diff --git a/.githooks/post-receive b/.githooks/post-receive
index f974a666..b9c363b0 100755
--- a/.githooks/post-receive
+++ b/.githooks/post-receive
@@ -53,9 +53,10 @@ echo "=== stop DONE @ $(date -u +%Y-%m-%dT%H:%M:%SZ) ===" >> "$LOG_FILE"
 echo "" >> "$LOG_FILE"
 
 # pnpm run start → **后台**跑（nohup ... &），long-running 进程
-# 输出**丢**（> /dev/null 2>&1）—— 真实 next 日志要看 next 自身 stdout/stderr，**不**在本任务范围
+# **临**时**改**：next 输**出**也**接**到 LOG_FILE（**为**排**查** Server error）
+# —— 排**查**完**后**改回 `> /dev/null 2>&1`
 echo "=== start LAUNCH @ $(date -u +%Y-%m-%dT%H:%M:%SZ) ===" >> "$LOG_FILE"
-nohup pnpm run start > /dev/null 2>&1 &
+nohup pnpm run start >> "$LOG_FILE" 2>&1 &
 START_PID=$!
 echo "=== start PID=$START_PID @ $(date -u +%Y-%m-%dT%H:%M:%SZ) ===" >> "$LOG_FILE"
 
diff --git a/env-example/.env.development.example b/env-example/.env.development.example
index 470eb50c..9dcf5f35 100644
--- a/env-example/.env.development.example
+++ b/env-example/.env.development.example
@@ -15,6 +15,10 @@ NEXT_PUBLIC_API_CONNECT_TIMEOUT=30000
 NEXT_PUBLIC_API_RECEIVE_TIMEOUT=60000
 NEXT_PUBLIC_API_SEND_TIMEOUT=30000
 
+# next-auth v4（Auth.js）—— JWT 签名密钥
+# dev 环境独立密钥（**不**与 test / prod 共用）
+AUTH_SECRET=PinzhujxR/qMPrY7bAor8qQlwmmy1tJJCex9Tomhk2c=
+
 # 第三方 OAuth
 AUTH_GOOGLE_ID=351948560061-isubggf6eahfii9n0stpf2qu3haralro.apps.googleusercontent.com
 AUTH_GOOGLE_SECRET=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
@@ -24,5 +28,3 @@ AUTH_FACEBOOK_SECRET=004b1a9384b3433e153992e5edcef4ad
 # Cloudflare CDN（test / production 部署后刷缓存用）
 CF_ZONE_ID=b1b6bfb7795667609c8e7f418af0156b
 CF_API_TOKEN=cfut_xyHb70XCw0j8f5Wz5fg5PemUQ2ZHnSpWvmrBvVeK94d3b00f
-
-
diff --git a/env-example/.env.local.example b/env-example/.env.local.example
index d927524f..5681b572 100644
--- a/env-example/.env.local.example
+++ b/env-example/.env.local.example
@@ -9,6 +9,10 @@ NEXT_PUBLIC_API_CONNECT_TIMEOUT=30000
 NEXT_PUBLIC_API_RECEIVE_TIMEOUT=60000
 NEXT_PUBLIC_API_SEND_TIMEOUT=30000
 
+# next-auth v4（Auth.js）—— JWT 签名密钥
+# test 环境独立密钥（**不**与 dev / prod 共用）
+AUTH_SECRET=rKGeHQ/8tKPoh12Kiedil5zHuj9ZfPA0NwY9bgwRqkE=
+
 # 第三方 OAuth
 AUTH_GOOGLE_ID=351948560061-isubggf6eahfii9n0stpf2qu3haralro.apps.googleusercontent.com
 AUTH_GOOGLE_SECRET=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
diff --git a/env-example/.env.production.example b/env-example/.env.production.example
index a5d5a120..1ecbfd94 100644
--- a/env-example/.env.production.example
+++ b/env-example/.env.production.example
@@ -16,6 +16,10 @@ NEXT_PUBLIC_API_CONNECT_TIMEOUT=30000
 NEXT_PUBLIC_API_RECEIVE_TIMEOUT=60000
 NEXT_PUBLIC_API_SEND_TIMEOUT=30000
 
+# next-auth v4（Auth.js）—— JWT 签名密钥
+# production 环境独立密钥（**最**重要，**签**发**用**户 session cookie）
+AUTH_SECRET=XypsCWoLCNmwOaq4taIMJHe4+cU9YZBaYN4VMTtmSik=
+
 # 第三方 OAuth
 AUTH_GOOGLE_ID=351948560061-isubggf6eahfii9n0stpf2qu3haralro.apps.googleusercontent.com
 AUTH_GOOGLE_SECRET=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