feat(web)!: sign in before joining a space and drop the stranger option

Opening a space link while signed out shows the sign-in page first and keeps
the link in memory. The channel settings no longer offer the stranger switch,
and the client supports API contract major 8.

web/src/core-bridge/worker/channelResources.ts

@@ -34,7 +34,7 @@ export async function createChannel(options: CreateOptions, captchaToken?: strin
       ttl_seconds: options.ttlSeconds,
       members_can_upload: options.membersCanUpload,
       file_max_downloads: options.fileMaxDownloads,
-      join_policy: options.joinPolicy ?? defaults.join_policy, allow_guests: options.allowGuests ?? defaults.allow_guests,
+      join_policy: options.joinPolicy ?? defaults.join_policy,
     },
   });
   try {
@@ -157,7 +157,6 @@ export async function updateChannelSettings(resourceId: string, patch: ChannelSe
   if (patch.ttlSeconds !== undefined) body.ttl_seconds = patch.ttlSeconds;
   if (patch.fileMaxDownloads !== undefined) body.file_max_downloads = patch.fileMaxDownloads;
   if (patch.joinPolicy !== undefined) body.join_policy = patch.joinPolicy;
-  if (patch.allowGuests !== undefined) body.allow_guests = patch.allowGuests;
   if (patch.joinPassword !== undefined) body.join_password = patch.joinPassword;
   const info = await apiFetch(`/channels/${resourceId}/settings`, {
     method: 'PATCH', headers: { ...session.authHeaders('owner'), 'Content-Type': 'application/json' },

web/src/core-bridge/worker/http.test.ts

@@ -8,7 +8,7 @@ describe('API contract preflight', () => {
   });
 
   it('blocks API requests when the server has a newer breaking major', async () => {
-    const fetchMock = vi.fn(async () => new Response(JSON.stringify({ contract_version: '8.0.0' }), { status: 200 }));
+    const fetchMock = vi.fn(async () => new Response(JSON.stringify({ contract_version: '9.0.0' }), { status: 200 }));
     vi.stubGlobal('fetch', fetchMock);
     setApiBase('http://api.test/api/v1');
 
@@ -19,7 +19,7 @@ describe('API contract preflight', () => {
 
   it('checks the contract once and then sends the API request', async () => {
     const fetchMock = vi.fn()
-      .mockResolvedValueOnce(new Response(JSON.stringify({ contract_version: '7.0.0' }), { status: 200 }))
+      .mockResolvedValueOnce(new Response(JSON.stringify({ contract_version: '8.0.0' }), { status: 200 }))
       .mockResolvedValueOnce(new Response('{}', { status: 200 }))
       .mockResolvedValueOnce(new Response('{}', { status: 200 }));
     vi.stubGlobal('fetch', fetchMock);

web/src/core-bridge/worker/wire.ts

@@ -8,7 +8,7 @@ export function toChannelInfo(raw: ChannelWire, saved: SavedResource): ChannelIn
   return {
     id: raw.id,
     creatorAccount: raw.creator_account ?? undefined,
-    joinPolicy, allowGuests: raw.settings.allow_guests, passwordRequired: raw.password_required,
+    joinPolicy, passwordRequired: raw.password_required,
     name: raw.settings.name ?? undefined,
     mode: raw.mode,
     role: raw.can_manage_structure ? 'owner' : 'member',