yiekheng 312cc4dc21 fix(web-auth): gate Secure cookie on CM_DEBUG, pass CM_AGENT creds to web-next ...

Previously the session cookie used Secure=NODE_ENV==='production', and the
dev override still runs the standalone build with NODE_ENV=production, so
the cookie was unreachable from phone-on-LAN testing over HTTP. Switching
to CM_DEBUG lets dev (CM_DEBUG=true) drop the Secure flag while keeping
prod (CM_DEBUG=false) safe.

Also wires CM_AGENT_ID/CM_AGENT_PASSWORD/CM_DEBUG into the web-next
service env block so the login Server Action can compare against them.

2026-05-03 09:01:35 +08:00

..

api.ts

feat(web): add server-side api-server fetch helper

2026-05-02 20:50:45 +08:00

auth-rp.ts

feat(web): WebAuthn relying-party helper (host-derived rpID/origin)

2026-05-03 08:27:32 +08:00

auth-store.ts

feat(web): JSON-file passkey store with atomic writes + write lock

2026-05-03 08:27:21 +08:00

auth.ts

fix(web-auth): gate Secure cookie on CM_DEBUG, pass CM_AGENT creds to web-next

2026-05-03 09:01:35 +08:00

types.ts

feat(web): add TypeScript types for Acc and User

2026-05-02 20:50:38 +08:00