@jskit-ai/agent-docs 0.1.1

package/reference/autogen/packages/auth-core.md

@@ -0,0 +1,352 @@
+# packages/auth-core
+
+Generated by `npm run agent-docs:build`.
+Do not edit manually.
+
+Generated inventory for `packages/auth-core`.
+Use this on demand; do not load the full index at startup.
+
+## Scope
+- Source: `packages/auth-core/**/*{.js,.mjs,.cjs,.vue}`
+- Excludes: `test/`, `tests/`, `__tests__/`, `*.test.*`, `*.spec.*`, `*.vitest.*`, `node_modules/`, `dist/`, `coverage/`, `docs/`, `LEGACY/`
+
+## Sections
+
+### src
+
+### `src/client/authApi.js`
+Exports
+- `createApi`
+
+### `src/client/index.js`
+Exports
+- `AccessCoreClientProvider`
+- `FastifyAuthPolicyClientProvider`
+
+### `src/client/providers/AccessCoreClientProvider.js`
+Exports
+- `AccessCoreClientProvider`
+
+### `src/client/providers/FastifyAuthPolicyClientProvider.js`
+Exports
+- `FastifyAuthPolicyClientProvider`
+
+### `src/client/signOutFlow.js`
+Exports
+- `runAuthSignOutFlow`
+
+### `src/server/inviteTokens.js`
+Exports
+- `OPAQUE_INVITE_TOKEN_HASH_PREFIX`
+- `normalizeInviteToken`
+- `isSha256Hex`
+- `buildInviteToken()`
+- `hashInviteToken(token)`
+- `encodeInviteTokenHash`
+- `decodeInviteTokenHash`
+- `resolveInviteTokenHash(inviteToken)`
+
+### `src/server/lib/actionContextContributor.js`
+Exports
+- `createAuthActionContextContributor()`
+
+### `src/server/lib/authPolicySupport.js`
+Exports
+- `assertAuthPolicyDeps(deps = {})`
+- `normalizeActorResolution(result)`
+Local functions
+- `assertFunction(value, name)`
+
+### `src/server/lib/errors.js`
+Exports
+- `AUTH_POLICY_DENY_REASONS`
+- `createAuthPolicyError(status, message, { code = "AUTH_POLICY_ERROR" } = {})`
+
+### `src/server/lib/index.js`
+Exports
+- `authPolicyPlugin`
+- `withAuthPolicy`
+- `mergeAuthPolicy`
+
+### `src/server/lib/objectUtils.js`
+Exports
+- `asObject(value)`
+
+### `src/server/lib/plugin.js`
+Exports
+- `authPolicyPlugin(deps = {}, options = {})`
+Local functions
+- `normalizeUnsafeMethods(methodsValue)`
+- `normalizeApiPrefix(value)`
+- `normalizeRateLimitPluginOptions(value)`
+- `resolveRouteConfig(request)`
+- `enforceCsrfProtection(fastify, request, reply)`
+- `resolveCsrfToken(request)`
+- `resolveOwnerValue(meta, request)`
+- `notifyPolicyDenied(onPolicyDenied, payload)`
+
+### `src/server/lib/routeMeta.js`
+Exports
+- `AUTH_POLICIES`
+- `CONTEXT_POLICIES`
+- `DEFAULT_AUTH_POLICY_META`
+- `resolveAuthPolicyMeta(input = {})`
+- `withAuthPolicy(meta = {})`
+- `mergeAuthPolicy(routeOptions = {}, meta = {})`
+
+### `src/server/lib/routeVisibilityResolver.js`
+Exports
+- `createAuthRouteVisibilityResolver()`
+
+### `src/server/membershipAccess.js`
+Exports
+- `resolveMembershipRoleId(membershipLike)`
+- `resolveMembershipStatus(membershipLike)`
+- `normalizeMembershipForAccess(membershipLike)`
+- `normalizePermissions(value)`
+- `createMembershipIndexes(memberships)`
+
+### `src/server/providers/AccessCoreServiceProvider.js`
+Exports
+- `AccessCoreServiceProvider`
+
+### `src/server/providers/FastifyAuthPolicyServiceProvider.js`
+Exports
+- `FastifyAuthPolicyServiceProvider`
+Local functions
+- `parseBoolean(value, fallback = false)`
+- `parseList(value)`
+- `defaultHasPermission({ permission, permissions = [] } = {})`
+
+### `src/server/utils.js`
+Exports
+- `normalizeEmail(value)`
+- `normalizeOAuthIntent(value, { fallback = "login" } = {})`
+- `normalizeReturnToPath(value, { fallback = "/", allowedOrigins = [] } = {})`
+
+### `src/server/validators.js`
+Exports
+- `validators`
+- `confirmPassword(rawPassword, rawConfirmPassword)`
+- `forgotPasswordInput(payload = {})`
+- `loginInput(payload = {})`
+- `loginPassword(rawPassword)`
+- `registerInput(payload = {})`
+- `registerPassword(rawPassword)`
+- `resetPassword(rawPassword)`
+- `resetPasswordInput(payload = {})`
+Local functions
+- `validateEmail(rawEmail)`
+- `buildFieldErrors(entries = [])`
+- `buildEmailPasswordInput(payload = {}, { passwordValidator } = {})`
+
+### `src/shared/authApi.js`
+Exports
+- `createApi({ request })`
+
+### `src/shared/authConstraints.js`
+Exports
+- `AUTH_EMAIL_PATTERN`
+- `AUTH_EMAIL_REGEX`
+- `AUTH_EMAIL_MIN_LENGTH`
+- `AUTH_EMAIL_MAX_LENGTH`
+- `AUTH_PASSWORD_MIN_LENGTH`
+- `AUTH_PASSWORD_MAX_LENGTH`
+- `AUTH_LOGIN_PASSWORD_MAX_LENGTH`
+- `AUTH_RECOVERY_TOKEN_MAX_LENGTH`
+- `AUTH_ACCESS_TOKEN_MAX_LENGTH`
+- `AUTH_REFRESH_TOKEN_MAX_LENGTH`
+
+### `src/shared/authMethods.js`
+Exports
+- `AUTH_METHOD_PASSWORD_ID`
+- `AUTH_METHOD_PASSWORD_PROVIDER`
+- `AUTH_METHOD_EMAIL_OTP_ID`
+- `AUTH_METHOD_EMAIL_OTP_PROVIDER`
+- `AUTH_METHOD_KIND_PASSWORD`
+- `AUTH_METHOD_KIND_OTP`
+- `AUTH_METHOD_KIND_OAUTH`
+- `AUTH_METHOD_KINDS`
+- `AUTH_METHOD_MINIMUM_ENABLED`
+- `AUTH_METHOD_DEFINITIONS`
+- `AUTH_METHOD_IDS`
+- `buildOAuthMethodId(providerId)`
+- `parseAuthMethodId(value)`
+- `buildOAuthMethodDefinitions(oauthProviders = [])`
+- `buildAuthMethodDefinitions({ oauthProviders = [] } = {})`
+- `buildAuthMethodIds(options = {})`
+- `findAuthMethodDefinition(methodId, options = {})`
+Local functions
+- `normalizeOAuthMethodDefinitionInput(entry)`
+
+### `src/shared/authPaths.js`
+Exports
+- `AUTH_PATHS`
+- `buildAuthOauthStartPath(provider)`
+
+### `src/shared/commands/authCommandValidators.js`
+Exports
+- `authEmailValidator`
+- `authPasswordValidator`
+- `authLoginPasswordValidator`
+- `authRecoveryTokenValidator`
+- `authAccessTokenValidator`
+- `authRefreshTokenValidator`
+- `oauthProviderValidator`
+- `authMethodIdValidator`
+- `authMethodKindValidator`
+- `oauthReturnToValidator`
+- `okResponseValidator`
+- `okMessageResponseValidator`
+- `registerResponseValidator`
+- `loginResponseValidator`
+- `otpVerifyResponseValidator`
+- `oauthCompleteResponseValidator`
+- `logoutResponseValidator`
+- `oauthProviderCatalogEntryValidator`
+- `sessionResponseValidator`
+- `sessionUnavailableResponseValidator`
+- `createCommandMessages({ fields = {}, defaultMessage = "Invalid value." } = {})`
+
+### `src/shared/commands/authLoginOAuthCompleteCommand.js`
+Exports
+- `authLoginOAuthCompleteBodyValidator`
+- `oauthCompleteResponseValidator`
+- `AUTH_LOGIN_OAUTH_COMPLETE_MESSAGES`
+- `authLoginOAuthCompleteCommand`
+
+### `src/shared/commands/authLoginOAuthStartCommand.js`
+Exports
+- `authLoginOAuthStartParamsValidator`
+- `authLoginOAuthStartQueryValidator`
+- `authLoginOAuthStartResponseValidator`
+- `AUTH_LOGIN_OAUTH_START_MESSAGES`
+- `authLoginOAuthStartCommand`
+
+### `src/shared/commands/authLoginOtpRequestCommand.js`
+Exports
+- `authLoginOtpRequestBodyValidator`
+- `okMessageResponseValidator`
+- `AUTH_LOGIN_OTP_REQUEST_MESSAGES`
+- `authLoginOtpRequestCommand`
+
+### `src/shared/commands/authLoginOtpVerifyCommand.js`
+Exports
+- `authLoginOtpVerifyBodyValidator`
+- `otpVerifyResponseValidator`
+- `AUTH_LOGIN_OTP_VERIFY_MESSAGES`
+- `authLoginOtpVerifyCommand`
+
+### `src/shared/commands/authLoginPasswordCommand.js`
+Exports
+- `authLoginPasswordBodyValidator`
+- `loginResponseValidator`
+- `AUTH_LOGIN_PASSWORD_MESSAGES`
+- `authLoginPasswordCommand`
+
+### `src/shared/commands/authLogoutCommand.js`
+Exports
+- `logoutResponseValidator`
+- `AUTH_LOGOUT_MESSAGES`
+- `authLogoutCommand`
+
+### `src/shared/commands/authPasswordRecoveryCompleteCommand.js`
+Exports
+- `authPasswordRecoveryCompleteBodyValidator`
+- `okResponseValidator`
+- `AUTH_PASSWORD_RECOVERY_COMPLETE_MESSAGES`
+- `authPasswordRecoveryCompleteCommand`
+
+### `src/shared/commands/authPasswordResetCommand.js`
+Exports
+- `authPasswordResetBodyValidator`
+- `okMessageResponseValidator`
+- `AUTH_PASSWORD_RESET_MESSAGES`
+- `authPasswordResetCommand`
+
+### `src/shared/commands/authPasswordResetRequestCommand.js`
+Exports
+- `authPasswordResetRequestBodyValidator`
+- `okMessageResponseValidator`
+- `AUTH_PASSWORD_RESET_REQUEST_MESSAGES`
+- `authPasswordResetRequestCommand`
+
+### `src/shared/commands/authRegisterCommand.js`
+Exports
+- `authRegisterBodyValidator`
+- `registerResponseValidator`
+- `AUTH_REGISTER_MESSAGES`
+- `authRegisterCommand`
+
+### `src/shared/commands/authRegisterConfirmationResendCommand.js`
+Exports
+- `authRegisterConfirmationResendBodyValidator`
+- `AUTH_REGISTER_CONFIRMATION_RESEND_MESSAGES`
+- `authRegisterConfirmationResendCommand`
+
+### `src/shared/commands/authSessionReadCommand.js`
+Exports
+- `sessionResponseValidator`
+- `sessionUnavailableResponseValidator`
+- `AUTH_SESSION_READ_MESSAGES`
+- `authSessionReadCommand`
+
+### `src/shared/commands/index.js`
+Exports
+- `authRegisterCommand`
+- `authRegisterConfirmationResendCommand`
+- `authLoginPasswordCommand`
+- `authLoginOtpRequestCommand`
+- `authLoginOtpVerifyCommand`
+- `authLoginOAuthStartCommand`
+- `authLoginOAuthCompleteCommand`
+- `authPasswordResetRequestCommand`
+- `authPasswordRecoveryCompleteCommand`
+- `authPasswordResetCommand`
+- `authLogoutCommand`
+- `authSessionReadCommand`
+
+### `src/shared/index.js`
+Exports
+- `createApi`
+- `runAuthSignOutFlow`
+- `AUTH_PATHS`
+- `buildAuthOauthStartPath`
+
+### `src/shared/inputNormalization.js`
+Exports
+- `normalizeObjectInput`
+
+### `src/shared/inviteTokens.js`
+Exports
+- `OPAQUE_INVITE_TOKEN_HASH_PREFIX`
+- `normalizeInviteToken(token)`
+- `isSha256Hex(value)`
+- `encodeInviteTokenHash(tokenHash)`
+- `decodeInviteTokenHash(inviteToken)`
+
+### `src/shared/oauthCallbackParams.js`
+Exports
+- `OAUTH_QUERY_PARAM_PROVIDER`
+- `OAUTH_QUERY_PARAM_INTENT`
+- `OAUTH_QUERY_PARAM_RETURN_TO`
+
+### `src/shared/oauthProviders.js`
+Exports
+- `OAUTH_PROVIDER_ID_PATTERN`
+- `OAUTH_PROVIDER_ID_REGEX`
+- `normalizeOAuthProviderId(value, { fallback = null } = {})`
+- `isValidOAuthProviderId(value)`
+- `normalizeOAuthProviderList(value, { fallback = [] } = {})`
+
+### `src/shared/signOutFlow.js`
+Exports
+- `runAuthSignOutFlow({ authApi, clearCsrfTokenCache = null, afterSignOut = null } = {})`
+Local functions
+- `normalizeAuthApi(authApi)`
+
+### root
+
+### `package.descriptor.mjs`
+Exports
+- None

package/reference/autogen/packages/auth-provider-supabase-core.md

@@ -0,0 +1,223 @@
+# packages/auth-provider-supabase-core
+
+Generated by `npm run agent-docs:build`.
+Do not edit manually.
+
+Generated inventory for `packages/auth-provider-supabase-core`.
+Use this on demand; do not load the full index at startup.
+
+## Scope
+- Source: `packages/auth-provider-supabase-core/**/*{.js,.mjs,.cjs,.vue}`
+- Excludes: `test/`, `tests/`, `__tests__/`, `*.test.*`, `*.spec.*`, `*.vitest.*`, `node_modules/`, `dist/`, `coverage/`, `docs/`, `LEGACY/`
+
+## Sections
+
+### src
+
+### `src/client/index.js`
+Exports
+- None
+
+### `src/server/lib/accountFlows.js`
+Exports
+- `createAccountFlows(deps)`
+Local functions
+- `normalizeLocalReturnToPath(value, { fallback = "" } = {})`
+
+### `src/server/lib/actions/auth.contributor.js`
+Exports
+- `authActions`
+Local functions
+- `requireRequestContext(context, actionId)`
+
+### `src/server/lib/authCookies.js`
+Exports
+- `safeRequestCookies(request)`
+- `cookieOptions(isProduction, maxAge)`
+
+### `src/server/lib/authErrorMappers.js`
+Exports
+- `isTransientAuthMessage(message)`
+- `isTransientSupabaseError(error)`
+- `sanitizeAuthMessage(message, fallback = "Authentication request could not be processed.")`
+- `mapAuthError(error, fallbackStatus)`
+- `validationError`
+- `isUserNotFoundLikeAuthError(error)`
+- `mapRecoveryError(error)`
+- `mapPasswordUpdateError(error)`
+- `mapOtpVerifyError(error)`
+- `mapProfileUpdateError(error)`
+- `mapCurrentPasswordError(error)`
+
+### `src/server/lib/authInputParsers.js`
+Exports
+- `normalizeOAuthProviderInput(value, options = {})`
+- `validatePasswordRecoveryPayload(payload)`
+- `parseOAuthCompletePayload(payload = {}, options = {})`
+- `parseOtpLoginVerifyPayload(payload = {})`
+- `mapOAuthCallbackError(errorCode)`
+Local functions
+- `applySessionPairValidation(accessToken, refreshToken, fieldErrors)`
+- `resolveConfiguredOAuthProviders(options = {})`
+
+### `src/server/lib/authJwt.js`
+Exports
+- `loadJose()`
+- `isExpiredJwtError(error)`
+- `classifyJwtVerifyError(error)`
+
+### `src/server/lib/authMethodStatus.js`
+Exports
+- `normalizeIdentityProviderId(value)`
+- `collectProviderIdsFromSupabaseUser(user)`
+- `buildAuthMethodsStatusFromProviderIds(providerIds, options = {})`
+- `buildAuthMethodsStatusFromSupabaseUser(user, options = {})`
+- `buildSecurityStatusFromAuthMethodsStatus(authMethodsStatus)`
+- `findAuthMethodById(authMethodsStatus, methodId)`
+- `findLinkedIdentityByProvider(user, provider)`
+Local functions
+- `normalizeProviderIdList(providerIds)`
+- `countEnabledMethods(methods)`
+- `countConfiguredIdentityMethods(methods)`
+
+### `src/server/lib/authProfileNames.js`
+Exports
+- `displayNameFromEmail(email)`
+- `resolveDisplayName(supabaseUser, fallbackEmail)`
+- `resolveDisplayNameFromClaims(claims, fallbackEmail)`
+
+### `src/server/lib/authRedirectUrls.js`
+Exports
+- `parseHttpUrl(rawValue, variableName)`
+- `createAppBaseUrl(appPublicUrl)`
+- `buildPasswordResetRedirectUrl(options)`
+- `buildOtpLoginRedirectUrl(options)`
+- `normalizeOAuthIntent`
+- `normalizeReturnToPath`
+- `buildOAuthRedirectUrl(options)`
+- `buildOAuthLoginRedirectUrl(options)`
+- `buildOAuthLinkRedirectUrl(options)`
+
+### `src/server/lib/authSecrets.js`
+Exports
+- `buildDisabledPasswordSecret()`
+
+### `src/server/lib/authSessionEventsService.js`
+Exports
+- `createAuthSessionEventsService()`
+
+### `src/server/lib/flowGuards.js`
+Exports
+- `requireNoFieldErrors(parsed, validationError)`
+- `requireAuthUserSession(response, mapError, status = 401)`
+- `requireAuthUser(response, mapError, status = 400)`
+- `requireAuthSession(response, mapError, status = 401)`
+
+### `src/server/lib/index.js`
+Exports
+- `createService`
+- `__testables`
+- `authActions`
+
+### `src/server/lib/oauthFlows.js`
+Exports
+- `createOauthFlows(deps)`
+
+### `src/server/lib/oauthProviderCatalog.js`
+Exports
+- `SUPABASE_OAUTH_PROVIDER_METADATA`
+- `DEFAULT_SUPABASE_OAUTH_PROVIDER_IDS`
+- `resolveSupabaseOAuthProviderCatalog(options = {})`
+- `normalizeOAuthProviderFromCatalog(value, { providerIds = [], fallback = null } = {})`
+- `resolveOAuthProviderQueryParams(providerId, { providerQueryParamsById = {} } = {})`
+- `buildOAuthProviderCatalogResponse(catalog)`
+Local functions
+- `normalizeProviderLabel(value, fallback)`
+- `normalizeProviderQueryParams(value)`
+- `normalizeProviderLabelOverrides(value)`
+- `normalizeProviderQueryParamOverrides(value)`
+- `normalizeExplicitProviderCatalogEntry(entry)`
+- `normalizeExplicitProviderCatalog(value)`
+
+### `src/server/lib/passwordSecurityFlows.js`
+Exports
+- `createPasswordSecurityFlows(deps)`
+
+### `src/server/lib/service.js`
+Exports
+- `createService(options)`
+- `__testables`
+Local functions
+- `normalizeAuthProviderId(value, { fallback = DEFAULT_AUTH_PROVIDER_ID } = {})`
+- `normalizeProviderUserId(value)`
+
+### `src/server/lib/standaloneProfileSyncService.js`
+Exports
+- `createStandaloneProfileSyncService()`
+- `USER_PROFILE_EMAIL_CONFLICT_CODE`
+Local functions
+- `buildIdentityKey({ authProvider, authProviderUserSid } = {})`
+- `normalizeIdentity(identityLike)`
+- `normalizeProfile(profileLike)`
+- `cloneProfile(profile)`
+- `createEmailConflictError()`
+
+### `src/server/lib/test-utils.js`
+Exports
+- `createAccountFlows`
+- `createOauthFlows`
+- `createPasswordSecurityFlows`
+- `mapAuthError`
+- `validationError`
+- `isUserNotFoundLikeAuthError`
+- `mapRecoveryError`
+- `mapPasswordUpdateError`
+- `mapOtpVerifyError`
+- `mapProfileUpdateError`
+- `mapCurrentPasswordError`
+- `isTransientAuthMessage`
+- `isTransientSupabaseError`
+- `buildOtpLoginRedirectUrl`
+- `normalizeOAuthIntent`
+- `normalizeReturnToPath`
+- `buildOAuthRedirectUrl`
+- `buildOAuthLoginRedirectUrl`
+- `buildOAuthLinkRedirectUrl`
+- `normalizeOAuthProviderInput`
+- `parseOAuthCompletePayload`
+- `parseOtpLoginVerifyPayload`
+- `mapOAuthCallbackError`
+- `validatePasswordRecoveryPayload`
+- `resolveSupabaseOAuthProviderCatalog`
+- `resolveOAuthProviderQueryParams`
+- `buildOAuthProviderCatalogResponse`
+- `buildAuthMethodsStatusFromProviderIds`
+- `collectProviderIdsFromSupabaseUser`
+- `findAuthMethodById`
+- `findLinkedIdentityByProvider`
+- `buildSecurityStatusFromAuthMethodsStatus`
+
+### `src/server/providers/AuthProviderServiceProvider.js`
+Exports
+- `AuthProviderServiceProvider`
+
+### `src/server/providers/AuthSupabaseServiceProvider.js`
+Exports
+- `AuthSupabaseServiceProvider`
+Local functions
+- `splitCsv(value)`
+- `normalizeRecord(value)`
+- `normalizeOAuthProviderConfigList(value)`
+- `resolveOAuthConfigFromAppConfig(appConfig)`
+- `resolveAllowedReturnToOrigins({ appConfig = {}, appPublicUrl = "" } = {})`
+- `resolveAuthProviderConfig(env, appConfig = {})`
+- `resolveAuthProfileMode(env)`
+- `createInMemoryUserSettingsRepository()`
+- `resolveCommonDependencies(scope)`
+- `resolveOptionalRepositories(scope)`
+
+### root
+
+### `package.descriptor.mjs`
+Exports
+- None