@wildo-ai/saas-models 1.0.1 → 1.1.0

package/dist/esm/security/authentications/scim/scim-tokens.shared.schemas.js

@@ -3,7 +3,8 @@
  *
  * API bearer tokens for SCIM provisioning endpoints.
  * Naturally flat — no structural nesting needed.
- * Scope FK (organizationId / applicationId) is injected by the polymorphism engine.
+ * The organization scope FK is injected by the polymorphism engine. There is deliberately
+ * no application variant because the current SCIM protocol is tenant-scoped.
  *
  * Field renames from old flat schema: label → displayName, createdBy → createdByUserId.
  *
@@ -11,15 +12,30 @@
  */
 import { z } from 'zod';
 import { AUTH_SCOPE_VARIANTS } from '../authentication.shared.schemas.js';
-import { declarePolymorphicSchemas } from '../../../resources/utils/resource-polymorphism.schemas.js';
+import { CoreResourceType } from '../../../resources/resources.shared.core.definitions.js';
+import { declarePolymorphicSchemas, optOutPolymorphicAutoBusinessKey } from '../../../resources/utils/resource-polymorphism.schemas.js';
 export const ScimTokenBaseSchema = z.object({
     _id: z.string().min(1).isPrimaryKey().isSummaryField(),
-    tokenHash: z.string().min(1).isBackendOnly(),
+    // The SHA-256 of the plaintext bearer — the server-side lookup key the SCIM
+    // bearer-auth middleware resolves an inbound token by. The client MUST NEVER
+    // supply it (`.excludeFrom{Create,Update}()`); the `generateToken` custom op's
+    // mint prefix injects it. `isReturnedAtCreation` lets it survive the
+    // backend-only strip so the mint POSTFIX can correlate the one-time plaintext
+    // by hash — mirrors the api-key `hashedKey` contract (which minted secrets rely
+    // on identically). Without `.excludeFromCreate()`, a bare CREATE would require
+    // the client to send `tokenHash`, and without the mint prefix the CREATE that
+    // `generateToken` borrows would fail on the missing required field.
+    tokenHash: z.string().min(1).isBackendOnly({ isReturnedAtCreation: true }).excludeFromCreate().excludeFromUpdate(),
     displayName: z.string().min(1).max(100).isSummaryField(),
-    createdByUserId: z.string().min(1),
+    // Server-authoritative audit field: the id of the admin who minted the token.
+    // Stamped by the `generateToken` mint prefix from the execution context, never
+    // client-supplied (the custom op's request DTO omits it).
+    createdByUserId: z.string().min(1).excludeFromCreate().excludeFromUpdate(),
     lastUsedAt: z.date().optional(),
     expiresAt: z.date().optional(),
-    isActive: z.boolean().default(true).isSummaryField(),
+    // `.isAuditEvidence()` — a SCIM token governs directory provisioning for the whole tenant, so
+    // whether it is live is an access-control fact. assurance-control: WILDO.ACCESS.PRIVILEGE_EVIDENCE
+    isActive: z.boolean().default(true).isSummaryField().isAuditEvidence(),
     createdAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
     updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
 });
@@ -28,6 +44,12 @@ export const scimTokensPolymorphicDeclaration = declarePolymorphicSchemas({
     baseFieldIdentifier: 'scimTokenId',
     baseEnumKey: 'SCIM_TOKENS',
     baseSchema: ScimTokenBaseSchema,
-    variants: AUTH_SCOPE_VARIANTS,
+    // Many tokens per scope (LIST/CREATE/DELETE) — opt out of the
+    // polymorphism engine's singleton-per-scope auto-default.
+    // SCIM endpoints authenticate tenant directory credentials only. Do not derive an
+    // application variant until an application-scoped SCIM protocol and authorizer exist.
+    variants: AUTH_SCOPE_VARIANTS
+        .filter((variant) => variant.parentResourceType === CoreResourceType.ORGANIZATIONS)
+        .map(optOutPolymorphicAutoBusinessKey),
 });
-//# sourceMappingURL=scim-tokens.shared.schemas.js.map
+//# sourceMappingURL=scim-tokens.shared.schemas.js.map

package/dist/esm/security/authentications/scim/scim-tokens.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"scim-tokens.shared.schemas.js","sourceRoot":"","sources":["../../../../../src/security/authentications/scim/scim-tokens.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AAEnG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAEtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE;IACxD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;IAEpD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gCAAgC,GAAG,yBAAyB,CAAC;IACxE,gBAAgB,EAAE,YAAY;IAC9B,mBAAmB,EAAE,aAAa;IAClC,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,mBAAmB;IAC/B,QAAQ,EAAE,mBAAmB;CAC9B,CAAC,CAAC"}
+{"version":3,"file":"scim-tokens.shared.schemas.js","sourceRoot":"","sources":["../../../../../../src/security/authentications/scim/scim-tokens.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,wDAAwD,CAAC;AAErI,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAEtD,4EAA4E;IAC5E,6EAA6E;IAC7E,+EAA+E;IAC/E,qEAAqE;IACrE,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,8EAA8E;IAC9E,oEAAoE;IACpE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAClH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE;IACxD,8EAA8E;IAC9E,+EAA+E;IAC/E,0DAA0D;IAC1D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAC1E,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,8FAA8F;IAC9F,mGAAmG;IACnG,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE;IAEtE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gCAAgC,GAAG,yBAAyB,CAAC;IACxE,gBAAgB,EAAE,YAAY;IAC9B,mBAAmB,EAAE,aAAa;IAClC,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,mBAAmB;IAC/B,8DAA8D;IAC9D,0DAA0D;IAC1D,kFAAkF;IAClF,sFAAsF;IACtF,QAAQ,EAAE,mBAAmB;SAC1B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,KAAK,gBAAgB,CAAC,aAAa,CAAC;SAClF,GAAG,CAAC,gCAAgC,CAAC;CACzC,CAAC,CAAC","sourcesContent":["/**\n * SCIM Tokens Schema (Shared) — Polymorphic\n *\n * API bearer tokens for SCIM provisioning endpoints.\n * Naturally flat — no structural nesting needed.\n * The organization scope FK is injected by the polymorphism engine. There is deliberately\n * no application variant because the current SCIM protocol is tenant-scoped.\n *\n * Field renames from old flat schema: label → displayName, createdBy → createdByUserId.\n *\n * @see auth-data-model-audit.md §2F\n */\n\nimport { z } from 'zod';\nimport { AUTH_SCOPE_VARIANTS } from '../authentication.shared.schemas';\nimport { CoreResourceType } from '../../../resources/resources.shared.core.definitions';\nimport { declarePolymorphicSchemas, optOutPolymorphicAutoBusinessKey } from '../../../resources/utils/resource-polymorphism.schemas';\n\nexport const ScimTokenBaseSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n\n  // The SHA-256 of the plaintext bearer — the server-side lookup key the SCIM\n  // bearer-auth middleware resolves an inbound token by. The client MUST NEVER\n  // supply it (`.excludeFrom{Create,Update}()`); the `generateToken` custom op's\n  // mint prefix injects it. `isReturnedAtCreation` lets it survive the\n  // backend-only strip so the mint POSTFIX can correlate the one-time plaintext\n  // by hash — mirrors the api-key `hashedKey` contract (which minted secrets rely\n  // on identically). Without `.excludeFromCreate()`, a bare CREATE would require\n  // the client to send `tokenHash`, and without the mint prefix the CREATE that\n  // `generateToken` borrows would fail on the missing required field.\n  tokenHash: z.string().min(1).isBackendOnly({ isReturnedAtCreation: true }).excludeFromCreate().excludeFromUpdate(),\n  displayName: z.string().min(1).max(100).isSummaryField(),\n  // Server-authoritative audit field: the id of the admin who minted the token.\n  // Stamped by the `generateToken` mint prefix from the execution context, never\n  // client-supplied (the custom op's request DTO omits it).\n  createdByUserId: z.string().min(1).excludeFromCreate().excludeFromUpdate(),\n  lastUsedAt: z.date().optional(),\n  expiresAt: z.date().optional(),\n  // `.isAuditEvidence()` — a SCIM token governs directory provisioning for the whole tenant, so\n  // whether it is live is an access-control fact. assurance-control: WILDO.ACCESS.PRIVILEGE_EVIDENCE\n  isActive: z.boolean().default(true).isSummaryField().isAuditEvidence(),\n\n  createdAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n});\n\nexport type ScimTokenBase = z.infer<typeof ScimTokenBaseSchema>;\n\nexport const scimTokensPolymorphicDeclaration = declarePolymorphicSchemas({\n  baseResourceType: 'scimTokens',\n  baseFieldIdentifier: 'scimTokenId',\n  baseEnumKey: 'SCIM_TOKENS',\n  baseSchema: ScimTokenBaseSchema,\n  // Many tokens per scope (LIST/CREATE/DELETE) — opt out of the\n  // polymorphism engine's singleton-per-scope auto-default.\n  // SCIM endpoints authenticate tenant directory credentials only. Do not derive an\n  // application variant until an application-scoped SCIM protocol and authorizer exist.\n  variants: AUTH_SCOPE_VARIANTS\n    .filter((variant) => variant.parentResourceType === CoreResourceType.ORGANIZATIONS)\n    .map(optOutPolymorphicAutoBusinessKey),\n});\n"]}

package/dist/esm/security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas.d.ts

@@ -4,9 +4,16 @@
  * Produces 2 factory functions (ORG + APP) via the polymorphic factory.
  * Spread into the registry factory map:
  *   ...siemDeliveryDlqPolymorphicFactories
+ *
+ * The ORG + APP operation surfaces below (READ/LIST/RETRY/PURGE, all with
+ * `polymorphicRole` for both scopes) are fully wired, but only the ORGANIZATION
+ * variant is ever exercised in production: no producer emits app-scoped SIEM
+ * deliveries, so `APPLICATION_SIEM_DELIVERY_DLQ` is never populated. The APP variant
+ * is RESERVED / DORMANT — see the note on `siem-delivery-dlq.shared.schemas.ts` and
+ * `AuditEventDispatcherBackendService.dispatchToOrganizationAuditSinks`.
  */
 import { z } from 'zod';
-import { CoreResourceOperation } from '../../../resources/resources.shared.core.definitions.js';
+import { CoreResourceOperation } from '../../../resources/resources.shared.core.definitions';
 export declare enum SiemDeliveryDlq_Operations {
     RETRY_SINGLE = "retrySingle",
     RETRY_ALL = "retryAll",
@@ -14,8 +21,8 @@ export declare enum SiemDeliveryDlq_Operations {
 }
 export declare const SiemDeliveryDlq_RetrySingleRequestDto: z.ZodObject<{
     entryId: z.ZodString;
-}, z.core.$strip, core.$ZodObjectExtra>;
-export declare const SiemDeliveryDlq_RetryAllRequestDto: z.ZodObject<{}, z.core.$strip, core.$ZodObjectExtra>;
-export declare const SiemDeliveryDlq_PurgeAllRequestDto: z.ZodObject<{}, z.core.$strip, core.$ZodObjectExtra>;
-export declare const siemDeliveryDlqPolymorphicFactories: Record<string, import("../../../index.js").ResourceConfiguration_InitializationFactory<typeof SiemDeliveryDlq_Operations, CoreResourceOperation.READ | CoreResourceOperation.DELETE | CoreResourceOperation.CREATE | CoreResourceOperation.LIST, any>>;
+}, z.core.$strip>;
+export declare const SiemDeliveryDlq_RetryAllRequestDto: z.ZodObject<{}, z.core.$strip>;
+export declare const SiemDeliveryDlq_PurgeAllRequestDto: z.ZodObject<{}, z.core.$strip>;
+export declare const siemDeliveryDlqPolymorphicFactories: Record<string, import("../../..").ResourceConfiguration_InitializationFactory<typeof SiemDeliveryDlq_Operations, CoreResourceOperation.READ | CoreResourceOperation.DELETE | CoreResourceOperation.DELETE_MANY | CoreResourceOperation.CREATE | CoreResourceOperation.LIST, any>>;
 //# sourceMappingURL=siem-delivery-dlq.shared.resources-config.schemas.d.ts.map

package/dist/esm/security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"siem-delivery-dlq.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAoB,MAAM,sDAAsD,CAAC;AAW/G,oBAAY,0BAA0B;IACpC,YAAY,gBAAgB;IAC5B,SAAS,aAAa;IACtB,SAAS,aAAa;CACvB;AAID,eAAO,MAAM,qCAAqC;;uCAEhD,CAAC;AAEH,eAAO,MAAM,kCAAkC,sDAAe,CAAC;AAE/D,eAAO,MAAM,kCAAkC,sDAAe,CAAC;AAI/D,eAAO,MAAM,mCAAmC,+OAiG/C,CAAC"}
+{"version":3,"file":"siem-delivery-dlq.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../../../src/security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAoB,MAAM,sDAAsD,CAAC;AAW/G,oBAAY,0BAA0B;IACpC,YAAY,gBAAgB;IAC5B,SAAS,aAAa;IACtB,SAAS,aAAa;CACvB;AAID,eAAO,MAAM,qCAAqC;;iBAEhD,CAAC;AAEH,eAAO,MAAM,kCAAkC,gCAAe,CAAC;AAE/D,eAAO,MAAM,kCAAkC,gCAAe,CAAC;AAI/D,eAAO,MAAM,mCAAmC,mRAsK/C,CAAC"}

package/dist/esm/security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas.js

@@ -4,13 +4,20 @@
  * Produces 2 factory functions (ORG + APP) via the polymorphic factory.
  * Spread into the registry factory map:
  *   ...siemDeliveryDlqPolymorphicFactories
+ *
+ * The ORG + APP operation surfaces below (READ/LIST/RETRY/PURGE, all with
+ * `polymorphicRole` for both scopes) are fully wired, but only the ORGANIZATION
+ * variant is ever exercised in production: no producer emits app-scoped SIEM
+ * deliveries, so `APPLICATION_SIEM_DELIVERY_DLQ` is never populated. The APP variant
+ * is RESERVED / DORMANT — see the note on `siem-delivery-dlq.shared.schemas.ts` and
+ * `AuditEventDispatcherBackendService.dispatchToOrganizationAuditSinks`.
  */
 import { z } from 'zod';
 import { CoreResourceOperation, CoreResourceType } from '../../../resources/resources.shared.core.definitions.js';
 import { ResourceOperationRiskLevel, ResourceOperationVariantType, } from '../../../resources/resources.shared.schemas.js';
 import { createPolymorphicResourceConfigurations } from '../../../resources/utils/resource-polymorphism.factory.js';
 import { CORE_ORG_ROLES, CORE_APP_ROLES } from '../../authorizations/roles.shared.schemas.js';
-import { siemDeliveryDlqPolymorphicDeclaration } from './siem-delivery-dlq.shared.schemas.js';
+import { SiemDeliveryDlqStatus, siemDeliveryDlqPolymorphicDeclaration } from './siem-delivery-dlq.shared.schemas.js';
 // ── Custom Operations ────────────────────────────────────────────────
 export var SiemDeliveryDlq_Operations;
 (function (SiemDeliveryDlq_Operations) {
@@ -33,6 +40,14 @@ export const siemDeliveryDlqPolymorphicFactories = createPolymorphicResourceConf
         CoreResourceOperation.LIST,
         CoreResourceOperation.CREATE,
         CoreResourceOperation.DELETE,
+        // Bulk twin of DELETE — the write path for both `PURGE_ALL` (drop every row
+        // in the scope) and the delete-on-requeue tail of `RETRY_SINGLE` / `RETRY_ALL`.
+        // The custom impls route through `repository.deleteMany`, which resolves a
+        // DEFAULT DELETE_MANY operation. REPOSITORY_ONLY (like CREATE/DELETE): never a
+        // public HTTP surface — operators purge/retry via the custom operations, which
+        // own request validation + the summary response. Mirrors the M2M webhook
+        // delivery-log sibling, whose PURGE_OLD uses the same DELETE_MANY seam.
+        CoreResourceOperation.DELETE_MANY,
     ],
     operationsConfiguration: {
         [CoreResourceOperation.READ]: {
@@ -55,6 +70,16 @@ export const siemDeliveryDlqPolymorphicFactories = createPolymorphicResourceConf
                         [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     },
                     riskLevel: ResourceOperationRiskLevel.LOW,
+                    // Failed-deliveries triage surface: status is the quick-filter axis
+                    // (the UI promotes it to an All/Pending-retry/Exhausted/Delivered tab
+                    // strip via `collectionDisplayConfig.quickFilterField`), createdAt
+                    // bounds an incident window. Backend-validated: the controller only
+                    // extracts declared fields.
+                    filterFields: {
+                        status: z.enum(SiemDeliveryDlqStatus),
+                        createdAt: z.date(),
+                    },
+                    sortFields: ['createdAt', 'status'],
                 }],
         },
         [CoreResourceOperation.CREATE]: {
@@ -79,6 +104,20 @@ export const siemDeliveryDlqPolymorphicFactories = createPolymorphicResourceConf
                     riskLevel: ResourceOperationRiskLevel.HIGH,
                 }],
         },
+        // Bulk delete used by PURGE_ALL (whole-scope clear) and the delete-on-requeue
+        // tail of RETRY_SINGLE/RETRY_ALL. REPOSITORY_ONLY — driven only by the custom
+        // impls' `repository.deleteMany`, never a public HTTP surface.
+        [CoreResourceOperation.DELETE_MANY]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
+                }],
+        },
         [SiemDeliveryDlq_Operations.RETRY_SINGLE]: {
             variants: [{
                     variantType: ResourceOperationVariantType.API_CALL,
@@ -88,8 +127,20 @@ export const siemDeliveryDlqPolymorphicFactories = createPolymorphicResourceConf
                         [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     },
                     riskLevel: ResourceOperationRiskLevel.MEDIUM,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
+                    // The request body owns the one target (`entryId`). Borrow the
+                    // COLLECTION update verb so the generated route is
+                    // `…/siem-delivery-dlq/retry-single`, with no second, independently
+                    // supplied DLQ id in the URL. This is a single-row command, not a
+                    // selection bulk operation, so `isBulkOperation` remains unset.
+                    resourceOperationLike: CoreResourceOperation.UPDATE_MANY,
                     requestDto: SiemDeliveryDlq_RetrySingleRequestDto,
+                    // Borrows UPDATE_MANY for its route/verb but returns a retry acknowledgement,
+                    // NOT the DLQ resource row. Without this the service output fails
+                    // `transformOutput`'s `internalDto.parse` against the resource schema → 500.
+                    customResponseDto: z.object({
+                        message: z.string(),
+                        entryId: z.string(),
+                    }),
                 }],
         },
         [SiemDeliveryDlq_Operations.RETRY_ALL]: {
@@ -101,8 +152,22 @@ export const siemDeliveryDlqPolymorphicFactories = createPolymorphicResourceConf
                         [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     },
                     riskLevel: ResourceOperationRiskLevel.HIGH,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
+                    // Borrows the COLLECTION verb UPDATE_MANY (not entity UPDATE): a
+                    // whole-scope retry is a collection operation, so the framework must
+                    // generate a collection route (`…/siem-delivery-dlq/retry-all`, no
+                    // `:id` path segment) — an operator scope-level action has no single
+                    // row to address. Entity UPDATE would generate `…/:id/retry-all`,
+                    // which the collection surface can never fill. `isBulkOperation` stays
+                    // unset: this is collection-level, not a selection-of-ids bulk op.
+                    resourceOperationLike: CoreResourceOperation.UPDATE_MANY,
                     requestDto: SiemDeliveryDlq_RetryAllRequestDto,
+                    // Returns a bulk-retry summary, NOT the borrowed bulk-update default
+                    // response — customResponseDto overrides it.
+                    customResponseDto: z.object({
+                        retriedCount: z.number(),
+                        skippedCount: z.number(),
+                        message: z.string(),
+                    }),
                 }],
         },
         [SiemDeliveryDlq_Operations.PURGE_ALL]: {
@@ -114,10 +179,21 @@ export const siemDeliveryDlqPolymorphicFactories = createPolymorphicResourceConf
                         [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     },
                     riskLevel: ResourceOperationRiskLevel.CRITICAL,
-                    resourceOperationLike: CoreResourceOperation.DELETE,
+                    // Borrows the COLLECTION verb DELETE_MANY (not entity DELETE): a
+                    // whole-scope purge is a collection operation → collection route
+                    // (`…/siem-delivery-dlq/purge-all`, no `:id`). Entity DELETE would
+                    // generate `…/:id/purge-all`, unfillable from the scope-level surface.
+                    // `isBulkOperation` stays unset (collection-level, not a selection bulk).
+                    resourceOperationLike: CoreResourceOperation.DELETE_MANY,
                     requestDto: SiemDeliveryDlq_PurgeAllRequestDto,
+                    // Returns a purge summary, NOT the borrowed bulk-delete default
+                    // `{ deletedIds, deletedCount }` — customResponseDto overrides it.
+                    customResponseDto: z.object({
+                        purgedCount: z.number(),
+                        message: z.string(),
+                    }),
                 }],
         },
     },
 });
-//# sourceMappingURL=siem-delivery-dlq.shared.resources-config.schemas.js.map
+//# sourceMappingURL=siem-delivery-dlq.shared.resources-config.schemas.js.map

package/dist/esm/security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"siem-delivery-dlq.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../../src/security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AAC/G,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,uCAAuC,EAAE,MAAM,wDAAwD,CAAC;AACjH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,qCAAqC,EAAE,MAAM,oCAAoC,CAAC;AAE3F,wEAAwE;AAExE,MAAM,CAAN,IAAY,0BAIX;AAJD,WAAY,0BAA0B;IACpC,0DAA4B,CAAA;IAC5B,oDAAsB,CAAA;IACtB,oDAAsB,CAAA;AACxB,CAAC,EAJW,0BAA0B,KAA1B,0BAA0B,QAIrC;AAED,wEAAwE;AAExE,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE/D,wEAAwE;AAExE,MAAM,CAAC,MAAM,mCAAmC,GAAG,uCAAuC,CACxF,qCAAqC,EACrC;IACE,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,0BAA0B;IAC3C,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C,CAAC;SACH;QACD,CAAC,0BAA0B,CAAC,YAAY,CAAC,EAAE;YACzC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,qCAAqC;iBAClD,CAAC;SACH;QACD,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE;YACtC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,kCAAkC;iBAC/C,CAAC;SACH;QACD,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE;YACtC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,kCAAkC;iBAC/C,CAAC;SACH;KACF;CACF,CACF,CAAC"}
+{"version":3,"file":"siem-delivery-dlq.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../../../src/security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AAC/G,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,uCAAuC,EAAE,MAAM,wDAAwD,CAAC;AACjH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,qCAAqC,EAAE,MAAM,oCAAoC,CAAC;AAElH,wEAAwE;AAExE,MAAM,CAAN,IAAY,0BAIX;AAJD,WAAY,0BAA0B;IACpC,0DAA4B,CAAA;IAC5B,oDAAsB,CAAA;IACtB,oDAAsB,CAAA;AACxB,CAAC,EAJW,0BAA0B,KAA1B,0BAA0B,QAIrC;AAED,wEAAwE;AAExE,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE/D,wEAAwE;AAExE,MAAM,CAAC,MAAM,mCAAmC,GAAG,uCAAuC,CACxF,qCAAqC,EACrC;IACE,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,0BAA0B;IAC3C,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,4EAA4E;QAC5E,gFAAgF;QAChF,2EAA2E;QAC3E,+EAA+E;QAC/E,+EAA+E;QAC/E,yEAAyE;QACzE,wEAAwE;QACxE,qBAAqB,CAAC,WAAW;KAClC;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,oEAAoE;oBACpE,sEAAsE;oBACtE,mEAAmE;oBACnE,oEAAoE;oBACpE,4BAA4B;oBAC5B,YAAY,EAAE;wBACZ,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;wBACrC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;qBACpB;oBACD,UAAU,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAU;iBAC7C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C,CAAC;SACH;QACD,8EAA8E;QAC9E,8EAA8E;QAC9E,+DAA+D;QAC/D,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;YACnC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C,CAAC;SACH;QACD,CAAC,0BAA0B,CAAC,YAAY,CAAC,EAAE;YACzC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,+DAA+D;oBAC/D,mDAAmD;oBACnD,oEAAoE;oBACpE,kEAAkE;oBAClE,gEAAgE;oBAChE,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,qCAAqC;oBACjD,8EAA8E;oBAC9E,kEAAkE;oBAClE,6EAA6E;oBAC7E,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;wBAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;wBACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;qBACpB,CAAC;iBACH,CAAC;SACH;QACD,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE;YACtC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,iEAAiE;oBACjE,qEAAqE;oBACrE,mEAAmE;oBACnE,qEAAqE;oBACrE,kEAAkE;oBAClE,uEAAuE;oBACvE,mEAAmE;oBACnE,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,kCAAkC;oBAC9C,qEAAqE;oBACrE,6CAA6C;oBAC7C,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;wBAC1B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;wBACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;wBACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;qBACpB,CAAC;iBACH,CAAC;SACH;QACD,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE;YACtC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,iEAAiE;oBACjE,iEAAiE;oBACjE,mEAAmE;oBACnE,uEAAuE;oBACvE,0EAA0E;oBAC1E,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,kCAAkC;oBAC9C,gEAAgE;oBAChE,mEAAmE;oBACnE,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;wBAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;wBACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;qBACpB,CAAC;iBACH,CAAC;SACH;KACF;CACF,CACF,CAAC","sourcesContent":["/**\n * SIEM Delivery DLQ Resource Configuration — Polymorphic\n *\n * Produces 2 factory functions (ORG + APP) via the polymorphic factory.\n * Spread into the registry factory map:\n *   ...siemDeliveryDlqPolymorphicFactories\n *\n * The ORG + APP operation surfaces below (READ/LIST/RETRY/PURGE, all with\n * `polymorphicRole` for both scopes) are fully wired, but only the ORGANIZATION\n * variant is ever exercised in production: no producer emits app-scoped SIEM\n * deliveries, so `APPLICATION_SIEM_DELIVERY_DLQ` is never populated. The APP variant\n * is RESERVED / DORMANT — see the note on `siem-delivery-dlq.shared.schemas.ts` and\n * `AuditEventDispatcherBackendService.dispatchToOrganizationAuditSinks`.\n */\n\nimport { z } from 'zod';\nimport { CoreResourceOperation, CoreResourceType } from '../../../resources/resources.shared.core.definitions';\nimport {\n  ResourceOperationRiskLevel,\n  ResourceOperationVariantType,\n} from '../../../resources/resources.shared.schemas';\nimport { createPolymorphicResourceConfigurations } from '../../../resources/utils/resource-polymorphism.factory';\nimport { CORE_ORG_ROLES, CORE_APP_ROLES } from '../../authorizations/roles.shared.schemas';\nimport { SiemDeliveryDlqStatus, siemDeliveryDlqPolymorphicDeclaration } from './siem-delivery-dlq.shared.schemas';\n\n// ── Custom Operations ────────────────────────────────────────────────\n\nexport enum SiemDeliveryDlq_Operations {\n  RETRY_SINGLE = 'retrySingle',\n  RETRY_ALL = 'retryAll',\n  PURGE_ALL = 'purgeAll',\n}\n\n// ── Request DTOs ─────────────────────────────────────────────────────\n\nexport const SiemDeliveryDlq_RetrySingleRequestDto = z.object({\n  entryId: z.string(),\n});\n\nexport const SiemDeliveryDlq_RetryAllRequestDto = z.object({});\n\nexport const SiemDeliveryDlq_PurgeAllRequestDto = z.object({});\n\n// ── Polymorphic Factory ──────────────────────────────────────────────\n\nexport const siemDeliveryDlqPolymorphicFactories = createPolymorphicResourceConfigurations(\n  siemDeliveryDlqPolymorphicDeclaration,\n  {\n    isSystemResource: true,\n    customOperation: SiemDeliveryDlq_Operations,\n    coreOperations: [\n      CoreResourceOperation.READ,\n      CoreResourceOperation.LIST,\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.DELETE,\n      // Bulk twin of DELETE — the write path for both `PURGE_ALL` (drop every row\n      // in the scope) and the delete-on-requeue tail of `RETRY_SINGLE` / `RETRY_ALL`.\n      // The custom impls route through `repository.deleteMany`, which resolves a\n      // DEFAULT DELETE_MANY operation. REPOSITORY_ONLY (like CREATE/DELETE): never a\n      // public HTTP surface — operators purge/retry via the custom operations, which\n      // own request validation + the summary response. Mirrors the M2M webhook\n      // delivery-log sibling, whose PURGE_OLD uses the same DELETE_MANY seam.\n      CoreResourceOperation.DELETE_MANY,\n    ],\n    operationsConfiguration: {\n      [CoreResourceOperation.READ]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          polymorphicRole: {\n            [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n            [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          },\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }],\n      },\n      [CoreResourceOperation.LIST]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          polymorphicRole: {\n            [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n            [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          },\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // Failed-deliveries triage surface: status is the quick-filter axis\n          // (the UI promotes it to an All/Pending-retry/Exhausted/Delivered tab\n          // strip via `collectionDisplayConfig.quickFilterField`), createdAt\n          // bounds an incident window. Backend-validated: the controller only\n          // extracts declared fields.\n          filterFields: {\n            status: z.enum(SiemDeliveryDlqStatus),\n            createdAt: z.date(),\n          },\n          sortFields: ['createdAt', 'status'] as const,\n        }],\n      },\n      [CoreResourceOperation.CREATE]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          polymorphicRole: {\n            [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n            [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          },\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }],\n      },\n      [CoreResourceOperation.DELETE]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          polymorphicRole: {\n            [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n            [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          },\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }],\n      },\n      // Bulk delete used by PURGE_ALL (whole-scope clear) and the delete-on-requeue\n      // tail of RETRY_SINGLE/RETRY_ALL. REPOSITORY_ONLY — driven only by the custom\n      // impls' `repository.deleteMany`, never a public HTTP surface.\n      [CoreResourceOperation.DELETE_MANY]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          polymorphicRole: {\n            [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n            [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          },\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }],\n      },\n      [SiemDeliveryDlq_Operations.RETRY_SINGLE]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          polymorphicRole: {\n            [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n            [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          },\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          // The request body owns the one target (`entryId`). Borrow the\n          // COLLECTION update verb so the generated route is\n          // `…/siem-delivery-dlq/retry-single`, with no second, independently\n          // supplied DLQ id in the URL. This is a single-row command, not a\n          // selection bulk operation, so `isBulkOperation` remains unset.\n          resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n          requestDto: SiemDeliveryDlq_RetrySingleRequestDto,\n          // Borrows UPDATE_MANY for its route/verb but returns a retry acknowledgement,\n          // NOT the DLQ resource row. Without this the service output fails\n          // `transformOutput`'s `internalDto.parse` against the resource schema → 500.\n          customResponseDto: z.object({\n            message: z.string(),\n            entryId: z.string(),\n          }),\n        }],\n      },\n      [SiemDeliveryDlq_Operations.RETRY_ALL]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          polymorphicRole: {\n            [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n            [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          },\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n          // Borrows the COLLECTION verb UPDATE_MANY (not entity UPDATE): a\n          // whole-scope retry is a collection operation, so the framework must\n          // generate a collection route (`…/siem-delivery-dlq/retry-all`, no\n          // `:id` path segment) — an operator scope-level action has no single\n          // row to address. Entity UPDATE would generate `…/:id/retry-all`,\n          // which the collection surface can never fill. `isBulkOperation` stays\n          // unset: this is collection-level, not a selection-of-ids bulk op.\n          resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n          requestDto: SiemDeliveryDlq_RetryAllRequestDto,\n          // Returns a bulk-retry summary, NOT the borrowed bulk-update default\n          // response — customResponseDto overrides it.\n          customResponseDto: z.object({\n            retriedCount: z.number(),\n            skippedCount: z.number(),\n            message: z.string(),\n          }),\n        }],\n      },\n      [SiemDeliveryDlq_Operations.PURGE_ALL]: {\n        variants: [{\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          polymorphicRole: {\n            [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n            [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          },\n          riskLevel: ResourceOperationRiskLevel.CRITICAL,\n          // Borrows the COLLECTION verb DELETE_MANY (not entity DELETE): a\n          // whole-scope purge is a collection operation → collection route\n          // (`…/siem-delivery-dlq/purge-all`, no `:id`). Entity DELETE would\n          // generate `…/:id/purge-all`, unfillable from the scope-level surface.\n          // `isBulkOperation` stays unset (collection-level, not a selection bulk).\n          resourceOperationLike: CoreResourceOperation.DELETE_MANY,\n          requestDto: SiemDeliveryDlq_PurgeAllRequestDto,\n          // Returns a purge summary, NOT the borrowed bulk-delete default\n          // `{ deletedIds, deletedCount }` — customResponseDto overrides it.\n          customResponseDto: z.object({\n            purgedCount: z.number(),\n            message: z.string(),\n          }),\n        }],\n      },\n    },\n  },\n);\n"]}

package/dist/esm/security/authentications/siem/siem-delivery-dlq.shared.schemas.d.ts

@@ -5,6 +5,18 @@
  * Naturally flat — no structural nesting needed.
  * Scope FK (organizationId / applicationId) is injected by the polymorphism engine.
  *
+ * ── ORG variant is live; the APPLICATION variant is RESERVED / DORMANT ─────────────
+ * The polymorphism below emits both an ORG and an APPLICATION variant (uniform with the
+ * sibling SIEM export-config + the SSO/SCIM configs, all declared over
+ * `AUTH_SCOPE_VARIANTS`). Only the ORGANIZATION variant is populated in practice: rows
+ * are written by `SIEMWebhookDeliveryBackendService._enqueueToDLQ` when a delivery fails,
+ * and the sole delivery producer (`AuditEventDispatcherBackendService`) is ORG-scoped.
+ * There is no app-scoped producer, so `APPLICATION_SIEM_DELIVERY_DLQ` is never filled in
+ * production — its RETRY/PURGE custom-impls and the app-scope delivery seams exist as
+ * reserved plumbing, not a wired path. See `AuditEventDispatcherBackendService.
+ * dispatchToOrganizationAuditSinks` for the full rationale + how a future app producer
+ * would attach.
+ *
  * @see auth-data-model-audit.md §2E
  */
 import { z } from 'zod';
@@ -26,11 +38,11 @@ export declare const SiemDeliveryDlqBaseSchema: z.ZodObject<{
         readonly EXHAUSTED: "exhausted";
         readonly DELIVERED: "delivered";
     }>>>;
-    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
     updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
-}, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip>;
 export type SiemDeliveryDlqBase = z.infer<typeof SiemDeliveryDlqBaseSchema>;
-export declare const siemDeliveryDlqPolymorphicDeclaration: import("../../../index.js").PolymorphicSchemaDeclaration<z.ZodObject<{
+export declare const siemDeliveryDlqPolymorphicDeclaration: import("../../..").PolymorphicSchemaDeclaration<z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     eventId: z.ZodString;
     eventPayload: z.ZodUnknown;
@@ -43,7 +55,7 @@ export declare const siemDeliveryDlqPolymorphicDeclaration: import("../../../ind
         readonly EXHAUSTED: "exhausted";
         readonly DELIVERED: "delivered";
     }>>>;
-    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
     updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
-}, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip>>;
 //# sourceMappingURL=siem-delivery-dlq.shared.schemas.d.ts.map

package/dist/esm/security/authentications/siem/siem-delivery-dlq.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"siem-delivery-dlq.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/security/authentications/siem/siem-delivery-dlq.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAC;AAEX,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;uCAapC,CAAC;AAGH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;wCAMhD,CAAC"}
+{"version":3,"file":"siem-delivery-dlq.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../../src/security/authentications/siem/siem-delivery-dlq.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAC;AAEX,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;iBAqBpC,CAAC;AAGH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;kBAQhD,CAAC"}

package/dist/esm/security/authentications/siem/siem-delivery-dlq.shared.schemas.js

@@ -5,11 +5,25 @@
  * Naturally flat — no structural nesting needed.
  * Scope FK (organizationId / applicationId) is injected by the polymorphism engine.
  *
+ * ── ORG variant is live; the APPLICATION variant is RESERVED / DORMANT ─────────────
+ * The polymorphism below emits both an ORG and an APPLICATION variant (uniform with the
+ * sibling SIEM export-config + the SSO/SCIM configs, all declared over
+ * `AUTH_SCOPE_VARIANTS`). Only the ORGANIZATION variant is populated in practice: rows
+ * are written by `SIEMWebhookDeliveryBackendService._enqueueToDLQ` when a delivery fails,
+ * and the sole delivery producer (`AuditEventDispatcherBackendService`) is ORG-scoped.
+ * There is no app-scoped producer, so `APPLICATION_SIEM_DELIVERY_DLQ` is never filled in
+ * production — its RETRY/PURGE custom-impls and the app-scope delivery seams exist as
+ * reserved plumbing, not a wired path. See `AuditEventDispatcherBackendService.
+ * dispatchToOrganizationAuditSinks` for the full rationale + how a future app producer
+ * would attach.
+ *
  * @see auth-data-model-audit.md §2E
  */
 import { z } from 'zod';
+import { PersonalDataCategory } from '../../../compliance/privacy/personal-data-category.shared.schemas.js';
+import { addDataCategories } from '@wildo-ai/zod-decorators';
 import { AUTH_SCOPE_VARIANTS } from '../authentication.shared.schemas.js';
-import { declarePolymorphicSchemas } from '../../../resources/utils/resource-polymorphism.schemas.js';
+import { declarePolymorphicSchemas, optOutPolymorphicAutoBusinessKey } from '../../../resources/utils/resource-polymorphism.schemas.js';
 export const SiemDeliveryDlqStatus = {
     PENDING_RETRY: 'pending_retry',
     EXHAUSTED: 'exhausted',
@@ -18,13 +32,21 @@ export const SiemDeliveryDlqStatus = {
 export const SiemDeliveryDlqBaseSchema = z.object({
     _id: z.string().min(1).isPrimaryKey().isSummaryField(),
     eventId: z.string().min(1),
-    eventPayload: z.unknown(),
+    // USAGE — this is a FAILED AUDIT EVENT held for retry, so it carries the same personal data the
+    // audit row does. A dead-letter queue is where personal data sits longest and is looked at least;
+    // that it is transit state rather than a record does not remove it from the notice.
+    //
+    // `addDataCategories` because `z.unknown()` carries no prototype-installed decorators.
+    eventPayload: addDataCategories(z.unknown(), PersonalDataCategory.USAGE),
     failureReason: z.string().min(1).isSummaryField(),
     failureCount: z.number().min(0).default(1),
     lastAttemptAt: z.date(),
     nextRetryAt: z.date().optional(),
     status: z.enum(SiemDeliveryDlqStatus).default(SiemDeliveryDlqStatus.PENDING_RETRY).isSummaryField(),
-    createdAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+    // Summary field: DLQ entry time is core row identity for the failed-deliveries
+    // dashboard (per-row time + the LIST's `temporalGroupField: 'createdAt'` day
+    // grouping read it from the SUMMARY DTO — mirrors the m2m delivery log).
+    createdAt: z.date().default(() => new Date()).isSummaryField().excludeFromCreate().excludeFromUpdate(),
     updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
 });
 export const siemDeliveryDlqPolymorphicDeclaration = declarePolymorphicSchemas({
@@ -32,6 +54,8 @@ export const siemDeliveryDlqPolymorphicDeclaration = declarePolymorphicSchemas({
     baseFieldIdentifier: 'siemDeliveryDlqId',
     baseEnumKey: 'SIEM_DELIVERY_DLQ',
     baseSchema: SiemDeliveryDlqBaseSchema,
-    variants: AUTH_SCOPE_VARIANTS,
+    // Many DLQ rows per scope (each failed delivery is its own document) — opt
+    // out of the polymorphism engine's singleton-per-scope auto-default.
+    variants: AUTH_SCOPE_VARIANTS.map(optOutPolymorphicAutoBusinessKey),
 });
-//# sourceMappingURL=siem-delivery-dlq.shared.schemas.js.map
+//# sourceMappingURL=siem-delivery-dlq.shared.schemas.js.map

package/dist/esm/security/authentications/siem/siem-delivery-dlq.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"siem-delivery-dlq.shared.schemas.js","sourceRoot":"","sources":["../../../../../src/security/authentications/siem/siem-delivery-dlq.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AAEnG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,aAAa,EAAE,eAAe;IAC9B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;CACd,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAEtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE;IACvB,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,cAAc,EAAE;IAEnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,qCAAqC,GAAG,yBAAyB,CAAC;IAC7E,gBAAgB,EAAE,iBAAiB;IACnC,mBAAmB,EAAE,mBAAmB;IACxC,WAAW,EAAE,mBAAmB;IAChC,UAAU,EAAE,yBAAyB;IACrC,QAAQ,EAAE,mBAAmB;CAC9B,CAAC,CAAC"}
+{"version":3,"file":"siem-delivery-dlq.shared.schemas.js","sourceRoot":"","sources":["../../../../../../src/security/authentications/siem/siem-delivery-dlq.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mEAAmE,CAAC;AACzG,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,wDAAwD,CAAC;AAErI,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,aAAa,EAAE,eAAe;IAC9B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;CACd,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAEtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,gGAAgG;IAChG,kGAAkG;IAClG,oFAAoF;IACpF,EAAE;IACF,uFAAuF;IACvF,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,KAAK,CAAC;IACxE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE;IACvB,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,cAAc,EAAE;IAEnG,+EAA+E;IAC/E,6EAA6E;IAC7E,yEAAyE;IACzE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACtG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,qCAAqC,GAAG,yBAAyB,CAAC;IAC7E,gBAAgB,EAAE,iBAAiB;IACnC,mBAAmB,EAAE,mBAAmB;IACxC,WAAW,EAAE,mBAAmB;IAChC,UAAU,EAAE,yBAAyB;IACrC,2EAA2E;IAC3E,qEAAqE;IACrE,QAAQ,EAAE,mBAAmB,CAAC,GAAG,CAAC,gCAAgC,CAAC;CACpE,CAAC,CAAC","sourcesContent":["/**\n * SIEM Delivery DLQ Schema (Shared) — Polymorphic\n *\n * Dead-letter queue entries for failed SIEM webhook deliveries.\n * Naturally flat — no structural nesting needed.\n * Scope FK (organizationId / applicationId) is injected by the polymorphism engine.\n *\n * ── ORG variant is live; the APPLICATION variant is RESERVED / DORMANT ─────────────\n * The polymorphism below emits both an ORG and an APPLICATION variant (uniform with the\n * sibling SIEM export-config + the SSO/SCIM configs, all declared over\n * `AUTH_SCOPE_VARIANTS`). Only the ORGANIZATION variant is populated in practice: rows\n * are written by `SIEMWebhookDeliveryBackendService._enqueueToDLQ` when a delivery fails,\n * and the sole delivery producer (`AuditEventDispatcherBackendService`) is ORG-scoped.\n * There is no app-scoped producer, so `APPLICATION_SIEM_DELIVERY_DLQ` is never filled in\n * production — its RETRY/PURGE custom-impls and the app-scope delivery seams exist as\n * reserved plumbing, not a wired path. See `AuditEventDispatcherBackendService.\n * dispatchToOrganizationAuditSinks` for the full rationale + how a future app producer\n * would attach.\n *\n * @see auth-data-model-audit.md §2E\n */\n\nimport { z } from 'zod';\nimport { PersonalDataCategory } from '../../../compliance/privacy/personal-data-category.shared.schemas';\nimport { addDataCategories } from '@wildo-ai/zod-decorators';\nimport { AUTH_SCOPE_VARIANTS } from '../authentication.shared.schemas';\nimport { declarePolymorphicSchemas, optOutPolymorphicAutoBusinessKey } from '../../../resources/utils/resource-polymorphism.schemas';\n\nexport const SiemDeliveryDlqStatus = {\n  PENDING_RETRY: 'pending_retry',\n  EXHAUSTED: 'exhausted',\n  DELIVERED: 'delivered',\n} as const;\n\nexport const SiemDeliveryDlqBaseSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n\n  eventId: z.string().min(1),\n  // USAGE — this is a FAILED AUDIT EVENT held for retry, so it carries the same personal data the\n  // audit row does. A dead-letter queue is where personal data sits longest and is looked at least;\n  // that it is transit state rather than a record does not remove it from the notice.\n  //\n  // `addDataCategories` because `z.unknown()` carries no prototype-installed decorators.\n  eventPayload: addDataCategories(z.unknown(), PersonalDataCategory.USAGE),\n  failureReason: z.string().min(1).isSummaryField(),\n  failureCount: z.number().min(0).default(1),\n  lastAttemptAt: z.date(),\n  nextRetryAt: z.date().optional(),\n  status: z.enum(SiemDeliveryDlqStatus).default(SiemDeliveryDlqStatus.PENDING_RETRY).isSummaryField(),\n\n  // Summary field: DLQ entry time is core row identity for the failed-deliveries\n  // dashboard (per-row time + the LIST's `temporalGroupField: 'createdAt'` day\n  // grouping read it from the SUMMARY DTO — mirrors the m2m delivery log).\n  createdAt: z.date().default(() => new Date()).isSummaryField().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n});\n\n\nexport type SiemDeliveryDlqBase = z.infer<typeof SiemDeliveryDlqBaseSchema>;\n\nexport const siemDeliveryDlqPolymorphicDeclaration = declarePolymorphicSchemas({\n  baseResourceType: 'siemDeliveryDlq',\n  baseFieldIdentifier: 'siemDeliveryDlqId',\n  baseEnumKey: 'SIEM_DELIVERY_DLQ',\n  baseSchema: SiemDeliveryDlqBaseSchema,\n  // Many DLQ rows per scope (each failed delivery is its own document) — opt\n  // out of the polymorphism engine's singleton-per-scope auto-default.\n  variants: AUTH_SCOPE_VARIANTS.map(optOutPolymorphicAutoBusinessKey),\n});\n"]}

package/dist/esm/security/authentications/siem/siem-export-config.shared.resources-config.schemas.d.ts

@@ -5,13 +5,6 @@
  * Spread into the registry factory map:
  *   ...siemExportConfigPolymorphicFactories
  */
-import { z } from 'zod';
-import { CoreResourceOperation } from '../../../resources/resources.shared.core.definitions.js';
-export declare enum SiemExportConfig_Operations {
-    TEST_WEBHOOK = "testWebhook",
-    GET_DELIVERY_STATUS = "getDeliveryStatus"
-}
-export declare const SiemExportConfig_TestWebhookRequestDto: z.ZodObject<{}>;
-export declare const SiemExportConfig_GetDeliveryStatusRequestDto: z.ZodObject<{}>;
-export declare const siemExportConfigPolymorphicFactories: Record<string, import("../../../index.js").ResourceConfiguration_InitializationFactory<typeof SiemExportConfig_Operations, CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.CREATE, any>>;
+import { CoreResourceOperation } from '../../../resources/resources.shared.core.definitions';
+export declare const siemExportConfigPolymorphicFactories: Record<string, import("../../..").ResourceConfiguration_InitializationFactory<undefined, CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE | CoreResourceOperation.CREATE, any>>;
 //# sourceMappingURL=siem-export-config.shared.resources-config.schemas.d.ts.map

package/dist/esm/security/authentications/siem/siem-export-config.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"siem-export-config.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/security/authentications/siem/siem-export-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAoB,MAAM,sDAAsD,CAAC;AAW/G,oBAAY,2BAA2B;IACrC,YAAY,gBAAgB;IAC5B,mBAAmB,sBAAsB;CAC1C;AAID,eAAO,MAAM,sCAAsC,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAgB,CAAC;AAEpF,eAAO,MAAM,4CAA4C,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAgB,CAAC;AAI1F,eAAO,MAAM,oCAAoC,mNAoEhD,CAAC"}
+{"version":3,"file":"siem-export-config.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../../../src/security/authentications/siem/siem-export-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,qBAAqB,EAAoB,MAAM,sDAAsD,CAAC;AAY/G,eAAO,MAAM,oCAAoC,yNA0FhD,CAAC"}

package/dist/esm/security/authentications/siem/siem-export-config.shared.resources-config.schemas.js

@@ -5,26 +5,28 @@
  * Spread into the registry factory map:
  *   ...siemExportConfigPolymorphicFactories
  */
-import { z } from 'zod';
 import { CoreResourceOperation, CoreResourceType } from '../../../resources/resources.shared.core.definitions.js';
 import { ResourceOperationRiskLevel, ResourceOperationVariantType, } from '../../../resources/resources.shared.schemas.js';
 import { createPolymorphicResourceConfigurations } from '../../../resources/utils/resource-polymorphism.factory.js';
+import { ResourceSystemAccessMode } from '../../../resources/resources-config.shared.schemas.js';
 import { CORE_ORG_ROLES, CORE_APP_ROLES } from '../../authorizations/roles.shared.schemas.js';
 import { siemExportConfigPolymorphicDeclaration } from './siem-export-config.shared.schemas.js';
-// ── Custom Operations ────────────────────────────────────────────────
-export var SiemExportConfig_Operations;
-(function (SiemExportConfig_Operations) {
-    SiemExportConfig_Operations["TEST_WEBHOOK"] = "testWebhook";
-    SiemExportConfig_Operations["GET_DELIVERY_STATUS"] = "getDeliveryStatus";
-})(SiemExportConfig_Operations || (SiemExportConfig_Operations = {}));
-// ── Request DTOs ─────────────────────────────────────────────────────
-export const SiemExportConfig_TestWebhookRequestDto = z.object({});
-export const SiemExportConfig_GetDeliveryStatusRequestDto = z.object({});
 // ── Polymorphic Factory ──────────────────────────────────────────────
 export const siemExportConfigPolymorphicFactories = createPolymorphicResourceConfigurations(siemExportConfigPolymorphicDeclaration, {
     isSystemResource: true,
-    customOperation: SiemExportConfig_Operations,
-    coreOperations: [CoreResourceOperation.READ, CoreResourceOperation.CREATE, CoreResourceOperation.UPDATE],
+    // Audit/SIEM dispatch loads the export config via `readAsSystem` to decide
+    // where to deliver events, independent of any user (READ). When the row is
+    // absent — a provisioned / migrated / pre-seed org that bypassed the
+    // `afterCreate` default-seed — that same userless login path lazily
+    // materialises the disabled-default row via `createAsSystem` (CREATE); see
+    // `AuthOrganizationConfigurationService.loadSiemExportConfig`. Both are
+    // system-context (the logging-in user is not the config's admin owner), so
+    // the resource opts BOTH verbs in.
+    systemAccessPolicy: {
+        read: ResourceSystemAccessMode.ALLOWED,
+        create: ResourceSystemAccessMode.ALLOWED,
+    },
+    coreOperations: [CoreResourceOperation.READ, CoreResourceOperation.CREATE, CoreResourceOperation.UPDATE, CoreResourceOperation.DELETE],
     operationsConfiguration: {
         [CoreResourceOperation.READ]: {
             variants: [{
@@ -37,9 +39,20 @@ export const siemExportConfigPolymorphicFactories = createPolymorphicResourceCon
                     riskLevel: ResourceOperationRiskLevel.LOW,
                 }],
         },
+        // Internal-only (INTERNAL_CALL, NO HTTP route): the per-scope config row is
+        // materialised by the framework default-seed (repository tier) OR — when that
+        // was bypassed (provisioned / migrated / pre-seed org) — lazily by the
+        // userless login path via `createAsSystem` (`systemAccessPolicy.create` opts
+        // it in). Must NOT be REPOSITORY_ONLY: `createAsSystem` resolves CREATE via
+        // `getServiceOperationPathDefault`, which honours INTERNAL_CALL / API_CALL but
+        // NOT REPOSITORY_ONLY — a repository-only CREATE throws
+        // `RESOURCES_REGISTRY_OPERATION_PATH_NOT_FOUND` (INTERNAL / critical, and
+        // self-alerting on mere construction) on every login for a config-less org.
+        // No public HTTP create surface (config is seeded/bootstrapped, never
+        // self-serve). Same fix as the SCIM-tokens READ/UPDATE. Admin tier / MEDIUM.
         [CoreResourceOperation.CREATE]: {
             variants: [{
-                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    variantType: ResourceOperationVariantType.INTERNAL_CALL,
                     isDefault: true,
                     polymorphicRole: {
                         [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
@@ -48,43 +61,43 @@ export const siemExportConfigPolymorphicFactories = createPolymorphicResourceCon
                     riskLevel: ResourceOperationRiskLevel.MEDIUM,
                 }],
         },
+        // Internal-only (INTERNAL_CALL, NO HTTP route): SIEM config edits reach this through
+        // the config service path — `AuthOrganizationConfigurationService.saveSiemExportConfig`
+        // dispatches the write via `ServicesRegistryHandler.update` with the ADMIN's EC. Must
+        // NOT be REPOSITORY_ONLY: `.update()` resolves the op via `getServiceOperationPathDefault`,
+        // which honours INTERNAL_CALL / API_CALL but NOT REPOSITORY_ONLY — a repository-only
+        // UPDATE throws `RESOURCES_REGISTRY_OPERATION_PATH_NOT_FOUND` (INTERNAL / critical)
+        // whenever the save method runs. (`authCredential` masking is framework-driven via
+        // `.isWriteOnlySecret()`, so — unlike SSO's `socialCredentialOverrides` — there is no
+        // UPDATE custom-impl to keep in lockstep here.) No public HTTP update surface. Same fix
+        // as the CREATE above + the SCIM-tokens READ/UPDATE. Admin tier / MEDIUM.
         [CoreResourceOperation.UPDATE]: {
             variants: [{
-                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
-                    isDefault: true,
-                    polymorphicRole: {
-                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
-                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
-                    },
-                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
-                }],
-        },
-        [SiemExportConfig_Operations.TEST_WEBHOOK]: {
-            variants: [{
-                    variantType: ResourceOperationVariantType.API_CALL,
+                    variantType: ResourceOperationVariantType.INTERNAL_CALL,
                     isDefault: true,
                     polymorphicRole: {
                         [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
                         [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     },
                     riskLevel: ResourceOperationRiskLevel.MEDIUM,
-                    resourceOperationLike: CoreResourceOperation.READ,
-                    requestDto: SiemExportConfig_TestWebhookRequestDto,
                 }],
         },
-        [SiemExportConfig_Operations.GET_DELIVERY_STATUS]: {
+        // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition
+        // onParentDelete cascade so this one-per-scope SIEM-export-config row is physically
+        // removed when its owning org/app is deleted. Without a DELETE op the cascade
+        // (deleteChildrenImmediate) throws ErrorType.CONFIGURATION on any scope with a
+        // config row. Admin tier (ORG_ADMIN / APP super-admin) / HIGH.
+        [CoreResourceOperation.DELETE]: {
             variants: [{
-                    variantType: ResourceOperationVariantType.API_CALL,
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
                     isDefault: true,
                     polymorphicRole: {
                         [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
                         [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     },
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    resourceOperationLike: CoreResourceOperation.READ,
-                    requestDto: SiemExportConfig_GetDeliveryStatusRequestDto,
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
                 }],
         },
     },
 });
-//# sourceMappingURL=siem-export-config.shared.resources-config.schemas.js.map
+//# sourceMappingURL=siem-export-config.shared.resources-config.schemas.js.map