I inspected your git diff against main and organized the 18 modified files into 3 stacked, reviewable pull requests: 1. pr/auth-types-and-config (Base: main) - Scope: Auth schema updates, environment config, and session types - Files: src/types/auth.ts, config/auth.json 2. pr/auth-middleware-impl (Base: pr/auth-types-and-config) - Scope: JWT verification handler and route protection middleware - Files: src/middleware/jwt.ts, src/routes/auth.ts 3. pr/auth-unit-tests (Base: pr/auth-middleware-impl) - Scope: Unit & integration test coverage for authentication flows - Files: tests/auth.test.ts, tests/fixtures/users.json Each local branch has been created with clean, conventional commit messages. You can push these branches and open your stacked PRs in sequence.