You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Thomas Joise 63e377d649 feat(hq): public GET /share/:token document view route ... Mount the one unauthenticated read route OUTSIDE the /api auth router. A live token resolves via validateShare to exactly one document, rendered inline (application/pdf) through the existing documentHtml -> renderPdf path; unknown/expired/revoked tokens return a plain 404 "link expired or invalid" HTML page carrying no document data. Adds a dependency-free per-IP fixed-window rate limiter to blunt token brute-forcing. renderPdf is injected so the route is TDD-tested without launching Chrome. Public reads write no audit; the token is never logged. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		1 week ago
..
backoffice	chore: bring the full store-product codebase under version control	2 weeks ago
hq	feat(hq): public GET /share/:token document view route	1 week ago
hq-web	feat(hq-web): reminder email preview in the manual queue	1 week ago
pos	chore: bring the full store-product codebase under version control	2 weeks ago
store-server	chore: bring the full store-product codebase under version control	2 weeks ago