@jant/core 0.6.3 → 0.6.4

package/dist/{app-CyysIxj_.js → app-B-wKZB8f.js}

@@ -3419,9 +3419,9 @@ function normalizeThemeColorForMeta(color) {
 * internal paths (e.g. `/_assets/client-HASH.js`) embedded by the Worker build
 * from the Vite client manifest. Used only in production (IS_VITE_DEV=false).
 */ var IS_VITE_DEV = typeof __JANT_DEV__ !== "undefined" && __JANT_DEV__ === true;
-var CORE_VERSION = "0.6.3-2de57b4c4be1aa1c";
-var CLIENT_JS_FILE = "/_assets/client-CTrEFM5W.js";
-var CLIENT_AUTH_JS_FILE = "/_assets/client-auth-LBSZxqNC.js";
+var CORE_VERSION = "0.6.4-619b1a90eba61395";
+var CLIENT_JS_FILE = "/_assets/client-B1XjvRqE.js";
+var CLIENT_AUTH_JS_FILE = "/_assets/client-auth-B9T2QFl2.js";
 var CLIENT_CSS_FILE = "/_assets/client-BMPMuwvV.css";
 var CLIENT_CJK_CSS_FILE = "/_assets/client-cjk-B7Z0snDu.css";
 var CLIENT_CJK_TC_CSS_FILE = "/_assets/client-cjk-tc-BesJYrb2.css";
@@ -3740,7 +3740,7 @@ var IconSprite = () => {
 	const cjkSerifFont = appConfig?.cjkSerifFont ?? "off";
 	const cjkStylesheetPath = cjkSerifFont === "zh-Hans" ? IS_VITE_DEV ? assetPath("/src/style-cjk.css") : toPublicAssetPath(CLIENT_CJK_CSS_FILE, assetBasePath) : cjkSerifFont === "zh-Hant" ? IS_VITE_DEV ? assetPath("/src/style-cjk-tc.css") : toPublicAssetPath(CLIENT_CJK_TC_CSS_FILE, assetBasePath) : cjkSerifFont === "ja" ? IS_VITE_DEV ? assetPath("/src/style-cjk-jp.css") : toPublicAssetPath(CLIENT_CJK_JP_CSS_FILE, assetBasePath) : cjkSerifFont === "ko" ? IS_VITE_DEV ? assetPath("/src/style-cjk-kr.css") : toPublicAssetPath(CLIENT_CJK_KR_CSS_FILE, assetBasePath) : null;
 	const clientScriptPath = IS_VITE_DEV ? resolvedClientBundle === "full" ? assetPath("/src/client-auth.ts") : assetPath("/src/client.ts") : toPublicAssetPath(resolvedClientBundle === "full" ? CLIENT_AUTH_JS_FILE : CLIENT_JS_FILE, assetBasePath);
-	const faviconAssetVersion = resolvedFaviconVersion || "0.6.3-2de57b4c4be1aa1c";
+	const faviconAssetVersion = resolvedFaviconVersion || "0.6.4-619b1a90eba61395";
 	const resolvedFaviconHref = faviconHref ?? (faviconAssetVersion ? toPublicPath(`/favicon.ico?v=${faviconAssetVersion}`, sitePathPrefix) : toPublicPath("/favicon.ico", sitePathPrefix));
 	const resolvedAppleTouchHref = appleTouchHref ?? (faviconAssetVersion ? toPublicPath(`/apple-touch-icon.png?v=${faviconAssetVersion}`, sitePathPrefix) : toPublicPath("/apple-touch-icon.png", sitePathPrefix));
 	const socialImageHref = resolvedSocialImagePath ? toAbsoluteAssetUrl(resolvedSocialImagePath, appConfig?.siteUrl || "", sitePathPrefix) : "";
@@ -10112,6 +10112,35 @@ function getThreadPreviewState({ secondReply, penultimateReply, latestReply, tot
 	].filter((post) => post !== void 0).map((post) => post.id));
 	return { hiddenCount: Math.max(0, totalReplyCount - visibleReplyIds.size) };
 }
+/**
+* A lone root post shorter than this (plain-text code points) comfortably
+* fits the thread-context height cap. Pairs with the
+* `--site-thread-context-max-height` token (160px) in tokens.css — revisit
+* both together if that cap changes.
+*/ var SHORT_ROOT_CHAR_LIMIT = 120;
+/**
+* First-paint guess for whether the thread-context shell will overflow its
+* height cap, used to pick the initial "Show more" toggle visibility.
+*
+* The client (thread-context.ts) always re-measures and corrects this, so a
+* wrong guess costs at most a one-time flash on load — never a wrong final
+* state. Kept deliberately coarse:
+*
+* - 3+ post threads stack 2+ cards in the shell — effectively always overflow.
+* - A lone root carrying media is tall regardless of its text length.
+* - Otherwise fall back to a plain-text length threshold. Only clearly short
+*   roots flip to "fits"; anything at or above the limit keeps the historical
+*   "assume overflow" default, so this can only remove flashes, never add them.
+*
+* @param rootPost - the thread's root post (the only post in a 2-post thread's
+*   shell)
+* @param totalReplyCount - replies in the thread; `>= 2` means 3+ posts total
+* @returns whether to render the toggle visible on first paint
+*/ function threadContextAssumesOverflow({ rootPost, totalReplyCount }) {
+	if (totalReplyCount >= 2) return true;
+	if (rootPost.media.length > 0 || Boolean(rootPost.previewImageUrl)) return true;
+	return [...rootPost.summary ?? ""].length >= SHORT_ROOT_CHAR_LIMIT;
+}
 //#endregion
 //#region src/ui/feed/ThreadPreview.tsx
 /**
@@ -10133,6 +10162,10 @@ var ThreadPreview = ({ rootPost, secondReply, penultimateReply, latestReply, tot
 		latestReply,
 		totalReplyCount
 	});
+	const assumeOverflow = threadContextAssumesOverflow({
+		rootPost,
+		totalReplyCount
+	});
 	const hiddenPostsLabel = i18n._({ id: "oO0hKx" }, { count: hiddenCount });
 	const showMoreLabel = i18n._({ id: "fMPkxb" });
 	const showLessLabel = i18n._({ id: "6lGV3K" });
@@ -10192,6 +10225,7 @@ var ThreadPreview = ({ rootPost, secondReply, penultimateReply, latestReply, tot
 				"data-label-more": showMoreLabel,
 				"data-label-less": showLessLabel,
 				"aria-expanded": "false",
+				hidden: !assumeOverflow,
 				children: [/* @__PURE__ */ jsxDEV$1("span", {
 					class: "thread-context-toggle-label",
 					children: showMoreLabel
@@ -27844,6 +27878,55 @@ manifestRoutes.get("/manifest.webmanifest", (c) => {
 	};
 }
 //#endregion
+//#region src/middleware/cache-control.ts
+/**
+* Cache-Control Middleware
+*
+* Sets a safe default `Cache-Control` on responses that don't declare one.
+*
+* Almost every Jant page is auth-variant: the same URL renders differently
+* for the signed-in author (nav, the "more" menu, edit affordances) than for
+* an anonymous visitor. A shared/CDN cache keyed only by URL must therefore
+* never store these pages — otherwise it serves a stale or wrong-audience
+* snapshot, which both breaks the UI ("you still look signed out", "your edit
+* didn't take effect") and can leak the authenticated dashboard to the public.
+*
+* Jant is self-hosted software that runs behind whatever reverse proxy or CDN
+* the operator chooses, so it cannot rely on infrastructure config to get
+* this right — it must declare its own cache policy. The critical mistake is
+* emitting `Cache-Control: public`: that word is an explicit invitation for
+* any shared cache to store the response.
+*
+* Routes that serve genuinely public, auth-invariant resources (media, feeds,
+* sitemaps, favicons, manifests, static assets) set their own `Cache-Control`
+* explicitly; this middleware leaves those untouched and only fills in the
+* default for the un-annotated dynamic responses.
+*/ /**
+* Default cache directive for dynamic, potentially auth-variant responses.
+* `private` forbids shared/CDN caches from storing the response; `no-store`
+* prevents any cache (including the browser) from keeping a copy.
+*/ var DEFAULT_CACHE_CONTROL = "private, no-store";
+/**
+* Middleware that defaults a missing `Cache-Control` header to
+* `private, no-store`.
+*
+* Runs after the route handler: if the handler (or an inner middleware)
+* already set `Cache-Control`, that explicit value wins. Only responses that
+* declare nothing receive the safe default.
+*
+* @returns Hono middleware enforcing the default cache policy.
+*
+* @example
+* ```ts
+* app.use("*", defaultCacheControl());
+* ```
+*/ function defaultCacheControl() {
+	return async (c, next) => {
+		await next();
+		if (!c.res.headers.has("Cache-Control")) c.res.headers.set("Cache-Control", DEFAULT_CACHE_CONTROL);
+	};
+}
+//#endregion
 //#region src/middleware/onboarding.ts
 /**
 * Onboarding Middleware
@@ -34129,6 +34212,7 @@ async function servePublicStorage(c) {
 		await next();
 	});
 	app.use("*", attachSession());
+	app.use("*", defaultCacheControl());
 	app.use("*", async (c, next) => {
 		const redirectUrl = await getHostedCanonicalRedirect({
 			currentSite: c.var.currentSite,

package/dist/{app-BX2XKxq0.js → app-qwMcaTML.js}

@@ -1,5 +1,5 @@
 import "./url-XF0GbKGO.js";
-import { t as createApp } from "./app-CyysIxj_.js";
+import { t as createApp } from "./app-B-wKZB8f.js";
 import "./export-CzuQyg5h.js";
 import "./env-CoSe-1y4.js";
 import "./github-sync-Dbrb1DS5.js";

package/dist/client/.vite/manifest.json

@@ -146,7 +146,7 @@
     "name": "url"
   },
   "src/client-auth.ts": {
-    "file": "_assets/client-auth-LBSZxqNC.js",
+    "file": "_assets/client-auth-B9T2QFl2.js",
     "name": "client-auth",
     "src": "src/client-auth.ts",
     "isEntry": true,
@@ -163,7 +163,7 @@
     ]
   },
   "src/client.ts": {
-    "file": "_assets/client-CTrEFM5W.js",
+    "file": "_assets/client-B1XjvRqE.js",
     "name": "client",
     "src": "src/client.ts",
     "isEntry": true,

package/dist/client/_assets/{client-CTrEFM5W.js → client-B1XjvRqE.js}

@@ -272,4 +272,4 @@ ${c}`:c;break;case`event`:r.event=c;break;case`id`:e(r.id=c);break;case`retry`:{
               </div>`}
         </div>
       </dialog>
-    `:J}};customElements.define(`jant-text-preview`,Xi);var Zi=8;function Qi(e,t){let n=Number.parseFloat(e);return Number.isFinite(n)?n:t}function $i(e){return Qi(getComputedStyle(e).getPropertyValue(`--site-thread-context-max-height`).trim(),240)}function ea(e){if(e.dataset.threadContextToggleBound===`1`)return;e.dataset.threadContextToggleBound=`1`;let t=e.previousElementSibling;if(!(t instanceof HTMLElement)||t.dataset.threadContext===void 0)return;let n=e.querySelector(`.thread-context-toggle-label`),r=e.dataset.labelMore??`Show more`,i=e.dataset.labelLess??`Show less`,a=!1,o=t=>{e.setAttribute(`aria-expanded`,t?`true`:`false`),n&&(n.textContent=t?i:r)},s=()=>Array.from(t.querySelectorAll(`img`)).every(e=>e.complete),c=()=>{if(a)return;let n=$i(t),r=t.scrollHeight>n+Zi;t.dataset.collapsed===void 0&&(t.dataset.collapsed=``),r?(e.hidden=!1,o(!1)):s()&&(e.hidden=!0)};if(c(),t.querySelectorAll(`img`).forEach(e=>{e.complete||(e.addEventListener(`load`,c,{once:!0}),e.addEventListener(`error`,c,{once:!0}))}),`ResizeObserver`in globalThis){let e=0;new globalThis.ResizeObserver(()=>{cancelAnimationFrame(e),e=requestAnimationFrame(c)}).observe(t)}let l=()=>{let e=!1,n=r=>{e||r&&r.propertyName!==`max-height`||(e=!0,t.removeEventListener(`transitionend`,n),t.dataset.collapsed===void 0&&(t.style.maxHeight=``))};t.addEventListener(`transitionend`,n),window.setTimeout(n,600)};e.addEventListener(`click`,()=>{a=!0,t.dataset.collapsed===void 0?(t.style.maxHeight=`${t.scrollHeight}px`,t.offsetHeight,requestAnimationFrame(()=>{t.dataset.collapsed=``,t.style.maxHeight=``}),o(!1)):(t.style.maxHeight=`${t.scrollHeight}px`,t.offsetHeight,delete t.dataset.collapsed,o(!0)),l()})}function ta(e=document){e.querySelectorAll(`[data-thread-context-toggle]`).forEach(ea)}function na(e){let t=e.closest(`.thread-group-detail`);return t?t.querySelector(`.thread-detail-item`)===e:!1}function ra(){return globalThis.location.hash===`#continue`}function ia(e=document){let t=e.querySelector(`[data-post-current]`);if(!(t instanceof HTMLElement))return;let n=ra();if(globalThis.location.hash&&!n)return;let r=n?`auto`:`smooth`,i=na(t);requestAnimationFrame(()=>{i&&!n||t.scrollIntoView({behavior:r,block:`start`})})}document.addEventListener(`DOMContentLoaded`,()=>{ta(document),ia(document)}),document.querySelectorAll(`.archive-chip-dropdown`).forEach(e=>{let t=e.querySelector(`:scope > button`),n=e.querySelector(`:scope > [data-popover]`),r=n?n.querySelector(`[role="listbox"]`):null;if(!t||!n||!r)return;let i=Array.from(r.querySelectorAll(`[role="option"]`)),a=e.classList.contains(`archive-chip-media`),o=e.dataset.filterKey,s=new Set;a&&i.forEach(e=>{!e.dataset.navigate&&e.getAttribute(`aria-selected`)===`true`&&s.add(e.dataset.value)});let c=new Set(s),l=()=>{document.dispatchEvent(new CustomEvent(`basecoat:popover`,{detail:{source:e}})),n.setAttribute(`aria-hidden`,`false`),t.setAttribute(`aria-expanded`,`true`),a&&(c=new Set(s))},u=(e=!0)=>{if(n.getAttribute(`aria-hidden`)!==`true`&&(n.setAttribute(`aria-hidden`,`true`),t.setAttribute(`aria-expanded`,`false`),e&&t.focus(),a&&o&&(s.size!==c.size||[...s].some(e=>!c.has(e))))){let e=new URL(window.location.href),t=[...s];t.length>0?e.searchParams.set(o,t.join(`,`)):e.searchParams.delete(o),e.searchParams.delete(`hasMedia`),e.searchParams.delete(`page`),window.location.href=e.pathname+(e.search||``)}};t.addEventListener(`click`,e=>{e.target.closest(`.archive-chip-clear`)||(t.getAttribute(`aria-expanded`)===`true`?u():l())}),document.addEventListener(`click`,t=>{e.contains(t.target)||u(!1)}),document.addEventListener(`basecoat:popover`,t=>{t.detail.source!==e&&u(!1)}),r.addEventListener(`click`,e=>{let t=e.target.closest(`[role="option"]`);if(t){if(t.dataset.navigate){let e=t.dataset.value;typeof e==`string`&&e.startsWith(`/`)&&(window.location.href=e);return}if(a){let e=t.dataset.value;s.has(e)?(s.delete(e),t.removeAttribute(`aria-selected`)):(s.add(e),t.setAttribute(`aria-selected`,`true`))}else{let e=t.dataset.value;typeof e==`string`&&e.startsWith(`/`)&&(window.location.href=e)}}});let d=-1,f=e=>{d>-1&&i[d]&&i[d].classList.remove(`active`),d=e,d>-1&&i[d]&&(i[d].classList.add(`active`),i[d].scrollIntoView({block:`nearest`}))};r.addEventListener(`mousemove`,e=>{let t=e.target.closest(`[role="option"]`);if(t){let e=i.indexOf(t);e!==-1&&e!==d&&f(e)}}),r.addEventListener(`mouseleave`,()=>{f(-1)}),t.addEventListener(`keydown`,e=>{let t=n.getAttribute(`aria-hidden`)===`false`;if(e.key===`Escape`){t&&(e.preventDefault(),u());return}if(!t&&[`ArrowDown`,`ArrowUp`].includes(e.key)){e.preventDefault(),l();return}t&&(e.preventDefault(),e.key===`ArrowDown`?f(Math.min(d+1,i.length-1)):e.key===`ArrowUp`?f(Math.max(d-1,0)):e.key===`Enter`&&d>-1&&(i[d].click(),!a&&!i[d].dataset.navigate&&u()))})});function aa(e){let t=e.querySelector(`.site-header-more-btn`),n=e.querySelector(`.site-header-more-popover`);if(!t||!n||t.dataset.moreInitialized===`true`)return;t.dataset.moreInitialized=`true`;function r(){n.setAttribute(`aria-hidden`,`false`),t.setAttribute(`aria-expanded`,`true`),document.dispatchEvent(new CustomEvent(`basecoat:popover`,{detail:{source:t.parentElement}}))}function i(e=!1){n.setAttribute(`aria-hidden`,`true`),t.setAttribute(`aria-expanded`,`false`),e&&t.focus()}t.addEventListener(`click`,e=>{e.preventDefault(),e.stopPropagation(),t.getAttribute(`aria-expanded`)===`true`?i():r()}),document.addEventListener(`click`,e=>{e.target instanceof Node&&(t.parentElement?.contains(e.target)||i())}),document.addEventListener(`keydown`,e=>{e.key===`Escape`&&n.getAttribute(`aria-hidden`)===`false`&&i(!0)}),document.addEventListener(`basecoat:popover`,e=>{e.detail?.source!==t.parentElement&&i()})}var oa=`jant:nav-fresh-visits`;function sa(){let e=document.createElement(`span`);return e.className=`site-header-link-fresh`,e.setAttribute(`aria-hidden`,`true`),e.textContent=`*`,e}function ca(e){try{let t=JSON.parse(localStorage.getItem(oa)||`{}`),n=location.pathname,r=e.querySelectorAll(`[data-fresh-at]`);for(let e of r){let r=new URL(e.href).pathname,i=parseInt(e.dataset.freshAt,10);if(r===n)t[r]=Math.floor(Date.now()/1e3);else{let n=t[r];if(!n||n<i){let t=e.querySelector(`svg`);e.insertBefore(sa(),t)}}}localStorage.setItem(oa,JSON.stringify(t))}catch{}}function la(e=document){let t=e.querySelector(`.site-header-hamburger`),n=e.querySelector(`#site-nav-drawer`),r=e.querySelector(`.site-nav-drawer-backdrop`),i=n?.querySelector(`.site-nav-drawer-close`);if(ca(e),aa(e),!t||!n||!r||t.dataset.drawerInitialized===`true`)return;t.dataset.drawerInitialized=`true`;function a(){n.setAttribute(`aria-hidden`,`false`),n.removeAttribute(`inert`),r.setAttribute(`aria-hidden`,`false`),t.setAttribute(`aria-expanded`,`true`),document.documentElement.classList.add(`drawer-open`);let e=n.querySelector(`.site-nav-drawer-close`)??n.querySelector(`a[href], button`);e&&e.focus()}function o(e=!0){n.setAttribute(`aria-hidden`,`true`),r.setAttribute(`aria-hidden`,`true`),t.setAttribute(`aria-expanded`,`false`),document.documentElement.classList.remove(`drawer-open`),n.addEventListener(`transitionend`,()=>{n.getAttribute(`aria-hidden`)===`true`&&n.setAttribute(`inert`,``)},{once:!0}),e&&t.focus()}t.addEventListener(`click`,()=>{t.getAttribute(`aria-expanded`)===`true`?o():a()}),i?.addEventListener(`click`,()=>o()),r.addEventListener(`click`,()=>o()),n.addEventListener(`click`,e=>{e.target instanceof Element&&e.target.closest(`a[href]`)&&o(!1)}),n.addEventListener(`keydown`,e=>{e.key===`Escape`&&(e.preventDefault(),o())})}la();function ua(e=document){e.querySelectorAll(`.collection-sort-menu`).forEach(e=>{if(e.dataset.collectionSortMenuInitialized===`true`)return;let t=e.querySelector(`:scope > .collection-sort-trigger`),n=e.querySelector(`:scope > [data-popover]`),r=n?.querySelector(`[data-collection-sort-options]`);if(!(t instanceof HTMLButtonElement)||!n||!r)return;let i=(e=!1)=>{n.getAttribute(`aria-hidden`)!==`true`&&(n.setAttribute(`aria-hidden`,`true`),t.setAttribute(`aria-expanded`,`false`),e&&t.focus())},a=()=>{document.dispatchEvent(new CustomEvent(`basecoat:popover`,{detail:{source:e}})),n.setAttribute(`aria-hidden`,`false`),t.setAttribute(`aria-expanded`,`true`)};t.addEventListener(`click`,e=>{e.preventDefault(),e.stopPropagation(),t.getAttribute(`aria-expanded`)===`true`?i(!1):a()}),t.addEventListener(`keydown`,e=>{if(e.key===`Escape`){e.preventDefault(),i(!0);return}if(e.key===`ArrowDown`){e.preventDefault(),t.getAttribute(`aria-expanded`)!==`true`&&a();let n=r.querySelector(`a[href]`);n instanceof HTMLElement&&n.focus()}}),n.addEventListener(`keydown`,e=>{e.key===`Escape`&&(e.preventDefault(),i(!0))}),document.addEventListener(`click`,t=>{t.target instanceof Node&&(e.contains(t.target)||i(!1))}),document.addEventListener(`basecoat:popover`,t=>{t.detail?.source!==e&&i(!1)}),e.dataset.collectionSortMenuInitialized=`true`})}ua(),rn(),document.documentElement.dataset.jantVersion=`0.6.3-2de57b4c4be1aa1c`;export{tn as _,Gi as a,Ai as c,hi as d,Z as f,ui as g,K as h,$ as i,ji as l,q as m,Ki as n,Mi as o,J as p,Wi as r,Ni as s,qi as t,ki as u};
+    `:J}};customElements.define(`jant-text-preview`,Xi);var Zi=8;function Qi(e,t){let n=Number.parseFloat(e);return Number.isFinite(n)?n:t}function $i(e){return Qi(getComputedStyle(e).getPropertyValue(`--site-thread-context-max-height`).trim(),240)}function ea(e){if(e.dataset.threadContextToggleBound===`1`)return;e.dataset.threadContextToggleBound=`1`;let t=e.previousElementSibling;if(!(t instanceof HTMLElement)||t.dataset.threadContext===void 0)return;let n=e.querySelector(`.thread-context-toggle-label`),r=e.dataset.labelMore??`Show more`,i=e.dataset.labelLess??`Show less`,a=!1,o=t=>{e.setAttribute(`aria-expanded`,t?`true`:`false`),n&&(n.textContent=t?i:r)},s=()=>Array.from(t.querySelectorAll(`img`)).every(e=>e.complete),c=()=>{if(a)return;let n=$i(t),r=t.scrollHeight>n+Zi;t.dataset.collapsed===void 0&&(t.dataset.collapsed=``),r?(e.hidden=!1,o(!1)):s()&&(e.hidden=!0)};if(c(),t.querySelectorAll(`img`).forEach(e=>{e.complete||(e.addEventListener(`load`,c,{once:!0}),e.addEventListener(`error`,c,{once:!0}))}),`ResizeObserver`in globalThis){let e=0;new globalThis.ResizeObserver(()=>{cancelAnimationFrame(e),e=requestAnimationFrame(c)}).observe(t)}let l=()=>{let e=!1,n=r=>{e||r&&r.propertyName!==`max-height`||(e=!0,t.removeEventListener(`transitionend`,n),t.dataset.collapsed===void 0&&(t.style.maxHeight=``))};t.addEventListener(`transitionend`,n),window.setTimeout(n,600)};e.addEventListener(`click`,()=>{a=!0,t.dataset.collapsed===void 0?(t.style.maxHeight=`${t.scrollHeight}px`,t.offsetHeight,requestAnimationFrame(()=>{t.dataset.collapsed=``,t.style.maxHeight=``}),o(!1)):(t.style.maxHeight=`${t.scrollHeight}px`,t.offsetHeight,delete t.dataset.collapsed,o(!0)),l()})}function ta(e=document){e.querySelectorAll(`[data-thread-context-toggle]`).forEach(ea)}function na(e){let t=e.closest(`.thread-group-detail`);return t?t.querySelector(`.thread-detail-item`)===e:!1}function ra(){return globalThis.location.hash===`#continue`}function ia(e=document){let t=e.querySelector(`[data-post-current]`);if(!(t instanceof HTMLElement))return;let n=ra();if(globalThis.location.hash&&!n)return;let r=n?`auto`:`smooth`,i=na(t);requestAnimationFrame(()=>{i&&!n||t.scrollIntoView({behavior:r,block:`start`})})}document.addEventListener(`DOMContentLoaded`,()=>{ta(document),ia(document)}),document.querySelectorAll(`.archive-chip-dropdown`).forEach(e=>{let t=e.querySelector(`:scope > button`),n=e.querySelector(`:scope > [data-popover]`),r=n?n.querySelector(`[role="listbox"]`):null;if(!t||!n||!r)return;let i=Array.from(r.querySelectorAll(`[role="option"]`)),a=e.classList.contains(`archive-chip-media`),o=e.dataset.filterKey,s=new Set;a&&i.forEach(e=>{!e.dataset.navigate&&e.getAttribute(`aria-selected`)===`true`&&s.add(e.dataset.value)});let c=new Set(s),l=()=>{document.dispatchEvent(new CustomEvent(`basecoat:popover`,{detail:{source:e}})),n.setAttribute(`aria-hidden`,`false`),t.setAttribute(`aria-expanded`,`true`),a&&(c=new Set(s))},u=(e=!0)=>{if(n.getAttribute(`aria-hidden`)!==`true`&&(n.setAttribute(`aria-hidden`,`true`),t.setAttribute(`aria-expanded`,`false`),e&&t.focus(),a&&o&&(s.size!==c.size||[...s].some(e=>!c.has(e))))){let e=new URL(window.location.href),t=[...s];t.length>0?e.searchParams.set(o,t.join(`,`)):e.searchParams.delete(o),e.searchParams.delete(`hasMedia`),e.searchParams.delete(`page`),window.location.href=e.pathname+(e.search||``)}};t.addEventListener(`click`,e=>{e.target.closest(`.archive-chip-clear`)||(t.getAttribute(`aria-expanded`)===`true`?u():l())}),document.addEventListener(`click`,t=>{e.contains(t.target)||u(!1)}),document.addEventListener(`basecoat:popover`,t=>{t.detail.source!==e&&u(!1)}),r.addEventListener(`click`,e=>{let t=e.target.closest(`[role="option"]`);if(t){if(t.dataset.navigate){let e=t.dataset.value;typeof e==`string`&&e.startsWith(`/`)&&(window.location.href=e);return}if(a){let e=t.dataset.value;s.has(e)?(s.delete(e),t.removeAttribute(`aria-selected`)):(s.add(e),t.setAttribute(`aria-selected`,`true`))}else{let e=t.dataset.value;typeof e==`string`&&e.startsWith(`/`)&&(window.location.href=e)}}});let d=-1,f=e=>{d>-1&&i[d]&&i[d].classList.remove(`active`),d=e,d>-1&&i[d]&&(i[d].classList.add(`active`),i[d].scrollIntoView({block:`nearest`}))};r.addEventListener(`mousemove`,e=>{let t=e.target.closest(`[role="option"]`);if(t){let e=i.indexOf(t);e!==-1&&e!==d&&f(e)}}),r.addEventListener(`mouseleave`,()=>{f(-1)}),t.addEventListener(`keydown`,e=>{let t=n.getAttribute(`aria-hidden`)===`false`;if(e.key===`Escape`){t&&(e.preventDefault(),u());return}if(!t&&[`ArrowDown`,`ArrowUp`].includes(e.key)){e.preventDefault(),l();return}t&&(e.preventDefault(),e.key===`ArrowDown`?f(Math.min(d+1,i.length-1)):e.key===`ArrowUp`?f(Math.max(d-1,0)):e.key===`Enter`&&d>-1&&(i[d].click(),!a&&!i[d].dataset.navigate&&u()))})});function aa(e){let t=e.querySelector(`.site-header-more-btn`),n=e.querySelector(`.site-header-more-popover`);if(!t||!n||t.dataset.moreInitialized===`true`)return;t.dataset.moreInitialized=`true`;function r(){n.setAttribute(`aria-hidden`,`false`),t.setAttribute(`aria-expanded`,`true`),document.dispatchEvent(new CustomEvent(`basecoat:popover`,{detail:{source:t.parentElement}}))}function i(e=!1){n.setAttribute(`aria-hidden`,`true`),t.setAttribute(`aria-expanded`,`false`),e&&t.focus()}t.addEventListener(`click`,e=>{e.preventDefault(),e.stopPropagation(),t.getAttribute(`aria-expanded`)===`true`?i():r()}),document.addEventListener(`click`,e=>{e.target instanceof Node&&(t.parentElement?.contains(e.target)||i())}),document.addEventListener(`keydown`,e=>{e.key===`Escape`&&n.getAttribute(`aria-hidden`)===`false`&&i(!0)}),document.addEventListener(`basecoat:popover`,e=>{e.detail?.source!==t.parentElement&&i()})}var oa=`jant:nav-fresh-visits`;function sa(){let e=document.createElement(`span`);return e.className=`site-header-link-fresh`,e.setAttribute(`aria-hidden`,`true`),e.textContent=`*`,e}function ca(e){try{let t=JSON.parse(localStorage.getItem(oa)||`{}`),n=location.pathname,r=e.querySelectorAll(`[data-fresh-at]`);for(let e of r){let r=new URL(e.href).pathname,i=parseInt(e.dataset.freshAt,10);if(r===n)t[r]=Math.floor(Date.now()/1e3);else{let n=t[r];if(!n||n<i){let t=e.querySelector(`svg`);e.insertBefore(sa(),t)}}}localStorage.setItem(oa,JSON.stringify(t))}catch{}}function la(e=document){let t=e.querySelector(`.site-header-hamburger`),n=e.querySelector(`#site-nav-drawer`),r=e.querySelector(`.site-nav-drawer-backdrop`),i=n?.querySelector(`.site-nav-drawer-close`);if(ca(e),aa(e),!t||!n||!r||t.dataset.drawerInitialized===`true`)return;t.dataset.drawerInitialized=`true`;function a(){n.setAttribute(`aria-hidden`,`false`),n.removeAttribute(`inert`),r.setAttribute(`aria-hidden`,`false`),t.setAttribute(`aria-expanded`,`true`),document.documentElement.classList.add(`drawer-open`);let e=n.querySelector(`.site-nav-drawer-close`)??n.querySelector(`a[href], button`);e&&e.focus()}function o(e=!0){n.setAttribute(`aria-hidden`,`true`),r.setAttribute(`aria-hidden`,`true`),t.setAttribute(`aria-expanded`,`false`),document.documentElement.classList.remove(`drawer-open`),n.addEventListener(`transitionend`,()=>{n.getAttribute(`aria-hidden`)===`true`&&n.setAttribute(`inert`,``)},{once:!0}),e&&t.focus()}t.addEventListener(`click`,()=>{t.getAttribute(`aria-expanded`)===`true`?o():a()}),i?.addEventListener(`click`,()=>o()),r.addEventListener(`click`,()=>o()),n.addEventListener(`click`,e=>{e.target instanceof Element&&e.target.closest(`a[href]`)&&o(!1)}),n.addEventListener(`keydown`,e=>{e.key===`Escape`&&(e.preventDefault(),o())})}la();function ua(e=document){e.querySelectorAll(`.collection-sort-menu`).forEach(e=>{if(e.dataset.collectionSortMenuInitialized===`true`)return;let t=e.querySelector(`:scope > .collection-sort-trigger`),n=e.querySelector(`:scope > [data-popover]`),r=n?.querySelector(`[data-collection-sort-options]`);if(!(t instanceof HTMLButtonElement)||!n||!r)return;let i=(e=!1)=>{n.getAttribute(`aria-hidden`)!==`true`&&(n.setAttribute(`aria-hidden`,`true`),t.setAttribute(`aria-expanded`,`false`),e&&t.focus())},a=()=>{document.dispatchEvent(new CustomEvent(`basecoat:popover`,{detail:{source:e}})),n.setAttribute(`aria-hidden`,`false`),t.setAttribute(`aria-expanded`,`true`)};t.addEventListener(`click`,e=>{e.preventDefault(),e.stopPropagation(),t.getAttribute(`aria-expanded`)===`true`?i(!1):a()}),t.addEventListener(`keydown`,e=>{if(e.key===`Escape`){e.preventDefault(),i(!0);return}if(e.key===`ArrowDown`){e.preventDefault(),t.getAttribute(`aria-expanded`)!==`true`&&a();let n=r.querySelector(`a[href]`);n instanceof HTMLElement&&n.focus()}}),n.addEventListener(`keydown`,e=>{e.key===`Escape`&&(e.preventDefault(),i(!0))}),document.addEventListener(`click`,t=>{t.target instanceof Node&&(e.contains(t.target)||i(!1))}),document.addEventListener(`basecoat:popover`,t=>{t.detail?.source!==e&&i(!1)}),e.dataset.collectionSortMenuInitialized=`true`})}ua(),rn(),document.documentElement.dataset.jantVersion=`0.6.4-619b1a90eba61395`;export{tn as _,Gi as a,Ai as c,hi as d,Z as f,ui as g,K as h,$ as i,ji as l,q as m,Ki as n,Mi as o,J as p,Wi as r,Ni as s,qi as t,ki as u};

package/dist/client/_assets/{client-auth-LBSZxqNC.js → client-auth-B9T2QFl2.js}

@@ -1,4 +1,4 @@
-import{a as e,n as t,o as n,t as r}from"./chunks/url-pLre2DM_.js";import{_ as i,a,c as o,d as s,f as c,g as l,h as u,i as d,l as f,m as p,n as m,o as h,p as g,r as _,s as v,t as y,u as b}from"./client-CTrEFM5W.js";var x={maxShortSide:1920,maxLongSide:8192,quality:.85,mimeType:`image/webp`};function S(e){return new Promise((t,n)=>{let r=new Image;r.onload=()=>{URL.revokeObjectURL(r.src),t(r)},r.onerror=()=>n(Error(`Failed to load image`)),r.src=URL.createObjectURL(e)})}function C(e,t,n){if(Math.max(e,t)>n.maxLongSide)return{passthrough:!0,width:e,height:t};let r=Math.min(e,t);if(r<=n.maxShortSide)return{passthrough:!1,width:e,height:t};let i=n.maxShortSide/r;return{passthrough:!1,width:Math.round(e*i),height:Math.round(t*i)}}async function ee(e,t,n){let r=await new Promise((r,i)=>{e.toBlob(e=>e?r(e):i(Error(`Failed to create blob`)),t,n)});return t!==`image/png`&&r.type===`image/png`?new Promise((t,r)=>{e.toBlob(e=>e?t(e):r(Error(`Failed to create blob`)),`image/jpeg`,n)}):r}async function te(e,t={}){let n={...x,...t},r=await S(e),i=C(r.width,r.height,n);if(i.passthrough)return{blob:e,width:i.width,height:i.height,processed:!1};let a=document.createElement(`canvas`);a.width=i.width,a.height=i.height;let o=a.getContext(`2d`);if(!o)throw Error(`Failed to get canvas context`);return o.drawImage(r,0,0,i.width,i.height),{blob:await ee(a,n.mimeType,n.quality),width:i.width,height:i.height,processed:!0}}async function ne(e,t={}){let n=await te(e,t);if(!n.processed)return{file:e,width:n.width,height:n.height};let r={"image/webp":`webp`,"image/jpeg":`jpg`,"image/png":`png`}[n.blob.type]??`png`,i=`${e.name.replace(/\.[^.]+$/,``)}.${r}`;return{file:new File([n.blob],i,{type:n.blob.type}),width:n.width,height:n.height}}var re={process:te,processToFile:ne},ie={ICO_16:16,ICO_32:32,APPLE_TOUCH:512};function ae(e){let t=e.length*16,n=6+t,r=new ArrayBuffer(6+t),i=new DataView(r);i.setUint16(0,0,!0),i.setUint16(2,1,!0),i.setUint16(4,e.length,!0);let a=[];for(let t=0;t<e.length;t++){let r=e[t],o=6+t*16;i.setUint8(o+0,r.size<256?r.size:0),i.setUint8(o+1,r.size<256?r.size:0),i.setUint8(o+2,0),i.setUint8(o+3,0),i.setUint16(o+4,1,!0),i.setUint16(o+6,32,!0),i.setUint32(o+8,r.png.byteLength,!0),i.setUint32(o+12,n,!0),n+=r.png.byteLength,a.push(r.png)}return new Blob([r,...a],{type:`image/x-icon`})}function oe(e){return typeof e==`object`&&!!e}function w(e,t){if(!oe(e))return;let n=e[t];return typeof n==`string`?n:void 0}function se(e,t){if(!oe(e))return;let n=e[t];return typeof n==`boolean`?n:void 0}function ce(e,t){if(!oe(e))return;let n=e[t];return typeof n==`number`?n:void 0}async function le(e){let t=await e.json();return oe(t)?t:{}}var ue=180;function de(e){return new Promise((t,n)=>{let r=new Image;r.onload=()=>{URL.revokeObjectURL(r.src),t(r)},r.onerror=()=>n(Error(`Failed to load image`)),r.src=URL.createObjectURL(e)})}function fe(e,t){let n=document.createElement(`canvas`);n.width=t,n.height=t;let r=n.getContext(`2d`);if(!r)throw Error(`Failed to get canvas context`);r.imageSmoothingEnabled=!0,r.imageSmoothingQuality=`high`;let i=Math.max(t/e.width,t/e.height),a=t/i,o=t/i,s=(e.width-a)/2,c=(e.height-o)/2;return r.drawImage(e,s,c,a,o,0,0,t,t),new Promise((e,t)=>{n.toBlob(n=>{n?e(n):t(Error(`Failed to create PNG blob`))},`image/png`)})}function pe(e,t){return e.type===`image/png`&&t.width===t.height&&t.width>=ue&&t.height>=ue}async function me(e,t){let n=e.closest(`form`)?.querySelector(`label`),r=n?.textContent??``;try{n&&(n.textContent=e.dataset.textProcessing||`Processing...`);let r=await de(t),a=t,o=t.name;if(t.type!==`image/svg+xml`){let e=await fe(r,512);a=new File([e],t.name.replace(/\.[^.]+$/,`.png`),{type:`image/png`}),o=a.name}let s=pe(t,r)?Promise.resolve(t):fe(r,ie.APPLE_TOUCH),[c,l,u]=await Promise.all([fe(r,16),fe(r,32),s]),[d,f]=await Promise.all([c.arrayBuffer(),l.arrayBuffer()]),p=ae([{size:16,png:d},{size:32,png:f}]);n&&(n.textContent=e.dataset.textUploading||`Uploading...`);let m=new FormData;m.append(`file`,a,o),m.append(`favicon`,p,`favicon.ico`),m.append(`appleTouch`,u,`apple-touch-icon.png`);let h=await fetch(i(`/settings/avatar`),{method:`POST`,headers:{Accept:`application/json`},body:m});if(!h.ok){let t=e.dataset.textError||`Upload failed. Please try again.`;try{let e=await le(h);t=w(e,`error`)??w(e,`message`)??t}catch{}throw Error(t)}let g=await le(h),_=w(g,`status`),v=w(g,`url`);if(_===`redirect`&&v){window.location.href=v;return}window.location.href=i(`/settings/avatar?saved`)}catch(t){n&&(n.textContent=r),d(t instanceof Error&&t.message?t.message:e.dataset.textError||`Upload failed. Please try again.`,`error`)}e.value=``}function he(){document.addEventListener(`change`,e=>{let t=e.target.closest(`[data-avatar-upload]`);t?.files?.[0]&&(e.stopPropagation(),me(t,t.files[0]))})}he();var ge=`default`,_e=class extends c{static properties={_open:{state:!0},_title:{state:!0},_message:{state:!0},_confirmLabel:{state:!0},_cancelLabel:{state:!0},_tone:{state:!0}};#e=[];#t=null;createRenderRoot(){return this.innerHTML=``,this}constructor(){super(),this._open=!1,this._title=``,this._message=``,this._confirmLabel=``,this._cancelLabel=``,this._tone=ge}disconnectedCallback(){super.disconnectedCallback();let e=this.#t;this.#t=null,e?.resolve(!1);for(let e of this.#e.splice(0))e.resolve(!1)}async confirm(e){return await new Promise(t=>{this.#e.push({...e,tone:e.tone??ge,resolve:t}),this.#t||this.#n()})}async#n(){if(this.#t||this.#e.length===0)return;let e=this.#e.shift();if(!e)return;this.#t=e,this._title=e.title??``,this._message=e.message,this._confirmLabel=e.confirmLabel,this._cancelLabel=e.cancelLabel,this._tone=e.tone??ge,this._open=!0,await this.updateComplete;let t=this.querySelector(`.confirm-dialog`);t&&(t.open||t.showModal(),t.querySelector(`.confirm-dialog-panel`)?.focus())}#r(e){let t=this.#t;if(!t)return;this.#t=null;let n=this.querySelector(`.confirm-dialog`);n?.open&&n.close(),this._open=!1,this._title=``,this._message=``,this._confirmLabel=``,this._cancelLabel=``,this._tone=ge,t.resolve(e),queueMicrotask(()=>void this.#n())}#i=e=>{e.preventDefault(),this.#r(!1)};#a=e=>{e.target===e.currentTarget&&this.#r(!1)};#o=e=>{if(e.key===`Escape`){e.preventDefault(),e.stopPropagation(),this.#r(!1);return}let t=e.target,n=t instanceof HTMLButtonElement||t instanceof HTMLInputElement||t instanceof HTMLSelectElement||t instanceof HTMLTextAreaElement||t instanceof HTMLAnchorElement;e.key===`Enter`&&!e.defaultPrevented&&!e.metaKey&&!e.ctrlKey&&!e.altKey&&!e.shiftKey&&!n&&(e.preventDefault(),this.#r(!0))};#s(){if(this._title)return{title:this._title,message:this._message};let e=this._message.match(/^(.+?[?？])\s+(.+)$/u);return e?{title:e[1],message:e[2]}:{title:this._message,message:``}}render(){if(!this._open)return g;let{title:e,message:t}=this.#s(),n=this._tone===`danger`?`btn-destructive`:`btn`;return u`
+import{a as e,n as t,o as n,t as r}from"./chunks/url-pLre2DM_.js";import{_ as i,a,c as o,d as s,f as c,g as l,h as u,i as d,l as f,m as p,n as m,o as h,p as g,r as _,s as v,t as y,u as b}from"./client-B1XjvRqE.js";var x={maxShortSide:1920,maxLongSide:8192,quality:.85,mimeType:`image/webp`};function S(e){return new Promise((t,n)=>{let r=new Image;r.onload=()=>{URL.revokeObjectURL(r.src),t(r)},r.onerror=()=>n(Error(`Failed to load image`)),r.src=URL.createObjectURL(e)})}function C(e,t,n){if(Math.max(e,t)>n.maxLongSide)return{passthrough:!0,width:e,height:t};let r=Math.min(e,t);if(r<=n.maxShortSide)return{passthrough:!1,width:e,height:t};let i=n.maxShortSide/r;return{passthrough:!1,width:Math.round(e*i),height:Math.round(t*i)}}async function ee(e,t,n){let r=await new Promise((r,i)=>{e.toBlob(e=>e?r(e):i(Error(`Failed to create blob`)),t,n)});return t!==`image/png`&&r.type===`image/png`?new Promise((t,r)=>{e.toBlob(e=>e?t(e):r(Error(`Failed to create blob`)),`image/jpeg`,n)}):r}async function te(e,t={}){let n={...x,...t},r=await S(e),i=C(r.width,r.height,n);if(i.passthrough)return{blob:e,width:i.width,height:i.height,processed:!1};let a=document.createElement(`canvas`);a.width=i.width,a.height=i.height;let o=a.getContext(`2d`);if(!o)throw Error(`Failed to get canvas context`);return o.drawImage(r,0,0,i.width,i.height),{blob:await ee(a,n.mimeType,n.quality),width:i.width,height:i.height,processed:!0}}async function ne(e,t={}){let n=await te(e,t);if(!n.processed)return{file:e,width:n.width,height:n.height};let r={"image/webp":`webp`,"image/jpeg":`jpg`,"image/png":`png`}[n.blob.type]??`png`,i=`${e.name.replace(/\.[^.]+$/,``)}.${r}`;return{file:new File([n.blob],i,{type:n.blob.type}),width:n.width,height:n.height}}var re={process:te,processToFile:ne},ie={ICO_16:16,ICO_32:32,APPLE_TOUCH:512};function ae(e){let t=e.length*16,n=6+t,r=new ArrayBuffer(6+t),i=new DataView(r);i.setUint16(0,0,!0),i.setUint16(2,1,!0),i.setUint16(4,e.length,!0);let a=[];for(let t=0;t<e.length;t++){let r=e[t],o=6+t*16;i.setUint8(o+0,r.size<256?r.size:0),i.setUint8(o+1,r.size<256?r.size:0),i.setUint8(o+2,0),i.setUint8(o+3,0),i.setUint16(o+4,1,!0),i.setUint16(o+6,32,!0),i.setUint32(o+8,r.png.byteLength,!0),i.setUint32(o+12,n,!0),n+=r.png.byteLength,a.push(r.png)}return new Blob([r,...a],{type:`image/x-icon`})}function oe(e){return typeof e==`object`&&!!e}function w(e,t){if(!oe(e))return;let n=e[t];return typeof n==`string`?n:void 0}function se(e,t){if(!oe(e))return;let n=e[t];return typeof n==`boolean`?n:void 0}function ce(e,t){if(!oe(e))return;let n=e[t];return typeof n==`number`?n:void 0}async function le(e){let t=await e.json();return oe(t)?t:{}}var ue=180;function de(e){return new Promise((t,n)=>{let r=new Image;r.onload=()=>{URL.revokeObjectURL(r.src),t(r)},r.onerror=()=>n(Error(`Failed to load image`)),r.src=URL.createObjectURL(e)})}function fe(e,t){let n=document.createElement(`canvas`);n.width=t,n.height=t;let r=n.getContext(`2d`);if(!r)throw Error(`Failed to get canvas context`);r.imageSmoothingEnabled=!0,r.imageSmoothingQuality=`high`;let i=Math.max(t/e.width,t/e.height),a=t/i,o=t/i,s=(e.width-a)/2,c=(e.height-o)/2;return r.drawImage(e,s,c,a,o,0,0,t,t),new Promise((e,t)=>{n.toBlob(n=>{n?e(n):t(Error(`Failed to create PNG blob`))},`image/png`)})}function pe(e,t){return e.type===`image/png`&&t.width===t.height&&t.width>=ue&&t.height>=ue}async function me(e,t){let n=e.closest(`form`)?.querySelector(`label`),r=n?.textContent??``;try{n&&(n.textContent=e.dataset.textProcessing||`Processing...`);let r=await de(t),a=t,o=t.name;if(t.type!==`image/svg+xml`){let e=await fe(r,512);a=new File([e],t.name.replace(/\.[^.]+$/,`.png`),{type:`image/png`}),o=a.name}let s=pe(t,r)?Promise.resolve(t):fe(r,ie.APPLE_TOUCH),[c,l,u]=await Promise.all([fe(r,16),fe(r,32),s]),[d,f]=await Promise.all([c.arrayBuffer(),l.arrayBuffer()]),p=ae([{size:16,png:d},{size:32,png:f}]);n&&(n.textContent=e.dataset.textUploading||`Uploading...`);let m=new FormData;m.append(`file`,a,o),m.append(`favicon`,p,`favicon.ico`),m.append(`appleTouch`,u,`apple-touch-icon.png`);let h=await fetch(i(`/settings/avatar`),{method:`POST`,headers:{Accept:`application/json`},body:m});if(!h.ok){let t=e.dataset.textError||`Upload failed. Please try again.`;try{let e=await le(h);t=w(e,`error`)??w(e,`message`)??t}catch{}throw Error(t)}let g=await le(h),_=w(g,`status`),v=w(g,`url`);if(_===`redirect`&&v){window.location.href=v;return}window.location.href=i(`/settings/avatar?saved`)}catch(t){n&&(n.textContent=r),d(t instanceof Error&&t.message?t.message:e.dataset.textError||`Upload failed. Please try again.`,`error`)}e.value=``}function he(){document.addEventListener(`change`,e=>{let t=e.target.closest(`[data-avatar-upload]`);t?.files?.[0]&&(e.stopPropagation(),me(t,t.files[0]))})}he();var ge=`default`,_e=class extends c{static properties={_open:{state:!0},_title:{state:!0},_message:{state:!0},_confirmLabel:{state:!0},_cancelLabel:{state:!0},_tone:{state:!0}};#e=[];#t=null;createRenderRoot(){return this.innerHTML=``,this}constructor(){super(),this._open=!1,this._title=``,this._message=``,this._confirmLabel=``,this._cancelLabel=``,this._tone=ge}disconnectedCallback(){super.disconnectedCallback();let e=this.#t;this.#t=null,e?.resolve(!1);for(let e of this.#e.splice(0))e.resolve(!1)}async confirm(e){return await new Promise(t=>{this.#e.push({...e,tone:e.tone??ge,resolve:t}),this.#t||this.#n()})}async#n(){if(this.#t||this.#e.length===0)return;let e=this.#e.shift();if(!e)return;this.#t=e,this._title=e.title??``,this._message=e.message,this._confirmLabel=e.confirmLabel,this._cancelLabel=e.cancelLabel,this._tone=e.tone??ge,this._open=!0,await this.updateComplete;let t=this.querySelector(`.confirm-dialog`);t&&(t.open||t.showModal(),t.querySelector(`.confirm-dialog-panel`)?.focus())}#r(e){let t=this.#t;if(!t)return;this.#t=null;let n=this.querySelector(`.confirm-dialog`);n?.open&&n.close(),this._open=!1,this._title=``,this._message=``,this._confirmLabel=``,this._cancelLabel=``,this._tone=ge,t.resolve(e),queueMicrotask(()=>void this.#n())}#i=e=>{e.preventDefault(),this.#r(!1)};#a=e=>{e.target===e.currentTarget&&this.#r(!1)};#o=e=>{if(e.key===`Escape`){e.preventDefault(),e.stopPropagation(),this.#r(!1);return}let t=e.target,n=t instanceof HTMLButtonElement||t instanceof HTMLInputElement||t instanceof HTMLSelectElement||t instanceof HTMLTextAreaElement||t instanceof HTMLAnchorElement;e.key===`Enter`&&!e.defaultPrevented&&!e.metaKey&&!e.ctrlKey&&!e.altKey&&!e.shiftKey&&!n&&(e.preventDefault(),this.#r(!0))};#s(){if(this._title)return{title:this._title,message:this._message};let e=this._message.match(/^(.+?[?？])\s+(.+)$/u);return e?{title:e[1],message:e[2]}:{title:this._message,message:``}}render(){if(!this._open)return g;let{title:e,message:t}=this.#s(),n=this._tone===`danger`?`btn-destructive`:`btn`;return u`
       <dialog
         class="dialog confirm-dialog"
         @cancel=${this.#i}

package/dist/index.js

@@ -1,5 +1,5 @@
 import { v as url_exports } from "./url-XF0GbKGO.js";
-import { A as MAX_MEDIA_ATTACHMENTS, C as toMediaView, D as toPostViews, E as toPostView, F as STATUSES, I as TEXT_ATTACHMENT_CONTENT_FORMATS, M as MEDIA_KINDS, N as NAV_ITEM_TYPES, O as toSearchResultView, P as SORT_ORDERS, S as toArchiveGroupsWithMedia, T as toNavItemViews, b as createMediaContext, h as defaultFeedRenderer, j as MAX_PINNED_POSTS, k as FORMATS, t as createApp, w as toNavItemView, x as toArchiveGroups } from "./app-CyysIxj_.js";
+import { A as MAX_MEDIA_ATTACHMENTS, C as toMediaView, D as toPostViews, E as toPostView, F as STATUSES, I as TEXT_ATTACHMENT_CONTENT_FORMATS, M as MEDIA_KINDS, N as NAV_ITEM_TYPES, O as toSearchResultView, P as SORT_ORDERS, S as toArchiveGroupsWithMedia, T as toNavItemViews, b as createMediaContext, h as defaultFeedRenderer, j as MAX_PINNED_POSTS, k as FORMATS, t as createApp, w as toNavItemView, x as toArchiveGroups } from "./app-B-wKZB8f.js";
 import { T as time_exports, a as markdown_exports } from "./export-CzuQyg5h.js";
 import "./env-CoSe-1y4.js";
 import "./github-sync-Dbrb1DS5.js";

package/dist/node.js

@@ -1,5 +1,5 @@
 import "./url-XF0GbKGO.js";
-import { B as isAssetPath, L as buildThemeStyle, R as BUILTIN_COLOR_THEMES, _ as sqliteSchemaBundle, a as resolveDatabaseDialect, c as resolveConfig, d as setWebhook, f as BUILTIN_FONT_THEMES, g as pgSchemaBundle, i as createSiteService, l as getWebhookUrl, m as getFontThemeCssVariables, n as createNodeCliRuntime, o as getHostBasedStartupConfigurationIssues, p as getCjkSerifCssVariables, r as createNodeRequestRuntime, s as createStorageDriver, t as createApp, u as setMyCommands, v as createNodeDatabase, y as schema_exports, z as getPublicAssetBasePath } from "./app-CyysIxj_.js";
+import { B as isAssetPath, L as buildThemeStyle, R as BUILTIN_COLOR_THEMES, _ as sqliteSchemaBundle, a as resolveDatabaseDialect, c as resolveConfig, d as setWebhook, f as BUILTIN_FONT_THEMES, g as pgSchemaBundle, i as createSiteService, l as getWebhookUrl, m as getFontThemeCssVariables, n as createNodeCliRuntime, o as getHostBasedStartupConfigurationIssues, p as getCjkSerifCssVariables, r as createNodeRequestRuntime, s as createStorageDriver, t as createApp, u as setMyCommands, v as createNodeDatabase, y as schema_exports, z as getPublicAssetBasePath } from "./app-B-wKZB8f.js";
 import { t as createExportService } from "./export-CzuQyg5h.js";
 import { C as shouldTrustProxy, S as getTelegramWebhookSecret, b as getSiteResolutionMode, d as getHostedControlPlaneBaseUrl, i as getConfiguredSingleSitePathPrefix, l as getEnvString, r as getConfiguredSingleSiteOrigin, x as getTelegramBotPool, y as getPort } from "./env-CoSe-1y4.js";
 import "./github-sync-Dbrb1DS5.js";
@@ -529,7 +529,7 @@ async function createNodeRequestHandler(options) {
 async function start(env = process.env, app) {
 	const handler = await createNodeRequestHandler({
 		env,
-		app: async () => app ?? (await import("./app-BX2XKxq0.js")).createApp()
+		app: async () => app ?? (await import("./app-qwMcaTML.js")).createApp()
 	});
 	const hostname = resolveHost(env);
 	const port = resolvePort(env);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jant/core",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "A modern, open-source microblogging platform built on Cloudflare Workers",
   "type": "module",
   "exports": {

package/src/app.tsx

@@ -69,6 +69,7 @@ import { manifestRoutes } from "./routes/feed/manifest.js";
 // Middleware
 import { requireAuth } from "./middleware/auth.js";
 import { attachSession } from "./middleware/session.js";
+import { defaultCacheControl } from "./middleware/cache-control.js";
 import { requireOnboarding } from "./middleware/onboarding.js";
 import { errorHandler } from "./middleware/error-handler.js";
 import { withConfig } from "./middleware/config.js";
@@ -320,6 +321,12 @@ export function createApp(): App {
   // downstream handlers don't each call auth.api.getSession themselves.
   app.use("*", attachSession());
 
+  // Default every response without an explicit Cache-Control to
+  // `private, no-store`. Jant pages are auth-variant, so a shared/CDN cache
+  // must never store them; routes serving genuinely public resources (media,
+  // feeds, sitemaps, favicons) set their own Cache-Control and are untouched.
+  app.use("*", defaultCacheControl());
+
   app.use("*", async (c, next) => {
     const redirectUrl = await getHostedCanonicalRedirect({
       currentSite: c.var.currentSite,

package/src/middleware/__tests__/cache-control.test.ts

@@ -0,0 +1,50 @@
+import { describe, expect, it } from "vitest";
+import { Hono } from "hono";
+import type { Bindings } from "../../types.js";
+import type { AppVariables } from "../../types/app-context.js";
+import { defaultCacheControl } from "../cache-control.js";
+
+type Env = { Bindings: Bindings; Variables: AppVariables };
+
+function buildApp(): Hono<Env> {
+  const app = new Hono<Env>();
+  app.use("*", defaultCacheControl());
+
+  // Un-annotated dynamic page — the common case.
+  app.get("/", (c) => c.html("<h1>home</h1>"));
+
+  // Route that declares its own public cache policy (e.g. a feed).
+  app.get("/feed", (c) =>
+    c.body("<feed/>", 200, { "Cache-Control": "public, max-age=180" }),
+  );
+
+  // Route that already opts out explicitly.
+  app.get("/api/thing", (c) =>
+    c.json({ ok: true }, 200, { "Cache-Control": "no-store" }),
+  );
+
+  return app;
+}
+
+describe("defaultCacheControl", () => {
+  it("defaults un-annotated responses to private, no-store", async () => {
+    const response = await buildApp().request("/");
+    expect(response.headers.get("Cache-Control")).toBe("private, no-store");
+  });
+
+  it("leaves an explicit public cache policy untouched", async () => {
+    const response = await buildApp().request("/feed");
+    expect(response.headers.get("Cache-Control")).toBe("public, max-age=180");
+  });
+
+  it("leaves an explicit opt-out untouched", async () => {
+    const response = await buildApp().request("/api/thing");
+    expect(response.headers.get("Cache-Control")).toBe("no-store");
+  });
+
+  it("defaults not-found responses too", async () => {
+    const response = await buildApp().request("/missing");
+    expect(response.status).toBe(404);
+    expect(response.headers.get("Cache-Control")).toBe("private, no-store");
+  });
+});

package/src/middleware/cache-control.ts

@@ -0,0 +1,60 @@
+/**
+ * Cache-Control Middleware
+ *
+ * Sets a safe default `Cache-Control` on responses that don't declare one.
+ *
+ * Almost every Jant page is auth-variant: the same URL renders differently
+ * for the signed-in author (nav, the "more" menu, edit affordances) than for
+ * an anonymous visitor. A shared/CDN cache keyed only by URL must therefore
+ * never store these pages — otherwise it serves a stale or wrong-audience
+ * snapshot, which both breaks the UI ("you still look signed out", "your edit
+ * didn't take effect") and can leak the authenticated dashboard to the public.
+ *
+ * Jant is self-hosted software that runs behind whatever reverse proxy or CDN
+ * the operator chooses, so it cannot rely on infrastructure config to get
+ * this right — it must declare its own cache policy. The critical mistake is
+ * emitting `Cache-Control: public`: that word is an explicit invitation for
+ * any shared cache to store the response.
+ *
+ * Routes that serve genuinely public, auth-invariant resources (media, feeds,
+ * sitemaps, favicons, manifests, static assets) set their own `Cache-Control`
+ * explicitly; this middleware leaves those untouched and only fills in the
+ * default for the un-annotated dynamic responses.
+ */
+
+import type { MiddlewareHandler } from "hono";
+import type { Bindings } from "../types.js";
+import type { AppVariables } from "../types/app-context.js";
+
+type Env = { Bindings: Bindings; Variables: AppVariables };
+
+/**
+ * Default cache directive for dynamic, potentially auth-variant responses.
+ * `private` forbids shared/CDN caches from storing the response; `no-store`
+ * prevents any cache (including the browser) from keeping a copy.
+ */
+const DEFAULT_CACHE_CONTROL = "private, no-store";
+
+/**
+ * Middleware that defaults a missing `Cache-Control` header to
+ * `private, no-store`.
+ *
+ * Runs after the route handler: if the handler (or an inner middleware)
+ * already set `Cache-Control`, that explicit value wins. Only responses that
+ * declare nothing receive the safe default.
+ *
+ * @returns Hono middleware enforcing the default cache policy.
+ *
+ * @example
+ * ```ts
+ * app.use("*", defaultCacheControl());
+ * ```
+ */
+export function defaultCacheControl(): MiddlewareHandler<Env> {
+  return async (c, next) => {
+    await next();
+    if (!c.res.headers.has("Cache-Control")) {
+      c.res.headers.set("Cache-Control", DEFAULT_CACHE_CONTROL);
+    }
+  };
+}

package/src/ui/feed/ThreadPreview.tsx

@@ -11,7 +11,10 @@ import { useLingui } from "../../i18n/context.js";
 import type { ThreadPreviewProps } from "../../types.js";
 import { TimelineItem } from "./TimelineItem.js";
 import { TimelineItemFromPost } from "./TimelineItem.js";
-import { getThreadPreviewState } from "./thread-preview-state.js";
+import {
+  getThreadPreviewState,
+  threadContextAssumesOverflow,
+} from "./thread-preview-state.js";
 
 const ROOT_CONTEXT_DISPLAY = {
   footer: {
@@ -42,6 +45,10 @@ export const ThreadPreview: FC<ThreadPreviewProps> = ({
     latestReply,
     totalReplyCount,
   });
+  const assumeOverflow = threadContextAssumesOverflow({
+    rootPost,
+    totalReplyCount,
+  });
   const hiddenPostsLabel = i18n._(
     msg({
       message: "{count, plural, one {# more post} other {# more posts}}",
@@ -75,14 +82,14 @@ export const ThreadPreview: FC<ThreadPreviewProps> = ({
       : undefined;
   const gapHref = renderedSecondReply?.permalink ?? latestReply.permalink;
 
-  // Always render the collapsible shell for thread previews. Structural
-  // signals (how many ancestor posts exist) aren't a reliable proxy for
-  // visual height — a single long root article will push the hero far
-  // off-screen just as much as several short replies would. The server
-  // assumes overflow (the common case) and renders the cap + fade + toggle
-  // immediately; client-side measurement removes the affordance when the
-  // content actually fits inside the cap, so users never see a no-op
-  // "Show more" button.
+  // Always render the collapsible shell + toggle: the cap and fade are a
+  // constant "this is context" affordance. The toggle's *initial* visibility
+  // is a server-side guess (threadContextAssumesOverflow) — the real rendered
+  // height is unknown until the client measures. Guessing matters because a
+  // 2-post thread's shell holds only the root, and a short root genuinely
+  // fits the cap; rendering the toggle visible anyway makes it flash in then
+  // out on load. Client-side measurement (thread-context.ts) re-measures and
+  // corrects, so the guess only ever affects that first paint.
 
   const rootItem = (
     <div class="thread-item thread-item-context">
@@ -138,6 +145,7 @@ export const ThreadPreview: FC<ThreadPreviewProps> = ({
         data-label-more={showMoreLabel}
         data-label-less={showLessLabel}
         aria-expanded="false"
+        hidden={!assumeOverflow}
       >
         <span class="thread-context-toggle-label">{showMoreLabel}</span>
         <svg

package/src/ui/feed/__tests__/thread-preview.test.ts

@@ -7,7 +7,10 @@ import { createI18n } from "../../../i18n/i18n.js";
 import type { PostView, TimelineItemView } from "../../../types.js";
 import { CuratedThreadPreview } from "../CuratedThreadPreview.js";
 import { ThreadPreview } from "../ThreadPreview.js";
-import { getThreadPreviewState } from "../thread-preview-state.js";
+import {
+  getThreadPreviewState,
+  threadContextAssumesOverflow,
+} from "../thread-preview-state.js";
 
 function createPostView(overrides: Partial<PostView> = {}): PostView {
   return {
@@ -48,6 +51,13 @@ function renderWithI18n(
   return renderToString(render());
 }
 
+/** The opening tag of the show-more toggle button, for attribute assertions. */
+function toggleTag(html: string): string {
+  return (
+    html.match(/<button[^>]*\bdata-thread-context-toggle\b[^>]*>/)?.[0] ?? ""
+  );
+}
+
 describe("getThreadPreviewState", () => {
   it("has no hidden posts for a 2-post thread", () => {
     const latestReply = createPostView({
@@ -236,13 +246,17 @@ describe("getThreadPreviewState", () => {
     expect(html).toMatch(/data-label-less="[^"]+"/);
   });
 
-  it("still wraps a root-only preview in the shell so the cap applies to long single posts", () => {
-    // root + hero — no second/penultimate/gap. The server can't know the
-    // root's rendered height, so it always renders the shell + toggle and
-    // lets client-side measurement strip them when the root actually fits.
+  it("hides the show-more toggle on first paint for a short lone root that fits the cap", () => {
+    // 2-post thread: the shell holds only the root. A short root genuinely
+    // fits the height cap, so the toggle is rendered hidden to avoid flashing
+    // it in then out. Client-side measurement (thread-context.ts) re-reveals
+    // it if the rendered height actually overflows.
     const html = renderWithI18n(() =>
       ThreadPreview({
-        rootPost: createPostView({ bodyHtml: "<p>Root</p>" }),
+        rootPost: createPostView({
+          bodyHtml: "<p>Root</p>",
+          summary: "Root",
+        }),
         latestReply: createPostView({
           id: "post-2",
           permalink: "/post-2",
@@ -257,10 +271,35 @@ describe("getThreadPreviewState", () => {
     expect(html).toContain("thread-context-shell");
     expect(html).toContain("data-collapsed");
     expect(html).toContain("data-thread-context-toggle");
+    expect(toggleTag(html)).toContain("hidden");
     expect(html).toContain("<p>Root</p>");
     expect(html).toContain("<p>Latest</p>");
   });
 
+  it("shows the show-more toggle on first paint for a long lone root", () => {
+    // 2-post thread with a long root — the shell almost certainly overflows
+    // the cap, so the toggle is rendered visible immediately (no flash).
+    const html = renderWithI18n(() =>
+      ThreadPreview({
+        rootPost: createPostView({
+          bodyHtml: "<p>Root</p>",
+          summary: "word ".repeat(60),
+        }),
+        latestReply: createPostView({
+          id: "post-2",
+          permalink: "/post-2",
+          slug: "post-2",
+          bodyHtml: "<p>Latest</p>",
+          isLastInThread: true,
+        }),
+        totalReplyCount: 1,
+      }),
+    );
+
+    expect(html).toContain("data-thread-context-toggle");
+    expect(toggleTag(html)).not.toContain("hidden");
+  });
+
   it("renders the collapsible shell even when just one extra item precedes the latest reply", () => {
     // root + secondReply + hero — one extra context item. The server can't
     // measure actual height, so it renders the shell assuming overflow (the
@@ -292,6 +331,9 @@ describe("getThreadPreviewState", () => {
     expect(html).toContain("<p>Root</p>");
     expect(html).toContain("<p>Second</p>");
     expect(html).toContain("<p>Latest</p>");
+    // 3-post thread (totalReplyCount 2): the shell stacks 2 cards, so the
+    // toggle is rendered visible on first paint.
+    expect(toggleTag(html)).not.toContain("hidden");
   });
 
   it("points the hidden-posts gap link to the second reply so the detail page opens just above the hidden range", () => {
@@ -352,6 +394,22 @@ describe("getThreadPreviewState", () => {
     );
   });
 
+  it("renders curated thread previews without a collapsible context shell", () => {
+    // Curated previews render each segment in flow — no shell, no toggle —
+    // so the overflow heuristic never applies to them.
+    const post = createPostView({ summary: "Curated note" });
+    const html = renderWithI18n(() =>
+      CuratedThreadPreview({
+        curatedThread: {
+          rootPost: post,
+          segments: [{ post, hiddenBeforeCount: 0, highlighted: true }],
+        },
+      }),
+    );
+
+    expect(html).not.toContain("data-thread-context-toggle");
+  });
+
   it("renders article summaries in curated thread previews", () => {
     const articlePost = createPostView({
       title: "Curated article",
@@ -381,3 +439,70 @@ describe("getThreadPreviewState", () => {
     expect(html).not.toContain('id="continue"');
   });
 });
+
+describe("threadContextAssumesOverflow", () => {
+  it("assumes overflow for 3+ post threads (the shell stacks 2+ cards)", () => {
+    expect(
+      threadContextAssumesOverflow({
+        rootPost: createPostView({ summary: "short" }),
+        totalReplyCount: 2,
+      }),
+    ).toBe(true);
+  });
+
+  it("assumes a short lone root fits the cap (2-post thread)", () => {
+    expect(
+      threadContextAssumesOverflow({
+        rootPost: createPostView({
+          summary: "Took the long way home because the light was good.",
+        }),
+        totalReplyCount: 1,
+      }),
+    ).toBe(false);
+  });
+
+  it("assumes overflow for a long lone root", () => {
+    expect(
+      threadContextAssumesOverflow({
+        rootPost: createPostView({ summary: "x".repeat(200) }),
+        totalReplyCount: 1,
+      }),
+    ).toBe(true);
+  });
+
+  it("assumes overflow for a short lone root that carries media", () => {
+    expect(
+      threadContextAssumesOverflow({
+        rootPost: createPostView({
+          summary: "short",
+          media: [{} as PostView["media"][number]],
+        }),
+        totalReplyCount: 1,
+      }),
+    ).toBe(true);
+  });
+
+  it("assumes overflow for a short lone root with a link preview image", () => {
+    expect(
+      threadContextAssumesOverflow({
+        rootPost: createPostView({
+          format: "link",
+          summary: "short",
+          previewImageUrl: "https://example.com/cover.jpg",
+        }),
+        totalReplyCount: 1,
+      }),
+    ).toBe(true);
+  });
+
+  it("counts plain-text code points, not UTF-16 units, against the limit", () => {
+    // 130 CJK code points — comfortably over the 120 limit even though each
+    // is a single BMP character. Confirms the threshold reads real length.
+    expect(
+      threadContextAssumesOverflow({
+        rootPost: createPostView({ summary: "字".repeat(130) }),
+        totalReplyCount: 1,
+      }),
+    ).toBe(true);
+  });
+});

package/src/ui/feed/thread-preview-state.ts

@@ -22,3 +22,46 @@ export function getThreadPreviewState({
     hiddenCount,
   };
 }
+
+/**
+ * A lone root post shorter than this (plain-text code points) comfortably
+ * fits the thread-context height cap. Pairs with the
+ * `--site-thread-context-max-height` token (160px) in tokens.css — revisit
+ * both together if that cap changes.
+ */
+const SHORT_ROOT_CHAR_LIMIT = 120;
+
+/**
+ * First-paint guess for whether the thread-context shell will overflow its
+ * height cap, used to pick the initial "Show more" toggle visibility.
+ *
+ * The client (thread-context.ts) always re-measures and corrects this, so a
+ * wrong guess costs at most a one-time flash on load — never a wrong final
+ * state. Kept deliberately coarse:
+ *
+ * - 3+ post threads stack 2+ cards in the shell — effectively always overflow.
+ * - A lone root carrying media is tall regardless of its text length.
+ * - Otherwise fall back to a plain-text length threshold. Only clearly short
+ *   roots flip to "fits"; anything at or above the limit keeps the historical
+ *   "assume overflow" default, so this can only remove flashes, never add them.
+ *
+ * @param rootPost - the thread's root post (the only post in a 2-post thread's
+ *   shell)
+ * @param totalReplyCount - replies in the thread; `>= 2` means 3+ posts total
+ * @returns whether to render the toggle visible on first paint
+ */
+export function threadContextAssumesOverflow({
+  rootPost,
+  totalReplyCount,
+}: {
+  rootPost: PostView;
+  totalReplyCount: number;
+}): boolean {
+  if (totalReplyCount >= 2) return true;
+  if (rootPost.media.length > 0 || Boolean(rootPost.previewImageUrl)) {
+    return true;
+  }
+  // `summary` is format-normalized at the viewmodel layer: quote text for
+  // quotes, body text for notes, the URL for bare links.
+  return [...(rootPost.summary ?? "")].length >= SHORT_ROOT_CHAR_LIMIT;
+}