Formatted text
- Descriptions, comments, replies and release notes render Markdown,
sanitised with DOMPurify (tested against scripts, handlers and
javascript: links). A pasted image is uploaded and written as
; the web fetches it with the reader's session,
so it works on private projects. Every text box has a preview. The
attachment upload now answers its attachmentId.
List view
- /p/:key/list: every ticket as rows, sortable by any column, filtered by
text, open/closed, type, priority and assignee; status, priority and
assignee change in place; bulk edit (the backlog's bar, now shared).
Ticket details
- Reactions on comments (GitHub's eight), for members and viewers.
- Duplicate a ticket: what it says, not where it stands.
- blockedBy: open tickets it waits for (BLOCKS / DEPENDS_ON), worked out
when reading with one query per board or page; shown on cards, list
rows and the ticket.
Public proposals
- A public project can take bug reports and ideas from anyone
(acceptsProposals): POST /api/explore/projects/{project}/proposals and
the form at /p/:key/proponer. They become tickets labelled «propuesta»,
opened by TaskStream; a honeypot field and 5 per address every 15
minutes keep spam out. No e-mail is asked: it would be public.
Votes
- Anyone signed in votes on a public project's tickets, members on a
private one (voteIssue, PUT/DELETE /api/issues/{issue}/vote): votes and
voted on each ticket, buttons on the ticket and the roadmap, a column
in the list. The showcase carries votes and the open proposals.
MCP: vote_issue, duplicate_issue, react_to_comment; listings show
blockers and votes. Docs, Word and PDF updated; chat notifications
(Discord, Slack, Telegram) noted for later.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
48 lines
1.3 KiB
TypeScript
48 lines
1.3 KiB
TypeScript
import { authGuard } from '@task-stream/web/identity/presenters';
|
|
import { appRoutes } from './app.routes';
|
|
|
|
describe('appRoutes', () => {
|
|
it('keeps home behind the auth guard, and public projects and «Explorar» open', () => {
|
|
const paths = appRoutes.map((route) => route.path);
|
|
expect(paths).toEqual(
|
|
expect.arrayContaining(['login', 'auth/callback', '', '**']),
|
|
);
|
|
|
|
const app = appRoutes.find((route) => route.path === '' && route.children);
|
|
const children = app?.children ?? [];
|
|
expect(children.map((route) => route.path)).toEqual([
|
|
'',
|
|
'explorar',
|
|
'p/:key',
|
|
]);
|
|
expect(children[0].canActivate).toContain(authGuard);
|
|
expect(children[1].canActivate).toBeUndefined();
|
|
expect(children[2].canActivate).toBeUndefined();
|
|
});
|
|
|
|
it('exposes every project section', () => {
|
|
const project = appRoutes
|
|
.find((route) => route.path === '')
|
|
?.children?.find((route) => route.path === 'p/:key');
|
|
expect(project?.children?.map((route) => route.path)).toEqual([
|
|
'',
|
|
'board',
|
|
'proponer',
|
|
'list',
|
|
'issues/:issueKey',
|
|
'backlog',
|
|
'sprints',
|
|
'calendar',
|
|
'roadmap',
|
|
'epics',
|
|
'trash',
|
|
'releases',
|
|
'dashboard',
|
|
'analytics',
|
|
'settings',
|
|
'activity',
|
|
'members',
|
|
]);
|
|
});
|
|
});
|