astro-atmosphere-comments 0.4.2 → 0.5.0

package/lib/permissions.ts

@@ -0,0 +1,108 @@
+// What a reader's account host is asked to allow, and the site's OAuth
+// client metadata. Shared by the server (routes/client-metadata.json.ts) and
+// the browser (lib/client/account.ts), so both always agree.
+//
+// The site is a browser ("public") client: a reader's sign-in is kept only in
+// their own browser, and the site's server never sees it. Signing out cancels
+// it at the reader's account host.
+
+// What every signed-in reader grants: their identity, and reading posts as
+// they see them (to know whether they've already liked or reposted),
+// through Bluesky's AppView. Nothing here can change their account.
+export const BASE_SCOPE = "atproto rpc:app.bsky.feed.getPosts?aud=did:web:api.bsky.app%23bsky_appview";
+
+// Everything else comes in groups. Signing in asks for all that a reader can
+// do here at once (DEFAULT_PERMISSIONS), so there's one approval rather than
+// a trip to their account host for each new thing: as the sign-in stays in
+// their browser, the server can't use any of it, and the page's own code has
+// the same reach either way. (A permission can only name a kind of record,
+// not particular posts, so lib/client/account.ts limits each one to the
+// site's own threads.)
+export const PERMISSIONS = {
+  // Comments, replies and quote posts.
+  post: "repo:app.bsky.feed.post?action=create",
+  // Likes and reposts, and taking them back.
+  react: "repo:app.bsky.feed.like?action=create&action=delete repo:app.bsky.feed.repost?action=create&action=delete",
+  // Deleting the reader's own comments.
+  delete: "repo:app.bsky.feed.post?action=delete",
+  // Following (and unfollowing) the site's own accounts.
+  follow: "repo:app.bsky.graph.follow?action=create&action=delete",
+  // For the site's own accounts: hiding comments under their announcements.
+  moderate: "repo:app.bsky.feed.threadgate?action=create&action=update",
+} as const;
+
+export type Permission = keyof typeof PERMISSIONS;
+
+export const isPermission = (value: unknown): value is Permission =>
+  typeof value === "string" && Object.hasOwn(PERMISSIONS, value);
+
+// What signing in asks for: everything readers can do here. "moderate" is
+// added only for the site's own accounts (allowedAuthors), the only ones
+// that can use it. Sign-ins from before a group was added are asked for it
+// when it's first needed.
+export const DEFAULT_PERMISSIONS: Permission[] = ["post", "react", "delete", "follow"];
+
+/** The scope to ask for: the base, plus the groups named. */
+export const scopeFor = (permissions: Iterable<Permission>) =>
+  [BASE_SCOPE, ...new Set([...permissions].map((name) => PERMISSIONS[name]))].join(" ");
+
+// Everything the site may ask for, which its client metadata has to list.
+export const ALL_SCOPES = scopeFor(Object.keys(PERMISSIONS) as Permission[]);
+
+/**
+ * Whether `scopes` (a grant) allow `action` on records of `collection`: a
+ * repo permission for that collection (or all of them) listing the action,
+ * or listing no actions, which means all of them.
+ */
+export function scopesAllow(scopes: string[], collection: string, action: string): boolean {
+  return scopes.some((scope) => {
+    const [name, query = ""] = scope.split("?");
+    if (name !== `repo:${collection}` && name !== "repo:*") return false;
+    const actions = new URLSearchParams(query).getAll("action");
+    return !actions.length || actions.includes(action);
+  });
+}
+
+/** The permission groups a grant covers in full. */
+export function grantedPermissions(scopes: string[]): Permission[] {
+  return (Object.keys(PERMISSIONS) as Permission[]).filter((name) =>
+    PERMISSIONS[name].split(" ").every((part) => {
+      const [scope, query = ""] = part.split("?");
+      const collection = scope.replace(/^repo:/, "");
+      return new URLSearchParams(query).getAll("action").every((action) => scopesAllow(scopes, collection, action));
+    }),
+  );
+}
+
+/** Whether a grant has BASE_SCOPE (compared by name, as hosts may write the rest differently). */
+export function hasBase(scopes: string[]): boolean {
+  const names = scopes.map((part) => part.split("?")[0]);
+  return BASE_SCOPE.split(" ").every((part) => names.includes(part.split("?")[0]));
+}
+
+type MetadataSettings = { site: string; base: string; clientName: string; logoUri?: string; policyUri?: string; tosUri?: string };
+
+export const callbackPath = (base: string) => `${base}/callback`;
+
+/** The client metadata, served at /oauth-client-metadata.json (the site's client ID). */
+export function clientMetadata(settings: MetadataSettings) {
+  return {
+    // At the site's root, the address account hosts treat as the convention:
+    // Bluesky's approval page then shows just the site's address.
+    client_id: `${settings.site}/oauth-client-metadata.json`,
+    client_name: settings.clientName,
+    client_uri: settings.site,
+    ...(settings.logoUri && { logo_uri: settings.logoUri }),
+    ...(settings.policyUri && { policy_uri: settings.policyUri }),
+    ...(settings.tosUri && { tos_uri: settings.tosUri }),
+    redirect_uris: [`${settings.site}${callbackPath(settings.base)}`] as [`https://${string}`],
+    scope: ALL_SCOPES,
+    grant_types: ["authorization_code", "refresh_token"] as ["authorization_code", "refresh_token"],
+    response_types: ["code"] as ["code"],
+    application_type: "web" as const,
+    // A browser client: it has no secret to prove who it is, and its
+    // tokens only work together with a key kept in the reader's browser.
+    token_endpoint_auth_method: "none" as const,
+    dpop_bound_access_tokens: true,
+  };
+}

package/lib/public-settings.ts

@@ -0,0 +1,18 @@
+// The integration's settings that are safe for readers' browsers: the
+// site's address, the routes' base, its name and links, and its accounts.
+// (The rest, such as `hidden`, stays on the server: lib/settings.ts.)
+import settings from "virtual:atmosphere-comments/public-settings";
+
+export type PublicSettings = {
+  clientName: string;
+  allowedAuthors: string[];
+  /** Where the routes live, e.g. "/atmosphere" (no trailing slash). */
+  base: string;
+  /** The site's address, e.g. "https://saltedlolly.com" (no trailing slash). */
+  site: string;
+  logoUri?: string;
+  policyUri?: string;
+  tosUri?: string;
+};
+
+export default settings as PublicSettings;

package/lib/thread.ts

@@ -1,9 +1,17 @@
 // The Bluesky thread under an announcement, read from Bluesky's public API:
 // who liked and reposted it, and the replies (the comments), nested.
 //
-// Left out: replies the announcement's author hid (Bluesky's threadgate),
-// deleted or blocked posts, posts or accounts carrying hiding labels from
-// Bluesky's moderation (spam, porn…), and anything in the `hidden` option.
+// Left out, with the replies under them: replies the announcement's author
+// hid (Bluesky's threadgate), deleted or blocked posts, posts or accounts
+// carrying hiding labels from Bluesky's moderation (spam, porn…), and
+// anything in the `hidden` option.
+//
+// Accounts that ask apps not to show them to logged-out people (Bluesky's
+// "Discourage apps from showing my account to logged-out users", the
+// !no-unauthenticated label) are respected too, as the page is public:
+// their comments become a bare placeholder (no name, picture, address or
+// words), keeping the replies under them, which are other people's, and
+// they're left out of the faces of who liked and reposted.
 // Cached for two minutes per announcement; if Bluesky can't be reached the
 // last good copy is kept.
 import { rememberAvatar } from "./avatars";
@@ -17,6 +25,7 @@ const MAX_CACHED = 200;
 const MAX_DEPTH = 6;
 const MAX_FACES = 48;
 const HIDING_LABELS = new Set(["!hide", "!takedown", "!suspend", "spam", "porn", "sexual", "nudity", "graphic-media", "gore"]);
+const LOGGED_IN_ONLY = "!no-unauthenticated";
 
 export type Person = { did: string; handle: string; displayName?: string; avatar?: string; url: string };
 
@@ -32,6 +41,11 @@ export type Reply = {
   depth: number;
   likeCount: number;
   repostCount: number;
+  /**
+   * Its author asks not to be shown to logged-out people: everything else
+   * is left empty, and the page shows a placeholder in its place.
+   */
+  withheld?: true;
 };
 
 export type Thread = {
@@ -80,6 +94,9 @@ function person(author: Author): Person | null {
   };
 }
 
+/** Whether an account asks apps not to show it to people who aren't signed in. */
+const loggedInOnly = (author?: Author) => !!author?.labels?.some((label) => label.val === LOGGED_IN_ONLY);
+
 function isHidden(post: ThreadPost, author: Person, url: string): boolean {
   const labels = [...(post.labels ?? []), ...(post.author?.labels ?? [])];
   if (labels.some((label) => label.val && HIDING_LABELS.has(label.val))) return true;
@@ -97,7 +114,20 @@ function collect(nodes: ThreadNode[] = [], depth: number, hiddenByAuthor: Set<st
     if (!author || !post.uri || !key || hiddenByAuthor.has(post.uri)) continue;
     const url = `${author.url}/post/${key}`;
     if (isHidden(post, author, url)) continue;
-    out.push({
+    if (loggedInOnly(post.author)) {
+      out.push({
+        uri: "",
+        url: "",
+        author: { did: "", handle: "", url: "" },
+        byAuthor: false,
+        createdAt: "",
+        text: [],
+        depth,
+        likeCount: 0,
+        repostCount: 0,
+        withheld: true,
+      });
+    } else out.push({
       uri: post.uri,
       url,
       author,
@@ -131,8 +161,8 @@ async function fetchThread(uri: string): Promise<Thread> {
     url: rootAuthor ? `${rootAuthor.url}/post/${uri.split("/").pop()}` : "",
     likeCount: root.likeCount ?? likes.length,
     repostCount: root.repostCount ?? repostedBy.length,
-    likes: likes.flatMap(({ actor }) => (actor ? [person(actor)].filter((p): p is Person => !!p) : [])),
-    reposts: repostedBy.map(person).filter((p): p is Person => !!p),
+    likes: likes.flatMap(({ actor }) => (actor && !loggedInOnly(actor) ? [person(actor)].filter((p): p is Person => !!p) : [])),
+    reposts: repostedBy.filter((actor) => !loggedInOnly(actor)).map(person).filter((p): p is Person => !!p),
     replies,
   };
 }

package/lib/uris.ts

@@ -0,0 +1,31 @@
+// Telling the site's own posts and threads apart from everything else, for
+// the routes and the browser alike. Nothing outside these can be replied to,
+// liked, reposted or quoted through the site.
+import settings from "./public-settings";
+
+const POST_URI = /^at:\/\/(did:[a-z0-9]+:[a-zA-Z0-9._:%-]+)\/app\.bsky\.feed\.post\/([a-zA-Z0-9._~-]+)$/;
+
+export const isPostUri = (uri: unknown): uri is string => typeof uri === "string" && POST_URI.test(uri);
+
+/** The DID that wrote a post, from its AT URI. */
+export const authorOf = (uri: string) => POST_URI.exec(uri)?.[1] ?? "";
+
+/** The post's record key, the last part of its AT URI. */
+export const rkeyOf = (uri: string) => POST_URI.exec(uri)?.[2] ?? "";
+
+/** True for a post by one of the site's own accounts (an announcement). */
+export function isSitePost(uri: unknown): uri is string {
+  return isPostUri(uri) && settings.allowedAuthors.includes(authorOf(uri));
+}
+
+export type PostView = {
+  uri: string;
+  cid: string;
+  author?: { did: string };
+  record?: { reply?: { root?: { uri?: string } } };
+  viewer?: { like?: string; repost?: string };
+};
+
+/** True for one of the site's announcements, or a comment somewhere under one. */
+export const inSiteThread = (view: PostView): boolean =>
+  isSitePost(view.uri) || isSitePost(view.record?.reply?.root?.uri);

package/locales/de.json

@@ -49,7 +49,7 @@
   "comment.deleteConfirm": "Diesen Kommentar von Bluesky löschen?",
   "comment.deleting": "Wird gelöscht…",
   "comment.deleted": "Dein Kommentar wurde gelöscht.",
-  "comment.deletePermission": "Um hier Kommentare zu löschen, braucht diese Seite eine weitere Erlaubnis von deinem Konto. Du kannst ihn auch in jeder Bluesky-App löschen.",
+  "comment.deletePermission": "Um hier Kommentare zu löschen, braucht diese Seite eine weitere Erlaubnis von deinem Atmosphere-Konto. Du kannst ihn aber auch {{link}} löschen.",
   "comment.continue": "Weiter zur Bestätigung",
   "comment.cancel": "Abbrechen",
   "signInFirst.reply": "Melde dich an, um zu antworten.",
@@ -65,9 +65,8 @@
   "messages.accountNotFound": "Dieses Konto wurde nicht gefunden. Prüfe den Handle und versuche es noch einmal.",
   "messages.invalidHandle": "Das sieht nicht wie ein Handle aus. Meist ist es etwas wie alice.bsky.social.",
   "messages.signedOut": "Du wurdest abgemeldet. Bitte melde dich erneut an.",
-  "messages.needsPermission": "Um hier Kommentare zu löschen, braucht diese Seite eine weitere Erlaubnis von deinem Konto.",
+  "messages.needsPermission": "Dafür braucht es eine weitere Erlaubnis von deinem Konto.",
   "messages.notAllowed": "Das ist hier nicht möglich.",
-  "messages.newPermissions": "Diese Seite kann jetzt auch für dich liken und reposten und braucht deshalb erneut deine Erlaubnis. Bitte melde dich erneut an.",
   "messages.tooLong": "Beiträge können bis zu {{max}} Zeichen lang sein.",
   "messages.tooMany": "Du bist ziemlich schnell. Bitte warte eine Minute und versuche es noch einmal.",
   "messages.error": "Das hat nicht geklappt. Bitte versuche es noch einmal.",
@@ -91,5 +90,22 @@
   "follow.following": "Folge ich",
   "follow.followAs": "{{handle}} als {{me}} folgen",
   "follow.followingLabel": "Du folgst {{handle}}",
-  "credit": "Bereitgestellt von {{link}}"
+  "credit": "Bereitgestellt von {{link}}",
+  "callback.signingIn": "Anmeldung läuft …",
+  "signIn.access": "Deine Anmeldung bleibt in diesem Browser: Der Server dieser Seite sieht sie nie und kann nicht für dich posten, und beim Abmelden wird sie aufgehoben.",
+  "signIn.policy": "Wie diese Seite mit deinen Daten umgeht",
+  "composer.needsPermission": "Um hier als {{handle}} zu kommentieren, braucht diese Seite eine weitere Erlaubnis von deinem Atmosphere-Konto.",
+  "comment.hide": "Ausblenden",
+  "comment.hideLabel": "Diesen Kommentar ausblenden",
+  "comment.hideConfirm": "Diesen Kommentar hier und auf Bluesky ausblenden? In der Bluesky-App kannst du ihn wieder einblenden.",
+  "comment.hiding": "Wird ausgeblendet …",
+  "comment.hidden": "Kommentar ausgeblendet.",
+  "comment.hidePermission": "Um hier Kommentare auszublenden, braucht diese Seite eine weitere Erlaubnis von deinem Konto. Du kannst sie auch in der Bluesky-App ausblenden.",
+  "comment.deleteElsewhere": "auf der Bluesky-Website",
+  "permission.heading": "Eine weitere Erlaubnis",
+  "permission.follow": "Um {{handle}} von dieser Seite aus zu folgen, braucht sie eine weitere Erlaubnis von deinem Atmosphere-Konto: Konten folgen und entfolgen.",
+  "permission.post": "Um von dieser Seite aus zu antworten und zu zitieren, braucht sie eine weitere Erlaubnis von deinem Atmosphere-Konto: Beiträge erstellen.",
+  "permission.react": "Um von dieser Seite aus zu liken und zu reposten, braucht sie eine weitere Erlaubnis von deinem Atmosphere-Konto: liken und reposten und das zurücknehmen.",
+  "permission.approve": "Die Seite deines Kontos (für die meisten die von Bluesky) bittet dich, das zu bestätigen, und vielleicht vorher, dich dort anzumelden. Danach kommst du direkt hierher zurück.",
+  "comment.withheld": "Hier nicht angezeigt: Die Person bittet Apps, ihre Beiträge nicht Leuten zu zeigen, die nicht angemeldet sind."
 }

package/locales/en.json

@@ -49,7 +49,7 @@
   "comment.deleteConfirm": "Delete this comment from Bluesky?",
   "comment.deleting": "Deleting…",
   "comment.deleted": "Your comment was deleted.",
-  "comment.deletePermission": "To delete comments here, this site needs one more permission from your account. You can also delete it in any Bluesky app.",
+  "comment.deletePermission": "To delete comments here, this site needs one more permission from your Atmosphere account. Alternatively, you can delete it {{link}}.",
   "comment.continue": "Continue to approve",
   "comment.cancel": "Cancel",
   "signInFirst.reply": "Sign in to reply.",
@@ -65,9 +65,8 @@
   "messages.accountNotFound": "We couldn't find that account. Check the handle and try again.",
   "messages.invalidHandle": "That doesn't look like a handle. It's usually something like alice.bsky.social.",
   "messages.signedOut": "You've been signed out. Please sign in again.",
-  "messages.needsPermission": "To delete comments here, this site needs one more permission from your account.",
+  "messages.needsPermission": "That needs one more permission from your account.",
   "messages.notAllowed": "That can't be done here.",
-  "messages.newPermissions": "This site can now also like and repost for you, so it needs your permission again. Please sign in again.",
   "messages.tooLong": "Posts can be up to {{max}} characters.",
   "messages.tooMany": "You're going quickly. Please wait a minute and try again.",
   "messages.error": "That didn't work. Please try again.",
@@ -91,5 +90,22 @@
   "follow.following": "Following",
   "follow.followAs": "Follow {{handle}} as {{me}}",
   "follow.followingLabel": "You follow {{handle}}",
-  "credit": "Powered by {{link}}"
+  "credit": "Powered by {{link}}",
+  "callback.signingIn": "Signing you in…",
+  "signIn.access": "Your sign-in stays in this browser: this site's server never sees it and can't post for you, and signing out cancels it.",
+  "signIn.policy": "How this site handles your data",
+  "composer.needsPermission": "To comment here as {{handle}}, this site needs one more permission from your Atmosphere account.",
+  "comment.hide": "Hide",
+  "comment.hideLabel": "Hide this comment",
+  "comment.hideConfirm": "Hide this comment here and on Bluesky? You can show it again in the Bluesky app.",
+  "comment.hiding": "Hiding…",
+  "comment.hidden": "Comment hidden.",
+  "comment.hidePermission": "To hide comments here, this site needs one more permission from your account. You can also hide them in the Bluesky app.",
+  "comment.deleteElsewhere": "via the Bluesky website",
+  "permission.heading": "One more permission",
+  "permission.follow": "To follow {{handle}} from this site, it needs one more permission from your Atmosphere account: to follow and unfollow accounts.",
+  "permission.post": "To reply and quote from this site, it needs one more permission from your Atmosphere account: to create posts.",
+  "permission.react": "To like and repost from this site, it needs one more permission from your Atmosphere account: to like and repost, and to undo that.",
+  "permission.approve": "Your account's own site (Bluesky's, for most people) will ask you to approve it, and may ask you to sign in there first. Then you'll come straight back here.",
+  "comment.withheld": "Not shown here: its author asks apps not to show their posts to people who aren't signed in."
 }

package/locales/es.json

@@ -52,7 +52,7 @@
   "comment.deleteConfirm": "¿Eliminar este comentario de Bluesky?",
   "comment.deleting": "Eliminando…",
   "comment.deleted": "Tu comentario se ha eliminado.",
-  "comment.deletePermission": "Para eliminar comentarios aquí, este sitio necesita un permiso más de tu cuenta. También puedes eliminarlo en cualquier aplicación de Bluesky.",
+  "comment.deletePermission": "Para eliminar comentarios aquí, este sitio necesita un permiso más de tu cuenta de Atmosphere. También puedes eliminarlo {{link}}.",
   "comment.continue": "Continuar para aprobar",
   "comment.cancel": "Cancelar",
   "signInFirst.reply": "Inicia sesión para responder.",
@@ -68,9 +68,8 @@
   "messages.accountNotFound": "No encontramos esa cuenta. Revisa el identificador e inténtalo de nuevo.",
   "messages.invalidHandle": "Eso no parece un identificador. Suele ser algo como alice.bsky.social.",
   "messages.signedOut": "Se ha cerrado tu sesión. Vuelve a iniciar sesión.",
-  "messages.needsPermission": "Para eliminar comentarios aquí, este sitio necesita un permiso más de tu cuenta.",
+  "messages.needsPermission": "Eso necesita un permiso más de tu cuenta.",
   "messages.notAllowed": "Eso no se puede hacer aquí.",
-  "messages.newPermissions": "Este sitio ahora también puede dar me gusta y compartir por ti, así que necesita tu permiso de nuevo. Vuelve a iniciar sesión.",
   "messages.tooLong": "Las publicaciones pueden tener hasta {{max}} caracteres.",
   "messages.tooMany": "Vas muy rápido. Espera un minuto e inténtalo de nuevo.",
   "messages.error": "No ha funcionado. Inténtalo de nuevo.",
@@ -94,5 +93,22 @@
   "follow.following": "Siguiendo",
   "follow.followAs": "Seguir a {{handle}} como {{me}}",
   "follow.followingLabel": "Sigues a {{handle}}",
-  "credit": "Funciona con {{link}}"
+  "credit": "Funciona con {{link}}",
+  "callback.signingIn": "Iniciando sesión…",
+  "signIn.access": "Tu sesión se queda en este navegador: el servidor de este sitio nunca la ve ni puede publicar por ti, y al cerrar sesión se cancela.",
+  "signIn.policy": "Cómo trata este sitio tus datos",
+  "composer.needsPermission": "Para comentar aquí como {{handle}}, este sitio necesita un permiso más de tu cuenta de Atmosphere.",
+  "comment.hide": "Ocultar",
+  "comment.hideLabel": "Ocultar este comentario",
+  "comment.hideConfirm": "¿Ocultar este comentario aquí y en Bluesky? Puedes volver a mostrarlo en la aplicación de Bluesky.",
+  "comment.hiding": "Ocultando…",
+  "comment.hidden": "Comentario oculto.",
+  "comment.hidePermission": "Para ocultar comentarios aquí, este sitio necesita un permiso más de tu cuenta. También puedes ocultarlos en la aplicación de Bluesky.",
+  "comment.deleteElsewhere": "en la web de Bluesky",
+  "permission.heading": "Un permiso más",
+  "permission.follow": "Para seguir a {{handle}} desde este sitio, necesita un permiso más de tu cuenta de Atmosphere: seguir y dejar de seguir cuentas.",
+  "permission.post": "Para responder y citar desde este sitio, necesita un permiso más de tu cuenta de Atmosphere: crear publicaciones.",
+  "permission.react": "Para dar me gusta y republicar desde este sitio, necesita un permiso más de tu cuenta de Atmosphere: dar me gusta y republicar, y deshacerlo.",
+  "permission.approve": "El sitio de tu cuenta (el de Bluesky, para la mayoría) te pedirá que lo apruebes, y quizá que inicies sesión allí primero. Después volverás directamente aquí.",
+  "comment.withheld": "No se muestra aquí: su autor pide a las aplicaciones que no muestren sus publicaciones a quien no haya iniciado sesión."
 }

package/locales/fr.json

@@ -52,7 +52,7 @@
   "comment.deleteConfirm": "Supprimer ce commentaire de Bluesky ?",
   "comment.deleting": "Suppression…",
   "comment.deleted": "Ton commentaire a été supprimé.",
-  "comment.deletePermission": "Pour supprimer des commentaires ici, ce site a besoin d'une autorisation de plus de ton compte. Tu peux aussi le supprimer dans n'importe quelle application Bluesky.",
+  "comment.deletePermission": "Pour supprimer des commentaires ici, ce site a besoin d'une autorisation de plus de ton compte Atmosphere. Sinon, tu peux le supprimer {{link}}.",
   "comment.continue": "Continuer pour autoriser",
   "comment.cancel": "Annuler",
   "signInFirst.reply": "Connecte-toi pour répondre.",
@@ -68,9 +68,8 @@
   "messages.accountNotFound": "Ce compte est introuvable. Vérifie l'identifiant et réessaie.",
   "messages.invalidHandle": "Ça ne ressemble pas à un identifiant. C'est généralement quelque chose comme alice.bsky.social.",
   "messages.signedOut": "Tu as été déconnecté. Connecte-toi à nouveau.",
-  "messages.needsPermission": "Pour supprimer des commentaires ici, ce site a besoin d'une autorisation de plus de ton compte.",
+  "messages.needsPermission": "Cela nécessite une autorisation de plus de ton compte.",
   "messages.notAllowed": "Ce n'est pas possible ici.",
-  "messages.newPermissions": "Ce site peut désormais aussi aimer et republier pour toi ; il a donc de nouveau besoin de ton autorisation. Connecte-toi à nouveau.",
   "messages.tooLong": "Les publications peuvent contenir jusqu'à {{max}} caractères.",
   "messages.tooMany": "Tu vas un peu vite. Attends une minute et réessaie.",
   "messages.error": "Ça n'a pas marché. Réessaie.",
@@ -94,5 +93,22 @@
   "follow.following": "Abonné",
   "follow.followAs": "Suivre {{handle}} en tant que {{me}}",
   "follow.followingLabel": "Tu suis {{handle}}",
-  "credit": "Propulsé par {{link}}"
+  "credit": "Propulsé par {{link}}",
+  "callback.signingIn": "Connexion en cours…",
+  "signIn.access": "Ta connexion reste dans ce navigateur : le serveur de ce site ne la voit jamais et ne peut pas publier à ta place, et te déconnecter l'annule.",
+  "signIn.policy": "Comment ce site traite tes données",
+  "composer.needsPermission": "Pour commenter ici en tant que {{handle}}, ce site a besoin d'une autorisation de plus de ton compte Atmosphere.",
+  "comment.hide": "Masquer",
+  "comment.hideLabel": "Masquer ce commentaire",
+  "comment.hideConfirm": "Masquer ce commentaire ici et sur Bluesky ? Tu pourras le réafficher dans l'application Bluesky.",
+  "comment.hiding": "Masquage…",
+  "comment.hidden": "Commentaire masqué.",
+  "comment.hidePermission": "Pour masquer des commentaires ici, ce site a besoin d'une autorisation de plus de ton compte. Tu peux aussi les masquer dans l'application Bluesky.",
+  "comment.deleteElsewhere": "sur le site de Bluesky",
+  "permission.heading": "Une autorisation de plus",
+  "permission.follow": "Pour suivre {{handle}} depuis ce site, il a besoin d'une autorisation de plus de ton compte Atmosphere : suivre des comptes et ne plus les suivre.",
+  "permission.post": "Pour répondre et citer depuis ce site, il a besoin d'une autorisation de plus de ton compte Atmosphere : créer des publications.",
+  "permission.react": "Pour aimer et republier depuis ce site, il a besoin d'une autorisation de plus de ton compte Atmosphere : aimer et republier, et l'annuler.",
+  "permission.approve": "Le site de ton compte (celui de Bluesky, pour la plupart des gens) te demandera de l'approuver, et peut-être de t'y connecter d'abord. Ensuite, tu reviendras directement ici.",
+  "comment.withheld": "Non affiché ici : son auteur demande aux applications de ne pas montrer ses publications aux personnes non connectées."
 }

package/locales/it.json

@@ -52,7 +52,7 @@
   "comment.deleteConfirm": "Eliminare questo commento da Bluesky?",
   "comment.deleting": "Eliminazione…",
   "comment.deleted": "Il tuo commento è stato eliminato.",
-  "comment.deletePermission": "Per eliminare i commenti qui, questo sito ha bisogno di un'altra autorizzazione dal tuo account. Puoi anche eliminarlo in qualsiasi app di Bluesky.",
+  "comment.deletePermission": "Per eliminare i commenti qui, questo sito ha bisogno di un'altra autorizzazione dal tuo account Atmosphere. In alternativa, puoi eliminarlo {{link}}.",
   "comment.continue": "Continua per approvare",
   "comment.cancel": "Annulla",
   "signInFirst.reply": "Accedi per rispondere.",
@@ -68,9 +68,8 @@
   "messages.accountNotFound": "Non abbiamo trovato quell'account. Controlla l'handle e riprova.",
   "messages.invalidHandle": "Non sembra un handle. Di solito è qualcosa come alice.bsky.social.",
   "messages.signedOut": "Sei stato disconnesso. Accedi di nuovo.",
-  "messages.needsPermission": "Per eliminare i commenti qui, questo sito ha bisogno di un'altra autorizzazione dal tuo account.",
+  "messages.needsPermission": "Serve un'altra autorizzazione dal tuo account.",
   "messages.notAllowed": "Qui non si può fare.",
-  "messages.newPermissions": "Ora questo sito può anche mettere mi piace e ripubblicare per te, quindi ha di nuovo bisogno della tua autorizzazione. Accedi di nuovo.",
   "messages.tooLong": "I post possono avere fino a {{max}} caratteri.",
   "messages.tooMany": "Stai andando un po' veloce. Aspetta un minuto e riprova.",
   "messages.error": "Non ha funzionato. Riprova.",
@@ -94,5 +93,22 @@
   "follow.following": "Segui già",
   "follow.followAs": "Segui {{handle}} come {{me}}",
   "follow.followingLabel": "Segui {{handle}}",
-  "credit": "Realizzato con {{link}}"
+  "credit": "Realizzato con {{link}}",
+  "callback.signingIn": "Accesso in corso…",
+  "signIn.access": "Il tuo accesso resta in questo browser: il server di questo sito non lo vede mai e non può pubblicare al posto tuo, e uscendo lo annulli.",
+  "signIn.policy": "Come questo sito tratta i tuoi dati",
+  "composer.needsPermission": "Per commentare qui come {{handle}}, questo sito ha bisogno di un'altra autorizzazione dal tuo account Atmosphere.",
+  "comment.hide": "Nascondi",
+  "comment.hideLabel": "Nascondi questo commento",
+  "comment.hideConfirm": "Nascondere questo commento qui e su Bluesky? Puoi mostrarlo di nuovo nell'app di Bluesky.",
+  "comment.hiding": "Nascondo…",
+  "comment.hidden": "Commento nascosto.",
+  "comment.hidePermission": "Per nascondere i commenti qui, questo sito ha bisogno di un'altra autorizzazione dal tuo account. Puoi anche nasconderli nell'app di Bluesky.",
+  "comment.deleteElsewhere": "dal sito di Bluesky",
+  "permission.heading": "Un'altra autorizzazione",
+  "permission.follow": "Per seguire {{handle}} da questo sito, serve un'altra autorizzazione dal tuo account Atmosphere: seguire account e smettere di seguirli.",
+  "permission.post": "Per rispondere e citare da questo sito, serve un'altra autorizzazione dal tuo account Atmosphere: creare post.",
+  "permission.react": "Per mettere mi piace e ripubblicare da questo sito, serve un'altra autorizzazione dal tuo account Atmosphere: mettere mi piace e ripubblicare, e annullarlo.",
+  "permission.approve": "Il sito del tuo account (quello di Bluesky, per la maggior parte delle persone) ti chiederà di approvare, e forse prima di accedere. Poi tornerai subito qui.",
+  "comment.withheld": "Non mostrato qui: l'autore chiede alle app di non mostrare i suoi post a chi non ha effettuato l'accesso."
 }

package/locales/ja.json

@@ -46,7 +46,7 @@
   "comment.deleteConfirm": "このコメントをBlueskyから削除しますか？",
   "comment.deleting": "削除中…",
   "comment.deleted": "コメントを削除しました。",
-  "comment.deletePermission": "ここでコメントを削除するには、このサイトにアカウントからの許可がもうひとつ必要です。Blueskyのアプリから削除することもできます。",
+  "comment.deletePermission": "ここでコメントを削除するには、このサイトにAtmosphereアカウントからの許可がもうひとつ必要です。{{link}}削除することもできます。",
   "comment.continue": "許可に進む",
   "comment.cancel": "キャンセル",
   "signInFirst.reply": "返信するにはログインしてください。",
@@ -62,9 +62,8 @@
   "messages.accountNotFound": "そのアカウントが見つかりませんでした。ハンドルを確認して、もう一度お試しください。",
   "messages.invalidHandle": "ハンドルではないようです。通常は alice.bsky.social のような形式です。",
   "messages.signedOut": "ログアウトされました。もう一度ログインしてください。",
-  "messages.needsPermission": "ここでコメントを削除するには、このサイトにアカウントからの許可がもうひとつ必要です。",
+  "messages.needsPermission": "それにはアカウントからの許可がもうひとつ必要です。",
   "messages.notAllowed": "ここではその操作はできません。",
-  "messages.newPermissions": "このサイトはいいねとリポストもできるようになったため、改めて許可が必要です。もう一度ログインしてください。",
   "messages.tooLong": "投稿は{{max}}文字までです。",
   "messages.tooMany": "操作が早すぎます。1分待ってから、もう一度お試しください。",
   "messages.error": "うまくいきませんでした。もう一度お試しください。",
@@ -88,5 +87,22 @@
   "follow.following": "フォロー中",
   "follow.followAs": "{{me}}として{{handle}}をフォロー",
   "follow.followingLabel": "{{handle}}をフォローしています",
-  "credit": "{{link}}で動作しています"
+  "credit": "{{link}}で動作しています",
+  "callback.signingIn": "ログインしています…",
+  "signIn.access": "ログイン情報はこのブラウザの中だけに保存されます。このサイトのサーバーがそれを見ることはなく、あなたの代わりに投稿することもできません。ログアウトすると取り消されます。",
+  "signIn.policy": "このサイトでのデータの取り扱い",
+  "composer.needsPermission": "ここで{{handle}}としてコメントするには、このサイトにAtmosphereアカウントからの許可がもうひとつ必要です。",
+  "comment.hide": "非表示",
+  "comment.hideLabel": "このコメントを非表示にする",
+  "comment.hideConfirm": "このコメントをこことBlueskyで非表示にしますか？Blueskyのアプリで再表示できます。",
+  "comment.hiding": "非表示にしています…",
+  "comment.hidden": "コメントを非表示にしました。",
+  "comment.hidePermission": "ここでコメントを非表示にするには、このサイトにアカウントからの許可がもうひとつ必要です。Blueskyのアプリでも非表示にできます。",
+  "comment.deleteElsewhere": "Blueskyのウェブサイトから",
+  "permission.heading": "もうひとつの許可",
+  "permission.follow": "このサイトから{{handle}}をフォローするには、Atmosphereアカウントからの許可がもうひとつ必要です（アカウントのフォローとフォロー解除）。",
+  "permission.post": "このサイトから返信や引用をするには、Atmosphereアカウントからの許可がもうひとつ必要です（投稿の作成）。",
+  "permission.react": "このサイトからいいねやリポストをするには、Atmosphereアカウントからの許可がもうひとつ必要です（いいねとリポスト、その取り消し）。",
+  "permission.approve": "アカウントのサイト（ほとんどの方はBluesky）で承認を求められます。先にそこでログインを求められることもあります。その後、すぐにここへ戻ります。",
+  "comment.withheld": "ここには表示されません：投稿者は、ログインしていない人に投稿を表示しないようアプリに求めています。"
 }

package/locales/nl.json

@@ -49,7 +49,7 @@
   "comment.deleteConfirm": "Deze reactie van Bluesky verwijderen?",
   "comment.deleting": "Verwijderen…",
   "comment.deleted": "Je reactie is verwijderd.",
-  "comment.deletePermission": "Om hier reacties te verwijderen, heeft deze site nog één toestemming van je account nodig. Je kunt hem ook in elke Bluesky-app verwijderen.",
+  "comment.deletePermission": "Om hier reacties te verwijderen, heeft deze site nog één toestemming van je Atmosphere-account nodig. Je kunt hem ook {{link}} verwijderen.",
   "comment.continue": "Doorgaan om toe te staan",
   "comment.cancel": "Annuleren",
   "signInFirst.reply": "Log in om te reageren.",
@@ -65,9 +65,8 @@
   "messages.accountNotFound": "We konden dat account niet vinden. Controleer de handle en probeer het opnieuw.",
   "messages.invalidHandle": "Dat lijkt geen handle. Meestal is het zoiets als alice.bsky.social.",
   "messages.signedOut": "Je bent uitgelogd. Log opnieuw in.",
-  "messages.needsPermission": "Om hier reacties te verwijderen, heeft deze site nog één toestemming van je account nodig.",
+  "messages.needsPermission": "Daarvoor is nog één toestemming van je account nodig.",
   "messages.notAllowed": "Dat kan hier niet.",
-  "messages.newPermissions": "Deze site kan nu ook voor je liken en reposten en heeft daarom opnieuw je toestemming nodig. Log opnieuw in.",
   "messages.tooLong": "Berichten mogen maximaal {{max}} tekens lang zijn.",
   "messages.tooMany": "Je gaat wel snel. Wacht een minuut en probeer het opnieuw.",
   "messages.error": "Dat is niet gelukt. Probeer het opnieuw.",
@@ -91,5 +90,22 @@
   "follow.following": "Volgend",
   "follow.followAs": "{{handle}} volgen als {{me}}",
   "follow.followingLabel": "Je volgt {{handle}}",
-  "credit": "Mogelijk gemaakt door {{link}}"
+  "credit": "Mogelijk gemaakt door {{link}}",
+  "callback.signingIn": "Bezig met inloggen…",
+  "signIn.access": "Je login blijft in deze browser: de server van deze site ziet hem nooit en kan niet namens jou posten, en uitloggen trekt hem in.",
+  "signIn.policy": "Hoe deze site met je gegevens omgaat",
+  "composer.needsPermission": "Om hier als {{handle}} te reageren, heeft deze site nog één toestemming van je Atmosphere-account nodig.",
+  "comment.hide": "Verbergen",
+  "comment.hideLabel": "Deze reactie verbergen",
+  "comment.hideConfirm": "Deze reactie hier en op Bluesky verbergen? Je kunt hem in de Bluesky-app weer tonen.",
+  "comment.hiding": "Verbergen…",
+  "comment.hidden": "Reactie verborgen.",
+  "comment.hidePermission": "Om hier reacties te verbergen, heeft deze site nog één toestemming van je account nodig. Je kunt ze ook in de Bluesky-app verbergen.",
+  "comment.deleteElsewhere": "via de Bluesky-website",
+  "permission.heading": "Nog één toestemming",
+  "permission.follow": "Om {{handle}} vanaf deze site te volgen, is nog één toestemming van je Atmosphere-account nodig: accounts volgen en ontvolgen.",
+  "permission.post": "Om vanaf deze site te reageren en te citeren, is nog één toestemming van je Atmosphere-account nodig: berichten plaatsen.",
+  "permission.react": "Om vanaf deze site te liken en te reposten, is nog één toestemming van je Atmosphere-account nodig: liken en reposten, en dat ongedaan maken.",
+  "permission.approve": "De site van je account (voor de meeste mensen die van Bluesky) vraagt je dit goed te keuren, en misschien eerst daar in te loggen. Daarna kom je meteen hierheen terug.",
+  "comment.withheld": "Hier niet getoond: de schrijver vraagt apps om zijn of haar berichten niet te tonen aan mensen die niet zijn ingelogd."
 }

package/locales/pt.json

@@ -52,7 +52,7 @@
   "comment.deleteConfirm": "Excluir este comentário do Bluesky?",
   "comment.deleting": "Excluindo…",
   "comment.deleted": "Seu comentário foi excluído.",
-  "comment.deletePermission": "Para excluir comentários aqui, este site precisa de mais uma permissão da sua conta. Você também pode excluí-lo em qualquer app do Bluesky.",
+  "comment.deletePermission": "Para excluir comentários aqui, este site precisa de mais uma permissão da sua conta Atmosphere. Ou você pode excluí-lo {{link}}.",
   "comment.continue": "Continuar para aprovar",
   "comment.cancel": "Cancelar",
   "signInFirst.reply": "Entre para responder.",
@@ -68,9 +68,8 @@
   "messages.accountNotFound": "Não encontramos essa conta. Confira o identificador e tente de novo.",
   "messages.invalidHandle": "Isso não parece um identificador. Normalmente é algo como alice.bsky.social.",
   "messages.signedOut": "Você foi desconectado. Entre de novo.",
-  "messages.needsPermission": "Para excluir comentários aqui, este site precisa de mais uma permissão da sua conta.",
+  "messages.needsPermission": "Isso precisa de mais uma permissão da sua conta.",
   "messages.notAllowed": "Isso não pode ser feito aqui.",
-  "messages.newPermissions": "Este site agora também pode curtir e repostar por você, então precisa da sua permissão de novo. Entre de novo.",
   "messages.tooLong": "As publicações podem ter até {{max}} caracteres.",
   "messages.tooMany": "Você está indo rápido demais. Espere um minuto e tente de novo.",
   "messages.error": "Não deu certo. Tente de novo.",
@@ -94,5 +93,22 @@
   "follow.following": "Seguindo",
   "follow.followAs": "Seguir {{handle}} como {{me}}",
   "follow.followingLabel": "Você segue {{handle}}",
-  "credit": "Feito com {{link}}"
+  "credit": "Feito com {{link}}",
+  "callback.signingIn": "Entrando…",
+  "signIn.access": "Seu login fica neste navegador: o servidor deste site nunca o vê nem pode publicar por você, e sair o cancela.",
+  "signIn.policy": "Como este site trata seus dados",
+  "composer.needsPermission": "Para comentar aqui como {{handle}}, este site precisa de mais uma permissão da sua conta Atmosphere.",
+  "comment.hide": "Ocultar",
+  "comment.hideLabel": "Ocultar este comentário",
+  "comment.hideConfirm": "Ocultar este comentário aqui e no Bluesky? Você pode mostrá-lo de novo no app do Bluesky.",
+  "comment.hiding": "Ocultando…",
+  "comment.hidden": "Comentário ocultado.",
+  "comment.hidePermission": "Para ocultar comentários aqui, este site precisa de mais uma permissão da sua conta. Você também pode ocultá-los no app do Bluesky.",
+  "comment.deleteElsewhere": "no site do Bluesky",
+  "permission.heading": "Mais uma permissão",
+  "permission.follow": "Para seguir {{handle}} por este site, ele precisa de mais uma permissão da sua conta Atmosphere: seguir e deixar de seguir contas.",
+  "permission.post": "Para responder e citar por este site, ele precisa de mais uma permissão da sua conta Atmosphere: criar publicações.",
+  "permission.react": "Para curtir e repostar por este site, ele precisa de mais uma permissão da sua conta Atmosphere: curtir e repostar, e desfazer isso.",
+  "permission.approve": "O site da sua conta (o do Bluesky, para a maioria das pessoas) vai pedir que você aprove, e talvez que entre lá primeiro. Depois você volta direto para cá.",
+  "comment.withheld": "Não exibido aqui: o autor pede aos apps que não mostrem suas publicações a quem não está conectado."
 }