| … | … | @@ -52,7 +52,7 @@ Reading needs none. Three pages load a script; two of them require it. |
| 52 | 52 | | page | loads | JS off | |
| 53 | 53 | |---|---|---| |
| 54 | 54 | | `/login` | inline module + vendored signer (22 KB) | breaks — no form post makes an Ed25519 signature | |
| 55 | | | `/` timeline | `composer.js` (2.6 KB), the `@`-picker | works — posts a real multipart form | |
| 55 | | `/` timeline | `composer.js` (5.3 KB), the `@`-picker | works — posts a real multipart form | |
| 56 | 56 | | `/explore` | `explore.js` + three.js (733 KB) | breaks — rotating 3D view | |
| 57 | 57 | |
| 58 | 58 | - `/explore` is the only page that loads three.js. Its legend is server-rendered. |
| … | … | @@ -62,30 +62,48 @@ Reading needs none. Three pages load a script; two of them require it. |
| 62 | 62 | |
| 63 | 63 | ## Routes |
| 64 | 64 | |
| 65 | | `/` `/u/<key>` `/r/<key>` `/t/<tag>` `/search` `/settings` `/explore` `/graph` |
| 66 | | `/following` `/notifications` `/mentions` `/knocks` `/rooms` `/directory` |
| 65 | Pages (GET): `/` `/u/<key>` `/r/<key>` `/t/<tag>` `/search` `/settings` `/status` `/explore` |
| 66 | `/graph` `/following` `/notifications` `/mentions` `/knocks` `/rooms` `/discover` `/welcome` |
| 67 | 67 | |
| 68 | | Actions (POST): `/post` `/follow` `/unfollow` `/like` `/unlike` `/react` `/unreact` `/repost` |
| 69 | | `/unrepost` `/reply` `/block` `/unblock` `/knock` `/admit` `/peek` `/reach` `/handle` `/theme` |
| 68 | Actions (POST): `/post` `/follow` `/like` `/unlike` `/react` `/unreact` `/repost` `/unrepost` |
| 69 | `/reply` `/block` `/unblock` `/admit` `/peek` `/reach` `/handle` `/theme` `/settings` |
| 70 | 70 | |
| 71 | | JSON: `/api/graph` `/api/records` `/api/mentions` `/api/node` |
| 71 | Rooms: `/rooms/create` `/rooms/join`, and `/r/<key>/post` `/r/<key>/request` `/r/<key>/admit` |
| 72 | |
| 73 | Namespace: `/namespace/join` `/namespace/forget` `/namespace/request` `/namespace/invite` |
| 74 | `/namespace/admit` `/namespace/withdraw` |
| 75 | |
| 76 | Bridges and DIDs: `/bridge/claim` `/bridge/release` `/did/create` `/did/carry` `/did/publish` |
| 77 | `/did/designate` `/did/project`. The four that need a confirmation answer GET as well as POST. |
| 78 | |
| 79 | Onboarding: `/welcome` `/welcome/pair` `/welcome/create` `/welcome/restore` |
| 72 | 80 | |
| 73 | 81 | Auth: `/login` `/logout` `/auth/challenge` `/auth/login` `/auth/redeem` `/auth/claim` `/auth/handoff` |
| 74 | 82 | |
| 83 | JSON: `/api/graph` `/api/records` `/api/mentions` `/api/node` |
| 84 | |
| 75 | 85 | Blobs: `/blob/<oid>` `/avatar/<key>` `/static/<file>` |
| 76 | 86 | |
| 87 | Three daemon verbs have no route here, so they are unreachable from a browser: `unfollow`, `knock` |
| 88 | and `dismiss`. `directory` has none either. `unlike` was in the same state until it got one — the |
| 89 | daemon had it all along and a like was one-way from a browser, which is the shape to watch for. |
| 90 | |
| 77 | 91 | ## Boundary |
| 78 | 92 | |
| 79 | | ⛔ No `corestore`, `hypercore`, `autobee`, `autobase`, `hyperswarm`, `hyper-overlay`, `atproto-*` |
| 93 | No `corestore`, `hypercore`, `autobee`, `autobase`, `hyperswarm`, `hyper-overlay`, `atproto-*` |
| 80 | 94 | or `ap-bridge` — in any source file or dependency. `test/boundary.test.js` enforces it. |
| 81 | 95 | |
| 96 | The `/did/*` and `/bridge/*` routes do not break this: they call the daemon like every other route. |
| 97 | Nothing atproto is imported here. |
| 98 | |
| 82 | 99 | A renderer that grows a Corestore has become a second peer implementation. |
| 83 | 100 | |
| 84 | 101 | ## Status |
| 85 | 102 | |
| 86 | | Working. 0.0.47, running on tabertron, ashatron and stortron. |
| 103 | Working. `npm test` — 239 tests, 738 asserts, passing (`brittle-bare test/*.test.js`, ~3.5 s). |
| 87 | 104 | |
| 88 | | `npm test` — 175 tests, 565 asserts, passing. |
| 105 | Deployed as a pgh app. Measured 2026-09-20: 0.0.63 installed on tabertron and stortron, and running |
| 106 | on tabertron. |
| 89 | 107 | |
| 90 | 108 | ## License |
| 91 | 109 | |