From 237c47f98b70adf3388f56379af45bae85f6a2a5 Mon Sep 17 00:00:00 2001
From: Spencer Delcore <sdelcore@gmail.com>
Date: Fri, 18 Sep 2026 22:49:29 -0400
Subject: [PATCH 1/2] Improve homepage site discovery

---
 internal/server/deploy.go    |  4 +-
 internal/server/meta.go      | 22 +++++++---
 internal/server/meta_test.go | 29 +++++++++++++
 internal/server/server.go    |  5 +++
 internal/web/favicon.svg     |  5 +++
 internal/web/home.html       | 83 +++++++++++++++++++++++++++++++++---
 internal/web/web.go          |  3 ++
 7 files changed, 140 insertions(+), 11 deletions(-)
 create mode 100644 internal/server/meta_test.go
 create mode 100644 internal/web/favicon.svg

diff --git a/internal/server/deploy.go b/internal/server/deploy.go
index fb9ad2e..563c274 100644
--- a/internal/server/deploy.go
+++ b/internal/server/deploy.go
@@ -419,9 +419,11 @@ func (s *Server) handleSites(w http.ResponseWriter, r *http.Request) {
 			"updatedAt": updatedAt,
 			"bytes":     s.siteBytes(e.Name()),
 		}
-		views, current, deploys := s.meta.stats(e.Name())
+		views, current, createdAt, deploys := s.meta.stats(e.Name())
 		entry["views"] = views.Total
 		if current != nil {
+			entry["createdAt"] = createdAt
+			entry["updatedAt"] = current.Time
 			entry["deployer"] = current.Deployer
 			entry["deploys"] = deploys
 		}
diff --git a/internal/server/meta.go b/internal/server/meta.go
index 187f79e..9f76ab7 100644
--- a/internal/server/meta.go
+++ b/internal/server/meta.go
@@ -31,8 +31,9 @@ type viewStats struct {
 }
 
 type siteMeta struct {
-	Deploys []deployRecord `json:"deploys"`
-	Views   viewStats      `json:"views"`
+	CreatedAt string         `json:"createdAt,omitempty"`
+	Deploys   []deployRecord `json:"deploys"`
+	Views     viewStats      `json:"views"`
 }
 
 type pendingViews struct {
@@ -83,6 +84,12 @@ func (m *metaStore) load(site string) *siteMeta {
 		log.Printf("meta: could not read %s: %v", m.path(site), err)
 	}
 	m.cache[site] = sm
+	if sm.CreatedAt == "" && len(sm.Deploys) > 0 {
+		// Legacy metadata did not persist creation separately. Preserve the
+		// oldest timestamp still available rather than letting it advance again.
+		sm.CreatedAt = sm.Deploys[0].Time
+		m.persist(site)
+	}
 	return sm
 }
 
@@ -131,13 +138,17 @@ func (m *metaStore) record(site, deployer, source string) int64 {
 	m.mu.Lock()
 	defer m.mu.Unlock()
 	sm := m.load(site)
+	now := time.Now().UTC().Format(time.RFC3339)
 	seq := int64(1)
 	if n := len(sm.Deploys); n > 0 {
 		seq = sm.Deploys[n-1].Seq + 1
 	}
+	if sm.CreatedAt == "" {
+		sm.CreatedAt = now
+	}
 	sm.Deploys = append(sm.Deploys, deployRecord{
 		Seq:      seq,
-		Time:     time.Now().UTC().Format(time.RFC3339),
+		Time:     now,
 		Deployer: deployer,
 		Source:   source,
 	})
@@ -148,7 +159,7 @@ func (m *metaStore) record(site, deployer, source string) int64 {
 	return seq
 }
 
-func (m *metaStore) stats(site string) (views viewStats, current *deployRecord, deploys int64) {
+func (m *metaStore) stats(site string) (views viewStats, current *deployRecord, createdAt string, deploys int64) {
 	m.mu.Lock()
 	defer m.mu.Unlock()
 	sm := m.load(site)
@@ -156,12 +167,13 @@ func (m *metaStore) stats(site string) (views viewStats, current *deployRecord,
 	if p := m.views[site]; p != nil {
 		views.Total += p.count
 	}
+	createdAt = sm.CreatedAt
 	if n := len(sm.Deploys); n > 0 {
 		rec := sm.Deploys[n-1]
 		current = &rec
 		deploys = rec.Seq
 	}
-	return views, current, deploys
+	return views, current, createdAt, deploys
 }
 
 func (m *metaStore) drop(site string) {
diff --git a/internal/server/meta_test.go b/internal/server/meta_test.go
new file mode 100644
index 0000000..025f043
--- /dev/null
+++ b/internal/server/meta_test.go
@@ -0,0 +1,29 @@
+package server
+
+import (
+	"testing"
+)
+
+func TestCreationTimeSurvivesDeployHistoryRetention(t *testing.T) {
+	m, err := newMetaStore(t.TempDir())
+	if err != nil {
+		t.Fatal(err)
+	}
+
+	m.record("site", "alice", "first")
+	_, _, createdAt, _ := m.stats("site")
+	if createdAt == "" {
+		t.Fatal("creation time was not recorded")
+	}
+
+	for range maxDeployHistory {
+		m.record("site", "alice", "update")
+	}
+	_, _, got, deploys := m.stats("site")
+	if got != createdAt {
+		t.Fatalf("creation time changed after history trimming: got %q, want %q", got, createdAt)
+	}
+	if deploys != maxDeployHistory+1 {
+		t.Fatalf("deploy count = %d, want %d", deploys, maxDeployHistory+1)
+	}
+}
diff --git a/internal/server/server.go b/internal/server/server.go
index ad87507..256cb1d 100644
--- a/internal/server/server.go
+++ b/internal/server/server.go
@@ -8,6 +8,7 @@ import (
 	"strings"
 
 	"github.com/sdelcore/shared/internal/store"
+	"github.com/sdelcore/shared/internal/web"
 )
 
 type Server struct {
@@ -78,6 +79,10 @@ func (s *Server) ListenAndServe() error {
 			s.api.ServeHTTP(w, r)
 		case r.URL.Path == "/shared.js":
 			s.handleSharedJS(w, r)
+		case r.URL.Path == "/favicon.svg" && siteFromHost(r.Host, s.BaseHost) == "":
+			w.Header().Set("Content-Type", "image/svg+xml")
+			w.Header().Set("Cache-Control", "public, max-age=86400")
+			w.Write(web.FaviconSVG)
 		// Base host only: on a site host this path belongs to the site, and
 		// intercepting it would shadow a deployed file of the same name.
 		case r.URL.Path == "/skill.md" && siteFromHost(r.Host, s.BaseHost) == "":
diff --git a/internal/web/favicon.svg b/internal/web/favicon.svg
new file mode 100644
index 0000000..644d8d0
--- /dev/null
+++ b/internal/web/favicon.svg
@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64">
+  <rect width="64" height="64" rx="12" fill="#1c1a17"/>
+  <path d="M17 23c0-6 5-10 12-10h18v8H29c-3 0-4 1-4 3 0 7 23 2 23 17 0 7-6 11-14 11H16v-8h18c4 0 6-1 6-3 0-7-23-2-23-18Z" fill="#f4f1ea"/>
+  <circle cx="51" cy="49" r="5" fill="#b34a1f"/>
+</svg>
diff --git a/internal/web/home.html b/internal/web/home.html
index 1f55913..565aa32 100644
--- a/internal/web/home.html
+++ b/internal/web/home.html
@@ -4,6 +4,7 @@
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>shared</title>
+<link rel="icon" href="/favicon.svg" type="image/svg+xml">
 <style>
   :root {
     --paper: #f4f1ea;
@@ -50,6 +51,19 @@
   }
   h2::before { content: "§ "; color: var(--faint); }
 
+  .site-heading { display: flex; align-items: end; justify-content: space-between; gap: 1rem; margin-bottom: 1.25rem; }
+  .site-heading h2 { margin-bottom: 0; }
+  .controls { display: flex; gap: .65rem; flex-wrap: wrap; }
+  .controls input, .controls select {
+    border: 1px solid var(--rule);
+    border-radius: 0;
+    background: transparent;
+    color: var(--ink);
+    font: .75rem ui-monospace, 'SF Mono', Menlo, Consolas, monospace;
+    padding: .55rem .65rem;
+  }
+  .controls input { width: 13rem; }
+  .controls input:focus, .controls select:focus { outline: 2px solid var(--rust); outline-offset: 1px; }
   .sites { display: grid; grid-template-columns: repeat(auto-fill, minmax(240px, 1fr)); gap: 1px; background: var(--rule); border: 1px solid var(--rule); }
   .cell { position: relative; background: var(--paper); }
   .del {
@@ -87,6 +101,11 @@
     font-size: .72rem;
     color: var(--faint);
   }
+  .site .byline {
+    margin-top: .65rem;
+    font-size: .78rem;
+    color: var(--rust);
+  }
 
   .empty {
     border: 1px dashed var(--rule);
@@ -116,6 +135,15 @@
     padding: .1em .35em;
   }
   .note { margin-top: 1rem; font-size: .95rem; color: var(--faint); max-width: 60ch; }
+  .skill-link { color: var(--rust); text-underline-offset: .18em; }
+  .skill-link:hover { color: var(--ink); }
+
+  @media (max-width: 620px) {
+    .site-heading { align-items: stretch; flex-direction: column; }
+    .controls { display: grid; grid-template-columns: 1fr; }
+    .controls input { width: 100%; }
+    .del { opacity: 1; }
+  }
 
   footer {
     margin-top: 4rem;
@@ -136,7 +164,18 @@ <h1>shared</h1>
   </header>
 
   <section>
-    <h2>Sites</h2>
+    <div class="site-heading">
+      <h2>Sites</h2>
+      <div class="controls">
+        <input id="site-filter" type="search" placeholder="Filter sites or creators" aria-label="Filter sites or creators">
+        <select id="site-sort" aria-label="Sort sites">
+          <option value="updated">Recently updated</option>
+          <option value="created">Recently created</option>
+          <option value="name">Name</option>
+          <option value="views">Most viewed</option>
+        </select>
+      </div>
+    </div>
     <div id="sites"><div class="empty">Consulting the index…</div></div>
   </section>
 
@@ -153,6 +192,7 @@ <h2>Getting started</h2>
         Every site can include <code class="inline">&lt;script src="/shared.js"&gt;&lt;/script&gt;</code>
         to get the <code class="inline">shared</code> API for free: a document database with realtime
         subscriptions, an AI chat proxy, file uploads, websocket channels, and identity.
+        <a class="skill-link" href="/skill.md" download="shared-sites-SKILL.md">Download the agent skill →</a>
       </p>
     </div>
   </section>
@@ -164,6 +204,9 @@ <h2>Getting started</h2>
 (function () {
   const host = location.hostname;
   const port = location.port ? ':' + location.port : '';
+  const filter = document.getElementById('site-filter');
+  const sort = document.getElementById('site-sort');
+  let allSites = [];
 
   document.getElementById('example-url').textContent =
     'http://mysite.' + host + port + '/';
@@ -180,10 +223,12 @@ <h2>Getting started</h2>
     return n.toFixed(1) + ' ' + units[i];
   }
 
-  function render(sites) {
+  function render(sites, filtered) {
     const root = document.getElementById('sites');
     if (!sites.length) {
-      root.innerHTML = '<div class="empty">Nothing here yet. Your first deploy is one command away — see below.</div>';
+      root.innerHTML = '<div class="empty">' + (filtered
+        ? 'No sites match that filter.'
+        : 'Nothing here yet. Your first deploy is one command away — see below.') + '</div>';
       return;
     }
     const grid = document.createElement('div');
@@ -208,6 +253,12 @@ <h2>Getting started</h2>
       }
       meta.textContent = parts.join(' · ');
       a.append(name, meta);
+      if (site.deployer) {
+        const byline = document.createElement('div');
+        byline.className = 'byline';
+        byline.textContent = 'by ' + site.deployer;
+        a.append(byline);
+      }
       const del = document.createElement('button');
       del.className = 'del';
       del.type = 'button';
@@ -219,7 +270,8 @@ <h2>Getting started</h2>
           .then(function (res) {
             if (!res.ok) throw new Error('delete failed (' + res.status + ')');
             cell.remove();
-            if (!grid.children.length) render([]);
+            allSites = allSites.filter(function (item) { return item.name !== site.name; });
+            update();
           })
           .catch(function (err) { alert(err.message); });
       });
@@ -229,12 +281,33 @@ <h2>Getting started</h2>
     root.replaceChildren(grid);
   }
 
+  function update() {
+    const query = filter.value.trim().toLocaleLowerCase();
+    const sites = allSites.filter(function (site) {
+      return !query || site.name.toLocaleLowerCase().includes(query) ||
+        (site.deployer || '').toLocaleLowerCase().includes(query);
+    });
+    sites.sort(function (a, b) {
+      if (sort.value === 'name') return a.name.localeCompare(b.name);
+      if (sort.value === 'views') return (b.views || 0) - (a.views || 0) || a.name.localeCompare(b.name);
+      const field = sort.value === 'created' ? 'createdAt' : 'updatedAt';
+      return Date.parse(b[field] || 0) - Date.parse(a[field] || 0) || a.name.localeCompare(b.name);
+    });
+    render(sites, Boolean(query));
+  }
+
+  filter.addEventListener('input', update);
+  sort.addEventListener('change', update);
+
   fetch('/api/sites')
     .then(function (res) {
       if (!res.ok) throw new Error('sites request failed (' + res.status + ')');
       return res.json();
     })
-    .then(function (body) { render(body.sites || []); })
+    .then(function (body) {
+      allSites = body.sites || [];
+      update();
+    })
     .catch(function (err) {
       document.getElementById('sites').innerHTML =
         '<div class="empty error">Could not load sites: ' + err.message + '</div>';
diff --git a/internal/web/web.go b/internal/web/web.go
index f5a1466..7d39686 100644
--- a/internal/web/web.go
+++ b/internal/web/web.go
@@ -8,5 +8,8 @@ var SharedJS []byte
 //go:embed home.html
 var HomeHTML []byte
 
+//go:embed favicon.svg
+var FaviconSVG []byte
+
 //go:embed init/index.html
 var InitIndexHTML []byte

From 5b6291b074772392ab24f71ffa43099f7f6e2748 Mon Sep 17 00:00:00 2001
From: Spencer Delcore <sdelcore@gmail.com>
Date: Fri, 18 Sep 2026 22:50:42 -0400
Subject: [PATCH 2/2] Strengthen creation timestamp regression test

---
 internal/server/meta_test.go | 28 +++++++++++++++++++---------
 1 file changed, 19 insertions(+), 9 deletions(-)

diff --git a/internal/server/meta_test.go b/internal/server/meta_test.go
index 025f043..0ea5cd8 100644
--- a/internal/server/meta_test.go
+++ b/internal/server/meta_test.go
@@ -1,25 +1,35 @@
 package server
 
-import (
-	"testing"
-)
+import "testing"
 
 func TestCreationTimeSurvivesDeployHistoryRetention(t *testing.T) {
-	m, err := newMetaStore(t.TempDir())
+	dir := t.TempDir()
+	m, err := newMetaStore(dir)
 	if err != nil {
 		t.Fatal(err)
 	}
 
-	m.record("site", "alice", "first")
-	_, _, createdAt, _ := m.stats("site")
-	if createdAt == "" {
-		t.Fatal("creation time was not recorded")
+	const createdAt = "2001-02-03T04:05:06Z"
+	m.mu.Lock()
+	m.cache["site"] = &siteMeta{
+		CreatedAt: createdAt,
+		Deploys: []deployRecord{{
+			Seq:  1,
+			Time: createdAt,
+		}},
 	}
+	m.persist("site")
+	m.mu.Unlock()
 
 	for range maxDeployHistory {
 		m.record("site", "alice", "update")
 	}
-	_, _, got, deploys := m.stats("site")
+
+	reopened, err := newMetaStore(dir)
+	if err != nil {
+		t.Fatal(err)
+	}
+	_, _, got, deploys := reopened.stats("site")
 	if got != createdAt {
 		t.Fatalf("creation time changed after history trimming: got %q, want %q", got, createdAt)
 	}