Spike S0

Two unknowns for climb-trainer: one Vercel project serving both a Vite SPA and FastAPI, and the same-site httpOnly cookie in Safari.