@camunda/ccma-shared-types 1.0.0 → 1.2.0

package/dist/dtos/AlertSubscription.dto.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/dtos/AlertSubscription.dto.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from '../enums/AlertSubscription.enum.js'\n\nexport interface AlertSubscriptionDto {\n  uuid: string\n  userIdOrWebhook: string\n  type: AlertSubscriptionType\n  report: AlertSubscriptionReportType\n  webhookAuth?: AlertSubscriptionWebhookAuth\n  createdBy: string\n  createdByName: string\n  created: Date\n  updatedBy: string\n  updatedByName: string\n  updated: Date\n  lastTimeTriggered?: Date\n  numberOfTimesTriggered: number\n}\n\nexport interface AlertSubscriptionEntryDto {\n  errorMessage?: string\n  errorType?: string\n  flowNodeId?: string\n  jobKey?: string\n  creationTime?: string\n  processInstanceId?: string\n  processName?: string\n  processVersion?: number\n  bpmnProcessId?: string\n}\n\nexport const HMAC_SUPPORTED_ALGORITHM = 'sha256'\nexport const HMAC_HEADER_POSITION = 'X-Camunda-Signature-256'\n\nexport const FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS = [\n  'https://camunda.com',\n  'https://console.cloud.camunda.io',\n  'https://accounts.cloud.camunda.io',\n  'https://console.camunda.io',\n  'https://accounts.camunda.io',\n  'https://console.ultrawombat.com',\n  'https://console.cloud.ultrawombat.com',\n  'https://accounts.cloud.ultrawombat.com',\n  'https://accounts.ultrawombat.com',\n  'https://console.cloud.dev.ultrawombat.com',\n  'https://console.dev.ultrawombat.com',\n  'https://accounts.cloud.dev.ultrawombat.com',\n]\n\nexport type ALERT_SUBSCRIPTION_TYPES = 'ProcessAlert'\nexport type ALERT_SUBSCRIPTION_REPORT_TYPES = 'Email' | 'Webhook'\n\nexport interface AlertSubscriptionWebhookAuth {\n  hmac?: {\n    secret: string\n  }\n}\n\nexport type CheckFailedReason =\n  | 'urlEmpty'\n  | 'urlNoHead'\n  | 'generatedHmacNotAccepted'\n  | 'urlBad'\n  | 'urlPrivate'\n"],
-  "mappings": "AAuCO,MAAM,2BAA2B;AACjC,MAAM,uBAAuB;AAE7B,MAAM,yCAAyC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from '../enums/AlertSubscription.enum.js'\n\nexport interface AlertSubscriptionDto {\n  uuid: string\n  userIdOrWebhook: string\n  type: AlertSubscriptionType\n  report: AlertSubscriptionReportType\n  webhookAuth?: AlertSubscriptionWebhookAuth\n  createdBy: string\n  createdByName: string\n  created: Date\n  updatedBy: string\n  updatedByName: string\n  updated: Date\n  lastTimeTriggered?: Date\n  numberOfTimesTriggered: number\n}\n\nexport interface AlertSubscriptionEntryDto {\n  errorMessage?: string\n  errorType?: string\n  flowNodeId?: string\n  jobKey?: string\n  creationTime?: string\n  processInstanceId?: string\n  processName?: string\n  processVersion?: number\n  bpmnProcessId?: string\n}\n\nexport const HMAC_SUPPORTED_ALGORITHM = 'sha256'\nexport const HMAC_HEADER_POSITION = 'X-Camunda-Signature-256'\n\n/**\n * Webhook targets a customer may not point an alert at, to limit SSRF.\n *\n * Despite the name, each entry is a URL prefix, scheme included: callers match\n * with `url.href.startsWith(entry)`. So add entries as `https://<host>`, with\n * no trailing slash and no path.\n */\nexport const FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS = [\n  'https://camunda.com',\n  'https://console.cloud.camunda.io',\n  'https://accounts.cloud.camunda.io',\n  'https://console.camunda.io',\n  'https://accounts.camunda.io',\n  'https://console.ultrawombat.com',\n  'https://console.cloud.ultrawombat.com',\n  'https://accounts.cloud.ultrawombat.com',\n  'https://accounts.ultrawombat.com',\n  'https://console.cloud.dev.ultrawombat.com',\n  'https://console.dev.ultrawombat.com',\n  'https://accounts.cloud.dev.ultrawombat.com',\n  'https://accounts.dev.ultrawombat.com',\n  // Hub and consolelegacy, all stages.\n  // Note: This list contains URL prefixes (`https://<host>`), not bare hostnames.\n  // Callers compare with `url.href.startsWith(...)`.\n  'https://hub.dev.ultrawombat.com',\n  'https://hub.ultrawombat.com',\n  'https://hub.camunda.io',\n  'https://consolelegacy.dev.ultrawombat.com',\n  'https://consolelegacy.ultrawombat.com',\n  'https://consolelegacy.camunda.io',\n]\n\nexport type ALERT_SUBSCRIPTION_TYPES = 'ProcessAlert'\nexport type ALERT_SUBSCRIPTION_REPORT_TYPES = 'Email' | 'Webhook'\n\nexport interface AlertSubscriptionWebhookAuth {\n  hmac?: {\n    secret: string\n  }\n}\n\nexport type CheckFailedReason =\n  | 'urlEmpty'\n  | 'urlNoHead'\n  | 'generatedHmacNotAccepted'\n  | 'urlBad'\n  | 'urlPrivate'\n"],
+  "mappings": "AAuCO,MAAM,2BAA2B;AACjC,MAAM,uBAAuB;AAS7B,MAAM,yCAAyC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
   "names": []
 }

package/dist/dtos/ApprovalJob.dto.d.ts

@@ -0,0 +1,83 @@
+/**
+ * The wire types of the generic approval mechanism.
+ *
+ * This file holds no logic and no dependency, because three consumers read it:
+ * control-backend, control-frontend and cloudbot. The rules that read these
+ * types are in `../approvals/policy.js`, and they are pure for the same reason.
+ */
+/**
+ * Every state that an approval request can hold.
+ *
+ * A `const` tuple, not an enum, so it is both the union type and the list that
+ * validates a status filter at run time.
+ *
+ * The path of a request: `pending` until it reaches the threshold. Then
+ * `executing` (automatic mode) or `approved` (explicit mode, which waits for a
+ * person to press the button). `executed` or `failed` after the action ran. A
+ * request that never reaches the threshold ends `rejected`, `withdrawn` or
+ * `expired`.
+ */
+export declare const APPROVAL_JOB_STATUSES: readonly ["pending", "approved", "executing", "executed", "failed", "rejected", "withdrawn", "expired"];
+export type ApprovalJobStatus = (typeof APPROVAL_JOB_STATUSES)[number];
+/**
+ * What happens when a request reaches its threshold.
+ *
+ * `auto` runs the action immediately. `explicit` holds the request at
+ * `approved` and waits for a person to run it.
+ */
+export type ApprovalExecutionMode = 'auto' | 'explicit';
+/**
+ * A person, as an approval request records them.
+ *
+ * Both keys are kept. The machine then never has to choose one identity key,
+ * which is what split the earlier acknowledgement flows: some held an email and
+ * some held a user id, and the two could not be compared.
+ */
+export interface ApprovalActor {
+    userId: string;
+    email: string;
+}
+export interface ApprovalAck extends ApprovalActor {
+    /** An ISO timestamp. It is in a json column, so it is a string, not a Date. */
+    date: string;
+}
+/** One approval request, as the API returns it. */
+export interface ApprovalJobDto {
+    id: string;
+    type: string;
+    dedupeKey?: string;
+    payload: Record<string, unknown>;
+    createdBy: ApprovalActor;
+    acks: ApprovalAck[];
+    /** Copied from the use case, so a reader can render "1 of 2". */
+    requiredAcks: number;
+    executionMode: ApprovalExecutionMode;
+    status: ApprovalJobStatus;
+    closedBy?: ApprovalActor;
+    closedReason?: string;
+    /** An ISO timestamp. */
+    expiresAt: string;
+    executedAt?: string;
+    executionError?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * What a use case is, as the API reports it.
+ *
+ * The frontend needs `requiredPermission` to run the same rule as the backend.
+ * PR #9301 kept this registry a second time, by hand, in the frontend. A
+ * registry that the server owns means a new use case needs no frontend deploy.
+ */
+export interface ApprovalUseCaseDto {
+    type: string;
+    /** A short name for a person to read. */
+    label: string;
+    requiredAcks: number;
+    ttlDays: number;
+    executionMode: ApprovalExecutionMode;
+    /** The permission that acknowledge, reject and run all need. */
+    requiredPermission: string;
+    /** The permission to open a request. Absent means any signed-in user. */
+    createPermission?: string;
+}

package/dist/dtos/ApprovalJob.dto.js

@@ -0,0 +1,14 @@
+const APPROVAL_JOB_STATUSES = [
+  "pending",
+  "approved",
+  "executing",
+  "executed",
+  "failed",
+  "rejected",
+  "withdrawn",
+  "expired"
+];
+export {
+  APPROVAL_JOB_STATUSES
+};
+//# sourceMappingURL=ApprovalJob.dto.js.map

package/dist/dtos/ApprovalJob.dto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/dtos/ApprovalJob.dto.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/**\n * The wire types of the generic approval mechanism.\n *\n * This file holds no logic and no dependency, because three consumers read it:\n * control-backend, control-frontend and cloudbot. The rules that read these\n * types are in `../approvals/policy.js`, and they are pure for the same reason.\n */\n\n/**\n * Every state that an approval request can hold.\n *\n * A `const` tuple, not an enum, so it is both the union type and the list that\n * validates a status filter at run time.\n *\n * The path of a request: `pending` until it reaches the threshold. Then\n * `executing` (automatic mode) or `approved` (explicit mode, which waits for a\n * person to press the button). `executed` or `failed` after the action ran. A\n * request that never reaches the threshold ends `rejected`, `withdrawn` or\n * `expired`.\n */\nexport const APPROVAL_JOB_STATUSES = [\n  'pending',\n  'approved',\n  'executing',\n  'executed',\n  'failed',\n  'rejected',\n  'withdrawn',\n  'expired',\n] as const\n\nexport type ApprovalJobStatus = (typeof APPROVAL_JOB_STATUSES)[number]\n\n/**\n * What happens when a request reaches its threshold.\n *\n * `auto` runs the action immediately. `explicit` holds the request at\n * `approved` and waits for a person to run it.\n */\nexport type ApprovalExecutionMode = 'auto' | 'explicit'\n\n/**\n * A person, as an approval request records them.\n *\n * Both keys are kept. The machine then never has to choose one identity key,\n * which is what split the earlier acknowledgement flows: some held an email and\n * some held a user id, and the two could not be compared.\n */\nexport interface ApprovalActor {\n  userId: string\n  email: string\n}\n\nexport interface ApprovalAck extends ApprovalActor {\n  /** An ISO timestamp. It is in a json column, so it is a string, not a Date. */\n  date: string\n}\n\n/** One approval request, as the API returns it. */\nexport interface ApprovalJobDto {\n  id: string\n  type: string\n  dedupeKey?: string\n  payload: Record<string, unknown>\n  createdBy: ApprovalActor\n  acks: ApprovalAck[]\n  /** Copied from the use case, so a reader can render \"1 of 2\". */\n  requiredAcks: number\n  executionMode: ApprovalExecutionMode\n  status: ApprovalJobStatus\n  closedBy?: ApprovalActor\n  closedReason?: string\n  /** An ISO timestamp. */\n  expiresAt: string\n  executedAt?: string\n  executionError?: string\n  createdAt: string\n  updatedAt: string\n}\n\n/**\n * What a use case is, as the API reports it.\n *\n * The frontend needs `requiredPermission` to run the same rule as the backend.\n * PR #9301 kept this registry a second time, by hand, in the frontend. A\n * registry that the server owns means a new use case needs no frontend deploy.\n */\nexport interface ApprovalUseCaseDto {\n  type: string\n  /** A short name for a person to read. */\n  label: string\n  requiredAcks: number\n  ttlDays: number\n  executionMode: ApprovalExecutionMode\n  /** The permission that acknowledge, reject and run all need. */\n  requiredPermission: string\n  /** The permission to open a request. Absent means any signed-in user. */\n  createPermission?: string\n}\n"],
+  "mappings": "AA0BO,MAAM,wBAAwB;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
+  "names": []
+}

package/dist/dtos/ClusterDeferredSpecChange.dto.d.ts

@@ -0,0 +1,24 @@
+/** Which write to the ZeebeCluster CR failed. */
+export type DeferredSpecChangeType = 'full' | 'cloud';
+/**
+ * A spec change that the console backend kept in its database, because the
+ * k8s controller refused the write while the cluster was asleep. The console
+ * backend writes the full spec from the database at the next resume, so the
+ * change reaches the CR then. Present on the cluster detail read for callers
+ * with read-all-cluster-info.
+ *
+ * A value here does not block the cluster. It tells support that the CR and
+ * the database are different until the cluster resumes.
+ */
+export interface ClusterDeferredSpecChange {
+    /** When the first write of this group of changes failed. ISO 8601. */
+    since: string;
+    /** When the last write failed. ISO 8601. */
+    lastAttemptAt: string;
+    /** How many writes failed since `since`. */
+    attempts: number;
+    /** The message of the last failure, truncated. */
+    lastError: string;
+    /** The write that failed: the full spec, or the cloud (business) spec. */
+    changeType: DeferredSpecChangeType;
+}

package/dist/dtos/ClusterDeferredSpecChange.dto.js

@@ -0,0 +1 @@
+//# sourceMappingURL=ClusterDeferredSpecChange.dto.js.map

package/dist/dtos/ClusterDeferredSpecChange.dto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/dtos/ConsoleCluster.dto.d.ts

@@ -1,4 +1,5 @@
 import type { ClusterLabels } from '../types/CamundaClusterLabels.type.js';
+import type { ClusterDeferredSpecChange } from './ClusterDeferredSpecChange.dto.js';
 import type { ClusterIpWhitelistDto } from './ClusterIpWhitelist.dto.js';
 import type { ClusterPlanDto } from './ClusterPlan.dto.js';
 import type { ClusterSpecHistory } from './ClusterSpecHistory.dto.js';
@@ -20,4 +21,11 @@ export interface ConsoleClusterDto extends CommonClusterDto {
      * "Spec Changes" tab.
      */
     specHistory?: ClusterSpecHistory;
+    /**
+     * Set when the k8s controller refused a spec write for this cluster while
+     * the cluster was asleep. The change is in the database, and the next
+     * resume writes it to the CR. Present under the same permission group as
+     * `specHistory`.
+     */
+    deferredSpecChange?: ClusterDeferredSpecChange;
 }

package/dist/dtos/ControlV2.dto.d.ts

@@ -1,4 +1,5 @@
 import type { SalesPlanType } from '../types/SalesPlanType.type.js';
+import type { LicensingModelType } from './Organization.dto.js';
 /** Generic cursor-paginated response. `nextCursor === null` on the last page. */
 export interface CursorPage<T> {
     items: T[];
@@ -42,6 +43,19 @@ export interface OrgListItemV2Dto {
     /** Concrete plan name (`SalesPlan.name`), distinct from the tier `salesPlanType`. */
     salesPlanName?: string;
     salesForceId?: string;
+    /** ISO-8601 end of the trial, when the org is or was on a trial plan. */
+    trialExpiresAt?: string;
+    /**
+     * Persisted trial state: `true` when the trial ran out, `false` while it
+     * runs. Absent when the org is not on a trial plan or the state is not set.
+     */
+    trialExpired?: boolean;
+    /** Org metadata flag: the org can only create clusters on AWS. */
+    awsOnly?: boolean;
+    /** Org metadata flag: enterprise plan limited to development use. */
+    enterpriseDevOnly?: boolean;
+    /** Org metadata: which licensing model prices the org. */
+    licensingModel?: LicensingModelType;
 }
 export interface ListOrganizationsV2Params extends CursorParams {
     q?: string;
@@ -115,7 +129,10 @@ export interface ClusterListItemV2Dto {
     numberOfAllocatedHwPackages?: number;
     /** Concrete plan name (`ClusterPlan.name`). Backs the "Plan" column. */
     planName?: string;
+    /** Generation name, for display. Group and filter by `generationId`. */
     generation: string;
+    /** Generation uuid. Names are not unique, so this is the grouping key. */
+    generationId?: string;
     region: string;
     /** Display-only; not a sort/filter key (§9.4 B2). */
     load?: number;
@@ -129,6 +146,55 @@ export interface ClusterListItemV2Dto {
 }
 /** Detail extends the list shape; richer fields are added in Phase 3. */
 export type ClusterDetailV2Dto = ClusterListItemV2Dto;
+/**
+ * How much work a cluster did, inside the 30-day activity window.
+ *
+ * `idle` and `unknown` are different facts and must stay apart. `idle` is
+ * evidence that the cluster did no work. `unknown` is the absence of
+ * evidence: on the dev stage most clusters have no row at all.
+ *
+ * The source is the Holistic Data Platform (HDP), which holds one row per
+ * cluster, per day, per value metric. The window is 30 days, thus a bucket
+ * for "did work, but more than 30 days ago" is not possible.
+ */
+export type ClusterActivityBucket = 
+/** Work inside the 30-day window. */
+'active'
+/** Rows exist inside the window. All values are zero. */
+ | 'idle'
+/** No row at all inside the window. */
+ | 'unknown';
+/** Quick-filter tiles on the clusters list. */
+export type ClusterActivityTile = 'all' | 'active' | 'idle' | 'unknown'
+/** More than 90 days old, and not active. */
+ | 'old-idle'
+/** No more than 30 days old, with no work and no data. */
+ | 'new-idle';
+export interface ClusterActivityV2Dto {
+    clusterId: string;
+    /**
+     * ISO-8601 instant of the last UTC day with work. HDP buckets by day, thus
+     * the time part is always midnight. Absent when the cluster did no work
+     * inside the window.
+     */
+    lastActiveAt?: string;
+    processInstances30d: number;
+    bucket: ClusterActivityBucket;
+}
+export interface ClusterActivityV2Response {
+    /**
+     * One entry per live cluster that has an HDP row inside the window. A
+     * cluster in the `unknown` bucket has no entry, because the bucket means
+     * that no row exists.
+     */
+    items: ClusterActivityV2Dto[];
+    /** Fleet-wide tile counts. The server joins `cluster.created` for the age tiles. */
+    counts: Record<ClusterActivityTile, number>;
+    /** ISO-8601 instant when the server assembled this response. */
+    fetchedAt: string;
+    /** The number of days that the window covers. */
+    windowDays: number;
+}
 export interface ListClustersV2Params extends CursorParams {
     q?: string;
     /**
@@ -171,8 +237,11 @@ export interface ListClustersV2Params extends CursorParams {
          * above, which is the separate "Plan type" filter over `ClusterPlanType`.
          */
         planNames?: string[];
-        /** Restrict to these generation names (`generation.name`). */
-        generationNames?: string[];
+        /**
+         * Restrict to these generation uuids (`generation.uuid`). Never by name:
+         * a generation name is not unique, so one name can match two generations.
+         */
+        generationIds?: string[];
         /** Restrict to these cloud providers (resolved via the k8s-context config). */
         providers?: string[];
         /** Exact k8s context uuid. */
@@ -201,8 +270,22 @@ export interface ListClustersV2Params extends CursorParams {
         minorVersion?: string;
         /** Restrict to these release channel names. */
         channels?: string[];
-        /** ISO-8601 lower bound on `created` (e.g. "created in the last 7 days"). */
+        /**
+         * ISO-8601 lower bound on `created` (e.g. "created in the last 7 days").
+         * Inclusive: a cluster created at this instant matches.
+         */
         createdAfter?: string;
+        /**
+         * ISO-8601 upper bound on `created`. Pairs with `createdAfter` for the
+         * age axis. Exclusive: a cluster created at this instant does not match.
+         */
+        createdBefore?: string;
+        /**
+         * Restrict to these activity buckets. The controller resolves the buckets
+         * to a cluster id set from the cached HDP activity map, the same way
+         * `filter.status` resolves K8s state to a cluster id set.
+         */
+        activity?: ClusterActivityBucket[];
     };
 }
 export interface ClusterParameterOptionV2Dto {
@@ -234,6 +317,7 @@ export interface ClusterParametersV2Dto {
 export interface ClusterFacetsV2Dto {
     total: number;
     status: Record<string, number>;
+    /** Keyed by generation uuid, not name: names are not unique. */
     generation: Record<string, number>;
     planType: Record<string, number>;
     channel: Record<string, number>;

package/dist/dtos/FeatureFlags.dto.d.ts

@@ -0,0 +1,53 @@
+/**
+ * This type gives the shape of the feature flags of the management apps. It is
+ * also the body of `GET external/feature-flags` on accounts-backend.
+ *
+ * The shape is here, but the evaluation is not. `features({stage, orgId,
+ * email})` in `@camunda-cloud/featureflags` stays the only place that decides
+ * if a flag is on. That package is private, thus a published package
+ * (`@camunda/ccma-api`, `@camunda/ccma-saas-frontend`) cannot name the type
+ * from there. `@camunda-cloud/featureflags` re-exports `Features` from here.
+ * Thus the type has one definition, and every existing import path still works.
+ *
+ * A c4 host reads one flag with `useC4FeatureFlag('console.optionalTelemetry')`
+ * — a dot path into this object.
+ */
+export interface Features {
+    console: {
+        admin: {
+            overrideOrgRole: boolean;
+        };
+        clusterSuspendButton: boolean;
+        clusterSleepWarning: boolean;
+        backupRestore: boolean;
+        failover: boolean;
+        privateLink87: boolean;
+        byoidp: boolean;
+        optimizeUnsetOnDisable: boolean;
+        appIntegrations: boolean;
+        optionalTelemetry: boolean;
+        releaseTrainSanityFix: boolean;
+        hubHelpCenterLinks: boolean;
+        legacyModelerApiNaming: boolean;
+        backupScheduleApi: boolean;
+        clusterCreationBlocked: boolean;
+        deferSpecChangeWhileAsleep: boolean;
+        clusterDuplication: boolean;
+    };
+    control: {
+        frontendTelemetry: boolean;
+        sendToExpiredTrialApproval: boolean;
+    };
+    accounts: {
+        moveClusterOrg: boolean;
+        orgLimitAuditLog: boolean;
+        orgReservationAuditLog: boolean;
+        deleteLiteLLMKeyOnTrialExpiry: boolean;
+    };
+    shared: {
+        cyberpunkBrutalism: boolean;
+        tenantsValueMetric: boolean;
+        hdpValueMetricsFor2025: boolean;
+        permissionsRework: boolean;
+    };
+}

package/dist/dtos/FeatureFlags.dto.js

@@ -0,0 +1 @@
+//# sourceMappingURL=FeatureFlags.dto.js.map

package/dist/dtos/FeatureFlags.dto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/dtos/Generations.dto.d.ts

@@ -30,3 +30,13 @@ export declare function sortGenerationBySemverOfZeebe(generationA: {
         zeebe: string;
     };
 }): number;
+/**
+ * Orders generation names by product, then newest first within a product, by
+ * numeric collation: `8.10` comes before `8.9`, and `gen10` before `gen9`.
+ * Products stay in alphabetic order, so the Camunda generations come before
+ * the older Zeebe ones. A release comes before its prereleases, so
+ * `8.10.0` is above `8.10.0-alpha1`. For a list that has no zeebe image to
+ * compare, such as a filter facet. When the image is known, use
+ * `sortGenerationBySemverOfZeebe`.
+ */
+export declare const compareGenerationNamesNewestFirst: (nameA: string, nameB: string) => number;

package/dist/dtos/Generations.dto.js

@@ -1,21 +1,63 @@
 import semver from "semver";
+import { stripSecfixPostfix } from "../utils/versionCheck.utils.js";
+const secfixRank = (version) => version === stripSecfixPostfix(version) ? 0 : 1;
 function sortGenerationBySemverOfZeebe(generationA, generationB) {
   const versionAvalid = generationA.versions?.zeebe !== void 0 && semver.valid(generationA.versions.zeebe.split(":")[1]) !== null;
   const versionBvalid = generationB.versions?.zeebe !== void 0 && semver.valid(generationB.versions.zeebe.split(":")[1]) !== null;
   if (versionAvalid && versionBvalid) {
-    return semver.compare(
-      generationB.versions.zeebe.split(":")[1],
-      generationA.versions.zeebe.split(":")[1]
+    const zeebeA = generationA.versions.zeebe.split(":")[1];
+    const zeebeB = generationB.versions.zeebe.split(":")[1];
+    const byVersion = semver.compare(
+      stripSecfixPostfix(zeebeB),
+      stripSecfixPostfix(zeebeA)
     );
+    if (byVersion !== 0) {
+      return byVersion;
+    }
+    const bySecfix = secfixRank(zeebeB) - secfixRank(zeebeA);
+    if (bySecfix !== 0) {
+      return bySecfix;
+    }
+    return compareGenerationNamesNewestFirst(generationA.name, generationB.name);
   } else if (versionAvalid) {
     return -1;
   } else if (versionBvalid) {
     return 1;
   } else {
-    return generationB.name.localeCompare(generationA.name);
+    return compareGenerationNamesNewestFirst(generationA.name, generationB.name);
   }
 }
+const productPrefix = (name) => {
+  const firstDigit = name.search(/\d/);
+  return firstDigit === -1 ? name : name.slice(0, firstDigit);
+};
+const splitPrerelease = (name) => {
+  const dash = name.indexOf("-", name.search(/\d/));
+  return dash === -1 ? [name, ""] : [name.slice(0, dash), name.slice(dash + 1)];
+};
+const compareGenerationNamesNewestFirst = (nameA, nameB) => {
+  const collation = { numeric: true, sensitivity: "base" };
+  const byProduct = productPrefix(nameA).localeCompare(
+    productPrefix(nameB),
+    void 0,
+    collation
+  );
+  if (byProduct !== 0) {
+    return byProduct;
+  }
+  const [baseA, suffixA] = splitPrerelease(nameA);
+  const [baseB, suffixB] = splitPrerelease(nameB);
+  const byBase = baseB.localeCompare(baseA, void 0, collation);
+  if (byBase !== 0) {
+    return byBase;
+  }
+  if (suffixA === "" || suffixB === "") {
+    return suffixA === suffixB ? 0 : suffixA === "" ? -1 : 1;
+  }
+  return suffixB.localeCompare(suffixA, void 0, collation);
+};
 export {
+  compareGenerationNamesNewestFirst,
   sortGenerationBySemverOfZeebe
 };
 //# sourceMappingURL=Generations.dto.js.map

package/dist/dtos/Generations.dto.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/dtos/Generations.dto.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport semver from 'semver'\nimport type { ZeebeClusterVersionsDto } from '../types/C8ClusterComponentVersions.type.js'\n\nexport interface GenerationDto {\n  name: string\n  uuid: string\n  versions: ZeebeClusterVersionsDto\n  upgradeableFrom: GenerationDto[]\n  createdBy: string\n  createdByName?: string\n  created: Date\n  updatedBy: string\n  updated: Date\n  isUnsupportedStarting?: Date\n  isBespoke?: boolean\n}\n\nexport interface GenerationWithClusterCountDto extends GenerationDto {\n  clusterCount: number\n}\n\nexport interface UpgradableGenerationsDto {\n  preferred: GenerationDto | null\n  options: GenerationDto[]\n}\n\nexport function sortGenerationBySemverOfZeebe(\n  generationA: { name: string; versions?: { zeebe: string } },\n  generationB: { name: string; versions?: { zeebe: string } },\n) {\n  // magic sorting algorithm\n  // uses the generation version of zeebe for comparison\n  // if version invalid: use localeCompare\n\n  const versionAvalid: boolean =\n    generationA.versions?.zeebe !== undefined &&\n    semver.valid(generationA.versions.zeebe.split(':')[1]) !== null\n  const versionBvalid: boolean =\n    generationB.versions?.zeebe !== undefined &&\n    semver.valid(generationB.versions.zeebe.split(':')[1]) !== null\n\n  if (versionAvalid && versionBvalid) {\n    return semver.compare(\n      generationB.versions!.zeebe.split(':')[1],\n      generationA.versions!.zeebe.split(':')[1],\n    )\n  } else if (versionAvalid) {\n    return -1\n  } else if (versionBvalid) {\n    return 1\n  } else {\n    return generationB.name.localeCompare(generationA.name)\n  }\n}\n"],
-  "mappings": "AAMA,OAAO,YAAY;AA0BZ,SAAS,8BACd,aACA,aACA;AAKA,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAC7D,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAE7D,MAAI,iBAAiB,eAAe;AAClC,WAAO,OAAO;AAAA,MACZ,YAAY,SAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MACxC,YAAY,SAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,IAC1C;AAAA,EACF,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,OAAO;AACL,WAAO,YAAY,KAAK,cAAc,YAAY,IAAI;AAAA,EACxD;AACF;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport semver from 'semver'\nimport type { ZeebeClusterVersionsDto } from '../types/C8ClusterComponentVersions.type.js'\nimport { stripSecfixPostfix } from '../utils/versionCheck.utils.js'\n\nexport interface GenerationDto {\n  name: string\n  uuid: string\n  versions: ZeebeClusterVersionsDto\n  upgradeableFrom: GenerationDto[]\n  createdBy: string\n  createdByName?: string\n  created: Date\n  updatedBy: string\n  updated: Date\n  isUnsupportedStarting?: Date\n  isBespoke?: boolean\n}\n\nexport interface GenerationWithClusterCountDto extends GenerationDto {\n  clusterCount: number\n}\n\nexport interface UpgradableGenerationsDto {\n  preferred: GenerationDto | null\n  options: GenerationDto[]\n}\n\nconst secfixRank = (version: string): number =>\n  version === stripSecfixPostfix(version) ? 0 : 1\n\nexport function sortGenerationBySemverOfZeebe(\n  generationA: { name: string; versions?: { zeebe: string } },\n  generationB: { name: string; versions?: { zeebe: string } },\n) {\n  // magic sorting algorithm\n  // uses the generation version of zeebe for comparison\n  // if version invalid: use localeCompare\n\n  const versionAvalid: boolean =\n    generationA.versions?.zeebe !== undefined &&\n    semver.valid(generationA.versions.zeebe.split(':')[1]) !== null\n  const versionBvalid: boolean =\n    generationB.versions?.zeebe !== undefined &&\n    semver.valid(generationB.versions.zeebe.split(':')[1]) !== null\n\n  if (versionAvalid && versionBvalid) {\n    const zeebeA = generationA.versions!.zeebe.split(':')[1]\n    const zeebeB = generationB.versions!.zeebe.split(':')[1]\n    const byVersion = semver.compare(\n      stripSecfixPostfix(zeebeB),\n      stripSecfixPostfix(zeebeA),\n    )\n    if (byVersion !== 0) {\n      return byVersion\n    }\n    // Both builds carry the same Camunda version here, so only the postfix\n    // separates them. A secfix build holds that version plus a security patch,\n    // thus it is the newer of the two and takes the higher rank.\n    const bySecfix = secfixRank(zeebeB) - secfixRank(zeebeA)\n    if (bySecfix !== 0) {\n      return bySecfix\n    }\n    // Same image on both (8.9+gen5 and 8.9+gen6 both run 8.9.5). The name is\n    // the only order left, so a picker does not show them in input order.\n    return compareGenerationNamesNewestFirst(generationA.name, generationB.name)\n  } else if (versionAvalid) {\n    return -1\n  } else if (versionBvalid) {\n    return 1\n  } else {\n    return compareGenerationNamesNewestFirst(generationA.name, generationB.name)\n  }\n}\n\n/** The text before the first digit: \"Camunda \" for \"Camunda 8.9+gen20\". */\nconst productPrefix = (name: string): string => {\n  const firstDigit = name.search(/\\d/)\n  return firstDigit === -1 ? name : name.slice(0, firstDigit)\n}\n\n/**\n * Splits a name at the first dash after the version: \"Camunda 8.10.0-alpha1\"\n * gives [\"Camunda 8.10.0\", \"alpha1\"]. A name without a dash gives an empty\n * suffix.\n */\nconst splitPrerelease = (name: string): [base: string, suffix: string] => {\n  const dash = name.indexOf('-', name.search(/\\d/))\n  return dash === -1 ? [name, ''] : [name.slice(0, dash), name.slice(dash + 1)]\n}\n\n/**\n * Orders generation names by product, then newest first within a product, by\n * numeric collation: `8.10` comes before `8.9`, and `gen10` before `gen9`.\n * Products stay in alphabetic order, so the Camunda generations come before\n * the older Zeebe ones. A release comes before its prereleases, so\n * `8.10.0` is above `8.10.0-alpha1`. For a list that has no zeebe image to\n * compare, such as a filter facet. When the image is known, use\n * `sortGenerationBySemverOfZeebe`.\n */\nexport const compareGenerationNamesNewestFirst = (\n  nameA: string,\n  nameB: string,\n): number => {\n  const collation = { numeric: true, sensitivity: 'base' } as const\n  const byProduct = productPrefix(nameA).localeCompare(\n    productPrefix(nameB),\n    undefined,\n    collation,\n  )\n  if (byProduct !== 0) {\n    return byProduct\n  }\n  const [baseA, suffixA] = splitPrerelease(nameA)\n  const [baseB, suffixB] = splitPrerelease(nameB)\n  const byBase = baseB.localeCompare(baseA, undefined, collation)\n  if (byBase !== 0) {\n    return byBase\n  }\n  if (suffixA === '' || suffixB === '') {\n    return suffixA === suffixB ? 0 : suffixA === '' ? -1 : 1\n  }\n  return suffixB.localeCompare(suffixA, undefined, collation)\n}\n"],
+  "mappings": "AAMA,OAAO,YAAY;AAEnB,SAAS,0BAA0B;AAyBnC,MAAM,aAAa,CAAC,YAClB,YAAY,mBAAmB,OAAO,IAAI,IAAI;AAEzC,SAAS,8BACd,aACA,aACA;AAKA,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAC7D,QAAM,gBACJ,YAAY,UAAU,UAAU,UAChC,OAAO,MAAM,YAAY,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM;AAE7D,MAAI,iBAAiB,eAAe;AAClC,UAAM,SAAS,YAAY,SAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AACvD,UAAM,SAAS,YAAY,SAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AACvD,UAAM,YAAY,OAAO;AAAA,MACvB,mBAAmB,MAAM;AAAA,MACzB,mBAAmB,MAAM;AAAA,IAC3B;AACA,QAAI,cAAc,GAAG;AACnB,aAAO;AAAA,IACT;AAIA,UAAM,WAAW,WAAW,MAAM,IAAI,WAAW,MAAM;AACvD,QAAI,aAAa,GAAG;AAClB,aAAO;AAAA,IACT;AAGA,WAAO,kCAAkC,YAAY,MAAM,YAAY,IAAI;AAAA,EAC7E,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,WAAW,eAAe;AACxB,WAAO;AAAA,EACT,OAAO;AACL,WAAO,kCAAkC,YAAY,MAAM,YAAY,IAAI;AAAA,EAC7E;AACF;AAGA,MAAM,gBAAgB,CAAC,SAAyB;AAC9C,QAAM,aAAa,KAAK,OAAO,IAAI;AACnC,SAAO,eAAe,KAAK,OAAO,KAAK,MAAM,GAAG,UAAU;AAC5D;AAOA,MAAM,kBAAkB,CAAC,SAAiD;AACxE,QAAM,OAAO,KAAK,QAAQ,KAAK,KAAK,OAAO,IAAI,CAAC;AAChD,SAAO,SAAS,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,MAAM,GAAG,IAAI,GAAG,KAAK,MAAM,OAAO,CAAC,CAAC;AAC9E;AAWO,MAAM,oCAAoC,CAC/C,OACA,UACW;AACX,QAAM,YAAY,EAAE,SAAS,MAAM,aAAa,OAAO;AACvD,QAAM,YAAY,cAAc,KAAK,EAAE;AAAA,IACrC,cAAc,KAAK;AAAA,IACnB;AAAA,IACA;AAAA,EACF;AACA,MAAI,cAAc,GAAG;AACnB,WAAO;AAAA,EACT;AACA,QAAM,CAAC,OAAO,OAAO,IAAI,gBAAgB,KAAK;AAC9C,QAAM,CAAC,OAAO,OAAO,IAAI,gBAAgB,KAAK;AAC9C,QAAM,SAAS,MAAM,cAAc,OAAO,QAAW,SAAS;AAC9D,MAAI,WAAW,GAAG;AAChB,WAAO;AAAA,EACT;AACA,MAAI,YAAY,MAAM,YAAY,IAAI;AACpC,WAAO,YAAY,UAAU,IAAI,YAAY,KAAK,KAAK;AAAA,EACzD;AACA,SAAO,QAAQ,cAAc,SAAS,QAAW,SAAS;AAC5D;",
   "names": []
 }

package/dist/dtos/Hdp.dto.d.ts

@@ -22,4 +22,33 @@ export declare namespace Hdp {
         minDate: string;
         maxDate: string;
     }
+    /**
+     * The work of one cluster inside the activity window. HDP aggregates, thus
+     * one row comes back for each cluster and not one for each cluster and day.
+     */
+    interface ClusterActivityRow {
+        clusterId: string;
+        /**
+         * The last UTC day with work, as `YYYY-MM-DD`. When no day inside the
+         * window carries work, this field is absent. accounts-backend makes this
+         * string from the BigQuery DATE, thus no caller reads the shape that the
+         * BigQuery client gives.
+         */
+        lastActiveAt?: string;
+        processInstances: number;
+    }
+    /**
+     * Every cluster that HDP holds inside the window, for the whole fleet.
+     *
+     * The reader joins these rows against its own cluster table. HDP keeps the
+     * rows of clusters that no longer exist, thus the set is bigger than the
+     * live fleet.
+     */
+    interface ClusterActivity {
+        rows: ClusterActivityRow[];
+        /** The window that `rows` covers, in days. */
+        windowDays: number;
+        /** The time of the query, as an ISO instant. */
+        fetchedAt: string;
+    }
 }

package/dist/dtos/Organization.dto.d.ts

@@ -4,6 +4,14 @@ import type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.j
 export type LicensingModelType = 'legacy' | '2025';
 export declare const VALID_LICENSING_MODELS: readonly LicensingModelType[];
 export declare const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string>;
+/**
+ * Upstream that holds a managed LLM key.
+ *
+ * `@camunda-cloud/featureflags` owns the `LlmProvider` type and its rollout
+ * rules. This package must not depend on that one, so the union is repeated
+ * here. Keep the two in step.
+ */
+export type LlmProviderName = 'litellm' | 'openrouter';
 export interface OrganizationMetadata {
     clickedRequestPaidPlan?: boolean;
     salesForceId?: string;
@@ -13,10 +21,53 @@ export interface OrganizationMetadata {
     autoJoin?: AutoJoinAssignment;
     llm?: {
         tenantKey: string;
-        teamId: string;
+        /**
+         * Team that holds the key on LiteLLM.
+         *
+         * Optional, and every call site already treats it as such. Old LiteLLM
+         * orgs got a key without a team. OpenRouter has no teams at all.
+         */
+        teamId?: string;
         created: number;
         /** Epoch ms of the last key rotation — set when the tenant key is regenerated. */
         updated?: number;
+        /**
+         * Upstream that holds this key. Absent means `litellm`, because every key
+         * from before the OpenRouter rollout is on LiteLLM.
+         *
+         * This value, and not the OpenRouter feature flag, decides where the
+         * read, block, top-up and delete paths look for the key. A flag change
+         * must never move a live key to a provider that does not hold it.
+         */
+        provider?: LlmProviderName;
+        /**
+         * Handle for the key on OpenRouter, which addresses a key by hash and not
+         * by its value. Absent for a LiteLLM key.
+         *
+         * Without it, an OpenRouter key can be found again only by a list request
+         * that matches on the name of the key.
+         */
+        keyHash?: string;
+        /**
+         * The key that a provider migration replaced, kept until the delete of
+         * that key is confirmed.
+         *
+         * The migration to OpenRouter writes the new key over `tenantKey` before
+         * it deletes the old one. Without this record the old key stays alive on
+         * the old upstream and nothing points at it. The migration removes this
+         * field when the old upstream confirms the delete, and it uses the field
+         * to find the orgs that a re-run must finish.
+         *
+         * Absent for every org that never moved upstream.
+         */
+        migratedFrom?: {
+            /** Upstream that holds the replaced key. */
+            provider: LlmProviderName;
+            /** The replaced key itself. It is a credential. Never log it. */
+            tenantKey: string;
+            /** Team that held the replaced key on LiteLLM. */
+            teamId?: string;
+        };
     };
 }
 export interface AutoJoinAssignment {

package/dist/dtos/Organization.dto.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/dtos/Organization.dto.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationPermissions } from '../types/OrganizationPermission.type.js'\nimport type { SalesPlanType } from '../types/SalesPlanType.type.js'\nimport type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js'\n\nexport type LicensingModelType = 'legacy' | '2025'\n\nexport const VALID_LICENSING_MODELS: readonly LicensingModelType[] = [\n  'legacy',\n  '2025',\n] as const\n\nexport const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string> =\n  {\n    legacy: 'Legacy (PI, DI, TU)',\n    '2025': '2025 (PI+Tenant)',\n  } as const\n\nexport interface OrganizationMetadata {\n  clickedRequestPaidPlan?: boolean\n  salesForceId?: string\n  enterpriseDevOnly?: boolean\n  awsOnly?: boolean\n  licensingModel?: LicensingModelType\n  autoJoin?: AutoJoinAssignment\n  llm?: {\n    tenantKey: string\n    teamId: string\n    created: number\n    /** Epoch ms of the last key rotation \u2014 set when the tenant key is regenerated. */\n    updated?: number\n  }\n}\n\nexport interface AutoJoinAssignment {\n  departments: Array<{ hibobId: string; roles: string[] }>\n  divisions: Array<{ hibobId: string; roles: string[] }>\n  subdivisions: Array<{ hibobId: string; roles: string[] }>\n}\nexport interface OrganizationDto {\n  uuid: string\n  name: string\n  organizationToSalesPlan?: OrganizationToSalesPlanDto\n  permissions?: OrganizationPermissions\n  metadata?: OrganizationMetadata\n  created: Date\n  internal: boolean\n}\n\nexport interface OrgOwner {\n  owner: string\n  email: string\n  first: string\n  last: string\n}\n\nexport interface OrgWithNameAndSalesPlan {\n  uuid: string\n  name: string | undefined\n  salesPlanName: string | undefined\n  salesPlanUuid: string | undefined\n  salesPlanType: SalesPlanType | undefined\n}\n"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationPermissions } from '../types/OrganizationPermission.type.js'\nimport type { SalesPlanType } from '../types/SalesPlanType.type.js'\nimport type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js'\n\nexport type LicensingModelType = 'legacy' | '2025'\n\nexport const VALID_LICENSING_MODELS: readonly LicensingModelType[] = [\n  'legacy',\n  '2025',\n] as const\n\nexport const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string> =\n  {\n    legacy: 'Legacy (PI, DI, TU)',\n    '2025': '2025 (PI+Tenant)',\n  } as const\n\n/**\n * Upstream that holds a managed LLM key.\n *\n * `@camunda-cloud/featureflags` owns the `LlmProvider` type and its rollout\n * rules. This package must not depend on that one, so the union is repeated\n * here. Keep the two in step.\n */\nexport type LlmProviderName = 'litellm' | 'openrouter'\n\nexport interface OrganizationMetadata {\n  clickedRequestPaidPlan?: boolean\n  salesForceId?: string\n  enterpriseDevOnly?: boolean\n  awsOnly?: boolean\n  licensingModel?: LicensingModelType\n  autoJoin?: AutoJoinAssignment\n  llm?: {\n    tenantKey: string\n    /**\n     * Team that holds the key on LiteLLM.\n     *\n     * Optional, and every call site already treats it as such. Old LiteLLM\n     * orgs got a key without a team. OpenRouter has no teams at all.\n     */\n    teamId?: string\n    created: number\n    /** Epoch ms of the last key rotation \u2014 set when the tenant key is regenerated. */\n    updated?: number\n    /**\n     * Upstream that holds this key. Absent means `litellm`, because every key\n     * from before the OpenRouter rollout is on LiteLLM.\n     *\n     * This value, and not the OpenRouter feature flag, decides where the\n     * read, block, top-up and delete paths look for the key. A flag change\n     * must never move a live key to a provider that does not hold it.\n     */\n    provider?: LlmProviderName\n    /**\n     * Handle for the key on OpenRouter, which addresses a key by hash and not\n     * by its value. Absent for a LiteLLM key.\n     *\n     * Without it, an OpenRouter key can be found again only by a list request\n     * that matches on the name of the key.\n     */\n    keyHash?: string\n    /**\n     * The key that a provider migration replaced, kept until the delete of\n     * that key is confirmed.\n     *\n     * The migration to OpenRouter writes the new key over `tenantKey` before\n     * it deletes the old one. Without this record the old key stays alive on\n     * the old upstream and nothing points at it. The migration removes this\n     * field when the old upstream confirms the delete, and it uses the field\n     * to find the orgs that a re-run must finish.\n     *\n     * Absent for every org that never moved upstream.\n     */\n    migratedFrom?: {\n      /** Upstream that holds the replaced key. */\n      provider: LlmProviderName\n      /** The replaced key itself. It is a credential. Never log it. */\n      tenantKey: string\n      /** Team that held the replaced key on LiteLLM. */\n      teamId?: string\n    }\n  }\n}\n\nexport interface AutoJoinAssignment {\n  departments: Array<{ hibobId: string; roles: string[] }>\n  divisions: Array<{ hibobId: string; roles: string[] }>\n  subdivisions: Array<{ hibobId: string; roles: string[] }>\n}\nexport interface OrganizationDto {\n  uuid: string\n  name: string\n  organizationToSalesPlan?: OrganizationToSalesPlanDto\n  permissions?: OrganizationPermissions\n  metadata?: OrganizationMetadata\n  created: Date\n  internal: boolean\n}\n\nexport interface OrgOwner {\n  owner: string\n  email: string\n  first: string\n  last: string\n}\n\nexport interface OrgWithNameAndSalesPlan {\n  uuid: string\n  name: string | undefined\n  salesPlanName: string | undefined\n  salesPlanUuid: string | undefined\n  salesPlanType: SalesPlanType | undefined\n}\n"],
   "mappings": "AAYO,MAAM,yBAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,gCACX;AAAA,EACE,QAAQ;AAAA,EACR,QAAQ;AACV;",
   "names": []
 }

package/dist/enums/AuditService.enum.d.ts

@@ -1,4 +1,5 @@
 export declare enum AuditService {
     CONSOLE = "console",
-    ACCOUNTS = "accounts"
+    ACCOUNTS = "accounts",
+    CONTROL = "control"
 }

package/dist/enums/AuditService.enum.js

@@ -1,6 +1,7 @@
 var AuditService = /* @__PURE__ */ ((AuditService2) => {
   AuditService2["CONSOLE"] = "console";
   AuditService2["ACCOUNTS"] = "accounts";
+  AuditService2["CONTROL"] = "control";
   return AuditService2;
 })(AuditService || {});
 export {