Preparing your experience

Please wait while we fetch the latest data and prepare the page for you.

Security(3)

SSRF parsing fixes: Fixed IPv6 address validation in ATS file inspection routes to block local network probe attempts.

Type check and test coverage: Resolved portfolio builder type definitions and added mock coverage for template rendering tests in CI.

API documentation sync: Updated OpenAPI paths, changelog definitions, and test configurations across the server and docs platform. ---

Added(17)

Shared-domain guest access cookie across root domain and subdomains

Modular resume and cover letter editor form primitives and specialized toolbars

PDF export contract tests verifying template rendering and appearance compliance

SSR-seeded workspace state store initialization preventing hydration layout shifts

Local-first draft recovery during 401/404 server responses without database sync

Login redirect with callback URL (PR #194): Unauthenticated visitors navigating to private dashboard or editor routes in Studio and Portfolio are now sent to /login first. The original destination is preserved in a callbackURL parameter so users land right where they intended after signing in.

Shared domain guest cookie: Clicking "Continue as Guest" on the login page now writes a veriworkly-guest-mode=true cookie across .veriworkly.com (in production) or .localhost (in local development). This grants guest access across subdomains without bypassing the initial login screen.

Middleware proxy cleanup: Removed automatic guest cookie creation from proxy middleware. Public routes (such as /login, /share/*, /api/*, static assets, and _next) remain accessible without redirection.

Local-first draft safety during 401 errors: Updated loadWorkspace in the portfolio store to catch 401 and 404 responses gracefully. If an unauthenticated guest visits the editor, the app initializes the workspace using local cache data without attempting to sync drafts to the cloud database. Publishing remains locked for guests until they log in.

Modular form primitives and toolbars: Split resume and cover letter editor controls into reusable shared form components and specialized section toolbars.

Section editor enhancements: Added stricter validation and layout wrappers across custom section editors.

PDF export contract tests: Added automated contract tests to verify that every resume template renders all user fields, applies custom theme colors, and wraps long text blocks without clipping.

Layout routing and SSR store bootstrap: Streamlined portfolio layout routes and fixed hydration order so server-rendered workspace data passes directly into the store instance.

Template library submodule updates: Updated template font modules, shared CSS variables, and layout styles across Signal, Nimbus, and Cipher templates.

Codebase formatting: Formatted all template submodules and workspace packages with Prettier.

#194 — [Feature] [Auth]: Require login redirect with callback for guest access ---