From e94a51dd48dab7328ac236bce7c8353e461a04b1 Mon Sep 17 00:00:00 2001
From: Bretton <bretton@Brettons-MacBook-Pro-2.local>
Date: Mon, 6 Jul 2026 19:56:38 -0700
Subject: [PATCH] fix(comments): stop linking deleted comments to their
 author's profile
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Deleted-comment tombstones arrive from the backend with an empty handle
but the author's real DID (the backend expects the frontend to render
"[deleted]"). The comment meta row rendered UserLink unconditionally,
producing a bare "@" that hyperlinked to /profile/<did> — quietly
de-anonymizing who wrote the deleted comment.

Changes:
- Comment: when isDeleted, render a muted non-linked "[deleted]" label
  in place of UserLink (no avatar, no profile link)
- Comment: suppress the OP microphone badge for deleted comments, which
  would leak authorship the same way via the DID comparison
- i18n: add comment.deletedAuthor ("[deleted]") to en.json

Verified in Firefox against the dev stack: backend tombstones render
"[deleted] <time> ago" with no profile links, the in-place delete flow
updates reactively without a reload, and non-deleted comments still
show their author and OP badge.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 src/lib/app/i18n/en.json               |  1 +
 src/lib/feature/comment/Comment.svelte | 48 +++++++++++++++++---------
 2 files changed, 33 insertions(+), 16 deletions(-)

diff --git a/src/lib/app/i18n/en.json b/src/lib/app/i18n/en.json
index 31140fea..cebaab5b 100644
--- a/src/lib/app/i18n/en.json
+++ b/src/lib/app/i18n/en.json
@@ -623,6 +623,7 @@
     },
     "comment": {
         "reply": "Reply",
+        "deletedAuthor": "[deleted]",
         "actions": {
             "label": "Actions",
             "link": "Copy Link"
diff --git a/src/lib/feature/comment/Comment.svelte b/src/lib/feature/comment/Comment.svelte
index f361ace5..75e9e3d2 100644
--- a/src/lib/feature/comment/Comment.svelte
+++ b/src/lib/feature/comment/Comment.svelte
@@ -135,7 +135,9 @@
 <li class={['py-3 relative', clazz]} id={domId}>
   {#if meta}
     {@const creatorIsOp =
-      postAuthorDid !== undefined && node.comment.author.did === postAuthorDid}
+      !node.comment.isDeleted &&
+      postAuthorDid !== undefined &&
+      node.comment.author.did === postAuthorDid}
     <label
       for="comment-expand-{node.comment.uri}"
       class="flex flex-row cursor-pointer gap-2 items-center group text-sm flex-wrap w-full z-0 group relative"
@@ -167,21 +169,35 @@
         </div>
       </div>
       {@render metaSuffix?.()}
-      <span
-        class={[
-          'flex flex-row gap-1 items-center',
-          creatorIsOp && 'text-blue-600 dark:text-blue-400 font-bold',
-        ]}
-      >
-        <UserLink inComment avatarSize={20} avatar user={node.comment.author} />
-      </span>
-      {#if creatorIsOp}
-        <Icon
-          mini
-          size="16"
-          src={Microphone}
-          class="text-blue-500 dark:text-blue-400"
-        />
+      {#if node.comment.isDeleted}
+        <!-- Tombstones arrive with an empty handle but the author's real
+             DID; rendering UserLink would produce a bare "@" linking to
+             the profile, de-anonymizing the deleted comment. -->
+        <span class="text-slate-500 dark:text-zinc-400 italic">
+          {$t('comment.deletedAuthor')}
+        </span>
+      {:else}
+        <span
+          class={[
+            'flex flex-row gap-1 items-center',
+            creatorIsOp && 'text-blue-600 dark:text-blue-400 font-bold',
+          ]}
+        >
+          <UserLink
+            inComment
+            avatarSize={20}
+            avatar
+            user={node.comment.author}
+          />
+        </span>
+        {#if creatorIsOp}
+          <Icon
+            mini
+            size="16"
+            src={Microphone}
+            class="text-blue-500 dark:text-blue-400"
+          />
+        {/if}
       {/if}
       <RelativeDate
         class="text-slate-600 dark:text-zinc-400"
-- 
2.51.2