@camunda/ccma-shared-types 8.1.0 → 8.2.0

package/dist/_tests/constants/bulk-operation-eyes.const.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/approvals/cluster-bulk-operation.d.ts

@@ -53,7 +53,7 @@ export interface ClusterBulkOperationRule {
  * A bulk operation changes many clusters with one decision, so it needs two
  * people other than the requester. Every other use case needs one. This
  * floor replaces `MINIMUM_EYEPAIRS` for the approval flow only. The old flow
- * of console-backend still reads `MINIMUM_EYEPAIRS`.
+ * of console-backend reads `requiredBulkOperationAcks`.
  */
 export declare const CLUSTER_BULK_OPERATION_MIN_ACKS = 2;
 /**

package/dist/approvals/cluster-bulk-operation.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/approvals/cluster-bulk-operation.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/**\n * The cluster bulk operation on the approval mechanism of control-backend.\n *\n * control-backend and control-frontend both read this file. The backend\n * builds its six use cases from `CLUSTER_BULK_OPERATION_RULES`, and the form\n * of the frontend reads the same table to run `canCreate` before the request\n * goes out. A permission that only one side knew would be a button that the\n * server then refuses.\n *\n * console-backend reads the step types at the end. control-backend calls one\n * step for each cluster, and console-backend does the work of that step with\n * the same code that its own bulk operation runs.\n */\n\nimport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from '../enums/ClusterBulkOperation.enum.js'\nimport { ConsolePermissions } from '../permissions/console.permissions.js'\nimport type { ClusterBulkOperationParameter } from '../types/ClusterBulkOperation.type.js'\nimport { APPROVAL_USE_CASE_TYPES } from './use-cases.const.js'\n\n/**\n * The most clusters that one request holds.\n *\n * The payload is a json column, and the create route reads it in one body of\n * at most 1 MiB. 3000 clusters with the longest names stay far below that.\n * A larger set is two requests, which is also two decisions for the people\n * who approve.\n */\nexport const CLUSTER_BULK_OPERATION_MAX_CLUSTERS = 3000\n\n/** The longest name of an operation. The name is what the queue shows. */\nexport const CLUSTER_BULK_OPERATION_NAME_MAX_LENGTH = 200\n\n/**\n * The longest cluster name that the payload keeps.\n *\n * The name is a copy for a reader. The id alone decides what the step\n * changes.\n */\nexport const CLUSTER_BULK_OPERATION_CLUSTER_NAME_MAX_LENGTH = 100\n\n/**\n * The wait between two sleeping clusters of one datacenter.\n *\n * The same number as the bulk operation of console-backend. A wake-up loads\n * the datacenter, and many wake-ups together overload it. Datacenters do not\n * wait for each other.\n */\nexport const CLUSTER_BULK_SLEEPING_CLUSTER_DELAY_MS = 60_000\n\n/** What one operation type needs, and which use case carries it. */\nexport interface ClusterBulkOperationRule {\n  useCase: string\n  label: string\n  /** The permission that opens, approves and runs a request of this type. */\n  permission: string\n}\n\n/**\n * The floor of approvals of a cluster bulk operation on prod, for every type.\n * Dev, int and local use `CLUSTER_BULK_OPERATION_TEST_STAGE_MIN_ACKS`.\n *\n * A bulk operation changes many clusters with one decision, so it needs two\n * people other than the requester. Every other use case needs one. This\n * floor replaces `MINIMUM_EYEPAIRS` for the approval flow only. The old flow\n * of console-backend still reads `MINIMUM_EYEPAIRS`.\n */\nexport const CLUSTER_BULK_OPERATION_MIN_ACKS = 2\n\n/**\n * The floor of approvals of a cluster bulk operation on dev, int and local.\n *\n * A test stage often has one other Camundi who can approve. One approval\n * there still tests the whole flow.\n */\nexport const CLUSTER_BULK_OPERATION_TEST_STAGE_MIN_ACKS = 1\n\n/**\n * The rules of each operation type.\n *\n * The permissions are the ones that the bulk operation of console-backend\n * checks today (`getBulkOpRequiredPermission`), so a Camundi who can run one\n * flow can run the other. `CLUSTERS_READALLCLUSTERINFO` is part of every\n * type there, and `clusterBulkRequiredPermissions` adds it here.\n */\nexport const CLUSTER_BULK_OPERATION_RULES: Record<\n  ClusterBulkOperationType,\n  ClusterBulkOperationRule\n> = {\n  [ClusterBulkOperationType.GENERATION_UPDATE]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkGenerationUpdate,\n    label: 'Generation update',\n    permission: ConsolePermissions.CLUSTERS_CAN_UPDATE_GENERATION,\n  },\n  [ClusterBulkOperationType.PLAN_UPDATE]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkPlanUpdate,\n    label: 'Plan update',\n    permission: ConsolePermissions.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n  },\n  [ClusterBulkOperationType.PLAN_TYPE_UPDATE]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkPlanTypeUpdate,\n    label: 'Plan type update',\n    permission: ConsolePermissions.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n  },\n  [ClusterBulkOperationType.SLEEP_WAKEUP]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkSleepWakeup,\n    label: 'Sleep / wake up',\n    permission: ConsolePermissions.CLUSTERS_CAN_SEND_TO_SLEEP,\n  },\n  [ClusterBulkOperationType.DELETION]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkDeletion,\n    label: 'Deletion',\n    permission: ConsolePermissions.CLUSTERS_DELETE_CLUSTER,\n  },\n  [ClusterBulkOperationType.SPEC_UPDATE]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkSpecUpdate,\n    label: 'Spec update',\n    permission: ConsolePermissions.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n  },\n}\n\n/** The operation types in the order that a form offers them. */\nexport const CLUSTER_BULK_OPERATION_TYPES: ClusterBulkOperationType[] = [\n  ClusterBulkOperationType.GENERATION_UPDATE,\n  ClusterBulkOperationType.PLAN_UPDATE,\n  ClusterBulkOperationType.PLAN_TYPE_UPDATE,\n  ClusterBulkOperationType.SLEEP_WAKEUP,\n  ClusterBulkOperationType.SPEC_UPDATE,\n  ClusterBulkOperationType.DELETION,\n]\n\n/** The operation type of a use case, or `undefined` for any other use case. */\nexport function clusterBulkOperationTypeOf(\n  useCase: string,\n): ClusterBulkOperationType | undefined {\n  return CLUSTER_BULK_OPERATION_TYPES.find(\n    (type) => CLUSTER_BULK_OPERATION_RULES[type].useCase === useCase,\n  )\n}\n\n/** One cluster of a request. */\nexport interface ClusterBulkTargetDto {\n  id: string\n  /** A copy for a reader. The step reads the id alone. */\n  name?: string\n  orgId?: string\n}\n\nexport interface ClusterBulkGenerationUpdateSettings {\n  targetGenerationId: string\n  /** A copy for a reader. */\n  targetGenerationName?: string\n  /** See `ClusterBulkOperationGenerationUpdateParameter.yoloAllClusters`. */\n  yoloAllClusters?: boolean\n  /** See `ClusterBulkOperationGenerationUpdateParameter.yoloForceUpdate`. */\n  yoloForceUpdate?: boolean\n  /**\n   * Changes only a cluster with auto-update on. console-backend reads the\n   * cluster when its step runs, because the customer can turn auto-update off\n   * while the request waits.\n   */\n  onlyAutoUpgrade?: boolean\n}\n\nexport interface ClusterBulkPlanUpdateSettings {\n  targetPlanId: string\n  targetPlanName?: string\n  /** Keeps the active modification of a cluster through the change. */\n  keepModification?: boolean\n}\n\n/**\n * No `keepModification`: the parameter of a plan type update in the old flow\n * has none, and its dialog never sends it.\n */\nexport interface ClusterBulkPlanTypeUpdateSettings {\n  targetPlanTypeId: string\n  targetPlanTypeName?: string\n}\n\nexport interface ClusterBulkSleepWakeupSettings {\n  action: 'sleep' | 'wakeup'\n}\n\n/** The settings of each type. Deletion and spec update have none. */\nexport interface ClusterBulkSettingsByType {\n  [ClusterBulkOperationType.GENERATION_UPDATE]: ClusterBulkGenerationUpdateSettings\n  [ClusterBulkOperationType.PLAN_UPDATE]: ClusterBulkPlanUpdateSettings\n  [ClusterBulkOperationType.PLAN_TYPE_UPDATE]: ClusterBulkPlanTypeUpdateSettings\n  [ClusterBulkOperationType.SLEEP_WAKEUP]: ClusterBulkSleepWakeupSettings\n  [ClusterBulkOperationType.DELETION]: Record<string, never>\n  [ClusterBulkOperationType.SPEC_UPDATE]: Record<string, never>\n}\n\n/** The payload of a request, for one operation type. */\nexport interface ClusterBulkOperationPayloadDto<\n  T extends ClusterBulkOperationType = ClusterBulkOperationType,\n> {\n  name: string\n  clusters: ClusterBulkTargetDto[]\n  settings: ClusterBulkSettingsByType[T]\n}\n\n/** True when the settings of a generation update go past a safety check. */\nexport function isClusterBulkYolo(\n  type: ClusterBulkOperationType,\n  settings: unknown,\n): boolean {\n  if (\n    type !== ClusterBulkOperationType.GENERATION_UPDATE ||\n    typeof settings !== 'object' ||\n    settings === null\n  ) {\n    return false\n  }\n  const typed = settings as ClusterBulkGenerationUpdateSettings\n  return typed.yoloAllClusters === true || typed.yoloForceUpdate === true\n}\n\n/**\n * Every permission that a request of this type and these settings needs.\n *\n * control-backend stores the answer on the request as\n * `requiredPermissions`, and the form passes the same answer to `canCreate`.\n * A yolo flag adds `CLUSTERS_CAN_UPDATE_GENERATION_YOLO`, which is the rule\n * of `needsGenerationYolo` in console-backend.\n */\nexport function clusterBulkRequiredPermissions(\n  type: ClusterBulkOperationType,\n  settings: unknown,\n): string[] {\n  const permissions = [\n    CLUSTER_BULK_OPERATION_RULES[type].permission,\n    ConsolePermissions.CLUSTERS_READALLCLUSTERINFO,\n  ]\n  if (isClusterBulkYolo(type, settings)) {\n    permissions.push(ConsolePermissions.CLUSTERS_CAN_UPDATE_GENERATION_YOLO)\n  }\n  return permissions\n}\n\n/**\n * Turns the settings of a request into the parameter of console-backend.\n *\n * The step route of console-backend reads the parameter shape of its own\n * bulk operation, so one function in console-backend serves both flows.\n * `nop` of the sleep action is not reachable from here on purpose: a request\n * that changes nothing is not a request that people approve.\n */\nexport function clusterBulkParameterOf(\n  type: ClusterBulkOperationType,\n  settings: unknown,\n): ClusterBulkOperationParameter {\n  const values = (settings ?? {}) as Record<string, unknown>\n  switch (type) {\n    case ClusterBulkOperationType.GENERATION_UPDATE:\n      return {\n        toGenerationUuid: String(values.targetGenerationId),\n        yoloAllClusters: values.yoloAllClusters === true,\n        yoloForceUpdate: values.yoloForceUpdate === true,\n        // Only when set, so the parameter of a plain update stays as it was.\n        ...(values.onlyAutoUpgrade === true && { onlyAutoUpgrade: true }),\n      }\n    case ClusterBulkOperationType.PLAN_UPDATE:\n      return {\n        toPlanUuid: String(values.targetPlanId),\n        yolo: false,\n        keepModification: values.keepModification === true,\n      }\n    case ClusterBulkOperationType.PLAN_TYPE_UPDATE:\n      return {\n        toPlanTypeUuid: String(values.targetPlanTypeId),\n        yolo: false,\n      }\n    case ClusterBulkOperationType.SLEEP_WAKEUP:\n      return { toSleep: values.action === 'wakeup' ? 'wakeup' : 'sleep' }\n    default:\n      return undefined\n  }\n}\n\n/** The outcome of one cluster, once its step finished. */\nexport type ClusterBulkFinalStatus =\n  | ClusterBulkOperationStatus.DONE\n  | ClusterBulkOperationStatus.ERRORED\n  | ClusterBulkOperationStatus.SKIPPED\n\n/**\n * What a request records for one cluster, in `executionResult`.\n *\n * `executionResult` of a bulk request is an object with ONE key for each\n * cluster that finished, keyed by the id of the cluster. A cluster with no\n * key has not run yet. That is what lets an interrupted run skip the\n * clusters that are finished, and what a reader shows as \"not reached\".\n */\nexport interface ClusterBulkClusterResultDto {\n  result: ClusterBulkFinalStatus\n  /** Why a cluster errored or was skipped, or a note on a done cluster. */\n  error?: string\n  /** An ISO timestamp: when the step answered. */\n  at: string\n}\n\n/** Reads the result of one cluster out of `executionResult`. */\nexport function clusterBulkResultOf(\n  executionResult: Record<string, unknown> | undefined,\n  clusterId: string,\n): ClusterBulkClusterResultDto | undefined {\n  const entry = executionResult?.[clusterId]\n  if (typeof entry !== 'object' || entry === null) {\n    return undefined\n  }\n  const result = (entry as { result?: unknown }).result\n  if (\n    result !== ClusterBulkOperationStatus.DONE &&\n    result !== ClusterBulkOperationStatus.ERRORED &&\n    result !== ClusterBulkOperationStatus.SKIPPED\n  ) {\n    return undefined\n  }\n  return entry as ClusterBulkClusterResultDto\n}\n\n/**\n * The body of the step route of console-backend.\n *\n * `api/admin/approvals/clusters/:clusterId/bulk-step`. One call does the work\n * of one operation type on one cluster.\n */\nexport interface ClusterBulkStepRequestDto {\n  type: ClusterBulkOperationType\n  parameter: ClusterBulkOperationParameter\n  /**\n   * When true, a sleeping cluster is NOT changed. The answer is `deferred`,\n   * with the datacenter of the cluster.\n   *\n   * This is how control-backend keeps the stagger of the old run: the first\n   * pass changes the awake clusters and learns which ones sleep, and a second\n   * pass changes the sleeping ones: one lane for each datacenter, the lanes\n   * side by side, and the clusters of one lane\n   * `CLUSTER_BULK_SLEEPING_CLUSTER_DELAY_MS` apart.\n   */\n  deferIfSleeping: boolean\n}\n\n/** The answer of the step route. */\nexport type ClusterBulkStepResultDto =\n  | {\n      outcome: 'finished'\n      result: ClusterBulkFinalStatus\n      error?: string\n    }\n  | {\n      outcome: 'deferred'\n      /** The k8s context of the cluster, or `unknown`. */\n      datacenter: string\n    }\n"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n/**\n * The cluster bulk operation on the approval mechanism of control-backend.\n *\n * control-backend and control-frontend both read this file. The backend\n * builds its six use cases from `CLUSTER_BULK_OPERATION_RULES`, and the form\n * of the frontend reads the same table to run `canCreate` before the request\n * goes out. A permission that only one side knew would be a button that the\n * server then refuses.\n *\n * console-backend reads the step types at the end. control-backend calls one\n * step for each cluster, and console-backend does the work of that step with\n * the same code that its own bulk operation runs.\n */\n\nimport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from '../enums/ClusterBulkOperation.enum.js'\nimport { ConsolePermissions } from '../permissions/console.permissions.js'\nimport type { ClusterBulkOperationParameter } from '../types/ClusterBulkOperation.type.js'\nimport { APPROVAL_USE_CASE_TYPES } from './use-cases.const.js'\n\n/**\n * The most clusters that one request holds.\n *\n * The payload is a json column, and the create route reads it in one body of\n * at most 1 MiB. 3000 clusters with the longest names stay far below that.\n * A larger set is two requests, which is also two decisions for the people\n * who approve.\n */\nexport const CLUSTER_BULK_OPERATION_MAX_CLUSTERS = 3000\n\n/** The longest name of an operation. The name is what the queue shows. */\nexport const CLUSTER_BULK_OPERATION_NAME_MAX_LENGTH = 200\n\n/**\n * The longest cluster name that the payload keeps.\n *\n * The name is a copy for a reader. The id alone decides what the step\n * changes.\n */\nexport const CLUSTER_BULK_OPERATION_CLUSTER_NAME_MAX_LENGTH = 100\n\n/**\n * The wait between two sleeping clusters of one datacenter.\n *\n * The same number as the bulk operation of console-backend. A wake-up loads\n * the datacenter, and many wake-ups together overload it. Datacenters do not\n * wait for each other.\n */\nexport const CLUSTER_BULK_SLEEPING_CLUSTER_DELAY_MS = 60_000\n\n/** What one operation type needs, and which use case carries it. */\nexport interface ClusterBulkOperationRule {\n  useCase: string\n  label: string\n  /** The permission that opens, approves and runs a request of this type. */\n  permission: string\n}\n\n/**\n * The floor of approvals of a cluster bulk operation on prod, for every type.\n * Dev, int and local use `CLUSTER_BULK_OPERATION_TEST_STAGE_MIN_ACKS`.\n *\n * A bulk operation changes many clusters with one decision, so it needs two\n * people other than the requester. Every other use case needs one. This\n * floor replaces `MINIMUM_EYEPAIRS` for the approval flow only. The old flow\n * of console-backend reads `requiredBulkOperationAcks`.\n */\nexport const CLUSTER_BULK_OPERATION_MIN_ACKS = 2\n\n/**\n * The floor of approvals of a cluster bulk operation on dev, int and local.\n *\n * A test stage often has one other Camundi who can approve. One approval\n * there still tests the whole flow.\n */\nexport const CLUSTER_BULK_OPERATION_TEST_STAGE_MIN_ACKS = 1\n\n/**\n * The rules of each operation type.\n *\n * The permissions are the ones that the bulk operation of console-backend\n * checks today (`getBulkOpRequiredPermission`), so a Camundi who can run one\n * flow can run the other. `CLUSTERS_READALLCLUSTERINFO` is part of every\n * type there, and `clusterBulkRequiredPermissions` adds it here.\n */\nexport const CLUSTER_BULK_OPERATION_RULES: Record<\n  ClusterBulkOperationType,\n  ClusterBulkOperationRule\n> = {\n  [ClusterBulkOperationType.GENERATION_UPDATE]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkGenerationUpdate,\n    label: 'Generation update',\n    permission: ConsolePermissions.CLUSTERS_CAN_UPDATE_GENERATION,\n  },\n  [ClusterBulkOperationType.PLAN_UPDATE]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkPlanUpdate,\n    label: 'Plan update',\n    permission: ConsolePermissions.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n  },\n  [ClusterBulkOperationType.PLAN_TYPE_UPDATE]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkPlanTypeUpdate,\n    label: 'Plan type update',\n    permission: ConsolePermissions.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n  },\n  [ClusterBulkOperationType.SLEEP_WAKEUP]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkSleepWakeup,\n    label: 'Sleep / wake up',\n    permission: ConsolePermissions.CLUSTERS_CAN_SEND_TO_SLEEP,\n  },\n  [ClusterBulkOperationType.DELETION]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkDeletion,\n    label: 'Deletion',\n    permission: ConsolePermissions.CLUSTERS_DELETE_CLUSTER,\n  },\n  [ClusterBulkOperationType.SPEC_UPDATE]: {\n    useCase: APPROVAL_USE_CASE_TYPES.clusterBulkSpecUpdate,\n    label: 'Spec update',\n    permission: ConsolePermissions.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n  },\n}\n\n/** The operation types in the order that a form offers them. */\nexport const CLUSTER_BULK_OPERATION_TYPES: ClusterBulkOperationType[] = [\n  ClusterBulkOperationType.GENERATION_UPDATE,\n  ClusterBulkOperationType.PLAN_UPDATE,\n  ClusterBulkOperationType.PLAN_TYPE_UPDATE,\n  ClusterBulkOperationType.SLEEP_WAKEUP,\n  ClusterBulkOperationType.SPEC_UPDATE,\n  ClusterBulkOperationType.DELETION,\n]\n\n/** The operation type of a use case, or `undefined` for any other use case. */\nexport function clusterBulkOperationTypeOf(\n  useCase: string,\n): ClusterBulkOperationType | undefined {\n  return CLUSTER_BULK_OPERATION_TYPES.find(\n    (type) => CLUSTER_BULK_OPERATION_RULES[type].useCase === useCase,\n  )\n}\n\n/** One cluster of a request. */\nexport interface ClusterBulkTargetDto {\n  id: string\n  /** A copy for a reader. The step reads the id alone. */\n  name?: string\n  orgId?: string\n}\n\nexport interface ClusterBulkGenerationUpdateSettings {\n  targetGenerationId: string\n  /** A copy for a reader. */\n  targetGenerationName?: string\n  /** See `ClusterBulkOperationGenerationUpdateParameter.yoloAllClusters`. */\n  yoloAllClusters?: boolean\n  /** See `ClusterBulkOperationGenerationUpdateParameter.yoloForceUpdate`. */\n  yoloForceUpdate?: boolean\n  /**\n   * Changes only a cluster with auto-update on. console-backend reads the\n   * cluster when its step runs, because the customer can turn auto-update off\n   * while the request waits.\n   */\n  onlyAutoUpgrade?: boolean\n}\n\nexport interface ClusterBulkPlanUpdateSettings {\n  targetPlanId: string\n  targetPlanName?: string\n  /** Keeps the active modification of a cluster through the change. */\n  keepModification?: boolean\n}\n\n/**\n * No `keepModification`: the parameter of a plan type update in the old flow\n * has none, and its dialog never sends it.\n */\nexport interface ClusterBulkPlanTypeUpdateSettings {\n  targetPlanTypeId: string\n  targetPlanTypeName?: string\n}\n\nexport interface ClusterBulkSleepWakeupSettings {\n  action: 'sleep' | 'wakeup'\n}\n\n/** The settings of each type. Deletion and spec update have none. */\nexport interface ClusterBulkSettingsByType {\n  [ClusterBulkOperationType.GENERATION_UPDATE]: ClusterBulkGenerationUpdateSettings\n  [ClusterBulkOperationType.PLAN_UPDATE]: ClusterBulkPlanUpdateSettings\n  [ClusterBulkOperationType.PLAN_TYPE_UPDATE]: ClusterBulkPlanTypeUpdateSettings\n  [ClusterBulkOperationType.SLEEP_WAKEUP]: ClusterBulkSleepWakeupSettings\n  [ClusterBulkOperationType.DELETION]: Record<string, never>\n  [ClusterBulkOperationType.SPEC_UPDATE]: Record<string, never>\n}\n\n/** The payload of a request, for one operation type. */\nexport interface ClusterBulkOperationPayloadDto<\n  T extends ClusterBulkOperationType = ClusterBulkOperationType,\n> {\n  name: string\n  clusters: ClusterBulkTargetDto[]\n  settings: ClusterBulkSettingsByType[T]\n}\n\n/** True when the settings of a generation update go past a safety check. */\nexport function isClusterBulkYolo(\n  type: ClusterBulkOperationType,\n  settings: unknown,\n): boolean {\n  if (\n    type !== ClusterBulkOperationType.GENERATION_UPDATE ||\n    typeof settings !== 'object' ||\n    settings === null\n  ) {\n    return false\n  }\n  const typed = settings as ClusterBulkGenerationUpdateSettings\n  return typed.yoloAllClusters === true || typed.yoloForceUpdate === true\n}\n\n/**\n * Every permission that a request of this type and these settings needs.\n *\n * control-backend stores the answer on the request as\n * `requiredPermissions`, and the form passes the same answer to `canCreate`.\n * A yolo flag adds `CLUSTERS_CAN_UPDATE_GENERATION_YOLO`, which is the rule\n * of `needsGenerationYolo` in console-backend.\n */\nexport function clusterBulkRequiredPermissions(\n  type: ClusterBulkOperationType,\n  settings: unknown,\n): string[] {\n  const permissions = [\n    CLUSTER_BULK_OPERATION_RULES[type].permission,\n    ConsolePermissions.CLUSTERS_READALLCLUSTERINFO,\n  ]\n  if (isClusterBulkYolo(type, settings)) {\n    permissions.push(ConsolePermissions.CLUSTERS_CAN_UPDATE_GENERATION_YOLO)\n  }\n  return permissions\n}\n\n/**\n * Turns the settings of a request into the parameter of console-backend.\n *\n * The step route of console-backend reads the parameter shape of its own\n * bulk operation, so one function in console-backend serves both flows.\n * `nop` of the sleep action is not reachable from here on purpose: a request\n * that changes nothing is not a request that people approve.\n */\nexport function clusterBulkParameterOf(\n  type: ClusterBulkOperationType,\n  settings: unknown,\n): ClusterBulkOperationParameter {\n  const values = (settings ?? {}) as Record<string, unknown>\n  switch (type) {\n    case ClusterBulkOperationType.GENERATION_UPDATE:\n      return {\n        toGenerationUuid: String(values.targetGenerationId),\n        yoloAllClusters: values.yoloAllClusters === true,\n        yoloForceUpdate: values.yoloForceUpdate === true,\n        // Only when set, so the parameter of a plain update stays as it was.\n        ...(values.onlyAutoUpgrade === true && { onlyAutoUpgrade: true }),\n      }\n    case ClusterBulkOperationType.PLAN_UPDATE:\n      return {\n        toPlanUuid: String(values.targetPlanId),\n        yolo: false,\n        keepModification: values.keepModification === true,\n      }\n    case ClusterBulkOperationType.PLAN_TYPE_UPDATE:\n      return {\n        toPlanTypeUuid: String(values.targetPlanTypeId),\n        yolo: false,\n      }\n    case ClusterBulkOperationType.SLEEP_WAKEUP:\n      return { toSleep: values.action === 'wakeup' ? 'wakeup' : 'sleep' }\n    default:\n      return undefined\n  }\n}\n\n/** The outcome of one cluster, once its step finished. */\nexport type ClusterBulkFinalStatus =\n  | ClusterBulkOperationStatus.DONE\n  | ClusterBulkOperationStatus.ERRORED\n  | ClusterBulkOperationStatus.SKIPPED\n\n/**\n * What a request records for one cluster, in `executionResult`.\n *\n * `executionResult` of a bulk request is an object with ONE key for each\n * cluster that finished, keyed by the id of the cluster. A cluster with no\n * key has not run yet. That is what lets an interrupted run skip the\n * clusters that are finished, and what a reader shows as \"not reached\".\n */\nexport interface ClusterBulkClusterResultDto {\n  result: ClusterBulkFinalStatus\n  /** Why a cluster errored or was skipped, or a note on a done cluster. */\n  error?: string\n  /** An ISO timestamp: when the step answered. */\n  at: string\n}\n\n/** Reads the result of one cluster out of `executionResult`. */\nexport function clusterBulkResultOf(\n  executionResult: Record<string, unknown> | undefined,\n  clusterId: string,\n): ClusterBulkClusterResultDto | undefined {\n  const entry = executionResult?.[clusterId]\n  if (typeof entry !== 'object' || entry === null) {\n    return undefined\n  }\n  const result = (entry as { result?: unknown }).result\n  if (\n    result !== ClusterBulkOperationStatus.DONE &&\n    result !== ClusterBulkOperationStatus.ERRORED &&\n    result !== ClusterBulkOperationStatus.SKIPPED\n  ) {\n    return undefined\n  }\n  return entry as ClusterBulkClusterResultDto\n}\n\n/**\n * The body of the step route of console-backend.\n *\n * `api/admin/approvals/clusters/:clusterId/bulk-step`. One call does the work\n * of one operation type on one cluster.\n */\nexport interface ClusterBulkStepRequestDto {\n  type: ClusterBulkOperationType\n  parameter: ClusterBulkOperationParameter\n  /**\n   * When true, a sleeping cluster is NOT changed. The answer is `deferred`,\n   * with the datacenter of the cluster.\n   *\n   * This is how control-backend keeps the stagger of the old run: the first\n   * pass changes the awake clusters and learns which ones sleep, and a second\n   * pass changes the sleeping ones: one lane for each datacenter, the lanes\n   * side by side, and the clusters of one lane\n   * `CLUSTER_BULK_SLEEPING_CLUSTER_DELAY_MS` apart.\n   */\n  deferIfSleeping: boolean\n}\n\n/** The answer of the step route. */\nexport type ClusterBulkStepResultDto =\n  | {\n      outcome: 'finished'\n      result: ClusterBulkFinalStatus\n      error?: string\n    }\n  | {\n      outcome: 'deferred'\n      /** The k8s context of the cluster, or `unknown`. */\n      datacenter: string\n    }\n"],
   "mappings": "AAoBA;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AAEnC,SAAS,+BAA+B;AAUjC,MAAM,sCAAsC;AAG5C,MAAM,yCAAyC;AAQ/C,MAAM,iDAAiD;AASvD,MAAM,yCAAyC;AAmB/C,MAAM,kCAAkC;AAQxC,MAAM,6CAA6C;AAUnD,MAAM,+BAGT;AAAA,EACF,CAAC,yBAAyB,iBAAiB,GAAG;AAAA,IAC5C,SAAS,wBAAwB;AAAA,IACjC,OAAO;AAAA,IACP,YAAY,mBAAmB;AAAA,EACjC;AAAA,EACA,CAAC,yBAAyB,WAAW,GAAG;AAAA,IACtC,SAAS,wBAAwB;AAAA,IACjC,OAAO;AAAA,IACP,YAAY,mBAAmB;AAAA,EACjC;AAAA,EACA,CAAC,yBAAyB,gBAAgB,GAAG;AAAA,IAC3C,SAAS,wBAAwB;AAAA,IACjC,OAAO;AAAA,IACP,YAAY,mBAAmB;AAAA,EACjC;AAAA,EACA,CAAC,yBAAyB,YAAY,GAAG;AAAA,IACvC,SAAS,wBAAwB;AAAA,IACjC,OAAO;AAAA,IACP,YAAY,mBAAmB;AAAA,EACjC;AAAA,EACA,CAAC,yBAAyB,QAAQ,GAAG;AAAA,IACnC,SAAS,wBAAwB;AAAA,IACjC,OAAO;AAAA,IACP,YAAY,mBAAmB;AAAA,EACjC;AAAA,EACA,CAAC,yBAAyB,WAAW,GAAG;AAAA,IACtC,SAAS,wBAAwB;AAAA,IACjC,OAAO;AAAA,IACP,YAAY,mBAAmB;AAAA,EACjC;AACF;AAGO,MAAM,+BAA2D;AAAA,EACtE,yBAAyB;AAAA,EACzB,yBAAyB;AAAA,EACzB,yBAAyB;AAAA,EACzB,yBAAyB;AAAA,EACzB,yBAAyB;AAAA,EACzB,yBAAyB;AAC3B;AAGO,SAAS,2BACd,SACsC;AACtC,SAAO,6BAA6B;AAAA,IAClC,CAAC,SAAS,6BAA6B,IAAI,EAAE,YAAY;AAAA,EAC3D;AACF;AAkEO,SAAS,kBACd,MACA,UACS;AACT,MACE,SAAS,yBAAyB,qBAClC,OAAO,aAAa,YACpB,aAAa,MACb;AACA,WAAO;AAAA,EACT;AACA,QAAM,QAAQ;AACd,SAAO,MAAM,oBAAoB,QAAQ,MAAM,oBAAoB;AACrE;AAUO,SAAS,+BACd,MACA,UACU;AACV,QAAM,cAAc;AAAA,IAClB,6BAA6B,IAAI,EAAE;AAAA,IACnC,mBAAmB;AAAA,EACrB;AACA,MAAI,kBAAkB,MAAM,QAAQ,GAAG;AACrC,gBAAY,KAAK,mBAAmB,mCAAmC;AAAA,EACzE;AACA,SAAO;AACT;AAUO,SAAS,uBACd,MACA,UAC+B;AAC/B,QAAM,SAAU,YAAY,CAAC;AAC7B,UAAQ,MAAM;AAAA,IACZ,KAAK,yBAAyB;AAC5B,aAAO;AAAA,QACL,kBAAkB,OAAO,OAAO,kBAAkB;AAAA,QAClD,iBAAiB,OAAO,oBAAoB;AAAA,QAC5C,iBAAiB,OAAO,oBAAoB;AAAA;AAAA,QAE5C,GAAI,OAAO,oBAAoB,QAAQ,EAAE,iBAAiB,KAAK;AAAA,MACjE;AAAA,IACF,KAAK,yBAAyB;AAC5B,aAAO;AAAA,QACL,YAAY,OAAO,OAAO,YAAY;AAAA,QACtC,MAAM;AAAA,QACN,kBAAkB,OAAO,qBAAqB;AAAA,MAChD;AAAA,IACF,KAAK,yBAAyB;AAC5B,aAAO;AAAA,QACL,gBAAgB,OAAO,OAAO,gBAAgB;AAAA,QAC9C,MAAM;AAAA,MACR;AAAA,IACF,KAAK,yBAAyB;AAC5B,aAAO,EAAE,SAAS,OAAO,WAAW,WAAW,WAAW,QAAQ;AAAA,IACpE;AACE,aAAO;AAAA,EACX;AACF;AAyBO,SAAS,oBACd,iBACA,WACyC;AACzC,QAAM,QAAQ,kBAAkB,SAAS;AACzC,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,QAAM,SAAU,MAA+B;AAC/C,MACE,WAAW,2BAA2B,QACtC,WAAW,2BAA2B,WACtC,WAAW,2BAA2B,SACtC;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;",
   "names": []
 }

package/dist/constants/misc.const.d.ts

@@ -1,3 +1,4 @@
+import { ClusterBulkOperationType } from '../enums/ClusterBulkOperation.enum.js';
 export declare const CONSOLE_API_USER_ID = "console-api";
 /**
  * The namespace of the custom claims that Auth0 adds to a token of this fleet.
@@ -38,4 +39,31 @@ export declare const MINIMUM_EYEPAIRS: {
     CLUSTER_PLAN_MODIFICATION: number;
     CLUSTER_MODIFICATION: number;
 };
+/**
+ * The lowest `eyes` of a cluster bulk operation of console-backend, for each
+ * type. To get the count that an operation needs, use
+ * `minimumBulkOperationAcks` or `requiredBulkOperationAcks`. A form that
+ * offers a default for a new operation can read the map.
+ */
+export declare const MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE: Record<ClusterBulkOperationType, number>;
+/**
+ * minimumBulkOperationAcks is how many different users must acknowledge a
+ * cluster bulk operation of console-backend on a stage that counts the
+ * acknowledgements. It is the `eyes` of the operation, and never less than the
+ * minimum of its type. The creator can be one of the users.
+ */
+export declare function minimumBulkOperationAcks(operation: {
+    type: ClusterBulkOperationType;
+    eyes: number;
+}): number;
+/**
+ * requiredBulkOperationAcks is how many different users must acknowledge a
+ * cluster bulk operation of console-backend before it can run on `stage`.
+ * The dev and local stages need none. Every other stage, and an unknown
+ * `stage`, needs `minimumBulkOperationAcks`.
+ */
+export declare function requiredBulkOperationAcks(operation: {
+    type: ClusterBulkOperationType;
+    eyes: number;
+}, stage: string | undefined): number;
 export declare const MAX_HARDWARE_PACKAGE_COUNT = 4;

package/dist/constants/misc.const.js

@@ -1,3 +1,4 @@
+import { ClusterBulkOperationType } from "../enums/ClusterBulkOperation.enum.js";
 const CONSOLE_API_USER_ID = "console-api";
 const CAMUNDA_CLAIMS_NAMESPACE = "https://camunda.com/meta";
 const UNKNOWN_ACTOR_EMAIL = "unknown";
@@ -23,6 +24,29 @@ const MINIMUM_EYEPAIRS = {
   CLUSTER_PLAN_MODIFICATION: 1,
   CLUSTER_MODIFICATION: 1
 };
+const MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE = {
+  [ClusterBulkOperationType.DELETION]: MINIMUM_EYEPAIRS.CLUSTER_DELETION,
+  [ClusterBulkOperationType.GENERATION_UPDATE]: MINIMUM_EYEPAIRS.CLUSTER_GENERATION_UPDATE,
+  [ClusterBulkOperationType.PLAN_UPDATE]: MINIMUM_EYEPAIRS.CLUSTER_PLAN_UPDATE,
+  [ClusterBulkOperationType.PLAN_TYPE_UPDATE]: MINIMUM_EYEPAIRS.CLUSTER_PLAN_TYPE_UPDATE,
+  [ClusterBulkOperationType.SLEEP_WAKEUP]: MINIMUM_EYEPAIRS.CLUSTER_SLEEP_WAKEUP,
+  [ClusterBulkOperationType.SPEC_UPDATE]: MINIMUM_EYEPAIRS.CLUSTER_SPEC_UPDATE
+};
+const HIGHEST_BULK_OPERATION_MINIMUM = Math.max(
+  ...Object.values(MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE)
+);
+function minimumBulkOperationAcks(operation) {
+  return Math.max(
+    Number.isFinite(operation.eyes) ? operation.eyes : 0,
+    MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE[operation.type] ?? HIGHEST_BULK_OPERATION_MINIMUM
+  );
+}
+function requiredBulkOperationAcks(operation, stage) {
+  if (stage === "dev" || stage === "local") {
+    return 0;
+  }
+  return minimumBulkOperationAcks(operation);
+}
 const MAX_HARDWARE_PACKAGE_COUNT = 4;
 export {
   CAMUNDA_CLAIMS_NAMESPACE,
@@ -32,10 +56,13 @@ export {
   MAX_HARDWARE_PACKAGE_COUNT,
   MAX_LENGTH_CLUSTER_NAME,
   MINIMUM_EYEPAIRS,
+  MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE,
   NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,
   SECRETS_MAX_LENGTH,
   STARTING_PRICE_PER_MONTH_IN_EURO,
   TEMPORARY_CLUSTER_NAME,
-  UNKNOWN_ACTOR_EMAIL
+  UNKNOWN_ACTOR_EMAIL,
+  minimumBulkOperationAcks,
+  requiredBulkOperationAcks
 };
 //# sourceMappingURL=misc.const.js.map

package/dist/constants/misc.const.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/constants/misc.const.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nexport const CONSOLE_API_USER_ID = 'console-api'\n\n/**\n * The namespace of the custom claims that Auth0 adds to a token of this fleet.\n *\n * An Auth0 API access token carries no `email` claim of its own. The rules of\n * the tenant put the email of the person under this namespace instead, and\n * every reader of the fleet must look there. A service that reads a top-level\n * `email` claim gets nothing, and the failure is silent: the identity is still\n * valid, so the request continues with an empty email.\n */\nexport const CAMUNDA_CLAIMS_NAMESPACE = 'https://camunda.com/meta'\n\n/**\n * The email of an actor whose token carries no email.\n *\n * It is a value and not an empty string, because an empty string reads like a\n * field that nobody wrote. A record that says `unknown` says that the token had\n * no email, which is a different fact.\n *\n * A rule that compares two people MUST NOT treat two of these as one person.\n * `isSameActorEmail` in `approvals/policy.ts` holds that.\n */\nexport const UNKNOWN_ACTOR_EMAIL = 'unknown'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  // These two had no name, and each reader fell back to\n  // `CLUSTER_PLAN_UPDATE`. The values are the same as that fallback.\n  CLUSTER_SLEEP_WAKEUP: 2,\n  CLUSTER_SPEC_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n"],
-  "mappings": "AAMO,MAAM,sBAAsB;AAW5B,MAAM,2BAA2B;AAYjC,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA;AAAA;AAAA,EAG1B,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAEO,MAAM,6BAA6B;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport { ClusterBulkOperationType } from '../enums/ClusterBulkOperation.enum.js'\n\nexport const CONSOLE_API_USER_ID = 'console-api'\n\n/**\n * The namespace of the custom claims that Auth0 adds to a token of this fleet.\n *\n * An Auth0 API access token carries no `email` claim of its own. The rules of\n * the tenant put the email of the person under this namespace instead, and\n * every reader of the fleet must look there. A service that reads a top-level\n * `email` claim gets nothing, and the failure is silent: the identity is still\n * valid, so the request continues with an empty email.\n */\nexport const CAMUNDA_CLAIMS_NAMESPACE = 'https://camunda.com/meta'\n\n/**\n * The email of an actor whose token carries no email.\n *\n * It is a value and not an empty string, because an empty string reads like a\n * field that nobody wrote. A record that says `unknown` says that the token had\n * no email, which is a different fact.\n *\n * A rule that compares two people MUST NOT treat two of these as one person.\n * `isSameActorEmail` in `approvals/policy.ts` holds that.\n */\nexport const UNKNOWN_ACTOR_EMAIL = 'unknown'\nexport const TEMPORARY_CLUSTER_NAME = 'Get Started'\nexport type Stage = 'local' | 'dev' | 'int' | 'prod'\nexport const HOTBACKUP_MIN_CREATE_PERIOD = 1000 * 60 * 60 * 0.25 // 15 minutes\n\nexport const SECRETS_MAX_LENGTH = 4096\nexport const FIRSTNAME_LASTNAME_MAX_LENGTH = 255\n\nexport const STARTING_PRICE_PER_MONTH_IN_EURO = 99\n\nexport const MAX_LENGTH_CLUSTER_NAME = 50\n\nexport const NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS = [\n  'CELP with sleeping clusters',\n  'Camunda Partner',\n]\n\nexport const MINIMUM_EYEPAIRS = {\n  CLUSTER_DELETION: 3,\n  CLUSTER_GENERATION_UPDATE: 2,\n  CLUSTER_PLAN_UPDATE: 2,\n  CLUSTER_PLAN_TYPE_UPDATE: 2,\n  // These two had no name, and each reader fell back to\n  // `CLUSTER_PLAN_UPDATE`. The values are the same as that fallback.\n  CLUSTER_SLEEP_WAKEUP: 2,\n  CLUSTER_SPEC_UPDATE: 2,\n  CLUSTER_PLAN_MODIFICATION: 1,\n  CLUSTER_MODIFICATION: 1,\n}\n\n/**\n * The lowest `eyes` of a cluster bulk operation of console-backend, for each\n * type. To get the count that an operation needs, use\n * `minimumBulkOperationAcks` or `requiredBulkOperationAcks`. A form that\n * offers a default for a new operation can read the map.\n */\nexport const MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE: Record<\n  ClusterBulkOperationType,\n  number\n> = {\n  [ClusterBulkOperationType.DELETION]: MINIMUM_EYEPAIRS.CLUSTER_DELETION,\n  [ClusterBulkOperationType.GENERATION_UPDATE]:\n    MINIMUM_EYEPAIRS.CLUSTER_GENERATION_UPDATE,\n  [ClusterBulkOperationType.PLAN_UPDATE]: MINIMUM_EYEPAIRS.CLUSTER_PLAN_UPDATE,\n  [ClusterBulkOperationType.PLAN_TYPE_UPDATE]:\n    MINIMUM_EYEPAIRS.CLUSTER_PLAN_TYPE_UPDATE,\n  [ClusterBulkOperationType.SLEEP_WAKEUP]:\n    MINIMUM_EYEPAIRS.CLUSTER_SLEEP_WAKEUP,\n  [ClusterBulkOperationType.SPEC_UPDATE]: MINIMUM_EYEPAIRS.CLUSTER_SPEC_UPDATE,\n}\n\n// A stored row can hold a type that the map does not name, and a request can\n// hold no `eyes`. Each makes the count NaN, and a check of `acks < NaN`\n// passes. Thus such a type gets the highest minimum, and such an `eyes` is 0.\nconst HIGHEST_BULK_OPERATION_MINIMUM = Math.max(\n  ...Object.values(MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE),\n)\n\n/**\n * minimumBulkOperationAcks is how many different users must acknowledge a\n * cluster bulk operation of console-backend on a stage that counts the\n * acknowledgements. It is the `eyes` of the operation, and never less than the\n * minimum of its type. The creator can be one of the users.\n */\nexport function minimumBulkOperationAcks(operation: {\n  type: ClusterBulkOperationType\n  eyes: number\n}): number {\n  return Math.max(\n    Number.isFinite(operation.eyes) ? operation.eyes : 0,\n    MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE[operation.type] ??\n      HIGHEST_BULK_OPERATION_MINIMUM,\n  )\n}\n\n/**\n * requiredBulkOperationAcks is how many different users must acknowledge a\n * cluster bulk operation of console-backend before it can run on `stage`.\n * The dev and local stages need none. Every other stage, and an unknown\n * `stage`, needs `minimumBulkOperationAcks`.\n */\nexport function requiredBulkOperationAcks(\n  operation: { type: ClusterBulkOperationType; eyes: number },\n  stage: string | undefined,\n): number {\n  if (stage === 'dev' || stage === 'local') {\n    return 0\n  }\n  return minimumBulkOperationAcks(operation)\n}\n\nexport const MAX_HARDWARE_PACKAGE_COUNT = 4\n"],
+  "mappings": "AAMA,SAAS,gCAAgC;AAElC,MAAM,sBAAsB;AAW5B,MAAM,2BAA2B;AAYjC,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,MAAM,8BAA8B,MAAO,KAAK,KAAK;AAErD,MAAM,qBAAqB;AAC3B,MAAM,gCAAgC;AAEtC,MAAM,mCAAmC;AAEzC,MAAM,0BAA0B;AAEhC,MAAM,wDAAwD;AAAA,EACnE;AAAA,EACA;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B,kBAAkB;AAAA,EAClB,2BAA2B;AAAA,EAC3B,qBAAqB;AAAA,EACrB,0BAA0B;AAAA;AAAA;AAAA,EAG1B,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;AAQO,MAAM,0CAGT;AAAA,EACF,CAAC,yBAAyB,QAAQ,GAAG,iBAAiB;AAAA,EACtD,CAAC,yBAAyB,iBAAiB,GACzC,iBAAiB;AAAA,EACnB,CAAC,yBAAyB,WAAW,GAAG,iBAAiB;AAAA,EACzD,CAAC,yBAAyB,gBAAgB,GACxC,iBAAiB;AAAA,EACnB,CAAC,yBAAyB,YAAY,GACpC,iBAAiB;AAAA,EACnB,CAAC,yBAAyB,WAAW,GAAG,iBAAiB;AAC3D;AAKA,MAAM,iCAAiC,KAAK;AAAA,EAC1C,GAAG,OAAO,OAAO,uCAAuC;AAC1D;AAQO,SAAS,yBAAyB,WAG9B;AACT,SAAO,KAAK;AAAA,IACV,OAAO,SAAS,UAAU,IAAI,IAAI,UAAU,OAAO;AAAA,IACnD,wCAAwC,UAAU,IAAI,KACpD;AAAA,EACJ;AACF;AAQO,SAAS,0BACd,WACA,OACQ;AACR,MAAI,UAAU,SAAS,UAAU,SAAS;AACxC,WAAO;AAAA,EACT;AACA,SAAO,yBAAyB,SAAS;AAC3C;AAEO,MAAM,6BAA6B;",
   "names": []
 }

package/dist/index.d.ts

@@ -2,7 +2,7 @@ export { CUSTOM_GENERATION_MAX_PER_REQUESTER, CUSTOM_GENERATION_MAX_UPGRADEABLE_
 export { CUSTOM_HARDWARE_SIZING_BROKER_TOTAL_CAPS, CUSTOM_HARDWARE_SIZING_COUNT_CAPS, CUSTOM_HARDWARE_SIZING_ELASTICSEARCH_TOTAL_CAPS, CUSTOM_HARDWARE_SIZING_MAX_AUTO_RESIZE_INCREASE_GI, CUSTOM_HARDWARE_SIZING_MAX_PLAN_JSON_LENGTH, CUSTOM_HARDWARE_SIZING_MAX_PLANS_PER_REQUESTER, CUSTOM_HARDWARE_SIZING_NAME_MAX_LENGTH, CUSTOM_HARDWARE_SIZING_NAME_MIN_LENGTH, CUSTOM_HARDWARE_SIZING_REPLICA_SET_TOTAL_CAPS, CUSTOM_HARDWARE_SIZING_RESOURCE_CAPS, checkCustomHardwareSizing, isCustomHardwareSizingStage, parseKubernetesQuantity, } from './constants/custom-hardware-sizing.const.js';
 export { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js';
 export type { Stage } from './constants/misc.const.js';
-export { CAMUNDA_CLAIMS_NAMESPACE, CONSOLE_API_USER_ID, FIRSTNAME_LASTNAME_MAX_LENGTH, HOTBACKUP_MIN_CREATE_PERIOD, MAX_HARDWARE_PACKAGE_COUNT, MAX_LENGTH_CLUSTER_NAME, MINIMUM_EYEPAIRS, NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS, SECRETS_MAX_LENGTH, STARTING_PRICE_PER_MONTH_IN_EURO, TEMPORARY_CLUSTER_NAME, UNKNOWN_ACTOR_EMAIL, } from './constants/misc.const.js';
+export { CAMUNDA_CLAIMS_NAMESPACE, CONSOLE_API_USER_ID, FIRSTNAME_LASTNAME_MAX_LENGTH, HOTBACKUP_MIN_CREATE_PERIOD, MAX_HARDWARE_PACKAGE_COUNT, MAX_LENGTH_CLUSTER_NAME, MINIMUM_EYEPAIRS, MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE, minimumBulkOperationAcks, NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS, requiredBulkOperationAcks, SECRETS_MAX_LENGTH, STARTING_PRICE_PER_MONTH_IN_EURO, TEMPORARY_CLUSTER_NAME, UNKNOWN_ACTOR_EMAIL, } from './constants/misc.const.js';
 export { getGatewayPropertyHint, getGatewayPropertyPath, isAffectedByStreamlinedDeployment, isPre89AffectedPath, PRE89_AFFECTED_PATHS, PRE89_AFFECTED_PROPERTY_PREFIXES, PRE89_GATEWAY_PROPERTY_PATHS, PRE89_GATEWAY_RESOURCE_PREFIXES, } from './constants/pre89EnvVarMapping.const.js';
 export { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js';
 export { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js';

package/dist/index.js

@@ -30,7 +30,10 @@ import {
   MAX_HARDWARE_PACKAGE_COUNT,
   MAX_LENGTH_CLUSTER_NAME,
   MINIMUM_EYEPAIRS,
+  MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE,
+  minimumBulkOperationAcks,
   NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,
+  requiredBulkOperationAcks,
   SECRETS_MAX_LENGTH,
   STARTING_PRICE_PER_MONTH_IN_EURO,
   TEMPORARY_CLUSTER_NAME,
@@ -784,6 +787,7 @@ export {
   MAX_LENGTH_CLUSTER_NAME,
   MCP_MIN_VERSION,
   MINIMUM_EYEPAIRS,
+  MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE,
   MINUTE,
   MULTI_TENANCY_TOGGLE_MIN_VERSION,
   MutableThings,
@@ -1013,6 +1017,7 @@ export {
   joinIdSet,
   joinJvmOptions,
   likeArgument,
+  minimumBulkOperationAcks,
   normalizeCIDRList,
   normalizeGenerationVersion,
   normalizeTagName,
@@ -1032,6 +1037,7 @@ export {
   qaUserEmail,
   readChartSpec,
   remainingAcks,
+  requiredBulkOperationAcks,
   requiredPermissionsOf,
   requiresEnvVarsOverride,
   resolveRequiredAcks,

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/index.ts"],
-  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Constants (runtime values)\n// ============================================================================\n\nexport {\n  CUSTOM_GENERATION_MAX_PER_REQUESTER,\n  CUSTOM_GENERATION_MAX_UPGRADEABLE_FROM,\n  CUSTOM_GENERATION_NAME_MAX_LENGTH,\n  CUSTOM_GENERATION_NAME_MIN_LENGTH,\n  checkNewGenerationVersions,\n  isCustomGenerationStage,\n} from './constants/custom-generation.const.js'\nexport {\n  CUSTOM_HARDWARE_SIZING_BROKER_TOTAL_CAPS,\n  CUSTOM_HARDWARE_SIZING_COUNT_CAPS,\n  CUSTOM_HARDWARE_SIZING_ELASTICSEARCH_TOTAL_CAPS,\n  CUSTOM_HARDWARE_SIZING_MAX_AUTO_RESIZE_INCREASE_GI,\n  CUSTOM_HARDWARE_SIZING_MAX_PLAN_JSON_LENGTH,\n  CUSTOM_HARDWARE_SIZING_MAX_PLANS_PER_REQUESTER,\n  CUSTOM_HARDWARE_SIZING_NAME_MAX_LENGTH,\n  CUSTOM_HARDWARE_SIZING_NAME_MIN_LENGTH,\n  CUSTOM_HARDWARE_SIZING_REPLICA_SET_TOTAL_CAPS,\n  CUSTOM_HARDWARE_SIZING_RESOURCE_CAPS,\n  checkCustomHardwareSizing,\n  isCustomHardwareSizingStage,\n  parseKubernetesQuantity,\n} from './constants/custom-hardware-sizing.const.js'\nexport { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js'\nexport type { Stage } from './constants/misc.const.js'\nexport {\n  CAMUNDA_CLAIMS_NAMESPACE,\n  CONSOLE_API_USER_ID,\n  FIRSTNAME_LASTNAME_MAX_LENGTH,\n  HOTBACKUP_MIN_CREATE_PERIOD,\n  MAX_HARDWARE_PACKAGE_COUNT,\n  MAX_LENGTH_CLUSTER_NAME,\n  MINIMUM_EYEPAIRS,\n  NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,\n  SECRETS_MAX_LENGTH,\n  STARTING_PRICE_PER_MONTH_IN_EURO,\n  TEMPORARY_CLUSTER_NAME,\n  UNKNOWN_ACTOR_EMAIL,\n} from './constants/misc.const.js'\nexport {\n  getGatewayPropertyHint,\n  getGatewayPropertyPath,\n  isAffectedByStreamlinedDeployment,\n  isPre89AffectedPath,\n  PRE89_AFFECTED_PATHS,\n  PRE89_AFFECTED_PROPERTY_PREFIXES,\n  PRE89_GATEWAY_PROPERTY_PATHS,\n  PRE89_GATEWAY_RESOURCE_PREFIXES,\n} from './constants/pre89EnvVarMapping.const.js'\nexport { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js'\nexport { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js'\nexport { isSelfServiceClusterModificationStage } from './constants/self-service-cluster-modification.const.js'\nexport type {\n  TrialExtensionSurveyAnswer,\n  TrialExtensionSurveyQuestion,\n} from './constants/trialExtensionSurvey.const.js'\nexport { TRIAL_EXTENSION_SURVEY_QUESTIONS } from './constants/trialExtensionSurvey.const.js'\nexport {\n  V2_BODY_IDS_MAX,\n  V2_FILTER_IDS_MAX,\n  V2_MAX_PAGE_LIMIT,\n} from './constants/v2-list.const.js'\nexport {\n  ADMIN_APP_RENAME_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_MINOR,\n  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,\n  APP_INTEGRATIONS_MIN_VERSION,\n  AUDIT_LOG_TAB_MIN_VERSION,\n  AUTHORIZATION_TOGGLE_MIN_VERSION,\n  AWS_ONLY_GENERATION_MIN_VERSION,\n  BUSINESS_ID_UNIQUENESS_MIN_VERSION,\n  BYOIDP_MIN_VERSION,\n  CLUSTER_SECRETS_LABEL_MIN_VERSION,\n  CLUSTER_STATISTICS_CONFIG_MIN_VERSION,\n  CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION,\n  CONNECTOR_SECRET_SYNC_MIN_VERSION,\n  CONNECTORS_MANAGEMENT_LINK_MIN_VERSION,\n  ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION,\n  ENFORCE_GROUPS_TOGGLE_MIN_VERSION,\n  GATEWAY_SPEC_8_9_MIN_VERSION,\n  HOT_BACKUP_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION,\n  IDENTITY_MANAGEMENT_MIN_VERSION,\n  INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION,\n  JOB_DASHBOARD_MIN_VERSION,\n  LINE_8_9_MIN_VERSION,\n  LINE_8_10_MIN_VERSION,\n  MCP_MIN_VERSION,\n  MULTI_TENANCY_TOGGLE_MIN_VERSION,\n  NEW_CLUSTER_ROLES_MIN_VERSION,\n  OPTIMIZE_DEFAULT_ON_MIN_VERSION,\n  OPTIMIZE_FILTERING_MIN_VERSION,\n  OPTIONAL_TELEMETRY_MIN_VERSION,\n  RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,\n  REST_API_URL_TRANSFORM_MIN_VERSION,\n  REST_API_V2_MIN_VERSION,\n  RESUME_ALPHA_MIN_VERSION,\n  SECRET_SOURCE_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_6_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_7_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_8_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_9_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_10_MIN_VERSION,\n  SESSION_CONFIG_MIN_VERSION,\n  SWAGGER_MIN_VERSION,\n  SWAGGER_URL_8_9_MIN_VERSION,\n  TASKLIST_MODE_TOGGLE_MIN_VERSION,\n  TASKLIST_UPGRADE_BANNER_MIN_VERSION,\n  TASKLIST_V2_AUTO_ENABLE_FROM_MINOR,\n  TASKLIST_V2_AUTO_ENABLE_TO_MINOR,\n  TASKLIST_V2_DEFAULT_ON_MIN_VERSION,\n  TASKLIST_V2_SETTING_MAX_VERSION,\n  TASKLIST_V2_UPGRADE_MIN_VERSION,\n  TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION,\n  UPGRADE_READINESS_MIN_VERSION,\n  ZEEBE_REST_URL_MIN_VERSION,\n} from './constants/version-gates.const.js'\n\n// ============================================================================\n// DTOs - Types (interfaces and type aliases)\n// ============================================================================\n\n// Annotations - the notes and the tags that a Camundi attaches to a fleet\n// entity. The wire types and the rules are pure and browser-safe, so\n// control-backend and control-frontend run the same code.\nexport type {\n  AnnotationActorView,\n  AnnotationDecision,\n  AnnotationDenialCode,\n} from './annotations/policy.js'\nexport {\n  ANNOTATION_DENIAL_MESSAGES,\n  canEditNote,\n  canRemove,\n  checkNoteBody,\n  checkTagName,\n  isAuthor,\n} from './annotations/policy.js'\nexport type {\n  ClusterBulkClusterResultDto,\n  ClusterBulkFinalStatus,\n  ClusterBulkGenerationUpdateSettings,\n  ClusterBulkOperationPayloadDto,\n  ClusterBulkOperationRule,\n  ClusterBulkPlanTypeUpdateSettings,\n  ClusterBulkPlanUpdateSettings,\n  ClusterBulkSettingsByType,\n  ClusterBulkSleepWakeupSettings,\n  ClusterBulkStepRequestDto,\n  ClusterBulkStepResultDto,\n  ClusterBulkTargetDto,\n} from './approvals/cluster-bulk-operation.js'\nexport {\n  CLUSTER_BULK_OPERATION_CLUSTER_NAME_MAX_LENGTH,\n  CLUSTER_BULK_OPERATION_MAX_CLUSTERS,\n  CLUSTER_BULK_OPERATION_MIN_ACKS,\n  CLUSTER_BULK_OPERATION_NAME_MAX_LENGTH,\n  CLUSTER_BULK_OPERATION_RULES,\n  CLUSTER_BULK_OPERATION_TEST_STAGE_MIN_ACKS,\n  CLUSTER_BULK_OPERATION_TYPES,\n  CLUSTER_BULK_SLEEPING_CLUSTER_DELAY_MS,\n  clusterBulkOperationTypeOf,\n  clusterBulkParameterOf,\n  clusterBulkRequiredPermissions,\n  clusterBulkResultOf,\n  isClusterBulkYolo,\n} from './approvals/cluster-bulk-operation.js'\nexport {\n  DNS_SUBDOMAIN_MAX_LENGTH,\n  isDnsSubdomain,\n} from './approvals/dns-subdomain.js'\nexport type { ApprovalExpectedChange } from './approvals/expected-value.js'\nexport {\n  isSameApprovalValue,\n  staleApprovalKeys,\n} from './approvals/expected-value.js'\nexport type {\n  ApprovalActorView,\n  ApprovalDecision,\n  ApprovalDenialCode,\n} from './approvals/policy.js'\nexport {\n  approvalPermissionCheck,\n  canAcknowledge,\n  canCreate,\n  canExecute,\n  canReject,\n  canView,\n  canWithdraw,\n  effectiveStatus,\n  hasActorEmail,\n  hasEveryPermission,\n  isExpired,\n  isSameActor,\n  isSameActorEmail,\n  remainingAcks,\n  requiredPermissionsOf,\n  resolveRequiredAcks,\n} from './approvals/policy.js'\nexport type {\n  ReleaseTrainAutoUpgradeCandidates,\n  ReleaseTrainPublishPayload,\n  ReleaseTrainRollbackPayload,\n} from './approvals/release-train.js'\nexport type { ApprovalUseCaseType } from './approvals/use-cases.const.js'\nexport {\n  APPROVAL_EMAIL_MAX_LENGTH,\n  APPROVAL_EMAIL_PATTERN,\n  APPROVAL_USE_CASE_TYPES,\n  ENTERPRISE_ONBOARDING_METRIC_MAX,\n  ENTERPRISE_ONBOARDING_NAME_MAX_LENGTH,\n  ENTERPRISE_ONBOARDING_RESERVATION_MAX,\n  ENTERPRISE_ONBOARDING_SFDC_ID_MAX_LENGTH,\n  ENTERPRISE_ONBOARDING_TERM_MAX_MONTHS,\n  ENTERPRISE_ONBOARDING_TERM_MIN_MONTHS,\n  EXTEND_TRIAL_MAX_DAYS,\n  EXTEND_TRIAL_MIN_DAYS,\n  FEATURE_FLAG_MIN_ACKS_PROD,\n  GENERATION_VERSION_VALUE_MAX_LENGTH,\n  GENERATION_VERSIONS_MAX_GENERATIONS,\n  isCalendarDay,\n  ORG_LIMIT_TEXT_MAX_LENGTH,\n  PERSONAL_ORGANIZATION_MAX_PER_REQUESTER,\n  PERSONAL_ORGANIZATION_NAME_MAX_LENGTH,\n  PERSONAL_ORGANIZATION_NAME_MIN_LENGTH,\n  PLATFORM_ROLE_CHANGE_MAX_ROLES,\n  PURGE_USERS_MAX_USERS,\n  PURGE_USERS_REQUIRED_PERMISSIONS,\n  USER_METADATA_EXPECTED_MAX_LENGTH,\n  USER_METADATA_MAX_LENGTH,\n} from './approvals/use-cases.const.js'\n// The chart query of a dashboard tile (catalogue, language, result).\nexport {\n  CHART_DAY_GRAIN_MAX_DAYS,\n  CHART_FILTER_MAX_LENGTH,\n  CHART_GRAIN_DEFAULT,\n  CHART_GRAINS,\n  CHART_ID_MAX_LENGTH,\n  CHART_METRICS,\n  CHART_OTHER_SERIES_KEY,\n  CHART_QUERY_MAX_LENGTH,\n  CHART_TOP_DEFAULT,\n  CHART_TOP_MAX,\n  CHART_UNKNOWN_SERIES_KEY,\n  CHART_WINDOW_AMOUNT_MAX,\n  CHART_WINDOW_DEFAULT,\n  CHART_WINDOW_UNITS,\n  type ChartDimensionSpec,\n  type ChartGrain,\n  type ChartMetricSpec,\n  type ChartPoint,\n  type ChartQueryCheck,\n  ChartQueryError,\n  type ChartQueryErrorKind,\n  type ChartQueryOptions,\n  type ChartResult,\n  type ChartSeries,\n  type ChartSpec,\n  type ChartUnit,\n  type ChartWindow,\n  type ChartWindowUnit,\n  chartBucketStart,\n  chartToday,\n  chartWindowRange,\n  findChartDimension,\n  findChartMetric,\n  formatChartSpec,\n  isChartQueryError,\n  parseChartQuery,\n  readChartSpec,\n  validateChartSpec,\n} from './charts/index.js'\n// Dashboards - the tiles of a dashboard hold filters and never data. The\n// wire types and the placement rules are pure, so control-backend and\n// control-frontend run the same code.\nexport {\n  DASHBOARD_TILE_DEFAULT_SIZE,\n  dashboardDefinitionBytes,\n  dashboardDefinitionFits,\n  dashboardTileDefaultSize,\n  emptyDashboardDefinition,\n  isSafeDashboardLink,\n  placeNewTile,\n  placeNewTiles,\n  tilesOverlap,\n  toStoredDashboardDefinition,\n  upgradeDashboardDefinition,\n} from './dashboards/definition.js'\nexport type {\n  ALERT_SUBSCRIPTION_REPORT_TYPES,\n  ALERT_SUBSCRIPTION_TYPES,\n  AlertSubscriptionDto,\n  AlertSubscriptionEntryDto,\n  AlertSubscriptionWebhookAuth,\n  CheckFailedReason,\n} from './dtos/AlertSubscription.dto.js'\n// DTOs - Values (constants)\nexport {\n  FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,\n  HMAC_HEADER_POSITION,\n  HMAC_SUPPORTED_ALGORITHM,\n} from './dtos/AlertSubscription.dto.js'\nexport type {\n  AnnotationActor,\n  AnnotationDto,\n  AnnotationEntityKind,\n  AnnotationKind,\n  AnnotationLookupDto,\n  AnnotationLookupEntryDto,\n  AnnotationTagDto,\n  EntityAnnotationsDto,\n} from './dtos/Annotation.dto.js'\nexport {\n  ANNOTATION_BODY_MAX,\n  ANNOTATION_ENTITY_KIND_LABELS,\n  ANNOTATION_ENTITY_KINDS,\n  ANNOTATION_ENTITY_MAX,\n  ANNOTATION_KINDS,\n  ANNOTATION_LOOKUP_MAX_ENTITIES,\n  ANNOTATION_LOOKUP_TAGS_MAX,\n  ANNOTATION_PAGE_SIZE_DEFAULT,\n  ANNOTATION_PAGE_SIZE_MAX,\n  ANNOTATION_SEARCH_MAX_LENGTH,\n  ANNOTATION_TAG_NAME_MAX,\n  normalizeTagName,\n} from './dtos/Annotation.dto.js'\n// Approvals - the wire types, and the rules that read them. Both are pure and\n// browser-safe, so control-backend, control-frontend and cloudbot run the same\n// code and cannot disagree.\nexport type {\n  ApprovalAck,\n  ApprovalActionMode,\n  ApprovalActor,\n  ApprovalEntityRef,\n  ApprovalEntityType,\n  ApprovalExecutionMode,\n  ApprovalJobDto,\n  ApprovalJobStatus,\n  ApprovalM2mActor,\n  ApprovalProgress,\n  ApprovalSortField,\n  ApprovalSortOrder,\n  ApprovalStatusCountsDto,\n  ApprovalSummaryField,\n  ApprovalSummaryFieldKind,\n  ApprovalSummaryValue,\n  ApprovalUseCaseDto,\n} from './dtos/ApprovalJob.dto.js'\nexport {\n  APPROVAL_ACKS_MAX,\n  APPROVAL_ENTITY_TYPES,\n  APPROVAL_JOB_STATUSES,\n  APPROVAL_LIST_SUMMARY_VALUES_MAX,\n  APPROVAL_LIVE_STATUSES,\n  APPROVAL_PAGE_SIZE_DEFAULT,\n  APPROVAL_PAGE_SIZE_MAX,\n  APPROVAL_PAYLOAD_ORG_FIELD,\n  APPROVAL_REASON_MAX_LENGTH,\n  APPROVAL_RUN_STALE_MS,\n  APPROVAL_SEARCH_MAX_LENGTH,\n  APPROVAL_SORT_DEFAULT,\n  APPROVAL_SORT_FIELDS,\n  APPROVAL_SUMMARY_FIELD_KINDS,\n  isRunStalled,\n  progressFraction,\n} from './dtos/ApprovalJob.dto.js'\nexport type { AuditDto } from './dtos/Audit.dto.js'\nexport type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js'\nexport type { BackupDto } from './dtos/Backup.dto.js'\nexport type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js'\nexport type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js'\nexport type {\n  ClusterCreationDefaultField,\n  ClusterCreationDefaultKey,\n  ClusterCreationDefaults,\n} from './dtos/ClusterCreationDefaults.dto.js'\nexport { CLUSTER_CREATION_DEFAULT_FIELDS } from './dtos/ClusterCreationDefaults.dto.js'\nexport type {\n  ClusterDeferredSpecChange,\n  DeferredSpecChangeType,\n} from './dtos/ClusterDeferredSpecChange.dto.js'\nexport type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js'\nexport type {\n  MoveClusterOwnerResult,\n  MoveClusterWarnings,\n} from './dtos/ClusterOwnerMove.dto.js'\nexport type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js'\nexport type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js'\nexport type {\n  ChangeClusterPlanTypeResult,\n  ClusterModificationConfigRef,\n  ClusterPlanTypeChangeRefusal,\n  ClusterPlanTypeStateDto,\n} from './dtos/ClusterPlanTypeChange.dto.js'\nexport {\n  CLUSTER_PLAN_TYPE_CHANGE_REFUSALS,\n  clusterPlanTypeChangeRefusalOf,\n} from './dtos/ClusterPlanTypeChange.dto.js'\nexport type {\n  ClusterSpecChange,\n  ClusterSpecChangeActor,\n  ClusterSpecHistory,\n} from './dtos/ClusterSpecHistory.dto.js'\nexport type {\n  CommonClusterDto,\n  ExternalIdpConfig,\n  OptimizeFilteringConfig,\n  OptimizeFilteringIncludeExclude,\n  OptimizeFilteringPatch,\n  SecretsFilterMode,\n} from './dtos/CommonCluster.dto.js'\nexport type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js'\nexport type {\n  ClusterActivityBucket,\n  ClusterActivityTile,\n  ClusterActivityV2Dto,\n  ClusterActivityV2Response,\n  ClusterByClientV2Dto,\n  ClusterDatacenterOptionV2Dto,\n  ClusterDetailV2Dto,\n  ClusterFacetsV2Dto,\n  ClusterListItemV2Dto,\n  ClusterLiveStateV2Dto,\n  ClusterLiveStateV2Entry,\n  ClusterModificationState,\n  ClusterParameterOptionV2Dto,\n  ClusterParametersV2Dto,\n  ClusterTtlFilter,\n  ControlResolvedPermissions,\n  ControlSessionDto,\n  ControlSessionUser,\n  CursorPage,\n  CursorParams,\n  ListClustersV2Params,\n  ListOrganizationsV2Params,\n  ListOrgMembersV2Params,\n  OrgDetailV2Dto,\n  OrgListItemV2Dto,\n  OrgMemberV2Dto,\n  OrgSummaryV2Dto,\n} from './dtos/ControlV2.dto.js'\nexport { CLUSTER_MODIFICATION_STATES } from './dtos/ControlV2.dto.js'\nexport type {\n  DashboardActor,\n  DashboardAnnotationsQuery,\n  DashboardAnnotationsTile,\n  DashboardAnnotationsTileV1,\n  DashboardCatalogue,\n  DashboardCatalogueChartMetric,\n  DashboardCatalogueSearchField,\n  DashboardChartQuery,\n  DashboardChartRender,\n  DashboardChartTile,\n  DashboardChartTileV3,\n  DashboardClusterCard,\n  DashboardClusterDetailQuery,\n  DashboardClusterDetailTile,\n  DashboardClusterDetailTileV2,\n  DashboardDefinition,\n  DashboardDefinitionV1,\n  DashboardDefinitionV2,\n  DashboardDefinitionV3,\n  DashboardDto,\n  DashboardFleetQuery,\n  DashboardFleetQueryTile,\n  DashboardFleetQueryTileV1,\n  DashboardHeadingTile,\n  DashboardHeadingTileV2,\n  DashboardLinkTile,\n  DashboardLinkTileV2,\n  DashboardListDto,\n  DashboardNewTile,\n  DashboardNoteTile,\n  DashboardNoteTileV2,\n  DashboardOrgCard,\n  DashboardOrgDetailQuery,\n  DashboardOrgDetailTile,\n  DashboardOrgDetailTileV2,\n  DashboardSummaryDto,\n  DashboardTile,\n  DashboardTileKind,\n  DashboardTileLayout,\n  DashboardTileV1,\n  DashboardTileV2,\n  DashboardTileV3,\n  StoredDashboardDefinition,\n} from './dtos/Dashboard.dto.js'\nexport {\n  DASHBOARD_CHART_RENDERS,\n  DASHBOARD_CLUSTER_CARDS,\n  DASHBOARD_DEFINITION_BYTES_MAX,\n  DASHBOARD_DEFINITION_VERSION,\n  DASHBOARD_ENTITY_ID_MAX,\n  DASHBOARD_GRID_COLUMNS,\n  DASHBOARD_GRID_ROWS_MAX,\n  DASHBOARD_LINK_URL_MAX,\n  DASHBOARD_NOTE_MAX,\n  DASHBOARD_ORG_CARDS,\n  DASHBOARD_PAGE_SIZE_DEFAULT,\n  DASHBOARD_PAGE_SIZE_MAX,\n  DASHBOARD_TILE_KINDS,\n  DASHBOARD_TILE_ROWS_MAX,\n  DASHBOARD_TILES_MAX,\n  DASHBOARD_TITLE_MAX,\n} from './dtos/Dashboard.dto.js'\nexport type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js'\nexport type {\n  CamundaWebApp,\n  CamundaWebAppWithZeebe,\n  ExternalClickwrapConfigDto,\n  ExternalClusterDto,\n  ExternalOrganizationDto,\n} from './dtos/ExternalWebapp.dto.js'\nexport type {\n  CreateFeatureFlagDto,\n  FeatureFlagAnswer,\n  FeatureFlagDto,\n  FeatureFlagListDto,\n  UpdateFeatureFlagDto,\n} from './dtos/FeatureFlags.dto.js'\n// Functions\nexport {\n  activeGenerations,\n  compareGenerationNamesNewestFirst,\n  type GenerationDto,\n  type GenerationWithClusterCountDto,\n  sortGenerationBySemverOfZeebe,\n  type UpgradableGenerationsDto,\n} from './dtos/Generations.dto.js'\nexport type { ChangeGenerationVersionsResult } from './dtos/GenerationVersionsChange.dto.js'\n// Namespace (type-only - contains only interfaces)\nexport type { Hdp } from './dtos/Hdp.dto.js'\nexport type {\n  K8sBackupConfig,\n  K8sConfig,\n  K8sConfigLegacyFormat,\n  K8sContext,\n  K8sContextDto,\n} from './dtos/K8sContext.dto.js'\nexport type {\n  M2mTokenCountDto,\n  M2mTokenCountsDto,\n} from './dtos/M2mTokenCount.dto.js'\nexport type { MetaDto } from './dtos/Meta.dto.js'\nexport type {\n  AutoJoinAssignment,\n  LicensingModelType,\n  LlmProviderName,\n  OrganizationDto,\n  OrganizationMetadata,\n  OrgOwner,\n  OrgWithNameAndSalesPlan,\n} from './dtos/Organization.dto.js'\nexport {\n  LICENSING_MODEL_DISPLAY_NAMES,\n  VALID_LICENSING_MODELS,\n} from './dtos/Organization.dto.js'\nexport type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js'\nexport type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js'\nexport type {\n  DryRunSanityDiff,\n  ReleaseTrainPreview,\n  ReleaseTrainSanityReport,\n  SanityFix,\n  SanityRuleInfo,\n  SanitySeverity,\n  SanityViolation,\n} from './dtos/ReleaseTrainSanity.dto.js'\nexport type { RestoreDto, RestoreState } from './dtos/Restore.dto.js'\n// SalesPlan.dto - Types\nexport type {\n  ClusterLimits,\n  ConsumptionDataItem,\n  Limits,\n  SalesPlanDto,\n  SalesPlanMetadata,\n} from './dtos/SalesPlan.dto.js'\n// SalesPlan.dto - Values (constants and functions)\nexport {\n  allClusterBasedLimits,\n  allSalesPlanLimits,\n  clusterPlanWhiteListIds,\n  deprecatedLimit,\n  generationWhiteListIds,\n  isLimitKeyEnabled,\n  isLimitOfferedOnStage,\n  isUnlockedClusterPlansStage,\n  MAX_CLUSTER_CLIENTS_DEFAULT,\n  MAX_CLUSTER_CLIENTS_DEV,\n  RETENTION_LIMIT_DEFAULT,\n  RETENTION_LIMIT_MAXIMUM,\n  RETENTION_LIMIT_MINIMUM,\n  unusedClusterBasedLimits,\n  unusedSalesPlanLimits,\n} from './dtos/SalesPlan.dto.js'\nexport type { SecureConnectivityDto } from './dtos/SecureConnectivity.dto.js'\nexport type { SignupDto } from './dtos/Signup.dto.js'\nexport type {\n  StorybookConfig,\n  StorybookConfigBackup,\n  StorybookConfigChannel,\n  StorybookConfigDatacenter,\n  StorybookConfigGeneration,\n} from './dtos/StorybookConfig.dto.js'\nexport type { SystemAuditDto } from './dtos/SystemAudit.dto.js'\nexport type {\n  UpgradeReadinessDto,\n  UpgradeReadinessSource,\n  UpgradeReadinessState,\n} from './dtos/UpgradeReadiness.dto.js'\n// UsageAlert.dto - Types\nexport type { UsageAlertDto } from './dtos/UsageAlert.dto.js'\n// UsageAlert.dto - Values (enum and constants)\nexport {\n  UsageAlertInitValues,\n  UsageAlertMetric,\n  UsageAlertThresholdLimits,\n} from './dtos/UsageAlert.dto.js'\nexport type { UserMetaDataDto } from './dtos/UserMetaData.dto.js'\n// Lucene-style table search (parser + AST \u2192 SQL compiler + field registries).\nexport {\n  type AndNode,\n  CLUSTER_DEFAULT_SEARCH_FIELDS,\n  CLUSTER_SEARCH_FIELDS,\n  CLUSTER_TTL_SEARCH_FIELDS,\n  type CompileContext,\n  type CompiledQuery,\n  clusterSearchFieldsForStage,\n  compileQuery,\n  type FieldBinding,\n  findSearchField,\n  idSetPredicate,\n  isLuceneQueryError,\n  joinIdSet,\n  LuceneQueryError,\n  likeArgument,\n  type NotNode,\n  ORG_DEFAULT_SEARCH_FIELDS,\n  ORGANIZATION_SEARCH_FIELDS,\n  type OrNode,\n  parseLuceneQuery,\n  type QueryNode,\n  type RangeNode,\n  type SearchFieldCapability,\n  type SearchFieldSpec,\n  type SearchFieldType,\n  type SearchTermOperator,\n  type SqlDialect,\n  type TermNode,\n} from './search/index.js'\nexport { upgradeGateReason } from './utils/upgradeGateReason.utils.js'\n\n// ============================================================================\n// Enums (runtime values)\n// ============================================================================\n\nexport {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from './enums/AlertSubscription.enum.js'\nexport { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js'\nexport { AuditService } from './enums/AuditService.enum.js'\nexport { BackupStatus } from './enums/BackupStatus.enum.js'\nexport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from './enums/ClusterBulkOperation.enum.js'\nexport { ClusterClientPermission } from './enums/ClusterClientPermissions.enum.js'\nexport { ClusterEncryptionKey } from './enums/ClusterEncryptionKey.enum.js'\nexport { ClusterStatus } from './enums/ClusterStatus.enum.js'\nexport { ConsoleAPIClientPermission } from './enums/ConsoleApiClientPermission.enum.js'\nexport { ErrorType } from './enums/ErrorType.enum.js'\nexport type {\n  AssignableOrganizationRoleType,\n  OrganizationRoleType,\n  UnassignableOrganizationRoleType,\n} from './enums/OrganizationRole.enum.js'\nexport {\n  AssignableOrganizationRole,\n  LegacyHeldOrganizationRole,\n  OrganizationRole,\n  UnassignableOrganizationRole,\n} from './enums/OrganizationRole.enum.js'\nexport { SseEntity, SseType } from './enums/Sse.enum.js'\nexport {\n  SystemAuditEntity,\n  SystemAuditEntityAttribute,\n} from './enums/SystemAuditEntity.enum.js'\n\n// ============================================================================\n// Permissions - Namespaces (runtime values)\n// ============================================================================\n\nexport { AccountsPermissions } from './permissions/accounts.permissions.js'\nexport { AlertDistributorPermissions } from './permissions/alert-distributor.permissions.js'\nexport { AuditLoggerPermissions } from './permissions/auditlogger.permissions.js'\nexport {\n  accountsUserFeaturesFromPermissions,\n  consoleUserFeaturesFromPermissions,\n  sessionHasPermission,\n  sessionPermissionKeysFor,\n} from './permissions/combo.js'\nexport { ConsolePermissions } from './permissions/console.permissions.js'\nexport { NotificationPermissions } from './permissions/notification.permissions.js'\n// profile.permissions - Types\nexport type { OnboardConfig } from './permissions/profile.permissions.js'\n// profile.permissions - Values (constants)\n// NOTE: the `allowed` email lists (CLOUD_TEAM_EMAILS, SRE_TEAM_EMAILS, etc.)\n// intentionally live in the private `@camunda-cloud/shared-backend` package\n// instead of here, since this package is published publicly to npm.\nexport { PROFILES } from './permissions/profile.permissions.js'\nexport { expandRolesToPermissions } from './permissions/roleExpansion.utils.js'\n\n// ============================================================================\n// Types - Type-only exports (interfaces and type aliases)\n// ============================================================================\n\nexport type { AuditData } from './types/AuditData.type.js'\n// AutoSleep.type - Types\nexport type {\n  ActivitySleepEligibilityOptions,\n  SleepCronEligibilityOptions,\n} from './types/AutoSleep.type.js'\n// AutoSleep.type - Values (constants and functions)\nexport {\n  INTERNAL_LOW_HARDWARE_PLAN_NAME,\n  isActivitySleepEligible,\n  isClusterTagEligibleForSleepCron,\n  isSalesPlanEligibleForSleepCron,\n  isSleepCronEligible,\n  SLEEP_CRON_ELIGIBLE_TAGS,\n} from './types/AutoSleep.type.js'\nexport type {\n  BotContext,\n  BotOptions,\n  BotRequest,\n  GetUserDetailsResponse,\n  ListRolesForUserResponse,\n  UpdateUserRolesRequest,\n  UpdateUserRolesResponse,\n  UserContext,\n  UserDetails,\n} from './types/Bot.types.js'\n// BulkOperation.type - Types\nexport type {\n  BulkClusterDeletionContent,\n  BulkClusterDeletionItem,\n  BulkClusterGenerationUpdateItem,\n  BulkClusterPlanTypeUpdateContent,\n  BulkClusterPlanTypeUpdateItem,\n  BulkClusterPlanUpdateContent,\n  BulkClusterPlanUpdateItem,\n  BulkGenerationUpdateContent,\n  GenericBulkClusterOperationContent,\n  GenericBulkOperationContent,\n  GenericClusterBulkOperationItem,\n} from './types/BulkOperation.type.js'\n// BulkOperation.type - Functions (type guards)\nexport {\n  isBulkClusterDeletionItem,\n  isBulkClusterPlanTypeUpdateItem,\n  isBulkClusterPlanUpdateItem,\n  isIsBulkClusterGenerationUpdateIten,\n} from './types/BulkOperation.type.js'\n// C8ClusterComponentVersions.type - Types\nexport type {\n  GenerationImageVersionsDto,\n  ImmutableZeebeClusterVersionsDto,\n  MutableZeebeClusterVersionsDto,\n  ZeebeClusterVersionsDto,\n} from './types/C8ClusterComponentVersions.type.js'\n// C8ClusterComponentVersions.type - Values (constants)\nexport {\n  AllThings,\n  GENERATION_IMAGE_VERSION_KEYS,\n  ImmutableThings,\n  MutableThings,\n} from './types/C8ClusterComponentVersions.type.js'\n// CamundaClusterLabels.type - Types\nexport type {\n  CamundaClusterStage,\n  CamundaClusterStageLabel,\n  ClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// CamundaClusterLabels.type - Values (constants)\nexport {\n  ALLOWED_CAMUNDA_LABELS,\n  StageClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// Chargebee.type - Types\nexport type { SubscriptionItem } from './types/Chargebee.type.js'\n// Chargebee.type - Values (enums)\nexport { ConsumptionData, ConsumptionDataType } from './types/Chargebee.type.js'\n// ClusterBulkOperation.type - Types\nexport type {\n  ClusterBulkOperationAck,\n  ClusterBulkOperationClusterDto,\n  ClusterBulkOperationContent,\n  ClusterBulkOperationDto,\n  ClusterBulkOperationGenerationUpdateParameter,\n  ClusterBulkOperationParameter,\n  ClusterBulkOperationPlanTypeUpdateParameter,\n  ClusterBulkOperationPlanUpdateParameter,\n  ClusterBulkOperationPostContent,\n  ClusterSleepWakeupParameter,\n} from './types/ClusterBulkOperation.type.js'\nexport type {\n  ClusterModificationConfigDto,\n  ClusterModificationDto,\n} from './types/ClusterModification.type.js'\n// ClusterPlanFields.type - Values (field spec and type guard)\nexport {\n  CLUSTER_PLAN_FIELDS,\n  type ClusterPlanFieldSpec,\n  type ClusterPlanFieldTree,\n  isClusterPlanFieldSpec,\n} from './types/ClusterPlanFields.type.js'\nexport type {\n  ClusterPlanModificationAck,\n  ClusterPlanModificationConfig,\n  ClusterPlanModificationDto,\n} from './types/ClusterPlanModification.type.js'\n// ClusterPlanTypeAvailabilityClass.type - Values (enum and function)\nexport {\n  ClusterPlanTypeAvailabilityClass,\n  hasNoAvailabilityClass,\n  sortByAvailabilityClasses,\n} from './types/ClusterPlanTypeAvailabilityClass.type.js'\n// ClusterPlanTypeCategory.type - Values (enum and functions)\nexport {\n  ClusterPlanTypeCategory,\n  hasAvailabilityClass,\n  sortByClusterPlanTypeCategory,\n} from './types/ClusterPlanTypeCategory.type.js'\nexport type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js'\nexport type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js'\nexport type {\n  ClusterTtlDeletionPayload,\n  ClusterTtlDeletionResult,\n  ClusterTtlDto,\n  ClusterTtlDuration,\n  ClusterTtlOption,\n  ClusterTtlUnlimited,\n  UpdateClusterTtlBody,\n} from './types/ClusterTtl.type.js'\nexport {\n  CLUSTER_TTL_BACKFILL_REASON,\n  CLUSTER_TTL_DURATION_MS,\n  CLUSTER_TTL_DURATIONS,\n  CLUSTER_TTL_FEATURE_FLAG,\n  CLUSTER_TTL_OPTIONS,\n  CLUSTER_TTL_UNLIMITED_LINK_MAX_LENGTH,\n  CLUSTER_TTL_UNLIMITED_REASON_MAX_LENGTH,\n  clusterTtlExpiresAt,\n  DEFAULT_CLUSTER_TTL_OPTION,\n  extendClusterTtl,\n  isClusterTtlDuration,\n  isClusterTtlOption,\n  isClusterTtlStage,\n  isHttpUrl,\n  isPastClusterTtl,\n  validateClusterTtlUnlimited,\n} from './types/ClusterTtl.type.js'\nexport type {\n  ClusterUsageDataRequest,\n  ClusterUsageMetadataDto,\n  ClusterUsageMetricsAddRequestByMetricHeap,\n  ClusterUsageMetricsData,\n  ClusterUsageMetricsFilter,\n  ClusterUsageOrgStartDate,\n} from './types/ClusterUsageMetrics.type.js'\n// Dashboard.types - Types\nexport type {\n  DashboardConfig,\n  DashboardMappingItem,\n  DashboardMappingTarget,\n  DashboardResultPrimitive,\n  DashboardResultRow,\n  EngineeringOperationsDashboardResponse,\n} from './types/Dashboard.types.js'\nexport type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js'\nexport type {\n  HdpTenantUsageBreakdown,\n  HdpTenantUsagePerClusterPoint,\n  HdpTenantUsagePoint,\n} from './types/HdpTenantUsage.type.js'\n// hdp.types - Types (interfaces)\nexport type {\n  AlertSubscription as HdpAlertSubscription,\n  Audit as HdpAudit,\n  ByomClient as HdpByomClient,\n  Channel as HdpChannel,\n  Cluster as HdpCluster,\n  ClusterBackup as HdpClusterBackup,\n  ClusterBackupSchedule as HdpClusterBackupSchedule,\n  ClusterBulkOperation as HdpClusterBulkOperation,\n  ClusterClient as HdpClusterClient,\n  ClusterModification as HdpClusterModification,\n  ClusterPlan as HdpClusterPlan,\n  ClusterPlanType as HdpClusterPlanType,\n  ConnectorSecret as HdpConnectorSecret,\n  ConsoleApiClient as HdpConsoleApiClient,\n  Datacenter as HdpDatacenter,\n  Generation as HdpGeneration,\n  HdpBackendChangeEvent,\n  HdpClusterModificationConfig,\n  HdpDisk,\n  HdpEntity,\n  HdpPrometheusDataCapacityDataPoint,\n  Invite as HdpInvite,\n  LlmSpend as HdpLlmSpend,\n  Organization as HdpOrganization,\n  SecureConnectivity as HdpSecureConnectivity,\n  SystemAudit as HdpSystemAudit,\n  TelemetryData as HdpTelemetryData,\n  UsageAlert as HdpUsageAlert,\n  User as HdpUser,\n  UserLogin as HdpUserLogin,\n} from './types/hdp.types.js'\n// hdp.types - Values (enums)\nexport {\n  AlertSubscriptionReportType as HdpAlertSubscriptionReportType,\n  AlertSubscriptionType as HdpAlertSubscriptionType,\n  HDP_DISKS,\n} from './types/hdp.types.js'\n// notification.type - Types\nexport type {\n  GlobalNotification,\n  NotificationDto,\n  NotificationMeta,\n  NotificationOptions,\n  NotificationPermission,\n  NotificationSource,\n  NotificationState,\n  NotificationType,\n  OrgNotification,\n  UserNotification,\n  UserOrgNotification,\n} from './types/notification.type.js'\n// notification.type - Values (enums and constants)\nexport {\n  NotificationPermissionValues,\n  NotificationSourceEnum,\n  NotificationStateEnum,\n  NotificationTypeEnum,\n} from './types/notification.type.js'\n// OrganizationPermission.type - Types\nexport type {\n  CreateReadUpdateDelete,\n  OrganizationPermissions,\n} from './types/OrganizationPermission.type.js'\n// OrganizationPermission.type - Values (constants)\nexport {\n  OrganizationPermissionsDescriptions,\n  PermissionsForOrganizationRole,\n} from './types/OrganizationPermission.type.js'\nexport {\n  getPreprodClusterTtlHours,\n  isPastPreprodClusterTtl,\n  isPreprodClusterTtlStage,\n  parseNumericLimit,\n} from './types/PreprodClusterTtl.type.js'\n// Roles.js - Types\nexport type {\n  AccountRoles,\n  ConsoleRoles,\n  ModelerRoles,\n  Roles,\n} from './types/Roles.js'\n// Roles.js - Values (constants)\nexport { SAFE_ROLES } from './types/Roles.js'\n// SalesPlanType.type - Types\nexport type {\n  DisplayedSalesPlan,\n  RevisitedSalesPlanName,\n} from './types/SalesPlanType.type.js'\n// SalesPlanType.type - Values (enums and functions)\nexport {\n  AnalyticsSalesPlanType,\n  getAnalyticsSalesPlanFromOrgSalesPlan,\n  getDisplayedSalesPlan,\n  getRevisitedSalesPlanName,\n  OPTIMIZE_DISABLED_PLAN_TYPES,\n  SalesPlanType,\n} from './types/SalesPlanType.type.js'\n// SpamDetection.type - Types\nexport type { SpamDetectionPatterns } from './types/SpamDetection.type.js'\n// SpamDetection.type - Values (constants)\nexport { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js'\nexport type {\n  AlertSubscriptionSseEvent,\n  BackupSseEvent,\n  ClusterClientSseEvent,\n  ClusterSseEvent,\n  ConnectorSecretsSseEvent,\n  ConsoleApiClientSseEvent,\n  ConsoleSseEvent,\n  MonitoringSseEvent,\n  SecureConnectivitySseEvent,\n  SseClusterPayload,\n  SseMonitoringPayload,\n  SseSecureConnectivityPayload,\n} from './types/SseEvent.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { AccountsStats } from './types/Stats.types.js'\n// Survey.type - Types\nexport type { Persona, SurveyDto } from './types/Survey.type.js'\n// Survey.type - Values (enum)\nexport { FeedbackType } from './types/Survey.type.js'\n// SuspendStrategy.type - Types\nexport type {\n  GetSuspendStrategyOptions,\n  SuspendStrategy,\n} from './types/SuspendStrategy.type.js'\n// SuspendStrategy.type - Values (function)\nexport { getSuspendStrategy } from './types/SuspendStrategy.type.js'\nexport type { SystemAuditData } from './types/SystemAuditData.type.js'\n\n// Namespace (runtime value)\nexport { Telemetry } from './types/Telemetry.type.js'\n\n// TrialManagement.types - Types\nexport type {\n  ExtensionListItem,\n  ExtensionListResponse,\n  OrgTrialDetail,\n  TrialExtensionSource,\n  TrialManagementStats,\n} from './types/TrialManagement.types.js'\n\n// User.type - Types\nexport type {\n  AccountsData,\n  AppMetadata,\n  BasicUser,\n  BlockedFor,\n  Identity,\n  OrgMembership,\n  User,\n  UserMetadata,\n  UserRequest,\n} from './types/User.type.js'\n\n// User.type - Values (enum)\nexport { UserMetadataEvent } from './types/User.type.js'\n\nexport type {\n  UniqueTaskUser,\n  ValueMetrics,\n  ValueMetricsPerYearMonth,\n} from './types/ValueMetrics.type.js'\n\n// ============================================================================\n// Utils - Classes (runtime values)\n// ============================================================================\n\nexport {\n  CLOUD_PROVIDER_ORDER,\n  getCloudProviderLabel,\n  getCloudProviderRank,\n} from './utils/cloudProvider.utils.js'\nexport {\n  type ConnectivityStatus,\n  deriveConnectivityMessage,\n  deriveConnectivityStatus,\n} from './utils/connectivityStatus.utils.js'\nexport type {\n  CronScheduleValidationFailure,\n  CronScheduleValidationResult,\n  CronScheduleValidationSuccess,\n} from './utils/cronSchedule.utils.js'\nexport {\n  BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,\n  validateCronSchedule,\n} from './utils/cronSchedule.utils.js'\nexport {\n  canonicalPlan,\n  canonicalPlanKey,\n} from './utils/elasticsearchPlanPath.utils.js'\nexport {\n  deriveEncryptionStatus,\n  type EncryptionStatus,\n  isEncryptionStatus,\n} from './utils/encryptionStatus.utils.js'\n// enterprise-connection.utils - Types\nexport type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js'\n// enterprise-connection.utils - Values (functions)\nexport {\n  enterpriseConnectionMetadataToOrganizationAssignments,\n  organizationAssignmentsToEnterpriseConnectionMetadata,\n} from './utils/enterprise-connection.utils.js'\nexport {\n  addMonthsClamped,\n  DEFAULT_ENTERPRISE_DURATION_IN_MONTHS,\n  diffInWholeMonths,\n  type EnterpriseTermWindow,\n  getCurrentEnterpriseTerm,\n  peakWithinTerm,\n  toUtcDayStartMs,\n} from './utils/enterpriseTerm.utils.js'\nexport type { EnvVarEntry } from './utils/envVars.js'\nexport { parseEnvVars, serializeEnvVars } from './utils/envVars.js'\nexport {\n  deriveFailoverKeyPolicyPrincipals,\n  type FailoverKeyPolicyPrincipals,\n} from './utils/failoverKeyPolicy.utils.js'\nexport type {\n  JvmOptionsModificationKey,\n  ParsedJvmOption,\n} from './utils/jvmOptions.js'\nexport {\n  addsEnvVarsOverrideValue,\n  isJvmOptionsModificationKey,\n  isUnderJvmSpec,\n  JVM_OPTION_MAX_LENGTH,\n  JVM_OPTION_PATTERN,\n  JVM_OPTIONS_MAX_ITEMS,\n  JVM_OPTIONS_MODIFICATION_KEYS,\n  JVM_OPTIONS_TARGETS,\n  joinJvmOptions,\n  parseJvmOption,\n  requiresEnvVarsOverride,\n  splitJvmOptions,\n  validateJvmOptions,\n  validateJvmOptionsValue,\n} from './utils/jvmOptions.js'\nexport {\n  KMS_ARN,\n  KMS_MRK_ARN,\n  type KmsArnValidationError,\n  type ParsedKmsArn,\n  parseKmsArn,\n  validateKmsArnForRegion,\n} from './utils/kmsArn.utils.js'\nexport { validateLabels } from './utils/labelValidator.utils.js'\nexport { ObjectMergeUtils } from './utils/objectMerge.utils.js'\nexport {\n  computeOrgStartDate,\n  type OrgStartDateInput,\n} from './utils/orgStartDate.utils.js'\nexport {\n  getPermissionsByRoles,\n  getUserPermissionsForOrg,\n} from './utils/orgs/OrgHelper.js'\n\n// PasswordPolicy - Types\nexport type {\n  PasswordPolicyRequest,\n  PasswordPolicyResult,\n} from './utils/PasswordPolicy.js'\n\n// PasswordPolicy - Values (constants and function)\nexport {\n  MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,\n  MINLENGTH as PASSWORD_POLICY_MINLENGTH,\n  passwordPolicyCheck,\n} from './utils/PasswordPolicy.js'\nexport { isQaUserEmail, qaUserEmail } from './utils/qa-user.utils.js'\nexport {\n  deriveSecondaryStorageStatus,\n  type SecondaryStorageStatus,\n} from './utils/secondaryStorageStatus.utils.js'\nexport {\n  allSettledResultsCounts,\n  getFulfilledPromises,\n  getRejectedPromises,\n  getSettledSummary,\n} from './utils/settledPromises.util.js'\nexport {\n  isValidAwsArn,\n  isValidCIDR,\n  isValidCIDRList,\n  isValidClientName,\n  isValidHostname,\n  isValidPrivateLinkRegion,\n  normalizeCIDRList,\n} from './utils/string-validation.utils.js'\nexport {\n  extractCamundaUserEmail,\n  guessName,\n  isCamundaUserId,\n} from './utils/user.utils.js'\n\n// versionCheck.utils - Values (enum and function)\nexport {\n  checkVersion,\n  generationImageErrorMessage,\n  isAppIntegrationsVersionSupported,\n  isGenerationResumable,\n  isSecretsFilterModeConfigurable,\n  isValidGenerationImage,\n  normalizeGenerationVersion,\n  stripSecfixPostfix,\n  VersionCheckOperator,\n} from './utils/versionCheck.utils.js'\n\n// ============================================================================\n// Config - Configuration files and types\n// ============================================================================\n\nexport { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js'\nexport type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js'\n\nexport {\n  augmentCamundiPermissions,\n  getApplicableRolesForEmployee,\n  HIBOB_CACHE_KEY,\n  HIBOB_CACHE_NAMESPACE,\n  isManager,\n} from './utils/camundiPermissionAugmenter.utils.js'\n"],
-  "mappings": "AAUA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,KAAK,MAAM,QAAQ,QAAQ,YAAY;AAEhD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,iDAAiD;AAC1D,SAAS,6CAA6C;AAKtD,SAAS,wCAAwC;AACjD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAe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uBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,SAAS,uCAAuC;AAkBhD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AA4CP,SAAS,mCAAmC;AA8C5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAiBP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,OAEK;AAyBP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAsBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAmBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,OASK;AACP,SAAS,yBAAyB;AAMlC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,4BAA4B;AAClD,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC;AAC3C,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,eAAe;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AAC5C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAOxC,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AAazC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,SAAS,iBAAiB,2BAA2B;AAmBrD;AAAA,EACE;AAAA,EAGA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAYP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA0DP;AAAA,EACiC,+BAA/BA;AAAA,EACyB,yBAAzBC;AAAA,EACA;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB;AAO3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,0BAA0B;AAoBnC,SAAS,oBAAoB;AAO7B,SAAS,0BAA0B;AAInC,SAAS,iBAAiB;AAyB1B,SAAS,yBAAyB;AAYlC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,OACK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,cAAc,wBAAwB;AAC/C;AAAA,EACE;AAAA,OAEK;AAKP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACe;AAAA,EACA;AAAA,EACb;AAAA,OACK;AACP,SAAS,eAAe,mBAAmB;AAC3C;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,SAAoB,WAAXC,gBAA2C;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\n// ============================================================================\n// Constants (runtime values)\n// ============================================================================\n\nexport {\n  CUSTOM_GENERATION_MAX_PER_REQUESTER,\n  CUSTOM_GENERATION_MAX_UPGRADEABLE_FROM,\n  CUSTOM_GENERATION_NAME_MAX_LENGTH,\n  CUSTOM_GENERATION_NAME_MIN_LENGTH,\n  checkNewGenerationVersions,\n  isCustomGenerationStage,\n} from './constants/custom-generation.const.js'\nexport {\n  CUSTOM_HARDWARE_SIZING_BROKER_TOTAL_CAPS,\n  CUSTOM_HARDWARE_SIZING_COUNT_CAPS,\n  CUSTOM_HARDWARE_SIZING_ELASTICSEARCH_TOTAL_CAPS,\n  CUSTOM_HARDWARE_SIZING_MAX_AUTO_RESIZE_INCREASE_GI,\n  CUSTOM_HARDWARE_SIZING_MAX_PLAN_JSON_LENGTH,\n  CUSTOM_HARDWARE_SIZING_MAX_PLANS_PER_REQUESTER,\n  CUSTOM_HARDWARE_SIZING_NAME_MAX_LENGTH,\n  CUSTOM_HARDWARE_SIZING_NAME_MIN_LENGTH,\n  CUSTOM_HARDWARE_SIZING_REPLICA_SET_TOTAL_CAPS,\n  CUSTOM_HARDWARE_SIZING_RESOURCE_CAPS,\n  checkCustomHardwareSizing,\n  isCustomHardwareSizingStage,\n  parseKubernetesQuantity,\n} from './constants/custom-hardware-sizing.const.js'\nexport { DAY, HOUR, MINUTE, SECOND, WEEK } from './constants/duration.const.js'\nexport type { Stage } from './constants/misc.const.js'\nexport {\n  CAMUNDA_CLAIMS_NAMESPACE,\n  CONSOLE_API_USER_ID,\n  FIRSTNAME_LASTNAME_MAX_LENGTH,\n  HOTBACKUP_MIN_CREATE_PERIOD,\n  MAX_HARDWARE_PACKAGE_COUNT,\n  MAX_LENGTH_CLUSTER_NAME,\n  MINIMUM_EYEPAIRS,\n  MINIMUM_EYEPAIRS_BY_BULK_OPERATION_TYPE,\n  minimumBulkOperationAcks,\n  NAMES_OF_ENTERPRISE_SALESPLANS_WITH_SLEEPING_CLUSTERS,\n  requiredBulkOperationAcks,\n  SECRETS_MAX_LENGTH,\n  STARTING_PRICE_PER_MONTH_IN_EURO,\n  TEMPORARY_CLUSTER_NAME,\n  UNKNOWN_ACTOR_EMAIL,\n} from './constants/misc.const.js'\nexport {\n  getGatewayPropertyHint,\n  getGatewayPropertyPath,\n  isAffectedByStreamlinedDeployment,\n  isPre89AffectedPath,\n  PRE89_AFFECTED_PATHS,\n  PRE89_AFFECTED_PROPERTY_PREFIXES,\n  PRE89_GATEWAY_PROPERTY_PATHS,\n  PRE89_GATEWAY_RESOURCE_PREFIXES,\n} from './constants/pre89EnvVarMapping.const.js'\nexport { PRIVATE_LINK_REGIONS } from './constants/privateLinkRegions.const.js'\nexport { SECURE_CONNECTIVITY_ALLOWED_ENTRIES_LIMIT } from './constants/secureConnectivity.const.js'\nexport { isSelfServiceClusterModificationStage } from './constants/self-service-cluster-modification.const.js'\nexport type {\n  TrialExtensionSurveyAnswer,\n  TrialExtensionSurveyQuestion,\n} from './constants/trialExtensionSurvey.const.js'\nexport { TRIAL_EXTENSION_SURVEY_QUESTIONS } from './constants/trialExtensionSurvey.const.js'\nexport {\n  V2_BODY_IDS_MAX,\n  V2_FILTER_IDS_MAX,\n  V2_MAX_PAGE_LIMIT,\n} from './constants/v2-list.const.js'\nexport {\n  ADMIN_APP_RENAME_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_CONNECTOR_BRIDGE_MIN_VERSION,\n  APP_INTEGRATIONS_89_STREAM_MINOR,\n  APP_INTEGRATIONS_89_STREAM_ZEEBE_MIN_VERSION,\n  APP_INTEGRATIONS_MIN_VERSION,\n  AUDIT_LOG_TAB_MIN_VERSION,\n  AUTHORIZATION_TOGGLE_MIN_VERSION,\n  AWS_ONLY_GENERATION_MIN_VERSION,\n  BUSINESS_ID_UNIQUENESS_MIN_VERSION,\n  BYOIDP_MIN_VERSION,\n  CLUSTER_SECRETS_LABEL_MIN_VERSION,\n  CLUSTER_STATISTICS_CONFIG_MIN_VERSION,\n  CONNECTOR_MANAGEMENT_METRICS_MIN_VERSION,\n  CONNECTOR_SECRET_SYNC_MIN_VERSION,\n  CONNECTORS_MANAGEMENT_LINK_MIN_VERSION,\n  ENFORCE_GROUPS_TASKLIST_V2_HIDDEN_MIN_VERSION,\n  ENFORCE_GROUPS_TOGGLE_MIN_VERSION,\n  GATEWAY_SPEC_8_9_MIN_VERSION,\n  HOT_BACKUP_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_MIN_VERSION,\n  IDENTITY_AUTHORIZATION_NOTICE_MAX_VERSION,\n  IDENTITY_MANAGEMENT_MIN_VERSION,\n  INTERNAL_CONNECTORS_MANAGEMENT_MIN_VERSION,\n  JOB_DASHBOARD_MIN_VERSION,\n  LINE_8_9_MIN_VERSION,\n  LINE_8_10_MIN_VERSION,\n  MCP_MIN_VERSION,\n  MULTI_TENANCY_TOGGLE_MIN_VERSION,\n  NEW_CLUSTER_ROLES_MIN_VERSION,\n  OPTIMIZE_DEFAULT_ON_MIN_VERSION,\n  OPTIMIZE_FILTERING_MIN_VERSION,\n  OPTIONAL_TELEMETRY_MIN_VERSION,\n  RESOURCE_BASED_AUTHORIZATIONS_MIN_VERSION,\n  REST_API_URL_TRANSFORM_MIN_VERSION,\n  REST_API_V2_MIN_VERSION,\n  RESUME_ALPHA_MIN_VERSION,\n  SECRET_SOURCE_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_6_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_7_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_8_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_9_MIN_VERSION,\n  SECRETS_FILTER_MODE_8_10_MIN_VERSION,\n  SESSION_CONFIG_MIN_VERSION,\n  SWAGGER_MIN_VERSION,\n  SWAGGER_URL_8_9_MIN_VERSION,\n  TASKLIST_MODE_TOGGLE_MIN_VERSION,\n  TASKLIST_UPGRADE_BANNER_MIN_VERSION,\n  TASKLIST_V2_AUTO_ENABLE_FROM_MINOR,\n  TASKLIST_V2_AUTO_ENABLE_TO_MINOR,\n  TASKLIST_V2_DEFAULT_ON_MIN_VERSION,\n  TASKLIST_V2_SETTING_MAX_VERSION,\n  TASKLIST_V2_UPGRADE_MIN_VERSION,\n  TASKLIST_V2_UPGRADE_TARGET_MIN_VERSION,\n  UPGRADE_READINESS_MIN_VERSION,\n  ZEEBE_REST_URL_MIN_VERSION,\n} from './constants/version-gates.const.js'\n\n// ============================================================================\n// DTOs - Types (interfaces and type aliases)\n// ============================================================================\n\n// Annotations - the notes and the tags that a Camundi attaches to a fleet\n// entity. The wire types and the rules are pure and browser-safe, so\n// control-backend and control-frontend run the same code.\nexport type {\n  AnnotationActorView,\n  AnnotationDecision,\n  AnnotationDenialCode,\n} from './annotations/policy.js'\nexport {\n  ANNOTATION_DENIAL_MESSAGES,\n  canEditNote,\n  canRemove,\n  checkNoteBody,\n  checkTagName,\n  isAuthor,\n} from './annotations/policy.js'\nexport type {\n  ClusterBulkClusterResultDto,\n  ClusterBulkFinalStatus,\n  ClusterBulkGenerationUpdateSettings,\n  ClusterBulkOperationPayloadDto,\n  ClusterBulkOperationRule,\n  ClusterBulkPlanTypeUpdateSettings,\n  ClusterBulkPlanUpdateSettings,\n  ClusterBulkSettingsByType,\n  ClusterBulkSleepWakeupSettings,\n  ClusterBulkStepRequestDto,\n  ClusterBulkStepResultDto,\n  ClusterBulkTargetDto,\n} from './approvals/cluster-bulk-operation.js'\nexport {\n  CLUSTER_BULK_OPERATION_CLUSTER_NAME_MAX_LENGTH,\n  CLUSTER_BULK_OPERATION_MAX_CLUSTERS,\n  CLUSTER_BULK_OPERATION_MIN_ACKS,\n  CLUSTER_BULK_OPERATION_NAME_MAX_LENGTH,\n  CLUSTER_BULK_OPERATION_RULES,\n  CLUSTER_BULK_OPERATION_TEST_STAGE_MIN_ACKS,\n  CLUSTER_BULK_OPERATION_TYPES,\n  CLUSTER_BULK_SLEEPING_CLUSTER_DELAY_MS,\n  clusterBulkOperationTypeOf,\n  clusterBulkParameterOf,\n  clusterBulkRequiredPermissions,\n  clusterBulkResultOf,\n  isClusterBulkYolo,\n} from './approvals/cluster-bulk-operation.js'\nexport {\n  DNS_SUBDOMAIN_MAX_LENGTH,\n  isDnsSubdomain,\n} from './approvals/dns-subdomain.js'\nexport type { ApprovalExpectedChange } from './approvals/expected-value.js'\nexport {\n  isSameApprovalValue,\n  staleApprovalKeys,\n} from './approvals/expected-value.js'\nexport type {\n  ApprovalActorView,\n  ApprovalDecision,\n  ApprovalDenialCode,\n} from './approvals/policy.js'\nexport {\n  approvalPermissionCheck,\n  canAcknowledge,\n  canCreate,\n  canExecute,\n  canReject,\n  canView,\n  canWithdraw,\n  effectiveStatus,\n  hasActorEmail,\n  hasEveryPermission,\n  isExpired,\n  isSameActor,\n  isSameActorEmail,\n  remainingAcks,\n  requiredPermissionsOf,\n  resolveRequiredAcks,\n} from './approvals/policy.js'\nexport type {\n  ReleaseTrainAutoUpgradeCandidates,\n  ReleaseTrainPublishPayload,\n  ReleaseTrainRollbackPayload,\n} from './approvals/release-train.js'\nexport type { ApprovalUseCaseType } from './approvals/use-cases.const.js'\nexport {\n  APPROVAL_EMAIL_MAX_LENGTH,\n  APPROVAL_EMAIL_PATTERN,\n  APPROVAL_USE_CASE_TYPES,\n  ENTERPRISE_ONBOARDING_METRIC_MAX,\n  ENTERPRISE_ONBOARDING_NAME_MAX_LENGTH,\n  ENTERPRISE_ONBOARDING_RESERVATION_MAX,\n  ENTERPRISE_ONBOARDING_SFDC_ID_MAX_LENGTH,\n  ENTERPRISE_ONBOARDING_TERM_MAX_MONTHS,\n  ENTERPRISE_ONBOARDING_TERM_MIN_MONTHS,\n  EXTEND_TRIAL_MAX_DAYS,\n  EXTEND_TRIAL_MIN_DAYS,\n  FEATURE_FLAG_MIN_ACKS_PROD,\n  GENERATION_VERSION_VALUE_MAX_LENGTH,\n  GENERATION_VERSIONS_MAX_GENERATIONS,\n  isCalendarDay,\n  ORG_LIMIT_TEXT_MAX_LENGTH,\n  PERSONAL_ORGANIZATION_MAX_PER_REQUESTER,\n  PERSONAL_ORGANIZATION_NAME_MAX_LENGTH,\n  PERSONAL_ORGANIZATION_NAME_MIN_LENGTH,\n  PLATFORM_ROLE_CHANGE_MAX_ROLES,\n  PURGE_USERS_MAX_USERS,\n  PURGE_USERS_REQUIRED_PERMISSIONS,\n  USER_METADATA_EXPECTED_MAX_LENGTH,\n  USER_METADATA_MAX_LENGTH,\n} from './approvals/use-cases.const.js'\n// The chart query of a dashboard tile (catalogue, language, result).\nexport {\n  CHART_DAY_GRAIN_MAX_DAYS,\n  CHART_FILTER_MAX_LENGTH,\n  CHART_GRAIN_DEFAULT,\n  CHART_GRAINS,\n  CHART_ID_MAX_LENGTH,\n  CHART_METRICS,\n  CHART_OTHER_SERIES_KEY,\n  CHART_QUERY_MAX_LENGTH,\n  CHART_TOP_DEFAULT,\n  CHART_TOP_MAX,\n  CHART_UNKNOWN_SERIES_KEY,\n  CHART_WINDOW_AMOUNT_MAX,\n  CHART_WINDOW_DEFAULT,\n  CHART_WINDOW_UNITS,\n  type ChartDimensionSpec,\n  type ChartGrain,\n  type ChartMetricSpec,\n  type ChartPoint,\n  type ChartQueryCheck,\n  ChartQueryError,\n  type ChartQueryErrorKind,\n  type ChartQueryOptions,\n  type ChartResult,\n  type ChartSeries,\n  type ChartSpec,\n  type ChartUnit,\n  type ChartWindow,\n  type ChartWindowUnit,\n  chartBucketStart,\n  chartToday,\n  chartWindowRange,\n  findChartDimension,\n  findChartMetric,\n  formatChartSpec,\n  isChartQueryError,\n  parseChartQuery,\n  readChartSpec,\n  validateChartSpec,\n} from './charts/index.js'\n// Dashboards - the tiles of a dashboard hold filters and never data. The\n// wire types and the placement rules are pure, so control-backend and\n// control-frontend run the same code.\nexport {\n  DASHBOARD_TILE_DEFAULT_SIZE,\n  dashboardDefinitionBytes,\n  dashboardDefinitionFits,\n  dashboardTileDefaultSize,\n  emptyDashboardDefinition,\n  isSafeDashboardLink,\n  placeNewTile,\n  placeNewTiles,\n  tilesOverlap,\n  toStoredDashboardDefinition,\n  upgradeDashboardDefinition,\n} from './dashboards/definition.js'\nexport type {\n  ALERT_SUBSCRIPTION_REPORT_TYPES,\n  ALERT_SUBSCRIPTION_TYPES,\n  AlertSubscriptionDto,\n  AlertSubscriptionEntryDto,\n  AlertSubscriptionWebhookAuth,\n  CheckFailedReason,\n} from './dtos/AlertSubscription.dto.js'\n// DTOs - Values (constants)\nexport {\n  FORBIDDEN_HOSTNAMES_FOR_WEBHOOK_ALERTS,\n  HMAC_HEADER_POSITION,\n  HMAC_SUPPORTED_ALGORITHM,\n} from './dtos/AlertSubscription.dto.js'\nexport type {\n  AnnotationActor,\n  AnnotationDto,\n  AnnotationEntityKind,\n  AnnotationKind,\n  AnnotationLookupDto,\n  AnnotationLookupEntryDto,\n  AnnotationTagDto,\n  EntityAnnotationsDto,\n} from './dtos/Annotation.dto.js'\nexport {\n  ANNOTATION_BODY_MAX,\n  ANNOTATION_ENTITY_KIND_LABELS,\n  ANNOTATION_ENTITY_KINDS,\n  ANNOTATION_ENTITY_MAX,\n  ANNOTATION_KINDS,\n  ANNOTATION_LOOKUP_MAX_ENTITIES,\n  ANNOTATION_LOOKUP_TAGS_MAX,\n  ANNOTATION_PAGE_SIZE_DEFAULT,\n  ANNOTATION_PAGE_SIZE_MAX,\n  ANNOTATION_SEARCH_MAX_LENGTH,\n  ANNOTATION_TAG_NAME_MAX,\n  normalizeTagName,\n} from './dtos/Annotation.dto.js'\n// Approvals - the wire types, and the rules that read them. Both are pure and\n// browser-safe, so control-backend, control-frontend and cloudbot run the same\n// code and cannot disagree.\nexport type {\n  ApprovalAck,\n  ApprovalActionMode,\n  ApprovalActor,\n  ApprovalEntityRef,\n  ApprovalEntityType,\n  ApprovalExecutionMode,\n  ApprovalJobDto,\n  ApprovalJobStatus,\n  ApprovalM2mActor,\n  ApprovalProgress,\n  ApprovalSortField,\n  ApprovalSortOrder,\n  ApprovalStatusCountsDto,\n  ApprovalSummaryField,\n  ApprovalSummaryFieldKind,\n  ApprovalSummaryValue,\n  ApprovalUseCaseDto,\n} from './dtos/ApprovalJob.dto.js'\nexport {\n  APPROVAL_ACKS_MAX,\n  APPROVAL_ENTITY_TYPES,\n  APPROVAL_JOB_STATUSES,\n  APPROVAL_LIST_SUMMARY_VALUES_MAX,\n  APPROVAL_LIVE_STATUSES,\n  APPROVAL_PAGE_SIZE_DEFAULT,\n  APPROVAL_PAGE_SIZE_MAX,\n  APPROVAL_PAYLOAD_ORG_FIELD,\n  APPROVAL_REASON_MAX_LENGTH,\n  APPROVAL_RUN_STALE_MS,\n  APPROVAL_SEARCH_MAX_LENGTH,\n  APPROVAL_SORT_DEFAULT,\n  APPROVAL_SORT_FIELDS,\n  APPROVAL_SUMMARY_FIELD_KINDS,\n  isRunStalled,\n  progressFraction,\n} from './dtos/ApprovalJob.dto.js'\nexport type { AuditDto } from './dtos/Audit.dto.js'\nexport type { Auth0ResourceServerDto } from './dtos/Auth0ResourceServer.dto.js'\nexport type { BackupDto } from './dtos/Backup.dto.js'\nexport type { BackupScheduleDto } from './dtos/BackupSchedule.dto.js'\nexport type { ByomClientDto, ByomStatus } from './dtos/ByomClient.dto.js'\nexport type {\n  ClusterCreationDefaultField,\n  ClusterCreationDefaultKey,\n  ClusterCreationDefaults,\n} from './dtos/ClusterCreationDefaults.dto.js'\nexport { CLUSTER_CREATION_DEFAULT_FIELDS } from './dtos/ClusterCreationDefaults.dto.js'\nexport type {\n  ClusterDeferredSpecChange,\n  DeferredSpecChangeType,\n} from './dtos/ClusterDeferredSpecChange.dto.js'\nexport type { ClusterIpWhitelistDto } from './dtos/ClusterIpWhitelist.dto.js'\nexport type {\n  MoveClusterOwnerResult,\n  MoveClusterWarnings,\n} from './dtos/ClusterOwnerMove.dto.js'\nexport type { ClusterPlanDto } from './dtos/ClusterPlan.dto.js'\nexport type { ClusterPlanTypeDto } from './dtos/ClusterPlanType.dto.js'\nexport type {\n  ChangeClusterPlanTypeResult,\n  ClusterModificationConfigRef,\n  ClusterPlanTypeChangeRefusal,\n  ClusterPlanTypeStateDto,\n} from './dtos/ClusterPlanTypeChange.dto.js'\nexport {\n  CLUSTER_PLAN_TYPE_CHANGE_REFUSALS,\n  clusterPlanTypeChangeRefusalOf,\n} from './dtos/ClusterPlanTypeChange.dto.js'\nexport type {\n  ClusterSpecChange,\n  ClusterSpecChangeActor,\n  ClusterSpecHistory,\n} from './dtos/ClusterSpecHistory.dto.js'\nexport type {\n  CommonClusterDto,\n  ExternalIdpConfig,\n  OptimizeFilteringConfig,\n  OptimizeFilteringIncludeExclude,\n  OptimizeFilteringPatch,\n  SecretsFilterMode,\n} from './dtos/CommonCluster.dto.js'\nexport type { ConsoleClusterDto } from './dtos/ConsoleCluster.dto.js'\nexport type {\n  ClusterActivityBucket,\n  ClusterActivityTile,\n  ClusterActivityV2Dto,\n  ClusterActivityV2Response,\n  ClusterByClientV2Dto,\n  ClusterDatacenterOptionV2Dto,\n  ClusterDetailV2Dto,\n  ClusterFacetsV2Dto,\n  ClusterListItemV2Dto,\n  ClusterLiveStateV2Dto,\n  ClusterLiveStateV2Entry,\n  ClusterModificationState,\n  ClusterParameterOptionV2Dto,\n  ClusterParametersV2Dto,\n  ClusterTtlFilter,\n  ControlResolvedPermissions,\n  ControlSessionDto,\n  ControlSessionUser,\n  CursorPage,\n  CursorParams,\n  ListClustersV2Params,\n  ListOrganizationsV2Params,\n  ListOrgMembersV2Params,\n  OrgDetailV2Dto,\n  OrgListItemV2Dto,\n  OrgMemberV2Dto,\n  OrgSummaryV2Dto,\n} from './dtos/ControlV2.dto.js'\nexport { CLUSTER_MODIFICATION_STATES } from './dtos/ControlV2.dto.js'\nexport type {\n  DashboardActor,\n  DashboardAnnotationsQuery,\n  DashboardAnnotationsTile,\n  DashboardAnnotationsTileV1,\n  DashboardCatalogue,\n  DashboardCatalogueChartMetric,\n  DashboardCatalogueSearchField,\n  DashboardChartQuery,\n  DashboardChartRender,\n  DashboardChartTile,\n  DashboardChartTileV3,\n  DashboardClusterCard,\n  DashboardClusterDetailQuery,\n  DashboardClusterDetailTile,\n  DashboardClusterDetailTileV2,\n  DashboardDefinition,\n  DashboardDefinitionV1,\n  DashboardDefinitionV2,\n  DashboardDefinitionV3,\n  DashboardDto,\n  DashboardFleetQuery,\n  DashboardFleetQueryTile,\n  DashboardFleetQueryTileV1,\n  DashboardHeadingTile,\n  DashboardHeadingTileV2,\n  DashboardLinkTile,\n  DashboardLinkTileV2,\n  DashboardListDto,\n  DashboardNewTile,\n  DashboardNoteTile,\n  DashboardNoteTileV2,\n  DashboardOrgCard,\n  DashboardOrgDetailQuery,\n  DashboardOrgDetailTile,\n  DashboardOrgDetailTileV2,\n  DashboardSummaryDto,\n  DashboardTile,\n  DashboardTileKind,\n  DashboardTileLayout,\n  DashboardTileV1,\n  DashboardTileV2,\n  DashboardTileV3,\n  StoredDashboardDefinition,\n} from './dtos/Dashboard.dto.js'\nexport {\n  DASHBOARD_CHART_RENDERS,\n  DASHBOARD_CLUSTER_CARDS,\n  DASHBOARD_DEFINITION_BYTES_MAX,\n  DASHBOARD_DEFINITION_VERSION,\n  DASHBOARD_ENTITY_ID_MAX,\n  DASHBOARD_GRID_COLUMNS,\n  DASHBOARD_GRID_ROWS_MAX,\n  DASHBOARD_LINK_URL_MAX,\n  DASHBOARD_NOTE_MAX,\n  DASHBOARD_ORG_CARDS,\n  DASHBOARD_PAGE_SIZE_DEFAULT,\n  DASHBOARD_PAGE_SIZE_MAX,\n  DASHBOARD_TILE_KINDS,\n  DASHBOARD_TILE_ROWS_MAX,\n  DASHBOARD_TILES_MAX,\n  DASHBOARD_TITLE_MAX,\n} from './dtos/Dashboard.dto.js'\nexport type { EarlyAccessFeatureDto } from './dtos/EarlyAccessFeature.dto.js'\nexport type {\n  CamundaWebApp,\n  CamundaWebAppWithZeebe,\n  ExternalClickwrapConfigDto,\n  ExternalClusterDto,\n  ExternalOrganizationDto,\n} from './dtos/ExternalWebapp.dto.js'\nexport type {\n  CreateFeatureFlagDto,\n  FeatureFlagAnswer,\n  FeatureFlagDto,\n  FeatureFlagListDto,\n  UpdateFeatureFlagDto,\n} from './dtos/FeatureFlags.dto.js'\n// Functions\nexport {\n  activeGenerations,\n  compareGenerationNamesNewestFirst,\n  type GenerationDto,\n  type GenerationWithClusterCountDto,\n  sortGenerationBySemverOfZeebe,\n  type UpgradableGenerationsDto,\n} from './dtos/Generations.dto.js'\nexport type { ChangeGenerationVersionsResult } from './dtos/GenerationVersionsChange.dto.js'\n// Namespace (type-only - contains only interfaces)\nexport type { Hdp } from './dtos/Hdp.dto.js'\nexport type {\n  K8sBackupConfig,\n  K8sConfig,\n  K8sConfigLegacyFormat,\n  K8sContext,\n  K8sContextDto,\n} from './dtos/K8sContext.dto.js'\nexport type {\n  M2mTokenCountDto,\n  M2mTokenCountsDto,\n} from './dtos/M2mTokenCount.dto.js'\nexport type { MetaDto } from './dtos/Meta.dto.js'\nexport type {\n  AutoJoinAssignment,\n  LicensingModelType,\n  LlmProviderName,\n  OrganizationDto,\n  OrganizationMetadata,\n  OrgOwner,\n  OrgWithNameAndSalesPlan,\n} from './dtos/Organization.dto.js'\nexport {\n  LICENSING_MODEL_DISPLAY_NAMES,\n  VALID_LICENSING_MODELS,\n} from './dtos/Organization.dto.js'\nexport type { OrganizationMemberDto } from './dtos/OrganizationMember.dto.js'\nexport type { OrganizationToSalesPlanDto } from './dtos/OrganizationToSalesPlan.dto.js'\nexport type {\n  DryRunSanityDiff,\n  ReleaseTrainPreview,\n  ReleaseTrainSanityReport,\n  SanityFix,\n  SanityRuleInfo,\n  SanitySeverity,\n  SanityViolation,\n} from './dtos/ReleaseTrainSanity.dto.js'\nexport type { RestoreDto, RestoreState } from './dtos/Restore.dto.js'\n// SalesPlan.dto - Types\nexport type {\n  ClusterLimits,\n  ConsumptionDataItem,\n  Limits,\n  SalesPlanDto,\n  SalesPlanMetadata,\n} from './dtos/SalesPlan.dto.js'\n// SalesPlan.dto - Values (constants and functions)\nexport {\n  allClusterBasedLimits,\n  allSalesPlanLimits,\n  clusterPlanWhiteListIds,\n  deprecatedLimit,\n  generationWhiteListIds,\n  isLimitKeyEnabled,\n  isLimitOfferedOnStage,\n  isUnlockedClusterPlansStage,\n  MAX_CLUSTER_CLIENTS_DEFAULT,\n  MAX_CLUSTER_CLIENTS_DEV,\n  RETENTION_LIMIT_DEFAULT,\n  RETENTION_LIMIT_MAXIMUM,\n  RETENTION_LIMIT_MINIMUM,\n  unusedClusterBasedLimits,\n  unusedSalesPlanLimits,\n} from './dtos/SalesPlan.dto.js'\nexport type { SecureConnectivityDto } from './dtos/SecureConnectivity.dto.js'\nexport type { SignupDto } from './dtos/Signup.dto.js'\nexport type {\n  StorybookConfig,\n  StorybookConfigBackup,\n  StorybookConfigChannel,\n  StorybookConfigDatacenter,\n  StorybookConfigGeneration,\n} from './dtos/StorybookConfig.dto.js'\nexport type { SystemAuditDto } from './dtos/SystemAudit.dto.js'\nexport type {\n  UpgradeReadinessDto,\n  UpgradeReadinessSource,\n  UpgradeReadinessState,\n} from './dtos/UpgradeReadiness.dto.js'\n// UsageAlert.dto - Types\nexport type { UsageAlertDto } from './dtos/UsageAlert.dto.js'\n// UsageAlert.dto - Values (enum and constants)\nexport {\n  UsageAlertInitValues,\n  UsageAlertMetric,\n  UsageAlertThresholdLimits,\n} from './dtos/UsageAlert.dto.js'\nexport type { UserMetaDataDto } from './dtos/UserMetaData.dto.js'\n// Lucene-style table search (parser + AST \u2192 SQL compiler + field registries).\nexport {\n  type AndNode,\n  CLUSTER_DEFAULT_SEARCH_FIELDS,\n  CLUSTER_SEARCH_FIELDS,\n  CLUSTER_TTL_SEARCH_FIELDS,\n  type CompileContext,\n  type CompiledQuery,\n  clusterSearchFieldsForStage,\n  compileQuery,\n  type FieldBinding,\n  findSearchField,\n  idSetPredicate,\n  isLuceneQueryError,\n  joinIdSet,\n  LuceneQueryError,\n  likeArgument,\n  type NotNode,\n  ORG_DEFAULT_SEARCH_FIELDS,\n  ORGANIZATION_SEARCH_FIELDS,\n  type OrNode,\n  parseLuceneQuery,\n  type QueryNode,\n  type RangeNode,\n  type SearchFieldCapability,\n  type SearchFieldSpec,\n  type SearchFieldType,\n  type SearchTermOperator,\n  type SqlDialect,\n  type TermNode,\n} from './search/index.js'\nexport { upgradeGateReason } from './utils/upgradeGateReason.utils.js'\n\n// ============================================================================\n// Enums (runtime values)\n// ============================================================================\n\nexport {\n  AlertSubscriptionReportType,\n  AlertSubscriptionType,\n} from './enums/AlertSubscription.enum.js'\nexport { AuditEntity, AuditEntityAttribute } from './enums/AuditEntity.enum.js'\nexport { AuditService } from './enums/AuditService.enum.js'\nexport { BackupStatus } from './enums/BackupStatus.enum.js'\nexport {\n  ClusterBulkOperationStatus,\n  ClusterBulkOperationType,\n} from './enums/ClusterBulkOperation.enum.js'\nexport { ClusterClientPermission } from './enums/ClusterClientPermissions.enum.js'\nexport { ClusterEncryptionKey } from './enums/ClusterEncryptionKey.enum.js'\nexport { ClusterStatus } from './enums/ClusterStatus.enum.js'\nexport { ConsoleAPIClientPermission } from './enums/ConsoleApiClientPermission.enum.js'\nexport { ErrorType } from './enums/ErrorType.enum.js'\nexport type {\n  AssignableOrganizationRoleType,\n  OrganizationRoleType,\n  UnassignableOrganizationRoleType,\n} from './enums/OrganizationRole.enum.js'\nexport {\n  AssignableOrganizationRole,\n  LegacyHeldOrganizationRole,\n  OrganizationRole,\n  UnassignableOrganizationRole,\n} from './enums/OrganizationRole.enum.js'\nexport { SseEntity, SseType } from './enums/Sse.enum.js'\nexport {\n  SystemAuditEntity,\n  SystemAuditEntityAttribute,\n} from './enums/SystemAuditEntity.enum.js'\n\n// ============================================================================\n// Permissions - Namespaces (runtime values)\n// ============================================================================\n\nexport { AccountsPermissions } from './permissions/accounts.permissions.js'\nexport { AlertDistributorPermissions } from './permissions/alert-distributor.permissions.js'\nexport { AuditLoggerPermissions } from './permissions/auditlogger.permissions.js'\nexport {\n  accountsUserFeaturesFromPermissions,\n  consoleUserFeaturesFromPermissions,\n  sessionHasPermission,\n  sessionPermissionKeysFor,\n} from './permissions/combo.js'\nexport { ConsolePermissions } from './permissions/console.permissions.js'\nexport { NotificationPermissions } from './permissions/notification.permissions.js'\n// profile.permissions - Types\nexport type { OnboardConfig } from './permissions/profile.permissions.js'\n// profile.permissions - Values (constants)\n// NOTE: the `allowed` email lists (CLOUD_TEAM_EMAILS, SRE_TEAM_EMAILS, etc.)\n// intentionally live in the private `@camunda-cloud/shared-backend` package\n// instead of here, since this package is published publicly to npm.\nexport { PROFILES } from './permissions/profile.permissions.js'\nexport { expandRolesToPermissions } from './permissions/roleExpansion.utils.js'\n\n// ============================================================================\n// Types - Type-only exports (interfaces and type aliases)\n// ============================================================================\n\nexport type { AuditData } from './types/AuditData.type.js'\n// AutoSleep.type - Types\nexport type {\n  ActivitySleepEligibilityOptions,\n  SleepCronEligibilityOptions,\n} from './types/AutoSleep.type.js'\n// AutoSleep.type - Values (constants and functions)\nexport {\n  INTERNAL_LOW_HARDWARE_PLAN_NAME,\n  isActivitySleepEligible,\n  isClusterTagEligibleForSleepCron,\n  isSalesPlanEligibleForSleepCron,\n  isSleepCronEligible,\n  SLEEP_CRON_ELIGIBLE_TAGS,\n} from './types/AutoSleep.type.js'\nexport type {\n  BotContext,\n  BotOptions,\n  BotRequest,\n  GetUserDetailsResponse,\n  ListRolesForUserResponse,\n  UpdateUserRolesRequest,\n  UpdateUserRolesResponse,\n  UserContext,\n  UserDetails,\n} from './types/Bot.types.js'\n// BulkOperation.type - Types\nexport type {\n  BulkClusterDeletionContent,\n  BulkClusterDeletionItem,\n  BulkClusterGenerationUpdateItem,\n  BulkClusterPlanTypeUpdateContent,\n  BulkClusterPlanTypeUpdateItem,\n  BulkClusterPlanUpdateContent,\n  BulkClusterPlanUpdateItem,\n  BulkGenerationUpdateContent,\n  GenericBulkClusterOperationContent,\n  GenericBulkOperationContent,\n  GenericClusterBulkOperationItem,\n} from './types/BulkOperation.type.js'\n// BulkOperation.type - Functions (type guards)\nexport {\n  isBulkClusterDeletionItem,\n  isBulkClusterPlanTypeUpdateItem,\n  isBulkClusterPlanUpdateItem,\n  isIsBulkClusterGenerationUpdateIten,\n} from './types/BulkOperation.type.js'\n// C8ClusterComponentVersions.type - Types\nexport type {\n  GenerationImageVersionsDto,\n  ImmutableZeebeClusterVersionsDto,\n  MutableZeebeClusterVersionsDto,\n  ZeebeClusterVersionsDto,\n} from './types/C8ClusterComponentVersions.type.js'\n// C8ClusterComponentVersions.type - Values (constants)\nexport {\n  AllThings,\n  GENERATION_IMAGE_VERSION_KEYS,\n  ImmutableThings,\n  MutableThings,\n} from './types/C8ClusterComponentVersions.type.js'\n// CamundaClusterLabels.type - Types\nexport type {\n  CamundaClusterStage,\n  CamundaClusterStageLabel,\n  ClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// CamundaClusterLabels.type - Values (constants)\nexport {\n  ALLOWED_CAMUNDA_LABELS,\n  StageClusterLabels,\n} from './types/CamundaClusterLabels.type.js'\n// Chargebee.type - Types\nexport type { SubscriptionItem } from './types/Chargebee.type.js'\n// Chargebee.type - Values (enums)\nexport { ConsumptionData, ConsumptionDataType } from './types/Chargebee.type.js'\n// ClusterBulkOperation.type - Types\nexport type {\n  ClusterBulkOperationAck,\n  ClusterBulkOperationClusterDto,\n  ClusterBulkOperationContent,\n  ClusterBulkOperationDto,\n  ClusterBulkOperationGenerationUpdateParameter,\n  ClusterBulkOperationParameter,\n  ClusterBulkOperationPlanTypeUpdateParameter,\n  ClusterBulkOperationPlanUpdateParameter,\n  ClusterBulkOperationPostContent,\n  ClusterSleepWakeupParameter,\n} from './types/ClusterBulkOperation.type.js'\nexport type {\n  ClusterModificationConfigDto,\n  ClusterModificationDto,\n} from './types/ClusterModification.type.js'\n// ClusterPlanFields.type - Values (field spec and type guard)\nexport {\n  CLUSTER_PLAN_FIELDS,\n  type ClusterPlanFieldSpec,\n  type ClusterPlanFieldTree,\n  isClusterPlanFieldSpec,\n} from './types/ClusterPlanFields.type.js'\nexport type {\n  ClusterPlanModificationAck,\n  ClusterPlanModificationConfig,\n  ClusterPlanModificationDto,\n} from './types/ClusterPlanModification.type.js'\n// ClusterPlanTypeAvailabilityClass.type - Values (enum and function)\nexport {\n  ClusterPlanTypeAvailabilityClass,\n  hasNoAvailabilityClass,\n  sortByAvailabilityClasses,\n} from './types/ClusterPlanTypeAvailabilityClass.type.js'\n// ClusterPlanTypeCategory.type - Values (enum and functions)\nexport {\n  ClusterPlanTypeCategory,\n  hasAvailabilityClass,\n  sortByClusterPlanTypeCategory,\n} from './types/ClusterPlanTypeCategory.type.js'\nexport type { ClusterPlanTypesToConfig } from './types/ClusterPlanTypesToConfig.type.js'\nexport type { ClusterPlanTypesToReserved } from './types/ClusterPlanTypesToReserved.type.js'\nexport type {\n  ClusterTtlDeletionPayload,\n  ClusterTtlDeletionResult,\n  ClusterTtlDto,\n  ClusterTtlDuration,\n  ClusterTtlOption,\n  ClusterTtlUnlimited,\n  UpdateClusterTtlBody,\n} from './types/ClusterTtl.type.js'\nexport {\n  CLUSTER_TTL_BACKFILL_REASON,\n  CLUSTER_TTL_DURATION_MS,\n  CLUSTER_TTL_DURATIONS,\n  CLUSTER_TTL_FEATURE_FLAG,\n  CLUSTER_TTL_OPTIONS,\n  CLUSTER_TTL_UNLIMITED_LINK_MAX_LENGTH,\n  CLUSTER_TTL_UNLIMITED_REASON_MAX_LENGTH,\n  clusterTtlExpiresAt,\n  DEFAULT_CLUSTER_TTL_OPTION,\n  extendClusterTtl,\n  isClusterTtlDuration,\n  isClusterTtlOption,\n  isClusterTtlStage,\n  isHttpUrl,\n  isPastClusterTtl,\n  validateClusterTtlUnlimited,\n} from './types/ClusterTtl.type.js'\nexport type {\n  ClusterUsageDataRequest,\n  ClusterUsageMetadataDto,\n  ClusterUsageMetricsAddRequestByMetricHeap,\n  ClusterUsageMetricsData,\n  ClusterUsageMetricsFilter,\n  ClusterUsageOrgStartDate,\n} from './types/ClusterUsageMetrics.type.js'\n// Dashboard.types - Types\nexport type {\n  DashboardConfig,\n  DashboardMappingItem,\n  DashboardMappingTarget,\n  DashboardResultPrimitive,\n  DashboardResultRow,\n  EngineeringOperationsDashboardResponse,\n} from './types/Dashboard.types.js'\nexport type { EnterpriseIncludingValueMetrics } from './types/EnterpriseIncludingValueMetrics.type.js'\nexport type {\n  HdpTenantUsageBreakdown,\n  HdpTenantUsagePerClusterPoint,\n  HdpTenantUsagePoint,\n} from './types/HdpTenantUsage.type.js'\n// hdp.types - Types (interfaces)\nexport type {\n  AlertSubscription as HdpAlertSubscription,\n  Audit as HdpAudit,\n  ByomClient as HdpByomClient,\n  Channel as HdpChannel,\n  Cluster as HdpCluster,\n  ClusterBackup as HdpClusterBackup,\n  ClusterBackupSchedule as HdpClusterBackupSchedule,\n  ClusterBulkOperation as HdpClusterBulkOperation,\n  ClusterClient as HdpClusterClient,\n  ClusterModification as HdpClusterModification,\n  ClusterPlan as HdpClusterPlan,\n  ClusterPlanType as HdpClusterPlanType,\n  ConnectorSecret as HdpConnectorSecret,\n  ConsoleApiClient as HdpConsoleApiClient,\n  Datacenter as HdpDatacenter,\n  Generation as HdpGeneration,\n  HdpBackendChangeEvent,\n  HdpClusterModificationConfig,\n  HdpDisk,\n  HdpEntity,\n  HdpPrometheusDataCapacityDataPoint,\n  Invite as HdpInvite,\n  LlmSpend as HdpLlmSpend,\n  Organization as HdpOrganization,\n  SecureConnectivity as HdpSecureConnectivity,\n  SystemAudit as HdpSystemAudit,\n  TelemetryData as HdpTelemetryData,\n  UsageAlert as HdpUsageAlert,\n  User as HdpUser,\n  UserLogin as HdpUserLogin,\n} from './types/hdp.types.js'\n// hdp.types - Values (enums)\nexport {\n  AlertSubscriptionReportType as HdpAlertSubscriptionReportType,\n  AlertSubscriptionType as HdpAlertSubscriptionType,\n  HDP_DISKS,\n} from './types/hdp.types.js'\n// notification.type - Types\nexport type {\n  GlobalNotification,\n  NotificationDto,\n  NotificationMeta,\n  NotificationOptions,\n  NotificationPermission,\n  NotificationSource,\n  NotificationState,\n  NotificationType,\n  OrgNotification,\n  UserNotification,\n  UserOrgNotification,\n} from './types/notification.type.js'\n// notification.type - Values (enums and constants)\nexport {\n  NotificationPermissionValues,\n  NotificationSourceEnum,\n  NotificationStateEnum,\n  NotificationTypeEnum,\n} from './types/notification.type.js'\n// OrganizationPermission.type - Types\nexport type {\n  CreateReadUpdateDelete,\n  OrganizationPermissions,\n} from './types/OrganizationPermission.type.js'\n// OrganizationPermission.type - Values (constants)\nexport {\n  OrganizationPermissionsDescriptions,\n  PermissionsForOrganizationRole,\n} from './types/OrganizationPermission.type.js'\nexport {\n  getPreprodClusterTtlHours,\n  isPastPreprodClusterTtl,\n  isPreprodClusterTtlStage,\n  parseNumericLimit,\n} from './types/PreprodClusterTtl.type.js'\n// Roles.js - Types\nexport type {\n  AccountRoles,\n  ConsoleRoles,\n  ModelerRoles,\n  Roles,\n} from './types/Roles.js'\n// Roles.js - Values (constants)\nexport { SAFE_ROLES } from './types/Roles.js'\n// SalesPlanType.type - Types\nexport type {\n  DisplayedSalesPlan,\n  RevisitedSalesPlanName,\n} from './types/SalesPlanType.type.js'\n// SalesPlanType.type - Values (enums and functions)\nexport {\n  AnalyticsSalesPlanType,\n  getAnalyticsSalesPlanFromOrgSalesPlan,\n  getDisplayedSalesPlan,\n  getRevisitedSalesPlanName,\n  OPTIMIZE_DISABLED_PLAN_TYPES,\n  SalesPlanType,\n} from './types/SalesPlanType.type.js'\n// SpamDetection.type - Types\nexport type { SpamDetectionPatterns } from './types/SpamDetection.type.js'\n// SpamDetection.type - Values (constants)\nexport { TEERGRUBE_PATTERNS } from './types/SpamDetection.type.js'\nexport type {\n  AlertSubscriptionSseEvent,\n  BackupSseEvent,\n  ClusterClientSseEvent,\n  ClusterSseEvent,\n  ConnectorSecretsSseEvent,\n  ConsoleApiClientSseEvent,\n  ConsoleSseEvent,\n  MonitoringSseEvent,\n  SecureConnectivitySseEvent,\n  SseClusterPayload,\n  SseMonitoringPayload,\n  SseSecureConnectivityPayload,\n} from './types/SseEvent.type.js'\n// Namespace (type-only - contains only interfaces)\nexport type { AccountsStats } from './types/Stats.types.js'\n// Survey.type - Types\nexport type { Persona, SurveyDto } from './types/Survey.type.js'\n// Survey.type - Values (enum)\nexport { FeedbackType } from './types/Survey.type.js'\n// SuspendStrategy.type - Types\nexport type {\n  GetSuspendStrategyOptions,\n  SuspendStrategy,\n} from './types/SuspendStrategy.type.js'\n// SuspendStrategy.type - Values (function)\nexport { getSuspendStrategy } from './types/SuspendStrategy.type.js'\nexport type { SystemAuditData } from './types/SystemAuditData.type.js'\n\n// Namespace (runtime value)\nexport { Telemetry } from './types/Telemetry.type.js'\n\n// TrialManagement.types - Types\nexport type {\n  ExtensionListItem,\n  ExtensionListResponse,\n  OrgTrialDetail,\n  TrialExtensionSource,\n  TrialManagementStats,\n} from './types/TrialManagement.types.js'\n\n// User.type - Types\nexport type {\n  AccountsData,\n  AppMetadata,\n  BasicUser,\n  BlockedFor,\n  Identity,\n  OrgMembership,\n  User,\n  UserMetadata,\n  UserRequest,\n} from './types/User.type.js'\n\n// User.type - Values (enum)\nexport { UserMetadataEvent } from './types/User.type.js'\n\nexport type {\n  UniqueTaskUser,\n  ValueMetrics,\n  ValueMetricsPerYearMonth,\n} from './types/ValueMetrics.type.js'\n\n// ============================================================================\n// Utils - Classes (runtime values)\n// ============================================================================\n\nexport {\n  CLOUD_PROVIDER_ORDER,\n  getCloudProviderLabel,\n  getCloudProviderRank,\n} from './utils/cloudProvider.utils.js'\nexport {\n  type ConnectivityStatus,\n  deriveConnectivityMessage,\n  deriveConnectivityStatus,\n} from './utils/connectivityStatus.utils.js'\nexport type {\n  CronScheduleValidationFailure,\n  CronScheduleValidationResult,\n  CronScheduleValidationSuccess,\n} from './utils/cronSchedule.utils.js'\nexport {\n  BACKUP_SCHEDULE_MIN_INTERVAL_MINUTES,\n  validateCronSchedule,\n} from './utils/cronSchedule.utils.js'\nexport {\n  canonicalPlan,\n  canonicalPlanKey,\n} from './utils/elasticsearchPlanPath.utils.js'\nexport {\n  deriveEncryptionStatus,\n  type EncryptionStatus,\n  isEncryptionStatus,\n} from './utils/encryptionStatus.utils.js'\n// enterprise-connection.utils - Types\nexport type { EnterpriseConnectionOrganizationAssignment } from './utils/enterprise-connection.utils.js'\n// enterprise-connection.utils - Values (functions)\nexport {\n  enterpriseConnectionMetadataToOrganizationAssignments,\n  organizationAssignmentsToEnterpriseConnectionMetadata,\n} from './utils/enterprise-connection.utils.js'\nexport {\n  addMonthsClamped,\n  DEFAULT_ENTERPRISE_DURATION_IN_MONTHS,\n  diffInWholeMonths,\n  type EnterpriseTermWindow,\n  getCurrentEnterpriseTerm,\n  peakWithinTerm,\n  toUtcDayStartMs,\n} from './utils/enterpriseTerm.utils.js'\nexport type { EnvVarEntry } from './utils/envVars.js'\nexport { parseEnvVars, serializeEnvVars } from './utils/envVars.js'\nexport {\n  deriveFailoverKeyPolicyPrincipals,\n  type FailoverKeyPolicyPrincipals,\n} from './utils/failoverKeyPolicy.utils.js'\nexport type {\n  JvmOptionsModificationKey,\n  ParsedJvmOption,\n} from './utils/jvmOptions.js'\nexport {\n  addsEnvVarsOverrideValue,\n  isJvmOptionsModificationKey,\n  isUnderJvmSpec,\n  JVM_OPTION_MAX_LENGTH,\n  JVM_OPTION_PATTERN,\n  JVM_OPTIONS_MAX_ITEMS,\n  JVM_OPTIONS_MODIFICATION_KEYS,\n  JVM_OPTIONS_TARGETS,\n  joinJvmOptions,\n  parseJvmOption,\n  requiresEnvVarsOverride,\n  splitJvmOptions,\n  validateJvmOptions,\n  validateJvmOptionsValue,\n} from './utils/jvmOptions.js'\nexport {\n  KMS_ARN,\n  KMS_MRK_ARN,\n  type KmsArnValidationError,\n  type ParsedKmsArn,\n  parseKmsArn,\n  validateKmsArnForRegion,\n} from './utils/kmsArn.utils.js'\nexport { validateLabels } from './utils/labelValidator.utils.js'\nexport { ObjectMergeUtils } from './utils/objectMerge.utils.js'\nexport {\n  computeOrgStartDate,\n  type OrgStartDateInput,\n} from './utils/orgStartDate.utils.js'\nexport {\n  getPermissionsByRoles,\n  getUserPermissionsForOrg,\n} from './utils/orgs/OrgHelper.js'\n\n// PasswordPolicy - Types\nexport type {\n  PasswordPolicyRequest,\n  PasswordPolicyResult,\n} from './utils/PasswordPolicy.js'\n\n// PasswordPolicy - Values (constants and function)\nexport {\n  MAXLENGTH as PASSWORD_POLICY_MAXLENGTH,\n  MINLENGTH as PASSWORD_POLICY_MINLENGTH,\n  passwordPolicyCheck,\n} from './utils/PasswordPolicy.js'\nexport { isQaUserEmail, qaUserEmail } from './utils/qa-user.utils.js'\nexport {\n  deriveSecondaryStorageStatus,\n  type SecondaryStorageStatus,\n} from './utils/secondaryStorageStatus.utils.js'\nexport {\n  allSettledResultsCounts,\n  getFulfilledPromises,\n  getRejectedPromises,\n  getSettledSummary,\n} from './utils/settledPromises.util.js'\nexport {\n  isValidAwsArn,\n  isValidCIDR,\n  isValidCIDRList,\n  isValidClientName,\n  isValidHostname,\n  isValidPrivateLinkRegion,\n  normalizeCIDRList,\n} from './utils/string-validation.utils.js'\nexport {\n  extractCamundaUserEmail,\n  guessName,\n  isCamundaUserId,\n} from './utils/user.utils.js'\n\n// versionCheck.utils - Values (enum and function)\nexport {\n  checkVersion,\n  generationImageErrorMessage,\n  isAppIntegrationsVersionSupported,\n  isGenerationResumable,\n  isSecretsFilterModeConfigurable,\n  isValidGenerationImage,\n  normalizeGenerationVersion,\n  stripSecfixPostfix,\n  VersionCheckOperator,\n} from './utils/versionCheck.utils.js'\n\n// ============================================================================\n// Config - Configuration files and types\n// ============================================================================\n\nexport { default as CAMUNDI_PERMISSION_RULES } from './config/camundi-permission-rules.js'\nexport type { CamundiPermissionRules } from './config/camundi-permission-rules.types.js'\n\nexport {\n  augmentCamundiPermissions,\n  getApplicableRolesForEmployee,\n  HIBOB_CACHE_KEY,\n  HIBOB_CACHE_NAMESPACE,\n  isManager,\n} from './utils/camundiPermissionAugmenter.utils.js'\n"],
+  "mappings": "AAUA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,KAAK,MAAM,QAAQ,QAAQ,YAAY;AAEhD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,iDAAiD;AAC1D,SAAS,6CAA6C;AAKtD,SAAS,wCAAwC;AACjD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAe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uBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,SAAS,uCAAuC;AAkBhD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AA4CP,SAAS,mCAAmC;AA8C5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAiBP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,OAEK;AAyBP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAsBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAmBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,OASK;AACP,SAAS,yBAAyB;AAMlC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,4BAA4B;AAClD,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AACxC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,kCAAkC;AAC3C,SAAS,iBAAiB;AAM1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,eAAe;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AAC5C,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AAOxC,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AAazC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,SAAS,iBAAiB,2BAA2B;AAmBrD;AAAA,EACE;AAAA,EAGA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAYP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA0DP;AAAA,EACiC,+BAA/BA;AAAA,EACyB,yBAAzBC;AAAA,EACA;AAAA,OACK;AAgBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB;AAO3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,0BAA0B;AAoBnC,SAAS,oBAAoB;AAO7B,SAAS,0BAA0B;AAInC,SAAS,iBAAiB;AAyB1B,SAAS,yBAAyB;AAYlC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,OACK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,cAAc,wBAAwB;AAC/C;AAAA,EACE;AAAA,OAEK;AAKP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP;AAAA,EACe;AAAA,EACA;AAAA,EACb;AAAA,OACK;AACP,SAAS,eAAe,mBAAmB;AAC3C;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,SAAoB,WAAXC,gBAA2C;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
   "names": ["AlertSubscriptionReportType", "AlertSubscriptionType", "default"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camunda/ccma-shared-types",
-  "version": "8.1.0",
+  "version": "8.2.0",
   "description": "Shared TypeScript types for Camunda Cloud Management Apps",
   "bugs": {
     "url": "https://github.com/camunda/camunda-cloud-management-apps/issues"