mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-09 21:10:59 +00:00
Walk every per-domain route tree that serves a toggleable module and classify each route.ts as module-gated, delegated (cycle/coach), builder-gated (doctor-report/FHIR), or explicitly exempt with a reason. A new ungated module route trips the guard by name. Close four route-level gate gaps the inventory surfaced: the mood analysis reads (/api/mood/insights, /api/mood/analytics) and the sleep view reads (/api/sleep/night, /api/sleep/rhythm) now gate on their module instead of staying reachable over a Bearer token while the module is off. Pin the gate to enabled in the three pre-existing route suites.