portal

T

Deploy / deploy (push) Successful in 33s

Details

Add self-service transitions, authorized by item possession not group membership

New Alternative.self_transition: like ResourceSpec.transitions, but for
an anonymous visitor holding one specific item's own chain hash (from
a ?chain= link, the same reference /subscribed?chain=... already
carries) rather than a signed-in owner browsing a whole bucket. email
is a second factor checked against the stored item, not the lookup
key - defense in depth against a leaked/guessed chain hash alone.

AlternativeCard renders it as a single confirm button when both
?chain= and ?email= are present; QuestionView hides the alternative
entirely otherwise, rather than showing a dead card with nothing to
click.

Powers /subscribed's new "Unsubscribe" alternative, which the
newsletter's own recipient links now carry - no email lookup needed,
just the same chain_hash the subscription itself already produced.

2026-08-05 18:44:28 +02:00

.gitea/workflows

Add prosekit rich-text field, Gitea repo embeds, automation KV read endpoint; fix apex/www session-cookie mismatch on /auth/callback

2026-08-05 13:45:56 +02:00

public

Initial commit: content-driven onboarding portal

2026-07-29 19:38:40 +02:00

src

Add self-service transitions, authorized by item possession not group membership

2026-08-05 18:44:28 +02:00

style

Fix hero-canvas navigation race; style the prosekit editor and add a toolbar