import { Entity } from "../../../common";
import type { User } from "../../user/entities/user";
/**
 * Auth Entity Type
 *
 * NOTE: `refreshToken` is intentionally NOT part of this type. It is a
 * virtual, output-only attribute (the record's own `id`) assigned by the
 * service layer via `(auth as any).refreshToken = auth.id` — mirrors the
 * pre-migration behaviour, where it was never a real entity property either.
 */
export type Auth = Entity & {
    token: string;
    expiration: Date;
    requiresCompanySelection?: boolean;
    selectionToken?: string;
    user?: User;
};
/**
 * Auth Entity Descriptor
 *
 * Single source of truth for the Auth entity configuration.
 * Generates mapper, childrenTokens, and DataModelInterface automatically.
 *
 * SECURITY: this descriptor is deliberately NOT registered with the
 * GraphDescriptorRegistry (see auth.module.ts) — the `token` attribute
 * carries a live, valid JWT session credential, and an LLM-queryable graph
 * catalog entry would let chatbot/agent tooling read out active session
 * tokens for any user. Do not add `graphRegistry.register()` for this
 * descriptor without explicit product/security sign-off.
 */
export declare const AuthDescriptor: import("../../../common").EntityDescriptor<Auth, {
    user: {
        model: import("../../../common").DataMeta;
        direction: "in";
        relationship: string;
        cardinality: "one";
        description: string;
    };
}>;
export type AuthDescriptorType = typeof AuthDescriptor;
//# sourceMappingURL=auth.d.ts.map