修复本地详情验证刷新会话（05-31-unify-business-detail-ant-design）

.trellis/spec/hyb-oa/frontend-react-vite-design.md

@@ -29,6 +29,11 @@ and verification contracts. Do not copy broad aesthetic guidance from
   safe-area and sticky action patterns unless the current task intentionally
   redesigns them with `frontend-design`.
 - Do not add decorative landing-page styling to operational OA pages.
+- The local Vite `/api` proxy must preserve the browser-facing Host when
+  running Playwright against `127.0.0.1:5173`; backend auth refresh validates
+  `Origin`/`Referer` against the request host when `APP_ORIGIN` is not set.
+  Rewriting Host to `127.0.0.1:3000` makes full-page reloads lose the session
+  with `AUTH_005`.
 - Run `cd client && npm run typecheck && npm run build` for frontend changes.
 
 ## Convention: Mature Enterprise Page Baseline