@camunda/ccma-shared-types 0.7.0 → 1.1.0

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/index.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Constants (runtime values)\n// ============================================================================\n\nexport { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js'\nexport {\n  isSupportedFailoverRegionPair,\n  SUPPORTED_FAILOVER_REGION_PAIRS,\n} from './constants/failoverRegionPairs.const.js'\nexport type { Stage } from './constants/misc.const.js'\nexport {\n  CONSOLE_API_USER_ID,\n  FIRSTNAME_LASTNAME_MAX_LENGTH,\n  HOTBACKUP_MIN_CREATE_PERIOD,\n  MAX_HARDWARE_PACKAGE_COUNT,\n  MAX_LENGTH_CLUSTER_NAME,\n  MINIMUM_EYEPAIRS,\n  NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,\n  SECRETS_MAX_LENGTH,\n  STARTING_PRICE_PER_MONTH_IN_EURO,\n  TEMPORARY_CLUSTER_NAME,\n} from './constants/misc.const.js'\nexport {\n  getGatewayPropertyHint,\n  getGatewayPropertyPath,\n  isAffectedByStreamlinedDeployment,\n  isPre89AffectedPath,\n  PRE89_AFFECTED_PATHS,\n  PRE89_AFFECTED_PROPERTY_PREFIXES,\n  PRE89_GATEWAY_PROPERTY_PATHS,\n  PRE89_GATEWAY_RESOURCE_PREFIXES,\n} from './constants/pre89EnvVarMapping.const.js'\nexport { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js'\nexport { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js'\nexport type {\n  TrialExtensionSurveyAnswer,\n  TrialExtensionSurveyQuestion,\n} from './constants/trialExtensionSurvey.const.js'\nexport { TRIAL_EXTENSION_SURVEY_QUESTIONS } from './constants/trialExtensionSurvey.const.js'\nexport {\n  ADMIN_APP_RENAME_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_MINOR,\n  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,\n  APP_INTEGRATIONS_MIN_VERSION,\n  AUDIT_LOG_TAB_MIN_VERSION,\n  AUTHORIZATION_TOGGLE_MIN_VERSION,\n  AWS_ONLY_GENERATION_MIN_VERSION,\n  BUSINESS_ID_UNIQUENESS_MIN_VERSION,\n  BYOIDP_MIN_VERSION,\n  CLUSTER_SECRETS_LABEL_MIN_VERSION,\n  CLUSTER_STATISTICS_CONFIG_MIN_VERSION,\n  CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION,\n  CONNECTOR_SECRET_SYNC_MIN_VERSION,\n  CONNECTORS_MANAGEMENT_LINK_MIN_VERSION,\n  ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION,\n  ENFORCE_GROUPS_TOGGLE_MIN_VERSION,\n  GATEWAY_SPEC_8_9_MIN_VERSION,\n  HOT_BACKUP_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION,\n  IDENTITY_MANAGEMENT_MIN_VERSION,\n  INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION,\n  JOB_DASHBOARD_MIN_VERSION,\n  LINE_8_9_MIN_VERSION,\n  LINE_8_10_MIN_VERSION,\n  MCP_MIN_VERSION,\n  MULTI_TENANCY_TOGGLE_MIN_VERSION,\n  NEW_CLUSTER_ROLES_MIN_VERSION,\n  OPTIMIZE_DEFAULT_ON_MIN_VERSION,\n  OPTIMIZE_FILTERING_MIN_VERSION,\n  RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,\n  REST_API_URL_TRANSFORM_MIN_VERSION,\n  REST_API_V2_MIN_VERSION,\n  SECRET_SOURCE_MIN_VERSION,\n  SESSION_CONFIG_MIN_VERSION,\n  SWAGGER_MIN_VERSION,\n  SWAGGER_URL_8_9_MIN_VERSION,\n  TASKLIST_MODE_TOGGLE_MIN_VERSION,\n  TASKLIST_UPGRADE_BANNER_MIN_VERSION,\n  TASKLIST_V2_AUTO_ENABLE_FROM_MINOR,\n  TASKLIST_V2_AUTO_ENABLE_TO_MINOR,\n  TASKLIST_V2_DEFAULT_ON_MIN_VERSION,\n  TASKLIST_V2_SETTING_MAX_VERSION,\n  TASKLIST_V2_UPGRADE_MIN_VERSION,\n  TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION,\n  ZEEBE_REST_URL_MIN_VERSION,\n} from './constants/version-gates.const.js'\n\n// ============================================================================\n// DTOs - Types (interfaces and type aliases)\n// ============================================================================\n\nexport type {\n  ALERT_SUBSCRIPTION_REPORT_TYPES,\n  ALERT_SUBSCRIPTION_TYPES,\n  AlertSubscriptionDto,\n  AlertSubscriptionEntryDto,\n  AlertSubscriptionWebhookAuth,\n  CheckFailedReason,\n} from './dtos/AlertSubscription.dto.js'\n\n// DTOs - Values (constants)\nexport {\n  FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,\n  HMAC_HEADER_POSITION,\n  HMAC_SUPPORTED_ALGORITHM,\n} from './dtos/AlertSubscription.dto.js'\n\nexport type { AuditDto } from './dtos/Audit.dto.js'\nexport type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js'\nexport type { BackupDto } from './dtos/Backup.dto.js'\nexport type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js'\nexport type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js'\nexport type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js'\nexport type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js'\nexport type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js'\nexport type {\n  ClusterSpecChange,\n  ClusterSpecChangeActor,\n  ClusterSpecHistory,\n} from './dtos/ClusterSpecHistory.dto.js'\nexport type {\n  CommonClusterDto,\n  ExternalIdpConfig,\n  OptimizeFilteringConfig,\n  OptimizeFilteringIncludeExclude,\n  OptimizeFilteringPatch,\n} from './dtos/CommonCluster.dto.js'\nexport type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js'\nexport type {\n  ClusterByClientV2Dto,\n  ClusterDatacenterOptionV2Dto,\n  ClusterDetailV2Dto,\n  ClusterFacetsV2Dto,\n  ClusterListItemV2Dto,\n  ClusterParameterOptionV2Dto,\n  ClusterParametersV2Dto,\n  ControlResolvedPermissions,\n  ControlSessionDto,\n  ControlSessionUser,\n  CursorPage,\n  CursorParams,\n  ListClustersV2Params,\n  ListOrganizationsV2Params,\n  ListOrgMembersV2Params,\n  OrgDetailV2Dto,\n  OrgListItemV2Dto,\n  OrgMemberV2Dto,\n  OrgSummaryV2Dto,\n} from './dtos/ControlV2.dto.js'\nexport type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js'\nexport type {\n  CamundaWebApp,\n  CamundaWebAppWithZeebe,\n  ExternalClusterDto,\n  ExternalOrganizationDto,\n} from './dtos/ExternalWebapp.dto.js'\n// Functions\nexport {\n  type GenerationDto,\n  type GenerationWithClusterCountDto,\n  sortGenerationBySemverOfZeebe,\n  type UpgradableGenerationsDto,\n} from './dtos/Generations.dto.js'\n// Namespace (type-only - contains only interfaces)\nexport type { Hdp } from './dtos/Hdp.dto.js'\nexport type {\n  K8sConfig,\n  K8sConfigLegacyFormat,\n  K8sContext,\n  K8sContextDto,\n} from './dtos/K8sContext.dto.js'\nexport type { MetaDto } from './dtos/Meta.dto.js'\nexport type {\n  AutoJoinAssignment,\n  LicensingModelType,\n  OrganizationDto,\n  OrganizationMetadata,\n  OrgOwner,\n  OrgWithNameAndSalesPlan,\n} from './dtos/Organization.dto.js'\nexport {\n  LICENSING_MODEL_DISPLAY_NAMES,\n  VALID_LICENSING_MODELS,\n} from './dtos/Organization.dto.js'\nexport type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js'\nexport type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js'\nexport type {\n  ReleaseTrainSanityReport,\n  SanityFix,\n  SanityRuleInfo,\n  SanitySeverity,\n  SanityViolation,\n} from './dtos/ReleaseTrainSanity.dto.js'\nexport type { RestoreDto, RestoreState } from './dtos/Restore.dto.js'\n// SalesPlan.dto - Types\nexport type {\n  ClusterLimits,\n  ConsumptionDataItem,\n  Limits,\n  SalesPlanDto,\n  SalesPlanMetadata,\n} from './dtos/SalesPlan.dto.js'\n// SalesPlan.dto - Values (constants and functions)\nexport {\n  allClusterBasedLimits,\n  allSalesPlanLimits,\n  deprecatedLimit,\n  MAX_CLUSTER_CLIENTS_DEFAULT,\n  MAX_CLUSTER_CLIENTS_DEV,\n  RETENTION_LIMIT_DEFAULT,\n  RETENTION_LIMIT_MAXIMUM,\n  RETENTION_LIMIT_MINIMUM,\n  unusedClusterBasedLimits,\n  unusedSalesPlanLimits,\n} from './dtos/SalesPlan.dto.js'\nexport type { SecureConnectivityDto } from './dtos/SecureConnectivity.dto.js'\nexport type { SignupDto } from './dtos/Signup.dto.js'\nexport type {\n  StorybookConfig,\n  StorybookConfigBackup,\n  StorybookConfigChannel,\n  StorybookConfigDatacenter,\n  StorybookConfigGeneration,\n} from './dtos/StorybookConfig.dto.js'\nexport type { SystemAuditDto } from './dtos/SystemAudit.dto.js'\n// UsageAlert.dto - Types\nexport type { UsageAlertDto } from './dtos/UsageAlert.dto.js'\n// UsageAlert.dto - Values (enum and constants)\nexport {\n  UsageAlertInitValues,\n  UsageAlertMetric,\n  UsageAlertThresholdLimits,\n} from './dtos/UsageAlert.dto.js'\nexport type { UserMetaDataDto } from './dtos/UserMetaData.dto.js'\n// Lucene-style table search (parser + AST \u2192 SQL compiler + field registries).\nexport {\n  type AndNode,\n  CLUSTER_DEFAULT_SEARCH_FIELDS,\n  CLUSTER_SEARCH_FIELDS,\n  type CompileContext,\n  type CompiledQuery,\n  compileQuery,\n  type FieldBinding,\n  findSearchField,\n  isLuceneQueryError,\n  LuceneQueryError,\n  likeArgument,\n  type NotNode,\n  ORG_DEFAULT_SEARCH_FIELDS,\n  ORGANIZATION_SEARCH_FIELDS,\n  type OrNode,\n  parseLuceneQuery,\n  type QueryNode,\n  type RangeNode,\n  type SearchFieldCapability,\n  type SearchFieldSpec,\n  type SearchFieldType,\n  type SearchTermOperator,\n  type TermNode,\n} from './search/index.js'\n\n// ============================================================================\n// Enums (runtime values)\n// ============================================================================\n\nexport {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from './enums/AlertSubscription.enum.js'\nexport { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js'\nexport { AuditService } from './enums/AuditService.enum.js'\nexport { BackupStatus } from './enums/BackupStatus.enum.js'\nexport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from './enums/ClusterBulkOperation.enum.js'\nexport { ClusterClientPermission } from './enums/ClusterClientPermissions.enum.js'\nexport { ClusterEncryptionKey } from './enums/ClusterEncryptionKey.enum.js'\nexport { ClusterStatus } from './enums/ClusterStatus.enum.js'\nexport { ConsoleAPIClientPermission } from './enums/ConsoleApiClientPermission.enum.js'\nexport { ErrorType } from './enums/ErrorType.enum.js'\nexport type {\n  AssignableOrganizationRoleType,\n  OrganizationRoleType,\n  UnassignableOrganizationRoleType,\n} from './enums/OrganizationRole.enum.js'\nexport {\n  AssignableOrganizationRole,\n  LegacyHeldOrganizationRole,\n  OrganizationRole,\n  UnassignableOrganizationRole,\n} from './enums/OrganizationRole.enum.js'\nexport { SseEntity, SseType } from './enums/Sse.enum.js'\nexport {\n  SystemAuditEntity,\n  SystemAuditEntityAttribute,\n} from './enums/SystemAuditEntity.enum.js'\n\n// ============================================================================\n// Permissions - Namespaces (runtime values)\n// ============================================================================\n\nexport { AccountsPermissions } from './permissions/accounts.permissions.js'\nexport { AlertDistributorPermissions } from './permissions/alert-distributor.permissions.js'\nexport { AuditLoggerPermissions } from './permissions/auditlogger.permissions.js'\nexport {\n  accountsUserFeaturesFromPermissions,\n  consoleUserFeaturesFromPermissions,\n} from './permissions/combo.js'\nexport { ConsolePermissions } from './permissions/console.permissions.js'\nexport { NotificationPermissions } from './permissions/notification.permissions.js'\n// profile.permissions - Types\nexport type { OnboardConfig } from './permissions/profile.permissions.js'\n// profile.permissions - Values (constants)\n// NOTE: the `allowed` email lists (CLOUD_TEAM_EMAILS, SRE_TEAM_EMAILS, etc.)\n// intentionally live in the private `@camunda-cloud/shared-backend` package\n// instead of here, since this package is published publicly to npm.\nexport { PROFILES } from './permissions/profile.permissions.js'\nexport { expandRolesToPermissions } from './permissions/roleExpansion.utils.js'\n\n// ============================================================================\n// Types - Type-only exports (interfaces and type aliases)\n// ============================================================================\n\nexport type { AuditData } from './types/AuditData.type.js'\n// AutoSleep.type - Types\nexport type {\n  ActivitySleepEligibilityOptions,\n  SleepCronEligibilityOptions,\n} from './types/AutoSleep.type.js'\n// AutoSleep.type - Values (constants and functions)\nexport {\n  INTERNAL_LOW_HARDWARE_PLAN_NAME,\n  isActivitySleepEligible,\n  isClusterTagEligibleForSleepCron,\n  isSalesPlanEligibleForSleepCron,\n  isSleepCronEligible,\n  SLEEP_CRON_ELIGIBLE_TAGS,\n} from './types/AutoSleep.type.js'\nexport type {\n  BotContext,\n  BotOptions,\n  BotRequest,\n  GetUserDetailsResponse,\n  ListRolesForUserResponse,\n  UpdateUserRolesRequest,\n  UpdateUserRolesResponse,\n  UserContext,\n  UserDetails,\n} from './types/Bot.types.js'\n// BulkOperation.type - Types\nexport type {\n  BulkClusterDeletionContent,\n  BulkClusterDeletionItem,\n  BulkClusterGenerationUpdateItem,\n  BulkClusterPlanTypeUpdateContent,\n  BulkClusterPlanTypeUpdateItem,\n  BulkClusterPlanUpdateContent,\n  BulkClusterPlanUpdateItem,\n  BulkGenerationUpdateContent,\n  GenericBulkClusterOperationContent,\n  GenericBulkOperationContent,\n  GenericClusterBulkOperationItem,\n} from './types/BulkOperation.type.js'\n// BulkOperation.type - Functions (type guards)\nexport {\n  isBulkClusterDeletionItem,\n  isBulkClusterPlanTypeUpdateItem,\n  isBulkClusterPlanUpdateItem,\n  isIsBulkClusterGenerationUpdateIten,\n} from './types/BulkOperation.type.js'\n// C8ClusterComponentVersions.type - Types\nexport type {\n  ImmutableZeebeClusterVersionsDto,\n  MutableZeebeClusterVersionsDto,\n  ZeebeClusterVersionsDto,\n} from './types/C8ClusterComponentVersions.type.js'\n// C8ClusterComponentVersions.type - Values (constants)\nexport {\n  AllThings,\n  ImmutableThings,\n  MutableThings,\n} from './types/C8ClusterComponentVersions.type.js'\n// CamundaClusterLabels.type - Types\nexport type {\n  CamundaClusterStage,\n  CamundaClusterStageLabel,\n  ClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// CamundaClusterLabels.type - Values (constants)\nexport {\n  ALLOWED_CAMUNDA_LABELS,\n  StageClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// Chargebee.type - Types\nexport type { SubscriptionItem } from './types/Chargebee.type.js'\n// Chargebee.type - Values (enums)\nexport { ConsumptionData, ConsumptionDataType } from './types/Chargebee.type.js'\n// ClusterBulkOperation.type - Types\nexport type {\n  ClusterBulkOperationAck,\n  ClusterBulkOperationClusterDto,\n  ClusterBulkOperationContent,\n  ClusterBulkOperationDto,\n  ClusterBulkOperationGenerationUpdateParameter,\n  ClusterBulkOperationParameter,\n  ClusterBulkOperationPlanTypeUpdateParameter,\n  ClusterBulkOperationPlanUpdateParameter,\n  ClusterBulkOperationPostContent,\n  ClusterSleepWakeupParameter,\n} from './types/ClusterBulkOperation.type.js'\nexport type {\n  ClusterModificationConfigDto,\n  ClusterModificationDto,\n} from './types/ClusterModification.type.js'\n// ClusterPlanFields.type - Values (field spec and type guard)\nexport {\n  CLUSTER_PLAN_FIELDS,\n  type ClusterPlanFieldSpec,\n  type ClusterPlanFieldTree,\n  isClusterPlanFieldSpec,\n} from './types/ClusterPlanFields.type.js'\nexport type {\n  ClusterPlanModificationAck,\n  ClusterPlanModificationConfig,\n  ClusterPlanModificationDto,\n} from './types/ClusterPlanModification.type.js'\n// ClusterPlanTypeAvailabilityClass.type - Values (enum and function)\nexport {\n  ClusterPlanTypeAvailabilityClass,\n  sortByAvailabilityClasses,\n} from './types/ClusterPlanTypeAvailabilityClass.type.js'\n// ClusterPlanTypeCategory.type - Values (enum and functions)\nexport {\n  ClusterPlanTypeCategory,\n  hasAvailabilityClass,\n  sortByClusterPlanTypeCategory,\n} from './types/ClusterPlanTypeCategory.type.js'\nexport type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js'\nexport type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js'\nexport type {\n  ClusterUsageDataRequest,\n  ClusterUsageMetricsAddRequestByMetricHeap,\n  ClusterUsageMetricsData,\n  ClusterUsageMetricsFilter,\n  ClusterUsageOrgStartDate,\n} from './types/ClusterUsageMetrics.type.js'\n// Namespace with runtime values (consts, functions, enums)\nexport { ConsoleSM } from './types/ConsoleSelfManaged.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { ConsoleSMAdminApi } from './types/ConsoleSelfManagedAdminApi.type.js'\n// Dashboard.types - Types\nexport type {\n  DashboardConfig,\n  DashboardMappingItem,\n  DashboardMappingTarget,\n  DashboardResultPrimitive,\n  DashboardResultRow,\n  EngineeringOperationsDashboardResponse,\n} from './types/Dashboard.types.js'\nexport type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js'\nexport type {\n  HdpTenantUsageBreakdown,\n  HdpTenantUsagePerClusterPoint,\n  HdpTenantUsagePoint,\n} from './types/HdpTenantUsage.type.js'\n// hdp.types - Types (interfaces)\nexport type {\n  AlertSubscription as HdpAlertSubscription,\n  Audit as HdpAudit,\n  ByomClient as HdpByomClient,\n  Channel as HdpChannel,\n  Cluster as HdpCluster,\n  ClusterBackup as HdpClusterBackup,\n  ClusterBackupSchedule as HdpClusterBackupSchedule,\n  ClusterBulkOperation as HdpClusterBulkOperation,\n  ClusterClient as HdpClusterClient,\n  ClusterModification as HdpClusterModification,\n  ClusterPlan as HdpClusterPlan,\n  ClusterPlanType as HdpClusterPlanType,\n  ConnectorSecret as HdpConnectorSecret,\n  ConsoleApiClient as HdpConsoleApiClient,\n  Datacenter as HdpDatacenter,\n  Generation as HdpGeneration,\n  HdpBackendChangeEvent,\n  HdpClusterModificationConfig,\n  HdpEntity,\n  HdpPrometheusDataCapacityDataPoint,\n  Invite as HdpInvite,\n  LlmSpend as HdpLlmSpend,\n  Organization as HdpOrganization,\n  SecureConnectivity as HdpSecureConnectivity,\n  SystemAudit as HdpSystemAudit,\n  TelemetryData as HdpTelemetryData,\n  UsageAlert as HdpUsageAlert,\n  User as HdpUser,\n  UserLogin as HdpUserLogin,\n} from './types/hdp.types.js'\n// hdp.types - Values (enums)\nexport {\n  AlertSubscriptionReportType as HdpAlertSubscriptionReportType,\n  AlertSubscriptionType as HdpAlertSubscriptionType,\n} from './types/hdp.types.js'\n// notification.type - Types\nexport type {\n  GlobalNotification,\n  NotificationDto,\n  NotificationMeta,\n  NotificationOptions,\n  NotificationPermission,\n  NotificationSource,\n  NotificationState,\n  NotificationType,\n  OrgNotification,\n  UserNotification,\n  UserOrgNotification,\n} from './types/notification.type.js'\n// notification.type - Values (enums and constants)\nexport {\n  NotificationPermissionValues,\n  NotificationSourceEnum,\n  NotificationStateEnum,\n  NotificationTypeEnum,\n} from './types/notification.type.js'\n// OrganizationPermission.type - Types\nexport type {\n  CreateReadUpdateDelete,\n  OrganizationPermissions,\n} from './types/OrganizationPermission.type.js'\n// OrganizationPermission.type - Values (constants)\nexport {\n  OrganizationPermissionsDescriptions,\n  PermissionsForOrganizationRole,\n} from './types/OrganizationPermission.type.js'\n// Roles.js - Types\nexport type {\n  AccountRoles,\n  ConsoleRoles,\n  ModelerRoles,\n  Roles,\n} from './types/Roles.js'\n// Roles.js - Values (constants)\nexport { SAFE_ROLES } from './types/Roles.js'\n// SalesPlanType.type - Types\nexport type {\n  DisplayedSalesPlan,\n  RevisitedSalesPlanName,\n} from './types/SalesPlanType.type.js'\n// SalesPlanType.type - Values (enums and functions)\nexport {\n  AnalyticsSalesPlanType,\n  getAnalyticsSalesPlanFromOrgSalesPlan,\n  getDisplayedSalesPlan,\n  getRevisitedSalesPlanName,\n  OPTIMIZE_DISABLED_PLAN_TYPES,\n  SalesPlanType,\n} from './types/SalesPlanType.type.js'\n// SpamDetection.type - Types\nexport type { SpamDetectionPatterns } from './types/SpamDetection.type.js'\n// SpamDetection.type - Values (constants)\nexport { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js'\nexport type {\n  AlertSubscriptionSseEvent,\n  BackupSseEvent,\n  ClusterClientSseEvent,\n  ClusterSseEvent,\n  ConnectorSecretsSseEvent,\n  ConsoleApiClientSseEvent,\n  ConsoleSseEvent,\n  MonitoringSseEvent,\n  SecureConnectivitySseEvent,\n  SseClusterPayload,\n  SseMonitoringPayload,\n  SseSecureConnectivityPayload,\n} from './types/SseEvent.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { AccountsStats } from './types/Stats.types.js'\n// Survey.type - Types\nexport type { Persona, SurveyDto } from './types/Survey.type.js'\n// Survey.type - Values (enum)\nexport { FeedbackType } from './types/Survey.type.js'\n// SuspendStrategy.type - Types\nexport type {\n  GetSuspendStrategyOptions,\n  SuspendStrategy,\n} from './types/SuspendStrategy.type.js'\n// SuspendStrategy.type - Values (function)\nexport { getSuspendStrategy } from './types/SuspendStrategy.type.js'\nexport type { SystemAuditData } from './types/SystemAuditData.type.js'\n\n// Namespace (runtime value)\nexport { Telemetry } from './types/Telemetry.type.js'\n\n// TrialManagement.types - Types\nexport type {\n  ExtensionListItem,\n  ExtensionListResponse,\n  OrgTrialDetail,\n  TrialExtensionSource,\n  TrialManagementStats,\n} from './types/TrialManagement.types.js'\n\n// User.type - Types\nexport type {\n  AccountsData,\n  AppMetadata,\n  BasicUser,\n  BlockedFor,\n  Identity,\n  OrgMembership,\n  User,\n  UserMetadata,\n  UserRequest,\n} from './types/User.type.js'\n\n// User.type - Values (enum)\nexport { UserMetadataEvent } from './types/User.type.js'\n\nexport type {\n  UniqueTaskUser,\n  ValueMetrics,\n  ValueMetricsPerYearMonth,\n} from './types/ValueMetrics.type.js'\n\n// ============================================================================\n// Utils - Classes (runtime values)\n// ============================================================================\n\nexport {\n  CLOUD_PROVIDER_ORDER,\n  getCloudProviderLabel,\n  getCloudProviderRank,\n} from './utils/cloudProvider.utils.js'\nexport { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js'\nexport type {\n  CronScheduleValidationFailure,\n  CronScheduleValidationResult,\n  CronScheduleValidationSuccess,\n} from './utils/cronSchedule.utils.js'\nexport {\n  BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,\n  validateCronSchedule,\n} from './utils/cronSchedule.utils.js'\nexport {\n  deriveEncryptionStatus,\n  type EncryptionStatus,\n  isEncryptionStatus,\n} from './utils/encryptionStatus.utils.js'\n// enterprise-connection.utils - Types\nexport type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js'\n// enterprise-connection.utils - Values (functions)\nexport {\n  enterpriseConnectionMetadataToOrganizationAssignments,\n  organizationAssignmentsToEnterpriseConnectionMetadata,\n} from './utils/enterprise-connection.utils.js'\nexport {\n  addMonthsClamped,\n  DEFAULT_ENTERPRISE_DURATION_IN_MONTHS,\n  diffInWholeMonths,\n  type EnterpriseTermWindow,\n  getCurrentEnterpriseTerm,\n  peakWithinTerm,\n  toUtcDayStartMs,\n} from './utils/enterpriseTerm.utils.js'\nexport type { EnvVarEntry } from './utils/envVars.js'\nexport { parseEnvVars, serializeEnvVars } from './utils/envVars.js'\nexport {\n  deriveFailoverKeyPolicyPrincipals,\n  type FailoverKeyPolicyPrincipals,\n} from './utils/failoverKeyPolicy.utils.js'\nexport {\n  KMS_ARN,\n  KMS_MRK_ARN,\n  type KmsArnValidationError,\n  type ParsedKmsArn,\n  parseKmsArn,\n  validateKmsArnForRegion,\n} from './utils/kmsArn.utils.js'\nexport { validateLabels } from './utils/labelValidator.utils.js'\nexport { ObjectMergeUtils } from './utils/objectMerge.utils.js'\nexport {\n  getPermissionsByRoles,\n  getUserPermissionsForOrg,\n} from './utils/orgs/OrgHelper.js'\n\n// PasswordPolicy - Types\nexport type {\n  PasswordPolicyRequest,\n  PasswordPolicyResult,\n} from './utils/PasswordPolicy.js'\n\n// PasswordPolicy - Values (constants and function)\nexport {\n  MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,\n  MINLENGTH as PASSWORD_POLICY_MINLENGTH,\n  passwordPolicyCheck,\n} from './utils/PasswordPolicy.js'\n\nexport {\n  allSettledResultsCounts,\n  getFulfilledPromises,\n  getRejectedPromises,\n  getSettledSummary,\n} from './utils/settledPromises.util.js'\n\nexport {\n  isValidAwsArn,\n  isValidCIDR,\n  isValidCIDRList,\n  isValidClientName,\n  isValidHostname,\n  isValidPrivateLinkRegion,\n  normalizeCIDRList,\n} from './utils/string-validation.utils.js'\nexport {\n  extractCamundaUserEmail,\n  guessName,\n  isCamundaUserId,\n} from './utils/user.utils.js'\n\n// versionCheck.utils - Values (enum and function)\nexport {\n  checkVersion,\n  isAppIntegrationsVersionSupported,\n  VersionCheckOperator,\n} from './utils/versionCheck.utils.js'\n\n// ============================================================================\n// Config - Configuration files and types\n// ============================================================================\n\nexport { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js'\nexport type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js'\n\nexport {\n  augmentCamundiPermissions,\n  getApplicableRolesForEmployee,\n  isManager,\n} from './utils/camundiPermissionAugmenter.utils.js'\n"],
-  "mappings": "AAUA,SAAS,KAAK,MAAM,QAAQ,QAAQ,YAAY;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,iDAAiD;AAK1D,SAAS,wCAAwC;AACjD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAoDP;AAAA,EAGE;AAAA,OAEK;AAkBP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAoBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EAEE;AAAA,EACA;AAAA,EAGA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,OAQK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,4BAA4B;AAClD,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC;AAC3C,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,eAAe;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AAC5C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAOxC,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AAazC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,SAAS,iBAAiB,2BAA2B;AAmBrD;AAAA,EACE;AAAA,EAGA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,SAAS,iBAAiB;AAmD1B;AAAA,EACiC,+BAA/BA;AAAA,EACyB,yBAAzBC;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB;AAO3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,0BAA0B;AAoBnC,SAAS,oBAAoB;AAO7B,SAAS,0BAA0B;AAInC,SAAS,iBAAiB;AAyB1B,SAAS,yBAAyB;AAYlC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAMxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,cAAc,wBAAwB;AAC/C;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACe;AAAA,EACA;AAAA,EACb;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,SAAoB,WAAXC,gBAA2C;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Constants (runtime values)\n// ============================================================================\n\nexport { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js'\nexport {\n  isSupportedFailoverRegionPair,\n  SUPPORTED_FAILOVER_REGION_PAIRS,\n} from './constants/failoverRegionPairs.const.js'\nexport type { Stage } from './constants/misc.const.js'\nexport {\n  CONSOLE_API_USER_ID,\n  FIRSTNAME_LASTNAME_MAX_LENGTH,\n  HOTBACKUP_MIN_CREATE_PERIOD,\n  MAX_HARDWARE_PACKAGE_COUNT,\n  MAX_LENGTH_CLUSTER_NAME,\n  MINIMUM_EYEPAIRS,\n  NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,\n  SECRETS_MAX_LENGTH,\n  STARTING_PRICE_PER_MONTH_IN_EURO,\n  TEMPORARY_CLUSTER_NAME,\n} from './constants/misc.const.js'\nexport {\n  getGatewayPropertyHint,\n  getGatewayPropertyPath,\n  isAffectedByStreamlinedDeployment,\n  isPre89AffectedPath,\n  PRE89_AFFECTED_PATHS,\n  PRE89_AFFECTED_PROPERTY_PREFIXES,\n  PRE89_GATEWAY_PROPERTY_PATHS,\n  PRE89_GATEWAY_RESOURCE_PREFIXES,\n} from './constants/pre89EnvVarMapping.const.js'\nexport { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js'\nexport { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js'\nexport type {\n  TrialExtensionSurveyAnswer,\n  TrialExtensionSurveyQuestion,\n} from './constants/trialExtensionSurvey.const.js'\nexport { TRIAL_EXTENSION_SURVEY_QUESTIONS } from './constants/trialExtensionSurvey.const.js'\nexport {\n  ADMIN_APP_RENAME_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_MINOR,\n  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,\n  APP_INTEGRATIONS_MIN_VERSION,\n  AUDIT_LOG_TAB_MIN_VERSION,\n  AUTHORIZATION_TOGGLE_MIN_VERSION,\n  AWS_ONLY_GENERATION_MIN_VERSION,\n  BUSINESS_ID_UNIQUENESS_MIN_VERSION,\n  BYOIDP_MIN_VERSION,\n  CLUSTER_SECRETS_LABEL_MIN_VERSION,\n  CLUSTER_STATISTICS_CONFIG_MIN_VERSION,\n  CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION,\n  CONNECTOR_SECRET_SYNC_MIN_VERSION,\n  CONNECTORS_MANAGEMENT_LINK_MIN_VERSION,\n  ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION,\n  ENFORCE_GROUPS_TOGGLE_MIN_VERSION,\n  GATEWAY_SPEC_8_9_MIN_VERSION,\n  HOT_BACKUP_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION,\n  IDENTITY_MANAGEMENT_MIN_VERSION,\n  INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION,\n  JOB_DASHBOARD_MIN_VERSION,\n  LINE_8_9_MIN_VERSION,\n  LINE_8_10_MIN_VERSION,\n  MCP_MIN_VERSION,\n  MULTI_TENANCY_TOGGLE_MIN_VERSION,\n  NEW_CLUSTER_ROLES_MIN_VERSION,\n  OPTIMIZE_DEFAULT_ON_MIN_VERSION,\n  OPTIMIZE_FILTERING_MIN_VERSION,\n  OPTIONAL_TELEMETRY_MIN_VERSION,\n  RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,\n  REST_API_URL_TRANSFORM_MIN_VERSION,\n  REST_API_V2_MIN_VERSION,\n  RESUME_ALPHA_MIN_VERSION,\n  SECRET_SOURCE_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_6_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_7_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_8_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_9_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_10_MIN_VERSION,\n  SESSION_CONFIG_MIN_VERSION,\n  SWAGGER_MIN_VERSION,\n  SWAGGER_URL_8_9_MIN_VERSION,\n  TASKLIST_MODE_TOGGLE_MIN_VERSION,\n  TASKLIST_UPGRADE_BANNER_MIN_VERSION,\n  TASKLIST_V2_AUTO_ENABLE_FROM_MINOR,\n  TASKLIST_V2_AUTO_ENABLE_TO_MINOR,\n  TASKLIST_V2_DEFAULT_ON_MIN_VERSION,\n  TASKLIST_V2_SETTING_MAX_VERSION,\n  TASKLIST_V2_UPGRADE_MIN_VERSION,\n  TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION,\n  ZEEBE_REST_URL_MIN_VERSION,\n} from './constants/version-gates.const.js'\n\n// ============================================================================\n// DTOs - Types (interfaces and type aliases)\n// ============================================================================\n\nexport type {\n  ALERT_SUBSCRIPTION_REPORT_TYPES,\n  ALERT_SUBSCRIPTION_TYPES,\n  AlertSubscriptionDto,\n  AlertSubscriptionEntryDto,\n  AlertSubscriptionWebhookAuth,\n  CheckFailedReason,\n} from './dtos/AlertSubscription.dto.js'\n\n// DTOs - Values (constants)\nexport {\n  FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,\n  HMAC_HEADER_POSITION,\n  HMAC_SUPPORTED_ALGORITHM,\n} from './dtos/AlertSubscription.dto.js'\n\nexport type { AuditDto } from './dtos/Audit.dto.js'\nexport type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js'\nexport type { BackupDto } from './dtos/Backup.dto.js'\nexport type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js'\nexport type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js'\nexport type {\n  ClusterDeferredSpecChange,\n  DeferredSpecChangeType,\n} from './dtos/ClusterDeferredSpecChange.dto.js'\nexport type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js'\nexport type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js'\nexport type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js'\nexport type {\n  ClusterSpecChange,\n  ClusterSpecChangeActor,\n  ClusterSpecHistory,\n} from './dtos/ClusterSpecHistory.dto.js'\nexport type {\n  CommonClusterDto,\n  ExternalIdpConfig,\n  OptimizeFilteringConfig,\n  OptimizeFilteringIncludeExclude,\n  OptimizeFilteringPatch,\n  SecretsFilterMode,\n} from './dtos/CommonCluster.dto.js'\nexport type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js'\nexport type {\n  ClusterByClientV2Dto,\n  ClusterDatacenterOptionV2Dto,\n  ClusterDetailV2Dto,\n  ClusterFacetsV2Dto,\n  ClusterListItemV2Dto,\n  ClusterParameterOptionV2Dto,\n  ClusterParametersV2Dto,\n  ControlResolvedPermissions,\n  ControlSessionDto,\n  ControlSessionUser,\n  CursorPage,\n  CursorParams,\n  ListClustersV2Params,\n  ListOrganizationsV2Params,\n  ListOrgMembersV2Params,\n  OrgDetailV2Dto,\n  OrgListItemV2Dto,\n  OrgMemberV2Dto,\n  OrgSummaryV2Dto,\n} from './dtos/ControlV2.dto.js'\nexport type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js'\nexport type {\n  CamundaWebApp,\n  CamundaWebAppWithZeebe,\n  ExternalClusterDto,\n  ExternalOrganizationDto,\n} from './dtos/ExternalWebapp.dto.js'\nexport type { Features } from './dtos/FeatureFlags.dto.js'\n// Functions\nexport {\n  type GenerationDto,\n  type GenerationWithClusterCountDto,\n  sortGenerationBySemverOfZeebe,\n  type UpgradableGenerationsDto,\n} from './dtos/Generations.dto.js'\n// Namespace (type-only - contains only interfaces)\nexport type { Hdp } from './dtos/Hdp.dto.js'\nexport type {\n  K8sConfig,\n  K8sConfigLegacyFormat,\n  K8sContext,\n  K8sContextDto,\n} from './dtos/K8sContext.dto.js'\nexport type { MetaDto } from './dtos/Meta.dto.js'\nexport type {\n  AutoJoinAssignment,\n  LicensingModelType,\n  LlmProviderName,\n  OrganizationDto,\n  OrganizationMetadata,\n  OrgOwner,\n  OrgWithNameAndSalesPlan,\n} from './dtos/Organization.dto.js'\nexport {\n  LICENSING_MODEL_DISPLAY_NAMES,\n  VALID_LICENSING_MODELS,\n} from './dtos/Organization.dto.js'\nexport type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js'\nexport type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js'\nexport type {\n  ReleaseTrainSanityReport,\n  SanityFix,\n  SanityRuleInfo,\n  SanitySeverity,\n  SanityViolation,\n} from './dtos/ReleaseTrainSanity.dto.js'\nexport type { RestoreDto, RestoreState } from './dtos/Restore.dto.js'\n// SalesPlan.dto - Types\nexport type {\n  ClusterLimits,\n  ConsumptionDataItem,\n  Limits,\n  SalesPlanDto,\n  SalesPlanMetadata,\n} from './dtos/SalesPlan.dto.js'\n// SalesPlan.dto - Values (constants and functions)\nexport {\n  allClusterBasedLimits,\n  allSalesPlanLimits,\n  deprecatedLimit,\n  MAX_CLUSTER_CLIENTS_DEFAULT,\n  MAX_CLUSTER_CLIENTS_DEV,\n  RETENTION_LIMIT_DEFAULT,\n  RETENTION_LIMIT_MAXIMUM,\n  RETENTION_LIMIT_MINIMUM,\n  unusedClusterBasedLimits,\n  unusedSalesPlanLimits,\n} from './dtos/SalesPlan.dto.js'\nexport type { SecureConnectivityDto } from './dtos/SecureConnectivity.dto.js'\nexport type { SignupDto } from './dtos/Signup.dto.js'\nexport type {\n  StorybookConfig,\n  StorybookConfigBackup,\n  StorybookConfigChannel,\n  StorybookConfigDatacenter,\n  StorybookConfigGeneration,\n} from './dtos/StorybookConfig.dto.js'\nexport type { SystemAuditDto } from './dtos/SystemAudit.dto.js'\n// UsageAlert.dto - Types\nexport type { UsageAlertDto } from './dtos/UsageAlert.dto.js'\n// UsageAlert.dto - Values (enum and constants)\nexport {\n  UsageAlertInitValues,\n  UsageAlertMetric,\n  UsageAlertThresholdLimits,\n} from './dtos/UsageAlert.dto.js'\nexport type { UserMetaDataDto } from './dtos/UserMetaData.dto.js'\n// Lucene-style table search (parser + AST \u2192 SQL compiler + field registries).\nexport {\n  type AndNode,\n  CLUSTER_DEFAULT_SEARCH_FIELDS,\n  CLUSTER_SEARCH_FIELDS,\n  type CompileContext,\n  type CompiledQuery,\n  compileQuery,\n  type FieldBinding,\n  findSearchField,\n  isLuceneQueryError,\n  LuceneQueryError,\n  likeArgument,\n  type NotNode,\n  ORG_DEFAULT_SEARCH_FIELDS,\n  ORGANIZATION_SEARCH_FIELDS,\n  type OrNode,\n  parseLuceneQuery,\n  type QueryNode,\n  type RangeNode,\n  type SearchFieldCapability,\n  type SearchFieldSpec,\n  type SearchFieldType,\n  type SearchTermOperator,\n  type TermNode,\n} from './search/index.js'\n\n// ============================================================================\n// Enums (runtime values)\n// ============================================================================\n\nexport {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from './enums/AlertSubscription.enum.js'\nexport { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js'\nexport { AuditService } from './enums/AuditService.enum.js'\nexport { BackupStatus } from './enums/BackupStatus.enum.js'\nexport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from './enums/ClusterBulkOperation.enum.js'\nexport { ClusterClientPermission } from './enums/ClusterClientPermissions.enum.js'\nexport { ClusterEncryptionKey } from './enums/ClusterEncryptionKey.enum.js'\nexport { ClusterStatus } from './enums/ClusterStatus.enum.js'\nexport { ConsoleAPIClientPermission } from './enums/ConsoleApiClientPermission.enum.js'\nexport { ErrorType } from './enums/ErrorType.enum.js'\nexport type {\n  AssignableOrganizationRoleType,\n  OrganizationRoleType,\n  UnassignableOrganizationRoleType,\n} from './enums/OrganizationRole.enum.js'\nexport {\n  AssignableOrganizationRole,\n  LegacyHeldOrganizationRole,\n  OrganizationRole,\n  UnassignableOrganizationRole,\n} from './enums/OrganizationRole.enum.js'\nexport { SseEntity, SseType } from './enums/Sse.enum.js'\nexport {\n  SystemAuditEntity,\n  SystemAuditEntityAttribute,\n} from './enums/SystemAuditEntity.enum.js'\n\n// ============================================================================\n// Permissions - Namespaces (runtime values)\n// ============================================================================\n\nexport { AccountsPermissions } from './permissions/accounts.permissions.js'\nexport { AlertDistributorPermissions } from './permissions/alert-distributor.permissions.js'\nexport { AuditLoggerPermissions } from './permissions/auditlogger.permissions.js'\nexport {\n  accountsUserFeaturesFromPermissions,\n  consoleUserFeaturesFromPermissions,\n} from './permissions/combo.js'\nexport { ConsolePermissions } from './permissions/console.permissions.js'\nexport { NotificationPermissions } from './permissions/notification.permissions.js'\n// profile.permissions - Types\nexport type { OnboardConfig } from './permissions/profile.permissions.js'\n// profile.permissions - Values (constants)\n// NOTE: the `allowed` email lists (CLOUD_TEAM_EMAILS, SRE_TEAM_EMAILS, etc.)\n// intentionally live in the private `@camunda-cloud/shared-backend` package\n// instead of here, since this package is published publicly to npm.\nexport { PROFILES } from './permissions/profile.permissions.js'\nexport { expandRolesToPermissions } from './permissions/roleExpansion.utils.js'\n\n// ============================================================================\n// Types - Type-only exports (interfaces and type aliases)\n// ============================================================================\n\nexport type { AuditData } from './types/AuditData.type.js'\n// AutoSleep.type - Types\nexport type {\n  ActivitySleepEligibilityOptions,\n  SleepCronEligibilityOptions,\n} from './types/AutoSleep.type.js'\n// AutoSleep.type - Values (constants and functions)\nexport {\n  INTERNAL_LOW_HARDWARE_PLAN_NAME,\n  isActivitySleepEligible,\n  isClusterTagEligibleForSleepCron,\n  isSalesPlanEligibleForSleepCron,\n  isSleepCronEligible,\n  SLEEP_CRON_ELIGIBLE_TAGS,\n} from './types/AutoSleep.type.js'\nexport type {\n  BotContext,\n  BotOptions,\n  BotRequest,\n  GetUserDetailsResponse,\n  ListRolesForUserResponse,\n  UpdateUserRolesRequest,\n  UpdateUserRolesResponse,\n  UserContext,\n  UserDetails,\n} from './types/Bot.types.js'\n// BulkOperation.type - Types\nexport type {\n  BulkClusterDeletionContent,\n  BulkClusterDeletionItem,\n  BulkClusterGenerationUpdateItem,\n  BulkClusterPlanTypeUpdateContent,\n  BulkClusterPlanTypeUpdateItem,\n  BulkClusterPlanUpdateContent,\n  BulkClusterPlanUpdateItem,\n  BulkGenerationUpdateContent,\n  GenericBulkClusterOperationContent,\n  GenericBulkOperationContent,\n  GenericClusterBulkOperationItem,\n} from './types/BulkOperation.type.js'\n// BulkOperation.type - Functions (type guards)\nexport {\n  isBulkClusterDeletionItem,\n  isBulkClusterPlanTypeUpdateItem,\n  isBulkClusterPlanUpdateItem,\n  isIsBulkClusterGenerationUpdateIten,\n} from './types/BulkOperation.type.js'\n// C8ClusterComponentVersions.type - Types\nexport type {\n  ImmutableZeebeClusterVersionsDto,\n  MutableZeebeClusterVersionsDto,\n  ZeebeClusterVersionsDto,\n} from './types/C8ClusterComponentVersions.type.js'\n// C8ClusterComponentVersions.type - Values (constants)\nexport {\n  AllThings,\n  ImmutableThings,\n  MutableThings,\n} from './types/C8ClusterComponentVersions.type.js'\n// CamundaClusterLabels.type - Types\nexport type {\n  CamundaClusterStage,\n  CamundaClusterStageLabel,\n  ClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// CamundaClusterLabels.type - Values (constants)\nexport {\n  ALLOWED_CAMUNDA_LABELS,\n  StageClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// Chargebee.type - Types\nexport type { SubscriptionItem } from './types/Chargebee.type.js'\n// Chargebee.type - Values (enums)\nexport { ConsumptionData, ConsumptionDataType } from './types/Chargebee.type.js'\n// ClusterBulkOperation.type - Types\nexport type {\n  ClusterBulkOperationAck,\n  ClusterBulkOperationClusterDto,\n  ClusterBulkOperationContent,\n  ClusterBulkOperationDto,\n  ClusterBulkOperationGenerationUpdateParameter,\n  ClusterBulkOperationParameter,\n  ClusterBulkOperationPlanTypeUpdateParameter,\n  ClusterBulkOperationPlanUpdateParameter,\n  ClusterBulkOperationPostContent,\n  ClusterSleepWakeupParameter,\n} from './types/ClusterBulkOperation.type.js'\nexport type {\n  ClusterModificationConfigDto,\n  ClusterModificationDto,\n} from './types/ClusterModification.type.js'\n// ClusterPlanFields.type - Values (field spec and type guard)\nexport {\n  CLUSTER_PLAN_FIELDS,\n  type ClusterPlanFieldSpec,\n  type ClusterPlanFieldTree,\n  isClusterPlanFieldSpec,\n} from './types/ClusterPlanFields.type.js'\nexport type {\n  ClusterPlanModificationAck,\n  ClusterPlanModificationConfig,\n  ClusterPlanModificationDto,\n} from './types/ClusterPlanModification.type.js'\n// ClusterPlanTypeAvailabilityClass.type - Values (enum and function)\nexport {\n  ClusterPlanTypeAvailabilityClass,\n  sortByAvailabilityClasses,\n} from './types/ClusterPlanTypeAvailabilityClass.type.js'\n// ClusterPlanTypeCategory.type - Values (enum and functions)\nexport {\n  ClusterPlanTypeCategory,\n  hasAvailabilityClass,\n  sortByClusterPlanTypeCategory,\n} from './types/ClusterPlanTypeCategory.type.js'\nexport type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js'\nexport type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js'\nexport type {\n  ClusterUsageDataRequest,\n  ClusterUsageMetricsAddRequestByMetricHeap,\n  ClusterUsageMetricsData,\n  ClusterUsageMetricsFilter,\n  ClusterUsageOrgStartDate,\n} from './types/ClusterUsageMetrics.type.js'\n// Namespace with runtime values (consts, functions, enums)\nexport { ConsoleSM } from './types/ConsoleSelfManaged.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { ConsoleSMAdminApi } from './types/ConsoleSelfManagedAdminApi.type.js'\n// Dashboard.types - Types\nexport type {\n  DashboardConfig,\n  DashboardMappingItem,\n  DashboardMappingTarget,\n  DashboardResultPrimitive,\n  DashboardResultRow,\n  EngineeringOperationsDashboardResponse,\n} from './types/Dashboard.types.js'\nexport type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js'\nexport type {\n  HdpTenantUsageBreakdown,\n  HdpTenantUsagePerClusterPoint,\n  HdpTenantUsagePoint,\n} from './types/HdpTenantUsage.type.js'\n// hdp.types - Types (interfaces)\nexport type {\n  AlertSubscription as HdpAlertSubscription,\n  Audit as HdpAudit,\n  ByomClient as HdpByomClient,\n  Channel as HdpChannel,\n  Cluster as HdpCluster,\n  ClusterBackup as HdpClusterBackup,\n  ClusterBackupSchedule as HdpClusterBackupSchedule,\n  ClusterBulkOperation as HdpClusterBulkOperation,\n  ClusterClient as HdpClusterClient,\n  ClusterModification as HdpClusterModification,\n  ClusterPlan as HdpClusterPlan,\n  ClusterPlanType as HdpClusterPlanType,\n  ConnectorSecret as HdpConnectorSecret,\n  ConsoleApiClient as HdpConsoleApiClient,\n  Datacenter as HdpDatacenter,\n  Generation as HdpGeneration,\n  HdpBackendChangeEvent,\n  HdpClusterModificationConfig,\n  HdpEntity,\n  HdpPrometheusDataCapacityDataPoint,\n  Invite as HdpInvite,\n  LlmSpend as HdpLlmSpend,\n  Organization as HdpOrganization,\n  SecureConnectivity as HdpSecureConnectivity,\n  SystemAudit as HdpSystemAudit,\n  TelemetryData as HdpTelemetryData,\n  UsageAlert as HdpUsageAlert,\n  User as HdpUser,\n  UserLogin as HdpUserLogin,\n} from './types/hdp.types.js'\n// hdp.types - Values (enums)\nexport {\n  AlertSubscriptionReportType as HdpAlertSubscriptionReportType,\n  AlertSubscriptionType as HdpAlertSubscriptionType,\n} from './types/hdp.types.js'\n// notification.type - Types\nexport type {\n  GlobalNotification,\n  NotificationDto,\n  NotificationMeta,\n  NotificationOptions,\n  NotificationPermission,\n  NotificationSource,\n  NotificationState,\n  NotificationType,\n  OrgNotification,\n  UserNotification,\n  UserOrgNotification,\n} from './types/notification.type.js'\n// notification.type - Values (enums and constants)\nexport {\n  NotificationPermissionValues,\n  NotificationSourceEnum,\n  NotificationStateEnum,\n  NotificationTypeEnum,\n} from './types/notification.type.js'\n// OrganizationPermission.type - Types\nexport type {\n  CreateReadUpdateDelete,\n  OrganizationPermissions,\n} from './types/OrganizationPermission.type.js'\n// OrganizationPermission.type - Values (constants)\nexport {\n  OrganizationPermissionsDescriptions,\n  PermissionsForOrganizationRole,\n} from './types/OrganizationPermission.type.js'\n// Roles.js - Types\nexport type {\n  AccountRoles,\n  ConsoleRoles,\n  ModelerRoles,\n  Roles,\n} from './types/Roles.js'\n// Roles.js - Values (constants)\nexport { SAFE_ROLES } from './types/Roles.js'\n// SalesPlanType.type - Types\nexport type {\n  DisplayedSalesPlan,\n  RevisitedSalesPlanName,\n} from './types/SalesPlanType.type.js'\n// SalesPlanType.type - Values (enums and functions)\nexport {\n  AnalyticsSalesPlanType,\n  getAnalyticsSalesPlanFromOrgSalesPlan,\n  getDisplayedSalesPlan,\n  getRevisitedSalesPlanName,\n  OPTIMIZE_DISABLED_PLAN_TYPES,\n  SalesPlanType,\n} from './types/SalesPlanType.type.js'\n// SpamDetection.type - Types\nexport type { SpamDetectionPatterns } from './types/SpamDetection.type.js'\n// SpamDetection.type - Values (constants)\nexport { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js'\nexport type {\n  AlertSubscriptionSseEvent,\n  BackupSseEvent,\n  ClusterClientSseEvent,\n  ClusterSseEvent,\n  ConnectorSecretsSseEvent,\n  ConsoleApiClientSseEvent,\n  ConsoleSseEvent,\n  MonitoringSseEvent,\n  SecureConnectivitySseEvent,\n  SseClusterPayload,\n  SseMonitoringPayload,\n  SseSecureConnectivityPayload,\n} from './types/SseEvent.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { AccountsStats } from './types/Stats.types.js'\n// Survey.type - Types\nexport type { Persona, SurveyDto } from './types/Survey.type.js'\n// Survey.type - Values (enum)\nexport { FeedbackType } from './types/Survey.type.js'\n// SuspendStrategy.type - Types\nexport type {\n  GetSuspendStrategyOptions,\n  SuspendStrategy,\n} from './types/SuspendStrategy.type.js'\n// SuspendStrategy.type - Values (function)\nexport { getSuspendStrategy } from './types/SuspendStrategy.type.js'\nexport type { SystemAuditData } from './types/SystemAuditData.type.js'\n\n// Namespace (runtime value)\nexport { Telemetry } from './types/Telemetry.type.js'\n\n// TrialManagement.types - Types\nexport type {\n  ExtensionListItem,\n  ExtensionListResponse,\n  OrgTrialDetail,\n  TrialExtensionSource,\n  TrialManagementStats,\n} from './types/TrialManagement.types.js'\n\n// User.type - Types\nexport type {\n  AccountsData,\n  AppMetadata,\n  BasicUser,\n  BlockedFor,\n  Identity,\n  OrgMembership,\n  User,\n  UserMetadata,\n  UserRequest,\n} from './types/User.type.js'\n\n// User.type - Values (enum)\nexport { UserMetadataEvent } from './types/User.type.js'\n\nexport type {\n  UniqueTaskUser,\n  ValueMetrics,\n  ValueMetricsPerYearMonth,\n} from './types/ValueMetrics.type.js'\n\n// ============================================================================\n// Utils - Classes (runtime values)\n// ============================================================================\n\nexport {\n  CLOUD_PROVIDER_ORDER,\n  getCloudProviderLabel,\n  getCloudProviderRank,\n} from './utils/cloudProvider.utils.js'\nexport {\n  type ConnectivityStatus,\n  deriveConnectivityMessage,\n  deriveConnectivityStatus,\n} from './utils/connectivityStatus.utils.js'\nexport { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js'\nexport type {\n  CronScheduleValidationFailure,\n  CronScheduleValidationResult,\n  CronScheduleValidationSuccess,\n} from './utils/cronSchedule.utils.js'\nexport {\n  BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,\n  validateCronSchedule,\n} from './utils/cronSchedule.utils.js'\nexport {\n  deriveEncryptionStatus,\n  type EncryptionStatus,\n  isEncryptionStatus,\n} from './utils/encryptionStatus.utils.js'\n// enterprise-connection.utils - Types\nexport type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js'\n// enterprise-connection.utils - Values (functions)\nexport {\n  enterpriseConnectionMetadataToOrganizationAssignments,\n  organizationAssignmentsToEnterpriseConnectionMetadata,\n} from './utils/enterprise-connection.utils.js'\nexport {\n  addMonthsClamped,\n  DEFAULT_ENTERPRISE_DURATION_IN_MONTHS,\n  diffInWholeMonths,\n  type EnterpriseTermWindow,\n  getCurrentEnterpriseTerm,\n  peakWithinTerm,\n  toUtcDayStartMs,\n} from './utils/enterpriseTerm.utils.js'\nexport type { EnvVarEntry } from './utils/envVars.js'\nexport { parseEnvVars, serializeEnvVars } from './utils/envVars.js'\nexport {\n  deriveFailoverKeyPolicyPrincipals,\n  type FailoverKeyPolicyPrincipals,\n} from './utils/failoverKeyPolicy.utils.js'\nexport {\n  KMS_ARN,\n  KMS_MRK_ARN,\n  type KmsArnValidationError,\n  type ParsedKmsArn,\n  parseKmsArn,\n  validateKmsArnForRegion,\n} from './utils/kmsArn.utils.js'\nexport { validateLabels } from './utils/labelValidator.utils.js'\nexport { ObjectMergeUtils } from './utils/objectMerge.utils.js'\nexport {\n  computeOrgStartDate,\n  type OrgStartDateInput,\n} from './utils/orgStartDate.utils.js'\nexport {\n  getPermissionsByRoles,\n  getUserPermissionsForOrg,\n} from './utils/orgs/OrgHelper.js'\n\n// PasswordPolicy - Types\nexport type {\n  PasswordPolicyRequest,\n  PasswordPolicyResult,\n} from './utils/PasswordPolicy.js'\n\n// PasswordPolicy - Values (constants and function)\nexport {\n  MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,\n  MINLENGTH as PASSWORD_POLICY_MINLENGTH,\n  passwordPolicyCheck,\n} from './utils/PasswordPolicy.js'\n\nexport {\n  deriveSecondaryStorageStatus,\n  type SecondaryStorageStatus,\n} from './utils/secondaryStorageStatus.utils.js'\n\nexport {\n  allSettledResultsCounts,\n  getFulfilledPromises,\n  getRejectedPromises,\n  getSettledSummary,\n} from './utils/settledPromises.util.js'\n\nexport {\n  isValidAwsArn,\n  isValidCIDR,\n  isValidCIDRList,\n  isValidClientName,\n  isValidHostname,\n  isValidPrivateLinkRegion,\n  normalizeCIDRList,\n} from './utils/string-validation.utils.js'\nexport {\n  extractCamundaUserEmail,\n  guessName,\n  isCamundaUserId,\n} from './utils/user.utils.js'\n\n// versionCheck.utils - Values (enum and function)\nexport {\n  checkVersion,\n  isAppIntegrationsVersionSupported,\n  isGenerationResumable,\n  isSecretsFilterModeConfigurable,\n  stripSecfixPostfix,\n  VersionCheckOperator,\n} from './utils/versionCheck.utils.js'\n\n// ============================================================================\n// Config - Configuration files and types\n// ============================================================================\n\nexport { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js'\nexport type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js'\n\nexport {\n  augmentCamundiPermissions,\n  getApplicableRolesForEmployee,\n  isManager,\n} from './utils/camundiPermissionAugmenter.utils.js'\n"],
+  "mappings": "AAUA,SAAS,KAAK,MAAM,QAAQ,QAAQ,YAAY;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,iDAAiD;AAK1D,SAAS,wCAAwC;AACj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gBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA0DP;AAAA,EAGE;AAAA,OAEK;AAmBP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAoBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EAEE;AAAA,EACA;AAAA,EAGA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,OAQK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,4BAA4B;AAClD,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC;AAC3C,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,eAAe;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AAC5C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAOxC,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AAazC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,SAAS,iBAAiB,2BAA2B;AAmBrD;AAAA,EACE;AAAA,EAGA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,SAAS,iBAAiB;AAmD1B;AAAA,EACiC,+BAA/BA;AAAA,EACyB,yBAAzBC;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB;AAO3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,0BAA0B;AAoBnC,SAAS,oBAAoB;AAO7B,SAAS,0BAA0B;AAInC,SAAS,iBAAiB;AAyB1B,SAAS,yBAAyB;AAYlC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAMxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,cAAc,wBAAwB;AAC/C;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACe;AAAA,EACA;AAAA,EACb;AAAA,OACK;AAEP;AAAA,EACE;AAAA,OAEK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,SAAoB,WAAXC,gBAA2C;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
   "names": ["AlertSubscriptionReportType", "AlertSubscriptionType", "default"]
 }

package/dist/types/ClusterBulkOperation.type.d.ts

@@ -30,6 +30,16 @@ export type ClusterBulkOperationParameter = ClusterBulkOperationGenerationUpdate
 export interface ClusterBulkOperationGenerationUpdateParameter {
     toGenerationUuid: string;
     onlyAutoUpgrade?: boolean;
+    /**
+     * Patches every selected cluster, whatever state the cluster is in. The flag
+     * has two effects. First, a sleeping cluster stays asleep: the new generation
+     * reaches the CR, and the cluster starts on it at the next wake-up. A wake-up
+     * is costly, because a trial cluster suspends with ScaleDownAndDeleteDisk and
+     * the 8h sleep cron then suspends the cluster again. Second, a cluster that
+     * already has the target generation gets a forced spec write instead of a
+     * skip.
+     */
+    yoloAllClusters?: boolean;
 }
 export interface ClusterBulkOperationPlanTypeUpdateParameter {
     toPlanTypeUuid: string;

package/dist/types/OrganizationPermission.type.js

@@ -620,11 +620,14 @@ const PermissionsForOrganizationRole = /* @__PURE__ */ new Map([
         settings: CRUD_READ_TRUE,
         usage: CRUD_FALSE,
         billing: CRUD_FALSE,
+        // Only Organization Owner and Organization Admin see the org member
+        // list. Developer kept read access, which showed the Users and Groups
+        // tabs with disabled row actions (#9948).
         users: {
-          general: CRUD_READ_TRUE,
+          general: CRUD_FALSE,
           owner: CRUD_FALSE,
           admin: CRUD_FALSE,
-          member: CRUD_READ_TRUE
+          member: CRUD_FALSE
         },
         activity: CRUD_FALSE,
         diagrams: {

package/dist/types/OrganizationPermission.type.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/OrganizationPermission.type.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { OrganizationRole } from '../enums/OrganizationRole.enum.js'\n\n// new roles and permissions according to\n// https://docs.google.com/document/d/1FZYFn9fK2sn6ksjh7drSNad1vyMEIwK6p4KlG353yfM/edit#heading=h.kjgwc8d48e3a\n\nconst CRUD_TRUE: CreateReadUpdateDelete = {\n  create: true,\n  read: true,\n  update: true,\n  delete: true,\n}\n\nconst CRUD_FALSE: CreateReadUpdateDelete = {\n  create: false,\n  read: false,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_UPDATE_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: true,\n  delete: false,\n}\n\nexport interface CreateReadUpdateDelete {\n  create: boolean\n  read: boolean\n  update: boolean\n  delete: boolean\n}\n\nexport interface CreateReadUpdateDeleteDescriptions {\n  create: string\n  read: string\n  update: string\n  delete: string\n}\n\nexport interface OrganizationPermissionsInternal<T> {\n  org: {\n    clusters: T\n    clients: T\n    settings: T\n    usage: T\n    billing: T\n    users: {\n      general: T\n      owner: T\n      admin: T\n      member: T\n    }\n    activity: T\n    diagrams: T\n    forms: T\n    instances: T // create === start new instances\n    workflows: T // create === deploy diagrams\n    webide: T\n    earlyAccessFeatures: T\n  }\n  cluster: {\n    clients: T\n    alerts: T\n    operate: T\n    tasklist: T\n    optimize: T\n    identity: T\n    ipWhitelist: T\n    secureConnectivity: T\n    encryption: T\n    connectorSecrets: T\n    connectors: T\n    settings: {\n      resourceBasedAuthorizations: {\n        activate: T\n        configure: T\n      }\n      identityBasedAuthorizations: {\n        activate: T\n      }\n      multiTenancy: {\n        activate: T\n      }\n    }\n  }\n}\n\nexport interface OrganizationPermissions\n  extends OrganizationPermissionsInternal<CreateReadUpdateDelete> {}\n\nexport const OrganizationPermissionsDescriptions: OrganizationPermissionsInternal<CreateReadUpdateDeleteDescriptions> =\n  {\n    org: {\n      clusters: {\n        create: 'Create new clusters',\n        read: 'View clusters',\n        update: 'Update clusters',\n        delete: 'Delete clusters',\n      },\n      clients: {\n        create: 'Create new console clients',\n        read: 'View console clients',\n        update: 'Update console clients',\n        delete: 'Delete console clients',\n      },\n      settings: {\n        create: 'unused',\n        read: 'View settings',\n        update: 'Update settings',\n        delete: 'Delete settings',\n      },\n      usage: {\n        create: 'unused',\n        read: 'View usage metrics',\n        update: 'unused',\n        delete: 'unused',\n      },\n      billing: {\n        create: 'unused',\n        read: 'View billing information',\n        update: 'Update billing information',\n        delete: 'unused',\n      },\n      users: {\n        general: {\n          create: 'Add users',\n          read: 'View users',\n          update: 'Update users',\n          delete: 'Remove users',\n        },\n        owner: {\n          create: 'Initiate owner change',\n          read: 'Read owners',\n          update: 'Update owners',\n          delete: 'Remove owners',\n        },\n        admin: {\n          create: 'Add admins',\n          read: 'Read admins',\n          update: 'Update admins',\n          delete: 'Remove admins',\n        },\n        member: {\n          create: 'Add members',\n          read: 'Read members',\n          update: 'Update members',\n          delete: 'Remove members',\n        },\n      },\n      activity: {\n        create: 'unused',\n        read: 'View activity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      diagrams: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      forms: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      instances: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      workflows: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      webide: {\n        create: 'unused',\n        read: 'Open Web Modeler',\n        update: 'unused',\n        delete: 'unused',\n      },\n      earlyAccessFeatures: {\n        create: 'Enable early access features',\n        read: 'View early access features',\n        update: 'Update early access features',\n        delete: 'Disable early access features',\n      },\n    },\n    cluster: {\n      clients: {\n        create: 'Create cluster clients',\n        read: 'View cluster clients',\n        update: 'Update cluster clients',\n        delete: 'Delete cluster clients',\n      },\n      alerts: {\n        create: 'Create cluster alerts',\n        read: 'View cluster alerts',\n        update: 'Update cluster alerts',\n        delete: 'Delete cluster alerts',\n      },\n      operate: {\n        create: 'unused',\n        read: 'Open Operate',\n        update: 'unused',\n        delete: 'unused',\n      },\n      tasklist: {\n        create: 'unused',\n        read: 'Open Task List',\n        update: 'unused',\n        delete: 'unused',\n      },\n      optimize: {\n        create: 'unused',\n        read: 'Open Optimize',\n        update: 'unused',\n        delete: 'unused',\n      },\n      identity: {\n        create: 'unused',\n        read: 'Open Identity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      ipWhitelist: {\n        create: 'Create IP Whitelist',\n        read: 'Read IP Whitelist',\n        update: 'Update IP Whitelist',\n        delete: 'Delete IP Whitelist',\n      },\n      secureConnectivity: {\n        create: 'Create Secure Connectivity',\n        read: 'Read Secure Connectivity',\n        update: 'Update Secure Connectivity',\n        delete: 'Delete Secure Connectivity',\n      },\n      encryption: {\n        create: 'Create BYO Encryption',\n        read: 'Read BYO Encryption',\n        update: 'Update BYO Encryption',\n        delete: 'Delete BYO Encryption',\n      },\n      connectorSecrets: {\n        create: 'Create Connector Secrets',\n        read: 'View Connector Secrets',\n        update: 'Update Connector Secrets',\n        delete: 'Delete Connector Secrets',\n      },\n      connectors: {\n        create: 'unused',\n        read: 'Read Manage Connectors View',\n        update: 'unused',\n        delete: 'unused',\n      },\n      settings: {\n        resourceBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View resource-based authorizations settings',\n            update: 'Enable/Disable resource-based authorizations',\n            delete: 'unused',\n          },\n          configure: {\n            create: 'unused',\n            read: 'Read resource-based authorizations for users',\n            update: 'Update resource-based authorizations for users',\n            delete: 'unused',\n          },\n        },\n        identityBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View identity-based authorizations settings',\n            update: 'Enable/Disable identity-based authorizations',\n            delete: 'unused',\n          },\n        },\n        multiTenancy: {\n          activate: {\n            create: 'unused',\n            read: 'View Multi-tenency settings',\n            update: 'Enable/Disable Multi-tenancy',\n            delete: 'unused',\n          },\n        },\n      },\n    },\n  }\n\nexport const PermissionsForOrganizationRole: Map<\n  OrganizationRole,\n  OrganizationPermissions\n> = new Map([\n  [\n    OrganizationRole.MEMBER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ADMIN,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OWNER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: {\n          create: false,\n          read: true,\n          update: true,\n          delete: true,\n        },\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_TRUE,\n          admin: CRUD_TRUE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.SUPPORTAGENT,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_READ_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_TRUE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_READ_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_READ_TRUE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_READ_TRUE,\n        connectorSecrets: CRUD_READ_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OPERATIONS_ENGINEER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.TASK_USER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ANALYST,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.DEVELOPER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: false,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_READ_TRUE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.VISITOR,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.MODELER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n])\n"],
-  "mappings": "AAMA,SAAS,wBAAwB;AAKjC,MAAM,YAAoC;AAAA,EACxC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,aAAqC;AAAA,EACzC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,iBAAyC;AAAA,EAC7C,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,wBAAgD;AAAA,EACpD,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAmEO,MAAM,sCACX;AAAA,EACE,KAAK;AAAA,IACH,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,qBAAqB;AAAA,MACnB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,aAAa;AAAA,MACX,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,oBAAoB;AAAA,MAClB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,kBAAkB;AAAA,MAChB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,UACT,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEK,MAAM,iCAGT,oBAAI,IAAI;AAAA,EACV;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { OrganizationRole } from '../enums/OrganizationRole.enum.js'\n\n// new roles and permissions according to\n// https://docs.google.com/document/d/1FZYFn9fK2sn6ksjh7drSNad1vyMEIwK6p4KlG353yfM/edit#heading=h.kjgwc8d48e3a\n\nconst CRUD_TRUE: CreateReadUpdateDelete = {\n  create: true,\n  read: true,\n  update: true,\n  delete: true,\n}\n\nconst CRUD_FALSE: CreateReadUpdateDelete = {\n  create: false,\n  read: false,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_UPDATE_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: true,\n  delete: false,\n}\n\nexport interface CreateReadUpdateDelete {\n  create: boolean\n  read: boolean\n  update: boolean\n  delete: boolean\n}\n\nexport interface CreateReadUpdateDeleteDescriptions {\n  create: string\n  read: string\n  update: string\n  delete: string\n}\n\nexport interface OrganizationPermissionsInternal<T> {\n  org: {\n    clusters: T\n    clients: T\n    settings: T\n    usage: T\n    billing: T\n    users: {\n      general: T\n      owner: T\n      admin: T\n      member: T\n    }\n    activity: T\n    diagrams: T\n    forms: T\n    instances: T // create === start new instances\n    workflows: T // create === deploy diagrams\n    webide: T\n    earlyAccessFeatures: T\n  }\n  cluster: {\n    clients: T\n    alerts: T\n    operate: T\n    tasklist: T\n    optimize: T\n    identity: T\n    ipWhitelist: T\n    secureConnectivity: T\n    encryption: T\n    connectorSecrets: T\n    connectors: T\n    settings: {\n      resourceBasedAuthorizations: {\n        activate: T\n        configure: T\n      }\n      identityBasedAuthorizations: {\n        activate: T\n      }\n      multiTenancy: {\n        activate: T\n      }\n    }\n  }\n}\n\nexport interface OrganizationPermissions\n  extends OrganizationPermissionsInternal<CreateReadUpdateDelete> {}\n\nexport const OrganizationPermissionsDescriptions: OrganizationPermissionsInternal<CreateReadUpdateDeleteDescriptions> =\n  {\n    org: {\n      clusters: {\n        create: 'Create new clusters',\n        read: 'View clusters',\n        update: 'Update clusters',\n        delete: 'Delete clusters',\n      },\n      clients: {\n        create: 'Create new console clients',\n        read: 'View console clients',\n        update: 'Update console clients',\n        delete: 'Delete console clients',\n      },\n      settings: {\n        create: 'unused',\n        read: 'View settings',\n        update: 'Update settings',\n        delete: 'Delete settings',\n      },\n      usage: {\n        create: 'unused',\n        read: 'View usage metrics',\n        update: 'unused',\n        delete: 'unused',\n      },\n      billing: {\n        create: 'unused',\n        read: 'View billing information',\n        update: 'Update billing information',\n        delete: 'unused',\n      },\n      users: {\n        general: {\n          create: 'Add users',\n          read: 'View users',\n          update: 'Update users',\n          delete: 'Remove users',\n        },\n        owner: {\n          create: 'Initiate owner change',\n          read: 'Read owners',\n          update: 'Update owners',\n          delete: 'Remove owners',\n        },\n        admin: {\n          create: 'Add admins',\n          read: 'Read admins',\n          update: 'Update admins',\n          delete: 'Remove admins',\n        },\n        member: {\n          create: 'Add members',\n          read: 'Read members',\n          update: 'Update members',\n          delete: 'Remove members',\n        },\n      },\n      activity: {\n        create: 'unused',\n        read: 'View activity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      diagrams: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      forms: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      instances: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      workflows: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      webide: {\n        create: 'unused',\n        read: 'Open Web Modeler',\n        update: 'unused',\n        delete: 'unused',\n      },\n      earlyAccessFeatures: {\n        create: 'Enable early access features',\n        read: 'View early access features',\n        update: 'Update early access features',\n        delete: 'Disable early access features',\n      },\n    },\n    cluster: {\n      clients: {\n        create: 'Create cluster clients',\n        read: 'View cluster clients',\n        update: 'Update cluster clients',\n        delete: 'Delete cluster clients',\n      },\n      alerts: {\n        create: 'Create cluster alerts',\n        read: 'View cluster alerts',\n        update: 'Update cluster alerts',\n        delete: 'Delete cluster alerts',\n      },\n      operate: {\n        create: 'unused',\n        read: 'Open Operate',\n        update: 'unused',\n        delete: 'unused',\n      },\n      tasklist: {\n        create: 'unused',\n        read: 'Open Task List',\n        update: 'unused',\n        delete: 'unused',\n      },\n      optimize: {\n        create: 'unused',\n        read: 'Open Optimize',\n        update: 'unused',\n        delete: 'unused',\n      },\n      identity: {\n        create: 'unused',\n        read: 'Open Identity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      ipWhitelist: {\n        create: 'Create IP Whitelist',\n        read: 'Read IP Whitelist',\n        update: 'Update IP Whitelist',\n        delete: 'Delete IP Whitelist',\n      },\n      secureConnectivity: {\n        create: 'Create Secure Connectivity',\n        read: 'Read Secure Connectivity',\n        update: 'Update Secure Connectivity',\n        delete: 'Delete Secure Connectivity',\n      },\n      encryption: {\n        create: 'Create BYO Encryption',\n        read: 'Read BYO Encryption',\n        update: 'Update BYO Encryption',\n        delete: 'Delete BYO Encryption',\n      },\n      connectorSecrets: {\n        create: 'Create Connector Secrets',\n        read: 'View Connector Secrets',\n        update: 'Update Connector Secrets',\n        delete: 'Delete Connector Secrets',\n      },\n      connectors: {\n        create: 'unused',\n        read: 'Read Manage Connectors View',\n        update: 'unused',\n        delete: 'unused',\n      },\n      settings: {\n        resourceBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View resource-based authorizations settings',\n            update: 'Enable/Disable resource-based authorizations',\n            delete: 'unused',\n          },\n          configure: {\n            create: 'unused',\n            read: 'Read resource-based authorizations for users',\n            update: 'Update resource-based authorizations for users',\n            delete: 'unused',\n          },\n        },\n        identityBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View identity-based authorizations settings',\n            update: 'Enable/Disable identity-based authorizations',\n            delete: 'unused',\n          },\n        },\n        multiTenancy: {\n          activate: {\n            create: 'unused',\n            read: 'View Multi-tenency settings',\n            update: 'Enable/Disable Multi-tenancy',\n            delete: 'unused',\n          },\n        },\n      },\n    },\n  }\n\nexport const PermissionsForOrganizationRole: Map<\n  OrganizationRole,\n  OrganizationPermissions\n> = new Map([\n  [\n    OrganizationRole.MEMBER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ADMIN,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OWNER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: {\n          create: false,\n          read: true,\n          update: true,\n          delete: true,\n        },\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_TRUE,\n          admin: CRUD_TRUE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.SUPPORTAGENT,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_READ_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_TRUE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_READ_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_READ_TRUE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_READ_TRUE,\n        connectorSecrets: CRUD_READ_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OPERATIONS_ENGINEER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.TASK_USER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ANALYST,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.DEVELOPER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: false,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        // Only Organization Owner and Organization Admin see the org member\n        // list. Developer kept read access, which showed the Users and Groups\n        // tabs with disabled row actions (#9948).\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.VISITOR,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.MODELER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n])\n"],
+  "mappings": "AAMA,SAAS,wBAAwB;AAKjC,MAAM,YAAoC;AAAA,EACxC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,aAAqC;AAAA,EACzC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,iBAAyC;AAAA,EAC7C,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,wBAAgD;AAAA,EACpD,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAmEO,MAAM,sCACX;AAAA,EACE,KAAK;AAAA,IACH,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,qBAAqB;AAAA,MACnB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,aAAa;AAAA,MACX,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,oBAAoB;AAAA,MAClB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,kBAAkB;AAAA,MAChB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,UACT,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEK,MAAM,iCAGT,oBAAI,IAAI;AAAA,EACV;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA;AAAA;AAAA;AAAA,QAIT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;",
   "names": []
 }

package/dist/types/hdp.types.d.ts

@@ -102,9 +102,7 @@ export interface Channel {
     name: string;
 }
 export declare enum AlertSubscriptionType {
-    ClusterAlert = "ClusterAlert",
-    ProcessAlert = "ProcessAlert",
-    AllAlerts = "AllAlerts"
+    ProcessAlert = "ProcessAlert"
 }
 export declare enum AlertSubscriptionReportType {
     Email = "Email",

package/dist/types/hdp.types.js

@@ -1,7 +1,5 @@
 var AlertSubscriptionType = /* @__PURE__ */ ((AlertSubscriptionType2) => {
-  AlertSubscriptionType2["ClusterAlert"] = "ClusterAlert";
   AlertSubscriptionType2["ProcessAlert"] = "ProcessAlert";
-  AlertSubscriptionType2["AllAlerts"] = "AllAlerts";
   return AlertSubscriptionType2;
 })(AlertSubscriptionType || {});
 var AlertSubscriptionReportType = /* @__PURE__ */ ((AlertSubscriptionReportType2) => {

package/dist/types/hdp.types.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/hdp.types.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Limits } from '../dtos/SalesPlan.dto.js'\nimport type { UsageAlertMetric } from '../dtos/UsageAlert.dto.js'\nimport type { ClusterClientPermission } from '../enums/ClusterClientPermissions.enum.js'\nimport type { ConsoleAPIClientPermission } from '../enums/ConsoleApiClientPermission.enum.js'\nimport type { OrganizationRole } from '../enums/OrganizationRole.enum.js'\nimport type { DisplayedSalesPlan, SalesPlanType } from './SalesPlanType.type.js'\n\nexport interface Cluster {\n  uuid: string\n  name: string\n  clusterPlanType: ClusterPlanType\n  clusterPlan: ClusterPlan\n  generation: Generation\n  channel: Channel\n  datacenter?: Datacenter // is not fetched eagerly, if we do not have it we just gonna omit it\n  amountOfIpWhitelistRules: number\n  ownerUuid: string\n  created: Date\n  autoUpdate: boolean\n  mcpEnabled?: boolean\n  businessIdUniquenessEnabled?: boolean\n  optimizeEnabled?: boolean\n  tags?: string[]\n  sleeping?: boolean\n  activeModifications: boolean\n  encryptionKeysSet?: {\n    primaryConfigured: boolean\n    secondaryConfigured: boolean\n  }\n}\nexport interface ClusterBackup {\n  clusterId: string\n  backupId?: string\n}\n\nexport interface ClusterModification {\n  uuid: string\n  clusterUuid: string\n  owner: string\n  createdAt?: Date\n  archivedAt?: Date\n}\n\nexport interface ClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n  yoloJustification?: string\n}\n\n/**\n * HDP-specific interface for ClusterModificationConfig.\n * Used for Holy Data Platform integration - keeps Date objects for timestamp fields.\n */\nexport interface HdpClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n}\n\nexport interface ClusterBackupSchedule {\n  clusterId: string\n  schedule?: string\n}\n\nexport interface ClusterPlanType {\n  uuid: string\n  name: string\n  availabilityClass: string\n  isDevelopment: boolean\n}\n\nexport interface ClusterPlan {\n  uuid: string\n  name: string\n}\n\nexport interface Datacenter {\n  uuid: string\n  name: string\n}\nexport interface Generation {\n  uuid: string\n  name: string\n}\nexport interface Channel {\n  uuid: string\n  name: string\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionType {\n  ClusterAlert = 'ClusterAlert',\n  ProcessAlert = 'ProcessAlert',\n  AllAlerts = 'AllAlerts',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionReportType {\n  Email = 'Email',\n  Webhook = 'Webhook',\n}\nexport interface AlertSubscription {\n  uuid: string\n  clusterUuid?: string\n  target: string // userIdOrWebhook\n  reportType: AlertSubscriptionReportType\n  type: AlertSubscriptionType\n}\n\nexport interface ConsoleApiClient {\n  uuid: string\n  name: string\n  organizationUuid: string\n  permissions: ConsoleAPIClientPermission[]\n}\n\nexport interface ConnectorSecret {\n  clusterUuid: string\n  amountOfSecrets: number\n}\n\nexport interface ByomClient {\n  uuid: string\n  clusterUuid?: string\n  username: string\n}\n\nexport interface SecureConnectivity {\n  clusterUuid: string\n  allowedRegions: string[]\n  allowedPrincipals: string[]\n}\n\nexport interface ClusterClient {\n  uuid: string\n  name: string\n  clusterUuid?: string\n  clientId: string\n  permissions: ClusterClientPermission[]\n}\n\nexport interface Organization {\n  uuid: string\n  name: string\n  salesplan?: {\n    type: SalesPlanType // might be undefined when in limbo\n    displayedType?: DisplayedSalesPlan // might be undefined when in limbo\n    uuid: string // might be undefined when in limbo\n    name: string // might be undefined when in limbo\n    expireDate?: Date\n  }\n  reservations?: {\n    [key: string]: number\n  }\n  earlyAccessFeatures?: string[]\n  justOptedForTheBetaTerms?: boolean\n  salesForceProjectId?: string\n  awsOnly?: boolean\n  limits?: Limits\n}\n\nexport interface User {\n  name: string\n  email: string\n  userId: string\n  orgMemberships?: Array<{ orgUuid: string; roles: OrganizationRole[] }> // can be undefined which means: no new info ;)\n}\n\nexport interface UserLogin {\n  userId: string\n}\n\nexport interface Invite {\n  email: string\n  orgUuid: string\n  roles: OrganizationRole[]\n}\n\nexport interface UsageAlert {\n  orgId: string\n  metric: UsageAlertMetric\n  threshold: number\n  enabled: boolean\n  triggered: boolean\n}\n\nexport interface Audit {\n  service: string\n  orgId: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string\n  entityAttributeValueFrom?: string\n  entityAttributeValueTo?: string\n  parentEntity?: string\n  parentEntityId?: string\n}\n\nexport interface SystemAudit {\n  service: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string | null\n  entityAttributeValueFrom?: string | null\n  entityAttributeValueTo?: string | null\n  orgId?: string | null\n  clusterId?: string | null\n}\n\nexport interface TelemetryData {\n  customerId: string\n  installationId: string\n  entities: Array<{ id: string; type: string }>\n  key: string\n  value: string | number | boolean\n  tags?: Record<string, string>\n  timestampFrom: number\n  timestampTo?: number\n}\n\nexport interface ClusterBulkOperation {\n  uuid: string\n  name: string\n  reason: string\n  eyes: number\n  clusterUuids: string[]\n  type: string\n  created: Date\n  updated?: Date\n  executedAt?: Date\n  createdBy: string\n}\n\nexport interface LlmSpend {\n  orgId: string\n  salesPlanType: SalesPlanType\n  spend: number\n  maxBudget: number\n}\n\nexport type HdpEntity =\n  | 'cluster'\n  | 'clusterBackup'\n  | 'clusterBackupSchedule'\n  | 'clusterRestore'\n  | 'datacenter'\n  | 'generation'\n  | 'channel'\n  | 'clusterPlan'\n  | 'clusterPlanType'\n  | 'alertSubscription'\n  | 'consoleApiClient'\n  | 'connectorSecret'\n  | 'byomClient'\n  | 'secureConnectivity'\n  | 'clusterClient'\n  | 'organization'\n  | 'user'\n  | 'invite'\n  | 'usageAlert'\n  | 'audit'\n  | 'systemAudit'\n  | 'telemetry'\n  | 'userlogin'\n  | 'clusterBulkOperation'\n  | 'clusterModification'\n  | 'clusterModificationConfig'\n  | 'llmSpend'\n\nexport interface HdpPrometheusDataCapacityDataPoint {\n  clusterId?: string\n  ts: number\n  avg: number\n  min: number\n  max: number\n}\n\nexport interface HdpBackendChangeEvent {\n  ts: number\n  data: {\n    stage: string\n    entity: string\n    operation: string\n    data: any\n  }\n}\n"],
-  "mappings": "AAuHO,IAAK,wBAAL,kBAAKA,2BAAL;AACL,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,kBAAe;AACf,EAAAA,uBAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAOL,IAAK,8BAAL,kBAAKC,iCAAL;AACL,EAAAA,6BAAA,WAAQ;AACR,EAAAA,6BAAA,aAAU;AAFA,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Limits } from '../dtos/SalesPlan.dto.js'\nimport type { UsageAlertMetric } from '../dtos/UsageAlert.dto.js'\nimport type { ClusterClientPermission } from '../enums/ClusterClientPermissions.enum.js'\nimport type { ConsoleAPIClientPermission } from '../enums/ConsoleApiClientPermission.enum.js'\nimport type { OrganizationRole } from '../enums/OrganizationRole.enum.js'\nimport type { DisplayedSalesPlan, SalesPlanType } from './SalesPlanType.type.js'\n\nexport interface Cluster {\n  uuid: string\n  name: string\n  clusterPlanType: ClusterPlanType\n  clusterPlan: ClusterPlan\n  generation: Generation\n  channel: Channel\n  datacenter?: Datacenter // is not fetched eagerly, if we do not have it we just gonna omit it\n  amountOfIpWhitelistRules: number\n  ownerUuid: string\n  created: Date\n  autoUpdate: boolean\n  mcpEnabled?: boolean\n  businessIdUniquenessEnabled?: boolean\n  optimizeEnabled?: boolean\n  tags?: string[]\n  sleeping?: boolean\n  activeModifications: boolean\n  encryptionKeysSet?: {\n    primaryConfigured: boolean\n    secondaryConfigured: boolean\n  }\n}\nexport interface ClusterBackup {\n  clusterId: string\n  backupId?: string\n}\n\nexport interface ClusterModification {\n  uuid: string\n  clusterUuid: string\n  owner: string\n  createdAt?: Date\n  archivedAt?: Date\n}\n\nexport interface ClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n  yoloJustification?: string\n}\n\n/**\n * HDP-specific interface for ClusterModificationConfig.\n * Used for Holy Data Platform integration - keeps Date objects for timestamp fields.\n */\nexport interface HdpClusterModificationConfig {\n  uuid: string\n  clusterUuid: string\n  modificationUuid: string\n  creator: string\n  description: string\n  url?: string\n  createdAt?: Date\n  sealedAt?: Date\n  activatedAt?: Date\n  replacedBy?: string\n  deactivatedAt?: Date\n  deactivatedBy?: string | null\n  expiresAt?: Date | null\n  expiredNotifiedAt?: Date | null\n}\n\nexport interface ClusterBackupSchedule {\n  clusterId: string\n  schedule?: string\n}\n\nexport interface ClusterPlanType {\n  uuid: string\n  name: string\n  availabilityClass: string\n  isDevelopment: boolean\n}\n\nexport interface ClusterPlan {\n  uuid: string\n  name: string\n}\n\nexport interface Datacenter {\n  uuid: string\n  name: string\n}\nexport interface Generation {\n  uuid: string\n  name: string\n}\nexport interface Channel {\n  uuid: string\n  name: string\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionType {\n  ProcessAlert = 'ProcessAlert',\n}\n\n// eslint-disable-next-line no-shadow\nexport enum AlertSubscriptionReportType {\n  Email = 'Email',\n  Webhook = 'Webhook',\n}\nexport interface AlertSubscription {\n  uuid: string\n  clusterUuid?: string\n  target: string // userIdOrWebhook\n  reportType: AlertSubscriptionReportType\n  type: AlertSubscriptionType\n}\n\nexport interface ConsoleApiClient {\n  uuid: string\n  name: string\n  organizationUuid: string\n  permissions: ConsoleAPIClientPermission[]\n}\n\nexport interface ConnectorSecret {\n  clusterUuid: string\n  amountOfSecrets: number\n}\n\nexport interface ByomClient {\n  uuid: string\n  clusterUuid?: string\n  username: string\n}\n\nexport interface SecureConnectivity {\n  clusterUuid: string\n  allowedRegions: string[]\n  allowedPrincipals: string[]\n}\n\nexport interface ClusterClient {\n  uuid: string\n  name: string\n  clusterUuid?: string\n  clientId: string\n  permissions: ClusterClientPermission[]\n}\n\nexport interface Organization {\n  uuid: string\n  name: string\n  salesplan?: {\n    type: SalesPlanType // might be undefined when in limbo\n    displayedType?: DisplayedSalesPlan // might be undefined when in limbo\n    uuid: string // might be undefined when in limbo\n    name: string // might be undefined when in limbo\n    expireDate?: Date\n  }\n  reservations?: {\n    [key: string]: number\n  }\n  earlyAccessFeatures?: string[]\n  justOptedForTheBetaTerms?: boolean\n  salesForceProjectId?: string\n  awsOnly?: boolean\n  limits?: Limits\n}\n\nexport interface User {\n  name: string\n  email: string\n  userId: string\n  orgMemberships?: Array<{ orgUuid: string; roles: OrganizationRole[] }> // can be undefined which means: no new info ;)\n}\n\nexport interface UserLogin {\n  userId: string\n}\n\nexport interface Invite {\n  email: string\n  orgUuid: string\n  roles: OrganizationRole[]\n}\n\nexport interface UsageAlert {\n  orgId: string\n  metric: UsageAlertMetric\n  threshold: number\n  enabled: boolean\n  triggered: boolean\n}\n\nexport interface Audit {\n  service: string\n  orgId: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string\n  entityAttributeValueFrom?: string\n  entityAttributeValueTo?: string\n  parentEntity?: string\n  parentEntityId?: string\n}\n\nexport interface SystemAudit {\n  service: string\n  timestamp: number\n  audit: string\n  auditType: 'c' | 'r' | 'u' | 'd'\n  entity: string\n  entityId: string\n  userId: string\n  entityAttribute?: string | null\n  entityAttributeValueFrom?: string | null\n  entityAttributeValueTo?: string | null\n  orgId?: string | null\n  clusterId?: string | null\n}\n\nexport interface TelemetryData {\n  customerId: string\n  installationId: string\n  entities: Array<{ id: string; type: string }>\n  key: string\n  value: string | number | boolean\n  tags?: Record<string, string>\n  timestampFrom: number\n  timestampTo?: number\n}\n\nexport interface ClusterBulkOperation {\n  uuid: string\n  name: string\n  reason: string\n  eyes: number\n  clusterUuids: string[]\n  type: string\n  created: Date\n  updated?: Date\n  executedAt?: Date\n  createdBy: string\n}\n\nexport interface LlmSpend {\n  orgId: string\n  salesPlanType: SalesPlanType\n  spend: number\n  maxBudget: number\n}\n\nexport type HdpEntity =\n  | 'cluster'\n  | 'clusterBackup'\n  | 'clusterBackupSchedule'\n  | 'clusterRestore'\n  | 'datacenter'\n  | 'generation'\n  | 'channel'\n  | 'clusterPlan'\n  | 'clusterPlanType'\n  | 'alertSubscription'\n  | 'consoleApiClient'\n  | 'connectorSecret'\n  | 'byomClient'\n  | 'secureConnectivity'\n  | 'clusterClient'\n  | 'organization'\n  | 'user'\n  | 'invite'\n  | 'usageAlert'\n  | 'audit'\n  | 'systemAudit'\n  | 'telemetry'\n  | 'userlogin'\n  | 'clusterBulkOperation'\n  | 'clusterModification'\n  | 'clusterModificationConfig'\n  | 'llmSpend'\n\nexport interface HdpPrometheusDataCapacityDataPoint {\n  clusterId?: string\n  ts: number\n  avg: number\n  min: number\n  max: number\n}\n\nexport interface HdpBackendChangeEvent {\n  ts: number\n  data: {\n    stage: string\n    entity: string\n    operation: string\n    data: any\n  }\n}\n"],
+  "mappings": "AAuHO,IAAK,wBAAL,kBAAKA,2BAAL;AACL,EAAAA,uBAAA,kBAAe;AADL,SAAAA;AAAA,GAAA;AAKL,IAAK,8BAAL,kBAAKC,iCAAL;AACL,EAAAA,6BAAA,WAAQ;AACR,EAAAA,6BAAA,aAAU;AAFA,SAAAA;AAAA,GAAA;",
   "names": ["AlertSubscriptionType", "AlertSubscriptionReportType"]
 }

package/dist/utils/connectivityStatus.utils.d.ts

@@ -0,0 +1,28 @@
+export type ConnectivityStatus = 'Healthy' | 'Creating' | 'Updating' | 'Unhealthy';
+interface ConnectivityStatusCondition {
+    type?: string;
+    reason?: string;
+    message?: string;
+    lastTransitionTime?: string | Date;
+}
+/**
+ * Pick the most recent `PublicConnectivityReady` condition from the
+ * operator-reported status conditions list and map its `reason` to a
+ * `ConnectivityStatus`.
+ *
+ * Returns `undefined` when the condition is absent. The operator omits it
+ * when the public connectivity controller is disabled, so absence means
+ * "unknown", not "unhealthy" — every consumer must show nothing instead of
+ * an error state.
+ */
+export declare function deriveConnectivityStatus(conditions: ConnectivityStatusCondition[] | undefined): ConnectivityStatus | undefined;
+/**
+ * Get the condition message that names the routes which are not ready, for
+ * example `resources are not ready: operate, tasklist`.
+ *
+ * Only `Updating` and `Unhealthy` carry a message the customer can act on.
+ * `Healthy` and `Creating` get `undefined`, because there are no broken
+ * routes to name.
+ */
+export declare function deriveConnectivityMessage(conditions: ConnectivityStatusCondition[] | undefined): string | undefined;
+export {};

package/dist/utils/connectivityStatus.utils.js

@@ -0,0 +1,32 @@
+const CONNECTIVITY_CONDITION_TYPE = "PublicConnectivityReady";
+const KNOWN_CONNECTIVITY_STATUSES = /* @__PURE__ */ new Set([
+  "Healthy",
+  "Creating",
+  "Updating",
+  "Unhealthy"
+]);
+function latestConnectivityCondition(conditions) {
+  return (conditions ?? []).filter((c) => c.type === CONNECTIVITY_CONDITION_TYPE).slice().sort((a, b) => {
+    const aTime = new Date(a.lastTransitionTime ?? 0).getTime();
+    const bTime = new Date(b.lastTransitionTime ?? 0).getTime();
+    return (Number.isFinite(bTime) ? bTime : 0) - (Number.isFinite(aTime) ? aTime : 0);
+  })[0];
+}
+function toConnectivityStatus(reason) {
+  if (!reason || !KNOWN_CONNECTIVITY_STATUSES.has(reason)) return void 0;
+  return reason;
+}
+function deriveConnectivityStatus(conditions) {
+  return toConnectivityStatus(latestConnectivityCondition(conditions)?.reason);
+}
+function deriveConnectivityMessage(conditions) {
+  const condition = latestConnectivityCondition(conditions);
+  const status = toConnectivityStatus(condition?.reason);
+  if (status !== "Updating" && status !== "Unhealthy") return void 0;
+  return condition?.message;
+}
+export {
+  deriveConnectivityMessage,
+  deriveConnectivityStatus
+};
+//# sourceMappingURL=connectivityStatus.utils.js.map

package/dist/utils/connectivityStatus.utils.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/connectivityStatus.utils.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// Reason values the operator emits on the PublicConnectivityReady condition\n// (camunda-operator#5926). `Unhealthy` is the only reason that demotes the\n// cluster's overall `status.ready`; `Updating` is the same breakage inside the\n// grace period, and `Creating` means the routes were never healthy yet.\nexport type ConnectivityStatus =\n  | 'Healthy'\n  | 'Creating'\n  | 'Updating'\n  | 'Unhealthy'\n\ninterface ConnectivityStatusCondition {\n  type?: string\n  reason?: string\n  message?: string\n  lastTransitionTime?: string | Date\n}\n\nconst CONNECTIVITY_CONDITION_TYPE = 'PublicConnectivityReady'\n\nconst KNOWN_CONNECTIVITY_STATUSES = new Set<string>([\n  'Healthy',\n  'Creating',\n  'Updating',\n  'Unhealthy',\n])\n\nfunction latestConnectivityCondition(\n  conditions: ConnectivityStatusCondition[] | undefined,\n): ConnectivityStatusCondition | undefined {\n  return (conditions ?? [])\n    .filter((c) => c.type === CONNECTIVITY_CONDITION_TYPE)\n    .slice()\n    .sort((a, b) => {\n      const aTime = new Date(a.lastTransitionTime ?? 0).getTime()\n      const bTime = new Date(b.lastTransitionTime ?? 0).getTime()\n      return (\n        (Number.isFinite(bTime) ? bTime : 0) -\n        (Number.isFinite(aTime) ? aTime : 0)\n      )\n    })[0]\n}\n\n/**\n * Map the `reason` of a condition to a `ConnectivityStatus`.\n *\n * Gives `undefined` for a reason this function does not know, because a\n * reason it cannot map is a status the UI cannot show truthfully.\n */\nfunction toConnectivityStatus(\n  reason: string | undefined,\n): ConnectivityStatus | undefined {\n  if (!reason || !KNOWN_CONNECTIVITY_STATUSES.has(reason)) return undefined\n  return reason as ConnectivityStatus\n}\n\n/**\n * Pick the most recent `PublicConnectivityReady` condition from the\n * operator-reported status conditions list and map its `reason` to a\n * `ConnectivityStatus`.\n *\n * Returns `undefined` when the condition is absent. The operator omits it\n * when the public connectivity controller is disabled, so absence means\n * \"unknown\", not \"unhealthy\" \u2014 every consumer must show nothing instead of\n * an error state.\n */\nexport function deriveConnectivityStatus(\n  conditions: ConnectivityStatusCondition[] | undefined,\n): ConnectivityStatus | undefined {\n  return toConnectivityStatus(latestConnectivityCondition(conditions)?.reason)\n}\n\n/**\n * Get the condition message that names the routes which are not ready, for\n * example `resources are not ready: operate, tasklist`.\n *\n * Only `Updating` and `Unhealthy` carry a message the customer can act on.\n * `Healthy` and `Creating` get `undefined`, because there are no broken\n * routes to name.\n */\nexport function deriveConnectivityMessage(\n  conditions: ConnectivityStatusCondition[] | undefined,\n): string | undefined {\n  // Read the condition once: the status and the message must come from the\n  // same condition, and a second read sorts the list again.\n  const condition = latestConnectivityCondition(conditions)\n  const status = toConnectivityStatus(condition?.reason)\n  if (status !== 'Updating' && status !== 'Unhealthy') return undefined\n  return condition?.message\n}\n"],
+  "mappings": "AAuBA,MAAM,8BAA8B;AAEpC,MAAM,8BAA8B,oBAAI,IAAY;AAAA,EAClD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,4BACP,YACyC;AACzC,UAAQ,cAAc,CAAC,GACpB,OAAO,CAAC,MAAM,EAAE,SAAS,2BAA2B,EACpD,MAAM,EACN,KAAK,CAAC,GAAG,MAAM;AACd,UAAM,QAAQ,IAAI,KAAK,EAAE,sBAAsB,CAAC,EAAE,QAAQ;AAC1D,UAAM,QAAQ,IAAI,KAAK,EAAE,sBAAsB,CAAC,EAAE,QAAQ;AAC1D,YACG,OAAO,SAAS,KAAK,IAAI,QAAQ,MACjC,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,EAEtC,CAAC,EAAE,CAAC;AACR;AAQA,SAAS,qBACP,QACgC;AAChC,MAAI,CAAC,UAAU,CAAC,4BAA4B,IAAI,MAAM,EAAG,QAAO;AAChE,SAAO;AACT;AAYO,SAAS,yBACd,YACgC;AAChC,SAAO,qBAAqB,4BAA4B,UAAU,GAAG,MAAM;AAC7E;AAUO,SAAS,0BACd,YACoB;AAGpB,QAAM,YAAY,4BAA4B,UAAU;AACxD,QAAM,SAAS,qBAAqB,WAAW,MAAM;AACrD,MAAI,WAAW,cAAc,WAAW,YAAa,QAAO;AAC5D,SAAO,WAAW;AACpB;",
+  "names": []
+}

package/dist/utils/failoverKeyPolicy.utils.d.ts

@@ -1,24 +1,21 @@
 /**
- * The three IAM principals that need access to a BYOK cluster's KMS keys after
- * a failover. All three live in the failover region's account — the same
- * account as the failover cluster's own role.
+ * The two IAM principals that need access to a BYOK cluster's KMS keys after
+ * a failover. Both live in the failover region's account — the same account
+ * as the failover cluster's own role.
  */
 export interface FailoverKeyPolicyPrincipals {
     /** Reads the source cluster's secondary bucket during the BucketClone. */
     cloneRole: string;
     /** The failover cluster's own access to its new primary bucket. */
     clusterRole: string;
-    /** Replicates the new primary bucket back out to its secondary. */
-    replicationRole: string;
 }
 /**
- * Derive the three principals a customer must add to both KMS key policies
+ * Derive the two principals a customer must add to their KMS key policies
  * after a failover, from the failover cluster's own role ARN and the stableId
  * carried over from its source.
  *
- * The clone role is pre-staged as `clone-backup-<stableId>`, and the
- * replication role is the cluster role with a `-replication` suffix — so the
- * account parsed out of the cluster role ARN is all that is needed.
+ * The clone role is pre-staged as `clone-backup-<stableId>`, so the account
+ * parsed out of the cluster role ARN is all that is needed.
  *
  * Returns `undefined` when either input is missing or the role ARN is not in
  * the expected shape, so callers render nothing rather than a wrong ARN.

package/dist/utils/failoverKeyPolicy.utils.js

@@ -5,8 +5,7 @@ function deriveFailoverKeyPolicyPrincipals(clusterRoleArn, stableId) {
   if (!account) return void 0;
   return {
     cloneRole: `arn:aws:iam::${account}:role/c8-cluster/clone-backup-${stableId}`,
-    clusterRole: clusterRoleArn,
-    replicationRole: `${clusterRoleArn}-replication`
+    clusterRole: clusterRoleArn
   };
 }
 export {

package/dist/utils/failoverKeyPolicy.utils.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/utils/failoverKeyPolicy.utils.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/**\n * The cluster's own IAM role ARN, surfaced by the operator on the ZeebeCluster\n * `status.accountId` field (the name is historical \u2014 the value is a role ARN,\n * not a bare account id):\n *\n *   arn:aws:iam::<account>:role/c8-cluster/c8-apps-<clusterUuid>\n */\nconst CLUSTER_ROLE_ARN =\n  /^arn:aws:iam::(?<account>\\d{12}):role\\/c8-cluster\\/c8-apps-(?<uuid>[0-9a-f-]{36})$/u\n\n/**\n * The three IAM principals that need access to a BYOK cluster's KMS keys after\n * a failover. All three live in the failover region's account \u2014 the same\n * account as the failover cluster's own role.\n */\nexport interface FailoverKeyPolicyPrincipals {\n  /** Reads the source cluster's secondary bucket during the BucketClone. */\n  cloneRole: string\n  /** The failover cluster's own access to its new primary bucket. */\n  clusterRole: string\n  /** Replicates the new primary bucket back out to its secondary. */\n  replicationRole: string\n}\n\n/**\n * Derive the three principals a customer must add to both KMS key policies\n * after a failover, from the failover cluster's own role ARN and the stableId\n * carried over from its source.\n *\n * The clone role is pre-staged as `clone-backup-<stableId>`, and the\n * replication role is the cluster role with a `-replication` suffix \u2014 so the\n * account parsed out of the cluster role ARN is all that is needed.\n *\n * Returns `undefined` when either input is missing or the role ARN is not in\n * the expected shape, so callers render nothing rather than a wrong ARN.\n */\nexport function deriveFailoverKeyPolicyPrincipals(\n  clusterRoleArn: string | undefined,\n  stableId: string | undefined,\n): FailoverKeyPolicyPrincipals | undefined {\n  if (!clusterRoleArn || !stableId) return undefined\n\n  const account = CLUSTER_ROLE_ARN.exec(clusterRoleArn)?.groups?.account\n  if (!account) return undefined\n\n  return {\n    cloneRole: `arn:aws:iam::${account}:role/c8-cluster/clone-backup-${stableId}`,\n    clusterRole: clusterRoleArn,\n    replicationRole: `${clusterRoleArn}-replication`,\n  }\n}\n"],
-  "mappings": "AAaA,MAAM,mBACJ;AA4BK,SAAS,kCACd,gBACA,UACyC;AACzC,MAAI,CAAC,kBAAkB,CAAC,SAAU,QAAO;AAEzC,QAAM,UAAU,iBAAiB,KAAK,cAAc,GAAG,QAAQ;AAC/D,MAAI,CAAC,QAAS,QAAO;AAErB,SAAO;AAAA,IACL,WAAW,gBAAgB,OAAO,iCAAiC,QAAQ;AAAA,IAC3E,aAAa;AAAA,IACb,iBAAiB,GAAG,cAAc;AAAA,EACpC;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/**\n * The cluster's own IAM role ARN, surfaced by the operator on the ZeebeCluster\n * `status.accountId` field (the name is historical \u2014 the value is a role ARN,\n * not a bare account id):\n *\n *   arn:aws:iam::<account>:role/c8-cluster/c8-apps-<clusterUuid>\n */\nconst CLUSTER_ROLE_ARN =\n  /^arn:aws:iam::(?<account>\\d{12}):role\\/c8-cluster\\/c8-apps-(?<uuid>[0-9a-f-]{36})$/u\n\n/**\n * The two IAM principals that need access to a BYOK cluster's KMS keys after\n * a failover. Both live in the failover region's account \u2014 the same account\n * as the failover cluster's own role.\n */\nexport interface FailoverKeyPolicyPrincipals {\n  /** Reads the source cluster's secondary bucket during the BucketClone. */\n  cloneRole: string\n  /** The failover cluster's own access to its new primary bucket. */\n  clusterRole: string\n}\n\n/**\n * Derive the two principals a customer must add to their KMS key policies\n * after a failover, from the failover cluster's own role ARN and the stableId\n * carried over from its source.\n *\n * The clone role is pre-staged as `clone-backup-<stableId>`, so the account\n * parsed out of the cluster role ARN is all that is needed.\n *\n * Returns `undefined` when either input is missing or the role ARN is not in\n * the expected shape, so callers render nothing rather than a wrong ARN.\n */\nexport function deriveFailoverKeyPolicyPrincipals(\n  clusterRoleArn: string | undefined,\n  stableId: string | undefined,\n): FailoverKeyPolicyPrincipals | undefined {\n  if (!clusterRoleArn || !stableId) return undefined\n\n  const account = CLUSTER_ROLE_ARN.exec(clusterRoleArn)?.groups?.account\n  if (!account) return undefined\n\n  return {\n    cloneRole: `arn:aws:iam::${account}:role/c8-cluster/clone-backup-${stableId}`,\n    clusterRole: clusterRoleArn,\n  }\n}\n"],
+  "mappings": "AAaA,MAAM,mBACJ;AAyBK,SAAS,kCACd,gBACA,UACyC;AACzC,MAAI,CAAC,kBAAkB,CAAC,SAAU,QAAO;AAEzC,QAAM,UAAU,iBAAiB,KAAK,cAAc,GAAG,QAAQ;AAC/D,MAAI,CAAC,QAAS,QAAO;AAErB,SAAO;AAAA,IACL,WAAW,gBAAgB,OAAO,iCAAiC,QAAQ;AAAA,IAC3E,aAAa;AAAA,EACf;AACF;",
   "names": []
 }

package/dist/utils/orgStartDate.utils.d.ts

@@ -0,0 +1,28 @@
+/** Minimal org shape `computeOrgStartDate` needs. `OrganizationDto` satisfies it. */
+export interface OrgStartDateInput {
+    created?: Date | string;
+    organizationToSalesPlan?: {
+        salesPlan: {
+            salesPlanType?: string;
+        };
+        trialPlanStartDate?: Date | string;
+        enterpriseStartDate?: Date | string;
+    };
+}
+/**
+ * The date an org's value metrics start counting from, by sales-plan type.
+ *
+ * - `enterprise`: `enterpriseStartDate`, or now when that is missing.
+ * - `trial`: `created`, or `trialPlanStartDate` when `created` is missing, or
+ *   now when neither is set.
+ * - every other plan type (`in-negotiation`, `free`, `internal`, …): `created`,
+ *   or now when `created` is missing.
+ *
+ * Ported from accounts-frontend's `computeOrgStartDate`
+ * (`apps/accounts-frontend/src/models/api/valueMetrics.ts`) so
+ * control-frontend's Value metrics "group by" control buckets periods the
+ * same way the legacy Accounts tool did. Kept here so the two surfaces
+ * cannot silently disagree about which day a period starts on — the same
+ * reason `enterpriseTerm.utils.ts` in this file was extracted.
+ */
+export declare function computeOrgStartDate(organisation: OrgStartDateInput | undefined): Date;