1
/**
2
 * Authentication module barrel.
3
 *
4
 * Browser surfaces (admin pages, account UI, mutating JSON routes) authorize
5
 * via `session.ts` + `sessionMembership.ts`. Git endpoints authorize via
6
 * `gitAuth.ts` (PATs over HTTP Basic). PAT credentials must never reach
7
 * browser surfaces; the structural rule is that UI route modules import
8
 * only from `session*` / `sessionMembership`, never from `gitAuth`.
9
 */
10
 
11
export * from "./gitAuth";