@camunda/ccma-shared-types 0.7.0 → 1.1.0

package/dist/dtos/FeatureFlags.dto.d.ts

@@ -0,0 +1,51 @@
+/**
+ * This type gives the shape of the feature flags of the management apps. It is
+ * also the body of `GET external/feature-flags` on accounts-backend.
+ *
+ * The shape is here, but the evaluation is not. `features({stage, orgId,
+ * email})` in `@camunda-cloud/featureflags` stays the only place that decides
+ * if a flag is on. That package is private, thus a published package
+ * (`@camunda/ccma-api`, `@camunda/ccma-saas-frontend`) cannot name the type
+ * from there. `@camunda-cloud/featureflags` re-exports `Features` from here.
+ * Thus the type has one definition, and every existing import path still works.
+ *
+ * A c4 host reads one flag with `useC4FeatureFlag('console.optionalTelemetry')`
+ * — a dot path into this object.
+ */
+export interface Features {
+    console: {
+        admin: {
+            overrideOrgRole: boolean;
+        };
+        clusterSuspendButton: boolean;
+        clusterSleepWarning: boolean;
+        backupRestore: boolean;
+        failover: boolean;
+        privateLink87: boolean;
+        byoidp: boolean;
+        optimizeUnsetOnDisable: boolean;
+        appIntegrations: boolean;
+        optionalTelemetry: boolean;
+        releaseTrainSanityFix: boolean;
+        hubHelpCenterLinks: boolean;
+        legacyModelerApiNaming: boolean;
+        backupScheduleApi: boolean;
+        clusterCreationBlocked: boolean;
+        deferSpecChangeWhileAsleep: boolean;
+    };
+    control: {
+        frontendTelemetry: boolean;
+    };
+    accounts: {
+        moveClusterOrg: boolean;
+        orgLimitAuditLog: boolean;
+        orgReservationAuditLog: boolean;
+        deleteLiteLLMKeyOnTrialExpiry: boolean;
+    };
+    shared: {
+        cyberpunkBrutalism: boolean;
+        tenantsValueMetric: boolean;
+        hdpValueMetricsFor2025: boolean;
+        permissionsRework: boolean;
+    };
+}

package/dist/dtos/FeatureFlags.dto.js

@@ -0,0 +1 @@
+//# sourceMappingURL=FeatureFlags.dto.js.map

package/dist/dtos/FeatureFlags.dto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/dtos/Generations.dto.js

@@ -1,12 +1,20 @@
 import semver from "semver";
+import { stripSecfixPostfix } from "../utils/versionCheck.utils.js";
+const secfixRank = (version) => version === stripSecfixPostfix(version) ? 0 : 1;
 function sortGenerationBySemverOfZeebe(generationA, generationB) {
   const versionAvalid = generationA.versions?.zeebe !== void 0 && semver.valid(generationA.versions.zeebe.split(":")[1]) !== null;
   const versionBvalid = generationB.versions?.zeebe !== void 0 && semver.valid(generationB.versions.zeebe.split(":")[1]) !== null;
   if (versionAvalid && versionBvalid) {
-    return semver.compare(
-      generationB.versions.zeebe.split(":")[1],
-      generationA.versions.zeebe.split(":")[1]
+    const zeebeA = generationA.versions.zeebe.split(":")[1];
+    const zeebeB = generationB.versions.zeebe.split(":")[1];
+    const byVersion = semver.compare(
+      stripSecfixPostfix(zeebeB),
+      stripSecfixPostfix(zeebeA)
     );
+    if (byVersion !== 0) {
+      return byVersion;
+    }
+    return secfixRank(zeebeB) - secfixRank(zeebeA);
   } else if (versionAvalid) {
     return -1;
   } else if (versionBvalid) {

package/dist/dtos/Generations.dto.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/dtos/Generations.dto.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport semver from 'semver'\nimport type { ZeebeClusterVersionsDto } from '../types/C8ClusterComponentVersions.type.js'\n\nexport interface GenerationDto {\n  name: string\n  uuid: string\n  versions: ZeebeClusterVersionsDto\n  upgradeableFrom: GenerationDto[]\n  createdBy: string\n  createdByName?: string\n  created: Date\n  updatedBy: string\n  updated: Date\n  isUnsupportedStarting?: Date\n  isBespoke?: boolean\n}\n\nexport interface GenerationWithClusterCountDto extends GenerationDto {\n  clusterCount: number\n}\n\nexport interface UpgradableGenerationsDto {\n  preferred: GenerationDto | null\n  options: GenerationDto[]\n}\n\nexport function sortGenerationBySemverOfZeebe(\n  generationA: { name: string; versions?: { zeebe: string } },\n  generationB: { name: string; versions?: { zeebe: string } },\n) {\n  // magic sorting algorithm\n  // uses the generation version of zeebe for comparison\n  // if version invalid: use localeCompare\n\n  const versionAvalid: boolean =\n    generationA.versions?.zeebe !== undefined &&\n    semver.valid(generationA.versions.zeebe.split(':')[1]) !== null\n  const versionBvalid: boolean =\n    generationB.versions?.zeebe !== undefined &&\n    semver.valid(generationB.versions.zeebe.split(':')[1]) !== null\n\n  if (versionAvalid && versionBvalid) {\n    return semver.compare(\n      generationB.versions!.zeebe.split(':')[1],\n      generationA.versions!.zeebe.split(':')[1],\n    )\n  } else if (versionAvalid) {\n    return -1\n  } else if (versionBvalid) {\n    return 1\n  } else {\n    return generationB.name.localeCompare(generationA.name)\n  }\n}\n"],
-  "mappings": "AAMA,OAAO,YAAY;AA0BZ,SAAS,8BACd,aACA,aACA;AAKA,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAC7D,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAE7D,MAAI,iBAAiB,eAAe;AAClC,WAAO,OAAO;AAAA,MACZ,YAAY,SAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MACxC,YAAY,SAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,IAC1C;AAAA,EACF,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,OAAO;AACL,WAAO,YAAY,KAAK,cAAc,YAAY,IAAI;AAAA,EACxD;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport semver from 'semver'\nimport type { ZeebeClusterVersionsDto } from '../types/C8ClusterComponentVersions.type.js'\nimport { stripSecfixPostfix } from '../utils/versionCheck.utils.js'\n\nexport interface GenerationDto {\n  name: string\n  uuid: string\n  versions: ZeebeClusterVersionsDto\n  upgradeableFrom: GenerationDto[]\n  createdBy: string\n  createdByName?: string\n  created: Date\n  updatedBy: string\n  updated: Date\n  isUnsupportedStarting?: Date\n  isBespoke?: boolean\n}\n\nexport interface GenerationWithClusterCountDto extends GenerationDto {\n  clusterCount: number\n}\n\nexport interface UpgradableGenerationsDto {\n  preferred: GenerationDto | null\n  options: GenerationDto[]\n}\n\nconst secfixRank = (version: string): number =>\n  version === stripSecfixPostfix(version) ? 0 : 1\n\nexport function sortGenerationBySemverOfZeebe(\n  generationA: { name: string; versions?: { zeebe: string } },\n  generationB: { name: string; versions?: { zeebe: string } },\n) {\n  // magic sorting algorithm\n  // uses the generation version of zeebe for comparison\n  // if version invalid: use localeCompare\n\n  const versionAvalid: boolean =\n    generationA.versions?.zeebe !== undefined &&\n    semver.valid(generationA.versions.zeebe.split(':')[1]) !== null\n  const versionBvalid: boolean =\n    generationB.versions?.zeebe !== undefined &&\n    semver.valid(generationB.versions.zeebe.split(':')[1]) !== null\n\n  if (versionAvalid && versionBvalid) {\n    const zeebeA = generationA.versions!.zeebe.split(':')[1]\n    const zeebeB = generationB.versions!.zeebe.split(':')[1]\n    const byVersion = semver.compare(\n      stripSecfixPostfix(zeebeB),\n      stripSecfixPostfix(zeebeA),\n    )\n    if (byVersion !== 0) {\n      return byVersion\n    }\n    // Both builds carry the same Camunda version here, so only the postfix\n    // separates them. A secfix build holds that version plus a security patch,\n    // thus it is the newer of the two and takes the higher rank.\n    return secfixRank(zeebeB) - secfixRank(zeebeA)\n  } else if (versionAvalid) {\n    return -1\n  } else if (versionBvalid) {\n    return 1\n  } else {\n    return generationB.name.localeCompare(generationA.name)\n  }\n}\n"],
+  "mappings": "AAMA,OAAO,YAAY;AAEnB,SAAS,0BAA0B;AAyBnC,MAAM,aAAa,CAAC,YAClB,YAAY,mBAAmB,OAAO,IAAI,IAAI;AAEzC,SAAS,8BACd,aACA,aACA;AAKA,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAC7D,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAE7D,MAAI,iBAAiB,eAAe;AAClC,UAAM,SAAS,YAAY,SAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AACvD,UAAM,SAAS,YAAY,SAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AACvD,UAAM,YAAY,OAAO;AAAA,MACvB,mBAAmB,MAAM;AAAA,MACzB,mBAAmB,MAAM;AAAA,IAC3B;AACA,QAAI,cAAc,GAAG;AACnB,aAAO;AAAA,IACT;AAIA,WAAO,WAAW,MAAM,IAAI,WAAW,MAAM;AAAA,EAC/C,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,OAAO;AACL,WAAO,YAAY,KAAK,cAAc,YAAY,IAAI;AAAA,EACxD;AACF;",
   "names": []
 }

package/dist/dtos/K8sContext.dto.d.ts

@@ -25,6 +25,13 @@ export interface K8sBackupConfig {
      * clusters that use it read as single-region.
      */
     hidden?: boolean;
+    /**
+     * Set by SREs in console-admin.yaml.
+     * True when the operator supports failover for this pairing.
+     * For example, some GCP pairings do not get `cloneRoleId`, so a failover request fails.
+     * This flag is informational. It does not affect `isSupportedFailoverRegionPair`.
+     */
+    failover?: boolean;
 }
 export interface K8sContext {
     visibility: 'hidden' | 'internal-only' | 'internal-paid-only' | 'all';

package/dist/dtos/Organization.dto.d.ts

@@ -4,6 +4,14 @@ import type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.j
 export type LicensingModelType = 'legacy' | '2025';
 export declare const VALID_LICENSING_MODELS: readonly LicensingModelType[];
 export declare const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string>;
+/**
+ * Upstream that holds a managed LLM key.
+ *
+ * `@camunda-cloud/featureflags` owns the `LlmProvider` type and its rollout
+ * rules. This package must not depend on that one, so the union is repeated
+ * here. Keep the two in step.
+ */
+export type LlmProviderName = 'litellm' | 'openrouter';
 export interface OrganizationMetadata {
     clickedRequestPaidPlan?: boolean;
     salesForceId?: string;
@@ -13,10 +21,33 @@ export interface OrganizationMetadata {
     autoJoin?: AutoJoinAssignment;
     llm?: {
         tenantKey: string;
-        teamId: string;
+        /**
+         * Team that holds the key on LiteLLM.
+         *
+         * Optional, and every call site already treats it as such. Old LiteLLM
+         * orgs got a key without a team. OpenRouter has no teams at all.
+         */
+        teamId?: string;
         created: number;
         /** Epoch ms of the last key rotation — set when the tenant key is regenerated. */
         updated?: number;
+        /**
+         * Upstream that holds this key. Absent means `litellm`, because every key
+         * from before the OpenRouter rollout is on LiteLLM.
+         *
+         * This value, and not the OpenRouter feature flag, decides where the
+         * read, block, top-up and delete paths look for the key. A flag change
+         * must never move a live key to a provider that does not hold it.
+         */
+        provider?: LlmProviderName;
+        /**
+         * Handle for the key on OpenRouter, which addresses a key by hash and not
+         * by its value. Absent for a LiteLLM key.
+         *
+         * Without it, an OpenRouter key can be found again only by a list request
+         * that matches on the name of the key.
+         */
+        keyHash?: string;
     };
 }
 export interface AutoJoinAssignment {

package/dist/dtos/Organization.dto.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/dtos/Organization.dto.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationPermissions } from '../types/OrganizationPermission.type.js'\nimport type { SalesPlanType } from '../types/SalesPlanType.type.js'\nimport type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js'\n\nexport type LicensingModelType = 'legacy' | '2025'\n\nexport const VALID_LICENSING_MODELS: readonly LicensingModelType[] = [\n  'legacy',\n  '2025',\n] as const\n\nexport const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string> =\n  {\n    legacy: 'Legacy (PI, DI, TU)',\n    '2025': '2025 (PI+Tenant)',\n  } as const\n\nexport interface OrganizationMetadata {\n  clickedRequestPaidPlan?: boolean\n  salesForceId?: string\n  enterpriseDevOnly?: boolean\n  awsOnly?: boolean\n  licensingModel?: LicensingModelType\n  autoJoin?: AutoJoinAssignment\n  llm?: {\n    tenantKey: string\n    teamId: string\n    created: number\n    /** Epoch ms of the last key rotation \u2014 set when the tenant key is regenerated. */\n    updated?: number\n  }\n}\n\nexport interface AutoJoinAssignment {\n  departments: Array<{ hibobId: string; roles: string[] }>\n  divisions: Array<{ hibobId: string; roles: string[] }>\n  subdivisions: Array<{ hibobId: string; roles: string[] }>\n}\nexport interface OrganizationDto {\n  uuid: string\n  name: string\n  organizationToSalesPlan?: OrganizationToSalesPlanDto\n  permissions?: OrganizationPermissions\n  metadata?: OrganizationMetadata\n  created: Date\n  internal: boolean\n}\n\nexport interface OrgOwner {\n  owner: string\n  email: string\n  first: string\n  last: string\n}\n\nexport interface OrgWithNameAndSalesPlan {\n  uuid: string\n  name: string | undefined\n  salesPlanName: string | undefined\n  salesPlanUuid: string | undefined\n  salesPlanType: SalesPlanType | undefined\n}\n"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationPermissions } from '../types/OrganizationPermission.type.js'\nimport type { SalesPlanType } from '../types/SalesPlanType.type.js'\nimport type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js'\n\nexport type LicensingModelType = 'legacy' | '2025'\n\nexport const VALID_LICENSING_MODELS: readonly LicensingModelType[] = [\n  'legacy',\n  '2025',\n] as const\n\nexport const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string> =\n  {\n    legacy: 'Legacy (PI, DI, TU)',\n    '2025': '2025 (PI+Tenant)',\n  } as const\n\n/**\n * Upstream that holds a managed LLM key.\n *\n * `@camunda-cloud/featureflags` owns the `LlmProvider` type and its rollout\n * rules. This package must not depend on that one, so the union is repeated\n * here. Keep the two in step.\n */\nexport type LlmProviderName = 'litellm' | 'openrouter'\n\nexport interface OrganizationMetadata {\n  clickedRequestPaidPlan?: boolean\n  salesForceId?: string\n  enterpriseDevOnly?: boolean\n  awsOnly?: boolean\n  licensingModel?: LicensingModelType\n  autoJoin?: AutoJoinAssignment\n  llm?: {\n    tenantKey: string\n    /**\n     * Team that holds the key on LiteLLM.\n     *\n     * Optional, and every call site already treats it as such. Old LiteLLM\n     * orgs got a key without a team. OpenRouter has no teams at all.\n     */\n    teamId?: string\n    created: number\n    /** Epoch ms of the last key rotation \u2014 set when the tenant key is regenerated. */\n    updated?: number\n    /**\n     * Upstream that holds this key. Absent means `litellm`, because every key\n     * from before the OpenRouter rollout is on LiteLLM.\n     *\n     * This value, and not the OpenRouter feature flag, decides where the\n     * read, block, top-up and delete paths look for the key. A flag change\n     * must never move a live key to a provider that does not hold it.\n     */\n    provider?: LlmProviderName\n    /**\n     * Handle for the key on OpenRouter, which addresses a key by hash and not\n     * by its value. Absent for a LiteLLM key.\n     *\n     * Without it, an OpenRouter key can be found again only by a list request\n     * that matches on the name of the key.\n     */\n    keyHash?: string\n  }\n}\n\nexport interface AutoJoinAssignment {\n  departments: Array<{ hibobId: string; roles: string[] }>\n  divisions: Array<{ hibobId: string; roles: string[] }>\n  subdivisions: Array<{ hibobId: string; roles: string[] }>\n}\nexport interface OrganizationDto {\n  uuid: string\n  name: string\n  organizationToSalesPlan?: OrganizationToSalesPlanDto\n  permissions?: OrganizationPermissions\n  metadata?: OrganizationMetadata\n  created: Date\n  internal: boolean\n}\n\nexport interface OrgOwner {\n  owner: string\n  email: string\n  first: string\n  last: string\n}\n\nexport interface OrgWithNameAndSalesPlan {\n  uuid: string\n  name: string | undefined\n  salesPlanName: string | undefined\n  salesPlanUuid: string | undefined\n  salesPlanType: SalesPlanType | undefined\n}\n"],
   "mappings": "AAYO,MAAM,yBAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,gCACX;AAAA,EACE,QAAQ;AAAA,EACR,QAAQ;AACV;",
   "names": []
 }

package/dist/enums/AlertSubscription.enum.d.ts

@@ -1,7 +1,5 @@
 export declare enum AlertSubscriptionType {
-    ClusterAlert = "ClusterAlert",
-    ProcessAlert = "ProcessAlert",
-    AllAlerts = "AllAlerts"
+    ProcessAlert = "ProcessAlert"
 }
 export declare enum AlertSubscriptionReportType {
     Email = "Email",

package/dist/enums/AlertSubscription.enum.js

@@ -1,7 +1,5 @@
 var AlertSubscriptionType = /* @__PURE__ */ ((AlertSubscriptionType2) => {
-  AlertSubscriptionType2["ClusterAlert"] = "ClusterAlert";
   AlertSubscriptionType2["ProcessAlert"] = "ProcessAlert";
-  AlertSubscriptionType2["AllAlerts"] = "AllAlerts";
   return AlertSubscriptionType2;
 })(AlertSubscriptionType || {});
 var AlertSubscriptionReportType = /* @__PURE__ */ ((AlertSubscriptionReportType2) => {

package/dist/enums/AlertSubscription.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/AlertSubscription.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionType {\n  ClusterAlert = 'ClusterAlert',\n  ProcessAlert = 'ProcessAlert',\n  AllAlerts = 'AllAlerts',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionReportType {\n  Email = 'Email',\n  Webhook = 'Webhook',\n}\n"],
-  "mappings": "AAOO,IAAK,wBAAL,kBAAKA,2BAAL;AACL,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAOL,IAAK,8BAAL,kBAAKC,iCAAL;AACL,EAAAA,6BAAA,WAAQ;AACR,EAAAA,6BAAA,aAAU;AAFA,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionType {\n  ProcessAlert = 'ProcessAlert',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionReportType {\n  Email = 'Email',\n  Webhook = 'Webhook',\n}\n"],
+  "mappings": "AAOO,IAAK,wBAAL,kBAAKA,2BAAL;AACL,EAAAA,uBAAA,kBAAe;AADL,SAAAA;AAAA,GAAA;AAKL,IAAK,8BAAL,kBAAKC,iCAAL;AACL,EAAAA,6BAAA,WAAQ;AACR,EAAAA,6BAAA,aAAU;AAFA,SAAAA;AAAA,GAAA;",
   "names": ["AlertSubscriptionType", "AlertSubscriptionReportType"]
 }

package/dist/enums/AuditEntity.enum.d.ts

@@ -28,7 +28,9 @@ export declare enum AuditEntityAttribute {
     CLUSTER_PLAYMODE = "Cluster Play Mode",
     CLUSTER_MCP_ENABLED = "MCP Support",
     CLUSTER_SWAGGER = "Cluster Swagger",
+    CLUSTER_SECRETS_FILTER_MODE = "Secrets Filter Mode",
     CLUSTER_BUSINESS_ID_UNIQUENESS = "Business ID Uniqueness",
+    CLUSTER_OPTIONAL_TELEMETRY = "Optional telemetry",
     CLUSTER_MULTI_TENANCY = "Multi-tenancy",
     CLUSTER_SESSION_MAX_INACTIVE_INTERVAL = "Session idle timeout",
     CLUSTER_SESSION_HEARTBEAT = "Session heartbeat",

package/dist/enums/AuditEntity.enum.js

@@ -29,7 +29,9 @@ var AuditEntityAttribute = /* @__PURE__ */ ((AuditEntityAttribute2) => {
   AuditEntityAttribute2["CLUSTER_PLAYMODE"] = "Cluster Play Mode";
   AuditEntityAttribute2["CLUSTER_MCP_ENABLED"] = "MCP Support";
   AuditEntityAttribute2["CLUSTER_SWAGGER"] = "Cluster Swagger";
+  AuditEntityAttribute2["CLUSTER_SECRETS_FILTER_MODE"] = "Secrets Filter Mode";
   AuditEntityAttribute2["CLUSTER_BUSINESS_ID_UNIQUENESS"] = "Business ID Uniqueness";
+  AuditEntityAttribute2["CLUSTER_OPTIONAL_TELEMETRY"] = "Optional telemetry";
   AuditEntityAttribute2["CLUSTER_MULTI_TENANCY"] = "Multi-tenancy";
   AuditEntityAttribute2["CLUSTER_SESSION_MAX_INACTIVE_INTERVAL"] = "Session idle timeout";
   AuditEntityAttribute2["CLUSTER_SESSION_HEARTBEAT"] = "Session heartbeat";

package/dist/enums/AuditEntity.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/AuditEntity.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum AuditEntity {\n  CLUSTER = 'Cluster',\n  CLIENT = 'Client',\n  ALERT_SUBSCRIPTION = 'Alert Subscription',\n  API_CLIENT = 'API Client',\n  SECURE_CONNECTIVITY_CRD = 'Private networking',\n  BYOM_CLIENT = 'External Monitoring Client',\n  BYOM_CRD = 'External Monitoring',\n  INVITATION = 'Invitation',\n  MEMBER = 'Member',\n  ORGANIZATION = 'Organization',\n  SALES_PLAN = 'SalesPlan',\n  CLUSTER_PLAN = 'ClusterPlan',\n  GENERATION = 'Generation',\n  BILLING = 'Billing',\n  USAGE_ALERT = 'Usage Alert',\n  ACCEPT_BETA_TERMS = 'Accept Alpha terms',\n  TOGGLE_BETA_FEATURE = 'Toggle Alpha feature',\n  CONNECTOR_SECRET = 'Connector Secret',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n}\n\nexport enum AuditEntityAttribute {\n  CLUSTER_CLUSTER_PLAN = 'ClusterPlan',\n  CLUSTER_GENERATION = 'Generation',\n  CLUSTER_NAME = 'Name',\n  CLUSTER_RBA = 'Resource Based Authorizations',\n  CLUSTER_ENFORCE_GROUPS = 'Enforce Group Management',\n  CLUSTER_PLAYMODE = 'Cluster Play Mode',\n  CLUSTER_MCP_ENABLED = 'MCP Support',\n  CLUSTER_SWAGGER = 'Cluster Swagger',\n  CLUSTER_BUSINESS_ID_UNIQUENESS = 'Business ID Uniqueness',\n  CLUSTER_MULTI_TENANCY = 'Multi-tenancy',\n  CLUSTER_SESSION_MAX_INACTIVE_INTERVAL = 'Session idle timeout',\n  CLUSTER_SESSION_HEARTBEAT = 'Session heartbeat',\n  CLUSTER_EXTERNAL_IDP = 'External identity provider',\n  CLUSTER_ENABLE_LOW_LATENCY = 'Enable low latency',\n  CLUSTER_AUTOUPDATE = 'Auto Update',\n  CLUSTER_OWNER = 'Owner',\n  CLUSTER_STATUS = 'Status',\n  CLUSTER_TASKLIST_V2_ENABLED = 'Taklist V2 Enabled',\n  CLUSTER_AUDIT_LOG = 'Audit Log',\n  INVITATION_ROLE = 'Role',\n  ORGANIZATION_NAME = 'Name',\n  SALES_PLAN = 'Plan',\n  BILLING_RESERVATION = 'Reservation',\n  BILLING_GENERAL_USERS = 'GeneralUsers', // paid cc legaly - only kept for audit logs compatibility\n  MEMBER_ROLE = 'Role',\n  USAGE_ALERT_THRESHOLD = 'Threshold',\n  USAGE_ALERT_STATUS = 'Status',\n  CLUSTER_AUDIT_LOGS = 'Audit Logging',\n  LLM_BUDGET = 'LLM Budget',\n  LLM_KEY_BLOCKED = 'LLM Key Blocked',\n  ORGANIZATION_LIMIT = 'Limit',\n  CLUSTER_MODIFICATION = 'Modification',\n  ORGANIZATION_TRIAL_EXPIRES_AT = 'Trial Expiration Date',\n}\n"],
-  "mappings": "AAOO,IAAK,cAAL,kBAAKA,iBAAL;AACL,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,wBAAqB;AACrB,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,6BAA0B;AAC1B,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,uBAAoB;AACpB,EAAAA,aAAA,yBAAsB;AACtB,EAAAA,aAAA,sBAAmB;AACnB,EAAAA,aAAA,0BAAuB;AAnBb,SAAAA;AAAA,GAAA;AAsBL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kBAAe;AACf,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,sBAAmB;AACnB,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,oCAAiC;AACjC,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,2CAAwC;AACxC,EAAAA,sBAAA,+BAA4B;AAC5B,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,mBAAgB;AAChB,EAAAA,sBAAA,oBAAiB;AACjB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,mCAAgC;AAjCtB,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum AuditEntity {\n  CLUSTER = 'Cluster',\n  CLIENT = 'Client',\n  ALERT_SUBSCRIPTION = 'Alert Subscription',\n  API_CLIENT = 'API Client',\n  SECURE_CONNECTIVITY_CRD = 'Private networking',\n  BYOM_CLIENT = 'External Monitoring Client',\n  BYOM_CRD = 'External Monitoring',\n  INVITATION = 'Invitation',\n  MEMBER = 'Member',\n  ORGANIZATION = 'Organization',\n  SALES_PLAN = 'SalesPlan',\n  CLUSTER_PLAN = 'ClusterPlan',\n  GENERATION = 'Generation',\n  BILLING = 'Billing',\n  USAGE_ALERT = 'Usage Alert',\n  ACCEPT_BETA_TERMS = 'Accept Alpha terms',\n  TOGGLE_BETA_FEATURE = 'Toggle Alpha feature',\n  CONNECTOR_SECRET = 'Connector Secret',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n}\n\nexport enum AuditEntityAttribute {\n  CLUSTER_CLUSTER_PLAN = 'ClusterPlan',\n  CLUSTER_GENERATION = 'Generation',\n  CLUSTER_NAME = 'Name',\n  CLUSTER_RBA = 'Resource Based Authorizations',\n  CLUSTER_ENFORCE_GROUPS = 'Enforce Group Management',\n  CLUSTER_PLAYMODE = 'Cluster Play Mode',\n  CLUSTER_MCP_ENABLED = 'MCP Support',\n  CLUSTER_SWAGGER = 'Cluster Swagger',\n  CLUSTER_SECRETS_FILTER_MODE = 'Secrets Filter Mode',\n  CLUSTER_BUSINESS_ID_UNIQUENESS = 'Business ID Uniqueness',\n  CLUSTER_OPTIONAL_TELEMETRY = 'Optional telemetry',\n  CLUSTER_MULTI_TENANCY = 'Multi-tenancy',\n  CLUSTER_SESSION_MAX_INACTIVE_INTERVAL = 'Session idle timeout',\n  CLUSTER_SESSION_HEARTBEAT = 'Session heartbeat',\n  CLUSTER_EXTERNAL_IDP = 'External identity provider',\n  CLUSTER_ENABLE_LOW_LATENCY = 'Enable low latency',\n  CLUSTER_AUTOUPDATE = 'Auto Update',\n  CLUSTER_OWNER = 'Owner',\n  CLUSTER_STATUS = 'Status',\n  CLUSTER_TASKLIST_V2_ENABLED = 'Taklist V2 Enabled',\n  CLUSTER_AUDIT_LOG = 'Audit Log',\n  INVITATION_ROLE = 'Role',\n  ORGANIZATION_NAME = 'Name',\n  SALES_PLAN = 'Plan',\n  BILLING_RESERVATION = 'Reservation',\n  BILLING_GENERAL_USERS = 'GeneralUsers', // paid cc legaly - only kept for audit logs compatibility\n  MEMBER_ROLE = 'Role',\n  USAGE_ALERT_THRESHOLD = 'Threshold',\n  USAGE_ALERT_STATUS = 'Status',\n  CLUSTER_AUDIT_LOGS = 'Audit Logging',\n  LLM_BUDGET = 'LLM Budget',\n  LLM_KEY_BLOCKED = 'LLM Key Blocked',\n  ORGANIZATION_LIMIT = 'Limit',\n  CLUSTER_MODIFICATION = 'Modification',\n  ORGANIZATION_TRIAL_EXPIRES_AT = 'Trial Expiration Date',\n}\n"],
+  "mappings": "AAOO,IAAK,cAAL,kBAAKA,iBAAL;AACL,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,wBAAqB;AACrB,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,6BAA0B;AAC1B,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,uBAAoB;AACpB,EAAAA,aAAA,yBAAsB;AACtB,EAAAA,aAAA,sBAAmB;AACnB,EAAAA,aAAA,0BAAuB;AAnBb,SAAAA;AAAA,GAAA;AAsBL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kBAAe;AACf,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,sBAAmB;AACnB,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,oCAAiC;AACjC,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,2CAAwC;AACxC,EAAAA,sBAAA,+BAA4B;AAC5B,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,mBAAgB;AAChB,EAAAA,sBAAA,oBAAiB;AACjB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,mCAAgC;AAnCtB,SAAAA;AAAA,GAAA;",
   "names": ["AuditEntity", "AuditEntityAttribute"]
 }

package/dist/index.d.ts

@@ -7,7 +7,7 @@ export { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js';
 export { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js';
 export type { TrialExtensionSurveyAnswer, TrialExtensionSurveyQuestion, } from './constants/trialExtensionSurvey.const.js';
 export { TRIAL_EXTENSION_SURVEY_QUESTIONS } from './constants/trialExtensionSurvey.const.js';
-export { ADMIN_APP_RENAME_MIN_VERSION, APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION, APP_INTEGRATIONS_89_STREAM_MINOR, APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION, APP_INTEGRATIONS_MIN_VERSION, AUDIT_LOG_TAB_MIN_VERSION, AUTHORIZATION_TOGGLE_MIN_VERSION, AWS_ONLY_GENERATION_MIN_VERSION, BUSINESS_ID_UNIQUENESS_MIN_VERSION, BYOIDP_MIN_VERSION, CLUSTER_SECRETS_LABEL_MIN_VERSION, CLUSTER_STATISTICS_CONFIG_MIN_VERSION, CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION, CONNECTOR_SECRET_SYNC_MIN_VERSION, CONNECTORS_MANAGEMENT_LINK_MIN_VERSION, ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION, ENFORCE_GROUPS_TOGGLE_MIN_VERSION, GATEWAY_SPEC_8_9_MIN_VERSION, HOT_BACKUP_MIN_VERSION, IDENTITY_AUTHORIZATION_MIN_VERSION, IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION, IDENTITY_MANAGEMENT_MIN_VERSION, INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION, JOB_DASHBOARD_MIN_VERSION, LINE_8_9_MIN_VERSION, LINE_8_10_MIN_VERSION, MCP_MIN_VERSION, MULTI_TENANCY_TOGGLE_MIN_VERSION, NEW_CLUSTER_ROLES_MIN_VERSION, OPTIMIZE_DEFAULT_ON_MIN_VERSION, OPTIMIZE_FILTERING_MIN_VERSION, RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION, REST_API_URL_TRANSFORM_MIN_VERSION, REST_API_V2_MIN_VERSION, SECRET_SOURCE_MIN_VERSION, SESSION_CONFIG_MIN_VERSION, SWAGGER_MIN_VERSION, SWAGGER_URL_8_9_MIN_VERSION, TASKLIST_MODE_TOGGLE_MIN_VERSION, TASKLIST_UPGRADE_BANNER_MIN_VERSION, TASKLIST_V2_AUTO_ENABLE_FROM_MINOR, TASKLIST_V2_AUTO_ENABLE_TO_MINOR, TASKLIST_V2_DEFAULT_ON_MIN_VERSION, TASKLIST_V2_SETTING_MAX_VERSION, TASKLIST_V2_UPGRADE_MIN_VERSION, TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION, ZEEBE_REST_URL_MIN_VERSION, } from './constants/version-gates.const.js';
+export { ADMIN_APP_RENAME_MIN_VERSION, APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION, APP_INTEGRATIONS_89_STREAM_MINOR, APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION, APP_INTEGRATIONS_MIN_VERSION, AUDIT_LOG_TAB_MIN_VERSION, AUTHORIZATION_TOGGLE_MIN_VERSION, AWS_ONLY_GENERATION_MIN_VERSION, BUSINESS_ID_UNIQUENESS_MIN_VERSION, BYOIDP_MIN_VERSION, CLUSTER_SECRETS_LABEL_MIN_VERSION, CLUSTER_STATISTICS_CONFIG_MIN_VERSION, CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION, CONNECTOR_SECRET_SYNC_MIN_VERSION, CONNECTORS_MANAGEMENT_LINK_MIN_VERSION, ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION, ENFORCE_GROUPS_TOGGLE_MIN_VERSION, GATEWAY_SPEC_8_9_MIN_VERSION, HOT_BACKUP_MIN_VERSION, IDENTITY_AUTHORIZATION_MIN_VERSION, IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION, IDENTITY_MANAGEMENT_MIN_VERSION, INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION, JOB_DASHBOARD_MIN_VERSION, LINE_8_9_MIN_VERSION, LINE_8_10_MIN_VERSION, MCP_MIN_VERSION, MULTI_TENANCY_TOGGLE_MIN_VERSION, NEW_CLUSTER_ROLES_MIN_VERSION, OPTIMIZE_DEFAULT_ON_MIN_VERSION, OPTIMIZE_FILTERING_MIN_VERSION, OPTIONAL_TELEMETRY_MIN_VERSION, RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION, REST_API_URL_TRANSFORM_MIN_VERSION, REST_API_V2_MIN_VERSION, RESUME_ALPHA_MIN_VERSION, SECRET_SOURCE_MIN_VERSION, SECRETS_FILTER_MODE_8_6_MIN_VERSION, SECRETS_FILTER_MODE_8_7_MIN_VERSION, SECRETS_FILTER_MODE_8_8_MIN_VERSION, SECRETS_FILTER_MODE_8_9_MIN_VERSION, SECRETS_FILTER_MODE_8_10_MIN_VERSION, SESSION_CONFIG_MIN_VERSION, SWAGGER_MIN_VERSION, SWAGGER_URL_8_9_MIN_VERSION, TASKLIST_MODE_TOGGLE_MIN_VERSION, TASKLIST_UPGRADE_BANNER_MIN_VERSION, TASKLIST_V2_AUTO_ENABLE_FROM_MINOR, TASKLIST_V2_AUTO_ENABLE_TO_MINOR, TASKLIST_V2_DEFAULT_ON_MIN_VERSION, TASKLIST_V2_SETTING_MAX_VERSION, TASKLIST_V2_UPGRADE_MIN_VERSION, TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION, ZEEBE_REST_URL_MIN_VERSION, } from './constants/version-gates.const.js';
 export type { ALERT_SUBSCRIPTION_REPORT_TYPES, ALERT_SUBSCRIPTION_TYPES, AlertSubscriptionDto, AlertSubscriptionEntryDto, AlertSubscriptionWebhookAuth, CheckFailedReason, } from './dtos/AlertSubscription.dto.js';
 export { FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS, HMAC_HEADER_POSITION, HMAC_SUPPORTED_ALGORITHM, } from './dtos/AlertSubscription.dto.js';
 export type { AuditDto } from './dtos/Audit.dto.js';
@@ -15,20 +15,22 @@ export type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js';
 export type { BackupDto } from './dtos/Backup.dto.js';
 export type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js';
 export type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js';
+export type { ClusterDeferredSpecChange, DeferredSpecChangeType, } from './dtos/ClusterDeferredSpecChange.dto.js';
 export type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js';
 export type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js';
 export type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js';
 export type { ClusterSpecChange, ClusterSpecChangeActor, ClusterSpecHistory, } from './dtos/ClusterSpecHistory.dto.js';
-export type { CommonClusterDto, ExternalIdpConfig, OptimizeFilteringConfig, OptimizeFilteringIncludeExclude, OptimizeFilteringPatch, } from './dtos/CommonCluster.dto.js';
+export type { CommonClusterDto, ExternalIdpConfig, OptimizeFilteringConfig, OptimizeFilteringIncludeExclude, OptimizeFilteringPatch, SecretsFilterMode, } from './dtos/CommonCluster.dto.js';
 export type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js';
 export type { ClusterByClientV2Dto, ClusterDatacenterOptionV2Dto, ClusterDetailV2Dto, ClusterFacetsV2Dto, ClusterListItemV2Dto, ClusterParameterOptionV2Dto, ClusterParametersV2Dto, ControlResolvedPermissions, ControlSessionDto, ControlSessionUser, CursorPage, CursorParams, ListClustersV2Params, ListOrganizationsV2Params, ListOrgMembersV2Params, OrgDetailV2Dto, OrgListItemV2Dto, OrgMemberV2Dto, OrgSummaryV2Dto, } from './dtos/ControlV2.dto.js';
 export type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js';
 export type { CamundaWebApp, CamundaWebAppWithZeebe, ExternalClusterDto, ExternalOrganizationDto, } from './dtos/ExternalWebapp.dto.js';
+export type { Features } from './dtos/FeatureFlags.dto.js';
 export { type GenerationDto, type GenerationWithClusterCountDto, sortGenerationBySemverOfZeebe, type UpgradableGenerationsDto, } from './dtos/Generations.dto.js';
 export type { Hdp } from './dtos/Hdp.dto.js';
 export type { K8sConfig, K8sConfigLegacyFormat, K8sContext, K8sContextDto, } from './dtos/K8sContext.dto.js';
 export type { MetaDto } from './dtos/Meta.dto.js';
-export type { AutoJoinAssignment, LicensingModelType, OrganizationDto, OrganizationMetadata, OrgOwner, OrgWithNameAndSalesPlan, } from './dtos/Organization.dto.js';
+export type { AutoJoinAssignment, LicensingModelType, LlmProviderName, OrganizationDto, OrganizationMetadata, OrgOwner, OrgWithNameAndSalesPlan, } from './dtos/Organization.dto.js';
 export { LICENSING_MODEL_DISPLAY_NAMES, VALID_LICENSING_MODELS, } from './dtos/Organization.dto.js';
 export type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js';
 export type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js';
@@ -118,6 +120,7 @@ export type { AccountsData, AppMetadata, BasicUser, BlockedFor, Identity, OrgMem
 export { UserMetadataEvent } from './types/User.type.js';
 export type { UniqueTaskUser, ValueMetrics, ValueMetricsPerYearMonth, } from './types/ValueMetrics.type.js';
 export { CLOUD_PROVIDER_ORDER, getCloudProviderLabel, getCloudProviderRank, } from './utils/cloudProvider.utils.js';
+export { type ConnectivityStatus, deriveConnectivityMessage, deriveConnectivityStatus, } from './utils/connectivityStatus.utils.js';
 export { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js';
 export type { CronScheduleValidationFailure, CronScheduleValidationResult, CronScheduleValidationSuccess, } from './utils/cronSchedule.utils.js';
 export { BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES, validateCronSchedule, } from './utils/cronSchedule.utils.js';
@@ -131,13 +134,15 @@ export { deriveFailoverKeyPolicyPrincipals, type FailoverKeyPolicyPrincipals, }
 export { KMS_ARN, KMS_MRK_ARN, type KmsArnValidationError, type ParsedKmsArn, parseKmsArn, validateKmsArnForRegion, } from './utils/kmsArn.utils.js';
 export { validateLabels } from './utils/labelValidator.utils.js';
 export { ObjectMergeUtils } from './utils/objectMerge.utils.js';
+export { computeOrgStartDate, type OrgStartDateInput, } from './utils/orgStartDate.utils.js';
 export { getPermissionsByRoles, getUserPermissionsForOrg, } from './utils/orgs/OrgHelper.js';
 export type { PasswordPolicyRequest, PasswordPolicyResult, } from './utils/PasswordPolicy.js';
 export { MAXLENGTH as PASSWORD_POLICY_MAXLENGTH, MINLENGTH as PASSWORD_POLICY_MINLENGTH, passwordPolicyCheck, } from './utils/PasswordPolicy.js';
+export { deriveSecondaryStorageStatus, type SecondaryStorageStatus, } from './utils/secondaryStorageStatus.utils.js';
 export { allSettledResultsCounts, getFulfilledPromises, getRejectedPromises, getSettledSummary, } from './utils/settledPromises.util.js';
 export { isValidAwsArn, isValidCIDR, isValidCIDRList, isValidClientName, isValidHostname, isValidPrivateLinkRegion, normalizeCIDRList, } from './utils/string-validation.utils.js';
 export { extractCamundaUserEmail, guessName, isCamundaUserId, } from './utils/user.utils.js';
-export { checkVersion, isAppIntegrationsVersionSupported, VersionCheckOperator, } from './utils/versionCheck.utils.js';
+export { checkVersion, isAppIntegrationsVersionSupported, isGenerationResumable, isSecretsFilterModeConfigurable, stripSecfixPostfix, VersionCheckOperator, } from './utils/versionCheck.utils.js';
 export { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js';
 export type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js';
 export { augmentCamundiPermissions, getApplicableRolesForEmployee, isManager, } from './utils/camundiPermissionAugmenter.utils.js';

package/dist/index.js

@@ -60,10 +60,17 @@ import {
   NEW_CLUSTER_ROLES_MIN_VERSION,
   OPTIMIZE_DEFAULT_ON_MIN_VERSION,
   OPTIMIZE_FILTERING_MIN_VERSION,
+  OPTIONAL_TELEMETRY_MIN_VERSION,
   RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,
   REST_API_URL_TRANSFORM_MIN_VERSION,
   REST_API_V2_MIN_VERSION,
+  RESUME_ALPHA_MIN_VERSION,
   SECRET_SOURCE_MIN_VERSION,
+  SECRETS_FILTER_MODE_8_6_MIN_VERSION,
+  SECRETS_FILTER_MODE_8_7_MIN_VERSION,
+  SECRETS_FILTER_MODE_8_8_MIN_VERSION,
+  SECRETS_FILTER_MODE_8_9_MIN_VERSION,
+  SECRETS_FILTER_MODE_8_10_MIN_VERSION,
   SESSION_CONFIG_MIN_VERSION,
   SWAGGER_MIN_VERSION,
   SWAGGER_URL_8_9_MIN_VERSION,
@@ -227,6 +234,10 @@ import {
   getCloudProviderLabel,
   getCloudProviderRank
 } from "./utils/cloudProvider.utils.js";
+import {
+  deriveConnectivityMessage,
+  deriveConnectivityStatus
+} from "./utils/connectivityStatus.utils.js";
 import { ConsoleSelfManagedUtils } from "./utils/console-sm.utils.js";
 import {
   BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,
@@ -260,6 +271,9 @@ import {
 } from "./utils/kmsArn.utils.js";
 import { validateLabels } from "./utils/labelValidator.utils.js";
 import { ObjectMergeUtils } from "./utils/objectMerge.utils.js";
+import {
+  computeOrgStartDate
+} from "./utils/orgStartDate.utils.js";
 import {
   getPermissionsByRoles,
   getUserPermissionsForOrg
@@ -269,6 +283,9 @@ import {
   MINLENGTH,
   passwordPolicyCheck
 } from "./utils/PasswordPolicy.js";
+import {
+  deriveSecondaryStorageStatus
+} from "./utils/secondaryStorageStatus.utils.js";
 import {
   allSettledResultsCounts,
   getFulfilledPromises,
@@ -292,6 +309,9 @@ import {
 import {
   checkVersion,
   isAppIntegrationsVersionSupported,
+  isGenerationResumable,
+  isSecretsFilterModeConfigurable,
+  stripSecfixPostfix,
   VersionCheckOperator
 } from "./utils/versionCheck.utils.js";
 import { default as default2 } from "./config/camundi-permission-rules.js";
@@ -398,6 +418,7 @@ export {
   OPTIMIZE_DEFAULT_ON_MIN_VERSION,
   OPTIMIZE_DISABLED_PLAN_TYPES,
   OPTIMIZE_FILTERING_MIN_VERSION,
+  OPTIONAL_TELEMETRY_MIN_VERSION,
   ORGANIZATION_SEARCH_FIELDS,
   ORG_DEFAULT_SEARCH_FIELDS,
   ObjectMergeUtils,
@@ -415,11 +436,17 @@ export {
   RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,
   REST_API_URL_TRANSFORM_MIN_VERSION,
   REST_API_V2_MIN_VERSION,
+  RESUME_ALPHA_MIN_VERSION,
   RETENTION_LIMIT_DEFAULT,
   RETENTION_LIMIT_MAXIMUM,
   RETENTION_LIMIT_MINIMUM,
   SAFE_ROLES,
   SECOND,
+  SECRETS_FILTER_MODE_8_10_MIN_VERSION,
+  SECRETS_FILTER_MODE_8_6_MIN_VERSION,
+  SECRETS_FILTER_MODE_8_7_MIN_VERSION,
+  SECRETS_FILTER_MODE_8_8_MIN_VERSION,
+  SECRETS_FILTER_MODE_8_9_MIN_VERSION,
   SECRETS_MAX_LENGTH,
   SECRET_SOURCE_MIN_VERSION,
   SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT,
@@ -464,10 +491,14 @@ export {
   augmentCamundiPermissions,
   checkVersion,
   compileQuery,
+  computeOrgStartDate,
   consoleUserFeaturesFromPermissions,
   deprecatedLimit,
+  deriveConnectivityMessage,
+  deriveConnectivityStatus,
   deriveEncryptionStatus,
   deriveFailoverKeyPolicyPrincipals,
+  deriveSecondaryStorageStatus,
   diffInWholeMonths,
   enterpriseConnectionMetadataToOrganizationAssignments,
   expandRolesToPermissions,
@@ -500,11 +531,13 @@ export {
   isClusterPlanFieldSpec,
   isClusterTagEligibleForSleepCron,
   isEncryptionStatus,
+  isGenerationResumable,
   isIsBulkClusterGenerationUpdateIten,
   isLuceneQueryError,
   isManager,
   isPre89AffectedPath,
   isSalesPlanEligibleForSleepCron,
+  isSecretsFilterModeConfigurable,
   isSleepCronEligible,
   isSupportedFailoverRegionPair,
   isValidAwsArn,
@@ -525,6 +558,7 @@ export {
   sortByAvailabilityClasses,
   sortByClusterPlanTypeCategory,
   sortGenerationBySemverOfZeebe,
+  stripSecfixPostfix,
   toUtcDayStartMs,
   unusedClusterBasedLimits,
   unusedSalesPlanLimits,