@camunda/ccma-shared-types 0.5.1 → 0.6.0

package/dist/constants/misc.const.d.ts

@@ -23,3 +23,78 @@ export declare const MAX_HARDWARE_PACKAGE_COUNT = 4;
  * where the exporter starts honoring the filters) — this is the product rollout gate.
  */
 export declare const OPTIMIZE_FILTERING_MIN_VERSION = "8.10.0-alpha1";
+/**
+ * Minimum cluster (zeebe) version at which the operator understands the new
+ * cluster-secret CRDs (camunda-operator#5760) — SecretSource and SecretSync exist and
+ * reconcile. Governs *provisioning the CRs*, nothing about which store they point at:
+ * SecretSource provisioning (K8sClusterController.ensureSecretSource) and BYOIDP's
+ * oidcProviders emission, which needs a SecretSource to deliver its clientSecretRef
+ * (ByoidpSecretDeliveryController.deliverSecret refuses without one).
+ *
+ * BYOIDP is live up to prod, so this floor must stay at the generation BYOIDP
+ * shipped on. Raising it would strand BYOIDP on every alpha below the new value.
+ */
+export declare const SECRET_SOURCE_MIN_VERSION = "8.10.0-alpha3";
+/**
+ * Minimum cluster (zeebe) version for BYOIDP (external identity provider, #3190).
+ * Shared by the c4 settings tile gate and the console-backend update guard so both
+ * stay in lockstep.
+ *
+ * Aliased to SECRET_SOURCE_MIN_VERSION rather than repeating the literal: BYOIDP
+ * needs the SecretSource/SecretSync CRDs to exist and nothing more (it delivers its
+ * clientSecret through the SecretSource), so the two answer the same question and a
+ * second literal would only let them drift. It is NOT CONNECTOR_SECRET_SYNC_MIN_VERSION
+ * — that one is higher, and gating BYOIDP on it would strand BYOIDP on every alpha,
+ * where it currently ships to prod.
+ */
+export declare const BYOIDP_MIN_VERSION = "8.10.0-alpha3";
+/**
+ * Minimum cluster (zeebe) version at which a cluster's *connector and internal*
+ * secrets live in the new per-stage secret manager rather than the legacy store.
+ *
+ * Higher than SECRET_SOURCE_MIN_VERSION on purpose: a cluster can have a
+ * SecretSource (so BYOIDP works) while its connector secrets are still in the legacy
+ * store and it gets no connector SecretSync. The one thing that must never drift is
+ * the pair inside THIS concern: store routing
+ * (ConnectorSecretsController.resolveSecretManagerTarget), the connector SecretSync
+ * and its projection into the broker's file store (K8sSpecUtils.getSecretStoresSpec),
+ * the pre-8.10-backup mirror check, and the upgrade-copy crossing check
+ * (GenerationController.crossesInto810) all read THIS constant. #9703 was those
+ * disagreeing — where Console writes a secret must equal where the cluster reads it.
+ *
+ * Deliberately the 8.10 GA line, not any particular alpha. semver sorts a
+ * prerelease below its release, so every `8.10.0-alphaN` — present and future —
+ * falls below this floor, while `SNAPSHOT` and `8.10-SNAPSHOT` normalize above it
+ * and do route to the new store.
+ *
+ * Why alphas must stay out: routing is version-based with no persisted "which store
+ * holds this cluster's secrets" marker, so a cluster above the floor while the
+ * feature gate is off has its secrets in the legacy store, and enabling the gate
+ * later reroutes it to a store nobody ever populated. The copy that would fix that
+ * (GenerationController.crossesInto810 -> copyConnectorSecretsToNewManager) only
+ * fires on a generation CHANGE, and alpha generations have no upgrade chain at all
+ * (`upgradeableFrom = []`, ReleaseTrainController.handleAlpha) — an alpha cluster is
+ * created on its generation and stays there. So an alpha cohort above this floor
+ * could never be migrated; the ~200 8.10.0-alpha4 clusters on prod are exactly that
+ * cohort.
+ *
+ * Keeping the floor on the GA line means clusters enter the new store only where the
+ * copy is actually reachable: a real 8.10.0 upgrade, which does cross generations.
+ * Alphas stay on the legacy store consistently and permanently.
+ *
+ * Do NOT lower this to name an alpha. The remaining ordering requirement is that a
+ * stage's gate be enabled before the first at-floor cluster exists on it — which for
+ * SNAPSHOT-tagged clusters (at-floor by design, since they run the newest operator)
+ * still has to be respected by hand.
+ */
+export declare const CONNECTOR_SECRET_SYNC_MIN_VERSION = "8.10.0";
+/**
+ * Version floors for App Integrations (#8536). The fix landed as patches on
+ * the 8.9 stream (zeebe >=8.9.14 AND connectorBridge >=8.9.7), everything
+ * from 8.10.0-alpha4 on already carries both fixes. Shared by
+ * isAppIntegrationsVersionSupported (c4 settings tile + console-backend
+ * update guard) so the gate logic and its error message stay in lockstep.
+ */
+export declare const APP_INTEGRATIONS_MIN_VERSION = "8.10.0-alpha4";
+export declare const APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION = "8.9.14";
+export declare const APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION = "8.9.7";

package/dist/constants/misc.const.js

@@ -19,7 +19,18 @@ const MINIMUM_EYEPAIRS = {
 };
 const MAX_HARDWARE_PACKAGE_COUNT = 4;
 const OPTIMIZE_FILTERING_MIN_VERSION = "8.10.0-alpha1";
+const SECRET_SOURCE_MIN_VERSION = "8.10.0-alpha3";
+const BYOIDP_MIN_VERSION = SECRET_SOURCE_MIN_VERSION;
+const CONNECTOR_SECRET_SYNC_MIN_VERSION = "8.10.0";
+const APP_INTEGRATIONS_MIN_VERSION = "8.10.0-alpha4";
+const APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION = "8.9.14";
+const APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION = "8.9.7";
 export {
+  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,
+  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,
+  APP_INTEGRATIONS_MIN_VERSION,
+  BYOIDP_MIN_VERSION,
+  CONNECTOR_SECRET_SYNC_MIN_VERSION,
   CONSOLE_API_USER_ID,
   FIRSTNAME_LASTNAME_MAX_LENGTH,
   HOTBACKUP_MIN_CREATE_PERIOD,
@@ -29,6 +40,7 @@ export {
   NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,
   OPTIMIZE_FILTERING_MIN_VERSION,
   SECRETS_MAX_LENGTH,
+  SECRET_SOURCE_MIN_VERSION,
   STARTING_PRICE_PER_MONTH_IN_EURO,
   TEMPORARY_CLUSTER_NAME
 };

package/dist/constants/misc.const.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/constants/misc.const.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n\n/**\n * Minimum cluster (zeebe) version for the Optimize data-filters feature. Shared by\n * the c4 settings tile, the new-cluster default, and CRD spec generation so the gate\n * stays consistent. Stricter than the operator's own gate (Camunda >= 8.9.0-alpha1,\n * where the exporter starts honoring the filters) \u2014 this is the product rollout gate.\n */\nexport const OPTIMIZE_FILTERING_MIN_VERSION = '8.10.0-alpha1'\n"],
-  "mappings": "AAMO,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;AAQnC,MAAM,iCAAiC;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n\n/**\n * Minimum cluster (zeebe) version for the Optimize data-filters feature. Shared by\n * the c4 settings tile, the new-cluster default, and CRD spec generation so the gate\n * stays consistent. Stricter than the operator's own gate (Camunda >= 8.9.0-alpha1,\n * where the exporter starts honoring the filters) \u2014 this is the product rollout gate.\n */\nexport const OPTIMIZE_FILTERING_MIN_VERSION = '8.10.0-alpha1'\n\n/**\n * Minimum cluster (zeebe) version at which the operator understands the new\n * cluster-secret CRDs (camunda-operator#5760) \u2014 SecretSource and SecretSync exist and\n * reconcile. Governs *provisioning the CRs*, nothing about which store they point at:\n * SecretSource provisioning (K8sClusterController.ensureSecretSource) and BYOIDP's\n * oidcProviders emission, which needs a SecretSource to deliver its clientSecretRef\n * (ByoidpSecretDeliveryController.deliverSecret refuses without one).\n *\n * BYOIDP is live up to prod, so this floor must stay at the generation BYOIDP\n * shipped on. Raising it would strand BYOIDP on every alpha below the new value.\n */\nexport const SECRET_SOURCE_MIN_VERSION = '8.10.0-alpha3'\n\n/**\n * Minimum cluster (zeebe) version for BYOIDP (external identity provider, #3190).\n * Shared by the c4 settings tile gate and the console-backend update guard so both\n * stay in lockstep.\n *\n * Aliased to SECRET_SOURCE_MIN_VERSION rather than repeating the literal: BYOIDP\n * needs the SecretSource/SecretSync CRDs to exist and nothing more (it delivers its\n * clientSecret through the SecretSource), so the two answer the same question and a\n * second literal would only let them drift. It is NOT CONNECTOR_SECRET_SYNC_MIN_VERSION\n * \u2014 that one is higher, and gating BYOIDP on it would strand BYOIDP on every alpha,\n * where it currently ships to prod.\n */\nexport const BYOIDP_MIN_VERSION = SECRET_SOURCE_MIN_VERSION\n\n/**\n * Minimum cluster (zeebe) version at which a cluster's *connector and internal*\n * secrets live in the new per-stage secret manager rather than the legacy store.\n *\n * Higher than SECRET_SOURCE_MIN_VERSION on purpose: a cluster can have a\n * SecretSource (so BYOIDP works) while its connector secrets are still in the legacy\n * store and it gets no connector SecretSync. The one thing that must never drift is\n * the pair inside THIS concern: store routing\n * (ConnectorSecretsController.resolveSecretManagerTarget), the connector SecretSync\n * and its projection into the broker's file store (K8sSpecUtils.getSecretStoresSpec),\n * the pre-8.10-backup mirror check, and the upgrade-copy crossing check\n * (GenerationController.crossesInto810) all read THIS constant. #9703 was those\n * disagreeing \u2014 where Console writes a secret must equal where the cluster reads it.\n *\n * Deliberately the 8.10 GA line, not any particular alpha. semver sorts a\n * prerelease below its release, so every `8.10.0-alphaN` \u2014 present and future \u2014\n * falls below this floor, while `SNAPSHOT` and `8.10-SNAPSHOT` normalize above it\n * and do route to the new store.\n *\n * Why alphas must stay out: routing is version-based with no persisted \"which store\n * holds this cluster's secrets\" marker, so a cluster above the floor while the\n * feature gate is off has its secrets in the legacy store, and enabling the gate\n * later reroutes it to a store nobody ever populated. The copy that would fix that\n * (GenerationController.crossesInto810 -> copyConnectorSecretsToNewManager) only\n * fires on a generation CHANGE, and alpha generations have no upgrade chain at all\n * (`upgradeableFrom = []`, ReleaseTrainController.handleAlpha) \u2014 an alpha cluster is\n * created on its generation and stays there. So an alpha cohort above this floor\n * could never be migrated; the ~200 8.10.0-alpha4 clusters on prod are exactly that\n * cohort.\n *\n * Keeping the floor on the GA line means clusters enter the new store only where the\n * copy is actually reachable: a real 8.10.0 upgrade, which does cross generations.\n * Alphas stay on the legacy store consistently and permanently.\n *\n * Do NOT lower this to name an alpha. The remaining ordering requirement is that a\n * stage's gate be enabled before the first at-floor cluster exists on it \u2014 which for\n * SNAPSHOT-tagged clusters (at-floor by design, since they run the newest operator)\n * still has to be respected by hand.\n */\nexport const CONNECTOR_SECRET_SYNC_MIN_VERSION = '8.10.0'\n\n/**\n * Version floors for App Integrations (#8536). The fix landed as patches on\n * the 8.9 stream (zeebe >=8.9.14 AND connectorBridge >=8.9.7), everything\n * from 8.10.0-alpha4 on already carries both fixes. Shared by\n * isAppIntegrationsVersionSupported (c4 settings tile + console-backend\n * update guard) so the gate logic and its error message stay in lockstep.\n */\nexport const APP_INTEGRATIONS_MIN_VERSION = '8.10.0-alpha4'\nexport const APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION = '8.9.14'\nexport const APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION = '8.9.7'\n"],
+  "mappings": "AAMO,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;AAQnC,MAAM,iCAAiC;AAavC,MAAM,4BAA4B;AAclC,MAAM,qBAAqB;AAyC3B,MAAM,oCAAoC;AAS1C,MAAM,+BAA+B;AACrC,MAAM,+CAA+C;AACrD,MAAM,0DAA0D;",
   "names": []
 }

package/dist/dtos/CommonCluster.dto.d.ts

@@ -40,7 +40,9 @@ export interface OptimizeFilteringPatch {
  * (`idp-config-{clusterId}`, keyed by `name`) and referenced from the CR only.
  */
 export interface ExternalIdpConfig {
-    /** Registration id. Uppercase letters + digits, starts with a letter (`^[A-Z][A-Z0-9]*$`).
+    /** Registration id. Lowercase letters + digits, starts with a letter
+     *  (`^[a-z][a-z0-9]*$`, max 63 chars), matching camunda-operator's `oidcProviders[].name`
+     *  (Spring lowercases every registration id it reads from an env var name). `oidc` is reserved.
      *  Doubles as the Secret data key, the `..._OIDC_<NAME>_*` env-var segment, and `clientSecretRef.key`. */
     name: string;
     /** Friendly display name shown on the login picker. */
@@ -115,6 +117,13 @@ export interface CommonClusterDto {
      * failover cluster. It remains visible but can never be resumed again.
      */
     isFailoverSource?: boolean;
+    /**
+     * The source cluster's uuid, set on the FAILOVER (destination) cluster —
+     * the counterpart to isFailoverSource, which is set on the source. Lets
+     * the frontend recognize a cluster resulted from a failover, e.g. to
+     * prompt updating a carried-over BYOM/BYOIDP external endpoint.
+     */
+    failoverSourceClusterId?: string;
     /**
      * Stable durable identity shared by both halves of a failover pair. Used to
      * pair a failover cluster with its source, and to derive the pre-staged
@@ -138,8 +147,11 @@ export interface CommonClusterDto {
     rba?: boolean;
     identityBackendChecksEnabled?: boolean;
     multiTenancyEnabled?: boolean;
+    sessionMaxInactiveIntervalMinutes?: number;
+    sessionHeartbeatEnabled?: boolean;
     externalIdpEnabled?: boolean;
     externalIdpConfig?: ExternalIdpConfig;
+    secretSourceProvisioned?: boolean;
     enforceGroups?: boolean;
     playMode?: boolean;
     mcpEnabled?: boolean;

package/dist/dtos/ControlV2.dto.d.ts

@@ -160,12 +160,16 @@ export interface ListClustersV2Params extends CursorParams {
         planNames?: string[];
         /** Restrict to these generation names (`generation.name`). */
         generationNames?: string[];
-        /** Restrict to these region names (resolved via the k8s-context config). */
-        regions?: string[];
         /** Restrict to these cloud providers (resolved via the k8s-context config). */
         providers?: string[];
         /** Exact k8s context uuid. */
         k8sContext?: string;
+        /**
+         * Restrict to these k8s context (datacenter) uuids; the Control clusters
+         * list's multi-select "Datacenter" filter, which matches the context
+         * identity, mirroring the accounts clusters list's "Filter by Datacenter".
+         */
+        k8sContexts?: string[];
         orgId?: string;
         /** Restrict to these owner org uuids (cross-backend sales-plan filters). */
         orgIds?: string[];
@@ -192,10 +196,20 @@ export interface ClusterParameterOptionV2Dto {
     id: string;
     name: string;
 }
+/**
+ * A datacenter (k8s context) option for the clusters list's "Datacenter" filter.
+ * `id` is the context uuid (matched by `filter.k8sContexts`); `region`/`provider`
+ * come from the context config and let the dropdown be grouped by provider and
+ * show the region, mirroring the accounts clusters list.
+ */
+export interface ClusterDatacenterOptionV2Dto extends ClusterParameterOptionV2Dto {
+    region?: string;
+    provider?: string;
+}
 export interface ClusterParametersV2Dto {
     plans: ClusterParameterOptionV2Dto[];
     generations: ClusterParameterOptionV2Dto[];
-    regions: ClusterParameterOptionV2Dto[];
+    datacenters: ClusterDatacenterOptionV2Dto[];
 }
 /**
  * Aggregated cluster distribution counts (GET /v2/clusters/facets), backing

package/dist/enums/AuditEntity.enum.d.ts

@@ -30,6 +30,8 @@ export declare enum AuditEntityAttribute {
     CLUSTER_SWAGGER = "Cluster Swagger",
     CLUSTER_BUSINESS_ID_UNIQUENESS = "Business ID Uniqueness",
     CLUSTER_MULTI_TENANCY = "Multi-tenancy",
+    CLUSTER_SESSION_MAX_INACTIVE_INTERVAL = "Session idle timeout",
+    CLUSTER_SESSION_HEARTBEAT = "Session heartbeat",
     CLUSTER_EXTERNAL_IDP = "External identity provider",
     CLUSTER_ENABLE_LOW_LATENCY = "Enable low latency",
     CLUSTER_AUTOUPDATE = "Auto Update",

package/dist/enums/AuditEntity.enum.js

@@ -31,6 +31,8 @@ var AuditEntityAttribute = /* @__PURE__ */ ((AuditEntityAttribute2) => {
   AuditEntityAttribute2["CLUSTER_SWAGGER"] = "Cluster Swagger";
   AuditEntityAttribute2["CLUSTER_BUSINESS_ID_UNIQUENESS"] = "Business ID Uniqueness";
   AuditEntityAttribute2["CLUSTER_MULTI_TENANCY"] = "Multi-tenancy";
+  AuditEntityAttribute2["CLUSTER_SESSION_MAX_INACTIVE_INTERVAL"] = "Session idle timeout";
+  AuditEntityAttribute2["CLUSTER_SESSION_HEARTBEAT"] = "Session heartbeat";
   AuditEntityAttribute2["CLUSTER_EXTERNAL_IDP"] = "External identity provider";
   AuditEntityAttribute2["CLUSTER_ENABLE_LOW_LATENCY"] = "Enable low latency";
   AuditEntityAttribute2["CLUSTER_AUTOUPDATE"] = "Auto Update";

package/dist/enums/AuditEntity.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/AuditEntity.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum AuditEntity {\n  CLUSTER = 'Cluster',\n  CLIENT = 'Client',\n  ALERT_SUBSCRIPTION = 'Alert Subscription',\n  API_CLIENT = 'API Client',\n  SECURE_CONNECTIVITY_CRD = 'Private networking',\n  BYOM_CLIENT = 'External Monitoring Client',\n  BYOM_CRD = 'External Monitoring',\n  INVITATION = 'Invitation',\n  MEMBER = 'Member',\n  ORGANIZATION = 'Organization',\n  SALES_PLAN = 'SalesPlan',\n  CLUSTER_PLAN = 'ClusterPlan',\n  GENERATION = 'Generation',\n  BILLING = 'Billing',\n  USAGE_ALERT = 'Usage Alert',\n  ACCEPT_BETA_TERMS = 'Accept Alpha terms',\n  TOGGLE_BETA_FEATURE = 'Toggle Alpha feature',\n  CONNECTOR_SECRET = 'Connector Secret',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n}\n\nexport enum AuditEntityAttribute {\n  CLUSTER_CLUSTER_PLAN = 'ClusterPlan',\n  CLUSTER_GENERATION = 'Generation',\n  CLUSTER_NAME = 'Name',\n  CLUSTER_RBA = 'Resource Based Authorizations',\n  CLUSTER_ENFORCE_GROUPS = 'Enforce Group Management',\n  CLUSTER_PLAYMODE = 'Cluster Play Mode',\n  CLUSTER_MCP_ENABLED = 'MCP Support',\n  CLUSTER_SWAGGER = 'Cluster Swagger',\n  CLUSTER_BUSINESS_ID_UNIQUENESS = 'Business ID Uniqueness',\n  CLUSTER_MULTI_TENANCY = 'Multi-tenancy',\n  CLUSTER_EXTERNAL_IDP = 'External identity provider',\n  CLUSTER_ENABLE_LOW_LATENCY = 'Enable low latency',\n  CLUSTER_AUTOUPDATE = 'Auto Update',\n  CLUSTER_OWNER = 'Owner',\n  CLUSTER_STATUS = 'Status',\n  CLUSTER_TASKLIST_V2_ENABLED = 'Taklist V2 Enabled',\n  CLUSTER_AUDIT_LOG = 'Audit Log',\n  INVITATION_ROLE = 'Role',\n  ORGANIZATION_NAME = 'Name',\n  SALES_PLAN = 'Plan',\n  BILLING_RESERVATION = 'Reservation',\n  BILLING_GENERAL_USERS = 'GeneralUsers', // paid cc legaly - only kept for audit logs compatibility\n  MEMBER_ROLE = 'Role',\n  USAGE_ALERT_THRESHOLD = 'Threshold',\n  USAGE_ALERT_STATUS = 'Status',\n  CLUSTER_AUDIT_LOGS = 'Audit Logging',\n  LLM_BUDGET = 'LLM Budget',\n  LLM_KEY_BLOCKED = 'LLM Key Blocked',\n  ORGANIZATION_LIMIT = 'Limit',\n  CLUSTER_MODIFICATION = 'Modification',\n  ORGANIZATION_TRIAL_EXPIRES_AT = 'Trial Expiration Date',\n}\n"],
-  "mappings": "AAOO,IAAK,cAAL,kBAAKA,iBAAL;AACL,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,wBAAqB;AACrB,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,6BAA0B;AAC1B,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,uBAAoB;AACpB,EAAAA,aAAA,yBAAsB;AACtB,EAAAA,aAAA,sBAAmB;AACnB,EAAAA,aAAA,0BAAuB;AAnBb,SAAAA;AAAA,GAAA;AAsBL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kBAAe;AACf,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,sBAAmB;AACnB,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,oCAAiC;AACjC,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,mBAAgB;AAChB,EAAAA,sBAAA,oBAAiB;AACjB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,mCAAgC;AA/BtB,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum AuditEntity {\n  CLUSTER = 'Cluster',\n  CLIENT = 'Client',\n  ALERT_SUBSCRIPTION = 'Alert Subscription',\n  API_CLIENT = 'API Client',\n  SECURE_CONNECTIVITY_CRD = 'Private networking',\n  BYOM_CLIENT = 'External Monitoring Client',\n  BYOM_CRD = 'External Monitoring',\n  INVITATION = 'Invitation',\n  MEMBER = 'Member',\n  ORGANIZATION = 'Organization',\n  SALES_PLAN = 'SalesPlan',\n  CLUSTER_PLAN = 'ClusterPlan',\n  GENERATION = 'Generation',\n  BILLING = 'Billing',\n  USAGE_ALERT = 'Usage Alert',\n  ACCEPT_BETA_TERMS = 'Accept Alpha terms',\n  TOGGLE_BETA_FEATURE = 'Toggle Alpha feature',\n  CONNECTOR_SECRET = 'Connector Secret',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n}\n\nexport enum AuditEntityAttribute {\n  CLUSTER_CLUSTER_PLAN = 'ClusterPlan',\n  CLUSTER_GENERATION = 'Generation',\n  CLUSTER_NAME = 'Name',\n  CLUSTER_RBA = 'Resource Based Authorizations',\n  CLUSTER_ENFORCE_GROUPS = 'Enforce Group Management',\n  CLUSTER_PLAYMODE = 'Cluster Play Mode',\n  CLUSTER_MCP_ENABLED = 'MCP Support',\n  CLUSTER_SWAGGER = 'Cluster Swagger',\n  CLUSTER_BUSINESS_ID_UNIQUENESS = 'Business ID Uniqueness',\n  CLUSTER_MULTI_TENANCY = 'Multi-tenancy',\n  CLUSTER_SESSION_MAX_INACTIVE_INTERVAL = 'Session idle timeout',\n  CLUSTER_SESSION_HEARTBEAT = 'Session heartbeat',\n  CLUSTER_EXTERNAL_IDP = 'External identity provider',\n  CLUSTER_ENABLE_LOW_LATENCY = 'Enable low latency',\n  CLUSTER_AUTOUPDATE = 'Auto Update',\n  CLUSTER_OWNER = 'Owner',\n  CLUSTER_STATUS = 'Status',\n  CLUSTER_TASKLIST_V2_ENABLED = 'Taklist V2 Enabled',\n  CLUSTER_AUDIT_LOG = 'Audit Log',\n  INVITATION_ROLE = 'Role',\n  ORGANIZATION_NAME = 'Name',\n  SALES_PLAN = 'Plan',\n  BILLING_RESERVATION = 'Reservation',\n  BILLING_GENERAL_USERS = 'GeneralUsers', // paid cc legaly - only kept for audit logs compatibility\n  MEMBER_ROLE = 'Role',\n  USAGE_ALERT_THRESHOLD = 'Threshold',\n  USAGE_ALERT_STATUS = 'Status',\n  CLUSTER_AUDIT_LOGS = 'Audit Logging',\n  LLM_BUDGET = 'LLM Budget',\n  LLM_KEY_BLOCKED = 'LLM Key Blocked',\n  ORGANIZATION_LIMIT = 'Limit',\n  CLUSTER_MODIFICATION = 'Modification',\n  ORGANIZATION_TRIAL_EXPIRES_AT = 'Trial Expiration Date',\n}\n"],
+  "mappings": "AAOO,IAAK,cAAL,kBAAKA,iBAAL;AACL,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,wBAAqB;AACrB,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,6BAA0B;AAC1B,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,uBAAoB;AACpB,EAAAA,aAAA,yBAAsB;AACtB,EAAAA,aAAA,sBAAmB;AACnB,EAAAA,aAAA,0BAAuB;AAnBb,SAAAA;AAAA,GAAA;AAsBL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kBAAe;AACf,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,sBAAmB;AACnB,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,oCAAiC;AACjC,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,2CAAwC;AACxC,EAAAA,sBAAA,+BAA4B;AAC5B,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,mBAAgB;AAChB,EAAAA,sBAAA,oBAAiB;AACjB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,mCAAgC;AAjCtB,SAAAA;AAAA,GAAA;",
   "names": ["AuditEntity", "AuditEntityAttribute"]
 }

package/dist/enums/ConsoleApiClientPermission.enum.d.ts

@@ -25,6 +25,9 @@ export declare enum ConsoleAPIClientPermission {
     CreateHotBackups = "CreateHotBackups",
     RestoreHotBackup = "RestoreHotBackup",
     GetHotBackupRestore = "GetHotBackupRestore",
+    GetHotBackupSchedule = "GetHotBackupSchedule",
+    UpdateHotBackupSchedule = "UpdateHotBackupSchedule",
+    DeleteHotBackupSchedule = "DeleteHotBackupSchedule",
     DownloadActivity = "DownloadActivity",
     GetByomClient = "GetByomClient",
     ActivateByom = "ActivateByom",
@@ -34,5 +37,7 @@ export declare enum ConsoleAPIClientPermission {
     DeleteByomClient = "DeleteByomClient",
     GetSecureConnectivity = "GetSecureConnectivity",
     ActivateSecureConnectivity = "ActivateSecureConnectivity",
-    DeactivateSecureConnectivity = "DeactivateSecureConnectivity"
+    DeactivateSecureConnectivity = "DeactivateSecureConnectivity",
+    /** Experimental — not enabled for all organizations. */
+    CreateFailover = "CreateFailover"
 }

package/dist/enums/ConsoleApiClientPermission.enum.js

@@ -25,6 +25,9 @@ var ConsoleAPIClientPermission = /* @__PURE__ */ ((ConsoleAPIClientPermission2)
   ConsoleAPIClientPermission2["CreateHotBackups"] = "CreateHotBackups";
   ConsoleAPIClientPermission2["RestoreHotBackup"] = "RestoreHotBackup";
   ConsoleAPIClientPermission2["GetHotBackupRestore"] = "GetHotBackupRestore";
+  ConsoleAPIClientPermission2["GetHotBackupSchedule"] = "GetHotBackupSchedule";
+  ConsoleAPIClientPermission2["UpdateHotBackupSchedule"] = "UpdateHotBackupSchedule";
+  ConsoleAPIClientPermission2["DeleteHotBackupSchedule"] = "DeleteHotBackupSchedule";
   ConsoleAPIClientPermission2["DownloadActivity"] = "DownloadActivity";
   ConsoleAPIClientPermission2["GetByomClient"] = "GetByomClient";
   ConsoleAPIClientPermission2["ActivateByom"] = "ActivateByom";
@@ -35,6 +38,7 @@ var ConsoleAPIClientPermission = /* @__PURE__ */ ((ConsoleAPIClientPermission2)
   ConsoleAPIClientPermission2["GetSecureConnectivity"] = "GetSecureConnectivity";
   ConsoleAPIClientPermission2["ActivateSecureConnectivity"] = "ActivateSecureConnectivity";
   ConsoleAPIClientPermission2["DeactivateSecureConnectivity"] = "DeactivateSecureConnectivity";
+  ConsoleAPIClientPermission2["CreateFailover"] = "CreateFailover";
   return ConsoleAPIClientPermission2;
 })(ConsoleAPIClientPermission || {});
 export {

package/dist/enums/ConsoleApiClientPermission.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/ConsoleApiClientPermission.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum ConsoleAPIClientPermission {\n  CreateCluster = 'CreateCluster',\n  DeleteCluster = 'DeleteCluster',\n  GetCluster = 'GetCluster',\n  UpdateCluster = 'UpdateCluster',\n  UpdateClusterEncryption = 'UpdateClusterEncryption',\n  CreateZeebeClient = 'CreateZeebeClient',\n  DeleteZeebeClient = 'DeleteZeebeClient',\n  GetZeebeClient = 'GetZeebeClient',\n  CreateModel = 'CreateModel',\n  UpdateModel = 'UpdateModel',\n  DeleteModel = 'DeleteModel',\n  GetModel = 'GetModel',\n\n  GetWhitelists = 'GetWhitelists',\n  UpdateWhitelists = 'UpdateWhitelists',\n\n  GetSecrets = 'GetSecrets',\n  DeleteSecrets = 'DeleteSecrets',\n  CreateSecrets = 'CreateSecrets',\n  UpdateSecrets = 'UpdateSecrets',\n\n  GetMembers = 'GetMembers',\n  UpdateMembers = 'UpdateMembers',\n  DeleteMembers = 'DeleteMembers',\n  GetHotBackups = 'GetHotBackups',\n  DeleteHotBackups = 'DeleteHotBackups',\n  CreateHotBackups = 'CreateHotBackups',\n  RestoreHotBackup = 'RestoreHotBackup',\n  GetHotBackupRestore = 'GetHotBackupRestore',\n  DownloadActivity = 'DownloadActivity',\n  GetByomClient = 'GetByomClient',\n  ActivateByom = 'ActivateByom',\n  DeactivateByom = 'DeactivateByom',\n  CreateByomClient = 'CreateByomClient',\n  UpdateByomClient = 'UpdateByomClient',\n  DeleteByomClient = 'DeleteByomClient',\n  GetSecureConnectivity = 'GetSecureConnectivity',\n  ActivateSecureConnectivity = 'ActivateSecureConnectivity',\n  DeactivateSecureConnectivity = 'DeactivateSecureConnectivity',\n}\n"],
-  "mappings": "AAOO,IAAK,6BAAL,kBAAKA,gCAAL;AACL,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,cAAW;AAEX,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AAEnB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAEhB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,kBAAe;AACf,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,2BAAwB;AACxB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,kCAA+B;AAvCrB,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum ConsoleAPIClientPermission {\n  CreateCluster = 'CreateCluster',\n  DeleteCluster = 'DeleteCluster',\n  GetCluster = 'GetCluster',\n  UpdateCluster = 'UpdateCluster',\n  UpdateClusterEncryption = 'UpdateClusterEncryption',\n  CreateZeebeClient = 'CreateZeebeClient',\n  DeleteZeebeClient = 'DeleteZeebeClient',\n  GetZeebeClient = 'GetZeebeClient',\n  CreateModel = 'CreateModel',\n  UpdateModel = 'UpdateModel',\n  DeleteModel = 'DeleteModel',\n  GetModel = 'GetModel',\n\n  GetWhitelists = 'GetWhitelists',\n  UpdateWhitelists = 'UpdateWhitelists',\n\n  GetSecrets = 'GetSecrets',\n  DeleteSecrets = 'DeleteSecrets',\n  CreateSecrets = 'CreateSecrets',\n  UpdateSecrets = 'UpdateSecrets',\n\n  GetMembers = 'GetMembers',\n  UpdateMembers = 'UpdateMembers',\n  DeleteMembers = 'DeleteMembers',\n  GetHotBackups = 'GetHotBackups',\n  DeleteHotBackups = 'DeleteHotBackups',\n  CreateHotBackups = 'CreateHotBackups',\n  RestoreHotBackup = 'RestoreHotBackup',\n  GetHotBackupRestore = 'GetHotBackupRestore',\n  GetHotBackupSchedule = 'GetHotBackupSchedule',\n  UpdateHotBackupSchedule = 'UpdateHotBackupSchedule',\n  DeleteHotBackupSchedule = 'DeleteHotBackupSchedule',\n  DownloadActivity = 'DownloadActivity',\n  GetByomClient = 'GetByomClient',\n  ActivateByom = 'ActivateByom',\n  DeactivateByom = 'DeactivateByom',\n  CreateByomClient = 'CreateByomClient',\n  UpdateByomClient = 'UpdateByomClient',\n  DeleteByomClient = 'DeleteByomClient',\n  GetSecureConnectivity = 'GetSecureConnectivity',\n  ActivateSecureConnectivity = 'ActivateSecureConnectivity',\n  DeactivateSecureConnectivity = 'DeactivateSecureConnectivity',\n\n  /** Experimental \u2014 not enabled for all organizations. */\n  CreateFailover = 'CreateFailover',\n}\n"],
+  "mappings": "AAOO,IAAK,6BAAL,kBAAKA,gCAAL;AACL,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,iBAAc;AACd,EAAAA,4BAAA,cAAW;AAEX,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AAEnB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAEhB,EAAAA,4BAAA,gBAAa;AACb,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,0BAAuB;AACvB,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,mBAAgB;AAChB,EAAAA,4BAAA,kBAAe;AACf,EAAAA,4BAAA,oBAAiB;AACjB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,sBAAmB;AACnB,EAAAA,4BAAA,2BAAwB;AACxB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,kCAA+B;AAG/B,EAAAA,4BAAA,oBAAiB;AA7CP,SAAAA;AAAA,GAAA;",
   "names": ["ConsoleAPIClientPermission"]
 }

package/dist/enums/ErrorType.enum.d.ts

@@ -6,6 +6,7 @@ export declare enum ErrorType {
     Conflict = 409,
     PreconditionFailed = 412,
     IAmATeapot = 418,
+    UnprocessableEntity = 422,
     TooManyRequests = 429,
     Internal = 500,
     NotImplemented = 501,

package/dist/enums/ErrorType.enum.js

@@ -6,6 +6,7 @@ var ErrorType = /* @__PURE__ */ ((ErrorType2) => {
   ErrorType2[ErrorType2["Conflict"] = 409] = "Conflict";
   ErrorType2[ErrorType2["PreconditionFailed"] = 412] = "PreconditionFailed";
   ErrorType2[ErrorType2["IAmATeapot"] = 418] = "IAmATeapot";
+  ErrorType2[ErrorType2["UnprocessableEntity"] = 422] = "UnprocessableEntity";
   ErrorType2[ErrorType2["TooManyRequests"] = 429] = "TooManyRequests";
   ErrorType2[ErrorType2["Internal"] = 500] = "Internal";
   ErrorType2[ErrorType2["NotImplemented"] = 501] = "NotImplemented";

package/dist/enums/ErrorType.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/ErrorType.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum ErrorType {\n  BadRequest = 400,\n  Unauthorized = 401,\n  Forbidden = 403,\n  NotFound = 404,\n  Conflict = 409,\n  PreconditionFailed = 412,\n  IAmATeapot = 418,\n  TooManyRequests = 429,\n  Internal = 500,\n  NotImplemented = 501,\n  ServiceUnavailable = 503,\n}\n"],
-  "mappings": "AAOO,IAAK,YAAL,kBAAKA,eAAL;AACL,EAAAA,sBAAA,gBAAa,OAAb;AACA,EAAAA,sBAAA,kBAAe,OAAf;AACA,EAAAA,sBAAA,eAAY,OAAZ;AACA,EAAAA,sBAAA,cAAW,OAAX;AACA,EAAAA,sBAAA,cAAW,OAAX;AACA,EAAAA,sBAAA,wBAAqB,OAArB;AACA,EAAAA,sBAAA,gBAAa,OAAb;AACA,EAAAA,sBAAA,qBAAkB,OAAlB;AACA,EAAAA,sBAAA,cAAW,OAAX;AACA,EAAAA,sBAAA,oBAAiB,OAAjB;AACA,EAAAA,sBAAA,wBAAqB,OAArB;AAXU,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum ErrorType {\n  BadRequest = 400,\n  Unauthorized = 401,\n  Forbidden = 403,\n  NotFound = 404,\n  Conflict = 409,\n  PreconditionFailed = 412,\n  IAmATeapot = 418,\n  UnprocessableEntity = 422,\n  TooManyRequests = 429,\n  Internal = 500,\n  NotImplemented = 501,\n  ServiceUnavailable = 503,\n}\n"],
+  "mappings": "AAOO,IAAK,YAAL,kBAAKA,eAAL;AACL,EAAAA,sBAAA,gBAAa,OAAb;AACA,EAAAA,sBAAA,kBAAe,OAAf;AACA,EAAAA,sBAAA,eAAY,OAAZ;AACA,EAAAA,sBAAA,cAAW,OAAX;AACA,EAAAA,sBAAA,cAAW,OAAX;AACA,EAAAA,sBAAA,wBAAqB,OAArB;AACA,EAAAA,sBAAA,gBAAa,OAAb;AACA,EAAAA,sBAAA,yBAAsB,OAAtB;AACA,EAAAA,sBAAA,qBAAkB,OAAlB;AACA,EAAAA,sBAAA,cAAW,OAAX;AACA,EAAAA,sBAAA,oBAAiB,OAAjB;AACA,EAAAA,sBAAA,wBAAqB,OAArB;AAZU,SAAAA;AAAA,GAAA;",
   "names": ["ErrorType"]
 }

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 export { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js';
 export { isSupportedFailoverRegionPair, SUPPORTED_FAILOVER_REGION_PAIRS, } from './constants/failoverRegionPairs.const.js';
 export type { Stage } from './constants/misc.const.js';
-export { CONSOLE_API_USER_ID, FIRSTNAME_LASTNAME_MAX_LENGTH, HOTBACKUP_MIN_CREATE_PERIOD, MAX_HARDWARE_PACKAGE_COUNT, MAX_LENGTH_CLUSTER_NAME, MINIMUM_EYEPAIRS, NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS, OPTIMIZE_FILTERING_MIN_VERSION, SECRETS_MAX_LENGTH, STARTING_PRICE_PER_MONTH_IN_EURO, TEMPORARY_CLUSTER_NAME, } from './constants/misc.const.js';
+export { APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION, APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION, APP_INTEGRATIONS_MIN_VERSION, BYOIDP_MIN_VERSION, CONNECTOR_SECRET_SYNC_MIN_VERSION, CONSOLE_API_USER_ID, FIRSTNAME_LASTNAME_MAX_LENGTH, HOTBACKUP_MIN_CREATE_PERIOD, MAX_HARDWARE_PACKAGE_COUNT, MAX_LENGTH_CLUSTER_NAME, MINIMUM_EYEPAIRS, NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS, OPTIMIZE_FILTERING_MIN_VERSION, SECRET_SOURCE_MIN_VERSION, SECRETS_MAX_LENGTH, STARTING_PRICE_PER_MONTH_IN_EURO, TEMPORARY_CLUSTER_NAME, } from './constants/misc.const.js';
 export { getGatewayPropertyHint, getGatewayPropertyPath, isAffectedByStreamlinedDeployment, isPre89AffectedPath, PRE89_AFFECTED_PATHS, PRE89_AFFECTED_PROPERTY_PREFIXES, PRE89_GATEWAY_PROPERTY_PATHS, PRE89_GATEWAY_RESOURCE_PREFIXES, } from './constants/pre89EnvVarMapping.const.js';
 export { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js';
 export { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js';
@@ -20,7 +20,7 @@ export type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js';
 export type { ClusterSpecChange, ClusterSpecChangeActor, ClusterSpecHistory, } from './dtos/ClusterSpecHistory.dto.js';
 export type { CommonClusterDto, ExternalIdpConfig, OptimizeFilteringConfig, OptimizeFilteringIncludeExclude, OptimizeFilteringPatch, } from './dtos/CommonCluster.dto.js';
 export type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js';
-export type { ClusterByClientV2Dto, ClusterDetailV2Dto, ClusterFacetsV2Dto, ClusterListItemV2Dto, ClusterParameterOptionV2Dto, ClusterParametersV2Dto, ControlResolvedPermissions, ControlSessionDto, ControlSessionUser, CursorPage, CursorParams, ListClustersV2Params, ListOrganizationsV2Params, ListOrgMembersV2Params, OrgDetailV2Dto, OrgListItemV2Dto, OrgMemberV2Dto, OrgSummaryV2Dto, } from './dtos/ControlV2.dto.js';
+export type { ClusterByClientV2Dto, ClusterDatacenterOptionV2Dto, ClusterDetailV2Dto, ClusterFacetsV2Dto, ClusterListItemV2Dto, ClusterParameterOptionV2Dto, ClusterParametersV2Dto, ControlResolvedPermissions, ControlSessionDto, ControlSessionUser, CursorPage, CursorParams, ListClustersV2Params, ListOrganizationsV2Params, ListOrgMembersV2Params, OrgDetailV2Dto, OrgListItemV2Dto, OrgMemberV2Dto, OrgSummaryV2Dto, } from './dtos/ControlV2.dto.js';
 export type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js';
 export type { CamundaWebApp, CamundaWebAppWithZeebe, ExternalClusterDto, ExternalOrganizationDto, } from './dtos/ExternalWebapp.dto.js';
 export { type GenerationDto, type GenerationWithClusterCountDto, sortGenerationBySemverOfZeebe, type UpgradableGenerationsDto, } from './dtos/Generations.dto.js';
@@ -91,7 +91,7 @@ export { ConsoleSM } from './types/ConsoleSelfManaged.type.js';
 export type { ConsoleSMAdminApi } from './types/ConsoleSelfManagedAdminApi.type.js';
 export type { DashboardConfig, DashboardMappingItem, DashboardMappingTarget, DashboardResultPrimitive, DashboardResultRow, EngineeringOperationsDashboardResponse, } from './types/Dashboard.types.js';
 export type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js';
-export type { HdpTenantUsagePoint } from './types/HdpTenantUsage.type.js';
+export type { HdpTenantUsageBreakdown, HdpTenantUsagePerClusterPoint, HdpTenantUsagePoint, } from './types/HdpTenantUsage.type.js';
 export type { AlertSubscription as HdpAlertSubscription, Audit as HdpAudit, ByomClient as HdpByomClient, Channel as HdpChannel, Cluster as HdpCluster, ClusterBackup as HdpClusterBackup, ClusterBackupSchedule as HdpClusterBackupSchedule, ClusterBulkOperation as HdpClusterBulkOperation, ClusterClient as HdpClusterClient, ClusterModification as HdpClusterModification, ClusterPlan as HdpClusterPlan, ClusterPlanType as HdpClusterPlanType, ConnectorSecret as HdpConnectorSecret, ConsoleApiClient as HdpConsoleApiClient, Datacenter as HdpDatacenter, Generation as HdpGeneration, HdpBackendChangeEvent, HdpClusterModificationConfig, HdpEntity, HdpPrometheusDataCapacityDataPoint, Invite as HdpInvite, LlmSpend as HdpLlmSpend, Organization as HdpOrganization, SecureConnectivity as HdpSecureConnectivity, SystemAudit as HdpSystemAudit, TelemetryData as HdpTelemetryData, UsageAlert as HdpUsageAlert, User as HdpUser, UserLogin as HdpUserLogin, } from './types/hdp.types.js';
 export { AlertSubscriptionReportType as HdpAlertSubscriptionReportType, AlertSubscriptionType as HdpAlertSubscriptionType, } from './types/hdp.types.js';
 export type { GlobalNotification, NotificationDto, NotificationMeta, NotificationOptions, NotificationPermission, NotificationSource, NotificationState, NotificationType, OrgNotification, UserNotification, UserOrgNotification, } from './types/notification.type.js';
@@ -112,10 +112,14 @@ export type { GetSuspendStrategyOptions, SuspendStrategy, } from './types/Suspen
 export { getSuspendStrategy } from './types/SuspendStrategy.type.js';
 export type { SystemAuditData } from './types/SystemAuditData.type.js';
 export { Telemetry } from './types/Telemetry.type.js';
+export type { ExtensionListItem, ExtensionListResponse, OrgTrialDetail, TrialExtensionSource, TrialManagementStats, } from './types/TrialManagement.types.js';
 export type { AccountsData, AppMetadata, BasicUser, BlockedFor, Identity, OrgMembership, User, UserMetadata, UserRequest, } from './types/User.type.js';
 export { UserMetadataEvent } from './types/User.type.js';
 export type { UniqueTaskUser, ValueMetrics, ValueMetricsPerYearMonth, } from './types/ValueMetrics.type.js';
+export { CLOUD_PROVIDER_ORDER, getCloudProviderLabel, getCloudProviderRank, } from './utils/cloudProvider.utils.js';
 export { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js';
+export type { CronScheduleValidationFailure, CronScheduleValidationResult, CronScheduleValidationSuccess, } from './utils/cronSchedule.utils.js';
+export { BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES, validateCronSchedule, } from './utils/cronSchedule.utils.js';
 export { deriveEncryptionStatus, type EncryptionStatus, isEncryptionStatus, } from './utils/encryptionStatus.utils.js';
 export type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js';
 export { enterpriseConnectionMetadataToOrganizationAssignments, organizationAssignmentsToEnterpriseConnectionMetadata, } from './utils/enterprise-connection.utils.js';
@@ -130,9 +134,9 @@ export { getPermissionsByRoles, getUserPermissionsForOrg, } from './utils/orgs/O
 export type { PasswordPolicyRequest, PasswordPolicyResult, } from './utils/PasswordPolicy.js';
 export { MAXLENGTH as PASSWORD_POLICY_MAXLENGTH, MINLENGTH as PASSWORD_POLICY_MINLENGTH, passwordPolicyCheck, } from './utils/PasswordPolicy.js';
 export { allSettledResultsCounts, getFulfilledPromises, getRejectedPromises, getSettledSummary, } from './utils/settledPromises.util.js';
-export { isValidAwsArn, isValidCIDR, isValidCIDRList, isValidClientName, isValidHostname, isValidPrivateLinkRegion, } from './utils/string-validation.utils.js';
+export { isValidAwsArn, isValidCIDR, isValidCIDRList, isValidClientName, isValidHostname, isValidPrivateLinkRegion, normalizeCIDRList, } from './utils/string-validation.utils.js';
 export { extractCamundaUserEmail, guessName, isCamundaUserId, } from './utils/user.utils.js';
-export { checkVersion, VersionCheckOperator, } from './utils/versionCheck.utils.js';
+export { checkVersion, isAppIntegrationsVersionSupported, VersionCheckOperator, } from './utils/versionCheck.utils.js';
 export { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js';
 export type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js';
 export { augmentCamundiPermissions, getApplicableRolesForEmployee, isManager, } from './utils/camundiPermissionAugmenter.utils.js';

package/dist/index.js

@@ -4,6 +4,11 @@ import {
   SUPPORTED_FAILOVER_REGION_PAIRS
 } from "./constants/failoverRegionPairs.const.js";
 import {
+  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,
+  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,
+  APP_INTEGRATIONS_MIN_VERSION,
+  BYOIDP_MIN_VERSION,
+  CONNECTOR_SECRET_SYNC_MIN_VERSION,
   CONSOLE_API_USER_ID,
   FIRSTNAME_LASTNAME_MAX_LENGTH,
   HOTBACKUP_MIN_CREATE_PERIOD,
@@ -12,6 +17,7 @@ import {
   MINIMUM_EYEPAIRS,
   NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,
   OPTIMIZE_FILTERING_MIN_VERSION,
+  SECRET_SOURCE_MIN_VERSION,
   SECRETS_MAX_LENGTH,
   STARTING_PRICE_PER_MONTH_IN_EURO,
   TEMPORARY_CLUSTER_NAME
@@ -174,7 +180,16 @@ import { FeedbackType } from "./types/Survey.type.js";
 import { getSuspendStrategy } from "./types/SuspendStrategy.type.js";
 import { Telemetry } from "./types/Telemetry.type.js";
 import { UserMetadataEvent } from "./types/User.type.js";
+import {
+  CLOUD_PROVIDER_ORDER,
+  getCloudProviderLabel,
+  getCloudProviderRank
+} from "./utils/cloudProvider.utils.js";
 import { ConsoleSelfManagedUtils } from "./utils/console-sm.utils.js";
+import {
+  BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,
+  validateCronSchedule
+} from "./utils/cronSchedule.utils.js";
 import {
   deriveEncryptionStatus,
   isEncryptionStatus
@@ -224,7 +239,8 @@ import {
   isValidCIDRList,
   isValidClientName,
   isValidHostname,
-  isValidPrivateLinkRegion
+  isValidPrivateLinkRegion,
+  normalizeCIDRList
 } from "./utils/string-validation.utils.js";
 import {
   extractCamundaUserEmail,
@@ -233,6 +249,7 @@ import {
 } from "./utils/user.utils.js";
 import {
   checkVersion,
+  isAppIntegrationsVersionSupported,
   VersionCheckOperator
 } from "./utils/versionCheck.utils.js";
 import { default as default2 } from "./config/camundi-permission-rules.js";
@@ -243,6 +260,9 @@ import {
 } from "./utils/camundiPermissionAugmenter.utils.js";
 export {
   ALLOWED_CAMUNDA_LABELS,
+  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,
+  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,
+  APP_INTEGRATIONS_MIN_VERSION,
   AccountsPermissions,
   AlertDistributorPermissions,
   AlertSubscriptionReportType,
@@ -254,11 +274,15 @@ export {
   AuditEntityAttribute,
   AuditLoggerPermissions,
   AuditService,
+  BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,
+  BYOIDP_MIN_VERSION,
   BackupStatus,
   default2 as CAMUNDI_PERMISSION_RULES,
+  CLOUD_PROVIDER_ORDER,
   CLUSTER_DEFAULT_SEARCH_FIELDS,
   CLUSTER_PLAN_FIELDS,
   CLUSTER_SEARCH_FIELDS,
+  CONNECTOR_SECRET_SYNC_MIN_VERSION,
   CONSOLE_API_USER_ID,
   ClusterBulkOperationStatus,
   ClusterBulkOperationType,
@@ -327,6 +351,7 @@ export {
   SAFE_ROLES,
   SECOND,
   SECRETS_MAX_LENGTH,
+  SECRET_SOURCE_MIN_VERSION,
   SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT,
   SLEEP_CRON_ELIGIBLE_TAGS,
   STARTING_PRICE_PER_MONTH_IN_EURO,
@@ -368,6 +393,8 @@ export {
   findSearchField,
   getAnalyticsSalesPlanFromOrgSalesPlan,
   getApplicableRolesForEmployee,
+  getCloudProviderLabel,
+  getCloudProviderRank,
   getCurrentEnterpriseTerm,
   getDisplayedSalesPlan,
   getFulfilledPromises,
@@ -383,6 +410,7 @@ export {
   hasAvailabilityClass,
   isActivitySleepEligible,
   isAffectedByStreamlinedDeployment,
+  isAppIntegrationsVersionSupported,
   isBulkClusterDeletionItem,
   isBulkClusterPlanTypeUpdateItem,
   isBulkClusterPlanUpdateItem,
@@ -404,6 +432,7 @@ export {
   isValidHostname,
   isValidPrivateLinkRegion,
   likeArgument,
+  normalizeCIDRList,
   organizationAssignmentsToEnterpriseConnectionMetadata,
   parseEnvVars,
   parseKmsArn,
@@ -417,6 +446,7 @@ export {
   toUtcDayStartMs,
   unusedClusterBasedLimits,
   unusedSalesPlanLimits,
+  validateCronSchedule,
   validateKmsArnForRegion,
   validateLabels
 };