# Local Development

## Install

```bash
npm install
```

## Run

```bash
VITE_API_BASE_URL=http://localhost:8080 \
VITE_THALOS_AUTH_BASE_URL=http://localhost:20080 \
VITE_THALOS_DEFAULT_RETURN_URL=https://auth.dream-views.com/ \
VITE_THALOS_ALLOWED_RETURN_HOSTS=auth.dream-views.com,localhost \
VITE_THALOS_DEFAULT_TENANT_ID=demo-tenant \
npm run dev
```

## Auth Model

- Login is executed against Thalos session endpoints.
- Google OIDC login start URL is generated from query params with return-url allowlist validation.
- Business calls are gated behind session checks.
- Session cookies are sent with `credentials: include`.

## Build

```bash
npm run build
```

## Test

```bash
npm run test:ci
```

See also: `docs/runbooks/testing.md`