nixamp 0.78.5 → 0.80.1

package/src/nixamp-link-api.ts

@@ -10,7 +10,8 @@
  *
  * All five want the site's own session: the person, signed in here. What
  * they hold on nixamp's side is a client token, and it never leaves the
- * server -- the page only ever learns a handle and a list of streams.
+ * server -- the page only ever learns a handle and a list of streams. The
+ * token is kept in memory only, for its hour; never in the database.
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
 import { tokenFrom, type Accounts } from "./accounts.ts";
@@ -77,6 +78,9 @@ function landing(home: string, outcome: string, reason = ""): string {
   return `${url.pathname}${url.search}${url.hash || "#settings"}`;
 }
 
+/** nixamp.com refused the token held in memory. */
+export class StaleToken extends Error {}
+
 /**
  * Every server the nixamp account remembers, asked what it is doing.
  *
@@ -92,7 +96,8 @@ export async function streamsFor(token: string, issuer: string, pageSite: string
     headers: { authorization: `Bearer ${token}`, accept: "application/json" },
     signal: AbortSignal.timeout(8000),
   });
-  if (!answer.ok) throw new Error(answer.status === 401 ? "nixamp.com no longer accepts this connection" : `nixamp.com answered ${answer.status}`);
+  if (answer.status === 401) throw new StaleToken("nixamp.com no longer accepts this connection; refresh from nixamp");
+  if (!answer.ok) throw new Error(`nixamp.com answered ${answer.status}`);
   const body = (await answer.json().catch(() => ({}))) as { servers?: typeof servers };
   servers = Array.isArray(body.servers) ? body.servers : [];
   const page = pageSite.replace(/\/+$/, "");
@@ -210,10 +215,17 @@ export async function handleNixampLinkApi(
   // /api/v1/nixamp/streams
   if (request.method !== "GET") { json(response, 405, { error: "GET only" }); return true; }
   const token = await options.links.accessToken(account.id);
-  if (token === "") { json(response, 409, { error: "connect your nixamp account first", connected: false }); return true; }
+  if (token === "") {
+    const { connected } = await options.links.of(account.id);
+    json(response, 409, connected
+      ? { error: "refresh from nixamp to see your streams", connected: true, refresh: true }
+      : { error: "connect your nixamp account first", connected: false });
+    return true;
+  }
   try {
     json(response, 200, { servers: await streamsFor(token, options.issuer, options.issuer, options.fetcher ?? fetch) });
   } catch (error) {
+    if (error instanceof StaleToken) options.links.drop(account.id);
     json(response, 502, { error: (error as Error).message });
   }
   return true;

package/src/nixamp-link-types.ts

@@ -6,6 +6,8 @@
 /** The connection as the account holder sees it. Never the tokens. */
 export interface LinkView {
   connected: boolean;
+  /** A token is in memory right now, so the streams can be read without asking nixamp.com again. */
+  ready: boolean;
   handle: string;
   nixampUserId: string;
   scope: string;

package/src/nixamp-link.ts

@@ -9,11 +9,17 @@
  * broadcast backend a host may plug in, and plugging it in is a choice.
  *
  * So the school is an OAuth 2.1 client of nixamp.com, the way bittorrented
- * is: PKCE, a consent page on nixamp.com, a refresh token kept here against
- * the school account, and a grant the person can withdraw from either side.
- * What the connection buys is the list of the servers they run on nixamp and
- * what is live on them, so "go live" is a pick from a list rather than a
- * link pasted from a terminal.
+ * is: PKCE and a consent page on nixamp.com. What the connection buys is the
+ * list of the servers they run on nixamp and what is live on them, so "go
+ * live" is a pick from a list rather than a link pasted from a terminal.
+ *
+ * No token is kept at rest (fleet rule, 2026-10-28: nothing a user gave us
+ * may be readable by root on the box). The row here is the identity link
+ * only: which nixamp account, as which handle. The access token lives in
+ * this process's memory until it expires (an hour) and is never written to
+ * the database; no refresh token is asked for. When it is gone (expired, or
+ * the server restarted) the person, who is present to go live, clicks
+ * "Refresh from nixamp" and says yes once more on nixamp.com.
  *
  * The client half of OAuth is behind an interface, because the server on the
  * other end is this same program in production and a stub in a test.
@@ -32,16 +38,16 @@ const SCHEMA = `
     nixamp_user_id    TEXT NOT NULL,
     handle            TEXT NOT NULL DEFAULT '',
     scope             TEXT NOT NULL DEFAULT '',
-    access_token      TEXT NOT NULL DEFAULT '',
-    access_expires_at TIMESTAMPTZ,
-    refresh_token     TEXT NOT NULL DEFAULT '',
     created_at        TIMESTAMPTZ NOT NULL DEFAULT NOW(),
     updated_at        TIMESTAMPTZ NOT NULL DEFAULT NOW()
   );
 `;
 
-/** What the school asks nixamp for: who you are, your servers, and to keep it. */
-export const LINK_SCOPE = "profile streams offline_access";
+/**
+ * What the school asks nixamp for: who you are and your servers. Not
+ * offline_access: a refresh token would have to be kept somewhere.
+ */
+export const LINK_SCOPE = "profile streams";
 
 /** How long before an access token's end it is treated as spent. */
 const EARLY_MS = 60_000;
@@ -67,7 +73,7 @@ export interface OAuthExchange {
   revoke(token: string): Promise<void>;
 }
 
-export const NOT_CONNECTED: LinkView = { connected: false, handle: "", nixampUserId: "", scope: "", since: null };
+export const NOT_CONNECTED: LinkView = { connected: false, ready: false, handle: "", nixampUserId: "", scope: "", since: null };
 
 /** The real thing: nixamp.com over HTTP. */
 export function nixampExchange(issuer: string, clientId: string, fetcher: typeof fetch = fetch): OAuthExchange {
@@ -134,10 +140,11 @@ function asTime(value: unknown): number | null {
   return null;
 }
 
-function view(row: Record<string, unknown> | undefined): LinkView {
+function view(row: Record<string, unknown> | undefined, ready: boolean): LinkView {
   if (!row) return { ...NOT_CONNECTED };
   return {
     connected: true,
+    ready,
     handle: String(row["handle"] ?? ""),
     nixampUserId: String(row["nixamp_user_id"] ?? ""),
     scope: String(row["scope"] ?? ""),
@@ -147,6 +154,8 @@ function view(row: Record<string, unknown> | undefined): LinkView {
 
 export class NixampLinks {
   private ready: Promise<void> | null = null;
+  /** Access tokens, in memory only, until they end. Never in the database. */
+  private readonly live = new Map<string, { token: string; until: number }>();
 
   constructor(
     private readonly db: Queryable,
@@ -158,10 +167,32 @@ export class NixampLinks {
   ) {}
 
   private async ensure(): Promise<void> {
-    this.ready ??= this.db.query(SCHEMA).then(() => undefined);
+    this.ready ??= this.db.query(SCHEMA).then(() => this.forgetLegacyTokens());
     await this.ready;
   }
 
+  /**
+   * Before 0.79 the tokens were kept in this table in plain text. Hand each
+   * refresh token back to nixamp.com (so no grant is left standing there),
+   * then drop the columns. The identity link stays; the person clicks
+   * "Refresh from nixamp" the next time they go live.
+   */
+  private async forgetLegacyTokens(): Promise<void> {
+    const { rows: columns } = await this.db.query(
+      `SELECT column_name FROM information_schema.columns
+        WHERE table_schema = current_schema() AND table_name = '${TABLE}' AND column_name IN ('access_token', 'refresh_token', 'access_expires_at')`,
+    );
+    if (columns.length === 0) return;
+    const names = new Set(columns.map((row) => String(row["column_name"])));
+    if (names.has("refresh_token")) {
+      const { rows } = await this.db.query(`SELECT refresh_token FROM ${TABLE} WHERE refresh_token <> ''`);
+      for (const row of rows) await this.exchange.revoke(String(row["refresh_token"] ?? "")).catch(() => undefined);
+    }
+    await this.db.query(
+      `ALTER TABLE ${TABLE} DROP COLUMN IF EXISTS access_token, DROP COLUMN IF EXISTS refresh_token, DROP COLUMN IF EXISTS access_expires_at`,
+    );
+  }
+
   /**
    * The first leg: where to send the browser, and the two secrets the
    * callback must bring back. The state is the CSRF check, the verifier is
@@ -182,7 +213,7 @@ export class NixampLinks {
     return { url, state, verifier };
   }
 
-  /** The second leg: the code becomes tokens, the tokens say whose, and that is kept. */
+  /** The second leg: the code becomes a token, the token says whose; who is kept, the token only in memory. */
   async finish(userId: string, leg: { code: string; verifier: string; redirectUri: string }): Promise<LinkView> {
     const grant = await this.exchange.token(new URLSearchParams({
       grant_type: "authorization_code",
@@ -190,22 +221,20 @@ export class NixampLinks {
       code_verifier: leg.verifier,
       redirect_uri: leg.redirectUri,
     }));
+    // Asked for none, but a refresh token sent anyway is handed straight back.
+    if (grant.refresh_token) await this.exchange.revoke(grant.refresh_token).catch(() => undefined);
     const who = await this.exchange.userinfo(grant.access_token);
     await this.ensure();
     await this.db.query(
-      `INSERT INTO ${TABLE} (user_id, nixamp_user_id, handle, scope, access_token, access_expires_at, refresh_token)
-       VALUES ($1, $2, $3, $4, $5, $6, $7)
+      `INSERT INTO ${TABLE} (user_id, nixamp_user_id, handle, scope)
+       VALUES ($1, $2, $3, $4)
        ON CONFLICT (user_id) DO UPDATE SET nixamp_user_id = EXCLUDED.nixamp_user_id, handle = EXCLUDED.handle,
-         scope = EXCLUDED.scope, access_token = EXCLUDED.access_token, access_expires_at = EXCLUDED.access_expires_at,
-         refresh_token = EXCLUDED.refresh_token, updated_at = NOW()`,
-      [userId, who.sub, who.handle ?? "", grant.scope ?? LINK_SCOPE, grant.access_token, this.expiry(grant), grant.refresh_token ?? ""],
+         scope = EXCLUDED.scope, updated_at = NOW()`,
+      [userId, who.sub, who.handle ?? "", grant.scope ?? LINK_SCOPE],
     );
-    return this.of(userId);
-  }
-
-  private expiry(grant: TokenGrant): Date {
     const seconds = typeof grant.expires_in === "number" && grant.expires_in > 0 ? grant.expires_in : 3600;
-    return new Date(this.now() + seconds * 1000);
+    this.live.set(userId, { token: grant.access_token, until: this.now() + seconds * 1000 });
+    return this.of(userId);
   }
 
   async of(userId: string): Promise<LinkView> {
@@ -214,52 +243,39 @@ export class NixampLinks {
       `SELECT nixamp_user_id, handle, scope, created_at FROM ${TABLE} WHERE user_id = $1`,
       [userId],
     );
-    return view(rows[0]);
+    return view(rows[0], rows[0] !== undefined && this.held(userId) !== "");
+  }
+
+  private held(userId: string): string {
+    const kept = this.live.get(userId);
+    if (!kept) return "";
+    if (kept.until - this.now() > EARLY_MS) return kept.token;
+    this.live.delete(userId);
+    return "";
   }
 
   /**
-   * A token good for a call right now, refreshed when the one kept is about
-   * to end. "" when there is no connection, or the refresh was refused --
-   * which is what a grant withdrawn on nixamp.com looks like from here, and
-   * the row is dropped so the settings page says so too.
+   * A token good for a call right now, or "" when there is none in memory:
+   * not connected, expired, or the server restarted since. The page then
+   * offers "Refresh from nixamp".
    */
   async accessToken(userId: string): Promise<string> {
     await this.ensure();
-    const { rows } = await this.db.query(
-      `SELECT access_token, access_expires_at, refresh_token FROM ${TABLE} WHERE user_id = $1`,
-      [userId],
-    );
-    const row = rows[0];
-    if (!row) return "";
-    const access = String(row["access_token"] ?? "");
-    const until = asTime(row["access_expires_at"]);
-    if (access !== "" && until !== null && until - this.now() > EARLY_MS) return access;
-    const refresh = String(row["refresh_token"] ?? "");
-    if (refresh === "") return "";
-    let grant: TokenGrant;
-    try {
-      grant = await this.exchange.token(new URLSearchParams({ grant_type: "refresh_token", refresh_token: refresh }));
-    } catch {
-      await this.db.query(`DELETE FROM ${TABLE} WHERE user_id = $1`, [userId]);
-      return "";
-    }
-    await this.db.query(
-      `UPDATE ${TABLE} SET access_token = $2, access_expires_at = $3, refresh_token = $4, updated_at = NOW() WHERE user_id = $1`,
-      [userId, grant.access_token, this.expiry(grant), grant.refresh_token ?? refresh],
-    );
-    return grant.access_token;
+    return this.held(userId);
+  }
+
+  /** nixamp.com refused the token: forget it, so the page asks again. */
+  drop(userId: string): void {
+    this.live.delete(userId);
   }
 
-  /** Withdraw the grant on nixamp.com and forget it here. True when there was one. */
+  /** Withdraw the token on nixamp.com and forget the connection here. True when there was one. */
   async disconnect(userId: string): Promise<boolean> {
     await this.ensure();
-    const { rows } = await this.db.query(`SELECT refresh_token, access_token FROM ${TABLE} WHERE user_id = $1`, [userId]);
-    const row = rows[0];
-    if (!row) return false;
-    const refresh = String(row["refresh_token"] ?? "");
-    const access = String(row["access_token"] ?? "");
-    await this.exchange.revoke(refresh !== "" ? refresh : access);
-    await this.db.query(`DELETE FROM ${TABLE} WHERE user_id = $1`, [userId]);
-    return true;
+    const token = this.held(userId);
+    this.live.delete(userId);
+    if (token !== "") await this.exchange.revoke(token).catch(() => undefined);
+    const { rows } = await this.db.query(`DELETE FROM ${TABLE} WHERE user_id = $1 RETURNING user_id`, [userId]);
+    return rows.length > 0;
   }
 }

package/src/oauth.ts

@@ -48,6 +48,7 @@ export interface Identity {
    * to an existing account and is never the new account's address.
    */
   verified?: boolean;
+  openprofileUrl?: string;
 }
 
 /**
@@ -73,7 +74,14 @@ export function coinpayProvider(clientId: string, clientSecret: string, base = "
       // Never verified, whatever the answer says: CoinPay sends no mail to the
       // address it reports, so anybody can register a CoinPay account under
       // someone else's address. Its `sub` is the whole identity.
-      return { provider: "coinpay", subject, email, verified: false };
+      return {
+        provider: "coinpay",
+        subject,
+        email,
+        verified: false,
+        // Only when CoinPay names one: an absent field stays absent, not `undefined`.
+        ...(typeof who["openprofile_url"] === "string" ? { openprofileUrl: who["openprofile_url"] } : {}),
+      };
     },
   };
 }

package/src/server.ts

@@ -47,7 +47,7 @@ import { anonymousHandle, Handles } from "./handles.ts";
 import { OpenDirs } from "./opendirs.ts";
 import { Servers } from "./servers.ts";
 import { AccountProfiles, hostCard, PHOTO_LIMIT } from "./profiles.ts";
-import { createProfileHandlers, type ProfileStore, saveSignupProfile, validateProfile } from "@profullstack/profile";
+import { createProfileHandlers, type ProfileStore, saveOpenProfileContact, saveSignupProfile, validateProfile } from "@profullstack/profile";
 import { SIGNUP_PROFILE_FIELDS, signupProfiles } from "./signup-profiles.ts";
 import { NixampLinks, nixampExchange } from "./nixamp-link.ts";
 import { handleNixampLinkApi, nixampLinkPath } from "./nixamp-link-api.ts";
@@ -86,7 +86,7 @@ import { handleAiRoutes, isPublicSharePath } from "./ai-routes.ts";
 import { AiLabel, VeoUnavailable } from "./ai-label.ts";
 import { buyLink, handleLabelRoutes, isPublicLabelPath } from "./label-routes.ts";
 import { GrantVerifier, MusicStore, PRICES } from "./music-store.ts";
-import { handleMusicRoutes, isMusicPath, MusicHub, musicPageFor, serverId } from "./music-hub.ts";
+import { handleMusicRoutes, isMusicPath, MusicHub, musicPageFor, parseMoved, serverId } from "./music-hub.ts";
 import { fileLedger, pgLedger, VeoBudgetError, VeoStudio } from "./veo-studio.ts";
 import { KnownServers } from "./known-servers.ts";
 import { handleStoreRoutes, isStorePath } from "./store-routes.ts";
@@ -102,7 +102,7 @@ import { aiKey } from "./ai-keys.ts";
 import { STATION_APP_CSP, STATION_PAGE, STATION_PAGE_CSP, STATION_PAGE_HTML, WATCH_APP_CSP } from "./station-page.ts";
 import { handleRoomProxy, handleRooms, isRoomPath, ROOM_PAGE, roomAddress, RoomProbe, roomEntries, roomSlugOf, roomSlugs, RoomStore, watchBase } from "./guide-rooms.ts";
 import { handleVods, VodProbe, vodEntries, VodStore, vodView } from "./guide-vods.ts";
-import { withPitFooter } from "./pit-footer.ts";
+import { withUniversalFooter } from "./universal-footer.ts";
 import { handleFollowPage } from "./follow-page.ts";
 import {
   asRadioPage, buildCatalogue, isRadioPath, NAV_STYLE, RADIO_ALBUM, RADIO_ARTIST, RADIO_CSP, RADIO_STATION, RADIO_SUB, RADIO_BUY, radioBuyLink, radioBuyQuery, radioNav, radioPeers, radioRewriter,
@@ -138,6 +138,7 @@ import { Durable } from "./durable.ts";
 import { notifyAll, resendEmail, webPush, type Notification } from "./notify.ts";
 import { vapidKeysFromEnv, vapidPublicKeyResponse, type VapidKeys } from "@profullstack/notifications/server";
 import { inviteSubject, inviteText, isEmail, isPhone, watchLink } from "./invite.ts";
+import { c0mputeKey } from "./ai-text.ts";
 import { EventWriter } from "./event-writer.ts";
 import { handleLiveApi } from "./live-api.ts";
 import { LiveEvents, eventStructuredData, isTicketed, type LiveEvent } from "./live-events.ts";
@@ -4991,7 +4992,7 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
           try {
             bytes = await readBytes(request, PHOTO_LIMIT);
           } catch {
-            json(response, 413, { error: "a photo may be up to 1 MB" });
+            json(response, 413, { error: "a photo may be up to 10 MB" });
             return;
           }
           const kept = await profiles.setPhoto(who.id, bytes);
@@ -5251,6 +5252,14 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
         return;
       }
 
+      if (identity.provider === "coinpay" && identity.openprofileUrl && options.signupProfiles) {
+        try {
+          await saveOpenProfileContact(options.signupProfiles, String(result.account.id), identity.openprofileUrl);
+        } catch (e) {
+          console.warn("[coinpay] OpenProfile import skipped:", e instanceof Error ? e.message : e);
+        }
+      }
+
       if (pending.userCode) {
         // This round trip was approving a terminal. The browser is finished;
         // the session belongs to whatever is polling.
@@ -7112,7 +7121,7 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
         // somewhere usable, but it says 404 so it is never indexed.
         const shell = readIfPossible(join(web, "index.html"));
         if (shell !== null) {
-          html(response, 404, requestHost === "nixamp.com" ? withPitFooter(shell) : shell);
+          html(response, 404, requestHost === "nixamp.com" ? withUniversalFooter(shell) : shell);
           return;
         }
       }
@@ -7154,17 +7163,17 @@ export function createHandler(engine: Engine, options: HandlerOptions) {
           }
           const shell = subject ? readIfPossible(file) : null;
           if (subject && shell !== null) {
-            html(response, 200, requestHost === "nixamp.com" ? withPitFooter(joinDocument(shell, subject, eventSite ?? "https://nixamp.com")) : joinDocument(shell, subject, eventSite ?? "https://nixamp.com"));
+            html(response, 200, requestHost === "nixamp.com" ? withUniversalFooter(joinDocument(shell, subject, eventSite ?? "https://nixamp.com")) : joinDocument(shell, subject, eventSite ?? "https://nixamp.com"));
             return;
           }
         }
         // nixamp.com's own pages (the app shell, the radio console) carry the
-        // pit.world global footer, appended on the way out. A local install
+        // shared Profullstack footer, appended on the way out. A local install
         // serving the same files on its own host is left alone.
         if (requestHost === "nixamp.com" && file.endsWith(".html") && (request.method === "GET" || request.method === "HEAD")) {
           const shell = readIfPossible(file);
           if (shell !== null) {
-            const page = withPitFooter(shell);
+            const page = withUniversalFooter(shell);
             response.writeHead(200, {
               ...CORS,
               "content-type": "text/html; charset=utf-8",
@@ -8212,7 +8221,7 @@ export async function serve(argv: string[], version = "0.1.0"): Promise<void> {
     return [...new Set([...guidePeers(), ...listed, ...(knownServers?.list().map((one) => one.base) ?? [])])];
   };
   // nixamp.com/music: every server's label in one catalogue (music-hub.ts).
-  const musicHub = options.directory ? new MusicHub({ peers: musicServers }) : undefined;
+  const musicHub = options.directory ? new MusicHub({ peers: musicServers, moved: parseMoved(process.env["NIXAMP_MUSIC_MOVED"]) }) : undefined;
   const musicStore = supportPayments && supportPayments.enabled && pool && jwtSecret ? new MusicStore({
     db: pool as unknown as import("./support.ts").Db,
     support: supportPayments,
@@ -8882,7 +8891,7 @@ export async function serve(argv: string[], version = "0.1.0"): Promise<void> {
     ...(favorites ? { favorites } : {}),
     ...(settingsSync ? { settingsSync } : {}),
     ...(events ? { events, eventWriter: new EventWriter({
-      openaiKey: process.env["OPENAI_API_KEY"], anthropicKey: process.env["ANTHROPIC_API_KEY"],
+      c0mputeKey: c0mputeKey(), openaiKey: process.env["OPENAI_API_KEY"], anthropicKey: process.env["ANTHROPIC_API_KEY"],
       openaiModel: process.env["NIXAMP_WRITER_OPENAI_MODEL"], claudeModel: process.env["NIXAMP_WRITER_CLAUDE_MODEL"],
     }) } : {}),
     ...(events && follows ? { onEventUpdated: (updated: LiveEvent, previous: LiveEvent) => {

package/src/station-cli.ts

@@ -518,6 +518,29 @@ async function labelCommand(argv: string[], call: Call, show: Show): Promise<num
         return `Label: ${String(settings["holder"])}, ${String(settings["songsPerAlbum"])} songs of ${String(settings["songSeconds"])} s an album, every ${String(settings["everyDays"])} days, at most ${Number(settings["monthlySeconds"]) === 0 ? "unlimited" : `${String(settings["monthlySeconds"])} s`} a month${settings["enabled"] ? "" : " (off)"}.`;
       });
     }
+    case "adopt": {
+      // Albums already under the label's folder (copied from another server) back on the label.
+      // --keys FILE: {"artists": {"<name>": "<old key>"}, "albums": {"<artist key>/<album title>": "<old key>"}}.
+      const file = flag(argv, "--keys");
+      let keys: Record<string, unknown> = {};
+      if (file) {
+        try {
+          keys = JSON.parse((await import("node:fs")).readFileSync(file, "utf8")) as Record<string, unknown>;
+        } catch (error) {
+          console.error(`nixamp station label adopt: could not read ${file}: ${(error as Error).message}`);
+          return 2;
+        }
+      }
+      const body = { keys: keys["artists"] ?? {}, albums: keys["albums"] ?? {}, ...(has(argv, "--off") ? { enabled: false } : {}) };
+      return show(await call("POST", "/api/v1/stations/label/adopt", body), (answer) => {
+        const done = answer["adopted"] as Record<string, unknown>;
+        const skipped = (done["skipped"] as string[] | undefined) ?? [];
+        return [
+          `Adopted ${String(done["artists"])} artists, ${String(done["albums"])} albums, ${String(done["songs"])} songs and ${String(done["videos"])} filmed videos; ${String(done["oldKeys"])} artists kept their old keys.`,
+          ...skipped.map((one) => `  skipped ${one}`),
+        ].join("\n");
+      });
+    }
     case "run":
       return show(await call("POST", "/api/v1/stations/label/run", {}), (body) => body["waiting"] ? `Nothing to record now: ${String(body["waiting"])}.` : "Recording whatever is due.");
     case "resume":

package/src/station-usage.ts

@@ -32,7 +32,7 @@ export const USAGE = `nixamp station — make a collection into a station
   nixamp station ai remove KEY [--files]
   nixamp station ai budget SECONDS           seconds of music a month across AI stations (0: no cap)
   nixamp station ai resume                   after the provider ran out of credit
-  nixamp station ai key NAME                 ELEVENLABS_API_KEY | GEMINI_API_KEY | OPENAI_API_KEY | ANTHROPIC_API_KEY,
+  nixamp station ai key NAME                 ELEVENLABS_API_KEY | C0MPUTE_API_KEY | GEMINI_API_KEY | OPENAI_API_KEY | ANTHROPIC_API_KEY,
                                              NIXAMP_OPENAI_URL | NIXAMP_OPENAI_MODEL (an OpenAI-compatible stand-in),
                                              NIXAMP_MUSIC_MODEL (music_v1|music_v2|music_v2_5), from stdin
 
@@ -51,6 +51,9 @@ export const USAGE = `nixamp station — make a collection into a station
                               [--videos|--no-videos]   a music video per song and a TV station of them
                               [--reset-day 21]   the day the monthly budget renews (the provider's billing day)
                               [--veo|--no-veo] [--veo-shots 4]   filmed Veo shots of the band in each album's single (nixamp.com caps the month)
+  nixamp station label adopt [--keys FILE] [--off]   albums already in the label's folder (copied from another
+                                             server) back on the label; FILE keeps old keys: {"artists": {NAME: KEY},
+                                             "albums": {"ARTISTKEY/TITLE": KEY}}
   nixamp station label run                   record whatever is due now
   nixamp station label resume                after the provider ran out of credit
 

package/src/universal-footer.ts

@@ -0,0 +1,41 @@
+import { footerHtml, footerHtmlSync } from "@profullstack/footer";
+
+const OPTIONS = {
+  site: "https://nixamp.com/",
+  since: 2026,
+  tagline: "MIT License",
+  links: [
+    { label: "Code", href: "https://github.com/profullstack/nixamp" },
+    { label: "r/nixamp", href: "https://www.reddit.com/r/nixamp" },
+  ],
+  builtIndieHref: "https://built.indie.pit.world/for?site=https://nixamp.com/",
+  pwamartHref: "https://pwamart.com/for?site=https://nixamp.com/",
+};
+
+const REFRESH_MS = 15 * 60 * 1000;
+let html = footerHtmlSync(OPTIONS);
+let fetchedAt = 0;
+let inflight: Promise<void> | null = null;
+
+function refresh(): Promise<void> {
+  inflight ??= footerHtml(OPTIONS)
+    .then((value) => {
+      html = value;
+      fetchedAt = Date.now();
+    })
+    .catch(() => {
+      fetchedAt = Date.now() - REFRESH_MS + 60_000;
+    })
+    .finally(() => {
+      inflight = null;
+    });
+  return inflight;
+}
+
+/** Add the shared footer to Nixamp pages while avoiding a second copy in its app shell. */
+export function withUniversalFooter(page: string): string {
+  if (Date.now() - fetchedAt > REFRESH_MS) void refresh();
+  if (page.includes("data-pfs-footer=")) return page;
+  const at = page.lastIndexOf("</body>");
+  return at < 0 ? page : page.slice(0, at) + html + page.slice(at);
+}

package/web/dist/assets/{ar-CqVLKLkR.js → ar-C5qVRZh9.js}

@@ -1 +1 @@
-import{t as e}from"./main-Q8gHrr9u.js";var t={...e,"No parties live right now.":`لا توجد جلسات مباشرة الآن.`,"Could not refresh parties.":`تعذر تحديث الجلسات.`,"Pick a server in the directory, or paste its link here.":`اختر خادمًا من الدليل أو الصق رابطه هنا.`,"Interface language":`لغة الواجهة`,Language:`اللغة`,"Translation language":`لغة الترجمة`,"Original (auto-detect)":`الأصل (اكتشاف تلقائي)`,Play:`تشغيل`,Pause:`إيقاف مؤقت`,Stop:`إيقاف`,Next:`التالي`,Previous:`السابق`,Select:`اختيار`,"Next/Prev":`التالي/السابق`,Quit:`خروج`,"Now Playing":`قيد التشغيل`,"Spectrum Analyser":`محلل الطيف`,Playlist:`قائمة التشغيل`,Files:`الملفات`,"Open files":`فتح ملفات`,"Open folder":`فتح مجلد`,"Add to library":`إضافة إلى المكتبة`,"Replace playlist":`استبدال قائمة التشغيل`,Filter:`تصفية`,Search:`بحث`,"Nothing loaded.":`لم يُحمّل أي محتوى.`,"Empty.":`فارغ.`,"Loading…":`جارٍ التحميل…`,"Connecting…":`جارٍ الاتصال…`,Connected:`متصل`,"Not connected":`غير متصل`,"No source":`لا يوجد مصدر`,Playing:`يعمل`,Stopped:`متوقف`,Volume:`مستوى الصوت`,Seek:`موضع التشغيل`,"Full screen":`ملء الشاشة`,Download:`تنزيل`,Share:`مشاركة`,Copy:`نسخ`,"Copy link":`نسخ الرابط`,Copied:`تم النسخ`,Save:`حفظ`,Cancel:`إلغاء`,Close:`إغلاق`,Remove:`إزالة`,Delete:`حذف`,Edit:`تعديل`,Add:`إضافة`,Send:`إرسال`,Retry:`إعادة المحاولة`,Back:`رجوع`,"Next page":`الصفحة التالية`,"Previous page":`الصفحة السابقة`,"Show more":`عرض المزيد`,Panels:`اللوحات`,"Reset layout":`إعادة ضبط التخطيط`,Show:`إظهار`,Hide:`إخفاء`,Collapse:`طي`,Expand:`توسيع`,"Move up":`نقل لأعلى`,"Move down":`نقل لأسفل`,Install:`تثبيت`,"TV mode":`وضع التلفاز`,On:`مفعّل`,Off:`معطّل`,Account:`الحساب`,"Sign in":`تسجيل الدخول`,"Sign out":`تسجيل الخروج`,"Create account":`إنشاء حساب`,Email:`البريد الإلكتروني`,Password:`كلمة المرور`,"Forgot password?":`نسيت كلمة المرور؟`,"Welcome back":`مرحبًا بعودتك`,Profile:`الملف الشخصي`,Handle:`اسم المستخدم`,"Your servers":`خوادمك`,Server:`الخادم`,Connect:`اتصال`,Disconnect:`قطع الاتصال`,Directory:`الدليل`,Favourites:`المفضلة`,Follow:`متابعة`,Unfollow:`إلغاء المتابعة`,Notifications:`الإشعارات`,"Phone number":`رقم الهاتف`,"Save number":`حفظ الرقم`,Transcript:`النص المفرغ`,Captions:`الترجمة النصية`,"Translate audio":`ترجمة الصوت`,"Audio language":`لغة الصوت`,"Audio options":`خيارات الصوت`,"Keep background sound":`الاحتفاظ بأصوات الخلفية`,"Background level":`مستوى صوت الخلفية`,"Speaker voices":`أصوات المتحدثين`,"Any voice":`أي صوت`,"Male voice":`صوت رجالي`,"Female voice":`صوت نسائي`,"Original audio.":`الصوت الأصلي.`,"Buy translated audio":`شراء الصوت المترجم`,"Audio credit":`رصيد الصوت`,"Buy pass":`شراء تصريح`,Pass:`تصريح`,"Pay with":`الدفع باستخدام`,"Check payment":`التحقق من الدفع`,"Open checkout":`الانتقال للدفع`,"Free sessions":`جلسات مجانية`,"Usage rates and expiry":`الأسعار ومدة الصلاحية`,Catalogs:`الكتالوجات`,"Add catalog":`إضافة كتالوج`,"Catalog name":`اسم الكتالوج`,Link:`الرابط`,"Play link":`تشغيل الرابط`,"Go live":`بدء بث مباشر`,Publish:`نشر`,Listen:`استماع`,"Live now":`مباشر الآن`,Upcoming:`قريبًا`,Parties:`حفلات المشاهدة`,"Join party":`الانضمام للحفلة`,"Invite code":`رمز الدعوة`,Invite:`دعوة`,Chat:`الدردشة`,"Chat message":`رسالة دردشة`,People:`الأشخاص`,Speaker:`متحدث`,Speakers:`المتحدثون`,Listener:`مستمع`,Moderator:`مشرف`,"Raise hand":`رفع اليد`,"Hand raises":`الأيدي المرفوعة`,Questions:`الأسئلة`,Resources:`الموارد`,Replay:`إعادة العرض`,Schedule:`الجدول`,Event:`الفعالية`,Host:`المضيف`,About:`حول`,Stage:`المنصة`,Title:`العنوان`,Description:`الوصف`,Topic:`الموضوع`,Public:`عام`,"Anyone with the link":`أي شخص لديه الرابط`,"Invited people":`الأشخاص المدعوون`,"Who can join":`من يمكنه الانضمام`,"Date and time":`التاريخ والوقت`,"Expected length":`المدة المتوقعة`,Repeat:`تكرار`,"Does not repeat":`لا يتكرر`,"Every day":`كل يوم`,"Every week":`كل أسبوع`,Homepage:`الموقع الإلكتروني`,"Host name":`اسم المضيف`,"Profile photo URL":`رابط صورة الملف الشخصي`,"Broadcast link":`رابط البث`,"Edit event":`تعديل الفعالية`,"Save changes":`حفظ التغييرات`,"Create live":`إنشاء بث مباشر`,"Schedule class":`جدولة درس`,"Start class":`بدء الدرس`,"End event":`إنهاء الفعالية`,"End session":`إنهاء الجلسة`,"Session ended":`انتهت الجلسة`,"Event ended":`انتهت الفعالية`,Cancelled:`ملغاة`,"Replay available":`إعادة العرض متاحة`,Join:`انضمام`,"Create invite":`إنشاء دعوة`,"Invite as":`الدعوة بصفة`,"Watch now":`شاهد الآن`,"Start a room":`إنشاء غرفة`,"Recent replays":`إعادات العرض الأخيرة`,"Your account":`حسابك`,"Write with AI":`الكتابة بالذكاء الاصطناعي`,"Suggested title":`العنوان المقترح`,"Suggested description":`الوصف المقترح`,"Suggested topic":`الموضوع المقترح`,"Use these details":`استخدام هذه التفاصيل`,"Learn something live.":`تعلّم شيئًا مباشرة.`,"Screen share":`مشاركة الشاشة`,"Upload and broadcast":`رفع وبث`,Help:`مساعدة`,"Reload Player":`إعادة تحميل المشغل`,"Copy Bundled CLI Path":`نسخ مسار أداة سطر الأوامر المضمنة`,"Developer tools":`أدوات المطور`,Undo:`تراجع`,Redo:`إعادة`,Cut:`قص`,Paste:`لصق`,"Select all":`تحديد الكل`,Status:`الحالة`,"Activity log":`سجل النشاط`,Admin:`الإدارة`,"Playback controls":`عناصر التحكم بالتشغيل`,"Tracks and folders":`المقاطع والمجلدات`,"Original-language captions.":`ترجمة نصية باللغة الأصلية.`,"Skip to playback controls":`الانتقال إلى عناصر التحكم بالتشغيل`,"Skip to playlist":`الانتقال إلى قائمة التشغيل`,"Skip to transcript and translated audio":`الانتقال إلى النص المفرغ والصوت المترجم`};export{t as default};
+import{t as e}from"./main-zuI3sOLC.js";var t={...e,"No parties live right now.":`لا توجد جلسات مباشرة الآن.`,"Could not refresh parties.":`تعذر تحديث الجلسات.`,"Pick a server in the directory, or paste its link here.":`اختر خادمًا من الدليل أو الصق رابطه هنا.`,"Interface language":`لغة الواجهة`,Language:`اللغة`,"Translation language":`لغة الترجمة`,"Original (auto-detect)":`الأصل (اكتشاف تلقائي)`,Play:`تشغيل`,Pause:`إيقاف مؤقت`,Stop:`إيقاف`,Next:`التالي`,Previous:`السابق`,Select:`اختيار`,"Next/Prev":`التالي/السابق`,Quit:`خروج`,"Now Playing":`قيد التشغيل`,"Spectrum Analyser":`محلل الطيف`,Playlist:`قائمة التشغيل`,Files:`الملفات`,"Open files":`فتح ملفات`,"Open folder":`فتح مجلد`,"Add to library":`إضافة إلى المكتبة`,"Replace playlist":`استبدال قائمة التشغيل`,Filter:`تصفية`,Search:`بحث`,"Nothing loaded.":`لم يُحمّل أي محتوى.`,"Empty.":`فارغ.`,"Loading…":`جارٍ التحميل…`,"Connecting…":`جارٍ الاتصال…`,Connected:`متصل`,"Not connected":`غير متصل`,"No source":`لا يوجد مصدر`,Playing:`يعمل`,Stopped:`متوقف`,Volume:`مستوى الصوت`,Seek:`موضع التشغيل`,"Full screen":`ملء الشاشة`,Download:`تنزيل`,Share:`مشاركة`,Copy:`نسخ`,"Copy link":`نسخ الرابط`,Copied:`تم النسخ`,Save:`حفظ`,Cancel:`إلغاء`,Close:`إغلاق`,Remove:`إزالة`,Delete:`حذف`,Edit:`تعديل`,Add:`إضافة`,Send:`إرسال`,Retry:`إعادة المحاولة`,Back:`رجوع`,"Next page":`الصفحة التالية`,"Previous page":`الصفحة السابقة`,"Show more":`عرض المزيد`,Panels:`اللوحات`,"Reset layout":`إعادة ضبط التخطيط`,Show:`إظهار`,Hide:`إخفاء`,Collapse:`طي`,Expand:`توسيع`,"Move up":`نقل لأعلى`,"Move down":`نقل لأسفل`,Install:`تثبيت`,"TV mode":`وضع التلفاز`,On:`مفعّل`,Off:`معطّل`,Account:`الحساب`,"Sign in":`تسجيل الدخول`,"Sign out":`تسجيل الخروج`,"Create account":`إنشاء حساب`,Email:`البريد الإلكتروني`,Password:`كلمة المرور`,"Forgot password?":`نسيت كلمة المرور؟`,"Welcome back":`مرحبًا بعودتك`,Profile:`الملف الشخصي`,Handle:`اسم المستخدم`,"Your servers":`خوادمك`,Server:`الخادم`,Connect:`اتصال`,Disconnect:`قطع الاتصال`,Directory:`الدليل`,Favourites:`المفضلة`,Follow:`متابعة`,Unfollow:`إلغاء المتابعة`,Notifications:`الإشعارات`,"Phone number":`رقم الهاتف`,"Save number":`حفظ الرقم`,Transcript:`النص المفرغ`,Captions:`الترجمة النصية`,"Translate audio":`ترجمة الصوت`,"Audio language":`لغة الصوت`,"Audio options":`خيارات الصوت`,"Keep background sound":`الاحتفاظ بأصوات الخلفية`,"Background level":`مستوى صوت الخلفية`,"Speaker voices":`أصوات المتحدثين`,"Any voice":`أي صوت`,"Male voice":`صوت رجالي`,"Female voice":`صوت نسائي`,"Original audio.":`الصوت الأصلي.`,"Buy translated audio":`شراء الصوت المترجم`,"Audio credit":`رصيد الصوت`,"Buy pass":`شراء تصريح`,Pass:`تصريح`,"Pay with":`الدفع باستخدام`,"Check payment":`التحقق من الدفع`,"Open checkout":`الانتقال للدفع`,"Free sessions":`جلسات مجانية`,"Usage rates and expiry":`الأسعار ومدة الصلاحية`,Catalogs:`الكتالوجات`,"Add catalog":`إضافة كتالوج`,"Catalog name":`اسم الكتالوج`,Link:`الرابط`,"Play link":`تشغيل الرابط`,"Go live":`بدء بث مباشر`,Publish:`نشر`,Listen:`استماع`,"Live now":`مباشر الآن`,Upcoming:`قريبًا`,Parties:`حفلات المشاهدة`,"Join party":`الانضمام للحفلة`,"Invite code":`رمز الدعوة`,Invite:`دعوة`,Chat:`الدردشة`,"Chat message":`رسالة دردشة`,People:`الأشخاص`,Speaker:`متحدث`,Speakers:`المتحدثون`,Listener:`مستمع`,Moderator:`مشرف`,"Raise hand":`رفع اليد`,"Hand raises":`الأيدي المرفوعة`,Questions:`الأسئلة`,Resources:`الموارد`,Replay:`إعادة العرض`,Schedule:`الجدول`,Event:`الفعالية`,Host:`المضيف`,About:`حول`,Stage:`المنصة`,Title:`العنوان`,Description:`الوصف`,Topic:`الموضوع`,Public:`عام`,"Anyone with the link":`أي شخص لديه الرابط`,"Invited people":`الأشخاص المدعوون`,"Who can join":`من يمكنه الانضمام`,"Date and time":`التاريخ والوقت`,"Expected length":`المدة المتوقعة`,Repeat:`تكرار`,"Does not repeat":`لا يتكرر`,"Every day":`كل يوم`,"Every week":`كل أسبوع`,Homepage:`الموقع الإلكتروني`,"Host name":`اسم المضيف`,"Profile photo URL":`رابط صورة الملف الشخصي`,"Broadcast link":`رابط البث`,"Edit event":`تعديل الفعالية`,"Save changes":`حفظ التغييرات`,"Create live":`إنشاء بث مباشر`,"Schedule class":`جدولة درس`,"Start class":`بدء الدرس`,"End event":`إنهاء الفعالية`,"End session":`إنهاء الجلسة`,"Session ended":`انتهت الجلسة`,"Event ended":`انتهت الفعالية`,Cancelled:`ملغاة`,"Replay available":`إعادة العرض متاحة`,Join:`انضمام`,"Create invite":`إنشاء دعوة`,"Invite as":`الدعوة بصفة`,"Watch now":`شاهد الآن`,"Start a room":`إنشاء غرفة`,"Recent replays":`إعادات العرض الأخيرة`,"Your account":`حسابك`,"Write with AI":`الكتابة بالذكاء الاصطناعي`,"Suggested title":`العنوان المقترح`,"Suggested description":`الوصف المقترح`,"Suggested topic":`الموضوع المقترح`,"Use these details":`استخدام هذه التفاصيل`,"Learn something live.":`تعلّم شيئًا مباشرة.`,"Screen share":`مشاركة الشاشة`,"Upload and broadcast":`رفع وبث`,Help:`مساعدة`,"Reload Player":`إعادة تحميل المشغل`,"Copy Bundled CLI Path":`نسخ مسار أداة سطر الأوامر المضمنة`,"Developer tools":`أدوات المطور`,Undo:`تراجع`,Redo:`إعادة`,Cut:`قص`,Paste:`لصق`,"Select all":`تحديد الكل`,Status:`الحالة`,"Activity log":`سجل النشاط`,Admin:`الإدارة`,"Playback controls":`عناصر التحكم بالتشغيل`,"Tracks and folders":`المقاطع والمجلدات`,"Original-language captions.":`ترجمة نصية باللغة الأصلية.`,"Skip to playback controls":`الانتقال إلى عناصر التحكم بالتشغيل`,"Skip to playlist":`الانتقال إلى قائمة التشغيل`,"Skip to transcript and translated audio":`الانتقال إلى النص المفرغ والصوت المترجم`};export{t as default};