Part of QA PAR-457. Production reproduced 18 Oct. Owner → Settings → Members → Invite people → Link → Viewer → Create link. Open the newly issued invite URL in a fresh browser context with no cookies. Actual: 'Application error: a server-side exception has occurred while loading app.taskl.ie' with digest 2389272097. Reload reproduces at 390×844 and 1440×900. Signed-in owner opening a Contributor invite in the same session previously saw the normal Join workspace screen; anonymous path is broken. Expected: readable workspace/role preview plus Sign in/Create account that preserves the invite, then explicit acceptance. No real users involved; invite belongs to disposable design-qa-20261018 workspace. Invite token omitted from issue for safety. Evidence: .context/design-qa-20261018/invite-guest-crash-390.png and -1440.png. Investigate unauthenticated invite preview/server rendering.
Implemented in the dependent QA stack: https://github.com/ParadauxIO/taskl.ie/pull/86
Combined verification passed: full API suite (1,306 tests), web lint and TypeScript, unit suite (1,211 passed; one existing skip), 483 Chromium story checks, and the production Next.js/CSS build. Desktop/mobile component evidence and a flow diagram are attached where applicable; server-rendered screenshot gaps and GitHub rollout prerequisites are explicit in the PR.
Awaiting review and merge; production application code has not been deployed by this task.
Cause confirmed in code: the credential-free read gate admits workspace URLs but not invitation previews, and the preview facade is absent from the guest allowlist. Adding a token-scoped, rate-limited GET preview path with integration coverage; acceptance remains authenticated.