@meshmakers/octo-services 3.5.660 → 3.5.670

package/fesm2022/meshmakers-octo-services.mjs

@@ -578,6 +578,239 @@ const IDENTITY_PROVIDER_TYPE_LABELS = {
     [IdentityProviderType.OctoTenant]: 'Octo Tenant'
 };
 
+/**
+ * Structural check instead of an `instanceof` test, same rule as `MmHttpErrorInterceptor`: a host with a
+ * second `@angular/common` copy sees two class identities, and `instanceof` would answer `false`.
+ */
+function isHttpErrorLike(error) {
+    return typeof error === 'object'
+        && error !== null
+        && error.name === 'HttpErrorResponse'
+        && typeof error.status === 'number';
+}
+/**
+ * Problem codes of the tenant-scoped cross-tenant grant routes (`{tenant}/v1/externalTenantUserMappings`),
+ * contract `octo-identity-services/docs/CONCEPT-SIBLING-TENANT-GRANTS.md` §5. Same values as the SDK's
+ * `CrossTenantGrantProblemCodes`.
+ */
+const CrossTenantGrantProblemCodes = {
+    SourceUserNotFound: 'SourceUserNotFound',
+    SourceUserLookupRateLimited: 'SourceUserLookupRateLimited',
+    SourceTenantNotPermitted: 'SourceTenantNotPermitted',
+    UnknownGroup: 'UnknownGroup',
+    ExternalTenantUserMappingAlreadyExists: 'ExternalTenantUserMappingAlreadyExists'
+};
+/** Codes of the identity role change guard (AB#7914, AB#7927) that can answer a mapping write. */
+const RoleChangeProblemCodes = ['self-grant', 'role-not-held', 'last-administrator'];
+const DEFAULT_MESSAGES$1 = {
+    NotAvailable: 'The identity service does not offer the cross-tenant user lookup yet.',
+    SourceUserLookupRateLimited: 'Too many source user lookups. Try again later.',
+    SourceTenantNotPermitted: 'The source tenant does not permit granting this user access to this tenant.',
+    UnknownGroup: 'At least one group does not exist in this tenant.',
+    ExternalTenantUserMappingAlreadyExists: 'This user already has access to this tenant.',
+    RoleChangeRefused: 'The role change was refused.',
+    Forbidden: 'Access is denied.'
+};
+/**
+ * Typed error of the tenant-scoped cross-tenant grant methods of `IdentityService`. It carries only the
+ * status, the problem code, the server's title and the documented extensions — never the request body, so a
+ * looked-up identifier (user name or e-mail) cannot leak through it.
+ */
+class CrossTenantGrantError extends Error {
+    kind;
+    status;
+    problemCode;
+    title;
+    details;
+    name = 'CrossTenantGrantError';
+    constructor(kind, status, 
+    /** The problem `code` extension, when the server sent one. */
+    problemCode, 
+    /** Readable server title (problem `title`, or `message` of the older 403 shape); `null` when none. */
+    title, details = {}) {
+        super(title ?? DEFAULT_MESSAGES$1[kind]);
+        this.kind = kind;
+        this.status = status;
+        this.problemCode = problemCode;
+        this.title = title;
+        this.details = details;
+    }
+    /** Seconds until the next lookup is allowed (`SourceUserLookupRateLimited`), read from the body. */
+    get retryAfterSeconds() {
+        return this.details.retryAfterSeconds;
+    }
+    /** Group ids that are no groups of the current tenant (`UnknownGroup`). */
+    get unknownGroupIds() {
+        return this.details.unknownGroupIds;
+    }
+    /** Id of the existing mapping (`ExternalTenantUserMappingAlreadyExists`). */
+    get existingMappingId() {
+        return this.details.existingMappingId;
+    }
+    /** Built-in roles the caller does not hold (`RoleChangeRefused` with code `role-not-held`). */
+    get roleNames() {
+        return this.details.roleNames;
+    }
+}
+/** Reads the problem body of an error answer; Angular hands it over as object or (unparsed) text. */
+function readProblemBody(error) {
+    const body = error.error;
+    const isTransportEvent = typeof ProgressEvent !== 'undefined' && body instanceof ProgressEvent;
+    const isBlob = typeof Blob !== 'undefined' && body instanceof Blob;
+    if (body && typeof body === 'object' && !isTransportEvent && !isBlob) {
+        return body;
+    }
+    if (typeof body === 'string' && body.trim().startsWith('{')) {
+        try {
+            const parsed = JSON.parse(body);
+            return parsed && typeof parsed === 'object' ? parsed : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+/** The problem `code` extension of an error answer, or `null` when it has none. */
+function problemCodeOf(error) {
+    return asString(readProblemBody(error)?.code);
+}
+function asString(value) {
+    return typeof value === 'string' && value.length > 0 ? value : null;
+}
+function asStringArray(value) {
+    return Array.isArray(value) ? value.filter((v) => typeof v === 'string') : undefined;
+}
+/**
+ * Maps an `HttpErrorResponse` of a cross-tenant grant route to a {@link CrossTenantGrantError}. Returns
+ * `null` for answers the contract does not type (401, 5xx, a validation 400, the 404 of an unknown mapping
+ * id, `SourceUserNotFound`); the caller then handles or rethrows the original error.
+ */
+function toCrossTenantGrantError(error, route) {
+    if (!isHttpErrorLike(error)) {
+        return null;
+    }
+    const problem = readProblemBody(error);
+    const code = asString(problem?.code);
+    const title = asString(problem?.title) ?? asString(problem?.message);
+    const status = error.status;
+    const make = (kind, details = {}) => new CrossTenantGrantError(kind, status, code, title, details);
+    switch (code) {
+        case CrossTenantGrantProblemCodes.SourceUserLookupRateLimited: {
+            const seconds = Number(problem?.retryAfterSeconds);
+            return make('SourceUserLookupRateLimited', { retryAfterSeconds: Number.isFinite(seconds) && seconds > 0 ? Math.ceil(seconds) : undefined });
+        }
+        case CrossTenantGrantProblemCodes.SourceTenantNotPermitted:
+            return make('SourceTenantNotPermitted');
+        case CrossTenantGrantProblemCodes.UnknownGroup:
+            return make('UnknownGroup', { unknownGroupIds: asStringArray(problem?.unknownGroupIds) ?? [] });
+        case CrossTenantGrantProblemCodes.ExternalTenantUserMappingAlreadyExists:
+            return make('ExternalTenantUserMappingAlreadyExists', { existingMappingId: asString(problem?.existingMappingId) ?? undefined });
+    }
+    if (code && RoleChangeProblemCodes.includes(code)) {
+        return make('RoleChangeRefused', { roleNames: asStringArray(problem?.roleNames) });
+    }
+    if (status === 403) {
+        return make('Forbidden');
+    }
+    if (route === 'lookup' && status === 404 && !code) {
+        return make('NotAvailable');
+    }
+    return null;
+}
+
+const DEFAULT_MESSAGES = {
+    Forbidden: 'You are not allowed to manage the cross-tenant access of this tenant.',
+    Invalid: 'The list of tenants was refused.',
+    NotAvailable: 'The identity service does not offer cross-tenant access settings yet.',
+    Conflict: 'The list was changed by someone else. Reload and try again.',
+    PreconditionRequired: 'The list must be read before it can be changed. Reload and try again.'
+};
+/**
+ * Typed error of `IdentityService.getCrossTenantGrantPermissions` / `setCrossTenantGrantPermissions`. It carries
+ * only the status, the server's title and the validation reasons — never the request body.
+ */
+class CrossTenantGrantPermissionsError extends Error {
+    kind;
+    status;
+    title;
+    validationErrors;
+    currentEtag;
+    name = 'CrossTenantGrantPermissionsError';
+    constructor(kind, status, 
+    /** Readable server title, `null` when none. */
+    title, 
+    /** Readable reasons of a `400` validation problem (`Invalid`); empty otherwise. */
+    validationErrors = [], 
+    /** `Conflict`: the `ETag` of the current list as the server sent it with the `412`; `null` otherwise. */
+    currentEtag = null) {
+        super(validationErrors[0] ?? title ?? DEFAULT_MESSAGES[kind]);
+        this.kind = kind;
+        this.status = status;
+        this.title = title;
+        this.validationErrors = validationErrors;
+        this.currentEtag = currentEtag;
+    }
+}
+/** The HTTP statuses {@link toCrossTenantGrantPermissionsError} types; the caller handles them, not the interceptor. */
+const CROSS_TENANT_GRANT_PERMISSIONS_TYPED_STATUSES = [400, 403, 404, 412, 428];
+function readBody(error) {
+    const body = error.error;
+    if (typeof body === 'string' && body.trim().startsWith('{')) {
+        try {
+            const parsed = JSON.parse(body);
+            return parsed && typeof parsed === 'object' ? parsed : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    const isTransportEvent = typeof ProgressEvent !== 'undefined' && body instanceof ProgressEvent;
+    const isBlob = typeof Blob !== 'undefined' && body instanceof Blob;
+    return body && typeof body === 'object' && !isTransportEvent && !isBlob ? body : null;
+}
+/** Flattens the ASP.NET `errors` map (`{ field: [reason, …] }`) into readable reasons. */
+function validationReasons(errors) {
+    if (!errors || typeof errors !== 'object') {
+        return [];
+    }
+    return Object.values(errors)
+        .flatMap(value => Array.isArray(value) ? value : [value])
+        .filter((value) => typeof value === 'string' && value.length > 0);
+}
+/** Reads a response header structurally (no `instanceof`, same rule as {@link isHttpErrorLike}). */
+function readResponseHeader(response, name) {
+    const headers = response?.headers;
+    const value = typeof headers?.get === 'function' ? headers.get(name) : null;
+    return typeof value === 'string' && value.length > 0 ? value : null;
+}
+/**
+ * Maps an `HttpErrorResponse` of the allow-list routes to a {@link CrossTenantGrantPermissionsError}. Returns
+ * `null` for answers that are not typed (401, 5xx, transport errors); the caller then rethrows the original error.
+ */
+function toCrossTenantGrantPermissionsError(error) {
+    if (!isHttpErrorLike(error)) {
+        return null;
+    }
+    const body = readBody(error);
+    const title = typeof body?.title === 'string' && body.title.length > 0 ? body.title
+        : typeof body?.message === 'string' && body.message.length > 0 ? body.message : null;
+    switch (error.status) {
+        case 400:
+            return new CrossTenantGrantPermissionsError('Invalid', 400, title, validationReasons(body?.errors));
+        case 403:
+            return new CrossTenantGrantPermissionsError('Forbidden', 403, title);
+        case 404:
+            return new CrossTenantGrantPermissionsError('NotAvailable', 404, title);
+        case 412:
+            return new CrossTenantGrantPermissionsError('Conflict', 412, title, [], readResponseHeader(error, 'ETag'));
+        case 428:
+            return new CrossTenantGrantPermissionsError('PreconditionRequired', 428, title);
+        default:
+            return null;
+    }
+}
+
 /**
  * Communication service DTOs for adapter and pipeline management.
  */
@@ -6681,6 +6914,210 @@ class IdentityService {
         return null;
     }
     // ========================================
+    // Cross-tenant grants in the current tenant (AB#8427)
+    // Route: {issuer}{currentTenant}/v1/externalTenantUserMappings
+    // Contract: octo-identity-services/docs/CONCEPT-SIBLING-TENANT-GRANTS.md
+    // Every 403 is typed and marked caller-handled (MM_CALLER_HANDLED_STATUSES): the global error
+    // interceptor shows no toast for it, the page shows its own message per `kind`. Untyped errors are
+    // rethrown with the interceptor's default reporting (see callerHandles403).
+    // ========================================
+    /**
+     * Finds exactly one user of a source tenant (a registry ancestor of the current tenant, or a tenant that
+     * permits it) by exact user name or exact e-mail — `POST .../externalTenantUserMappings/sourceUserLookup`
+     * (AB#8341). POST, so the identifier never appears in a URL; this service never logs it.
+     *
+     * @returns The user (no e-mail address), `null` for `404 SourceUserNotFound` — the one answer of every
+     *   negative case — and `null` when no identity URL is configured.
+     * @throws CrossTenantGrantError `SourceUserLookupRateLimited` (with `retryAfterSeconds` from the body),
+     *   `NotAvailable` (404 without problem code: identity service without AB#8341), `Forbidden`.
+     * @throws HttpErrorResponse for every other answer (401, validation 400, 5xx).
+     */
+    async lookupSourceUser(request) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (!baseUrl) {
+            return null;
+        }
+        const body = { sourceTenantId: request.sourceTenantId, identifier: request.identifier };
+        try {
+            const response = await firstValueFrom(this.httpClient.post(baseUrl + 'externalTenantUserMappings/sourceUserLookup', body, { observe: 'response', context: IdentityService.callerHandles403() }));
+            return response.body;
+        }
+        catch (error) {
+            if (isHttpErrorLike(error) && error.status === 404
+                && problemCodeOf(error) === CrossTenantGrantProblemCodes.SourceUserNotFound) {
+                return null;
+            }
+            throw IdentityService.crossTenantGrantErrorOr(error, 'lookup');
+        }
+    }
+    /**
+     * Grants a user of a source tenant access to the current tenant — `POST .../externalTenantUserMappings`.
+     * `groupIds` (groups of the current tenant, AB#8343) is sent only when set; `null`/`undefined` leaves the
+     * body as before. Take `sourceUserId`/`sourceUserName` from {@link lookupSourceUser}.
+     *
+     * @returns The stored mapping (`groupNames` filled), or `null` when no identity URL is configured.
+     * @throws CrossTenantGrantError `SourceTenantNotPermitted`, `UnknownGroup` (with `unknownGroupIds`),
+     *   `ExternalTenantUserMappingAlreadyExists` (with `existingMappingId`), `RoleChangeRefused`, `Forbidden`.
+     * @throws HttpErrorResponse for every other answer.
+     */
+    async createExternalTenantUserMapping(dto) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (!baseUrl) {
+            return null;
+        }
+        const { groupIds, ...rest } = dto;
+        const body = groupIds == null ? rest : { ...rest, groupIds };
+        try {
+            const response = await firstValueFrom(this.httpClient.post(baseUrl + 'externalTenantUserMappings', body, { observe: 'response', context: IdentityService.callerHandles403() }));
+            return response.body;
+        }
+        catch (error) {
+            throw IdentityService.crossTenantGrantErrorOr(error, 'mapping');
+        }
+    }
+    /**
+     * Lists the cross-tenant users granted access to the current tenant (source tenant, user, roles, groups)
+     * — `GET .../externalTenantUserMappings`. `sourceTenantId` filters by source tenant (the server then
+     * ignores `skip`/`take`).
+     *
+     * @returns The mappings, or `null` when no identity URL is configured.
+     * @throws CrossTenantGrantError `Forbidden`; HttpErrorResponse for every other error.
+     */
+    async getExternalTenantUserMappings(options) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (!baseUrl) {
+            return null;
+        }
+        let params = new HttpParams();
+        if (options?.skip != null) {
+            params = params.set('skip', options.skip.toString());
+        }
+        if (options?.take != null) {
+            params = params.set('take', options.take.toString());
+        }
+        if (options?.sourceTenantId) {
+            params = params.set('sourceTenantId', options.sourceTenantId);
+        }
+        try {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + 'externalTenantUserMappings', { params, observe: 'response', context: IdentityService.callerHandles403() }));
+            return response.body;
+        }
+        catch (error) {
+            throw IdentityService.crossTenantGrantErrorOr(error, 'mapping');
+        }
+    }
+    /**
+     * Removes a cross-tenant grant of the current tenant — `DELETE .../externalTenantUserMappings/{rtId}`.
+     * The next token exchange of that user into this tenant is refused (AB#8344).
+     *
+     * @throws CrossTenantGrantError `RoleChangeRefused` (e.g. `409 last-administrator`), `Forbidden`.
+     * @throws HttpErrorResponse for every other answer (404 for an unknown mapping id, 401, 5xx).
+     */
+    async deleteExternalTenantUserMapping(rtId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (!baseUrl) {
+            return;
+        }
+        try {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `externalTenantUserMappings/${encodeURIComponent(rtId)}`, { observe: 'response', context: IdentityService.callerHandles403() }));
+        }
+        catch (error) {
+            throw IdentityService.crossTenantGrantErrorOr(error, 'mapping');
+        }
+    }
+    /**
+     * Every `403` of these routes becomes a CrossTenantGrantError (`SourceTenantNotPermitted`,
+     * `RoleChangeRefused` or `Forbidden`), so the global interceptor's 403 toast is suppressed and the page
+     * shows its own message. Other statuses keep the interceptor's default: the problem-shaped 400/404/409/429
+     * answers are not toasted by it anyway, and an untyped error is reported exactly as for any request —
+     * callers use `MmHttpErrorInterceptor.reportsToUser(error)` to decide whether to show a generic message.
+     */
+    static callerHandles403() {
+        return new HttpContext().set(MM_CALLER_HANDLED_STATUSES, [403]);
+    }
+    /** The typed error for documented answers, otherwise the original error unchanged. */
+    static crossTenantGrantErrorOr(error, route) {
+        return toCrossTenantGrantError(error, route) ?? error;
+    }
+    // ========================================
+    // Cross-tenant grant permissions of the current tenant as a source (AB#8430)
+    // Route: {issuer}{currentTenant}/v1/crossTenantGrantPermissions (AB#8345)
+    // Contract: octo-identity-services/docs/CONCEPT-SIBLING-TENANT-GRANTS.md §6
+    // Concurrency: ETag on GET/PUT, If-Match on PUT (AB#8432, contract §6.1)
+    // Typed statuses (400/403/404/412/428) are caller-handled: no global toast, the page shows its own state.
+    // ========================================
+    /**
+     * Reads the target tenants the current tenant permits to look up its users by exact user name or e-mail
+     * and grant them access — `GET .../crossTenantGrantPermissions`. Empty = nobody (the default).
+     *
+     * @returns The list with its version tag (`etag`, `null` when the server sent none), or `null` when no identity URL
+     *   is configured. Keep the tag and pass it to {@link setCrossTenantGrantPermissions} as `ifMatch`.
+     * @throws CrossTenantGrantPermissionsError `Forbidden` (no administrator of this tenant), `NotAvailable`
+     *   (identity service without AB#8345).
+     * @throws HttpErrorResponse for every other answer (401, 5xx).
+     */
+    async getCrossTenantGrantPermissions() {
+        const baseUrl = await this.getApiBaseUrl();
+        if (!baseUrl) {
+            return null;
+        }
+        try {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + 'crossTenantGrantPermissions', { observe: 'response', context: IdentityService.callerHandlesPermissionErrors() }));
+            return { targetTenantIds: response.body?.targetTenantIds ?? [], etag: IdentityService.etagOf(response.headers) };
+        }
+        catch (error) {
+            throw toCrossTenantGrantPermissionsError(error) ?? error;
+        }
+    }
+    /**
+     * Replaces the whole list of target tenants the current tenant permits — `PUT .../crossTenantGrantPermissions`.
+     * `[]` permits nobody. A removed tenant's lookups and new grants stop with its next request; its existing grants
+     * are refused at the user's next tenant switch.
+     *
+     * Concurrency (AB#8432, contract §6.1): pass the `etag` of the list the change is based on as `ifMatch`; it is sent
+     * as `If-Match` exactly as received. When the list changed in between, the server writes nothing and answers `412`
+     * (`CrossTenantGrantPermissionsError` `Conflict`, with the current tag in `currentEtag`). Without `ifMatch` the list
+     * is replaced unconditionally (last writer wins) — unless the server requires `If-Match`
+     * (`Identity:CrossTenantGrantPermissions:RequireIfMatch`), then it answers `428` (`PreconditionRequired`).
+     *
+     * @param targetTenantIds The complete new list; `[]` permits nobody.
+     * @param ifMatch The `etag` of the list the change is based on (from {@link getCrossTenantGrantPermissions} or the
+     *   previous `set`); `null`/omitted sends no `If-Match`.
+     * @returns The stored list (trimmed, lower-cased, de-duplicated by the server) with its new `etag`, or `null` when
+     *   no identity URL is configured.
+     * @throws CrossTenantGrantPermissionsError `Invalid` (with the server's `validationErrors`: own tenant, invalid
+     *   characters, too long, too many), `Forbidden`, `NotAvailable`, `Conflict` (412), `PreconditionRequired` (428).
+     * @throws HttpErrorResponse for every other answer (401, 5xx).
+     */
+    async setCrossTenantGrantPermissions(targetTenantIds, ifMatch) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (!baseUrl) {
+            return null;
+        }
+        const body = { targetTenantIds: [...targetTenantIds] };
+        try {
+            const response = await firstValueFrom(this.httpClient.put(baseUrl + 'crossTenantGrantPermissions', body, {
+                observe: 'response',
+                context: IdentityService.callerHandlesPermissionErrors(),
+                headers: ifMatch ? new HttpHeaders({ 'If-Match': ifMatch }) : undefined
+            }));
+            return {
+                targetTenantIds: response.body?.targetTenantIds ?? body.targetTenantIds,
+                etag: IdentityService.etagOf(response.headers)
+            };
+        }
+        catch (error) {
+            throw toCrossTenantGrantPermissionsError(error) ?? error;
+        }
+    }
+    static etagOf(headers) {
+        const etag = headers?.get('ETag');
+        return etag ? etag : null;
+    }
+    static callerHandlesPermissionErrors() {
+        return new HttpContext().set(MM_CALLER_HANDLED_STATUSES, CROSS_TENANT_GRANT_PERMISSIONS_TYPED_STATUSES);
+    }
+    // ========================================
     // Data Permission Management (AB#4972)
     // ========================================
     async getDataPermissions() {
@@ -9735,5 +10172,5 @@ function provideOctoServices(octoServiceOptions) {
  * Generated bundle index. Do not edit.
  */
 
-export { AggregationInputTypesDto, AggregationTypeDto, AggregationTypesDto, AiService, ArchiveStorageHealthDto, AssetRepoGraphQlDataSource, AssetRepoService, AssociationModOptionsDto, AttributeOwnershipDto, AttributeSelectorService, AttributeValueTypeDto, BasicEnergyCarrierTypeDto, BasicEnergyDataQualityDto, BasicEnergyFacilityTypeDto, BasicEnergyProductionTypeDto, BasicEnergyStateDto, BasicLegalEntityTypeDto, BasicSalutationDto, BasicTypeOfTelephoneBasicDto, BasicTypeOfTelephoneEnhancedDto, BasicUnitOfMeasureDto, BinaryDownloadUnavailableError, BlueprintConflictResolutionDto, BlueprintUpdateModeDto, BotSecretsService, BotService, BucketAlignmentDto, BucketAlignmentInputDto, CK_UPGRADE_BLOCKED_CODE, CONFIGURATION_SERVICE, CREDENTIAL_ATTRIBUTE_NAME_SUFFIXES, CkExtensionUpdateOperationsDto, CkModelCatalogService, CkModelService, CkRollupFunctionDto, CkTypeAttributeService, CkTypeMetaData, CkTypeSelectorService, CommunicationService, DEFAULT_SECRET_STATUS_LABELS, DeepGraphDirectionDto, DeleteStrategiesDto, DeploymentState, EnergyCommunityBillingCycleDto, EnergyCommunityBillingDocumentStateDto, EnergyCommunityBillingTypeDto, EnergyCommunityTaxProcedureCreditNoteDto, EnvironmentCarbonScopeDto, EnvironmentComplianceCategoryDto, EnvironmentComplianceStatusDto, EnvironmentEnergySourceDto, EnvironmentGoalStateDto, FILES_LINKED_COUNTS_MAX, FILES_RESERVED_ROOT_NAMES, FILES_UNAVAILABLE_TTL_MS, FieldFilterOperatorsDto, FileDownloadService, FilesClientService, FilesPathError, FormulaResultTypeDto, GetCkModelByIdDocumentDto, GetCkModelByIdDtoGQL, GetCkRecordAttributesDocumentDto, GetCkRecordAttributesDtoGQL, GetCkTypeAttributesDocumentDto, GetCkTypeAttributesDtoGQL, GetCkTypeAvailableQueryColumnsDocumentDto, GetCkTypeAvailableQueryColumnsDtoGQL, GetCkTypesDocumentDto, GetCkTypesDtoGQL, GetDerivedCkTypesDocumentDto, GetDerivedCkTypesDtoGQL, GetEntitiesByCkTypeDocumentDto, GetEntitiesByCkTypeDtoGQL, GraphDirectionDto, GraphQL, GraphQLCloneIgnoredProperties, GraphQLCommonIgnoredProperties, GraphQlDataSource, GraphQlNotificationRecipientCandidatesService, HealthService, HealthStatus, IDENTITY_PROVIDER_TYPE_LABELS, IdentityProviderType, IdentityService, ImportStrategyDto, IndustryBasicAlarmPriorityDto, IndustryBasicAlarmSourceTypeDto, IndustryBasicAlarmStateDto, IndustryBasicAlarmTypeDto, IndustryBasicIecDataTypeDto, IndustryBasicMachineCapabilitiesDto, IndustryBasicMachineStateDto, IndustryEnergyDemandResponseMarketDto, IndustryEnergyDemandResponseStatusDto, IndustryEnergyTariffTypeDto, IndustryMaintenanceAggregationTypeDto, IndustryMaintenanceCostCategoryDto, IndustryMaintenanceEnergyBalanceGroupDto, IndustryMaintenanceEnergyBalanceProductDto, IndustryMaintenanceEnergyBalanceUnitDto, IndustryMaintenanceOrderPriorityDto, IndustryMaintenanceOrderStateDto, IndustryMaintenanceOrderTypeDto, IndustryMaintenanceServiceTypeDto, IndustryManufacturingFeedbackSyncStateDto, IndustryManufacturingProductionOrderItemStateDto, IndustryManufacturingProductionOrderStateDto, JobManagementService, LevelMetaData, LoggerSeverity, MethodHandlerInstanceStateDto, MethodHandlerMethodStateDto, MethodHandlerSourceDto, MethodHandlerTransportDto, ModelStateDto, MultiplicitiesDto, NOTIFICATION_COUNT_PLACEHOLDER, NOTIFICATION_DEFAULT_CRON, NOTIFICATION_MIN_INTERVAL_MS, NOTIFICATION_RECIPIENT_CANDIDATES, NOTIFICATION_SCHEDULE_TYPES, NavigationFilterModeDto, NotificationRecipientCandidatesService, NotificationRecipientRefusedError, NotificationSubscriptionService, OCTO_HANDLES_CK_UPGRADE_BLOCKED, OCTO_SILENT_ERRORS, OctoErrorLink, OctoGraphQLServiceBase, OctoSdkDemoCustomerStatusDto, OctoSdkDemoNetworkOperatorDto, OctoSdkDemoOperatingStatusDto, OctoServiceOptions, OctoServicesModule, PICKER_USERS_MAX_PAGES, PICKER_USERS_PAGE_SIZE, PagedGraphResultDto, ProgressValue, ProgressWindowService, QueryModeDto, ReportingService, RtAssociationMetaData, RuntimeEntityDialogDataSource, RuntimeEntitySelectDataSource, SECRET_DUMP_RESTORE_ERROR_DUMP_DELETED, SECRET_DUMP_RESTORE_ERROR_DUMP_KEY_MISSING, SECRET_LEGACY_V1_KEY_ID, SECRET_STATUS_WARNING_DUMP_KEY_MISSING, SECRET_STATUS_WARNING_NO_KEY_RING, SECRET_STATUS_WARNING_NO_LEGACY_V1_KEY, SECRET_VALUE_TYPE, SearchFilterTypesDto, SecretStorageFormDto, SecretUsageMatchDto, SeriesComparisonPolicyDto, SeriesResolutionSignalDto, SortOrdersDto, SystemAggregationTypesDto, SystemAiApprovalModeDto, SystemAiApprovalReasonDto, SystemAiApprovalStatusDto, SystemAiAuthModeDto, SystemAiConflictModeDto, SystemAiCredentialKindDto, SystemAiJobKindDto, SystemAiJobStatusDto, SystemAiKnowledgeKindDto, SystemAiLeaseStatusDto, SystemAiModelTierDto, SystemAiRiskLevelDto, SystemAiSessionEventKindDto, SystemAiSessionStatusDto, SystemAiSubscriptionScopeDto, SystemAiTicketScopeDto, SystemAiTicketStatusDto, SystemAiWorkspaceModeDto, SystemCommunicationAdapterSharingModeDto, SystemCommunicationCommunicationStateDto, SystemCommunicationConfigurationStateDto, SystemCommunicationDeploymentStateDto, SystemCommunicationEnvironmentDto, SystemCommunicationHelmChannelDto, SystemCommunicationHelmRepositoryPurposeDto, SystemCommunicationLifecycleModeDto, SystemCommunicationLifecycleStateDto, SystemCommunicationPipelineExecutionClassDto, SystemCommunicationPipelineExecutionStatusDto, SystemCommunicationPipelineTriggerTypeDto, SystemCommunicationPoolScaleUpPolicyDto, SystemCommunicationSignalRegistrationActionDto, SystemCommunicationSignalRegistrationStateDto, SystemEnvironmentModesDto, SystemFieldFilterOperatorDto, SystemIdentityDataPolicyEnforcementModeDto, SystemIdentityDataPolicyScopeDto, SystemIdentityIdentifierKindDto, SystemIdentityIdentifierSourceDto, SystemIdentityTokenExpirationDto, SystemIdentityTokenTypeDto, SystemIdentityTokenUsageDto, SystemIdentityTrustLevelDto, SystemMaintenanceLevelsDto, SystemNavigationFilterModesDto, SystemNotificationEventLevelsDto, SystemNotificationEventSourcesDto, SystemNotificationEventStatesDto, SystemNotificationNotificationTypesDto, SystemNotificationRenderingTypesDto, SystemQueryTypesDto, SystemSortOrdersDto, SystemStreamDataBucketAlignmentDto, SystemStreamDataCkArchiveStatusDto, SystemStreamDataCkComputedColumnResultTypeDto, SystemStreamDataCkComputedColumnStateDto, SystemStreamDataCkConflictKeyOrderDto, SystemStreamDataCkRecomputeChangeKindDto, SystemStreamDataCkRecomputeChangeSourceDto, SystemStreamDataCkRecomputeJobStateDto, SystemStreamDataCkRecomputeTriggerDto, SystemStreamDataCkRollupFunctionDto, TENANT_ID_PROVIDER, TusUploadService, UpdateTypeDto, browserTimeZone, buildTusEndpoint, ckBlockersOf, ckFirstBlockerReason, filesGraphQlErrorCode, formatNotificationCell, formatSecretStatus, isCkBlocked, isCkUpgradeBlockedGraphQlError, isCredentialLikeAttributeName, isSecretAttributeCandidate, isSecretPresent, isSecretQueryColumn, isSecretStateObject, isSecretValueType, isTextualValueType, loadAdminPickerUsers, loadPickerUsers, nameSearchTerm, notificationColumnPath, notificationErrorText, notificationRecipientStatus, notificationScheduleIssue, notificationSubscriptionHealth, notificationTimeZones, octoDataIdFromObject, parseCkUpgradeBlockedError, parseCkUpgradeBlockedGraphQlError, parseContentDispositionFileName, parseFilesProblem, placeholderList, result as possibleTypes, provideOctoServices, renderNotificationPreview, secretInputValue, secretStateFromAttribute, secretStatusOf, toAttributeNameFilter, toCamelCaseAttributeName, toSecretState, toUniqueCamelCaseNames, unknownNotificationPlaceholders, userDisplayName, userPickerText, withScheduleTimeZone };
+export { AggregationInputTypesDto, AggregationTypeDto, AggregationTypesDto, AiService, ArchiveStorageHealthDto, AssetRepoGraphQlDataSource, AssetRepoService, AssociationModOptionsDto, AttributeOwnershipDto, AttributeSelectorService, AttributeValueTypeDto, BasicEnergyCarrierTypeDto, BasicEnergyDataQualityDto, BasicEnergyFacilityTypeDto, BasicEnergyProductionTypeDto, BasicEnergyStateDto, BasicLegalEntityTypeDto, BasicSalutationDto, BasicTypeOfTelephoneBasicDto, BasicTypeOfTelephoneEnhancedDto, BasicUnitOfMeasureDto, BinaryDownloadUnavailableError, BlueprintConflictResolutionDto, BlueprintUpdateModeDto, BotSecretsService, BotService, BucketAlignmentDto, BucketAlignmentInputDto, CK_UPGRADE_BLOCKED_CODE, CONFIGURATION_SERVICE, CREDENTIAL_ATTRIBUTE_NAME_SUFFIXES, CROSS_TENANT_GRANT_PERMISSIONS_TYPED_STATUSES, CkExtensionUpdateOperationsDto, CkModelCatalogService, CkModelService, CkRollupFunctionDto, CkTypeAttributeService, CkTypeMetaData, CkTypeSelectorService, CommunicationService, CrossTenantGrantError, CrossTenantGrantPermissionsError, CrossTenantGrantProblemCodes, DEFAULT_SECRET_STATUS_LABELS, DeepGraphDirectionDto, DeleteStrategiesDto, DeploymentState, EnergyCommunityBillingCycleDto, EnergyCommunityBillingDocumentStateDto, EnergyCommunityBillingTypeDto, EnergyCommunityTaxProcedureCreditNoteDto, EnvironmentCarbonScopeDto, EnvironmentComplianceCategoryDto, EnvironmentComplianceStatusDto, EnvironmentEnergySourceDto, EnvironmentGoalStateDto, FILES_LINKED_COUNTS_MAX, FILES_RESERVED_ROOT_NAMES, FILES_UNAVAILABLE_TTL_MS, FieldFilterOperatorsDto, FileDownloadService, FilesClientService, FilesPathError, FormulaResultTypeDto, GetCkModelByIdDocumentDto, GetCkModelByIdDtoGQL, GetCkRecordAttributesDocumentDto, GetCkRecordAttributesDtoGQL, GetCkTypeAttributesDocumentDto, GetCkTypeAttributesDtoGQL, GetCkTypeAvailableQueryColumnsDocumentDto, GetCkTypeAvailableQueryColumnsDtoGQL, GetCkTypesDocumentDto, GetCkTypesDtoGQL, GetDerivedCkTypesDocumentDto, GetDerivedCkTypesDtoGQL, GetEntitiesByCkTypeDocumentDto, GetEntitiesByCkTypeDtoGQL, GraphDirectionDto, GraphQL, GraphQLCloneIgnoredProperties, GraphQLCommonIgnoredProperties, GraphQlDataSource, GraphQlNotificationRecipientCandidatesService, HealthService, HealthStatus, IDENTITY_PROVIDER_TYPE_LABELS, IdentityProviderType, IdentityService, ImportStrategyDto, IndustryBasicAlarmPriorityDto, IndustryBasicAlarmSourceTypeDto, IndustryBasicAlarmStateDto, IndustryBasicAlarmTypeDto, IndustryBasicIecDataTypeDto, IndustryBasicMachineCapabilitiesDto, IndustryBasicMachineStateDto, IndustryEnergyDemandResponseMarketDto, IndustryEnergyDemandResponseStatusDto, IndustryEnergyTariffTypeDto, IndustryMaintenanceAggregationTypeDto, IndustryMaintenanceCostCategoryDto, IndustryMaintenanceEnergyBalanceGroupDto, IndustryMaintenanceEnergyBalanceProductDto, IndustryMaintenanceEnergyBalanceUnitDto, IndustryMaintenanceOrderPriorityDto, IndustryMaintenanceOrderStateDto, IndustryMaintenanceOrderTypeDto, IndustryMaintenanceServiceTypeDto, IndustryManufacturingFeedbackSyncStateDto, IndustryManufacturingProductionOrderItemStateDto, IndustryManufacturingProductionOrderStateDto, JobManagementService, LevelMetaData, LoggerSeverity, MethodHandlerInstanceStateDto, MethodHandlerMethodStateDto, MethodHandlerSourceDto, MethodHandlerTransportDto, ModelStateDto, MultiplicitiesDto, NOTIFICATION_COUNT_PLACEHOLDER, NOTIFICATION_DEFAULT_CRON, NOTIFICATION_MIN_INTERVAL_MS, NOTIFICATION_RECIPIENT_CANDIDATES, NOTIFICATION_SCHEDULE_TYPES, NavigationFilterModeDto, NotificationRecipientCandidatesService, NotificationRecipientRefusedError, NotificationSubscriptionService, OCTO_HANDLES_CK_UPGRADE_BLOCKED, OCTO_SILENT_ERRORS, OctoErrorLink, OctoGraphQLServiceBase, OctoSdkDemoCustomerStatusDto, OctoSdkDemoNetworkOperatorDto, OctoSdkDemoOperatingStatusDto, OctoServiceOptions, OctoServicesModule, PICKER_USERS_MAX_PAGES, PICKER_USERS_PAGE_SIZE, PagedGraphResultDto, ProgressValue, ProgressWindowService, QueryModeDto, ReportingService, RoleChangeProblemCodes, RtAssociationMetaData, RuntimeEntityDialogDataSource, RuntimeEntitySelectDataSource, SECRET_DUMP_RESTORE_ERROR_DUMP_DELETED, SECRET_DUMP_RESTORE_ERROR_DUMP_KEY_MISSING, SECRET_LEGACY_V1_KEY_ID, SECRET_STATUS_WARNING_DUMP_KEY_MISSING, SECRET_STATUS_WARNING_NO_KEY_RING, SECRET_STATUS_WARNING_NO_LEGACY_V1_KEY, SECRET_VALUE_TYPE, SearchFilterTypesDto, SecretStorageFormDto, SecretUsageMatchDto, SeriesComparisonPolicyDto, SeriesResolutionSignalDto, SortOrdersDto, SystemAggregationTypesDto, SystemAiApprovalModeDto, SystemAiApprovalReasonDto, SystemAiApprovalStatusDto, SystemAiAuthModeDto, SystemAiConflictModeDto, SystemAiCredentialKindDto, SystemAiJobKindDto, SystemAiJobStatusDto, SystemAiKnowledgeKindDto, SystemAiLeaseStatusDto, SystemAiModelTierDto, SystemAiRiskLevelDto, SystemAiSessionEventKindDto, SystemAiSessionStatusDto, SystemAiSubscriptionScopeDto, SystemAiTicketScopeDto, SystemAiTicketStatusDto, SystemAiWorkspaceModeDto, SystemCommunicationAdapterSharingModeDto, SystemCommunicationCommunicationStateDto, SystemCommunicationConfigurationStateDto, SystemCommunicationDeploymentStateDto, SystemCommunicationEnvironmentDto, SystemCommunicationHelmChannelDto, SystemCommunicationHelmRepositoryPurposeDto, SystemCommunicationLifecycleModeDto, SystemCommunicationLifecycleStateDto, SystemCommunicationPipelineExecutionClassDto, SystemCommunicationPipelineExecutionStatusDto, SystemCommunicationPipelineTriggerTypeDto, SystemCommunicationPoolScaleUpPolicyDto, SystemCommunicationSignalRegistrationActionDto, SystemCommunicationSignalRegistrationStateDto, SystemEnvironmentModesDto, SystemFieldFilterOperatorDto, SystemIdentityDataPolicyEnforcementModeDto, SystemIdentityDataPolicyScopeDto, SystemIdentityIdentifierKindDto, SystemIdentityIdentifierSourceDto, SystemIdentityTokenExpirationDto, SystemIdentityTokenTypeDto, SystemIdentityTokenUsageDto, SystemIdentityTrustLevelDto, SystemMaintenanceLevelsDto, SystemNavigationFilterModesDto, SystemNotificationEventLevelsDto, SystemNotificationEventSourcesDto, SystemNotificationEventStatesDto, SystemNotificationNotificationTypesDto, SystemNotificationRenderingTypesDto, SystemQueryTypesDto, SystemSortOrdersDto, SystemStreamDataBucketAlignmentDto, SystemStreamDataCkArchiveStatusDto, SystemStreamDataCkComputedColumnResultTypeDto, SystemStreamDataCkComputedColumnStateDto, SystemStreamDataCkConflictKeyOrderDto, SystemStreamDataCkRecomputeChangeKindDto, SystemStreamDataCkRecomputeChangeSourceDto, SystemStreamDataCkRecomputeJobStateDto, SystemStreamDataCkRecomputeTriggerDto, SystemStreamDataCkRollupFunctionDto, TENANT_ID_PROVIDER, TusUploadService, UpdateTypeDto, browserTimeZone, buildTusEndpoint, ckBlockersOf, ckFirstBlockerReason, filesGraphQlErrorCode, formatNotificationCell, formatSecretStatus, isCkBlocked, isCkUpgradeBlockedGraphQlError, isCredentialLikeAttributeName, isHttpErrorLike, isSecretAttributeCandidate, isSecretPresent, isSecretQueryColumn, isSecretStateObject, isSecretValueType, isTextualValueType, loadAdminPickerUsers, loadPickerUsers, nameSearchTerm, notificationColumnPath, notificationErrorText, notificationRecipientStatus, notificationScheduleIssue, notificationSubscriptionHealth, notificationTimeZones, octoDataIdFromObject, parseCkUpgradeBlockedError, parseCkUpgradeBlockedGraphQlError, parseContentDispositionFileName, parseFilesProblem, placeholderList, result as possibleTypes, problemCodeOf, provideOctoServices, renderNotificationPreview, secretInputValue, secretStateFromAttribute, secretStatusOf, toAttributeNameFilter, toCamelCaseAttributeName, toCrossTenantGrantError, toCrossTenantGrantPermissionsError, toSecretState, toUniqueCamelCaseNames, unknownNotificationPlaceholders, userDisplayName, userPickerText, withScheduleTimeZone };
 //# sourceMappingURL=meshmakers-octo-services.mjs.map