fedipod 1.26.1 → 1.27.3

package/web/app/site/admin/client/index.html

@@ -19,8 +19,8 @@ main { flex: 1 1 auto; min-height: 0; display: flex; }
 </style>
 <link rel="stylesheet" href="../bar.css">
 <style>#actor-pick{display:none!important}</style>
-<meta name="fedipod-version" content="1.26.1">
-<meta name="fedipod-build" content="a59138536e01">
+<meta name="fedipod-version" content="1.27.3">
+<meta name="fedipod-build" content="940565ccb8f5">
 <script src="/update.js" defer></script>
 <script src="/admin/client-pick.js"></script>
 </head>

package/web/app/site/admin/client-phanpy/index.html

@@ -19,8 +19,8 @@ main { flex: 1 1 auto; min-height: 0; display: flex; }
 </style>
 <link rel="stylesheet" href="../bar.css">
 <style>#actor-pick{display:none!important}</style>
-<meta name="fedipod-version" content="1.26.1">
-<meta name="fedipod-build" content="a59138536e01">
+<meta name="fedipod-version" content="1.27.3">
+<meta name="fedipod-build" content="940565ccb8f5">
 <script src="/update.js" defer></script>
 <script src="/admin/client-pick.js"></script>
 </head>

package/web/app/site/admin/index.html

@@ -168,8 +168,8 @@ pre { overflow-x: auto; background: #0001; padding: .6rem; border-radius: .3rem;
 <link rel="stylesheet" href="bar.css?v=3">
 <link rel="stylesheet" href="window.css">
 <style>#gw-shape-front,#do-drain,#do-log,#actor-pick{display:none!important}</style>
-<meta name="fedipod-version" content="1.26.1">
-<meta name="fedipod-build" content="a59138536e01">
+<meta name="fedipod-version" content="1.27.3">
+<meta name="fedipod-build" content="940565ccb8f5">
 <script src="/update.js" defer></script>
 <script src="/admin/client-pick.js"></script>
 </head>

package/web/app/site/admin/oauth-signin.mjs

@@ -0,0 +1,37 @@
+// oauth-signin.mjs — a client asked this account to sign its owner in. The
+// owner signs in at their own pod, with the fediverse-account library, and the
+// page proves that sign-in to the account with one signed request; the account
+// then hands the client its code. No password of ours anywhere.
+import { fediLogin } from './fedi-login.mjs';
+
+const $ = (id) => document.getElementById(id);
+const say = (text, error = false) => { const s = $('signin-status'); s.textContent = text; s.setAttribute('role', error ? 'alert' : 'status'); };
+const webId = $('webid').href;
+const here = location.origin + location.pathname;
+const login = fediLogin({ dbName: 'fedipod-signin', clientName: 'FediPod sign-in', redirectUri: here });
+
+// Back from the pod: this finishes the sign-in and returns to the client's
+// request, which carries the client's own parameters.
+try { await login.resume(); } catch (e) { say(e.message, true); }
+
+async function prove() {
+  const s = await login.getSession();
+  if (!s) return false;
+  if (s.webId !== webId) { say(`You signed in as ${s.webId}, but this account belongs to ${webId}. Sign out there and sign in as the owner.`, true); return true; }
+  say('Signing you in…');
+  const res = await s.fetch(here, {
+    method: 'POST', headers: { 'content-type': 'application/x-www-form-urlencoded' },
+    body: location.search.replace(/^\?/u, ''),
+  });
+  const d = await res.json().catch(() => ({}));
+  if (res.ok && d.redirect) { location.href = d.redirect; return true; }
+  if (res.ok && d.code) { say(`Your authorization code: ${d.code}`); return true; }
+  say(d.error || `The account refused the sign-in (HTTP ${res.status}).`, true);
+  return true;
+}
+
+if (location.search.includes('client_id=') && !(await prove())) $('signin').hidden = false;
+$('signin').addEventListener('click', async () => {
+  say('Taking you to your pod…');
+  try { await login.login(webId, { returnTo: location.href, redirectUri: here }); } catch (e) { say(e.message, true); }
+});

package/web/app/site/admin/setup/index.html

@@ -54,8 +54,8 @@ button:disabled { opacity: .5; cursor: default; }
 </style>
 <link rel="stylesheet" href="../bar.css">
 <style>#actor-pick{display:none!important}</style>
-<meta name="fedipod-version" content="1.26.1">
-<meta name="fedipod-build" content="a59138536e01">
+<meta name="fedipod-version" content="1.27.3">
+<meta name="fedipod-build" content="940565ccb8f5">
 <script src="/update.js" defer></script>
 </head>
 <body>

package/web/app/site/app/compose/index.html

@@ -12,8 +12,8 @@
     <link rel="modulepreload" crossorigin href="../assets/chunk-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="../assets/pwa-viewport-ogKbF51K.js">
     
-  <link rel="manifest" href="./manifest.webmanifest"><meta name="fedipod-version" content="1.26.1">
-<meta name="fedipod-build" content="a59138536e01">
+  <link rel="manifest" href="./manifest.webmanifest"><meta name="fedipod-version" content="1.27.3">
+<meta name="fedipod-build" content="940565ccb8f5">
 <script src="/update.js" defer></script>
 </head>
   <body>

package/web/app/site/app/index.html

@@ -65,8 +65,8 @@
     <link rel="modulepreload" crossorigin href="./assets/ICONS-DIPJeU0C.js">
     <link rel="modulepreload" crossorigin href="./assets/ScheduledAtField-D-Abfo4J.js">
     
-  <link rel="manifest" href="./manifest.webmanifest"><meta name="fedipod-version" content="1.26.1">
-<meta name="fedipod-build" content="a59138536e01">
+  <link rel="manifest" href="./manifest.webmanifest"><meta name="fedipod-version" content="1.27.3">
+<meta name="fedipod-build" content="940565ccb8f5">
 <script src="/update.js" defer></script>
 </head>
   <body>

package/web/app/site/authorize_interaction.html

@@ -35,8 +35,8 @@
   .hint { color: var(--sub); }
 </style>
 <script src="/authorize_interaction.js" defer></script>
-<meta name="fedipod-version" content="1.26.1">
-<meta name="fedipod-build" content="a59138536e01">
+<meta name="fedipod-version" content="1.27.3">
+<meta name="fedipod-build" content="940565ccb8f5">
 <script src="/update.js" defer></script>
 </head>
 <body>

package/web/app/site/bb/index.html

@@ -211,8 +211,8 @@
   /* At the foot of the page, centred, clear of whatever is above it. */
   footer.foot { margin: 1rem auto 0; color: var(--sub); font-size: 16px; text-align: center; }
 </style>
-<meta name="fedipod-version" content="1.26.1">
-<meta name="fedipod-build" content="a59138536e01">
+<meta name="fedipod-version" content="1.27.3">
+<meta name="fedipod-build" content="940565ccb8f5">
 <script src="/update.js" defer></script>
 </head>
 <body>

package/web/app/site/build.json

@@ -1 +1 @@
-{"build":"a59138536e01","version":"1.26.1","at":"2026-09-20T18:26:18.671Z"}
+{"build":"940565ccb8f5","version":"1.27.3","at":"2026-09-22T03:52:57.316Z"}

package/web/app/site/index.html

@@ -72,8 +72,8 @@ button:disabled { opacity: .55; cursor: default; }
 a { color: var(--accent); }
 [hidden] { display: none !important; }
 </style>
-<meta name="fedipod-version" content="1.26.1">
-<meta name="fedipod-build" content="a59138536e01">
+<meta name="fedipod-version" content="1.27.3">
+<meta name="fedipod-build" content="940565ccb8f5">
 <script src="/update.js" defer></script>
 </head>
 <body>

package/web/app/site/sw.js

@@ -45643,7 +45643,8 @@ var ALL_COLLECTIONS = {
   outbox: true,
   acls: true,
   pending: true,
-  blocked: true
+  blocked: true,
+  featured: true
 };
 async function publishOutbox(publisher, outbox, { acls = false, force = false } = {}) {
   const { urls } = publisher;
@@ -45742,6 +45743,7 @@ async function publishCollections(publisher, which = ALL_COLLECTIONS) {
   }
   if (which.pending) await publisher.publishPending();
   if (which.blocked) await publisher.publishBlocked();
+  if (which.featured) await publisher.publishFeatured();
   if (which.outbox) {
     const outbox = publisher.store.read("outbox.json", []);
     const known2 = publisher.store.read("published.json", {}).outboxIndex;
@@ -57345,6 +57347,7 @@ var Publisher = class {
       ["notes", urls.notes],
       ["followers", urls.followers],
       ["following", urls.following],
+      ["featured", urls.featured],
       ["outbox", urls.outbox]
     ];
     const unreachable = [];
@@ -65852,6 +65855,39 @@ function checkPassword(rec, password) {
 }
 var escapeHtml = (s) => String(s).replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
 var parseRedirects = (v) => (Array.isArray(v) ? v : String(v || "").split(/\s+/)).map((s) => s.trim()).filter(Boolean);
+function sendPodSigninPage(res, client, webId, mount = "") {
+  let asking = "";
+  if (client && (client.name || client.redirect)) {
+    let where = "";
+    try {
+      where = client.redirect ? new URL(client.redirect).host : "";
+    } catch {
+    }
+    const who = client.name ? escapeHtml(client.name) : where ? escapeHtml(where) : "A client";
+    asking = `<p><strong>${who}</strong> is asking to use your account${where ? `, and will be sent back to <code>${escapeHtml(where)}</code>` : ""}.</p>`;
+  }
+  res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-cache" });
+  res.end(`<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Sign in with your pod</title>
+<style>:root{color-scheme:light dark;--heading:#1a4f8a;--btn:#3d6b35;--line:#9a9a9a}
+body{font:20px Arial,Helvetica,sans-serif;max-width:28rem;margin:12vh auto;padding:0 1rem}
+h1{color:var(--heading);font-size:1.5rem}
+code{word-break:break-all;background:rgba(120,120,120,.12);padding:.05em .35em;border-radius:4px}
+button{font:inherit;padding:.6rem 1.1rem;background:var(--btn);color:#fff;border:none;border-radius:9px;cursor:pointer}
+button[hidden]{display:none}
+#signin-status{min-height:1.5em;padding:.6rem .8rem;border:1px solid var(--line);border-radius:8px;margin-top:1rem}
+@media (prefers-color-scheme:dark){:root{--heading:#7fb3e8;--btn:#5a8a4f}}</style></head><body>
+<main>
+<h1>Sign in with your pod</h1>
+${asking}
+<p>This account belongs to <a id="webid" href="${escapeHtml(webId)}">${escapeHtml(webId)}</a>. Sign in at that pod to allow it.</p>
+<p><button type="button" id="signin" hidden>Sign in with your pod</button></p>
+<p id="signin-status" role="status" aria-live="polite"></p>
+</main>
+<script type="module" src="${escapeHtml(mount)}/oauth/session/signin.mjs"><\/script>
+</body></html>`);
+  return true;
+}
 function sendLoginForm(res, params, error2 = "", client = null, status2 = null, headers = {}) {
   const hidden = [...params.entries()].filter(([k]) => k !== "password").map(([k, v]) => `<input type="hidden" name="${escapeHtml(k)}" value="${escapeHtml(v)}">`).join("\n");
   let asking = "<p>Enter the agent password to authorize this client.</p>";
@@ -66120,6 +66156,16 @@ async function handle(api, ctx) {
       params = new URLSearchParams(body);
     }
     const redirect = params.get("redirect_uri") || "";
+    let proved = false;
+    if (req.method === "POST" && req.headers.authorization && req.headers.dpop && api.podAuth) {
+      const proof = await api.podAuth(req, pathname);
+      if (!proof.ok) return send(proof.status || 401, { error: proof.error });
+      proved = true;
+    }
+    const ownerWebId = api.ownerWebId?.() || null;
+    if (req.method === "GET" && !params.get("client_id") && params.get("code") && params.get("state") && ownerWebId) {
+      return sendPodSigninPage(res, null, ownerWebId, api.mount || "");
+    }
     const app = api.findApp(params.get("client_id") || "");
     const doc = app ? null : await api.resolveClientDocument(params.get("client_id") || "");
     const external = !!app || !!doc;
@@ -66127,13 +66173,14 @@ async function handle(api, ctx) {
       api.log(`authorize refused: cross-site navigation to the mint from ${req.headers.referer || "nowhere"}`);
       return send(403, { error: "a cross-site navigation may not authorize a client" });
     }
-    if (external && !api.store.getConfig()?.uiPassword && !api.redirectAllowed(redirect)) {
+    const client = { name: app?.name || doc?.name || null, redirect, scope: params.get("scope") || "read" };
+    if (external && !proved && !api.store.getConfig()?.uiPassword && !api.redirectAllowed(redirect)) {
+      if (req.method === "GET" && ownerWebId) return sendPodSigninPage(res, client, ownerWebId, api.mount || "");
       api.log(`authorize refused: no UI password, and "${redirect}" is not an address of this agent`);
       return send(403, {
         error: "this client asks to be sent somewhere other than this agent, and no password is set to approve that with. Run `fedipod passwd` and try again."
       });
     }
-    const client = { name: app?.name || doc?.name || null, redirect, scope: params.get("scope") || "read" };
     if (app) {
       if (!app.redirectUris.includes(redirect)) {
         api.log(`authorize refused: redirect_uri "${redirect}" not registered for ${app.clientId}`);
@@ -66152,7 +66199,7 @@ async function handle(api, ctx) {
       api.log(`authorize refused: redirect_uri "${redirect}" is not this agent`);
       return send(400, { error: "redirect_uri must be an address of this agent" });
     }
-    if (req.method === "POST") {
+    if (req.method === "POST" && !proved) {
       if (api.rateLimited()) {
         api.log("authorize rate limited");
         return sendLoginForm(
@@ -66167,12 +66214,13 @@ async function handle(api, ctx) {
       if (!pw || !checkPassword(pw, body.password || "")) {
         return sendLoginForm(res, params, "wrong password \u2014 try again", client);
       }
-    } else if (pw) {
+    } else if (pw && !proved) {
       return sendLoginForm(res, params, "", client);
-    } else if (api.allowed && !api.allowed.isLocalRequest(req)) {
+    } else if (!proved && api.allowed && !api.allowed.isLocalRequest(req) && !api.throughDoor?.(req)) {
+      if (req.method === "GET" && ownerWebId) return sendPodSigninPage(res, client, ownerWebId, api.mount || "");
       api.log(`authorize refused: no UI password, and "${req.headers.host}" is not this machine`);
       return send(403, {
-        error: "this agent answers on an address outside this machine and has no password set \u2014 " + (api.embedded ? `POST {"password":"\u2026"} to the owner door's /config with its door secret before logging in` : "run `fedipod passwd` before logging in over that address")
+        error: api.embedded ? "Open your account's management page first, then sign in from there." : "Signing in from another machine needs a password. On the machine that runs your account, run: fedipod passwd"
       });
     }
     const code = external ? api.mintCode({
@@ -66186,6 +66234,7 @@ async function handle(api, ctx) {
     const target = new URL(redirect);
     target.searchParams.set("code", code);
     if (params.get("state")) target.searchParams.set("state", params.get("state"));
+    if (proved) return send(200, { redirect: target.href });
     res.writeHead(302, { location: target.href });
     res.end();
     return true;
@@ -68091,6 +68140,7 @@ var MastoApi = class _MastoApi {
     allowed = null,
     scheme = null,
     embedded = false,
+    throughDoor = null,
     mount = "",
     streaming = true,
     webPush = true,
@@ -68101,6 +68151,7 @@ var MastoApi = class _MastoApi {
     this.embedded = embedded;
     this.log = log2;
     this.allowed = allowed;
+    this.throughDoor = throughDoor;
     this.scheme = scheme;
     this.streaming = streaming;
     this.webPush = webPush;

package/web/front/admin.html

@@ -49,6 +49,5 @@ accounts that only use it as their gateway. Sign in as the server's admin to see
 </table>
 
 <script type="module" src="/admin.js"></script>
-<i>(cc) 4.0 By, Jeff Zucker, 2026</i>
 </body>
 </html>

package/web/front/new-account.html

@@ -31,6 +31,5 @@ FediPod is experimental and free to use.  See the <a href="https://github.com/je
 </p>
 
 <script src="/new-account.js"></script>
-<i style="text-align:right">(cc) 4.0 By, Jeff Zucker, 2026</i>
 </body>
 </html>

package/web/front/run.html

@@ -3,7 +3,7 @@
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<title>FediPod — run your identity on this server</title>
+<title>FediPod — turn your pod into a Fediverse account</title>
 <link rel="icon" href="/icons/gateway.svg" type="image/svg+xml">
 <style>
   :root { color-scheme: light dark; --line:#d9d4c7; --dim:#45443d; --accent:#6a8a5a; }
@@ -15,20 +15,27 @@
   input[type=text], input[type=url] { width: 100%; padding: .5rem .6rem; font: inherit;
     border: 1px solid var(--line); border-radius: 8px; box-sizing: border-box; }
   .hint { color: var(--dim); font-size: .95rem; }
+  .pod { border: 1px solid var(--line); border-radius: 9px; padding: .9rem 1.1rem; margin: .8rem 0; }
+  .pod p { margin: .3rem 0; }
+  .pod .actions { margin-top: .8rem; }
   .primary { background: var(--accent); color: #fff; border: none; border-radius: 9px;
     padding: .6rem 1.1rem; font: inherit; cursor: pointer; }
   button { font: inherit; }
   .primary[disabled], button[disabled] { opacity: .5; cursor: not-allowed; }
   [hidden] { display: none !important; }
   code { background: rgba(120,120,120,.12); padding: .05em .35em; border-radius: 4px; }
+  .pod code { background: #fff3c4; color: #1a1a1a; font-size: 16px; }
+  @media (prefers-color-scheme: dark) { .pod code { background: #5a4a00; color: #fff; } }
   pre { background: rgba(120,120,120,.12); padding: .7rem .9rem; border-radius: 8px; overflow-x: auto; }
 </style>
 </head>
 <body>
-<h1>Run your identity on this server</h1>
-<p class="lede">If your pod is hosted by this server, the server can run your Fediverse identity
-for you: it accepts follows, delivers your posts and serves your Mastodon app, with nothing for
-you to keep running. Sign in with your pod to prove it is yours.</p>
+<h1>Turn your pod into a Fediverse account</h1>
+<p class="lede">Users with pods on this server may opt-in below to create a Fediverse account
+that stores your data on your pod. You'll be able to interact with Mastodon and users of other
+Fediverse services straight from your pod.</p>
+
+<section id="run-known" hidden aria-live="polite"></section>
 
 <form id="run-form">
   <p class="field">
@@ -43,10 +50,9 @@ you to keep running. Sign in with your pod to prove it is yours.</p>
     <button type="button" id="run-continue" class="primary" disabled>Sign in with your pod &amp; opt in</button>
     <button type="button" id="run-leave">Stop running it here</button>
   </p>
-  <p class="hint" id="run-note" hidden></p>
 </form>
+<p class="hint" id="run-note" hidden></p>
 
 <script type="module" src="/run.js"></script>
-<i>(cc) 4.0 By, Jeff Zucker, 2026</i>
 </body>
 </html>

package/web/front/run.js

@@ -23,22 +23,80 @@ try {
   session = new SessionCore({ redirect_uris: [HERE], client_name: 'FediPod gateway' });
 } catch { /* leave null — the "did not load" notes below fire */ }
 
-// Offered only where this server actually runs identities. An
-// unauthenticated probe tells the two apart: 501 = not offered here,
-// anything else = offered (a real opt-in still needs the signed-in proof).
+// What this server knows before anything is typed. 501: it runs no
+// identities. A pod server that issued the reader's session names their pod
+// and its address, and the page shows one button per pod. Not signed in
+// there: one button, to its login. A Gateway knows nothing: the form below.
 let offered = true;
+const say = (tag, text) => { const e = document.createElement(tag); e.textContent = text; return e; };
 (async () => {
-  const res = await fetch('/api/agent', { method: 'POST',
-    headers: { 'content-type': 'application/json' }, body: '{}' }).catch(() => null);
+  const res = await fetch('/api/agent', { credentials: 'same-origin', headers: { accept: 'application/json' } }).catch(() => null);
+  const d = res && res.ok ? await res.json().catch(() => ({})) : {};
+  const n = $('run-note');
   if (!res || res.status === 501) {
     offered = false;
-    const n = $('run-note');
     n.hidden = false;
     n.textContent = 'This server does not run identities. Your agent stays where it is.';
+  } else if (d.session === 'none') {
+    $('run-form').hidden = true;
+    showSignIn(d.loginUrl);
+  } else if (d.session === 'ok' && Array.isArray(d.pods) && d.pods.length) {
+    $('run-form').hidden = true;
+    showPods(d.pods);
   }
   runFormCheck();
 })();
 
+async function refreshKnown() {
+  const res = await fetch('/api/agent', { credentials: 'same-origin', headers: { accept: 'application/json' } }).catch(() => null);
+  const d = res && res.ok ? await res.json().catch(() => ({})) : {};
+  if (d.session === 'ok' && Array.isArray(d.pods) && d.pods.length) showPods(d.pods);
+}
+
+function showSignIn(loginUrl) {
+  const k = $('run-known');
+  k.hidden = false;
+  k.replaceChildren();
+  k.append(say('p', 'You are not signed in at this server.'));
+  if (loginUrl) {
+    const go = say('button', 'Sign in');
+    go.type = 'button'; go.className = 'primary';
+    go.onclick = () => { location.href = loginUrl; };
+    const p = document.createElement('p'); p.className = 'actions'; p.append(go);
+    k.append(p, say('p', 'Sign in, then come back to this page.'));
+    k.lastChild.className = 'hint';
+  }
+}
+
+function showPods(pods) {
+  const k = $('run-known');
+  k.hidden = false;
+  k.replaceChildren();
+  for (const pod of pods) {
+    const box = document.createElement('div'); box.className = 'pod';
+    // The names stand out from the sentences around them.
+    const line = (before, id, after = '.') => { const p = say('p', before); p.append(say('code', id), after); return p; };
+    box.append(line('Solid Identity (WebID): ', pod.webId, ''));
+    const actions = document.createElement('p'); actions.className = 'actions';
+    box.append(line('Fediverse Identity: ', pod.address, ''));
+    if (pod.running) {
+      const links = say('p', 'Manage your account: ');
+      const m = say('a', pod.manage.split('?')[0]); m.href = pod.manage;
+      links.append(m);
+      box.append(links);
+      const stop = say('button', 'Close this Fediverse account'); stop.type = 'button'; stop.className = 'primary';
+      stop.onclick = () => runStart('opt-out', pod.podBase);
+      actions.append(stop);
+    } else {
+      const go = say('button', 'Create a Fediverse account'); go.type = 'button'; go.className = 'primary';
+      go.onclick = () => runStart('opt-in', pod.podBase);
+      actions.append(go);
+    }
+    box.append(actions);
+    k.append(box);
+  }
+}
+
 function runFormCheck() {
   let ok = false;
   try { ok = /^https?:$/.test(new URL($('run-pod-url').value.trim()).protocol); } catch { /* not yet */ }
@@ -63,9 +121,9 @@ $('run-issuer').addEventListener('input', runFormCheck);
 // a filled-in form, with nothing to say why.
 runFormCheck();
 
-const runStart = async (action) => {
+const runStart = async (action, podBase = null) => {
   const n = $('run-note');
-  const u = new URL($('run-pod-url').value.trim());
+  const u = new URL(podBase || $('run-pod-url').value.trim());
   if (u.pathname === '') u.pathname = '/';
   if (!u.pathname.endsWith('/')) u.pathname += '/';
   u.search = ''; u.hash = '';
@@ -103,16 +161,14 @@ async function showReply(res, p) {
     // back from the server and one comes from sessionStorage, and pasting any
     // of them into innerHTML means whatever markup they contain is rendered.
     // Only the fixed wording is markup here; everything variable is text.
-    const say = (tag, text) => { const e = document.createElement(tag); e.textContent = text; return e; };
-    n.textContent = 'Your identity runs here now. This is your door secret — ';
-    n.append(say('b', 'save it now'));
-    n.append(', it is shown only this once. It opens your admin pages at ');
-    n.append(say('code', p.podBase.replace(/\/$/, '') + d.doorPath));
-    n.append(':', say('pre', d.doorSecret));
-    n.append('To check it works:', say('pre', d.command));
-    n.append('Lost it? Opt in again — that mints a fresh one and retires this one.');
+    const manage = `${p.podBase.replace(/\/$/, '')}${d.doorPath}?dk-token=${encodeURIComponent(d.doorSecret)}`;
+    n.textContent = 'Your Fediverse account is ready. Manage it at ';
+    const a = say('a', p.podBase.replace(/\/$/, '') + d.doorPath); a.href = manage;
+    n.append(a, '.');
+    refreshKnown();
   } else if (res && res.status === 200) {
-    n.textContent = 'Done — this server no longer runs that identity. Your pod and its data are untouched.';
+    n.textContent = 'Your Fediverse account is closed. Your pod and its data are untouched.';
+    refreshKnown();
   } else {
     n.textContent = (p.action === 'opt-in' ? 'opt-in' : 'opt-out') + ' failed: '
       + (d.error || (res ? 'HTTP ' + res.status : 'no response'));