fix: auth handler + circular imports — Phase 1 verification (P1-009) #73

2026-03-13T03:01:43Z

jason.woltje commented

2026-03-13 03:01:43 +00:00

Summary

Refactored BetterAuth from NestJS controller to Fastify onRequest hook to avoid body parser conflicts
Extracted AUTH and BRAIN injection tokens to separate *.tokens.ts files to break circular imports
Verified all Phase 1 API endpoints: auth signup/signin/session, CRUD for projects/missions/tasks/conversations/messages

Test plan

Auth signup returns user + token
Auth signin returns session cookie
Session endpoint returns user data with valid cookie
Protected routes return 401 without auth
Project/Mission/Task/Conversation CRUD all functional
Message creation on conversation sub-route works
typecheck, lint, format:check all pass

Closes #18

## Summary - Refactored BetterAuth from NestJS controller to Fastify onRequest hook to avoid body parser conflicts - Extracted AUTH and BRAIN injection tokens to separate *.tokens.ts files to break circular imports - Verified all Phase 1 API endpoints: auth signup/signin/session, CRUD for projects/missions/tasks/conversations/messages ## Test plan - [x] Auth signup returns user + token - [x] Auth signin returns session cookie - [x] Session endpoint returns user data with valid cookie - [x] Protected routes return 401 without auth - [x] Project/Mission/Task/Conversation CRUD all functional - [x] Message creation on conversation sub-route works - [x] typecheck, lint, format:check all pass Closes #18

jason.woltje added 1 commit 2026-03-13 03:01:43 +00:00

fix: auth handler + circular imports — Phase 1 verification (P1-009) 366bb35956

Refactor BetterAuth integration from NestJS controller to Fastify
onRequest hook to avoid body parser conflicts. Extract injection
tokens to separate files to break circular import cycles.

- Auth handler: use onRequest hook to intercept /api/auth/* before
  Fastify body parser runs, passing raw IncomingMessage to BetterAuth
- Extract AUTH and BRAIN injection tokens to *.tokens.ts files
- Update all controllers to import from tokens files
- Verified: signup, signin, session, CRUD for projects/missions/tasks/
  conversations/messages all functional

Co-Authored-By: Claude Opus 4.6 <[email protected]>

jason.woltje merged commit aa9ee75a2a into main

2026-03-13 03:02:03 +00:00

jason.woltje referenced this issue from a commit

2026-03-13 03:02:05 +00:00

fix: auth handler + circular imports — Phase 1 verification (P1-009) (#73)

Ghost referenced this pull request

2026-08-05 22:37:07 +00:00

RM-02: enforce anti-inert gate registry #1030

Ghost referenced this pull request

2026-08-05 22:37:08 +00:00

RM-02: enforce anti-inert gate registry #1030

Sign in to join this conversation.