nixamp 0.55.0 → 0.55.2

package/dist/label-routes.d.ts

@@ -1,6 +1,7 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
 import { type AiLabel } from "./ai-label.ts";
 import { type GrantVerifier } from "./music-store.ts";
+import { type GuideAds } from "./station-guide.ts";
 /** Whether this path is the label's public face (an MP3 or the zip still asks for its grant). */
 export declare function isPublicLabelPath(path: string): boolean;
 /** nixamp.com's page that sells this: a song, an album or everything by the artist. */
@@ -13,6 +14,8 @@ export interface LabelRoutesContext {
     /** nixamp.com, where the store is, and this server's public address (for Buy links). */
     site?: string;
     publicBase?: string;
+    /** The one text_link ad /label carries (station-guide.ts withPageAd); none when unset. */
+    ads?: GuideAds;
     json: (response: ServerResponse, status: number, body: unknown) => void;
     readBody: (request: IncomingMessage) => Promise<string>;
 }

package/dist/label-routes.js

@@ -12,6 +12,7 @@ import { ROSTER } from "./ai-label.js";
 import { covers, PRICES } from "./music-store.js";
 import { writeZip, zipSize } from "./zip-stream.js";
 import { StationError } from "./stations.js";
+import { adCsp, withPageAd } from "./station-guide.js";
 // Listening is free on the live stations (with their breaks); the songs as
 // files are sold, so only the words and the cover are public here, and an
 // MP3 or a zip needs a grant from nixamp.com's store (music-store.ts).
@@ -88,8 +89,8 @@ export async function handleLabelRoutes(request, response, path, ctx) {
             }
             if (path === "/label") {
                 const shop = ctx.grants && ctx.site && /^https:\/\//.test(ctx.publicBase ?? "") ? { site: ctx.site, server: ctx.publicBase } : undefined;
-                const page = renderLabel(label.publicView(), shop);
-                response.writeHead(200, { "content-type": "text/html; charset=utf-8", "content-security-policy": LABEL_CSP, "cache-control": "public, max-age=300" });
+                const page = withPageAd(renderLabel(label.publicView(), shop), ctx.ads ?? {});
+                response.writeHead(200, { "content-type": "text/html; charset=utf-8", "content-security-policy": adCsp(LABEL_CSP, ctx.ads ?? {}), "cache-control": "public, max-age=300" });
                 response.end(method === "HEAD" ? undefined : page);
                 return true;
             }

package/dist/radio-pages.d.ts

@@ -6,6 +6,19 @@ export declare const RADIO_STATION: RegExp;
 export declare const RADIO_ARTIST: RegExp;
 export declare const RADIO_ALBUM: RegExp;
 export declare function isRadioPath(path: string): boolean;
+/**
+ * Buy, through this server: a 302 to nixamp.com's store page for it, so the
+ * link on a /radio page does not carry the machine the music is on.
+ */
+export declare const RADIO_BUY = "/radio/buy";
+/** /radio/buy?kind=&artist=&album=&n=, checked: the label's keys and nothing else. */
+export declare function radioBuyQuery(query: URLSearchParams): {
+    kind: "song" | "album" | "artist";
+    artist: string;
+    album: string;
+    n: number;
+} | null;
+export declare function radioBuyLink(kind: "song" | "album" | "artist", artist: string, album?: string, n?: number): string;
 /**
  * Public, listed stations by name. Oldest first, so a name stays with the
  * station that had it; a second "Jazz" is jazz-2.
@@ -115,7 +128,7 @@ export declare function rewriteResponse(response: ServerResponse, rewrite: (text
 export declare function radioRewriter(station: {
     id: string;
     listenToken: string;
-}, slug: string): (text: string) => string;
+}, slug: string, buyFrom?: string): (text: string) => string;
 /** The live.streaming header every /radio page carries, so a listener can get anywhere from one. */
 export declare const NAV_STYLE = ".radio-nav{display:flex;flex-wrap:wrap;gap:6px 16px;align-items:center;max-width:960px;margin:0 auto;padding:14px 16px;font:600 15px/1.4 system-ui,-apple-system,\"Segoe UI\",sans-serif}\n.radio-nav a{color:inherit;text-decoration:none;opacity:.8}.radio-nav a:hover,.radio-nav a[aria-current=page]{opacity:1;text-decoration:underline}\n.radio-nav .brand{font-weight:800;opacity:1;margin-right:auto}";
 export declare function radioNav(home: string, current?: "live" | "radio" | "label" | "vod" | ""): string;

package/dist/radio-pages.js

@@ -26,9 +26,33 @@ export const RADIO_STATION = /^\/radio\/([a-z0-9-]{1,60})\/?$/;
 export const RADIO_ARTIST = /^\/radio\/artist\/([a-z0-9-]{1,90})\/?$/;
 export const RADIO_ALBUM = /^\/radio\/album\/([a-z0-9-]{1,100})(\/cover\.jpg)?\/?$/;
 export function isRadioPath(path) {
-    return path === "/radio" || path === "/radio/" || RADIO_SUB.test(path) || RADIO_STATION.test(path) || RADIO_ARTIST.test(path) || RADIO_ALBUM.test(path);
+    return path === "/radio" || path === "/radio/" || path === RADIO_BUY || RADIO_SUB.test(path) || RADIO_STATION.test(path) || RADIO_ARTIST.test(path) || RADIO_ALBUM.test(path);
+}
+const RESERVED = new Set(["artist", "album", "artists", "albums", "buy"]);
+/**
+ * Buy, through this server: a 302 to nixamp.com's store page for it, so the
+ * link on a /radio page does not carry the machine the music is on.
+ */
+export const RADIO_BUY = "/radio/buy";
+/** /radio/buy?kind=&artist=&album=&n=, checked: the label's keys and nothing else. */
+export function radioBuyQuery(query) {
+    const kind = query.get("kind");
+    const artist = query.get("artist") ?? "";
+    const album = query.get("album") ?? "";
+    const n = Number(query.get("n") ?? 0);
+    if (kind !== "song" && kind !== "album" && kind !== "artist")
+        return null;
+    if (!/^[a-f0-9]{10}$/.test(artist))
+        return null;
+    if (kind !== "artist" && !/^[a-f0-9]{8}$/.test(album))
+        return null;
+    if (kind === "song" && !(Number.isInteger(n) && n >= 1 && n <= 999))
+        return null;
+    return { kind, artist, album: kind === "artist" ? "" : album, n: kind === "song" ? n : 0 };
+}
+export function radioBuyLink(kind, artist, album = "", n = 0) {
+    return `${RADIO_BUY}?${new URLSearchParams({ kind, artist, ...(kind !== "artist" ? { album } : {}), ...(kind === "song" ? { n: String(n) } : {}) }).toString()}`;
 }
-const RESERVED = new Set(["artist", "album", "artists", "albums"]);
 /**
  * Public, listed stations by name. Oldest first, so a name stays with the
  * station that had it; a second "Jazz" is jazz-2.
@@ -180,11 +204,14 @@ export function rewriteResponse(response, rewrite) {
     response.end = (chunk, ...rest) => end(swap(chunk), ...rest);
 }
 /** The station's addresses and token, as /radio/<name> says them instead. */
-export function radioRewriter(station, slug) {
+export function radioRewriter(station, slug, buyFrom = "") {
     const token = station.listenToken;
     const encoded = encodeURIComponent(token);
     return (text) => {
         let out = text.split(`/api/v1/stations/${station.id}/`).join(`/radio/${slug}/`);
+        // The store's links name this server; /radio/buy sends there without saying so.
+        if (buyFrom)
+            out = out.split(buyFrom).join(`${RADIO_BUY}?`);
         for (const one of new Set([encoded, token])) {
             out = out.split(`?t=${one}&`).join("?").split(`&t=${one}`).join("").split(`?t=${one}`).join("").split(one).join("");
         }

package/dist/server.js

@@ -77,8 +77,8 @@ import { handleRooms, RoomProbe, roomEntries, RoomStore, watchBase } from "./gui
 import { handleVods, VodProbe, vodEntries, VodStore, vodView } from "./guide-vods.js";
 import { withPitFooter } from "./pit-footer.js";
 import { handleFollowPage } from "./follow-page.js";
-import { asRadioPage, buildCatalogue, isRadioPath, NAV_STYLE, RADIO_ALBUM, RADIO_ARTIST, RADIO_CSP, RADIO_STATION, RADIO_SUB, radioNav, radioPeers, radioRewriter, radioStations, renderAlbum, renderArtist, renderDirectory, renderMissing, rewriteResponse, } from "./radio-pages.js";
-import { guideAds, guideCsp, guideHosts, guidePeers, peerBase, PeerGuides, renderGuide } from "./station-guide.js";
+import { asRadioPage, buildCatalogue, isRadioPath, NAV_STYLE, RADIO_ALBUM, RADIO_ARTIST, RADIO_CSP, RADIO_STATION, RADIO_SUB, RADIO_BUY, radioBuyLink, radioBuyQuery, radioNav, radioPeers, radioRewriter, radioStations, renderAlbum, renderArtist, renderDirectory, renderMissing, rewriteResponse, } from "./radio-pages.js";
+import { adCsp, guideAds, guideCsp, withPageAd, guideHosts, guidePeers, peerBase, PeerGuides, renderGuide } from "./station-guide.js";
 import { StationRunner } from "./station-runner.js";
 import { StationError, StationStore, channelOf, stationOfChannel } from "./stations.js";
 import { STATION_CONTROL_LIMIT, StationUsage, limitsFromEnv } from "./station-metering.js";
@@ -1590,7 +1590,8 @@ export function createHandler(engine, options) {
                 query.delete("t");
                 query.set("t", station.listenToken);
                 request.url = `/api/v1/stations/${station.id}/${sub[2]}?${query.toString()}`;
-                rewriteResponse(response, radioRewriter(station, sub[1]));
+                const here = options.stations.publicBase?.() ?? "";
+                rewriteResponse(response, radioRewriter(station, sub[1], /^https:\/\//.test(here) ? `${storeSite}/buy?server=${encodeURIComponent(here)}&` : ""));
                 return handle(request, response);
             }
         }
@@ -2529,7 +2530,7 @@ export function createHandler(engine, options) {
             });
             // Behind a guide name (live.streaming) the page asks its own origin, so no server address shows in it.
             const apiBase = guideHosts().has(requestHost) ? "" : options.stations.publicBase?.() ?? "";
-            const page = renderGuide([...rooms, ...entries, ...named], apiBase, ads, label && label.publicView().genres.length > 0 ? "/label" : "");
+            const page = renderGuide([...rooms, ...entries, ...named], apiBase, ads, label && label.publicView().genres.length > 0 ? "/label" : "", path === "/");
             response.writeHead(200, {
                 "content-type": "text/html; charset=utf-8",
                 "cache-control": "no-cache",
@@ -2546,7 +2547,7 @@ export function createHandler(engine, options) {
         // stream address>. The built page plays it in @profullstack/player, as a
         // film or as radio; nothing about the room passes through here.
         if (options.stations?.rooms && path === "/watch" && (request.method === "GET" || request.method === "HEAD")) {
-            const built = web !== null && isFile(join(web, "watch.html")) ? readFileSync(join(web, "watch.html")) : null;
+            const built = web !== null && isFile(join(web, "watch.html")) ? withPageAd(readFileSync(join(web, "watch.html"), "utf8"), guideAds()) : null;
             if (!built) {
                 json(response, 404, { error: "this server was started without its web pages" });
                 return;
@@ -2554,7 +2555,7 @@ export function createHandler(engine, options) {
             response.writeHead(200, {
                 "content-type": "text/html; charset=utf-8",
                 "cache-control": "no-cache",
-                "content-security-policy": WATCH_APP_CSP,
+                "content-security-policy": adCsp(WATCH_APP_CSP, guideAds()),
                 "referrer-policy": "no-referrer",
                 "x-content-type-options": "nosniff",
             });
@@ -2581,11 +2582,11 @@ export function createHandler(engine, options) {
             response.writeHead(vodPath[1] && !one ? 404 : 200, {
                 "content-type": "text/html; charset=utf-8",
                 "cache-control": "no-cache",
-                "content-security-policy": WATCH_APP_CSP,
+                "content-security-policy": adCsp(WATCH_APP_CSP, guideAds()),
                 "referrer-policy": "no-referrer",
                 "x-content-type-options": "nosniff",
             });
-            response.end(request.method === "HEAD" ? undefined : built.replace(/<title>[^<]*<\/title>/, head));
+            response.end(request.method === "HEAD" ? undefined : withPageAd(built.replace(/<title>[^<]*<\/title>/, head), guideAds()));
             return;
         }
         // /radio: public, listed stations under readable names, and the artists and
@@ -2598,20 +2599,30 @@ export function createHandler(engine, options) {
             const base = radioBaseFor(request, publicBase);
             const nav = radioNav(guideHosts().has(requestHost) ? "/" : "/guide");
             const send = (status, page, csp = RADIO_CSP) => {
+                const ads = guideAds();
+                page = withPageAd(page, ads);
                 response.writeHead(status, {
                     "content-type": "text/html; charset=utf-8",
                     "cache-control": status === 200 ? "public, max-age=60" : "no-cache",
-                    "content-security-policy": csp,
+                    "content-security-policy": adCsp(csp, ads),
                     "referrer-policy": "strict-origin-when-cross-origin",
                     "x-content-type-options": "nosniff",
                 });
                 response.end(request.method === "HEAD" ? undefined : page);
             };
             const shop = stations.label && /^https:\/\//.test(publicBase)
-                ? { site: storeSite, buy: (kind, artist, album = "", n = 0) => buyLink(storeSite, publicBase, kind, artist, album, n), prices: PRICES }
+                ? { site: storeSite, buy: radioBuyLink, prices: PRICES }
                 : null;
             const peers = stations.peers ? radioPeers(named.keys(), await stations.peers.entries()) : new Map();
             const stationNames = new Map([...named].map(([slug, one]) => [slug, one.name]));
+            if (path === RADIO_BUY) {
+                const item = radioBuyQuery(url.searchParams);
+                if (!item || !shop)
+                    return send(404, renderMissing("thing for sale", base, nav));
+                response.writeHead(302, { location: buyLink(storeSite, publicBase, item.kind, item.artist, item.album, item.n), "cache-control": "no-store", "referrer-policy": "no-referrer" });
+                response.end();
+                return;
+            }
             if (path === "/radio" || path === "/radio/") {
                 const encrypted = request.socket.encrypted === true;
                 const entries = guideEntries({
@@ -2670,12 +2681,14 @@ export function createHandler(engine, options) {
                     return send(404, renderMissing("station", base, nav));
                 }
                 const built = web !== null && isFile(join(web, "station.html")) ? readFileSync(join(web, "station.html"), "utf8") : null;
-                const page = asRadioPage(built ?? STATION_PAGE_HTML, station, slug, base, nav);
+                // The built page carries the one ad; the inline fallback stays as it is.
+                const ads = built ? guideAds() : {};
+                const page = withPageAd(asRadioPage(built ?? STATION_PAGE_HTML, station, slug, base, nav), ads);
                 response.writeHead(200, {
                     "content-type": "text/html; charset=utf-8",
                     "cache-control": "no-cache",
                     // The inline page names its styles by hash; the header's is one more.
-                    "content-security-policy": built ? STATION_APP_CSP : STATION_PAGE_CSP.replace("style-src ", `style-src 'sha256-${sha("sha256").update(NAV_STYLE).digest("base64")}' `),
+                    "content-security-policy": built ? adCsp(STATION_APP_CSP, ads) : STATION_PAGE_CSP.replace("style-src ", `style-src 'sha256-${sha("sha256").update(NAV_STYLE).digest("base64")}' `),
                     "referrer-policy": "strict-origin-when-cross-origin",
                     "x-content-type-options": "nosniff",
                 });
@@ -2733,11 +2746,12 @@ export function createHandler(engine, options) {
         if (options.stations && STATION_PAGE.test(path) && (request.method === "GET" || request.method === "HEAD")) {
             // The built page plays in @profullstack/player; the inline one is for a
             // server started without the web build.
-            const built = web !== null && isFile(join(web, "station.html")) ? readFileSync(join(web, "station.html")) : null;
+            const ads = guideAds();
+            const built = web !== null && isFile(join(web, "station.html")) ? withPageAd(readFileSync(join(web, "station.html"), "utf8"), ads) : null;
             response.writeHead(200, {
                 "content-type": "text/html; charset=utf-8",
                 "cache-control": "no-cache",
-                "content-security-policy": built ? STATION_APP_CSP : STATION_PAGE_CSP,
+                "content-security-policy": built ? adCsp(STATION_APP_CSP, ads) : STATION_PAGE_CSP,
                 "referrer-policy": "no-referrer",
                 "x-content-type-options": "nosniff",
             });
@@ -2795,7 +2809,7 @@ export function createHandler(engine, options) {
             const control = isPublicLabelPath(path) ? { allowed: false } : await controlOf();
             if (await handleLabelRoutes(request, response, path, {
                 label: options.stations.label, canControl: control.allowed, json, readBody,
-                grants: storeGrants, site: storeSite, publicBase: options.stations.publicBase?.() ?? "",
+                grants: storeGrants, site: storeSite, publicBase: options.stations.publicBase?.() ?? "", ads: guideAds(),
             }))
                 return;
         }

package/dist/station-guide.d.ts

@@ -29,7 +29,7 @@ export interface GuideEntry {
  * gateway that cannot run its script against this server (the Moshpit's
  * /n/<name>), and for a crawler. Everything from a station is escaped.
  */
-export declare function renderGuide(entries: GuideEntry[], apiBase?: string, ads?: GuideAds, labelHref?: string): string;
+export declare function renderGuide(entries: GuideEntry[], apiBase?: string, ads?: GuideAds, labelHref?: string, home?: boolean): string;
 export declare const GUIDE_HTML: string;
 /**
  * The guide's policy. With crawlproof configured (guideAds below) its tracker
@@ -38,6 +38,15 @@ export declare const GUIDE_HTML: string;
  */
 export declare function guideCsp(ads?: GuideAds): string;
 export declare const GUIDE_CSP: string;
+/**
+ * The one ad an inner page carries -- a station, /radio, an artist, an album,
+ * /label, /vod, /watch -- and never a home page: a single text_link line at
+ * the top of its content, sized by attributes so a page whose CSP hashes its
+ * styles needs no new one. The page as it was without a slot.
+ */
+export declare function withPageAd(html: string, ads: GuideAds): string;
+/** A page's CSP with room for that ad's frame. */
+export declare function adCsp(csp: string, ads: GuideAds): string;
 /** crawlproof analytics and an ad on the guide: a project id (tracker data-site) and an ad slot. */
 export interface GuideAds {
     site?: string;

package/dist/station-guide.js

@@ -151,7 +151,7 @@ const GROUPS = ["rooms", "vod", "ai", "shared", "radio", "tv"];
  * gateway that cannot run its script against this server (the Moshpit's
  * /n/<name>), and for a crawler. Everything from a station is escaped.
  */
-export function renderGuide(entries, apiBase = "", ads = {}, labelHref = "") {
+export function renderGuide(entries, apiBase = "", ads = {}, labelHref = "", home = false) {
     const groupOf = (one) => one.group ?? (one.kind === "video" ? "tv" : "radio");
     const cards = (group) => entries
         .filter((one) => groupOf(one) === group && /^https?:\/\//.test(one.page))
@@ -166,7 +166,8 @@ export function renderGuide(entries, apiBase = "", ads = {}, labelHref = "") {
     }
     if (ads.site)
         page = page.replace("</head>", `<script data-site="${escape(ads.site)}" src="${CRAWLPROOF}/stats.js" async></script>\n</head>`);
-    if (ads.slot) {
+    // A home page carries no ad (live.streaming's / is this guide); nixamp.com/guide is an inner page.
+    if (ads.slot && !home) {
         // One line by default: a 300x250 box above the stations pushed the guide itself off the first screen.
         const format = ads.format ?? "text_link";
         const slot = ads.slot;
@@ -249,6 +250,22 @@ export function guideCsp(ads = {}) {
     ].join("; ");
 }
 export const GUIDE_CSP = guideCsp();
+/**
+ * The one ad an inner page carries -- a station, /radio, an artist, an album,
+ * /label, /vod, /watch -- and never a home page: a single text_link line at
+ * the top of its content, sized by attributes so a page whose CSP hashes its
+ * styles needs no new one. The page as it was without a slot.
+ */
+export function withPageAd(html, ads) {
+    if (!ads.slot)
+        return html;
+    const unit = `<div class="ad-unit ad-text_link"><iframe src="${CRAWLPROOF}/api/ads/frame?slot=${encodeURIComponent(ads.slot)}&amp;format=text_link" title="Advertisement" width="100%" height="40" frameborder="0" loading="lazy" referrerpolicy="strict-origin-when-cross-origin" sandbox="allow-scripts allow-popups allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation" scrolling="no"></iframe></div>`;
+    return html.replace(/<main\b[^>]*>/, (main) => `${main}\n${unit}`);
+}
+/** A page's CSP with room for that ad's frame. */
+export function adCsp(csp, ads) {
+    return ads.slot ? `${csp}; frame-src 'self' ${CRAWLPROOF}` : csp;
+}
 const AD_ID = /^[A-Za-z0-9-]{1,64}$/;
 /** A setting as the guide may use it: ids that are ids, a format it knows, or nothing. */
 export function cleanGuideAds(value) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nixamp",
-  "version": "0.55.0",
+  "version": "0.55.2",
   "description": "It really whips the terminal's ass. A Winamp-shaped audio player for your terminal.",
   "license": "MIT",
   "type": "module",

package/src/label-routes.ts

@@ -13,6 +13,7 @@ import { ROSTER, type AiLabel, type PublicArtist } from "./ai-label.ts";
 import { covers, PRICES, type GrantVerifier } from "./music-store.ts";
 import { writeZip, zipSize } from "./zip-stream.ts";
 import { StationError } from "./stations.ts";
+import { adCsp, withPageAd, type GuideAds } from "./station-guide.ts";
 
 // Listening is free on the live stations (with their breaks); the songs as
 // files are sold, so only the words and the cover are public here, and an
@@ -38,6 +39,8 @@ export interface LabelRoutesContext {
   /** nixamp.com, where the store is, and this server's public address (for Buy links). */
   site?: string;
   publicBase?: string;
+  /** The one text_link ad /label carries (station-guide.ts withPageAd); none when unset. */
+  ads?: GuideAds;
   json: (response: ServerResponse, status: number, body: unknown) => void;
   readBody: (request: IncomingMessage) => Promise<string>;
 }
@@ -106,8 +109,8 @@ export async function handleLabelRoutes(
       }
       if (path === "/label") {
         const shop = ctx.grants && ctx.site && /^https:\/\//.test(ctx.publicBase ?? "") ? { site: ctx.site, server: ctx.publicBase! } : undefined;
-        const page = renderLabel(label.publicView(), shop);
-        response.writeHead(200, { "content-type": "text/html; charset=utf-8", "content-security-policy": LABEL_CSP, "cache-control": "public, max-age=300" });
+        const page = withPageAd(renderLabel(label.publicView(), shop), ctx.ads ?? {});
+        response.writeHead(200, { "content-type": "text/html; charset=utf-8", "content-security-policy": adCsp(LABEL_CSP, ctx.ads ?? {}), "cache-control": "public, max-age=300" });
         response.end(method === "HEAD" ? undefined : page);
         return true;
       }

package/src/radio-pages.ts

@@ -30,10 +30,33 @@ export const RADIO_ARTIST = /^\/radio\/artist\/([a-z0-9-]{1,90})\/?$/;
 export const RADIO_ALBUM = /^\/radio\/album\/([a-z0-9-]{1,100})(\/cover\.jpg)?\/?$/;
 
 export function isRadioPath(path: string): boolean {
-  return path === "/radio" || path === "/radio/" || RADIO_SUB.test(path) || RADIO_STATION.test(path) || RADIO_ARTIST.test(path) || RADIO_ALBUM.test(path);
+  return path === "/radio" || path === "/radio/" || path === RADIO_BUY || RADIO_SUB.test(path) || RADIO_STATION.test(path) || RADIO_ARTIST.test(path) || RADIO_ALBUM.test(path);
 }
 
-const RESERVED = new Set(["artist", "album", "artists", "albums"]);
+const RESERVED = new Set(["artist", "album", "artists", "albums", "buy"]);
+
+/**
+ * Buy, through this server: a 302 to nixamp.com's store page for it, so the
+ * link on a /radio page does not carry the machine the music is on.
+ */
+export const RADIO_BUY = "/radio/buy";
+
+/** /radio/buy?kind=&artist=&album=&n=, checked: the label's keys and nothing else. */
+export function radioBuyQuery(query: URLSearchParams): { kind: "song" | "album" | "artist"; artist: string; album: string; n: number } | null {
+  const kind = query.get("kind");
+  const artist = query.get("artist") ?? "";
+  const album = query.get("album") ?? "";
+  const n = Number(query.get("n") ?? 0);
+  if (kind !== "song" && kind !== "album" && kind !== "artist") return null;
+  if (!/^[a-f0-9]{10}$/.test(artist)) return null;
+  if (kind !== "artist" && !/^[a-f0-9]{8}$/.test(album)) return null;
+  if (kind === "song" && !(Number.isInteger(n) && n >= 1 && n <= 999)) return null;
+  return { kind, artist, album: kind === "artist" ? "" : album, n: kind === "song" ? n : 0 };
+}
+
+export function radioBuyLink(kind: "song" | "album" | "artist", artist: string, album = "", n = 0): string {
+  return `${RADIO_BUY}?${new URLSearchParams({ kind, artist, ...(kind !== "artist" ? { album } : {}), ...(kind === "song" ? { n: String(n) } : {}) }).toString()}`;
+}
 
 /**
  * Public, listed stations by name. Oldest first, so a name stays with the
@@ -224,11 +247,13 @@ export function rewriteResponse(response: ServerResponse, rewrite: (text: string
 }
 
 /** The station's addresses and token, as /radio/<name> says them instead. */
-export function radioRewriter(station: { id: string; listenToken: string }, slug: string): (text: string) => string {
+export function radioRewriter(station: { id: string; listenToken: string }, slug: string, buyFrom = ""): (text: string) => string {
   const token = station.listenToken;
   const encoded = encodeURIComponent(token);
   return (text) => {
     let out = text.split(`/api/v1/stations/${station.id}/`).join(`/radio/${slug}/`);
+    // The store's links name this server; /radio/buy sends there without saying so.
+    if (buyFrom) out = out.split(buyFrom).join(`${RADIO_BUY}?`);
     for (const one of new Set([encoded, token])) {
       out = out.split(`?t=${one}&`).join("?").split(`&t=${one}`).join("").split(`?t=${one}`).join("").split(one).join("");
     }

package/src/server.ts

@@ -95,10 +95,10 @@ import { handleVods, VodProbe, vodEntries, VodStore, vodView } from "./guide-vod
 import { withPitFooter } from "./pit-footer.ts";
 import { handleFollowPage } from "./follow-page.ts";
 import {
-  asRadioPage, buildCatalogue, isRadioPath, NAV_STYLE, RADIO_ALBUM, RADIO_ARTIST, RADIO_CSP, RADIO_STATION, RADIO_SUB, radioNav, radioPeers, radioRewriter,
+  asRadioPage, buildCatalogue, isRadioPath, NAV_STYLE, RADIO_ALBUM, RADIO_ARTIST, RADIO_CSP, RADIO_STATION, RADIO_SUB, RADIO_BUY, radioBuyLink, radioBuyQuery, radioNav, radioPeers, radioRewriter,
   radioStations, renderAlbum, renderArtist, renderDirectory, renderMissing, rewriteResponse, type PeerRadio, type RadioCatalogue,
 } from "./radio-pages.ts";
-import { guideAds, guideCsp, guideHosts, guidePeers, peerBase, PeerGuides, renderGuide, type GuideEntry } from "./station-guide.ts";
+import { adCsp, guideAds, guideCsp, withPageAd, guideHosts, guidePeers, peerBase, PeerGuides, renderGuide, type GuideEntry } from "./station-guide.ts";
 import { StationRunner } from "./station-runner.ts";
 import { StationError, StationStore, channelOf, stationOfChannel, type Station } from "./stations.ts";
 import { STATION_CONTROL_LIMIT, StationUsage, limitsFromEnv, type Limits } from "./station-metering.ts";
@@ -2139,7 +2139,8 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
         query.delete("t");
         query.set("t", station!.listenToken);
         request.url = `/api/v1/stations/${station!.id}/${sub[2]}?${query.toString()}`;
-        rewriteResponse(response, radioRewriter(station!, sub[1]!));
+        const here = options.stations.publicBase?.() ?? "";
+        rewriteResponse(response, radioRewriter(station!, sub[1]!, /^https:\/\//.test(here) ? `${storeSite}/buy?server=${encodeURIComponent(here)}&` : ""));
         return handle(request, response);
       }
     }
@@ -3056,7 +3057,7 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
       });
       // Behind a guide name (live.streaming) the page asks its own origin, so no server address shows in it.
       const apiBase = guideHosts().has(requestHost) ? "" : options.stations!.publicBase?.() ?? "";
-      const page = renderGuide([...rooms, ...entries, ...named] as GuideEntry[], apiBase, ads, label && label.publicView().genres.length > 0 ? "/label" : "");
+      const page = renderGuide([...rooms, ...entries, ...named] as GuideEntry[], apiBase, ads, label && label.publicView().genres.length > 0 ? "/label" : "", path === "/");
       response.writeHead(200, {
         "content-type": "text/html; charset=utf-8",
         "cache-control": "no-cache",
@@ -3074,7 +3075,7 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
     // stream address>. The built page plays it in @profullstack/player, as a
     // film or as radio; nothing about the room passes through here.
     if (options.stations?.rooms && path === "/watch" && (request.method === "GET" || request.method === "HEAD")) {
-      const built = web !== null && isFile(join(web, "watch.html")) ? readFileSync(join(web, "watch.html")) : null;
+      const built = web !== null && isFile(join(web, "watch.html")) ? withPageAd(readFileSync(join(web, "watch.html"), "utf8"), guideAds()) : null;
       if (!built) {
         json(response, 404, { error: "this server was started without its web pages" });
         return;
@@ -3082,7 +3083,7 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
       response.writeHead(200, {
         "content-type": "text/html; charset=utf-8",
         "cache-control": "no-cache",
-        "content-security-policy": WATCH_APP_CSP,
+        "content-security-policy": adCsp(WATCH_APP_CSP, guideAds()),
         "referrer-policy": "no-referrer",
         "x-content-type-options": "nosniff",
       });
@@ -3110,11 +3111,11 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
       response.writeHead(vodPath[1] && !one ? 404 : 200, {
         "content-type": "text/html; charset=utf-8",
         "cache-control": "no-cache",
-        "content-security-policy": WATCH_APP_CSP,
+        "content-security-policy": adCsp(WATCH_APP_CSP, guideAds()),
         "referrer-policy": "no-referrer",
         "x-content-type-options": "nosniff",
       });
-      response.end(request.method === "HEAD" ? undefined : built.replace(/<title>[^<]*<\/title>/, head));
+      response.end(request.method === "HEAD" ? undefined : withPageAd(built.replace(/<title>[^<]*<\/title>/, head), guideAds()));
       return;
     }
 
@@ -3128,20 +3129,29 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
       const base = radioBaseFor(request, publicBase);
       const nav = radioNav(guideHosts().has(requestHost) ? "/" : "/guide");
       const send = (status: number, page: string, csp = RADIO_CSP): void => {
+        const ads = guideAds();
+        page = withPageAd(page, ads);
         response.writeHead(status, {
           "content-type": "text/html; charset=utf-8",
           "cache-control": status === 200 ? "public, max-age=60" : "no-cache",
-          "content-security-policy": csp,
+          "content-security-policy": adCsp(csp, ads),
           "referrer-policy": "strict-origin-when-cross-origin",
           "x-content-type-options": "nosniff",
         });
         response.end(request.method === "HEAD" ? undefined : page);
       };
       const shop = stations.label && /^https:\/\//.test(publicBase)
-        ? { site: storeSite, buy: (kind: "song" | "album" | "artist", artist: string, album = "", n = 0) => buyLink(storeSite, publicBase, kind, artist, album, n), prices: PRICES }
+        ? { site: storeSite, buy: radioBuyLink, prices: PRICES }
         : null;
       const peers = stations.peers ? radioPeers(named.keys(), await stations.peers.entries()) : new Map<string, PeerRadio>();
       const stationNames = new Map([...named].map(([slug, one]) => [slug, one.name]));
+      if (path === RADIO_BUY) {
+        const item = radioBuyQuery(url.searchParams);
+        if (!item || !shop) return send(404, renderMissing("thing for sale", base, nav));
+        response.writeHead(302, { location: buyLink(storeSite, publicBase, item.kind, item.artist, item.album, item.n), "cache-control": "no-store", "referrer-policy": "no-referrer" });
+        response.end();
+        return;
+      }
       if (path === "/radio" || path === "/radio/") {
         const encrypted = (request.socket as { encrypted?: boolean }).encrypted === true;
         const entries = guideEntries({
@@ -3198,12 +3208,14 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
           return send(404, renderMissing("station", base, nav));
         }
         const built = web !== null && isFile(join(web, "station.html")) ? readFileSync(join(web, "station.html"), "utf8") : null;
-        const page = asRadioPage(built ?? STATION_PAGE_HTML, station, slug, base, nav);
+        // The built page carries the one ad; the inline fallback stays as it is.
+        const ads = built ? guideAds() : {};
+        const page = withPageAd(asRadioPage(built ?? STATION_PAGE_HTML, station, slug, base, nav), ads);
         response.writeHead(200, {
           "content-type": "text/html; charset=utf-8",
           "cache-control": "no-cache",
           // The inline page names its styles by hash; the header's is one more.
-          "content-security-policy": built ? STATION_APP_CSP : STATION_PAGE_CSP.replace("style-src ", `style-src 'sha256-${sha("sha256").update(NAV_STYLE).digest("base64")}' `),
+          "content-security-policy": built ? adCsp(STATION_APP_CSP, ads) : STATION_PAGE_CSP.replace("style-src ", `style-src 'sha256-${sha("sha256").update(NAV_STYLE).digest("base64")}' `),
           "referrer-policy": "strict-origin-when-cross-origin",
           "x-content-type-options": "nosniff",
         });
@@ -3263,11 +3275,12 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
     if (options.stations && STATION_PAGE.test(path) && (request.method === "GET" || request.method === "HEAD")) {
       // The built page plays in @profullstack/player; the inline one is for a
       // server started without the web build.
-      const built = web !== null && isFile(join(web, "station.html")) ? readFileSync(join(web, "station.html")) : null;
+      const ads = guideAds();
+      const built = web !== null && isFile(join(web, "station.html")) ? withPageAd(readFileSync(join(web, "station.html"), "utf8"), ads) : null;
       response.writeHead(200, {
         "content-type": "text/html; charset=utf-8",
         "cache-control": "no-cache",
-        "content-security-policy": built ? STATION_APP_CSP : STATION_PAGE_CSP,
+        "content-security-policy": built ? adCsp(STATION_APP_CSP, ads) : STATION_PAGE_CSP,
         "referrer-policy": "no-referrer",
         "x-content-type-options": "nosniff",
       });
@@ -3328,7 +3341,7 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
       const control = isPublicLabelPath(path) ? { allowed: false } : await controlOf();
       if (await handleLabelRoutes(request, response, path, {
         label: options.stations.label, canControl: control.allowed, json, readBody,
-        grants: storeGrants, site: storeSite, publicBase: options.stations.publicBase?.() ?? "",
+        grants: storeGrants, site: storeSite, publicBase: options.stations.publicBase?.() ?? "", ads: guideAds(),
       })) return;
     }
 

package/src/station-guide.ts

@@ -173,7 +173,7 @@ const GROUPS = ["rooms", "vod", "ai", "shared", "radio", "tv"] as const;
  * gateway that cannot run its script against this server (the Moshpit's
  * /n/<name>), and for a crawler. Everything from a station is escaped.
  */
-export function renderGuide(entries: GuideEntry[], apiBase = "", ads: GuideAds = {}, labelHref = ""): string {
+export function renderGuide(entries: GuideEntry[], apiBase = "", ads: GuideAds = {}, labelHref = "", home = false): string {
   const groupOf = (one: GuideEntry): string => one.group ?? (one.kind === "video" ? "tv" : "radio");
   const cards = (group: string): string => entries
     .filter((one) => groupOf(one) === group && /^https?:\/\//.test(one.page))
@@ -187,7 +187,8 @@ export function renderGuide(entries: GuideEntry[], apiBase = "", ads: GuideAds =
       .replace(`<div id="${group}" class="grid" aria-live="polite"></div>`, `<div id="${group}" class="grid" aria-live="polite">${made}</div>`);
   }
   if (ads.site) page = page.replace("</head>", `<script data-site="${escape(ads.site)}" src="${CRAWLPROOF}/stats.js" async></script>\n</head>`);
-  if (ads.slot) {
+  // A home page carries no ad (live.streaming's / is this guide); nixamp.com/guide is an inner page.
+  if (ads.slot && !home) {
     // One line by default: a 300x250 box above the stations pushed the guide itself off the first screen.
     const format = ads.format ?? "text_link";
     const slot = ads.slot;
@@ -274,6 +275,23 @@ export function guideCsp(ads: GuideAds = {}): string {
 
 export const GUIDE_CSP = guideCsp();
 
+/**
+ * The one ad an inner page carries -- a station, /radio, an artist, an album,
+ * /label, /vod, /watch -- and never a home page: a single text_link line at
+ * the top of its content, sized by attributes so a page whose CSP hashes its
+ * styles needs no new one. The page as it was without a slot.
+ */
+export function withPageAd(html: string, ads: GuideAds): string {
+  if (!ads.slot) return html;
+  const unit = `<div class="ad-unit ad-text_link"><iframe src="${CRAWLPROOF}/api/ads/frame?slot=${encodeURIComponent(ads.slot)}&amp;format=text_link" title="Advertisement" width="100%" height="40" frameborder="0" loading="lazy" referrerpolicy="strict-origin-when-cross-origin" sandbox="allow-scripts allow-popups allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation" scrolling="no"></iframe></div>`;
+  return html.replace(/<main\b[^>]*>/, (main) => `${main}\n${unit}`);
+}
+
+/** A page's CSP with room for that ad's frame. */
+export function adCsp(csp: string, ads: GuideAds): string {
+  return ads.slot ? `${csp}; frame-src 'self' ${CRAWLPROOF}` : csp;
+}
+
 
 /** crawlproof analytics and an ad on the guide: a project id (tracker data-site) and an ad slot. */
 export interface GuideAds {