dorfteich/apps/api/src/pages
Claude Fable 5 05a979bac3
Some checks failed
CI / Lint, typecheck, test (pull_request) Successful in 6m25s
CI / Build container images (pull_request) Successful in 2m58s
CI / Auth e2e pack (pull_request) Successful in 8m35s
CI / Import/export fidelity gate (pull_request) Successful in 1m7s
CD / Deploy to Test (push) Blocked by required conditions
CD / Smoke tests against Test (push) Blocked by required conditions
CD / Promote to Int (push) Blocked by required conditions
CI / Auth e2e pack (push) Blocked by required conditions
CI / Import/export fidelity gate (push) Blocked by required conditions
CI / Build container images (push) Blocked by required conditions
CI / Lint, typecheck, test (push) Has been cancelled
CD / Build and push images (push) Has been cancelled
#222: read-access trail for classified pages
Instrument every full-content read channel for pages with
classification = vs_nfd (ADR 0023, variant A): SPA state fetch and read
rendering, public JSON content, no-JS shell, expanded embeds, public API
GET (incl. the MCP read_page path and write echoes), attachment download
under the #212 effective classification, all export shapes (markdown,
pond ZIP, account data export, queued docx/odt/pdf at enqueue), and
collab-token issuance as the api-side proxy for the WS join.

Events land in the new read_events table (no FKs — evidence survives
page purges and hard user deletions) with actor, session key
(session:/token:/job:/anon), page, pond, channel and the classification
at read time. Recording failures are NOT swallowed: a failed write
aborts the read (hard failure, the deliberate contrast to AuditService —
decision recorded in ADR 0023 and security.md §Logging, together with
the recorded residuals: content fragments and feeds).

One e2e test per channel proves both the event and its absence for
unclassified pages, plus the hard-failure semantics.

Refs #222.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8
2026-07-31 12:12:55 +02:00
..
classification-inheritance.e2e.db.test.ts #205: classification inherits down the tree; lowering is a guarded, audited act 2026-07-31 06:12:26 +02:00
classification.e2e.db.test.ts #204: classification as first-class page metadata (ADR 0022) 2026-07-31 06:01:50 +02:00
collab-token.e2e.db.test.ts #188: purpose-bound token keys via HKDF, jose replaces the homegrown JWT 2026-07-30 06:41:11 +02:00
hierarchy.db.test.ts Page hierarchy: parentId, create-under-parent, reparent (#106) 2026-07-14 09:57:47 +02:00
pages.controller.ts #222: read-access trail for classified pages 2026-07-31 12:12:55 +02:00
pages.e2e.db.test.ts Switch the editor to live collaboration (#36) 2026-07-08 18:00:19 +02:00
pages.module.ts #154: Aufgabenübersicht als Kern-Block (Seite + Unterseiten) 2026-07-20 01:20:30 +02:00
pages.service.ts #222: read-access trail for classified pages 2026-07-31 12:12:55 +02:00
plugin-api.controller.ts #222: read-access trail for classified pages 2026-07-31 12:12:55 +02:00
plugin-api.e2e.db.test.ts Add pageTool plugins with toc and page-index references (#77) 2026-07-11 13:27:30 +02:00
reposition.db.test.ts Enforce permissions in API guards and retire interim access (#52) 2026-07-09 16:31:41 +02:00
sort-key.test.ts Add manual page ordering with drag-and-drop (#45) 2026-07-09 12:18:44 +02:00
sort-key.ts Add manual page ordering with drag-and-drop (#45) 2026-07-09 12:18:44 +02:00
task-overview.e2e.db.test.ts #154: Aufgabenübersicht als Kern-Block (Seite + Unterseiten) 2026-07-20 01:20:30 +02:00
task-toggle.e2e.db.test.ts #153: Stabile Task-IDs + Toggle-Rückschreibpfad über den Collab-Server 2026-07-20 01:03:16 +02:00
tasks.service.ts #168: Formulare — Fehler-Verdrahtung und Namenslücken 2026-07-21 14:26:54 +02:00
yjs-content.ts #151: Mention-Benachrichtigungen über die Glocke 2026-07-20 01:25:16 +02:00