mirror of
https://github.com/max-sixty/worktrunk.git
synced 2026-09-14 20:00:38 +08:00
60661a0d7e
SignPath Foundation's OSS program requires the attribution notice, and a route to the code signing policy, on a project's home page and download/release pages. Worktrunk had both only on the policy page itself — nothing on the README or the docs landing page. This puts the notice in the install section's Windows block, beside the artifacts it actually describes: > Free code signing provided by [SignPath.io](https://signpath.io/), certificate by [SignPath Foundation](https://signpath.org/) — [policy](https://worktrunk.dev/code-signing/). The edit is one line in `docs/content/worktrunk.md`; the README's Install→Further reading block is generated from it, so it propagates there and to both skill mirrors. The policy page leaves the docs navigation in the same change, so this is the single place it's linked from. `hide_from_nav = true` in a page's `[extra]` skips it in all three loops over `docs_section.pages`: the desktop TOC (`macros.html`), the mobile menu (`base.html`), and the prev/next flow nav (`page.html`). The page stays published and reachable at `/code-signing/` — unlisted, not removed. In the nav loops the skip wraps the whole per-page body, so a hidden page can't emit a stray group heading. In the prev/next loop it guards only the *candidate* assignments — the current-page test stays unguarded, because viewing a hidden page directly must still flip `found_current` or its own neighbours compute against the wrong page. Verified both directions: FAQ ends at `← Tips & Patterns` with no forward link, and the policy page keeps `← FAQ` back out into the docs. <details><summary>Why this came up, and the placement tradeoff</summary> Found while debugging why the `release-signing` signing policy shows INVALID in the SignPath console. That turned out to be unrelated and not fixable here — its certificate ("Release certificate 2026", subject `CN=SignPath Foundation`, on SignPath's HSM) is in `CSR PENDING` with no validity dates, awaiting CA issuance. The policy's own configuration is complete and correct. Worktrunk currently signs with the test certificate, which is VALID. The attribution gap was the one thing found on our side. Whether it bears on the pending review is unknown — the console exposes no application status. On placement: the notice sits inside the collapsed `<details>`, so it isn't visible until a reader expands "Windows & other". That's deliberate — the signing is Windows-specific and the notice reads better next to it than in the page chrome — but it is the least prominent placement that still counts as a link, and the terms ask for the notice *on* the home and download pages. Worth knowing if placement is ever queried during review. </details> > _This was written by Claude Code on behalf of max-sixty_ --------- Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
49 lines
1.7 KiB
HTML
49 lines
1.7 KiB
HTML
{% extends "base.html" %}
|
|
|
|
{% block title %}{{ page.title }} | {{ config.title }}{% endblock title %}
|
|
|
|
{% block toc %}
|
|
{% set docs_section = get_section(path="_index.md") %}
|
|
{{ macros::toc_nav(docs_section=docs_section, current_page=page) }}
|
|
{% endblock toc %}
|
|
|
|
{% block content_id %}{{ page.slug }}{% endblock content_id %}
|
|
|
|
{% block content %}
|
|
<h1 class="heading-text"><a href="#{{ page.slug }}" class="heading-anchor">{{ page.title }}</a></h1>
|
|
{{ page.content | safe }}
|
|
|
|
{# Calculate prev/next from section pages #}
|
|
{% set prev_page = false %}
|
|
{% set next_page = false %}
|
|
{% set found_current = false %}
|
|
{% for doc_page in docs_section.pages %}
|
|
{# A hide_from_nav page is skipped as a prev/next candidate, so nothing links
|
|
into it, but the current-page test below stays unguarded: viewing such a
|
|
page directly must still flip found_current, or its own prev/next would
|
|
compute against the wrong neighbour. It keeps a prev link back out. #}
|
|
{% set hidden = doc_page.extra.hide_from_nav | default(value=false) %}
|
|
{% if found_current and not next_page and not hidden %}
|
|
{% set_global next_page = doc_page %}
|
|
{% endif %}
|
|
{% if doc_page.permalink == page.permalink %}
|
|
{% set_global found_current = true %}
|
|
{% endif %}
|
|
{% if not found_current and not hidden %}
|
|
{% set_global prev_page = doc_page %}
|
|
{% endif %}
|
|
{% endfor %}
|
|
|
|
<div class="page-nav">
|
|
{% if prev_page %}
|
|
<a href="{{ prev_page.permalink | safe }}">← {{ prev_page.title }}</a>
|
|
{% else %}
|
|
<span></span>
|
|
{% endif %}
|
|
|
|
{% if next_page %}
|
|
<a href="{{ next_page.permalink | safe }}">{{ next_page.title }} →</a>
|
|
{% endif %}
|
|
</div>
|
|
{% endblock content %}
|