- Invite flow: admin issue/revoke on join requests, public single-use
claim links (hash-only tokens, 7-day expiry, no state reveal), claim
creates the Member account and marks the request accepted
- Gallery: admin status page plus resync endpoint; sync refreshes
thumbnails whose content changed; tools/gallery contract and checker
- Docs: public content page, admin-only operator runbook, api.md
invite/gallery sections, all routes in the live API docs, docs
reachability gate test
- Screenshots cover the new pages; version 1.0.18
Preserve every storage, env, docker, env-file, serving, gallery, test,
git, code, docs, and handover rule as dated muse-spark entries. Add the
shared lesson format and a grok-bot entry for this rewrite.
retoor