@geekity/cms 0.18.0 → 0.20.0

package/README.md

@@ -1519,27 +1519,28 @@ This is every piece of personal data the CMS stores, where it is, and how long
 it stays. "Kept" means until somebody deletes it, unless a retention period
 says otherwise.
 
-| What                                                                                                                 | Where                                                         | How long                                                                                                             |
-| -------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------- |
-| A commenter's name, website and words                                                                                | `content/_data/comments/{slug}.json`, public and in git       | Kept. Erasing on request replaces the name and drops the website.                                                    |
-| A commenter's email, and whether they asked to be told about replies                                                 | `data/comments/{slug}.json`, mode `0600`, keyed by comment id | `commentEmailRetentionDays`: forever unless set, 180 on a new site.                                                  |
-| A salted hash of the address a comment, webmention or contact message came from (the address itself is never stored) | The comment file, or the contact message file                 | `addressHashRetentionDays`: forever unless set, 30 on a new site.                                                    |
-| A webmention's author name, website, avatar URL and the source page's words                                          | `content/_data/comments/{slug}.json`                          | Kept, as a copy of a page that is public already.                                                                    |
-| A contact message: the sender's name, email, subject and message                                                     | `data/contact/{id}.json`, mode `0600`                         | `contactMessageRetentionDays`: forever unless set, 365 on a new site.                                                |
-| The addresses that unsubscribed from reply notices                                                                   | `data/comment-optouts.json`, mode `0600`                      | Kept, so the site goes on not writing to them. Erasing on request removes one.                                       |
-| Followers: actor id, handle, display name, avatar URL, profile URL                                                   | `content/_data/federation/{username}/followers.json`, in git  | Until they unfollow.                                                                                                 |
-| Inbound likes, boosts, replies and quotes, with the actor who sent them                                              | `content/_data/federation/inbox/{yyyy}-{mm}.jsonl`, in git    | Kept.                                                                                                                |
-| What a reply shows of the post it answers: its title, words and author                                               | `content/_data/replyContexts.json`, in git                    | Kept.                                                                                                                |
-| Other actors who liked, boosted, answered or quoted: handle, display name, avatar URL, profile URL                   | `data/geekity.db`, fetched from their actor document          | A cache. Refetched weekly while the inbox log names them.                                                            |
-| Remote avatars, shrunk                                                                                               | `data/avatars/`                                               | Deleted by the avatar sweep once nothing shown names them.                                                           |
-| Users: username, email, argon2id password hash, profile                                                              | `data/users.json`, mode `0600`                                | Until the user is deleted.                                                                                           |
-| The apps a user signed in to with IndieAuth: app, scopes, hashes of its tokens, when they expire                     | `data/indieauth-tokens.json`, mode `0600`                     | Until the user is deleted, or 60 days after the app last refreshed.                                                  |
-| Recent IndieAuth and Micropub requests: app, username, what it sent (no secrets, values cut short), the answer       | `data/indieauth-activity.json`, mode `0600`                   | The last 100 requests, none older than 14 days.                                                                      |
-| An index of all of the above, and sessions, reset tokens and spent link tokens                                       | `data/geekity.db`                                             | A cache of the files. Sessions and tokens are pruned when they expire.                                               |
-| Client addresses in the rate limits                                                                                  | Memory                                                        | Until the window passes or the site restarts.                                                                        |
-| Where and when a photo or video was taken, and the camera or phone (EXIF, XMP, IPTC, a video's `©xyz`)               | Removed from `content/uploads/` on upload                     | Never stored. Older uploads keep it until `geekity strip-metadata`; git history keeps the old bytes until rewritten. |
-| Where the author wrote a post: coordinates, accuracy, and the place's name, locality, region and country             | `data/locations.json`, mode `0600`, keyed by permalink        | Kept until the author clears it. Published only as far as **Settings > Privacy** allows, nothing by default.         |
-| Client addresses in the access log                                                                                   | stdout, and whatever collects it                              | Only with `accessLogAddress` on. The collector keeps them.                                                           |
+| What                                                                                                                   | Where                                                         | How long                                                                                                             |
+| ---------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------- |
+| A commenter's name, website and words                                                                                  | `content/_data/comments/{slug}.json`, public and in git       | Kept. Erasing on request replaces the name and drops the website.                                                    |
+| A commenter's email, and whether they asked to be told about replies                                                   | `data/comments/{slug}.json`, mode `0600`, keyed by comment id | `commentEmailRetentionDays`: forever unless set, 180 on a new site.                                                  |
+| A salted hash of the address a comment, webmention or contact message came from (the address itself is never stored)   | The comment file, or the contact message file                 | `addressHashRetentionDays`: forever unless set, 30 on a new site.                                                    |
+| A webmention's author name, website, avatar URL and the source page's words                                            | `content/_data/comments/{slug}.json`                          | Kept, as a copy of a page that is public already.                                                                    |
+| A contact message: the sender's name, email, subject and message                                                       | `data/contact/{id}.json`, mode `0600`                         | `contactMessageRetentionDays`: forever unless set, 365 on a new site.                                                |
+| The addresses that unsubscribed from reply notices                                                                     | `data/comment-optouts.json`, mode `0600`                      | Kept, so the site goes on not writing to them. Erasing on request removes one.                                       |
+| Followers: actor id, handle, display name, avatar URL, profile URL                                                     | `content/_data/federation/{username}/followers.json`, in git  | Until they unfollow.                                                                                                 |
+| Inbound likes, boosts, replies and quotes, with the actor who sent them                                                | `content/_data/federation/inbox/{yyyy}-{mm}.jsonl`, in git    | Kept.                                                                                                                |
+| What a reply shows of the post it answers: its title, words and author                                                 | `content/_data/replyContexts.json`, in git                    | Kept.                                                                                                                |
+| Other actors who liked, boosted, answered or quoted: handle, display name, avatar URL, profile URL                     | `data/geekity.db`, fetched from their actor document          | A cache. Refetched weekly while the inbox log names them.                                                            |
+| Remote avatars, shrunk                                                                                                 | `data/avatars/`                                               | Deleted by the avatar sweep once nothing shown names them.                                                           |
+| Users: username, email, argon2id password hash, profile                                                                | `data/users.json`, mode `0600`                                | Until the user is deleted.                                                                                           |
+| The apps a user signed in to with IndieAuth: app, scopes, hashes of its tokens, when they expire                       | `data/indieauth-tokens.json`, mode `0600`                     | Until the user is deleted, or 60 days after the app last refreshed.                                                  |
+| Recent IndieAuth and Micropub requests: app, username, what it sent (no secrets, values cut short), the answer         | `data/indieauth-activity.json`, mode `0600`                   | The last 100 requests, none older than 14 days.                                                                      |
+| An index of all of the above, and sessions, reset tokens and spent link tokens                                         | `data/geekity.db`                                             | A cache of the files. Sessions and tokens are pruned when they expire.                                               |
+| Client addresses in the rate limits                                                                                    | Memory                                                        | Until the window passes or the site restarts.                                                                        |
+| Where and when a photo or video was taken, and the camera or phone (EXIF, XMP, IPTC, a video's `©xyz`)                 | Removed from `content/uploads/` on upload                     | Never stored. Older uploads keep it until `geekity strip-metadata`; git history keeps the old bytes until rewritten. |
+| Where the author wrote a post or checked in: coordinates, accuracy, and the place's name, locality, region and country | `data/locations.json`, mode `0600`, keyed by permalink        | Kept until the author clears it. Published only as far as **Settings > Privacy** allows, nothing by default.         |
+| Micropub properties a post was sent that the site does not understand, such as an RSVP                                 | `data/kept-properties.json`, mode `0600`, keyed by permalink  | Kept until an update deletes them. Never published.                                                                  |
+| Client addresses in the access log                                                                                     | stdout, and whatever collects it                              | Only with `accessLogAddress` on. The collector keeps them.                                                           |
 
 Two services outside the site see personal data when a site turns them on.
 Akismet is sent a commenter's or sender's address, user agent, referrer, name,
@@ -1721,10 +1722,10 @@ visibility: unlisted
 Public is the key's absence, and the editor removes the key when you choose
 Public again. The site has no private posts. A value other than `public` or
 `unlisted`, such as a hand-typed `visibility: private`, hides the post the way
-`draft: true` does: its URL answers 404, it is on no list, and a post the
-followers already hold is withdrawn with a `Delete`. The editor shows the value
-as it is stored, marks the post Hidden in the list, and keeps the value through
-a save until you choose Public or Unlisted.
+`draft: true` does: its URL answers 404 to anybody not signed in, it is on no
+list, and a post the followers already hold is withdrawn with a `Delete`. The
+editor shows the value as it is stored, marks the post Hidden in the list, and
+keeps the value through a save until you choose Public or Unlisted.
 
 The rule works for pages too.
 
@@ -2423,6 +2424,9 @@ what is in it. Each header does something else:
   leaves alone what an embedded video player asks for: autoplay, fullscreen,
   `encrypted-media`, picture-in-picture, and the motion sensors behind a
   360-degree video.
+  The post editor is the one response that allows more: it sends the site's
+  policy with `geolocation=()` changed to `geolocation=(self)`, so its Use my
+  location button can ask the browser where it is.
 - `Cross-Origin-Opener-Policy: same-origin` keeps a window the site opens, or a
   window that opens the site, from reaching into it through `window.opener`.
 

package/admin/components/admin-bar.njk

@@ -1,6 +1,7 @@
 {# The admin bar, in the admin and across the top of the public site alike
-   (TASK-126, TASK-183). The site title leads to the dashboard; `barLinks` are
-   the shortcuts beside it, which each place chooses for itself; the account
+   (TASK-126, TASK-183). The site title leads to `siteHref` and `barLinks` are
+   the shortcuts beside it, both chosen by each place for itself: the admin's
+   title leads to the dashboard, the public site's home (TASK-257). The account
    menu ends it.
 
    WordPress's "Howdy," menu, greeting the way this site's owner does. A
@@ -8,7 +9,7 @@
    Escape or a click elsewhere, and tells a screen reader whether it is
    expanded, all under the admin CSP's script-src 'self'. #}
 <nav class="admin-bar" aria-label="Admin bar">
-  <a class="admin-bar-site" href="{{ adminUrl }}">{{ site.title }}</a>
+  <a class="admin-bar-site" href="{{ siteHref }}">{{ site.title }}</a>
   {% for link in barLinks %}
     <a href="{{ link.url }}">{{ link.label }}</a>
   {% endfor %}

package/admin/components/public-admin-bar.njk

@@ -38,4 +38,6 @@
     }
   });
 })();
-</script></template></geekity-admin-bar>
+</script></template></geekity-admin-bar>{% if notice %}
+<p class="geekity-unpublished-notice" style="all: initial; display: block; box-sizing: border-box; margin: 0; padding: 8px 16px; background: #fcf9e8; color: #1d2327; border-bottom: 1px solid #dba617; font: 14px/1.5 -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif">{{ notice }}</p>
+{%- endif %}

package/admin/layouts/shell.njk

@@ -6,6 +6,7 @@
   {# View site, because in here you are not looking at it; + New, as on the
      public site; and, on the editor of something readers can see, the way to
      go and look at it. #}
+  {% set siteHref = adminUrl %}
   {% set barLinks = [{ label: "View site", url: siteUrl }, { label: "+ New", url: newPostUrl }] %}
   {% if viewUrl and kind %}
     {% set barLinks = barLinks.concat([{ label: "View " + (kind.singular | capitalize), url: viewUrl }]) %}