@lukoweb/apitogo 0.1.51 → 0.1.54

package/dist/declarations/config/apitogo-config-core.d.ts

@@ -0,0 +1,35 @@
+export declare const APITOGO_CONFIG_FILENAME = "apitogo.config.json";
+export type ApitogoJsonConfig = Record<string, unknown>;
+export type AuthProviderPublicConfig = {
+    id: string;
+    displayName?: string;
+    authority?: string;
+    clientId?: string;
+    scopes?: string;
+};
+export type AuthenticationSecrets = {
+    email?: {
+        connectionString?: string;
+    };
+    providers?: Record<string, {
+        clientSecret?: string;
+    }>;
+    stripe?: {
+        secretKey?: string;
+        webhookSecret?: string;
+    };
+};
+export declare function applyEnvOverrides(config: ApitogoJsonConfig, env?: NodeJS.ProcessEnv): ApitogoJsonConfig;
+type PlanCatalogItem = Record<string, unknown> & {
+    sku?: string;
+};
+export declare function readPlanCatalogItems(config: ApitogoJsonConfig): PlanCatalogItem[];
+export declare function normalizeApitogoConfig(config: ApitogoJsonConfig): ApitogoJsonConfig;
+export declare function isBillingEnabled(config: ApitogoJsonConfig): boolean;
+export declare function readAuthProviders(config: ApitogoJsonConfig): AuthProviderPublicConfig[];
+export declare function isNativeAuthEnabled(config: ApitogoJsonConfig): boolean;
+export declare function deriveManifestFields(config: ApitogoJsonConfig): ApitogoJsonConfig;
+export declare function extractManifest(config: ApitogoJsonConfig | null | undefined): ApitogoJsonConfig | null;
+export declare function extractSiteConfig(config: ApitogoJsonConfig | null | undefined): ApitogoJsonConfig;
+export declare function resolveProjectDisplayName(config: ApitogoJsonConfig): string;
+export {};

package/dist/declarations/config/apitogo-config-loader.d.ts

@@ -1,7 +1,2 @@
-export declare const APITOGO_CONFIG_FILENAME = "apitogo.config.json";
-export type ApitogoJsonConfig = Record<string, unknown>;
-export declare function applyEnvOverrides(config: ApitogoJsonConfig, env?: NodeJS.ProcessEnv): ApitogoJsonConfig;
-export declare function loadApitogoConfig(rootDir?: string): ApitogoJsonConfig;
-export declare function extractManifest(config: ApitogoJsonConfig | null | undefined): ApitogoJsonConfig | null;
-export declare function extractSiteConfig(config: ApitogoJsonConfig | null | undefined): ApitogoJsonConfig;
-export declare function apitogoConfigPath(rootDir: string): string;
+export * from "./apitogo-config-core.js";
+export { apitogoConfigPath, loadApitogoConfig, readAuthenticationSecrets, } from "./apitogo-config-loader.node.js";

package/dist/declarations/config/apitogo-config-loader.node.d.ts

@@ -0,0 +1,4 @@
+import { type ApitogoJsonConfig, type AuthenticationSecrets } from "./apitogo-config-core.js";
+export declare function loadApitogoConfig(rootDir?: string): ApitogoJsonConfig;
+export declare function readAuthenticationSecrets(env?: NodeJS.ProcessEnv): AuthenticationSecrets;
+export declare function apitogoConfigPath(rootDir: string): string;

package/dist/declarations/config/build-apitogo-config.d.ts

@@ -1,7 +1,8 @@
+import type { ApitogoPlugin } from "../lib/core/plugins.js";
+import { type ApitogoJsonConfig } from "./apitogo-config-core.js";
 import type { ApitogoConfig } from "./config.js";
-type BuildApitogoConfigOptions = {
-    rootDir?: string;
-    overrides?: Partial<ApitogoConfig>;
+type BuildApitogoConfigOptions = Partial<ApitogoConfig> & ApitogoJsonConfig & {
+    plugins?: ApitogoPlugin[];
 };
-export declare function buildApitogoConfig({ rootDir, overrides, }?: BuildApitogoConfigOptions): ApitogoConfig;
+export declare function buildApitogoConfig({ plugins, plans: _legacyPlans, ...jsonOverrides }?: BuildApitogoConfigOptions): ApitogoConfig;
 export {};

package/dist/declarations/config/loader.d.ts

@@ -1,5 +1,6 @@
 import type { RollupOutput, RollupWatcher } from "rollup";
 import { type ConfigEnv } from "vite";
+import { type DevPortalPreviewPlan } from "./local-manifest.js";
 import type { ResolvedModulesConfig } from "./validators/ModulesSchema.js";
 import type { ZudokuConfig } from "./validators/ZudokuConfig.js";
 export type ConfigWithMeta = ZudokuConfig & {
@@ -11,6 +12,7 @@ export type ConfigWithMeta = ZudokuConfig & {
         dependencies: string[];
         pricingEnabled?: boolean;
         authenticationEnabled?: boolean;
+        previewPlans?: DevPortalPreviewPlan[];
     };
     __resolvedModules: ResolvedModulesConfig;
 };

package/dist/declarations/config/local-manifest.d.ts

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { APITOGO_CONFIG_FILENAME } from "./apitogo-config-loader.js";
-export declare const DEV_PORTAL_MANIFEST_FILENAME = "apitogo.local.json";
 export declare const APITOGO_MANIFEST_BASE_FILENAME = "apitogo.json";
 export declare const APITOGO_MANIFEST_ENV_FILES: {
     readonly development: "apitogo.local.json";
@@ -11,8 +10,7 @@ export type ApitogoManifestEnv = keyof typeof APITOGO_MANIFEST_ENV_FILES;
 export declare const ManifestPlanInputSchema: z.ZodObject<{
     sku: z.ZodString;
     displayName: z.ZodString;
-    isFree: z.ZodBoolean;
-    priceAmount: z.ZodOptional<z.ZodNumber>;
+    priceAmount: z.ZodDefault<z.ZodNumber>;
     priceCurrency: z.ZodOptional<z.ZodString>;
     billingPeriod: z.ZodOptional<z.ZodEnum<{
         month: "month";
@@ -23,6 +21,9 @@ export declare const ManifestPlanInputSchema: z.ZodObject<{
     limitsJson: z.ZodOptional<z.ZodString>;
     includedActionKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
+export declare function isPlanFree(plan: {
+    priceAmount?: number;
+}): boolean;
 export declare const DevPortalLocalManifestSchema: z.ZodObject<{
     siteName: z.ZodOptional<z.ZodString>;
     branding: z.ZodOptional<z.ZodObject<{
@@ -34,12 +35,26 @@ export declare const DevPortalLocalManifestSchema: z.ZodObject<{
     }, z.core.$strip>>;
     authentication: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
+        apiBaseUrl: z.ZodOptional<z.ZodString>;
+        native: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        email: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodOptional<z.ZodString>;
+            from: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        providers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            displayName: z.ZodOptional<z.ZodString>;
+            authority: z.ZodOptional<z.ZodString>;
+            clientId: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
     }, z.core.$strip>>;
     plans: z.ZodOptional<z.ZodArray<z.ZodObject<{
         sku: z.ZodString;
         displayName: z.ZodString;
-        isFree: z.ZodBoolean;
-        priceAmount: z.ZodOptional<z.ZodNumber>;
+        priceAmount: z.ZodDefault<z.ZodNumber>;
         priceCurrency: z.ZodOptional<z.ZodString>;
         billingPeriod: z.ZodOptional<z.ZodEnum<{
             month: "month";
@@ -70,14 +85,12 @@ export declare const DevPortalLocalManifestSchema: z.ZodObject<{
         publicHealthActionKey: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     projectId: z.ZodOptional<z.ZodString>;
-    projectName: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type ManifestPlanInput = z.infer<typeof ManifestPlanInputSchema>;
 export type DevPortalLocalManifest = z.infer<typeof DevPortalLocalManifestSchema>;
 export type DevPortalPreviewPlan = {
     sku: string;
     displayName: string;
-    isFree: boolean;
     priceAmount: number;
     priceCurrency: string;
     billingPeriod: string;
@@ -91,6 +104,7 @@ export type DevPortalPreviewPlanCatalog = {
 };
 export declare function isPricingEnabled(manifest: DevPortalLocalManifest | null | undefined): boolean;
 export declare function isAuthenticationEnabled(manifest: DevPortalLocalManifest | null | undefined): boolean;
+export declare function isNativeAuthEnabledInManifest(manifest: DevPortalLocalManifest | null | undefined): boolean;
 export declare function manifestToPreviewCatalog(manifest: DevPortalLocalManifest | null | undefined): DevPortalPreviewPlanCatalog;
 export declare function normalizeBillingPeriod(period?: string): string;
 export declare function plansToPreviewCatalog(plans: ManifestPlanInput[] | undefined): Pick<DevPortalPreviewPlanCatalog, "plans">;
@@ -105,5 +119,5 @@ export declare function manifestPathsForEnv(rootDir: string, _env: ApitogoManife
 };
 export declare function parseLocalManifestJson(raw: string): DevPortalLocalManifest | null;
 export declare function readManifestFile(rootDir: string, filename: string): Promise<DevPortalLocalManifest | null>;
-export declare function readEffectiveManifest(rootDir: string, env: ApitogoManifestEnv): Promise<DevPortalLocalManifest | null>;
+export declare function readEffectiveManifest(rootDir: string, _env: ApitogoManifestEnv): Promise<DevPortalLocalManifest | null>;
 export declare function readLocalManifest(rootDir: string): Promise<DevPortalLocalManifest | null>;

package/dist/declarations/config/validators/ModulesSchema.d.ts

@@ -134,6 +134,15 @@ export declare const ApiKeysModuleSchema: z.ZodObject<{
     enabled: z.ZodOptional<z.ZodBoolean>;
     path: z.ZodDefault<z.ZodString>;
 }, z.core.$strip>;
+declare const PlanCatalogItemSchema: z.ZodObject<{
+    sku: z.ZodString;
+    displayName: z.ZodString;
+    priceAmount: z.ZodDefault<z.ZodNumber>;
+    priceCurrency: z.ZodOptional<z.ZodString>;
+    billingPeriod: z.ZodOptional<z.ZodString>;
+    limitsJson: z.ZodOptional<z.ZodString>;
+    includedActionKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
 export declare const PlansModuleSchema: z.ZodObject<{
     enabled: z.ZodOptional<z.ZodBoolean>;
     path: z.ZodDefault<z.ZodString>;
@@ -148,6 +157,15 @@ export declare const PlansModuleSchema: z.ZodObject<{
             description: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
+    items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        sku: z.ZodString;
+        displayName: z.ZodString;
+        priceAmount: z.ZodDefault<z.ZodNumber>;
+        priceCurrency: z.ZodOptional<z.ZodString>;
+        billingPeriod: z.ZodOptional<z.ZodString>;
+        limitsJson: z.ZodOptional<z.ZodString>;
+        includedActionKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export declare const DashboardModuleSchema: z.ZodObject<{
     enabled: z.ZodOptional<z.ZodBoolean>;
@@ -215,6 +233,15 @@ export declare const UserPanelModuleSchema: z.ZodObject<{
                 description: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>>>;
         }, z.core.$strip>>;
+        items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            sku: z.ZodString;
+            displayName: z.ZodString;
+            priceAmount: z.ZodDefault<z.ZodNumber>;
+            priceCurrency: z.ZodOptional<z.ZodString>;
+            billingPeriod: z.ZodOptional<z.ZodString>;
+            limitsJson: z.ZodOptional<z.ZodString>;
+            includedActionKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export declare const ModulesSchema: z.ZodOptional<z.ZodObject<{
@@ -320,6 +347,15 @@ export declare const ModulesSchema: z.ZodOptional<z.ZodObject<{
                     description: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>>>;
             }, z.core.$strip>>;
+            items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                sku: z.ZodString;
+                displayName: z.ZodString;
+                priceAmount: z.ZodDefault<z.ZodNumber>;
+                priceCurrency: z.ZodOptional<z.ZodString>;
+                billingPeriod: z.ZodOptional<z.ZodString>;
+                limitsJson: z.ZodOptional<z.ZodString>;
+                includedActionKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
 }, z.core.$strip>>;
@@ -396,6 +432,7 @@ export type ResolvedPlansModule = {
     enabled: boolean;
     path: string;
     content: ResolvedPlansContent;
+    items?: z.infer<typeof PlanCatalogItemSchema>[];
 };
 export type ResolvedDashboardModule = {
     enabled: boolean;
@@ -415,3 +452,4 @@ export type ResolvedModulesConfig = {
     landing: ResolvedLandingModule;
     userPanel: ResolvedUserPanelModule;
 };
+export {};

package/dist/declarations/config/validators/ZudokuConfig.d.ts

@@ -367,8 +367,24 @@ declare const AuthenticationSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     redirectToAfterSignIn: z.ZodOptional<z.ZodString>;
     redirectToAfterSignOut: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dev-portal">;
+    type: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"dev-portal">>>;
     apiBaseUrl: z.ZodOptional<z.ZodString>;
+    native: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    email: z.ZodOptional<z.ZodObject<{
+        provider: z.ZodOptional<z.ZodString>;
+        from: z.ZodOptional<z.ZodString>;
+        connectionString: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    providers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+        authority: z.ZodOptional<z.ZodString>;
+        clientId: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
     redirectToAfterSignUp: z.ZodOptional<z.ZodString>;
     redirectToAfterSignIn: z.ZodOptional<z.ZodString>;
     redirectToAfterSignOut: z.ZodOptional<z.ZodString>;
@@ -6771,8 +6787,24 @@ export declare const ZudokuConfig: z.ZodObject<{
         redirectToAfterSignIn: z.ZodOptional<z.ZodString>;
         redirectToAfterSignOut: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"dev-portal">;
+        type: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"dev-portal">>>;
         apiBaseUrl: z.ZodOptional<z.ZodString>;
+        native: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        email: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodOptional<z.ZodString>;
+            from: z.ZodOptional<z.ZodString>;
+            connectionString: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        providers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            displayName: z.ZodOptional<z.ZodString>;
+            authority: z.ZodOptional<z.ZodString>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
         redirectToAfterSignUp: z.ZodOptional<z.ZodString>;
         redirectToAfterSignIn: z.ZodOptional<z.ZodString>;
         redirectToAfterSignOut: z.ZodOptional<z.ZodString>;
@@ -6926,6 +6958,15 @@ export declare const ZudokuConfig: z.ZodObject<{
                         description: z.ZodOptional<z.ZodString>;
                     }, z.core.$strip>>>;
                 }, z.core.$strip>>;
+                items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    sku: z.ZodString;
+                    displayName: z.ZodString;
+                    priceAmount: z.ZodDefault<z.ZodNumber>;
+                    priceCurrency: z.ZodOptional<z.ZodString>;
+                    billingPeriod: z.ZodOptional<z.ZodString>;
+                    limitsJson: z.ZodOptional<z.ZodString>;
+                    includedActionKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>>;
             }, z.core.$strip>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>>;

package/dist/declarations/index.d.ts

@@ -18,4 +18,4 @@ export { cn } from "./lib/ui/util.js";
 export { joinUrl } from "./lib/util/joinUrl.js";
 export { type ProblemJson, throwIfProblemJson, } from "./lib/util/problemJson.js";
 export { buildApitogoConfig } from "./config/build-apitogo-config.js";
-export { APITOGO_CONFIG_FILENAME, applyEnvOverrides, extractManifest, extractSiteConfig, loadApitogoConfig, } from "./config/apitogo-config-loader.js";
+export { APITOGO_CONFIG_FILENAME, applyEnvOverrides, extractManifest, extractSiteConfig, normalizeApitogoConfig, resolveProjectDisplayName, } from "./config/apitogo-config-core.js";

package/dist/declarations/lib/authentication/providers/dev-portal-auth-pages.d.ts

@@ -0,0 +1,15 @@
+export declare function DevPortalLoginPage({ apiBaseUrl, }: {
+    apiBaseUrl?: string;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function DevPortalRegisterPage({ apiBaseUrl, }: {
+    apiBaseUrl?: string;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function DevPortalVerifyEmailPage({ apiBaseUrl }: {
+    apiBaseUrl?: string;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function DevPortalForgotPasswordPage({ apiBaseUrl }: {
+    apiBaseUrl?: string;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function DevPortalResetPasswordPage({ apiBaseUrl }: {
+    apiBaseUrl?: string;
+}): import("react/jsx-runtime").JSX.Element;

package/dist/declarations/lib/authentication/providers/dev-portal-constants.d.ts

@@ -14,5 +14,23 @@ export type EndUserMeResponse = {
 };
 export type DevPortalAuthStatusResponse = {
     available: boolean;
-    oidcConfigured: boolean;
+    nativeEnabled?: boolean;
+    oidcConfigured?: boolean;
+    providerCount?: number;
+};
+export type DevPortalAuthConfigResponse = {
+    native: {
+        enabled: boolean;
+    };
+    email?: {
+        provider: string;
+        from: string;
+    } | null;
+    providers: Array<{
+        id: string;
+        displayName: string;
+        authority: string;
+        clientId: string;
+        scopes: string[];
+    }>;
 };

package/dist/declarations/lib/authentication/providers/dev-portal-utils.d.ts

@@ -3,7 +3,11 @@ import { type EndUserMeResponse } from "./dev-portal-constants.js";
 export declare function resolveDevPortalApiBaseUrl(config: Pick<DevPortalAuthenticationConfig, "apiBaseUrl">): string | undefined;
 export declare function isPlaceholderDevPortalApiUrl(apiBaseUrl: string | undefined): boolean;
 export declare function toAbsoluteReturnUrl(pathOrUrl: string): string;
-export declare function buildDevPortalLoginUrl(apiBaseUrl: string, returnUrl: string): string;
+export declare function buildDevPortalOidcChallengeUrl(apiBaseUrl: string, providerId: string, returnUrl: string): string;
 export declare function buildDevPortalLogoutUrl(apiBaseUrl: string, returnUrl: string): string;
+export declare function normalizeDevPortalAuthConfig(raw: unknown): import("./dev-portal-constants.js").DevPortalAuthConfigResponse;
+export declare function isNativeAuthEnabled(config: import("./dev-portal-constants.js").DevPortalAuthConfigResponse | null | undefined): boolean;
+export declare function fetchDevPortalAuthConfig(apiBaseUrl: string, fetchImpl?: typeof fetch): Promise<import("./dev-portal-constants.js").DevPortalAuthConfigResponse>;
+export declare function postDevPortalAuth<T>(apiBaseUrl: string, path: string, body: unknown, fetchImpl?: typeof fetch): Promise<T>;
 export declare function probeDevPortalBackend(apiBaseUrl: string, fetchImpl?: typeof fetch): Promise<boolean>;
 export declare function mapEndUserMeToProfile(me: EndUserMeResponse): import("../state.js").UserProfile;

package/dist/declarations/lib/authentication/providers/dev-portal.d.ts

@@ -21,7 +21,12 @@ export declare class DevPortalAuthenticationProvider extends CoreAuthenticationP
     private backendAvailable;
     private refreshGeneration;
     private refreshInFlight;
+    private authConfigNativeEnabled;
     constructor({ apiBaseUrl, redirectToAfterSignIn, redirectToAfterSignUp, redirectToAfterSignOut, }: DevPortalAuthenticationConfig);
+    getRoutes(): {
+        path: string;
+        element: import("react/jsx-runtime").JSX.Element;
+    }[];
     initialize(_context: ZudokuContext): Promise<void>;
     onPageLoad: () => Promise<void>;
     private syncBackendAvailability;

package/dist/declarations/lib/core/plugins.d.ts

@@ -7,6 +7,7 @@ import type { ZudokuConfig } from "../../config/validators/ZudokuConfig.js";
 import type { AuthenticationPlugin } from "../authentication/authentication.js";
 import type { MdxComponentsType } from "../util/MdxComponents.js";
 import type { ApiIdentity, ApitogoEvents, ZudokuContext } from "./ZudokuContext.js";
+export { createPlugin } from "../../config/create-plugin.js";
 export { runPluginTransformConfig } from "./transform-config.js";
 export type ApitogoPlugin = CommonPlugin | ProfileMenuPlugin | NavigationPlugin | ApiIdentityPlugin | SearchProviderPlugin | EventConsumerPlugin | AuthenticationPlugin | TransformConfigPlugin;
 export type { AuthenticationPlugin, RouteObject };

package/dist/flat-config.d.ts

@@ -61,31 +61,43 @@ export type _Schema9 = (("Inter" | "Roboto" | "Open Sans" | "Poppins" | "Montser
  * Whether this module is active in the application.
  */
 export type _Schema15 = boolean
-export type _Schema35 = ({
+/**
+ * Gateway plan catalog for /pricing preview and publish (canonical storage).
+ */
+export type _Schema35 = {
+  sku: string
+  displayName: string
+  priceAmount?: number
+  priceCurrency?: string
+  billingPeriod?: string
+  limitsJson?: string
+  includedActionKeys?: string[]
+}[]
+export type _Schema36 = ({
   type: "url"
-  input: (string | _Schema36[])
-  server?: _Schema37
-  path?: _Schema38
-  categories?: _Schema39
-  options?: _Schema41
+  input: (string | _Schema37[])
+  server?: _Schema38
+  path?: _Schema39
+  categories?: _Schema40
+  options?: _Schema42
 } | {
   type: "file"
-  input: (string | (string | _Schema36)[])
-  server?: _Schema37
-  path?: _Schema38
-  categories?: _Schema39
-  options?: _Schema41
+  input: (string | (string | _Schema37)[])
+  server?: _Schema38
+  path?: _Schema39
+  categories?: _Schema40
+  options?: _Schema42
 } | {
   type: "raw"
   input: string
-  server?: _Schema37
-  path?: _Schema38
-  categories?: _Schema39
-  options?: _Schema41
+  server?: _Schema38
+  path?: _Schema39
+  categories?: _Schema40
+  options?: _Schema42
 })
-export type _Schema37 = string
 export type _Schema38 = string
-export type _Schema39 = {
+export type _Schema39 = string
+export type _Schema40 = {
   label: string
   tags: string[]
 }[]
@@ -307,8 +319,24 @@ export interface FlatZudokuConfig {
     redirectToAfterSignIn?: string
     redirectToAfterSignOut?: string
   } | {
-    type: "dev-portal"
+    type?: "dev-portal"
     apiBaseUrl?: string
+    native?: {
+      enabled?: boolean
+    }
+    email?: {
+      provider?: string
+      from?: string
+      connectionString?: string
+    }
+    providers?: {
+      id: string
+      displayName?: string
+      authority?: string
+      clientId?: string
+      clientSecret?: string
+      scopes?: string
+    }[]
     redirectToAfterSignUp?: string
     redirectToAfterSignIn?: string
     redirectToAfterSignOut?: string
@@ -369,8 +397,8 @@ export interface FlatZudokuConfig {
     landing?: _Schema16
     userPanel?: _Schema23
   }
-  apis?: (_Schema35 | _Schema35[])
-  catalogs?: (_Schema42 | _Schema42[])
+  apis?: (_Schema36 | _Schema36[])
+  catalogs?: (_Schema43 | _Schema43[])
   apiKeys?: {
     enabled: boolean
     getConsumers?: unknown
@@ -398,7 +426,7 @@ export interface FlatZudokuConfig {
   }
   enableStatusPages?: boolean
   defaults?: {
-    apis: _Schema41
+    apis: _Schema42
     examplesLanguage?: string
   }
   __pluginDirs?: string[]
@@ -589,6 +617,7 @@ export interface _Schema23 {
       [k: string]: unknown
     }
     content?: _Schema34
+    items?: _Schema35
   }
 }
 /**
@@ -619,12 +648,12 @@ export interface _Schema34 {
     description?: string
   }[]
 }
-export interface _Schema36 {
+export interface _Schema37 {
   path: string
   input: string
   label?: string
 }
-export interface _Schema41 {
+export interface _Schema42 {
   examplesLanguage?: string
   supportedLanguages?: {
     value: string
@@ -641,7 +670,7 @@ export interface _Schema41 {
   transformExamples?: unknown
   generateCodeSnippet?: unknown
 }
-export interface _Schema42 {
+export interface _Schema43 {
   path: string
   label: string
   items?: string[]

package/docs/configuration/authentication.md

@@ -41,22 +41,24 @@ only.
 Set the backend API URL via environment variable (MCP writes this at scaffold/publish):
 
 ```bash
-VITE_APITOGO_DEV_PORTAL_API_URL=https://your-dev-portal-api.example.com
+VITE_APITOGO_AUTHENTICATION_API_BASE_URL=https://your-dev-portal-api.example.com
 ```
 
+You can also set `authentication.apiBaseUrl` in `apitogo.config.json` or
+`APITOGO_CONFIG_authentication__apiBaseUrl` in `.env`.
+
 **Local preview:** When the backend URL is a placeholder or unreachable, the account area shows a
 message that sign-in unlocks after publish. Docs and API reference remain public. Plans on
-`/pricing` load from `apitogo.config.json` (overridable via `.env` — see
-[Manifest](./manifest.md), including `includedActionKeys` per plan). Plan edits hot-reload without
-restarting the dev server.
+`/pricing` load from `apitogo.config.json` (overridable via `.env` — see [Manifest](./manifest.md),
+including `includedActionKeys` per plan). Plan edits hot-reload without restarting the dev server.
 
 ### Dev portal configuration files
 
-| Concern                                                           | File                                                             |
-| ----------------------------------------------------------------- | ---------------------------------------------------------------- |
-| Site, plans, modules, branding, backend/gateway metadata          | `apitogo.config.json` (+ `.env` overrides — see [Manifest](./manifest.md)) |
-| Plugins and custom code                                           | `apitogo.config.tsx`                                             |
-| OIDC and Stripe for publish                                       | `.env.local` via `APITOGO_CONFIG_*` (or legacy `apitogo.local.secrets.json`) |
+| Concern                                                  | File                                                                       |
+| -------------------------------------------------------- | -------------------------------------------------------------------------- |
+| Site, plans, modules, branding, backend/gateway metadata | `apitogo.config.json` (+ `.env` overrides — see [Manifest](./manifest.md)) |
+| Plugins and custom code                                  | `apitogo.config.tsx`                                                       |
+| OIDC and Stripe for publish                              | `.env.local` via `APITOGO_CONFIG_authentication__*`                        |
 
 **Production:** Register one OIDC app with redirect URI `https://{backend}/signin-oidc` (see MCP
 `manualSteps.oidcRedirectUri`). The frontend uses cookie sessions via `credentials: "include"` on