@iwentsourcing/core 0.1.0

package/dist/management/system/create-systems.js

@@ -0,0 +1,105 @@
+import { getOrCreate } from '../../utils/get-or-create.js';
+import { createSystemStreamInterface } from './create-system-stream-interface.js';
+import { systemAuth } from './create-system-user-context.js';
+import { authenticationStream } from '../authentication/authentication-stream.js';
+import { registryStream } from '../registry/registry-stream.js';
+import { accessStream } from '../access/access-stream.js';
+import { permissionAggregation, } from '../permission/permission-aggregation.js';
+import { createAggregationInterface } from '../create-aggregation-interface.js';
+import { createTracedLazy } from '../../lazy/create-lazy.js';
+import { createRemoteSequencer } from '../../sequencer/create-remote-sequencer.js';
+import { createAggregationSequencer } from '../../worker/create-aggregation-sequencer.js';
+import { mapAggregationEventSource } from '../map-aggregation-event-source.js';
+import { createReader } from '../../sequencer/create-reader.js';
+import { buildStreamKey } from '../../stream/build-stream-name.js';
+export function createSystems(opts) {
+    const run = 0;
+    const auth = {};
+    const access = {};
+    const registry = {};
+    const tracer = opts.runtime.telemetry.createTracer('systems');
+    function getOrCreateStream(map, tenant, stream) {
+        const streamInterface = getOrCreate(map, `${tenant}:${stream.source.pattern}`, () => createSystemStreamInterface({
+            stream: {
+                source: stream.source,
+                runtime: stream.runtime,
+            },
+            tenant,
+            runtime: opts.runtime,
+            run,
+            auth: systemAuth,
+            remote: opts.remote,
+        }));
+        return streamInterface;
+    }
+    return {
+        auth: (tenant) => getOrCreateStream(auth, tenant, authenticationStream),
+        registry: (tenant) => getOrCreateStream(registry, tenant, registryStream),
+        access: (tenant) => getOrCreateStream(access, tenant, accessStream),
+        permission(tenant) {
+            return createAggregationInterface({
+                telemetry: opts.runtime.telemetry,
+                state: permissionAggregation.source.state,
+                lazyAccess: (signal) => createTracedLazy(tracer, 'lazy-access', {
+                    attributes: {
+                        aggregationPattern: permissionAggregation.source.pattern,
+                        aggregationName: permissionAggregation.source.pattern,
+                    },
+                }, async () => {
+                    const partition = {
+                        run,
+                        tenant,
+                        realm: permissionAggregation.source.realm.name,
+                        pattern: permissionAggregation.source.pattern,
+                        version: await permissionAggregation.source.version.resolve(opts.runtime.env),
+                        name: permissionAggregation.source.pattern,
+                    };
+                    const sequencer = opts.remote
+                        ? createRemoteSequencer({
+                            runtime: opts.runtime,
+                            state: permissionAggregation.source.state,
+                            partition,
+                        }, signal)
+                        : createAggregationSequencer({ runtime: opts.runtime }, {
+                            state: permissionAggregation.source.state,
+                            events: await mapAggregationEventSource(opts.runtime.env, permissionAggregation.source.events),
+                            auth: permissionAggregation.source.auth,
+                            runtime: permissionAggregation.runtime,
+                            identifier: {
+                                version: partition.version,
+                                tenant: partition.tenant,
+                                realm: partition.realm,
+                                pattern: partition.pattern,
+                            },
+                            stateGrant: permissionAggregation.source.stateGrant,
+                            eventGrant: permissionAggregation.source.eventGrant,
+                        }, { name: partition.name, run: partition.run, args: {} }, signal);
+                    // TODO support args on system aggregations
+                    return {
+                        sequencer: sequencer,
+                        reader: createReader({
+                            partition: {
+                                tenant: partition.tenant,
+                                realm: partition.realm,
+                                pattern: permissionAggregation.source.pattern,
+                                version: await permissionAggregation.source.version.resolve(opts.runtime.env),
+                                name: buildStreamKey(permissionAggregation.source.pattern, {
+                                    args: {
+                                        name: partition.name,
+                                        run: partition.run.toString(),
+                                    },
+                                }),
+                                run,
+                            },
+                            queue: opts.runtime.queue,
+                            partitionBuilder: opts.runtime.partitionBuilder,
+                            state: permissionAggregation.source.state,
+                            telemetry: opts.runtime.telemetry,
+                        }, signal),
+                    };
+                }),
+            });
+        },
+    };
+}
+//# sourceMappingURL=create-systems.js.map

package/dist/management/system/create-systems.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-systems.js","sourceRoot":"","sources":["../../../src/management/system/create-systems.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,OAAO,EACL,qBAAqB,GAEtB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,MAAM,UAAU,aAAa,CAAC,IAG7B;IACC,MAAM,GAAG,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAGN,EAAE,CAAC;IACP,MAAM,MAAM,GAA+D,EAAE,CAAC;IAC9E,MAAM,QAAQ,GAGV,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAE9D,SAAS,iBAAiB,CAIxB,GAAoD,EACpD,MAAc,EACd,MAAmD;QAEnD,MAAM,eAAe,GAAG,WAAW,CACjC,GAAG,EACH,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EACpC,GAAG,EAAE,CACH,2BAA2B,CAAC;YAC1B,MAAM,EAAE;gBACN,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB;YACD,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG;YACH,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CACL,CAAC;QACF,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,oBAAoB,CAAC;QACvE,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC;QACzE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC;QACnE,UAAU,CAAC,MAAM;YACf,OAAO,0BAA0B,CAAC;gBAChC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK;gBACzC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CACrB,gBAAgB,CACd,MAAM,EACN,aAAa,EACb;oBACE,UAAU,EAAE;wBACV,kBAAkB,EAAE,qBAAqB,CAAC,MAAM,CAAC,OAAO;wBACxD,eAAe,EAAE,qBAAqB,CAAC,MAAM,CAAC,OAAO;qBACtD;iBACF,EACD,KAAK,IAAI,EAAE;oBACT,MAAM,SAAS,GAAG;wBAChB,GAAG;wBACH,MAAM;wBACN,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;wBAC9C,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,OAAO;wBAC7C,OAAO,EAAE,MAAM,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CACzD,IAAI,CAAC,OAAO,CAAC,GAAG,CACjB;wBACD,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,OAAO;qBAC3C,CAAC;oBACF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM;wBAC3B,CAAC,CAAC,qBAAqB,CACnB;4BACE,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK;4BACzC,SAAS;yBACV,EACD,MAAM,CACP;wBACH,CAAC,CAAC,0BAA0B,CACxB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EACzB;4BACE,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK;4BACzC,MAAM,EAAE,MAAM,yBAAyB,CACrC,IAAI,CAAC,OAAO,CAAC,GAAG,EAChB,qBAAqB,CAAC,MAAM,CAAC,MAAM,CACpC;4BACD,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI;4BACvC,OAAO,EAAE,qBAAqB,CAAC,OAAO;4BACtC,UAAU,EAAE;gCACV,OAAO,EAAE,SAAS,CAAC,OAAO;gCAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;gCACxB,KAAK,EAAE,SAAS,CAAC,KAAK;gCACtB,OAAO,EAAE,SAAS,CAAC,OAAO;6BAC3B;4BACD,UAAU,EAAE,qBAAqB,CAAC,MAAM,CAAC,UAAU;4BACnD,UAAU,EAAE,qBAAqB,CAAC,MAAM,CAAC,UAAU;yBACpD,EACD,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EACtD,MAAM,CACP,CAAC;oBACN,2CAA2C;oBAE3C,OAAO;wBACL,SAAS,EAAE,SAAS;wBACpB,MAAM,EAAE,YAAY,CAClB;4BACE,SAAS,EAAE;gCACT,MAAM,EAAE,SAAS,CAAC,MAAM;gCACxB,KAAK,EAAE,SAAS,CAAC,KAAK;gCACtB,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,OAAO;gCAC7C,OAAO,EACL,MAAM,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CACjB;gCACH,IAAI,EAAE,cAAc,CAClB,qBAAqB,CAAC,MAAM,CAAC,OAAO,EACpC;oCACE,IAAI,EAAE;wCACJ,IAAI,EAAE,SAAS,CAAC,IAAI;wCACpB,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE;qCAC9B;iCACF,CACF;gCACD,GAAG;6BACJ;4BACD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;4BACzB,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;4BAC/C,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK;4BACzC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;yBAClC,EACD,MAAM,CACP;qBACF,CAAC;gBACJ,CAAC,CACF;aACJ,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/management/system/create-systems.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/management/system/create-systems.test.js

@@ -0,0 +1,58 @@
+import { describe, it } from 'node:test';
+import { createSystems } from './create-systems.js';
+import { createTestRuntime } from '../../testing/create-test-case.js';
+import { anonymousAuth } from '../../event-store/anonymous-auth.js';
+import { todoExampleStream } from '../../example/todo-example.js';
+import { toArray } from '../../storage/to-array.js';
+import assert from 'node:assert';
+describe('create-systems', (ctx) => {
+    const runtime = createTestRuntime(ctx.signal);
+    const systems = createSystems({ runtime, remote: false });
+    const access = systems.access('tenant');
+    const registry = systems.registry('tenant');
+    it('should access stream', async (test) => {
+        await access.push('access-stream', {
+            events: todoExampleStream.source.events,
+            state: todoExampleStream.source.state,
+            realm: 'realm',
+            version: 'version',
+            pattern: 'pattern',
+            args: {},
+            auth: anonymousAuth(),
+            name: 'name',
+            stateGrant: todoExampleStream.source.stateGrant,
+            eventGrant: todoExampleStream.source.eventGrant,
+        }, { signal: test.signal, id: 'a', await: true });
+        const streams = await toArray(access.snapshot('streams').range(null, { signal: test.signal }));
+        assert.equal(streams.length, 1);
+    });
+    it('should register stream', async (test) => {
+        await registry.push('register-tenant', { tenant: 'tenant' }, { signal: test.signal, id: 'reg', await: true });
+        await registry.push('upload-definition', {
+            tenant: 'tenant',
+            name: 'name',
+            streams: [
+                {
+                    pattern: 'pattern',
+                    states: {},
+                    events: {},
+                    outputs: {},
+                    realm: 'realm',
+                    version: 'version',
+                    auth: { allowAnonymous: false },
+                    runtime: {
+                        source: '',
+                        exportName: '',
+                    },
+                    stateGrant: [],
+                    eventGrant: [],
+                },
+            ],
+            aggregations: [],
+            authsProviders: {},
+        }, { signal: test.signal, id: 'a', await: true });
+        const streams = await toArray(registry.snapshot('streams').range(null, { signal: test.signal }));
+        assert.equal(streams.length, 1);
+    });
+});
+//# sourceMappingURL=create-systems.test.js.map

package/dist/management/system/create-systems.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-systems.test.js","sourceRoot":"","sources":["../../../src/management/system/create-systems.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE;IACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE5C,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACxC,MAAM,MAAM,CAAC,IAAI,CACf,eAAe,EACf;YACE,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,MAAM;YACvC,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,KAAK;YAErC,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,SAAS;YAElB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,aAAa,EAAE;YACrB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,iBAAiB,CAAC,MAAM,CAAC,UAAU;YAC/C,UAAU,EAAE,iBAAiB,CAAC,MAAM,CAAC,UAAU;SAChD,EACD,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAC9C,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAChE,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC1C,MAAM,QAAQ,CAAC,IAAI,CACjB,iBAAiB,EACjB,EAAE,MAAM,EAAE,QAAQ,EAAE,EACpB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAChD,CAAC;QACF,MAAM,QAAQ,CAAC,IAAI,CACjB,mBAAmB,EACnB;YACE,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE;gBACP;oBACE,OAAO,EAAE,SAAS;oBAClB,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,EAAE;oBACV,OAAO,EAAE,EAAE;oBACX,KAAK,EAAE,OAAO;oBACd,OAAO,EAAE,SAAS;oBAClB,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;oBAC/B,OAAO,EAAE;wBACP,MAAM,EAAE,EAAE;wBACV,UAAU,EAAE,EAAE;qBACf;oBACD,UAAU,EAAE,EAAE;oBACd,UAAU,EAAE,EAAE;iBACf;aACF;YACD,YAAY,EAAE,EAAE;YAChB,cAAc,EAAE,EAAE;SACnB,EACD,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAC9C,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAClE,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/management/system/in-memory-systems.d.ts

@@ -0,0 +1,4 @@
+import { Systems } from './systems.js';
+export interface InMemorySystems extends Systems {
+    remote: false;
+}

package/dist/management/system/in-memory-systems.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=in-memory-systems.js.map

package/dist/management/system/in-memory-systems.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-systems.js","sourceRoot":"","sources":["../../../src/management/system/in-memory-systems.ts"],"names":[],"mappings":""}

package/dist/management/system/iwentsourcing-realm.d.ts

@@ -0,0 +1,384 @@
+export declare const iwentsourcingAuthProviders: {
+    readonly github: Readonly<{
+        type: "token";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        };
+        clientId: string;
+        issuer: string;
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        };
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        };
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        };
+        user: {
+            url: string;
+            tokenAttributes: string[] | undefined;
+        };
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+    }>;
+    readonly microsoft: Readonly<{
+        type: "openid";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        } | undefined;
+        clientId: string | undefined;
+        issuer: string | string[];
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        } | undefined;
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        } | undefined;
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        } | undefined;
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+        audience: string | string[] | undefined;
+        jwks: {
+            url: string;
+            subKey: string;
+        };
+    }>;
+    readonly google: Readonly<{
+        type: "openid";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        } | undefined;
+        clientId: string | undefined;
+        issuer: string | string[];
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        } | undefined;
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        } | undefined;
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        } | undefined;
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+        audience: string | string[] | undefined;
+        jwks: {
+            url: string;
+            subKey: string;
+        };
+    }>;
+    readonly github_actions: Readonly<{
+        type: "openid";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        } | undefined;
+        clientId: string | undefined;
+        issuer: string | string[];
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        } | undefined;
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        } | undefined;
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        } | undefined;
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+        audience: string | string[] | undefined;
+        jwks: {
+            url: string;
+            subKey: string;
+        };
+    }>;
+    readonly iwentsourcing: {
+        type: "jwt";
+        secret: string | {
+            type: "secret";
+            name: string;
+        };
+        issuer: string;
+        algorithm: "HS256";
+        audience: string;
+        expirationTime: string;
+    };
+};
+export declare const iwentsourcingRealm: Readonly<import("../../realm/realm-definition.js").RealmDefinition<{
+    readonly github: Readonly<{
+        type: "token";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        };
+        clientId: string;
+        issuer: string;
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        };
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        };
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        };
+        user: {
+            url: string;
+            tokenAttributes: string[] | undefined;
+        };
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+    }>;
+    readonly microsoft: Readonly<{
+        type: "openid";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        } | undefined;
+        clientId: string | undefined;
+        issuer: string | string[];
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        } | undefined;
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        } | undefined;
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        } | undefined;
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+        audience: string | string[] | undefined;
+        jwks: {
+            url: string;
+            subKey: string;
+        };
+    }>;
+    readonly google: Readonly<{
+        type: "openid";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        } | undefined;
+        clientId: string | undefined;
+        issuer: string | string[];
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        } | undefined;
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        } | undefined;
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        } | undefined;
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+        audience: string | string[] | undefined;
+        jwks: {
+            url: string;
+            subKey: string;
+        };
+    }>;
+    readonly github_actions: Readonly<{
+        type: "openid";
+        token: {
+            url: string;
+            formData: {
+                [key: string]: string;
+            };
+            tokenAttributes: string[] | undefined;
+        } | undefined;
+        clientId: string | undefined;
+        issuer: string | string[];
+        clientSecret: string | {
+            type: "secret";
+            name: string;
+        } | undefined;
+        authorize: {
+            url: string;
+            queryParams: {
+                [key: string]: string;
+            };
+        } | undefined;
+        deviceCode: {
+            clientSecret: boolean;
+            verificationUriName: string;
+            codeUrl: string;
+            grantType: string;
+            scope: string | undefined;
+        } | undefined;
+        jwt: {
+            type: "jwt";
+            secret: string | {
+                type: "secret";
+                name: string;
+            };
+            issuer: string;
+            algorithm: "HS256";
+            audience: string;
+            expirationTime: string;
+        };
+        audience: string | string[] | undefined;
+        jwks: {
+            url: string;
+            subKey: string;
+        };
+    }>;
+    readonly iwentsourcing: {
+        type: "jwt";
+        secret: string | {
+            type: "secret";
+            name: string;
+        };
+        issuer: string;
+        algorithm: "HS256";
+        audience: string;
+        expirationTime: string;
+    };
+}>>;

package/dist/management/system/iwentsourcing-realm.js

@@ -0,0 +1,39 @@
+import { defineRealm } from '../../realm/define-realm.js';
+import { createGithubOAuth } from '../../authentication/providers/github.js';
+import { secret } from '../../realm/secret.js';
+import { createGoogleOAuth } from '../../authentication/providers/google.js';
+import { githubActions } from '../../authentication/providers/github-actions.js';
+import { createMicrosoftOAuth } from '../../authentication/providers/microsoft.js';
+import { jwtStore } from '../../authentication/jwt-store.js';
+export const iwentsourcingAuthProviders = {
+    github: createGithubOAuth({
+        clientId: 'Ov23liUI5zNTwZYM3HxE',
+        clientSecret: secret('GITHUB_CLIENT_SECRET'),
+    }),
+    microsoft: createMicrosoftOAuth({
+        clientId: 'b7cd7686-6e5c-4224-a1d3-b974f00635c7',
+        clientSecret: secret('MICROSOFT_CLIENT_SECRET'),
+        tenant: 'common',
+    }),
+    google: createGoogleOAuth({
+        clientId: '520005346035-rbe6toslf223ks3cocktgfvqaurcg4dq.apps.googleusercontent.com',
+        clientSecret: secret('GOOGLE_CLIENT_SECRET'),
+    }),
+    github_actions: githubActions({
+        jwt: {
+            secret: secret('GITHUB_ACTIONS_SECRET'),
+            issuer: 'github_actions',
+            audience: 'github_actions',
+        },
+    }),
+    iwentsourcing: jwtStore({
+        secret: secret('JWT_STORE_SECRET'),
+        issuer: 'iwentsourcing',
+        algorithm: 'HS256',
+        audience: 'iwentsourcing',
+    }),
+};
+export const iwentsourcingRealm = defineRealm('iwentsourcing', {
+    providers: iwentsourcingAuthProviders,
+});
+//# sourceMappingURL=iwentsourcing-realm.js.map

package/dist/management/system/iwentsourcing-realm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iwentsourcing-realm.js","sourceRoot":"","sources":["../../../src/management/system/iwentsourcing-realm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,kDAAkD,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAE7D,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,MAAM,EAAE,iBAAiB,CAAC;QACxB,QAAQ,EAAE,sBAAsB;QAChC,YAAY,EAAE,MAAM,CAAC,sBAAsB,CAAC;KAC7C,CAAC;IACF,SAAS,EAAE,oBAAoB,CAAC;QAC9B,QAAQ,EAAE,sCAAsC;QAChD,YAAY,EAAE,MAAM,CAAC,yBAAyB,CAAC;QAC/C,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,MAAM,EAAE,iBAAiB,CAAC;QACxB,QAAQ,EACN,0EAA0E;QAC5E,YAAY,EAAE,MAAM,CAAC,sBAAsB,CAAC;KAC7C,CAAC;IACF,cAAc,EAAE,aAAa,CAAC;QAC5B,GAAG,EAAE;YACH,MAAM,EAAE,MAAM,CAAC,uBAAuB,CAAC;YACvC,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,gBAAgB;SAC3B;KACF,CAAC;IACF,aAAa,EAAE,QAAQ,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC,kBAAkB,CAAC;QAClC,MAAM,EAAE,eAAe;QACvB,SAAS,EAAE,OAAO;QAClB,QAAQ,EAAE,eAAe;KAC1B,CAAC;CACM,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC,eAAe,EAAE;IAC7D,SAAS,EAAE,0BAA0B;CACtC,CAAC,CAAC"}

package/dist/management/system/remote-systems.d.ts

@@ -0,0 +1,4 @@
+import { Systems } from './systems.js';
+export interface RemoteSystems extends Systems {
+    remote: true;
+}

package/dist/management/system/remote-systems.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=remote-systems.js.map

package/dist/management/system/remote-systems.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-systems.js","sourceRoot":"","sources":["../../../src/management/system/remote-systems.ts"],"names":[],"mappings":""}

package/dist/management/system/systems.d.ts

@@ -0,0 +1,15 @@
+import { StreamInterface } from '../../stream/stream-interface.js';
+import { AccessState } from '../access/access-state.js';
+import { AccessEvents } from '../access/access-events.js';
+import { RegistryState } from '../registry/registry-state.js';
+import { RegistryEvents } from '../registry/registry-events.js';
+import { AuthenticationState } from '../authentication/authentication-state.js';
+import { AuthenticationEvents } from '../authentication/authentication-events.js';
+import { AggregateInterface } from '../../aggregation/aggregate-interface.js';
+import { PermissionState } from '../permission/permission-aggregation.js';
+export interface Systems {
+    access(tenant: string): StreamInterface<AccessState, AccessEvents>;
+    registry(tenant: string): StreamInterface<RegistryState, RegistryEvents>;
+    auth(tenant: string): StreamInterface<AuthenticationState, AuthenticationEvents>;
+    permission(tenant: string): AggregateInterface<PermissionState>;
+}

package/dist/management/system/systems.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=systems.js.map

package/dist/management/system/systems.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systems.js","sourceRoot":"","sources":["../../../src/management/system/systems.ts"],"names":[],"mappings":""}

package/dist/management/user-context.d.ts

@@ -0,0 +1,14 @@
+import { TypeOf } from '../typing/type-of.js';
+export declare const UserContext: import("../typing/object-type-description.js").ObjectTypeDescription<{
+    name: string;
+    auth: {
+        sub: string;
+        aud: string;
+        iss: string;
+    };
+    authId: string;
+    args: {
+        [key: string]: string;
+    };
+}>;
+export type UserContext = TypeOf<typeof UserContext>;