* docs(spec): overhaul authsome-v1 spec with security model, provider states, and naming fixes
- Rename all .authlib/.authlib_home references to .authsome/AUTHSOME_HOME
- Add master.key to filesystem layout with 0600 permission requirement
- Add Provider State Model section (available → configured → connected)
- Introduce Sensitive Input Pipeline section (env var → browser bridge → getpass)
- Remove --client-secret as CLI argument; client_secret collected via pipeline only
- Add client.client_id_env/client_secret_env fields to OAuth provider schema
- Remove refresh_token from export maps; access token only exported
- Rewrite authsome login: error on re-login, --reset flag, new input model
- Update authsome list to show full provider catalog across all states
- Fix authsome run: access token injection only, error if provider not connected
- Add executable name authsome throughout CLI examples
- Fix store key namespace: provider definitions are filesystem files, not store keys
- Update all E2E examples to reflect new flows
- Renumber all sections cleanly (35 sections total)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* docs(readme): Updated readme to be more clear and prettier
---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Adds specs/authsome-v1.md — a language-agnostic specification for the
local auth library and CLI. Covers filesystem layout, data models,
provider schema, credential store contract, auth flows, CLI contract,
and library interface.
Key design decisions reflected in the spec:
- Single OAuth client config per provider per profile (not named apps)
- Named connections are the multi-credential primitive
- Unified api_key flow: checks env var first, falls back to prompt
- Store key for client creds: profile:<profile>:<provider>:client
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Manoj Bajaj