import { jwtConfig } from "../auth/authenticate/Authenticator"; import { CustomOAuthStrategy, OAuthStrategy, PasswordStrategy } from "../auth/authenticate/strategies"; import { s } from "bknd/utils"; export declare const Strategies: { readonly password: { readonly cls: typeof PasswordStrategy; readonly schema: s.ObjectSchema<{ readonly hashing: s.StringSchema<{ readonly enum: readonly ["plain", "sha256", "bcrypt"]; readonly default: "sha256"; }> & { readonly enum: readonly ["plain", "sha256", "bcrypt"]; readonly default: "sha256"; }; readonly rounds: { readonly maximum: 10; readonly minimum: 1; } & s.Schema; readonly minLength: { readonly default: 8; readonly minimum: 1; } & s.Schema; }, s.Merge>; }; readonly oauth: { readonly cls: typeof OAuthStrategy; readonly schema: s.ObjectSchema<{ readonly name: s.StringSchema<{ readonly enum: ("google" | "github")[]; }> & { readonly enum: ("google" | "github")[]; }; readonly type: s.StringSchema<{ readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oauth2"; }> & { readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oauth2"; }; readonly client: s.ObjectSchema<{ readonly client_id: s.StringSchema & s.IStringOptions; readonly client_secret: s.StringSchema & s.IStringOptions; }, s.Merge>; }, { readonly title: "OAuth"; }> & { readonly title: "OAuth"; }; }; readonly custom_oauth: { readonly cls: typeof CustomOAuthStrategy; readonly schema: s.ObjectSchema<{ readonly type: s.StringSchema<{ readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oidc"; }> & { readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oidc"; }; readonly name: s.StringSchema & s.IStringOptions; readonly client: s.ObjectSchema<{ readonly client_id: s.StringSchema & s.IStringOptions; readonly client_secret: s.StringSchema & s.IStringOptions; readonly token_endpoint_auth_method: s.StringSchema<{ readonly enum: readonly ["client_secret_basic"]; }> & { readonly enum: readonly ["client_secret_basic"]; }; }, s.IObjectOptions> & s.IObjectOptions; readonly as: s.ObjectSchema<{ readonly issuer: s.StringSchema & s.IStringOptions; readonly code_challenge_methods_supported: { readonly enum: ["S256"]; } & s.Schema; readonly scopes_supported: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; $defs?: Record | undefined; contains?: s.Schema | undefined; minContains?: number | undefined; maxContains?: number | undefined; prefixItems?: s.Schema[] | undefined; uniqueItems?: boolean | undefined; maxItems?: number | undefined; minItems?: number | undefined; readonly items?: (s.StringSchema & s.IStringOptions) | undefined; } & s.Schema; readonly scope_separator: { readonly default: " "; } & s.Schema; readonly authorization_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; readonly token_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; readonly userinfo_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; }, s.Merge>; }, s.Merge<{ readonly title: "Custom OAuth"; } & { additionalProperties: false; }>>; }; }; export declare const STRATEGIES: { readonly password: { readonly cls: typeof PasswordStrategy; readonly schema: s.ObjectSchema<{ readonly hashing: s.StringSchema<{ readonly enum: readonly ["plain", "sha256", "bcrypt"]; readonly default: "sha256"; }> & { readonly enum: readonly ["plain", "sha256", "bcrypt"]; readonly default: "sha256"; }; readonly rounds: { readonly maximum: 10; readonly minimum: 1; } & s.Schema; readonly minLength: { readonly default: 8; readonly minimum: 1; } & s.Schema; }, s.Merge>; }; readonly oauth: { readonly cls: typeof OAuthStrategy; readonly schema: s.ObjectSchema<{ readonly name: s.StringSchema<{ readonly enum: ("google" | "github")[]; }> & { readonly enum: ("google" | "github")[]; }; readonly type: s.StringSchema<{ readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oauth2"; }> & { readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oauth2"; }; readonly client: s.ObjectSchema<{ readonly client_id: s.StringSchema & s.IStringOptions; readonly client_secret: s.StringSchema & s.IStringOptions; }, s.Merge>; }, { readonly title: "OAuth"; }> & { readonly title: "OAuth"; }; }; readonly custom_oauth: { readonly cls: typeof CustomOAuthStrategy; readonly schema: s.ObjectSchema<{ readonly type: s.StringSchema<{ readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oidc"; }> & { readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oidc"; }; readonly name: s.StringSchema & s.IStringOptions; readonly client: s.ObjectSchema<{ readonly client_id: s.StringSchema & s.IStringOptions; readonly client_secret: s.StringSchema & s.IStringOptions; readonly token_endpoint_auth_method: s.StringSchema<{ readonly enum: readonly ["client_secret_basic"]; }> & { readonly enum: readonly ["client_secret_basic"]; }; }, s.IObjectOptions> & s.IObjectOptions; readonly as: s.ObjectSchema<{ readonly issuer: s.StringSchema & s.IStringOptions; readonly code_challenge_methods_supported: { readonly enum: ["S256"]; } & s.Schema; readonly scopes_supported: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; $defs?: Record | undefined; contains?: s.Schema | undefined; minContains?: number | undefined; maxContains?: number | undefined; prefixItems?: s.Schema[] | undefined; uniqueItems?: boolean | undefined; maxItems?: number | undefined; minItems?: number | undefined; readonly items?: (s.StringSchema & s.IStringOptions) | undefined; } & s.Schema; readonly scope_separator: { readonly default: " "; } & s.Schema; readonly authorization_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; readonly token_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; readonly userinfo_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; }, s.Merge>; }, s.Merge<{ readonly title: "Custom OAuth"; } & { additionalProperties: false; }>>; }; }; declare const strategiesSchema: s.Schema & s.Merge; readonly type: s.Schema & s.Merge; readonly config: s.ObjectSchema<{ readonly hashing: s.StringSchema<{ readonly enum: readonly ["plain", "sha256", "bcrypt"]; readonly default: "sha256"; }> & { readonly enum: readonly ["plain", "sha256", "bcrypt"]; readonly default: "sha256"; }; readonly rounds: { readonly maximum: 10; readonly minimum: 1; } & s.Schema; readonly minLength: { readonly default: 8; readonly minimum: 1; } & s.Schema; }, s.Merge> | (s.ObjectSchema<{ readonly name: s.StringSchema<{ readonly enum: ("google" | "github")[]; }> & { readonly enum: ("google" | "github")[]; }; readonly type: s.StringSchema<{ readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oauth2"; }> & { readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oauth2"; }; readonly client: s.ObjectSchema<{ readonly client_id: s.StringSchema & s.IStringOptions; readonly client_secret: s.StringSchema & s.IStringOptions; }, s.Merge>; }, { readonly title: "OAuth"; }> & { readonly title: "OAuth"; }) | s.ObjectSchema<{ readonly type: s.StringSchema<{ readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oidc"; }> & { readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oidc"; }; readonly name: s.StringSchema & s.IStringOptions; readonly client: s.ObjectSchema<{ readonly client_id: s.StringSchema & s.IStringOptions; readonly client_secret: s.StringSchema & s.IStringOptions; readonly token_endpoint_auth_method: s.StringSchema<{ readonly enum: readonly ["client_secret_basic"]; }> & { readonly enum: readonly ["client_secret_basic"]; }; }, s.IObjectOptions> & s.IObjectOptions; readonly as: s.ObjectSchema<{ readonly issuer: s.StringSchema & s.IStringOptions; readonly code_challenge_methods_supported: { readonly enum: ["S256"]; } & s.Schema; readonly scopes_supported: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; $defs?: Record | undefined; contains?: s.Schema | undefined; minContains?: number | undefined; maxContains?: number | undefined; prefixItems?: s.Schema[] | undefined; uniqueItems?: boolean | undefined; maxItems?: number | undefined; minItems?: number | undefined; readonly items?: (s.StringSchema & s.IStringOptions) | undefined; } & s.Schema; readonly scope_separator: { readonly default: " "; } & s.Schema; readonly authorization_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; readonly token_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; readonly userinfo_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; }, s.Merge>; }, s.Merge<{ readonly title: "Custom OAuth"; } & { additionalProperties: false; }>>; }, s.Merge<{ readonly title: "password" | "oauth" | "custom_oauth"; } & { additionalProperties: false; }>>[]; }>; export type AppAuthStrategies = s.Static; export type AppAuthOAuthStrategy = s.Static; export type AppAuthCustomOAuthStrategy = s.Static; export declare const guardRoleSchema: s.ObjectSchema<{ readonly permissions: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; anyOf: [s.ArraySchema & s.IStringOptions, s.Schema> & s.Schema, s.ArraySchema & s.IStringOptions; readonly effect: { readonly default: "allow"; readonly enum: ["allow", "deny"]; } & s.Schema; readonly policies: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; $defs?: Record | undefined; contains?: s.Schema | undefined; minContains?: number | undefined; maxContains?: number | undefined; prefixItems?: s.Schema[] | undefined; uniqueItems?: boolean | undefined; maxItems?: number | undefined; minItems?: number | undefined; readonly items?: s.ObjectSchema<{ readonly description: s.Schema; readonly condition: s.Schema<{}, import("../core/object/query/object-query").ObjectQuery | undefined>; readonly effect: s.Schema; readonly filter: s.Schema<{}, import("../core/object/query/object-query").ObjectQuery | undefined>; }, s.Merge> | undefined; } & s.Schema; }, s.Merge>, s.Schema> & s.Schema]; } & s.Schema; readonly is_default: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; } & s.Schema; readonly implicit_allow: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; } & s.Schema; }, s.Merge>; export declare const authConfigSchema: import("../modules/mcp").ObjectToolSchema<{ readonly enabled: s.Schema<{ readonly default: false; }, boolean, boolean> & { readonly default: false; }; readonly basepath: s.StringSchema<{ readonly default: "/api/auth"; }> & { readonly default: "/api/auth"; }; readonly entity_name: s.StringSchema<{ readonly default: "users"; }> & { readonly default: "users"; }; readonly allow_register: { readonly default: true; } & s.Schema; readonly default_role_register: { default?: any; maxLength?: number | undefined; minLength?: number | undefined; pattern?: (string | RegExp) | undefined; format?: string | undefined; enum?: (readonly any[] | any[]) | undefined; const?: any; } & s.Schema; readonly jwt: s.ObjectSchema<{ readonly secret: import("bknd/utils").SecretSchema<{ default: string; }> & { default: string; }; readonly alg: { readonly default: "HS256"; readonly enum: ["HS256", "HS384", "HS512"]; } & s.Schema; readonly expires: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; multipleOf?: number | undefined; maximum?: number | undefined; exclusiveMaximum?: number | undefined; minimum?: number | undefined; exclusiveMinimum?: number | undefined; } & s.Schema; readonly issuer: { default?: any; maxLength?: number | undefined; minLength?: number | undefined; pattern?: (string | RegExp) | undefined; format?: string | undefined; enum?: (readonly any[] | any[]) | undefined; const?: any; } & s.Schema; readonly fields: s.ArraySchema & s.IStringOptions, { readonly default: readonly ["id", "email", "role"]; }> & { readonly default: readonly ["id", "email", "role"]; }; }, s.Merge<{ readonly default: {}; } & { additionalProperties: false; }>>; readonly cookie: s.ObjectSchema<{ readonly domain: s.Schema; readonly path: s.Schema; readonly sameSite: s.Schema; readonly secure: s.Schema; readonly httpOnly: s.Schema; readonly expires: s.Schema; readonly partitioned: s.Schema; readonly renew: s.Schema; readonly pathSuccess: s.Schema; readonly pathLoggedOut: s.Schema; }, s.Merge>; readonly strategies: import("../modules/mcp").RecordToolSchema & s.Merge; readonly type: s.Schema & s.Merge; readonly config: s.ObjectSchema<{ readonly hashing: s.StringSchema<{ readonly enum: readonly ["plain", "sha256", "bcrypt"]; readonly default: "sha256"; }> & { readonly enum: readonly ["plain", "sha256", "bcrypt"]; readonly default: "sha256"; }; readonly rounds: { readonly maximum: 10; readonly minimum: 1; } & s.Schema; readonly minLength: { readonly default: 8; readonly minimum: 1; } & s.Schema; }, s.Merge> | (s.ObjectSchema<{ readonly name: s.StringSchema<{ readonly enum: ("google" | "github")[]; }> & { readonly enum: ("google" | "github")[]; }; readonly type: s.StringSchema<{ readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oauth2"; }> & { readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oauth2"; }; readonly client: s.ObjectSchema<{ readonly client_id: s.StringSchema & s.IStringOptions; readonly client_secret: s.StringSchema & s.IStringOptions; }, s.Merge>; }, { readonly title: "OAuth"; }> & { readonly title: "OAuth"; }) | s.ObjectSchema<{ readonly type: s.StringSchema<{ readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oidc"; }> & { readonly enum: readonly ["oidc", "oauth2"]; readonly default: "oidc"; }; readonly name: s.StringSchema & s.IStringOptions; readonly client: s.ObjectSchema<{ readonly client_id: s.StringSchema & s.IStringOptions; readonly client_secret: s.StringSchema & s.IStringOptions; readonly token_endpoint_auth_method: s.StringSchema<{ readonly enum: readonly ["client_secret_basic"]; }> & { readonly enum: readonly ["client_secret_basic"]; }; }, s.IObjectOptions> & s.IObjectOptions; readonly as: s.ObjectSchema<{ readonly issuer: s.StringSchema & s.IStringOptions; readonly code_challenge_methods_supported: { readonly enum: ["S256"]; } & s.Schema; readonly scopes_supported: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; $defs?: Record | undefined; contains?: s.Schema | undefined; minContains?: number | undefined; maxContains?: number | undefined; prefixItems?: s.Schema[] | undefined; uniqueItems?: boolean | undefined; maxItems?: number | undefined; minItems?: number | undefined; readonly items?: (s.StringSchema & s.IStringOptions) | undefined; } & s.Schema; readonly scope_separator: { readonly default: " "; } & s.Schema; readonly authorization_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; readonly token_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; readonly userinfo_endpoint: { readonly pattern: "^(https?|wss?)://[^\\s/$.?#].[^\\s]*$"; } & s.Schema; }, s.Merge>; }, s.Merge<{ readonly title: "Custom OAuth"; } & { additionalProperties: false; }>>; }, s.Merge<{ readonly title: "password" | "oauth" | "custom_oauth"; } & { additionalProperties: false; }>>[]; }>, { readonly title: "Strategies"; readonly default: { readonly password: { readonly type: "password"; readonly enabled: true; readonly config: { readonly hashing: "sha256"; }; }; }; }>; readonly guard: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; $defs?: Record | undefined; patternProperties?: Record | undefined; additionalProperties?: (s.Schema | false) | undefined; minProperties?: number | undefined; maxProperties?: number | undefined; propertyNames?: s.Schema | undefined; properties: { readonly enabled: { readonly default: false; } & s.Schema; }; required: string[] | undefined; strict: () => s.ObjectSchema<{ readonly enabled: { readonly default: false; } & s.Schema; }, s.Merge>; partial: () => s.ObjectSchema<{ readonly enabled: s.Schema; }, s.IObjectOptions>; } & s.Schema; readonly roles: { additionalProperties: s.ObjectSchema<{ readonly permissions: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; anyOf: [s.ArraySchema & s.IStringOptions, s.Schema> & s.Schema, s.ArraySchema & s.IStringOptions; readonly effect: { readonly default: "allow"; readonly enum: ["allow", "deny"]; } & s.Schema; readonly policies: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; $defs?: Record | undefined; contains?: s.Schema | undefined; minContains?: number | undefined; maxContains?: number | undefined; prefixItems?: s.Schema[] | undefined; uniqueItems?: boolean | undefined; maxItems?: number | undefined; minItems?: number | undefined; readonly items?: s.ObjectSchema<{ readonly description: s.Schema; readonly condition: s.Schema<{}, import("../core/object/query/object-query").ObjectQuery | undefined>; readonly effect: s.Schema; readonly filter: s.Schema<{}, import("../core/object/query/object-query").ObjectQuery | undefined>; }, s.Merge> | undefined; } & s.Schema; }, s.Merge>, s.Schema> & s.Schema]; } & s.Schema; readonly is_default: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; } & s.Schema; readonly implicit_allow: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; } & s.Schema; }, s.Merge>; readonly mcp: import("../modules/mcp").McpSchemaHelper<{ get?: boolean; add?: boolean; update?: boolean; remove?: boolean; }>; getTools: (node: s.Node & s.IStringOptions, s.Schema> & s.Schema, s.ArraySchema & s.IStringOptions; readonly effect: { readonly default: "allow"; readonly enum: ["allow", "deny"]; } & s.Schema; readonly policies: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; $defs?: Record | undefined; contains?: s.Schema | undefined; minContains?: number | undefined; maxContains?: number | undefined; prefixItems?: s.Schema[] | undefined; uniqueItems?: boolean | undefined; maxItems?: number | undefined; minItems?: number | undefined; readonly items?: s.ObjectSchema<{ readonly description: s.Schema; readonly condition: s.Schema<{}, import("../core/object/query/object-query").ObjectQuery | undefined>; readonly effect: s.Schema; readonly filter: s.Schema<{}, import("../core/object/query/object-query").ObjectQuery | undefined>; }, s.Merge> | undefined; } & s.Schema; }, s.Merge>, s.Schema> & s.Schema]; } & s.Schema; readonly is_default: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; } & s.Schema; readonly implicit_allow: { default?: any; enum?: (readonly any[] | any[]) | undefined; const?: any; } & s.Schema; }, s.Merge>, { readonly default: {}; }>>) => import("jsonv-ts/mcp").Tool[]; } & s.Schema; }, { readonly title: "Authentication"; }> & { readonly title: "Authentication"; }; export type AppAuthJWTConfig = s.Static; export type AppAuthSchema = s.Static; export {};