@breadstone/archipel-mcp 0.0.6 → 0.0.8

package/data/packages/index.md

@@ -5,16 +5,17 @@ description: All Archipel platform packages with their primary capabilities.
 
 # Packages
 
-Archipel is organized into 14 independent NestJS modules. Each package can be installed and used on its own — you only pull in what you need.
+Archipel is organized into 17 independent NestJS modules. Each package can be installed and used on its own — you only pull in what you need.
 
 Every package follows the same structure: a dynamic NestJS module with `register()` configuration, abstract ports for contracts you implement, and concrete services you consume.
 
 ## Foundation
 
-| Package                                     | Description                                                                                                          |
-| ------------------------------------------- | -------------------------------------------------------------------------------------------------------------------- |
-| [`platform-core`](./platform-core/)         | Caching, configuration, cryptography, mapping, templates, and shared utilities. Every other package depends on this. |
-| [`platform-database`](./platform-database/) | Prisma + PostgreSQL integration with the repository/query pattern and transactional support.                         |
+| Package                                             | Description                                                                                                  |
+| --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
+| [`platform-core`](./platform-core/)                 | Configuration, mapping, templates, event pub/sub, and shared utilities. Every other package depends on this. |
+| [`platform-cryptography`](./platform-cryptography/) | Bcrypt password hashing, prefixed UUID generation, and TOTP multi-factor authentication.                     |
+| [`platform-database`](./platform-database/)         | Prisma + PostgreSQL integration with the repository/query pattern and transactional support.                 |
 
 ## Identity & Access
 
@@ -28,6 +29,7 @@ Every package follows the same structure: a dynamic NestJS module with `register
 | Package                                             | Description                                                                                                                 |
 | --------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------- |
 | [`platform-blob-storage`](./platform-blob-storage/) | Provider-agnostic blob storage (Vercel, Azure, AWS S3) with metadata tracking and image variant support.                    |
+| [`platform-caching`](./platform-caching/)           | Layered caching with in-memory LRU and Redis-backed implementations, TTL, stale-while-revalidate, and metrics.              |
 | [`platform-esigning`](./platform-esigning/)         | Provider-agnostic e-signing with support for DocuSign, Adobe Sign, Dropbox Sign, signNow, and a built-in internal provider. |
 | [`platform-mailing`](./platform-mailing/)           | Multi-strategy email delivery (SMTP, Postmark, Resend, Plunk, Log) with template rendering and verification flows.          |
 | [`platform-documents`](./platform-documents/)       | Document generation with pluggable renderers for DOCX, PDF, and image processing.                                           |
@@ -40,6 +42,11 @@ Every package follows the same structure: a dynamic NestJS module with `register
 | [`platform-logging`](./platform-logging/)     | Sentry integration for structured error tracking and analytics.                                              |
 | [`platform-telemetry`](./platform-telemetry/) | OpenTelemetry tracing, metrics, a rule engine for conditional recording, and graceful noop fallback.         |
 | [`platform-analytics`](./platform-analytics/) | Provider-agnostic analytics and error tracking (Sentry, Application Insights, Datadog) with no-op fallback.  |
-| [`platform-analytics`](./platform-analytics/) | Provider-agnostic analytics and error tracking (Sentry, Application Insights, Datadog) with no-op fallback.  |
 | [`platform-reporting`](./platform-reporting/) | Contributor-based reporting engine with dataset registration and query execution.                            |
 | [`platform-mcp`](./platform-mcp/)             | Decorator-driven MCP (Model Context Protocol) server module with auto-discovery and multi-transport support. |
+
+## AI & Extensibility
+
+| Package                                             | Description                                                                                                            |
+| --------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- |
+| [`platform-intelligence`](./platform-intelligence/) | Multi-provider AI text generation (OpenAI, Anthropic, Google, Grok) with capability registry and intent orchestration. |

package/data/packages/platform-authentication/api/Class.AppleStrategy.md

@@ -55,7 +55,7 @@ validate(
 profile): Promise<IAuthSubject>;
 ```
 
-Defined in: [libs/platform-authentication/src/strategies/AppleStrategy.ts:68](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/AppleStrategy.ts#L68)
+Defined in: [libs/platform-authentication/src/strategies/AppleStrategy.ts:73](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/AppleStrategy.ts#L73)
 
 Validates the Apple authentication payload.
 

package/data/packages/platform-authentication/api/Class.AuthModule.md

@@ -6,7 +6,7 @@ editUrl: false
 
 # Class: AuthModule
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:116](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L116)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:102](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L102)
 
 The `AuthModule` handles JWT-based authentication,
 including token creation and validation.
@@ -31,7 +31,7 @@ new AuthModule(): AuthModule;
 configure(consumer): void;
 ```
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:227](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L227)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:213](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L213)
 
 #### Parameters
 
@@ -51,7 +51,7 @@ Defined in: [libs/platform-authentication/src/AuthModule.ts:227](https://github.
 static register(options): DynamicModule;
 ```
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:126](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L126)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:112](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L112)
 
 Registers the auth module with the provided port implementations.
 

package/data/packages/platform-authentication/api/Class.GithubStrategy.md

@@ -52,7 +52,7 @@ validate(
 profile): Promise<IAuthSubject>;
 ```
 
-Defined in: [libs/platform-authentication/src/strategies/GithubStrategy.ts:46](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/GithubStrategy.ts#L46)
+Defined in: [libs/platform-authentication/src/strategies/GithubStrategy.ts:53](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/GithubStrategy.ts#L53)
 
 #### Parameters
 

package/data/packages/platform-authentication/api/Class.GoogleStrategy.md

@@ -54,7 +54,7 @@ validate(
 profile): Promise<IAuthSubject>;
 ```
 
-Defined in: [libs/platform-authentication/src/strategies/GoogleStrategy.ts:59](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/GoogleStrategy.ts#L59)
+Defined in: [libs/platform-authentication/src/strategies/GoogleStrategy.ts:65](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/GoogleStrategy.ts#L65)
 
 Validates the Google authentication payload.
 

package/data/packages/platform-authentication/api/Class.MicrosoftStrategy.md

@@ -54,7 +54,7 @@ validate(
 profile): Promise<IAuthSubject>;
 ```
 
-Defined in: [libs/platform-authentication/src/strategies/MicrosoftStrategy.ts:61](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/MicrosoftStrategy.ts#L61)
+Defined in: [libs/platform-authentication/src/strategies/MicrosoftStrategy.ts:67](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/MicrosoftStrategy.ts#L67)
 
 Validates the Microsoft authentication payload.
 

package/data/packages/platform-authentication/api/Interface.IAuthModuleOptions.md

@@ -6,7 +6,7 @@ editUrl: false
 
 # Interface: IAuthModuleOptions
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:59](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L59)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:45](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L45)
 
 Options for configuring the `AuthModule`.
 
@@ -18,7 +18,7 @@ Options for configuring the `AuthModule`.
 optional additionalConfigEntries?: readonly Omit<IConfigRegistryEntry<unknown>, "module">[];
 ```
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:99](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L99)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:85](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L85)
 
 Optional additional configuration entries to register (e.g. provider-specific OAuth keys).
 Import them from the provider-specific sub-paths
@@ -32,7 +32,7 @@ Import them from the provider-specific sub-paths
 authSubject: Type<AuthSubjectPort>;
 ```
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:63](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L63)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:49](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L49)
 
 Implementation of the auth subject port (user lookup for JWT/Local/Anonymous strategies).
 
@@ -44,7 +44,7 @@ Implementation of the auth subject port (user lookup for JWT/Local/Anonymous str
 mfaSubject: Type<MfaSubjectPort>;
 ```
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:68](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L68)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:54](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L54)
 
 Implementation of the MFA subject port (MFA state persistence).
 
@@ -56,7 +56,7 @@ Implementation of the MFA subject port (MFA state persistence).
 sessionPersistence: Type<SessionPersistencePort>;
 ```
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:73](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L73)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:59](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L59)
 
 Implementation of the session persistence port.
 
@@ -68,7 +68,7 @@ Implementation of the session persistence port.
 optional socialAuth?: Type<SocialAuthPort>;
 ```
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:84](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L84)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:70](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L70)
 
 Optional implementation of the social auth port (OAuth strategies).
 When provided together with `socialStrategies`, the social auth flow is enabled.
@@ -81,7 +81,7 @@ When provided together with `socialStrategies`, the social auth flow is enabled.
 optional socialStrategies?: Type<any>[];
 ```
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:92](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L92)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:78](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L78)
 
 Optional array of social strategy types to register (e.g. `AppleStrategy`, `GithubStrategy`).
 Import them from the provider-specific sub-paths
@@ -96,7 +96,7 @@ Requires `socialAuth` to be set.
 optional tokenEnricher?: Type<TokenEnricherPort>;
 ```
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:105](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L105)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:91](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L91)
 
 Optional implementation of the token enricher port.
 When provided, additional claims are added to JWT tokens.
@@ -109,6 +109,6 @@ When provided, additional claims are added to JWT tokens.
 verificationSubject: Type<VerificationSubjectPort>;
 ```
 
-Defined in: [libs/platform-authentication/src/AuthModule.ts:78](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L78)
+Defined in: [libs/platform-authentication/src/AuthModule.ts:64](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L64)
 
 Implementation of the verification subject port (email/pin verification).

package/data/packages/platform-authentication/api/Variable.APPLE_AUTH_CONFIG_ENTRIES.md

@@ -10,6 +10,6 @@ editUrl: false
 const APPLE_AUTH_CONFIG_ENTRIES: ReadonlyArray<Omit<IConfigRegistryEntry, 'module'>>;
 ```
 
-Defined in: [libs/platform-authentication/src/apple/env.ts:15](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/apple/env.ts#L15)
+Defined in: [libs/platform-authentication/src/apple/env.ts:16](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/apple/env.ts#L16)
 
 Configuration entries required by Apple Sign-In authentication.

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_CALLBACK_URL.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_CALLBACK_URL: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:109](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L109)
+Defined in: [libs/platform-authentication/src/env.ts:115](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L115)
 
 Apple Sign-In callback URL.

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_CLIENT_ID.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_CLIENT_ID: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:100](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L100)
+Defined in: [libs/platform-authentication/src/env.ts:106](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L106)
 
 Apple Sign-In client (service) ID.

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_KEY_ID.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_KEY_ID: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:106](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L106)
+Defined in: [libs/platform-authentication/src/env.ts:112](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L112)
 
 Apple Sign-In key ID.

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_PRIVATE_KEY.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_PRIVATE_KEY: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:97](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L97)
+Defined in: [libs/platform-authentication/src/env.ts:103](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L103)
 
 Apple Sign-In private key (PEM string).

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_SCOPE.md

@@ -0,0 +1,15 @@
+---
+title: 'Variable: AUTH\_APPLE\_SCOPE'
+generated: true
+editUrl: false
+---
+
+# Variable: AUTH_APPLE_SCOPE
+
+```ts
+const AUTH_APPLE_SCOPE: IConfigKey<string>;
+```
+
+Defined in: [libs/platform-authentication/src/env.ts:118](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L118)
+
+Comma-separated list of Apple Sign-In scopes (e.g. `'name,email'`).

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_TEAM_ID.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_TEAM_ID: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:103](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L103)
+Defined in: [libs/platform-authentication/src/env.ts:109](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L109)
 
 Apple developer team ID.

package/data/packages/platform-authentication/api/Variable.AUTH_GITHUB_CALLBACK_URL.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GITHUB_CALLBACK_URL: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:122](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L122)
+Defined in: [libs/platform-authentication/src/env.ts:131](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L131)
 
 GitHub OAuth callback URL.

package/data/packages/platform-authentication/api/Variable.AUTH_GITHUB_CLIENT_ID.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GITHUB_CLIENT_ID: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:116](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L116)
+Defined in: [libs/platform-authentication/src/env.ts:125](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L125)
 
 GitHub OAuth client ID.

package/data/packages/platform-authentication/api/Variable.AUTH_GITHUB_CLIENT_SECRET.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GITHUB_CLIENT_SECRET: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:119](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L119)
+Defined in: [libs/platform-authentication/src/env.ts:128](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L128)
 
 GitHub OAuth client secret.

package/data/packages/platform-authentication/api/Variable.AUTH_GITHUB_SCOPE.md

@@ -0,0 +1,15 @@
+---
+title: 'Variable: AUTH\_GITHUB\_SCOPE'
+generated: true
+editUrl: false
+---
+
+# Variable: AUTH_GITHUB_SCOPE
+
+```ts
+const AUTH_GITHUB_SCOPE: IConfigKey<string>;
+```
+
+Defined in: [libs/platform-authentication/src/env.ts:134](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L134)
+
+Comma-separated list of GitHub OAuth scopes (e.g. `'user:email,read:user'`).

package/data/packages/platform-authentication/api/Variable.AUTH_GOOGLE_SCOPE.md

@@ -0,0 +1,15 @@
+---
+title: 'Variable: AUTH\_GOOGLE\_SCOPE'
+generated: true
+editUrl: false
+---
+
+# Variable: AUTH_GOOGLE_SCOPE
+
+```ts
+const AUTH_GOOGLE_SCOPE: IConfigKey<string>;
+```
+
+Defined in: [libs/platform-authentication/src/env.ts:77](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L77)
+
+Comma-separated list of Google OAuth scopes (e.g. `'email,profile'`).

package/data/packages/platform-authentication/api/Variable.AUTH_MICROSOFT_CALLBACK_URL.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_MICROSOFT_CALLBACK_URL: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:87](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L87)
+Defined in: [libs/platform-authentication/src/env.ts:90](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L90)
 
 Microsoft OAuth2 callback URL.

package/data/packages/platform-authentication/api/Variable.AUTH_MICROSOFT_CLIENT_ID.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_MICROSOFT_CLIENT_ID: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:81](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L81)
+Defined in: [libs/platform-authentication/src/env.ts:84](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L84)
 
 Microsoft OAuth2 client ID.

package/data/packages/platform-authentication/api/Variable.AUTH_MICROSOFT_CLIENT_SECRET.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_MICROSOFT_CLIENT_SECRET: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:84](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L84)
+Defined in: [libs/platform-authentication/src/env.ts:87](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L87)
 
 Microsoft OAuth2 client secret.

package/data/packages/platform-authentication/api/Variable.AUTH_MICROSOFT_SCOPE.md

@@ -0,0 +1,15 @@
+---
+title: 'Variable: AUTH\_MICROSOFT\_SCOPE'
+generated: true
+editUrl: false
+---
+
+# Variable: AUTH_MICROSOFT_SCOPE
+
+```ts
+const AUTH_MICROSOFT_SCOPE: IConfigKey<string>;
+```
+
+Defined in: [libs/platform-authentication/src/env.ts:96](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L96)
+
+Comma-separated list of Microsoft OAuth scopes (e.g. `'user.read,mail.read'`).

package/data/packages/platform-authentication/api/Variable.AUTH_MICROSOFT_TENANT.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_MICROSOFT_TENANT: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:90](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L90)
+Defined in: [libs/platform-authentication/src/env.ts:93](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L93)
 
 Microsoft tenant ID or `'common'` for multi-tenant.

package/data/packages/platform-authentication/api/Variable.MICROSOFT_AUTH_CONFIG_ENTRIES.md

@@ -10,6 +10,6 @@ editUrl: false
 const MICROSOFT_AUTH_CONFIG_ENTRIES: ReadonlyArray<Omit<IConfigRegistryEntry, 'module'>>;
 ```
 
-Defined in: [libs/platform-authentication/src/microsoft/env.ts:14](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/microsoft/env.ts#L14)
+Defined in: [libs/platform-authentication/src/microsoft/env.ts:15](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/microsoft/env.ts#L15)
 
 Configuration entries required by Microsoft OAuth authentication.

package/data/packages/platform-authentication/api/Variable.PLATFORM_AUTHENTICATION_CONFIG_ENTRIES.md

@@ -10,6 +10,6 @@ editUrl: false
 const PLATFORM_AUTHENTICATION_CONFIG_ENTRIES: ReadonlyArray<Omit<IConfigRegistryEntry, 'module'>>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:136](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L136)
+Defined in: [libs/platform-authentication/src/env.ts:148](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L148)
 
 Core configuration entries required by `platform-authentication`.

package/data/packages/platform-authentication/api/Variable.SEED_ANONYMOUS_USERNAME.md

@@ -10,6 +10,6 @@ editUrl: false
 const SEED_ANONYMOUS_USERNAME: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:129](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L129)
+Defined in: [libs/platform-authentication/src/env.ts:141](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L141)
 
 Username used for the anonymous seed user.

package/data/packages/platform-authentication/api/index.md

@@ -64,13 +64,16 @@ editUrl: false
 | [AUTH_APPLE_CLIENT_ID](Variable.AUTH_APPLE_CLIENT_ID)                                     | Apple Sign-In client (service) ID.                                             |
 | [AUTH_APPLE_KEY_ID](Variable.AUTH_APPLE_KEY_ID)                                           | Apple Sign-In key ID.                                                          |
 | [AUTH_APPLE_PRIVATE_KEY](Variable.AUTH_APPLE_PRIVATE_KEY)                                 | Apple Sign-In private key (PEM string).                                        |
+| [AUTH_APPLE_SCOPE](Variable.AUTH_APPLE_SCOPE)                                             | Comma-separated list of Apple Sign-In scopes (e.g. `'name,email'`).            |
 | [AUTH_APPLE_TEAM_ID](Variable.AUTH_APPLE_TEAM_ID)                                         | Apple developer team ID.                                                       |
 | [AUTH_GITHUB_CALLBACK_URL](Variable.AUTH_GITHUB_CALLBACK_URL)                             | GitHub OAuth callback URL.                                                     |
 | [AUTH_GITHUB_CLIENT_ID](Variable.AUTH_GITHUB_CLIENT_ID)                                   | GitHub OAuth client ID.                                                        |
 | [AUTH_GITHUB_CLIENT_SECRET](Variable.AUTH_GITHUB_CLIENT_SECRET)                           | GitHub OAuth client secret.                                                    |
+| [AUTH_GITHUB_SCOPE](Variable.AUTH_GITHUB_SCOPE)                                           | Comma-separated list of GitHub OAuth scopes (e.g. `'user:email,read:user'`).   |
 | [AUTH_GOOGLE_CALLBACK_URL](Variable.AUTH_GOOGLE_CALLBACK_URL)                             | Google OAuth2 callback URL.                                                    |
 | [AUTH_GOOGLE_CLIENT_ID](Variable.AUTH_GOOGLE_CLIENT_ID)                                   | Google OAuth2 client ID.                                                       |
 | [AUTH_GOOGLE_CLIENT_SECRET](Variable.AUTH_GOOGLE_CLIENT_SECRET)                           | Google OAuth2 client secret.                                                   |
+| [AUTH_GOOGLE_SCOPE](Variable.AUTH_GOOGLE_SCOPE)                                           | Comma-separated list of Google OAuth scopes (e.g. `'email,profile'`).          |
 | [AUTH_JWT_EXPIRES_IN](Variable.AUTH_JWT_EXPIRES_IN)                                       | Lifetime of access tokens (e.g. `'15m'`, `'1h'`).                              |
 | [AUTH_JWT_SECRET](Variable.AUTH_JWT_SECRET)                                               | Secret used to sign JWTs.                                                      |
 | [AUTH_MFA_CHALLENGE_EXPIRES_IN](Variable.AUTH_MFA_CHALLENGE_EXPIRES_IN)                   | How long an MFA challenge stays valid (e.g. `'5m'`).                           |
@@ -85,6 +88,7 @@ editUrl: false
 | [AUTH_MICROSOFT_CALLBACK_URL](Variable.AUTH_MICROSOFT_CALLBACK_URL)                       | Microsoft OAuth2 callback URL.                                                 |
 | [AUTH_MICROSOFT_CLIENT_ID](Variable.AUTH_MICROSOFT_CLIENT_ID)                             | Microsoft OAuth2 client ID.                                                    |
 | [AUTH_MICROSOFT_CLIENT_SECRET](Variable.AUTH_MICROSOFT_CLIENT_SECRET)                     | Microsoft OAuth2 client secret.                                                |
+| [AUTH_MICROSOFT_SCOPE](Variable.AUTH_MICROSOFT_SCOPE)                                     | Comma-separated list of Microsoft OAuth scopes (e.g. `'user.read,mail.read'`). |
 | [AUTH_MICROSOFT_TENANT](Variable.AUTH_MICROSOFT_TENANT)                                   | Microsoft tenant ID or `'common'` for multi-tenant.                            |
 | [AUTH_VERIFY_JWT_EXPIRES_IN](Variable.AUTH_VERIFY_JWT_EXPIRES_IN)                         | Lifetime of email-verification JWTs.                                           |
 | [GITHUB_AUTH_CONFIG_ENTRIES](Variable.GITHUB_AUTH_CONFIG_ENTRIES)                         | Configuration entries required by GitHub OAuth authentication.                 |