@wildo-ai/saas-backend-lib 1.0.1

package/dist/esm/security/authentications/services/__tests__/mock-auth-execution-context-factory.service.js

@@ -0,0 +1,66 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+/**
+ * Vitest-oriented mock auth execution context factory for backend tests.
+ *
+ * **Naming**: `mock-*.service.ts` — canonical mock module, not a test suite.
+ * Plain `.ts` keeps it barrel-compilable, and Vitest also excludes these files
+ * explicitly as a defensive guard.
+ */
+import 'reflect-metadata';
+import { injectable } from 'inversify';
+import { vi } from 'vitest';
+function buildDefaultExecutionContext(id) {
+    return { _id: id };
+}
+function buildDefaultOperationPath(resourceType, operationType) {
+    return { resourceType, operationType };
+}
+let MockAuthExecutionContextFactoryService = class MockAuthExecutionContextFactoryService {
+    preAuthExecutionContext = buildDefaultExecutionContext('ec-preauth');
+    authenticatedExecutionContext = buildDefaultExecutionContext('ec-authenticated');
+    systemExecutionContext = buildDefaultExecutionContext('ec-system');
+    usersReadOperationPath = buildDefaultOperationPath('users', 'read');
+    usersCreateOperationPath = buildDefaultOperationPath('users', 'create');
+    createForPreAuthOperation = vi.fn(async () => this.preAuthExecutionContext);
+    createForAuthenticatedAuthOperation = vi.fn(async () => this.authenticatedExecutionContext);
+    createForSystemAuthOperation = vi.fn(async () => this.systemExecutionContext);
+    getUsersReadOperationPath = vi.fn(() => this.usersReadOperationPath);
+    getUsersCreateOperationPath = vi.fn(() => this.usersCreateOperationPath);
+    setPreAuthExecutionContext(executionContext) {
+        this.preAuthExecutionContext = executionContext;
+    }
+    setAuthenticatedExecutionContext(executionContext) {
+        this.authenticatedExecutionContext = executionContext;
+    }
+    setSystemExecutionContext(executionContext) {
+        this.systemExecutionContext = executionContext;
+    }
+    setUsersReadOperationPath(operationPath) {
+        this.usersReadOperationPath = operationPath;
+    }
+    setUsersCreateOperationPath(operationPath) {
+        this.usersCreateOperationPath = operationPath;
+    }
+    reset() {
+        this.preAuthExecutionContext = buildDefaultExecutionContext('ec-preauth');
+        this.authenticatedExecutionContext = buildDefaultExecutionContext('ec-authenticated');
+        this.systemExecutionContext = buildDefaultExecutionContext('ec-system');
+        this.usersReadOperationPath = buildDefaultOperationPath('users', 'read');
+        this.usersCreateOperationPath = buildDefaultOperationPath('users', 'create');
+        this.createForPreAuthOperation.mockClear();
+        this.createForAuthenticatedAuthOperation.mockClear();
+        this.createForSystemAuthOperation.mockClear();
+        this.getUsersReadOperationPath.mockClear();
+        this.getUsersCreateOperationPath.mockClear();
+    }
+};
+MockAuthExecutionContextFactoryService = __decorate([
+    injectable()
+], MockAuthExecutionContextFactoryService);
+export { MockAuthExecutionContextFactoryService };
+//# sourceMappingURL=mock-auth-execution-context-factory.service.js.map

package/dist/esm/security/authentications/services/__tests__/mock-auth-execution-context-factory.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-auth-execution-context-factory.service.js","sourceRoot":"","sources":["../../../../../../src/security/authentications/services/__tests__/mock-auth-execution-context-factory.service.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE5B,SAAS,4BAA4B,CAAC,EAAU;IAC9C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,yBAAyB,CAAC,YAAoB,EAAE,aAAqB;IAI5E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC;AAGM,IAAM,sCAAsC,GAA5C,MAAM,sCAAsC;IACzC,uBAAuB,GAAY,4BAA4B,CAAC,YAAY,CAAC,CAAC;IAC9E,6BAA6B,GAAY,4BAA4B,CAAC,kBAAkB,CAAC,CAAC;IAC1F,sBAAsB,GAAY,4BAA4B,CAAC,WAAW,CAAC,CAAC;IAC5E,sBAAsB,GAAY,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7E,wBAAwB,GAAY,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEzF,yBAAyB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAE5E,mCAAmC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAE5F,4BAA4B,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAE9E,yBAAyB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAErE,2BAA2B,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAEzE,0BAA0B,CAAC,gBAAyB;QAClD,IAAI,CAAC,uBAAuB,GAAG,gBAAgB,CAAC;IAClD,CAAC;IAED,gCAAgC,CAAC,gBAAyB;QACxD,IAAI,CAAC,6BAA6B,GAAG,gBAAgB,CAAC;IACxD,CAAC;IAED,yBAAyB,CAAC,gBAAyB;QACjD,IAAI,CAAC,sBAAsB,GAAG,gBAAgB,CAAC;IACjD,CAAC;IAED,yBAAyB,CAAC,aAAsB;QAC9C,IAAI,CAAC,sBAAsB,GAAG,aAAa,CAAC;IAC9C,CAAC;IAED,2BAA2B,CAAC,aAAsB;QAChD,IAAI,CAAC,wBAAwB,GAAG,aAAa,CAAC;IAChD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,uBAAuB,GAAG,4BAA4B,CAAC,YAAY,CAAC,CAAC;QAC1E,IAAI,CAAC,6BAA6B,GAAG,4BAA4B,CAAC,kBAAkB,CAAC,CAAC;QACtF,IAAI,CAAC,sBAAsB,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;QACxE,IAAI,CAAC,sBAAsB,GAAG,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,wBAAwB,GAAG,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC,yBAAyB,CAAC,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,mCAAmC,CAAC,SAAS,EAAE,CAAC;QACrD,IAAI,CAAC,4BAA4B,CAAC,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC,yBAAyB,CAAC,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;CACF,CAAA;AAjDY,sCAAsC;IADlD,UAAU,EAAE;GACA,sCAAsC,CAiDlD"}

package/dist/esm/security/authentications/services/__tests__/mock-auth-token-issuer.service.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Vitest-oriented mock auth token issuer for backend tests.
+ *
+ * **Naming**: `mock-*.service.ts` — canonical mock module, not a test suite.
+ * Plain `.ts` keeps it barrel-compilable, and Vitest also excludes these files
+ * explicitly as a defensive guard.
+ */
+import 'reflect-metadata';
+type MockIssuedAuthTokens = {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+};
+export declare class MockAuthTokenIssuerService {
+    private tokens;
+    issueTokens: import("vitest").Mock<[], Promise<{
+        accessToken: string;
+        refreshToken: string;
+        expiresIn: number;
+    }>>;
+    issueTokensForUser: import("vitest").Mock<[], Promise<{
+        accessToken: string;
+        refreshToken: string;
+        expiresIn: number;
+    }>>;
+    setTokens(tokens: Partial<MockIssuedAuthTokens>): void;
+    reset(): void;
+}
+export {};
+//# sourceMappingURL=mock-auth-token-issuer.service.d.ts.map

package/dist/esm/security/authentications/services/__tests__/mock-auth-token-issuer.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-auth-token-issuer.service.d.ts","sourceRoot":"","sources":["../../../../../../src/security/authentications/services/__tests__/mock-auth-token-issuer.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAI1B,KAAK,oBAAoB,GAAG;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAUF,qBACa,0BAA0B;IACrC,OAAO,CAAC,MAAM,CAA8C;IAE5D,WAAW;qBAjBE,MAAM;sBACL,MAAM;mBACT,MAAM;QAeqC;IAEtD,kBAAkB;qBAnBL,MAAM;sBACL,MAAM;mBACT,MAAM;QAiB4C;IAE7D,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI;IAOtD,KAAK,IAAI,IAAI;CAKd"}

package/dist/esm/security/authentications/services/__tests__/mock-auth-token-issuer.service.js

@@ -0,0 +1,44 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+/**
+ * Vitest-oriented mock auth token issuer for backend tests.
+ *
+ * **Naming**: `mock-*.service.ts` — canonical mock module, not a test suite.
+ * Plain `.ts` keeps it barrel-compilable, and Vitest also excludes these files
+ * explicitly as a defensive guard.
+ */
+import 'reflect-metadata';
+import { injectable } from 'inversify';
+import { vi } from 'vitest';
+function buildDefaultTokens() {
+    return {
+        accessToken: 'mock-access-token',
+        refreshToken: 'mock-refresh-token',
+        expiresIn: 3600,
+    };
+}
+let MockAuthTokenIssuerService = class MockAuthTokenIssuerService {
+    tokens = buildDefaultTokens();
+    issueTokens = vi.fn(async () => ({ ...this.tokens }));
+    issueTokensForUser = vi.fn(async () => ({ ...this.tokens }));
+    setTokens(tokens) {
+        this.tokens = {
+            ...this.tokens,
+            ...tokens,
+        };
+    }
+    reset() {
+        this.tokens = buildDefaultTokens();
+        this.issueTokens.mockClear();
+        this.issueTokensForUser.mockClear();
+    }
+};
+MockAuthTokenIssuerService = __decorate([
+    injectable()
+], MockAuthTokenIssuerService);
+export { MockAuthTokenIssuerService };
+//# sourceMappingURL=mock-auth-token-issuer.service.js.map

package/dist/esm/security/authentications/services/__tests__/mock-auth-token-issuer.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-auth-token-issuer.service.js","sourceRoot":"","sources":["../../../../../../src/security/authentications/services/__tests__/mock-auth-token-issuer.service.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAQ5B,SAAS,kBAAkB;IACzB,OAAO;QACL,WAAW,EAAE,mBAAmB;QAChC,YAAY,EAAE,oBAAoB;QAClC,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAGM,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAC7B,MAAM,GAAyB,kBAAkB,EAAE,CAAC;IAE5D,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEtD,kBAAkB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE7D,SAAS,CAAC,MAAqC;QAC7C,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,IAAI,CAAC,MAAM;YACd,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACnC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC;IACtC,CAAC;CACF,CAAA;AAnBY,0BAA0B;IADtC,UAAU,EAAE;GACA,0BAA0B,CAmBtC"}

package/dist/esm/security/authentications/services/admin-config/__tests__/mock-domain-to-org-lookup.service.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Vitest-oriented mock domain-to-org lookup service for backend tests.
+ *
+ * **Naming**: `mock-*.service.ts` — canonical mock module, not a test suite.
+ * Plain `.ts` keeps it barrel-compilable, and Vitest also excludes these files
+ * explicitly as a defensive guard.
+ */
+import 'reflect-metadata';
+type MockDomainLookupResult = Record<string, unknown> | null;
+export declare class MockDomainToOrgLookupService {
+    private readonly domainResults;
+    private fallbackResult;
+    findOrgByDomain: import("vitest").Mock<[_executionContext: unknown, domain: string], Promise<Record<string, unknown>>>;
+    setDomainResult(domain: string, result: MockDomainLookupResult): void;
+    setFallbackResult(result: MockDomainLookupResult): void;
+    reset(): void;
+}
+export {};
+//# sourceMappingURL=mock-domain-to-org-lookup.service.d.ts.map

package/dist/esm/security/authentications/services/admin-config/__tests__/mock-domain-to-org-lookup.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-domain-to-org-lookup.service.d.ts","sourceRoot":"","sources":["../../../../../../../src/security/authentications/services/admin-config/__tests__/mock-domain-to-org-lookup.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAI1B,KAAK,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;AAE7D,qBACa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6C;IAC3E,OAAO,CAAC,cAAc,CAAgC;IAEtD,eAAe,wGAMZ;IAEH,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,IAAI;IAIrE,iBAAiB,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI;IAIvD,KAAK,IAAI,IAAI;CAKd"}

package/dist/esm/security/authentications/services/admin-config/__tests__/mock-domain-to-org-lookup.service.js

@@ -0,0 +1,43 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+/**
+ * Vitest-oriented mock domain-to-org lookup service for backend tests.
+ *
+ * **Naming**: `mock-*.service.ts` — canonical mock module, not a test suite.
+ * Plain `.ts` keeps it barrel-compilable, and Vitest also excludes these files
+ * explicitly as a defensive guard.
+ */
+import 'reflect-metadata';
+import { injectable } from 'inversify';
+import { vi } from 'vitest';
+let MockDomainToOrgLookupService = class MockDomainToOrgLookupService {
+    domainResults = new Map();
+    fallbackResult = null;
+    findOrgByDomain = vi.fn(async (_executionContext, domain) => {
+        const normalizedDomain = domain.toLowerCase();
+        if (this.domainResults.has(normalizedDomain)) {
+            return this.domainResults.get(normalizedDomain) ?? null;
+        }
+        return this.fallbackResult;
+    });
+    setDomainResult(domain, result) {
+        this.domainResults.set(domain.toLowerCase(), result);
+    }
+    setFallbackResult(result) {
+        this.fallbackResult = result;
+    }
+    reset() {
+        this.domainResults.clear();
+        this.fallbackResult = null;
+        this.findOrgByDomain.mockClear();
+    }
+};
+MockDomainToOrgLookupService = __decorate([
+    injectable()
+], MockDomainToOrgLookupService);
+export { MockDomainToOrgLookupService };
+//# sourceMappingURL=mock-domain-to-org-lookup.service.js.map

package/dist/esm/security/authentications/services/admin-config/__tests__/mock-domain-to-org-lookup.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-domain-to-org-lookup.service.js","sourceRoot":"","sources":["../../../../../../../src/security/authentications/services/admin-config/__tests__/mock-domain-to-org-lookup.service.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAKrB,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACtB,aAAa,GAAG,IAAI,GAAG,EAAkC,CAAC;IACnE,cAAc,GAA2B,IAAI,CAAC;IAEtD,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,iBAA0B,EAAE,MAAc,EAAE,EAAE;QAC3E,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,eAAe,CAAC,MAAc,EAAE,MAA8B;QAC5D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,iBAAiB,CAAC,MAA8B;QAC9C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;IACnC,CAAC;CACF,CAAA;AAzBY,4BAA4B;IADxC,UAAU,EAAE;GACA,4BAA4B,CAyBxC"}

package/dist/esm/security/authentications/services/admin-config/__tests__/mock-enterprise-user-provisioning.service.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Vitest-oriented mock enterprise user provisioning service for backend tests.
+ *
+ * **Naming**: `mock-*.service.ts` — canonical mock module, not a test suite.
+ * Plain `.ts` keeps it barrel-compilable, and Vitest also excludes these files
+ * explicitly as a defensive guard.
+ */
+import 'reflect-metadata';
+type MockProvisionedUser = {
+    _id: string;
+    email?: string;
+    status?: unknown;
+};
+type MockEnterpriseProvisioningResult = {
+    user: MockProvisionedUser;
+    isNew: boolean;
+    orgMemberCreated: boolean;
+    mappedRoles: string[];
+};
+export declare class MockEnterpriseUserProvisioningService {
+    private result;
+    createOrgUser: import("vitest").Mock<[], Promise<{
+        user: {
+            _id: string;
+            email?: string;
+            status?: unknown;
+        };
+        mappedRoles: string[];
+        isNew: boolean;
+        orgMemberCreated: boolean;
+    }>>;
+    setProvisioningResult(result: MockEnterpriseProvisioningResult): void;
+    setProvisionedUser(user: MockProvisionedUser): void;
+    reset(): void;
+}
+export {};
+//# sourceMappingURL=mock-enterprise-user-provisioning.service.d.ts.map

package/dist/esm/security/authentications/services/admin-config/__tests__/mock-enterprise-user-provisioning.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-enterprise-user-provisioning.service.d.ts","sourceRoot":"","sources":["../../../../../../../src/security/authentications/services/admin-config/__tests__/mock-enterprise-user-provisioning.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAI1B,KAAK,mBAAmB,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,KAAK,gCAAgC,GAAG;IACtC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAeF,qBACa,qCAAqC;IAChD,OAAO,CAAC,MAAM,CAAsE;IAEpF,aAAa;;iBA7BR,MAAM;oBACH,MAAM;qBACL,OAAO;;;eAKT,OAAO;0BACI,OAAO;QAyBrB;IAEJ,qBAAqB,CAAC,MAAM,EAAE,gCAAgC,GAAG,IAAI;IAQrE,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI;IAOnD,KAAK,IAAI,IAAI;CAId"}

package/dist/esm/security/authentications/services/admin-config/__tests__/mock-enterprise-user-provisioning.service.js

@@ -0,0 +1,58 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+/**
+ * Vitest-oriented mock enterprise user provisioning service for backend tests.
+ *
+ * **Naming**: `mock-*.service.ts` — canonical mock module, not a test suite.
+ * Plain `.ts` keeps it barrel-compilable, and Vitest also excludes these files
+ * explicitly as a defensive guard.
+ */
+import 'reflect-metadata';
+import { injectable } from 'inversify';
+import { vi } from 'vitest';
+function buildDefaultProvisioningResult() {
+    return {
+        user: {
+            _id: 'user-123',
+            email: 'user@test.com',
+            status: 'ACTIVE',
+        },
+        isNew: true,
+        orgMemberCreated: true,
+        mappedRoles: [],
+    };
+}
+let MockEnterpriseUserProvisioningService = class MockEnterpriseUserProvisioningService {
+    result = buildDefaultProvisioningResult();
+    createOrgUser = vi.fn(async () => ({
+        ...this.result,
+        user: { ...this.result.user },
+        mappedRoles: [...this.result.mappedRoles],
+    }));
+    setProvisioningResult(result) {
+        this.result = {
+            ...result,
+            user: { ...result.user },
+            mappedRoles: [...result.mappedRoles],
+        };
+    }
+    setProvisionedUser(user) {
+        this.result = {
+            ...this.result,
+            user: { ...user },
+        };
+    }
+    reset() {
+        this.result = buildDefaultProvisioningResult();
+        this.createOrgUser.mockClear();
+    }
+};
+MockEnterpriseUserProvisioningService = __decorate([
+    injectable()
+], MockEnterpriseUserProvisioningService);
+export { MockEnterpriseUserProvisioningService };
+//# sourceMappingURL=mock-enterprise-user-provisioning.service.js.map

package/dist/esm/security/authentications/services/admin-config/__tests__/mock-enterprise-user-provisioning.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-enterprise-user-provisioning.service.js","sourceRoot":"","sources":["../../../../../../../src/security/authentications/services/admin-config/__tests__/mock-enterprise-user-provisioning.service.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAe5B,SAAS,8BAA8B;IACrC,OAAO;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,QAAQ;SACjB;QACD,KAAK,EAAE,IAAI;QACX,gBAAgB,EAAE,IAAI;QACtB,WAAW,EAAE,EAAE;KAChB,CAAC;AACJ,CAAC;AAGM,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IACxC,MAAM,GAAqC,8BAA8B,EAAE,CAAC;IAEpF,aAAa,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjC,GAAG,IAAI,CAAC,MAAM;QACd,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAC7B,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;KAC1C,CAAC,CAAC,CAAC;IAEJ,qBAAqB,CAAC,MAAwC;QAC5D,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,MAAM;YACT,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE;YACxB,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,IAAyB;QAC1C,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,IAAI,CAAC,MAAM;YACd,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,8BAA8B,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;IACjC,CAAC;CACF,CAAA;AA5BY,qCAAqC;IADjD,UAAU,EAAE;GACA,qCAAqC,CA4BjD"}

package/dist/esm/security/authentications/services/admin-config/auth-organization-configuration.service.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Organization Configuration Service
+ *
+ * Scope-aware service for managing SSO enforcement, authentication policies,
+ * SIEM export, and SCIM provisioning configuration.
+ * Supports both organization-level and application-level scopes.
+ */
+import { Container } from 'inversify';
+import { AuthScopeType, type SsoConfigBase, type SiemExportConfigBase } from '@wildo-ai/saas-models';
+import { LoggerService } from '../../../../monitoring/logger/services/logger.service.js';
+import type { ExecutionContext } from '../../../../runtime/models/execution-context.backend.schemas.js';
+export interface SCIMProvisioningConfigData {
+    _id?: string;
+    organizationId?: string;
+    applicationId?: string;
+    scimEnabled: boolean;
+    autoCreateUsers: boolean;
+    autoVerifyEmail: boolean;
+    defaultOrgRole: string;
+    deprovisioningBehavior: string;
+    allowedDomains?: string[];
+    scimEndpointUrl?: string;
+}
+export declare class AuthOrganizationConfigurationService {
+    private logger;
+    private readonly container;
+    private ssoConfigs;
+    private siemExportConfigs;
+    private configChangeListeners;
+    protected logDebug: (message: string, context?: Record<string, unknown>) => void;
+    constructor(logger: LoggerService, container: Container);
+    /**
+     * Organization auth configuration is consulted by services that are themselves
+     * created through the services registry, so we resolve the registry lazily to
+     * avoid re-entering the same singleton graph during backend startup.
+     */
+    private getServicesRegistryHandler;
+    private _cacheKey;
+    private _scopeFilter;
+    private _resolveSsoResourceType;
+    private _resolveSiemResourceType;
+    private _resolveScimConfigResourceType;
+    private _resolveScimTokensResourceType;
+    /**
+     * Get all organization IDs that have SSO configurations loaded.
+     * Filters to organization-scoped entries only, returning plain IDs.
+     */
+    getAllOrganizationIds(): string[];
+    /**
+     * Get all application IDs that have SSO configurations loaded.
+     * Filters to application-scoped entries only, returning plain IDs.
+     */
+    getAllApplicationIds(): string[];
+    loadSSOConfig(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string): Promise<SsoConfigBase | null>;
+    saveSSOConfig(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string, config: Partial<SsoConfigBase>): Promise<void>;
+    /** @legacy — Will be refactored to use SsoConnection resources */
+    getSAMLProviders(organizationId: string): Promise<Record<string, unknown>[]>;
+    /** @legacy — Will be refactored to use SsoConnection resources */
+    getOpenIDConnectProviders(organizationId: string): Promise<Record<string, unknown>[]>;
+    /** @legacy — Will be refactored to use SsoConnection resources */
+    getDefaultSSOProvider(organizationId: string): Promise<Record<string, unknown> | null>;
+    /** @legacy — Will be refactored to use SsoConnection resources */
+    getSSOProviderByDomain(organizationId: string, emailDomain: string): Promise<Record<string, unknown> | null>;
+    isSSORequired(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string): Promise<boolean>;
+    isPasswordFallbackAllowed(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string): Promise<boolean>;
+    getDomains(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string): Promise<{
+        verified: string[];
+        ssoEnabled: string[];
+        allowExternal: boolean;
+    }>;
+    isEmergencyAccessEnabled(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string): Promise<boolean>;
+    getEmergencyAccessAccounts(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string): Promise<string[]>;
+    validateSSOConfig(config: Partial<SsoConfigBase>): {
+        isValid: boolean;
+        errors: string[];
+    };
+    onConfigChange(callback: (scopeType: AuthScopeType, scopeId: string, config: SsoConfigBase) => void): void;
+    private notifyConfigChange;
+    createDefaultSSOConfig(scopeType: AuthScopeType, scopeId: string): Record<string, unknown>;
+    loadSiemExportConfig(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string): Promise<SiemExportConfigBase | null>;
+    saveSiemExportConfig(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string, config: Partial<SiemExportConfigBase>): Promise<void>;
+    isSecurityExportEnabled(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string): Promise<boolean>;
+    loadScimProvisioningConfig(ec: ExecutionContext<any>, scopeType: AuthScopeType, scopeId: string): Promise<SCIMProvisioningConfigData | null>;
+}
+//# sourceMappingURL=auth-organization-configuration.service.d.ts.map

package/dist/esm/security/authentications/services/admin-config/auth-organization-configuration.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-organization-configuration.service.d.ts","sourceRoot":"","sources":["../../../../../../src/security/authentications/services/admin-config/auth-organization-configuration.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAsB,MAAM,WAAW,CAAC;AAC1D,OAAO,EAEL,aAAa,EAEb,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAG7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G,MAAM,WAAW,0BAA0B;IACzC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBACa,oCAAoC;IAOV,OAAO,CAAC,MAAM;IACX,OAAO,CAAC,QAAQ,CAAC,SAAS;IAPlE,OAAO,CAAC,UAAU,CAAyC;IAC3D,OAAO,CAAC,iBAAiB,CAAgD;IACzE,OAAO,CAAC,qBAAqB,CAAyF;IACtH,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAGpC,MAAM,EAAE,aAAa,EACT,SAAS,EAAE,SAAS;IAM7E;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;IAMlC,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,uBAAuB;IAM/B,OAAO,CAAC,wBAAwB;IAMhC,OAAO,CAAC,8BAA8B;IAMtC,OAAO,CAAC,8BAA8B;IAMtC;;;OAGG;IACI,qBAAqB,IAAI,MAAM,EAAE;IAUxC;;;OAGG;IACI,oBAAoB,IAAI,MAAM,EAAE;IAc1B,aAAa,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAmBlH,aAAa,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB/I,kEAAkE;IACrD,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAKzF,kEAAkE;IACrD,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAKlG,kEAAkE;IACrD,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAenG,kEAAkE;IACrD,sBAAsB,CACjC,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAqB7B,aAAa,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKrG,yBAAyB,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKjH,UAAU,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QACrG,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IASW,wBAAwB,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKhH,0BAA0B,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKzH,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE;IAezF,cAAc,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,KAAK,IAAI,GAAG,IAAI;IAIjH,OAAO,CAAC,kBAAkB;IAcnB,sBAAsB,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAwDpF,oBAAoB,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmBhI,oBAAoB,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBhJ,uBAAuB,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS/G,0BAA0B,CAAC,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;CA+B1J"}