- Profile page gains a Request Account Link form, plus sections for pending requests (create / deny / deny-and-block), confirmed linked accounts (toggle / remove), and blocked requesters (allow requests) - Toggle signs the browser in as the linked account using a single-use 60-second switch token minted server-side after link verification, so the target's password is never needed; a new "account-switch" Credentials provider in auth.ts consumes the token atomically to prevent replay - Theme preference now stored on the User profile row (new `theme` column) and applied from the root layout's no-FOUC script before first paint, so each account keeps its own look across toggles and devices; anonymous visitors keep the old localStorage behavior - New Prisma models: AccountLinkRequest, AccountLink, AccountLinkBlock, AccountSwitchToken with composite uniques, self-link check constraint, and cascade deletes |
||
|---|---|---|
| .. | ||
| actions | ||
| ai | ||
| validation | ||
| access.ts | ||
| ai-settings.ts | ||
| auth-errors.ts | ||
| auth-helpers.ts | ||
| board.ts | ||
| colors.ts | ||
| dates.ts | ||
| db.ts | ||
| format.ts | ||
| rrule-utils.ts | ||
| scheduled-todos.ts | ||
| settings.ts | ||
| themes.ts | ||
| time-of-day.ts | ||
| utils.ts | ||