fedipod 1.55.2 → 1.57.0

package/README.md

@@ -31,7 +31,7 @@ This README is about the `FediPod` as used with a Gateway. There are also a numb
 You can access your account by pointing any Mastodon API or C2S client at fedipod.net and signing in.  There are also two built-inclients, both served by fedipod.net: [Sengi](https://github.com/NicolasConstant/sengi) (MIT, by Nicolas Constant), which you get by default, and [Phanpy](https://github.com/cheeaun/phanpy)(MIT, by Chee Aun). The links at the top right of every page switch between
 them, at any time; whichever you opened last is the one that opens next time.
 
-You can follow and unfollow, post, reply, favourite, boost, attach media, edit and delete. Content warnings, polls with up to four options and one or several answers, all four visibility levels, a conversations view for direct messages, bookmarks, lists, keyword filters, pinned posts that other servers can see, blocking and muting, and the custom emojis other servers send.
+You can follow and unfollow, post, reply, favourite, boost, attach media, edit and delete. Content warnings, polls with up to four options and one or several answers, all four visibility levels, a conversations view for direct messages, bookmarks, lists (a list can keep its people out of your home timeline), keyword filters, pinned posts that other servers can see, blocking and muting, and the custom emojis other servers send.
 
 A post can quote another post. Quote is offered on posts whose author allows
 it; the quoted author's server is asked, and the quote shows as pending until

package/gui.md

@@ -104,6 +104,16 @@ that one of your connected accounts also brought in is from someone you follow
 there, and stays. An app already showing them keeps them on screen until it
 reloads.
 
+## Lists in your home timeline
+
+The **lists** row counts your lists, and under it each list has a switch:
+*shown in home* or *hidden from home*. Hidden, the posts and boosts of the
+people on that list leave your home timeline and show on the list's own
+timeline and on the public timeline. Lists are made and filled in the app;
+an app can set the same switch (in Phanpy, **Hide posts on this list from
+Home/Following**). An app already showing the posts keeps them on screen
+until it reloads.
+
 ## Handling follow requests
 
 New followers are accepted automatically. Set **new followers** to *wait for

package/lib/client/masto/accounts.mjs

@@ -250,7 +250,7 @@ export async function handle(api, ctx) {
     const actorUrl = api.store.urlFor(mAccLists[1]);
     if (!actorUrl) return send(404, { error: 'Record not found' });
     return send(200, api.store.getLists().filter(l => (l.members || []).includes(actorUrl))
-      .map(l => ({ id: l.id, title: l.title, replies_policy: l.repliesPolicy || 'list', exclusive: false })));
+      .map(l => ({ id: l.id, title: l.title, replies_policy: l.repliesPolicy || 'list', exclusive: !!l.exclusive })));
   }
 
   // The people muted and blocked, as accounts; the domains blocked, as names.

package/lib/client/masto/timelines.mjs

@@ -22,6 +22,10 @@ export async function handle(api, ctx) {
     // stay on the public timeline, their hashtags' pages and trends. One a
     // connected account also brought in is from someone followed there.
     const hideTags = pathname === '/api/v1/timelines/home' && api.store.getConfig?.()?.tagsInHome === false;
+    // A list set to hide its people from Home (`exclusive`): their posts and
+    // boosts show on the list and on the public timeline only.
+    const hiddenBy = new Set(pathname === '/api/v1/timelines/home'
+      ? (api.store.getLists?.() || []).filter(l => l.exclusive).flatMap(l => l.members || []) : []);
     // The UNFILTERED list, both as the source and as the reply-count corpus:
     // a reply can be a mention, and mentions are filtered out of timelines
     // below — counting against the filtered set would undercount them.
@@ -36,6 +40,7 @@ export async function handle(api, ctx) {
       .filter(s => !s.direct && s.visibility !== 'direct')
       .filter(s => !muted.has(s.actor) && !muted.has(s.via))
       .filter(s => !hideTags || s.kind !== 'tag' || s.sourceAccts?.length)
+      .filter(s => !hiddenBy.size || !(hiddenBy.has(s.actor) || hiddenBy.has(s.via)))
       .filter(s => !localOnly || (s.kind === 'post' && s.visibility !== 'private'))
       .sort((a, b) => String(b.published || '').localeCompare(String(a.published || '')));
     const { items: page, headers } = api.page(items, url);
@@ -122,7 +127,9 @@ export async function handle(api, ctx) {
 
   // Lists, filters and scheduled posts are the client's own arrangements —
   // kept in local state, nothing federates.
-  const listJson = (l) => ({ id: l.id, title: l.title, replies_policy: l.repliesPolicy || 'list', exclusive: false });
+  // `exclusive`: the list hides its people from Home. A form sends it as a word.
+  const flag = (v) => v === true || v === 'true' || v === 'on' || v === '1';
+  const listJson = (l) => ({ id: l.id, title: l.title, replies_policy: l.repliesPolicy || 'list', exclusive: !!l.exclusive });
   if (pathname === '/api/v1/lists' && req.method === 'GET') {
     return send(200, api.store.getLists().map(listJson));
   }
@@ -131,7 +138,8 @@ export async function handle(api, ctx) {
     const title = String(body.title || '').trim();
     if (!title) return send(422, { error: 'a title is required' });
     const lists = api.store.getLists();
-    const l = { id: crypto.randomBytes(8).toString('hex'), title, repliesPolicy: body.replies_policy || 'list', members: [] };
+    const l = { id: crypto.randomBytes(8).toString('hex'), title, repliesPolicy: body.replies_policy || 'list',
+      exclusive: flag(body.exclusive), members: [] };
     lists.push(l);
     api.store.setLists(lists);
     return send(200, listJson(l));
@@ -149,6 +157,7 @@ export async function handle(api, ctx) {
       const body = await readBody(req);
       if (body.title) l.title = String(body.title);
       if (body.replies_policy) l.repliesPolicy = body.replies_policy;
+      if ('exclusive' in body) l.exclusive = flag(body.exclusive);
       api.store.setLists(lists);
     }
     return send(200, listJson(l));

package/lib/gateway/forum-pages.mjs

@@ -0,0 +1,59 @@
+// forum-pages.mjs — a forum's page at its own host (bb.<gateway>/<forum>/…).
+// Every address under a forum is handed to the forum's own code
+// (ctx.forum.renderPage, netlify/forum-support.mjs), which draws the ones it
+// draws; for the rest, or when drawing fails, the page as the site serves it,
+// which the reader's browser builds. Which addresses are drawn is the forum's
+// business, not this file's.
+
+// A forum's path, and anything under it.
+const VIEW = /^\/([^/]+)\//u;
+// First path segments the bb host gives to something other than a forum.
+const NOT_FORUMS = new Set(['api', 'bb', 'icons', 'u', '.well-known']);
+// How long the edge keeps a drawn page. The forum's documents are dropped
+// from the edge when a post lands and when the forum runs, under the labels
+// the page carries too, so an hour only bounds a change nothing announced.
+// Kept per region, not durably: a page names the scripts of the deploy that
+// drew it.
+const PAGE_EDGE_SECONDS = 3600;
+const MISSING_EDGE_SECONDS = 120;
+
+// The page as the site serves it, read once per running instance: it changes
+// only with a deploy, which starts new ones.
+const shells = new Map();
+async function shellOf(origin, f) {
+  if (shells.has(origin)) return shells.get(origin);
+  const r = await f(`${origin}/bb/index.html`).catch(() => null);
+  const text = r?.ok ? await r.text().catch(() => null) : null;
+  if (text) shells.set(origin, text);
+  return text;
+}
+
+/** The answer for a forum's page at its own host, or null for any other request. */
+export async function routeForumPage(request, ctx) {
+  const url = new URL(request.url);
+  if (!/^bb\./u.test(url.hostname)) return null;
+  const m = VIEW.exec(url.pathname);
+  if (!m || NOT_FORUMS.has(m[1])) return null;
+  if (request.method !== 'GET' && request.method !== 'HEAD') return { status: 405, headers: { allow: 'GET, HEAD' }, body: '' };
+  const shell = await shellOf(url.origin, ctx.siteFetch || globalThis.fetch.bind(globalThis));
+  if (!shell) return { status: 503, headers: { 'content-type': 'text/plain', 'cache-control': 'no-store', 'retry-after': '30' }, body: 'the forum\'s page is not available right now\n' };
+  const page = (status, body, headers) => ({ status, headers: { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-cache', ...headers }, body });
+  // An address with a query is a sign-in coming back, or nothing a reader
+  // follows: the page builds it.
+  const draws = !!ctx.forum?.renderPage && !url.search;
+  // A drawing not done in time goes on after the page has gone, where the
+  // host lets work outlive its answer (ctx.waitUntil): the next reader's
+  // drawing then finds the forum's documents at hand.
+  const drawn = draws ? await ctx.forum.renderPage({ url: url.href, shell, keepGoing: ctx.waitUntil || null }).catch(() => null) : null;
+  if (drawn) {
+    const hold = drawn.status === 404 ? MISSING_EDGE_SECONDS : PAGE_EDGE_SECONDS;
+    return page(drawn.status, drawn.html, {
+      'netlify-cdn-cache-control': `public, s-maxage=${hold}, stale-while-revalidate=${hold * 4}`,
+      'netlify-cache-tag': drawn.tags.join(','),
+    });
+  }
+  // Not drawn. Where drawing was tried, this answer is not kept, so the next
+  // reader gets a drawn page; where nothing here draws, it is the same page
+  // for everyone and is kept like one.
+  return page(200, shell, draws || url.search ? {} : { 'netlify-cdn-cache-control': `public, s-maxage=${PAGE_EDGE_SECONDS}` });
+}

package/lib/gateway/front-core.mjs

@@ -26,6 +26,7 @@ import { routeQuietApi, noteOpened, noteReceived, closedState, accountState, clo
 import { holdsMail, mayBeAway, isPresent, holdingPut, afterHeld, routeHereApi, routeKeeperApi, routePushApi, routeAlertApi } from './held-mail.mjs';
 import { routeCheckApi, missingLetter } from './check-letter.mjs';
 import { routeNoticesApi } from './notices.mjs';
+import { routeForumPage } from './forum-pages.mjs';
 import { withSecurityHeaders } from './headers.mjs';
 import { claimedWebId, verifyPodToken } from './token-claims.mjs';
 
@@ -307,7 +308,7 @@ function identFor(rec, policy = null) {
 //                                          an adapter that reads a store directly and so
 //                                          must confine the read itself.
 export async function routeFront(request, ctx) {
-  const out = await route(request, ctx);
+  const out = (await routeForumPage(request, ctx)) || await route(request, ctx);
   return { ...out, headers: withSecurityHeaders(out.headers, out.body) };
 }
 

package/lib/surface/routes/owner.mjs

@@ -14,6 +14,9 @@ const PERMANENT_CONFIG = ['handle', 'remotePod', 'issuer', 'root', 'kind'];
 // Config the actor document carries, so a change is not real until it is
 // republished.
 const WIRE_CONFIG = ['name', 'summary', 'icon', 'image', 'fields', 'approveJoins', 'moderators', 'autoAcceptFollows'];
+// A list as the page shows it: its name and whether its people are kept out
+// of Home. Lists are made and filled in the client; the page only switches.
+const listRow = (l) => ({ id: l.id, title: l.title, exclusive: !!l.exclusive });
 
 export async function get(p, ctx, req, res, url) {   // eslint-disable-line no-unused-vars
   const { agent, log, allowed, embedded, port, publicOrigin, versionOnDisk, isGroup } = ctx;   // eslint-disable-line no-unused-vars
@@ -71,6 +74,7 @@ export async function get(p, ctx, req, res, url) {   // eslint-disable-line no-u
       aliases: cfg.aliases || [],
       autoAcceptFollows: cfg.autoAcceptFollows !== false,
       tagsInHome: cfg.tagsInHome !== false,
+      lists: agent.store.getLists().map(listRow),
       quiescedAt: cfg.quiescedAt || null, movedTo: cfg.movedTo || null,
       // Per-machine, so it comes from the credential file, not pod config —
       // and it is a fact here, not a setting: moving it means moving data,
@@ -254,6 +258,18 @@ export async function post(p, body, ctx, req, res) {   // eslint-disable-line no
         },
       });
     }
+    // One list's Home switch, the same `exclusive` a Mastodon app sets.
+    case '/lists': {
+      if (typeof body.exclusive !== 'boolean') return json(res, 400, { error: 'exclusive (true or false) is the one thing to set here' });
+      await agent.requestTakeover?.();
+      const lists = agent.store.getLists();
+      const l = lists.find(x => x.id === String(body.id || ''));
+      if (!l) return json(res, 404, { error: 'no such list' });
+      l.exclusive = body.exclusive;
+      agent.store.setLists(lists);
+      await agent.store.flush();
+      return json(res, 200, { ok: true, lists: lists.map(listRow) });
+    }
     default: return false;
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fedipod",
-  "version": "1.55.2",
+  "version": "1.57.0",
   "description": "Standalone single-actor ActivityPub agent whose wire face, RDF truth and state all live on a Solid pod (CSS). Bundles a Phanpy UI and a Mastodon client-API facade.",
   "type": "module",
   "license": "MIT",
@@ -55,7 +55,7 @@
     "install-service": "node bin/fedipod.mjs install-service",
     "uninstall-service": "node bin/fedipod.mjs uninstall-service",
     "prepublishOnly": "npm test",
-    "test": "node claude/smoke-tests/agent-smoke.mjs && node claude/smoke-tests/front-hard-test.mjs && node claude/smoke-tests/copy-test.mjs && node claude/smoke-tests/copy-mode-test.mjs && node claude/smoke-tests/hold-test.mjs && node claude/smoke-tests/masto-gateway-test.mjs && node claude/smoke-tests/admin-facade-smoke.mjs && node scripts/check-pod-calls.mjs && node scripts/verify-ui.mjs && node --test claude/smoke-tests/forum-signup-form.test.mjs claude/smoke-tests/door-verify.test.mjs claude/smoke-tests/oauth-signin.test.mjs claude/smoke-tests/app-registration.test.mjs claude/smoke-tests/push-signout.test.mjs claude/smoke-tests/token-fetches.test.mjs claude/smoke-tests/signin-hardening.test.mjs claude/smoke-tests/load-fixes.test.mjs claude/smoke-tests/unread-docs.test.mjs claude/smoke-tests/post-text-once.test.mjs claude/smoke-tests/connected-pod-only.test.mjs claude/smoke-tests/check-letter.test.mjs claude/smoke-tests/gone-through-relay.test.mjs claude/smoke-tests/connected-feeds.test.mjs && node scripts/check-sizes.mjs && node scripts/test-dependents.mjs && node claude/validation/browser-agent/all.mjs",
+    "test": "node claude/smoke-tests/agent-smoke.mjs && node claude/smoke-tests/front-hard-test.mjs && node claude/smoke-tests/copy-test.mjs && node claude/smoke-tests/copy-mode-test.mjs && node claude/smoke-tests/hold-test.mjs && node claude/smoke-tests/masto-gateway-test.mjs && node claude/smoke-tests/admin-facade-smoke.mjs && node scripts/check-pod-calls.mjs && node scripts/verify-ui.mjs && node --test claude/smoke-tests/forum-signup-form.test.mjs claude/smoke-tests/door-verify.test.mjs claude/smoke-tests/oauth-signin.test.mjs claude/smoke-tests/app-registration.test.mjs claude/smoke-tests/push-signout.test.mjs claude/smoke-tests/token-fetches.test.mjs claude/smoke-tests/signin-hardening.test.mjs claude/smoke-tests/load-fixes.test.mjs claude/smoke-tests/unread-docs.test.mjs claude/smoke-tests/post-text-once.test.mjs claude/smoke-tests/connected-pod-only.test.mjs claude/smoke-tests/check-letter.test.mjs claude/smoke-tests/gone-through-relay.test.mjs claude/smoke-tests/connected-feeds.test.mjs claude/smoke-tests/forum-pages.test.mjs && node scripts/check-sizes.mjs && node scripts/test-dependents.mjs && node claude/validation/browser-agent/all.mjs",
     "verify-ui": "node scripts/verify-ui.mjs",
     "build:sw": "node scripts/build-app.mjs --entry web/app/sw-src.mjs --out web/app/dist/sw.js",
     "build:boot": "node scripts/build-app.mjs --entry web/app/boot.mjs --out web/app/dist/boot.js",
@@ -97,7 +97,6 @@
     "package-lock.json": "npm:empty-npm-package@1.0.0"
   },
   "devDependencies": {
-    "esbuild": "^0.28.2",
-    "fedipod-bb": "^0.4.4"
+    "esbuild": "^0.28.2"
   }
 }

package/scripts/build-app.mjs

@@ -67,6 +67,9 @@ if (import.meta.url === `file://${process.argv[1]}`) {
   const entry = args[args.indexOf('--entry') + 1] || path.join(root, 'web/app/agent.mjs');
   const out = args[args.indexOf('--out') + 1] || path.join(root, 'web/app/dist/agent.js');
   const format = args.includes('--format') ? args[args.indexOf('--format') + 1] : 'esm';
+  // The app's "make a forum" is built from the forum's own folder, as it is now.
+  const { bringForum } = await import('./forum-package.mjs');
+  bringForum();
   const { bytes } = await buildApp({ entry, out, format });
   console.log(`built ${path.relative(root, out)} — ${Math.round(bytes / 1024)} KB`);
 }

package/scripts/check-netlify-bundles.mjs

@@ -18,6 +18,9 @@ const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'fn-bundles-'));
 let fails = 0;
 const check = (ok, msg) => { console.log(`${ok ? 'PASS' : 'FAIL'}  ${msg}`); if (!ok) fails++; };
 try {
+  // The functions carry the forum as it is in its own folder now.
+  const { bringForum } = await import('./forum-package.mjs');
+  bringForum();
   execFileSync('netlify', ['functions:build', '--src', path.join(root, 'netlify/functions'), '--functions', path.join(tmp, 'zips')],
     { cwd: root, stdio: 'ignore' });
   const manifest = JSON.parse(fs.readFileSync(path.join(tmp, 'zips/manifest.json'), 'utf8'));

package/scripts/forum-package.mjs

@@ -0,0 +1,26 @@
+// forum-package.mjs — the forum (fedipod-bb) that fedipod.net runs and
+// serves, taken from the forum's own folder every time, not from a version
+// FediPod pins: the checkout beside FediPod, or a clone of the forum's GitHub
+// main where there is none (scripts/dependents.mjs). It is packed as npm would
+// publish it and put in node_modules without touching FediPod's package list,
+// so nothing FediPod records names a forum version. Staging the site, the
+// bundle check and the app build each bring it first.
+import fs from 'node:fs'; import os from 'node:os'; import path from 'node:path';
+import { execFileSync } from 'node:child_process';
+import { fetchDependent, root } from './dependents.mjs';
+
+/** The forum from its folder, installed in node_modules. Returns its folder and version. */
+export function bringForum({ log = console.log } = {}) {
+  const dir = fetchDependent('fedipod-bb', { log });
+  const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'forum-pack-'));
+  try {
+    const packed = JSON.parse(execFileSync('npm', ['pack', dir, '--pack-destination', tmp, '--ignore-scripts', '--json'],
+      { cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }))[0];
+    execFileSync('npm', ['install', '--no-save', '--no-audit', '--no-fund', '--ignore-scripts', path.join(tmp, packed.filename)],
+      { cwd: root, stdio: 'ignore' });
+    log(`forum: fedipod-bb ${packed.version} from ${path.relative(root, dir) || dir}`);
+    return { dir, version: packed.version };
+  } finally { fs.rmSync(tmp, { recursive: true, force: true }); }
+}
+
+if (import.meta.url === `file://${process.argv[1]}`) bringForum();

package/scripts/stage-site.mjs

@@ -14,8 +14,11 @@
 import fs from 'node:fs'; import path from 'node:path'; import { fileURLToPath } from 'node:url';
 import { createHash } from 'node:crypto';
 import { readyDependent } from './dependents.mjs';
+import { bringForum } from './forum-package.mjs';
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const site = path.join(root, 'web/app/site');
+// The forum's page is copied from the forum's own folder, as it is now.
+bringForum({ log: () => {} });
 fs.rmSync(site, { recursive: true, force: true }); fs.mkdirSync(path.join(site, 'app'), { recursive: true });
 const cp = (from, to) => fs.copyFileSync(path.resolve(root, from), path.join(site, to));
 cp('web/app/index.html', 'index.html');
@@ -219,6 +222,12 @@ fs.writeFileSync(path.join(site, '_redirects'), [
     `https://${h}/update.js /update.js      200!`,
     `https://${h}/build.json /build.json     200!`,
     `https://${h}/api/*     /.netlify/functions/front  200!`,
+    // The forum's host answers /robots.txt with the forum's own.
+    `https://${h}/robots.txt /bb/robots.txt  200!`,
+    // Every address under a forum goes to the forum's code, which draws the
+    // ones it draws (lib/gateway/forum-pages.mjs); the rest get the page.
+    `https://${h}/:forum/        /.netlify/functions/front  200!`,
+    `https://${h}/:forum/*       /.netlify/functions/front  200!`,
     `https://${h}/*         /bb/index.html  200!`,
   ]),
   '# the in-browser app, served static (these win over the project catch-all)',
@@ -267,7 +276,13 @@ fs.writeFileSync(path.join(site, '_redirects'), [
 // own /u/<handle>/ or a pod named outright. Its script is a module file of
 // its own, so it is served under the same `script-src 'self'` as the app.
 fs.mkdirSync(path.join(site, 'bb'), { recursive: true });
-for (const f of ['index.html', 'bb.js', 'read.mjs', 'masto.mjs', 'pod.mjs', 'markdown.mjs', 'seen.mjs', 'mine.mjs', 'private.mjs', 'oidc-session.mjs']) cp(`node_modules/fedipod-bb/site/${f}`, `bb/${f}`);
+// Every file the forum's page ships, whatever the forum names them (its
+// robots.txt among them): the forum decides what its page is made of.
+// Editor leftovers and hidden files are not part of it.
+for (const f of fs.readdirSync(path.join(root, 'node_modules/fedipod-bb/site'))) {
+  if (/^[.#]|~$/u.test(f)) continue;
+  cp(`node_modules/fedipod-bb/site/${f}`, `bb/${f}`);
+}
 cp('web/admin/tokens.css', 'bb/tokens.css');   // the site's shared palette, size and family
 cp('node_modules/fediverse-session/oidc-session.mjs', 'bb/solid-oidc-session.mjs');   // signing in to a pod: the library the forum's binding names
 // The account library's demo page, with the library beside it, under /demo/:
@@ -292,15 +307,22 @@ cp(path.join(sessionRepo, 'demo.html'), 'demo/index.html');
   const sub = (n, pairs) => { let t = fs.readFileSync(bb(n), 'utf8');
     for (const [a, b] of pairs) t = t.split(a).join(b); fs.writeFileSync(bb(n), t); };
   sub('oidc-session.mjs', [["'fediverse-session/oidc-session.mjs'", `'./solid-oidc-session.mjs?v=${stamp('solid-oidc-session.mjs')}'`]]);
-  sub('pod.mjs', [["'./oidc-session.mjs'", `'./oidc-session.mjs?v=${stamp('oidc-session.mjs')}'`],
-    ["'./markdown.mjs'", `'./markdown.mjs?v=${stamp('markdown.mjs')}'`],
-    ["'./private.mjs'", `'./private.mjs?v=${stamp('private.mjs')}'`],
-    ["'./mine.mjs'", `'./mine.mjs?v=${stamp('mine.mjs')}'`]]);
-  sub('bb.js', [["'./read.mjs'", `'./read.mjs?v=${stamp('read.mjs')}'`], ["'./masto.mjs'", `'./masto.mjs?v=${stamp('masto.mjs')}'`],
-    ["'./pod.mjs'", `'./pod.mjs?v=${stamp('pod.mjs')}'`], ["'./seen.mjs'", `'./seen.mjs?v=${stamp('seen.mjs')}'`],
-    ["'./markdown.mjs'", `'./markdown.mjs?v=${stamp('markdown.mjs')}'`],
-    ["'./mine.mjs'", `'./mine.mjs?v=${stamp('mine.mjs')}'`]]);
-  sub('index.html', [['"/bb/bb.js"', `"/bb/bb.js?v=${stamp('bb.js')}"`], ['"/bb/tokens.css"', `"/bb/tokens.css?v=${stamp('tokens.css')}"`]]);
+  // Every module names the others it loads by their stamped address, and each
+  // is stamped only after the ones it names, so one module is one address
+  // wherever it is loaded from.
+  const modules = fs.readdirSync(path.join(site, 'bb')).filter((n) => /\.m?js$/u.test(n));
+  const loads = (n) => [...fs.readFileSync(bb(n), 'utf8').matchAll(/from '\.\/([^'?]+)'/gu)].map((m) => m[1]).filter((m) => modules.includes(m));
+  const done = new Set();
+  while (done.size < modules.length) {
+    const ready = modules.filter((n) => !done.has(n) && loads(n).every((m) => done.has(m)));
+    if (!ready.length) throw new Error(`stage-site: the forum page's modules load each other in a circle (${modules.filter((n) => !done.has(n)).join(', ')})`);
+    for (const n of ready) {
+      sub(n, loads(n).map((m) => [`'./${m}'`, `'./${m}?v=${stamp(m)}'`]));
+      done.add(n);
+    }
+  }
+  sub('index.html', [...fs.readFileSync(bb('index.html'), 'utf8').matchAll(/"\/bb\/([^"?]+)"/gu)].map((m) => m[1])
+    .filter((n) => fs.existsSync(bb(n))).map((n) => [`"/bb/${n}"`, `"/bb/${n}?v=${stamp(n)}"`]));
 }
 injectUpdate(path.join(site, 'bb/index.html'));
 injectUpdate(path.join(site, 'index.html'));

package/web/admin/record.js

@@ -108,6 +108,37 @@ document.getElementById('win').addEventListener('win:closed', () => {
 });
 
 
+// One row per list, indented under the lists row: its name, and one dropdown
+// whose two options are its states — the list's people shown in Home, or kept
+// to the list. Changing the word is the whole action.
+function listRows() {
+  const out = [];
+  for (const l of config.lists || []) {
+    const dt = document.createElement('dt');
+    dt.className = 'under';
+    dt.textContent = l.title;
+    const sel = document.createElement('select');
+    sel.setAttribute('aria-label', `Posts from ${l.title} in your home timeline`);
+    sel.title = '   Whether the posts and boosts of the people on this list appear in your home timeline; hidden, they show only on the list and on the public timeline';
+    for (const [v, t] of [['show', 'shown in home'], ['hide', 'hidden from home']]) {
+      const o = document.createElement('option');
+      o.value = v; o.textContent = t; o.selected = (v === 'hide') === !!l.exclusive;
+      sel.appendChild(o);
+    }
+    sel.addEventListener('change', async () => {
+      const hide = sel.value === 'hide';
+      sel.disabled = true;
+      const r = await write('/lists', { id: l.id, exclusive: hide },
+        hide ? `${l.title} is hidden from your home timeline` : `${l.title} is shown in your home timeline`);
+      if (r) await load(); else { sel.value = l.exclusive ? 'hide' : 'show'; sel.disabled = false; }
+    });
+    const dd = document.createElement('dd');
+    dd.append(sel);
+    out.push([dt, dd]);
+  }
+  return out;
+}
+
 // One row per identity connected elsewhere, indented under the row that adds
 // them. Each carries its own way out: disconnecting one has nothing to do with
 // the others.
@@ -254,7 +285,7 @@ function render() {
   if (config.movedTo) rows.push(['moved to', config.movedTo]);
   // A person gates followers here; a group's gate is the joins control on its
   // kind row, so the row would be a second switch for the same thing.
-  if (config.kind !== 'group') rows.splice(2, 0, ['new followers', 'ctl'], ['hashtag posts in home', 'ctl']);
+  if (config.kind !== 'group') rows.splice(2, 0, ['new followers', 'ctl'], ['hashtag posts in home', 'ctl'], ['lists', 'ctl']);
   // Rows that belong under the one being written, appended after it.
   let kids = null;
   for (const [k, v, link] of rows) {
@@ -301,6 +332,13 @@ function render() {
       HOME_TAGS_CTL.hidden = false;
       HOME_TAGS_PICK.value = config.tagsInHome !== false ? 'show' : 'hide';
     }
+    // How many lists; each one is a row of its own underneath with its Home
+    // switch. Lists are made and filled in the client, so this row only counts.
+    if (k === 'lists') {
+      const n = (config.lists || []).length;
+      dd.textContent = n ? `${n} ${n === 1 ? 'list' : 'lists'}` : 'none — make one in Phanpy';
+      kids = listRows();
+    }
     if (k === 'gateway') {
       dd.textContent = '';
       dd.append(GATEWAY_CTL);

package/web/app/admin-facade.mjs

@@ -23,12 +23,15 @@ import { followActor, followHandle } from '../../lib/core/social.mjs';
 const PERMANENT_CONFIG = ['handle', 'remotePod', 'issuer', 'root', 'kind'];
 // Carried in the actor document, so a change is not live until republished.
 const WIRE_CONFIG = ['name', 'summary', 'icon', 'image', 'fields', 'aliases', 'autoAcceptFollows'];
+// A list as the page shows it: its name and whether its people are kept out
+// of Home. Lists are made and filled in the client; the page only switches.
+const listRow = (l) => ({ id: l.id, title: l.title, exclusive: !!l.exclusive });
 
 // The data endpoints this agent answers at the origin root (the page computes
 // its base as the origin, so it asks for /status, not /admin/status). Anything
 // not here falls through to the network as a static file or the gateway.
 export const ADMIN_PATHS = new Set([
-  '/status', '/config', '/gateway', '/alias', '/rotate-key', '/import',
+  '/status', '/config', '/gateway', '/alias', '/rotate-key', '/import', '/lists',
   '/deadletter', '/trouble', '/blocks', '/profiles', '/modqueue', '/log', '/fediacct', '/describe', '/follow',
   '/atproto', '/atproto/connect', '/atproto/disconnect',
   '/rebuild', '/move', '/retire', '/inbox/prune', '/park', '/revive', '/takeover',
@@ -121,6 +124,7 @@ export class AdminFacade {
             aliases: cfg.aliases || [],
             autoAcceptFollows: cfg.autoAcceptFollows !== false,
             tagsInHome: cfg.tagsInHome !== false,
+            lists: a.store.getLists().map(listRow),
             quiescedAt: cfg.quiescedAt || null, movedTo: cfg.movedTo || null,
             mode: a.status().mode,
             // Live from the credential's actual backend on THIS browser (a
@@ -242,6 +246,19 @@ export class AdminFacade {
         });
       }
 
+      // One list's Home switch, the same `exclusive` a Mastodon app sets.
+      case '/lists': {
+        if (typeof body.exclusive !== 'boolean') return json(400, { error: 'exclusive (true or false) is the one thing to set here' });
+        await a.requestTakeover?.();
+        const lists = a.store.getLists();
+        const l = lists.find(x => x.id === String(body.id || ''));
+        if (!l) return json(404, { error: 'no such list' });
+        l.exclusive = body.exclusive;
+        a.store.setLists(lists);
+        await a.store.flush();
+        return json(200, { ok: true, lists: lists.map(listRow) });
+      }
+
       case '/describe': {
         const cfg = { ...a.store.getConfig() };
         if ('summary' in body) cfg.summary = body.summary || undefined;

package/web/app/dist/sw.js

@@ -69313,7 +69313,7 @@ async function handle3(api, ctx) {
   if (mAccLists && req.method === "GET") {
     const actorUrl = api.store.urlFor(mAccLists[1]);
     if (!actorUrl) return send(404, { error: "Record not found" });
-    return send(200, api.store.getLists().filter((l) => (l.members || []).includes(actorUrl)).map((l) => ({ id: l.id, title: l.title, replies_policy: l.repliesPolicy || "list", exclusive: false })));
+    return send(200, api.store.getLists().filter((l) => (l.members || []).includes(actorUrl)).map((l) => ({ id: l.id, title: l.title, replies_policy: l.repliesPolicy || "list", exclusive: !!l.exclusive })));
   }
   if (pathname === "/api/v1/mutes" && req.method === "GET") {
     return send(200, (api.store.getMuted().actors || []).map((a) => api.account(a)));
@@ -69382,9 +69382,10 @@ async function handle4(api, ctx) {
   if (pathname === "/api/v1/timelines/home" || pathname === "/api/v1/timelines/public" || pathname === "/api/v1/trends/statuses") {
     const localOnly = pathname === "/api/v1/timelines/public" && url.searchParams.get("local") === "true";
     const hideTags = pathname === "/api/v1/timelines/home" && api.store.getConfig?.()?.tagsInHome === false;
+    const hiddenBy = new Set(pathname === "/api/v1/timelines/home" ? (api.store.getLists?.() || []).filter((l) => l.exclusive).flatMap((l) => l.members || []) : []);
     const all = api.store.getStatuses();
     const muted = new Set(api.store.getMuted().actors);
-    let items = all.filter((s) => s.kind !== "remote" && s.kind !== "mention").filter((s) => !s.direct && s.visibility !== "direct").filter((s) => !muted.has(s.actor) && !muted.has(s.via)).filter((s) => !hideTags || s.kind !== "tag" || s.sourceAccts?.length).filter((s) => !localOnly || s.kind === "post" && s.visibility !== "private").sort((a, b) => String(b.published || "").localeCompare(String(a.published || "")));
+    let items = all.filter((s) => s.kind !== "remote" && s.kind !== "mention").filter((s) => !s.direct && s.visibility !== "direct").filter((s) => !muted.has(s.actor) && !muted.has(s.via)).filter((s) => !hideTags || s.kind !== "tag" || s.sourceAccts?.length).filter((s) => !hiddenBy.size || !(hiddenBy.has(s.actor) || hiddenBy.has(s.via))).filter((s) => !localOnly || s.kind === "post" && s.visibility !== "private").sort((a, b) => String(b.published || "").localeCompare(String(a.published || "")));
     const { items: page2, headers } = api.page(items, url);
     return send(200, page2.map((s) => api.statusOrBoost(s, { all })), headers);
   }
@@ -69452,7 +69453,8 @@ async function handle4(api, ctx) {
     const { items: page2, headers } = api.page(items, url);
     return send(200, page2.map((s) => api.statusOrBoost(s, { all })), headers);
   }
-  const listJson = (l) => ({ id: l.id, title: l.title, replies_policy: l.repliesPolicy || "list", exclusive: false });
+  const flag = (v) => v === true || v === "true" || v === "on" || v === "1";
+  const listJson = (l) => ({ id: l.id, title: l.title, replies_policy: l.repliesPolicy || "list", exclusive: !!l.exclusive });
   if (pathname === "/api/v1/lists" && req.method === "GET") {
     return send(200, api.store.getLists().map(listJson));
   }
@@ -69461,7 +69463,13 @@ async function handle4(api, ctx) {
     const title = String(body.title || "").trim();
     if (!title) return send(422, { error: "a title is required" });
     const lists = api.store.getLists();
-    const l = { id: node_crypto_default.randomBytes(8).toString("hex"), title, repliesPolicy: body.replies_policy || "list", members: [] };
+    const l = {
+      id: node_crypto_default.randomBytes(8).toString("hex"),
+      title,
+      repliesPolicy: body.replies_policy || "list",
+      exclusive: flag(body.exclusive),
+      members: []
+    };
     lists.push(l);
     api.store.setLists(lists);
     return send(200, listJson(l));
@@ -69479,6 +69487,7 @@ async function handle4(api, ctx) {
       const body = await readBody2(req);
       if (body.title) l.title = String(body.title);
       if (body.replies_policy) l.repliesPolicy = body.replies_policy;
+      if ("exclusive" in body) l.exclusive = flag(body.exclusive);
       api.store.setLists(lists);
     }
     return send(200, listJson(l));
@@ -71622,6 +71631,7 @@ var ImportWorker = class {
 // web/app/admin-facade.mjs
 var PERMANENT_CONFIG = ["handle", "remotePod", "issuer", "root", "kind"];
 var WIRE_CONFIG = ["name", "summary", "icon", "image", "fields", "aliases", "autoAcceptFollows"];
+var listRow = (l) => ({ id: l.id, title: l.title, exclusive: !!l.exclusive });
 var ADMIN_PATHS = /* @__PURE__ */ new Set([
   "/status",
   "/config",
@@ -71629,6 +71639,7 @@ var ADMIN_PATHS = /* @__PURE__ */ new Set([
   "/alias",
   "/rotate-key",
   "/import",
+  "/lists",
   "/deadletter",
   "/trouble",
   "/blocks",
@@ -71733,6 +71744,7 @@ var AdminFacade = class {
             aliases: cfg.aliases || [],
             autoAcceptFollows: cfg.autoAcceptFollows !== false,
             tagsInHome: cfg.tagsInHome !== false,
+            lists: a.store.getLists().map(listRow),
             quiescedAt: cfg.quiescedAt || null,
             movedTo: cfg.movedTo || null,
             mode: a.status().mode,
@@ -71876,6 +71888,18 @@ var AdminFacade = class {
           ...pub?.unreachable?.length ? { unreachable: pub.unreachable } : {}
         });
       }
+      // One list's Home switch, the same `exclusive` a Mastodon app sets.
+      case "/lists": {
+        if (typeof body.exclusive !== "boolean") return json2(400, { error: "exclusive (true or false) is the one thing to set here" });
+        await a.requestTakeover?.();
+        const lists = a.store.getLists();
+        const l = lists.find((x) => x.id === String(body.id || ""));
+        if (!l) return json2(404, { error: "no such list" });
+        l.exclusive = body.exclusive;
+        a.store.setLists(lists);
+        await a.store.flush();
+        return json2(200, { ok: true, lists: lists.map(listRow) });
+      }
       case "/describe": {
         const cfg = { ...a.store.getConfig() };
         if ("summary" in body) cfg.summary = body.summary || void 0;