Public site, sign-in & invitations

Overview#

The signed-out part of Yaumiyya: the marketing landing page, sign-in / create account, password reset, the legal pages, and the page a person sees when they open a team invitation link.

Purpose#

To explain the product and its prices before sign-up, let people create an account or sign in, and let invited people join someone's shared plan.

Who uses it#

Prospective customers, returning users, and people invited to a team.

Screenshots#

Interface explanation#

Landing page (/, signed out): header links Features, Pricing, a theme toggle, Sign in and Start free. It has a hero with Create your free account and Explore the demo; an illustrative demo card with Summary / Transcript / Action items toggles ("Illustrative example · No audio is uploaded"); nine feature cards; plans and credit packs; and an FAQ accordion (8 questions) with a footer linking Terms, Privacy and Contact.

Sign in (/login)

• Continue with Google.
• Email and Password with Sign in.
• New here? Create an account switches to ?mode=signup (the button becomes Create account).
• Forgot password?.

Forgot password (/forgot-password): Email and Send reset link, plus Back to sign in.

Join invitation (/join/<token>): "You have been invited to a shared plan", with an explanation of What joining means (the inviter pays, can see how many credits you use, never sees your meetings) and Accept invitation.

Form fields#

How to use#

1. Open the site and choose Start free (new) or Sign in (returning).
2. Sign in with Google, or enter email and password.
3. Forgot the password? Choose Forgot password?, enter the email and Send reset link. The emailed link opens /auth/confirm, then /reset-password.

Expected result#

A successful sign-in opens Home (/). A signed-in user who visits /login is sent on to the app.

Important notes#

• Pressing Sign in with empty fields shows the browser's own "Please fill out this field." bubble. (VERIFIED THROUGH UI; native bubbles do not appear in headless screenshots.)
• Any signed-out visit to a private or unknown address is redirected to /login. (VERIFIED THROUGH UI)
• Actual sign-in, account creation, Google sign-in, password-reset email and /reset-password were NOT VERIFIED: entering or creating credentials against the live authentication service is outside what this run was allowed to do. The session was created by the project's _prepare-qa.mjs script.
• An invitation link works once and expires in seven days (text on the Settings page, VERIFIED THROUGH UI). Accepting an invitation was NOT VERIFIED (needs a second account).

Behavior spec#