We just sent a verification link to ${esc(success.email)}. Click it to confirm your account — you can already log in with the password you chose.
Once you've verified, come back to this link
whenever you're ready to finish setting up your profile at
${esc(success.handle)}. It'll ask you to log in with your handle and password and
approve a narrow permission (just enough to write your starter profile, nothing else) — takes a
few seconds. No rush, come back whenever.
Your journey page — what to do once you're set up (plyr.fm, this week's haiku challenge, chat, and more) — lives at ${esc(PUBLIC_URL)}/journey?handle=${esc(success.handle)}. No need to bookmark it — it's just your handle, so you can always get back to it from memory, whether or not you've finished the profile setup step above yet.
your home in the atmosphere.
Naviar Haiku community members can request an account below. You'll need an invite code from whoever invited you.
${banner} ${form} `; } // The journey page (haiku.garden-k41j) — a flat, ungated list of steps, // the same for every member regardless of their signup theme, with // {{handle}}/etc. substituted in. Deliberately no progress tracking (no // checkmarks, nothing to verify against third-party lexicons yet) — see // haiku.garden-wzlf's "Progress tracking" decision. Reuses the same visual // language as the signup form. function renderJourneyPage({ steps, vars, handle }) { const cards = steps .map((step) => { const links = step.links .map((link) => `${esc(link.label)}`) .join('\n'); return `${esc(substitute(step.body, vars))}
your home in the atmosphere.
Here's what there is to do — in whatever order suits you, whenever you're ready. Nothing here expires or locks; come back to this page any time.
${cards} `; } async function serveAsset(name, res) { const ext = path.extname(name); const type = ASSET_TYPES[ext]; if (!type || name.includes('..') || name.includes('/')) { res.writeHead(404); res.end('Not found'); return; } try { const data = await readFile(path.join(onboardDir, 'assets', name)); res.writeHead(200, { 'Content-Type': type, 'Cache-Control': 'public, max-age=86400' }); res.end(data); } catch { res.writeHead(404); res.end('Not found'); } } function readBody(req) { return new Promise((resolve, reject) => { let data = ''; req.on('data', (chunk) => { data += chunk; if (data.length > 10_000) req.destroy(new Error('Body too large')); }); req.on('end', () => resolve(parseQuery(data))); req.on('error', reject); }); } async function main() { const server = createServer(async (req, res) => { const url = new URL(req.url, `http://${req.headers.host}`); if (req.method === 'GET' && url.pathname.startsWith('/assets/')) { await serveAsset(url.pathname.slice('/assets/'.length), res); return; } if (req.method === 'GET' && url.pathname === '/') { res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' }); res.end(renderPage({})); return; } if (req.method === 'POST' && url.pathname === '/') { const form = await readBody(req); const handleLabel = (form.handle || '').trim().toLowerCase(); const fields = { theme: DEFAULT_THEME, handle: handleLabel ? `${handleLabel}.${HANDLE_DOMAIN}` : '', email: (form.email || '').trim(), password: form.password || '', displayName: (form.displayName || '').trim(), bio: (form.bio || '').trim(), inviteCode: (form.inviteCode || '').trim() }; try { const result = await createSignup(fields, PDS_URL); res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' }); res.end(renderPage({ success: result })); } catch (err) { console.error(`[signup] failed for ${fields.handle || '(no handle)'}: ${err.message}`); res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' }); const { password: _password, ...formWithoutPassword } = form; res.end( renderPage({ prefill: { ...formWithoutPassword, handle: handleLabel }, error: friendlyError(err) }) ); } return; } if (req.method === 'GET' && url.pathname === '/oauth-client-metadata.json') { res.writeHead(200, { 'Content-Type': 'application/json' }); res.end(JSON.stringify(oauthClientMetadata(PUBLIC_URL))); return; } if (req.method === 'GET' && url.pathname === '/finish-profile') { try { const { redirectUrl } = await handleFinishProfile(url.searchParams.get('token'), PUBLIC_URL); res.writeHead(302, { Location: redirectUrl }); res.end(); } catch (err) { console.error(`[finish-profile] failed: ${err.message}`); res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' }); res.end( renderPage({ error: "That link isn't valid or has expired — please use the link from your original confirmation page, or sign up again." }) ); } return; } if (req.method === 'GET' && url.pathname === '/oauth/callback') { try { const { redirectUrl, error } = await handleOAuthCallback(url.searchParams, PUBLIC_URL); if (error === 'not-verified') { res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' }); res.end( renderPage({ error: 'Please verify your email first (check your inbox for the link from tranquil-pds), then use the "finish profile" link again.' }) ); return; } res.writeHead(302, { Location: redirectUrl }); res.end(); } catch (err) { console.error(`[oauth-callback] failed: ${err.message}`); res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' }); res.end( renderPage({ error: 'Something went wrong finishing your profile setup. Please try the "finish profile" link again.' }) ); } return; } if (req.method === 'GET' && url.pathname === '/journey') { try { const handleParam = url.searchParams.get('handle'); // Two ways in: the signed token (carries did/theme/vars from // signup, used right after finish-profile) or just a bare // ?handle= — journey.json only ever substitutes {{handle}}, // so a handle alone is enough to render the same page with no // token to lose or bookmark. did is resolved fresh each time // (no signature needed — this route is read-only content, not // an authenticated action). const claims = handleParam ? { handle: handleParam, did: await resolveHandleToDid(handleParam), theme: DEFAULT_THEME, vars: { handle: handleParam } } : handleJourney(url.searchParams.get('token')); const steps = await loadJourney(); const vars = { ...claims.vars, finishProfileUrl: finishProfileUrl(claims, PUBLIC_URL) }; res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' }); res.end(renderJourneyPage({ steps, vars, handle: claims.handle })); } catch (err) { console.error(`[journey] failed: ${err.message}`); res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' }); res.end( renderPage({ error: "That link isn't valid — please use the link from your original confirmation page or email." }) ); } return; } res.writeHead(404, { 'Content-Type': 'text/plain' }); res.end('Not found'); }); server.listen(PORT, () => { console.log(`Signup form ${SCRIPT_VERSION} listening on http://localhost:${PORT} (PDS: ${PDS_URL})`); }); } main();