source: Klonkt/src/assets/js/guardian.js@ b5924eb

main
Last change on this file since b5924eb was 780a7c6, checked in by Robin Genis <roboburr@…>, 7 weeks ago

Guardianship Fase 0+1: de echte multi-party handshake (FEP-633c §3)

De eerste versie committeerde na één accept. Nu de spec: geen enkele partij
maakt een voogdij alleen, en een nieuwe guardian erbij kan niet zonder
toestemming van de bestaande. Daemon als blauwdruk, zodat Klonkt en de
test-daemon exact hetzelfde gedragen en de Shaer-clients één contract lezen.

Fase 0 (datamodel): ap_guardian_offers (per lokale partij een kopie van de
handshake, PK slug+offer_id) + ap_guardian_offer_accepts (de accept-tally).
ap_guardianships houdt alleen nog de GECOMMITTE relaties.

Fase 1 (state-machine): offers.js is een getrouwe port van de daemon-Handshake
(accepts over ward+candidate+existing; ready = ward && candidate && (geen
existing OF >=1 existing); een Reject voidt). handshake.js orchestreert het
gedistribueerd: de kandidaat adresseert de Offer aan ward + alle bestaande
guardians (§3.1.1); elke Accept wordt aan alle andere partijen gebroadcast, dus
elke instance-kopie convergeert; zodra een kopie compleet is committeert die
lokaal (ward schrijft shaer:guardians, guardian schrijft z'n ward), met de
kandidaat-inbox als handle (§6). Volgorde-onafhankelijk.

Ook: §1 wederzijdse uitsluiting (een ward is nooit ook guardian in het
actor-doc), de queues vullen nu de echte accept-tally (needsMyAccept/
readyToCommit/acceptedBy/existingGuardians), en de PWA + Berichten beantwoorden
via de C2S Accept/Reject-pijplijn per offer-id. De co-guardian ziet een
mede-voogdij-aanvraag met accepteer/weiger in de PWA.

Changed files:
src/config/database.js

  • tabellen ap_guardian_offers + ap_guardian_offer_accepts

src/services/guardianship/offers.js (NEW)

  • de handshake-state-machine (daemon-port), per-instance in SQLite

src/services/guardianship/relations.js

  • alleen commit-writers + actor-props (§1 uitsluiting)

src/services/guardianship/handshake.js

  • gedistribueerde multi-party C2S/S2S orchestratie

src/services/guardianship/queues.js

  • offers-queue uit de state-machine

src/services/guardianship/index.js

  • exports bijgewerkt

src/services/ActivityPubService.js

  • wire localSlug + fetchActor; inbound-routing naar alle lokale partijen

src/routes/guardian.js

  • dashboard toont offers met tally; POST /guardian/offer (accept/reject)

src/routes/posts.js

  • Berichten toont ward-offers uit de state-machine; accept via offer-id

src/views/pages/messages.ejs, src/assets/js/guardian.js, src/assets/css/guardian.css

  • offer-kaarten per state (mijn aanvraag / mede-voogdij / wachten)

src/services/i18n.js

  • accept/reject/complete/coguard + co-guardian push (nl/en/de)

test/guardianship.test.js

  • multi-party: eerste guardian, co-approval bestaande guardian, reject voidt, ward-mag-niet-guarden, vaste initiator

remarks: Fase 2 (follow-gating), 3 (hasGuardians + Not-a-Teapot), 4 (Undo/
emancipatie) volgen. 164 tests groen.

-robo
Co-Authored-By: Claude Opus 4.8 <noreply@…>

  • Property mode set to 100644
File size: 9.8 KB
Line 
1/* Guardian PWA client (FEP-633c): renders the dashboard, adopts wards, and
2 manages the guardian push channel. No framework, no inline scripts (CSP).
3 All user-facing text comes from state.strings (server i18n). */
4(function () {
5 'use strict';
6 var S = JSON.parse(document.getElementById('guardian-state').textContent || '{}');
7 var T = S.strings || {};
8
9 function el(tag, cls, text) {
10 var n = document.createElement(tag);
11 if (cls) n.className = cls;
12 if (text != null) n.textContent = text;
13 return n;
14 }
15 function handleOf(uri, cached) {
16 if (cached) return cached;
17 try { var u = new URL(uri); return '@' + u.pathname.split('/').filter(Boolean).pop() + '@' + u.host; }
18 catch (e) { return uri; }
19 }
20 function when(s) { return String(s || '').slice(0, 16).replace('T', ' '); }
21 function show(id, on) { document.getElementById(id).hidden = !on; }
22
23 // ── 1. Help requests ───────────────────────────────────────────────────
24 function renderHelp() {
25 var list = document.getElementById('help-list');
26 list.textContent = '';
27 var help = S.help || [];
28 help.forEach(function (h) {
29 var card = el('div', 'g-card help');
30 var row = el('div', 'row');
31 row.appendChild(el('span', 'who grow', h.actor_name || handleOf(h.actor_uri, h.actor_handle)));
32 row.appendChild(el('span', 'when', when(h.published || h.created_at)));
33 card.appendChild(row);
34 var body = el('div', 'body');
35 body.innerHTML = h.content || ''; // sanitized server-side on ingest
36 card.appendChild(body);
37 if (h.note_url) {
38 var a = el('a', 'g-link', T.open || 'open');
39 a.href = h.note_url; a.target = '_blank'; a.rel = 'noopener';
40 card.appendChild(a);
41 }
42 list.appendChild(card);
43 });
44 var badge = document.getElementById('help-count');
45 badge.textContent = help.length; badge.hidden = help.length === 0;
46 show('help-empty', help.length === 0);
47 }
48
49 // ── 3. Offers I am a party to (sent, or a co-guardianship to co-approve) ─
50 function answer(offerId, decision, btn) {
51 if (btn) btn.disabled = true;
52 fetch('/guardian/offer', {
53 method: 'POST', headers: { 'Content-Type': 'application/json' },
54 body: JSON.stringify({ offer: offerId, answer: decision, site: S.site }),
55 }).then(refresh);
56 }
57 function offerCard(o) {
58 var card = el('div', 'g-card');
59 var row = el('div', 'row');
60 var subject = o['shaer:iAmCandidate']
61 ? handleOf(o['shaer:ward'], o['shaer:wardHandle']) // my sent offer: about the ward
62 : handleOf(o['shaer:candidate'], o['shaer:candidateHandle']); // co-guard: who wants in
63 row.appendChild(el('span', 'who grow', subject));
64 if (o['shaer:iAmCandidate']) {
65 // My own offer, waiting for the others to accept.
66 row.appendChild(el('span', 'tag wait', T.pending));
67 var rt = el('button', 'quiet small', T.retract);
68 rt.addEventListener('click', function () { answer(o.id, 'reject', rt); });
69 row.appendChild(rt);
70 } else if (o['shaer:needsMyAccept']) {
71 // A co-guardianship offer for a ward I already guard: my call.
72 row.appendChild(el('span', 'tag co', T.coguard));
73 var ac = el('button', 'small', T.accept);
74 ac.addEventListener('click', function () { answer(o.id, 'accept', ac); });
75 var rj = el('button', 'quiet small', T.reject);
76 rj.addEventListener('click', function () { answer(o.id, 'reject', rj); });
77 row.appendChild(ac); row.appendChild(rj);
78 } else {
79 row.appendChild(el('span', 'tag wait', T.awaiting_others));
80 }
81 card.appendChild(row);
82 return card;
83 }
84 function renderPending() {
85 var list = document.getElementById('pending-list');
86 list.textContent = '';
87 var offers = S.offers || [];
88 offers.forEach(function (o) { list.appendChild(offerCard(o)); });
89 show('pending-section', offers.length > 0);
90 }
91
92 // ── 4. Accepted wards ──────────────────────────────────────────────────
93 function renderWards() {
94 var list = document.getElementById('wards-list');
95 list.textContent = '';
96 var wards = S.wards || [];
97 wards.forEach(function (w) {
98 var card = el('div', 'g-card');
99 var row = el('div', 'row');
100 row.appendChild(el('span', 'who grow', handleOf(w.other_uri, w.other_handle)));
101 row.appendChild(el('span', 'tag ok', T.active));
102 var btn = el('button', 'quiet small', T.release);
103 btn.addEventListener('click', function () { remove(w.other_uri, btn); });
104 row.appendChild(btn);
105 card.appendChild(row);
106 list.appendChild(card);
107 });
108 show('wards-empty', wards.length === 0);
109 }
110
111 function remove(uri, btn) {
112 btn.disabled = true;
113 fetch('/guardian/wards/remove', {
114 method: 'POST', headers: { 'Content-Type': 'application/json' },
115 body: JSON.stringify({ uri: uri, site: S.site }),
116 }).then(refresh);
117 }
118
119 function renderAll() { renderHelp(); renderPending(); renderWards(); }
120
121 function refresh() {
122 return fetch('/guardian/api/state?site=' + encodeURIComponent(S.site))
123 .then(function (r) { return r.json(); })
124 .then(function (s) { if (s && !s.error) { S = s; T = s.strings || T; renderAll(); } });
125 }
126
127 // ── 2. Adopt ───────────────────────────────────────────────────────────
128 var form = document.getElementById('adopt-form');
129 var input = document.getElementById('adopt-handle');
130 var adoptBtn = document.getElementById('adopt-btn');
131 var msg = document.getElementById('adopt-msg');
132 function setMsg(text, isErr) { msg.hidden = false; msg.className = 'g-msg' + (isErr ? ' err' : ''); msg.textContent = text; }
133
134 form.addEventListener('submit', function (ev) {
135 ev.preventDefault();
136 var handle = input.value.trim();
137 if (!handle) return;
138 adoptBtn.disabled = true;
139 setMsg(T.sending || '…', false);
140 fetch('/guardian/adopt', {
141 method: 'POST', headers: { 'Content-Type': 'application/json' },
142 body: JSON.stringify({ handle: handle, site: S.site }),
143 }).then(function (r) { return r.json().then(function (j) { return { ok: r.ok, j: j }; }); })
144 .then(function (res) {
145 adoptBtn.disabled = false;
146 if (res.ok) {
147 input.value = '';
148 // Always refresh: the offer is recorded even if delivery is still
149 // in flight. Show it under "Verzonden aanvragen".
150 setMsg(res.j.delivered === false ? T.sent_retry : T.sent, false);
151 refresh();
152 } else {
153 setMsg((res.j.error === 'not_found' ? T.not_found : T.failed) , true);
154 }
155 })
156 .catch(function () { adoptBtn.disabled = false; setMsg(T.network, true); });
157 });
158
159 // ── Site picker ────────────────────────────────────────────────────────
160 var picker = document.getElementById('site-picker');
161 if (picker) picker.addEventListener('change', function () {
162 location.href = '/guardian?site=' + encodeURIComponent(picker.value);
163 });
164
165 // ── 5. Push ────────────────────────────────────────────────────────────
166 var toggle = document.getElementById('push-toggle');
167 var pmsg = document.getElementById('push-msg');
168 function pushState() {
169 if (!('serviceWorker' in navigator) || !('PushManager' in window)) { toggle.disabled = true; return; }
170 navigator.serviceWorker.register('/sw.js').catch(function () {});
171 navigator.serviceWorker.ready
172 .then(function (reg) { return reg.pushManager.getSubscription(); })
173 .then(function (sub) {
174 toggle.textContent = sub ? toggle.dataset.onLabel : toggle.dataset.offLabel;
175 toggle.dataset.subscribed = sub ? '1' : '';
176 toggle.classList.toggle('is-on', !!sub);
177 });
178 }
179 function urlB64(base64) {
180 var pad = '='.repeat((4 - (base64.length % 4)) % 4);
181 var b = (base64 + pad).replace(/-/g, '+').replace(/_/g, '/');
182 var raw = atob(b); var arr = new Uint8Array(raw.length);
183 for (var i = 0; i < raw.length; i++) arr[i] = raw.charCodeAt(i);
184 return arr;
185 }
186 toggle.addEventListener('click', function () {
187 pmsg.hidden = true;
188 navigator.serviceWorker.ready.then(function (reg) {
189 if (toggle.dataset.subscribed) {
190 reg.pushManager.getSubscription().then(function (sub) {
191 if (!sub) return;
192 fetch('/push/unsubscribe', {
193 method: 'POST', headers: { 'Content-Type': 'application/json' },
194 body: JSON.stringify({ endpoint: sub.endpoint }),
195 }).then(function () { return sub.unsubscribe(); }).then(pushState);
196 });
197 return;
198 }
199 fetch('/push/vapid').then(function (r) { return r.json(); }).then(function (v) {
200 if (!v.publicKey) throw new Error('no key');
201 return reg.pushManager.subscribe({ userVisibleOnly: true, applicationServerKey: urlB64(v.publicKey) });
202 }).then(function (sub) {
203 return fetch('/push/subscribe', {
204 method: 'POST', headers: { 'Content-Type': 'application/json' },
205 body: JSON.stringify({
206 subscription: sub.toJSON(),
207 alerts: { help: 1, guardian: 1, dm: 1, follow: 0, reply: 0, like: 0, boost: 0 },
208 uaLabel: 'Guardian PWA',
209 }),
210 });
211 }).then(pushState).catch(function (e) {
212 pmsg.hidden = false; pmsg.className = 'g-msg err';
213 pmsg.textContent = (T.push_unavailable || 'Push unavailable') + ': ' + e.message;
214 });
215 });
216 });
217
218 renderAll(); pushState();
219 setInterval(refresh, 45000); // live-ish while open
220})();
Note: See TracBrowser for help on using the repository browser.