fix: WebSocket cookie auth + connect on layout mount

web/src/stores/ws.ts

@@ -19,7 +19,7 @@ export interface WsEvent {
 interface WebSocketState {
   socket: WebSocket | null;
   connected: boolean;
-  connect: (token: string) => void;
+  connect: () => void;
   disconnect: () => void;
   send: (event: WsEvent) => void;
 }
@@ -64,7 +64,7 @@ export const useWebSocketStore = create<WebSocketState>((set, get) => ({
   socket: null,
   connected: false,
 
-  connect: (token: string) => {
+  connect: () => {
     const existing = get().socket;
     if (existing && (existing.readyState === WebSocket.OPEN || existing.readyState === WebSocket.CONNECTING)) {
       return;
@@ -82,14 +82,15 @@ export const useWebSocketStore = create<WebSocketState>((set, get) => ({
       }
       reconnectTimeout = window.setTimeout(() => {
         if (!get().connected) {
-          get().connect(token);
+          get().connect();
         }
       }, reconnectDelay);
       reconnectDelay = Math.min(reconnectDelay * 2, maxReconnectDelay);
     };
 
     socket.onopen = () => {
-      socket.send(JSON.stringify({ token }));
+      // Cookie-based auth: browser sends session cookie automatically.
+      // No need to send a token frame.
     };
 
     socket.onmessage = (event) => {