| Session | GET | /auth/me | Return current user + workspace summary |
| Session | GET | /auth/session | Return raw session/user object |
| Session | POST | /auth/logout | End current session |
| Session | POST | /auth/sign-out | Alias logout path |
| Credentials | POST | /auth/sign-up/email | Register email/password account |
| Credentials | POST | /auth/sign-in/email | Sign in email/password account |
| Credentials | POST | /auth/forget-password | Start password reset |
| Credentials | POST | /auth/set-password | Set password for social-only account |
| Verification | GET | /auth/verify-email | Verify account and finalize post-verification setup |
| Verification | POST | /auth/resend-verification | Re-issue verification email |
| Social | GET | /auth/callback/:provider | OAuth callback handling |
| Connected auth | GET | /auth/linked-accounts | List linked providers |
| Connected auth | POST | /auth/unlink-provider | Unlink provider |
| Security | GET | /auth/two-factor/status | Read 2FA status |
