Last1 ID Integration Pipeline (Week 1)

This pipeline enables parallel execution across SDK, onboarding, verification, deployment readiness, observability, and compliance tracks.

Track A: SDK + Login Button

• Publishable package: @last1id/sdk
• Publishable package: @last1id/login-button
• One-command starter: node scripts/init-last1-sdk.mjs
• Outputs:
• PKCE helpers
• authorize URL builder
• token exchange + refresh helpers
• accessible login button with minimal API (issuer, clientId, redirectUri)

Track B: Self-Serve Onboarding (foundation)

• Provisioning automation: node scripts/provision-org-client.mjs
• Input: org metadata file
• Output: app client created with redirect URIs + scopes + secret

Track C: Integration Checklist Automation

• Verification automation: node scripts/verify-org-integration.mjs
• Checks:
• redirect URI policy
• scope policy
• consent text completeness
• discovery + JWKS health
• integration verified status

Track D: Versioning + Compatibility

• Semantic versioning per package.
• Tag conventions:
• sdk-vX.Y.Z
• login-button-vX.Y.Z
• Changelog and support policy in docs/SDK_COMPATIBILITY_POLICY.md.

Track E: Reference Implementations

• examples/nextjs-dashboard
• examples/react-spa
• examples/node-express
• examples/legacy-compatibility

Track F: Deployment Readiness Inputs

• Partner environment model: docs/PARTNER_ENVIRONMENTS.md
• Security/compliance baseline: docs/SECURITY_COMPLIANCE_PACK.md
• Automated scheduler: .github/workflows/compliance-bundle-scheduler.yml

CI/CD

• Workflow: .github/workflows/sdk-release.yml
• Validates package integrity and publishes on version tags.