Codex 49dc7cc6e1 feat(cloud-api): v0.2 24h Web session + Secure cookie ...

- SESSION_MAX_AGE_SECONDS 7d -> 24h
- Cookie now sets Secure + SameSite=Lax (preserves HttpOnly)
- /v1/auth/session exposes authMethod, sessionExpiresAt, sessionTtlSeconds
- setSessionCookie/clearSessionCookie use new builders
- New test covers first-admin, /auth/login and /auth/logout cookie shape + expiresAt

2026-06-04 15:01:30 +08:00

..

agent

fix(v0.2): freeze HWLAB-AgentRun concept boundary for #792

2026-06-04 02:18:34 +08:00

audit

feat: add cloud api runtime smoke

2026-05-21 18:33:01 +00:00

cloud

feat(cloud-api): v0.2 24h Web session + Secure cookie

2026-06-04 15:01:30 +08:00

db

feat(workbench): share account workspace across web and cli

2026-06-01 21:31:26 +08:00

dev-entrypoint

fix(web): avoid live 404 probes

2026-06-03 18:47:42 +08:00

device-pod

test: exercise v02 device-pod code rollout

2026-05-30 01:50:08 +08:00

mvp-gate

fix: make hwlab cli a short web client

2026-05-30 12:31:07 +08:00

patchpanel

fix: harden M3 simulator identities and wiring

2026-05-23 04:30:10 +00:00

protocol

feat(workbench): share account workspace across web and cli

2026-06-01 21:31:26 +08:00

sim

fix: align v02 gateway evidence environment

2026-06-01 08:26:21 +08:00

build-metadata.mjs

feat: expose hwlab client pod routes

2026-05-30 14:05:28 +08:00

dev-report-lifecycle.mjs

Merge pull request #127 from pikasTech/fix/m5-live-gate-agg

2026-05-22 20:02:14 +08:00