@commonpub/layer 0.3.37 → 0.4.0

package/pages/terms.vue

@@ -0,0 +1,168 @@
+<script setup lang="ts">
+useSeoMeta({
+  title: `Terms of Service — ${useSiteName()}`,
+  description: 'Terms and conditions for using this platform.',
+});
+
+const siteName = useSiteName();
+</script>
+
+<template>
+  <div class="cpub-legal">
+    <div class="cpub-legal-header">
+      <h1 class="cpub-legal-title">Terms of Service</h1>
+      <p class="cpub-legal-updated">Last updated: April 2026</p>
+    </div>
+
+    <div class="cpub-legal-body">
+      <section class="cpub-legal-section">
+        <h2>1. Acceptance</h2>
+        <p>By creating an account or using {{ siteName }}, you agree to these Terms of Service and our <NuxtLink to="/privacy">Privacy Policy</NuxtLink>. If you do not agree, do not use the service.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>2. Your Account</h2>
+        <ul>
+          <li>You must provide accurate information when creating an account.</li>
+          <li>You are responsible for keeping your login credentials secure.</li>
+          <li>You must be at least 16 years old to create an account (or the minimum age required by your jurisdiction).</li>
+          <li>One person, one account. Automated or bot accounts require prior approval from the instance administrator.</li>
+        </ul>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>3. Your Content</h2>
+        <p>You retain ownership of content you create on {{ siteName }}. By publishing content, you grant us a license to display, distribute, and federate it as part of operating the platform.</p>
+        <ul>
+          <li>You must have the right to publish any content you upload (no plagiarism, no copyright infringement).</li>
+          <li>Content you import must be your own original work.</li>
+          <li>You may delete your content at any time. Federated copies on remote instances are outside our control.</li>
+          <li>We may remove content that violates these terms or applicable law.</li>
+        </ul>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>4. Acceptable Use</h2>
+        <p>You agree not to:</p>
+        <ul>
+          <li>Post illegal content or content that infringes others' rights</li>
+          <li>Harass, threaten, or abuse other users</li>
+          <li>Spam, phish, or distribute malware</li>
+          <li>Attempt to gain unauthorized access to the platform or other users' accounts</li>
+          <li>Scrape, crawl, or automatically collect data from the platform beyond what public APIs allow</li>
+          <li>Impersonate another person or entity</li>
+          <li>Use the platform for commercial advertising without permission</li>
+        </ul>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>5. Moderation</h2>
+        <p>The instance administrator may, at their discretion:</p>
+        <ul>
+          <li>Remove content that violates these terms</li>
+          <li>Suspend or delete accounts that violate these terms</li>
+          <li>Block federation with other instances</li>
+        </ul>
+        <p>We aim to handle moderation decisions transparently and fairly.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>6. Availability and Changes</h2>
+        <p>We provide {{ siteName }} on an "as is" basis. We do not guarantee uninterrupted availability. We may modify or discontinue the service at any time.</p>
+        <p>These terms may be updated. Continued use after changes constitutes acceptance.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>7. Limitation of Liability</h2>
+        <p>To the fullest extent permitted by law, the instance operator is not liable for any indirect, incidental, or consequential damages arising from your use of the platform. This includes data loss, service interruptions, or actions of other users or federated instances.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>8. Account Deletion</h2>
+        <p>You may delete your account at any time from your <NuxtLink to="/settings/account">account settings</NuxtLink>. Account deletion is permanent and removes all your data, content, and activity from this instance. See our <NuxtLink to="/privacy">Privacy Policy</NuxtLink> for details on data retention and federation.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>9. Contact</h2>
+        <p>For questions about these terms, contact the administrator of this {{ siteName }} instance.</p>
+      </section>
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.cpub-legal {
+  max-width: 740px;
+  margin: 0 auto;
+  padding: 48px 24px 80px;
+}
+
+.cpub-legal-header {
+  margin-bottom: 40px;
+}
+
+.cpub-legal-title {
+  font-size: 28px;
+  font-weight: 700;
+  margin-bottom: 8px;
+}
+
+.cpub-legal-updated {
+  font-size: 12px;
+  color: var(--text-faint);
+  font-family: var(--font-mono);
+}
+
+.cpub-legal-body {
+  display: flex;
+  flex-direction: column;
+  gap: 32px;
+}
+
+.cpub-legal-section h2 {
+  font-size: 16px;
+  font-weight: 600;
+  margin-bottom: 12px;
+}
+
+.cpub-legal-section p {
+  font-size: 14px;
+  line-height: 1.7;
+  color: var(--text-dim);
+  margin-bottom: 8px;
+}
+
+.cpub-legal-section ul {
+  padding-left: 20px;
+  margin: 8px 0;
+}
+
+.cpub-legal-section li {
+  font-size: 14px;
+  line-height: 1.7;
+  color: var(--text-dim);
+  margin-bottom: 4px;
+}
+
+.cpub-legal-section strong {
+  color: var(--text);
+}
+
+.cpub-legal-section a {
+  color: var(--accent);
+  text-decoration: none;
+}
+
+.cpub-legal-section a:hover {
+  text-decoration: underline;
+}
+
+@media (max-width: 640px) {
+  .cpub-legal {
+    padding: 24px 16px 60px;
+  }
+  .cpub-legal-title {
+    font-size: 22px;
+  }
+}
+</style>

package/plugins/theme.ts

@@ -0,0 +1,32 @@
+// Theme plugin — resolves theme on server (zero flash) and hydrates on client.
+//
+// The admin picks the instance theme (family + default mode).
+// Users only toggle light/dark. Server middleware resolves the final theme ID.
+// This plugin reads that resolved value and sets data-theme on <html>.
+
+export default defineNuxtPlugin(() => {
+  const themeId = useState<string>('cpub-theme', () => 'base');
+  const instanceTheme = useState<string>('cpub-instance-theme', () => 'base');
+  const isDark = useState<boolean>('cpub-dark-mode', () => false);
+
+  if (import.meta.server) {
+    const event = useRequestEvent();
+    if (event?.context) {
+      themeId.value = event.context.resolvedTheme ?? 'base';
+      instanceTheme.value = event.context.instanceTheme ?? 'base';
+      isDark.value = event.context.isDarkMode ?? false;
+    }
+  }
+
+  if (import.meta.client) {
+    // One-time migration: clear old localStorage theme (replaced by server-side resolution)
+    localStorage.removeItem('cpub-theme');
+  }
+
+  // Set data-theme on <html> during SSR — first paint has the correct theme
+  if (themeId.value && themeId.value !== 'base') {
+    useHead({
+      htmlAttrs: { 'data-theme': themeId.value },
+    });
+  }
+});

package/server/api/admin/settings.get.ts

@@ -6,11 +6,15 @@ export default defineEventHandler(async (event) => {
   const db = useDB();
   const config = useConfig();
 
-  // Get DB-stored settings
+  // Get DB-stored settings (returns Map — convert to plain object)
   const dbSettings = await getInstanceSettings(db);
+  const stored: Record<string, unknown> = {};
+  for (const [key, value] of dbSettings) {
+    stored[key] = value;
+  }
 
   // Merge with running config defaults so the UI shows actual values
-  const defaults: Record<string, string> = {
+  const defaults: Record<string, unknown> = {
     'instance.name': config.instance.name,
     'instance.description': config.instance.description,
     'instance.registrationOpen': 'true',
@@ -18,5 +22,5 @@ export default defineEventHandler(async (event) => {
     'instance.contactEmail': config.instance.contactEmail ?? '',
   };
 
-  return { ...defaults, ...dbSettings };
+  return { ...defaults, ...stored };
 });

package/server/api/admin/settings.put.ts

@@ -7,5 +7,10 @@ export default defineEventHandler(async (event): Promise<void> => {
   const db = useDB();
   const input = await parseBody(event, adminSettingSchema);
 
-  return setInstanceSetting(db, input.key, input.value, admin.id);
+  await setInstanceSetting(db, input.key, input.value, admin.id);
+
+  // Invalidate server-side theme cache when the default changes
+  if (input.key === 'theme.default') {
+    invalidateThemeCache();
+  }
 });

package/server/api/auth/delete-user.post.ts

@@ -0,0 +1,55 @@
+import { deleteUser, federateDelete } from '@commonpub/server';
+import { contentItems } from '@commonpub/schema';
+import { eq, and } from 'drizzle-orm';
+
+export default defineEventHandler(async (event): Promise<{ success: true }> => {
+  const user = requireAuth(event);
+  const db = useDB();
+  const config = useConfig();
+
+  // Prevent deleting the last admin
+  if (user.role === 'admin') {
+    const { users } = await import('@commonpub/schema');
+    const admins = await db
+      .select({ id: users.id })
+      .from(users)
+      .where(eq(users.role, 'admin'))
+      .limit(2);
+    if (admins.length <= 1) {
+      throw createError({
+        statusCode: 400,
+        statusMessage: 'Cannot delete the only admin account',
+      });
+    }
+  }
+
+  // Federation cleanup: send Delete activities for published content
+  if (config.features.federation) {
+    const domain = config.instance.domain;
+    if (domain) {
+      const published = await db
+        .select({ id: contentItems.id })
+        .from(contentItems)
+        .where(and(
+          eq(contentItems.authorId, user.id),
+          eq(contentItems.status, 'published'),
+        ));
+
+      for (const item of published) {
+        try {
+          await federateDelete(db, item.id, domain, user.username);
+        } catch {
+          // Best-effort — don't block deletion if federation fails
+        }
+      }
+    }
+  }
+
+  // Delete the user (cascades to all related data)
+  await deleteUser(db, user.id, user.id);
+
+  // Clear the session cookie
+  deleteCookie(event, 'better-auth.session_token', { path: '/' });
+
+  return { success: true };
+});

package/server/api/auth/export-data.get.ts

@@ -0,0 +1,15 @@
+import { exportUserData } from '@commonpub/server';
+
+export default defineEventHandler(async (event) => {
+  const user = requireAuth(event);
+  const db = useDB();
+
+  const data = await exportUserData(db, user.id);
+
+  const filename = `commonpub-export-${user.username}-${new Date().toISOString().split('T')[0]}.json`;
+
+  setHeader(event, 'Content-Type', 'application/json');
+  setHeader(event, 'Content-Disposition', `attachment; filename="${filename}"`);
+
+  return data;
+});

package/server/middleware/theme.ts

@@ -0,0 +1,34 @@
+// Resolves the active theme for SSR and injects it into the event context.
+// Runs before page rendering so the theme plugin can set data-theme on <html>.
+//
+// Admin picks instance theme → user only toggles light/dark → server resolves.
+
+declare module 'h3' {
+  interface H3EventContext {
+    /** Final resolved theme ID for this request */
+    resolvedTheme: string;
+    /** The admin-configured instance default theme */
+    instanceTheme: string;
+    /** Whether the resolved theme is dark */
+    isDarkMode: boolean;
+  }
+}
+
+export default defineEventHandler(async (event) => {
+  // Only resolve theme for SSR page requests — skip API, assets, and internal routes
+  const path = getRequestURL(event).pathname;
+  if (path.startsWith('/api') || path.startsWith('/_nuxt') || path.startsWith('/__nuxt')) return;
+
+  const instanceTheme = await getInstanceDefaultTheme();
+  event.context.instanceTheme = instanceTheme;
+
+  // Read user's light/dark preference from cookie
+  const schemeCookie = getCookie(event, 'cpub-color-scheme');
+  const userScheme = schemeCookie === 'light' || schemeCookie === 'dark'
+    ? schemeCookie
+    : null;
+
+  const resolved = resolveThemeForUser(instanceTheme, userScheme);
+  event.context.resolvedTheme = resolved;
+  event.context.isDarkMode = isDefaultDark(resolved);
+});

package/server/utils/instanceTheme.ts

@@ -0,0 +1,67 @@
+// Cached instance-level theme resolution for SSR.
+// The admin sets a theme (determines family + default mode).
+// Users only toggle light/dark within that family.
+
+import { eq } from 'drizzle-orm';
+import { instanceSettings } from '@commonpub/schema';
+import { THEME_TO_FAMILY, FAMILY_VARIANTS, IS_DARK, VALID_THEME_IDS } from '../../utils/themeConfig';
+
+const CACHE_TTL = 60_000; // 1 minute
+
+let cached: string | null = null;
+let cacheTime = 0;
+
+export async function getInstanceDefaultTheme(): Promise<string> {
+  const now = Date.now();
+  if (cached !== null && now - cacheTime < CACHE_TTL) return cached;
+
+  try {
+    const db = useDB();
+    const [row] = await db
+      .select({ value: instanceSettings.value })
+      .from(instanceSettings)
+      .where(eq(instanceSettings.key, 'theme.default'));
+
+    if (row?.value && typeof row.value === 'string' && VALID_THEME_IDS.has(row.value)) {
+      cached = row.value;
+    } else {
+      cached = 'base';
+    }
+  } catch (err) {
+    console.warn('[theme] Failed to read instance theme from DB, using fallback:', err instanceof Error ? err.message : String(err));
+    cached = 'base';
+  }
+
+  cacheTime = now;
+  return cached;
+}
+
+/**
+ * Resolve the final theme ID given the admin's chosen default and the
+ * user's light/dark preference.
+ */
+export function resolveThemeForUser(
+  adminTheme: string,
+  userScheme: 'light' | 'dark' | null,
+): string {
+  const family = THEME_TO_FAMILY[adminTheme] ?? 'classic';
+  const variants = FAMILY_VARIANTS[family] ?? FAMILY_VARIANTS.classic!;
+
+  if (userScheme === null) return adminTheme;
+  return userScheme === 'dark' ? variants.dark : variants.light;
+}
+
+/** Whether a given theme ID is dark */
+export function isDefaultDark(themeId: string): boolean {
+  return IS_DARK[themeId] ?? false;
+}
+
+/** Call after admin changes the instance default theme */
+export function invalidateThemeCache(): void {
+  cached = null;
+  cacheTime = 0;
+}
+
+export function isServerValidThemeId(id: string): boolean {
+  return VALID_THEME_IDS.has(id);
+}

package/theme/agora-dark.css

@@ -0,0 +1,157 @@
+@layer commonpub {
+/* ===========================================
+   CommonPub Agora Theme — Dark (Grove)
+   Warm dark surfaces with green-tinted blacks,
+   green accent, serif display font.
+   =========================================== */
+
+[data-theme="agora-dark"] {
+  /* === SURFACES (grove-tinted warm darks) === */
+  --bg: #0d1a12;
+  --surface: #141f17;
+  --surface2: #1a261e;
+  --surface3: #213028;
+
+  --color-surface: var(--surface);
+  --color-surface-alt: var(--surface2);
+  --color-surface-raised: var(--surface2);
+  --color-surface-overlay: rgba(0, 0, 0, 0.7);
+  --color-surface-overlay-light: rgba(0, 0, 0, 0.6);
+  --color-surface-scrim: rgba(13, 26, 18, 0.85);
+  --color-surface-hover: var(--surface3);
+  --color-bg-subtle: var(--bg);
+
+  /* === TEXT (warm light on dark) === */
+  --text: #e8e8e2;
+  --text-dim: #b0b0a6;
+  --text-faint: #7a7a72;
+
+  --color-text: var(--text);
+  --color-text-secondary: var(--text-dim);
+  --color-text-muted: var(--text-faint);
+  --color-text-inverse: #0d1a12;
+  --color-on-accent: #ffffff;
+  --color-on-primary: #ffffff;
+  --color-primary-hover: #4aa06e;
+
+  /* === BORDERS (grove-tinted) === */
+  --border: #3a4f40;
+  --border2: #2a3a2f;
+
+  --color-border: var(--border2);
+  --color-border-strong: var(--border);
+  --color-border-focus: var(--accent);
+
+  /* === ACCENT (commons green, brighter for dark bg) === */
+  --accent: #4aa06e;
+  --accent-bg: rgba(74, 160, 110, 0.12);
+  --accent-bg-strong: rgba(74, 160, 110, 0.25);
+  --accent-bg-heavy: rgba(74, 160, 110, 0.45);
+  --accent-bg-solid: rgba(74, 160, 110, 0.65);
+  --accent-border: rgba(74, 160, 110, 0.3);
+  --accent-focus-ring: 0 0 0 3px rgba(74, 160, 110, 0.2);
+  --shadow-accent: 4px 4px 0 var(--accent);
+
+  --color-primary: var(--accent);
+  --color-accent: var(--accent);
+  --color-accent-hover: #5ab87e;
+  --color-accent-text: #0d1a12;
+  --color-primary-text: #ffffff;
+  --color-accent-bg: var(--accent-bg);
+  --color-accent-border: var(--accent-border);
+
+  /* === SEMANTIC COLORS (brighter for dark bg) === */
+  --green: #4aa06e;
+  --green-bg: rgba(74, 160, 110, 0.12);
+  --green-border: rgba(74, 160, 110, 0.3);
+
+  --yellow: #daa040;
+  --yellow-bg: rgba(218, 160, 64, 0.12);
+  --yellow-border: rgba(218, 160, 64, 0.3);
+
+  --red: #d85e55;
+  --red-bg: rgba(216, 94, 85, 0.12);
+  --red-border: rgba(216, 94, 85, 0.3);
+
+  --purple: #9a7ec4;
+  --purple-bg: rgba(154, 126, 196, 0.12);
+  --purple-border: rgba(154, 126, 196, 0.3);
+
+  --teal: #3dbcab;
+  --teal-bg: rgba(61, 188, 171, 0.12);
+  --teal-border: rgba(61, 188, 171, 0.3);
+
+  --pink: #d07090;
+  --pink-bg: rgba(208, 112, 144, 0.12);
+  --pink-border: rgba(208, 112, 144, 0.3);
+
+  --color-success: var(--green);
+  --color-warning: var(--yellow);
+  --color-error: var(--red);
+  --color-info: #6a9fd0;
+  --color-success-bg: var(--green-bg);
+  --color-warning-bg: var(--yellow-bg);
+  --color-error-bg: var(--red-bg);
+  --color-info-bg: rgba(106, 159, 208, 0.12);
+
+  /* === OVERLAYS === */
+  --color-badge-overlay: rgba(0, 0, 0, 0.75);
+
+  /* === INTERACTIVE === */
+  --color-link: var(--accent);
+  --color-link-hover: #5ab87e;
+
+  /* === TYPOGRAPHY (warm, distinctive) === */
+  --font-sans: 'Work Sans', system-ui, -apple-system, sans-serif;
+  --font-mono: 'JetBrains Mono', ui-monospace, monospace;
+  --font-display: 'Fraunces', Georgia, 'Times New Roman', serif;
+
+  --font-heading: var(--font-display);
+  --font-body: var(--font-sans);
+
+  /* Font Sizes (Agora scale) */
+  --text-xs: 0.6875rem;
+  --text-sm: 0.8125rem;
+  --text-base: 0.9375rem;
+  --text-md: 1.0625rem;
+  --text-lg: 1.25rem;
+  --text-xl: 1.5rem;
+  --text-2xl: 1.875rem;
+  --text-3xl: 2.375rem;
+  --text-4xl: 3rem;
+  --text-5xl: 4rem;
+  --text-label: 0.625rem;
+
+  /* Line Heights */
+  --leading-tight: 1.15;
+  --leading-snug: 1.35;
+  --leading-normal: 1.7;
+  --leading-relaxed: 1.9;
+
+  /* Letter Spacing */
+  --tracking-tight: -0.02em;
+  --tracking-normal: 0;
+  --tracking-wide: 0.06em;
+  --tracking-wider: 0.1em;
+  --tracking-widest: 0.16em;
+
+  /* === SHADOWS (softer for dark mode) === */
+  --shadow-sm: 2px 2px 0 rgba(0, 0, 0, 0.4);
+  --shadow-md: 4px 4px 0 rgba(0, 0, 0, 0.4);
+  --shadow-lg: 6px 6px 0 rgba(0, 0, 0, 0.4);
+  --shadow-xl: 8px 8px 0 rgba(0, 0, 0, 0.4);
+
+  /* === FOCUS === */
+  --focus-ring: var(--shadow-accent);
+
+  color-scheme: dark;
+}
+
+/* === CONTENT TYPE BADGE COLORS (Agora dark palette) === */
+[data-theme="agora-dark"] [data-content-type="article"] { --badge-color: #6a9fd0; --badge-bg: rgba(106, 159, 208, 0.12); }
+[data-theme="agora-dark"] [data-content-type="blog"] { --badge-color: #4aa06e; --badge-bg: rgba(74, 160, 110, 0.12); }
+[data-theme="agora-dark"] [data-content-type="project"] { --badge-color: #9a7ec4; --badge-bg: rgba(154, 126, 196, 0.12); }
+[data-theme="agora-dark"] [data-content-type="explainer"] { --badge-color: #3dbcab; --badge-bg: rgba(61, 188, 171, 0.12); }
+[data-theme="agora-dark"] [data-content-type="video"] { --badge-color: #d85e55; --badge-bg: rgba(216, 94, 85, 0.12); }
+[data-theme="agora-dark"] [data-content-type="tutorial"] { --badge-color: #daa040; --badge-bg: rgba(218, 160, 64, 0.12); }
+}