fix: allow token-based agent onboarding routes through proxy auth (#18)

* fix: allow token-based agent onboarding routes through proxy auth

The onboarding bootstrap flow serves /api/onboarding/script and
/api/onboarding/register to agents using signed invite tokens, not
human JWTs. The app proxy was requiring authentication for all API
routes except an explicit allowlist, which returned 401 before the
onboarding handlers could verify the invite token.

Add script (GET) and register (POST) to route-local auth passthrough so
invite creation stays operator-protected while agent bootstrap works.

Co-authored-by: Luis Calderon <luis@calderon.com>

* chore: cover onboarding routes in route-auth boundary check

Co-authored-by: Luis Calderon <luis@calderon.com>

* chore: refresh proxy trust-boundary checklist hash

Co-authored-by: Luis Calderon <luis@calderon.com>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>

Author: lac5q

apps/memroos/src/__tests__/proxy.test.ts

@@ -78,6 +78,26 @@ describe("proxy", () => {
     expect(await response.json()).toEqual({ error: "authentication required" });
   });
 
+  it("lets agent onboarding bootstrap routes handle their own signed-token authorization", async () => {
+    const scriptResponse = await proxy(
+      new NextRequest("http://localhost:3002/api/onboarding/script?token=signed-token", {
+        method: "GET",
+        headers: { host: "localhost:3002" },
+      })
+    );
+    const registerResponse = await proxy(
+      new NextRequest("http://localhost:3002/api/onboarding/register", {
+        method: "POST",
+        headers: { host: "localhost:3002", "content-type": "application/json" },
+      })
+    );
+
+    expect(scriptResponse.status).toBe(200);
+    expect(await scriptResponse.text()).toBe("");
+    expect(registerResponse.status).toBe(200);
+    expect(await registerResponse.text()).toBe("");
+  });
+
   it("rejects expired or malformed JWT credentials on protected API routes", async () => {
     const expired = await expiredAccessToken("reviewer-expired", "reviewer");
     const expiredResponse = await proxy(

apps/memroos/src/proxy.ts

@@ -75,6 +75,9 @@ const ADMIN_ROUTES: Array<{ method?: string; pattern: RegExp }> = [
 ];
 
 const ROUTE_LOCAL_AUTH_API_ROUTES: Array<{ method?: string; pattern: RegExp }> = [
+  // Agent onboarding bootstrap uses signed invite tokens, not human JWTs.
+  { method: "GET", pattern: /^\/api\/onboarding\/script$/ },
+  { method: "POST", pattern: /^\/api\/onboarding\/register$/ },
   { pattern: /^\/api\/chatgpt\/actions\// },
   { pattern: /^\/api\/agent-context\// },
   { method: "POST", pattern: /^\/api\/agent-memory\/capture$/ },

docs/next-trust-boundary-upgrade.md

@@ -7,7 +7,7 @@ the defense-in-depth layer for privileged APIs.
 ## Reviewed Baseline
 
 - Reviewed Next.js dependency: `^16.2.7`
-- Reviewed proxy sha256: `8ec45a8fa941800764109978f3255ad4425736916e2a6ec9fc72854095286f9b`
+- Reviewed proxy sha256: `2805d91afc06b92f5d457ba350ef83c60399a97276e83f93cf5485622c50e40d`
 
 ## Required Before Changing Next Or Proxy
 

scripts/check-route-auth-boundary.mjs

@@ -8,6 +8,14 @@ const repoRoot = path.resolve(scriptDir, "..");
 const proxyPath = path.join(repoRoot, "apps/memroos/src/proxy.ts");
 
 const routeLocalAuthCoverage = [
+  {
+    pattern: "/^\\/api\\/onboarding\\/script$/",
+    files: [["apps/memroos/src/app/api/onboarding/script/route.ts", ["verifyAgentOnboardingToken("]]],
+  },
+  {
+    pattern: "/^\\/api\\/onboarding\\/register$/",
+    files: [["apps/memroos/src/app/api/onboarding/register/route.ts", ["verifyAgentOnboardingToken("]]],
+  },
   {
     pattern: "/^\\/api\\/chatgpt\\/actions\\//",
     files: [

scripts/check-route-auth-boundary.test.mjs

@@ -8,6 +8,8 @@ import {
 
 const PROXY_FIXTURE = `
 const ROUTE_LOCAL_AUTH_API_ROUTES: Array<{ method?: string; pattern: RegExp }> = [
+  { method: "GET", pattern: /^\\/api\\/onboarding\\/script$/ },
+  { method: "POST", pattern: /^\\/api\\/onboarding\\/register$/ },
   { pattern: /^\\/api\\/chatgpt\\/actions\\// },
   { pattern: /^\\/api\\/agent-context\\// },
   { method: "POST", pattern: /^\\/api\\/agent-memory\\/capture$/ },
@@ -32,6 +34,8 @@ const AUTH_MARKERS = {
 
 function goodFiles() {
   return new Map([
+    ["apps/memroos/src/app/api/onboarding/script/route.ts", "verifyAgentOnboardingToken("],
+    ["apps/memroos/src/app/api/onboarding/register/route.ts", "verifyAgentOnboardingToken("],
     ["apps/memroos/src/app/api/chatgpt/actions/search/route.ts", AUTH_MARKERS.chatgpt],
     ["apps/memroos/src/app/api/chatgpt/actions/fetch/route.ts", AUTH_MARKERS.chatgpt],
     ["apps/memroos/src/app/api/chatgpt/actions/save/route.ts", AUTH_MARKERS.chatgpt],
@@ -74,6 +78,8 @@ function goodFiles() {
 describe("route auth boundary checker", () => {
   it("parses proxy route-local auth patterns", () => {
     assert.deepEqual(parseRouteLocalAuthPatterns(PROXY_FIXTURE), [
+      "/^\\/api\\/onboarding\\/script$/",
+      "/^\\/api\\/onboarding\\/register$/",
       "/^\\/api\\/chatgpt\\/actions\\//",
       "/^\\/api\\/agent-context\\//",
       "/^\\/api\\/agent-memory\\/capture$/",