@commonpub/layer 0.3.36 → 0.3.38

package/layouts/default.vue

@@ -183,8 +183,9 @@ const userUsername = computed(() => user.value?.username ?? '');
           <h4 class="cpub-footer-col-title">Platform</h4>
           <NuxtLink to="/about" class="cpub-footer-link">About</NuxtLink>
           <NuxtLink v-if="docs" to="/docs" class="cpub-footer-link">Docs</NuxtLink>
+          <NuxtLink to="/privacy" class="cpub-footer-link">Privacy Policy</NuxtLink>
+          <NuxtLink to="/terms" class="cpub-footer-link">Terms of Service</NuxtLink>
           <a href="/feed.xml" class="cpub-footer-link">RSS Feed</a>
-          <a href="/sitemap.xml" class="cpub-footer-link">Sitemap</a>
         </nav>
       </div>
       <div class="cpub-footer-bottom">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonpub/layer",
-  "version": "0.3.36",
+  "version": "0.3.38",
   "type": "module",
   "main": "./nuxt.config.ts",
   "files": [
@@ -15,7 +15,12 @@
     "plugins",
     "server",
     "theme",
-    "types"
+    "types",
+    "!**/__tests__/",
+    "!**/*.test.ts",
+    "!**/*.spec.ts",
+    "!vitest.config.ts",
+    "!test-setup.ts"
   ],
   "publishConfig": {
     "access": "public"
@@ -44,14 +49,14 @@
     "vue": "^3.4.0",
     "vue-router": "^4.3.0",
     "zod": "^4.3.6",
-    "@commonpub/config": "0.7.1",
     "@commonpub/auth": "0.5.0",
-    "@commonpub/editor": "0.5.0",
+    "@commonpub/config": "0.7.1",
     "@commonpub/docs": "0.5.2",
+    "@commonpub/editor": "0.5.0",
     "@commonpub/learning": "0.5.0",
     "@commonpub/protocol": "0.9.5",
+    "@commonpub/server": "2.21.0",
     "@commonpub/schema": "0.8.13",
-    "@commonpub/server": "2.20.1",
     "@commonpub/ui": "0.7.1"
   },
   "devDependencies": {

package/pages/auth/register.vue

@@ -101,6 +101,13 @@ async function handleSubmit(): Promise<void> {
         />
       </div>
 
+      <p class="register-legal">
+        By creating an account, you agree to our
+        <NuxtLink to="/terms">Terms of Service</NuxtLink>
+        and acknowledge our
+        <NuxtLink to="/privacy">Privacy Policy</NuxtLink>.
+      </p>
+
       <button type="submit" class="submit-btn" :disabled="loading">
         {{ loading ? 'Creating...' : 'Create account' }}
       </button>
@@ -206,6 +213,21 @@ async function handleSubmit(): Promise<void> {
   cursor: not-allowed;
 }
 
+.register-legal {
+  font-size: 11px;
+  color: var(--text-faint);
+  line-height: 1.5;
+}
+
+.register-legal a {
+  color: var(--accent);
+  text-decoration: none;
+}
+
+.register-legal a:hover {
+  text-decoration: underline;
+}
+
 .register-footer {
   text-align: center;
   font-size: 12px;

package/pages/privacy.vue

@@ -0,0 +1,206 @@
+<script setup lang="ts">
+useSeoMeta({
+  title: `Privacy Policy — ${useSiteName()}`,
+  description: 'How we collect, use, and protect your personal data.',
+});
+
+const siteName = useSiteName();
+const { federation: federationEnabled } = useFeatures();
+</script>
+
+<template>
+  <div class="cpub-legal">
+    <div class="cpub-legal-header">
+      <h1 class="cpub-legal-title">Privacy Policy</h1>
+      <p class="cpub-legal-updated">Last updated: April 2026</p>
+    </div>
+
+    <div class="cpub-legal-body">
+      <section class="cpub-legal-section">
+        <h2>1. Who We Are</h2>
+        <p>
+          This {{ siteName }} instance is operated by its administrator (the "data controller").
+          {{ siteName }} is powered by <a href="https://commonpub.io" target="_blank" rel="noopener">CommonPub</a>,
+          an open-source, self-hosted platform. Each instance is independently operated and responsible for its own data processing.
+        </p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>2. What Data We Collect</h2>
+        <p>When you create an account, we collect:</p>
+        <ul>
+          <li><strong>Account data:</strong> email address, username, password (stored as a secure hash)</li>
+          <li><strong>Profile data:</strong> display name, bio, headline, location, website, avatar, banner image, social links, skills, pronouns, timezone (all optional)</li>
+          <li><strong>Content:</strong> projects, articles, blog posts, comments, and other content you create</li>
+          <li><strong>Activity data:</strong> likes, follows, bookmarks, hub memberships, learning path enrollments</li>
+          <li><strong>Messages:</strong> direct messages you send to other users on this instance</li>
+        </ul>
+        <p>We also automatically collect:</p>
+        <ul>
+          <li><strong>Session data:</strong> IP address and browser user agent when you log in, stored for the duration of your session (up to 7 days)</li>
+          <li><strong>Theme preference:</strong> your light/dark mode choice, stored in your browser's local storage</li>
+        </ul>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>3. How We Use Your Data</h2>
+        <ul>
+          <li><strong>Providing the service:</strong> displaying your profile, publishing your content, delivering notifications</li>
+          <li><strong>Authentication:</strong> verifying your identity when you log in</li>
+          <li><strong>Security:</strong> protecting against unauthorized access, abuse, and spam</li>
+          <li><strong>Email notifications:</strong> sending notification digests and alerts you've opted into (configurable in settings)</li>
+        </ul>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>4. Legal Basis for Processing</h2>
+        <p>We process your data under the following legal bases (GDPR Article 6):</p>
+        <ul>
+          <li><strong>Contract performance (Art. 6(1)(b)):</strong> processing necessary to provide you with the service you signed up for</li>
+          <li><strong>Legitimate interest (Art. 6(1)(f)):</strong> session security, rate limiting, and preventing abuse</li>
+        </ul>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>5. Cookies and Local Storage</h2>
+        <p>We use only <strong>strictly necessary</strong> technologies:</p>
+        <ul>
+          <li><strong>Session cookie</strong> (<code>better-auth.session_token</code>): an authentication cookie that identifies your login session. It is httpOnly (not accessible to JavaScript), secure (HTTPS-only in production), and expires after 7 days. This cookie is strictly necessary for the service to function and does not require consent.</li>
+          <li><strong>Theme preference</strong> (<code>cpub-theme</code> in localStorage): stores your light/dark mode choice in your browser. This is a UI preference, not used for tracking.</li>
+        </ul>
+        <p>We do not use any analytics, advertising, or tracking cookies. No cookie consent banner is required because we only use strictly necessary cookies.</p>
+      </section>
+
+      <section v-if="federationEnabled" class="cpub-legal-section">
+        <h2>6. Federation and ActivityPub</h2>
+        <p>This instance participates in the <a href="https://activitypub.rocks" target="_blank" rel="noopener">ActivityPub</a> federation protocol. When you publish content or interact publicly, the following data may be shared with remote instances:</p>
+        <ul>
+          <li>Your username, display name, avatar, and bio</li>
+          <li>Your published content (projects, articles, blog posts)</li>
+          <li>Your public interactions (likes, follows, comments on federated content)</li>
+        </ul>
+        <p>Your email address, location, social links, timezone, and other private profile fields are <strong>never</strong> shared via federation.</p>
+        <p><strong>Important:</strong> Once your data is federated to remote instances, this instance cannot guarantee its deletion on those servers. Remote instances operate independently and may retain cached copies of your public data even after you delete your account here.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>{{ federationEnabled ? '7' : '6' }}. Third-Party Services</h2>
+        <p>We load icon fonts from <strong>Font Awesome</strong> via the Cloudflare CDN (<code>cdnjs.cloudflare.com</code>). This means your browser makes requests to Cloudflare's servers, which are subject to <a href="https://www.cloudflare.com/privacypolicy/" target="_blank" rel="noopener">Cloudflare's privacy policy</a>.</p>
+        <p>We do not use any analytics services, advertising networks, or tracking technologies.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>{{ federationEnabled ? '8' : '7' }}. Data Retention</h2>
+        <ul>
+          <li><strong>Account data:</strong> retained until you delete your account</li>
+          <li><strong>Session data:</strong> automatically expires after 7 days of inactivity</li>
+          <li><strong>Content:</strong> retained until you delete it or delete your account</li>
+          <li><strong>Audit logs:</strong> retained per the instance operator's policy</li>
+        </ul>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>{{ federationEnabled ? '9' : '8' }}. Your Rights</h2>
+        <p>Under the GDPR and similar data protection laws, you have the right to:</p>
+        <ul>
+          <li><strong>Access:</strong> view the data we hold about you (via your profile and settings)</li>
+          <li><strong>Rectification:</strong> update or correct your data (via your profile settings)</li>
+          <li><strong>Erasure:</strong> delete your account and all associated data (via account settings)</li>
+          <li><strong>Portability:</strong> download your data in a machine-readable format (via account settings)</li>
+          <li><strong>Restriction and objection:</strong> contact the instance administrator</li>
+        </ul>
+        <p>To exercise these rights, visit your <NuxtLink to="/settings/account">account settings</NuxtLink> or contact the instance administrator.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>{{ federationEnabled ? '10' : '9' }}. Contact</h2>
+        <p>For privacy-related inquiries, contact the administrator of this {{ siteName }} instance.</p>
+      </section>
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.cpub-legal {
+  max-width: 740px;
+  margin: 0 auto;
+  padding: 48px 24px 80px;
+}
+
+.cpub-legal-header {
+  margin-bottom: 40px;
+}
+
+.cpub-legal-title {
+  font-size: 28px;
+  font-weight: 700;
+  margin-bottom: 8px;
+}
+
+.cpub-legal-updated {
+  font-size: 12px;
+  color: var(--text-faint);
+  font-family: var(--font-mono);
+}
+
+.cpub-legal-body {
+  display: flex;
+  flex-direction: column;
+  gap: 32px;
+}
+
+.cpub-legal-section h2 {
+  font-size: 16px;
+  font-weight: 600;
+  margin-bottom: 12px;
+}
+
+.cpub-legal-section p {
+  font-size: 14px;
+  line-height: 1.7;
+  color: var(--text-dim);
+  margin-bottom: 8px;
+}
+
+.cpub-legal-section ul {
+  padding-left: 20px;
+  margin: 8px 0;
+}
+
+.cpub-legal-section li {
+  font-size: 14px;
+  line-height: 1.7;
+  color: var(--text-dim);
+  margin-bottom: 4px;
+}
+
+.cpub-legal-section strong {
+  color: var(--text);
+}
+
+.cpub-legal-section code {
+  font-family: var(--font-mono);
+  font-size: 12px;
+  padding: 1px 5px;
+  background: var(--surface2);
+  border: var(--border-width-default) solid var(--border);
+}
+
+.cpub-legal-section a {
+  color: var(--accent);
+  text-decoration: none;
+}
+
+.cpub-legal-section a:hover {
+  text-decoration: underline;
+}
+
+@media (max-width: 640px) {
+  .cpub-legal {
+    padding: 24px 16px 60px;
+  }
+  .cpub-legal-title {
+    font-size: 22px;
+  }
+}
+</style>

package/pages/search.vue

@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import type { Serialized, ContentListItem, PaginatedResponse } from '@commonpub/server';
+import type { PaginatedResponse } from '@commonpub/server';
 
 useSeoMeta({
   title: `Search — ${useSiteName()}`,
@@ -67,7 +67,8 @@ const searchQuery = computed(() => ({
   community: communityFilter.value || undefined,
 }));
 
-const { data: results, status } = await useFetch<PaginatedResponse<Serialized<ContentListItem>>>('/api/search', {
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const { data: results, status } = await useFetch<PaginatedResponse<any>>('/api/search', {
   query: searchQuery,
   watch: [searchQuery],
   lazy: true,

package/pages/settings/account.vue

@@ -86,6 +86,14 @@ async function handleDeleteAccount(): Promise<void> {
       </button>
     </form>
 
+    <div class="cpub-form-group">
+      <label class="cpub-form-label">Your Data</label>
+      <p class="cpub-form-hint cpub-mb-2">Download a copy of all your data in JSON format.</p>
+      <a href="/api/auth/export-data" download class="cpub-btn cpub-btn-sm">
+        <i class="fa-solid fa-download"></i> Download My Data
+      </a>
+    </div>
+
     <hr class="cpub-danger-divider" />
 
     <div>
@@ -126,6 +134,7 @@ async function handleDeleteAccount(): Promise<void> {
 
 <style scoped>
 .cpub-mt-2 { margin-top: var(--space-2); }
+.cpub-mb-2 { margin-bottom: var(--space-2); }
 
 .cpub-danger-divider {
   border: none;

package/pages/terms.vue

@@ -0,0 +1,168 @@
+<script setup lang="ts">
+useSeoMeta({
+  title: `Terms of Service — ${useSiteName()}`,
+  description: 'Terms and conditions for using this platform.',
+});
+
+const siteName = useSiteName();
+</script>
+
+<template>
+  <div class="cpub-legal">
+    <div class="cpub-legal-header">
+      <h1 class="cpub-legal-title">Terms of Service</h1>
+      <p class="cpub-legal-updated">Last updated: April 2026</p>
+    </div>
+
+    <div class="cpub-legal-body">
+      <section class="cpub-legal-section">
+        <h2>1. Acceptance</h2>
+        <p>By creating an account or using {{ siteName }}, you agree to these Terms of Service and our <NuxtLink to="/privacy">Privacy Policy</NuxtLink>. If you do not agree, do not use the service.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>2. Your Account</h2>
+        <ul>
+          <li>You must provide accurate information when creating an account.</li>
+          <li>You are responsible for keeping your login credentials secure.</li>
+          <li>You must be at least 16 years old to create an account (or the minimum age required by your jurisdiction).</li>
+          <li>One person, one account. Automated or bot accounts require prior approval from the instance administrator.</li>
+        </ul>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>3. Your Content</h2>
+        <p>You retain ownership of content you create on {{ siteName }}. By publishing content, you grant us a license to display, distribute, and federate it as part of operating the platform.</p>
+        <ul>
+          <li>You must have the right to publish any content you upload (no plagiarism, no copyright infringement).</li>
+          <li>Content you import must be your own original work.</li>
+          <li>You may delete your content at any time. Federated copies on remote instances are outside our control.</li>
+          <li>We may remove content that violates these terms or applicable law.</li>
+        </ul>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>4. Acceptable Use</h2>
+        <p>You agree not to:</p>
+        <ul>
+          <li>Post illegal content or content that infringes others' rights</li>
+          <li>Harass, threaten, or abuse other users</li>
+          <li>Spam, phish, or distribute malware</li>
+          <li>Attempt to gain unauthorized access to the platform or other users' accounts</li>
+          <li>Scrape, crawl, or automatically collect data from the platform beyond what public APIs allow</li>
+          <li>Impersonate another person or entity</li>
+          <li>Use the platform for commercial advertising without permission</li>
+        </ul>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>5. Moderation</h2>
+        <p>The instance administrator may, at their discretion:</p>
+        <ul>
+          <li>Remove content that violates these terms</li>
+          <li>Suspend or delete accounts that violate these terms</li>
+          <li>Block federation with other instances</li>
+        </ul>
+        <p>We aim to handle moderation decisions transparently and fairly.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>6. Availability and Changes</h2>
+        <p>We provide {{ siteName }} on an "as is" basis. We do not guarantee uninterrupted availability. We may modify or discontinue the service at any time.</p>
+        <p>These terms may be updated. Continued use after changes constitutes acceptance.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>7. Limitation of Liability</h2>
+        <p>To the fullest extent permitted by law, the instance operator is not liable for any indirect, incidental, or consequential damages arising from your use of the platform. This includes data loss, service interruptions, or actions of other users or federated instances.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>8. Account Deletion</h2>
+        <p>You may delete your account at any time from your <NuxtLink to="/settings/account">account settings</NuxtLink>. Account deletion is permanent and removes all your data, content, and activity from this instance. See our <NuxtLink to="/privacy">Privacy Policy</NuxtLink> for details on data retention and federation.</p>
+      </section>
+
+      <section class="cpub-legal-section">
+        <h2>9. Contact</h2>
+        <p>For questions about these terms, contact the administrator of this {{ siteName }} instance.</p>
+      </section>
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.cpub-legal {
+  max-width: 740px;
+  margin: 0 auto;
+  padding: 48px 24px 80px;
+}
+
+.cpub-legal-header {
+  margin-bottom: 40px;
+}
+
+.cpub-legal-title {
+  font-size: 28px;
+  font-weight: 700;
+  margin-bottom: 8px;
+}
+
+.cpub-legal-updated {
+  font-size: 12px;
+  color: var(--text-faint);
+  font-family: var(--font-mono);
+}
+
+.cpub-legal-body {
+  display: flex;
+  flex-direction: column;
+  gap: 32px;
+}
+
+.cpub-legal-section h2 {
+  font-size: 16px;
+  font-weight: 600;
+  margin-bottom: 12px;
+}
+
+.cpub-legal-section p {
+  font-size: 14px;
+  line-height: 1.7;
+  color: var(--text-dim);
+  margin-bottom: 8px;
+}
+
+.cpub-legal-section ul {
+  padding-left: 20px;
+  margin: 8px 0;
+}
+
+.cpub-legal-section li {
+  font-size: 14px;
+  line-height: 1.7;
+  color: var(--text-dim);
+  margin-bottom: 4px;
+}
+
+.cpub-legal-section strong {
+  color: var(--text);
+}
+
+.cpub-legal-section a {
+  color: var(--accent);
+  text-decoration: none;
+}
+
+.cpub-legal-section a:hover {
+  text-decoration: underline;
+}
+
+@media (max-width: 640px) {
+  .cpub-legal {
+    padding: 24px 16px 60px;
+  }
+  .cpub-legal-title {
+    font-size: 22px;
+  }
+}
+</style>

package/server/api/auth/delete-user.post.ts

@@ -0,0 +1,55 @@
+import { deleteUser, federateDelete, listContent } from '@commonpub/server';
+import { contentItems } from '@commonpub/schema';
+import { eq, and } from 'drizzle-orm';
+
+export default defineEventHandler(async (event): Promise<{ success: true }> => {
+  const user = requireAuth(event);
+  const db = useDB();
+  const config = useConfig();
+
+  // Prevent deleting the last admin
+  if (user.role === 'admin') {
+    const { users } = await import('@commonpub/schema');
+    const admins = await db
+      .select({ id: users.id })
+      .from(users)
+      .where(eq(users.role, 'admin'))
+      .limit(2);
+    if (admins.length <= 1) {
+      throw createError({
+        statusCode: 400,
+        statusMessage: 'Cannot delete the only admin account',
+      });
+    }
+  }
+
+  // Federation cleanup: send Delete activities for published content
+  if (config.features.federation) {
+    const domain = config.instance.domain;
+    if (domain) {
+      const published = await db
+        .select({ id: contentItems.id })
+        .from(contentItems)
+        .where(and(
+          eq(contentItems.authorId, user.id),
+          eq(contentItems.status, 'published'),
+        ));
+
+      for (const item of published) {
+        try {
+          await federateDelete(db, item.id, domain, user.username);
+        } catch {
+          // Best-effort — don't block deletion if federation fails
+        }
+      }
+    }
+  }
+
+  // Delete the user (cascades to all related data)
+  await deleteUser(db, user.id, user.id);
+
+  // Clear the session cookie
+  deleteCookie(event, 'better-auth.session_token', { path: '/' });
+
+  return { success: true };
+});

package/server/api/auth/export-data.get.ts

@@ -0,0 +1,15 @@
+import { exportUserData } from '@commonpub/server';
+
+export default defineEventHandler(async (event) => {
+  const user = requireAuth(event);
+  const db = useDB();
+
+  const data = await exportUserData(db, user.id);
+
+  const filename = `commonpub-export-${user.username}-${new Date().toISOString().split('T')[0]}.json`;
+
+  setHeader(event, 'Content-Type', 'application/json');
+  setHeader(event, 'Content-Disposition', `attachment; filename="${filename}"`);
+
+  return data;
+});

package/server/api/search/index.get.ts

@@ -1,5 +1,5 @@
 import { searchContent, listHubs, escapeLike } from '@commonpub/server';
-import type { ContentSearchOptions } from '@commonpub/server';
+import type { ContentSearchOptions, MeiliClient } from '@commonpub/server';
 import { users, follows, hubs } from '@commonpub/schema';
 import { sql, desc, ilike, or, and, isNull, eq } from 'drizzle-orm';
 import { z } from 'zod';
@@ -45,7 +45,7 @@ export default defineEventHandler(async (event): Promise<{ items: unknown[]; tot
         bannerUrl: hub.bannerUrl,
         memberCount: hub.memberCount,
         postCount: hub.postCount,
-        source: (hub as Record<string, unknown>).source ?? 'local',
+        source: (hub as unknown as Record<string, unknown>).source ?? 'local',
       })),
       total: result.total,
     };
@@ -108,7 +108,7 @@ export default defineEventHandler(async (event): Promise<{ items: unknown[]; tot
     const meiliKey = process.env.MEILI_MASTER_KEY;
     if (meiliUrl) {
       const { MeiliSearch } = await import('meilisearch');
-      meiliClient = new MeiliSearch({ host: meiliUrl, apiKey: meiliKey });
+      meiliClient = new MeiliSearch({ host: meiliUrl, apiKey: meiliKey }) as unknown as MeiliClient;
     }
   } catch { /* Meilisearch not available */ }
 

package/types/meilisearch.d.ts

@@ -0,0 +1,5 @@
+declare module 'meilisearch' {
+  export class MeiliSearch {
+    constructor(options: { host: string; apiKey?: string });
+  }
+}

package/components/__tests__/FederatedContentCard.test.ts

@@ -1,340 +0,0 @@
-/**
- * Component tests for FederatedContentCard.
- *
- * Tests rendering of federated content from CommonPub and non-CommonPub sources,
- * computed properties (typeLabel, actorHandle, timeAgo), event emission, and
- * conditional rendering (avatar, cover image, tags, title link).
- */
-import { describe, it, expect } from 'vitest';
-import { render, screen, fireEvent } from '@testing-library/vue';
-import { defineComponent, h } from 'vue';
-import FederatedContentCard from '../FederatedContentCard.vue';
-
-// Stub NuxtLink as a plain <a> tag
-const NuxtLink = defineComponent({
-  name: 'NuxtLink',
-  props: { to: String },
-  setup(props, { slots }) {
-    return () => h('a', { href: props.to }, slots.default?.());
-  },
-});
-
-const stubs = { NuxtLink };
-
-function makeContent(overrides: Record<string, unknown> = {}) {
-  return {
-    id: 'fed-1',
-    objectUri: 'https://remote.example.com/content/test',
-    apType: 'Article',
-    title: 'LED Cube Build',
-    content: '<p>Build a 4x4x4 LED cube</p>',
-    summary: '<p>A <strong>complete</strong> LED cube tutorial</p>',
-    url: 'https://remote.example.com/project/led-cube',
-    coverImageUrl: null,
-    tags: [],
-    attachments: [],
-    inReplyTo: null,
-    cpubType: 'project',
-    cpubMetadata: null,
-    cpubBlocks: null,
-    localLikeCount: 5,
-    localCommentCount: 2,
-    localViewCount: 100,
-    publishedAt: new Date(Date.now() - 3600000).toISOString(), // 1 hour ago
-    receivedAt: new Date().toISOString(),
-    originDomain: 'remote.example.com',
-    actor: {
-      actorUri: 'https://remote.example.com/users/alice',
-      preferredUsername: 'alice',
-      displayName: 'Alice Builder',
-      avatarUrl: 'https://remote.example.com/avatars/alice.png',
-      instanceDomain: 'remote.example.com',
-    },
-    ...overrides,
-  };
-}
-
-describe('FederatedContentCard', () => {
-  // --- Basic rendering ---
-
-  it('renders title', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent() },
-      global: { stubs },
-    });
-    expect(screen.getByText('LED Cube Build')).toBeInTheDocument();
-  });
-
-  it('renders actor name and handle', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent() },
-      global: { stubs },
-    });
-    expect(screen.getByText('Alice Builder')).toBeInTheDocument();
-    expect(screen.getByText('@alice@remote.example.com')).toBeInTheDocument();
-  });
-
-  it('renders origin domain badge', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent() },
-      global: { stubs },
-    });
-    expect(screen.getByText('remote.example.com')).toBeInTheDocument();
-  });
-
-  it('strips HTML from summary', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent() },
-      global: { stubs },
-    });
-    const summary = screen.getByText('A complete LED cube tutorial');
-    expect(summary).toBeInTheDocument();
-    // Should NOT contain HTML tags
-    expect(summary.innerHTML).not.toContain('<strong>');
-    expect(summary.innerHTML).not.toContain('<p>');
-  });
-
-  // --- Type label computed ---
-
-  it('shows cpubType as type badge when present', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent({ cpubType: 'project' }) },
-      global: { stubs },
-    });
-    expect(screen.getByText('project')).toBeInTheDocument();
-  });
-
-  it('shows "article" for AP Article without cpubType', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent({ cpubType: null, apType: 'Article' }) },
-      global: { stubs },
-    });
-    expect(screen.getByText('article')).toBeInTheDocument();
-  });
-
-  it('shows "post" for AP Note without cpubType', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent({ cpubType: null, apType: 'Note' }) },
-      global: { stubs },
-    });
-    expect(screen.getByText('post')).toBeInTheDocument();
-  });
-
-  // --- Avatar rendering ---
-
-  it('renders avatar image when actor has avatarUrl', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent() },
-      global: { stubs },
-    });
-    const img = screen.getByAltText('Alice Builder avatar');
-    expect(img).toBeInTheDocument();
-    expect(img).toHaveAttribute('src', 'https://remote.example.com/avatars/alice.png');
-  });
-
-  it('renders placeholder when actor has no avatarUrl', () => {
-    const { container } = render(FederatedContentCard, {
-      props: {
-        content: makeContent({
-          actor: {
-            actorUri: 'https://remote.example.com/users/bob',
-            preferredUsername: 'bob',
-            displayName: 'Bob',
-            avatarUrl: null,
-            instanceDomain: 'remote.example.com',
-          },
-        }),
-      },
-      global: { stubs },
-    });
-    const placeholder = container.querySelector('.cpub-fed-card__avatar--placeholder');
-    expect(placeholder).toBeInTheDocument();
-    expect(placeholder?.textContent).toBe('B');
-  });
-
-  // --- Cover image ---
-
-  it('renders cover image through proxy when coverImageUrl present', () => {
-    const { container } = render(FederatedContentCard, {
-      props: {
-        content: makeContent({
-          coverImageUrl: 'https://remote.example.com/img/cover.jpg',
-        }),
-      },
-      global: { stubs },
-    });
-    const cover = container.querySelector('.cpub-fed-card__cover img');
-    expect(cover).toBeInTheDocument();
-    expect(cover?.getAttribute('src')).toContain('/api/image-proxy');
-    expect(cover?.getAttribute('src')).toContain(encodeURIComponent('https://remote.example.com/img/cover.jpg'));
-  });
-
-  it('does not render cover image when coverImageUrl is null', () => {
-    const { container } = render(FederatedContentCard, {
-      props: { content: makeContent({ coverImageUrl: null }) },
-      global: { stubs },
-    });
-    expect(container.querySelector('.cpub-fed-card__cover')).not.toBeInTheDocument();
-  });
-
-  // --- Tags ---
-
-  it('renders tags when present', () => {
-    render(FederatedContentCard, {
-      props: {
-        content: makeContent({
-          tags: [
-            { type: 'Hashtag', name: '#electronics' },
-            { type: 'Hashtag', name: '#led' },
-          ],
-        }),
-      },
-      global: { stubs },
-    });
-    expect(screen.getByText('#electronics')).toBeInTheDocument();
-    expect(screen.getByText('#led')).toBeInTheDocument();
-  });
-
-  it('limits tags to 5', () => {
-    const tags = Array.from({ length: 8 }, (_, i) => ({
-      type: 'Hashtag',
-      name: `#tag${i}`,
-    }));
-    const { container } = render(FederatedContentCard, {
-      props: { content: makeContent({ tags }) },
-      global: { stubs },
-    });
-    const tagElements = container.querySelectorAll('.cpub-fed-card__tag');
-    expect(tagElements.length).toBe(5);
-  });
-
-  it('hides tags section when empty', () => {
-    const { container } = render(FederatedContentCard, {
-      props: { content: makeContent({ tags: [] }) },
-      global: { stubs },
-    });
-    expect(container.querySelector('.cpub-fed-card__tags')).not.toBeInTheDocument();
-  });
-
-  // --- Like count ---
-
-  it('shows like count when > 0', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent({ localLikeCount: 5 }) },
-      global: { stubs },
-    });
-    expect(screen.getByLabelText('Like this project')).toHaveTextContent('5 Like');
-  });
-
-  it('hides like count when 0', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent({ localLikeCount: 0 }) },
-      global: { stubs },
-    });
-    expect(screen.getByLabelText('Like this project')).toHaveTextContent('Like');
-    expect(screen.getByLabelText('Like this project').textContent?.trim()).toBe('Like');
-  });
-
-  // --- Events ---
-
-  it('emits like event with content id', async () => {
-    const { emitted } = render(FederatedContentCard, {
-      props: { content: makeContent() },
-      global: { stubs },
-    });
-    await fireEvent.click(screen.getByLabelText('Like this project'));
-    expect(emitted().like).toBeTruthy();
-    expect(emitted().like[0]).toEqual(['fed-1']);
-  });
-
-  it('emits boost event with content id', async () => {
-    const { emitted } = render(FederatedContentCard, {
-      props: { content: makeContent() },
-      global: { stubs },
-    });
-    await fireEvent.click(screen.getByLabelText('Boost this project'));
-    expect(emitted().boost).toBeTruthy();
-    expect(emitted().boost[0]).toEqual(['fed-1']);
-  });
-
-  // --- Title link ---
-
-  it('renders title as link when url is present', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent() },
-      global: { stubs },
-    });
-    const link = screen.getByText('LED Cube Build').closest('a');
-    expect(link).toHaveAttribute('href', 'https://remote.example.com/project/led-cube');
-    expect(link).toHaveAttribute('target', '_blank');
-  });
-
-  it('renders title as plain text when url is null', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent({ url: null }) },
-      global: { stubs },
-    });
-    const title = screen.getByText('LED Cube Build');
-    expect(title.tagName).toBe('SPAN');
-  });
-
-  // --- View Original link ---
-
-  it('shows View Original link when url present', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent() },
-      global: { stubs },
-    });
-    const link = screen.getByText('View Original');
-    expect(link).toHaveAttribute('href', 'https://remote.example.com/project/led-cube');
-    expect(link).toHaveAttribute('rel', 'noopener');
-  });
-
-  it('hides View Original when no url', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent({ url: null }) },
-      global: { stubs },
-    });
-    expect(screen.queryByText('View Original')).not.toBeInTheDocument();
-  });
-
-  // --- Time ago ---
-
-  it('shows relative time for recent content', () => {
-    const { container } = render(FederatedContentCard, {
-      props: {
-        content: makeContent({
-          publishedAt: new Date(Date.now() - 30 * 60000).toISOString(),
-        }),
-      },
-      global: { stubs },
-    });
-    const time = container.querySelector('.cpub-fed-card__time');
-    expect(time?.textContent).toBe('30m');
-  });
-
-  it('shows hours for content from today', () => {
-    const { container } = render(FederatedContentCard, {
-      props: {
-        content: makeContent({
-          publishedAt: new Date(Date.now() - 5 * 3600000).toISOString(),
-        }),
-      },
-      global: { stubs },
-    });
-    const time = container.querySelector('.cpub-fed-card__time');
-    expect(time?.textContent).toBe('5h');
-  });
-
-  // --- Fallback values ---
-
-  it('shows Unknown when actor is null', () => {
-    render(FederatedContentCard, {
-      props: { content: makeContent({ actor: null }) },
-      global: { stubs },
-    });
-    // Both actorName and actorHandle render "Unknown" fallback
-    const unknowns = screen.getAllByText('Unknown');
-    expect(unknowns.length).toBeGreaterThanOrEqual(1);
-  });
-});

package/composables/__tests__/useMirrorContent.test.ts

@@ -1,208 +0,0 @@
-/**
- * Unit tests for useMirrorContent composable.
- *
- * Tests the contentType resolution logic which determines how federated
- * content is displayed — critical for distinguishing CommonPub vs non-CommonPub
- * content types.
- */
-import { describe, it, expect } from 'vitest';
-import { ref, nextTick } from 'vue';
-import { useMirrorContent } from '../useMirrorContent';
-
-function makeFedContent(overrides: Record<string, unknown> = {}) {
-  return {
-    id: 'fed-1',
-    objectUri: 'https://remote.example.com/content/test',
-    apType: 'Article',
-    cpubType: null,
-    title: 'Test Content',
-    content: '<p>Hello world</p>',
-    summary: 'A test',
-    url: 'https://remote.example.com/article/test',
-    coverImageUrl: null,
-    tags: [],
-    attachments: [],
-    cpubMetadata: null,
-    cpubBlocks: null,
-    localLikeCount: 0,
-    localCommentCount: 0,
-    localViewCount: 0,
-    publishedAt: '2026-03-20T10:00:00Z',
-    receivedAt: '2026-03-20T11:00:00Z',
-    originDomain: 'remote.example.com',
-    actor: {
-      actorUri: 'https://remote.example.com/users/alice',
-      preferredUsername: 'alice',
-      displayName: 'Alice',
-      avatarUrl: null,
-      instanceDomain: 'remote.example.com',
-    },
-    ...overrides,
-  };
-}
-
-describe('useMirrorContent', () => {
-  // --- contentType resolution ---
-
-  describe('contentType', () => {
-    it('returns cpubType when present (CommonPub project)', () => {
-      const fedContent = ref(makeFedContent({ cpubType: 'project' }));
-      const { contentType } = useMirrorContent(fedContent);
-      expect(contentType.value).toBe('project');
-    });
-
-    it('returns cpubType when present (CommonPub article)', () => {
-      const fedContent = ref(makeFedContent({ cpubType: 'article' }));
-      const { contentType } = useMirrorContent(fedContent);
-      expect(contentType.value).toBe('article');
-    });
-
-    it('returns cpubType when present (CommonPub blog)', () => {
-      const fedContent = ref(makeFedContent({ cpubType: 'blog' }));
-      const { contentType } = useMirrorContent(fedContent);
-      expect(contentType.value).toBe('blog');
-    });
-
-    it('returns cpubType when present (CommonPub explainer)', () => {
-      const fedContent = ref(makeFedContent({ cpubType: 'explainer' }));
-      const { contentType } = useMirrorContent(fedContent);
-      expect(contentType.value).toBe('explainer');
-    });
-
-    it('falls back to apType lowercase for non-CommonPub Article', () => {
-      const fedContent = ref(makeFedContent({ cpubType: null, apType: 'Article' }));
-      const { contentType } = useMirrorContent(fedContent);
-      expect(contentType.value).toBe('article');
-    });
-
-    it('falls back to apType lowercase for Note', () => {
-      const fedContent = ref(makeFedContent({ cpubType: null, apType: 'Note' }));
-      const { contentType } = useMirrorContent(fedContent);
-      expect(contentType.value).toBe('note');
-    });
-
-    it('falls back to "article" when both cpubType and apType are null', () => {
-      const fedContent = ref(makeFedContent({ cpubType: null, apType: null }));
-      const { contentType } = useMirrorContent(fedContent);
-      expect(contentType.value).toBe('article');
-    });
-
-    it('prefers cpubType over apType', () => {
-      const fedContent = ref(makeFedContent({ cpubType: 'project', apType: 'Article' }));
-      const { contentType } = useMirrorContent(fedContent);
-      expect(contentType.value).toBe('project');
-    });
-  });
-
-  // --- transformedContent ---
-
-  describe('transformedContent', () => {
-    it('returns null when fedContent is null', () => {
-      const fedContent = ref(null);
-      const { transformedContent } = useMirrorContent(fedContent);
-      expect(transformedContent.value).toBeNull();
-    });
-
-    it('maps title correctly', () => {
-      const fedContent = ref(makeFedContent({ title: 'LED Cube Build' }));
-      const { transformedContent } = useMirrorContent(fedContent);
-      expect(transformedContent.value?.title).toBe('LED Cube Build');
-    });
-
-    it('uses "Untitled" when title is null', () => {
-      const fedContent = ref(makeFedContent({ title: null }));
-      const { transformedContent } = useMirrorContent(fedContent);
-      expect(transformedContent.value?.title).toBe('Untitled');
-    });
-
-    it('preserves cpubBlocks when present (CommonPub-to-CommonPub)', () => {
-      const blocks = [['paragraph', { text: 'Hello' }], ['heading', { level: 2, text: 'World' }]];
-      const fedContent = ref(makeFedContent({ cpubBlocks: blocks }));
-      const { transformedContent } = useMirrorContent(fedContent);
-      expect(transformedContent.value?.content).toEqual(blocks);
-    });
-
-    it('wraps HTML content as paragraph block (non-CommonPub)', () => {
-      const fedContent = ref(makeFedContent({
-        cpubBlocks: null,
-        content: '<p>Hello from Mastodon</p>',
-      }));
-      const { transformedContent } = useMirrorContent(fedContent);
-      expect(transformedContent.value?.content).toEqual([
-        ['paragraph', { html: '<p>Hello from Mastodon</p>' }],
-      ]);
-    });
-
-    it('extracts metadata from cpubMetadata', () => {
-      const fedContent = ref(makeFedContent({
-        cpubType: 'project',
-        cpubMetadata: { difficulty: 'intermediate', buildTime: '4h', estimatedCost: '$50' },
-      }));
-      const { transformedContent } = useMirrorContent(fedContent);
-      expect(transformedContent.value?.difficulty).toBe('intermediate');
-      expect(transformedContent.value?.buildTime).toBe('4h');
-      expect(transformedContent.value?.estimatedCost).toBe('$50');
-    });
-
-    it('maps tags to expected format', () => {
-      const fedContent = ref(makeFedContent({
-        tags: [
-          { type: 'Hashtag', name: '#electronics' },
-          { type: 'Hashtag', name: '#led' },
-        ],
-      }));
-      const { transformedContent } = useMirrorContent(fedContent);
-      expect(transformedContent.value?.tags).toHaveLength(2);
-      expect(transformedContent.value?.tags[0]?.name).toBe('#electronics');
-    });
-
-    it('maps actor to author format', () => {
-      const fedContent = ref(makeFedContent({
-        actor: {
-          actorUri: 'https://remote.example.com/users/bob',
-          preferredUsername: 'bob',
-          displayName: 'Bob Builder',
-          avatarUrl: 'https://remote.example.com/avatar.png',
-          instanceDomain: 'remote.example.com',
-          followerCount: 42,
-        },
-      }));
-      const { transformedContent } = useMirrorContent(fedContent);
-      expect(transformedContent.value?.author.username).toBe('bob');
-      expect(transformedContent.value?.author.displayName).toBe('Bob Builder');
-      expect(transformedContent.value?.author.avatarUrl).toBe('https://remote.example.com/avatar.png');
-    });
-  });
-
-  // --- originDomain ---
-
-  describe('originDomain', () => {
-    it('extracts origin domain', () => {
-      const fedContent = ref(makeFedContent({ originDomain: 'mastodon.social' }));
-      const { originDomain } = useMirrorContent(fedContent);
-      expect(originDomain.value).toBe('mastodon.social');
-    });
-
-    it('falls back to "unknown" when null', () => {
-      const fedContent = ref(makeFedContent({ originDomain: null }));
-      const { originDomain } = useMirrorContent(fedContent);
-      expect(originDomain.value).toBe('unknown');
-    });
-  });
-
-  // --- authorHandle ---
-
-  describe('authorHandle', () => {
-    it('formats as @user@domain', () => {
-      const fedContent = ref(makeFedContent());
-      const { authorHandle } = useMirrorContent(fedContent);
-      expect(authorHandle.value).toBe('@alice@remote.example.com');
-    });
-
-    it('returns empty string when no actor', () => {
-      const fedContent = ref(makeFedContent({ actor: null }));
-      const { authorHandle } = useMirrorContent(fedContent);
-      expect(authorHandle.value).toBe('');
-    });
-  });
-});