Contributing

DarkAuth is an npm workspace monorepo. The main packages are the API server, user UI, admin UI, TypeScript client SDK, OPAQUE package, demo app, test suite, brochureware site, and docs site.

Contribution mindset

DarkAuth is security-sensitive software. Changes should be small, explicit, and easy to review. Prefer removing accidental complexity over adding new layers. Keep behavior close to the code that owns it.

When changing an API, update validation, OpenAPI metadata, tests, UI behavior, and docs together.

Useful starting points

• Architecture
• Schemas
• OpenAPI patterns
• Naming
• Admin lists
• Tests

Verification

Run package-level tests when your change is local. Run npm run tidy and npm run build before handing off broad changes.