npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.12 → 1.1.13 - Mend

@wildo-ai/saas-backend-lib 1.1.12 → 1.1.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (226) hide show

package/dist/esm/security/authentications/services/custom-impls/siem-delivery-dlq.custom-impl.backend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"siem-delivery-dlq.custom-impl.backend.service.js","sourceRoot":"","sources":["../../../../../../src/security/authentications/services/custom-impls/siem-delivery-dlq.custom-impl.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,2BAA2B,EAC3B,SAAS,EACT,4BAA4B,EAC5B,0BAA0B,EAC1B,qCAAqC,EACrC,kCAAkC,EAClC,kCAAkC,EAClC,qBAAqB,EACrB,kCAAkC,GAInC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,yCAAyC,EACzC,yDAAyD,GAE1D,MAAM,4GAA4G,CAAC;AACpH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAIpF,OAAO,EACL,gCAAgC,GAEjC,MAAM,4FAA4F,CAAC;AAEpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,MAAM,8FAA8F,CAAC;AAS1I;;;;;;;;;;;GAWG;AACH,MAAM,iBAAiB,GAA8B;IACnD,EAAE,YAAY,EAAE,gBAAgB,CAAC,8BAA8B,EAAE,SAAS,EAAE,aAAa,CAAC,YAAY,EAAE;IACxG,EAAE,YAAY,EAAE,gBAAgB,CAAC,6BAA6B,EAAE,SAAS,EAAE,aAAa,CAAC,WAAW,EAAE;CAC9F,CAAC;AASX;;;;GAIG;AACH,SAAS,YAAY,CACnB,SAAwB,EACxB,gBAAmF;IAEnF,MAAM,OAAO,GAAG,SAAS,KAAK,aAAa,CAAC,YAAY;QACtD,CAAC,CAAC,gBAAgB,CAAC,cAAc;QACjC,CAAC,CAAC,gBAAgB,CAAC,aAAa,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,YAAY,GAAG,SAAS,KAAK,aAAa,CAAC,YAAY;QAC3D,CAAC,CAAC,kCAAkC,CAAC,gBAAgB,CAAC,aAAa,CAAC;QACpE,CAAC,CAAC,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AAC9C,CAAC;AAED,oFAAoF;AACpF,SAAS,WAAW,CAAC,KAA2B;IAC9C,OAAO,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;AACjD,CAAC;AAED,uFAAuF;AACvF,SAAS,OAAO,CAAC,SAAoB;IAInC,OAAO;QACL,gBAAgB,EAAE,SAAS,CAAC,GAAG,CAC7B,kBAAkB,CAAC,oCAAoC,CACxD;QACD,UAAU,EAAE,SAAS,CAAC,GAAG,CACvB,kBAAkB,CAAC,2BAA2B,CAC/C;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAwB;IAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAA6D,CAAC;IACnF,OAAO,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAC5B,UAA8C,EAC9C,KAA2B,EAC3B,UAAgC,EAChC,QAAoC;IAEpC,MAAM,UAAU,CAAC,0BAA0B,CAAC;QAC1C,QAAQ;QACR,6EAA6E;QAC7E,kFAAkF;QAClF,2EAA2E;QAC3E,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO;QACxD,UAAU;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAQD;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,UAA8C,EAC9C,KAA2B,EAC3B,UAAgC,EAChC,GAAwB;IAExB,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,CAAC,WAAW,EAAE,CAAC;QACrD,uHAAuH;QACvH,mBAAmB;QACnB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,8BAA8B,CAAC;YAC9D,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU;SACX,CAAC,CAAC;QACH,OAAO,OAAO,KAAK,gCAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IACpI,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1C,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,6EAA6E;AAC7E,SAAS,sBAAsB,CAAC,OAAyC;IACvE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,gCAAgC,CAAC,eAAe;YACnD,OAAO,iKAAiK,CAAC;QAC3K,KAAK,gCAAgC,CAAC,mBAAmB;YACvD,OAAO,2KAA2K,CAAC;QACrL,KAAK,gCAAgC,CAAC,kBAAkB;YACtD,OAAO,sKAAsK,CAAC;QAChL,KAAK,gCAAgC,CAAC,qBAAqB;YACzD,OAAO,sHAAsH,CAAC;QAChI,KAAK,gCAAgC,CAAC,QAAQ;YAC5C,OAAO,sEAAsE,CAAC;IAClF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAC/B,IAA+B,EAC/B,gBAAuC,EACvC,KAA2B,EAC3B,GAAa,EACb,MAAqB;IAErB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,mFAAmF,EAAE;YAC/F,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,GAAG;YACb,GAAG,2BAA2B,CAAC,KAAK,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,oEAAoE;AACpE,uEAAuE;AAEvE,MAAM,UAAU,iCAAiC;IAC/C,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,EAA8C,EAAE;QACvG,OAAO,CAAC,yBAAyB,EAAE,SAAoB,EAAE,EAAE;YACzD,OAAO,yCAAyC,CAAC;gBAC/C,aAAa,EAAE;oBACb,kBAAkB,EAAE,YAAY;oBAChC,mBAAmB,EAAE,0BAA0B,CAAC,YAAY;oBAC5D,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,kBAAkB,EAAE,IAAI;iBACzB;gBACD,gBAAgB,EAAE,qCAAqC;gBACvD,QAAQ,EAAE;oBACR,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE;wBACnF,0EAA0E;wBAC1E,mCAAmC;wBACnC,MAAM,EAAE,OAAO,EAAE,GAAG,KAA4B,CAAC;wBAEjD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;wBACxD,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;gCAC1E,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gCAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,oCAAoC,SAAS,4BAA4B,EAAE;6BAChG,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;wBAEpG,4EAA4E;wBAC5E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAsB,gBAAgB,EAAE;4BACjE,EAAE,EAAE,OAAO;4BACX,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;yBAC3B,CAAC,CAAC;wBACH,IAAI,CAAC,GAAG,EAAE,CAAC;4BACT,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,gBAAgB,EAAE;gCACzE,sBAAsB,EAAE,2BAA2B,CAAC,SAAS;gCAC7D,OAAO,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,OAAO,EAAE;6BACzE,CAAC,CAAC;wBACL,CAAC;wBACD,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,CAAC,SAAS,EAAE,CAAC;4BACnD,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAAE;gCACxE,sBAAsB,EAAE,2BAA2B,CAAC,QAAQ;gCAC5D,OAAO,EAAE;oCACP,OAAO,EAAE,0FAA0F;oCACnG,OAAO;oCACP,MAAM,EAAE,GAAG,CAAC,MAAM;iCACnB;6BACF,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;wBAC5D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,CAC5D,gBAAgB,EAChB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,OAAO,CACd,CAAC;wBACF,uEAAuE;wBACvE,4EAA4E;wBAC5E,gDAAgD;wBAChD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;4BAC1C,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAAE;gCACxE,sBAAsB,EAAE,2BAA2B,CAAC,QAAQ;gCAC5D,OAAO,EAAE;oCACP,OAAO,EAAE,yFAAyF;oCAClG,OAAO;iCACR;6BACF,CAAC,CAAC;wBACL,CAAC;wBAED,yEAAyE;wBACzE,2DAA2D;wBAC3D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;wBACrE,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;4BAC/D,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;gCAC1E,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gCAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,sDAAsD,EAAE,OAAO,EAAE;6BACtF,CAAC,CAAC;wBACL,CAAC;wBACD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;4BAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC;4BACrC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,sEAAsE,EAAE;gCACxF,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI;6BACjG,CAAC,CAAC;4BACH,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAAE;gCACxE,sBAAsB,EAAE,2BAA2B,CAAC,QAAQ;gCAC5D,OAAO,EAAE,EAAE,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;6BAC3E,CAAC,CAAC;wBACL,CAAC;wBACD,MAAM,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBAEjF,iEAAiE;wBACjE,OAAO,EAAE,OAAO,EAAE,wCAAwC,EAAE,OAAO,EAAE,CAAC;oBACxE,CAAC;iBACF;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,8EAA8E;AAC9E,uEAAuE;AAEvE,MAAM,UAAU,8BAA8B;IAC5C,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,EAA8C,EAAE;QACvG,OAAO,CAAC,yBAAyB,EAAE,SAAoB,EAAE,EAAE;YACzD,OAAO,yCAAyC,CAAC;gBAC/C,aAAa,EAAE;oBACb,kBAAkB,EAAE,YAAY;oBAChC,mBAAmB,EAAE,0BAA0B,CAAC,SAAS;oBACzD,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,kBAAkB,EAAE,IAAI;iBACzB;gBACD,gBAAgB,EAAE,kCAAkC;gBACpD;;;;mBAIG;gBACH,sBAAsB,EAAE,yDAAyD,CAAC,yBAAyB;gBAC3G,QAAQ,EAAE;oBACR,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE;wBACpF,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;wBACxD,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;gCAC1E,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gCAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,iCAAiC,SAAS,4BAA4B,EAAE;6BAC7F,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;wBAEpG,6EAA6E;wBAC7E,iFAAiF;wBACjF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAsB,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;wBACxF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;wBAC1B,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;4BAChB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;wBAC9G,CAAC;wBAED,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;wBAC5D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,CAC5D,gBAAgB,EAChB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,OAAO,CACd,CAAC;wBACF,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;4BAC1C,sEAAsE;4BACtE,8CAA8C;4BAC9C,OAAO;gCACL,YAAY,EAAE,CAAC;gCACf,YAAY,EAAE,KAAK;gCACnB,OAAO,EAAE,sFAAsF;6BAChG,CAAC;wBACJ,CAAC;wBAED,0GAA0G;wBAC1G,2CAA2C;wBAC3C,MAAM,WAAW,GAAa,EAAE,CAAC;wBACjC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;4BAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,SAAS;gCAAE,SAAS;4BAEjE,0EAA0E;4BAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAsB,gBAAgB,EAAE;gCACjE,EAAE,EAAE,OAAO,CAAC,GAAG;gCACf,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;6BAC3B,CAAC,CAAC;4BACH,IAAI,CAAC,GAAG;gCAAE,SAAS,CAAC,4BAA4B;4BAEhD,IAAI,CAAC;gCACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;gCACrE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oCACrB,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gCAChC,CAAC;qCAAM,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;oCACnC,yEAAyE;oCACzE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,EAAE;wCACrF,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe;qCACjI,CAAC,CAAC;gCACL,CAAC;4BACH,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,mEAAmE;gCACnE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;oCAChF,SAAS,EAAE,KAAK,CAAC,SAAS;oCAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;oCACtB,OAAO,EAAE,OAAO,CAAC,GAAG;oCACpB,GAAG,2BAA2B,CAAC,KAAK,CAAC;iCACtC,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;wBAED,MAAM,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBAEnF,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC;wBACxC,MAAM,YAAY,GAAG,KAAK,GAAG,YAAY,CAAC;wBAC1C,oFAAoF;wBACpF,OAAO;4BACL,YAAY;4BACZ,YAAY;4BACZ,OAAO,EAAE,aAAa,YAAY,OAAO,KAAK,qBAAqB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,aAAa,KAAK,CAAC,SAAS,aAAa,YAAY,GAAG;yBAC7J,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,sDAAsD;AACtD,uEAAuE;AAEvE,MAAM,UAAU,8BAA8B;IAC5C,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,EAA8C,EAAE;QACvG,OAAO,CAAC,yBAAyB,EAAE,SAAoB,EAAE,EAAE;YACzD,OAAO,yCAAyC,CAAC;gBAC/C,aAAa,EAAE;oBACb,kBAAkB,EAAE,YAAY;oBAChC,mBAAmB,EAAE,0BAA0B,CAAC,SAAS;oBACzD,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,kBAAkB,EAAE,IAAI;iBACzB;gBACD,gBAAgB,EAAE,kCAAkC;gBACpD,mHAAmH;gBACnH,oGAAoG;gBACpG,sBAAsB,EAAE,yDAAyD,CAAC,uBAAuB;gBACzG,QAAQ,EAAE;oBACR,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE;wBACpF,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;wBACxD,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;gCAC1E,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gCAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,iCAAiC,SAAS,4BAA4B,EAAE;6BAC7F,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;wBAEpG,0EAA0E;wBAC1E,2EAA2E;wBAC3E,iCAAiC;wBACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;wBACpG,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC;wBAErC,qEAAqE;wBACrE,OAAO;4BACL,WAAW;4BACX,OAAO,EAAE,UAAU,WAAW,qBAAqB,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,aAAa,KAAK,CAAC,SAAS,GAAG;yBAC1H,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/*\n SIEM Delivery DLQ — RETRY_SINGLE / RETRY_ALL / PURGE_ALL custom implementations.\n \n Makes the operator drain/clear surfaces on the SIEM delivery dead-letter queue\n * real (both polymorphic variants: ORGANIZATION_SIEM_DELIVERY_DLQ +\n * APPLICATION_SIEM_DELIVERY_DLQ). They are declared on\n * `siem-delivery-dlq.shared.resources-config.schemas.ts`; this file authors the\n * REPLACE_CORE_OPERATIONS handlers that back them.\n \n ── Why \"retry\" means RE-ENQUEUE, not \"reset a status\" ────────────────────────\n * The M2M webhook delivery-log sibling\n * (`m2m-webhook-delivery-log.custom-impl.backend.service.ts`) resets the SAME row\n * its worker drains (`resetForRetry`: CAS a FAILED row back to PENDING) because the\n * M2M worker owns that row's status machine. The SIEM delivery worker\n * (`SIEMWebhookDeliveryBackendService.processDelivery`) does NOT: SIEM delivery is\n * enqueue-per-event via the `siem.webhook-delivery` custom batch, the worker holds\n * no back-reference to any DLQ row, and there is NO SIEM DLQ retry-sweep batch. So\n * \"retry\" here = rebuild the delivery job from the DLQ row's STORED envelope and\n * re-enqueue it onto the SIEM delivery queue (through the single job-contract seam\n * {@link AuditEventDispatcherBackendService.enqueueSiemWebhookDelivery}).\n \n ── Delete-on-requeue ─────────────────────────────────────────────────────────\n * After a successful re-enqueue the DLQ row is DELETED, not flipped to a status.\n * Because the worker has no back-ref and no sweep exists, a status transition would\n * leave the row stuck forever; and a re-delivery that fails is re-captured by\n * `_enqueueToDLQ` as a BRAND-NEW row. So the honest model is: a DLQ row represents a\n * delivery that is CURRENTLY dead-lettered — the moment we put it back in flight it\n * leaves the queue. Enqueue is the load-bearing step (its failure fails the op and\n * leaves the row intact for another attempt); the delete is best-effort cleanup (a\n * delete failure only leaves a stale, purgeable row — never an un-retried event).\n \n ── A QUARANTINED row is never re-sent from its stored envelope (#2959) ─────────\n * A row whose job failed its integrity check (`SiemDeliveryDlqStatus.QUARANTINED`) was written from a payload nobody\n * vouched for: anyone able to write to the queue can plant one, in any tenant's queue, with any envelope. Re-enqueueing\n * it would sign it afresh and deliver a forged security event to that tenant's real SIEM. So both RETRY verbs hand a\n * quarantined row to {@link AuditEventDispatcherBackendService.redeliverQuarantinedDeadLetter}, which re-derives the event\n * from the application's own audit store by `eventId` and delivers it only to an organization that store records the\n * event as routed to. When it cannot (no such event, not routed here, filtered out, application scope), the row stays\n * quarantined: RETRY_SINGLE answers 409 naming why, RETRY_ALL counts it as skipped, and both log it.\n \n ── PURGE_ALL clears the WHOLE scope ──────────────────────────────────────────\n * PURGE_ALL drops every row in the caller's scope (not only EXHAUSTED). The op name,\n * empty request DTO (no age/status narrowing), and CRITICAL risk tier all say\n * \"clear the queue\"; and unlike M2M there is no in-flight row to protect (SIEM DLQ\n * rows are inert — no worker owns them, no sweep touches them), so every status is\n * equally safe to remove. A partial purge that left PENDING_RETRY rows would leave\n * rows nothing will ever retry — a worse trap.\n \n ── Tenant safety ─────────────────────────────────────────────────────────────\n * Every read/list/delete is narrowed to the operation's scope FK\n * (organizationId / applicationId) belt-and-braces on top of the execution context's\n * own scope enforcement — an `entryId` from another tenant reads as not-found and a\n * purge/retry can never cross a scope boundary.\n /\n\nimport {\n AuthScopeType,\n CoreResourceType,\n ErrorCustomMessageReference,\n ErrorType,\n ResourceOperationVariantType,\n SiemDeliveryDlq_Operations,\n SiemDeliveryDlq_RetrySingleRequestDto,\n SiemDeliveryDlq_RetryAllRequestDto,\n SiemDeliveryDlq_PurgeAllRequestDto,\n SiemDeliveryDlqStatus,\n coreResourceShared_FieldIdentifier,\n type SecurityAuditEventEnvelope,\n type SiemDeliveryDlqBase,\n type SiemExportConfigBase,\n} from '@wildo-ai/saas-models';\nimport type { Container } from 'inversify';\nimport {\n createResourceCustomServiceImplementation,\n ResourceCustomServiceImplementationHookTransactionPosture,\n type ResourceCustomServiceImplementationFactory,\n} from '~wildo-backend-lib/base-classes/services/services/resource-operation-custom-implementation.factory.backend';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { BackendResourceRepository } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { AuthOrganizationConfigurationService } from '~wildo-backend-lib/security/authentications/services/admin-config/auth-organization-configuration.service';\nimport {\n SiemQuarantinedDeadLetterOutcome,\n type AuditEventDispatcherBackendService,\n} from '~wildo-backend-lib/compliance/audit-trails/services/audit-event-dispatcher.backend.service';\nimport type { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { engineRepositoriesRegistry } from '~wildo-backend-lib/base-classes/services/services/engine-repositories-registry.backend.utils';\n\n// ── SIEM delivery DLQ polymorphic variants (resource type ↔ scope) ────────────\n\ninterface SiemDlqVariant {\n resourceType: CoreResourceType;\n scopeType: AuthScopeType;\n}\n\n/\n One factory per polymorphic variant. The resource type selects the collection;\n * the scope type drives config loading, the scope-FK filter, and the re-enqueued\n * job's scope so it can never drift from the row it targets.\n \n Both variants are wired identically, but the APPLICATION one is RESERVED / DORMANT\n * in practice: an `APPLICATION_SIEM_DELIVERY_DLQ` row can only exist if an app-scoped\n * delivery failed, and no producer emits app-scoped deliveries today (the sole SIEM\n * producer is org-scoped). So the APP RETRY/PURGE paths never have rows to act on —\n * they are the retry half of reserved plumbing. See `AuditEventDispatcherBackendService.\n * dispatchToOrganizationAuditSinks` for the rationale + how an app producer would attach.\n /\nconst SIEM_DLQ_VARIANTS: readonly SiemDlqVariant[] = [\n { resourceType: CoreResourceType.ORGANIZATION_SIEM_DELIVERY_DLQ, scopeType: AuthScopeType.ORGANIZATION },\n { resourceType: CoreResourceType.APPLICATION_SIEM_DELIVERY_DLQ, scopeType: AuthScopeType.APPLICATION },\n] as const;\n\n/* The operation's resolved scope: its type, id, and the row's scope-FK column name. /\ninterface ResolvedSiemDlqScope {\n scopeType: AuthScopeType;\n scopeId: string;\n scopeFkField: string;\n}\n\n/\n Resolve the operation's scope from the (admin) execution context. Returns `null`\n * when the context carries no scope id — a routing/authorization invariant violation\n * for these org/app-scoped operations, which the caller surfaces as a VALIDATION error.\n /\nfunction resolveScope(\n scopeType: AuthScopeType,\n executionContext: { organizationId?: string \| null; applicationId?: string \| null },\n): ResolvedSiemDlqScope \| null {\n const scopeId = scopeType === AuthScopeType.ORGANIZATION\n ? executionContext.organizationId\n : executionContext.applicationId;\n if (!scopeId) return null;\n const scopeFkField = scopeType === AuthScopeType.ORGANIZATION\n ? coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATIONS]\n : coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION];\n return { scopeType, scopeId, scopeFkField };\n}\n\n/* The scope-FK filter fragment narrowing every read/list/delete to this tenant. /\nfunction scopeFilter(scope: ResolvedSiemDlqScope): Record<string, string> {\n return { [scope.scopeFkField]: scope.scopeId };\n}\n\n/* Resolve the two domain collaborators the drain paths need from the DI container. /\nfunction getDeps(container: Container): {\n orgConfigService: AuthOrganizationConfigurationService;\n dispatcher: AuditEventDispatcherBackendService;\n} {\n return {\n orgConfigService: container.get<AuthOrganizationConfigurationService>(\n SAAS_SERVICE_TYPES.AuthOrganizationConfigurationService,\n ),\n dispatcher: container.get<AuditEventDispatcherBackendService>(\n SAAS_SERVICE_TYPES.AuditEventDispatcherService,\n ),\n };\n}\n\n/\n The DLQ row stores the delivery envelope in `eventPayload` (`z.unknown()` in the\n * schema). Return it typed when present and object-shaped, else `null` (a corrupt /\n * missing payload has nothing to re-deliver).\n /\nfunction extractEnvelope(row: SiemDeliveryDlqBase): SecurityAuditEventEnvelope \| null {\n const envelope = row.eventPayload as SecurityAuditEventEnvelope \| undefined \| null;\n return envelope && typeof envelope === 'object' ? envelope : null;\n}\n\n/\n Re-enqueue one stored envelope onto the SIEM delivery queue for this scope,\n * through the dispatcher's single job-contract seam (payload shape + delivery MAC +\n * batch ref). May throw on enqueue failure — callers decide isolation.\n /\nasync function enqueueEnvelope(\n dispatcher: AuditEventDispatcherBackendService,\n scope: ResolvedSiemDlqScope,\n siemConfig: SiemExportConfigBase,\n envelope: SecurityAuditEventEnvelope,\n): Promise<void> {\n await dispatcher.enqueueSiemWebhookDelivery({\n envelope,\n // The payload's `organizationId` is a routing/label field; the authoritative\n // delivery scope is `scopeType`/`scopeId`. Prefer the envelope's own org (for the\n // APP variant that is the app's owning org), falling back to the scope id.\n organizationId: envelope.organizationId ?? scope.scopeId,\n siemConfig,\n scopeType: scope.scopeType,\n scopeId: scope.scopeId,\n });\n}\n\n/* What {@link requeueRow} did: `keptQuarantined` is set exactly when a quarantined row stayed (#2959). /\ninterface SiemDlqRequeueResult {\n requeued: boolean;\n keptQuarantined?: SiemQuarantinedDeadLetterOutcome;\n}\n\n/\n Put one dead-lettered row back in flight, by the only path its status allows: a QUARANTINED row is re-derived from the\n * audit store (#2959) and every other row re-sends its stored envelope. `requeued: false` carries the quarantine outcome\n * that kept the row, or none when a row that is not quarantined has no stored envelope. May throw on enqueue failure.\n /\nasync function requeueRow(\n dispatcher: AuditEventDispatcherBackendService,\n scope: ResolvedSiemDlqScope,\n siemConfig: SiemExportConfigBase,\n row: SiemDeliveryDlqBase,\n): Promise<SiemDlqRequeueResult> {\n if (row.status === SiemDeliveryDlqStatus.QUARANTINED) {\n // The stored envelope is never read here: `eventId` is the row's own column, and only what the audit store holds under\n // it is delivered.\n const outcome = await dispatcher.redeliverQuarantinedDeadLetter({\n eventId: row.eventId,\n scopeType: scope.scopeType,\n scopeId: scope.scopeId,\n siemConfig,\n });\n return outcome === SiemQuarantinedDeadLetterOutcome.REQUEUED ? { requeued: true } : { requeued: false, keptQuarantined: outcome };\n }\n const envelope = extractEnvelope(row);\n if (!envelope) return { requeued: false };\n await enqueueEnvelope(dispatcher, scope, siemConfig, envelope);\n return { requeued: true };\n}\n\n/* The operator-facing sentence for a quarantined row that stays (#2959). /\nfunction describeKeptQuarantine(outcome: SiemQuarantinedDeadLetterOutcome): string {\n switch (outcome) {\n case SiemQuarantinedDeadLetterOutcome.NO_AUDIT_RECORD:\n return 'This SIEM DLQ entry failed its integrity check and the audit log holds no event under its id, so there is no genuine event to re-deliver; it stays quarantined.';\n case SiemQuarantinedDeadLetterOutcome.NOT_ROUTED_TO_SCOPE:\n return 'This SIEM DLQ entry failed its integrity check and the audit log does not record its event as routed to this scope, so it is not re-delivered here; it stays quarantined.';\n case SiemQuarantinedDeadLetterOutcome.EXCLUDED_BY_FILTER:\n return 'This SIEM DLQ entry failed its integrity check, and the SIEM export filter for this scope excludes the event the audit log holds under its id; it stays quarantined.';\n case SiemQuarantinedDeadLetterOutcome.SCOPE_HAS_NO_PRODUCER:\n return 'This SIEM DLQ entry failed its integrity check, and no event can be re-derived for this scope; it stays quarantined.';\n case SiemQuarantinedDeadLetterOutcome.REQUEUED:\n return 'This SIEM DLQ entry was re-derived from the audit log and re-queued.';\n }\n}\n\n/\n Delete-on-requeue cleanup: remove the rows we just re-enqueued. NON-FATAL — the\n * re-enqueue already happened, so a delete failure leaves a stale (operator-purgeable)\n * row rather than un-retrying a delivered-again event. Scope-FK filtered belt-and-braces.\n /\nasync function deleteRequeuedRows(\n repo: BackendResourceRepository,\n executionContext: ExecutionContext<any>,\n scope: ResolvedSiemDlqScope,\n ids: string[],\n logger: LoggerService,\n): Promise<void> {\n if (ids.length === 0) return;\n try {\n await repo.deleteMany(executionContext, { _id: { $in: ids }, ...scopeFilter(scope) });\n } catch (error) {\n logger.warn('SIEM DLQ delete-on-requeue failed (non-fatal) — entries re-queued but not removed', {\n scopeType: scope.scopeType,\n scopeId: scope.scopeId,\n entryIds: ids,\n ...projectCaughtErrorLogFields(error),\n });\n }\n}\n\n// ════════════════════════════════════════════════════════════════════\n// RETRY_SINGLE — re-enqueue one dead-lettered entry, then delete it\n// ════════════════════════════════════════════════════════════════════\n\nexport function createSiemDlqRetrySingleFactories(): ResourceCustomServiceImplementationFactory[] {\n return SIEM_DLQ_VARIANTS.map(({ resourceType, scopeType }): ResourceCustomServiceImplementationFactory => {\n return (_resourcesRegistryService, container: Container) => {\n return createResourceCustomServiceImplementation({\n operationPath: {\n resourceIdentifier: resourceType,\n operationIdentifier: SiemDeliveryDlq_Operations.RETRY_SINGLE,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n },\n requestDtoSchema: SiemDeliveryDlq_RetrySingleRequestDto,\n handlers: {\n replaceCoreOperations: async (_id, input, executionContext, _operationPath, utils) => {\n // The entry is addressed by the request DTO's `entryId` (not the URL id),\n // mirroring the M2M RETRY sibling.\n const { entryId } = input as { entryId: string };\n\n const scope = resolveScope(scopeType, executionContext);\n if (!scope) {\n throw utils.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n customMessageReference: ErrorCustomMessageReference.VALIDATION,\n context: { message: `SIEM DLQ RETRY_SINGLE requires a ${scopeType}-scoped execution context.` },\n });\n }\n\n const repo = engineRepositoriesRegistry(utils).getRepositoryOrThrow(resourceType, executionContext);\n\n // Scoped read (id AND scope FK): a cross-tenant entryId reads as not-found.\n const row = await repo.read<SiemDeliveryDlqBase>(executionContext, {\n id: entryId,\n filter: scopeFilter(scope),\n });\n if (!row) {\n throw utils.errorBuilder.buildError(ErrorType.NOT_FOUND, executionContext, {\n customMessageReference: ErrorCustomMessageReference.NOT_FOUND,\n context: { message: 'SIEM DLQ entry not found in this scope.', entryId },\n });\n }\n if (row.status === SiemDeliveryDlqStatus.DELIVERED) {\n throw utils.errorBuilder.buildError(ErrorType.CONFLICT, executionContext, {\n customMessageReference: ErrorCustomMessageReference.CONFLICT,\n context: {\n message: 'This SIEM DLQ entry was already delivered on a later attempt; there is nothing to retry.',\n entryId,\n status: row.status,\n },\n });\n }\n\n const { orgConfigService, dispatcher } = getDeps(container);\n const siemConfig = await orgConfigService.loadSiemExportConfig(\n executionContext,\n scope.scopeType,\n scope.scopeId,\n );\n // `loadSiemExportConfig` lazily materialises a DISABLED default (empty\n // webhookUrl) for a never-configured scope, so guard on a real destination:\n // without a URL there is nowhere to re-deliver.\n if (!siemConfig \|\| !siemConfig.webhookUrl) {\n throw utils.errorBuilder.buildError(ErrorType.CONFLICT, executionContext, {\n customMessageReference: ErrorCustomMessageReference.CONFLICT,\n context: {\n message: 'SIEM export has no webhook URL configured for this scope; configure it before retrying.',\n entryId,\n },\n });\n }\n\n // Enqueue FIRST — a failure here throws (op fails, row left intact for a\n // later attempt). Only on success do we delete-on-requeue.\n const requeue = await requeueRow(dispatcher, scope, siemConfig, row);\n if (!requeue.requeued && requeue.keptQuarantined === undefined) {\n throw utils.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n customMessageReference: ErrorCustomMessageReference.VALIDATION,\n context: { message: 'SIEM DLQ entry has no stored envelope to re-deliver.', entryId },\n });\n }\n if (!requeue.requeued && requeue.keptQuarantined !== undefined) {\n const kept = requeue.keptQuarantined;\n utils.logger.warn('SIEM DLQ RETRY_SINGLE: a quarantined entry stays quarantined (#2959)', {\n scopeType: scope.scopeType, scopeId: scope.scopeId, entryId, eventId: row.eventId, outcome: kept,\n });\n throw utils.errorBuilder.buildError(ErrorType.CONFLICT, executionContext, {\n customMessageReference: ErrorCustomMessageReference.CONFLICT,\n context: { message: describeKeptQuarantine(kept), entryId, outcome: kept },\n });\n }\n await deleteRequeuedRows(repo, executionContext, scope, [entryId], utils.logger);\n\n // Matches the declared customResponseDto `{ message, entryId }`.\n return { message: 'SIEM DLQ entry re-queued for delivery.', entryId };\n },\n },\n });\n };\n });\n}\n\n// ════════════════════════════════════════════════════════════════════\n// RETRY_ALL — re-enqueue every non-delivered entry in scope, then delete them\n// ════════════════════════════════════════════════════════════════════\n\nexport function createSiemDlqRetryAllFactories(): ResourceCustomServiceImplementationFactory[] {\n return SIEM_DLQ_VARIANTS.map(({ resourceType, scopeType }): ResourceCustomServiceImplementationFactory => {\n return (_resourcesRegistryService, container: Container) => {\n return createResourceCustomServiceImplementation({\n operationPath: {\n resourceIdentifier: resourceType,\n operationIdentifier: SiemDeliveryDlq_Operations.RETRY_ALL,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n },\n requestDtoSchema: SiemDeliveryDlq_RetryAllRequestDto,\n /\n * #2297: stays outside a transaction. Each entry is re-published to the delivery queue, and which rows are then\n * deleted depends on which publishes went through: a rolled-back or retried attempt would publish every envelope\n * again and keep the rows. (It is a multi-row write as well, so it would stay best effort for that reason too.)\n */\n hookTransactionPosture: ResourceCustomServiceImplementationHookTransactionPosture.STAYS_OUTSIDE_TRANSACTION,\n handlers: {\n replaceCoreOperations: async (_id, _input, executionContext, _operationPath, utils) => {\n const scope = resolveScope(scopeType, executionContext);\n if (!scope) {\n throw utils.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n customMessageReference: ErrorCustomMessageReference.VALIDATION,\n context: { message: `SIEM DLQ RETRY_ALL requires a ${scopeType}-scoped execution context.` },\n });\n }\n\n const repo = engineRepositoriesRegistry(utils).getRepositoryOrThrow(resourceType, executionContext);\n\n // Enumerate the scope's rows. LIST projects to summary fields (_id, status),\n // which is all we need to pick candidates; the full envelope is re-read per row.\n const rows = await repo.list<SiemDeliveryDlqBase>(executionContext, scopeFilter(scope));\n const total = rows.length;\n if (total === 0) {\n return { retriedCount: 0, skippedCount: 0, message: 'The SIEM dead-letter queue is empty for this scope.' };\n }\n\n const { orgConfigService, dispatcher } = getDeps(container);\n const siemConfig = await orgConfigService.loadSiemExportConfig(\n executionContext,\n scope.scopeType,\n scope.scopeId,\n );\n if (!siemConfig \|\| !siemConfig.webhookUrl) {\n // No destination → nothing can be re-queued. Report as a bulk summary\n // (not an error): the whole queue is skipped.\n return {\n retriedCount: 0,\n skippedCount: total,\n message: 'SIEM export has no webhook URL configured for this scope; no entries were re-queued.',\n };\n }\n\n // PENDING_RETRY + EXHAUSTED re-send their stored envelope; QUARANTINED is re-derived from the audit store\n // (#2959); DELIVERED has nothing to retry.\n const requeuedIds: string[] = [];\n for (const summary of rows) {\n if (summary.status === SiemDeliveryDlqStatus.DELIVERED) continue;\n\n // Summary lacks eventPayload — read the full row for its stored envelope.\n const row = await repo.read<SiemDeliveryDlqBase>(executionContext, {\n id: summary._id,\n filter: scopeFilter(scope),\n });\n if (!row) continue; // vanished mid-sweep → skip\n\n try {\n const requeue = await requeueRow(dispatcher, scope, siemConfig, row);\n if (requeue.requeued) {\n requeuedIds.push(summary._id);\n } else if (requeue.keptQuarantined) {\n // A quarantined row that cannot be re-derived stays where it is (#2959).\n utils.logger.warn('SIEM DLQ RETRY_ALL: a quarantined entry stays quarantined (#2959)', {\n scopeType: scope.scopeType, scopeId: scope.scopeId, entryId: summary._id, eventId: row.eventId, outcome: requeue.keptQuarantined,\n });\n }\n } catch (error) {\n // Per-entry isolation: one enqueue failure never aborts the sweep.\n utils.logger.warn('SIEM DLQ RETRY_ALL: failed to re-enqueue one entry (skipped)', {\n scopeType: scope.scopeType,\n scopeId: scope.scopeId,\n entryId: summary._id,\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n await deleteRequeuedRows(repo, executionContext, scope, requeuedIds, utils.logger);\n\n const retriedCount = requeuedIds.length;\n const skippedCount = total - retriedCount;\n // Matches the declared customResponseDto `{ retriedCount, skippedCount, message }`.\n return {\n retriedCount,\n skippedCount,\n message: `Re-queued ${retriedCount} of ${total} SIEM dead-letter ${total === 1 ? 'entry' : 'entries'} for this ${scope.scopeType}; skipped ${skippedCount}.`,\n };\n },\n },\n });\n };\n });\n}\n\n// ════════════════════════════════════════════════════════════════════\n// PURGE_ALL — irreversibly clear every entry in scope\n// ════════════════════════════════════════════════════════════════════\n\nexport function createSiemDlqPurgeAllFactories(): ResourceCustomServiceImplementationFactory[] {\n return SIEM_DLQ_VARIANTS.map(({ resourceType, scopeType }): ResourceCustomServiceImplementationFactory => {\n return (_resourcesRegistryService, container: Container) => {\n return createResourceCustomServiceImplementation({\n operationPath: {\n resourceIdentifier: resourceType,\n operationIdentifier: SiemDeliveryDlq_Operations.PURGE_ALL,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n },\n requestDtoSchema: SiemDeliveryDlq_PurgeAllRequestDto,\n // #2297: the delete is the whole operation and it goes through utils.serviceOptions. It is still a multi-row write\n // with no selection ceiling, so it stays best effort for THAT reason until such writes are bounded.\n hookTransactionPosture: ResourceCustomServiceImplementationHookTransactionPosture.RUNS_INSIDE_TRANSACTION,\n handlers: {\n replaceCoreOperations: async (_id, _input, executionContext, _operationPath, utils) => {\n const scope = resolveScope(scopeType, executionContext);\n if (!scope) {\n throw utils.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n customMessageReference: ErrorCustomMessageReference.VALIDATION,\n context: { message: `SIEM DLQ PURGE_ALL requires a ${scopeType}-scoped execution context.` },\n });\n }\n\n const repo = engineRepositoriesRegistry(utils).getRepositoryOrThrow(resourceType, executionContext);\n\n // Whole-scope clear. Unlike RETRY's cleanup this delete IS the operation,\n // so a failure propagates (the op did not succeed). Scope-FK filtered so a\n // purge can never cross tenants.\n const purgedIds = await repo.deleteMany(executionContext, scopeFilter(scope), utils.serviceOptions);\n const purgedCount = purgedIds.length;\n\n // Matches the declared customResponseDto `{ purgedCount, message }`.\n return {\n purgedCount,\n message: `Purged ${purgedCount} SIEM dead-letter ${purgedCount === 1 ? 'entry' : 'entries'} for this ${scope.scopeType}.`,\n };\n },\n },\n });\n };\n });\n}\n"]}
1	+ {"version":3,"file":"siem-delivery-dlq.custom-impl.backend.service.js","sourceRoot":"","sources":["../../../../../../src/security/authentications/services/custom-impls/siem-delivery-dlq.custom-impl.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,2BAA2B,EAC3B,SAAS,EACT,4BAA4B,EAC5B,0BAA0B,EAC1B,qCAAqC,EACrC,kCAAkC,EAClC,kCAAkC,EAClC,qBAAqB,EACrB,kCAAkC,GAInC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,yCAAyC,EACzC,yDAAyD,GAE1D,MAAM,4GAA4G,CAAC;AACpH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAIpF,OAAO,EACL,gCAAgC,GAEjC,MAAM,4FAA4F,CAAC;AAEpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,MAAM,8FAA8F,CAAC;AAS1I;;;;;;;;;;;GAWG;AACH,MAAM,iBAAiB,GAA8B;IACnD,EAAE,YAAY,EAAE,gBAAgB,CAAC,8BAA8B,EAAE,SAAS,EAAE,aAAa,CAAC,YAAY,EAAE;IACxG,EAAE,YAAY,EAAE,gBAAgB,CAAC,6BAA6B,EAAE,SAAS,EAAE,aAAa,CAAC,WAAW,EAAE;CAC9F,CAAC;AASX;;;;GAIG;AACH,SAAS,YAAY,CACnB,SAAwB,EACxB,gBAAmF;IAEnF,MAAM,OAAO,GAAG,SAAS,KAAK,aAAa,CAAC,YAAY;QACtD,CAAC,CAAC,gBAAgB,CAAC,cAAc;QACjC,CAAC,CAAC,gBAAgB,CAAC,aAAa,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,YAAY,GAAG,SAAS,KAAK,aAAa,CAAC,YAAY;QAC3D,CAAC,CAAC,kCAAkC,CAAC,gBAAgB,CAAC,aAAa,CAAC;QACpE,CAAC,CAAC,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AAC9C,CAAC;AAED,oFAAoF;AACpF,SAAS,WAAW,CAAC,KAA2B;IAC9C,OAAO,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;AACjD,CAAC;AAED,uFAAuF;AACvF,SAAS,OAAO,CAAC,SAAoB;IAInC,OAAO;QACL,gBAAgB,EAAE,SAAS,CAAC,GAAG,CAC7B,kBAAkB,CAAC,oCAAoC,CACxD;QACD,UAAU,EAAE,SAAS,CAAC,GAAG,CACvB,kBAAkB,CAAC,2BAA2B,CAC/C;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAwB;IAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAA6D,CAAC;IACnF,OAAO,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAC5B,UAA8C,EAC9C,KAA2B,EAC3B,UAAgC,EAChC,QAAoC;IAEpC,MAAM,UAAU,CAAC,0BAA0B,CAAC;QAC1C,QAAQ;QACR,6EAA6E;QAC7E,kFAAkF;QAClF,2EAA2E;QAC3E,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO;QACxD,UAAU;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAQD;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,UAA8C,EAC9C,KAA2B,EAC3B,UAAgC,EAChC,GAAwB;IAExB,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,CAAC,WAAW,EAAE,CAAC;QACrD,uHAAuH;QACvH,mBAAmB;QACnB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,8BAA8B,CAAC;YAC9D,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU;SACX,CAAC,CAAC;QACH,OAAO,OAAO,KAAK,gCAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IACpI,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1C,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,6EAA6E;AAC7E,SAAS,sBAAsB,CAAC,OAAyC;IACvE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,gCAAgC,CAAC,eAAe;YACnD,OAAO,iKAAiK,CAAC;QAC3K,KAAK,gCAAgC,CAAC,mBAAmB;YACvD,OAAO,2KAA2K,CAAC;QACrL,KAAK,gCAAgC,CAAC,kBAAkB;YACtD,OAAO,sKAAsK,CAAC;QAChL,KAAK,gCAAgC,CAAC,qBAAqB;YACzD,OAAO,sHAAsH,CAAC;QAChI,KAAK,gCAAgC,CAAC,QAAQ;YAC5C,OAAO,sEAAsE,CAAC;IAClF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAC/B,IAA+B,EAC/B,gBAAuC,EACvC,KAA2B,EAC3B,GAAa,EACb,MAAqB;IAErB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,mFAAmF,EAAE;YAC/F,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,GAAG;YACb,GAAG,2BAA2B,CAAC,KAAK,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,oEAAoE;AACpE,uEAAuE;AAEvE,MAAM,UAAU,iCAAiC;IAC/C,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,EAA8C,EAAE;QACvG,OAAO,CAAC,yBAAyB,EAAE,SAAoB,EAAE,EAAE;YACzD,OAAO,yCAAyC,CAAC;gBAC/C,aAAa,EAAE;oBACb,kBAAkB,EAAE,YAAY;oBAChC,mBAAmB,EAAE,0BAA0B,CAAC,YAAY;oBAC5D,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,kBAAkB,EAAE,IAAI;iBACzB;gBACD,gBAAgB,EAAE,qCAAqC;gBACvD,QAAQ,EAAE;oBACR,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE;wBACnF,0EAA0E;wBAC1E,mCAAmC;wBACnC,MAAM,EAAE,OAAO,EAAE,GAAG,KAA4B,CAAC;wBAEjD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;wBACxD,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;gCAC1E,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gCAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,oCAAoC,SAAS,4BAA4B,EAAE;6BAChG,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;wBAEpG,4EAA4E;wBAC5E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAsB,gBAAgB,EAAE;4BACjE,EAAE,EAAE,OAAO;4BACX,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;yBAC3B,CAAC,CAAC;wBACH,IAAI,CAAC,GAAG,EAAE,CAAC;4BACT,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,gBAAgB,EAAE;gCACzE,sBAAsB,EAAE,2BAA2B,CAAC,SAAS;gCAC7D,OAAO,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,OAAO,EAAE;6BACzE,CAAC,CAAC;wBACL,CAAC;wBACD,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,CAAC,SAAS,EAAE,CAAC;4BACnD,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAAE;gCACxE,sBAAsB,EAAE,2BAA2B,CAAC,QAAQ;gCAC5D,OAAO,EAAE;oCACP,OAAO,EAAE,0FAA0F;oCACnG,OAAO;oCACP,MAAM,EAAE,GAAG,CAAC,MAAM;iCACnB;6BACF,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;wBAC5D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,CAC5D,gBAAgB,EAChB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,OAAO,CACd,CAAC;wBACF,uEAAuE;wBACvE,4EAA4E;wBAC5E,gDAAgD;wBAChD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;4BAC1C,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAAE;gCACxE,sBAAsB,EAAE,2BAA2B,CAAC,QAAQ;gCAC5D,OAAO,EAAE;oCACP,OAAO,EAAE,yFAAyF;oCAClG,OAAO;iCACR;6BACF,CAAC,CAAC;wBACL,CAAC;wBAED,yEAAyE;wBACzE,2DAA2D;wBAC3D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;wBACrE,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;4BAC/D,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;gCAC1E,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gCAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,sDAAsD,EAAE,OAAO,EAAE;6BACtF,CAAC,CAAC;wBACL,CAAC;wBACD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;4BAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC;4BACrC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,sEAAsE,EAAE;gCACxF,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI;6BACjG,CAAC,CAAC;4BACH,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAAE;gCACxE,sBAAsB,EAAE,2BAA2B,CAAC,QAAQ;gCAC5D,OAAO,EAAE,EAAE,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;6BAC3E,CAAC,CAAC;wBACL,CAAC;wBACD,MAAM,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBAEjF,iEAAiE;wBACjE,OAAO,EAAE,OAAO,EAAE,wCAAwC,EAAE,OAAO,EAAE,CAAC;oBACxE,CAAC;iBACF;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,8EAA8E;AAC9E,uEAAuE;AAEvE,MAAM,UAAU,8BAA8B;IAC5C,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,EAA8C,EAAE;QACvG,OAAO,CAAC,yBAAyB,EAAE,SAAoB,EAAE,EAAE;YACzD,OAAO,yCAAyC,CAAC;gBAC/C,aAAa,EAAE;oBACb,kBAAkB,EAAE,YAAY;oBAChC,mBAAmB,EAAE,0BAA0B,CAAC,SAAS;oBACzD,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,kBAAkB,EAAE,IAAI;iBACzB;gBACD,gBAAgB,EAAE,kCAAkC;gBACpD;;;;mBAIG;gBACH,sBAAsB,EAAE,yDAAyD,CAAC,yBAAyB;gBAC3G,QAAQ,EAAE;oBACR,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE;wBACpF,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;wBACxD,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;gCAC1E,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gCAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,iCAAiC,SAAS,4BAA4B,EAAE;6BAC7F,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;wBAEpG,6EAA6E;wBAC7E,iFAAiF;wBACjF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAsB,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;wBACxF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;wBAC1B,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;4BAChB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;wBAC9G,CAAC;wBAED,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;wBAC5D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,CAC5D,gBAAgB,EAChB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,OAAO,CACd,CAAC;wBACF,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;4BAC1C,sEAAsE;4BACtE,8CAA8C;4BAC9C,OAAO;gCACL,YAAY,EAAE,CAAC;gCACf,YAAY,EAAE,KAAK;gCACnB,OAAO,EAAE,sFAAsF;6BAChG,CAAC;wBACJ,CAAC;wBAED,0GAA0G;wBAC1G,2CAA2C;wBAC3C,MAAM,WAAW,GAAa,EAAE,CAAC;wBACjC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;4BAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,SAAS;gCAAE,SAAS;4BAEjE,0EAA0E;4BAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAsB,gBAAgB,EAAE;gCACjE,EAAE,EAAE,OAAO,CAAC,GAAG;gCACf,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;6BAC3B,CAAC,CAAC;4BACH,IAAI,CAAC,GAAG;gCAAE,SAAS,CAAC,4BAA4B;4BAEhD,IAAI,CAAC;gCACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;gCACrE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oCACrB,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gCAChC,CAAC;qCAAM,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;oCACnC,yEAAyE;oCACzE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,EAAE;wCACrF,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe;qCACjI,CAAC,CAAC;gCACL,CAAC;4BACH,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,mEAAmE;gCACnE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;oCAChF,SAAS,EAAE,KAAK,CAAC,SAAS;oCAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;oCACtB,OAAO,EAAE,OAAO,CAAC,GAAG;oCACpB,GAAG,2BAA2B,CAAC,KAAK,CAAC;iCACtC,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;wBAED,MAAM,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBAEnF,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC;wBACxC,MAAM,YAAY,GAAG,KAAK,GAAG,YAAY,CAAC;wBAC1C,oFAAoF;wBACpF,OAAO;4BACL,YAAY;4BACZ,YAAY;4BACZ,OAAO,EAAE,aAAa,YAAY,OAAO,KAAK,qBAAqB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,aAAa,KAAK,CAAC,SAAS,aAAa,YAAY,GAAG;yBAC7J,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,sDAAsD;AACtD,uEAAuE;AAEvE,MAAM,UAAU,8BAA8B;IAC5C,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,EAA8C,EAAE;QACvG,OAAO,CAAC,yBAAyB,EAAE,SAAoB,EAAE,EAAE;YACzD,OAAO,yCAAyC,CAAC;gBAC/C,aAAa,EAAE;oBACb,kBAAkB,EAAE,YAAY;oBAChC,mBAAmB,EAAE,0BAA0B,CAAC,SAAS;oBACzD,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,kBAAkB,EAAE,IAAI;iBACzB;gBACD,gBAAgB,EAAE,kCAAkC;gBACpD,gHAAgH;gBAChH,oHAAoH;gBACpH,kHAAkH;gBAClH,2GAA2G;gBAC3G,8DAA8D;gBAC9D,sBAAsB,EAAE,yDAAyD,CAAC,uBAAuB;gBACzG,QAAQ,EAAE;oBACR,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE;wBACpF,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;wBACxD,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,MAAM,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;gCAC1E,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gCAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,iCAAiC,SAAS,4BAA4B,EAAE;6BAC7F,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;wBAEpG,0EAA0E;wBAC1E,2EAA2E;wBAC3E,iCAAiC;wBACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;wBACpG,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC;wBAErC,qEAAqE;wBACrE,OAAO;4BACL,WAAW;4BACX,OAAO,EAAE,UAAU,WAAW,qBAAqB,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,aAAa,KAAK,CAAC,SAAS,GAAG;yBAC1H,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/*\n SIEM Delivery DLQ — RETRY_SINGLE / RETRY_ALL / PURGE_ALL custom implementations.\n \n Makes the operator drain/clear surfaces on the SIEM delivery dead-letter queue\n * real (both polymorphic variants: ORGANIZATION_SIEM_DELIVERY_DLQ +\n * APPLICATION_SIEM_DELIVERY_DLQ). They are declared on\n * `siem-delivery-dlq.shared.resources-config.schemas.ts`; this file authors the\n * REPLACE_CORE_OPERATIONS handlers that back them.\n \n ── Why \"retry\" means RE-ENQUEUE, not \"reset a status\" ────────────────────────\n * The M2M webhook delivery-log sibling\n * (`m2m-webhook-delivery-log.custom-impl.backend.service.ts`) resets the SAME row\n * its worker drains (`resetForRetry`: CAS a FAILED row back to PENDING) because the\n * M2M worker owns that row's status machine. The SIEM delivery worker\n * (`SIEMWebhookDeliveryBackendService.processDelivery`) does NOT: SIEM delivery is\n * enqueue-per-event via the `siem.webhook-delivery` custom batch, the worker holds\n * no back-reference to any DLQ row, and there is NO SIEM DLQ retry-sweep batch. So\n * \"retry\" here = rebuild the delivery job from the DLQ row's STORED envelope and\n * re-enqueue it onto the SIEM delivery queue (through the single job-contract seam\n * {@link AuditEventDispatcherBackendService.enqueueSiemWebhookDelivery}).\n \n ── Delete-on-requeue ─────────────────────────────────────────────────────────\n * After a successful re-enqueue the DLQ row is DELETED, not flipped to a status.\n * Because the worker has no back-ref and no sweep exists, a status transition would\n * leave the row stuck forever; and a re-delivery that fails is re-captured by\n * `_enqueueToDLQ` as a BRAND-NEW row. So the honest model is: a DLQ row represents a\n * delivery that is CURRENTLY dead-lettered — the moment we put it back in flight it\n * leaves the queue. Enqueue is the load-bearing step (its failure fails the op and\n * leaves the row intact for another attempt); the delete is best-effort cleanup (a\n * delete failure only leaves a stale, purgeable row — never an un-retried event).\n \n ── A QUARANTINED row is never re-sent from its stored envelope (#2959) ─────────\n * A row whose job failed its integrity check (`SiemDeliveryDlqStatus.QUARANTINED`) was written from a payload nobody\n * vouched for: anyone able to write to the queue can plant one, in any tenant's queue, with any envelope. Re-enqueueing\n * it would sign it afresh and deliver a forged security event to that tenant's real SIEM. So both RETRY verbs hand a\n * quarantined row to {@link AuditEventDispatcherBackendService.redeliverQuarantinedDeadLetter}, which re-derives the event\n * from the application's own audit store by `eventId` and delivers it only to an organization that store records the\n * event as routed to. When it cannot (no such event, not routed here, filtered out, application scope), the row stays\n * quarantined: RETRY_SINGLE answers 409 naming why, RETRY_ALL counts it as skipped, and both log it.\n \n ── PURGE_ALL clears the WHOLE scope ──────────────────────────────────────────\n * PURGE_ALL drops every row in the caller's scope (not only EXHAUSTED). The op name,\n * empty request DTO (no age/status narrowing), and CRITICAL risk tier all say\n * \"clear the queue\"; and unlike M2M there is no in-flight row to protect (SIEM DLQ\n * rows are inert — no worker owns them, no sweep touches them), so every status is\n * equally safe to remove. A partial purge that left PENDING_RETRY rows would leave\n * rows nothing will ever retry — a worse trap.\n \n ── Tenant safety ─────────────────────────────────────────────────────────────\n * Every read/list/delete is narrowed to the operation's scope FK\n * (organizationId / applicationId) belt-and-braces on top of the execution context's\n * own scope enforcement — an `entryId` from another tenant reads as not-found and a\n * purge/retry can never cross a scope boundary.\n /\n\nimport {\n AuthScopeType,\n CoreResourceType,\n ErrorCustomMessageReference,\n ErrorType,\n ResourceOperationVariantType,\n SiemDeliveryDlq_Operations,\n SiemDeliveryDlq_RetrySingleRequestDto,\n SiemDeliveryDlq_RetryAllRequestDto,\n SiemDeliveryDlq_PurgeAllRequestDto,\n SiemDeliveryDlqStatus,\n coreResourceShared_FieldIdentifier,\n type SecurityAuditEventEnvelope,\n type SiemDeliveryDlqBase,\n type SiemExportConfigBase,\n} from '@wildo-ai/saas-models';\nimport type { Container } from 'inversify';\nimport {\n createResourceCustomServiceImplementation,\n ResourceCustomServiceImplementationHookTransactionPosture,\n type ResourceCustomServiceImplementationFactory,\n} from '~wildo-backend-lib/base-classes/services/services/resource-operation-custom-implementation.factory.backend';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { BackendResourceRepository } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { AuthOrganizationConfigurationService } from '~wildo-backend-lib/security/authentications/services/admin-config/auth-organization-configuration.service';\nimport {\n SiemQuarantinedDeadLetterOutcome,\n type AuditEventDispatcherBackendService,\n} from '~wildo-backend-lib/compliance/audit-trails/services/audit-event-dispatcher.backend.service';\nimport type { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { engineRepositoriesRegistry } from '~wildo-backend-lib/base-classes/services/services/engine-repositories-registry.backend.utils';\n\n// ── SIEM delivery DLQ polymorphic variants (resource type ↔ scope) ────────────\n\ninterface SiemDlqVariant {\n resourceType: CoreResourceType;\n scopeType: AuthScopeType;\n}\n\n/\n One factory per polymorphic variant. The resource type selects the collection;\n * the scope type drives config loading, the scope-FK filter, and the re-enqueued\n * job's scope so it can never drift from the row it targets.\n \n Both variants are wired identically, but the APPLICATION one is RESERVED / DORMANT\n * in practice: an `APPLICATION_SIEM_DELIVERY_DLQ` row can only exist if an app-scoped\n * delivery failed, and no producer emits app-scoped deliveries today (the sole SIEM\n * producer is org-scoped). So the APP RETRY/PURGE paths never have rows to act on —\n * they are the retry half of reserved plumbing. See `AuditEventDispatcherBackendService.\n * dispatchToOrganizationAuditSinks` for the rationale + how an app producer would attach.\n /\nconst SIEM_DLQ_VARIANTS: readonly SiemDlqVariant[] = [\n { resourceType: CoreResourceType.ORGANIZATION_SIEM_DELIVERY_DLQ, scopeType: AuthScopeType.ORGANIZATION },\n { resourceType: CoreResourceType.APPLICATION_SIEM_DELIVERY_DLQ, scopeType: AuthScopeType.APPLICATION },\n] as const;\n\n/* The operation's resolved scope: its type, id, and the row's scope-FK column name. /\ninterface ResolvedSiemDlqScope {\n scopeType: AuthScopeType;\n scopeId: string;\n scopeFkField: string;\n}\n\n/\n Resolve the operation's scope from the (admin) execution context. Returns `null`\n * when the context carries no scope id — a routing/authorization invariant violation\n * for these org/app-scoped operations, which the caller surfaces as a VALIDATION error.\n /\nfunction resolveScope(\n scopeType: AuthScopeType,\n executionContext: { organizationId?: string \| null; applicationId?: string \| null },\n): ResolvedSiemDlqScope \| null {\n const scopeId = scopeType === AuthScopeType.ORGANIZATION\n ? executionContext.organizationId\n : executionContext.applicationId;\n if (!scopeId) return null;\n const scopeFkField = scopeType === AuthScopeType.ORGANIZATION\n ? coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATIONS]\n : coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION];\n return { scopeType, scopeId, scopeFkField };\n}\n\n/* The scope-FK filter fragment narrowing every read/list/delete to this tenant. /\nfunction scopeFilter(scope: ResolvedSiemDlqScope): Record<string, string> {\n return { [scope.scopeFkField]: scope.scopeId };\n}\n\n/* Resolve the two domain collaborators the drain paths need from the DI container. /\nfunction getDeps(container: Container): {\n orgConfigService: AuthOrganizationConfigurationService;\n dispatcher: AuditEventDispatcherBackendService;\n} {\n return {\n orgConfigService: container.get<AuthOrganizationConfigurationService>(\n SAAS_SERVICE_TYPES.AuthOrganizationConfigurationService,\n ),\n dispatcher: container.get<AuditEventDispatcherBackendService>(\n SAAS_SERVICE_TYPES.AuditEventDispatcherService,\n ),\n };\n}\n\n/\n The DLQ row stores the delivery envelope in `eventPayload` (`z.unknown()` in the\n * schema). Return it typed when present and object-shaped, else `null` (a corrupt /\n * missing payload has nothing to re-deliver).\n /\nfunction extractEnvelope(row: SiemDeliveryDlqBase): SecurityAuditEventEnvelope \| null {\n const envelope = row.eventPayload as SecurityAuditEventEnvelope \| undefined \| null;\n return envelope && typeof envelope === 'object' ? envelope : null;\n}\n\n/\n Re-enqueue one stored envelope onto the SIEM delivery queue for this scope,\n * through the dispatcher's single job-contract seam (payload shape + delivery MAC +\n * batch ref). May throw on enqueue failure — callers decide isolation.\n /\nasync function enqueueEnvelope(\n dispatcher: AuditEventDispatcherBackendService,\n scope: ResolvedSiemDlqScope,\n siemConfig: SiemExportConfigBase,\n envelope: SecurityAuditEventEnvelope,\n): Promise<void> {\n await dispatcher.enqueueSiemWebhookDelivery({\n envelope,\n // The payload's `organizationId` is a routing/label field; the authoritative\n // delivery scope is `scopeType`/`scopeId`. Prefer the envelope's own org (for the\n // APP variant that is the app's owning org), falling back to the scope id.\n organizationId: envelope.organizationId ?? scope.scopeId,\n siemConfig,\n scopeType: scope.scopeType,\n scopeId: scope.scopeId,\n });\n}\n\n/* What {@link requeueRow} did: `keptQuarantined` is set exactly when a quarantined row stayed (#2959). /\ninterface SiemDlqRequeueResult {\n requeued: boolean;\n keptQuarantined?: SiemQuarantinedDeadLetterOutcome;\n}\n\n/\n Put one dead-lettered row back in flight, by the only path its status allows: a QUARANTINED row is re-derived from the\n * audit store (#2959) and every other row re-sends its stored envelope. `requeued: false` carries the quarantine outcome\n * that kept the row, or none when a row that is not quarantined has no stored envelope. May throw on enqueue failure.\n /\nasync function requeueRow(\n dispatcher: AuditEventDispatcherBackendService,\n scope: ResolvedSiemDlqScope,\n siemConfig: SiemExportConfigBase,\n row: SiemDeliveryDlqBase,\n): Promise<SiemDlqRequeueResult> {\n if (row.status === SiemDeliveryDlqStatus.QUARANTINED) {\n // The stored envelope is never read here: `eventId` is the row's own column, and only what the audit store holds under\n // it is delivered.\n const outcome = await dispatcher.redeliverQuarantinedDeadLetter({\n eventId: row.eventId,\n scopeType: scope.scopeType,\n scopeId: scope.scopeId,\n siemConfig,\n });\n return outcome === SiemQuarantinedDeadLetterOutcome.REQUEUED ? { requeued: true } : { requeued: false, keptQuarantined: outcome };\n }\n const envelope = extractEnvelope(row);\n if (!envelope) return { requeued: false };\n await enqueueEnvelope(dispatcher, scope, siemConfig, envelope);\n return { requeued: true };\n}\n\n/* The operator-facing sentence for a quarantined row that stays (#2959). /\nfunction describeKeptQuarantine(outcome: SiemQuarantinedDeadLetterOutcome): string {\n switch (outcome) {\n case SiemQuarantinedDeadLetterOutcome.NO_AUDIT_RECORD:\n return 'This SIEM DLQ entry failed its integrity check and the audit log holds no event under its id, so there is no genuine event to re-deliver; it stays quarantined.';\n case SiemQuarantinedDeadLetterOutcome.NOT_ROUTED_TO_SCOPE:\n return 'This SIEM DLQ entry failed its integrity check and the audit log does not record its event as routed to this scope, so it is not re-delivered here; it stays quarantined.';\n case SiemQuarantinedDeadLetterOutcome.EXCLUDED_BY_FILTER:\n return 'This SIEM DLQ entry failed its integrity check, and the SIEM export filter for this scope excludes the event the audit log holds under its id; it stays quarantined.';\n case SiemQuarantinedDeadLetterOutcome.SCOPE_HAS_NO_PRODUCER:\n return 'This SIEM DLQ entry failed its integrity check, and no event can be re-derived for this scope; it stays quarantined.';\n case SiemQuarantinedDeadLetterOutcome.REQUEUED:\n return 'This SIEM DLQ entry was re-derived from the audit log and re-queued.';\n }\n}\n\n/\n Delete-on-requeue cleanup: remove the rows we just re-enqueued. NON-FATAL — the\n * re-enqueue already happened, so a delete failure leaves a stale (operator-purgeable)\n * row rather than un-retrying a delivered-again event. Scope-FK filtered belt-and-braces.\n /\nasync function deleteRequeuedRows(\n repo: BackendResourceRepository,\n executionContext: ExecutionContext<any>,\n scope: ResolvedSiemDlqScope,\n ids: string[],\n logger: LoggerService,\n): Promise<void> {\n if (ids.length === 0) return;\n try {\n await repo.deleteMany(executionContext, { _id: { $in: ids }, ...scopeFilter(scope) });\n } catch (error) {\n logger.warn('SIEM DLQ delete-on-requeue failed (non-fatal) — entries re-queued but not removed', {\n scopeType: scope.scopeType,\n scopeId: scope.scopeId,\n entryIds: ids,\n ...projectCaughtErrorLogFields(error),\n });\n }\n}\n\n// ════════════════════════════════════════════════════════════════════\n// RETRY_SINGLE — re-enqueue one dead-lettered entry, then delete it\n// ════════════════════════════════════════════════════════════════════\n\nexport function createSiemDlqRetrySingleFactories(): ResourceCustomServiceImplementationFactory[] {\n return SIEM_DLQ_VARIANTS.map(({ resourceType, scopeType }): ResourceCustomServiceImplementationFactory => {\n return (_resourcesRegistryService, container: Container) => {\n return createResourceCustomServiceImplementation({\n operationPath: {\n resourceIdentifier: resourceType,\n operationIdentifier: SiemDeliveryDlq_Operations.RETRY_SINGLE,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n },\n requestDtoSchema: SiemDeliveryDlq_RetrySingleRequestDto,\n handlers: {\n replaceCoreOperations: async (_id, input, executionContext, _operationPath, utils) => {\n // The entry is addressed by the request DTO's `entryId` (not the URL id),\n // mirroring the M2M RETRY sibling.\n const { entryId } = input as { entryId: string };\n\n const scope = resolveScope(scopeType, executionContext);\n if (!scope) {\n throw utils.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n customMessageReference: ErrorCustomMessageReference.VALIDATION,\n context: { message: `SIEM DLQ RETRY_SINGLE requires a ${scopeType}-scoped execution context.` },\n });\n }\n\n const repo = engineRepositoriesRegistry(utils).getRepositoryOrThrow(resourceType, executionContext);\n\n // Scoped read (id AND scope FK): a cross-tenant entryId reads as not-found.\n const row = await repo.read<SiemDeliveryDlqBase>(executionContext, {\n id: entryId,\n filter: scopeFilter(scope),\n });\n if (!row) {\n throw utils.errorBuilder.buildError(ErrorType.NOT_FOUND, executionContext, {\n customMessageReference: ErrorCustomMessageReference.NOT_FOUND,\n context: { message: 'SIEM DLQ entry not found in this scope.', entryId },\n });\n }\n if (row.status === SiemDeliveryDlqStatus.DELIVERED) {\n throw utils.errorBuilder.buildError(ErrorType.CONFLICT, executionContext, {\n customMessageReference: ErrorCustomMessageReference.CONFLICT,\n context: {\n message: 'This SIEM DLQ entry was already delivered on a later attempt; there is nothing to retry.',\n entryId,\n status: row.status,\n },\n });\n }\n\n const { orgConfigService, dispatcher } = getDeps(container);\n const siemConfig = await orgConfigService.loadSiemExportConfig(\n executionContext,\n scope.scopeType,\n scope.scopeId,\n );\n // `loadSiemExportConfig` lazily materialises a DISABLED default (empty\n // webhookUrl) for a never-configured scope, so guard on a real destination:\n // without a URL there is nowhere to re-deliver.\n if (!siemConfig \|\| !siemConfig.webhookUrl) {\n throw utils.errorBuilder.buildError(ErrorType.CONFLICT, executionContext, {\n customMessageReference: ErrorCustomMessageReference.CONFLICT,\n context: {\n message: 'SIEM export has no webhook URL configured for this scope; configure it before retrying.',\n entryId,\n },\n });\n }\n\n // Enqueue FIRST — a failure here throws (op fails, row left intact for a\n // later attempt). Only on success do we delete-on-requeue.\n const requeue = await requeueRow(dispatcher, scope, siemConfig, row);\n if (!requeue.requeued && requeue.keptQuarantined === undefined) {\n throw utils.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n customMessageReference: ErrorCustomMessageReference.VALIDATION,\n context: { message: 'SIEM DLQ entry has no stored envelope to re-deliver.', entryId },\n });\n }\n if (!requeue.requeued && requeue.keptQuarantined !== undefined) {\n const kept = requeue.keptQuarantined;\n utils.logger.warn('SIEM DLQ RETRY_SINGLE: a quarantined entry stays quarantined (#2959)', {\n scopeType: scope.scopeType, scopeId: scope.scopeId, entryId, eventId: row.eventId, outcome: kept,\n });\n throw utils.errorBuilder.buildError(ErrorType.CONFLICT, executionContext, {\n customMessageReference: ErrorCustomMessageReference.CONFLICT,\n context: { message: describeKeptQuarantine(kept), entryId, outcome: kept },\n });\n }\n await deleteRequeuedRows(repo, executionContext, scope, [entryId], utils.logger);\n\n // Matches the declared customResponseDto `{ message, entryId }`.\n return { message: 'SIEM DLQ entry re-queued for delivery.', entryId };\n },\n },\n });\n };\n });\n}\n\n// ════════════════════════════════════════════════════════════════════\n// RETRY_ALL — re-enqueue every non-delivered entry in scope, then delete them\n// ════════════════════════════════════════════════════════════════════\n\nexport function createSiemDlqRetryAllFactories(): ResourceCustomServiceImplementationFactory[] {\n return SIEM_DLQ_VARIANTS.map(({ resourceType, scopeType }): ResourceCustomServiceImplementationFactory => {\n return (_resourcesRegistryService, container: Container) => {\n return createResourceCustomServiceImplementation({\n operationPath: {\n resourceIdentifier: resourceType,\n operationIdentifier: SiemDeliveryDlq_Operations.RETRY_ALL,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n },\n requestDtoSchema: SiemDeliveryDlq_RetryAllRequestDto,\n /\n * #2297: stays outside a transaction. Each entry is re-published to the delivery queue, and which rows are then\n * deleted depends on which publishes went through: a rolled-back or retried attempt would publish every envelope\n * again and keep the rows. (It is a multi-row write as well, so it would stay best effort for that reason too.)\n */\n hookTransactionPosture: ResourceCustomServiceImplementationHookTransactionPosture.STAYS_OUTSIDE_TRANSACTION,\n handlers: {\n replaceCoreOperations: async (_id, _input, executionContext, _operationPath, utils) => {\n const scope = resolveScope(scopeType, executionContext);\n if (!scope) {\n throw utils.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n customMessageReference: ErrorCustomMessageReference.VALIDATION,\n context: { message: `SIEM DLQ RETRY_ALL requires a ${scopeType}-scoped execution context.` },\n });\n }\n\n const repo = engineRepositoriesRegistry(utils).getRepositoryOrThrow(resourceType, executionContext);\n\n // Enumerate the scope's rows. LIST projects to summary fields (_id, status),\n // which is all we need to pick candidates; the full envelope is re-read per row.\n const rows = await repo.list<SiemDeliveryDlqBase>(executionContext, scopeFilter(scope));\n const total = rows.length;\n if (total === 0) {\n return { retriedCount: 0, skippedCount: 0, message: 'The SIEM dead-letter queue is empty for this scope.' };\n }\n\n const { orgConfigService, dispatcher } = getDeps(container);\n const siemConfig = await orgConfigService.loadSiemExportConfig(\n executionContext,\n scope.scopeType,\n scope.scopeId,\n );\n if (!siemConfig \|\| !siemConfig.webhookUrl) {\n // No destination → nothing can be re-queued. Report as a bulk summary\n // (not an error): the whole queue is skipped.\n return {\n retriedCount: 0,\n skippedCount: total,\n message: 'SIEM export has no webhook URL configured for this scope; no entries were re-queued.',\n };\n }\n\n // PENDING_RETRY + EXHAUSTED re-send their stored envelope; QUARANTINED is re-derived from the audit store\n // (#2959); DELIVERED has nothing to retry.\n const requeuedIds: string[] = [];\n for (const summary of rows) {\n if (summary.status === SiemDeliveryDlqStatus.DELIVERED) continue;\n\n // Summary lacks eventPayload — read the full row for its stored envelope.\n const row = await repo.read<SiemDeliveryDlqBase>(executionContext, {\n id: summary._id,\n filter: scopeFilter(scope),\n });\n if (!row) continue; // vanished mid-sweep → skip\n\n try {\n const requeue = await requeueRow(dispatcher, scope, siemConfig, row);\n if (requeue.requeued) {\n requeuedIds.push(summary._id);\n } else if (requeue.keptQuarantined) {\n // A quarantined row that cannot be re-derived stays where it is (#2959).\n utils.logger.warn('SIEM DLQ RETRY_ALL: a quarantined entry stays quarantined (#2959)', {\n scopeType: scope.scopeType, scopeId: scope.scopeId, entryId: summary._id, eventId: row.eventId, outcome: requeue.keptQuarantined,\n });\n }\n } catch (error) {\n // Per-entry isolation: one enqueue failure never aborts the sweep.\n utils.logger.warn('SIEM DLQ RETRY_ALL: failed to re-enqueue one entry (skipped)', {\n scopeType: scope.scopeType,\n scopeId: scope.scopeId,\n entryId: summary._id,\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n await deleteRequeuedRows(repo, executionContext, scope, requeuedIds, utils.logger);\n\n const retriedCount = requeuedIds.length;\n const skippedCount = total - retriedCount;\n // Matches the declared customResponseDto `{ retriedCount, skippedCount, message }`.\n return {\n retriedCount,\n skippedCount,\n message: `Re-queued ${retriedCount} of ${total} SIEM dead-letter ${total === 1 ? 'entry' : 'entries'} for this ${scope.scopeType}; skipped ${skippedCount}.`,\n };\n },\n },\n });\n };\n });\n}\n\n// ════════════════════════════════════════════════════════════════════\n// PURGE_ALL — irreversibly clear every entry in scope\n// ════════════════════════════════════════════════════════════════════\n\nexport function createSiemDlqPurgeAllFactories(): ResourceCustomServiceImplementationFactory[] {\n return SIEM_DLQ_VARIANTS.map(({ resourceType, scopeType }): ResourceCustomServiceImplementationFactory => {\n return (_resourcesRegistryService, container: Container) => {\n return createResourceCustomServiceImplementation({\n operationPath: {\n resourceIdentifier: resourceType,\n operationIdentifier: SiemDeliveryDlq_Operations.PURGE_ALL,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n },\n requestDtoSchema: SiemDeliveryDlq_PurgeAllRequestDto,\n // #2297: the delete is the whole operation and it goes through utils.serviceOptions. It stays best effort as an\n // unbounded multi-row write: the HOOK selects the whole scope, so the framework's per-transaction chunking (wave 4,\n // `MULTI_ROW_WRITE_ROWS_PER_TRANSACTION`) cannot reach it, and a `maximumRowsWrittenPerAttempt` would make \"purge\n // all\" purge a page. Bounding it means changing what the operation answers (a partial purge reporting what\n // remains, or a background job), not declaring a number here.\n hookTransactionPosture: ResourceCustomServiceImplementationHookTransactionPosture.RUNS_INSIDE_TRANSACTION,\n handlers: {\n replaceCoreOperations: async (_id, _input, executionContext, _operationPath, utils) => {\n const scope = resolveScope(scopeType, executionContext);\n if (!scope) {\n throw utils.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n customMessageReference: ErrorCustomMessageReference.VALIDATION,\n context: { message: `SIEM DLQ PURGE_ALL requires a ${scopeType}-scoped execution context.` },\n });\n }\n\n const repo = engineRepositoriesRegistry(utils).getRepositoryOrThrow(resourceType, executionContext);\n\n // Whole-scope clear. Unlike RETRY's cleanup this delete IS the operation,\n // so a failure propagates (the op did not succeed). Scope-FK filtered so a\n // purge can never cross tenants.\n const purgedIds = await repo.deleteMany(executionContext, scopeFilter(scope), utils.serviceOptions);\n const purgedCount = purgedIds.length;\n\n // Matches the declared customResponseDto `{ purgedCount, message }`.\n return {\n purgedCount,\n message: `Purged ${purgedCount} SIEM dead-letter ${purgedCount === 1 ? 'entry' : 'entries'} for this ${scope.scopeType}.`,\n };\n },\n },\n });\n };\n });\n}\n"]}

package/dist/esm/security/authentications/services/custom-impls/sso-config-domain-verification.custom-impl.backend.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sso-config-domain-verification.custom-impl.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/security/authentications/services/custom-impls/sso-config-domain-verification.custom-impl.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAmBH,OAAO,EAGL,KAAK,0CAA0C,EAChD,MAAM,4GAA4G,CAAC;~~AA4uBpH~~,wBAAgB,0CAA0C,IAAI,0CAA0C,EAAE,CASzG;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,IAAI,0CAA0C,EAAE,CAEvG"}
1	+ {"version":3,"file":"sso-config-domain-verification.custom-impl.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/security/authentications/services/custom-impls/sso-config-domain-verification.custom-impl.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAmBH,OAAO,EAGL,KAAK,0CAA0C,EAChD,MAAM,4GAA4G,CAAC;AAsyBpH,wBAAgB,0CAA0C,IAAI,0CAA0C,EAAE,CASzG;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,IAAI,0CAA0C,EAAE,CAEvG"}

package/dist/esm/security/authentications/services/custom-impls/sso-config-domain-verification.custom-impl.backend.service.js CHANGED Viewed

@@ -33,6 +33,7 @@
 import { AuthScopeType, CoreResourceType, DomainVerificationStatus, ErrorCustomMessageReference, ErrorType, ResourceOperationVariantType, SsoConfig_Operations, SsoConfig_RepairUnreadableConfigurationRequestDto, SsoConfigRepairRefusal, SSO_CONFIG_BLOCKS, SsoConfigBlock, ssoConfigBlockFaults, } from '@wildo-ai/saas-models';
 import { SAAS_SERVICE_TYPES } from '../../../../inject/models/service-types.js';
 import { createResourceCustomServiceImplementation, ResourceCustomServiceImplementationHookTransactionPosture, } from '../../../../base-classes/services/services/resource-operation-custom-implementation.factory.backend.js';
+import { ResourceOperationBeforeTransactionalCoreDisposition, } from '../../../../base-classes/services/services/resource-operation-custom-implementation-base.backend.service.js';
 import { registerTransactionPostCommitEffect } from '../../../../databases/models/transaction.shared.schemas.js';
 import { DnsLookupUnavailableError } from '../../../../security/dns/dns-txt-lookup.backend.service.js';
 import { emitAuthorityChangeAuditWhenDurable } from '../../../../organizations/services/authority-change-audit.backend.utils.js';
@@ -215,13 +216,21 @@ function createVerifyDomainFactory(variant) {
         },
         debugLabel: `${variant.resourceType}.verifyDomain`,
         /*
-         * #2297: stays outside a transaction. The prefix asks DNS (up to ~10 s, which would hold the row lock, and a retried
-         * attempt would ask again and could read another answer), and the domain reservation it takes must AUTOCOMMIT (a
-         * unique violation aborts a PostgreSQL transaction, so the loser could not answer its refusal from inside one;
-         * `DomainVerificationBackendService.reserveDomain`). Both feed the write. Moving them into a `beforeTransactionalCore`
-         * phase is the split that would let this write keep its audit row.
+         * #2297: split so the write keeps its audit row through a crash. Two effects feed the write and must stay OUTSIDE the
+         * transaction: the DNS lookup (up to ~10 s, which would hold the row lock, and a retried attempt would ask again and
+         * could read another answer) and the domain reservation, which must AUTOCOMMIT (a unique violation aborts a PostgreSQL
+         * transaction, so the loser could not answer its refusal from inside one; `DomainVerificationBackendService.reserveDomain`).
+         * - `beforeTransactionalCore` (outside, once, before the transaction): the challenge check, the exclusivity read, the
+         *   DNS lookup and the reservation, in that order, exactly as the prefix used to run them. Its answer (the challenge
+         *   it checked and what DNS said) rides to the core as the phase's frozen continuation.
+         * - PREFIX (inside, retried with the attempt): re-reads the row the attempt holds and applies that answer, but only
+         *   while the row still holds the SAME challenge: a re-claim committed in between replaced the nonce, and an answer
+         *   about the old one says nothing about the new one, so the attempt refuses rather than verify against it.
+         * Nothing else leaves the database, so the transaction is the framework's and the row is kept with its commit.
          */
-        hookTransactionPosture: ResourceCustomServiceImplementationHookTransactionPosture.STAYS_OUTSIDE_TRANSACTION,
+        transactionalCore: true,
+        transactionParticipants: {},
+        hookTransactionPosture: ResourceCustomServiceImplementationHookTransactionPosture.RUNS_INSIDE_TRANSACTION,
         /**
          * The prefix WRITES `domains`, and nothing else can.
          *
@@ -236,23 +245,10 @@ function createVerifyDomainFactory(variant) {
         authoritativeFields: ['domains'],
         coreWritePinsRowVersion: true,
         handlers: {
-            prefixCoreOperations: async (_id, input, executionContext, _operationPath, utils) => {
+            beforeTransactionalCore: async (_id, input, executionContext, _operationPath, utils) => {
                 const { domain, scopeId, domains } = resolveDomainRequest(variant, input, executionContext, utils);
                 const service = getDomainVerificationService(container);
-                const expectedToken = service.getVerificationToken(domains, domain);
-                if (!expectedToken) {
-                    // A claim mints the nonce, so verifying without one is not a failed check — it is a
-                    // request for a challenge that was never raised. Saying so is what stops an operator
-                    // publishing a record and waiting for a verification that can never pass.
-                    throw utils.errorBuilder.buildError(ErrorType.CONFLICT, executionContext, {
-                        context: {
-                            code: 'SSO_DOMAIN_NOT_CLAIMED',
-                            reason: 'sso_domain_not_claimed',
-                            message: 'No verification challenge exists for this domain in this scope. Claim it first.',
-                            domain,
-                        },
-                    });
-                }
+                const expectedToken = requireVerificationChallenge(service, domains, domain, executionContext, utils);
                 // Re-checked HERE, not only at claim: a claim takes no lock, so another scope may have
                 // completed its own verification since. This is the write that confers routing authority
                 // and therefore the one that must be exclusive.
@@ -283,19 +279,64 @@ function createVerifyDomainFactory(variant) {
                 if (verified && await service.reserveDomain(variant.scopeType, scopeId, domain)) {
                     throw domainHeldElsewhere(domain, executionContext, utils);
                 }
+                return {
+                    disposition: ResourceOperationBeforeTransactionalCoreDisposition.CONTINUE,
+                    coreInputPatch: {},
+                    continuation: { domain, checkedToken: expectedToken, verified, recordsFound },
+                };
+            },
+            prefixCoreOperations: async (_id, input, executionContext, _operationPath, utils) => {
+                const { domain, domains } = resolveDomainRequest(variant, input, executionContext, utils);
+                const service = getDomainVerificationService(container);
+                const checked = utils.beforeTransactionalCore?.continuation;
+                if (!checked || checked.domain !== domain) {
+                    throw utils.errorBuilder.buildError(ErrorType.INTERNAL, executionContext, {
+                        context: { reason: 'sso_domain_verification_unchecked', message: 'The domain challenge was not checked before the write.', domain },
+                    });
+                }
+                // The challenge the DNS answer is about must still be the row's: a claim committed since the check replaced it.
+                if (requireVerificationChallenge(service, domains, domain, executionContext, utils) !== checked.checkedToken) {
+                    throw utils.errorBuilder.buildError(ErrorType.CONFLICT, executionContext, {
+                        context: {
+                            code: 'SSO_DOMAIN_CHALLENGE_CHANGED',
+                            reason: 'sso_domain_challenge_changed',
+                            message: 'This domain was claimed again while it was being verified, so its challenge changed. Verify it again.',
+                            domain,
+                        },
+                    });
+                }
                 putBridged(bridgeKey(variant.resourceType, SsoConfig_Operations.VERIFY_DOMAIN, executionContext), {
                     domain,
-                    status: verified ? DomainVerificationStatus.VERIFIED : DomainVerificationStatus.FAILED,
+                    status: checked.verified ? DomainVerificationStatus.VERIFIED : DomainVerificationStatus.FAILED,
                     dnsName: service.verificationDnsName(domain),
-                    dnsRecordsFound: recordsFound,
+                    dnsRecordsFound: checked.recordsFound,
                 });
-                return { domains: service.planVerificationOutcome(domains, domain, verified) };
+                return { domains: service.planVerificationOutcome(domains, domain, checked.verified) };
             },
             postfixCoreOperations: async (_id, updatedRow, executionContext, _operationPath, _utils) => takeBridged(bridgeKey(variant.resourceType, SsoConfig_Operations.VERIFY_DOMAIN, executionContext)) ?? updatedRow,
         },
     });
     return factory;
 }
+/**
+ * The verification challenge the row holds for `domain`, or a refusal. A claim mints the nonce, so verifying without one is
+ * not a failed check — it is a request for a challenge that was never raised. Saying so is what stops an operator publishing
+ * a record and waiting for a verification that can never pass.
+ */
+function requireVerificationChallenge(service, domains, domain, executionContext, utils) {
+    const expectedToken = service.getVerificationToken(domains, domain);
+    if (!expectedToken) {
+        throw utils.errorBuilder.buildError(ErrorType.CONFLICT, executionContext, {
+            context: {
+                code: 'SSO_DOMAIN_NOT_CLAIMED',
+                reason: 'sso_domain_not_claimed',
+                message: 'No verification challenge exists for this domain in this scope. Claim it first.',
+                domain,
+            },
+        });
+    }
+    return expectedToken;
+}
 // ════════════════════════════════════════════════════════════════════
 // revokeDomain
 // ════════════════════════════════════════════════════════════════════