@wildo-ai/presets-components 1.0.1

package/dist/esm/config/resources/security.resource-presets.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Security & Compliance — Resource frontend presets
+ *
+ * Domain: ORG_API_KEYS, AUDIT_LOGS, SIEM (polymorphic), AUTH_POLICY (poly),
+ * SSO_CONFIG (poly), SSO_CONNECTIONS (poly), SCIM_PROVISIONING (poly), SCIM_TOKENS (poly)
+ *
+ * SIEM layout JSX lives in this file next to `layout.refs` + `fields` so section chrome
+ * and primitive UI params stay co-located with the preset. Edit/display templates are
+ * inlined as arrow functions so `useFormTemplateContext` / `useDisplayTemplateContext`
+ * are immediately available for future conditional rendering. SIEM `layout.defaultChromeMode.edit`
+ * is `SETTINGS_ROW`; only sections that differ (e.g. status toggle) set `chromeMode` explicitly.
+ * Other resources here use field-level UI only until they need custom sections; enum badges use
+ * `showDescription: true` like billing.
+ */
+import type { ResourceUIBehavior } from '@wildo-ai/saas-frontend-lib';
+export declare function buildSecurityMainPresets(): Partial<ResourceUIBehavior>;
+export declare function buildSecurityAdminPresets(main: Partial<ResourceUIBehavior>): Partial<ResourceUIBehavior>;
+//# sourceMappingURL=security.resource-presets.d.ts.map

package/dist/esm/config/resources/security.resource-presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.resource-presets.d.ts","sourceRoot":"","sources":["../../../../src/config/resources/security.resource-presets.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAgftE,wBAAgB,wBAAwB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CA2XtE;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA2NxG"}

package/dist/esm/config/resources/security.resource-presets.js

@@ -0,0 +1,543 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { resourceUIBehavior, resourceUIBehaviorFrom, polymorphicResourceUIBehavior, polymorphicResourceUIBehaviorFrom, StandardIconReference, DisplayField, DisplayLayout, FormField, FormLayout, ObjectScope, Section, SummaryLayout, useFormTemplateContext, useDisplayTemplateContext, ResourceLayoutPreset_Create_SamlWizard, ResourceLayoutPreset_Read_SsoSaml, } from '@wildo-ai/saas-frontend-lib';
+import { BadgeSemanticVariant, BooleanDisplayMode, BooleanEditMode, BooleanLabellingValue, SectionMode, EditChromeMode, EnumDisplayMode, ShowWhenOperator, StringDisplayMode, } from '@wildo-ai/zod-decorators';
+import { Key, ShieldCheck, ShieldAlert, Fingerprint, UserCog, KeyRound, Radio, AlertTriangle, } from 'lucide-react';
+import { CoreResourceType as R, CoreResourceOperation as Op, ApiKeyStatus, OrgApiKeys_Operations, AuditLogs_Operations, SiemExportConfig_Operations, SiemDeliveryDlq_Operations, SsoConfig_Operations, SsoConnection_Operations, ScimProvisioningConfig_Operations, ScimTokens_Operations, orgApiKeysResourceConfiguration_InitializationFactory as orgApiKeysFactory, auditLogsResourceConfiguration_InitializationFactory as auditLogsFactory, siemExportConfigPolymorphicFactories, siemDeliveryDlqPolymorphicFactories, authPolicyPolymorphicFactories, ssoConfigPolymorphicFactories, ssoConnectionPolymorphicFactories, scimProvisioningConfigPolymorphicFactories, scimTokensPolymorphicFactories, ApiKeyOrganizationSchema, AuditableEvent_BaseSchema, AuthPolicyBaseSchema, SiemExportConfigBaseSchema, SiemDeliveryDlqBaseSchema, SiemDeliveryDlqStatus, SsoConfigBaseSchema, SsoConnectionBaseSchema, ScimProvisioningConfigBaseSchema, ScimTokenBaseSchema, SSOProtocol, SIEMAuthMethod, } from '@wildo-ai/saas-models';
+import { addressable, notAddressable } from './resource.config.utils.js';
+// ── SIEM export config — field overrides (shared across polymorphic variants) ─
+const siemExportFieldOverrides = {
+    enabled: (schema) => schema.shape.enabled.booleanUI({
+        labellingValue: BooleanLabellingValue.ENABLED_DISABLED,
+        display: { displayMode: BooleanDisplayMode.CHECKMARK, showDescription: true },
+        edit: { editMode: BooleanEditMode.SWITCH, showDescription: true },
+    }),
+    webhookUrl: (schema) => schema.shape.webhookUrl.stringUI({
+        display: { displayMode: StringDisplayMode.COPY, showDescription: true },
+        edit: { showDescription: true },
+    }),
+    authMethod: (schema) => schema.shape.authMethod.enumUI({
+        display: { displayMode: EnumDisplayMode.BADGE, showDescription: true },
+        edit: { showDescription: true, tooltip: true },
+    }),
+    eventFormat: (schema) => schema.shape.eventFormat.enumUI({
+        display: { displayMode: EnumDisplayMode.BADGE, showDescription: true },
+        edit: { showDescription: true },
+    }),
+    includeRawEventData: (schema) => schema.shape.includeRawEventData.booleanUI({
+        labellingValue: BooleanLabellingValue.YES_NO,
+        display: { displayMode: BooleanDisplayMode.CHECKMARK, showDescription: true },
+        edit: { editMode: BooleanEditMode.SWITCH, showDescription: true },
+    }),
+    includeDeviceContext: (schema) => schema.shape.includeDeviceContext.booleanUI({
+        labellingValue: BooleanLabellingValue.YES_NO,
+        display: { displayMode: BooleanDisplayMode.CHECKMARK, showDescription: true },
+        edit: { editMode: BooleanEditMode.SWITCH, showDescription: true },
+    }),
+    authCredential: (schema) => schema.shape.authCredential.showWhen({
+        conditions: { field: 'authMethod', value: SIEMAuthMethod.NONE, operator: ShowWhenOperator.NOT_EQUALS },
+    }),
+    authHeaderName: (schema) => schema.shape.authHeaderName.showWhen({
+        conditions: { field: 'authMethod', value: SIEMAuthMethod.API_KEY_HEADER },
+    }),
+};
+function OrgApiKeyDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsxs(Section, { name: "overview", appearance: SectionMode.CARD, children: [_jsx(DisplayField, { name: "name" }), _jsx(DisplayField, { name: "scope" }), _jsx(DisplayField, { name: "status" }), _jsx(DisplayField, { name: "keyPrefix" })] }), _jsxs(Section, { name: "access", children: [_jsx(DisplayField, { name: "roles" }), _jsx(DisplayField, { name: "description" })] }), _jsxs(Section, { name: "lifecycle", children: [_jsx(DisplayField, { name: "expiresAt" }), _jsx(DisplayField, { name: "lastUsedAt" }), _jsx(DisplayField, { name: "createdAt" })] })] }));
+}
+function OrgApiKeyEditTemplate() {
+    return (_jsxs(FormLayout, { children: [_jsxs(Section, { name: "overview", appearance: SectionMode.CARD, children: [_jsx(FormField, { name: "name" }), _jsx(FormField, { name: "status" }), _jsx(FormField, { name: "expiresAt" })] }), _jsxs(Section, { name: "access", children: [_jsx(FormField, { name: "roles" }), _jsx(FormField, { name: "description" })] })] }));
+}
+function OrgApiKeySummaryTemplate() {
+    return (_jsxs(SummaryLayout, { className: "flex flex-col gap-2 text-sm", children: [_jsx("div", { className: "font-medium leading-tight", children: _jsx(DisplayField, { name: "name", hideLabel: true }) }), _jsxs("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-1", children: [_jsx(DisplayField, { name: "scope" }), _jsx(DisplayField, { name: "status" }), _jsx(DisplayField, { name: "keyPrefix" })] })] }));
+}
+function AuditLogDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsxs(Section, { name: "overview", appearance: SectionMode.CARD, children: [_jsx(DisplayField, { name: "eventType" }), _jsx(DisplayField, { name: "eventCategory" }), _jsx(DisplayField, { name: "severity" }), _jsx(DisplayField, { name: "riskLevel" })] }), _jsxs(Section, { name: "actors", children: [_jsx(DisplayField, { name: "userId" }), _jsx(DisplayField, { name: "organizationId" })] }), _jsxs(Section, { name: "payload", children: [_jsx(DisplayField, { name: "eventData" }), _jsx(DisplayField, { name: "createdAt" })] })] }));
+}
+function AuditLogSummaryTemplate() {
+    return (_jsxs(SummaryLayout, { className: "flex flex-col gap-2 text-sm", children: [_jsx("div", { className: "font-medium leading-tight", children: _jsx(DisplayField, { name: "eventType", hideLabel: true }) }), _jsxs("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-1", children: [_jsx(DisplayField, { name: "eventCategory" }), _jsx(DisplayField, { name: "severity" }), _jsx(DisplayField, { name: "createdAt" })] })] }));
+}
+function SiemExportSummaryTemplate() {
+    return (_jsx(SummaryLayout, { className: "flex flex-wrap items-center gap-x-3 gap-y-1 text-sm", children: _jsx(DisplayField, { name: "enabled" }) }));
+}
+function SiemDlqDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsxs(Section, { name: "overview", appearance: SectionMode.CARD, children: [_jsx(DisplayField, { name: "status" }), _jsx(DisplayField, { name: "failureReason" })] }), _jsxs(Section, { name: "delivery", children: [_jsx(DisplayField, { name: "eventId" }), _jsx(DisplayField, { name: "failureCount" }), _jsx(DisplayField, { name: "lastAttemptAt" }), _jsx(DisplayField, { name: "nextRetryAt" })] }), _jsx(Section, { name: "payload", children: _jsx(DisplayField, { name: "eventPayload" }) })] }));
+}
+function SiemDlqSummaryTemplate() {
+    return (_jsxs(SummaryLayout, { className: "flex flex-col gap-2 text-sm", children: [_jsx("div", { className: "font-medium leading-tight", children: _jsx(DisplayField, { name: "failureReason", hideLabel: true }) }), _jsx("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-1", children: _jsx(DisplayField, { name: "status" }) })] }));
+}
+function AuthPolicyDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsx(Section, { name: "requirements", appearance: SectionMode.CARD, children: _jsxs(ObjectScope, { name: "requirements", children: [_jsx(DisplayField, { name: "minimumAuthLevel" }), _jsx(DisplayField, { name: "passwordlessAllowed" }), _jsx(DisplayField, { name: "passkeyEnabled" }), _jsx(DisplayField, { name: "passkeyRequiredForAdmins" }), _jsx(DisplayField, { name: "passkeyExemptFromMFA" })] }) }), _jsxs(Section, { name: "lifecycle", children: [_jsx(DisplayField, { name: "createdAt" }), _jsx(DisplayField, { name: "updatedAt" })] })] }));
+}
+function AuthPolicySummaryTemplate() {
+    return (_jsx(SummaryLayout, { className: "flex flex-wrap items-center gap-x-3 gap-y-1 text-sm", children: _jsx(ObjectScope, { name: "requirements", children: _jsx(DisplayField, { name: "minimumAuthLevel" }) }) }));
+}
+function SsoConfigDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsx(Section, { name: "enforcement", appearance: SectionMode.CARD, children: _jsxs(ObjectScope, { name: "enforcement", children: [_jsx(DisplayField, { name: "requireSSO" }), _jsx(DisplayField, { name: "allowPasswordFallback" }), _jsx(DisplayField, { name: "enforceForAdmins" }), _jsx(DisplayField, { name: "graceLoginAttempts" })] }) }), _jsx(Section, { name: "domains", children: _jsxs(ObjectScope, { name: "domains", children: [_jsx(DisplayField, { name: "verifiedDomains" }), _jsx(DisplayField, { name: "ssoEnabledDomains" }), _jsx(DisplayField, { name: "domainHinting" }), _jsx(DisplayField, { name: "allowExternalDomains" }), _jsx(DisplayField, { name: "domainVerificationStatus" })] }) }), _jsx(Section, { name: "provisioning", children: _jsxs(ObjectScope, { name: "provisioning", children: [_jsx(DisplayField, { name: "autoCreateUsers" }), _jsx(DisplayField, { name: "autoUpdateUsers" }), _jsx(DisplayField, { name: "autoDeactivateUsers" }), _jsx(DisplayField, { name: "defaultRole" }), _jsx(DisplayField, { name: "requiredAttributes" }), _jsx(DisplayField, { name: "syncFrequencyHours" })] }) }), _jsx(Section, { name: "session", children: _jsxs(ObjectScope, { name: "sessionSettings", children: [_jsx(DisplayField, { name: "ssoSessionDurationMinutes" }), _jsx(DisplayField, { name: "requireReauthForSensitive" }), _jsx(DisplayField, { name: "singleLogoutEnabled" }), _jsx(DisplayField, { name: "maxConcurrentSessions" })] }) }), _jsx(Section, { name: "audit", children: _jsxs(ObjectScope, { name: "auditConfig", children: [_jsx(DisplayField, { name: "logAllSSOEvents" }), _jsx(DisplayField, { name: "logProviderSwitching" }), _jsx(DisplayField, { name: "logRoleMapping" }), _jsx(DisplayField, { name: "complianceReporting" }), _jsx(DisplayField, { name: "retentionDays" })] }) }), _jsx(Section, { name: "emergency", children: _jsxs(ObjectScope, { name: "emergencyAccess", children: [_jsx(DisplayField, { name: "enabled" }), _jsx(DisplayField, { name: "breakGlassAccounts" }), _jsx(DisplayField, { name: "requireApproval" }), _jsx(DisplayField, { name: "maxDurationHours" }), _jsx(DisplayField, { name: "auditLevel" })] }) }), _jsxs(Section, { name: "oauth", children: [_jsxs(ObjectScope, { name: "oauth2ProviderRestrictions", children: [_jsx(DisplayField, { name: "allowedProviders" }), _jsx(DisplayField, { name: "blockedProviders" }), _jsx(DisplayField, { name: "requireEnterpriseSSOOnly" })] }), _jsx(DisplayField, { name: "socialCredentialOverrides" })] })] }));
+}
+function SsoConfigSummaryTemplate() {
+    return (_jsx(SummaryLayout, { className: "flex flex-wrap items-center gap-x-3 gap-y-1 text-sm", children: _jsx(ObjectScope, { name: "enforcement", children: _jsx(DisplayField, { name: "requireSSO" }) }) }));
+}
+function SsoConnectionDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsxs(Section, { name: "overview", appearance: SectionMode.CARD, children: [_jsx(DisplayField, { name: "displayName" }), _jsx(DisplayField, { name: "protocol" }), _jsx(DisplayField, { name: "enabled" }), _jsx(DisplayField, { name: "isDefault" }), _jsx(DisplayField, { name: "externalProviderId" })] }), _jsx(Section, { name: "oidc", children: _jsxs(ObjectScope, { name: "oidc", children: [_jsx(DisplayField, { name: "templateMode" }), _jsx(DisplayField, { name: "discoveryUrl" }), _jsx(DisplayField, { name: "issuer" }), _jsx(DisplayField, { name: "authorizationEndpoint" }), _jsx(DisplayField, { name: "tokenEndpoint" }), _jsx(DisplayField, { name: "userInfoEndpoint" }), _jsx(DisplayField, { name: "jwksUri" }), _jsx(DisplayField, { name: "endSessionEndpoint" }), _jsx(DisplayField, { name: "clientId" }), _jsx(DisplayField, { name: "scopes" }), _jsx(DisplayField, { name: "responseType" }), _jsx(DisplayField, { name: "responseMode" }), _jsx(DisplayField, { name: "validateIssuer" }), _jsx(DisplayField, { name: "validateAudience" }), _jsx(DisplayField, { name: "pkceEnabled" }), _jsx(DisplayField, { name: "pkceMethod" }), _jsx(DisplayField, { name: "prompt" }), _jsx(DisplayField, { name: "claimsMapping" }), _jsx(DisplayField, { name: "auditSettings" })] }) }), _jsx(Section, { name: "saml", children: _jsxs(ObjectScope, { name: "saml", children: [_jsx(DisplayField, { name: "entityId" }), _jsx(DisplayField, { name: "ssoUrl" }), _jsx(DisplayField, { name: "sloUrl" }), _jsx(DisplayField, { name: "x509CertificatePem" }), _jsx(DisplayField, { name: "attributeMapping" }), _jsx(DisplayField, { name: "signRequests" }), _jsx(DisplayField, { name: "wantAssertionsSigned" }), _jsx(DisplayField, { name: "allowedClockDrift" }), _jsx(DisplayField, { name: "forceAuthn" }), _jsx(DisplayField, { name: "maxAuthAge" }), _jsx(DisplayField, { name: "nameIdFormat" }), _jsx(DisplayField, { name: "allowIdpInitiated" }), _jsx(DisplayField, { name: "auditSettings" })] }) }), _jsxs(Section, { name: "provisioning", children: [_jsx(DisplayField, { name: "autoCreateUsers" }), _jsx(DisplayField, { name: "autoVerifyEmail" }), _jsx(DisplayField, { name: "bypassAppMFA" }), _jsx(DisplayField, { name: "defaultRole" }), _jsx(DisplayField, { name: "allowedDomains" }), _jsx(DisplayField, { name: "roleMapping" }), _jsx(DisplayField, { name: "groupMapping" })] })] }));
+}
+function SsoConnectionSummaryTemplate() {
+    return (_jsxs(SummaryLayout, { className: "flex flex-col gap-2 text-sm", children: [_jsx("div", { className: "font-medium leading-tight", children: _jsx(DisplayField, { name: "displayName", hideLabel: true }) }), _jsxs("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-1", children: [_jsx(DisplayField, { name: "protocol" }), _jsx(DisplayField, { name: "enabled" })] })] }));
+}
+function ScimProvisioningDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsxs(Section, { name: "overview", appearance: SectionMode.CARD, children: [_jsx(DisplayField, { name: "scimEnabled" }), _jsx(DisplayField, { name: "autoCreateUsers" }), _jsx(DisplayField, { name: "autoVerifyEmail" }), _jsx(DisplayField, { name: "autoDeactivateUsers" }), _jsx(DisplayField, { name: "defaultRole" })] }), _jsx(Section, { name: "mapping", children: _jsx(DisplayField, { name: "attributeMapping" }) }), _jsxs(Section, { name: "lifecycle", children: [_jsx(DisplayField, { name: "createdAt" }), _jsx(DisplayField, { name: "updatedAt" })] })] }));
+}
+function ScimProvisioningSummaryTemplate() {
+    return (_jsx(SummaryLayout, { className: "flex flex-wrap items-center gap-x-3 gap-y-1 text-sm", children: _jsx(DisplayField, { name: "scimEnabled" }) }));
+}
+function ScimTokenDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsxs(Section, { name: "overview", appearance: SectionMode.CARD, children: [_jsx(DisplayField, { name: "displayName" }), _jsx(DisplayField, { name: "isActive" }), _jsx(DisplayField, { name: "createdByUserId" })] }), _jsxs(Section, { name: "lifecycle", children: [_jsx(DisplayField, { name: "lastUsedAt" }), _jsx(DisplayField, { name: "expiresAt" }), _jsx(DisplayField, { name: "createdAt" })] })] }));
+}
+function ScimTokenSummaryTemplate() {
+    return (_jsxs(SummaryLayout, { className: "flex flex-col gap-2 text-sm", children: [_jsx("div", { className: "font-medium leading-tight", children: _jsx(DisplayField, { name: "displayName", hideLabel: true }) }), _jsx("div", { className: "flex flex-wrap items-center gap-x-3 gap-y-1", children: _jsx(DisplayField, { name: "isActive" }) })] }));
+}
+export function buildSecurityMainPresets() {
+    return {
+        [R.ORG_API_KEYS]: resourceUIBehavior(orgApiKeysFactory, ApiKeyOrganizationSchema, ({ schema, schemaShape, opsVariantResolver }) => ({
+            icon: Key,
+            layout: {
+                refs: {
+                    sections: ['overview', 'access', 'lifecycle'],
+                },
+                display: OrgApiKeyDisplayTemplate,
+                summary: OrgApiKeySummaryTemplate,
+                edit: OrgApiKeyEditTemplate,
+            },
+            fields: {
+                status: schemaShape.status.enumUI({
+                    display: { displayMode: EnumDisplayMode.BADGE, showDescription: true },
+                    edit: { showDescription: true },
+                    values: {
+                        [ApiKeyStatus.ACTIVE]: { color: BadgeSemanticVariant.SUCCESS },
+                        [ApiKeyStatus.INACTIVE]: { color: BadgeSemanticVariant.SECONDARY },
+                        [ApiKeyStatus.EXPIRED]: { color: BadgeSemanticVariant.WARNING },
+                    },
+                }),
+            },
+            getFrontendResourceLabel: ({ currentObject }) => currentObject.name,
+            views: [
+                [Op.READ, notAddressable()],
+                [Op.LIST, addressable()],
+                [Op.CREATE, notAddressable()],
+                [Op.SEARCH, notAddressable()],
+                [Op.DELETE, notAddressable()],
+                [OrgApiKeys_Operations.ROTATE, notAddressable()],
+                [OrgApiKeys_Operations.REGENERATE, notAddressable()],
+                [OrgApiKeys_Operations.DEACTIVATE, notAddressable()],
+                [OrgApiKeys_Operations.REACTIVATE, notAddressable()],
+                [OrgApiKeys_Operations.EXTEND_EXPIRY, notAddressable()],
+                [OrgApiKeys_Operations.USAGE_STATS, notAddressable()],
+            ],
+        })),
+        [R.AUDIT_LOGS]: resourceUIBehavior(auditLogsFactory, AuditableEvent_BaseSchema, ({ schema, schemaShape, opsVariantResolver }) => ({
+            icon: ShieldCheck,
+            getFrontendResourceLabel: ({ currentObject }) => `${currentObject.eventType ?? 'Audit Event'} — ${currentObject.createdAt?.toISOString?.() ?? ''}`,
+            layout: {
+                refs: {
+                    sections: ['overview', 'actors', 'payload'],
+                },
+                display: AuditLogDisplayTemplate,
+                summary: AuditLogSummaryTemplate,
+            },
+            views: [
+                [Op.READ, notAddressable()],
+                [Op.LIST, addressable()],
+                [Op.SEARCH, addressable()],
+                [AuditLogs_Operations.EXPORT_AUDIT_LOGS, notAddressable()],
+            ],
+        })),
+        ...polymorphicResourceUIBehavior({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SIEM_EXPORT_CONFIG },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SIEM_EXPORT_CONFIG },
+            ],
+        }, siemExportConfigPolymorphicFactories[R.ORGANIZATION_SIEM_EXPORT_CONFIG], SiemExportConfigBaseSchema, ({ schema, schemaShape, opsVariantResolver }) => ({
+            icon: Radio,
+            layout: {
+                refs: {
+                    sections: ['status', 'destination', 'authentication', 'format', 'advanced'],
+                },
+                defaultChromeMode: {
+                    edit: EditChromeMode.SETTINGS_ROW,
+                },
+                edit: () => {
+                    const { isExisting, operationType } = useFormTemplateContext();
+                    return (_jsxs(FormLayout, { children: [_jsx(Section, { name: "status", appearance: SectionMode.CARD, chromeMode: EditChromeMode.INLINE, children: _jsx(FormField, { name: "enabled" }) }), _jsx(Section, { name: "destination", appearance: SectionMode.CARD, children: _jsx(FormField, { name: "webhookUrl" }) }), _jsxs(Section, { name: "authentication", children: [_jsx(FormField, { name: "authMethod" }), _jsx(FormField, { name: "authCredential" }), _jsx(FormField, { name: "authHeaderName" })] }), _jsxs(Section, { name: "format", children: [_jsx(FormField, { name: "eventFormat" }), _jsxs(ObjectScope, { name: "eventFilter", children: [_jsx(FormField, { name: "categories" }), _jsx(FormField, { name: "severityMinimum" }), _jsx(FormField, { name: "specificEventTypes" })] })] }), _jsxs(Section, { name: "advanced", appearance: SectionMode.COLLAPSIBLE, defaultFocus: false, children: [_jsxs(ObjectScope, { name: "delivery", children: [_jsx(FormField, { name: "batchSize" }), _jsx(FormField, { name: "batchWindowSeconds" }), _jsx(FormField, { name: "retryAttempts" }), _jsx(FormField, { name: "retryBackoffSeconds" }), _jsx(FormField, { name: "timeoutSeconds" })] }), _jsx(FormField, { name: "customHeaders" }), _jsx(FormField, { name: "includeRawEventData" }), _jsx(FormField, { name: "includeDeviceContext" })] })] }));
+                },
+                display: () => {
+                    const { data, isLoading } = useDisplayTemplateContext();
+                    return (_jsxs(DisplayLayout, { children: [_jsx(Section, { name: "status", appearance: SectionMode.CARD, children: _jsx(DisplayField, { name: "enabled" }) }), _jsx(Section, { name: "destination", appearance: SectionMode.CARD, children: _jsx(DisplayField, { name: "webhookUrl" }) }), _jsxs(Section, { name: "authentication", children: [_jsx(DisplayField, { name: "authMethod" }), _jsx(DisplayField, { name: "authCredential" }), _jsx(DisplayField, { name: "authHeaderName" })] }), _jsxs(Section, { name: "format", children: [_jsx(DisplayField, { name: "eventFormat" }), _jsxs(ObjectScope, { name: "eventFilter", children: [_jsx(DisplayField, { name: "categories" }), _jsx(DisplayField, { name: "severityMinimum" }), _jsx(DisplayField, { name: "specificEventTypes" })] })] }), _jsxs(Section, { name: "advanced", appearance: SectionMode.COLLAPSIBLE, defaultFocus: false, children: [_jsxs(ObjectScope, { name: "delivery", children: [_jsx(DisplayField, { name: "batchSize" }), _jsx(DisplayField, { name: "batchWindowSeconds" }), _jsx(DisplayField, { name: "retryAttempts" }), _jsx(DisplayField, { name: "retryBackoffSeconds" }), _jsx(DisplayField, { name: "timeoutSeconds" })] }), _jsx(DisplayField, { name: "customHeaders" }), _jsx(DisplayField, { name: "includeRawEventData" }), _jsx(DisplayField, { name: "includeDeviceContext" })] })] }));
+                },
+                summary: SiemExportSummaryTemplate,
+            },
+            fields: {
+                enabled: siemExportFieldOverrides.enabled(schema),
+                webhookUrl: siemExportFieldOverrides.webhookUrl(schema),
+                authMethod: siemExportFieldOverrides.authMethod(schema),
+                eventFormat: siemExportFieldOverrides.eventFormat(schema),
+                includeRawEventData: siemExportFieldOverrides.includeRawEventData(schema),
+                includeDeviceContext: siemExportFieldOverrides.includeDeviceContext(schema),
+                authCredential: siemExportFieldOverrides.authCredential(schema),
+                authHeaderName: siemExportFieldOverrides.authHeaderName(schema),
+            },
+            views: [
+                [Op.READ, addressable()],
+                [SiemExportConfig_Operations.TEST_WEBHOOK, notAddressable()],
+                [SiemExportConfig_Operations.GET_DELIVERY_STATUS, notAddressable()],
+            ],
+            variantOverrides: {
+                [R.APPLICATION]: { views: [] },
+            },
+        })),
+        ...polymorphicResourceUIBehavior({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SIEM_DELIVERY_DLQ },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SIEM_DELIVERY_DLQ },
+            ],
+        }, siemDeliveryDlqPolymorphicFactories[R.ORGANIZATION_SIEM_DELIVERY_DLQ], SiemDeliveryDlqBaseSchema, ({ schema, schemaShape, opsVariantResolver }) => ({
+            icon: AlertTriangle,
+            layout: {
+                refs: {
+                    sections: ['overview', 'delivery', 'payload'],
+                },
+                display: SiemDlqDisplayTemplate,
+                summary: SiemDlqSummaryTemplate,
+            },
+            fields: {
+                // Same billing-style visibility as ORG_API_KEYS / SSO protocol — list rows stay compact; descriptions come from schema metadata when present.
+                status: schema.shape.status.enumUI({
+                    display: { displayMode: EnumDisplayMode.BADGE, showDescription: true },
+                    edit: { showDescription: true },
+                    values: {
+                        [SiemDeliveryDlqStatus.PENDING_RETRY]: { color: BadgeSemanticVariant.WARNING },
+                        [SiemDeliveryDlqStatus.EXHAUSTED]: { color: BadgeSemanticVariant.DESTRUCTIVE },
+                        [SiemDeliveryDlqStatus.DELIVERED]: { color: BadgeSemanticVariant.SUCCESS },
+                    },
+                }),
+            },
+            getFrontendResourceLabel: ({ currentObject }) => currentObject.failureReason,
+            views: [
+                [Op.LIST, addressable()],
+                [SiemDeliveryDlq_Operations.RETRY_SINGLE, notAddressable()],
+                [SiemDeliveryDlq_Operations.RETRY_ALL, notAddressable()],
+                [SiemDeliveryDlq_Operations.PURGE_ALL, notAddressable()],
+            ],
+            variantOverrides: {
+                [R.APPLICATION]: { views: [] },
+            },
+        })),
+        ...polymorphicResourceUIBehavior({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_AUTH_POLICY },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_AUTH_POLICY },
+            ],
+        }, authPolicyPolymorphicFactories[R.ORGANIZATION_AUTH_POLICY], AuthPolicyBaseSchema, ({ schema, schemaShape, opsVariantResolver }) => ({
+            icon: ShieldAlert,
+            layout: {
+                refs: {
+                    sections: ['requirements', 'lifecycle'],
+                },
+                display: AuthPolicyDisplayTemplate,
+                summary: AuthPolicySummaryTemplate,
+            },
+            views: [
+                [Op.READ, addressable()],
+            ],
+            variantOverrides: {
+                [R.APPLICATION]: { views: [] },
+            },
+        })),
+        ...polymorphicResourceUIBehavior({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SSO_CONFIG },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SSO_CONFIG },
+            ],
+        }, ssoConfigPolymorphicFactories[R.ORGANIZATION_SSO_CONFIG], SsoConfigBaseSchema, ({ schema, schemaShape, opsVariantResolver }) => ({
+            icon: StandardIconReference.LOCK,
+            layout: {
+                refs: {
+                    sections: ['enforcement', 'domains', 'provisioning', 'session', 'audit', 'emergency', 'oauth'],
+                },
+                display: SsoConfigDisplayTemplate,
+                summary: SsoConfigSummaryTemplate,
+            },
+            views: [
+                [Op.READ, addressable()],
+                [SsoConfig_Operations.ADD_DOMAIN, notAddressable()],
+                [SsoConfig_Operations.VERIFY_DOMAIN, notAddressable()],
+                [SsoConfig_Operations.REMOVE_DOMAIN, notAddressable()],
+            ],
+            variantOverrides: {
+                [R.APPLICATION]: { views: [] },
+            },
+        })),
+        ...polymorphicResourceUIBehavior({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SSO_CONNECTIONS },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SSO_CONNECTIONS },
+            ],
+        }, ssoConnectionPolymorphicFactories[R.ORGANIZATION_SSO_CONNECTIONS], SsoConnectionBaseSchema, ({ schema, schemaShape, opsVariantResolver }) => ({
+            icon: Fingerprint,
+            layout: {
+                refs: {
+                    sections: ['overview', 'oidc', 'saml', 'provisioning'],
+                },
+                display: SsoConnectionDisplayTemplate,
+                summary: SsoConnectionSummaryTemplate,
+            },
+            fields: {
+                protocol: schema.shape.protocol.enumUI({
+                    display: { displayMode: EnumDisplayMode.BADGE, showDescription: true },
+                    edit: { showDescription: true },
+                    values: {
+                        [SSOProtocol.OIDC]: { color: BadgeSemanticVariant.INFO },
+                        [SSOProtocol.SAML]: { color: BadgeSemanticVariant.SECONDARY },
+                    },
+                }),
+            },
+            getFrontendResourceLabel: ({ currentObject }) => currentObject.displayName,
+            views: [
+                [Op.LIST, addressable()],
+                [SsoConnection_Operations.TEST_CONNECTION, addressable({
+                        customView: ResourceLayoutPreset_Read_SsoSaml,
+                    })],
+                [SsoConnection_Operations.DISCOVER_ENDPOINTS, addressable({
+                        customView: ResourceLayoutPreset_Create_SamlWizard,
+                    })],
+            ],
+            variantOverrides: {
+                [R.APPLICATION]: { views: [] },
+            },
+        })),
+        ...polymorphicResourceUIBehavior({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SCIM_PROVISIONING_CONFIG },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SCIM_PROVISIONING_CONFIG },
+            ],
+        }, scimProvisioningConfigPolymorphicFactories[R.ORGANIZATION_SCIM_PROVISIONING_CONFIG], ScimProvisioningConfigBaseSchema, ({ schema, schemaShape, opsVariantResolver }) => ({
+            icon: UserCog,
+            layout: {
+                refs: {
+                    sections: ['overview', 'mapping', 'lifecycle'],
+                },
+                display: ScimProvisioningDisplayTemplate,
+                summary: ScimProvisioningSummaryTemplate,
+            },
+            views: [
+                [Op.READ, addressable()],
+                [ScimProvisioningConfig_Operations.TEST_SCIM_CONNECTION, notAddressable()],
+                [ScimProvisioningConfig_Operations.GET_PROVISIONING_STATS, notAddressable()],
+            ],
+            variantOverrides: {
+                [R.APPLICATION]: { views: [] },
+            },
+        })),
+        ...polymorphicResourceUIBehavior({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SCIM_TOKENS },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SCIM_TOKENS },
+            ],
+        }, scimTokensPolymorphicFactories[R.ORGANIZATION_SCIM_TOKENS], ScimTokenBaseSchema, ({ schema, schemaShape, opsVariantResolver }) => ({
+            icon: KeyRound,
+            getFrontendResourceLabel: ({ currentObject }) => currentObject.displayName,
+            layout: {
+                refs: {
+                    sections: ['overview', 'lifecycle'],
+                },
+                display: ScimTokenDisplayTemplate,
+                summary: ScimTokenSummaryTemplate,
+            },
+            views: [
+                [Op.LIST, addressable()],
+                [ScimTokens_Operations.GENERATE_TOKEN, notAddressable()],
+                [ScimTokens_Operations.REVOKE_TOKEN, notAddressable()],
+                [ScimTokens_Operations.ROTATE_TOKEN, notAddressable()],
+            ],
+            variantOverrides: {
+                [R.APPLICATION]: { views: [] },
+            },
+        })),
+    };
+}
+export function buildSecurityAdminPresets(main) {
+    return {
+        ...polymorphicResourceUIBehaviorFrom({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SIEM_EXPORT_CONFIG },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SIEM_EXPORT_CONFIG },
+            ],
+        }, siemExportConfigPolymorphicFactories[R.ORGANIZATION_SIEM_EXPORT_CONFIG], main, ({ base }) => ({
+            icon: base.icon,
+            layout: base.layout,
+            fields: base.fields,
+            views: [
+                [Op.READ, addressable()],
+                [SiemExportConfig_Operations.TEST_WEBHOOK, notAddressable()],
+                [SiemExportConfig_Operations.GET_DELIVERY_STATUS, notAddressable()],
+            ],
+            variantOverrides: {
+                [R.ORGANIZATIONS]: {
+                    views: [[Op.READ, notAddressable()]],
+                },
+            },
+        })),
+        ...polymorphicResourceUIBehaviorFrom({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SIEM_DELIVERY_DLQ },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SIEM_DELIVERY_DLQ },
+            ],
+        }, siemDeliveryDlqPolymorphicFactories[R.ORGANIZATION_SIEM_DELIVERY_DLQ], main, ({ base }) => ({
+            icon: base.icon,
+            layout: base.layout,
+            fields: base.fields,
+            getFrontendResourceLabel: base.getFrontendResourceLabel,
+            views: [
+                [Op.LIST, addressable()],
+                [SiemDeliveryDlq_Operations.RETRY_SINGLE, notAddressable()],
+                [SiemDeliveryDlq_Operations.RETRY_ALL, notAddressable()],
+                [SiemDeliveryDlq_Operations.PURGE_ALL, notAddressable()],
+            ],
+            variantOverrides: {
+                [R.ORGANIZATIONS]: {
+                    views: [
+                        [Op.READ, notAddressable()],
+                        [Op.LIST, notAddressable()],
+                    ],
+                },
+            },
+        })),
+        ...polymorphicResourceUIBehaviorFrom({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_AUTH_POLICY },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_AUTH_POLICY },
+            ],
+        }, authPolicyPolymorphicFactories[R.ORGANIZATION_AUTH_POLICY], main, ({ base }) => ({
+            icon: base.icon,
+            layout: base.layout,
+            views: [
+                [Op.READ, addressable()],
+            ],
+            variantOverrides: {
+                [R.ORGANIZATIONS]: {
+                    views: [
+                        [Op.READ, notAddressable()],
+                    ],
+                },
+            },
+        })),
+        ...polymorphicResourceUIBehaviorFrom({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SSO_CONFIG },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SSO_CONFIG },
+            ],
+        }, ssoConfigPolymorphicFactories[R.ORGANIZATION_SSO_CONFIG], main, ({ base }) => ({
+            icon: base.icon,
+            layout: base.layout,
+            views: [
+                [Op.READ, addressable()],
+                [SsoConfig_Operations.ADD_DOMAIN, notAddressable()],
+                [SsoConfig_Operations.VERIFY_DOMAIN, notAddressable()],
+                [SsoConfig_Operations.REMOVE_DOMAIN, notAddressable()],
+            ],
+            variantOverrides: {
+                [R.ORGANIZATIONS]: {
+                    views: [[Op.READ, notAddressable()]],
+                },
+            },
+        })),
+        ...polymorphicResourceUIBehaviorFrom({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SSO_CONNECTIONS },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SSO_CONNECTIONS },
+            ],
+        }, ssoConnectionPolymorphicFactories[R.ORGANIZATION_SSO_CONNECTIONS], main, ({ base }) => ({
+            icon: base.icon,
+            layout: base.layout,
+            fields: base.fields,
+            getFrontendResourceLabel: base.getFrontendResourceLabel,
+            views: [
+                [Op.LIST, addressable()],
+                [SsoConnection_Operations.TEST_CONNECTION, addressable({
+                        customView: ResourceLayoutPreset_Read_SsoSaml,
+                    })],
+                [SsoConnection_Operations.DISCOVER_ENDPOINTS, addressable({
+                        customView: ResourceLayoutPreset_Create_SamlWizard,
+                    })],
+            ],
+            variantOverrides: {
+                [R.ORGANIZATIONS]: {
+                    views: [
+                        [Op.READ, notAddressable()],
+                        [Op.LIST, notAddressable()],
+                    ],
+                },
+            },
+        })),
+        ...polymorphicResourceUIBehaviorFrom({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SCIM_PROVISIONING_CONFIG },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SCIM_PROVISIONING_CONFIG },
+            ],
+        }, scimProvisioningConfigPolymorphicFactories[R.ORGANIZATION_SCIM_PROVISIONING_CONFIG], main, ({ base }) => ({
+            icon: base.icon,
+            layout: base.layout,
+            views: [
+                [Op.READ, addressable()],
+                [ScimProvisioningConfig_Operations.TEST_SCIM_CONNECTION, notAddressable()],
+                [ScimProvisioningConfig_Operations.GET_PROVISIONING_STATS, notAddressable()],
+            ],
+            variantOverrides: {
+                [R.ORGANIZATIONS]: {
+                    views: [[Op.READ, notAddressable()]],
+                },
+            },
+        })),
+        ...polymorphicResourceUIBehaviorFrom({
+            variants: [
+                { parentResourceType: R.ORGANIZATIONS, resourceType: R.ORGANIZATION_SCIM_TOKENS },
+                { parentResourceType: R.APPLICATION, resourceType: R.APPLICATION_SCIM_TOKENS },
+            ],
+        }, scimTokensPolymorphicFactories[R.ORGANIZATION_SCIM_TOKENS], main, ({ base }) => ({
+            icon: base.icon,
+            layout: base.layout,
+            getFrontendResourceLabel: base.getFrontendResourceLabel,
+            views: [
+                [Op.LIST, addressable()],
+                [ScimTokens_Operations.GENERATE_TOKEN, notAddressable()],
+                [ScimTokens_Operations.REVOKE_TOKEN, notAddressable()],
+                [ScimTokens_Operations.ROTATE_TOKEN, notAddressable()],
+            ],
+            variantOverrides: {
+                [R.ORGANIZATIONS]: {
+                    views: [
+                        [Op.READ, notAddressable()],
+                        [Op.LIST, notAddressable()],
+                    ],
+                },
+            },
+        })),
+        [R.ORG_API_KEYS]: resourceUIBehaviorFrom(orgApiKeysFactory, main[R.ORG_API_KEYS], ({ base, opsVariantResolver }) => ({
+            icon: base.icon,
+            layout: base.layout,
+            getFrontendResourceLabel: base.getFrontendResourceLabel,
+            fields: base.fields,
+            views: [
+                [opsVariantResolver(Op.READ, 'admin'), notAddressable()],
+                [opsVariantResolver(Op.LIST, 'admin'), notAddressable()],
+                [opsVariantResolver(Op.SEARCH, 'admin'), notAddressable()],
+                [opsVariantResolver(Op.CREATE, 'admin'), notAddressable()],
+                [opsVariantResolver(Op.DELETE, 'admin'), notAddressable()],
+                [opsVariantResolver(OrgApiKeys_Operations.ROTATE, 'admin'), notAddressable()],
+                [opsVariantResolver(OrgApiKeys_Operations.REGENERATE, 'admin'), notAddressable()],
+                [opsVariantResolver(OrgApiKeys_Operations.DEACTIVATE, 'admin'), notAddressable()],
+                [opsVariantResolver(OrgApiKeys_Operations.REACTIVATE, 'admin'), notAddressable()],
+                [opsVariantResolver(OrgApiKeys_Operations.EXTEND_EXPIRY, 'admin'), notAddressable()],
+                [opsVariantResolver(OrgApiKeys_Operations.USAGE_STATS, 'admin'), notAddressable()],
+            ],
+        })),
+    };
+}
+//# sourceMappingURL=security.resource-presets.js.map