dorfteich/apps/web/src/pages
Claude Opus 4.8 fc41c91003
All checks were successful
CD / Build and push images (push) Successful in 3m13s
CI / Lint, typecheck, test (push) Successful in 2m30s
CI / Auth e2e pack (push) Successful in 3m21s
CI / Build container images (push) Has been skipped
CD / Deploy to Test (push) Successful in 9s
CD / Smoke tests against Test (push) Successful in 1m13s
CD / Promote to Int (push) Successful in 11s
Add public read access and server-rendered page HTML (#56)
Anonymous visitors read what `public` grants allow, via the SPA and a
server-rendered HTML endpoint for crawlers / PDF export (ADR 0005/0009).

- api `public/`: `GET /public/:pondSlug/:pageSlug` returns a self-contained
  HTML document (content cache + minimal chrome + canonical link, no
  session-dependent content), and `…/content` returns JSON for the SPA. Both
  are `@Public()` and resolve the `public` subject through the shared resolver
  (PermissionService) — denied or missing → 404, so non-public pages never
  reveal their existence (security.md). Cached image nodes (`data-file-id`)
  are resolved to `/api/v1/media/:fileId` for the static render.
- media: `GET /media/:fileId` is `@Public()` too, so embedded images on a
  public page stream to anonymous visitors; the attachment guard still gates
  on the `public` grant (non-public → 404).
- web: a lightweight read-only `PublicPageView` at `/public/:pondSlug/:pageSlug`
  (outside the auth guard) renders the server HTML — deliberately without
  importing the collaborative editor, so anonymous readers load no editor
  bundle. New `public` i18n namespace (de+en).
- tests: `public.e2e.db.test.ts` (HTML + JSON served for a public page; a
  non-public page never resolves; removing the grant 404s both) and a browser
  `public` pack (anonymous reads a public page and its image via the SPA;
  a non-public page shows "not found") with its own CI step.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EwZ4jR4KFAPvpjWevfUGX1
2026-07-09 23:46:25 +02:00
..
auth Fire the e-mail verification exactly once per token 2026-07-05 05:59:25 +02:00
AdminSettingsPage.tsx Add auth, settings, and admin UI to the SPA 2026-07-05 05:35:56 +02:00
HomePage.tsx Add i18n with i18next, German and English, and a key-parity check 2026-07-04 19:23:45 +02:00
NotFoundPage.tsx Add i18n with i18next, German and English, and a key-parity check 2026-07-04 19:23:45 +02:00
PageEditorPage.tsx Add backlinks panel and phantom-pages view (#48) 2026-07-09 13:05:32 +02:00
PondHomePage.tsx Add pond sidebar with page list, sort modes, and pond switcher (#26) 2026-07-06 12:37:44 +02:00
PondSettingsPage.tsx Add label- and page-scope access rules UI including deny (#55) 2026-07-09 21:45:31 +02:00
PublicPageView.tsx Add public read access and server-rendered page HTML (#56) 2026-07-09 23:46:25 +02:00
SettingsPage.tsx Add auth, settings, and admin UI to the SPA 2026-07-05 05:35:56 +02:00
TrashPage.tsx Add page trash: soft delete, restore, and purge job (#31) 2026-07-08 12:48:17 +02:00