fix(page-data): isolate owner API from public pages

2026-07-15 10:56:22 +08:00
parent 72fd88219c
commit a07cf07861
15 changed files with 200 additions and 90 deletions
@@ -96,6 +96,13 @@ test('inferPageDataBindAccessMode chooses password for admin html', () => {
    'password',
  );
  assert.equal(inferPageDataBindAccessMode('public/diet-survey.html', SURVEY_HTML), 'public');
+  assert.equal(
+    inferPageDataBindAccessMode(
+      'public/private-tracker.html',
+      '<script>const client = MindSpacePageData.createClient(); client.authenticate(password); client.listRows(\'entries\'); client.insertRow(\'entries\', {});</script>',
+    ),
+    'password',
+  );
 });

 test('evaluatePageDataFinishGuard detects unbound page data html', () => {