@de-otio/trellis 0.4.0

package/dist/lib/activitypub/jsonld.d.ts

@@ -0,0 +1,39 @@
+/**
+ * JSON-LD Context Management for ActivityPub
+ *
+ * Handles JSON-LD context setup and caching for ActivityStreams 2.0 documents.
+ */
+import type { Env } from "../../env";
+/**
+ * Service for managing JSON-LD contexts for ActivityPub
+ */
+export declare class JsonLdService {
+    /**
+     * Get standard ActivityPub context array
+     * Used in all ActivityPub documents
+     */
+    static getStandardContext(): string[];
+    /**
+     * Get expanded context object (for future extensibility)
+     * Currently returns standard contexts, but can be extended for custom contexts
+     */
+    static getContextObject(): object;
+    /**
+     * Validate that a document has the required ActivityPub context
+     */
+    static hasValidContext(document: any): boolean;
+    /**
+     * Add standard context to a document if missing
+     */
+    static ensureContext(document: any): any;
+    /**
+     * Cache context documents (for future implementation)
+     * ActivityPub servers may cache remote contexts for performance
+     */
+    static cacheContext(contextUrl: string, contextDocument: any, env: Env): Promise<void>;
+    /**
+     * Get cached context document (for future implementation)
+     */
+    static getCachedContext(contextUrl: string, env: Env): Promise<any | null>;
+}
+//# sourceMappingURL=jsonld.d.ts.map

package/dist/lib/activitypub/jsonld.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonld.d.ts","sourceRoot":"","sources":["../../../src/lib/activitypub/jsonld.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAQrC;;GAEG;AACH,qBAAa,aAAa;IACxB;;;OAGG;IACH,MAAM,CAAC,kBAAkB,IAAI,MAAM,EAAE;IAIrC;;;OAGG;IACH,MAAM,CAAC,gBAAgB,IAAI,MAAM;IAMjC;;OAEG;IACH,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO;IAoB9C;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,GAAG,GAAG;IAWxC;;;OAGG;WACU,YAAY,CACvB,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,GAAG,EACpB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,IAAI,CAAC;IAWhB;;OAEG;WACU,gBAAgB,CAC3B,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;CAYvB"}

package/dist/lib/activitypub/jsonld.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * JSON-LD Context Management for ActivityPub
+ *
+ * Handles JSON-LD context setup and caching for ActivityStreams 2.0 documents.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JsonLdService = void 0;
+/**
+ * Standard ActivityPub JSON-LD contexts
+ */
+const ACTIVITYSTREAMS_CONTEXT = "https://www.w3.org/ns/activitystreams";
+const SECURITY_CONTEXT = "https://w3id.org/security/v1";
+/**
+ * Service for managing JSON-LD contexts for ActivityPub
+ */
+class JsonLdService {
+    /**
+     * Get standard ActivityPub context array
+     * Used in all ActivityPub documents
+     */
+    static getStandardContext() {
+        return [ACTIVITYSTREAMS_CONTEXT, SECURITY_CONTEXT];
+    }
+    /**
+     * Get expanded context object (for future extensibility)
+     * Currently returns standard contexts, but can be extended for custom contexts
+     */
+    static getContextObject() {
+        return {
+            "@context": this.getStandardContext(),
+        };
+    }
+    /**
+     * Validate that a document has the required ActivityPub context
+     */
+    static hasValidContext(document) {
+        if (!document || typeof document !== "object") {
+            return false;
+        }
+        const context = document["@context"];
+        if (!context) {
+            return false;
+        }
+        // Context can be a string, array, or object
+        const contexts = Array.isArray(context) ? context : [context];
+        // Must include ActivityStreams context
+        return contexts.some((ctx) => {
+            const ctxStr = typeof ctx === "string" ? ctx : ctx["@context"] || "";
+            return ctxStr === ACTIVITYSTREAMS_CONTEXT;
+        });
+    }
+    /**
+     * Add standard context to a document if missing
+     */
+    static ensureContext(document) {
+        if (!this.hasValidContext(document)) {
+            return {
+                ...document,
+                "@context": this.getStandardContext(),
+            };
+        }
+        // If context is valid, return document as-is (don't convert string to array)
+        return document;
+    }
+    /**
+     * Cache context documents (for future implementation)
+     * ActivityPub servers may cache remote contexts for performance
+     */
+    static async cacheContext(contextUrl, contextDocument, env) {
+        // Future implementation: Store in KV for caching
+        // For now, this is a placeholder
+        // const kv = env.JSONLD_CACHE_KV;
+        // if (kv) {
+        //   await kv.put(contextUrl, JSON.stringify(contextDocument), {
+        //     expirationTtl: 86400, // 24 hours
+        //   });
+        // }
+    }
+    /**
+     * Get cached context document (for future implementation)
+     */
+    static async getCachedContext(contextUrl, env) {
+        // Future implementation: Retrieve from KV cache
+        // For now, this is a placeholder
+        // const kv = env.JSONLD_CACHE_KV;
+        // if (kv) {
+        //   const cached = await kv.get(contextUrl);
+        //   if (cached) {
+        //     return JSON.parse(cached);
+        //   }
+        // }
+        return null;
+    }
+}
+exports.JsonLdService = JsonLdService;
+//# sourceMappingURL=jsonld.js.map

package/dist/lib/activitypub/jsonld.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonld.js","sourceRoot":"","sources":["../../../src/lib/activitypub/jsonld.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAIH;;GAEG;AACH,MAAM,uBAAuB,GAAG,uCAAuC,CAAC;AACxE,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AAExD;;GAEG;AACH,MAAa,aAAa;IACxB;;;OAGG;IACH,MAAM,CAAC,kBAAkB;QACvB,OAAO,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,gBAAgB;QACrB,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,kBAAkB,EAAE;SACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,eAAe,CAAC,QAAa;QAClC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAE9D,uCAAuC;QACvC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAQ,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACrE,OAAO,MAAM,KAAK,uBAAuB,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,QAAa;QAChC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,GAAG,QAAQ;gBACX,UAAU,EAAE,IAAI,CAAC,kBAAkB,EAAE;aACtC,CAAC;QACJ,CAAC;QACD,6EAA6E;QAC7E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CACvB,UAAkB,EAClB,eAAoB,EACpB,GAAQ;QAER,iDAAiD;QACjD,iCAAiC;QACjC,kCAAkC;QAClC,YAAY;QACZ,gEAAgE;QAChE,wCAAwC;QACxC,QAAQ;QACR,IAAI;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAC3B,UAAkB,EAClB,GAAQ;QAER,gDAAgD;QAChD,iCAAiC;QACjC,kCAAkC;QAClC,YAAY;QACZ,6CAA6C;QAC7C,kBAAkB;QAClB,iCAAiC;QACjC,MAAM;QACN,IAAI;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA7FD,sCA6FC"}

package/dist/lib/activitypub/listeners/friends-collection.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Fedify Friends Collection Listener
+ *
+ * Handles friends collection endpoint with Fedify integration.
+ * Fedify handles JSON-LD serialization of the OrderedCollection.
+ */
+import type { Env } from "../../../env";
+/**
+ * Get friends collection
+ *
+ * Retrieves friends for a user and formats them as an OrderedCollection.
+ * Fedify will handle JSON-LD serialization when fully integrated.
+ *
+ * @param request - Incoming request
+ * @param env - Cloudflare Workers environment
+ * @param username - Target username
+ * @returns Response with OrderedCollection
+ */
+export declare function getFriendsCollection(request: Request, env: Env, username: string): Promise<Response>;
+//# sourceMappingURL=friends-collection.d.ts.map

package/dist/lib/activitypub/listeners/friends-collection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"friends-collection.d.ts","sourceRoot":"","sources":["../../../../src/lib/activitypub/listeners/friends-collection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAUxC;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,QAAQ,CAAC,CAkHnB"}

package/dist/lib/activitypub/listeners/friends-collection.js

@@ -0,0 +1,105 @@
+"use strict";
+/**
+ * Fedify Friends Collection Listener
+ *
+ * Handles friends collection endpoint with Fedify integration.
+ * Fedify handles JSON-LD serialization of the OrderedCollection.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getFriendsCollection = getFriendsCollection;
+const friendship_service_1 = require("../friendship-service");
+const logger_1 = require("../../logger");
+const database_connection_manager_1 = require("../../database-connection-manager");
+const db_query_helper_1 = require("../../db-query-helper");
+const region_detection_1 = require("../../region-detection");
+/**
+ * Get friends collection
+ *
+ * Retrieves friends for a user and formats them as an OrderedCollection.
+ * Fedify will handle JSON-LD serialization when fully integrated.
+ *
+ * @param request - Incoming request
+ * @param env - Cloudflare Workers environment
+ * @param username - Target username
+ * @returns Response with OrderedCollection
+ */
+async function getFriendsCollection(request, env, username) {
+    const logger = logger_1.Logger.getInstance(env);
+    try {
+        // Parse pagination parameters
+        const url = new URL(request.url);
+        const page = parseInt(url.searchParams.get("page") || "1", 10);
+        const limit = Math.min(parseInt(url.searchParams.get("limit") || "20", 10), 100);
+        // Get region and database
+        const region = (0, region_detection_1.detectRegionSync)(request, env);
+        const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+        // Get user by username
+        const user = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+            return db.user.findUnique({
+                where: { username },
+                select: {
+                    id: true,
+                    username: true,
+                    actorUri: true,
+                },
+            });
+        }, {
+            ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+            context: {
+                operation: "getUserByUsername",
+                username,
+            },
+        });
+        if (!user || !user.actorUri) {
+            logger.warn("[Fedify Friends Collection] User not found", { username });
+            return new Response(JSON.stringify({ error: "User not found" }), {
+                status: 404,
+                headers: { "content-type": "application/json" },
+            });
+        }
+        // Get friends actor URIs
+        const friendsActorUris = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+            return friendship_service_1.FriendshipService.getFriendsActorUris(db, user.actorUri, page, limit);
+        }, {
+            ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+            context: {
+                operation: "getFriendsActorUris",
+                username,
+            },
+        });
+        const totalItems = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+            return friendship_service_1.FriendshipService.getFriendsCount(db, user.actorUri);
+        }, {
+            ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+            context: {
+                operation: "getFriendsCount",
+                username,
+            },
+        });
+        // Format as OrderedCollection (ActivityPub standard)
+        const collection = {
+            "@context": "https://www.w3.org/ns/activitystreams",
+            type: "OrderedCollection",
+            id: `${user.actorUri}/friends`,
+            totalItems,
+            orderedItems: friendsActorUris,
+        };
+        return new Response(JSON.stringify(collection), {
+            status: 200,
+            headers: {
+                "content-type": "application/activity+json",
+            },
+        });
+    }
+    catch (error) {
+        logger.error("[Fedify Friends Collection] Error getting friends collection", {
+            error: error.message,
+            username,
+        });
+        return new Response(JSON.stringify({ error: "Internal server error" }), {
+            status: 500,
+            headers: { "content-type": "application/json" },
+        });
+    }
+}
+//# sourceMappingURL=friends-collection.js.map

package/dist/lib/activitypub/listeners/friends-collection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"friends-collection.js","sourceRoot":"","sources":["../../../../src/lib/activitypub/listeners/friends-collection.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAuBH,oDAsHC;AA1ID,8DAA0D;AAC1D,yCAAsC;AACtC,mFAAoF;AACpF,2DAG+B;AAC/B,6DAA0D;AAE1D;;;;;;;;;;GAUG;AACI,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,GAAQ,EACR,QAAgB;IAEhB,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,EACnD,GAAG,CACJ,CAAC;QAEF,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;QAElD,uBAAuB;QACvB,MAAM,IAAI,GAAG,MAAM,IAAA,0CAAwB,EACzC,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;gBACxB,KAAK,EAAE,EAAE,QAAQ,EAAE;gBACnB,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI;iBACf;aACF,CAAC,CAAC;QACL,CAAC,EACD;YACE,GAAG,qCAAmB,CAAC,QAAQ;YAC/B,OAAO,EAAE;gBACP,SAAS,EAAE,mBAAmB;gBAC9B,QAAQ;aACT;SACF,CACF,CAAC;QAEF,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE;gBAC/D,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,yBAAyB;QACzB,MAAM,gBAAgB,GAAG,MAAM,IAAA,0CAAwB,EACrD,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,OAAO,sCAAiB,CAAC,mBAAmB,CAC1C,EAAE,EACF,IAAI,CAAC,QAAS,EACd,IAAI,EACJ,KAAK,CACN,CAAC;QACJ,CAAC,EACD;YACE,GAAG,qCAAmB,CAAC,QAAQ;YAC/B,OAAO,EAAE;gBACP,SAAS,EAAE,qBAAqB;gBAChC,QAAQ;aACT;SACF,CACF,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAA,0CAAwB,EAC/C,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,OAAO,sCAAiB,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,QAAS,CAAC,CAAC;QAC/D,CAAC,EACD;YACE,GAAG,qCAAmB,CAAC,QAAQ;YAC/B,OAAO,EAAE;gBACP,SAAS,EAAE,iBAAiB;gBAC5B,QAAQ;aACT;SACF,CACF,CAAC;QAEF,qDAAqD;QACrD,MAAM,UAAU,GAAG;YACjB,UAAU,EAAE,uCAAuC;YACnD,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,UAAU;YAC9B,UAAU;YACV,YAAY,EAAE,gBAAgB;SAC/B,CAAC;QAEF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;YAC9C,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,2BAA2B;aAC5C;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,8DAA8D,EAC9D;YACE,KAAK,EAAG,KAAe,CAAC,OAAO;YAC/B,QAAQ;SACT,CACF,CAAC;QACF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAE;YACtE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/lib/activitypub/listeners/http-signatures.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Fedify HTTP Signatures Integration
+ *
+ * Uses Fedify's actor dispatcher for key management and implements HTTP signature
+ * signing and verification directly using crypto, without relying on old services.
+ */
+import type { Env } from "../../../env";
+/**
+ * Verify HTTP signature using Fedify actor dispatcher
+ *
+ * Uses the UserActorDispatcher to get key pairs and verifies signatures directly.
+ *
+ * @param request - Incoming request
+ * @param env - Cloudflare Workers environment
+ * @returns True if signature is valid, false otherwise
+ */
+export declare function verifyHttpSignature(request: Request, env: Env): Promise<boolean>;
+/**
+ * Sign outgoing request using Fedify actor dispatcher
+ *
+ * Uses the UserActorDispatcher to get key pairs and signs requests directly.
+ *
+ * @param request - Outgoing request
+ * @param env - Cloudflare Workers environment
+ * @param actorUri - Actor URI for signing
+ * @returns Request with signature headers
+ */
+export declare function signRequest(request: Request, env: Env, actorUri: string): Promise<Request>;
+//# sourceMappingURL=http-signatures.d.ts.map

package/dist/lib/activitypub/listeners/http-signatures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-signatures.d.ts","sourceRoot":"","sources":["../../../../src/lib/activitypub/listeners/http-signatures.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,OAAO,CAAC,CA2GlB;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CA2DlB"}

package/dist/lib/activitypub/listeners/http-signatures.js

@@ -0,0 +1,208 @@
+"use strict";
+/**
+ * Fedify HTTP Signatures Integration
+ *
+ * Uses Fedify's actor dispatcher for key management and implements HTTP signature
+ * signing and verification directly using crypto, without relying on old services.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyHttpSignature = verifyHttpSignature;
+exports.signRequest = signRequest;
+const crypto = __importStar(require("crypto"));
+const logger_1 = require("../../logger");
+const user_actor_1 = require("../dispatchers/user-actor");
+/**
+ * Verify HTTP signature using Fedify actor dispatcher
+ *
+ * Uses the UserActorDispatcher to get key pairs and verifies signatures directly.
+ *
+ * @param request - Incoming request
+ * @param env - Cloudflare Workers environment
+ * @returns True if signature is valid, false otherwise
+ */
+async function verifyHttpSignature(request, env) {
+    const logger = logger_1.Logger.getInstance(env);
+    try {
+        // Check if Signature header exists
+        const signatureHeader = request.headers.get("Signature");
+        if (!signatureHeader) {
+            logger.warn("[Fedify HTTP Signatures] Missing Signature header");
+            return false;
+        }
+        // Parse signature parameters
+        const signatureParams = {};
+        signatureHeader.split(",").forEach((param) => {
+            const trimmed = param.trim();
+            const equalIndex = trimmed.indexOf("=");
+            if (equalIndex === -1)
+                return;
+            const key = trimmed.substring(0, equalIndex).trim();
+            const value = trimmed
+                .substring(equalIndex + 1)
+                .trim()
+                .replace(/^"|"$/g, "");
+            signatureParams[key] = value;
+        });
+        const keyId = signatureParams.keyId;
+        const algorithm = signatureParams.algorithm;
+        const headers = signatureParams.headers;
+        const signature = signatureParams.signature;
+        if (!keyId || !algorithm || !headers || !signature) {
+            logger.warn("[Fedify HTTP Signatures] Missing required signature parameters");
+            return false;
+        }
+        // Validate algorithm
+        if (algorithm !== "rsa-sha256") {
+            logger.warn("[Fedify HTTP Signatures] Unsupported algorithm", {
+                algorithm,
+            });
+            return false;
+        }
+        // Extract actor URI from keyId
+        // Format: https://example.com/users/{username}#main-key
+        const keyIdUrl = new URL(keyId);
+        const actorUri = keyIdUrl.origin + keyIdUrl.pathname.replace(/#.*$/, "");
+        // Get actor dispatcher
+        const dispatcher = new user_actor_1.UserActorDispatcher(env);
+        // Get key pair for actor
+        const keyPair = await dispatcher.getKeyPair(actorUri);
+        if (!keyPair) {
+            logger.warn("[Fedify HTTP Signatures] Key pair not found", { actorUri });
+            return false;
+        }
+        // Reconstruct signature string
+        const headerList = headers.split(" ");
+        const signatureParts = [];
+        for (const headerName of headerList) {
+            if (headerName === "(request-target)") {
+                const url = new URL(request.url);
+                signatureParts.push(`(request-target): ${request.method.toLowerCase()} ${url.pathname}`);
+            }
+            else {
+                const value = request.headers.get(headerName.toLowerCase());
+                if (!value) {
+                    logger.warn("[Fedify HTTP Signatures] Missing required header", {
+                        headerName,
+                    });
+                    return false;
+                }
+                signatureParts.push(`${headerName.toLowerCase()}: ${value}`);
+            }
+        }
+        const signatureString = signatureParts.join("\n");
+        // Verify signature
+        // Note: keyPair.publicKey is a string (PEM format) from our ActorKeyPair implementation
+        const verify = crypto.createVerify("RSA-SHA256");
+        verify.update(signatureString);
+        const isValid = verify.verify(keyPair.publicKey, signature, "base64");
+        if (!isValid) {
+            logger.warn("[Fedify HTTP Signatures] Signature verification failed", {
+                keyId,
+            });
+        }
+        return isValid;
+    }
+    catch (error) {
+        logger.error("[Fedify HTTP Signatures] Error verifying signature", {
+            error: error.message,
+        });
+        return false;
+    }
+}
+/**
+ * Sign outgoing request using Fedify actor dispatcher
+ *
+ * Uses the UserActorDispatcher to get key pairs and signs requests directly.
+ *
+ * @param request - Outgoing request
+ * @param env - Cloudflare Workers environment
+ * @param actorUri - Actor URI for signing
+ * @returns Request with signature headers
+ */
+async function signRequest(request, env, actorUri) {
+    const logger = logger_1.Logger.getInstance(env);
+    try {
+        // Get actor dispatcher
+        const dispatcher = new user_actor_1.UserActorDispatcher(env);
+        // Get key pair for actor
+        const keyPair = await dispatcher.getKeyPair(actorUri);
+        if (!keyPair) {
+            logger.warn("[Fedify HTTP Signatures] Key pair not found for signing", {
+                actorUri,
+            });
+            return request; // Return original request if no key
+        }
+        const keyId = `${actorUri}#main-key`;
+        const date = new Date().toUTCString();
+        const url = new URL(request.url);
+        // Create signature string
+        const signatureString = [
+            `(request-target): ${request.method.toLowerCase()} ${url.pathname}`,
+            `host: ${url.host}`,
+            `date: ${date}`,
+        ].join("\n");
+        // Sign with private key
+        // Note: keyPair.privateKey is a string (PEM format) from our ActorKeyPair implementation
+        const sign = crypto.createSign("RSA-SHA256");
+        sign.update(signatureString);
+        sign.end();
+        const signatureValue = sign.sign(keyPair.privateKey, "base64");
+        // Create Signature header
+        const signatureHeader = [
+            `keyId="${keyId}"`,
+            'algorithm="rsa-sha256"',
+            'headers="(request-target) host date"',
+            `signature="${signatureValue}"`,
+        ].join(",");
+        // Clone request to add headers
+        const headers = new Headers(request.headers);
+        headers.set("Signature", signatureHeader);
+        headers.set("Date", date);
+        return new Request(request.url, {
+            method: request.method,
+            headers,
+            body: request.body,
+        });
+    }
+    catch (error) {
+        logger.error("[Fedify HTTP Signatures] Error signing request", {
+            error: error.message,
+            actorUri,
+        });
+        return request; // Return original request on error
+    }
+}
+//# sourceMappingURL=http-signatures.js.map

package/dist/lib/activitypub/listeners/http-signatures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-signatures.js","sourceRoot":"","sources":["../../../../src/lib/activitypub/listeners/http-signatures.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBH,kDA8GC;AAYD,kCA+DC;AAvMD,+CAAiC;AAEjC,yCAAsC;AACtC,0DAAgE;AAEhE;;;;;;;;GAQG;AACI,KAAK,UAAU,mBAAmB,CACvC,OAAgB,EAChB,GAAQ;IAER,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,mCAAmC;QACnC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6BAA6B;QAC7B,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,UAAU,KAAK,CAAC,CAAC;gBAAE,OAAO;YAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,OAAO;iBAClB,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC;iBACzB,IAAI,EAAE;iBACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzB,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC;QACpC,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC;QAC5C,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC;QACxC,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC;QAE5C,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CACT,gEAAgE,CACjE,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qBAAqB;QACrB,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBAC5D,SAAS;aACV,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,+BAA+B;QAC/B,wDAAwD;QACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAEzE,uBAAuB;QACvB,MAAM,UAAU,GAAG,IAAI,gCAAmB,CAAC,GAAG,CAAC,CAAC;QAEhD,yBAAyB;QACzB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,+BAA+B;QAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;YACpC,IAAI,UAAU,KAAK,kBAAkB,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,cAAc,CAAC,IAAI,CACjB,qBAAqB,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,CACpE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;wBAC9D,UAAU;qBACX,CAAC,CAAC;oBACH,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,cAAc,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAElD,mBAAmB;QACnB,wFAAwF;QACxF,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC1B,OAAe,CAAC,SAAS,EAC1B,SAAS,EACT,QAAQ,CACT,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE;gBACpE,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;YACjE,KAAK,EAAG,KAAe,CAAC,OAAO;SAChC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,GAAQ,EACR,QAAgB;IAEhB,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,uBAAuB;QACvB,MAAM,UAAU,GAAG,IAAI,gCAAmB,CAAC,GAAG,CAAC,CAAC;QAEhD,yBAAyB;QACzB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE;gBACrE,QAAQ;aACT,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,CAAC,oCAAoC;QACtD,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,QAAQ,WAAW,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEjC,0BAA0B;QAC1B,MAAM,eAAe,GAAG;YACtB,qBAAqB,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE;YACnE,SAAS,GAAG,CAAC,IAAI,EAAE;YACnB,SAAS,IAAI,EAAE;SAChB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,wBAAwB;QACxB,yFAAyF;QACzF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAE,OAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAExE,0BAA0B;QAC1B,MAAM,eAAe,GAAG;YACtB,UAAU,KAAK,GAAG;YAClB,wBAAwB;YACxB,sCAAsC;YACtC,cAAc,cAAc,GAAG;SAChC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,+BAA+B;QAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE1B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;YAC7D,KAAK,EAAG,KAAe,CAAC,OAAO;YAC/B,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,CAAC,mCAAmC;IACrD,CAAC;AACH,CAAC"}

package/dist/lib/activitypub/listeners/inbox.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Fedify Inbox Listener
+ *
+ * Integrates Fedify for HTTP signature verification and activity parsing
+ * in the inbox endpoint. Fedify handles:
+ * - HTTP Signature verification
+ * - Activity parsing and validation
+ * - Type-safe activity objects
+ */
+import type { Env } from "../../../env";
+import { type ActivityStreamsActivity } from "../activity-service";
+/**
+ * Parse activity using Fedify
+ *
+ * Fedify provides type-safe activity parsing.
+ * This function uses Fedify to parse and validate activities.
+ *
+ * @param request - Incoming request with activity JSON
+ * @param env - Cloudflare Workers environment
+ * @returns Parsed activity or null if invalid
+ */
+export declare function parseActivity(request: Request, env: Env): Promise<ActivityStreamsActivity | null>;
+/**
+ * Process inbox activity
+ *
+ * Handles storing and processing activities received in inbox using Fedify.
+ *
+ * @param request - Incoming request
+ * @param env - Cloudflare Workers environment
+ * @param username - Target username
+ * @returns Response
+ */
+export declare function processInboxActivity(request: Request, env: Env, username: string): Promise<Response>;
+//# sourceMappingURL=inbox.d.ts.map

package/dist/lib/activitypub/listeners/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../../../src/lib/activitypub/listeners/inbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC;AAe7B;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAyBzC;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,QAAQ,CAAC,CAwNnB"}