- ✅ **Public project toggle** — `public` flag on `Project` (`is_public`
column + Liquibase migration), exposed on `ProjectModel`/`ProjectDto`;
owner-only `PUT /v2/projects/{projectId}/publishing` (gated by
`PROJECT_EDIT` + `checkUserIsOwnerOrServerAdmin`, activity-logged,
cache-evicting); confirmation-guarded "Public project" switch in
advanced settings.
- ✅ **Community permission** (#3770) — authenticated users on a public
project get a computed community floor (read subset of VIEW +
`translations.suggest` + `translation-comments.add`, all languages;
origin `COMMUNITY`) without a stored `Permission` row, so they
contribute without taking a paid seat. Direct/org permissions and
admin/supporter elevation layer on top, so no authenticated user is
below a non-member; anonymous users get nothing. Member emails + member
count are redacted behind `MEMBERS_VIEW` (REST + websocket);
out-of-surface endpoints are gated (MT credits →
`ORGANIZATION_QUOTAS_VIEW`, import-settings → `TRANSLATIONS_EDIT`
(mirrors the import menu gate `translations.edit` + `keys.view`),
branch-merge → `BRANCH_MANAGEMENT`, blocking-tasks →
task-view-or-assigned).

- ✅ **List-row public indicator** (#3771) — public projects show a
second line under the project name in the shared list row
(`DashboardProjectListItem`): an outlined `public` badge + organization
name. Adds `public` to `ProjectWithStatsModel` + assembler. Sole
indicator (no project-detail icon).
- ✅ **Suggestion resolution split** (#3776) — splits the single
suggestion Accept into "Accept only" (`declineOther=false`, leaves the
competing suggestions active) and "Accept and decline others"
(`declineOther=true`, prior behavior). Inline row actions are ✓
Accept-only and ✕ Decline; an `⋮` overflow menu holds
Accept-and-decline-others and Delete (own suggestions only).
Frontend-only — the backend already supported `declineOther`. Optimistic
cache keeps the surviving sibling visible until refetch
(vitest-covered). Two new i18n keys created in "Tolgee itself".
- ✅ **Suggestion moderation** (#3785) — new
`translation-suggestions.manage` scope lets project members delete
suggestions authored by other users (previously author-only). Own
per-language dimension (`suggestManageLanguages`, new join table +
Liquibase migration); `Suggest` and `Manage` are grouped under a new
"Suggestions" permission category, each with its own language selector.
Granted to the EDIT/MANAGE presets; the suggestion list endpoint accepts
`suggest` OR `manage` so moderators see what they can act on. Deletion
is language-restricted like the sibling suggestion actions;
decline/accept stay on `translations.state-edit`. New i18n keys in
"Tolgee itself".
- ✅ **Suggestion display** (#3774) — translations read view embeds up to
3 active suggestions per cell (was 1), newest-first via a windowed top-N
query (cap `MAX_DISPLAYED_SUGGESTIONS=3`, `created_at desc, id desc`);
the existing `+N` overflow badge is the "more" affordance (no separate
button). Stays capped at 3 across the editor open/close, mutate, and
suggest-create paths; `+N` restyled as an inline circle on the last
suggestion row.
- ✅ **Public projects view** (#3775) — logged-out-capable
`/public-projects` page listing all public projects (stats, paged +
search) via anonymous `GET /v2/public/projects/with-stats`
(`@Transactional(readOnly=true)`, filters guard the anonymous read so it
is side-effect-free; the community-permission floor from #3770 applies
for logged-in visitors). Reuses the projects-list UI (shared
`ProjectsList` extracted from `ProjectListView`); community-translation
banner (Figma-matched gradient + dev-mouse mascot + Suggest/Comment
bullets, no Vote), left-anchored search shown only above a >5 project
threshold, `LOG IN`/`SIGN UP` top bar, no org switcher.
`DashboardProjectListItem` gains `variant='public'`: member affordances
(⋮ menu / QA / translations) suppressed, whole-row click opens the
project when logged-in (community VIEW) else routes to login.
- ✅ **Projects-page redesign** (#3777) — projects list header
redesigned: centered "Projects" title with the org switcher relocated
beside it (`standaloneTitle` hides the separator, adds top spacing,
stacks search on its own row); every non-list page keeps the top-left
switcher. Synthetic "Community translation" switcher entry navigates to
`/community-projects` (does not switch org) — **implemented but
temporarily disabled pending contributor tracking** (its e2e tests are
skipped with a re-enable TODO). `/community-projects` page reuses the
projects-list shell, ignores the selected org, lists all public
projects, email-verification gated, with the community-translation
banner on top (**diverges from the pitch's "no banner"** — designer
request). `DashboardProjectListItem` gains a public grid variant that
drops the controls column entirely — no reserved space (default title
width 150→180px, smaller breakpoints unchanged). New i18n keys in
"Tolgee itself".
- ✅ **Community access to public-project orgs** (#3792) — opening a
public project auto-switches the preferred org; for non-members this
previously 403'd because org access only recognized stored
membership/permission rows. Extends the org view floor
(`canUserViewStrictOrPublic` = direct permission / stored org role
**OR** the org owns a publicly visible project) so community and
direct-permission users can view the org and set it as preferred —
**without a dedicated role** (an earlier GUEST-role iteration was
removed; below-member users hold no role). Anything beyond viewing still
requires `MEMBER+`. Reduced preferred-org model below MEMBER
(`activeCloudSubscription` hidden; new
`PrivateOrganizationModel.limitedView` drives the community project-list
view). Guest-visible surface scoped to accessible projects — org GETs
(role `null`), project listings, languages/base-languages, glossary
reads incl. CSV export (one canonical
`ProjectRepository.BELOW_MEMBER_ACCESSIBLE_PROJECT` predicate),
llm-providers (name/type/token-credit pricing only), `/leave`.
Preference healing writes on stale/missing preference; below-member
viewers excluded from member listings, seat stats, and assignee search.
**Billing repo should audit its org-scoped `@UseDefaultPermissions`
endpoints for the widened floor.**

## ⚠️ Breaking changes
- `GET /v2/projects/{id}/machine-translation-credit-balance` now
requires `ORGANIZATION_QUOTAS_VIEW`; granular permissions / API keys
without it get 403 and must be re-granted.
- Branch-merge session endpoints now require `BRANCH_MANAGEMENT`.


## Deliberate inline style literals (no matching MUI theme token)

These Figma-exact values are kept inline on purpose — single-use
surfaces with no matching
`theme` token; not folded into `theme.typography`/`theme.spacing`:

- **CommunityTranslationBanner** (one-off marketing surface): eyebrow
24px/600/lh1.235/ls0.25px;
heading 40px/700/lh1.167/-1.5px (rendered as `h1` for semantics, visual
is the Figma override);
subtext max-width 561px; mascot-zone reserve padding-right 260px; mouse
height 190px / bottom -15px;
  bullet icons 21×22px; gradient stop 69%.
- **SuggestionsFirst** show-all button: 13px / letter-spacing 0.46px
(matches `TrialChip.tsx`) / 6px vertical padding.
- **DashboardProjectListItem** `StyledPublicChip` label: 13px.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

## Summary

* **New Features**
* Added public/community projects listing with search, pagination, and
stats.
  * Added project publishing toggle to mark projects public/private.
* Extended permissions with `translation-suggestions.manage`
(per-language suggestion management) and `organization-quotas.view`.

* **Bug Fixes**
* Improved privacy redaction for usernames/emails across REST responses
and realtime activity.
* Refined public/community permission behavior and member visibility
(e.g., hidden member counts when not allowed).

* **Tests**
* Expanded API, UI, and permissions test coverage for public/community
access, publishing, masking, and suggestion-permission rules.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

# [3.213.0](v3.212.1...v3.213.0) (2026-07-16)

### Features

* Community Translation v1 ([#3765](#3765)) ([4a4ea3f](4a4ea3f)), closes [#3770](#3770) [#3771](#3771) [#3776](#3776) [#3785](#3785) [#3774](#3774) [#3775](#3775) [#3770](#3770) [#3777](#3777) [#3792](#3792)