Allow anonymous users to read lessons (sign-in CTA for actions + shell)

[Copilot]

Lesson pages currently redirect unauthenticated visitors to /. This removes that gate so anyone can read lesson prose, while keeping every interactive action behind auth — surfaced in-context rather than as a hard redirect.

Changes

• app/lessons/[slug]/page.tsx — drop if (!session) redirect("/"). Session is now optional; passedCheckIds short-circuits to an empty set for anonymous users. isSignedIn and callbackURL (/lessons/<slug>) are threaded into component builders.

• app/sign-in-button.tsx — accept optional callbackURL prop (default: "/dashboard") so CTAs can return users to the lesson they were reading.

• components/lesson/mdx-components.tsx — buildLessonComponents now accepts isSignedIn: boolean and callbackURL: string, forwarded to RunBlock and CheckCard.

• components/lesson/RunBlock.tsx — swaps the ▶ Run button for a compact "Sign in to run" trigger when !isSignedIn. Uses useId() to assign a stable id to the container; the OAuth callbackURL includes a hash fragment (#<encoded-id>) so the browser scrolls back to the block after sign-in.

• components/lesson/Check.tsx — swaps the Check button for "Sign in to check" when !isSignedIn. The check's own id is promoted to the HTML id attribute on the <aside>; the OAuth callbackURL includes #<check-id> so the browser scrolls back to the check card after sign-in.

• components/lesson/SandboxSection.tsx — userId is now string | undefined; when absent, renders the unauthenticated panel and skips ensureBranchForLesson entirely (no Xata branch created for anonymous visitors).

• components/lesson/BranchPanel.tsx — adds kind="unauthenticated" variant: a short message + <SignInButton callbackURL={lessonPath} />.

// Anonymous user sees this in the sidebar instead of the terminal
<BranchPanel kind="unauthenticated" callbackURL="/lessons/intro-to-select" />

// …and this inline instead of ▶ Run / Check buttons
<button onClick={() => signIn.social({ provider: "github", callbackURL })}>
  Sign in to run
</button>

API routes retain their existing 401 guards unchanged.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
learn-postgres	Error		May 26, 2026 3:48pm

[exekias]

@copilot after clicking a "Sign in to check" / "Sign in to run" button, ideally the browser would scroll back to that button, make it possible if it's not too complex

[Copilot]

@copilot after clicking a "Sign in to check" / "Sign in to run" button, ideally the browser would scroll back to that button, make it possible if it's not too complex

Done in f39dbc8. Each CTA now appends a hash fragment to the callbackURL so the browser scrolls back to the right element after the OAuth redirect completes:

• CheckCard — the check's id (e.g. create-table-1) is set as the HTML id on the <aside> and appended as #create-table-1.
• RunBlock — React's useId() generates a stable per-instance id placed on the container <div>; it's encodeURIComponent-encoded in the URL since React's generated IDs contain colons (:r0: → %3Ar0%3A), which the browser decodes back when scrolling to the element.

[exekias]

Buttons don't work anymore, also the cursor doesn't change to the hand when hovering

[exekias]

almost there, I want to see the hand cursor also on the shell button

[Copilot]

almost there, I want to see the hand cursor also on the shell button

Fixed in 6a5a938 — added cursor-pointer to SignInButton and also disabled:cursor-not-allowed for the loading state.