Source
This app’s code and revision history are public. Download a copy or explore the files below.
Public
The app’s code and revision history are public.
Run it yourself
Take the whole tree and run it on your own machine. The download needs no account. Cloning needs a sign-in.
Download .zip
bounded clone 703ed60f2cc5ad3d98a5bf4a
A copy you download is not bounded. The guarantees this app runs under - declared egress, proven invariants, writes that fail closed - live in the runtime serving this page, not in the files. What you get is auditable source you can read and run, with no runtime guarantees attached.
src/lib/bounded.ts
// One Bounded session per tab: a guest account created on first use, or the person's own account
// once they choose to keep their time on all devices. No sign-up to start, ever.
import { init, getCurrentUser, getLoginReturnError, signInAnonymously, loginWithRedirect, logout } from "@bounded-sh/client";
import { APP_ID } from "../../functions/lib/config";
/** The app this page is served for: the host injects it, so a preview talks to its own data. Local dev falls back to config. */
export const SERVED_APP_ID =
(typeof document !== "undefined" && document.getElementById("__bounded-first-live-bridge")?.getAttribute("data-app-id")) || APP_ID;
export interface Me { id: string; email: string | null; guest: boolean }
let session: Promise<Me> | null = null;
let loginError: string | null = null;
/** Resolves to this browser's person: the signed-in account, or a guest created once. */
export function me(): Promise<Me> {
session ??= (async () => {
await init({ appId: SERVED_APP_ID });
const err = getLoginReturnError();
if (err) loginError = explain(err);
const user = getCurrentUser() || (await signInAnonymously());
if (!user?.id) throw new Error("Could not start a session.");
return { id: user.id as string, email: (user.email as string | null) ?? null, guest: Boolean(user.isAnonymous) };
})().catch((err) => {
session = null;
throw err;
});
return session;
}
/** A hosted sign-in that came back with an error, once. */
export function takeLoginError(): string | null {
const e = loginError;
loginError = null;
return e;
}
/** Hosted email sign-in. The page leaves and comes back signed in. */
export async function signIn(): Promise<void> {
await loginWithRedirect({ methods: ["email"] });
}
export async function signOut(): Promise<void> {
await logout();
}
/** A sentence a person can read for a failed write or read. */
export function explain(err: unknown): string {
const e = err as { message?: string; decline?: { message?: string } };
if (e?.decline?.message && !/data constraint/i.test(e.decline.message)) return e.decline.message;
const msg = String(e?.message || err || "");
if (/network|fetch|Failed to fetch/i.test(msg)) return "You seem to be offline. Try again in a moment.";
if (/denied|403|forbidden|constraint|Policy failed/i.test(msg)) return "That change was not allowed.";
return msg || "Something went wrong. Try again.";
}
Change history
Point OpenApps links to openapps.free
Bind agent address constants in policy
Use functions.openapps.xyz alias and add OpenApp contribution strip
Bounded source sync
Bounded source sync
Bounded source sync
Bounded source sync