@commonpub/layer 0.8.4 → 0.8.6

package/composables/useTheme.ts

@@ -48,6 +48,14 @@ export function useTheme(): {
 
     if (import.meta.client) {
       applyThemeToElement(document.documentElement, newTheme);
+
+      // Persist to DB for cross-device sync (fire-and-forget, cookie is primary)
+      $fetch('/api/profile/theme', {
+        method: 'PUT',
+        body: { themeId: newTheme },
+      }).catch(() => {
+        // Not logged in or network error — cookie preference is sufficient
+      });
     }
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonpub/layer",
-  "version": "0.8.4",
+  "version": "0.8.6",
   "type": "module",
   "main": "./nuxt.config.ts",
   "files": [
@@ -54,12 +54,12 @@
     "vue-router": "^4.3.0",
     "zod": "^4.3.6",
     "@commonpub/auth": "0.5.1",
+    "@commonpub/docs": "0.6.2",
     "@commonpub/config": "0.9.1",
-    "@commonpub/protocol": "0.9.9",
-    "@commonpub/ui": "0.8.5",
     "@commonpub/editor": "0.7.9",
-    "@commonpub/docs": "0.6.2",
-    "@commonpub/learning": "0.5.0"
+    "@commonpub/learning": "0.5.0",
+    "@commonpub/protocol": "0.9.9",
+    "@commonpub/ui": "0.8.5"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",

package/pages/admin/federation.vue

@@ -46,11 +46,15 @@ async function addTrusted(): Promise<void> {
 }
 
 async function removeTrusted(domain: string): Promise<void> {
-  await $fetch('/api/admin/federation/trusted-instances', {
-    method: 'DELETE',
-    body: { domain },
-  });
-  await refreshTrusted();
+  try {
+    await $fetch('/api/admin/federation/trusted-instances', {
+      method: 'DELETE',
+      body: { domain },
+    });
+    await refreshTrusted();
+  } catch {
+    alert('Failed to remove trusted instance');
+  }
 }
 
 // Mirror creation
@@ -79,16 +83,24 @@ async function createMirror(): Promise<void> {
 }
 
 async function toggleMirror(id: string, currentStatus: string): Promise<void> {
-  await $fetch(`/api/admin/federation/mirrors/${id}`, {
-    method: 'PUT',
-    body: { action: currentStatus === 'active' ? 'pause' : 'resume' },
-  });
-  await refreshMirrors();
+  try {
+    await $fetch(`/api/admin/federation/mirrors/${id}`, {
+      method: 'PUT',
+      body: { action: currentStatus === 'active' ? 'pause' : 'resume' },
+    });
+    await refreshMirrors();
+  } catch {
+    alert('Failed to update mirror');
+  }
 }
 
 async function deleteMirror(id: string): Promise<void> {
-  await $fetch(`/api/admin/federation/mirrors/${id}`, { method: 'DELETE' });
-  await refreshMirrors();
+  try {
+    await $fetch(`/api/admin/federation/mirrors/${id}`, { method: 'DELETE' });
+    await refreshMirrors();
+  } catch {
+    alert('Failed to delete mirror');
+  }
 }
 
 // Backfill

package/pages/products/[slug].vue

@@ -2,7 +2,7 @@
 const route = useRoute();
 const slug = route.params.slug as string;
 
-const { data: product } = useLazyFetch(`/api/products/${slug}`) as { data: Ref<Record<string, any> | null> };
+const { data: product, pending } = useLazyFetch(`/api/products/${slug}`) as { data: Ref<Record<string, any> | null>; pending: Ref<boolean> };
 const { data: projectsUsing } = useLazyFetch(`/api/products/${slug}/content`) as { data: Ref<any[] | null> };
 
 useSeoMeta({
@@ -12,7 +12,10 @@ useSeoMeta({
 </script>
 
 <template>
-  <div v-if="product" class="product-detail">
+  <div v-if="pending" style="padding: 32px; text-align: center; color: var(--text-faint);">
+    <i class="fa-solid fa-circle-notch fa-spin"></i> Loading product...
+  </div>
+  <div v-else-if="product" class="product-detail">
     <NuxtLink to="/products" class="cpub-back-link"><i class="fa-solid fa-arrow-left"></i> Products</NuxtLink>
 
     <div class="product-layout">

package/server/api/auth/federated/login.post.ts

@@ -36,8 +36,28 @@ export default defineEventHandler(async (event) => {
   }
 
   const redirectUri = `https://${config.instance.domain}/api/auth/federated/callback`;
-  const effectiveClientId = clientId ?? `cpub_${config.instance.domain}`;
-  const effectiveClientSecret = clientSecret ?? '';
+  let effectiveClientId = clientId ?? `cpub_${config.instance.domain}`;
+  let effectiveClientSecret = clientSecret ?? '';
+
+  // Auto-register as a dynamic client if no explicit credentials provided
+  if (!clientId) {
+    try {
+      const regUrl = endpoints.tokenEndpoint.replace('/token', '/register');
+      const regResult = await $fetch<{ client_id: string; client_secret: string }>(regUrl, {
+        method: 'POST',
+        body: {
+          client_name: config.instance.name || config.instance.domain,
+          redirect_uris: [redirectUri],
+          client_uri: `https://${config.instance.domain}`,
+          instance_domain: config.instance.domain,
+        },
+      });
+      effectiveClientId = regResult.client_id;
+      effectiveClientSecret = regResult.client_secret;
+    } catch {
+      // Registration failed — proceed with default client ID (may fail at authorize step)
+    }
+  }
 
   // Store state for the callback handler
   const stateToken = await storeOAuthState(db, {

package/server/api/auth/sign-in-username.post.ts

@@ -1,4 +1,5 @@
-import { resolveIdentityToEmail } from '@commonpub/server';
+import { eq, and, isNull } from 'drizzle-orm';
+import { users } from '@commonpub/schema';
 import { z } from 'zod';
 
 const signInSchema = z.object({
@@ -14,11 +15,21 @@ const signInSchema = z.object({
 export default defineEventHandler(async (event) => {
   const body = await parseBody(event, signInSchema);
 
-  let email: string;
-  try {
-    email = await resolveIdentityToEmail(useDB(), body.identity);
-  } catch {
-    throw createError({ statusCode: 401, statusMessage: 'Invalid credentials' });
+  let email = body.identity;
+
+  // If identity doesn't look like an email, resolve username → email
+  if (!body.identity.includes('@')) {
+    const db = useDB();
+    const [user] = await db
+      .select({ email: users.email })
+      .from(users)
+      .where(and(eq(users.username, body.identity), isNull(users.deletedAt)))
+      .limit(1);
+
+    if (!user) {
+      throw createError({ statusCode: 401, statusMessage: 'Invalid credentials' });
+    }
+    email = user.email;
   }
 
   // Proxy to Better Auth's email sign-in (internal server-side call)

package/server/api/profile/theme.put.ts

@@ -0,0 +1,23 @@
+import { setUserTheme } from '@commonpub/server';
+import { z } from 'zod';
+
+const themeSchema = z.object({
+  themeId: z.string().min(1).max(32),
+});
+
+export default defineEventHandler(async (event): Promise<{ success: boolean }> => {
+  const db = useDB();
+  const user = requireAuth(event);
+  const { themeId } = await parseBody(event, themeSchema);
+
+  try {
+    await setUserTheme(db, user.id, themeId);
+  } catch (err) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: err instanceof Error ? err.message : 'Invalid theme',
+    });
+  }
+
+  return { success: true };
+});