/**
 * The route guards live in `libs/shared` (ADR-C-006) — they are actor-agnostic, reading
 * only `SESSION_PORT` and `AccessStore`, so both apps share one copy and one spec.
 * Re-exported here so `app.routes.ts` keeps importing them from `@auth/auth.guard`:
 * routing asks the auth context for its guards, which is the right direction to read.
 *
 * ADR-0002 §3's "auth stays duplicated" still holds for what it actually scopes —
 * `Principal`, the login flow, `SessionStore`. A guard is neither.
 */
export { authGuard, capabilityGuard } from '@shared/application/auth.guard';