ginnoir
b89690a9f2
- pnpm 10 workspace + TypeScript strict + ESLint flat + Prettier - CLAUDE.md as canonical brief - docs/tasks/ — 22 task briefs broken out by phase for sub-sessions - docs/decisions/ — ADR scaffold Implements task 01 (repo-init).
1.2 KiB
1.2 KiB
30 — Share-link service
Goal
A generic service that issues temporary, scoped, revocable share tokens for any registered entity.
Depends on
- 04 (registry), 07 (household)
Scope
- Schema:
share_links(id,household_id,entity_type,entity_id,tokenunique,capabilitiesjsonb (e.g.{ read: true, write: false }),created_by,expires_atnullable,revoked_atnullable,created_at). _core/share.ts:createShareLink(entityType, entityId, opts)→{ url, token, expiresAt }.resolveShareToken(token)→{ entityType, entityId, capabilities } | null(rejects expired/revoked).revokeShareLink(id).
- Verifies the entity type is registered and shareable per its manifest's
sharecapability declaration. - Token format: 32-byte URL-safe base64. Stored hashed (sha-256) — only the URL contains the raw token.
Out of scope
- The viewer page (task 31).
- Rate limiting (task 61).
- Per-recipient access logs.
Acceptance criteria
- Creating a link for an entity type with
share: undefinedthrows. - Tokens are stored hashed; raw token only returned at creation.
- Expired/revoked tokens return null.
/settingsshows active share links per entity with revoke buttons.