chore: community health files (CoC, SUPPORT, labels, discussions)

.github/DISCUSSION_TEMPLATE/ideas.yml

@@ -0,0 +1,24 @@
+title: "[Idea] "
+labels: ["discussion"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What do you wish theauth-go did differently?
+    validations:
+      required: true
+
+  - type: textarea
+    id: idea
+    attributes:
+      label: Idea
+      description: Sketch the API, HTTP shape, or config field.
+    validations:
+      required: true
+
+  - type: textarea
+    id: prior_art
+    attributes:
+      label: Prior art
+      description: Other libraries, RFCs, or specs that have shaped your thinking.

.github/DISCUSSION_TEMPLATE/q-and-a.yml

@@ -0,0 +1,25 @@
+title: "[Q&A] "
+labels: ["discussion"]
+body:
+  - type: textarea
+    id: question
+    attributes:
+      label: What are you trying to do?
+      description: One paragraph is usually enough.
+    validations:
+      required: true
+
+  - type: textarea
+    id: tried
+    attributes:
+      label: What have you tried?
+      description: Code snippet, config, links to docs you already read.
+      render: go
+    validations:
+      required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: theauth-go version
+      placeholder: v2.4.0

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security disclosure (private)
+    url: https://github.com/glincker/theauth-go/security/advisories/new
+    about: Report a vulnerability privately via GitHub Security Advisories.
+  - name: Q&A and ideas
+    url: https://github.com/glincker/theauth-go/discussions
+    about: Ask questions, share patterns, propose roadmap items.
+  - name: Documentation
+    url: https://theauth.dev
+    about: Getting started, concepts, guides, configuration, error catalog.

.github/labels.yml

@@ -0,0 +1,111 @@
+# Label taxonomy synced by .github/workflows/labels.yml
+# Format consumed by EndBug/label-sync.
+
+# ---- type ----------------------------------------------------------------
+- name: "type/bug"
+  color: "d73a4a"
+  description: Something is broken or behaves unexpectedly
+- name: "type/feature"
+  color: "0e8a16"
+  description: New capability or ergonomic improvement
+- name: "type/docs"
+  color: "0075ca"
+  description: Documentation only
+- name: "type/refactor"
+  color: "c2e0c6"
+  description: Internal change with no behavior delta
+- name: "type/perf"
+  color: "fbca04"
+  description: Performance work
+- name: "type/test"
+  color: "bfd4f2"
+  description: Tests and fixtures
+- name: "type/security"
+  color: "5319e7"
+  description: Security-related (non-vulnerability)
+- name: "type/chore"
+  color: "cccccc"
+  description: Tooling, CI, release plumbing
+
+# ---- area (auth surfaces) ------------------------------------------------
+- name: "area/magic-link"
+  color: "1d76db"
+- name: "area/password"
+  color: "1d76db"
+- name: "area/oauth-provider"
+  color: "1d76db"
+- name: "area/oauth-as"
+  color: "1d76db"
+  description: OAuth 2.1 authorization server
+- name: "area/mcp"
+  color: "1d76db"
+  description: MCP authorization / mcpresource module
+- name: "area/agents"
+  color: "1d76db"
+  description: Agent identities and delegation
+- name: "area/webauthn"
+  color: "1d76db"
+- name: "area/totp"
+  color: "1d76db"
+- name: "area/saml"
+  color: "1d76db"
+- name: "area/scim"
+  color: "1d76db"
+- name: "area/rbac"
+  color: "1d76db"
+- name: "area/middleware"
+  color: "1d76db"
+- name: "area/storage"
+  color: "1d76db"
+- name: "area/observability"
+  color: "1d76db"
+- name: "area/admin-api"
+  color: "1d76db"
+- name: "area/examples"
+  color: "1d76db"
+- name: "area/ci"
+  color: "1d76db"
+
+# ---- status --------------------------------------------------------------
+- name: "needs-triage"
+  color: "ededed"
+- name: "needs-repro"
+  color: "ededed"
+- name: "needs-design"
+  color: "ededed"
+- name: "blocked"
+  color: "b60205"
+- name: "wontfix"
+  color: "ffffff"
+- name: "duplicate"
+  color: "cfd3d7"
+- name: "stale"
+  color: "cccccc"
+
+# ---- priority ------------------------------------------------------------
+- name: "priority/critical"
+  color: "b60205"
+- name: "priority/high"
+  color: "d93f0b"
+- name: "priority/medium"
+  color: "fbca04"
+- name: "priority/low"
+  color: "c5def5"
+
+# ---- semver impact -------------------------------------------------------
+- name: "semver/breaking"
+  color: "b60205"
+  description: Public surface change requiring a major bump
+- name: "semver/feature"
+  color: "0e8a16"
+- name: "semver/patch"
+  color: "0075ca"
+
+# ---- community -----------------------------------------------------------
+- name: "good first issue"
+  color: "7057ff"
+  description: Good for newcomers
+- name: "help wanted"
+  color: "008672"
+- name: "discussion"
+  color: "d4c5f9"

.github/workflows/labels.yml

@@ -0,0 +1,23 @@
+name: labels
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - .github/labels.yml
+      - .github/workflows/labels.yml
+  workflow_dispatch:
+
+permissions:
+  issues: write
+  contents: read
+
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: EndBug/label-sync@v2
+        with:
+          config-file: .github/labels.yml
+          delete-other-labels: false

.gitignore

@@ -24,7 +24,16 @@ docs-site/site/
 
 # OS
 .DS_Store
+Thumbs.db
 
 # coverage
 coverage.out
 coverage.html
+
+# logs (MCP servers, tooling, scratch)
+*.log
+
+# scratch / internal cleanup notes (never commit)
+*-CLEANUP-MAP.md
+scratch/
+tmp/

CODE_OF_CONDUCT.md

@@ -0,0 +1,63 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, religion, or sexual identity and
+orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment:
+
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility, apologizing to those affected by our mistakes, and
+  learning from the experience
+- Focusing on what is best, not just for us as individuals, but for the overall
+  community
+
+Examples of unacceptable behavior:
+
+- Sexualized language or imagery, and sexual attention or advances of any kind
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or email address,
+  without their explicit permission
+- Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement Responsibilities
+
+Community leaders are responsible for clarifying and enforcing our standards of
+acceptable behavior and will take appropriate and fair corrective action in
+response to any behavior that they deem inappropriate, threatening, offensive,
+or harmful.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the maintainers at **[email protected]**. All complaints will
+be reviewed and investigated promptly and fairly. All community leaders are
+obligated to respect the privacy and security of the reporter of any incident.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage],
+version 2.1, available at
+[https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1].
+
+[homepage]: https://www.contributor-covenant.org
+[v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html

CONTRIBUTING.md

@@ -151,4 +151,4 @@ CI checks for em dashes and en dashes in all markdown files before merge.
 
 ## Code of conduct
 
-This project follows the [Contributor Covenant v2.1](https://www.contributor-covenant.org/version/2/1/code_of_conduct/). By participating you agree to uphold it. Report unacceptable behavior to **[email protected]**.
+This project follows the [Contributor Covenant v2.1](CODE_OF_CONDUCT.md). By participating you agree to uphold it. Report unacceptable behavior to **[email protected]**.

SUPPORT.md

@@ -0,0 +1,25 @@
+# Support
+
+Thanks for using **theauth-go**. Pick the channel that matches what you need.
+
+| You want to... | Go here |
+| --- | --- |
+| Read docs, getting started, configuration, error catalog | [theauth.dev](https://theauth.dev) |
+| Ask a question, share a pattern, propose a roadmap item | [GitHub Discussions](https://github.com/glincker/theauth-go/discussions) |
+| Report a reproducible bug | [Open an issue](https://github.com/glincker/theauth-go/issues/new?template=bug_report.yml) |
+| Request a feature | [Open an issue](https://github.com/glincker/theauth-go/issues/new?template=feature_request.yml) |
+| Report a **security vulnerability** (do NOT open a public issue) | [Security advisories](https://github.com/glincker/theauth-go/security/advisories/new) and `SECURITY.md` |
+| See what shipped per release | `CHANGELOG.md` |
+| Upgrade between minor or major versions | `docs/MIGRATION.md` |
+
+## Before opening an issue
+
+1. Check [theauth.dev](https://theauth.dev) and `CHANGELOG.md`.
+2. Search [existing issues](https://github.com/glincker/theauth-go/issues?q=is%3Aissue) and [discussions](https://github.com/glincker/theauth-go/discussions).
+3. If your question is "how do I...", use Discussions, not Issues.
+4. Bug reports require: theauth-go version, Go version, storage backend, minimal repro.
+
+## Commercial support
+
+For SLAs, audit assistance, custom storage backends, or migration help,
+contact **[email protected]**.