From 00638866f5da02289271eb94d6c3dd7065bf6cec Mon Sep 17 00:00:00 2001
From: Jeffrey Alan Scudder <me@jas.life>
Date: Sun, 29 Mar 2026 19:30:31 -0700
Subject: [PATCH] fix: load Auth0 SDK locally on kidlisp.com instead of CDN
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

CDN script was failing to load on lith (window.auth0 undefined after
10s timeout). Switch to the local bundled copy already served via
Caddy's /aesthetic.computer/* handler — same file the main site uses.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 system/public/kidlisp.com/index.html | 2 +-
 system/public/kidlisp.com/keeps.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/system/public/kidlisp.com/index.html b/system/public/kidlisp.com/index.html
index bbb53008aa..016b9c03ca 100644
--- a/system/public/kidlisp.com/index.html
+++ b/system/public/kidlisp.com/index.html
@@ -26,7 +26,7 @@
   <!-- Note: We use inline @font-face instead of external CSS which has broken relative URLs -->
   <link rel="stylesheet" href="https://aesthetic.computer/type/webfonts/berkeley-mono-variable.css" media="print" onload="this.media='all'" />
   <link rel="preconnect" href="https://fonts.googleapis.com">
-  <script src="https://cdn.auth0.com/js/auth0-spa-js/2.0/auth0-spa-js.production.js" async onload="window.__auth0SDKReady=true"></script>
+  <script src="/aesthetic.computer/dep/auth0-spa-js.production.js" async onload="window.__auth0SDKReady=true"></script>
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link href="https://fonts.googleapis.com/css2?family=Comic+Relief:ital,wght@0,400;0,700;1,400;1,700&family=Noto+Sans+Mono:wght@400;700&display=swap" rel="stylesheet" media="print" onload="this.media='all'" />
   <!-- Flag icons for language selector (lazy-loaded — not needed at startup) -->
diff --git a/system/public/kidlisp.com/keeps.html b/system/public/kidlisp.com/keeps.html
index e88c3f6884..29a065be39 100644
--- a/system/public/kidlisp.com/keeps.html
+++ b/system/public/kidlisp.com/keeps.html
@@ -30,7 +30,7 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" />
 
   <!-- Auth0 SPA SDK -->
-  <script src="https://cdn.auth0.com/js/auth0-spa-js/2.0/auth0-spa-js.production.js"></script>
+  <script src="/aesthetic.computer/dep/auth0-spa-js.production.js"></script>
 
   <style>
     /* ========================================
-- 
2.51.2