Till JS 3376b044bc fix(auth): resolve hardcoded localhost in user-settings across all web apps ... The createUserSettingsStore was receiving a static auth URL evaluated at module load time, before window.__PUBLIC_MANA_CORE_AUTH_URL__ was injected by hooks.server.ts. In production this caused CSP violations as settings API calls went to localhost:3001 instead of auth.mana.how. Changes: - Accept string | (() => string) for authUrl in shared-theme config - Resolve authUrl lazily at fetch time instead of module load - Fix fallback to empty string in non-dev environments (was localhost) - Pass getAuthUrl as getter function in all 17 web apps Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-03-25 12:40:30 +01:00
..
backend	feat(observability): add metrics and monitoring for all 15 backends	2026-03-23 09:09:04 +01:00
landing	feat(analytics): add automatic CTA tracking to all 10 landing pages	2026-03-22 19:13:24 +01:00
web	fix(auth): resolve hardcoded localhost in user-settings across all web apps	2026-03-25 12:40:30 +01:00