@camunda/ccma-shared-types 1.1.0 → 2.0.0

package/dist/dtos/Organization.dto.d.ts

@@ -1,5 +1,6 @@
 import type { OrganizationPermissions } from '../types/OrganizationPermission.type.js';
 import type { SalesPlanType } from '../types/SalesPlanType.type.js';
+import type { ClusterCreationDefaults } from './ClusterCreationDefaults.dto.js';
 import type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js';
 export type LicensingModelType = 'legacy' | '2025';
 export declare const VALID_LICENSING_MODELS: readonly LicensingModelType[];
@@ -14,6 +15,14 @@ export declare const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, s
 export type LlmProviderName = 'litellm' | 'openrouter';
 export interface OrganizationMetadata {
     clickedRequestPaidPlan?: boolean;
+    /**
+     * Default values for the settings of a new cluster of this organization
+     * (#9732). They seed a cluster at creation and are never applied again.
+     *
+     * A field that is absent takes the value that the console backend writes.
+     * The whole key is absent for almost every organization.
+     */
+    clusterDefaults?: ClusterCreationDefaults;
     salesForceId?: string;
     enterpriseDevOnly?: boolean;
     awsOnly?: boolean;
@@ -48,6 +57,26 @@ export interface OrganizationMetadata {
          * that matches on the name of the key.
          */
         keyHash?: string;
+        /**
+         * The key that a provider migration replaced, kept until the delete of
+         * that key is confirmed.
+         *
+         * The migration to OpenRouter writes the new key over `tenantKey` before
+         * it deletes the old one. Without this record the old key stays alive on
+         * the old upstream and nothing points at it. The migration removes this
+         * field when the old upstream confirms the delete, and it uses the field
+         * to find the orgs that a re-run must finish.
+         *
+         * Absent for every org that never moved upstream.
+         */
+        migratedFrom?: {
+            /** Upstream that holds the replaced key. */
+            provider: LlmProviderName;
+            /** The replaced key itself. It is a credential. Never log it. */
+            tenantKey: string;
+            /** Team that held the replaced key on LiteLLM. */
+            teamId?: string;
+        };
     };
 }
 export interface AutoJoinAssignment {

package/dist/dtos/Organization.dto.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/dtos/Organization.dto.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationPermissions } from '../types/OrganizationPermission.type.js'\nimport type { SalesPlanType } from '../types/SalesPlanType.type.js'\nimport type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js'\n\nexport type LicensingModelType = 'legacy' | '2025'\n\nexport const VALID_LICENSING_MODELS: readonly LicensingModelType[] = [\n  'legacy',\n  '2025',\n] as const\n\nexport const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string> =\n  {\n    legacy: 'Legacy (PI, DI, TU)',\n    '2025': '2025 (PI+Tenant)',\n  } as const\n\n/**\n * Upstream that holds a managed LLM key.\n *\n * `@camunda-cloud/featureflags` owns the `LlmProvider` type and its rollout\n * rules. This package must not depend on that one, so the union is repeated\n * here. Keep the two in step.\n */\nexport type LlmProviderName = 'litellm' | 'openrouter'\n\nexport interface OrganizationMetadata {\n  clickedRequestPaidPlan?: boolean\n  salesForceId?: string\n  enterpriseDevOnly?: boolean\n  awsOnly?: boolean\n  licensingModel?: LicensingModelType\n  autoJoin?: AutoJoinAssignment\n  llm?: {\n    tenantKey: string\n    /**\n     * Team that holds the key on LiteLLM.\n     *\n     * Optional, and every call site already treats it as such. Old LiteLLM\n     * orgs got a key without a team. OpenRouter has no teams at all.\n     */\n    teamId?: string\n    created: number\n    /** Epoch ms of the last key rotation \u2014 set when the tenant key is regenerated. */\n    updated?: number\n    /**\n     * Upstream that holds this key. Absent means `litellm`, because every key\n     * from before the OpenRouter rollout is on LiteLLM.\n     *\n     * This value, and not the OpenRouter feature flag, decides where the\n     * read, block, top-up and delete paths look for the key. A flag change\n     * must never move a live key to a provider that does not hold it.\n     */\n    provider?: LlmProviderName\n    /**\n     * Handle for the key on OpenRouter, which addresses a key by hash and not\n     * by its value. Absent for a LiteLLM key.\n     *\n     * Without it, an OpenRouter key can be found again only by a list request\n     * that matches on the name of the key.\n     */\n    keyHash?: string\n  }\n}\n\nexport interface AutoJoinAssignment {\n  departments: Array<{ hibobId: string; roles: string[] }>\n  divisions: Array<{ hibobId: string; roles: string[] }>\n  subdivisions: Array<{ hibobId: string; roles: string[] }>\n}\nexport interface OrganizationDto {\n  uuid: string\n  name: string\n  organizationToSalesPlan?: OrganizationToSalesPlanDto\n  permissions?: OrganizationPermissions\n  metadata?: OrganizationMetadata\n  created: Date\n  internal: boolean\n}\n\nexport interface OrgOwner {\n  owner: string\n  email: string\n  first: string\n  last: string\n}\n\nexport interface OrgWithNameAndSalesPlan {\n  uuid: string\n  name: string | undefined\n  salesPlanName: string | undefined\n  salesPlanUuid: string | undefined\n  salesPlanType: SalesPlanType | undefined\n}\n"],
-  "mappings": "AAYO,MAAM,yBAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,gCACX;AAAA,EACE,QAAQ;AAAA,EACR,QAAQ;AACV;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationPermissions } from '../types/OrganizationPermission.type.js'\nimport type { SalesPlanType } from '../types/SalesPlanType.type.js'\nimport type { ClusterCreationDefaults } from './ClusterCreationDefaults.dto.js'\nimport type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js'\n\nexport type LicensingModelType = 'legacy' | '2025'\n\nexport const VALID_LICENSING_MODELS: readonly LicensingModelType[] = [\n  'legacy',\n  '2025',\n] as const\n\nexport const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string> =\n  {\n    legacy: 'Legacy (PI, DI, TU)',\n    '2025': '2025 (PI+Tenant)',\n  } as const\n\n/**\n * Upstream that holds a managed LLM key.\n *\n * `@camunda-cloud/featureflags` owns the `LlmProvider` type and its rollout\n * rules. This package must not depend on that one, so the union is repeated\n * here. Keep the two in step.\n */\nexport type LlmProviderName = 'litellm' | 'openrouter'\n\nexport interface OrganizationMetadata {\n  clickedRequestPaidPlan?: boolean\n  /**\n   * Default values for the settings of a new cluster of this organization\n   * (#9732). They seed a cluster at creation and are never applied again.\n   *\n   * A field that is absent takes the value that the console backend writes.\n   * The whole key is absent for almost every organization.\n   */\n  clusterDefaults?: ClusterCreationDefaults\n  salesForceId?: string\n  enterpriseDevOnly?: boolean\n  awsOnly?: boolean\n  licensingModel?: LicensingModelType\n  autoJoin?: AutoJoinAssignment\n  llm?: {\n    tenantKey: string\n    /**\n     * Team that holds the key on LiteLLM.\n     *\n     * Optional, and every call site already treats it as such. Old LiteLLM\n     * orgs got a key without a team. OpenRouter has no teams at all.\n     */\n    teamId?: string\n    created: number\n    /** Epoch ms of the last key rotation \u2014 set when the tenant key is regenerated. */\n    updated?: number\n    /**\n     * Upstream that holds this key. Absent means `litellm`, because every key\n     * from before the OpenRouter rollout is on LiteLLM.\n     *\n     * This value, and not the OpenRouter feature flag, decides where the\n     * read, block, top-up and delete paths look for the key. A flag change\n     * must never move a live key to a provider that does not hold it.\n     */\n    provider?: LlmProviderName\n    /**\n     * Handle for the key on OpenRouter, which addresses a key by hash and not\n     * by its value. Absent for a LiteLLM key.\n     *\n     * Without it, an OpenRouter key can be found again only by a list request\n     * that matches on the name of the key.\n     */\n    keyHash?: string\n    /**\n     * The key that a provider migration replaced, kept until the delete of\n     * that key is confirmed.\n     *\n     * The migration to OpenRouter writes the new key over `tenantKey` before\n     * it deletes the old one. Without this record the old key stays alive on\n     * the old upstream and nothing points at it. The migration removes this\n     * field when the old upstream confirms the delete, and it uses the field\n     * to find the orgs that a re-run must finish.\n     *\n     * Absent for every org that never moved upstream.\n     */\n    migratedFrom?: {\n      /** Upstream that holds the replaced key. */\n      provider: LlmProviderName\n      /** The replaced key itself. It is a credential. Never log it. */\n      tenantKey: string\n      /** Team that held the replaced key on LiteLLM. */\n      teamId?: string\n    }\n  }\n}\n\nexport interface AutoJoinAssignment {\n  departments: Array<{ hibobId: string; roles: string[] }>\n  divisions: Array<{ hibobId: string; roles: string[] }>\n  subdivisions: Array<{ hibobId: string; roles: string[] }>\n}\nexport interface OrganizationDto {\n  uuid: string\n  name: string\n  organizationToSalesPlan?: OrganizationToSalesPlanDto\n  permissions?: OrganizationPermissions\n  metadata?: OrganizationMetadata\n  created: Date\n  internal: boolean\n}\n\nexport interface OrgOwner {\n  owner: string\n  email: string\n  first: string\n  last: string\n}\n\nexport interface OrgWithNameAndSalesPlan {\n  uuid: string\n  name: string | undefined\n  salesPlanName: string | undefined\n  salesPlanUuid: string | undefined\n  salesPlanType: SalesPlanType | undefined\n}\n"],
+  "mappings": "AAaO,MAAM,yBAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,gCACX;AAAA,EACE,QAAQ;AAAA,EACR,QAAQ;AACV;",
   "names": []
 }

package/dist/enums/AuditEntity.enum.d.ts

@@ -31,6 +31,7 @@ export declare enum AuditEntityAttribute {
     CLUSTER_SECRETS_FILTER_MODE = "Secrets Filter Mode",
     CLUSTER_BUSINESS_ID_UNIQUENESS = "Business ID Uniqueness",
     CLUSTER_OPTIONAL_TELEMETRY = "Optional telemetry",
+    CLUSTER_NON_SPOT_NODES = "Non-spot nodes",
     CLUSTER_MULTI_TENANCY = "Multi-tenancy",
     CLUSTER_SESSION_MAX_INACTIVE_INTERVAL = "Session idle timeout",
     CLUSTER_SESSION_HEARTBEAT = "Session heartbeat",
@@ -53,6 +54,7 @@ export declare enum AuditEntityAttribute {
     LLM_BUDGET = "LLM Budget",
     LLM_KEY_BLOCKED = "LLM Key Blocked",
     ORGANIZATION_LIMIT = "Limit",
+    ORGANIZATION_CLUSTER_DEFAULT = "Cluster creation default",
     CLUSTER_MODIFICATION = "Modification",
     ORGANIZATION_TRIAL_EXPIRES_AT = "Trial Expiration Date"
 }

package/dist/enums/AuditEntity.enum.js

@@ -32,6 +32,7 @@ var AuditEntityAttribute = /* @__PURE__ */ ((AuditEntityAttribute2) => {
   AuditEntityAttribute2["CLUSTER_SECRETS_FILTER_MODE"] = "Secrets Filter Mode";
   AuditEntityAttribute2["CLUSTER_BUSINESS_ID_UNIQUENESS"] = "Business ID Uniqueness";
   AuditEntityAttribute2["CLUSTER_OPTIONAL_TELEMETRY"] = "Optional telemetry";
+  AuditEntityAttribute2["CLUSTER_NON_SPOT_NODES"] = "Non-spot nodes";
   AuditEntityAttribute2["CLUSTER_MULTI_TENANCY"] = "Multi-tenancy";
   AuditEntityAttribute2["CLUSTER_SESSION_MAX_INACTIVE_INTERVAL"] = "Session idle timeout";
   AuditEntityAttribute2["CLUSTER_SESSION_HEARTBEAT"] = "Session heartbeat";
@@ -54,6 +55,7 @@ var AuditEntityAttribute = /* @__PURE__ */ ((AuditEntityAttribute2) => {
   AuditEntityAttribute2["LLM_BUDGET"] = "LLM Budget";
   AuditEntityAttribute2["LLM_KEY_BLOCKED"] = "LLM Key Blocked";
   AuditEntityAttribute2["ORGANIZATION_LIMIT"] = "Limit";
+  AuditEntityAttribute2["ORGANIZATION_CLUSTER_DEFAULT"] = "Cluster creation default";
   AuditEntityAttribute2["CLUSTER_MODIFICATION"] = "Modification";
   AuditEntityAttribute2["ORGANIZATION_TRIAL_EXPIRES_AT"] = "Trial Expiration Date";
   return AuditEntityAttribute2;

package/dist/enums/AuditEntity.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/AuditEntity.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum AuditEntity {\n  CLUSTER = 'Cluster',\n  CLIENT = 'Client',\n  ALERT_SUBSCRIPTION = 'Alert Subscription',\n  API_CLIENT = 'API Client',\n  SECURE_CONNECTIVITY_CRD = 'Private networking',\n  BYOM_CLIENT = 'External Monitoring Client',\n  BYOM_CRD = 'External Monitoring',\n  INVITATION = 'Invitation',\n  MEMBER = 'Member',\n  ORGANIZATION = 'Organization',\n  SALES_PLAN = 'SalesPlan',\n  CLUSTER_PLAN = 'ClusterPlan',\n  GENERATION = 'Generation',\n  BILLING = 'Billing',\n  USAGE_ALERT = 'Usage Alert',\n  ACCEPT_BETA_TERMS = 'Accept Alpha terms',\n  TOGGLE_BETA_FEATURE = 'Toggle Alpha feature',\n  CONNECTOR_SECRET = 'Connector Secret',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n}\n\nexport enum AuditEntityAttribute {\n  CLUSTER_CLUSTER_PLAN = 'ClusterPlan',\n  CLUSTER_GENERATION = 'Generation',\n  CLUSTER_NAME = 'Name',\n  CLUSTER_RBA = 'Resource Based Authorizations',\n  CLUSTER_ENFORCE_GROUPS = 'Enforce Group Management',\n  CLUSTER_PLAYMODE = 'Cluster Play Mode',\n  CLUSTER_MCP_ENABLED = 'MCP Support',\n  CLUSTER_SWAGGER = 'Cluster Swagger',\n  CLUSTER_SECRETS_FILTER_MODE = 'Secrets Filter Mode',\n  CLUSTER_BUSINESS_ID_UNIQUENESS = 'Business ID Uniqueness',\n  CLUSTER_OPTIONAL_TELEMETRY = 'Optional telemetry',\n  CLUSTER_MULTI_TENANCY = 'Multi-tenancy',\n  CLUSTER_SESSION_MAX_INACTIVE_INTERVAL = 'Session idle timeout',\n  CLUSTER_SESSION_HEARTBEAT = 'Session heartbeat',\n  CLUSTER_EXTERNAL_IDP = 'External identity provider',\n  CLUSTER_ENABLE_LOW_LATENCY = 'Enable low latency',\n  CLUSTER_AUTOUPDATE = 'Auto Update',\n  CLUSTER_OWNER = 'Owner',\n  CLUSTER_STATUS = 'Status',\n  CLUSTER_TASKLIST_V2_ENABLED = 'Taklist V2 Enabled',\n  CLUSTER_AUDIT_LOG = 'Audit Log',\n  INVITATION_ROLE = 'Role',\n  ORGANIZATION_NAME = 'Name',\n  SALES_PLAN = 'Plan',\n  BILLING_RESERVATION = 'Reservation',\n  BILLING_GENERAL_USERS = 'GeneralUsers', // paid cc legaly - only kept for audit logs compatibility\n  MEMBER_ROLE = 'Role',\n  USAGE_ALERT_THRESHOLD = 'Threshold',\n  USAGE_ALERT_STATUS = 'Status',\n  CLUSTER_AUDIT_LOGS = 'Audit Logging',\n  LLM_BUDGET = 'LLM Budget',\n  LLM_KEY_BLOCKED = 'LLM Key Blocked',\n  ORGANIZATION_LIMIT = 'Limit',\n  CLUSTER_MODIFICATION = 'Modification',\n  ORGANIZATION_TRIAL_EXPIRES_AT = 'Trial Expiration Date',\n}\n"],
-  "mappings": "AAOO,IAAK,cAAL,kBAAKA,iBAAL;AACL,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,wBAAqB;AACrB,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,6BAA0B;AAC1B,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,uBAAoB;AACpB,EAAAA,aAAA,yBAAsB;AACtB,EAAAA,aAAA,sBAAmB;AACnB,EAAAA,aAAA,0BAAuB;AAnBb,SAAAA;AAAA,GAAA;AAsBL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kBAAe;AACf,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,sBAAmB;AACnB,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,oCAAiC;AACjC,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,2CAAwC;AACxC,EAAAA,sBAAA,+BAA4B;AAC5B,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,mBAAgB;AAChB,EAAAA,sBAAA,oBAAiB;AACjB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,mCAAgC;AAnCtB,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum AuditEntity {\n  CLUSTER = 'Cluster',\n  CLIENT = 'Client',\n  ALERT_SUBSCRIPTION = 'Alert Subscription',\n  API_CLIENT = 'API Client',\n  SECURE_CONNECTIVITY_CRD = 'Private networking',\n  BYOM_CLIENT = 'External Monitoring Client',\n  BYOM_CRD = 'External Monitoring',\n  INVITATION = 'Invitation',\n  MEMBER = 'Member',\n  ORGANIZATION = 'Organization',\n  SALES_PLAN = 'SalesPlan',\n  CLUSTER_PLAN = 'ClusterPlan',\n  GENERATION = 'Generation',\n  BILLING = 'Billing',\n  USAGE_ALERT = 'Usage Alert',\n  ACCEPT_BETA_TERMS = 'Accept Alpha terms',\n  TOGGLE_BETA_FEATURE = 'Toggle Alpha feature',\n  CONNECTOR_SECRET = 'Connector Secret',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n}\n\nexport enum AuditEntityAttribute {\n  CLUSTER_CLUSTER_PLAN = 'ClusterPlan',\n  CLUSTER_GENERATION = 'Generation',\n  CLUSTER_NAME = 'Name',\n  CLUSTER_RBA = 'Resource Based Authorizations',\n  CLUSTER_ENFORCE_GROUPS = 'Enforce Group Management',\n  CLUSTER_PLAYMODE = 'Cluster Play Mode',\n  CLUSTER_MCP_ENABLED = 'MCP Support',\n  CLUSTER_SWAGGER = 'Cluster Swagger',\n  CLUSTER_SECRETS_FILTER_MODE = 'Secrets Filter Mode',\n  CLUSTER_BUSINESS_ID_UNIQUENESS = 'Business ID Uniqueness',\n  CLUSTER_OPTIONAL_TELEMETRY = 'Optional telemetry',\n  CLUSTER_NON_SPOT_NODES = 'Non-spot nodes',\n  CLUSTER_MULTI_TENANCY = 'Multi-tenancy',\n  CLUSTER_SESSION_MAX_INACTIVE_INTERVAL = 'Session idle timeout',\n  CLUSTER_SESSION_HEARTBEAT = 'Session heartbeat',\n  CLUSTER_EXTERNAL_IDP = 'External identity provider',\n  CLUSTER_ENABLE_LOW_LATENCY = 'Enable low latency',\n  CLUSTER_AUTOUPDATE = 'Auto Update',\n  CLUSTER_OWNER = 'Owner',\n  CLUSTER_STATUS = 'Status',\n  CLUSTER_TASKLIST_V2_ENABLED = 'Taklist V2 Enabled',\n  CLUSTER_AUDIT_LOG = 'Audit Log',\n  INVITATION_ROLE = 'Role',\n  ORGANIZATION_NAME = 'Name',\n  SALES_PLAN = 'Plan',\n  BILLING_RESERVATION = 'Reservation',\n  BILLING_GENERAL_USERS = 'GeneralUsers', // paid cc legaly - only kept for audit logs compatibility\n  MEMBER_ROLE = 'Role',\n  USAGE_ALERT_THRESHOLD = 'Threshold',\n  USAGE_ALERT_STATUS = 'Status',\n  CLUSTER_AUDIT_LOGS = 'Audit Logging',\n  LLM_BUDGET = 'LLM Budget',\n  LLM_KEY_BLOCKED = 'LLM Key Blocked',\n  ORGANIZATION_LIMIT = 'Limit',\n  ORGANIZATION_CLUSTER_DEFAULT = 'Cluster creation default',\n  CLUSTER_MODIFICATION = 'Modification',\n  ORGANIZATION_TRIAL_EXPIRES_AT = 'Trial Expiration Date',\n}\n"],
+  "mappings": "AAOO,IAAK,cAAL,kBAAKA,iBAAL;AACL,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,wBAAqB;AACrB,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,6BAA0B;AAC1B,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,YAAS;AACT,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,aAAU;AACV,EAAAA,aAAA,iBAAc;AACd,EAAAA,aAAA,uBAAoB;AACpB,EAAAA,aAAA,yBAAsB;AACtB,EAAAA,aAAA,sBAAmB;AACnB,EAAAA,aAAA,0BAAuB;AAnBb,SAAAA;AAAA,GAAA;AAsBL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kBAAe;AACf,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,sBAAmB;AACnB,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,oCAAiC;AACjC,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,4BAAyB;AACzB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,2CAAwC;AACxC,EAAAA,sBAAA,+BAA4B;AAC5B,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,gCAA6B;AAC7B,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,mBAAgB;AAChB,EAAAA,sBAAA,oBAAiB;AACjB,EAAAA,sBAAA,iCAA8B;AAC9B,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,uBAAoB;AACpB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,yBAAsB;AACtB,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,iBAAc;AACd,EAAAA,sBAAA,2BAAwB;AACxB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,gBAAa;AACb,EAAAA,sBAAA,qBAAkB;AAClB,EAAAA,sBAAA,wBAAqB;AACrB,EAAAA,sBAAA,kCAA+B;AAC/B,EAAAA,sBAAA,0BAAuB;AACvB,EAAAA,sBAAA,mCAAgC;AArCtB,SAAAA;AAAA,GAAA;",
   "names": ["AuditEntity", "AuditEntityAttribute"]
 }

package/dist/enums/AuditService.enum.d.ts

@@ -1,4 +1,5 @@
 export declare enum AuditService {
     CONSOLE = "console",
-    ACCOUNTS = "accounts"
+    ACCOUNTS = "accounts",
+    CONTROL = "control"
 }

package/dist/enums/AuditService.enum.js

@@ -1,6 +1,7 @@
 var AuditService = /* @__PURE__ */ ((AuditService2) => {
   AuditService2["CONSOLE"] = "console";
   AuditService2["ACCOUNTS"] = "accounts";
+  AuditService2["CONTROL"] = "control";
   return AuditService2;
 })(AuditService || {});
 export {

package/dist/enums/AuditService.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/AuditService.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum AuditService {\n  CONSOLE = 'console',\n  ACCOUNTS = 'accounts',\n}\n"],
-  "mappings": "AAOO,IAAK,eAAL,kBAAKA,kBAAL;AACL,EAAAA,cAAA,aAAU;AACV,EAAAA,cAAA,cAAW;AAFD,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// eslint-disable-next-line no-shadow\nexport enum AuditService {\n  CONSOLE = 'console',\n  ACCOUNTS = 'accounts',\n  // CAUTION: audit-logger stores this value and filters on it. Make sure that\n  // it accepts `control` before a deployed service writes with it.\n  CONTROL = 'control',\n}\n"],
+  "mappings": "AAOO,IAAK,eAAL,kBAAKA,kBAAL;AACL,EAAAA,cAAA,aAAU;AACV,EAAAA,cAAA,cAAW;AAGX,EAAAA,cAAA,aAAU;AALA,SAAAA;AAAA,GAAA;",
   "names": ["AuditService"]
 }

package/dist/enums/SystemAuditEntity.enum.d.ts

@@ -10,7 +10,8 @@ export declare enum SystemAuditEntity {
     CLUSTER_MODIFICATION = "Cluster Modification",
     CONNECTION = "Connection",
     RELEASE_TRAIN = "Release Train",
-    CLUSTER = "Cluster"
+    CLUSTER = "Cluster",
+    APPROVAL_JOB = "Approval Request"
 }
 /**
  * Display strings for audited attributes. The `entity` + `entityAttribute` pair
@@ -70,5 +71,8 @@ export declare enum SystemAuditEntityAttribute {
     CONNECTION_CONFIGURATION = "Configuration",
     CLUSTER_IP_ALLOWLIST = "IP Allowlist",
     CLUSTER_ENV_VAR_OVERRIDE = "Environment Variable Override",
-    CLUSTER_APPLIED_PLAN_MODIFICATION = "Plan Modification"
+    CLUSTER_APPLIED_PLAN_MODIFICATION = "Plan Modification",
+    APPROVAL_JOB_STATUS = "Status",
+    APPROVAL_JOB_ACKS = "Approvals",
+    APPROVAL_JOB_CLOSED_REASON = "Closure Reason"
 }

package/dist/enums/SystemAuditEntity.enum.js

@@ -11,6 +11,7 @@ var SystemAuditEntity = /* @__PURE__ */ ((SystemAuditEntity2) => {
   SystemAuditEntity2["CONNECTION"] = "Connection";
   SystemAuditEntity2["RELEASE_TRAIN"] = "Release Train";
   SystemAuditEntity2["CLUSTER"] = "Cluster";
+  SystemAuditEntity2["APPROVAL_JOB"] = "Approval Request";
   return SystemAuditEntity2;
 })(SystemAuditEntity || {});
 var SystemAuditEntityAttribute = /* @__PURE__ */ ((SystemAuditEntityAttribute2) => {
@@ -65,6 +66,9 @@ var SystemAuditEntityAttribute = /* @__PURE__ */ ((SystemAuditEntityAttribute2)
   SystemAuditEntityAttribute2["CLUSTER_IP_ALLOWLIST"] = "IP Allowlist";
   SystemAuditEntityAttribute2["CLUSTER_ENV_VAR_OVERRIDE"] = "Environment Variable Override";
   SystemAuditEntityAttribute2["CLUSTER_APPLIED_PLAN_MODIFICATION"] = "Plan Modification";
+  SystemAuditEntityAttribute2["APPROVAL_JOB_STATUS"] = "Status";
+  SystemAuditEntityAttribute2["APPROVAL_JOB_ACKS"] = "Approvals";
+  SystemAuditEntityAttribute2["APPROVAL_JOB_CLOSED_REASON"] = "Closure Reason";
   return SystemAuditEntityAttribute2;
 })(SystemAuditEntityAttribute || {});
 export {

package/dist/enums/SystemAuditEntity.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/SystemAuditEntity.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum SystemAuditEntity {\n  GENERATION = 'Generation',\n  CHANNEL = 'Channel',\n  CLUSTER_PLAN = 'Cluster Plan',\n  CLUSTER_PLAN_TYPE = 'Cluster Plan Type',\n  ALPHA_FEATURE = 'Alpha Feature',\n  SALES_PLAN = 'Sales Plan',\n  CLUSTER_PLAN_MODIFICATION = 'Cluster Plan Modification',\n  CLUSTER_BULK_OPERATION = 'Cluster Bulk Operation',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n  CONNECTION = 'Connection',\n  RELEASE_TRAIN = 'Release Train',\n  CLUSTER = 'Cluster',\n}\n\n/**\n * Display strings for audited attributes. The `entity` + `entityAttribute` pair\n * is always the key, so duplicate display values across entities (e.g. several\n * `*_NAME = 'Name'`) are intentional and safe. `*_STATUS = 'Status'` is the\n * lifecycle attribute for the modification/operation entities; its from/to carry\n * the raw lifecycle state.\n */\nexport enum SystemAuditEntityAttribute {\n  // Generation\n  GENERATION_NAME = 'Name',\n  GENERATION_VERSIONS = 'Versions',\n  GENERATION_UPGRADEABLE_FROM = 'Upgradeable From',\n  GENERATION_UPGRADEABLE_TO = 'Upgradeable To',\n  GENERATION_SUPPORTED_UNTIL = 'Supported Until',\n  GENERATION_BESPOKE = 'Bespoke',\n  // Channel\n  CHANNEL_NAME = 'Name',\n  CHANNEL_DESCRIPTION = 'Description',\n  CHANNEL_DEFAULT_GENERATION = 'Default Generation',\n  CHANNEL_ALLOWED_GENERATIONS = 'Allowed Generations',\n  CHANNEL_IS_DEFAULT = 'Is Default',\n  // ClusterPlan\n  CLUSTER_PLAN_MIGRATABLE_FROM = 'Migratable From',\n  CLUSTER_PLAN_PERFORMANCE_EXPECTATIONS = 'Performance Expectations',\n  // ClusterPlanType\n  CLUSTER_PLAN_TYPE_NAME = 'Name',\n  CLUSTER_PLAN_TYPE_DESCRIPTION = 'Description',\n  CLUSTER_PLAN_TYPE_DEVELOPMENT = 'Development',\n  CLUSTER_PLAN_TYPE_CATEGORY = 'Category',\n  CLUSTER_PLAN_TYPE_AVAILABILITY_CLASS = 'Availability Class',\n  CLUSTER_PLAN_TYPE_ACTIVE_PLAN = 'Active Plan',\n  CLUSTER_PLAN_TYPE_LIMITS = 'Limits',\n  // AlphaFeature (EarlyAccessFeature)\n  ALPHA_FEATURE_NAME = 'Name',\n  ALPHA_FEATURE_AVAILABLE_IN = 'Available In',\n  ALPHA_FEATURE_DOCUMENTATION_LINK = 'Documentation Link',\n  ALPHA_FEATURE_DESCRIPTION = 'Description',\n  ALPHA_FEATURE_ACTION_LABEL = 'Action Label',\n  ALPHA_FEATURE_ACTION_URL = 'Action Url',\n  ALPHA_FEATURE_CLICKWRAP = 'Clickwrap',\n  ALPHA_FEATURE_SALES_PLAN_TYPE_VISIBILITIES = 'Sales Plan Type Visibilities',\n  // SalesPlan\n  SALES_PLAN_NAME = 'Name',\n  SALES_PLAN_METADATA = 'Metadata',\n  SALES_PLAN_CLUSTER_PLAN_CONFIGURATION = 'Cluster Plan Configuration',\n  SALES_PLAN_VERSION = 'Version',\n  // ClusterPlanModification\n  CLUSTER_PLAN_MODIFICATION_NAME = 'Name',\n  CLUSTER_PLAN_MODIFICATION_DESCRIPTION = 'Description',\n  CLUSTER_PLAN_MODIFICATION_CONFIG = 'Config',\n  CLUSTER_PLAN_MODIFICATION_CLUSTER_PLANS = 'Cluster Plans',\n  CLUSTER_PLAN_MODIFICATION_URL = 'Url',\n  CLUSTER_PLAN_MODIFICATION_STATUS = 'Status',\n  // ClusterBulkOperation\n  CLUSTER_BULK_OPERATION_CLUSTERS = 'Clusters',\n  CLUSTER_BULK_OPERATION_STATUS = 'Status',\n  // ClusterModification (parent + config)\n  CLUSTER_MODIFICATION_DESCRIPTION = 'Description',\n  CLUSTER_MODIFICATION_URL = 'Url',\n  CLUSTER_MODIFICATION_PLAN_MODIFICATIONS = 'Plan Modifications',\n  CLUSTER_MODIFICATION_EXPIRES_AT = 'Expires At',\n  CLUSTER_MODIFICATION_STATUS = 'Status',\n  // Connection\n  CONNECTION_NAME = 'Name',\n  CONNECTION_STRATEGY = 'Strategy',\n  CONNECTION_CONFIGURATION = 'Configuration',\n  // Cluster (internal-only lifecycle actions with no customer-facing audit)\n  CLUSTER_IP_ALLOWLIST = 'IP Allowlist',\n  CLUSTER_ENV_VAR_OVERRIDE = 'Environment Variable Override',\n  // A cluster plan modification that was applied to (and updated) this cluster.\n  CLUSTER_APPLIED_PLAN_MODIFICATION = 'Plan Modification',\n}\n"],
-  "mappings": "AAOO,IAAK,oBAAL,kBAAKA,uBAAL;AACL,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,aAAU;AACV,EAAAA,mBAAA,kBAAe;AACf,EAAAA,mBAAA,uBAAoB;AACpB,EAAAA,mBAAA,mBAAgB;AAChB,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,+BAA4B;AAC5B,EAAAA,mBAAA,4BAAyB;AACzB,EAAAA,mBAAA,0BAAuB;AACvB,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,mBAAgB;AAChB,EAAAA,mBAAA,aAAU;AAZA,SAAAA;AAAA,GAAA;AAsBL,IAAK,6BAAL,kBAAKC,gCAAL;AAEL,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,iCAA8B;AAC9B,EAAAA,4BAAA,+BAA4B;AAC5B,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,wBAAqB;AAErB,EAAAA,4BAAA,kBAAe;AACf,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,iCAA8B;AAC9B,EAAAA,4BAAA,wBAAqB;AAErB,EAAAA,4BAAA,kCAA+B;AAC/B,EAAAA,4BAAA,2CAAwC;AAExC,EAAAA,4BAAA,4BAAyB;AACzB,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,0CAAuC;AACvC,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,wBAAqB;AACrB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,+BAA4B;AAC5B,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,8BAA2B;AAC3B,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,gDAA6C;AAE7C,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,2CAAwC;AACxC,EAAAA,4BAAA,wBAAqB;AAErB,EAAAA,4BAAA,oCAAiC;AACjC,EAAAA,4BAAA,2CAAwC;AACxC,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,6CAA0C;AAC1C,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,sCAAmC;AAEnC,EAAAA,4BAAA,qCAAkC;AAClC,EAAAA,4BAAA,mCAAgC;AAEhC,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,8BAA2B;AAC3B,EAAAA,4BAAA,6CAA0C;AAC1C,EAAAA,4BAAA,qCAAkC;AAClC,EAAAA,4BAAA,iCAA8B;AAE9B,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,0BAAuB;AACvB,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,uCAAoC;AA/D1B,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum SystemAuditEntity {\n  GENERATION = 'Generation',\n  CHANNEL = 'Channel',\n  CLUSTER_PLAN = 'Cluster Plan',\n  CLUSTER_PLAN_TYPE = 'Cluster Plan Type',\n  ALPHA_FEATURE = 'Alpha Feature',\n  SALES_PLAN = 'Sales Plan',\n  CLUSTER_PLAN_MODIFICATION = 'Cluster Plan Modification',\n  CLUSTER_BULK_OPERATION = 'Cluster Bulk Operation',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n  CONNECTION = 'Connection',\n  RELEASE_TRAIN = 'Release Train',\n  CLUSTER = 'Cluster',\n  APPROVAL_JOB = 'Approval Request',\n}\n\n/**\n * Display strings for audited attributes. The `entity` + `entityAttribute` pair\n * is always the key, so duplicate display values across entities (e.g. several\n * `*_NAME = 'Name'`) are intentional and safe. `*_STATUS = 'Status'` is the\n * lifecycle attribute for the modification/operation entities; its from/to carry\n * the raw lifecycle state.\n */\nexport enum SystemAuditEntityAttribute {\n  // Generation\n  GENERATION_NAME = 'Name',\n  GENERATION_VERSIONS = 'Versions',\n  GENERATION_UPGRADEABLE_FROM = 'Upgradeable From',\n  GENERATION_UPGRADEABLE_TO = 'Upgradeable To',\n  GENERATION_SUPPORTED_UNTIL = 'Supported Until',\n  GENERATION_BESPOKE = 'Bespoke',\n  // Channel\n  CHANNEL_NAME = 'Name',\n  CHANNEL_DESCRIPTION = 'Description',\n  CHANNEL_DEFAULT_GENERATION = 'Default Generation',\n  CHANNEL_ALLOWED_GENERATIONS = 'Allowed Generations',\n  CHANNEL_IS_DEFAULT = 'Is Default',\n  // ClusterPlan\n  CLUSTER_PLAN_MIGRATABLE_FROM = 'Migratable From',\n  CLUSTER_PLAN_PERFORMANCE_EXPECTATIONS = 'Performance Expectations',\n  // ClusterPlanType\n  CLUSTER_PLAN_TYPE_NAME = 'Name',\n  CLUSTER_PLAN_TYPE_DESCRIPTION = 'Description',\n  CLUSTER_PLAN_TYPE_DEVELOPMENT = 'Development',\n  CLUSTER_PLAN_TYPE_CATEGORY = 'Category',\n  CLUSTER_PLAN_TYPE_AVAILABILITY_CLASS = 'Availability Class',\n  CLUSTER_PLAN_TYPE_ACTIVE_PLAN = 'Active Plan',\n  CLUSTER_PLAN_TYPE_LIMITS = 'Limits',\n  // AlphaFeature (EarlyAccessFeature)\n  ALPHA_FEATURE_NAME = 'Name',\n  ALPHA_FEATURE_AVAILABLE_IN = 'Available In',\n  ALPHA_FEATURE_DOCUMENTATION_LINK = 'Documentation Link',\n  ALPHA_FEATURE_DESCRIPTION = 'Description',\n  ALPHA_FEATURE_ACTION_LABEL = 'Action Label',\n  ALPHA_FEATURE_ACTION_URL = 'Action Url',\n  ALPHA_FEATURE_CLICKWRAP = 'Clickwrap',\n  ALPHA_FEATURE_SALES_PLAN_TYPE_VISIBILITIES = 'Sales Plan Type Visibilities',\n  // SalesPlan\n  SALES_PLAN_NAME = 'Name',\n  SALES_PLAN_METADATA = 'Metadata',\n  SALES_PLAN_CLUSTER_PLAN_CONFIGURATION = 'Cluster Plan Configuration',\n  SALES_PLAN_VERSION = 'Version',\n  // ClusterPlanModification\n  CLUSTER_PLAN_MODIFICATION_NAME = 'Name',\n  CLUSTER_PLAN_MODIFICATION_DESCRIPTION = 'Description',\n  CLUSTER_PLAN_MODIFICATION_CONFIG = 'Config',\n  CLUSTER_PLAN_MODIFICATION_CLUSTER_PLANS = 'Cluster Plans',\n  CLUSTER_PLAN_MODIFICATION_URL = 'Url',\n  CLUSTER_PLAN_MODIFICATION_STATUS = 'Status',\n  // ClusterBulkOperation\n  CLUSTER_BULK_OPERATION_CLUSTERS = 'Clusters',\n  CLUSTER_BULK_OPERATION_STATUS = 'Status',\n  // ClusterModification (parent + config)\n  CLUSTER_MODIFICATION_DESCRIPTION = 'Description',\n  CLUSTER_MODIFICATION_URL = 'Url',\n  CLUSTER_MODIFICATION_PLAN_MODIFICATIONS = 'Plan Modifications',\n  CLUSTER_MODIFICATION_EXPIRES_AT = 'Expires At',\n  CLUSTER_MODIFICATION_STATUS = 'Status',\n  // Connection\n  CONNECTION_NAME = 'Name',\n  CONNECTION_STRATEGY = 'Strategy',\n  CONNECTION_CONFIGURATION = 'Configuration',\n  // Cluster (internal-only lifecycle actions with no customer-facing audit)\n  CLUSTER_IP_ALLOWLIST = 'IP Allowlist',\n  CLUSTER_ENV_VAR_OVERRIDE = 'Environment Variable Override',\n  // A cluster plan modification that was applied to (and updated) this cluster.\n  CLUSTER_APPLIED_PLAN_MODIFICATION = 'Plan Modification',\n  // ApprovalJob. Every change of state of a four-eyes request is audited, not\n  // only the run: the value of the trail is the answer to \"who decided what,\n  // and when\", and a record of the outcome alone cannot give it.\n  APPROVAL_JOB_STATUS = 'Status',\n  APPROVAL_JOB_ACKS = 'Approvals',\n  APPROVAL_JOB_CLOSED_REASON = 'Closure Reason',\n}\n"],
+  "mappings": "AAOO,IAAK,oBAAL,kBAAKA,uBAAL;AACL,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,aAAU;AACV,EAAAA,mBAAA,kBAAe;AACf,EAAAA,mBAAA,uBAAoB;AACpB,EAAAA,mBAAA,mBAAgB;AAChB,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,+BAA4B;AAC5B,EAAAA,mBAAA,4BAAyB;AACzB,EAAAA,mBAAA,0BAAuB;AACvB,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,mBAAgB;AAChB,EAAAA,mBAAA,aAAU;AACV,EAAAA,mBAAA,kBAAe;AAbL,SAAAA;AAAA,GAAA;AAuBL,IAAK,6BAAL,kBAAKC,gCAAL;AAEL,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,iCAA8B;AAC9B,EAAAA,4BAAA,+BAA4B;AAC5B,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,wBAAqB;AAErB,EAAAA,4BAAA,kBAAe;AACf,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,iCAA8B;AAC9B,EAAAA,4BAAA,wBAAqB;AAErB,EAAAA,4BAAA,kCAA+B;AAC/B,EAAAA,4BAAA,2CAAwC;AAExC,EAAAA,4BAAA,4BAAyB;AACzB,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,0CAAuC;AACvC,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,wBAAqB;AACrB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,+BAA4B;AAC5B,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,8BAA2B;AAC3B,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,gDAA6C;AAE7C,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,2CAAwC;AACxC,EAAAA,4BAAA,wBAAqB;AAErB,EAAAA,4BAAA,oCAAiC;AACjC,EAAAA,4BAAA,2CAAwC;AACxC,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,6CAA0C;AAC1C,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,sCAAmC;AAEnC,EAAAA,4BAAA,qCAAkC;AAClC,EAAAA,4BAAA,mCAAgC;AAEhC,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,8BAA2B;AAC3B,EAAAA,4BAAA,6CAA0C;AAC1C,EAAAA,4BAAA,qCAAkC;AAClC,EAAAA,4BAAA,iCAA8B;AAE9B,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,0BAAuB;AACvB,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,uCAAoC;AAIpC,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,gCAA6B;AArEnB,SAAAA;AAAA,GAAA;",
   "names": ["SystemAuditEntity", "SystemAuditEntityAttribute"]
 }

package/dist/index.d.ts

@@ -1,20 +1,27 @@
 export { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js';
 export { isSupportedFailoverRegionPair, SUPPORTED_FAILOVER_REGION_PAIRS, } from './constants/failoverRegionPairs.const.js';
 export type { Stage } from './constants/misc.const.js';
-export { CONSOLE_API_USER_ID, FIRSTNAME_LASTNAME_MAX_LENGTH, HOTBACKUP_MIN_CREATE_PERIOD, MAX_HARDWARE_PACKAGE_COUNT, MAX_LENGTH_CLUSTER_NAME, MINIMUM_EYEPAIRS, NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS, SECRETS_MAX_LENGTH, STARTING_PRICE_PER_MONTH_IN_EURO, TEMPORARY_CLUSTER_NAME, } from './constants/misc.const.js';
+export { CAMUNDA_CLAIMS_NAMESPACE, CONSOLE_API_USER_ID, FIRSTNAME_LASTNAME_MAX_LENGTH, HOTBACKUP_MIN_CREATE_PERIOD, MAX_HARDWARE_PACKAGE_COUNT, MAX_LENGTH_CLUSTER_NAME, MINIMUM_EYEPAIRS, NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS, SECRETS_MAX_LENGTH, STARTING_PRICE_PER_MONTH_IN_EURO, TEMPORARY_CLUSTER_NAME, UNKNOWN_ACTOR_EMAIL, } from './constants/misc.const.js';
 export { getGatewayPropertyHint, getGatewayPropertyPath, isAffectedByStreamlinedDeployment, isPre89AffectedPath, PRE89_AFFECTED_PATHS, PRE89_AFFECTED_PROPERTY_PREFIXES, PRE89_GATEWAY_PROPERTY_PATHS, PRE89_GATEWAY_RESOURCE_PREFIXES, } from './constants/pre89EnvVarMapping.const.js';
 export { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js';
 export { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js';
 export type { TrialExtensionSurveyAnswer, TrialExtensionSurveyQuestion, } from './constants/trialExtensionSurvey.const.js';
 export { TRIAL_EXTENSION_SURVEY_QUESTIONS } from './constants/trialExtensionSurvey.const.js';
+export { V2_BODY_IDS_MAX, V2_FILTER_IDS_MAX, V2_MAX_PAGE_LIMIT, } from './constants/v2-list.const.js';
 export { ADMIN_APP_RENAME_MIN_VERSION, APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION, APP_INTEGRATIONS_89_STREAM_MINOR, APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION, APP_INTEGRATIONS_MIN_VERSION, AUDIT_LOG_TAB_MIN_VERSION, AUTHORIZATION_TOGGLE_MIN_VERSION, AWS_ONLY_GENERATION_MIN_VERSION, BUSINESS_ID_UNIQUENESS_MIN_VERSION, BYOIDP_MIN_VERSION, CLUSTER_SECRETS_LABEL_MIN_VERSION, CLUSTER_STATISTICS_CONFIG_MIN_VERSION, CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION, CONNECTOR_SECRET_SYNC_MIN_VERSION, CONNECTORS_MANAGEMENT_LINK_MIN_VERSION, ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION, ENFORCE_GROUPS_TOGGLE_MIN_VERSION, GATEWAY_SPEC_8_9_MIN_VERSION, HOT_BACKUP_MIN_VERSION, IDENTITY_AUTHORIZATION_MIN_VERSION, IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION, IDENTITY_MANAGEMENT_MIN_VERSION, INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION, JOB_DASHBOARD_MIN_VERSION, LINE_8_9_MIN_VERSION, LINE_8_10_MIN_VERSION, MCP_MIN_VERSION, MULTI_TENANCY_TOGGLE_MIN_VERSION, NEW_CLUSTER_ROLES_MIN_VERSION, OPTIMIZE_DEFAULT_ON_MIN_VERSION, OPTIMIZE_FILTERING_MIN_VERSION, OPTIONAL_TELEMETRY_MIN_VERSION, RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION, REST_API_URL_TRANSFORM_MIN_VERSION, REST_API_V2_MIN_VERSION, RESUME_ALPHA_MIN_VERSION, SECRET_SOURCE_MIN_VERSION, SECRETS_FILTER_MODE_8_6_MIN_VERSION, SECRETS_FILTER_MODE_8_7_MIN_VERSION, SECRETS_FILTER_MODE_8_8_MIN_VERSION, SECRETS_FILTER_MODE_8_9_MIN_VERSION, SECRETS_FILTER_MODE_8_10_MIN_VERSION, SESSION_CONFIG_MIN_VERSION, SWAGGER_MIN_VERSION, SWAGGER_URL_8_9_MIN_VERSION, TASKLIST_MODE_TOGGLE_MIN_VERSION, TASKLIST_UPGRADE_BANNER_MIN_VERSION, TASKLIST_V2_AUTO_ENABLE_FROM_MINOR, TASKLIST_V2_AUTO_ENABLE_TO_MINOR, TASKLIST_V2_DEFAULT_ON_MIN_VERSION, TASKLIST_V2_SETTING_MAX_VERSION, TASKLIST_V2_UPGRADE_MIN_VERSION, TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION, ZEEBE_REST_URL_MIN_VERSION, } from './constants/version-gates.const.js';
+export type { ApprovalActorView, ApprovalDecision, ApprovalDenialCode, } from './approvals/policy.js';
+export { canAcknowledge, canCreate, canExecute, canReject, canWithdraw, effectiveStatus, isExpired, isSameActorEmail, remainingAcks, } from './approvals/policy.js';
 export type { ALERT_SUBSCRIPTION_REPORT_TYPES, ALERT_SUBSCRIPTION_TYPES, AlertSubscriptionDto, AlertSubscriptionEntryDto, AlertSubscriptionWebhookAuth, CheckFailedReason, } from './dtos/AlertSubscription.dto.js';
 export { FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS, HMAC_HEADER_POSITION, HMAC_SUPPORTED_ALGORITHM, } from './dtos/AlertSubscription.dto.js';
+export type { ApprovalAck, ApprovalActor, ApprovalExecutionMode, ApprovalJobDto, ApprovalJobStatus, ApprovalUseCaseDto, } from './dtos/ApprovalJob.dto.js';
+export { APPROVAL_JOB_STATUSES } from './dtos/ApprovalJob.dto.js';
 export type { AuditDto } from './dtos/Audit.dto.js';
 export type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js';
 export type { BackupDto } from './dtos/Backup.dto.js';
 export type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js';
 export type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js';
+export type { ClusterCreationDefaultField, ClusterCreationDefaultKey, ClusterCreationDefaults, } from './dtos/ClusterCreationDefaults.dto.js';
+export { CLUSTER_CREATION_DEFAULT_FIELDS } from './dtos/ClusterCreationDefaults.dto.js';
 export type { ClusterDeferredSpecChange, DeferredSpecChangeType, } from './dtos/ClusterDeferredSpecChange.dto.js';
 export type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js';
 export type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js';
@@ -22,11 +29,11 @@ export type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js';
 export type { ClusterSpecChange, ClusterSpecChangeActor, ClusterSpecHistory, } from './dtos/ClusterSpecHistory.dto.js';
 export type { CommonClusterDto, ExternalIdpConfig, OptimizeFilteringConfig, OptimizeFilteringIncludeExclude, OptimizeFilteringPatch, SecretsFilterMode, } from './dtos/CommonCluster.dto.js';
 export type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js';
-export type { ClusterByClientV2Dto, ClusterDatacenterOptionV2Dto, ClusterDetailV2Dto, ClusterFacetsV2Dto, ClusterListItemV2Dto, ClusterParameterOptionV2Dto, ClusterParametersV2Dto, ControlResolvedPermissions, ControlSessionDto, ControlSessionUser, CursorPage, CursorParams, ListClustersV2Params, ListOrganizationsV2Params, ListOrgMembersV2Params, OrgDetailV2Dto, OrgListItemV2Dto, OrgMemberV2Dto, OrgSummaryV2Dto, } from './dtos/ControlV2.dto.js';
+export type { ClusterActivityBucket, ClusterActivityTile, ClusterActivityV2Dto, ClusterActivityV2Response, ClusterByClientV2Dto, ClusterDatacenterOptionV2Dto, ClusterDetailV2Dto, ClusterFacetsV2Dto, ClusterListItemV2Dto, ClusterParameterOptionV2Dto, ClusterParametersV2Dto, ControlResolvedPermissions, ControlSessionDto, ControlSessionUser, CursorPage, CursorParams, ListClustersV2Params, ListOrganizationsV2Params, ListOrgMembersV2Params, OrgDetailV2Dto, OrgListItemV2Dto, OrgMemberV2Dto, OrgSummaryV2Dto, } from './dtos/ControlV2.dto.js';
 export type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js';
 export type { CamundaWebApp, CamundaWebAppWithZeebe, ExternalClusterDto, ExternalOrganizationDto, } from './dtos/ExternalWebapp.dto.js';
 export type { Features } from './dtos/FeatureFlags.dto.js';
-export { type GenerationDto, type GenerationWithClusterCountDto, sortGenerationBySemverOfZeebe, type UpgradableGenerationsDto, } from './dtos/Generations.dto.js';
+export { compareGenerationNamesNewestFirst, type GenerationDto, type GenerationWithClusterCountDto, sortGenerationBySemverOfZeebe, type UpgradableGenerationsDto, } from './dtos/Generations.dto.js';
 export type { Hdp } from './dtos/Hdp.dto.js';
 export type { K8sConfig, K8sConfigLegacyFormat, K8sContext, K8sContextDto, } from './dtos/K8sContext.dto.js';
 export type { MetaDto } from './dtos/Meta.dto.js';
@@ -45,7 +52,7 @@ export type { SystemAuditDto } from './dtos/SystemAudit.dto.js';
 export type { UsageAlertDto } from './dtos/UsageAlert.dto.js';
 export { UsageAlertInitValues, UsageAlertMetric, UsageAlertThresholdLimits, } from './dtos/UsageAlert.dto.js';
 export type { UserMetaDataDto } from './dtos/UserMetaData.dto.js';
-export { type AndNode, CLUSTER_DEFAULT_SEARCH_FIELDS, CLUSTER_SEARCH_FIELDS, type CompileContext, type CompiledQuery, compileQuery, type FieldBinding, findSearchField, isLuceneQueryError, LuceneQueryError, likeArgument, type NotNode, ORG_DEFAULT_SEARCH_FIELDS, ORGANIZATION_SEARCH_FIELDS, type OrNode, parseLuceneQuery, type QueryNode, type RangeNode, type SearchFieldCapability, type SearchFieldSpec, type SearchFieldType, type SearchTermOperator, type TermNode, } from './search/index.js';
+export { type AndNode, CLUSTER_DEFAULT_SEARCH_FIELDS, CLUSTER_SEARCH_FIELDS, type CompileContext, type CompiledQuery, compileQuery, type FieldBinding, findSearchField, idSetPredicate, isLuceneQueryError, joinIdSet, LuceneQueryError, likeArgument, type NotNode, ORG_DEFAULT_SEARCH_FIELDS, ORGANIZATION_SEARCH_FIELDS, type OrNode, parseLuceneQuery, type QueryNode, type RangeNode, type SearchFieldCapability, type SearchFieldSpec, type SearchFieldType, type SearchTermOperator, type TermNode, } from './search/index.js';
 export { AlertSubscriptionReportType, AlertSubscriptionType, } from './enums/AlertSubscription.enum.js';
 export { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js';
 export { AuditService } from './enums/AuditService.enum.js';
@@ -85,7 +92,7 @@ export type { ClusterBulkOperationAck, ClusterBulkOperationClusterDto, ClusterBu
 export type { ClusterModificationConfigDto, ClusterModificationDto, } from './types/ClusterModification.type.js';
 export { CLUSTER_PLAN_FIELDS, type ClusterPlanFieldSpec, type ClusterPlanFieldTree, isClusterPlanFieldSpec, } from './types/ClusterPlanFields.type.js';
 export type { ClusterPlanModificationAck, ClusterPlanModificationConfig, ClusterPlanModificationDto, } from './types/ClusterPlanModification.type.js';
-export { ClusterPlanTypeAvailabilityClass, sortByAvailabilityClasses, } from './types/ClusterPlanTypeAvailabilityClass.type.js';
+export { ClusterPlanTypeAvailabilityClass, hasNoAvailabilityClass, sortByAvailabilityClasses, } from './types/ClusterPlanTypeAvailabilityClass.type.js';
 export { ClusterPlanTypeCategory, hasAvailabilityClass, sortByClusterPlanTypeCategory, } from './types/ClusterPlanTypeCategory.type.js';
 export type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js';
 export type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js';
@@ -142,7 +149,7 @@ export { deriveSecondaryStorageStatus, type SecondaryStorageStatus, } from './ut
 export { allSettledResultsCounts, getFulfilledPromises, getRejectedPromises, getSettledSummary, } from './utils/settledPromises.util.js';
 export { isValidAwsArn, isValidCIDR, isValidCIDRList, isValidClientName, isValidHostname, isValidPrivateLinkRegion, normalizeCIDRList, } from './utils/string-validation.utils.js';
 export { extractCamundaUserEmail, guessName, isCamundaUserId, } from './utils/user.utils.js';
-export { checkVersion, isAppIntegrationsVersionSupported, isGenerationResumable, isSecretsFilterModeConfigurable, stripSecfixPostfix, VersionCheckOperator, } from './utils/versionCheck.utils.js';
+export { checkVersion, isAppIntegrationsVersionSupported, isGenerationResumable, isSecretsFilterModeConfigurable, isValidGenerationImage, normalizeGenerationVersion, stripSecfixPostfix, VersionCheckOperator, } from './utils/versionCheck.utils.js';
 export { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js';
 export type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js';
-export { augmentCamundiPermissions, getApplicableRolesForEmployee, isManager, } from './utils/camundiPermissionAugmenter.utils.js';
+export { augmentCamundiPermissions, getApplicableRolesForEmployee, HIBOB_CACHE_KEY, HIBOB_CACHE_NAMESPACE, isManager, } from './utils/camundiPermissionAugmenter.utils.js';

package/dist/index.js

@@ -4,6 +4,7 @@ import {
   SUPPORTED_FAILOVER_REGION_PAIRS
 } from "./constants/failoverRegionPairs.const.js";
 import {
+  CAMUNDA_CLAIMS_NAMESPACE,
   CONSOLE_API_USER_ID,
   FIRSTNAME_LASTNAME_MAX_LENGTH,
   HOTBACKUP_MIN_CREATE_PERIOD,
@@ -13,7 +14,8 @@ import {
   NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,
   SECRETS_MAX_LENGTH,
   STARTING_PRICE_PER_MONTH_IN_EURO,
-  TEMPORARY_CLUSTER_NAME
+  TEMPORARY_CLUSTER_NAME,
+  UNKNOWN_ACTOR_EMAIL
 } from "./constants/misc.const.js";
 import {
   getGatewayPropertyHint,
@@ -28,6 +30,11 @@ import {
 import { PRIVATE_LINK_REGIONS } from "./constants/privateLinkRegions.const.js";
 import { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from "./constants/secureConnectivity.const.js";
 import { TRIAL_EXTENSION_SURVEY_QUESTIONS } from "./constants/trialExtensionSurvey.const.js";
+import {
+  V2_BODY_IDS_MAX,
+  V2_FILTER_IDS_MAX,
+  V2_MAX_PAGE_LIMIT
+} from "./constants/v2-list.const.js";
 import {
   ADMIN_APP_RENAME_MIN_VERSION,
   APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,
@@ -84,12 +91,26 @@ import {
   TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION,
   ZEEBE_REST_URL_MIN_VERSION
 } from "./constants/version-gates.const.js";
+import {
+  canAcknowledge,
+  canCreate,
+  canExecute,
+  canReject,
+  canWithdraw,
+  effectiveStatus,
+  isExpired,
+  isSameActorEmail,
+  remainingAcks
+} from "./approvals/policy.js";
 import {
   FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,
   HMAC_HEADER_POSITION,
   HMAC_SUPPORTED_ALGORITHM
 } from "./dtos/AlertSubscription.dto.js";
+import { APPROVAL_JOB_STATUSES } from "./dtos/ApprovalJob.dto.js";
+import { CLUSTER_CREATION_DEFAULT_FIELDS } from "./dtos/ClusterCreationDefaults.dto.js";
 import {
+  compareGenerationNamesNewestFirst,
   sortGenerationBySemverOfZeebe
 } from "./dtos/Generations.dto.js";
 import {
@@ -118,7 +139,9 @@ import {
   CLUSTER_SEARCH_FIELDS,
   compileQuery,
   findSearchField,
+  idSetPredicate,
   isLuceneQueryError,
+  joinIdSet,
   LuceneQueryError,
   likeArgument,
   ORG_DEFAULT_SEARCH_FIELDS,
@@ -193,6 +216,7 @@ import {
 } from "./types/ClusterPlanFields.type.js";
 import {
   ClusterPlanTypeAvailabilityClass,
+  hasNoAvailabilityClass,
   sortByAvailabilityClasses
 } from "./types/ClusterPlanTypeAvailabilityClass.type.js";
 import {
@@ -311,6 +335,8 @@ import {
   isAppIntegrationsVersionSupported,
   isGenerationResumable,
   isSecretsFilterModeConfigurable,
+  isValidGenerationImage,
+  normalizeGenerationVersion,
   stripSecfixPostfix,
   VersionCheckOperator
 } from "./utils/versionCheck.utils.js";
@@ -318,11 +344,14 @@ import { default as default2 } from "./config/camundi-permission-rules.js";
 import {
   augmentCamundiPermissions,
   getApplicableRolesForEmployee,
+  HIBOB_CACHE_KEY,
+  HIBOB_CACHE_NAMESPACE,
   isManager
 } from "./utils/camundiPermissionAugmenter.utils.js";
 export {
   ADMIN_APP_RENAME_MIN_VERSION,
   ALLOWED_CAMUNDA_LABELS,
+  APPROVAL_JOB_STATUSES,
   APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,
   APP_INTEGRATIONS_89_STREAM_MINOR,
   APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,
@@ -345,8 +374,10 @@ export {
   BUSINESS_ID_UNIQUENESS_MIN_VERSION,
   BYOIDP_MIN_VERSION,
   BackupStatus,
+  CAMUNDA_CLAIMS_NAMESPACE,
   default2 as CAMUNDI_PERMISSION_RULES,
   CLOUD_PROVIDER_ORDER,
+  CLUSTER_CREATION_DEFAULT_FIELDS,
   CLUSTER_DEFAULT_SEARCH_FIELDS,
   CLUSTER_PLAN_FIELDS,
   CLUSTER_SEARCH_FIELDS,
@@ -378,6 +409,8 @@ export {
   FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,
   FeedbackType,
   GATEWAY_SPEC_8_9_MIN_VERSION,
+  HIBOB_CACHE_KEY,
+  HIBOB_CACHE_NAMESPACE,
   HMAC_HEADER_POSITION,
   HMAC_SUPPORTED_ALGORITHM,
   HOTBACKUP_MIN_CREATE_PERIOD,
@@ -474,11 +507,15 @@ export {
   TEMPORARY_CLUSTER_NAME,
   TRIAL_EXTENSION_SURVEY_QUESTIONS,
   Telemetry,
+  UNKNOWN_ACTOR_EMAIL,
   UnassignableOrganizationRole,
   UsageAlertInitValues,
   UsageAlertMetric,
   UsageAlertThresholdLimits,
   UserMetadataEvent,
+  V2_BODY_IDS_MAX,
+  V2_FILTER_IDS_MAX,
+  V2_MAX_PAGE_LIMIT,
   VALID_LICENSING_MODELS,
   VersionCheckOperator,
   WEEK,
@@ -489,7 +526,13 @@ export {
   allSalesPlanLimits,
   allSettledResultsCounts,
   augmentCamundiPermissions,
+  canAcknowledge,
+  canCreate,
+  canExecute,
+  canReject,
+  canWithdraw,
   checkVersion,
+  compareGenerationNamesNewestFirst,
   compileQuery,
   computeOrgStartDate,
   consoleUserFeaturesFromPermissions,
@@ -500,6 +543,7 @@ export {
   deriveFailoverKeyPolicyPrincipals,
   deriveSecondaryStorageStatus,
   diffInWholeMonths,
+  effectiveStatus,
   enterpriseConnectionMetadataToOrganizationAssignments,
   expandRolesToPermissions,
   extractCamundaUserEmail,
@@ -521,6 +565,8 @@ export {
   getUserPermissionsForOrg,
   guessName,
   hasAvailabilityClass,
+  hasNoAvailabilityClass,
+  idSetPredicate,
   isActivitySleepEligible,
   isAffectedByStreamlinedDeployment,
   isAppIntegrationsVersionSupported,
@@ -531,12 +577,14 @@ export {
   isClusterPlanFieldSpec,
   isClusterTagEligibleForSleepCron,
   isEncryptionStatus,
+  isExpired,
   isGenerationResumable,
   isIsBulkClusterGenerationUpdateIten,
   isLuceneQueryError,
   isManager,
   isPre89AffectedPath,
   isSalesPlanEligibleForSleepCron,
+  isSameActorEmail,
   isSecretsFilterModeConfigurable,
   isSleepCronEligible,
   isSupportedFailoverRegionPair,
@@ -544,16 +592,20 @@ export {
   isValidCIDR,
   isValidCIDRList,
   isValidClientName,
+  isValidGenerationImage,
   isValidHostname,
   isValidPrivateLinkRegion,
+  joinIdSet,
   likeArgument,
   normalizeCIDRList,
+  normalizeGenerationVersion,
   organizationAssignmentsToEnterpriseConnectionMetadata,
   parseEnvVars,
   parseKmsArn,
   parseLuceneQuery,
   passwordPolicyCheck,
   peakWithinTerm,
+  remainingAcks,
   serializeEnvVars,
   sortByAvailabilityClasses,
   sortByClusterPlanTypeCategory,