3 commits

Author	SHA1	Message	Date
Mitchell R	fe11519925	fix: drop Secure cookie flag for non-TLS dev access	2026-05-10 02:57:31 +02:00
Mitchell R	3c5256bbb4	fix: avoid h3 setCookie, use Set-Cookie header on Response directly ... h3 v2's setCookie modifies event response headers but doesn't carry them when handler returns a raw Response object. Build Set-Cookie header manually in redirect helpers instead.	2026-05-10 02:53:06 +02:00
Mitchell R	a64363258d	fix: use Response wrapper instead of h3 tagged template html() ... h3 v2's html() is a tagged template literal, not a function that accepts a string. JSX-rendered markup passed directly causes "first.reduce is not a function". Created htmlPage() helper that wraps markup in a proper Response with text/html content type.	2026-05-10 02:50:16 +02:00