@camunda/ccma-shared-types 1.0.0 → 1.1.0

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/index.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Constants (runtime values)\n// ============================================================================\n\nexport { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js'\nexport {\n  isSupportedFailoverRegionPair,\n  SUPPORTED_FAILOVER_REGION_PAIRS,\n} from './constants/failoverRegionPairs.const.js'\nexport type { Stage } from './constants/misc.const.js'\nexport {\n  CONSOLE_API_USER_ID,\n  FIRSTNAME_LASTNAME_MAX_LENGTH,\n  HOTBACKUP_MIN_CREATE_PERIOD,\n  MAX_HARDWARE_PACKAGE_COUNT,\n  MAX_LENGTH_CLUSTER_NAME,\n  MINIMUM_EYEPAIRS,\n  NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,\n  SECRETS_MAX_LENGTH,\n  STARTING_PRICE_PER_MONTH_IN_EURO,\n  TEMPORARY_CLUSTER_NAME,\n} from './constants/misc.const.js'\nexport {\n  getGatewayPropertyHint,\n  getGatewayPropertyPath,\n  isAffectedByStreamlinedDeployment,\n  isPre89AffectedPath,\n  PRE89_AFFECTED_PATHS,\n  PRE89_AFFECTED_PROPERTY_PREFIXES,\n  PRE89_GATEWAY_PROPERTY_PATHS,\n  PRE89_GATEWAY_RESOURCE_PREFIXES,\n} from './constants/pre89EnvVarMapping.const.js'\nexport { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js'\nexport { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js'\nexport type {\n  TrialExtensionSurveyAnswer,\n  TrialExtensionSurveyQuestion,\n} from './constants/trialExtensionSurvey.const.js'\nexport { TRIAL_EXTENSION_SURVEY_QUESTIONS } from './constants/trialExtensionSurvey.const.js'\nexport {\n  ADMIN_APP_RENAME_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_MINOR,\n  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,\n  APP_INTEGRATIONS_MIN_VERSION,\n  AUDIT_LOG_TAB_MIN_VERSION,\n  AUTHORIZATION_TOGGLE_MIN_VERSION,\n  AWS_ONLY_GENERATION_MIN_VERSION,\n  BUSINESS_ID_UNIQUENESS_MIN_VERSION,\n  BYOIDP_MIN_VERSION,\n  CLUSTER_SECRETS_LABEL_MIN_VERSION,\n  CLUSTER_STATISTICS_CONFIG_MIN_VERSION,\n  CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION,\n  CONNECTOR_SECRET_SYNC_MIN_VERSION,\n  CONNECTORS_MANAGEMENT_LINK_MIN_VERSION,\n  ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION,\n  ENFORCE_GROUPS_TOGGLE_MIN_VERSION,\n  GATEWAY_SPEC_8_9_MIN_VERSION,\n  HOT_BACKUP_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION,\n  IDENTITY_MANAGEMENT_MIN_VERSION,\n  INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION,\n  JOB_DASHBOARD_MIN_VERSION,\n  LINE_8_9_MIN_VERSION,\n  LINE_8_10_MIN_VERSION,\n  MCP_MIN_VERSION,\n  MULTI_TENANCY_TOGGLE_MIN_VERSION,\n  NEW_CLUSTER_ROLES_MIN_VERSION,\n  OPTIMIZE_DEFAULT_ON_MIN_VERSION,\n  OPTIMIZE_FILTERING_MIN_VERSION,\n  OPTIONAL_TELEMETRY_MIN_VERSION,\n  RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,\n  REST_API_URL_TRANSFORM_MIN_VERSION,\n  REST_API_V2_MIN_VERSION,\n  SECRET_SOURCE_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_6_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_7_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_8_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_9_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_10_MIN_VERSION,\n  SESSION_CONFIG_MIN_VERSION,\n  SWAGGER_MIN_VERSION,\n  SWAGGER_URL_8_9_MIN_VERSION,\n  TASKLIST_MODE_TOGGLE_MIN_VERSION,\n  TASKLIST_UPGRADE_BANNER_MIN_VERSION,\n  TASKLIST_V2_AUTO_ENABLE_FROM_MINOR,\n  TASKLIST_V2_AUTO_ENABLE_TO_MINOR,\n  TASKLIST_V2_DEFAULT_ON_MIN_VERSION,\n  TASKLIST_V2_SETTING_MAX_VERSION,\n  TASKLIST_V2_UPGRADE_MIN_VERSION,\n  TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION,\n  ZEEBE_REST_URL_MIN_VERSION,\n} from './constants/version-gates.const.js'\n\n// ============================================================================\n// DTOs - Types (interfaces and type aliases)\n// ============================================================================\n\nexport type {\n  ALERT_SUBSCRIPTION_REPORT_TYPES,\n  ALERT_SUBSCRIPTION_TYPES,\n  AlertSubscriptionDto,\n  AlertSubscriptionEntryDto,\n  AlertSubscriptionWebhookAuth,\n  CheckFailedReason,\n} from './dtos/AlertSubscription.dto.js'\n\n// DTOs - Values (constants)\nexport {\n  FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,\n  HMAC_HEADER_POSITION,\n  HMAC_SUPPORTED_ALGORITHM,\n} from './dtos/AlertSubscription.dto.js'\n\nexport type { AuditDto } from './dtos/Audit.dto.js'\nexport type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js'\nexport type { BackupDto } from './dtos/Backup.dto.js'\nexport type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js'\nexport type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js'\nexport type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js'\nexport type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js'\nexport type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js'\nexport type {\n  ClusterSpecChange,\n  ClusterSpecChangeActor,\n  ClusterSpecHistory,\n} from './dtos/ClusterSpecHistory.dto.js'\nexport type {\n  CommonClusterDto,\n  ExternalIdpConfig,\n  OptimizeFilteringConfig,\n  OptimizeFilteringIncludeExclude,\n  OptimizeFilteringPatch,\n  SecretsFilterMode,\n} from './dtos/CommonCluster.dto.js'\nexport type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js'\nexport type {\n  ClusterByClientV2Dto,\n  ClusterDatacenterOptionV2Dto,\n  ClusterDetailV2Dto,\n  ClusterFacetsV2Dto,\n  ClusterListItemV2Dto,\n  ClusterParameterOptionV2Dto,\n  ClusterParametersV2Dto,\n  ControlResolvedPermissions,\n  ControlSessionDto,\n  ControlSessionUser,\n  CursorPage,\n  CursorParams,\n  ListClustersV2Params,\n  ListOrganizationsV2Params,\n  ListOrgMembersV2Params,\n  OrgDetailV2Dto,\n  OrgListItemV2Dto,\n  OrgMemberV2Dto,\n  OrgSummaryV2Dto,\n} from './dtos/ControlV2.dto.js'\nexport type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js'\nexport type {\n  CamundaWebApp,\n  CamundaWebAppWithZeebe,\n  ExternalClusterDto,\n  ExternalOrganizationDto,\n} from './dtos/ExternalWebapp.dto.js'\n// Functions\nexport {\n  type GenerationDto,\n  type GenerationWithClusterCountDto,\n  sortGenerationBySemverOfZeebe,\n  type UpgradableGenerationsDto,\n} from './dtos/Generations.dto.js'\n// Namespace (type-only - contains only interfaces)\nexport type { Hdp } from './dtos/Hdp.dto.js'\nexport type {\n  K8sConfig,\n  K8sConfigLegacyFormat,\n  K8sContext,\n  K8sContextDto,\n} from './dtos/K8sContext.dto.js'\nexport type { MetaDto } from './dtos/Meta.dto.js'\nexport type {\n  AutoJoinAssignment,\n  LicensingModelType,\n  OrganizationDto,\n  OrganizationMetadata,\n  OrgOwner,\n  OrgWithNameAndSalesPlan,\n} from './dtos/Organization.dto.js'\nexport {\n  LICENSING_MODEL_DISPLAY_NAMES,\n  VALID_LICENSING_MODELS,\n} from './dtos/Organization.dto.js'\nexport type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js'\nexport type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js'\nexport type {\n  ReleaseTrainSanityReport,\n  SanityFix,\n  SanityRuleInfo,\n  SanitySeverity,\n  SanityViolation,\n} from './dtos/ReleaseTrainSanity.dto.js'\nexport type { RestoreDto, RestoreState } from './dtos/Restore.dto.js'\n// SalesPlan.dto - Types\nexport type {\n  ClusterLimits,\n  ConsumptionDataItem,\n  Limits,\n  SalesPlanDto,\n  SalesPlanMetadata,\n} from './dtos/SalesPlan.dto.js'\n// SalesPlan.dto - Values (constants and functions)\nexport {\n  allClusterBasedLimits,\n  allSalesPlanLimits,\n  deprecatedLimit,\n  MAX_CLUSTER_CLIENTS_DEFAULT,\n  MAX_CLUSTER_CLIENTS_DEV,\n  RETENTION_LIMIT_DEFAULT,\n  RETENTION_LIMIT_MAXIMUM,\n  RETENTION_LIMIT_MINIMUM,\n  unusedClusterBasedLimits,\n  unusedSalesPlanLimits,\n} from './dtos/SalesPlan.dto.js'\nexport type { SecureConnectivityDto } from './dtos/SecureConnectivity.dto.js'\nexport type { SignupDto } from './dtos/Signup.dto.js'\nexport type {\n  StorybookConfig,\n  StorybookConfigBackup,\n  StorybookConfigChannel,\n  StorybookConfigDatacenter,\n  StorybookConfigGeneration,\n} from './dtos/StorybookConfig.dto.js'\nexport type { SystemAuditDto } from './dtos/SystemAudit.dto.js'\n// UsageAlert.dto - Types\nexport type { UsageAlertDto } from './dtos/UsageAlert.dto.js'\n// UsageAlert.dto - Values (enum and constants)\nexport {\n  UsageAlertInitValues,\n  UsageAlertMetric,\n  UsageAlertThresholdLimits,\n} from './dtos/UsageAlert.dto.js'\nexport type { UserMetaDataDto } from './dtos/UserMetaData.dto.js'\n// Lucene-style table search (parser + AST \u2192 SQL compiler + field registries).\nexport {\n  type AndNode,\n  CLUSTER_DEFAULT_SEARCH_FIELDS,\n  CLUSTER_SEARCH_FIELDS,\n  type CompileContext,\n  type CompiledQuery,\n  compileQuery,\n  type FieldBinding,\n  findSearchField,\n  isLuceneQueryError,\n  LuceneQueryError,\n  likeArgument,\n  type NotNode,\n  ORG_DEFAULT_SEARCH_FIELDS,\n  ORGANIZATION_SEARCH_FIELDS,\n  type OrNode,\n  parseLuceneQuery,\n  type QueryNode,\n  type RangeNode,\n  type SearchFieldCapability,\n  type SearchFieldSpec,\n  type SearchFieldType,\n  type SearchTermOperator,\n  type TermNode,\n} from './search/index.js'\n\n// ============================================================================\n// Enums (runtime values)\n// ============================================================================\n\nexport {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from './enums/AlertSubscription.enum.js'\nexport { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js'\nexport { AuditService } from './enums/AuditService.enum.js'\nexport { BackupStatus } from './enums/BackupStatus.enum.js'\nexport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from './enums/ClusterBulkOperation.enum.js'\nexport { ClusterClientPermission } from './enums/ClusterClientPermissions.enum.js'\nexport { ClusterEncryptionKey } from './enums/ClusterEncryptionKey.enum.js'\nexport { ClusterStatus } from './enums/ClusterStatus.enum.js'\nexport { ConsoleAPIClientPermission } from './enums/ConsoleApiClientPermission.enum.js'\nexport { ErrorType } from './enums/ErrorType.enum.js'\nexport type {\n  AssignableOrganizationRoleType,\n  OrganizationRoleType,\n  UnassignableOrganizationRoleType,\n} from './enums/OrganizationRole.enum.js'\nexport {\n  AssignableOrganizationRole,\n  LegacyHeldOrganizationRole,\n  OrganizationRole,\n  UnassignableOrganizationRole,\n} from './enums/OrganizationRole.enum.js'\nexport { SseEntity, SseType } from './enums/Sse.enum.js'\nexport {\n  SystemAuditEntity,\n  SystemAuditEntityAttribute,\n} from './enums/SystemAuditEntity.enum.js'\n\n// ============================================================================\n// Permissions - Namespaces (runtime values)\n// ============================================================================\n\nexport { AccountsPermissions } from './permissions/accounts.permissions.js'\nexport { AlertDistributorPermissions } from './permissions/alert-distributor.permissions.js'\nexport { AuditLoggerPermissions } from './permissions/auditlogger.permissions.js'\nexport {\n  accountsUserFeaturesFromPermissions,\n  consoleUserFeaturesFromPermissions,\n} from './permissions/combo.js'\nexport { ConsolePermissions } from './permissions/console.permissions.js'\nexport { NotificationPermissions } from './permissions/notification.permissions.js'\n// profile.permissions - Types\nexport type { OnboardConfig } from './permissions/profile.permissions.js'\n// profile.permissions - Values (constants)\n// NOTE: the `allowed` email lists (CLOUD_TEAM_EMAILS, SRE_TEAM_EMAILS, etc.)\n// intentionally live in the private `@camunda-cloud/shared-backend` package\n// instead of here, since this package is published publicly to npm.\nexport { PROFILES } from './permissions/profile.permissions.js'\nexport { expandRolesToPermissions } from './permissions/roleExpansion.utils.js'\n\n// ============================================================================\n// Types - Type-only exports (interfaces and type aliases)\n// ============================================================================\n\nexport type { AuditData } from './types/AuditData.type.js'\n// AutoSleep.type - Types\nexport type {\n  ActivitySleepEligibilityOptions,\n  SleepCronEligibilityOptions,\n} from './types/AutoSleep.type.js'\n// AutoSleep.type - Values (constants and functions)\nexport {\n  INTERNAL_LOW_HARDWARE_PLAN_NAME,\n  isActivitySleepEligible,\n  isClusterTagEligibleForSleepCron,\n  isSalesPlanEligibleForSleepCron,\n  isSleepCronEligible,\n  SLEEP_CRON_ELIGIBLE_TAGS,\n} from './types/AutoSleep.type.js'\nexport type {\n  BotContext,\n  BotOptions,\n  BotRequest,\n  GetUserDetailsResponse,\n  ListRolesForUserResponse,\n  UpdateUserRolesRequest,\n  UpdateUserRolesResponse,\n  UserContext,\n  UserDetails,\n} from './types/Bot.types.js'\n// BulkOperation.type - Types\nexport type {\n  BulkClusterDeletionContent,\n  BulkClusterDeletionItem,\n  BulkClusterGenerationUpdateItem,\n  BulkClusterPlanTypeUpdateContent,\n  BulkClusterPlanTypeUpdateItem,\n  BulkClusterPlanUpdateContent,\n  BulkClusterPlanUpdateItem,\n  BulkGenerationUpdateContent,\n  GenericBulkClusterOperationContent,\n  GenericBulkOperationContent,\n  GenericClusterBulkOperationItem,\n} from './types/BulkOperation.type.js'\n// BulkOperation.type - Functions (type guards)\nexport {\n  isBulkClusterDeletionItem,\n  isBulkClusterPlanTypeUpdateItem,\n  isBulkClusterPlanUpdateItem,\n  isIsBulkClusterGenerationUpdateIten,\n} from './types/BulkOperation.type.js'\n// C8ClusterComponentVersions.type - Types\nexport type {\n  ImmutableZeebeClusterVersionsDto,\n  MutableZeebeClusterVersionsDto,\n  ZeebeClusterVersionsDto,\n} from './types/C8ClusterComponentVersions.type.js'\n// C8ClusterComponentVersions.type - Values (constants)\nexport {\n  AllThings,\n  ImmutableThings,\n  MutableThings,\n} from './types/C8ClusterComponentVersions.type.js'\n// CamundaClusterLabels.type - Types\nexport type {\n  CamundaClusterStage,\n  CamundaClusterStageLabel,\n  ClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// CamundaClusterLabels.type - Values (constants)\nexport {\n  ALLOWED_CAMUNDA_LABELS,\n  StageClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// Chargebee.type - Types\nexport type { SubscriptionItem } from './types/Chargebee.type.js'\n// Chargebee.type - Values (enums)\nexport { ConsumptionData, ConsumptionDataType } from './types/Chargebee.type.js'\n// ClusterBulkOperation.type - Types\nexport type {\n  ClusterBulkOperationAck,\n  ClusterBulkOperationClusterDto,\n  ClusterBulkOperationContent,\n  ClusterBulkOperationDto,\n  ClusterBulkOperationGenerationUpdateParameter,\n  ClusterBulkOperationParameter,\n  ClusterBulkOperationPlanTypeUpdateParameter,\n  ClusterBulkOperationPlanUpdateParameter,\n  ClusterBulkOperationPostContent,\n  ClusterSleepWakeupParameter,\n} from './types/ClusterBulkOperation.type.js'\nexport type {\n  ClusterModificationConfigDto,\n  ClusterModificationDto,\n} from './types/ClusterModification.type.js'\n// ClusterPlanFields.type - Values (field spec and type guard)\nexport {\n  CLUSTER_PLAN_FIELDS,\n  type ClusterPlanFieldSpec,\n  type ClusterPlanFieldTree,\n  isClusterPlanFieldSpec,\n} from './types/ClusterPlanFields.type.js'\nexport type {\n  ClusterPlanModificationAck,\n  ClusterPlanModificationConfig,\n  ClusterPlanModificationDto,\n} from './types/ClusterPlanModification.type.js'\n// ClusterPlanTypeAvailabilityClass.type - Values (enum and function)\nexport {\n  ClusterPlanTypeAvailabilityClass,\n  sortByAvailabilityClasses,\n} from './types/ClusterPlanTypeAvailabilityClass.type.js'\n// ClusterPlanTypeCategory.type - Values (enum and functions)\nexport {\n  ClusterPlanTypeCategory,\n  hasAvailabilityClass,\n  sortByClusterPlanTypeCategory,\n} from './types/ClusterPlanTypeCategory.type.js'\nexport type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js'\nexport type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js'\nexport type {\n  ClusterUsageDataRequest,\n  ClusterUsageMetricsAddRequestByMetricHeap,\n  ClusterUsageMetricsData,\n  ClusterUsageMetricsFilter,\n  ClusterUsageOrgStartDate,\n} from './types/ClusterUsageMetrics.type.js'\n// Namespace with runtime values (consts, functions, enums)\nexport { ConsoleSM } from './types/ConsoleSelfManaged.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { ConsoleSMAdminApi } from './types/ConsoleSelfManagedAdminApi.type.js'\n// Dashboard.types - Types\nexport type {\n  DashboardConfig,\n  DashboardMappingItem,\n  DashboardMappingTarget,\n  DashboardResultPrimitive,\n  DashboardResultRow,\n  EngineeringOperationsDashboardResponse,\n} from './types/Dashboard.types.js'\nexport type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js'\nexport type {\n  HdpTenantUsageBreakdown,\n  HdpTenantUsagePerClusterPoint,\n  HdpTenantUsagePoint,\n} from './types/HdpTenantUsage.type.js'\n// hdp.types - Types (interfaces)\nexport type {\n  AlertSubscription as HdpAlertSubscription,\n  Audit as HdpAudit,\n  ByomClient as HdpByomClient,\n  Channel as HdpChannel,\n  Cluster as HdpCluster,\n  ClusterBackup as HdpClusterBackup,\n  ClusterBackupSchedule as HdpClusterBackupSchedule,\n  ClusterBulkOperation as HdpClusterBulkOperation,\n  ClusterClient as HdpClusterClient,\n  ClusterModification as HdpClusterModification,\n  ClusterPlan as HdpClusterPlan,\n  ClusterPlanType as HdpClusterPlanType,\n  ConnectorSecret as HdpConnectorSecret,\n  ConsoleApiClient as HdpConsoleApiClient,\n  Datacenter as HdpDatacenter,\n  Generation as HdpGeneration,\n  HdpBackendChangeEvent,\n  HdpClusterModificationConfig,\n  HdpEntity,\n  HdpPrometheusDataCapacityDataPoint,\n  Invite as HdpInvite,\n  LlmSpend as HdpLlmSpend,\n  Organization as HdpOrganization,\n  SecureConnectivity as HdpSecureConnectivity,\n  SystemAudit as HdpSystemAudit,\n  TelemetryData as HdpTelemetryData,\n  UsageAlert as HdpUsageAlert,\n  User as HdpUser,\n  UserLogin as HdpUserLogin,\n} from './types/hdp.types.js'\n// hdp.types - Values (enums)\nexport {\n  AlertSubscriptionReportType as HdpAlertSubscriptionReportType,\n  AlertSubscriptionType as HdpAlertSubscriptionType,\n} from './types/hdp.types.js'\n// notification.type - Types\nexport type {\n  GlobalNotification,\n  NotificationDto,\n  NotificationMeta,\n  NotificationOptions,\n  NotificationPermission,\n  NotificationSource,\n  NotificationState,\n  NotificationType,\n  OrgNotification,\n  UserNotification,\n  UserOrgNotification,\n} from './types/notification.type.js'\n// notification.type - Values (enums and constants)\nexport {\n  NotificationPermissionValues,\n  NotificationSourceEnum,\n  NotificationStateEnum,\n  NotificationTypeEnum,\n} from './types/notification.type.js'\n// OrganizationPermission.type - Types\nexport type {\n  CreateReadUpdateDelete,\n  OrganizationPermissions,\n} from './types/OrganizationPermission.type.js'\n// OrganizationPermission.type - Values (constants)\nexport {\n  OrganizationPermissionsDescriptions,\n  PermissionsForOrganizationRole,\n} from './types/OrganizationPermission.type.js'\n// Roles.js - Types\nexport type {\n  AccountRoles,\n  ConsoleRoles,\n  ModelerRoles,\n  Roles,\n} from './types/Roles.js'\n// Roles.js - Values (constants)\nexport { SAFE_ROLES } from './types/Roles.js'\n// SalesPlanType.type - Types\nexport type {\n  DisplayedSalesPlan,\n  RevisitedSalesPlanName,\n} from './types/SalesPlanType.type.js'\n// SalesPlanType.type - Values (enums and functions)\nexport {\n  AnalyticsSalesPlanType,\n  getAnalyticsSalesPlanFromOrgSalesPlan,\n  getDisplayedSalesPlan,\n  getRevisitedSalesPlanName,\n  OPTIMIZE_DISABLED_PLAN_TYPES,\n  SalesPlanType,\n} from './types/SalesPlanType.type.js'\n// SpamDetection.type - Types\nexport type { SpamDetectionPatterns } from './types/SpamDetection.type.js'\n// SpamDetection.type - Values (constants)\nexport { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js'\nexport type {\n  AlertSubscriptionSseEvent,\n  BackupSseEvent,\n  ClusterClientSseEvent,\n  ClusterSseEvent,\n  ConnectorSecretsSseEvent,\n  ConsoleApiClientSseEvent,\n  ConsoleSseEvent,\n  MonitoringSseEvent,\n  SecureConnectivitySseEvent,\n  SseClusterPayload,\n  SseMonitoringPayload,\n  SseSecureConnectivityPayload,\n} from './types/SseEvent.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { AccountsStats } from './types/Stats.types.js'\n// Survey.type - Types\nexport type { Persona, SurveyDto } from './types/Survey.type.js'\n// Survey.type - Values (enum)\nexport { FeedbackType } from './types/Survey.type.js'\n// SuspendStrategy.type - Types\nexport type {\n  GetSuspendStrategyOptions,\n  SuspendStrategy,\n} from './types/SuspendStrategy.type.js'\n// SuspendStrategy.type - Values (function)\nexport { getSuspendStrategy } from './types/SuspendStrategy.type.js'\nexport type { SystemAuditData } from './types/SystemAuditData.type.js'\n\n// Namespace (runtime value)\nexport { Telemetry } from './types/Telemetry.type.js'\n\n// TrialManagement.types - Types\nexport type {\n  ExtensionListItem,\n  ExtensionListResponse,\n  OrgTrialDetail,\n  TrialExtensionSource,\n  TrialManagementStats,\n} from './types/TrialManagement.types.js'\n\n// User.type - Types\nexport type {\n  AccountsData,\n  AppMetadata,\n  BasicUser,\n  BlockedFor,\n  Identity,\n  OrgMembership,\n  User,\n  UserMetadata,\n  UserRequest,\n} from './types/User.type.js'\n\n// User.type - Values (enum)\nexport { UserMetadataEvent } from './types/User.type.js'\n\nexport type {\n  UniqueTaskUser,\n  ValueMetrics,\n  ValueMetricsPerYearMonth,\n} from './types/ValueMetrics.type.js'\n\n// ============================================================================\n// Utils - Classes (runtime values)\n// ============================================================================\n\nexport {\n  CLOUD_PROVIDER_ORDER,\n  getCloudProviderLabel,\n  getCloudProviderRank,\n} from './utils/cloudProvider.utils.js'\nexport {\n  type ConnectivityStatus,\n  deriveConnectivityMessage,\n  deriveConnectivityStatus,\n} from './utils/connectivityStatus.utils.js'\nexport { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js'\nexport type {\n  CronScheduleValidationFailure,\n  CronScheduleValidationResult,\n  CronScheduleValidationSuccess,\n} from './utils/cronSchedule.utils.js'\nexport {\n  BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,\n  validateCronSchedule,\n} from './utils/cronSchedule.utils.js'\nexport {\n  deriveEncryptionStatus,\n  type EncryptionStatus,\n  isEncryptionStatus,\n} from './utils/encryptionStatus.utils.js'\n// enterprise-connection.utils - Types\nexport type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js'\n// enterprise-connection.utils - Values (functions)\nexport {\n  enterpriseConnectionMetadataToOrganizationAssignments,\n  organizationAssignmentsToEnterpriseConnectionMetadata,\n} from './utils/enterprise-connection.utils.js'\nexport {\n  addMonthsClamped,\n  DEFAULT_ENTERPRISE_DURATION_IN_MONTHS,\n  diffInWholeMonths,\n  type EnterpriseTermWindow,\n  getCurrentEnterpriseTerm,\n  peakWithinTerm,\n  toUtcDayStartMs,\n} from './utils/enterpriseTerm.utils.js'\nexport type { EnvVarEntry } from './utils/envVars.js'\nexport { parseEnvVars, serializeEnvVars } from './utils/envVars.js'\nexport {\n  deriveFailoverKeyPolicyPrincipals,\n  type FailoverKeyPolicyPrincipals,\n} from './utils/failoverKeyPolicy.utils.js'\nexport {\n  KMS_ARN,\n  KMS_MRK_ARN,\n  type KmsArnValidationError,\n  type ParsedKmsArn,\n  parseKmsArn,\n  validateKmsArnForRegion,\n} from './utils/kmsArn.utils.js'\nexport { validateLabels } from './utils/labelValidator.utils.js'\nexport { ObjectMergeUtils } from './utils/objectMerge.utils.js'\nexport {\n  getPermissionsByRoles,\n  getUserPermissionsForOrg,\n} from './utils/orgs/OrgHelper.js'\n\n// PasswordPolicy - Types\nexport type {\n  PasswordPolicyRequest,\n  PasswordPolicyResult,\n} from './utils/PasswordPolicy.js'\n\n// PasswordPolicy - Values (constants and function)\nexport {\n  MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,\n  MINLENGTH as PASSWORD_POLICY_MINLENGTH,\n  passwordPolicyCheck,\n} from './utils/PasswordPolicy.js'\n\nexport {\n  deriveSecondaryStorageStatus,\n  type SecondaryStorageStatus,\n} from './utils/secondaryStorageStatus.utils.js'\n\nexport {\n  allSettledResultsCounts,\n  getFulfilledPromises,\n  getRejectedPromises,\n  getSettledSummary,\n} from './utils/settledPromises.util.js'\n\nexport {\n  isValidAwsArn,\n  isValidCIDR,\n  isValidCIDRList,\n  isValidClientName,\n  isValidHostname,\n  isValidPrivateLinkRegion,\n  normalizeCIDRList,\n} from './utils/string-validation.utils.js'\nexport {\n  extractCamundaUserEmail,\n  guessName,\n  isCamundaUserId,\n} from './utils/user.utils.js'\n\n// versionCheck.utils - Values (enum and function)\nexport {\n  checkVersion,\n  isAppIntegrationsVersionSupported,\n  isSecretsFilterModeConfigurable,\n  VersionCheckOperator,\n} from './utils/versionCheck.utils.js'\n\n// ============================================================================\n// Config - Configuration files and types\n// ============================================================================\n\nexport { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js'\nexport type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js'\n\nexport {\n  augmentCamundiPermissions,\n  getApplicableRolesForEmployee,\n  isManager,\n} from './utils/camundiPermissionAugmenter.utils.js'\n"],
-  "mappings": "AAUA,SAAS,KAAK,MAAM,QAAQ,QAAQ,YAAY;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,iDAAiD;AAK1D,SAAS,wCAAwC;AACjD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAqDP;AAAA,EAGE;AAAA,OAEK;AAkBP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAoBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EAEE;AAAA,EACA;AAAA,EAGA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,OAQK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,4BAA4B;AAClD,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC;AAC3C,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,eAAe;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AAC5C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAOxC,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AAazC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,SAAS,iBAAiB,2BAA2B;AAmBrD;AAAA,EACE;AAAA,EAGA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,SAAS,iBAAiB;AAmD1B;AAAA,EACiC,+BAA/BA;AAAA,EACyB,yBAAzBC;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB;AAO3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,0BAA0B;AAoBnC,SAAS,oBAAoB;AAO7B,SAAS,0BAA0B;AAInC,SAAS,iBAAiB;AAyB1B,SAAS,yBAAyB;AAYlC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAMxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,cAAc,wBAAwB;AAC/C;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACe;AAAA,EACA;AAAA,EACb;AAAA,OACK;AAEP;AAAA,EACE;AAAA,OAEK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,SAAoB,WAAXC,gBAA2C;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Constants (runtime values)\n// ============================================================================\n\nexport { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js'\nexport {\n  isSupportedFailoverRegionPair,\n  SUPPORTED_FAILOVER_REGION_PAIRS,\n} from './constants/failoverRegionPairs.const.js'\nexport type { Stage } from './constants/misc.const.js'\nexport {\n  CONSOLE_API_USER_ID,\n  FIRSTNAME_LASTNAME_MAX_LENGTH,\n  HOTBACKUP_MIN_CREATE_PERIOD,\n  MAX_HARDWARE_PACKAGE_COUNT,\n  MAX_LENGTH_CLUSTER_NAME,\n  MINIMUM_EYEPAIRS,\n  NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,\n  SECRETS_MAX_LENGTH,\n  STARTING_PRICE_PER_MONTH_IN_EURO,\n  TEMPORARY_CLUSTER_NAME,\n} from './constants/misc.const.js'\nexport {\n  getGatewayPropertyHint,\n  getGatewayPropertyPath,\n  isAffectedByStreamlinedDeployment,\n  isPre89AffectedPath,\n  PRE89_AFFECTED_PATHS,\n  PRE89_AFFECTED_PROPERTY_PREFIXES,\n  PRE89_GATEWAY_PROPERTY_PATHS,\n  PRE89_GATEWAY_RESOURCE_PREFIXES,\n} from './constants/pre89EnvVarMapping.const.js'\nexport { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js'\nexport { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js'\nexport type {\n  TrialExtensionSurveyAnswer,\n  TrialExtensionSurveyQuestion,\n} from './constants/trialExtensionSurvey.const.js'\nexport { TRIAL_EXTENSION_SURVEY_QUESTIONS } from './constants/trialExtensionSurvey.const.js'\nexport {\n  ADMIN_APP_RENAME_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_MINOR,\n  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,\n  APP_INTEGRATIONS_MIN_VERSION,\n  AUDIT_LOG_TAB_MIN_VERSION,\n  AUTHORIZATION_TOGGLE_MIN_VERSION,\n  AWS_ONLY_GENERATION_MIN_VERSION,\n  BUSINESS_ID_UNIQUENESS_MIN_VERSION,\n  BYOIDP_MIN_VERSION,\n  CLUSTER_SECRETS_LABEL_MIN_VERSION,\n  CLUSTER_STATISTICS_CONFIG_MIN_VERSION,\n  CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION,\n  CONNECTOR_SECRET_SYNC_MIN_VERSION,\n  CONNECTORS_MANAGEMENT_LINK_MIN_VERSION,\n  ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION,\n  ENFORCE_GROUPS_TOGGLE_MIN_VERSION,\n  GATEWAY_SPEC_8_9_MIN_VERSION,\n  HOT_BACKUP_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION,\n  IDENTITY_MANAGEMENT_MIN_VERSION,\n  INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION,\n  JOB_DASHBOARD_MIN_VERSION,\n  LINE_8_9_MIN_VERSION,\n  LINE_8_10_MIN_VERSION,\n  MCP_MIN_VERSION,\n  MULTI_TENANCY_TOGGLE_MIN_VERSION,\n  NEW_CLUSTER_ROLES_MIN_VERSION,\n  OPTIMIZE_DEFAULT_ON_MIN_VERSION,\n  OPTIMIZE_FILTERING_MIN_VERSION,\n  OPTIONAL_TELEMETRY_MIN_VERSION,\n  RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,\n  REST_API_URL_TRANSFORM_MIN_VERSION,\n  REST_API_V2_MIN_VERSION,\n  RESUME_ALPHA_MIN_VERSION,\n  SECRET_SOURCE_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_6_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_7_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_8_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_9_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_10_MIN_VERSION,\n  SESSION_CONFIG_MIN_VERSION,\n  SWAGGER_MIN_VERSION,\n  SWAGGER_URL_8_9_MIN_VERSION,\n  TASKLIST_MODE_TOGGLE_MIN_VERSION,\n  TASKLIST_UPGRADE_BANNER_MIN_VERSION,\n  TASKLIST_V2_AUTO_ENABLE_FROM_MINOR,\n  TASKLIST_V2_AUTO_ENABLE_TO_MINOR,\n  TASKLIST_V2_DEFAULT_ON_MIN_VERSION,\n  TASKLIST_V2_SETTING_MAX_VERSION,\n  TASKLIST_V2_UPGRADE_MIN_VERSION,\n  TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION,\n  ZEEBE_REST_URL_MIN_VERSION,\n} from './constants/version-gates.const.js'\n\n// ============================================================================\n// DTOs - Types (interfaces and type aliases)\n// ============================================================================\n\nexport type {\n  ALERT_SUBSCRIPTION_REPORT_TYPES,\n  ALERT_SUBSCRIPTION_TYPES,\n  AlertSubscriptionDto,\n  AlertSubscriptionEntryDto,\n  AlertSubscriptionWebhookAuth,\n  CheckFailedReason,\n} from './dtos/AlertSubscription.dto.js'\n\n// DTOs - Values (constants)\nexport {\n  FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,\n  HMAC_HEADER_POSITION,\n  HMAC_SUPPORTED_ALGORITHM,\n} from './dtos/AlertSubscription.dto.js'\n\nexport type { AuditDto } from './dtos/Audit.dto.js'\nexport type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js'\nexport type { BackupDto } from './dtos/Backup.dto.js'\nexport type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js'\nexport type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js'\nexport type {\n  ClusterDeferredSpecChange,\n  DeferredSpecChangeType,\n} from './dtos/ClusterDeferredSpecChange.dto.js'\nexport type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js'\nexport type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js'\nexport type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js'\nexport type {\n  ClusterSpecChange,\n  ClusterSpecChangeActor,\n  ClusterSpecHistory,\n} from './dtos/ClusterSpecHistory.dto.js'\nexport type {\n  CommonClusterDto,\n  ExternalIdpConfig,\n  OptimizeFilteringConfig,\n  OptimizeFilteringIncludeExclude,\n  OptimizeFilteringPatch,\n  SecretsFilterMode,\n} from './dtos/CommonCluster.dto.js'\nexport type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js'\nexport type {\n  ClusterByClientV2Dto,\n  ClusterDatacenterOptionV2Dto,\n  ClusterDetailV2Dto,\n  ClusterFacetsV2Dto,\n  ClusterListItemV2Dto,\n  ClusterParameterOptionV2Dto,\n  ClusterParametersV2Dto,\n  ControlResolvedPermissions,\n  ControlSessionDto,\n  ControlSessionUser,\n  CursorPage,\n  CursorParams,\n  ListClustersV2Params,\n  ListOrganizationsV2Params,\n  ListOrgMembersV2Params,\n  OrgDetailV2Dto,\n  OrgListItemV2Dto,\n  OrgMemberV2Dto,\n  OrgSummaryV2Dto,\n} from './dtos/ControlV2.dto.js'\nexport type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js'\nexport type {\n  CamundaWebApp,\n  CamundaWebAppWithZeebe,\n  ExternalClusterDto,\n  ExternalOrganizationDto,\n} from './dtos/ExternalWebapp.dto.js'\nexport type { Features } from './dtos/FeatureFlags.dto.js'\n// Functions\nexport {\n  type GenerationDto,\n  type GenerationWithClusterCountDto,\n  sortGenerationBySemverOfZeebe,\n  type UpgradableGenerationsDto,\n} from './dtos/Generations.dto.js'\n// Namespace (type-only - contains only interfaces)\nexport type { Hdp } from './dtos/Hdp.dto.js'\nexport type {\n  K8sConfig,\n  K8sConfigLegacyFormat,\n  K8sContext,\n  K8sContextDto,\n} from './dtos/K8sContext.dto.js'\nexport type { MetaDto } from './dtos/Meta.dto.js'\nexport type {\n  AutoJoinAssignment,\n  LicensingModelType,\n  LlmProviderName,\n  OrganizationDto,\n  OrganizationMetadata,\n  OrgOwner,\n  OrgWithNameAndSalesPlan,\n} from './dtos/Organization.dto.js'\nexport {\n  LICENSING_MODEL_DISPLAY_NAMES,\n  VALID_LICENSING_MODELS,\n} from './dtos/Organization.dto.js'\nexport type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js'\nexport type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js'\nexport type {\n  ReleaseTrainSanityReport,\n  SanityFix,\n  SanityRuleInfo,\n  SanitySeverity,\n  SanityViolation,\n} from './dtos/ReleaseTrainSanity.dto.js'\nexport type { RestoreDto, RestoreState } from './dtos/Restore.dto.js'\n// SalesPlan.dto - Types\nexport type {\n  ClusterLimits,\n  ConsumptionDataItem,\n  Limits,\n  SalesPlanDto,\n  SalesPlanMetadata,\n} from './dtos/SalesPlan.dto.js'\n// SalesPlan.dto - Values (constants and functions)\nexport {\n  allClusterBasedLimits,\n  allSalesPlanLimits,\n  deprecatedLimit,\n  MAX_CLUSTER_CLIENTS_DEFAULT,\n  MAX_CLUSTER_CLIENTS_DEV,\n  RETENTION_LIMIT_DEFAULT,\n  RETENTION_LIMIT_MAXIMUM,\n  RETENTION_LIMIT_MINIMUM,\n  unusedClusterBasedLimits,\n  unusedSalesPlanLimits,\n} from './dtos/SalesPlan.dto.js'\nexport type { SecureConnectivityDto } from './dtos/SecureConnectivity.dto.js'\nexport type { SignupDto } from './dtos/Signup.dto.js'\nexport type {\n  StorybookConfig,\n  StorybookConfigBackup,\n  StorybookConfigChannel,\n  StorybookConfigDatacenter,\n  StorybookConfigGeneration,\n} from './dtos/StorybookConfig.dto.js'\nexport type { SystemAuditDto } from './dtos/SystemAudit.dto.js'\n// UsageAlert.dto - Types\nexport type { UsageAlertDto } from './dtos/UsageAlert.dto.js'\n// UsageAlert.dto - Values (enum and constants)\nexport {\n  UsageAlertInitValues,\n  UsageAlertMetric,\n  UsageAlertThresholdLimits,\n} from './dtos/UsageAlert.dto.js'\nexport type { UserMetaDataDto } from './dtos/UserMetaData.dto.js'\n// Lucene-style table search (parser + AST \u2192 SQL compiler + field registries).\nexport {\n  type AndNode,\n  CLUSTER_DEFAULT_SEARCH_FIELDS,\n  CLUSTER_SEARCH_FIELDS,\n  type CompileContext,\n  type CompiledQuery,\n  compileQuery,\n  type FieldBinding,\n  findSearchField,\n  isLuceneQueryError,\n  LuceneQueryError,\n  likeArgument,\n  type NotNode,\n  ORG_DEFAULT_SEARCH_FIELDS,\n  ORGANIZATION_SEARCH_FIELDS,\n  type OrNode,\n  parseLuceneQuery,\n  type QueryNode,\n  type RangeNode,\n  type SearchFieldCapability,\n  type SearchFieldSpec,\n  type SearchFieldType,\n  type SearchTermOperator,\n  type TermNode,\n} from './search/index.js'\n\n// ============================================================================\n// Enums (runtime values)\n// ============================================================================\n\nexport {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from './enums/AlertSubscription.enum.js'\nexport { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js'\nexport { AuditService } from './enums/AuditService.enum.js'\nexport { BackupStatus } from './enums/BackupStatus.enum.js'\nexport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from './enums/ClusterBulkOperation.enum.js'\nexport { ClusterClientPermission } from './enums/ClusterClientPermissions.enum.js'\nexport { ClusterEncryptionKey } from './enums/ClusterEncryptionKey.enum.js'\nexport { ClusterStatus } from './enums/ClusterStatus.enum.js'\nexport { ConsoleAPIClientPermission } from './enums/ConsoleApiClientPermission.enum.js'\nexport { ErrorType } from './enums/ErrorType.enum.js'\nexport type {\n  AssignableOrganizationRoleType,\n  OrganizationRoleType,\n  UnassignableOrganizationRoleType,\n} from './enums/OrganizationRole.enum.js'\nexport {\n  AssignableOrganizationRole,\n  LegacyHeldOrganizationRole,\n  OrganizationRole,\n  UnassignableOrganizationRole,\n} from './enums/OrganizationRole.enum.js'\nexport { SseEntity, SseType } from './enums/Sse.enum.js'\nexport {\n  SystemAuditEntity,\n  SystemAuditEntityAttribute,\n} from './enums/SystemAuditEntity.enum.js'\n\n// ============================================================================\n// Permissions - Namespaces (runtime values)\n// ============================================================================\n\nexport { AccountsPermissions } from './permissions/accounts.permissions.js'\nexport { AlertDistributorPermissions } from './permissions/alert-distributor.permissions.js'\nexport { AuditLoggerPermissions } from './permissions/auditlogger.permissions.js'\nexport {\n  accountsUserFeaturesFromPermissions,\n  consoleUserFeaturesFromPermissions,\n} from './permissions/combo.js'\nexport { ConsolePermissions } from './permissions/console.permissions.js'\nexport { NotificationPermissions } from './permissions/notification.permissions.js'\n// profile.permissions - Types\nexport type { OnboardConfig } from './permissions/profile.permissions.js'\n// profile.permissions - Values (constants)\n// NOTE: the `allowed` email lists (CLOUD_TEAM_EMAILS, SRE_TEAM_EMAILS, etc.)\n// intentionally live in the private `@camunda-cloud/shared-backend` package\n// instead of here, since this package is published publicly to npm.\nexport { PROFILES } from './permissions/profile.permissions.js'\nexport { expandRolesToPermissions } from './permissions/roleExpansion.utils.js'\n\n// ============================================================================\n// Types - Type-only exports (interfaces and type aliases)\n// ============================================================================\n\nexport type { AuditData } from './types/AuditData.type.js'\n// AutoSleep.type - Types\nexport type {\n  ActivitySleepEligibilityOptions,\n  SleepCronEligibilityOptions,\n} from './types/AutoSleep.type.js'\n// AutoSleep.type - Values (constants and functions)\nexport {\n  INTERNAL_LOW_HARDWARE_PLAN_NAME,\n  isActivitySleepEligible,\n  isClusterTagEligibleForSleepCron,\n  isSalesPlanEligibleForSleepCron,\n  isSleepCronEligible,\n  SLEEP_CRON_ELIGIBLE_TAGS,\n} from './types/AutoSleep.type.js'\nexport type {\n  BotContext,\n  BotOptions,\n  BotRequest,\n  GetUserDetailsResponse,\n  ListRolesForUserResponse,\n  UpdateUserRolesRequest,\n  UpdateUserRolesResponse,\n  UserContext,\n  UserDetails,\n} from './types/Bot.types.js'\n// BulkOperation.type - Types\nexport type {\n  BulkClusterDeletionContent,\n  BulkClusterDeletionItem,\n  BulkClusterGenerationUpdateItem,\n  BulkClusterPlanTypeUpdateContent,\n  BulkClusterPlanTypeUpdateItem,\n  BulkClusterPlanUpdateContent,\n  BulkClusterPlanUpdateItem,\n  BulkGenerationUpdateContent,\n  GenericBulkClusterOperationContent,\n  GenericBulkOperationContent,\n  GenericClusterBulkOperationItem,\n} from './types/BulkOperation.type.js'\n// BulkOperation.type - Functions (type guards)\nexport {\n  isBulkClusterDeletionItem,\n  isBulkClusterPlanTypeUpdateItem,\n  isBulkClusterPlanUpdateItem,\n  isIsBulkClusterGenerationUpdateIten,\n} from './types/BulkOperation.type.js'\n// C8ClusterComponentVersions.type - Types\nexport type {\n  ImmutableZeebeClusterVersionsDto,\n  MutableZeebeClusterVersionsDto,\n  ZeebeClusterVersionsDto,\n} from './types/C8ClusterComponentVersions.type.js'\n// C8ClusterComponentVersions.type - Values (constants)\nexport {\n  AllThings,\n  ImmutableThings,\n  MutableThings,\n} from './types/C8ClusterComponentVersions.type.js'\n// CamundaClusterLabels.type - Types\nexport type {\n  CamundaClusterStage,\n  CamundaClusterStageLabel,\n  ClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// CamundaClusterLabels.type - Values (constants)\nexport {\n  ALLOWED_CAMUNDA_LABELS,\n  StageClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// Chargebee.type - Types\nexport type { SubscriptionItem } from './types/Chargebee.type.js'\n// Chargebee.type - Values (enums)\nexport { ConsumptionData, ConsumptionDataType } from './types/Chargebee.type.js'\n// ClusterBulkOperation.type - Types\nexport type {\n  ClusterBulkOperationAck,\n  ClusterBulkOperationClusterDto,\n  ClusterBulkOperationContent,\n  ClusterBulkOperationDto,\n  ClusterBulkOperationGenerationUpdateParameter,\n  ClusterBulkOperationParameter,\n  ClusterBulkOperationPlanTypeUpdateParameter,\n  ClusterBulkOperationPlanUpdateParameter,\n  ClusterBulkOperationPostContent,\n  ClusterSleepWakeupParameter,\n} from './types/ClusterBulkOperation.type.js'\nexport type {\n  ClusterModificationConfigDto,\n  ClusterModificationDto,\n} from './types/ClusterModification.type.js'\n// ClusterPlanFields.type - Values (field spec and type guard)\nexport {\n  CLUSTER_PLAN_FIELDS,\n  type ClusterPlanFieldSpec,\n  type ClusterPlanFieldTree,\n  isClusterPlanFieldSpec,\n} from './types/ClusterPlanFields.type.js'\nexport type {\n  ClusterPlanModificationAck,\n  ClusterPlanModificationConfig,\n  ClusterPlanModificationDto,\n} from './types/ClusterPlanModification.type.js'\n// ClusterPlanTypeAvailabilityClass.type - Values (enum and function)\nexport {\n  ClusterPlanTypeAvailabilityClass,\n  sortByAvailabilityClasses,\n} from './types/ClusterPlanTypeAvailabilityClass.type.js'\n// ClusterPlanTypeCategory.type - Values (enum and functions)\nexport {\n  ClusterPlanTypeCategory,\n  hasAvailabilityClass,\n  sortByClusterPlanTypeCategory,\n} from './types/ClusterPlanTypeCategory.type.js'\nexport type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js'\nexport type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js'\nexport type {\n  ClusterUsageDataRequest,\n  ClusterUsageMetricsAddRequestByMetricHeap,\n  ClusterUsageMetricsData,\n  ClusterUsageMetricsFilter,\n  ClusterUsageOrgStartDate,\n} from './types/ClusterUsageMetrics.type.js'\n// Namespace with runtime values (consts, functions, enums)\nexport { ConsoleSM } from './types/ConsoleSelfManaged.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { ConsoleSMAdminApi } from './types/ConsoleSelfManagedAdminApi.type.js'\n// Dashboard.types - Types\nexport type {\n  DashboardConfig,\n  DashboardMappingItem,\n  DashboardMappingTarget,\n  DashboardResultPrimitive,\n  DashboardResultRow,\n  EngineeringOperationsDashboardResponse,\n} from './types/Dashboard.types.js'\nexport type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js'\nexport type {\n  HdpTenantUsageBreakdown,\n  HdpTenantUsagePerClusterPoint,\n  HdpTenantUsagePoint,\n} from './types/HdpTenantUsage.type.js'\n// hdp.types - Types (interfaces)\nexport type {\n  AlertSubscription as HdpAlertSubscription,\n  Audit as HdpAudit,\n  ByomClient as HdpByomClient,\n  Channel as HdpChannel,\n  Cluster as HdpCluster,\n  ClusterBackup as HdpClusterBackup,\n  ClusterBackupSchedule as HdpClusterBackupSchedule,\n  ClusterBulkOperation as HdpClusterBulkOperation,\n  ClusterClient as HdpClusterClient,\n  ClusterModification as HdpClusterModification,\n  ClusterPlan as HdpClusterPlan,\n  ClusterPlanType as HdpClusterPlanType,\n  ConnectorSecret as HdpConnectorSecret,\n  ConsoleApiClient as HdpConsoleApiClient,\n  Datacenter as HdpDatacenter,\n  Generation as HdpGeneration,\n  HdpBackendChangeEvent,\n  HdpClusterModificationConfig,\n  HdpEntity,\n  HdpPrometheusDataCapacityDataPoint,\n  Invite as HdpInvite,\n  LlmSpend as HdpLlmSpend,\n  Organization as HdpOrganization,\n  SecureConnectivity as HdpSecureConnectivity,\n  SystemAudit as HdpSystemAudit,\n  TelemetryData as HdpTelemetryData,\n  UsageAlert as HdpUsageAlert,\n  User as HdpUser,\n  UserLogin as HdpUserLogin,\n} from './types/hdp.types.js'\n// hdp.types - Values (enums)\nexport {\n  AlertSubscriptionReportType as HdpAlertSubscriptionReportType,\n  AlertSubscriptionType as HdpAlertSubscriptionType,\n} from './types/hdp.types.js'\n// notification.type - Types\nexport type {\n  GlobalNotification,\n  NotificationDto,\n  NotificationMeta,\n  NotificationOptions,\n  NotificationPermission,\n  NotificationSource,\n  NotificationState,\n  NotificationType,\n  OrgNotification,\n  UserNotification,\n  UserOrgNotification,\n} from './types/notification.type.js'\n// notification.type - Values (enums and constants)\nexport {\n  NotificationPermissionValues,\n  NotificationSourceEnum,\n  NotificationStateEnum,\n  NotificationTypeEnum,\n} from './types/notification.type.js'\n// OrganizationPermission.type - Types\nexport type {\n  CreateReadUpdateDelete,\n  OrganizationPermissions,\n} from './types/OrganizationPermission.type.js'\n// OrganizationPermission.type - Values (constants)\nexport {\n  OrganizationPermissionsDescriptions,\n  PermissionsForOrganizationRole,\n} from './types/OrganizationPermission.type.js'\n// Roles.js - Types\nexport type {\n  AccountRoles,\n  ConsoleRoles,\n  ModelerRoles,\n  Roles,\n} from './types/Roles.js'\n// Roles.js - Values (constants)\nexport { SAFE_ROLES } from './types/Roles.js'\n// SalesPlanType.type - Types\nexport type {\n  DisplayedSalesPlan,\n  RevisitedSalesPlanName,\n} from './types/SalesPlanType.type.js'\n// SalesPlanType.type - Values (enums and functions)\nexport {\n  AnalyticsSalesPlanType,\n  getAnalyticsSalesPlanFromOrgSalesPlan,\n  getDisplayedSalesPlan,\n  getRevisitedSalesPlanName,\n  OPTIMIZE_DISABLED_PLAN_TYPES,\n  SalesPlanType,\n} from './types/SalesPlanType.type.js'\n// SpamDetection.type - Types\nexport type { SpamDetectionPatterns } from './types/SpamDetection.type.js'\n// SpamDetection.type - Values (constants)\nexport { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js'\nexport type {\n  AlertSubscriptionSseEvent,\n  BackupSseEvent,\n  ClusterClientSseEvent,\n  ClusterSseEvent,\n  ConnectorSecretsSseEvent,\n  ConsoleApiClientSseEvent,\n  ConsoleSseEvent,\n  MonitoringSseEvent,\n  SecureConnectivitySseEvent,\n  SseClusterPayload,\n  SseMonitoringPayload,\n  SseSecureConnectivityPayload,\n} from './types/SseEvent.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { AccountsStats } from './types/Stats.types.js'\n// Survey.type - Types\nexport type { Persona, SurveyDto } from './types/Survey.type.js'\n// Survey.type - Values (enum)\nexport { FeedbackType } from './types/Survey.type.js'\n// SuspendStrategy.type - Types\nexport type {\n  GetSuspendStrategyOptions,\n  SuspendStrategy,\n} from './types/SuspendStrategy.type.js'\n// SuspendStrategy.type - Values (function)\nexport { getSuspendStrategy } from './types/SuspendStrategy.type.js'\nexport type { SystemAuditData } from './types/SystemAuditData.type.js'\n\n// Namespace (runtime value)\nexport { Telemetry } from './types/Telemetry.type.js'\n\n// TrialManagement.types - Types\nexport type {\n  ExtensionListItem,\n  ExtensionListResponse,\n  OrgTrialDetail,\n  TrialExtensionSource,\n  TrialManagementStats,\n} from './types/TrialManagement.types.js'\n\n// User.type - Types\nexport type {\n  AccountsData,\n  AppMetadata,\n  BasicUser,\n  BlockedFor,\n  Identity,\n  OrgMembership,\n  User,\n  UserMetadata,\n  UserRequest,\n} from './types/User.type.js'\n\n// User.type - Values (enum)\nexport { UserMetadataEvent } from './types/User.type.js'\n\nexport type {\n  UniqueTaskUser,\n  ValueMetrics,\n  ValueMetricsPerYearMonth,\n} from './types/ValueMetrics.type.js'\n\n// ============================================================================\n// Utils - Classes (runtime values)\n// ============================================================================\n\nexport {\n  CLOUD_PROVIDER_ORDER,\n  getCloudProviderLabel,\n  getCloudProviderRank,\n} from './utils/cloudProvider.utils.js'\nexport {\n  type ConnectivityStatus,\n  deriveConnectivityMessage,\n  deriveConnectivityStatus,\n} from './utils/connectivityStatus.utils.js'\nexport { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js'\nexport type {\n  CronScheduleValidationFailure,\n  CronScheduleValidationResult,\n  CronScheduleValidationSuccess,\n} from './utils/cronSchedule.utils.js'\nexport {\n  BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,\n  validateCronSchedule,\n} from './utils/cronSchedule.utils.js'\nexport {\n  deriveEncryptionStatus,\n  type EncryptionStatus,\n  isEncryptionStatus,\n} from './utils/encryptionStatus.utils.js'\n// enterprise-connection.utils - Types\nexport type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js'\n// enterprise-connection.utils - Values (functions)\nexport {\n  enterpriseConnectionMetadataToOrganizationAssignments,\n  organizationAssignmentsToEnterpriseConnectionMetadata,\n} from './utils/enterprise-connection.utils.js'\nexport {\n  addMonthsClamped,\n  DEFAULT_ENTERPRISE_DURATION_IN_MONTHS,\n  diffInWholeMonths,\n  type EnterpriseTermWindow,\n  getCurrentEnterpriseTerm,\n  peakWithinTerm,\n  toUtcDayStartMs,\n} from './utils/enterpriseTerm.utils.js'\nexport type { EnvVarEntry } from './utils/envVars.js'\nexport { parseEnvVars, serializeEnvVars } from './utils/envVars.js'\nexport {\n  deriveFailoverKeyPolicyPrincipals,\n  type FailoverKeyPolicyPrincipals,\n} from './utils/failoverKeyPolicy.utils.js'\nexport {\n  KMS_ARN,\n  KMS_MRK_ARN,\n  type KmsArnValidationError,\n  type ParsedKmsArn,\n  parseKmsArn,\n  validateKmsArnForRegion,\n} from './utils/kmsArn.utils.js'\nexport { validateLabels } from './utils/labelValidator.utils.js'\nexport { ObjectMergeUtils } from './utils/objectMerge.utils.js'\nexport {\n  computeOrgStartDate,\n  type OrgStartDateInput,\n} from './utils/orgStartDate.utils.js'\nexport {\n  getPermissionsByRoles,\n  getUserPermissionsForOrg,\n} from './utils/orgs/OrgHelper.js'\n\n// PasswordPolicy - Types\nexport type {\n  PasswordPolicyRequest,\n  PasswordPolicyResult,\n} from './utils/PasswordPolicy.js'\n\n// PasswordPolicy - Values (constants and function)\nexport {\n  MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,\n  MINLENGTH as PASSWORD_POLICY_MINLENGTH,\n  passwordPolicyCheck,\n} from './utils/PasswordPolicy.js'\n\nexport {\n  deriveSecondaryStorageStatus,\n  type SecondaryStorageStatus,\n} from './utils/secondaryStorageStatus.utils.js'\n\nexport {\n  allSettledResultsCounts,\n  getFulfilledPromises,\n  getRejectedPromises,\n  getSettledSummary,\n} from './utils/settledPromises.util.js'\n\nexport {\n  isValidAwsArn,\n  isValidCIDR,\n  isValidCIDRList,\n  isValidClientName,\n  isValidHostname,\n  isValidPrivateLinkRegion,\n  normalizeCIDRList,\n} from './utils/string-validation.utils.js'\nexport {\n  extractCamundaUserEmail,\n  guessName,\n  isCamundaUserId,\n} from './utils/user.utils.js'\n\n// versionCheck.utils - Values (enum and function)\nexport {\n  checkVersion,\n  isAppIntegrationsVersionSupported,\n  isGenerationResumable,\n  isSecretsFilterModeConfigurable,\n  stripSecfixPostfix,\n  VersionCheckOperator,\n} from './utils/versionCheck.utils.js'\n\n// ============================================================================\n// Config - Configuration files and types\n// ============================================================================\n\nexport { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js'\nexport type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js'\n\nexport {\n  augmentCamundiPermissions,\n  getApplicableRolesForEmployee,\n  isManager,\n} from './utils/camundiPermissionAugmenter.utils.js'\n"],
+  "mappings": "AAUA,SAAS,KAAK,MAAM,QAAQ,QAAQ,YAAY;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,iDAAiD;AAK1D,SAAS,wCAAwC;AACj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gBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA0DP;AAAA,EAGE;AAAA,OAEK;AAmBP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAoBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EAEE;AAAA,EACA;AAAA,EAGA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,OAQK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,4BAA4B;AAClD,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC;AAC3C,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,eAAe;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AAC5C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAOxC,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AAazC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,SAAS,iBAAiB,2BAA2B;AAmBrD;AAAA,EACE;AAAA,EAGA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,SAAS,iBAAiB;AAmD1B;AAAA,EACiC,+BAA/BA;AAAA,EACyB,yBAAzBC;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB;AAO3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,0BAA0B;AAoBnC,SAAS,oBAAoB;AAO7B,SAAS,0BAA0B;AAInC,SAAS,iBAAiB;AAyB1B,SAAS,yBAAyB;AAYlC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAMxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,cAAc,wBAAwB;AAC/C;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACe;AAAA,EACA;AAAA,EACb;AAAA,OACK;AAEP;AAAA,EACE;AAAA,OAEK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,SAAoB,WAAXC,gBAA2C;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
   "names": ["AlertSubscriptionReportType", "AlertSubscriptionType", "default"]
 }

package/dist/types/ClusterBulkOperation.type.d.ts

@@ -30,6 +30,16 @@ export type ClusterBulkOperationParameter = ClusterBulkOperationGenerationUpdate
 export interface ClusterBulkOperationGenerationUpdateParameter {
     toGenerationUuid: string;
     onlyAutoUpgrade?: boolean;
+    /**
+     * Patches every selected cluster, whatever state the cluster is in. The flag
+     * has two effects. First, a sleeping cluster stays asleep: the new generation
+     * reaches the CR, and the cluster starts on it at the next wake-up. A wake-up
+     * is costly, because a trial cluster suspends with ScaleDownAndDeleteDisk and
+     * the 8h sleep cron then suspends the cluster again. Second, a cluster that
+     * already has the target generation gets a forced spec write instead of a
+     * skip.
+     */
+    yoloAllClusters?: boolean;
 }
 export interface ClusterBulkOperationPlanTypeUpdateParameter {
     toPlanTypeUuid: string;

package/dist/types/OrganizationPermission.type.js

@@ -620,11 +620,14 @@ const PermissionsForOrganizationRole = /* @__PURE__ */ new Map([
         settings: CRUD_READ_TRUE,
         usage: CRUD_FALSE,
         billing: CRUD_FALSE,
+        // Only Organization Owner and Organization Admin see the org member
+        // list. Developer kept read access, which showed the Users and Groups
+        // tabs with disabled row actions (#9948).
         users: {
-          general: CRUD_READ_TRUE,
+          general: CRUD_FALSE,
           owner: CRUD_FALSE,
           admin: CRUD_FALSE,
-          member: CRUD_READ_TRUE
+          member: CRUD_FALSE
         },
         activity: CRUD_FALSE,
         diagrams: {

package/dist/types/OrganizationPermission.type.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/types/OrganizationPermission.type.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { OrganizationRole } from '../enums/OrganizationRole.enum.js'\n\n// new roles and permissions according to\n// https://docs.google.com/document/d/1FZYFn9fK2sn6ksjh7drSNad1vyMEIwK6p4KlG353yfM/edit#heading=h.kjgwc8d48e3a\n\nconst CRUD_TRUE: CreateReadUpdateDelete = {\n  create: true,\n  read: true,\n  update: true,\n  delete: true,\n}\n\nconst CRUD_FALSE: CreateReadUpdateDelete = {\n  create: false,\n  read: false,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_UPDATE_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: true,\n  delete: false,\n}\n\nexport interface CreateReadUpdateDelete {\n  create: boolean\n  read: boolean\n  update: boolean\n  delete: boolean\n}\n\nexport interface CreateReadUpdateDeleteDescriptions {\n  create: string\n  read: string\n  update: string\n  delete: string\n}\n\nexport interface OrganizationPermissionsInternal<T> {\n  org: {\n    clusters: T\n    clients: T\n    settings: T\n    usage: T\n    billing: T\n    users: {\n      general: T\n      owner: T\n      admin: T\n      member: T\n    }\n    activity: T\n    diagrams: T\n    forms: T\n    instances: T // create === start new instances\n    workflows: T // create === deploy diagrams\n    webide: T\n    earlyAccessFeatures: T\n  }\n  cluster: {\n    clients: T\n    alerts: T\n    operate: T\n    tasklist: T\n    optimize: T\n    identity: T\n    ipWhitelist: T\n    secureConnectivity: T\n    encryption: T\n    connectorSecrets: T\n    connectors: T\n    settings: {\n      resourceBasedAuthorizations: {\n        activate: T\n        configure: T\n      }\n      identityBasedAuthorizations: {\n        activate: T\n      }\n      multiTenancy: {\n        activate: T\n      }\n    }\n  }\n}\n\nexport interface OrganizationPermissions\n  extends OrganizationPermissionsInternal<CreateReadUpdateDelete> {}\n\nexport const OrganizationPermissionsDescriptions: OrganizationPermissionsInternal<CreateReadUpdateDeleteDescriptions> =\n  {\n    org: {\n      clusters: {\n        create: 'Create new clusters',\n        read: 'View clusters',\n        update: 'Update clusters',\n        delete: 'Delete clusters',\n      },\n      clients: {\n        create: 'Create new console clients',\n        read: 'View console clients',\n        update: 'Update console clients',\n        delete: 'Delete console clients',\n      },\n      settings: {\n        create: 'unused',\n        read: 'View settings',\n        update: 'Update settings',\n        delete: 'Delete settings',\n      },\n      usage: {\n        create: 'unused',\n        read: 'View usage metrics',\n        update: 'unused',\n        delete: 'unused',\n      },\n      billing: {\n        create: 'unused',\n        read: 'View billing information',\n        update: 'Update billing information',\n        delete: 'unused',\n      },\n      users: {\n        general: {\n          create: 'Add users',\n          read: 'View users',\n          update: 'Update users',\n          delete: 'Remove users',\n        },\n        owner: {\n          create: 'Initiate owner change',\n          read: 'Read owners',\n          update: 'Update owners',\n          delete: 'Remove owners',\n        },\n        admin: {\n          create: 'Add admins',\n          read: 'Read admins',\n          update: 'Update admins',\n          delete: 'Remove admins',\n        },\n        member: {\n          create: 'Add members',\n          read: 'Read members',\n          update: 'Update members',\n          delete: 'Remove members',\n        },\n      },\n      activity: {\n        create: 'unused',\n        read: 'View activity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      diagrams: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      forms: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      instances: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      workflows: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      webide: {\n        create: 'unused',\n        read: 'Open Web Modeler',\n        update: 'unused',\n        delete: 'unused',\n      },\n      earlyAccessFeatures: {\n        create: 'Enable early access features',\n        read: 'View early access features',\n        update: 'Update early access features',\n        delete: 'Disable early access features',\n      },\n    },\n    cluster: {\n      clients: {\n        create: 'Create cluster clients',\n        read: 'View cluster clients',\n        update: 'Update cluster clients',\n        delete: 'Delete cluster clients',\n      },\n      alerts: {\n        create: 'Create cluster alerts',\n        read: 'View cluster alerts',\n        update: 'Update cluster alerts',\n        delete: 'Delete cluster alerts',\n      },\n      operate: {\n        create: 'unused',\n        read: 'Open Operate',\n        update: 'unused',\n        delete: 'unused',\n      },\n      tasklist: {\n        create: 'unused',\n        read: 'Open Task List',\n        update: 'unused',\n        delete: 'unused',\n      },\n      optimize: {\n        create: 'unused',\n        read: 'Open Optimize',\n        update: 'unused',\n        delete: 'unused',\n      },\n      identity: {\n        create: 'unused',\n        read: 'Open Identity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      ipWhitelist: {\n        create: 'Create IP Whitelist',\n        read: 'Read IP Whitelist',\n        update: 'Update IP Whitelist',\n        delete: 'Delete IP Whitelist',\n      },\n      secureConnectivity: {\n        create: 'Create Secure Connectivity',\n        read: 'Read Secure Connectivity',\n        update: 'Update Secure Connectivity',\n        delete: 'Delete Secure Connectivity',\n      },\n      encryption: {\n        create: 'Create BYO Encryption',\n        read: 'Read BYO Encryption',\n        update: 'Update BYO Encryption',\n        delete: 'Delete BYO Encryption',\n      },\n      connectorSecrets: {\n        create: 'Create Connector Secrets',\n        read: 'View Connector Secrets',\n        update: 'Update Connector Secrets',\n        delete: 'Delete Connector Secrets',\n      },\n      connectors: {\n        create: 'unused',\n        read: 'Read Manage Connectors View',\n        update: 'unused',\n        delete: 'unused',\n      },\n      settings: {\n        resourceBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View resource-based authorizations settings',\n            update: 'Enable/Disable resource-based authorizations',\n            delete: 'unused',\n          },\n          configure: {\n            create: 'unused',\n            read: 'Read resource-based authorizations for users',\n            update: 'Update resource-based authorizations for users',\n            delete: 'unused',\n          },\n        },\n        identityBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View identity-based authorizations settings',\n            update: 'Enable/Disable identity-based authorizations',\n            delete: 'unused',\n          },\n        },\n        multiTenancy: {\n          activate: {\n            create: 'unused',\n            read: 'View Multi-tenency settings',\n            update: 'Enable/Disable Multi-tenancy',\n            delete: 'unused',\n          },\n        },\n      },\n    },\n  }\n\nexport const PermissionsForOrganizationRole: Map<\n  OrganizationRole,\n  OrganizationPermissions\n> = new Map([\n  [\n    OrganizationRole.MEMBER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ADMIN,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OWNER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: {\n          create: false,\n          read: true,\n          update: true,\n          delete: true,\n        },\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_TRUE,\n          admin: CRUD_TRUE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.SUPPORTAGENT,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_READ_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_TRUE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_READ_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_READ_TRUE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_READ_TRUE,\n        connectorSecrets: CRUD_READ_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OPERATIONS_ENGINEER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.TASK_USER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ANALYST,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.DEVELOPER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: false,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_READ_TRUE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.VISITOR,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.MODELER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n])\n"],
-  "mappings": "AAMA,SAAS,wBAAwB;AAKjC,MAAM,YAAoC;AAAA,EACxC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,aAAqC;AAAA,EACzC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,iBAAyC;AAAA,EAC7C,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,wBAAgD;AAAA,EACpD,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAmEO,MAAM,sCACX;AAAA,EACE,KAAK;AAAA,IACH,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,qBAAqB;AAAA,MACnB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,aAAa;AAAA,MACX,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,oBAAoB;AAAA,MAClB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,kBAAkB;AAAA,MAChB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,UACT,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEK,MAAM,iCAGT,oBAAI,IAAI;AAAA,EACV;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { OrganizationRole } from '../enums/OrganizationRole.enum.js'\n\n// new roles and permissions according to\n// https://docs.google.com/document/d/1FZYFn9fK2sn6ksjh7drSNad1vyMEIwK6p4KlG353yfM/edit#heading=h.kjgwc8d48e3a\n\nconst CRUD_TRUE: CreateReadUpdateDelete = {\n  create: true,\n  read: true,\n  update: true,\n  delete: true,\n}\n\nconst CRUD_FALSE: CreateReadUpdateDelete = {\n  create: false,\n  read: false,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: false,\n  delete: false,\n}\n\nconst CRUD_READ_UPDATE_TRUE: CreateReadUpdateDelete = {\n  create: false,\n  read: true,\n  update: true,\n  delete: false,\n}\n\nexport interface CreateReadUpdateDelete {\n  create: boolean\n  read: boolean\n  update: boolean\n  delete: boolean\n}\n\nexport interface CreateReadUpdateDeleteDescriptions {\n  create: string\n  read: string\n  update: string\n  delete: string\n}\n\nexport interface OrganizationPermissionsInternal<T> {\n  org: {\n    clusters: T\n    clients: T\n    settings: T\n    usage: T\n    billing: T\n    users: {\n      general: T\n      owner: T\n      admin: T\n      member: T\n    }\n    activity: T\n    diagrams: T\n    forms: T\n    instances: T // create === start new instances\n    workflows: T // create === deploy diagrams\n    webide: T\n    earlyAccessFeatures: T\n  }\n  cluster: {\n    clients: T\n    alerts: T\n    operate: T\n    tasklist: T\n    optimize: T\n    identity: T\n    ipWhitelist: T\n    secureConnectivity: T\n    encryption: T\n    connectorSecrets: T\n    connectors: T\n    settings: {\n      resourceBasedAuthorizations: {\n        activate: T\n        configure: T\n      }\n      identityBasedAuthorizations: {\n        activate: T\n      }\n      multiTenancy: {\n        activate: T\n      }\n    }\n  }\n}\n\nexport interface OrganizationPermissions\n  extends OrganizationPermissionsInternal<CreateReadUpdateDelete> {}\n\nexport const OrganizationPermissionsDescriptions: OrganizationPermissionsInternal<CreateReadUpdateDeleteDescriptions> =\n  {\n    org: {\n      clusters: {\n        create: 'Create new clusters',\n        read: 'View clusters',\n        update: 'Update clusters',\n        delete: 'Delete clusters',\n      },\n      clients: {\n        create: 'Create new console clients',\n        read: 'View console clients',\n        update: 'Update console clients',\n        delete: 'Delete console clients',\n      },\n      settings: {\n        create: 'unused',\n        read: 'View settings',\n        update: 'Update settings',\n        delete: 'Delete settings',\n      },\n      usage: {\n        create: 'unused',\n        read: 'View usage metrics',\n        update: 'unused',\n        delete: 'unused',\n      },\n      billing: {\n        create: 'unused',\n        read: 'View billing information',\n        update: 'Update billing information',\n        delete: 'unused',\n      },\n      users: {\n        general: {\n          create: 'Add users',\n          read: 'View users',\n          update: 'Update users',\n          delete: 'Remove users',\n        },\n        owner: {\n          create: 'Initiate owner change',\n          read: 'Read owners',\n          update: 'Update owners',\n          delete: 'Remove owners',\n        },\n        admin: {\n          create: 'Add admins',\n          read: 'Read admins',\n          update: 'Update admins',\n          delete: 'Remove admins',\n        },\n        member: {\n          create: 'Add members',\n          read: 'Read members',\n          update: 'Update members',\n          delete: 'Remove members',\n        },\n      },\n      activity: {\n        create: 'unused',\n        read: 'View activity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      diagrams: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      forms: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      instances: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      workflows: {\n        create: 'unused',\n        read: 'unused',\n        update: 'unused',\n        delete: 'unused',\n      },\n      webide: {\n        create: 'unused',\n        read: 'Open Web Modeler',\n        update: 'unused',\n        delete: 'unused',\n      },\n      earlyAccessFeatures: {\n        create: 'Enable early access features',\n        read: 'View early access features',\n        update: 'Update early access features',\n        delete: 'Disable early access features',\n      },\n    },\n    cluster: {\n      clients: {\n        create: 'Create cluster clients',\n        read: 'View cluster clients',\n        update: 'Update cluster clients',\n        delete: 'Delete cluster clients',\n      },\n      alerts: {\n        create: 'Create cluster alerts',\n        read: 'View cluster alerts',\n        update: 'Update cluster alerts',\n        delete: 'Delete cluster alerts',\n      },\n      operate: {\n        create: 'unused',\n        read: 'Open Operate',\n        update: 'unused',\n        delete: 'unused',\n      },\n      tasklist: {\n        create: 'unused',\n        read: 'Open Task List',\n        update: 'unused',\n        delete: 'unused',\n      },\n      optimize: {\n        create: 'unused',\n        read: 'Open Optimize',\n        update: 'unused',\n        delete: 'unused',\n      },\n      identity: {\n        create: 'unused',\n        read: 'Open Identity',\n        update: 'unused',\n        delete: 'unused',\n      },\n      ipWhitelist: {\n        create: 'Create IP Whitelist',\n        read: 'Read IP Whitelist',\n        update: 'Update IP Whitelist',\n        delete: 'Delete IP Whitelist',\n      },\n      secureConnectivity: {\n        create: 'Create Secure Connectivity',\n        read: 'Read Secure Connectivity',\n        update: 'Update Secure Connectivity',\n        delete: 'Delete Secure Connectivity',\n      },\n      encryption: {\n        create: 'Create BYO Encryption',\n        read: 'Read BYO Encryption',\n        update: 'Update BYO Encryption',\n        delete: 'Delete BYO Encryption',\n      },\n      connectorSecrets: {\n        create: 'Create Connector Secrets',\n        read: 'View Connector Secrets',\n        update: 'Update Connector Secrets',\n        delete: 'Delete Connector Secrets',\n      },\n      connectors: {\n        create: 'unused',\n        read: 'Read Manage Connectors View',\n        update: 'unused',\n        delete: 'unused',\n      },\n      settings: {\n        resourceBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View resource-based authorizations settings',\n            update: 'Enable/Disable resource-based authorizations',\n            delete: 'unused',\n          },\n          configure: {\n            create: 'unused',\n            read: 'Read resource-based authorizations for users',\n            update: 'Update resource-based authorizations for users',\n            delete: 'unused',\n          },\n        },\n        identityBasedAuthorizations: {\n          activate: {\n            create: 'unused',\n            read: 'View identity-based authorizations settings',\n            update: 'Enable/Disable identity-based authorizations',\n            delete: 'unused',\n          },\n        },\n        multiTenancy: {\n          activate: {\n            create: 'unused',\n            read: 'View Multi-tenency settings',\n            update: 'Enable/Disable Multi-tenancy',\n            delete: 'unused',\n          },\n        },\n      },\n    },\n  }\n\nexport const PermissionsForOrganizationRole: Map<\n  OrganizationRole,\n  OrganizationPermissions\n> = new Map([\n  [\n    OrganizationRole.MEMBER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ADMIN,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OWNER,\n    {\n      org: {\n        clusters: CRUD_TRUE,\n        clients: CRUD_TRUE,\n        settings: {\n          create: false,\n          read: true,\n          update: true,\n          delete: true,\n        },\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_UPDATE_TRUE,\n        users: {\n          general: CRUD_TRUE,\n          owner: CRUD_TRUE,\n          admin: CRUD_TRUE,\n          member: CRUD_TRUE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_TRUE,\n        forms: CRUD_TRUE,\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_TRUE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_TRUE,\n        identity: CRUD_TRUE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_TRUE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_TRUE,\n          },\n          multiTenancy: {\n            activate: CRUD_TRUE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.SUPPORTAGENT,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_READ_TRUE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_READ_TRUE,\n        billing: CRUD_READ_TRUE,\n        users: {\n          general: CRUD_READ_TRUE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_READ_TRUE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_READ_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_READ_TRUE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_READ_TRUE,\n        connectorSecrets: CRUD_READ_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.OPERATIONS_ENGINEER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_READ_TRUE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_TRUE,\n        alerts: CRUD_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_TRUE,\n        secureConnectivity: CRUD_TRUE,\n        encryption: CRUD_TRUE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.TASK_USER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.ANALYST,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_READ_TRUE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.DEVELOPER,\n    {\n      org: {\n        clusters: {\n          create: true,\n          read: true,\n          update: false,\n          delete: false,\n        },\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        // Only Organization Owner and Organization Admin see the org member\n        // list. Developer kept read access, which showed the Users and Groups\n        // tabs with disabled row actions (#9948).\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        forms: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        instances: CRUD_TRUE,\n        workflows: CRUD_TRUE,\n        webide: CRUD_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: {\n          create: true,\n          read: true,\n          update: true,\n          delete: false,\n        },\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_TRUE,\n        tasklist: CRUD_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_READ_TRUE,\n        secureConnectivity: CRUD_READ_TRUE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_TRUE,\n        connectors: CRUD_READ_TRUE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_TRUE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.VISITOR,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_READ_TRUE,\n        forms: CRUD_READ_TRUE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_READ_TRUE,\n        alerts: CRUD_READ_TRUE,\n        operate: CRUD_READ_TRUE,\n        tasklist: CRUD_READ_TRUE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n  [\n    OrganizationRole.MODELER,\n    {\n      org: {\n        clusters: CRUD_READ_TRUE,\n        clients: CRUD_FALSE,\n        settings: CRUD_READ_TRUE,\n        usage: CRUD_FALSE,\n        billing: CRUD_FALSE,\n        users: {\n          general: CRUD_FALSE,\n          owner: CRUD_FALSE,\n          admin: CRUD_FALSE,\n          member: CRUD_FALSE,\n        },\n        activity: CRUD_FALSE,\n        diagrams: CRUD_FALSE,\n        forms: CRUD_FALSE,\n        instances: CRUD_FALSE,\n        workflows: CRUD_FALSE,\n        webide: CRUD_READ_TRUE,\n        earlyAccessFeatures: CRUD_FALSE,\n      },\n      cluster: {\n        clients: CRUD_FALSE,\n        alerts: CRUD_FALSE,\n        operate: CRUD_FALSE,\n        tasklist: CRUD_FALSE,\n        optimize: CRUD_FALSE,\n        identity: CRUD_FALSE,\n        ipWhitelist: CRUD_FALSE,\n        secureConnectivity: CRUD_FALSE,\n        encryption: CRUD_FALSE,\n        connectorSecrets: CRUD_FALSE,\n        connectors: CRUD_FALSE,\n        settings: {\n          resourceBasedAuthorizations: {\n            activate: CRUD_FALSE,\n            configure: CRUD_FALSE,\n          },\n          identityBasedAuthorizations: {\n            activate: CRUD_FALSE,\n          },\n          multiTenancy: {\n            activate: CRUD_FALSE,\n          },\n        },\n      },\n    },\n  ],\n])\n"],
+  "mappings": "AAMA,SAAS,wBAAwB;AAKjC,MAAM,YAAoC;AAAA,EACxC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,aAAqC;AAAA,EACzC,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,iBAAyC;AAAA,EAC7C,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,MAAM,wBAAgD;AAAA,EACpD,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;AAmEO,MAAM,sCACX;AAAA,EACE,KAAK;AAAA,IACH,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,qBAAqB;AAAA,MACnB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,aAAa;AAAA,MACX,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,oBAAoB;AAAA,MAClB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,kBAAkB;AAAA,MAChB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,UAAU;AAAA,MACR,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,UACT,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,6BAA6B;AAAA,QAC3B,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEK,MAAM,iCAGT,oBAAI,IAAI;AAAA,EACV;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA;AAAA;AAAA;AAAA,QAIT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,iBAAiB;AAAA,IACjB;AAAA,MACE,KAAK;AAAA,QACH,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,UAAU;AAAA,QACV,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,qBAAqB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU;AAAA,QACV,UAAU;AAAA,QACV,aAAa;AAAA,QACb,oBAAoB;AAAA,QACpB,YAAY;AAAA,QACZ,kBAAkB;AAAA,QAClB,YAAY;AAAA,QACZ,UAAU;AAAA,UACR,6BAA6B;AAAA,YAC3B,UAAU;AAAA,YACV,WAAW;AAAA,UACb;AAAA,UACA,6BAA6B;AAAA,YAC3B,UAAU;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;",
   "names": []
 }

package/dist/utils/orgStartDate.utils.d.ts

@@ -0,0 +1,28 @@
+/** Minimal org shape `computeOrgStartDate` needs. `OrganizationDto` satisfies it. */
+export interface OrgStartDateInput {
+    created?: Date | string;
+    organizationToSalesPlan?: {
+        salesPlan: {
+            salesPlanType?: string;
+        };
+        trialPlanStartDate?: Date | string;
+        enterpriseStartDate?: Date | string;
+    };
+}
+/**
+ * The date an org's value metrics start counting from, by sales-plan type.
+ *
+ * - `enterprise`: `enterpriseStartDate`, or now when that is missing.
+ * - `trial`: `created`, or `trialPlanStartDate` when `created` is missing, or
+ *   now when neither is set.
+ * - every other plan type (`in-negotiation`, `free`, `internal`, …): `created`,
+ *   or now when `created` is missing.
+ *
+ * Ported from accounts-frontend's `computeOrgStartDate`
+ * (`apps/accounts-frontend/src/models/api/valueMetrics.ts`) so
+ * control-frontend's Value metrics "group by" control buckets periods the
+ * same way the legacy Accounts tool did. Kept here so the two surfaces
+ * cannot silently disagree about which day a period starts on — the same
+ * reason `enterpriseTerm.utils.ts` in this file was extracted.
+ */
+export declare function computeOrgStartDate(organisation: OrgStartDateInput | undefined): Date;

package/dist/utils/orgStartDate.utils.js

@@ -0,0 +1,25 @@
+function computeOrgStartDate(organisation) {
+  if (!organisation) {
+    return /* @__PURE__ */ new Date();
+  }
+  const created = organisation.created ? new Date(organisation.created) : void 0;
+  switch (organisation.organizationToSalesPlan?.salesPlan.salesPlanType) {
+    case "trial": {
+      if (created) {
+        return created;
+      }
+      const trialStart = organisation.organizationToSalesPlan.trialPlanStartDate;
+      return trialStart ? new Date(trialStart) : /* @__PURE__ */ new Date();
+    }
+    case "enterprise": {
+      const enterpriseStart = organisation.organizationToSalesPlan.enterpriseStartDate;
+      return enterpriseStart ? new Date(enterpriseStart) : /* @__PURE__ */ new Date();
+    }
+    default:
+      return created ?? /* @__PURE__ */ new Date();
+  }
+}
+export {
+  computeOrgStartDate
+};
+//# sourceMappingURL=orgStartDate.utils.js.map

package/dist/utils/orgStartDate.utils.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/orgStartDate.utils.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/** Minimal org shape `computeOrgStartDate` needs. `OrganizationDto` satisfies it. */\nexport interface OrgStartDateInput {\n  created?: Date | string\n  organizationToSalesPlan?: {\n    salesPlan: { salesPlanType?: string }\n    trialPlanStartDate?: Date | string\n    enterpriseStartDate?: Date | string\n  }\n}\n\n/**\n * The date an org's value metrics start counting from, by sales-plan type.\n *\n * - `enterprise`: `enterpriseStartDate`, or now when that is missing.\n * - `trial`: `created`, or `trialPlanStartDate` when `created` is missing, or\n *   now when neither is set.\n * - every other plan type (`in-negotiation`, `free`, `internal`, \u2026): `created`,\n *   or now when `created` is missing.\n *\n * Ported from accounts-frontend's `computeOrgStartDate`\n * (`apps/accounts-frontend/src/models/api/valueMetrics.ts`) so\n * control-frontend's Value metrics \"group by\" control buckets periods the\n * same way the legacy Accounts tool did. Kept here so the two surfaces\n * cannot silently disagree about which day a period starts on \u2014 the same\n * reason `enterpriseTerm.utils.ts` in this file was extracted.\n */\nexport function computeOrgStartDate(\n  organisation: OrgStartDateInput | undefined,\n): Date {\n  if (!organisation) {\n    return new Date()\n  }\n\n  const created = organisation.created\n    ? new Date(organisation.created)\n    : undefined\n\n  switch (organisation.organizationToSalesPlan?.salesPlan.salesPlanType) {\n    case 'trial': {\n      if (created) {\n        return created\n      }\n      const trialStart = organisation.organizationToSalesPlan.trialPlanStartDate\n      return trialStart ? new Date(trialStart) : new Date()\n    }\n    case 'enterprise': {\n      const enterpriseStart =\n        organisation.organizationToSalesPlan.enterpriseStartDate\n      return enterpriseStart ? new Date(enterpriseStart) : new Date()\n    }\n    default:\n      return created ?? new Date()\n  }\n}\n"],
+  "mappings": "AAgCO,SAAS,oBACd,cACM;AACN,MAAI,CAAC,cAAc;AACjB,WAAO,oBAAI,KAAK;AAAA,EAClB;AAEA,QAAM,UAAU,aAAa,UACzB,IAAI,KAAK,aAAa,OAAO,IAC7B;AAEJ,UAAQ,aAAa,yBAAyB,UAAU,eAAe;AAAA,IACrE,KAAK,SAAS;AACZ,UAAI,SAAS;AACX,eAAO;AAAA,MACT;AACA,YAAM,aAAa,aAAa,wBAAwB;AACxD,aAAO,aAAa,IAAI,KAAK,UAAU,IAAI,oBAAI,KAAK;AAAA,IACtD;AAAA,IACA,KAAK,cAAc;AACjB,YAAM,kBACJ,aAAa,wBAAwB;AACvC,aAAO,kBAAkB,IAAI,KAAK,eAAe,IAAI,oBAAI,KAAK;AAAA,IAChE;AAAA,IACA;AACE,aAAO,WAAW,oBAAI,KAAK;AAAA,EAC/B;AACF;",
+  "names": []
+}

package/dist/utils/orgStartDate.utils.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/orgs/OrgHelper.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/versionCheck.utils.d.ts

@@ -1,3 +1,21 @@
+/**
+ * stripSecfixPostfix removes the `-secfix` postfix of a version.
+ *
+ * A security patch tags the images of a generation with the postfix
+ * (`8.8.19-secfix`). Semver reads the postfix as a prerelease, which sorts
+ * under the release it patches. A `>= 8.8.19` gate thus refuses a patched
+ * build of 8.8.19 itself. The postfix holds no version information, so it
+ * comes off before every comparison.
+ *
+ * Only the postfix comes off, not the whole prerelease. A patched alpha
+ * (`8.10.0-alpha5-secfix`) stays an alpha, which the 8.10 floors and
+ * `isGenerationResumable` both depend on.
+ *
+ * A surface that shows a version reads this helper too, because the postfix is
+ * an internal build detail. One helper keeps the version a customer sees and
+ * the version a gate compares on the same rule.
+ */
+export declare const stripSecfixPostfix: (version: string) => string;
 export declare enum VersionCheckOperator {
     LessThan = 0,
     LessThanOrEqual = 1,
@@ -13,6 +31,31 @@ export declare const checkVersion: (params: {
     versionToCompareTo: string;
     trueOnInvalidVersion?: boolean;
 }) => boolean;
+/**
+ * Can a suspended cluster on this generation resume? An alpha generation under
+ * `RESUME_ALPHA_MIN_VERSION` answers false. Every other generation answers
+ * true.
+ *
+ * The floor applies to alphas only, because they have no upgrade chain.
+ * `RESUME_ALPHA_MIN_VERSION` gives the full reason. A release generation under
+ * the floor, 8.9 for example, keeps its resume action.
+ *
+ * An alpha carries a prerelease tag that starts with `alpha`. The test reads
+ * that tag, not the presence of a prerelease. A security patch tags a release
+ * generation `8.9.0-secfix`, which semver also reads as a prerelease. That
+ * generation is a release and keeps its upgrade chain, so it stays resumable.
+ *
+ * The c4 resume actions and the console-backend wake-up guards share this
+ * function. The frontend keeps the action and disables it, the backend refuses
+ * the request, and both must agree on the cohort. Two copies of one floor is
+ * #9703.
+ *
+ * The answer is true for a version this function cannot read as an alpha:
+ * - A `SNAPSHOT` tag is built from main, so it is never one of the old alphas.
+ * - An empty or invalid version tells us nothing. A guess of false locks a
+ *   customer out of a cluster that is good, so the safe answer is true.
+ */
+export declare const isGenerationResumable: (zeebeVersion?: string) => boolean;
 /**
  * Version gate for the App Integrations exporter toggle (#8536). Shared by the
  * c4 settings tile and the console-backend update guard so both stay in

package/dist/utils/versionCheck.utils.js

@@ -4,12 +4,28 @@ import {
   APP_INTEGRATIONS_89_STREAM_MINOR,
   APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,
   APP_INTEGRATIONS_MIN_VERSION,
+  RESUME_ALPHA_MIN_VERSION,
   SECRETS_FILTER_MODE_8_6_MIN_VERSION,
   SECRETS_FILTER_MODE_8_7_MIN_VERSION,
   SECRETS_FILTER_MODE_8_8_MIN_VERSION,
   SECRETS_FILTER_MODE_8_9_MIN_VERSION,
   SECRETS_FILTER_MODE_8_10_MIN_VERSION
 } from "../constants/version-gates.const.js";
+const stripSecfixPostfix = (version) => {
+  const postfixStart = version.toLowerCase().indexOf("-secfix");
+  return postfixStart === -1 ? version : version.slice(0, postfixStart);
+};
+const extractVersion = (possiblyVersionOrDockerPath) => {
+  const raw = possiblyVersionOrDockerPath ?? "";
+  if (semver.valid(raw)) {
+    return stripSecfixPostfix(raw);
+  }
+  const versionSplit = raw.split(":");
+  if (versionSplit.length > 1) {
+    return stripSecfixPostfix(versionSplit[1]);
+  }
+  return raw;
+};
 var VersionCheckOperator = /* @__PURE__ */ ((VersionCheckOperator2) => {
   VersionCheckOperator2[VersionCheckOperator2["LessThan"] = 0] = "LessThan";
   VersionCheckOperator2[VersionCheckOperator2["LessThanOrEqual"] = 1] = "LessThanOrEqual";
@@ -38,17 +54,7 @@ const checkVersion = (params) => {
   if (!semver.valid(versionToCompareTo)) {
     throw new Error("Invalid version to compare to");
   }
-  let version = "";
-  if (semver.valid(params.possiblyVersionOrDockerPath ?? "")) {
-    version = params.possiblyVersionOrDockerPath ?? "";
-  } else {
-    const versionSplit = params.possiblyVersionOrDockerPath?.split(":") ?? [];
-    if (versionSplit.length > 1) {
-      version = versionSplit[1];
-    } else {
-      version = params.possiblyVersionOrDockerPath ?? "";
-    }
-  }
+  let version = extractVersion(params.possiblyVersionOrDockerPath);
   if (params.trueForSnapshot && version.includes("SNAPSHOT")) {
     if (version === "SNAPSHOT") {
       if (params.trueForSnapshot !== "compare") {
@@ -99,6 +105,21 @@ const checkVersion = (params) => {
       return false;
   }
 };
+const isGenerationResumable = (zeebeVersion) => {
+  const version = extractVersion(zeebeVersion);
+  const isAlpha = (semver.prerelease(version) ?? []).some(
+    (part) => typeof part === "string" && part.toLowerCase().startsWith("alpha")
+  );
+  if (!semver.valid(version) || !isAlpha) {
+    return true;
+  }
+  return checkVersion({
+    possiblyVersionOrDockerPath: zeebeVersion,
+    trueForSnapshot: true,
+    operator: 3 /* GreaterThanOrEqual */,
+    versionToCompareTo: RESUME_ALPHA_MIN_VERSION
+  });
+};
 const isAppIntegrationsVersionSupported = (versions) => {
   if (!versions.zeebe) {
     return false;
@@ -166,6 +187,8 @@ export {
   VersionCheckOperator,
   checkVersion,
   isAppIntegrationsVersionSupported,
-  isSecretsFilterModeConfigurable
+  isGenerationResumable,
+  isSecretsFilterModeConfigurable,
+  stripSecfixPostfix
 };
 //# sourceMappingURL=versionCheck.utils.js.map