fix(blog): prevent unpublished articles from being visible in production

[ComputelessComputer]

No description provided.

[coderabbitai]

📝 Walkthrough

Walkthrough

Loader for the blog article route now blocks access to unpublished articles in production by throwing notFound() when an article's published flag is false and the environment is not DEV.

Changes

Cohort / File(s)	Summary
Blog Route Access Control apps/web/src/routes/_view/blog/$slug.tsx	In the route loader: treat missing article or published !== true as notFound in production; related-articles selection now requires published === true when not in DEV. No public API/signature changes.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

• Verify the environment check (DEV) matches application environment flags.
• Confirm notFound() is the intended response and aligns with routing/error handling.
• Ensure the guard is placed before any sensitive data exposure and related-articles filtering behaves as intended in DEV vs production.

Possibly related PRs

• include-drafts-in-dev-filter #1919 — Similar changes to blog slug/list filtering to enforce production-only exclusion of unpublished articles.

Suggested reviewers

• yujonglee

Pre-merge checks and finishing touches

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	No pull request description was provided by the author, making it impossible to assess whether the description relates to the changeset.	Add a pull request description explaining the motivation, implementation, and any testing performed for this fix.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and specifically describes the main change: preventing unpublished articles from being visible in production, which aligns with the loader and related articles filtering logic changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch blog/prevent-unpublished-articles-visibility

---

📜 Recent review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 9848cc4 and 6859651.

📒 Files selected for processing (1)

• apps/web/src/routes/_view/blog/$slug.tsx (1 hunks)

🚧 Files skipped from review as they are similar to previous changes (1)

• apps/web/src/routes/_view/blog/$slug.tsx

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (8)

• GitHub Check: Redirect rules - hyprnote
• GitHub Check: Header rules - hyprnote
• GitHub Check: Pages changed - hyprnote
• GitHub Check: Redirect rules - hyprnote-storybook
• GitHub Check: Header rules - hyprnote-storybook
• GitHub Check: Pages changed - hyprnote-storybook
• GitHub Check: fmt
• GitHub Check: ci

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[netlify]

✅ Deploy Preview for hyprnote ready!

Name	Link
🔨 Latest commit	6859651
🔍 Latest deploy log	https://app.netlify.com/projects/hyprnote/deploys/692d8d5de32ed80008bfddbc
😎 Deploy Preview	https://deploy-preview-2045--hyprnote.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify]

✅ Deploy Preview for hyprnote-storybook ready!

Name	Link
🔨 Latest commit	6859651
🔍 Latest deploy log	https://app.netlify.com/projects/hyprnote-storybook/deploys/692d8d5d2898dc0008b36c07
😎 Deploy Preview	https://deploy-preview-2045--hyprnote-storybook.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[coderabbitai]

Actionable comments posted: 1

📜 Review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 74e3c5e and 9848cc4.

📒 Files selected for processing (1)

• apps/web/src/routes/_view/blog/$slug.tsx (1 hunks)

🧰 Additional context used

📓 Path-based instructions (1)

**/*.{ts,tsx}

📄 CodeRabbit inference engine (AGENTS.md)

**/*.{ts,tsx}: Avoid creating a bunch of types/interfaces if they are not shared. Especially for function props, just inline them instead.
Never do manual state management for form/mutation. Use useForm (from tanstack-form) and useQuery/useMutation (from tanstack-query) instead for 99% of cases. Avoid patterns like setError.
If there are many classNames with conditional logic, use cn (import from @hypr/utils). It is similar to clsx. Always pass an array and split by logical grouping.
Use motion/react instead of framer-motion.

Files:

• apps/web/src/routes/_view/blog/$slug.tsx

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (5)

• GitHub Check: Redirect rules - hyprnote
• GitHub Check: Header rules - hyprnote
• GitHub Check: Pages changed - hyprnote
• GitHub Check: fmt
• GitHub Check: ci