You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Thomas Joise 63e377d649 feat(hq): public GET /share/:token document view route ... Mount the one unauthenticated read route OUTSIDE the /api auth router. A live token resolves via validateShare to exactly one document, rendered inline (application/pdf) through the existing documentHtml -> renderPdf path; unknown/expired/revoked tokens return a plain 404 "link expired or invalid" HTML page carrying no document data. Adds a dependency-free per-IP fixed-window rate limiter to blunt token brute-forcing. renderPdf is injected so the route is TDD-tested without launching Chrome. Public reads write no audit; the token is never logged. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		1 week ago
..
scripts	feat(hq): mailbox bounce detection with email_bounced reminders	2 weeks ago
src	feat(hq): public GET /share/:token document view route	1 week ago
test	feat(hq): public GET /share/:token document view route	1 week ago
build-server.mjs	feat(hq): server assembly, build script and e2e smoke (HQ-1 task 14)	2 weeks ago
package.json	feat(hq): seed + apex csv importer with verification and series seeding (HQ-1 task 13)	2 weeks ago
schema.sql	docs+chore: HQ DDL snapshot, gitignored import-drop, Postgres locked pre-go-live (D15)	2 weeks ago
tsconfig.json	feat(hq): app skeleton with health endpoint (HQ-1 task 1)	2 weeks ago