@iwentsourcing/core 0.1.0

package/dist/management/authentication/auth-management.d.ts

@@ -0,0 +1,15 @@
+import { RealmAuthorizeOptions } from './realm-authorize-options.js';
+import { EventAuth } from '../../event-store/event-auth.js';
+import { AuthDeviceResponse } from '../../authentication/oauth/auth-device-response.js';
+import { TokenResponse } from './token-response.js';
+import { PublicAuthProvidersResponse } from '../../authentication/public-auth-providers.js';
+export interface AuthManagement {
+    publicProviders(tenant: string, realm: string, signal: AbortSignal): Promise<PublicAuthProvidersResponse>;
+    authorize(tenant: string, realm: string, opts: RealmAuthorizeOptions, signal: AbortSignal): Promise<TokenResponse>;
+    token(tenant: string, realm: string, provider: string, token: string, signal: AbortSignal): Promise<TokenResponse>;
+    context(tenant: string, realm: string, token: string | null, signal: AbortSignal): Promise<EventAuth>;
+    refresh(tenant: string, realm: string, provider: string, username: string, refreshToken: string, signal: AbortSignal): Promise<TokenResponse>;
+    deviceCode(tenant: string, realm: string, provider: string, signal: AbortSignal): AsyncGenerator<AuthDeviceResponse>;
+    login(tenant: string, realm: string, provider: string, username: string, password: string, signal: AbortSignal): Promise<TokenResponse>;
+    register(tenant: string, realm: string, provider: string, username: string, password: string, signal: AbortSignal): Promise<TokenResponse>;
+}

package/dist/management/authentication/auth-management.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth-management.js.map

package/dist/management/authentication/auth-management.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-management.js","sourceRoot":"","sources":["../../../src/management/authentication/auth-management.ts"],"names":[],"mappings":""}

package/dist/management/authentication/authentication-events.d.ts

@@ -0,0 +1,101 @@
+export declare const RegisterUserEvent: import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+    realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    username: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    passwordHash: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    refreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+}>> & {
+    key: "registered-user";
+};
+export declare const LoginUserEvent: import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+    realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    username: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    passwordHash: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    refreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+}>> & {
+    key: "login-user";
+};
+export declare const RefreshSessionEvent: import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+    realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    username: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    currentRefreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    newRefreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    externalRefreshToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+    externalAccessToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+    externalAttributes: import("../../typing/optional-type-description.js").OptionalTypeDescription<{
+        [key: string]: string;
+    }>;
+    clientSecret: import("../../typing/boolean-type-description.js").BooleanTypeDescription<boolean>;
+}>> & {
+    key: "refresh-session";
+};
+export declare const AuthorizeSessionEvent: import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+    realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    sub: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    aud: import("../../typing/union-type-description.js").UnionTypeDescription<string | string[]>;
+    iss: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    refreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    externalRefreshToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+    externalAccessToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+    externalAttributes: import("../../typing/optional-type-description.js").OptionalTypeDescription<{
+        [key: string]: string;
+    }>;
+    clientSecret: import("../../typing/boolean-type-description.js").BooleanTypeDescription<boolean>;
+}>> & {
+    key: "authorize-session";
+};
+export declare const AuthenticationEvents: {
+    "registered-user": import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+        realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        username: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        passwordHash: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        refreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    }>> & {
+        key: "registered-user";
+    };
+    "login-user": import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+        realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        username: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        passwordHash: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        refreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    }>> & {
+        key: "login-user";
+    };
+    "refresh-session": import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+        realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        username: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        currentRefreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        newRefreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        externalRefreshToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+        externalAccessToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+        externalAttributes: import("../../typing/optional-type-description.js").OptionalTypeDescription<{
+            [key: string]: string;
+        }>;
+        clientSecret: import("../../typing/boolean-type-description.js").BooleanTypeDescription<boolean>;
+    }>> & {
+        key: "refresh-session";
+    };
+    "authorize-session": import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+        realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        sub: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        aud: import("../../typing/union-type-description.js").UnionTypeDescription<string | string[]>;
+        iss: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        refreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        externalRefreshToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+        externalAccessToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+        externalAttributes: import("../../typing/optional-type-description.js").OptionalTypeDescription<{
+            [key: string]: string;
+        }>;
+        clientSecret: import("../../typing/boolean-type-description.js").BooleanTypeDescription<boolean>;
+    }>> & {
+        key: "authorize-session";
+    };
+};
+export type AuthenticationEvents = typeof AuthenticationEvents;

package/dist/management/authentication/authentication-events.js

@@ -0,0 +1,52 @@
+import { string } from '../../typing/string.js';
+import { union } from '../../typing/union.js';
+import { array } from '../../typing/array.js';
+import { optional } from '../../typing/optional.js';
+import { defineEvents } from '../../stream/define-events.js';
+import { record } from '../../typing/record.js';
+import { boolean } from '../../typing/boolean.js';
+import { declareEvent } from '../../storage/declare-event.js';
+export const RegisterUserEvent = declareEvent('registered-user', {
+    realm: string(),
+    provider: string(),
+    username: string(),
+    passwordHash: string(),
+    refreshToken: string(),
+});
+export const LoginUserEvent = declareEvent('login-user', {
+    realm: string(),
+    provider: string(),
+    username: string(),
+    passwordHash: string(),
+    refreshToken: string(),
+});
+export const RefreshSessionEvent = declareEvent('refresh-session', {
+    realm: string(),
+    provider: string(),
+    username: string(),
+    currentRefreshToken: string(),
+    newRefreshToken: string(),
+    externalRefreshToken: optional(string()),
+    externalAccessToken: optional(string()),
+    externalAttributes: optional(record(string(), string())),
+    clientSecret: boolean(),
+});
+export const AuthorizeSessionEvent = declareEvent('authorize-session', {
+    realm: string(),
+    provider: string(),
+    sub: string(),
+    aud: union('Audience', [string(), array(string())]),
+    iss: string(),
+    refreshToken: string(),
+    externalRefreshToken: optional(string()),
+    externalAccessToken: optional(string()),
+    externalAttributes: optional(record(string(), string())),
+    clientSecret: boolean(),
+});
+export const AuthenticationEvents = defineEvents([
+    RegisterUserEvent,
+    LoginUserEvent,
+    RefreshSessionEvent,
+    AuthorizeSessionEvent,
+]);
+//# sourceMappingURL=authentication-events.js.map

package/dist/management/authentication/authentication-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-events.js","sourceRoot":"","sources":["../../../src/management/authentication/authentication-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAE9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC,iBAAiB,EAAE;IAC/D,KAAK,EAAE,MAAM,EAAE;IACf,QAAQ,EAAE,MAAM,EAAE;IAClB,QAAQ,EAAE,MAAM,EAAE;IAClB,YAAY,EAAE,MAAM,EAAE;IACtB,YAAY,EAAE,MAAM,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC,YAAY,EAAE;IACvD,KAAK,EAAE,MAAM,EAAE;IACf,QAAQ,EAAE,MAAM,EAAE;IAClB,QAAQ,EAAE,MAAM,EAAE;IAClB,YAAY,EAAE,MAAM,EAAE;IACtB,YAAY,EAAE,MAAM,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,iBAAiB,EAAE;IACjE,KAAK,EAAE,MAAM,EAAE;IACf,QAAQ,EAAE,MAAM,EAAE;IAClB,QAAQ,EAAE,MAAM,EAAE;IAClB,mBAAmB,EAAE,MAAM,EAAE;IAC7B,eAAe,EAAE,MAAM,EAAE;IACzB,oBAAoB,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACxC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACvC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,YAAY,EAAE,OAAO,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC,mBAAmB,EAAE;IACrE,KAAK,EAAE,MAAM,EAAE;IACf,QAAQ,EAAE,MAAM,EAAE;IAClB,GAAG,EAAE,MAAM,EAAE;IACb,GAAG,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnD,GAAG,EAAE,MAAM,EAAE;IACb,YAAY,EAAE,MAAM,EAAE;IACtB,oBAAoB,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACxC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACvC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,YAAY,EAAE,OAAO,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;IAC/C,iBAAiB;IACjB,cAAc;IACd,mBAAmB;IACnB,qBAAqB;CACtB,CAAC,CAAC"}

package/dist/management/authentication/authentication-state.d.ts

@@ -0,0 +1,77 @@
+import { TypeOfEvent } from '../../typing/type-of.js';
+export declare const AuthenticationUser: import("../../storage/state-declaration.js").StateDeclaration<"user", {
+    realm: string;
+    provider: string;
+    username: string;
+    createdAt: Date;
+    attributes: {
+        [key: string]: string;
+    } | undefined;
+}, "realm" | "provider" | "username", Record<string, never> & Record<"provider", import("../../storage/state-declaration.js").StateIndex<{
+    realm: string;
+    provider: string;
+    username: string;
+    createdAt: Date;
+    attributes: {
+        [key: string]: string;
+    } | undefined;
+}, ["realm", "provider", "username"]>>>;
+export type AuthenticationUser = TypeOfEvent<typeof AuthenticationUser>;
+export declare const AuthenticationState: {
+    user: import("../../storage/state-declaration.js").StateDeclaration<"user", {
+        realm: string;
+        provider: string;
+        username: string;
+        createdAt: Date;
+        attributes: {
+            [key: string]: string;
+        } | undefined;
+    }, "realm" | "provider" | "username", Record<string, never> & Record<"provider", import("../../storage/state-declaration.js").StateIndex<{
+        realm: string;
+        provider: string;
+        username: string;
+        createdAt: Date;
+        attributes: {
+            [key: string]: string;
+        } | undefined;
+    }, ["realm", "provider", "username"]>>>;
+    userCredentials: import("../../storage/state-declaration.js").StateDeclaration<"userCredentials", {
+        realm: string;
+        provider: string;
+        username: string;
+        createdAt: Date;
+        password: string;
+    }, "realm" | "provider" | "username", Record<string, never> & Record<"provider", import("../../storage/state-declaration.js").StateIndex<{
+        realm: string;
+        provider: string;
+        username: string;
+        createdAt: Date;
+        password: string;
+    }, ["realm", "provider", "username"]>>>;
+    userSession: import("../../storage/state-declaration.js").StateDeclaration<"userSession", {
+        realm: string;
+        provider: string;
+        username: string;
+        createdAt: Date;
+        refreshToken: string;
+        externalRefreshToken: string | undefined;
+        externalAccessToken: string | undefined;
+        externalAttributes: {
+            [key: string]: string;
+        } | undefined;
+        clientSecret: boolean;
+    }, "realm" | "provider" | "username" | "refreshToken", Record<string, never> & Record<"provider", import("../../storage/state-declaration.js").StateIndex<{
+        realm: string;
+        provider: string;
+        username: string;
+        createdAt: Date;
+        refreshToken: string;
+        externalRefreshToken: string | undefined;
+        externalAccessToken: string | undefined;
+        externalAttributes: {
+            [key: string]: string;
+        } | undefined;
+        clientSecret: boolean;
+    }, ["realm", "provider", "username"]>>>;
+};
+export type AuthenticationState = typeof AuthenticationState;

package/dist/management/authentication/authentication-state.js

@@ -0,0 +1,36 @@
+import { defineState } from '../../storage/define-state.js';
+import { declareState } from '../../storage/declare-state.js';
+import { string } from '../../typing/string.js';
+import { date } from '../../typing/date.js';
+import { optional } from '../../typing/optional.js';
+import { record } from '../../typing/record.js';
+import { boolean } from '../../typing/boolean.js';
+export const AuthenticationUser = declareState('user', {
+    realm: string(),
+    provider: string(),
+    username: string(),
+    createdAt: date(),
+    attributes: optional(record(string(), string())),
+}, ['realm', 'provider', 'username']).index('provider', ['realm', 'provider', 'username']);
+export const AuthenticationState = defineState([
+    AuthenticationUser,
+    declareState('userCredentials', {
+        realm: string(),
+        provider: string(),
+        username: string(),
+        password: string(),
+        createdAt: date(),
+    }, ['realm', 'provider', 'username']).index('provider', ['realm', 'provider', 'username']),
+    declareState('userSession', {
+        realm: string(),
+        provider: string(),
+        username: string(),
+        refreshToken: string(),
+        createdAt: date(),
+        externalRefreshToken: optional(string()),
+        externalAccessToken: optional(string()),
+        externalAttributes: optional(record(string(), string())),
+        clientSecret: boolean(),
+    }, ['realm', 'provider', 'username', 'refreshToken']).index('provider', ['realm', 'provider', 'username']),
+]);
+//# sourceMappingURL=authentication-state.js.map

package/dist/management/authentication/authentication-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-state.js","sourceRoot":"","sources":["../../../src/management/authentication/authentication-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGlD,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAC5C,MAAM,EACN;IACE,KAAK,EAAE,MAAM,EAAE;IACf,QAAQ,EAAE,MAAM,EAAE;IAClB,QAAQ,EAAE,MAAM,EAAE;IAClB,SAAS,EAAE,IAAI,EAAE;IACjB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;CACjD,EACD,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAU,CAC3C,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC,CAAC;AAGhE,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;IAC7C,kBAAkB;IAClB,YAAY,CACV,iBAAiB,EACjB;QACE,KAAK,EAAE,MAAM,EAAE;QACf,QAAQ,EAAE,MAAM,EAAE;QAClB,QAAQ,EAAE,MAAM,EAAE;QAClB,QAAQ,EAAE,MAAM,EAAE;QAClB,SAAS,EAAE,IAAI,EAAE;KAClB,EACD,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAU,CAC3C,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;IAC/D,YAAY,CACV,aAAa,EACb;QACE,KAAK,EAAE,MAAM,EAAE;QACf,QAAQ,EAAE,MAAM,EAAE;QAClB,QAAQ,EAAE,MAAM,EAAE;QAClB,YAAY,EAAE,MAAM,EAAE;QACtB,SAAS,EAAE,IAAI,EAAE;QACjB,oBAAoB,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACxD,YAAY,EAAE,OAAO,EAAE;KACxB,EACD,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,CAAU,CAC3D,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;CAChE,CAAC,CAAC"}

package/dist/management/authentication/authentication-stream.d.ts

@@ -0,0 +1,298 @@
+export declare const authenticationStream: import("../../runtime/host-runtime.js").StreamHostRuntime<{
+    user: import("../../storage/state-declaration.js").StateDeclaration<"user", {
+        realm: string;
+        provider: string;
+        createdAt: Date;
+        attributes: {
+            [key: string]: string;
+        } | undefined;
+        username: string;
+    }, "realm" | "provider" | "username", Record<string, never> & Record<"provider", import("../../storage/state-declaration.js").StateIndex<{
+        realm: string;
+        provider: string;
+        createdAt: Date;
+        attributes: {
+            [key: string]: string;
+        } | undefined;
+        username: string;
+    }, ["realm", "provider", "username"]>>>;
+    userCredentials: import("../../storage/state-declaration.js").StateDeclaration<"userCredentials", {
+        realm: string;
+        provider: string;
+        createdAt: Date;
+        username: string;
+        password: string;
+    }, "realm" | "provider" | "username", Record<string, never> & Record<"provider", import("../../storage/state-declaration.js").StateIndex<{
+        realm: string;
+        provider: string;
+        createdAt: Date;
+        username: string;
+        password: string;
+    }, ["realm", "provider", "username"]>>>;
+    userSession: import("../../storage/state-declaration.js").StateDeclaration<"userSession", {
+        realm: string;
+        clientSecret: boolean;
+        provider: string;
+        createdAt: Date;
+        username: string;
+        refreshToken: string;
+        externalRefreshToken: string | undefined;
+        externalAccessToken: string | undefined;
+        externalAttributes: {
+            [key: string]: string;
+        } | undefined;
+    }, "realm" | "provider" | "username" | "refreshToken", Record<string, never> & Record<"provider", import("../../storage/state-declaration.js").StateIndex<{
+        realm: string;
+        clientSecret: boolean;
+        provider: string;
+        createdAt: Date;
+        username: string;
+        refreshToken: string;
+        externalRefreshToken: string | undefined;
+        externalAccessToken: string | undefined;
+        externalAttributes: {
+            [key: string]: string;
+        } | undefined;
+    }, ["realm", "provider", "username"]>>>;
+}, {
+    "registered-user": import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+        realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        username: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        passwordHash: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        refreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    }>> & {
+        key: "registered-user";
+    };
+    "login-user": import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+        realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        username: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        passwordHash: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        refreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+    }>> & {
+        key: "login-user";
+    };
+    "refresh-session": import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+        realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        username: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        currentRefreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        newRefreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        externalRefreshToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+        externalAccessToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+        externalAttributes: import("../../typing/optional-type-description.js").OptionalTypeDescription<{
+            [key: string]: string;
+        }>;
+        clientSecret: import("../../typing/boolean-type-description.js").BooleanTypeDescription<boolean>;
+    }>> & {
+        key: "refresh-session";
+    };
+    "authorize-session": import("../../event-store/event-declarations.js").EventDeclaration<import("../../storage/event-props-output.js").EventPropsOutput<{
+        realm: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        provider: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        sub: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        aud: import("../../typing/union-type-description.js").UnionTypeDescription<string | string[]>;
+        iss: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        refreshToken: import("../../typing/string-type-description.js").StringTypeDescription<string>;
+        externalRefreshToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+        externalAccessToken: import("../../typing/optional-type-description.js").OptionalTypeDescription<string>;
+        externalAttributes: import("../../typing/optional-type-description.js").OptionalTypeDescription<{
+            [key: string]: string;
+        }>;
+        clientSecret: import("../../typing/boolean-type-description.js").BooleanTypeDescription<boolean>;
+    }>> & {
+        key: "authorize-session";
+    };
+}, {}, Readonly<import("../../realm/realm-definition.js").RealmDefinition<{
+    readonly github: Readonly<{
+        type: "token";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        };
+        clientId: string;
+        issuer: string;
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        };
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        };
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        };
+        user: {
+            url: string;
+            tokenAttributes: string[] | undefined;
+        };
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+    }>;
+    readonly microsoft: Readonly<{
+        type: "openid";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        } | undefined;
+        clientId: string | undefined;
+        issuer: string | string[];
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        } | undefined;
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        } | undefined;
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        } | undefined;
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+        audience: string | string[] | undefined;
+        jwks: {
+            url: string;
+            subKey: string;
+        };
+    }>;
+    readonly google: Readonly<{
+        type: "openid";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        } | undefined;
+        clientId: string | undefined;
+        issuer: string | string[];
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        } | undefined;
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        } | undefined;
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        } | undefined;
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+        audience: string | string[] | undefined;
+        jwks: {
+            url: string;
+            subKey: string;
+        };
+    }>;
+    readonly github_actions: Readonly<{
+        type: "openid";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        } | undefined;
+        clientId: string | undefined;
+        issuer: string | string[];
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        } | undefined;
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        } | undefined;
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        } | undefined;
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+        audience: string | string[] | undefined;
+        jwks: {
+            url: string;
+            subKey: string;
+        };
+    }>;
+    readonly iwentsourcing: {
+        type: "jwt";
+        secret: string | {
+            type: "secret";
+            name: string;
+        };
+        issuer: string;
+        algorithm: "HS256";
+        audience: string;
+        expirationTime: string;
+    };
+}>>>;