steve 9968c06243 Public read-only share link (no login / no OIDC) (#41) (#43) ...

Per-garden public read-only link: unauthenticated GET /api/v1/public/gardens/:token (no requireAuth, no OIDC), owner-only enable/rotate/disable, and a /g/$token page rendering GardenCanvas read-only. Review fixes: redact plant owner ids, Cache-Control: no-store, 400 on malformed body, shared resetTransient store action.

Closes #41.

Co-authored-by: Steve Dudenhoeffer <[email protected]>

2026-07-19 06:18:31 +00:00

..

migrations

Public read-only share link (no login / no OIDC) (#41) (#43)

2026-07-19 06:18:31 +00:00

gardens.go

Public read-only share link (no login / no OIDC) (#41) (#43)

2026-07-19 06:18:31 +00:00

migrate.go

Address Gadfly review findings on Phase 0

2026-07-18 15:19:30 -04:00

objects.go

Add garden objects backend: polymorphic CRUD + /full (#10)

2026-07-18 19:30:30 -04:00

plantings.go

Agent seam: bulk ops (FillRegion/ClearObject/DescribeGarden) + DefineTool wrappers (#19)

2026-07-19 05:16:40 +00:00

plants.go

Plantings backend: plop CRUD, derived counts, removed_at (#14)

2026-07-19 02:41:22 +00:00

sessions.go

Add local auth: users, sessions, register/login/logout/me (#4)

2026-07-18 16:38:03 -04:00

shares.go

Sharing backend: shares CRUD + ACL enforcement everywhere (#16)

2026-07-19 03:49:54 +00:00

sqlite.go

Address Gadfly review on #10: clearable color/props, column lists, dedup

2026-07-18 19:47:10 -04:00

store_test.go

Plant catalog backend: CRUD + seeded built-ins (#12)

2026-07-19 01:48:22 +00:00

users.go

Plant catalog backend: CRUD + seeded built-ins (#12)

2026-07-19 01:48:22 +00:00