- POST /api/auth/dev-login creates/finds user, promotes to admin, sets session cookie
- POST /api/auth/dev-logout clears session cookie
- Dev login page at #/dev-login in the SPA
- Fix: getSessionCookieAttributes omits Secure over HTTP (local dev fix)
- Guarded: only works when PUBLIC_HOST=localhost, returns 403 otherwise
- Justfile: dev-admin and dev-logout commands
- README: local admin login instructions
- justfile with recipes for: build, dev, test, migrate, db helpers,
deploy (dev/prod), terraform infra, and smoke test
- README rewritten with quick start, command tables, and first-time
local setup guide
- All commands verified working locally
junv
Hermes Agent