Auth flow refactor, project requests, and routing updates

- Add server-side auth token loader (auth.server.ts) with SSR cookie forwarding
- Add project-requests client for explicit/signal/existing issue dispatch
- Refactor auth layout and app layout for SSR auth gating
- Update auth-client and auth-provider for convex token flow
- Extend project-issue primitives with request result schema
- Wire projectIssues backend mutation for request handling
- Update slice-one page and project-workspace hook
- Adjust routes (remove unused), Caddy config, and env templates

packages/agents/src/agents/project-manager.ts

@@ -1,6 +1,5 @@
 import { parseAgentEnv } from "@code/env/agent";
 import { defineAgent } from "@flue/runtime";
-import type { AgentRouteHandler } from "@flue/runtime";
 
 import { createFinalizeGiteaLifecycle } from "../actions/finalize-gitea-lifecycle";
 import { agentOs } from "../sandboxes/agent-os";
@@ -9,8 +8,6 @@ import { createProjectTools } from "../tools/project";
 export const description =
   "Works one repository issue inside an isolated AgentOS workspace.";
 
-export const route: AgentRouteHandler = (_context, next) => next();
-
 export default defineAgent(({ env, id }) => {
   const { AGENT_MODEL_NAME, AGENT_MODEL_PROVIDER } = parseAgentEnv(env);
 

packages/agents/src/project-request.ts

@@ -31,6 +31,11 @@ const createIssueFromSignal = makeFunctionReference<
   { readonly signalId: string },
   { readonly issueId: string; readonly projectId: string }
 >("projectIssues:createFromSignal");
+const getIssue = makeFunctionReference<
+  "query",
+  { readonly issueId: string },
+  { readonly issueId: string; readonly projectId: string } | null
+>("projectIssues:getForDispatch");
 
 const beginIssue = makeFunctionReference<
   "mutation",
@@ -75,6 +80,14 @@ const createIssueForRequest = async (
   client: ConvexHttpClient,
   request: Awaited<ReturnType<typeof decodeRequest>>
 ): Promise<{ readonly issueId: string; readonly projectId: string }> => {
+  if (request.kind === "existing") {
+    const issue = await client.query(getIssue, { issueId: request.issueId });
+    if (!issue) {
+      throw new Error("Project issue not found");
+    }
+    return issue;
+  }
+
   if (request.kind === "signal") {
     return client.mutation(createIssueFromSignal, {
       signalId: request.signalId,