shomei-core: Transport-agnostic domain: types, commands, events, errors, and effects

[ library, mit, security, web ] [ Propose Tags ] [ Report a vulnerability ]

shomei-core is the heart of the Shōmei authentication toolkit: the domain model, commands, events, and errors, together with the effectful effect interfaces (stores, clock, token generator, signing key) that every workflow is written against. It has no database, HTTP, or JWT dependency, so the account, session, OAuth, MFA, passkey, and authorization workflows can be run against the bundled in-memory interpreter in a test suite and against PostgreSQL in production without changing a line. All other Shōmei packages depend on it.

Modules

[Index] [Quick Jump]

Shomei
- Account
  - Admin
    - Shomei.Account.Admin.Workflow
  - Credential
    - Shomei.Account.Credential.Domain
    - Shomei.Account.Credential.Store
  - Email
    - Shomei.Account.Email.Domain
  - Lifecycle
    - Shomei.Account.Lifecycle.Workflow
  - LoginId
    - Shomei.Account.LoginId.Domain
  - Notification
    - Shomei.Account.Notification.Domain
    - Shomei.Account.Notification.Store
  - OneTimeToken
    - Shomei.Account.OneTimeToken.Domain
  - Password
  - PasswordReset
    - Shomei.Account.PasswordReset.Domain
    - Shomei.Account.PasswordReset.Store
  - User
    - Shomei.Account.User.Domain
    - Shomei.Account.User.Store
  - Verification
    - Shomei.Account.Verification.Domain
    - Shomei.Account.Verification.Store
- Audit
  - Event
    - Shomei.Audit.Event.Codec
    - Shomei.Audit.Event.Domain
  - Publisher
    - Shomei.Audit.Publisher.Store
  - Reader
    - Shomei.Audit.Reader.Store
- Authorization
- Shomei.Config
- Delegation
  - Shomei.Delegation.Workflow
- Shomei.Error
- Shomei.Id
- Mfa
  - RecoveryCode
    - Shomei.Mfa.RecoveryCode.Store
  - Totp
  - Shomei.Mfa.Workflow
- OAuth
  - AuthorizationCode
    - Shomei.OAuth.AuthorizationCode.Domain
    - Shomei.OAuth.AuthorizationCode.Store
  - Authorize
    - Shomei.OAuth.Authorize.Workflow
  - Client
  - IdToken
    - Shomei.OAuth.IdToken.Domain
  - Revocation
    - Shomei.OAuth.Revocation.Domain
  - TokenExchange
    - Shomei.OAuth.TokenExchange.Workflow
  - TokenGrant
    - Shomei.OAuth.TokenGrant.Workflow
- Passkey
- Shomei.Prelude
- ServiceAccount
- Session
  - Authentication
    - Shomei.Session.Authentication.Workflow
  - Shomei.Session.Command
  - Shomei.Session.Domain
  - LoginAttempt
  - RefreshToken
    - Shomei.Session.RefreshToken.Domain
    - Shomei.Session.RefreshToken.Store
  - Shomei.Session.Store
  - Token
    - Shomei.Session.Token.Domain
    - Shomei.Session.Token.Generator
  - UnitOfWork
    - Shomei.Session.UnitOfWork.Store
  - Shomei.Session.Workflow
- SigningKey
- Test
  - Shomei.Test.InMemory
- Time
  - Shomei.Time.Store

Downloads

shomei-core-0.2.0.0.tar.gz [browse] (Cabal source package)
Package description (as included in the package)

Maintainer's Corner

Package maintainers

shinzui

For package maintainers and hackage trustees

edit package information

Candidates

0.1.0.0

Versions [RSS]	0.2.0.0
Change log	CHANGELOG.md
Dependencies	aeson (>=2.1 && <2.3), base (>=4.18 && <5), base64 (>=1.0 && <1.1), bytestring (>=0.11 && <0.13), containers (>=0.6 && <0.9), crypton (>=1.1 && <1.2), effectful (>=2.5 && <2.8), effectful-core (>=2.5 && <2.8), file-embed (>=0.0.15 && <0.0.17), generic-lens (>=2.2 && <2.4), http-api-data (>=0.6 && <0.8), lens (>=5.2 && <5.4), mmzk-typeid (>=0.7 && <0.8), ram (>=0.22 && <0.23), text (>=2.0 && <2.2), time (>=1.12 && <1.15), uuid (>=1.3 && <1.4) [details]
Tested with	ghc ==9.12.4
License	MIT
Copyright	2026 Nadeem Bitar
Author	Nadeem Bitar
Maintainer	nadeem@gmail.com
Uploaded	by shinzui at 2026-08-28T04:37:00Z
Category	Web, Security
Home page	https://github.com/shinzui/shomei
Bug tracker	https://github.com/shinzui/shomei/issues
Source repo	head: git clone https://github.com/shinzui/shomei.git
Distributions
Reverse Dependencies	3 direct, 0 indirect [details]
Downloads	0 total (0 in the last 30 days)
Rating	(no votes yet) [estimated by Bayesian average]
Your Rating	λ λ λ
Status	Docs uploaded by user Build status unknown [no reports yet]