@jskit-ai/agent-docs 0.1.256 → 0.1.258

package/reference/autogen/packages/auth-core.md

@@ -30,11 +30,13 @@ Exports
 Exports
 - `runAuthSignOutFlow`
 
-### `src/server/actions/auth.contributor.js`
+### `src/server/actions/authActions.js`
 Exports
-- `authActionSpecifications`
-- `buildAuthActions({ authService } = {})`
-- `requireRequestContext(context, actionId)`
+- `createAuthActions({ authService })`
+
+### `src/server/authAccess.js`
+Exports
+- `createAuthAccess()`
 
 ### `src/server/authActor.js`
 Exports
@@ -48,11 +50,20 @@ Local functions
 ### `src/server/authExtensions.js`
 Exports
 - `createAuthExtensions()`
+- `invitationAsGiven`
 - `mergePolicyContexts(contexts = [])`
 Local functions
 - `normalizeOrderedExtension(value, { idField, method, label } = {})`
 - `ordered(values)`
 
+### `src/server/authPolicy.js`
+Exports
+- `createAuthPolicy({ authService, extensions, env })`
+- `everyoneSignedOut`
+Local functions
+- `parseList(value)`
+- `defaultHasPermission({ permission, permissions })`
+
 ### `src/server/authPolicyContextResolverRegistry.js`
 Exports
 - `registerAuthPolicyContextResolver(extensions, resolver)`
@@ -88,7 +99,9 @@ Exports
 - `DEV_AUTH_SECRET_HEADER`
 - `ensureDevAuthExchangeAvailable(policy = {}, request = null)`
 - `ensureDevAuthRuntimeAvailable(policy = {}, request = null)`
+- `isDevAuthBootstrapEnabled(policy)`
 - `isLocalDevAuthRequest(request)`
+- `isProductionNodeEnv(nodeEnv)`
 - `resolveDevAuthPolicy({ enabled = false, nodeEnv = "development", secret = "" } = {})`
 - `resolveDevAuthPolicyFromEnv(env = {})`
 Local functions
@@ -120,6 +133,8 @@ Exports
 - `normalizeActorResolution(result)`
 Local functions
 - `assertFunction(value, name)`
+- `ignorePolicyDenial()`
+- `resolveNoPolicyContext()`
 
 ### `src/server/lib/errors.js`
 Exports
@@ -154,7 +169,6 @@ Local functions
 - `enforceCsrfProtection(fastify, request, reply)`
 - `resolveCsrfToken(request)`
 - `resolveOwnerValue(meta, request)`
-- `notifyPolicyDenied(onPolicyDenied, payload)`
 
 ### `src/server/lib/routeMeta.js`
 Exports
@@ -177,6 +191,10 @@ Exports
 - `normalizePermissions(value)`
 - `createMembershipIndexes(memberships)`
 
+### `src/server/noAppProfiles.js`
+Exports
+- `noAppProfiles`
+
 ### `src/server/providers/AuthAccessProvider.js`
 Exports
 - `AuthAccessProvider`
@@ -192,10 +210,20 @@ Exports
 ### `src/server/providers/AuthPolicyProvider.js`
 Exports
 - `AuthPolicyProvider`
-Local functions
-- `parseList(value)`
-- `defaultHasPermission({ permission, permissions = [] } = {})`
-- `createPolicy({ authService, extensions, env })`
+
+### `src/server/types.js`
+Exports
+- `type AuthAccess`
+- `type AuthExtensions`
+- `type AuthPolicy`
+- `type AuthCapabilities`
+- `type AuthActor`
+- `type AuthRequestResult`
+- `type AuthProfileProjector`
+- `type AuthInvitationContextResolver`
+- `type AuthRealtimePolicy`
+- `type AuthLogoutResult`
+- `type AuthService`
 
 ### `src/server/unsupportedOperation.js`
 Exports
@@ -227,16 +255,17 @@ Local functions
 - `validateEmail(rawEmail)`
 - `checkConfirmPassword(rawPassword, rawConfirmPassword)`
 - `buildFieldErrors(entries = [])`
-- `buildEmailPasswordInput(payload = {}, { passwordValidator } = {})`
+- `buildEmailPasswordInput(payload, { passwordValidator })`
 
 ### `src/shared/authApi.js`
 Exports
 - `createApi({ request })`
+- `type AuthApiRequest`
 
 ### `src/shared/authCapabilities.js`
 Exports
 - `AUTH_PASSWORD_RECOVERY_DELIVERIES`
-- `AUTH_OPTIONAL_OPERATION_FEATURES`
+- `AUTH_OPERATION_FEATURES`
 - `normalizeAuthProviderId(value, { fallback = "unknown" } = {})`
 - `normalizeAuthCapabilities(value = {})`
 - `getCapabilityFeature(capabilities, path)`
@@ -465,7 +494,7 @@ Exports
 - `AUTH_PATHS`
 - `buildAuthOauthStartPath`
 - `AUTH_PASSWORD_RECOVERY_DELIVERIES`
-- `AUTH_OPTIONAL_OPERATION_FEATURES`
+- `AUTH_OPERATION_FEATURES`
 - `normalizeAuthProviderId`
 - `normalizeAuthCapabilities`
 - `getCapabilityFeature`
@@ -501,6 +530,8 @@ Exports
 
 ### `src/shared/signOutFlow.js`
 Exports
-- `runAuthSignOutFlow({ authApi, clearCsrfTokenCache = null, afterSignOut = null } = {})`
+- `runAuthSignOutFlow({ authApi, clearCsrfTokenCache = keepCsrfTokenCache, afterSignOut = doNothingAfterSignOut } = {})`
 Local functions
 - `normalizeAuthApi(authApi)`
+- `keepCsrfTokenCache()`
+- `doNothingAfterSignOut()`

package/reference/autogen/packages/auth-provider-local-core.md

@@ -14,6 +14,43 @@ Use this on demand; do not load the full index at startup.
 
 ### src
 
+### `src/server/lib/accounts.js`
+Exports
+- `NO_PASSWORD`
+- `createLocalAccounts({ appProfileProjection, backend, config, invitationContextResolver, passwords, profileProjector, sessions })`
+- `hasPassword(user)`
+- `normalizeDisplayName(value, email)`
+- `validateEmailInput(email)`
+- `validatePasswordInput(password)`
+Local functions
+- `devLoginAsValidationError(fields = {})`
+- `devLoginAsUserNotFound({ email = "", userId = "" } = {})`
+- `normalizeInvitationInput(value)`
+
+### `src/server/lib/authPayloads.js`
+Exports
+- `DEV_AUTH_SESSION_PURPOSE`
+- `PROVIDER_ID`
+- `buildAuthPayload({ user, session, profileProjector, profileOptions = {} })`
+- `buildAuthResult({ user, session, appProfile })`
+- `buildSessionAuthPayload({ appProfileProjection, devAuth, profileProjector, request, session, user, syncProfile = true })`
+- `findExistingAppProfile(user, profileProjector)`
+- `isAuthenticatingSession(session)`
+Local functions
+- `isNormalSession(session)`
+- `isDevAuthSession(session)`
+- `buildProfile(user)`
+- `buildActor(user, profile)`
+
+### `src/server/lib/config.js`
+Exports
+- `resolveLocalAuthConfig({ appRoot, env, fileBackend, emailRecovery })`
+Local functions
+- `resolveStoreDir(env, appRoot)`
+- `resolveSessionSecret(env, { storeDir, isProduction })`
+- `resolveAppPublicUrl(env, { emailRecovery, oauthEnabled })`
+- `resolveRecoveryDelivery(env, { emailRecovery, isProduction })`
+
 ### `src/server/lib/fileBackend.js`
 Exports
 - `createLocalFileBackend({ storeDir })`
@@ -50,27 +87,40 @@ Local functions
 ### `src/server/lib/index.js`
 Exports
 - `createLocalAuthService`
+- `resolveLocalAuthConfig`
+- `createLoggedRecoverySender`
 - `createLocalFileBackend`
 - `LOCAL_AUTH_USER_REGISTERED_EVENT`
 - `createLocalAuthRegisterHookDecorator`
 - `hashPassword`
 - `normalizePasswordStrategy`
+- `scryptPasswordStrategy`
 - `verifyPassword`
 
 ### `src/server/lib/oauth.js`
 Exports
-- `createOAuthClients({ logger = null } = {})`
+- `createOAuthClients({ logger })`
 - `resolveOAuthProviders(env = {})`
 Local functions
 - `signInError(statusCode, message, { code, provider = null })`
 - `unverifiedSignIn()`
 - `displayNameFrom(source = {})`
 
+### `src/server/lib/oauthFlows.js`
+Exports
+- `createLocalOAuthFlows({ backend, config, logger, oauthProvidersById, profileProjector, securityStatus, sessions })`
+
+### `src/server/lib/passwordFlows.js`
+Exports
+- `createLocalPasswordFlows({ backend, config, passwords, profileProjector, recoverySender, sessions })`
+- `createLoggedRecoverySender(logger)`
+
 ### `src/server/lib/passwords.js`
 Exports
 - `hashPassword(password)`
+- `normalizePasswordStrategy(strategy)`
+- `scryptPasswordStrategy`
 - `verifyPassword(password, record)`
-- `normalizePasswordStrategy(strategy = null)`
 Local functions
 - `base64url(buffer)`
 - `fromBase64url(value)`
@@ -78,47 +128,39 @@ Local functions
 ### `src/server/lib/registerHookDecorator.js`
 Exports
 - `LOCAL_AUTH_USER_REGISTERED_EVENT`
-- `createLocalAuthRegisterHookDecorator({ decoratorId = "auth.local.registerHook", order = 0, logger = null, hook = null } = {})`
+- `createLocalAuthRegisterHookDecorator({ decoratorId = "auth.local.registerHook", order = 0, logger, hook })`
+- `type LocalAuthRegisterHook`
 Local functions
 - `assertBlockingMode(hook)`
-- `normalizeRegisterHook(hook = null)`
-- `logNonBlockingHookFailure({ logger, hook, error } = {})`
+- `normalizeRegisterHook(hook)`
+- `logNonBlockingHookFailure({ logger, hook, error })`
 - `runRegisterHook({ hook, result, logger })`
 
+### `src/server/lib/securityStatus.js`
+Exports
+- `createLocalSecurityStatus({ backend, config, oauthProvidersById, sessions })`
+
 ### `src/server/lib/service.js`
 Exports
-- `createLocalAuthService({ backend, config, profileProjector = null, passwordStrategy = null, invitationContextResolver = null, recoverySender = null })`
+- `createLocalAuthService({ backend, config, invitationContextResolver, logger, passwordStrategy, profileProjector, recoverySender })`
+
+### `src/server/lib/sessions.js`
+Exports
+- `cookieOptions(isProduction, maxAge)`
+- `createLocalSessions({ appProfileProjection, backend, config, profileProjector })`
+- `safeRequestCookies(request)`
 Local functions
 - `nowSeconds()`
-- `isoFromNow(seconds)`
-- `isExpiredIso(value)`
-- `isNormalSession(session)`
-- `isDevAuthSession(session)`
-- `isAuthenticatingSession(session)`
-- `normalizeDisplayName(value, email)`
-- `hasPassword(user)`
-- `createId(prefix)`
-- `safeRequestCookies(request)`
 - `unauthenticatedAuthResult(clearSession = false)`
-- `cookieOptions(isProduction, maxAge)`
 - `clearCookieOptions(isProduction)`
-- `buildProfile(user)`
-- `buildActor(user, profile = null)`
-- `buildAuthResult({ user, session, appProfile = null })`
-- `requireProfileResult(profile, methodName)`
-- `buildAuthPayload({ user, session, profileProjector, profileOptions = {} })`
-- `findExistingAppProfile(user, profileProjector)`
-- `buildSessionAuthPayload({ devAuth, profileProjector, request, session, user, syncProfile = true })`
 - `buildAccessToken({ user, session, secret, ttlSeconds = ACCESS_TTL_SECONDS })`
 - `buildSessionPayload({ user, session, refreshToken, secret })`
-- `validatePasswordInput(password)`
-- `validateEmailInput(email)`
-- `devLoginAsValidationError(fields = {})`
-- `devLoginAsUserNotFound({ email = "", userId = "" } = {})`
-- `normalizeInvitationInput(value = null)`
 
 ### `src/server/lib/tokens.js`
 Exports
+- `createId(prefix)`
+- `isExpiredIso(value)`
+- `isoFromNow(seconds)`
 - `randomToken(bytes = 32)`
 - `sha256Base64url(value)`
 - `signToken(payload, secret)`
@@ -130,20 +172,30 @@ Local functions
 ### `src/server/providers/AuthLocalProvider.js`
 Exports
 - `AuthLocalProvider`
-- `resolveConfig({ appRoot, backend, env, logger, recoverySender = null })`
-Local functions
-- `resolveStoreDir(env, appRoot)`
-- `resolveSessionSecret(env, { storeDir, isProduction })`
-- `resolveAppPublicUrl(env, { recoverySender, oauthProviders })`
+
+### `src/server/types.js`
+Exports
+- `type AuthLocalBackendTransaction`
+- `type AuthLocalBackend`
+- `type AuthLocalPasswordStrategy`
+- `type AuthLocalRecoverySender`
+- `type AuthLocalConfig`
+- `type AuthLocalOAuthProvider`
+- `type AuthLocalPasswords`
+- `type AuthLocalSessions`
 
 ### test-support
 
+### `test-support/localService.js`
+Exports
+- `localServiceOptions({ env = {}, emailRecovery = false } = {})`
+
 ### `test-support/oauthHarness.js`
 Exports
 - `APP_URL`
 - `ATTEMPT_COOKIE`
 - `approveAtProvider(service, { provider = "google", returnTo = "/home", cookies = {}, link = false } = {})`
-- `createService({ backend, oauthProviders, profileProjector = null })`
+- `createService({ backend, oauthProviders, profileProjector })`
 - `oidcProviderEntry(issuer, { id = "google", label = "Google" } = {})`
 - `sessionCookies(session)`
 - `startFakeGitHub({ user = { id: 4242, login: "ada", name: "Ada Lovelace" }, emails } = {})`

package/reference/autogen/packages/auth-provider-local-db-core.md

@@ -17,7 +17,7 @@ Use this on demand; do not load the full index at startup.
 ### `src/server/lib/dbBackend.js`
 Exports
 - `LOCAL_AUTH_DB_TABLES`
-- `createLocalDbBackend({ knex, transactionManager } = {})`
+- `createLocalDbBackend({ knex, transactionManager })`
 Local functions
 - `nowIso()`
 - `toDate(value)`
@@ -34,7 +34,6 @@ Local functions
 - `userInsert(input = {})`
 - `sessionInsert(input = {})`
 - `recoveryInsert(input = {})`
-- `assertBackendDependencies({ knex, transactionManager } = {})`
 
 ### `src/server/lib/index.js`
 Exports

package/reference/autogen/packages/auth-provider-oidc-core.md

@@ -18,7 +18,7 @@ Use this on demand; do not load the full index at startup.
 Exports
 - `BACKCHANNEL_LOGOUT_EVENT`
 - `BackchannelLogoutError`
-- `createBackchannelLogout({ config, store, issuer, fetchImpl = null, now = Date.now })`
+- `createBackchannelLogout({ config, store, issuer, fetchImpl = globalThis.fetch, now = Date.now })`
 
 ### `src/server/lib/config.js`
 Exports
@@ -43,7 +43,7 @@ Exports
 
 ### `src/server/lib/issuer.js`
 Exports
-- `createIssuerClient({ config, store, logger = null, fetchImpl = null, now = Date.now })`
+- `createIssuerClient({ config, store, logger, fetchImpl = globalThis.fetch, now = Date.now })`
 - `registrationMetadata(origin, appName)`
 Local functions
 - `unreachable(error, logger)`
@@ -66,7 +66,7 @@ Local functions
 ### `src/server/lib/service.js`
 Exports
 - `SESSION_COOKIE`
-- `createOidcAuthService({ config, store, issuer, profileProjector = null, logger = null, now = Date.now })`
+- `createOidcAuthService({ config, store, issuer, profileProjector, logger, now = Date.now })`
 Local functions
 - `sha256(value)`
 - `cookiesOf(request)`
@@ -100,6 +100,12 @@ Local functions
 Exports
 - `AuthOidcProvider`
 
+### `src/server/types.js`
+Exports
+- `type OidcConfig`
+- `type OidcStore`
+- `type OidcIssuerClient`
+
 ### `src/shared/index.js`
 Exports
 - `AUTH_OIDC_BACKCHANNEL_LOGOUT_PATH`
@@ -129,7 +135,7 @@ Exports
 ### `test-support/harness.js`
 Exports
 - `APP_ORIGIN`
-- `createRelyingParty({ issuer, env = {}, fetchImpl = null, now = Date.now } = {})`
+- `createRelyingParty({ issuer, env = {}, fetchImpl = globalThis.fetch, now = Date.now })`
 - `requestAt(origin = APP_ORIGIN, cookies = {})`
 - `signInAtIssuer(rp, { origin = APP_ORIGIN, returnTo = "/home" } = {})`
 Local functions

package/reference/autogen/packages/auth-provider-supabase-core.md

@@ -20,9 +20,7 @@ Exports
 
 ### `src/server/lib/accountFlows.js`
 Exports
-- `createAccountFlows(deps)`
-Local functions
-- `normalizeLocalReturnToPath(value, { fallback = "" } = {})`
+- `createSupabaseAccountFlows({ config, clients, sessions, profileMirror, securityStatus })`
 
 ### `src/server/lib/authCookies.js`
 Exports
@@ -78,8 +76,7 @@ Local functions
 ### `src/server/lib/authProfileNames.js`
 Exports
 - `displayNameFromEmail(email)`
-- `resolveDisplayName(supabaseUser, fallbackEmail)`
-- `resolveDisplayNameFromClaims(claims, fallbackEmail)`
+- `resolveDisplayName(source, fallbackEmail)`
 
 ### `src/server/lib/authRedirectUrls.js`
 Exports
@@ -97,37 +94,43 @@ Exports
 Exports
 - `buildDisabledPasswordSecret()`
 
+### `src/server/lib/config.js`
+Exports
+- `assertSelectedProvider(env)`
+- `resolveSupabaseConfig({ config, env })`
+Local functions
+- `splitCsv(value)`
+- `resolveOAuthCatalog(env, auth)`
+- `resolveProfileMode(auth)`
+
 ### `src/server/lib/devAuthBootstrap.js`
 Exports
-- `assertDevAuthBootstrapConfig(config, { userProfilesRepository = null } = {})`
-- `authenticateDevAuthRequest({ request, accessToken = "", refreshToken = "" }, { config, userProfilesRepository = null } = {})`
+- `authenticateDevAuthRequest({ request, accessToken = "", refreshToken = "" }, { config, userProfilesRepository })`
 - `createDevAuthSession(profile, config)`
 - `isDevAuthToken(token)`
-- `resolveDevAuthConfig({ enabled = false, secret = "", nodeEnv = "development", jwtAudience = "authenticated", accessTtlSeconds = DEFAULT_DEV_AUTH_ACCESS_TTL_SECONDS, refreshTtlSeconds = DEFAULT_DEV_AUTH_REFRESH_TTL_SECONDS } = {})`
-- `resolveDevAuthProfile(input = {}, { userProfilesRepository = null, validationError } = {})`
+- `resolveDevAuthConfig(env, jwtAudience)`
+- `resolveDevAuthProfile(input, { userProfilesRepository })`
 Local functions
 - `normalizePositiveInteger(value, fallback)`
 - `stripDevAuthTokenPrefix(token)`
 - `buildProfileFromTokenClaims(payload)`
-- `resolveProfileFromTokenClaims(payload, { userProfilesRepository = null } = {})`
+- `resolveProfileFromTokenClaims(payload, { userProfilesRepository })`
 - `signDevAuthToken(kind, profile, config)`
 - `verifyDevAuthToken(token, kind, config)`
 
 ### `src/server/lib/flowGuards.js`
 Exports
-- `requireNoFieldErrors(parsed, validationError)`
 - `requireAuthUserSession(response, mapError, status = 401)`
 - `requireAuthUser(response, mapError, status = 400)`
 - `requireAuthSession(response, mapError, status = 401)`
 
 ### `src/server/lib/index.js`
 Exports
-- `createService`
-- `__testables`
+- `createSupabaseAuthService`
 
 ### `src/server/lib/oauthFlows.js`
 Exports
-- `createOauthFlows(deps)`
+- `createSupabaseOAuthFlows({ config, clients, sessions, profileMirror, securityStatus })`
 
 ### `src/server/lib/oauthProviderCatalog.js`
 Exports
@@ -145,28 +148,36 @@ Local functions
 - `normalizeExplicitProviderCatalogEntry(entry)`
 - `normalizeExplicitProviderCatalog(value)`
 
-### `src/server/lib/passwordSecurityFlows.js`
+### `src/server/lib/passwordFlows.js`
 Exports
-- `createPasswordSecurityFlows(deps)`
+- `createSupabasePasswordFlows({ config, clients, sessions, profileMirror, securityStatus, profiles })`
 
-### `src/server/lib/service.js`
+### `src/server/lib/profileMirror.js`
 Exports
-- `createService(options)`
-- `__testables`
+- `SUPABASE_PROVIDER_ID`
+- `createSupabaseProfileMirror({ config, profiles })`
 Local functions
-- `normalizeAuthProviderId(value, { fallback = DEFAULT_AUTH_PROVIDER_ID } = {})`
+- `normalizeAuthProviderId(value)`
 - `normalizeProviderUserId(value)`
 
-### `src/server/lib/standaloneProfileSyncService.js`
+### `src/server/lib/profileModes.js`
 Exports
-- `createStandaloneProfileSyncService()`
-- `USER_PROFILE_EMAIL_CONFLICT_CODE`
+- `PROVIDER_MODE_PROFILES`
+- `createUsersModeProfiles(identity)`
 Local functions
-- `buildIdentityKey({ authProvider, authProviderUserSid } = {})`
-- `normalizeIdentity(identityLike)`
-- `normalizeProfile(profileLike)`
-- `cloneProfile(profile)`
-- `createEmailConflictError()`
+- `createProviderProfileProjector()`
+
+### `src/server/lib/securityStatus.js`
+Exports
+- `createSupabaseSecurityStatus({ config, capabilities, sessions, profileMirror, profiles })`
+
+### `src/server/lib/service.js`
+Exports
+- `createSupabaseAuthService({ config, profiles })`
+
+### `src/server/lib/sessions.js`
+Exports
+- `createSupabaseSessions({ config, clients, profileMirror, profiles })`
 
 ### `src/server/lib/supabaseClientOptions.js`
 Exports
@@ -174,49 +185,24 @@ Exports
 Local functions
 - `resolveRealtimeTransport(options = {})`
 
-### `src/server/lib/test-utils.js`
+### `src/server/lib/supabaseClients.js`
 Exports
-- `createAccountFlows`
-- `createOauthFlows`
-- `createPasswordSecurityFlows`
-- `mapAuthError`
-- `validationError`
-- `isUserNotFoundLikeAuthError`
-- `mapRecoveryError`
-- `mapPasswordUpdateError`
-- `mapOtpVerifyError`
-- `mapProfileUpdateError`
-- `mapCurrentPasswordError`
-- `isTransientAuthMessage`
-- `isTransientSupabaseError`
-- `buildOtpLoginRedirectUrl`
-- `normalizeOAuthIntent`
-- `normalizeReturnToPath`
-- `buildOAuthRedirectUrl`
-- `buildOAuthLoginRedirectUrl`
-- `buildOAuthLinkRedirectUrl`
-- `normalizeOAuthProviderInput`
-- `mapOAuthCallbackError`
-- `resolveSupabaseOAuthProviderCatalog`
-- `resolveOAuthProviderQueryParams`
-- `buildOAuthProviderCatalogResponse`
-- `buildAuthMethodsStatusFromProviderIds`
-- `collectProviderIdsFromSupabaseUser`
-- `findAuthMethodById`
-- `findLinkedIdentityByProvider`
-- `buildSecurityStatusFromAuthMethodsStatus`
+- `createSupabaseClients(config)`
 
 ### `src/server/providers/AuthSupabaseProvider.js`
 Exports
 - `AuthSupabaseProvider`
-Local functions
-- `normalizeRecord(value)`
-- `splitCsv(value)`
-- `oauthConfig(config)`
-- `providerConfig(env, config)`
-- `profileMode(config)`
-- `createProviderProfileProjector()`
-- `assertSelectedProvider(env)`
+
+### `src/server/types.js`
+Exports
+- `type SupabaseConfig`
+- `type SupabaseClients`
+- `type SupabaseProfileMirror`
+- `type SupabaseSessions`
+- `type SupabaseSecurityStatus`
+- `type SupabaseUserProfiles`
+- `type SupabaseUserSettings`
+- `type SupabaseProfiles`
 
 ### patterns
 

package/reference/autogen/packages/auth-web.md

@@ -63,6 +63,10 @@ Local functions
 Exports
 - `useLoginViewValidation({ state } = {})`
 
+### `src/client/composables/loginView/useSessionRecheckOnShow.js`
+Exports
+- `useSessionRecheckOnShow(recheck)`
+
 ### `src/client/composables/loginView/validationHelpers.js`
 Exports
 - `validateCommandSection(commandResource, section, payload)`
@@ -265,11 +269,13 @@ Local functions
 Exports
 - None
 
+### `src/server/authWeb.js`
+Exports
+- `createAuthWeb({ authService, env })`
+
 ### `src/server/AuthWebFeature.js`
 Exports
 - `AuthWebFeature`
-Local functions
-- `devAuthBootstrapEnabled(env)`
 
 ### `src/server/constants/authActionIds.js`
 Exports
@@ -279,23 +285,21 @@ Exports
 Exports
 - `AuthController`
 - `AUTH_ACTION_IDS`
-- `createController({ service, authService } = {})`
 
 ### `src/server/managedPreviewIdentity.js`
 Exports
-- `MANAGED_PREVIEW_IDENTITY_PROTOCOL`
-- `executeManagedPreviewIdentityRequest(value, { env = process.env, fetchImpl = globalThis.fetch } = {})`
-- `runManagedPreviewIdentityCommand({ env = process.env, fetchImpl = globalThis.fetch, stdin = process.stdin, stdout = process.stdout } = {})`
+- `DEFAULT_PREVIEW_IDENTITY_PROTOCOL`
+- `executeManagedPreviewIdentityRequest(value, { env, fetchImpl = globalThis.fetch, protocol = DEFAULT_PREVIEW_IDENTITY_PROTOCOL, localHostnames = [] })`
+- `runManagedPreviewIdentityCommand({ env, fetchImpl = globalThis.fetch, stdin = process.stdin, stdout = process.stdout, protocol = DEFAULT_PREVIEW_IDENTITY_PROTOCOL, localHostnames = [] })`
 Local functions
 - `commandError(message, code = "jskit_managed_preview_identity_failed", details = {})`
-- `response(requestId, values)`
-- `failure(requestId, error)`
+- `response(protocol, requestId, values)`
+- `failure(protocol, requestId, error)`
 - `readBoundedStream(stream, label)`
 - `readCommandInput(stream)`
-- `localTargetOrigin(value)`
-- `normalizeRequest(value)`
+- `localTargetOrigin(value, localHostnames)`
+- `normalizeRequest(value, { protocol, localHostnames })`
 - `identityFromSubject(subject)`
-- `responseCookies(fetchResponse)`
 - `cookieHeader(setCookie)`
 - `responsePayload(fetchResponse)`
 - `rejected(payload, fetchResponse, details = {})`
@@ -313,6 +317,10 @@ Exports
 Exports
 - `AuthWebService`
 
+### `src/server/types.js`
+Exports
+- `type AuthWeb`
+
 ### patterns
 
 ### `patterns/auth-surface/example/src/pages/auth/login.vue`