feat: formatted text, a list view, ticket details, public proposals and votes

Formatted text
- Descriptions, comments, replies and release notes render Markdown,
  sanitised with DOMPurify (tested against scripts, handlers and
  javascript: links). A pasted image is uploaded and written as
  ![name](attachment:<id>); the web fetches it with the reader's session,
  so it works on private projects. Every text box has a preview. The
  attachment upload now answers its attachmentId.

List view
- /p/:key/list: every ticket as rows, sortable by any column, filtered by
  text, open/closed, type, priority and assignee; status, priority and
  assignee change in place; bulk edit (the backlog's bar, now shared).

Ticket details
- Reactions on comments (GitHub's eight), for members and viewers.
- Duplicate a ticket: what it says, not where it stands.
- blockedBy: open tickets it waits for (BLOCKS / DEPENDS_ON), worked out
  when reading with one query per board or page; shown on cards, list
  rows and the ticket.

Public proposals
- A public project can take bug reports and ideas from anyone
  (acceptsProposals): POST /api/explore/projects/{project}/proposals and
  the form at /p/:key/proponer. They become tickets labelled «propuesta»,
  opened by TaskStream; a honeypot field and 5 per address every 15
  minutes keep spam out. No e-mail is asked: it would be public.

Votes
- Anyone signed in votes on a public project's tickets, members on a
  private one (voteIssue, PUT/DELETE /api/issues/{issue}/vote): votes and
  voted on each ticket, buttons on the ticket and the roadmap, a column
  in the list. The showcase carries votes and the open proposals.

MCP: vote_issue, duplicate_issue, react_to_comment; listings show
blockers and votes. Docs, Word and PDF updated; chat notifications
(Discord, Slack, Telegram) noted for later.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

libs/api/tracker/presenters/src/lib/http/dto/requests.dto.ts

@@ -8,6 +8,7 @@ import {
   IssueLinkType,
   IssuePriority,
   ProjectRole,
+  REACTIONS,
   SETTING_COLORS,
   StatusCategory,
   TYPE_ICONS,
@@ -88,7 +89,15 @@ export class CreateProjectDto {
 
 export class UpdateProjectDto extends PartialType(
   OmitType(CreateProjectDto, ['key'] as const),
-) {}
+) {
+  @ApiPropertyOptional({
+    description:
+      'Take bug reports and ideas from anyone through the public form (while public)',
+  })
+  @IsOptional()
+  @IsBoolean()
+  acceptsProposals?: boolean;
+}
 
 export class DeleteProjectQueryDto {
   @ApiProperty({
@@ -985,6 +994,59 @@ export class AddCommentDto extends CommentBodyDto {
   replyTo?: string;
 }
 
+export class ReactToCommentDto {
+  @ApiProperty({ enum: REACTIONS, example: '👍' })
+  @IsIn(REACTIONS)
+  emoji!: string;
+
+  @ApiProperty({ description: 'true adds the reaction, false takes it back' })
+  @IsBoolean()
+  on!: boolean;
+}
+
+// ---- Public proposals -------------------------------------------------------
+
+export class ProposalDto {
+  @ApiProperty({
+    enum: ['BUG', 'IDEA'],
+    description: 'A bug report or an idea',
+  })
+  @IsIn(['BUG', 'IDEA'])
+  kind!: 'BUG' | 'IDEA';
+
+  @ApiProperty({ minLength: 3, maxLength: 150 })
+  @IsString()
+  @MinLength(3)
+  @MaxLength(150)
+  title!: string;
+
+  @ApiPropertyOptional({
+    maxLength: 5000,
+    description: 'What happens, or what they would like (Markdown)',
+  })
+  @IsOptional()
+  @IsString()
+  @MaxLength(5000)
+  description?: string;
+
+  @ApiPropertyOptional({
+    maxLength: 80,
+    description:
+      'How they sign it; shown in the ticket (no e-mail: it would be public)',
+  })
+  @IsOptional()
+  @IsString()
+  @MaxLength(80)
+  author?: string;
+
+  @ApiPropertyOptional({
+    description: 'Leave empty: a field only bots fill in',
+  })
+  @IsOptional()
+  @IsString()
+  website?: string;
+}
+
 // ---- Releases ---------------------------------------------------------------
 
 export class CreateReleaseDto {

libs/api/tracker/presenters/src/lib/http/dto/responses.dto.ts

@@ -96,6 +96,11 @@ export class ProjectDto {
   @ApiProperty({ type: String, nullable: true }) description!: string | null;
   @ApiProperty({ description: 'Readable by anyone, also without a token' })
   isPublic!: boolean;
+  @ApiProperty({
+    description:
+      'Takes bug reports and ideas from anyone (POST /api/explore/projects/{project}/proposals) while public',
+  })
+  acceptsProposals!: boolean;
   @ApiProperty({ type: UserRefDto }) owner!: UserRefDto;
   @ApiProperty({ type: [ProjectMemberDto] }) members!: ProjectMemberDto[];
   @ApiProperty({ type: ProjectSettingsDto })
@@ -279,6 +284,7 @@ class ShowcaseEpicDto {
   dueDate!: string | null;
   @ApiProperty() percent!: number;
   @ApiProperty() done!: boolean;
+  @ApiProperty({ description: 'How many want it' }) votes!: number;
   @ApiProperty({
     example: '/p/WEB/issues/WEB-3',
     description: 'In the web app',
@@ -308,6 +314,27 @@ class ShowcaseIssueDto {
   @ApiProperty({ example: '/p/WEB/issues/WEB-9' }) path!: string;
 }
 
+class ShowcaseProposalDto extends ShowcaseIssueDto {
+  @ApiProperty({ description: 'How many want it' }) votes!: number;
+}
+
+class ShowcaseProposalsDto {
+  @ApiProperty({ description: 'Whether it takes bug reports and ideas now' })
+  open!: boolean;
+  @ApiProperty({
+    type: String,
+    nullable: true,
+    example: '/p/WEB/proponer',
+    description: 'The form in the web app, while it takes them',
+  })
+  path!: string | null;
+  @ApiProperty({
+    type: [ShowcaseProposalDto],
+    description: 'Open proposals, most voted first',
+  })
+  top!: ShowcaseProposalDto[];
+}
+
 export class ShowcaseDto {
   @ApiProperty({ type: ShowcaseProjectDto }) project!: ShowcaseProjectDto;
   @ApiProperty({ type: ShowcaseSprintDto, nullable: true })
@@ -319,6 +346,25 @@ export class ShowcaseDto {
     description: 'Open tickets labelled good-first-issue',
   })
   goodFirst!: ShowcaseIssueDto[];
+  @ApiProperty({ type: ShowcaseProposalsDto })
+  proposals!: ShowcaseProposalsDto;
+}
+
+export class ProposalResultDto {
+  @ApiProperty({
+    type: String,
+    nullable: true,
+    example: 'WEB-42',
+    description: 'The ticket it became',
+  })
+  key!: string | null;
+  @ApiProperty({
+    type: String,
+    nullable: true,
+    example: '/p/WEB/issues/WEB-42',
+    description: 'Where to see it in the web app',
+  })
+  path!: string | null;
 }
 
 export class GitDeliveryResultDto {
@@ -390,6 +436,13 @@ export class IssueDto {
     description: 'The epic or ticket this one breaks down',
   })
   parent!: IssueParentDto | null;
+  @ApiProperty({
+    type: [IssueParentDto],
+    description:
+      'Open tickets it waits for: the ones that block it and the ones it depends on',
+  })
+  blockedBy!: IssueParentDto[];
+  @ApiProperty({ description: 'How many want it done' }) votes!: number;
   @ApiProperty({
     description:
       'Place in the backlog and its board column (ascending, as text)',
@@ -462,6 +515,11 @@ export class BoardColumnDto {
   total!: number;
 }
 
+export class CommentReactionDto {
+  @ApiProperty({ example: '👍' }) emoji!: string;
+  @ApiProperty({ type: [UserRefDto] }) users!: UserRefDto[];
+}
+
 export class CommentDto {
   @ApiProperty({ format: 'uuid' }) id!: string;
   @ApiProperty({ format: 'uuid' }) issueId!: string;
@@ -481,6 +539,11 @@ export class CommentDto {
     description: 'Deleted, but kept (without its text) while it has replies',
   })
   deleted!: boolean;
+  @ApiProperty({
+    type: [CommentReactionDto],
+    description: 'In the order they are offered; only the ones somebody chose',
+  })
+  reactions!: CommentReactionDto[];
   @ApiProperty({ format: 'date-time' }) createdAt!: string;
   @ApiProperty({ type: String, nullable: true, format: 'date-time' })
   editedAt!: string | null;
@@ -649,6 +712,15 @@ export class CommandResultDto {
   version!: number;
 }
 
+export class AttachmentResultDto extends CommandResultDto {
+  @ApiProperty({
+    format: 'uuid',
+    description:
+      'The new file; `![name](attachment:<id>)` shows an image inside a description or comment',
+  })
+  attachmentId!: string;
+}
+
 // ---- Statistics ---------------------------------------------------------------
 
 export class CreatedResolvedDto {