Lucas Berger 3094df84c8 feat(19-05): Option C — devSessionCookieMiddleware issues real local-session cookie under bypass ...

- Add devSessionCookieMiddleware() to devBypass.ts (production hard-guard FIRST)
- Issues local-session JWT cookie for DEV_USER when no cookie present under bypass
- Pure no-op when NODE_ENV=production, DEV_AUTH_BYPASS!=true, or secret not set
- Mount devSessionCookieMiddleware() after devAuthBypass() in index.ts
- Existing devBypass tests: 3/3 pass; typecheck: exit 0

2026-06-17 17:11:31 -04:00

..

api

feat(19-05): Option C — devSessionCookieMiddleware issues real local-session cookie under bypass

2026-06-17 17:11:31 -04:00

pwa

fix(12): unblock CI security + harness jobs

2026-06-16 18:24:10 -04:00