Add preview_token to pages

New column + unique index, plus ensure_preview_token!/revoke_preview_token!
on Page. Generated lazily (only when explicitly requested) rather than
via has_secure_token's default auto-generate-on-create, so a live,
shareable secret isn't silently minted for every page ever created.

2 files changed, 15 insertions, 0 deletions

diff --git a/app/models/page.rb b/app/models/page.rb
index 20461bf..4d1e94a 100644
--- a/app/models/page.rb
+++ b/app/models/page.rb
@@ -136,6 +136,15 @@ class Page < ApplicationRecord
     "/#{node.unique_name}"
   end
 
+  def ensure_preview_token!
+    update!(preview_token: SecureRandom.urlsafe_base64(24)) unless preview_token.present?
+    preview_token
+  end
+
+  def revoke_preview_token!
+    update!(preview_token: nil)
+  end
+
   def clone_attributes_from page
     return nil unless page
 
diff --git a/db/migrate/20260706030547_add_preview_token_to_pages.rb b/db/migrate/20260706030547_add_preview_token_to_pages.rb
new file mode 100644
index 0000000..794cbb2
--- /dev/null
+++ b/db/migrate/20260706030547_add_preview_token_to_pages.rb
@@ -0,0 +1,6 @@
+class AddPreviewTokenToPages < ActiveRecord::Migration[8.1]
+  def change
+    add_column :pages, :preview_token, :string
+    add_index :pages, :preview_token, unique: true
+  end
+end