@wildo-ai/saas-models 1.0.1

package/dist/esm/compliance/audit-trails/auditable-events.shared.schema.d.ts

@@ -0,0 +1,951 @@
+import { z } from "zod";
+import { ResourceOperationRiskLevel } from "../../resources/resources.shared.schemas.js";
+export declare enum CoreAuditableEventType {
+    USER_LOGIN = "user_login",
+    USER_LOGOUT = "user_logout",
+    USER_LOGIN_FAILED = "user_login_failed",
+    USER_ACCOUNT_LOCKED = "user_account_locked",
+    USER_PASSWORD_CHANGED = "user_password_changed",
+    USER_MFA_ENABLED = "user_mfa_enabled",
+    USER_MFA_DISABLED = "user_mfa_disabled",
+    USER_SESSION_EXPIRED = "user_session_expired",
+    USER_CREATED = "user_created",
+    USER_UPDATED = "user_updated",
+    USER_DELETED = "user_deleted",
+    ORGANIZATION_CREATED = "organization_created",
+    ORGANIZATION_UPDATED = "organization_updated",
+    ORGANIZATION_DELETED = "organization_deleted",
+    ORGANIZATION_MEMBER_INVITED = "organization_member_invited",
+    ORGANIZATION_MEMBER_JOINED = "organization_member_joined",
+    ORGANIZATION_MEMBER_UPDATED = "organization_member_updated",
+    ORGANIZATION_MEMBER_ROLE_CHANGED = "organization_member_role_changed",
+    ORGANIZATION_MEMBER_STATUS_CHANGED = "organization_member_status_changed",
+    ORGANIZATION_MEMBER_REMOVED = "organization_member_removed",
+    ORGANIZATION_NOTIFICATIONS_UPDATED = "organization_notifications_updated",
+    ORGANIZATION_PREFERENCES_UPDATED = "organization_preferences_updated",
+    ORGANIZATION_PROFILE_UPDATED = "organization_profile_updated",
+    ORGANIZATION_UNIT_UPDATED = "organization_unit_updated",
+    USER_SSO_LOGIN = "user_sso_login",
+    USER_SSO_LOGIN_FAILED = "user_sso_login_failed",
+    USER_SSO_ENFORCEMENT_BLOCKED = "user_sso_enforcement_blocked",
+    USER_TOKEN_REFRESHED = "user_token_refreshed",
+    ORGANIZATION_SSO_CONFIGURATION_CHANGED = "organization_sso_configuration_changed",
+    ORGANIZATION_SIEM_EXPORT_CONFIGURED = "organization_siem_export_configured",
+    SCIM_TOKEN_CREATED = "scim_token_created",
+    SCIM_TOKEN_REVOKED = "scim_token_revoked",
+    SCIM_TOKEN_GENERATED = "scim_token_generated",
+    SCIM_TOKEN_ROTATED = "scim_token_rotated",
+    SCIM_PROVISIONING_CONFIG_UPDATED = "scim_provisioning_config_updated",
+    SCIM_PROVISIONING_FAILED = "scim_provisioning_failed",
+    SCIM_USER_PROVISIONED = "scim_user_provisioned",
+    SCIM_USER_UPDATED = "scim_user_updated",
+    SCIM_USER_DEACTIVATED = "scim_user_deactivated",
+    USER_PASSWORD_RESET_REQUESTED = "user_password_reset_requested",
+    USER_PASSWORD_RESET_COMPLETED = "user_password_reset_completed",
+    USER_REGISTERED = "user_registered",
+    USER_EMAIL_VERIFIED = "user_email_verified",
+    USER_VERIFICATION_EMAIL_RESENT = "user_verification_email_resent",
+    USER_PASSWORD_SET = "user_password_set",
+    USER_TOTP_DISABLED = "user_totp_disabled",
+    USER_IDENTITY_LINK_REMOVED = "user_identity_link_removed",
+    USER_MFA_SETUP_STARTED = "user_mfa_setup_started",
+    USER_MFA_SETUP_COMPLETED = "user_mfa_setup_completed",
+    USER_MFA_EMAIL_OTP_SENT = "user_mfa_email_otp_sent",
+    USER_PASSKEY_REGISTERED = "user_passkey_registered",
+    USER_PASSKEY_AUTHENTICATION_SUCCESS = "user_passkey_authentication_success",
+    USER_PASSKEY_AUTHENTICATION_FAILURE = "user_passkey_authentication_failure",
+    USER_PASSKEY_REMOVED = "user_passkey_removed",
+    USER_MAGIC_LINK_SENT = "user_magic_link_sent",
+    USER_MAGIC_LINK_VERIFIED = "user_magic_link_verified",
+    USER_MAGIC_LINK_FAILED = "user_magic_link_failed",
+    USER_SMS_OTP_SENT = "user_sms_otp_sent",
+    USER_SMS_OTP_VERIFIED = "user_sms_otp_verified",
+    USER_SMS_OTP_FAILED = "user_sms_otp_failed",
+    USER_PHONE_VERIFIED = "user_phone_verified",
+    USER_PHONE_VERIFICATION_FAILED = "user_phone_verification_failed",
+    SAML_LOGIN_INITIATED = "saml_login_initiated",
+    SAML_LOGIN_SUCCESS = "saml_login_success",
+    SAML_LOGIN_FAILED = "saml_login_failed",
+    SAML_ASSERTION_REPLAY_DETECTED = "saml_assertion_replay_detected",
+    SAML_CERT_EXPIRING = "saml_cert_expiring",
+    SAML_SLO_INITIATED = "saml_slo_initiated",
+    SAML_SLO_COMPLETED = "saml_slo_completed",
+    SAML_METADATA_PARSED = "saml_metadata_parsed",
+    SAML_EMAIL_CHANGED = "saml_email_changed",
+    OAUTH2_PROVIDER_BLOCKED = "oauth2_provider_blocked",
+    ONE_OFF_TOKEN_CREATED = "one_off_token_created",
+    ONE_OFF_TOKEN_EXCHANGED = "one_off_token_exchanged",
+    EMERGENCY_ACCESS_USED = "emergency_access_used",
+    FIELD_ACCESS = "field_access"
+}
+/** Canonical event categories — used by auditable-events, security-envelope, audit-logs. */
+export declare enum AuditEventCategory {
+    AUTHENTICATION = "authentication",
+    AUTHORIZATION = "authorization",
+    USER_LIFECYCLE = "user_lifecycle",
+    ORG_MANAGEMENT = "org_management",
+    DATA_ACCESS = "data_access"
+}
+/** Canonical severity levels — used by auditable-events, security-envelope, audit-logs. */
+export declare enum AuditEventSeverity {
+    INFO = "info",
+    WARNING = "warning",
+    CRITICAL = "critical"
+}
+/** SSO connection type — shared with user-identity-links. */
+export declare enum SsoConnectionType {
+    SOCIAL = "social",
+    ENTERPRISE = "enterprise"
+}
+/** SSO configuration change type. */
+export declare enum SsoConfigChangeType {
+    CREATED = "created",
+    UPDATED = "updated",
+    DELETED = "deleted",
+    PROVIDER_ADDED = "provider_added",
+    PROVIDER_REMOVED = "provider_removed",
+    ENFORCEMENT_CHANGED = "enforcement_changed"
+}
+/** SIEM export configuration change type. */
+export declare enum SiemExportChangeType {
+    ENABLED = "enabled",
+    DISABLED = "disabled",
+    UPDATED = "updated"
+}
+export declare const AuditableEventTypeSchema: z.ZodUnion<readonly [z.ZodEnum<typeof CoreAuditableEventType>, z.ZodString]>;
+export declare const AuditableEvent_User_LoginEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_LOGIN>;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    userId: z.ZodString;
+    authMethod: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_LogoutEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_LOGOUT>;
+    userId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_LoginFailedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_LOGIN_FAILED>;
+    email: z.ZodEmail;
+    authMethod: z.ZodString;
+    failureReason: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    attemptsRemaining: z.ZodOptional<z.ZodNumber>;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_AccountLockedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_ACCOUNT_LOCKED>;
+    userId: z.ZodString;
+    email: z.ZodEmail;
+    authMethod: z.ZodString;
+    lockoutDuration: z.ZodNumber;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_SessionExpiredEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SESSION_EXPIRED>;
+    userId: z.ZodString;
+    sessionId: z.ZodString;
+    sessionDuration: z.ZodNumber;
+    lastActivity: z.ZodDate;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OrganizationMember_InvitedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_INVITED>;
+    organizationId: z.ZodString;
+    invitedUserId: z.ZodString;
+    invitedBy: z.ZodString;
+    roles: z.ZodArray<z.ZodString>;
+    email: z.ZodOptional<z.ZodEmail>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OrganizationMember_JoinedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_JOINED>;
+    organizationId: z.ZodString;
+    userId: z.ZodString;
+    roles: z.ZodArray<z.ZodString>;
+    invitationId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OrganizationMember_UpdatedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_UPDATED>;
+    organizationId: z.ZodString;
+    memberId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OrganizationMember_RoleChangedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_ROLE_CHANGED>;
+    organizationId: z.ZodString;
+    memberId: z.ZodString;
+    previousRoles: z.ZodArray<z.ZodString>;
+    newRoles: z.ZodArray<z.ZodString>;
+    changedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OrganizationMember_StatusChangedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_STATUS_CHANGED>;
+    organizationId: z.ZodString;
+    memberId: z.ZodString;
+    previousStatus: z.ZodString;
+    newStatus: z.ZodString;
+    changedBy: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OrganizationMember_RemovedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_REMOVED>;
+    organizationId: z.ZodString;
+    memberId: z.ZodString;
+    removedUserId: z.ZodString;
+    removedBy: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_Organization_CreatedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_CREATED>;
+    organizationId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    createdBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_Organization_UpdatedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_UPDATED>;
+    organizationId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+    updatedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_Organization_DeletedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_DELETED>;
+    organizationId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    deletedBy: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OrganizationNotifications_UpdatedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_NOTIFICATIONS_UPDATED>;
+    organizationId: z.ZodString;
+    notificationsId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+    updatedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OrganizationPreferences_UpdatedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_PREFERENCES_UPDATED>;
+    organizationId: z.ZodString;
+    preferencesId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+    updatedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OrganizationProfile_UpdatedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_PROFILE_UPDATED>;
+    organizationId: z.ZodString;
+    profileId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+    updatedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OrganizationUnit_UpdatedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_UNIT_UPDATED>;
+    organizationId: z.ZodString;
+    unitId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+    updatedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_SSOLoginEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SSO_LOGIN>;
+    userId: z.ZodString;
+    email: z.ZodEmail;
+    providerRef: z.ZodString;
+    connectionType: z.ZodEnum<typeof SsoConnectionType>;
+    authSource: z.ZodOptional<z.ZodString>;
+    organizationId: z.ZodOptional<z.ZodString>;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_SSOLoginFailedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SSO_LOGIN_FAILED>;
+    email: z.ZodOptional<z.ZodEmail>;
+    providerRef: z.ZodOptional<z.ZodString>;
+    connectionType: z.ZodOptional<z.ZodEnum<typeof SsoConnectionType>>;
+    authSource: z.ZodOptional<z.ZodString>;
+    failureReason: z.ZodString;
+    organizationId: z.ZodOptional<z.ZodString>;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_SSOEnforcementBlockedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SSO_ENFORCEMENT_BLOCKED>;
+    email: z.ZodEmail;
+    attemptedProviderRef: z.ZodString;
+    attemptedConnectionType: z.ZodEnum<typeof SsoConnectionType>;
+    organizationId: z.ZodString;
+    enforcementPolicy: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_TokenRefreshedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_TOKEN_REFRESHED>;
+    userId: z.ZodString;
+    sessionId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_Organization_SSOConfigurationChangedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_SSO_CONFIGURATION_CHANGED>;
+    organizationId: z.ZodString;
+    changedBy: z.ZodString;
+    changeType: z.ZodEnum<typeof SsoConfigChangeType>;
+    affectedProviderRef: z.ZodOptional<z.ZodString>;
+    changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_Organization_SIEMExportConfiguredEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_SIEM_EXPORT_CONFIGURED>;
+    organizationId: z.ZodString;
+    changedBy: z.ZodString;
+    changeType: z.ZodEnum<typeof SiemExportChangeType>;
+    webhookUrlDomain: z.ZodOptional<z.ZodString>;
+    eventFormatConfigured: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_SCIM_TokenCreatedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.SCIM_TOKEN_CREATED>;
+    organizationId: z.ZodString;
+    tokenDisplayName: z.ZodString;
+    createdByUserId: z.ZodString;
+    expiresAt: z.ZodOptional<z.ZodString>;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_SCIM_TokenRevokedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.SCIM_TOKEN_REVOKED>;
+    organizationId: z.ZodString;
+    tokenDisplayName: z.ZodString;
+    revokedByUserId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_SCIM_UserProvisionedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.SCIM_USER_PROVISIONED>;
+    organizationId: z.ZodString;
+    userId: z.ZodString;
+    email: z.ZodString;
+    isNewUser: z.ZodBoolean;
+    provisionedVia: z.ZodString;
+    authSource: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_SCIM_UserUpdatedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.SCIM_USER_UPDATED>;
+    organizationId: z.ZodString;
+    userId: z.ZodString;
+    operation: z.ZodString;
+    updatedAttributes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_SCIM_UserDeactivatedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.SCIM_USER_DEACTIVATED>;
+    organizationId: z.ZodString;
+    userId: z.ZodString;
+    email: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_PasswordResetRequestedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSWORD_RESET_REQUESTED>;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_PasswordResetCompletedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSWORD_RESET_COMPLETED>;
+    userId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_RegisteredEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_REGISTERED>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_EmailVerifiedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_EMAIL_VERIFIED>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_VerificationEmailResentEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_VERIFICATION_EMAIL_RESENT>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_MFASetupStartedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MFA_SETUP_STARTED>;
+    userId: z.ZodString;
+    mfaMethod: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_MFASetupCompletedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MFA_SETUP_COMPLETED>;
+    userId: z.ZodString;
+    mfaMethod: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_MFAEmailOTPSentEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MFA_EMAIL_OTP_SENT>;
+    email: z.ZodString;
+    sessionId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_PasskeyRegisteredEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSKEY_REGISTERED>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    credentialId: z.ZodString;
+    credentialName: z.ZodString;
+    credentialDeviceType: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_PasskeyAuthSuccessEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSKEY_AUTHENTICATION_SUCCESS>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    credentialId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_PasskeyAuthFailureEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSKEY_AUTHENTICATION_FAILURE>;
+    email: z.ZodString;
+    failureReason: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_PasskeyRemovedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSKEY_REMOVED>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    credentialId: z.ZodString;
+    credentialName: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_MagicLinkSentEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MAGIC_LINK_SENT>;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_MagicLinkVerifiedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MAGIC_LINK_VERIFIED>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_MagicLinkFailedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MAGIC_LINK_FAILED>;
+    email: z.ZodOptional<z.ZodString>;
+    failureReason: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_SMSOTPSentEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SMS_OTP_SENT>;
+    phoneNumber: z.ZodString;
+    factorLevel: z.ZodString;
+    sessionId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_SMSOTPVerifiedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SMS_OTP_VERIFIED>;
+    userId: z.ZodString;
+    phoneNumber: z.ZodString;
+    factorLevel: z.ZodString;
+    sessionId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_SMSOTPFailedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SMS_OTP_FAILED>;
+    phoneNumber: z.ZodOptional<z.ZodString>;
+    factorLevel: z.ZodString;
+    failureReason: z.ZodString;
+    sessionId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_PhoneVerifiedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PHONE_VERIFIED>;
+    userId: z.ZodString;
+    phoneNumber: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_User_PhoneVerificationFailedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PHONE_VERIFICATION_FAILED>;
+    phoneNumber: z.ZodString;
+    failureReason: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_OAuth2ProviderBlockedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.OAUTH2_PROVIDER_BLOCKED>;
+    email: z.ZodOptional<z.ZodString>;
+    providerRef: z.ZodString;
+    organizationId: z.ZodString;
+    reason: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type AuditableEvent_OAuth2ProviderBlockedEventData = z.infer<typeof AuditableEvent_OAuth2ProviderBlockedEventDataSchema>;
+export declare const AuditableEvent_EmergencyAccess_UsedEventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.EMERGENCY_ACCESS_USED>;
+    userId: z.ZodString;
+    email: z.ZodEmail;
+    organizationId: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_FieldAccess_EventDataSchema: z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.FIELD_ACCESS>;
+    fieldName: z.ZodString;
+    resourceType: z.ZodString;
+    resourceId: z.ZodOptional<z.ZodString>;
+    operationIdentifier: z.ZodString;
+    isCreateOperation: z.ZodBoolean;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_DataSchema: z.ZodRecord<z.ZodString, z.ZodAny>;
+export declare const AuditableEvent_BaseSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    userId: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    riskLevel: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ResourceOperationRiskLevel>>;
+    eventType: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    eventData: z.ZodRecord<z.ZodString, z.ZodAny>;
+    eventCategory: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AuditEventCategory>>;
+    severity: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AuditEventSeverity>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AuditableEvent_TypedDataSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_LOGIN>;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    userId: z.ZodString;
+    authMethod: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_LOGOUT>;
+    userId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_LOGIN_FAILED>;
+    email: z.ZodEmail;
+    authMethod: z.ZodString;
+    failureReason: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    attemptsRemaining: z.ZodOptional<z.ZodNumber>;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_ACCOUNT_LOCKED>;
+    userId: z.ZodString;
+    email: z.ZodEmail;
+    authMethod: z.ZodString;
+    lockoutDuration: z.ZodNumber;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SESSION_EXPIRED>;
+    userId: z.ZodString;
+    sessionId: z.ZodString;
+    sessionDuration: z.ZodNumber;
+    lastActivity: z.ZodDate;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_INVITED>;
+    organizationId: z.ZodString;
+    invitedUserId: z.ZodString;
+    invitedBy: z.ZodString;
+    roles: z.ZodArray<z.ZodString>;
+    email: z.ZodOptional<z.ZodEmail>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_JOINED>;
+    organizationId: z.ZodString;
+    userId: z.ZodString;
+    roles: z.ZodArray<z.ZodString>;
+    invitationId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_UPDATED>;
+    organizationId: z.ZodString;
+    memberId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_ROLE_CHANGED>;
+    organizationId: z.ZodString;
+    memberId: z.ZodString;
+    previousRoles: z.ZodArray<z.ZodString>;
+    newRoles: z.ZodArray<z.ZodString>;
+    changedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_STATUS_CHANGED>;
+    organizationId: z.ZodString;
+    memberId: z.ZodString;
+    previousStatus: z.ZodString;
+    newStatus: z.ZodString;
+    changedBy: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_MEMBER_REMOVED>;
+    organizationId: z.ZodString;
+    memberId: z.ZodString;
+    removedUserId: z.ZodString;
+    removedBy: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_CREATED>;
+    organizationId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    createdBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_UPDATED>;
+    organizationId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+    updatedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_DELETED>;
+    organizationId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    deletedBy: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_NOTIFICATIONS_UPDATED>;
+    organizationId: z.ZodString;
+    notificationsId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+    updatedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_PREFERENCES_UPDATED>;
+    organizationId: z.ZodString;
+    preferencesId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+    updatedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_PROFILE_UPDATED>;
+    organizationId: z.ZodString;
+    profileId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+    updatedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_UNIT_UPDATED>;
+    organizationId: z.ZodString;
+    unitId: z.ZodString;
+    changes: z.ZodRecord<z.ZodString, z.ZodAny>;
+    updatedBy: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SSO_LOGIN>;
+    userId: z.ZodString;
+    email: z.ZodEmail;
+    providerRef: z.ZodString;
+    connectionType: z.ZodEnum<typeof SsoConnectionType>;
+    authSource: z.ZodOptional<z.ZodString>;
+    organizationId: z.ZodOptional<z.ZodString>;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SSO_LOGIN_FAILED>;
+    email: z.ZodOptional<z.ZodEmail>;
+    providerRef: z.ZodOptional<z.ZodString>;
+    connectionType: z.ZodOptional<z.ZodEnum<typeof SsoConnectionType>>;
+    authSource: z.ZodOptional<z.ZodString>;
+    failureReason: z.ZodString;
+    organizationId: z.ZodOptional<z.ZodString>;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SSO_ENFORCEMENT_BLOCKED>;
+    email: z.ZodEmail;
+    attemptedProviderRef: z.ZodString;
+    attemptedConnectionType: z.ZodEnum<typeof SsoConnectionType>;
+    organizationId: z.ZodString;
+    enforcementPolicy: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_TOKEN_REFRESHED>;
+    userId: z.ZodString;
+    sessionId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_SSO_CONFIGURATION_CHANGED>;
+    organizationId: z.ZodString;
+    changedBy: z.ZodString;
+    changeType: z.ZodEnum<typeof SsoConfigChangeType>;
+    affectedProviderRef: z.ZodOptional<z.ZodString>;
+    changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.ORGANIZATION_SIEM_EXPORT_CONFIGURED>;
+    organizationId: z.ZodString;
+    changedBy: z.ZodString;
+    changeType: z.ZodEnum<typeof SiemExportChangeType>;
+    webhookUrlDomain: z.ZodOptional<z.ZodString>;
+    eventFormatConfigured: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.SCIM_TOKEN_CREATED>;
+    organizationId: z.ZodString;
+    tokenDisplayName: z.ZodString;
+    createdByUserId: z.ZodString;
+    expiresAt: z.ZodOptional<z.ZodString>;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.SCIM_TOKEN_REVOKED>;
+    organizationId: z.ZodString;
+    tokenDisplayName: z.ZodString;
+    revokedByUserId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.SCIM_USER_PROVISIONED>;
+    organizationId: z.ZodString;
+    userId: z.ZodString;
+    email: z.ZodString;
+    isNewUser: z.ZodBoolean;
+    provisionedVia: z.ZodString;
+    authSource: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.SCIM_USER_UPDATED>;
+    organizationId: z.ZodString;
+    userId: z.ZodString;
+    operation: z.ZodString;
+    updatedAttributes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.SCIM_USER_DEACTIVATED>;
+    organizationId: z.ZodString;
+    userId: z.ZodString;
+    email: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSWORD_RESET_REQUESTED>;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSWORD_RESET_COMPLETED>;
+    userId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_REGISTERED>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_EMAIL_VERIFIED>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_VERIFICATION_EMAIL_RESENT>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MFA_SETUP_STARTED>;
+    userId: z.ZodString;
+    mfaMethod: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MFA_SETUP_COMPLETED>;
+    userId: z.ZodString;
+    mfaMethod: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MFA_EMAIL_OTP_SENT>;
+    email: z.ZodString;
+    sessionId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSKEY_REGISTERED>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    credentialId: z.ZodString;
+    credentialName: z.ZodString;
+    credentialDeviceType: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSKEY_AUTHENTICATION_SUCCESS>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    credentialId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSKEY_AUTHENTICATION_FAILURE>;
+    email: z.ZodString;
+    failureReason: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PASSKEY_REMOVED>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    credentialId: z.ZodString;
+    credentialName: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MAGIC_LINK_SENT>;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MAGIC_LINK_VERIFIED>;
+    userId: z.ZodString;
+    email: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_MAGIC_LINK_FAILED>;
+    email: z.ZodOptional<z.ZodString>;
+    failureReason: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SMS_OTP_SENT>;
+    phoneNumber: z.ZodString;
+    factorLevel: z.ZodString;
+    sessionId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SMS_OTP_VERIFIED>;
+    userId: z.ZodString;
+    phoneNumber: z.ZodString;
+    factorLevel: z.ZodString;
+    sessionId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_SMS_OTP_FAILED>;
+    phoneNumber: z.ZodOptional<z.ZodString>;
+    factorLevel: z.ZodString;
+    failureReason: z.ZodString;
+    sessionId: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PHONE_VERIFIED>;
+    userId: z.ZodString;
+    phoneNumber: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.USER_PHONE_VERIFICATION_FAILED>;
+    phoneNumber: z.ZodString;
+    failureReason: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.OAUTH2_PROVIDER_BLOCKED>;
+    email: z.ZodOptional<z.ZodString>;
+    providerRef: z.ZodString;
+    organizationId: z.ZodString;
+    reason: z.ZodString;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.EMERGENCY_ACCESS_USED>;
+    userId: z.ZodString;
+    email: z.ZodEmail;
+    organizationId: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+    ipAddress: z.ZodString;
+    userAgent: z.ZodString;
+    sessionId: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    eventType: z.ZodLiteral<CoreAuditableEventType.FIELD_ACCESS>;
+    fieldName: z.ZodString;
+    resourceType: z.ZodString;
+    resourceId: z.ZodOptional<z.ZodString>;
+    operationIdentifier: z.ZodString;
+    isCreateOperation: z.ZodBoolean;
+}, z.core.$strip, core.$ZodObjectExtra>], "eventType">;
+export type AuditableEvent = z.infer<typeof AuditableEvent_BaseSchema>;
+export type AuditableEvent_User_LoginEventData = z.infer<typeof AuditableEvent_User_LoginEventDataSchema>;
+export type AuditableEvent_User_LogoutEventData = z.infer<typeof AuditableEvent_User_LogoutEventDataSchema>;
+export type AuditableEvent_User_LoginFailedEventData = z.infer<typeof AuditableEvent_User_LoginFailedEventDataSchema>;
+export type AuditableEvent_User_AccountLockedEventData = z.infer<typeof AuditableEvent_User_AccountLockedEventDataSchema>;
+export type AuditableEvent_User_SessionExpiredEventData = z.infer<typeof AuditableEvent_User_SessionExpiredEventDataSchema>;
+export type AuditableEvent_OrganizationMember_InvitedEventData = z.infer<typeof AuditableEvent_OrganizationMember_InvitedEventDataSchema>;
+export type AuditableEvent_OrganizationMember_JoinedEventData = z.infer<typeof AuditableEvent_OrganizationMember_JoinedEventDataSchema>;
+export type AuditableEvent_OrganizationMember_UpdatedEventData = z.infer<typeof AuditableEvent_OrganizationMember_UpdatedEventDataSchema>;
+export type AuditableEvent_OrganizationMember_RoleChangedEventData = z.infer<typeof AuditableEvent_OrganizationMember_RoleChangedEventDataSchema>;
+export type AuditableEvent_OrganizationMember_StatusChangedEventData = z.infer<typeof AuditableEvent_OrganizationMember_StatusChangedEventDataSchema>;
+export type AuditableEvent_OrganizationMember_RemovedEventData = z.infer<typeof AuditableEvent_OrganizationMember_RemovedEventDataSchema>;
+export type AuditableEvent_Organization_CreatedEventData = z.infer<typeof AuditableEvent_Organization_CreatedEventDataSchema>;
+export type AuditableEvent_Organization_UpdatedEventData = z.infer<typeof AuditableEvent_Organization_UpdatedEventDataSchema>;
+export type AuditableEvent_Organization_DeletedEventData = z.infer<typeof AuditableEvent_Organization_DeletedEventDataSchema>;
+export type AuditableEvent_OrganizationNotifications_UpdatedEventData = z.infer<typeof AuditableEvent_OrganizationNotifications_UpdatedEventDataSchema>;
+export type AuditableEvent_OrganizationPreferences_UpdatedEventData = z.infer<typeof AuditableEvent_OrganizationPreferences_UpdatedEventDataSchema>;
+export type AuditableEvent_OrganizationProfile_UpdatedEventData = z.infer<typeof AuditableEvent_OrganizationProfile_UpdatedEventDataSchema>;
+export type AuditableEvent_OrganizationUnit_UpdatedEventData = z.infer<typeof AuditableEvent_OrganizationUnit_UpdatedEventDataSchema>;
+export type AuditableEvent_User_SSOLoginEventData = z.infer<typeof AuditableEvent_User_SSOLoginEventDataSchema>;
+export type AuditableEvent_User_SSOLoginFailedEventData = z.infer<typeof AuditableEvent_User_SSOLoginFailedEventDataSchema>;
+export type AuditableEvent_User_SSOEnforcementBlockedEventData = z.infer<typeof AuditableEvent_User_SSOEnforcementBlockedEventDataSchema>;
+export type AuditableEvent_User_TokenRefreshedEventData = z.infer<typeof AuditableEvent_User_TokenRefreshedEventDataSchema>;
+export type AuditableEvent_Organization_SSOConfigurationChangedEventData = z.infer<typeof AuditableEvent_Organization_SSOConfigurationChangedEventDataSchema>;
+export type AuditableEvent_Organization_SIEMExportConfiguredEventData = z.infer<typeof AuditableEvent_Organization_SIEMExportConfiguredEventDataSchema>;
+export type AuditableEvent_SCIM_TokenCreatedEventData = z.infer<typeof AuditableEvent_SCIM_TokenCreatedEventDataSchema>;
+export type AuditableEvent_SCIM_TokenRevokedEventData = z.infer<typeof AuditableEvent_SCIM_TokenRevokedEventDataSchema>;
+export type AuditableEvent_SCIM_UserProvisionedEventData = z.infer<typeof AuditableEvent_SCIM_UserProvisionedEventDataSchema>;
+export type AuditableEvent_SCIM_UserUpdatedEventData = z.infer<typeof AuditableEvent_SCIM_UserUpdatedEventDataSchema>;
+export type AuditableEvent_SCIM_UserDeactivatedEventData = z.infer<typeof AuditableEvent_SCIM_UserDeactivatedEventDataSchema>;
+export type AuditableEvent_User_PasswordResetRequestedEventData = z.infer<typeof AuditableEvent_User_PasswordResetRequestedEventDataSchema>;
+export type AuditableEvent_User_PasswordResetCompletedEventData = z.infer<typeof AuditableEvent_User_PasswordResetCompletedEventDataSchema>;
+export type AuditableEvent_User_RegisteredEventData = z.infer<typeof AuditableEvent_User_RegisteredEventDataSchema>;
+export type AuditableEvent_User_EmailVerifiedEventData = z.infer<typeof AuditableEvent_User_EmailVerifiedEventDataSchema>;
+export type AuditableEvent_User_VerificationEmailResentEventData = z.infer<typeof AuditableEvent_User_VerificationEmailResentEventDataSchema>;
+export type AuditableEvent_User_MFASetupStartedEventData = z.infer<typeof AuditableEvent_User_MFASetupStartedEventDataSchema>;
+export type AuditableEvent_User_MFASetupCompletedEventData = z.infer<typeof AuditableEvent_User_MFASetupCompletedEventDataSchema>;
+export type AuditableEvent_User_MFAEmailOTPSentEventData = z.infer<typeof AuditableEvent_User_MFAEmailOTPSentEventDataSchema>;
+export type AuditableEvent_User_PasskeyRegisteredEventData = z.infer<typeof AuditableEvent_User_PasskeyRegisteredEventDataSchema>;
+export type AuditableEvent_User_PasskeyAuthSuccessEventData = z.infer<typeof AuditableEvent_User_PasskeyAuthSuccessEventDataSchema>;
+export type AuditableEvent_User_PasskeyAuthFailureEventData = z.infer<typeof AuditableEvent_User_PasskeyAuthFailureEventDataSchema>;
+export type AuditableEvent_User_PasskeyRemovedEventData = z.infer<typeof AuditableEvent_User_PasskeyRemovedEventDataSchema>;
+export type AuditableEvent_User_MagicLinkSentEventData = z.infer<typeof AuditableEvent_User_MagicLinkSentEventDataSchema>;
+export type AuditableEvent_User_MagicLinkVerifiedEventData = z.infer<typeof AuditableEvent_User_MagicLinkVerifiedEventDataSchema>;
+export type AuditableEvent_User_MagicLinkFailedEventData = z.infer<typeof AuditableEvent_User_MagicLinkFailedEventDataSchema>;
+export type AuditableEvent_User_SMSOTPSentEventData = z.infer<typeof AuditableEvent_User_SMSOTPSentEventDataSchema>;
+export type AuditableEvent_User_SMSOTPVerifiedEventData = z.infer<typeof AuditableEvent_User_SMSOTPVerifiedEventDataSchema>;
+export type AuditableEvent_User_SMSOTPFailedEventData = z.infer<typeof AuditableEvent_User_SMSOTPFailedEventDataSchema>;
+export type AuditableEvent_User_PhoneVerifiedEventData = z.infer<typeof AuditableEvent_User_PhoneVerifiedEventDataSchema>;
+export type AuditableEvent_User_PhoneVerificationFailedEventData = z.infer<typeof AuditableEvent_User_PhoneVerificationFailedEventDataSchema>;
+export type AuditableEvent_EmergencyAccess_UsedEventData = z.infer<typeof AuditableEvent_EmergencyAccess_UsedEventDataSchema>;
+export type AuditableEvent_FieldAccess_EventData = z.infer<typeof AuditableEvent_FieldAccess_EventDataSchema>;
+//# sourceMappingURL=auditable-events.shared.schema.d.ts.map