Await dynamic APIs in auth server helpers

agents.md

@@ -57,9 +57,9 @@
 
 ## Rotina antes de abrir PR
 - `pnpm lint`
+- `pnpm build --turbopack`
 - `pnpm exec vitest run`
-- Revisar toasts/labels em PT-BR e ausência de segredos no diff.
-- Adicionar coautor `factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>` quando aplicável.
+- Revisar toasts/labels em PT-BR e ausência de segredos no diff.
 
 ## Convenções
 - Convex deve retornar apenas tipos primitivos; converta datas via mappers em `src/lib/mappers`.

src/lib/auth-server.ts

@@ -8,14 +8,14 @@ import { isAdmin, isStaff } from "@/lib/authz"
 
 type ServerSession = Awaited<ReturnType<typeof getCookieCache>>
 
-function serializeCookies() {
-  const store = cookies()
+async function serializeCookies() {
+  const store = await cookies()
   return store.getAll().map((cookie) => `${cookie.name}=${cookie.value}`).join("; ")
 }
 
-function buildRequest() {
-  const cookieHeader = serializeCookies()
-  const headerList = headers()
+async function buildRequest() {
+  const cookieHeader = await serializeCookies()
+  const headerList = await headers()
   const userAgent = headerList.get("user-agent") ?? ""
   const ip =
     headerList.get("x-forwarded-for") ||
@@ -35,7 +35,7 @@ function buildRequest() {
 
 export async function getServerSession(): Promise<ServerSession | null> {
   try {
-    const request = buildRequest()
+    const request = await buildRequest()
     const session = await getCookieCache(request)
     return session ?? null
   } catch (error) {