another step just a little remaining

client/src/hooks/auth.ts

@@ -15,6 +15,9 @@ export function useIsAuthenticated() {
   const [isAuthenticated, setIsAuthenticated] = useState(false);
 
   useEffect(() => {
+    // SSR-safe: read the browser-only cookie once after mount so the server-rendered
+    // `false` reconciles on the client without a hydration mismatch. Deliberate setState.
+    // eslint-disable-next-line react-hooks/set-state-in-effect
     setIsAuthenticated(Boolean(getClientCookie(COOKIE_NAMES.ACCESS_TOKEN)));
   }, []);