4 Commits

Author	SHA1	Message	Date
Priyansh Khodiyar	71b89fd036	docs(site): adopt skill-driven CLI conventions across the docs ... The skill rewrite (PR #284) and README update standardized on "authsome <command>" (assumes "uv tool install authsome") and on agent-driven login flows. The docs site still spoke "uvx authsome" everywhere and didn't surface the auth-error decision tree the skill teaches. This brings the docs in line. Four kinds of change in one PR. 1. CLI prefix sweep ("uvx authsome" to "authsome"). Mechanical find/replace across docs/site/ excluding installation.mdx. 812 occurrences updated. installation.mdx keeps the literal "uvx" references because they explain the one-off run path. 2. installation.mdx rewrite. - "uv (recommended)" tab leads, with "uv tool install authsome". - pip second. - uvx demoted to "one-off, no install" with @latest pattern shown. - From source unchanged. - A Note at the top declares: every command in the docs is the installed form; uvx users prefix with "uvx authsome@latest". - All subsequent code blocks updated to bare "authsome". 3. New troubleshooting/auth-errors.mdx page. Captures the decision tree the skill teaches: 401 -> revoke + re-login; 403 -> "authsome login --scopes" (not re-registering); wrong client creds -> "authsome remove" then re-login. Registered in docs.json under Troubleshooting. 4. quickstart.mdx pivoted to two paths + help reflex. Path 1: agent-driven. Install the skill, ask the agent to do a task that needs an external service. The agent runs login itself. Path 2: CLI-driven. The existing manual walkthrough, preserved. Adds a Tip about reading "authsome --help" and "authsome <cmd> --help" before guessing flags. 5. Agent-mode note on the four skill-based integration pages. claude-code, codex, cursor, opencode each get a one-paragraph Note clarifying that the agent runs login, opens the browser on the user's machine for OAuth, and that users should not paste keys into prompts or pre-run login commands. The four SDK-style integration pages (langchain, llamaindex, openai-agents-sdk, anthropic-sdk) are unchanged because their pattern is developer-driven, not agent-driven. Verified clean: no "uvx authsome" outside installation.mdx, docs.json valid, no em-dashes introduced.	2026-05-19 16:12:42 +05:30
Priyansh Khodiyar	3f3cdd8fcc	docs(site): lead with CLI + proxy; demote library to embedding case ... Across the docs the recommended pattern is now wrapping the agent with `uvx authsome run --`. The Python library remains supported but is positioned as the embedding case for orchestrators that need explicit control. Concrete changes: - Every provider CodeGroup (45 pages) reordered to Proxy → Environment → Python library, with a one-line lead-in. - Generator updated so future regenerations preserve the order. - Agent integration pages reframed: "Pattern 1 / Pattern 2" headings replaced with "Run under the proxy" + "Embedding the library". - index.mdx for agent frameworks no longer presents two equal patterns. - reference/python-library.mdx adds a top callout pointing readers at the CLI + proxy as the supported surface. - concepts/architecture.mdx re-frames Sidecar as the supported mode and Library as an embedding option that shares the same layers.	2026-05-12 15:56:14 +05:30
Priyansh Khodiyar	89700e5b11	docs(site): audit fixes across all four tiers ... Tier 1 (critical — users were misconfiguring): - Port + callback URL fixed everywhere. All `127.0.0.1:7999/callback` references replaced with `127.0.0.1:7998/auth/callback/oauth`, the value actually used by `src/authsome/server/urls.py`. - Python API rewrite. Removed every reference to the non-existent `AuthsomeContext` and `ctx.auth.*` API. Library code samples now use `create_auth_service()` from `authsome.server.dependencies`, returning the real `AuthService`. Exception names corrected (the public exports in `authsome/__init__.py` all use the `*Error` suffix). `reference/python-library.mdx` rewritten end-to-end against the real surface; provider CodeGroup blocks regenerated with the corrected pattern. - Dashboard URLs corrected. `/overview`, `/connections`, `/app/...` replaced with the real `/ui/`, `/ui/connections`, `/ui/apps/...` (matches the `/ui` prefix in `server/routes/ui.py`). - `profiles-vs-connections.mdx` no longer claims a separate audit log per profile. The file at `~/.authsome/audit.log` is shared and tagged with the profile name. Tier 2 (significant): - `reference/cli.mdx` expanded with `scan`, `connection set-default`, `ui`, and the `daemon` subcommand group (`serve`, `start`, `stop`, `restart`, `status`, `logs`). Replaced the bogus `okta` example with GitHub Enterprise. - `reference/audit-log.mdx` event table corrected: the documented `refresh` event with an `outcome` field doesn't exist; the real event is `refresh_failed` with `error` and `fallback_available`. Added the `scan` event. - OAuth index: broken `/integrations/oauth/klaviyo` link fixed to `klaviyo-oauth`. Linear row corrected to `pkce` with the real regex host. Notion DCR host fixed to `mcp.notion.com`. - Linear page no longer claims DCR support (the JSON has `supports_dcr: false` and `flow: pkce`). - Provider count drift fixed in `index.mdx`, `provider-registry.mdx`, and `bundled-providers.mdx` (which was also missing the `notion_dcr` row). Tier 2.7 (integration page corrections): - `claude-code.mdx`: replaced fabricated `/anthropic-skills:authsome` namespace and `npx skills add` command with the real installation procedure for the bundled `skills/authsome/SKILL.md`. - `cursor.mdx`: link to cursor.com (was cursor.sh); rewrote the terminal-tool advice against Cursor's real MCP config in `~/.cursor/mcp.json`. - `cowork.mdx`: removed unverified `github.com/cowork-ai` link. - `nanoclaw.mdx`: framed the runners more honestly; code example no longer assumes a specific `Agent` import. - `anthropic-sdk.mdx`: model ID `claude-sonnet-4-6` → `claude-sonnet-4-5`. Tier 3 (API-key dashboard URLs): - 18 stale or wrong dashboard URLs reviewed. Five providers without a canonical key-management page (clearbit, g2, mailchimp, mention-me, wistia) now show a `docs` link plus a one-line note explaining why. The rest point at verified URLs as of May 2026. Changes flow through the generator's `APIKEY_NOTES` map and the regeneration of all 43 provider pages. Tier 4 (filler / repetition): - CA-install instructions consolidated to canonical location in `troubleshooting/proxy-networking.mdx`; `installation.mdx` and `run-agents-with-proxy.mdx` link instead of duplicating. - "Override bundled provider" deduplicated (canonical in `custom-providers.mdx`; removed from `provider-registry.mdx`). - "Known v1 limitations" canonical in `daemon-trust-boundary.mdx`; trimmed from `threat-model.mdx`. - `quickstart.mdx` H2 duplicate dropped; export-sourcing instruction corrected to use `eval`. - `troubleshooting/doctor.mdx` removed "Inspect specific state" block that duplicated `cli.mdx`. - `concepts/the-daemon.mdx` "When the daemon is reused" subsection promoted into the lifecycle body. - `run-agents-with-proxy.mdx` "Limitations" H2 absorbed into one line. - Postiz cross-linked with `headless-device-code.mdx` and vice versa. - New "Uninstall" section in `installation.mdx`.	2026-05-12 14:02:57 +05:30
Priyansh Khodiyar	ced242215e	docs(site): rebuild docs into tabbed structure with shared snippets and component upgrades ... Structure: - Two-tab navigation (Documentation / Integrations) in docs.json. - Documentation tab: Get started, Guides, Concepts, Security, Reference, Troubleshooting, Project (roadmap/changelog/compared). - Integrations tab: Agent frameworks (12), OAuth providers (14), API-key providers (31). All 45 bundled providers have per-page entries with facts pulled from src/authsome/auth/bundled_providers/. Content added (75 new pages): - Onboarding gap: installation. - Concepts: the-daemon, profiles-vs-connections. - Security: threat-model, encryption, daemon-trust-boundary, hosted-deployment, disclosure. - Guides: multiple-connections (extracted from login-with-oauth). - Reference: file-layout, python-library, daemon-api, audit-log. - Troubleshooting: daemon-issues. - Project: roadmap, changelog, compared. - Integrations: 3 overviews, 12 agent frameworks, 14 OAuth providers, 31 API-key providers. Shared snippets in docs/site/snippets/ used by 45 of 47 provider pages: proxy-injection, multi-connections-cta, masked-input-note, whats-next-oauth, whats-next-apikey. Component upgrades: - Prompt on agent integration pages with copy-to-clipboard / Open in Cursor. - Tree on 4 filesystem layouts (replacing ASCII art). - Accordion + AccordionGroup on troubleshooting/doctor, oauth-callbacks, token-refresh. - Badge on roadmap (Shipped / Planned / Future status pills). - Frame on architecture call graph and index mermaid with captions. - Tooltip on PKCE, DCR, AES-256-GCM, fcntl.flock, NIST SP 800-38D. - ResponseField on daemon-api typed responses. docs.json: - background.color light/dark to match marketing palette. - appearance default dark. - seo block with canonical, og, twitter, indexing. - banner pointing at the GitHub repo. - contextual options (copy, view, chatgpt, claude, cursor). - feedback (thumbs + suggest edit). - navbar llms.txt link. - Footer expanded to three columns. Sidebar icons: - Brand icons (verified against Font Awesome GraphQL API) for atlassian, discord, github, gitlab, google, hubspot, microsoft, notion, slack, x-twitter, buffer, intercom, mailchimp, openai. - Other providers and overview pages render without an icon to avoid echoing the group icon. Em-dashes stripped from every MDX file.	2026-05-12 14:02:56 +05:30