npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.0 → 1.1.2 - Mend

@wildo-ai/saas-backend-lib 1.1.0 → 1.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (265) hide show

package/dist/esm/compliance/audit-trails/services/utils/ocsf-activity-mapping.backend.utils.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"ocsf-activity-mapping.backend.utils.js","sourceRoot":"","sources":["../../../../../../../src/compliance/audit-trails/services/utils/ocsf-activity-mapping.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAsB,UAAU,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACnJ,OAAO,EAAE,4BAA4B,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEhG,oFAAoF;AACpF,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAuC;IACvC,iEAAW,CAAA;IACX,6EAA6E;IAC7E,8DAAU,CAAA;AACZ,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED,sEAAsE;AACtE,MAAM,CAAN,IAAY,0BAQX;AARD,WAAY,0BAA0B;IACpC,8HAA8H;IAC9H,6EAAS,CAAA;IACT,6DAA6D;IAC7D,+EAAU,CAAA;IACV,mHAAmH;IACnH,iFAAW,CAAA;IACX,8EAAU,CAAA;AACZ,CAAC,EARW,0BAA0B,KAA1B,0BAA0B,QAQrC;AAED,oEAAoE;AACpE,MAAM,CAAN,IAAY,eAOX;AAPD,WAAY,eAAe;IACzB,yDAAU,CAAA;IACV,uFAAuF;IACvF,qDAAQ,CAAA;IACR,yDAAU,CAAA;IACV,yDAAU,CAAA;IACV,wDAAU,CAAA;AACZ,CAAC,EAPW,eAAe,KAAf,eAAe,QAO1B;AAED,yEAAyE;AACzE,MAAM,CAAN,IAAY,4BAiBX;AAjBD,WAAY,4BAA4B;IACtC,mFAAU,CAAA;IACV,+EAAQ,CAAA;IACR,mFAAU,CAAA;IACV,mFAAU,CAAA;IACV,+EAAQ,CAAA;IACR,sEAAsE;IACtE,mFAAU,CAAA;IACV,uFAAY,CAAA;IACZ,mFAAU,CAAA;IACV,qFAAW,CAAA;IACX,wFAAa,CAAA;IACb,4FAAe,CAAA;IACf,sFAAY,CAAA;IACZ,2GAA2G;IAC3G,oFAAW,CAAA;IACX,kFAAU,CAAA;AACZ,CAAC,EAjBW,4BAA4B,KAA5B,4BAA4B,QAiBvC;AAED,uEAAuE;AACvE,MAAM,CAAN,IAAY,0BAqBX;AArBD,WAAY,0BAA0B;IACpC,+EAAU,CAAA;IACV,+EAAU,CAAA;IACV,+EAAU,CAAA;IACV,+EAAU,CAAA;IACV,iFAAW,CAAA;IACX,2EAAQ,CAAA;IACR,+EAAU,CAAA;IACV,iGAAmB,CAAA;IACnB,+FAAkB,CAAA;IAClB,kGAAoB,CAAA;IACpB,kGAAoB,CAAA;IACpB,wGAAuB,CAAA;IACvB,0GAAwB,CAAA;IACxB,sGAAsB,CAAA;IACtB,sGAAsB,CAAA;IACtB,4FAAiB,CAAA;IACjB,4FAAiB,CAAA;IACjB,4HAAiC,CAAA;IACjC,kIAAoC,CAAA;IACpC,8EAAU,CAAA;AACZ,CAAC,EArBW,0BAA0B,KAA1B,0BAA0B,QAqBrC;AAED;;;;;;GAMG;AACH,MAAM,6BAA6B,GAAwD;IACzF,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACnI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACtH,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACxI,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;CACrI,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAqD;IAE3F,uBAAuB;IACvB,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC9E,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACpF,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACrF,CAAC,sBAAsB,CAAC,+BAA+B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC1F,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC9E,uGAAuG;IACvG,8GAA8G;IAC9G,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACrF,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAClF,mGAAmG;IACnG,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,8BAA8B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACzF,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC5E,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC7E,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC9E,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC9E,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,sFAAsF;IACtK,CAAC,sBAAsB,CAAC,kCAAkC,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC7F,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACrF,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACrE,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC5E,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACvE,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACjF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,OAAO;IACjF,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACnF,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,sGAAsG;IACpL,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,EAAE,0BAA0B,CAAC,OAAO;IACpF,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,qGAAqG;IAClL,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACnF,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACjF,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC9F,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC9F,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAClF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,iGAAiG;IACnL,CAAC,sBAAsB,CAAC,6BAA6B,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,gGAAgG;IAC1L,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,gGAAgG;IACvL,CAAC,sBAAsB,CAAC,6BAA6B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACxF,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC5E,CAAC,sBAAsB,CAAC,iCAAiC,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC5F,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAChF,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC9E,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,OAAO;IAC9E,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACvF,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACzE,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAE7E,sBAAsB;IACtB,CAAC,sBAAsB,CAAC,sCAAsC,CAAC,EAAE,eAAe,CAAC,KAAK;IACtF,CAAC,sBAAsB,CAAC,kCAAkC,CAAC,EAAE,eAAe,CAAC,KAAK;IAClF,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,EAAE,eAAe,CAAC,KAAK;IACvE,CAAC,sBAAsB,CAAC,+BAA+B,CAAC,EAAE,eAAe,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAC,KAAK;IACpE,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,eAAe,CAAC,KAAK;IACrE,CAAC,sBAAsB,CAAC,6BAA6B,CAAC,EAAE,eAAe,CAAC,KAAK;IAC7E,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,eAAe,CAAC,KAAK;IAC5E,CAAC,sBAAsB,CAAC,gCAAgC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,8CAA8C;IAChI,CAAC,sBAAsB,CAAC,iCAAiC,CAAC,EAAE,eAAe,CAAC,KAAK;IACjF,CAAC,sBAAsB,CAAC,gCAAgC,CAAC,EAAE,eAAe,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,qCAAqC,CAAC,EAAE,eAAe,CAAC,KAAK;IACrF,CAAC,sBAAsB,CAAC,+BAA+B,CAAC,EAAE,eAAe,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,mFAAmF;IAC9J,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,mFAAmF;IACjK,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,8CAA8C;IAEtH,oBAAoB;IACpB,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC,IAAI;IAC3D,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,sEAAsE;IACtI,8FAA8F;IAC9F,gGAAgG;IAChG,8CAA8C;IAC9C,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC,IAAI;IACxE,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAC,IAAI;IACnE,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,eAAe,CAAC,IAAI;IAClE,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,eAAe,CAAC,IAAI;IACrE,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,eAAe,CAAC,IAAI;IAC3E,6EAA6E;IAC7E,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC,MAAM;IAC1E,iFAAiF;IACjF,CAAC,sBAAsB,CAAC,iCAAiC,CAAC,EAAE,eAAe,CAAC,KAAK;IACjF,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,eAAe,CAAC,IAAI;IAClE,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,uGAAuG;IAE7K,uBAAuB;IACvB,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACpF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAClF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAClF,CAAC,sBAAsB,CAAC,+BAA+B,CAAC,EAAE,4BAA4B,CAAC,KAAK,EAAE,+FAA+F;IAC7L,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACzF,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACxF,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,EAAE,4BAA4B,CAAC,QAAQ;IAC3F,CAAC,sBAAsB,CAAC,kCAAkC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAChG,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACzF,CAAC,sBAAsB,CAAC,kCAAkC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAChG,CAAC,sBAAsB,CAAC,gCAAgC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAC9F,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAC1F,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,4BAA4B,CAAC,KAAK,EAAE,uGAAuG;IAC3L,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACjG,CAAC,sBAAsB,CAAC,sCAAsC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACpG,iGAAiG;IACjG,iGAAiG;IACjG,kEAAkE;IAClE,CAAC,sBAAsB,CAAC,+BAA+B,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAC7F,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,4BAA4B,CAAC,OAAO;IACrF,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACvF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAClF,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC,KAAK;IACjF,CAAC,sBAAsB,CAAC,gCAAgC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAC9F,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,EAAE,4BAA4B,CAAC,KAAK;IACrF,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAChF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAClF,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAChF,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAChF,CAAC,sBAAsB,CAAC,gCAAgC,CAAC,EAAE,4BAA4B,CAAC,KAAK;IAE7F,uBAAuB;IACvB,CAAC,sBAAsB,CAAC,oCAAoC,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC/F,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC9E,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,OAAO;IAClF,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACjF,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC7E,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACxE,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACxE,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC/E,CAAC,sBAAsB,CAAC,8BAA8B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACzF,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC/E,CAAC,sBAAsB,CAAC,eAAe,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC3E,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACxE,CAAC,sBAAsB,CAAC,8BAA8B,CAAC,EAAE,0BAA0B,CAAC,KAAK;CAC1F,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,kCAAkC;IACzC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC;QACjE,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAA8B,CAAC,CAAC;QAChF,IAAI,CAAC,6BAA6B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACxE,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,eAAe,UAAU,8BAA8B,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6EAA6E,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC;AACH,CAAC;AACD,kCAAkC,EAAE,CAAC;AAErC;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,OAAO,2BAA2B,CAAC,SAAmC,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC;AACxG,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,SAAiB;IAC3E,OAAO,UAAU,KAAK,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,kBAeX;AAfD,WAAY,kBAAkB;IAC5B,iEAAW,CAAA;IACX,2DAAQ,CAAA;IACR,mEAAY,CAAA;IACZ,+DAAU,CAAA;IACV,+DAAU,CAAA;IACV,2DAAQ,CAAA;IACR,qEAAa,CAAA;IACb,yDAAO,CAAA;IACP,2DAAQ,CAAA;IACR,yDAAO,CAAA;IACP,gEAAW,CAAA;IACX,4FAAyB,CAAA;IACzB,4DAAS,CAAA;IACT,8DAAU,CAAA;AACZ,CAAC,EAfW,kBAAkB,KAAlB,kBAAkB,QAe7B;AAED,sGAAsG;AACtG,MAAM,0BAA0B,GAAiD;IAC/E,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,SAAS;IACvC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM;IACjC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,UAAU;IACzC,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,QAAQ;IACrC,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,QAAQ;IACrC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM;IACjC,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,WAAW;IAC3C,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,KAAK;IAC/B,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM;IACjC,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,KAAK;IAC/B,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,QAAQ;IACrC,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,EAAE,sBAAsB;IACjE,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM;IACjC,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,OAAO;CACpC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,iCAAiC,GAA8D;IACnG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,IAAI;IAC9C,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,MAAM;IAC1D,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC,SAAS;CAC3D,CAAC;AAQF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,MAAM,UAAU,GAAG,iCAAiC,CAAC,UAAwB,CAAC,CAAC;IAC/E,OAAO,UAAU,KAAK,SAAS;QAC7B,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,kBAAkB,CAAC,KAAK,EAAE;QAChE,CAAC,CAAC,EAAE,QAAQ,EAAE,0BAA0B,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACnF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,mCAAmC,GAA6D;IACpG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,MAAM;IACtD,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,MAAM;IAC3D,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,IAAI;IAClD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,IAAI;IAClD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,IAAI;IACpD,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,IAAI;IACnD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,MAAM;IACtD,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,MAAM;IAC3D,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,MAAM;IACtD,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,MAAM;CAC5D,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,6BAA6B,GAAG,CAAC,uBAAuB,EAAE,qBAAqB,EAAE,WAAW,CAAU,CAAC;AAE7G;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAkB,EAAE,QAAgB;IACxE,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACzE,MAAM,MAAM,GAAG,SAA8C,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,6BAA6B,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,SAAS;QAC5C,MAAM,MAAM,GAAG,mCAAmC,CAAC,SAAkC,CAAC,CAAC;QACvF,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["/*\n OCSF `activity_id` — the normalised verb, resolved per Wildo audit event type.\n \n Until this table existed every OCSF document we emitted carried `activity_id: 0` (Unknown), which\n * also pinned `type_uid` to `class_uid * 100`. That is the single largest fidelity loss in the OCSF\n * projection: `activity_id` is the axis OCSF uses to separate events WITHIN a class, so collapsing it\n * makes a logon indistinguishable from a logoff to any consumer that groups by `type_uid`.\n \n ## Three values, three different claims\n \n \| Value \| Means \| When we use it \|\n * \|---\|---\|---\|\n * \| a specific member \| the published description matches this event \| the description matched — never the caption alone \|\n * \| `OTHER` (99) \| in the class's domain, absent from its enum \| with `activity_name` carrying our event type, which is what the schema asks for \|\n * \| `UNKNOWN` (0) \| we cannot say \| application-defined event types the engine cannot enumerate \|\n \n `OTHER` is not a shrug. The schema defines it as \"the event activity is not mapped. See the\n * `activity_name` attribute, which contains a data source specific value\" — so it is a positive\n * statement plus an obligation, and it strictly beats `UNKNOWN` for any event we understand.\n \n ## Read descriptions, not captions\n \n Authentication's `Authentication Ticket` (3), `Service Ticket Request` (4) and `Service Ticket\n * Renew` (5) read like a natural home for OAuth token issuance and refresh. Their descriptions are\n * explicitly Kerberos (\"A Kerberos service ticket was renewed\"), so every OAuth token event here\n * is `OTHER` instead. Mapping those from the captions would have been a fabrication that validated\n * perfectly.\n \n ## A structural observation, deliberately NOT acted on here\n \n A Wildo event's audit CATEGORY selects the OCSF class, and for several events the natural activity\n * exists in a DIFFERENT class than the category picks: `USER_PASSWORD_CHANGED`, `USER_MFA_ENABLED`,\n * `USER_ACCOUNT_LOCKED` and friends are `AUTHENTICATION` (class 3002), while `Password Change` (8),\n * `Enable MFA Factors` (12) and `Lock` (6) are published by `user_management` (3007). Those rows are\n * `OTHER` with the mismatch named on each. Re-categorising them would change SIEM category filtering\n * for existing tenants, so it is a product decision, not a mapping fix.\n \n spec-cite: OCSF schema 1.9.0 — `schema.ocsf.io/api/1.9.0/classes/{authentication,api_activity,\n * entity_management,user_management}`, the `activity_id` enum and `activity_name` attribute of each.\n /\n\nimport { AuditEventCategory, AuthMethod, CoreAuditableEventType, CoreResourceOperation, getAuditEventClassification } from '@wildo-ai/saas-models';\nimport { OCSF_CLASS_BY_AUDIT_CATEGORY, OcsfClassUid } from './ocsf-class-mapping.backend.utils';\n\n/* `0` and `99` mean the same thing in every OCSF class, so they are named once. /\nexport enum OcsfCommonActivity {\n /* \"The event activity is unknown.\" /\n UNKNOWN = 0,\n /* \"The event activity is not mapped. See the `activity_name` attribute…\" /\n OTHER = 99,\n}\n\n/* Published `activity_id` members of class 3002 (authentication). /\nexport enum OcsfAuthenticationActivity {\n /* \"A new logon session was requested.\" Includes FAILED attempts — the verb is the request; the outcome rides `status_id`. /\n LOGON = 1,\n /* \"A logon session was terminated and no longer exists.\" /\n LOGOFF = 2,\n /* \"A preauthentication stage was engaged.\" Covers issuing an OTP or magic link: a stage BEFORE authentication. /\n PREAUTH = 6,\n OTHER = 99,\n}\n\n/* Published `activity_id` members of class 6003 (api_activity). /\nexport enum OcsfApiActivity {\n CREATE = 1,\n /* \"Read\" — the only CRUD verb our authorization/data-access events reliably carry. /\n READ = 2,\n UPDATE = 3,\n DELETE = 4,\n OTHER = 99,\n}\n\n/* Published `activity_id` members of class 3004 (entity_management). /\nexport enum OcsfEntityManagementActivity {\n CREATE = 1,\n READ = 2,\n UPDATE = 3,\n DELETE = 4,\n MOVE = 5,\n /* \"Enroll an existing managed entity.\" A member joining a tenant. /\n ENROLL = 6,\n UNENROLL = 7,\n ENABLE = 8,\n DISABLE = 9,\n ACTIVATE = 10,\n DEACTIVATE = 11,\n SUSPEND = 12,\n /* \"Resume (unsuspend) an existing managed entity.\" SUSPENDED is the only state our activate runs from. /\n RESUME = 13,\n OTHER = 99,\n}\n\n/* Published `activity_id` members of class 3007 (user_management). /\nexport enum OcsfUserManagementActivity {\n CREATE = 1,\n UPDATE = 2,\n DELETE = 3,\n ENABLE = 4,\n DISABLE = 5,\n LOCK = 6,\n UNLOCK = 7,\n PASSWORD_CHANGE = 8,\n PASSWORD_RESET = 9,\n ATTACH_POLICIES = 10,\n DETACH_POLICIES = 11,\n ENABLE_MFA_FACTORS = 12,\n DISABLE_MFA_FACTORS = 13,\n ASSIGN_PRIVILEGES = 14,\n REMOVE_PRIVILEGES = 15,\n ASSIGN_ROLES = 16,\n REMOVE_ROLES = 17,\n ADD_PROGRAMMATIC_CREDENTIALS = 18,\n REMOVE_PROGRAMMATIC_CREDENTIALS = 19,\n OTHER = 99,\n}\n\n/\n Every published activity id, per class — the membership check's source of truth.\n \n An activity number is only meaningful WITH its class: `1` is `Logon` in 3002 and `Create` in 6003.\n * So a row that assigns the right number under the wrong class is silently wrong, and nothing about\n * the emitted document would look malformed. {@link assertActivitiesBelongToTheirClass} closes that.\n /\nconst PUBLISHED_ACTIVITIES_BY_CLASS: Readonly<Record<OcsfClassUid, ReadonlySet<number>>> = {\n [OcsfClassUid.AUTHENTICATION]: new Set(Object.values(OcsfAuthenticationActivity).filter((v): v is number => typeof v === 'number')),\n [OcsfClassUid.API_ACTIVITY]: new Set(Object.values(OcsfApiActivity).filter((v): v is number => typeof v === 'number')),\n [OcsfClassUid.ENTITY_MANAGEMENT]: new Set(Object.values(OcsfEntityManagementActivity).filter((v): v is number => typeof v === 'number')),\n [OcsfClassUid.USER_MANAGEMENT]: new Set(Object.values(OcsfUserManagementActivity).filter((v): v is number => typeof v === 'number')),\n};\n\n/\n The activity each core audit event resolves to.\n \n Total over `CoreAuditableEventType`, so a new core event type cannot be added without deciding\n * its activity — the same shape the classification map now has, and for the same reason: an open set\n * silently defaulting is how `activity_id` stayed `Unknown` for every event in the first place.\n /\nexport const OCSF_ACTIVITY_BY_EVENT_TYPE: Readonly<Record<CoreAuditableEventType, number>> = {\n\n // ── AUTHENTICATION ──\n [CoreAuditableEventType.EMERGENCY_ACCESS_USED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.MACHINE_AUTH_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.MACHINE_AUTH_SUCCESS]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.OAUTH_CIMD_CLIENT_REFUSED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.OAUTH_CODE_EXCHANGE_FAILED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.OAUTH_DYNAMIC_CLIENT_REGISTERED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.OAUTH_TOKEN_REFRESHED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.OAUTH_TOKEN_REVOKED]: OcsfAuthenticationActivity.OTHER,\n // Unlike the token-revoke sibling above (a no-oracle RFC 7009 ATTEMPT → Other), an RP-Initiated Logout\n // terminates a real user SESSION, so it is a genuine OCSF Logoff — matching USER_LOGOUT / SAML_SLO_COMPLETED.\n [CoreAuditableEventType.OAUTH_RP_INITIATED_LOGOUT]: OcsfAuthenticationActivity.LOGOFF,\n [CoreAuditableEventType.ONE_OFF_TOKEN_CREATED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.ONE_OFF_TOKEN_EXCHANGED]: OcsfAuthenticationActivity.OTHER,\n // Admin token-lifecycle, not an OCSF user LOGOFF — Other(99) + activity_name, matching the family.\n [CoreAuditableEventType.ONE_OFF_TOKEN_REVOKED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.SAML_ASSERTION_REPLAY_DETECTED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.SAML_LOGIN_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.SAML_LOGIN_INITIATED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.SAML_LOGIN_SUCCESS]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.SAML_SLO_COMPLETED]: OcsfAuthenticationActivity.LOGOFF,\n [CoreAuditableEventType.SAML_SLO_INITIATED]: OcsfAuthenticationActivity.LOGOFF,\n [CoreAuditableEventType.USER_ACCOUNT_LOCKED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Lock(6), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_CROSS_FRONTEND_HANDOFF_ISSUED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_IDENTITY_LINK_REMOVED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_LOGIN]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_LOGIN_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_LOGOUT]: OcsfAuthenticationActivity.LOGOFF,\n [CoreAuditableEventType.USER_MAGIC_LINK_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_MAGIC_LINK_SENT]: OcsfAuthenticationActivity.PREAUTH,\n [CoreAuditableEventType.USER_MAGIC_LINK_VERIFIED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_MFA_DISABLED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Disable MFA Factors(13), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_MFA_EMAIL_OTP_SENT]: OcsfAuthenticationActivity.PREAUTH,\n [CoreAuditableEventType.USER_MFA_ENABLED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Enable MFA Factors(12), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_MFA_SETUP_COMPLETED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_MFA_SETUP_STARTED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_PASSKEY_AUTHENTICATION_FAILURE]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_PASSKEY_AUTHENTICATION_SUCCESS]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_PASSKEY_REGISTERED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_PASSKEY_REMOVED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_PASSWORD_CHANGED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Password Change(8), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_PASSWORD_RESET_COMPLETED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Password Reset(9), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_PASSWORD_RESET_FORCED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Password Reset(9), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_PASSWORD_RESET_REQUESTED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_PASSWORD_SET]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_REFRESH_TOKEN_REUSE_DETECTED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_SESSION_EXPIRED]: OcsfAuthenticationActivity.LOGOFF,\n [CoreAuditableEventType.USER_SMS_OTP_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_SMS_OTP_SENT]: OcsfAuthenticationActivity.PREAUTH,\n [CoreAuditableEventType.USER_SMS_OTP_VERIFIED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_SSO_ENFORCEMENT_BLOCKED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_SSO_LOGIN]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_SSO_LOGIN_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_TOKEN_REFRESHED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_TOTP_DISABLED]: OcsfAuthenticationActivity.OTHER,\n\n // ── AUTHORIZATION ──\n [CoreAuditableEventType.APPLICATION_SUPER_ADMIN_FLOOR_BREACHED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.CROSS_TENANT_ADMINISTRATIVE_ACCESS]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH2_PROVIDER_BLOCKED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH_CONSENT_BINDING_VIOLATION]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH_CONSENT_DENIED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH_CONSENT_GRANTED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH_CONSENT_GRANT_PERSISTED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH_DELEGATED_TOKEN_ISSUED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.ORGANIZATION_MEMBER_ROLE_CHANGED]: OcsfApiActivity.OTHER, // a role change is not one of 6003 CRUD verbs\n [CoreAuditableEventType.ORGANIZATION_OWNER_FLOOR_BREACHED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.ORGANIZATION_UNIT_MEMBER_REMOVED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.ORGANIZATION_UNIT_MEMBER_ROLE_CHANGED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.PLATFORM_ACCESS_GRANT_LIFECYCLE]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.RESOURCE_OPERATION_DENIED]: OcsfApiActivity.OTHER, // the CRUD verb is runtime data (the operation), not derivable from the event type\n [CoreAuditableEventType.RESOURCE_OPERATION_PERFORMED]: OcsfApiActivity.OTHER, // the CRUD verb is runtime data (the operation), not derivable from the event type\n [CoreAuditableEventType.USER_APP_ROLES_CHANGED]: OcsfApiActivity.OTHER, // a role change is not one of 6003 CRUD verbs\n\n // ── DATA_ACCESS ──\n [CoreAuditableEventType.FIELD_ACCESS]: OcsfApiActivity.READ,\n [CoreAuditableEventType.MACHINE_ACCESS]: OcsfApiActivity.OTHER, // names a surface reach (A2A/MCP turn), not a CRUD verb on a resource\n // READ, not OTHER: enumerating a directory IS a read of resource rows, and it is the one case\n // where the CRUD verb IS derivable from the event type — the event only ever names a collection\n // read (list/search/count), never a mutation.\n [CoreAuditableEventType.PLATFORM_DIRECTORY_ACCESS]: OcsfApiActivity.READ,\n [CoreAuditableEventType.RETAINED_DATA_ACCESS]: OcsfApiActivity.READ,\n [CoreAuditableEventType.SUBJECT_DATA_EXPORT]: OcsfApiActivity.READ,\n [CoreAuditableEventType.COLLECTION_DATA_EXPORT]: OcsfApiActivity.READ,\n [CoreAuditableEventType.HTTP_API_READ_THROUGH_ACCESS]: OcsfApiActivity.READ,\n // D6 stance 6b: the declared external-erasure operation DELETED remote rows.\n [CoreAuditableEventType.HTTP_API_EXTERNAL_ERASURE]: OcsfApiActivity.DELETE,\n // D6 stance 6c: nothing was deleted — the event records a deliberate non-action.\n [CoreAuditableEventType.HTTP_API_NON_ERASURE_ACKNOWLEDGED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.SYSTEM_CONTEXT_READ]: OcsfApiActivity.READ,\n [CoreAuditableEventType.SYSTEM_CONTEXT_WRITE]: OcsfApiActivity.OTHER, // static fallback only — refined per emission from eventData.operation (CREATE \| UPDATE \| UPDATE_MANY)\n\n // ── ORG_MANAGEMENT ──\n [CoreAuditableEventType.ORGANIZATION_ACTIVATED]: OcsfEntityManagementActivity.RESUME,\n [CoreAuditableEventType.ORGANIZATION_CREATED]: OcsfEntityManagementActivity.CREATE,\n [CoreAuditableEventType.ORGANIZATION_DELETED]: OcsfEntityManagementActivity.DELETE,\n [CoreAuditableEventType.ORGANIZATION_DELETION_REQUESTED]: OcsfEntityManagementActivity.OTHER, // marks the tenant and opens a window; nothing is deleted yet, so Delete(4) would overstate it\n [CoreAuditableEventType.ORGANIZATION_MEMBER_INVITED]: OcsfEntityManagementActivity.CREATE,\n [CoreAuditableEventType.ORGANIZATION_MEMBER_JOINED]: OcsfEntityManagementActivity.ENROLL,\n [CoreAuditableEventType.ORGANIZATION_MEMBER_REMOVED]: OcsfEntityManagementActivity.UNENROLL,\n [CoreAuditableEventType.ORGANIZATION_MEMBER_STATUS_CHANGED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_MEMBER_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_NOTIFICATIONS_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_PREFERENCES_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_PROFILE_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_RESTORED]: OcsfEntityManagementActivity.OTHER, // un-deletion has no 3004 member; Resume(13) is unsuspend and Activate(10) is a transient engine state\n [CoreAuditableEventType.ORGANIZATION_SIEM_EXPORT_CONFIGURED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_SSO_CONFIGURATION_CHANGED]: OcsfEntityManagementActivity.UPDATE,\n // An application authentication-policy change is a configuration entity being UPDATED — the same\n // OCSF shape as the SSO / SIEM / SCIM configuration-change siblings around it. (Confirmed by the\n // session that added the event: UPDATE is the intended activity.)\n [CoreAuditableEventType.APPLICATION_AUTH_POLICY_CHANGED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_SUSPENDED]: OcsfEntityManagementActivity.SUSPEND,\n [CoreAuditableEventType.ORGANIZATION_UNIT_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.SAML_CERT_EXPIRING]: OcsfEntityManagementActivity.OTHER,\n [CoreAuditableEventType.SAML_METADATA_PARSED]: OcsfEntityManagementActivity.OTHER,\n [CoreAuditableEventType.SCIM_PROVISIONING_CONFIG_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.SCIM_PROVISIONING_FAILED]: OcsfEntityManagementActivity.OTHER,\n [CoreAuditableEventType.SCIM_TOKEN_CREATED]: OcsfEntityManagementActivity.CREATE,\n [CoreAuditableEventType.SCIM_TOKEN_GENERATED]: OcsfEntityManagementActivity.CREATE,\n [CoreAuditableEventType.SCIM_TOKEN_REVOKED]: OcsfEntityManagementActivity.DELETE,\n [CoreAuditableEventType.SCIM_TOKEN_ROTATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.WEBHOOK_ENDPOINT_TEST_DISPATCHED]: OcsfEntityManagementActivity.OTHER,\n\n // ── USER_LIFECYCLE ──\n [CoreAuditableEventType.RESOURCE_STATUS_TRANSITION_PERFORMED]: OcsfUserManagementActivity.OTHER,\n [CoreAuditableEventType.SAML_EMAIL_CHANGED]: OcsfUserManagementActivity.UPDATE,\n [CoreAuditableEventType.SCIM_USER_DEACTIVATED]: OcsfUserManagementActivity.DISABLE,\n [CoreAuditableEventType.SCIM_USER_PROVISIONED]: OcsfUserManagementActivity.CREATE,\n [CoreAuditableEventType.SCIM_USER_UPDATED]: OcsfUserManagementActivity.UPDATE,\n [CoreAuditableEventType.USER_CREATED]: OcsfUserManagementActivity.CREATE,\n [CoreAuditableEventType.USER_DELETED]: OcsfUserManagementActivity.DELETE,\n [CoreAuditableEventType.USER_EMAIL_VERIFIED]: OcsfUserManagementActivity.UPDATE,\n [CoreAuditableEventType.USER_PHONE_VERIFICATION_FAILED]: OcsfUserManagementActivity.OTHER,\n [CoreAuditableEventType.USER_PHONE_VERIFIED]: OcsfUserManagementActivity.UPDATE,\n [CoreAuditableEventType.USER_REGISTERED]: OcsfUserManagementActivity.CREATE,\n [CoreAuditableEventType.USER_UPDATED]: OcsfUserManagementActivity.UPDATE,\n [CoreAuditableEventType.USER_VERIFICATION_EMAIL_RESENT]: OcsfUserManagementActivity.OTHER,\n};\n\n/\n Fail at module load if any row assigns an activity its own class does not publish.\n \n This is the check the table exists to make possible. Activity numbers are class-scoped and collide\n * across classes, so a misfiled row produces a document that is structurally valid, schema-conformant,\n * and semantically wrong — the failure mode nothing downstream can catch.\n /\nfunction assertActivitiesBelongToTheirClass(): void {\n const offenders: string[] = [];\n for (const [eventType, activityId] of Object.entries(OCSF_ACTIVITY_BY_EVENT_TYPE)) {\n const category = getAuditEventClassification(eventType).category;\n const descriptor = OCSF_CLASS_BY_AUDIT_CATEGORY[category as AuditEventCategory];\n if (!PUBLISHED_ACTIVITIES_BY_CLASS[descriptor.classUid].has(activityId)) {\n offenders.push(`${eventType} → activity ${activityId} is not published by class ${descriptor.classUid}`);\n }\n }\n if (offenders.length > 0) {\n throw new Error(`OCSF activity mapping assigns activities their class does not publish:\\n ${offenders.join('\\n ')}`);\n }\n}\nassertActivitiesBelongToTheirClass();\n\n/\n Resolve the OCSF activity for an event type.\n \n Application-defined event types are ordinary strings the engine cannot enumerate, so they resolve to\n * `UNKNOWN` — the one case where \"we cannot say\" is the truthful answer.\n /\nexport function resolveOcsfActivityId(eventType: string): number {\n return OCSF_ACTIVITY_BY_EVENT_TYPE[eventType as CoreAuditableEventType] ?? OcsfCommonActivity.UNKNOWN;\n}\n\n/\n The `activity_name` companion for an `OTHER` assignment, or `undefined` when the activity is specific.\n \n The schema's own definition of `OTHER` points the reader at `activity_name`, so emitting `OTHER`\n * without it discards the very information the value promises is available.\n \n Takes the RESOLVED activity rather than re-deriving it from the event type. That distinction became\n * load-bearing when 6003 gained runtime refinement: an event whose TABLE entry is `Other` but whose\n * refined activity is `Update` must NOT carry `activity_name`, and a version of this that re-derived\n * from the event type would have emitted both — a specific activity plus a companion asserting it was\n * unmapped. Two ways to answer one question is the drift this contract exists to prevent.\n /\nexport function resolveOcsfActivityName(activityId: number, eventType: string): string \| undefined {\n return activityId === OcsfCommonActivity.OTHER ? eventType : undefined;\n}\n\n/\n OCSF `auth_protocol_id` — the NORMALISED authentication protocol.\n \n spec-cite: OCSF 1.9.0 — `schema.ocsf.io/api/1.9.0/classes/authentication`, the `auth_protocol_id`\n * enum. `auth_protocol` is documented as \"the authentication protocol as defined by the caption of\n * `auth_protocol_id`. In the case of Other, it is defined by the event source.\"\n /\nexport enum OcsfAuthProtocolId {\n UNKNOWN = 0,\n NTLM = 1,\n KERBEROS = 2,\n DIGEST = 3,\n OPENID = 4,\n SAML = 5,\n OAUTH_2_0 = 6,\n PAP = 7,\n CHAP = 8,\n EAP = 9,\n RADIUS = 10,\n BASIC_AUTHENTICATION = 11,\n LDAP = 12,\n OTHER = 99,\n}\n\n/* The published CAPTION for each id — what `auth_protocol` must carry when the id is not `Other`. /\nconst OCSF_AUTH_PROTOCOL_CAPTION: Readonly<Record<OcsfAuthProtocolId, string>> = {\n [OcsfAuthProtocolId.UNKNOWN]: 'Unknown',\n [OcsfAuthProtocolId.NTLM]: 'NTLM',\n [OcsfAuthProtocolId.KERBEROS]: 'Kerberos',\n [OcsfAuthProtocolId.DIGEST]: 'Digest',\n [OcsfAuthProtocolId.OPENID]: 'OpenID',\n [OcsfAuthProtocolId.SAML]: 'SAML',\n [OcsfAuthProtocolId.OAUTH_2_0]: 'OAUTH 2.0',\n [OcsfAuthProtocolId.PAP]: 'PAP',\n [OcsfAuthProtocolId.CHAP]: 'CHAP',\n [OcsfAuthProtocolId.EAP]: 'EAP',\n [OcsfAuthProtocolId.RADIUS]: 'RADIUS',\n [OcsfAuthProtocolId.BASIC_AUTHENTICATION]: 'Basic Authentication',\n [OcsfAuthProtocolId.LDAP]: 'LDAP',\n [OcsfAuthProtocolId.OTHER]: 'Other',\n};\n\n/\n The `AuthMethod` members that ARE a protocol OCSF normalises. Everything else resolves to `Other`.\n \n Deliberately partial. Three members are absent for a reason, and each absence is a decision:\n \n - `PASSWORD` is NOT `Basic Authentication` (11). Basic Auth is an HTTP transport scheme (RFC 7617);\n * a user typing a password into a form is not that, and the resemblance is only in the English word.\n * - `MAGIC_LINK`, `TOTP`, `SMS_OTP`, `EMAIL_OTP` and `PASSKEY` name no protocol in the published enum.\n * WebAuthn/FIDO2 in particular is absent from OCSF 1.9.0 — mapping a passkey to `Other` is the\n * accurate answer, not a shortfall.\n * - `EXTERNAL_OAUTH2` DOES map: it is OAuth 2.0 by construction.\n \n The `ORG_` prefix on the SSO members is SCOPE, not protocol — an organization-restricted SAML login\n * is still SAML — so those normalise cleanly.\n /\nconst OCSF_AUTH_PROTOCOL_BY_AUTH_METHOD: Readonly<Partial<Record<AuthMethod, OcsfAuthProtocolId>>> = {\n [AuthMethod.ORG_SAML]: OcsfAuthProtocolId.SAML,\n [AuthMethod.ORG_OPENID_CONNECT]: OcsfAuthProtocolId.OPENID,\n [AuthMethod.EXTERNAL_OAUTH2]: OcsfAuthProtocolId.OAUTH_2_0,\n};\n\n/* `auth_protocol` + `auth_protocol_id`, resolved together because the schema couples them. /\nexport interface OcsfAuthProtocol {\n readonly protocol: string;\n readonly protocolId: OcsfAuthProtocolId;\n}\n\n/\n Resolve the OCSF protocol pair for an envelope's `authMethod`.\n \n The two attributes are resolved TOGETHER because the schema defines one in terms of the other: when\n * the id is normalised, the string must be that id's published caption; only under `Other` may the\n * string be the producer's own value. Returning them separately invites the pairing to drift, which is\n * exactly how this shipped wrong the first time (`org_saml` with no id at all).\n \n `authMethod` is an OPEN string on the envelope — applications define their own — so anything outside\n * the framework's own `AuthMethod` vocabulary lands on `Other` carrying its raw value, which is\n * precisely what `Other` is for.\n /\nexport function resolveOcsfAuthProtocol(authMethod: string): OcsfAuthProtocol {\n const normalised = OCSF_AUTH_PROTOCOL_BY_AUTH_METHOD[authMethod as AuthMethod];\n return normalised === undefined\n ? { protocol: authMethod, protocolId: OcsfAuthProtocolId.OTHER }\n : { protocol: OCSF_AUTH_PROTOCOL_CAPTION[normalised], protocolId: normalised };\n}\n\n/\n The CRUD verb an API Activity (6003) event performed, mapped from the framework's core operation.\n \n spec-cite: OCSF 1.9.0 — `api_activity.activity_id` enum: 0 Unknown, 1 Create, 2 Read, 3 Update,\n * 4 Delete, 99 Other.\n \n The bulk forms collapse onto their singular verb: OCSF's activity names WHAT was done, and the\n * cardinality is carried separately by the envelope (`isBulkOperation` / `affectedRecordCount`).\n * `COUNT` is a Read — it answers a question about existing rows without changing any.\n /\nconst OCSF_API_ACTIVITY_BY_CORE_OPERATION: Readonly<Record<CoreResourceOperation, OcsfApiActivity>> = {\n [CoreResourceOperation.CREATE]: OcsfApiActivity.CREATE,\n [CoreResourceOperation.CREATE_MANY]: OcsfApiActivity.CREATE,\n [CoreResourceOperation.READ]: OcsfApiActivity.READ,\n [CoreResourceOperation.LIST]: OcsfApiActivity.READ,\n [CoreResourceOperation.SEARCH]: OcsfApiActivity.READ,\n [CoreResourceOperation.COUNT]: OcsfApiActivity.READ,\n [CoreResourceOperation.UPDATE]: OcsfApiActivity.UPDATE,\n [CoreResourceOperation.UPDATE_MANY]: OcsfApiActivity.UPDATE,\n [CoreResourceOperation.DELETE]: OcsfApiActivity.DELETE,\n [CoreResourceOperation.DELETE_MANY]: OcsfApiActivity.DELETE,\n};\n\n/\n The `eventData` keys that can name a 6003 event's CRUD verb, in precedence order.\n \n Three keys rather than one because the emitters spell it differently and each is authoritative for\n * its own event: `resourceOperationLike` is the core semantics a CUSTOM verb borrows (a `suspend`\n * behaving as an `update`), `operationIdentifier` is the verb on resource-operation and field-access\n * events, and `operation` is what `logSystemContextWrite` records — typed `CREATE \| UPDATE \|\n * UPDATE_MANY`, so it always resolves.\n \n Enumerated by the QUESTION (\"what names the verb on a 6003 event?\") rather than by one emitter's\n * field name, which is how `operation` was missed on the first pass.\n /\nconst OCSF_API_VERB_EVENT_DATA_KEYS = ['resourceOperationLike', 'operationIdentifier', 'operation'] as const;\n\n/\n Refine a 6003 event's `activity_id` from RUNTIME data, when the event type alone cannot say.\n \n Class 6003 is organised around the CRUD axis, and the resource-operation events (`performed` /\n * `denied`) are the bulk of what we route there — yet the event TYPE is the same string for a create\n * and a delete. So the table maps them to `Other`, and every authorization event landed in one\n * undifferentiated bucket: the same collapse `activity_id` being pinned to `Unknown` used to cause,\n * surviving one layer down after that was fixed.\n \n The verb is in the envelope — under one of {@link OCSF_API_VERB_EVENT_DATA_KEYS}, in that precedence\n * order. Anything else (a custom verb borrowing nothing) keeps `Other`, where `activity_name` already\n * carries the event type.\n \n Two consequences that are DECISIONS, not side effects:\n \n - `FIELD_ACCESS` refines away from its static `Read`. It carries `operationIdentifier`, so a\n * secret exposed during a create now reads as Create(1). That is correct: 6003's activity names what\n * the API CALL did, and the field-access nature rides `metadata.event_code`. The static `Read` remains\n * the fallback for an emission that names no operation.\n * - `SYSTEM_CONTEXT_WRITE` stops being `Other`. Its table comment says \"neither Create nor Update is\n * true of every emission\" — true of a STATIC mapping and not a permanent conclusion, because at\n * runtime `operation` says exactly which. This matters more than most: it is the ACL-bypass write.\n */\nexport function refineOcsfApiActivity(eventData: unknown, fallback: number): number {\n if (eventData === null \|\| typeof eventData !== 'object') return fallback;\n const record = eventData as Readonly<Record<string, unknown>>;\n for (const key of OCSF_API_VERB_EVENT_DATA_KEYS) {\n const candidate = record[key];\n if (typeof candidate !== 'string') continue;\n const mapped = OCSF_API_ACTIVITY_BY_CORE_OPERATION[candidate as CoreResourceOperation];\n if (mapped !== undefined) return mapped;\n }\n return fallback;\n}\n"]}
1	+ {"version":3,"file":"ocsf-activity-mapping.backend.utils.js","sourceRoot":"","sources":["../../../../../../../src/compliance/audit-trails/services/utils/ocsf-activity-mapping.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAsB,UAAU,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACnJ,OAAO,EAAE,4BAA4B,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEhG,oFAAoF;AACpF,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAuC;IACvC,iEAAW,CAAA;IACX,6EAA6E;IAC7E,8DAAU,CAAA;AACZ,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED,sEAAsE;AACtE,MAAM,CAAN,IAAY,0BAQX;AARD,WAAY,0BAA0B;IACpC,8HAA8H;IAC9H,6EAAS,CAAA;IACT,6DAA6D;IAC7D,+EAAU,CAAA;IACV,mHAAmH;IACnH,iFAAW,CAAA;IACX,8EAAU,CAAA;AACZ,CAAC,EARW,0BAA0B,KAA1B,0BAA0B,QAQrC;AAED,oEAAoE;AACpE,MAAM,CAAN,IAAY,eAOX;AAPD,WAAY,eAAe;IACzB,yDAAU,CAAA;IACV,uFAAuF;IACvF,qDAAQ,CAAA;IACR,yDAAU,CAAA;IACV,yDAAU,CAAA;IACV,wDAAU,CAAA;AACZ,CAAC,EAPW,eAAe,KAAf,eAAe,QAO1B;AAED,yEAAyE;AACzE,MAAM,CAAN,IAAY,4BAiBX;AAjBD,WAAY,4BAA4B;IACtC,mFAAU,CAAA;IACV,+EAAQ,CAAA;IACR,mFAAU,CAAA;IACV,mFAAU,CAAA;IACV,+EAAQ,CAAA;IACR,sEAAsE;IACtE,mFAAU,CAAA;IACV,uFAAY,CAAA;IACZ,mFAAU,CAAA;IACV,qFAAW,CAAA;IACX,wFAAa,CAAA;IACb,4FAAe,CAAA;IACf,sFAAY,CAAA;IACZ,2GAA2G;IAC3G,oFAAW,CAAA;IACX,kFAAU,CAAA;AACZ,CAAC,EAjBW,4BAA4B,KAA5B,4BAA4B,QAiBvC;AAED,uEAAuE;AACvE,MAAM,CAAN,IAAY,0BAqBX;AArBD,WAAY,0BAA0B;IACpC,+EAAU,CAAA;IACV,+EAAU,CAAA;IACV,+EAAU,CAAA;IACV,+EAAU,CAAA;IACV,iFAAW,CAAA;IACX,2EAAQ,CAAA;IACR,+EAAU,CAAA;IACV,iGAAmB,CAAA;IACnB,+FAAkB,CAAA;IAClB,kGAAoB,CAAA;IACpB,kGAAoB,CAAA;IACpB,wGAAuB,CAAA;IACvB,0GAAwB,CAAA;IACxB,sGAAsB,CAAA;IACtB,sGAAsB,CAAA;IACtB,4FAAiB,CAAA;IACjB,4FAAiB,CAAA;IACjB,4HAAiC,CAAA;IACjC,kIAAoC,CAAA;IACpC,8EAAU,CAAA;AACZ,CAAC,EArBW,0BAA0B,KAA1B,0BAA0B,QAqBrC;AAED;;;;;;GAMG;AACH,MAAM,6BAA6B,GAAwD;IACzF,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACnI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACtH,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACxI,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;CACrI,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAqD;IAE3F,uBAAuB;IACvB,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC9E,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACpF,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACrF,CAAC,sBAAsB,CAAC,+BAA+B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC1F,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC9E,uGAAuG;IACvG,8GAA8G;IAC9G,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACrF,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAClF,mGAAmG;IACnG,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,8BAA8B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACzF,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC5E,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC7E,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC9E,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC9E,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,sFAAsF;IACtK,CAAC,sBAAsB,CAAC,kCAAkC,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC7F,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACrF,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACrE,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC5E,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACvE,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACjF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,OAAO;IACjF,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACnF,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,sGAAsG;IACpL,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,EAAE,0BAA0B,CAAC,OAAO;IACpF,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,qGAAqG;IAClL,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACnF,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACjF,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC9F,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC9F,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAClF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,iGAAiG;IACnL,CAAC,sBAAsB,CAAC,6BAA6B,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,gGAAgG;IAC1L,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,gGAAgG;IACvL,CAAC,sBAAsB,CAAC,6BAA6B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACxF,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC5E,CAAC,sBAAsB,CAAC,iCAAiC,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC5F,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAChF;;;;;OAKG;IACH,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAChF,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC9E,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,OAAO;IAC9E,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACvF,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACzE,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAE7E,sBAAsB;IACtB,oGAAoG;IACpG,0CAA0C;IAC1C,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,EAAE,eAAe,CAAC,KAAK;IACxE,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC,KAAK;IACzE,CAAC,sBAAsB,CAAC,sCAAsC,CAAC,EAAE,eAAe,CAAC,KAAK;IACtF,CAAC,sBAAsB,CAAC,kCAAkC,CAAC,EAAE,eAAe,CAAC,KAAK;IAClF,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,EAAE,eAAe,CAAC,KAAK;IACvE,CAAC,sBAAsB,CAAC,+BAA+B,CAAC,EAAE,eAAe,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAC,KAAK;IACpE,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,eAAe,CAAC,KAAK;IACrE,CAAC,sBAAsB,CAAC,6BAA6B,CAAC,EAAE,eAAe,CAAC,KAAK;IAC7E,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,eAAe,CAAC,KAAK;IAC5E,CAAC,sBAAsB,CAAC,gCAAgC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,8CAA8C;IAChI,CAAC,sBAAsB,CAAC,iCAAiC,CAAC,EAAE,eAAe,CAAC,KAAK;IACjF,CAAC,sBAAsB,CAAC,gCAAgC,CAAC,EAAE,eAAe,CAAC,KAAK;IAChF,CAAC,sBAAsB,CAAC,qCAAqC,CAAC,EAAE,eAAe,CAAC,KAAK;IACrF,CAAC,sBAAsB,CAAC,+BAA+B,CAAC,EAAE,eAAe,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,mFAAmF;IAC9J,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,mFAAmF;IACjK,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,8CAA8C;IAEtH,oBAAoB;IACpB,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC,IAAI;IAC3D,oGAAoG;IACpG,oFAAoF;IACpF,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,EAAE,eAAe,CAAC,MAAM;IAC3E,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,sEAAsE;IACtI,8FAA8F;IAC9F,gGAAgG;IAChG,8CAA8C;IAC9C,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC,IAAI;IACxE,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAC,IAAI;IACnE,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,eAAe,CAAC,IAAI;IAClE,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,eAAe,CAAC,IAAI;IACrE,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,eAAe,CAAC,IAAI;IAC3E,6EAA6E;IAC7E,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC,MAAM;IAC1E,iFAAiF;IACjF,CAAC,sBAAsB,CAAC,iCAAiC,CAAC,EAAE,eAAe,CAAC,KAAK;IACjF,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,eAAe,CAAC,IAAI;IAClE,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,uGAAuG;IAE7K,uBAAuB;IACvB,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACpF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAClF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAClF,CAAC,sBAAsB,CAAC,+BAA+B,CAAC,EAAE,4BAA4B,CAAC,KAAK,EAAE,+FAA+F;IAC7L,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACzF,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACxF,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,EAAE,4BAA4B,CAAC,QAAQ;IAC3F,CAAC,sBAAsB,CAAC,kCAAkC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAChG,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACzF,CAAC,sBAAsB,CAAC,kCAAkC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAChG,CAAC,sBAAsB,CAAC,gCAAgC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAC9F,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAC1F,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,4BAA4B,CAAC,KAAK,EAAE,uGAAuG;IAC3L,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACjG,CAAC,sBAAsB,CAAC,sCAAsC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACpG,iGAAiG;IACjG,iGAAiG;IACjG,kEAAkE;IAClE,CAAC,sBAAsB,CAAC,+BAA+B,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAC7F,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE,4BAA4B,CAAC,OAAO;IACrF,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IACvF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAClF,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAAC,KAAK;IAC/E,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC,KAAK;IACjF,CAAC,sBAAsB,CAAC,gCAAgC,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAC9F,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,EAAE,4BAA4B,CAAC,KAAK;IACrF,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAChF,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAClF,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAChF,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAAC,MAAM;IAChF,CAAC,sBAAsB,CAAC,gCAAgC,CAAC,EAAE,4BAA4B,CAAC,KAAK;IAE7F,uBAAuB;IACvB,CAAC,sBAAsB,CAAC,oCAAoC,CAAC,EAAE,0BAA0B,CAAC,KAAK;IAC/F,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC9E,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,OAAO;IAClF,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACjF,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC7E,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACxE,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACxE,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC/E,CAAC,sBAAsB,CAAC,8BAA8B,CAAC,EAAE,0BAA0B,CAAC,KAAK;IACzF,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC/E,CAAC,sBAAsB,CAAC,eAAe,CAAC,EAAE,0BAA0B,CAAC,MAAM;IAC3E,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,MAAM;IACxE,CAAC,sBAAsB,CAAC,8BAA8B,CAAC,EAAE,0BAA0B,CAAC,KAAK;CAC1F,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,kCAAkC;IACzC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC;QACjE,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAA8B,CAAC,CAAC;QAChF,IAAI,CAAC,6BAA6B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACxE,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,eAAe,UAAU,8BAA8B,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6EAA6E,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC;AACH,CAAC;AACD,kCAAkC,EAAE,CAAC;AAErC;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,OAAO,2BAA2B,CAAC,SAAmC,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC;AACxG,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,SAAiB;IAC3E,OAAO,UAAU,KAAK,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,kBAeX;AAfD,WAAY,kBAAkB;IAC5B,iEAAW,CAAA;IACX,2DAAQ,CAAA;IACR,mEAAY,CAAA;IACZ,+DAAU,CAAA;IACV,+DAAU,CAAA;IACV,2DAAQ,CAAA;IACR,qEAAa,CAAA;IACb,yDAAO,CAAA;IACP,2DAAQ,CAAA;IACR,yDAAO,CAAA;IACP,gEAAW,CAAA;IACX,4FAAyB,CAAA;IACzB,4DAAS,CAAA;IACT,8DAAU,CAAA;AACZ,CAAC,EAfW,kBAAkB,KAAlB,kBAAkB,QAe7B;AAED,sGAAsG;AACtG,MAAM,0BAA0B,GAAiD;IAC/E,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,SAAS;IACvC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM;IACjC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,UAAU;IACzC,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,QAAQ;IACrC,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,QAAQ;IACrC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM;IACjC,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,WAAW;IAC3C,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,KAAK;IAC/B,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM;IACjC,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,KAAK;IAC/B,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,QAAQ;IACrC,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,EAAE,sBAAsB;IACjE,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM;IACjC,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,OAAO;CACpC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,iCAAiC,GAA8D;IACnG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,IAAI;IAC9C,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,MAAM;IAC1D,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC,SAAS;CAC3D,CAAC;AAQF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,MAAM,UAAU,GAAG,iCAAiC,CAAC,UAAwB,CAAC,CAAC;IAC/E,OAAO,UAAU,KAAK,SAAS;QAC7B,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,kBAAkB,CAAC,KAAK,EAAE;QAChE,CAAC,CAAC,EAAE,QAAQ,EAAE,0BAA0B,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACnF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,mCAAmC,GAA6D;IACpG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,MAAM;IACtD,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,MAAM;IAC3D,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,IAAI;IAClD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,IAAI;IAClD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,IAAI;IACpD,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,IAAI;IACnD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,MAAM;IACtD,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,MAAM;IAC3D,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,MAAM;IACtD,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,MAAM;CAC5D,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,6BAA6B,GAAG,CAAC,uBAAuB,EAAE,qBAAqB,EAAE,WAAW,CAAU,CAAC;AAE7G;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAkB,EAAE,QAAgB;IACxE,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACzE,MAAM,MAAM,GAAG,SAA8C,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,6BAA6B,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,SAAS;QAC5C,MAAM,MAAM,GAAG,mCAAmC,CAAC,SAAkC,CAAC,CAAC;QACvF,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["/*\n OCSF `activity_id` — the normalised verb, resolved per Wildo audit event type.\n \n Until this table existed every OCSF document we emitted carried `activity_id: 0` (Unknown), which\n * also pinned `type_uid` to `class_uid * 100`. That is the single largest fidelity loss in the OCSF\n * projection: `activity_id` is the axis OCSF uses to separate events WITHIN a class, so collapsing it\n * makes a logon indistinguishable from a logoff to any consumer that groups by `type_uid`.\n \n ## Three values, three different claims\n \n \| Value \| Means \| When we use it \|\n * \|---\|---\|---\|\n * \| a specific member \| the published description matches this event \| the description matched — never the caption alone \|\n * \| `OTHER` (99) \| in the class's domain, absent from its enum \| with `activity_name` carrying our event type, which is what the schema asks for \|\n * \| `UNKNOWN` (0) \| we cannot say \| application-defined event types the engine cannot enumerate \|\n \n `OTHER` is not a shrug. The schema defines it as \"the event activity is not mapped. See the\n * `activity_name` attribute, which contains a data source specific value\" — so it is a positive\n * statement plus an obligation, and it strictly beats `UNKNOWN` for any event we understand.\n \n ## Read descriptions, not captions\n \n Authentication's `Authentication Ticket` (3), `Service Ticket Request` (4) and `Service Ticket\n * Renew` (5) read like a natural home for OAuth token issuance and refresh. Their descriptions are\n * explicitly Kerberos (\"A Kerberos service ticket was renewed\"), so every OAuth token event here\n * is `OTHER` instead. Mapping those from the captions would have been a fabrication that validated\n * perfectly.\n \n ## A structural observation, deliberately NOT acted on here\n \n A Wildo event's audit CATEGORY selects the OCSF class, and for several events the natural activity\n * exists in a DIFFERENT class than the category picks: `USER_PASSWORD_CHANGED`, `USER_MFA_ENABLED`,\n * `USER_ACCOUNT_LOCKED` and friends are `AUTHENTICATION` (class 3002), while `Password Change` (8),\n * `Enable MFA Factors` (12) and `Lock` (6) are published by `user_management` (3007). Those rows are\n * `OTHER` with the mismatch named on each. Re-categorising them would change SIEM category filtering\n * for existing tenants, so it is a product decision, not a mapping fix.\n \n spec-cite: OCSF schema 1.9.0 — `schema.ocsf.io/api/1.9.0/classes/{authentication,api_activity,\n * entity_management,user_management}`, the `activity_id` enum and `activity_name` attribute of each.\n /\n\nimport { AuditEventCategory, AuthMethod, CoreAuditableEventType, CoreResourceOperation, getAuditEventClassification } from '@wildo-ai/saas-models';\nimport { OCSF_CLASS_BY_AUDIT_CATEGORY, OcsfClassUid } from './ocsf-class-mapping.backend.utils';\n\n/* `0` and `99` mean the same thing in every OCSF class, so they are named once. /\nexport enum OcsfCommonActivity {\n /* \"The event activity is unknown.\" /\n UNKNOWN = 0,\n /* \"The event activity is not mapped. See the `activity_name` attribute…\" /\n OTHER = 99,\n}\n\n/* Published `activity_id` members of class 3002 (authentication). /\nexport enum OcsfAuthenticationActivity {\n /* \"A new logon session was requested.\" Includes FAILED attempts — the verb is the request; the outcome rides `status_id`. /\n LOGON = 1,\n /* \"A logon session was terminated and no longer exists.\" /\n LOGOFF = 2,\n /* \"A preauthentication stage was engaged.\" Covers issuing an OTP or magic link: a stage BEFORE authentication. /\n PREAUTH = 6,\n OTHER = 99,\n}\n\n/* Published `activity_id` members of class 6003 (api_activity). /\nexport enum OcsfApiActivity {\n CREATE = 1,\n /* \"Read\" — the only CRUD verb our authorization/data-access events reliably carry. /\n READ = 2,\n UPDATE = 3,\n DELETE = 4,\n OTHER = 99,\n}\n\n/* Published `activity_id` members of class 3004 (entity_management). /\nexport enum OcsfEntityManagementActivity {\n CREATE = 1,\n READ = 2,\n UPDATE = 3,\n DELETE = 4,\n MOVE = 5,\n /* \"Enroll an existing managed entity.\" A member joining a tenant. /\n ENROLL = 6,\n UNENROLL = 7,\n ENABLE = 8,\n DISABLE = 9,\n ACTIVATE = 10,\n DEACTIVATE = 11,\n SUSPEND = 12,\n /* \"Resume (unsuspend) an existing managed entity.\" SUSPENDED is the only state our activate runs from. /\n RESUME = 13,\n OTHER = 99,\n}\n\n/* Published `activity_id` members of class 3007 (user_management). /\nexport enum OcsfUserManagementActivity {\n CREATE = 1,\n UPDATE = 2,\n DELETE = 3,\n ENABLE = 4,\n DISABLE = 5,\n LOCK = 6,\n UNLOCK = 7,\n PASSWORD_CHANGE = 8,\n PASSWORD_RESET = 9,\n ATTACH_POLICIES = 10,\n DETACH_POLICIES = 11,\n ENABLE_MFA_FACTORS = 12,\n DISABLE_MFA_FACTORS = 13,\n ASSIGN_PRIVILEGES = 14,\n REMOVE_PRIVILEGES = 15,\n ASSIGN_ROLES = 16,\n REMOVE_ROLES = 17,\n ADD_PROGRAMMATIC_CREDENTIALS = 18,\n REMOVE_PROGRAMMATIC_CREDENTIALS = 19,\n OTHER = 99,\n}\n\n/\n Every published activity id, per class — the membership check's source of truth.\n \n An activity number is only meaningful WITH its class: `1` is `Logon` in 3002 and `Create` in 6003.\n * So a row that assigns the right number under the wrong class is silently wrong, and nothing about\n * the emitted document would look malformed. {@link assertActivitiesBelongToTheirClass} closes that.\n /\nconst PUBLISHED_ACTIVITIES_BY_CLASS: Readonly<Record<OcsfClassUid, ReadonlySet<number>>> = {\n [OcsfClassUid.AUTHENTICATION]: new Set(Object.values(OcsfAuthenticationActivity).filter((v): v is number => typeof v === 'number')),\n [OcsfClassUid.API_ACTIVITY]: new Set(Object.values(OcsfApiActivity).filter((v): v is number => typeof v === 'number')),\n [OcsfClassUid.ENTITY_MANAGEMENT]: new Set(Object.values(OcsfEntityManagementActivity).filter((v): v is number => typeof v === 'number')),\n [OcsfClassUid.USER_MANAGEMENT]: new Set(Object.values(OcsfUserManagementActivity).filter((v): v is number => typeof v === 'number')),\n};\n\n/\n The activity each core audit event resolves to.\n \n Total over `CoreAuditableEventType`, so a new core event type cannot be added without deciding\n * its activity — the same shape the classification map now has, and for the same reason: an open set\n * silently defaulting is how `activity_id` stayed `Unknown` for every event in the first place.\n /\nexport const OCSF_ACTIVITY_BY_EVENT_TYPE: Readonly<Record<CoreAuditableEventType, number>> = {\n\n // ── AUTHENTICATION ──\n [CoreAuditableEventType.EMERGENCY_ACCESS_USED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.MACHINE_AUTH_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.MACHINE_AUTH_SUCCESS]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.OAUTH_CIMD_CLIENT_REFUSED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.OAUTH_CODE_EXCHANGE_FAILED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.OAUTH_DYNAMIC_CLIENT_REGISTERED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.OAUTH_TOKEN_REFRESHED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.OAUTH_TOKEN_REVOKED]: OcsfAuthenticationActivity.OTHER,\n // Unlike the token-revoke sibling above (a no-oracle RFC 7009 ATTEMPT → Other), an RP-Initiated Logout\n // terminates a real user SESSION, so it is a genuine OCSF Logoff — matching USER_LOGOUT / SAML_SLO_COMPLETED.\n [CoreAuditableEventType.OAUTH_RP_INITIATED_LOGOUT]: OcsfAuthenticationActivity.LOGOFF,\n [CoreAuditableEventType.ONE_OFF_TOKEN_CREATED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.ONE_OFF_TOKEN_EXCHANGED]: OcsfAuthenticationActivity.OTHER,\n // Admin token-lifecycle, not an OCSF user LOGOFF — Other(99) + activity_name, matching the family.\n [CoreAuditableEventType.ONE_OFF_TOKEN_REVOKED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.SAML_ASSERTION_REPLAY_DETECTED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.SAML_LOGIN_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.SAML_LOGIN_INITIATED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.SAML_LOGIN_SUCCESS]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.SAML_SLO_COMPLETED]: OcsfAuthenticationActivity.LOGOFF,\n [CoreAuditableEventType.SAML_SLO_INITIATED]: OcsfAuthenticationActivity.LOGOFF,\n [CoreAuditableEventType.USER_ACCOUNT_LOCKED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Lock(6), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_CROSS_FRONTEND_HANDOFF_ISSUED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_IDENTITY_LINK_REMOVED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_LOGIN]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_LOGIN_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_LOGOUT]: OcsfAuthenticationActivity.LOGOFF,\n [CoreAuditableEventType.USER_MAGIC_LINK_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_MAGIC_LINK_SENT]: OcsfAuthenticationActivity.PREAUTH,\n [CoreAuditableEventType.USER_MAGIC_LINK_VERIFIED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_MFA_DISABLED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Disable MFA Factors(13), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_MFA_EMAIL_OTP_SENT]: OcsfAuthenticationActivity.PREAUTH,\n [CoreAuditableEventType.USER_MFA_ENABLED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Enable MFA Factors(12), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_MFA_SETUP_COMPLETED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_MFA_SETUP_STARTED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_PASSKEY_AUTHENTICATION_FAILURE]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_PASSKEY_AUTHENTICATION_SUCCESS]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_PASSKEY_REGISTERED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_PASSKEY_REMOVED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_PASSWORD_CHANGED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Password Change(8), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_PASSWORD_RESET_COMPLETED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Password Reset(9), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_PASSWORD_RESET_FORCED]: OcsfAuthenticationActivity.OTHER, // 3007 publishes Password Reset(9), but this event's category routes it to 3002, which does not\n [CoreAuditableEventType.USER_PASSWORD_RESET_REQUESTED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_PASSWORD_SET]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_REFRESH_TOKEN_REUSE_DETECTED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_SESSION_EXPIRED]: OcsfAuthenticationActivity.LOGOFF,\n /\n * LOGOFF, like the expiry above: the session is terminated and no longer exists, which is what the\n * OCSF verb states. The DIFFERENCE between the two — time elapsed versus a cap displacing a live\n * chain — is not expressible in `activity_id`, so it rides the typed eventData and the WARNING\n * severity instead. Mapping it to OTHER would have lost the one thing a SIEM correlates on.\n /\n [CoreAuditableEventType.USER_SESSION_EVICTED]: OcsfAuthenticationActivity.LOGOFF,\n [CoreAuditableEventType.USER_SMS_OTP_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_SMS_OTP_SENT]: OcsfAuthenticationActivity.PREAUTH,\n [CoreAuditableEventType.USER_SMS_OTP_VERIFIED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_SSO_ENFORCEMENT_BLOCKED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_SSO_LOGIN]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_SSO_LOGIN_FAILED]: OcsfAuthenticationActivity.LOGON,\n [CoreAuditableEventType.USER_TOKEN_REFRESHED]: OcsfAuthenticationActivity.OTHER,\n [CoreAuditableEventType.USER_TOTP_DISABLED]: OcsfAuthenticationActivity.OTHER,\n\n // ── AUTHORIZATION ──\n // A file upload grant delegates one upload under the minter's authority; issuing/revoking it is not\n // one of 6003's CRUD verbs on a resource.\n [CoreAuditableEventType.FILE_UPLOAD_GRANT_ISSUED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.FILE_UPLOAD_GRANT_REVOKED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.APPLICATION_SUPER_ADMIN_FLOOR_BREACHED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.CROSS_TENANT_ADMINISTRATIVE_ACCESS]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH2_PROVIDER_BLOCKED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH_CONSENT_BINDING_VIOLATION]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH_CONSENT_DENIED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH_CONSENT_GRANTED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH_CONSENT_GRANT_PERSISTED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.OAUTH_DELEGATED_TOKEN_ISSUED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.ORGANIZATION_MEMBER_ROLE_CHANGED]: OcsfApiActivity.OTHER, // a role change is not one of 6003 CRUD verbs\n [CoreAuditableEventType.ORGANIZATION_OWNER_FLOOR_BREACHED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.ORGANIZATION_UNIT_MEMBER_REMOVED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.ORGANIZATION_UNIT_MEMBER_ROLE_CHANGED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.PLATFORM_ACCESS_GRANT_LIFECYCLE]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.RESOURCE_OPERATION_DENIED]: OcsfApiActivity.OTHER, // the CRUD verb is runtime data (the operation), not derivable from the event type\n [CoreAuditableEventType.RESOURCE_OPERATION_PERFORMED]: OcsfApiActivity.OTHER, // the CRUD verb is runtime data (the operation), not derivable from the event type\n [CoreAuditableEventType.USER_APP_ROLES_CHANGED]: OcsfApiActivity.OTHER, // a role change is not one of 6003 CRUD verbs\n\n // ── DATA_ACCESS ──\n [CoreAuditableEventType.FIELD_ACCESS]: OcsfApiActivity.READ,\n // CREATE, not OTHER: redeeming a grant IS the creation of one FILES row — the one DATA_ACCESS event\n // whose CRUD verb is derivable from the type, like PLATFORM_DIRECTORY_ACCESS below.\n [CoreAuditableEventType.FILE_UPLOAD_GRANT_REDEEMED]: OcsfApiActivity.CREATE,\n [CoreAuditableEventType.MACHINE_ACCESS]: OcsfApiActivity.OTHER, // names a surface reach (A2A/MCP turn), not a CRUD verb on a resource\n // READ, not OTHER: enumerating a directory IS a read of resource rows, and it is the one case\n // where the CRUD verb IS derivable from the event type — the event only ever names a collection\n // read (list/search/count), never a mutation.\n [CoreAuditableEventType.PLATFORM_DIRECTORY_ACCESS]: OcsfApiActivity.READ,\n [CoreAuditableEventType.RETAINED_DATA_ACCESS]: OcsfApiActivity.READ,\n [CoreAuditableEventType.SUBJECT_DATA_EXPORT]: OcsfApiActivity.READ,\n [CoreAuditableEventType.COLLECTION_DATA_EXPORT]: OcsfApiActivity.READ,\n [CoreAuditableEventType.HTTP_API_READ_THROUGH_ACCESS]: OcsfApiActivity.READ,\n // D6 stance 6b: the declared external-erasure operation DELETED remote rows.\n [CoreAuditableEventType.HTTP_API_EXTERNAL_ERASURE]: OcsfApiActivity.DELETE,\n // D6 stance 6c: nothing was deleted — the event records a deliberate non-action.\n [CoreAuditableEventType.HTTP_API_NON_ERASURE_ACKNOWLEDGED]: OcsfApiActivity.OTHER,\n [CoreAuditableEventType.SYSTEM_CONTEXT_READ]: OcsfApiActivity.READ,\n [CoreAuditableEventType.SYSTEM_CONTEXT_WRITE]: OcsfApiActivity.OTHER, // static fallback only — refined per emission from eventData.operation (CREATE \| UPDATE \| UPDATE_MANY)\n\n // ── ORG_MANAGEMENT ──\n [CoreAuditableEventType.ORGANIZATION_ACTIVATED]: OcsfEntityManagementActivity.RESUME,\n [CoreAuditableEventType.ORGANIZATION_CREATED]: OcsfEntityManagementActivity.CREATE,\n [CoreAuditableEventType.ORGANIZATION_DELETED]: OcsfEntityManagementActivity.DELETE,\n [CoreAuditableEventType.ORGANIZATION_DELETION_REQUESTED]: OcsfEntityManagementActivity.OTHER, // marks the tenant and opens a window; nothing is deleted yet, so Delete(4) would overstate it\n [CoreAuditableEventType.ORGANIZATION_MEMBER_INVITED]: OcsfEntityManagementActivity.CREATE,\n [CoreAuditableEventType.ORGANIZATION_MEMBER_JOINED]: OcsfEntityManagementActivity.ENROLL,\n [CoreAuditableEventType.ORGANIZATION_MEMBER_REMOVED]: OcsfEntityManagementActivity.UNENROLL,\n [CoreAuditableEventType.ORGANIZATION_MEMBER_STATUS_CHANGED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_MEMBER_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_NOTIFICATIONS_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_PREFERENCES_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_PROFILE_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_RESTORED]: OcsfEntityManagementActivity.OTHER, // un-deletion has no 3004 member; Resume(13) is unsuspend and Activate(10) is a transient engine state\n [CoreAuditableEventType.ORGANIZATION_SIEM_EXPORT_CONFIGURED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_SSO_CONFIGURATION_CHANGED]: OcsfEntityManagementActivity.UPDATE,\n // An application authentication-policy change is a configuration entity being UPDATED — the same\n // OCSF shape as the SSO / SIEM / SCIM configuration-change siblings around it. (Confirmed by the\n // session that added the event: UPDATE is the intended activity.)\n [CoreAuditableEventType.APPLICATION_AUTH_POLICY_CHANGED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_SUSPENDED]: OcsfEntityManagementActivity.SUSPEND,\n [CoreAuditableEventType.ORGANIZATION_UNIT_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.ORGANIZATION_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.SAML_CERT_EXPIRING]: OcsfEntityManagementActivity.OTHER,\n [CoreAuditableEventType.SAML_METADATA_PARSED]: OcsfEntityManagementActivity.OTHER,\n [CoreAuditableEventType.SCIM_PROVISIONING_CONFIG_UPDATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.SCIM_PROVISIONING_FAILED]: OcsfEntityManagementActivity.OTHER,\n [CoreAuditableEventType.SCIM_TOKEN_CREATED]: OcsfEntityManagementActivity.CREATE,\n [CoreAuditableEventType.SCIM_TOKEN_GENERATED]: OcsfEntityManagementActivity.CREATE,\n [CoreAuditableEventType.SCIM_TOKEN_REVOKED]: OcsfEntityManagementActivity.DELETE,\n [CoreAuditableEventType.SCIM_TOKEN_ROTATED]: OcsfEntityManagementActivity.UPDATE,\n [CoreAuditableEventType.WEBHOOK_ENDPOINT_TEST_DISPATCHED]: OcsfEntityManagementActivity.OTHER,\n\n // ── USER_LIFECYCLE ──\n [CoreAuditableEventType.RESOURCE_STATUS_TRANSITION_PERFORMED]: OcsfUserManagementActivity.OTHER,\n [CoreAuditableEventType.SAML_EMAIL_CHANGED]: OcsfUserManagementActivity.UPDATE,\n [CoreAuditableEventType.SCIM_USER_DEACTIVATED]: OcsfUserManagementActivity.DISABLE,\n [CoreAuditableEventType.SCIM_USER_PROVISIONED]: OcsfUserManagementActivity.CREATE,\n [CoreAuditableEventType.SCIM_USER_UPDATED]: OcsfUserManagementActivity.UPDATE,\n [CoreAuditableEventType.USER_CREATED]: OcsfUserManagementActivity.CREATE,\n [CoreAuditableEventType.USER_DELETED]: OcsfUserManagementActivity.DELETE,\n [CoreAuditableEventType.USER_EMAIL_VERIFIED]: OcsfUserManagementActivity.UPDATE,\n [CoreAuditableEventType.USER_PHONE_VERIFICATION_FAILED]: OcsfUserManagementActivity.OTHER,\n [CoreAuditableEventType.USER_PHONE_VERIFIED]: OcsfUserManagementActivity.UPDATE,\n [CoreAuditableEventType.USER_REGISTERED]: OcsfUserManagementActivity.CREATE,\n [CoreAuditableEventType.USER_UPDATED]: OcsfUserManagementActivity.UPDATE,\n [CoreAuditableEventType.USER_VERIFICATION_EMAIL_RESENT]: OcsfUserManagementActivity.OTHER,\n};\n\n/\n Fail at module load if any row assigns an activity its own class does not publish.\n \n This is the check the table exists to make possible. Activity numbers are class-scoped and collide\n * across classes, so a misfiled row produces a document that is structurally valid, schema-conformant,\n * and semantically wrong — the failure mode nothing downstream can catch.\n /\nfunction assertActivitiesBelongToTheirClass(): void {\n const offenders: string[] = [];\n for (const [eventType, activityId] of Object.entries(OCSF_ACTIVITY_BY_EVENT_TYPE)) {\n const category = getAuditEventClassification(eventType).category;\n const descriptor = OCSF_CLASS_BY_AUDIT_CATEGORY[category as AuditEventCategory];\n if (!PUBLISHED_ACTIVITIES_BY_CLASS[descriptor.classUid].has(activityId)) {\n offenders.push(`${eventType} → activity ${activityId} is not published by class ${descriptor.classUid}`);\n }\n }\n if (offenders.length > 0) {\n throw new Error(`OCSF activity mapping assigns activities their class does not publish:\\n ${offenders.join('\\n ')}`);\n }\n}\nassertActivitiesBelongToTheirClass();\n\n/\n Resolve the OCSF activity for an event type.\n \n Application-defined event types are ordinary strings the engine cannot enumerate, so they resolve to\n * `UNKNOWN` — the one case where \"we cannot say\" is the truthful answer.\n /\nexport function resolveOcsfActivityId(eventType: string): number {\n return OCSF_ACTIVITY_BY_EVENT_TYPE[eventType as CoreAuditableEventType] ?? OcsfCommonActivity.UNKNOWN;\n}\n\n/\n The `activity_name` companion for an `OTHER` assignment, or `undefined` when the activity is specific.\n \n The schema's own definition of `OTHER` points the reader at `activity_name`, so emitting `OTHER`\n * without it discards the very information the value promises is available.\n \n Takes the RESOLVED activity rather than re-deriving it from the event type. That distinction became\n * load-bearing when 6003 gained runtime refinement: an event whose TABLE entry is `Other` but whose\n * refined activity is `Update` must NOT carry `activity_name`, and a version of this that re-derived\n * from the event type would have emitted both — a specific activity plus a companion asserting it was\n * unmapped. Two ways to answer one question is the drift this contract exists to prevent.\n /\nexport function resolveOcsfActivityName(activityId: number, eventType: string): string \| undefined {\n return activityId === OcsfCommonActivity.OTHER ? eventType : undefined;\n}\n\n/\n OCSF `auth_protocol_id` — the NORMALISED authentication protocol.\n \n spec-cite: OCSF 1.9.0 — `schema.ocsf.io/api/1.9.0/classes/authentication`, the `auth_protocol_id`\n * enum. `auth_protocol` is documented as \"the authentication protocol as defined by the caption of\n * `auth_protocol_id`. In the case of Other, it is defined by the event source.\"\n /\nexport enum OcsfAuthProtocolId {\n UNKNOWN = 0,\n NTLM = 1,\n KERBEROS = 2,\n DIGEST = 3,\n OPENID = 4,\n SAML = 5,\n OAUTH_2_0 = 6,\n PAP = 7,\n CHAP = 8,\n EAP = 9,\n RADIUS = 10,\n BASIC_AUTHENTICATION = 11,\n LDAP = 12,\n OTHER = 99,\n}\n\n/* The published CAPTION for each id — what `auth_protocol` must carry when the id is not `Other`. /\nconst OCSF_AUTH_PROTOCOL_CAPTION: Readonly<Record<OcsfAuthProtocolId, string>> = {\n [OcsfAuthProtocolId.UNKNOWN]: 'Unknown',\n [OcsfAuthProtocolId.NTLM]: 'NTLM',\n [OcsfAuthProtocolId.KERBEROS]: 'Kerberos',\n [OcsfAuthProtocolId.DIGEST]: 'Digest',\n [OcsfAuthProtocolId.OPENID]: 'OpenID',\n [OcsfAuthProtocolId.SAML]: 'SAML',\n [OcsfAuthProtocolId.OAUTH_2_0]: 'OAUTH 2.0',\n [OcsfAuthProtocolId.PAP]: 'PAP',\n [OcsfAuthProtocolId.CHAP]: 'CHAP',\n [OcsfAuthProtocolId.EAP]: 'EAP',\n [OcsfAuthProtocolId.RADIUS]: 'RADIUS',\n [OcsfAuthProtocolId.BASIC_AUTHENTICATION]: 'Basic Authentication',\n [OcsfAuthProtocolId.LDAP]: 'LDAP',\n [OcsfAuthProtocolId.OTHER]: 'Other',\n};\n\n/\n The `AuthMethod` members that ARE a protocol OCSF normalises. Everything else resolves to `Other`.\n \n Deliberately partial. Three members are absent for a reason, and each absence is a decision:\n \n - `PASSWORD` is NOT `Basic Authentication` (11). Basic Auth is an HTTP transport scheme (RFC 7617);\n * a user typing a password into a form is not that, and the resemblance is only in the English word.\n * - `MAGIC_LINK`, `TOTP`, `SMS_OTP`, `EMAIL_OTP` and `PASSKEY` name no protocol in the published enum.\n * WebAuthn/FIDO2 in particular is absent from OCSF 1.9.0 — mapping a passkey to `Other` is the\n * accurate answer, not a shortfall.\n * - `EXTERNAL_OAUTH2` DOES map: it is OAuth 2.0 by construction.\n \n The `ORG_` prefix on the SSO members is SCOPE, not protocol — an organization-restricted SAML login\n * is still SAML — so those normalise cleanly.\n /\nconst OCSF_AUTH_PROTOCOL_BY_AUTH_METHOD: Readonly<Partial<Record<AuthMethod, OcsfAuthProtocolId>>> = {\n [AuthMethod.ORG_SAML]: OcsfAuthProtocolId.SAML,\n [AuthMethod.ORG_OPENID_CONNECT]: OcsfAuthProtocolId.OPENID,\n [AuthMethod.EXTERNAL_OAUTH2]: OcsfAuthProtocolId.OAUTH_2_0,\n};\n\n/* `auth_protocol` + `auth_protocol_id`, resolved together because the schema couples them. /\nexport interface OcsfAuthProtocol {\n readonly protocol: string;\n readonly protocolId: OcsfAuthProtocolId;\n}\n\n/\n Resolve the OCSF protocol pair for an envelope's `authMethod`.\n \n The two attributes are resolved TOGETHER because the schema defines one in terms of the other: when\n * the id is normalised, the string must be that id's published caption; only under `Other` may the\n * string be the producer's own value. Returning them separately invites the pairing to drift, which is\n * exactly how this shipped wrong the first time (`org_saml` with no id at all).\n \n `authMethod` is an OPEN string on the envelope — applications define their own — so anything outside\n * the framework's own `AuthMethod` vocabulary lands on `Other` carrying its raw value, which is\n * precisely what `Other` is for.\n /\nexport function resolveOcsfAuthProtocol(authMethod: string): OcsfAuthProtocol {\n const normalised = OCSF_AUTH_PROTOCOL_BY_AUTH_METHOD[authMethod as AuthMethod];\n return normalised === undefined\n ? { protocol: authMethod, protocolId: OcsfAuthProtocolId.OTHER }\n : { protocol: OCSF_AUTH_PROTOCOL_CAPTION[normalised], protocolId: normalised };\n}\n\n/\n The CRUD verb an API Activity (6003) event performed, mapped from the framework's core operation.\n \n spec-cite: OCSF 1.9.0 — `api_activity.activity_id` enum: 0 Unknown, 1 Create, 2 Read, 3 Update,\n * 4 Delete, 99 Other.\n \n The bulk forms collapse onto their singular verb: OCSF's activity names WHAT was done, and the\n * cardinality is carried separately by the envelope (`isBulkOperation` / `affectedRecordCount`).\n * `COUNT` is a Read — it answers a question about existing rows without changing any.\n /\nconst OCSF_API_ACTIVITY_BY_CORE_OPERATION: Readonly<Record<CoreResourceOperation, OcsfApiActivity>> = {\n [CoreResourceOperation.CREATE]: OcsfApiActivity.CREATE,\n [CoreResourceOperation.CREATE_MANY]: OcsfApiActivity.CREATE,\n [CoreResourceOperation.READ]: OcsfApiActivity.READ,\n [CoreResourceOperation.LIST]: OcsfApiActivity.READ,\n [CoreResourceOperation.SEARCH]: OcsfApiActivity.READ,\n [CoreResourceOperation.COUNT]: OcsfApiActivity.READ,\n [CoreResourceOperation.UPDATE]: OcsfApiActivity.UPDATE,\n [CoreResourceOperation.UPDATE_MANY]: OcsfApiActivity.UPDATE,\n [CoreResourceOperation.DELETE]: OcsfApiActivity.DELETE,\n [CoreResourceOperation.DELETE_MANY]: OcsfApiActivity.DELETE,\n};\n\n/\n The `eventData` keys that can name a 6003 event's CRUD verb, in precedence order.\n \n Three keys rather than one because the emitters spell it differently and each is authoritative for\n * its own event: `resourceOperationLike` is the core semantics a CUSTOM verb borrows (a `suspend`\n * behaving as an `update`), `operationIdentifier` is the verb on resource-operation and field-access\n * events, and `operation` is what `logSystemContextWrite` records — typed `CREATE \| UPDATE \|\n * UPDATE_MANY`, so it always resolves.\n \n Enumerated by the QUESTION (\"what names the verb on a 6003 event?\") rather than by one emitter's\n * field name, which is how `operation` was missed on the first pass.\n /\nconst OCSF_API_VERB_EVENT_DATA_KEYS = ['resourceOperationLike', 'operationIdentifier', 'operation'] as const;\n\n/\n Refine a 6003 event's `activity_id` from RUNTIME data, when the event type alone cannot say.\n \n Class 6003 is organised around the CRUD axis, and the resource-operation events (`performed` /\n * `denied`) are the bulk of what we route there — yet the event TYPE is the same string for a create\n * and a delete. So the table maps them to `Other`, and every authorization event landed in one\n * undifferentiated bucket: the same collapse `activity_id` being pinned to `Unknown` used to cause,\n * surviving one layer down after that was fixed.\n \n The verb is in the envelope — under one of {@link OCSF_API_VERB_EVENT_DATA_KEYS}, in that precedence\n * order. Anything else (a custom verb borrowing nothing) keeps `Other`, where `activity_name` already\n * carries the event type.\n \n Two consequences that are DECISIONS, not side effects:\n \n - `FIELD_ACCESS` refines away from its static `Read`. It carries `operationIdentifier`, so a\n * secret exposed during a create now reads as Create(1). That is correct: 6003's activity names what\n * the API CALL did, and the field-access nature rides `metadata.event_code`. The static `Read` remains\n * the fallback for an emission that names no operation.\n * - `SYSTEM_CONTEXT_WRITE` stops being `Other`. Its table comment says \"neither Create nor Update is\n * true of every emission\" — true of a STATIC mapping and not a permanent conclusion, because at\n * runtime `operation` says exactly which. This matters more than most: it is the ACL-bypass write.\n */\nexport function refineOcsfApiActivity(eventData: unknown, fallback: number): number {\n if (eventData === null \|\| typeof eventData !== 'object') return fallback;\n const record = eventData as Readonly<Record<string, unknown>>;\n for (const key of OCSF_API_VERB_EVENT_DATA_KEYS) {\n const candidate = record[key];\n if (typeof candidate !== 'string') continue;\n const mapped = OCSF_API_ACTIVITY_BY_CORE_OPERATION[candidate as CoreResourceOperation];\n if (mapped !== undefined) return mapped;\n }\n return fallback;\n}\n"]}

package/dist/esm/config/custom/application-config-controller.backend.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"application-config-controller.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/config/custom/application-config-controller.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAG1B,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAE/G,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAEvG,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,mFAAmF,CAAC;AAUzI;;;;;;;;;;GAUG;AAEH,qBACa,yCAA0C,SAAQ,gCAAgC;IAE7F,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0B;IAC3D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAkC;gBAItC,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EACpC,gBAAgB,EAAE,uBAAuB,EAC1B,wBAAwB,EAAE,+BAA+B;IAOvH;;OAEG;IACH,SAAS,CAAC,WAAW,IAAI,IAAI;IAO7B;;;OAGG;YACW,oBAAoB;~~CAsEnC~~"}
1	+ {"version":3,"file":"application-config-controller.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/config/custom/application-config-controller.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAG1B,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAE/G,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAEvG,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,mFAAmF,CAAC;AAUzI;;;;;;;;;;GAUG;AAEH,qBACa,yCAA0C,SAAQ,gCAAgC;IAE7F,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0B;IAC3D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAkC;gBAItC,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EACpC,gBAAgB,EAAE,uBAAuB,EAC1B,wBAAwB,EAAE,+BAA+B;IAOvH;;OAEG;IACH,SAAS,CAAC,WAAW,IAAI,IAAI;IAO7B;;;OAGG;YACW,oBAAoB;CA+EnC"}

package/dist/esm/config/custom/application-config-controller.backend.service.js CHANGED Viewed

@@ -78,7 +78,13 @@ let ApplicationConfigControllerBackendService = class ApplicationConfigControlle
             }
             // The shared projection remains frontend-service agnostic, but the caller
             // must prove it is requesting config for a declared frontend surface.
-            const sharedConfig = ApplicationUtils.toAppConfiguration_Shared(backendConfig);
+            /*
+             * The application id rides along so the client can name the `app` room for an
+             * APPLICATION-scoped resource. Nothing else published it — not this payload, not the access
+             * token — so a client could be confirmed in `org`/`user` rooms while the server pushed that
+             * resource's changes to `app`, and receive nothing (issue #283).
+             */
+            const sharedConfig = ApplicationUtils.toAppConfiguration_Shared(backendConfig, this.appConfigService.isInitialized() ? this.appConfigService.applicationId : undefined);
             const frontendType = backendConfig.frontendServices?.[frontendServiceName]?.frontendType;
             const frontendProvidersPayload = frontendType
                 ? await this.frontendBootstrapService.buildPayload({

package/dist/esm/config/custom/application-config-controller.backend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"application-config-controller.backend.service.js","sourceRoot":"","sources":["../../../../../src/config/custom/application-config-controller.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,gBAAgB,EAAE,MAAM,oEAAoE,CAAC;AACtG,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAEnH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EACL,iDAAiD,EACjD,6BAA6B,EAC7B,wBAAwB,EACxB,SAAS,EACT,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;GAUG;AAGI,IAAM,yCAAyC,GAA/C,MAAM,yCAA0C,SAAQ,gCAAgC;IAE5E,gBAAgB,CAA0B;IAC1C,wBAAwB,CAAkC;IAG3E,YACqC,MAAqB,EACR,YAAwC,EACxC,YAAiC,EACpC,gBAAyC,EAC1B,wBAAyD;QAErH,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,6BAA6B,CAAC,CAAC;QACzE,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,wBAAwB,GAAG,wBAAwB,CAAC;IAC3D,CAAC;IAED;;OAEG;IACO,WAAW;QACnB,mGAAmG;QACnG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEzJ,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,wFAAwF,CAAC,CAAC;IAC7M,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,oBAAoB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAChF,IAAI,CAAC;YACH,2DAA2D;YAC3D,MAAM,wBAAwB,GAAG,GAAG,CAAC,KAAK,CAAC,mBAA6B,CAAC;YAEzE,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAC9B,IAAI,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;gBAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAE,SAAS,CAAC,UAAU,EAAE,SAAS,EACzE,EAAE,sBAAsB,EAAE,2BAA2B,CAAC,2CAA2C,EAAE,CAAE,CAAC;gBACxG,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,MAAM,mBAAmB,GAAG,wBAAkC,CAAC;YAE/D,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAEzF,4CAA4C;YAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACnD,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;oBAC1E,sBAAsB,EAAE,2BAA2B,CAAC,0CAA0C;oBAC9F,OAAO,EAAE;wBACP,wBAAwB;wBACxB,mBAAmB;wBACnB,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,IAAI,EAAE,CAAC;qBAC7E;iBACF,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,0EAA0E;YAC1E,sEAAsE;YACtE,MAAM,YAAY,GAAG,gBAAgB,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC;YAC/E,MAAM,YAAY,GAChB,aAAa,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,EAAE,YAAY,CAAC;YACtE,MAAM,wBAAwB,GAAG,YAAY;gBAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC;oBACjD,YAAY;oBACZ,mBAAmB;iBACpB,CAAC;gBACF,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC;YAC7C,MAAM,cAAc,GAAG,iDAAiD,CAAC,KAAK,CAAC;gBAC7E,GAAG,YAAY;gBACf,GAAG,wBAAwB;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,oDAAoD,EAAE;gBAClE,mBAAmB;gBACnB,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC,WAAW;gBAC5C,iBAAiB,EAAE,CAAC,CAAC,cAAc,CAAC,cAAc;gBAClD,UAAU,EAAE,CAAC,CAAC,cAAc,CAAC,OAAO;gBACpC,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI;gBAC9B,aAAa,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU;gBAC1C,kBAAkB,EAAE,CAAC,CAAC,cAAc,CAAC,eAAe;gBACpD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;gBAC3E,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;aAC9F,CAAC,CAAC;YAEH,2BAA2B;YAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAExC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,yCAAyC,EAAE;gBACvD,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;aAClC,CAAC,CAAC;YAEH,gEAAgE;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAtGY,yCAAyC;IADrD,UAAU,EAAE;IAQR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAAA;qCAJhB,aAAa;QACM,0BAA0B;QAC1B,mBAAmB;QAClB,uBAAuB;GAV7E,yCAAyC,CAsGrD","sourcesContent":["import 'reflect-metadata';\nimport { injectable, inject } from 'inversify';\nimport { Request, Response, NextFunction } from 'express';\nimport { AbstractControllerBackendService } from '~wildo-backend-lib/base-classes/services/controllers/abstract-controller.backend.service';\nimport { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport { ApplicationUtils } from '~wildo-backend-lib/config/services/app-configuration.backend.utils';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { ErrorHandlerService } from '~wildo-backend-lib/errors/services/error-handler.backend.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport type { FrontendBootstrapBackendService } from '~wildo-backend-lib/external-providers/services/frontend-bootstrap.backend.service';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport {\n AppConfiguration_FrontendBootstrapResponse_Schema,\n MANUAL_CONTROLLER_ROUTES_URLS,\n ManualControllerRouteKey,\n ErrorType,\n ErrorCustomMessageReference,\n} from '@wildo-ai/saas-models';\n\n/*\n Application Config Controller Backend Service\n \n Provides HTTP endpoints for serving application configuration\n * to frontend applications. Transforms backend config to frontend-safe\n * shared configuration using ApplicationUtils.\n \n Endpoints:\n * - GET /application-config?frontendServiceName=<name> - Returns frontend-safe application configuration\n * Requires the query parameter to match a configured frontend service identity\n /\n\n@injectable()\nexport class ApplicationConfigControllerBackendService extends AbstractControllerBackendService {\n\n private readonly appConfigService: AppConfigurationService;\n private readonly frontendBootstrapService: FrontendBootstrapBackendService;\n\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorHandlerService) errorHandler: ErrorHandlerService,\n @inject(SAAS_SERVICE_TYPES.AppConfigService) appConfigService: AppConfigurationService,\n @inject(SAAS_SERVICE_TYPES.FrontendBootstrapBackendService) frontendBootstrapService: FrontendBootstrapBackendService,\n ) {\n super(logger, errorBuilder, errorHandler, 'ApplicationConfigController');\n this.appConfigService = appConfigService;\n this.frontendBootstrapService = frontendBootstrapService;\n }\n\n /\n Setup routes for application config endpoints\n /\n protected setupRoutes(): void {\n // GET /application-config?frontendServiceName=<name> - Get frontend-safe application configuration\n this.router.get(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.APPLICATION_CONFIG_GET], this.asyncHandler(this.getApplicationConfig.bind(this)));\n\n this.logRouteRegistration('GET', MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.APPLICATION_CONFIG_GET], 'Get frontend-safe application configuration (requires frontendServiceName query param)');\n }\n\n /\n Get application configuration for frontends\n * @param frontendServiceName - Frontend service identity from query parameter (required)\n */\n private async getApplicationConfig(req: Request, res: Response, next: NextFunction): Promise<void> {\n try {\n // Extract and validate frontendServiceName query parameter\n const frontendServiceNameParam = req.query.frontendServiceName as string;\n\n if (!frontendServiceNameParam) {\n this.logDebug('Missing frontendServiceName query parameter');\n const error = this.errorBuilder.buildError( ErrorType.VALIDATION, undefined,\n { customMessageReference: ErrorCustomMessageReference.APP_CONFIGURATION_FRONTEND_SERVICE_REQUIRED } );\n return this.jsonError(res, error);\n }\n\n const frontendServiceName = frontendServiceNameParam as string;\n\n this.logDebug('Getting application configuration for frontend', { frontendServiceName });\n\n // Get the backend application configuration\n const backendConfig = this.appConfigService.config;\n if (!backendConfig.frontendServices?.[frontendServiceName]) {\n const error = this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.APP_CONFIGURATION_UNKNOWN_FRONTEND_SERVICE,\n context: {\n // diagnostic (log-only)\n frontendServiceName,\n availableFrontendServices: Object.keys(backendConfig.frontendServices ?? {}),\n },\n });\n return this.jsonError(res, error);\n }\n\n // The shared projection remains frontend-service agnostic, but the caller\n // must prove it is requesting config for a declared frontend surface.\n const sharedConfig = ApplicationUtils.toAppConfiguration_Shared(backendConfig);\n const frontendType =\n backendConfig.frontendServices?.[frontendServiceName]?.frontendType;\n const frontendProvidersPayload = frontendType\n ? await this.frontendBootstrapService.buildPayload({\n frontendType,\n frontendServiceName,\n })\n : { frontendProviders: { providers: {} } };\n const frontendConfig = AppConfiguration_FrontendBootstrapResponse_Schema.parse({\n ...sharedConfig,\n ...frontendProvidersPayload,\n });\n\n this.logDebug('Application configuration transformed for frontend', {\n frontendServiceName,\n hasAppIdentity: !!frontendConfig.appIdentity,\n hasAppPreferences: !!frontendConfig.appPreferences,\n hasRuntime: !!frontendConfig.runtime,\n hasAuth: !!frontendConfig.auth,\n hasCompliance: !!frontendConfig.compliance,\n hasApiJwtPublicKey: !!frontendConfig.apiJwtPublicKey,\n endpointsCount: Object.keys(frontendConfig.runtime?.endPoints \|\| {}).length,\n frontendProvidersCount: Object.keys(frontendConfig.frontendProviders?.providers \|\| {}).length,\n });\n\n // Send successful response\n this.jsonSuccess(res, frontendConfig);\n\n } catch (error) {\n this.logDebug('Failed to get application configuration', {\n error: describeCaughtError(error)\n });\n\n // Error will be handled by the unified error handler middleware\n throw error;\n }\n }\n}\n"]}
1	+ {"version":3,"file":"application-config-controller.backend.service.js","sourceRoot":"","sources":["../../../../../src/config/custom/application-config-controller.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,gBAAgB,EAAE,MAAM,oEAAoE,CAAC;AACtG,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAEnH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EACL,iDAAiD,EACjD,6BAA6B,EAC7B,wBAAwB,EACxB,SAAS,EACT,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;GAUG;AAGI,IAAM,yCAAyC,GAA/C,MAAM,yCAA0C,SAAQ,gCAAgC;IAE5E,gBAAgB,CAA0B;IAC1C,wBAAwB,CAAkC;IAG3E,YACqC,MAAqB,EACR,YAAwC,EACxC,YAAiC,EACpC,gBAAyC,EAC1B,wBAAyD;QAErH,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,6BAA6B,CAAC,CAAC;QACzE,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,wBAAwB,GAAG,wBAAwB,CAAC;IAC3D,CAAC;IAED;;OAEG;IACO,WAAW;QACnB,mGAAmG;QACnG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEzJ,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,wFAAwF,CAAC,CAAC;IAC7M,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,oBAAoB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAChF,IAAI,CAAC;YACH,2DAA2D;YAC3D,MAAM,wBAAwB,GAAG,GAAG,CAAC,KAAK,CAAC,mBAA6B,CAAC;YAEzE,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAC9B,IAAI,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;gBAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAE,SAAS,CAAC,UAAU,EAAE,SAAS,EACzE,EAAE,sBAAsB,EAAE,2BAA2B,CAAC,2CAA2C,EAAE,CAAE,CAAC;gBACxG,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,MAAM,mBAAmB,GAAG,wBAAkC,CAAC;YAE/D,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAEzF,4CAA4C;YAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACnD,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;oBAC1E,sBAAsB,EAAE,2BAA2B,CAAC,0CAA0C;oBAC9F,OAAO,EAAE;wBACP,wBAAwB;wBACxB,mBAAmB;wBACnB,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,IAAI,EAAE,CAAC;qBAC7E;iBACF,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,0EAA0E;YAC1E,sEAAsE;YACtE;;;;;eAKG;YACH,MAAM,YAAY,GAAG,gBAAgB,CAAC,yBAAyB,CAC7D,aAAa,EACb,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CACxF,CAAC;YACF,MAAM,YAAY,GAChB,aAAa,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,EAAE,YAAY,CAAC;YACtE,MAAM,wBAAwB,GAAG,YAAY;gBAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC;oBACjD,YAAY;oBACZ,mBAAmB;iBACpB,CAAC;gBACF,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC;YAC7C,MAAM,cAAc,GAAG,iDAAiD,CAAC,KAAK,CAAC;gBAC7E,GAAG,YAAY;gBACf,GAAG,wBAAwB;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,oDAAoD,EAAE;gBAClE,mBAAmB;gBACnB,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC,WAAW;gBAC5C,iBAAiB,EAAE,CAAC,CAAC,cAAc,CAAC,cAAc;gBAClD,UAAU,EAAE,CAAC,CAAC,cAAc,CAAC,OAAO;gBACpC,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI;gBAC9B,aAAa,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU;gBAC1C,kBAAkB,EAAE,CAAC,CAAC,cAAc,CAAC,eAAe;gBACpD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;gBAC3E,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;aAC9F,CAAC,CAAC;YAEH,2BAA2B;YAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAExC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,yCAAyC,EAAE;gBACvD,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;aAClC,CAAC,CAAC;YAEH,gEAAgE;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AA/GY,yCAAyC;IADrD,UAAU,EAAE;IAQR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAAA;qCAJhB,aAAa;QACM,0BAA0B;QAC1B,mBAAmB;QAClB,uBAAuB;GAV7E,yCAAyC,CA+GrD","sourcesContent":["import 'reflect-metadata';\nimport { injectable, inject } from 'inversify';\nimport { Request, Response, NextFunction } from 'express';\nimport { AbstractControllerBackendService } from '~wildo-backend-lib/base-classes/services/controllers/abstract-controller.backend.service';\nimport { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport { ApplicationUtils } from '~wildo-backend-lib/config/services/app-configuration.backend.utils';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { ErrorHandlerService } from '~wildo-backend-lib/errors/services/error-handler.backend.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport type { FrontendBootstrapBackendService } from '~wildo-backend-lib/external-providers/services/frontend-bootstrap.backend.service';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport {\n AppConfiguration_FrontendBootstrapResponse_Schema,\n MANUAL_CONTROLLER_ROUTES_URLS,\n ManualControllerRouteKey,\n ErrorType,\n ErrorCustomMessageReference,\n} from '@wildo-ai/saas-models';\n\n/*\n Application Config Controller Backend Service\n \n Provides HTTP endpoints for serving application configuration\n * to frontend applications. Transforms backend config to frontend-safe\n * shared configuration using ApplicationUtils.\n \n Endpoints:\n * - GET /application-config?frontendServiceName=<name> - Returns frontend-safe application configuration\n * Requires the query parameter to match a configured frontend service identity\n /\n\n@injectable()\nexport class ApplicationConfigControllerBackendService extends AbstractControllerBackendService {\n\n private readonly appConfigService: AppConfigurationService;\n private readonly frontendBootstrapService: FrontendBootstrapBackendService;\n\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorHandlerService) errorHandler: ErrorHandlerService,\n @inject(SAAS_SERVICE_TYPES.AppConfigService) appConfigService: AppConfigurationService,\n @inject(SAAS_SERVICE_TYPES.FrontendBootstrapBackendService) frontendBootstrapService: FrontendBootstrapBackendService,\n ) {\n super(logger, errorBuilder, errorHandler, 'ApplicationConfigController');\n this.appConfigService = appConfigService;\n this.frontendBootstrapService = frontendBootstrapService;\n }\n\n /\n Setup routes for application config endpoints\n /\n protected setupRoutes(): void {\n // GET /application-config?frontendServiceName=<name> - Get frontend-safe application configuration\n this.router.get(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.APPLICATION_CONFIG_GET], this.asyncHandler(this.getApplicationConfig.bind(this)));\n\n this.logRouteRegistration('GET', MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.APPLICATION_CONFIG_GET], 'Get frontend-safe application configuration (requires frontendServiceName query param)');\n }\n\n /\n Get application configuration for frontends\n * @param frontendServiceName - Frontend service identity from query parameter (required)\n /\n private async getApplicationConfig(req: Request, res: Response, next: NextFunction): Promise<void> {\n try {\n // Extract and validate frontendServiceName query parameter\n const frontendServiceNameParam = req.query.frontendServiceName as string;\n\n if (!frontendServiceNameParam) {\n this.logDebug('Missing frontendServiceName query parameter');\n const error = this.errorBuilder.buildError( ErrorType.VALIDATION, undefined,\n { customMessageReference: ErrorCustomMessageReference.APP_CONFIGURATION_FRONTEND_SERVICE_REQUIRED } );\n return this.jsonError(res, error);\n }\n\n const frontendServiceName = frontendServiceNameParam as string;\n\n this.logDebug('Getting application configuration for frontend', { frontendServiceName });\n\n // Get the backend application configuration\n const backendConfig = this.appConfigService.config;\n if (!backendConfig.frontendServices?.[frontendServiceName]) {\n const error = this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.APP_CONFIGURATION_UNKNOWN_FRONTEND_SERVICE,\n context: {\n // diagnostic (log-only)\n frontendServiceName,\n availableFrontendServices: Object.keys(backendConfig.frontendServices ?? {}),\n },\n });\n return this.jsonError(res, error);\n }\n\n // The shared projection remains frontend-service agnostic, but the caller\n // must prove it is requesting config for a declared frontend surface.\n /\n * The application id rides along so the client can name the `app` room for an\n * APPLICATION-scoped resource. Nothing else published it — not this payload, not the access\n * token — so a client could be confirmed in `org`/`user` rooms while the server pushed that\n * resource's changes to `app`, and receive nothing (issue #283).\n */\n const sharedConfig = ApplicationUtils.toAppConfiguration_Shared(\n backendConfig,\n this.appConfigService.isInitialized() ? this.appConfigService.applicationId : undefined,\n );\n const frontendType =\n backendConfig.frontendServices?.[frontendServiceName]?.frontendType;\n const frontendProvidersPayload = frontendType\n ? await this.frontendBootstrapService.buildPayload({\n frontendType,\n frontendServiceName,\n })\n : { frontendProviders: { providers: {} } };\n const frontendConfig = AppConfiguration_FrontendBootstrapResponse_Schema.parse({\n ...sharedConfig,\n ...frontendProvidersPayload,\n });\n\n this.logDebug('Application configuration transformed for frontend', {\n frontendServiceName,\n hasAppIdentity: !!frontendConfig.appIdentity,\n hasAppPreferences: !!frontendConfig.appPreferences,\n hasRuntime: !!frontendConfig.runtime,\n hasAuth: !!frontendConfig.auth,\n hasCompliance: !!frontendConfig.compliance,\n hasApiJwtPublicKey: !!frontendConfig.apiJwtPublicKey,\n endpointsCount: Object.keys(frontendConfig.runtime?.endPoints \|\| {}).length,\n frontendProvidersCount: Object.keys(frontendConfig.frontendProviders?.providers \|\| {}).length,\n });\n\n // Send successful response\n this.jsonSuccess(res, frontendConfig);\n\n } catch (error) {\n this.logDebug('Failed to get application configuration', {\n error: describeCaughtError(error)\n });\n\n // Error will be handled by the unified error handler middleware\n throw error;\n }\n }\n}\n"]}

package/dist/esm/config/models/app-config.backend.schemas.d.ts CHANGED Viewed

@@ -205,6 +205,7 @@ export declare const AppConfiguration_AppIdentity_Schema: z.ZodObject<{
     displayName: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodString>;
     version: z.ZodString;
+    applicationId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const AppConfiguration_AppPreferencesLanguage_Schema: z.ZodObject<{
     defaultLanguage: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>;
@@ -579,6 +580,7 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
         displayName: z.ZodOptional<z.ZodString>;
         description: z.ZodOptional<z.ZodString>;
         version: z.ZodString;
+        applicationId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
     brandAssets: z.ZodOptional<z.ZodArray<z.ZodObject<{
         composition: z.ZodEnum<typeof import("@wildo-ai/saas-models").BrandAssetComposition>;
@@ -1232,6 +1234,7 @@ export declare const _AppConfiguration_Shape: {
         displayName: z.ZodOptional<z.ZodString>;
         description: z.ZodOptional<z.ZodString>;
         version: z.ZodString;
+        applicationId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
     brandAssets: z.ZodOptional<z.ZodArray<z.ZodObject<{
         composition: z.ZodEnum<typeof import("@wildo-ai/saas-models").BrandAssetComposition>;
@@ -1742,6 +1745,7 @@ export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
         displayName: z.ZodOptional<z.ZodString>;
         description: z.ZodOptional<z.ZodString>;
         version: z.ZodString;
+        applicationId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
     brandAssets: z.ZodOptional<z.ZodArray<z.ZodObject<{
         composition: z.ZodEnum<typeof import("@wildo-ai/saas-models").BrandAssetComposition>;

package/dist/esm/config/models/app-config.backend.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"app-config.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/config/models/app-config.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAUL,gBAAgB,EAKhB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EAGlB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAA6B,MAAM,qEAAqE,CAAC;AA6DrI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACrD;2EACuE;IACvE,cAAc,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACvC;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,0BAA0B,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,8BAA8B;IACzC,0FAA0F;;IAE1F,sEAAsE;;CAE9D,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,OAAO,8BAA8B,CAAC,CAAC;AAS9H,QAAA,MAAM,8BAA8B,2JAGvB,CAAC;AAgCd;;oEAEoE;AAEpE,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED,oBAAY,uBAAuB;IACjC,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,GAAG,QAAQ;CACZ;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,WAAW,gBAAgB;CAC5B;AAED,0EAA0E;AAC1E,oBAAY,eAAe;IACzB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED,oBAAY,aAAa;IACvB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED;;oEAEoE;AAEpE,oBAAY,eAAe;IACzB,OAAO,YAAY;IACnB,WAAW,gBAAgB;CAC5B;AAED,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAqD1D;;;;;oEAKoE;AAEpE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2EtC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;iBAA2C,CAAA;AAGzF,eAAO,MAAM,mCAAmC~~;;;;;~~iBAA8C,CAAA;AAC9F,eAAO,MAAM,8CAA8C;;;;;;;;iBAAwD,CAAA;AAEnH;;;;;oEAKoE;AAGpE,eAAO,MAAM,6CAA6C,GAAI,CAAC,SAAS,mBAAmB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;iBA+CvH,CAAA;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;iBAAgG,CAAC;AAE5I;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;;;;;iBAKxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,6BAA6B;;;;;;;;;;;iBAMxC,CAAC;AAGH,eAAO,MAAM,kCAAkC;;;;;iBAK7C,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,4BAA4B;;;;;iBAgBhC,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,wBAAwB;;;;;;;;;;;;iBAqB5B,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,qBAAqB;;;;;;;;;;;;iBAiBzB,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+H3C,CAAC;AAIH,wFAAwF;AACxF,eAAO,MAAM,4BAA4B;;;;iBAcvC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;iBA0BtC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gDAAgD;;;;;;iBAc3D,CAAC;AAEH,gEAAgE;AAChE,eAAO,MAAM,uDAAuD;;iBAElE,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;iBAIzC,CAAC;AAoBH,0EAA0E;AAC1E,eAAO,MAAM,qDAAqD;;;iBAGhE,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;iBAM9C,CAAC;AAEH;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,4FAA4F;AAC5F,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,gCAAgC,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;CACnE;AAED,4EAA4E;AAC5E,MAAM,MAAM,gCAAgC,GAAG,IAAI,CACjD,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC9C,SAAS,GAAG,gBAAgB,CAC7B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,gCAAgC,GACpC,gCAAgC,CAkBlC;AAED;;;;;;;;;GASG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,qCAAqC,GACzC,IAAI,CAAC,gCAAgC,EAAE,cAAc,CAAC,CAkBxD;AAED,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,gCAAgC,CAmBlC;AAQD;;;;GAIG;AACH,wBAAgB,yCAAyC,CACvD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,qCAAqC,CAevC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2CAA2C,CACzD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,gCAAgC,CAKlC;AAqBD,QAAA,MAAM,0CAA0C;;;;;;;;;;;;iBAA2C,CAAC;AAc5F;;;;;;oEAMoE;AAEpE,eAAO,MAAM,gDAAgD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwD3D,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;oEAsBoE;AAEpE,eAAO,MAAM,qDAAqD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBhE,CAAC;AAEH;;;;;;;;;oEASoE;AAEpE;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,uBAAuB,CAAC;AAEpE,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAqC,CAAC;AAE9G,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgClD,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,2CAA2C;;;;;;CAM9C,CAAC;AAEX,MAAM,WAAW,4CAA4C;IAC3D,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;IAC3D,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,GAAG,SAAS,CAAC;IACjF,2FAA2F;IAC3F,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,GAAG,SAAS,CAAC;CAChF;AAED;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,4CAA4C,GAClD,gCAAgC,CAkClC;AAED;;oEAEoE;AAIpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;AACvE,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;AACrE,MAAM,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;AACjF,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;AAE7E,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AACjF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AACzE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACnF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC7F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AACzF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAC/E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAC1H,MAAM,MAAM,iDAAiD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uDAAuD,CAAC,CAAC;AACxI,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACvE,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AACvG,MAAM,MAAM,wCAAwC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AACxH,MAAM,MAAM,6CAA6C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qDAAqD,CAAC,CAAC;AAClI,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAC5F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8CAA8C,CAAC,CAAC"}
1	+ {"version":3,"file":"app-config.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/config/models/app-config.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAUL,gBAAgB,EAKhB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EAGlB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAA6B,MAAM,qEAAqE,CAAC;AA6DrI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACrD;2EACuE;IACvE,cAAc,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACvC;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,0BAA0B,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,8BAA8B;IACzC,0FAA0F;;IAE1F,sEAAsE;;CAE9D,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,OAAO,8BAA8B,CAAC,CAAC;AAS9H,QAAA,MAAM,8BAA8B,2JAGvB,CAAC;AAgCd;;oEAEoE;AAEpE,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED,oBAAY,uBAAuB;IACjC,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,GAAG,QAAQ;CACZ;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,WAAW,gBAAgB;CAC5B;AAED,0EAA0E;AAC1E,oBAAY,eAAe;IACzB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED,oBAAY,aAAa;IACvB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED;;oEAEoE;AAEpE,oBAAY,eAAe;IACzB,OAAO,YAAY;IACnB,WAAW,gBAAgB;CAC5B;AAED,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAqD1D;;;;;oEAKoE;AAEpE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2EtC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;iBAA2C,CAAA;AAGzF,eAAO,MAAM,mCAAmC;;;;;;iBAA8C,CAAA;AAC9F,eAAO,MAAM,8CAA8C;;;;;;;;iBAAwD,CAAA;AAEnH;;;;;oEAKoE;AAGpE,eAAO,MAAM,6CAA6C,GAAI,CAAC,SAAS,mBAAmB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;iBA+CvH,CAAA;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;iBAAgG,CAAC;AAE5I;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;;;;;iBAKxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,6BAA6B;;;;;;;;;;;iBAMxC,CAAC;AAGH,eAAO,MAAM,kCAAkC;;;;;iBAK7C,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,4BAA4B;;;;;iBAgBhC,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,wBAAwB;;;;;;;;;;;;iBAqB5B,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,qBAAqB;;;;;;;;;;;;iBAiBzB,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+H3C,CAAC;AAIH,wFAAwF;AACxF,eAAO,MAAM,4BAA4B;;;;iBAcvC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;iBA0BtC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gDAAgD;;;;;;iBAc3D,CAAC;AAEH,gEAAgE;AAChE,eAAO,MAAM,uDAAuD;;iBAElE,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;iBAIzC,CAAC;AAoBH,0EAA0E;AAC1E,eAAO,MAAM,qDAAqD;;;iBAGhE,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;iBAM9C,CAAC;AAEH;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,4FAA4F;AAC5F,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,gCAAgC,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;CACnE;AAED,4EAA4E;AAC5E,MAAM,MAAM,gCAAgC,GAAG,IAAI,CACjD,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC9C,SAAS,GAAG,gBAAgB,CAC7B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,gCAAgC,GACpC,gCAAgC,CAkBlC;AAED;;;;;;;;;GASG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,qCAAqC,GACzC,IAAI,CAAC,gCAAgC,EAAE,cAAc,CAAC,CAkBxD;AAED,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,gCAAgC,CAmBlC;AAQD;;;;GAIG;AACH,wBAAgB,yCAAyC,CACvD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,qCAAqC,CAevC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2CAA2C,CACzD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,gCAAgC,CAKlC;AAqBD,QAAA,MAAM,0CAA0C;;;;;;;;;;;;iBAA2C,CAAC;AAc5F;;;;;;oEAMoE;AAEpE,eAAO,MAAM,gDAAgD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwD3D,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;oEAsBoE;AAEpE,eAAO,MAAM,qDAAqD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBhE,CAAC;AAEH;;;;;;;;;oEASoE;AAEpE;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,uBAAuB,CAAC;AAEpE,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAqC,CAAC;AAE9G,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgClD,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,2CAA2C;;;;;;CAM9C,CAAC;AAEX,MAAM,WAAW,4CAA4C;IAC3D,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;IAC3D,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,GAAG,SAAS,CAAC;IACjF,2FAA2F;IAC3F,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,GAAG,SAAS,CAAC;CAChF;AAED;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,4CAA4C,GAClD,gCAAgC,CAkClC;AAED;;oEAEoE;AAIpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;AACvE,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;AACrE,MAAM,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;AACjF,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;AAE7E,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AACjF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AACzE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACnF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC7F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AACzF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAC/E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAC1H,MAAM,MAAM,iDAAiD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uDAAuD,CAAC,CAAC;AACxI,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACvE,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AACvG,MAAM,MAAM,wCAAwC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AACxH,MAAM,MAAM,6CAA6C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qDAAqD,CAAC,CAAC;AAClI,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAC5F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8CAA8C,CAAC,CAAC"}

package/dist/esm/config/services/app-configuration.backend.utils.d.ts CHANGED Viewed

@@ -42,6 +42,15 @@ export declare class ApplicationUtils {
      * Filters out private/backend-only runtime endpoints and preserves only app-owned
      * frontend service entries keyed by frontend service identity.
      */
-    static toAppConfiguration_Shared(config: AppConfiguration): AppConfiguration_Shared;
+    static toAppConfiguration_Shared(config: AppConfiguration,
+    /**
+     * The application's own id, which the AUTHORED configuration does not carry — it is runtime
+     * identity, resolved at startup, not something an application declares about itself. Passed in
+     * rather than read here so this projection stays a pure function of its input.
+     *
+     * Optional so every existing caller and fixture keeps working; an absent id simply leaves the
+     * field off, which is the pre-existing behaviour.
+     */
+    applicationId?: string): AppConfiguration_Shared;
 }
 //# sourceMappingURL=app-configuration.backend.utils.d.ts.map

package/dist/esm/config/services/app-configuration.backend.utils.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"app-configuration.backend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/config/services/app-configuration.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AAC/F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAIzE,MAAM,WAAW,6BAA6B;IAC5C,cAAc,CAAC,EAAE;QACf,SAAS,CAAC,EAAE;YACV,eAAe,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;YAC7C,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;SAC/C,CAAC;KACH,CAAC;CACH;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,6BAA6B,GAAG,IAAI,GAAG,SAAS,GACvD,iBAAiB,CAOnB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,6BAA6B,GAAG,IAAI,GAAG,SAAS,GACvD,iBAAiB,CAOnB;AAkBD,qBAAa,gBAAgB;IAC3B;;;;OAIG;IACH,MAAM,CAAC,yBAAyB,~~CAAC~~,MAAM,EAAE,gBAAgB,~~GAAG~~,uBAAuB;~~CA8EpF~~"}
1	+ {"version":3,"file":"app-configuration.backend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/config/services/app-configuration.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AAC/F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAIzE,MAAM,WAAW,6BAA6B;IAC5C,cAAc,CAAC,EAAE;QACf,SAAS,CAAC,EAAE;YACV,eAAe,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;YAC7C,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;SAC/C,CAAC;KACH,CAAC;CACH;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,6BAA6B,GAAG,IAAI,GAAG,SAAS,GACvD,iBAAiB,CAOnB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,6BAA6B,GAAG,IAAI,GAAG,SAAS,GACvD,iBAAiB,CAOnB;AAkBD,qBAAa,gBAAgB;IAC3B;;;;OAIG;IACH,MAAM,CAAC,yBAAyB,CAC9B,MAAM,EAAE,gBAAgB;IACxB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,GACrB,uBAAuB;CAgF3B"}

package/dist/esm/config/services/app-configuration.backend.utils.js CHANGED Viewed

@@ -59,7 +59,16 @@ export class ApplicationUtils {
      * Filters out private/backend-only runtime endpoints and preserves only app-owned
      * frontend service entries keyed by frontend service identity.
      */
-    static toAppConfiguration_Shared(config) {
+    static toAppConfiguration_Shared(config,
+    /**
+     * The application's own id, which the AUTHORED configuration does not carry — it is runtime
+     * identity, resolved at startup, not something an application declares about itself. Passed in
+     * rather than read here so this projection stays a pure function of its input.
+     *
+     * Optional so every existing caller and fixture keeps working; an absent id simply leaves the
+     * field off, which is the pre-existing behaviour.
+     */
+    applicationId) {
         const { appIdentity, brandAssets, appPreferences, runtime, auth, userTypes, frontendServices, organizationTypes, compliance, billing, analytics, lifecycle, } = config;
         const runtime_endPoints = runtime.endPoints;
         // Keep only shared endpoints by excluding platform-private keys.
@@ -88,7 +97,9 @@ export class ApplicationUtils {
             return [typeName, { ...typeDef, auth: frontendAuth }];
         }));
         return {
-            appIdentity,
+            // The id is MERGED here rather than declared upstream: `appIdentity` is authored by the
+            // application, and this is runtime identity the client needs to name its own scope room.
+            appIdentity: applicationId ? { ...appIdentity, applicationId } : appIdentity,
             brandAssets,
             appPreferences,
             runtime: {

package/dist/esm/config/services/app-configuration.backend.utils.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"app-configuration.backend.utils.js","sourceRoot":"","sources":["../../../../../src/config/services/app-configuration.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,wEAAwE,CAAC;AAGxG,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qEAAqE,CAAC;AAC9G,OAAO,EAAE,kCAAkC,EAAE,MAAM,uFAAuF,CAAC;AAW3I;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAwD;IAExD,MAAM,UAAU,GAAG,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,CAAC;IACtE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,UAA+B,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,UAAU,CAAC,uFAAuF,CAAC,CAAC;IAC9J,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IACrF,OAAO,KAAK,IAAI,iBAAiB,CAAC,EAAE,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAwD;IAExD,MAAM,UAAU,GAAG,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,gBAAgB,CAAC;IACvE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,UAA+B,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,UAAU,CAAC,wFAAwF,CAAC,CAAC;IAChK,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IACrF,OAAO,KAAK,IAAI,4BAA4B,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gCAAgC,CACvC,IAAiD;IAEjD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,qBAAqB,IAAI,EAAE,CAAC;SAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,kCAAkC,CAAC,cAAc,CAAC,CAAC;SAClF,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;QACtC,WAAW;QACX;YACE,WAAW,EAAE,cAAc,EAAE,WAAW;SACzC;KACF,CAAC,CACL,CAAC;AACJ,CAAC;AAGD,MAAM,OAAO,gBAAgB;IAC3B;;;;OAIG;IACH,MAAM,CAAC,yBAAyB,CAAC,MAAwB;QACvD,MAAM,EACJ,WAAW,EACX,WAAW,EACX,cAAc,EACd,OAAO,EACP,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,OAAO,EACP,SAAS,EACT,SAAS,GACV,GAAG,MAAM,CAAC;QAEX,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;QAE5C,iEAAiE;QACjE,wEAAwE;QACxE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAC9E,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACpF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,EAAE,EAA8B,CAAC,CAAC;QAEnC,mEAAmE;QACnE,MAAM,qCAAqC,GAAG,MAAM,CAAC,WAAW,CAC9D,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACjE,MAAM;YACN,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CACkC,CAAC;QAEvC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAEpF,6DAA6D;QAC7D,2FAA2F;QAC3F,MAAM,EACJ,qBAAqB,EAAE,6BAA6B,EACpD,eAAe,EACf,kBAAkB,EAAE,cAAc,EAAE,oBAAoB,EAAE,eAAe,EACzE,GAAG,UAAU,EACd,GAAG,IAAI,CAAC;QAET,8FAA8F;QAC9F,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAC1C,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE;YAC1D,IAAI,CAAC,OAAO,EAAE,IAAI;gBAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC,IAAW,CAAC;YACjG,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CACH,CAAC;QAEF,OAAO;YACL,WAAW;YACX,WAAW;YACX,cAAc;YACd,OAAO,EAAE;gBACP,SAAS,EAAE,qCAAqC;aACjD;YACD,IAAI,EAAE;gBACJ,GAAG,UAAU;gBACb,qBAAqB,EAAE,gCAAgC,CAAC,IAAI,CAAC;aAC9D;YACD,SAAS,EAAE,iBAAiB;YAC5B,gBAAgB;YAChB,iBAAiB;YACjB,UAAU;YACV,OAAO;YACP,SAAS;YACT,SAAS;YACT,eAAe;SAChB,CAAC;IACJ,CAAC;CAEF","sourcesContent":["/*\n Frontend Configuration Transformers Service\n \n Backend service to transform complete backend application configuration\n * into frontend-safe subsets for API endpoints.\n /\n\nimport { JwtPrivateKeys } from '~wildo-backend-lib/security/authentications/models/jwt.backend.schemas';\nimport { AppConfiguration } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport type { AppConfiguration_Shared } from '@wildo-ai/saas-models';\nimport { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';\nimport { PlatformApplicationType } from '~wildo-backend-lib/applications/models/applications.backend.schemas';\nimport { isEnabledSocialOAuth2LoginProvider } from '~wildo-backend-lib/security/authentications/utils/social-oauth2-purpose.backend.utils';\n\nexport interface AppPrimaryLanguageConfigShape {\n appPreferences?: {\n languages?: {\n defaultLanguage?: string \| AvailableLanguage;\n fallbackLanguage?: string \| AvailableLanguage;\n };\n };\n}\n\n/\n Resolve the SaaS application's authoring / primary locale from the\n * canonical app-config path.\n \n This is the single source of truth for generation-time label ownership:\n * app-label labellize, app-label translate, and email-label generation all\n * derive their primary locale from\n * `appPreferences.languages.defaultLanguage`.\n \n Runtime consumers may still serve ORG / user-selected locales from the\n * enabled-languages set, but when a pipeline needs \"the locale this SaaS owns\n * natively\", this helper is the contract.\n /\nexport function getConfiguredPrimaryLanguage(\n config: AppPrimaryLanguageConfigShape \| null \| undefined,\n): AvailableLanguage {\n const configured = config?.appPreferences?.languages?.defaultLanguage;\n if (configured !== undefined && !Object.values(AvailableLanguage).includes(configured as AvailableLanguage)) {\n throw new Error(`Invalid app primary language \"${String(configured)}\". Configure appPreferences.languages.defaultLanguage with a valid AvailableLanguage.`);\n }\n const found = Object.values(AvailableLanguage).find((value) => value === configured);\n return found ?? AvailableLanguage.EN;\n}\n\n/\n Resolve the runtime fallback locale from app config.\n \n If the configured fallback is absent or invalid, fall back to the configured\n * primary locale so backend runtime consumers never invent a separate default.\n /\nexport function getConfiguredFallbackLanguage(\n config: AppPrimaryLanguageConfigShape \| null \| undefined,\n): AvailableLanguage {\n const configured = config?.appPreferences?.languages?.fallbackLanguage;\n if (configured !== undefined && !Object.values(AvailableLanguage).includes(configured as AvailableLanguage)) {\n throw new Error(`Invalid app fallback language \"${String(configured)}\". Configure appPreferences.languages.fallbackLanguage with a valid AvailableLanguage.`);\n }\n const found = Object.values(AvailableLanguage).find((value) => value === configured);\n return found ?? getConfiguredPrimaryLanguage(config);\n}\n\nfunction buildPublicSocialOAuth2Providers(\n auth: AppConfiguration['auth'] \| null \| undefined,\n): Record<string, { displayName?: string }> {\n return Object.fromEntries(\n Object.entries(auth?.socialOAuth2Providers ?? {})\n .filter(([, providerConfig]) => isEnabledSocialOAuth2LoginProvider(providerConfig))\n .map(([providerRef, providerConfig]) => [\n providerRef,\n {\n displayName: providerConfig?.displayName,\n },\n ]),\n );\n}\n\n\nexport class ApplicationUtils {\n /\n Transforms backend application configuration to a frontend-safe shared payload.\n * Filters out private/backend-only runtime endpoints and preserves only app-owned\n * frontend service entries keyed by frontend service identity.\n */\n static toAppConfiguration_Shared(config: AppConfiguration): AppConfiguration_Shared {\n const {\n appIdentity,\n brandAssets,\n appPreferences,\n runtime,\n auth,\n userTypes,\n frontendServices,\n organizationTypes,\n compliance,\n billing,\n analytics,\n lifecycle,\n } = config;\n\n const runtime_endPoints = runtime.endPoints;\n\n // Keep only shared endpoints by excluding platform-private keys.\n // Config-defined frontend service endpoints pass through automatically.\n const platformTypes = new Set<string>(Object.values(PlatformApplicationType));\n const runtime_endPoints_frontend = Object.keys(runtime_endPoints).reduce((acc, key) => {\n if (!platformTypes.has(key)) {\n acc[key] = runtime_endPoints[key];\n }\n return acc;\n }, {} as typeof runtime_endPoints);\n\n // For frontend, expose only publicUrl; explicitly drop internalUrl\n const runtime_endPoints_frontend_publicOnly = Object.fromEntries(\n Object.entries(runtime_endPoints_frontend).map(([appKey, urls]) => [\n appKey,\n { publicUrl: urls?.publicUrl },\n ])\n ) as typeof runtime_endPoints_frontend;\n\n const apiJwtPublicKey = config.jwt.publicKey[JwtPrivateKeys.APPLICATION_AUTH_TOKEN];\n\n // Strip backend-only auth fields before sending to frontend.\n // Same pattern as runtime (stripping appCustomRoot, internalUrl, platform-only endpoints).\n const {\n socialOAuth2Providers: _privateSocialOAuth2Providers,\n passwordHashing,\n passkeyOperational, otpOperational, magicLinkOperational, totpOperational,\n ...sharedAuth\n } = auth;\n\n // W6.9: Strip backend-only fields from per-user-type auth policies before frontend projection\n const strippedUserTypes = Object.fromEntries(\n Object.entries(userTypes ?? {}).map(([typeName, typeDef]) => {\n if (!typeDef?.auth) return [typeName, typeDef];\n const { lockoutPolicy: _lp, maxConcurrentSessions: _mcs, ...frontendAuth } = typeDef.auth as any;\n return [typeName, { ...typeDef, auth: frontendAuth }];\n }),\n );\n\n return {\n appIdentity,\n brandAssets,\n appPreferences,\n runtime: {\n endPoints: runtime_endPoints_frontend_publicOnly\n },\n auth: {\n ...sharedAuth,\n socialOAuth2Providers: buildPublicSocialOAuth2Providers(auth),\n },\n userTypes: strippedUserTypes,\n frontendServices,\n organizationTypes,\n compliance,\n billing,\n analytics,\n lifecycle,\n apiJwtPublicKey,\n };\n }\n\n}\n"]}
1	+ {"version":3,"file":"app-configuration.backend.utils.js","sourceRoot":"","sources":["../../../../../src/config/services/app-configuration.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,wEAAwE,CAAC;AAGxG,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qEAAqE,CAAC;AAC9G,OAAO,EAAE,kCAAkC,EAAE,MAAM,uFAAuF,CAAC;AAW3I;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAwD;IAExD,MAAM,UAAU,GAAG,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,CAAC;IACtE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,UAA+B,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,UAAU,CAAC,uFAAuF,CAAC,CAAC;IAC9J,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IACrF,OAAO,KAAK,IAAI,iBAAiB,CAAC,EAAE,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAwD;IAExD,MAAM,UAAU,GAAG,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,gBAAgB,CAAC;IACvE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,UAA+B,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,UAAU,CAAC,wFAAwF,CAAC,CAAC;IAChK,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IACrF,OAAO,KAAK,IAAI,4BAA4B,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gCAAgC,CACvC,IAAiD;IAEjD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,qBAAqB,IAAI,EAAE,CAAC;SAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,kCAAkC,CAAC,cAAc,CAAC,CAAC;SAClF,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;QACtC,WAAW;QACX;YACE,WAAW,EAAE,cAAc,EAAE,WAAW;SACzC;KACF,CAAC,CACL,CAAC;AACJ,CAAC;AAGD,MAAM,OAAO,gBAAgB;IAC3B;;;;OAIG;IACH,MAAM,CAAC,yBAAyB,CAC9B,MAAwB;IACxB;;;;;;;OAOG;IACH,aAAsB;QAEtB,MAAM,EACJ,WAAW,EACX,WAAW,EACX,cAAc,EACd,OAAO,EACP,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,OAAO,EACP,SAAS,EACT,SAAS,GACV,GAAG,MAAM,CAAC;QAEX,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;QAE5C,iEAAiE;QACjE,wEAAwE;QACxE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAC9E,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACpF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,EAAE,EAA8B,CAAC,CAAC;QAEnC,mEAAmE;QACnE,MAAM,qCAAqC,GAAG,MAAM,CAAC,WAAW,CAC9D,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACjE,MAAM;YACN,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CACkC,CAAC;QAEvC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAEpF,6DAA6D;QAC7D,2FAA2F;QAC3F,MAAM,EACJ,qBAAqB,EAAE,6BAA6B,EACpD,eAAe,EACf,kBAAkB,EAAE,cAAc,EAAE,oBAAoB,EAAE,eAAe,EACzE,GAAG,UAAU,EACd,GAAG,IAAI,CAAC;QAET,8FAA8F;QAC9F,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAC1C,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE;YAC1D,IAAI,CAAC,OAAO,EAAE,IAAI;gBAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC,IAAW,CAAC;YACjG,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CACH,CAAC;QAEF,OAAO;YACL,wFAAwF;YACxF,yFAAyF;YACzF,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,WAAW;YAC5E,WAAW;YACX,cAAc;YACd,OAAO,EAAE;gBACP,SAAS,EAAE,qCAAqC;aACjD;YACD,IAAI,EAAE;gBACJ,GAAG,UAAU;gBACb,qBAAqB,EAAE,gCAAgC,CAAC,IAAI,CAAC;aAC9D;YACD,SAAS,EAAE,iBAAiB;YAC5B,gBAAgB;YAChB,iBAAiB;YACjB,UAAU;YACV,OAAO;YACP,SAAS;YACT,SAAS;YACT,eAAe;SAChB,CAAC;IACJ,CAAC;CAEF","sourcesContent":["/*\n Frontend Configuration Transformers Service\n \n Backend service to transform complete backend application configuration\n * into frontend-safe subsets for API endpoints.\n /\n\nimport { JwtPrivateKeys } from '~wildo-backend-lib/security/authentications/models/jwt.backend.schemas';\nimport { AppConfiguration } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport type { AppConfiguration_Shared } from '@wildo-ai/saas-models';\nimport { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';\nimport { PlatformApplicationType } from '~wildo-backend-lib/applications/models/applications.backend.schemas';\nimport { isEnabledSocialOAuth2LoginProvider } from '~wildo-backend-lib/security/authentications/utils/social-oauth2-purpose.backend.utils';\n\nexport interface AppPrimaryLanguageConfigShape {\n appPreferences?: {\n languages?: {\n defaultLanguage?: string \| AvailableLanguage;\n fallbackLanguage?: string \| AvailableLanguage;\n };\n };\n}\n\n/\n Resolve the SaaS application's authoring / primary locale from the\n * canonical app-config path.\n \n This is the single source of truth for generation-time label ownership:\n * app-label labellize, app-label translate, and email-label generation all\n * derive their primary locale from\n * `appPreferences.languages.defaultLanguage`.\n \n Runtime consumers may still serve ORG / user-selected locales from the\n * enabled-languages set, but when a pipeline needs \"the locale this SaaS owns\n * natively\", this helper is the contract.\n /\nexport function getConfiguredPrimaryLanguage(\n config: AppPrimaryLanguageConfigShape \| null \| undefined,\n): AvailableLanguage {\n const configured = config?.appPreferences?.languages?.defaultLanguage;\n if (configured !== undefined && !Object.values(AvailableLanguage).includes(configured as AvailableLanguage)) {\n throw new Error(`Invalid app primary language \"${String(configured)}\". Configure appPreferences.languages.defaultLanguage with a valid AvailableLanguage.`);\n }\n const found = Object.values(AvailableLanguage).find((value) => value === configured);\n return found ?? AvailableLanguage.EN;\n}\n\n/\n Resolve the runtime fallback locale from app config.\n \n If the configured fallback is absent or invalid, fall back to the configured\n * primary locale so backend runtime consumers never invent a separate default.\n /\nexport function getConfiguredFallbackLanguage(\n config: AppPrimaryLanguageConfigShape \| null \| undefined,\n): AvailableLanguage {\n const configured = config?.appPreferences?.languages?.fallbackLanguage;\n if (configured !== undefined && !Object.values(AvailableLanguage).includes(configured as AvailableLanguage)) {\n throw new Error(`Invalid app fallback language \"${String(configured)}\". Configure appPreferences.languages.fallbackLanguage with a valid AvailableLanguage.`);\n }\n const found = Object.values(AvailableLanguage).find((value) => value === configured);\n return found ?? getConfiguredPrimaryLanguage(config);\n}\n\nfunction buildPublicSocialOAuth2Providers(\n auth: AppConfiguration['auth'] \| null \| undefined,\n): Record<string, { displayName?: string }> {\n return Object.fromEntries(\n Object.entries(auth?.socialOAuth2Providers ?? {})\n .filter(([, providerConfig]) => isEnabledSocialOAuth2LoginProvider(providerConfig))\n .map(([providerRef, providerConfig]) => [\n providerRef,\n {\n displayName: providerConfig?.displayName,\n },\n ]),\n );\n}\n\n\nexport class ApplicationUtils {\n /\n Transforms backend application configuration to a frontend-safe shared payload.\n * Filters out private/backend-only runtime endpoints and preserves only app-owned\n * frontend service entries keyed by frontend service identity.\n /\n static toAppConfiguration_Shared(\n config: AppConfiguration,\n /\n The application's own id, which the AUTHORED configuration does not carry — it is runtime\n * identity, resolved at startup, not something an application declares about itself. Passed in\n * rather than read here so this projection stays a pure function of its input.\n \n Optional so every existing caller and fixture keeps working; an absent id simply leaves the\n * field off, which is the pre-existing behaviour.\n */\n applicationId?: string,\n ): AppConfiguration_Shared {\n const {\n appIdentity,\n brandAssets,\n appPreferences,\n runtime,\n auth,\n userTypes,\n frontendServices,\n organizationTypes,\n compliance,\n billing,\n analytics,\n lifecycle,\n } = config;\n\n const runtime_endPoints = runtime.endPoints;\n\n // Keep only shared endpoints by excluding platform-private keys.\n // Config-defined frontend service endpoints pass through automatically.\n const platformTypes = new Set<string>(Object.values(PlatformApplicationType));\n const runtime_endPoints_frontend = Object.keys(runtime_endPoints).reduce((acc, key) => {\n if (!platformTypes.has(key)) {\n acc[key] = runtime_endPoints[key];\n }\n return acc;\n }, {} as typeof runtime_endPoints);\n\n // For frontend, expose only publicUrl; explicitly drop internalUrl\n const runtime_endPoints_frontend_publicOnly = Object.fromEntries(\n Object.entries(runtime_endPoints_frontend).map(([appKey, urls]) => [\n appKey,\n { publicUrl: urls?.publicUrl },\n ])\n ) as typeof runtime_endPoints_frontend;\n\n const apiJwtPublicKey = config.jwt.publicKey[JwtPrivateKeys.APPLICATION_AUTH_TOKEN];\n\n // Strip backend-only auth fields before sending to frontend.\n // Same pattern as runtime (stripping appCustomRoot, internalUrl, platform-only endpoints).\n const {\n socialOAuth2Providers: _privateSocialOAuth2Providers,\n passwordHashing,\n passkeyOperational, otpOperational, magicLinkOperational, totpOperational,\n ...sharedAuth\n } = auth;\n\n // W6.9: Strip backend-only fields from per-user-type auth policies before frontend projection\n const strippedUserTypes = Object.fromEntries(\n Object.entries(userTypes ?? {}).map(([typeName, typeDef]) => {\n if (!typeDef?.auth) return [typeName, typeDef];\n const { lockoutPolicy: _lp, maxConcurrentSessions: _mcs, ...frontendAuth } = typeDef.auth as any;\n return [typeName, { ...typeDef, auth: frontendAuth }];\n }),\n );\n\n return {\n // The id is MERGED here rather than declared upstream: `appIdentity` is authored by the\n // application, and this is runtime identity the client needs to name its own scope room.\n appIdentity: applicationId ? { ...appIdentity, applicationId } : appIdentity,\n brandAssets,\n appPreferences,\n runtime: {\n endPoints: runtime_endPoints_frontend_publicOnly\n },\n auth: {\n ...sharedAuth,\n socialOAuth2Providers: buildPublicSocialOAuth2Providers(auth),\n },\n userTypes: strippedUserTypes,\n frontendServices,\n organizationTypes,\n compliance,\n billing,\n analytics,\n lifecycle,\n apiJwtPublicKey,\n };\n }\n\n}\n"]}

package/dist/esm/data-seeding/services/shared/data-seed-scope-iteration.shared.utils.d.ts CHANGED Viewed

@@ -69,7 +69,7 @@ import type { DataSeedScopeResolverRegistryBackendService } from '../../../data-
 import { DataSeedScopeIterationStrategy } from '../../../data-seeding/models/data-seed.shared.schemas';
 /**
  * Page size for resource-table walks. Matches the schema cap on
- * `Resouces_PaginationRequestSchema.limit` (`max(100)`), which is the largest
+ * `Resources_PaginationRequestSchema.limit` (`max(100)`), which is the largest
  * value `repo.list({ paginated: true })` will accept. Going larger would be
  * silently rejected by the pagination Zod parse.
  */
@@ -159,7 +159,7 @@ export declare function iterateGlobal(): AsyncGenerator<DataSeedScopeIterationIt
  * the `DataSeedScopeIterationItem` union and instead consumes the bare
  * `{ relatedId }` form directly.
  *
- * Pagination is page-based (matches the `Resouces_PaginationRequestSchema`
+ * Pagination is page-based (matches the `Resources_PaginationRequestSchema`
  * `{ page, limit }` shape) — NOT skip-based. A page slip caused by
  * concurrent inserts/deletes is acceptable for cron seeding (the next tick
  * picks up the missed row); cursor-based stable pagination would add

package/dist/esm/data-seeding/services/shared/data-seed-scope-iteration.shared.utils.js CHANGED Viewed

@@ -69,7 +69,7 @@ import { DataSeedScopeIterationStrategy } from '../../../data-seeding/models/dat
 // --------------------------------------------------------------------------
 /**
  * Page size for resource-table walks. Matches the schema cap on
- * `Resouces_PaginationRequestSchema.limit` (`max(100)`), which is the largest
+ * `Resources_PaginationRequestSchema.limit` (`max(100)`), which is the largest
  * value `repo.list({ paginated: true })` will accept. Going larger would be
  * silently rejected by the pagination Zod parse.
  */
@@ -106,7 +106,7 @@ export async function* iterateGlobal() {
  * the `DataSeedScopeIterationItem` union and instead consumes the bare
  * `{ relatedId }` form directly.
  *
- * Pagination is page-based (matches the `Resouces_PaginationRequestSchema`
+ * Pagination is page-based (matches the `Resources_PaginationRequestSchema`
  * `{ page, limit }` shape) — NOT skip-based. A page slip caused by
  * concurrent inserts/deletes is acceptable for cron seeding (the next tick
  * picks up the missed row); cursor-based stable pagination would add