@meith/web 0.21.2 → 0.22.0

package/src/server/marketplace-admin.ts

@@ -27,20 +27,10 @@ const BUILD_INFO = {
   themeApiMajor: THEME_API_MAJOR,
 }
 
-/**
- * Whether this process is the stock image rather than a graduated custom
- * board — both run identical @meith/web code, so an env var set only by
- * docker/Dockerfile is the only signal available: `BOARD_PLUGINS_MANIFEST`,
- * baked in for `community board:eject` (see apps/cli/src/board-eject.ts). A
- * graduated board's own scaffolded Dockerfile never sets it. Read fresh
- * rather than cached at module load, so it is not fixed by whichever test
- * happens to import this module first.
- */
 function onStockImage(): boolean {
   return readPluginEnv('BOARD_PLUGINS_MANIFEST') !== undefined
 }
 
-/** Caps against untrusted feed content — a self-hosted mirror can serve anything. */
 const MAX_NAME_LENGTH = 120
 const MAX_DESCRIPTION_LENGTH = 500
 const MAX_LICENCE_LENGTH = 100
@@ -50,7 +40,6 @@ function truncate(value: string, max: number): string {
   return value.length > max ? `${value.slice(0, max - 1)}…` : value
 }
 
-/** https only, and a real URL — never rendered as a link otherwise. */
 function safeHttpsUrl(value: string): string | null {
   try {
     const url = new URL(value)
@@ -85,27 +74,17 @@ export interface MarketplaceListingRow {
   readonly package: string
   readonly licence: string
   readonly repositoryUrl: string | null
-  /** Same-origin URLs — the browser never fetches the feed's own host directly. */
   readonly screenshotHrefs: readonly string[]
   readonly status: ListingStatus
   readonly incompatibleReason: string | null
   readonly installedVersion: string | null
-  /** Set only for 'not-installed': the exact steps this board would need. Never an affordance that acts. */
   readonly installSteps: readonly string[] | null
-  /**
-   * True only for 'not-installed' on the stock image, where installSteps'
-   * own `community plugin:add`/`community.config.ts` line cannot actually
-   * run — the image is fixed at build time. Signposts
-   * docs/marketplace.md's "Moving to a custom board" walkthrough; never a
-   * claim this board can graduate itself.
-   */
   readonly onStockImage: boolean
 }
 
 export interface MarketplaceCatalogView {
   readonly listings: readonly MarketplaceListingRow[]
   readonly fetchedAt: Date | null
-  /** True once a fetch has ever succeeded — an empty `listings` before that is "not fetched yet", not "empty catalog". */
   readonly hasEverFetched: boolean
   readonly unreachable: boolean
   readonly errorMessage: string | null
@@ -171,12 +150,6 @@ function toRow(
   }
 }
 
-/**
- * The Browse tab's whole read model for one kind — reads the cached feed
- * only (never the network) and computes status against what this build
- * actually contains. Renders honestly when the cache is empty: `listings`
- * is `[]` either way, and `hasEverFetched`/`unreachable` say why.
- */
 export async function marketplaceCatalog(kind: ListingKind): Promise<MarketplaceCatalogView> {
   const cache = await readCache()
   const installed =
@@ -195,7 +168,6 @@ export async function marketplaceCatalog(kind: ListingKind): Promise<Marketplace
   }
 }
 
-/** One listing's screenshot, resolved against the feed's own host — never a client-supplied URL. */
 export async function marketplaceScreenshotUrl(key: string, index: number): Promise<string | null> {
   const cache = await readCache()
   if (cache.feed === null || cache.sourceUrl === null) return null
@@ -211,11 +183,6 @@ export async function marketplaceScreenshotUrl(key: string, index: number): Prom
   }
 }
 
-/**
- * Runs the same fetch, validate, cache, notify pass the daily task does — the
- * admin panel's "Refresh" button and the task call the exact same function,
- * per docs/marketplace.md.
- */
 export async function refreshMarketplaceNow(): Promise<{
   readonly ok: boolean
   readonly listingCount: number

package/src/server/navigation.ts

@@ -44,11 +44,6 @@ export function pluginNavigationNames(): NavigationNames {
   )
 }
 
-/**
- * A row belongs to a plugin that is switched off, or has failed its way off, or
- * is no longer in the build. It is left in place — an operator's ordering is
- * worth keeping — but it is not a link anybody should be offered.
- */
 async function pluginRowIsLive(key: string | null): Promise<boolean> {
   const pluginKey = pluginKeyOfNavigation(key)
   if (pluginKey === null) return true

package/src/server/notification-actions.ts

@@ -7,6 +7,7 @@ import { msg } from '@meith/i18n'
 import type { NotificationService } from '@meith/notifications'
 
 import type { FormState } from './auth-form-state'
+import { getContainer } from './container'
 import { getActor } from './context'
 import { formStateReporter } from './form-state-reporter'
 import { positiveInt } from './form-values'
@@ -62,6 +63,30 @@ export async function markAllNotificationsReadAction(
   redirect('/notifications?read=all')
 }
 
+export async function saveMassMailOptInAction(
+  _prev: FormState,
+  form: FormData,
+): Promise<FormState> {
+  try {
+    const actor = await getActor()
+    if (actor.userId === null) throw new ForbiddenError(msg('error.app.must-logged'))
+
+    const { memberSettings } = getContainer()
+    if (memberSettings === null) {
+      throw new ForbiddenError(msg('error.app.board-running-in-memory-sample-data-9'))
+    }
+
+    await memberSettings.saveMassMailOptIn({
+      userId: actor.userId,
+      optIn: form.get('announcements') !== null,
+    })
+  } catch (err) {
+    return toFormState(err)
+  }
+
+  redirect('/notifications/preferences?saved=announcements')
+}
+
 export async function saveNotificationPreferencesAction(
   _prev: FormState,
   form: FormData,

package/src/server/onboarding.ts

@@ -28,11 +28,6 @@ async function dismissed(panel: OnboardingPanel): Promise<boolean> {
   return (await cookies()).get(onboardingCookieName(panel))?.value === '1'
 }
 
-/**
- * At most one of the welcome banner or the profile-completion nudge, never
- * both — stacking unrelated notices in the same board-wide slot is the
- * "heavy multi-step tour" the feature is meant to avoid.
- */
 export async function onboardingBanner(actor: Actor): Promise<OnboardingNoticeModel | null> {
   if (actor.userId === null) return null
 

package/src/server/plugin-admin-actions.ts

@@ -74,11 +74,6 @@ export async function setPluginEnabledAction(_prev: FormState, form: FormData):
     await syncPluginEnablement()
     await syncPluginNavigation()
 
-    /*
-     * After the switch is written, so the callback sees the state it is being
-     * told about, and never for the host's own failure switch: a plugin that
-     * has just failed five times is not one to hand more work to.
-     */
     await announceSwitch(definition, enabled)
 
     await recordAdminAction({
@@ -94,12 +89,6 @@ export async function setPluginEnabledAction(_prev: FormState, form: FormData):
   }
 }
 
-/**
- * The switch has already been thrown by the time this runs, and it stays
- * thrown: a callback that throws is the plugin's fault, so it is counted and
- * reported like any other plugin failure rather than being reported as the
- * operator's action having failed.
- */
 async function announceSwitch(definition: PluginDefinition, enabled: boolean): Promise<void> {
   if (enabled) {
     await emitEvent('plugin.enabled', { pluginKey: definition.key }, {})

package/src/server/plugin-admin.ts

@@ -33,12 +33,10 @@ export interface PluginSettingRow {
   readonly description: string | null
   readonly advanced: boolean
   readonly kind: PluginSettingKind
-  /** '' for a secret, whatever is stored or not: the value never leaves the server. */
   readonly default: PluginSettingValue
   readonly value: PluginSettingValue
   readonly overridden: boolean
   readonly source: PluginSettingSource
-  /** For secrets: whether a non-empty value is in force, without saying what it is. */
   readonly set: boolean
   readonly options: readonly { readonly value: string; readonly label: string }[]
   readonly envName: string | null
@@ -81,7 +79,6 @@ export interface PluginRow {
   readonly running: boolean
 
   readonly health: PluginHealth | null
-  /** The record every instance reconciles against, not this process's tally. */
   readonly durableHealth: PluginDurableHealthRow | null
   readonly hooks: readonly string[]
   readonly regions: readonly string[]

package/src/server/plugin-host.ts

@@ -14,6 +14,7 @@ import {
   PluginHost,
 } from '@meith/plugin-kit'
 
+import { runtimeContextFor } from './plugin-runtime'
 import { getSettingOverrides } from './settings'
 
 const HEALTH_TTL_SECONDS = 30
@@ -47,9 +48,23 @@ export function activeDefinitions(): readonly PluginDefinition[] {
     .map((entry) => entry.plugin as PluginDefinition)
 }
 
+async function hookRuntimeContext(pluginKey: string) {
+  const definition = activeDefinitions().find((candidate) => candidate.key === pluginKey)
+  if (definition === undefined) {
+    throw new Error(`plugin "${pluginKey}" is not installed on this board.`)
+  }
+  return runtimeContextFor(
+    pluginKey,
+    definition,
+    await getSettingOverrides(),
+    logger({ component: 'plugin-hook', plugin: pluginKey }),
+  )
+}
+
 export const pluginHost = new PluginHost({
   plugins: activeDefinitions(),
   failureThreshold: FAILURE_THRESHOLD,
+  runtime: hookRuntimeContext,
   logger: {
     warn: (message, detail) => logger().warn(detail, message),
     error: (message, detail) => logger().error(detail, message),
@@ -61,12 +76,6 @@ export const pluginHost = new PluginHost({
   },
 })
 
-/**
- * A plugin failing somewhere the host does not itself dispatch — a lifecycle
- * callback — counted and reported exactly as a failing hook is. There is one
- * failure record per plugin, and an operator reading it should not have to know
- * which door the plugin was behind when it broke.
- */
 export async function recordPluginFault(
   pluginKey: string,
   surface: string,

package/src/server/plugin-pages.ts

@@ -3,78 +3,13 @@ import 'server-only'
 import forumConfig from '@board/config'
 import type { ReactNode } from 'react'
 
-import { env, logger, readPluginEnv } from '@meith/core'
-import { getDb, pluginData, pluginGrants, pluginUsers } from '@meith/db'
-import {
-  type PluginData,
-  type PluginDefinition,
-  type PluginGrants,
-  type PluginNotify,
-  type PluginRuntimeContext,
-  type PluginUsers,
-  pluginNotify,
-  resolvePluginSettings,
-  unavailablePluginData,
-  unavailablePluginGrants,
-  unavailablePluginNotify,
-  unavailablePluginUsers,
-} from '@meith/plugin-kit'
+import { logger } from '@meith/core'
+import type { PluginDefinition } from '@meith/plugin-kit'
 
 import { getTranslator } from './i18n'
-import { notificationService } from './notifications'
+import { runtimeContextFor } from './plugin-runtime'
 import { getSettingOverrides } from './settings'
 
-const REQUEST_STATEMENT_TIMEOUT_MS = 3_000
-
-export function grantsFor(pluginKey: string): PluginGrants {
-  return env.DATA_SOURCE === 'postgres'
-    ? pluginGrants(getDb(), pluginKey)
-    : unavailablePluginGrants('this board is running on in-memory sample data')
-}
-
-export function dataFor(pluginKey: string): PluginData {
-  return env.DATA_SOURCE === 'postgres'
-    ? pluginData(getDb(), pluginKey, { statementTimeoutMs: REQUEST_STATEMENT_TIMEOUT_MS })
-    : unavailablePluginData('this board is running on in-memory sample data')
-}
-
-export function usersFor(): PluginUsers {
-  return env.DATA_SOURCE === 'postgres'
-    ? pluginUsers(getDb())
-    : unavailablePluginUsers('this board is running on in-memory sample data')
-}
-
-export function notifyFor(pluginKey: string): PluginNotify {
-  const entry = (forumConfig.plugins ?? []).find((candidate) => candidate.key === pluginKey)
-  const definition = entry?.plugin as PluginDefinition | undefined
-  const service = notificationService()
-
-  if (definition === undefined || service === null) {
-    return unavailablePluginNotify('this board is running on in-memory sample data')
-  }
-  return pluginNotify(pluginKey, definition.notifications ?? [], service)
-}
-
-export function runtimeContextFor(
-  pluginKey: string,
-  definition: PluginDefinition,
-  overrides: ReadonlyMap<string, string>,
-  log: ReturnType<typeof logger>,
-): PluginRuntimeContext {
-  return {
-    settings: resolvePluginSettings(definition, overrides, readPluginEnv),
-    logger: {
-      info: (message, detail) => log.info(detail ?? {}, message),
-      warn: (message, detail) => log.warn(detail ?? {}, message),
-      error: (message, detail) => log.error(detail ?? {}, message),
-    },
-    grants: grantsFor(pluginKey),
-    data: dataFor(pluginKey),
-    users: usersFor(),
-    notify: notifyFor(pluginKey),
-  }
-}
-
 export interface RenderedPluginPage {
   readonly title: string
   readonly node: ReactNode | null

package/src/server/plugin-routes.ts

@@ -17,7 +17,7 @@ import { recordAdminAction, requireAdmin } from './admin'
 import { boardUrl } from './board-url'
 import { getActor } from './context'
 import { activeDefinitions, pluginHost, syncPluginEnablement } from './plugin-host'
-import { runtimeContextFor } from './plugin-pages'
+import { runtimeContextFor } from './plugin-runtime'
 import { viewerRef } from './plugin-view'
 import { isSafeLocalPath } from './safe-path'
 import { isSameOrigin } from './same-origin'

package/src/server/plugin-runtime.ts

@@ -0,0 +1,78 @@
+import 'server-only'
+
+import forumConfig from '@board/config'
+
+import { env, type logger, readPluginEnv } from '@meith/core'
+import { getDb, pluginData, pluginGrants, pluginUsers } from '@meith/db'
+import {
+  type PluginData,
+  type PluginDefinition,
+  type PluginGrants,
+  type PluginNotify,
+  type PluginRuntimeContext,
+  type PluginUsers,
+  pluginNotify,
+  resolvePluginSettings,
+  unavailablePluginData,
+  unavailablePluginGrants,
+  unavailablePluginNotify,
+  unavailablePluginUsers,
+} from '@meith/plugin-kit'
+
+const REQUEST_STATEMENT_TIMEOUT_MS = 3_000
+
+export function grantsFor(pluginKey: string): PluginGrants {
+  return env.DATA_SOURCE === 'postgres'
+    ? pluginGrants(getDb(), pluginKey)
+    : unavailablePluginGrants('this board is running on in-memory sample data')
+}
+
+export function dataFor(pluginKey: string): PluginData {
+  return env.DATA_SOURCE === 'postgres'
+    ? pluginData(getDb(), pluginKey, { statementTimeoutMs: REQUEST_STATEMENT_TIMEOUT_MS })
+    : unavailablePluginData('this board is running on in-memory sample data')
+}
+
+export function usersFor(): PluginUsers {
+  return env.DATA_SOURCE === 'postgres'
+    ? pluginUsers(getDb())
+    : unavailablePluginUsers('this board is running on in-memory sample data')
+}
+
+export function notifyFor(pluginKey: string): PluginNotify {
+  return {
+    async send(input) {
+      const { notificationService } = await import('./notifications')
+      const entry = (forumConfig.plugins ?? []).find((candidate) => candidate.key === pluginKey)
+      const definition = entry?.plugin as PluginDefinition | undefined
+      const service = notificationService()
+
+      const notify =
+        definition === undefined || service === null
+          ? unavailablePluginNotify('this board is running on in-memory sample data')
+          : pluginNotify(pluginKey, definition.notifications ?? [], service)
+
+      return notify.send(input)
+    },
+  }
+}
+
+export function runtimeContextFor(
+  pluginKey: string,
+  definition: PluginDefinition,
+  overrides: ReadonlyMap<string, string>,
+  log: ReturnType<typeof logger>,
+): PluginRuntimeContext {
+  return {
+    settings: resolvePluginSettings(definition, overrides, readPluginEnv),
+    logger: {
+      info: (message, detail) => log.info(detail ?? {}, message),
+      warn: (message, detail) => log.warn(detail ?? {}, message),
+      error: (message, detail) => log.error(detail ?? {}, message),
+    },
+    grants: grantsFor(pluginKey),
+    data: dataFor(pluginKey),
+    users: usersFor(),
+    notify: notifyFor(pluginKey),
+  }
+}

package/src/server/presence.ts

@@ -40,9 +40,7 @@ export async function touchCurrentLocation(): Promise<void> {
     const location = parseLocation((await headers()).get(PATH_HEADER))
     if (location === null) return
     await touchLocation(location)
-  } catch {
-    /* ignore */
-  }
+  } catch {}
 }
 
 export function presenceRepository(): PostgresPresenceRepository | null {
@@ -78,22 +76,9 @@ export async function touchLocation(location: BoardLocation): Promise<void> {
       new Date(),
       LOCATION_WINDOW_SECONDS,
     )
-  } catch {
-    /* ignore */
-  }
+  } catch {}
 }
 
-/**
- * The guest token, but only once the client has proved it keeps cookies.
- *
- * The freshness header is the proof, and it has to come from the middleware
- * because nothing downstream can supply it: Next reflects a cookie set on a
- * `NextResponse.next()` into the request the render sees, so on a first-ever
- * visit both `cookies()` and the raw `Cookie` header already carry a token the
- * client has never seen. Counting on that wrote one presence row per request
- * from anything that discards cookies — measured at twelve rows from twelve
- * crawler requests, and a sessions table that grows without bound.
- */
 async function returnedGuestToken(secure: boolean): Promise<string | undefined> {
   if ((await headers()).get(FRESH_GUEST_HEADER) === '1') return undefined
 
@@ -101,13 +86,6 @@ async function returnedGuestToken(secure: boolean): Promise<string | undefined>
   return value === '' ? undefined : value
 }
 
-/**
- * The same reader, one row.
- *
- * Only reached when there is no usable member session, which is what keeps a
- * logged-in member from being counted twice — and signing in drops the guest
- * row outright, so the two never overlap.
- */
 async function touchGuestLocation(
   guestToken: string | undefined,
   location: BoardLocation,
@@ -131,13 +109,6 @@ async function touchGuestLocation(
   })
 }
 
-/**
- * Retires the guest identity of somebody who has just become a member.
- *
- * Called wherever a session cookie is set, rather than only at the login form,
- * because that is every route into being signed in — the form, the remember-me
- * resume, and a password change that reissues the session.
- */
 export async function retireGuestPresence(): Promise<void> {
   try {
     const secure = env.NODE_ENV !== 'development'
@@ -149,9 +120,7 @@ export async function retireGuestPresence(): Promise<void> {
     }
 
     jar.set(guestCookieName(secure), '', clearedCookie(secure))
-  } catch {
-    /* ignore */
-  }
+  } catch {}
 }
 
 export async function onlineScopeFor(actor: Actor): Promise<OnlineScope> {

package/src/server/relations.ts

@@ -39,7 +39,5 @@ export async function touchActivity(userId: number | null): Promise<void> {
   try {
     const { accountStore } = getContainer()
     await accountStore.accounts.touchLastActive(userId, new Date(), ACTIVITY_WINDOW_SECONDS)
-  } catch {
-    /* ignore */
-  }
+  } catch {}
 }

package/src/server/reply-core.ts

@@ -131,6 +131,7 @@ export async function submitReply(
       heldAsNewMember: await holdsNewMember({
         actor,
         postCount: profile.postCount,
+        target: scope,
         settings,
       }),
       requiresApproval: scope.forum.requiresPostApproval === true,

package/src/server/request-fingerprint.ts

@@ -53,7 +53,6 @@ export async function countingAddress(): Promise<string | null> {
   return demoDiscardsAddresses() ? demoAddressToken(address) : address
 }
 
-/** Where a request came from and what made it, as much as is kept about either. */
 export async function requestFingerprint(): Promise<RequestFingerprint> {
   const incoming = await headers()
   const agent = incoming.get('user-agent') ?? ''

package/src/server/search-page.ts

@@ -185,10 +185,6 @@ export async function openSearch(input: {
   }
 }
 
-/**
- * A plugin may reorder or drop; a row it invents has no hit behind it and is
- * dropped, because the hits arrived permission-filtered in SQL.
- */
 async function filterHits(
   results: SearchResults,
   terms: string,

package/src/server/session-actions.ts

@@ -25,7 +25,6 @@ async function requireViewer(): Promise<number> {
   return actor.userId
 }
 
-/** The row the member is reading the page on, so it can be marked and kept. */
 export async function currentSessionId(): Promise<number | null> {
   const token = await readSessionToken()
   if (token === undefined || token === '') return null

package/src/server/settings.ts

@@ -28,17 +28,6 @@ export async function getSettings(): Promise<SettingsSnapshot> {
   return SettingsSnapshot.fromOverrides(new Map(await getSettingOverrides()))
 }
 
-/**
- * The same settings, read past the cache.
- *
- * The cached snapshot is held per module instance, and a route handler is not
- * always the same instance as the render that invalidated it — so a route can
- * act on a value up to a minute out of date. That is harmless for anything the
- * page merely displays, and wrong for a decision an operator has just changed:
- * turning a sign-in provider on and having the button answer "that is not
- * switched on" reads as a broken board, not as a stale cache. Sign-in happens
- * once per member per session, so the query is cheaper than the confusion.
- */
 export async function getSettingsUncached(): Promise<SettingsSnapshot> {
   if (env.DATA_SOURCE !== 'postgres') return SettingsSnapshot.fromOverrides(new Map())
 

package/src/server/subscription-actions.ts

@@ -9,6 +9,7 @@ import {
   parseSubscriptionTarget,
   readUnsubscribeToken,
   SubscriptionService,
+  type UnsubscribeScope,
 } from '@meith/subscriptions'
 
 import type { FormState } from './auth-form-state'
@@ -127,12 +128,14 @@ export async function unsubscribeByTokenAction(
   if (claim === null) return { error: await tr('notice.app.unsubscribe-link-valid') }
 
   try {
-    const { subscriptions, notifications } = getContainer()
-    if (subscriptions === null || notifications === null) {
+    const { subscriptions, notifications, memberSettings } = getContainer()
+    if (subscriptions === null || notifications === null || memberSettings === null) {
       throw new ForbiddenError(msg('error.app.board-running-in-memory-sample-data-17'))
     }
 
-    if (claim.scope === 'email') {
+    if (claim.scope === 'mass-mail') {
+      await memberSettings.saveMassMailOptIn({ userId: claim.userId, optIn: false })
+    } else if (claim.scope === 'email') {
       await notifications.savePreferences(
         claim.userId,
         'email',
@@ -152,7 +155,12 @@ export async function unsubscribeByTokenAction(
     return toFormState(err)
   }
 
-  redirect(`/unsubscribe?done=${claim.scope === 'email' ? 'email' : 'one'}`)
+  redirect(`/unsubscribe?done=${doneFor(claim.scope)}`)
+}
+
+function doneFor(scope: UnsubscribeScope): string {
+  if (scope === 'mass-mail') return 'announcements'
+  return scope === 'email' ? 'email' : 'one'
 }
 
 function safeReturn(value: string, fallback: string): string {

package/src/server/syndication.ts

@@ -50,10 +50,6 @@ export async function isIndexable(): Promise<boolean> {
   }
 }
 
-/**
- * One chunk of the sitemap, after the plugins have had it. Everything here is
- * public by definition — the sitemap is what the board offers a crawler.
- */
 export async function filterSitemapEntries(
   urls: readonly SitemapUrl[],
   chunk: number,

package/src/server/theme-admin.ts

@@ -106,9 +106,7 @@ export async function buildThemeAdminView(key: string): Promise<ThemeAdminView |
   let overrides: TokenOverrides = { light: {}, dark: {} }
   try {
     overrides = validateTokenOverrides(installed.tokens, record?.tokenOverrides)
-  } catch {
-    /* ignore */
-  }
+  } catch {}
 
   const listing = (await themeListing()).find((entry) => entry.key === key)
 
@@ -179,9 +177,7 @@ export async function boardSampleSurfaces(): Promise<{
       .catch(() => null)
     try {
       overrides = validateTokenOverrides(theme.tokens, record?.tokenOverrides)
-    } catch {
-      /* ignore */
-    }
+    } catch {}
   }
 
   const pick = (

package/src/server/thread-core.ts

@@ -126,7 +126,12 @@ export async function submitThread(
       message: draft.body,
       prefixId: draft.prefixId,
       subscribe: input.subscribe ?? false,
-      heldAsNewMember: await holdsNewMember({ actor, postCount: profile.postCount, settings }),
+      heldAsNewMember: await holdsNewMember({
+        actor,
+        postCount: profile.postCount,
+        target: scope,
+        settings,
+      }),
       requiresApproval: scope.forum.requiresThreadApproval === true,
       ...(input.poll === undefined
         ? {}

package/src/server/two-factor-actions.ts

@@ -146,11 +146,6 @@ export async function disableTwoFactorAction(_prev: FormState, form: FormData):
   redirect('/usercp/security?factor=off')
 }
 
-/**
- * Weakening an account asks for the thing being weakened. An account with a
- * password gives it; one without — signed in by a provider or a passkey —
- * gives a current code instead, which proves the same possession.
- */
 async function assertStillThem(input: {
   readonly userId: number
   readonly hasPassword: boolean