda-operator#5760) — SecretSource and SecretSync exist and
+ * reconcile. Governs *provisioning the CRs*, nothing about which store they point at:
+ * SecretSource provisioning (K8sClusterController.ensureSecretSource) and BYOIDP's
+ * oidcProviders emission, which needs a SecretSource to deliver its clientSecretRef
+ * (ByoidpSecretDeliveryController.deliverSecret refuses without one).
+ *
+ * BYOIDP is live up to prod, so this floor must stay at the generation BYOIDP
+ * shipped on. Raising it would strand BYOIDP on every alpha below the new value.
+ */
+export declare const SECRET_SOURCE_MIN_VERSION = "8.10.0-alpha3";
+/**
+ * Minimum cluster (zeebe) version for BYOIDP (external identity provider, #3190).
+ * Shared by the c4 settings tile gate and the console-backend update guard so both
+ * stay in lockstep.
+ *
+ * Aliased to SECRET_SOURCE_MIN_VERSION rather than repeating the literal: BYOIDP
+ * needs the SecretSource/SecretSync CRDs to exist and nothing more (it delivers its
+ * clientSecret through the SecretSource), so the two answer the same question and a
+ * second literal would only let them drift. It is NOT CONNECTOR_SECRET_SYNC_MIN_VERSION
+ * — that one is higher, and gating BYOIDP on it would strand BYOIDP on every alpha,
+ * where it currently ships to prod.
+ */
+export declare const BYOIDP_MIN_VERSION = "8.10.0-alpha3";
+/**
+ * Minimum cluster (zeebe) version at which a cluster's *connector and internal*
+ * secrets live in the new per-stage secret manager rather than the legacy store.
+ *
+ * Higher than SECRET_SOURCE_MIN_VERSION on purpose: a cluster can have a
+ * SecretSource (so BYOIDP works) while its connector secrets are still in the legacy
+ * store and it gets no connector SecretSync. The one thing that must never drift is
+ * the pair inside THIS concern: store routing
+ * (ConnectorSecretsController.resolveSecretManagerTarget), the connector SecretSync
+ * and its projection into the broker's file store (K8sSpecUtils.getSecretStoresSpec),
+ * the pre-8.10-backup mirror check, and the upgrade-copy crossing check
+ * (GenerationController.crossesInto810) all read THIS constant. #9703 was those
+ * disagreeing — where Console writes a secret must equal where the cluster reads it.
+ *
+ * Deliberately the 8.10 GA line, not any particular alpha. semver sorts a
+ * prerelease below its release, so every `8.10.0-alphaN` — present and future —
+ * falls below this floor, while `SNAPSHOT` and `8.10-SNAPSHOT` normalize above it
+ * and do route to the new store.
+ *
+ * Why alphas must stay out: routing is version-based with no persisted "which store
+ * holds this cluster's secrets" marker, so a cluster above the floor while the
+ * feature gate is off has its secrets in the legacy store, and enabling the gate
+ * later reroutes it to a store nobody ever populated. The copy that would fix that
+ * (GenerationController.crossesInto810 -> copyConnectorSecretsToNewManager) only
+ * fires on a generation CHANGE, and alpha generations have no upgrade chain at all
+ * (`upgradeableFrom = []`, ReleaseTrainController.handleAlpha) — an alpha cluster is
+ * created on its generation and stays there. So an alpha cohort above this floor
+ * could never be migrated; the ~200 8.10.0-alpha4 clusters on prod are exactly that
+ * cohort.
+ *
+ * Keeping the floor on the GA line means clusters enter the new store only where the
+ * copy is actually reachable: a real 8.10.0 upgrade, which does cross generations.
+ * Alphas stay on the legacy store consistently and permanently.
+ *
+ * Do NOT lower this to name an alpha. The remaining ordering requirement is that a
+ * stage's gate be enabled before the first at-floor cluster exists on it — which for
+ * SNAPSHOT-tagged clusters (at-floor by design, since they run the newest operator)
+ * still has to be respected by hand.
+ */
+export declare const CONNECTOR_SECRET_SYNC_MIN_VERSION = "8.10.0";
+/**
+ * Version floors for App Integrations (#8536). The fix landed as patches on
+ * the 8.9 stream (zeebe >=8.9.14 AND connectorBridge >=8.9.7), everything
+ * from 8.10.0-alpha4 on already carries both fixes. Shared by
+ * isAppIntegrationsVersionSupported (c4 settings tile + console-backend
+ * update guard) so the gate logic and its error message stay in lockstep.
+ */
+export declare const APP_INTEGRATIONS_MIN_VERSION = "8.10.0-alpha4";
+export declare const APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION = "8.9.14";
+export declare const APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION = "8.9.7";

package/dist/constants/misc.const.js

@@ -19,88 +19,18 @@ const MINIMUM_EYEPAIRS = {
 };
 const MAX_HARDWARE_PACKAGE_COUNT = 4;
 const OPTIMIZE_FILTERING_MIN_VERSION = "8.10.0-alpha1";
-const SENTRY = {
-  dsn: {
-    trial: "https://a91625f8d3e1b34690588504ed020e14@o4507463051378688.ingest.de.sentry.io/4507463055376464",
-    console: {
-      frontend: "https://bbf8e6b13f91f7a49ab0b7f079ae8cc0@o132036.ingest.us.sentry.io/4507537062494208",
-      backend: "https://43de708d3ad0199f8c23975a3fd43aa0@o132036.ingest.us.sentry.io/4507537080188928"
-    },
-    accounts: {
-      frontend: "https://49c5d54e4d05418feb80cd4085fa32bd@o132036.ingest.us.sentry.io/4507537094541312",
-      backend: "https://d120a5f0acbf132b1edf58008c674164@o132036.ingest.us.sentry.io/4507537100505088"
-    }
-  },
-  applicationKey: {
-    console: "ccma-console-frontend-0xDEADBEEF",
-    accounts: "ccma-accounts-frontend-0xDEADBEEF"
-  },
-  enabled: ["dev", "int", "prod"],
-  ignoreTransactions: ["/events", "/assets", "/metrics"],
-  ignoreErrors: [
-    "No activity within 120000 milliseconds. No response received. Reconnecting.",
-    "network error",
-    "Load failed",
-    "Non-Error promise rejection captured with value: Could not clear consent from root domain.",
-    "NetworkError when attempting to fetch resource.",
-    "The initialization timeout of 3000ms has been hit before the network request has completed.",
-    "Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:update, ParamCount:4",
-    "Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:simulateEvent, ParamCount:1",
-    `Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node.`,
-    `Failed to execute 'createPolicy' on 'TrustedTypePolicyFactory': Policy with name "default" already exists.`,
-    // SSE errors after reload
-    `TypeError: Error in input stream`,
-    `TypeError: Failed to fetch`,
-    `that is not 200. Aborting the connection.`,
-    `chars received. Reconnecting.`
-  ],
-  // value pair: [preprod, prod]
-  config: {
-    tracesSampleRate: {
-      frontend: {
-        accounts: [0.1, 5e-3],
-        console: [0.2, 0.01]
-      },
-      backend: {
-        accounts: [0.1, 5e-3],
-        console: [2e-4, 5e-4]
-      }
-    },
-    replaysSessionSampleRate: {
-      frontend: {
-        accounts: [5e-3, 1e-3],
-        console: [5e-3, 1e-3]
-      }
-    },
-    replaysOnErrorSampleRate: {
-      frontend: {
-        accounts: [5e-3, 1e-3],
-        console: [5e-3, 1e-3]
-      }
-    },
-    profilesSampleRate: {
-      backend: {
-        accounts: [1e-3, 2e-4],
-        console: [1e-3, 2e-4]
-      },
-      frontend: {
-        accounts: [1e-3, 2e-4],
-        console: [1e-3, 2e-4]
-      }
-    }
-  },
-  configWeight: (env, values) => {
-    if (values && values.length === 2) {
-      if (env === "prod") {
-        return values[1];
-      } else {
-        return values[0];
-      }
-    }
-    return 0.1;
-  }
-};
+const SECRET_SOURCE_MIN_VERSION = "8.10.0-alpha3";
+const BYOIDP_MIN_VERSION = SECRET_SOURCE_MIN_VERSION;
+const CONNECTOR_SECRET_SYNC_MIN_VERSION = "8.10.0";
+const APP_INTEGRATIONS_MIN_VERSION = "8.10.0-alpha4";
+const APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION = "8.9.14";
+const APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION = "8.9.7";
 export {
+  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,
+  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,
+  APP_INTEGRATIONS_MIN_VERSION,
+  BYOIDP_MIN_VERSION,
+  CONNECTOR_SECRET_SYNC_MIN_VERSION,
   CONSOLE_API_USER_ID,
   FIRSTNAME_LASTNAME_MAX_LENGTH,
   HOTBACKUP_MIN_CREATE_PERIOD,
@@ -110,7 +40,7 @@ export {
   NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,
   OPTIMIZE_FILTERING_MIN_VERSION,
   SECRETS_MAX_LENGTH,
-  SENTRY,
+  SECRET_SOURCE_MIN_VERSION,
   STARTING_PRICE_PER_MONTH_IN_EURO,
   TEMPORARY_CLUSTER_NAME
 };

package/dist/constants/misc.const.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/constants/misc.const.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n\n/**\n * Minimum cluster (zeebe) version for the Optimize data-filters feature. Shared by\n * the c4 settings tile, the new-cluster default, and CRD spec generation so the gate\n * stays consistent. Stricter than the operator's own gate (Camunda >= 8.9.0-alpha1,\n * where the exporter starts honoring the filters) \u2014 this is the product rollout gate.\n */\nexport const OPTIMIZE_FILTERING_MIN_VERSION = '8.10.0-alpha1'\n\nexport const SENTRY = {\n  dsn: {\n    trial:\n      'https://a91625f8d3e1b34690588504ed020e14@o4507463051378688.ingest.de.sentry.io/4507463055376464',\n    console: {\n      frontend:\n        'https://bbf8e6b13f91f7a49ab0b7f079ae8cc0@o132036.ingest.us.sentry.io/4507537062494208',\n      backend:\n        'https://43de708d3ad0199f8c23975a3fd43aa0@o132036.ingest.us.sentry.io/4507537080188928',\n    },\n    accounts: {\n      frontend:\n        'https://49c5d54e4d05418feb80cd4085fa32bd@o132036.ingest.us.sentry.io/4507537094541312',\n      backend:\n        'https://d120a5f0acbf132b1edf58008c674164@o132036.ingest.us.sentry.io/4507537100505088',\n    },\n  },\n  applicationKey: {\n    console: 'ccma-console-frontend-0xDEADBEEF',\n    accounts: 'ccma-accounts-frontend-0xDEADBEEF',\n  },\n  enabled: ['dev', 'int', 'prod'],\n  ignoreTransactions: ['/events', '/assets', '/metrics'],\n  ignoreErrors: [\n    'No activity within 120000 milliseconds. No response received. Reconnecting.',\n    'network error',\n    'Load failed',\n    'Non-Error promise rejection captured with value: Could not clear consent from root domain.',\n    'NetworkError when attempting to fetch resource.',\n    'The initialization timeout of 3000ms has been hit before the network request has completed.',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:update, ParamCount:4',\n    'Non-Error promise rejection captured with value: Object Not Found Matching Id:3, MethodName:simulateEvent, ParamCount:1',\n    `Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node.`,\n    `Failed to execute 'createPolicy' on 'TrustedTypePolicyFactory': Policy with name \"default\" already exists.`,\n    // SSE errors after reload\n    `TypeError: Error in input stream`,\n    `TypeError: Failed to fetch`,\n    `that is not 200. Aborting the connection.`,\n    `chars received. Reconnecting.`,\n  ],\n  // value pair: [preprod, prod]\n  config: {\n    tracesSampleRate: {\n      frontend: {\n        accounts: [0.1, 0.005],\n        console: [0.2, 0.01],\n      },\n      backend: {\n        accounts: [0.1, 0.005],\n        console: [0.0002, 0.0005],\n      },\n    },\n    replaysSessionSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    replaysOnErrorSampleRate: {\n      frontend: {\n        accounts: [0.005, 0.001],\n        console: [0.005, 0.001],\n      },\n    },\n    profilesSampleRate: {\n      backend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n      frontend: {\n        accounts: [0.001, 0.0002],\n        console: [0.001, 0.0002],\n      },\n    },\n  },\n  configWeight: (env: string, values: number[]) => {\n    if (values && values.length === 2) {\n      if (env === 'prod') {\n        return values[1]\n      } else {\n        return values[0]\n      }\n    }\n    return 0.1\n  },\n}\n"],
-  "mappings": "AAMO,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;AAQnC,MAAM,iCAAiC;AAEvC,MAAM,SAAS;AAAA,EACpB,KAAK;AAAA,IACH,OACE;AAAA,IACF,SAAS;AAAA,MACP,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,MACR,UACE;AAAA,MACF,SACE;AAAA,IACJ;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA,SAAS,CAAC,OAAO,OAAO,MAAM;AAAA,EAC9B,oBAAoB,CAAC,WAAW,WAAW,UAAU;AAAA,EACrD,cAAc;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA;AAAA,EAEA,QAAQ;AAAA,IACN,kBAAkB;AAAA,MAChB,UAAU;AAAA,QACR,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,KAAK,IAAI;AAAA,MACrB;AAAA,MACA,SAAS;AAAA,QACP,UAAU,CAAC,KAAK,IAAK;AAAA,QACrB,SAAS,CAAC,MAAQ,IAAM;AAAA,MAC1B;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,0BAA0B;AAAA,MACxB,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAK;AAAA,QACvB,SAAS,CAAC,MAAO,IAAK;AAAA,MACxB;AAAA,IACF;AAAA,IACA,oBAAoB;AAAA,MAClB,SAAS;AAAA,QACP,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,MACA,UAAU;AAAA,QACR,UAAU,CAAC,MAAO,IAAM;AAAA,QACxB,SAAS,CAAC,MAAO,IAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA,EACA,cAAc,CAAC,KAAa,WAAqB;AAC/C,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,UAAI,QAAQ,QAAQ;AAClB,eAAO,OAAO,CAAC;AAAA,MACjB,OAAO;AACL,eAAO,OAAO,CAAC;AAAA,MACjB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n\n/**\n * Minimum cluster (zeebe) version for the Optimize data-filters feature. Shared by\n * the c4 settings tile, the new-cluster default, and CRD spec generation so the gate\n * stays consistent. Stricter than the operator's own gate (Camunda >= 8.9.0-alpha1,\n * where the exporter starts honoring the filters) \u2014 this is the product rollout gate.\n */\nexport const OPTIMIZE_FILTERING_MIN_VERSION = '8.10.0-alpha1'\n\n/**\n * Minimum cluster (zeebe) version at which the operator understands the new\n * cluster-secret CRDs (camunda-operator#5760) \u2014 SecretSource and SecretSync exist and\n * reconcile. Governs *provisioning the CRs*, nothing about which store they point at:\n * SecretSource provisioning (K8sClusterController.ensureSecretSource) and BYOIDP's\n * oidcProviders emission, which needs a SecretSource to deliver its clientSecretRef\n * (ByoidpSecretDeliveryController.deliverSecret refuses without one).\n *\n * BYOIDP is live up to prod, so this floor must stay at the generation BYOIDP\n * shipped on. Raising it would strand BYOIDP on every alpha below the new value.\n */\nexport const SECRET_SOURCE_MIN_VERSION = '8.10.0-alpha3'\n\n/**\n * Minimum cluster (zeebe) version for BYOIDP (external identity provider, #3190).\n * Shared by the c4 settings tile gate and the console-backend update guard so both\n * stay in lockstep.\n *\n * Aliased to SECRET_SOURCE_MIN_VERSION rather than repeating the literal: BYOIDP\n * needs the SecretSource/SecretSync CRDs to exist and nothing more (it delivers its\n * clientSecret through the SecretSource), so the two answer the same question and a\n * second literal would only let them drift. It is NOT CONNECTOR_SECRET_SYNC_MIN_VERSION\n * \u2014 that one is higher, and gating BYOIDP on it would strand BYOIDP on every alpha,\n * where it currently ships to prod.\n */\nexport const BYOIDP_MIN_VERSION = SECRET_SOURCE_MIN_VERSION\n\n/**\n * Minimum cluster (zeebe) version at which a cluster's *connector and internal*\n * secrets live in the new per-stage secret manager rather than the legacy store.\n *\n * Higher than SECRET_SOURCE_MIN_VERSION on purpose: a cluster can have a\n * SecretSource (so BYOIDP works) while its connector secrets are still in the legacy\n * store and it gets no connector SecretSync. The one thing that must never drift is\n * the pair inside THIS concern: store routing\n * (ConnectorSecretsController.resolveSecretManagerTarget), the connector SecretSync\n * and its projection into the broker's file store (K8sSpecUtils.getSecretStoresSpec),\n * the pre-8.10-backup mirror check, and the upgrade-copy crossing check\n * (GenerationController.crossesInto810) all read THIS constant. #9703 was those\n * disagreeing \u2014 where Console writes a secret must equal where the cluster reads it.\n *\n * Deliberately the 8.10 GA line, not any particular alpha. semver sorts a\n * prerelease below its release, so every `8.10.0-alphaN` \u2014 present and future \u2014\n * falls below this floor, while `SNAPSHOT` and `8.10-SNAPSHOT` normalize above it\n * and do route to the new store.\n *\n * Why alphas must stay out: routing is version-based with no persisted \"which store\n * holds this cluster's secrets\" marker, so a cluster above the floor while the\n * feature gate is off has its secrets in the legacy store, and enabling the gate\n * later reroutes it to a store nobody ever populated. The copy that would fix that\n * (GenerationController.crossesInto810 -> copyConnectorSecretsToNewManager) only\n * fires on a generation CHANGE, and alpha generations have no upgrade chain at all\n * (`upgradeableFrom = []`, ReleaseTrainController.handleAlpha) \u2014 an alpha cluster is\n * created on its generation and stays there. So an alpha cohort above this floor\n * could never be migrated; the ~200 8.10.0-alpha4 clusters on prod are exactly that\n * cohort.\n *\n * Keeping the floor on the GA line means clusters enter the new store only where the\n * copy is actually reachable: a real 8.10.0 upgrade, which does cross generations.\n * Alphas stay on the legacy store consistently and permanently.\n *\n * Do NOT lower this to name an alpha. The remaining ordering requirement is that a\n * stage's gate be enabled before the first at-floor cluster exists on it \u2014 which for\n * SNAPSHOT-tagged clusters (at-floor by design, since they run the newest operator)\n * still has to be respected by hand.\n */\nexport const CONNECTOR_SECRET_SYNC_MIN_VERSION = '8.10.0'\n\n/**\n * Version floors for App Integrations (#8536). The fix landed as patches on\n * the 8.9 stream (zeebe >=8.9.14 AND connectorBridge >=8.9.7), everything\n * from 8.10.0-alpha4 on already carries both fixes. Shared by\n * isAppIntegrationsVersionSupported (c4 settings tile + console-backend\n * update guard) so the gate logic and its error message stay in lockstep.\n */\nexport const APP_INTEGRATIONS_MIN_VERSION = '8.10.0-alpha4'\nexport const APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION = '8.9.14'\nexport const APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION = '8.9.7'\n"],
+  "mappings": "AAMO,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;AAQnC,MAAM,iCAAiC;AAavC,MAAM,4BAA4B;AAclC,MAAM,qBAAqB;AAyC3B,MAAM,oCAAoC;AAS1C,MAAM,+BAA+B;AACrC,MAAM,+CAA+C;AACrD,MAAM,0DAA0D;",
   "names": []
 }

package/dist/dtos/CommonCluster.dto.d.ts

@@ -40,7 +40,9 @@ export interface OptimizeFilteringPatch {
  * (`idp-config-{clusterId}`, keyed by `name`) and referenced from the CR only.
  */
 export interface ExternalIdpConfig {
-    /** Registration id. Uppercase letters + digits, starts with a letter (`^[A-Z][A-Z0-9]*$`).
+    /** Registration id. Lowercase letters + digits, starts with a letter
+     *  (`^[a-z][a-z0-9]*$`, max 63 chars), matching camunda-operator's `oidcProviders[].name`
+     *  (Spring lowercases every registration id it reads from an env var name). `oidc` is reserved.
      *  Doubles as the Secret data key, the `..._OIDC_<NAME>_*` env-var segment, and `clientSecretRef.key`. */
     name: string;
     /** Friendly display name shown on the login picker. */
@@ -110,6 +112,24 @@ export interface CommonClusterDto {
      * completed. Failover is only offered when this is true.
      */
     secondaryBucketSyncCompleted?: boolean;
+    /**
+     * True once this cluster's reservation slot has been transferred to a
+     * failover cluster. It remains visible but can never be resumed again.
+     */
+    isFailoverSource?: boolean;
+    /**
+     * The source cluster's uuid, set on the FAILOVER (destination) cluster —
+     * the counterpart to isFailoverSource, which is set on the source. Lets
+     * the frontend recognize a cluster resulted from a failover, e.g. to
+     * prompt updating a carried-over BYOM/BYOIDP external endpoint.
+     */
+    failoverSourceClusterId?: string;
+    /**
+     * Stable durable identity shared by both halves of a failover pair. Used to
+     * pair a failover cluster with its source, and to derive the pre-staged
+     * `clone-backup-<stableId>` IAM role ARN.
+     */
+    stableId?: string;
     encryption?: string;
     primaryEncryptionKeyId?: string | null;
     secondaryEncryptionKeyId?: string | null;
@@ -127,8 +147,11 @@ export interface CommonClusterDto {
     rba?: boolean;
     identityBackendChecksEnabled?: boolean;
     multiTenancyEnabled?: boolean;
+    sessionMaxInactiveIntervalMinutes?: number;
+    sessionHeartbeatEnabled?: boolean;
     externalIdpEnabled?: boolean;
     externalIdpConfig?: ExternalIdpConfig;
+    secretSourceProvisioned?: boolean;
     enforceGroups?: boolean;
     playMode?: boolean;
     mcpEnabled?: boolean;

package/dist/dtos/ControlV2.dto.d.ts

@@ -160,12 +160,16 @@ export interface ListClustersV2Params extends CursorParams {
         planNames?: string[];
         /** Restrict to these generation names (`generation.name`). */
         generationNames?: string[];
-        /** Restrict to these region names (resolved via the k8s-context config). */
-        regions?: string[];
         /** Restrict to these cloud providers (resolved via the k8s-context config). */
         providers?: string[];
         /** Exact k8s context uuid. */
         k8sContext?: string;
+        /**
+         * Restrict to these k8s context (datacenter) uuids; the Control clusters
+         * list's multi-select "Datacenter" filter, which matches the context
+         * identity, mirroring the accounts clusters list's "Filter by Datacenter".
+         */
+        k8sContexts?: string[];
         orgId?: string;
         /** Restrict to these owner org uuids (cross-backend sales-plan filters). */
         orgIds?: string[];
@@ -192,10 +196,20 @@ export interface ClusterParameterOptionV2Dto {
     id: string;
     name: string;
 }
+/**
+ * A datacenter (k8s context) option for the clusters list's "Datacenter" filter.
+ * `id` is the context uuid (matched by `filter.k8sContexts`); `region`/`provider`
+ * come from the context config and let the dropdown be grouped by provider and
+ * show the region, mirroring the accounts clusters list.
+ */
+export interface ClusterDatacenterOptionV2Dto extends ClusterParameterOptionV2Dto {
+    region?: string;
+    provider?: string;
+}
 export interface ClusterParametersV2Dto {
     plans: ClusterParameterOptionV2Dto[];
     generations: ClusterParameterOptionV2Dto[];
-    regions: ClusterParameterOptionV2Dto[];
+    datacenters: ClusterDatacenterOptionV2Dto[];
 }
 /**
  * Aggregated cluster distribution counts (GET /v2/clusters/facets), backing

package/dist/dtos/SalesPlan.dto.d.ts

@@ -27,6 +27,17 @@ export interface ClusterLimits {
 export interface Limits extends ClusterLimits {
     maxMembers?: number;
     hotBackup?: boolean;
+    /**
+     * Overrides the operator's default retained count (3) for manual (on-demand)
+     * hot backups (ZeebeCluster spec.backup.retainedCount).
+     */
+    hotBackupManualRetainedCount?: number;
+    /**
+     * Overrides the operator's default retained count (3) for scheduled hot
+     * backups (BackupSchedule spec.successfulBackupsHistoryLimit /
+     * failedBackupsHistoryLimit).
+     */
+    hotBackupScheduledRetainedCount?: number;
     ipWhiteList?: boolean;
     secureConnectivity?: boolean;
     failover?: boolean;

package/dist/dtos/SalesPlan.dto.js

@@ -71,6 +71,20 @@ function allSalesPlanLimits() {
       description: "used to activate the hot backup functionality in organizations. default = not active",
       isClusterBasedLimit: false
     },
+    {
+      key: "hotBackupManualRetainedCount",
+      type: "number",
+      description: "overrides how many manual (on-demand) hot backups the operator retains before deleting the oldest. default = 3",
+      isClusterBasedLimit: false,
+      validate: (input) => Number.isInteger(input) && input >= 1
+    },
+    {
+      key: "hotBackupScheduledRetainedCount",
+      type: "number",
+      description: "overrides how many scheduled hot backups the operator retains before deleting the oldest. default = 3",
+      isClusterBasedLimit: false,
+      validate: (input) => Number.isInteger(input) && input >= 1
+    },
     {
       key: "ipWhiteList",
       type: "boolean",

package/dist/dtos/SalesPlan.dto.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/dtos/SalesPlan.dto.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { ClusterPlanTypesToConfig } from '../types/ClusterPlanTypesToConfig.type.js'\n\nexport interface SalesPlanDto {\n  uuid?: string\n  name: string\n  salesPlanType?: string\n  internal?: boolean\n  clusterPlanTypesToConfig: ClusterPlanTypesToConfig\n  metadata?: SalesPlanMetadata\n  version: number\n  orgs?: number\n}\n\nexport interface ConsumptionDataItem {\n  type: string\n  data: string\n  itemPriceId: string\n}\n\nexport interface SalesPlanMetadata {\n  description: string\n  limits?: Limits\n}\n\nexport interface ClusterLimits {\n  dataRetentionOperate?: number\n  dataRetentionTasklist?: number\n  dataRetentionOptimize?: number\n  unifiedDataRetention?: number\n}\n\nexport interface Limits extends ClusterLimits {\n  maxMembers?: number\n  hotBackup?: boolean\n  ipWhiteList?: boolean\n  secureConnectivity?: boolean\n  failover?: boolean\n  allowedHostnamesForInvites?: string\n  regionWhiteList?: string\n  suppressDropDisks?: boolean\n  maxTeams?: number\n  legacyStreams?: boolean\n  ignoreGracePeriod?: boolean\n  /**\n   * Maximum number of clients allowed per cluster.\n   * Overrides the stage-based default (MAX_CLUSTER_CLIENTS_DEV on dev,\n   * MAX_CLUSTER_CLIENTS_DEFAULT on int/prod).\n   */\n  maxClusterClients?: number\n  /**\n   * Comma-separated list of generation UUIDs that are unlocked for this org.\n   * These generations will be available for cluster creation even if they\n   * are not part of a channel's allowed generations. They are attached to\n   * the Stable channel with classification 'orgUnlocked'.\n   */\n  generationWhiteList?: string\n  /**\n   * When true, users with only the Developer role cannot create clusters in this org.\n   * Users who also hold Member, Admin, Owner, or Operations Engineer are unaffected.\n   */\n  developerNoClusterCreate?: boolean\n}\n\nexport const RETENTION_LIMIT_MINIMUM = {\n  operate: 5,\n  tasklist: 5,\n  optimize: 5,\n  unified: 5,\n}\nexport const RETENTION_LIMIT_MAXIMUM = {\n  operate: 365,\n  tasklist: 90,\n  optimize: 720,\n  unified: 365,\n}\nexport const RETENTION_LIMIT_DEFAULT = {\n  operate: 30,\n  tasklist: 30,\n  optimize: 180,\n  unified: 30,\n}\n\n/**\n * Default maximum number of clients per cluster on development stage.\n */\nexport const MAX_CLUSTER_CLIENTS_DEV = 10\n\n/**\n * Default maximum number of clients per cluster on integration and production stages.\n */\nexport const MAX_CLUSTER_CLIENTS_DEFAULT = 200\n\nexport function deprecatedLimit(key: string): string | undefined {\n  if (['dataRetentionOperate', 'dataRetentionTasklist'].includes(key)) {\n    return 'unifiedDataRetention'\n  }\n  return undefined\n}\n\nexport function allClusterBasedLimits(): {\n  key: string\n  type: 'number' | 'boolean' | 'string'\n  description: string\n  isClusterBasedLimit: boolean\n  validate?: (input: number) => boolean\n}[] {\n  return [\n    {\n      key: 'dataRetentionOperate',\n      type: 'number',\n      isClusterBasedLimit: true,\n      description: `Data retention in days for Operate. default = ${RETENTION_LIMIT_DEFAULT.operate}days. Min = ${RETENTION_LIMIT_MINIMUM.operate}days, Max = ${RETENTION_LIMIT_MAXIMUM.operate}days.`,\n      validate: (input) =>\n        input >= RETENTION_LIMIT_MINIMUM.operate &&\n        input <= RETENTION_LIMIT_MAXIMUM.operate,\n    },\n    {\n      key: 'dataRetentionTasklist',\n      type: 'number',\n      isClusterBasedLimit: true,\n      description: `Data retention in days for Tasklist. default = ${RETENTION_LIMIT_DEFAULT.tasklist}days. Min = ${RETENTION_LIMIT_MINIMUM.tasklist}days, Max = ${RETENTION_LIMIT_MAXIMUM.tasklist}days.`,\n      validate: (input) =>\n        input >= RETENTION_LIMIT_MINIMUM.tasklist &&\n        input <= RETENTION_LIMIT_MAXIMUM.tasklist,\n    },\n    {\n      key: 'dataRetentionOptimize',\n      type: 'number',\n      isClusterBasedLimit: true,\n      description: `Data retention in days for Optimize. default = ${RETENTION_LIMIT_DEFAULT.optimize}days. Min = ${RETENTION_LIMIT_MINIMUM.optimize}days, Max = ${RETENTION_LIMIT_MAXIMUM.optimize}days.`,\n      validate: (input) =>\n        input >= RETENTION_LIMIT_MINIMUM.optimize &&\n        input <= RETENTION_LIMIT_MAXIMUM.optimize,\n    },\n    {\n      key: 'unifiedDataRetention',\n      type: 'number',\n      isClusterBasedLimit: true,\n      description: `Unified data retention in days for Zeebe broker. default = ${RETENTION_LIMIT_DEFAULT.unified}days. Min = ${RETENTION_LIMIT_MINIMUM.unified}days, Max = ${RETENTION_LIMIT_MAXIMUM.unified}days.`,\n      validate: (input) =>\n        input >= RETENTION_LIMIT_MINIMUM.unified &&\n        input <= RETENTION_LIMIT_MAXIMUM.unified,\n    },\n  ]\n}\n\nexport function allSalesPlanLimits(): {\n  key: string\n  type: 'number' | 'boolean' | 'string'\n  description: string\n  isClusterBasedLimit: boolean\n  validate?: (input: number) => boolean\n}[] {\n  return [\n    {\n      key: 'maxMembers',\n      type: 'number',\n      description:\n        'used to limit the amount of collaborators within one organization. default = no limit',\n      isClusterBasedLimit: false,\n      validate: (input) => Number.isInteger(input) && input >= 0,\n    },\n    {\n      key: 'hotBackup',\n      type: 'boolean',\n      description:\n        'used to activate the hot backup functionality in organizations. default = not active',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'ipWhiteList',\n      type: 'boolean',\n      description:\n        'used to activate the ipWhitelist feature in console. default = not active',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'secureConnectivity',\n      type: 'boolean',\n      description:\n        'used to activate the secure connectivity feature in console. default = not active',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'failover',\n      type: 'boolean',\n      description:\n        'used to activate the failover functionality for multi-region clusters. default = not active',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'allowedHostnamesForInvites',\n      type: 'string',\n      description:\n        'allowed hostnames for invites - comma separated, default: every hostname is allowed',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'regionWhiteList',\n      type: 'string',\n      description:\n        'allowed regions - comma separated, default: every region is allowed',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'suppressDropDisks',\n      type: 'boolean',\n      description:\n        'used to not drop disks of sleeping clusters. default = not suppressed',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'maxTeams',\n      type: 'number',\n      description:\n        'used to limit the amount of teams within one super organization. default = 100',\n      isClusterBasedLimit: false,\n      validate: (input) => Number.isInteger(input) && input >= 0,\n    },\n    {\n      key: 'legacyStreams',\n      type: 'boolean',\n      description:\n        'used to allow organizations to use legacy minor streams (e.g. 8.5, 8.6) for cluster creation. default = not allowed',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'ignoreGracePeriod',\n      type: 'boolean',\n      description:\n        'used to bypass the 24h grace period on cluster upgrades after a minor version bump. default = not active (grace period enforced)',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'maxClusterClients',\n      type: 'number',\n      description: `maximum number of clients per cluster. default = ${MAX_CLUSTER_CLIENTS_DEFAULT} (${MAX_CLUSTER_CLIENTS_DEV} on dev). Can be overridden per org for special customers (e.g. OEM).`,\n      isClusterBasedLimit: false,\n      validate: (input) => Number.isInteger(input) && input >= 1,\n    },\n    {\n      key: 'generationWhiteList',\n      type: 'string',\n      description:\n        'unlocked generation UUIDs - comma separated. These generations will be available for cluster creation regardless of channel membership. Attached to the Stable channel.',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'developerNoClusterCreate',\n      type: 'boolean',\n      description:\n        'when enabled, users with only the Developer role cannot create clusters in this org. Admins, Owners, Members, and Operations Engineers are unaffected.',\n      isClusterBasedLimit: false,\n    },\n    ...allClusterBasedLimits(),\n  ]\n}\n\nexport function unusedClusterBasedLimits(limits: ClusterLimits): {\n  key: string\n  type: 'number' | 'boolean' | 'string'\n  description: string\n  isClusterBasedLimit: boolean\n}[] {\n  return allClusterBasedLimits().filter(\n    (current) =>\n      !(\n        Object.keys(limits).includes(current.key) &&\n        (limits as Record<string, unknown>)[current.key] !== null\n      ),\n  )\n}\n\nexport function unusedSalesPlanLimits(limits: Limits): {\n  key: string\n  type: 'number' | 'boolean' | 'string'\n  description: string\n  isClusterBasedLimit: boolean\n}[] {\n  return allSalesPlanLimits().filter(\n    (current) =>\n      !(\n        Object.keys(limits).includes(current.key) &&\n        (limits as Record<string, unknown>)[current.key] !== null\n      ),\n  )\n}\n"],
-  "mappings": "AAqEO,MAAM,0BAA0B;AAAA,EACrC,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AACX;AACO,MAAM,0BAA0B;AAAA,EACrC,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AACX;AACO,MAAM,0BAA0B;AAAA,EACrC,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AACX;AAKO,MAAM,0BAA0B;AAKhC,MAAM,8BAA8B;AAEpC,SAAS,gBAAgB,KAAiC;AAC/D,MAAI,CAAC,wBAAwB,uBAAuB,EAAE,SAAS,GAAG,GAAG;AACnE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,wBAMZ;AACF,SAAO;AAAA,IACL;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,qBAAqB;AAAA,MACrB,aAAa,iDAAiD,wBAAwB,OAAO,eAAe,wBAAwB,OAAO,eAAe,wBAAwB,OAAO;AAAA,MACzL,UAAU,CAAC,UACT,SAAS,wBAAwB,WACjC,SAAS,wBAAwB;AAAA,IACrC;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,qBAAqB;AAAA,MACrB,aAAa,kDAAkD,wBAAwB,QAAQ,eAAe,wBAAwB,QAAQ,eAAe,wBAAwB,QAAQ;AAAA,MAC7L,UAAU,CAAC,UACT,SAAS,wBAAwB,YACjC,SAAS,wBAAwB;AAAA,IACrC;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,qBAAqB;AAAA,MACrB,aAAa,kDAAkD,wBAAwB,QAAQ,eAAe,wBAAwB,QAAQ,eAAe,wBAAwB,QAAQ;AAAA,MAC7L,UAAU,CAAC,UACT,SAAS,wBAAwB,YACjC,SAAS,wBAAwB;AAAA,IACrC;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,qBAAqB;AAAA,MACrB,aAAa,8DAA8D,wBAAwB,OAAO,eAAe,wBAAwB,OAAO,eAAe,wBAAwB,OAAO;AAAA,MACtM,UAAU,CAAC,UACT,SAAS,wBAAwB,WACjC,SAAS,wBAAwB;AAAA,IACrC;AAAA,EACF;AACF;AAEO,SAAS,qBAMZ;AACF,SAAO;AAAA,IACL;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,MACrB,UAAU,CAAC,UAAU,OAAO,UAAU,KAAK,KAAK,SAAS;AAAA,IAC3D;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,MACrB,UAAU,CAAC,UAAU,OAAO,UAAU,KAAK,KAAK,SAAS;AAAA,IAC3D;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aAAa,oDAAoD,2BAA2B,KAAK,uBAAuB;AAAA,MACxH,qBAAqB;AAAA,MACrB,UAAU,CAAC,UAAU,OAAO,UAAU,KAAK,KAAK,SAAS;AAAA,IAC3D;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA,GAAG,sBAAsB;AAAA,EAC3B;AACF;AAEO,SAAS,yBAAyB,QAKrC;AACF,SAAO,sBAAsB,EAAE;AAAA,IAC7B,CAAC,YACC,EACE,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ,GAAG,KACvC,OAAmC,QAAQ,GAAG,MAAM;AAAA,EAE3D;AACF;AAEO,SAAS,sBAAsB,QAKlC;AACF,SAAO,mBAAmB,EAAE;AAAA,IAC1B,CAAC,YACC,EACE,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ,GAAG,KACvC,OAAmC,QAAQ,GAAG,MAAM;AAAA,EAE3D;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { ClusterPlanTypesToConfig } from '../types/ClusterPlanTypesToConfig.type.js'\n\nexport interface SalesPlanDto {\n  uuid?: string\n  name: string\n  salesPlanType?: string\n  internal?: boolean\n  clusterPlanTypesToConfig: ClusterPlanTypesToConfig\n  metadata?: SalesPlanMetadata\n  version: number\n  orgs?: number\n}\n\nexport interface ConsumptionDataItem {\n  type: string\n  data: string\n  itemPriceId: string\n}\n\nexport interface SalesPlanMetadata {\n  description: string\n  limits?: Limits\n}\n\nexport interface ClusterLimits {\n  dataRetentionOperate?: number\n  dataRetentionTasklist?: number\n  dataRetentionOptimize?: number\n  unifiedDataRetention?: number\n}\n\nexport interface Limits extends ClusterLimits {\n  maxMembers?: number\n  hotBackup?: boolean\n  /**\n   * Overrides the operator's default retained count (3) for manual (on-demand)\n   * hot backups (ZeebeCluster spec.backup.retainedCount).\n   */\n  hotBackupManualRetainedCount?: number\n  /**\n   * Overrides the operator's default retained count (3) for scheduled hot\n   * backups (BackupSchedule spec.successfulBackupsHistoryLimit /\n   * failedBackupsHistoryLimit).\n   */\n  hotBackupScheduledRetainedCount?: number\n  ipWhiteList?: boolean\n  secureConnectivity?: boolean\n  failover?: boolean\n  allowedHostnamesForInvites?: string\n  regionWhiteList?: string\n  suppressDropDisks?: boolean\n  maxTeams?: number\n  legacyStreams?: boolean\n  ignoreGracePeriod?: boolean\n  /**\n   * Maximum number of clients allowed per cluster.\n   * Overrides the stage-based default (MAX_CLUSTER_CLIENTS_DEV on dev,\n   * MAX_CLUSTER_CLIENTS_DEFAULT on int/prod).\n   */\n  maxClusterClients?: number\n  /**\n   * Comma-separated list of generation UUIDs that are unlocked for this org.\n   * These generations will be available for cluster creation even if they\n   * are not part of a channel's allowed generations. They are attached to\n   * the Stable channel with classification 'orgUnlocked'.\n   */\n  generationWhiteList?: string\n  /**\n   * When true, users with only the Developer role cannot create clusters in this org.\n   * Users who also hold Member, Admin, Owner, or Operations Engineer are unaffected.\n   */\n  developerNoClusterCreate?: boolean\n}\n\nexport const RETENTION_LIMIT_MINIMUM = {\n  operate: 5,\n  tasklist: 5,\n  optimize: 5,\n  unified: 5,\n}\nexport const RETENTION_LIMIT_MAXIMUM = {\n  operate: 365,\n  tasklist: 90,\n  optimize: 720,\n  unified: 365,\n}\nexport const RETENTION_LIMIT_DEFAULT = {\n  operate: 30,\n  tasklist: 30,\n  optimize: 180,\n  unified: 30,\n}\n\n/**\n * Default maximum number of clients per cluster on development stage.\n */\nexport const MAX_CLUSTER_CLIENTS_DEV = 10\n\n/**\n * Default maximum number of clients per cluster on integration and production stages.\n */\nexport const MAX_CLUSTER_CLIENTS_DEFAULT = 200\n\nexport function deprecatedLimit(key: string): string | undefined {\n  if (['dataRetentionOperate', 'dataRetentionTasklist'].includes(key)) {\n    return 'unifiedDataRetention'\n  }\n  return undefined\n}\n\nexport function allClusterBasedLimits(): {\n  key: string\n  type: 'number' | 'boolean' | 'string'\n  description: string\n  isClusterBasedLimit: boolean\n  validate?: (input: number) => boolean\n}[] {\n  return [\n    {\n      key: 'dataRetentionOperate',\n      type: 'number',\n      isClusterBasedLimit: true,\n      description: `Data retention in days for Operate. default = ${RETENTION_LIMIT_DEFAULT.operate}days. Min = ${RETENTION_LIMIT_MINIMUM.operate}days, Max = ${RETENTION_LIMIT_MAXIMUM.operate}days.`,\n      validate: (input) =>\n        input >= RETENTION_LIMIT_MINIMUM.operate &&\n        input <= RETENTION_LIMIT_MAXIMUM.operate,\n    },\n    {\n      key: 'dataRetentionTasklist',\n      type: 'number',\n      isClusterBasedLimit: true,\n      description: `Data retention in days for Tasklist. default = ${RETENTION_LIMIT_DEFAULT.tasklist}days. Min = ${RETENTION_LIMIT_MINIMUM.tasklist}days, Max = ${RETENTION_LIMIT_MAXIMUM.tasklist}days.`,\n      validate: (input) =>\n        input >= RETENTION_LIMIT_MINIMUM.tasklist &&\n        input <= RETENTION_LIMIT_MAXIMUM.tasklist,\n    },\n    {\n      key: 'dataRetentionOptimize',\n      type: 'number',\n      isClusterBasedLimit: true,\n      description: `Data retention in days for Optimize. default = ${RETENTION_LIMIT_DEFAULT.optimize}days. Min = ${RETENTION_LIMIT_MINIMUM.optimize}days, Max = ${RETENTION_LIMIT_MAXIMUM.optimize}days.`,\n      validate: (input) =>\n        input >= RETENTION_LIMIT_MINIMUM.optimize &&\n        input <= RETENTION_LIMIT_MAXIMUM.optimize,\n    },\n    {\n      key: 'unifiedDataRetention',\n      type: 'number',\n      isClusterBasedLimit: true,\n      description: `Unified data retention in days for Zeebe broker. default = ${RETENTION_LIMIT_DEFAULT.unified}days. Min = ${RETENTION_LIMIT_MINIMUM.unified}days, Max = ${RETENTION_LIMIT_MAXIMUM.unified}days.`,\n      validate: (input) =>\n        input >= RETENTION_LIMIT_MINIMUM.unified &&\n        input <= RETENTION_LIMIT_MAXIMUM.unified,\n    },\n  ]\n}\n\nexport function allSalesPlanLimits(): {\n  key: string\n  type: 'number' | 'boolean' | 'string'\n  description: string\n  isClusterBasedLimit: boolean\n  validate?: (input: number) => boolean\n}[] {\n  return [\n    {\n      key: 'maxMembers',\n      type: 'number',\n      description:\n        'used to limit the amount of collaborators within one organization. default = no limit',\n      isClusterBasedLimit: false,\n      validate: (input) => Number.isInteger(input) && input >= 0,\n    },\n    {\n      key: 'hotBackup',\n      type: 'boolean',\n      description:\n        'used to activate the hot backup functionality in organizations. default = not active',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'hotBackupManualRetainedCount',\n      type: 'number',\n      description:\n        'overrides how many manual (on-demand) hot backups the operator retains before deleting the oldest. default = 3',\n      isClusterBasedLimit: false,\n      validate: (input) => Number.isInteger(input) && input >= 1,\n    },\n    {\n      key: 'hotBackupScheduledRetainedCount',\n      type: 'number',\n      description:\n        'overrides how many scheduled hot backups the operator retains before deleting the oldest. default = 3',\n      isClusterBasedLimit: false,\n      validate: (input) => Number.isInteger(input) && input >= 1,\n    },\n    {\n      key: 'ipWhiteList',\n      type: 'boolean',\n      description:\n        'used to activate the ipWhitelist feature in console. default = not active',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'secureConnectivity',\n      type: 'boolean',\n      description:\n        'used to activate the secure connectivity feature in console. default = not active',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'failover',\n      type: 'boolean',\n      description:\n        'used to activate the failover functionality for multi-region clusters. default = not active',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'allowedHostnamesForInvites',\n      type: 'string',\n      description:\n        'allowed hostnames for invites - comma separated, default: every hostname is allowed',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'regionWhiteList',\n      type: 'string',\n      description:\n        'allowed regions - comma separated, default: every region is allowed',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'suppressDropDisks',\n      type: 'boolean',\n      description:\n        'used to not drop disks of sleeping clusters. default = not suppressed',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'maxTeams',\n      type: 'number',\n      description:\n        'used to limit the amount of teams within one super organization. default = 100',\n      isClusterBasedLimit: false,\n      validate: (input) => Number.isInteger(input) && input >= 0,\n    },\n    {\n      key: 'legacyStreams',\n      type: 'boolean',\n      description:\n        'used to allow organizations to use legacy minor streams (e.g. 8.5, 8.6) for cluster creation. default = not allowed',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'ignoreGracePeriod',\n      type: 'boolean',\n      description:\n        'used to bypass the 24h grace period on cluster upgrades after a minor version bump. default = not active (grace period enforced)',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'maxClusterClients',\n      type: 'number',\n      description: `maximum number of clients per cluster. default = ${MAX_CLUSTER_CLIENTS_DEFAULT} (${MAX_CLUSTER_CLIENTS_DEV} on dev). Can be overridden per org for special customers (e.g. OEM).`,\n      isClusterBasedLimit: false,\n      validate: (input) => Number.isInteger(input) && input >= 1,\n    },\n    {\n      key: 'generationWhiteList',\n      type: 'string',\n      description:\n        'unlocked generation UUIDs - comma separated. These generations will be available for cluster creation regardless of channel membership. Attached to the Stable channel.',\n      isClusterBasedLimit: false,\n    },\n    {\n      key: 'developerNoClusterCreate',\n      type: 'boolean',\n      description:\n        'when enabled, users with only the Developer role cannot create clusters in this org. Admins, Owners, Members, and Operations Engineers are unaffected.',\n      isClusterBasedLimit: false,\n    },\n    ...allClusterBasedLimits(),\n  ]\n}\n\nexport function unusedClusterBasedLimits(limits: ClusterLimits): {\n  key: string\n  type: 'number' | 'boolean' | 'string'\n  description: string\n  isClusterBasedLimit: boolean\n}[] {\n  return allClusterBasedLimits().filter(\n    (current) =>\n      !(\n        Object.keys(limits).includes(current.key) &&\n        (limits as Record<string, unknown>)[current.key] !== null\n      ),\n  )\n}\n\nexport function unusedSalesPlanLimits(limits: Limits): {\n  key: string\n  type: 'number' | 'boolean' | 'string'\n  description: string\n  isClusterBasedLimit: boolean\n}[] {\n  return allSalesPlanLimits().filter(\n    (current) =>\n      !(\n        Object.keys(limits).includes(current.key) &&\n        (limits as Record<string, unknown>)[current.key] !== null\n      ),\n  )\n}\n"],
+  "mappings": "AAgFO,MAAM,0BAA0B;AAAA,EACrC,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AACX;AACO,MAAM,0BAA0B;AAAA,EACrC,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AACX;AACO,MAAM,0BAA0B;AAAA,EACrC,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AACX;AAKO,MAAM,0BAA0B;AAKhC,MAAM,8BAA8B;AAEpC,SAAS,gBAAgB,KAAiC;AAC/D,MAAI,CAAC,wBAAwB,uBAAuB,EAAE,SAAS,GAAG,GAAG;AACnE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,wBAMZ;AACF,SAAO;AAAA,IACL;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,qBAAqB;AAAA,MACrB,aAAa,iDAAiD,wBAAwB,OAAO,eAAe,wBAAwB,OAAO,eAAe,wBAAwB,OAAO;AAAA,MACzL,UAAU,CAAC,UACT,SAAS,wBAAwB,WACjC,SAAS,wBAAwB;AAAA,IACrC;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,qBAAqB;AAAA,MACrB,aAAa,kDAAkD,wBAAwB,QAAQ,eAAe,wBAAwB,QAAQ,eAAe,wBAAwB,QAAQ;AAAA,MAC7L,UAAU,CAAC,UACT,SAAS,wBAAwB,YACjC,SAAS,wBAAwB;AAAA,IACrC;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,qBAAqB;AAAA,MACrB,aAAa,kDAAkD,wBAAwB,QAAQ,eAAe,wBAAwB,QAAQ,eAAe,wBAAwB,QAAQ;AAAA,MAC7L,UAAU,CAAC,UACT,SAAS,wBAAwB,YACjC,SAAS,wBAAwB;AAAA,IACrC;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,qBAAqB;AAAA,MACrB,aAAa,8DAA8D,wBAAwB,OAAO,eAAe,wBAAwB,OAAO,eAAe,wBAAwB,OAAO;AAAA,MACtM,UAAU,CAAC,UACT,SAAS,wBAAwB,WACjC,SAAS,wBAAwB;AAAA,IACrC;AAAA,EACF;AACF;AAEO,SAAS,qBAMZ;AACF,SAAO;AAAA,IACL;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,MACrB,UAAU,CAAC,UAAU,OAAO,UAAU,KAAK,KAAK,SAAS;AAAA,IAC3D;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,MACrB,UAAU,CAAC,UAAU,OAAO,UAAU,KAAK,KAAK,SAAS;AAAA,IAC3D;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,MACrB,UAAU,CAAC,UAAU,OAAO,UAAU,KAAK,KAAK,SAAS;AAAA,IAC3D;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,MACrB,UAAU,CAAC,UAAU,OAAO,UAAU,KAAK,KAAK,SAAS;AAAA,IAC3D;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aAAa,oDAAoD,2BAA2B,KAAK,uBAAuB;AAAA,MACxH,qBAAqB;AAAA,MACrB,UAAU,CAAC,UAAU,OAAO,UAAU,KAAK,KAAK,SAAS;AAAA,IAC3D;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,qBAAqB;AAAA,IACvB;AAAA,IACA,GAAG,sBAAsB;AAAA,EAC3B;AACF;AAEO,SAAS,yBAAyB,QAKrC;AACF,SAAO,sBAAsB,EAAE;AAAA,IAC7B,CAAC,YACC,EACE,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ,GAAG,KACvC,OAAmC,QAAQ,GAAG,MAAM;AAAA,EAE3D;AACF;AAEO,SAAS,sBAAsB,QAKlC;AACF,SAAO,mBAAmB,EAAE;AAAA,IAC1B,CAAC,YACC,EACE,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ,GAAG,KACvC,OAAmC,QAAQ,GAAG,MAAM;AAAA,EAE3D;AACF;",
   "names": []
 }

package/dist/enums/AuditEntity.enum.d.ts

@@ -30,6 +30,8 @@ export declare enum AuditEntityAttribute {
     CLUSTER_SWAGGER = "Cluster Swagger",
     CLUSTER_BUSINESS_ID_UNIQUENESS = "Business ID Uniqueness",
     CLUSTER_MULTI_TENANCY = "Multi-tenancy",
+    CLUSTER_SESSION_MAX_INACTIVE_INTERVAL = "Session idle timeout",
+    CLUSTER_SESSION_HEARTBEAT = "Session heartbeat",
     CLUSTER_EXTERNAL_IDP = "External identity provider",
     CLUSTER_ENABLE_LOW_LATENCY = "Enable low latency",
     CLUSTER_AUTOUPDATE = "Auto Update",

package/dist/enums/AuditEntity.enum.js

@@ -31,6 +31,8 @@ var AuditEntityAttribute = /* @__PURE__ */ ((AuditEntityAttribute2) => {
   AuditEntityAttribute2["CLUSTER_SWAGGER"] = "Cluster Swagger";
   AuditEntityAttribute2["CLUSTER_BUSINESS_ID_UNIQUENESS"] = "Business ID Uniqueness";
   AuditEntityAttribute2["CLUSTER_MULTI_TENANCY"] = "Multi-tenancy";
+  AuditEntityAttribute2["CLUSTER_SESSION_MAX_INACTIVE_INTERVAL"] = "Session idle timeout";
+  AuditEntityAttribute2["CLUSTER_SESSION_HEARTBEAT"] = "Session heartbeat";
   AuditEntityAttribute2["CLUSTER_EXTERNAL_IDP"] = "External identity provider";
   AuditEntityAttribute2["CLUSTER_ENABLE_LOW_LATENCY"] = "Enable low latency";
   AuditEntityAttribute2["CLUSTER_AUTOUPDATE"] = "Auto Update";

package/dist/enums/AuditEntity.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/AuditEntity.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum AuditEntity {\n  CLUSTER = 'Cluster',\n  CLIENT = 'Client',\n  ALERT_SUBSCRIPTION = 'Alert Subscription',\n  API_CLIENT = 'API Client',\n  SECURE_CONNECTIVITY_CRD = 'Private networking',\n  BYOM_CLIENT = 'External Monitoring Client',\n  BYOM_CRD = 'External Monitoring',\n  INVITATION = 'Invitation',\n  MEMBER = 'Member',\n  ORGANIZATION = 'Organization',\n  SALES_PLAN = 'SalesPlan',\n  CLUSTER_PLAN = 'ClusterPlan',\n  GENERATION = 'Generation',\n  BILLING = 'Billing',\n  USAGE_ALERT = 'Usage Alert',\n  ACCEPT_BETA_TERMS = 'Accept Alpha terms',\n  TOGGLE_BETA_FEATURE = 'Toggle Alpha feature',\n  CONNECTOR_SECRET = 'Connector Secret',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n}\n\nexport enum AuditEntityAttribute {\n  CLUSTER_CLUSTER_PLAN = 'ClusterPlan',\n  CLUSTER_GENERATION = 'Generation',\n  CLUSTER_NAME = 'Name',\n  CLUSTER_RBA = 'Resource Based Authorizations',\n  CLUSTER_ENFORCE_GROUPS = 'Enforce Group Management',\n  CLUSTER_PLAYMODE = 'Cluster Play Mode',\n  CLUSTER_MCP_ENABLED = 'MCP Support',\n  CLUSTER_SWAGGER = 'Cluster Swagger',\n  CLUSTER_BUSINESS_ID_UNIQUENESS = 'Business ID Uniqueness',\n  CLUSTER_MULTI_TENANCY = 'Multi-tenancy',\n  CLUSTER_EXTERNAL_IDP = 'External identity provider',\n  CLUSTER_ENABLE_LOW_LATENCY = 'Enable low latency',\n  CLUSTER_AUTOUPDATE = 'Auto Update',\n  CLUSTER_OWNER = 'Owner',\n  CLUSTER_STATUS = 'Status',\n  CLUSTER_TASKLIST_V2_ENABLED = 'Taklist V2 Enabled',\n  CLUSTER_AUDIT_LOG = 'Audit Log',\n  INVITATION_ROLE = 'Role',\n  ORGANIZATION_NAME = 'Name',\n  SALES_PLAN = 'Plan',\n  BILLING_RESERVATION = 'Reservation',\n  BILLING_GENERAL_USERS = 'GeneralUsers', // paid cc legaly - only kept for audit logs compatibility\n  MEMBER_ROLE = 'Role',\n  USAGE_ALERT_THRESHOLD = 'Threshold',\n  USAGE_ALERT_STATUS = 'Status',\n  CLUSTER_AUDIT_LOGS = 'Audit Logging',\n  LLM_BUDGET = 'LLM Budget',\n  LLM_KEY_BLOCKED = 'LLM Key Blocked',\n  ORGANIZATION_LIMIT = 'Limit',\n  CLUSTER_MODIFICATION = 'Modification',\n  ORGANIZATION_TRIAL_EXPIRES_AT = 'Trial Expiration Date',\n}\n"],
-  "mappings": "AAOO,IAAK,cAAL,kBAAKA,iBAAL;AACL,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,wBAAqB;AACrB,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,6BAA0B;AAC1B,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,uBAAoB;AACpB,EAAAA,aAAA,yBAAsB;AACtB,EAAAA,aAAA,sBAAmB;AACnB,EAAAA,aAAA,0BAAuB;AAnBb,SAAAA;AAAA,GAAA;AAsBL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kBAAe;AACf,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,sBAAmB;AACnB,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,oCAAiC;AACjC,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,mBAAgB;AAChB,EAAAA,sBAAA,oBAAiB;AACjB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,mCAAgC;AA/BtB,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum AuditEntity {\n  CLUSTER = 'Cluster',\n  CLIENT = 'Client',\n  ALERT_SUBSCRIPTION = 'Alert Subscription',\n  API_CLIENT = 'API Client',\n  SECURE_CONNECTIVITY_CRD = 'Private networking',\n  BYOM_CLIENT = 'External Monitoring Client',\n  BYOM_CRD = 'External Monitoring',\n  INVITATION = 'Invitation',\n  MEMBER = 'Member',\n  ORGANIZATION = 'Organization',\n  SALES_PLAN = 'SalesPlan',\n  CLUSTER_PLAN = 'ClusterPlan',\n  GENERATION = 'Generation',\n  BILLING = 'Billing',\n  USAGE_ALERT = 'Usage Alert',\n  ACCEPT_BETA_TERMS = 'Accept Alpha terms',\n  TOGGLE_BETA_FEATURE = 'Toggle Alpha feature',\n  CONNECTOR_SECRET = 'Connector Secret',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n}\n\nexport enum AuditEntityAttribute {\n  CLUSTER_CLUSTER_PLAN = 'ClusterPlan',\n  CLUSTER_GENERATION = 'Generation',\n  CLUSTER_NAME = 'Name',\n  CLUSTER_RBA = 'Resource Based Authorizations',\n  CLUSTER_ENFORCE_GROUPS = 'Enforce Group Management',\n  CLUSTER_PLAYMODE = 'Cluster Play Mode',\n  CLUSTER_MCP_ENABLED = 'MCP Support',\n  CLUSTER_SWAGGER = 'Cluster Swagger',\n  CLUSTER_BUSINESS_ID_UNIQUENESS = 'Business ID Uniqueness',\n  CLUSTER_MULTI_TENANCY = 'Multi-tenancy',\n  CLUSTER_SESSION_MAX_INACTIVE_INTERVAL = 'Session idle timeout',\n  CLUSTER_SESSION_HEARTBEAT = 'Session heartbeat',\n  CLUSTER_EXTERNAL_IDP = 'External identity provider',\n  CLUSTER_ENABLE_LOW_LATENCY = 'Enable low latency',\n  CLUSTER_AUTOUPDATE = 'Auto Update',\n  CLUSTER_OWNER = 'Owner',\n  CLUSTER_STATUS = 'Status',\n  CLUSTER_TASKLIST_V2_ENABLED = 'Taklist V2 Enabled',\n  CLUSTER_AUDIT_LOG = 'Audit Log',\n  INVITATION_ROLE = 'Role',\n  ORGANIZATION_NAME = 'Name',\n  SALES_PLAN = 'Plan',\n  BILLING_RESERVATION = 'Reservation',\n  BILLING_GENERAL_USERS = 'GeneralUsers', // paid cc legaly - only kept for audit logs compatibility\n  MEMBER_ROLE = 'Role',\n  USAGE_ALERT_THRESHOLD = 'Threshold',\n  USAGE_ALERT_STATUS = 'Status',\n  CLUSTER_AUDIT_LOGS = 'Audit Logging',\n  LLM_BUDGET = 'LLM Budget',\n  LLM_KEY_BLOCKED = 'LLM Key Blocked',\n  ORGANIZATION_LIMIT = 'Limit',\n  CLUSTER_MODIFICATION = 'Modification',\n  ORGANIZATION_TRIAL_EXPIRES_AT = 'Trial Expiration Date',\n}\n"],
+  "mappings": "AAOO,IAAK,cAAL,kBAAKA,iBAAL;AACL,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,wBAAqB;AACrB,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,6BAA0B;AAC1B,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,uBAAoB;AACpB,EAAAA,aAAA,yBAAsB;AACtB,EAAAA,aAAA,sBAAmB;AACnB,EAAAA,aAAA,0BAAuB;AAnBb,SAAAA;AAAA,GAAA;AAsBL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kBAAe;AACf,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,sBAAmB;AACnB,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,oCAAiC;AACjC,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,2CAAwC;AACxC,EAAAA,sBAAA,+BAA4B;AAC5B,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,mBAAgB;AAChB,EAAAA,sBAAA,oBAAiB;AACjB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,mCAAgC;AAjCtB,SAAAA;AAAA,GAAA;",
   "names": ["AuditEntity", "AuditEntityAttribute"]
 }

package/dist/enums/ConsoleApiClientPermission.enum.d.ts

@@ -25,6 +25,9 @@ export declare enum ConsoleAPIClientPermission {
     CreateHotBackups = "CreateHotBackups",
     RestoreHotBackup = "RestoreHotBackup",
     GetHotBackupRestore = "GetHotBackupRestore",
+    GetHotBackupSchedule = "GetHotBackupSchedule",
+    UpdateHotBackupSchedule = "UpdateHotBackupSchedule",
+    DeleteHotBackupSchedule = "DeleteHotBackupSchedule",
     DownloadActivity = "DownloadActivity",
     GetByomClient = "GetByomClient",
     ActivateByom = "ActivateByom",
@@ -34,5 +37,7 @@ export declare enum ConsoleAPIClientPermission {
     DeleteByomClient = "DeleteByomClient",
     GetSecureConnectivity = "GetSecureConnectivity",
     ActivateSecureConnectivity = "ActivateSecureConnectivity",
-    DeactivateSecureConnectivity = "DeactivateSecureConnectivity"
+    DeactivateSecureConnectivity = "DeactivateSecureConnectivity",
+    /** Experimental — not enabled for all organizations. */
+    CreateFailover = "CreateFailover"
 }

package/dist/enums/ConsoleApiClientPermission.enum.js

@@ -25,6 +25,9 @@ var ConsoleAPIClientPermission = /* @__PURE__ */ ((ConsoleAPIClientPermission2)
   ConsoleAPIClientPermission2["CreateHotBackups"] = "CreateHotBackups";
   ConsoleAPIClientPermission2["RestoreHotBackup"] = "RestoreHotBackup";
   ConsoleAPIClientPermission2["GetHotBackupRestore"] = "GetHotBackupRestore";
+  ConsoleAPIClientPermission2["GetHotBackupSchedule"] = "GetHotBackupSchedule";
+  ConsoleAPIClientPermission2["UpdateHotBackupSchedule"] = "UpdateHotBackupSchedule";
+  ConsoleAPIClientPermission2["DeleteHotBackupSchedule"] = "DeleteHotBackupSchedule";
   ConsoleAPIClientPermission2["DownloadActivity"] = "DownloadActivity";
   ConsoleAPIClientPermission2["GetByomClient"] = "GetByomClient";
   ConsoleAPIClientPermission2["ActivateByom"] = "ActivateByom";
@@ -35,6 +38,7 @@ var ConsoleAPIClientPermission = /* @__PURE__ */ ((ConsoleAPIClientPermission2)
   ConsoleAPIClientPermission2["GetSecureConnectivity"] = "GetSecureConnectivity";
   ConsoleAPIClientPermission2["ActivateSecureConnectivity"] = "ActivateSecureConnectivity";
   ConsoleAPIClientPermission2["DeactivateSecureConnectivity"] = "DeactivateSecureConnectivity";
+  ConsoleAPIClientPermission2["CreateFailover"] = "CreateFailover";
   return ConsoleAPIClientPermission2;
 })(ConsoleAPIClientPermission || {});
 export {

package/dist/enums/ConsoleApiClientPermission.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/ConsoleApiClientPermission.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum ConsoleAPIClientPermission {\n  CreateCluster = 'CreateCluster',\n  DeleteCluster = 'DeleteCluster',\n  GetCluster = 'GetCluster',\n  UpdateCluster = 'UpdateCluster',\n  UpdateClusterEncryption = 'UpdateClusterEncryption',\n  CreateZeebeClient = 'CreateZeebeClient',\n  DeleteZeebeClient = 'DeleteZeebeClient',\n  GetZeebeClient = 'GetZeebeClient',\n  CreateModel = 'CreateModel',\n  UpdateModel = 'UpdateModel',\n  DeleteModel = 'DeleteModel',\n  GetModel = 'GetModel',\n\n  GetWhitelists = 'GetWhitelists',\n  UpdateWhitelists = 'UpdateWhitelists',\n\n  GetSecrets = 'GetSecrets',\n  DeleteSecrets = 'DeleteSecrets',\n  CreateSecrets = 'CreateSecrets',\n  UpdateSecrets = 'UpdateSecrets',\n\n  GetMembers = 'GetMembers',\n  UpdateMembers = 'UpdateMembers',\n  DeleteMembers = 'DeleteMembers',\n  GetHotBackups = 'GetHotBackups',\n  DeleteHotBackups = 'DeleteHotBackups',\n  CreateHotBackups = 'CreateHotBackups',\n  RestoreHotBackup = 'RestoreHotBackup',\n  GetHotBackupRestore = 'GetHotBackupRestore',\n  DownloadActivity = 'DownloadActivity',\n  GetByomClient = 'GetByomClient',\n  ActivateByom = 'ActivateByom',\n  DeactivateByom = 'DeactivateByom',\n  CreateByomClient = 'CreateByomClient',\n  UpdateByomClient = 'UpdateByomClient',\n  DeleteByomClient = 'DeleteByomClient',\n  GetSecureConnectivity = 'GetSecureConnectivity',\n  ActivateSecureConnectivity = 'ActivateSecureConnectivity',\n  DeactivateSecureConnectivity = 'DeactivateSecureConnectivity',\n}\n"],
-  "mappings": "AAOO,IAAK,6BAAL,kBAAKA,gCAAL;AACL,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,cAAW;AAEX,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AAEnB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAEhB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,kBAAe;AACf,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,2BAAwB;AACxB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,kCAA+B;AAvCrB,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum ConsoleAPIClientPermission {\n  CreateCluster = 'CreateCluster',\n  DeleteCluster = 'DeleteCluster',\n  GetCluster = 'GetCluster',\n  UpdateCluster = 'UpdateCluster',\n  UpdateClusterEncryption = 'UpdateClusterEncryption',\n  CreateZeebeClient = 'CreateZeebeClient',\n  DeleteZeebeClient = 'DeleteZeebeClient',\n  GetZeebeClient = 'GetZeebeClient',\n  CreateModel = 'CreateModel',\n  UpdateModel = 'UpdateModel',\n  DeleteModel = 'DeleteModel',\n  GetModel = 'GetModel',\n\n  GetWhitelists = 'GetWhitelists',\n  UpdateWhitelists = 'UpdateWhitelists',\n\n  GetSecrets = 'GetSecrets',\n  DeleteSecrets = 'DeleteSecrets',\n  CreateSecrets = 'CreateSecrets',\n  UpdateSecrets = 'UpdateSecrets',\n\n  GetMembers = 'GetMembers',\n  UpdateMembers = 'UpdateMembers',\n  DeleteMembers = 'DeleteMembers',\n  GetHotBackups = 'GetHotBackups',\n  DeleteHotBackups = 'DeleteHotBackups',\n  CreateHotBackups = 'CreateHotBackups',\n  RestoreHotBackup = 'RestoreHotBackup',\n  GetHotBackupRestore = 'GetHotBackupRestore',\n  GetHotBackupSchedule = 'GetHotBackupSchedule',\n  UpdateHotBackupSchedule = 'UpdateHotBackupSchedule',\n  DeleteHotBackupSchedule = 'DeleteHotBackupSchedule',\n  DownloadActivity = 'DownloadActivity',\n  GetByomClient = 'GetByomClient',\n  ActivateByom = 'ActivateByom',\n  DeactivateByom = 'DeactivateByom',\n  CreateByomClient = 'CreateByomClient',\n  UpdateByomClient = 'UpdateByomClient',\n  DeleteByomClient = 'DeleteByomClient',\n  GetSecureConnectivity = 'GetSecureConnectivity',\n  ActivateSecureConnectivity = 'ActivateSecureConnectivity',\n  DeactivateSecureConnectivity = 'DeactivateSecureConnectivity',\n\n  /** Experimental \u2014 not enabled for all organizations. */\n  CreateFailover = 'CreateFailover',\n}\n"],
+  "mappings": "AAOO,IAAK,6BAAL,kBAAKA,gCAAL;AACL,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,cAAW;AAEX,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AAEnB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAEhB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,0BAAuB;AACvB,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,kBAAe;AACf,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,2BAAwB;AACxB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,kCAA+B;AAG/B,EAAAA,4BAAA,oBAAiB;AA7CP,SAAAA;AAAA,GAAA;",
   "names": ["ConsoleAPIClientPermission"]
 }

package/dist/enums/ErrorType.enum.d.ts

@@ -6,6 +6,7 @@ export declare enum ErrorType {
     Conflict = 409,
     PreconditionFailed = 412,
     IAmATeapot = 418,
+    UnprocessableEntity = 422,
     TooManyRequests = 429,
     Internal = 500,
     NotImplemented = 501,