@wildo-ai/saas-models 1.0.1

package/dist/esm/security/authentications/siem/siem-export-config.shared.resources-config.schemas.js

@@ -0,0 +1,90 @@
+/**
+ * SIEM Export Config Resource Configuration — Polymorphic
+ *
+ * Produces 2 factory functions (ORG + APP) via the polymorphic factory.
+ * Spread into the registry factory map:
+ *   ...siemExportConfigPolymorphicFactories
+ */
+import { z } from 'zod';
+import { CoreResourceOperation, CoreResourceType } from '../../../resources/resources.shared.core.definitions.js';
+import { ResourceOperationRiskLevel, ResourceOperationVariantType, } from '../../../resources/resources.shared.schemas.js';
+import { createPolymorphicResourceConfigurations } from '../../../resources/utils/resource-polymorphism.factory.js';
+import { CORE_ORG_ROLES, CORE_APP_ROLES } from '../../authorizations/roles.shared.schemas.js';
+import { siemExportConfigPolymorphicDeclaration } from './siem-export-config.shared.schemas.js';
+// ── Custom Operations ────────────────────────────────────────────────
+export var SiemExportConfig_Operations;
+(function (SiemExportConfig_Operations) {
+    SiemExportConfig_Operations["TEST_WEBHOOK"] = "testWebhook";
+    SiemExportConfig_Operations["GET_DELIVERY_STATUS"] = "getDeliveryStatus";
+})(SiemExportConfig_Operations || (SiemExportConfig_Operations = {}));
+// ── Request DTOs ─────────────────────────────────────────────────────
+export const SiemExportConfig_TestWebhookRequestDto = z.object({});
+export const SiemExportConfig_GetDeliveryStatusRequestDto = z.object({});
+// ── Polymorphic Factory ──────────────────────────────────────────────
+export const siemExportConfigPolymorphicFactories = createPolymorphicResourceConfigurations(siemExportConfigPolymorphicDeclaration, {
+    isSystemResource: true,
+    customOperation: SiemExportConfig_Operations,
+    coreOperations: [CoreResourceOperation.READ, CoreResourceOperation.CREATE, CoreResourceOperation.UPDATE],
+    operationsConfiguration: {
+        [CoreResourceOperation.READ]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                }],
+        },
+        [CoreResourceOperation.CREATE]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
+                }],
+        },
+        [CoreResourceOperation.UPDATE]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
+                }],
+        },
+        [SiemExportConfig_Operations.TEST_WEBHOOK]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
+                    resourceOperationLike: CoreResourceOperation.READ,
+                    requestDto: SiemExportConfig_TestWebhookRequestDto,
+                }],
+        },
+        [SiemExportConfig_Operations.GET_DELIVERY_STATUS]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                    resourceOperationLike: CoreResourceOperation.READ,
+                    requestDto: SiemExportConfig_GetDeliveryStatusRequestDto,
+                }],
+        },
+    },
+});
+//# sourceMappingURL=siem-export-config.shared.resources-config.schemas.js.map

package/dist/esm/security/authentications/siem/siem-export-config.shared.resources-config.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"siem-export-config.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../../src/security/authentications/siem/siem-export-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AAC/G,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,uCAAuC,EAAE,MAAM,wDAAwD,CAAC;AACjH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,sCAAsC,EAAE,MAAM,qCAAqC,CAAC;AAE7F,wEAAwE;AAExE,MAAM,CAAN,IAAY,2BAGX;AAHD,WAAY,2BAA2B;IACrC,2DAA4B,CAAA;IAC5B,wEAAyC,CAAA;AAC3C,CAAC,EAHW,2BAA2B,KAA3B,2BAA2B,QAGtC;AAED,wEAAwE;AAExE,MAAM,CAAC,MAAM,sCAAsC,GAAoB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEpF,MAAM,CAAC,MAAM,4CAA4C,GAAoB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE1F,wEAAwE;AAExE,MAAM,CAAC,MAAM,oCAAoC,GAAG,uCAAuC,CACzF,sCAAsC,EACtC;IACE,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,2BAA2B;IAC5C,cAAc,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC;IACxG,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C,CAAC;SACH;QACD,CAAC,2BAA2B,CAAC,YAAY,CAAC,EAAE;YAC1C,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,IAAI;oBACjD,UAAU,EAAE,sCAAsC;iBACnD,CAAC;SACH;QACD,CAAC,2BAA2B,CAAC,mBAAmB,CAAC,EAAE;YACjD,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,IAAI;oBACjD,UAAU,EAAE,4CAA4C;iBACzD,CAAC;SACH;KACF;CACF,CACF,CAAC"}

package/dist/esm/security/authentications/siem/siem-export-config.shared.schemas.d.ts

@@ -0,0 +1,125 @@
+/**
+ * SIEM Export Config Schema (Shared) — Polymorphic
+ *
+ * Webhook configuration for exporting security audit events to external SIEM.
+ * Nested sub-objects: eventFilter{}, delivery{}.
+ * Scope FK (organizationId / applicationId) is injected by the polymorphism engine.
+ *
+ * @see auth-data-model-audit.md §2D
+ */
+import { z } from 'zod';
+export declare const SIEMAuthMethod: {
+    readonly BEARER_TOKEN: "bearer_token";
+    readonly API_KEY_HEADER: "api_key_header";
+    readonly HMAC_SHA256: "hmac_sha256";
+    readonly NONE: "none";
+};
+export declare const SIEMEventFormat: {
+    readonly JSON_STRUCTURED: "json_structured";
+    readonly CEF: "cef";
+    readonly LEEF: "leef";
+};
+export declare const SIEMEventCategory: {
+    readonly AUTHENTICATION: "authentication";
+    readonly AUTHORIZATION: "authorization";
+    readonly USER_LIFECYCLE: "user_lifecycle";
+    readonly ORG_MANAGEMENT: "org_management";
+    readonly DATA_ACCESS: "data_access";
+};
+export declare const SIEMFilterSeverity: {
+    readonly INFO: "info";
+    readonly WARNING: "warning";
+    readonly CRITICAL: "critical";
+};
+export declare const SiemExportConfigBaseSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    enabled: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodBoolean>>;
+    webhookUrl: z.ZodDefault<z.ZodURL>;
+    authMethod: z.ZodDefault<z.ZodEnum<{
+        readonly BEARER_TOKEN: "bearer_token";
+        readonly API_KEY_HEADER: "api_key_header";
+        readonly HMAC_SHA256: "hmac_sha256";
+        readonly NONE: "none";
+    }>>;
+    authCredential: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    authHeaderName: z.ZodDefault<z.ZodString>;
+    eventFormat: z.ZodDefault<z.ZodEnum<{
+        readonly JSON_STRUCTURED: "json_structured";
+        readonly CEF: "cef";
+        readonly LEEF: "leef";
+    }>>;
+    eventFilter: z.ZodObject<{
+        categories: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            readonly AUTHENTICATION: "authentication";
+            readonly AUTHORIZATION: "authorization";
+            readonly USER_LIFECYCLE: "user_lifecycle";
+            readonly ORG_MANAGEMENT: "org_management";
+            readonly DATA_ACCESS: "data_access";
+        }>>>;
+        severityMinimum: z.ZodDefault<z.ZodEnum<{
+            readonly INFO: "info";
+            readonly WARNING: "warning";
+            readonly CRITICAL: "critical";
+        }>>;
+        specificEventTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    delivery: z.ZodObject<{
+        batchSize: z.ZodDefault<z.ZodNumber>;
+        batchWindowSeconds: z.ZodDefault<z.ZodNumber>;
+        retryAttempts: z.ZodDefault<z.ZodNumber>;
+        retryBackoffSeconds: z.ZodDefault<z.ZodNumber>;
+        timeoutSeconds: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    customHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    includeRawEventData: z.ZodDefault<z.ZodBoolean>;
+    includeDeviceContext: z.ZodDefault<z.ZodBoolean>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type SiemExportConfigBase = z.infer<typeof SiemExportConfigBaseSchema>;
+export declare const siemExportConfigPolymorphicDeclaration: import("../../../index.js").PolymorphicSchemaDeclaration<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    enabled: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodBoolean>>;
+    webhookUrl: z.ZodDefault<z.ZodURL>;
+    authMethod: z.ZodDefault<z.ZodEnum<{
+        readonly BEARER_TOKEN: "bearer_token";
+        readonly API_KEY_HEADER: "api_key_header";
+        readonly HMAC_SHA256: "hmac_sha256";
+        readonly NONE: "none";
+    }>>;
+    authCredential: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    authHeaderName: z.ZodDefault<z.ZodString>;
+    eventFormat: z.ZodDefault<z.ZodEnum<{
+        readonly JSON_STRUCTURED: "json_structured";
+        readonly CEF: "cef";
+        readonly LEEF: "leef";
+    }>>;
+    eventFilter: z.ZodObject<{
+        categories: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            readonly AUTHENTICATION: "authentication";
+            readonly AUTHORIZATION: "authorization";
+            readonly USER_LIFECYCLE: "user_lifecycle";
+            readonly ORG_MANAGEMENT: "org_management";
+            readonly DATA_ACCESS: "data_access";
+        }>>>;
+        severityMinimum: z.ZodDefault<z.ZodEnum<{
+            readonly INFO: "info";
+            readonly WARNING: "warning";
+            readonly CRITICAL: "critical";
+        }>>;
+        specificEventTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    delivery: z.ZodObject<{
+        batchSize: z.ZodDefault<z.ZodNumber>;
+        batchWindowSeconds: z.ZodDefault<z.ZodNumber>;
+        retryAttempts: z.ZodDefault<z.ZodNumber>;
+        retryBackoffSeconds: z.ZodDefault<z.ZodNumber>;
+        timeoutSeconds: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    customHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    includeRawEventData: z.ZodDefault<z.ZodBoolean>;
+    includeDeviceContext: z.ZodDefault<z.ZodBoolean>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip, core.$ZodObjectExtra>>;
+//# sourceMappingURL=siem-export-config.shared.schemas.d.ts.map

package/dist/esm/security/authentications/siem/siem-export-config.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"siem-export-config.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/security/authentications/siem/siem-export-config.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,eAAe;;;;CAIlB,CAAC;AAEX,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;CAIrB,CAAC;AAEX,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCAuCrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCAMjD,CAAC"}

package/dist/esm/security/authentications/siem/siem-export-config.shared.schemas.js

@@ -0,0 +1,76 @@
+/**
+ * SIEM Export Config Schema (Shared) — Polymorphic
+ *
+ * Webhook configuration for exporting security audit events to external SIEM.
+ * Nested sub-objects: eventFilter{}, delivery{}.
+ * Scope FK (organizationId / applicationId) is injected by the polymorphism engine.
+ *
+ * @see auth-data-model-audit.md §2D
+ */
+import { z } from 'zod';
+import { WildoHeaderKeys } from '../../../requests/header-keys.shared.js';
+import { AUTH_SCOPE_VARIANTS } from '../authentication.shared.schemas.js';
+import { declarePolymorphicSchemas } from '../../../resources/utils/resource-polymorphism.schemas.js';
+export const SIEMAuthMethod = {
+    BEARER_TOKEN: 'bearer_token',
+    API_KEY_HEADER: 'api_key_header',
+    HMAC_SHA256: 'hmac_sha256',
+    NONE: 'none',
+};
+export const SIEMEventFormat = {
+    JSON_STRUCTURED: 'json_structured',
+    CEF: 'cef',
+    LEEF: 'leef',
+};
+export const SIEMEventCategory = {
+    AUTHENTICATION: 'authentication',
+    AUTHORIZATION: 'authorization',
+    USER_LIFECYCLE: 'user_lifecycle',
+    ORG_MANAGEMENT: 'org_management',
+    DATA_ACCESS: 'data_access',
+};
+export const SIEMFilterSeverity = {
+    INFO: 'info',
+    WARNING: 'warning',
+    CRITICAL: 'critical',
+};
+export const SiemExportConfigBaseSchema = z.object({
+    _id: z.string().min(1).isPrimaryKey().isSummaryField(),
+    enabled: z.boolean().default(false).isSummaryField(),
+    webhookUrl: z.url().default(''),
+    authMethod: z.enum(SIEMAuthMethod).default(SIEMAuthMethod.NONE),
+    authCredential: z.string().optional().isBackendOnly(),
+    authHeaderName: z.string().default(WildoHeaderKeys.API_KEY),
+    eventFormat: z.enum(SIEMEventFormat).default(SIEMEventFormat.JSON_STRUCTURED),
+    eventFilter: z.object({
+        categories: z.array(z.enum(SIEMEventCategory)).default([
+            SIEMEventCategory.AUTHENTICATION,
+            SIEMEventCategory.AUTHORIZATION,
+            SIEMEventCategory.USER_LIFECYCLE,
+            SIEMEventCategory.ORG_MANAGEMENT,
+            SIEMEventCategory.DATA_ACCESS,
+        ]),
+        severityMinimum: z.enum(SIEMFilterSeverity).default(SIEMFilterSeverity.INFO),
+        specificEventTypes: z.array(z.string()).optional(),
+    }),
+    delivery: z.object({
+        batchSize: z.number().min(1).max(100).default(1),
+        batchWindowSeconds: z.number().min(0).max(60).default(0),
+        retryAttempts: z.number().min(0).max(5).default(3),
+        retryBackoffSeconds: z.number().min(1).max(300).default(30),
+        timeoutSeconds: z.number().min(1).max(60).default(10),
+    }),
+    customHeaders: z.record(z.string(), z.string()).optional(),
+    includeRawEventData: z.boolean().default(true),
+    includeDeviceContext: z.boolean().default(true),
+    createdAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),
+});
+export const siemExportConfigPolymorphicDeclaration = declarePolymorphicSchemas({
+    baseResourceType: 'siemExportConfig',
+    baseFieldIdentifier: 'siemExportConfigId',
+    baseEnumKey: 'SIEM_EXPORT_CONFIG',
+    baseSchema: SiemExportConfigBaseSchema,
+    variants: AUTH_SCOPE_VARIANTS,
+});
+//# sourceMappingURL=siem-export-config.shared.schemas.js.map

package/dist/esm/security/authentications/siem/siem-export-config.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"siem-export-config.shared.schemas.js","sourceRoot":"","sources":["../../../../../src/security/authentications/siem/siem-export-config.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AAEnG,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,aAAa;IAC1B,IAAI,EAAE,MAAM;CACJ,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,eAAe,EAAE,iBAAiB;IAClC,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;CACJ,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,aAAa;CAClB,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAEtD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE;IAEpD,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAE/B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC;IAC/D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE;IACrD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC;IAE3D,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,eAAe,CAAC;IAE7E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC;YACrD,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,WAAW;SAC9B,CAAC;QACF,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC;QAC5E,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACnD,CAAC;IAEF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACtD,CAAC;IAEF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1D,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9C,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAE/C,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,sCAAsC,GAAG,yBAAyB,CAAC;IAC9E,gBAAgB,EAAE,kBAAkB;IACpC,mBAAmB,EAAE,oBAAoB;IACzC,WAAW,EAAE,oBAAoB;IACjC,UAAU,EAAE,0BAA0B;IACtC,QAAQ,EAAE,mBAAmB;CAC9B,CAAC,CAAC"}

package/dist/esm/security/authentications/sso/sso-config.shared.resources-config.schemas.d.ts

@@ -0,0 +1,25 @@
+/**
+ * SSO Config Resource Configuration — Polymorphic
+ *
+ * Produces 2 factory functions (ORG + APP) via the polymorphic factory.
+ * Spread into the registry factory map:
+ *   ...ssoConfigPolymorphicFactories
+ */
+import { z } from 'zod';
+import { CoreResourceOperation } from '../../../resources/resources.shared.core.definitions.js';
+export declare enum SsoConfig_Operations {
+    ADD_DOMAIN = "addDomain",
+    VERIFY_DOMAIN = "verifyDomain",
+    REMOVE_DOMAIN = "removeDomain"
+}
+export declare const SsoConfig_AddDomainRequestDto: z.ZodObject<{
+    domain: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const SsoConfig_VerifyDomainRequestDto: z.ZodObject<{
+    domain: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const SsoConfig_RemoveDomainRequestDto: z.ZodObject<{
+    domain: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const ssoConfigPolymorphicFactories: Record<string, import("../../../index.js").ResourceConfiguration_InitializationFactory<typeof SsoConfig_Operations, CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.CREATE, any>>;
+//# sourceMappingURL=sso-config.shared.resources-config.schemas.d.ts.map

package/dist/esm/security/authentications/sso/sso-config.shared.resources-config.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso-config.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/security/authentications/sso/sso-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAoB,MAAM,sDAAsD,CAAC;AAW/G,oBAAY,oBAAoB;IAC9B,UAAU,cAAc;IACxB,aAAa,iBAAiB;IAC9B,aAAa,iBAAiB;CAC/B;AAID,eAAO,MAAM,6BAA6B;;uCAExC,CAAC;AAEH,eAAO,MAAM,gCAAgC;;uCAE3C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;uCAE3C,CAAC;AAIH,eAAO,MAAM,6BAA6B,4MAiFzC,CAAC"}

package/dist/esm/security/authentications/sso/sso-config.shared.resources-config.schemas.js

@@ -0,0 +1,111 @@
+/**
+ * SSO Config Resource Configuration — Polymorphic
+ *
+ * Produces 2 factory functions (ORG + APP) via the polymorphic factory.
+ * Spread into the registry factory map:
+ *   ...ssoConfigPolymorphicFactories
+ */
+import { z } from 'zod';
+import { CoreResourceOperation, CoreResourceType } from '../../../resources/resources.shared.core.definitions.js';
+import { ResourceOperationRiskLevel, ResourceOperationVariantType, } from '../../../resources/resources.shared.schemas.js';
+import { createPolymorphicResourceConfigurations } from '../../../resources/utils/resource-polymorphism.factory.js';
+import { CORE_ORG_ROLES, CORE_APP_ROLES } from '../../authorizations/roles.shared.schemas.js';
+import { ssoConfigPolymorphicDeclaration } from './sso-config.shared.schemas.js';
+// ── Custom Operations ────────────────────────────────────────────────
+export var SsoConfig_Operations;
+(function (SsoConfig_Operations) {
+    SsoConfig_Operations["ADD_DOMAIN"] = "addDomain";
+    SsoConfig_Operations["VERIFY_DOMAIN"] = "verifyDomain";
+    SsoConfig_Operations["REMOVE_DOMAIN"] = "removeDomain";
+})(SsoConfig_Operations || (SsoConfig_Operations = {}));
+// ── Request DTOs ─────────────────────────────────────────────────────
+export const SsoConfig_AddDomainRequestDto = z.object({
+    domain: z.string(),
+});
+export const SsoConfig_VerifyDomainRequestDto = z.object({
+    domain: z.string(),
+});
+export const SsoConfig_RemoveDomainRequestDto = z.object({
+    domain: z.string(),
+});
+// ── Polymorphic Factory ──────────────────────────────────────────────
+export const ssoConfigPolymorphicFactories = createPolymorphicResourceConfigurations(ssoConfigPolymorphicDeclaration, {
+    isSystemResource: true,
+    customOperation: SsoConfig_Operations,
+    coreOperations: [CoreResourceOperation.READ, CoreResourceOperation.CREATE, CoreResourceOperation.UPDATE],
+    operationsConfiguration: {
+        [CoreResourceOperation.READ]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                }],
+        },
+        [CoreResourceOperation.CREATE]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
+                }],
+        },
+        [CoreResourceOperation.UPDATE]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
+                }],
+        },
+        [SsoConfig_Operations.ADD_DOMAIN]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
+                    resourceOperationLike: CoreResourceOperation.UPDATE,
+                    requestDto: SsoConfig_AddDomainRequestDto,
+                }],
+        },
+        [SsoConfig_Operations.VERIFY_DOMAIN]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
+                    resourceOperationLike: CoreResourceOperation.READ,
+                    requestDto: SsoConfig_VerifyDomainRequestDto,
+                }],
+        },
+        [SsoConfig_Operations.REMOVE_DOMAIN]: {
+            variants: [{
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    polymorphicRole: {
+                        [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],
+                        [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    },
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
+                    resourceOperationLike: CoreResourceOperation.DELETE,
+                    requestDto: SsoConfig_RemoveDomainRequestDto,
+                }],
+        },
+    },
+});
+//# sourceMappingURL=sso-config.shared.resources-config.schemas.js.map

package/dist/esm/security/authentications/sso/sso-config.shared.resources-config.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso-config.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../../src/security/authentications/sso/sso-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AAC/G,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,uCAAuC,EAAE,MAAM,wDAAwD,CAAC;AACjH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAE9E,wEAAwE;AAExE,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,gDAAwB,CAAA;IACxB,sDAA8B,CAAA;IAC9B,sDAA8B,CAAA;AAChC,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAED,wEAAwE;AAExE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,wEAAwE;AAExE,MAAM,CAAC,MAAM,6BAA6B,GAAG,uCAAuC,CAClF,+BAA+B,EAC/B;IACE,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,oBAAoB;IACrC,cAAc,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC;IACxG,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C,CAAC;SACH;QACD,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE;YACjC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,6BAA6B;iBAC1C,CAAC;SACH;QACD,CAAC,oBAAoB,CAAC,aAAa,CAAC,EAAE;YACpC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,IAAI;oBACjD,UAAU,EAAE,gCAAgC;iBAC7C,CAAC;SACH;QACD,CAAC,oBAAoB,CAAC,aAAa,CAAC,EAAE;YACpC,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,gCAAgC;iBAC7C,CAAC;SACH;KACF;CACF,CACF,CAAC"}

package/dist/esm/security/authentications/sso/sso-config.shared.schemas.d.ts

@@ -0,0 +1,160 @@
+/**
+ * SSO Config Schema (Shared) — Polymorphic
+ *
+ * SSO enforcement, domain verification, provider restrictions, provisioning,
+ * session settings, emergency access. Policy/settings layer only —
+ * provider connections are a separate resource (SsoConnection).
+ * Scope FK (organizationId / applicationId) is injected by the polymorphism engine.
+ *
+ * @see auth-data-model-audit.md §2A
+ */
+import { z } from 'zod';
+export declare const DomainVerificationStatus: {
+    readonly PENDING: "pending";
+    readonly VERIFIED: "verified";
+    readonly FAILED: "failed";
+    readonly EXPIRED: "expired";
+};
+export declare const SSOAuditLevel: {
+    readonly MINIMAL: "minimal";
+    readonly STANDARD: "standard";
+    readonly VERBOSE: "verbose";
+};
+export declare const SsoConfigBaseSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    enforcement: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+        requireSSO: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodBoolean>>;
+        allowPasswordFallback: z.ZodDefault<z.ZodBoolean>;
+        enforceForAdmins: z.ZodDefault<z.ZodBoolean>;
+        graceLoginAttempts: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    domains: z.ZodObject<{
+        verifiedDomains: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        ssoEnabledDomains: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        domainHinting: z.ZodDefault<z.ZodBoolean>;
+        allowExternalDomains: z.ZodDefault<z.ZodBoolean>;
+        domainVerificationStatus: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
+            readonly PENDING: "pending";
+            readonly VERIFIED: "verified";
+            readonly FAILED: "failed";
+            readonly EXPIRED: "expired";
+        }>>>;
+        domainVerificationTokens: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    provisioning: z.ZodObject<{
+        autoCreateUsers: z.ZodDefault<z.ZodBoolean>;
+        autoUpdateUsers: z.ZodDefault<z.ZodBoolean>;
+        autoDeactivateUsers: z.ZodDefault<z.ZodBoolean>;
+        defaultRole: z.ZodOptional<z.ZodString>;
+        requiredAttributes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        syncFrequencyHours: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    sessionSettings: z.ZodObject<{
+        ssoSessionDurationMinutes: z.ZodDefault<z.ZodNumber>;
+        requireReauthForSensitive: z.ZodDefault<z.ZodBoolean>;
+        singleLogoutEnabled: z.ZodDefault<z.ZodBoolean>;
+        maxConcurrentSessions: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    auditConfig: z.ZodObject<{
+        logAllSSOEvents: z.ZodDefault<z.ZodBoolean>;
+        logProviderSwitching: z.ZodDefault<z.ZodBoolean>;
+        logRoleMapping: z.ZodDefault<z.ZodBoolean>;
+        complianceReporting: z.ZodDefault<z.ZodBoolean>;
+        retentionDays: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    emergencyAccess: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        breakGlassAccounts: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        requireApproval: z.ZodDefault<z.ZodBoolean>;
+        maxDurationHours: z.ZodDefault<z.ZodNumber>;
+        auditLevel: z.ZodDefault<z.ZodEnum<{
+            readonly MINIMAL: "minimal";
+            readonly STANDARD: "standard";
+            readonly VERBOSE: "verbose";
+        }>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    oauth2ProviderRestrictions: z.ZodObject<{
+        allowedProviders: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        blockedProviders: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        requireEnterpriseSSOOnly: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    socialCredentialOverrides: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        providerRef: z.ZodString;
+        clientId: z.ZodString;
+        clientSecret: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+        signedJwtKeyId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+        signedJwtTeamId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type SsoConfigBase = z.infer<typeof SsoConfigBaseSchema>;
+export declare const ssoConfigPolymorphicDeclaration: import("../../../index.js").PolymorphicSchemaDeclaration<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    enforcement: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+        requireSSO: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodBoolean>>;
+        allowPasswordFallback: z.ZodDefault<z.ZodBoolean>;
+        enforceForAdmins: z.ZodDefault<z.ZodBoolean>;
+        graceLoginAttempts: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    domains: z.ZodObject<{
+        verifiedDomains: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        ssoEnabledDomains: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        domainHinting: z.ZodDefault<z.ZodBoolean>;
+        allowExternalDomains: z.ZodDefault<z.ZodBoolean>;
+        domainVerificationStatus: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
+            readonly PENDING: "pending";
+            readonly VERIFIED: "verified";
+            readonly FAILED: "failed";
+            readonly EXPIRED: "expired";
+        }>>>;
+        domainVerificationTokens: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    provisioning: z.ZodObject<{
+        autoCreateUsers: z.ZodDefault<z.ZodBoolean>;
+        autoUpdateUsers: z.ZodDefault<z.ZodBoolean>;
+        autoDeactivateUsers: z.ZodDefault<z.ZodBoolean>;
+        defaultRole: z.ZodOptional<z.ZodString>;
+        requiredAttributes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        syncFrequencyHours: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    sessionSettings: z.ZodObject<{
+        ssoSessionDurationMinutes: z.ZodDefault<z.ZodNumber>;
+        requireReauthForSensitive: z.ZodDefault<z.ZodBoolean>;
+        singleLogoutEnabled: z.ZodDefault<z.ZodBoolean>;
+        maxConcurrentSessions: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    auditConfig: z.ZodObject<{
+        logAllSSOEvents: z.ZodDefault<z.ZodBoolean>;
+        logProviderSwitching: z.ZodDefault<z.ZodBoolean>;
+        logRoleMapping: z.ZodDefault<z.ZodBoolean>;
+        complianceReporting: z.ZodDefault<z.ZodBoolean>;
+        retentionDays: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    emergencyAccess: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        breakGlassAccounts: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        requireApproval: z.ZodDefault<z.ZodBoolean>;
+        maxDurationHours: z.ZodDefault<z.ZodNumber>;
+        auditLevel: z.ZodDefault<z.ZodEnum<{
+            readonly MINIMAL: "minimal";
+            readonly STANDARD: "standard";
+            readonly VERBOSE: "verbose";
+        }>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    oauth2ProviderRestrictions: z.ZodObject<{
+        allowedProviders: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        blockedProviders: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        requireEnterpriseSSOOnly: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    socialCredentialOverrides: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        providerRef: z.ZodString;
+        clientId: z.ZodString;
+        clientSecret: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+        signedJwtKeyId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+        signedJwtTeamId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip, core.$ZodObjectExtra>>;
+//# sourceMappingURL=sso-config.shared.schemas.d.ts.map

package/dist/esm/security/authentications/sso/sso-config.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso-config.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/security/authentications/sso/sso-config.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,wBAAwB;;;;;CAK3B,CAAC;AAEX,eAAO,MAAM,aAAa;;;;CAIhB,CAAC;AAEX,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCA4F9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCAM1C,CAAC"}