@camunda/ccma-shared-types 1.1.0 → 2.0.0

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/index.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Constants (runtime values)\n// ============================================================================\n\nexport { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js'\nexport {\n  isSupportedFailoverRegionPair,\n  SUPPORTED_FAILOVER_REGION_PAIRS,\n} from './constants/failoverRegionPairs.const.js'\nexport type { Stage } from './constants/misc.const.js'\nexport {\n  CONSOLE_API_USER_ID,\n  FIRSTNAME_LASTNAME_MAX_LENGTH,\n  HOTBACKUP_MIN_CREATE_PERIOD,\n  MAX_HARDWARE_PACKAGE_COUNT,\n  MAX_LENGTH_CLUSTER_NAME,\n  MINIMUM_EYEPAIRS,\n  NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,\n  SECRETS_MAX_LENGTH,\n  STARTING_PRICE_PER_MONTH_IN_EURO,\n  TEMPORARY_CLUSTER_NAME,\n} from './constants/misc.const.js'\nexport {\n  getGatewayPropertyHint,\n  getGatewayPropertyPath,\n  isAffectedByStreamlinedDeployment,\n  isPre89AffectedPath,\n  PRE89_AFFECTED_PATHS,\n  PRE89_AFFECTED_PROPERTY_PREFIXES,\n  PRE89_GATEWAY_PROPERTY_PATHS,\n  PRE89_GATEWAY_RESOURCE_PREFIXES,\n} from './constants/pre89EnvVarMapping.const.js'\nexport { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js'\nexport { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js'\nexport type {\n  TrialExtensionSurveyAnswer,\n  TrialExtensionSurveyQuestion,\n} from './constants/trialExtensionSurvey.const.js'\nexport { TRIAL_EXTENSION_SURVEY_QUESTIONS } from './constants/trialExtensionSurvey.const.js'\nexport {\n  ADMIN_APP_RENAME_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_MINOR,\n  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,\n  APP_INTEGRATIONS_MIN_VERSION,\n  AUDIT_LOG_TAB_MIN_VERSION,\n  AUTHORIZATION_TOGGLE_MIN_VERSION,\n  AWS_ONLY_GENERATION_MIN_VERSION,\n  BUSINESS_ID_UNIQUENESS_MIN_VERSION,\n  BYOIDP_MIN_VERSION,\n  CLUSTER_SECRETS_LABEL_MIN_VERSION,\n  CLUSTER_STATISTICS_CONFIG_MIN_VERSION,\n  CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION,\n  CONNECTOR_SECRET_SYNC_MIN_VERSION,\n  CONNECTORS_MANAGEMENT_LINK_MIN_VERSION,\n  ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION,\n  ENFORCE_GROUPS_TOGGLE_MIN_VERSION,\n  GATEWAY_SPEC_8_9_MIN_VERSION,\n  HOT_BACKUP_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION,\n  IDENTITY_MANAGEMENT_MIN_VERSION,\n  INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION,\n  JOB_DASHBOARD_MIN_VERSION,\n  LINE_8_9_MIN_VERSION,\n  LINE_8_10_MIN_VERSION,\n  MCP_MIN_VERSION,\n  MULTI_TENANCY_TOGGLE_MIN_VERSION,\n  NEW_CLUSTER_ROLES_MIN_VERSION,\n  OPTIMIZE_DEFAULT_ON_MIN_VERSION,\n  OPTIMIZE_FILTERING_MIN_VERSION,\n  OPTIONAL_TELEMETRY_MIN_VERSION,\n  RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,\n  REST_API_URL_TRANSFORM_MIN_VERSION,\n  REST_API_V2_MIN_VERSION,\n  RESUME_ALPHA_MIN_VERSION,\n  SECRET_SOURCE_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_6_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_7_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_8_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_9_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_10_MIN_VERSION,\n  SESSION_CONFIG_MIN_VERSION,\n  SWAGGER_MIN_VERSION,\n  SWAGGER_URL_8_9_MIN_VERSION,\n  TASKLIST_MODE_TOGGLE_MIN_VERSION,\n  TASKLIST_UPGRADE_BANNER_MIN_VERSION,\n  TASKLIST_V2_AUTO_ENABLE_FROM_MINOR,\n  TASKLIST_V2_AUTO_ENABLE_TO_MINOR,\n  TASKLIST_V2_DEFAULT_ON_MIN_VERSION,\n  TASKLIST_V2_SETTING_MAX_VERSION,\n  TASKLIST_V2_UPGRADE_MIN_VERSION,\n  TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION,\n  ZEEBE_REST_URL_MIN_VERSION,\n} from './constants/version-gates.const.js'\n\n// ============================================================================\n// DTOs - Types (interfaces and type aliases)\n// ============================================================================\n\nexport type {\n  ALERT_SUBSCRIPTION_REPORT_TYPES,\n  ALERT_SUBSCRIPTION_TYPES,\n  AlertSubscriptionDto,\n  AlertSubscriptionEntryDto,\n  AlertSubscriptionWebhookAuth,\n  CheckFailedReason,\n} from './dtos/AlertSubscription.dto.js'\n\n// DTOs - Values (constants)\nexport {\n  FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,\n  HMAC_HEADER_POSITION,\n  HMAC_SUPPORTED_ALGORITHM,\n} from './dtos/AlertSubscription.dto.js'\n\nexport type { AuditDto } from './dtos/Audit.dto.js'\nexport type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js'\nexport type { BackupDto } from './dtos/Backup.dto.js'\nexport type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js'\nexport type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js'\nexport type {\n  ClusterDeferredSpecChange,\n  DeferredSpecChangeType,\n} from './dtos/ClusterDeferredSpecChange.dto.js'\nexport type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js'\nexport type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js'\nexport type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js'\nexport type {\n  ClusterSpecChange,\n  ClusterSpecChangeActor,\n  ClusterSpecHistory,\n} from './dtos/ClusterSpecHistory.dto.js'\nexport type {\n  CommonClusterDto,\n  ExternalIdpConfig,\n  OptimizeFilteringConfig,\n  OptimizeFilteringIncludeExclude,\n  OptimizeFilteringPatch,\n  SecretsFilterMode,\n} from './dtos/CommonCluster.dto.js'\nexport type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js'\nexport type {\n  ClusterByClientV2Dto,\n  ClusterDatacenterOptionV2Dto,\n  ClusterDetailV2Dto,\n  ClusterFacetsV2Dto,\n  ClusterListItemV2Dto,\n  ClusterParameterOptionV2Dto,\n  ClusterParametersV2Dto,\n  ControlResolvedPermissions,\n  ControlSessionDto,\n  ControlSessionUser,\n  CursorPage,\n  CursorParams,\n  ListClustersV2Params,\n  ListOrganizationsV2Params,\n  ListOrgMembersV2Params,\n  OrgDetailV2Dto,\n  OrgListItemV2Dto,\n  OrgMemberV2Dto,\n  OrgSummaryV2Dto,\n} from './dtos/ControlV2.dto.js'\nexport type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js'\nexport type {\n  CamundaWebApp,\n  CamundaWebAppWithZeebe,\n  ExternalClusterDto,\n  ExternalOrganizationDto,\n} from './dtos/ExternalWebapp.dto.js'\nexport type { Features } from './dtos/FeatureFlags.dto.js'\n// Functions\nexport {\n  type GenerationDto,\n  type GenerationWithClusterCountDto,\n  sortGenerationBySemverOfZeebe,\n  type UpgradableGenerationsDto,\n} from './dtos/Generations.dto.js'\n// Namespace (type-only - contains only interfaces)\nexport type { Hdp } from './dtos/Hdp.dto.js'\nexport type {\n  K8sConfig,\n  K8sConfigLegacyFormat,\n  K8sContext,\n  K8sContextDto,\n} from './dtos/K8sContext.dto.js'\nexport type { MetaDto } from './dtos/Meta.dto.js'\nexport type {\n  AutoJoinAssignment,\n  LicensingModelType,\n  LlmProviderName,\n  OrganizationDto,\n  OrganizationMetadata,\n  OrgOwner,\n  OrgWithNameAndSalesPlan,\n} from './dtos/Organization.dto.js'\nexport {\n  LICENSING_MODEL_DISPLAY_NAMES,\n  VALID_LICENSING_MODELS,\n} from './dtos/Organization.dto.js'\nexport type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js'\nexport type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js'\nexport type {\n  ReleaseTrainSanityReport,\n  SanityFix,\n  SanityRuleInfo,\n  SanitySeverity,\n  SanityViolation,\n} from './dtos/ReleaseTrainSanity.dto.js'\nexport type { RestoreDto, RestoreState } from './dtos/Restore.dto.js'\n// SalesPlan.dto - Types\nexport type {\n  ClusterLimits,\n  ConsumptionDataItem,\n  Limits,\n  SalesPlanDto,\n  SalesPlanMetadata,\n} from './dtos/SalesPlan.dto.js'\n// SalesPlan.dto - Values (constants and functions)\nexport {\n  allClusterBasedLimits,\n  allSalesPlanLimits,\n  deprecatedLimit,\n  MAX_CLUSTER_CLIENTS_DEFAULT,\n  MAX_CLUSTER_CLIENTS_DEV,\n  RETENTION_LIMIT_DEFAULT,\n  RETENTION_LIMIT_MAXIMUM,\n  RETENTION_LIMIT_MINIMUM,\n  unusedClusterBasedLimits,\n  unusedSalesPlanLimits,\n} from './dtos/SalesPlan.dto.js'\nexport type { SecureConnectivityDto } from './dtos/SecureConnectivity.dto.js'\nexport type { SignupDto } from './dtos/Signup.dto.js'\nexport type {\n  StorybookConfig,\n  StorybookConfigBackup,\n  StorybookConfigChannel,\n  StorybookConfigDatacenter,\n  StorybookConfigGeneration,\n} from './dtos/StorybookConfig.dto.js'\nexport type { SystemAuditDto } from './dtos/SystemAudit.dto.js'\n// UsageAlert.dto - Types\nexport type { UsageAlertDto } from './dtos/UsageAlert.dto.js'\n// UsageAlert.dto - Values (enum and constants)\nexport {\n  UsageAlertInitValues,\n  UsageAlertMetric,\n  UsageAlertThresholdLimits,\n} from './dtos/UsageAlert.dto.js'\nexport type { UserMetaDataDto } from './dtos/UserMetaData.dto.js'\n// Lucene-style table search (parser + AST \u2192 SQL compiler + field registries).\nexport {\n  type AndNode,\n  CLUSTER_DEFAULT_SEARCH_FIELDS,\n  CLUSTER_SEARCH_FIELDS,\n  type CompileContext,\n  type CompiledQuery,\n  compileQuery,\n  type FieldBinding,\n  findSearchField,\n  isLuceneQueryError,\n  LuceneQueryError,\n  likeArgument,\n  type NotNode,\n  ORG_DEFAULT_SEARCH_FIELDS,\n  ORGANIZATION_SEARCH_FIELDS,\n  type OrNode,\n  parseLuceneQuery,\n  type QueryNode,\n  type RangeNode,\n  type SearchFieldCapability,\n  type SearchFieldSpec,\n  type SearchFieldType,\n  type SearchTermOperator,\n  type TermNode,\n} from './search/index.js'\n\n// ============================================================================\n// Enums (runtime values)\n// ============================================================================\n\nexport {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from './enums/AlertSubscription.enum.js'\nexport { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js'\nexport { AuditService } from './enums/AuditService.enum.js'\nexport { BackupStatus } from './enums/BackupStatus.enum.js'\nexport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from './enums/ClusterBulkOperation.enum.js'\nexport { ClusterClientPermission } from './enums/ClusterClientPermissions.enum.js'\nexport { ClusterEncryptionKey } from './enums/ClusterEncryptionKey.enum.js'\nexport { ClusterStatus } from './enums/ClusterStatus.enum.js'\nexport { ConsoleAPIClientPermission } from './enums/ConsoleApiClientPermission.enum.js'\nexport { ErrorType } from './enums/ErrorType.enum.js'\nexport type {\n  AssignableOrganizationRoleType,\n  OrganizationRoleType,\n  UnassignableOrganizationRoleType,\n} from './enums/OrganizationRole.enum.js'\nexport {\n  AssignableOrganizationRole,\n  LegacyHeldOrganizationRole,\n  OrganizationRole,\n  UnassignableOrganizationRole,\n} from './enums/OrganizationRole.enum.js'\nexport { SseEntity, SseType } from './enums/Sse.enum.js'\nexport {\n  SystemAuditEntity,\n  SystemAuditEntityAttribute,\n} from './enums/SystemAuditEntity.enum.js'\n\n// ============================================================================\n// Permissions - Namespaces (runtime values)\n// ============================================================================\n\nexport { AccountsPermissions } from './permissions/accounts.permissions.js'\nexport { AlertDistributorPermissions } from './permissions/alert-distributor.permissions.js'\nexport { AuditLoggerPermissions } from './permissions/auditlogger.permissions.js'\nexport {\n  accountsUserFeaturesFromPermissions,\n  consoleUserFeaturesFromPermissions,\n} from './permissions/combo.js'\nexport { ConsolePermissions } from './permissions/console.permissions.js'\nexport { NotificationPermissions } from './permissions/notification.permissions.js'\n// profile.permissions - Types\nexport type { OnboardConfig } from './permissions/profile.permissions.js'\n// profile.permissions - Values (constants)\n// NOTE: the `allowed` email lists (CLOUD_TEAM_EMAILS, SRE_TEAM_EMAILS, etc.)\n// intentionally live in the private `@camunda-cloud/shared-backend` package\n// instead of here, since this package is published publicly to npm.\nexport { PROFILES } from './permissions/profile.permissions.js'\nexport { expandRolesToPermissions } from './permissions/roleExpansion.utils.js'\n\n// ============================================================================\n// Types - Type-only exports (interfaces and type aliases)\n// ============================================================================\n\nexport type { AuditData } from './types/AuditData.type.js'\n// AutoSleep.type - Types\nexport type {\n  ActivitySleepEligibilityOptions,\n  SleepCronEligibilityOptions,\n} from './types/AutoSleep.type.js'\n// AutoSleep.type - Values (constants and functions)\nexport {\n  INTERNAL_LOW_HARDWARE_PLAN_NAME,\n  isActivitySleepEligible,\n  isClusterTagEligibleForSleepCron,\n  isSalesPlanEligibleForSleepCron,\n  isSleepCronEligible,\n  SLEEP_CRON_ELIGIBLE_TAGS,\n} from './types/AutoSleep.type.js'\nexport type {\n  BotContext,\n  BotOptions,\n  BotRequest,\n  GetUserDetailsResponse,\n  ListRolesForUserResponse,\n  UpdateUserRolesRequest,\n  UpdateUserRolesResponse,\n  UserContext,\n  UserDetails,\n} from './types/Bot.types.js'\n// BulkOperation.type - Types\nexport type {\n  BulkClusterDeletionContent,\n  BulkClusterDeletionItem,\n  BulkClusterGenerationUpdateItem,\n  BulkClusterPlanTypeUpdateContent,\n  BulkClusterPlanTypeUpdateItem,\n  BulkClusterPlanUpdateContent,\n  BulkClusterPlanUpdateItem,\n  BulkGenerationUpdateContent,\n  GenericBulkClusterOperationContent,\n  GenericBulkOperationContent,\n  GenericClusterBulkOperationItem,\n} from './types/BulkOperation.type.js'\n// BulkOperation.type - Functions (type guards)\nexport {\n  isBulkClusterDeletionItem,\n  isBulkClusterPlanTypeUpdateItem,\n  isBulkClusterPlanUpdateItem,\n  isIsBulkClusterGenerationUpdateIten,\n} from './types/BulkOperation.type.js'\n// C8ClusterComponentVersions.type - Types\nexport type {\n  ImmutableZeebeClusterVersionsDto,\n  MutableZeebeClusterVersionsDto,\n  ZeebeClusterVersionsDto,\n} from './types/C8ClusterComponentVersions.type.js'\n// C8ClusterComponentVersions.type - Values (constants)\nexport {\n  AllThings,\n  ImmutableThings,\n  MutableThings,\n} from './types/C8ClusterComponentVersions.type.js'\n// CamundaClusterLabels.type - Types\nexport type {\n  CamundaClusterStage,\n  CamundaClusterStageLabel,\n  ClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// CamundaClusterLabels.type - Values (constants)\nexport {\n  ALLOWED_CAMUNDA_LABELS,\n  StageClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// Chargebee.type - Types\nexport type { SubscriptionItem } from './types/Chargebee.type.js'\n// Chargebee.type - Values (enums)\nexport { ConsumptionData, ConsumptionDataType } from './types/Chargebee.type.js'\n// ClusterBulkOperation.type - Types\nexport type {\n  ClusterBulkOperationAck,\n  ClusterBulkOperationClusterDto,\n  ClusterBulkOperationContent,\n  ClusterBulkOperationDto,\n  ClusterBulkOperationGenerationUpdateParameter,\n  ClusterBulkOperationParameter,\n  ClusterBulkOperationPlanTypeUpdateParameter,\n  ClusterBulkOperationPlanUpdateParameter,\n  ClusterBulkOperationPostContent,\n  ClusterSleepWakeupParameter,\n} from './types/ClusterBulkOperation.type.js'\nexport type {\n  ClusterModificationConfigDto,\n  ClusterModificationDto,\n} from './types/ClusterModification.type.js'\n// ClusterPlanFields.type - Values (field spec and type guard)\nexport {\n  CLUSTER_PLAN_FIELDS,\n  type ClusterPlanFieldSpec,\n  type ClusterPlanFieldTree,\n  isClusterPlanFieldSpec,\n} from './types/ClusterPlanFields.type.js'\nexport type {\n  ClusterPlanModificationAck,\n  ClusterPlanModificationConfig,\n  ClusterPlanModificationDto,\n} from './types/ClusterPlanModification.type.js'\n// ClusterPlanTypeAvailabilityClass.type - Values (enum and function)\nexport {\n  ClusterPlanTypeAvailabilityClass,\n  sortByAvailabilityClasses,\n} from './types/ClusterPlanTypeAvailabilityClass.type.js'\n// ClusterPlanTypeCategory.type - Values (enum and functions)\nexport {\n  ClusterPlanTypeCategory,\n  hasAvailabilityClass,\n  sortByClusterPlanTypeCategory,\n} from './types/ClusterPlanTypeCategory.type.js'\nexport type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js'\nexport type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js'\nexport type {\n  ClusterUsageDataRequest,\n  ClusterUsageMetricsAddRequestByMetricHeap,\n  ClusterUsageMetricsData,\n  ClusterUsageMetricsFilter,\n  ClusterUsageOrgStartDate,\n} from './types/ClusterUsageMetrics.type.js'\n// Namespace with runtime values (consts, functions, enums)\nexport { ConsoleSM } from './types/ConsoleSelfManaged.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { ConsoleSMAdminApi } from './types/ConsoleSelfManagedAdminApi.type.js'\n// Dashboard.types - Types\nexport type {\n  DashboardConfig,\n  DashboardMappingItem,\n  DashboardMappingTarget,\n  DashboardResultPrimitive,\n  DashboardResultRow,\n  EngineeringOperationsDashboardResponse,\n} from './types/Dashboard.types.js'\nexport type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js'\nexport type {\n  HdpTenantUsageBreakdown,\n  HdpTenantUsagePerClusterPoint,\n  HdpTenantUsagePoint,\n} from './types/HdpTenantUsage.type.js'\n// hdp.types - Types (interfaces)\nexport type {\n  AlertSubscription as HdpAlertSubscription,\n  Audit as HdpAudit,\n  ByomClient as HdpByomClient,\n  Channel as HdpChannel,\n  Cluster as HdpCluster,\n  ClusterBackup as HdpClusterBackup,\n  ClusterBackupSchedule as HdpClusterBackupSchedule,\n  ClusterBulkOperation as HdpClusterBulkOperation,\n  ClusterClient as HdpClusterClient,\n  ClusterModification as HdpClusterModification,\n  ClusterPlan as HdpClusterPlan,\n  ClusterPlanType as HdpClusterPlanType,\n  ConnectorSecret as HdpConnectorSecret,\n  ConsoleApiClient as HdpConsoleApiClient,\n  Datacenter as HdpDatacenter,\n  Generation as HdpGeneration,\n  HdpBackendChangeEvent,\n  HdpClusterModificationConfig,\n  HdpEntity,\n  HdpPrometheusDataCapacityDataPoint,\n  Invite as HdpInvite,\n  LlmSpend as HdpLlmSpend,\n  Organization as HdpOrganization,\n  SecureConnectivity as HdpSecureConnectivity,\n  SystemAudit as HdpSystemAudit,\n  TelemetryData as HdpTelemetryData,\n  UsageAlert as HdpUsageAlert,\n  User as HdpUser,\n  UserLogin as HdpUserLogin,\n} from './types/hdp.types.js'\n// hdp.types - Values (enums)\nexport {\n  AlertSubscriptionReportType as HdpAlertSubscriptionReportType,\n  AlertSubscriptionType as HdpAlertSubscriptionType,\n} from './types/hdp.types.js'\n// notification.type - Types\nexport type {\n  GlobalNotification,\n  NotificationDto,\n  NotificationMeta,\n  NotificationOptions,\n  NotificationPermission,\n  NotificationSource,\n  NotificationState,\n  NotificationType,\n  OrgNotification,\n  UserNotification,\n  UserOrgNotification,\n} from './types/notification.type.js'\n// notification.type - Values (enums and constants)\nexport {\n  NotificationPermissionValues,\n  NotificationSourceEnum,\n  NotificationStateEnum,\n  NotificationTypeEnum,\n} from './types/notification.type.js'\n// OrganizationPermission.type - Types\nexport type {\n  CreateReadUpdateDelete,\n  OrganizationPermissions,\n} from './types/OrganizationPermission.type.js'\n// OrganizationPermission.type - Values (constants)\nexport {\n  OrganizationPermissionsDescriptions,\n  PermissionsForOrganizationRole,\n} from './types/OrganizationPermission.type.js'\n// Roles.js - Types\nexport type {\n  AccountRoles,\n  ConsoleRoles,\n  ModelerRoles,\n  Roles,\n} from './types/Roles.js'\n// Roles.js - Values (constants)\nexport { SAFE_ROLES } from './types/Roles.js'\n// SalesPlanType.type - Types\nexport type {\n  DisplayedSalesPlan,\n  RevisitedSalesPlanName,\n} from './types/SalesPlanType.type.js'\n// SalesPlanType.type - Values (enums and functions)\nexport {\n  AnalyticsSalesPlanType,\n  getAnalyticsSalesPlanFromOrgSalesPlan,\n  getDisplayedSalesPlan,\n  getRevisitedSalesPlanName,\n  OPTIMIZE_DISABLED_PLAN_TYPES,\n  SalesPlanType,\n} from './types/SalesPlanType.type.js'\n// SpamDetection.type - Types\nexport type { SpamDetectionPatterns } from './types/SpamDetection.type.js'\n// SpamDetection.type - Values (constants)\nexport { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js'\nexport type {\n  AlertSubscriptionSseEvent,\n  BackupSseEvent,\n  ClusterClientSseEvent,\n  ClusterSseEvent,\n  ConnectorSecretsSseEvent,\n  ConsoleApiClientSseEvent,\n  ConsoleSseEvent,\n  MonitoringSseEvent,\n  SecureConnectivitySseEvent,\n  SseClusterPayload,\n  SseMonitoringPayload,\n  SseSecureConnectivityPayload,\n} from './types/SseEvent.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { AccountsStats } from './types/Stats.types.js'\n// Survey.type - Types\nexport type { Persona, SurveyDto } from './types/Survey.type.js'\n// Survey.type - Values (enum)\nexport { FeedbackType } from './types/Survey.type.js'\n// SuspendStrategy.type - Types\nexport type {\n  GetSuspendStrategyOptions,\n  SuspendStrategy,\n} from './types/SuspendStrategy.type.js'\n// SuspendStrategy.type - Values (function)\nexport { getSuspendStrategy } from './types/SuspendStrategy.type.js'\nexport type { SystemAuditData } from './types/SystemAuditData.type.js'\n\n// Namespace (runtime value)\nexport { Telemetry } from './types/Telemetry.type.js'\n\n// TrialManagement.types - Types\nexport type {\n  ExtensionListItem,\n  ExtensionListResponse,\n  OrgTrialDetail,\n  TrialExtensionSource,\n  TrialManagementStats,\n} from './types/TrialManagement.types.js'\n\n// User.type - Types\nexport type {\n  AccountsData,\n  AppMetadata,\n  BasicUser,\n  BlockedFor,\n  Identity,\n  OrgMembership,\n  User,\n  UserMetadata,\n  UserRequest,\n} from './types/User.type.js'\n\n// User.type - Values (enum)\nexport { UserMetadataEvent } from './types/User.type.js'\n\nexport type {\n  UniqueTaskUser,\n  ValueMetrics,\n  ValueMetricsPerYearMonth,\n} from './types/ValueMetrics.type.js'\n\n// ============================================================================\n// Utils - Classes (runtime values)\n// ============================================================================\n\nexport {\n  CLOUD_PROVIDER_ORDER,\n  getCloudProviderLabel,\n  getCloudProviderRank,\n} from './utils/cloudProvider.utils.js'\nexport {\n  type ConnectivityStatus,\n  deriveConnectivityMessage,\n  deriveConnectivityStatus,\n} from './utils/connectivityStatus.utils.js'\nexport { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js'\nexport type {\n  CronScheduleValidationFailure,\n  CronScheduleValidationResult,\n  CronScheduleValidationSuccess,\n} from './utils/cronSchedule.utils.js'\nexport {\n  BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,\n  validateCronSchedule,\n} from './utils/cronSchedule.utils.js'\nexport {\n  deriveEncryptionStatus,\n  type EncryptionStatus,\n  isEncryptionStatus,\n} from './utils/encryptionStatus.utils.js'\n// enterprise-connection.utils - Types\nexport type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js'\n// enterprise-connection.utils - Values (functions)\nexport {\n  enterpriseConnectionMetadataToOrganizationAssignments,\n  organizationAssignmentsToEnterpriseConnectionMetadata,\n} from './utils/enterprise-connection.utils.js'\nexport {\n  addMonthsClamped,\n  DEFAULT_ENTERPRISE_DURATION_IN_MONTHS,\n  diffInWholeMonths,\n  type EnterpriseTermWindow,\n  getCurrentEnterpriseTerm,\n  peakWithinTerm,\n  toUtcDayStartMs,\n} from './utils/enterpriseTerm.utils.js'\nexport type { EnvVarEntry } from './utils/envVars.js'\nexport { parseEnvVars, serializeEnvVars } from './utils/envVars.js'\nexport {\n  deriveFailoverKeyPolicyPrincipals,\n  type FailoverKeyPolicyPrincipals,\n} from './utils/failoverKeyPolicy.utils.js'\nexport {\n  KMS_ARN,\n  KMS_MRK_ARN,\n  type KmsArnValidationError,\n  type ParsedKmsArn,\n  parseKmsArn,\n  validateKmsArnForRegion,\n} from './utils/kmsArn.utils.js'\nexport { validateLabels } from './utils/labelValidator.utils.js'\nexport { ObjectMergeUtils } from './utils/objectMerge.utils.js'\nexport {\n  computeOrgStartDate,\n  type OrgStartDateInput,\n} from './utils/orgStartDate.utils.js'\nexport {\n  getPermissionsByRoles,\n  getUserPermissionsForOrg,\n} from './utils/orgs/OrgHelper.js'\n\n// PasswordPolicy - Types\nexport type {\n  PasswordPolicyRequest,\n  PasswordPolicyResult,\n} from './utils/PasswordPolicy.js'\n\n// PasswordPolicy - Values (constants and function)\nexport {\n  MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,\n  MINLENGTH as PASSWORD_POLICY_MINLENGTH,\n  passwordPolicyCheck,\n} from './utils/PasswordPolicy.js'\n\nexport {\n  deriveSecondaryStorageStatus,\n  type SecondaryStorageStatus,\n} from './utils/secondaryStorageStatus.utils.js'\n\nexport {\n  allSettledResultsCounts,\n  getFulfilledPromises,\n  getRejectedPromises,\n  getSettledSummary,\n} from './utils/settledPromises.util.js'\n\nexport {\n  isValidAwsArn,\n  isValidCIDR,\n  isValidCIDRList,\n  isValidClientName,\n  isValidHostname,\n  isValidPrivateLinkRegion,\n  normalizeCIDRList,\n} from './utils/string-validation.utils.js'\nexport {\n  extractCamundaUserEmail,\n  guessName,\n  isCamundaUserId,\n} from './utils/user.utils.js'\n\n// versionCheck.utils - Values (enum and function)\nexport {\n  checkVersion,\n  isAppIntegrationsVersionSupported,\n  isGenerationResumable,\n  isSecretsFilterModeConfigurable,\n  stripSecfixPostfix,\n  VersionCheckOperator,\n} from './utils/versionCheck.utils.js'\n\n// ============================================================================\n// Config - Configuration files and types\n// ============================================================================\n\nexport { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js'\nexport type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js'\n\nexport {\n  augmentCamundiPermissions,\n  getApplicableRolesForEmployee,\n  isManager,\n} from './utils/camundiPermissionAugmenter.utils.js'\n"],
-  "mappings": "AAUA,SAAS,KAAK,MAAM,QAAQ,QAAQ,YAAY;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,iDAAiD;AAK1D,SAAS,wCAAwC;AACjD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA0DP;AAAA,EAGE;AAAA,OAEK;AAmBP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAoBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EAEE;AAAA,EACA;AAAA,EAGA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,OAQK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,4BAA4B;AAClD,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC;AAC3C,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,eAAe;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AAC5C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAOxC,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AAazC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,SAAS,iBAAiB,2BAA2B;AAmBrD;AAAA,EACE;AAAA,EAGA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,SAAS,iBAAiB;AAmD1B;AAAA,EACiC,+BAA/BA;AAAA,EACyB,yBAAzBC;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB;AAO3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,0BAA0B;AAoBnC,SAAS,oBAAoB;AAO7B,SAAS,0BAA0B;AAInC,SAAS,iBAAiB;AAyB1B,SAAS,yBAAyB;AAYlC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAMxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,cAAc,wBAAwB;AAC/C;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACe;AAAA,EACA;AAAA,EACb;AAAA,OACK;AAEP;AAAA,EACE;AAAA,OAEK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,SAAoB,WAAXC,gBAA2C;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Constants (runtime values)\n// ============================================================================\n\nexport { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js'\nexport {\n  isSupportedFailoverRegionPair,\n  SUPPORTED_FAILOVER_REGION_PAIRS,\n} from './constants/failoverRegionPairs.const.js'\nexport type { Stage } from './constants/misc.const.js'\nexport {\n  CAMUNDA_CLAIMS_NAMESPACE,\n  CONSOLE_API_USER_ID,\n  FIRSTNAME_LASTNAME_MAX_LENGTH,\n  HOTBACKUP_MIN_CREATE_PERIOD,\n  MAX_HARDWARE_PACKAGE_COUNT,\n  MAX_LENGTH_CLUSTER_NAME,\n  MINIMUM_EYEPAIRS,\n  NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,\n  SECRETS_MAX_LENGTH,\n  STARTING_PRICE_PER_MONTH_IN_EURO,\n  TEMPORARY_CLUSTER_NAME,\n  UNKNOWN_ACTOR_EMAIL,\n} from './constants/misc.const.js'\nexport {\n  getGatewayPropertyHint,\n  getGatewayPropertyPath,\n  isAffectedByStreamlinedDeployment,\n  isPre89AffectedPath,\n  PRE89_AFFECTED_PATHS,\n  PRE89_AFFECTED_PROPERTY_PREFIXES,\n  PRE89_GATEWAY_PROPERTY_PATHS,\n  PRE89_GATEWAY_RESOURCE_PREFIXES,\n} from './constants/pre89EnvVarMapping.const.js'\nexport { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js'\nexport { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js'\nexport type {\n  TrialExtensionSurveyAnswer,\n  TrialExtensionSurveyQuestion,\n} from './constants/trialExtensionSurvey.const.js'\nexport { TRIAL_EXTENSION_SURVEY_QUESTIONS } from './constants/trialExtensionSurvey.const.js'\nexport {\n  V2_BODY_IDS_MAX,\n  V2_FILTER_IDS_MAX,\n  V2_MAX_PAGE_LIMIT,\n} from './constants/v2-list.const.js'\nexport {\n  ADMIN_APP_RENAME_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_MINOR,\n  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,\n  APP_INTEGRATIONS_MIN_VERSION,\n  AUDIT_LOG_TAB_MIN_VERSION,\n  AUTHORIZATION_TOGGLE_MIN_VERSION,\n  AWS_ONLY_GENERATION_MIN_VERSION,\n  BUSINESS_ID_UNIQUENESS_MIN_VERSION,\n  BYOIDP_MIN_VERSION,\n  CLUSTER_SECRETS_LABEL_MIN_VERSION,\n  CLUSTER_STATISTICS_CONFIG_MIN_VERSION,\n  CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION,\n  CONNECTOR_SECRET_SYNC_MIN_VERSION,\n  CONNECTORS_MANAGEMENT_LINK_MIN_VERSION,\n  ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION,\n  ENFORCE_GROUPS_TOGGLE_MIN_VERSION,\n  GATEWAY_SPEC_8_9_MIN_VERSION,\n  HOT_BACKUP_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION,\n  IDENTITY_MANAGEMENT_MIN_VERSION,\n  INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION,\n  JOB_DASHBOARD_MIN_VERSION,\n  LINE_8_9_MIN_VERSION,\n  LINE_8_10_MIN_VERSION,\n  MCP_MIN_VERSION,\n  MULTI_TENANCY_TOGGLE_MIN_VERSION,\n  NEW_CLUSTER_ROLES_MIN_VERSION,\n  OPTIMIZE_DEFAULT_ON_MIN_VERSION,\n  OPTIMIZE_FILTERING_MIN_VERSION,\n  OPTIONAL_TELEMETRY_MIN_VERSION,\n  RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,\n  REST_API_URL_TRANSFORM_MIN_VERSION,\n  REST_API_V2_MIN_VERSION,\n  RESUME_ALPHA_MIN_VERSION,\n  SECRET_SOURCE_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_6_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_7_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_8_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_9_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_10_MIN_VERSION,\n  SESSION_CONFIG_MIN_VERSION,\n  SWAGGER_MIN_VERSION,\n  SWAGGER_URL_8_9_MIN_VERSION,\n  TASKLIST_MODE_TOGGLE_MIN_VERSION,\n  TASKLIST_UPGRADE_BANNER_MIN_VERSION,\n  TASKLIST_V2_AUTO_ENABLE_FROM_MINOR,\n  TASKLIST_V2_AUTO_ENABLE_TO_MINOR,\n  TASKLIST_V2_DEFAULT_ON_MIN_VERSION,\n  TASKLIST_V2_SETTING_MAX_VERSION,\n  TASKLIST_V2_UPGRADE_MIN_VERSION,\n  TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION,\n  ZEEBE_REST_URL_MIN_VERSION,\n} from './constants/version-gates.const.js'\n\n// ============================================================================\n// DTOs - Types (interfaces and type aliases)\n// ============================================================================\n\nexport type {\n  ApprovalActorView,\n  ApprovalDecision,\n  ApprovalDenialCode,\n} from './approvals/policy.js'\nexport {\n  canAcknowledge,\n  canCreate,\n  canExecute,\n  canReject,\n  canWithdraw,\n  effectiveStatus,\n  isExpired,\n  isSameActorEmail,\n  remainingAcks,\n} from './approvals/policy.js'\nexport type {\n  ALERT_SUBSCRIPTION_REPORT_TYPES,\n  ALERT_SUBSCRIPTION_TYPES,\n  AlertSubscriptionDto,\n  AlertSubscriptionEntryDto,\n  AlertSubscriptionWebhookAuth,\n  CheckFailedReason,\n} from './dtos/AlertSubscription.dto.js'\n// DTOs - Values (constants)\nexport {\n  FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,\n  HMAC_HEADER_POSITION,\n  HMAC_SUPPORTED_ALGORITHM,\n} from './dtos/AlertSubscription.dto.js'\n// Approvals - the wire types, and the rules that read them. Both are pure and\n// browser-safe, so control-backend, control-frontend and cloudbot run the same\n// code and cannot disagree.\nexport type {\n  ApprovalAck,\n  ApprovalActor,\n  ApprovalExecutionMode,\n  ApprovalJobDto,\n  ApprovalJobStatus,\n  ApprovalUseCaseDto,\n} from './dtos/ApprovalJob.dto.js'\nexport { APPROVAL_JOB_STATUSES } from './dtos/ApprovalJob.dto.js'\n\nexport type { AuditDto } from './dtos/Audit.dto.js'\nexport type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js'\nexport type { BackupDto } from './dtos/Backup.dto.js'\nexport type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js'\nexport type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js'\nexport type {\n  ClusterCreationDefaultField,\n  ClusterCreationDefaultKey,\n  ClusterCreationDefaults,\n} from './dtos/ClusterCreationDefaults.dto.js'\nexport { CLUSTER_CREATION_DEFAULT_FIELDS } from './dtos/ClusterCreationDefaults.dto.js'\nexport type {\n  ClusterDeferredSpecChange,\n  DeferredSpecChangeType,\n} from './dtos/ClusterDeferredSpecChange.dto.js'\nexport type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js'\nexport type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js'\nexport type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js'\nexport type {\n  ClusterSpecChange,\n  ClusterSpecChangeActor,\n  ClusterSpecHistory,\n} from './dtos/ClusterSpecHistory.dto.js'\nexport type {\n  CommonClusterDto,\n  ExternalIdpConfig,\n  OptimizeFilteringConfig,\n  OptimizeFilteringIncludeExclude,\n  OptimizeFilteringPatch,\n  SecretsFilterMode,\n} from './dtos/CommonCluster.dto.js'\nexport type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js'\nexport type {\n  ClusterActivityBucket,\n  ClusterActivityTile,\n  ClusterActivityV2Dto,\n  ClusterActivityV2Response,\n  ClusterByClientV2Dto,\n  ClusterDatacenterOptionV2Dto,\n  ClusterDetailV2Dto,\n  ClusterFacetsV2Dto,\n  ClusterListItemV2Dto,\n  ClusterParameterOptionV2Dto,\n  ClusterParametersV2Dto,\n  ControlResolvedPermissions,\n  ControlSessionDto,\n  ControlSessionUser,\n  CursorPage,\n  CursorParams,\n  ListClustersV2Params,\n  ListOrganizationsV2Params,\n  ListOrgMembersV2Params,\n  OrgDetailV2Dto,\n  OrgListItemV2Dto,\n  OrgMemberV2Dto,\n  OrgSummaryV2Dto,\n} from './dtos/ControlV2.dto.js'\nexport type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js'\nexport type {\n  CamundaWebApp,\n  CamundaWebAppWithZeebe,\n  ExternalClusterDto,\n  ExternalOrganizationDto,\n} from './dtos/ExternalWebapp.dto.js'\nexport type { Features } from './dtos/FeatureFlags.dto.js'\n// Functions\nexport {\n  compareGenerationNamesNewestFirst,\n  type GenerationDto,\n  type GenerationWithClusterCountDto,\n  sortGenerationBySemverOfZeebe,\n  type UpgradableGenerationsDto,\n} from './dtos/Generations.dto.js'\n// Namespace (type-only - contains only interfaces)\nexport type { Hdp } from './dtos/Hdp.dto.js'\nexport type {\n  K8sConfig,\n  K8sConfigLegacyFormat,\n  K8sContext,\n  K8sContextDto,\n} from './dtos/K8sContext.dto.js'\nexport type { MetaDto } from './dtos/Meta.dto.js'\nexport type {\n  AutoJoinAssignment,\n  LicensingModelType,\n  LlmProviderName,\n  OrganizationDto,\n  OrganizationMetadata,\n  OrgOwner,\n  OrgWithNameAndSalesPlan,\n} from './dtos/Organization.dto.js'\nexport {\n  LICENSING_MODEL_DISPLAY_NAMES,\n  VALID_LICENSING_MODELS,\n} from './dtos/Organization.dto.js'\nexport type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js'\nexport type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js'\nexport type {\n  ReleaseTrainSanityReport,\n  SanityFix,\n  SanityRuleInfo,\n  SanitySeverity,\n  SanityViolation,\n} from './dtos/ReleaseTrainSanity.dto.js'\nexport type { RestoreDto, RestoreState } from './dtos/Restore.dto.js'\n// SalesPlan.dto - Types\nexport type {\n  ClusterLimits,\n  ConsumptionDataItem,\n  Limits,\n  SalesPlanDto,\n  SalesPlanMetadata,\n} from './dtos/SalesPlan.dto.js'\n// SalesPlan.dto - Values (constants and functions)\nexport {\n  allClusterBasedLimits,\n  allSalesPlanLimits,\n  deprecatedLimit,\n  MAX_CLUSTER_CLIENTS_DEFAULT,\n  MAX_CLUSTER_CLIENTS_DEV,\n  RETENTION_LIMIT_DEFAULT,\n  RETENTION_LIMIT_MAXIMUM,\n  RETENTION_LIMIT_MINIMUM,\n  unusedClusterBasedLimits,\n  unusedSalesPlanLimits,\n} from './dtos/SalesPlan.dto.js'\nexport type { SecureConnectivityDto } from './dtos/SecureConnectivity.dto.js'\nexport type { SignupDto } from './dtos/Signup.dto.js'\nexport type {\n  StorybookConfig,\n  StorybookConfigBackup,\n  StorybookConfigChannel,\n  StorybookConfigDatacenter,\n  StorybookConfigGeneration,\n} from './dtos/StorybookConfig.dto.js'\nexport type { SystemAuditDto } from './dtos/SystemAudit.dto.js'\n// UsageAlert.dto - Types\nexport type { UsageAlertDto } from './dtos/UsageAlert.dto.js'\n// UsageAlert.dto - Values (enum and constants)\nexport {\n  UsageAlertInitValues,\n  UsageAlertMetric,\n  UsageAlertThresholdLimits,\n} from './dtos/UsageAlert.dto.js'\nexport type { UserMetaDataDto } from './dtos/UserMetaData.dto.js'\n// Lucene-style table search (parser + AST \u2192 SQL compiler + field registries).\nexport {\n  type AndNode,\n  CLUSTER_DEFAULT_SEARCH_FIELDS,\n  CLUSTER_SEARCH_FIELDS,\n  type CompileContext,\n  type CompiledQuery,\n  compileQuery,\n  type FieldBinding,\n  findSearchField,\n  idSetPredicate,\n  isLuceneQueryError,\n  joinIdSet,\n  LuceneQueryError,\n  likeArgument,\n  type NotNode,\n  ORG_DEFAULT_SEARCH_FIELDS,\n  ORGANIZATION_SEARCH_FIELDS,\n  type OrNode,\n  parseLuceneQuery,\n  type QueryNode,\n  type RangeNode,\n  type SearchFieldCapability,\n  type SearchFieldSpec,\n  type SearchFieldType,\n  type SearchTermOperator,\n  type TermNode,\n} from './search/index.js'\n\n// ============================================================================\n// Enums (runtime values)\n// ============================================================================\n\nexport {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from './enums/AlertSubscription.enum.js'\nexport { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js'\nexport { AuditService } from './enums/AuditService.enum.js'\nexport { BackupStatus } from './enums/BackupStatus.enum.js'\nexport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from './enums/ClusterBulkOperation.enum.js'\nexport { ClusterClientPermission } from './enums/ClusterClientPermissions.enum.js'\nexport { ClusterEncryptionKey } from './enums/ClusterEncryptionKey.enum.js'\nexport { ClusterStatus } from './enums/ClusterStatus.enum.js'\nexport { ConsoleAPIClientPermission } from './enums/ConsoleApiClientPermission.enum.js'\nexport { ErrorType } from './enums/ErrorType.enum.js'\nexport type {\n  AssignableOrganizationRoleType,\n  OrganizationRoleType,\n  UnassignableOrganizationRoleType,\n} from './enums/OrganizationRole.enum.js'\nexport {\n  AssignableOrganizationRole,\n  LegacyHeldOrganizationRole,\n  OrganizationRole,\n  UnassignableOrganizationRole,\n} from './enums/OrganizationRole.enum.js'\nexport { SseEntity, SseType } from './enums/Sse.enum.js'\nexport {\n  SystemAuditEntity,\n  SystemAuditEntityAttribute,\n} from './enums/SystemAuditEntity.enum.js'\n\n// ============================================================================\n// Permissions - Namespaces (runtime values)\n// ============================================================================\n\nexport { AccountsPermissions } from './permissions/accounts.permissions.js'\nexport { AlertDistributorPermissions } from './permissions/alert-distributor.permissions.js'\nexport { AuditLoggerPermissions } from './permissions/auditlogger.permissions.js'\nexport {\n  accountsUserFeaturesFromPermissions,\n  consoleUserFeaturesFromPermissions,\n} from './permissions/combo.js'\nexport { ConsolePermissions } from './permissions/console.permissions.js'\nexport { NotificationPermissions } from './permissions/notification.permissions.js'\n// profile.permissions - Types\nexport type { OnboardConfig } from './permissions/profile.permissions.js'\n// profile.permissions - Values (constants)\n// NOTE: the `allowed` email lists (CLOUD_TEAM_EMAILS, SRE_TEAM_EMAILS, etc.)\n// intentionally live in the private `@camunda-cloud/shared-backend` package\n// instead of here, since this package is published publicly to npm.\nexport { PROFILES } from './permissions/profile.permissions.js'\nexport { expandRolesToPermissions } from './permissions/roleExpansion.utils.js'\n\n// ============================================================================\n// Types - Type-only exports (interfaces and type aliases)\n// ============================================================================\n\nexport type { AuditData } from './types/AuditData.type.js'\n// AutoSleep.type - Types\nexport type {\n  ActivitySleepEligibilityOptions,\n  SleepCronEligibilityOptions,\n} from './types/AutoSleep.type.js'\n// AutoSleep.type - Values (constants and functions)\nexport {\n  INTERNAL_LOW_HARDWARE_PLAN_NAME,\n  isActivitySleepEligible,\n  isClusterTagEligibleForSleepCron,\n  isSalesPlanEligibleForSleepCron,\n  isSleepCronEligible,\n  SLEEP_CRON_ELIGIBLE_TAGS,\n} from './types/AutoSleep.type.js'\nexport type {\n  BotContext,\n  BotOptions,\n  BotRequest,\n  GetUserDetailsResponse,\n  ListRolesForUserResponse,\n  UpdateUserRolesRequest,\n  UpdateUserRolesResponse,\n  UserContext,\n  UserDetails,\n} from './types/Bot.types.js'\n// BulkOperation.type - Types\nexport type {\n  BulkClusterDeletionContent,\n  BulkClusterDeletionItem,\n  BulkClusterGenerationUpdateItem,\n  BulkClusterPlanTypeUpdateContent,\n  BulkClusterPlanTypeUpdateItem,\n  BulkClusterPlanUpdateContent,\n  BulkClusterPlanUpdateItem,\n  BulkGenerationUpdateContent,\n  GenericBulkClusterOperationContent,\n  GenericBulkOperationContent,\n  GenericClusterBulkOperationItem,\n} from './types/BulkOperation.type.js'\n// BulkOperation.type - Functions (type guards)\nexport {\n  isBulkClusterDeletionItem,\n  isBulkClusterPlanTypeUpdateItem,\n  isBulkClusterPlanUpdateItem,\n  isIsBulkClusterGenerationUpdateIten,\n} from './types/BulkOperation.type.js'\n// C8ClusterComponentVersions.type - Types\nexport type {\n  ImmutableZeebeClusterVersionsDto,\n  MutableZeebeClusterVersionsDto,\n  ZeebeClusterVersionsDto,\n} from './types/C8ClusterComponentVersions.type.js'\n// C8ClusterComponentVersions.type - Values (constants)\nexport {\n  AllThings,\n  ImmutableThings,\n  MutableThings,\n} from './types/C8ClusterComponentVersions.type.js'\n// CamundaClusterLabels.type - Types\nexport type {\n  CamundaClusterStage,\n  CamundaClusterStageLabel,\n  ClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// CamundaClusterLabels.type - Values (constants)\nexport {\n  ALLOWED_CAMUNDA_LABELS,\n  StageClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// Chargebee.type - Types\nexport type { SubscriptionItem } from './types/Chargebee.type.js'\n// Chargebee.type - Values (enums)\nexport { ConsumptionData, ConsumptionDataType } from './types/Chargebee.type.js'\n// ClusterBulkOperation.type - Types\nexport type {\n  ClusterBulkOperationAck,\n  ClusterBulkOperationClusterDto,\n  ClusterBulkOperationContent,\n  ClusterBulkOperationDto,\n  ClusterBulkOperationGenerationUpdateParameter,\n  ClusterBulkOperationParameter,\n  ClusterBulkOperationPlanTypeUpdateParameter,\n  ClusterBulkOperationPlanUpdateParameter,\n  ClusterBulkOperationPostContent,\n  ClusterSleepWakeupParameter,\n} from './types/ClusterBulkOperation.type.js'\nexport type {\n  ClusterModificationConfigDto,\n  ClusterModificationDto,\n} from './types/ClusterModification.type.js'\n// ClusterPlanFields.type - Values (field spec and type guard)\nexport {\n  CLUSTER_PLAN_FIELDS,\n  type ClusterPlanFieldSpec,\n  type ClusterPlanFieldTree,\n  isClusterPlanFieldSpec,\n} from './types/ClusterPlanFields.type.js'\nexport type {\n  ClusterPlanModificationAck,\n  ClusterPlanModificationConfig,\n  ClusterPlanModificationDto,\n} from './types/ClusterPlanModification.type.js'\n// ClusterPlanTypeAvailabilityClass.type - Values (enum and function)\nexport {\n  ClusterPlanTypeAvailabilityClass,\n  hasNoAvailabilityClass,\n  sortByAvailabilityClasses,\n} from './types/ClusterPlanTypeAvailabilityClass.type.js'\n// ClusterPlanTypeCategory.type - Values (enum and functions)\nexport {\n  ClusterPlanTypeCategory,\n  hasAvailabilityClass,\n  sortByClusterPlanTypeCategory,\n} from './types/ClusterPlanTypeCategory.type.js'\nexport type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js'\nexport type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js'\nexport type {\n  ClusterUsageDataRequest,\n  ClusterUsageMetricsAddRequestByMetricHeap,\n  ClusterUsageMetricsData,\n  ClusterUsageMetricsFilter,\n  ClusterUsageOrgStartDate,\n} from './types/ClusterUsageMetrics.type.js'\n// Namespace with runtime values (consts, functions, enums)\nexport { ConsoleSM } from './types/ConsoleSelfManaged.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { ConsoleSMAdminApi } from './types/ConsoleSelfManagedAdminApi.type.js'\n// Dashboard.types - Types\nexport type {\n  DashboardConfig,\n  DashboardMappingItem,\n  DashboardMappingTarget,\n  DashboardResultPrimitive,\n  DashboardResultRow,\n  EngineeringOperationsDashboardResponse,\n} from './types/Dashboard.types.js'\nexport type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js'\nexport type {\n  HdpTenantUsageBreakdown,\n  HdpTenantUsagePerClusterPoint,\n  HdpTenantUsagePoint,\n} from './types/HdpTenantUsage.type.js'\n// hdp.types - Types (interfaces)\nexport type {\n  AlertSubscription as HdpAlertSubscription,\n  Audit as HdpAudit,\n  ByomClient as HdpByomClient,\n  Channel as HdpChannel,\n  Cluster as HdpCluster,\n  ClusterBackup as HdpClusterBackup,\n  ClusterBackupSchedule as HdpClusterBackupSchedule,\n  ClusterBulkOperation as HdpClusterBulkOperation,\n  ClusterClient as HdpClusterClient,\n  ClusterModification as HdpClusterModification,\n  ClusterPlan as HdpClusterPlan,\n  ClusterPlanType as HdpClusterPlanType,\n  ConnectorSecret as HdpConnectorSecret,\n  ConsoleApiClient as HdpConsoleApiClient,\n  Datacenter as HdpDatacenter,\n  Generation as HdpGeneration,\n  HdpBackendChangeEvent,\n  HdpClusterModificationConfig,\n  HdpEntity,\n  HdpPrometheusDataCapacityDataPoint,\n  Invite as HdpInvite,\n  LlmSpend as HdpLlmSpend,\n  Organization as HdpOrganization,\n  SecureConnectivity as HdpSecureConnectivity,\n  SystemAudit as HdpSystemAudit,\n  TelemetryData as HdpTelemetryData,\n  UsageAlert as HdpUsageAlert,\n  User as HdpUser,\n  UserLogin as HdpUserLogin,\n} from './types/hdp.types.js'\n// hdp.types - Values (enums)\nexport {\n  AlertSubscriptionReportType as HdpAlertSubscriptionReportType,\n  AlertSubscriptionType as HdpAlertSubscriptionType,\n} from './types/hdp.types.js'\n// notification.type - Types\nexport type {\n  GlobalNotification,\n  NotificationDto,\n  NotificationMeta,\n  NotificationOptions,\n  NotificationPermission,\n  NotificationSource,\n  NotificationState,\n  NotificationType,\n  OrgNotification,\n  UserNotification,\n  UserOrgNotification,\n} from './types/notification.type.js'\n// notification.type - Values (enums and constants)\nexport {\n  NotificationPermissionValues,\n  NotificationSourceEnum,\n  NotificationStateEnum,\n  NotificationTypeEnum,\n} from './types/notification.type.js'\n// OrganizationPermission.type - Types\nexport type {\n  CreateReadUpdateDelete,\n  OrganizationPermissions,\n} from './types/OrganizationPermission.type.js'\n// OrganizationPermission.type - Values (constants)\nexport {\n  OrganizationPermissionsDescriptions,\n  PermissionsForOrganizationRole,\n} from './types/OrganizationPermission.type.js'\n// Roles.js - Types\nexport type {\n  AccountRoles,\n  ConsoleRoles,\n  ModelerRoles,\n  Roles,\n} from './types/Roles.js'\n// Roles.js - Values (constants)\nexport { SAFE_ROLES } from './types/Roles.js'\n// SalesPlanType.type - Types\nexport type {\n  DisplayedSalesPlan,\n  RevisitedSalesPlanName,\n} from './types/SalesPlanType.type.js'\n// SalesPlanType.type - Values (enums and functions)\nexport {\n  AnalyticsSalesPlanType,\n  getAnalyticsSalesPlanFromOrgSalesPlan,\n  getDisplayedSalesPlan,\n  getRevisitedSalesPlanName,\n  OPTIMIZE_DISABLED_PLAN_TYPES,\n  SalesPlanType,\n} from './types/SalesPlanType.type.js'\n// SpamDetection.type - Types\nexport type { SpamDetectionPatterns } from './types/SpamDetection.type.js'\n// SpamDetection.type - Values (constants)\nexport { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js'\nexport type {\n  AlertSubscriptionSseEvent,\n  BackupSseEvent,\n  ClusterClientSseEvent,\n  ClusterSseEvent,\n  ConnectorSecretsSseEvent,\n  ConsoleApiClientSseEvent,\n  ConsoleSseEvent,\n  MonitoringSseEvent,\n  SecureConnectivitySseEvent,\n  SseClusterPayload,\n  SseMonitoringPayload,\n  SseSecureConnectivityPayload,\n} from './types/SseEvent.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { AccountsStats } from './types/Stats.types.js'\n// Survey.type - Types\nexport type { Persona, SurveyDto } from './types/Survey.type.js'\n// Survey.type - Values (enum)\nexport { FeedbackType } from './types/Survey.type.js'\n// SuspendStrategy.type - Types\nexport type {\n  GetSuspendStrategyOptions,\n  SuspendStrategy,\n} from './types/SuspendStrategy.type.js'\n// SuspendStrategy.type - Values (function)\nexport { getSuspendStrategy } from './types/SuspendStrategy.type.js'\nexport type { SystemAuditData } from './types/SystemAuditData.type.js'\n\n// Namespace (runtime value)\nexport { Telemetry } from './types/Telemetry.type.js'\n\n// TrialManagement.types - Types\nexport type {\n  ExtensionListItem,\n  ExtensionListResponse,\n  OrgTrialDetail,\n  TrialExtensionSource,\n  TrialManagementStats,\n} from './types/TrialManagement.types.js'\n\n// User.type - Types\nexport type {\n  AccountsData,\n  AppMetadata,\n  BasicUser,\n  BlockedFor,\n  Identity,\n  OrgMembership,\n  User,\n  UserMetadata,\n  UserRequest,\n} from './types/User.type.js'\n\n// User.type - Values (enum)\nexport { UserMetadataEvent } from './types/User.type.js'\n\nexport type {\n  UniqueTaskUser,\n  ValueMetrics,\n  ValueMetricsPerYearMonth,\n} from './types/ValueMetrics.type.js'\n\n// ============================================================================\n// Utils - Classes (runtime values)\n// ============================================================================\n\nexport {\n  CLOUD_PROVIDER_ORDER,\n  getCloudProviderLabel,\n  getCloudProviderRank,\n} from './utils/cloudProvider.utils.js'\nexport {\n  type ConnectivityStatus,\n  deriveConnectivityMessage,\n  deriveConnectivityStatus,\n} from './utils/connectivityStatus.utils.js'\nexport { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js'\nexport type {\n  CronScheduleValidationFailure,\n  CronScheduleValidationResult,\n  CronScheduleValidationSuccess,\n} from './utils/cronSchedule.utils.js'\nexport {\n  BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,\n  validateCronSchedule,\n} from './utils/cronSchedule.utils.js'\nexport {\n  deriveEncryptionStatus,\n  type EncryptionStatus,\n  isEncryptionStatus,\n} from './utils/encryptionStatus.utils.js'\n// enterprise-connection.utils - Types\nexport type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js'\n// enterprise-connection.utils - Values (functions)\nexport {\n  enterpriseConnectionMetadataToOrganizationAssignments,\n  organizationAssignmentsToEnterpriseConnectionMetadata,\n} from './utils/enterprise-connection.utils.js'\nexport {\n  addMonthsClamped,\n  DEFAULT_ENTERPRISE_DURATION_IN_MONTHS,\n  diffInWholeMonths,\n  type EnterpriseTermWindow,\n  getCurrentEnterpriseTerm,\n  peakWithinTerm,\n  toUtcDayStartMs,\n} from './utils/enterpriseTerm.utils.js'\nexport type { EnvVarEntry } from './utils/envVars.js'\nexport { parseEnvVars, serializeEnvVars } from './utils/envVars.js'\nexport {\n  deriveFailoverKeyPolicyPrincipals,\n  type FailoverKeyPolicyPrincipals,\n} from './utils/failoverKeyPolicy.utils.js'\nexport {\n  KMS_ARN,\n  KMS_MRK_ARN,\n  type KmsArnValidationError,\n  type ParsedKmsArn,\n  parseKmsArn,\n  validateKmsArnForRegion,\n} from './utils/kmsArn.utils.js'\nexport { validateLabels } from './utils/labelValidator.utils.js'\nexport { ObjectMergeUtils } from './utils/objectMerge.utils.js'\nexport {\n  computeOrgStartDate,\n  type OrgStartDateInput,\n} from './utils/orgStartDate.utils.js'\nexport {\n  getPermissionsByRoles,\n  getUserPermissionsForOrg,\n} from './utils/orgs/OrgHelper.js'\n\n// PasswordPolicy - Types\nexport type {\n  PasswordPolicyRequest,\n  PasswordPolicyResult,\n} from './utils/PasswordPolicy.js'\n\n// PasswordPolicy - Values (constants and function)\nexport {\n  MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,\n  MINLENGTH as PASSWORD_POLICY_MINLENGTH,\n  passwordPolicyCheck,\n} from './utils/PasswordPolicy.js'\n\nexport {\n  deriveSecondaryStorageStatus,\n  type SecondaryStorageStatus,\n} from './utils/secondaryStorageStatus.utils.js'\n\nexport {\n  allSettledResultsCounts,\n  getFulfilledPromises,\n  getRejectedPromises,\n  getSettledSummary,\n} from './utils/settledPromises.util.js'\n\nexport {\n  isValidAwsArn,\n  isValidCIDR,\n  isValidCIDRList,\n  isValidClientName,\n  isValidHostname,\n  isValidPrivateLinkRegion,\n  normalizeCIDRList,\n} from './utils/string-validation.utils.js'\nexport {\n  extractCamundaUserEmail,\n  guessName,\n  isCamundaUserId,\n} from './utils/user.utils.js'\n\n// versionCheck.utils - Values (enum and function)\nexport {\n  checkVersion,\n  isAppIntegrationsVersionSupported,\n  isGenerationResumable,\n  isSecretsFilterModeConfigurable,\n  isValidGenerationImage,\n  normalizeGenerationVersion,\n  stripSecfixPostfix,\n  VersionCheckOperator,\n} from './utils/versionCheck.utils.js'\n\n// ============================================================================\n// Config - Configuration files and types\n// ============================================================================\n\nexport { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js'\nexport type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js'\n\nexport {\n  augmentCamundiPermissions,\n  getApplicableRolesForEmployee,\n  HIBOB_CACHE_KEY,\n  HIBOB_CACHE_NAMESPACE,\n  isManager,\n} from './utils/camundiPermissionAugmenter.utils.js'\n"],
+  "mappings": "AAUA,SAAS,KAAK,MAAM,QAAQ,QAAQ,YAAY;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,iDAAiD;AAK1D,SAAS,wCAAwC;AACjD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAUP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAYP,SAAS,6BAA6B;AAYtC,SAAS,uCAAuC;AAwDhD;AAAA,EACE;AAAA,EAGA;AAAA,OAEK;AAmBP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAoBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EAEE;AAAA,EACA;AAAA,EAGA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,OAQK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,4BAA4B;AAClD,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC;AAC3C,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,eAAe;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AAC5C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAOxC,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AAazC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,SAAS,iBAAiB,2BAA2B;AAmBrD;AAAA,EACE;AAAA,EAGA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,SAAS,iBAAiB;AAmD1B;AAAA,EACiC,+BAA/BA;AAAA,EACyB,yBAAzBC;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB;AAO3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,0BAA0B;AAoBnC,SAAS,oBAAoB;AAO7B,SAAS,0BAA0B;AAInC,SAAS,iBAAiB;AAyB1B,SAAS,yBAAyB;AAYlC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAMxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,cAAc,wBAAwB;AAC/C;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACe;AAAA,EACA;AAAA,EACb;AAAA,OACK;AAEP;AAAA,EACE;AAAA,OAEK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,SAAoB,WAAXC,gBAA2C;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
   "names": ["AlertSubscriptionReportType", "AlertSubscriptionType", "default"]
 }

package/dist/permissions/combo.js

@@ -248,6 +248,9 @@ function consoleUserFeaturesFromPermissions(permissions) {
       ),
       canUpgradeGenerationYolo: permissions.includes(
         ConsolePermissions.CLUSTERS_CAN_UPDATE_GENERATION_YOLO
+      ),
+      canUpdateOptionalTelemetry: permissions.includes(
+        ConsolePermissions.CLUSTERS_CAN_UPDATE_OPTIONAL_TELEMETRY
       )
     },
     clusterPlan: {

package/dist/permissions/combo.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/permissions/combo.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { AccountsPermissions } from './accounts.permissions.js'\nimport { AuditLoggerPermissions } from './auditlogger.permissions.js'\nimport { ConsolePermissions } from './console.permissions.js'\nimport { NotificationPermissions } from './notification.permissions.js'\n\nexport function accountsUserFeaturesFromPermissions(permissions: string[]) {\n  const newFeatures: AccountsPermissions.Features = {\n    admin: {\n      readAll: permissions.includes(AccountsPermissions.READ_ALL),\n      createOrg: permissions.includes(AccountsPermissions.CREATE_ORG),\n      changeOrgName: permissions.includes(AccountsPermissions.CHANGE_ORG_NAME),\n\n      deleteOrg: permissions.includes(AccountsPermissions.DELETE_ORG),\n      resetTokenVerification: permissions.includes(\n        AccountsPermissions.RESET_TOKEN_VERIFICATION,\n      ),\n      deleteUser: permissions.includes(AccountsPermissions.DELETE_USER),\n      deleteNotActivatedUser: permissions.includes(\n        AccountsPermissions.DELETE_NOT_ACTIVATED_USER,\n      ),\n      addToOrg: permissions.includes(AccountsPermissions.ADD_TO_ORG),\n      removeFromOrg: permissions.includes(AccountsPermissions.REMOVE_FROM_ORG),\n      setDefaultOrg: permissions.includes(AccountsPermissions.SET_DEFAULT_ORG),\n      cancelInvite: permissions.includes(AccountsPermissions.CANCEL_INVITE),\n      changeRole: permissions.includes(AccountsPermissions.CHANGE_ROLE),\n      addSafeRole: permissions.includes(AccountsPermissions.CHANGE_SAFE_ROLE),\n      deleteClusters: permissions.includes(\n        ConsolePermissions.CLUSTERS_DELETE_CLUSTER,\n      ),\n      extendTrial: permissions.includes(AccountsPermissions.EXTEND_TRIAL),\n      invalidateToken: permissions.includes(\n        AccountsPermissions.INVALIDATE_TOKEN,\n      ),\n      cancelPaid: permissions.includes(AccountsPermissions.ORG_CANCEL_PAID),\n      searchForOrgs: permissions.includes(\n        ConsolePermissions.CLUSTER_PLAN_SEE_ALL,\n      ),\n      readAudit: permissions.includes(AuditLoggerPermissions.READ),\n      modifyClusterPlanTypeReservations: permissions.includes(\n        AccountsPermissions.MODIFY_CLUSTER_PLAN_TYPE_RESERVATIONS,\n      ),\n      mayChangeOrgLimits: permissions.includes(\n        AccountsPermissions.ORG_MAY_CHANGE_LIMITS,\n      ),\n      mayChangeGenerationWhiteList: permissions.includes(\n        AccountsPermissions.ORG_MAY_CHANGE_GENERATION_WHITELIST,\n      ),\n      sql: permissions.includes(AccountsPermissions.ADMIN_SQL),\n      modelerDeleteUser: permissions.includes(\n        AccountsPermissions.MODELER_DELETE_USER,\n      ),\n      unblockUser: permissions.includes(AccountsPermissions.UNBLOCK_USER),\n      god: {\n        triggerCrons: permissions.includes(AccountsPermissions.GOD_CRON),\n        forceSalesPlanOnOrg: permissions.includes(\n          AccountsPermissions.FORCE_SALES_PLAN_ON_ORG,\n        ),\n        changeSignupSpamPatterns: permissions.includes(\n          AccountsPermissions.GOD_SIGNUP_SPAM_PATTERNS,\n        ),\n        purgeUsers: permissions.includes(AccountsPermissions.GOD_PURGE_USERS),\n        updateUserMetadata: permissions.includes(\n          AccountsPermissions.GOD_UPDATE_USER_METADATA,\n        ),\n      },\n      bot: permissions.includes(AccountsPermissions.BOT),\n      changeEmail: permissions.includes(AccountsPermissions.ADMIN_CHANGE_EMAIL),\n      changeUserName: permissions.includes(\n        AccountsPermissions.ADMIN_CHANGE_USER_NAME,\n      ),\n    },\n    salesPlan: {\n      create: permissions.includes(AccountsPermissions.SALES_PLAN_CREATE),\n      modify: permissions.includes(AccountsPermissions.SALES_PLAN_MODIFY),\n      forceModify: permissions.includes(\n        AccountsPermissions.SALES_PLAN_FORCE_MODIFY,\n      ),\n      switch: permissions.includes(AccountsPermissions.SALES_PLAN_SWITCH),\n      delete: permissions.includes(AccountsPermissions.SALES_PLAN_DELETE),\n      godDelete: permissions.includes(\n        AccountsPermissions.SALES_PLAN_DELETE_AS_GOD,\n      ),\n    },\n    enterprise: {\n      org: {\n        convert: permissions.includes(\n          AccountsPermissions.ENTERPRISE_ORG_CONVERT,\n        ),\n        modify: permissions.includes(AccountsPermissions.ENTERPRISE_ORG_MODIFY),\n        modifyStartDate: permissions.includes(\n          AccountsPermissions.ENTERPRISE_ORG_MODIFY_START_DATE,\n        ),\n      },\n    },\n    trial: {\n      convertToInNegotiation: permissions.includes(\n        AccountsPermissions.TRIAL_TO_IN_NEGOTIATION_CONVERT,\n      ),\n    },\n    supportAgent: {\n      removeAgentsFromOrg: permissions.includes(\n        AccountsPermissions.SUPPORT_AGENT_REMOVE_AGENTS_FROM_ORG,\n      ),\n      seeOrgMemberships: permissions.includes(\n        AccountsPermissions.SUPPORT_AGENT_SEE_ORG_MEMBERSHIPS,\n      ),\n      addAgentsToOrg: permissions.includes(\n        AccountsPermissions.SUPPORT_AGENT_ADD_TO_ORG,\n      ),\n    },\n    m2m: {\n      salesplan: {\n        get: permissions.includes(AccountsPermissions.M2M_SALESPLAN_GET),\n        switch: permissions.includes(AccountsPermissions.M2M_SALESPLAN_SWITCH),\n      },\n      fetchMigrationData: permissions.includes(\n        ConsolePermissions.M2M_FETCH_MIGRATION_DATA,\n      ),\n    },\n    externalM2m: {\n      org: {\n        members: {\n          get: permissions.includes(\n            AccountsPermissions.EXTERNAL_M2M_GET_ORG_MEMBERS,\n          ),\n        },\n        search: permissions.includes(\n          AccountsPermissions.EXTERNAL_M2M_SEARCH_ORGS,\n        ),\n      },\n      // eslint-disable-next-line id-length\n      qa: {\n        org: {\n          create: permissions.includes(\n            AccountsPermissions.EXTERNAL_M2M_QA_ORG_CREATE,\n          ),\n        },\n      },\n      offboarding: {\n        camundi: permissions.includes(\n          AccountsPermissions.EXTERNAL_M2M_OFFBOARD_CAMUNDI,\n        ),\n      },\n    },\n    auth0: {\n      connections: {\n        create: permissions.includes(\n          AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_CREATE,\n        ),\n        read: permissions.includes(\n          AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_READ,\n        ),\n        update: permissions.includes(\n          AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_UPDATE,\n        ),\n        delete: permissions.includes(\n          AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_DELETE,\n        ),\n      },\n    },\n    notifications: {\n      global: {\n        read: permissions.includes(NotificationPermissions.READ_GLOBAL),\n        delete: permissions.includes(NotificationPermissions.DELETE_GLOBAL),\n        create: permissions.includes(NotificationPermissions.CREATE_GLOBAL),\n      },\n    },\n    earlyAccessFeatures: {\n      read: permissions.includes(\n        AccountsPermissions.ADMIN_EARLY_ACCESS_FEATURES_READ,\n      ),\n      create: permissions.includes(\n        AccountsPermissions.ADMIN_EARLY_ACCESS_FEATURES_CREATE,\n      ),\n      delete: permissions.includes(\n        AccountsPermissions.ADMIN_EARLY_ACCESS_FEATURES_DELETE,\n      ),\n      update: permissions.includes(\n        AccountsPermissions.ADMIN_EARLY_ACCESS_FEATURES_UPDATE,\n      ),\n    },\n    pdfWatermark: {\n      read: permissions.includes(AccountsPermissions.PDF_WATERMARK_READ),\n      write: permissions.includes(AccountsPermissions.PDF_WATERMARK_WRITE),\n    },\n  }\n  return newFeatures\n}\n\nexport function consoleUserFeaturesFromPermissions(permissions: string[]) {\n  const newFeatures: ConsolePermissions.Features = {\n    apiClient: {\n      read: permissions.includes(ConsolePermissions.APICLIENT_READ),\n      delete: permissions.includes(ConsolePermissions.APICLIENT_DELETE),\n    },\n    multiCluster: {\n      admin: permissions.includes(ConsolePermissions.MULTICLUSTER_ADMIN),\n    },\n    multiGen: {\n      admin: {\n        see: permissions.includes(\n          ConsolePermissions.CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n        ),\n        modify: permissions.includes(\n          ConsolePermissions.CHANNELS_AND_GENERATIONS_ADMIN,\n        ),\n        patchExistingChannel: permissions.includes(\n          ConsolePermissions.CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL,\n        ),\n        migrate: permissions.includes(\n          ConsolePermissions.CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n        ),\n        deleteAllClustersOfGeneration: permissions.includes(\n          ConsolePermissions.CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS,\n        ),\n      },\n      releaseTrain: {\n        publish: permissions.includes(ConsolePermissions.RELEASE_TRAIN_PUBLISH),\n      },\n    },\n    clusters: {\n      canReadAllClusterInfo: permissions.includes(\n        ConsolePermissions.CLUSTERS_READALLCLUSTERINFO,\n      ),\n      canDeleteAllClusters: permissions.includes(\n        ConsolePermissions.CLUSTERS_DELETE_CLUSTER,\n      ),\n      canMoveToOtherOrg: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_MOVE_TO_OTHER_ORG,\n      ),\n      createOnBehalf: permissions.includes(\n        ConsolePermissions.CLUSTER_CREATE_ON_BEHALF,\n      ),\n      canSendToSleep: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_SEND_TO_SLEEP,\n      ),\n      canCreateInternalBackup: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_CREATE_INTERNAL_BACKUP,\n      ),\n      canUpdateClusterPlanType: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n      ),\n      canOverrideEnvVars: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_OVERRIDE_ENV_VARS,\n      ),\n      canCreateModificationConfig: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_CREATE_MODIFICATION_CONFIG,\n      ),\n      canUpgradeGeneration: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_UPDATE_GENERATION,\n      ),\n      canUpgradeGenerationYolo: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_UPDATE_GENERATION_YOLO,\n      ),\n    },\n    clusterPlan: {\n      seeAll: permissions.includes(ConsolePermissions.CLUSTER_PLAN_SEE_ALL),\n      create: permissions.includes(ConsolePermissions.CLUSTER_PLAN_CREATE),\n      delete: permissions.includes(ConsolePermissions.CLUSTER_PLAN_DELETE),\n      type: {\n        create: permissions.includes(\n          ConsolePermissions.CLUSTER_PLAN_TYPE_CREATE,\n        ),\n        modify: permissions.includes(\n          ConsolePermissions.CLUSTER_PLAN_TYPE_MODIFY,\n        ),\n        delete: permissions.includes(\n          ConsolePermissions.CLUSTER_PLAN_TYPE_DELETE,\n        ),\n        forceDelete: permissions.includes(\n          ConsolePermissions.CLUSTER_PLAN_TYPE_FORCE_DELETE,\n        ),\n      },\n      migrate: permissions.includes(ConsolePermissions.CLUSTER_PLAN_MIGRATE),\n      deleteAllClustersOfPlan: permissions.includes(\n        ConsolePermissions.CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN,\n      ),\n      modify: permissions.includes(ConsolePermissions.CLUSTER_PLAN_CAN_MODIFY),\n    },\n    features: {\n      newHome: permissions.includes(ConsolePermissions.FEATURE_NEW_HOME),\n      templatePicker: permissions.includes(\n        ConsolePermissions.FEATURE_TEMPLATE_PICKER,\n      ),\n      userSettings: permissions.includes(ConsolePermissions.USER_SETTINGS),\n      debug: permissions.includes(ConsolePermissions.DEBUG),\n    },\n    m2m: {\n      updateCrd: permissions.includes(ConsolePermissions.M2M_UPDATE_CRD),\n      signup: permissions.includes(ConsolePermissions.M2M_SIGNUP),\n      triggerAlert: permissions.includes(ConsolePermissions.M2M_TRIGGER_ALERT),\n      deleteOrgClusters: permissions.includes(\n        ConsolePermissions.M2M_DELETE_ORG_CLUSTERS,\n      ),\n      updateOrgClusters: permissions.includes(\n        ConsolePermissions.M2M_UPDATE_ORG_CLUSTERS,\n      ),\n      addUsageMetrics: permissions.includes(\n        ConsolePermissions.M2M_ADD_CLUSTER_USAGE_METRICS,\n      ),\n      sendSseEvent: permissions.includes(ConsolePermissions.M2M_SEND_SSE_EVENT),\n      external: {\n        internalClient: permissions.includes(\n          ConsolePermissions.M2M_EXTERNAL_INTERNAL_CLIENT,\n        ),\n      },\n      fetchMigrationData: permissions.includes(\n        ConsolePermissions.M2M_FETCH_MIGRATION_DATA,\n      ),\n      manageGenerationUpgradePath: permissions.includes(\n        ConsolePermissions.M2M_MANAGE_GENERATION_UPGRADE_PATH,\n      ),\n    },\n  }\n  return newFeatures\n}\n"],
-  "mappings": "AAMA,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAEjC,SAAS,oCAAoC,aAAuB;AACzE,QAAM,cAA4C;AAAA,IAChD,OAAO;AAAA,MACL,SAAS,YAAY,SAAS,oBAAoB,QAAQ;AAAA,MAC1D,WAAW,YAAY,SAAS,oBAAoB,UAAU;AAAA,MAC9D,eAAe,YAAY,SAAS,oBAAoB,eAAe;AAAA,MAEvE,WAAW,YAAY,SAAS,oBAAoB,UAAU;AAAA,MAC9D,wBAAwB,YAAY;AAAA,QAClC,oBAAoB;AAAA,MACtB;AAAA,MACA,YAAY,YAAY,SAAS,oBAAoB,WAAW;AAAA,MAChE,wBAAwB,YAAY;AAAA,QAClC,oBAAoB;AAAA,MACtB;AAAA,MACA,UAAU,YAAY,SAAS,oBAAoB,UAAU;AAAA,MAC7D,eAAe,YAAY,SAAS,oBAAoB,eAAe;AAAA,MACvE,eAAe,YAAY,SAAS,oBAAoB,eAAe;AAAA,MACvE,cAAc,YAAY,SAAS,oBAAoB,aAAa;AAAA,MACpE,YAAY,YAAY,SAAS,oBAAoB,WAAW;AAAA,MAChE,aAAa,YAAY,SAAS,oBAAoB,gBAAgB;AAAA,MACtE,gBAAgB,YAAY;AAAA,QAC1B,mBAAmB;AAAA,MACrB;AAAA,MACA,aAAa,YAAY,SAAS,oBAAoB,YAAY;AAAA,MAClE,iBAAiB,YAAY;AAAA,QAC3B,oBAAoB;AAAA,MACtB;AAAA,MACA,YAAY,YAAY,SAAS,oBAAoB,eAAe;AAAA,MACpE,eAAe,YAAY;AAAA,QACzB,mBAAmB;AAAA,MACrB;AAAA,MACA,WAAW,YAAY,SAAS,uBAAuB,IAAI;AAAA,MAC3D,mCAAmC,YAAY;AAAA,QAC7C,oBAAoB;AAAA,MACtB;AAAA,MACA,oBAAoB,YAAY;AAAA,QAC9B,oBAAoB;AAAA,MACtB;AAAA,MACA,8BAA8B,YAAY;AAAA,QACxC,oBAAoB;AAAA,MACtB;AAAA,MACA,KAAK,YAAY,SAAS,oBAAoB,SAAS;AAAA,MACvD,mBAAmB,YAAY;AAAA,QAC7B,oBAAoB;AAAA,MACtB;AAAA,MACA,aAAa,YAAY,SAAS,oBAAoB,YAAY;AAAA,MAClE,KAAK;AAAA,QACH,cAAc,YAAY,SAAS,oBAAoB,QAAQ;AAAA,QAC/D,qBAAqB,YAAY;AAAA,UAC/B,oBAAoB;AAAA,QACtB;AAAA,QACA,0BAA0B,YAAY;AAAA,UACpC,oBAAoB;AAAA,QACtB;AAAA,QACA,YAAY,YAAY,SAAS,oBAAoB,eAAe;AAAA,QACpE,oBAAoB,YAAY;AAAA,UAC9B,oBAAoB;AAAA,QACtB;AAAA,MACF;AAAA,MACA,KAAK,YAAY,SAAS,oBAAoB,GAAG;AAAA,MACjD,aAAa,YAAY,SAAS,oBAAoB,kBAAkB;AAAA,MACxE,gBAAgB,YAAY;AAAA,QAC1B,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,QAAQ,YAAY,SAAS,oBAAoB,iBAAiB;AAAA,MAClE,QAAQ,YAAY,SAAS,oBAAoB,iBAAiB;AAAA,MAClE,aAAa,YAAY;AAAA,QACvB,oBAAoB;AAAA,MACtB;AAAA,MACA,QAAQ,YAAY,SAAS,oBAAoB,iBAAiB;AAAA,MAClE,QAAQ,YAAY,SAAS,oBAAoB,iBAAiB;AAAA,MAClE,WAAW,YAAY;AAAA,QACrB,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,IACA,YAAY;AAAA,MACV,KAAK;AAAA,QACH,SAAS,YAAY;AAAA,UACnB,oBAAoB;AAAA,QACtB;AAAA,QACA,QAAQ,YAAY,SAAS,oBAAoB,qBAAqB;AAAA,QACtE,iBAAiB,YAAY;AAAA,UAC3B,oBAAoB;AAAA,QACtB;AAAA,MACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,wBAAwB,YAAY;AAAA,QAClC,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,qBAAqB,YAAY;AAAA,QAC/B,oBAAoB;AAAA,MACtB;AAAA,MACA,mBAAmB,YAAY;AAAA,QAC7B,oBAAoB;AAAA,MACtB;AAAA,MACA,gBAAgB,YAAY;AAAA,QAC1B,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,WAAW;AAAA,QACT,KAAK,YAAY,SAAS,oBAAoB,iBAAiB;AAAA,QAC/D,QAAQ,YAAY,SAAS,oBAAoB,oBAAoB;AAAA,MACvE;AAAA,MACA,oBAAoB,YAAY;AAAA,QAC9B,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,IACA,aAAa;AAAA,MACX,KAAK;AAAA,QACH,SAAS;AAAA,UACP,KAAK,YAAY;AAAA,YACf,oBAAoB;AAAA,UACtB;AAAA,QACF;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,oBAAoB;AAAA,QACtB;AAAA,MACF;AAAA;AAAA,MAEA,IAAI;AAAA,QACF,KAAK;AAAA,UACH,QAAQ,YAAY;AAAA,YAClB,oBAAoB;AAAA,UACtB;AAAA,QACF;AAAA,MACF;AAAA,MACA,aAAa;AAAA,QACX,SAAS,YAAY;AAAA,UACnB,oBAAoB;AAAA,QACtB;AAAA,MACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,aAAa;AAAA,QACX,QAAQ,YAAY;AAAA,UAClB,oBAAoB;AAAA,QACtB;AAAA,QACA,MAAM,YAAY;AAAA,UAChB,oBAAoB;AAAA,QACtB;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,oBAAoB;AAAA,QACtB;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,oBAAoB;AAAA,QACtB;AAAA,MACF;AAAA,IACF;AAAA,IACA,eAAe;AAAA,MACb,QAAQ;AAAA,QACN,MAAM,YAAY,SAAS,wBAAwB,WAAW;AAAA,QAC9D,QAAQ,YAAY,SAAS,wBAAwB,aAAa;AAAA,QAClE,QAAQ,YAAY,SAAS,wBAAwB,aAAa;AAAA,MACpE;AAAA,IACF;AAAA,IACA,qBAAqB;AAAA,MACnB,MAAM,YAAY;AAAA,QAChB,oBAAoB;AAAA,MACtB;AAAA,MACA,QAAQ,YAAY;AAAA,QAClB,oBAAoB;AAAA,MACtB;AAAA,MACA,QAAQ,YAAY;AAAA,QAClB,oBAAoB;AAAA,MACtB;AAAA,MACA,QAAQ,YAAY;AAAA,QAClB,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,MAAM,YAAY,SAAS,oBAAoB,kBAAkB;AAAA,MACjE,OAAO,YAAY,SAAS,oBAAoB,mBAAmB;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,mCAAmC,aAAuB;AACxE,QAAM,cAA2C;AAAA,IAC/C,WAAW;AAAA,MACT,MAAM,YAAY,SAAS,mBAAmB,cAAc;AAAA,MAC5D,QAAQ,YAAY,SAAS,mBAAmB,gBAAgB;AAAA,IAClE;AAAA,IACA,cAAc;AAAA,MACZ,OAAO,YAAY,SAAS,mBAAmB,kBAAkB;AAAA,IACnE;AAAA,IACA,UAAU;AAAA,MACR,OAAO;AAAA,QACL,KAAK,YAAY;AAAA,UACf,mBAAmB;AAAA,QACrB;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,mBAAmB;AAAA,QACrB;AAAA,QACA,sBAAsB,YAAY;AAAA,UAChC,mBAAmB;AAAA,QACrB;AAAA,QACA,SAAS,YAAY;AAAA,UACnB,mBAAmB;AAAA,QACrB;AAAA,QACA,+BAA+B,YAAY;AAAA,UACzC,mBAAmB;AAAA,QACrB;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,SAAS,YAAY,SAAS,mBAAmB,qBAAqB;AAAA,MACxE;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,uBAAuB,YAAY;AAAA,QACjC,mBAAmB;AAAA,MACrB;AAAA,MACA,sBAAsB,YAAY;AAAA,QAChC,mBAAmB;AAAA,MACrB;AAAA,MACA,mBAAmB,YAAY;AAAA,QAC7B,mBAAmB;AAAA,MACrB;AAAA,MACA,gBAAgB,YAAY;AAAA,QAC1B,mBAAmB;AAAA,MACrB;AAAA,MACA,gBAAgB,YAAY;AAAA,QAC1B,mBAAmB;AAAA,MACrB;AAAA,MACA,yBAAyB,YAAY;AAAA,QACnC,mBAAmB;AAAA,MACrB;AAAA,MACA,0BAA0B,YAAY;AAAA,QACpC,mBAAmB;AAAA,MACrB;AAAA,MACA,oBAAoB,YAAY;AAAA,QAC9B,mBAAmB;AAAA,MACrB;AAAA,MACA,6BAA6B,YAAY;AAAA,QACvC,mBAAmB;AAAA,MACrB;AAAA,MACA,sBAAsB,YAAY;AAAA,QAChC,mBAAmB;AAAA,MACrB;AAAA,MACA,0BAA0B,YAAY;AAAA,QACpC,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,IACA,aAAa;AAAA,MACX,QAAQ,YAAY,SAAS,mBAAmB,oBAAoB;AAAA,MACpE,QAAQ,YAAY,SAAS,mBAAmB,mBAAmB;AAAA,MACnE,QAAQ,YAAY,SAAS,mBAAmB,mBAAmB;AAAA,MACnE,MAAM;AAAA,QACJ,QAAQ,YAAY;AAAA,UAClB,mBAAmB;AAAA,QACrB;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,mBAAmB;AAAA,QACrB;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,mBAAmB;AAAA,QACrB;AAAA,QACA,aAAa,YAAY;AAAA,UACvB,mBAAmB;AAAA,QACrB;AAAA,MACF;AAAA,MACA,SAAS,YAAY,SAAS,mBAAmB,oBAAoB;AAAA,MACrE,yBAAyB,YAAY;AAAA,QACnC,mBAAmB;AAAA,MACrB;AAAA,MACA,QAAQ,YAAY,SAAS,mBAAmB,uBAAuB;AAAA,IACzE;AAAA,IACA,UAAU;AAAA,MACR,SAAS,YAAY,SAAS,mBAAmB,gBAAgB;AAAA,MACjE,gBAAgB,YAAY;AAAA,QAC1B,mBAAmB;AAAA,MACrB;AAAA,MACA,cAAc,YAAY,SAAS,mBAAmB,aAAa;AAAA,MACnE,OAAO,YAAY,SAAS,mBAAmB,KAAK;AAAA,IACtD;AAAA,IACA,KAAK;AAAA,MACH,WAAW,YAAY,SAAS,mBAAmB,cAAc;AAAA,MACjE,QAAQ,YAAY,SAAS,mBAAmB,UAAU;AAAA,MAC1D,cAAc,YAAY,SAAS,mBAAmB,iBAAiB;AAAA,MACvE,mBAAmB,YAAY;AAAA,QAC7B,mBAAmB;AAAA,MACrB;AAAA,MACA,mBAAmB,YAAY;AAAA,QAC7B,mBAAmB;AAAA,MACrB;AAAA,MACA,iBAAiB,YAAY;AAAA,QAC3B,mBAAmB;AAAA,MACrB;AAAA,MACA,cAAc,YAAY,SAAS,mBAAmB,kBAAkB;AAAA,MACxE,UAAU;AAAA,QACR,gBAAgB,YAAY;AAAA,UAC1B,mBAAmB;AAAA,QACrB;AAAA,MACF;AAAA,MACA,oBAAoB,YAAY;AAAA,QAC9B,mBAAmB;AAAA,MACrB;AAAA,MACA,6BAA6B,YAAY;AAAA,QACvC,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { AccountsPermissions } from './accounts.permissions.js'\nimport { AuditLoggerPermissions } from './auditlogger.permissions.js'\nimport { ConsolePermissions } from './console.permissions.js'\nimport { NotificationPermissions } from './notification.permissions.js'\n\nexport function accountsUserFeaturesFromPermissions(permissions: string[]) {\n  const newFeatures: AccountsPermissions.Features = {\n    admin: {\n      readAll: permissions.includes(AccountsPermissions.READ_ALL),\n      createOrg: permissions.includes(AccountsPermissions.CREATE_ORG),\n      changeOrgName: permissions.includes(AccountsPermissions.CHANGE_ORG_NAME),\n\n      deleteOrg: permissions.includes(AccountsPermissions.DELETE_ORG),\n      resetTokenVerification: permissions.includes(\n        AccountsPermissions.RESET_TOKEN_VERIFICATION,\n      ),\n      deleteUser: permissions.includes(AccountsPermissions.DELETE_USER),\n      deleteNotActivatedUser: permissions.includes(\n        AccountsPermissions.DELETE_NOT_ACTIVATED_USER,\n      ),\n      addToOrg: permissions.includes(AccountsPermissions.ADD_TO_ORG),\n      removeFromOrg: permissions.includes(AccountsPermissions.REMOVE_FROM_ORG),\n      setDefaultOrg: permissions.includes(AccountsPermissions.SET_DEFAULT_ORG),\n      cancelInvite: permissions.includes(AccountsPermissions.CANCEL_INVITE),\n      changeRole: permissions.includes(AccountsPermissions.CHANGE_ROLE),\n      addSafeRole: permissions.includes(AccountsPermissions.CHANGE_SAFE_ROLE),\n      deleteClusters: permissions.includes(\n        ConsolePermissions.CLUSTERS_DELETE_CLUSTER,\n      ),\n      extendTrial: permissions.includes(AccountsPermissions.EXTEND_TRIAL),\n      invalidateToken: permissions.includes(\n        AccountsPermissions.INVALIDATE_TOKEN,\n      ),\n      cancelPaid: permissions.includes(AccountsPermissions.ORG_CANCEL_PAID),\n      searchForOrgs: permissions.includes(\n        ConsolePermissions.CLUSTER_PLAN_SEE_ALL,\n      ),\n      readAudit: permissions.includes(AuditLoggerPermissions.READ),\n      modifyClusterPlanTypeReservations: permissions.includes(\n        AccountsPermissions.MODIFY_CLUSTER_PLAN_TYPE_RESERVATIONS,\n      ),\n      mayChangeOrgLimits: permissions.includes(\n        AccountsPermissions.ORG_MAY_CHANGE_LIMITS,\n      ),\n      mayChangeGenerationWhiteList: permissions.includes(\n        AccountsPermissions.ORG_MAY_CHANGE_GENERATION_WHITELIST,\n      ),\n      sql: permissions.includes(AccountsPermissions.ADMIN_SQL),\n      modelerDeleteUser: permissions.includes(\n        AccountsPermissions.MODELER_DELETE_USER,\n      ),\n      unblockUser: permissions.includes(AccountsPermissions.UNBLOCK_USER),\n      god: {\n        triggerCrons: permissions.includes(AccountsPermissions.GOD_CRON),\n        forceSalesPlanOnOrg: permissions.includes(\n          AccountsPermissions.FORCE_SALES_PLAN_ON_ORG,\n        ),\n        changeSignupSpamPatterns: permissions.includes(\n          AccountsPermissions.GOD_SIGNUP_SPAM_PATTERNS,\n        ),\n        purgeUsers: permissions.includes(AccountsPermissions.GOD_PURGE_USERS),\n        updateUserMetadata: permissions.includes(\n          AccountsPermissions.GOD_UPDATE_USER_METADATA,\n        ),\n      },\n      bot: permissions.includes(AccountsPermissions.BOT),\n      changeEmail: permissions.includes(AccountsPermissions.ADMIN_CHANGE_EMAIL),\n      changeUserName: permissions.includes(\n        AccountsPermissions.ADMIN_CHANGE_USER_NAME,\n      ),\n    },\n    salesPlan: {\n      create: permissions.includes(AccountsPermissions.SALES_PLAN_CREATE),\n      modify: permissions.includes(AccountsPermissions.SALES_PLAN_MODIFY),\n      forceModify: permissions.includes(\n        AccountsPermissions.SALES_PLAN_FORCE_MODIFY,\n      ),\n      switch: permissions.includes(AccountsPermissions.SALES_PLAN_SWITCH),\n      delete: permissions.includes(AccountsPermissions.SALES_PLAN_DELETE),\n      godDelete: permissions.includes(\n        AccountsPermissions.SALES_PLAN_DELETE_AS_GOD,\n      ),\n    },\n    enterprise: {\n      org: {\n        convert: permissions.includes(\n          AccountsPermissions.ENTERPRISE_ORG_CONVERT,\n        ),\n        modify: permissions.includes(AccountsPermissions.ENTERPRISE_ORG_MODIFY),\n        modifyStartDate: permissions.includes(\n          AccountsPermissions.ENTERPRISE_ORG_MODIFY_START_DATE,\n        ),\n      },\n    },\n    trial: {\n      convertToInNegotiation: permissions.includes(\n        AccountsPermissions.TRIAL_TO_IN_NEGOTIATION_CONVERT,\n      ),\n    },\n    supportAgent: {\n      removeAgentsFromOrg: permissions.includes(\n        AccountsPermissions.SUPPORT_AGENT_REMOVE_AGENTS_FROM_ORG,\n      ),\n      seeOrgMemberships: permissions.includes(\n        AccountsPermissions.SUPPORT_AGENT_SEE_ORG_MEMBERSHIPS,\n      ),\n      addAgentsToOrg: permissions.includes(\n        AccountsPermissions.SUPPORT_AGENT_ADD_TO_ORG,\n      ),\n    },\n    m2m: {\n      salesplan: {\n        get: permissions.includes(AccountsPermissions.M2M_SALESPLAN_GET),\n        switch: permissions.includes(AccountsPermissions.M2M_SALESPLAN_SWITCH),\n      },\n      fetchMigrationData: permissions.includes(\n        ConsolePermissions.M2M_FETCH_MIGRATION_DATA,\n      ),\n    },\n    externalM2m: {\n      org: {\n        members: {\n          get: permissions.includes(\n            AccountsPermissions.EXTERNAL_M2M_GET_ORG_MEMBERS,\n          ),\n        },\n        search: permissions.includes(\n          AccountsPermissions.EXTERNAL_M2M_SEARCH_ORGS,\n        ),\n      },\n      // eslint-disable-next-line id-length\n      qa: {\n        org: {\n          create: permissions.includes(\n            AccountsPermissions.EXTERNAL_M2M_QA_ORG_CREATE,\n          ),\n        },\n      },\n      offboarding: {\n        camundi: permissions.includes(\n          AccountsPermissions.EXTERNAL_M2M_OFFBOARD_CAMUNDI,\n        ),\n      },\n    },\n    auth0: {\n      connections: {\n        create: permissions.includes(\n          AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_CREATE,\n        ),\n        read: permissions.includes(\n          AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_READ,\n        ),\n        update: permissions.includes(\n          AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_UPDATE,\n        ),\n        delete: permissions.includes(\n          AccountsPermissions.ADMIN_AUTH0_CONNECTIONS_DELETE,\n        ),\n      },\n    },\n    notifications: {\n      global: {\n        read: permissions.includes(NotificationPermissions.READ_GLOBAL),\n        delete: permissions.includes(NotificationPermissions.DELETE_GLOBAL),\n        create: permissions.includes(NotificationPermissions.CREATE_GLOBAL),\n      },\n    },\n    earlyAccessFeatures: {\n      read: permissions.includes(\n        AccountsPermissions.ADMIN_EARLY_ACCESS_FEATURES_READ,\n      ),\n      create: permissions.includes(\n        AccountsPermissions.ADMIN_EARLY_ACCESS_FEATURES_CREATE,\n      ),\n      delete: permissions.includes(\n        AccountsPermissions.ADMIN_EARLY_ACCESS_FEATURES_DELETE,\n      ),\n      update: permissions.includes(\n        AccountsPermissions.ADMIN_EARLY_ACCESS_FEATURES_UPDATE,\n      ),\n    },\n    pdfWatermark: {\n      read: permissions.includes(AccountsPermissions.PDF_WATERMARK_READ),\n      write: permissions.includes(AccountsPermissions.PDF_WATERMARK_WRITE),\n    },\n  }\n  return newFeatures\n}\n\nexport function consoleUserFeaturesFromPermissions(permissions: string[]) {\n  const newFeatures: ConsolePermissions.Features = {\n    apiClient: {\n      read: permissions.includes(ConsolePermissions.APICLIENT_READ),\n      delete: permissions.includes(ConsolePermissions.APICLIENT_DELETE),\n    },\n    multiCluster: {\n      admin: permissions.includes(ConsolePermissions.MULTICLUSTER_ADMIN),\n    },\n    multiGen: {\n      admin: {\n        see: permissions.includes(\n          ConsolePermissions.CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n        ),\n        modify: permissions.includes(\n          ConsolePermissions.CHANNELS_AND_GENERATIONS_ADMIN,\n        ),\n        patchExistingChannel: permissions.includes(\n          ConsolePermissions.CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL,\n        ),\n        migrate: permissions.includes(\n          ConsolePermissions.CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n        ),\n        deleteAllClustersOfGeneration: permissions.includes(\n          ConsolePermissions.CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS,\n        ),\n      },\n      releaseTrain: {\n        publish: permissions.includes(ConsolePermissions.RELEASE_TRAIN_PUBLISH),\n      },\n    },\n    clusters: {\n      canReadAllClusterInfo: permissions.includes(\n        ConsolePermissions.CLUSTERS_READALLCLUSTERINFO,\n      ),\n      canDeleteAllClusters: permissions.includes(\n        ConsolePermissions.CLUSTERS_DELETE_CLUSTER,\n      ),\n      canMoveToOtherOrg: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_MOVE_TO_OTHER_ORG,\n      ),\n      createOnBehalf: permissions.includes(\n        ConsolePermissions.CLUSTER_CREATE_ON_BEHALF,\n      ),\n      canSendToSleep: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_SEND_TO_SLEEP,\n      ),\n      canCreateInternalBackup: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_CREATE_INTERNAL_BACKUP,\n      ),\n      canUpdateClusterPlanType: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n      ),\n      canOverrideEnvVars: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_OVERRIDE_ENV_VARS,\n      ),\n      canCreateModificationConfig: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_CREATE_MODIFICATION_CONFIG,\n      ),\n      canUpgradeGeneration: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_UPDATE_GENERATION,\n      ),\n      canUpgradeGenerationYolo: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_UPDATE_GENERATION_YOLO,\n      ),\n      canUpdateOptionalTelemetry: permissions.includes(\n        ConsolePermissions.CLUSTERS_CAN_UPDATE_OPTIONAL_TELEMETRY,\n      ),\n    },\n    clusterPlan: {\n      seeAll: permissions.includes(ConsolePermissions.CLUSTER_PLAN_SEE_ALL),\n      create: permissions.includes(ConsolePermissions.CLUSTER_PLAN_CREATE),\n      delete: permissions.includes(ConsolePermissions.CLUSTER_PLAN_DELETE),\n      type: {\n        create: permissions.includes(\n          ConsolePermissions.CLUSTER_PLAN_TYPE_CREATE,\n        ),\n        modify: permissions.includes(\n          ConsolePermissions.CLUSTER_PLAN_TYPE_MODIFY,\n        ),\n        delete: permissions.includes(\n          ConsolePermissions.CLUSTER_PLAN_TYPE_DELETE,\n        ),\n        forceDelete: permissions.includes(\n          ConsolePermissions.CLUSTER_PLAN_TYPE_FORCE_DELETE,\n        ),\n      },\n      migrate: permissions.includes(ConsolePermissions.CLUSTER_PLAN_MIGRATE),\n      deleteAllClustersOfPlan: permissions.includes(\n        ConsolePermissions.CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN,\n      ),\n      modify: permissions.includes(ConsolePermissions.CLUSTER_PLAN_CAN_MODIFY),\n    },\n    features: {\n      newHome: permissions.includes(ConsolePermissions.FEATURE_NEW_HOME),\n      templatePicker: permissions.includes(\n        ConsolePermissions.FEATURE_TEMPLATE_PICKER,\n      ),\n      userSettings: permissions.includes(ConsolePermissions.USER_SETTINGS),\n      debug: permissions.includes(ConsolePermissions.DEBUG),\n    },\n    m2m: {\n      updateCrd: permissions.includes(ConsolePermissions.M2M_UPDATE_CRD),\n      signup: permissions.includes(ConsolePermissions.M2M_SIGNUP),\n      triggerAlert: permissions.includes(ConsolePermissions.M2M_TRIGGER_ALERT),\n      deleteOrgClusters: permissions.includes(\n        ConsolePermissions.M2M_DELETE_ORG_CLUSTERS,\n      ),\n      updateOrgClusters: permissions.includes(\n        ConsolePermissions.M2M_UPDATE_ORG_CLUSTERS,\n      ),\n      addUsageMetrics: permissions.includes(\n        ConsolePermissions.M2M_ADD_CLUSTER_USAGE_METRICS,\n      ),\n      sendSseEvent: permissions.includes(ConsolePermissions.M2M_SEND_SSE_EVENT),\n      external: {\n        internalClient: permissions.includes(\n          ConsolePermissions.M2M_EXTERNAL_INTERNAL_CLIENT,\n        ),\n      },\n      fetchMigrationData: permissions.includes(\n        ConsolePermissions.M2M_FETCH_MIGRATION_DATA,\n      ),\n      manageGenerationUpgradePath: permissions.includes(\n        ConsolePermissions.M2M_MANAGE_GENERATION_UPGRADE_PATH,\n      ),\n    },\n  }\n  return newFeatures\n}\n"],
+  "mappings": "AAMA,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAEjC,SAAS,oCAAoC,aAAuB;AACzE,QAAM,cAA4C;AAAA,IAChD,OAAO;AAAA,MACL,SAAS,YAAY,SAAS,oBAAoB,QAAQ;AAAA,MAC1D,WAAW,YAAY,SAAS,oBAAoB,UAAU;AAAA,MAC9D,eAAe,YAAY,SAAS,oBAAoB,eAAe;AAAA,MAEvE,WAAW,YAAY,SAAS,oBAAoB,UAAU;AAAA,MAC9D,wBAAwB,YAAY;AAAA,QAClC,oBAAoB;AAAA,MACtB;AAAA,MACA,YAAY,YAAY,SAAS,oBAAoB,WAAW;AAAA,MAChE,wBAAwB,YAAY;AAAA,QAClC,oBAAoB;AAAA,MACtB;AAAA,MACA,UAAU,YAAY,SAAS,oBAAoB,UAAU;AAAA,MAC7D,eAAe,YAAY,SAAS,oBAAoB,eAAe;AAAA,MACvE,eAAe,YAAY,SAAS,oBAAoB,eAAe;AAAA,MACvE,cAAc,YAAY,SAAS,oBAAoB,aAAa;AAAA,MACpE,YAAY,YAAY,SAAS,oBAAoB,WAAW;AAAA,MAChE,aAAa,YAAY,SAAS,oBAAoB,gBAAgB;AAAA,MACtE,gBAAgB,YAAY;AAAA,QAC1B,mBAAmB;AAAA,MACrB;AAAA,MACA,aAAa,YAAY,SAAS,oBAAoB,YAAY;AAAA,MAClE,iBAAiB,YAAY;AAAA,QAC3B,oBAAoB;AAAA,MACtB;AAAA,MACA,YAAY,YAAY,SAAS,oBAAoB,eAAe;AAAA,MACpE,eAAe,YAAY;AAAA,QACzB,mBAAmB;AAAA,MACrB;AAAA,MACA,WAAW,YAAY,SAAS,uBAAuB,IAAI;AAAA,MAC3D,mCAAmC,YAAY;AAAA,QAC7C,oBAAoB;AAAA,MACtB;AAAA,MACA,oBAAoB,YAAY;AAAA,QAC9B,oBAAoB;AAAA,MACtB;AAAA,MACA,8BAA8B,YAAY;AAAA,QACxC,oBAAoB;AAAA,MACtB;AAAA,MACA,KAAK,YAAY,SAAS,oBAAoB,SAAS;AAAA,MACvD,mBAAmB,YAAY;AAAA,QAC7B,oBAAoB;AAAA,MACtB;AAAA,MACA,aAAa,YAAY,SAAS,oBAAoB,YAAY;AAAA,MAClE,KAAK;AAAA,QACH,cAAc,YAAY,SAAS,oBAAoB,QAAQ;AAAA,QAC/D,qBAAqB,YAAY;AAAA,UAC/B,oBAAoB;AAAA,QACtB;AAAA,QACA,0BAA0B,YAAY;AAAA,UACpC,oBAAoB;AAAA,QACtB;AAAA,QACA,YAAY,YAAY,SAAS,oBAAoB,eAAe;AAAA,QACpE,oBAAoB,YAAY;AAAA,UAC9B,oBAAoB;AAAA,QACtB;AAAA,MACF;AAAA,MACA,KAAK,YAAY,SAAS,oBAAoB,GAAG;AAAA,MACjD,aAAa,YAAY,SAAS,oBAAoB,kBAAkB;AAAA,MACxE,gBAAgB,YAAY;AAAA,QAC1B,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,QAAQ,YAAY,SAAS,oBAAoB,iBAAiB;AAAA,MAClE,QAAQ,YAAY,SAAS,oBAAoB,iBAAiB;AAAA,MAClE,aAAa,YAAY;AAAA,QACvB,oBAAoB;AAAA,MACtB;AAAA,MACA,QAAQ,YAAY,SAAS,oBAAoB,iBAAiB;AAAA,MAClE,QAAQ,YAAY,SAAS,oBAAoB,iBAAiB;AAAA,MAClE,WAAW,YAAY;AAAA,QACrB,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,IACA,YAAY;AAAA,MACV,KAAK;AAAA,QACH,SAAS,YAAY;AAAA,UACnB,oBAAoB;AAAA,QACtB;AAAA,QACA,QAAQ,YAAY,SAAS,oBAAoB,qBAAqB;AAAA,QACtE,iBAAiB,YAAY;AAAA,UAC3B,oBAAoB;AAAA,QACtB;AAAA,MACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,wBAAwB,YAAY;AAAA,QAClC,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,qBAAqB,YAAY;AAAA,QAC/B,oBAAoB;AAAA,MACtB;AAAA,MACA,mBAAmB,YAAY;AAAA,QAC7B,oBAAoB;AAAA,MACtB;AAAA,MACA,gBAAgB,YAAY;AAAA,QAC1B,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,WAAW;AAAA,QACT,KAAK,YAAY,SAAS,oBAAoB,iBAAiB;AAAA,QAC/D,QAAQ,YAAY,SAAS,oBAAoB,oBAAoB;AAAA,MACvE;AAAA,MACA,oBAAoB,YAAY;AAAA,QAC9B,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,IACA,aAAa;AAAA,MACX,KAAK;AAAA,QACH,SAAS;AAAA,UACP,KAAK,YAAY;AAAA,YACf,oBAAoB;AAAA,UACtB;AAAA,QACF;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,oBAAoB;AAAA,QACtB;AAAA,MACF;AAAA;AAAA,MAEA,IAAI;AAAA,QACF,KAAK;AAAA,UACH,QAAQ,YAAY;AAAA,YAClB,oBAAoB;AAAA,UACtB;AAAA,QACF;AAAA,MACF;AAAA,MACA,aAAa;AAAA,QACX,SAAS,YAAY;AAAA,UACnB,oBAAoB;AAAA,QACtB;AAAA,MACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,aAAa;AAAA,QACX,QAAQ,YAAY;AAAA,UAClB,oBAAoB;AAAA,QACtB;AAAA,QACA,MAAM,YAAY;AAAA,UAChB,oBAAoB;AAAA,QACtB;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,oBAAoB;AAAA,QACtB;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,oBAAoB;AAAA,QACtB;AAAA,MACF;AAAA,IACF;AAAA,IACA,eAAe;AAAA,MACb,QAAQ;AAAA,QACN,MAAM,YAAY,SAAS,wBAAwB,WAAW;AAAA,QAC9D,QAAQ,YAAY,SAAS,wBAAwB,aAAa;AAAA,QAClE,QAAQ,YAAY,SAAS,wBAAwB,aAAa;AAAA,MACpE;AAAA,IACF;AAAA,IACA,qBAAqB;AAAA,MACnB,MAAM,YAAY;AAAA,QAChB,oBAAoB;AAAA,MACtB;AAAA,MACA,QAAQ,YAAY;AAAA,QAClB,oBAAoB;AAAA,MACtB;AAAA,MACA,QAAQ,YAAY;AAAA,QAClB,oBAAoB;AAAA,MACtB;AAAA,MACA,QAAQ,YAAY;AAAA,QAClB,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,MAAM,YAAY,SAAS,oBAAoB,kBAAkB;AAAA,MACjE,OAAO,YAAY,SAAS,oBAAoB,mBAAmB;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,mCAAmC,aAAuB;AACxE,QAAM,cAA2C;AAAA,IAC/C,WAAW;AAAA,MACT,MAAM,YAAY,SAAS,mBAAmB,cAAc;AAAA,MAC5D,QAAQ,YAAY,SAAS,mBAAmB,gBAAgB;AAAA,IAClE;AAAA,IACA,cAAc;AAAA,MACZ,OAAO,YAAY,SAAS,mBAAmB,kBAAkB;AAAA,IACnE;AAAA,IACA,UAAU;AAAA,MACR,OAAO;AAAA,QACL,KAAK,YAAY;AAAA,UACf,mBAAmB;AAAA,QACrB;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,mBAAmB;AAAA,QACrB;AAAA,QACA,sBAAsB,YAAY;AAAA,UAChC,mBAAmB;AAAA,QACrB;AAAA,QACA,SAAS,YAAY;AAAA,UACnB,mBAAmB;AAAA,QACrB;AAAA,QACA,+BAA+B,YAAY;AAAA,UACzC,mBAAmB;AAAA,QACrB;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,SAAS,YAAY,SAAS,mBAAmB,qBAAqB;AAAA,MACxE;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,uBAAuB,YAAY;AAAA,QACjC,mBAAmB;AAAA,MACrB;AAAA,MACA,sBAAsB,YAAY;AAAA,QAChC,mBAAmB;AAAA,MACrB;AAAA,MACA,mBAAmB,YAAY;AAAA,QAC7B,mBAAmB;AAAA,MACrB;AAAA,MACA,gBAAgB,YAAY;AAAA,QAC1B,mBAAmB;AAAA,MACrB;AAAA,MACA,gBAAgB,YAAY;AAAA,QAC1B,mBAAmB;AAAA,MACrB;AAAA,MACA,yBAAyB,YAAY;AAAA,QACnC,mBAAmB;AAAA,MACrB;AAAA,MACA,0BAA0B,YAAY;AAAA,QACpC,mBAAmB;AAAA,MACrB;AAAA,MACA,oBAAoB,YAAY;AAAA,QAC9B,mBAAmB;AAAA,MACrB;AAAA,MACA,6BAA6B,YAAY;AAAA,QACvC,mBAAmB;AAAA,MACrB;AAAA,MACA,sBAAsB,YAAY;AAAA,QAChC,mBAAmB;AAAA,MACrB;AAAA,MACA,0BAA0B,YAAY;AAAA,QACpC,mBAAmB;AAAA,MACrB;AAAA,MACA,4BAA4B,YAAY;AAAA,QACtC,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,IACA,aAAa;AAAA,MACX,QAAQ,YAAY,SAAS,mBAAmB,oBAAoB;AAAA,MACpE,QAAQ,YAAY,SAAS,mBAAmB,mBAAmB;AAAA,MACnE,QAAQ,YAAY,SAAS,mBAAmB,mBAAmB;AAAA,MACnE,MAAM;AAAA,QACJ,QAAQ,YAAY;AAAA,UAClB,mBAAmB;AAAA,QACrB;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,mBAAmB;AAAA,QACrB;AAAA,QACA,QAAQ,YAAY;AAAA,UAClB,mBAAmB;AAAA,QACrB;AAAA,QACA,aAAa,YAAY;AAAA,UACvB,mBAAmB;AAAA,QACrB;AAAA,MACF;AAAA,MACA,SAAS,YAAY,SAAS,mBAAmB,oBAAoB;AAAA,MACrE,yBAAyB,YAAY;AAAA,QACnC,mBAAmB;AAAA,MACrB;AAAA,MACA,QAAQ,YAAY,SAAS,mBAAmB,uBAAuB;AAAA,IACzE;AAAA,IACA,UAAU;AAAA,MACR,SAAS,YAAY,SAAS,mBAAmB,gBAAgB;AAAA,MACjE,gBAAgB,YAAY;AAAA,QAC1B,mBAAmB;AAAA,MACrB;AAAA,MACA,cAAc,YAAY,SAAS,mBAAmB,aAAa;AAAA,MACnE,OAAO,YAAY,SAAS,mBAAmB,KAAK;AAAA,IACtD;AAAA,IACA,KAAK;AAAA,MACH,WAAW,YAAY,SAAS,mBAAmB,cAAc;AAAA,MACjE,QAAQ,YAAY,SAAS,mBAAmB,UAAU;AAAA,MAC1D,cAAc,YAAY,SAAS,mBAAmB,iBAAiB;AAAA,MACvE,mBAAmB,YAAY;AAAA,QAC7B,mBAAmB;AAAA,MACrB;AAAA,MACA,mBAAmB,YAAY;AAAA,QAC7B,mBAAmB;AAAA,MACrB;AAAA,MACA,iBAAiB,YAAY;AAAA,QAC3B,mBAAmB;AAAA,MACrB;AAAA,MACA,cAAc,YAAY,SAAS,mBAAmB,kBAAkB;AAAA,MACxE,UAAU;AAAA,QACR,gBAAgB,YAAY;AAAA,UAC1B,mBAAmB;AAAA,QACrB;AAAA,MACF;AAAA,MACA,oBAAoB,YAAY;AAAA,QAC9B,mBAAmB;AAAA,MACrB;AAAA,MACA,6BAA6B,YAAY;AAAA,QACvC,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;",
   "names": []
 }

package/dist/permissions/combo.optionalTelemetry.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/permissions/console.permissions.d.ts

@@ -16,6 +16,7 @@ export declare namespace ConsolePermissions {
     const CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE = "ccucp";
     const CLUSTERS_CAN_UPDATE_GENERATION = "ccug";
     const CLUSTERS_CAN_UPDATE_GENERATION_YOLO = "ccugy";
+    const CLUSTERS_CAN_UPDATE_OPTIONAL_TELEMETRY = "ccuot";
     const CLUSTER_PLAN_SEE_ALL = "ccpa";
     const CLUSTER_PLAN_CREATE = "ccpc";
     const CLUSTER_PLAN_DELETE = "ccpd";
@@ -79,6 +80,7 @@ export declare namespace ConsolePermissions {
             canCreateModificationConfig: boolean;
             canUpgradeGeneration: boolean;
             canUpgradeGenerationYolo: boolean;
+            canUpdateOptionalTelemetry: boolean;
         };
         clusterPlan: {
             seeAll: boolean;

package/dist/permissions/console.permissions.js

@@ -20,6 +20,7 @@ var ConsolePermissions;
   ConsolePermissions2.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE = "ccucp";
   ConsolePermissions2.CLUSTERS_CAN_UPDATE_GENERATION = "ccug";
   ConsolePermissions2.CLUSTERS_CAN_UPDATE_GENERATION_YOLO = "ccugy";
+  ConsolePermissions2.CLUSTERS_CAN_UPDATE_OPTIONAL_TELEMETRY = "ccuot";
   ConsolePermissions2.CLUSTER_PLAN_SEE_ALL = "ccpa";
   ConsolePermissions2.CLUSTER_PLAN_CREATE = "ccpc";
   ConsolePermissions2.CLUSTER_PLAN_DELETE = "ccpd";
@@ -81,7 +82,8 @@ var ConsolePermissions;
         canOverrideEnvVars: false,
         canCreateModificationConfig: false,
         canUpgradeGeneration: false,
-        canUpgradeGenerationYolo: false
+        canUpgradeGenerationYolo: false,
+        canUpdateOptionalTelemetry: false
       },
       clusterPlan: {
         seeAll: false,
@@ -371,6 +373,16 @@ var ConsolePermissions;
       description: "can update generation of a running cluster even if the generation is not reachable",
       initialRoles: ["console:god"]
     },
+    {
+      value: ConsolePermissions2.CLUSTERS_CAN_UPDATE_OPTIONAL_TELEMETRY,
+      description: "can enable or disable optional product telemetry for a cluster",
+      // A customer asks their CSM or TAM to switch the category off, thus the
+      // capability goes to `console:optionalTelemetryManager`. The population
+      // that holds the role lives in the Camundi permission rules, not in the
+      // name of the role. The console team keeps the permission, to help when
+      // a change does not take effect.
+      initialRoles: ["console:admin", "console:optionalTelemetryManager"]
+    },
     {
       value: ConsolePermissions2.CLUSTER_PLAN_CAN_MODIFY,
       description: "can trigger modifications of a clusterplan",

package/dist/permissions/console.permissions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/permissions/console.permissions.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport namespace ConsolePermissions {\n  export const MULTICLUSTER_ADMIN = 'cmca'\n\n  export const CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS = 'cmgda'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_SEE = 'cmgas'\n  export const CHANNELS_AND_GENERATIONS_ADMIN = 'cmga'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL = 'cmgap'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE = 'cmgam'\n  export const CHANNELS_AND_GENERATIONS_MIGRATE = 'cmgm'\n  export const ALL_CHANNELS_AND_GENERATIONS: string[] = [\n    CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n    CHANNELS_AND_GENERATIONS_ADMIN,\n    CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n  ]\n  export const CLUSTERS_READALLCLUSTERINFO = 'ccrai'\n  export const CLUSTERS_DELETE_CLUSTER = 'ccda'\n  export const CLUSTERS_CAN_MOVE_TO_OTHER_ORG = 'ccmoo'\n  export const CLUSTERS_CAN_SEND_TO_SLEEP = 'ccsts'\n  export const CLUSTERS_CAN_CREATE_INTERNAL_BACKUP = 'cccib'\n  export const CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE = 'ccucp'\n  export const CLUSTERS_CAN_UPDATE_GENERATION = 'ccug'\n  export const CLUSTERS_CAN_UPDATE_GENERATION_YOLO = 'ccugy'\n\n  export const CLUSTER_PLAN_SEE_ALL = 'ccpa'\n  export const CLUSTER_PLAN_CREATE = 'ccpc'\n  export const CLUSTER_PLAN_DELETE = 'ccpd'\n\n  export const CLUSTER_PLAN_TYPE_CREATE = 'cptc'\n  export const CLUSTER_PLAN_TYPE_MODIFY = 'cptm'\n  export const CLUSTER_PLAN_TYPE_DELETE = 'cptd'\n  export const CLUSTER_PLAN_TYPE_FORCE_DELETE = 'cptfd'\n\n  export const CLUSTER_PLAN_MIGRATE = 'ccpm'\n  export const CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN = 'ccpda'\n  export const CLUSTER_PLAN_CAN_MODIFY = 'ccpmo'\n\n  export const M2M_UPDATE_CRD = 'cmuc'\n  export const M2M_SIGNUP = 'cms'\n  export const M2M_TRIGGER_ALERT = 'cmta'\n  export const M2M_DELETE_ORG_CLUSTERS = 'cmdoc'\n  export const M2M_UPDATE_ORG_CLUSTERS = 'cmuoc'\n  export const M2M_ADD_CLUSTER_USAGE_METRICS = 'cmacm'\n  export const M2M_SEND_SSE_EVENT = 'cmsse'\n  export const M2M_EXTERNAL_INTERNAL_CLIENT = 'cmeic'\n  export const M2M_FETCH_MIGRATION_DATA = 'cmfmd'\n  export const M2M_MANAGE_GENERATION_UPGRADE_PATH = 'cmmgup'\n  export const CLUSTER_CREATE_ON_BEHALF = 'cccob'\n  export const FEATURE_NEW_HOME = 'cfnh'\n  export const FEATURE_TEMPLATE_PICKER = 'cftp'\n  export const USER_SETTINGS = 'cus'\n  export const CLUSTERS_CAN_OVERRIDE_ENV_VARS = 'ccoev'\n  export const CLUSTERS_CAN_CREATE_MODIFICATION_CONFIG = 'ccccmc'\n\n  export const DEBUG = 'cdbg'\n  export const GOD_TRIGGER_CRONS = 'gtc'\n\n  export const RELEASE_TRAIN_PUBLISH = 'crtp'\n\n  export const APICLIENT_READ = 'capr'\n  export const APICLIENT_DELETE = 'capd'\n\n  export interface Features {\n    apiClient: {\n      read: boolean\n      delete: boolean\n    }\n    multiCluster: {\n      admin: boolean\n    }\n    multiGen: {\n      admin: {\n        see: boolean\n        modify: boolean\n        patchExistingChannel: boolean\n        migrate: boolean\n        deleteAllClustersOfGeneration: boolean\n      }\n      releaseTrain: {\n        publish: boolean\n      }\n    }\n    clusters: {\n      canReadAllClusterInfo: boolean\n      canDeleteAllClusters: boolean\n      canMoveToOtherOrg: boolean\n      createOnBehalf: boolean\n      canSendToSleep: boolean\n      canCreateInternalBackup: boolean\n      canUpdateClusterPlanType: boolean\n      canOverrideEnvVars: boolean\n      canCreateModificationConfig: boolean\n      canUpgradeGeneration: boolean\n      canUpgradeGenerationYolo: boolean\n    }\n    clusterPlan: {\n      seeAll: boolean\n      create: boolean\n      delete: boolean\n      type: {\n        create: boolean\n        modify: boolean\n        delete: boolean\n        forceDelete: boolean\n      }\n      migrate: boolean\n      deleteAllClustersOfPlan: boolean\n      modify: boolean\n    }\n    features: {\n      newHome: boolean\n      templatePicker: boolean\n      userSettings: boolean\n      debug: boolean\n    }\n    m2m: {\n      updateCrd: boolean\n      signup: boolean\n      triggerAlert: boolean\n      deleteOrgClusters: boolean\n      updateOrgClusters: boolean\n      addUsageMetrics: boolean\n      sendSseEvent: boolean\n      external: {\n        internalClient: boolean\n      }\n      fetchMigrationData: boolean\n      manageGenerationUpgradePath: boolean\n    }\n  }\n\n  export function createEmptyFeatures(): Features {\n    return {\n      apiClient: {\n        read: false,\n        delete: false,\n      },\n      multiCluster: { admin: false },\n      multiGen: {\n        admin: {\n          migrate: false,\n          modify: false,\n          patchExistingChannel: false,\n          see: false,\n          deleteAllClustersOfGeneration: false,\n        },\n        releaseTrain: {\n          publish: false,\n        },\n      },\n      clusters: {\n        canReadAllClusterInfo: false,\n        canDeleteAllClusters: false,\n        canMoveToOtherOrg: false,\n        createOnBehalf: false,\n        canSendToSleep: false,\n        canCreateInternalBackup: false,\n        canUpdateClusterPlanType: false,\n        canOverrideEnvVars: false,\n        canCreateModificationConfig: false,\n        canUpgradeGeneration: false,\n        canUpgradeGenerationYolo: false,\n      },\n      clusterPlan: {\n        seeAll: false,\n        create: false,\n        delete: false,\n        type: {\n          create: false,\n          modify: false,\n          delete: false,\n          forceDelete: false,\n        },\n        migrate: false,\n        deleteAllClustersOfPlan: false,\n        modify: false,\n      },\n      features: {\n        newHome: false,\n        templatePicker: false,\n        userSettings: false,\n        debug: false,\n      },\n      m2m: {\n        updateCrd: false,\n        signup: false,\n        triggerAlert: false,\n        deleteOrgClusters: false,\n        updateOrgClusters: false,\n        addUsageMetrics: false,\n        sendSseEvent: false,\n        external: {\n          internalClient: false,\n        },\n        fetchMigrationData: false,\n        manageGenerationUpgradePath: false,\n      },\n    }\n  }\n\n  export const PermissionsAtAuth0: Array<{\n    value: string\n    description: string\n    initialRoles: Roles[]\n  }> = [\n    {\n      value: MULTICLUSTER_ADMIN,\n      description: 'can create and delete k8s clusters',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n      description: 'can go to the admin section for MultiGen, but no touch!',\n      initialRoles: [\n        'console:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n        'console:C8UpdateEnforcer',\n      ],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN,\n      description: 'can create channels, generations and combine them',\n      initialRoles: ['console:admin', 'console:C8ReleaseManager'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL,\n      description: 'can modify existing channels and combine them',\n      initialRoles: [\n        'console:admin',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n      ],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n      description:\n        'can migrate clusters of generations to supported other generations',\n      initialRoles: ['console:admin', 'console:C8UpdateEnforcer'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS,\n      description: 'can delete all clusters of a generation',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_MIGRATE,\n      description:\n        'can migrate owned clusters of generations to supported other generations',\n      initialRoles: [],\n    },\n    {\n      value: CLUSTERS_READALLCLUSTERINFO,\n      description: 'can read clusterInfo for all clusters',\n      initialRoles: [\n        'accounts:read',\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:editSalesPlans',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'console:admin',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTERS_DELETE_CLUSTER,\n      description: 'can delete clusters in all orgs',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: CLUSTERS_CAN_MOVE_TO_OTHER_ORG,\n      description: 'can move a cluster to another org the user is part of',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_SEE_ALL,\n      description: 'can see all ClusterPlans',\n      initialRoles: [\n        'console:admin',\n        'accounts:read',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:onboard',\n        'accounts:editSalesPlans',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTER_PLAN_CREATE,\n      description: 'can create ClusterPlans',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_DELETE,\n      description: 'can delete ClusterPlans',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_CREATE,\n      description: 'can create ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_DELETE,\n      description: 'can delete ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_FORCE_DELETE,\n      description: 'can delete ClusterPlanTypes',\n      initialRoles: ['console:god'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_MODIFY,\n      description: 'can modify ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_MIGRATE,\n      description: 'can migrate Clusters from one plan to another',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN,\n      description: 'can delete all clusters of a plan',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_CREATE_ON_BEHALF,\n      description:\n        'enables accounts to create clusters on signup (not a user permission)',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SIGNUP,\n      description: 'allows to signal to Console new user signups',\n      initialRoles: [],\n    },\n    { value: M2M_UPDATE_CRD, description: 'may update crds', initialRoles: [] },\n    {\n      value: M2M_TRIGGER_ALERT,\n      description: 'allows Infra and Operate to trigger alerts',\n      initialRoles: [],\n    },\n    {\n      value: M2M_DELETE_ORG_CLUSTERS,\n      description:\n        'allows trigger console to delete all clusters of an Organization',\n      initialRoles: [],\n    },\n    {\n      value: M2M_UPDATE_ORG_CLUSTERS,\n      description: 'allows to update clusters of an Organization',\n      initialRoles: [],\n    },\n    {\n      value: M2M_ADD_CLUSTER_USAGE_METRICS,\n      description: 'allows to trigger update of value metrics',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SEND_SSE_EVENT,\n      description: 'allows to trigger SSE events',\n      initialRoles: [],\n    },\n    {\n      value: M2M_EXTERNAL_INTERNAL_CLIENT,\n      description: 'allows to fetch internal clients',\n      initialRoles: [],\n    },\n    {\n      value: M2M_FETCH_MIGRATION_DATA,\n      description: 'allows to fetch migration data',\n      initialRoles: [],\n    },\n    {\n      value: M2M_MANAGE_GENERATION_UPGRADE_PATH,\n      description:\n        'allows to manage upgrade paths for generations via external API',\n      initialRoles: [],\n    },\n    {\n      value: FEATURE_NEW_HOME,\n      description: 'allows users to see new home',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: USER_SETTINGS,\n      description: 'allows users to see user settings',\n      initialRoles: ['console:admin', 'betatester:true'],\n    },\n    {\n      value: FEATURE_TEMPLATE_PICKER,\n      description: 'allows users to see template picker',\n      initialRoles: ['console:admin', 'betatester:true'],\n    },\n    {\n      value: CLUSTERS_CAN_SEND_TO_SLEEP,\n      description: 'may send a cluster to sleep and wake up',\n      initialRoles: [\n        'console:admin',\n        'accounts:admin',\n        'console:operationsEngineer',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_CREATE_INTERNAL_BACKUP,\n      description: 'may create and delete internal (incident) backups',\n      initialRoles: ['console:admin', 'console:operationsEngineer'],\n    },\n    {\n      value: DEBUG,\n      description: 'can see additional debugging tools',\n      initialRoles: ['console:admin:readonly', 'console:admin'],\n    },\n    {\n      value: CLUSTERS_CAN_OVERRIDE_ENV_VARS,\n      description:\n        'can set Env Vars on cluster level that override all ClusterPlan Env Vars',\n      initialRoles: ['console:admin', 'console:operationsEngineer'],\n    },\n    {\n      value: CLUSTERS_CAN_CREATE_MODIFICATION_CONFIG,\n      description: 'can create cluster modification configs',\n      initialRoles: ['console:admin', 'console:operationsEngineer'],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n      description: 'can update clusterplantype of a running cluster',\n      initialRoles: [\n        'console:admin',\n        'accounts:onboard',\n        'console:operationsEngineer',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_GENERATION,\n      description: 'can update generation of a running cluster',\n      initialRoles: [\n        'console:admin',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_GENERATION_YOLO,\n      description:\n        'can update generation of a running cluster even if the generation is not reachable',\n      initialRoles: ['console:god'],\n    },\n    {\n      value: CLUSTER_PLAN_CAN_MODIFY,\n      description: 'can trigger modifications of a clusterplan',\n      initialRoles: ['console:admin', 'console:clusterPlanManager'],\n    },\n    {\n      value: RELEASE_TRAIN_PUBLISH,\n      description: 'can publish new generations via the release train endpoint',\n      initialRoles: ['console:admin', 'console:C8ReleaseManager'],\n    },\n    {\n      value: APICLIENT_READ,\n      description: 'can read API Clients Names of Organizations',\n      initialRoles: ['accounts:read', 'accounts:orgCreator'],\n    },\n    {\n      value: APICLIENT_DELETE,\n      description: 'can read API Clients Names of Organizations',\n      initialRoles: ['accounts:god'],\n    },\n  ]\n}\n"],
-  "mappings": "AAQO,IAAU;AAAA,CAAV,CAAUA,wBAAV;AACE,EAAMA,oBAAA,qBAAqB;AAE3B,EAAMA,oBAAA,qDAAqD;AAC3D,EAAMA,oBAAA,qCAAqC;AAC3C,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,wDAAwD;AAC9D,EAAMA,oBAAA,yCAAyC;AAC/C,EAAMA,oBAAA,mCAAmC;AACzC,EAAMA,oBAAA,+BAAyC;AAAA,IACpDA,oBAAA;AAAA,IACAA,oBAAA;AAAA,IACAA,oBAAA;AAAA,EACF;AACO,EAAMA,oBAAA,8BAA8B;AACpC,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,6BAA6B;AACnC,EAAMA,oBAAA,sCAAsC;AAC5C,EAAMA,oBAAA,sCAAsC;AAC5C,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,sCAAsC;AAE5C,EAAMA,oBAAA,uBAAuB;AAC7B,EAAMA,oBAAA,sBAAsB;AAC5B,EAAMA,oBAAA,sBAAsB;AAE5B,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,iCAAiC;AAEvC,EAAMA,oBAAA,uBAAuB;AAC7B,EAAMA,oBAAA,+CAA+C;AACrD,EAAMA,oBAAA,0BAA0B;AAEhC,EAAMA,oBAAA,iBAAiB;AACvB,EAAMA,oBAAA,aAAa;AACnB,EAAMA,oBAAA,oBAAoB;AAC1B,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,gCAAgC;AACtC,EAAMA,oBAAA,qBAAqB;AAC3B,EAAMA,oBAAA,+BAA+B;AACrC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,qCAAqC;AAC3C,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,mBAAmB;AACzB,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,gBAAgB;AACtB,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,0CAA0C;AAEhD,EAAMA,oBAAA,QAAQ;AACd,EAAMA,oBAAA,oBAAoB;AAE1B,EAAMA,oBAAA,wBAAwB;AAE9B,EAAMA,oBAAA,iBAAiB;AACvB,EAAMA,oBAAA,mBAAmB;AAuEzB,WAAS,sBAAgC;AAC9C,WAAO;AAAA,MACL,WAAW;AAAA,QACT,MAAM;AAAA,QACN,QAAQ;AAAA,MACV;AAAA,MACA,cAAc,EAAE,OAAO,MAAM;AAAA,MAC7B,UAAU;AAAA,QACR,OAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,sBAAsB;AAAA,UACtB,KAAK;AAAA,UACL,+BAA+B;AAAA,QACjC;AAAA,QACA,cAAc;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA,UAAU;AAAA,QACR,uBAAuB;AAAA,QACvB,sBAAsB;AAAA,QACtB,mBAAmB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,yBAAyB;AAAA,QACzB,0BAA0B;AAAA,QAC1B,oBAAoB;AAAA,QACpB,6BAA6B;AAAA,QAC7B,sBAAsB;AAAA,QACtB,0BAA0B;AAAA,MAC5B;AAAA,MACA,aAAa;AAAA,QACX,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,aAAa;AAAA,QACf;AAAA,QACA,SAAS;AAAA,QACT,yBAAyB;AAAA,QACzB,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,SAAS;AAAA,QACT,gBAAgB;AAAA,QAChB,cAAc;AAAA,QACd,OAAO;AAAA,MACT;AAAA,MACA,KAAK;AAAA,QACH,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,mBAAmB;AAAA,QACnB,mBAAmB;AAAA,QACnB,iBAAiB;AAAA,QACjB,cAAc;AAAA,QACd,UAAU;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,QACA,oBAAoB;AAAA,QACpB,6BAA6B;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAnEO,EAAAA,oBAAS;AAqET,EAAMA,oBAAA,qBAIR;AAAA,IACH;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,EAAE,OAAOA,oBAAA,gBAAgB,aAAa,mBAAmB,cAAc,CAAC,EAAE;AAAA,IAC1E;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,iBAAiB;AAAA,IACnD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,iBAAiB;AAAA,IACnD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,0BAA0B,eAAe;AAAA,IAC1D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,qBAAqB;AAAA,IACvD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,EACF;AAAA,GAjee;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport namespace ConsolePermissions {\n  export const MULTICLUSTER_ADMIN = 'cmca'\n\n  export const CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS = 'cmgda'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_SEE = 'cmgas'\n  export const CHANNELS_AND_GENERATIONS_ADMIN = 'cmga'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL = 'cmgap'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE = 'cmgam'\n  export const CHANNELS_AND_GENERATIONS_MIGRATE = 'cmgm'\n  export const ALL_CHANNELS_AND_GENERATIONS: string[] = [\n    CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n    CHANNELS_AND_GENERATIONS_ADMIN,\n    CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n  ]\n  export const CLUSTERS_READALLCLUSTERINFO = 'ccrai'\n  export const CLUSTERS_DELETE_CLUSTER = 'ccda'\n  export const CLUSTERS_CAN_MOVE_TO_OTHER_ORG = 'ccmoo'\n  export const CLUSTERS_CAN_SEND_TO_SLEEP = 'ccsts'\n  export const CLUSTERS_CAN_CREATE_INTERNAL_BACKUP = 'cccib'\n  export const CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE = 'ccucp'\n  export const CLUSTERS_CAN_UPDATE_GENERATION = 'ccug'\n  export const CLUSTERS_CAN_UPDATE_GENERATION_YOLO = 'ccugy'\n  export const CLUSTERS_CAN_UPDATE_OPTIONAL_TELEMETRY = 'ccuot'\n\n  export const CLUSTER_PLAN_SEE_ALL = 'ccpa'\n  export const CLUSTER_PLAN_CREATE = 'ccpc'\n  export const CLUSTER_PLAN_DELETE = 'ccpd'\n\n  export const CLUSTER_PLAN_TYPE_CREATE = 'cptc'\n  export const CLUSTER_PLAN_TYPE_MODIFY = 'cptm'\n  export const CLUSTER_PLAN_TYPE_DELETE = 'cptd'\n  export const CLUSTER_PLAN_TYPE_FORCE_DELETE = 'cptfd'\n\n  export const CLUSTER_PLAN_MIGRATE = 'ccpm'\n  export const CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN = 'ccpda'\n  export const CLUSTER_PLAN_CAN_MODIFY = 'ccpmo'\n\n  export const M2M_UPDATE_CRD = 'cmuc'\n  export const M2M_SIGNUP = 'cms'\n  export const M2M_TRIGGER_ALERT = 'cmta'\n  export const M2M_DELETE_ORG_CLUSTERS = 'cmdoc'\n  export const M2M_UPDATE_ORG_CLUSTERS = 'cmuoc'\n  export const M2M_ADD_CLUSTER_USAGE_METRICS = 'cmacm'\n  export const M2M_SEND_SSE_EVENT = 'cmsse'\n  export const M2M_EXTERNAL_INTERNAL_CLIENT = 'cmeic'\n  export const M2M_FETCH_MIGRATION_DATA = 'cmfmd'\n  export const M2M_MANAGE_GENERATION_UPGRADE_PATH = 'cmmgup'\n  export const CLUSTER_CREATE_ON_BEHALF = 'cccob'\n  export const FEATURE_NEW_HOME = 'cfnh'\n  export const FEATURE_TEMPLATE_PICKER = 'cftp'\n  export const USER_SETTINGS = 'cus'\n  export const CLUSTERS_CAN_OVERRIDE_ENV_VARS = 'ccoev'\n  export const CLUSTERS_CAN_CREATE_MODIFICATION_CONFIG = 'ccccmc'\n\n  export const DEBUG = 'cdbg'\n  export const GOD_TRIGGER_CRONS = 'gtc'\n\n  export const RELEASE_TRAIN_PUBLISH = 'crtp'\n\n  export const APICLIENT_READ = 'capr'\n  export const APICLIENT_DELETE = 'capd'\n\n  export interface Features {\n    apiClient: {\n      read: boolean\n      delete: boolean\n    }\n    multiCluster: {\n      admin: boolean\n    }\n    multiGen: {\n      admin: {\n        see: boolean\n        modify: boolean\n        patchExistingChannel: boolean\n        migrate: boolean\n        deleteAllClustersOfGeneration: boolean\n      }\n      releaseTrain: {\n        publish: boolean\n      }\n    }\n    clusters: {\n      canReadAllClusterInfo: boolean\n      canDeleteAllClusters: boolean\n      canMoveToOtherOrg: boolean\n      createOnBehalf: boolean\n      canSendToSleep: boolean\n      canCreateInternalBackup: boolean\n      canUpdateClusterPlanType: boolean\n      canOverrideEnvVars: boolean\n      canCreateModificationConfig: boolean\n      canUpgradeGeneration: boolean\n      canUpgradeGenerationYolo: boolean\n      canUpdateOptionalTelemetry: boolean\n    }\n    clusterPlan: {\n      seeAll: boolean\n      create: boolean\n      delete: boolean\n      type: {\n        create: boolean\n        modify: boolean\n        delete: boolean\n        forceDelete: boolean\n      }\n      migrate: boolean\n      deleteAllClustersOfPlan: boolean\n      modify: boolean\n    }\n    features: {\n      newHome: boolean\n      templatePicker: boolean\n      userSettings: boolean\n      debug: boolean\n    }\n    m2m: {\n      updateCrd: boolean\n      signup: boolean\n      triggerAlert: boolean\n      deleteOrgClusters: boolean\n      updateOrgClusters: boolean\n      addUsageMetrics: boolean\n      sendSseEvent: boolean\n      external: {\n        internalClient: boolean\n      }\n      fetchMigrationData: boolean\n      manageGenerationUpgradePath: boolean\n    }\n  }\n\n  export function createEmptyFeatures(): Features {\n    return {\n      apiClient: {\n        read: false,\n        delete: false,\n      },\n      multiCluster: { admin: false },\n      multiGen: {\n        admin: {\n          migrate: false,\n          modify: false,\n          patchExistingChannel: false,\n          see: false,\n          deleteAllClustersOfGeneration: false,\n        },\n        releaseTrain: {\n          publish: false,\n        },\n      },\n      clusters: {\n        canReadAllClusterInfo: false,\n        canDeleteAllClusters: false,\n        canMoveToOtherOrg: false,\n        createOnBehalf: false,\n        canSendToSleep: false,\n        canCreateInternalBackup: false,\n        canUpdateClusterPlanType: false,\n        canOverrideEnvVars: false,\n        canCreateModificationConfig: false,\n        canUpgradeGeneration: false,\n        canUpgradeGenerationYolo: false,\n        canUpdateOptionalTelemetry: false,\n      },\n      clusterPlan: {\n        seeAll: false,\n        create: false,\n        delete: false,\n        type: {\n          create: false,\n          modify: false,\n          delete: false,\n          forceDelete: false,\n        },\n        migrate: false,\n        deleteAllClustersOfPlan: false,\n        modify: false,\n      },\n      features: {\n        newHome: false,\n        templatePicker: false,\n        userSettings: false,\n        debug: false,\n      },\n      m2m: {\n        updateCrd: false,\n        signup: false,\n        triggerAlert: false,\n        deleteOrgClusters: false,\n        updateOrgClusters: false,\n        addUsageMetrics: false,\n        sendSseEvent: false,\n        external: {\n          internalClient: false,\n        },\n        fetchMigrationData: false,\n        manageGenerationUpgradePath: false,\n      },\n    }\n  }\n\n  export const PermissionsAtAuth0: Array<{\n    value: string\n    description: string\n    initialRoles: Roles[]\n  }> = [\n    {\n      value: MULTICLUSTER_ADMIN,\n      description: 'can create and delete k8s clusters',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n      description: 'can go to the admin section for MultiGen, but no touch!',\n      initialRoles: [\n        'console:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n        'console:C8UpdateEnforcer',\n      ],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN,\n      description: 'can create channels, generations and combine them',\n      initialRoles: ['console:admin', 'console:C8ReleaseManager'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL,\n      description: 'can modify existing channels and combine them',\n      initialRoles: [\n        'console:admin',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n      ],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n      description:\n        'can migrate clusters of generations to supported other generations',\n      initialRoles: ['console:admin', 'console:C8UpdateEnforcer'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS,\n      description: 'can delete all clusters of a generation',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_MIGRATE,\n      description:\n        'can migrate owned clusters of generations to supported other generations',\n      initialRoles: [],\n    },\n    {\n      value: CLUSTERS_READALLCLUSTERINFO,\n      description: 'can read clusterInfo for all clusters',\n      initialRoles: [\n        'accounts:read',\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:editSalesPlans',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'console:admin',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTERS_DELETE_CLUSTER,\n      description: 'can delete clusters in all orgs',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: CLUSTERS_CAN_MOVE_TO_OTHER_ORG,\n      description: 'can move a cluster to another org the user is part of',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_SEE_ALL,\n      description: 'can see all ClusterPlans',\n      initialRoles: [\n        'console:admin',\n        'accounts:read',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:onboard',\n        'accounts:editSalesPlans',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTER_PLAN_CREATE,\n      description: 'can create ClusterPlans',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_DELETE,\n      description: 'can delete ClusterPlans',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_CREATE,\n      description: 'can create ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_DELETE,\n      description: 'can delete ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_FORCE_DELETE,\n      description: 'can delete ClusterPlanTypes',\n      initialRoles: ['console:god'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_MODIFY,\n      description: 'can modify ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_MIGRATE,\n      description: 'can migrate Clusters from one plan to another',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN,\n      description: 'can delete all clusters of a plan',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_CREATE_ON_BEHALF,\n      description:\n        'enables accounts to create clusters on signup (not a user permission)',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SIGNUP,\n      description: 'allows to signal to Console new user signups',\n      initialRoles: [],\n    },\n    { value: M2M_UPDATE_CRD, description: 'may update crds', initialRoles: [] },\n    {\n      value: M2M_TRIGGER_ALERT,\n      description: 'allows Infra and Operate to trigger alerts',\n      initialRoles: [],\n    },\n    {\n      value: M2M_DELETE_ORG_CLUSTERS,\n      description:\n        'allows trigger console to delete all clusters of an Organization',\n      initialRoles: [],\n    },\n    {\n      value: M2M_UPDATE_ORG_CLUSTERS,\n      description: 'allows to update clusters of an Organization',\n      initialRoles: [],\n    },\n    {\n      value: M2M_ADD_CLUSTER_USAGE_METRICS,\n      description: 'allows to trigger update of value metrics',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SEND_SSE_EVENT,\n      description: 'allows to trigger SSE events',\n      initialRoles: [],\n    },\n    {\n      value: M2M_EXTERNAL_INTERNAL_CLIENT,\n      description: 'allows to fetch internal clients',\n      initialRoles: [],\n    },\n    {\n      value: M2M_FETCH_MIGRATION_DATA,\n      description: 'allows to fetch migration data',\n      initialRoles: [],\n    },\n    {\n      value: M2M_MANAGE_GENERATION_UPGRADE_PATH,\n      description:\n        'allows to manage upgrade paths for generations via external API',\n      initialRoles: [],\n    },\n    {\n      value: FEATURE_NEW_HOME,\n      description: 'allows users to see new home',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: USER_SETTINGS,\n      description: 'allows users to see user settings',\n      initialRoles: ['console:admin', 'betatester:true'],\n    },\n    {\n      value: FEATURE_TEMPLATE_PICKER,\n      description: 'allows users to see template picker',\n      initialRoles: ['console:admin', 'betatester:true'],\n    },\n    {\n      value: CLUSTERS_CAN_SEND_TO_SLEEP,\n      description: 'may send a cluster to sleep and wake up',\n      initialRoles: [\n        'console:admin',\n        'accounts:admin',\n        'console:operationsEngineer',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_CREATE_INTERNAL_BACKUP,\n      description: 'may create and delete internal (incident) backups',\n      initialRoles: ['console:admin', 'console:operationsEngineer'],\n    },\n    {\n      value: DEBUG,\n      description: 'can see additional debugging tools',\n      initialRoles: ['console:admin:readonly', 'console:admin'],\n    },\n    {\n      value: CLUSTERS_CAN_OVERRIDE_ENV_VARS,\n      description:\n        'can set Env Vars on cluster level that override all ClusterPlan Env Vars',\n      initialRoles: ['console:admin', 'console:operationsEngineer'],\n    },\n    {\n      value: CLUSTERS_CAN_CREATE_MODIFICATION_CONFIG,\n      description: 'can create cluster modification configs',\n      initialRoles: ['console:admin', 'console:operationsEngineer'],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n      description: 'can update clusterplantype of a running cluster',\n      initialRoles: [\n        'console:admin',\n        'accounts:onboard',\n        'console:operationsEngineer',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_GENERATION,\n      description: 'can update generation of a running cluster',\n      initialRoles: [\n        'console:admin',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_GENERATION_YOLO,\n      description:\n        'can update generation of a running cluster even if the generation is not reachable',\n      initialRoles: ['console:god'],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_OPTIONAL_TELEMETRY,\n      description:\n        'can enable or disable optional product telemetry for a cluster',\n      // A customer asks their CSM or TAM to switch the category off, thus the\n      // capability goes to `console:optionalTelemetryManager`. The population\n      // that holds the role lives in the Camundi permission rules, not in the\n      // name of the role. The console team keeps the permission, to help when\n      // a change does not take effect.\n      initialRoles: ['console:admin', 'console:optionalTelemetryManager'],\n    },\n    {\n      value: CLUSTER_PLAN_CAN_MODIFY,\n      description: 'can trigger modifications of a clusterplan',\n      initialRoles: ['console:admin', 'console:clusterPlanManager'],\n    },\n    {\n      value: RELEASE_TRAIN_PUBLISH,\n      description: 'can publish new generations via the release train endpoint',\n      initialRoles: ['console:admin', 'console:C8ReleaseManager'],\n    },\n    {\n      value: APICLIENT_READ,\n      description: 'can read API Clients Names of Organizations',\n      initialRoles: ['accounts:read', 'accounts:orgCreator'],\n    },\n    {\n      value: APICLIENT_DELETE,\n      description: 'can read API Clients Names of Organizations',\n      initialRoles: ['accounts:god'],\n    },\n  ]\n}\n"],
+  "mappings": "AAQO,IAAU;AAAA,CAAV,CAAUA,wBAAV;AACE,EAAMA,oBAAA,qBAAqB;AAE3B,EAAMA,oBAAA,qDAAqD;AAC3D,EAAMA,oBAAA,qCAAqC;AAC3C,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,wDAAwD;AAC9D,EAAMA,oBAAA,yCAAyC;AAC/C,EAAMA,oBAAA,mCAAmC;AACzC,EAAMA,oBAAA,+BAAyC;AAAA,IACpDA,oBAAA;AAAA,IACAA,oBAAA;AAAA,IACAA,oBAAA;AAAA,EACF;AACO,EAAMA,oBAAA,8BAA8B;AACpC,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,6BAA6B;AACnC,EAAMA,oBAAA,sCAAsC;AAC5C,EAAMA,oBAAA,sCAAsC;AAC5C,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,sCAAsC;AAC5C,EAAMA,oBAAA,yCAAyC;AAE/C,EAAMA,oBAAA,uBAAuB;AAC7B,EAAMA,oBAAA,sBAAsB;AAC5B,EAAMA,oBAAA,sBAAsB;AAE5B,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,iCAAiC;AAEvC,EAAMA,oBAAA,uBAAuB;AAC7B,EAAMA,oBAAA,+CAA+C;AACrD,EAAMA,oBAAA,0BAA0B;AAEhC,EAAMA,oBAAA,iBAAiB;AACvB,EAAMA,oBAAA,aAAa;AACnB,EAAMA,oBAAA,oBAAoB;AAC1B,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,gCAAgC;AACtC,EAAMA,oBAAA,qBAAqB;AAC3B,EAAMA,oBAAA,+BAA+B;AACrC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,qCAAqC;AAC3C,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,mBAAmB;AACzB,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,gBAAgB;AACtB,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,0CAA0C;AAEhD,EAAMA,oBAAA,QAAQ;AACd,EAAMA,oBAAA,oBAAoB;AAE1B,EAAMA,oBAAA,wBAAwB;AAE9B,EAAMA,oBAAA,iBAAiB;AACvB,EAAMA,oBAAA,mBAAmB;AAwEzB,WAAS,sBAAgC;AAC9C,WAAO;AAAA,MACL,WAAW;AAAA,QACT,MAAM;AAAA,QACN,QAAQ;AAAA,MACV;AAAA,MACA,cAAc,EAAE,OAAO,MAAM;AAAA,MAC7B,UAAU;AAAA,QACR,OAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,sBAAsB;AAAA,UACtB,KAAK;AAAA,UACL,+BAA+B;AAAA,QACjC;AAAA,QACA,cAAc;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA,UAAU;AAAA,QACR,uBAAuB;AAAA,QACvB,sBAAsB;AAAA,QACtB,mBAAmB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,yBAAyB;AAAA,QACzB,0BAA0B;AAAA,QAC1B,oBAAoB;AAAA,QACpB,6BAA6B;AAAA,QAC7B,sBAAsB;AAAA,QACtB,0BAA0B;AAAA,QAC1B,4BAA4B;AAAA,MAC9B;AAAA,MACA,aAAa;AAAA,QACX,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,aAAa;AAAA,QACf;AAAA,QACA,SAAS;AAAA,QACT,yBAAyB;AAAA,QACzB,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,SAAS;AAAA,QACT,gBAAgB;AAAA,QAChB,cAAc;AAAA,QACd,OAAO;AAAA,MACT;AAAA,MACA,KAAK;AAAA,QACH,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,mBAAmB;AAAA,QACnB,mBAAmB;AAAA,QACnB,iBAAiB;AAAA,QACjB,cAAc;AAAA,QACd,UAAU;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,QACA,oBAAoB;AAAA,QACpB,6BAA6B;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AApEO,EAAAA,oBAAS;AAsET,EAAMA,oBAAA,qBAIR;AAAA,IACH;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,EAAE,OAAOA,oBAAA,gBAAgB,aAAa,mBAAmB,cAAc,CAAC,EAAE;AAAA,IAC1E;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,iBAAiB;AAAA,IACnD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,iBAAiB;AAAA,IACnD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,0BAA0B,eAAe;AAAA,IAC1D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMF,cAAc,CAAC,iBAAiB,kCAAkC;AAAA,IACpE;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,qBAAqB;AAAA,IACvD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,EACF;AAAA,GA/ee;",
   "names": ["ConsolePermissions"]
 }

package/dist/search/cluster-search-fields.js

@@ -50,11 +50,19 @@ const CLUSTER_SEARCH_FIELDS = [
   {
     field: "generation",
     label: "Generation",
-    description: "Cluster generation name.",
+    description: "Cluster generation name. More than one generation can carry the same name. Use a full generationId to match exactly one.",
     type: "string",
     capabilities: ["match"],
     example: 'generation:"Zeebe 8.6.0"'
   },
+  {
+    field: "generationId",
+    label: "Generation ID",
+    description: "Generation UUID. A full UUID matches one generation, even when the name repeats. A value with * or ? can match more.",
+    type: "string",
+    capabilities: ["match"],
+    example: "generationId:66e00e17-ed33-469b-90e9-40a02d0e82e6"
+  },
   {
     field: "minorVersion",
     label: "Minor version",

package/dist/search/cluster-search-fields.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/search/cluster-search-fields.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { SearchFieldSpec } from './fields.js'\n\n/**\n * Searchable fields for the Clusters list (mirrors `ListClustersV2Params.filter`\n * \u2014 the fields the endpoint already filters on). `status`, `region`, and\n * `provider` are resolved server-side from live K8s state / context config, so\n * they only support equality. A bare term searches\n * {@link CLUSTER_DEFAULT_SEARCH_FIELDS}.\n */\nexport const CLUSTER_SEARCH_FIELDS: readonly SearchFieldSpec[] = [\n  {\n    field: 'name',\n    label: 'Name',\n    description: 'Cluster name (substring match; supports * and ?).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'name:prod',\n  },\n  {\n    field: 'id',\n    label: 'ID',\n    description: 'Cluster UUID (substring match).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'id:9c2b',\n  },\n  {\n    field: 'orgId',\n    label: 'Organization ID',\n    description: 'Owning organization UUID.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'orgId:2f1a9c3e-4b7d-4c2a-9f1e-8a6b5c4d3e2f',\n  },\n  {\n    field: 'status',\n    label: 'Status',\n    description: 'Live cluster health (e.g. healthy, unhealthy, updating).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'status:healthy',\n  },\n  {\n    field: 'plan',\n    label: 'Plan type',\n    description: 'Cluster plan-type name (e.g. Trial, Production-S).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'plan:Production-S',\n  },\n  {\n    field: 'planName',\n    label: 'Plan name',\n    description: 'The concrete cluster-plan name (not the type).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'planName:\"Trial Cluster\"',\n  },\n  {\n    field: 'generation',\n    label: 'Generation',\n    description: 'Cluster generation name.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'generation:\"Zeebe 8.6.0\"',\n  },\n  {\n    field: 'minorVersion',\n    label: 'Minor version',\n    description: 'Zeebe minor-version prefix (e.g. 8.7 matches 8.7.x).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'minorVersion:8.7',\n  },\n  {\n    field: 'channel',\n    label: 'Channel',\n    description: 'Release channel name.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'channel:Stable',\n  },\n  {\n    field: 'region',\n    label: 'Region',\n    description: 'Region name (resolved from the K8s context).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'region:\"Europe West\"',\n  },\n  {\n    field: 'provider',\n    label: 'Cloud provider',\n    description: 'Cloud provider (resolved from the K8s context).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'provider:gcp',\n  },\n  {\n    field: 'k8sContext',\n    label: 'K8s context',\n    description: 'Exact K8s context UUID.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'k8sContext:7d3b2a10-9e5f-4c1b-b8a2-1f2e3d4c5b6a',\n  },\n  {\n    field: 'autoUpdate',\n    label: 'Auto-update',\n    description: 'Whether auto-update is enabled.',\n    type: 'boolean',\n    capabilities: ['match'],\n    example: 'autoUpdate:false',\n  },\n  {\n    field: 'internal',\n    label: 'Internal',\n    description: 'Whether the cluster is Camunda-owned.',\n    type: 'boolean',\n    capabilities: ['match'],\n    example: 'internal:true',\n  },\n  {\n    field: 'hasActiveModification',\n    label: 'Active modification',\n    description:\n      'Whether the cluster has an active (non-archived) modification.',\n    type: 'boolean',\n    capabilities: ['match'],\n    example: 'hasActiveModification:true',\n  },\n  {\n    field: 'created',\n    label: 'Created',\n    description: 'Creation date (ISO, e.g. 2024-01-31). Supports ranges.',\n    type: 'date',\n    capabilities: ['match', 'range'],\n    example: 'created:>2024-01-01',\n  },\n] as const\n\n/** Fields a bare term searches for clusters (name substring \u2014 matches `q`). */\nexport const CLUSTER_DEFAULT_SEARCH_FIELDS = ['name'] as const\n"],
-  "mappings": "AAeO,MAAM,wBAAoD;AAAA,EAC/D;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,IACF,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,SAAS,OAAO;AAAA,IAC/B,SAAS;AAAA,EACX;AACF;AAGO,MAAM,gCAAgC,CAAC,MAAM;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { SearchFieldSpec } from './fields.js'\n\n/**\n * Searchable fields for the Clusters list (mirrors `ListClustersV2Params.filter`\n * \u2014 the fields the endpoint already filters on). `status`, `region`, and\n * `provider` are resolved server-side from live K8s state / context config, so\n * they only support equality. A bare term searches\n * {@link CLUSTER_DEFAULT_SEARCH_FIELDS}.\n */\nexport const CLUSTER_SEARCH_FIELDS: readonly SearchFieldSpec[] = [\n  {\n    field: 'name',\n    label: 'Name',\n    description: 'Cluster name (substring match; supports * and ?).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'name:prod',\n  },\n  {\n    field: 'id',\n    label: 'ID',\n    description: 'Cluster UUID (substring match).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'id:9c2b',\n  },\n  {\n    field: 'orgId',\n    label: 'Organization ID',\n    description: 'Owning organization UUID.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'orgId:2f1a9c3e-4b7d-4c2a-9f1e-8a6b5c4d3e2f',\n  },\n  {\n    field: 'status',\n    label: 'Status',\n    description: 'Live cluster health (e.g. healthy, unhealthy, updating).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'status:healthy',\n  },\n  {\n    field: 'plan',\n    label: 'Plan type',\n    description: 'Cluster plan-type name (e.g. Trial, Production-S).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'plan:Production-S',\n  },\n  {\n    field: 'planName',\n    label: 'Plan name',\n    description: 'The concrete cluster-plan name (not the type).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'planName:\"Trial Cluster\"',\n  },\n  {\n    field: 'generation',\n    label: 'Generation',\n    description:\n      'Cluster generation name. More than one generation can carry the same name. Use a full generationId to match exactly one.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'generation:\"Zeebe 8.6.0\"',\n  },\n  {\n    field: 'generationId',\n    label: 'Generation ID',\n    description:\n      'Generation UUID. A full UUID matches one generation, even when the name repeats. A value with * or ? can match more.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'generationId:66e00e17-ed33-469b-90e9-40a02d0e82e6',\n  },\n  {\n    field: 'minorVersion',\n    label: 'Minor version',\n    description: 'Zeebe minor-version prefix (e.g. 8.7 matches 8.7.x).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'minorVersion:8.7',\n  },\n  {\n    field: 'channel',\n    label: 'Channel',\n    description: 'Release channel name.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'channel:Stable',\n  },\n  {\n    field: 'region',\n    label: 'Region',\n    description: 'Region name (resolved from the K8s context).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'region:\"Europe West\"',\n  },\n  {\n    field: 'provider',\n    label: 'Cloud provider',\n    description: 'Cloud provider (resolved from the K8s context).',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'provider:gcp',\n  },\n  {\n    field: 'k8sContext',\n    label: 'K8s context',\n    description: 'Exact K8s context UUID.',\n    type: 'string',\n    capabilities: ['match'],\n    example: 'k8sContext:7d3b2a10-9e5f-4c1b-b8a2-1f2e3d4c5b6a',\n  },\n  {\n    field: 'autoUpdate',\n    label: 'Auto-update',\n    description: 'Whether auto-update is enabled.',\n    type: 'boolean',\n    capabilities: ['match'],\n    example: 'autoUpdate:false',\n  },\n  {\n    field: 'internal',\n    label: 'Internal',\n    description: 'Whether the cluster is Camunda-owned.',\n    type: 'boolean',\n    capabilities: ['match'],\n    example: 'internal:true',\n  },\n  {\n    field: 'hasActiveModification',\n    label: 'Active modification',\n    description:\n      'Whether the cluster has an active (non-archived) modification.',\n    type: 'boolean',\n    capabilities: ['match'],\n    example: 'hasActiveModification:true',\n  },\n  {\n    field: 'created',\n    label: 'Created',\n    description: 'Creation date (ISO, e.g. 2024-01-31). Supports ranges.',\n    type: 'date',\n    capabilities: ['match', 'range'],\n    example: 'created:>2024-01-01',\n  },\n] as const\n\n/** Fields a bare term searches for clusters (name substring \u2014 matches `q`). */\nexport const CLUSTER_DEFAULT_SEARCH_FIELDS = ['name'] as const\n"],
+  "mappings": "AAeO,MAAM,wBAAoD;AAAA,EAC/D;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,IACF,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,IACF,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,IACF,MAAM;AAAA,IACN,cAAc,CAAC,OAAO;AAAA,IACtB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,cAAc,CAAC,SAAS,OAAO;AAAA,IAC/B,SAAS;AAAA,EACX;AACF;AAGO,MAAM,gCAAgC,CAAC,MAAM;",
   "names": []
 }

package/dist/search/compiler.d.ts

@@ -40,6 +40,31 @@ export interface CompiledQuery {
 }
 /** Compile a parsed query into a single parameterized SQL fragment. */
 export declare const compileQuery: (node: QueryNode, ctx: CompileContext) => CompiledQuery;
+/**
+ * Match `column` against an id set that arrives as ONE parameter.
+ *
+ * `IN (:...ids)` expands to one bind parameter, and one literal in the
+ * statement, for each id. A dimension that does not live in SQL resolves to an
+ * id set, and such a set follows the size of the fleet: the prod cluster fleet
+ * is more than 1000. Both the statement text and the parameter count would
+ * grow with it, and Postgres would plan the statement again at every size.
+ *
+ * Postgres splits the string here, thus the statement text is constant.
+ * `= ANY(...)` can still use an index on the column.
+ */
+export declare const idSetPredicate: (column: string, parameter: string) => string;
+/**
+ * The id set as one separated string, for {@link idSetPredicate}.
+ *
+ * The value is a bind parameter, thus it cannot change the statement. But an
+ * id that holds the separator would become two ids, thus such an id is
+ * dropped. The id columns are text columns, so this stays a guard and not an
+ * assumption.
+ *
+ * An empty string gives an empty array in Postgres. Thus the match finds
+ * nothing, which is correct for an empty set.
+ */
+export declare const joinIdSet: (ids: readonly string[]) => string;
 /**
  * Turn a user value into an ILIKE argument: SQL wildcards (`%`, `_`, `\`) are
  * escaped to literals, then the user's `*`/`?` become `%`/`_`; a plain

package/dist/search/compiler.js

@@ -93,7 +93,7 @@ class Compiler {
     if (ids.length === 0) {
       return "1 = 0";
     }
-    return `${binding.idColumn} IN (${this.bind(ids, true)})`;
+    return idSetPredicate(binding.idColumn, this.bindName(joinIdSet(ids)));
   }
   dateTerm(binding, canonical, operator, value) {
     if (operator === ":") {
@@ -158,13 +158,20 @@ class Compiler {
     }
     return parsed;
   }
-  bind(value, isList = false) {
+  /** Register a value and give back its parameter name, with no marker. */
+  bindName(value) {
     const name = `${this.ctx.paramPrefix}_${this.counter++}`;
     this.params[name] = value;
-    return isList ? `:...${name}` : `:${name}`;
+    return name;
+  }
+  bind(value) {
+    return `:${this.bindName(value)}`;
   }
 }
 const compileQuery = (node, ctx) => new Compiler(ctx).compile(node);
+const ID_SET_SEPARATOR = ",";
+const idSetPredicate = (column, parameter) => `${column} = ANY(string_to_array(:${parameter}, '${ID_SET_SEPARATOR}'))`;
+const joinIdSet = (ids) => ids.filter((id) => !id.includes(ID_SET_SEPARATOR)).join(ID_SET_SEPARATOR);
 const likeArgument = (value, match) => {
   const escaped = value.replace(/([\\%_])/g, "\\$1");
   if (/[*?]/.test(value)) {
@@ -212,6 +219,8 @@ const editDistance = (left, right) => {
 };
 export {
   compileQuery,
+  idSetPredicate,
+  joinIdSet,
   likeArgument
 };
 //# sourceMappingURL=compiler.js.map