@atmo-dev/kit 0.1.0 → 0.2.1

package/README.md

@@ -18,3 +18,92 @@ The `login(identifier, actor?, options?)` and `onSuccess(identifier, actor?)` ca
 Validation is syntactic, not proof that an account exists. Apps own DID resolution, supported DID methods, OAuth, and sessions. DID inputs bypass optional handle-search providers and cancel pending suggestions.
 
 For other login entry points, import `normalizeIdentifier` and `isValidIdentifier`. Existing `normalizeHandle` and `isValidHandle` remain handle-only helpers; do not use them on DIDs.
+
+## Legal pages and footer
+
+`LegalDocument` renders app-owned document data with readable typography and an optional app-reviewed revision date. Publication status is metadata, not a visible page label. `LegalFooter` renders only configured links. Preview the actual pages at `/legal`; authoring configuration and diagnostics have their own view.
+
+```svelte
+<script lang="ts">
+	import { LegalDocument, LegalFooter } from '@atmo-dev/kit';
+	import { privacy } from './reviewed-policies';
+</script>
+
+<LegalDocument document={privacy} />
+<LegalFooter
+	links={{
+		terms: '/terms',
+		privacy: '/privacy',
+		imprint: '/imprint',
+		moderation: false,
+		report: '/report',
+		source: { label: 'Source code', href: 'https://github.com/example/project' }
+	}}
+/>
+```
+
+Every destination is optional: omit it or set it to `false` to hide it. A string uses the default label; `{ label, href }` customizes it. Plain `mailto:` destinations are accepted for reporting. Unsafe URLs are not made clickable. No links/actions means no empty footer. The footer forwards native attributes and `class`.
+
+An app-owned `reportAction` snippet replaces `links.report` with a contextual button/dialog trigger. Setting `links.report: false` disables that action too. The footer owns no session, reporting subject, dialog, or network operation.
+
+### Author and review documents
+
+Import framework-free helpers from `@atmo-dev/kit/legal` in a script:
+
+```ts
+import { createLegalDrafts, getLegalDraftIssues } from '@atmo-dev/kit/legal';
+
+const config = {
+	app: { name: 'Example', url: 'https://example.com', description: 'an event app' },
+	operator: { name: 'Operator', email: 'hello@example.com', address: [] },
+	privacy: [
+		{
+			id: 'storage',
+			title: 'Data storage',
+			paragraphs: [
+				'Describe actual data, purposes, recipients, retention, legal bases, and safeguards.'
+			]
+		}
+	],
+	moderation: [
+		{
+			id: 'reports',
+			title: 'Reporting',
+			paragraphs: ['Describe the working report channel and review procedure.']
+		}
+	]
+};
+console.error(getLegalDraftIssues(config));
+console.log(JSON.stringify(createLegalDrafts(config), null, 2));
+```
+
+Save generated documents in the consuming app, review/edit their wording, and render that snapshot—not a runtime call to `createLegalDrafts`. **A Kit upgrade must not silently rewrite a published policy.** The templates are drafts, not legal advice or a guarantee of compliance. They infer no jurisdiction, age threshold, legal basis, retention period, processor agreement, acceptance flow, or notice commitment. Operator facts can be reused across apps; each app still needs its actual processing and terms reviewed.
+
+`LegalDocumentData` contains a `title`, `status: 'draft' | 'published'`, optional app-owned `updated` date, and `sections`. Each section has a unique `id`, `title`, and optional `paragraphs`, `items`, `address`, and `links`. Text is escaped, not rendered as HTML. Templates provide terms, privacy, imprint, and moderation drafts, but apps can supply their own text/documents and external policy links instead.
+
+Set `status: 'published'` and an ISO `updated` date only after review. `getLegalDocumentIssues` checks publication fields and section identifiers; `getLegalDraftIssues` checks authoring configuration. Neither determines legal compliance. Routes, page titles, indexing of draft pages, notice/acceptance mechanisms, and enforcement remain app-owned.
+
+## Reporting
+
+`ReportDialog` owns the reason/details form, pending and success states, and the signed-out email fallback. Apps own the trigger, sessions, subject references, canonical links, mailbox, and server submission.
+
+```svelte
+<ReportDialog
+	bind:open
+	isLoggedIn={viewer.isLoggedIn}
+	email="reports@example.com"
+	subjectUrl={canonicalUrl}
+	onsignin={showLogin}
+	submit={async (input) => {
+		try {
+			await sendReport({ subject, ...input });
+		} catch {
+			return { message: 'Reporting is unavailable. Please report by email.' };
+		}
+	}}
+/>
+```
+
+`submit` receives `{ reasonType, reason? }`, using the standard ATProto spam, violation, and other reason identifiers. Blank details are omitted; entered details are trimmed and limited to 2,000 characters. Resolve with no value after a successful save, or return `{ message, needsSignIn? }` for a safe, user-facing failure. `needsSignIn` offers a sign-in-again action. Unexpected rejections show a generic failure without exposing exception details.
+
+The email fallback prefills the subject link and any entered details. Opening a new dialog or changing `subjectUrl` resets its state; stale async results are ignored. The dialog does not import an app's auth singleton, contact a moderation service, or decide who can report a subject. Server authorization remains mandatory.

package/dist/components/NestedComments.svelte

@@ -1,6 +1,7 @@
 <script lang="ts">
 	import type { PostData } from '../social/posts.js';
 	import { safeWebUrl } from '../social/richtext.js';
+	import { blueskyProfileUrl } from '../social/urls.js';
 	import Avatar from './Avatar.svelte';
 	import PostContent from './PostContent.svelte';
 	import NestedComments from './NestedComments.svelte';
@@ -12,7 +13,7 @@
 		<article class="min-w-0">
 			<div class="flex items-start gap-3">
 				<a
-					href={`https://bsky.app/profile/${encodeURIComponent(comment.author.did)}`}
+					href={blueskyProfileUrl(comment.author.did)}
 					target="_blank"
 					rel="noopener noreferrer"
 					class="shrink-0"

package/dist/components/legal/LegalDocument.svelte

@@ -0,0 +1,58 @@
+<script lang="ts" module>
+	import type { HTMLAttributes } from 'svelte/elements';
+	import type { LegalDocumentData } from './types.js';
+	export type LegalDocumentProps = Omit<HTMLAttributes<HTMLElement>, 'children' | 'title'> & {
+		document: LegalDocumentData;
+	};
+</script>
+
+<script lang="ts">
+	import { cn } from '../../utils.js';
+	import { safeLegalHref } from './links.js';
+	let { document, class: className, ...rest }: LegalDocumentProps = $props();
+	const uid = $props.id();
+</script>
+
+<article {...rest} class={cn('mx-auto max-w-3xl px-6 py-10 text-sm leading-7 text-ink', className)}>
+	<header class="mb-8">
+		<h1 class="m-0 text-3xl font-semibold tracking-tight">{document.title}</h1>
+		{#if document.updated}
+			<p class="mt-3 text-muted">
+				Last updated: <time datetime={document.updated}>{document.updated}</time>
+			</p>
+		{/if}
+	</header>
+	<div class="space-y-8">
+		{#each document.sections as section (section.id)}
+			<section aria-labelledby={`${uid}-${section.id}`}>
+				<h2 id={`${uid}-${section.id}`} class="mb-3 text-lg font-semibold">{section.title}</h2>
+				<div class="space-y-3">
+					{#each section.paragraphs ?? [] as paragraph, index (index)}<p>{paragraph}</p>{/each}
+					{#if section.address?.length}
+						<address class="not-italic">
+							{#each section.address as line, index (index)}{#if index}<br />{/if}{line}{/each}
+						</address>
+					{/if}
+					{#if section.items?.length}
+						<ul class="list-disc space-y-2 pl-5">
+							{#each section.items as item, index (index)}<li>{item}</li>{/each}
+						</ul>
+					{/if}
+					{#if section.links?.length}
+						<ul class="list-none space-y-2 p-0">
+							{#each section.links as link, index (index)}
+								<li>
+									{#if safeLegalHref(link.href, true)}<a
+											href={safeLegalHref(link.href, true)}
+											class="rounded underline underline-offset-4 focus-visible:outline-2 focus-visible:outline-offset-4 focus-visible:outline-focus"
+											>{link.label}</a
+										>{:else}{link.label}{/if}
+								</li>
+							{/each}
+						</ul>
+					{/if}
+				</div>
+			</section>
+		{/each}
+	</div>
+</article>

package/dist/components/legal/LegalDocument.svelte.d.ts

@@ -0,0 +1,8 @@
+import type { HTMLAttributes } from 'svelte/elements';
+import type { LegalDocumentData } from './types.js';
+export type LegalDocumentProps = Omit<HTMLAttributes<HTMLElement>, 'children' | 'title'> & {
+    document: LegalDocumentData;
+};
+declare const LegalDocument: import("svelte").Component<LegalDocumentProps, {}, "">;
+type LegalDocument = ReturnType<typeof LegalDocument>;
+export default LegalDocument;

package/dist/components/legal/LegalFooter.svelte

@@ -0,0 +1,34 @@
+<script lang="ts" module>
+	import type { Snippet } from 'svelte';
+	import type { HTMLAttributes } from 'svelte/elements';
+	import type { LegalFooterLinks } from './types.js';
+
+	export type LegalFooterProps = Omit<HTMLAttributes<HTMLElement>, 'children'> & {
+		links?: LegalFooterLinks;
+		/** App-owned contextual report action; replaces links.report when supplied. */
+		reportAction?: Snippet;
+	};
+</script>
+
+<script lang="ts">
+	import { cn } from '../../utils.js';
+	import { legalFooterItems } from './links.js';
+	let { links = {}, reportAction, class: className, ...rest }: LegalFooterProps = $props();
+	const showReportAction = $derived(links.report !== false && !!reportAction);
+	const items = $derived(legalFooterItems(showReportAction ? { ...links, report: false } : links));
+	const linkClass =
+		'rounded text-inherit underline-offset-4 hover:text-ink hover:underline focus-visible:outline-2 focus-visible:outline-offset-4 focus-visible:outline-focus';
+</script>
+
+{#if items.length || showReportAction}
+	<footer {...rest} class={cn('py-8 text-xs text-muted', className)}>
+		<nav aria-label="Legal and contact">
+			<ul class="m-0 flex list-none flex-wrap items-center justify-center gap-x-5 gap-y-3 p-0">
+				{#each items as item, index (index)}
+					<li><a href={item.href} class={linkClass}>{item.label}</a></li>
+				{/each}
+				{#if showReportAction}<li>{@render reportAction?.()}</li>{/if}
+			</ul>
+		</nav>
+	</footer>
+{/if}

package/dist/components/legal/LegalFooter.svelte.d.ts

@@ -0,0 +1,11 @@
+import type { Snippet } from 'svelte';
+import type { HTMLAttributes } from 'svelte/elements';
+import type { LegalFooterLinks } from './types.js';
+export type LegalFooterProps = Omit<HTMLAttributes<HTMLElement>, 'children'> & {
+    links?: LegalFooterLinks;
+    /** App-owned contextual report action; replaces links.report when supplied. */
+    reportAction?: Snippet;
+};
+declare const LegalFooter: import("svelte").Component<LegalFooterProps, {}, "">;
+type LegalFooter = ReturnType<typeof LegalFooter>;
+export default LegalFooter;

package/dist/components/legal/drafts.d.ts

@@ -0,0 +1,10 @@
+import type { LegalDocumentData, LegalDocumentKind, LegalDraftConfig } from './types.js';
+/** Completeness checks only, never legal approval. Run during authoring/review. */
+export declare function getLegalDraftIssues(config: LegalDraftConfig): string[];
+/** Publication completeness only. A passing check is not legal approval. */
+export declare function getLegalDocumentIssues(document: LegalDocumentData): string[];
+/** Starter text, not legal advice. Save the result in the app and review it.
+ * Never use this as a runtime policy generator: a package update must not silently
+ * change published commitments. No jurisdiction, age, retention, or legal basis
+ * is inferred. Every generated document is a draft with no publication date. */
+export declare function createLegalDrafts(config: LegalDraftConfig): Record<LegalDocumentKind, LegalDocumentData>;

package/dist/components/legal/drafts.js

@@ -0,0 +1,134 @@
+import { safeLegalHref } from './links.js';
+/** Completeness checks only, never legal approval. Run during authoring/review. */
+export function getLegalDraftIssues(config) {
+    const issues = [];
+    if (!config.app.name.trim())
+        issues.push('App name is missing.');
+    if (!safeLegalHref(config.app.url)?.startsWith('http'))
+        issues.push('A valid public app URL is required.');
+    if (!config.app.description.trim())
+        issues.push('Service description is missing.');
+    if (!config.operator.name.trim())
+        issues.push('Operator name is missing.');
+    if (!config.operator.address.length || config.operator.address.some((line) => !line.trim())) {
+        issues.push('The operator postal address must be supplied and reviewed.');
+    }
+    if (!safeLegalHref(`mailto:${config.operator.email}`, true))
+        issues.push('A valid operator contact email is required.');
+    if (!config.privacy.length)
+        issues.push('Describe actual data processing, recipients, storage, retention, transfers, and legal bases.');
+    if (!config.moderation.length)
+        issues.push('Describe actual reporting, moderation, and review procedures.');
+    return issues;
+}
+/** Publication completeness only. A passing check is not legal approval. */
+export function getLegalDocumentIssues(document) {
+    const issues = [];
+    if (!document.title.trim())
+        issues.push('Document title is missing.');
+    if (document.status !== 'published')
+        issues.push('Document is still a draft.');
+    if (!document.updated ||
+        !/^\d{4}-\d{2}-\d{2}$/.test(document.updated) ||
+        !Number.isFinite(Date.parse(document.updated)) ||
+        new Date(document.updated).toISOString().slice(0, 10) !== document.updated) {
+        issues.push('A valid app-reviewed revision date is required.');
+    }
+    if (!document.sections.length)
+        issues.push('Document sections are missing.');
+    const ids = new Set();
+    for (const section of document.sections) {
+        if (!section.id || ids.has(section.id))
+            issues.push('Section IDs must be nonempty and unique.');
+        ids.add(section.id);
+        if (!section.title.trim())
+            issues.push('Section title is missing.');
+    }
+    return issues;
+}
+/** Starter text, not legal advice. Save the result in the app and review it.
+ * Never use this as a runtime policy generator: a package update must not silently
+ * change published commitments. No jurisdiction, age, retention, or legal basis
+ * is inferred. Every generated document is a draft with no publication date. */
+export function createLegalDrafts(config) {
+    const { app, operator } = config;
+    const contact = {
+        id: 'contact',
+        title: 'Contact',
+        links: [{ label: operator.email, href: `mailto:${operator.email}` }]
+    };
+    const owner = {
+        id: 'operator',
+        title: 'Operator',
+        address: [operator.name, ...operator.address],
+        links: [{ label: app.name, href: app.url }]
+    };
+    const draft = (title, sections) => ({
+        title,
+        status: 'draft',
+        sections: structuredClone(sections)
+    });
+    // Copy per document, so editing one never changes another or the source config.
+    return {
+        terms: draft('Terms of service', [
+            {
+                id: 'service',
+                title: 'About the service',
+                paragraphs: [`${app.name} is ${app.description}.`]
+            },
+            {
+                id: 'account',
+                title: 'Your account',
+                paragraphs: [
+                    'Keep your account secure and only grant permissions you are comfortable with. Your account provider has its own terms.'
+                ]
+            },
+            {
+                id: 'content',
+                title: 'Your content',
+                paragraphs: [
+                    'You own your content and must have the right to publish it. Public AT Protocol records can be copied by other services. Hiding content here does not remove those copies.'
+                ]
+            },
+            {
+                id: 'conduct',
+                title: 'Acceptable use',
+                items: [
+                    'Do not publish illegal content or violate the rights of others.',
+                    'Do not use the service for harassment, threats, scams, spam, or malicious software.',
+                    'Do not disrupt the service or bypass access restrictions.'
+                ]
+            },
+            {
+                id: 'availability',
+                title: 'Availability and ending use',
+                paragraphs: [
+                    'The service may change or be unavailable. You can stop using it and revoke its permissions through your account provider. We may restrict access to address misuse or legal requirements. Your statutory rights remain unaffected.'
+                ]
+            },
+            contact
+        ]),
+        privacy: draft('Privacy policy', [
+            {
+                id: 'overview',
+                title: 'About this policy',
+                paragraphs: [
+                    `This policy covers data handled by ${app.name}. Your account provider and other AT Protocol services have their own policies.`
+                ]
+            },
+            owner,
+            ...config.privacy,
+            {
+                id: 'rights',
+                title: 'Your choices and rights',
+                paragraphs: [
+                    'Contact us to request access, correction, deletion, or restriction of your personal data, or to object to processing. You can also complain to a data-protection authority where applicable.',
+                    'Delete public records or revoke app access through your account provider. We cannot remove copies held by other services.'
+                ]
+            },
+            contact
+        ]),
+        imprint: draft('Imprint', [owner, contact]),
+        moderation: draft('Moderation policy', [...config.moderation, contact])
+    };
+}

package/dist/components/legal/links.d.ts

@@ -0,0 +1,5 @@
+import type { LegalFooterLinks, LegalLink } from './types.js';
+/** Same-origin absolute paths and web URLs only. Never executable, credentialed,
+ * protocol-relative, or backslash-normalized URLs. Mail is allowed explicitly. */
+export declare function safeLegalHref(value: string, allowMail?: boolean): string | undefined;
+export declare function legalFooterItems(links: LegalFooterLinks): LegalLink[];

package/dist/components/legal/links.js

@@ -0,0 +1,39 @@
+/** Same-origin absolute paths and web URLs only. Never executable, credentialed,
+ * protocol-relative, or backslash-normalized URLs. Mail is allowed explicitly. */
+export function safeLegalHref(value, allowMail = false) {
+    if (!value ||
+        /\s/.test(value) ||
+        [...value].some((character) => character === '\\' || character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127))
+        return undefined;
+    if (value.startsWith('/') && !value.startsWith('//'))
+        return value;
+    if (allowMail && /^mailto:[^@<>?&#%]+@[^@<>?&#%]+\.[^@<>?&#%]+$/.test(value))
+        return value;
+    try {
+        const url = new URL(value);
+        if (['http:', 'https:'].includes(url.protocol) && !url.username && !url.password)
+            return url.href;
+    }
+    catch {
+        /* Invalid URLs remain non-clickable. */
+    }
+    return undefined;
+}
+const labels = {
+    terms: 'Terms',
+    privacy: 'Privacy',
+    imprint: 'Imprint',
+    moderation: 'Moderation',
+    report: 'Report',
+    source: 'Source'
+};
+export function legalFooterItems(links) {
+    return Object.keys(labels).flatMap((key) => {
+        const item = links[key];
+        if (!item)
+            return [];
+        const link = typeof item === 'string' ? { label: labels[key], href: item } : item;
+        const href = safeLegalHref(link.href, key === 'report');
+        return href ? [{ label: link.label, href }] : [];
+    });
+}

package/dist/components/legal/types.d.ts

@@ -0,0 +1,39 @@
+export type LegalDocumentKind = 'terms' | 'privacy' | 'imprint' | 'moderation';
+export interface LegalLink {
+    label: string;
+    href: string;
+}
+export interface LegalSection {
+    id: string;
+    title: string;
+    paragraphs?: readonly string[];
+    items?: readonly string[];
+    address?: readonly string[];
+    links?: readonly LegalLink[];
+}
+/** App-owned, serializable text. Kit upgrades do not change a saved document. */
+export interface LegalDocumentData {
+    title: string;
+    status: 'draft' | 'published';
+    /** The app's reviewed revision date, not a Kit release date. */
+    updated?: string;
+    sections: readonly LegalSection[];
+}
+/** Omit a link, or set it to false, to hide it. */
+export type LegalFooterLink = string | false | LegalLink;
+export type LegalFooterLinks = Partial<Record<LegalDocumentKind | 'report' | 'source', LegalFooterLink>>;
+export interface LegalDraftConfig {
+    app: {
+        name: string;
+        url: string;
+        description: string;
+    };
+    operator: {
+        name: string;
+        email: string;
+        address: readonly string[];
+    };
+    /** Explicitly describe deployed behavior; templates infer no legal basis. */
+    privacy: readonly LegalSection[];
+    moderation: readonly LegalSection[];
+}

package/dist/components/legal/types.js

@@ -0,0 +1 @@
+export {};

package/dist/components/report/ReportDialog.svelte

@@ -0,0 +1,140 @@
+<script lang="ts" module>
+	import type { ReportSubmit } from './types.js';
+
+	export interface ReportDialogProps {
+		open?: boolean;
+		isLoggedIn: boolean;
+		/** App-owned report mailbox, not the subject's email address. */
+		email: string;
+		/** Canonical event/account link for the email fallback. */
+		subjectUrl: string;
+		submit: ReportSubmit;
+		onsignin: () => void;
+		class?: string;
+	}
+</script>
+
+<script lang="ts">
+	import Button from '../Button.svelte';
+	import Modal from '../Modal.svelte';
+	import Textarea from '../Textarea.svelte';
+	import { cn } from '../../utils.js';
+	import { control } from '../../styles.js';
+	import { reportEmailHref } from './email.js';
+	import type { ReportReasonType } from './types.js';
+
+	let {
+		open = $bindable(false),
+		isLoggedIn,
+		email,
+		subjectUrl,
+		submit,
+		onsignin,
+		class: className
+	}: ReportDialogProps = $props();
+	let reasonType = $state<ReportReasonType>('com.atproto.moderation.defs#reasonSpam');
+	let reason = $state('');
+	let pending = $state(false);
+	let message = $state('');
+	let sent = $state(false);
+	let needsSignIn = $state(false);
+	let generation = 0;
+	const id = $props.id();
+	const emailHref = $derived(reportEmailHref(email, subjectUrl, reason));
+
+	// Each opening/subject starts fresh. Ignore a late result from a closed or
+	// retargeted dialog rather than showing success for a different subject.
+	$effect(() => {
+		void open;
+		void subjectUrl;
+		generation += 1;
+		reasonType = 'com.atproto.moderation.defs#reasonSpam';
+		reason = '';
+		pending = false;
+		message = '';
+		sent = false;
+		needsSignIn = false;
+	});
+
+	function signIn() {
+		open = false;
+		onsignin();
+	}
+
+	async function send(event: SubmitEvent) {
+		event.preventDefault();
+		if (pending || !isLoggedIn) return;
+		const current = ++generation;
+		pending = true;
+		message = '';
+		needsSignIn = false;
+		try {
+			const failure = await submit({
+				reasonType,
+				...(reason.trim() ? { reason: reason.trim() } : {})
+			});
+			if (current !== generation) return;
+			if (failure) {
+				message = failure.message;
+				needsSignIn = failure.needsSignIn ?? false;
+			} else {
+				sent = true;
+			}
+		} catch {
+			if (current === generation) {
+				message = 'Report could not be sent. Try again or report by email.';
+			}
+		} finally {
+			if (current === generation) pending = false;
+		}
+	}
+</script>
+
+<Modal
+	bind:open
+	title="Report"
+	description={isLoggedIn ? 'Only the moderators can see your report.' : undefined}
+	dismissible={!pending}
+	class={cn('max-w-md', className)}
+>
+	{#if !isLoggedIn}
+		<div class="space-y-4">
+			<p>
+				Sign in to report directly, or email
+				<a class="underline" href={emailHref}>{email}</a>. Please include a link to the event or
+				account and your reason for reporting.
+			</p>
+			<Button onclick={signIn}>Sign in</Button>
+		</div>
+	{:else if sent}
+		<p role="status" class="mb-4">Report sent.</p>
+		<Button onclick={() => (open = false)}>Done</Button>
+	{:else}
+		<form onsubmit={send} class="space-y-4">
+			<label for={`${id}-reason`} class="block text-sm">Reason</label>
+			<select id={`${id}-reason`} bind:value={reasonType} disabled={pending} class={control}>
+				<option value="com.atproto.moderation.defs#reasonSpam">Spam</option>
+				<option value="com.atproto.moderation.defs#reasonViolation"
+					>Harmful or illegal content</option
+				>
+				<option value="com.atproto.moderation.defs#reasonOther">Other</option>
+			</select>
+			<label for={`${id}-details`} class="block text-sm">Details (optional)</label>
+			<Textarea
+				id={`${id}-details`}
+				bind:value={reason}
+				maxlength={2000}
+				rows={4}
+				disabled={pending}
+			/>
+			{#if message}
+				<div class="space-y-2 text-sm">
+					<p role="alert">{message}</p>
+					<a class="underline" href={emailHref}>Email {email} instead</a>
+					{#if needsSignIn}<Button variant="ghost" onclick={signIn}>Sign in again</Button>{/if}
+				</div>
+			{/if}
+			<Button type="submit" disabled={pending}>{pending ? 'Sending…' : 'Send report'}</Button>
+		</form>
+	{/if}
+</Modal>

package/dist/components/report/ReportDialog.svelte.d.ts

@@ -0,0 +1,15 @@
+import type { ReportSubmit } from './types.js';
+export interface ReportDialogProps {
+    open?: boolean;
+    isLoggedIn: boolean;
+    /** App-owned report mailbox, not the subject's email address. */
+    email: string;
+    /** Canonical event/account link for the email fallback. */
+    subjectUrl: string;
+    submit: ReportSubmit;
+    onsignin: () => void;
+    class?: string;
+}
+declare const ReportDialog: import("svelte").Component<ReportDialogProps, {}, "open">;
+type ReportDialog = ReturnType<typeof ReportDialog>;
+export default ReportDialog;

package/dist/components/report/email.d.ts

@@ -0,0 +1,3 @@
+/** The app owns the destination and canonical subject URL. Encode details as
+ * body text, never additional mail headers. Use %20 rather than form-style +. */
+export declare function reportEmailHref(email: string, subjectUrl: string, reason?: string): string;

package/dist/components/report/email.js

@@ -0,0 +1,6 @@
+/** The app owns the destination and canonical subject URL. Encode details as
+ * body text, never additional mail headers. Use %20 rather than form-style +. */
+export function reportEmailHref(email, subjectUrl, reason = '') {
+    const body = `Event or account: ${subjectUrl}\n\nReason: ${reason.trim()}`;
+    return `mailto:${email}?subject=Content%20report&body=${encodeURIComponent(body)}`;
+}

package/dist/components/report/types.d.ts

@@ -0,0 +1,11 @@
+export type ReportReasonType = 'com.atproto.moderation.defs#reasonSpam' | 'com.atproto.moderation.defs#reasonViolation' | 'com.atproto.moderation.defs#reasonOther';
+export interface ReportInput {
+    reasonType: ReportReasonType;
+    reason?: string;
+}
+/** Return a user-facing failure from the app's submission adapter. */
+export interface ReportFailure {
+    message: string;
+    needsSignIn?: boolean;
+}
+export type ReportSubmit = (input: ReportInput) => Promise<void | ReportFailure>;

package/dist/components/report/types.js

@@ -0,0 +1 @@
+export {};

package/dist/index.d.ts

@@ -15,6 +15,15 @@ export { default as Avatar } from './components/Avatar.svelte';
 export { default as InsetImage } from './components/InsetImage.svelte';
 export { default as Badge } from './components/Badge.svelte';
 export { default as Modal } from './components/Modal.svelte';
+export { default as LegalDocument } from './components/legal/LegalDocument.svelte';
+export type { LegalDocumentProps } from './components/legal/LegalDocument.svelte';
+export { default as LegalFooter } from './components/legal/LegalFooter.svelte';
+export type { LegalFooterProps } from './components/legal/LegalFooter.svelte';
+export { createLegalDrafts, getLegalDraftIssues, getLegalDocumentIssues } from './components/legal/drafts.js';
+export type { LegalDocumentKind, LegalDocumentData, LegalSection, LegalLink, LegalFooterLink, LegalFooterLinks, LegalDraftConfig } from './components/legal/types.js';
+export { default as ReportDialog } from './components/report/ReportDialog.svelte';
+export type { ReportDialogProps } from './components/report/ReportDialog.svelte';
+export type { ReportReasonType, ReportInput, ReportFailure, ReportSubmit } from './components/report/types.js';
 export { default as Tabs } from './components/Tabs.svelte';
 export type { TabItem } from './components/Tabs.svelte';
 export { default as Icon } from './components/Icon.svelte';

package/dist/index.js

@@ -13,6 +13,10 @@ export { default as Avatar } from './components/Avatar.svelte';
 export { default as InsetImage } from './components/InsetImage.svelte';
 export { default as Badge } from './components/Badge.svelte';
 export { default as Modal } from './components/Modal.svelte';
+export { default as LegalDocument } from './components/legal/LegalDocument.svelte';
+export { default as LegalFooter } from './components/legal/LegalFooter.svelte';
+export { createLegalDrafts, getLegalDraftIssues, getLegalDocumentIssues } from './components/legal/drafts.js';
+export { default as ReportDialog } from './components/report/ReportDialog.svelte';
 export { default as Tabs } from './components/Tabs.svelte';
 export { default as Icon } from './components/Icon.svelte';
 export { default as IconRail } from './components/IconRail.svelte';

package/dist/legal.d.ts

@@ -0,0 +1,3 @@
+/** Framework-free authoring helpers for scripts; UI components use the main entry. */
+export { createLegalDrafts, getLegalDraftIssues, getLegalDocumentIssues } from './components/legal/drafts.js';
+export type { LegalDocumentData, LegalDocumentKind, LegalDraftConfig, LegalSection, LegalFooterLinks } from './components/legal/types.js';

package/dist/legal.js

@@ -0,0 +1,2 @@
+/** Framework-free authoring helpers for scripts; UI components use the main entry. */
+export { createLegalDrafts, getLegalDraftIssues, getLegalDocumentIssues } from './components/legal/drafts.js';

package/dist/social/posts.js

@@ -1,8 +1,9 @@
+import { blueskyProfileUrl } from './urls.js';
 export function blueskyPostToPostData(post, depth = 0) {
     const record = post.record ?? post.value;
     const result = {
         uri: post.uri,
-        href: `https://bsky.app/profile/${encodeURIComponent(post.author.did)}/post/${encodeURIComponent(post.uri.split('/').at(-1) ?? '')}`,
+        href: `${blueskyProfileUrl(post.author.did)}/post/${encodeURIComponent(post.uri.split('/').at(-1) ?? '')}`,
         author: {
             did: post.author.did,
             handle: post.author.handle,

package/dist/social/richtext.js

@@ -1,4 +1,5 @@
 import { tokenize } from '@atcute/bluesky-richtext-parser';
+import { blueskyProfileUrl } from './urls.js';
 export function safeWebUrl(url) {
     if (!url)
         return undefined;
@@ -81,7 +82,7 @@ export function richTextSegments(text, facets = []) {
             continue;
         const feature = facet.features?.[0];
         const href = feature?.did
-            ? `https://bsky.app/profile/${encodeURIComponent(feature.did)}`
+            ? blueskyProfileUrl(feature.did)
             : feature?.uri
                 ? safeWebUrl(feature.uri)
                 : feature?.tag

package/dist/social/urls.d.ts

@@ -0,0 +1,2 @@
+/** Bluesky expects literal DIDs in its routes, including colons and did:web escapes. */
+export declare function blueskyProfileUrl(identifier: string): string;

package/dist/social/urls.js

@@ -0,0 +1,6 @@
+import { isDid } from '@atcute/lexicons/syntax';
+/** Bluesky expects literal DIDs in its routes, including colons and did:web escapes. */
+export function blueskyProfileUrl(identifier) {
+    const actor = isDid(identifier) ? identifier : encodeURIComponent(identifier);
+    return `https://bsky.app/profile/${actor}`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atmo-dev/kit",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "The shared UI foundation for Atmo apps.",
   "license": "MIT",
   "repository": {
@@ -27,6 +27,10 @@
       "svelte": "./dist/index.js",
       "default": "./dist/index.js"
     },
+    "./legal": {
+      "types": "./dist/legal.d.ts",
+      "default": "./dist/legal.js"
+    },
     "./theme.css": "./dist/theme.css"
   },
   "peerDependencies": {