fix(web): use current origin for dev websocket auth

Author: pallyoung

packages/web/src/ws/__tests__/client.test.ts

@@ -1313,6 +1313,17 @@ describe("web WsClient", () => {
     expect(resolveWsUrl()).toBe("ws://127.0.0.1:43173/ws");
   });
 
+  it("uses the current browser origin in development when no backend URL is configured", () => {
+    vi.stubGlobal("window", {
+      location: {
+        protocol: "http:",
+        host: "localhost:5173",
+      },
+    });
+
+    expect(resolveWsUrl()).toBe("ws://localhost:5173/ws");
+  });
+
   it("falls back to the local backend URL when window is unavailable", () => {
     vi.stubGlobal("window", undefined);
 

packages/web/src/ws/client.ts

@@ -688,17 +688,14 @@ export class WsClient {
 
 /**
  * Resolve WebSocket URL based on current location
- * In development, connect directly to backend server
  */
 export function resolveWsUrl(): string {
   const configuredUrl = import.meta.env.VITE_BACKEND_WS_URL;
   if (configuredUrl) {
     return normalizeWsUrl(configuredUrl);
   }
 
-  // Development and test environments connect directly to the backend, and
-  // node-based tests may not provide a browser location object at all.
-  if (import.meta.env.DEV || import.meta.env.MODE === "test" || typeof window === "undefined") {
+  if (typeof window === "undefined") {
     return "ws://127.0.0.1:4173/ws";
   }
   const protocol = window.location.protocol === "https:" ? "wss:" : "ws:";