astro-atmosphere-comments 0.6.0 → 0.7.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.7.0 (8 November 2026)
+
+**Comments from people who show their posts only to signed-in readers.** Those accounts use Bluesky's "Discourage apps from showing my account to logged-out users".
+
+- **Signed-in readers see them:** the reader's browser fetches those comments through the reader's own sign-in (`app.bsky.feed.getPosts`, already part of the approval, so nobody has to sign in again). They then show as normal comments, with Reply, Like and Repost. Signing out puts the placeholders back. The server still never sends their names, pictures or words; the page holds only each comment's address (its AT URI).
+- **Signed-out readers get a clearer placeholder:** a blurred stand-in made of grey bars (never the real comment), with "Comment hidden" and a line saying to sign in to see it. Clicking it opens the sign-in overlay, and the page scrolls to the comment once they're back. The replies under it stay, as before. Styles: `.atmo-comment--withheld`, `.atmo-withheld__ghost`, `.atmo-withheld__cover`; `.atmo-comment__withheld` is gone.
+- **Like and repost counts match the faces:** those accounts are no longer left out of the faces. Signed out, they show as a faceless silhouette (`.atmo-avatar-anonymous`) with no name or link; signed in, their real face, looked up through the site's `profile` route. The thread data gives only their DID (`withheld: true`).
+- A broken avatar picture now falls back to the person's initial.
+- New wording keys `comment.withheldTitle`, `comment.withheldSignedIn`, `signInFirst.view`, `reactions.hiddenPerson`; `comment.withheld` changed. Draft translations in all eight languages.
+
+## 0.6.1 (7 November 2026)
+
+- Uses the current AT Protocol library (`@atproto/api` 0.30, was 0.25), the same version as Atmosphere Publishing for Astro, so a site using both installs it once.
+- README: using it with [Atmosphere Publishing for Astro](https://github.com/saltedlolly/astro-atmosphere-publishing), and with other Standard.site publishers such as Sequoia.
+
 ## 0.6.0 (7 November 2026)
 
 **Buttons for everyone, and Standard.site support for readers.** The buttons and sign-in change applies to every site; Subscribe and recommending are optional.

package/README.md

@@ -110,6 +110,8 @@ A "follow me" link can become a **Follow** button for signed-in readers: mark it
    data-atmosphere-follow="did:plc:…" data-atmosphere-follow-handle="you.bsky.social">Follow me on Bluesky</a>
 ```
 
+**Publishing to Standard.site:** [Atmosphere Publishing for Astro](https://github.com/saltedlolly/astro-atmosphere-publishing) is the companion integration made to work with this one. It publishes your posts' Standard.site records, announces new posts on Bluesky and adds each page's `<link rel="site.standard.document">` tag, so the comment box finds each post's announcement without a `post` prop. Its `publicationFromState()` helper gives the `standardSite` option your publication (below). Other publishers work too, as long as they add that tag and set the record's `bskyPostRef`, as [Sequoia](https://sequoia.pub) does.
+
 If you publish [Standard.site](https://standard.site) records, set the integration's `standardSite` option. Readers can then **subscribe** to your publication from your site, and read new posts in apps such as Leaflet or Standard Reader. `AtmosphereComments` shows a Subscribe button under each post, with Like and Repost. To put a button anywhere else (with `AtmosphereReactions` in your layout), mark it as below; it stays hidden without the option or JavaScript. Anyone not signed in is offered the sign-in form, and subscribed once they're back; a second press unsubscribes.
 
 ```astro
@@ -221,7 +223,7 @@ The component fires (bubbling):
 - **What's checked before anything is sent** (by the browser code, `lib/client/account.ts`): only your announcements and the comments under them can be replied to, liked, reposted or quoted; only a reader's own replies under your announcements can be deleted; only your `standardSite` publication can be subscribed to, and only documents in its account recommended; only your `allowedAuthors` can be followed; only an announcement's author can hide comments under it.
 - **What your server does:** it shows the threads, looks up accounts and suggestions, finds the links and mentions in a comment before it's posted, and passes on avatars and link pictures it has just shown. None of it needs to know who a reader is. Each route that calls Bluesky is rate-limited per address, with an overall cap; requests that aren't simple reads must come from your own pages (checked by `Origin`). Readers' addresses are used only for those limits, never stored.
 - **Trade-off:** account hosts trust browser sign-ins less than ones kept on a server, so they last less long (Bluesky's currently last about two weeks), and there's no way for a site to sign everyone out at once. For a reader who'd rather not trust your server, that's the point.
-- **People who'd rather not be shown publicly:** Bluesky's setting "Discourage apps from showing my account to logged-out users" is respected, as your page is public. A comment from such an account shows only as "Not shown here…" (no name, picture or words reach the page), the replies under it stay, and the account is left out of the faces of who liked and reposted.
+- **People who'd rather not be shown publicly:** Bluesky's setting "Discourage apps from showing my account to logged-out users" is respected, as your page is public. For readers who aren't signed in, a comment from such an account shows as a blurred "Comment hidden" placeholder (made-up grey bars: no name, picture or words reach the page, only the comment's address), the replies under it stay, and the account appears in the faces of who liked and reposted as a faceless silhouette, so the counts still add up. Clicking the placeholder offers sign-in. Signed-in readers see these comments and faces as normal: their own browser fetches them with their own sign-in.
 - **Moderation:** comments appear automatically. Hide one with Hide under it (signed in as the account that posted the announcement) or in the Bluesky app; it disappears here too. Show it again in the Bluesky app. You can also block the account, or add it to `hidden`.
 
 ## Limitations (for now)

package/components/AtmosphereComments.astro

@@ -195,7 +195,9 @@ const returnTo = `${Astro.url.pathname}#atmosphere-comments`;
   import { translate } from "../lib/translate";
   import { enhanceHandleBox } from "../lib/client/handle-suggestions";
   import { MAX, quotePreview, setUpComposer, type ComposerBehaviour, type Posted } from "../lib/client/composer";
-  import { handleSignInForm, me as whoIsSignedIn, send, signIn, signOut, state } from "../lib/client/account";
+  import { handleSignInForm, me as whoIsSignedIn, send, signIn, signOut, state, withheldPosts } from "../lib/client/account";
+  import publicSettings from "../lib/public-settings";
+  import { segments } from "../lib/richtext";
   import { addSubscribeButtons, finishPendingSubscribe, forgetSubscribed, loadSubscribed } from "../lib/client/subscribe";
   import type { Permission } from "../lib/permissions";
   import { authorOf } from "../lib/uris";
@@ -268,7 +270,7 @@ const returnTo = `${Astro.url.pathname}#atmosphere-comments`;
 
       // The thread: likes and reposts above the comment box, and the comments
       // below it, read through this site (routes/thread.ts).
-      type Person = { did: string; handle: string; displayName?: string; avatar?: string; url: string };
+      type Person = { did: string; handle: string; displayName?: string; avatar?: string; url: string; withheld?: true };
       type Reply = {
         uri: string;
         url: string;
@@ -283,6 +285,9 @@ const returnTo = `${Astro.url.pathname}#atmosphere-comments`;
       };
       type Thread = { uri: string; url: string; likeCount: number; repostCount: number; likes: Person[]; reposts: Person[]; replies: Reply[] };
       let thread: Thread | null = null;
+      // Withheld comments and faces, as a signed-in reader sees them (by AT URI and DID).
+      const revealedReplies = new Map<string, Reply>();
+      const revealedPeople = new Map<string, Person>();
       const reactionsBox = $<HTMLElement>("[data-reactions]");
       const repliesList = $<HTMLOListElement>("[data-replies]");
       const authorLabel = t("comment.author");
@@ -298,12 +303,24 @@ const returnTo = `${Astro.url.pathname}#atmosphere-comments`;
         if (text !== undefined) element.textContent = text;
         return element;
       };
-      const avatarOf = (person: Pick<Person, "handle" | "displayName" | "avatar">, className: string) => {
-        if (person.avatar) return Object.assign(make("img", className), { src: person.avatar, alt: "", loading: "lazy" as const });
+      const initialOf = (person: Pick<Person, "handle" | "displayName">, className: string) => {
         const initial = make("span", `${className} atmo-avatar-initial`, nameOf(person).replace("@", "").charAt(0).toUpperCase());
         initial.setAttribute("aria-hidden", "true");
         return initial;
       };
+      // A faceless avatar, for someone who asks not to be shown to people who aren't signed in.
+      const anonymousAvatar = (className: string) => {
+        const face = make("span", `${className} atmo-avatar-anonymous`);
+        face.setAttribute("aria-hidden", "true");
+        return face;
+      };
+      const avatarOf = (person: Pick<Person, "handle" | "displayName" | "avatar"> & { withheld?: true }, className: string) => {
+        if (person.withheld) return anonymousAvatar(className);
+        if (!person.avatar) return initialOf(person, className);
+        const img = Object.assign(make("img", className), { src: person.avatar, alt: "", loading: "lazy" as const });
+        img.addEventListener("error", () => img.replaceWith(initialOf(person, className)), { once: true });
+        return img;
+      };
 
       const renderReactions = () => {
         if (!thread) return;
@@ -318,7 +335,16 @@ const returnTo = `${Astro.url.pathname}#atmosphere-comments`;
             group.dataset.reaction = kind;
             group.append(make("p", "atmo-reactions__count", t(kind === "like" ? "reactions.likes" : "reactions.reposts", { count })));
             const faces = make("ul", "atmo-facepile");
-            for (const person of people) {
+            for (const shown of people) {
+              const person = (shown.withheld && revealedPeople.get(shown.did)) || shown;
+              if (person.withheld) {
+                // Counted, but not identified: signed out, or not yet looked up.
+                const item = make("li");
+                item.title = t("reactions.hiddenPerson");
+                item.append(anonymousAvatar("atmo-facepile__avatar"));
+                faces.append(item);
+                continue;
+              }
               const link = Object.assign(make("a"), { href: person.url, title: nameOf(person), rel: "ugc nofollow noopener", target: "_blank" });
               link.setAttribute("aria-label", nameOf(person));
               link.append(avatarOf(person, "atmo-facepile__avatar"));
@@ -339,9 +365,30 @@ const returnTo = `${Astro.url.pathname}#atmosphere-comments`;
         // Its author asks not to be shown to logged-out people: a placeholder,
         // keeping the replies under it in place. (No AT URI, so no actions.)
         if (reply.withheld) {
+          const revealed = revealedReplies.get(reply.uri);
+          if (revealed) return replyElement({ ...revealed, depth: reply.depth });
           item.classList.add("atmo-comment--withheld");
+          if (reply.uri) item.dataset.withheldUri = reply.uri;
+          // A blurred, made-up comment (never the real one) under the explanation.
           const article = make("article");
-          article.append(make("p", "atmo-comment__withheld", t("comment.withheld")));
+          const ghost = make("div", "atmo-withheld__ghost");
+          ghost.setAttribute("aria-hidden", "true");
+          const ghostHeader = make("div", "atmo-comment__header");
+          const bar = (width: string) => Object.assign(make("span", "atmo-withheld__bar"), { style: `width: ${width}` });
+          const ghostNames = make("div", "atmo-withheld__names");
+          ghostNames.append(bar("9em"), bar("13em"));
+          ghostHeader.append(anonymousAvatar("atmo-comment__avatar"), ghostNames);
+          const ghostText = make("div", "atmo-withheld__text");
+          ghostText.append(bar("100%"), bar("92%"), bar("60%"));
+          ghost.append(ghostHeader, ghostText);
+          const cover = make("button", "atmo-withheld__cover");
+          cover.type = "button";
+          cover.append(make("strong", "", t("comment.withheldTitle")), make("span", "", t(isSignedIn ? "comment.withheldSignedIn" : "comment.withheld")));
+          cover.disabled = isSignedIn;
+          cover.addEventListener("click", () => {
+            if (!isSignedIn) askToSignIn("view", reply.uri || undefined);
+          });
+          article.append(ghost, cover);
           item.append(article);
           return item;
         }
@@ -487,6 +534,7 @@ const returnTo = `${Astro.url.pathname}#atmosphere-comments`;
         reply: "signInFirst.reply",
         "comment-like": "signInFirst.like",
         "comment-repost": "signInFirst.repost",
+        view: "signInFirst.view",
       };
       const askToSignIn = (kind: string, uri?: string, problem?: string) =>
         openSignIn(t(SIGN_IN_HEADINGS[kind]), `#atmo-do=${kind}${uri ? `:${encodeURIComponent(uri)}` : ""}`, problem);
@@ -907,6 +955,53 @@ const returnTo = `${Astro.url.pathname}#atmosphere-comments`;
         else if (kind === "comment-repost" && comment) press(comment.querySelector<HTMLElement>(".atmo-comment-action[data-kind='repost']"));
       };
 
+      // Draws the comments and faces again (after revealing, or signing out).
+      const redrawThread = () => {
+        if (!thread) return;
+        renderReactions();
+        repliesList.replaceChildren(...thread.replies.map(replyElement));
+      };
+      // Signed in: the comments and faces of people who ask not to be shown to
+      // people who aren't signed in, fetched as the reader and shown.
+      const revealWithheld = async () => {
+        if (!thread) return;
+        const uris = thread.replies.filter((reply) => reply.withheld && reply.uri && !revealedReplies.has(reply.uri)).map((reply) => reply.uri);
+        const dids = [...new Set([...thread.likes, ...thread.reposts].filter((person) => person.withheld && person.did && !revealedPeople.has(person.did)).map((person) => person.did))].slice(0, 20);
+        if (!uris.length && !dids.length) return;
+        const [posts, people] = await Promise.all([
+          withheldPosts(uris),
+          Promise.all(
+            dids.map((did) =>
+              fetch(`${base}/profile?did=${encodeURIComponent(did)}`)
+                .then((response) => (response.ok ? (response.json() as Promise<Pick<Person, "did" | "handle" | "displayName" | "avatar">>) : null))
+                .catch(() => null),
+            ),
+          ),
+        ]);
+        if (!isSignedIn) return;
+        for (const found of posts) {
+          const handle = found.author.handle;
+          const profileUrl = `https://bsky.app/profile/${encodeURIComponent(handle)}`;
+          revealedReplies.set(found.uri, {
+            uri: found.uri,
+            url: `${profileUrl}/post/${found.uri.split("/").pop()}`,
+            author: { did: found.author.did, handle, displayName: found.author.displayName, avatar: `${base}/media?avatar=${encodeURIComponent(found.author.did)}`, url: profileUrl },
+            byAuthor: publicSettings.allowedAuthors.includes(found.author.did),
+            createdAt: found.record.createdAt ?? "",
+            text: segments(found.record.text ?? "", found.record.facets),
+            depth: 0,
+            likeCount: found.likeCount,
+            repostCount: found.repostCount,
+          });
+        }
+        for (const found of people) {
+          if (found?.did && found.handle && found.handle !== found.did) {
+            revealedPeople.set(found.did, { ...found, url: `https://bsky.app/profile/${encodeURIComponent(found.handle)}` });
+          }
+        }
+        redrawThread();
+      };
+
       const show = async (signed: boolean, handle?: string, displayName?: string, avatar?: string) => {
         if (handle) {
           $<HTMLElement>("[data-preview-name]").textContent = displayName || handle;
@@ -931,6 +1026,11 @@ const returnTo = `${Astro.url.pathname}#atmosphere-comments`;
           permissionPanel.hidden = true;
           setPressed("like", false);
           setPressed("repost", false);
+          if (revealedReplies.size || revealedPeople.size) {
+            revealedReplies.clear();
+            revealedPeople.clear();
+            redrawThread();
+          }
           resumePending(false);
           return closeReplies();
         }
@@ -940,6 +1040,7 @@ const returnTo = `${Astro.url.pathname}#atmosphere-comments`;
         permissionPanel.hidden = can("post");
         // Which account, as they may have more than one.
         $<HTMLElement>("[data-permission-text]").textContent = t("composer.needsPermission", { handle: handle ? `@${handle}` : "" });
+        await revealWithheld().catch(() => undefined);
         addCommentActions();
         addDeleteButtons();
         await loadState();

package/components/atmosphere.css

@@ -868,10 +868,79 @@ dialog.atmo.atmo-signin:has(> .atmo__login) {
   margin: 0;
 }
 
-/* In place of a comment whose author asks not to be shown to logged-out people. */
-:where(.atmo-comment__withheld) {
-  margin: 0;
+/* In place of a comment whose author asks not to be shown to logged-out people:
+   a blurred, made-up comment (grey bars, never the real one) under an explanation. */
+:where(.atmo-comment--withheld article) {
+  position: relative;
+  overflow: hidden;
+}
+
+.atmo-withheld__ghost {
+  filter: blur(5px);
+  opacity: 0.7;
+  pointer-events: none;
+  user-select: none;
+}
+
+.atmo-withheld__names,
+.atmo-withheld__text {
+  display: grid;
+  gap: 8px;
+  align-content: center;
+}
+
+.atmo-withheld__text {
+  margin-top: 14px;
+}
+
+.atmo-withheld__bar {
+  display: block;
+  max-width: 100%;
+  height: 0.75em;
+  border-radius: 999px;
+  background: color-mix(in srgb, var(--atmo-muted, currentColor) 45%, transparent);
+}
+
+.atmo-withheld__cover {
+  position: absolute;
+  inset: 0;
+  display: grid;
+  place-content: center;
+  gap: 4px;
+  padding: 12px 20px;
+  border: 0;
+  color: var(--atmo-text, inherit);
+  font: inherit;
+  text-align: center;
+  background: color-mix(in srgb, var(--atmo-card-bg, Canvas) 35%, transparent);
+  cursor: pointer;
+}
+
+.atmo-withheld__cover:disabled {
+  cursor: default;
+}
+
+.atmo-withheld__cover span {
+  max-width: 42ch;
   color: var(--atmo-muted, inherit);
   font-size: 0.9em;
-  font-style: italic;
+}
+
+.atmo-withheld__cover:not(:disabled):hover strong,
+.atmo-withheld__cover:not(:disabled):focus-visible strong {
+  text-decoration: underline;
+}
+
+.atmo-withheld__cover:focus-visible {
+  outline: 2px solid var(--atmo-accent, #1185fe);
+  outline-offset: -2px;
+}
+
+/* A faceless avatar: a head and shoulders. */
+:where(.atmo-avatar-anonymous) {
+  display: inline-block;
+  background:
+    radial-gradient(circle at 50% 38%, color-mix(in srgb, var(--atmo-muted, #888) 70%, transparent) 0 18%, transparent 19%),
+    radial-gradient(ellipse 34% 26% at 50% 88%, color-mix(in srgb, var(--atmo-muted, #888) 70%, transparent) 0 99%, transparent 100%),
+    var(--atmo-field-bg, #8882);
 }

package/lib/client/account.ts

@@ -35,6 +35,7 @@ import {
 } from "../permissions";
 import settings from "../public-settings";
 import { authorOf, inSiteThread, isPostUri, isSiteDocument, isSitePost, rkeyOf, type PostView } from "../uris";
+import type { Facet } from "../richtext";
 
 type IdentityResolver = NonNullable<ConstructorParameters<typeof BrowserOAuthClient>[0]["identityResolver"]>;
 
@@ -538,6 +539,44 @@ export async function state(uris: string[]) {
   }
 }
 
+export type WithheldPost = {
+  uri: string;
+  author: { did: string; handle: string; displayName?: string };
+  record: { text?: string; createdAt?: string; facets?: Facet[] };
+  likeCount: number;
+  repostCount: number;
+};
+
+/**
+ * Comments whose authors ask not to be shown to people who aren't signed in,
+ * read as the signed-in reader (the site only gives their AT URIs). Only posts
+ * in the site's threads; nothing if no one is signed in.
+ */
+export async function withheldPosts(uris: string[]): Promise<WithheldPost[]> {
+  const signedIn = await reader();
+  if (signedIn instanceof Response || !uris.length) return [];
+  try {
+    const views = (await postsAsReader(signedIn, [...new Set(uris)].filter(isPostUri).slice(0, 100))) as (PostView & {
+      author?: { did: string; handle?: string; displayName?: string };
+      record?: { text?: string; createdAt?: string; facets?: Facet[] };
+      likeCount?: number;
+      repostCount?: number;
+    })[];
+    return views
+      .filter((view) => inSiteThread(view) && view.author?.did)
+      .map((view) => ({
+        uri: view.uri,
+        author: { did: view.author!.did, handle: view.author!.handle || view.author!.did, displayName: view.author!.displayName?.trim() || undefined },
+        record: { text: view.record?.text, createdAt: view.record?.createdAt, facets: view.record?.facets },
+        likeCount: view.likeCount ?? 0,
+        repostCount: view.repostCount ?? 0,
+      }));
+  } catch (error) {
+    failed(error, "withheld comments");
+    return [];
+  }
+}
+
 /** Signs out: cancels the sign-in at the reader's account host, and deletes it from this browser. */
 export async function signOut() {
   const current = await session().catch(() => null);

package/lib/thread.ts

@@ -9,9 +9,11 @@
 // Accounts that ask apps not to show them to logged-out people (Bluesky's
 // "Discourage apps from showing my account to logged-out users", the
 // !no-unauthenticated label) are respected too, as the page is public:
-// their comments become a bare placeholder (no name, picture, address or
-// words), keeping the replies under them, which are other people's, and
-// they're left out of the faces of who liked and reposted.
+// their comments become a bare placeholder (no name, picture or words, only
+// the comment's AT URI), keeping the replies under them, which are other
+// people's, and their faces among who liked and reposted become anonymous (only
+// their DID), so the counts match. A signed-in reader's browser then fetches
+// them with the reader's own sign-in and shows them (AtmosphereComments.astro).
 // Cached for two minutes per announcement; if Bluesky can't be reached the
 // last good copy is kept.
 import { rememberAvatar } from "./avatars";
@@ -27,7 +29,15 @@ const MAX_FACES = 48;
 const HIDING_LABELS = new Set(["!hide", "!takedown", "!suspend", "spam", "porn", "sexual", "nudity", "graphic-media", "gore"]);
 const LOGGED_IN_ONLY = "!no-unauthenticated";
 
-export type Person = { did: string; handle: string; displayName?: string; avatar?: string; url: string };
+export type Person = {
+  did: string;
+  handle: string;
+  displayName?: string;
+  avatar?: string;
+  url: string;
+  /** Asks not to be shown to logged-out people: only the DID is given (an anonymous face). */
+  withheld?: true;
+};
 
 export type Reply = {
   uri: string;
@@ -42,8 +52,9 @@ export type Reply = {
   likeCount: number;
   repostCount: number;
   /**
-   * Its author asks not to be shown to logged-out people: everything else
-   * is left empty, and the page shows a placeholder in its place.
+   * Its author asks not to be shown to logged-out people: everything but
+   * `uri` and `depth` is left empty, and the page shows a placeholder in its
+   * place (and the real comment to signed-in readers).
    */
   withheld?: true;
 };
@@ -97,6 +108,13 @@ function person(author: Author): Person | null {
 /** Whether an account asks apps not to show it to people who aren't signed in. */
 const loggedInOnly = (author?: Author) => !!author?.labels?.some((label) => label.val === LOGGED_IN_ONLY);
 
+/** Someone who liked or reposted: anonymous (their DID only) if they ask not to be shown to logged-out people. */
+function face(actor: Author | undefined): Person[] {
+  const found = actor && person(actor);
+  if (!found) return [];
+  return [loggedInOnly(actor) ? { did: found.did, handle: "", url: "", withheld: true } : found];
+}
+
 function isHidden(post: ThreadPost, author: Person, url: string): boolean {
   const labels = [...(post.labels ?? []), ...(post.author?.labels ?? [])];
   if (labels.some((label) => label.val && HIDING_LABELS.has(label.val))) return true;
@@ -116,7 +134,7 @@ function collect(nodes: ThreadNode[] = [], depth: number, hiddenByAuthor: Set<st
     if (isHidden(post, author, url)) continue;
     if (loggedInOnly(post.author)) {
       out.push({
-        uri: "",
+        uri: post.uri,
         url: "",
         author: { did: "", handle: "", url: "" },
         byAuthor: false,
@@ -161,8 +179,8 @@ async function fetchThread(uri: string): Promise<Thread> {
     url: rootAuthor ? `${rootAuthor.url}/post/${uri.split("/").pop()}` : "",
     likeCount: root.likeCount ?? likes.length,
     repostCount: root.repostCount ?? repostedBy.length,
-    likes: likes.flatMap(({ actor }) => (actor && !loggedInOnly(actor) ? [person(actor)].filter((p): p is Person => !!p) : [])),
-    reposts: repostedBy.filter((actor) => !loggedInOnly(actor)).map(person).filter((p): p is Person => !!p),
+    likes: likes.flatMap(({ actor }) => face(actor)),
+    reposts: repostedBy.flatMap(face),
     replies,
   };
 }

package/locales/de.json

@@ -107,5 +107,9 @@
   "permission.post": "Um von dieser Seite aus zu antworten und zu zitieren, braucht sie eine weitere Erlaubnis von deinem Atmosphere-Konto: Beiträge erstellen.",
   "permission.react": "Um von dieser Seite aus zu liken und zu reposten, braucht sie eine weitere Erlaubnis von deinem Atmosphere-Konto: liken und reposten und das zurücknehmen.",
   "permission.approve": "Die Seite deines Kontos (für die meisten die von Bluesky) bittet dich, das zu bestätigen, und vielleicht vorher, dich dort anzumelden. Danach kommst du direkt hierher zurück.",
-  "comment.withheld": "Hier nicht angezeigt: Die Person bittet Apps, ihre Beiträge nicht Leuten zu zeigen, die nicht angemeldet sind."
+  "comment.withheld": "Die Person zeigt ihre Beiträge nur Leuten, die angemeldet sind. Melde dich an, um ihn zu sehen.",
+  "comment.withheldTitle": "Kommentar ausgeblendet",
+  "comment.withheldSignedIn": "Er konnte gerade nicht geladen werden. Lade die Seite neu.",
+  "signInFirst.view": "Melde dich an, um ausgeblendete Kommentare zu sehen",
+  "reactions.hiddenPerson": "Jemand, der sein Konto nur angemeldeten Leuten zeigt"
 }

package/locales/en.json

@@ -126,5 +126,9 @@
   "permission.post": "To reply and quote from this site, it needs one more permission from your Atmosphere account: to create posts.",
   "permission.react": "To like and repost from this site, it needs one more permission from your Atmosphere account: to like and repost, and to undo that.",
   "permission.approve": "Your account's own site (Bluesky's, for most people) will ask you to approve it, and may ask you to sign in there first. Then you'll come straight back here.",
-  "comment.withheld": "Not shown here: its author asks apps not to show their posts to people who aren't signed in."
+  "comment.withheld": "Its author shows their posts only to people who are signed in. Sign in to see it.",
+  "comment.withheldTitle": "Comment hidden",
+  "comment.withheldSignedIn": "It couldn't be loaded just now. Try reloading the page.",
+  "signInFirst.view": "Sign in to see hidden comments",
+  "reactions.hiddenPerson": "Someone who shows their account only to people who are signed in"
 }

package/locales/es.json

@@ -110,5 +110,9 @@
   "permission.post": "Para responder y citar desde este sitio, necesita un permiso más de tu cuenta de Atmosphere: crear publicaciones.",
   "permission.react": "Para dar me gusta y republicar desde este sitio, necesita un permiso más de tu cuenta de Atmosphere: dar me gusta y republicar, y deshacerlo.",
   "permission.approve": "El sitio de tu cuenta (el de Bluesky, para la mayoría) te pedirá que lo apruebes, y quizá que inicies sesión allí primero. Después volverás directamente aquí.",
-  "comment.withheld": "No se muestra aquí: su autor pide a las aplicaciones que no muestren sus publicaciones a quien no haya iniciado sesión."
+  "comment.withheld": "Su autor solo muestra sus publicaciones a quien haya iniciado sesión. Inicia sesión para verlo.",
+  "comment.withheldTitle": "Comentario oculto",
+  "comment.withheldSignedIn": "No se ha podido cargar. Prueba a recargar la página.",
+  "signInFirst.view": "Inicia sesión para ver los comentarios ocultos",
+  "reactions.hiddenPerson": "Alguien que solo muestra su cuenta a quien haya iniciado sesión"
 }

package/locales/fr.json

@@ -110,5 +110,9 @@
   "permission.post": "Pour répondre et citer depuis ce site, il a besoin d'une autorisation de plus de ton compte Atmosphere : créer des publications.",
   "permission.react": "Pour aimer et republier depuis ce site, il a besoin d'une autorisation de plus de ton compte Atmosphere : aimer et republier, et l'annuler.",
   "permission.approve": "Le site de ton compte (celui de Bluesky, pour la plupart des gens) te demandera de l'approuver, et peut-être de t'y connecter d'abord. Ensuite, tu reviendras directement ici.",
-  "comment.withheld": "Non affiché ici : son auteur demande aux applications de ne pas montrer ses publications aux personnes non connectées."
+  "comment.withheld": "Son auteur ne montre ses publications qu'aux personnes connectées. Connectez-vous pour le voir.",
+  "comment.withheldTitle": "Commentaire masqué",
+  "comment.withheldSignedIn": "Il n'a pas pu être chargé. Essayez de recharger la page.",
+  "signInFirst.view": "Connectez-vous pour voir les commentaires masqués",
+  "reactions.hiddenPerson": "Une personne qui ne montre son compte qu'aux personnes connectées"
 }

package/locales/it.json

@@ -110,5 +110,9 @@
   "permission.post": "Per rispondere e citare da questo sito, serve un'altra autorizzazione dal tuo account Atmosphere: creare post.",
   "permission.react": "Per mettere mi piace e ripubblicare da questo sito, serve un'altra autorizzazione dal tuo account Atmosphere: mettere mi piace e ripubblicare, e annullarlo.",
   "permission.approve": "Il sito del tuo account (quello di Bluesky, per la maggior parte delle persone) ti chiederà di approvare, e forse prima di accedere. Poi tornerai subito qui.",
-  "comment.withheld": "Non mostrato qui: l'autore chiede alle app di non mostrare i suoi post a chi non ha effettuato l'accesso."
+  "comment.withheld": "L'autore mostra i suoi post solo a chi ha effettuato l'accesso. Accedi per vederlo.",
+  "comment.withheldTitle": "Commento nascosto",
+  "comment.withheldSignedIn": "Non è stato possibile caricarlo. Prova a ricaricare la pagina.",
+  "signInFirst.view": "Accedi per vedere i commenti nascosti",
+  "reactions.hiddenPerson": "Qualcuno che mostra il proprio account solo a chi ha effettuato l'accesso"
 }

package/locales/ja.json

@@ -104,5 +104,9 @@
   "permission.post": "このサイトから返信や引用をするには、Atmosphereアカウントからの許可がもうひとつ必要です（投稿の作成）。",
   "permission.react": "このサイトからいいねやリポストをするには、Atmosphereアカウントからの許可がもうひとつ必要です（いいねとリポスト、その取り消し）。",
   "permission.approve": "アカウントのサイト（ほとんどの方はBluesky）で承認を求められます。先にそこでログインを求められることもあります。その後、すぐにここへ戻ります。",
-  "comment.withheld": "ここには表示されません：投稿者は、ログインしていない人に投稿を表示しないようアプリに求めています。"
+  "comment.withheld": "投稿者は、ログインしている人にだけ投稿を表示しています。表示するにはログインしてください。",
+  "comment.withheldTitle": "非表示のコメント",
+  "comment.withheldSignedIn": "読み込めませんでした。ページを再読み込みしてください。",
+  "signInFirst.view": "ログインすると非表示のコメントを表示できます",
+  "reactions.hiddenPerson": "ログインしている人にだけアカウントを表示している人"
 }

package/locales/nl.json

@@ -107,5 +107,9 @@
   "permission.post": "Om vanaf deze site te reageren en te citeren, is nog één toestemming van je Atmosphere-account nodig: berichten plaatsen.",
   "permission.react": "Om vanaf deze site te liken en te reposten, is nog één toestemming van je Atmosphere-account nodig: liken en reposten, en dat ongedaan maken.",
   "permission.approve": "De site van je account (voor de meeste mensen die van Bluesky) vraagt je dit goed te keuren, en misschien eerst daar in te loggen. Daarna kom je meteen hierheen terug.",
-  "comment.withheld": "Hier niet getoond: de schrijver vraagt apps om zijn of haar berichten niet te tonen aan mensen die niet zijn ingelogd."
+  "comment.withheld": "De schrijver toont berichten alleen aan mensen die zijn ingelogd. Log in om de reactie te zien.",
+  "comment.withheldTitle": "Reactie verborgen",
+  "comment.withheldSignedIn": "De reactie kon nu niet worden geladen. Probeer de pagina opnieuw te laden.",
+  "signInFirst.view": "Log in om verborgen reacties te zien",
+  "reactions.hiddenPerson": "Iemand die zijn of haar account alleen toont aan mensen die zijn ingelogd"
 }

package/locales/pt.json

@@ -110,5 +110,9 @@
   "permission.post": "Para responder e citar por este site, ele precisa de mais uma permissão da sua conta Atmosphere: criar publicações.",
   "permission.react": "Para curtir e repostar por este site, ele precisa de mais uma permissão da sua conta Atmosphere: curtir e repostar, e desfazer isso.",
   "permission.approve": "O site da sua conta (o do Bluesky, para a maioria das pessoas) vai pedir que você aprove, e talvez que entre lá primeiro. Depois você volta direto para cá.",
-  "comment.withheld": "Não exibido aqui: o autor pede aos apps que não mostrem suas publicações a quem não está conectado."
+  "comment.withheld": "O autor mostra suas publicações apenas a quem está conectado. Entre para ver.",
+  "comment.withheldTitle": "Comentário oculto",
+  "comment.withheldSignedIn": "Não foi possível carregá-lo agora. Tente recarregar a página.",
+  "signInFirst.view": "Entre para ver os comentários ocultos",
+  "reactions.hiddenPerson": "Alguém que mostra sua conta apenas a quem está conectado"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "astro-atmosphere-comments",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Atmosphere Comments for Astro: Bluesky comments, likes, reposts and quote posts for Astro sites; readers sign in with their Atmosphere (AT Protocol) account and respond without leaving the page.",
   "type": "module",
   "license": "MIT",
@@ -54,7 +54,7 @@
     "astro": "^7.0.0"
   },
   "dependencies": {
-    "@atproto/api": "^0.25.0",
+    "@atproto/api": "^0.30.3",
     "@atproto/oauth-client-browser": "^0.5.11"
   }
 }