ryan c27da41b64 fix(auth): forward session cookies through the Next API proxy ...

Login Set-Cookie was dropped by Next rewrites, so non-admin sessions
never stuck and every later API looked unauthenticated. Proxy JSON
APIs in proxy.ts, copy Set-Cookie, send 401 to login and 403 to /403.

2026-09-02 18:49:42 +08:00

..

cmd

feat(core): add WithMigrationBaseline hook before goose Up

2026-08-30 11:41:00 +08:00

core

fix(tasks): canonicalize triggered_by so execution labels resolve

2026-09-02 18:04:32 +08:00

docs

fix(config): serve public settings and enforce login CAP

2026-09-02 17:07:07 +08:00

downstream

feat(core): implement cordis configuration extension and migrate all plugins

2026-08-29 10:53:53 +08:00

pkg

merge: merge branch 'feat/cordis-router-raw-routes' into main

2026-08-30 17:57:38 +08:00

plugins

fix(auth): forward session cookies through the Next API proxy

2026-09-02 18:49:42 +08:00

go.mod

refactor(module): simplify module name to Wavelet and standardize import paths

2026-08-28 13:10:30 +08:00

go.sum

refactor(layout): relocate go.mod to backend/ and clean import paths to module root

2026-08-28 13:01:51 +08:00

main.go

refactor(module): simplify module name to Wavelet and standardize import paths

2026-08-28 13:10:30 +08:00