Files
giles 64aa417d63 Replace JSON sx-headers with SX dict expressions, fix blog like component
sx-headers attributes now use native SX dict format {:key val} instead of
JSON strings. Eliminates manual JSON string construction in both .sx files
and Python callers.

- sx.js: parse sx-headers/sx-vals as SX dict ({: prefix) with JSON fallback,
  add _serializeDict for dict→attribute serialization, fix verbInfo scope in
  _doFetch error handler
- html.py: serialize dict attribute values via SX serialize() not str()
- All .sx files: {:X-CSRFToken csrf} replaces (str "{\"X-CSRFToken\": ...}")
- All Python callers: {"X-CSRFToken": csrf} dict replaces f-string JSON
- Blog like: extract ~blog-like-toggle, fix POST returning wrong component,
  fix emoji escapes in .sx (parser has no \U support), fix card :hx-headers
  keyword mismatch, wrap sx_content in SxExpr for evaluation

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-05 09:25:28 +00:00
..
2026-02-24 20:13:00 +00:00

Account App

User dashboard for the Rose Ash cooperative. Provides account management, newsletter preferences, and widget pages for tickets and bookings.

Structure

app.py                  # Application factory (create_base_app + blueprints)
path_setup.py           # Adds project root + app dir to sys.path
entrypoint.sh           # Container entrypoint (Redis flush, start)
bp/
  account/              #   Dashboard, newsletters, widget pages (tickets, bookings)
  auth/                 #   OAuth client routes + HTTP token exchange for non-coop clients
  fragments/            #   auth-menu fragment (sign-in button / user menu)
models/                 # Re-export stubs pointing to shared/models/
services/               # register_domain_services() — wires all domains
templates/              # Account-specific templates (override shared/)

Auth menu

Account serves the auth-menu fragment consumed by all other apps' headers. It renders either a sign-in button (anonymous) or the user's email with a dropdown (authenticated), for both desktop and mobile layouts.

OAuth token exchange

POST /auth/oauth/token provides HTTP-based token exchange for non-coop OAuth clients (e.g., Artdag).

Cross-domain communication

  • services.blog.* — post queries for page context
  • services.calendar.* — calendar/entry queries for bookings panel
  • services.cart.* — cart summary + orders for tickets panel

Fragments served

  • auth-menu — sign-in button or user email menu (desktop + mobile)