@jskit-ai/agent-docs 0.1.271 → 0.1.273

package/reference/autogen/packages/assistant-core.md

@@ -514,6 +514,7 @@ Exports
 - `codexProviderConfiguration(provider, apiKey)`
 - `codexProviderCatalogPath(codexHome)`
 - `codexProviderFileConfiguration(provider, key, codexHome)`
+- `readCodexCustomModels(codexHome)`
 - `copyCodexProviderHome(sourceHome, targetHome)`
 - `verifyCodexProviderKey(provider, apiKey, fetchImpl = fetch)`
 Local functions
@@ -657,6 +658,9 @@ Exports
 - `prepareCodexHistory(params, client, { baseUrl, modelProviderId, ...options } = {})`
 - `readCodexHistoryRows`
 Local functions
+- `historyRouted(destination)`
+- `customRouteSegment(baseUrl)`
+- `customUpstream(encoded = "")`
 - `unsupportedHistory(message)`
 - `historicalToolOutput(item)`
 - `historicalResultMessage(label, parts, closingTag)`
@@ -1299,6 +1303,18 @@ Exports
 Local functions
 - `recordNoNativeCheckpoint()`
 
+### `src/server/conversation/customEndpoint.js`
+Exports
+- `verifyCustomEndpoint({ engineId, baseUrl, model, apiKey = "", fetchImpl = fetch, timeoutMs = CUSTOM_ENDPOINT_CHECK_TIMEOUT_MS })`
+- `readOllamaLoadedContext({ baseUrl, model, apiKey = "", fetchImpl = fetch })`
+- `probeCustomEndpoint({ engineId, baseUrl, fetchImpl = fetch })`
+- `checkCustomEndpoint({ contextWindow, ...input })`
+- `CUSTOM_ENDPOINT_CHECK_TIMEOUT_MS`
+Local functions
+- `checkError(code, message)`
+- `readLimitedJson(response)`
+- `namesMissingModel(result, model)`
+
 ### `src/server/conversation/deliveryTiming.js`
 Exports
 - `normalizeConversationDeliveryHostStages(hostStages = [])`
@@ -1756,6 +1772,7 @@ Exports
 - `codexProviderConfiguration`
 - `codexProviderFileConfiguration`
 - `codexProviderCatalogPath`
+- `readCodexCustomModels`
 - `verifyCodexProviderKey`
 - `codexAuthOutputRequiresReconnect`
 - `createCodexAccountReader`
@@ -1855,6 +1872,14 @@ Exports
 - `CODEX_HELPER_THREAD_LIFECYCLES`
 - `createCodexHelperThreadLedgerOwner`
 
+### `src/server/hosts/customEndpoint.js`
+Exports
+- `CUSTOM_ENDPOINT_CHECK_TIMEOUT_MS`
+- `checkCustomEndpoint`
+- `probeCustomEndpoint`
+- `readOllamaLoadedContext`
+- `verifyCustomEndpoint`
+
 ### `src/server/hosts/nativeHistory.js`
 Exports
 - `readStoppedNativeDatabase`
@@ -2249,7 +2274,12 @@ Exports
 
 ### `src/shared/nativeProviders.js`
 Exports
+- `CUSTOM_AI_MINIMUM_CONTEXT`
+- `CUSTOM_AI_PLACEHOLDER_TOKEN`
+- `CUSTOM_AI_PROVIDER_ID`
 - `NATIVE_AI_PROVIDERS`
+- `connectionAiProvider(providerId, connection)`
+- `customAiProvider({ engineId = "codex", baseUrl, model: modelId, contextWindow, label = "Custom endpoint" })`
 - `nativeAiProvider(id)`
 - `nativeAiModel(id, providerId = "")`
 Local functions

package/reference/autogen/packages/auth-core.md

@@ -101,7 +101,6 @@ Exports
 - `ensureDevAuthRuntimeAvailable(policy = {}, request = null)`
 - `isDevAuthBootstrapEnabled(policy)`
 - `isLocalDevAuthRequest(request)`
-- `isProductionNodeEnv(nodeEnv)`
 - `resolveDevAuthPolicy({ enabled = false, nodeEnv = "development", secret = "" } = {})`
 - `resolveDevAuthPolicyFromEnv(env = {})`
 Local functions
@@ -164,7 +163,6 @@ Exports
 Local functions
 - `normalizeUnsafeMethods(methodsValue)`
 - `normalizeApiPrefix(value)`
-- `normalizeRateLimitPluginOptions(value)`
 - `resolveRouteConfig(request)`
 - `enforceCsrfProtection(fastify, request, reply)`
 - `resolveCsrfToken(request)`
@@ -367,6 +365,8 @@ Exports
 - `okOutputValidator`
 - `okMessageOutputValidator`
 - `registerOutputValidator`
+- `registerConfirmationResendOutputValidator`
+- `registerConfirmOutputValidator`
 - `loginOutputValidator`
 - `otpVerifyOutputValidator`
 - `oauthCompleteOutputValidator`
@@ -462,6 +462,12 @@ Exports
 - `AUTH_REGISTER_CONFIRMATION_RESEND_MESSAGES`
 - `authRegisterConfirmationResendCommand`
 
+### `src/shared/commands/authRegisterConfirmCommand.js`
+Exports
+- `authRegisterConfirmBodyValidator`
+- `AUTH_REGISTER_CONFIRM_MESSAGES`
+- `authRegisterConfirmCommand`
+
 ### `src/shared/commands/authSessionReadCommand.js`
 Exports
 - `sessionOutputValidator`
@@ -473,6 +479,7 @@ Exports
 Exports
 - `authRegisterCommand`
 - `authRegisterConfirmationResendCommand`
+- `authRegisterConfirmCommand`
 - `authLoginPasswordCommand`
 - `authLoginOtpRequestCommand`
 - `authLoginOtpVerifyCommand`

package/reference/autogen/packages/auth-provider-local-core.md

@@ -17,11 +17,12 @@ Use this on demand; do not load the full index at startup.
 ### `src/server/lib/accounts.js`
 Exports
 - `NO_PASSWORD`
-- `createLocalAccounts({ appProfileProjection, backend, config, invitationContextResolver, passwords, profileProjector, sessions })`
+- `createLocalAccounts({ appProfileProjection, backend, config, emailConfirmation, firstAccountSetup, invitationContextResolver, passwords, profileProjector, sessions })`
 - `hasPassword(user)`
 - `normalizeDisplayName(value, email)`
+- `resolveRegistrationProfileOptions(invitationContextResolver, invitationInput, email)`
 - `validateEmailInput(email)`
-- `validatePasswordInput(password)`
+- `validatePasswordInput(password, minLength)`
 Local functions
 - `devLoginAsValidationError(fields = {})`
 - `devLoginAsUserNotFound({ email = "", userId = "" } = {})`
@@ -44,31 +45,30 @@ Local functions
 
 ### `src/server/lib/config.js`
 Exports
-- `resolveLocalAuthConfig({ appRoot, env, fileBackend, emailRecovery })`
+- `resolveLocalAuthConfig({ appRoot, env, fileBackend, emailRecovery, emailConfirmationSender = false })`
 Local functions
 - `resolveStoreDir(env, appRoot)`
 - `resolveSessionSecret(env, { storeDir, isProduction })`
-- `resolveAppPublicUrl(env, { emailRecovery, oauthEnabled })`
+- `resolveSetupCode(env, { isProduction })`
+- `resolveAppPublicUrl(env, { emailRecovery, emailedConfirmation, oauthEnabled })`
 - `resolveRecoveryDelivery(env, { emailRecovery, isProduction })`
+- `resolveConfirmationDelivery(env, { emailConfirmationSender, isProduction })`
+- `resolvePasswordMinLength(env)`
+
+### `src/server/lib/emailConfirmation.js`
+Exports
+- `CONFIRMATION_TOKEN_TTL_SECONDS`
+- `createLocalEmailConfirmation({ backend, config, confirmationSender, firstAccountSetup, invitationContextResolver, profileProjector, sessions })`
+- `createLoggedConfirmationSender(logger)`
+Local functions
+- `emailTakenError()`
+- `confirmationInvalidError()`
 
 ### `src/server/lib/fileBackend.js`
 Exports
 - `createLocalFileBackend({ storeDir })`
 Local functions
 - `nowIso()`
-- `encodeField(value)`
-- `decodeField(value)`
-- `splitLine(line, expectedType)`
-- `parseUsers(content)`
-- `serializeUsers(users)`
-- `parseSessions(content)`
-- `serializeSessions(sessions)`
-- `parseRecovery(content)`
-- `serializeRecovery(records)`
-- `parseIdentities(content)`
-- `serializeIdentities(identities)`
-- `parseOAuthAttempts(content)`
-- `serializeOAuthAttempts(attempts)`
 - `readText(filePath)`
 - `writeAtomic(filePath, content)`
 - `encodeJournalContent(content)`
@@ -84,12 +84,50 @@ Local functions
 - `clone(value)`
 - `createTx(state, touched)`
 
+### `src/server/lib/fileRecords.js`
+Exports
+- `parseIdentities(content)`
+- `parseOAuthAttempts(content)`
+- `parseRecovery(content)`
+- `parseRegistrations(content)`
+- `parseSessions(content)`
+- `parseSignInFailures(content)`
+- `parseUsers(content)`
+- `serializeIdentities(identities)`
+- `serializeOAuthAttempts(attempts)`
+- `serializeRecovery(records)`
+- `serializeRegistrations(records)`
+- `serializeSessions(sessions)`
+- `serializeSignInFailures(records)`
+- `serializeUsers(users)`
+Local functions
+- `encodeField(value)`
+- `decodeField(value)`
+- `splitLine(line, expectedType)`
+
+### `src/server/lib/firstAccountSetup.js`
+Exports
+- `SETUP_CODE_ENV`
+- `SETUP_CODE_FILE`
+- `SETUP_CODE_MIN_CHARACTERS`
+- `createFirstAccountSetup({ backend, config, logger })`
+- `normalizedSetupCode(code)`
+Local functions
+- `newSetupCode()`
+- `setupCodeHash(code)`
+- `setupCodeRequired()`
+- `setupCodeInvalid()`
+
 ### `src/server/lib/index.js`
 Exports
 - `createLocalAuthService`
 - `resolveLocalAuthConfig`
+- `createLoggedConfirmationSender`
 - `createLoggedRecoverySender`
 - `createLocalFileBackend`
+- `SETUP_CODE_ENV`
+- `SETUP_CODE_FILE`
+- `createFirstAccountSetup`
 - `LOCAL_AUTH_USER_REGISTERED_EVENT`
 - `createLocalAuthRegisterHookDecorator`
 - `hashPassword`
@@ -108,7 +146,7 @@ Local functions
 
 ### `src/server/lib/oauthFlows.js`
 Exports
-- `createLocalOAuthFlows({ backend, config, logger, oauthProvidersById, profileProjector, securityStatus, sessions })`
+- `createLocalOAuthFlows({ backend, config, firstAccountSetup, logger, oauthProvidersById, profileProjector, securityStatus, sessions })`
 
 ### `src/server/lib/passwordFlows.js`
 Exports
@@ -142,7 +180,7 @@ Exports
 
 ### `src/server/lib/service.js`
 Exports
-- `createLocalAuthService({ backend, config, invitationContextResolver, logger, passwordStrategy, profileProjector, recoverySender })`
+- `createLocalAuthService({ backend, config, confirmationSender, firstAccountSetup: givenFirstAccountSetup = null, invitationContextResolver, logger, passwordStrategy, profileProjector, recoverySender })`
 
 ### `src/server/lib/sessions.js`
 Exports
@@ -156,6 +194,17 @@ Local functions
 - `buildAccessToken({ user, session, secret, ttlSeconds = ACCESS_TTL_SECONDS })`
 - `buildSessionPayload({ user, session, refreshToken, secret })`
 
+### `src/server/lib/signInThrottle.js`
+Exports
+- `DEFAULT_SIGN_IN_THROTTLE`
+- `forgottenFailuresBefore(now)`
+- `recordSignInFailure(throttle, record, email, now)`
+- `resolveSignInThrottle(env)`
+- `signInLockedError(waitMs)`
+- `signInWaitMs(record, now)`
+Local functions
+- `readSetting(env, name, fallback)`
+
 ### `src/server/lib/tokens.js`
 Exports
 - `createId(prefix)`
@@ -176,29 +225,44 @@ Exports
 ### `src/server/types.js`
 Exports
 - `type AuthLocalBackendTransaction`
+- `type AuthLocalRegistration`
+- `type AuthLocalSignInFailures`
 - `type AuthLocalBackend`
 - `type AuthLocalPasswordStrategy`
 - `type AuthLocalRecoverySender`
+- `type AuthLocalConfirmationSender`
 - `type AuthLocalConfig`
 - `type AuthLocalOAuthProvider`
+- `type AuthLocalFirstAccountSetup`
 - `type AuthLocalPasswords`
 - `type AuthLocalSessions`
 
 ### test-support
 
+### `test-support/emailConfirmationScenario.js`
+Exports
+- `exerciseEmailConfirmation(t, service, storedRegistrations)`
+Local functions
+- `linkToken(result)`
+
 ### `test-support/localService.js`
 Exports
-- `localServiceOptions({ env = {}, emailRecovery = false } = {})`
+- `localServiceOptions({ env = {}, emailRecovery = false, emailConfirmationSender = false } = {})`
 
 ### `test-support/oauthHarness.js`
 Exports
 - `APP_URL`
 - `ATTEMPT_COOKIE`
 - `approveAtProvider(service, { provider = "google", returnTo = "/home", cookies = {}, link = false } = {})`
-- `createService({ backend, oauthProviders, profileProjector })`
+- `createService({ backend, oauthProviders, profileProjector, firstAccountSetup })`
 - `oidcProviderEntry(issuer, { id = "google", label = "Google" } = {})`
 - `sessionCookies(session)`
 - `startFakeGitHub({ user = { id: 4242, login: "ada", name: "Ada Lovelace" }, emails } = {})`
 - `startOidcProvider({ account } = {})`
 Local functions
 - `readBody(req)`
+
+### `test-support/signInThrottleScenario.js`
+Exports
+- `exerciseSignInThrottle(t, service)`
+- `lockedFor(seconds)`

package/reference/autogen/packages/auth-provider-local-db-core.md

@@ -31,6 +31,9 @@ Local functions
 - `mapRecovery(row)`
 - `mapIdentity(row)`
 - `mapOAuthAttempt(row)`
+- `mapSignInFailures(row)`
+- `mapRegistration(row)`
+- `registrationRow(record = {})`
 - `userInsert(input = {})`
 - `sessionInsert(input = {})`
 - `recoveryInsert(input = {})`
@@ -53,3 +56,7 @@ Exports
 ### `migrations/auth_local_db_oauth.cjs`
 Exports
 - None
+
+### `migrations/auth_local_db_protection.cjs`
+Exports
+- None

package/reference/autogen/packages/auth-web.md

@@ -21,6 +21,12 @@ Exports
 - `pageWindow()`
 - `replacePage(path)`
 
+### `src/client/composables/loginView/confirmationLink.js`
+Exports
+- `CONFIRMATION_TOKEN_PARAM`
+- `confirmationTokenFromInput(input)`
+- `takeConfirmationTokenFromLocation()`
+
 ### `src/client/composables/loginView/constants.js`
 Exports
 - `LOGIN_MODE`
@@ -294,9 +300,14 @@ Exports
 Exports
 - None
 
+### `src/server/authRateLimits.js`
+Exports
+- `DEFAULT_AUTH_RATE_LIMITS`
+- `resolveAuthRateLimits(config)`
+
 ### `src/server/authWeb.js`
 Exports
-- `createAuthWeb({ authService, env })`
+- `createAuthWeb({ authService, env, config })`
 
 ### `src/server/AuthWebFeature.js`
 Exports
@@ -336,7 +347,7 @@ Local functions
 
 ### `src/server/routes/authRoutes.js`
 Exports
-- `buildRoutes(controller, { includeDevLoginAs = false } = {})`
+- `buildRoutes(controller, { includeDevLoginAs = false, rateLimits = DEFAULT_AUTH_RATE_LIMITS } = {})`
 
 ### `src/server/services/AuthWebService.js`
 Exports

package/reference/autogen/packages/kernel.md

@@ -802,9 +802,19 @@ Local functions
 - `normalizeMethod(method)`
 - `normalizePath(pathname)`
 - `normalizeRouteMiddleware(value, routeLabel)`
+- `normalizeRouteConfig(value, routeLabel)`
 - `normalizeRouteInternal(value, { method = "", path = "" } = {})`
 - `normalizeRouteInput(method, path, optionsOrHandler, maybeHandler)`
 
+### `server/http/lib/routeRateLimits.js`
+Exports
+- `normalizeRouteRateLimit(value, routeLabel)`
+- `rateLimitRouteConfig(rateLimit)`
+- `registerRouteRateLimiter(fastify, routes)`
+Local functions
+- `toTimeWindowMs(timeWindow)`
+- `buildRateLimitedError(_request, { ttl })`
+
 ### `server/http/lib/routeRegistration.js`
 Exports
 - `registerRoutes(fastify, { routes, actions })`
@@ -994,6 +1004,11 @@ Exports
 - `safePathnameFromRequest(request)`
 - `resolveClientIpAddress(request)`
 
+### `server/runtime/runtimeMode.js`
+Exports
+- `assertDevelopmentOnlySettings(env, names)`
+- `isProductionEnv(env)`
+
 ### `server/runtime/serviceAuthorization.js`
 Exports
 - `requireAuth(source = {}, options = {})`