atmot/public/ at trunk · jeremy.herve.bzh/atmot · Tangled

jeremy.herve.bzh / atmot

0

AT Mot — a bilingual (EN/FR) daily word game native to the AT Protocol.

0

atmot / public /

at trunk 1 folder 8 files

Jeremy Herve Request granular OAuth scopes instead of transition:generic 10hrs ago

Build AT Mot: bilingual, database-free daily word game on atproto AT Mot is a static client-side word game native to the AT Protocol. There is no application database and no bespoke backend: player data lives in each player's PDS, and the leaderboard is read from the public Constellation backlink index. What's included: - Lexicons under bzh.herve.atmot.* (result, stats, defs) following the Lexicon Style Guide, with a format linter and an idempotent publish script. - Deterministic UTC daily word engine for EN + FR, with self-curated word lists from public-domain/MIT sources (ENABLE, an-array-of-french-words, hermitdave frequency) — French sourced independently of wordle-fr. Frozen epoch 2026-06-23, frozen puzzleTarget format via a single shared helper. - Browser OAuth (atcute), write-once result records + a mutable self stats / declaration record, all written client-side to the player's PDS. - "Share to atproto": app.bsky.feed.post with a standard emoji grid and the puzzle permalink as a real link facet + embed (so Constellation can discover it). Leaderboard + per-puzzle pages aggregate Constellation backlinks in the browser with caching and graceful degradation; live likes/reposts/replies. - Clean minimal-nerdy UI: own brand board palette (teal/amber/slate, not Wordle's), SkyPress fonts (Overused Grotesk + IBM Plex Mono), prefers-color- scheme dark mode, a11y (per-tile aria, non-hue cues), mobile-first. - Cloudflare Pages target (SPA fallback, hosted client-metadata.json). - Dual MIT/Apache-2.0, README/NOTICE/DECISIONS, 41 passing tests, 0 audit vulnerabilities.

2 days ago

Request granular OAuth scopes instead of transition:generic AT Mot only ever writes three record types, but it was requesting the broad transition:generic scope — blanket read/write over the user's whole repo. Switch to least-privilege granular scopes that grant write access to exactly those collections: repo:bzh.herve.atmot.result?action=create repo:bzh.herve.atmot.stats?action=create&action=update repo:app.bsky.feed.post?action=create This yields a clearer consent screen (per-resource descriptions instead of "full account access") and lets privacy-strict users who refuse transition:generic authorize the app. Verified end-to-end against a reference PDS (v0.4.5006): consent, token grant, and createRecord/putRecord all succeed under repo: scopes alone — no rpc: scope needed. Add tests/oauth-scope.test.ts as a regression guard so the scope can't silently widen back to transition:generic or reach unlisted collections.

10 hours ago

apple-touch-icon.png

Add committed PWA raster icons generated from icon.svg

2 days ago

client-metadata.json

Request granular OAuth scopes instead of transition:generic AT Mot only ever writes three record types, but it was requesting the broad transition:generic scope — blanket read/write over the user's whole repo. Switch to least-privilege granular scopes that grant write access to exactly those collections: repo:bzh.herve.atmot.result?action=create repo:bzh.herve.atmot.stats?action=create&action=update repo:app.bsky.feed.post?action=create This yields a clearer consent screen (per-resource descriptions instead of "full account access") and lets privacy-strict users who refuse transition:generic authorize the app. Verified end-to-end against a reference PDS (v0.4.5006): consent, token grant, and createRecord/putRecord all succeed under repo: scopes alone — no rpc: scope needed. Add tests/oauth-scope.test.ts as a regression guard so the scope can't silently widen back to transition:generic or reach unlisted collections.

10 hours ago

Add committed PWA raster icons generated from icon.svg

2 days ago

Add committed PWA raster icons generated from icon.svg

2 days ago

Build AT Mot: bilingual, database-free daily word game on atproto AT Mot is a static client-side word game native to the AT Protocol. There is no application database and no bespoke backend: player data lives in each player's PDS, and the leaderboard is read from the public Constellation backlink index. What's included: - Lexicons under bzh.herve.atmot.* (result, stats, defs) following the Lexicon Style Guide, with a format linter and an idempotent publish script. - Deterministic UTC daily word engine for EN + FR, with self-curated word lists from public-domain/MIT sources (ENABLE, an-array-of-french-words, hermitdave frequency) — French sourced independently of wordle-fr. Frozen epoch 2026-06-23, frozen puzzleTarget format via a single shared helper. - Browser OAuth (atcute), write-once result records + a mutable self stats / declaration record, all written client-side to the player's PDS. - "Share to atproto": app.bsky.feed.post with a standard emoji grid and the puzzle permalink as a real link facet + embed (so Constellation can discover it). Leaderboard + per-puzzle pages aggregate Constellation backlinks in the browser with caching and graceful degradation; live likes/reposts/replies. - Clean minimal-nerdy UI: own brand board palette (teal/amber/slate, not Wordle's), SkyPress fonts (Overused Grotesk + IBM Plex Mono), prefers-color- scheme dark mode, a11y (per-tile aria, non-hue cues), mobile-first. - Cloudflare Pages target (SPA fallback, hosted client-metadata.json). - Dual MIT/Apache-2.0, README/NOTICE/DECISIONS, 41 passing tests, 0 audit vulnerabilities.

2 days ago

jeremy-herve.svg

Serve the footer avatar as SVG again, drop the WebP The canvas-rendered WebP turned out broken in the browser, so the size win wasn't worth chasing further. Point the avatar back at the original transparent SVG, which renders correctly and blends into the footer on any background. This trades 6.8 KB for 703 KB on an every-page asset, but a working image beats a broken one; revisit the optimisation later with a proper SVG rasteriser if the weight matters.

2 days ago

manifest.webmanifest

Add web app manifest for home-screen install

2 days ago