Context Gathering Progress:
- [ ] Step 1: Identify scope and boundaries
- [ ] Step 2: Find entry points and main files
- [ ] Step 3: Read core implementation
- [ ] Step 4: Map dependencies and consumers
- [ ] Step 5: Gather type definitions and interfaces
- [ ] Step 6: Check recent git history
- [ ] Step 7: Compile structured output

# Context: [Topic Name]

## Purpose

[What this code does and why it exists - 2-3 sentences]

## Key Files

| File                | Purpose                               |
| ------------------- | ------------------------------------- |
| `src/auth/login.ts` | Main login logic and session creation |
| `src/auth/types.ts` | User and session type definitions     |
| `src/auth/utils.ts` | Password hashing, token generation    |

## Public Interface

### Functions

\`\`\`typescript // Primary entry point for authentication async function
authenticate(credentials: Credentials): Promise<Session>

// Validate existing session function validateSession(token: string): boolean
\`\`\`

### Types

\`\`\`typescript interface Credentials { email: string; password: string; }

interface Session { userId: string; token: string; expiresAt: Date; } \`\`\`

## Dependencies

**Internal:**

- `src/db/users.ts` - User data access
- `src/crypto/hash.ts` - Password hashing

**External:**

- `jsonwebtoken` - JWT creation and validation
- `bcrypt` - Password hashing

## Consumers

- `src/api/routes/auth.ts` - REST API endpoints
- `src/graphql/resolvers/auth.ts` - GraphQL resolvers
- `src/middleware/auth.ts` - Request authentication

## Recent Changes

| Date       | Author | Change                      |
| ---------- | ------ | --------------------------- |
| 2024-01-10 | @alice | Add refresh token support   |
| 2024-01-05 | @bob   | Fix session expiration bug  |
| 2024-01-02 | @alice | Initial auth implementation |

## Key Code Snippets

### Session Creation

\`\`\`typescript async function createSession(user: User): Promise<Session> {
const token = jwt.sign( { userId: user.id }, process.env.JWT_SECRET, {
expiresIn: '24h' } );

return { userId: user.id, token, expiresAt: new Date(Date.now() + 24 * 60 *
60 * 1000) }; } \`\`\`

## Assumptions and Constraints

- Sessions expire after 24 hours
- Passwords must be hashed with bcrypt (cost factor 12)
- JWT_SECRET must be set in environment
- Database connection required for user lookup

# Find exports from a module
grep -r "export" src/auth/

# Find where module is imported
grep -r "from.*auth" src/

# Find test files
find . -name "*auth*.test.*"

# Find imports in a file
grep "^import" src/auth/login.ts

# Find all files importing this module
grep -r "from.*auth" --include="*.ts" src/

# Recent commits for a file/directory
git log --oneline -10 -- src/auth/

# Who contributed most
git shortlog -sn -- src/auth/