@blackms/aistack 1.2.0 → 1.3.1

package/dist/web/middleware/auth.js

@@ -1,23 +1,91 @@
 /**
- * Authentication middleware (placeholder for future implementation)
+ * Authentication middleware
  */
+import { logger } from '../../utils/logger.js';
+const log = logger.child('auth:middleware');
+let authService = null;
+/**
+ * Initialize authentication with service
+ */
+export function initAuth(service) {
+    authService = service;
+}
 /**
  * Create authentication middleware
- * Currently a no-op that allows all requests
- */
-export function createAuthMiddleware(_options = {}) {
-    return function authMiddleware(_req, _res) {
-        // For now, all requests are authenticated
-        // In the future, this could check API keys, JWT tokens, etc.
-        return {
-            authenticated: true,
-        };
+ */
+export function createAuthMiddleware(options = {}) {
+    const { required = true, roles = [] } = options;
+    return function authMiddleware(req, res) {
+        // If auth is not required, return authenticated context
+        if (!required) {
+            return {
+                authenticated: true,
+            };
+        }
+        // If auth service is not initialized, fail closed in production
+        if (!authService) {
+            if (process.env.NODE_ENV === 'production') {
+                sendUnauthorized(res, 'Authentication service not initialized');
+                throw new Error('Authentication required');
+            }
+            // In development, allow requests if auth is not set up
+            log.warn('Auth service not initialized, allowing request in development mode');
+            return {
+                authenticated: true,
+            };
+        }
+        // Extract token
+        const token = getToken(req);
+        if (!token) {
+            sendUnauthorized(res, 'No authentication token provided');
+            throw new Error('Authentication required');
+        }
+        try {
+            // Verify token
+            const payload = authService.verifyAccessToken(token);
+            // Get user
+            const user = authService.getUserById(payload.userId);
+            if (!user) {
+                sendUnauthorized(res, 'User not found');
+                throw new Error('Authentication failed');
+            }
+            // Check role if specified
+            if (roles.length > 0 && !roles.includes(user.role)) {
+                sendForbidden(res, 'Insufficient permissions');
+                throw new Error('Forbidden');
+            }
+            // Return auth context (excluding sensitive fields)
+            // eslint-disable-next-line @typescript-eslint/no-unused-vars
+            const { passwordHash, ...userWithoutPassword } = user;
+            return {
+                authenticated: true,
+                user: userWithoutPassword,
+                userId: user.id,
+                role: user.role,
+                permissions: getRolePermissions(user.role),
+            };
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                if (error.message === 'Token expired') {
+                    sendUnauthorized(res, 'Token expired');
+                }
+                else if (error.message === 'Invalid token') {
+                    sendUnauthorized(res, 'Invalid token');
+                }
+                else if (error.message !== 'Authentication required' && error.message !== 'Forbidden') {
+                    log.error('Authentication error', { error: error.message });
+                    sendUnauthorized(res, 'Authentication failed');
+                }
+            }
+            throw error;
+        }
     };
 }
 /**
- * Extract API key from request headers
+ * Extract token from request headers
  */
-export function getApiKey(req) {
+function getToken(req) {
     const authHeader = req.headers.authorization;
     if (authHeader?.startsWith('Bearer ')) {
         return authHeader.slice(7);
@@ -28,4 +96,76 @@ export function getApiKey(req) {
     }
     return null;
 }
+/**
+ * Get API key from request (legacy support)
+ */
+export function getApiKey(req) {
+    return getToken(req);
+}
+/**
+ * Get role permissions
+ */
+function getRolePermissions(role) {
+    const permissions = {
+        admin: ['*'], // Admin has all permissions
+        developer: [
+            'agents:read',
+            'agents:write',
+            'agents:spawn',
+            'memory:read',
+            'memory:write',
+            'workflows:read',
+            'workflows:write',
+            'projects:read',
+            'projects:write',
+            'sessions:read',
+            'sessions:write',
+        ],
+        viewer: [
+            'agents:read',
+            'memory:read',
+            'workflows:read',
+            'projects:read',
+            'sessions:read',
+        ],
+    };
+    return permissions[role] || [];
+}
+/**
+ * Send 401 Unauthorized response
+ */
+function sendUnauthorized(res, message) {
+    res.writeHead(401, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ error: message }));
+}
+/**
+ * Send 403 Forbidden response
+ */
+function sendForbidden(res, message) {
+    res.writeHead(403, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ error: message }));
+}
+/**
+ * Verify user has permission
+ */
+export function hasPermission(context, permission) {
+    if (!context.authenticated)
+        return false;
+    if (!context.permissions)
+        return false;
+    // Admin wildcard
+    if (context.permissions.includes('*'))
+        return true;
+    // Exact match
+    if (context.permissions.includes(permission))
+        return true;
+    // Wildcard match (e.g., "agents:*" matches "agents:read")
+    const parts = permission.split(':');
+    if (parts.length === 2) {
+        const wildcardPerm = `${parts[0]}:*`;
+        if (context.permissions.includes(wildcardPerm))
+            return true;
+    }
+    return false;
+}
 //# sourceMappingURL=auth.js.map

package/dist/web/middleware/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/web/middleware/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmC,EAAE;IACxE,OAAO,SAAS,cAAc,CAC5B,IAAqB,EACrB,IAAoB;QAEpB,0CAA0C;QAC1C,6DAA6D;QAC7D,OAAO;YACL,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,GAAoB;IAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/web/middleware/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAG/C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAI5C,IAAI,WAAW,GAAuB,IAAI,CAAC;AAE3C;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAoB;IAC3C,WAAW,GAAG,OAAO,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAoD,EAAE;IACzF,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAEhD,OAAO,SAAS,cAAc,CAC5B,GAAoB,EACpB,GAAmB;QAEnB,wDAAwD;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,aAAa,EAAE,IAAI;aACpB,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC1C,gBAAgB,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7C,CAAC;YACD,uDAAuD;YACvD,GAAG,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;YAC/E,OAAO;gBACL,aAAa,EAAE,IAAI;aACpB,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,gBAAgB,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACH,eAAe;YACf,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAErD,WAAW;YACX,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YAED,0BAA0B;YAC1B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,aAAa,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YAC/B,CAAC;YAED,mDAAmD;YACnD,6DAA6D;YAC7D,MAAM,EAAE,YAAY,EAAE,GAAG,mBAAmB,EAAE,GAAG,IAAI,CAAC;YACtD,OAAO;gBACL,aAAa,EAAE,IAAI;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;aAC3C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;oBACtC,gBAAgB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;gBACzC,CAAC;qBAAM,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;oBAC7C,gBAAgB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;gBACzC,CAAC;qBAAM,IAAI,KAAK,CAAC,OAAO,KAAK,yBAAyB,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;oBACxF,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC5D,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,GAAoB;IACpC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,GAAoB;IAC5C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,WAAW,GAA6B;QAC5C,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,4BAA4B;QAC1C,SAAS,EAAE;YACT,aAAa;YACb,cAAc;YACd,cAAc;YACd,aAAa;YACb,cAAc;YACd,gBAAgB;YAChB,iBAAiB;YACjB,eAAe;YACf,gBAAgB;YAChB,eAAe;YACf,gBAAgB;SACjB;QACD,MAAM,EAAE;YACN,aAAa;YACb,aAAa;YACb,gBAAgB;YAChB,eAAe;YACf,eAAe;SAChB;KACF,CAAC;IAEF,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,GAAmB,EAAE,OAAe;IAC5D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,GAAmB,EAAE,OAAe;IACzD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAoB,EAAE,UAAkB;IACpE,IAAI,CAAC,OAAO,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,OAAO,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAEvC,iBAAiB;IACjB,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnD,cAAc;IACd,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1D,0DAA0D;IAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACrC,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/web/routes/auth.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Authentication routes
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { AuthService } from '../../auth/service.js';
+export interface AuthRoutes {
+    authService: AuthService;
+}
+/**
+ * Create authentication routes
+ */
+export declare function createAuthRoutes(deps: AuthRoutes): {
+    /**
+     * POST /api/auth/register - Register new user
+     */
+    register(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /**
+     * POST /api/auth/login - Login user
+     */
+    login(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /**
+     * POST /api/auth/refresh - Refresh access token
+     */
+    refresh(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /**
+     * POST /api/auth/logout - Logout user
+     */
+    logout(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /**
+     * GET /api/auth/me - Get current user
+     */
+    me(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /**
+     * POST /api/auth/change-password - Change password
+     */
+    changePassword(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /**
+     * GET /api/auth/users - List all users (admin only)
+     */
+    listUsers(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /**
+     * PUT /api/auth/users/:userId/role - Update user role (admin only)
+     */
+    updateUserRole(req: IncomingMessage, res: ServerResponse, userId: string): Promise<void>;
+    /**
+     * DELETE /api/auth/users/:userId - Delete user (admin only)
+     */
+    deleteUser(req: IncomingMessage, res: ServerResponse, userId: string): Promise<void>;
+};
+//# sourceMappingURL=auth.d.ts.map

package/dist/web/routes/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/web/routes/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAQpD,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU;IAI7C;;OAEG;kBACiB,eAAe,OAAO,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCxE;;OAEG;eACc,eAAe,OAAO,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCrE;;OAEG;iBACgB,eAAe,OAAO,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BvE;;OAEG;gBACe,eAAe,OAAO,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBtE;;OAEG;YACW,eAAe,OAAO,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBlE;;OAEG;wBACuB,eAAe,OAAO,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IA+B9E;;OAEG;mBACkB,eAAe,OAAO,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAazE;;OAEG;wBAEI,eAAe,OACf,cAAc,UACX,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IA2BhB;;OAEG;oBAEI,eAAe,OACf,cAAc,UACX,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;EAsBnB"}

package/dist/web/routes/auth.js

@@ -0,0 +1,216 @@
+/**
+ * Authentication routes
+ */
+import { logger } from '../../utils/logger.js';
+import { parseRequestBody } from '../utils/request.js';
+import { createAuthMiddleware } from '../middleware/auth.js';
+import { UserRole } from '../../auth/types.js';
+const log = logger.child('web:auth');
+/**
+ * Create authentication routes
+ */
+export function createAuthRoutes(deps) {
+    const { authService } = deps;
+    return {
+        /**
+         * POST /api/auth/register - Register new user
+         */
+        async register(req, res) {
+            try {
+                const body = await parseRequestBody(req);
+                const user = await authService.register({
+                    email: body.email,
+                    username: body.username,
+                    password: body.password,
+                }, body.role || UserRole.DEVELOPER);
+                // eslint-disable-next-line @typescript-eslint/no-unused-vars
+                const { passwordHash, ...userWithoutPassword } = user;
+                res.writeHead(201, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    user: userWithoutPassword,
+                }));
+            }
+            catch (error) {
+                log.error('Registration failed', {
+                    error: error instanceof Error ? error.message : 'Unknown error',
+                });
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    error: error instanceof Error ? error.message : 'Registration failed',
+                }));
+            }
+        },
+        /**
+         * POST /api/auth/login - Login user
+         */
+        async login(req, res) {
+            try {
+                const body = await parseRequestBody(req);
+                const result = await authService.login({
+                    email: body.email,
+                    password: body.password,
+                });
+                // eslint-disable-next-line @typescript-eslint/no-unused-vars
+                const { passwordHash, ...userWithoutPassword } = result.user;
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    user: userWithoutPassword,
+                    tokens: result.tokens,
+                }));
+            }
+            catch (error) {
+                log.error('Login failed', {
+                    error: error instanceof Error ? error.message : 'Unknown error',
+                });
+                res.writeHead(401, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    error: error instanceof Error ? error.message : 'Login failed',
+                }));
+            }
+        },
+        /**
+         * POST /api/auth/refresh - Refresh access token
+         */
+        async refresh(req, res) {
+            try {
+                const body = await parseRequestBody(req);
+                if (!body.refreshToken) {
+                    throw new Error('Refresh token is required');
+                }
+                const tokens = await authService.refreshAccessToken(body.refreshToken);
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ tokens }));
+            }
+            catch (error) {
+                log.error('Token refresh failed', {
+                    error: error instanceof Error ? error.message : 'Unknown error',
+                });
+                res.writeHead(401, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    error: error instanceof Error ? error.message : 'Token refresh failed',
+                }));
+            }
+        },
+        /**
+         * POST /api/auth/logout - Logout user
+         */
+        async logout(req, res) {
+            try {
+                const body = await parseRequestBody(req);
+                if (body.refreshToken) {
+                    await authService.logout(body.refreshToken);
+                }
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ success: true }));
+            }
+            catch (error) {
+                log.error('Logout failed', {
+                    error: error instanceof Error ? error.message : 'Unknown error',
+                });
+                res.writeHead(500, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    error: error instanceof Error ? error.message : 'Logout failed',
+                }));
+            }
+        },
+        /**
+         * GET /api/auth/me - Get current user
+         */
+        async me(req, res) {
+            try {
+                const auth = createAuthMiddleware({ required: true })(req, res);
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    user: auth.user,
+                    permissions: auth.permissions,
+                }));
+            }
+            catch {
+                // Error already handled by middleware
+            }
+        },
+        /**
+         * POST /api/auth/change-password - Change password
+         */
+        async changePassword(req, res) {
+            try {
+                const auth = createAuthMiddleware({ required: true })(req, res);
+                const body = await parseRequestBody(req);
+                if (!auth.userId) {
+                    throw new Error('Authentication required');
+                }
+                await authService.changePassword(auth.userId, body.oldPassword, body.newPassword);
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ success: true }));
+            }
+            catch (error) {
+                log.error('Password change failed', {
+                    error: error instanceof Error ? error.message : 'Unknown error',
+                });
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    error: error instanceof Error ? error.message : 'Password change failed',
+                }));
+            }
+        },
+        /**
+         * GET /api/auth/users - List all users (admin only)
+         */
+        async listUsers(req, res) {
+            try {
+                createAuthMiddleware({ required: true, roles: ['admin'] })(req, res);
+                const users = authService.listUsers();
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ users }));
+            }
+            catch {
+                // Error already handled by middleware
+            }
+        },
+        /**
+         * PUT /api/auth/users/:userId/role - Update user role (admin only)
+         */
+        async updateUserRole(req, res, userId) {
+            try {
+                createAuthMiddleware({ required: true, roles: ['admin'] })(req, res);
+                const body = await parseRequestBody(req);
+                if (!body.role) {
+                    throw new Error('Role is required');
+                }
+                authService.updateUserRole(userId, body.role);
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ success: true }));
+            }
+            catch (error) {
+                log.error('Role update failed', {
+                    error: error instanceof Error ? error.message : 'Unknown error',
+                });
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    error: error instanceof Error ? error.message : 'Role update failed',
+                }));
+            }
+        },
+        /**
+         * DELETE /api/auth/users/:userId - Delete user (admin only)
+         */
+        async deleteUser(req, res, userId) {
+            try {
+                createAuthMiddleware({ required: true, roles: ['admin'] })(req, res);
+                authService.deleteUser(userId);
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ success: true }));
+            }
+            catch (error) {
+                log.error('User deletion failed', {
+                    error: error instanceof Error ? error.message : 'Unknown error',
+                });
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    error: error instanceof Error ? error.message : 'User deletion failed',
+                }));
+            }
+        },
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/web/routes/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/web/routes/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAMrC;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAE7B,OAAO;QACL;;WAEG;QACH,KAAK,CAAC,QAAQ,CAAC,GAAoB,EAAE,GAAmB;YACtD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAEzC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CACrC;oBACE,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,EACD,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,SAAS,CAChC,CAAC;gBAEF,6DAA6D;gBAC7D,MAAM,EAAE,YAAY,EAAE,GAAG,mBAAmB,EAAE,GAAG,IAAI,CAAC;gBAEtD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,mBAAmB;iBAC1B,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBAC/B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;iBACtE,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,KAAK,CAAC,GAAoB,EAAE,GAAmB;YACnD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAEzC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC;oBACrC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC,CAAC;gBAEH,6DAA6D;gBAC7D,MAAM,EAAE,YAAY,EAAE,GAAG,mBAAmB,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;gBAE7D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,mBAAmB;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE;oBACxB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc;iBAC/D,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,OAAO,CAAC,GAAoB,EAAE,GAAmB;YACrD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAEzC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAEvE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBAChC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;iBACvE,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,MAAM,CAAC,GAAoB,EAAE,GAAmB;YACpD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAEzC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC9C,CAAC;gBAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE;oBACzB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,EAAE,CAAC,GAAoB,EAAE,GAAmB;YAChD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAEhE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,cAAc,CAAC,GAAoB,EAAE,GAAmB;YAC5D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAChE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAEzC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;gBAC7C,CAAC;gBAED,MAAM,WAAW,CAAC,cAAc,CAC9B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,WAAW,CACjB,CAAC;gBAEF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE;oBAClC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;iBACzE,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,SAAS,CAAC,GAAoB,EAAE,GAAmB;YACvD,IAAI,CAAC;gBACH,oBAAoB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAErE,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;gBAEtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,cAAc,CAClB,GAAoB,EACpB,GAAmB,EACnB,MAAc;YAEd,IAAI,CAAC;gBACH,oBAAoB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACrE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAEzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACtC,CAAC;gBAED,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAE9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE;oBAC9B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB;iBACrE,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,UAAU,CACd,GAAoB,EACpB,GAAmB,EACnB,MAAc;YAEd,IAAI,CAAC;gBACH,oBAAoB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAErE,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAE/B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBAChC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;iBACvE,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/web/routes/index.d.ts

@@ -6,8 +6,10 @@ export { registerMemoryRoutes } from './memory.js';
 export { registerTaskRoutes } from './tasks.js';
 export { registerSessionRoutes } from './sessions.js';
 export { registerWorkflowRoutes } from './workflows.js';
+export { registerReviewLoopRoutes } from './review-loops.js';
 export { registerSystemRoutes } from './system.js';
 export { registerProjectRoutes } from './projects.js';
 export { registerSpecificationRoutes } from './specifications.js';
 export { registerFilesystemRoutes } from './filesystem.js';
+export { createAuthRoutes } from './auth.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/web/routes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/web/routes/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/web/routes/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC"}

package/dist/web/routes/index.js

@@ -6,8 +6,10 @@ export { registerMemoryRoutes } from './memory.js';
 export { registerTaskRoutes } from './tasks.js';
 export { registerSessionRoutes } from './sessions.js';
 export { registerWorkflowRoutes } from './workflows.js';
+export { registerReviewLoopRoutes } from './review-loops.js';
 export { registerSystemRoutes } from './system.js';
 export { registerProjectRoutes } from './projects.js';
 export { registerSpecificationRoutes } from './specifications.js';
 export { registerFilesystemRoutes } from './filesystem.js';
+export { createAuthRoutes } from './auth.js';
 //# sourceMappingURL=index.js.map

package/dist/web/routes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/web/routes/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/web/routes/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC"}

package/dist/web/routes/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/web/routes/memory.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAM3C,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAyKnF"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/web/routes/memory.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAM3C,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAuZnF"}