feat(agent): add email-authenticated map moderation

[Oba-One]

Summary

• add recipient-specific seven-day HMAC moderation links, per-recipient Resend delivery/idempotency, generic invalid-link responses, strict origin/JSON handling, and first-decision-wins transactions
• add the static /map/moderate review surface with fragment-only credentials, CSP/no-referrer/noindex, safe-field projection, native confirmation dialogs, and approve/decline states
• add migration 020, hidden operator-only Directus metadata, safe disabled-by-default Fly configuration, rollout/rollback documentation, and database/browser-contract coverage

The feature flag remains off by default, so existing Directus-link alerts remain the production behavior until the documented post-merge rollout.

Linear: follow-up to PRD-622. A dedicated follow-up issue still needs to be created because this session has no Linear connector and authenticated Brave control is unavailable.

Validation

• node_modules/@typescript/native/bin/tsc -b --pretty false
• 141 focused agent, moderation, map-node, website-route, Directus Studio, and public-content tests pass
• migration 020 applies to local Postgres and replays as a no-op
• real local database proof passes approve, decline, approved_at, review audit, sibling resolution, concurrent first-decision-wins, Directus-first resolution, cleanup, and fixture removal
• Modern Web Guidance accessibility retrieval, browser-policy check, plan validation, and ui:check pass
• Astro production build passes and emits /map/moderate
• all three CodeQL review findings are fixed and their threads are resolved/outdated
• CodeRabbit review passes
• git diff --check
• authenticated Brave QA at 375/1024/1440 — blocked because the browser-control runtime exits while reading the macOS OpenSSL configuration; no isolated-browser substitute was used

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 6acb032e-72ee-4a2f-84ac-48baf044aa38

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/map-moderation-magic-link

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}