Files
rm-circle-team-router/public
martbost 838e5bb2d0 Only the position's owner sees the placement switch
Marty asked where to find the setting, which surfaced the problem: /my/<id>
is a public page and the switch was rendering on it for every visitor. The
POST is wallet-gated so nobody could actually change someone else's
placement, but offering a stranger a control over another member's team is
wrong on its face.

It now stays hidden until /api/public/msg-me confirms the viewer has proved
with their wallet that the position is theirs.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-18 15:49:44 -05:00
..