{"entries":[{"lastCommit":{"author":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-06-15T22:29:10.000000-04:00"},"committer":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-06-15T22:29:10.000000-04:00"},"hash":"590ed7f3cad39173527b2a297a92dd2b8c844e01","message":"fair: fix blob OAuth scope to match published client-metadata grants\n\nThe requested PAR scope used a bare \"blob\" grant, which is invalid\ngranular-scope syntax (blob scopes require a mime parameter) and didn't\nmatch the blob:image/{png,jpeg,webp} grants in the published\noauth-client-metadata.json. Auth servers rejected the PAR with\ninvalid_scope. Align BlogScopes with the published metadata.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) \n","tree":"b5f3a962584620a34952cca6cd1f2f5f7d55ad7d"},"mode":"0040000","name":"atproto","size":0},{"lastCommit":{"author":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-06-15T23:04:28.000000-04:00"},"committer":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-06-15T23:04:28.000000-04:00"},"hash":"c5a7c46f540b046d440c39c8631ae40b140317a4","message":"fair: emit rel=site.standard.publication head link on the home page\n\nThe home page is the publication, but carried no standard.site discovery\nlink — only the .well-known endpoint. Add a rel=site.standard.publication\nhead link (pointing at the publication record's self at-uri) so readers\nand validators can identify the publication directly from the home page,\nmirroring the per-post rel=site.standard.document links.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) \n","tree":"c49b90cb24834a3263b2ac5fc4ade1587a1da6ef"},"mode":"0040000","name":"build","size":0},{"lastCommit":{"author":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-04-30T16:39:41.000000-04:00"},"committer":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-04-30T16:39:41.000000-04:00"},"hash":"3331e7933195268c598e60b26044638a0b40c510","message":"fair: a Go CLI that publishes markdown to ATProto as standard.site\n\nA single-author static-site publisher built around two ideas:\n\n1. The PDS is the source of truth. Posts live as\n site.standard.publication + site.standard.document records on your\n ATProto PDS; the rendered site mirrors them. Markdown files on disk\n are working copies. External standard.site readers (Leaflet, pckt,\n indexers) see the same records your own site does.\n\n2. The output is plain HTML. No CSS, no JavaScript, no client-side\n rendering. Native browser widgets carry the load —

,\n , ,

, semantic

/,\n GFM tables, footnotes, definition lists. A demo article in\n blog-posts/html-feature-demo/ exercises every feature.\n\nArchitecture (see docs/design-plans/2026-04-29-blog-v2026.md):\n\n- Profile mechanism: --profile required (sandbox vs prod), no default,\n Levenshtein typo suggestion, profile-isolated state + sessions.\n- ATProto OAuth (loopback + DPoP + PAR) via haileyok/atproto-oauth-golang.\n Auto-refresh wired into every authenticated subcommand.\n- Idempotent publish: SHA-256 over canonical inputs (markdown source,\n not goldmark output) gates re-puts; --dry-run / --force escapes.\n- ULID identity in frontmatter — written back on first publish, drives\n rename detection.\n- Build flow has a cold-start contract: works with no auth, no records,\n emits well-known + a stub site so the OAuth metadata document is\n reachable before first login.\n- Outputs: index, per-post, archive, tag pages, Atom + RSS + JSON Feed\n + index.json, sitemap, robots.txt, .well-known/oauth-client-metadata\n + .well-known/site.standard.publication, favicon from publication.icon\n blob. Atomic dist.tmp -> dist promote.\n- HTML enhancements: OG/Twitter cards, canonical, rel=me, prev/next\n link headers, atproto+json alternate, bsky discuss link from\n bskyPostRef, image-paragraph -> figure rewrite, Bluesky blockquote\n -> \"Discuss on Bluesky\" footer link.\n\nSandbox: bluesky-social/pds Docker container behind Caddy + mkcert at\npds.localtest.me (workaround for the upstream PDS rejecting loopback\nhostnames in OAuth issuer URLs). Profile-isolated session storage\nprevents cross-contamination with prod.\n\nSubcommands: auth login/logout/status, init publication,\nemit-client-metadata, publish (--dry-run/--force), build, ls (PDS-vs-\nlocal diff), doctor (5-check health report), unpublish,\nmigrate cleanup-whtwnd (post-cutover legacy lexicon cleanup),\nconfig show.\n\nOperator runbook for the WhtWnd -> standard.site cutover lives at\ndocs/runbook-cutover.md. CLAUDE.md captures the non-obvious rules.\n\nReplaces the Next.js + WhiteWind blog at ~/code/pds-blog.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \n","tree":"08c4db30f45783eddb5c09b1b4f63ae2fcd710c9"},"mode":"0040000","name":"config","size":0},{"lastCommit":{"author":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-05-01T09:57:42.000000-04:00"},"committer":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-05-01T10:00:44.000000-04:00"},"hash":"51596b95935b3bf874111eb5b547a5ecc23bec16","message":"fair: comments, --announce, responsive images, security hardening\n\nBuilds on the initial publish/build pipeline:\n\n- Comments: post pages render an inline-JS comments section that fetches\n app.bsky.feed.getPostThread from the public Bluesky AppView at view\n time. No-JS users get a \"reply on Bluesky\" link; empty-thread state\n shows \"be the first to reply\"; replies render with avatar, profile\n link, timestamp, body text, and a permalink ↗ to the specific reply.\n\n- --announce flag on publish: optional auto-create of an\n app.bsky.feed.post on the user's repo, pinned via bskyPostRef as the\n comment-thread root. Adds repo:app.bsky.feed.post scope (existing\n sessions need one-time re-login). Idempotent — writes the new at-uri\n back to frontmatter as bsky_post: so re-runs short-circuit.\n\n- bskyPostRef lexicon compliance: the field is a\n com.atproto.repo.strongRef per the canonical standard.site lexicon —\n fair now reads/writes both uri+cid. Frontmatter `bsky_post:` resolves\n the CID via own-repo authenticated GetRecord (sandbox-friendly) or\n the public AppView (federated posts).\n\n- Responsive images: publish generates 480/960/1440/1920 variants\n alongside each inline image (golang.org/x/image/draw CatmullRom);\n build emits srcset/sizes/width/height + loading=lazy + decoding=async\n on every . New internal/images package.\n\n- Home page: _index.md frontmatter gains description/subtitle/pinned/\n hide_years for home-only customization; _outro.md is below-fold\n chrome; year-grouped post index via

; tag cloud + h2\n section headers; reading time per post; pdsls.dev link in the post\n meta line.\n\n- Polish: viewport meta, color-scheme light/dark, theme-color light/\n dark, speculation-rules prerender, system font stack, line-height,\n body width cap, centered prev/home/next nav, prev/next rel links.\n\n- Security review fixes: path-traversal validation on PDS-controlled\n path and tag fields; SSRF mitigation via no-redirect HTTP client\n policy on the build's getRecord/listRecords calls; XSS escaping in\n OAuth loopback callback page; at-uri prefix gate on htmltemplate.URL\n casts; favicon download bounded with io.LimitReader (5 MiB); all\n XRPC URL params now built via url.Values.Encode rather than\n fmt.Sprintf.\n\n- Cleanup: removed migrate cleanup-whtwnd subcommand and scope; new\n docs/runbook.md replaces the migration-flavored runbook-cutover.md;\n CLAUDE.md split between fair (project doc) and the operator's\n blog-posts repo (deploy notebook).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \n","tree":"53d94c795adcc469c4e3ebe125f01de5d03d9d70"},"mode":"0040000","name":"images","size":0},{"lastCommit":{"author":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-06-15T22:54:00.000000-04:00"},"committer":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-06-15T22:54:00.000000-04:00"},"hash":"6eb1b59fca487b15adbbc4f3351aa66ac297fd44","message":"fair: use TID rkeys for documents (lexicon key:tid conformance)\n\nsite.standard.document declares key:tid, but publish used the slug as the\nrkey, so the validator and standard.site readers rejected the records.\nGenerate a TID per post (via indigo syntax.NewTIDNow) and persist it in\nfrontmatter as rkey:, so re-publishes — including from a machine with no\nlocal state — target the same record instead of duplicating it.\n\nThe slug still drives the URL via the record path field, so public URLs\nare unchanged. State is now keyed by the TID rkey; the ULID id remains\nthe cross-machine identity ls uses to reconcile. Slug-based rename\ndetection is removed: a renamed directory now just updates the path on\nthe same TID record, no delete-and-recreate.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) \n","tree":"f1de44f823afe51218054044e5343cfa6b562bf1"},"mode":"0040000","name":"markdown","size":0},{"lastCommit":{"author":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-05-01T09:57:42.000000-04:00"},"committer":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-05-01T10:00:44.000000-04:00"},"hash":"51596b95935b3bf874111eb5b547a5ecc23bec16","message":"fair: comments, --announce, responsive images, security hardening\n\nBuilds on the initial publish/build pipeline:\n\n- Comments: post pages render an inline-JS comments section that fetches\n app.bsky.feed.getPostThread from the public Bluesky AppView at view\n time. No-JS users get a \"reply on Bluesky\" link; empty-thread state\n shows \"be the first to reply\"; replies render with avatar, profile\n link, timestamp, body text, and a permalink ↗ to the specific reply.\n\n- --announce flag on publish: optional auto-create of an\n app.bsky.feed.post on the user's repo, pinned via bskyPostRef as the\n comment-thread root. Adds repo:app.bsky.feed.post scope (existing\n sessions need one-time re-login). Idempotent — writes the new at-uri\n back to frontmatter as bsky_post: so re-runs short-circuit.\n\n- bskyPostRef lexicon compliance: the field is a\n com.atproto.repo.strongRef per the canonical standard.site lexicon —\n fair now reads/writes both uri+cid. Frontmatter `bsky_post:` resolves\n the CID via own-repo authenticated GetRecord (sandbox-friendly) or\n the public AppView (federated posts).\n\n- Responsive images: publish generates 480/960/1440/1920 variants\n alongside each inline image (golang.org/x/image/draw CatmullRom);\n build emits srcset/sizes/width/height + loading=lazy + decoding=async\n on every . New internal/images package.\n\n- Home page: _index.md frontmatter gains description/subtitle/pinned/\n hide_years for home-only customization; _outro.md is below-fold\n chrome; year-grouped post index via

; tag cloud + h2\n section headers; reading time per post; pdsls.dev link in the post\n meta line.\n\n- Polish: viewport meta, color-scheme light/dark, theme-color light/\n dark, speculation-rules prerender, system font stack, line-height,\n body width cap, centered prev/home/next nav, prev/next rel links.\n\n- Security review fixes: path-traversal validation on PDS-controlled\n path and tag fields; SSRF mitigation via no-redirect HTTP client\n policy on the build's getRecord/listRecords calls; XSS escaping in\n OAuth loopback callback page; at-uri prefix gate on htmltemplate.URL\n casts; favicon download bounded with io.LimitReader (5 MiB); all\n XRPC URL params now built via url.Values.Encode rather than\n fmt.Sprintf.\n\n- Cleanup: removed migrate cleanup-whtwnd subcommand and scope; new\n docs/runbook.md replaces the migration-flavored runbook-cutover.md;\n CLAUDE.md split between fair (project doc) and the operator's\n blog-posts repo (deploy notebook).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \n","tree":"53d94c795adcc469c4e3ebe125f01de5d03d9d70"},"mode":"0040000","name":"ops","size":0},{"lastCommit":{"author":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-06-15T22:54:00.000000-04:00"},"committer":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-06-15T22:54:00.000000-04:00"},"hash":"6eb1b59fca487b15adbbc4f3351aa66ac297fd44","message":"fair: use TID rkeys for documents (lexicon key:tid conformance)\n\nsite.standard.document declares key:tid, but publish used the slug as the\nrkey, so the validator and standard.site readers rejected the records.\nGenerate a TID per post (via indigo syntax.NewTIDNow) and persist it in\nfrontmatter as rkey:, so re-publishes — including from a machine with no\nlocal state — target the same record instead of duplicating it.\n\nThe slug still drives the URL via the record path field, so public URLs\nare unchanged. State is now keyed by the TID rkey; the ULID id remains\nthe cross-machine identity ls uses to reconcile. Slug-based rename\ndetection is removed: a renamed directory now just updates the path on\nthe same TID record, no delete-and-recreate.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) \n","tree":"f1de44f823afe51218054044e5343cfa6b562bf1"},"mode":"0040000","name":"publish","size":0}],"lastCommit":{"author":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-06-15T23:04:28.000000-04:00"},"committer":{"email":"austin@ap2.io","name":"Austin Parker","when":"2026-06-15T23:04:28.000000-04:00"},"hash":"c5a7c46f540b046d440c39c8631ae40b140317a4","message":"fair: emit rel=site.standard.publication head link on the home page\n\nThe home page is the publication, but carried no standard.site discovery\nlink — only the .well-known endpoint. Add a rel=site.standard.publication\nhead link (pointing at the publication record's self at-uri) so readers\nand validators can identify the publication directly from the home page,\nmirroring the per-post rel=site.standard.document links.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) \n","tree":"c49b90cb24834a3263b2ac5fc4ade1587a1da6ef"}}