feat(chat): share a chat by link — anonymous read-only /shared/<token> page, share/unshare

tests/integration/test_api.py

@@ -89,6 +89,7 @@ def test_suggestions_honors_bor_suggestions_env_override(monkeypatch) -> None:
         ("/tuning.html", "Global Tuning"),  # phase 27: global tuning page
         ("/git-sources.html", "Git sources"),  # phase 35: admin git sources page
         ("/history.html", "Saved chats"),  # phase 50: admin saved-chats page
+        ("/shared.html", "Shared conversation"),  # phase 51: anonymous shared page
     ],
 )
 def test_html_pages_served_locally_no_cdn(client, path: str, marker: str) -> None:
@@ -126,7 +127,8 @@ def test_index_page_no_cache_with_versioned_asset_refs(client) -> None:
 @pytest.mark.parametrize(
     "path",
     ["/sources.html", "/document.html", "/login.html", "/tuning.html",
-     "/git-sources.html", "/history.html"],  # phase 50: + the History page
+     "/git-sources.html", "/history.html",  # phase 50: + the History page
+     "/shared.html"],  # phase 51: + the anonymous shared page
 )
 def test_html_pages_no_cache_with_versioned_refs(client, path: str) -> None:
     """Each of the other four pages revalidates and carries at least one
@@ -179,6 +181,7 @@ def test_styles_and_js_served(client) -> None:
     assert client.get("/assets/document-modal.js").status_code == 200  # phase 26: modal module
     assert client.get("/assets/tuning.js").status_code == 200  # phase 27: tuning page
     assert client.get("/assets/git-sources.js").status_code == 200  # phase 35: git sources page
+    assert client.get("/assets/shared.js").status_code == 200  # phase 51: shared page module
 
 
 # Emoji code points banned from UI chrome (phase 08): the pictograph
@@ -218,6 +221,8 @@ def _find_emoji(text: str) -> list[str]:
         "/assets/login.js",  # phase 16
         "/assets/document-modal.js",  # phase 26: the document modal module
         "/assets/git-sources.js",  # phase 35: the git sources page module
+        "/shared.html",  # phase 51: the anonymous shared page
+        "/assets/shared.js",  # phase 51: the shared page module
         "/assets/styles.css",
     ],
 )
@@ -234,7 +239,7 @@ def test_ui_chrome_has_no_emoji(client, path: str) -> None:
     r = client.get(path)
     assert r.status_code == 200
     text = r.text
-    if path == "/assets/app.js":
+    if path in ("/assets/app.js", "/assets/shared.js"):
         text = text.replace('"🔎 Listing documents"', "")
         text = text.replace('"📄 Reading "', "")
     assert _find_emoji(text) == [], f"emoji found in {path}: {_find_emoji(text)!r}"