wtclaude c87563bc32 fix(demo): refuse publishing the homepage hero (DM21) ...

Settings stay open on the demo (DM2), so the hero editor's Publish wrote
hero_layout, the hero every visitor sees. hero_layout joins the protected
settings keys: PUT /admin/settings naming it answers 403 DEMO_LOCKED with
keys: ['hero_layout']. The editor's draft autosave and Preview write only
hero_layout_draft and stay open; its uploads were already refused by the
multipart lock. Server lock only, as decided: the editor needs no change,
since its status line and the toast already show the demo sentence.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY

2026-10-26 09:35:03 -05:00

..

db

feat(demo): DEMO_MODE lock, seed:demo and the demo banner (MODULE_API 1.18.0)

2026-10-23 18:52:09 -05:00

scripts

fix(engagement): the trigger manifest was stale, and its check was crying wolf

2026-09-04 02:43:53 -05:00

src

fix(demo): refuse publishing the homepage hero (DM21)

2026-10-26 09:35:03 -05:00

swagger

feat(demo): refuse an event step at save with demoRefuses (MODULE_API 1.19.0)

2026-10-26 03:39:42 -05:00

test

fix(demo): refuse publishing the homepage hero (DM21)

2026-10-26 09:35:03 -05:00

.env.example

docs(email): SMTP setup, the three postures, and the upgrade note

2026-08-28 20:54:04 -05:00

engagement-triggers.json

feat(demo): refuse an event step at save with demoRefuses (MODULE_API 1.19.0)

2026-10-26 03:39:42 -05:00

package-lock.json

…

package.json

feat(demo): DEMO_MODE lock, seed:demo and the demo banner (MODULE_API 1.18.0)

2026-10-23 18:52:09 -05:00

routes.guards.json

feat(auth): sign in with Steam (MODULE_API 1.17.0)

2026-10-19 14:02:49 -05:00

routes.manifest.json

feat(events): the step editor reworked, and event templates (MODULE_API 1.13.0)

2026-10-12 02:08:04 -05:00