@wildo-ai/saas-models 1.0.1

package/dist/esm/compliance/audit-trails/auditable-events.shared.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditable-events.shared.schema.d.ts","sourceRoot":"","sources":["../../../../src/compliance/audit-trails/auditable-events.shared.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AAGtF,oBAAY,sBAAsB;IAEhC,UAAU,eAAe;IACzB,WAAW,gBAAgB;IAC3B,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAC3C,qBAAqB,0BAA0B;IAC/C,gBAAgB,qBAAqB;IACrC,iBAAiB,sBAAsB;IACvC,oBAAoB,yBAAyB;IAG7C,YAAY,iBAAiB;IAC7B,YAAY,iBAAiB;IAC7B,YAAY,iBAAiB;IAG7B,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAG7C,2BAA2B,gCAAgC;IAC3D,0BAA0B,+BAA+B;IACzD,2BAA2B,gCAAgC;IAC3D,gCAAgC,qCAAqC;IACrE,kCAAkC,uCAAuC;IACzE,2BAA2B,gCAAgC;IAE3D,kCAAkC,uCAAuC;IACzE,gCAAgC,qCAAqC;IACrE,4BAA4B,iCAAiC;IAC7D,yBAAyB,8BAA8B;IAGvD,cAAc,mBAAmB;IACjC,qBAAqB,0BAA0B;IAC/C,4BAA4B,iCAAiC;IAC7D,oBAAoB,yBAAyB;IAG7C,sCAAsC,2CAA2C;IACjF,mCAAmC,wCAAwC;IAG3E,kBAAkB,uBAAuB;IACzC,kBAAkB,uBAAuB;IACzC,oBAAoB,yBAAyB;IAC7C,kBAAkB,uBAAuB;IACzC,gCAAgC,qCAAqC;IACrE,wBAAwB,6BAA6B;IACrD,qBAAqB,0BAA0B;IAC/C,iBAAiB,sBAAsB;IACvC,qBAAqB,0BAA0B;IAG/C,6BAA6B,kCAAkC;IAC/D,6BAA6B,kCAAkC;IAG/D,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,8BAA8B,mCAAmC;IAGjE,iBAAiB,sBAAsB;IACvC,kBAAkB,uBAAuB;IACzC,0BAA0B,+BAA+B;IAGzD,sBAAsB,2BAA2B;IACjD,wBAAwB,6BAA6B;IACrD,uBAAuB,4BAA4B;IAGnD,uBAAuB,4BAA4B;IACnD,mCAAmC,wCAAwC;IAC3E,mCAAmC,wCAAwC;IAC3E,oBAAoB,yBAAyB;IAG7C,oBAAoB,yBAAyB;IAC7C,wBAAwB,6BAA6B;IACrD,sBAAsB,2BAA2B;IAGjD,iBAAiB,sBAAsB;IACvC,qBAAqB,0BAA0B;IAC/C,mBAAmB,wBAAwB;IAG3C,mBAAmB,wBAAwB;IAC3C,8BAA8B,mCAAmC;IAGjE,oBAAoB,yBAAyB;IAC7C,kBAAkB,uBAAuB;IACzC,iBAAiB,sBAAsB;IACvC,8BAA8B,mCAAmC;IACjE,kBAAkB,uBAAuB;IACzC,kBAAkB,uBAAuB;IACzC,kBAAkB,uBAAuB;IACzC,oBAAoB,yBAAyB;IAC7C,kBAAkB,uBAAuB;IAGzC,uBAAuB,4BAA4B;IAGnD,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IAGnD,qBAAqB,0BAA0B;IAG/C,YAAY,iBAAiB;CAC9B;AAED,4FAA4F;AAC5F,oBAAY,kBAAkB;IAC5B,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,WAAW,gBAAgB;CAC5B;AAED,2FAA2F;AAC3F,oBAAY,kBAAkB;IAC5B,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED,6DAA6D;AAC7D,oBAAY,iBAAiB;IAC3B,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED,qCAAqC;AACrC,oBAAY,mBAAmB;IAC7B,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,cAAc,mBAAmB;IACjC,gBAAgB,qBAAqB;IACrC,mBAAmB,wBAAwB;CAC5C;AAED,6CAA6C;AAC7C,oBAAY,oBAAoB;IAC9B,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAED,eAAO,MAAM,wBAAwB,8EAGnC,CAAC;AAEH,eAAO,MAAM,wCAAwC;;;;;;;;uCAQnD,CAAC;AAEH,eAAO,MAAM,yCAAyC;;;;;uCAKpD,CAAC;AAEH,eAAO,MAAM,8CAA8C;;;;;;;;;uCASzD,CAAC;AAEH,eAAO,MAAM,gDAAgD;;;;;;;;;uCAS3D,CAAC;AAEH,eAAO,MAAM,iDAAiD;;;;;;uCAM5D,CAAC;AAGH,eAAO,MAAM,wDAAwD;;;;;;;uCAOnE,CAAC;AAEH,eAAO,MAAM,uDAAuD;;;;;;uCAMlE,CAAC;AAEH,eAAO,MAAM,wDAAwD;;;;;uCAKnE,CAAC;AAEH,eAAO,MAAM,4DAA4D;;;;;;;uCAOvE,CAAC;AAEH,eAAO,MAAM,8DAA8D;;;;;;;;uCAQzE,CAAC;AAEH,eAAO,MAAM,wDAAwD;;;;;;;uCAOnE,CAAC;AAGH,eAAO,MAAM,kDAAkD;;;;;;uCAM7D,CAAC;AAEH,eAAO,MAAM,kDAAkD;;;;;uCAK7D,CAAC;AAEH,eAAO,MAAM,kDAAkD;;;;;;;uCAO7D,CAAC;AAEH,eAAO,MAAM,+DAA+D;;;;;;uCAM1E,CAAC;AAEH,eAAO,MAAM,6DAA6D;;;;;;uCAMxE,CAAC;AAEH,eAAO,MAAM,yDAAyD;;;;;;uCAMpE,CAAC;AAEH,eAAO,MAAM,sDAAsD;;;;;;uCAMjE,CAAC;AAIH,eAAO,MAAM,2CAA2C;;;;;;;;;;;uCAWtD,CAAC;AAEH,eAAO,MAAM,iDAAiD;;;;;;;;;;uCAU5D,CAAC;AAEH,eAAO,MAAM,wDAAwD;;;;;;;;;uCASnE,CAAC;AAEH,eAAO,MAAM,iDAAiD;;;;;;uCAM5D,CAAC;AAIH,eAAO,MAAM,kEAAkE;;;;;;;uCAO7E,CAAC;AAIH,eAAO,MAAM,+DAA+D;;;;;;;uCAO1E,CAAC;AAMH,eAAO,MAAM,+CAA+C;;;;;;;;uCAQ1D,CAAC;AAIH,eAAO,MAAM,+CAA+C;;;;;;;uCAO1D,CAAC;AAMH,eAAO,MAAM,kDAAkD;;;;;;;;uCAQ7D,CAAC;AAIH,eAAO,MAAM,8CAA8C;;;;;;uCAMzD,CAAC;AAIH,eAAO,MAAM,kDAAkD;;;;;uCAK7D,CAAC;AAMH,eAAO,MAAM,yDAAyD;;;;;uCAKpE,CAAC;AAIH,eAAO,MAAM,yDAAyD;;;;;uCAKpE,CAAC;AAMH,eAAO,MAAM,6CAA6C;;;;;;uCAMxD,CAAC;AAIH,eAAO,MAAM,gDAAgD;;;;;;uCAM3D,CAAC;AAIH,eAAO,MAAM,0DAA0D;;;;;;uCAMrE,CAAC;AAMH,eAAO,MAAM,kDAAkD;;;;;;uCAM7D,CAAC;AAIH,eAAO,MAAM,oDAAoD;;;;;;uCAM/D,CAAC;AAIH,eAAO,MAAM,kDAAkD;;;;;;uCAM7D,CAAC;AAMH,eAAO,MAAM,oDAAoD;;;;;;;;;uCAS/D,CAAC;AAIH,eAAO,MAAM,qDAAqD;;;;;;;;uCAQhE,CAAC;AAIH,eAAO,MAAM,qDAAqD;;;;;;;uCAOhE,CAAC;AAIH,eAAO,MAAM,iDAAiD;;;;;;;;uCAQ5D,CAAC;AAMH,eAAO,MAAM,gDAAgD;;;;;uCAK3D,CAAC;AAIH,eAAO,MAAM,oDAAoD;;;;;;;uCAO/D,CAAC;AAIH,eAAO,MAAM,kDAAkD;;;;;;uCAM7D,CAAC;AAMH,eAAO,MAAM,6CAA6C;;;;;;;uCAOxD,CAAC;AAIH,eAAO,MAAM,iDAAiD;;;;;;;;uCAQ5D,CAAC;AAIH,eAAO,MAAM,+CAA+C;;;;;;;;uCAQ1D,CAAC;AAMH,eAAO,MAAM,gDAAgD;;;;;;uCAM3D,CAAC;AAIH,eAAO,MAAM,0DAA0D;;;;;;uCAMrE,CAAC;AAMH,eAAO,MAAM,mDAAmD;;;;;;;;uCAQ9D,CAAC;AAEH,MAAM,MAAM,6CAA6C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mDAAmD,CAAC,CAAC;AAIhI,eAAO,MAAM,kDAAkD;;;;;;;;;uCAS7D,CAAC;AAIH,eAAO,MAAM,0CAA0C;;;;;;;uCAOrD,CAAC;AAMH,eAAO,MAAM,yBAAyB,oCAAgC,CAAC;AAKvE,eAAO,MAAM,yBAAyB;;;;;;;;;;;uCAcpC,CAAC;AAKH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sDAqDzC,CAAC;AAKH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AACvE,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wCAAwC,CAAC,CAAC;AAC1G,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yCAAyC,CAAC,CAAC;AAC5G,MAAM,MAAM,wCAAwC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8CAA8C,CAAC,CAAC;AACtH,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAC1H,MAAM,MAAM,2CAA2C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iDAAiD,CAAC,CAAC;AAC5H,MAAM,MAAM,kDAAkD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wDAAwD,CAAC,CAAC;AAC1I,MAAM,MAAM,iDAAiD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uDAAuD,CAAC,CAAC;AACxI,MAAM,MAAM,kDAAkD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wDAAwD,CAAC,CAAC;AAC1I,MAAM,MAAM,sDAAsD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4DAA4D,CAAC,CAAC;AAClJ,MAAM,MAAM,wDAAwD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8DAA8D,CAAC,CAAC;AACtJ,MAAM,MAAM,kDAAkD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wDAAwD,CAAC,CAAC;AAC1I,MAAM,MAAM,4CAA4C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;AAC9H,MAAM,MAAM,4CAA4C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;AAC9H,MAAM,MAAM,4CAA4C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;AAC9H,MAAM,MAAM,yDAAyD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+DAA+D,CAAC,CAAC;AACxJ,MAAM,MAAM,uDAAuD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6DAA6D,CAAC,CAAC;AACpJ,MAAM,MAAM,mDAAmD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yDAAyD,CAAC,CAAC;AAC5I,MAAM,MAAM,gDAAgD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sDAAsD,CAAC,CAAC;AACtI,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAChH,MAAM,MAAM,2CAA2C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iDAAiD,CAAC,CAAC;AAC5H,MAAM,MAAM,kDAAkD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wDAAwD,CAAC,CAAC;AAC1I,MAAM,MAAM,2CAA2C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iDAAiD,CAAC,CAAC;AAC5H,MAAM,MAAM,4DAA4D,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kEAAkE,CAAC,CAAC;AAC9J,MAAM,MAAM,yDAAyD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+DAA+D,CAAC,CAAC;AACxJ,MAAM,MAAM,yCAAyC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+CAA+C,CAAC,CAAC;AACxH,MAAM,MAAM,yCAAyC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+CAA+C,CAAC,CAAC;AACxH,MAAM,MAAM,4CAA4C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;AAC9H,MAAM,MAAM,wCAAwC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8CAA8C,CAAC,CAAC;AACtH,MAAM,MAAM,4CAA4C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;AAC9H,MAAM,MAAM,mDAAmD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yDAAyD,CAAC,CAAC;AAC5I,MAAM,MAAM,mDAAmD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yDAAyD,CAAC,CAAC;AAC5I,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6CAA6C,CAAC,CAAC;AACpH,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAC1H,MAAM,MAAM,oDAAoD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0DAA0D,CAAC,CAAC;AAC9I,MAAM,MAAM,4CAA4C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;AAC9H,MAAM,MAAM,8CAA8C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oDAAoD,CAAC,CAAC;AAClI,MAAM,MAAM,4CAA4C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;AAC9H,MAAM,MAAM,8CAA8C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oDAAoD,CAAC,CAAC;AAClI,MAAM,MAAM,+CAA+C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qDAAqD,CAAC,CAAC;AACpI,MAAM,MAAM,+CAA+C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qDAAqD,CAAC,CAAC;AACpI,MAAM,MAAM,2CAA2C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iDAAiD,CAAC,CAAC;AAC5H,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAC1H,MAAM,MAAM,8CAA8C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oDAAoD,CAAC,CAAC;AAClI,MAAM,MAAM,4CAA4C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;AAC9H,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6CAA6C,CAAC,CAAC;AACpH,MAAM,MAAM,2CAA2C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iDAAiD,CAAC,CAAC;AAC5H,MAAM,MAAM,yCAAyC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+CAA+C,CAAC,CAAC;AACxH,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAC1H,MAAM,MAAM,oDAAoD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0DAA0D,CAAC,CAAC;AAC9I,MAAM,MAAM,4CAA4C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;AAC9H,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC"}

package/dist/esm/compliance/audit-trails/auditable-events.shared.schema.js

@@ -0,0 +1,643 @@
+import { z } from "zod";
+import { ResourceOperationRiskLevel } from "../../resources/resources.shared.schemas.js";
+export var CoreAuditableEventType;
+(function (CoreAuditableEventType) {
+    // Authentication Events
+    CoreAuditableEventType["USER_LOGIN"] = "user_login";
+    CoreAuditableEventType["USER_LOGOUT"] = "user_logout";
+    CoreAuditableEventType["USER_LOGIN_FAILED"] = "user_login_failed";
+    CoreAuditableEventType["USER_ACCOUNT_LOCKED"] = "user_account_locked";
+    CoreAuditableEventType["USER_PASSWORD_CHANGED"] = "user_password_changed";
+    CoreAuditableEventType["USER_MFA_ENABLED"] = "user_mfa_enabled";
+    CoreAuditableEventType["USER_MFA_DISABLED"] = "user_mfa_disabled";
+    CoreAuditableEventType["USER_SESSION_EXPIRED"] = "user_session_expired";
+    // User Lifecycle Events
+    CoreAuditableEventType["USER_CREATED"] = "user_created";
+    CoreAuditableEventType["USER_UPDATED"] = "user_updated";
+    CoreAuditableEventType["USER_DELETED"] = "user_deleted";
+    // Organization Lifecycle Events
+    CoreAuditableEventType["ORGANIZATION_CREATED"] = "organization_created";
+    CoreAuditableEventType["ORGANIZATION_UPDATED"] = "organization_updated";
+    CoreAuditableEventType["ORGANIZATION_DELETED"] = "organization_deleted";
+    // Organization Member Events
+    CoreAuditableEventType["ORGANIZATION_MEMBER_INVITED"] = "organization_member_invited";
+    CoreAuditableEventType["ORGANIZATION_MEMBER_JOINED"] = "organization_member_joined";
+    CoreAuditableEventType["ORGANIZATION_MEMBER_UPDATED"] = "organization_member_updated";
+    CoreAuditableEventType["ORGANIZATION_MEMBER_ROLE_CHANGED"] = "organization_member_role_changed";
+    CoreAuditableEventType["ORGANIZATION_MEMBER_STATUS_CHANGED"] = "organization_member_status_changed";
+    CoreAuditableEventType["ORGANIZATION_MEMBER_REMOVED"] = "organization_member_removed";
+    CoreAuditableEventType["ORGANIZATION_NOTIFICATIONS_UPDATED"] = "organization_notifications_updated";
+    CoreAuditableEventType["ORGANIZATION_PREFERENCES_UPDATED"] = "organization_preferences_updated";
+    CoreAuditableEventType["ORGANIZATION_PROFILE_UPDATED"] = "organization_profile_updated";
+    CoreAuditableEventType["ORGANIZATION_UNIT_UPDATED"] = "organization_unit_updated";
+    // SSO Authentication Events
+    CoreAuditableEventType["USER_SSO_LOGIN"] = "user_sso_login";
+    CoreAuditableEventType["USER_SSO_LOGIN_FAILED"] = "user_sso_login_failed";
+    CoreAuditableEventType["USER_SSO_ENFORCEMENT_BLOCKED"] = "user_sso_enforcement_blocked";
+    CoreAuditableEventType["USER_TOKEN_REFRESHED"] = "user_token_refreshed";
+    // Organization Security Management Events
+    CoreAuditableEventType["ORGANIZATION_SSO_CONFIGURATION_CHANGED"] = "organization_sso_configuration_changed";
+    CoreAuditableEventType["ORGANIZATION_SIEM_EXPORT_CONFIGURED"] = "organization_siem_export_configured";
+    // SCIM Directory Provisioning Events
+    CoreAuditableEventType["SCIM_TOKEN_CREATED"] = "scim_token_created";
+    CoreAuditableEventType["SCIM_TOKEN_REVOKED"] = "scim_token_revoked";
+    CoreAuditableEventType["SCIM_TOKEN_GENERATED"] = "scim_token_generated";
+    CoreAuditableEventType["SCIM_TOKEN_ROTATED"] = "scim_token_rotated";
+    CoreAuditableEventType["SCIM_PROVISIONING_CONFIG_UPDATED"] = "scim_provisioning_config_updated";
+    CoreAuditableEventType["SCIM_PROVISIONING_FAILED"] = "scim_provisioning_failed";
+    CoreAuditableEventType["SCIM_USER_PROVISIONED"] = "scim_user_provisioned";
+    CoreAuditableEventType["SCIM_USER_UPDATED"] = "scim_user_updated";
+    CoreAuditableEventType["SCIM_USER_DEACTIVATED"] = "scim_user_deactivated";
+    // Password Reset Events (H5)
+    CoreAuditableEventType["USER_PASSWORD_RESET_REQUESTED"] = "user_password_reset_requested";
+    CoreAuditableEventType["USER_PASSWORD_RESET_COMPLETED"] = "user_password_reset_completed";
+    // Registration & Verification Events (H5)
+    CoreAuditableEventType["USER_REGISTERED"] = "user_registered";
+    CoreAuditableEventType["USER_EMAIL_VERIFIED"] = "user_email_verified";
+    CoreAuditableEventType["USER_VERIFICATION_EMAIL_RESENT"] = "user_verification_email_resent";
+    // Method Management Events (#13f)
+    CoreAuditableEventType["USER_PASSWORD_SET"] = "user_password_set";
+    CoreAuditableEventType["USER_TOTP_DISABLED"] = "user_totp_disabled";
+    CoreAuditableEventType["USER_IDENTITY_LINK_REMOVED"] = "user_identity_link_removed";
+    // MFA Lifecycle Events (H5)
+    CoreAuditableEventType["USER_MFA_SETUP_STARTED"] = "user_mfa_setup_started";
+    CoreAuditableEventType["USER_MFA_SETUP_COMPLETED"] = "user_mfa_setup_completed";
+    CoreAuditableEventType["USER_MFA_EMAIL_OTP_SENT"] = "user_mfa_email_otp_sent";
+    // WebAuthn/Passkey Events (Phase G1)
+    CoreAuditableEventType["USER_PASSKEY_REGISTERED"] = "user_passkey_registered";
+    CoreAuditableEventType["USER_PASSKEY_AUTHENTICATION_SUCCESS"] = "user_passkey_authentication_success";
+    CoreAuditableEventType["USER_PASSKEY_AUTHENTICATION_FAILURE"] = "user_passkey_authentication_failure";
+    CoreAuditableEventType["USER_PASSKEY_REMOVED"] = "user_passkey_removed";
+    // Magic Link Events (Phase G2)
+    CoreAuditableEventType["USER_MAGIC_LINK_SENT"] = "user_magic_link_sent";
+    CoreAuditableEventType["USER_MAGIC_LINK_VERIFIED"] = "user_magic_link_verified";
+    CoreAuditableEventType["USER_MAGIC_LINK_FAILED"] = "user_magic_link_failed";
+    // SMS OTP Events (Phase G2)
+    CoreAuditableEventType["USER_SMS_OTP_SENT"] = "user_sms_otp_sent";
+    CoreAuditableEventType["USER_SMS_OTP_VERIFIED"] = "user_sms_otp_verified";
+    CoreAuditableEventType["USER_SMS_OTP_FAILED"] = "user_sms_otp_failed";
+    // Phone Verification Events (Phase G2)
+    CoreAuditableEventType["USER_PHONE_VERIFIED"] = "user_phone_verified";
+    CoreAuditableEventType["USER_PHONE_VERIFICATION_FAILED"] = "user_phone_verification_failed";
+    // SAML Authentication Events (AUTH-2)
+    CoreAuditableEventType["SAML_LOGIN_INITIATED"] = "saml_login_initiated";
+    CoreAuditableEventType["SAML_LOGIN_SUCCESS"] = "saml_login_success";
+    CoreAuditableEventType["SAML_LOGIN_FAILED"] = "saml_login_failed";
+    CoreAuditableEventType["SAML_ASSERTION_REPLAY_DETECTED"] = "saml_assertion_replay_detected";
+    CoreAuditableEventType["SAML_CERT_EXPIRING"] = "saml_cert_expiring";
+    CoreAuditableEventType["SAML_SLO_INITIATED"] = "saml_slo_initiated";
+    CoreAuditableEventType["SAML_SLO_COMPLETED"] = "saml_slo_completed";
+    CoreAuditableEventType["SAML_METADATA_PARSED"] = "saml_metadata_parsed";
+    CoreAuditableEventType["SAML_EMAIL_CHANGED"] = "saml_email_changed";
+    // OAuth2 Provider Restriction Events (Phase G3)
+    CoreAuditableEventType["OAUTH2_PROVIDER_BLOCKED"] = "oauth2_provider_blocked";
+    // One-Off Session Events (W7.3b)
+    CoreAuditableEventType["ONE_OFF_TOKEN_CREATED"] = "one_off_token_created";
+    CoreAuditableEventType["ONE_OFF_TOKEN_EXCHANGED"] = "one_off_token_exchanged";
+    // Emergency Access Events
+    CoreAuditableEventType["EMERGENCY_ACCESS_USED"] = "emergency_access_used";
+    // Field Access Events
+    CoreAuditableEventType["FIELD_ACCESS"] = "field_access";
+})(CoreAuditableEventType || (CoreAuditableEventType = {}));
+/** Canonical event categories — used by auditable-events, security-envelope, audit-logs. */
+export var AuditEventCategory;
+(function (AuditEventCategory) {
+    AuditEventCategory["AUTHENTICATION"] = "authentication";
+    AuditEventCategory["AUTHORIZATION"] = "authorization";
+    AuditEventCategory["USER_LIFECYCLE"] = "user_lifecycle";
+    AuditEventCategory["ORG_MANAGEMENT"] = "org_management";
+    AuditEventCategory["DATA_ACCESS"] = "data_access";
+})(AuditEventCategory || (AuditEventCategory = {}));
+/** Canonical severity levels — used by auditable-events, security-envelope, audit-logs. */
+export var AuditEventSeverity;
+(function (AuditEventSeverity) {
+    AuditEventSeverity["INFO"] = "info";
+    AuditEventSeverity["WARNING"] = "warning";
+    AuditEventSeverity["CRITICAL"] = "critical";
+})(AuditEventSeverity || (AuditEventSeverity = {}));
+/** SSO connection type — shared with user-identity-links. */
+export var SsoConnectionType;
+(function (SsoConnectionType) {
+    SsoConnectionType["SOCIAL"] = "social";
+    SsoConnectionType["ENTERPRISE"] = "enterprise";
+})(SsoConnectionType || (SsoConnectionType = {}));
+/** SSO configuration change type. */
+export var SsoConfigChangeType;
+(function (SsoConfigChangeType) {
+    SsoConfigChangeType["CREATED"] = "created";
+    SsoConfigChangeType["UPDATED"] = "updated";
+    SsoConfigChangeType["DELETED"] = "deleted";
+    SsoConfigChangeType["PROVIDER_ADDED"] = "provider_added";
+    SsoConfigChangeType["PROVIDER_REMOVED"] = "provider_removed";
+    SsoConfigChangeType["ENFORCEMENT_CHANGED"] = "enforcement_changed";
+})(SsoConfigChangeType || (SsoConfigChangeType = {}));
+/** SIEM export configuration change type. */
+export var SiemExportChangeType;
+(function (SiemExportChangeType) {
+    SiemExportChangeType["ENABLED"] = "enabled";
+    SiemExportChangeType["DISABLED"] = "disabled";
+    SiemExportChangeType["UPDATED"] = "updated";
+})(SiemExportChangeType || (SiemExportChangeType = {}));
+export const AuditableEventTypeSchema = z.union([
+    z.enum(CoreAuditableEventType),
+    z.string()
+]);
+export const AuditableEvent_User_LoginEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_LOGIN),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+    userId: z.string(),
+    authMethod: z.string().optional(),
+    email: z.string().optional(),
+    sessionId: z.string().optional(),
+});
+export const AuditableEvent_User_LogoutEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_LOGOUT),
+    userId: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_LoginFailedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_LOGIN_FAILED),
+    email: z.email(),
+    authMethod: z.string(),
+    failureReason: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+    attemptsRemaining: z.number().optional(),
+    sessionId: z.string(),
+});
+export const AuditableEvent_User_AccountLockedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_ACCOUNT_LOCKED),
+    userId: z.string(),
+    email: z.email(),
+    authMethod: z.string(),
+    lockoutDuration: z.number(), // minutes
+    ipAddress: z.string(),
+    userAgent: z.string(),
+    sessionId: z.string(),
+});
+export const AuditableEvent_User_SessionExpiredEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_SESSION_EXPIRED),
+    userId: z.string(),
+    sessionId: z.string(),
+    sessionDuration: z.number(), // minutes
+    lastActivity: z.date(),
+});
+// Organization Member Event Data Schemas
+export const AuditableEvent_OrganizationMember_InvitedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_MEMBER_INVITED),
+    organizationId: z.string(),
+    invitedUserId: z.string(),
+    invitedBy: z.string(),
+    roles: z.array(z.string()),
+    email: z.email().optional(),
+});
+export const AuditableEvent_OrganizationMember_JoinedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_MEMBER_JOINED),
+    organizationId: z.string(),
+    userId: z.string(),
+    roles: z.array(z.string()),
+    invitationId: z.string().optional(),
+});
+export const AuditableEvent_OrganizationMember_UpdatedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_MEMBER_UPDATED),
+    organizationId: z.string(),
+    memberId: z.string(),
+    changes: z.record(z.string(), z.any()),
+});
+export const AuditableEvent_OrganizationMember_RoleChangedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_MEMBER_ROLE_CHANGED),
+    organizationId: z.string(),
+    memberId: z.string(),
+    previousRoles: z.array(z.string()),
+    newRoles: z.array(z.string()),
+    changedBy: z.string(),
+});
+export const AuditableEvent_OrganizationMember_StatusChangedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_MEMBER_STATUS_CHANGED),
+    organizationId: z.string(),
+    memberId: z.string(),
+    previousStatus: z.string(),
+    newStatus: z.string(),
+    changedBy: z.string(),
+    reason: z.string().optional(),
+});
+export const AuditableEvent_OrganizationMember_RemovedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_MEMBER_REMOVED),
+    organizationId: z.string(),
+    memberId: z.string(),
+    removedUserId: z.string(),
+    removedBy: z.string(),
+    reason: z.string().optional(),
+});
+// Organization Lifecycle Event Data Schemas
+export const AuditableEvent_Organization_CreatedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_CREATED),
+    organizationId: z.string(),
+    name: z.string(),
+    slug: z.string(),
+    createdBy: z.string(),
+});
+export const AuditableEvent_Organization_UpdatedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_UPDATED),
+    organizationId: z.string(),
+    changes: z.record(z.string(), z.any()),
+    updatedBy: z.string(),
+});
+export const AuditableEvent_Organization_DeletedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_DELETED),
+    organizationId: z.string(),
+    name: z.string(),
+    slug: z.string(),
+    deletedBy: z.string(),
+    reason: z.string().optional(),
+});
+export const AuditableEvent_OrganizationNotifications_UpdatedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_NOTIFICATIONS_UPDATED),
+    organizationId: z.string(),
+    notificationsId: z.string(),
+    changes: z.record(z.string(), z.any()),
+    updatedBy: z.string(),
+});
+export const AuditableEvent_OrganizationPreferences_UpdatedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_PREFERENCES_UPDATED),
+    organizationId: z.string(),
+    preferencesId: z.string(),
+    changes: z.record(z.string(), z.any()),
+    updatedBy: z.string(),
+});
+export const AuditableEvent_OrganizationProfile_UpdatedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_PROFILE_UPDATED),
+    organizationId: z.string(),
+    profileId: z.string(),
+    changes: z.record(z.string(), z.any()),
+    updatedBy: z.string(),
+});
+export const AuditableEvent_OrganizationUnit_UpdatedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_UNIT_UPDATED),
+    organizationId: z.string(),
+    unitId: z.string(),
+    changes: z.record(z.string(), z.any()),
+    updatedBy: z.string(),
+});
+// SSO Authentication Event Data Schemas
+export const AuditableEvent_User_SSOLoginEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_SSO_LOGIN),
+    userId: z.string(),
+    email: z.email(),
+    providerRef: z.string(),
+    connectionType: z.enum(SsoConnectionType),
+    authSource: z.string().optional(),
+    organizationId: z.string().optional(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+    sessionId: z.string(),
+});
+export const AuditableEvent_User_SSOLoginFailedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_SSO_LOGIN_FAILED),
+    email: z.email().optional(),
+    providerRef: z.string().optional(),
+    connectionType: z.enum(SsoConnectionType).optional(),
+    authSource: z.string().optional(),
+    failureReason: z.string(),
+    organizationId: z.string().optional(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_SSOEnforcementBlockedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_SSO_ENFORCEMENT_BLOCKED),
+    email: z.email(),
+    attemptedProviderRef: z.string(),
+    attemptedConnectionType: z.enum(SsoConnectionType),
+    organizationId: z.string(),
+    enforcementPolicy: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_TokenRefreshedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_TOKEN_REFRESHED),
+    userId: z.string(),
+    sessionId: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+// Organization Security Management Event Data Schemas
+export const AuditableEvent_Organization_SSOConfigurationChangedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_SSO_CONFIGURATION_CHANGED),
+    organizationId: z.string(),
+    changedBy: z.string(),
+    changeType: z.enum(SsoConfigChangeType),
+    affectedProviderRef: z.string().optional(),
+    changes: z.record(z.string(), z.any()).optional(),
+});
+export const AuditableEvent_Organization_SIEMExportConfiguredEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.ORGANIZATION_SIEM_EXPORT_CONFIGURED),
+    organizationId: z.string(),
+    changedBy: z.string(),
+    changeType: z.enum(SiemExportChangeType),
+    webhookUrlDomain: z.string().optional(),
+    eventFormatConfigured: z.string().optional(),
+});
+// SCIM Directory Provisioning Event Data Schemas
+export const AuditableEvent_SCIM_TokenCreatedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.SCIM_TOKEN_CREATED),
+    organizationId: z.string(),
+    tokenDisplayName: z.string(),
+    createdByUserId: z.string(),
+    expiresAt: z.string().optional(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_SCIM_TokenRevokedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.SCIM_TOKEN_REVOKED),
+    organizationId: z.string(),
+    tokenDisplayName: z.string(),
+    revokedByUserId: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+// SCIM User Provisioning Event Data Schemas (H5+H8)
+export const AuditableEvent_SCIM_UserProvisionedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.SCIM_USER_PROVISIONED),
+    organizationId: z.string(),
+    userId: z.string(),
+    email: z.string(),
+    isNewUser: z.boolean(),
+    provisionedVia: z.string(),
+    authSource: z.string().optional(),
+});
+export const AuditableEvent_SCIM_UserUpdatedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.SCIM_USER_UPDATED),
+    organizationId: z.string(),
+    userId: z.string(),
+    operation: z.string(),
+    updatedAttributes: z.array(z.string()).optional(),
+});
+export const AuditableEvent_SCIM_UserDeactivatedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.SCIM_USER_DEACTIVATED),
+    organizationId: z.string(),
+    userId: z.string(),
+    email: z.string().optional(),
+});
+// Password Reset Event Data Schemas (H5)
+export const AuditableEvent_User_PasswordResetRequestedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_PASSWORD_RESET_REQUESTED),
+    email: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_PasswordResetCompletedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_PASSWORD_RESET_COMPLETED),
+    userId: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+// Registration & Verification Event Data Schemas (H5)
+export const AuditableEvent_User_RegisteredEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_REGISTERED),
+    userId: z.string(),
+    email: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_EmailVerifiedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_EMAIL_VERIFIED),
+    userId: z.string(),
+    email: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_VerificationEmailResentEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_VERIFICATION_EMAIL_RESENT),
+    userId: z.string(),
+    email: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+// MFA Lifecycle Event Data Schemas (H5)
+export const AuditableEvent_User_MFASetupStartedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_MFA_SETUP_STARTED),
+    userId: z.string(),
+    mfaMethod: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_MFASetupCompletedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_MFA_SETUP_COMPLETED),
+    userId: z.string(),
+    mfaMethod: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_MFAEmailOTPSentEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_MFA_EMAIL_OTP_SENT),
+    email: z.string(),
+    sessionId: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+// WebAuthn/Passkey Event Data Schemas (Phase G1)
+export const AuditableEvent_User_PasskeyRegisteredEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_PASSKEY_REGISTERED),
+    userId: z.string(),
+    email: z.string(),
+    credentialId: z.string(),
+    credentialName: z.string(),
+    credentialDeviceType: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_PasskeyAuthSuccessEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_PASSKEY_AUTHENTICATION_SUCCESS),
+    userId: z.string(),
+    email: z.string(),
+    credentialId: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+    sessionId: z.string(),
+});
+export const AuditableEvent_User_PasskeyAuthFailureEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_PASSKEY_AUTHENTICATION_FAILURE),
+    email: z.string(),
+    failureReason: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+    sessionId: z.string(),
+});
+export const AuditableEvent_User_PasskeyRemovedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_PASSKEY_REMOVED),
+    userId: z.string(),
+    email: z.string(),
+    credentialId: z.string(),
+    credentialName: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+// Magic Link Event Data Schemas (Phase G2)
+export const AuditableEvent_User_MagicLinkSentEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_MAGIC_LINK_SENT),
+    email: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_MagicLinkVerifiedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_MAGIC_LINK_VERIFIED),
+    userId: z.string(),
+    email: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+    sessionId: z.string(),
+});
+export const AuditableEvent_User_MagicLinkFailedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_MAGIC_LINK_FAILED),
+    email: z.string().optional(),
+    failureReason: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+// SMS OTP Event Data Schemas (Phase G2)
+export const AuditableEvent_User_SMSOTPSentEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_SMS_OTP_SENT),
+    phoneNumber: z.string(),
+    factorLevel: z.string(),
+    sessionId: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_SMSOTPVerifiedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_SMS_OTP_VERIFIED),
+    userId: z.string(),
+    phoneNumber: z.string(),
+    factorLevel: z.string(),
+    sessionId: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_SMSOTPFailedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_SMS_OTP_FAILED),
+    phoneNumber: z.string().optional(),
+    factorLevel: z.string(),
+    failureReason: z.string(),
+    sessionId: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+// Phone Verification Event Data Schemas (Phase G2)
+export const AuditableEvent_User_PhoneVerifiedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_PHONE_VERIFIED),
+    userId: z.string(),
+    phoneNumber: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+export const AuditableEvent_User_PhoneVerificationFailedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.USER_PHONE_VERIFICATION_FAILED),
+    phoneNumber: z.string(),
+    failureReason: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+// OAuth2 Provider Restriction Event Data Schema (Phase G3)
+export const AuditableEvent_OAuth2ProviderBlockedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.OAUTH2_PROVIDER_BLOCKED),
+    email: z.string().optional(),
+    providerRef: z.string(),
+    organizationId: z.string(),
+    reason: z.string(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+});
+// Emergency Access Event Data Schema
+export const AuditableEvent_EmergencyAccess_UsedEventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.EMERGENCY_ACCESS_USED),
+    userId: z.string(),
+    email: z.email(),
+    organizationId: z.string(),
+    reason: z.string().optional(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+    sessionId: z.string(),
+});
+export const AuditableEvent_FieldAccess_EventDataSchema = z.object({
+    eventType: z.literal(CoreAuditableEventType.FIELD_ACCESS),
+    fieldName: z.string(),
+    resourceType: z.string(),
+    resourceId: z.string().optional(),
+    operationIdentifier: z.string(),
+    isCreateOperation: z.boolean(),
+});
+// MongoDB-compatible schema using simple object for eventData
+// The discriminated union validation will be handled at the service layer
+export const AuditableEvent_DataSchema = z.record(z.string(), z.any());
+export const AuditableEvent_BaseSchema = z.object({
+    _id: z.string().isPrimaryKey().isSummaryField(),
+    // Note: .optional() must come AFTER decorators to preserve optionality in TypeScript type inference
+    userId: z.string().isSummaryField().optional(),
+    organizationId: z.string().isSummaryField().optional(),
+    riskLevel: z.enum(ResourceOperationRiskLevel).isSummaryField(),
+    eventType: z.string().isSummaryField(),
+    eventData: AuditableEvent_DataSchema,
+    /** Populated by service layer via getAuditEventClassification(). Required for CREATE (audit logs are REPOSITORY_ONLY, no API). */
+    eventCategory: z.enum(AuditEventCategory).isSummaryField(),
+    /** Populated by service layer via getAuditEventClassification(). Required for CREATE (audit logs are REPOSITORY_ONLY, no API). */
+    severity: z.enum(AuditEventSeverity).isSummaryField(),
+    createdAt: z.date().default(() => new Date()).isSummaryField().excludeFromCreate().excludeFromUpdate(),
+    updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate()
+});
+// Type-safe discriminated union for TypeScript validation (used in service layer)
+export const AuditableEvent_TypedDataSchema = z.discriminatedUnion('eventType', [
+    AuditableEvent_User_LoginEventDataSchema,
+    AuditableEvent_User_LogoutEventDataSchema,
+    AuditableEvent_User_LoginFailedEventDataSchema,
+    AuditableEvent_User_AccountLockedEventDataSchema,
+    AuditableEvent_User_SessionExpiredEventDataSchema,
+    AuditableEvent_OrganizationMember_InvitedEventDataSchema,
+    AuditableEvent_OrganizationMember_JoinedEventDataSchema,
+    AuditableEvent_OrganizationMember_UpdatedEventDataSchema,
+    AuditableEvent_OrganizationMember_RoleChangedEventDataSchema,
+    AuditableEvent_OrganizationMember_StatusChangedEventDataSchema,
+    AuditableEvent_OrganizationMember_RemovedEventDataSchema,
+    AuditableEvent_Organization_CreatedEventDataSchema,
+    AuditableEvent_Organization_UpdatedEventDataSchema,
+    AuditableEvent_Organization_DeletedEventDataSchema,
+    AuditableEvent_OrganizationNotifications_UpdatedEventDataSchema,
+    AuditableEvent_OrganizationPreferences_UpdatedEventDataSchema,
+    AuditableEvent_OrganizationProfile_UpdatedEventDataSchema,
+    AuditableEvent_OrganizationUnit_UpdatedEventDataSchema,
+    AuditableEvent_User_SSOLoginEventDataSchema,
+    AuditableEvent_User_SSOLoginFailedEventDataSchema,
+    AuditableEvent_User_SSOEnforcementBlockedEventDataSchema,
+    AuditableEvent_User_TokenRefreshedEventDataSchema,
+    AuditableEvent_Organization_SSOConfigurationChangedEventDataSchema,
+    AuditableEvent_Organization_SIEMExportConfiguredEventDataSchema,
+    AuditableEvent_SCIM_TokenCreatedEventDataSchema,
+    AuditableEvent_SCIM_TokenRevokedEventDataSchema,
+    AuditableEvent_SCIM_UserProvisionedEventDataSchema,
+    AuditableEvent_SCIM_UserUpdatedEventDataSchema,
+    AuditableEvent_SCIM_UserDeactivatedEventDataSchema,
+    AuditableEvent_User_PasswordResetRequestedEventDataSchema,
+    AuditableEvent_User_PasswordResetCompletedEventDataSchema,
+    AuditableEvent_User_RegisteredEventDataSchema,
+    AuditableEvent_User_EmailVerifiedEventDataSchema,
+    AuditableEvent_User_VerificationEmailResentEventDataSchema,
+    AuditableEvent_User_MFASetupStartedEventDataSchema,
+    AuditableEvent_User_MFASetupCompletedEventDataSchema,
+    AuditableEvent_User_MFAEmailOTPSentEventDataSchema,
+    AuditableEvent_User_PasskeyRegisteredEventDataSchema,
+    AuditableEvent_User_PasskeyAuthSuccessEventDataSchema,
+    AuditableEvent_User_PasskeyAuthFailureEventDataSchema,
+    AuditableEvent_User_PasskeyRemovedEventDataSchema,
+    AuditableEvent_User_MagicLinkSentEventDataSchema,
+    AuditableEvent_User_MagicLinkVerifiedEventDataSchema,
+    AuditableEvent_User_MagicLinkFailedEventDataSchema,
+    AuditableEvent_User_SMSOTPSentEventDataSchema,
+    AuditableEvent_User_SMSOTPVerifiedEventDataSchema,
+    AuditableEvent_User_SMSOTPFailedEventDataSchema,
+    AuditableEvent_User_PhoneVerifiedEventDataSchema,
+    AuditableEvent_User_PhoneVerificationFailedEventDataSchema,
+    AuditableEvent_OAuth2ProviderBlockedEventDataSchema,
+    AuditableEvent_EmergencyAccess_UsedEventDataSchema,
+    AuditableEvent_FieldAccess_EventDataSchema,
+]);
+//# sourceMappingURL=auditable-events.shared.schema.js.map