`;
}
// ── Home Page ────────────────────────────────────────────────────────────────
function NotificationFeed({ notifications, onMarkRead, onPurge }) {
if (!notifications.length) return null;
return html`
${t('notif.title')}
${notifications.map(n => html`
{
// Reading it is the point of clicking it: it goes, here and in the
// count, rather than sitting there greyed out.
onMarkRead(n.id);
if (n.link) navigate(n.link);
}}>
${n.kind}${n.title}${new Date(n.created_at).toLocaleDateString()}
`)}
`;
}
function HomePage({ groups, notifications, onMarkRead, onPurge }) {
if (groups.length === 0) {
return html`
`;
}
function _b64ToU8(b64) {
const bin = atob(b64);
const arr = new Uint8Array(bin.length);
for (let i = 0; i < bin.length; i++) arr[i] = bin.charCodeAt(i);
return arr;
}
// ── Members Panel ────────────────────────────────────────────────────────
function MembersPanel({ groupId, group, token, transportRef, gekRef,
isNodeAdmin, userId, operatorPaired, onPaired }) {
const [members, setMembers] = useState([]);
const [adminId, setAdminId] = useState('');
const [loading, setLoading] = useState(true);
const [inviteUser, setInviteUser] = useState('');
const [inviting, setInviting] = useState(false);
const [error, setError] = useState('');
const [inviteCode, setInviteCode] = useState(null);
const [pairCode, setPairCode] = useState('');
const [pairStatus, setPairStatus] = useState('');
const [pairing, setPairing] = useState(false);
// Pairing lives here rather than in Settings because this is where a live
// connection to the node exists — and it is offered only when the node itself
// says this account is its operator (is_node_admin comes from the authenticated
// handshake_ack, not from the hub).
const doPair = useCallback(async (e) => {
e.preventDefault();
const code = pairCode.trim();
if (!code) return;
setPairing(true);
setPairStatus('');
try {
const transport = transportRef && transportRef.current;
if (!transport || !transport.connected) throw new Error('Not connected to the node');
await transport.pairOperator(userId, code);
setPairCode('');
setPairStatus('paired');
// The node has pinned this key as an operator key; the form has nothing
// left to do. It used to stay put through a refresh, because what governed
// it was the account, which pairing does not change.
if (onPaired) onPaired();
} catch (err) {
setPairStatus(err.message);
} finally {
setPairing(false);
}
}, [pairCode, transportRef, userId]);
const loadMembers = useCallback(() => {
setLoading(true);
hubFetch(`/v1/groups/${groupId}/members`, { token })
.then(data => {
setMembers(data.members || []);
setAdminId(data.admin_id || '');
})
.catch(() => {})
.finally(() => setLoading(false));
}, [groupId, token]);
useEffect(() => { loadMembers(); }, [loadMembers]);
const isAdmin = group && group.is_admin;
const doInvite = useCallback(async (e) => {
e.preventDefault();
if (!inviteUser.trim()) return;
setInviting(true);
setError('');
setInviteCode(null);
try {
const transport = transportRef && transportRef.current;
const username = inviteUser.trim();
if (!transport || !transport.connected) {
throw new Error('Not connected to the node — it must be online to invite');
}
// The hub is asked for the account id, and nothing else. It is no longer
// asked for the invitee's public key: the node wraps the group key itself,
// for a key the invitee proves possession of when they connect (H3). A hub
// that answered with the wrong account here would produce an invite whose
// code it never learns — the code goes to a human, out of band.
const account = await hubFetch(`/v1/users/${username}/pubkeys`, { token });
// Signed with the identity this node pinned for us — the only one it
// will accept, and the only one we hold here.
const sk = transport.sessionKeys && transport.sessionKeys.skEdB64;
const signFn = (sk && window.MeshBayKeys)
? (transcript) => window.MeshBayKeys.signBytes(sk, transcript)
: null;
const result = await transport.createInvite(
account.user_id, groupId, username, signFn);
// Membership on the hub is what lets them reach the node at all; the code
// is what gets them the key.
await hubFetch(`/v1/groups/${groupId}/members/${username}`, {
method: 'POST', token, body: {},
});
setInviteCode({ username, code: result.code, expires: result.expires_at });
setInviteUser('');
loadMembers();
} catch (err) {
setError(err.message);
} finally {
setInviting(false);
}
}, [groupId, token, inviteUser, loadMembers, transportRef]);
if (loading) return html`