diigo-cache: the public page only reads

/public/<username> reads through the cache's viewer() facet
(PageViewer: stored pages, knownTotal, fill progress — the reader
alone), so it can't fetch from diigo or write storage.

Behavior change, agreed beforehand: an unfetched page no longer fills
itself on a miss; it says "not fetched yet" (JSON: stored: false), and
the owner fills via the webkey page. The HIT/MISS line becomes "stored
<when>". Strangers can no longer make the cache spend the owner's diigo
session; the README's deployment concern shrinks to /api.

Tests: viewing an unfetched page makes no webapp call; the page appears
once stored; fill progress shows after one fill step.

Generated-by: Claude Opus 5.5

diigo-cache/tests/fill.test.ts

@@ -4,7 +4,7 @@ import { describe, expect, it, vi } from "vitest";
 import worker from "../src/index.js";
 import { newHttpBatchRpcSession } from "capnweb";
 import type { CacheApi } from "../src/api.js";
-import { toWebkey } from "../src/webkeys.js";
+import { idFromWebkey, toWebkey } from "../src/webkeys.js";
 import { FIXED_NOW } from "./test-worker.js";
 import { PAGE_SIZE } from "../src/cache.js";
 
@@ -203,7 +203,7 @@ describe("fill via webkey and Cap'n Web (goal 1e)", () => {
 			headers: { "content-type": "application/json" },
 			body: JSON.stringify({ webappId: "fake-webapp-id", mode }),
 		});
-		return (await res.json()) as { cacheId: string; username?: string };
+		return (await res.json()) as { cacheId: string; username?: string; publicId?: string };
 	};
 
 	it("trading the key and starting the fill pipeline into one round trip", async () => {
@@ -332,14 +332,17 @@ describe("fill via webkey and Cap'n Web (goal 1e)", () => {
 		expect((await call("/_fill", { method: "POST" })).status).toBe(404);
 	});
 
-	it("the public page shows a running fill's progress", async () => {
-		const { cacheId, username } = await wireJson("public");
+	it("the public page shows a fill's progress", async () => {
+		const { cacheId, username, publicId } = (await wireJson("public")) as { cacheId: string; username: string; publicId: string };
 		const { api, done } = session();
 		try {
-			await api.cache(cacheId).publicCache().startFill();
+			await api.cache(cacheId).publicCache().startFill({ pagesPerStep: 1 });
 		} finally {
 			done();
 		}
+		// one step of the job: page 1 stored, so the page count is known
+		const pub = testEnv.PUBLIC_DO.get(testEnv.PUBLIC_DO.idFromString(idFromWebkey(publicId)));
+		await runDurableObjectAlarm(pub);
 		const html = await (await call(`/public/${username}`)).text();
 		expect(html).toMatch(/fill(ed|ing)[^<]*\d+ of \d+ pages/);
 	});