add user themes and post pinning, along with sanatization for user inputs

config.maple

···
 dev_mode = false
 
+static_path = 'src/static'
+
 http = {
 	port = 8008
 }

doc/themes.md

···
+# themes
+
+beep supports per-user themes, because we like customizability. by default, no
+theme is selected and beep is 100% plain html.
+
+themes can be applied to beep by going to your profile and scrolling to your
+settings, then changing the theme url.
+
+here is a list of themes that work with beep and themes for beep!
+
+## drop-in
+
+> note that these themes were **not** made specifically for beep, they just work
+> well out-of-the-box with it!
+
+| name              | source                                 | css theme url                                                 |
+|-------------------|----------------------------------------|---------------------------------------------------------------|
+| sakura            | <https://github.com/oxalorg/sakura>    | https://cdn.jsdelivr.net/npm/sakura.css/css/sakura.css        |
+| water.css (auto)  | <https://github.com/kognise/water.css> | https://cdn.jsdelivr.net/npm/water.css@2/out/water.min.css    |
+| water.css (dark)  | <https://github.com/kognise/water.css> | https://cdn.jsdelivr.net/npm/water.css@2/out/dark.min.css     |
+| water.css (light) | <https://github.com/kognise/water.css> | https://cdn.jsdelivr.net/npm/water.css@2/out/light.min.css    |
+
+> here is a big list of drop-in themes:
+> <https://github.com/dohliam/dropin-minimal-css>
+
+## beep-specific
+
+| name | source | css theme url |
+|------|--------|---------------|
+|      |        |               |
+
+> there is nothing here yet! do you want to be the one to change that?
+
+## built-in
+
+(todo :D)
+
+> beep also features some built-in themes, some of which are based on the themes
+> present in the "it just works" list!

src/api.v

···
 }
 
 @['/api/user/set_nickname'; post]
-fn (mut app App) api_user_set_nickname(mut ctx Context) veb.Result {
-	mut nickname := ?string(ctx.form['nickname'] or { '' })
-	nickname = sanatize(nickname or { '' })
-	if (nickname or { '' }) == '' {
-		nickname = none
-	}
-
+fn (mut app App) api_user_set_nickname(mut ctx Context, nickname string) veb.Result {
 	user := app.whoami(mut ctx) or {
 		ctx.error('you are not logged in!')
 		return ctx.redirect('/login')
 	}
 
+	mut sanatized_nickname := ?string(sanatize(nickname).trim_space())
+	if sanatized_nickname or { '' } == '' {
+		sanatized_nickname = none
+	}
+
 	sql app.db {
-		update User set nickname = nickname where id == user.id
+		update User set nickname = sanatized_nickname where id == user.id
 	} or {
 		ctx.error('failed to change nickname')
-		eprintln('failed to update nickname for ${user} (${user.nickname} -> ${nickname})')
+		eprintln('failed to update nickname for ${user} (${user.nickname} -> ${sanatized_nickname})')
 		return ctx.redirect('/me')
 	}
 
···
 		eprintln('insufficient perms to update mute status for ${user} (${user.muted} -> ${muted})')
 		return ctx.redirect('/user/${user.username}')
 	}
+}
+
+@['/api/user/set_theme'; post]
+fn (mut app App) api_user_set_theme(mut ctx Context, url string) veb.Result {
+	user := app.whoami(mut ctx) or {
+		ctx.error('you are not logged in!')
+		return ctx.redirect('/login')
+	}
+
+	mut theme := ?string(none)
+	if url.trim_space() != '' {
+		theme = sanatize(url).trim_space()
+	}
+
+	println('set theme to: ${theme}')
+
+	sql app.db {
+		update User set theme = theme where id == user.id
+	} or {
+		ctx.error('failed to change theme')
+		eprintln('failed to update theme for ${user} (${user.theme} -> ${theme})')
+		return ctx.redirect('/me')
+	}
+
+	return ctx.redirect('/me')
 }
 
 ////// Posts //////

src/app.v

···
 module main
 
-import auth
+import veb
 import db.pg
+import auth
 import entity { User, Post, Like, LikeCache }
 
 pub struct App {
+	veb.StaticHandler
 pub:
 	config Config
 pub mut:
···
 		return none
 	}
 	return posts[0]
+}
+
+pub fn (app &App) get_pinned_posts() []Post {
+	posts := sql app.db {
+		select from Post where pinned == true
+	} or { [] }
+	return posts
 }
 
 pub fn (app &App) whoami(mut ctx Context) ?User {

src/config.v

···
 
 pub struct Config {
 pub mut:
-	dev_mode bool
+	dev_mode    bool
+	static_path string
 	http struct {
 	pub mut:
 		port int
···
 	mut config := Config{}
 
 	config.dev_mode = loaded.get('dev_mode').to_bool()
+	config.static_path = loaded.get('static_path').to_str()
 
 	loaded_http := loaded.get('http')
 	config.http.port = loaded_http.get('port').to_int()

src/entity/post.v

···
 	title  string
 	body   string
 
+	pinned bool
+
 	posted_at time.Time = time.now()
 }

src/entity/user.v

···
 	muted bool
 	admin bool
 
+	theme ?string
+
 	created_at time.Time = time.now()
 }
 
···
 pub fn (user User) get_name() string {
 	return user.nickname or { user.username }
 }
+
+@[inline]
+pub fn (user User) get_theme() string {
+	return user.theme or { '' }
+}

src/main.v

···
 		auth: auth.new(db)
 	}
 
+	app.mount_static_folder_at(app.config.static_path, '/static')!
+
 	init_db(db)!
 
 	if config.dev_mode {
-		println('NOTE: YOU ARE IN DEV MODE')
+		println('\033[1;31mNOTE: YOU ARE IN DEV MODE\033[0m')
 	}
 
 	veb.run[App, Context](mut app, app.config.http.port)

src/pages.v

···
 
 fn (mut app App) index(mut ctx Context) veb.Result {
 	ctx.title = 'beep'
+	user := app.whoami(mut ctx) or { User{} }
 	recent_posts := app.get_recent_posts()
-	user := app.whoami(mut ctx) or { User{} }
+	pinned_posts := app.get_pinned_posts()
 	return $veb.html()
 }
 

src/templates/assets/style.html

···
+<link rel="stylesheet" href="/static/style.css">

src/templates/components/post.html

···
-<div>
+<div class="post post-full">
 	<h2><a href="/user/@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).username}"><strong>@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).get_name()}</strong></a> - @post.title</h2>
 	<p>likes: @{app.get_net_likes_for_post(post.id)}</p>
 	<p>@post.body</p>

src/templates/components/post_mini.html

···
+<div class="post post-mini">
+	<p>
+		<a href="/user/@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).username}"><strong>@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).get_name()}</strong></a>:
+		<a href="/post/@post.id">@post.title</a>
+	</p>
+</div>

src/templates/components/post_small.html

···
-<div>
-	<p><a href="/user/@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).username}"><strong>@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).get_name()}</strong></a>: @post.title</p>
+<div class="post post-small">
+	<p><a href="/user/@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).username}"><strong>@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).get_name()}</strong></a>: <span class="post-title">@post.title</span></p>
 	@if post.body.len > 50
 	<p>@{post.body[..50]}...</p>
 	@else

src/templates/index.html

···
 @end
 
 <div>
+	@if pinned_posts.len > 0
+	<h2>pinned posts:</h2>
+	<div>
+		@for post in pinned_posts
+		@include 'components/post_small.html'
+		@end
+	</div>
+	@end
+
 	<h2>recent posts:</h2>
 	<div>
 		@if recent_posts.len > 0
-		@for post in app.get_recent_posts()
+		@for post in recent_posts
 		@include 'components/post_small.html'
 		@end
 		@else

src/templates/me.html

···
 			value="@{user.nickname or { '' }}"
 			required
 		>
-		<input type="submit" value="update">
+		<input type="submit" value="save">
 	</form>
 	<form action="/api/user/set_nickname" method="post">
 		<input type="submit" value="reset nickname">
+	</form>
+	<br>
+	<form action="/api/user/set_theme" method="post">
+		<label for="url">theme:</label>
+		<input type="url" name="url" id="url" value="@{user.theme or { '' }}">
+		<input type="submit" value="save">
 	</form>
 </div>
 

src/templates/partial/header.html

···
 	<meta name="viewport" content="width=device-width, initial-scale=1" />
 	<title>@ctx.title</title>
 	@include 'assets/style.html'
+	@if ctx.is_logged_in() && user.theme != none
+	<link rel="stylesheet" href="@user.get_theme()">
+	@endif
 </head>
 
 <body>
···
 	</header>
 
 	<main>
+		<!-- TODO: fix this lol -->
 		@if ctx.form_error != ''
 		<div>
 			<p><strong>error:</strong> ctx.form_error</p>