@camunda/ccma-shared-types 5.0.0 → 6.0.0

package/dist/dtos/Hdp.dto.d.ts

@@ -88,96 +88,13 @@ export declare namespace Hdp {
          */
         priorHostingCostUsd?: number;
         /**
-         * How the current window compares to the prior one: `up`/`down` when the
-         * change exceeds a ±5% threshold, `flat` when it is within it. Absent
-         * whenever `priorHostingCostUsd` is — a percent change needs a real,
-         * non-zero base to compare against, so a cluster with no prior-window
-         * data gets no trend rather than a misleading "up" or "down".
+         * How the current window compares to the prior one. The value is `up` or
+         * `down` when the change is more than 5%, and `flat` when it is within 5%.
+         * The field is absent when `priorHostingCostUsd` is absent, zero, or
+         * negative. A percent change needs a positive base, and a negative prior
+         * is a credit.
          */
         trend?: 'up' | 'down' | 'flat';
-        /**
-         * The cost-type split (COGS vs R&D) of `hostingCostUsd` over the same
-         * window, from the `cost_type` column of the same HDP table. Present
-         * only when `control.clusterHostingCostBreakdown` is on for the caller
-         * — see `HdpDataHostingCostController.getHostingCost`. Absent rather
-         * than computed-then-hidden when the flag is off.
-         */
-        costTypeBreakdown?: ClusterHostingCostByType;
-        /**
-         * The allocation-pool split of `hostingCostUsd` over the same window,
-         * from the nine `allocated_*` columns of the same HDP table — see
-         * {@link ClusterHostingCostAllocation}. Gated by the same flag as
-         * `costTypeBreakdown`, and absent for the same reason when it is off.
-         */
-        allocationBreakdown?: ClusterHostingCostAllocation;
-    }
-    /**
-     * The cost-type split of a `ClusterHostingCost` window. `cost_type`
-     * classification is point-in-time against the FinOps mapping sheet, so
-     * re-running this query later can classify the same historic day's spend
-     * differently.
-     *
-     * `cogsUsd + rdUsd + otherUsd` reconciles to the window's
-     * `hostingCostUsd` to within half a cent. `otherUsd` is not read from
-     * the table with its own `cost_type` filter: it is `hostingCostUsd` minus
-     * the other two, rounded to the cent. Only `otherUsd` is rounded;
-     * `hostingCostUsd`, `cogsUsd` and `rdUsd` keep the full precision of the
-     * table, so a sum can differ from the total by that rounding. A `cost_type` value
-     * this split does not know about (a third category, or none at all)
-     * still lands somewhere visible instead of vanishing from the total. A
-     * negative `otherUsd` is possible in principle (`cogsUsd + rdUsd`
-     * exceeding `hostingCostUsd`) and is left visible rather than clamped to
-     * 0, because it would mean the two named sums are wrong, not that the
-     * remainder is — clamping would hide exactly the bug a Camundi most
-     * needs to see.
-     */
-    interface ClusterHostingCostByType {
-        /** Cost of Goods Sold: the loaded cost classified as `cost_type = 'COGS'`. */
-        cogsUsd: number;
-        /** Research & Development: the loaded cost classified as `cost_type = 'R&D'`. */
-        rdUsd: number;
-        /** The window's cost that `cogsUsd` and `rdUsd` do not account for. */
-        otherUsd: number;
-    }
-    /**
-     * The allocation-pool split of a `ClusterHostingCost` window: up to nine
-     * `allocated_*` columns of the same HDP table, each summed over the
-     * window the same way `hostingCostUsd` is. On a `direct`/`nonprod_direct`
-     * row, each pool is the dollar share of `loaded_cost` that one allocation
-     * reason contributes.
-     *
-     * Every field is optional and present only when nonzero for the window:
-     * a cluster rarely has all nine populated (most report a nonzero value in
-     * only one or two), and a $0 line for the rest would be noise rather than
-     * signal. `HdpDataHostingCostController.getHostingCost` filters the zero
-     * ones out before returning, and leaves `allocationBreakdown` itself
-     * absent when none of the nine are nonzero.
-     *
-     * These fields do NOT have to sum to `hostingCostUsd`, or to
-     * `hostingCostUsd` minus `costTypeBreakdown`'s fields: `toolingLicenseUsd`
-     * adds a cost (SaaS vendor tooling) rather than reallocating an existing
-     * one, so the pools present can sum past the window's total. Read each
-     * field as its own dollar amount, not as a share of a reconciling whole.
-     */
-    interface ClusterHostingCostAllocation {
-        /** Share of shared infra namespaces inside the same client project. */
-        infraNamespaceUsd?: number;
-        /** Share of idle purchased GKE capacity. */
-        gkeUnallocatedUsd?: number;
-        /** Share of GKE system overhead (kubelet, kube-proxy, containerd). */
-        gkeSystemOverheadUsd?: number;
-        /** Share of spend-based CUDs that GKE cannot attribute to a namespace. */
-        gkeUnsupportedSkuUsd?: number;
-        /** Share of SKUs that GKE has not yet processed. */
-        gkeUnknownUsd?: number;
-        /** Share of `saas_prod` support projects. Paid clusters only. */
-        saasProdSupportUsd?: number;
-        /** Share of the account that serves both cloud estates. Paid clusters only. */
-        awsGcpSharedUsd?: number;
-        /** Share of SaaS vendor tooling (Tsuga, Cloudflare, DoiT, Terraform). Adds cost; does not reallocate it. */
-        toolingLicenseUsd?: number;
-        /** Share of shared cost inside the same `saas_non_prod` project. */
-        nonprodSharedUsd?: number;
     }
     /** The loaded cost of one cluster over the fleet cost window. */
     interface FleetHostingCostRow {

package/dist/dtos/Organization.dto.d.ts

@@ -57,6 +57,16 @@ export interface OrganizationMetadata {
          * that matches on the name of the key.
          */
         keyHash?: string;
+        /**
+         * UUID of the OpenRouter workspace that holds this key. Absent for a
+         * LiteLLM key, and for an OpenRouter key that lives in the default
+         * workspace.
+         *
+         * A key stays in its workspace for its whole life, and a list request
+         * covers one workspace. So the lost-hash recovery by name needs this value
+         * to look in the right workspace after the configured one changed.
+         */
+        workspaceId?: string;
         /**
          * The key that a provider migration replaced, kept until the delete of
          * that key is confirmed.

package/dist/dtos/Organization.dto.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/dtos/Organization.dto.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationPermissions } from '../types/OrganizationPermission.type.js'\nimport type { SalesPlanType } from '../types/SalesPlanType.type.js'\nimport type { ClusterCreationDefaults } from './ClusterCreationDefaults.dto.js'\nimport type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js'\n\nexport type LicensingModelType = 'legacy' | '2025'\n\nexport const VALID_LICENSING_MODELS: readonly LicensingModelType[] = [\n  'legacy',\n  '2025',\n] as const\n\nexport const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string> =\n  {\n    legacy: 'Legacy (PI, DI, TU)',\n    '2025': '2025 (PI+Tenant)',\n  } as const\n\n/**\n * Upstream that holds a managed LLM key.\n *\n * `@camunda-cloud/featureflags` owns the `LlmProvider` type and its rollout\n * rules. This package must not depend on that one, so the union is repeated\n * here. Keep the two in step.\n */\nexport type LlmProviderName = 'litellm' | 'openrouter'\n\nexport interface OrganizationMetadata {\n  clickedRequestPaidPlan?: boolean\n  /**\n   * Default values for the settings of a new cluster of this organization\n   * (#9732). They seed a cluster at creation and are never applied again.\n   *\n   * A field that is absent takes the value that the console backend writes.\n   * The whole key is absent for almost every organization.\n   */\n  clusterDefaults?: ClusterCreationDefaults\n  salesForceId?: string\n  enterpriseDevOnly?: boolean\n  awsOnly?: boolean\n  licensingModel?: LicensingModelType\n  autoJoin?: AutoJoinAssignment\n  llm?: {\n    tenantKey: string\n    /**\n     * Team that holds the key on LiteLLM.\n     *\n     * Optional, and every call site already treats it as such. Old LiteLLM\n     * orgs got a key without a team. OpenRouter has no teams at all.\n     */\n    teamId?: string\n    created: number\n    /** Epoch ms of the last key rotation \u2014 set when the tenant key is regenerated. */\n    updated?: number\n    /**\n     * Upstream that holds this key. Absent means `litellm`, because every key\n     * from before the OpenRouter rollout is on LiteLLM.\n     *\n     * This value, and not the OpenRouter feature flag, decides where the\n     * read, block, top-up and delete paths look for the key. A flag change\n     * must never move a live key to a provider that does not hold it.\n     */\n    provider?: LlmProviderName\n    /**\n     * Handle for the key on OpenRouter, which addresses a key by hash and not\n     * by its value. Absent for a LiteLLM key.\n     *\n     * Without it, an OpenRouter key can be found again only by a list request\n     * that matches on the name of the key.\n     */\n    keyHash?: string\n    /**\n     * The key that a provider migration replaced, kept until the delete of\n     * that key is confirmed.\n     *\n     * The migration to OpenRouter writes the new key over `tenantKey` before\n     * it deletes the old one. Without this record the old key stays alive on\n     * the old upstream and nothing points at it. The migration removes this\n     * field when the old upstream confirms the delete, and it uses the field\n     * to find the orgs that a re-run must finish.\n     *\n     * Absent for every org that never moved upstream.\n     */\n    migratedFrom?: {\n      /** Upstream that holds the replaced key. */\n      provider: LlmProviderName\n      /** The replaced key itself. It is a credential. Never log it. */\n      tenantKey: string\n      /** Team that held the replaced key on LiteLLM. */\n      teamId?: string\n    }\n  }\n}\n\nexport interface AutoJoinAssignment {\n  departments: Array<{ hibobId: string; roles: string[] }>\n  divisions: Array<{ hibobId: string; roles: string[] }>\n  subdivisions: Array<{ hibobId: string; roles: string[] }>\n}\nexport interface OrganizationDto {\n  uuid: string\n  name: string\n  organizationToSalesPlan?: OrganizationToSalesPlanDto\n  permissions?: OrganizationPermissions\n  metadata?: OrganizationMetadata\n  created: Date\n  internal: boolean\n}\n\nexport interface OrgOwner {\n  owner: string\n  email: string\n  first: string\n  last: string\n}\n\nexport interface OrgWithNameAndSalesPlan {\n  uuid: string\n  name: string | undefined\n  salesPlanName: string | undefined\n  salesPlanUuid: string | undefined\n  salesPlanType: SalesPlanType | undefined\n}\n"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { OrganizationPermissions } from '../types/OrganizationPermission.type.js'\nimport type { SalesPlanType } from '../types/SalesPlanType.type.js'\nimport type { ClusterCreationDefaults } from './ClusterCreationDefaults.dto.js'\nimport type { OrganizationToSalesPlanDto } from './OrganizationToSalesPlan.dto.js'\n\nexport type LicensingModelType = 'legacy' | '2025'\n\nexport const VALID_LICENSING_MODELS: readonly LicensingModelType[] = [\n  'legacy',\n  '2025',\n] as const\n\nexport const LICENSING_MODEL_DISPLAY_NAMES: Record<LicensingModelType, string> =\n  {\n    legacy: 'Legacy (PI, DI, TU)',\n    '2025': '2025 (PI+Tenant)',\n  } as const\n\n/**\n * Upstream that holds a managed LLM key.\n *\n * `@camunda-cloud/featureflags` owns the `LlmProvider` type and its rollout\n * rules. This package must not depend on that one, so the union is repeated\n * here. Keep the two in step.\n */\nexport type LlmProviderName = 'litellm' | 'openrouter'\n\nexport interface OrganizationMetadata {\n  clickedRequestPaidPlan?: boolean\n  /**\n   * Default values for the settings of a new cluster of this organization\n   * (#9732). They seed a cluster at creation and are never applied again.\n   *\n   * A field that is absent takes the value that the console backend writes.\n   * The whole key is absent for almost every organization.\n   */\n  clusterDefaults?: ClusterCreationDefaults\n  salesForceId?: string\n  enterpriseDevOnly?: boolean\n  awsOnly?: boolean\n  licensingModel?: LicensingModelType\n  autoJoin?: AutoJoinAssignment\n  llm?: {\n    tenantKey: string\n    /**\n     * Team that holds the key on LiteLLM.\n     *\n     * Optional, and every call site already treats it as such. Old LiteLLM\n     * orgs got a key without a team. OpenRouter has no teams at all.\n     */\n    teamId?: string\n    created: number\n    /** Epoch ms of the last key rotation \u2014 set when the tenant key is regenerated. */\n    updated?: number\n    /**\n     * Upstream that holds this key. Absent means `litellm`, because every key\n     * from before the OpenRouter rollout is on LiteLLM.\n     *\n     * This value, and not the OpenRouter feature flag, decides where the\n     * read, block, top-up and delete paths look for the key. A flag change\n     * must never move a live key to a provider that does not hold it.\n     */\n    provider?: LlmProviderName\n    /**\n     * Handle for the key on OpenRouter, which addresses a key by hash and not\n     * by its value. Absent for a LiteLLM key.\n     *\n     * Without it, an OpenRouter key can be found again only by a list request\n     * that matches on the name of the key.\n     */\n    keyHash?: string\n    /**\n     * UUID of the OpenRouter workspace that holds this key. Absent for a\n     * LiteLLM key, and for an OpenRouter key that lives in the default\n     * workspace.\n     *\n     * A key stays in its workspace for its whole life, and a list request\n     * covers one workspace. So the lost-hash recovery by name needs this value\n     * to look in the right workspace after the configured one changed.\n     */\n    workspaceId?: string\n    /**\n     * The key that a provider migration replaced, kept until the delete of\n     * that key is confirmed.\n     *\n     * The migration to OpenRouter writes the new key over `tenantKey` before\n     * it deletes the old one. Without this record the old key stays alive on\n     * the old upstream and nothing points at it. The migration removes this\n     * field when the old upstream confirms the delete, and it uses the field\n     * to find the orgs that a re-run must finish.\n     *\n     * Absent for every org that never moved upstream.\n     */\n    migratedFrom?: {\n      /** Upstream that holds the replaced key. */\n      provider: LlmProviderName\n      /** The replaced key itself. It is a credential. Never log it. */\n      tenantKey: string\n      /** Team that held the replaced key on LiteLLM. */\n      teamId?: string\n    }\n  }\n}\n\nexport interface AutoJoinAssignment {\n  departments: Array<{ hibobId: string; roles: string[] }>\n  divisions: Array<{ hibobId: string; roles: string[] }>\n  subdivisions: Array<{ hibobId: string; roles: string[] }>\n}\nexport interface OrganizationDto {\n  uuid: string\n  name: string\n  organizationToSalesPlan?: OrganizationToSalesPlanDto\n  permissions?: OrganizationPermissions\n  metadata?: OrganizationMetadata\n  created: Date\n  internal: boolean\n}\n\nexport interface OrgOwner {\n  owner: string\n  email: string\n  first: string\n  last: string\n}\n\nexport interface OrgWithNameAndSalesPlan {\n  uuid: string\n  name: string | undefined\n  salesPlanName: string | undefined\n  salesPlanUuid: string | undefined\n  salesPlanType: SalesPlanType | undefined\n}\n"],
   "mappings": "AAaO,MAAM,yBAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,gCACX;AAAA,EACE,QAAQ;AAAA,EACR,QAAQ;AACV;",
   "names": []
 }

package/dist/enums/SystemAuditEntity.enum.d.ts

@@ -11,7 +11,8 @@ export declare enum SystemAuditEntity {
     CONNECTION = "Connection",
     RELEASE_TRAIN = "Release Train",
     CLUSTER = "Cluster",
-    APPROVAL_JOB = "Approval Request"
+    APPROVAL_JOB = "Approval Request",
+    FEATURE_FLAG = "Feature Flag"
 }
 /**
  * Display strings for audited attributes. The `entity` + `entityAttribute` pair
@@ -75,5 +76,6 @@ export declare enum SystemAuditEntityAttribute {
     CLUSTER_APPLIED_PLAN_MODIFICATION = "Plan Modification",
     APPROVAL_JOB_STATUS = "Status",
     APPROVAL_JOB_ACKS = "Approvals",
-    APPROVAL_JOB_CLOSED_REASON = "Closure Reason"
+    APPROVAL_JOB_CLOSED_REASON = "Closure Reason",
+    FEATURE_FLAG_ROW = "Row"
 }

package/dist/enums/SystemAuditEntity.enum.js

@@ -12,6 +12,7 @@ var SystemAuditEntity = /* @__PURE__ */ ((SystemAuditEntity2) => {
   SystemAuditEntity2["RELEASE_TRAIN"] = "Release Train";
   SystemAuditEntity2["CLUSTER"] = "Cluster";
   SystemAuditEntity2["APPROVAL_JOB"] = "Approval Request";
+  SystemAuditEntity2["FEATURE_FLAG"] = "Feature Flag";
   return SystemAuditEntity2;
 })(SystemAuditEntity || {});
 var SystemAuditEntityAttribute = /* @__PURE__ */ ((SystemAuditEntityAttribute2) => {
@@ -70,6 +71,7 @@ var SystemAuditEntityAttribute = /* @__PURE__ */ ((SystemAuditEntityAttribute2)
   SystemAuditEntityAttribute2["APPROVAL_JOB_STATUS"] = "Status";
   SystemAuditEntityAttribute2["APPROVAL_JOB_ACKS"] = "Approvals";
   SystemAuditEntityAttribute2["APPROVAL_JOB_CLOSED_REASON"] = "Closure Reason";
+  SystemAuditEntityAttribute2["FEATURE_FLAG_ROW"] = "Row";
   return SystemAuditEntityAttribute2;
 })(SystemAuditEntityAttribute || {});
 export {

package/dist/enums/SystemAuditEntity.enum.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/enums/SystemAuditEntity.enum.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum SystemAuditEntity {\n  GENERATION = 'Generation',\n  CHANNEL = 'Channel',\n  CLUSTER_PLAN = 'Cluster Plan',\n  CLUSTER_PLAN_TYPE = 'Cluster Plan Type',\n  ALPHA_FEATURE = 'Alpha Feature',\n  SALES_PLAN = 'Sales Plan',\n  CLUSTER_PLAN_MODIFICATION = 'Cluster Plan Modification',\n  CLUSTER_BULK_OPERATION = 'Cluster Bulk Operation',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n  CONNECTION = 'Connection',\n  RELEASE_TRAIN = 'Release Train',\n  CLUSTER = 'Cluster',\n  APPROVAL_JOB = 'Approval Request',\n}\n\n/**\n * Display strings for audited attributes. The `entity` + `entityAttribute` pair\n * is always the key, so duplicate display values across entities (e.g. several\n * `*_NAME = 'Name'`) are intentional and safe. `*_STATUS = 'Status'` is the\n * lifecycle attribute for the modification/operation entities; its from/to carry\n * the raw lifecycle state.\n */\nexport enum SystemAuditEntityAttribute {\n  // Generation\n  GENERATION_NAME = 'Name',\n  GENERATION_VERSIONS = 'Versions',\n  GENERATION_UPGRADEABLE_FROM = 'Upgradeable From',\n  GENERATION_UPGRADEABLE_TO = 'Upgradeable To',\n  GENERATION_SUPPORTED_UNTIL = 'Supported Until',\n  GENERATION_BESPOKE = 'Bespoke',\n  GENERATION_ARCHIVED = 'Archived',\n  // Channel\n  CHANNEL_NAME = 'Name',\n  CHANNEL_DESCRIPTION = 'Description',\n  CHANNEL_DEFAULT_GENERATION = 'Default Generation',\n  CHANNEL_ALLOWED_GENERATIONS = 'Allowed Generations',\n  CHANNEL_IS_DEFAULT = 'Is Default',\n  // ClusterPlan\n  CLUSTER_PLAN_MIGRATABLE_FROM = 'Migratable From',\n  CLUSTER_PLAN_PERFORMANCE_EXPECTATIONS = 'Performance Expectations',\n  // ClusterPlanType\n  CLUSTER_PLAN_TYPE_NAME = 'Name',\n  CLUSTER_PLAN_TYPE_DESCRIPTION = 'Description',\n  CLUSTER_PLAN_TYPE_DEVELOPMENT = 'Development',\n  CLUSTER_PLAN_TYPE_CATEGORY = 'Category',\n  CLUSTER_PLAN_TYPE_AVAILABILITY_CLASS = 'Availability Class',\n  CLUSTER_PLAN_TYPE_ACTIVE_PLAN = 'Active Plan',\n  CLUSTER_PLAN_TYPE_LIMITS = 'Limits',\n  // AlphaFeature (EarlyAccessFeature)\n  ALPHA_FEATURE_NAME = 'Name',\n  ALPHA_FEATURE_AVAILABLE_IN = 'Available In',\n  ALPHA_FEATURE_DOCUMENTATION_LINK = 'Documentation Link',\n  ALPHA_FEATURE_DESCRIPTION = 'Description',\n  ALPHA_FEATURE_ACTION_LABEL = 'Action Label',\n  ALPHA_FEATURE_ACTION_URL = 'Action Url',\n  ALPHA_FEATURE_CLICKWRAP = 'Clickwrap',\n  ALPHA_FEATURE_SALES_PLAN_TYPE_VISIBILITIES = 'Sales Plan Type Visibilities',\n  // SalesPlan\n  SALES_PLAN_NAME = 'Name',\n  SALES_PLAN_METADATA = 'Metadata',\n  SALES_PLAN_CLUSTER_PLAN_CONFIGURATION = 'Cluster Plan Configuration',\n  SALES_PLAN_VERSION = 'Version',\n  // ClusterPlanModification\n  CLUSTER_PLAN_MODIFICATION_NAME = 'Name',\n  CLUSTER_PLAN_MODIFICATION_DESCRIPTION = 'Description',\n  CLUSTER_PLAN_MODIFICATION_CONFIG = 'Config',\n  CLUSTER_PLAN_MODIFICATION_CLUSTER_PLANS = 'Cluster Plans',\n  CLUSTER_PLAN_MODIFICATION_URL = 'Url',\n  CLUSTER_PLAN_MODIFICATION_STATUS = 'Status',\n  // ClusterBulkOperation\n  CLUSTER_BULK_OPERATION_CLUSTERS = 'Clusters',\n  CLUSTER_BULK_OPERATION_STATUS = 'Status',\n  // ClusterModification (parent + config)\n  CLUSTER_MODIFICATION_DESCRIPTION = 'Description',\n  CLUSTER_MODIFICATION_URL = 'Url',\n  CLUSTER_MODIFICATION_PLAN_MODIFICATIONS = 'Plan Modifications',\n  CLUSTER_MODIFICATION_EXPIRES_AT = 'Expires At',\n  CLUSTER_MODIFICATION_STATUS = 'Status',\n  // Connection\n  CONNECTION_NAME = 'Name',\n  CONNECTION_STRATEGY = 'Strategy',\n  CONNECTION_CONFIGURATION = 'Configuration',\n  // Cluster (internal-only lifecycle actions with no customer-facing audit)\n  CLUSTER_IP_ALLOWLIST = 'IP Allowlist',\n  CLUSTER_ENV_VAR_OVERRIDE = 'Environment Variable Override',\n  // A cluster plan modification that was applied to (and updated) this cluster.\n  CLUSTER_APPLIED_PLAN_MODIFICATION = 'Plan Modification',\n  // ApprovalJob. Every change of state of a four-eyes request is audited, not\n  // only the run: the value of the trail is the answer to \"who decided what,\n  // and when\", and a record of the outcome alone cannot give it.\n  APPROVAL_JOB_STATUS = 'Status',\n  APPROVAL_JOB_ACKS = 'Approvals',\n  APPROVAL_JOB_CLOSED_REASON = 'Closure Reason',\n}\n"],
-  "mappings": "AAOO,IAAK,oBAAL,kBAAKA,uBAAL;AACL,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,aAAU;AACV,EAAAA,mBAAA,kBAAe;AACf,EAAAA,mBAAA,uBAAoB;AACpB,EAAAA,mBAAA,mBAAgB;AAChB,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,+BAA4B;AAC5B,EAAAA,mBAAA,4BAAyB;AACzB,EAAAA,mBAAA,0BAAuB;AACvB,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,mBAAgB;AAChB,EAAAA,mBAAA,aAAU;AACV,EAAAA,mBAAA,kBAAe;AAbL,SAAAA;AAAA,GAAA;AAuBL,IAAK,6BAAL,kBAAKC,gCAAL;AAEL,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,iCAA8B;AAC9B,EAAAA,4BAAA,+BAA4B;AAC5B,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,wBAAqB;AACrB,EAAAA,4BAAA,yBAAsB;AAEtB,EAAAA,4BAAA,kBAAe;AACf,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,iCAA8B;AAC9B,EAAAA,4BAAA,wBAAqB;AAErB,EAAAA,4BAAA,kCAA+B;AAC/B,EAAAA,4BAAA,2CAAwC;AAExC,EAAAA,4BAAA,4BAAyB;AACzB,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,0CAAuC;AACvC,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,wBAAqB;AACrB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,+BAA4B;AAC5B,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,8BAA2B;AAC3B,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,gDAA6C;AAE7C,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,2CAAwC;AACxC,EAAAA,4BAAA,wBAAqB;AAErB,EAAAA,4BAAA,oCAAiC;AACjC,EAAAA,4BAAA,2CAAwC;AACxC,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,6CAA0C;AAC1C,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,sCAAmC;AAEnC,EAAAA,4BAAA,qCAAkC;AAClC,EAAAA,4BAAA,mCAAgC;AAEhC,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,8BAA2B;AAC3B,EAAAA,4BAAA,6CAA0C;AAC1C,EAAAA,4BAAA,qCAAkC;AAClC,EAAAA,4BAAA,iCAA8B;AAE9B,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,0BAAuB;AACvB,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,uCAAoC;AAIpC,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,gCAA6B;AAtEnB,SAAAA;AAAA,GAAA;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/* eslint-disable no-shadow */\nexport enum SystemAuditEntity {\n  GENERATION = 'Generation',\n  CHANNEL = 'Channel',\n  CLUSTER_PLAN = 'Cluster Plan',\n  CLUSTER_PLAN_TYPE = 'Cluster Plan Type',\n  ALPHA_FEATURE = 'Alpha Feature',\n  SALES_PLAN = 'Sales Plan',\n  CLUSTER_PLAN_MODIFICATION = 'Cluster Plan Modification',\n  CLUSTER_BULK_OPERATION = 'Cluster Bulk Operation',\n  CLUSTER_MODIFICATION = 'Cluster Modification',\n  CONNECTION = 'Connection',\n  RELEASE_TRAIN = 'Release Train',\n  CLUSTER = 'Cluster',\n  APPROVAL_JOB = 'Approval Request',\n  FEATURE_FLAG = 'Feature Flag',\n}\n\n/**\n * Display strings for audited attributes. The `entity` + `entityAttribute` pair\n * is always the key, so duplicate display values across entities (e.g. several\n * `*_NAME = 'Name'`) are intentional and safe. `*_STATUS = 'Status'` is the\n * lifecycle attribute for the modification/operation entities; its from/to carry\n * the raw lifecycle state.\n */\nexport enum SystemAuditEntityAttribute {\n  // Generation\n  GENERATION_NAME = 'Name',\n  GENERATION_VERSIONS = 'Versions',\n  GENERATION_UPGRADEABLE_FROM = 'Upgradeable From',\n  GENERATION_UPGRADEABLE_TO = 'Upgradeable To',\n  GENERATION_SUPPORTED_UNTIL = 'Supported Until',\n  GENERATION_BESPOKE = 'Bespoke',\n  GENERATION_ARCHIVED = 'Archived',\n  // Channel\n  CHANNEL_NAME = 'Name',\n  CHANNEL_DESCRIPTION = 'Description',\n  CHANNEL_DEFAULT_GENERATION = 'Default Generation',\n  CHANNEL_ALLOWED_GENERATIONS = 'Allowed Generations',\n  CHANNEL_IS_DEFAULT = 'Is Default',\n  // ClusterPlan\n  CLUSTER_PLAN_MIGRATABLE_FROM = 'Migratable From',\n  CLUSTER_PLAN_PERFORMANCE_EXPECTATIONS = 'Performance Expectations',\n  // ClusterPlanType\n  CLUSTER_PLAN_TYPE_NAME = 'Name',\n  CLUSTER_PLAN_TYPE_DESCRIPTION = 'Description',\n  CLUSTER_PLAN_TYPE_DEVELOPMENT = 'Development',\n  CLUSTER_PLAN_TYPE_CATEGORY = 'Category',\n  CLUSTER_PLAN_TYPE_AVAILABILITY_CLASS = 'Availability Class',\n  CLUSTER_PLAN_TYPE_ACTIVE_PLAN = 'Active Plan',\n  CLUSTER_PLAN_TYPE_LIMITS = 'Limits',\n  // AlphaFeature (EarlyAccessFeature)\n  ALPHA_FEATURE_NAME = 'Name',\n  ALPHA_FEATURE_AVAILABLE_IN = 'Available In',\n  ALPHA_FEATURE_DOCUMENTATION_LINK = 'Documentation Link',\n  ALPHA_FEATURE_DESCRIPTION = 'Description',\n  ALPHA_FEATURE_ACTION_LABEL = 'Action Label',\n  ALPHA_FEATURE_ACTION_URL = 'Action Url',\n  ALPHA_FEATURE_CLICKWRAP = 'Clickwrap',\n  ALPHA_FEATURE_SALES_PLAN_TYPE_VISIBILITIES = 'Sales Plan Type Visibilities',\n  // SalesPlan\n  SALES_PLAN_NAME = 'Name',\n  SALES_PLAN_METADATA = 'Metadata',\n  SALES_PLAN_CLUSTER_PLAN_CONFIGURATION = 'Cluster Plan Configuration',\n  SALES_PLAN_VERSION = 'Version',\n  // ClusterPlanModification\n  CLUSTER_PLAN_MODIFICATION_NAME = 'Name',\n  CLUSTER_PLAN_MODIFICATION_DESCRIPTION = 'Description',\n  CLUSTER_PLAN_MODIFICATION_CONFIG = 'Config',\n  CLUSTER_PLAN_MODIFICATION_CLUSTER_PLANS = 'Cluster Plans',\n  CLUSTER_PLAN_MODIFICATION_URL = 'Url',\n  CLUSTER_PLAN_MODIFICATION_STATUS = 'Status',\n  // ClusterBulkOperation\n  CLUSTER_BULK_OPERATION_CLUSTERS = 'Clusters',\n  CLUSTER_BULK_OPERATION_STATUS = 'Status',\n  // ClusterModification (parent + config)\n  CLUSTER_MODIFICATION_DESCRIPTION = 'Description',\n  CLUSTER_MODIFICATION_URL = 'Url',\n  CLUSTER_MODIFICATION_PLAN_MODIFICATIONS = 'Plan Modifications',\n  CLUSTER_MODIFICATION_EXPIRES_AT = 'Expires At',\n  CLUSTER_MODIFICATION_STATUS = 'Status',\n  // Connection\n  CONNECTION_NAME = 'Name',\n  CONNECTION_STRATEGY = 'Strategy',\n  CONNECTION_CONFIGURATION = 'Configuration',\n  // Cluster (internal-only lifecycle actions with no customer-facing audit)\n  CLUSTER_IP_ALLOWLIST = 'IP Allowlist',\n  CLUSTER_ENV_VAR_OVERRIDE = 'Environment Variable Override',\n  // A cluster plan modification that was applied to (and updated) this cluster.\n  CLUSTER_APPLIED_PLAN_MODIFICATION = 'Plan Modification',\n  // ApprovalJob. Every change of state of a four-eyes request is audited, not\n  // only the run: the value of the trail is the answer to \"who decided what,\n  // and when\", and a record of the outcome alone cannot give it.\n  APPROVAL_JOB_STATUS = 'Status',\n  APPROVAL_JOB_ACKS = 'Approvals',\n  APPROVAL_JOB_CLOSED_REASON = 'Closure Reason',\n  // FeatureFlag. One attribute for the whole row: the trail keeps the row\n  // before and after, and the diff of the two shows what changed.\n  FEATURE_FLAG_ROW = 'Row',\n}\n"],
+  "mappings": "AAOO,IAAK,oBAAL,kBAAKA,uBAAL;AACL,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,aAAU;AACV,EAAAA,mBAAA,kBAAe;AACf,EAAAA,mBAAA,uBAAoB;AACpB,EAAAA,mBAAA,mBAAgB;AAChB,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,+BAA4B;AAC5B,EAAAA,mBAAA,4BAAyB;AACzB,EAAAA,mBAAA,0BAAuB;AACvB,EAAAA,mBAAA,gBAAa;AACb,EAAAA,mBAAA,mBAAgB;AAChB,EAAAA,mBAAA,aAAU;AACV,EAAAA,mBAAA,kBAAe;AACf,EAAAA,mBAAA,kBAAe;AAdL,SAAAA;AAAA,GAAA;AAwBL,IAAK,6BAAL,kBAAKC,gCAAL;AAEL,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,iCAA8B;AAC9B,EAAAA,4BAAA,+BAA4B;AAC5B,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,wBAAqB;AACrB,EAAAA,4BAAA,yBAAsB;AAEtB,EAAAA,4BAAA,kBAAe;AACf,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,iCAA8B;AAC9B,EAAAA,4BAAA,wBAAqB;AAErB,EAAAA,4BAAA,kCAA+B;AAC/B,EAAAA,4BAAA,2CAAwC;AAExC,EAAAA,4BAAA,4BAAyB;AACzB,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,0CAAuC;AACvC,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,wBAAqB;AACrB,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,+BAA4B;AAC5B,EAAAA,4BAAA,gCAA6B;AAC7B,EAAAA,4BAAA,8BAA2B;AAC3B,EAAAA,4BAAA,6BAA0B;AAC1B,EAAAA,4BAAA,gDAA6C;AAE7C,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,2CAAwC;AACxC,EAAAA,4BAAA,wBAAqB;AAErB,EAAAA,4BAAA,oCAAiC;AACjC,EAAAA,4BAAA,2CAAwC;AACxC,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,6CAA0C;AAC1C,EAAAA,4BAAA,mCAAgC;AAChC,EAAAA,4BAAA,sCAAmC;AAEnC,EAAAA,4BAAA,qCAAkC;AAClC,EAAAA,4BAAA,mCAAgC;AAEhC,EAAAA,4BAAA,sCAAmC;AACnC,EAAAA,4BAAA,8BAA2B;AAC3B,EAAAA,4BAAA,6CAA0C;AAC1C,EAAAA,4BAAA,qCAAkC;AAClC,EAAAA,4BAAA,iCAA8B;AAE9B,EAAAA,4BAAA,qBAAkB;AAClB,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,0BAAuB;AACvB,EAAAA,4BAAA,8BAA2B;AAE3B,EAAAA,4BAAA,uCAAoC;AAIpC,EAAAA,4BAAA,yBAAsB;AACtB,EAAAA,4BAAA,uBAAoB;AACpB,EAAAA,4BAAA,gCAA6B;AAG7B,EAAAA,4BAAA,sBAAmB;AAzET,SAAAA;AAAA,GAAA;",
   "names": ["SystemAuditEntity", "SystemAuditEntityAttribute"]
 }

package/dist/index.d.ts

@@ -12,10 +12,15 @@ export type { AnnotationActorView, AnnotationDecision, AnnotationDenialCode, } f
 export { ANNOTATION_DENIAL_MESSAGES, canEditNote, canRemove, checkNoteBody, checkTagName, isAuthor, } from './annotations/policy.js';
 export type { ClusterBulkClusterResultDto, ClusterBulkFinalStatus, ClusterBulkGenerationUpdateSettings, ClusterBulkOperationPayloadDto, ClusterBulkOperationRule, ClusterBulkPlanTypeUpdateSettings, ClusterBulkPlanUpdateSettings, ClusterBulkSettingsByType, ClusterBulkSleepWakeupSettings, ClusterBulkStepRequestDto, ClusterBulkStepResultDto, ClusterBulkTargetDto, } from './approvals/cluster-bulk-operation.js';
 export { CLUSTER_BULK_OPERATION_CLUSTER_NAME_MAX_LENGTH, CLUSTER_BULK_OPERATION_MAX_CLUSTERS, CLUSTER_BULK_OPERATION_MIN_ACKS, CLUSTER_BULK_OPERATION_NAME_MAX_LENGTH, CLUSTER_BULK_OPERATION_RULES, CLUSTER_BULK_OPERATION_TEST_STAGE_MIN_ACKS, CLUSTER_BULK_OPERATION_TYPES, CLUSTER_BULK_SLEEPING_CLUSTER_DELAY_MS, clusterBulkOperationTypeOf, clusterBulkParameterOf, clusterBulkRequiredPermissions, clusterBulkResultOf, isClusterBulkYolo, } from './approvals/cluster-bulk-operation.js';
+export { DNS_SUBDOMAIN_MAX_LENGTH, isDnsSubdomain, } from './approvals/dns-subdomain.js';
+export type { ApprovalExpectedChange } from './approvals/expected-value.js';
+export { isSameApprovalValue, staleApprovalKeys, } from './approvals/expected-value.js';
 export type { ApprovalActorView, ApprovalDecision, ApprovalDenialCode, } from './approvals/policy.js';
 export { approvalPermissionCheck, canAcknowledge, canCreate, canExecute, canReject, canView, canWithdraw, effectiveStatus, hasActorEmail, hasEveryPermission, isExpired, isSameActor, isSameActorEmail, remainingAcks, requiredPermissionsOf, resolveRequiredAcks, } from './approvals/policy.js';
 export type { ApprovalUseCaseType } from './approvals/use-cases.const.js';
-export { APPROVAL_USE_CASE_TYPES, EXTEND_TRIAL_MAX_DAYS, EXTEND_TRIAL_MIN_DAYS, } from './approvals/use-cases.const.js';
+export { APPROVAL_EMAIL_MAX_LENGTH, APPROVAL_EMAIL_PATTERN, APPROVAL_USE_CASE_TYPES, EXTEND_TRIAL_MAX_DAYS, EXTEND_TRIAL_MIN_DAYS, FEATURE_FLAG_MIN_ACKS_PROD, ORG_LIMIT_TEXT_MAX_LENGTH, PLATFORM_ROLE_CHANGE_MAX_ROLES, PURGE_USERS_MAX_USERS, PURGE_USERS_REQUIRED_PERMISSIONS, USER_METADATA_EXPECTED_MAX_LENGTH, USER_METADATA_MAX_LENGTH, } from './approvals/use-cases.const.js';
+export { CHART_DAY_GRAIN_MAX_DAYS, CHART_FILTER_MAX_LENGTH, CHART_GRAIN_DEFAULT, CHART_GRAINS, CHART_ID_MAX_LENGTH, CHART_METRICS, CHART_OTHER_SERIES_KEY, CHART_QUERY_MAX_LENGTH, CHART_TOP_DEFAULT, CHART_TOP_MAX, CHART_UNKNOWN_SERIES_KEY, CHART_WINDOW_AMOUNT_MAX, CHART_WINDOW_DEFAULT, CHART_WINDOW_UNITS, type ChartDimensionSpec, type ChartGrain, type ChartMetricSpec, type ChartPoint, type ChartQueryCheck, ChartQueryError, type ChartQueryErrorKind, type ChartQueryOptions, type ChartResult, type ChartSeries, type ChartSpec, type ChartUnit, type ChartWindow, type ChartWindowUnit, chartBucketStart, chartToday, chartWindowRange, findChartDimension, findChartMetric, formatChartSpec, isChartQueryError, parseChartQuery, readChartSpec, validateChartSpec, } from './charts/index.js';
+export { DASHBOARD_TILE_DEFAULT_SIZE, dashboardDefinitionBytes, dashboardDefinitionFits, dashboardTileDefaultSize, emptyDashboardDefinition, isSafeDashboardLink, placeNewTile, placeNewTiles, tilesOverlap, toStoredDashboardDefinition, upgradeDashboardDefinition, } from './dashboards/definition.js';
 export type { ALERT_SUBSCRIPTION_REPORT_TYPES, ALERT_SUBSCRIPTION_TYPES, AlertSubscriptionDto, AlertSubscriptionEntryDto, AlertSubscriptionWebhookAuth, CheckFailedReason, } from './dtos/AlertSubscription.dto.js';
 export { FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS, HMAC_HEADER_POSITION, HMAC_SUPPORTED_ALGORITHM, } from './dtos/AlertSubscription.dto.js';
 export type { AnnotationActor, AnnotationDto, AnnotationEntityKind, AnnotationKind, AnnotationLookupDto, AnnotationLookupEntryDto, AnnotationTagDto, EntityAnnotationsDto, } from './dtos/Annotation.dto.js';
@@ -38,9 +43,11 @@ export type { ClusterSpecChange, ClusterSpecChangeActor, ClusterSpecHistory, } f
 export type { CommonClusterDto, ExternalIdpConfig, OptimizeFilteringConfig, OptimizeFilteringIncludeExclude, OptimizeFilteringPatch, SecretsFilterMode, } from './dtos/CommonCluster.dto.js';
 export type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js';
 export type { ClusterActivityBucket, ClusterActivityTile, ClusterActivityV2Dto, ClusterActivityV2Response, ClusterByClientV2Dto, ClusterDatacenterOptionV2Dto, ClusterDetailV2Dto, ClusterFacetsV2Dto, ClusterListItemV2Dto, ClusterLiveStateV2Dto, ClusterLiveStateV2Entry, ClusterParameterOptionV2Dto, ClusterParametersV2Dto, ControlResolvedPermissions, ControlSessionDto, ControlSessionUser, CursorPage, CursorParams, ListClustersV2Params, ListOrganizationsV2Params, ListOrgMembersV2Params, OrgDetailV2Dto, OrgListItemV2Dto, OrgMemberV2Dto, OrgSummaryV2Dto, } from './dtos/ControlV2.dto.js';
+export type { DashboardActor, DashboardAnnotationsQuery, DashboardAnnotationsTile, DashboardAnnotationsTileV1, DashboardCatalogue, DashboardCatalogueChartMetric, DashboardCatalogueSearchField, DashboardChartQuery, DashboardChartRender, DashboardChartTile, DashboardChartTileV3, DashboardClusterCard, DashboardClusterDetailQuery, DashboardClusterDetailTile, DashboardClusterDetailTileV2, DashboardDefinition, DashboardDefinitionV1, DashboardDefinitionV2, DashboardDefinitionV3, DashboardDto, DashboardFleetQuery, DashboardFleetQueryTile, DashboardFleetQueryTileV1, DashboardHeadingTile, DashboardHeadingTileV2, DashboardLinkTile, DashboardLinkTileV2, DashboardListDto, DashboardNewTile, DashboardNoteTile, DashboardNoteTileV2, DashboardOrgCard, DashboardOrgDetailQuery, DashboardOrgDetailTile, DashboardOrgDetailTileV2, DashboardSummaryDto, DashboardTile, DashboardTileKind, DashboardTileLayout, DashboardTileV1, DashboardTileV2, DashboardTileV3, StoredDashboardDefinition, } from './dtos/Dashboard.dto.js';
+export { DASHBOARD_CHART_RENDERS, DASHBOARD_CLUSTER_CARDS, DASHBOARD_DEFINITION_BYTES_MAX, DASHBOARD_DEFINITION_VERSION, DASHBOARD_ENTITY_ID_MAX, DASHBOARD_GRID_COLUMNS, DASHBOARD_GRID_ROWS_MAX, DASHBOARD_LINK_URL_MAX, DASHBOARD_NOTE_MAX, DASHBOARD_ORG_CARDS, DASHBOARD_PAGE_SIZE_DEFAULT, DASHBOARD_PAGE_SIZE_MAX, DASHBOARD_TILE_KINDS, DASHBOARD_TILE_ROWS_MAX, DASHBOARD_TILES_MAX, DASHBOARD_TITLE_MAX, } from './dtos/Dashboard.dto.js';
 export type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js';
 export type { CamundaWebApp, CamundaWebAppWithZeebe, ExternalClickwrapConfigDto, ExternalClusterDto, ExternalOrganizationDto, } from './dtos/ExternalWebapp.dto.js';
-export type { Features } from './dtos/FeatureFlags.dto.js';
+export type { CreateFeatureFlagDto, FeatureFlagAnswer, FeatureFlagDto, FeatureFlagListDto, UpdateFeatureFlagDto, } from './dtos/FeatureFlags.dto.js';
 export { activeGenerations, compareGenerationNamesNewestFirst, type GenerationDto, type GenerationWithClusterCountDto, sortGenerationBySemverOfZeebe, type UpgradableGenerationsDto, } from './dtos/Generations.dto.js';
 export type { Hdp } from './dtos/Hdp.dto.js';
 export type { K8sBackupConfig, K8sConfig, K8sConfigLegacyFormat, K8sContext, K8sContextDto, } from './dtos/K8sContext.dto.js';
@@ -60,7 +67,7 @@ export type { SystemAuditDto } from './dtos/SystemAudit.dto.js';
 export type { UsageAlertDto } from './dtos/UsageAlert.dto.js';
 export { UsageAlertInitValues, UsageAlertMetric, UsageAlertThresholdLimits, } from './dtos/UsageAlert.dto.js';
 export type { UserMetaDataDto } from './dtos/UserMetaData.dto.js';
-export { type AndNode, CLUSTER_DEFAULT_SEARCH_FIELDS, CLUSTER_SEARCH_FIELDS, type CompileContext, type CompiledQuery, compileQuery, type FieldBinding, findSearchField, idSetPredicate, isLuceneQueryError, joinIdSet, LuceneQueryError, likeArgument, type NotNode, ORG_DEFAULT_SEARCH_FIELDS, ORGANIZATION_SEARCH_FIELDS, type OrNode, parseLuceneQuery, type QueryNode, type RangeNode, type SearchFieldCapability, type SearchFieldSpec, type SearchFieldType, type SearchTermOperator, type TermNode, } from './search/index.js';
+export { type AndNode, CLUSTER_DEFAULT_SEARCH_FIELDS, CLUSTER_SEARCH_FIELDS, type CompileContext, type CompiledQuery, compileQuery, type FieldBinding, findSearchField, idSetPredicate, isLuceneQueryError, joinIdSet, LuceneQueryError, likeArgument, type NotNode, ORG_DEFAULT_SEARCH_FIELDS, ORGANIZATION_SEARCH_FIELDS, type OrNode, parseLuceneQuery, type QueryNode, type RangeNode, type SearchFieldCapability, type SearchFieldSpec, type SearchFieldType, type SearchTermOperator, type SqlDialect, type TermNode, } from './search/index.js';
 export { AlertSubscriptionReportType, AlertSubscriptionType, } from './enums/AlertSubscription.enum.js';
 export { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js';
 export { AuditService } from './enums/AuditService.enum.js';
@@ -140,6 +147,7 @@ export { type ConnectivityStatus, deriveConnectivityMessage, deriveConnectivityS
 export { ConsoleSelfManagedUtils } from './utils/console-sm.utils.js';
 export type { CronScheduleValidationFailure, CronScheduleValidationResult, CronScheduleValidationSuccess, } from './utils/cronSchedule.utils.js';
 export { BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES, validateCronSchedule, } from './utils/cronSchedule.utils.js';
+export { canonicalPlan, canonicalPlanKey, } from './utils/elasticsearchPlanPath.utils.js';
 export { deriveEncryptionStatus, type EncryptionStatus, isEncryptionStatus, } from './utils/encryptionStatus.utils.js';
 export type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js';
 export { enterpriseConnectionMetadataToOrganizationAssignments, organizationAssignmentsToEnterpriseConnectionMetadata, } from './utils/enterprise-connection.utils.js';
@@ -154,6 +162,7 @@ export { computeOrgStartDate, type OrgStartDateInput, } from './utils/orgStartDa
 export { getPermissionsByRoles, getUserPermissionsForOrg, } from './utils/orgs/OrgHelper.js';
 export type { PasswordPolicyRequest, PasswordPolicyResult, } from './utils/PasswordPolicy.js';
 export { MAXLENGTH as PASSWORD_POLICY_MAXLENGTH, MINLENGTH as PASSWORD_POLICY_MINLENGTH, passwordPolicyCheck, } from './utils/PasswordPolicy.js';
+export { isQaUserEmail, qaUserEmail } from './utils/qa-user.utils.js';
 export { deriveSecondaryStorageStatus, type SecondaryStorageStatus, } from './utils/secondaryStorageStatus.utils.js';
 export { allSettledResultsCounts, getFulfilledPromises, getRejectedPromises, getSettledSummary, } from './utils/settledPromises.util.js';
 export { isValidAwsArn, isValidCIDR, isValidCIDRList, isValidClientName, isValidHostname, isValidPrivateLinkRegion, normalizeCIDRList, } from './utils/string-validation.utils.js';

package/dist/index.js

@@ -110,6 +110,14 @@ import {
   clusterBulkResultOf,
   isClusterBulkYolo
 } from "./approvals/cluster-bulk-operation.js";
+import {
+  DNS_SUBDOMAIN_MAX_LENGTH,
+  isDnsSubdomain
+} from "./approvals/dns-subdomain.js";
+import {
+  isSameApprovalValue,
+  staleApprovalKeys
+} from "./approvals/expected-value.js";
 import {
   approvalPermissionCheck,
   canAcknowledge,
@@ -129,10 +137,59 @@ import {
   resolveRequiredAcks
 } from "./approvals/policy.js";
 import {
+  APPROVAL_EMAIL_MAX_LENGTH,
+  APPROVAL_EMAIL_PATTERN,
   APPROVAL_USE_CASE_TYPES,
   EXTEND_TRIAL_MAX_DAYS,
-  EXTEND_TRIAL_MIN_DAYS
+  EXTEND_TRIAL_MIN_DAYS,
+  FEATURE_FLAG_MIN_ACKS_PROD,
+  ORG_LIMIT_TEXT_MAX_LENGTH,
+  PLATFORM_ROLE_CHANGE_MAX_ROLES,
+  PURGE_USERS_MAX_USERS,
+  PURGE_USERS_REQUIRED_PERMISSIONS,
+  USER_METADATA_EXPECTED_MAX_LENGTH,
+  USER_METADATA_MAX_LENGTH
 } from "./approvals/use-cases.const.js";
+import {
+  CHART_DAY_GRAIN_MAX_DAYS,
+  CHART_FILTER_MAX_LENGTH,
+  CHART_GRAIN_DEFAULT,
+  CHART_GRAINS,
+  CHART_ID_MAX_LENGTH,
+  CHART_METRICS,
+  CHART_OTHER_SERIES_KEY,
+  CHART_QUERY_MAX_LENGTH,
+  CHART_TOP_DEFAULT,
+  CHART_TOP_MAX,
+  CHART_UNKNOWN_SERIES_KEY,
+  CHART_WINDOW_AMOUNT_MAX,
+  CHART_WINDOW_DEFAULT,
+  CHART_WINDOW_UNITS,
+  ChartQueryError,
+  chartBucketStart,
+  chartToday,
+  chartWindowRange,
+  findChartDimension,
+  findChartMetric,
+  formatChartSpec,
+  isChartQueryError,
+  parseChartQuery,
+  readChartSpec,
+  validateChartSpec
+} from "./charts/index.js";
+import {
+  DASHBOARD_TILE_DEFAULT_SIZE,
+  dashboardDefinitionBytes,
+  dashboardDefinitionFits,
+  dashboardTileDefaultSize,
+  emptyDashboardDefinition,
+  isSafeDashboardLink,
+  placeNewTile,
+  placeNewTiles,
+  tilesOverlap,
+  toStoredDashboardDefinition,
+  upgradeDashboardDefinition
+} from "./dashboards/definition.js";
 import {
   FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,
   HMAC_HEADER_POSITION,
@@ -171,6 +228,24 @@ import {
   progressFraction
 } from "./dtos/ApprovalJob.dto.js";
 import { CLUSTER_CREATION_DEFAULT_FIELDS } from "./dtos/ClusterCreationDefaults.dto.js";
+import {
+  DASHBOARD_CHART_RENDERS,
+  DASHBOARD_CLUSTER_CARDS,
+  DASHBOARD_DEFINITION_BYTES_MAX,
+  DASHBOARD_DEFINITION_VERSION,
+  DASHBOARD_ENTITY_ID_MAX,
+  DASHBOARD_GRID_COLUMNS,
+  DASHBOARD_GRID_ROWS_MAX,
+  DASHBOARD_LINK_URL_MAX,
+  DASHBOARD_NOTE_MAX,
+  DASHBOARD_ORG_CARDS,
+  DASHBOARD_PAGE_SIZE_DEFAULT,
+  DASHBOARD_PAGE_SIZE_MAX,
+  DASHBOARD_TILE_KINDS,
+  DASHBOARD_TILE_ROWS_MAX,
+  DASHBOARD_TILES_MAX,
+  DASHBOARD_TITLE_MAX
+} from "./dtos/Dashboard.dto.js";
 import {
   activeGenerations,
   compareGenerationNamesNewestFirst,
@@ -340,6 +415,10 @@ import {
   BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,
   validateCronSchedule
 } from "./utils/cronSchedule.utils.js";
+import {
+  canonicalPlan,
+  canonicalPlanKey
+} from "./utils/elasticsearchPlanPath.utils.js";
 import {
   deriveEncryptionStatus,
   isEncryptionStatus
@@ -380,6 +459,7 @@ import {
   MINLENGTH,
   passwordPolicyCheck
 } from "./utils/PasswordPolicy.js";
+import { isQaUserEmail, qaUserEmail } from "./utils/qa-user.utils.js";
 import {
   deriveSecondaryStorageStatus
 } from "./utils/secondaryStorageStatus.utils.js";
@@ -438,6 +518,8 @@ export {
   ANNOTATION_SEARCH_MAX_LENGTH,
   ANNOTATION_TAG_NAME_MAX,
   APPROVAL_ACKS_MAX,
+  APPROVAL_EMAIL_MAX_LENGTH,
+  APPROVAL_EMAIL_PATTERN,
   APPROVAL_ENTITY_TYPES,
   APPROVAL_JOB_STATUSES,
   APPROVAL_LIST_SUMMARY_VALUES_MAX,
@@ -476,6 +558,20 @@ export {
   BackupStatus,
   CAMUNDA_CLAIMS_NAMESPACE,
   default2 as CAMUNDI_PERMISSION_RULES,
+  CHART_DAY_GRAIN_MAX_DAYS,
+  CHART_FILTER_MAX_LENGTH,
+  CHART_GRAINS,
+  CHART_GRAIN_DEFAULT,
+  CHART_ID_MAX_LENGTH,
+  CHART_METRICS,
+  CHART_OTHER_SERIES_KEY,
+  CHART_QUERY_MAX_LENGTH,
+  CHART_TOP_DEFAULT,
+  CHART_TOP_MAX,
+  CHART_UNKNOWN_SERIES_KEY,
+  CHART_WINDOW_AMOUNT_MAX,
+  CHART_WINDOW_DEFAULT,
+  CHART_WINDOW_UNITS,
   CLOUD_PROVIDER_ORDER,
   CLUSTER_BULK_OPERATION_CLUSTER_NAME_MAX_LENGTH,
   CLUSTER_BULK_OPERATION_MAX_CLUSTERS,
@@ -495,6 +591,7 @@ export {
   CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION,
   CONNECTOR_SECRET_SYNC_MIN_VERSION,
   CONSOLE_API_USER_ID,
+  ChartQueryError,
   ClusterBulkOperationStatus,
   ClusterBulkOperationType,
   ClusterClientPermission,
@@ -508,13 +605,32 @@ export {
   ConsoleSelfManagedUtils,
   ConsumptionData,
   ConsumptionDataType,
+  DASHBOARD_CHART_RENDERS,
+  DASHBOARD_CLUSTER_CARDS,
+  DASHBOARD_DEFINITION_BYTES_MAX,
+  DASHBOARD_DEFINITION_VERSION,
+  DASHBOARD_ENTITY_ID_MAX,
+  DASHBOARD_GRID_COLUMNS,
+  DASHBOARD_GRID_ROWS_MAX,
+  DASHBOARD_LINK_URL_MAX,
+  DASHBOARD_NOTE_MAX,
+  DASHBOARD_ORG_CARDS,
+  DASHBOARD_PAGE_SIZE_DEFAULT,
+  DASHBOARD_PAGE_SIZE_MAX,
+  DASHBOARD_TILES_MAX,
+  DASHBOARD_TILE_DEFAULT_SIZE,
+  DASHBOARD_TILE_KINDS,
+  DASHBOARD_TILE_ROWS_MAX,
+  DASHBOARD_TITLE_MAX,
   DAY,
   DEFAULT_ENTERPRISE_DURATION_IN_MONTHS,
+  DNS_SUBDOMAIN_MAX_LENGTH,
   ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION,
   ENFORCE_GROUPS_TOGGLE_MIN_VERSION,
   EXTEND_TRIAL_MAX_DAYS,
   EXTEND_TRIAL_MIN_DAYS,
   ErrorType,
+  FEATURE_FLAG_MIN_ACKS_PROD,
   FIRSTNAME_LASTNAME_MAX_LENGTH,
   FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,
   FeedbackType,
@@ -565,17 +681,21 @@ export {
   OPTIONAL_TELEMETRY_MIN_VERSION,
   ORGANIZATION_SEARCH_FIELDS,
   ORG_DEFAULT_SEARCH_FIELDS,
+  ORG_LIMIT_TEXT_MAX_LENGTH,
   ObjectMergeUtils,
   OrganizationPermissionsDescriptions,
   OrganizationRole,
   MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,
   MINLENGTH as PASSWORD_POLICY_MINLENGTH,
+  PLATFORM_ROLE_CHANGE_MAX_ROLES,
   PRE89_AFFECTED_PATHS,
   PRE89_AFFECTED_PROPERTY_PREFIXES,
   PRE89_GATEWAY_PROPERTY_PATHS,
   PRE89_GATEWAY_RESOURCE_PREFIXES,
   PRIVATE_LINK_REGIONS,
   PROFILES,
+  PURGE_USERS_MAX_USERS,
+  PURGE_USERS_REQUIRED_PERMISSIONS,
   PermissionsForOrganizationRole,
   RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,
   REST_API_URL_TRANSFORM_MIN_VERSION,
@@ -618,6 +738,8 @@ export {
   TRIAL_EXTENSION_SURVEY_QUESTIONS,
   Telemetry,
   UNKNOWN_ACTOR_EMAIL,
+  USER_METADATA_EXPECTED_MAX_LENGTH,
+  USER_METADATA_MAX_LENGTH,
   UnassignableOrganizationRole,
   UsageAlertInitValues,
   UsageAlertMetric,
@@ -646,6 +768,11 @@ export {
   canRemove,
   canView,
   canWithdraw,
+  canonicalPlan,
+  canonicalPlanKey,
+  chartBucketStart,
+  chartToday,
+  chartWindowRange,
   checkNoteBody,
   checkTagName,
   checkVersion,
@@ -657,6 +784,9 @@ export {
   compileQuery,
   computeOrgStartDate,
   consoleUserFeaturesFromPermissions,
+  dashboardDefinitionBytes,
+  dashboardDefinitionFits,
+  dashboardTileDefaultSize,
   deprecatedLimit,
   deriveConnectivityMessage,
   deriveConnectivityStatus,
@@ -665,10 +795,14 @@ export {
   deriveSecondaryStorageStatus,
   diffInWholeMonths,
   effectiveStatus,
+  emptyDashboardDefinition,
   enterpriseConnectionMetadataToOrganizationAssignments,
   expandRolesToPermissions,
   extractCamundaUserEmail,
+  findChartDimension,
+  findChartMetric,
   findSearchField,
+  formatChartSpec,
   generationImageErrorMessage,
   getAnalyticsSalesPlanFromOrgSalesPlan,
   getApplicableRolesForEmployee,
@@ -700,9 +834,11 @@ export {
   isBulkClusterPlanTypeUpdateItem,
   isBulkClusterPlanUpdateItem,
   isCamundaUserId,
+  isChartQueryError,
   isClusterBulkYolo,
   isClusterPlanFieldSpec,
   isClusterTagEligibleForSleepCron,
+  isDnsSubdomain,
   isEncryptionStatus,
   isExpired,
   isGenerationResumable,
@@ -713,10 +849,13 @@ export {
   isPastPreprodClusterTtl,
   isPre89AffectedPath,
   isPreprodClusterTtlStage,
+  isQaUserEmail,
   isRunStalled,
+  isSafeDashboardLink,
   isSalesPlanEligibleForSleepCron,
   isSameActor,
   isSameActorEmail,
+  isSameApprovalValue,
   isSecretsFilterModeConfigurable,
   isSleepCronEligible,
   isValidAwsArn,
@@ -732,13 +871,18 @@ export {
   normalizeGenerationVersion,
   normalizeTagName,
   organizationAssignmentsToEnterpriseConnectionMetadata,
+  parseChartQuery,
   parseEnvVars,
   parseKmsArn,
   parseLuceneQuery,
   parseNumericLimit,
   passwordPolicyCheck,
   peakWithinTerm,
+  placeNewTile,
+  placeNewTiles,
   progressFraction,
+  qaUserEmail,
+  readChartSpec,
   remainingAcks,
   requiredPermissionsOf,
   resolveRequiredAcks,
@@ -748,10 +892,15 @@ export {
   sortByAvailabilityClasses,
   sortByClusterPlanTypeCategory,
   sortGenerationBySemverOfZeebe,
+  staleApprovalKeys,
   stripSecfixPostfix,
+  tilesOverlap,
+  toStoredDashboardDefinition,
   toUtcDayStartMs,
   unusedClusterBasedLimits,
   unusedSalesPlanLimits,
+  upgradeDashboardDefinition,
+  validateChartSpec,
   validateCronSchedule,
   validateKmsArnForRegion,
   validateLabels