Fix unused appliedMode param and deduplicate SESSION_COOKIE_NAME

- Remove unused appliedMode parameter from setDesktopServerExposurePreference
  and its callers/tests
- Extract SESSION_COOKIE_NAME to Services/SessionCredentialService.ts and
  import it in both layer files to prevent silent divergence

Author: cursoragent

apps/desktop/src/desktopSettings.test.ts

@@ -50,7 +50,6 @@ describe("desktopSettings", () => {
         },
         {
           requestedMode: "network-accessible",
-          appliedMode: "local-only",
         },
       ),
     ).toEqual({

apps/desktop/src/desktopSettings.ts

@@ -14,7 +14,6 @@ export function setDesktopServerExposurePreference(
   settings: DesktopSettings,
   input: {
     readonly requestedMode: DesktopServerExposureMode;
-    readonly appliedMode: DesktopServerExposureMode;
   },
 ): DesktopSettings {
   const persistedMode = input.requestedMode;

apps/desktop/src/main.ts

@@ -237,7 +237,6 @@ async function applyDesktopServerExposureMode(
   desktopServerExposureMode = exposure.mode;
   desktopSettings = setDesktopServerExposurePreference(desktopSettings, {
     requestedMode,
-    appliedMode: exposure.mode,
   });
   backendBindHost = exposure.bindHost;
   backendHttpUrl = exposure.localHttpUrl;

apps/server/src/auth/Layers/ServerAuthPolicy.ts

@@ -3,8 +3,7 @@ import { Effect, Layer } from "effect";
 
 import { ServerConfig } from "../../config.ts";
 import { ServerAuthPolicy, type ServerAuthPolicyShape } from "../Services/ServerAuthPolicy.ts";
-
-const SESSION_COOKIE_NAME = "t3_session";
+import { SESSION_COOKIE_NAME } from "../Services/SessionCredentialService.ts";
 
 const isWildcardHost = (host: string | undefined): boolean =>
   host === "0.0.0.0" || host === "::" || host === "[::]";

apps/server/src/auth/Layers/SessionCredentialService.ts

@@ -6,6 +6,7 @@ import { AuthSessionRepositoryLive } from "../../persistence/Layers/AuthSessions
 import { AuthSessionRepository } from "../../persistence/Services/AuthSessions.ts";
 import { ServerSecretStore } from "../Services/ServerSecretStore.ts";
 import {
+  SESSION_COOKIE_NAME,
   SessionCredentialError,
   SessionCredentialService,
   type IssuedSession,
@@ -21,7 +22,6 @@ import {
 } from "../tokenCodec.ts";
 
 const SIGNING_SECRET_NAME = "server-signing-key";
-const SESSION_COOKIE_NAME = "t3_session";
 const DEFAULT_SESSION_TTL = Duration.days(30);
 const DEFAULT_WEBSOCKET_TOKEN_TTL = Duration.minutes(5);
 

apps/server/src/auth/Services/SessionCredentialService.ts

@@ -81,6 +81,8 @@ export interface SessionCredentialServiceShape {
   readonly markDisconnected: (sessionId: AuthSessionId) => Effect.Effect<void, never>;
 }
 
+export const SESSION_COOKIE_NAME = "t3_session";
+
 export class SessionCredentialService extends ServiceMap.Service<
   SessionCredentialService,
   SessionCredentialServiceShape