ab8e178 feat(web): UI polish, auto sign-in from the link, installable app (#46) · ermite

M README.md +2 -2


@@ -27,7 +27,7 @@ ermite serve
27	27		\| `ERMITE_LOG_FORMAT` \| `json` \| `json` or `console` \|
28	28		\| `ERMITE_COMMITTER_NAME` \| `ermite` \| committer of squash merges \|
29	29		\| `ERMITE_COMMITTER_EMAIL` \| `ermite@<public host>` \| committer email of squash merges \|
30		-	\| `ERMITE_OWNER` \| `owner` \| owner login that CI shows in `github.repository` (`<owner>/<repo>`) and `github.repository_owner`; follows the rules of repository names \|
	30	+	\| `ERMITE_OWNER` \| `owner` \| owner login: shown in the web header when signed in, named in new passkeys, and the one CI shows in `github.repository` (`<owner>/<repo>`) and `github.repository_owner`; follows the rules of repository names \|
31	31		\| `ERMITE_CI_LOG_RETENTION` \| `90d` \| how long CI runs, jobs, checks and logs are kept: `Nd` (days) or a Go duration such as `720h`, at least one hour \|
32	32		\| `ERMITE_SECRETS_KEY` \| empty \| 32 random bytes in base64 (`head -c 32 /dev/urandom \\| base64`) that encrypt CI secrets at rest (AES-256-GCM); keep it in the deployment secret store like `ERMITE_ADMIN_TOKEN`. Without it `ermite secret set` fails and jobs receive no secrets (variables and environments still work). The server refuses to start with another key than the one the stored secrets were sealed with; losing the key loses every secret (set them again), a backup without the key reveals none \|
33	33		\| `ERMITE_CI_ARTIFACTS` \| `1` \| `0` turns the CI artifacts off: no artifact service, and artifact actions fail as on a GitHub Enterprise Server without artifacts v4 \|

@@ -168,7 +168,7 @@ The cache (`actions/cache`, `setup-go`/`setup-node` `cache:`) is served by the r
168	168		Two ways in, both for the owner, both giving the same session cookie for 12 hours. Neither works over plain `http` except on localhost: the cookie is `Secure`.
169	169
170	170		- Passkey (a phone, a laptop, a security key): open `/-/login` and press "Sign in with a passkey". Nothing to type, no terminal. A passkey is added once from `/-/passkeys` while signed in.
171		-	- Link: `ermite web login`, run with the admin token or a token with every scope, prints a link that works once within 60 seconds. Opening it and confirming signs the browser in (never longer than the token that asked for the link). It is also how to sign in the first time, before any passkey exists.
	171	+	- Link: `ermite web login`, run with the admin token or a token with every scope, prints a link that works once within 60 seconds. Opening it signs the browser in (without scripts, click the button on the page) (never longer than the token that asked for the link). It is also how to sign in the first time, before any passkey exists.
172	172
173	173		Passkeys need `ERMITE_PUBLIC_URL` to be `https` (or `http://localhost`) with a host name, not an IP address: WebAuthn ties a passkey to that name, and a passkey registered for one name does not work on another. On `http://127.0.0.1:…` the server starts without passkeys (the log says `passkeys disabled`, the routes and links are absent, `ermite version` does not list `passkeys`). Up to 20 passkeys can be registered; each asks for user verification (a fingerprint, a face or a PIN), and the server stores only the public key. A security key that reports a signature counter is checked for cloning; synced passkeys (iCloud, Google, a password manager) report none, so they are not.
174	174


@@ -27,7 +27,7 @@ ermite serve
27		\| `ERMITE_LOG_FORMAT` \| `json` \| `json` or `console` \|	27		\| `ERMITE_LOG_FORMAT` \| `json` \| `json` or `console` \|
28		\| `ERMITE_COMMITTER_NAME` \| `ermite` \| committer of squash merges \|	28		\| `ERMITE_COMMITTER_NAME` \| `ermite` \| committer of squash merges \|
29		\| `ERMITE_COMMITTER_EMAIL` \| `ermite@<public host>` \| committer email of squash merges \|	29		\| `ERMITE_COMMITTER_EMAIL` \| `ermite@<public host>` \| committer email of squash merges \|
30	-	\| `ERMITE_OWNER` \| `owner` \| owner login that CI shows in `github.repository` (`<owner>/<repo>`) and `github.repository_owner`; follows the rules of repository names \|	30	+	\| `ERMITE_OWNER` \| `owner` \| owner login: shown in the web header when signed in, named in new passkeys, and the one CI shows in `github.repository` (`<owner>/<repo>`) and `github.repository_owner`; follows the rules of repository names \|
31		\| `ERMITE_CI_LOG_RETENTION` \| `90d` \| how long CI runs, jobs, checks and logs are kept: `Nd` (days) or a Go duration such as `720h`, at least one hour \|	31		\| `ERMITE_CI_LOG_RETENTION` \| `90d` \| how long CI runs, jobs, checks and logs are kept: `Nd` (days) or a Go duration such as `720h`, at least one hour \|
32		\| `ERMITE_SECRETS_KEY` \| empty \| 32 random bytes in base64 (`head -c 32 /dev/urandom \\| base64`) that encrypt CI secrets at rest (AES-256-GCM); keep it in the deployment secret store like `ERMITE_ADMIN_TOKEN`. Without it `ermite secret set` fails and jobs receive no secrets (variables and environments still work). The server refuses to start with another key than the one the stored secrets were sealed with; losing the key loses every secret (set them again), a backup without the key reveals none \|	32		\| `ERMITE_SECRETS_KEY` \| empty \| 32 random bytes in base64 (`head -c 32 /dev/urandom \\| base64`) that encrypt CI secrets at rest (AES-256-GCM); keep it in the deployment secret store like `ERMITE_ADMIN_TOKEN`. Without it `ermite secret set` fails and jobs receive no secrets (variables and environments still work). The server refuses to start with another key than the one the stored secrets were sealed with; losing the key loses every secret (set them again), a backup without the key reveals none \|
33		\| `ERMITE_CI_ARTIFACTS` \| `1` \| `0` turns the CI artifacts off: no artifact service, and artifact actions fail as on a GitHub Enterprise Server without artifacts v4 \|	33		\| `ERMITE_CI_ARTIFACTS` \| `1` \| `0` turns the CI artifacts off: no artifact service, and artifact actions fail as on a GitHub Enterprise Server without artifacts v4 \|

@@ -168,7 +168,7 @@ The cache (`actions/cache`, `setup-go`/`setup-node` `cache:`) is served by the r
168		Two ways in, both for the owner, both giving the same session cookie for 12 hours. Neither works over plain `http` except on localhost: the cookie is `Secure`.	168		Two ways in, both for the owner, both giving the same session cookie for 12 hours. Neither works over plain `http` except on localhost: the cookie is `Secure`.
169			169
170		- Passkey (a phone, a laptop, a security key): open `/-/login` and press "Sign in with a passkey". Nothing to type, no terminal. A passkey is added once from `/-/passkeys` while signed in.	170		- Passkey (a phone, a laptop, a security key): open `/-/login` and press "Sign in with a passkey". Nothing to type, no terminal. A passkey is added once from `/-/passkeys` while signed in.
171	-	- Link: `ermite web login`, run with the admin token or a token with every scope, prints a link that works once within 60 seconds. Opening it and confirming signs the browser in (never longer than the token that asked for the link). It is also how to sign in the first time, before any passkey exists.	171	+	- Link: `ermite web login`, run with the admin token or a token with every scope, prints a link that works once within 60 seconds. Opening it signs the browser in (without scripts, click the button on the page) (never longer than the token that asked for the link). It is also how to sign in the first time, before any passkey exists.
172			172
173		Passkeys need `ERMITE_PUBLIC_URL` to be `https` (or `http://localhost`) with a host name, not an IP address: WebAuthn ties a passkey to that name, and a passkey registered for one name does not work on another. On `http://127.0.0.1:…` the server starts without passkeys (the log says `passkeys disabled`, the routes and links are absent, `ermite version` does not list `passkeys`). Up to 20 passkeys can be registered; each asks for user verification (a fingerprint, a face or a PIN), and the server stores only the public key. A security key that reports a signature counter is checked for cloning; synced passkeys (iCloud, Google, a password manager) report none, so they are not.	173		Passkeys need `ERMITE_PUBLIC_URL` to be `https` (or `http://localhost`) with a host name, not an IP address: WebAuthn ties a passkey to that name, and a passkey registered for one name does not work on another. On `http://127.0.0.1:…` the server starts without passkeys (the log says `passkeys disabled`, the routes and links are absent, `ermite version` does not list `passkeys`). Up to 20 passkeys can be registered; each asks for user verification (a fingerprint, a face or a PIN), and the server stores only the public key. A security key that reports a signature counter is checked for cloning; synced passkeys (iCloud, Google, a password manager) report none, so they are not.
174			174

M internal/adapters/web/ASSETS.md +2 -1


@@ -16,7 +16,8 @@ content-hashed names. Nothing is fetched at runtime.
16	16		\| `static/css/*.css` \| native CSS, served as one stylesheet in name order; relative `url(fonts/…)` and `url(icons/…)` become hashed URLs \| written here \| \|
17	17		\| `static/fonts/atkinson-next.woff2`, `atkinson-next-italic.woff2` \| Atkinson Hyperlegible Next, variable weight, latin subset (SIL OFL 1.1, `static/fonts/OFL-next.txt`) \| Google Fonts \| `18b2a1a39a2fa298b0ba5390aca68462669826c90925656f1c1f6796e0e1bbaf`, `4a5037bfaf6680f40147407407ec09fa42925774bde809a579283d27f9f08106` \|
18	18		\| `static/fonts/atkinson-mono.woff2` \| Atkinson Hyperlegible Mono, variable weight, latin subset (SIL OFL 1.1, `static/fonts/OFL-mono.txt`) \| Google Fonts \| `2706b1ee4f452e744ea91f7e4908cbde9c5d35521bf5ffffc71a382a2de89613` \|
19		-	\| `static/icons/*.svg` \| interface icons, used as CSS masks; `brand.svg` is a grey picture shown as is \| written here \| \|
	19	+	\| `static/icons/*.svg` \| interface icons, used as CSS masks; `brand.svg` is a grey picture shown as is. Only the icons in use are copied, one file each: `branch`, `search`, `tag`, `file`, `user`, `key`, `log-in`, `log-out` are Lucide 1.8 (`git-branch`, `search`, `tag`, `file-text`, `user-round`, `key-round`, `log-in`, `log-out`; ISC, https://lucide.dev/license) \| Lucide; `brand.svg` written here \| \|
	20	+	\| `static/app/*.png` \| icons of the installed web app (manifest, `apple-touch-icon`), rendered from `brand.svg` with resvg; the maskable and Apple icons have the picture in the safe zone on `#181818` \| generated here \| \|
20	21		\| `static/rules.json` \| speculation rules: prefetch the light same-origin pages on hover (`Speculation-Rules` header); the heavy ones (tree, blob, commit, commits, compare, refs, raw, MR "since") are excluded, each costs several Git reads on the server \| written here \| \|
21	22
22	23		The three htmx files are the exact files the approved mockup was built with.


@@ -16,7 +16,8 @@ content-hashed names. Nothing is fetched at runtime.
16		\| `static/css/*.css` \| native CSS, served as one stylesheet in name order; relative `url(fonts/…)` and `url(icons/…)` become hashed URLs \| written here \| \|	16		\| `static/css/*.css` \| native CSS, served as one stylesheet in name order; relative `url(fonts/…)` and `url(icons/…)` become hashed URLs \| written here \| \|
17		\| `static/fonts/atkinson-next.woff2`, `atkinson-next-italic.woff2` \| Atkinson Hyperlegible Next, variable weight, latin subset (SIL OFL 1.1, `static/fonts/OFL-next.txt`) \| Google Fonts \| `18b2a1a39a2fa298b0ba5390aca68462669826c90925656f1c1f6796e0e1bbaf`, `4a5037bfaf6680f40147407407ec09fa42925774bde809a579283d27f9f08106` \|	17		\| `static/fonts/atkinson-next.woff2`, `atkinson-next-italic.woff2` \| Atkinson Hyperlegible Next, variable weight, latin subset (SIL OFL 1.1, `static/fonts/OFL-next.txt`) \| Google Fonts \| `18b2a1a39a2fa298b0ba5390aca68462669826c90925656f1c1f6796e0e1bbaf`, `4a5037bfaf6680f40147407407ec09fa42925774bde809a579283d27f9f08106` \|
18		\| `static/fonts/atkinson-mono.woff2` \| Atkinson Hyperlegible Mono, variable weight, latin subset (SIL OFL 1.1, `static/fonts/OFL-mono.txt`) \| Google Fonts \| `2706b1ee4f452e744ea91f7e4908cbde9c5d35521bf5ffffc71a382a2de89613` \|	18		\| `static/fonts/atkinson-mono.woff2` \| Atkinson Hyperlegible Mono, variable weight, latin subset (SIL OFL 1.1, `static/fonts/OFL-mono.txt`) \| Google Fonts \| `2706b1ee4f452e744ea91f7e4908cbde9c5d35521bf5ffffc71a382a2de89613` \|
19	-	\| `static/icons/*.svg` \| interface icons, used as CSS masks; `brand.svg` is a grey picture shown as is \| written here \| \|	19	+	\| `static/icons/*.svg` \| interface icons, used as CSS masks; `brand.svg` is a grey picture shown as is. Only the icons in use are copied, one file each: `branch`, `search`, `tag`, `file`, `user`, `key`, `log-in`, `log-out` are Lucide 1.8 (`git-branch`, `search`, `tag`, `file-text`, `user-round`, `key-round`, `log-in`, `log-out`; ISC, https://lucide.dev/license) \| Lucide; `brand.svg` written here \| \|
			20	+	\| `static/app/*.png` \| icons of the installed web app (manifest, `apple-touch-icon`), rendered from `brand.svg` with resvg; the maskable and Apple icons have the picture in the safe zone on `#181818` \| generated here \| \|
20		\| `static/rules.json` \| speculation rules: prefetch the light same-origin pages on hover (`Speculation-Rules` header); the heavy ones (tree, blob, commit, commits, compare, refs, raw, MR "since") are excluded, each costs several Git reads on the server \| written here \| \|	21		\| `static/rules.json` \| speculation rules: prefetch the light same-origin pages on hover (`Speculation-Rules` header); the heavy ones (tree, blob, commit, commits, compare, refs, raw, MR "since") are excluded, each costs several Git reads on the server \| written here \| \|
21			22
22		The three htmx files are the exact files the approved mockup was built with.	23		The three htmx files are the exact files the approved mockup was built with.

M internal/adapters/web/assets.go +68 -0


@@ -6,6 +6,7 @@ import (
6	6		"crypto/sha256"
7	7		"embed"
8	8		"encoding/hex"
	9	+	"encoding/json"
9	10		"errors"
10	11		"io/fs"
11	12		"net/http"

@@ -24,6 +25,9 @@ const StaticPrefix = "/-/static/"
24	25		// the content, so they can be cached for ever.
25	26		type Assets struct {
26	27		CSS, HTMX, Live, SSE, App, Files, Passkey, Log, Icon string
	28	+	// Manifest is the web app manifest (install on a phone's home screen),
	29	+	// AppleIcon the home screen icon iOS reads from a link instead.
	30	+	Manifest, AppleIcon string
27	31		// Font is the UI font, preloaded by every page.
28	32		Font string
29	33		// Rules is the speculation rules file named by the Speculation-Rules header.

@@ -146,9 +150,73 @@ func loadAssets() (*assetSet, error) {
146	150		return nil, err
147	151		}
148	152		s.urls.Icon = put("img", "icon.svg", icon, "image/svg+xml")
	153	+
	154	+	if err := s.loadApp(put); err != nil {
	155	+	return nil, err
	156	+	}
149	157		return s, nil
150	158		}
151	159
	160	+	// appIcons are the PNG icons of the installed app (static/app), in the
	161	+	// manifest; purpose "maskable" has the picture inside the safe zone on a
	162	+	// full-bleed background, for launchers that crop to a circle or a squircle.
	163	+	var appIcons = []struct{ file, sizes, purpose string }{
	164	+	{"icon-192.png", "192x192", "any"},
	165	+	{"icon-512.png", "512x512", "any"},
	166	+	{"icon-maskable-512.png", "512x512", "maskable"},
	167	+	}
	168	+
	169	+	// webManifest is the shape of the web app manifest: the minimum a browser
	170	+	// asks for to offer "install" / "add to home screen".
	171	+	type webManifest struct {
	172	+	Name string `json:"name"`
	173	+	ShortName string `json:"short_name"`
	174	+	StartURL string `json:"start_url"`
	175	+	Scope string `json:"scope"`
	176	+	Display string `json:"display"`
	177	+	BackgroundColor string `json:"background_color"`
	178	+	ThemeColor string `json:"theme_color"`
	179	+	Icons []manifestIcon `json:"icons"`
	180	+	}
	181	+
	182	+	type manifestIcon struct {
	183	+	Src string `json:"src"`
	184	+	Sizes string `json:"sizes"`
	185	+	Type string `json:"type"`
	186	+	Purpose string `json:"purpose"`
	187	+	}
	188	+
	189	+	// appColor is the dark canvas: the splash screen and the bar of the installed
	190	+	// app (the pages follow the system theme; the manifest takes one colour).
	191	+	const appColor = "#050505"
	192	+
	193	+	// loadApp adds the app icons and the manifest, which names them by their
	194	+	// hashed URLs.
	195	+	func (s *assetSet) loadApp(put func(dir, name string, b []byte, typ string) string) error {
	196	+	m := webManifest{
	197	+	Name: "ermite", ShortName: "ermite", StartURL: "/", Scope: "/", Display: "standalone",
	198	+	BackgroundColor: appColor, ThemeColor: appColor,
	199	+	}
	200	+	for _, ic := range appIcons {
	201	+	b, err := staticFS.ReadFile("static/app/" + ic.file)
	202	+	if err != nil {
	203	+	return err
	204	+	}
	205	+	m.Icons = append(m.Icons, manifestIcon{Src: put("app", ic.file, b, "image/png"), Sizes: ic.sizes, Type: "image/png", Purpose: ic.purpose})
	206	+	}
	207	+	apple, err := staticFS.ReadFile("static/app/apple-touch-icon.png")
	208	+	if err != nil {
	209	+	return err
	210	+	}
	211	+	s.urls.AppleIcon = put("app", "apple-touch-icon.png", apple, "image/png")
	212	+	b, err := json.Marshal(m)
	213	+	if err != nil {
	214	+	return err
	215	+	}
	216	+	s.urls.Manifest = put("app", "manifest.webmanifest", b, "application/manifest+json")
	217	+	return nil
	218	+	}
	219	+
152	220		// serve answers GET /-/static/<hashed name>. A name that does not match a
153	221		// current asset is a 404, so a stale hash never serves the wrong content.
154	222		func (s assetSet) serve(w http.ResponseWriter, r http.Request) {


@@ -6,6 +6,7 @@ import (
6	"crypto/sha256"	6		"crypto/sha256"
7	"embed"	7		"embed"
8	"encoding/hex"	8		"encoding/hex"
		9	+	"encoding/json"
9	"errors"	10		"errors"
10	"io/fs"	11		"io/fs"
11	"net/http"	12		"net/http"

@@ -24,6 +25,9 @@ const StaticPrefix = "/-/static/"
24	// the content, so they can be cached for ever.	25		// the content, so they can be cached for ever.
25	type Assets struct {	26		type Assets struct {
26	CSS, HTMX, Live, SSE, App, Files, Passkey, Log, Icon string	27		CSS, HTMX, Live, SSE, App, Files, Passkey, Log, Icon string
		28	+	// Manifest is the web app manifest (install on a phone's home screen),
		29	+	// AppleIcon the home screen icon iOS reads from a link instead.
		30	+	Manifest, AppleIcon string
27	// Font is the UI font, preloaded by every page.	31		// Font is the UI font, preloaded by every page.
28	Font string	32		Font string
29	// Rules is the speculation rules file named by the Speculation-Rules header.	33		// Rules is the speculation rules file named by the Speculation-Rules header.

@@ -146,9 +150,73 @@ func loadAssets() (*assetSet, error) {
146	return nil, err	150		return nil, err
147	}	151		}
148	s.urls.Icon = put("img", "icon.svg", icon, "image/svg+xml")	152		s.urls.Icon = put("img", "icon.svg", icon, "image/svg+xml")
		153	+
		154	+	if err := s.loadApp(put); err != nil {
		155	+	return nil, err
		156	+	}
149	return s, nil	157		return s, nil
150	}	158		}
151		159
		160	+	// appIcons are the PNG icons of the installed app (static/app), in the
		161	+	// manifest; purpose "maskable" has the picture inside the safe zone on a
		162	+	// full-bleed background, for launchers that crop to a circle or a squircle.
		163	+	var appIcons = []struct{ file, sizes, purpose string }{
		164	+	{"icon-192.png", "192x192", "any"},
		165	+	{"icon-512.png", "512x512", "any"},
		166	+	{"icon-maskable-512.png", "512x512", "maskable"},
		167	+	}
		168	+
		169	+	// webManifest is the shape of the web app manifest: the minimum a browser
		170	+	// asks for to offer "install" / "add to home screen".
		171	+	type webManifest struct {
		172	+	Name string `json:"name"`
		173	+	ShortName string `json:"short_name"`
		174	+	StartURL string `json:"start_url"`
		175	+	Scope string `json:"scope"`
		176	+	Display string `json:"display"`
		177	+	BackgroundColor string `json:"background_color"`
		178	+	ThemeColor string `json:"theme_color"`
		179	+	Icons []manifestIcon `json:"icons"`
		180	+	}
		181	+
		182	+	type manifestIcon struct {
		183	+	Src string `json:"src"`
		184	+	Sizes string `json:"sizes"`
		185	+	Type string `json:"type"`
		186	+	Purpose string `json:"purpose"`
		187	+	}
		188	+
		189	+	// appColor is the dark canvas: the splash screen and the bar of the installed
		190	+	// app (the pages follow the system theme; the manifest takes one colour).
		191	+	const appColor = "#050505"
		192	+
		193	+	// loadApp adds the app icons and the manifest, which names them by their
		194	+	// hashed URLs.
		195	+	func (s *assetSet) loadApp(put func(dir, name string, b []byte, typ string) string) error {
		196	+	m := webManifest{
		197	+	Name: "ermite", ShortName: "ermite", StartURL: "/", Scope: "/", Display: "standalone",
		198	+	BackgroundColor: appColor, ThemeColor: appColor,
		199	+	}
		200	+	for _, ic := range appIcons {
		201	+	b, err := staticFS.ReadFile("static/app/" + ic.file)
		202	+	if err != nil {
		203	+	return err
		204	+	}
		205	+	m.Icons = append(m.Icons, manifestIcon{Src: put("app", ic.file, b, "image/png"), Sizes: ic.sizes, Type: "image/png", Purpose: ic.purpose})
		206	+	}
		207	+	apple, err := staticFS.ReadFile("static/app/apple-touch-icon.png")
		208	+	if err != nil {
		209	+	return err
		210	+	}
		211	+	s.urls.AppleIcon = put("app", "apple-touch-icon.png", apple, "image/png")
		212	+	b, err := json.Marshal(m)
		213	+	if err != nil {
		214	+	return err
		215	+	}
		216	+	s.urls.Manifest = put("app", "manifest.webmanifest", b, "application/manifest+json")
		217	+	return nil
		218	+	}
		219	+
152	// serve answers GET /-/static/<hashed name>. A name that does not match a	220		// serve answers GET /-/static/<hashed name>. A name that does not match a
153	// current asset is a 404, so a stale hash never serves the wrong content.	221		// current asset is a 404, so a stale hash never serves the wrong content.
154	func (s assetSet) serve(w http.ResponseWriter, r http.Request) {	222		func (s assetSet) serve(w http.ResponseWriter, r http.Request) {

M internal/adapters/web/fragments.templ +5 -4


@@ -82,8 +82,9 @@ templ MRNotice(text, href string) {
82	82		}
83	83
84	84		// Live is the connection to the event stream, in the hint badge. It shows
85		-	// only once a connection was lost: a page that never connected, or that is
86		-	// live, says nothing. The events of the stream are fragments that ermiteLive
	85	+	// only once a connection stays lost for a few seconds (ermiteLive.lost): a
	86	+	// page that never connected, that is live, or whose stream comes back right
	87	+	// away (a proxy closing an idle stream) says nothing. The events of the stream are fragments that ermiteLive
87	88		// (ermite.js) swaps in the page. A page without a stream renders nothing.
88	89		//
89	90		// hx-sse retries a lost connection for ever, with a growing delay. A refusal

@@ -97,8 +98,8 @@ templ Live(l Layout) {
97	98		hx-sse:connect={ l.LiveURL }
98	99		hx-swap="none"
99	100		:text="data.state === 'offline' ? 'live updates paused' : ''"
100		-	hx-on="htmx:sse:after:connection -> data.state = 'live';
101		-	htmx:sse:close, htmx:sse:error -> data.state = 'offline';
	101	+	hx-on="htmx:sse:after:connection -> ermiteLive.back();
	102	+	htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
102	103		htmx:sse:error -> ermiteLive.error(event.detail.status);
103	104		htmx:sse:before:connection -> ermiteLive.gate(event);
104	105		home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

 }
 // Live is the connection to the event stream, in the hint badge. It shows
-// only once a connection was lost: a page that never connected, or that is
+// only once a connection stays lost for a few seconds (ermiteLive.lost): a
-// live, says nothing. The events of the stream are fragments that ermiteLive
+// page that never connected, that is live, or whose stream comes back right
+// away (a proxy closing an idle stream) says nothing. The events of the stream are fragments that ermiteLive
 // (ermite.js) swaps in the page. A page without a stream renders nothing.
 //
 // hx-sse retries a lost connection for ever, with a growing delay. A refusal
 			hx-sse:connect={ l.LiveURL }
 			hx-swap="none"
 			:text="data.state === 'offline' ? 'live updates paused' : ''"
-			hx-on="htmx:sse:after:connection -> data.state = 'live';
+			hx-on="htmx:sse:after:connection -> ermiteLive.back();
-           htmx:sse:close, htmx:sse:error -> data.state = 'offline';
+           htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
            htmx:sse:error -> ermiteLive.error(event.detail.status);
            htmx:sse:before:connection -> ermiteLive.gate(event);
            home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

M internal/adapters/web/fragments_templ.go +5 -4 generated file: collapsed

load diff

M internal/adapters/web/fragments_test.go +3 -3


@@ -58,9 +58,9 @@ func TestShellDegradesWithoutScripts(t *testing.T) {
58	58		got := renderToString(t, Header(l))
59	59		assert.Contains(t, got, `<a class="btn ref" href="/demo/refs" data-fire="refs"`)
60	60		assert.NotContains(t, got, "hx-on:click", "no handler is inlined in the header")
61		-	for _, want := range []string{`class="btn search" data-js`, `class="btn icon" data-js data-fire="help"`} {
62		-	assert.Contains(t, got, want)
63		-	}
	61	+	assert.Contains(t, got, `class="btn search" data-js`)
	62	+	assert.NotContains(t, got, `data-fire="help"`, "the help button is in the footer only")
	63	+	assert.Contains(t, renderToString(t, Footer(l)), `class="foot-keys" data-js data-fire="help"`)
64	64		}
65	65
66	66		// Data reaches the scripts through data-* attributes, never spliced into an


@@ -58,9 +58,9 @@ func TestShellDegradesWithoutScripts(t *testing.T) {
58		got := renderToString(t, Header(l))	58		got := renderToString(t, Header(l))
59		assert.Contains(t, got, `<a class="btn ref" href="/demo/refs" data-fire="refs"`)	59		assert.Contains(t, got, `<a class="btn ref" href="/demo/refs" data-fire="refs"`)
60		assert.NotContains(t, got, "hx-on:click", "no handler is inlined in the header")	60		assert.NotContains(t, got, "hx-on:click", "no handler is inlined in the header")
61	-	for _, want := range []string{`class="btn search" data-js`, `class="btn icon" data-js data-fire="help"`} {	61	+	assert.Contains(t, got, `class="btn search" data-js`)
62	-	assert.Contains(t, got, want)	62	+	assert.NotContains(t, got, `data-fire="help"`, "the help button is in the footer only")
63	-	}	63	+	assert.Contains(t, renderToString(t, Footer(l)), `class="foot-keys" data-js data-fire="help"`)
64		}	64		}
65			65
66		// Data reaches the scripts through data-* attributes, never spliced into an	66		// Data reaches the scripts through data-* attributes, never spliced into an

A internal/adapters/web/jstest/live.test.mjs +40 -0

@@ -0,0 +1,40 @@
	1	+	// Tests of the "live updates paused" delay of static/js/ermite.js
	2	+	// (window.ermiteLive.lost/back) with mocked timers. Only the ermiteLive part of
	3	+	// the file is evaluated: the rest needs a page. Run with
	4	+	// node --test 'internal/adapters/web/jstest/*.test.mjs'
	5	+	import assert from 'node:assert/strict';
	6	+	import { readFileSync } from 'node:fs';
	7	+	import { test } from 'node:test';
	8	+
	9	+	const src = readFileSync(new URL('../static/js/ermite.js', import.meta.url), 'utf8');
	10	+	const live = src.slice(src.indexOf('window.ermiteLive = '));
	11	+
	12	+	function setup(t) {
	13	+	t.mock.timers.enable({ apis: ['setTimeout'] });
	14	+	const hint = { dataset: { state: 'connecting' } };
	15	+	globalThis.window = {};
	16	+	globalThis.document = { querySelector: (sel) => (sel === '.hint-live' ? hint : null) };
	17	+	new Function(live)();
	18	+	return { live: globalThis.window.ermiteLive, hint };
	19	+	}
	20	+
	21	+	test('a drop shorter than the delay says nothing', (t) => {
	22	+	const { live, hint } = setup(t);
	23	+	live.back();
	24	+	live.lost();
	25	+	t.mock.timers.tick(4000);
	26	+	live.back();
	27	+	t.mock.timers.tick(10000);
	28	+	assert.equal(hint.dataset.state, 'live');
	29	+	});
	30	+
	31	+	test('a drop that lasts shows offline, once, until the stream is back', (t) => {
	32	+	const { live, hint } = setup(t);
	33	+	live.lost();
	34	+	t.mock.timers.tick(3000);
	35	+	live.lost(); // a second error does not restart the delay
	36	+	t.mock.timers.tick(2000);
	37	+	assert.equal(hint.dataset.state, 'offline');
	38	+	live.back();
	39	+	assert.equal(hint.dataset.state, 'live');
	40	+	});

@@ -0,0 +1,40 @@
	1	+	// Tests of the "live updates paused" delay of static/js/ermite.js
	2	+	// (window.ermiteLive.lost/back) with mocked timers. Only the ermiteLive part of
	3	+	// the file is evaluated: the rest needs a page. Run with
	4	+	// node --test 'internal/adapters/web/jstest/*.test.mjs'
	5	+	import assert from 'node:assert/strict';
	6	+	import { readFileSync } from 'node:fs';
	7	+	import { test } from 'node:test';
	8	+
	9	+	const src = readFileSync(new URL('../static/js/ermite.js', import.meta.url), 'utf8');
	10	+	const live = src.slice(src.indexOf('window.ermiteLive = '));
	11	+
	12	+	function setup(t) {
	13	+	t.mock.timers.enable({ apis: ['setTimeout'] });
	14	+	const hint = { dataset: { state: 'connecting' } };
	15	+	globalThis.window = {};
	16	+	globalThis.document = { querySelector: (sel) => (sel === '.hint-live' ? hint : null) };
	17	+	new Function(live)();
	18	+	return { live: globalThis.window.ermiteLive, hint };
	19	+	}
	20	+
	21	+	test('a drop shorter than the delay says nothing', (t) => {
	22	+	const { live, hint } = setup(t);
	23	+	live.back();
	24	+	live.lost();
	25	+	t.mock.timers.tick(4000);
	26	+	live.back();
	27	+	t.mock.timers.tick(10000);
	28	+	assert.equal(hint.dataset.state, 'live');
	29	+	});
	30	+
	31	+	test('a drop that lasts shows offline, once, until the stream is back', (t) => {
	32	+	const { live, hint } = setup(t);
	33	+	live.lost();
	34	+	t.mock.timers.tick(3000);
	35	+	live.lost(); // a second error does not restart the delay
	36	+	t.mock.timers.tick(2000);
	37	+	assert.equal(hint.dataset.state, 'offline');
	38	+	live.back();
	39	+	assert.equal(hint.dataset.state, 'live');
	40	+	});

A internal/adapters/web/manifest_test.go +40 -0

@@ -0,0 +1,40 @@
	1	+	// SPDX-License-Identifier: AGPL-3.0-or-later
	2	+
	3	+	package web
	4	+
	5	+	import (
	6	+	"encoding/json"
	7	+	"strings"
	8	+	"testing"
	9	+
	10	+	"github.com/stretchr/testify/assert"
	11	+	"github.com/stretchr/testify/require"
	12	+	)
	13	+
	14	+	// The web app manifest makes the site installable: every page links it, and
	15	+	// its icons are served assets.
	16	+	func TestWebAppManifest(t *testing.T) {
	17	+	t.Parallel()
	18	+	srv := newBareServer(t)
	19	+	u := srv.assets.urls
	20	+	man, ok := srv.assets.byName[strings.TrimPrefix(u.Manifest, StaticPrefix)]
	21	+	require.True(t, ok)
	22	+	assert.Equal(t, "application/manifest+json", man.typ)
	23	+
	24	+	var m webManifest
	25	+	require.NoError(t, json.Unmarshal(man.body, &m))
	26	+	assert.Equal(t, "standalone", m.Display)
	27	+	assert.Equal(t, "/", m.StartURL)
	28	+	require.Len(t, m.Icons, len(appIcons))
	29	+	for _, ic := range m.Icons {
	30	+	a, ok := srv.assets.byName[strings.TrimPrefix(ic.Src, StaticPrefix)]
	31	+	require.True(t, ok, ic.Src)
	32	+	assert.Equal(t, "image/png", a.typ)
	33	+	}
	34	+	_, ok = srv.assets.byName[strings.TrimPrefix(u.AppleIcon, StaticPrefix)]
	35	+	assert.True(t, ok)
	36	+
	37	+	page := renderToString(t, Shell(Layout{Assets: u}, nil))
	38	+	assert.Contains(t, page, `<link rel="manifest" href="`+u.Manifest+`">`)
	39	+	assert.Contains(t, page, `<link rel="apple-touch-icon" href="`+u.AppleIcon+`">`)
	40	+	}

@@ -0,0 +1,40 @@
	1	+	// SPDX-License-Identifier: AGPL-3.0-or-later
	2	+
	3	+	package web
	4	+
	5	+	import (
	6	+	"encoding/json"
	7	+	"strings"
	8	+	"testing"
	9	+
	10	+	"github.com/stretchr/testify/assert"
	11	+	"github.com/stretchr/testify/require"
	12	+	)
	13	+
	14	+	// The web app manifest makes the site installable: every page links it, and
	15	+	// its icons are served assets.
	16	+	func TestWebAppManifest(t *testing.T) {
	17	+	t.Parallel()
	18	+	srv := newBareServer(t)
	19	+	u := srv.assets.urls
	20	+	man, ok := srv.assets.byName[strings.TrimPrefix(u.Manifest, StaticPrefix)]
	21	+	require.True(t, ok)
	22	+	assert.Equal(t, "application/manifest+json", man.typ)
	23	+
	24	+	var m webManifest
	25	+	require.NoError(t, json.Unmarshal(man.body, &m))
	26	+	assert.Equal(t, "standalone", m.Display)
	27	+	assert.Equal(t, "/", m.StartURL)
	28	+	require.Len(t, m.Icons, len(appIcons))
	29	+	for _, ic := range m.Icons {
	30	+	a, ok := srv.assets.byName[strings.TrimPrefix(ic.Src, StaticPrefix)]
	31	+	require.True(t, ok, ic.Src)
	32	+	assert.Equal(t, "image/png", a.typ)
	33	+	}
	34	+	_, ok = srv.assets.byName[strings.TrimPrefix(u.AppleIcon, StaticPrefix)]
	35	+	assert.True(t, ok)
	36	+
	37	+	page := renderToString(t, Shell(Layout{Assets: u}, nil))
	38	+	assert.Contains(t, page, `<link rel="manifest" href="`+u.Manifest+`">`)
	39	+	assert.Contains(t, page, `<link rel="apple-touch-icon" href="`+u.AppleIcon+`">`)
	40	+	}

M internal/adapters/web/pages.templ +6 -3


@@ -170,8 +170,11 @@ templ State(l Layout, p StatePage) {
170	170		}
171	171		}
172	172
173		-	// Login asks the owner to confirm a login link. Opening the link consumes
174		-	// nothing; only this form does. It is a state page with a button.
	173	+	// Login signs the browser in with a login link. Opening the link consumes
	174	+	// nothing; only this form does. ermite.js submits it as soon as a browser
	175	+	// shows the page (data-autosubmit): link previews and prefetchers run no
	176	+	// script, so they still cannot use the link. Without scripts the owner
	177	+	// clicks the button.
175	178		templ Login(l Layout, p LoginPage) {
176	179		@Shell(l, nil) {
177	180		<section class="state" aria-labelledby="state-title">

@@ -179,7 +182,7 @@ templ Login(l Layout, p LoginPage) {
179	182		for _, line := range p.Lines {
180	183		<p class="dim">{ line }</p>
181	184		}
182		-	<form class="state-act" method="post" action={ templ.SafeURL(p.Action) }>
	185	+	<form class="state-act" method="post" action={ templ.SafeURL(p.Action) } data-autosubmit>
183	186		<button type="submit" class="btn primary">{ p.Button }</button>
184	187		</form>
185	188		<p class="state-back"><a href="/">Back to home</a></p>

 	}
 }
-// Login asks the owner to confirm a login link. Opening the link consumes
+// Login signs the browser in with a login link. Opening the link consumes
-// nothing; only this form does. It is a state page with a button.
+// nothing; only this form does. ermite.js submits it as soon as a browser
+// shows the page (data-autosubmit): link previews and prefetchers run no
+// script, so they still cannot use the link. Without scripts the owner
+// clicks the button.
 templ Login(l Layout, p LoginPage) {
 	@Shell(l, nil) {
 		<section class="state" aria-labelledby="state-title">
 			for _, line := range p.Lines {
 				<p class="dim">{ line }</p>
 			}
-			<form class="state-act" method="post" action={ templ.SafeURL(p.Action) }>
+			<form class="state-act" method="post" action={ templ.SafeURL(p.Action) } data-autosubmit>
 				<button type="submit" class="btn primary">{ p.Button }</button>
 			</form>
 			<p class="state-back"><a href="/">Back to home</a></p>

M internal/adapters/web/pages_templ.go +26 -23 generated file: collapsed

load diff

M internal/adapters/web/passkeys_test.go +6 -4


@@ -484,19 +484,21 @@ func TestPasskeyLoginPage(t *testing.T) {
484	484		}
485	485
486	486		// The header links: "Sign in" for a visitor, "Passkeys" for the owner.
	487	+	// They are icons with an accessible name.
487	488		func TestPasskeyHeaderLinks(t *testing.T) {
488	489		t.Parallel()
489	490		f := newPasskeyServer(t)
490	491		rec := f.do(t, req{method: "GET", target: "/-/login"})
491		-	assert.Contains(t, rec.Body.String(), `href="/-/login"`)
	492	+	assert.Contains(t, rec.Body.String(), `href="/-/login" aria-label="Sign in"`)
492	493		assert.NotContains(t, rec.Body.String(), `href="/-/passkeys"`)
493	494		assert.Contains(t, rec.Body.String(), "passkey.", "the script is loaded")
494	495
495	496		f.passkeys.EXPECT().List(mock.Anything, mock.Anything).Return(nil, nil).Once()
496	497		rec = f.do(t, req{method: "GET", target: "/-/passkeys", cookie: "tok"})
497		-	assert.Contains(t, rec.Body.String(), `href="/-/passkeys"`)
	498	+	assert.Contains(t, rec.Body.String(), `href="/-/passkeys" aria-label="Passkeys"`)
498	499		assert.Contains(t, rec.Body.String(), `action="/-/logout"`)
499		-	assert.NotContains(t, rec.Body.String(), `>Sign in</a>`)
	500	+	assert.Contains(t, rec.Body.String(), `aria-label="Sign out"`)
	501	+	assert.NotContains(t, rec.Body.String(), `aria-label="Sign in"`)
500	502		}
501	503
502	504		// Without the passkey service there is no route, no link and no script

@@ -564,7 +566,7 @@ func TestPasskeyRoutesLeaveLoginLinksAlone(t *testing.T) {
564	566		f := newPasskeyServer(t)
565	567		rec := f.do(t, req{method: "GET", target: "/-/login/" + nonceA})
566	568		assert.Equal(t, http.StatusOK, rec.Code)
567		-	assert.Contains(t, rec.Body.String(), "sign in as the owner")
	569	+	assert.Contains(t, rec.Body.String(), "signing in as the owner")
568	570		rec = f.do(t, req{method: "POST", target: "/-/login/" + nonceA, origin: forgeOrigin})
569	571		assert.Equal(t, http.StatusSeeOther, rec.Code)
570	572		}

 }
 // The header links: "Sign in" for a visitor, "Passkeys" for the owner.
+// They are icons with an accessible name.
 func TestPasskeyHeaderLinks(t *testing.T) {
 	t.Parallel()
 	f := newPasskeyServer(t)
 	rec := f.do(t, req{method: "GET", target: "/-/login"})
-	assert.Contains(t, rec.Body.String(), `href="/-/login"`)
+	assert.Contains(t, rec.Body.String(), `href="/-/login" aria-label="Sign in"`)
 	assert.NotContains(t, rec.Body.String(), `href="/-/passkeys"`)
 	assert.Contains(t, rec.Body.String(), "passkey.", "the script is loaded")
 	f.passkeys.EXPECT().List(mock.Anything, mock.Anything).Return(nil, nil).Once()
 	rec = f.do(t, req{method: "GET", target: "/-/passkeys", cookie: "tok"})
-	assert.Contains(t, rec.Body.String(), `href="/-/passkeys"`)
+	assert.Contains(t, rec.Body.String(), `href="/-/passkeys" aria-label="Passkeys"`)
 	assert.Contains(t, rec.Body.String(), `action="/-/logout"`)
-	assert.NotContains(t, rec.Body.String(), `>Sign in</a>`)
+	assert.Contains(t, rec.Body.String(), `aria-label="Sign out"`)
+	assert.NotContains(t, rec.Body.String(), `aria-label="Sign in"`)
 }
 // Without the passkey service there is no route, no link and no script
 	f := newPasskeyServer(t)
 	rec := f.do(t, req{method: "GET", target: "/-/login/" + nonceA})
 	assert.Equal(t, http.StatusOK, rec.Code)
-	assert.Contains(t, rec.Body.String(), "sign in as the owner")
+	assert.Contains(t, rec.Body.String(), "signing in as the owner")
 	rec = f.do(t, req{method: "POST", target: "/-/login/" + nonceA, origin: forgeOrigin})
 	assert.Equal(t, http.StatusSeeOther, rec.Code)
 }

M internal/adapters/web/session.go +8 -7


@@ -23,9 +23,10 @@ import (
23	23		// The owner's session on the web (ADR 0018).
24	24		//
25	25		// A browser signs in by opening the one-time link `ermite web login` printed:
26		-	// GET /-/login/<nonce> shows a confirmation and consumes nothing, so link
27		-	// previews and prefetchers cannot use it; POST /-/login/<nonce> consumes the
28		-	// link and sets the cookie. The cookie holds a signed token; every request
	26	+	// GET /-/login/<nonce> shows a page whose script posts the link at once and
	27	+	// consumes nothing itself, so link previews and prefetchers, which run no
	28	+	// script, cannot use it; POST /-/login/<nonce> consumes the link and sets the
	29	+	// cookie. The cookie holds a signed token; every request
29	30		// that carries a valid one runs as the owner, every other as anonymous.
30	31		//
31	32		// State changes are POST only and pass one gate (ServeHTTP): an Origin equal to

@@ -243,8 +244,8 @@ func (s Server) secretPage(w http.ResponseWriter, r http.Request, status int,
243	244		s.write(r.Context(), w, r, status, c)
244	245		}
245	246
246		-	// loginConfirm is GET /-/login/<nonce>: it shows the confirmation and does not
247		-	// use the link.
	247	+	// loginConfirm is GET /-/login/<nonce>: it shows the page that signs in (its
	248	+	// script posts the form, see Login) and does not use the link.
248	249		func (s Server) loginConfirm(w http.ResponseWriter, r http.Request) {
249	250		nonce := r.PathValue("nonce")
250	251		if !validNonce(nonce) \|\| !s.cfg.Sessions.LoginLinkValid(nonce) {

@@ -253,8 +254,8 @@ func (s Server) loginConfirm(w http.ResponseWriter, r http.Request) {
253	254		}
254	255		l := s.stateLayout("sign in", []Crumb{{Label: "sign in", Current: true}})
255	256		s.secretPage(w, r, http.StatusOK, Login(l, LoginPage{
256		-	Title: "sign in as the owner",
257		-	Lines: []string{"this browser will be signed in for 12 hours.", "only confirm if you ran `ermite web login` just now."},
	257	+	Title: "signing in as the owner…",
	258	+	Lines: []string{"this browser will be signed in for 12 hours.", "if nothing happens, click the button."},
258	259		Action: loginPrefix + nonce,
259	260		Button: "Sign in",
260	261		}))

 // The owner's session on the web (ADR 0018).
 //
 // A browser signs in by opening the one-time link `ermite web login` printed:
-// GET /-/login/<nonce> shows a confirmation and consumes nothing, so link
+// GET /-/login/<nonce> shows a page whose script posts the link at once and
-// previews and prefetchers cannot use it; POST /-/login/<nonce> consumes the
+// consumes nothing itself, so link previews and prefetchers, which run no
-// link and sets the cookie. The cookie holds a signed token; every request
+// script, cannot use it; POST /-/login/<nonce> consumes the link and sets the
+// cookie. The cookie holds a signed token; every request
 // that carries a valid one runs as the owner, every other as anonymous.
 //
 // State changes are POST only and pass one gate (ServeHTTP): an Origin equal to
 	s.write(r.Context(), w, r, status, c)
 }
-// loginConfirm is GET /-/login/<nonce>: it shows the confirmation and does not
+// loginConfirm is GET /-/login/<nonce>: it shows the page that signs in (its
-// use the link.
+// script posts the form, see Login) and does not use the link.
 func (s *Server) loginConfirm(w http.ResponseWriter, r *http.Request) {
 	nonce := r.PathValue("nonce")
 	if !validNonce(nonce) || !s.cfg.Sessions.LoginLinkValid(nonce) {
 	}
 	l := s.stateLayout("sign in", []Crumb{{Label: "sign in", Current: true}})
 	s.secretPage(w, r, http.StatusOK, Login(l, LoginPage{
-		Title:  "sign in as the owner",
+		Title:  "signing in as the owner…",
-		Lines:  []string{"this browser will be signed in for 12 hours.", "only confirm if you ran `ermite web login` just now."},
+		Lines:  []string{"this browser will be signed in for 12 hours.", "if nothing happens, click the button."},
 		Action: loginPrefix + nonce,
 		Button: "Sign in",
 	}))

M internal/adapters/web/shell.templ +13 -10


@@ -13,7 +13,12 @@ templ Shell(l Layout, rail templ.Component) {
13	13		<meta name="viewport" content="width=device-width, initial-scale=1"/>
14	14		<meta name="color-scheme" content="light dark"/>
15	15		<title>{ l.Title }</title>
	16	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff"/>
	17	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c"/>
	18	+	<meta name="apple-mobile-web-app-title" content="ermite"/>
16	19		<link rel="icon" type="image/svg+xml" href={ templ.SafeURL(l.Assets.Icon) }/>
	20	+	<link rel="apple-touch-icon" href={ templ.SafeURL(l.Assets.AppleIcon) }/>
	21	+	<link rel="manifest" href={ templ.SafeURL(l.Assets.Manifest) }/>
17	22		<link rel="preload" href={ templ.SafeURL(l.Assets.Font) } as="font" type="font/woff2" crossorigin/>
18	23		<link rel="stylesheet" href={ templ.SafeURL(l.Assets.CSS) }/>
19	24		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'/>

@@ -60,14 +65,13 @@ templ Shell(l Layout, rail templ.Component) {
60	65		</html>
61	66		}
62	67
63		-	// Header is the page header: the instance, the path, the ref switcher, the
64		-	// "go to" palette and the owner; inside a repository, the tabs below.
	68	+	// Header is the page header: the logo (home), the path, the ref switcher,
	69	+	// the "go to" palette and the owner; inside a repository, the tabs below.
65	70		templ Header(l Layout) {
66	71		<header class="hdr">
67	72		<div class="hdr-top">
68		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	73	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
69	74		<span class="brand-mark" aria-hidden="true"></span>
70		-	<span class="brand-name">{ l.Instance }</span>
71	75		</a>
72	76		if len(l.Crumbs) > 0 {
73	77		<nav class="crumbs" aria-label="Path">

@@ -121,17 +125,16 @@ templ Header(l Layout) {
121	125		<span class="search-label">Go to…</span>
122	126		<kbd aria-hidden="true">ctrl k</kbd>
123	127		</button>
124		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
125	128		if SignedIn(ctx) {
126	129		<form class="owner" method="post" action="/-/logout">
127		-	<span class="owner-badge" title="signed in as the owner">owner</span>
	130	+	<span class="owner-badge" title="signed in as the owner"><span class="ico i-user" aria-hidden="true"></span>{ l.Owner }</span>
128	131		if l.Passkeys {
129		-	<a class="btn" href="/-/passkeys" title="add or remove the passkeys that sign you in">Passkeys</a>
	132	+	<a class="btn icon" href="/-/passkeys" aria-label="Passkeys" title="passkeys: add or remove the passkeys that sign you in"><span class="ico i-key" aria-hidden="true"></span></a>
130	133		}
131		-	<button type="submit" class="btn" title="sign out of this browser">Sign out</button>
	134	+	<button type="submit" class="btn icon" aria-label="Sign out" title="sign out of this browser"><span class="ico i-log-out" aria-hidden="true"></span></button>
132	135		</form>
133	136		} else if l.Passkeys {
134		-	<a class="btn" href="/-/login" title="sign in with a passkey">Sign in</a>
	137	+	<a class="btn icon" href="/-/login" aria-label="Sign in" title="sign in with a passkey"><span class="ico i-log-in" aria-hidden="true"></span></a>
135	138		}
136	139		</div>
137	140		</div>

@@ -162,7 +165,7 @@ templ Footer(l Layout) {
162	165		<footer class="foot">
163	166		<span>ermite { l.Version }</span>
164	167		<a href={ templ.SafeURL(l.SourceURL) } rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
165		-	<span class="foot-keys"><kbd>?</kbd> keyboard shortcuts</span>
	168	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?"><kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
166	169		</footer>
167	170		}
168	171

 			<meta name="viewport" content="width=device-width, initial-scale=1"/>
 			<meta name="color-scheme" content="light dark"/>
 			<title>{ l.Title }</title>
+			<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff"/>
+			<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c"/>
+			<meta name="apple-mobile-web-app-title" content="ermite"/>
 			<link rel="icon" type="image/svg+xml" href={ templ.SafeURL(l.Assets.Icon) }/>
+			<link rel="apple-touch-icon" href={ templ.SafeURL(l.Assets.AppleIcon) }/>
+			<link rel="manifest" href={ templ.SafeURL(l.Assets.Manifest) }/>
 			<link rel="preload" href={ templ.SafeURL(l.Assets.Font) } as="font" type="font/woff2" crossorigin/>
 			<link rel="stylesheet" href={ templ.SafeURL(l.Assets.CSS) }/>
 			<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'/>
 	</html>
 }
-// Header is the page header: the instance, the path, the ref switcher, the
+// Header is the page header: the logo (home), the path, the ref switcher,
-// "go to" palette and the owner; inside a repository, the tabs below.
+// the "go to" palette and the owner; inside a repository, the tabs below.
 templ Header(l Layout) {
 	<header class="hdr">
 		<div class="hdr-top">
-			<a class="brand" href="/" data-g="h" title="home (g h)">
+			<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 				<span class="brand-mark" aria-hidden="true"></span>
-				<span class="brand-name">{ l.Instance }</span>
 			</a>
 			if len(l.Crumbs) > 0 {
 				<nav class="crumbs" aria-label="Path">
 					<span class="search-label">Go to…</span>
 					<kbd aria-hidden="true">ctrl k</kbd>
 				</button>
-				<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 				if SignedIn(ctx) {
 					<form class="owner" method="post" action="/-/logout">
-						<span class="owner-badge" title="signed in as the owner">owner</span>
+						<span class="owner-badge" title="signed in as the owner"><span class="ico i-user" aria-hidden="true"></span>{ l.Owner }</span>
 						if l.Passkeys {
-							<a class="btn" href="/-/passkeys" title="add or remove the passkeys that sign you in">Passkeys</a>
+							<a class="btn icon" href="/-/passkeys" aria-label="Passkeys" title="passkeys: add or remove the passkeys that sign you in"><span class="ico i-key" aria-hidden="true"></span></a>
 						}
-						<button type="submit" class="btn" title="sign out of this browser">Sign out</button>
+						<button type="submit" class="btn icon" aria-label="Sign out" title="sign out of this browser"><span class="ico i-log-out" aria-hidden="true"></span></button>
 					</form>
 				} else if l.Passkeys {
-					<a class="btn" href="/-/login" title="sign in with a passkey">Sign in</a>
+					<a class="btn icon" href="/-/login" aria-label="Sign in" title="sign in with a passkey"><span class="ico i-log-in" aria-hidden="true"></span></a>
 				}
 			</div>
 		</div>
 	<footer class="foot">
 		<span>ermite { l.Version }</span>
 		<a href={ templ.SafeURL(l.SourceURL) } rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-		<span class="foot-keys"><kbd>?</kbd> keyboard shortcuts</span>
+		<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?"><kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 	</footer>
 }

M internal/adapters/web/shell_templ.go +210 -184 generated file: collapsed

load diff

A internal/adapters/web/static/app/apple-touch-icon.png +0 -0 binary file: no text diff

binary file: no text diff

A internal/adapters/web/static/app/icon-192.png +0 -0 binary file: no text diff

binary file: no text diff

A internal/adapters/web/static/app/icon-512.png +0 -0 binary file: no text diff

binary file: no text diff

A internal/adapters/web/static/app/icon-maskable-512.png +0 -0 binary file: no text diff

binary file: no text diff

M internal/adapters/web/static/css/10-base.css +3 -0


@@ -17,6 +17,9 @@
17	17		/* a cross-document fade between pages, where the browser has it */
18	18		@view-transition { navigation: auto; }
19	19		::view-transition-old(root), ::view-transition-new(root) { animation-duration: 120ms; }
	20	+	/* the snapshots fade over this layer: transparent, it shows a white canvas
	21	+	for a frame when the new page is a little late */
	22	+	::view-transition { background: var(--bg-canvas); }
20	23		@media (prefers-reduced-motion: reduce) {
21	24		@view-transition { navigation: none; }
22	25		}


@@ -17,6 +17,9 @@
17	/* a cross-document fade between pages, where the browser has it */	17		/* a cross-document fade between pages, where the browser has it */
18	@view-transition { navigation: auto; }	18		@view-transition { navigation: auto; }
19	::view-transition-old(root), ::view-transition-new(root) { animation-duration: 120ms; }	19		::view-transition-old(root), ::view-transition-new(root) { animation-duration: 120ms; }
		20	+	/* the snapshots fade over this layer: transparent, it shows a white canvas
		21	+	for a frame when the new page is a little late */
		22	+	::view-transition { background: var(--bg-canvas); }
20	@media (prefers-reduced-motion: reduce) {	23		@media (prefers-reduced-motion: reduce) {
21	@view-transition { navigation: none; }	24		@view-transition { navigation: none; }
22	}	25		}

M internal/adapters/web/static/css/20-shell.css +15 -8


@@ -21,6 +21,10 @@
21	21		.i-search { --i: url(icons/search.svg); }
22	22		.i-file { --i: url(icons/file.svg); }
23	23		.i-tag { --i: url(icons/tag.svg); }
	24	+	.i-user { --i: url(icons/user.svg); }
	25	+	.i-key { --i: url(icons/key.svg); }
	26	+	.i-log-in { --i: url(icons/log-in.svg); }
	27	+	.i-log-out { --i: url(icons/log-out.svg); }
24	28
25	29		.pill {
26	30		display: inline-flex; align-items: center; height: 20px; padding: 0 var(--s2); margin-left: var(--s1);

@@ -48,9 +52,7 @@
48	52		max-width: var(--page); margin: 0 auto; height: 56px; padding: 0 var(--pad);
49	53		}
50	54		.brand {
51		-	display: flex; align-items: center; gap: var(--s2); flex: none;
52		-	font: 700 var(--fs) / 1 var(--mono); color: var(--ink-hi); text-decoration: none;
53		-	& .brand-name { max-width: 22ch; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
	55	+	display: flex; align-items: center; flex: none; text-decoration: none;
54	56		&:hover { text-decoration: none; }
55	57		}
56	58		/* the hermit by his fire: a grey picture in its own rounded square */

@@ -78,7 +80,10 @@
78	80		}
79	81		.owner {
80	82		display: flex; align-items: center; gap: var(--s2);
81		-	& .owner-badge { font: 600 var(--fs-xs) / 1 var(--mono); color: var(--ink-dim); padding: 0 var(--s1); }
	83	+	& .owner-badge {
	84	+	display: inline-flex; align-items: center; gap: 6px; max-width: 20ch; padding: 0 var(--s1);
	85	+	font: 600 var(--fs-s) / 1 var(--mono); color: var(--ink-dim); overflow: hidden; text-overflow: ellipsis; white-space: nowrap;
	86	+	}
82	87		}
83	88
84	89		.tabs {

@@ -103,6 +108,9 @@
103	108		flex: 1; width: 100%; max-width: var(--page); margin: 0 auto;
104	109		padding: var(--s5) var(--pad) var(--s7);
105	110		display: grid; grid-template-columns: minmax(0, 1fr); gap: var(--s5); align-items: start;
	111	+	/* .work grows to fill the page (flex: 1): without this, the rows share the
	112	+	spare height and a short content pushes the rail down */
	113	+	align-content: start;
106	114		}
107	115		.work.has-rail { grid-template-columns: minmax(0, 1fr) var(--rail); }
108	116		.rail { display: flex; flex-direction: column; gap: var(--s4); min-width: 0; }

@@ -156,7 +164,8 @@
156	164		font-size: var(--fs-s); color: var(--ink-mute);
157	165		&::before { content: ""; flex-basis: 100%; height: 1px; margin-bottom: var(--s2); background: var(--border); }
158	166		& a { color: var(--ink-dim); }
159		-	& .foot-keys { margin-left: auto; }
	167	+	& .foot-keys { margin-left: auto; color: var(--ink-dim); }
	168	+	& .foot-keys:hover { color: var(--ink-hi); }
160	169		}
161	170
162	171		/* hint: bottom right, only while it has something to say */

@@ -187,14 +196,12 @@
187	196		@media (max-width: 720px) {
188	197		:root { --pad: var(--s4); }
189	198		.hdr-top { gap: var(--s3); height: 52px; }
190		-	.brand-name { display: none; }
191	199		.crumbs li:not(:last-child) { display: none; }
192		-	.ref .sha, .owner-badge, .hdr-acts .icon { display: none; }
	200	+	.ref .sha, .owner .owner-badge { display: none; }
193	201		.ref { max-width: 16ch; }
194	202		.work { padding-top: var(--s4); }
195	203		.rail { grid-template-columns: minmax(0, 1fr); }
196	204		.tabs kbd { display: none; }
197		-	.foot .foot-keys { display: none; }
198	205		.list .c-who, .list .c-desc, .list .c-sub, .list .c-ref, .list .c-size, .list .c-lang { display: none; }
199	206		}
200	207		}

   .i-search { --i: url(icons/search.svg); }
   .i-file { --i: url(icons/file.svg); }
   .i-tag { --i: url(icons/tag.svg); }
+  .i-user { --i: url(icons/user.svg); }
+  .i-key { --i: url(icons/key.svg); }
+  .i-log-in { --i: url(icons/log-in.svg); }
+  .i-log-out { --i: url(icons/log-out.svg); }
   .pill {
     display: inline-flex; align-items: center; height: 20px; padding: 0 var(--s2); margin-left: var(--s1);
     max-width: var(--page); margin: 0 auto; height: 56px; padding: 0 var(--pad);
   }
   .brand {
-    display: flex; align-items: center; gap: var(--s2); flex: none;
+    display: flex; align-items: center; flex: none; text-decoration: none;
-    font: 700 var(--fs) / 1 var(--mono); color: var(--ink-hi); text-decoration: none;
-    & .brand-name { max-width: 22ch; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
     &:hover { text-decoration: none; }
   }
   /* the hermit by his fire: a grey picture in its own rounded square */
   }
   .owner {
     display: flex; align-items: center; gap: var(--s2);
-    & .owner-badge { font: 600 var(--fs-xs) / 1 var(--mono); color: var(--ink-dim); padding: 0 var(--s1); }
+    & .owner-badge {
+      display: inline-flex; align-items: center; gap: 6px; max-width: 20ch; padding: 0 var(--s1);
+      font: 600 var(--fs-s) / 1 var(--mono); color: var(--ink-dim); overflow: hidden; text-overflow: ellipsis; white-space: nowrap;
+    }
   }
   .tabs {
     flex: 1; width: 100%; max-width: var(--page); margin: 0 auto;
     padding: var(--s5) var(--pad) var(--s7);
     display: grid; grid-template-columns: minmax(0, 1fr); gap: var(--s5); align-items: start;
+    /* .work grows to fill the page (flex: 1): without this, the rows share the
+       spare height and a short content pushes the rail down */
+    align-content: start;
   }
   .work.has-rail { grid-template-columns: minmax(0, 1fr) var(--rail); }
   .rail { display: flex; flex-direction: column; gap: var(--s4); min-width: 0; }
     font-size: var(--fs-s); color: var(--ink-mute);
     &::before { content: ""; flex-basis: 100%; height: 1px; margin-bottom: var(--s2); background: var(--border); }
     & a { color: var(--ink-dim); }
-    & .foot-keys { margin-left: auto; }
+    & .foot-keys { margin-left: auto; color: var(--ink-dim); }
+    & .foot-keys:hover { color: var(--ink-hi); }
   }
   /* hint: bottom right, only while it has something to say */
   @media (max-width: 720px) {
     :root { --pad: var(--s4); }
     .hdr-top { gap: var(--s3); height: 52px; }
-    .brand-name { display: none; }
     .crumbs li:not(:last-child) { display: none; }
-    .ref .sha, .owner-badge, .hdr-acts .icon { display: none; }
+    .ref .sha, .owner .owner-badge { display: none; }
     .ref { max-width: 16ch; }
     .work { padding-top: var(--s4); }
     .rail { grid-template-columns: minmax(0, 1fr); }
     .tabs kbd { display: none; }
-    .foot .foot-keys { display: none; }
     .list .c-who, .list .c-desc, .list .c-sub, .list .c-ref, .list .c-size, .list .c-lang { display: none; }
   }
 }

M internal/adapters/web/static/icons/branch.svg +1 -1

@@ -1,1 +1,1 @@
1		-	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" fill="none" stroke="#000" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="5" cy="3.5" r="1.5"/><circle cx="5" cy="12.5" r="1.5"/><circle cx="11" cy="4.5" r="1.5"/><path d="M5 5v6M11 6c0 3.5-6 2-6 5"/></svg>⏎̸
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 6a9 9 0 0 0-9 9V3"/><circle cx="18" cy="6" r="3"/><circle cx="6" cy="18" r="3"/></svg>

@@ -1,1 +1,1 @@
1	-	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" fill="none" stroke="#000" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="5" cy="3.5" r="1.5"/><circle cx="5" cy="12.5" r="1.5"/><circle cx="11" cy="4.5" r="1.5"/><path d="M5 5v6M11 6c0 3.5-6 2-6 5"/></svg>⏎̸	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 6a9 9 0 0 0-9 9V3"/><circle cx="18" cy="6" r="3"/><circle cx="6" cy="18" r="3"/></svg>

M internal/adapters/web/static/icons/file.svg +1 -1

@@ -1,1 +1,1 @@
1		-	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" fill="none" stroke="#000" stroke-width="1.5" stroke-linejoin="round" stroke-linecap="round"><path d="M3.5 1.5h6l3 3v10h-9zM9.5 1.5v3h3M6 8h4M6 11h4"/></svg>⏎̸
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M6 22a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h8a2.4 2.4 0 0 1 1.704.706l3.588 3.588A2.4 2.4 0 0 1 20 8v12a2 2 0 0 1-2 2z"/><path d="M14 2v5a1 1 0 0 0 1 1h5"/><path d="M10 9H8"/><path d="M16 13H8"/><path d="M16 17H8"/></svg>

@@ -1,1 +1,1 @@
1	-	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" fill="none" stroke="#000" stroke-width="1.5" stroke-linejoin="round" stroke-linecap="round"><path d="M3.5 1.5h6l3 3v10h-9zM9.5 1.5v3h3M6 8h4M6 11h4"/></svg>⏎̸	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M6 22a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h8a2.4 2.4 0 0 1 1.704.706l3.588 3.588A2.4 2.4 0 0 1 20 8v12a2 2 0 0 1-2 2z"/><path d="M14 2v5a1 1 0 0 0 1 1h5"/><path d="M10 9H8"/><path d="M16 13H8"/><path d="M16 17H8"/></svg>

A internal/adapters/web/static/icons/key.svg +1 -0

@@ -0,0 +1,1 @@
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M2.586 17.414A2 2 0 0 0 2 18.828V21a1 1 0 0 0 1 1h3a1 1 0 0 0 1-1v-1a1 1 0 0 1 1-1h1a1 1 0 0 0 1-1v-1a1 1 0 0 1 1-1h.172a2 2 0 0 0 1.414-.586l.814-.814a6.5 6.5 0 1 0-4-4z"/><circle cx="16.5" cy="7.5" r=".5" fill="#000"/></svg>

@@ -0,0 +1,1 @@
			1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M2.586 17.414A2 2 0 0 0 2 18.828V21a1 1 0 0 0 1 1h3a1 1 0 0 0 1-1v-1a1 1 0 0 1 1-1h1a1 1 0 0 0 1-1v-1a1 1 0 0 1 1-1h.172a2 2 0 0 0 1.414-.586l.814-.814a6.5 6.5 0 1 0-4-4z"/><circle cx="16.5" cy="7.5" r=".5" fill="#000"/></svg>

A internal/adapters/web/static/icons/log-in.svg +1 -0

@@ -0,0 +1,1 @@
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m10 17 5-5-5-5"/><path d="M15 12H3"/><path d="M15 3h4a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2h-4"/></svg>

@@ -0,0 +1,1 @@
			1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m10 17 5-5-5-5"/><path d="M15 12H3"/><path d="M15 3h4a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2h-4"/></svg>

A internal/adapters/web/static/icons/log-out.svg +1 -0

@@ -0,0 +1,1 @@
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m16 17 5-5-5-5"/><path d="M21 12H9"/><path d="M9 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h4"/></svg>

@@ -0,0 +1,1 @@
			1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m16 17 5-5-5-5"/><path d="M21 12H9"/><path d="M9 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h4"/></svg>

M internal/adapters/web/static/icons/search.svg +1 -1

@@ -1,1 +1,1 @@
1		-	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" fill="none" stroke="#000" stroke-width="1.5" stroke-linecap="round"><circle cx="7" cy="7" r="4.5"/><path d="m10.5 10.5 3.5 3.5"/></svg>⏎̸
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m21 21-4.34-4.34"/><circle cx="11" cy="11" r="8"/></svg>

@@ -1,1 +1,1 @@
1	-	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" fill="none" stroke="#000" stroke-width="1.5" stroke-linecap="round"><circle cx="7" cy="7" r="4.5"/><path d="m10.5 10.5 3.5 3.5"/></svg>⏎̸	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m21 21-4.34-4.34"/><circle cx="11" cy="11" r="8"/></svg>

M internal/adapters/web/static/icons/tag.svg +1 -1

@@ -1,1 +1,1 @@
1		-	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" fill="none" stroke="#000" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M2 2.5v5l6.5 6.5 5-5L7 2.5z"/><circle cx="5" cy="5.5" r="1"/></svg>
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12.586 2.586A2 2 0 0 0 11.172 2H4a2 2 0 0 0-2 2v7.172a2 2 0 0 0 .586 1.414l8.704 8.704a2.426 2.426 0 0 0 3.42 0l6.58-6.58a2.426 2.426 0 0 0 0-3.42z"/><circle cx="7.5" cy="7.5" r=".5" fill="#000"/></svg>

@@ -1,1 +1,1 @@
1	-	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" fill="none" stroke="#000" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M2 2.5v5l6.5 6.5 5-5L7 2.5z"/><circle cx="5" cy="5.5" r="1"/></svg>	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12.586 2.586A2 2 0 0 0 11.172 2H4a2 2 0 0 0-2 2v7.172a2 2 0 0 0 .586 1.414l8.704 8.704a2.426 2.426 0 0 0 3.42 0l6.58-6.58a2.426 2.426 0 0 0 0-3.42z"/><circle cx="7.5" cy="7.5" r=".5" fill="#000"/></svg>

A internal/adapters/web/static/icons/user.svg +1 -0

@@ -0,0 +1,1 @@
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="8" r="5"/><path d="M20 21a8 8 0 0 0-16 0"/></svg>

@@ -0,0 +1,1 @@
			1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="8" r="5"/><path d="M20 21a8 8 0 0 0-16 0"/></svg>

M internal/adapters/web/static/js/ermite.js +26 -0


@@ -255,6 +255,15 @@
255	255		a.setAttribute('aria-controls', 'panel-refs');
256	256		}
257	257
	258	+	// A login link signs in without a click: its page submits its form once a
	259	+	// browser shows it, not while it is prerendered.
	260	+	const auto = $('form[data-autosubmit]');
	261	+	if (auto) {
	262	+	const go = () => auto.requestSubmit();
	263	+	if (document.prerendering) document.addEventListener('prerenderingchange', go, { once: true });
	264	+	else go();
	265	+	}
	266	+
258	267		// In the app shell the page does not scroll, <main> does: give it focus so arrows,
259	268		// PageUp/PageDown and space scroll the content without a click first.
260	269		if (!location.hash) document.getElementById('main')?.focus({ preventScroll: true });

@@ -310,7 +319,24 @@
310	319		window.ermiteLive = (() => {
311	320		let reloading = false;
312	321		let stopped = false;
	322	+	// A stream that drops and comes back within LOST_AFTER (a proxy or the
	323	+	// server closing it, a network hiccup) is not worth a message.
	324	+	const LOST_AFTER = 5000;
	325	+	let lostTimer = 0;
	326	+	const setState = (s) => { const el = document.querySelector('.hint-live'); if (el) el.dataset.state = s; };
313	327		return {
	328	+	// lost is htmx:sse:close and htmx:sse:error: "live updates paused" shows
	329	+	// only if the stream is still down LOST_AFTER later.
	330	+	lost() {
	331	+	if (lostTimer) return;
	332	+	lostTimer = setTimeout(() => { lostTimer = 0; setState('offline'); }, LOST_AFTER);
	333	+	},
	334	+	// back is htmx:sse:after:connection.
	335	+	back() {
	336	+	clearTimeout(lostTimer);
	337	+	lostTimer = 0;
	338	+	setState('live');
	339	+	},
314	340		swap(html) {
315	341		const t = document.createElement('template');
316	342		t.innerHTML = html;


@@ -255,6 +255,15 @@
255	a.setAttribute('aria-controls', 'panel-refs');	255		a.setAttribute('aria-controls', 'panel-refs');
256	}	256		}
257		257
		258	+	// A login link signs in without a click: its page submits its form once a
		259	+	// browser shows it, not while it is prerendered.
		260	+	const auto = $('form[data-autosubmit]');
		261	+	if (auto) {
		262	+	const go = () => auto.requestSubmit();
		263	+	if (document.prerendering) document.addEventListener('prerenderingchange', go, { once: true });
		264	+	else go();
		265	+	}
		266	+
258	// In the app shell the page does not scroll, <main> does: give it focus so arrows,	267		// In the app shell the page does not scroll, <main> does: give it focus so arrows,
259	// PageUp/PageDown and space scroll the content without a click first.	268		// PageUp/PageDown and space scroll the content without a click first.
260	if (!location.hash) document.getElementById('main')?.focus({ preventScroll: true });	269		if (!location.hash) document.getElementById('main')?.focus({ preventScroll: true });

@@ -310,7 +319,24 @@
310	window.ermiteLive = (() => {	319		window.ermiteLive = (() => {
311	let reloading = false;	320		let reloading = false;
312	let stopped = false;	321		let stopped = false;
		322	+	// A stream that drops and comes back within LOST_AFTER (a proxy or the
		323	+	// server closing it, a network hiccup) is not worth a message.
		324	+	const LOST_AFTER = 5000;
		325	+	let lostTimer = 0;
		326	+	const setState = (s) => { const el = document.querySelector('.hint-live'); if (el) el.dataset.state = s; };
313	return {	327		return {
		328	+	// lost is htmx:sse:close and htmx:sse:error: "live updates paused" shows
		329	+	// only if the stream is still down LOST_AFTER later.
		330	+	lost() {
		331	+	if (lostTimer) return;
		332	+	lostTimer = setTimeout(() => { lostTimer = 0; setState('offline'); }, LOST_AFTER);
		333	+	},
		334	+	// back is htmx:sse:after:connection.
		335	+	back() {
		336	+	clearTimeout(lostTimer);
		337	+	lostTimer = 0;
		338	+	setState('live');
		339	+	},
314	swap(html) {	340		swap(html) {
315	const t = document.createElement('template');	341		const t = document.createElement('template');
316	t.innerHTML = html;	342		t.innerHTML = html;

M internal/adapters/web/view.go +3 -2


@@ -34,8 +34,9 @@ type CmdItem struct{ Kind, Label, Href string }
34	34
35	35		// Layout is the input of the page shell.
36	36		type Layout struct {
37		-	Title string
38		-	Instance string
	37	+	Title string
	38	+	// Owner is the owner's name (ERMITE_OWNER), shown when signed in.
	39	+	Owner string
39	40		Version string
40	41		SourceURL string
41	42		Assets Assets

 // Layout is the input of the page shell.
 type Layout struct {
-	Title     string
+	Title string
-	Instance  string
+	// Owner is the owner's name (ERMITE_OWNER), shown when signed in.
+	Owner     string
 	Version   string
 	SourceURL string
 	Assets    Assets

M internal/adapters/web/web.go +1 -1


@@ -390,7 +390,7 @@ func (s Server) notFound(context.Context, http.Request) (templ.Component, int,
390	390		// base is the Layout every page starts from.
391	391		func (s *Server) base() Layout {
392	392		return Layout{
393		-	Instance: s.instance,
	393	+	Owner: s.cfg.Owner,
394	394		Version: s.cfg.Version,
395	395		SourceURL: s.cfg.SourceURL,
396	396		Assets: s.assets.urls,


@@ -390,7 +390,7 @@ func (s Server) notFound(context.Context, http.Request) (templ.Component, int,
390		// base is the Layout every page starts from.	390		// base is the Layout every page starts from.
391		func (s *Server) base() Layout {	391		func (s *Server) base() Layout {
392		return Layout{	392		return Layout{
393	-	Instance: s.instance,	393	+	Owner: s.cfg.Owner,
394		Version: s.cfg.Version,	394		Version: s.cfg.Version,
395		SourceURL: s.cfg.SourceURL,	395		SourceURL: s.cfg.SourceURL,
396		Assets: s.assets.urls,	396		Assets: s.assets.urls,

M internal/adapters/webauthn/webauthn.go +13 -11


@@ -19,20 +19,21 @@ import (
19	19		"bnema.dev/ermite/internal/ports"
20	20		)
21	21
22		-	// ownerName names the one user in the options sent to the browser.
23		-	const ownerName = "owner"
24		-
25	22		// Verifier runs the WebAuthn ceremonies for the owner of one public URL.
26	23		type Verifier struct {
27	24		web *gowebauthn.WebAuthn
	25	+	// name names the one user in the options sent to the browser: the
	26	+	// owner's name (ERMITE_OWNER), which password managers show.
	27	+	name string
28	28		}
29	29
30	30		var _ ports.PasskeyVerifier = (*Verifier)(nil)
31	31
32	32		// New builds a verifier for publicURL: the relying party ID is its host name,
33	33		// the only accepted origin is its origin. It fails when the library refuses the
34		-	// configuration, for example for a host that is an IP address.
35		-	func New(publicURL string) (*Verifier, error) {
	34	+	// configuration, for example for a host that is an IP address. ownerName is
	35	+	// the name the browser shows for the passkey.
	36	+	func New(publicURL, ownerName string) (*Verifier, error) {
36	37		u, err := url.Parse(publicURL)
37	38		if err != nil {
38	39		return nil, fmt.Errorf("passkeys: parse public URL: %w", err)

@@ -57,18 +58,19 @@ func New(publicURL string) (*Verifier, error) {
57	58		if err != nil {
58	59		return nil, fmt.Errorf("passkeys: %w", err)
59	60		}
60		-	return &Verifier{web: web}, nil
	61	+	return &Verifier{web: web, name: ownerName}, nil
61	62		}
62	63
63	64		// owner is the single WebAuthn user.
64	65		type owner struct {
	66	+	name string
65	67		handle []byte
66	68		credentials []gowebauthn.Credential
67	69		}
68	70
69	71		func (o owner) WebAuthnID() []byte { return o.handle }
70		-	func (o owner) WebAuthnName() string { return ownerName }
71		-	func (o owner) WebAuthnDisplayName() string { return ownerName }
	72	+	func (o owner) WebAuthnName() string { return o.name }
	73	+	func (o owner) WebAuthnDisplayName() string { return o.name }
72	74		func (o owner) WebAuthnCredentials() []gowebauthn.Credential { return o.credentials }
73	75
74	76		// refuse builds the error of a failed verification: an ErrUnauthenticated whose

@@ -84,7 +86,7 @@ func (v *Verifier) BeginRegistration(userHandle []byte, existing []domain.Passke
84	86		for _, p := range existing {
85	87		exclude = append(exclude, descriptor(p))
86	88		}
87		-	creation, session, err := v.web.BeginRegistration(owner{handle: userHandle},
	89	+	creation, session, err := v.web.BeginRegistration(owner{name: v.name, handle: userHandle},
88	90		gowebauthn.WithResidentKeyRequirement(protocol.ResidentKeyRequirementRequired),
89	91		gowebauthn.WithExclusions(exclude),
90	92		gowebauthn.WithConveyancePreference(protocol.PreferNoAttestation),

@@ -105,7 +107,7 @@ func (v *Verifier) FinishRegistration(userHandle []byte, ceremony, response []by
105	107		if err != nil {
106	108		return domain.Passkey{}, refuse("registration", err)
107	109		}
108		-	cred, err := v.web.CreateCredential(owner{handle: userHandle}, session, parsed)
	110	+	cred, err := v.web.CreateCredential(owner{name: v.name, handle: userHandle}, session, parsed)
109	111		if err != nil {
110	112		return domain.Passkey{}, refuse("registration", err)
111	113		}

@@ -158,7 +160,7 @@ func (v *Verifier) FinishLogin(userHandle []byte, ceremony, response []byte, loo
158	160		return nil, err
159	161		}
160	162		stored = p
161		-	return owner{handle: userHandle, credentials: []gowebauthn.Credential{credential(p)}}, nil
	163	+	return owner{name: v.name, handle: userHandle, credentials: []gowebauthn.Credential{credential(p)}}, nil
162	164		}
163	165		_, cred, err := v.web.ValidatePasskeyLogin(handler, session, parsed)
164	166		if lookupErr != nil {

 	"bnema.dev/ermite/internal/ports"
 )
-// ownerName names the one user in the options sent to the browser.
-const ownerName = "owner"
 // Verifier runs the WebAuthn ceremonies for the owner of one public URL.
 type Verifier struct {
 	web *gowebauthn.WebAuthn
+	// name names the one user in the options sent to the browser: the
+	// owner's name (ERMITE_OWNER), which password managers show.
+	name string
 }
 var _ ports.PasskeyVerifier = (*Verifier)(nil)
 // New builds a verifier for publicURL: the relying party ID is its host name,
 // the only accepted origin is its origin. It fails when the library refuses the
-// configuration, for example for a host that is an IP address.
+// configuration, for example for a host that is an IP address. ownerName is
-func New(publicURL string) (*Verifier, error) {
+// the name the browser shows for the passkey.
+func New(publicURL, ownerName string) (*Verifier, error) {
 	u, err := url.Parse(publicURL)
 	if err != nil {
 		return nil, fmt.Errorf("passkeys: parse public URL: %w", err)
 	if err != nil {
 		return nil, fmt.Errorf("passkeys: %w", err)
 	}
-	return &Verifier{web: web}, nil
+	return &Verifier{web: web, name: ownerName}, nil
 }
 // owner is the single WebAuthn user.
 type owner struct {
+	name        string
 	handle      []byte
 	credentials []gowebauthn.Credential
 }
 func (o owner) WebAuthnID() []byte                           { return o.handle }
-func (o owner) WebAuthnName() string                         { return ownerName }
+func (o owner) WebAuthnName() string                         { return o.name }
-func (o owner) WebAuthnDisplayName() string                  { return ownerName }
+func (o owner) WebAuthnDisplayName() string                  { return o.name }
 func (o owner) WebAuthnCredentials() []gowebauthn.Credential { return o.credentials }
 // refuse builds the error of a failed verification: an ErrUnauthenticated whose
 	for _, p := range existing {
 		exclude = append(exclude, descriptor(p))
 	}
-	creation, session, err := v.web.BeginRegistration(owner{handle: userHandle},
+	creation, session, err := v.web.BeginRegistration(owner{name: v.name, handle: userHandle},
 		gowebauthn.WithResidentKeyRequirement(protocol.ResidentKeyRequirementRequired),
 		gowebauthn.WithExclusions(exclude),
 		gowebauthn.WithConveyancePreference(protocol.PreferNoAttestation),
 	if err != nil {
 		return domain.Passkey{}, refuse("registration", err)
 	}
-	cred, err := v.web.CreateCredential(owner{handle: userHandle}, session, parsed)
+	cred, err := v.web.CreateCredential(owner{name: v.name, handle: userHandle}, session, parsed)
 	if err != nil {
 		return domain.Passkey{}, refuse("registration", err)
 	}
 			return nil, err
 		}
 		stored = p
-		return owner{handle: userHandle, credentials: []gowebauthn.Credential{credential(p)}}, nil
+		return owner{name: v.name, handle: userHandle, credentials: []gowebauthn.Credential{credential(p)}}, nil
 	}
 	_, cred, err := v.web.ValidatePasskeyLogin(handler, session, parsed)
 	if lookupErr != nil {

M internal/adapters/webauthn/webauthn_test.go +10 -10


@@ -90,7 +90,7 @@ func TestRegisterThenLogin(t *testing.T) {
90	90		for name, s := range sites {
91	91		t.Run(name, func(t *testing.T) {
92	92		t.Parallel()
93		-	v, err := webauthn.New(s.url)
	93	+	v, err := webauthn.New(s.url, "owner")
94	94		require.NoError(t, err)
95	95		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{BackupEligible: true})
96	96		d.cred.Counter = 5

@@ -119,7 +119,7 @@ func TestRegisterThenLogin(t *testing.T) {
119	119		func TestRegistrationReportsBackupFlags(t *testing.T) {
120	120		t.Parallel()
121	121		s := sites["https"]
122		-	v, err := webauthn.New(s.url)
	122	+	v, err := webauthn.New(s.url, "owner")
123	123		require.NoError(t, err)
124	124		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{BackupEligible: true, BackupState: true,
125	125		Transports: []virtualwebauthn.Transport{virtualwebauthn.TransportInternal, virtualwebauthn.TransportHybrid}})

@@ -139,7 +139,7 @@ func TestRegistrationReportsBackupFlags(t *testing.T) {
139	139		func TestOptions(t *testing.T) {
140	140		t.Parallel()
141	141		s := sites["https"]
142		-	v, err := webauthn.New(s.url)
	142	+	v, err := webauthn.New(s.url, "owner")
143	143		require.NoError(t, err)
144	144
145	145		existing := domain.Passkey{ID: []byte("already-registered"), PublicKey: []byte("k"), Transports: []string{"usb"}}

@@ -197,7 +197,7 @@ func TestOptions(t *testing.T) {
197	197		func TestLoginRefused(t *testing.T) {
198	198		t.Parallel()
199	199		s := sites["localhost"]
200		-	v, err := webauthn.New(s.url)
	200	+	v, err := webauthn.New(s.url, "owner")
201	201		require.NoError(t, err)
202	202
203	203		tests := []struct {

@@ -315,7 +315,7 @@ func setExpires(t *testing.T, ceremony []byte, at time.Time) []byte {
315	315		func TestLoginStoreFailureIsNotAnUnauthenticated(t *testing.T) {
316	316		t.Parallel()
317	317		s := sites["localhost"]
318		-	v, err := webauthn.New(s.url)
	318	+	v, err := webauthn.New(s.url, "owner")
319	319		require.NoError(t, err)
320	320		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{})
321	321		ceremony, options := d.assertion(t, v, s)

@@ -334,7 +334,7 @@ func TestLoginStoreFailureIsNotAnUnauthenticated(t *testing.T) {
334	334		func TestCounterThatDoesNotAdvanceKeepsTheStoredOne(t *testing.T) {
335	335		t.Parallel()
336	336		s := sites["localhost"]
337		-	v, err := webauthn.New(s.url)
	337	+	v, err := webauthn.New(s.url, "owner")
338	338		require.NoError(t, err)
339	339		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{})
340	340

@@ -364,7 +364,7 @@ func TestCounterThatDoesNotAdvanceKeepsTheStoredOne(t *testing.T) {
364	364		func TestZeroCounterIsNotAClone(t *testing.T) {
365	365		t.Parallel()
366	366		s := sites["localhost"]
367		-	v, err := webauthn.New(s.url)
	367	+	v, err := webauthn.New(s.url, "owner")
368	368		require.NoError(t, err)
369	369		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{BackupEligible: true, BackupState: true})
370	370		for range 2 {

@@ -378,7 +378,7 @@ func TestZeroCounterIsNotAClone(t *testing.T) {
378	378		func TestRegistrationRefused(t *testing.T) {
379	379		t.Parallel()
380	380		s := sites["https"]
381		-	v, err := webauthn.New(s.url)
	381	+	v, err := webauthn.New(s.url, "owner")
382	382		require.NoError(t, err)
383	383
384	384		tests := []struct {

@@ -436,11 +436,11 @@ func TestRegistrationRefused(t *testing.T) {
436	436		func TestNew(t *testing.T) {
437	437		t.Parallel()
438	438		for _, ok := range []string{"https://git.example.com", "http://localhost:7341", "https://Git.Example.com:8443/"} {
439		-	_, err := webauthn.New(ok)
	439	+	_, err := webauthn.New(ok, "owner")
440	440		assert.NoError(t, err, ok)
441	441		}
442	442		for _, bad := range []string{"http://127.0.0.1:7341", "http://[::1]:7341", "git.example.com", "ftp://git.example.com", "", "https://"} {
443		-	_, err := webauthn.New(bad)
	443	+	_, err := webauthn.New(bad, "owner")
444	444		assert.Error(t, err, bad)
445	445		}
446	446		}


@@ -90,7 +90,7 @@ func TestRegisterThenLogin(t *testing.T) {
90		for name, s := range sites {	90		for name, s := range sites {
91		t.Run(name, func(t *testing.T) {	91		t.Run(name, func(t *testing.T) {
92		t.Parallel()	92		t.Parallel()
93	-	v, err := webauthn.New(s.url)	93	+	v, err := webauthn.New(s.url, "owner")
94		require.NoError(t, err)	94		require.NoError(t, err)
95		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{BackupEligible: true})	95		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{BackupEligible: true})
96		d.cred.Counter = 5	96		d.cred.Counter = 5

@@ -119,7 +119,7 @@ func TestRegisterThenLogin(t *testing.T) {
119		func TestRegistrationReportsBackupFlags(t *testing.T) {	119		func TestRegistrationReportsBackupFlags(t *testing.T) {
120		t.Parallel()	120		t.Parallel()
121		s := sites["https"]	121		s := sites["https"]
122	-	v, err := webauthn.New(s.url)	122	+	v, err := webauthn.New(s.url, "owner")
123		require.NoError(t, err)	123		require.NoError(t, err)
124		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{BackupEligible: true, BackupState: true,	124		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{BackupEligible: true, BackupState: true,
125		Transports: []virtualwebauthn.Transport{virtualwebauthn.TransportInternal, virtualwebauthn.TransportHybrid}})	125		Transports: []virtualwebauthn.Transport{virtualwebauthn.TransportInternal, virtualwebauthn.TransportHybrid}})

@@ -139,7 +139,7 @@ func TestRegistrationReportsBackupFlags(t *testing.T) {
139		func TestOptions(t *testing.T) {	139		func TestOptions(t *testing.T) {
140		t.Parallel()	140		t.Parallel()
141		s := sites["https"]	141		s := sites["https"]
142	-	v, err := webauthn.New(s.url)	142	+	v, err := webauthn.New(s.url, "owner")
143		require.NoError(t, err)	143		require.NoError(t, err)
144			144
145		existing := domain.Passkey{ID: []byte("already-registered"), PublicKey: []byte("k"), Transports: []string{"usb"}}	145		existing := domain.Passkey{ID: []byte("already-registered"), PublicKey: []byte("k"), Transports: []string{"usb"}}

@@ -197,7 +197,7 @@ func TestOptions(t *testing.T) {
197		func TestLoginRefused(t *testing.T) {	197		func TestLoginRefused(t *testing.T) {
198		t.Parallel()	198		t.Parallel()
199		s := sites["localhost"]	199		s := sites["localhost"]
200	-	v, err := webauthn.New(s.url)	200	+	v, err := webauthn.New(s.url, "owner")
201		require.NoError(t, err)	201		require.NoError(t, err)
202			202
203		tests := []struct {	203		tests := []struct {

@@ -315,7 +315,7 @@ func setExpires(t *testing.T, ceremony []byte, at time.Time) []byte {
315		func TestLoginStoreFailureIsNotAnUnauthenticated(t *testing.T) {	315		func TestLoginStoreFailureIsNotAnUnauthenticated(t *testing.T) {
316		t.Parallel()	316		t.Parallel()
317		s := sites["localhost"]	317		s := sites["localhost"]
318	-	v, err := webauthn.New(s.url)	318	+	v, err := webauthn.New(s.url, "owner")
319		require.NoError(t, err)	319		require.NoError(t, err)
320		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{})	320		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{})
321		ceremony, options := d.assertion(t, v, s)	321		ceremony, options := d.assertion(t, v, s)

@@ -334,7 +334,7 @@ func TestLoginStoreFailureIsNotAnUnauthenticated(t *testing.T) {
334		func TestCounterThatDoesNotAdvanceKeepsTheStoredOne(t *testing.T) {	334		func TestCounterThatDoesNotAdvanceKeepsTheStoredOne(t *testing.T) {
335		t.Parallel()	335		t.Parallel()
336		s := sites["localhost"]	336		s := sites["localhost"]
337	-	v, err := webauthn.New(s.url)	337	+	v, err := webauthn.New(s.url, "owner")
338		require.NoError(t, err)	338		require.NoError(t, err)
339		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{})	339		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{})
340			340

@@ -364,7 +364,7 @@ func TestCounterThatDoesNotAdvanceKeepsTheStoredOne(t *testing.T) {
364		func TestZeroCounterIsNotAClone(t *testing.T) {	364		func TestZeroCounterIsNotAClone(t *testing.T) {
365		t.Parallel()	365		t.Parallel()
366		s := sites["localhost"]	366		s := sites["localhost"]
367	-	v, err := webauthn.New(s.url)	367	+	v, err := webauthn.New(s.url, "owner")
368		require.NoError(t, err)	368		require.NoError(t, err)
369		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{BackupEligible: true, BackupState: true})	369		d := register(t, v, s, virtualwebauthn.AuthenticatorOptions{BackupEligible: true, BackupState: true})
370		for range 2 {	370		for range 2 {

@@ -378,7 +378,7 @@ func TestZeroCounterIsNotAClone(t *testing.T) {
378		func TestRegistrationRefused(t *testing.T) {	378		func TestRegistrationRefused(t *testing.T) {
379		t.Parallel()	379		t.Parallel()
380		s := sites["https"]	380		s := sites["https"]
381	-	v, err := webauthn.New(s.url)	381	+	v, err := webauthn.New(s.url, "owner")
382		require.NoError(t, err)	382		require.NoError(t, err)
383			383
384		tests := []struct {	384		tests := []struct {

@@ -436,11 +436,11 @@ func TestRegistrationRefused(t *testing.T) {
436		func TestNew(t *testing.T) {	436		func TestNew(t *testing.T) {
437		t.Parallel()	437		t.Parallel()
438		for _, ok := range []string{"https://git.example.com", "http://localhost:7341", "https://Git.Example.com:8443/"} {	438		for _, ok := range []string{"https://git.example.com", "http://localhost:7341", "https://Git.Example.com:8443/"} {
439	-	_, err := webauthn.New(ok)	439	+	_, err := webauthn.New(ok, "owner")
440		assert.NoError(t, err, ok)	440		assert.NoError(t, err, ok)
441		}	441		}
442		for _, bad := range []string{"http://127.0.0.1:7341", "http://[::1]:7341", "git.example.com", "ftp://git.example.com", "", "https://"} {	442		for _, bad := range []string{"http://127.0.0.1:7341", "http://[::1]:7341", "git.example.com", "ftp://git.example.com", "", "https://"} {
443	-	_, err := webauthn.New(bad)	443	+	_, err := webauthn.New(bad, "owner")
444		assert.Error(t, err, bad)	444		assert.Error(t, err, bad)
445		}	445		}
446		}	446		}

M internal/app/cli_web.go +4 -4


@@ -35,11 +35,11 @@ func newWebLoginCmd(env cliEnv) cobra.Command {
35	35		cmd := &cobra.Command{
36	36		Use: "login",
37	37		Short: "Print a one-time link that signs your browser in",
38		-	Long: "Ask the server for a login link and print it on standard output. Open it in your browser and confirm:\n" +
	38	+	Long: "Ask the server for a login link and print it on standard output. Open it in your browser:\n" +
39	39		"the browser is then signed in as the owner for 12 hours (private repositories, merge requests).\n\n" +
40	40		"The link works once, for about a minute, and only until the server restarts. It is a secret: it is\n" +
41		-	"printed and nowhere else (not stored, not logged); do not paste it into a chat or a ticket. Opening\n" +
42		-	"it only shows a confirmation page; confirming it signs the browser in.\n\n" +
	41	+	"printed and nowhere else (not stored, not logged); do not paste it into a chat or a ticket. The page\n" +
	42	+	"signs the browser in by itself; link previews, which run no script, cannot use it.\n\n" +
43	43		"JSON fields (--json): url, expires_at (RFC 3339 UTC).",
44	44		Args: cobra.NoArgs,
45	45		}

@@ -56,7 +56,7 @@ func newWebLoginCmd(env cliEnv) cobra.Command {
56	56		if *asJSON {
57	57		return writeJSON(cmd.OutOrStdout(), jsonLoginLink{URL: res.Msg.GetUrl(), ExpiresAt: jsonTime(res.Msg.GetExpiresAt())})
58	58		}
59		-	noticef(cmd, "open this link in your browser and confirm; it works once, until %s UTC", shortTime(res.Msg.GetExpiresAt(), "shortly"))
	59	+	noticef(cmd, "open this link in your browser; it works once, until %s UTC", shortTime(res.Msg.GetExpiresAt(), "shortly"))
60	60		_, err = fmt.Fprintln(cmd.OutOrStdout(), res.Msg.GetUrl())
61	61		return err
62	62		}


@@ -35,11 +35,11 @@ func newWebLoginCmd(env cliEnv) cobra.Command {
35		cmd := &cobra.Command{	35		cmd := &cobra.Command{
36		Use: "login",	36		Use: "login",
37		Short: "Print a one-time link that signs your browser in",	37		Short: "Print a one-time link that signs your browser in",
38	-	Long: "Ask the server for a login link and print it on standard output. Open it in your browser and confirm:\n" +	38	+	Long: "Ask the server for a login link and print it on standard output. Open it in your browser:\n" +
39		"the browser is then signed in as the owner for 12 hours (private repositories, merge requests).\n\n" +	39		"the browser is then signed in as the owner for 12 hours (private repositories, merge requests).\n\n" +
40		"The link works once, for about a minute, and only until the server restarts. It is a secret: it is\n" +	40		"The link works once, for about a minute, and only until the server restarts. It is a secret: it is\n" +
41	-	"printed and nowhere else (not stored, not logged); do not paste it into a chat or a ticket. Opening\n" +	41	+	"printed and nowhere else (not stored, not logged); do not paste it into a chat or a ticket. The page\n" +
42	-	"it only shows a confirmation page; confirming it signs the browser in.\n\n" +	42	+	"signs the browser in by itself; link previews, which run no script, cannot use it.\n\n" +
43		"JSON fields (--json): url, expires_at (RFC 3339 UTC).",	43		"JSON fields (--json): url, expires_at (RFC 3339 UTC).",
44		Args: cobra.NoArgs,	44		Args: cobra.NoArgs,
45		}	45		}

@@ -56,7 +56,7 @@ func newWebLoginCmd(env cliEnv) cobra.Command {
56		if *asJSON {	56		if *asJSON {
57		return writeJSON(cmd.OutOrStdout(), jsonLoginLink{URL: res.Msg.GetUrl(), ExpiresAt: jsonTime(res.Msg.GetExpiresAt())})	57		return writeJSON(cmd.OutOrStdout(), jsonLoginLink{URL: res.Msg.GetUrl(), ExpiresAt: jsonTime(res.Msg.GetExpiresAt())})
58		}	58		}
59	-	noticef(cmd, "open this link in your browser and confirm; it works once, until %s UTC", shortTime(res.Msg.GetExpiresAt(), "shortly"))	59	+	noticef(cmd, "open this link in your browser; it works once, until %s UTC", shortTime(res.Msg.GetExpiresAt(), "shortly"))
60		_, err = fmt.Fprintln(cmd.OutOrStdout(), res.Msg.GetUrl())	60		_, err = fmt.Fprintln(cmd.OutOrStdout(), res.Msg.GetUrl())
61		return err	61		return err
62		}	62		}

M internal/app/forge.go +1 -1


@@ -317,7 +317,7 @@ func newForge(ctx context.Context, cfg config.Config, opts options) (_ *forge, e
317	317		// Owner passkeys (ADR 0026): built only when the public URL allows them.
318	318		// When it does, a verifier that cannot be built is fatal.
319	319		if ok, reason := passkeysAvailable(cfg.PublicURL); ok {
320		-	verifier, err := webauthn.New(cfg.PublicURL)
	320	+	verifier, err := webauthn.New(cfg.PublicURL, cfg.Owner)
321	321		if err != nil {
322	322		return nil, fmt.Errorf("passkeys: %w", err)
323	323		}


@@ -317,7 +317,7 @@ func newForge(ctx context.Context, cfg config.Config, opts options) (_ *forge, e
317		// Owner passkeys (ADR 0026): built only when the public URL allows them.	317		// Owner passkeys (ADR 0026): built only when the public URL allows them.
318		// When it does, a verifier that cannot be built is fatal.	318		// When it does, a verifier that cannot be built is fatal.
319		if ok, reason := passkeysAvailable(cfg.PublicURL); ok {	319		if ok, reason := passkeysAvailable(cfg.PublicURL); ok {
320	-	verifier, err := webauthn.New(cfg.PublicURL)	320	+	verifier, err := webauthn.New(cfg.PublicURL, cfg.Owner)
321		if err != nil {	321		if err != nil {
322		return nil, fmt.Errorf("passkeys: %w", err)	322		return nil, fmt.Errorf("passkeys: %w", err)
323		}	323		}

M internal/app/testdata/web/blob-binary.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>data.bin · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -129,8 +132,8 @@
129	132		<footer class="foot">
130	133		<span>ermite devel</span>
131	134		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
132		-	<span class="foot-keys">
133		-	<kbd>?</kbd> keyboard shortcuts</span>
	135	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	136	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
134	137		</footer>
135	138		<div class="hint" role="status" aria-live="polite">
136	139		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>data.bin · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/blob-code.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>main.go · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -199,8 +202,8 @@
199	202		<footer class="foot">
200	203		<span>ermite devel</span>
201	204		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
202		-	<span class="foot-keys">
203		-	<kbd>?</kbd> keyboard shortcuts</span>
	205	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	206	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
204	207		</footer>
205	208		<div class="hint" role="status" aria-live="polite">
206	209		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>main.go · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/blob-empty.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>empty.txt · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -129,8 +132,8 @@
129	132		<footer class="foot">
130	133		<span>ermite devel</span>
131	134		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
132		-	<span class="foot-keys">
133		-	<kbd>?</kbd> keyboard shortcuts</span>
	135	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	136	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
134	137		</footer>
135	138		<div class="hint" role="status" aria-live="polite">
136	139		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>empty.txt · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/blob-image.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>pic.png · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -131,8 +134,8 @@
131	134		<footer class="foot">
132	135		<span>ermite devel</span>
133	136		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
134		-	<span class="foot-keys">
135		-	<kbd>?</kbd> keyboard shortcuts</span>
	137	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	138	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
136	139		</footer>
137	140		<div class="hint" role="status" aria-live="polite">
138	141		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>pic.png · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/blob-markdown.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>docs/guide.md · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -65,7 +69,6 @@
65	69		<span class="search-label">Go to…</span>
66	70		<kbd aria-hidden="true">ctrl k</kbd>
67	71		</button>
68		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
69	72		</div>
70	73		</div>
71	74		<nav class="tabs" aria-label="Sections">

@@ -196,8 +199,8 @@
196	199		<footer class="foot">
197	200		<span>ermite devel</span>
198	201		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
199		-	<span class="foot-keys">
200		-	<kbd>?</kbd> keyboard shortcuts</span>
	202	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	203	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
201	204		</footer>
202	205		<div class="hint" role="status" aria-live="polite">
203	206		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>docs/guide.md · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/blob-svg.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>logo.svg · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -154,8 +157,8 @@
154	157		<footer class="foot">
155	158		<span>ermite devel</span>
156	159		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
157		-	<span class="foot-keys">
158		-	<kbd>?</kbd> keyboard shortcuts</span>
	160	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	161	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
159	162		</footer>
160	163		<div class="hint" role="status" aria-live="polite">
161	164		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>logo.svg · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/blob-text.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>notes.txt · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -149,8 +152,8 @@
149	152		<footer class="foot">
150	153		<span>ermite devel</span>
151	154		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
152		-	<span class="foot-keys">
153		-	<kbd>?</kbd> keyboard shortcuts</span>
	155	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	156	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
154	157		</footer>
155	158		<div class="hint" role="status" aria-live="polite">
156	159		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>notes.txt · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/blob-too-large.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>big.txt · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -129,8 +132,8 @@
129	132		<footer class="foot">
130	133		<span>ermite devel</span>
131	134		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
132		-	<span class="foot-keys">
133		-	<kbd>?</kbd> keyboard shortcuts</span>
	135	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	136	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
134	137		</footer>
135	138		<div class="hint" role="status" aria-live="polite">
136	139		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>big.txt · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/blob-trojan.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>evil.go · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -196,8 +199,8 @@
196	199		<footer class="foot">
197	200		<span>ermite devel</span>
198	201		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
199		-	<span class="foot-keys">
200		-	<kbd>?</kbd> keyboard shortcuts</span>
	202	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	203	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
201	204		</footer>
202	205		<div class="hint" role="status" aria-live="polite">
203	206		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>evil.go · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commit-big.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>SHA7 add a very large file · diffs · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -166,8 +169,8 @@
166	169		<footer class="foot">
167	170		<span>ermite devel</span>
168	171		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
169		-	<span class="foot-keys">
170		-	<kbd>?</kbd> keyboard shortcuts</span>
	172	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	173	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
171	174		</footer>
172	175		<div class="hint" role="status" aria-live="polite">
173	176		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>SHA7 add a very large file · diffs · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commit-binary.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>SHA7 change a binary file · diffs · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -161,8 +164,8 @@
161	164		<footer class="foot">
162	165		<span>ermite devel</span>
163	166		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
164		-	<span class="foot-keys">
165		-	<kbd>?</kbd> keyboard shortcuts</span>
	167	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	168	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
166	169		</footer>
167	170		<div class="hint" role="status" aria-live="polite">
168	171		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>SHA7 change a binary file · diffs · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commit-merge.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>SHA7 merge the side branch · diffs · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -200,8 +203,8 @@
200	203		<footer class="foot">
201	204		<span>ermite devel</span>
202	205		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
203		-	<span class="foot-keys">
204		-	<kbd>?</kbd> keyboard shortcuts</span>
	206	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	207	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
205	208		</footer>
206	209		<div class="hint" role="status" aria-live="polite">
207	210		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>SHA7 merge the side branch · diffs · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commit-modify-split.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>SHA7 modify a file and make a script executable · diffs · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -321,8 +324,8 @@ And <b>html</b> & "quotes".</pre>
321	324		<footer class="foot">
322	325		<span>ermite devel</span>
323	326		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
324		-	<span class="foot-keys">
325		-	<kbd>?</kbd> keyboard shortcuts</span>
	327	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	328	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
326	329		</footer>
327	330		<div class="hint" role="status" aria-live="polite">
328	331		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>SHA7 modify a file and make a script executable · diffs · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commit-modify.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>SHA7 modify a file and make a script executable · diffs · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -321,8 +324,8 @@ And <b>html</b> & "quotes".</pre>
321	324		<footer class="foot">
322	325		<span>ermite devel</span>
323	326		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
324		-	<span class="foot-keys">
325		-	<kbd>?</kbd> keyboard shortcuts</span>
	327	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	328	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
326	329		</footer>
327	330		<div class="hint" role="status" aria-live="polite">
328	331		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>SHA7 modify a file and make a script executable · diffs · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commit-rename.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>SHA7 rename a file and delete another · diffs · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -226,8 +229,8 @@
226	229		<footer class="foot">
227	230		<span>ermite devel</span>
228	231		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
229		-	<span class="foot-keys">
230		-	<kbd>?</kbd> keyboard shortcuts</span>
	232	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	233	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
231	234		</footer>
232	235		<div class="hint" role="status" aria-live="polite">
233	236		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>SHA7 rename a file and delete another · diffs · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commit-root.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>SHA7 root: the first files · diffs · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -542,8 +545,8 @@
542	545		<footer class="foot">
543	546		<span>ermite devel</span>
544	547		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
545		-	<span class="foot-keys">
546		-	<kbd>?</kbd> keyboard shortcuts</span>
	548	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	549	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
547	550		</footer>
548	551		<div class="hint" role="status" aria-live="polite">
549	552		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>SHA7 root: the first files · diffs · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commit-trojan.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>SHA7 add evil.go · diffs · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -335,8 +338,8 @@
335	338		<footer class="foot">
336	339		<span>ermite devel</span>
337	340		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
338		-	<span class="foot-keys">
339		-	<kbd>?</kbd> keyboard shortcuts</span>
	341	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	342	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
340	343		</footer>
341	344		<div class="hint" role="status" aria-live="polite">
342	345		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>SHA7 add evil.go · diffs · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commits-page2.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>commits · long · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -160,8 +163,8 @@
160	163		<footer class="foot">
161	164		<span>ermite devel</span>
162	165		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
163		-	<span class="foot-keys">
164		-	<kbd>?</kbd> keyboard shortcuts</span>
	166	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	167	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
165	168		</footer>
166	169		<div class="hint" role="status" aria-live="polite">
167	170		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>commits · long · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commits-path.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>history of a.txt · long · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -175,8 +178,8 @@
175	178		<footer class="foot">
176	179		<span>ermite devel</span>
177	180		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
178		-	<span class="foot-keys">
179		-	<kbd>?</kbd> keyboard shortcuts</span>
	181	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	182	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
180	183		</footer>
181	184		<div class="hint" role="status" aria-live="polite">
182	185		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>history of a.txt · long · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/commits-root.html +10 -7


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>commits · long · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -1053,8 +1056,8 @@
1053	1056		<footer class="foot">
1054	1057		<span>ermite devel</span>
1055	1058		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
1056		-	<span class="foot-keys">
1057		-	<kbd>?</kbd> keyboard shortcuts</span>
	1059	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	1060	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
1058	1061		</footer>
1059	1062		<div class="hint" role="status" aria-live="polite">
1060	1063		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

@@ -1063,8 +1066,8 @@
1063	1066		</span>
1064	1067		<span class="hint-flash" :text="document.body.dataset.flash \|\| ''">
1065	1068		</span>
1066		-	<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Along&view=commits&ref=main&head=SHA40" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> data.state = 'live';
1067		-	htmx:sse:close, htmx:sse:error -> data.state = 'offline';
	1069	+	<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Along&view=commits&ref=main&head=SHA40" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> ermiteLive.back();
	1070	+	htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
1068	1071		htmx:sse:error -> ermiteLive.error(event.detail.status);
1069	1072		htmx:sse:before:connection -> ermiteLive.gate(event);
1070	1073		home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>commits · long · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">
 </span>
 <span class="hint-flash" :text="document.body.dataset.flash || ''">
 </span>
-<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Along&amp;view=commits&amp;ref=main&amp;head=SHA40" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> data.state = 'live';
+<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Along&amp;view=commits&amp;ref=main&amp;head=SHA40" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> ermiteLive.back();
-           htmx:sse:close, htmx:sse:error -> data.state = 'offline';
+           htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
            htmx:sse:error -> ermiteLive.error(event.detail.status);
            htmx:sse:before:connection -> ermiteLive.gate(event);
            home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

M internal/app/testdata/web/commits-small.html +10 -7


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>commits · diffs · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -314,8 +317,8 @@
314	317		<footer class="foot">
315	318		<span>ermite devel</span>
316	319		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
317		-	<span class="foot-keys">
318		-	<kbd>?</kbd> keyboard shortcuts</span>
	320	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	321	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
319	322		</footer>
320	323		<div class="hint" role="status" aria-live="polite">
321	324		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

@@ -324,8 +327,8 @@
324	327		</span>
325	328		<span class="hint-flash" :text="document.body.dataset.flash \|\| ''">
326	329		</span>
327		-	<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Adiffs&view=commits&ref=main&head=SHA40" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> data.state = 'live';
328		-	htmx:sse:close, htmx:sse:error -> data.state = 'offline';
	330	+	<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Adiffs&view=commits&ref=main&head=SHA40" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> ermiteLive.back();
	331	+	htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
329	332		htmx:sse:error -> ermiteLive.error(event.detail.status);
330	333		htmx:sse:before:connection -> ermiteLive.gate(event);
331	334		home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>commits · diffs · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">
 </span>
 <span class="hint-flash" :text="document.body.dataset.flash || ''">
 </span>
-<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Adiffs&amp;view=commits&amp;ref=main&amp;head=SHA40" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> data.state = 'live';
+<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Adiffs&amp;view=commits&amp;ref=main&amp;head=SHA40" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> ermiteLive.back();
-           htmx:sse:close, htmx:sse:error -> data.state = 'offline';
+           htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
            htmx:sse:error -> ermiteLive.error(event.detail.status);
            htmx:sse:before:connection -> ermiteLive.gate(event);
            home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

M internal/app/testdata/web/empty.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>quiet · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -47,7 +51,6 @@
47	51		<span class="search-label">Go to…</span>
48	52		<kbd aria-hidden="true">ctrl k</kbd>
49	53		</button>
50		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
51	54		</div>
52	55		</div>
53	56		</header>

@@ -78,8 +81,8 @@
78	81		<footer class="foot">
79	82		<span>ermite devel</span>
80	83		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
81		-	<span class="foot-keys">
82		-	<kbd>?</kbd> keyboard shortcuts</span>
	84	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	85	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
83	86		</footer>
84	87		<div class="hint" role="status" aria-live="polite">
85	88		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>quiet · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 </header>
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/home.html +10 -7


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<div class="hdr-acts">
37	41		<button type="button" class="btn search" data-js aria-haspopup="dialog" aria-controls="panel-cmd" aria-keyshortcuts="Control+K :" title="go to a section, ref, file or repo (ctrl k or :)" data-fire="cmd">

@@ -40,7 +44,6 @@
40	44		<span class="search-label">Go to…</span>
41	45		<kbd aria-hidden="true">ctrl k</kbd>
42	46		</button>
43		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
44	47		</div>
45	48		</div>
46	49		</header>

@@ -103,8 +106,8 @@
103	106		<footer class="foot">
104	107		<span>ermite devel</span>
105	108		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
106		-	<span class="foot-keys">
107		-	<kbd>?</kbd> keyboard shortcuts</span>
	109	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	110	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
108	111		</footer>
109	112		<div class="hint" role="status" aria-live="polite">
110	113		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

@@ -113,8 +116,8 @@
113	116		</span>
114	117		<span class="hint-flash" :text="document.body.dataset.flash \|\| ''">
115	118		</span>
116		-	<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=home" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> data.state = 'live';
117		-	htmx:sse:close, htmx:sse:error -> data.state = 'offline';
	119	+	<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=home" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> ermiteLive.back();
	120	+	htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
118	121		htmx:sse:error -> ermiteLive.error(event.detail.status);
119	122		htmx:sse:before:connection -> ermiteLive.gate(event);
120	123		home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <div class="hdr-acts">
 <button type="button" class="btn search" data-js aria-haspopup="dialog" aria-controls="panel-cmd" aria-keyshortcuts="Control+K :" title="go to a section, ref, file or repo (ctrl k or :)" data-fire="cmd">
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 </header>
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">
 </span>
 <span class="hint-flash" :text="document.body.dataset.flash || ''">
 </span>
-<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=home" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> data.state = 'live';
+<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=home" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> ermiteLive.back();
-           htmx:sse:close, htmx:sse:error -> data.state = 'offline';
+           htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
            htmx:sse:error -> ermiteLive.error(event.detail.status);
            htmx:sse:before:connection -> ermiteLive.gate(event);
            home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

M internal/app/testdata/web/not-found-page.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>404 · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -47,7 +51,6 @@
47	51		<span class="search-label">Go to…</span>
48	52		<kbd aria-hidden="true">ctrl k</kbd>
49	53		</button>
50		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
51	54		</div>
52	55		</div>
53	56		</header>

@@ -67,8 +70,8 @@
67	70		<footer class="foot">
68	71		<span>ermite devel</span>
69	72		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
70		-	<span class="foot-keys">
71		-	<kbd>?</kbd> keyboard shortcuts</span>
	73	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	74	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
72	75		</footer>
73	76		<div class="hint" role="status" aria-live="polite">
74	77		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>404 · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 </header>
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/not-found.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>404 · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -47,7 +51,6 @@
47	51		<span class="search-label">Go to…</span>
48	52		<kbd aria-hidden="true">ctrl k</kbd>
49	53		</button>
50		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
51	54		</div>
52	55		</div>
53	56		</header>

@@ -67,8 +70,8 @@
67	70		<footer class="foot">
68	71		<span>ermite devel</span>
69	72		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
70		-	<span class="foot-keys">
71		-	<kbd>?</kbd> keyboard shortcuts</span>
	73	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	74	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
72	75		</footer>
73	76		<div class="hint" role="status" aria-live="polite">
74	77		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>404 · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 </header>
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/refs.html +10 -7


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>refs · demo · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -56,7 +60,6 @@
56	60		<span class="search-label">Go to…</span>
57	61		<kbd aria-hidden="true">ctrl k</kbd>
58	62		</button>
59		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
60	63		</div>
61	64		</div>
62	65		<nav class="tabs" aria-label="Sections">

@@ -190,8 +193,8 @@
190	193		<footer class="foot">
191	194		<span>ermite devel</span>
192	195		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
193		-	<span class="foot-keys">
194		-	<kbd>?</kbd> keyboard shortcuts</span>
	196	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	197	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
195	198		</footer>
196	199		<div class="hint" role="status" aria-live="polite">
197	200		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

@@ -200,8 +203,8 @@
200	203		</span>
201	204		<span class="hint-flash" :text="document.body.dataset.flash \|\| ''">
202	205		</span>
203		-	<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Ademo&view=refs" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> data.state = 'live';
204		-	htmx:sse:close, htmx:sse:error -> data.state = 'offline';
	206	+	<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Ademo&view=refs" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> ermiteLive.back();
	207	+	htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
205	208		htmx:sse:error -> ermiteLive.error(event.detail.status);
206	209		htmx:sse:before:connection -> ermiteLive.gate(event);
207	210		home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>refs · demo · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">
 </span>
 <span class="hint-flash" :text="document.body.dataset.flash || ''">
 </span>
-<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Ademo&amp;view=refs" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> data.state = 'live';
+<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Ademo&amp;view=refs" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> ermiteLive.back();
-           htmx:sse:close, htmx:sse:error -> data.state = 'offline';
+           htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
            htmx:sse:error -> ermiteLive.error(event.detail.status);
            htmx:sse:before:connection -> ermiteLive.gate(event);
            home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

M internal/app/testdata/web/summary.html +10 -7


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>demo · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -53,7 +57,6 @@
53	57		<span class="search-label">Go to…</span>
54	58		<kbd aria-hidden="true">ctrl k</kbd>
55	59		</button>
56		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
57	60		</div>
58	61		</div>
59	62		<nav class="tabs" aria-label="Sections">

@@ -219,8 +222,8 @@
219	222		<footer class="foot">
220	223		<span>ermite devel</span>
221	224		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
222		-	<span class="foot-keys">
223		-	<kbd>?</kbd> keyboard shortcuts</span>
	225	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	226	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
224	227		</footer>
225	228		<div class="hint" role="status" aria-live="polite">
226	229		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

@@ -229,8 +232,8 @@
229	232		</span>
230	233		<span class="hint-flash" :text="document.body.dataset.flash \|\| ''">
231	234		</span>
232		-	<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Ademo&view=summary" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> data.state = 'live';
233		-	htmx:sse:close, htmx:sse:error -> data.state = 'offline';
	235	+	<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Ademo&view=summary" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> ermiteLive.back();
	236	+	htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
234	237		htmx:sse:error -> ermiteLive.error(event.detail.status);
235	238		htmx:sse:before:connection -> ermiteLive.gate(event);
236	239		home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>demo · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">
 </span>
 <span class="hint-flash" :text="document.body.dataset.flash || ''">
 </span>
-<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Ademo&amp;view=summary" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> data.state = 'live';
+<span class="hint-live" data-state="connecting" hx-sse:connect="/-/events?topic=repo%3Ademo&amp;view=summary" hx-swap="none" :text="data.state === 'offline' ? 'live updates paused' : ''" hx-on="htmx:sse:after:connection -> ermiteLive.back();
-           htmx:sse:close, htmx:sse:error -> data.state = 'offline';
+           htmx:sse:close, htmx:sse:error -> ermiteLive.lost();
            htmx:sse:error -> ermiteLive.error(event.detail.status);
            htmx:sse:before:connection -> ermiteLive.gate(event);
            home-list, repo-last-push, refs-list, commits-head, mr-notice, ci-run, ci-job -> ermiteLive.swap(event.detail.data);

M internal/app/testdata/web/tree-nested.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>src/lib · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -65,7 +69,6 @@
65	69		<span class="search-label">Go to…</span>
66	70		<kbd aria-hidden="true">ctrl k</kbd>
67	71		</button>
68		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
69	72		</div>
70	73		</div>
71	74		<nav class="tabs" aria-label="Sections">

@@ -149,8 +152,8 @@
149	152		<footer class="foot">
150	153		<span>ermite devel</span>
151	154		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
152		-	<span class="foot-keys">
153		-	<kbd>?</kbd> keyboard shortcuts</span>
	155	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	156	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
154	157		</footer>
155	158		<div class="hint" role="status" aria-live="polite">
156	159		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>src/lib · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/tree-root.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>tree · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -59,7 +63,6 @@
59	63		<span class="search-label">Go to…</span>
60	64		<kbd aria-hidden="true">ctrl k</kbd>
61	65		</button>
62		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
63	66		</div>
64	67		</div>
65	68		<nav class="tabs" aria-label="Sections">

@@ -376,8 +379,8 @@
376	379		<footer class="foot">
377	380		<span>ermite devel</span>
378	381		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
379		-	<span class="foot-keys">
380		-	<kbd>?</kbd> keyboard shortcuts</span>
	382	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	383	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
381	384		</footer>
382	385		<div class="hint" role="status" aria-live="polite">
383	386		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>tree · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/tree-slash-ref.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>x · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -146,8 +149,8 @@
146	149		<footer class="foot">
147	150		<span>ermite devel</span>
148	151		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
149		-	<span class="foot-keys">
150		-	<kbd>?</kbd> keyboard shortcuts</span>
	152	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	153	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
151	154		</footer>
152	155		<div class="hint" role="status" aria-live="polite">
153	156		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>x · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">

M internal/app/testdata/web/tree-subdir.html +8 -5


@@ -5,7 +5,12 @@
5	5		<meta name="viewport" content="width=device-width, initial-scale=1">
6	6		<meta name="color-scheme" content="light dark">
7	7		<title>docs · files · example.test</title>
	8	+	<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
	9	+	<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
	10	+	<meta name="apple-mobile-web-app-title" content="ermite">
8	11		<link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
	12	+	<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
	13	+	<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
9	14		<link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
10	15		<link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
11	16		<meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>

@@ -28,10 +33,9 @@
28	33		<a class="skip" href="#main">skip to content</a>
29	34		<header class="hdr">
30	35		<div class="hdr-top">
31		-	<a class="brand" href="/" data-g="h" title="home (g h)">
	36	+	<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
32	37		<span class="brand-mark" aria-hidden="true">
33	38		</span>
34		-	<span class="brand-name">example.test</span>
35	39		</a>
36	40		<nav class="crumbs" aria-label="Path">
37	41		<ol>

@@ -62,7 +66,6 @@
62	66		<span class="search-label">Go to…</span>
63	67		<kbd aria-hidden="true">ctrl k</kbd>
64	68		</button>
65		-	<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
66	69		</div>
67	70		</div>
68	71		<nav class="tabs" aria-label="Sections">

@@ -171,8 +174,8 @@
171	174		<footer class="foot">
172	175		<span>ermite devel</span>
173	176		<a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
174		-	<span class="foot-keys">
175		-	<kbd>?</kbd> keyboard shortcuts</span>
	177	+	<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
	178	+	<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
176	179		</footer>
177	180		<div class="hint" role="status" aria-live="polite">
178	181		<span class="hint-nav" :text="document.body.dataset.nav \|\| ''">

 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
 <title>docs · files · example.test</title>
+<meta name="theme-color" media="(prefers-color-scheme: light)" content="#ffffff">
+<meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0c0c0c">
+<meta name="apple-mobile-web-app-title" content="ermite">
 <link rel="icon" type="image/svg+xml" href="/-/static/img/icon.HASH.svg">
+<link rel="apple-touch-icon" href="/-/static/app/apple-touch-icon.HASH.png">
+<link rel="manifest" href="/-/static/app/manifest.HASH.webmanifest">
 <link rel="preload" href="/-/static/fonts/atkinson-next.HASH.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/-/static/css/ermite.HASH.css">
 <meta name="htmx-config" content='{"history":false,"includeIndicatorCSS":false,"extensions":"sse, hx-live"}'>
 <a class="skip" href="#main">skip to content</a>
 <header class="hdr">
 <div class="hdr-top">
-<a class="brand" href="/" data-g="h" title="home (g h)">
+<a class="brand" href="/" data-g="h" aria-label="home" title="home (g h)">
 <span class="brand-mark" aria-hidden="true">
 </span>
-<span class="brand-name">example.test</span>
 </a>
 <nav class="crumbs" aria-label="Path">
 <ol>
 <span class="search-label">Go to…</span>
 <kbd aria-hidden="true">ctrl k</kbd>
 </button>
-<button type="button" class="btn icon" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?" aria-label="Keyboard shortcuts" title="keyboard shortcuts (?)">?</button>
 </div>
 </div>
 <nav class="tabs" aria-label="Sections">
 <footer class="foot">
 <span>ermite devel</span>
 <a href="http://example.test/ermite" rel="noopener" title="source of this version (AGPL-3.0-or-later)">source</a>
-<span class="foot-keys">
+<button type="button" class="foot-keys" data-js data-fire="help" aria-haspopup="dialog" aria-controls="panel-help" aria-keyshortcuts="?">
-<kbd>?</kbd> keyboard shortcuts</span>
+<kbd aria-hidden="true">?</kbd> keyboard shortcuts</button>
 </footer>
 <div class="hint" role="status" aria-live="polite">
 <span class="hint-nav" :text="document.body.dataset.nav || ''">