@geekity/cms 0.3.0 → 0.5.0

package/admin/{layouts/document-editor.njk → pages/documents/editor.njk}

@@ -1,6 +1,7 @@
 {# The editor behind /admin/posts/{slug} and /admin/pages/{slug}, and behind
    .../new. One template for both kinds: `kind` decides whether there is a date
-   and a tag field, and the handler decides which buttons the form carries. #}
+   and the taxonomy fields, and the handler decides which buttons the form
+   carries. #}
 {% extends "layouts/shell.njk" %}
 
 {% block title %}{{ heading }}{% endblock %}
@@ -16,6 +17,10 @@
     <p class="admin-note">This {{ kind.singular }} is in the trash. The public site is not serving it.</p>
   {% endif %}
 
+  {% if scheduledFor %}
+    <p class="admin-note">Scheduled for {{ scheduledFor }}. The public site starts serving it then, and the followers are told then.</p>
+  {% endif %}
+
   <form class="admin-editor" method="post" action="{{ saveUrl }}">
     <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
     {# The hash of the file this form was filled in from. A save whose hash no
@@ -66,6 +71,9 @@
       {% if kind.dated %}
         <label for="editor-date">Date</label>
         <input id="editor-date" name="date" type="text" value="{{ form.date }}" />
+        {# The file holds a UTC instant; this field is that instant as the
+           site's own clock reads it, so the zone has to be on the screen. #}
+        <p class="admin-hint">Wall-clock time in {{ dateZone }}. Stored as UTC.</p>
       {% endif %}
 
       {% if kind.tagged %}
@@ -74,14 +82,47 @@
         <p class="admin-hint">Separated by commas.</p>
       {% endif %}
 
+      {% if kind.categorised %}
+        <label for="editor-categories">Categories</label>
+        <input id="editor-categories" name="categories" type="text" value="{{ form.categories }}" />
+        <p class="admin-hint">Separated by commas.</p>
+      {% endif %}
+
       <label for="editor-description">Description</label>
       <input id="editor-description" name="description" type="text" value="{{ form.description }}" />
 
+      {# Who the front matter says wrote this (TASK-67). A select of the site's
+         users rather than a free box, because after decision-14 the value is a
+         person rather than a string: it decides whose archive the post is on
+         and, once the actors land, whose followers hear about it. A file that
+         still names somebody who has no account keeps an option of its own, so
+         opening the editor cannot silently reattribute it. #}
+      <label for="editor-author">Author</label>
+      <select id="editor-author" name="author">
+        {% for choice in authors %}
+          <option value="{{ choice.value }}"{% if choice.chosen %} selected{% endif %}>{{ choice.label }}</option>
+        {% endfor %}
+      </select>
+
       <p class="admin-check">
         <input id="editor-draft" name="draft" type="checkbox" value="1"{% if form.draft %} checked{% endif %} />
         <label for="editor-draft">Draft</label>
       </p>
 
+      {# What this document says about comments, if anything. Three answers
+         rather than two: the site's own rules, always open, always closed. #}
+      <label for="editor-comments">Comments</label>
+      <select id="editor-comments" name="comments">
+        <option value="{{ commentSettings.site }}"{% if form.comments == commentSettings.site %} selected{% endif %}>Follow the site settings</option>
+        <option value="{{ commentSettings.open }}"{% if form.comments == commentSettings.open %} selected{% endif %}>Open</option>
+        <option value="{{ commentSettings.closed }}"{% if form.comments == commentSettings.closed %} selected{% endif %}>Closed</option>
+      </select>
+      <p class="admin-hint">
+        Writes <code>comments: true</code> or <code>comments: false</code> into the front matter,
+        which beats the site's switch and its closing window in both directions. Fediverse replies
+        are shown either way.
+      </p>
+
       {% if kind.excludable %}
         {# doc-2's eleventyExcludeFromCollections: still published and still at
            its URL, but out of every collection a template lists from. #}
@@ -92,6 +133,21 @@
         <p class="admin-hint">Keeps the {{ kind.singular }} out of listings that gather content, without unpublishing it.</p>
       {% endif %}
 
+      {% if kind.contactable %}
+        {# The page offers a contact form under its content (TASK-56). Where a
+           message goes is the contact address on the Settings screen; it is
+           never on this page or in its HTML. #}
+        <p class="admin-check">
+          <input id="editor-contact" name="contact" type="checkbox" value="1"{% if form.contact %} checked{% endif %} />
+          <label for="editor-contact">Contact form</label>
+        </p>
+        <p class="admin-hint">
+          Writes <code>contact: true</code> into the front matter and puts a name, email, subject
+          and message form under this {{ kind.singular }}. Messages arrive on the Messages screen
+          and are emailed to the contact address on Settings.
+        </p>
+      {% endif %}
+
       <p class="admin-editor-buttons">
         {% for button in actions %}
           <button type="submit" name="action" value="{{ button.value }}">{{ button.label }}</button>
@@ -106,62 +162,22 @@
   {# CodeMirror, the preview tab and the upload control. A module script is
      deferred by definition, so it runs after the form is in the document.
      Nothing above depends on it: with the bundle missing or JavaScript off the
-     textarea and the Preview button are the whole editor. #}
-  <script type="module" src="{{ assetPrefix }}editor.js"></script>
-
-  <script>
-    /* The one bit of progressive enhancement doc-5 asks for: the slug follows
-       the title until somebody types a slug of their own, and the permalink
-       follows the slug on the same terms. Without this the form still works —
-       an empty slug is derived from the title on the server. */
-    (function () {
-      var title = document.getElementById('editor-title');
-      var slug = document.getElementById('editor-slug');
-      var permalink = document.getElementById('editor-permalink');
-      if (!title || !slug) return;
-
-      var date = document.getElementById('editor-date');
-      var slugFollows = slug.value === '';
-      var permalinkFollows = !permalink || permalink.value === '';
-
-      function slugify(value) {
-        return value
-          .normalize('NFKD')
-          .toLowerCase()
-          .replace(/[\u0300-\u036f]/g, '')
-          .replace(/[^a-z0-9]+/g, '-')
-          .replace(/^-+|-+$/g, '');
-      }
-
-      /* The same shape defaultPermalink() writes on the server: a post lives
-         under the year and month of its date, a page at the top level. */
-      function syncPermalink() {
-        if (!permalink || !permalinkFollows) return;
-        if (slug.value === '') {
-          permalink.value = '';
-          return;
-        }
-        var month = date ? /^(\d{4})-(\d{2})/.exec(date.value) : null;
-        var prefix = month ? '/' + month[1] + '/' + month[2] + '/' : '/';
-        permalink.value = prefix + slug.value + '/';
-      }
-
-      slug.addEventListener('input', function () {
-        slugFollows = false;
-        syncPermalink();
-      });
-
-      if (permalink) {
-        permalink.addEventListener('input', function () {
-          permalinkFollows = false;
-        });
-      }
-
-      title.addEventListener('input', function () {
-        if (!slugFollows) return;
-        slug.value = slugify(title.value);
-        syncPermalink();
-      });
-    })();
-  </script>
+     textarea and the Preview button are the whole editor.
+
+     The nonce is not what lets it run — `script-src 'self'` already does, and
+     the admin has no inline script at all. It is here so the bundle can read
+     it back off this element and hand it to CodeMirror, whose themes are
+     injected as <style> elements at runtime and would otherwise be refused by
+     `style-src`. Reading it through the element's `.nonce` property rather
+     than a data attribute keeps it out of reach of a CSS selector. #}
+  <script
+    type="module"
+    id="editor-script"
+    src="{{ assetPrefix }}editor.js"
+    nonce="{{ cspNonce }}"
+  ></script>
+
+  {# The slug and permalink auto-fill, in a file of its own so the policy never
+     has to allow an inline script. #}
+  <script defer src="{{ assetPrefix }}slug.js"></script>
 {% endblock %}

package/admin/{layouts/document-list.njk → pages/documents/list.njk}

@@ -1,5 +1,14 @@
 {# The listing behind /admin/posts and /admin/pages. One template for both:
-   `kind` says which, and whether the table has a date column and a tag one. #}
+   `kind` says which, and whether the table has a date column and taxonomy
+   ones.
+
+   There is no `pages/posts/` or `pages/categories/` for the same reason.
+   Posts, Pages, Categories and Tags are four menu entries over three
+   templates — this listing, the editor beside it and the taxonomy screen —
+   because a post and a page differ by a `kind`, not by a screen. A folder per
+   menu entry would mean either a second copy of each template or a re-export
+   that exists only to make the directory look like the menu, so the folder is
+   named after what the screens are about instead. #}
 {% extends "layouts/shell.njk" %}
 
 {% block title %}{{ kind.plural }}{% endblock %}
@@ -24,6 +33,9 @@
           {% if kind.tagged %}
             <th scope="col">Tags</th>
           {% endif %}
+          {% if kind.categorised %}
+            <th scope="col">Categories</th>
+          {% endif %}
           {% if kind.dated %}
             <th scope="col">Date</th>
           {% else %}
@@ -36,11 +48,14 @@
       <tbody>
         {% for document in documents %}
           <tr>
-            <td><a href="{{ document.editUrl }}">{{ document.title }}</a></td>
+            <td><a href="{{ document.editUrl }}">{{ document.title }}</a>{% if document.role %} &mdash; <span class="admin-page-role">{{ document.role }}</span>{% endif %}</td>
             <td>{{ document.author }}</td>
             {% if kind.tagged %}
               <td>{{ document.tags }}</td>
             {% endif %}
+            {% if kind.categorised %}
+              <td>{{ document.categories }}</td>
+            {% endif %}
             {% if kind.dated %}
               <td>{{ document.date | date('html') }}</td>
             {% else %}
@@ -51,6 +66,8 @@
                 <span class="admin-status admin-status-trashed">Trash</span>
               {% elif document.draft %}
                 <span class="admin-status admin-status-draft">Draft</span>
+              {% elif document.scheduled %}
+                <span class="admin-status admin-status-scheduled">Scheduled</span>
               {% else %}
                 <span class="admin-status">Published</span>
               {% endif %}

package/admin/pages/documents/taxonomy.njk

@@ -0,0 +1,95 @@
+{# /admin/tags and /admin/categories: every term in use, what carries it, and
+   the three things that can be done to it — rename, merge and delete. One
+   template for both taxonomies; `kind` says which. #}
+{% extends "layouts/shell.njk" %}
+
+{% block title %}{{ heading }}{% endblock %}
+
+{% block content %}
+  <h1>{{ heading }}</h1>
+
+  {# Above the table rather than under the field it came from: a refusal may be
+     about a term the table no longer has a row for. #}
+  {% if problems.to %}
+    <p class="admin-error">{{ problems.to }}</p>
+  {% endif %}
+
+  {% if confirm %}
+    <form class="admin-settings" method="post" action="{{ renameUrl }}">
+      <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+      <input type="hidden" name="{{ fields.term }}" value="{{ confirm.term }}" />
+      <input type="hidden" name="{{ fields.to }}" value="{{ confirm.to }}" />
+      <input type="hidden" name="{{ fields.confirm }}" value="1" />
+
+      <h2>Merge “{{ confirm.term }}” into “{{ confirm.to }}”?</h2>
+
+      <p>
+        There is already a {{ label }} called “{{ confirm.to }}”, on
+        {{ confirm.targetFiles }} {% if confirm.targetFiles == 1 %}file{% else %}files{% endif %}.
+        Renaming “{{ confirm.term }}” merges the
+        {{ confirm.files }} {% if confirm.files == 1 %}file{% else %}files{% endif %} carrying it
+        into that one. A file that already carries both keeps it once.
+      </p>
+
+      <p class="admin-settings-buttons">
+        <button type="submit">Merge them</button>
+        <a href="{{ listUrl }}">Cancel</a>
+      </p>
+    </form>
+  {% endif %}
+
+  {% if terms.length == 0 %}
+    <p>Nothing carries a {{ label }} yet.</p>
+  {% else %}
+    <table class="admin-list">
+      <thead>
+        <tr>
+          <th scope="col">{{ kind.singular | capitalize }}</th>
+          <th scope="col">Posts</th>
+          <th scope="col">Files</th>
+          <th scope="col">Rename</th>
+          <th scope="col">Actions</th>
+        </tr>
+      </thead>
+      <tbody>
+        {% for entry in terms %}
+          <tr>
+            <td><a href="{{ entry.archiveUrl }}">{{ entry.term }}</a></td>
+            <td>{{ entry.published }}</td>
+            <td>{{ entry.total }}</td>
+            <td>
+              <form class="admin-inline" method="post" action="{{ renameUrl }}">
+                <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+                <input type="hidden" name="{{ fields.term }}" value="{{ entry.term }}" />
+                <label class="admin-visually-hidden" for="rename-{{ loop.index }}">
+                  Rename {{ entry.term }} to
+                </label>
+                <input
+                  id="rename-{{ loop.index }}"
+                  name="{{ fields.to }}"
+                  type="text"
+                  value="{% if form.term == entry.term %}{{ form.to }}{% endif %}"
+                  required
+                />
+                <button type="submit">Rename</button>
+              </form>
+            </td>
+            <td class="admin-actions">
+              <form method="post" action="{{ deleteUrl }}">
+                <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+                <input type="hidden" name="{{ fields.term }}" value="{{ entry.term }}" />
+                <button type="submit">Delete</button>
+              </form>
+            </td>
+          </tr>
+        {% endfor %}
+      </tbody>
+    </table>
+
+    <p class="admin-hint">
+      Renaming, merging and deleting rewrite the front matter of every file carrying the
+      {{ label }} — drafts, scheduled posts and the trash included — and tell the feeds and the
+      fediverse about each published post that changed. The Files column is how many that is.
+    </p>
+  {% endif %}
+{% endblock %}

package/admin/pages/federation/followers.njk

@@ -0,0 +1,238 @@
+{# /admin/federation: who this site's people are to the fediverse, who follows
+   each of them, what arrived in the inbox, and how what went out landed. #}
+{% extends "layouts/shell.njk" %}
+
+{% block title %}Federation{% endblock %}
+
+{% block content %}
+  <h1>Federation</h1>
+
+  {% if actors.length %}
+    {% for actor in actors %}
+      <section class="admin-panel admin-actor">
+        <h2>{{ actor.handle }}</h2>
+        <div class="admin-actor-identity">
+          {% if actor.avatarUrl %}
+            <img class="admin-avatar admin-avatar-large" src="{{ actor.avatarUrl }}" alt="" width="96" height="96" />
+          {% else %}
+            <span class="admin-avatar admin-avatar-large admin-avatar-blank" aria-hidden="true"></span>
+          {% endif %}
+          <p class="admin-actor-handle">{{ actor.name }}</p>
+        </div>
+        <dl class="admin-actor-fields">
+          <div>
+            <dt>Summary</dt>
+            <dd>{% if actor.summary %}{{ actor.summary }}{% else %}<span class="admin-empty">None set.</span>{% endif %}</dd>
+          </div>
+          <div>
+            <dt>Actor</dt>
+            <dd><a href="{{ actor.actorId }}">{{ actor.actorId }}</a></dd>
+          </div>
+          <div>
+            <dt>Profile</dt>
+            <dd><a href="{{ actor.url }}">{{ actor.url }}</a></dd>
+          </div>
+          <div>
+            <dt>Followers</dt>
+            <dd>{{ actor.followerCount }}</dd>
+          </div>
+        </dl>
+
+        {% if actor.followers.length %}
+          <table class="admin-list">
+            <thead>
+              <tr>
+                <th scope="col">Follower</th>
+                <th scope="col">Handle</th>
+                <th scope="col">Followed</th>
+              </tr>
+            </thead>
+            <tbody>
+              {% for follower in actor.followers %}
+                <tr>
+                  <td class="admin-follower">
+                    {% if follower.iconUrl %}
+                      <img class="admin-avatar" src="{{ follower.iconUrl }}" alt="" width="32" height="32" loading="lazy" />
+                    {% else %}
+                      <span class="admin-avatar admin-avatar-blank" aria-hidden="true"></span>
+                    {% endif %}
+                    <a href="{{ follower.url }}">{{ follower.name }}</a>
+                  </td>
+                  <td>{{ follower.handle }}</td>
+                  <td>{{ follower.followedAt | date('html') }}</td>
+                </tr>
+              {% endfor %}
+            </tbody>
+          </table>
+        {% else %}
+          <p class="admin-empty">Nobody follows {{ actor.name }} yet.</p>
+        {% endif %}
+      </section>
+    {% endfor %}
+  {% else %}
+    <section class="admin-panel admin-actor">
+      <h2>Actors</h2>
+      <p class="admin-empty">The site has no users, so it has no actors.</p>
+    </section>
+  {% endif %}
+
+  <section class="admin-panel">
+    <h2>Relays</h2>
+    {% if relays.length %}
+      <table class="admin-list">
+        <thead>
+          <tr>
+            <th scope="col">Relay</th>
+            <th scope="col">State</th>
+            <th scope="col">Since</th>
+            <th scope="col">Last delivery</th>
+            <th scope="col">Actions</th>
+          </tr>
+        </thead>
+        <tbody>
+          {% for relay in relays %}
+            <tr>
+              <td>
+                {% if relay.actorId %}
+                  <a href="{{ relay.actorId }}">{{ relay.inboxId }}</a>
+                {% else %}
+                  {{ relay.inboxId }}
+                {% endif %}
+                {% if relay.reason %}
+                  <p class="admin-hint">{{ relay.reason }}</p>
+                {% endif %}
+              </td>
+              <td>
+                {% if relay.state == 'rejected' %}
+                  <span class="admin-status admin-status-failed">{{ relay.stateLabel }}</span>
+                {% else %}
+                  {{ relay.stateLabel }}
+                {% endif %}
+              </td>
+              <td>{{ relay.updatedAt | date('html') }}</td>
+              <td>
+                {% if relay.lastDelivery %}
+                  {{ relay.lastDelivery.activityType }} {{ relay.lastDelivery.status }}
+                  <span class="admin-inbox-when">{{ relay.lastDelivery.attemptedAt | date('html') }}</span>
+                  {% if relay.lastDelivery.error %}
+                    <p class="admin-hint">{{ relay.lastDelivery.error }}</p>
+                  {% endif %}
+                {% else %}
+                  <span class="admin-empty">Nothing yet.</span>
+                {% endif %}
+              </td>
+              <td class="admin-actions">
+                {% if relay.retriable %}
+                  <form method="post" action="{{ relayRetryUrl }}">
+                    <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+                    <input type="hidden" name="{{ fields.relay }}" value="{{ relay.inboxId }}" />
+                    <button type="submit">Retry</button>
+                  </form>
+                {% endif %}
+              </td>
+            </tr>
+          {% endfor %}
+        </tbody>
+      </table>
+      <p class="admin-hint">
+        A relay boosts every public post it is sent on to instances nobody here
+        follows. The list lives on the Settings screen; Retry sends the follow
+        again to one that is still waiting.
+      </p>
+    {% else %}
+      <p class="admin-empty">The site subscribes to no relay. Add one on the Settings screen.</p>
+    {% endif %}
+  </section>
+
+  <section class="admin-panel">
+    <h2>Recent activity</h2>
+    {% if inbox.length %}
+      <ul class="admin-inbox">
+        {% for entry in inbox %}
+          <li>
+            <span class="admin-inbox-actor"><a href="{{ entry.actorId }}">{{ entry.actorLabel }}</a></span>
+            {% if entry.remoteUrl %}
+              <a href="{{ entry.remoteUrl }}">{{ entry.action }}</a>
+            {% else %}
+              {{ entry.action }}
+            {% endif %}
+            {% if entry.post %}
+              <a href="{{ entry.post.editUrl }}">{{ entry.post.title }}</a>
+            {% else %}
+              <span class="admin-empty">something of ours</span>
+            {% endif %}
+            <span class="admin-inbox-when">{{ entry.receivedAt | date('html') }}</span>
+          </li>
+        {% endfor %}
+      </ul>
+    {% else %}
+      <p class="admin-empty">Nothing has arrived yet: no likes, boosts or replies.</p>
+    {% endif %}
+  </section>
+
+  <section class="admin-panel">
+    <h2>Delivery</h2>
+    {% if posts.length %}
+      <table class="admin-list">
+        <thead>
+          <tr>
+            <th scope="col">Post</th>
+            <th scope="col">Announced by</th>
+            <th scope="col">Last activity</th>
+            <th scope="col">Sent</th>
+            <th scope="col">Queued</th>
+            <th scope="col">Failed</th>
+            <th scope="col">Webmentions</th>
+            <th scope="col">Actions</th>
+          </tr>
+        </thead>
+        <tbody>
+          {% for row in posts %}
+            <tr>
+              <td>
+                <a href="{{ row.post.editUrl }}">{{ row.post.title }}</a>
+                {% if row.trashed %}<p class="admin-hint">In the trash.</p>{% endif %}
+              </td>
+              <td>{% if row.author %}@{{ row.author }}{% else %}<span class="admin-empty">—</span>{% endif %}</td>
+              {% if row.lastActivity %}
+                <td>{{ row.lastActivity.activityType }} <span class="admin-inbox-when">{{ row.lastActivity.attemptedAt | date('html') }}</span></td>
+                <td>{{ row.lastActivity.counts.sent }}</td>
+                <td>{{ row.lastActivity.counts.queued }}</td>
+                <td>{% if row.lastActivity.counts.failed %}<span class="admin-status admin-status-failed">{{ row.lastActivity.counts.failed }}</span>{% else %}0{% endif %}</td>
+              {% else %}
+                <td><span class="admin-empty">Nothing recorded.</span></td>
+                <td>—</td>
+                <td>—</td>
+                <td>—</td>
+              {% endif %}
+              <td>
+                {% if row.webmentions.sent or row.webmentions["none"] or row.webmentions.failed %}
+                  {{ row.webmentions.sent }} told{% if row.webmentions["none"] %}, {{ row.webmentions["none"] }} take none{% endif %}{% if row.webmentions.failed %}, <span class="admin-status admin-status-failed">{{ row.webmentions.failed }} failed</span>{% endif %}
+                {% else %}
+                  <span class="admin-empty">—</span>
+                {% endif %}
+              </td>
+              <td class="admin-actions">
+                <form method="post" action="{{ resendUrl }}">
+                  <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+                  <input type="hidden" name="{{ fields.slug }}" value="{{ row.slug }}" />
+                  <button type="submit">Resend</button>
+                </form>
+              </td>
+            </tr>
+          {% endfor %}
+        </tbody>
+      </table>
+      <p class="admin-hint">
+        Resending builds the post again from its file and sends it to every one
+        of its author's followers and every accepted relay the site has now, and tells every
+        page the post links to at the same time: an update for a
+        published post, a withdrawal for one in the trash. The outcomes are a
+        cache, so a database deleted since leaves the posts listed with nothing
+        recorded against them.
+      </p>
+    {% else %}
+      <p class="admin-empty">No post has been announced to the fediverse yet.</p>
+    {% endif %}
+  </section>
+{% endblock %}

package/admin/pages/federation/settings.njk

@@ -0,0 +1,77 @@
+{# /admin/federation/settings: which relays boost the site, and whether it is
+   still answering the paths a WordPress site arrived with. It is Federation >
+   Settings rather than Settings > Federation (TASK-109): the section holds
+   everything about federation, and Followers beside it is where the actors and
+   the people following them are. Who the site's people are on the fediverse is
+   a user's profile now (decision-14). #}
+{% extends "layouts/settings-page.njk" %}
+{% import "components/fields.njk" as field %}
+
+{% block settingsFields %}
+  {% set relaysHint %}
+    One relay inbox per line, such as
+    <code>https://tags.pub/user/_____relay_____/inbox</code>. Adding one sends
+    it a follow; every public post then goes to it as well as to the
+    followers, and it boosts them on to instances nobody here follows. The
+    Followers screen says where each subscription stands.
+  {% endset %}
+  {{ field.textarea('settings-relays', fields.relays, 'Relays', form.relays,
+       error=problems.relays, hint=relaysHint, rows='3', spellcheck='false', autofocus=true) }}
+
+  <h2>WordPress</h2>
+
+  {% set wordpressHint %}
+    Answer the inbox and collection paths the WordPress ActivityPub plugin
+    published, under <code>/wp-json/activitypub/1.0/</code>, for the users
+    carrying its numeric actor id. Only a site that moved here from that plugin
+    needs this: a follower's server keeps delivering to the inbox URL it cached
+    until it next refetches the actor, and this is what catches those
+    deliveries in the meantime.
+  {% endset %}
+  {{ field.checkbox('settings-wordpress-activitypub', fields.wordpressActivityPub,
+       'WordPress ActivityPub compatibility', checked=form.wordpressActivityPub,
+       hint=wordpressHint) }}
+{% endblock %}
+
+{% block settingsPanels %}
+  {# When each compatibility path was last asked for. It is the whole reason
+     the instants are recorded: once every follower's server has refetched the
+     actor, nothing asks any more and the switch can go off. #}
+  <section class="admin-settings admin-wordpress-panel">
+    <h2>WordPress paths</h2>
+
+    {% if wordpressRoutes.length %}
+      <table class="admin-table">
+        <thead>
+          <tr><th scope="col">Path</th><th scope="col">For</th><th scope="col">Last asked for</th></tr>
+        </thead>
+        <tbody>
+          {% for route in wordpressRoutes %}
+            <tr>
+              <td><code>{{ route.path }}</code></td>
+              <td>{{ route.username or 'every user' }}</td>
+              <td>
+                {% if route.lastRequestedAt %}
+                  {{ route.lastRequestedAt | date('readable') }}
+                {% else %}
+                  Never
+                {% endif %}
+              </td>
+            </tr>
+          {% endfor %}
+        </tbody>
+      </table>
+      <p class="admin-hint">
+        Once every one of these has been quiet for long enough that every
+        follower's server has refetched the actor, turn the switch off: these
+        paths are a cache other servers hold, not this site's identity, and the
+        CMS carries them only until the caches have moved on.
+      </p>
+    {% else %}
+      <p class="admin-hint">
+        No user carries a WordPress actor id, so the switch would serve nothing.
+        The <code>geekity import wordpress-actor</code> command sets one.
+      </p>
+    {% endif %}
+  </section>
+{% endblock %}