fedipod 1.10.0 → 1.11.0

package/README.md

@@ -37,10 +37,8 @@ Which specs FediPod follows, and where it stops short: [specs-in-use.md](specs-i
 4. Enter your pod password once. It creates the account and locks your
    signing key. The password is not stored.
 
-<!-- CLAUDE 2026-09-15 — the short profile address; delete these markers when done -->
 Anyone can open your profile at `https://fedipod.net/@handle`, signed in or
 not.
-<!-- /CLAUDE -->
 
 Your account then opens in the client. To use it from another browser, go to
 https://fedipod.net, enter your address, sign in at your pod, and unlock your

package/lib/client/masto/render.mjs

@@ -46,7 +46,7 @@ export function account(api, actorUrl, { selfAcct } = {}) {
     // asking about itself would be told it was a person.
     bot: false, discoverable: true,
     group: self ? api.store.getConfig()?.kind === 'group' : cached.type === 'Group',
-    created_at: '2026-01-01T00:00:00.000Z',
+    created_at: (self && api.store.getConfig()?.createdAt) || '2026-01-01T00:00:00.000Z',
     note: (self ? api.store.getConfig()?.summary : cached.summary) || '',
     url: actorUrl, uri: actorUrl,
     avatar: selfIcon(api, self, cached) || TRANSPARENT_PNG,

package/lib/core/publisher/index.mjs

@@ -118,6 +118,52 @@ export class Publisher {
     });
   }
 
+  // The human half: a page a browser can open and follow from. The actor
+  // document is for servers; this is the address you hand to a person. It
+  // shows who the account is, its fields, when it joined and what it pinned;
+  // the counts and the posts live in the collections. Written only when its
+  // content changed.
+  async publishProfilePage({ force = false } = {}) {
+    const { urls } = this;
+    const host = new URL(urls.base).host;
+    // When the account was made. Accounts from before this was recorded take
+    // the date of their oldest post, or today.
+    if (!this.config.createdAt) {
+      const oldest = this.store.getStatuses().filter(s => s.kind === 'post' && s.published)
+        .map(s => s.published).sort()[0];
+      this.config.createdAt = oldest || new Date().toISOString();
+      this.store.setConfig?.({ ...this.store.getConfig?.(), createdAt: this.config.createdAt });
+    }
+    const pinned = this.store.getStatuses()
+      .filter(s => s.kind === 'post' && s.pinned && s.visibility !== 'private' && s.visibility !== 'direct')
+      .sort((a, b) => String(b.published).localeCompare(String(a.published)))
+      .slice(0, 5)
+      .map(s => ({ content: s.content, published: s.published, url: s.noteId }));
+    // The address as the world knows it: at the Gateway for a fronted
+    // identity, on the pod's host otherwise, the actor id where no host can
+    // answer for a handle.
+    const frontActor = this.config.gateway?.frontActor;
+    const address = frontActor ? `@${wire.publicHandle(this.config)}@${new URL(frontActor).host}`
+      : (wire.webfingerHost(urls.base) ? `@${this.config.handle}@${host}` : urls.actor);
+    const html = wire.profilePageHtml({
+      name: this.config.name || this.config.handle,
+      address,
+      summary: this.config.summary ? wire.contentHtml(this.config.summary) : null,
+      icon: this.config.icon || null,
+      image: this.config.image || null,
+      fields: this.config.fields || [],
+      joined: this.config.createdAt,
+      pinned,
+      kind: this.config.kind,
+    });
+    const digest = crypto.createHash('sha256').update(html).digest('hex').slice(0, 32);
+    const seen = this.store.read('published.json', {});
+    if (!force && seen.pageDigest === digest) return false;
+    await podActor.writeProfilePage(this.remote, urls, html);
+    this.store.write('published.json', { ...this.store.read('published.json', {}), pageDigest: digest });
+    return true;
+  }
+
   async publishProfile({ force = false } = {}) {
     const { urls } = this;
     const host = new URL(urls.base).host;
@@ -137,6 +183,9 @@ export class Publisher {
       quiesced: !!this.config.quiescedAt, version: AGENT_VERSION,
       moderators: this.config.moderators || [],
     })).digest('hex').slice(0, 32);
+    // The human page has its own gate: it changes with pins and the joined
+    // date as well as with the profile, and costs one write when it does.
+    await this.publishProfilePage({ force });
     if (!force && this.store.read('published.json', {}).surfaceDigest === surface) {
       this.log('profile unchanged — nothing republished');
       return { unreachable: [], updated: 0, skipped: true };
@@ -166,16 +215,6 @@ export class Publisher {
     // what concerns this identity. Written only while a gateway is advertised.
     if (gwActive) await this.publishGatewayPolicy();
 
-    // The human half: a page a browser can open and follow from. The actor
-    // document is for servers; this is the address you hand to a person.
-    await podActor.writeProfilePage(this.remote, urls, wire.profilePageHtml({
-      name: this.config.name || this.config.handle,
-      address: wire.webfingerHost(urls.base) ? `@${this.config.handle}@${host}` : urls.actor,
-      summary: this.config.summary ? wire.contentHtml(this.config.summary) : null,
-      icon: this.config.icon || null,
-      kind: this.config.kind,
-    }));
-
     // WebID → actor: the profile card lists the actor as a foaf:account.
     // Best-effort — a profile that cannot be read or edited does not stop the
     // publish, it is logged and the rest of the surface still goes up.

package/lib/core/social.mjs

@@ -523,6 +523,9 @@ export async function pinStatus(agent, s, pinned) {
   if (s.actor !== agent.publisher.urls.actor) throw new Error('not your status');
   const updated = agent.store.updateStatus(s.noteId, { pinned: !!pinned });
   await agent.publisher.publishFeatured().catch(e => agent.log?.(`featured: ${e.message}`));
+  if (agent.publisher.publishProfilePage) {
+    await agent.publisher.publishProfilePage().catch(e => agent.log?.(`profile page: ${e.message}`));
+  }
   agent.publisher.publishProfile?.().catch(() => {});
   return updated || s;
 }

package/lib/core/wire.mjs

@@ -196,9 +196,24 @@ export function actorDoc({ urls, handle, name, publicKeyPem, assertionKey = null
 // the actor document. It says who this is and how to follow — the handle to
 // paste, and the remote-follow control that hands the visitor to their own
 // server's follow screen.
-export function profilePageHtml({ name, address, summary = null, icon = null, kind = 'person' }) {
+// `fields` are the profile's name/value rows, `joined` an ISO date, `pinned`
+// the pinned posts as { content (sanitized HTML), published, url }.
+export function profilePageHtml({ name, address, summary = null, icon = null, image = null,
+  fields = [], joined = null, pinned = [], kind = 'person' }) {
   const esc = (s) => String(s ?? '').replace(/[&<>"]/g, c => ({ ...HTML_ESCAPES, '"': '&quot;' }[c]));
   const what = kind === 'group' ? 'a group' : 'an account';
+  const month = (iso) => {
+    const d = new Date(iso);
+    return Number.isNaN(d.getTime()) ? null
+      : d.toLocaleDateString('en', { month: 'long', year: 'numeric', timeZone: 'UTC' });
+  };
+  const day = (iso) => {
+    const d = new Date(iso);
+    return Number.isNaN(d.getTime()) ? '' : d.toISOString().slice(0, 10);
+  };
+  const fieldRows = fields.filter(f => f?.name && f?.value !== undefined && f?.value !== null && String(f.value) !== '');
+  const joinedText = joined ? month(joined) : null;
+  const pins = pinned.filter(x => x && typeof x.content === 'string');
   return `<!doctype html>
 <html lang="en">
 <head>
@@ -208,14 +223,23 @@ export function profilePageHtml({ name, address, summary = null, icon = null, ki
 <style>
 :root { color-scheme: light dark; }
 body { font: 112.5%/1.5 system-ui, sans-serif; max-width: 34rem; margin: 3rem auto; padding: 0 1rem; }
-img.avatar { width: 6rem; height: 6rem; border-radius: 1rem; object-fit: cover; }
+img.header { width: 100%; max-height: 12rem; object-fit: cover; border-radius: 1rem; }
+img.avatar { width: 6rem; height: 6rem; border-radius: 1rem; object-fit: cover; margin-top: 1rem; }
 h1 { margin: .5rem 0 0; }
 .address { font-size: 1.1rem; user-select: all; }
+dl.fields { display: grid; grid-template-columns: max-content 1fr; gap: .4rem 1rem; margin: 1.5rem 0; }
+dl.fields dt { font-weight: 600; }
+dl.fields dd { margin: 0; overflow-wrap: anywhere; }
+.joined { margin: 1rem 0; }
+section.pinned h2 { font-size: 1.1rem; margin: 2rem 0 .5rem; }
+article.pin { border: 1px solid #8884; border-radius: 1rem; padding: 1rem 1.2rem; margin: 1rem 0; }
+article.pin p:last-child { margin-bottom: 0; }
+article.pin .when { font-size: 1rem; }
 form { margin-top: 2rem; }
 label { display: block; margin-bottom: .3rem; }
 input { font: inherit; padding: .5rem; width: 14rem; max-width: 100%; }
 button { font: inherit; padding: .5rem 1rem; }
-.hint { color: #777; font-size: .9rem; }
+.hint { color: #666; font-size: 1rem; }
 .err { color: #b00020; }
 .err:empty { display: none; }
 @media (prefers-color-scheme: dark) {
@@ -226,10 +250,22 @@ button { font: inherit; padding: .5rem 1rem; }
 </head>
 <body>
 <main>
+${image ? `<img class="header" src="${esc(image)}" alt="">` : ''}
 ${icon ? `<img class="avatar" src="${esc(icon)}" alt="">` : ''}
 <h1>${esc(name)}</h1>
 <p class="address">${esc(address)}</p>
 ${summary ? `<div>${summary}</div>` : ''}
+${fieldRows.length ? `<dl class="fields">
+${fieldRows.map(f => `<dt>${esc(f.name)}</dt><dd>${esc(f.value)}</dd>`).join('\n')}
+</dl>` : ''}
+${joinedText ? `<p class="joined">Joined ${esc(joinedText)}</p>` : ''}
+${pins.length ? `<section class="pinned">
+<h2>Pinned</h2>
+${pins.map(x => `<article class="pin">
+${x.content}
+<p class="when">${x.url ? `<a href="${esc(x.url)}">${esc(day(x.published))}</a>` : esc(day(x.published))}</p>
+</article>`).join('\n')}
+</section>` : ''}
 <p>This is ${what} on the Fediverse. To follow it, paste the address above
 into the search box of Mastodon or any Fediverse app — or use the form.</p>
 <form id="follow">

package/lib/device/cli/commands/setup.mjs

@@ -163,6 +163,7 @@ const credential = await mintCredential({ origin: issuer, email, password, name:
 const rec = {
   ...credential,
   remotePod: pod.endsWith('/') ? pod : pod + '/',
+  createdAt: new Date().toISOString(),
   // The private half goes on THIS machine, exactly as the browser setup does
   // (lib/setup.mjs). Omitting it here meant the two paths produced different
   // installs from the same answers: the CLI put the timeline, contacts,

package/lib/device/setup.mjs

@@ -293,6 +293,7 @@ export async function runSetup({ home, agent, answers, run, deps = {}, log = ()
       const rec = {
         ...credential,
         remotePod: pod.endsWith('/') ? pod : pod + '/',
+        createdAt: new Date().toISOString(),
         ...(root ? { root } : {}),
         ...(keys === 'pod' ? { keysMode: 'pod' } : {}),
         // Where the private half lives. Per-machine, like keysMode.

package/lib/server/embed.mjs

@@ -137,6 +137,7 @@ function ensureCredential(home, { podBase, webId }) {
   const rec = {
     webId,
     remotePod: podBase.endsWith('/') ? podBase : podBase + '/',
+    createdAt: new Date().toISOString(),
     root: 'fedipod/',
     keysMode: 'pod',
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fedipod",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "Standalone single-actor ActivityPub agent whose wire face, RDF truth and state all live on a Solid pod (CSS). Bundles a Phanpy UI and a Mastodon client-API facade.",
   "type": "module",
   "license": "MIT",

package/run-agent.mjs

@@ -588,6 +588,10 @@ export class Agent {
     if (repair) {
       this.ensureActorPublished()
         .catch(e => this.log(`actor check failed: ${e.message}`));
+      // The human page, rewritten only when what it shows has changed: one
+      // local digest compare, and a write the first time after an upgrade.
+      this.publisher.publishProfilePage()
+        .catch(e => this.log(`profile page: ${e.message}`));
     }
     this.seedFollowNotifications().catch(e => this.log(`notification seeding failed: ${e.message}`));
   }

package/web/app/agent.mjs

@@ -88,6 +88,7 @@ export class BrowserAgent {
       // Own posts the outbox names and the timeline index lacks come back
       // here, before anything acts on the index.
       await this.publisher.healStatuses().catch((e) => this.log(`healing the timeline index: ${e.message}`));
+      await this.publisher.publishProfilePage().catch((e) => this.log(`profile page: ${e.message}`));
       // And start delivering again, since demote() stopped it. startQueue() is
       // idempotent, so a goActive() that was already active costs nothing.
       this.deliverer?.startQueue?.();

package/web/app/dist/boot.js

@@ -33444,6 +33444,7 @@ async function signUp(answers, { onStep = () => {
     handle,
     name: handle,
     issuer: credential.issuerOrigin,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
     ...gateway ? { gateway } : {}
   };
   const cfgRemote = new BrowserRemotePod(session, { webId: credential.webId, role: "signup", log: () => {