@fleetless/contracts 5.2.0 → 6.0.0-next.1

package/dist/routes.d.ts

@@ -92,4 +92,23 @@ export declare const ROUTE_SECTIONS: readonly {
 }[];
 /** The routes that verify a credential inside the handler; `auth: 'in_handler'` is refused elsewhere. */
 export declare const IN_HANDLER_ROUTES: readonly string[];
+/**
+ * **The steps of a developer sign-in, written once for both portal flows.**
+ *
+ * The console's own OAuth flow (`/console/oauth`) and the central MCP
+ * endpoint's (`/mcp/oauth`) sign the same people in the same way: an emailed
+ * code or a passkey, then the second factor where the person has one or the
+ * organisation requires one. Two hand-written copies of thirteen rows would
+ * drift; this returns them for a prefix, and `ROUTES` spreads both.
+ *
+ * Every step is a page the auth portal serves to itself: `audience:
+ * 'internal'`, no request schema — the handlers read form fields by hand — and
+ * HTML for a browser form post, JSON for a JSON caller. Every step after
+ * `identify` needs the browser-proof cookie set there, so a step posted from
+ * another browser renders the `wrong_browser` page. The interaction's ten
+ * minutes cover every step; only when the last one is done is anything
+ * minted. **For `/mcp/oauth`, "done" means the consent step**, as the
+ * password did before.
+ */
+export declare function developerSignInRoutes(prefix: '/console/oauth' | '/mcp/oauth'): RouteEntry[];
 export declare const ROUTES: readonly RouteEntry[];