npm - fedipod-server - Versions diffs - 0.26.0 → 0.28.0 - Mend

fedipod-server 0.26.0 → 0.28.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4184) hide show

package/web/app/index.html~ DELETED Viewed

@@ -1,152 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' https://solidcommunity.net https://*.solidcommunity.net; form-action 'self' https://solidcommunity.net https://*.solidcommunity.net; base-uri 'none'">
-<title>FediPod</title>
-<style>
-:root { color-scheme: light dark; font-size: 112.5%; --heading: #1a4f8a; --sub: #666; --line: #bbb; --accent: #1a4f8a; }
-@media (prefers-color-scheme: dark) { :root { --heading: #7fb3e8; --sub: #aaa; --line: #555; --accent: #7fb3e8; } }
-body { font: 1rem/1.5 system-ui, sans-serif; margin: 0; }
-#page { max-width: 42rem; margin: 0 auto; padding: 1.75rem 1rem 4rem; box-sizing: border-box; }
-h1, h2, h3 { color: var(--heading); }
-h1 { font-size: 1.5rem; margin: 0 0 .5rem; }
-#brand { margin: 0 0 1.25rem; }
-h2 { font-size: 1.1rem; margin: 2rem 0 .5rem; }
-p { margin: .6rem 0; }
-code { background: rgba(120,120,120,.14); padding: .05em .35em; border-radius: 4px; }
-.sub { color: var(--sub); margin-top: 0; }
-.hint { color: var(--sub); font-size: .9rem; margin: .15rem 0 0; }
-fieldset { border: 1px solid var(--line); border-radius: .4rem; margin: 1rem 0; padding: .75rem 1rem 1rem; }
-legend { padding: 0 .3rem; font-weight: 600; }
-label { display: block; margin: .75rem 0 .2rem; }
-input[type=text], input[type=email], input[type=url], input[type=password], select {
-  font: inherit; width: 100%; padding: .5rem; box-sizing: border-box;
-  border: 1px solid #767676; border-radius: .3rem; background: Field; color: FieldText; }
-.choice { display: block; margin: .35rem 0; font-weight: normal; }
-.choice input { margin-right: .4rem; width: auto; }
-button { font: inherit; padding: .6rem 1.2rem; border-radius: .3rem; border: 1px solid #666;
-  background: ButtonFace; color: ButtonText; cursor: pointer; }
-button.primary { font-weight: 600; }
-button:disabled { opacity: .5; cursor: default; }
-.row { display: flex; gap: .5rem; align-items: center; }
-.row input { flex: 1; }
-.row button { white-space: nowrap; }
-.address { font-size: 1.2rem; font-weight: 600; word-break: break-all; }
-.warn { border-left: .25rem solid #c60; padding-left: .75rem; }
-.err { border-left: .25rem solid #b00020; padding-left: .75rem; color: #b00020; }
-@media (prefers-color-scheme: dark) { .err { color: #ff8a8a; border-left-color: #ff8a8a; } }
-#form-error:empty, #signin-error:empty { display: none; }
-.steps { list-style: none; padding: 0; }
-.steps li { padding: .3rem 0; }
-a { color: var(--accent); }
-[hidden] { display: none !important; }
-</style>
-</head>
-<body>
-<main id="page">
-<!-- The marketing hero: shown on the landing, hidden once a form is up. -->
-<header id="hero">
-  <h1>FediPod - join the Fediverse from a Solid pod.</h1>
-  <p>Welcome to <b>fedipod.net</b>! By creating an account here, you can get a free Solid pod
-  and Fediverse identity or link to your existing pod/identity. Your <code>fedipod.net</code>
-  account provides you a portal to the Fediverse and filters unverified mail but does not tie
-  you to anything. All of your data lives on your pod and your Fediverse identity is yours
-  forever regardless of what happens to fedipod.net.</p>
-  <p>There is nothing to install, once you've setup an account, just point any browser at
-  <code>https://fedipod.net</code> and sign in.</p>
-</header>
-<!-- The short brand: shown only when a form is up, so the form stands alone. -->
-<h1 id="brand" hidden>FediPod</h1>
-<p id="loading">Loading…</p>
-<section id="landing" hidden>
-  <h2>Already have an account?</h2>
-  <p class="row">
-    <input type="text" id="signin-address" autocapitalize="off" spellcheck="false" placeholder="@me@mypod">
-    <button type="button" class="primary" id="signin">sign in</button>
-  </p>
-  <p class="err" id="signin-error" role="alert"></p>
-  <h2>New user?</h2>
-  <p><button type="button" class="primary" id="create">create an account</button></p>
-  <p class="hint">For more information, see
-    <a href="https://github.com/jeff-zucker/FediPod">github.com/jeff-zucker/FediPod</a></p>
-</section>
-<section id="pane-form" hidden>
-  <form id="form">
-    <!-- Screen 1: Your Solid Pod -->
-    <div class="step" id="step-1">
-      <fieldset>
-        <legend>Your Solid Pod</legend>
-        <label>Pod type</label>
-        <label class="choice"><input type="radio" name="mode" value="existing"> An existing pod</label>
-        <label class="choice"><input type="radio" name="mode" value="new" checked> A new pod</label>
-        <label for="provider">Pod provider</label>
-        <input type="url" id="provider" name="provider" autocomplete="url" placeholder="https://solidcommunity.net">
-        <label for="podName">Pod username/subdomain</label>
-        <input type="text" id="podName" name="podName" autocomplete="off" aria-describedby="podname-hint">
-        <p class="hint" id="podname-hint">The subdomain of your pod: your pod address becomes
-          https://YOUR-USERNAME.your-provider.</p>
-        <label for="email">Pod email</label>
-        <input type="email" id="email" name="email" autocomplete="email" placeholder="you@example.org">
-        <label for="password">Pod password</label>
-        <input type="password" id="password" name="password" autocomplete="current-password"
-          aria-describedby="password-hint">
-        <p class="hint" id="password-hint">The password is sent once in return for a credential stored
-          in this browser. The password itself is never stored, and you can revoke the credential
-          without changing it.</p>
-      </fieldset>
-      <p class="err" id="err-1" role="alert"></p>
-      <p>
-        <button type="button" id="cancel">Cancel</button>
-        <button type="button" class="primary" id="to-2">Continue</button>
-      </p>
-    </div>
-    <!-- Screen 2: Your Fediverse Identity -->
-    <div class="step" id="step-2" hidden>
-      <fieldset>
-        <legend>Your Fediverse Identity</legend>
-        <label for="handle">Fediverse handle</label>
-        <input type="text" id="handle" name="handle" autocomplete="off"
-          placeholder="the handle part of your address: @HANDLE@server" aria-describedby="handle-hint">
-        <p class="hint" id="handle-hint">The name in your Fediverse address. This is permanent.
-          Letters, digits, and hyphens only.</p>
-        <label>Your Fediverse address</label>
-        <p class="address" id="preview">@…@…</p>
-      </fieldset>
-      <p class="hint">The handle and the pod cannot be changed afterwards. Everything else — display
-        name, bio, pictures — you set later in the client.</p>
-      <p class="err" id="form-error" role="alert"></p>
-      <p>
-        <button type="button" id="back-1">Back</button>
-        <button type="submit" class="primary" id="submit">Create Pod and Fediverse accounts</button>
-      </p>
-    </div>
-  </form>
-</section>
-<section id="running" hidden>
-  <h2>Setting up…</h2>
-  <ul class="steps" id="steps"></ul>
-  <p class="err" id="run-error" role="alert"></p>
-</section>
-</main>
-<script type="module" src="/boot.js"></script>
-</body>
-</html>

package/web/app/site/_headers DELETED Viewed

@@ -1,31 +0,0 @@
-/sw.js
-  Cache-Control: no-cache
-/update.js
-  Cache-Control: no-cache
-/authorize_interaction
-  Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; form-action 'self'
-  X-Content-Type-Options: nosniff
-  Referrer-Policy: same-origin
-/app/*
-  Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' https: data: blob:; media-src 'self' https: blob:; connect-src 'self' https:; font-src 'self' data:; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; form-action 'self'
-  X-Content-Type-Options: nosniff
-  Referrer-Policy: same-origin
-/admin/*
-  Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' https: data: blob:; connect-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; form-action 'self'
-  X-Content-Type-Options: nosniff
-  Referrer-Policy: same-origin
-/bb/*
-  Cache-Control: no-cache
-  Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; connect-src 'self' https:; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; form-action 'self'
-  X-Content-Type-Options: nosniff
-  Referrer-Policy: same-origin
-/demo/*
-  Cache-Control: no-cache
-  Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; connect-src 'self' https:; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; form-action 'self'
-  X-Content-Type-Options: nosniff
-  Referrer-Policy: same-origin

package/web/app/site/_redirects DELETED Viewed

@@ -1,39 +0,0 @@
-# gateway + front API → the function
-/api/handle             /.netlify/functions/front  200
-/api/server             /.netlify/functions/front  200
-/api/attach             /.netlify/functions/front  200
-/api/relay              /.netlify/functions/front  200
-/api/roster             /.netlify/functions/front  200
-/api/revoke             /.netlify/functions/front  200
-/api/agent              /.netlify/functions/front  200
-/u/*                    /.netlify/functions/front  200
-/.well-known/*          /.netlify/functions/front  200
-/@*                     /.netlify/functions/front  200
-/install                /.netlify/functions/front  200
-/run                    /.netlify/functions/front  200
-/roster                 /.netlify/functions/front  200
-/solid-oidc-client.js   /.netlify/functions/front  200
-# The forum at its own host: bb.<domain> is a domain alias of this site, and
-# every path there is the forum page (forced: / would otherwise be the app).
-# The page names its forum by the first path segment and reads through <domain>.
-http://bb.fedipod.net/*          https://bb.fedipod.net/:splat  301!
-https://bb.fedipod.net/           /forum/         301!
-https://bb.fedipod.net/bb/*      /bb/:splat      200!
-https://bb.fedipod.net/icons/*   /icons/:splat   200!
-https://bb.fedipod.net/update.js /update.js      200!
-https://bb.fedipod.net/build.json /build.json     200!
-https://bb.fedipod.net/api/*     /.netlify/functions/front  200!
-https://bb.fedipod.net/*         /bb/index.html  200!
-# the in-browser app, served static (these win over the project catch-all)
-/            /index.html    200
-/sw.js       /sw.js         200
-/boot.js     /boot.js       200
-/authorize_interaction  /authorize_interaction.html  200
-/app         /app/          301
-/app/*       /app/:splat    200
-/bb          /bb/           301
-/bb/*        /bb/:splat     200
-/admin       /admin/        301
-/admin/*     /admin/:splat  200
-/sengi       /sengi/        301
-/sengi/*     /sengi/:splat  200

package/web/app/site/admin/actors.js DELETED Viewed

@@ -1,145 +0,0 @@
-// actors.js — the other actors on this machine: the picker, going to one,
-// starting a stopped one, and the form for a new one.
-// Somewhere to go, and nothing else. A stopped actor is left out — the link
-// would land on nothing. The one you are on keeps its place in the row but
-// offers only `app`, because its admin page is the page you are reading.
-let actors = [];
-async function renderOthers() {
-  const { json } = await api('/profiles');
-  actors = json?.identities || [];
-  const sel = $('actor-pick');
-  sel.textContent = '';
-  // The fediverse address, which is what the actor IS to everyone else, and the
-  // only form that stays distinct: two identities can share a local handle, but
-  // never a handle AND a pod. A stopped one has no address to report — nothing
-  // answered — so it falls back to the name it is filed under.
-  const label = (r) => (r.address || r.handle || r.name)
-    + (r.mode && r.mode !== 'active' ? ` (${r.mode})` : '') + (r.mode ? '' : ' (stopped)');
-  const seen = {};
-  for (const r of actors) seen[label(r)] = (seen[label(r)] || 0) + 1;
-  for (const [i, r] of actors.entries()) {
-    const o = document.createElement('option');
-    o.value = String(i);
-    o.selected = !!r.current;      // it opens showing where you already are
-    o.textContent = label(r) + (seen[label(r)] > 1 && r.port ? ` :${r.port}` : '');
-    sel.appendChild(o);
-  }
-  // The way to a NEW actor rides the same dropdown as the existing ones.
-  const add = document.createElement('option');
-  add.value = '__add';
-  add.textContent = '+ add a new account…';
-  sel.appendChild(add);
-}
-// Going to an actor commits a navigation and, for a stopped one, a POST that
-// boots its pod — so it must run once per choice. Pressing Enter on the select
-// fires BOTH a keydown (handled below) and a native `change`, so without a
-// guard a keyboard commit would start the actor twice.
-let goingToActor = false;
-const goToActor = async () => {
-  if (goingToActor) return;
-  if ($('actor-pick').value === '__add') { renderOthers(); openNewActor(); return; }
-  const r = actors[Number($('actor-pick').value)];
-  if (!r || r.current) return;
-  goingToActor = true;
-  try {
-    if (r.mode) { location.href = r.admin; return; }
-    $('actor-pick').disabled = true;
-    say(`starting ${r.name}`);
-    const started = await write('/start-actor', { name: r.name }, `${r.name} is up`);
-    $('actor-pick').disabled = false;
-    if (started?.url) location.href = `${started.url}admin/`;
-    else renderOthers();            // put the picker back on the current actor
-  } finally {
-    goingToActor = false;
-  }
-};
-// Choosing one goes to its record, as it always has.
-//
-// Arrowing is the one case that must not: on a closed select every Arrow
-// keypress fires `change`, so a keyboard user browsing the list would be
-// carried off to the first actor they passed — and for a stopped one that
-// boots its pod. An arrow key arms a flag and the change it causes is ignored;
-// Enter commits. A mouse never sets the flag, so clicking behaves as before.
-let arrowing = false;
-$('actor-pick').addEventListener('keydown', (ev) => {
-  if (['ArrowUp', 'ArrowDown', 'Home', 'End', 'PageUp', 'PageDown'].includes(ev.key)) arrowing = true;
-  if (ev.key === 'Enter') { arrowing = false; goToActor(); }
-});
-$('actor-pick').addEventListener('pointerdown', () => { arrowing = false; });
-$('actor-pick').addEventListener('change', () => {
-  if (!arrowing) goToActor();
-  arrowing = false;
-});
-// Setting up a new actor asks for exactly what this page cannot already tell
-// it: the pod and the account behind it, and its permanent name. Display name,
-// bio and pictures are the client's job now — Phanpy's profile editor writes
-// them through /api/v1/accounts/update_credentials. Where the private data goes
-// is not a question either: it lands beside the credential, and `state --to`
-// moves it afterwards.
-const picked = (name) => document.querySelector(`input[name=${name}]:checked`)?.value;
-function newActorRows() {
-  const mode = picked('newMode');
-  $('new-row-podname').hidden = mode !== 'new';
-  $('new-row-pod').hidden = mode !== 'existing';
-}
-for (const el of document.querySelectorAll('input[name=newMode]')) {
-  el.addEventListener('change', newActorRows);
-}
-// While the form is up the page IS the new actor's setup — so the record of
-// the actor you came from goes away, list included. Which panes were showing
-// is remembered rather than recomputed: whether Group and Inbox belong is a
-// decision render() already made.
-const RECORD_PANES = ['pane-identity', 'pane-group', 'pane-inbox', 'rail'];
-let putBack = [];
-function showNewActor(on) {
-  if (on) closePanels();              // nothing of the old actor left open behind it
-  document.body.classList.toggle('adding', on);   // see body.adding in the CSS
-  $('new-actor-form').hidden = !on;
-  if (on) {
-    putBack = RECORD_PANES.filter(id => !$(id).hidden);
-    for (const id of putBack) $(id).hidden = true;
-  } else {
-    for (const id of putBack) $(id).hidden = false;
-    putBack = [];
-  }
-}
-// `add a new account` is the last item of the Local Actors dropdown; choosing
-// it opens the form in place. Arriving with ?new does the same.
-function openNewActor() {
-  showNewActor(true);
-  newActorRows();
-  $('new-handle').focus();
-}
-$('new-actor-cancel').addEventListener('click', () => { showNewActor(false); say('nothing changed'); });
-$('new-actor-form').addEventListener('submit', async (ev) => {
-  ev.preventDefault();
-  const handle = $('new-handle').value.trim();
-  const answers = {
-    handle,
-    kind: picked('newKind'),
-    mode: picked('newMode'),
-    issuer: $('new-issuer').value.trim(),
-    email: $('new-email').value.trim(),
-    password: $('new-password').value,
-  };
-  if (answers.mode === 'new') answers.podName = $('new-podname').value.trim() || handle;
-  else answers.pod = $('new-pod').value.trim();
-  $('new-actor-go').disabled = true;
-  say(`setting up ${handle || 'the new actor'} — this takes a while`);
-  const r = await write('/new-actor', answers, `setting up ${handle}`);
-  $('new-actor-go').disabled = false;
-  if (r?.url) location.href = r.url;      // its own page, where the progress is
-});

package/web/app/site/admin/bar.css DELETED Viewed

@@ -1,92 +0,0 @@
-/* The bar every page of ours carries — the record, the setup form and the
-   client view. One file so the three cannot drift apart. */
-/* One column, 960px, centred — the bar included, so the title sits over the
-   page's left edge and the buttons over its right rather than out at the window
-   borders. `width: 100%` with `box-sizing: border-box` keeps the padding inside
-   that 960 instead of adding to it, which is what makes the two margins equal. */
-/* Colours come from tokens.css (the front's palette), linked by every page
-   before this file, so the bar matches the front and the record rather than
-   Phanpy: --surface is the page ground, --raised the bar band on top of it. */
-body { background: var(--surface); }
-/* The BAND spans the window; its CONTENTS stay in the 960 column. Constraining
-   the element itself left the colour as a stripe with bare page either side.
-   The inline padding is the column's own margin plus the 1rem the page uses
-   inside it, so the title lands exactly on the page's left edge — and `max`
-   keeps it at 1rem once the window is narrower than the column.
-   No rule underneath: the tone change is the boundary, and a line as well
-   would be drawing it twice. */
-/* Wraps, because it does not fit: at 320px the title plus three destinations
-   ran 67px past the viewport, and the bar is on every page — so the whole
-   document scrolled sideways whatever was under it. */
-#bar { flex: 0 0 auto; display: flex; align-items: center; gap: .6rem; flex-wrap: wrap;
-  width: 100%; max-width: none; margin: 0; box-sizing: border-box;
-  /* The column width is the page's to declare (--bar-col); 960 stands where a
-     page says nothing. */
-  padding: .5rem max(1rem, calc((100% - var(--bar-col, 960px)) / 2 + 1rem));
-  background: var(--raised); }
-/* The actor's fediverse handle, in the row between the title and the
-   destinations. */
-#bar-handle { color: var(--heading); font-size: .95rem; margin-right: .6rem; }
-#bar-handle:empty { display: none; }
-/* The actors dropdown, where a page's bar carries one instead of the static
-   handle. Styled here so every page's bar shows the same control: the same
-   light well and drawn caret every setting on the record page uses. */
-#bar select { font: inherit; font-size: .95rem; max-width: min(24rem, 55vw);
-  margin-right: .6rem; appearance: none; min-width: 0;
-  padding: .15rem 1.7rem .15rem .55rem;
-  border: 1px solid var(--field-edge); border-radius: .3rem;
-  color: var(--ink); cursor: pointer;
-  background-color: var(--field-bg); background-image: var(--chevron);
-  background-repeat: no-repeat; background-position: right .55rem center;
-  background-size: .6rem auto; }
-#bar select:hover { background-color: var(--field-bg-hover); }
-/* The app title, in px rather than rem: it is chrome, the same on every page,
-   not something that should move when a page changes its base size. */
-#bar .name { flex: 1 1 auto; font-weight: 600; font-size: 40px; color: var(--heading);
-  margin: 0; line-height: 1.1; }
-/* The browser build wraps the brand text in a link (to /?add) — the general
-   #bar a rule below would otherwise pin it back down to nav-link size and
-   colour, since a rule on the anchor itself always wins over inheriting the
-   heading's size. */
-#bar .name a { font: inherit; color: inherit; text-decoration: none; }
-/* Plain text, not chrome: three destinations in a row read better without a
-   box round each. */
-#bar button, #bar a { font: inherit; font-size: .95rem; padding: .15rem .2rem;
-  border: 0; background: none; color: var(--link); cursor: pointer;
-  text-decoration: none; }
-/* The page you are already on stays in the row, so the set never moves — it is
-   underlined rather than removed. */
-#bar button[aria-current="page"], #bar a[aria-current="page"] {
-  text-decoration: underline; text-underline-offset: .3rem; }
-/* The client control: which fediverse client this browser opens. The label is
-   quieter than the links; the one in use is marked `aria-current="true"` — the
-   current item of a set, which on the record page is not the current PAGE — so
-   it needs its own mark rather than borrowing the rule above. */
-#bar #client-pick { display: inline-flex; gap: .6rem; align-items: baseline;
-  white-space: nowrap; margin-left: 1rem; }
-#bar #client-now { opacity: .75; }
-#bar a[aria-current="true"] {
-  font-weight: 700; text-decoration: underline; text-underline-offset: .3rem; }
-/* The two-clients notice: said once, to somebody who knew this page when it
-   had one client. Sized and placed rather than left to the browser's default,
-   which stretched it edge to edge and put it over the very links it names. */
-#client-news {
-  /* Low rather than centred: it points at the links in the bar, so the bar has
-     to stay in view while it is read. */
-  max-width: 34rem; margin: auto auto 2.5rem; padding: 1.5rem 1.7rem;
-  border: 1px solid var(--dialog-edge); border-radius: .6rem;
-  background: var(--raised); color: var(--fg);
-  font: 1rem/1.55 var(--font);
-  box-shadow: 0 .6rem 2rem rgba(0, 0, 0, .25);
-}
-#client-news::backdrop { background: rgba(0, 0, 0, .45); }
-#client-news h2 { font-size: 1.25rem; margin: 0 0 .9rem; color: var(--heading); }
-#client-news p { margin: 0 0 1.2rem; }
-#client-news p:last-child { margin: 0; }
-#client-news button {
-  font: inherit; padding: .55rem 1.3rem; border-radius: .35rem; cursor: pointer;
-  background: var(--btn); color: var(--btn-text); border: 1px solid var(--btn);
-}
-#client-news button:hover { background: var(--btn-hover); border-color: var(--btn-hover); }
-#client-news button:focus-visible { outline: 3px solid var(--ring); outline-offset: 2px; }

package/web/app/site/admin/bar.js DELETED Viewed

@@ -1,99 +0,0 @@
-// bar.js — the three destinations, shared by the record, the setup form and the
-// client view, so they cannot drift apart. Nothing here touches the client in
-// the frame: it is this agent's own root, and framing it is the whole of the
-// relationship.
-(() => {
-  // The three destinations are <a href> now: they are navigations, so they
-  // belong in a screen reader's links list, and middle-click and open-in-new-tab
-  // work the way they do everywhere else. Nothing here has to drive them.
-  //
-  // One exception, and it keeps its href as the fallback: on the record page
-  // `add new account` opens the form IN PLACE rather than reloading. admin.js
-  // binds that and calls preventDefault; without the form it is a plain link to
-  // ?new=1, which opens it on arrival.
-  // The bar says the product; the TAB says which actor, which is what tells two
-  // open windows apart without putting the handle in the page twice.
-  // /status, not /config: an agent that is not set up yet answers this one and
-  // 409s the other, which logged a failed request on every setup page.
-  fetch(location.pathname.replace(/\/admin\/.*$/u, '') + '/status', { headers: { 'x-fedipod-page': '1' } }).then(r => (r.ok ? r.json() : null)).then((s) => {
-    if (s?.handle) document.title = `FediPod — ${s.handle}`;
-    // The full fediverse handle, centred in the bar on every page.
-    const el = document.getElementById('bar-handle');
-    if (el && s?.handle && s?.actor) {
-      try { el.textContent = `@${s.handle}@${new URL(s.actor).host}`; } catch { /* odd actor url */ }
-    }
-    // A viewer does nothing: it publishes no profile, carries nothing and
-    // leaves the account looking broken from outside. Say so where the
-    // account is, and let the owner take it back from here.
-    if (s?.mode === 'viewer') viewerBanner();
-  }).catch(() => { /* not up yet; the bar still works */ });
-  // The actors dropdown, on a page whose bar carries one. The record page
-  // wires its own richer version (it can start a stopped actor and open the
-  // new-account form in place), so this one stands down there.
-  const pick = document.getElementById('actor-pick');
-  if (pick && !document.getElementById('new-actor-form')) {
-    const base = location.pathname.replace(/\/admin\/.*$/u, '');
-    fetch(base + '/profiles', { headers: { 'x-fedipod-page': '1' } }).then(r => (r.ok ? r.json() : null)).then((j) => {
-      const actors = j?.identities || [];
-      pick.textContent = '';
-      const label = (r) => (r.address || r.handle || r.name)
-        + (r.mode && r.mode !== 'active' ? ` (${r.mode})` : '') + (r.mode ? '' : ' (stopped)');
-      for (const [i, r] of actors.entries()) {
-        const o = document.createElement('option');
-        o.value = String(i);
-        o.selected = !!r.current;
-        o.textContent = label(r);
-        pick.appendChild(o);
-      }
-      const add = document.createElement('option');
-      add.value = '__add';
-      add.textContent = '+ add a new account…';
-      pick.appendChild(add);
-      pick.addEventListener('change', () => {
-        if (pick.value === '__add') { location.href = base + '/admin/?new=1'; return; }
-        const r2 = actors[Number(pick.value)];
-        if (!r2 || r2.current) return;
-        // A running actor's client; a stopped one is started from its record.
-        if (r2.mode && r2.admin) location.href = r2.admin + 'client/';
-        else if (r2.admin) location.href = r2.admin;
-      });
-    }).catch(() => { pick.hidden = true; });
-  }
-})();
-// "Another device is active": what it means for this account, and the way out.
-// The lease is a document on the pod with a five-minute life; a browser that
-// was closed leaves one behind that nothing renews, and every reload asks
-// under a new name, so waiting can look like waiting forever.
-function viewerBanner() {
-  if (document.getElementById('viewer-banner')) return;
-  const base = location.pathname.replace(/\/admin\/.*$/u, '');
-  const bar = document.createElement('div');
-  bar.id = 'viewer-banner';
-  bar.setAttribute('role', 'status');
-  bar.style.cssText = 'padding:.7rem 1rem;background:var(--field-bg,#ececec);color:var(--fg,#1a1a1a);'
-    + 'border-bottom:1px solid var(--line,#b0b0b0);display:flex;gap:1rem;align-items:center;flex-wrap:wrap;font:inherit';
-  const said = document.createElement('span');
-  said.textContent = 'Another device holds this account, so nothing is being published or delivered from here.';
-  const go = document.createElement('button');
-  go.type = 'button';
-  go.textContent = 'Take it over';
-  go.style.cssText = 'font:inherit;font-weight:600;padding:.4rem 1rem;border-radius:.4rem;border:1px solid var(--btn,#3a5f43);'
-    + 'background:var(--btn,#3a5f43);color:var(--btn-text,#fff);cursor:pointer';
-  go.addEventListener('click', async () => {
-    go.disabled = true;
-    said.textContent = 'Taking it over…';
-    try {
-      const r = await fetch(base + '/takeover', { method: 'POST', headers: { 'x-fedipod-page': '1' } });
-      const j = await r.json().catch(() => null);
-      if (r.ok && j?.mode === 'active') { location.reload(); return; }
-      said.textContent = j?.error || 'The lease could not be taken.';
-    } catch (e) { said.textContent = e.message; }
-    go.disabled = false;
-  });
-  bar.append(said, go);
-  document.body.prepend(bar);
-}

package/web/app/site/admin/client/client.js DELETED Viewed

@@ -1,66 +0,0 @@
-// client.js — make the framed client be THIS agent's actor.
-//
-// The client is a general fediverse client: it keeps a list of accounts in
-// localStorage and one of them is current. Nothing makes that one agree with
-// the agent serving the page. A leftover account from another identity wins,
-// and you get somebody else's timeline on this actor's page, with the profile
-// editor pointed at a host that cannot answer.
-//
-// Per-origin storage is what keeps identities apart, and it does work — each
-// actor answers at <handle>.localhost:<port> and each origin has its own
-// accounts list. What was missing is the other half: telling the client which
-// account it is meant to be showing.
-//
-// The frame's markup declares what it loads (`src="/"`), and that does not
-// change. This navigates the loaded app to its own login route, which is app
-// navigation, not an include: `?instance=` prefills and `?submit=` runs it, so
-// the round trip needs no typing. Hash-routed, so the query lives after the
-// hash; `submit` must be non-empty, because the empty string is falsy and the
-// auto-submit never fires.
-(async () => {
-  const frame = document.getElementById('client');
-  if (!frame) return;
-  // Who this agent is, in the form the client stores: `info.uri` is the actor
-  // URI on the pod. Matching on that rather than on the origin is deliberate —
-  // "which account logged in here" is a different question, and it is the one
-  // that goes wrong when the two origins get mixed.
-  const base = location.pathname.replace(/\/admin\/.*$/u, '');
-  const status = await fetch(base + '/status', { headers: { 'x-fedipod-page': '1' } }).then(r => (r.ok ? r.json() : null)).catch(() => null);
-  if (!status?.actor) return;                 // not set up yet; setup owns that
-  // A deep link into the client — the record links an actor's own page this way
-  // — arrives as a hash on THIS page, and the frame never sees it. Forward it,
-  // so the link lands where it says while keeping the bar above it.
-  const wanted = location.hash && location.hash !== '#' ? location.hash : null;
-  const sendTo = (hash) => {
-    try { frame.contentWindow.location.hash = hash; } catch { /* not ready yet */ }
-  };
-  const whenReady = (fn) => {
-    if (frame.contentWindow?.location?.href && frame.contentWindow.location.href !== 'about:blank') fn();
-    else frame.addEventListener('load', fn, { once: true });
-  };
-  let accounts = [];
-  try { accounts = JSON.parse(localStorage.getItem('accounts') || '[]'); } catch { /* unreadable */ }
-  const ours = accounts.find(a => a?.info?.uri === status.actor);
-  if (ours) {
-    // A stored login can be dead — its token revoked or minted by a run that
-    // never finished. Trusting it shows an empty client with no way out, so
-    // ask the facade first; a dead one falls through to the same one-trip
-    // login a missing account gets.
-    const alive = ours.accessToken && await fetch('/api/v1/accounts/verify_credentials', {
-      headers: { authorization: `Bearer ${ours.accessToken}` },
-    }).then(r => r.ok).catch(() => false);
-    if (alive) {
-      if (wanted) whenReady(() => sendTo(wanted));
-      return;
-    }
-  }
-  // Same origin, so the frame's own host is the instance to log into. A deep
-  // link is dropped here on purpose: logging in navigates the frame anyway, and
-  // arriving somewhere unexpected afterwards is worse than arriving home.
-  whenReady(() => sendTo(`#/login?instance=${encodeURIComponent(location.host)}&submit=1`));
-})();