0e7e13f0 - Mark replies from visitors without an account and render them as plain text

[TaprootFreakAI]

EN:
Replies written by someone without a 21.gifts account now carry a "Visitor" badge, so nobody can pose as a member or as the team. Their text renders as plain text: no auto-links, no quoted-note embeds, also after translation. Link previews of such a reply contain no visitor-chosen text at all. The api sends such rows only for people who sent bitcoin to a post; the new via field is optional, so this change is safe to merge before or after the api side (21gifts/api#198).

DE:
Antworten von Personen ohne 21.gifts-Konto tragen jetzt das Abzeichen „Besucher“, damit sich niemand als Mitglied oder als Team ausgeben kann. Ihr Text erscheint als reiner Text: keine automatischen Links, keine eingebetteten Beitragszitate, auch nach der Übersetzung. Link-Vorschauen einer solchen Antwort enthalten keinerlei vom Besucher gewählten Text. Die api liefert solche Zeilen nur für Personen, die Bitcoin an einen Beitrag gesendet haben; das neue Feld via ist optional, der Merge ist also vor oder nach der api-Seite (21gifts/api#198) sicher.

Details

Schema

• forumMessageSchema accepts the optional literal via: 'nostr'. It is strict on purpose: the public feed fails closed, and the reply fetchers skip an invalid row.
• hiddenMessageSchema accepts any non-empty via, so an unexpected value can neither blank the moderators' list nor drop the marker.

Badge

• Same anatomy as the role badge in docs/ui.md, never colour-coded.
• The visible copy is technology-neutral (Visitor / Besucher / Visitante / Bisita), following principle 4 in docs/ui.md.
• ForumBoard (note and reply author line): a button that toggles the existing per-row hint state.
• The unsigned permalink card, the nested quoted card and the moderators' hidden list: a non-interactive span.
• The quoted-card link announces the visitor to assistive tech (forum.quotedNoteVisitor).

Plain text

• LinkedText, ForumNoteText and NoteTranslate gain an optional plain prop (default off).
• Every render site uses it for rows with via instead of ForumQuotedBody; a /messages/<uuid> URL in such a row stays visible text.
• Rows without via render the same DOM and classes as before.

Link previews

• publicMessageOgMetadata returns fully generic metadata for a note with via: fixed title, fixed description and the default image. Nothing from the note's name, text or photo reaches a preview.

Screen variants

• /welcome expanded-visitor and /messages/[id] visitor-reply, with handbook entries, needles, shotScreen calls, eight Linux baselines, the regenerated variant catalog and behavioural e2e tests (badge, hint, URL is not a link).

Unchanged on purpose

• The pay control stays driven by payable (the api sends false for such rows).
• The staff delete control stays driven by the viewer's role.
• No link to any external profile.
• Notifications carry no marker, because the api sends a generic sender name for these replies.

CI

• The only red visual test, welcome overlay-external-link, is red on develop itself and is fixed by af507305 - Unblocks develop: refresh the external-link overlay baselines #273. This branch needs a rebase once that is merged.

[TaprootFreakAI]

EN:
Six review passes were needed until all four review lanes reported zero findings (reviewed at eeedf2e, since rebased without conflicts onto develop as 38a9ff8). Replies from Nostr users without a 21.gifts account get a via Nostr badge and render as plain text without auto-links.

DE:
Sechs Review-Durchläufe waren nötig, bis alle vier Review-Lanes null Mängel meldeten (geprüft an eeedf2e, danach konfliktfrei auf develop rebased als 38a9ff8). Antworten von Nostr-Nutzern ohne 21.gifts-Konto bekommen das Abzeichen via Nostr und erscheinen als reiner Text ohne automatische Links.

Details

The summary sentence names the api field. The rendered badge copy is "Visitor" and never names the protocol.

What the passes changed

• The badge copy became technology-neutral (docs/ui.md principle 4).
• Link previews of such a reply are fully generic, so no visitor-chosen string reaches them.
• The moderators' hidden list shows the badge, tolerates an unknown via value, and its badge state is a gated screen variant with handbook entry, e2e test and four baselines.
• The quoted-card link announces the visitor to assistive tech.
• The two new variants are named expanded-visitor and visitor-reply, and the generated variant catalog is committed.
• In the e2e specs, positive lookups of the new copy are exact and negative lookups are broad.

Decided, not changed

• Notifications carry no marker, because the api sends a generic sender name for these replies (0e7e13f0 - Show external Nostr zappers under forum notes api#198).
• The quoted-card accessible name contains the visible name together with the word "visitor".
• The public feed schema keeps the strict literal and fails closed.

Checks at head 38a9ff8

• All six CI jobs are green: the check job (typecheck, lint, handbook, e2e-check, screenshots, 100 % coverage, build), the behavioural e2e job and the four visual combos.
• The rebase onto develop (after af507305 - Unblocks develop: refresh the external-link overlay baselines #273, 01a0abd6 - Put the closed Moderators group on /moderate #243 and 01a0b0c5 - Hide signed-in fiat switchers except the profile settings row #268) had no conflicts, so the reviews at eeedf2e stay valid.