Till JS 3376b044bc fix(auth): resolve hardcoded localhost in user-settings across all web apps ... The createUserSettingsStore was receiving a static auth URL evaluated at module load time, before window.__PUBLIC_MANA_CORE_AUTH_URL__ was injected by hooks.server.ts. In production this caused CSP violations as settings API calls went to localhost:3001 instead of auth.mana.how. Changes: - Accept string | (() => string) for authUrl in shared-theme config - Resolve authUrl lazily at fetch time instead of module load - Fix fallback to empty string in non-dev environments (was localhost) - Pass getAuthUrl as getter function in all 17 web apps Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-03-25 12:40:30 +01:00
..
apps	fix(auth): resolve hardcoded localhost in user-settings across all web apps	2026-03-25 12:40:30 +01:00
docs	📝 docs(todo): update commit hash in cleanup plan	2026-01-28 16:13:15 +01:00
packages/shared	feat(contacts): integrate contacts into Todo and Calendar apps	2025-12-11 18:14:35 +01:00
scripts	feat(todo): prepare for production deployment	2026-01-28 14:04:27 +01:00
.env.example	feat(todo): prepare for production deployment	2026-01-28 14:04:27 +01:00
CLAUDE.md	docs(calendar,todo): add production readiness audit to CLAUDE.md	2026-03-24 10:34:15 +01:00
docker-compose.prod.yml	feat(todo): prepare for production deployment	2026-01-28 14:04:27 +01:00
package.json	🔧 chore: enforce monorepo best practices with automated validation	2025-12-25 17:57:00 +01:00