astro-atmosphere-comments 0.4.2 → 0.6.0

package/locales/en.json

@@ -1,14 +1,16 @@
 {
-  "signIn.heading": "Sign in to leave a comment, like or repost",
-  "signIn.anyAccount": "Any {{atmosphereAccount}} works, including {{bluesky}}: one account for a whole network of open apps.",
+  "signIn.heading": "Sign in to leave a comment",
+  "signIn.anyAccount": "Use {{bluesky}} or any other {{atmosphereAccount}}. {{createAccount}}",
   "signIn.atmosphereAccount": "Atmosphere account",
+  "signIn.more": "How does signing in work?",
   "signIn.button": "Sign in with Atmosphere",
   "signIn.matchingAccounts": "Matching accounts",
-  "signIn.privacy": "You'll approve this on your account's own site (Bluesky's, for most people); your password is never shared here. No account yet? {{createAccount}}.",
-  "signIn.createAccount": "Create a free Atmosphere account",
-  "elsewhere.text": "Rather not sign in here? {{link}} It shows up here just the same, as do likes and reposts.",
+  "signIn.privacy": "You sign in on your account's own site (Bluesky's, for most people) and approve what this site can do. Your password is never shared here.",
+  "signIn.createAccount": "Create one for free",
+  "elsewhere.text": "Rather not sign in? {{link}}",
   "elsewhere.link": "Reply on Bluesky instead →",
   "actions.label": "Respond to this post",
+  "actions.likeAndRecommend": "Like on Bluesky, and recommend in apps such as Leaflet",
   "actions.like": "Like",
   "actions.liked": "Liked",
   "actions.repost": "Repost",
@@ -49,25 +51,29 @@
   "comment.deleteConfirm": "Delete this comment from Bluesky?",
   "comment.deleting": "Deleting…",
   "comment.deleted": "Your comment was deleted.",
-  "comment.deletePermission": "To delete comments here, this site needs one more permission from your account. You can also delete it in any Bluesky app.",
+  "comment.deletePermission": "To delete comments here, this site needs one more permission from your Atmosphere account. Alternatively, you can delete it {{link}}.",
   "comment.continue": "Continue to approve",
   "comment.cancel": "Cancel",
-  "signInFirst.reply": "Sign in to reply.",
-  "signInFirst.like": "Sign in to like comments.",
-  "signInFirst.repost": "Sign in to repost comments.",
+  "signInFirst.reply": "Sign in to reply",
+  "signInFirst.like": "Sign in to like this comment",
+  "signInFirst.repost": "Sign in to repost this comment",
+  "signInFirst.likePost": "Sign in to like this post",
+  "signInFirst.repostPost": "Sign in to repost this post",
+  "signInFirst.quotePost": "Sign in to quote this post",
+  "comment.prompt": "Write a comment…",
+  "comment.signIn": "Sign in",
   "status.liked": "Liked.",
   "status.likeRemoved": "Like removed.",
   "status.reposted": "Reposted.",
   "status.repostRemoved": "Repost removed.",
   "status.signedOut": "You're signed out.",
-  "messages.signedIn": "You're signed in. You can comment, like or repost above.",
+  "messages.signedIn": "You're signed in.",
   "messages.signInFailed": "Signing in didn't finish. Please try again.",
   "messages.accountNotFound": "We couldn't find that account. Check the handle and try again.",
   "messages.invalidHandle": "That doesn't look like a handle. It's usually something like alice.bsky.social.",
   "messages.signedOut": "You've been signed out. Please sign in again.",
-  "messages.needsPermission": "To delete comments here, this site needs one more permission from your account.",
+  "messages.needsPermission": "That needs one more permission from your account.",
   "messages.notAllowed": "That can't be done here.",
-  "messages.newPermissions": "This site can now also like and repost for you, so it needs your permission again. Please sign in again.",
   "messages.tooLong": "Posts can be up to {{max}} characters.",
   "messages.tooMany": "You're going quickly. Please wait a minute and try again.",
   "messages.error": "That didn't work. Please try again.",
@@ -91,5 +97,34 @@
   "follow.following": "Following",
   "follow.followAs": "Follow {{handle}} as {{me}}",
   "follow.followingLabel": "You follow {{handle}}",
-  "credit": "Powered by {{link}}"
+  "subscribe.subscribe": "Subscribe",
+  "subscribe.subscribed": "✓ Subscribed",
+  "subscribe.subscribeLabel": "Subscribe with your Atmosphere account, to read new posts in apps such as Leaflet or Standard Reader",
+  "subscribe.subscribedLabel": "You're subscribed. Press to unsubscribe",
+  "subscribe.signIn": "Sign in to subscribe",
+  "subscribe.more": "More ways to follow",
+  "subscribe.copyLink": "Copy link",
+  "subscribe.copied": "Copied!",
+  "subscribe.feed": "RSS feed",
+  "subscribe.viewBluesky": "View on Bluesky",
+  "subscribe.standardReader": "View on Standard Reader",
+  "subscribe.panelText": "Read new posts in apps such as {{leaflet}} or {{standardReader}}.",
+  "credit": "Powered by {{link}}",
+  "callback.signingIn": "Signing you in…",
+  "signIn.access": "Your sign-in is kept only in this browser. This site's server never sees it, so it can't post for you. Signing out here cancels it.",
+  "signIn.policy": "How this site handles your data",
+  "composer.needsPermission": "To comment here as {{handle}}, this site needs one more permission from your Atmosphere account.",
+  "comment.hide": "Hide",
+  "comment.hideLabel": "Hide this comment",
+  "comment.hideConfirm": "Hide this comment here and on Bluesky? You can show it again in the Bluesky app.",
+  "comment.hiding": "Hiding…",
+  "comment.hidden": "Comment hidden.",
+  "comment.hidePermission": "To hide comments here, this site needs one more permission from your account. You can also hide them in the Bluesky app.",
+  "comment.deleteElsewhere": "via the Bluesky website",
+  "permission.heading": "One more permission",
+  "permission.follow": "To follow {{handle}} from this site, it needs one more permission from your Atmosphere account: to follow and unfollow accounts.",
+  "permission.post": "To reply and quote from this site, it needs one more permission from your Atmosphere account: to create posts.",
+  "permission.react": "To like and repost from this site, it needs one more permission from your Atmosphere account: to like and repost, and to undo that.",
+  "permission.approve": "Your account's own site (Bluesky's, for most people) will ask you to approve it, and may ask you to sign in there first. Then you'll come straight back here.",
+  "comment.withheld": "Not shown here: its author asks apps not to show their posts to people who aren't signed in."
 }

package/locales/es.json

@@ -52,7 +52,7 @@
   "comment.deleteConfirm": "¿Eliminar este comentario de Bluesky?",
   "comment.deleting": "Eliminando…",
   "comment.deleted": "Tu comentario se ha eliminado.",
-  "comment.deletePermission": "Para eliminar comentarios aquí, este sitio necesita un permiso más de tu cuenta. También puedes eliminarlo en cualquier aplicación de Bluesky.",
+  "comment.deletePermission": "Para eliminar comentarios aquí, este sitio necesita un permiso más de tu cuenta de Atmosphere. También puedes eliminarlo {{link}}.",
   "comment.continue": "Continuar para aprobar",
   "comment.cancel": "Cancelar",
   "signInFirst.reply": "Inicia sesión para responder.",
@@ -68,9 +68,8 @@
   "messages.accountNotFound": "No encontramos esa cuenta. Revisa el identificador e inténtalo de nuevo.",
   "messages.invalidHandle": "Eso no parece un identificador. Suele ser algo como alice.bsky.social.",
   "messages.signedOut": "Se ha cerrado tu sesión. Vuelve a iniciar sesión.",
-  "messages.needsPermission": "Para eliminar comentarios aquí, este sitio necesita un permiso más de tu cuenta.",
+  "messages.needsPermission": "Eso necesita un permiso más de tu cuenta.",
   "messages.notAllowed": "Eso no se puede hacer aquí.",
-  "messages.newPermissions": "Este sitio ahora también puede dar me gusta y compartir por ti, así que necesita tu permiso de nuevo. Vuelve a iniciar sesión.",
   "messages.tooLong": "Las publicaciones pueden tener hasta {{max}} caracteres.",
   "messages.tooMany": "Vas muy rápido. Espera un minuto e inténtalo de nuevo.",
   "messages.error": "No ha funcionado. Inténtalo de nuevo.",
@@ -94,5 +93,22 @@
   "follow.following": "Siguiendo",
   "follow.followAs": "Seguir a {{handle}} como {{me}}",
   "follow.followingLabel": "Sigues a {{handle}}",
-  "credit": "Funciona con {{link}}"
+  "credit": "Funciona con {{link}}",
+  "callback.signingIn": "Iniciando sesión…",
+  "signIn.access": "Tu sesión se queda en este navegador: el servidor de este sitio nunca la ve ni puede publicar por ti, y al cerrar sesión se cancela.",
+  "signIn.policy": "Cómo trata este sitio tus datos",
+  "composer.needsPermission": "Para comentar aquí como {{handle}}, este sitio necesita un permiso más de tu cuenta de Atmosphere.",
+  "comment.hide": "Ocultar",
+  "comment.hideLabel": "Ocultar este comentario",
+  "comment.hideConfirm": "¿Ocultar este comentario aquí y en Bluesky? Puedes volver a mostrarlo en la aplicación de Bluesky.",
+  "comment.hiding": "Ocultando…",
+  "comment.hidden": "Comentario oculto.",
+  "comment.hidePermission": "Para ocultar comentarios aquí, este sitio necesita un permiso más de tu cuenta. También puedes ocultarlos en la aplicación de Bluesky.",
+  "comment.deleteElsewhere": "en la web de Bluesky",
+  "permission.heading": "Un permiso más",
+  "permission.follow": "Para seguir a {{handle}} desde este sitio, necesita un permiso más de tu cuenta de Atmosphere: seguir y dejar de seguir cuentas.",
+  "permission.post": "Para responder y citar desde este sitio, necesita un permiso más de tu cuenta de Atmosphere: crear publicaciones.",
+  "permission.react": "Para dar me gusta y republicar desde este sitio, necesita un permiso más de tu cuenta de Atmosphere: dar me gusta y republicar, y deshacerlo.",
+  "permission.approve": "El sitio de tu cuenta (el de Bluesky, para la mayoría) te pedirá que lo apruebes, y quizá que inicies sesión allí primero. Después volverás directamente aquí.",
+  "comment.withheld": "No se muestra aquí: su autor pide a las aplicaciones que no muestren sus publicaciones a quien no haya iniciado sesión."
 }

package/locales/fr.json

@@ -52,7 +52,7 @@
   "comment.deleteConfirm": "Supprimer ce commentaire de Bluesky ?",
   "comment.deleting": "Suppression…",
   "comment.deleted": "Ton commentaire a été supprimé.",
-  "comment.deletePermission": "Pour supprimer des commentaires ici, ce site a besoin d'une autorisation de plus de ton compte. Tu peux aussi le supprimer dans n'importe quelle application Bluesky.",
+  "comment.deletePermission": "Pour supprimer des commentaires ici, ce site a besoin d'une autorisation de plus de ton compte Atmosphere. Sinon, tu peux le supprimer {{link}}.",
   "comment.continue": "Continuer pour autoriser",
   "comment.cancel": "Annuler",
   "signInFirst.reply": "Connecte-toi pour répondre.",
@@ -68,9 +68,8 @@
   "messages.accountNotFound": "Ce compte est introuvable. Vérifie l'identifiant et réessaie.",
   "messages.invalidHandle": "Ça ne ressemble pas à un identifiant. C'est généralement quelque chose comme alice.bsky.social.",
   "messages.signedOut": "Tu as été déconnecté. Connecte-toi à nouveau.",
-  "messages.needsPermission": "Pour supprimer des commentaires ici, ce site a besoin d'une autorisation de plus de ton compte.",
+  "messages.needsPermission": "Cela nécessite une autorisation de plus de ton compte.",
   "messages.notAllowed": "Ce n'est pas possible ici.",
-  "messages.newPermissions": "Ce site peut désormais aussi aimer et republier pour toi ; il a donc de nouveau besoin de ton autorisation. Connecte-toi à nouveau.",
   "messages.tooLong": "Les publications peuvent contenir jusqu'à {{max}} caractères.",
   "messages.tooMany": "Tu vas un peu vite. Attends une minute et réessaie.",
   "messages.error": "Ça n'a pas marché. Réessaie.",
@@ -94,5 +93,22 @@
   "follow.following": "Abonné",
   "follow.followAs": "Suivre {{handle}} en tant que {{me}}",
   "follow.followingLabel": "Tu suis {{handle}}",
-  "credit": "Propulsé par {{link}}"
+  "credit": "Propulsé par {{link}}",
+  "callback.signingIn": "Connexion en cours…",
+  "signIn.access": "Ta connexion reste dans ce navigateur : le serveur de ce site ne la voit jamais et ne peut pas publier à ta place, et te déconnecter l'annule.",
+  "signIn.policy": "Comment ce site traite tes données",
+  "composer.needsPermission": "Pour commenter ici en tant que {{handle}}, ce site a besoin d'une autorisation de plus de ton compte Atmosphere.",
+  "comment.hide": "Masquer",
+  "comment.hideLabel": "Masquer ce commentaire",
+  "comment.hideConfirm": "Masquer ce commentaire ici et sur Bluesky ? Tu pourras le réafficher dans l'application Bluesky.",
+  "comment.hiding": "Masquage…",
+  "comment.hidden": "Commentaire masqué.",
+  "comment.hidePermission": "Pour masquer des commentaires ici, ce site a besoin d'une autorisation de plus de ton compte. Tu peux aussi les masquer dans l'application Bluesky.",
+  "comment.deleteElsewhere": "sur le site de Bluesky",
+  "permission.heading": "Une autorisation de plus",
+  "permission.follow": "Pour suivre {{handle}} depuis ce site, il a besoin d'une autorisation de plus de ton compte Atmosphere : suivre des comptes et ne plus les suivre.",
+  "permission.post": "Pour répondre et citer depuis ce site, il a besoin d'une autorisation de plus de ton compte Atmosphere : créer des publications.",
+  "permission.react": "Pour aimer et republier depuis ce site, il a besoin d'une autorisation de plus de ton compte Atmosphere : aimer et republier, et l'annuler.",
+  "permission.approve": "Le site de ton compte (celui de Bluesky, pour la plupart des gens) te demandera de l'approuver, et peut-être de t'y connecter d'abord. Ensuite, tu reviendras directement ici.",
+  "comment.withheld": "Non affiché ici : son auteur demande aux applications de ne pas montrer ses publications aux personnes non connectées."
 }

package/locales/it.json

@@ -52,7 +52,7 @@
   "comment.deleteConfirm": "Eliminare questo commento da Bluesky?",
   "comment.deleting": "Eliminazione…",
   "comment.deleted": "Il tuo commento è stato eliminato.",
-  "comment.deletePermission": "Per eliminare i commenti qui, questo sito ha bisogno di un'altra autorizzazione dal tuo account. Puoi anche eliminarlo in qualsiasi app di Bluesky.",
+  "comment.deletePermission": "Per eliminare i commenti qui, questo sito ha bisogno di un'altra autorizzazione dal tuo account Atmosphere. In alternativa, puoi eliminarlo {{link}}.",
   "comment.continue": "Continua per approvare",
   "comment.cancel": "Annulla",
   "signInFirst.reply": "Accedi per rispondere.",
@@ -68,9 +68,8 @@
   "messages.accountNotFound": "Non abbiamo trovato quell'account. Controlla l'handle e riprova.",
   "messages.invalidHandle": "Non sembra un handle. Di solito è qualcosa come alice.bsky.social.",
   "messages.signedOut": "Sei stato disconnesso. Accedi di nuovo.",
-  "messages.needsPermission": "Per eliminare i commenti qui, questo sito ha bisogno di un'altra autorizzazione dal tuo account.",
+  "messages.needsPermission": "Serve un'altra autorizzazione dal tuo account.",
   "messages.notAllowed": "Qui non si può fare.",
-  "messages.newPermissions": "Ora questo sito può anche mettere mi piace e ripubblicare per te, quindi ha di nuovo bisogno della tua autorizzazione. Accedi di nuovo.",
   "messages.tooLong": "I post possono avere fino a {{max}} caratteri.",
   "messages.tooMany": "Stai andando un po' veloce. Aspetta un minuto e riprova.",
   "messages.error": "Non ha funzionato. Riprova.",
@@ -94,5 +93,22 @@
   "follow.following": "Segui già",
   "follow.followAs": "Segui {{handle}} come {{me}}",
   "follow.followingLabel": "Segui {{handle}}",
-  "credit": "Realizzato con {{link}}"
+  "credit": "Realizzato con {{link}}",
+  "callback.signingIn": "Accesso in corso…",
+  "signIn.access": "Il tuo accesso resta in questo browser: il server di questo sito non lo vede mai e non può pubblicare al posto tuo, e uscendo lo annulli.",
+  "signIn.policy": "Come questo sito tratta i tuoi dati",
+  "composer.needsPermission": "Per commentare qui come {{handle}}, questo sito ha bisogno di un'altra autorizzazione dal tuo account Atmosphere.",
+  "comment.hide": "Nascondi",
+  "comment.hideLabel": "Nascondi questo commento",
+  "comment.hideConfirm": "Nascondere questo commento qui e su Bluesky? Puoi mostrarlo di nuovo nell'app di Bluesky.",
+  "comment.hiding": "Nascondo…",
+  "comment.hidden": "Commento nascosto.",
+  "comment.hidePermission": "Per nascondere i commenti qui, questo sito ha bisogno di un'altra autorizzazione dal tuo account. Puoi anche nasconderli nell'app di Bluesky.",
+  "comment.deleteElsewhere": "dal sito di Bluesky",
+  "permission.heading": "Un'altra autorizzazione",
+  "permission.follow": "Per seguire {{handle}} da questo sito, serve un'altra autorizzazione dal tuo account Atmosphere: seguire account e smettere di seguirli.",
+  "permission.post": "Per rispondere e citare da questo sito, serve un'altra autorizzazione dal tuo account Atmosphere: creare post.",
+  "permission.react": "Per mettere mi piace e ripubblicare da questo sito, serve un'altra autorizzazione dal tuo account Atmosphere: mettere mi piace e ripubblicare, e annullarlo.",
+  "permission.approve": "Il sito del tuo account (quello di Bluesky, per la maggior parte delle persone) ti chiederà di approvare, e forse prima di accedere. Poi tornerai subito qui.",
+  "comment.withheld": "Non mostrato qui: l'autore chiede alle app di non mostrare i suoi post a chi non ha effettuato l'accesso."
 }

package/locales/ja.json

@@ -46,7 +46,7 @@
   "comment.deleteConfirm": "このコメントをBlueskyから削除しますか？",
   "comment.deleting": "削除中…",
   "comment.deleted": "コメントを削除しました。",
-  "comment.deletePermission": "ここでコメントを削除するには、このサイトにアカウントからの許可がもうひとつ必要です。Blueskyのアプリから削除することもできます。",
+  "comment.deletePermission": "ここでコメントを削除するには、このサイトにAtmosphereアカウントからの許可がもうひとつ必要です。{{link}}削除することもできます。",
   "comment.continue": "許可に進む",
   "comment.cancel": "キャンセル",
   "signInFirst.reply": "返信するにはログインしてください。",
@@ -62,9 +62,8 @@
   "messages.accountNotFound": "そのアカウントが見つかりませんでした。ハンドルを確認して、もう一度お試しください。",
   "messages.invalidHandle": "ハンドルではないようです。通常は alice.bsky.social のような形式です。",
   "messages.signedOut": "ログアウトされました。もう一度ログインしてください。",
-  "messages.needsPermission": "ここでコメントを削除するには、このサイトにアカウントからの許可がもうひとつ必要です。",
+  "messages.needsPermission": "それにはアカウントからの許可がもうひとつ必要です。",
   "messages.notAllowed": "ここではその操作はできません。",
-  "messages.newPermissions": "このサイトはいいねとリポストもできるようになったため、改めて許可が必要です。もう一度ログインしてください。",
   "messages.tooLong": "投稿は{{max}}文字までです。",
   "messages.tooMany": "操作が早すぎます。1分待ってから、もう一度お試しください。",
   "messages.error": "うまくいきませんでした。もう一度お試しください。",
@@ -88,5 +87,22 @@
   "follow.following": "フォロー中",
   "follow.followAs": "{{me}}として{{handle}}をフォロー",
   "follow.followingLabel": "{{handle}}をフォローしています",
-  "credit": "{{link}}で動作しています"
+  "credit": "{{link}}で動作しています",
+  "callback.signingIn": "ログインしています…",
+  "signIn.access": "ログイン情報はこのブラウザの中だけに保存されます。このサイトのサーバーがそれを見ることはなく、あなたの代わりに投稿することもできません。ログアウトすると取り消されます。",
+  "signIn.policy": "このサイトでのデータの取り扱い",
+  "composer.needsPermission": "ここで{{handle}}としてコメントするには、このサイトにAtmosphereアカウントからの許可がもうひとつ必要です。",
+  "comment.hide": "非表示",
+  "comment.hideLabel": "このコメントを非表示にする",
+  "comment.hideConfirm": "このコメントをこことBlueskyで非表示にしますか？Blueskyのアプリで再表示できます。",
+  "comment.hiding": "非表示にしています…",
+  "comment.hidden": "コメントを非表示にしました。",
+  "comment.hidePermission": "ここでコメントを非表示にするには、このサイトにアカウントからの許可がもうひとつ必要です。Blueskyのアプリでも非表示にできます。",
+  "comment.deleteElsewhere": "Blueskyのウェブサイトから",
+  "permission.heading": "もうひとつの許可",
+  "permission.follow": "このサイトから{{handle}}をフォローするには、Atmosphereアカウントからの許可がもうひとつ必要です（アカウントのフォローとフォロー解除）。",
+  "permission.post": "このサイトから返信や引用をするには、Atmosphereアカウントからの許可がもうひとつ必要です（投稿の作成）。",
+  "permission.react": "このサイトからいいねやリポストをするには、Atmosphereアカウントからの許可がもうひとつ必要です（いいねとリポスト、その取り消し）。",
+  "permission.approve": "アカウントのサイト（ほとんどの方はBluesky）で承認を求められます。先にそこでログインを求められることもあります。その後、すぐにここへ戻ります。",
+  "comment.withheld": "ここには表示されません：投稿者は、ログインしていない人に投稿を表示しないようアプリに求めています。"
 }

package/locales/nl.json

@@ -49,7 +49,7 @@
   "comment.deleteConfirm": "Deze reactie van Bluesky verwijderen?",
   "comment.deleting": "Verwijderen…",
   "comment.deleted": "Je reactie is verwijderd.",
-  "comment.deletePermission": "Om hier reacties te verwijderen, heeft deze site nog één toestemming van je account nodig. Je kunt hem ook in elke Bluesky-app verwijderen.",
+  "comment.deletePermission": "Om hier reacties te verwijderen, heeft deze site nog één toestemming van je Atmosphere-account nodig. Je kunt hem ook {{link}} verwijderen.",
   "comment.continue": "Doorgaan om toe te staan",
   "comment.cancel": "Annuleren",
   "signInFirst.reply": "Log in om te reageren.",
@@ -65,9 +65,8 @@
   "messages.accountNotFound": "We konden dat account niet vinden. Controleer de handle en probeer het opnieuw.",
   "messages.invalidHandle": "Dat lijkt geen handle. Meestal is het zoiets als alice.bsky.social.",
   "messages.signedOut": "Je bent uitgelogd. Log opnieuw in.",
-  "messages.needsPermission": "Om hier reacties te verwijderen, heeft deze site nog één toestemming van je account nodig.",
+  "messages.needsPermission": "Daarvoor is nog één toestemming van je account nodig.",
   "messages.notAllowed": "Dat kan hier niet.",
-  "messages.newPermissions": "Deze site kan nu ook voor je liken en reposten en heeft daarom opnieuw je toestemming nodig. Log opnieuw in.",
   "messages.tooLong": "Berichten mogen maximaal {{max}} tekens lang zijn.",
   "messages.tooMany": "Je gaat wel snel. Wacht een minuut en probeer het opnieuw.",
   "messages.error": "Dat is niet gelukt. Probeer het opnieuw.",
@@ -91,5 +90,22 @@
   "follow.following": "Volgend",
   "follow.followAs": "{{handle}} volgen als {{me}}",
   "follow.followingLabel": "Je volgt {{handle}}",
-  "credit": "Mogelijk gemaakt door {{link}}"
+  "credit": "Mogelijk gemaakt door {{link}}",
+  "callback.signingIn": "Bezig met inloggen…",
+  "signIn.access": "Je login blijft in deze browser: de server van deze site ziet hem nooit en kan niet namens jou posten, en uitloggen trekt hem in.",
+  "signIn.policy": "Hoe deze site met je gegevens omgaat",
+  "composer.needsPermission": "Om hier als {{handle}} te reageren, heeft deze site nog één toestemming van je Atmosphere-account nodig.",
+  "comment.hide": "Verbergen",
+  "comment.hideLabel": "Deze reactie verbergen",
+  "comment.hideConfirm": "Deze reactie hier en op Bluesky verbergen? Je kunt hem in de Bluesky-app weer tonen.",
+  "comment.hiding": "Verbergen…",
+  "comment.hidden": "Reactie verborgen.",
+  "comment.hidePermission": "Om hier reacties te verbergen, heeft deze site nog één toestemming van je account nodig. Je kunt ze ook in de Bluesky-app verbergen.",
+  "comment.deleteElsewhere": "via de Bluesky-website",
+  "permission.heading": "Nog één toestemming",
+  "permission.follow": "Om {{handle}} vanaf deze site te volgen, is nog één toestemming van je Atmosphere-account nodig: accounts volgen en ontvolgen.",
+  "permission.post": "Om vanaf deze site te reageren en te citeren, is nog één toestemming van je Atmosphere-account nodig: berichten plaatsen.",
+  "permission.react": "Om vanaf deze site te liken en te reposten, is nog één toestemming van je Atmosphere-account nodig: liken en reposten, en dat ongedaan maken.",
+  "permission.approve": "De site van je account (voor de meeste mensen die van Bluesky) vraagt je dit goed te keuren, en misschien eerst daar in te loggen. Daarna kom je meteen hierheen terug.",
+  "comment.withheld": "Hier niet getoond: de schrijver vraagt apps om zijn of haar berichten niet te tonen aan mensen die niet zijn ingelogd."
 }

package/locales/pt.json

@@ -52,7 +52,7 @@
   "comment.deleteConfirm": "Excluir este comentário do Bluesky?",
   "comment.deleting": "Excluindo…",
   "comment.deleted": "Seu comentário foi excluído.",
-  "comment.deletePermission": "Para excluir comentários aqui, este site precisa de mais uma permissão da sua conta. Você também pode excluí-lo em qualquer app do Bluesky.",
+  "comment.deletePermission": "Para excluir comentários aqui, este site precisa de mais uma permissão da sua conta Atmosphere. Ou você pode excluí-lo {{link}}.",
   "comment.continue": "Continuar para aprovar",
   "comment.cancel": "Cancelar",
   "signInFirst.reply": "Entre para responder.",
@@ -68,9 +68,8 @@
   "messages.accountNotFound": "Não encontramos essa conta. Confira o identificador e tente de novo.",
   "messages.invalidHandle": "Isso não parece um identificador. Normalmente é algo como alice.bsky.social.",
   "messages.signedOut": "Você foi desconectado. Entre de novo.",
-  "messages.needsPermission": "Para excluir comentários aqui, este site precisa de mais uma permissão da sua conta.",
+  "messages.needsPermission": "Isso precisa de mais uma permissão da sua conta.",
   "messages.notAllowed": "Isso não pode ser feito aqui.",
-  "messages.newPermissions": "Este site agora também pode curtir e repostar por você, então precisa da sua permissão de novo. Entre de novo.",
   "messages.tooLong": "As publicações podem ter até {{max}} caracteres.",
   "messages.tooMany": "Você está indo rápido demais. Espere um minuto e tente de novo.",
   "messages.error": "Não deu certo. Tente de novo.",
@@ -94,5 +93,22 @@
   "follow.following": "Seguindo",
   "follow.followAs": "Seguir {{handle}} como {{me}}",
   "follow.followingLabel": "Você segue {{handle}}",
-  "credit": "Feito com {{link}}"
+  "credit": "Feito com {{link}}",
+  "callback.signingIn": "Entrando…",
+  "signIn.access": "Seu login fica neste navegador: o servidor deste site nunca o vê nem pode publicar por você, e sair o cancela.",
+  "signIn.policy": "Como este site trata seus dados",
+  "composer.needsPermission": "Para comentar aqui como {{handle}}, este site precisa de mais uma permissão da sua conta Atmosphere.",
+  "comment.hide": "Ocultar",
+  "comment.hideLabel": "Ocultar este comentário",
+  "comment.hideConfirm": "Ocultar este comentário aqui e no Bluesky? Você pode mostrá-lo de novo no app do Bluesky.",
+  "comment.hiding": "Ocultando…",
+  "comment.hidden": "Comentário ocultado.",
+  "comment.hidePermission": "Para ocultar comentários aqui, este site precisa de mais uma permissão da sua conta. Você também pode ocultá-los no app do Bluesky.",
+  "comment.deleteElsewhere": "no site do Bluesky",
+  "permission.heading": "Mais uma permissão",
+  "permission.follow": "Para seguir {{handle}} por este site, ele precisa de mais uma permissão da sua conta Atmosphere: seguir e deixar de seguir contas.",
+  "permission.post": "Para responder e citar por este site, ele precisa de mais uma permissão da sua conta Atmosphere: criar publicações.",
+  "permission.react": "Para curtir e repostar por este site, ele precisa de mais uma permissão da sua conta Atmosphere: curtir e repostar, e desfazer isso.",
+  "permission.approve": "O site da sua conta (o do Bluesky, para a maioria das pessoas) vai pedir que você aprove, e talvez que entre lá primeiro. Depois você volta direto para cá.",
+  "comment.withheld": "Não exibido aqui: o autor pede aos apps que não mostrem suas publicações a quem não está conectado."
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "astro-atmosphere-comments",
-  "version": "0.4.2",
+  "version": "0.6.0",
   "description": "Atmosphere Comments for Astro: Bluesky comments, likes, reposts and quote posts for Astro sites; readers sign in with their Atmosphere (AT Protocol) account and respond without leaving the page.",
   "type": "module",
   "license": "MIT",
@@ -34,14 +34,10 @@
     "./AtmosphereReactions.astro": "./components/AtmosphereReactions.astro"
   },
   "types": "./index.d.ts",
-  "bin": {
-    "astro-atmosphere-comments": "bin/cli.mjs"
-  },
   "files": [
     "index.mjs",
     "index.d.ts",
     "virtual.d.ts",
-    "bin",
     "components",
     "lib",
     "routes",
@@ -59,7 +55,6 @@
   },
   "dependencies": {
     "@atproto/api": "^0.25.0",
-    "@atproto/oauth-client": "^0.9.0",
-    "@atproto/oauth-client-node": "^0.5.13"
+    "@atproto/oauth-client-browser": "^0.5.11"
   }
 }

package/routes/callback.astro

@@ -0,0 +1,42 @@
+---
+// Where a reader's account host sends them back after they approve (or
+// decline) signing in. The browser finishes signing in here, keeping the
+// sign-in in its own storage, then goes back to the page the reader was on
+// (lib/client/account.ts). The approval arrives in the address's #fragment,
+// which browsers never send to the server.
+import settings from "../lib/settings";
+import { messagesFor, pickLocale, translate } from "../lib/i18n";
+
+const lang = pickLocale(undefined, settings.locale, Astro.currentLocale);
+const t = (key: string) => translate(messagesFor(lang, settings.messages), lang, key);
+---
+
+<!doctype html>
+<html lang={lang}>
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="robots" content="noindex" />
+    <meta name="referrer" content="no-referrer" />
+    <title>{t("callback.signingIn")}</title>
+    <style>
+      :root {
+        color-scheme: light dark;
+      }
+      body {
+        display: grid;
+        min-height: 100vh;
+        margin: 0;
+        place-items: center;
+        font: 1rem/1.5 system-ui, sans-serif;
+      }
+    </style>
+  </head>
+  <body>
+    <p role="status">{t("callback.signingIn")}</p>
+    <script>
+      import { finishSignIn } from "../lib/client/account";
+      void finishSignIn();
+    </script>
+  </body>
+</html>

package/routes/client-metadata.json.ts

@@ -1,7 +1,8 @@
 // The site's OAuth client metadata. Account hosts fetch this address (it is
 // the site's client ID) to learn its name, logo, callback address and scope.
 import type { APIRoute } from "astro";
-import { clientMetadata } from "../lib/oauth";
+import { clientMetadata } from "../lib/permissions";
+import settings from "../lib/settings";
 
 export const GET: APIRoute = () =>
-  Response.json(clientMetadata(), { headers: { "Cache-Control": "public, max-age=600" } });
+  Response.json(clientMetadata(settings), { headers: { "Cache-Control": "public, max-age=600" } });

package/routes/following.ts

@@ -0,0 +1,28 @@
+// Whether an account follows one of the site's own accounts, for the Follow
+// button: ?actor=<reader's DID>&subject=<DID in allowedAuthors> gives
+// { following } (the follow record's AT URI, or ""). From Bluesky's public
+// AppView: who follows whom is public.
+import type { APIRoute } from "astro";
+import { addressOf, json, rateLimit } from "../lib/http";
+import settings from "../lib/settings";
+
+const DID = /^did:[a-z0-9]+:[a-zA-Z0-9._:%-]+$/;
+const perAddress = rateLimit(30, 300);
+
+export const GET: APIRoute = async (context) => {
+  const actor = context.url.searchParams.get("actor") ?? "";
+  const subject = context.url.searchParams.get("subject") ?? "";
+  if (!DID.test(actor) || !settings.allowedAuthors.includes(subject)) return json({ error: "not-allowed" }, 400);
+  if (perAddress(addressOf(context))) return json({ error: "too-many" }, 429);
+  try {
+    const query = new URLSearchParams({ actor, others: subject });
+    const response = await fetch(`https://public.api.bsky.app/xrpc/app.bsky.graph.getRelationships?${query}`, {
+      signal: AbortSignal.timeout(5000),
+    });
+    if (!response.ok) throw new Error(`getRelationships ${response.status}`);
+    const data = (await response.json()) as { relationships?: Array<{ did?: string; following?: string }> };
+    return json({ following: data.relationships?.find((relationship) => relationship.did === subject)?.following ?? "" });
+  } catch {
+    return json({ error: "unavailable" }, 502);
+  }
+};

package/routes/identity.ts

@@ -0,0 +1,69 @@
+// Looks up an account for signing in: ?id=<handle or DID> gives its DID, its
+// DID document (which names the reader's account host) and its handle, as
+// the browser's OAuth library needs (lib/client/account.ts). Done here, so a
+// reader's browser contacts only their own account host while signing in,
+// not Bluesky's servers or the PLC directory. Nothing is stored; answers are
+// remembered for ten minutes, and requests are limited per address.
+import type { APIRoute } from "astro";
+import { addressOf, json, rateLimit } from "../lib/http";
+
+const APPVIEW = "https://public.api.bsky.app/xrpc/";
+const HANDLE = /^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z][a-z0-9-]{0,61}[a-z0-9]$/;
+const DID_PLC = /^did:plc:[a-z2-7]{24}$/;
+const DID_WEB = /^did:web:([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z][a-z0-9-]{0,61}[a-z0-9]$/;
+const REMEMBER_MS = 10 * 60 * 1000;
+
+const perAddress = rateLimit(20, 200);
+const overall = rateLimit(300, 6000);
+const recent = new Map<string, { answer: Identity; at: number }>();
+
+type DidDocument = { id: string; alsoKnownAs?: string[]; service?: { id: string; type: string; serviceEndpoint: unknown }[] };
+type Identity = { did: string; didDoc: DidDocument; handle: string };
+
+async function getJson<T>(url: string): Promise<T> {
+  const response = await fetch(url, { redirect: "error", signal: AbortSignal.timeout(5000) });
+  if (!response.ok) throw new Error(`${response.status}`);
+  if (Number(response.headers.get("content-length") || 0) > 100_000) throw new Error("too big");
+  return (await response.json()) as T;
+}
+
+async function didForHandle(handle: string): Promise<string> {
+  const { did } = await getJson<{ did?: string }>(`${APPVIEW}com.atproto.identity.resolveHandle?handle=${encodeURIComponent(handle)}`);
+  if (!did || !(DID_PLC.test(did) || DID_WEB.test(did))) throw new Error("no DID");
+  return did;
+}
+
+async function documentFor(did: string): Promise<DidDocument> {
+  const document = await getJson<DidDocument>(
+    did.startsWith("did:web:") ? `https://${did.slice("did:web:".length)}/.well-known/did.json` : `https://plc.directory/${did}`,
+  );
+  if (document.id !== did) throw new Error("wrong document");
+  return document;
+}
+
+async function lookUp(id: string): Promise<Identity> {
+  const did = id.startsWith("did:") ? id : await didForHandle(id);
+  const didDoc = await documentFor(did);
+  // The handle counts only if the document claims it and it points back here.
+  const claimed = didDoc.alsoKnownAs?.find((alias) => alias.startsWith("at://"))?.slice("at://".length).toLowerCase();
+  let handle = "handle.invalid";
+  if (claimed && claimed === id) handle = claimed;
+  else if (claimed && HANDLE.test(claimed)) handle = (await didForHandle(claimed).catch(() => "")) === did ? claimed : handle;
+  return { did, didDoc, handle };
+}
+
+export const GET: APIRoute = async (context) => {
+  const id = (context.url.searchParams.get("id") ?? "").trim().toLowerCase();
+  if (!(HANDLE.test(id) || DID_PLC.test(id) || DID_WEB.test(id)) || id.length > 253) return json({ error: "bad-request" }, 400);
+  const known = recent.get(id);
+  if (known && Date.now() - known.at < REMEMBER_MS) return json(known.answer);
+  if (perAddress(addressOf(context)) || overall("all")) return json({ error: "too-many" }, 429);
+  try {
+    const answer = await lookUp(id);
+    if (recent.size >= 500) recent.delete(recent.keys().next().value!);
+    recent.set(id, { answer, at: Date.now() });
+    return json(answer);
+  } catch {
+    return json({ error: "not-found" }, 404);
+  }
+};

package/routes/media.ts

@@ -1,27 +1,26 @@
 // Passes on a few images from Bluesky's image server, so readers' browsers
 // never load anything from Bluesky directly:
-//   ?avatar=<did>  the signed-in reader's own avatar, a site account's, or
-//                  one shown recently (in a thread, or suggested for an @mention);
+//   ?avatar=<did>  a site account's avatar, or one shown recently (in a
+//                  thread, suggested for an @mention, or a signed-in reader's
+//                  own, looked up by routes/profile.ts);
 //   ?thumb=<uri>   the link-card picture of one of the site's announcements.
 // Nothing else can be fetched through it.
 import type { APIRoute } from "astro";
 import { profileFor } from "../lib/profile";
 import { quotedPost } from "../lib/quoted";
-import { isSitePost } from "../lib/reader";
+import { isSitePost } from "../lib/uris";
 import settings from "../lib/settings";
 import { knownAvatar } from "../lib/avatars";
-import { signedInDid } from "../lib/visitor";
 
 const IMAGE_TYPES = new Set(["image/jpeg", "image/png", "image/webp", "image/gif"]);
 const MAX_BYTES = 3 * 1024 * 1024;
 
 const notFound = () => new Response("Not found", { status: 404 });
 
-export const GET: APIRoute = async ({ url, cookies }) => {
+export const GET: APIRoute = async ({ url }) => {
   const avatar = url.searchParams.get("avatar");
   const thumb = url.searchParams.get("thumb");
   let source: string | undefined;
-  let shared = true;
 
   if (avatar) {
     const isSiteAccount = settings.allowedAuthors.includes(avatar);
@@ -29,10 +28,9 @@ export const GET: APIRoute = async ({ url, cookies }) => {
     if (recentlyShown) {
       source = recentlyShown;
     } else {
-      if (!isSiteAccount && avatar !== (await signedInDid(cookies))) return notFound();
+      if (!isSiteAccount) return notFound();
       source = (await profileFor(avatar)).avatarSource;
     }
-    shared = isSiteAccount || !!recentlyShown;
   } else if (thumb && isSitePost(thumb)) {
     source = (await quotedPost(thumb).catch(() => null))?.external?.thumbSource;
   }
@@ -47,8 +45,7 @@ export const GET: APIRoute = async ({ url, cookies }) => {
     return new Response(body, {
       headers: {
         "Content-Type": type,
-        // A reader's own avatar is only for them; site images can be shared.
-        "Cache-Control": shared ? "public, max-age=3600" : "private, max-age=600",
+        "Cache-Control": "public, max-age=3600",
         "Content-Security-Policy": "default-src 'none'; sandbox",
         "X-Content-Type-Options": "nosniff",
       },