[chrarnoldus]

Reverts #6894

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

This PR (PR #7006) is an exact revert of #6894. Verified locally that the resulting tree is byte-identical to the pre-refactor commit (git diff 9fe474bf2^ e149d0d8 is empty) and that all moved code is verbatim; no novel defects, no dangling references, and no MCP write exposure.

Files Reviewed (17 files)

• apps/web/src/app/api/auth/[...nextauth]/route.ts
• apps/web/src/app/api/auth/native/token/route.test.ts
• apps/web/src/app/api/auth/verify-turnstile/route.ts
• apps/web/src/app/auth/openai/callback/route.test.ts
• apps/web/src/app/auth/openai/callback/route.ts
• apps/web/src/app/get-started/page.tsx
• apps/web/src/app/page.tsx
• apps/web/src/app/users/accept-invite/[token]/page.tsx
• apps/web/src/app/users/after-sign-in/route.test.ts
• apps/web/src/app/users/after-sign-in/route.tsx
• apps/web/src/lib/auth/verify-turnstile-jwt.test.ts
• apps/web/src/lib/auth/verify-turnstile-jwt.ts
• apps/web/src/lib/user/next-auth-options.ts (restored into server.ts)
• apps/web/src/lib/user/profile-redirect-path.ts (restored into server.ts)
• apps/web/src/lib/user/server-signin-callback.test.ts
• apps/web/src/lib/user/server.test.ts
• apps/web/src/lib/user/server.ts

Notes

• The only behavioral delta is reverting session reads from sessionAuthOptions back to authOptions (getServerSession(authOptions)), restoring the behavior shipped before refactor(web): move NextAuth sign-in config and landing redirect out of lib/user/server #6894. This is the intended effect of the revert, not a new defect.
• No .sql migrations, markdown documentation, or MCP catalog changes are present in this PR.

---

_{Reviewed by deepseek-v4.1-flash · Input: 0 · Output: 0 · Cached: 0}

_{Review guidance: REVIEW.md from base branch main}