fedipod 1.50.2 → 1.55.2

package/web/app/dist/sw.js

@@ -54,6 +54,7 @@ globalThis.Buffer ??= (() => {
     concat: (list) => { const n = list.reduce((s, x) => s + x.length, 0); const o = new Buf(n); let i = 0; for (const x of list) { o.set(x, i); i += x.length; } return o; },
     alloc: (n) => new Buf(n),
     isBuffer: (x) => x instanceof Uint8Array,
+    byteLength: (d, enc) => (typeof d === 'string' ? fromString(d, enc).length : d.byteLength ?? d.length),
   };
 })();
 
@@ -3636,7 +3637,6 @@ var require_escape_string_regexp = __commonJS({
 var require_is_plain_object = __commonJS({
   "node_modules/is-plain-object/dist/is-plain-object.js"(exports) {
     "use strict";
-    Object.defineProperty(exports, "__esModule", { value: true });
     function isObject(o) {
       return Object.prototype.toString.call(o) === "[object Object]";
     }
@@ -3656,109 +3656,6 @@ var require_is_plain_object = __commonJS({
   }
 });
 
-// node_modules/deepmerge/dist/cjs.js
-var require_cjs = __commonJS({
-  "node_modules/deepmerge/dist/cjs.js"(exports, module2) {
-    "use strict";
-    var isMergeableObject = function isMergeableObject2(value) {
-      return isNonNullObject(value) && !isSpecial(value);
-    };
-    function isNonNullObject(value) {
-      return !!value && typeof value === "object";
-    }
-    function isSpecial(value) {
-      var stringValue = Object.prototype.toString.call(value);
-      return stringValue === "[object RegExp]" || stringValue === "[object Date]" || isReactElement(value);
-    }
-    var canUseSymbol = typeof Symbol === "function" && Symbol.for;
-    var REACT_ELEMENT_TYPE = canUseSymbol ? /* @__PURE__ */ Symbol.for("react.element") : 60103;
-    function isReactElement(value) {
-      return value.$$typeof === REACT_ELEMENT_TYPE;
-    }
-    function emptyTarget(val) {
-      return Array.isArray(val) ? [] : {};
-    }
-    function cloneUnlessOtherwiseSpecified(value, options) {
-      return options.clone !== false && options.isMergeableObject(value) ? deepmerge(emptyTarget(value), value, options) : value;
-    }
-    function defaultArrayMerge(target, source, options) {
-      return target.concat(source).map(function(element) {
-        return cloneUnlessOtherwiseSpecified(element, options);
-      });
-    }
-    function getMergeFunction(key, options) {
-      if (!options.customMerge) {
-        return deepmerge;
-      }
-      var customMerge = options.customMerge(key);
-      return typeof customMerge === "function" ? customMerge : deepmerge;
-    }
-    function getEnumerableOwnPropertySymbols(target) {
-      return Object.getOwnPropertySymbols ? Object.getOwnPropertySymbols(target).filter(function(symbol) {
-        return Object.propertyIsEnumerable.call(target, symbol);
-      }) : [];
-    }
-    function getKeys(target) {
-      return Object.keys(target).concat(getEnumerableOwnPropertySymbols(target));
-    }
-    function propertyIsOnObject(object, property) {
-      try {
-        return property in object;
-      } catch (_) {
-        return false;
-      }
-    }
-    function propertyIsUnsafe(target, key) {
-      return propertyIsOnObject(target, key) && !(Object.hasOwnProperty.call(target, key) && Object.propertyIsEnumerable.call(target, key));
-    }
-    function mergeObject(target, source, options) {
-      var destination = {};
-      if (options.isMergeableObject(target)) {
-        getKeys(target).forEach(function(key) {
-          destination[key] = cloneUnlessOtherwiseSpecified(target[key], options);
-        });
-      }
-      getKeys(source).forEach(function(key) {
-        if (propertyIsUnsafe(target, key)) {
-          return;
-        }
-        if (propertyIsOnObject(target, key) && options.isMergeableObject(source[key])) {
-          destination[key] = getMergeFunction(key, options)(target[key], source[key], options);
-        } else {
-          destination[key] = cloneUnlessOtherwiseSpecified(source[key], options);
-        }
-      });
-      return destination;
-    }
-    function deepmerge(target, source, options) {
-      options = options || {};
-      options.arrayMerge = options.arrayMerge || defaultArrayMerge;
-      options.isMergeableObject = options.isMergeableObject || isMergeableObject;
-      options.cloneUnlessOtherwiseSpecified = cloneUnlessOtherwiseSpecified;
-      var sourceIsArray = Array.isArray(source);
-      var targetIsArray = Array.isArray(target);
-      var sourceAndTargetTypesMatch = sourceIsArray === targetIsArray;
-      if (!sourceAndTargetTypesMatch) {
-        return cloneUnlessOtherwiseSpecified(source, options);
-      } else if (sourceIsArray) {
-        return options.arrayMerge(target, source, options);
-      } else {
-        return mergeObject(target, source, options);
-      }
-    }
-    deepmerge.all = function deepmergeAll(array, options) {
-      if (!Array.isArray(array)) {
-        throw new Error("first argument should be an array");
-      }
-      return array.reduce(function(prev, next) {
-        return deepmerge(prev, next, options);
-      }, {});
-    };
-    var deepmerge_1 = deepmerge;
-    module2.exports = deepmerge_1;
-  }
-});
-
 // node_modules/parse-srcset/src/parse-srcset.js
 var require_parse_srcset = __commonJS({
   "node_modules/parse-srcset/src/parse-srcset.js"(exports, module2) {
@@ -4037,14 +3934,7 @@ var require_css_syntax_error = __commonJS({
 var require_stringifier = __commonJS({
   "node_modules/postcss/lib/stringifier.js"(exports, module2) {
     "use strict";
-    var STYLE_TAG = /(<)(\/?style\b)/gi;
-    var COMMENT_OPEN = /(<)(!--)/g;
     var AT_NAME_END = /[\t\n\f\r "#'()/;[\\\]{}]/;
-    function escapeHTMLInCSS(str) {
-      if (typeof str !== "string") return str;
-      if (!str.includes("<")) return str;
-      return str.replace(STYLE_TAG, "\\3c $2").replace(COMMENT_OPEN, "\\3c $2");
-    }
     var DEFAULT_RAW = {
       after: "\n",
       beforeClose: "\n",
@@ -4073,6 +3963,11 @@ var require_stringifier = __commonJS({
       }
       return name + afterName + params;
     }
+    function isCustomProperty(node) {
+      if (!node.prop.startsWith("--")) return false;
+      let before = node.raws.before;
+      return typeof before === "undefined" || !/[^\s;]$/.test(before);
+    }
     function pushBody(str, stack, node) {
       let nodes = node.nodes;
       let last = nodes.length - 1;
@@ -4085,7 +3980,7 @@ var require_stringifier = __commonJS({
       for (let i = nodes.length - 1; i >= 0; i--) {
         let child = nodes[i];
         let childSemicolon = last !== i || semicolon;
-        if (!childSemicolon && i < nodes.length - 1 && (child.type === "atrule" && !child.nodes || child.type === "decl" && child.prop.startsWith("--"))) {
+        if (!childSemicolon && i < nodes.length - 1 && (child.type === "atrule" && !child.nodes || child.type === "decl" && isCustomProperty(child))) {
           childSemicolon = true;
         }
         stack.push({
@@ -4097,14 +3992,14 @@ var require_stringifier = __commonJS({
     }
     function pushBlock(str, stack, node, start) {
       let between = str.raw(node, "between", "beforeOpen");
-      str.builder(escapeHTMLInCSS(start + between) + "{", node, "start");
+      str.builder(start + between + "{", node, "start");
       let hasNodes = node.nodes && node.nodes.length;
       let close = () => {
         let after = hasNodes ? str.raw(node, "after") : str.raw(node, "after", "emptyBody");
-        if (after) str.builder(escapeHTMLInCSS(after));
+        if (after) str.builder(after);
         str.builder("}", node, "end");
         if (node.type === "rule" && node.raws.ownSemicolon) {
-          str.builder(escapeHTMLInCSS(node.raws.ownSemicolon), node, "end");
+          str.builder(node.raws.ownSemicolon, node, "end");
         }
       };
       if (hasNodes) {
@@ -4124,7 +4019,7 @@ var require_stringifier = __commonJS({
           this.block(node, start);
         } else {
           let end = (node.raws.between || "") + (semicolon ? ";" : "");
-          this.builder(escapeHTMLInCSS(start + end), node);
+          this.builder(start + end, node);
         }
       }
       beforeAfter(node, detect) {
@@ -4154,7 +4049,7 @@ var require_stringifier = __commonJS({
       }
       block(node, start) {
         let between = this.raw(node, "between", "beforeOpen");
-        this.builder(escapeHTMLInCSS(start + between) + "{", node, "start");
+        this.builder(start + between + "{", node, "start");
         let after;
         if (node.nodes && node.nodes.length) {
           this.body(node);
@@ -4162,7 +4057,7 @@ var require_stringifier = __commonJS({
         } else {
           after = this.raw(node, "after", "emptyBody");
         }
-        if (after) this.builder(escapeHTMLInCSS(after));
+        if (after) this.builder(after);
         this.builder("}", node, "end");
       }
       body(node) {
@@ -4181,7 +4076,7 @@ var require_stringifier = __commonJS({
           let child = entry.node;
           let before = this.raw(child, "before");
           if (before) {
-            this.builder(entry.document ? before : escapeHTMLInCSS(before));
+            this.builder(before);
           }
           if (expandable && child.type === "rule") {
             pushBlock(this, stack, child, this.rawValue(child, "selector"));
@@ -4195,7 +4090,7 @@ var require_stringifier = __commonJS({
       comment(node) {
         let left = this.raw(node, "left", "commentLeft");
         let right = this.raw(node, "right", "commentRight");
-        this.builder(escapeHTMLInCSS("/*" + left + node.text + right + "*/"), node);
+        this.builder("/*" + left + node.text + right + "*/", node);
       }
       decl(node, semicolon) {
         let raws = node.raws;
@@ -4205,7 +4100,7 @@ var require_stringifier = __commonJS({
           string += raws.important || " !important";
         }
         if (semicolon) string += ";";
-        this.builder(escapeHTMLInCSS(string), node);
+        this.builder(string, node);
       }
       document(node) {
         this.body(node);
@@ -4382,20 +4277,19 @@ var require_stringifier = __commonJS({
         return value;
       }
       root(node) {
-        if (node.source && node.source.input.hasBOM) {
+        let inDocument = node.parent && node.parent.type === "document";
+        if (!inDocument && node.source && node.source.input.hasBOM) {
           this.builder("\uFEFF", node, "start");
         }
         this.body(node);
         if (node.raws.after) {
-          let after = node.raws.after;
-          let isDocument2 = node.parent && node.parent.type === "document";
-          this.builder(isDocument2 ? after : escapeHTMLInCSS(after));
+          this.builder(node.raws.after);
         }
       }
       rule(node) {
         this.block(node, this.rawValue(node, "selector"));
         if (node.raws.ownSemicolon) {
-          this.builder(escapeHTMLInCSS(node.raws.ownSemicolon), node, "end");
+          this.builder(node.raws.ownSemicolon, node, "end");
         }
       }
       stringify(node, semicolon) {
@@ -4417,9 +4311,78 @@ var require_stringify = __commonJS({
   "node_modules/postcss/lib/stringify.js"(exports, module2) {
     "use strict";
     var Stringifier = require_stringifier();
+    var STYLE_TAG = /(<)(\/?style\b)/gi;
+    var COMMENT_OPEN = /(<)(!--)/g;
+    function escapeHTMLInCSS(str) {
+      if (!str.includes("<")) return str;
+      return str.replace(STYLE_TAG, "\\3c $2").replace(COMMENT_OPEN, "\\3c $2");
+    }
+    function cutEscaped(chunks, css, escaped) {
+      let parts = [];
+      let at = 0;
+      let into = 0;
+      for (let i = 0; i < chunks.length; i += 3) {
+        let from = into;
+        let end = at + chunks[i].length;
+        while (at < end) {
+          if (css[at] === escaped[into]) {
+            at += 1;
+            into += 1;
+          } else {
+            at += 1;
+            into += 4;
+          }
+        }
+        parts.push(escaped.slice(from, into));
+      }
+      return parts;
+    }
+    var SafeStringifier = class extends Stringifier {
+      escapeHTML(print) {
+        let builder111 = this.builder;
+        let chunks, css;
+        this.builder = (str, child, type) => {
+          if (chunks) {
+            css += str;
+            chunks.push(str, child, type);
+          } else if (str.includes("<")) {
+            css = str;
+            chunks = [str, child, type];
+          } else {
+            builder111(str, child, type);
+          }
+        };
+        print();
+        this.builder = builder111;
+        if (!chunks) return;
+        let escaped = escapeHTMLInCSS(css);
+        if (escaped === css) {
+          for (let i = 0; i < chunks.length; i += 3) {
+            builder111(chunks[i], chunks[i + 1], chunks[i + 2]);
+          }
+        } else {
+          let parts = cutEscaped(chunks, css, escaped);
+          for (let i = 0; i < chunks.length; i += 3) {
+            builder111(parts[i / 3], chunks[i + 1], chunks[i + 2]);
+          }
+        }
+      }
+      root(node) {
+        if (node.parent && node.parent.type === "document") {
+          this.escapeHTML(() => this.body(node));
+          if (node.raws.after) this.builder(node.raws.after);
+        } else {
+          this.escapeHTML(() => super.root(node));
+        }
+      }
+    };
     function stringify(node, builder111) {
-      let str = new Stringifier(builder111);
-      str.stringify(node);
+      let str = new SafeStringifier(builder111);
+      if (node.type === "root" || node.type === "document") {
+        str.stringify(node);
+      } else {
+        str.escapeHTML(() => str.stringify(node));
+      }
     }
     module2.exports = stringify;
     stringify.default = stringify;
@@ -5419,9 +5382,16 @@ var require_fs = __commonJS({
 var require_previous_map = __commonJS({
   "node_modules/postcss/lib/previous-map.js"(exports, module2) {
     "use strict";
-    var { existsSync: existsSync2, readFileSync: readFileSync2 } = require_fs();
+    var { existsSync: existsSync2, readFileSync: readFileSync2, realpathSync } = require_fs();
     var { dirname: dirname2, isAbsolute, join: join3, relative, sep } = require_path();
     var { SourceMapConsumer, SourceMapGenerator } = require_source_map();
+    function realPath(path) {
+      try {
+        return realpathSync(path);
+      } catch {
+        return path;
+      }
+    }
     function fromBase64(str) {
       if (Buffer) {
         return Buffer.from(str, "base64").toString();
@@ -5486,7 +5456,7 @@ var require_previous_map = __commonJS({
         if (!trusted && !this.unsafeMap) {
           if (!/\.map$/i.test(path)) return void 0;
           if (!cssFile) return void 0;
-          let rel = relative(dirname2(cssFile), path);
+          let rel = relative(realPath(dirname2(cssFile)), realPath(path));
           if (rel === ".." || rel.startsWith(".." + sep) || isAbsolute(rel)) {
             return void 0;
           }
@@ -5862,6 +5832,7 @@ var require_list = __commonJS({
         return list3.split(string, spaces);
       },
       split(string, separators, last) {
+        if (typeof string !== "string") return [];
         let array = [];
         let current = "";
         let split = false;
@@ -5869,7 +5840,18 @@ var require_list = __commonJS({
         let inQuote = false;
         let prevQuote = "";
         let escape2 = false;
-        for (let letter of string) {
+        let inComment = false;
+        for (let i = 0; i < string.length; i++) {
+          let letter = string[i];
+          if (inComment) {
+            current += letter;
+            if (letter === "*" && string[i + 1] === "/") {
+              current += "/";
+              i += 1;
+              inComment = false;
+            }
+            continue;
+          }
           if (escape2) {
             escape2 = false;
           } else if (letter === "\\") {
@@ -5881,6 +5863,11 @@ var require_list = __commonJS({
           } else if (letter === '"' || letter === "'") {
             inQuote = true;
             prevQuote = letter;
+          } else if (letter === "/" && string[i + 1] === "*") {
+            current += "/*";
+            i += 1;
+            inComment = true;
+            continue;
           } else if (letter === "(") {
             func += 1;
           } else if (letter === ")") {
@@ -5889,14 +5876,16 @@ var require_list = __commonJS({
             if (separators.includes(letter)) split = true;
           }
           if (split) {
-            if (current !== "") array.push(current.trim());
+            let value2 = current.trim();
+            if (last || value2 !== "") array.push(value2);
             current = "";
             split = false;
           } else {
             current += letter;
           }
         }
-        if (last || current !== "") array.push(current.trim());
+        let value = current.trim();
+        if (last || value !== "") array.push(value);
         return array;
       }
     };
@@ -6092,15 +6081,20 @@ var require_map_generator = __commonJS({
             }
           }
         } else if (this.css) {
+          let annotation = "/*# sourceMappingURL=";
+          let css = "";
+          let cursor = 0;
           let startIndex;
-          while ((startIndex = this.css.lastIndexOf("/*#")) !== -1) {
-            let endIndex = this.css.indexOf("*/", startIndex + 3);
+          while ((startIndex = this.css.indexOf(annotation, cursor)) !== -1) {
+            let endIndex = this.css.indexOf("*/", startIndex + annotation.length);
             if (endIndex === -1) break;
-            while (startIndex > 0 && this.css[startIndex - 1] === "\n") {
+            while (startIndex > cursor && this.css[startIndex - 1] === "\n") {
               startIndex--;
             }
-            this.css = this.css.slice(0, startIndex) + this.css.slice(endIndex + 2);
+            css += this.css.slice(cursor, startIndex);
+            cursor = endIndex + 2;
           }
+          if (cursor > 0) this.css = css + this.css.slice(cursor);
         }
       }
       generate() {
@@ -6881,7 +6875,7 @@ var require_parser = __commonJS({
             prev.raws.ownSemicolon = this.spaces;
             this.spaces = "";
             prev.source.end = this.getPosition(token[2]);
-            prev.source.end.offset += prev.raws.ownSemicolon.length;
+            prev.source.end.offset++;
           }
         }
       }
@@ -6997,6 +6991,7 @@ var require_parser = __commonJS({
         let token, type;
         let length = tokens2.length;
         let value = "";
+        let last = "";
         let clean = true;
         let next, prev;
         for (let i = 0; i < length; i += 1) {
@@ -7008,16 +7003,18 @@ var require_parser = __commonJS({
             prev = tokens2[i - 1] ? tokens2[i - 1][0] : "empty";
             next = tokens2[i + 1] ? tokens2[i + 1][0] : "empty";
             if (!SAFE_COMMENT_NEIGHBOR[prev] && !SAFE_COMMENT_NEIGHBOR[next]) {
-              if (value.slice(-1) === ",") {
+              if (last === ",") {
                 clean = false;
               } else {
                 value += token[1];
+                last = token[1].slice(-1);
               }
             } else {
               clean = false;
             }
           } else {
             value += token[1];
+            last = token[1].slice(-1);
           }
         }
         if (!clean) {
@@ -7667,14 +7664,19 @@ var require_lazy_result = __commonJS({
         }
         if (visit.iterator !== 0) {
           let iterator = visit.iterator;
+          if (visit.descending) {
+            visit.descending = false;
+            node.indexes[iterator] += 1;
+          }
           let child;
           while (child = node.nodes[node.indexes[iterator]]) {
-            node.indexes[iterator] += 1;
             if (!child[isClean]) {
               child[isClean] = true;
+              visit.descending = true;
               stack.push(toStack(child));
               return;
             }
+            node.indexes[iterator] += 1;
           }
           visit.iterator = 0;
           delete node.indexes[iterator];
@@ -7704,12 +7706,16 @@ var require_lazy_result = __commonJS({
           let visitNode = visit.node;
           if (visit.iterator !== 0) {
             let iterator = visit.iterator;
+            if (visit.descending) {
+              visit.descending = false;
+              visitNode.indexes[iterator] += 1;
+            }
             let child;
             let descended = false;
             while (child = visitNode.nodes[visitNode.indexes[iterator]]) {
-              visitNode.indexes[iterator] += 1;
               if (!child[isClean]) {
                 child[isClean] = true;
+                visit.descending = true;
                 stack.push({
                   eventIndex: 0,
                   events: getEvents(child),
@@ -7719,6 +7725,7 @@ var require_lazy_result = __commonJS({
                 descended = true;
                 break;
               }
+              visitNode.indexes[iterator] += 1;
             }
             if (descended) continue;
             visit.iterator = 0;
@@ -7881,7 +7888,7 @@ var require_processor = __commonJS({
     var Root2 = require_root();
     var Processor = class {
       constructor(plugins = []) {
-        this.version = "8.5.24";
+        this.version = "8.5.31";
         this.plugins = this.normalize(plugins);
       }
       normalize(plugins) {
@@ -7965,7 +7972,7 @@ var require_postcss = __commonJS({
           console.warn(
             name + ": postcss.plugin was deprecated. Migration guide:\nhttps://evilmartians.com/chronicles/postcss-8-plugin-migration"
           );
-          if (process.env.LANG && process.env.LANG.startsWith("cn")) {
+          if (process.env.LANG && process.env.LANG.startsWith("zh")) {
             console.warn(
               name + ": \u91CC\u9762 postcss.plugin \u88AB\u5F03\u7528. \u8FC1\u79FB\u6307\u5357:\nhttps://www.w3ctech.com/topic/2226"
             );
@@ -8672,7 +8679,6 @@ var require_sanitize_html = __commonJS({
     var htmlparser = (init_dist6(), __toCommonJS(dist_exports3));
     var escapeStringRegexp = require_escape_string_regexp();
     var { isPlainObject } = require_is_plain_object();
-    var deepmerge = require_cjs();
     var parseSrcset = require_parse_srcset();
     var { parse: postcssParse } = require_postcss();
     var { naughtyHref: launderNaughtyHref } = require_launder();
@@ -8696,6 +8702,15 @@ var require_sanitize_html = __commonJS({
       "set"
     ];
     var alwaysUrlAttributes = ["href"];
+    var severities = ["debug", "info", "warn", "error"];
+    function loggerFor(options) {
+      const source = options && options.logger || console;
+      const logger = {};
+      for (const severity of severities) {
+        logger[severity] = typeof source[severity] === "function" ? (...args) => source[severity](...args) : (...args) => console[severity](...args);
+      }
+      return logger;
+    }
     function each(obj, cb) {
       if (obj) {
         Object.keys(obj).forEach(function(key) {
@@ -8706,6 +8721,21 @@ var require_sanitize_html = __commonJS({
     function has(obj, key) {
       return {}.hasOwnProperty.call(obj, key);
     }
+    function mergeClasses(specific, wildcard) {
+      if (!Array.isArray(specific) || !Array.isArray(wildcard)) {
+        return wildcard;
+      }
+      return specific.concat(wildcard);
+    }
+    function mergeStyles(specific, wildcard) {
+      const merged = /* @__PURE__ */ Object.create(null);
+      for (const rules of [specific, wildcard]) {
+        for (const prop of Object.keys(rules)) {
+          merged[prop] = has(merged, prop) ? merged[prop].concat(rules[prop]) : rules[prop];
+        }
+      }
+      return merged;
+    }
     function filter2(a, cb) {
       const n = [];
       each(a, function(v) {
@@ -8733,10 +8763,13 @@ var require_sanitize_html = __commonJS({
     }
     module2.exports = sanitizeHtml2;
     var VALID_HTML_ATTRIBUTE_NAME = /^[^\0\t\n\f\r /<=>]+$/;
-    function sanitizeHtml2(html, options, _recursing) {
+    var MAX_IFRAME_FALLBACK_DEPTH = 8;
+    function sanitizeHtml2(html, options, _fallback) {
       if (html == null) {
         return "";
       }
+      const baseDepth = _fallback && _fallback.depth || 0;
+      const iframeFallbackDepth = _fallback && _fallback.iframeFallbackDepth || 0;
       if (typeof html === "number") {
         html = html.toString();
       }
@@ -8765,19 +8798,15 @@ var require_sanitize_html = __commonJS({
       }
       options = Object.assign({}, sanitizeHtml2.defaults, options);
       options.parser = Object.assign({}, htmlParserDefaults, options.parser);
+      const logger = loggerFor(options);
       const tagAllowed = function(name) {
         return options.allowedTags === false || (options.allowedTags || []).indexOf(name) > -1;
       };
       vulnerableTags.forEach(function(tag) {
         if (tagAllowed(tag) && !options.allowVulnerableTags) {
-          console.warn(`
-
-\u26A0\uFE0F Your \`allowedTags\` option includes, \`${tag}\`, which is inherently
-vulnerable to XSS attacks. Please remove it from \`allowedTags\`.
-Or, to disable this warning, add the \`allowVulnerableTags\` option
-and ensure you are accounting for this risk.
-
-`);
+          logger.warn(
+            `Your \`allowedTags\` option includes \`${tag}\`, which is inherently vulnerable to XSS attacks. Please remove it from \`allowedTags\`, or, to disable this warning, add the \`allowVulnerableTags\` option and ensure you are accounting for this risk.`
+          );
         }
       });
       const nonTextTagsArray = options.nonTextTags || [
@@ -8857,6 +8886,8 @@ and ensure you are accounting for this risk.
       let transformMap;
       let skipText;
       let skipTextDepth;
+      let rawTextEnd;
+      let skipRawText;
       let addedText = false;
       initializeState();
       const parser = new htmlparser.Parser({
@@ -8864,9 +8895,13 @@ and ensure you are accounting for this risk.
           if (options.onOpenTag) {
             options.onOpenTag(name, attribs);
           }
+          updateRawTextRegion();
           if (options.enforceHtmlBoundary && name === "html") {
             initializeState();
           }
+          if (skipRawText) {
+            return;
+          }
           if (skipText) {
             skipTextDepth++;
             return;
@@ -8902,6 +8937,9 @@ and ensure you are accounting for this risk.
               if (nonTextTagsArray.indexOf(name) !== -1) {
                 skipText = true;
                 skipTextDepth = 1;
+                if (frame.tag.toLowerCase() === "noscript") {
+                  rawTextEnd = findRawTextEnd("noscript", parser.endIndex + 1);
+                }
               }
             }
           }
@@ -8977,6 +9015,10 @@ and ensure you are accounting for this risk.
                     return;
                   }
                 }
+                if (name === "meta" && a.toLowerCase() === "content" && isRefresh(attribs) && naughtyRefresh(value)) {
+                  delete frame.attribs[a];
+                  return;
+                }
                 if (name === "script" && a === "src") {
                   let allowed = true;
                   try {
@@ -9025,7 +9067,7 @@ and ensure you are accounting for this risk.
                   try {
                     let parsed = parseSrcset(value);
                     parsed.forEach(function(value2) {
-                      if (naughtyHref(a, value2.url)) {
+                      if (naughtyHref(name, value2.url)) {
                         value2.evil = true;
                       }
                     });
@@ -9062,7 +9104,7 @@ and ensure you are accounting for this risk.
                   if (allowedSpecificClasses && allowedWildcardClasses) {
                     value = filterClasses(
                       value,
-                      deepmerge(allowedSpecificClasses, allowedWildcardClasses),
+                      mergeClasses(allowedSpecificClasses, allowedWildcardClasses),
                       allowedClassesGlobs
                     );
                   } else {
@@ -9092,7 +9134,9 @@ and ensure you are accounting for this risk.
                       }
                     } catch (e) {
                       if (typeof window !== "undefined") {
-                        console.warn('Failed to parse "' + name + " {" + value + `}", If you're running this in a browser, we recommend to disable style parsing: options.parseStyleAttributes: false, since this only works in a node environment due to a postcss dependency, More info: https://github.com/apostrophecms/sanitize-html/issues/547`);
+                        logger.warn(
+                          `Failed to parse "${name} {${value}}". If you are running this in a browser, we recommend disabling style parsing with the parseStyleAttributes option, since it only works in a node environment due to a postcss dependency. More info: https://github.com/apostrophecms/sanitize-html/issues/547`
+                        );
                       }
                       delete frame.attribs[a];
                       return;
@@ -9133,7 +9177,8 @@ and ensure you are accounting for this risk.
           frame.openingTagLength = result.length - frame.tagPosition;
         },
         ontext: function(text) {
-          if (skipText) {
+          updateRawTextRegion();
+          if (skipText || skipRawText) {
             return;
           }
           const lastFrame = stack[stack.length - 1];
@@ -9152,6 +9197,19 @@ and ensure you are accounting for this risk.
             } else {
               result += escapeHtml2(text, false);
             }
+          } else if (
+            // htmlparser2 treats <iframe> as a raw-text element, so markup inside
+            // (including after an unclosed <iframe>) arrives as a single text node.
+            // When the iframe is discarded, re-sanitize that fallback markup as HTML
+            // instead of escaping it as plain text (issue #5550).
+            // The nested call continues from the current depth so that
+            // `nestingLimit` applies to the whole output.
+            tag === "iframe" && !tagAllowed(tag) && options.disallowedTagsMode === "discard" && iframeFallbackDepth < MAX_IFRAME_FALLBACK_DEPTH
+          ) {
+            result += sanitizeHtml2(text, options, {
+              depth,
+              iframeFallbackDepth: iframeFallbackDepth + 1
+            });
           } else if (!addedText) {
             const escaped = escapeHtml2(text, false);
             if (options.textFilter) {
@@ -9169,10 +9227,19 @@ and ensure you are accounting for this risk.
           if (options.onCloseTag) {
             options.onCloseTag(name, isImplied);
           }
-          if (skipText) {
+          updateRawTextRegion();
+          if (skipRawText) {
+            const lastFrame = stack[stack.length - 1];
+            if (!lastFrame || lastFrame.tag !== name) {
+              return;
+            }
+          } else if (skipText) {
             skipTextDepth--;
             if (!skipTextDepth) {
               skipText = false;
+              if (rawTextEnd !== null) {
+                skipRawText = true;
+              }
             } else {
               return;
             }
@@ -9250,12 +9317,26 @@ and ensure you are accounting for this risk.
       return result;
       function initializeState() {
         result = "";
-        depth = 0;
+        depth = baseDepth;
         stack = [];
         skipMap = {};
         transformMap = {};
         skipText = false;
         skipTextDepth = 0;
+        rawTextEnd = null;
+        skipRawText = false;
+      }
+      function updateRawTextRegion() {
+        if (rawTextEnd !== null && parser.startIndex >= rawTextEnd) {
+          rawTextEnd = null;
+          skipRawText = false;
+        }
+      }
+      function findRawTextEnd(tagName, from) {
+        const re = new RegExp("</" + tagName + "[\\t\\n\\f\\r />]", "ig");
+        re.lastIndex = from;
+        const match = re.exec(html);
+        return match ? match.index : Infinity;
       }
       function escapeHtml2(s, quote) {
         if (typeof s !== "string") {
@@ -9280,13 +9361,83 @@ and ensure you are accounting for this risk.
           allowProtocolRelative: options.allowProtocolRelative
         });
       }
+      function isRefresh(attribs) {
+        return Object.keys(attribs).some(function(a) {
+          return a.toLowerCase() === "http-equiv" && String(attribs[a]).trim().toLowerCase() === "refresh";
+        });
+      }
+      function naughtyRefresh(content) {
+        const input = String(content);
+        const isWhitespace2 = function(c) {
+          return c === " " || c === "	" || c === "\n" || c === "\f" || c === "\r";
+        };
+        let position = 0;
+        const skipWhitespace = function() {
+          while (position < input.length && isWhitespace2(input[position])) {
+            position++;
+          }
+        };
+        const lowerAt = function(i) {
+          return (input[i] || "").toLowerCase();
+        };
+        skipWhitespace();
+        const timeStart = position;
+        while (position < input.length && /[0-9.]/.test(input[position])) {
+          position++;
+        }
+        if (position === timeStart) {
+          return true;
+        }
+        if (position < input.length) {
+          const c = input[position];
+          if (c !== ";" && c !== "," && !isWhitespace2(c)) {
+            return true;
+          }
+          skipWhitespace();
+          if (input[position] === ";" || input[position] === ",") {
+            position++;
+          }
+          skipWhitespace();
+        }
+        if (position >= input.length) {
+          return false;
+        }
+        let url = input.slice(position);
+        let quoted = true;
+        if (lowerAt(position) === "u") {
+          quoted = false;
+          if (lowerAt(position + 1) === "r" && lowerAt(position + 2) === "l") {
+            position += 3;
+            skipWhitespace();
+            if (input[position] === "=") {
+              position++;
+              skipWhitespace();
+              quoted = true;
+            }
+          }
+        }
+        if (quoted) {
+          const quote = input[position];
+          if (quote === '"' || quote === "'") {
+            position++;
+          }
+          url = input.slice(position);
+          if (quote === '"' || quote === "'") {
+            const end = url.indexOf(quote);
+            if (end !== -1) {
+              url = url.slice(0, end);
+            }
+          }
+        }
+        return naughtyHref("meta", url);
+      }
       function animatesUrlAttribute(name, attribs) {
-        if (svgAnimationTags.indexOf(name.toLowerCase()) === -1) {
+        if (svgAnimationTags.indexOf(localPart(name)) === -1) {
           return false;
         }
         const schemeCheckedAttributes = options.allowedSchemesAppliedToAttributes || [];
         return Object.keys(attribs || {}).some(function(attributeName) {
-          if (attributeName.toLowerCase() !== "attributename") {
+          if (localPart(attributeName) !== "attributename") {
             return false;
           }
           const target = (attribs[attributeName] || "").trim().toLowerCase();
@@ -9294,6 +9445,10 @@ and ensure you are accounting for this risk.
           return alwaysUrlAttributes.indexOf(localName2) !== -1 || schemeCheckedAttributes.indexOf(target) !== -1 || schemeCheckedAttributes.indexOf(localName2) !== -1;
         });
       }
+      function localPart(name) {
+        const lower = name.toLowerCase();
+        return lower.slice(lower.lastIndexOf(":") + 1);
+      }
       function parseUrl(value) {
         value = value.replace(/^(\w+:)?\s*[\\/]\s*[\\/]/, "$1//");
         if (value.startsWith("relative:")) {
@@ -9317,7 +9472,7 @@ and ensure you are accounting for this risk.
         const astRules = abstractSyntaxTree.nodes[0];
         let selectedRule;
         if (allowedStyles[astRules.selector] && allowedStyles["*"]) {
-          selectedRule = deepmerge(
+          selectedRule = mergeStyles(
             allowedStyles[astRules.selector],
             allowedStyles["*"]
           );
@@ -58587,6 +58742,21 @@ var Publisher = class {
   // `clientOrigin` is overridden only by the agent serving a client its own
   // local actor: standalone, the published document cannot name a loopback
   // address, but a client already talking to that address can be told it.
+  // Whether follows wait for the owner, from the setting as saved now: this
+  // config is a copy taken when the agent started, and the saved one may have
+  // changed since.
+  approvesByHand() {
+    const saved = this.store?.getConfig?.() || {};
+    return followsNeedApproval({
+      ...this.config,
+      ..."autoAcceptFollows" in saved ? { autoAcceptFollows: saved.autoAcceptFollows } : {},
+      ..."approveJoins" in saved ? { approveJoins: saved.approveJoins } : {}
+    });
+  }
+  // Whether the profile last published says what the setting says.
+  profileAgrees() {
+    return this.store.read("published.json", {}).approvesByHand === this.approvesByHand();
+  }
   actorDocFor({
     priv = false,
     moderators = null,
@@ -58602,7 +58772,7 @@ var Publisher = class {
       publicKeyPem: this.publicKeyPem,
       movedTo,
       kind: this.config.kind,
-      approveJoins: followsNeedApproval(this.config),
+      approveJoins: this.approvesByHand(),
       assertionKey: this.assertionKey,
       summary: this.config.summary || null,
       icon: this.config.icon || null,
@@ -58738,12 +58908,11 @@ var Publisher = class {
     const updated = await this.announceProfileChange(actor, { force });
     await this.ensurePrivateAcls();
     const unreachable = await this.verifyPublicSurface();
-    if (!unreachable.length) {
-      this.store.write(
-        "published.json",
-        { ...this.store.read("published.json", {}), surfaceDigest: surface }
-      );
-    }
+    this.store.write("published.json", {
+      ...this.store.read("published.json", {}),
+      ...!unreachable.length ? { surfaceDigest: surface } : {},
+      approvesByHand: !!actorDoc2.manuallyApprovesFollowers
+    });
     const pubName = publicHandle(this.config);
     const pubHost = this.config.gateway?.frontActor ? new URL(this.config.gateway.frontActor).host : host;
     this.log(this.config.gateway?.frontActor || webfingerHost(urls.base) ? `profile published: @${pubName}@${pubHost} \u2192 ${urls.actor}` : `profile published \u2192 ${urls.actor} \u2014 NOT discoverable as @${pubName}@${pubHost}: this pod is suffixed, and WebFinger is only answered for a subdomained pod`);
@@ -59446,8 +59615,8 @@ async function isGone(intake, url) {
   let res;
   try {
     res = await intake.deliverer.signedFetch(url, { headers: { accept: ACCEPT_AP2 } });
-  } catch {
-    return null;
+  } catch (e) {
+    return e?.answered && (e.status === 404 || e.status === 410) ? true : null;
   }
   if (res.status === 404 || res.status === 410) return true;
   if (res.status < 400) {
@@ -65492,8 +65661,17 @@ var Intake = class {
     rec.last = String(message || "").slice(0, 200);
     all[url] = rec;
     this.store.write(ATTEMPTS_DOC, all);
+    if (rec.n === 2) this._trouble("failing", url, message);
     return rec.n;
   }
+  // Mail that could not be read, as against mail refused: a second failed try,
+  // or a piece set aside after its last. `onTrouble` tells the owner.
+  _trouble(kind, url, reason) {
+    try {
+      this.onTrouble?.({ kind, url, reason: String(reason || "").slice(0, 200), at: (/* @__PURE__ */ new Date()).toISOString() });
+    } catch {
+    }
+  }
   _clearAttempt(url) {
     const all = this.store.read(ATTEMPTS_DOC, {});
     if (!all[url]) return;
@@ -65537,12 +65715,24 @@ var Intake = class {
       this._draining = null;
       if (this._drainAgain) {
         this._drainAgain = false;
-        const t = setTimeout(() => this.drain().catch((e) => this.log(`drain: ${e.message}`)), CHAIN_GAP_MS);
-        t.unref?.();
+        this._chainTimer = setTimeout(() => {
+          this._chainTimer = null;
+          this.drain().catch((e) => this.log(`drain: ${e.message}`));
+        }, CHAIN_GAP_MS);
+        this._chainTimer.unref?.();
       }
     });
     return this._draining;
   }
+  // Resolves once no sweep is running and none is waiting to follow on, so a
+  // browser worker can stay up until the round it started is done.
+  async settled() {
+    while (this._draining || this._chainTimer) {
+      if (this._draining) await this._draining.catch(() => {
+      });
+      else await new Promise((r) => setTimeout(r, 500));
+    }
+  }
   // Discard the content waiting in the inbox from before `before`, on the
   // owner's say-so — the admin page asks, this does it. NOT a blind sweep:
   // every item is read, because the type is the only thing that decides its
@@ -65745,6 +65935,7 @@ var Intake = class {
           this.log(`inbox batch ${url} attempt ${n}/${MAX_ITEM_ATTEMPTS}: ${e.message}`);
           if (n >= MAX_ITEM_ATTEMPTS) {
             this.store.addDeadLetter({ inboxUrl: url, reason: `failed ${n}x: ${e.message}`, activity: null });
+            this._trouble("set-aside", url, e.message);
             pending.push(url);
           }
         }
@@ -65768,6 +65959,7 @@ var Intake = class {
         this.log(`inbox item ${url} attempt ${n}/${MAX_ITEM_ATTEMPTS}: ${e.message}`);
         if (n >= MAX_ITEM_ATTEMPTS) {
           this.store.addDeadLetter({ inboxUrl: url, reason: `failed ${n}x: ${e.message}`, activity: trimActivity(at.activity) });
+          this._trouble("set-aside", url, e.message);
           pending.push(url);
         }
       }
@@ -65788,6 +65980,11 @@ var Intake = class {
     const read2 = raw ? await readLenient(raw) : null;
     if (read2?.degraded) this.log(`inbox item ${url} grounded to read: ${read2.degraded}`);
     const activity = at.activity = read2?.view ?? read2?.doc ?? null;
+    const from = typeof activity?.actor === "string" ? activity.actor : activity?.actor?.id;
+    if (from && this.checkLetters?.actor && from === this.checkLetters.actor) {
+      await this.checkLetters.taken(String(activity.id || ""));
+      return;
+    }
     if (read2?.graph) {
       const failure = await checkShapes(read2.graph);
       if (failure) {
@@ -65842,6 +66039,7 @@ var Intake = class {
     const batch = await this._batchEntries(url);
     if (!batch) {
       this.store.addDeadLetter({ inboxUrl: url, reason: "unreadable batch", activity: null });
+      this._trouble("set-aside", url, "unreadable batch");
       return { entries: 1, complete: true };
     }
     let complete = true;
@@ -65861,6 +66059,7 @@ var Intake = class {
         this.log(`inbox batch entry ${key} attempt ${n}/${MAX_ITEM_ATTEMPTS}: ${err.message}`);
         if (n >= MAX_ITEM_ATTEMPTS) {
           this.store.addDeadLetter({ inboxUrl: key, reason: `failed ${n}x: ${err.message}`, activity: trimActivity(at.activity) });
+          this._trouble("set-aside", key, err.message);
         } else {
           complete = false;
         }
@@ -65899,6 +66098,7 @@ var Intake = class {
           this.log(`held delivery ${key} attempt ${n}/${MAX_ITEM_ATTEMPTS}: ${err.message}`);
           if (n >= MAX_ITEM_ATTEMPTS) {
             this.store.addDeadLetter({ inboxUrl: key, reason: `failed ${n}x: ${err.message}`, activity: trimActivity(at.activity) });
+            this._trouble("set-aside", key, err.message);
             done.push(e.name);
           }
         }
@@ -69181,9 +69381,10 @@ async function handle4(api, ctx) {
   const { req, res, pathname, url, send } = ctx;
   if (pathname === "/api/v1/timelines/home" || pathname === "/api/v1/timelines/public" || pathname === "/api/v1/trends/statuses") {
     const localOnly = pathname === "/api/v1/timelines/public" && url.searchParams.get("local") === "true";
+    const hideTags = pathname === "/api/v1/timelines/home" && api.store.getConfig?.()?.tagsInHome === false;
     const all = api.store.getStatuses();
     const muted = new Set(api.store.getMuted().actors);
-    let items = all.filter((s) => s.kind !== "remote" && s.kind !== "mention").filter((s) => !s.direct && s.visibility !== "direct").filter((s) => !muted.has(s.actor) && !muted.has(s.via)).filter((s) => !localOnly || s.kind === "post" && s.visibility !== "private").sort((a, b) => String(b.published || "").localeCompare(String(a.published || "")));
+    let items = all.filter((s) => s.kind !== "remote" && s.kind !== "mention").filter((s) => !s.direct && s.visibility !== "direct").filter((s) => !muted.has(s.actor) && !muted.has(s.via)).filter((s) => !hideTags || s.kind !== "tag" || s.sourceAccts?.length).filter((s) => !localOnly || s.kind === "post" && s.visibility !== "private").sort((a, b) => String(b.published || "").localeCompare(String(a.published || "")));
     const { items: page2, headers } = api.page(items, url);
     return send(200, page2.map((s) => api.statusOrBoost(s, { all })), headers);
   }
@@ -70193,8 +70394,9 @@ var TagFeed = class {
     if (Array.isArray(patch.tags)) clean.tags = patch.tags.map((t) => String(t).replace(/^#/, "").trim()).filter(Boolean);
     if (patch.intervalMin) clean.intervalMin = Math.max(5, Number(patch.intervalMin) || DEFAULTS2.intervalMin);
     this.store.write("tagfeed.json", { ...this.config(), ...clean });
+    const sweeping = this.stopped === false;
     this.stop();
-    this.start();
+    if (sweeping) this.start();
     return this.config();
   }
   // `lastSweptAt` and `onSwept` are for a browser worker the browser stops and
@@ -71034,6 +71236,7 @@ var RelayDeliverer = class extends Deliverer {
     if (status2 >= 400) {
       const err = new Error(`${method} ${url} \u2192 ${status2}`);
       err.status = status2;
+      err.answered = true;
       if (r0.retryAfter) {
         const secs = Number(r0.retryAfter);
         const ms = Number.isFinite(secs) ? Math.max(secs, 1) * 1e3 : Math.max(Date.parse(r0.retryAfter) - Date.now(), 1e3);
@@ -71418,7 +71621,7 @@ var ImportWorker = class {
 
 // web/app/admin-facade.mjs
 var PERMANENT_CONFIG = ["handle", "remotePod", "issuer", "root", "kind"];
-var WIRE_CONFIG = ["name", "summary", "icon", "image", "fields", "aliases"];
+var WIRE_CONFIG = ["name", "summary", "icon", "image", "fields", "aliases", "autoAcceptFollows"];
 var ADMIN_PATHS = /* @__PURE__ */ new Set([
   "/status",
   "/config",
@@ -71427,6 +71630,7 @@ var ADMIN_PATHS = /* @__PURE__ */ new Set([
   "/rotate-key",
   "/import",
   "/deadletter",
+  "/trouble",
   "/blocks",
   "/profiles",
   "/modqueue",
@@ -71528,6 +71732,7 @@ var AdminFacade = class {
             fields: cfg.fields || [],
             aliases: cfg.aliases || [],
             autoAcceptFollows: cfg.autoAcceptFollows !== false,
+            tagsInHome: cfg.tagsInHome !== false,
             quiescedAt: cfg.quiescedAt || null,
             movedTo: cfg.movedTo || null,
             mode: a.status().mode,
@@ -71586,8 +71791,7 @@ var AdminFacade = class {
           return json2(200, []);
         // person: no moderation queue
         case "/log":
-          return json2(200, { lines: [] });
-        // no local log file in the browser
+          return json2(200, { lines: await a.recentLog?.() || [] });
         case "/fediacct":
           return json2(200, { accounts: a.fediaccts?.status() || [] });
         case "/import":
@@ -71624,6 +71828,13 @@ var AdminFacade = class {
       return json2(400, { error: "expected JSON body" });
     }
     switch (p) {
+      // The owner has opened the dead letters: the bar stops saying so.
+      case "/trouble": {
+        if (body.seen !== true) return json2(400, { error: "seen: true is the only thing to say here" });
+        a.troubleSeen?.();
+        await a.store.flush();
+        return json2(200, { ok: true, trouble: a.status().trouble });
+      }
       case "/config": {
         const fixed = PERMANENT_CONFIG.filter((k) => k in body);
         if (fixed.length) return json2(400, { error: `${fixed.join(", ")} cannot be changed \u2014 that is the identity itself` });
@@ -71643,6 +71854,7 @@ var AdminFacade = class {
           cfg.fields = (Array.isArray(body.fields) ? body.fields : []).filter((f) => f?.name?.trim()).map((f) => ({ name: String(f.name).trim(), value: String(f.value ?? "").trim() }));
         }
         if ("autoAcceptFollows" in body) cfg.autoAcceptFollows = !!body.autoAcceptFollows;
+        if ("tagsInHome" in body) cfg.tagsInHome = !!body.tagsInHome;
         const republish = WIRE_CONFIG.some((k) => k in body);
         a.store.setConfig(cfg);
         if ("autoAcceptFollows" in body && a.publisher) a.publisher.config.autoAcceptFollows = cfg.autoAcceptFollows;
@@ -71952,23 +72164,20 @@ var AdminFacade = class {
         await a.store.flush();
         return json2(200, { ok: true });
       }
-      // Bluesky settings: pause/resume the mirror, and move the credential
-      // between this browser and the pod. Cross-post is default-on, not toggled.
+      // Bluesky settings: pause/resume the mirror. Cross-post is default-on, not
+      // toggled. The credential is kept on the pod, with nowhere else to move.
       case "/atproto": {
         if (!a.atproto?.connected()) return json2(400, { error: "no bluesky account connected" });
+        if ("storage" in body) return json2(400, { error: "a connected account is kept on your pod" });
         if ("feedPaused" in body) {
           a.atproto.setFeedPaused(!!body.feedPaused);
           a.restartBsky?.();
         }
-        if ("storage" in body) {
-          if (!["pod", "browser"].includes(body.storage)) return json2(400, { error: "storage must be pod or browser" });
-          a.atproto.setStorage(body.storage);
-        }
         return json2(200, { ok: true, ...a.atproto.status() });
       }
       // Connect a fediverse account on another server: start its OAuth at that
       // server. The browser is then sent to `authorize`; the code comes back to
-      // GET /fediacct/callback (above). The token never touches the pod.
+      // GET /fediacct/callback (above). The token is kept on the pod.
       case "/fediacct/connect": {
         if (!body.host) return json2(400, { error: "the address of the server is required" });
         try {
@@ -71985,14 +72194,11 @@ var AdminFacade = class {
         a.restartAccts?.();
         return json2(200, { ok: true });
       }
-      // Pause/resume the mirror, or move the credential between browser and pod.
+      // Pause/resume the mirror. The credential is kept on the pod.
       case "/fediacct": {
         if (!body.id) return json2(400, { error: "id required" });
-        let row;
-        if ("storage" in body) {
-          if (!["pod", "browser"].includes(body.storage)) return json2(400, { error: "storage must be pod or browser" });
-          row = a.fediaccts.setStorage(body.id, body.storage);
-        } else row = a.fediaccts.setEnabled(body.id, !!body.enabled);
+        if ("storage" in body) return json2(400, { error: "a connected account is kept on your pod" });
+        const row = a.fediaccts.setEnabled(body.id, !!body.enabled);
         if (!row) return json2(404, { error: "no such account" });
         a.restartAccts?.();
         return json2(200, { ok: true, account: row });
@@ -72458,8 +72664,10 @@ var BrowserAtproto = class extends Atproto {
   }
   // The IndexedDB copy into memory, so read() stays synchronous as the base
   // class expects. The pod copy is already in the loaded store.
-  async load() {
+  // `fromPod`: the pod's record read as well (agent.mjs says when).
+  async load({ fromPod = false } = {}) {
     this._idbRec = await kvGet(IDB_KEY).catch(() => null);
+    if (fromPod) await this.store.refresh?.([POD_DOC], { ifChanged: true }).catch((e) => this.log(`Bluesky account: ${e.message}`));
     return this;
   }
   // Whichever backend holds it, tagged with where it lives. The stamped-record
@@ -72467,15 +72675,13 @@ var BrowserAtproto = class extends Atproto {
   read() {
     let rec = null;
     let where = null;
-    if (this._idbRec) {
+    const p = this.store.read(POD_DOC, null);
+    if (p) {
+      rec = p;
+      where = "pod";
+    } else if (this._idbRec) {
       rec = this._idbRec;
       where = "browser";
-    } else {
-      const p = this.store.read(POD_DOC, null);
-      if (p) {
-        rec = p;
-        where = "pod";
-      }
     }
     if (!rec) return null;
     if (rec.mintedFor && this.actorId && rec.mintedFor !== this.actorId) {
@@ -72484,25 +72690,25 @@ var BrowserAtproto = class extends Atproto {
     }
     return { ...rec, storage: where };
   }
-  // Write to the record's chosen backend (default browser), and clear the other
-  // so a moved credential leaves no copy behind.
   write(rec) {
-    const where = rec.storage || "browser";
-    const clean = { ...rec, storage: where };
-    if (where === "pod") {
-      this.store.write(POD_DOC, clean);
-      this.store.flush?.().catch(() => {
-      });
-      this._idbRec = null;
-      kvDel(IDB_KEY).catch(() => {
-      });
-    } else {
-      this._idbRec = clean;
-      kvPut(IDB_KEY, clean).catch((e) => this.log(`atproto persist: ${e.message}`));
-      this.store.write(POD_DOC, null);
-      this.store.flush?.().catch(() => {
-      });
+    this.store.write(POD_DOC, { ...rec, storage: "pod" });
+    this.store.flush?.().catch(() => {
+    });
+  }
+  // A record still in this browser, onto the pod, and out of the browser once
+  // the pod has it. One the pod already holds is newer there.
+  async moveToPod() {
+    const rec = this._idbRec;
+    if (!rec || rec.mintedFor && this.actorId && rec.mintedFor !== this.actorId) return false;
+    if (!this.store.read(POD_DOC, null)) {
+      this.store.write(POD_DOC, { ...rec, storage: "pod" });
+      if (!await this.store.commit()) return false;
     }
+    this._idbRec = null;
+    await kvDel(IDB_KEY).catch(() => {
+    });
+    this.log("the Bluesky account moved from this browser to the pod");
+    return true;
   }
   status() {
     const rec = this.read();
@@ -72525,11 +72731,6 @@ var BrowserAtproto = class extends Atproto {
     const rec = this.read();
     if (rec) this.write({ ...rec, feedPaused: !!on });
   }
-  // Move the credential between backends (the Options menu's Storage control).
-  setStorage(where) {
-    const rec = this.read();
-    if (rec && (where === "pod" || where === "browser")) this.write({ ...rec, storage: where });
-  }
   async disconnect() {
     const rec = this.read();
     if (rec?.refreshJwt) {
@@ -72788,7 +72989,9 @@ var BrowserFediAccounts = class extends FediAccounts {
     this._recs = /* @__PURE__ */ new Map();
     this._apps = /* @__PURE__ */ new Map();
   }
-  async load() {
+  // `fromPod`: the pod's records read as well (agent.mjs says when).
+  async load({ fromPod = false } = {}) {
+    if (fromPod) await this.store.refresh?.([POD_DOC2], { ifChanged: true }).catch((e) => this.log(`connected accounts: ${e.message}`));
     const all = await kvAll().catch(() => ({}));
     for (const [k, v] of Object.entries(all)) {
       if (k.startsWith("rec:")) this._recs.set(k.slice(4), v);
@@ -72813,15 +73016,13 @@ var BrowserFediAccounts = class extends FediAccounts {
   read(id) {
     let rec = null;
     let where = null;
-    if (this._recs.has(id)) {
+    const p = this._podMap()[id];
+    if (p) {
+      rec = p;
+      where = "pod";
+    } else if (this._recs.has(id)) {
       rec = this._recs.get(id);
       where = "browser";
-    } else {
-      const p = this._podMap()[id];
-      if (p) {
-        rec = p;
-        where = "pod";
-      }
     }
     if (!rec) return null;
     if (rec.mintedFor && this.actorId && rec.mintedFor !== this.actorId) {
@@ -72831,27 +73032,28 @@ var BrowserFediAccounts = class extends FediAccounts {
     return { ...rec, storage: where };
   }
   write(rec) {
-    const where = rec.storage || "browser";
-    const clean = { ...rec, storage: where };
-    if (where === "pod") {
-      const map = { ...this._podMap(), [clean.id]: clean };
-      this.store.write(POD_DOC2, map);
-      this.store.flush?.().catch(() => {
-      });
-      this._recs.delete(clean.id);
-      kvDel("rec:" + clean.id).catch(() => {
+    const clean = { ...rec, storage: "pod" };
+    const map = { ...this._podMap(), [clean.id]: clean };
+    this.store.write(POD_DOC2, map);
+    this.store.flush?.().catch(() => {
+    });
+  }
+  // The records still in this browser, onto the pod, and out of the browser
+  // once the pod has them. One the pod already holds is newer there.
+  async moveToPod() {
+    const moving = [...this._recs.values()].filter((r) => !r.mintedFor || !this.actorId || r.mintedFor === this.actorId);
+    if (!moving.length) return 0;
+    const map = { ...this._podMap() };
+    for (const r of moving) if (!(r.id in map)) map[r.id] = { ...r, storage: "pod" };
+    this.store.write(POD_DOC2, map);
+    if (!await this.store.commit()) return 0;
+    for (const r of moving) {
+      this._recs.delete(r.id);
+      await kvDel("rec:" + r.id).catch(() => {
       });
-    } else {
-      this._recs.set(clean.id, clean);
-      kvPut("rec:" + clean.id, clean).catch((e) => this.log(`fediacct persist: ${e.message}`));
-      const map = this._podMap();
-      if (clean.id in map) {
-        delete map[clean.id];
-        this.store.write(POD_DOC2, map);
-        this.store.flush?.().catch(() => {
-        });
-      }
     }
+    this.log(`${moving.length} connected account(s) moved from this browser to the pod`);
+    return moving.length;
   }
   // Best-effort: tell the server to revoke our token (RFC 7009), so a
   // disconnect actually invalidates it there — not just locally. Mirrors
@@ -72904,15 +73106,6 @@ var BrowserFediAccounts = class extends FediAccounts {
       cooldownFor: Math.max(0, Math.round(((this.pausedUntil.get(r.host) || 0) - Date.now()) / 1e3))
     }));
   }
-  // Move a connection between backends (the Options menu's Storage control).
-  setStorage(id, where) {
-    const rec = this.read(id);
-    if (rec && (where === "pod" || where === "browser")) {
-      this.write({ ...rec, storage: where });
-      return this.roster().find((r) => r.id === id) || null;
-    }
-    return null;
-  }
   // One app registration per host, remembered — over IndexedDB.
   async appFor(host, redirectUri) {
     const cached = this._apps.get(host);
@@ -73088,8 +73281,11 @@ var AcctFeed = class {
     }
     return map;
   }
+  // A server that does not say what is left (not every Mastodon-API server
+  // does) is not taken to have nothing left.
   _rateGuard(id, handle7, res) {
-    const left = Number(res.headers.get("x-ratelimit-remaining"));
+    const said = res.headers.get("x-ratelimit-remaining");
+    const left = said == null || said.trim() === "" ? NaN : Number(said);
     if (!Number.isFinite(left) || left > RATE_FLOOR) return false;
     const reset = Date.parse(res.headers.get("x-ratelimit-reset") || "");
     const wait = Number.isFinite(reset) ? Math.max(0, reset - Date.now()) : BACKOFF_MIN_MS3;
@@ -73199,7 +73395,8 @@ var fail2 = () => {
 var promises_default = new Proxy({}, { get: () => fail2 });
 
 // lib/core/pod-only.mjs
-var podOnly = (name) => name === "keys.json" || name === "lease.json" || name.startsWith("conn-");
+var CONNECTED = /* @__PURE__ */ new Set(["fediaccts.json", "atproto.json"]);
+var podOnly = (name) => name === "keys.json" || name === "lease.json" || name.startsWith("conn-") || CONNECTED.has(name);
 
 // lib/core/storage.mjs
 var LDP2 = Namespace("http://www.w3.org/ns/ldp#");
@@ -73761,6 +73958,41 @@ var BrowserAgent = class _BrowserAgent {
   // (lib/gateway/held-mail.mjs: /api/push). Named a moment later, once written,
   // so a burst is one call. One from another network is not pushed.
   static PUSH_AFTER_MS = 2e3;
+  // Mail FediPod could not read: counted until its owner opens the dead
+  // letters, shown in the bar meanwhile, and told to their phones at most
+  // once an hour (lib/gateway/held-mail.mjs: /api/alert).
+  static TROUBLE_ALERT_MS = 60 * 6e4;
+  noteTrouble(t, { tell = true } = {}) {
+    const had = this.store.read("trouble.json", null) || { count: 0 };
+    const now = Date.now();
+    const due = tell && now - (had.alertedAt ? Date.parse(had.alertedAt) : 0) >= _BrowserAgent.TROUBLE_ALERT_MS;
+    const next = {
+      ...had,
+      count: (had.count || 0) + 1,
+      firstAt: had.firstAt || t.at,
+      lastAt: t.at,
+      last: { kind: t.kind, reason: t.reason },
+      ...due ? { alertedAt: new Date(now).toISOString() } : {}
+    };
+    this.store.write("trouble.json", next);
+    this.log(`could not read mail (${t.kind}): ${t.reason}`);
+    if (due) {
+      const many = next.count === 1 ? "a piece of your mail" : `${next.count} pieces of your mail`;
+      this.tellGateway("alert", { handle: this.doorKey, text: `Could not read ${many}. Show dead letters on your manage page lists what it gave up on.` }, { standing: false }).catch(() => {
+      });
+    }
+  }
+  // The owner has looked: the count starts again, and the hourly limit stands.
+  troubleSeen() {
+    const had = this.store.read("trouble.json", null);
+    if (had?.count) {
+      this.store.write("trouble.json", {
+        count: 0,
+        ...had.alertedAt ? { alertedAt: had.alertedAt } : {},
+        ...had.letterMissing ? { letterMissing: had.letterMissing } : {}
+      });
+    }
+  }
   notePush(n) {
     if (!this.gatewayApi || n?.bsky || n?.via) return;
     if (!Object.keys(this.store.read("webpush.json", { subs: {} }).subs || {}).length) return;
@@ -73821,6 +74053,10 @@ var BrowserAgent = class _BrowserAgent {
     const said = await this.tellGateway("here", { handle: this.doorKey, nextAt: this.store ? nextDue(this.store) : null });
     if (said?.status === 200) saveMeta(this.webId, { hereAt: Date.now() }).catch(() => {
     });
+    if (said?.status === 200 && said.missingLetter && this.store?.read("trouble.json", null)?.letterMissing !== said.missingLetter) {
+      this.noteTrouble({ kind: "test-letter", reason: "the gateway's test letter has not arrived", at: (/* @__PURE__ */ new Date()).toISOString() }, { tell: false });
+      this.store.write("trouble.json", { ...this.store.read("trouble.json", {}), letterMissing: said.missingLetter });
+    }
     if (said?.status === 200 && typeof said.hold === "boolean") {
       await followHold(this, this.frontOrigin, said.hold).catch((e) => this.log(`the gateway's hold: ${e.message}`));
     }
@@ -73892,6 +74128,11 @@ var BrowserAgent = class _BrowserAgent {
       this.store.onEvent = (type, n) => {
         if (type === "notification") this.notePush(n);
       };
+      const tried = this.store.read("published.json", {}).healTriedAt;
+      if (!this.publisher.profileAgrees() && !(tried && Date.now() - Date.parse(tried) < 60 * 6e4)) {
+        this.store.write("published.json", { ...this.store.read("published.json", {}), healTriedAt: (/* @__PURE__ */ new Date()).toISOString() });
+        await this.publisher.publishProfile({ force: true }).catch((e) => this.log(`profile: ${e.message}`));
+      }
       const now = Date.now();
       const hereDue = !warm || now - (warm.hereAt || 0) >= _BrowserAgent.HERE_EVERY_MS;
       const here = hereDue ? await this.hereAtGateway() : null;
@@ -73910,6 +74151,8 @@ var BrowserAgent = class _BrowserAgent {
       }, 3e4);
       const drainNow = !warm || now - (warm.drainedAt || 0) >= DRAIN_EVERY_MS || here?.flushed > 0;
       await this.intake.start({ drainNow, subscribe: !warm || !!warm.resubscribe });
+      await this.atproto.moveToPod?.().catch((e) => this.log(`Bluesky account to the pod: ${e.message}`));
+      await this.fediaccts.moveToPod?.().catch((e) => this.log(`connected accounts to the pod: ${e.message}`));
       this.startBsky();
       this.startAccts();
       this.tagfeed?.start(this.mirrorStart("tags"));
@@ -74123,6 +74366,16 @@ var BrowserAgent = class _BrowserAgent {
       lease: this.lease,
       ownerPost: (a, o) => this.c2s.dispatch(a, o)
     });
+    this.intake.onTrouble = (t) => this.noteTrouble(t);
+    if (this.gatewayApi) {
+      this.intake.checkLetters = {
+        actor: `${this.frontOrigin.replace(/\/$/u, "")}/check/actor`,
+        taken: async (letter) => {
+          const said = await this.tellGateway("check", { handle: this.doorKey, letter }, { standing: false });
+          if (said?.status !== 200) throw new Error(`the gateway did not take the answer to its test letter (${said?.status || "no answer"})`);
+        }
+      };
+    }
     this.masto = new MastoApi({
       agent: this,
       log: this.log,
@@ -74138,8 +74391,11 @@ var BrowserAgent = class _BrowserAgent {
     this.tagfeed = new TagFeed({ store: this.store, intake: this.intake, log: this.log, fetcher: relayGet });
     this.provisioning = (async () => {
       if (!this._warm) await provisionPrivate(this.remote, this.urls);
-      await this.atproto.load();
-      await this.fediaccts.load();
+      const readConn = !this._warm || !this._warm.connRead;
+      await this.atproto.load({ fromPod: readConn });
+      await this.fediaccts.load({ fromPod: readConn });
+      if (readConn) saveMeta(this.webId, { connRead: true }).catch(() => {
+      });
       this.viewer = !(this._warm && !this._warm.renewDue ? true : await this.lease.acquire());
       if (this.viewer) {
         this._watched = true;
@@ -74183,7 +74439,8 @@ var BrowserAgent = class _BrowserAgent {
       podRequests: this.remote?.stats?.() || null,
       update: null,
       inboxCooldownFor: 0,
-      stateSkipped: this.store?.lastSkipped || []
+      stateSkipped: this.store?.lastSkipped || [],
+      trouble: this.store?.read("trouble.json", null) || null
     };
   }
   // Rotate the signing key (POST /rotate-key). Mint a fresh keypair, replace the
@@ -74645,6 +74902,28 @@ async function bridge(request, url, { sameOrigin: sameOrigin2 = false } = {}) {
 // web/app/sw-src.mjs
 var agent = null;
 var booting = null;
+var LOG_KEEP = 300;
+var logLines = [];
+var logTimer = null;
+var logRead = kvGet("log").then((kept) => {
+  logLines = [...Array.isArray(kept) ? kept : [], ...logLines].slice(-LOG_KEEP);
+}).catch(() => {
+});
+function agentLog(m) {
+  console.log("[sw-agent]", m);
+  const at = (/* @__PURE__ */ new Date()).toLocaleString(void 0, { month: "2-digit", day: "2-digit", hour: "numeric", minute: "2-digit", second: "2-digit" });
+  logLines.push(`${at}  ${m}`);
+  if (logLines.length > LOG_KEEP) logLines.splice(0, logLines.length - LOG_KEEP);
+  clearTimeout(logTimer);
+  logTimer = setTimeout(() => {
+    logRead.then(() => kvPut("log", logLines)).catch(() => {
+    });
+  }, 1500);
+}
+var recentLog = async () => {
+  await logRead;
+  return logLines;
+};
 var FACADE = /^\/(api\/v[12]\/|oauth\/|nodeinfo\/)/;
 var FACADE_EXACT = /* @__PURE__ */ new Set(["/.well-known/nodeinfo", "/.well-known/oauth-authorization-server", "/nodeinfo/2.0"]);
 var isFacade = (p) => FACADE.test(p) || FACADE_EXACT.has(p);
@@ -74683,7 +74962,8 @@ self.addEventListener("activate", (e) => e.waitUntil(self.clients.claim()));
 async function bootFromSession(frontOrigin, restart) {
   const oidc = await getSession();
   if (!oidc) throw new Error("no session \u2014 sign in first");
-  const a = new BrowserAgent({ log: (m) => console.log("[sw-agent]", m) });
+  const a = new BrowserAgent({ log: agentLog });
+  a.recentLog = recentLog;
   await a.boot({ oidc, frontOrigin: frontOrigin || self.location.origin, restart });
   agent = a;
   return a;
@@ -74705,7 +74985,9 @@ self.addEventListener("message", (e) => {
     return;
   }
   if (e.data?.type !== "boot") return;
-  ensureBooting(e.data.frontOrigin).then(() => e.source?.postMessage({ type: "booted" })).catch((err) => e.source?.postMessage({
+  const booted = ensureBooting(e.data.frontOrigin);
+  e.waitUntil(stillWorking(booted));
+  booted.then(() => e.source?.postMessage({ type: "booted" })).catch((err) => e.source?.postMessage({
     type: "boot-error",
     error: err.message,
     code: err.code || null,
@@ -74716,8 +74998,28 @@ self.addEventListener("fetch", (e) => {
   const url = new URL(e.request.url);
   if (url.origin !== self.location.origin || !(isFacade(url.pathname) || isAdmin(url.pathname))) return;
   if (url.pathname.startsWith("/oauth/") && !sameOriginReferrer(e.request)) return;
-  e.respondWith(serve(e.request, url));
+  const served = serve(e.request, url);
+  e.respondWith(served);
+  e.waitUntil(stillWorking(served));
 });
+var STILL_WORKING_MS = 4 * 6e4;
+function stillWorking(first) {
+  const work = (async () => {
+    await Promise.resolve(first).catch(() => {
+    });
+    const a = agent;
+    if (!a) return;
+    await a.provisioning?.catch(() => {
+    });
+    await a.intake?.settled?.();
+  })().catch(() => {
+  });
+  let timer;
+  const cap = new Promise((r) => {
+    timer = setTimeout(r, STILL_WORKING_MS);
+  });
+  return Promise.race([work, cap]).finally(() => clearTimeout(timer));
+}
 async function serve(request, url) {
   const refuse = notAllowed(request, url);
   if (refuse) {