giles eb54d17df9 H2: auth-gate cinema/poll admin ops (TDD) ...

Failing tests first (6 red: unauth /new-film created a film, etc). new-film / new-showing /
offering-add|update|remove / add-poll / new-event moved from the public route list into
host/blog-write-routes behind protect-html — same gate as every blog write. /vote, /buy-ticket,
/buy stay public (voters + customers) with explicit tests pinning that.

blog suite 234/234 (+9).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-03 10:09:58 +00:00

215 KiB

Raw Blame History

View Raw