Merge pull request #2601 from PR0M3TH3AN/unstable

Unstable

.agents/MEMORY.md

@@ -1,33 +0,0 @@
-# Repo Memory
-
-Curated, reviewed knowledge for coding agents working in this repository.
-Memory is an accelerator, not a second source of truth.
-
-## Precedence (highest first)
-
-1. Source code and tests
-2. Executable configuration
-3. Accepted design records / docs
-4. `AGENTS.md`
-5. This memory
-
-If memory conflicts with anything above it, the memory is stale — propose a fix.
-
-## Topics
-
-- `memory/architecture.md` — durable architectural decisions and constraints
-- `memory/conventions.md` — validated conventions not obvious from the code
-- `memory/lessons.md` — hard-won lessons and recurring landmines
-- `memory/decisions.jsonl` — structured decision records (one JSON object per line)
-
-## Write policy
-
-Agents MAY read everything here and MAY add candidates under `proposals/`
-(one file per proposal, named `YYYY-MM-DD-<slug>.md`, with evidence links).
-Agents MUST NOT edit `memory/` directly; trusted memory changes only through
-reviewed commits that promote a proposal.
-
-## Prohibited content
-
-Credentials or secrets, personal data, raw transcripts or tool logs, session
-TODOs, high-frequency agent state, unverified external claims.

.agents/memory/architecture.md

@@ -1,17 +0,0 @@
-# Architecture
-
-Durable architectural decisions and constraints for bitvid.
-
-## AGENTS.md is a thin constitution; long-form standards live in docs/
-
-On 2026-08-12 AGENTS.md was split into a thin agent constitution plus
-reference docs under `docs/testing/` and `docs/lessons/`, because the file had
-outgrown the 32 KiB harness context budget. AGENTS.md keeps only the invariant
-and a pointer per topic; new long-form material belongs in `docs/`, not in
-AGENTS.md.
-
-Authoritative source:
-- docs/testing/test-integrity.md
-- docs/testing/agent-playwright-harness.md
-- docs/lessons/
-- git commit 911afb1c ("Split AGENTS.md reference sections into docs/; keep thin agent constitution")

.agents/memory/conventions.md

@@ -1,5 +0,0 @@
-# Conventions
-
-Validated conventions not obvious from the code.
-
-No entries yet.

.agents/memory/decisions.jsonl

@@ -1 +0,0 @@
-{"kind":"decision","subject":"docs/agents-md-split","summary":"AGENTS.md was split on 2026-08-12 into a thin agent constitution plus reference docs under docs/testing/ and docs/lessons/ to stay within the 32 KiB harness context budget; AGENTS.md keeps only invariants and pointers, and new long-form material belongs in docs/.","status":"active","evidence":[{"type":"repository","ref":"docs/testing/test-integrity.md"},{"type":"repository","ref":"docs/testing/agent-playwright-harness.md"},{"type":"repository","ref":"docs/lessons/"},{"type":"git","ref":"911afb1c"}],"created":"2026-08-12","supersedes":[]}

.agents/memory/lessons.md

@@ -1,24 +0,0 @@
-# Lessons
-
-Hard-won lessons and recurring landmines.
-
-## Cloudflare/S3 upload-path gotchas
-
-`js/services/r2Service.js` and `js/services/s3UploadService.js` are near-identical
-copies that must be changed in lockstep, and storage keys must stay
-content-addressed (`computeStorageContentHash`) or URL-first uploads silently
-overwrite objects. Full audited writeup in the doc below.
-
-Authoritative source:
-- docs/lessons/cloudflare-s3-upload-gotchas.md
-
-## NIP-07 signer reliability
-
-"DMs / lists / watch-history won't load after login" is almost always an
-unresponsive NIP-07 signer extension, not bitvid — diagnose with a raw
-`window.nostr` probe first, and never regress the five resilience invariants
-(capped relay fan-out, NIP-07 circuit breaker, re-thrown transient decrypt
-errors, generous decrypt budgets, lazy modal population).
-
-Authoritative source:
-- docs/lessons/nip07-signer-reliability.md

.agents/plans/README.md

@@ -1,8 +0,0 @@
-# Agent plans
-
-Durable, multi-session execution plans only — the canonical backlog stays in
-the repo's TODO file or GitHub Issues, and session-local checklists are never
-committed. One plan per task, named `<ticket-or-slug>.md`, in `active/`;
-move finished plans to `archive/`. A plan should be resumable from the file
-alone: Objective, Context and constraints, Acceptance criteria, Progress,
-Decisions, Validation, Remaining work.

.agents/proposals/README.md

@@ -1,7 +0,0 @@
-# Memory proposals
-
-Agents: drop candidate memories here, one file per proposal, named
-`YYYY-MM-DD-<slug>.md`. State the claim, the evidence (file paths, commits,
-test results), and why it is durable. A human reviews and either promotes it
-into `../memory/` in a reviewed commit or deletes it. Nothing in this
-directory is trusted context.

.agents/schemas/memory.schema.json

@@ -1,29 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "title": "Repo Memory Decision Record",
-  "type": "object",
-  "additionalProperties": false,
-  "required": ["kind", "subject", "summary", "status", "evidence", "created"],
-  "properties": {
-    "kind": {"enum": ["decision", "constraint", "lesson", "observation", "workaround"]},
-    "subject": {"type": "string", "minLength": 1},
-    "summary": {"type": "string", "minLength": 1, "maxLength": 4096},
-    "status": {"enum": ["proposed", "active", "superseded", "expired"]},
-    "evidence": {
-      "type": "array",
-      "minItems": 1,
-      "items": {
-        "type": "object",
-        "additionalProperties": false,
-        "required": ["type", "ref"],
-        "properties": {
-          "type": {"enum": ["repository", "git", "issue", "test", "external"]},
-          "ref": {"type": "string", "minLength": 1}
-        }
-      }
-    },
-    "created": {"type": "string"},
-    "expires": {"type": ["string", "null"]},
-    "supersedes": {"type": "array", "items": {"type": "string"}}
-  }
-}

.agents/skills/agent-fleet/SKILL.md

@@ -1,12 +0,0 @@
----
-name: agent-fleet
-description: Use fleet-mcp tools for backlog, mailbox, landing queue, and area ownership. Do not use it to start sessions or push main.
----
-
-Follow the fleet rules in `AGENTS.md`. Call the `agent-fleet` MCP tools for backlog, mailbox, landing-queue, area questions, and commits. Editing those files directly is also fine. Sandboxed Codex cannot write Git's index: use the `commit` tool (or `fleet commit -m "..." --area <id> -- <paths>`), not `git commit`. `submit: true` queues the landing and starts a drain. Go back to work. At your next natural checkpoint, `land_status` (or `fleet landq status <id>`) can report that submission. Waiting is optional. Do not infer the lander or the land result from silence. Other providers may use either commit path.
-
-If you installed this fleet, you stay on as the interpreter. Read `docs/agents/prompts/interpreter.md`. Run `fleet up` yourself. Talk to the session manager with `tell` and read replies with `hear`. Do not scrape the tmux pane, and do not send the user to a terminal. A routine yes you relay counts. Money, pushes, deploys, deletes, secrets, outgoing messages, and a bigger structural or directional change go to the user. Uncommitted setup files use `setup_commit`, not `git commit`. Workers do not start the fleet. `fleet crontab` stays unused unless the user asks.
-
-You may use this harness's own subagents for parallel research, investigation, test runs, or review. You coordinate edits in a worktree so subagents do not edit the same files at the same time. Landing still goes through your `commit` and the queue.
-
-To update the kit: `git pull` in `~/agent-fleet-kit`, reinstall, run `fleet update`, and restart agents after handoff if it says so. Do not re-run init to upgrade.

.github/CODEOWNERS

@@ -1,6 +0,0 @@
-# Agent instruction and memory surfaces require maintainer review
-/AGENTS.md @PR0M3TH3AN
-/CLAUDE.md @PR0M3TH3AN
-/.agents/ @PR0M3TH3AN
-/SECURITY.md @PR0M3TH3AN
-/.github/workflows/agent-governance.yml @PR0M3TH3AN

.github/workflows/agent-governance.yml

@@ -1,65 +0,0 @@
-name: Agent governance
-
-on:
-  push:
-    paths:
-      - "AGENTS.md"
-      - "CLAUDE.md"
-      - ".agents/**"
-  pull_request:
-    paths:
-      - "AGENTS.md"
-      - "CLAUDE.md"
-      - ".agents/**"
-
-jobs:
-  lint-agent-artifacts:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Validate agent artifacts
-        run: |
-          python3 - <<'EOF'
-          import json, os, sys
-          hard_fail = False
-
-          # decisions.jsonl: every line must be valid JSON with required keys
-          path = ".agents/memory/decisions.jsonl"
-          if os.path.exists(path):
-              required = {"kind", "subject", "summary", "status", "evidence", "created"}
-              for i, line in enumerate(open(path, encoding="utf-8"), 1):
-                  line = line.strip()
-                  if not line:
-                      continue
-                  try:
-                      rec = json.loads(line)
-                  except json.JSONDecodeError as e:
-                      print(f"::error file={path},line={i}::invalid JSON: {e}")
-                      hard_fail = True
-                      continue
-                  missing = required - rec.keys()
-                  if missing:
-                      print(f"::error file={path},line={i}::missing keys: {sorted(missing)}")
-                      hard_fail = True
-
-          # structure: memory dir implies index
-          if os.path.isdir(".agents") and not os.path.exists(".agents/MEMORY.md"):
-              print("::error::.agents/ exists but .agents/MEMORY.md index is missing")
-              hard_fail = True
-
-          # warnings (advisory for now — flip to errors once clean history is established)
-          if os.path.exists("AGENTS.md"):
-              size = os.path.getsize("AGENTS.md")
-              if size > 32768:
-                  print(f"::warning file=AGENTS.md::{size} bytes exceeds the 32 KiB context budget")
-          if os.path.exists("CLAUDE.md"):
-              lines = sum(1 for _ in open("CLAUDE.md", encoding="utf-8"))
-              if lines > 40:
-                  print(f"::warning file=CLAUDE.md::{lines} lines — expected a thin wrapper over AGENTS.md")
-          for f in ("architecture.md", "conventions.md", "lessons.md"):
-              p = f".agents/memory/{f}"
-              if os.path.exists(p) and os.path.getsize(p) > 25 * 1024:
-                  print(f"::warning file={p}::exceeds 25 KB — curate or split")
-
-          sys.exit(1 if hard_fail else 0)
-          EOF

.github/workflows/agent-pr-review.yml

@@ -17,14 +17,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           fetch-depth: 0
 
       - name: Set up Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v4
         with:
           node-version: 22
           cache: 'npm'

.github/workflows/ci.yml

@@ -21,12 +21,12 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: Set up Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -83,60 +83,12 @@ jobs:
 
       - name: Upload dist hash artifact
         if: github.event_name == 'push' && github.ref == 'refs/heads/unstable'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v4
         with:
           name: dist-hashes-current
           path: artifacts/dist-hashes-current.json
           if-no-files-found: error
 
-
-  # Visual regression runs as its own job so an environment-sensitive pixel diff
-  # (CI Chromium/font rendering can differ from the committed baseline) reports a
-  # failure WITHOUT blocking the build job — and therefore without blocking the
-  # deploy-cache-state CDN purge below. Real build/lint failures still gate the
-  # deploy via the build job.
-  visual-regression:
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-    strategy:
-      matrix:
-        node-version: [22]
-
-    steps:
-      - name: Check out repository
-        uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-
-      - name: Set up Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v5
-        with:
-          node-version: ${{ matrix.node-version }}
-
-      - name: Cache npm directory
-        uses: actions/cache@v4
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-${{ matrix.node-version }}-npm-${{ hashFiles('package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-${{ matrix.node-version }}-npm-
-
-      - name: Cache node_modules
-        id: node-modules-cache
-        uses: actions/cache@v4
-        with:
-          path: node_modules
-          key: ${{ runner.os }}-node-${{ matrix.node-version }}-modules-${{ hashFiles('package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-${{ matrix.node-version }}-modules-
-
-      - name: Install dependencies
-        if: steps.node-modules-cache.outputs.cache-hit != 'true'
-        run: npm ci
-
-      - name: Install Playwright browsers
-        run: npx playwright install --with-deps chromium
-
       - name: Run visual regression tests
         id: visual
         run: npm run test:visual
@@ -144,7 +96,7 @@ jobs:
 
       - name: Upload Playwright artifacts
         if: steps.visual.outcome == 'failure'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v4
         with:
           name: playwright-visual-diffs
           path: |
@@ -168,10 +120,10 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
 
       - name: Download dist hash artifact
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v4
         with:
           name: dist-hashes-current
           path: artifacts
@@ -310,8 +262,8 @@ jobs:
           CLOUDFLARE_PURGE_BASE_URL: ${{ secrets.CLOUDFLARE_PURGE_BASE_URL }}
         run: |
           if [ -z "$CLOUDFLARE_PURGE_BASE_URL" ]; then
-            echo "CLOUDFLARE_PURGE_BASE_URL is not configured; skipping deployed index.html verification."
-            exit 0
+            echo "CLOUDFLARE_PURGE_BASE_URL is required to verify deployed index.html"
+            exit 1
           fi
 
           DEPLOY_INDEX_URL="${CLOUDFLARE_PURGE_BASE_URL%/}/index.html" npm run verify:deployed:index-html
@@ -327,10 +279,10 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
 
       - name: Set up Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -369,10 +321,10 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
 
       - name: Set up Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -400,54 +352,6 @@ jobs:
       - name: Run DM unit tests
         run: npm run test:dm:unit
 
-  e2e-tests:
-    runs-on: ubuntu-latest
-    timeout-minutes: 35
-    strategy:
-      fail-fast: false
-      matrix:
-        node-version: [22]
-        project: [e2e, e2e-firefox]
-
-    steps:
-      - name: Check out repository
-        uses: actions/checkout@v5
-
-      - name: Set up Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v5
-        with:
-          node-version: ${{ matrix.node-version }}
-
-      - name: Cache npm directory
-        uses: actions/cache@v4
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-${{ matrix.node-version }}-npm-${{ hashFiles('package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-${{ matrix.node-version }}-npm-
-
-      - name: Cache node_modules
-        id: node-modules-cache
-        uses: actions/cache@v4
-        with:
-          path: node_modules
-          key: ${{ runner.os }}-node-${{ matrix.node-version }}-modules-${{ hashFiles('package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-${{ matrix.node-version }}-modules-
-
-      - name: Install dependencies
-        if: steps.node-modules-cache.outputs.cache-hit != 'true'
-        run: npm ci
-
-      - name: Build app
-        run: npm run build
-
-      - name: Install Playwright browsers
-        run: npx playwright install --with-deps chromium firefox
-
-      - name: Run deterministic E2E suite (${{ matrix.project }})
-        run: npx playwright test tests/e2e --project=${{ matrix.project }}
-
   dm-integration-tests:
     runs-on: ubuntu-latest
     timeout-minutes: 30
@@ -457,10 +361,10 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
 
       - name: Set up Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -497,10 +401,10 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
 
       - name: Set up Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -526,7 +430,7 @@ jobs:
         run: npm ci
 
       - name: Install Playwright browsers
-        run: npx playwright install --with-deps chromium firefox
+        run: npx playwright install --with-deps chromium
 
       - name: Run headless E2E tests
         run: npm run test:e2e

.github/workflows/daily-design-system-audit.yml

@@ -1,6 +1,8 @@
 name: Daily Design System Audit
 
 on:
+  schedule:
+    - cron: '0 9 * * *' # Run daily at 09:00 UTC
   workflow_dispatch:
 
 permissions:
@@ -14,12 +16,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout unstable branch
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
         with:
           ref: unstable
 
       - name: Setup Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v4
         with:
           node-version: '22'
           cache: 'npm'

.github/workflows/nsite-archive.yml

@@ -1,97 +0,0 @@
-# Build a fresh, downloadable site archive on every push (any branch), so a
-# ready-to-upload copy of the compiled app is always available for a MANUAL nsite
-# publish (NIP-5A). This does NOT publish to nsite or touch any Nostr signing key —
-# it just builds `dist/`.
-#   - every branch: upload it as a 30-day workflow artifact.
-#   - main only:     also cut an immutable GitHub Release with the .zip attached,
-#                    giving a stable download URL:
-#                    https://github.com/PR0M3TH3AN/bitvid/releases/latest/download/bitvid-site.zip
-# The Release contains only the public compiled app (same as Vercel serves) — no
-# secret. See docs/nsite-mirror-plan.md.
-name: Build site archive
-
-on:
-  push:
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-# One archive build in flight per branch; a newer push supersedes an older one.
-concurrency:
-  group: nsite-archive-${{ github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  archive:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-
-      - uses: actions/setup-node@v5
-        with:
-          node-version: 22
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build static site
-        run: npm run build
-
-      - name: Short SHA
-        id: vars
-        run: echo "sha=${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT"
-
-      # `path: dist` stores the site files at the artifact root (index.html at top),
-      # so the downloaded .zip extracts straight to the nsite site directory.
-      - name: Upload site archive
-        uses: actions/upload-artifact@v7
-        with:
-          name: bitvid-site-${{ github.ref_name }}-${{ steps.vars.outputs.sha }}
-          path: dist
-          if-no-files-found: error
-          retention-days: 30
-
-  # Production only: publish an immutable GitHub Release with the .zip attached, so
-  # the latest prod archive is always at a stable URL:
-  #   https://github.com/PR0M3TH3AN/bitvid/releases/latest/download/bitvid-site.zip
-  # This is purely a download convenience + per-release snapshot — it does NOT
-  # publish to nsite and holds no Nostr signing key (that step stays manual).
-  release:
-    if: github.ref == 'refs/heads/main'
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-    steps:
-      - uses: actions/checkout@v5
-
-      - uses: actions/setup-node@v5
-        with:
-          node-version: 22
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci
-
-      # `npm run archive` builds dist/ and writes bitvid-site.zip (index.html at root).
-      - name: Build site archive
-        run: npm run archive
-
-      - name: Publish site release
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          tag="site-$(date -u +%Y%m%d)-${GITHUB_SHA::7}"
-          notes="Compiled bitvid static app (\`dist/\`) at ${GITHUB_SHA}.
-          Stable latest link: https://github.com/${GITHUB_REPOSITORY}/releases/latest/download/bitvid-site.zip"
-          # Re-runs of the same commit reuse the tag: refresh the asset instead of failing.
-          if gh release view "$tag" >/dev/null 2>&1; then
-            gh release upload "$tag" bitvid-site.zip --clobber
-            gh release edit "$tag" --latest
-          else
-            gh release create "$tag" bitvid-site.zip \
-              --title "Site archive $tag" \
-              --notes "$notes" \
-              --latest
-          fi

.github/workflows/update-visual-baselines.yml

@@ -1,95 +0,0 @@
-# Regenerate the visual-regression baselines IN the environment that compares
-# them.
-#
-# The baselines in tests/visual/baselines.json are pixel-compared on
-# ubuntu-latest CI, but they were historically captured on a developer machine.
-# Chromium builds and font fallbacks differ between the two ("Inter"/"Fira
-# Code" are not shipped or installed anywhere, so every environment renders its
-# own system fallback), so the kitchen-sink diff drifted past MAX_DIFF_RATIO on
-# CI while passing locally — ci.yml even documents the mismatch as the reason
-# visual-regression must not block deploys. Capturing the baselines on the same
-# runner image, browser install and font stack as the comparison removes the
-# environment variable from the equation entirely.
-#
-# Two explicit triggers, both requiring deliberate human intent — regenerating
-# baselines must never be a side effect of ordinary work:
-#
-#   1. workflow_dispatch — only usable once this file reaches the default
-#      branch (GitHub does not index dispatchable workflows on other branches).
-#   2. A push whose head commit message contains [update-visual-baselines] —
-#      works from unstable today, before any promotion. The workflow's own
-#      commit omits the token, so it cannot retrigger itself.
-name: Update visual baselines
-
-on:
-  workflow_dispatch:
-  push:
-    branches: [unstable]
-
-permissions:
-  contents: write
-
-jobs:
-  update-baselines:
-    if: >-
-      github.event_name == 'workflow_dispatch' ||
-      contains(github.event.head_commit.message, '[update-visual-baselines]')
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-
-    steps:
-      - name: Check out repository
-        uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-
-      - name: Set up Node.js 22
-        uses: actions/setup-node@v5
-        with:
-          node-version: 22
-
-      # Mirror the visual-regression job's caches so the regenerated baselines
-      # come from the same dependency tree the comparison job will use.
-      - name: Cache npm directory
-        uses: actions/cache@v4
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-22-npm-${{ hashFiles('package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-22-npm-
-
-      - name: Cache node_modules
-        id: node-modules-cache
-        uses: actions/cache@v4
-        with:
-          path: node_modules
-          key: ${{ runner.os }}-node-22-modules-${{ hashFiles('package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-22-modules-
-
-      - name: Install dependencies
-        if: steps.node-modules-cache.outputs.cache-hit != 'true'
-        run: npm ci
-
-      - name: Install Playwright browsers
-        run: npx playwright install --with-deps chromium
-
-      - name: Regenerate baselines
-        run: npm run test:visual:update
-
-      - name: Verify the fresh baselines pass in this environment
-        run: npx playwright test --project=visual
-
-      - name: Commit updated baselines
-        run: |
-          if git diff --quiet -- tests/visual/baselines.json; then
-            echo "Baselines unchanged; nothing to commit."
-            exit 0
-          fi
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git add tests/visual/baselines.json
-          git commit \
-            -m "test(visual): regenerate baselines on ubuntu-latest" \
-            -m "Captured by the update-visual-baselines workflow so the baseline environment matches the visual-regression job that compares against them."
-          git push

.gitignore

@@ -13,24 +13,3 @@ ai/reports/
 coverage/
 dist/
 TEST_LOG.mdtest_logs/nip-hits.txt
-!artifacts/audit/
-!artifacts/audit/*.md
-!artifacts/audit/*.json
-
-# Vercel CLI local link/state
-.vercel
-
-# Local site archive for manual nsite upload (npm run archive)
-bitvid-site.zip
-.env*
-
-# Agent runtime state (local only)
-memory-update.md
-memory-update.json
-
-# Agent-local memory state (never committed)
-.agents/private/
-.agents/state/
-fleet/inbox/
-.task
-.fleet/

AFTER.md

@@ -1,23 +0,0 @@
-# After Benchmark for Moderation Stage Batching
-
-## Command
-`node benchmarks/moderation_batch_bench.js`
-
-## Environment
-- Node.js v22.22.0
-- 5000 items
-- 500 authors
-- 100 muters per author
-- Forced prune check (lastPrunedAt = 0)
-
-## Results
-- Run 1: 184.34ms
-- Run 2: 277.68ms
-- Run 3: 188.89ms
-- Run 4: 256.48ms
-- **Average: ~227ms**
-
-## Comparison
-- Baseline: ~454ms
-- After: ~227ms
-- **Improvement: ~50% faster**

AGENTS.md

@@ -63,11 +63,6 @@ For any nostr related work, please review the nip documentation located in /docs
 5. **Telemetry hooks:** Keep existing analytics/logging untouched unless instructed. If you add new modal states, annotate them clearly in code comments.
 6. **Modal regressions:** If validation or helper wiring breaks in Main, disable new feature flags and ship a revert PR immediately. Note the rollback steps in AGENTS.md for posterity.
 
-### 4a. Cloudflare/S3 upload-path gotchas (audited 2026-06-16)
-
-**Invariants:** `js/services/r2Service.js` and `js/services/s3UploadService.js` are near-identical copies — any fix to one must be mirrored in the other; storage keys must stay content-addressed (reuse `computeStorageContentHash` in `js/r2.js` for any new upload path); `R2Service.deleteVideoStorage()` stays best-effort, never throws, and only touches URLs under the owner's bucket base.
-Full writeup: [`docs/lessons/cloudflare-s3-upload-gotchas.md`](docs/lessons/cloudflare-s3-upload-gotchas.md).
-
 ---
 
 ## 5. Manual QA Checklist
@@ -249,14 +244,37 @@ When you create a PR or start work, leave a clear signal:
 - **PR title prefix**: Use a descriptive prefix like `[nostr-core]`, `[playback]`, `[ui]`, `[ci]` so the scope is visible at a glance.
 - **PR description**: Include a "Files Modified" section listing the key files touched, so other agents can quickly detect conflicts.
 
-### Task Coordination
+### Task Claiming Protocol (TORCH)
 
-> The previous TORCH relay-locking protocol (and its `torch/` tooling) has been
-> removed. Coordinate via GitHub instead: before starting, check open PRs
-> (`gh pr list` or the GitHub API) for overlap on the same subsystem, and use a
-> descriptive PR title prefix so scope is visible. Don't run two agents on the
-> same subsystem simultaneously, and keep `js/app.js` single-writer (see the
-> Multi-Agent Coordination rules above).
+Task coordination uses **TORCH** (Task Orchestration via Relay-Coordinated Handoff) — a decentralized locking protocol built on Nostr. Agents publish ephemeral lock events to public relays; locks auto-expire via NIP-40. No tokens, no secrets, no git push required. Works across all platforms (Claude Code, Codex, Jules). See `docs/agents/TORCH.md` for the full protocol documentation.
+
+**Before starting any task:**
+
+1. **Check for existing claims:**
+   ```bash
+   node scripts/agent/nostr-lock.mjs check --cadence <daily|weekly>
+   ```
+   Returns JSON with `locked` (claimed agents) and `available` (free agents) arrays. If an agent appears in the `locked` list, **skip it**.
+
+2. **Claim the task:**
+   ```bash
+   AGENT_PLATFORM=<jules|claude-code|codex> \
+   node scripts/agent/nostr-lock.mjs lock \
+     --agent <agent-name> \
+     --cadence <daily|weekly>
+   ```
+   The script generates an ephemeral keypair, publishes a lock event to public Nostr relays, and performs a built-in race check. The key is used once and discarded. Locks auto-expire after 2 hours (configurable via `NOSTR_LOCK_TTL`).
+
+   - **Exit 0** = lock acquired, begin work.
+   - **Exit 3** = race lost, another agent claimed first. Go back to step 1.
+   - **Exit 2** = relay error. Write a `_failed.md` log and stop.
+
+3. **View all active locks** (optional, for debugging):
+   ```bash
+   node scripts/agent/nostr-lock.mjs list
+   ```
+
+**Scheduler agents:** Daily and weekly scheduler agents must follow this protocol in addition to their directory-based rotation logic (`docs/agents/task-logs/daily/` and `docs/agents/task-logs/weekly/`). The lock check happens _after_ determining the next task but _before_ executing it. See the scheduler prompts for the specific implementation steps.
 
 ### Currently In-Flight Work
 
@@ -320,8 +338,108 @@ Three automated lint checks protect the codebase from common growth problems. Th
 
 ## 14. Playwright Agent Testing Infrastructure
 
-bitvid ships a test harness (`window.__bitvidTest__`, enabled via `?__test__=1`), a mock relay (`scripts/agent/simple-relay.mjs`), and a reusable Playwright fixture (`tests/e2e/helpers/bitvidTestFixture.ts`) so agents can programmatically log in, seed relay data, and inspect app state — no browser extensions or real relays required.
-Full reference (harness API, mock relay, fixtures, `data-testid` selectors): [`docs/testing/agent-playwright-harness.md`](docs/testing/agent-playwright-harness.md).
+bitvid includes a test harness and fixtures that let Playwright CLI agents programmatically log in, seed relay data, and inspect app state — no browser extensions or real relays required.
+
+### Activating Test Mode
+
+Add `?__test__=1` to the URL, or set `localStorage.__bitvidTestMode__ = "1"` via `addInitScript`. This installs `window.__bitvidTest__` on the page.
+
+### Overriding Relays
+
+Point the app at a local mock relay instead of production:
+
+```
+?__test__=1&__testRelays__=ws://127.0.0.1:8877
+```
+
+Or set `localStorage.__bitvidTestRelays__` to a JSON array of relay URLs.
+
+### Test Harness API (`window.__bitvidTest__`)
+
+| Method | Returns | Purpose |
+|--------|---------|---------|
+| `loginWithNsec(hexKey)` | `Promise<string>` (pubkey) | Programmatic login, bypasses the modal |
+| `logout()` | `void` | Clear active signer |
+| `getAppState()` | `{ isLoggedIn, activePubkey, relays, ... }` | Inspect current state |
+| `getFeedItems()` | `Array<{ title, pubkey, dTag, hasUrl, hasMagnet }>` | Scrape video cards from DOM |
+| `waitForFeedItems(n, ms)` | `Promise<Array>` | Wait for N cards to appear |
+| `waitForSelector(sel, ms)` | `Promise<true>` | Wait for a DOM element |
+| `getRelayHealth()` | `{ relays, unreachable, backoff }` | Relay connection status |
+| `applyRelayOverrides(urls)` | `boolean` | Redirect relay connections |
+| `nostrClient` | `NostrClient` | Direct access for advanced use |
+
+### Mock Relay (`scripts/agent/simple-relay.mjs`)
+
+Start with `startRelay(port, { httpPort })`. Alongside the Nostr WebSocket protocol, exposes an HTTP API:
+
+| Endpoint | Method | Purpose |
+|----------|--------|---------|
+| `/seed` | `POST` | Inject signed events (single object or array) |
+| `/events` | `GET` | List all stored events |
+| `/events` | `DELETE` | Clear all events |
+| `/health` | `GET` | Event count + connection count |
+
+Programmatic API: `relay.seedEvent(event)`, `relay.clearEvents()`, `relay.getEvents()`.
+
+### Playwright Fixture (`tests/e2e/helpers/bitvidTestFixture.ts`)
+
+Import `test` and `expect` from the fixture for tests that need the full stack:
+
+```typescript
+import { test, expect } from "./helpers/bitvidTestFixture";
+
+test("agent can seed and view videos", async ({ page, gotoApp, loginAs, seedEvent }) => {
+  await seedEvent({ title: "Test Video", url: "https://example.com/v.mp4" });
+  await gotoApp();
+  await loginAs(page);
+  // ... assertions
+});
+```
+
+**Available fixture values:**
+
+| Fixture | Type | Purpose |
+|---------|------|---------|
+| `relay` | Relay instance | Auto-started/stopped per test |
+| `seedEvent(video)` | `(TestVideoEvent) => Promise` | Create a signed kind 30078 event and inject it |
+| `seedRawEvent(event)` | `(any) => Promise` | Inject a pre-built event |
+| `clearRelay()` | `() => Promise` | Wipe all relay events |
+| `gotoApp(path?)` | `(string?) => Promise` | Navigate with test mode + relay overrides |
+| `loginAs(page)` | `(Page) => Promise<string>` | Login with deterministic test key |
+| `testPubkey` | `string` | Hex pubkey of the test key |
+| `relayUrl` | `string` | WebSocket URL of the mock relay |
+
+### `data-testid` Selectors
+
+Use these for stable element targeting:
+
+| Selector | Element |
+|----------|---------|
+| `[data-testid="login-button"]` | Header login button |
+| `[data-testid="upload-button"]` | Header upload button (hidden until logged in) |
+| `[data-testid="profile-button"]` | Header profile button (hidden until logged in) |
+| `[data-testid="search-input"]` | Header search field |
+| `[data-testid="login-modal"]` | Login modal container |
+| `[data-testid="login-provider-button"]` | Login provider option buttons |
+| `[data-testid="nsec-secret-input"]` | Private key textarea in nsec login |
+| `[data-testid="nsec-submit"]` | Nsec login submit button |
+| `[data-testid="upload-modal"]` | Upload modal container |
+| `[data-testid="upload-title"]` | Video title input |
+| `[data-testid="upload-url"]` | Video URL input |
+| `[data-testid="upload-magnet"]` | Magnet link input |
+| `[data-testid="upload-submit"]` | Publish button |
+| `[data-testid="video-modal"]` | Video player modal |
+| `[data-testid="video-card"]` | Individual video card in the feed |
+| `[data-testid="video-list"]` | Video feed grid container |
+
+### Key Files
+
+| File | Purpose |
+|------|---------|
+| `js/testHarness.js` | Test harness module (installs `window.__bitvidTest__`) |
+| `scripts/agent/simple-relay.mjs` | Mock relay with HTTP seeding API |
+| `tests/e2e/helpers/bitvidTestFixture.ts` | Reusable Playwright fixture |
+| `tests/e2e/agent-testability.spec.ts` | Infrastructure validation tests |
 
 ---
 
@@ -428,39 +546,13 @@ When finishing a task or handing off, provide:
 
 ---
 
-## 16. Scenario-First Tests & Test Integrity (Dark Factory Standard)
-
-**Invariant:** validation replaces code review in this repo — never weaken, delete, or rewrite a test merely to make it pass, and never mask flakiness with retries/sleeps/looser assertions. Expectation changes are allowed only via the Spec Correction Protocol with an accompanying Test Integrity Note.
-Read the full standard before adding or modifying any test: `docs/testing/test-integrity.md`.
-
----
-
-## 17. NIP-07 Signer Reliability & Encrypted-List Loading (hard-won, 2026-06-16)
-
-**Invariant:** the #1 cause of "DMs / hashtags / watch-history / lists won't load after login" is an unresponsive NIP-07 signer, not bitvid — diagnose with a raw `window.nostr` probe first, and do not regress the five resilience invariants (capped relay fan-out, NIP-07 circuit breaker, re-thrown transient decrypt errors, generous decrypt budgets, lazy modal population).
-Full writeup: `docs/lessons/nip07-signer-reliability.md`. See also `docs/KNOWN_BUGS.md` #0.
-
----
-
-## Repo memory
-
-Curated agent memory lives in `.agents/` (index `.agents/MEMORY.md`); read it first. Propose additions in `.agents/proposals/`; `.agents/memory/` changes only via reviewed commits. Code/tests/config outrank memory.
-
----
-
 ## Next
 
-Read `docs/nostr-event-schemas.md` and `js/nostrEventSchemas.js` next; keep new nostr kinds centralized there and the doc up to date.
+Please read these documents next.
 
-# Agent fleet
+* `docs/nostr-event-schemas.md`
+* `js/nostrEventSchemas.js`
 
-This repo uses agent-fleet-kit. The `agent-fleet` MCP server (`fleet-mcp`) is a convenience. Editing backlog JSON and mailbox files directly is fine. Do not hand-edit the landing queue while a drain is merging, and do not push main.
+And if you need to create new nostr kinds please keep the logic centralized there in `nostrEventSchemas.js` and the `nostr-event-schemas.md` up to date.
 
-- `area_info` for the owner of a path.
-- `backlog_claim` with an item id marks it in-progress. Pick the item from PROGRAM.md. Without an id the tool does not choose one. Idle is a correct result.
-- `mailbox_read` at the start of a turn; `mailbox_send` to reach a peer. Mail is always delivered. The prompt says when to act.
-- `commit` to stage and commit in your area worktree. Codex `workspace-write` keeps `.git` read-only, so do not run `git commit` yourself. Pass `message` and the file paths (or `all: true`), and `cwd` or `area` when this server is not already in the worktree. `submit: true` also queues the tip. A doesNotOwn path warns and still commits. The same operation is `fleet commit -m "..." --area <id> [--submit] -- <paths>`.
-- `landq_submit` queues the committed tip and starts a drain. A dirty worktree warns; only HEAD is queued. Then go back to work. At your next natural checkpoint, `land_status` (or `fleet landq status <id>`) is a quick lookup, and its wait is optional. Never infer the lander or the land result from silence. States: queued, gating, landed with the main sha, rejected with the reason, or unknown. If no drain is alive, the answer says so and names `fleet lander start`.
-- A scarce machine is a prompt convention: say so in `.task` and wait if a peer has it. There is no slot lock.
-
-Sessions, worktrees, and cron are the `fleet` CLI. Submit starts the drain; do not run a second merge by hand.
+**End of AGENTS.md**

BASELINE.md

@@ -1,18 +0,0 @@
-# Baseline Benchmark for Moderation Stage Batching
-
-## Command
-`node benchmarks/moderation_batch_bench.js`
-
-## Environment
-- Node.js v22.22.0
-- 5000 items
-- 500 authors
-- 100 muters per author
-- Forced prune check (lastPrunedAt = 0)
-
-## Results
-- Run 1: 545.80ms
-- Run 2: 370.08ms
-- Run 3: 523.04ms
-- Run 4: 379.80ms
-- **Average: ~454ms**

CLAUDE.md

@@ -2,8 +2,6 @@
 
 This document provides context and guidance for AI assistants working with the bitvid codebase. It explains the project structure, development workflows, conventions, and key architectural decisions.
 
-**Canonical guidance:** `AGENTS.md` is the canonical agent guidance for this repo; `CLAUDE.md` holds Claude-oriented codebase orientation that layers on top of it.
-
 ---
 
 ## Project Overview
@@ -137,8 +135,6 @@ npm run test:visual
 | `npm run lint:tokens` | Design token enforcement |
 | `npm run lint:file-size` | Enforce file size limits |
 | `npm run lint:innerhtml` | Enforce innerHTML baseline |
-| `npm run audit` | Run design system audit |
-| `npm run build:beacon` | Build torrent beacon assets |
 | `npm run test:unit` | Full unit test suite |
 | `npm run test:unit:shard1` | Shard 1/3 (faster local dev) |
 | `npm run test:unit:shard2` | Shard 2/3 |
@@ -147,10 +143,7 @@ npm run test:visual
 | `npm run test:dm:unit` | Direct message unit tests |
 | `npm run test:dm:integration` | DM integration tests |
 | `npm run test:e2e` | Headless E2E tests |
-| `npm run test:load` | Run load tests |
 | `npm run test:visual` | Visual regression tests |
-| `npm run test:visual:update` | Update visual regression baselines |
-| `npm run telemetry:aggregate` | Aggregate telemetry logs |
 | `node scripts/agent/validate-events.mjs` | Validate Nostr event schemas |
 
 ---
@@ -312,24 +305,6 @@ const dTag = event.tags.find(t => t[0] === 'd')?.[1];
 // WRONG: Don't use logical IDs like videoRootId for relay lookups
 ```
 
-### NIP-07 Signer Reliability (hard-won)
-
-The #1 cause of "DMs / hashtags / watch-history / lists won't load after login" is an **unresponsive NIP-07 signer**, not bitvid. The extension's MV3 background worker can die and `window.nostr` calls then hang forever — no client change fixes a dead signer. **Diagnose with a raw `window.nostr` probe** (`getPublicKey → nip04.encrypt → nip04.decrypt`) in the console; if that hangs, it's the extension (recommend nos2x/Alby). See `docs/lessons/nip07-signer-reliability.md` (summarized in `AGENTS.md` §17) and `docs/KNOWN_BUGS.md` #0.
-
-Resilience invariants — **do not regress**:
-
-1. **Cap relay fan-out** (`js/nostr/toolkit.js` `capReadRelays`, ≤8, user-relays-first + 2 reserved defaults) — an uncapped cold-login REQ storm starves the single-threaded signer.
-2. **Circuit breaker** on consecutive NIP-07 timeouts (`js/nostr/nip07Permissions.js`) — fast-fail instead of hanging; channel-death counts toward opening; permission prompts bypass.
-3. **Never swallow a transient decrypt error as `[]`** — re-throw channel-death/timeout so retries run (returning empty = "user has no lists" + no retry).
-4. **Generous decrypt budget** (~25–30s/call) — a 6s timeout kills slow signers mid-decrypt.
-5. **Lazy modal population** — don't render every profile panel into a closed modal at login; populate per-pane on open (`selectPane`).
-
----
-
-## Testing & Validation: Scenario-First, Cheat-Resistant (Dark Factory Rules)
-
-The testing and validation invariant is stated in `AGENTS.md` §16 "Scenario-First Tests & Test Integrity (Dark Factory Standard)", and the full standard lives in [`docs/testing/test-integrity.md`](docs/testing/test-integrity.md). In short: validation replaces human code review here, tests are behavioral scenarios that assert externally observable outcomes at boundaries, and you must **never alter a test merely to make it pass** — expectation changes are allowed only via the Spec Correction Protocol with an accompanying Test Integrity Note. Read `docs/testing/test-integrity.md` in full before adding or modifying any test.
-
 ---
 
 ## Testing Guidelines
@@ -369,7 +344,7 @@ View with: `./scripts/show-artifacts.sh`
 
 ### Agent E2E Testing (Playwright)
 
-bitvid includes a test harness for programmatic Playwright testing without browser extensions or real relays. See `docs/testing/agent-playwright-harness.md` for the full reference (summarized in `AGENTS.md` §14). Quick start:
+bitvid includes a test harness for programmatic Playwright testing without browser extensions or real relays. See `AGENTS.md` Section 14 for the full reference. Quick start:
 
 ```typescript
 import { test, expect } from "./helpers/bitvidTestFixture";
@@ -388,7 +363,7 @@ Key capabilities:
 - **Mock relay**: Each test gets an isolated in-memory relay with HTTP seeding
 - **Relay override**: `?__test__=1&__testRelays__=ws://localhost:8877` redirects all connections
 - **State inspection**: `window.__bitvidTest__.getAppState()` returns login status, relays, etc.
-- **Stable selectors**: All key elements have `data-testid` attributes (see `docs/testing/agent-playwright-harness.md`)
+- **Stable selectors**: All key elements have `data-testid` attributes (see AGENTS.md Section 14)
 
 ---
 
@@ -513,6 +488,7 @@ When assigning work to agents:
 | `docs/playback-fallback.md` | URL-first strategy |
 | `docs/moderation/README.md` | Moderation system |
 | `docs/logging.md` | Logger usage |
+| `docs/agents/TORCH.md` | TORCH distributed task locking protocol |
 | `context/` / `todo/` / `decisions/` / `test_logs/` | Agent persistent state files (see AGENTS.md §15) |
 
 ---

CONTRIBUTING.md

@@ -242,12 +242,3 @@ If you find a vulnerability, please email **[[email protected]](mailto:sec
 ## Trademark
 
 The **bitvid** name and logos are trademarks (see `TRADEMARKS.md`). Don’t use them in ways that imply official sponsorship or confuse users. “Powered by bitvid” attribution is encouraged.
-
-## AI-assisted contributions
-
-AI-assisted changes are subject to the same testing, security, and review
-requirements as any other change; the contributor remains responsible for
-understanding what they submit. Do not submit unvalidated generated code,
-credentials, or agent-generated trusted memory without evidence and review.
-The canonical backlog and planning rules are in `AGENTS.md`; durable agent
-plans live under `.agents/plans/`.

KNOWN_ISSUES.md

@@ -1,52 +1,21 @@
 # Known Issues
 
-## Test Infrastructure
+## Tests
 
-### Missing `jsdom` Dependency
-- **Status:** Resolved (2026-07-30)
-- **Detected:** 2026-02-26
-- **Description:** Unit tests failed with `ERR_MODULE_NOT_FOUND` because `jsdom` was imported but not installed.
-- **Resolution:** `jsdom` has been a devDependency for some time (28.1.0 installed and in `package.json`); the jsdom-based suites run clean.
+### Skipped Tests
 
-## Run Notes (2026-03-04)
+The following tests are skipped due to flakiness or environmental issues and should be investigated:
 
-### Firefox E2E feed hydration flakes under full parallel load
-- **Status:** Active
-- **Description:** `test:e2e` can intermittently fail in Firefox with `[testHarness] Timed out waiting for <n> feed items (found 0)` in `waitForFeedItems`, while the same failing specs usually pass in isolated reruns.
-- **Impact:** Full-suite Firefox E2E runs are flaky even after local polling hardening.
-- **Observed failures:** `tests/e2e/video-crud-flows.spec.ts`, `tests/e2e/video-edit-delete-execution.spec.ts`, `tests/e2e/view-navigation.spec.ts`.
+_No skipped tests currently documented._ (Last checked: 2026-02-17)
 
-### Nostr tools signing/key API expectation in unit tests
-- **Status:** Addressed
-- **Description:** `tests/nostr-send-direct-message.test.mjs` must pass `Uint8Array` secret keys to `getPublicKey/finalizeEvent` for current `nostr-tools`.
-- **Impact:** Passing hex strings causes failures like `expected Uint8Array, got type=string`.
+### Visual Regression Tests (`test:visual`)
 
-## Run Notes (2026-06-20, updated 2026-07-30)
+- **Artifact Retention**: Visual tests are configured to retain screenshots, traces, and videos on failure to assist with debugging. These artifacts can be found in `artifacts/test-results/`.
+- **Note**: Visual tests are passing as of 2026-02-12. (Agent verified 2026-02-17: Tests fail if browsers are missing, consistent with Environment issue).
 
-### `login-flows.spec.ts:149` — upload/profile buttons stay visible after logout
-- **Status:** Active — NOT merely a parallel-load flake
-- **Description:** Previously filed as a worker-contention flake that "passes deterministically in isolation." On 2026-07-28 it failed **in isolation** as well (chromium, local and CI `e2e-headless`), while passing in the CI `e2e-tests (e2e)` job — environment-sensitive, not load-sensitive. Direct probes of the same flow (raw `__bitvidTest__.loginWithNsec` → `logout()` against a mock relay) hide the button correctly, so the failure is specific to something in the Playwright fixture path. An attempted fix (running `applyLoggedOutUiState()` before the awaited NWC/profile teardown in `_executeAuthLogout`) did not change the outcome and was reverted rather than shipped unverified.
-- **Impact:** One e2e failure in `e2e-headless`; logout hides gated UI correctly in manual testing and direct harness probes.
-- **Next step:** Investigate alongside pre-launch TODO #33 ("logout logs out everyone" / NIP-46 session persistence) — same subsystem.
+## Environment
 
-### `video-upload-publish-lifecycle.spec.ts:49` / `:79` flake under full parallel load
-- **Status:** Active
-- **Description:** Under the full `test:e2e` run these intermittently fail on feed-appearance timeouts but pass on retry (CI marks them flaky). Worker resource contention.
-- **Impact:** Full-suite e2e occasionally needs retries; isolated reruns are green.
+### Playwright Browsers
 
-### `webseed-playback.spec.ts:31` fails on Firefox headless (CDN mode)
-- **Status:** Resolved (2026-07-28, `f48150ed`)
-- **Description:** The test asserted the **final** `src` equals the CDN URL while simultaneously tolerating "No playable source found" in its status assertion — contradictory, because a failed hosted attempt calls `resetVideoElement()`, which clears `src`. Headless CI cannot decode the archive.org H.264 sample, so the cleared-src path was routine there.
-- **Resolution:** The test now records every `src` the player attaches via a MutationObserver and asserts the CDN URL was attached — the actual behavior under test. Green in both `e2e` and `e2e-firefox` CI jobs.
-
-### `uploadModal-reset.test.mjs` ("UploadModal Reset Logic") hangs/cancels
-- **Status:** Not reproducible (2026-07-30)
-- **Description:** Intermittent `cancelledByParent` / "Promise resolution is still pending" hang, order/timing dependent.
-- **Current state:** Passes cleanly (`pass=3 fail=0 cancelled=0`) in isolation and across repeated full-suite sweeps on 2026-07-28–30. Left on file because the original failure was ordering-dependent; if it recurs, capture the full-suite ordering that produced it.
-
-## Run Notes (2026-07-30)
-
-### Visual baselines are CI-canonical — local `test:visual` may fail the kitchen-sink diff
-- **Status:** By design (since `ab120a03`)
-- **Description:** `tests/visual/baselines.json` is regenerated on ubuntu-latest by the `update-visual-baselines` workflow (trigger: `workflow_dispatch` once promoted, or a commit containing `[update-visual-baselines]`). Baselines can only match one environment, and the CI gate is the one that matters — so a dev machine with different Chromium/font rendering may now fail `npm run test:visual` locally (typically the kitchen-sink default theme) even though CI is green.
-- **Workaround:** Run visual tests in the pinned container via `scripts/run-playwright-docker.sh`, or rely on CI. Never regenerate baselines from a dev machine.
+- **Issue**: Visual and E2E tests (`npm run test:visual`, `npm run test:e2e`) may fail with `browserType.launch: Executable doesn't exist`.
+- **Workaround**: Run `npx playwright install` to download the required browser binaries if you are running tests outside of the pre-configured dev container or CI environment. (Last checked: 2026-02-17)

NIP_INVENTORY.md

@@ -4,53 +4,34 @@
 |------------|-------------|----------------|--------|-------|
 | **NIP-01** | Basic Protocol Flow | `js/nostr/client.js`, `docs/nips/01.md` | Compliant | Base implementation verified via `client.js`. |
 | **NIP-04** | Encrypted Direct Message | `js/nostr/dmDecryptWorker.js`, `js/nostr/client.js` | Compliant | Verified by `tests/nostr-specs/nip04-nip44.test.mjs`. |
-| **NIP-07** | `window.nostr` Capability | `js/nostr/nip07Permissions.js`, `js/nostr/adapters/nip07Adapter.js` | Compliant | Verified in `tests/compliance/nip07_compliance.test.mjs`. |
-| **NIP-09** | Event Deletion | `js/nostr/client.js`, `js/nostrEventSchemas.js` | Compliant | `deleteAllVersions` calls `_hardDeleteVersions` which uses Kind 5. |
+| **NIP-07** | `window.nostr` Capability | `js/nostr/nip07Permissions.js`, `js/nostr/adapters/nip07Adapter.js` | Compliant | Retry logic and timeouts verified in `nip07_compliance.test.mjs`. |
+| **NIP-09** | Event Deletion | `js/nostr/client.js`, `docs/nips/09.md` | Partial | `deleteAllVersions` implements Kind 5 logic. |
 | **NIP-10** | Text Notes & Threads | `js/nostr/commentEvents.js`, `docs/nips/10.md` | Compliant | `buildCommentEvent` implements NIP-10 threading markers (E, P, K tags). |
 | **NIP-17** | Private Direct Messages | `js/nostr/client.js`, `js/ui/profileModal/ProfileDirectMessageRenderer.js` | Compliant | Explicit support for Gift Wraps (Kind 1059) and Seals (Kind 13). |
-| **NIP-18** | Reposts | `js/nostrEventSchemas.js` | Compliant | Implements Kind 6 and 16. |
 | **NIP-19** | bech32-encoded entities | `js/utils/nostrHelpers.js`, `js/nostr/nip71.js` | Compliant | Uses `nostr-tools` for correct encoding/decoding. |
-| **NIP-21** | `nostr:` URI scheme | `js/app/routerCoordinator.js`, `js/utils/nostrHelpers.js` | Partial | Router handles `nostr:` prefix but only for hex/npub. `nprofile`/`nevent` not supported in helper. |
-| **NIP-25** | Reactions | `js/nostr/reactionEvents.js`, `js/nostrEventSchemas.js` | Compliant | Implements Kind 7 reaction events. |
+| **NIP-21** | `nostr:` URI scheme | `docs/nips/21.md` | Unknown | Usage in content parsing verified in `js/utils/nostrHelpers.js`. |
 | **NIP-33** | Addressable Events | `js/nostr/client.js` | Compliant | `d` tag usage verified in `video_note_compliance.test.mjs`. |
-| **NIP-42** | Authentication of clients to relays | `js/nostr/client.js` | Non-compliant | No `AUTH` command handling found in client or pool. |
 | **NIP-44** | Encrypted Payloads (Versioned) | `js/nostr/dmDecryptWorker.js`, `js/nostr/client.js` | Compliant | Verified by `tests/nostr-specs/nip04-nip44.test.mjs`. |
 | **NIP-46** | Nostr Remote Signing | `js/nostr/nip46Client.js` | Compliant | Full client implementation for remote signing. |
-| **NIP-47** | Wallet Connect | `js/payments/nwcClient.js` | Compliant | Implements NWC client for zaps. |
 | **NIP-51** | Lists | `js/userBlocks.js`, `js/subscriptions.js` | Compliant | Mute list (Kind 10000) and Subscription list (Kind 30000) logic aligns with spec. |
 | **NIP-56** | Reporting | `js/services/moderationService.js`, `docs/nips/56.md` | Compliant | `buildReportEvent` implements Kind 1984. |
 | **NIP-57** | Zaps | `js/payments/zapRequests.js`, `js/payments/zapSplit.js` | Compliant | Implements Kind 9734/9735 flow. |
 | **NIP-59** | Gift Wrap | `js/nostr/client.js` | Compliant | Implemented as part of NIP-17. |
-| **NIP-65** | Relay List Metadata | `js/relayManager.js` | Compliant | Code supports Kind 10002. Verified by `tests/nostr-specs/nip65_compliance.test.mjs`. |
+| **NIP-65** | Relay List Metadata | `js/relayManager.js` | Partial | Code supports Kind 10002. Test `nip65_compliance.test.mjs` is missing. |
 | **NIP-71** | Video Events | `js/nostr/nip71.js` | Partial | Kinds 21/22 supported in schema, but Kind 30078 is primary. Verified tag generation in `tests/nostr-specs/kind30078.test.mjs`. |
 | **NIP-78** | Application-specific data | `js/services/hashtagPreferencesService.js` | Compliant | Used for hashtag preferences (Kind 30015). |
 | **NIP-94** | File Metadata | `js/nostr/videoPublisher.js` | Compliant | `buildVideoMirrorEvent` implements Kind 1063. |
 | **NIP-96** | HTTP File Storage Integration | `js/nostr/videoPublisher.js` | Partial | References `service nip96` in NIP-71 tags. |
 | **NIP-98** | HTTP Auth | `js/services/r2Service.js` | Compliant | Used for R2 service authentication (Kind 27235). |
-| **Kind 0** | Profile Metadata | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 1** | Share | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 4** | Legacy DM | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 5** | Deletion | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 6** | Repost | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 7** | Reaction | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 13** | Seal | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 14** | Chat Message | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 16** | Generic Repost | `js/nostrEventSchemas.js` | Compliant | Implemented. |
 | **Kind 21** | NIP-71 Video | `js/nostr/nip71.js` | Compliant | Implemented. |
 | **Kind 22** | NIP-71 Short Video | `js/nostr/nip71.js` | Compliant | Implemented. |
-| **Kind 1059** | Gift Wrap | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 1111** | Video Comment | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 1984** | Report | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 9734** | Zap Request | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 9735** | Zap Receipt | `js/nostrEventSchemas.js` | Compliant | Implemented. |
 | **Kind 10000** | Mute List | `js/userBlocks.js` | Compliant | Uses standard NIP-51 (no d tag for main list). |
 | **Kind 10002** | Relay List | `js/relayManager.js` | Compliant | Verified. |
-| **Kind 10050** | DM Relay List | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 20001** | DM Read Receipt | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 20002** | DM Typing | `js/nostrEventSchemas.js` | Compliant | Implemented. |
-| **Kind 27235** | HTTP Auth | `js/services/r2Service.js` | Compliant | Implemented. |
 | **Kind 1063** | File Header | `js/nostr/videoPublisher.js` | Compliant | Implemented for NIP-94 mirroring. |
 | **Kind 30000** | Subscription List | `js/subscriptions.js` | Compliant | Implements NIP-51 follow sets. |
 | **Kind 30015** | Hashtag Preferences | `js/services/hashtagPreferencesService.js` | Compliant | Implemented. |
 | **Kind 30078** | App Data | `js/nostr/client.js`, `js/nostr/videoPayloadBuilder.js` | Compliant | Verified by `tests/nostr-specs/kind30078.test.mjs`. |
 | **Kind 30079** | Watch History | `js/nostr/watchHistory.js`, `config/instance-config.js` | Compliant | Parameterized replaceable list (custom kind). Implements bucketing and encryption. |
+| **NIP-25** | Reactions | `js/nostr/reactionEvents.js`, `js/nostrEventSchemas.js` | Compliant | Implements Kind 7 reaction events. |
+| **NIP-42** | Authentication of clients to relays | `js/nostr/client.js` | Unknown | Needs verification of AUTH command handling. |
+| **NIP-47** | Wallet Connect | `js/payments/nwcClient.js` | Compliant | Implements NWC client for zaps. |

ONBOARDING_REPORT.md

@@ -1,59 +1,39 @@
 # Onboarding Audit Report
 
-**Date:** 2026-02-21
+**Date:** 2026-02-15
 **Agent:** onboarding-audit-agent
-**Headline:** ⚠️ Onboarding failures found
+**Status:** ⚠️ Onboarding failures found (Fixed in this run)
 
-## 1. Environment Assumptions
-- **Node**: v22.22.0
-- **NPM**: 10.9.0
-- **OS**: Linux
+## Environment
+- **Node:** v22.22.0
+- **NPM:** 11.10.0
+- **OS:** Linux
 
-## 2. Steps Executed
-1. `npm ci`
-2. `npx playwright install`
-3. `npm run build` (Simulating `npm start` build phase)
-4. `npm run test:unit:shard1`
-5. `npm run test:smoke`
-6. `npm run format`
-7. `npm run lint`
-8. `npm run audit`
+## Executed Steps (Clean Environment)
 
-## 3. Results
+| Step | Command | Result | Notes |
+|------|---------|--------|-------|
+| 1 | `npm ci` | ✅ Pass | Installed dependencies successfully. |
+| 2 | `npm run build` | ✅ Pass | Build verified manually (simulating `npm start` build step). |
+| 3 | `npm run test:unit:shard1` | ✅ Pass | Unit tests passed. |
+| 4 | `npm run test:smoke` | ❌ Fail / ✅ Pass | Failed initially due to missing Playwright browsers. Passed after running `npx playwright install`. |
+| 5 | `npm run format` | ✅ Pass | Format check passed. |
+| 6 | `npm run lint` | ✅ Pass | Lint check passed. |
 
-| Command | Status | Notes |
-| :--- | :--- | :--- |
-| `npm ci` | ✅ Pass | Installed dependencies successfully. |
-| `npx playwright install` | ✅ Pass | Downloaded Chromium, Firefox, WebKit. |
-| `npm run build` | ✅ Pass | Build completed, assets hashed. |
-| `npm run test:unit:shard1` | ✅ Pass | Unit tests passed. |
-| `npm run test:smoke` | ✅ Pass | Smoke test passed. |
-| `npm run format` | ✅ Pass | No formatting changes needed. |
-| `npm run lint` | ❌ Fail | **File size violation** in `js/subscriptions.js`. |
-| `npm run audit` | ✅ Pass | Audit report generated. |
+## Failures & Fixes
 
-## 4. Failures
-
-### `npm run lint`
-
-**Error Log:**
+### 1. Missing Playwright Browsers
+**Command:** `npm run test:smoke`
+**Failure:**
 ```
-1 file size violation(s):
-  ✗ GREW: js/subscriptions.js (2426 lines, was 2374, limit 2424)
-
-New files must stay under 1000 lines. Grandfathered files must not grow.
-To decompose a large file, extract logic into smaller modules and re-export.
+browserType.launch: Executable doesn't exist at /home/jules/.cache/ms-playwright/chromium_headless_shell-1208/chrome-headless-shell-linux64/chrome-headless-shell
+Looks like Playwright Test or Playwright was just installed or updated.
+Please run the following command to download new browsers:
+    npx playwright install
 ```
+**Root Cause:** `npm ci` installs the `@playwright/test` package but does not download the browser binaries required for smoke and visual tests. The documentation did not mention this step for local setup.
+**Fix:** Updated `README.md` and `CONTRIBUTING.md` to include `npx playwright install` as a required step for running these tests.
 
-**Root Cause:**
-`js/subscriptions.js` has grown beyond its grandfathered limit + buffer. The documented limit is 2424 lines, but the file is now 2426 lines.
-
-**Recommendation:**
-1.  Immediate fix: Increase the limit in `scripts/check-file-size.mjs` slightly to unblock CI if decomposition is not immediately possible.
-2.  Long term: Decompose `js/subscriptions.js`.
-
-## 5. Docs Changes Made
-- None. Documentation accurately reflects the commands, but the codebase fails the lint check.
-
-## 6. Devcontainer/Docker
-- Not required. Environment setup (`npm ci`, `playwright install`) worked reliably.
+## Documentation Updates
+- **README.md**: Added `npx playwright install` note to "Local Setup".
+- **CONTRIBUTING.md**: Added `npx playwright install` note to "Development Setup".

PROTOCOL_INVENTORY.md

@@ -1,62 +0,0 @@
-# Protocol Inventory
-
-This document tracks external protocol and specification dependencies used by the codebase. It complements `NIP_INVENTORY.md` which specifically tracks Nostr Implementation Possibilities.
-
-## 1. Nostr (NIPs)
-
-For a detailed inventory of supported NIPs (Nostr Implementation Possibilities), please refer to [NIP_INVENTORY.md](./NIP_INVENTORY.md).
-
-**Summary of Key NIPs:**
-- **NIP-01:** Basic Protocol Flow (Compliant)
-- **NIP-71:** Video Events (Partial/Compliant)
-- **NIP-94:** File Metadata (Compliant)
-- **NIP-44:** Encrypted Payloads (Compliant)
-
-## 2. BitTorrent / WebTorrent
-
-| Protocol | Spec | Source URL | Implementation | Status |
-|----------|------|------------|----------------|--------|
-| **BitTorrent** | BEP-0003 | [bittorrent.org](http://www.bittorrent.org/beps/bep_0003.html) | `js/services/playbackService.js` | Compliant (via WebTorrent) |
-| **Magnet URI** | BEP-0009 | [bittorrent.org](http://www.bittorrent.org/beps/bep_0009.html) | `js/magnetUtils.js` | Compliant |
-| **WebSeed** | BEP-0019 | [bittorrent.org](http://www.bittorrent.org/beps/bep_0019.html) | `js/magnetUtils.js` | Compliant |
-| **WebTorrent** | WebRTC-based BitTorrent | [webtorrent.io](https://webtorrent.io/docs) | `js/services/playbackService.js` | Compliant |
-
-**Notes:**
-- `js/magnetUtils.js` implements parsing and normalization of magnet links, ensuring `xt`, `ws`, and `xs` parameters are handled correctly.
-- `js/services/playbackService.js` handles the fallback logic between HTTP and WebTorrent playback.
-
-## 3. Media Streaming
-
-| Protocol | Spec | Source URL | Implementation | Status |
-|----------|------|------------|----------------|--------|
-| **HLS** | RFC 8216 | [rfc-editor.org](https://datatracker.ietf.org/doc/html/rfc8216) | Native Browser / `video` tag | Compliant |
-
-**Notes:**
-- The application supports `.m3u8` (HLS) playback natively via the browser's video element (Safari) or via HLS.js if integrated (currently relies on browser/device native support or passthrough).
-- Inputs in `components/upload-modal.html` accept `.m3u8` and `.ts` files.
-
-## 4. Lightning Network (LNURL)
-
-| Protocol | Spec | Source URL | Implementation | Status |
-|----------|------|------------|----------------|--------|
-| **LNURL** | LUD-01, LUD-06, LUD-16 | [github.com/lnurl](https://github.com/lnurl/luds) | `js/payments/lnurl.js` | Compliant |
-| **Zap Requests** | NIP-57 | [nips.be](https://github.com/nostr-protocol/nips/blob/master/57.md) | `js/payments/zapRequests.js` | Compliant |
-
-**Notes:**
-- `js/payments/lnurl.js` implements Bech32 decoding/encoding and LNURL resolution.
-- `js/payments/zapReceiptValidator.js` validates receipts against the LNURL server's public key.
-
-## 5. HTTP & Authentication
-
-| Protocol | Spec | Source URL | Implementation | Status |
-|----------|------|------------|----------------|--------|
-| **Nostr HTTP Auth** | NIP-98 / Kind 27235 | [nips.be](https://github.com/nostr-protocol/nips/blob/master/98.md) | `js/services/r2Service.js` | Compliant |
-| **S3 / R2 API** | AWS S3 Compat | [aws.amazon.com](https://docs.aws.amazon.com/s3/) | `js/services/r2Service.js` | Compliant |
-
-**Notes:**
-- `js/services/r2Service.js` uses NIP-98 style authentication for uploads to compatible storage services (Cloudflare R2).
-
-## Compliance & Remediation
-
-- **NIP-42 (Auth):** Marked as `Non-compliant` in `NIP_INVENTORY.md`. Remediation involves implementing `AUTH` command handling in `js/nostr/client.js`.
-- **HLS:** Reliance on native browser support might limit compatibility on some desktop browsers (Firefox/Chrome on Windows without extensions). Consider integrating `hls.js` if not already present.

README.md

@@ -30,9 +30,7 @@
 
 1. **Visit the Site**: Navigate to the live instance of **bitvid** (e.g., `[https://bitvid.network](https://bitvid.network)`).
 2. **Login with Nostr**:
-   - Use a compatible NIP-07 browser extension or manually input your public key.
-   - For the most reliable experience we recommend a well-maintained signer such as [nos2x](https://github.com/fiatjaf/nos2x) or [Alby](https://getalby.com/). Encrypted features (DMs, hashtag preferences, watch history, block/subscription lists) require the extension to respond to decryption requests.
-   - **Troubleshooting:** if those encrypted lists never finish loading after login, bitvid will surface a notice — your extension's signer is likely locked or its background worker went to sleep. Unlock/reload the extension and refresh the page. (bitvid caps relay fan-out and fast-fails an unresponsive signer so the tab no longer pins the CPU while waiting.)
+   - Use a compatible Nostr browser extension or manually input your public key.
 
 ### Upload a video
 
@@ -181,7 +179,6 @@ To run **bitvid** locally:
    npm run test:smoke        # Critical path verification
    npm run format
    npm run lint
-   npm run audit             # Design system audit
    ```
 
    _Tip: Use `npm run test:unit` to run the full suite (can be slow)._
@@ -215,13 +212,7 @@ For detailed architecture and system documentation, see the [Documentation Index
 - **Run load tests**: `npm run test:load`
 - **Run DM unit tests**: `npm run test:dm:unit`
 - **Run DM integration tests**: `npm run test:dm:integration`
-- **Run headless E2E tests (Chromium + Firefox)**: `npm run test:e2e`
-- **Run E2E tests (Chromium only)**: `npm run test:e2e:chromium`
-- **Run E2E tests (Firefox only)**: `npm run test:e2e:firefox`
-- **Run deterministic E2E matrix**: `npm run test:e2e:deterministic`
-- **Run NIP-07 extension smoke (opt-in)**: `PLAYWRIGHT_EXTENSION_PATH=/abs/path/to/extension npm run test:e2e:extension`
-  - Uses persistent-context launcher: `scripts/playwright/run-extension-persistent.mjs`
-  - Optional profile dir: `PLAYWRIGHT_EXTENSION_USER_DATA_DIR=/abs/path/to/profile`
+- **Run headless E2E tests**: `npm run test:e2e`
 - **Run visual regression tests**: `npm run test:visual`
 - **Update visual baselines**: `npm run test:visual:update`
 - **Run design system audit**: `npm run audit` (Generates remediation report)
@@ -580,11 +571,7 @@ Before pushing, run `npm run build` locally so the Tailwind bundle regenerates.
 
 - **Direct Messages**: Run `npm run test:dm:unit` and `npm run test:dm:integration` for DM flows.
 
-- **End-to-End**:
-  - `npm run test:e2e` runs deterministic Playwright journeys on Chromium + Firefox.
-  - `npm run test:e2e:chromium` / `npm run test:e2e:firefox` runs a single browser target.
-  - `npm run test:e2e:extension` runs the opt-in Chromium extension suite (set `PLAYWRIGHT_EXTENSION_PATH` and optionally `PLAYWRIGHT_ENABLE_EXTENSION_E2E=1`).
-  - Recommendations/roadmap: `docs/testing/playwright-integration-recommendations-2026-02-22.md`
+- **End-to-End**: Run `npm run test:e2e` for headless Playwright journeys.
 
 ### Manual QA checklist
 

REMEDIATION_REPORT.md

@@ -1,4 +1,4 @@
-# Daily Design System Audit Report (2026-02-22)
+# Daily Design System Audit Report (2026-02-16)
 
 Headline: ✓ No violations
 

SECURITY.md

@@ -1,32 +0,0 @@
-# Security Policy
-
-## Reporting vulnerabilities
-
-Do not report suspected security vulnerabilities in public issues, pull
-requests, or agent-memory files. Use GitHub's private vulnerability reporting
-on this repository (Security tab → Report a vulnerability), or email
-[[email protected]](mailto:[email protected]) — we will
-coordinate a responsible disclosure window before public release.
-
-Include the affected commit, reproduction steps, and observed impact. Do not
-include live credentials or unnecessary personal data.
-
-## AI-agent configuration
-
-`AGENTS.md`, `CLAUDE.md`, `.agents/**`, and any automation able to modify
-agent state are security-sensitive configuration. Changes to them require
-maintainer review.
-
-## Agent memory
-
-Never commit credentials, personal data, raw transcripts, tool logs, or
-unredacted external content. Agent-generated memory enters through
-`.agents/proposals/` and is promoted to `.agents/memory/` only via reviewed
-commits. Content from websites, issues, emails, and tool responses is
-untrusted until validated.
-
-## Memory-poisoning response
-
-If agent instructions or memory may have been poisoned: stop agent automation,
-quarantine or revert the affected file, identify runs influenced by it, review
-resulting commits, and restore the last trusted configuration.

TEST_INTEGRITY.md

@@ -1,839 +0,0 @@
-# Test Integrity Notes
-
-Machine-readable record of test-expectation changes made under the Spec
-Correction Protocol (see CLAUDE.md → Dark Factory rules). Each entry justifies
-why a previous expectation was wrong relative to intended behavior and confirms
-the replacement is equally strict (or stricter).
-
----
-
-```yaml
-test_integrity_note:
-  date: 2026-06-14
-  file: tests/app-batch-fetch-profiles.test.mjs
-  change_type: ["spec_correction"]
-  scenarios:
-    - id: SCN-profiles-batched
-      given: "Multiple relays configured (one fast, one failing) and uncached, valid pubkeys to fetch"
-      when: "batchFetchProfiles runs after profile fetches were migrated to the L1 SubscriptionManager"
-      then: "Profiles are fetched in ONE batched query across all relays (not one query per relay); the fast relay's newest profile still renders, cached profiles hydrate immediately, and a failing relay does not break the result"
-  observable_outcomes:
-    - "exactly one pool.list call, targeting all configured relays"
-    - "query authors = only uncached/valid pubkeys"
-    - "DOM updates: cached profile first, then newest fast-relay profile"
-    - "cache set with the newest (Fast) profile only"
-  determinism_controls:
-    - "mock pool.list with deterministic per-relay responses; fixed createdAt ordering"
-  anti_cheat_rationale:
-    prevents:
-      - "over-mocking internal logic"
-      - "hard-coded return value"
-    note: "Only the per-relay CALL-COUNT assertion changed (2 -> 1), because the
-      refactor intentionally batches the fetch. All behavioral assertions
-      (correct/newest profile rendered, cached hydration, failing relay
-      tolerated) are unchanged, and a new assertion verifies the single batched
-      query targets all relays — so coverage is equal or stronger."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
----
-
-```yaml
-test_integrity_note:
-  date: 2026-06-14
-  files:
-    - tests/relay-subscribe-cap.test.mjs
-    - tests/user-blocks.test.mjs
-    - tests/subscriptions-manager.test.mjs
-    - tests/nostr/client.test.mjs
-  change_type: ["spec_correction"]
-  scenarios:
-    - id: SCN-relay-reads-bounded
-      given: "A user's NIP-65 read set (in prod often ~20 relays, most dead) and a
-        cold login that must decrypt encrypted lists (blocks, subs, hashtags) via
-        the nip-07 extension"
-      when: "Reads/subscriptions are built via capReadRelays — the user's own
-        relays first, with RESERVED_DEFAULT_RELAY_SLOTS reserved for reliable
-        default aggregators, bounded to MAX_SUBSCRIBE_RELAYS=8; writes stay
-        uncapped"
-      then: "Every configured relay is still queried when the user's set is small
-        (data lives on the user's own relays); the distinct read fan-out never
-        exceeds 8 (so a large dead list can't storm the pool and starve nip-07
-        decryption); at least the reserved reliable defaults remain reachable even
-        when the user supplied none; write reach is unchanged and defaults are NOT
-        injected into writes"
-  observable_outcomes:
-    - "read/subscribe relay set length <= 8"
-    - "writeRelays == full configured set; no default injected into writes"
-    - ">= RESERVED_DEFAULT_RELAY_SLOTS reliable defaults present in the read set"
-    - "user-blocks: every configured relay queried; fast-then-full background
-      ordering preserved; block list hydrates from the background relay payload"
-    - "subscriptions-manager: every configured relay queried even when one
-      rejects; only the newest event decrypted"
-    - "nostr/client: same events arriving from multiple seeded relays still
-      dedupe to the expected set; relay fan-out bounded"
-  determinism_controls:
-    - "deterministic per-relay mock pool.list responses; fixed created_at ordering"
-    - "capReadRelays is test-aware: the reserved core resolves to the test-relay
-      override under test, keeping harnesses isolated from prod default URLs"
-    - "tests set nostrClient.readRelays to the user's relays to mirror the
-      logged-in state applyRelayPreferences establishes in prod (the fetcher ranks
-      candidates by read preference)"
-  anti_cheat_rationale:
-    prevents:
-      - "hard-coded return value"
-      - "over-mocking internal logic"
-      - "retry/sleep-based flake masking"
-    note: "Only incidental EXACT relay-count assertions were loosened to BOUNDS
-      (<=8) because the storm fix intentionally adds a small reliable-default
-      backstop to the read set. Every behavioral assertion (correct/newest event
-      decrypted, block hydration from the right relay, dedup correctness, per-relay
-      coverage, writes uncapped) is unchanged or strengthened — coverage is equal
-      or stronger, and new assertions pin the reserved-defaults liveness guarantee."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: "Exact-count assertions became bounded-count
-      assertions, but this reflects intended new behavior (reliable-default
-      backstop) rather than weakening a real correctness check; coverage of the
-      actual security/decrypt behavior is preserved."
-```
-
----
-
-```yaml
-test_integrity_note:
-  date: 2026-06-23
-  file: tests/nip71-mirror-flags.test.mjs
-  change_type: ["spec_correction"]
-  scenarios:
-    - id: SCN-mirror-delete-unconditional
-      given: "A video that was shared to NIP-71 on one device/session, then deleted from another device (or after the per-video opt-in flag — browser-local localStorage — was cleared)"
-      when: "resolveDeleteSync runs during delete with FEATURE_NIP71_MIRROR on but the local enabled flag false/absent"
-      then: "The mirror teardown (NIP-09 + empty tombstone, idempotent) is still attempted, so the NIP-71 mirror is not orphaned on other apps; the feature flag still fully gates it"
-  observable_outcomes:
-    - "resolveDeleteSync({featureOn:true, enabled:false|undefined}) -> {action:'unshare'}"
-    - "resolveDeleteSync({featureOn:false, ...}) -> {action:'none'} (feature flag still gates)"
-  determinism_controls:
-    - "pure function; explicit input matrix"
-  anti_cheat_rationale:
-    prevents:
-      - "hard-coded return value"
-    note: "The previous expectation (enabled:false -> none) encoded the bug: it
-      gated teardown on a browser-local flag, orphaning the mirror across devices.
-      The corrected spec is STRICTER — teardown fires whenever the feature is on —
-      and adds the enabled:undefined case. The feature-flag gate assertion is
-      retained, so no real gate was weakened."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
----
-
-```yaml
-test_integrity_note:
-  date: 2026-06-23
-  file: tests/nostr-delete-flow.test.mjs
-  change_type: ["spec_correction", "refactor_tests"]
-  scenarios:
-    - id: SCN-delete-surfaces-relay-failures
-      given: "A logged-in delete where one write relay rejects the kind-5 deletion"
-      when: "deleteAllVersions publishes to the WRITE set via getDeletePublishRelays() (the afb6200b relay-scope fix)"
-      then: "The delete summary surfaces the failing relay"
-    - id: SCN-buffered-feed-tombstone-guard
-      given: "A delete event seeds a tombstone, then an OLDER non-deleted event for the same root arrives on the live stream"
-      when: "events flow through the real VideoEventBuffer (the path subscribeVideos builds via the SubscriptionManager), not the removed direct pool.sub() injection"
-      then: "The older event is tombstone-guarded (marked deleted, kept out of activeMap) and never surfaces as a LIVE video; a deletion event surfaces marked deleted:true so the UI removes the card"
-  observable_outcomes:
-    - "deleteSummary.summary.failed identifies wss://relay.fail (writeRelays now configured so the injected failure is exercised)"
-    - "no callback video with the deleted/older event id and deleted:false"
-    - "client.activeMap cleared for the root; tombstone advanced; stored event marked deleted"
-  determinism_controls:
-    - "videoEventVerifier virtualizes the off-thread signature worker (all events valid)"
-    - "buffer.scheduleFlush(true) awaited for synchronous commit"
-    - "real NostrClient + real VideoEventBuffer (no mocked tombstone guard)"
-  anti_cheat_rationale:
-    prevents:
-      - "over-mocking internal logic"
-      - "snapshot rubber-stamping"
-    note: "Two corrections. (1) The file used bare assert + top-level await, so the
-      unit runner (which requires a node:test import) SILENTLY EXCLUDED it — it had
-      rotted and was failing on main unnoticed. Converted to node:test so it runs
-      in CI. (2) The relay-failure test set only client.relays, but deletes moved to
-      the write set (getDeletePublishRelays); it now sets writeRelays so the
-      injected failure is actually exercised — the assertion was previously passing
-      vacuously. (3) The subscription assertions drove the REMOVED pool.sub() path
-      and expected 'no callback at all' for deleted events; the current
-      VideoEventBuffer intentionally surfaces deleted events marked deleted:true so
-      the UI can remove the card. Rewritten to drive the real buffer + real client
-      and assert the stricter, accurate invariant (never surfaces as LIVE; guarded
-      and removed from activeMap). Coverage is stronger: the buffer's own unit test
-      mocks the client's tombstone guard, whereas this exercises the real guard."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
----
-
-```yaml
-test_integrity_note:
-  date: 2026-06-23
-  file: tests/watch-history.test.mjs
-  change_type: ["spec_correction"]
-  scenarios:
-    - id: SCN-watch-history-partial-acceptance-durable
-      given: "A logged-in user snapshots watch history to 3 write relays where 2 accept and 1 rejects (single attempt, no escalation)"
-      when: "watchHistoryService.snapshot runs after the 565a9618 fix (a snapshot is durable as soon as ANY relay accepts; reads take the newest event per d-tag)"
-      then: "The snapshot SUCCEEDS — it does not throw, the result is ok and not retryable, no republish is scheduled, the month result is flagged partial with the accepting/rejecting relays captured, and the pointer queue is emptied (the pointer was durably published)"
-    - id: SCN-watch-history-logged-in-not-session
-      given: "A logged-in user (nostrClient.pubkey set) records a watch and the entry is published and re-loaded"
-      when: "publishView resolves the owning actor as the logged-in pubkey and sets the session flag only when nobody is logged in"
-      then: "The round-tripped entry is NOT flagged session=true (it is the logged-in user's history, not a local-only session entry); the queue files under the logged-in pubkey so getQueuedPointers(actor) sees it"
-  observable_outcomes:
-    - "snapshot() resolves (does not throw); result.ok === true; result.retryable === false"
-    - "scheduleWatchHistoryRepublish NOT called"
-    - "result.results[0].partial === true; relayStatus.pointer shows relay.one/two accepted, relay.three rejected"
-    - "getQueuedPointers(actor).length === 0 after a successful snapshot"
-    - "resolvedItems[0].session !== true for a logged-in user"
-  determinism_controls:
-    - "poolHarness resolver with a fixed accept/reject plan per relay url"
-    - "session crypto + recordVideoView virtualized; stable relay set"
-    - "logged-in pubkey aligned with the queried actor (matches the convention used by the other tests in the file)"
-  anti_cheat_rationale:
-    prevents:
-      - "snapshot rubber-stamping"
-      - "hard-coded return value"
-    note: "Three corrections in this file, all matching shipped behavior. (1) The
-      partial-acceptance test asserted the INVERSE of intended behavior — that
-      snapshot() THROWS on partial acceptance and retries until EVERY relay accepts —
-      encoding exactly the all-relays false-failure bug 565a9618 fixed. Rewritten to
-      the success path (no throw, partial flag, per-relay status, queue drained, no
-      spurious republish). (2) testWatchHistoryServiceIntegration set the logged-in
-      pubkey to a value DIFFERENT from the actor it queried; since watch history now
-      files under the logged-in pubkey, the queue assertions looked at the wrong key.
-      Aligned pubkey to the queried actor (the convention every other test uses) — a
-      setup fix, no assertion weakened. (3) The same test asserted session===true for
-      a logged-in watch, which is the pre-fix bug (logged-in watches were wrongly
-      flagged session by comparing against the view actor); corrected to session!==true
-      per the current rule that session marks only logged-out, local-only entries.
-      With these the full file is green and was REMOVED from the run-unit-tests
-      QUARANTINE."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
----
-
-```yaml
-test_integrity_note:
-  date: 2026-06-23
-  files:
-    - tests/zap-shared-state.test.mjs
-    - tests/video-modal-zap.test.mjs
-  change_type: ["spec_correction", "refactor_tests"]
-  scenarios:
-    - id: SCN-platform-fee-unparseable-override
-      given: "An unparseable platform-fee override value (e.g. 'not-a-number') with PLATFORM_FEE_PERCENT configured > 0"
-      when: "resolvePlatformFeePercent runs"
-      then: "It falls back to the configured platform default (getDefaultPlatformFeePercent), NOT to 0 — a junk override cannot silently disable/bypass the platform fee"
-    - id: SCN-zap-completion-state-resets-then-completes
-      given: "A zap whose receipts validate to a warning (awaiting validated receipt)"
-      when: "sendZap runs"
-      then: "The modal completion state is reset to false at the start of the send and set true at the terminal path, so two completion-state changes are recorded and the end state is true"
-    - id: SCN-zap-receipts-render-into-controller-element
-      given: "VideoModal.renderZapReceipts called with one validated (or one failed) receipt"
-      when: "rendering delegates to the inner zapController"
-      then: "Exactly one entry is rendered into the controller's modalZapReceipts element"
-  observable_outcomes:
-    - "resolvePlatformFeePercent('not-a-number') === getDefaultPlatformFeePercent() (> 0)"
-    - "completedStates grows by 2 (false then true) on a completing send; end state true"
-    - "controller.modalZapReceipts.children.length === 1 per rendered receipt"
-  determinism_controls:
-    - "pure fee function with explicit inputs; configured PLATFORM_FEE_PERCENT read via getDefaultPlatformFeePercent (not hard-coded)"
-    - "modal stub records setZapCompleted/resetZapForm calls; DummyElement DOM"
-  anti_cheat_rationale:
-    prevents:
-      - "hard-coded return value"
-      - "over-mocking internal logic"
-    note: "Three corrections, all to match shipped behavior. (1) The fee-fallback test
-      asserted 0; the function correctly falls back to the configured platform default
-      so a garbage override cannot zero out (bypass) the fee — corrected to assert
-      against getDefaultPlatformFeePercent and that the result is > 0 (STRICTER: pins
-      the no-bypass guarantee). (2) The completion-count test asserted +1; sendZap
-      legitimately resets completed=false at the start of every send and sets true at
-      the terminal path (+2), with the end-state==true assertion retained as the real
-      invariant. (3) The receipt-render tests set modalZapReceipts on the outer
-      VideoModal, but rendering was refactored to delegate to the inner zapController
-      which owns that element — set/assert on the controller's element (a harness fix,
-      no assertion weakened). NOTE: these accompany three PRODUCTION bug fixes found
-      via the same tests — NWC getPublicKey hex->bytes (connection was broken), the
-      in-flight 'Sending…' status mis-toned as warning, and the success path not using
-      the holistic resetZapForm."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
----
-
-```yaml
-test_integrity_note:
-  date: 2026-06-23
-  file: tests/video-modal-zap.test.mjs
-  change_type: ["spec_correction"]
-  scenarios:
-    - id: SCN-zap-paid-but-receipt-unconfirmed-is-success
-      given: "A zap share whose PAYMENT succeeded (NWC returned a preimage) but whose kind-9735 zap receipt could not be validated on the advertised relays"
-      when: "sendZap finishes"
-      then: "It is reported as a SUCCESS (Sent N sats) with a soft note that the on-relay receipt couldn't be confirmed — NOT as a warning/error. The form resets and the attempt is marked completed."
-  observable_outcomes:
-    - "last zap status tone === 'success' (was 'warning')"
-    - "status message matches /sent 750 sats/i and /couldn't confirm the zap receipt/i (was /awaiting validated zap receipt/i)"
-    - "receipts rendered in partial mode; form reset; completedStates +2 ending true"
-  determinism_controls:
-    - "injected splitAndZap returns a paid receipt (status:success, payment.preimage) with validation.status:'failed'"
-  anti_cheat_rationale:
-    prevents:
-      - "snapshot rubber-stamping"
-      - "hard-coded return value"
-    note: "The previous expectation asserted the BUG: a paid share whose 9735 receipt
-      wasn't found was surfaced as a 'warning' error ('Awaiting validated zap receipt')
-      and routed through notifyError — telling users a SUCCESSFUL zap had failed
-      (confirmed live: the platform fee landed but the UI showed a red error). The NWC
-      payment preimage is proof the invoice was paid; the 9735 receipt is supplementary
-      and is commonly not seen by a static client (relay coverage/timing). Corrected to
-      assert success-with-a-soft-note. Genuine PAYMENT failures (status !== 'success')
-      still go through the failure/retry path, unchanged."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
----
-
-```yaml
-test_integrity_note:
-  date: 2026-06-23
-  file: tests/zap-split.test.mjs
-  change_type: ["spec_correction"]
-  scenarios:
-    - id: SCN-zap-receipt-found-by-indexed-tags
-      given: "A published kind-9735 zap receipt for a video zap (the zap request carries #p recipient + #e event tags)"
-      when: "validateZapReceipt queries relays for the receipt"
-      then: "It filters by the reliably-indexed #e + #p tags (not #bolt11, which most relays don't index), then confirms via author pubkey + bolt11 + description hash"
-  observable_outcomes:
-    - "the relay query filter has filters[0]['#e'] === [eventId] and ['#p'] === [recipient]"
-    - "filters[0]['#bolt11'] is absent"
-    - "a matching receipt still validates as status:'passed'"
-  determinism_controls:
-    - "mock SimplePool.list captures the filter; fixed zap request tags + test bolt11 with matching description hash"
-  anti_cheat_rationale:
-    prevents:
-      - "snapshot rubber-stamping"
-      - "over-mocking internal logic"
-    note: "The previous test asserted filters[0]['#bolt11'][0] === invoice — encoding the
-      bug. Relays generally do not index arbitrary tags like bolt11, so that query found
-      nothing and a successfully-paid zap was reported as having no receipt. Corrected to
-      assert the reliably-indexed #e/#p anchors (added an #e tag to the request to model a
-      real video zap). The receipt-matching assertions (passed status, correct event,
-      checked relays) are unchanged/retained — coverage is stronger, not weaker."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
----
-
-```yaml
-test_integrity_note:
-  date: 2026-06-24
-  file: tests/view-counter.test.mjs
-  change_type: ["spec_correction", "flake_fix"]
-  scenarios:
-    - id: SCN-view-counter-legacy-path
-      given: "The view-counter unit harness mocks the legacy per-pointer view APIs (list/count/subscribe) on the singleton client"
-      when: "A pointer is subscribed and hydrated"
-      then: "viewCounter exercises the legacy per-pointer hydrate/subscribe path (the one viewCounter.js explicitly designates 'for tests / mocks'), so the mocked APIs actually fire"
-    - id: SCN-view-counter-dedupe-window-aligned
-      given: "Two views by the same viewer within one fixed dedupe window"
-      when: "Counted"
-      then: "They dedupe to one (floor(created_at/window) bucket, matching the replaceable view-event d-tag)"
-  observable_outcomes:
-    - "hydration triggers a list()/count() call (legacy path) instead of the batched SubscriptionManager path silently taking over"
-    - "two same-pubkey views in one aligned bucket yield total === 1"
-  determinism_controls:
-    - "nostrClient.getSubscriptionManager pinned to () => null so the path is deterministic"
-    - "the dedupe test's base timestamp is aligned to a window-bucket boundary (was Date.now(), which made the +window/2 offset straddle a boundary depending on time of day)"
-  anti_cheat_rationale:
-    prevents:
-      - "over-mocking internal logic"
-      - "retry/sleep-based flake masking"
-    note: "The batched SubscriptionManager path was added later (relay-storm work); the
-      test mocks the legacy APIs but never pinned getSubscriptionManager, so the real
-      singleton's manager took over and the mocks never fired. Pinning it to null restores
-      the intended (and code-designated 'tests/mocks') legacy-path coverage. The dedupe
-      assertion (count === 1) is unchanged — only its setup was made deterministic."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
----
-
-```yaml
-test_integrity_note:
-  date: 2026-06-24
-  file: tests/view-counter.test.mjs
-  change_type: ["spec_correction"]
-  scenarios:
-    - id: SCN-hydrate-root-timestamp
-      given: "A latest video revision whose root event is fetched by hydrateVideoHistory"
-      when: "History is hydrated, then the timestamp-sync step runs"
-      then: "rootCreatedAtByRoot caches the earliest (root) created_at, AND the active video's rootCreatedAt FIELD is set by syncActiveVideoRootTimestamp"
-  observable_outcomes:
-    - "nostrClient.rootCreatedAtByRoot.get(rootId) === root.created_at (hydrateVideoHistory's direct output)"
-    - "after syncActiveVideoRootTimestamp(...), latestVideo.rootCreatedAt === root.created_at"
-  determinism_controls:
-    - "pool.get returns a fixed root event; rootCreatedAtByRoot seeded empty"
-  anti_cheat_rationale:
-    prevents:
-      - "snapshot rubber-stamping"
-    note: "hydrateVideoHistory's contract is to populate the per-root created_at MAP; the
-      video OBJECT's rootCreatedAt field is applied by a separate util
-      (syncActiveVideoRootTimestamp) after a refactor moved that unit boundary. The test
-      previously expected hydrateVideoHistory to mutate the passed object directly, which it
-      no longer does. Corrected to assert the map (its real output) and to drive the sync
-      util for the field — stronger, not weaker (it now exercises the full real pipeline)."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
----
-
-## 2026-06-25 — todo-11b triage: un-quarantine nostr-boost-actions + admin-list-store
-
-```yaml
-test_integrity_note:
-  change_type: ["spec_correction", "refactor_tests"]
-  scenarios:
-    - id: SCN-repost-optional-relay
-      given: "A repost is built with no relay hint available (buildRepostEvent, nostrEventSchemas.js)"
-      when: "buildRepostEvent({ eventId, authorPubkey, targetKind }) is called without eventRelay"
-      then: "It returns a VALID repost (kind 16 for a non-kind-1 target, two-element ['e', id] tag, ['p', author], ['k', kind]) instead of throwing"
-    - id: SCN-community-blacklist-merge-batched
-      given: "An admin community-blacklist sources list references two curator kind-30000 lists, each with p-tag members"
-      when: "loadAdminState() runs and fetches curator lists via the BATCHED SubscriptionManager path"
-      then: "adminState.blacklist merges the curator members with the direct entry (deduped, guards respected)"
-  observable_outcomes:
-    - "buildRepostEvent output shape (kind/tags) with no relay — asserted exactly, stricter than the old throws-check"
-    - "adminState.blacklist === [direct, communityMemberOne, communityMemberTwo]"
-  determinism_controls:
-    - "pure builder (no IO) for repost; in-memory list registry + mocked pool.list AND getSubscriptionManager for the admin store"
-  anti_cheat_rationale:
-    prevents:
-      - "hard-coded return value"
-      - "over-mocking internal logic"
-    note: |
-      nostr-boost-actions: STALE SPEC. The test required buildRepostEvent to throw
-      /missing-event-relay/ when no relay hint is given, but a relay hint is a NIP-18
-      SHOULD (not MUST). The builder intentionally degrades to a two-element `e` tag so a
-      user can always repost. Replaced the throws-assertion with an EXACT assertion of the
-      valid output (kind 16 + e/p/k tags) — strictly stronger.
-
-      admin-list-store: STALE HARNESS, no production change, no assertion weakened. Three
-      fidelity fixes so the test exercises the real batched community-blacklist path:
-      (1) curator lists are now fetched via the batched SubscriptionManager (cold-start
-      relay-storm fix), which the harness didn't mock — added a getSubscriptionManager().list
-      mock serving the same registry; (2) curator coordinates now use REAL 64-char hex
-      pubkeys (the old mock-"hex" started with "npub", so parseCommunityBlacklistReferences'
-      isHexPubkey()/npub branch decoded them twice and the batched filter no longer matched);
-      (3) createListEvent now emits a `d` tag (real kind-30000 lists always have one;
-      selectNewestEventsForReferences matches curator events to references by their d tag).
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
-## 2026-07-05 — todo-11b final: un-quarantine nwc-client (+ user-blocks / nostr-publish-rejection hangs)
-
-```yaml
-test_integrity_note:
-  change_type: ["spec_correction", "refactor_tests", "flake_fix"]
-  scenarios:
-    - id: SCN-nwc-unsupported-encryption-scheme
-      given: "An NWC wallet whose info event (kind 13194) advertises ONLY an encryption scheme bitvid does not implement (nip44_v3)"
-      when: "ensureEncryptionForContext(context) negotiates a scheme"
-      then: "It rejects with message /Wallet advertises unsupported encryption schemes: nip44_v3\\./ AND error.code === 'UNSUPPORTED_ENCRYPTION'"
-    - id: SCN-nwc-mock-toolkit-selection
-      given: "Each nwc-client section installs a per-section window.NostrTools mock to drive encryption-scheme selection"
-      when: "The nostr-tools bootstrap has installed its frozen canonical toolkit on the global scope"
-      then: "Removing scope.__BITVID_CANONICAL_NOSTR_TOOLS__ lets readToolkitFromScope fall through to the section mock, so the wiring under test runs against the mock (not real @noble against fake keys)"
-  observable_outcomes:
-    - "ensureEncryptionForContext rejection message + error.code (UNSUPPORTED_ENCRYPTION) — asserted exactly"
-    - "nip44_v2 section still resolves via the mock's nip44 (assert.match on the mock ciphertext shape)"
-  determinism_controls:
-    - "per-section in-memory window.NostrTools mocks; canonical-toolkit removal is deterministic (one-time, nothing re-installs it); no network"
-  anti_cheat_rationale:
-    prevents:
-      - "over-mocking internal logic"
-      - "hard-coded return value"
-    note: |
-      nwc-client: TWO issues. (1) MOCK SHADOW (not a spec change): the bootstrap installs a
-      frozen canonical toolkit that readToolkitFromScope() prefers over window.NostrTools, so
-      the per-section mocks never took effect and real @noble ran against the fake test keys
-      ("bad point: is not on curve"). Deleting the scope canonical lets the resolver use each
-      section's mock — the tests exercise the NWC client's encryption-SELECTION wiring, not
-      @noble crypto (which is real elsewhere; the parseNwcUri hex-vs-bytes production bug is
-      guarded by tests/nwc-parse-uri.test.mjs). (2) SPEC CORRECTION: one section asserted a
-      rejection when the toolkit "lacks nip44" by omitting nip44 from the mock. That precondition
-      is architecturally unreachable — the bootstrap's mergeWithCanonical ALWAYS backfills the
-      canonical nip44 (even an explicit `nip44: null` is overwritten by `!merged.nip44`), so
-      nip44_v2 is never an unsupported scheme. Replaced with a wallet advertising a scheme bitvid
-      genuinely cannot provide (nip44_v3), exercising the SAME UNSUPPORTED_ENCRYPTION rejection
-      via a reachable scenario, and strengthened the check to also assert error.code — strictly
-      stronger than the old message-only match.
-
-      user-blocks + nostr-publish-rejection: FLAKE_FIX (no assertion changed). Both are
-      bare-assert files that PASS all assertions then hang on lingering handles after completion
-      (user-blocks: a never-resolving decrypt's background retry timer that manager.reset() doesn't
-      cancel; nostr-publish-rejection: js/app.js + subscriptions + userBlocks module-load
-      timers/connection managers). Applied the repo's established post-completion
-      `setTimeout(() => process.exit(0), 50)` exit after cleanup. No behavior or expectation was
-      altered — the process simply exits once the assertions have all run.
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
-## 2026-07-05 — todo-11: uploadModal-reset zombie-callback test made deterministic (correct mock boundary)
-
-```yaml
-test_integrity_note:
-  change_type: ["flake_fix", "refactor_tests"]
-  scenarios:
-    - id: SCN-upload-zombie-callback-guard
-      given: "An upload is in progress (videoUploadState.status === 'uploading') via a controllable pending mediaUploader.uploadVideo"
-      when: "resetUploads() runs mid-upload (bumping videoUploadId), then the in-flight upload later resolves (a 'zombie' completion)"
-      then: "The stale completion is ignored — status stays 'idle' and results.videoUrl stays '' — because handleVideoSelection guards on videoUploadId !== currentUploadId"
-  observable_outcomes:
-    - "videoUploadState.status: 'uploading' after start, 'idle' after reset, still 'idle' after the zombie resolve"
-    - "results.videoUrl.value === '' after the zombie resolve"
-    - "test exits 0 with no async-after-test activity (was leaking webtorrent/Blob errors)"
-  determinism_controls:
-    - "mediaUploader.uploadVideo replaced with a manually-resolved promise; captureVideoMetadata stubbed; jsdom DOM; no webtorrent, no network, no real Blob ops"
-  anti_cheat_rationale:
-    prevents:
-      - "over-mocking internal logic"
-      - "retry/sleep-based flake masking"
-    note: |
-      FLAKE_FIX + REFACTOR_TESTS, no assertion weakened. The subtest PASSED its asserts but
-      leaked async activity after the test ended, which node:test flags as a failure. Root
-      cause: it mocked modal.generateTorrentMetadata / resolveUploadIdentifier, but
-      handleVideoSelection drives the upload through this.mediaUploader.uploadVideo — a
-      DIFFERENT object with its OWN helpers — so the mediaUploader still ran real
-      createTorrentMetadata()/hashing on a synthetic {name:'video.mp4'} file ("invalid input
-      type" async), and captureVideoMetadata() ran URL.createObjectURL(file) ("must be an
-      instance of Blob"). Fixed by mocking at the correct DI boundary
-      (modal.mediaUploader.uploadVideo returns the controllable pending promise) and stubbing
-      captureVideoMetadata. The unit under test is the modal's videoUploadId zombie-guard, so
-      mocking the uploader boundary is correct isolation, not over-mocking (real upload/torrent
-      paths are covered by the mediaUploader / s3-upload suites).
-  mutation_verification:
-    - "Broke the guard (`if (this.videoUploadId !== currentUploadId) return` → `if (false)`) → the test FAILS ('State should remain idle after zombie completion', # fail 1). Reverted."
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
-## 2026-07-05 — todo-11b: un-quarantine dm-block-filter (hermetic subscription; no force-exit)
-
-```yaml
-test_integrity_note:
-  change_type: ["flake_fix"]
-  scenarios:
-    - id: SCN-dm-block-filter-hermetic
-      given: "The 'integration with loaded user block list' test loads standard + legacy block lists and filters incoming DMs"
-      when: "manager.loadBlocks() runs against stubbed fetchListIncrementally, with the live block-list subscription stubbed out"
-      then: "Both blocked contacts (standard + legacy) are filtered (dmMessages === [ALLOWED]) AND the process opens NO real relay sockets, so node:test exits naturally with the correct exit code"
-  observable_outcomes:
-    - "manager.isBlocked(legacy) && manager.isBlocked(standard) === true; dmMessages length 1 (ALLOWED only)"
-    - "process.getActiveResourcesInfo() shows no TCPSocketWrap after loadBlocks; node exits 0 on pass, 1 on a forced failure (verified — failures NOT masked)"
-  determinism_controls:
-    - "stubbed nostrClient.fetchListIncrementally; truthy stub nostrClient.pool; no-op nostrClient.getSubscriptionManager; window.nostr.nip04.decrypt stub. All restored in finally. No network."
-  anti_cheat_rationale:
-    prevents:
-      - "retry/sleep-based flake masking"
-      - "over-mocking internal logic"
-    note: |
-      FLAKE_FIX, no assertion changed. The file PASSED all subtests then hung: loadBlocks()
-      opens a LIVE block-list subscription through nostrClient's real SimplePool aimed at the
-      test's fake relay URLs, leaking TCP sockets + reconnect timers that outlive the run so
-      node:test never exits (surfaced only once the runner was given a per-file timeout).
-      Diagnosed with process.getActiveResourcesInfo() — 4 TCPSocketWrap + reconnect Timeouts;
-      NOT the decrypt-retry timer (verified absent). Nulling the pool did not help because
-      loadBlocks calls ensurePool() (userBlocks.js:967) to re-create+connect a real pool when
-      pool is falsy. Fix keeps the test hermetic: a TRUTHY stub pool (so ensurePool is skipped)
-      + a no-op getSubscriptionManager (so the subscription opens nothing). The block-merge
-      logic under test still runs fully through the stubbed fetchListIncrementally. A force
-      `process.exit` in an after() hook was explicitly REJECTED after verifying it masks real
-      failures (process.exitCode is not set when the hook's timer fires — a deliberately broken
-      assertion still exited 0 under that approach). Under this fix, the forced-failure control
-      correctly exits 1.
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
-
----
-
-# client-reliability-1
-
-```yaml
-test_integrity_note:
-  change_type: ["flake_fix", "new_tests"]
-  scenarios:
-    - id: SCN-profile-focus-style-contract
-      given: "modal controls include visible, disabled, CSS-hidden, inherited-hidden, aria-hidden, hidden-input, and hidden-attribute cases"
-      when: "the real controller collects focus targets using fixture and native JSDOM styles, and the user tabs from the last control"
-      then: "both resolvers retain only visible enabled controls and Tab wraps to the first"
-  observable_outcomes:
-    - "focus target control IDs match the strict expected list"
-    - "Tab is prevented and document.activeElement moves to the first control"
-    - "all 26 existing modal scenarios preserve their assertions and complete naturally"
-  determinism_controls:
-    - "stylesheet-free full-markup fixture virtualizes only display and visibility"
-    - "small contract scenario runs the same assertions against native JSDOM computed styles"
-    - "explicit test stylesheet, local services, real DOM focus and event dispatch; no network"
-  anti_cheat_rationale:
-    prevents:
-      - "hard-coded focus list: varied hidden and visible controls"
-      - "over-mocking controller behavior: real updateFocusTrap and keyboard listener"
-      - "style resolver rubber-stamping: native resolver must satisfy the same scenario"
-      - "retry/sleep-based flake masking: no timeouts, retries, or sleeps added"
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
-Mutation evidence: removing the product display/visibility exclusion causes this scenario to fail with the hidden control IDs in its focus list (exit 1, 1 failed/0 passed). Mutant reverted. This fixes expensive JSDOM style evaluation in the test harness, not a demonstrated browser defect. Application CSS/layout remains outside this unit fixture's scope.
-
-Fixture mutation: omitting native hidden-attribute filtering also fails the contract (exit 1, 1 failed/0 passed); restored before final checks.
-
----
-
-# client-reliability-2
-
-```yaml
-test_integrity_note:
-  change_type: ["flake_fix", "new_tests"]
-  scenarios:
-    - id: SCN-concurrent-init-hermetic-subscription
-      given: "two init callers share a pool initialization held at a deterministic barrier, with a virtual successful relay connection"
-      when: "pool initialization is released and the second caller opens then closes a video subscription"
-      then: "the second caller waits for pool readiness, real L1 feed setup reaches the fake pool, and unsubscribe closes the transport exactly once with no reconnect timer"
-  observable_outcomes:
-    - "second init promise remains pending until the pool barrier is released"
-    - "pool is ready after awaiting the second caller; both init promises settle"
-    - "post-init subscription requests video events from a nonempty relay set"
-    - "subscription transport closes once, including repeated unsubscribe"
-    - "the process exits naturally with no public relay IO or reconnect retries"
-  determinism_controls:
-    - "deferred pool barrier replaces the old 50ms delay"
-    - "fake pool at the actual transport boundary; real init, L1, and feed cleanup"
-    - "manager connection boundary reports success rather than triggering background reconnect"
-    - "local-data/signer restore are virtualized; teardown awaits init, closes feed and resets reconnect state even after failure"
-  anti_cheat_rationale:
-    prevents:
-      - "early-return init mutant fails while pool initialization is held"
-      - "no-op subscription cannot satisfy the observed transport request"
-      - "no-op cleanup cannot satisfy exact close count"
-      - "failure fixture cannot hide a reconnect timer behind a passing assertion"
-      - "retry/sleep/forced-exit masking: no timeout changes or forced exit"
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
-Original concurrent-promise, pool-ready and post-init no-throw assertions remain. The old empty connection result accidentally modeled failure; init correctly scheduled manager-owned retries that bypassed its client-level stub. The fixture now models successful init at the manager boundary and releases its feed subscription. This is harness cleanup, not a Nostr product change.
-
-Mutants: a test-local historical early-return init variant fails the pending-barrier assertion (exit1, 1 failed); a connection-failure fixture variant fails the no-retry assertion (exit1, 1 failed). Both exit naturally and are reverted. No product file was edited for either mutant.
-
----
-
-# client-reliability-3
-
-```yaml
-test_integrity_note:
-  change_type: ["new_tests"]
-  scenarios:
-    - id: SCN-last-probe-owner-disposal
-      given: "five real DOM cards register through actual gridHealth/cardObserver; four probes are active and one queued"
-      when: "the feed is disposed/removed and active probes finish"
-      then: "zero obsolete probes start"
-    - id: SCN-shared-queued-owner
-      given: "two cards share one queued torrent source"
-      when: "one registration disposes while its DOM remains connected"
-      then: "the live owner still probes and becomes healthy; disposed owner receives no stale UI/callback"
-    - id: SCN-cancelled-replacement-inflight
-      given: "last owner cancels queued work then a replacement requests the same source before old settlement"
-      when: "old completion drains and another owner joins before a slot frees"
-      then: "no unhealthy cancellation cache is written, only one new probe starts, and both replacements become healthy/cacheable"
-    - id: SCN-probe-priority-concurrency
-      given: "four active probes, queued mixed priorities and a cancelled source"
-      when: "slots free one at a time"
-      then: "four-slot maximum and stable priority order remain; cancelled work never starts"
-    - id: SCN-hidden-healthy-reveal
-      given: "a hide-all card is hidden pending liveness"
-      when: "registration eagerly probes and returns healthy"
-      then: "raw magnet/webseed bytes reach probe IO and the card reveals without an intersection"
-    - id: SCN-active-shared-late-entry
-      given: "an active source loses its owner, receives a late observer entry and gains a live owner"
-      when: "the unchanged active probe completes"
-      then: "no duplicate starts or disposed result writes; live owner becomes healthy"
-    - id: SCN-repeat-disposal-reattach
-      given: "a disposed container has a new queued registration"
-      when: "the old disposer is called again"
-      then: "new owner survives and becomes healthy"
-    - id: SCN-ownerless-active-cache
-      given: "an already active probe has no remaining owner"
-      when: "it finishes before a later live card requests that source"
-      then: "the active result remains cached; no new probe or stale UI write occurs"
-    - id: SCN-existing-probe-cache-ttl
-      given: "completed healthy and negative results"
-      when: "cards request before, at, and after the existing TTL boundary"
-      then: "both cached outcomes reuse until the existing inclusive TTL expires, then both probe again"
-  observable_outcomes:
-    - "actual probePeers start count/order, arguments and maximum active count"
-    - "real DOM badge health/hidden state, observer disposal and callback counts"
-    - "storage cache absence for cancellation and reuse/expiry for completed probes"
-  determinism_controls:
-    - "actual gridHealth/cardObserver and DOM, controllable observer and deferred probePeers IO"
-    - "explicit viewport geometry, unique sources and isolated storage; fake Date.now only for TTL scenario"
-    - "task-turn promise draining without wall-clock sleeps, polling or retries"
-    - "native Chromium/Firefox observer smoke against built dist, external traffic blocked"
-  anti_cheat_rationale:
-    prevents:
-      - "unconditional queue cancellation: shared-owner mutant fails"
-      - "no-op cancellation, stale inflight deletion or cancelled cache poisoning"
-      - "changed concurrency/priority or hidden eager path"
-      - "stale result/listener/observer effects and repeated old disposal"
-      - "cancelling or dropping cache from already active work"
-      - "timeout/retry/sleep masking or hard-coded healthy results"
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
-Grouped mutation coverage: last-owner cancellation mutant kills SCN-last-probe-owner-disposal; unconditional cancel kills SCN-shared-queued-owner; unconditional inflight deletion and cancelled-normalization mutants each kill SCN-cancelled-replacement-inflight; reversed queue priority kills SCN-probe-priority-concurrency; disabled eager path kills SCN-hidden-healthy-reveal; stale result guard and late-entry membership mutants each kill SCN-active-shared-late-entry; non-idempotent disposer kills SCN-repeat-disposal-reattach; owner-dependent active caching kills SCN-ownerless-active-cache; missing cache writes kills SCN-existing-probe-cache-ttl. All11 variants exit1 with1 failed scenario,0 cancelled, and are reverted. Browser checks corroborate the same disposal/shared-owner/hidden-reveal/source-visibility scenarios with native observers; no browser CPU or actual media fallback claim.
-
-Additional client-reliability-3 scenarios (same invariant and controls):
-
-```yaml
-test_integrity_note:
-  change_type: ["new_tests"]
-  scenarios:
-    - id: SCN-shared-badge-listener-lifetime
-      given: "two feed registrations share the app callback"
-      when: "badge updates occur and registrations dispose one at a time"
-      then: "each event notifies once, one surviving owner retains the callback, last disposal stops notifications"
-    - id: SCN-checking-callback-disposal
-      given: "a live card's checking callback synchronously disposes the feed"
-      when: "badge notification returns to probe submission"
-      then: "no probe is submitted after unregister"
-  observable_outcomes:
-    - "callback event count/state sequence and external probe start count"
-  determinism_controls:
-    - "real badge/observer path, synchronous disposal callback and deferred probe IO"
-  anti_cheat_rationale:
-    prevents:
-      - "duplicated shared callbacks or dropping live callback owners"
-      - "post-disposal work submitted after synchronous reentrant teardown"
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
-Duplicate wrapper and unconditional listener release variants each fail SCN-shared-badge-listener-lifetime. Removing the post-checking membership guard fails SCN-checking-callback-disposal (actual starts1 vs expected0). These3 additional variants exit1 with1 failed/0 cancelled and are reverted; total14 killed variants for11 lifecycle scenarios. Original source/priority/observer expectations remain unchanged.
-
-
-## client-reliability-4 — queued URL media ownership
-
-```yaml
-test_integrity_note:
-  change_type: ["new_tests"]
-  scenarios:
-    - id: SCN-url-last-owner
-      given: "four cards, three active media and one queued"
-      when: "last registration is disposed and an active slot frees"
-      then: "queued promise settles null, no cache entry or obsolete media start"
-    - id: SCN-url-shared-owner
-      given: "two feeds share a queued event/source"
-      when: "one feed disposes"
-      then: "exactly one media probe serves the live badge; disposed connected badge stays checking"
-    - id: SCN-url-last-shared-owner
-      given: "two feeds share a queued event/source"
-      when: "both feeds dispose"
-      then: "queued promise settles null and never starts media"
-    - id: SCN-url-cancel-rerequest
-      given: "cancelled queued event/source has pending promise continuations"
-      when: "a new feed requests the same source immediately"
-      then: "new inflight record survives old settlement and live badge becomes healthy"
-    - id: SCN-url-cancel-mirror
-      given: "queued primary has a mirror"
-      when: "last owner disposes"
-      then: "cancelled work settles without mirror HEAD/media or stale UI/cache"
-    - id: SCN-url-registration-reuse
-      given: "hidden old feed queues an eager callback"
-      when: "dispose, reuse container, deliver old callback and old disposer"
-      then: "only the new event reaches onCheck and starts IO"
-    - id: SCN-url-active-cache
-      given: "active media belongs to a connected card"
-      when: "dispose its registration and complete active media"
-      then: "active result caches healthy, disposed badge stays checking, new card uses cache"
-    - id: SCN-url-hidden-reveal
-      given: "URL-only card is hidden pending health"
-      when: "eager media confirmation succeeds"
-      then: "card becomes visible with healthy badge"
-    - id: SCN-url-media-limit
-      given: "three active media probes plus FIFO queued work"
-      when: "slot releases while a new card enters"
-      then: "existing queued source runs first; active media stays three"
-    - id: SCN-url-mirror-order
-      given: "primary and two mirrors exist"
-      when: "primary errors then first mirror succeeds"
-      then: "primary then first mirror are requested; second mirror is untouched"
-    - id: SCN-url-legacy-callback
-      given: "connected badge lacks observer ownership"
-      when: "legacy caller invokes controller"
-      then: "media settles and healthy badge paints"
-    - id: SCN-url-cross-controller
-      given: "shared real inflight cache and two controllers"
-      when: "creator feed disposes while other feed remains"
-      then: "queued shared source starts once and other controller paints healthy"
-  observable_outcomes:
-    - "HEAD and native media IO starts, promise settlement, real cache/inflight records, connected badge and card visibility"
-    - "Observer callback emissions after disposal and container reuse"
-  determinism_controls:
-    - "jsdom cards, controllable IntersectionObserver, explicit loadeddata/error events and stubbed fetch boundary; real observer/controller/cache"
-    - "Unique event/source keys and task-turn drain; no live traffic, arbitrary sleeps, retries or relaxed assertions"
-  anti_cheat_rationale:
-    prevents:
-      - "hard-coded healthy or cancelled results"
-      - "testing a copied queue instead of real controller and observer"
-      - "cancelling shared live work or caching cancellation as offline"
-      - "stale connected DOM callbacks hidden by isConnected guards"
-      - "retry/sleep-based flake masking"
-  relaxation:
-    did_relax_any_assertion: false
-    if_true_explain_spec_basis: ""
-```
-
-All existing assertions preserved. `tests/url-health-lifecycle.test.mjs` adds12 scenarios. Mutations are temporary edits restored before gates. `python3 /tmp/item4-mutants.py` final run:13/13 variants naturally exit1 with named assertion failures (no timeouts); logs `/tmp/item4-mutant-*.log`, results `/tmp/item4-mutants.json`. No production test runner/gate changes.
-
-Coverage grouping: no-unregister→last owner; cancel-shared→shared owner/cross-controller; reuse-cancelled-inflight→immediate retry/new inflight; cache-cancellation→last/shared owner/retry/mirror cache outcomes; mirror-fallthrough→cancelled primary; grouped stale guards→shared/active disposed UI (remove both redundant owner guards together; two equivalent variants); eager-callback-stale→registration reuse; no-eager-reveal→hidden reveal; concurrency-four→three-media cap/FIFO; reverse-mirrors→mirror ordering; break-legacy-consumer→callback compatibility; controller-local-records→shared cache ownership across controllers. Initial mutation pass exposed callback-emission and first-source gaps; new assertions were strengthened, then all mutants rejected. Initial no-unregister full-file run failed assertions but hung in another scenario awaiting its intentionally broken promise; final targeted last-owner variant naturally exits1. No timeout is counted as successful mutant evidence.

ai/reports/telemetry-20260224.md

@@ -1,28 +0,0 @@
-# Telemetry Report - 2026-02-24
-
-**Total Unique Issues:** 1
-**Generated:** 2026-02-24T13:31:15.378Z
-
-## Top 10 Priority Issues
-
-| Priority | Count | Issue | Owner | Sources |
-| :--- | :---: | :--- | :--- | :--- |
-| **Medium** | 1 | Load Test Bottleneck: Cryptographic Bottleneck (Avg Sign ... | P2P Team | load-test:load-report-20260204.json |
-
-## Detailed Breakdown
-
-### [Medium] Load Test Bottleneck: Cryptographic Bottleneck (Avg Sign Time 5.87ms > 5ms)
-- **Occurrences:** 1
-- **Sources:** load-test:load-report-20260204.json
-- **Suggested Owner:** P2P Team
-- **Fingerprint:** `00257328`
-
-**Stack Trace / Details:**
-```
-Bottleneck: Cryptographic Bottleneck (Avg Sign Time 5.87ms > 5ms)
-Remediation: Client-side event signing is slow. Review cryptographic library (nostr-tools) usage or client hardware capabilities.
-```
-
-
----
-*Privacy Notice: PII (IPs, emails, keys) has been sanitized from this report.*

ai/reports/weekly-20260225.md

@@ -1,72 +0,0 @@
-# Weekly Agent Synthesis — 2026-02-25 (covers 2026-02-18 → 2026-02-25)
-
-## Summary
-- Total PRs opened: 8 (currently open)
-- Total PRs merged: 48 (in the last 7 days)
-- Notable themes:
-  - **Testing & CI Stability:** Significant effort on stabilizing flaky E2E tests (#2683, #2669), improving coverage (#2707, #2667), and adding comprehensive E2E suites (#2666).
-  - **Performance:** Optimizations in feed moderation (#2665) and mute pruning (#2653).
-  - **Refactoring:** Cleaning up `app.js` (#2681) and test harnesses (#2688).
-  - **Routine Maintenance:** High volume of daily agent executions (todo-triage, style, audit).
-
-## PRs Opened / Updated (Selected)
-- **test(smoke): add smoke-test.mjs harness** — Open — Status: Open
-  - Notes: New harness for smoke testing.
-  - Risk: None (test infra).
-- **docs(agents): sync scheduler rosters** — Open — Status: Open
-  - Notes: Routine scheduler updates.
-  - Risk: None.
-- **Add unit tests for js/nostr/utils.js (test-coverage-agent)** — #2707 — Status: Merged
-  - Notes: Improved coverage for core utilities.
-  - Risk: None.
-- **[ci] Stabilize flaky E2E tests & skip deploy-index verification** — #2683 — Status: Merged
-  - Notes: Addressed CI flakes.
-  - Risk: None (test infra).
-- **refactor(ui): extract bindThumbnailFallbacks from app.js** — #2681 — Status: Merged
-  - Notes: Extracted logic from the main `bitvidApp` class.
-  - Risk: **Requires UI regression check** (thumbnails).
-- **perf(feed): optimize moderation stage with batch author lookups** — #2665 — Status: Merged
-  - Notes: Changed how authors are looked up during feed rendering.
-  - Risk: **Requires protocol review** (feed correctness).
-- **fix: race condition in app initialization** — #2674 — Status: Merged
-  - Notes: Fixed startup race.
-  - Risk: **Requires protocol review** (startup timing).
-- **Replace alert() with non-blocking notifications in UploadModal** — #2652 — Status: Merged
-  - Notes: UX improvement.
-  - Risk: None.
-
-## Issues Created / Updated
-*(Derived from PR descriptions and titles, as direct issue fetching via git is limited)*
-- **Stabilize flaky E2E tests** (referenced in #2683) — Priority: P1
-- **Race condition in app initialization** (referenced in #2674) — Priority: P1
-
-## Tests / Quality
-- **Tests added/updated:**
-  - Unit tests for `js/nostr/utils.js` (#2707).
-  - Comprehensive E2E test suite for accessibility/playback (#2666).
-  - Refactored smoke test harness (#2688).
-- **Coverage:**
-  - Coverage improved for `js/nostr/utils.js` and E2E scenarios.
-
-## Security / Dependencies
-- **Daily Agent: Audit Agent** (#2702) — #2702
-  - Routine audit run. No critical vulnerabilities flagged in summary.
-- **daily: nip-research-agent NIP-42 update** — #2661
-  - Rationale: Touches authentication protocols.
-  - Risk: **requires-protocol-review**.
-
-## Requires Human Review (Do Not Auto-Merge)
-- **#2661 (NIP-42 update)** — Touches authentication logic — [PR #2661](https://github.com/PR0M3TH3AN/bitvid/pull/2661)
-- **#2665 (Batch author lookups)** — Complex logic change in feed rendering — [PR #2665](https://github.com/PR0M3TH3AN/bitvid/pull/2665)
-- **#2681 (Refactor app.js)** — Core UI refactor — [PR #2681](https://github.com/PR0M3TH3AN/bitvid/pull/2681)
-
-## Top 5 Recommended Human Actions (ranked)
-1.  **Verify NIP-42/Auth Changes (#2661, #2669):** Ensure authentication flows remain secure and functional.
-2.  **Review Feed Optimization (#2665):** Verify that batch author lookups correctly handle all moderation cases.
-3.  **Validate App.js Refactor (#2681):** Check thumbnail loading across the app to ensure no regressions.
-4.  **Confirm CI Stability (#2683, #2703):** Monitor CI for recurrence of flakes; verify tests weren't simply disabled/loosened.
-5.  **Review New E2E Suite (#2666):** Ensure new tests align with "Scenario-First" guidelines.
-
-## Method & Limitations
-- Data sources used: GitHub API (`curl`), `git log`.
-- Links are derived from API output.

api/_lib/ogRenderer.mjs

@@ -1,363 +0,0 @@
-// Per-video OpenGraph / Twitter-player rendering for crawlers.
-//
-// bitvid is a static SPA: index.html carries one set of site-wide OG tags, so
-// every `/?v=<nevent>` link previewed as the same generic bitvid card. Crawlers
-// don't run JS, so the client can't fix that — this module renders the tags a
-// crawler needs, and a thin host adapter (api/og.js on Vercel) feeds it.
-//
-// PURE by design: no network, no host globals. All I/O lives in the adapter so
-// the escaping and gating rules below stay unit-testable.
-//
-// Rollback: remove the crawler rewrite from vercel.json. The static site keeps
-// serving its existing tags and nothing else changes — this is never on the
-// path of a real user's page load, and `npm run archive` (nsite) is unaffected.
-
-// Player card dimensions. Twitter refuses a player card without explicit
-// dimensions, and 16:9 matches bitvid's embed shell.
-export const DEFAULT_PLAYER_WIDTH = 1280;
-export const DEFAULT_PLAYER_HEIGHT = 720;
-
-const MAX_TITLE_LENGTH = 120;
-const MAX_DESCRIPTION_LENGTH = 200;
-
-/**
- * Escape a value for use inside a double-quoted HTML attribute.
- *
- * Titles and descriptions come from arbitrary nostr events — treat every one as
- * hostile. A title of `"><script>…` would otherwise break out of the meta tag
- * and inject markup into a page we serve from our own origin.
- */
-export function escapeHtmlAttribute(value) {
-  if (typeof value !== "string") {
-    return "";
-  }
-  return value
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-    .replace(/"/g, "&quot;")
-    .replace(/'/g, "&#39;");
-}
-
-/**
- * Only http(s) URLs may reach a meta tag. Anything else (javascript:, data:,
- * relative paths) is dropped — a crawler resolving them is at best useless and
- * at worst a vector.
- */
-export function sanitizeAbsoluteUrl(value) {
-  const trimmed = typeof value === "string" ? value.trim() : "";
-  if (!trimmed) {
-    return "";
-  }
-  let parsed;
-  try {
-    parsed = new URL(trimmed);
-  } catch (err) {
-    return "";
-  }
-  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-    return "";
-  }
-  return parsed.toString();
-}
-
-/** Collapse whitespace and hard-truncate for preview surfaces. */
-export function normalizeText(value, maxLength) {
-  const collapsed =
-    typeof value === "string" ? value.replace(/\s+/g, " ").trim() : "";
-  if (!collapsed || !Number.isFinite(maxLength) || maxLength <= 0) {
-    return collapsed;
-  }
-  if (collapsed.length <= maxLength) {
-    return collapsed;
-  }
-  return `${collapsed.slice(0, maxLength - 1).trimEnd()}…`;
-}
-
-/**
- * Decide whether a video may be described in a link preview.
- *
- * A crawler never authenticates, so anything emitted here is fully public and
- * outlives us in third-party caches. The rule is fail-closed: only a video that
- * is affirmatively public gets a rich card; everything else — including the
- * "we couldn't determine it" case — falls back to the generic bitvid card.
- *
- * @returns {{allowed: boolean, reason: string}}
- */
-export function isPubliclyShareable(video, options = {}) {
-  if (!video || typeof video !== "object") {
-    return { allowed: false, reason: "missing-video" };
-  }
-  if (video.invalid) {
-    return { allowed: false, reason: "invalid-video" };
-  }
-  if (video.deleted === true) {
-    return { allowed: false, reason: "deleted" };
-  }
-  if (video.isPrivate === true) {
-    return { allowed: false, reason: "private" };
-  }
-  // NSFW thumbnails must never be injected into an unsuspecting timeline.
-  if (video.isNsfw === true) {
-    return { allowed: false, reason: "nsfw" };
-  }
-
-  const pubkey =
-    typeof video.pubkey === "string" ? video.pubkey.trim().toLowerCase() : "";
-  if (!pubkey) {
-    return { allowed: false, reason: "missing-author" };
-  }
-
-  const blacklist = options.blacklist instanceof Set ? options.blacklist : null;
-  if (blacklist && blacklist.has(pubkey)) {
-    return { allowed: false, reason: "blacklisted" };
-  }
-
-  if (options.whitelistEnabled) {
-    const whitelist =
-      options.whitelist instanceof Set ? options.whitelist : null;
-    // No usable whitelist while whitelist mode is on means we cannot prove the
-    // author is allowed. Fail closed rather than leak a gated video's metadata.
-    if (!whitelist || whitelist.size === 0) {
-      return { allowed: false, reason: "whitelist-unavailable" };
-    }
-    if (!whitelist.has(pubkey)) {
-      return { allowed: false, reason: "not-whitelisted" };
-    }
-  }
-
-  return { allowed: true, reason: "ok" };
-}
-
-// bitvid's own notes are kind 30078 with a v3 JSON body. Other clients
-// (nostube/slidestr and anything NIP-71 native) publish kind 21/22/34235/34236
-// with the metadata in TAGS and the description in `content`. bitvid normalizes
-// both in the browser, so the preview must understand both too — parsing only
-// the JSON shape made every NIP-71 video fall back to the generic card.
-export const NIP71_VIDEO_KINDS = Object.freeze([21, 22, 34235, 34236]);
-
-function firstTagValue(tags, name) {
-  if (!Array.isArray(tags)) {
-    return "";
-  }
-  for (const tag of tags) {
-    if (Array.isArray(tag) && tag[0] === name && typeof tag[1] === "string") {
-      const value = tag[1].trim();
-      if (value) {
-        return value;
-      }
-    }
-  }
-  return "";
-}
-
-function hasTag(tags, name) {
-  return (
-    Array.isArray(tags) &&
-    tags.some((tag) => Array.isArray(tag) && tag[0] === name)
-  );
-}
-
-/** First `image <url>` entry inside any imeta tag. */
-function imetaImageUrl(tags) {
-  if (!Array.isArray(tags)) {
-    return "";
-  }
-  for (const tag of tags) {
-    if (!Array.isArray(tag) || tag[0] !== "imeta") {
-      continue;
-    }
-    for (let i = 1; i < tag.length; i += 1) {
-      const entry = typeof tag[i] === "string" ? tag[i].trim() : "";
-      if (/^image\s+/i.test(entry)) {
-        const url = sanitizeAbsoluteUrl(entry.replace(/^image\s+/i, ""));
-        if (url) {
-          return url;
-        }
-      }
-    }
-  }
-  return "";
-}
-
-/**
- * Normalize a raw nostr event into the fields the preview needs, for both the
- * bitvid v3 JSON shape and the NIP-71 tag shape. Returns null when the event is
- * not a recognizable video note (caller renders the generic card).
- */
-export function parseVideoEvent(event) {
-  if (!event || typeof event !== "object") {
-    return null;
-  }
-
-  const base = { pubkey: event.pubkey, deleted: false, isPrivate: false };
-
-  // --- bitvid native (kind 30078, JSON content) ---
-  if (typeof event.content === "string" && event.content.trim().startsWith("{")) {
-    try {
-      const content = JSON.parse(event.content);
-      if (content && typeof content === "object") {
-        return {
-          ...base,
-          title: content.title,
-          description: content.description,
-          thumbnail: content.thumbnail,
-          deleted: content.deleted === true,
-          isPrivate: content.isPrivate === true,
-          isNsfw: content.isNsfw === true || hasTag(event.tags, "content-warning"),
-          invalid: !content.title || (!content.url && !content.magnet),
-        };
-      }
-    } catch (err) {
-      // Not JSON after all — fall through to the NIP-71 reading.
-    }
-  }
-
-  // --- NIP-71 (metadata in tags, description in content) ---
-  if (NIP71_VIDEO_KINDS.includes(event.kind)) {
-    const title = firstTagValue(event.tags, "title");
-    const thumbnail =
-      imetaImageUrl(event.tags) ||
-      sanitizeAbsoluteUrl(firstTagValue(event.tags, "image")) ||
-      sanitizeAbsoluteUrl(firstTagValue(event.tags, "thumb"));
-    const description =
-      (typeof event.content === "string" && event.content.trim()) ||
-      firstTagValue(event.tags, "summary") ||
-      firstTagValue(event.tags, "alt");
-    return {
-      ...base,
-      title,
-      description,
-      thumbnail,
-      // NIP-71 has no privacy flag; `content-warning` is the NSFW signal.
-      isNsfw: hasTag(event.tags, "content-warning"),
-      invalid: !title,
-    };
-  }
-
-  return null;
-}
-
-function metaTag(attribute, name, content) {
-  return `    <meta ${attribute}="${escapeHtmlAttribute(name)}" content="${escapeHtmlAttribute(content)}" />`;
-}
-
-/**
- * Render the crawler-facing HTML document.
- *
- * @param {object} params
- * @param {object|null} params.video      Normalized video object, or null.
- * @param {string} params.shareUrl        Canonical `/?v=<nevent>` URL.
- * @param {string} [params.embedUrl]      `/embed.html?pointer=<nevent>` player URL.
- * @param {object} params.fallback        Site-wide defaults (title/description/image/url).
- * @param {object} [params.gate]          Result of isPubliclyShareable().
- * @returns {string} A complete HTML document.
- */
-export function renderOgHtml({
-  video = null,
-  shareUrl = "",
-  embedUrl = "",
-  fallback = {},
-  gate = null,
-} = {}) {
-  const siteName = normalizeText(fallback.siteName || "bitvid", 60);
-  const fallbackTitle = normalizeText(
-    fallback.title || "bitvid - Decentralized Video Sharing",
-    MAX_TITLE_LENGTH
-  );
-  const fallbackDescription = normalizeText(
-    fallback.description || "Decentralized video sharing on Nostr.",
-    MAX_DESCRIPTION_LENGTH
-  );
-  const fallbackImage = sanitizeAbsoluteUrl(fallback.image);
-  const canonical = sanitizeAbsoluteUrl(shareUrl) || sanitizeAbsoluteUrl(fallback.url);
-
-  const decision = gate || isPubliclyShareable(video);
-  const useVideo = decision.allowed === true;
-
-  const title = useVideo
-    ? normalizeText(video.title, MAX_TITLE_LENGTH) || fallbackTitle
-    : fallbackTitle;
-  const description = useVideo
-    ? normalizeText(video.description, MAX_DESCRIPTION_LENGTH) ||
-      fallbackDescription
-    : fallbackDescription;
-  const image = useVideo
-    ? sanitizeAbsoluteUrl(video.thumbnail) || fallbackImage
-    : fallbackImage;
-  const player = useVideo ? sanitizeAbsoluteUrl(embedUrl) : "";
-
-  const lines = [
-    "<!doctype html>",
-    '<html lang="en">',
-    "  <head>",
-    '    <meta charset="utf-8" />',
-    '    <meta name="viewport" content="width=device-width, initial-scale=1" />',
-    `    <title>${escapeHtmlAttribute(title)}</title>`,
-  ];
-
-  if (canonical) {
-    lines.push(`    <link rel="canonical" href="${escapeHtmlAttribute(canonical)}" />`);
-  }
-
-  lines.push(metaTag("name", "description", description));
-  lines.push(metaTag("property", "og:site_name", siteName));
-  lines.push(metaTag("property", "og:type", useVideo ? "video.other" : "website"));
-  lines.push(metaTag("property", "og:title", title));
-  lines.push(metaTag("property", "og:description", description));
-  if (canonical) {
-    lines.push(metaTag("property", "og:url", canonical));
-  }
-  if (image) {
-    lines.push(metaTag("property", "og:image", image));
-    lines.push(metaTag("property", "og:image:alt", title));
-  }
-
-  if (player) {
-    // A player card is what makes a shared bitvid link behave like a YouTube
-    // link: the video plays inline in the timeline instead of showing a still.
-    lines.push(metaTag("property", "og:video:url", player));
-    lines.push(metaTag("property", "og:video:secure_url", player));
-    lines.push(metaTag("property", "og:video:type", "text/html"));
-    lines.push(metaTag("property", "og:video:width", String(DEFAULT_PLAYER_WIDTH)));
-    lines.push(metaTag("property", "og:video:height", String(DEFAULT_PLAYER_HEIGHT)));
-    lines.push(metaTag("name", "twitter:card", "player"));
-    lines.push(metaTag("name", "twitter:player", player));
-    lines.push(metaTag("name", "twitter:player:width", String(DEFAULT_PLAYER_WIDTH)));
-    lines.push(metaTag("name", "twitter:player:height", String(DEFAULT_PLAYER_HEIGHT)));
-  } else {
-    lines.push(metaTag("name", "twitter:card", image ? "summary_large_image" : "summary"));
-  }
-
-  lines.push(metaTag("name", "twitter:title", title));
-  lines.push(metaTag("name", "twitter:description", description));
-  if (image) {
-    lines.push(metaTag("name", "twitter:image", image));
-  }
-
-  lines.push("  </head>");
-  lines.push("  <body>");
-  // A human should never land here (only crawler user-agents are rewritten),
-  // but if one does, give them a real link rather than a blank page.
-  lines.push(
-    canonical
-      ? `    <p><a href="${escapeHtmlAttribute(canonical)}">${escapeHtmlAttribute(title)}</a></p>`
-      : `    <p>${escapeHtmlAttribute(title)}</p>`
-  );
-  lines.push("  </body>");
-  lines.push("</html>");
-
-  return `${lines.join("\n")}\n`;
-}
-
-// Conservative crawler match. Being wrong in the "not a bot" direction is free
-// (the visitor gets the normal SPA); being wrong the other way would serve a
-// human this stub page, so the pattern stays narrow and explicit.
-export const CRAWLER_USER_AGENT_PATTERN =
-  /(facebookexternalhit|twitterbot|slackbot|discordbot|telegrambot|whatsapp|linkedinbot|pinterest|redditbot|embedly|quora link preview|nostrbot|primal|iframely|opengraph|mastodon|bluesky|skypeuripreview|vkshare|googlebot|bingbot|applebot|yandexbot|duckduckbot|baiduspider|petalbot|semrushbot|ahrefsbot|developers\.google\.com\/\+\/web\/snippet)/i;
-
-export function isCrawlerUserAgent(userAgent) {
-  return typeof userAgent === "string"
-    ? CRAWLER_USER_AGENT_PATTERN.test(userAgent)
-    : false;
-}

api/og.js

@@ -1,273 +0,0 @@
-// Vercel serverless handler: renders per-video OpenGraph / Twitter-player tags
-// for crawlers hitting `/?v=<nevent>`.
-//
-// Nothing is pre-generated and nothing is persisted. This is a stateless
-// function invoked per crawler request; `dist/` is byte-identical with or
-// without it. The only caching is the CDN edge cache via Cache-Control below.
-//
-// This must never become load-bearing for the app: real users are not routed
-// here (see the user-agent rewrite in vercel.json), and a static/nsite deploy
-// without any functions keeps working exactly as it does today, just with the
-// site-wide card.
-
-import { nip19 } from "nostr-tools";
-import { SimplePool, useWebSocketImplementation } from "nostr-tools/pool";
-import WebSocket from "ws";
-
-import {
-  isCrawlerUserAgent,
-  isPubliclyShareable,
-  parseVideoEvent,
-  renderOgHtml,
-} from "./_lib/ogRenderer.mjs";
-
-// Imported, not duplicated: these modules are plain ESM with no DOM access, so
-// the function reads the SAME admin-list identity and relay set the browser
-// does. A hardcoded copy would silently drift the moment an operator retunes
-// the instance, and the failure mode (previews gated forever, or worse, a stale
-// whitelist) would be invisible.
-import {
-  ADMIN_LIST_NAMESPACE,
-  ADMIN_SUPER_NPUB,
-} from "../js/config.js";
-import { DEFAULT_RELAY_URLS } from "../js/nostr/toolkit.js";
-import { ADMIN_LIST_IDENTIFIERS } from "../js/nostrEventSchemas.js";
-
-useWebSocketImplementation(WebSocket);
-
-const RELAYS = Array.from(DEFAULT_RELAY_URLS);
-
-// Admin moderation lists are addressable kind-30000 sets published by the
-// instance's super admin (js/adminListStore.js).
-const ADMIN_LIST_KIND = 30000;
-
-// Measured: a COLD pool's first read across these relays can take ~3s (WSS
-// handshake + REQ round trip on four connections). 1.5s and 2.5s both cut it
-// off and served the generic card every time. Twitter allows ~5s and Facebook
-// ~10s, so 4s buys a correct card on a cold container while still leaving
-// headroom under Vercel's function limit. Warm containers answer in <600ms.
-const RELAY_TIMEOUT_MS = 4000;
-
-// Admin lists are identical for every request, so re-reading them on each crawl
-// is pure waste (and it was starving the video read of its budget). Memoized in
-// module scope: warm invocations skip the relay round trip entirely. This is a
-// per-container, in-memory cache of PUBLIC data that dies with the container —
-// nothing is persisted anywhere.
-const ADMIN_LIST_TTL_MS = 5 * 60 * 1000;
-let adminListCache = { expiresAt: 0, whitelist: null, blacklist: null };
-
-const SITE_ORIGIN = process.env.BITVID_SITE_ORIGIN || "https://bitvid.network";
-const FALLBACK = Object.freeze({
-  siteName: "bitvid",
-  title: "bitvid - Decentralized Video Sharing",
-  description:
-    "bitvid is a decentralized video sharing platform built on Nostr and WebTorrent.",
-  image: `${SITE_ORIGIN}/assets/jpg/bitvid.jpg`,
-  url: SITE_ORIGIN,
-});
-
-function withTimeout(promise, ms, fallbackValue) {
-  return Promise.race([
-    promise.catch(() => fallbackValue),
-    new Promise((resolve) => setTimeout(() => resolve(fallbackValue), ms)),
-  ]);
-}
-
-/** Decode `?v=` (nevent/naddr/note/raw hex) into a relay filter. */
-function pointerToFilter(pointer) {
-  const trimmed = typeof pointer === "string" ? pointer.trim() : "";
-  if (!trimmed) {
-    return null;
-  }
-  if (/^[0-9a-f]{64}$/i.test(trimmed)) {
-    return { ids: [trimmed.toLowerCase()] };
-  }
-  try {
-    const decoded = nip19.decode(trimmed);
-    if (decoded.type === "nevent" && decoded.data?.id) {
-      return { ids: [decoded.data.id] };
-    }
-    if (decoded.type === "note" && typeof decoded.data === "string") {
-      return { ids: [decoded.data] };
-    }
-    if (decoded.type === "naddr" && decoded.data?.identifier) {
-      return {
-        kinds: [decoded.data.kind],
-        authors: [decoded.data.pubkey],
-        "#d": [decoded.data.identifier],
-      };
-    }
-  } catch (err) {
-    // Unparseable pointer -> generic card.
-  }
-  return null;
-}
-
-function extractPubkeySet(event) {
-  const out = new Set();
-  if (!event || !Array.isArray(event.tags)) {
-    return out;
-  }
-  for (const tag of event.tags) {
-    if (!Array.isArray(tag) || tag[0] !== "p" || typeof tag[1] !== "string") {
-      continue;
-    }
-    const value = tag[1].trim().toLowerCase();
-    if (/^[0-9a-f]{64}$/.test(value)) {
-      out.add(value);
-      continue;
-    }
-    try {
-      const decoded = nip19.decode(value);
-      if (decoded.type === "npub" && typeof decoded.data === "string") {
-        out.add(decoded.data.toLowerCase());
-      }
-    } catch (err) {
-      // ignore malformed entries
-    }
-  }
-  return out;
-}
-
-export default async function handler(req, res) {
-  const host = req.headers?.host || new URL(SITE_ORIGIN).host;
-  const proto = req.headers?.["x-forwarded-proto"] || "https";
-  const requestUrl = new URL(req.url || "/", `${proto}://${host}`);
-  const pointer = requestUrl.searchParams.get("v") || "";
-
-  // Derive the origin from the REQUEST, not from a constant. Otherwise every
-  // non-production deployment (unstable, previews) advertises production's
-  // canonical URL and — worse — a twitter:player pointing at production's
-  // embed, so testing a preview link silently exercises the live site.
-  const origin = `${proto}://${host}`;
-
-  const shareUrl = pointer
-    ? `${origin}/?v=${encodeURIComponent(pointer)}`
-    : origin;
-  const embedUrl = pointer
-    ? `${origin}/embed.html?pointer=${encodeURIComponent(pointer)}`
-    : "";
-
-  const renderFallback = (reason) => {
-    // Short TTL: a video may be published, edited or moderated at any time, and
-    // we would rather re-ask the relays than pin a wrong card in someone's CDN.
-    res.setHeader("Content-Type", "text/html; charset=utf-8");
-    res.setHeader("Cache-Control", "public, s-maxage=300, stale-while-revalidate=600");
-    res.setHeader("X-Bitvid-OG", reason);
-    res.status(200).send(
-      renderOgHtml({
-        video: null,
-        shareUrl,
-        fallback: { ...FALLBACK, url: origin, image: `${origin}/assets/jpg/bitvid.jpg` },
-      })
-    );
-  };
-
-  // Defensive: the rewrite should only send crawlers here, but never serve a
-  // human this stub if the rule ever widens.
-  if (!isCrawlerUserAgent(req.headers?.["user-agent"])) {
-    res.setHeader("Cache-Control", "no-store");
-    res.redirect(302, shareUrl);
-    return;
-  }
-
-  const filter = pointerToFilter(pointer);
-  if (!filter) {
-    renderFallback("no-pointer");
-    return;
-  }
-
-  const pool = new SimplePool();
-  let superAdminHex = "";
-  try {
-    const decoded = nip19.decode(ADMIN_SUPER_NPUB);
-    superAdminHex = decoded.type === "npub" ? decoded.data : "";
-  } catch (err) {
-    superAdminHex = "";
-  }
-
-  try {
-    const listFilter = (identifier) => ({
-      kinds: [ADMIN_LIST_KIND],
-      "#d": [`${ADMIN_LIST_NAMESPACE}:${identifier}`],
-      ...(superAdminHex ? { authors: [superAdminHex] } : {}),
-    });
-
-    // One shared deadline across all three reads.
-    const now = Date.now();
-    const adminListsFresh =
-      adminListCache.expiresAt > now && adminListCache.whitelist instanceof Set;
-
-    const [videoEvent, whitelistEvent, blacklistEvent] = await Promise.all([
-      withTimeout(pool.get(RELAYS, filter), RELAY_TIMEOUT_MS, null),
-      adminListsFresh
-        ? Promise.resolve(null)
-        : withTimeout(
-            pool.get(RELAYS, listFilter(ADMIN_LIST_IDENTIFIERS.whitelist)),
-            RELAY_TIMEOUT_MS,
-            null
-          ),
-      adminListsFresh
-        ? Promise.resolve(null)
-        : withTimeout(
-            pool.get(RELAYS, listFilter(ADMIN_LIST_IDENTIFIERS.blacklist)),
-            RELAY_TIMEOUT_MS,
-            null
-          ),
-    ]);
-
-    let whitelist = adminListsFresh ? adminListCache.whitelist : null;
-    let blacklist = adminListsFresh ? adminListCache.blacklist : null;
-    if (!adminListsFresh) {
-      whitelist = extractPubkeySet(whitelistEvent);
-      blacklist = extractPubkeySet(blacklistEvent);
-      // Only cache a whitelist we actually got. Caching an empty one would pin
-      // "whitelist-unavailable" for the whole TTL after a single slow read.
-      if (whitelist.size > 0) {
-        adminListCache = {
-          expiresAt: now + ADMIN_LIST_TTL_MS,
-          whitelist,
-          blacklist,
-        };
-      }
-    }
-
-    const video = parseVideoEvent(videoEvent);
-    if (!video) {
-      renderFallback("event-not-found");
-      return;
-    }
-
-    const gate = isPubliclyShareable(video, {
-      whitelistEnabled: true,
-      whitelist,
-      blacklist,
-    });
-
-    if (!gate.allowed) {
-      renderFallback(`gated:${gate.reason}`);
-      return;
-    }
-
-    res.setHeader("Content-Type", "text/html; charset=utf-8");
-    res.setHeader("Cache-Control", "public, s-maxage=300, stale-while-revalidate=600");
-    res.setHeader("X-Bitvid-OG", "video");
-    res.status(200).send(
-      renderOgHtml({
-        video,
-        shareUrl,
-        embedUrl,
-        fallback: { ...FALLBACK, url: origin, image: `${origin}/assets/jpg/bitvid.jpg` },
-        gate,
-      })
-    );
-  } catch (err) {
-    renderFallback("error");
-  } finally {
-    try {
-      pool.close(RELAYS);
-    } catch (err) {
-      // ignore
-    }
-  }
-}

artifacts/audit/2026-02-21/file-size-report.json

@@ -1,224 +0,0 @@
-{
-  "grandfathered_files": 43,
-  "grandfathered_excess_lines": 45216,
-  "new_oversized_files": 0,
-  "new_excess_lines": 0,
-  "grandfathered_list": [
-    {
-      "path": "js/adminListStore.js",
-      "lines": 1033,
-      "excess": 33
-    },
-    {
-      "path": "js/app/authSessionCoordinator.js",
-      "lines": 1743,
-      "excess": 743
-    },
-    {
-      "path": "js/app/feedCoordinator.js",
-      "lines": 1767,
-      "excess": 767
-    },
-    {
-      "path": "js/app/playbackCoordinator.js",
-      "lines": 1217,
-      "excess": 217
-    },
-    {
-      "path": "js/app.js",
-      "lines": 5133,
-      "excess": 4133
-    },
-    {
-      "path": "js/channelProfile.js",
-      "lines": 5579,
-      "excess": 4579
-    },
-    {
-      "path": "js/feedEngine/stages.js",
-      "lines": 1350,
-      "excess": 350
-    },
-    {
-      "path": "js/historyView.js",
-      "lines": 2547,
-      "excess": 1547
-    },
-    {
-      "path": "js/index.js",
-      "lines": 1409,
-      "excess": 409
-    },
-    {
-      "path": "js/nostr/client.js",
-      "lines": 4001,
-      "excess": 3001
-    },
-    {
-      "path": "js/nostr/managers/SignerManager.js",
-      "lines": 1107,
-      "excess": 107
-    },
-    {
-      "path": "js/nostr/nip46Client.js",
-      "lines": 2104,
-      "excess": 1104
-    },
-    {
-      "path": "js/nostr/nip46Connector.js",
-      "lines": 1094,
-      "excess": 94
-    },
-    {
-      "path": "js/nostr/nip71.js",
-      "lines": 1600,
-      "excess": 600
-    },
-    {
-      "path": "js/nostr/publishHelpers.js",
-      "lines": 1415,
-      "excess": 415
-    },
-    {
-      "path": "js/nostr/watchHistory.js",
-      "lines": 2211,
-      "excess": 1211
-    },
-    {
-      "path": "js/nostrEventSchemas.js",
-      "lines": 3192,
-      "excess": 2192
-    },
-    {
-      "path": "js/payments/nwcClient.js",
-      "lines": 1642,
-      "excess": 642
-    },
-    {
-      "path": "js/services/authService.js",
-      "lines": 1321,
-      "excess": 321
-    },
-    {
-      "path": "js/services/commentThreadService.js",
-      "lines": 1122,
-      "excess": 122
-    },
-    {
-      "path": "js/services/hashtagPreferencesService.js",
-      "lines": 1435,
-      "excess": 435
-    },
-    {
-      "path": "js/services/moderationService.js",
-      "lines": 2557,
-      "excess": 1557
-    },
-    {
-      "path": "js/services/nostrService.js",
-      "lines": 2227,
-      "excess": 1227
-    },
-    {
-      "path": "js/services/playbackService.js",
-      "lines": 1316,
-      "excess": 316
-    },
-    {
-      "path": "js/services/r2Service.js",
-      "lines": 1194,
-      "excess": 194
-    },
-    {
-      "path": "js/state/cache.js",
-      "lines": 1829,
-      "excess": 829
-    },
-    {
-      "path": "js/subscriptions.js",
-      "lines": 2410,
-      "excess": 1410
-    },
-    {
-      "path": "js/ui/applicationBootstrap.js",
-      "lines": 1169,
-      "excess": 169
-    },
-    {
-      "path": "js/ui/components/EditModal.js",
-      "lines": 1130,
-      "excess": 130
-    },
-    {
-      "path": "js/ui/components/RevertModal.js",
-      "lines": 1509,
-      "excess": 509
-    },
-    {
-      "path": "js/ui/components/SimilarContentCard.js",
-      "lines": 1303,
-      "excess": 303
-    },
-    {
-      "path": "js/ui/components/UploadModal.js",
-      "lines": 1320,
-      "excess": 320
-    },
-    {
-      "path": "js/ui/components/VideoCard.js",
-      "lines": 3130,
-      "excess": 2130
-    },
-    {
-      "path": "js/ui/components/VideoModal.js",
-      "lines": 4976,
-      "excess": 3976
-    },
-    {
-      "path": "js/ui/loginModalController.js",
-      "lines": 2574,
-      "excess": 1574
-    },
-    {
-      "path": "js/ui/moreMenuController.js",
-      "lines": 1601,
-      "excess": 601
-    },
-    {
-      "path": "js/ui/overlay/popoverEngine.js",
-      "lines": 1070,
-      "excess": 70
-    },
-    {
-      "path": "js/ui/profileModalController.js",
-      "lines": 5541,
-      "excess": 4541
-    },
-    {
-      "path": "js/ui/views/VideoListView.js",
-      "lines": 1392,
-      "excess": 392
-    },
-    {
-      "path": "js/ui/zapController.js",
-      "lines": 1206,
-      "excess": 206
-    },
-    {
-      "path": "js/userBlocks.js",
-      "lines": 2302,
-      "excess": 1302
-    },
-    {
-      "path": "js/watchHistoryService.js",
-      "lines": 1400,
-      "excess": 400
-    },
-    {
-      "path": "js/webtorrent.js",
-      "lines": 1038,
-      "excess": 38
-    }
-  ],
-  "new_list": []
-}

artifacts/audit/2026-02-21/innerhtml-report.json

@@ -1,147 +0,0 @@
-{
-  "total_assignments": 37,
-  "files_count": 28,
-  "top_offenders": [
-    {
-      "path": "js/ui/dm/DMSettingsModalController.js",
-      "count": 3,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/loginModalController.js",
-      "count": 3,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/views/VideoListView.js",
-      "count": 3,
-      "is_new": false
-    },
-    {
-      "path": "js/viewManager.js",
-      "count": 3,
-      "is_new": false
-    },
-    {
-      "path": "js/utils/qrcode.js",
-      "count": 2,
-      "is_new": false
-    },
-    {
-      "path": "js/app/feedCoordinator.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/app.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/docsView.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/exploreView.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/forYouView.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/index.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/kidsView.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/EditModal.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/EmbedVideoModal.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/EventDetailsModal.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/UploadModal.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/VideoModal.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/nip71FormManager.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/AppShell.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/Composer.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/ConversationList.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/DMRelaySettings.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/MessageThread.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/NotificationCenter.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/moreMenuController.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/profileModalController.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/subscriptionHistoryController.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/videoListViewController.js",
-      "count": 1,
-      "is_new": false
-    }
-  ],
-  "violations": []
-}

artifacts/audit/2026-02-21/lint-report.json

@@ -1,11 +0,0 @@
-{
-  "total_failures": 0,
-  "files_with_errors": [],
-  "skipped_checks": [
-    {
-      "check": "lint:assets",
-      "reason": "Missing dist/asset-manifest.json.",
-      "details": "asset reference check (build required)."
-    }
-  ]
-}

artifacts/audit/2026-02-21/raw-check-file-size.log

@@ -1,47 +0,0 @@
-
-43 grandfathered oversized file(s):
-  ⚠ grandfathered: js/adminListStore.js (1033 lines)
-  ⚠ grandfathered: js/app/authSessionCoordinator.js (1743 lines)
-  ⚠ grandfathered: js/app/feedCoordinator.js (1767 lines)
-  ⚠ grandfathered: js/app/playbackCoordinator.js (1217 lines)
-  ⚠ grandfathered: js/app.js (5133 lines)
-  ⚠ grandfathered: js/channelProfile.js (5579 lines)
-  ⚠ grandfathered: js/feedEngine/stages.js (1350 lines)
-  ⚠ grandfathered: js/historyView.js (2547 lines)
-  ⚠ grandfathered: js/index.js (1409 lines)
-  ⚠ grandfathered: js/nostr/client.js (4001 lines)
-  ⚠ grandfathered: js/nostr/managers/SignerManager.js (1107 lines)
-  ⚠ grandfathered: js/nostr/nip46Client.js (2104 lines)
-  ⚠ grandfathered: js/nostr/nip46Connector.js (1094 lines)
-  ⚠ grandfathered: js/nostr/nip71.js (1600 lines)
-  ⚠ grandfathered: js/nostr/publishHelpers.js (1415 lines)
-  ⚠ grandfathered: js/nostr/watchHistory.js (2211 lines)
-  ⚠ grandfathered: js/nostrEventSchemas.js (3192 lines)
-  ⚠ grandfathered: js/payments/nwcClient.js (1642 lines)
-  ⚠ grandfathered: js/services/authService.js (1321 lines)
-  ⚠ grandfathered: js/services/commentThreadService.js (1122 lines)
-  ⚠ grandfathered: js/services/hashtagPreferencesService.js (1435 lines)
-  ⚠ grandfathered: js/services/moderationService.js (2557 lines)
-  ⚠ grandfathered: js/services/nostrService.js (2227 lines)
-  ⚠ grandfathered: js/services/playbackService.js (1316 lines)
-  ⚠ grandfathered: js/services/r2Service.js (1194 lines)
-  ⚠ grandfathered: js/state/cache.js (1829 lines)
-  ⚠ grandfathered: js/subscriptions.js (2410 lines)
-  ⚠ grandfathered: js/ui/applicationBootstrap.js (1169 lines)
-  ⚠ grandfathered: js/ui/components/EditModal.js (1130 lines)
-  ⚠ grandfathered: js/ui/components/RevertModal.js (1509 lines)
-  ⚠ grandfathered: js/ui/components/SimilarContentCard.js (1303 lines)
-  ⚠ grandfathered: js/ui/components/UploadModal.js (1320 lines)
-  ⚠ grandfathered: js/ui/components/VideoCard.js (3130 lines)
-  ⚠ grandfathered: js/ui/components/VideoModal.js (4976 lines)
-  ⚠ grandfathered: js/ui/loginModalController.js (2574 lines)
-  ⚠ grandfathered: js/ui/moreMenuController.js (1601 lines)
-  ⚠ grandfathered: js/ui/overlay/popoverEngine.js (1070 lines)
-  ⚠ grandfathered: js/ui/profileModalController.js (5541 lines)
-  ⚠ grandfathered: js/ui/views/VideoListView.js (1392 lines)
-  ⚠ grandfathered: js/ui/zapController.js (1206 lines)
-  ⚠ grandfathered: js/userBlocks.js (2302 lines)
-  ⚠ grandfathered: js/watchHistoryService.js (1400 lines)
-  ⚠ grandfathered: js/webtorrent.js (1038 lines)
-
-No violations. 43 grandfathered file(s) remain as decomposition targets.

artifacts/audit/2026-02-21/raw-lint.log

@@ -1,48 +0,0 @@
-
-> [email protected] lint
-> npm run lint:css && npm run lint:hex && npm run lint:inline-styles && npm run lint:tokens && npm run lint:tailwind-brackets && npm run lint:tailwind-colors && npm run lint:file-size && npm run lint:innerhtml && npm run lint:assets && npm run lint:sw-compat
-
-
-> [email protected] lint:css
-> stylelint css/tailwind.source.css css/tokens.css css/docs.css
-
-
-> [email protected] lint:hex
-> node scripts/check-hex.js
-
-
-> [email protected] lint:inline-styles
-> node scripts/check-inline-styles.mjs
-
-No inline style usage found.
-
-> [email protected] lint:tokens
-> node scripts/check-design-tokens.mjs --check=tokens
-
-
-> [email protected] lint:tailwind-brackets
-> node scripts/check-design-tokens.mjs --check=brackets
-
-
-> [email protected] lint:tailwind-colors
-> node scripts/check-tailwind-colors.mjs
-
-
-> [email protected] lint:file-size
-> node scripts/check-file-size.mjs
-
-
-> [email protected] lint:innerhtml
-> node scripts/check-innerhtml.mjs
-
-
-> [email protected] lint:assets
-> node scripts/check-asset-references.mjs
-
-[lint:assets] Missing dist/asset-manifest.json. Skipping asset reference check (build required).
-
-> [email protected] lint:sw-compat
-> node scripts/check-sw-compat.mjs
-
-[sw-compat] Skipping check: unable to determine HEAD^ or git history unavailable.
-[sw-compat] No commit delta found; skipping compatibility check.

artifacts/audit/2026-02-21/summary.md

@@ -1,47 +0,0 @@
-# Audit Report — 2026-02-21 (unstable)
-
-**Summary**
-
-* **Date:** 2026-02-21 15:15 UTC
-* **Node:** v22.22.0 / **OS:** Linux
-* **Status:** ✅ Clean. Significant improvements in technical debt metrics.
-
-**Metrics**
-
-*   **Grandfathered oversized files:** 43 files
-    *   Total excess lines: **45,216** (was 49,463)
-    *   Delta: **-4,247 lines** (Improvement)
-*   **New oversized files:** 0 files (total excess lines: 0)
-*   **Total innerHTML assignments:** **37** (was 87)
-    *   Delta: **-50 assignments** (Improvement)
-    *   Files with innerHTML: 28 (was 34)
-
-    **Top offenders (innerHTML):**
-    1.  `js/ui/dm/DMSettingsModalController.js` — 3
-    2.  `js/ui/loginModalController.js` — 3
-    3.  `js/ui/views/VideoListView.js` — 3
-    4.  `js/viewManager.js` — 3
-    5.  `js/utils/qrcode.js` — 2
-
-*   **Lint failures:** 0 (files: 0)
-
-**Delta vs previous (2026-02-12)**
-
-*   **Grandfathered:** 0 files, **-4,247** excess lines
-*   **InnerHTML:** **-50** total assignments, **-6** files
-*   **Lint:** 0 failures
-
-**High-priority items**
-
-*   No new regressions.
-*   Continue targeting the remaining 43 grandfathered files for decomposition.
-*   Continue migrating the remaining 37 `innerHTML` assignments to safe DOM APIs.
-
-**Artifacts**
-
-*   `file-size-report.json`
-*   `innerhtml-report.json`
-*   `lint-report.json`
-*   `raw-check-file-size.log`
-*   `raw-check-innerhtml.log`
-*   `raw-lint.log`

artifacts/audit/2026-02-24/file-size-report.json

@@ -1,224 +0,0 @@
-{
-  "grandfathered_files": 43,
-  "grandfathered_excess_lines": 45288,
-  "new_oversized_files": 0,
-  "new_excess_lines": 0,
-  "grandfathered_list": [
-    {
-      "path": "js/adminListStore.js",
-      "lines": 1078,
-      "excess": 78
-    },
-    {
-      "path": "js/app/authSessionCoordinator.js",
-      "lines": 1770,
-      "excess": 770
-    },
-    {
-      "path": "js/app/feedCoordinator.js",
-      "lines": 1767,
-      "excess": 767
-    },
-    {
-      "path": "js/app/playbackCoordinator.js",
-      "lines": 1217,
-      "excess": 217
-    },
-    {
-      "path": "js/app.js",
-      "lines": 5077,
-      "excess": 4077
-    },
-    {
-      "path": "js/channelProfile.js",
-      "lines": 5579,
-      "excess": 4579
-    },
-    {
-      "path": "js/feedEngine/stages.js",
-      "lines": 1388,
-      "excess": 388
-    },
-    {
-      "path": "js/historyView.js",
-      "lines": 2613,
-      "excess": 1613
-    },
-    {
-      "path": "js/index.js",
-      "lines": 1409,
-      "excess": 409
-    },
-    {
-      "path": "js/nostr/client.js",
-      "lines": 4004,
-      "excess": 3004
-    },
-    {
-      "path": "js/nostr/managers/SignerManager.js",
-      "lines": 1135,
-      "excess": 135
-    },
-    {
-      "path": "js/nostr/nip46Client.js",
-      "lines": 2104,
-      "excess": 1104
-    },
-    {
-      "path": "js/nostr/nip46Connector.js",
-      "lines": 1094,
-      "excess": 94
-    },
-    {
-      "path": "js/nostr/nip71.js",
-      "lines": 1600,
-      "excess": 600
-    },
-    {
-      "path": "js/nostr/publishHelpers.js",
-      "lines": 1415,
-      "excess": 415
-    },
-    {
-      "path": "js/nostr/watchHistory.js",
-      "lines": 2335,
-      "excess": 1335
-    },
-    {
-      "path": "js/nostrEventSchemas.js",
-      "lines": 3192,
-      "excess": 2192
-    },
-    {
-      "path": "js/payments/nwcClient.js",
-      "lines": 1642,
-      "excess": 642
-    },
-    {
-      "path": "js/services/authService.js",
-      "lines": 1343,
-      "excess": 343
-    },
-    {
-      "path": "js/services/commentThreadService.js",
-      "lines": 1122,
-      "excess": 122
-    },
-    {
-      "path": "js/services/hashtagPreferencesService.js",
-      "lines": 1451,
-      "excess": 451
-    },
-    {
-      "path": "js/services/moderationService.js",
-      "lines": 2140,
-      "excess": 1140
-    },
-    {
-      "path": "js/services/nostrService.js",
-      "lines": 2227,
-      "excess": 1227
-    },
-    {
-      "path": "js/services/playbackService.js",
-      "lines": 1316,
-      "excess": 316
-    },
-    {
-      "path": "js/services/r2Service.js",
-      "lines": 1194,
-      "excess": 194
-    },
-    {
-      "path": "js/state/cache.js",
-      "lines": 1829,
-      "excess": 829
-    },
-    {
-      "path": "js/subscriptions.js",
-      "lines": 2437,
-      "excess": 1437
-    },
-    {
-      "path": "js/ui/applicationBootstrap.js",
-      "lines": 1169,
-      "excess": 169
-    },
-    {
-      "path": "js/ui/components/EditModal.js",
-      "lines": 1130,
-      "excess": 130
-    },
-    {
-      "path": "js/ui/components/RevertModal.js",
-      "lines": 1509,
-      "excess": 509
-    },
-    {
-      "path": "js/ui/components/SimilarContentCard.js",
-      "lines": 1303,
-      "excess": 303
-    },
-    {
-      "path": "js/ui/components/UploadModal.js",
-      "lines": 1326,
-      "excess": 326
-    },
-    {
-      "path": "js/ui/components/VideoCard.js",
-      "lines": 3141,
-      "excess": 2141
-    },
-    {
-      "path": "js/ui/components/VideoModal.js",
-      "lines": 4976,
-      "excess": 3976
-    },
-    {
-      "path": "js/ui/loginModalController.js",
-      "lines": 2574,
-      "excess": 1574
-    },
-    {
-      "path": "js/ui/moreMenuController.js",
-      "lines": 1601,
-      "excess": 601
-    },
-    {
-      "path": "js/ui/overlay/popoverEngine.js",
-      "lines": 1070,
-      "excess": 70
-    },
-    {
-      "path": "js/ui/profileModalController.js",
-      "lines": 5572,
-      "excess": 4572
-    },
-    {
-      "path": "js/ui/views/VideoListView.js",
-      "lines": 1392,
-      "excess": 392
-    },
-    {
-      "path": "js/ui/zapController.js",
-      "lines": 1206,
-      "excess": 206
-    },
-    {
-      "path": "js/userBlocks.js",
-      "lines": 2403,
-      "excess": 1403
-    },
-    {
-      "path": "js/watchHistoryService.js",
-      "lines": 1400,
-      "excess": 400
-    },
-    {
-      "path": "js/webtorrent.js",
-      "lines": 1038,
-      "excess": 38
-    }
-  ],
-  "new_list": []
-}

artifacts/audit/2026-02-24/innerhtml-report.json

@@ -1,147 +0,0 @@
-{
-  "total_assignments": 37,
-  "files_count": 28,
-  "top_offenders": [
-    {
-      "path": "js/ui/dm/DMSettingsModalController.js",
-      "count": 3,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/loginModalController.js",
-      "count": 3,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/views/VideoListView.js",
-      "count": 3,
-      "is_new": false
-    },
-    {
-      "path": "js/viewManager.js",
-      "count": 3,
-      "is_new": false
-    },
-    {
-      "path": "js/utils/qrcode.js",
-      "count": 2,
-      "is_new": false
-    },
-    {
-      "path": "js/app/feedCoordinator.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/app.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/docsView.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/exploreView.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/forYouView.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/index.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/kidsView.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/EditModal.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/EmbedVideoModal.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/EventDetailsModal.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/UploadModal.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/VideoModal.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/components/nip71FormManager.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/AppShell.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/Composer.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/ConversationList.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/DMRelaySettings.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/MessageThread.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/dm/NotificationCenter.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/moreMenuController.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/profileModalController.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/subscriptionHistoryController.js",
-      "count": 1,
-      "is_new": false
-    },
-    {
-      "path": "js/ui/videoListViewController.js",
-      "count": 1,
-      "is_new": false
-    }
-  ],
-  "violations": []
-}

artifacts/audit/2026-02-24/lint-report.json

@@ -1,11 +0,0 @@
-{
-  "total_failures": 0,
-  "files_with_errors": [],
-  "skipped_checks": [
-    {
-      "check": "lint:assets",
-      "reason": "Missing dist/asset-manifest.json.",
-      "details": "asset reference check (build required)."
-    }
-  ]
-}

artifacts/audit/2026-02-24/raw-check-file-size.log

@@ -1,47 +0,0 @@
-
-43 grandfathered oversized file(s):
-  ⚠ grandfathered: js/adminListStore.js (1078 lines)
-  ⚠ grandfathered: js/app/authSessionCoordinator.js (1770 lines)
-  ⚠ grandfathered: js/app/feedCoordinator.js (1767 lines)
-  ⚠ grandfathered: js/app/playbackCoordinator.js (1217 lines)
-  ⚠ grandfathered: js/app.js (5077 lines)
-  ⚠ grandfathered: js/channelProfile.js (5579 lines)
-  ⚠ grandfathered: js/feedEngine/stages.js (1388 lines)
-  ⚠ grandfathered: js/historyView.js (2613 lines)
-  ⚠ grandfathered: js/index.js (1409 lines)
-  ⚠ grandfathered: js/nostr/client.js (4004 lines)
-  ⚠ grandfathered: js/nostr/managers/SignerManager.js (1135 lines)
-  ⚠ grandfathered: js/nostr/nip46Client.js (2104 lines)
-  ⚠ grandfathered: js/nostr/nip46Connector.js (1094 lines)
-  ⚠ grandfathered: js/nostr/nip71.js (1600 lines)
-  ⚠ grandfathered: js/nostr/publishHelpers.js (1415 lines)
-  ⚠ grandfathered: js/nostr/watchHistory.js (2335 lines)
-  ⚠ grandfathered: js/nostrEventSchemas.js (3192 lines)
-  ⚠ grandfathered: js/payments/nwcClient.js (1642 lines)
-  ⚠ grandfathered: js/services/authService.js (1343 lines)
-  ⚠ grandfathered: js/services/commentThreadService.js (1122 lines)
-  ⚠ grandfathered: js/services/hashtagPreferencesService.js (1451 lines)
-  ⚠ grandfathered: js/services/moderationService.js (2140 lines)
-  ⚠ grandfathered: js/services/nostrService.js (2227 lines)
-  ⚠ grandfathered: js/services/playbackService.js (1316 lines)
-  ⚠ grandfathered: js/services/r2Service.js (1194 lines)
-  ⚠ grandfathered: js/state/cache.js (1829 lines)
-  ⚠ grandfathered: js/subscriptions.js (2437 lines)
-  ⚠ grandfathered: js/ui/applicationBootstrap.js (1169 lines)
-  ⚠ grandfathered: js/ui/components/EditModal.js (1130 lines)
-  ⚠ grandfathered: js/ui/components/RevertModal.js (1509 lines)
-  ⚠ grandfathered: js/ui/components/SimilarContentCard.js (1303 lines)
-  ⚠ grandfathered: js/ui/components/UploadModal.js (1326 lines)
-  ⚠ grandfathered: js/ui/components/VideoCard.js (3141 lines)
-  ⚠ grandfathered: js/ui/components/VideoModal.js (4976 lines)
-  ⚠ grandfathered: js/ui/loginModalController.js (2574 lines)
-  ⚠ grandfathered: js/ui/moreMenuController.js (1601 lines)
-  ⚠ grandfathered: js/ui/overlay/popoverEngine.js (1070 lines)
-  ⚠ grandfathered: js/ui/profileModalController.js (5572 lines)
-  ⚠ grandfathered: js/ui/views/VideoListView.js (1392 lines)
-  ⚠ grandfathered: js/ui/zapController.js (1206 lines)
-  ⚠ grandfathered: js/userBlocks.js (2403 lines)
-  ⚠ grandfathered: js/watchHistoryService.js (1400 lines)
-  ⚠ grandfathered: js/webtorrent.js (1038 lines)
-
-No violations. 43 grandfathered file(s) remain as decomposition targets.

artifacts/audit/2026-02-24/raw-check-innerhtml.log

@@ -1,30 +0,0 @@
-innerHTML usage: 37 assignments across 28 files
-
-  js/ui/dm/DMSettingsModalController.js: 3
-  js/ui/loginModalController.js: 3
-  js/ui/views/VideoListView.js: 3
-  js/viewManager.js: 3
-  js/utils/qrcode.js: 2
-  js/app/feedCoordinator.js: 1
-  js/app.js: 1
-  js/docsView.js: 1
-  js/exploreView.js: 1
-  js/forYouView.js: 1
-  js/index.js: 1
-  js/kidsView.js: 1
-  js/ui/components/EditModal.js: 1
-  js/ui/components/EmbedVideoModal.js: 1
-  js/ui/components/EventDetailsModal.js: 1
-  js/ui/components/UploadModal.js: 1
-  js/ui/components/VideoModal.js: 1
-  js/ui/components/nip71FormManager.js: 1
-  js/ui/dm/AppShell.js: 1
-  js/ui/dm/Composer.js: 1
-  js/ui/dm/ConversationList.js: 1
-  js/ui/dm/DMRelaySettings.js: 1
-  js/ui/dm/MessageThread.js: 1
-  js/ui/dm/NotificationCenter.js: 1
-  js/ui/moreMenuController.js: 1
-  js/ui/profileModalController.js: 1
-  js/ui/subscriptionHistoryController.js: 1
-  js/ui/videoListViewController.js: 1

artifacts/audit/2026-02-24/raw-lint.log

@@ -1,48 +0,0 @@
-
-> [email protected] lint
-> npm run lint:css && npm run lint:hex && npm run lint:inline-styles && npm run lint:tokens && npm run lint:tailwind-brackets && npm run lint:tailwind-colors && npm run lint:file-size && npm run lint:innerhtml && npm run lint:assets && npm run lint:sw-compat
-
-
-> [email protected] lint:css
-> stylelint css/tailwind.source.css css/tokens.css css/docs.css
-
-
-> [email protected] lint:hex
-> node scripts/check-hex.js
-
-
-> [email protected] lint:inline-styles
-> node scripts/check-inline-styles.mjs
-
-No inline style usage found.
-
-> [email protected] lint:tokens
-> node scripts/check-design-tokens.mjs --check=tokens
-
-
-> [email protected] lint:tailwind-brackets
-> node scripts/check-design-tokens.mjs --check=brackets
-
-
-> [email protected] lint:tailwind-colors
-> node scripts/check-tailwind-colors.mjs
-
-
-> [email protected] lint:file-size
-> node scripts/check-file-size.mjs
-
-
-> [email protected] lint:innerhtml
-> node scripts/check-innerhtml.mjs
-
-
-> [email protected] lint:assets
-> node scripts/check-asset-references.mjs
-
-[lint:assets] Missing dist/asset-manifest.json. Skipping asset reference check (build required).
-
-> [email protected] lint:sw-compat
-> node scripts/check-sw-compat.mjs
-
-[sw-compat] Skipping check: unable to determine HEAD^ or git history unavailable.
-[sw-compat] No commit delta found; skipping compatibility check.

artifacts/ci-flakes-20260221.md

@@ -1,20 +0,0 @@
-# CI Health Report - 2026-02-21 (Evening Run)
-
-## Summary
-- **Agent:** ci-health-agent
-- **Command:** `npm run test:unit`, `npm run test:dm:unit`, `npm run test:dm:integration`
-- **Status:** PASS (with one timeout)
-- **Flakes Detected:** 0 (Reliable reproduction failed)
-
-## Details
-Executed the unit test suite 2 times locally:
-- **Run 1:** Passed successfully.
-- **Run 2:** Timed out after 400s. The log ended during `tests/nostr/nip46Connector.test.mjs`.
-
-Targeted execution of `tests/nostr/nip46Connector.test.mjs` (10 times) passed reliably and quickly (~30ms per run). The timeout in Run 2 is attributed to environmental load (running multiple suites in parallel or resource contention) rather than a code flake.
-
-DM tests (`test:dm:unit`, `test:dm:integration`) passed successfully.
-
-## Recommendations
-- Monitor `tests/nostr/nip46Connector.test.mjs` in CI for potential hangs, though none were reproduced in isolation.
-- `tests/visual/overlay-layers.spec.ts` contains potential timing issues (`waitForTimeout`) but was not modified as visual tests cannot be verified in the current environment.

artifacts/deps-report.md

@@ -1,33 +1,28 @@
-# Dependency Report - 2026-02-20
+# Dependency Audit Report
 
-## Vulnerabilities
-### HIGH (3)
-- **minimatch**: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
-  - Path: Direct dependency? No
-  - Fix Available: true
-- **serve**: ajv, serve-handler
-  - Path: Direct dependency? Yes
-  - Fix Available: {"name":"serve","version":"6.5.8","isSemVerMajor":true}
-- **serve-handler**: minimatch
-  - Path: Direct dependency? No
-  - Fix Available: true
-### MODERATE (1)
-- **ajv**: ajv has ReDoS when using `$data` option
+## 1. Vulnerability Summary
+- Total Vulnerabilities: 0
+- Critical: 0
+- High: 0
+- Moderate: 0
+- Low: 0
 
-## Outdated Packages
-### Major Updates (Risky)
-- **pixelmatch** (undefined): 5.3.0 -> 7.1.0
-- **postcss-import** (undefined): 15.1.0 -> 16.1.1
-- **prettier-plugin-tailwindcss** (undefined): 0.6.14 -> 0.7.2
-- **stylelint-config-standard** (undefined): 36.0.1 -> 40.0.0
-- **tailwindcss** (undefined): 3.4.19 -> 4.2.0
+No vulnerabilities found.
 
-### Minor Updates (Safe-ish)
-- **nostr-tools** (undefined): 2.19.4 -> 2.23.1 (Latest: 2.23.1)
-- **stylelint** (undefined): 16.12.0 -> 16.26.1 (Latest: 17.3.0)
+## 2. Outdated Packages
+### Safe Upgrades (Patch/Minor)
+- **jsdom** (dependencies): 28.0.0 -> 28.1.0 (Latest: 28.1.0)
+- **stylelint** (dependencies): 16.12.0 -> 16.26.1 (Latest: 17.3.0)
 
-### Patch Updates (Safe)
+### Major Upgrades (Risky)
+- **pixelmatch** (dependencies): 5.3.0 -> 7.1.0
+- **postcss-import** (dependencies): 15.1.0 -> 16.1.1
+- **prettier-plugin-tailwindcss** (dependencies): 0.6.14 -> 0.7.2
+- **stylelint-config-standard** (dependencies): 36.0.1 -> 40.0.0
+- **tailwindcss** (dependencies): 3.4.19 -> 4.1.18
 
-## Triage & Actions
-- [ ] **HIGH**: Check for safe upgrades for minimatch, serve, serve-handler.
-- [ ] **Safe Candidates**: nostr-tools, stylelint
+### Security/Protocol Libraries (Manual Review Required)
+- **nostr-tools** (dependencies): 2.19.4 -> 2.23.1 (Latest: 2.23.1)
+
+## 3. Recommendations
+- **Action Item**: Attempt safe upgrade of `jsdom` from `28.0.0` to `28.1.0`.

artifacts/npm-audit.json

@@ -1,122 +1,22 @@
 {
   "auditReportVersion": 2,
-  "vulnerabilities": {
-    "ajv": {
-      "name": "ajv",
-      "severity": "moderate",
-      "isDirect": false,
-      "via": [
-        {
-          "source": 1113214,
-          "name": "ajv",
-          "dependency": "ajv",
-          "title": "ajv has ReDoS when using `$data` option",
-          "url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6",
-          "severity": "moderate",
-          "cwe": [
-            "CWE-400"
-          ],
-          "cvss": {
-            "score": 0,
-            "vectorString": null
-          },
-          "range": "<8.18.0"
-        }
-      ],
-      "effects": [
-        "serve"
-      ],
-      "range": "<8.18.0",
-      "nodes": [
-        "node_modules/ajv"
-      ],
-      "fixAvailable": {
-        "name": "serve",
-        "version": "6.5.8",
-        "isSemVerMajor": true
-      }
-    },
-    "minimatch": {
-      "name": "minimatch",
-      "severity": "high",
-      "isDirect": false,
-      "via": [
-        {
-          "source": 1113296,
-          "name": "minimatch",
-          "dependency": "minimatch",
-          "title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
-          "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26",
-          "severity": "high",
-          "cwe": [
-            "CWE-1333"
-          ],
-          "cvss": {
-            "score": 0,
-            "vectorString": null
-          },
-          "range": "<10.2.1"
-        }
-      ],
-      "effects": [
-        "serve-handler"
-      ],
-      "range": "<10.2.1",
-      "nodes": [
-        "node_modules/minimatch"
-      ],
-      "fixAvailable": true
-    },
-    "serve": {
-      "name": "serve",
-      "severity": "high",
-      "isDirect": true,
-      "via": [
-        "ajv",
-        "serve-handler"
-      ],
-      "effects": [],
-      "range": ">=7.0.0",
-      "nodes": [
-        "node_modules/serve"
-      ],
-      "fixAvailable": {
-        "name": "serve",
-        "version": "6.5.8",
-        "isSemVerMajor": true
-      }
-    },
-    "serve-handler": {
-      "name": "serve-handler",
-      "severity": "high",
-      "isDirect": false,
-      "via": [
-        "minimatch"
-      ],
-      "effects": [],
-      "range": ">=1.1.0",
-      "nodes": [
-        "node_modules/serve-handler"
-      ],
-      "fixAvailable": true
-    }
-  },
+  "vulnerabilities": {},
   "metadata": {
     "vulnerabilities": {
       "info": 0,
       "low": 0,
-      "moderate": 1,
-      "high": 3,
+      "moderate": 0,
+      "high": 0,
       "critical": 0,
-      "total": 4
+      "total": 0
     },
     "dependencies": {
       "prod": 111,
-      "dev": 340,
+      "dev": 337,
       "optional": 53,
       "peer": 0,
       "peerOptional": 0,
-      "total": 477
+      "total": 474
     }
   }
 }

artifacts/npm-outdated.json

@@ -1,4 +1,11 @@
 {
+  "jsdom": {
+    "current": "28.0.0",
+    "wanted": "28.1.0",
+    "latest": "28.1.0",
+    "dependent": "app",
+    "location": "/app/node_modules/jsdom"
+  },
   "nostr-tools": {
     "current": "2.19.4",
     "wanted": "2.23.1",
@@ -44,7 +51,7 @@
   "tailwindcss": {
     "current": "3.4.19",
     "wanted": "3.4.19",
-    "latest": "4.2.0",
+    "latest": "4.1.18",
     "dependent": "app",
     "location": "/app/node_modules/tailwindcss"
   }

artifacts/todos.txt

@@ -0,0 +1 @@
+js/ui/profileModalContract.js:146:      "Formats npub strings for display using the canonical short representation (npubXXXX…XXXX).",

benchmarks/moderation_batch_bench.js

@@ -1,121 +0,0 @@
-
-// Mock Globals BEFORE imports
-global.localStorage = {
-  getItem: () => null,
-  setItem: () => {},
-  removeItem: () => {},
-  clear: () => {}
-};
-global.window = { localStorage: global.localStorage };
-
-// Dynamic imports to ensure globals are set first
-const { ModerationService } = await import('../js/services/moderationService.js');
-const { createModerationStage } = await import('../js/feedEngine/stages.js');
-const { performance } = await import('node:perf_hooks');
-
-// Mock Dependencies
-const mockClient = {
-  pool: {},
-  ensurePool: async () => {},
-  pubkey: 'viewer-pubkey',
-};
-
-const mockLogger = {
-  log: () => {},
-  dev: { log: () => {}, debug: () => {} },
-  user: { warn: () => {}, info: () => {} }
-};
-
-const service = new ModerationService({
-  nostrClient: mockClient,
-  logger: mockLogger,
-});
-
-// Helper to generate valid hex
-function makeHex(prefix, index) {
-  return `${prefix}${index.toString(16).padStart(64 - prefix.length, '0')}`;
-}
-
-// Setup Data
-const AUTHOR_COUNT = 500;
-const MUTERS_PER_AUTHOR = 100;
-const now = Date.now() / 1000;
-
-console.log(`Populating ${AUTHOR_COUNT} authors with ${MUTERS_PER_AUTHOR} muters each...`);
-
-for (let i = 0; i < AUTHOR_COUNT; i++) {
-  const author = makeHex('abc', i);
-  const muters = new Map();
-  const categories = new Map();
-
-  for (let j = 0; j < MUTERS_PER_AUTHOR; j++) {
-    const muter = makeHex('def', j);
-    muters.set(muter, now); // Not expired
-  }
-
-  // Add some categories
-  const catMuters = new Map();
-  const firstMuter = makeHex('def', 0);
-  catMuters.set(firstMuter, now);
-  categories.set('spam', catMuters);
-
-  // We manually inject into internal map to bypass setter logic
-  service.trustedMutedAuthors.set(author, {
-    muters,
-    categories,
-    count: muters.size,
-    lastPrunedAt: 0 // Force prune check
-  });
-}
-
-// Prepare items for stage
-const ITEM_COUNT = 5000;
-const items = [];
-for (let i = 0; i < ITEM_COUNT; i++) {
-  const authorIndex = i % AUTHOR_COUNT;
-  const author = makeHex('abc', authorIndex);
-  items.push({
-    video: {
-      id: makeHex('123', i),
-      pubkey: author,
-      kind: 30078,
-      moderation: {}
-    },
-    metadata: {}
-  });
-}
-
-const context = {
-  runtime: {
-    moderationThresholds: {
-      autoplayBlockThreshold: 1,
-      blurThreshold: 1,
-      trustedSpamHideThreshold: 1,
-      trustedMuteHideThresholds: {}
-    },
-    isAuthorBlocked: () => false
-  },
-  log: () => {},
-  addWhy: () => {}
-};
-
-async function runBenchmark() {
-  console.log('Running Moderation Stage Benchmark (Sequential Lookups)...');
-
-  const moderationStage = createModerationStage({
-    service: service,
-    stageName: 'bench-moderation-sequential'
-  });
-
-  // Warmup
-  await moderationStage(items.slice(0, 100), context);
-
-  // Measure
-  const start = performance.now();
-  await moderationStage(items, context);
-  const end = performance.now();
-
-  console.log(`Time: ${(end - start).toFixed(2)}ms`);
-}
-
-runBenchmark().catch(console.error);

benchmarks/moderation_service_bench.js

@@ -1,74 +0,0 @@
-import { ModerationService } from '../js/services/moderationService.js';
-import { performance } from 'perf_hooks';
-
-// Mock dependencies
-const mockClient = {
-  pool: {},
-};
-const mockLogger = {
-  log: () => {},
-  dev: { log: () => {} },
-  user: { warn: () => {}, info: () => {} }
-};
-
-const service = new ModerationService({
-  nostrClient: mockClient,
-  logger: mockLogger,
-});
-
-async function runBenchmark() {
-  console.log('Starting Moderation Service Stress Benchmark...');
-
-  // Setup Data
-  // 100 authors, each having 500 muters (spam scenario).
-  // 50 muters are expired.
-
-  const AUTHOR_COUNT = 100;
-  const MUTERS_PER_AUTHOR = 500;
-  const now = Date.now() / 1000;
-  const expiredTime = now - (61 * 24 * 60 * 60);
-
-  console.log(`Populating ${AUTHOR_COUNT} authors with ${MUTERS_PER_AUTHOR} muters each...`);
-
-  for (let i = 0; i < AUTHOR_COUNT; i++) {
-    const author = `author-${i}`.padEnd(64, '0');
-    const muters = new Map();
-
-    for (let j = 0; j < MUTERS_PER_AUTHOR; j++) {
-      const muter = `muter-${j}`.padEnd(64, '0');
-      // 10% expired
-      const timestamp = (j % 10 === 0) ? expiredTime : now;
-      muters.set(muter, timestamp);
-    }
-
-    service.trustedMutedAuthors.set(author, {
-      muters,
-      categories: new Map(),
-      count: muters.size
-    });
-  }
-
-  // Benchmark Read
-  console.log('Benchmarking getActiveTrustedMutersForAuthor (Read + Prune)...');
-  const READ_ITERATIONS = 10000; // 10k reads
-
-  const start = performance.now();
-
-  for (let i = 0; i < READ_ITERATIONS; i++) {
-    const authorIndex = i % AUTHOR_COUNT;
-    const author = `author-${authorIndex}`.padEnd(64, '0');
-    // This call triggers pruneTrustedMuteAggregates EVERY time
-    service.getActiveTrustedMutersForAuthor(author);
-  }
-
-  const end = performance.now();
-  const totalTime = end - start;
-  const avgTime = totalTime / READ_ITERATIONS;
-
-  console.log('---------------------------------------------------');
-  console.log(`Total time: ${totalTime.toFixed(2)}ms`);
-  console.log(`Average time per call: ${(avgTime * 1000).toFixed(4)}µs`);
-  console.log('---------------------------------------------------');
-}
-
-runBenchmark().catch(console.error);

benchmarks/moderation_stage_bench.js

@@ -1,150 +0,0 @@
-import { createModerationStage } from '../js/feedEngine/stages.js';
-import { performance } from 'perf_hooks';
-
-// Mock Logger
-const logger = {
-  log: () => {},
-  dev: { log: () => {}, debug: () => {} },
-  user: { warn: () => {}, info: () => {} }
-};
-
-// Realistic Mock Service
-const mutedAuthors = new Set();
-const reportedVideos = new Map();
-
-// Seed data
-for (let i = 0; i < 100; i++) {
-  if (Math.random() < 0.1) {
-    mutedAuthors.add(`pubkey-${i}`);
-  }
-}
-
-// Simulate pruning cost
-function pruneSimulation() {
-  const map = new Map();
-  for(let i=0; i<5; i++) map.set(i, Date.now()); // Simulate 5 muters
-  for(const [k,v] of map) {
-    if (v < 0) map.delete(k);
-  }
-}
-
-const mockService = {
-  refreshViewerFromClient: async () => {},
-  setActiveEventIds: async () => {},
-  getAdminListSnapshot: () => ({
-    whitelist: new Set(),
-    whitelistHex: new Set(),
-    blacklist: new Set(),
-    blacklistHex: new Set()
-  }),
-  getAccessControlStatus: (pubkey) => ({
-    hex: pubkey,
-    whitelisted: false,
-    blacklisted: false
-  }),
-  getTrustedReportSummary: (id) => {
-    if (reportedVideos.has(id)) {
-      return reportedVideos.get(id);
-    }
-    return null;
-  },
-  trustedReportCount: (id) => {
-    const summary = reportedVideos.get(id);
-    return summary ? summary.totalTrusted : 0;
-  },
-  getTrustedReporters: (id) => [],
-  isAuthorMutedByTrusted: (pubkey) => {
-    // Simulate the real service logic which calls prune
-    pruneSimulation();
-    return mutedAuthors.has(pubkey);
-  },
-  getTrustedMutersForAuthor: (pubkey) => {
-    // Simulate prune here too if called
-    pruneSimulation();
-    if (mutedAuthors.has(pubkey)) {
-      return ['trusted-muter-1', 'trusted-muter-2'];
-    }
-    return [];
-  },
-  getTrustedMuteCountsForAuthor: (pubkey) => {
-    pruneSimulation();
-    if (mutedAuthors.has(pubkey)) {
-      return { total: 2, categories: { nudity: 1, spam: 1 } };
-    }
-    return { total: 0, categories: {} };
-  },
-  isAuthorMutedByViewer: (pubkey) => false,
-};
-
-async function runBenchmark() {
-  console.log('Starting Moderation Stage Benchmark (with prune cost)...');
-
-  const ITEM_COUNT = 10000;
-  const items = [];
-
-  for (let i = 0; i < ITEM_COUNT; i++) {
-    const videoId = `video-${i}`;
-    const pubkey = `pubkey-${i % 100}`;
-
-    // Simulate some reported videos
-    if (Math.random() < 0.05) {
-      reportedVideos.set(videoId, {
-        eventId: videoId,
-        totalTrusted: 2,
-        types: { nudity: { trusted: 2, total: 5, latest: Date.now() } },
-        updatedAt: Date.now()
-      });
-    }
-
-    items.push({
-      video: {
-        id: videoId,
-        pubkey: pubkey,
-        kind: 30078,
-        tags: []
-      },
-      metadata: {}
-    });
-  }
-
-  const context = {
-    runtime: {
-      moderationThresholds: {
-        autoplayBlockThreshold: 1,
-        blurThreshold: 1,
-        trustedSpamHideThreshold: 1,
-        trustedMuteHideThresholds: {}
-      },
-      isAuthorBlocked: () => false
-    },
-    log: logger.dev.log,
-    addWhy: () => {}
-  };
-
-  const moderationStage = createModerationStage({
-    service: mockService,
-    stageName: 'bench-moderation'
-  });
-
-  // Warmup
-  console.log('Warming up...');
-  await moderationStage(items.slice(0, 100), context);
-
-  // Run
-  console.log(`Processing ${ITEM_COUNT} items with ~10% muted authors and prune simulation...`);
-  const start = performance.now();
-
-  const result = await moderationStage(items, context);
-
-  const end = performance.now();
-  const totalTime = end - start;
-  const avgTime = totalTime / ITEM_COUNT;
-
-  console.log('---------------------------------------------------');
-  console.log(`Total time: ${totalTime.toFixed(2)}ms`);
-  console.log(`Average time per item: ${(avgTime * 1000).toFixed(4)}µs`);
-  console.log(`Items processed: ${result.length}`);
-  console.log('---------------------------------------------------');
-}
-
-runBenchmark().catch(console.error);

components/edit-video-modal.html

@@ -57,14 +57,492 @@
             </div>
           </div>
 
-          <!-- Hashtags (kept from the old NIP-71 section: they feed bitvid's hashtag
-               feeds and the NIP-71 mirror; everything else in that section fed the
-               disabled FEATURE_PUBLISH_NIP71 path and was removed for a cleaner UI.
-               Existing videos' extra NIP-71 metadata is preserved on save. -->
-          <div class="space-y-4 rounded-lg border border-border/70 bg-overlay-black/30 p-4">
+          <!-- NOTE: Keep this NIP-71 markup in sync with the upload and revert modals. -->
+          <div
+            class="space-y-4 rounded-lg border border-border/70 bg-overlay-black/30 p-4"
+            id="editNip71EventDetails"
+            data-nip71-section="event-details"
+          >
+            <fieldset
+              id="editNip71KindFieldset"
+              class="space-y-2"
+              data-nip71-fieldset="kind"
+            >
+              <legend class="text-sm font-semibold text-text">
+                NIP-71 event type
+              </legend>
+              <p class="text-xs text-muted">
+                Choose the video format. <span class="font-medium text-muted-strong">Kind 21</span> is a full video, while
+                <span class="font-medium text-muted-strong">Kind 22</span> is a short.
+              </p>
+              <div
+                class="form-control"
+                role="radiogroup"
+                aria-labelledby="editNip71KindFieldset"
+              >
+                <div class="menu sm:flex-row sm:flex-wrap sm:py-0" role="presentation">
+                  <label class="menu__item gap-3 px-0 py-0" for="editNip71KindLong">
+                    <input
+                      type="radio"
+                      name="editNip71Kind"
+                      id="editNip71KindLong"
+                      value="21"
+                      checked
+                      data-nip71-input="kind"
+                      class="h-4 w-4 border-border bg-panel text-info focus:ring-info"
+                    />
+                    <span class="text-sm text-text">Normal video (kind 21)</span>
+                  </label>
+                  <label class="menu__item gap-3 px-0 py-0" for="editNip71KindShort">
+                    <input
+                      type="radio"
+                      name="editNip71Kind"
+                      id="editNip71KindShort"
+                      value="22"
+                      data-nip71-input="kind"
+                      class="h-4 w-4 border-border bg-panel text-info focus:ring-info"
+                    />
+                    <span class="text-sm text-text">Short video (kind 22)</span>
+                  </label>
+                </div>
+              </div>
+            </fieldset>
+
+            <div class="grid gap-4 md:grid-cols-2" data-nip71-grid="metadata">
+              <div class="space-y-2">
+                <label for="editNip71PublishedAt" class="block text-sm font-medium text-text">
+                  Published at
+                </label>
+                <input
+                  type="datetime-local"
+                  id="editNip71PublishedAt"
+                  data-nip71-input="published_at"
+                  class="input"
+                />
+                <p class="text-xs text-muted">
+                  Set the canonical publish time for cross-client ordering.
+                </p>
+              </div>
+              <div class="space-y-2">
+                <label for="editNip71AltText" class="block text-sm font-medium text-text">
+                  Alt text
+                </label>
+                <input
+                  type="text"
+                  id="editNip71AltText"
+                  data-nip71-input="alt"
+                  placeholder="Describe the visuals for screen readers"
+                  class="input"
+                />
+                <p class="text-xs text-muted">
+                  Plain-language fallback shown when the media cannot load.
+                </p>
+              </div>
+              <div class="space-y-2">
+                <label for="editNip71Duration" class="block text-sm font-medium text-text">
+                  Duration (seconds)
+                </label>
+                <input
+                  type="number"
+                  id="editNip71Duration"
+                  min="0"
+                  step="0.001"
+                  data-nip71-input="duration"
+                  class="input"
+                />
+                <p class="text-xs text-muted">
+                  Optional legacy fallback in seconds (fractions allowed) for clients that expect a top-level duration.
+                </p>
+              </div>
+              <div class="space-y-2">
+                <label for="editNip71ContentWarning" class="block text-sm font-medium text-text">
+                  Content warning
+                </label>
+                <input
+                  type="text"
+                  id="editNip71ContentWarning"
+                  data-nip71-input="content-warning"
+                  placeholder="e.g., Flashing lights"
+                  class="input"
+                />
+                <p class="text-xs text-muted">
+                  Leave blank if the video is safe for all audiences.
+                </p>
+              </div>
+            </div>
+
+            <div class="space-y-2">
+              <label for="editNip71Summary" class="block text-sm font-medium text-text">
+                Summary
+              </label>
+              <textarea
+                id="editNip71Summary"
+                rows="3"
+                data-nip71-input="summary"
+                class="textarea"
+                placeholder="Short synopsis used as the Nostr content field"
+              ></textarea>
+              <p class="text-xs text-muted">
+                This becomes the event content. Keep it concise for Nostr readers.
+              </p>
+            </div>
+          </div>
+
+          <fieldset
+            id="editNip71TagsFieldset"
+            class="space-y-6 rounded-lg border border-border/70 bg-overlay-black/30 p-4"
+            data-nip71-section="tags"
+          >
+            <legend class="relative text-sm font-semibold text-text">
+              <span class="inline-block -ml-2 rounded px-2 bg-overlay-black/30">NIP-71 tags</span>
+            </legend>
+            <p class="text-xs text-muted">
+              Use the controls below to describe media variants, captions, chapters, participants, and references.
+            </p>
+
+            <section class="space-y-4" aria-labelledby="editNip71ImetaLabel" data-nip71-repeater="imeta">
+              <div class="flex items-center justify-between">
+                <h3 id="editNip71ImetaLabel" class="text-sm font-medium text-text">Image metadata (imeta)</h3>
+                <button
+                  type="button"
+                  class="btn-ghost focus-ring text-xs font-semibold"
+                  data-nip71-add="imeta"
+                  aria-describedby="editNip71ImetaHelp"
+                >
+                  Add variant
+                </button>
+              </div>
+              <p id="editNip71ImetaHelp" class="text-xs text-muted">
+                Provide dimensions, MIME type, and resource links for each variant. Nested repeaters let you attach multiple
+                <code>image</code>, <code>fallback</code>, or <code>service</code> values.
+              </p>
+              <div id="editNip71ImetaList" class="space-y-4" data-nip71-list="imeta"></div>
+              <template id="editNip71ImetaTemplate" data-nip71-template="imeta">
+                <article class="card space-y-3 bg-surface/60 p-4" data-nip71-entry="imeta">
+                  <div class="grid gap-3 md:grid-cols-2">
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">
+                        MIME type (<code>m</code>)
+                      </label>
+                      <input
+                        type="text"
+                        data-nip71-field="m"
+                        placeholder="video/mp4"
+                        class="input"
+                      />
+                      <p class="text-3xs text-muted">RFC 2046 media type for this encoding.</p>
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">
+                        Pixel dimensions (<code>dim</code>)
+                      </label>
+                      <input
+                        type="text"
+                        data-nip71-field="dim"
+                        placeholder="1920x1080"
+                        class="input"
+                      />
+                      <p class="text-3xs text-muted">Formatted as widthxheight.</p>
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">
+                        Streaming URL (<code>url</code>)
+                      </label>
+                      <input
+                        type="url"
+                        data-nip71-field="url"
+                        placeholder="https://cdn.example.com/variant.m3u8"
+                        class="input"
+                      />
+                      <p class="text-3xs text-muted">HTTPS variant URL shared across clients.</p>
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">
+                        Magnet (<code>x</code>)
+                      </label>
+                      <input
+                        type="text"
+                        data-nip71-field="x"
+                        placeholder="magnet:?xt=urn:btih:..."
+                        class="input"
+                      />
+                      <p class="text-3xs text-muted">Optional magnet pointer if the variant is seeded via P2P.</p>
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">
+                        Duration seconds (<code>duration</code>)
+                      </label>
+                      <input
+                        type="number"
+                        data-nip71-field="duration"
+                        min="0"
+                        step="0.001"
+                        placeholder="29.97"
+                        class="input"
+                      />
+                      <p class="text-3xs text-muted">Fractional seconds supported; clients use this for precise timelines.</p>
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">
+                        Bitrate bps (<code>bitrate</code>)
+                      </label>
+                      <input
+                        type="number"
+                        data-nip71-field="bitrate"
+                        min="0"
+                        step="1"
+                        placeholder="3500000"
+                        class="input"
+                      />
+                      <p class="text-3xs text-muted">Average bits per second for this variant.</p>
+                    </div>
+                  </div>
+
+                  <div class="space-y-3" data-nip71-nested="image">
+                    <div class="flex items-center justify-between">
+                      <h4 class="text-xs font-semibold uppercase tracking-wide text-muted">Image values</h4>
+                      <button
+                        type="button"
+                        class="btn-ghost focus-ring text-3xs font-medium"
+                        data-nip71-nested-add="image"
+                      >
+                        Add image URL
+                      </button>
+                    </div>
+                    <div class="space-y-2" data-nip71-nested-list="image"></div>
+                    <template data-nip71-nested-template="image">
+                      <div class="flex items-center gap-2" data-nip71-nested-entry="image">
+                        <input
+                          type="url"
+                          placeholder="https://cdn.example.com/poster.jpg"
+                          data-nip71-nested-field="image"
+                          class="flex-1 input"
+                        />
+                        <button
+                          type="button"
+                          class="btn-ghost focus-ring text-3xs font-medium"
+                          data-nip71-remove="nested"
+                          aria-label="Remove image URL"
+                        >
+                          Remove
+                        </button>
+                      </div>
+                    </template>
+                  </div>
+
+                  <div class="space-y-3" data-nip71-nested="fallback">
+                    <div class="flex items-center justify-between">
+                      <h4 class="text-xs font-semibold uppercase tracking-wide text-muted">Fallback URLs</h4>
+                      <button
+                        type="button"
+                        class="btn-ghost focus-ring text-3xs font-medium"
+                        data-nip71-nested-add="fallback"
+                      >
+                        Add fallback
+                      </button>
+                    </div>
+                    <div class="space-y-2" data-nip71-nested-list="fallback"></div>
+                    <template data-nip71-nested-template="fallback">
+                      <div class="flex items-center gap-2" data-nip71-nested-entry="fallback">
+                        <input
+                          type="url"
+                          placeholder="https://cdn.backup.net/video.mp4"
+                          data-nip71-nested-field="fallback"
+                          class="flex-1 input"
+                        />
+                        <button
+                          type="button"
+                          class="btn-ghost focus-ring text-3xs font-medium"
+                          data-nip71-remove="nested"
+                          aria-label="Remove fallback URL"
+                        >
+                          Remove
+                        </button>
+                      </div>
+                    </template>
+                  </div>
+
+                  <div class="space-y-3" data-nip71-nested="service">
+                    <div class="flex items-center justify-between">
+                      <h4 class="text-xs font-semibold uppercase tracking-wide text-muted">Services</h4>
+                      <button
+                        type="button"
+                        class="btn-ghost focus-ring text-3xs font-medium"
+                        data-nip71-nested-add="service"
+                      >
+                        Add service
+                      </button>
+                    </div>
+                    <div class="space-y-2" data-nip71-nested-list="service"></div>
+                    <template data-nip71-nested-template="service">
+                      <div class="flex items-center gap-2" data-nip71-nested-entry="service">
+                        <input
+                          type="text"
+                          placeholder="https://api.example.com"
+                          data-nip71-nested-field="service"
+                          class="flex-1 input"
+                        />
+                        <button
+                          type="button"
+                          class="btn-ghost focus-ring text-3xs font-medium"
+                          data-nip71-remove="nested"
+                          aria-label="Remove service entry"
+                        >
+                          Remove
+                        </button>
+                      </div>
+                    </template>
+                  </div>
+
+                  <div class="flex justify-end">
+                    <button
+                      type="button"
+                      class="btn-ghost focus-ring text-3xs font-medium"
+                      data-nip71-remove="imeta"
+                    >
+                      Remove variant
+                    </button>
+                  </div>
+                </article>
+              </template>
+            </section>
+
+            <section class="space-y-4" aria-labelledby="editNip71TextTracksLabel" data-nip71-repeater="text-track">
+              <div class="flex items-center justify-between">
+                <h3 id="editNip71TextTracksLabel" class="text-sm font-medium text-text">
+                  Caption &amp; subtitle tracks (text-track)
+                </h3>
+                <button
+                  type="button"
+                  class="btn-ghost focus-ring text-xs font-semibold"
+                  data-nip71-add="text-track"
+                  aria-describedby="editNip71TextTracksHelp"
+                >
+                  Add track
+                </button>
+              </div>
+              <p id="editNip71TextTracksHelp" class="text-xs text-muted">
+                Supply caption or subtitle URLs along with file type and language so players can surface accessibility features.
+              </p>
+              <div id="editNip71TextTrackList" class="space-y-4" data-nip71-list="text-track"></div>
+              <template id="editNip71TextTrackTemplate" data-nip71-template="text-track">
+                <article class="card space-y-3 bg-surface/60 p-4" data-nip71-entry="text-track">
+                  <div class="grid gap-3 md:grid-cols-3">
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">Track URL</label>
+                      <input
+                        type="url"
+                        data-nip71-field="url"
+                        placeholder="https://cdn.example.com/subs.vtt"
+                        class="input"
+                      />
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">Type</label>
+                      <input
+                        type="text"
+                        data-nip71-field="type"
+                        placeholder="text/vtt"
+                        class="input"
+                      />
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">Language</label>
+                      <input
+                        type="text"
+                        data-nip71-field="language"
+                        placeholder="en"
+                        class="input"
+                      />
+                    </div>
+                  </div>
+                  <div class="flex justify-end">
+                    <button
+                      type="button"
+                      class="btn-ghost focus-ring text-3xs font-medium"
+                      data-nip71-remove="text-track"
+                    >
+                      Remove track
+                    </button>
+                  </div>
+                </article>
+              </template>
+            </section>
+
+            <section class="space-y-4" aria-labelledby="editNip71SegmentsLabel" data-nip71-repeater="segment">
+              <div class="flex items-center justify-between">
+                <h3 id="editNip71SegmentsLabel" class="text-sm font-medium text-text">Chapters &amp; segments (segment)</h3>
+                <button
+                  type="button"
+                  class="btn-ghost focus-ring text-xs font-semibold"
+                  data-nip71-add="segment"
+                  aria-describedby="editNip71SegmentsHelp"
+                >
+                  Add segment
+                </button>
+              </div>
+              <p id="editNip71SegmentsHelp" class="text-xs text-muted">
+                Outline chapters with start and end times, titles, and optional thumbnails.
+              </p>
+              <div id="editNip71SegmentList" class="space-y-4" data-nip71-list="segment"></div>
+              <template id="editNip71SegmentTemplate" data-nip71-template="segment">
+                <article class="card space-y-3 bg-surface/60 p-4" data-nip71-entry="segment">
+                  <div class="grid gap-3 md:grid-cols-2">
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">Start (seconds)</label>
+                      <input
+                        type="number"
+                        data-nip71-field="start"
+                        min="0"
+                        step="1"
+                        class="input"
+                      />
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">End (seconds)</label>
+                      <input
+                        type="number"
+                        data-nip71-field="end"
+                        min="0"
+                        step="1"
+                        class="input"
+                      />
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">Title</label>
+                      <input
+                        type="text"
+                        data-nip71-field="title"
+                        placeholder="Chapter title"
+                        class="input"
+                      />
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">Thumbnail URL</label>
+                      <input
+                        type="url"
+                        data-nip71-field="thumbnail"
+                        placeholder="https://cdn.example.com/frame.jpg"
+                        class="input"
+                      />
+                    </div>
+                  </div>
+                  <div class="flex justify-end">
+                    <button
+                      type="button"
+                      class="btn-ghost focus-ring text-3xs font-medium"
+                      data-nip71-remove="segment"
+                    >
+                      Remove segment
+                    </button>
+                  </div>
+                </article>
+              </template>
+            </section>
+
             <section class="space-y-4" aria-labelledby="editNip71HashtagsLabel" data-nip71-repeater="t">
               <div class="flex items-center justify-between">
-                <h3 id="editNip71HashtagsLabel" class="text-sm font-medium text-text">Hashtags</h3>
+                <h3 id="editNip71HashtagsLabel" class="text-sm font-medium text-text">Hashtags (<code>t</code>)</h3>
                 <button
                   type="button"
                   class="btn-ghost focus-ring text-xs font-semibold"
@@ -74,7 +552,7 @@
                 </button>
               </div>
               <p class="text-xs text-muted">
-                Tag your video so it shows up in hashtag feeds. Leading <code>#</code> characters are stripped automatically.
+                Enter keywords; leading <code>#</code> characters are stripped automatically when saving.
               </p>
               <div id="editNip71HashtagList" class="space-y-2" data-nip71-list="t"></div>
               <template id="editNip71HashtagTemplate" data-nip71-template="t">
@@ -95,7 +573,85 @@
                 </div>
               </template>
             </section>
-          </div>
+
+            <section class="space-y-4" aria-labelledby="editNip71ParticipantsLabel" data-nip71-repeater="p">
+              <div class="flex items-center justify-between">
+                <h3 id="editNip71ParticipantsLabel" class="text-sm font-medium text-text">Participants (<code>p</code>)</h3>
+                <button
+                  type="button"
+                  class="btn-ghost focus-ring text-xs font-semibold"
+                  data-nip71-add="p"
+                >
+                  Add participant
+                </button>
+              </div>
+              <div id="editNip71ParticipantList" class="space-y-3" data-nip71-list="p"></div>
+              <template id="editNip71ParticipantTemplate" data-nip71-template="p">
+                <article class="card space-y-3 bg-surface/60 p-4" data-nip71-entry="p">
+                  <div class="grid gap-3 md:grid-cols-2">
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">Participant pubkey</label>
+                      <input
+                        type="text"
+                        data-nip71-field="pubkey"
+                        placeholder="npub1... or hex"
+                        class="input"
+                      />
+                    </div>
+                    <div class="space-y-2">
+                      <label class="block text-xs font-medium text-muted-strong">Relay hint</label>
+                      <input
+                        type="text"
+                        data-nip71-field="relay"
+                        placeholder="wss://relay.example.com"
+                        class="input"
+                      />
+                    </div>
+                  </div>
+                  <div class="flex justify-end">
+                    <button
+                      type="button"
+                      class="btn-ghost focus-ring text-3xs font-medium"
+                      data-nip71-remove="p"
+                    >
+                      Remove participant
+                    </button>
+                  </div>
+                </article>
+              </template>
+            </section>
+
+            <section class="space-y-4" aria-labelledby="editNip71ReferencesLabel" data-nip71-repeater="r">
+              <div class="flex items-center justify-between">
+                <h3 id="editNip71ReferencesLabel" class="text-sm font-medium text-text">Reference links (<code>r</code>)</h3>
+                <button
+                  type="button"
+                  class="btn-ghost focus-ring text-xs font-semibold"
+                  data-nip71-add="r"
+                >
+                  Add reference
+                </button>
+              </div>
+              <div id="editNip71ReferenceList" class="space-y-2" data-nip71-list="r"></div>
+              <template id="editNip71ReferenceTemplate" data-nip71-template="r">
+                <div class="flex items-center gap-2" data-nip71-entry="r">
+                  <input
+                    type="url"
+                    data-nip71-field="url"
+                    placeholder="https://example.com/context"
+                    class="flex-1 input"
+                  />
+                  <button
+                    type="button"
+                    class="btn-ghost focus-ring text-3xs font-medium"
+                    data-nip71-remove="r"
+                  >
+                    Remove
+                  </button>
+                </div>
+              </template>
+            </section>
+          </fieldset>
 
           <div class="space-y-1">
             <label for="editVideoUrl" class="block text-sm font-medium text-text">
@@ -116,39 +672,19 @@
                 Edit field
               </button>
             </div>
-            <div class="flex items-center gap-2 flex-wrap">
-              <input type="file" id="editVideoFile" accept="video/*" class="hidden" />
-              <button
-                type="button"
-                id="editVideoFileBtn"
-                class="btn-ghost focus-ring text-xs"
-              >
-                Replace video file…
-              </button>
-              <p
-                id="editVideoUploadStatus"
-                class="text-2xs text-muted empty:hidden"
-                role="status"
-                aria-live="polite"
-              ></p>
-            </div>
-            <p class="text-xs text-muted">
-              Uploading a new file replaces the URL, magnet, and torrent hints.
-              Requires unlocked storage.
-            </p>
           </div>
 
           <div class="space-y-1">
             <label for="editVideoWs" class="block text-sm font-medium text-text">
-              Web seeds (ws=, one per line)
+              Web seed (ws=)
             </label>
             <div class="flex flex-col gap-2 sm:flex-row">
-              <textarea
+              <input
+                type="url"
                 id="editVideoWs"
-                rows="2"
-                class="flex-1 textarea"
-                placeholder="https://cdn.example.com/video.mp4&#10;https://backup.example.com/video.mp4"
-              ></textarea>
+                class="flex-1 input"
+                placeholder="https://cdn.example.com/video.mp4"
+              />
               <button
                 type="button"
                 class="btn-ghost focus-ring hidden text-xs font-semibold uppercase tracking-wide"
@@ -157,10 +693,6 @@
                 Edit field
               </button>
             </div>
-            <p class="text-xs text-muted">
-              Add a backup origin so the swarm keeps streaming if the primary is
-              overloaded. Each must serve the exact same file.
-            </p>
           </div>
 
           <div class="space-y-1">
@@ -224,22 +756,6 @@
                 Edit field
               </button>
             </div>
-            <div class="flex items-center gap-2 flex-wrap">
-              <input type="file" id="editThumbnailFile" accept="image/*" class="hidden" />
-              <button
-                type="button"
-                id="editThumbnailFileBtn"
-                class="btn-ghost focus-ring text-xs"
-              >
-                Replace thumbnail file…
-              </button>
-              <p
-                id="editThumbnailUploadStatus"
-                class="text-2xs text-muted empty:hidden"
-                role="status"
-                aria-live="polite"
-              ></p>
-            </div>
           </div>
 
           <div class="space-y-1">

components/iframe_forms/iframe-application-form.html

@@ -9,8 +9,6 @@
     <link rel="stylesheet" href="../../css/tailwind.generated.css" />
     <!-- Load nostr‑tools v2.17.0 -->
     <script src="https://cdn.jsdelivr.net/npm/[email protected]/lib/nostr.bundle.min.js"></script>
-    <!-- Shared anti-spam npub validation (sets window.validateNpubHex) -->
-    <script type="module" src="../../js/utils/validateNpub.js"></script>
   </head>
   <body class="iframe-form" data-ds="new">
     <div class="container">
@@ -279,12 +277,11 @@
 
         // Set the recipient's NPUB (your personal NPUB) here.
         const recipientNpub =
-          "npub15jnttpymeytm80hatjqcvhhqhzrhx6gxp8pq0wn93rhnu8s9h9dsha32lx";
+          "npub13yarr7j6vjqjjkahd63dmr27curypehx45ucue286ac7sft27y0srnpmpe";
         const RELAYS = [
           "wss://relay.snort.social",
           "wss://relay.damus.io",
           "wss://relay.primal.net",
-          "wss://nos.lol",
         ];
         const pool = new SimplePool();
 
@@ -298,21 +295,6 @@
               const applicantNpub = document
                 .getElementById("applicantNpub")
                 .value.trim();
-
-              // Anti-spam: the application identifier must be a valid npub.
-              const applicantPubHex =
-                typeof window.validateNpubHex === "function"
-                  ? window.validateNpubHex(applicantNpub)
-                  : null;
-              if (!applicantPubHex) {
-                log(
-                  "Please enter a valid Nostr public key (npub1…) before submitting. Your application was not sent.",
-                  "error"
-                );
-                document.getElementById("applicantNpub")?.focus();
-                return;
-              }
-
               const contactMethod = document
                 .getElementById("contactMethod")
                 .value.trim();
@@ -371,7 +353,6 @@
 
 **1. Applicant Information**
 - **Nostr Public Key (npub):** ${applicantNpub}
-- **Pubkey (hex):** ${applicantPubHex}
 - **Preferred Contact Method:** ${contactMethod || "N/A"}
 - **Username or Alias:** ${username || "N/A"}
 
@@ -438,27 +419,23 @@ For further questions, contact us through bitvid’s Nostr support channels.
               const ephemeralPubHex = getPublicKey(ephemeralPriv);
               log("Ephemeral pubkey: " + ephemeralPubHex.slice(0, 16) + "...");
 
-              // Build a structured bitvid submission (kind 30083, PUBLIC — no
-              // encryption). Published from the ephemeral key; the admin's
-              // Submissions tab lists these and can approve → add to whitelist.
+              // Encrypt the application content.
+              log("Encrypting application content (nip04)...");
+              const ciphertext = await nip04.encrypt(
+                ephemeralPriv,
+                targetPubHex,
+                applicationContent
+              );
+              log("[DEBUG] Ciphertext: " + ciphertext);
+              log("Encryption done.");
+
+              // Build the Nostr event template.
               const now = Math.floor(Date.now() / 1000);
-              const submissionId =
-                "sub-" +
-                now.toString(36) +
-                "-" +
-                Math.random().toString(36).slice(2, 10);
               const eventTemplate = {
-                kind: 30083,
+                kind: 4,
                 created_at: now,
-                tags: [
-                  ["d", submissionId],
-                  ["k", "application"],
-                  ["applicant", applicantNpub],
-                  ["p", targetPubHex],
-                  ["t", "bitvid-submission"],
-                  ["client", "bitvid"],
-                ],
-                content: applicationContent,
+                tags: [["p", targetPubHex]],
+                content: ciphertext,
               };
               log(
                 "[DEBUG] Event template before finalizing: " +
@@ -478,7 +455,7 @@ For further questions, contact us through bitvid’s Nostr support channels.
               for (const url of RELAYS) {
                 log("Connecting to " + url + " for subscription...");
                 const relay = await Relay.connect(url);
-                relay.subscribe([{ authors: [ephemeralPubHex], kinds: [30083] }], {
+                relay.subscribe([{ authors: [ephemeralPubHex], kinds: [4] }], {
                   onEvent(foundEvent) {
                     if (foundEvent.id === event.id) {
                       log(

components/iframe_forms/iframe-bug-fix-form.html

@@ -8,8 +8,6 @@
     <link rel="stylesheet" href="../../css/tailwind.generated.css" />
     <!-- Load nostr‑tools v2.17.0 -->
     <script src="https://cdn.jsdelivr.net/npm/[email protected]/lib/nostr.bundle.min.js"></script>
-    <!-- Shared anti-spam npub validation (sets window.validateNpubHex) -->
-    <script type="module" src="../../js/utils/validateNpub.js"></script>
   </head>
   <body class="iframe-form" data-ds="new">
     <div class="container">
@@ -261,12 +259,11 @@
 
         // Set the recipient's NPUB (your personal NPUB)
         const recipientNpub =
-          "npub15jnttpymeytm80hatjqcvhhqhzrhx6gxp8pq0wn93rhnu8s9h9dsha32lx";
+          "npub13yarr7j6vjqjjkahd63dmr27curypehx45ucue286ac7sft27y0srnpmpe";
         const RELAYS = [
           "wss://relay.snort.social",
           "wss://relay.damus.io",
           "wss://relay.primal.net",
-          "wss://nos.lol",
         ];
         const pool = new SimplePool();
 
@@ -278,22 +275,6 @@
             try {
               // Section 1: User Information
               const userNpub = document.getElementById("userNpub").value.trim();
-
-              // Anti-spam: npub is optional here, but if provided it must be a
-              // valid npub so the submission can't carry free-text garbage.
-              if (
-                userNpub &&
-                (typeof window.validateNpubHex !== "function" ||
-                  !window.validateNpubHex(userNpub))
-              ) {
-                log(
-                  "That Nostr public key isn't valid. Enter a valid npub1… or leave it blank. Your submission was not sent.",
-                  "error"
-                );
-                document.getElementById("userNpub")?.focus();
-                return;
-              }
-
               const roleNodes = document.querySelectorAll(
                 'input[name="userRole"]:checked'
               );
@@ -418,31 +399,23 @@ For urgent issues, contact us through bitvid’s Nostr support channels.
               const ephemeralPubHex = getPublicKey(ephemeralPriv);
               log("Ephemeral pubkey: " + ephemeralPubHex.slice(0, 16) + "...");
 
-              // Build a structured bitvid submission (kind 30083, PUBLIC — no
-              // encryption). Published from the ephemeral key.
-              const now = Math.floor(Date.now() / 1000);
-              const submissionId =
-                "sub-" +
-                now.toString(36) +
-                "-" +
-                Math.random().toString(36).slice(2, 10);
-              const tags = [
-                ["d", submissionId],
-                ["k", "bug"],
-              ];
-              if (userNpub) {
-                tags.push(["applicant", userNpub]);
-              }
-              tags.push(
-                ["p", targetPubHex],
-                ["t", "bitvid-submission"],
-                ["client", "bitvid"]
+              // Encrypt the bug report content.
+              log("Encrypting bug report content (nip04)...");
+              const ciphertext = await nip04.encrypt(
+                ephemeralPriv,
+                targetPubHex,
+                bugReportContent
               );
+              log("[DEBUG] Ciphertext: " + ciphertext);
+              log("Encryption done.");
+
+              // Build the event template.
+              const now = Math.floor(Date.now() / 1000);
               const eventTemplate = {
-                kind: 30083,
+                kind: 4,
                 created_at: now,
-                tags,
-                content: bugReportContent,
+                tags: [["p", targetPubHex]],
+                content: ciphertext,
               };
               log(
                 "[DEBUG] Event template before finalizing: " +
@@ -462,7 +435,7 @@ For urgent issues, contact us through bitvid’s Nostr support channels.
               for (const url of RELAYS) {
                 log("Connecting to " + url + " for subscription...");
                 const relay = await Relay.connect(url);
-                relay.subscribe([{ authors: [ephemeralPubHex], kinds: [30083] }], {
+                relay.subscribe([{ authors: [ephemeralPubHex], kinds: [4] }], {
                   onEvent(foundEvent) {
                     if (foundEvent.id === event.id) {
                       log(

components/iframe_forms/iframe-content-appeals-form.html

@@ -45,18 +45,6 @@
             placeholder="Enter the magnet link"
           />
 
-          <label for="eventPointer">Blocked video link or event ID:</label>
-          <input
-            class="form-control"
-            type="text"
-            id="eventPointer"
-            placeholder="Paste the video's share link, nevent1…, note1…, or 64-char event id"
-          />
-          <p class="form-hint">
-            Required — open the blocked video's ⋯ menu, choose “Copy link”, and
-            paste it here so a moderator can locate and unblock the exact video.
-          </p>
-
           <label for="submissionDate">Date of Content Submission:</label>
           <input class="form-control" type="date" id="submissionDate" />
 
@@ -205,46 +193,15 @@
 
         // Set the recipient's NPUB (your personal NPUB) here.
         const recipientNpub =
-          "npub15jnttpymeytm80hatjqcvhhqhzrhx6gxp8pq0wn93rhnu8s9h9dsha32lx";
+          "npub13yarr7j6vjqjjkahd63dmr27curypehx45ucue286ac7sft27y0srnpmpe";
 
         const RELAYS = [
           "wss://relay.snort.social",
           "wss://relay.damus.io",
           "wss://relay.primal.net",
-          "wss://nos.lol",
         ];
         const pool = new SimplePool();
 
-        // Validate + normalize the blocked-video reference to a 64-char hex
-        // event id. Accepts a bitvid share link (which embeds an nevent), a raw
-        // nevent1…/note1… pointer, or a bare hex id. Returns "" when nothing
-        // valid is found so the caller can block submission.
-        const HEX_EVENT_ID = /^[0-9a-f]{64}$/i;
-        function extractEventHex(input) {
-          const trimmed = String(input || "").trim();
-          if (!trimmed) {
-            return "";
-          }
-          if (HEX_EVENT_ID.test(trimmed)) {
-            return trimmed.toLowerCase();
-          }
-          // Pull an nevent/note token out of a URL or free text.
-          const match = trimmed.match(/(nevent1[0-9a-z]+|note1[0-9a-z]+)/i);
-          const token = match ? match[1] : trimmed;
-          try {
-            const decoded = nip19.decode(token);
-            if (decoded.type === "nevent" && HEX_EVENT_ID.test(decoded.data?.id || "")) {
-              return decoded.data.id.toLowerCase();
-            }
-            if (decoded.type === "note" && HEX_EVENT_ID.test(decoded.data || "")) {
-              return decoded.data.toLowerCase();
-            }
-          } catch (err) {
-            // not a decodable pointer
-          }
-          return "";
-        }
-
         document
           .getElementById("dm-form")
           .addEventListener("submit", async (ev) => {
@@ -263,17 +220,6 @@
               const magnetLink = document
                 .getElementById("magnetLink")
                 .value.trim();
-              const eventPointer = document
-                .getElementById("eventPointer")
-                .value.trim();
-              const targetEventHex = extractEventHex(eventPointer);
-              if (!targetEventHex) {
-                log(
-                  "Please paste a valid video share link, nevent1…, note1…, or 64-char event id so a moderator can locate the blocked video.",
-                  "error"
-                );
-                return;
-              }
               const submissionDate = document
                 .getElementById("submissionDate")
                 .value.trim();
@@ -315,7 +261,6 @@
 **2. Content Details**
 - **Title of the Video:** ${videoTitle}
 - **Magnet Link:** ${magnetLink}
-- **Blocked Event ID:** ${targetEventHex}
 - **Date of Content Submission:** ${submissionDate}
   
 **3. Reason for Appeal**
@@ -370,27 +315,23 @@ For further questions, reach out through bitvid’s Nostr support channels.
               const ephemeralPubHex = getPublicKey(ephemeralPriv);
               log("Ephemeral pubkey: " + ephemeralPubHex.slice(0, 16) + "...");
 
-              // Build a structured bitvid submission (kind 30083, PUBLIC — no
-              // encryption). Published from the ephemeral key.
-              log("Building appeal submission (kind 30083, public)...");
+              // Encrypt the appeal content.
+              log("Encrypting appeal content (nip04)...");
+              const ciphertext = await nip04.encrypt(
+                ephemeralPriv,
+                targetPubHex,
+                appealContent
+              );
+              log("[DEBUG] Ciphertext: " + ciphertext);
+              log("Encryption done.");
+
+              // Build the event template.
               const now = Math.floor(Date.now() / 1000);
-              const submissionId =
-                "sub-" +
-                now.toString(36) +
-                "-" +
-                Math.random().toString(36).slice(2, 10);
               const eventTemplate = {
-                kind: 30083,
+                kind: 4,
                 created_at: now,
-                tags: [
-                  ["d", submissionId],
-                  ["k", "appeal"],
-                  ["p", targetPubHex],
-                  ["e", targetEventHex],
-                  ["t", "bitvid-submission"],
-                  ["client", "bitvid"],
-                ],
-                content: appealContent,
+                tags: [["p", targetPubHex]],
+                content: ciphertext,
               };
               log(
                 "[DEBUG] Event template before finalizing: " +
@@ -410,7 +351,7 @@ For further questions, reach out through bitvid’s Nostr support channels.
               for (const url of RELAYS) {
                 log("Connecting to " + url + " for subscription...");
                 const relay = await Relay.connect(url);
-                relay.subscribe([{ authors: [ephemeralPubHex], kinds: [30083] }], {
+                relay.subscribe([{ authors: [ephemeralPubHex], kinds: [4] }], {
                   onEvent(foundEvent) {
                     if (foundEvent.id === event.id) {
                       log(

components/iframe_forms/iframe-feedback-form.html

@@ -8,8 +8,6 @@
     <link rel="stylesheet" href="../../css/tailwind.generated.css" />
     <!-- Load nostr‑tools v2.17.0 -->
     <script src="https://cdn.jsdelivr.net/npm/[email protected]/lib/nostr.bundle.min.js"></script>
-    <!-- Shared anti-spam npub validation (sets window.validateNpubHex) -->
-    <script type="module" src="../../js/utils/validateNpub.js"></script>
   </head>
   <body class="iframe-form" data-ds="new">
     <div class="container">
@@ -197,12 +195,11 @@
 
         // Set the recipient's NPUB (your personal NPUB)
         const recipientNpub =
-          "npub15jnttpymeytm80hatjqcvhhqhzrhx6gxp8pq0wn93rhnu8s9h9dsha32lx";
+          "npub13yarr7j6vjqjjkahd63dmr27curypehx45ucue286ac7sft27y0srnpmpe";
         const RELAYS = [
           "wss://relay.snort.social",
           "wss://relay.damus.io",
           "wss://relay.primal.net",
-          "wss://nos.lol",
         ];
         const pool = new SimplePool();
 
@@ -215,22 +212,6 @@
             try {
               // Section 1: User Information
               const userNpub = document.getElementById("userNpub").value.trim();
-
-              // Anti-spam: npub is optional here, but if provided it must be a
-              // valid npub so the submission can't carry free-text garbage.
-              if (
-                userNpub &&
-                (typeof window.validateNpubHex !== "function" ||
-                  !window.validateNpubHex(userNpub))
-              ) {
-                log(
-                  "That Nostr public key isn't valid. Enter a valid npub1… or leave it blank. Your submission was not sent.",
-                  "error"
-                );
-                document.getElementById("userNpub")?.focus();
-                return;
-              }
-
               const roleNodes = document.querySelectorAll(
                 'input[name="userRole"]:checked'
               );
@@ -319,31 +300,21 @@ For additional discussions, reach out via bitvid’s Nostr support channels.
 
               // Encrypt the feedback content.
               log("Encrypting feedback content (nip04)...");
-              // Build a structured bitvid submission (kind 30083, PUBLIC — no
-              // encryption). Published from the ephemeral key.
-              const now = Math.floor(Date.now() / 1000);
-              const submissionId =
-                "sub-" +
-                now.toString(36) +
-                "-" +
-                Math.random().toString(36).slice(2, 10);
-              const tags = [
-                ["d", submissionId],
-                ["k", "feedback"],
-              ];
-              if (userNpub) {
-                tags.push(["applicant", userNpub]);
-              }
-              tags.push(
-                ["p", targetPubHex],
-                ["t", "bitvid-submission"],
-                ["client", "bitvid"]
+              const ciphertext = await nip04.encrypt(
+                ephemeralPriv,
+                targetPubHex,
+                feedbackContent
               );
+              log("[DEBUG] Ciphertext: " + ciphertext);
+              log("Encryption done.");
+
+              // Build the event template.
+              const now = Math.floor(Date.now() / 1000);
               const eventTemplate = {
-                kind: 30083,
+                kind: 4,
                 created_at: now,
-                tags,
-                content: feedbackContent,
+                tags: [["p", targetPubHex]],
+                content: ciphertext,
               };
               log(
                 "[DEBUG] Event template before finalizing: " +
@@ -363,7 +334,7 @@ For additional discussions, reach out via bitvid’s Nostr support channels.
               for (const url of RELAYS) {
                 log("Connecting to " + url + " for subscription...");
                 const relay = await Relay.connect(url);
-                relay.subscribe([{ authors: [ephemeralPubHex], kinds: [30083] }], {
+                relay.subscribe([{ authors: [ephemeralPubHex], kinds: [4] }], {
                   onEvent(foundEvent) {
                     if (foundEvent.id === event.id) {
                       log(

components/iframe_forms/iframe-request-form.html

@@ -8,8 +8,6 @@
     <link rel="stylesheet" href="../../css/tailwind.generated.css" />
     <!-- Load nostr‑tools v2.17.0 -->
     <script src="https://cdn.jsdelivr.net/npm/[email protected]/lib/nostr.bundle.min.js"></script>
-    <!-- Shared anti-spam npub validation (sets window.validateNpubHex) -->
-    <script type="module" src="../../js/utils/validateNpub.js"></script>
   </head>
   <body class="iframe-form" data-ds="new">
     <div class="container">
@@ -221,12 +219,11 @@
 
         // Set the recipient's NPUB (your personal NPUB)
         const recipientNpub =
-          "npub15jnttpymeytm80hatjqcvhhqhzrhx6gxp8pq0wn93rhnu8s9h9dsha32lx";
+          "npub13yarr7j6vjqjjkahd63dmr27curypehx45ucue286ac7sft27y0srnpmpe";
         const RELAYS = [
           "wss://relay.snort.social",
           "wss://relay.damus.io",
           "wss://relay.primal.net",
-          "wss://nos.lol",
         ];
         const pool = new SimplePool();
 
@@ -238,21 +235,6 @@
             try {
               // Section 1: User Information
               const userNpub = document.getElementById("userNpub").value.trim();
-
-              // Anti-spam: npub is optional here, but if provided it must be a
-              // valid npub so the submission can't carry free-text garbage.
-              if (
-                userNpub &&
-                (typeof window.validateNpubHex !== "function" ||
-                  !window.validateNpubHex(userNpub))
-              ) {
-                log(
-                  "That Nostr public key isn't valid. Enter a valid npub1… or leave it blank. Your submission was not sent.",
-                  "error"
-                );
-                document.getElementById("userNpub")?.focus();
-                return;
-              }
               const roleNodes = document.querySelectorAll(
                 'input[name="userRole"]:checked'
               );
@@ -361,31 +343,21 @@ For further discussions, reach out through bitvid’s Nostr support channels.
 
               // Encrypt the feature request content
               log("Encrypting feature request content (nip04)...");
-              // Build a structured bitvid submission (kind 30083, PUBLIC — no
-              // encryption). Published from the ephemeral key.
-              const now = Math.floor(Date.now() / 1000);
-              const submissionId =
-                "sub-" +
-                now.toString(36) +
-                "-" +
-                Math.random().toString(36).slice(2, 10);
-              const tags = [
-                ["d", submissionId],
-                ["k", "feature"],
-              ];
-              if (userNpub) {
-                tags.push(["applicant", userNpub]);
-              }
-              tags.push(
-                ["p", targetPubHex],
-                ["t", "bitvid-submission"],
-                ["client", "bitvid"]
+              const ciphertext = await nip04.encrypt(
+                ephemeralPriv,
+                targetPubHex,
+                featureRequestContent
               );
+              log("[DEBUG] Ciphertext: " + ciphertext);
+              log("Encryption done.");
+
+              // Build the event template
+              const now = Math.floor(Date.now() / 1000);
               const eventTemplate = {
-                kind: 30083,
+                kind: 4,
                 created_at: now,
-                tags,
-                content: featureRequestContent,
+                tags: [["p", targetPubHex]],
+                content: ciphertext,
               };
               log(
                 "[DEBUG] Event template before finalizing: " +
@@ -405,7 +377,7 @@ For further discussions, reach out through bitvid’s Nostr support channels.
               for (const url of RELAYS) {
                 log("Connecting to " + url + " for subscription...");
                 const relay = await Relay.connect(url);
-                relay.subscribe([{ authors: [ephemeralPubHex], kinds: [30083] }], {
+                relay.subscribe([{ authors: [ephemeralPubHex], kinds: [4] }], {
                   onEvent(foundEvent) {
                     if (foundEvent.id === event.id) {
                       log(

components/login-modal.html

@@ -47,48 +47,18 @@
     >
       <div class="space-y-2 text-left">
         <p class="text-sm text-text-muted">
-          Use BitLogin for a password-style sign-in, or connect the Nostr
-          identity you already use. Both keep you in control of your keys.
+          Choose how you'd like to sign in. Connect a browser extension, link a
+          remote signer, or work directly with your keys when you need to.
         </p>
       </div>
 
-      <!--
-        Permanent, statically-declared mount for <bitlogin-auth> -- never
-        written by an innerHTML re-render (this markup never changes after
-        the page loads), so the element is only ever hidden/shown, never
-        destroyed and recreated. Removing it from the DOM tears down its
-        crypto Web Worker (see BitLogin's README).
-      -->
-      <div
-        id="bitloginMount"
-        class="rounded-3xl border border-border bg-overlay-panel-soft/90 p-4 shadow-lg backdrop-blur-sm sm:p-5"
-      >
-        <div class="mb-3 space-y-1">
-          <h3 class="text-base font-semibold text-text">BitLogin</h3>
-          <p class="text-sm text-text-muted">
-            A portable login name and password for BitLogin-enabled sites.
-          </p>
-        </div>
-        <bitlogin-auth
-          id="bitloginWidget"
-          vault-relays="wss://relay.damus.io,wss://nos.lol,wss://relay.nostr.band,wss://nostr.wine,wss://relay.snort.social"
-          discovery-relays="wss://purplepag.es,wss://relay.nostr.band,wss://nostr-pub.wellorder.net"
-        ></bitlogin-auth>
-      </div>
-
       <section
-        class="space-y-5 rounded-3xl border border-accent/40 bg-overlay-panel-soft/90 p-4 shadow-lg backdrop-blur-sm sm:p-5"
-        aria-labelledby="nostrLoginOptionsTitle"
+        class="space-y-5 rounded-3xl border border-border bg-overlay-panel-soft/90 p-4 shadow-lg backdrop-blur-sm sm:p-5"
       >
         <div class="space-y-1">
-          <p class="text-xs font-semibold uppercase tracking-wide text-accent">
-            Nostr sign-in
-          </p>
-          <h3 id="nostrLoginOptionsTitle" class="text-base font-semibold text-text">
-            Use your existing Nostr identity
-          </h3>
+          <h3 class="text-base font-semibold text-text">Available methods</h3>
           <p class="text-sm text-text-muted">
-            Browser extension (NIP-07), remote signer (NIP-46), or your own key.
+            Pick the option that matches how you manage your Nostr identity.
           </p>
         </div>
 

components/profile-modal.html

@@ -62,35 +62,6 @@
         </button>
       </div>
 
-      <!--
-        Active-identity card (#43): visible on EVERY pane, straddling the
-        header divider, so users always see which profile they're acting as
-        (e.g. before uploading). Clicking it jumps to the Account pane.
-      -->
-      <button
-        id="profileModalIdentityCard"
-        type="button"
-        class="profile-modal__identity focus-ring hidden"
-        aria-hidden="true"
-        aria-label="Active profile — open account settings"
-      >
-        <span class="profile-modal__identity-avatar" aria-hidden="true">
-          <img
-            id="profileModalIdentityAvatar"
-            src="/assets/svg/default-profile.svg"
-            alt=""
-          />
-        </span>
-        <span class="profile-modal__identity-copy">
-          <span class="profile-modal__identity-kicker">Acting as</span>
-          <span
-            id="profileModalIdentityName"
-            class="profile-modal__identity-name"
-            >No active profile</span
-          >
-        </span>
-      </button>
-
       <!-- Modal Body -->
       <div class="profile-modal__body">
         <div
@@ -100,15 +71,7 @@
         >
           <!-- Left navigation column -->
           <div class="profile-modal__menu" data-profile-mobile-menu aria-hidden="false">
-            <div class="profile-modal__menu-heading">
-              <h3 id="profileModalMenuHeading" class="profile-modal__menu-title">
-                Profile &amp; settings
-              </h3>
-              <p class="profile-modal__menu-hint">
-                Choose what you want to manage
-              </p>
-            </div>
-            <nav class="profile-modal__nav" aria-labelledby="profileModalMenuHeading">
+            <nav class="profile-modal__nav" aria-label="Profile sections">
               <button
                 id="profileNavAccount"
                 type="button"
@@ -116,7 +79,6 @@
                 aria-controls="profilePaneAccount"
                 aria-selected="true"
                 data-state="active"
-                data-mobile-description="Profile and account settings"
               >
                 <svg
                   class="h-4 w-4"
@@ -139,7 +101,6 @@
                 class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneRelays"
                 aria-selected="false"
-                data-mobile-description="Manage your relay connections"
               >
                 <svg
                   class="h-4 w-4"
@@ -162,7 +123,6 @@
                 class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneWallet"
                 aria-selected="false"
-                data-mobile-description="Manage your wallet and payments"
               >
                 <svg
                   xmlns="http://www.w3.org/2000/svg"
@@ -184,7 +144,6 @@
                 class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneStorage"
                 aria-selected="false"
-                data-mobile-description="Manage your stored files"
               >
                 <svg
                   class="h-4 w-4"
@@ -201,59 +160,12 @@
                 </svg>
                 Storage
               </button>
-              <button
-                id="profileNavMyVideos"
-                type="button"
-                class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
-                aria-controls="profilePaneMyVideos"
-                aria-selected="false"
-                data-mobile-description="View and manage your videos"
-              >
-                <svg
-                  class="h-4 w-4"
-                  fill="none"
-                  viewBox="0 0 24 24"
-                  stroke="currentColor"
-                >
-                  <path
-                    stroke-linecap="round"
-                    stroke-linejoin="round"
-                    stroke-width="2"
-                    d="M4 4h16v16H4V4zm0 5h16M9 4v16m6-16v16"
-                  />
-                </svg>
-                My Videos
-              </button>
-              <button
-                id="profileNavPlaylists"
-                type="button"
-                class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
-                aria-controls="profilePanePlaylists"
-                aria-selected="false"
-                data-mobile-description="Organize your playlists"
-              >
-                <svg
-                  class="h-4 w-4"
-                  fill="none"
-                  viewBox="0 0 24 24"
-                  stroke="currentColor"
-                >
-                  <path
-                    stroke-linecap="round"
-                    stroke-linejoin="round"
-                    stroke-width="2"
-                    d="M4 6h11M4 10h11M4 14h7m3 5l6-3.5L14 12v7z"
-                  />
-                </svg>
-                Playlists
-              </button>
               <button
                 id="profileNavHashtags"
                 type="button"
                 class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneHashtags"
                 aria-selected="false"
-                data-mobile-description="Explore and follow hashtags"
               >
                 <svg
                   class="h-4 w-4"
@@ -276,7 +188,6 @@
                 class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneSubscriptions"
                 aria-selected="false"
-                data-mobile-description="Manage your subscriptions"
               >
                 <svg
                   class="h-4 w-4"
@@ -302,7 +213,6 @@
                 class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneFriends"
                 aria-selected="false"
-                data-mobile-description="Find and manage your friends"
               >
                 <svg
                   class="h-4 w-4"
@@ -325,7 +235,6 @@
                 class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneSafety"
                 aria-selected="false"
-                data-mobile-description="Privacy and safety settings"
               >
                 <svg
                   class="h-4 w-4"
@@ -348,7 +257,6 @@
                 class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneBlocked"
                 aria-selected="false"
-                data-mobile-description="Manage blocked users"
               >
                 <svg
                   class="h-4 w-4"
@@ -371,7 +279,6 @@
                 class="btn-ghost focus-ring relative w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneMessages"
                 aria-selected="false"
-                data-mobile-description="View your messages"
               >
                 <svg
                   class="h-4 w-4"
@@ -399,7 +306,6 @@
                 class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneHistory"
                 aria-selected="false"
-                data-mobile-description="View your watch history"
               >
                 <svg
                   class="h-4 w-4"
@@ -429,7 +335,6 @@
                 class="btn-ghost focus-ring hidden w-full justify-start gap-2 px-3 py-2 text-xs font-medium"
                 aria-controls="profilePaneAdmin"
                 aria-selected="false"
-                data-mobile-description="Moderate users and content"
               >
                 <svg
                   class="h-4 w-4"
@@ -445,39 +350,11 @@
                   />
                 </svg>
                 Admin (Moderation)
-                <span
-                  id="profileNavAdminUnreadDot"
-                  class="profile-nav__unread-dot"
-                  aria-hidden="true"
-                ></span>
-              </button>
-            </nav>
-            <div class="profile-modal__mobile-actions" role="group" aria-label="Session actions">
-              <button
-                id="profileMobileLockNowBtn"
-                type="button"
-                class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium lg:hidden hidden"
-                title="Forget your unlocked key on this device and re-lock storage + wallet now"
-              >
-                <svg
-                  class="h-4 w-4"
-                  fill="none"
-                  viewBox="0 0 24 24"
-                  stroke="currentColor"
-                >
-                  <path
-                    stroke-linecap="round"
-                    stroke-linejoin="round"
-                    stroke-width="2"
-                    d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z"
-                  />
-                </svg>
-                Lock this device
               </button>
               <button
                 id="profileMobileLogoutBtn"
                 type="button"
-                class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium lg:hidden"
+                class="btn-ghost focus-ring w-full justify-start gap-2 px-3 py-2 text-xs font-medium mt-6 lg:hidden"
                 data-variant="critical"
               >
                 <svg
@@ -495,7 +372,7 @@
                 </svg>
                 Logout
               </button>
-            </div>
+            </nav>
           </div>
 
           <!-- Right content panes -->
@@ -506,19 +383,16 @@
           >
             <div
               id="profilePermissionPrompt"
-              data-testid="profile-permission-prompt"
               class="card hidden flex flex-col gap-3 p-4 sm:flex-row sm:items-center sm:justify-between"
               role="status"
               aria-live="polite"
             >
               <p
                 id="profilePermissionPromptMessage"
-                data-testid="profile-permission-prompt-message"
                 class="text-sm text-muted"
               ></p>
               <button
                 id="profilePermissionPromptButton"
-                data-testid="profile-permission-prompt-button"
                 type="button"
                 class="btn focus-ring"
               >
@@ -843,12 +717,6 @@
                   <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12a9 9 0 0 0-9-9 9.75 9.75 0 0 0-6.74 2.74L3 8"></path><path d="M3 3v5h5"></path><path d="M3 12a9 9 0 0 0 9 9 9.75 9.75 0 0 0 6.74-2.74L21 16"></path><path d="M16 21h5v-5"></path></svg>
                 </button>
               </div>
-              <div
-                id="relayHealthSuggestion"
-                class="hidden card border border-status-warning/40 bg-status-warning/10 p-3 text-xs text-text"
-                role="status"
-                aria-live="polite"
-              ></div>
               <ul id="relayList" class="grid-stack" data-orientation="vertical"></ul>
               <div class="space-y-2 px-1">
                 <label
@@ -884,51 +752,16 @@
                 <p class="text-sm text-muted">
                   Connect a Nostr Wallet Connect (NWC) compatible wallet to zap creators directly from bitvid.
                 </p>
-                <div id="profileWalletBitcoinConnectRow" class="hidden space-y-2">
-                  <button
-                    id="profileWalletBitcoinConnect"
-                    type="button"
-                    class="btn focus-ring inline-flex items-center gap-2"
-                  >
-                    <svg
-                      class="h-4 w-4"
-                      viewBox="0 0 24 24"
-                      fill="none"
-                      stroke="currentColor"
-                      stroke-width="2"
-                      stroke-linecap="round"
-                      stroke-linejoin="round"
-                      aria-hidden="true"
-                    >
-                      <path d="M13 2 4 14h6l-1 8 9-12h-6l1-8Z"></path>
-                    </svg>
-                    Connect wallet
-                  </button>
-                  <p class="text-xs text-muted">
-                    One-tap connect via Bitcoin Connect (NWC) — or paste a connection manually below.
-                  </p>
-                </div>
                 <div class="space-y-4">
-                  <details id="profileWalletAdvanced" class="wallet-advanced">
-                    <summary
-                      id="profileWalletAdvancedSummary"
-                      class="wallet-advanced__summary cursor-pointer text-xs font-medium text-muted-strong hover:text-text"
-                    >
-                      Advanced — paste a connection manually
-                    </summary>
-                    <label
-                      class="mt-3 block text-sm text-muted-strong"
-                      for="profileWalletUri"
-                    >
-                      <span class="mb-2 block font-medium">Wallet Connect URI</span>
-                      <input
-                        id="profileWalletUri"
-                        type="url"
-                        placeholder="nostr+walletconnect://<public-key>?relay=wss://relay.example.com"
-                        class="input"
-                      />
-                    </label>
-                  </details>
+                  <label class="block text-sm text-muted-strong" for="profileWalletUri">
+                    <span class="mb-2 block font-medium">Wallet Connect URI</span>
+                    <input
+                      id="profileWalletUri"
+                      type="url"
+                      placeholder="nostr+walletconnect://<public-key>?relay=wss://relay.example.com"
+                      class="input"
+                    />
+                  </label>
                   <label class="block text-sm text-muted-strong" for="profileWalletDefaultZap">
                     <span class="mb-2 block font-medium">Default zap amount (sats)</span>
                     <input
@@ -972,33 +805,6 @@
                   role="status"
                   aria-live="polite"
                 ></p>
-
-                <div id="profileWalletSync" class="mt-2 rounded-lg border border-default p-4 space-y-3 hidden">
-                    <div class="space-y-1">
-                        <h4 class="text-sm font-semibold text-text">Cross-device sync</h4>
-                        <p class="text-xs text-muted">
-                            Save an <strong>encrypted</strong> copy of your wallet
-                            connection to your Nostr account so you can use it on other
-                            devices without re-pasting the URI.
-                        </p>
-                    </div>
-                    <label class="flex items-start gap-2 text-sm text-muted-strong">
-                        <input id="walletSyncToggle" type="checkbox" class="checkbox mt-0.5" />
-                        <span>Sync my wallet connection to my Nostr account (encrypted)</span>
-                    </label>
-                    <p class="text-xs text-status-danger">
-                        <strong>Spending warning:</strong> a wallet connect URI can spend
-                        from your wallet. The encrypted copy lives on public relays —
-                        anyone who controls your Nostr key could decrypt it and spend
-                        from this wallet. Only enable this if you accept that risk.
-                    </p>
-                    <div class="flex flex-wrap items-center gap-3">
-                        <button id="walletSyncRestoreBtn" type="button" class="btn-ghost focus-ring">
-                            Restore from my Nostr account
-                        </button>
-                    </div>
-                    <p id="walletSyncStatus" class="text-xs" role="status" aria-live="polite"></p>
-                </div>
               </div>
             </section>
 
@@ -1034,47 +840,15 @@
                             <span class="mb-2 block font-medium">Provider</span>
                             <select id="storageProvider" class="input">
                                 <option value="cloudflare_r2" selected>Cloudflare R2</option>
-                                <option value="backblaze_b2">Backblaze B2</option>
                                 <option value="generic_s3">Custom S3</option>
-                                <option id="storageProviderBlossomOption" value="blossom" class="hidden">Blossom (Nostr-native)</option>
                             </select>
                         </label>
 
-                        <!-- Blossom (Nostr-native) — keyless, multi-server. Shown when the
-                             Blossom provider is selected; auth is your Nostr signer. -->
-                        <div id="storageBlossomSection" class="hidden space-y-3">
-                            <div class="card border border-info/30 bg-info/10 p-3 text-xs text-info">
-                                Blossom stores files on nostr-native blob servers. No access keys — uploads are authorized by your Nostr signer. Add one or more servers (uploads mirror to all for resilience). The first server is the primary.
-                            </div>
-                            <label class="block text-sm text-muted-strong" for="storageBlossomServers">
-                                <span class="mb-2 block font-medium">Blossom servers (one URL per line)</span>
-                                <textarea id="storageBlossomServers" rows="3" class="input" placeholder="https://blossom.example.com
-https://another.blossom.example"></textarea>
-                            </label>
-                            <!-- BUD-03 kind-10063 discovery: import the list you've published, or publish the list above. -->
-                            <div class="flex flex-wrap gap-2">
-                                <button id="storageBlossomImportBtn" type="button" class="btn-ghost focus-ring text-xs">
-                                    Import from my server list
-                                </button>
-                                <button id="storageBlossomPublishBtn" type="button" class="btn-ghost focus-ring text-xs">
-                                    Publish my server list
-                                </button>
-                            </div>
-                            <p id="storageBlossomServerListStatus" class="text-xs text-muted" role="status"></p>
-                        </div>
-
-                        <!-- S3-family fields (R2 / B2 / Custom S3). Hidden for Blossom. -->
-                        <div id="storageS3Fields" class="space-y-4">
                         <!-- R2 Helper -->
                         <div id="storageR2Helper" class="card border border-info/30 bg-info/10 p-3 text-xs text-info">
                             Enter your Cloudflare R2 credentials. Your Account ID (from dashboard) is used to connect. For Public Access URL, use your custom domain or R2.dev subdomain. Ensure the token has "Object Read & Write" permissions.
                         </div>
 
-                        <!-- B2 Helper -->
-                        <div id="storageB2Helper" class="card border border-info/30 bg-info/10 p-3 text-xs text-info hidden">
-                            Enter your Backblaze B2 Application Key. Set Region to your bucket's region (e.g. us-west-004) — bitvid derives the endpoint and the public URL (https://&lt;bucket&gt;.s3.&lt;region&gt;.backblazeb2.com). Your bucket must be Public for playback; override the Public Access URL if you serve files from a custom domain/CDN.
-                        </div>
-
                         <!-- S3 Helper -->
                         <div id="storageS3Helper" class="card border border-info/30 bg-info/10 p-3 text-xs text-info hidden">
                             Enter your S3-compatible storage details. The Endpoint URL is your provider's API address (e.g., https://s3.amazonaws.com or your MinIO URL).
@@ -1118,8 +892,6 @@ https://another.blossom.example"></textarea>
                                 The public URL where your files will be accessible (CDN).
                             </span>
                         </label>
-                        </div>
-                        <!-- /storageS3Fields -->
 
                         <label class="flex items-center gap-2 text-sm text-muted-strong">
                             <input id="storageDefault" type="checkbox" class="checkbox" />
@@ -1137,179 +909,12 @@ https://another.blossom.example"></textarea>
                         <button id="storageClearBtn" type="button" class="btn-ghost focus-ring text-status-danger">
                             Clear
                         </button>
-                        <button id="storageCorsHelpBtn" type="button" class="btn-ghost focus-ring text-xs">
-                            CORS setup help
-                        </button>
                     </div>
                     <p id="storageFormStatus" class="text-sm" role="status" aria-live="polite"></p>
-
-                    <div id="profileStorageSync" class="mt-2 rounded-lg border border-default p-4 space-y-3 hidden">
-                        <div class="space-y-1">
-                            <h4 class="text-sm font-semibold text-text">Cross-device sync</h4>
-                            <p class="text-xs text-muted">
-                                Save an <strong>encrypted</strong> copy of these storage
-                                settings to your Nostr account so you don't have to
-                                re-enter them on other devices.
-                            </p>
-                        </div>
-                        <label class="flex items-start gap-2 text-sm text-muted-strong">
-                            <input id="storageSyncToggle" type="checkbox" class="checkbox mt-0.5" />
-                            <span>Sync these settings to my Nostr account (encrypted)</span>
-                        </label>
-                        <p class="text-xs text-status-warning">
-                            The encrypted copy lives on public relays. It is readable
-                            only with your Nostr key, but anyone who controls your key
-                            could decrypt it — and the relays can see that your account
-                            stores bitvid settings.
-                        </p>
-                        <div class="flex flex-wrap items-center gap-3">
-                            <button id="storageSyncRestoreBtn" type="button" class="btn-ghost focus-ring">
-                                Restore from my Nostr account
-                            </button>
-                        </div>
-                        <p id="storageSyncStatus" class="text-xs" role="status" aria-live="polite"></p>
-                    </div>
                 </div>
               </div>
             </section>
 
-            <section
-              id="profilePaneMyVideos"
-              class="profile-pane hidden space-y-4"
-              role="tabpanel"
-              aria-labelledby="profileNavMyVideos"
-            >
-              <p class="text-sm text-muted">
-                Every video you’ve published, with health checks so you can spot
-                broken or orphaned items and keep your library and storage tidy.
-              </p>
-              <div class="flex items-center justify-between gap-3">
-                <h3 class="text-base font-semibold text-text">My Videos</h3>
-                <button
-                  id="profileMyVideosRefreshBtn"
-                  type="button"
-                  class="btn-ghost btn-icon"
-                  data-size="sm"
-                  aria-label="Refresh my videos"
-                >
-                  <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12a9 9 0 0 0-9-9 9.75 9.75 0 0 0-6.74 2.74L3 8"></path><path d="M3 3v5h5"></path><path d="M3 12a9 9 0 0 0 9 9 9.75 9.75 0 0 0 6.74-2.74L21 16"></path><path d="M16 21h5v-5"></path></svg>
-                </button>
-              </div>
-              <p
-                id="profileMyVideosSummary"
-                class="text-sm text-muted"
-                role="status"
-                aria-live="polite"
-              ></p>
-              <label id="profileMyVideosAutoShareRow" class="hidden flex items-start gap-2 text-sm text-muted-strong">
-                <input id="profileMyVideosAutoShare" type="checkbox" class="checkbox mt-0.5" />
-                <span>Mirror new public videos to other Nostr apps by default (NIP-71)</span>
-              </label>
-              <p
-                id="profileMyVideosLoading"
-                class="text-sm text-muted hidden"
-                role="status"
-                aria-live="polite"
-              >
-                Loading your videos…
-              </p>
-              <div
-                id="profileMyVideosEmpty"
-                class="card border border-dashed border-border/60 p-6 text-center text-sm text-muted hidden"
-              >
-                You haven’t published any videos yet.
-              </div>
-              <ul
-                id="profileMyVideosList"
-                class="grid-stack"
-                data-orientation="vertical"
-              ></ul>
-              <div id="profileMyVideosOrphans" class="space-y-2 hidden">
-                <div class="flex items-center justify-between gap-3">
-                  <h4 class="text-sm font-semibold text-text">
-                    Orphaned storage objects
-                  </h4>
-                  <button
-                    id="profileMyVideosOrphanDeleteAll"
-                    type="button"
-                    class="btn-ghost focus-ring text-xs text-status-danger"
-                  >
-                    Delete all
-                  </button>
-                </div>
-                <p class="text-2xs text-muted">
-                  Files in your bucket that no current video references — safe to
-                  remove to reclaim space.
-                </p>
-                <ul
-                  id="profileMyVideosOrphanList"
-                  class="grid-stack"
-                  data-orientation="vertical"
-                ></ul>
-              </div>
-            </section>
-
-            <section
-              id="profilePanePlaylists"
-              class="profile-pane hidden space-y-4"
-              role="tabpanel"
-              aria-labelledby="profileNavPlaylists"
-            >
-              <p class="text-sm text-muted">
-                Manage your playlists — rename them, reorder or remove videos, or
-                delete a playlist. Add videos to a playlist from any video’s ⋯
-                menu.
-              </p>
-              <div class="flex items-center justify-between gap-3">
-                <h3 class="text-base font-semibold text-text">Playlists</h3>
-                <button
-                  id="profilePlaylistsRefreshBtn"
-                  type="button"
-                  class="btn-ghost btn-icon"
-                  data-size="sm"
-                  aria-label="Refresh playlists"
-                >
-                  <svg
-                    xmlns="http://www.w3.org/2000/svg"
-                    width="16"
-                    height="16"
-                    viewBox="0 0 24 24"
-                    fill="none"
-                    stroke="currentColor"
-                    stroke-width="2"
-                    stroke-linecap="round"
-                    stroke-linejoin="round"
-                  >
-                    <path
-                      d="M21 12a9 9 0 0 0-9-9 9.75 9.75 0 0 0-6.74 2.74L3 8"
-                    ></path>
-                    <path d="M3 3v5h5"></path>
-                    <path
-                      d="M3 12a9 9 0 0 0 9 9 9.75 9.75 0 0 0 6.74-2.74L21 16"
-                    ></path>
-                    <path d="M16 21h5v-5"></path>
-                  </svg>
-                </button>
-              </div>
-              <p
-                id="profilePlaylistsLoading"
-                class="text-sm text-muted hidden"
-                role="status"
-                aria-live="polite"
-              >
-                Loading your playlists…
-              </p>
-              <p id="profilePlaylistsEmpty" class="text-sm text-muted hidden">
-                You haven’t made any playlists yet. Open any video’s ⋯ menu and
-                choose “Add to playlist” to start one.
-              </p>
-              <ul
-                id="profilePlaylistsList"
-                class="grid-stack"
-                data-orientation="vertical"
-              ></ul>
-            </section>
-
             <section
               id="profilePaneHashtags"
               class="profile-pane hidden space-y-6"
@@ -1322,7 +927,6 @@ https://another.blossom.example"></textarea>
                 </p>
                 <p
                   id="profileHashtagStatus"
-                  data-testid="hashtags-sync-status"
                   class="text-sm text-muted"
                   role="status"
                   aria-live="polite"
@@ -1449,7 +1053,6 @@ https://another.blossom.example"></textarea>
               </p>
               <p
                 id="subscriptionsStatus"
-                data-testid="subscriptions-sync-status"
                 class="text-sm text-muted"
                 role="status"
                 aria-live="polite"
@@ -1699,56 +1302,6 @@ https://another.blossom.example"></textarea>
                     data-orientation="vertical"
                   ></ul>
                 </div>
-                <div class="space-y-3 border-t border-border/60 pt-4">
-                  <div class="space-y-1">
-                    <h4 class="text-sm font-semibold text-text">
-                      Trusted creators
-                    </h4>
-                    <p class="text-xs text-muted">
-                      Turn off web-of-trust warnings for a creator across all
-                      their videos. They stay listed here until you reset them.
-                    </p>
-                  </div>
-                  <div class="flex flex-wrap items-end gap-2">
-                    <label class="min-w-0 flex-1 space-y-1">
-                      <span class="text-xs font-medium text-muted"
-                        >Creator npub</span
-                      >
-                      <input
-                        id="profileAuthorOverrideInput"
-                        type="text"
-                        class="form-control"
-                        placeholder="npub1…"
-                        autocomplete="off"
-                        spellcheck="false"
-                      />
-                    </label>
-                    <button
-                      id="profileAuthorOverrideAddBtn"
-                      type="button"
-                      class="btn focus-ring"
-                    >
-                      Always show
-                    </button>
-                  </div>
-                  <p
-                    id="profileAuthorOverrideStatus"
-                    class="text-xs text-muted"
-                    role="status"
-                    aria-live="polite"
-                  ></p>
-                  <div
-                    id="profileAuthorOverridesEmpty"
-                    class="card border border-dashed border-border/60 p-4 text-center text-xs text-muted"
-                  >
-                    No trusted creators yet.
-                  </div>
-                  <ul
-                    id="profileAuthorOverridesList"
-                    class="grid-stack hidden"
-                    data-orientation="vertical"
-                  ></ul>
-                </div>
               </div>
 
               <div id="profileLinkPreviewSettings" class="card space-y-4 p-5">
@@ -1786,7 +1339,6 @@ https://another.blossom.example"></textarea>
                 <h3 class="text-base font-semibold text-text">Blocked creators</h3>
                 <button
                   id="blockedRefreshBtn"
-                  data-testid="blocked-refresh-button"
                   type="button"
                   class="btn-ghost btn-icon"
                   data-size="sm"
@@ -1817,17 +1369,11 @@ https://another.blossom.example"></textarea>
               </div>
               <div
                 id="blockedEmpty"
-                data-testid="blocked-empty-state"
                 class="card border border-dashed border-border/60 p-6 text-center text-sm text-muted"
               >
                 You haven’t blocked any creators yet.
               </div>
-              <ul
-                id="blockedList"
-                data-testid="blocked-list"
-                class="grid-stack"
-                data-orientation="vertical"
-              ></ul>
+              <ul id="blockedList" class="grid-stack" data-orientation="vertical"></ul>
             </section>
             <section
               id="profilePaneMessages"
@@ -1968,135 +1514,6 @@ https://another.blossom.example"></textarea>
                 </p>
               </div>
 
-              <div
-                id="adminSubtabBar"
-                class="flex flex-wrap gap-2 border-b border-border/60 pb-3"
-                role="tablist"
-                aria-label="Admin tools"
-              >
-                <button
-                  id="adminSubtabWhitelist"
-                  type="button"
-                  role="tab"
-                  data-admin-subtab="whitelist"
-                  aria-controls="adminWhitelistSection"
-                  aria-selected="true"
-                  data-state="active"
-                  class="btn-ghost focus-ring px-3 py-1.5 text-sm font-medium"
-                >
-                  Whitelist
-                </button>
-                <button
-                  id="adminSubtabBlacklist"
-                  type="button"
-                  role="tab"
-                  data-admin-subtab="blacklist"
-                  aria-controls="adminBlacklistSection"
-                  aria-selected="false"
-                  class="btn-ghost focus-ring px-3 py-1.5 text-sm font-medium"
-                >
-                  Blacklist
-                </button>
-                <button
-                  id="adminSubtabBlockedVideos"
-                  type="button"
-                  role="tab"
-                  data-admin-subtab="blockedVideos"
-                  aria-controls="adminBlockedVideosSection"
-                  aria-selected="false"
-                  class="btn-ghost focus-ring px-3 py-1.5 text-sm font-medium"
-                >
-                  Blocked videos
-                </button>
-                <button
-                  id="adminSubtabModerators"
-                  type="button"
-                  role="tab"
-                  data-admin-subtab="moderators"
-                  aria-controls="adminModeratorsSection"
-                  aria-selected="false"
-                  class="btn-ghost focus-ring px-3 py-1.5 text-sm font-medium hidden"
-                >
-                  Moderators
-                </button>
-                <button
-                  id="adminSubtabSubmissions"
-                  type="button"
-                  role="tab"
-                  data-admin-subtab="submissions"
-                  aria-controls="adminSubmissionsSection"
-                  aria-selected="false"
-                  class="admin-subtab-has-dot btn-ghost focus-ring px-3 py-1.5 text-sm font-medium hidden"
-                >
-                  Submissions
-                  <span
-                    id="adminSubtabSubmissionsDot"
-                    class="admin-subtab-dot"
-                    aria-hidden="true"
-                  ></span>
-                </button>
-              </div>
-
-              <div
-                id="adminSubmissionsSection"
-                class="space-y-4 hidden"
-                aria-hidden="true"
-              >
-                <div class="flex items-center justify-between gap-3">
-                  <div>
-                    <h4 class="text-base font-semibold text-text">Submissions</h4>
-                    <p class="text-2xs text-muted">
-                      Applications, appeals, and reports from the public forms.
-                      Approve an application to add it to the whitelist.
-                    </p>
-                  </div>
-                  <button
-                    id="adminSubmissionsRefreshBtn"
-                    type="button"
-                    class="btn-ghost btn-icon"
-                    data-size="sm"
-                    aria-label="Refresh submissions"
-                  >
-                    <svg
-                      xmlns="http://www.w3.org/2000/svg"
-                      width="16"
-                      height="16"
-                      viewBox="0 0 24 24"
-                      fill="none"
-                      stroke="currentColor"
-                      stroke-width="2"
-                      stroke-linecap="round"
-                      stroke-linejoin="round"
-                    >
-                      <path
-                        d="M21 12a9 9 0 0 0-9-9 9.75 9.75 0 0 0-6.74 2.74L3 8"
-                      ></path>
-                      <path d="M3 3v5h5"></path>
-                      <path
-                        d="M3 12a9 9 0 0 0 9 9 9.75 9.75 0 0 0 6.74-2.74L21 16"
-                      ></path>
-                      <path d="M16 21h5v-5"></path>
-                    </svg>
-                  </button>
-                </div>
-                <p
-                  id="adminSubmissionsLoading"
-                  class="text-sm text-muted hidden"
-                  role="status"
-                  aria-live="polite"
-                >
-                  Loading submissions…
-                </p>
-                <p id="adminSubmissionsEmpty" class="text-sm text-muted hidden">
-                  No pending submissions.
-                </p>
-                <ul
-                  id="adminSubmissionsList"
-                  class="grid-stack"
-                  data-orientation="vertical"
-                ></ul>
-              </div>
-
               <div id="adminModeratorsSection" class="space-y-4 hidden" aria-hidden="true">
                 <div class="flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between">
                   <div class="flex items-center gap-2">
@@ -2194,7 +1611,7 @@ https://another.blossom.example"></textarea>
                 <ul id="adminWhitelistList" class="grid-stack" data-orientation="vertical"></ul>
               </div>
 
-              <div id="adminBlacklistSection" class="space-y-4 hidden" aria-hidden="true">
+              <div id="adminBlacklistSection" class="space-y-4">
                 <div class="flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between">
                   <div class="flex items-center gap-2">
                     <h4 class="text-base font-semibold text-text">Blacklist</h4>
@@ -2240,53 +1657,6 @@ https://another.blossom.example"></textarea>
                 </div>
                 <ul id="adminBlacklistList" class="grid-stack" data-orientation="vertical"></ul>
               </div>
-
-              <div id="adminBlockedVideosSection" class="space-y-4 hidden" aria-hidden="true">
-                <div class="flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between">
-                  <div class="flex items-center gap-2">
-                    <h4 class="text-base font-semibold text-text">Blocked videos</h4>
-                    <button
-                      id="adminBlockedVideosRefreshBtn"
-                      type="button"
-                      class="btn-ghost btn-icon"
-                      data-size="sm"
-                      aria-label="Refresh blocked videos"
-                    >
-                      <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12a9 9 0 0 0-9-9 9.75 9.75 0 0 0-6.74 2.74L3 8"></path><path d="M3 3v5h5"></path><path d="M3 12a9 9 0 0 0 9 9 9.75 9.75 0 0 0 6.74-2.74L21 16"></path><path d="M16 21h5v-5"></path></svg>
-                    </button>
-                  </div>
-                </div>
-                <p class="text-sm text-muted">
-                  Individual videos hidden everywhere on bitvid without blocking their creator. Block a video from its ⋯ menu, or paste an event id / nevent below.
-                </p>
-                <div class="flex flex-col gap-3 sm:flex-row sm:items-end">
-                  <label class="flex-1 text-sm text-muted-strong" for="adminBlockedVideoInput">
-                    <span class="mb-2 block font-medium">Event id or nevent</span>
-                    <input
-                      id="adminBlockedVideoInput"
-                      type="text"
-                      inputmode="text"
-                      autocomplete="off"
-                      class="input"
-                      placeholder="nevent1… or hex event id"
-                    />
-                  </label>
-                  <button
-                    id="adminAddBlockedVideoBtn"
-                    type="button"
-                    class="btn focus-ring"
-                  >
-                    Block video
-                  </button>
-                </div>
-                <div
-                  id="adminBlockedVideosEmpty"
-                  class="card border border-dashed border-border/60 p-4 text-center text-sm text-muted"
-                >
-                  No videos are individually blocked yet.
-                </div>
-                <ul id="adminBlockedVideosList" class="grid-stack" data-orientation="vertical"></ul>
-              </div>
             </section>
           </div>
         </div>
@@ -2294,22 +1664,6 @@ https://another.blossom.example"></textarea>
 
       <!-- Modal Footer -->
       <div class="hidden lg:flex items-center justify-end gap-3 border-t border-border/60 p-4">
-        <button
-          id="profileTakeTourBtn"
-          type="button"
-          class="btn-ghost focus-ring"
-          title="Replay the quick guided tour of bitvid"
-        >
-          Take the tour
-        </button>
-        <button
-          id="profileLockNowBtn"
-          type="button"
-          class="btn-ghost focus-ring hidden"
-          title="Forget your unlocked key on this device and re-lock storage + wallet now"
-        >
-          Lock this device
-        </button>
         <button id="profileLogoutBtn" class="btn focus-ring" data-variant="danger">
           Logout
         </button>
@@ -2317,75 +1671,3 @@ https://another.blossom.example"></textarea>
     </div>
   </div>
 </div>
-
-<!-- Storage CORS setup helper (B2 / S3-compatible). Shown on demand from the
-     Storage pane; renders above the profile modal via modal-always-on-top. -->
-<div
-  id="storageCorsModal"
-  class="bv-modal modal-always-on-top hidden items-start justify-center md:items-center"
-  role="dialog"
-  aria-modal="true"
-  aria-labelledby="storageCorsModalTitle"
-  aria-describedby="storageCorsModalIntro"
-  data-ds="new"
->
-  <div class="bv-modal-backdrop" data-storage-cors-dismiss></div>
-
-  <div class="modal-sheet max-h-modal-shell overflow-hidden flex flex-col w-full max-w-2xl" tabindex="-1">
-    <div class="modal-header">
-      <h2 id="storageCorsModalTitle" class="text-xl font-bold text-text">
-        Allow browser uploads (bucket CORS)
-      </h2>
-      <button
-        id="storageCorsModalClose"
-        class="modal-close"
-        type="button"
-        aria-label="Close CORS setup help"
-        data-storage-cors-dismiss
-      >
-        <svg xmlns="http://www.w3.org/2000/svg" class="h-6 w-6" fill="none" viewBox="0 0 24 24" stroke="currentColor">
-          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12" />
-        </svg>
-      </button>
-    </div>
-
-    <div class="modal-body overflow-y-auto p-5 space-y-4 text-sm text-muted-strong">
-      <p id="storageCorsModalIntro">
-        Uploading from your browser uses an S3 <code>PUT</code>/<code>POST</code>,
-        which your bucket must allow via CORS.
-      </p>
-
-      <div>
-        <div class="mb-1 flex items-center justify-between gap-2">
-          <span class="font-medium text-text">CORS rules JSON</span>
-          <button id="storageCorsCopyJsonBtn" type="button" class="btn-ghost focus-ring text-xs">
-            Copy JSON
-          </button>
-        </div>
-        <pre class="card border border-default bg-surface-strong/40 p-3 overflow-x-auto text-xs leading-relaxed"><code id="storageCorsJson" class="whitespace-pre text-text"></code></pre>
-        <p class="mt-1 text-xs text-muted">
-          Origins are pre-filled from this site. Add your other bitvid domains, or use
-          <code>["*"]</code> to allow every origin.
-        </p>
-      </div>
-
-      <div>
-        <div class="mb-1 flex items-center justify-between gap-2">
-          <span id="storageCorsCmdLabel" class="font-medium text-text">Apply it</span>
-          <button id="storageCorsCopyCmdBtn" type="button" class="btn-ghost focus-ring text-xs">
-            Copy command
-          </button>
-        </div>
-        <pre class="card border border-default bg-surface-strong/40 p-3 overflow-x-auto text-xs leading-relaxed"><code id="storageCorsCli" class="whitespace-pre text-text"></code></pre>
-      </div>
-
-      <p id="storageCorsNotes" class="whitespace-pre-line text-xs text-muted"></p>
-    </div>
-
-    <div class="modal-footer flex items-center justify-end gap-3 border-t border-border/60 p-4">
-      <button id="storageCorsDoneBtn" type="button" class="btn focus-ring" data-storage-cors-dismiss>
-        Done
-      </button>
-    </div>
-  </div>
-</div>

components/sidebar.html

@@ -54,49 +54,6 @@
             />
             <span class="sidebar-text">For You</span>
           </a>
-          <a
-            id="trendingLink"
-            href="#view=trending"
-            class="sidebar-nav-link"
-            title="Trending"
-          >
-            <svg
-              xmlns="http://www.w3.org/2000/svg"
-              viewBox="0 0 24 24"
-              fill="none"
-              stroke="currentColor"
-              stroke-width="2"
-              stroke-linecap="round"
-              stroke-linejoin="round"
-              class="sidebar-icon"
-              aria-hidden="true"
-            >
-              <polyline points="23 6 13.5 15.5 8.5 10.5 1 18"></polyline>
-              <polyline points="17 6 23 6 23 12"></polyline>
-            </svg>
-            <span class="sidebar-text">Trending</span>
-          </a>
-          <a
-            id="mostZappedLink"
-            href="#view=most-zapped"
-            class="sidebar-nav-link"
-            title="Most Zapped"
-          >
-            <svg
-              xmlns="http://www.w3.org/2000/svg"
-              viewBox="0 0 24 24"
-              fill="none"
-              stroke="currentColor"
-              stroke-width="2"
-              stroke-linecap="round"
-              stroke-linejoin="round"
-              class="sidebar-icon"
-              aria-hidden="true"
-            >
-              <polygon points="13 2 3 14 12 14 11 22 21 10 12 10 13 2"></polygon>
-            </svg>
-            <span class="sidebar-text">Most Zapped</span>
-          </a>
           <a href="#view=most-recent-videos" class="sidebar-nav-link" title="Recently Added">
             <img
               src="assets/svg/globe-icon.svg"
@@ -294,6 +251,19 @@
               />
               <span class="sidebar-text">βeacon</span>
             </a>
+            <a
+              href="#view=dev/agent-dashboard"
+              class="sidebar-nav-link sidebar-nav-link--sub"
+              title="Dev Tools"
+            >
+              <img
+                src="assets/svg/video-settings-gear.svg"
+                alt=""
+                aria-hidden="true"
+                class="sidebar-icon"
+              />
+              <span class="sidebar-text">Dev Tools</span>
+            </a>
             <a
               href="#"
               data-beta-link

components/upload-modal.html

@@ -153,11 +153,6 @@
                                     <button type="button" id="btn-manage-storage" class="text-xs text-muted hover:text-text hover:underline">Manage</button>
                                 </div>
                             </div>
-                            <!-- #44: switch upload destination without leaving the modal -->
-                            <div id="storage-connection-picker" class="hidden space-y-1">
-                                <label for="select-storage-connection" class="text-xs text-muted">Upload destination</label>
-                                <select id="select-storage-connection" class="input input-sm text-xs"></select>
-                            </div>
                             <div class="grid grid-cols-3 gap-2 text-xs">
                                 <div class="min-w-0">
                                     <span class="block text-muted">Provider</span>
@@ -254,10 +249,6 @@
                  <!-- Hashtags -->
                 <div class="space-y-2">
                      <label class="block text-sm font-medium text-text">Hashtags</label>
-                     <div id="hashtag-suggestions-wrap" class="space-y-1 hidden">
-                        <p class="text-xs text-muted">Reuse a tag from your videos:</p>
-                        <div id="hashtag-suggestions" class="flex flex-wrap gap-2"></div>
-                     </div>
                      <div
                         class="rounded-lg border border-border/70 bg-surface/30 p-3 space-y-3"
                         data-nip71-repeater="t"
@@ -309,10 +300,6 @@
                     <input type="checkbox" id="check-kids" class="checkbox" />
                     <span class="text-sm text-text">For Kids</span>
                 </label>
-                 <label class="flex items-center gap-2 cursor-pointer select-none">
-                    <input type="checkbox" id="check-no-nip71-mirror" class="checkbox" />
-                    <span class="text-sm text-text">Do not share this video to other Nostr apps</span>
-                </label>
             </div>
 
             <!-- Advanced Options -->
@@ -339,18 +326,58 @@
 
                 <div id="section-advanced" class="hidden mt-4 space-y-6 pl-2 border-l-2 border-border/30">
 
-                     <!-- The old "NIP-71 Technical" inputs (content warning, duration,
-                          summary, IMETA variants) were removed for a cleaner UI: they fed
-                          the disabled FEATURE_PUBLISH_NIP71 path, and everything the NIP-71
-                          mirror needs (duration/dimensions, content warning from the NSFW
-                          toggle, the primary imeta) is derived automatically. -->
+                     <!-- NIP-71 Technical -->
+                     <div class="grid gap-4 md:grid-cols-2">
+                        <div class="space-y-2">
+                            <label class="block text-xs font-medium text-muted-strong">Content Warning</label>
+                            <input id="input-content-warning" type="text" data-nip71-input="content-warning" class="input text-sm" placeholder="e.g. Nudity" />
+                        </div>
+                        <div class="space-y-2">
+                            <label class="block text-xs font-medium text-muted-strong">Duration (sec)</label>
+                            <input id="input-duration" type="number" step="1" data-nip71-input="duration" class="input text-sm" />
+                        </div>
+                     </div>
+
+                     <div class="space-y-2">
+                        <div class="flex items-center justify-between">
+                             <label class="block text-xs font-medium text-muted-strong">Summary (NIP-71 Content)</label>
+                             <label class="flex items-center gap-2 text-xs text-muted cursor-pointer">
+                                <input type="checkbox" id="check-summary-unlock" class="checkbox h-3 w-3" />
+                                Customize
+                             </label>
+                        </div>
+                        <textarea id="input-summary" rows="2" data-nip71-input="summary" class="textarea text-sm text-muted" readonly></textarea>
+                     </div>
+
+                     <!-- IMETA Editor -->
+                     <div class="space-y-3" data-nip71-repeater="imeta">
+                         <div class="flex items-center justify-between">
+                            <h4 class="text-sm font-semibold text-text">Video Variants (IMETA)</h4>
+                            <button type="button" class="btn-ghost px-2 py-1 text-xs" data-nip71-add="imeta">Add Variant</button>
+                         </div>
+                         <div id="imeta-list" class="space-y-4" data-nip71-list="imeta"></div>
+
+                         <!-- IMETA Template -->
+                         <template data-nip71-template="imeta">
+                             <article class="rounded-md border border-border/70 bg-surface/50 p-3 space-y-3" data-nip71-entry="imeta">
+                                 <div class="grid gap-2 md:grid-cols-2 text-xs">
+                                     <input type="text" data-nip71-field="m" placeholder="MIME (video/mp4)" class="input" />
+                                     <input type="text" data-nip71-field="dim" placeholder="Dimensions (1920x1080)" class="input" />
+                                     <input type="url" data-nip71-field="url" placeholder="URL" class="input md:col-span-2" />
+                                     <input type="text" data-nip71-field="x" placeholder="Magnet" class="input md:col-span-2" />
+                                 </div>
+                                 <div class="flex justify-end">
+                                     <button type="button" class="text-xs text-critical hover:underline" data-nip71-remove="imeta">Remove Variant</button>
+                                 </div>
+                             </article>
+                         </template>
+                     </div>
 
                      <!-- Additional Technical Sections (Web Seeds, etc) -->
                      <div class="grid gap-3 md:grid-cols-2">
                          <div class="space-y-2">
-                             <label class="block text-xs font-medium text-muted-strong">Web seeds (one per line)</label>
-                             <textarea id="input-ws" rows="2" class="textarea text-sm" placeholder="https://cdn.example.com/video.mp4&#10;https://backup.example.com/video.mp4"></textarea>
-                             <p class="text-xs text-muted">Add a backup origin so the swarm can keep streaming if the primary is overloaded. Each must serve the exact same file.</p>
+                             <label class="block text-xs font-medium text-muted-strong">Web Seed (ws)</label>
+                             <input id="input-ws" type="url" class="input text-sm" placeholder="https://..." />
                          </div>
                           <div class="space-y-2">
                              <label class="block text-xs font-medium text-muted-strong">Torrent File (xs)</label>

components/video-modal.html

@@ -211,16 +211,6 @@
                         <span data-view-count-text>–</span>
                       </span>
                     </div>
-                    <span
-                      id="videoZapTotal"
-                      class="modal-meta video-modal__zaps flex items-center gap-1.5 hidden"
-                      title="Zap total (sats)"
-                    >
-                      <svg viewBox="0 0 24 24" fill="none" aria-hidden="true" focusable="false" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="w-4 h-4">
-                        <polygon points="13 2 3 14 12 14 11 22 21 10 12 10 13 2"></polygon>
-                      </svg>
-                      <span data-zap-total-text></span>
-                    </span>
                   </div>
 
                   <div class="video-modal__actions-row">

config/instance-config.js

@@ -191,10 +191,7 @@ export const PLATFORM_FEE_PERCENT = 30;
  * Super Admin profile publishing a `lud16` so bitvid still knows where to route
  * fees when they are enabled.
  */
-// coinos: Nostr-native, publishes NIP-57 zap receipts, reliable routing,
-// 1-sat minimum. Replaced [email protected], whose LNURL was flaky and never
-// published receipts, causing platform-share pay timeouts + missing zap tallies.
-export const PLATFORM_LUD16_OVERRIDE = "[email protected]";
+export const PLATFORM_LUD16_OVERRIDE = "[email protected]";
 
 /**
  * Optional list of relays to seed new sessions with instead of the defaults.
@@ -237,119 +234,6 @@ export const DEFAULT_WHITELIST_MODE_ENABLED = true;
  */
 export const ALLOW_NSFW_CONTENT = false;
 
-/**
- * Whether the client ingests NIP-71 video events published by *other* Nostr
- * apps (kinds 21/22 and addressable 34235/34236) and surfaces them in bitvid's
- * feeds.
- *
- * Defaults to `true` so bitvid discovers videos from the wider Nostr ecosystem
- * (Nostube, Flotilla, etc.). bitvid's own outbound mirrors are skipped to avoid
- * duplicate listings, and ingested NSFW content still respects
- * `ALLOW_NSFW_CONTENT` plus the standard trust/blacklist/mute gating.
- *
- * Set to `false` to disable all inbound NIP-71 ingest with a single switch if it
- * ever causes problems (spam, low-quality content, performance).
- */
-export const FEATURE_NIP71_INGEST = true;
-
-/**
- * Whether this deployment enables the Audio / Music / Podcast experience
- * (dedicated Audio player, sidebar tab, and the channel / "My Content" Audio
- * tabs — see docs/audio-integration-plan.md and TODO #60).
- *
- * Defaults to `false` — "off = no trace": with it off, nothing audio renders and
- * audio-only notes stay filtered out of the video feeds (current behavior). Flip
- * to `true` to light up the Audio surfaces. Watch/ingest-first; a separate
- * publish flag will gate uploading audio later.
- */
-export const FEATURE_AUDIO_INGEST = false;
-
-/**
- * Whether this deployment shows the "Connect wallet" button that uses Alby's
- * Bitcoin Connect for a smooth NWC connect flow (docs/bitcoin-connect-plan.md,
- * TODO #61). When on, the Wallet Connect pane offers Bitcoin Connect alongside
- * the manual URI field (which stays as the backup). It only lazy-loads the
- * vendored Bitcoin Connect bundle when the user actually clicks Connect.
- *
- * SHIPPING DEFAULT should be `false` ("off = no trace"). Currently `true` for
- * local testing only — reset to `false` before pushing/shipping until verified.
- */
-export const FEATURE_BITCOIN_CONNECT = true;
-
-/**
- * Whether the login modal offers BitLogin (a portable Nostr identity behind a
- * login name/password, https://github.com/PR0M3TH3AN/bitlogin) as the primary
- * sign-in method, with the NIP-07 extension, nsec, and NIP-46 options
- * collapsed under "Other login options" (js/ui/bitloginModalIntegration.js).
- * The vendored widget bundle (vendor/bitlogin/, scripts/build-bitlogin-widget.mjs)
- * only lazy-loads once the login modal's HTML is present in the DOM.
- *
- * Enabled on unstable for the final production-relay smoke test. Keep this
- * gated from beta/main until that manual login, reload, logout, and recovery
- * pass is confirmed.
- */
-export const FEATURE_BITLOGIN = true;
-
-/**
- * Whether this deployment offers Blossom (nostr-native blob storage) as a
- * first-class upload provider alongside Cloudflare R2 / generic S3 / Backblaze B2
- * (docs/blossom-plan.md, TODO #30). Blossom uploads authorize with the user's
- * existing nostr signer (kind-24242 auth events) instead of S3 access keys, and
- * mirror to multiple servers for resilience.
- *
- * Defaults to `false` ("off = no trace"): with it off the Storage pane shows only
- * R2 / S3 / B2 as today and the vendored Blossom SDK is never imported. Flip to
- * `true` to expose the Blossom provider.
- *
- * Currently `true` for LOCAL testing of Phase 1b — reset to `false` (shipping
- * default) before pushing/promoting until the upload flow is verified.
- */
-export const FEATURE_BLOSSOM_STORAGE = true;
-
-/**
- * FEATURE_BLOSSOM_TORRENT_METADATA — restore WebTorrent/P2P for Blossom-hosted
- * videos without hosting a `.torrent` file. Blossom servers reject a `.torrent`
- * (415), so a Blossom video's magnet ships webseed-only (no `xs=`) and can't
- * bootstrap WebTorrent. With this on, bitvid publishes the torrent piece-map as a
- * separate, infohash-keyed Nostr event (kind 30078, `d=bitvid:torrent:<infohash>`)
- * and fetches it lazily only when the torrent path actually runs.
- * See docs/blossom-torrent-metadata-plan.md.
- *
- * Defaults to `false` ("off = no trace"): off ⇒ no companion event is published
- * and the playback lookup is skipped (Blossom stays URL-only, exactly as today).
- *
- * Currently `true` for LOCAL testing of the companion-event flow — reset to
- * `false` (shipping default) before pushing/promoting.
- */
-export const FEATURE_BLOSSOM_TORRENT_METADATA = true;
-
-/**
- * Card liveness visibility policy — what a non-owner video card does while its
- * CDN/WebTorrent liveness probes are still running:
- *   - "show-pending"  : show the card immediately, hide only if every source is
- *                       confirmed dead (current behavior; can briefly flash a
- *                       dead foreign card before the probe hides it).
- *   - "hide-foreign"  : foreign/ingested cards stay hidden until a source is
- *                       confirmed playable; bitvid-native/own cards show pending.
- *   - "hide-all"      : every non-owner card stays hidden until confirmed playable.
- * Owner's own uploads are always visible regardless of policy.
- *
- * Can be flipped live for A/B feel-testing without a rebuild by setting
- * `window.__BITVID_CARD_LIVENESS_POLICY__ = "hide-foreign"` in the console (then
- * refresh / scroll the grid). Invalid values fall back to "show-pending".
- */
-export const CARD_LIVENESS_POLICY = "hide-foreign";
-
-/**
- * IntersectionObserver `rootMargin` for the card liveness probes (URL + WebTorrent).
- * "0px" probes a card only once it touches the viewport; a positive margin (e.g.
- * "600px") probes cards that distance *below* the fold so they're verified before
- * the user scrolls to them — makes hide-until-verified feel instant. Probes stay
- * viewport-gated + concurrency-capped, so a larger margin only reorders work.
- * Override live with `window.__BITVID_LIVENESS_PREFETCH_MARGIN__`.
- */
-export const LIVENESS_PROBE_PREFETCH_MARGIN = "600px";
-
 /**
  * Emergency fallback accounts for seeding the moderation graph.
  *
@@ -373,9 +257,9 @@ export const DEFAULT_TRUST_SEED_NPUBS = [
  * When a video receives at least this many trusted reports for the active
  * category (for example, `nudity`), thumbnails render with the blurred preview
  * by default. Align this value with your moderation policy — the upstream
- * deployment requires 3 trusted reports before blurring.
+ * deployment targets 3 trusted reports before blurring.
  */
-export const DEFAULT_BLUR_THRESHOLD = 3;
+export const DEFAULT_BLUR_THRESHOLD = 1;
 
 /**
  * Baseline trusted-report count that blocks autoplay during browsing.
@@ -383,9 +267,9 @@ export const DEFAULT_BLUR_THRESHOLD = 3;
  * Videos that meet or exceed this count will not autoplay in feeds unless the
  * viewer explicitly opts in. Increase the number for a more permissive stance
  * or decrease it if you want autoplay to stop sooner. The upstream deployment
- * requires 3 trusted reports before blocking autoplay.
+ * targets 2 trusted reports before blocking autoplay.
  */
-export const DEFAULT_AUTOPLAY_BLOCK_THRESHOLD = 3;
+export const DEFAULT_AUTOPLAY_BLOCK_THRESHOLD = 1;
 
 /**
  * Trusted mute threshold that hides creators globally.
@@ -402,10 +286,10 @@ export const DEFAULT_TRUSTED_MUTE_HIDE_THRESHOLD = 20;
  *
  * When a video's trusted report count reaches this number, bitvid treats it as
  * spam or policy violating content and removes it from default feeds. Align
- * the value with your moderation policy — 5 trusted reports is the current
+ * the value with your moderation policy — 3 trusted reports is the upstream
  * baseline.
  */
-export const DEFAULT_TRUSTED_SPAM_HIDE_THRESHOLD = 5;
+export const DEFAULT_TRUSTED_SPAM_HIDE_THRESHOLD = 1;
 
 /**
  * Optional theme accent overrides for light and dark mode.

content/docs/community/community-guidelines.md

@@ -56,7 +56,7 @@ To maintain a functional and ethical platform, the following types of content ar
 
 bitvid enforces these guidelines through client-side visibility rules that match the current `moreMenuController` and `userBlocks` behavior:
 
-- **Blurred previews:** When trusted NIP-56 `nudity` reports reach the configured blur threshold (`DEFAULT_BLUR_THRESHOLD` in [`config/instance-config.js`](../config/instance-config.js)), thumbnails render blurred and autoplay previews pause. Every blur includes a “show anyway” override. The hosted default requires three trusted reports.
+- **Blurred previews:** When trusted NIP-56 `nudity` reports reach the configured blur threshold (`DEFAULT_BLUR_THRESHOLD` in [`config/instance-config.js`](../config/instance-config.js)), thumbnails render blurred and autoplay previews pause. Every blur includes a “show anyway” override. The upstream configuration currently uses one trusted report, but adjust the export to match your policy.
 - **Downranked authors:** Muting a creator adds them to your NIP-51 mute list (kind `10000`). Videos from muted creators are deprioritized but still visible with clear badges so you can reverse the action.
 - **Personal blocks:** Blocking a creator adds them to your private block list (`userBlocks`). Videos from blocked creators are hidden from feeds, carousels, and modals unless you explicitly unblock them.
 - **Admin hard hides:** Moderator-maintained blacklists (NIP-51 kind `30000`) remove creators from default feeds for everyone using the hosted client. Moderators can still review the content through “show anyway” controls when auditing decisions.
@@ -88,7 +88,7 @@ You can manage moderation directly from the client using the existing menus rend
 
 ### **5.5 Safety & Moderation thresholds**
 
-- Open your profile avatar → **Profile** → **Safety & Moderation** to adjust blur and autoplay thresholds. Leave a field blank to return to the defaults exported from [`config/instance-config.js`](../config/instance-config.js) (`DEFAULT_BLUR_THRESHOLD`, `DEFAULT_AUTOPLAY_BLOCK_THRESHOLD`, `DEFAULT_TRUSTED_MUTE_HIDE_THRESHOLD`, `DEFAULT_TRUSTED_SPAM_HIDE_THRESHOLD`). The hosted defaults require 3 trusted reports for blur and autoplay blocking, 20 trusted mutes to hide authors, and 5 trusted spam reports to hide videos—tune the config file before deployment if your community needs different baselines.
+- Open your profile avatar → **Profile** → **Safety & Moderation** to adjust blur and autoplay thresholds. Leave a field blank to return to the defaults exported from [`config/instance-config.js`](../config/instance-config.js) (`DEFAULT_BLUR_THRESHOLD`, `DEFAULT_AUTOPLAY_BLOCK_THRESHOLD`, `DEFAULT_TRUSTED_MUTE_HIDE_THRESHOLD`, `DEFAULT_TRUSTED_SPAM_HIDE_THRESHOLD`). The upstream repo ships example values of 1 trusted report for blur, 1 for autoplay blocking, 20 trusted mutes to hide authors, and 1 trusted spam report to hide videos—tune the config file before deployment if your community needs different baselines.
 - These controls update immediately and sync with the moderation overlays applied by `moreMenuController` and `VideoCard` components. Operators can edit the config file to change the baseline before deploying their own instance.
 
 ## **6. Appeals and Feedback**

context/CONTEXT_2025-02-18.md

@@ -1,20 +0,0 @@
-# Test Audit Context - 2025-02-18
-
-## Mission
-To audit the test suite for behavior fidelity, determinism, and cheat vectors. The goal is to build a daily test-audit workflow that identifies flaky tests, suspicious patterns, and coverage gaps in critical modules.
-
-## Scope
-- Unit tests (`tests/` excluding `visual/` and `e2e/`).
-- Critical modules:
-  - `js/services/authService.js`
-  - `js/relayManager.js`
-  - `js/nostr/dmDecryptWorker.js`
-  - `js/nostr/watchHistory.js`
-  - `js/userBlocks.js`
-
-## Definition of Done
-- `test-audit-report-YYYY-MM-DD.md` generated.
-- `test-audit/flakiness-matrix.json` generated.
-- `test-audit/suspicious-tests.json` generated.
-- `test-audit/coverage-gaps.json` generated.
-- Prioritized remediation tasks identified.

context/CONTEXT_2026-02-17.md

@@ -1,20 +0,0 @@
-# Context - Perf Agent - 2026-02-17
-
-## Goal
-Improve application responsiveness by bounding concurrency in background network tasks, specifically for DM signal events and DM service operations.
-
-## Scope
-- `js/nostr/dmSignalEvents.js`: Fix unbounded `Promise.all` in `publishDmReadReceipt` and `publishDmTypingIndicator`.
-- `js/services/dmNostrService.js`: Fix unbounded `Promise.all` in `connect` and `publishSignedEvent`.
-- `content/docs/guides/upload-content.md`: Fix documentation port number (5500 -> 3000).
-
-## Assumptions
-- `pMap` utility works as expected.
-- `RELAY_BACKGROUND_CONCURRENCY` (3) is an appropriate limit for these operations.
-
-## Definition of Done
-- All `Promise.all` usages in targeted functions are replaced with `pMap` with concurrency limits.
-- `npm run lint` passes.
-- `npm run test:dm:unit` passes.
-- `npm run test:dm:integration` passes.
-- `content/docs/guides/upload-content.md` is updated.

context/CONTEXT_2026-02-17_14-32-50.md

@@ -0,0 +1,4 @@
+# Context
+- Goal: Sync scheduler rosters with prompt directories.
+- Scope: `docs/agents/prompts/daily/` and `docs/agents/prompts/weekly/`.
+- Status: Initial check complete. Rosters match files on disk.

context/CONTEXT_2026-02-17_16-33-00.md

@@ -0,0 +1,8 @@
+# Daily Test Audit Context
+
+Goal: Run daily test audit to detect flaky tests, coverage gaps, and suspicious patterns.
+Scope: All unit tests in `tests/`.
+Definition of Done:
+- `test-audit-report-YYYY-MM-DD.md` generated.
+- `test-audit/` artifacts populated.
+- Tests run at least 3 times.

context/CONTEXT_2026-02-17_perf-agent.md

@@ -1,20 +0,0 @@
-# Context: bitvid-perf-agent (Daily Run)
-
-## Goal
-Daily, measurable improvement of app responsiveness by finding and fixing background CPU/network work that degrades UX.
-
-## Scope
-- Focus on P0 (Login/auth blocking), P1 (Initial UI responsiveness), P2 (Heavy user features).
-- Docs audit: Ensure `/content` upload docs match reality.
-- Safe, incremental changes only.
-
-## Assumptions
-- Branch is `unstable`.
-- We are in a simulated agent environment.
-
-## Definition of Done
-- Performance issues identified and logged.
-- At least one safe fix implemented (if applicable).
-- Docs audited.
-- `daily-perf-report` generated.
-- All changes verified and linted.

context/CONTEXT_2026-02-18_17-00-00.md

@@ -1,14 +0,0 @@
-# Context: NIP Research Agent Run (2026-02-18)
-
-## Goal
-Execute the daily `nip-research-agent` task to research NIPs, verify compliance, and update the inventory.
-
-## Scope
-- Focus on NIP-65 / Kind 10002 compliance verification.
-- Implement missing tests for `relayManager.js`.
-- Update `NIP_INVENTORY.md`.
-
-## Definition of Done
-- `tests/nostr-specs/nip65_compliance.test.mjs` created and passing.
-- `NIP_INVENTORY.md` updated.
-- Completion log submitted.

context/CONTEXT_2026-02-19_18-55-56.md

@@ -1,8 +0,0 @@
-# Context: Content Audit Agent (2026-02-19_18-55-56)
-
-Goal: Make the public-facing help, guides and contribution docs in /content true, actionable, and executable — focusing especially on the uploading/contribution flows.
-
-Scope:
-- Docs: /content
-- Code: js/services/s3UploadService.js, js/ui/initUploadModal.js, components/upload-modal.html
-- Config: config/instance-config.js, js/constants.js

context/CONTEXT_2026-02-19_19-58-00.md

@@ -1,29 +0,0 @@
-# Decomposition Context
-
-- **Task:** Decompose `js/ui/profileModalController.js` (6258 lines).
-- **Reason:** Largest grandfathered file, highly coupled UI logic.
-- **Goal:** Extract "Block List" and "Edit Profile" logic into separate controllers to reduce line count by >200 lines and improve maintainability.
-- **Target Branch:** `unstable` (via `agents/daily/...` branch).
-- **Plan:**
-    1.  Extract `ProfileBlockListController` to manage blocked users list, add/remove blocks.
-    2.  Extract `ProfileEditController` to manage profile editing form, uploads, and saving.
-    3.  Update `ProfileModalController` to delegate to these new controllers.
-
-## Selected Blocks
-
-1.  **Block List Management**:
-    - `populateBlockedList`
-    - `handleAddBlockedCreator`
-    - `handleRemoveBlockedCreator`
-    - `ensureBlockListStatusElement`
-    - `setBlockListLoadingState`
-    - `mutateBlocklist`
-    - Event listeners and DOM cache for block list elements.
-
-2.  **Edit Profile Management**:
-    - `handleEditProfile`
-    - `populateEditPane`
-    - `checkStorageForUploads`
-    - `handleUpload`
-    - `handleSaveProfile`
-    - Event listeners and DOM cache for edit profile elements.

context/CONTEXT_2026-02-19_content-audit-agent.md

@@ -1,18 +0,0 @@
-# Audit Context: Content Audit Agent
-
-**Date:** 2026-02-19
-**Agent:** content-audit-agent
-**Branch:** agents/daily/content-audit-agent
-
-## Goal
-Make the public-facing help, guides, and contribution docs in `/content` true, actionable, and executable — focusing especially on the uploading/contribution flows.
-
-## Scope
-- Docs: `content/docs/guides/upload-content.md` and related files.
-- Code: `js/services/s3UploadService.js`, `js/ui/components/UploadModal.js`, `components/upload-modal.html`.
-
-## Plan
-1. Inventory claims from docs.
-2. Verify claims against code.
-3. Update docs if necessary.
-4. Validate changes.

context/CONTEXT_2026-02-20_14-39-21_deps-security-agent.md

@@ -1,5 +0,0 @@
-# Context
-Date: Fri Feb 20 14:39:21 UTC 2026
-Package Manager: npm
-Node: v22.22.0
-CI Matrix: Standard

context/CONTEXT_2026-02-20_18-46-31.md

@@ -1,14 +0,0 @@
-# Documentation Plan for js/services/playbackService.js
-
-**File:** `js/services/playbackService.js`
-**Lines:** ~650
-**Reason:** Critical component for "Hybrid Playback Strategy", complex state machine (`PlaybackSession`), and fallback logic. Contains long methods like `execute()` that need flow documentation.
-
-**Plan:**
-1.  **Analyze**: Understand `PlaybackService` and `PlaybackSession` interactions.
-2.  **Document**:
-    *   Add JSDoc to `PlaybackService` methods (`probeHostedUrl`, `registerUrlPlaybackWatchdogs`, etc.).
-    *   Add JSDoc to `PlaybackSession` methods (`start`, `execute`).
-    *   Add flow comments to `execute()` explaining the fallback sequence.
-3.  **Overview**: Create `docs/playbackService-overview.md` with sequence diagrams (text) and usage examples.
-4.  **Verify**: Run `npm run lint` and `npm run test:unit`.

context/CONTEXT_2026-02-20_decompose-agent.md

@@ -1,73 +0,0 @@
-# Decomposition Plan for `js/ui/components/VideoModal.js`
-
-**Date:** 2026-02-20
-**Agent:** decompose-agent (via scheduler)
-**Target File:** `js/ui/components/VideoModal.js`
-**Current Size:** ~6000 lines (grandfathered)
-
-## Rationale
-`VideoModal.js` is one of the largest files in the codebase. It handles too many responsibilities beyond just managing the modal lifecycle and video playback. Specifically, it contains extensive logic for:
-1.  **Zap Dialog Management**: Handling the entire flow of zapping, including popover, form validation, receipts, and error handling.
-2.  **Link Previews**: Fetching and rendering link previews for the video description.
-
-Extracting these into dedicated controllers will significantly reduce the size of `VideoModal.js` and improve cohesion.
-
-## Extraction Plan
-
-### 1. `ZapController`
-**Source:** `js/ui/components/VideoModal.js`
-**Destination:** `js/ui/components/video-modal/zapController.js`
-
-**Responsibilities:**
-- Manage the Zap dialog DOM elements (`modalZapDialog`, `modalZapForm`, etc.).
-- Handle Zap interactions (open, close, submit).
-- Render Zap receipts.
-- Manage Zap visibility and state.
-
-**Methods to Move:**
-- `setupModalZapPopover`
-- `openZapDialog`
-- `closeZapDialog`
-- `isZapDialogOpen`
-- `focusZapAmount`
-- `getZapAmountValue`, `setZapAmount`
-- `getZapCommentValue`, `setZapComment`
-- `resetZapForm`
-- `setZapSplitSummary`
-- `setZapStatus`
-- `clearZapReceipts`, `renderZapReceipts`
-- `setZapPending`, `setZapRetryPending`, `setZapCompleted`
-- `applyZapSendButtonState`
-- `setZapVisibility`
-- `setWalletPromptVisible`
-
-### 2. `LinkPreviewController`
-**Source:** `js/ui/components/VideoModal.js`
-**Destination:** `js/ui/components/video-modal/linkPreviewController.js`
-
-**Responsibilities:**
-- Manage link preview DOM elements (`videoDescriptionPreviews`).
-- Fetch and render link previews.
-- Handle link preview settings.
-
-**Methods to Move:**
-- `renderLinkPreviews`
-- `clearLinkPreviews`, `clearLinkPreviewRequests`
-- `extractDescriptionUrls`
-- `normalizePreviewUrl`, `extractPreviewDomain`
-- `createLinkPreviewCard`, `updateLinkPreviewCard`
-- `setLinkPreviewStatus`
-- `resolveLinkPreview`
-- `handleLinkPreviewSettingsChange`
-
-## Implementation Details
-- `VideoModal` will instantiate these controllers in its constructor.
-- `hydrate()` will call `controller.initialize()`.
-- `destroy()` will call `controller.destroy()`.
-- `VideoModal` will delegate relevant calls to these controllers.
-- Existing event listeners in `VideoModal` that trigger these actions will be updated to use the controllers.
-
-## Verification
-- `npm run lint`
-- `npm run test:unit`
-- Manual verification via code review (simulated).

context/CONTEXT_2026-02-20_docs-code-investigator.md

@@ -1,22 +0,0 @@
-# Context: Documentation for `js/nostrEventSchemas.js`
-
-**Agent**: docs-code-investigator
-**Date**: 2026-02-20
-**Selected File**: `js/nostrEventSchemas.js`
-
-## Selection Reason
-This file is a critical core module that defines the Nostr event schemas, Kinds, and helper functions for building events throughout the application. It is large (approx. 3000 LOC) and currently lacks a dedicated overview document in `docs/`. Documenting this file will provide significant value for understanding the protocol layer of the application.
-
-## Plan
-1.  **Analyze**: Read the file to understand its exports, constants, and builder functions.
-2.  **Overview Document**: Create `docs/nostrEventSchemas-overview.md` to explain:
-    *   The file's role as the central schema definition.
-    *   Key constants (`NOTE_TYPES`, `KINDS`).
-    *   Validation logic.
-    *   How to use the builder functions.
-3.  **In-Code Documentation**:
-    *   Add a top-level file comment explaining the module's purpose.
-    *   Add JSDoc comments to exported functions and constants to improve IDE support and code readability.
-4.  **Verification**:
-    *   Run `npm run lint` to ensure style compliance.
-    *   Run `npm run test:unit` to ensure no regressions.

context/CONTEXT_2026-02-20_innerhtml.md

@@ -1,17 +0,0 @@
-# Context: innerHTML Migration for ShareNostrModal.js
-
-**Date:** 2026-02-20
-**Agent:** bitvid-innerhtml-migration-agent (via Jules)
-**Target File:** `js/ui/components/ShareNostrModal.js`
-**Reason:** High count (3 assignments). Contains static SVG injection and template loading.
-
-**Environment:**
-- Node: v22.22.0
-- npm: 11.7.0
-
-**Plan:**
-1.  Analyze `innerHTML` assignments.
-2.  Replace `wrapper.innerHTML = html` with `DOMParser` or similar safe parsing.
-3.  Replace `this.relayPills.innerHTML = ""` with `replaceChildren()`.
-4.  Replace `removeButton.innerHTML = SVG` with `createElementNS` or safe SVG construction.
-5.  Verify with lint and tests.

context/CONTEXT_2026-02-21_23-39-00_nip-research-agent.md

@@ -1,19 +0,0 @@
-# Context: NIP Research Agent Run (2026-02-21)
-
-**Agent:** bitvid-nip-research-agent
-**Date:** 2026-02-21
-**Goal:** Research and verify compliance for NIP-09 (Deletion), NIP-21 (URI Scheme), and NIP-42 (Auth). Update NIP Inventory and generate report.
-
-**Scope:**
-- Verify `js/nostr/client.js` for NIP-09 and NIP-42 compliance.
-- Verify `js/utils/nostrHelpers.js` for NIP-21 compliance.
-- Fetch missing NIP specs (09, 21, 42).
-- Update `NIP_INVENTORY.md`.
-- Generate `nip-report-2026-02-21.md`.
-
-**Definition of Done:**
-- Context/Todo/Decisions/TestLog files created.
-- NIP specs downloaded to `artifacts/nips/`.
-- NIP-09, NIP-21, NIP-42 status updated in `NIP_INVENTORY.md` based on code analysis.
-- `nip-report-2026-02-21.md` created/updated.
-- `npm run lint` passes.

context/CONTEXT_2026-02-21_audit-agent.md

@@ -1 +0,0 @@
-Context for audit-agent run on 2026-02-21

context/CONTEXT_2026-02-21_nip-research-agent.md

@@ -1,16 +0,0 @@
-# Context: NIP-42 Research
-
-**Agent:** nip-research-agent
-**Date:** 2026-02-21
-**Goal:** Research NIP-42 (Relay Authentication) compliance and update the NIP Inventory.
-
-## Scope
-- Fetch NIP-42 specification.
-- Analyze `js/nostr/client.js` and other files for implementation of `AUTH` command.
-- Update `NIP_INVENTORY.md` with findings.
-- Generate daily report.
-
-## Definition of Done
-- `artifacts/nips/42.md` exists.
-- `NIP_INVENTORY.md` updated with NIP-42 status.
-- `nip-report-2026-02-21.md` created.

context/CONTEXT_2026-02-22_nip-research-agent.md

@@ -1,21 +0,0 @@
-# Context: NIP Research Agent Run 2026-02-22
-
-## Goal
-Execute the daily NIP research task: inventory NIPs, map to code, validate compliance, and report findings.
-
-## Scope
-- Scan codebase for NIP/kind references.
-- Update `NIP_INVENTORY.md`.
-- Fetch missing NIP specs.
-- Run validation checks (if applicable).
-- Generate daily report.
-
-## Timeline
-- Start: 2026-02-22
-- Duration: Single run
-
-## Definition of Done
-- Artifacts created.
-- Inventory updated.
-- Report generated.
-- Lint passed.

context/CONTEXT_2026-02-23_15-01-13.md

@@ -1,9 +0,0 @@
-# Context - Scheduler Update Agent (Completed)
-
-**Date**: 2026-02-23_15-01-13
-
-## Goal
-Sync scheduler rosters with prompt files.
-
-## Status
-Completed. Rosters are in sync.

context/CONTEXT_2026-02-23_19-56-08_test-audit.md

@@ -1,9 +0,0 @@
-# Test Audit Report - 2026-02-23
-
-This document tracks the execution of the daily test audit agent.
-
-## Scope
-- Run unit tests and capture logs.
-- Detect flaky tests.
-- Perform static analysis.
-- Identify coverage gaps.

context/CONTEXT_2026-02-23_23-34-46.md

@@ -1,4 +0,0 @@
-# Context: Scheduler Update Agent
-
-- Date: 2026-02-23
-- Task: Sync daily and weekly scheduler rosters with prompt files.

context/CONTEXT_2026-02-23_test-audit.md

@@ -1,13 +0,0 @@
-# Test Audit Context - 2026-02-23
-
-## Mission
-Daily audit of test suite health, flakiness, and coverage.
-
-## Scope
-- Unit tests
-- Static analysis of test patterns
-- Flakiness detection
-
-## Definition of Done
-- Report generated
-- Critical issues logged

context/CONTEXT_2026-02-25_17-01-30.md

@@ -1,7 +0,0 @@
-# Audit Agent Context
-
-Target: `unstable` branch
-Date: 2026-02-25
-Purpose: Run daily audit scripts and report metrics.
-Agent: audit-agent
-Platform: jules

context/CONTEXT_2026-10-19_19-45-53_dispatch-startup.md

@@ -1 +0,0 @@
-Goal: TODO backlog progress, bug fixes, robustness and usability. Scope: dispatch triage and proposed first team. Non-goals: product edits, worker launch before approval, deploys, spending, production data. Done: goal recorded, baseline measured, concrete first-team proposal presented.

context/CONTEXT_2026-10-19_20-05-00_client-reliability.md

@@ -1,3 +0,0 @@
-- Goal: classify and fix profile-modal-controller suite hang at current HEAD 9e6c310d (unchanged from filedAt 8b204687).
-- Scope: owned test and narrow modal lifecycle helpers only. Preserve assertions; no retries, sleeps, timeout increases, quarantine or forced success exit.
-- Done: deterministic regression, failing mutant, isolated natural exit, full 60s/file unit run, lint; build/browser if product changes; fleet commit, merge unstable, checks, queue and durable landing.

context/CONTEXT_2026-10-19_20-22-00_client-reliability-2.md

@@ -1,5 +0,0 @@
-- Goal: make tests/race/nostr-client-init-race.test.mjs hermetic and naturally exit while preserving concurrent init, pool readiness, and post-init subscription coverage.
-- Temporary ownership granted by dispatch via landed RULE-CHANGES/prompt and owner resume instruction; no Nostr product/shared helper/global runner edits.
-- Revalidated unchanged from filedAt f303ab0e72; prior isolated assertion60.91ms passes but process timeout10s/exit124, full gate timeout60s at file227.
-- Plan: inspect NIP01 and real init/L1 subscription lifecycle; replace delay with deferred pool barrier; virtualize current pool boundary, close subscription; add observable boundary/cleanup assertions; mutant-check, run both isolated suites, commit separately, merge unstable, lint and full60s/file gates, land normally or route further blockers.
-- Preserve prior profile-modal commits and all assertions. No browser, real wallet, signer, external relay or deploy operations.

context/CONTEXT_2026-10-19_21-52-00_client-reliability-3.md

@@ -1,4 +0,0 @@
-- Goal: cancel unstarted torrent health probes when last feed/card owner unregisters, preserving live shared owners and active probes.
-- Scope: gridHealth.js, optional queue helper and focused tests/integrity/area notes. Excludes app, URL health, webtorrent implementation, playback/magnet helpers, cache TTLs/concurrency, runner/kit. Dispatch completion mailbox required; no scheduler.
-- Revalidated unchanged gridHealth/cardObserver from filedAtf9adfc8f through startup66832dc3. Adapted actual dispatch five-card reproduction to own imports:4 start,1 queues, dispose/remove then release ->1 obsolete start; assertion exit1.
-- Plan: introduce cancellable pending queue records and per-card leases; release at existing onCardUnregister; preserve active completion and cache, identity-check inflight deletion; reject stale observer/UI effects; scenario tests for shared owners, cancellation/re-request race, priority/concurrency, hidden reveal; grouped mutants; focused/full60s-file/lint/build/browser; commit/merge/normal landq/ancestry then close and report.

context/CONTEXT_2026-10-20_03-10-00_client-reliability-4.md

@@ -1,3 +0,0 @@
-# client-reliability-4
-
-Investigation only at4c54858c. URL queued media last-owner disposal reproduced: obsolete starts1 expected0; shared live-owner control passes. See test_logs/TEST_LOG_2026-10-20_03-10-00_client-reliability-4.md and /tmp/bitvid-client-reliability-4-url-lifecycle.mjs. Await dispatch scope before product/tests.

context/CONTEXT_2026-10-20_03-29-00_client-reliability-4-landed.md

@@ -1,3 +0,0 @@
-# client-reliability-4 complete
-
-Product landed89ccb907, normal gate exit0 and7055496b ancestry verified. Backlog closed. All required local checks pass; evidence test_logs/TEST_LOG_2026-10-20_03-29-00_client-reliability-4-landed.md. Finish normal closure metadata landing/final event, then idle. No active abort, fallback/live peers,CPU or whole Stage3 claim.

context/CONTEXT_2026-10-20_13-30-00_client-reliability-5.md

@@ -1,3 +0,0 @@
-# client-reliability-5
-
-Investigation at0c1dd7e8:bounded active URL success/timeout cleanly settle; disposed active primary media error starts1 new mirror HEAD(expected0). Shared/rejoin and later same-source controls pass. Evidence test_logs/TEST_LOG_2026-10-20_13-30-00_client-reliability-5.md; scratch /tmp/bitvid-client-reliability-5-active-url.mjs. Await dispatch routing; no product/regression changes.

context/CONTEXT_2026-10-20_13-36-00_client-reliability-5.md

@@ -1,3 +0,0 @@
-# Item5 implementation
-
-Controller-only6-line pre-candidate ownership guard. Six new lifecycle scenarios reproduce2 baseline failures and pass18/18 fixed;6 reverted mutants rejected. Unique integrity note test_logs/TEST_INTEGRITY_client-reliability-5.md. Focused/lint/build running; awaiting explicit dispatch full-suite/browser slots and verified unstable merge before final checks/landing. No active abort/observer/cache/limit changes.

context/CONTEXT_2026-10-20_13-39-30_storage-cors.md

@@ -1,6 +0,0 @@
-# storage-cors-1
-- Start UTC: 2026-10-20T13:38:00Z; launch reported by dispatch ~13:37:59Z; acknowledgement 13:38:24Z.
-- Goal: validate current-HEAD existing-origin loss via real helper and offline SDK/transport; propose preservation semantics before edits.
-- Scope: investigation/evidence first; product/test changes require dispatch routing. No browser/cloud credentials/network bucket mutations; preserve preview3000.
-- Done: claimed; traced callers; 5 characterization cases reproduced. See docs/testing/storage-cors-integrity.md.
-- Pending: dispatch preservation semantics/fix routing, regression/mutants/focused checks, coordinated normal gates/build/landing.

context/CONTEXT_2026-10-20_13-58-00_client-reliability-5-landed.md

@@ -1,3 +0,0 @@
-# Item5 complete
-
-Product landed0bd0b1c3 via4bc52f9d,normal gate exit0/unstable ancestry verified. Backlog closed;expensive slot and browser released to dispatch13:57UTC. Local427files/28focused/18lifecycle/6mutants/lint11/build/native browser smoke pass. Finish docs-only closure queue/final event then idle. Evidence test_logs/TEST_LOG_2026-10-20_13-58-00_client-reliability-5-landed.md. No active abort/playback/CPU claim.