4, partial 5

src/config/auth.ts

@@ -0,0 +1,75 @@
+/**
+ * Authentication configuration for PodTUI
+ * Authentication is DISABLED by default - users can opt-in
+ */
+
+import { OAuthProvider, type OAuthProviderConfig } from "../types/auth"
+
+/** Default auth enabled state - DISABLED by default */
+export const DEFAULT_AUTH_ENABLED = false
+
+/** Authentication configuration */
+export const AUTH_CONFIG = {
+  /** Whether auth is enabled by default */
+  defaultEnabled: DEFAULT_AUTH_ENABLED,
+
+  /** Code validation settings */
+  codeValidation: {
+    /** Code length (8 characters) */
+    codeLength: 8,
+    /** Allowed characters (alphanumeric) */
+    allowedChars: /^[A-Z0-9]+$/,
+    /** Code expiration time in minutes */
+    expirationMinutes: 15,
+  },
+
+  /** Password requirements */
+  password: {
+    minLength: 8,
+    requireUppercase: false,
+    requireLowercase: false,
+    requireNumber: false,
+    requireSpecial: false,
+  },
+
+  /** Email validation */
+  email: {
+    pattern: /^[^\s@]+@[^\s@]+\.[^\s@]+$/,
+  },
+
+  /** Local storage keys */
+  storage: {
+    authState: "podtui_auth_state",
+    user: "podtui_user",
+    lastLogin: "podtui_last_login",
+  },
+} as const
+
+/** OAuth provider configurations */
+export const OAUTH_PROVIDERS: OAuthProviderConfig[] = [
+  {
+    id: OAuthProvider.GOOGLE,
+    name: "Google",
+    enabled: false, // Not feasible in terminal
+    description: "Sign in with Google (requires browser redirect)",
+  },
+  {
+    id: OAuthProvider.APPLE,
+    name: "Apple",
+    enabled: false, // Not feasible in terminal
+    description: "Sign in with Apple (requires browser redirect)",
+  },
+]
+
+/** Terminal OAuth limitation message */
+export const OAUTH_LIMITATION_MESSAGE = `
+OAuth authentication (Google, Apple) is not directly available in terminal applications.
+
+To use OAuth:
+1. Visit the web portal in your browser
+2. Sign in with your preferred provider
+3. Generate a sync code
+4. Enter the code here to link your account
+
+Alternatively, use email/password authentication or file-based sync.
+`.trim()