4 months ago
f2f0d56- §3/§4: @tripwire/auth in the tree, arrows (auth ← web, api), package contents; AGENTS.md + architecture.md arrow blocks mirrored; boundary allow-list already matching (api gains auth for the SSE gate) - §10 + §13.8: auth transport = web head serves /api/auth via createStart request middleware, with the WHY (vite proxy dead under nitro, no file-based server routes in this react-start version) - §2/§8: provider-agnostic via OpenRouter, AI_REVIEW_MODEL default slug, rule config wins; queue #7 already worded accordingly - §2 runtime caveat + frontend.md rule: web-head server code is Node — no Bun.* globals in apps/web; utils stay portable - parity audit §2/§3/§10 lines de-staled
Parent0c2b91e
