@de-otio/trellis 0.4.0

package/dist/lib/activitypub/listeners/inbox.js

@@ -0,0 +1,226 @@
+"use strict";
+/**
+ * Fedify Inbox Listener
+ *
+ * Integrates Fedify for HTTP signature verification and activity parsing
+ * in the inbox endpoint. Fedify handles:
+ * - HTTP Signature verification
+ * - Activity parsing and validation
+ * - Type-safe activity objects
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseActivity = parseActivity;
+exports.processInboxActivity = processInboxActivity;
+const activity_service_1 = require("../activity-service");
+const activity_processor_1 = require("../activity-processor");
+const logger_1 = require("../../logger");
+const database_connection_manager_1 = require("../../database-connection-manager");
+const db_query_helper_1 = require("../../db-query-helper");
+const region_detection_1 = require("../../region-detection");
+const http_signatures_1 = require("./http-signatures");
+const remote_activity_handler_1 = require("../services/remote-activity-handler");
+const abuse_prevention_1 = require("../services/abuse-prevention");
+const context_1 = require("../fedify/context");
+const standalone_mode_1 = require("../standalone-mode");
+/**
+ * Parse activity using Fedify
+ *
+ * Fedify provides type-safe activity parsing.
+ * This function uses Fedify to parse and validate activities.
+ *
+ * @param request - Incoming request with activity JSON
+ * @param env - Cloudflare Workers environment
+ * @returns Parsed activity or null if invalid
+ */
+async function parseActivity(request, env) {
+    const logger = logger_1.Logger.getInstance(env);
+    try {
+        // Parse JSON from request
+        const activity = (await request.json());
+        // Validate activity structure
+        if (!activity?.type || !activity?.actor) {
+            logger.warn("[Fedify Inbox] Invalid activity structure", {
+                activityType: activity?.type,
+            });
+            return null;
+        }
+        // Fedify provides type-safe activity parsing
+        // For now, parse JSON and validate structure
+        return activity;
+    }
+    catch (error) {
+        logger.error("[Fedify Inbox] Error parsing activity", {
+            error: error.message,
+        });
+        return null;
+    }
+}
+/**
+ * Process inbox activity
+ *
+ * Handles storing and processing activities received in inbox using Fedify.
+ *
+ * @param request - Incoming request
+ * @param env - Cloudflare Workers environment
+ * @param username - Target username
+ * @returns Response
+ */
+async function processInboxActivity(request, env, username) {
+    const logger = logger_1.Logger.getInstance(env);
+    try {
+        // Verify HTTP Signature (Fedify handles this)
+        const signatureValid = await (0, http_signatures_1.verifyHttpSignature)(request, env);
+        if (!signatureValid) {
+            logger.warn("[Fedify Inbox] Invalid HTTP signature", { username });
+            return new Response(JSON.stringify({ error: "Unauthorized" }), {
+                status: 401,
+                headers: { "content-type": "application/json" },
+            });
+        }
+        // Parse activity (Fedify handles parsing)
+        const activity = await parseActivity(request, env);
+        if (!activity) {
+            logger.warn("[Fedify Inbox] Failed to parse activity", { username });
+            return new Response(JSON.stringify({ error: "Invalid activity" }), {
+                status: 400,
+                headers: { "content-type": "application/json" },
+            });
+        }
+        // Check if this is a remote activity
+        const baseUrl = (0, context_1.getActivityPubBaseUrl)(env);
+        const actorUri = typeof activity.actor === "string"
+            ? activity.actor
+            : activity.actor?.id;
+        const isRemote = actorUri && (0, standalone_mode_1.isRemoteUri)(actorUri, env);
+        // Check if standalone mode is enabled - reject remote activities early
+        if (isRemote && actorUri) {
+            const standaloneMode = await (0, standalone_mode_1.isStandaloneModeEnabled)(env, undefined, request);
+            if (standaloneMode) {
+                logger.info("[Fedify Inbox] Rejecting remote activity (standalone mode enabled)", {
+                    username,
+                    actorUri,
+                    activityType: activity.type,
+                });
+                return new Response(JSON.stringify({
+                    error: "Remote activities not accepted in standalone mode",
+                }), {
+                    status: 403,
+                    headers: { "content-type": "application/json" },
+                });
+            }
+            // Validate activity for abuse prevention (Fedify handles rate limiting)
+            const isValid = await (0, abuse_prevention_1.validateActivity)(activity, actorUri, env);
+            if (!isValid) {
+                logger.warn("[Fedify Inbox] Activity failed abuse prevention check", {
+                    username,
+                    actorUri,
+                    activityType: activity.type,
+                });
+                return new Response(JSON.stringify({ error: "Activity rejected" }), {
+                    status: 403,
+                    headers: { "content-type": "application/json" },
+                });
+            }
+        }
+        // Get region and database
+        const region = (0, region_detection_1.detectRegionSync)(request, env);
+        const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+        // Get target user by username
+        const user = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+            return db.user.findUnique({
+                where: { username },
+                select: {
+                    id: true,
+                    username: true,
+                    actorUri: true,
+                    inboxUrl: true,
+                },
+            });
+        }, {
+            ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+            context: {
+                operation: "getUserByUsername",
+                username,
+            },
+        });
+        if (!user) {
+            logger.warn("[Fedify Inbox] User not found", { username });
+            return new Response(JSON.stringify({ error: "User not found" }), {
+                status: 404,
+                headers: { "content-type": "application/json" },
+            });
+        }
+        if (!user.actorUri) {
+            logger.warn("[Fedify Inbox] User missing actorUri", {
+                username,
+                userId: user.id,
+            });
+            return new Response(JSON.stringify({ error: "User not configured for ActivityPub" }), {
+                status: 400,
+                headers: { "content-type": "application/json" },
+            });
+        }
+        // Store and process activity (unified for local and remote)
+        if (isRemote && actorUri) {
+            // Remote activity: use remote handler
+            const processed = await (0, remote_activity_handler_1.processRemoteActivity)(activity, request, user.actorUri, env);
+            if (!processed) {
+                logger.warn("[Fedify Inbox] Failed to process remote activity", {
+                    username,
+                    actorUri,
+                    activityType: activity.type,
+                });
+                return new Response(JSON.stringify({ error: "Failed to process activity" }), {
+                    status: 500,
+                    headers: { "content-type": "application/json" },
+                });
+            }
+        }
+        else {
+            // Store activity
+            await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                await activity_service_1.ActivityService.storeInboxActivity(db, user.actorUri, activity);
+            }, {
+                ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                context: {
+                    operation: "storeInboxActivity",
+                    username,
+                    activityType: activity.type,
+                },
+            });
+            // Process activity asynchronously
+            (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                await activity_processor_1.ActivityProcessor.processActivity(db, activity, user, env);
+            }, {
+                ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                context: {
+                    operation: "processActivity",
+                    username,
+                    activityType: activity.type,
+                },
+            }).catch((error) => {
+                logger.error("[Fedify Inbox] Error processing activity", {
+                    error: error.message,
+                    username,
+                    activityType: activity.type,
+                });
+            });
+        }
+        // Return 202 Accepted (ActivityPub standard)
+        return new Response(JSON.stringify({ success: true }), {
+            status: 202,
+            headers: { "content-type": "application/json" },
+        });
+    }
+    catch (error) {
+        logger.error("[Fedify Inbox] Unexpected error", {
+            error: error.message,
+            username,
+        });
+        return new Response(JSON.stringify({ error: "Internal server error" }), {
+            status: 500,
+            headers: { "content-type": "application/json" },
+        });
+    }
+}
+//# sourceMappingURL=inbox.js.map

package/dist/lib/activitypub/listeners/inbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../../../../src/lib/activitypub/listeners/inbox.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AA+BH,sCA4BC;AAYD,oDA4NC;AAhSD,0DAG6B;AAC7B,8DAA0D;AAC1D,yCAAsC;AACtC,mFAAoF;AACpF,2DAG+B;AAC/B,6DAA0D;AAC1D,uDAAwD;AACxD,iFAA4E;AAC5E,mEAAgE;AAChE,+CAA0D;AAC1D,wDAA0E;AAE1E;;;;;;;;;GASG;AACI,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,GAAQ;IAER,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAQ,CAAC;QAE/C,8BAA8B;QAC9B,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBACvD,YAAY,EAAE,QAAQ,EAAE,IAAI;aAC7B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6CAA6C;QAC7C,6CAA6C;QAE7C,OAAO,QAAmC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;YACpD,KAAK,EAAG,KAAe,CAAC,OAAO;SAChC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,GAAQ,EACR,QAAgB;IAEhB,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,8CAA8C;QAC9C,MAAM,cAAc,GAAG,MAAM,IAAA,qCAAmB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;gBAC7D,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,EAAE;gBACjE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,qCAAqC;QACrC,MAAM,OAAO,GAAG,IAAA,+BAAqB,EAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,QAAQ,GACZ,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;YAChC,CAAC,CAAC,QAAQ,CAAC,KAAK;YAChB,CAAC,CAAE,QAAQ,CAAC,KAAa,EAAE,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,QAAQ,IAAI,IAAA,6BAAW,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAExD,uEAAuE;QACvE,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,cAAc,GAAG,MAAM,IAAA,yCAAuB,EAClD,GAAG,EACH,SAAS,EACT,OAAO,CACR,CAAC;YACF,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CACT,oEAAoE,EACpE;oBACE,QAAQ;oBACR,QAAQ;oBACR,YAAY,EAAE,QAAQ,CAAC,IAAI;iBAC5B,CACF,CAAC;gBACF,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,mDAAmD;iBAC3D,CAAC,EACF;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;YAED,wEAAwE;YACxE,MAAM,OAAO,GAAG,MAAM,IAAA,mCAAgB,EAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;oBACnE,QAAQ;oBACR,QAAQ;oBACR,YAAY,EAAE,QAAQ,CAAC,IAAI;iBAC5B,CAAC,CAAC;gBACH,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,EAAE;oBAClE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;QAElD,8BAA8B;QAC9B,MAAM,IAAI,GAAG,MAAM,IAAA,0CAAwB,EACzC,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;gBACxB,KAAK,EAAE,EAAE,QAAQ,EAAE;gBACnB,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI;iBACf;aACF,CAAC,CAAC;QACL,CAAC,EACD;YACE,GAAG,qCAAmB,CAAC,QAAQ;YAC/B,OAAO,EAAE;gBACP,SAAS,EAAE,mBAAmB;gBAC9B,QAAQ;aACT;SACF,CACF,CAAC;QAEF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE;gBAC/D,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBAClD,QAAQ;gBACR,MAAM,EAAE,IAAI,CAAC,EAAE;aAChB,CAAC,CAAC;YACH,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,EAChE;gBACE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CACF,CAAC;QACJ,CAAC;QAED,4DAA4D;QAC5D,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,sCAAsC;YACtC,MAAM,SAAS,GAAG,MAAM,IAAA,+CAAqB,EAC3C,QAAQ,EACR,OAAO,EACP,IAAI,CAAC,QAAS,EACd,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;oBAC9D,QAAQ;oBACR,QAAQ;oBACR,YAAY,EAAE,QAAQ,CAAC,IAAI;iBAC5B,CAAC,CAAC;gBACH,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,EACvD;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,iBAAiB;YACjB,MAAM,IAAA,0CAAwB,EAC5B,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,kCAAe,CAAC,kBAAkB,CACtC,EAAE,EACF,IAAI,CAAC,QAAS,EACd,QAAQ,CACT,CAAC;YACJ,CAAC,EACD;gBACE,GAAG,qCAAmB,CAAC,QAAQ;gBAC/B,OAAO,EAAE;oBACP,SAAS,EAAE,oBAAoB;oBAC/B,QAAQ;oBACR,YAAY,EAAE,QAAQ,CAAC,IAAI;iBAC5B;aACF,CACF,CAAC;YAEF,kCAAkC;YAClC,IAAA,0CAAwB,EACtB,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,sCAAiB,CAAC,eAAe,CACrC,EAAE,EACF,QAAQ,EACR,IAAW,EACX,GAAG,CACJ,CAAC;YACJ,CAAC,EACD;gBACE,GAAG,qCAAmB,CAAC,QAAQ;gBAC/B,OAAO,EAAE;oBACP,SAAS,EAAE,iBAAiB;oBAC5B,QAAQ;oBACR,YAAY,EAAE,QAAQ,CAAC,IAAI;iBAC5B;aACF,CACF,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChB,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACvD,KAAK,EAAG,KAAe,CAAC,OAAO;oBAC/B,QAAQ;oBACR,YAAY,EAAE,QAAQ,CAAC,IAAI;iBAC5B,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,6CAA6C;QAC7C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;YACrD,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;YAC9C,KAAK,EAAG,KAAe,CAAC,OAAO;YAC/B,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAE;YACtE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/lib/activitypub/listeners/outbox.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Fedify Outbox Listener
+ *
+ * Handles retrieving ActivityPub activities from user outboxes.
+ * Fedify will handle JSON-LD serialization and collection formatting.
+ */
+import type { Env } from "../../../env";
+/**
+ * Get outbox activities
+ *
+ * Retrieves activities from a user's outbox and formats them as an OrderedCollection.
+ * Fedify will handle JSON-LD serialization when fully integrated.
+ *
+ * @param request - Incoming request
+ * @param env - Cloudflare Workers environment
+ * @param username - Target username
+ * @returns Response with OrderedCollection
+ */
+export declare function getOutboxActivities(request: Request, env: Env, username: string): Promise<Response>;
+//# sourceMappingURL=outbox.d.ts.map

package/dist/lib/activitypub/listeners/outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../../../src/lib/activitypub/listeners/outbox.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAUxC;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,QAAQ,CAAC,CA4HnB"}

package/dist/lib/activitypub/listeners/outbox.js

@@ -0,0 +1,117 @@
+"use strict";
+/**
+ * Fedify Outbox Listener
+ *
+ * Handles retrieving ActivityPub activities from user outboxes.
+ * Fedify will handle JSON-LD serialization and collection formatting.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOutboxActivities = getOutboxActivities;
+const activity_service_1 = require("../activity-service");
+const logger_1 = require("../../logger");
+const database_connection_manager_1 = require("../../database-connection-manager");
+const db_query_helper_1 = require("../../db-query-helper");
+const region_detection_1 = require("../../region-detection");
+/**
+ * Get outbox activities
+ *
+ * Retrieves activities from a user's outbox and formats them as an OrderedCollection.
+ * Fedify will handle JSON-LD serialization when fully integrated.
+ *
+ * @param request - Incoming request
+ * @param env - Cloudflare Workers environment
+ * @param username - Target username
+ * @returns Response with OrderedCollection
+ */
+async function getOutboxActivities(request, env, username) {
+    const logger = logger_1.Logger.getInstance(env);
+    try {
+        // Parse pagination parameters
+        const url = new URL(request.url);
+        const page = parseInt(url.searchParams.get("page") || "1", 10);
+        const limit = Math.min(parseInt(url.searchParams.get("limit") || "20", 10), 100);
+        // Get region and database
+        const region = (0, region_detection_1.detectRegionSync)(request, env);
+        const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+        // Get user by username
+        const user = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+            return db.user.findUnique({
+                where: { username },
+                select: {
+                    id: true,
+                    username: true,
+                    actorUri: true,
+                },
+            });
+        }, {
+            ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+            context: {
+                operation: "getUserByUsername",
+                username,
+            },
+        });
+        if (!user || !user.actorUri) {
+            logger.warn("[Fedify Outbox] User not found", { username });
+            return new Response(JSON.stringify({ error: "User not found" }), {
+                status: 404,
+                headers: { "content-type": "application/json" },
+            });
+        }
+        // Get outbox activities
+        const activities = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+            return activity_service_1.ActivityService.getOutboxActivities(db, user.actorUri, page, limit);
+        }, {
+            ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+            context: {
+                operation: "getOutboxActivities",
+                username,
+            },
+        });
+        const totalItems = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+            return activity_service_1.ActivityService.getOutboxCount(db, user.actorUri);
+        }, {
+            ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+            context: {
+                operation: "getOutboxCount",
+                username,
+            },
+        });
+        // Convert activities to ActivityStreams format
+        const orderedItems = activities.map((a) => ({
+            type: a.type,
+            actor: a.actorUri,
+            object: a.objectId,
+            target: a.targetId,
+            to: a.to,
+            cc: a.cc,
+            bto: a.bto,
+            bcc: a.bcc,
+            published: a.published.toISOString(),
+        }));
+        // Format as OrderedCollection (ActivityPub standard)
+        const collection = {
+            "@context": "https://www.w3.org/ns/activitystreams",
+            type: "OrderedCollection",
+            id: `${user.actorUri}/outbox`,
+            totalItems,
+            orderedItems,
+        };
+        return new Response(JSON.stringify(collection), {
+            status: 200,
+            headers: {
+                "content-type": "application/activity+json",
+            },
+        });
+    }
+    catch (error) {
+        logger.error("[Fedify Outbox] Error getting outbox activities", {
+            error: error.message,
+            username,
+        });
+        return new Response(JSON.stringify({ error: "Internal server error" }), {
+            status: 500,
+            headers: { "content-type": "application/json" },
+        });
+    }
+}
+//# sourceMappingURL=outbox.js.map

package/dist/lib/activitypub/listeners/outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../../../src/lib/activitypub/listeners/outbox.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAuBH,kDAgIC;AApJD,0DAAsD;AACtD,yCAAsC;AACtC,mFAAoF;AACpF,2DAG+B;AAC/B,6DAA0D;AAE1D;;;;;;;;;;GAUG;AACI,KAAK,UAAU,mBAAmB,CACvC,OAAgB,EAChB,GAAQ,EACR,QAAgB;IAEhB,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,EACnD,GAAG,CACJ,CAAC;QAEF,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;QAElD,uBAAuB;QACvB,MAAM,IAAI,GAAG,MAAM,IAAA,0CAAwB,EACzC,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;gBACxB,KAAK,EAAE,EAAE,QAAQ,EAAE;gBACnB,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI;iBACf;aACF,CAAC,CAAC;QACL,CAAC,EACD;YACE,GAAG,qCAAmB,CAAC,QAAQ;YAC/B,OAAO,EAAE;gBACP,SAAS,EAAE,mBAAmB;gBAC9B,QAAQ;aACT;SACF,CACF,CAAC;QAEF,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE;gBAC/D,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,wBAAwB;QACxB,MAAM,UAAU,GAAG,MAAM,IAAA,0CAAwB,EAC/C,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,OAAO,kCAAe,CAAC,mBAAmB,CACxC,EAAE,EACF,IAAI,CAAC,QAAS,EACd,IAAI,EACJ,KAAK,CACN,CAAC;QACJ,CAAC,EACD;YACE,GAAG,qCAAmB,CAAC,QAAQ;YAC/B,OAAO,EAAE;gBACP,SAAS,EAAE,qBAAqB;gBAChC,QAAQ;aACT;SACF,CACF,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAA,0CAAwB,EAC/C,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,OAAO,kCAAe,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,QAAS,CAAC,CAAC;QAC5D,CAAC,EACD;YACE,GAAG,qCAAmB,CAAC,QAAQ;YAC/B,OAAO,EAAE;gBACP,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ;aACT;SACF,CACF,CAAC;QAEF,+CAA+C;QAC/C,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,QAAQ;YACjB,MAAM,EAAE,CAAC,CAAC,QAAQ;YAClB,MAAM,EAAE,CAAC,CAAC,QAAQ;YAClB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC,CAAC;QAEJ,qDAAqD;QACrD,MAAM,UAAU,GAAG;YACjB,UAAU,EAAE,uCAAuC;YACnD,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,SAAS;YAC7B,UAAU;YACV,YAAY;SACb,CAAC;QAEF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;YAC9C,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,2BAA2B;aAC5C;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE;YAC9D,KAAK,EAAG,KAAe,CAAC,OAAO;YAC/B,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAE;YACtE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/lib/activitypub/remote-fetch-service.d.ts

@@ -0,0 +1,108 @@
+/**
+ * ActivityPub Remote Fetching Service
+ *
+ * Handles fetching of remote ActivityPub actors and objects from other servers.
+ * This enables federation with other ActivityPub instances.
+ *
+ * Phase 4: Federation
+ */
+import type { Env } from "../../env";
+import { Logger } from "../logger";
+/**
+ * Service for fetching remote ActivityPub actors and objects
+ */
+export declare class RemoteFetchService {
+    /**
+     * Default cache TTL: 1 hour
+     */
+    private static readonly DEFAULT_CACHE_TTL;
+    /**
+     * In-memory cache (for Cloudflare Workers)
+     * In production, consider using Cloudflare KV or Durable Objects for distributed caching
+     */
+    private static cache;
+    /**
+     * Fetch remote actor document
+     *
+     * @param actorUri - Actor URI (e.g., https://mastodon.social/users/alice)
+     * @param env - Environment variables
+     * @param logger - Optional logger instance
+     * @returns Actor document or null if fetch fails
+     */
+    static fetchActor(actorUri: string, env: Env, logger?: ReturnType<typeof Logger.getInstance>): Promise<object | null>;
+    /**
+     * Fetch remote object (post, note, etc.)
+     *
+     * @param objectUri - Object URI
+     * @param env - Environment variables
+     * @param logger - Optional logger instance
+     * @returns Object document or null if fetch fails
+     */
+    static fetchObject(objectUri: string, env: Env, logger?: ReturnType<typeof Logger.getInstance>): Promise<object | null>;
+    /**
+     * Get actor's inbox URL
+     *
+     * @param actorUri - Actor URI
+     * @param env - Environment variables
+     * @param logger - Optional logger instance
+     * @returns Inbox URL or null if not found
+     */
+    static getActorInbox(actorUri: string, env: Env, logger?: ReturnType<typeof Logger.getInstance>): Promise<string | null>;
+    /**
+     * Get actor's public key for signature verification
+     *
+     * @param actorUri - Actor URI
+     * @param env - Environment variables
+     * @param logger - Optional logger instance
+     * @returns Public key PEM or null if not found
+     */
+    static getActorPublicKey(actorUri: string, env: Env, logger?: ReturnType<typeof Logger.getInstance>): Promise<string | null>;
+    /**
+     * Check if URI is remote (not from our server)
+     *
+     * @param uri - URI to check
+     * @param env - Environment variables
+     * @returns True if URI is remote
+     */
+    static isRemoteUri(uri: string, env: Env): boolean;
+    /**
+     * Extract domain from URI
+     *
+     * @param uri - URI
+     * @returns Domain or null if invalid
+     */
+    static extractDomain(uri: string): string | null;
+    /**
+     * Validate URI format
+     */
+    private static isValidUri;
+    /**
+     * Validate actor document structure
+     */
+    private static isValidActor;
+    /**
+     * Validate object document structure
+     */
+    private static isValidObject;
+    /**
+     * Get cached document
+     */
+    private static getCached;
+    /**
+     * Cache document
+     */
+    private static setCached;
+    /**
+     * Clean up expired cache entries
+     */
+    private static cleanupCache;
+    /**
+     * Invalidate cache entry
+     */
+    static invalidateCache(uri: string): void;
+    /**
+     * Clear all cache entries
+     */
+    static clearCache(): void;
+}
+//# sourceMappingURL=remote-fetch-service.d.ts.map

package/dist/lib/activitypub/remote-fetch-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-fetch-service.d.ts","sourceRoot":"","sources":["../../../src/lib/activitypub/remote-fetch-service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAYnC;;GAEG;AACH,qBAAa,kBAAkB;IAC7B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAW;IAEpD;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAqC;IAEzD;;;;;;;OAOG;WACU,UAAU,CACrB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,GAAG,EACR,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,WAAW,CAAC,GAC7C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA2FzB;;;;;;;OAOG;WACU,WAAW,CACtB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,GAAG,EACR,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,WAAW,CAAC,GAC7C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA0FzB;;;;;;;OAOG;WACU,aAAa,CACxB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,GAAG,EACR,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,WAAW,CAAC,GAC7C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkBzB;;;;;;;OAOG;WACU,iBAAiB,CAC5B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,GAAG,EACR,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,WAAW,CAAC,GAC7C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA0BzB;;;;;;OAMG;IACH,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO;IAKlD;;;;;OAKG;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAShD;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;IASzB;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,YAAY;IA4B3B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,aAAa;IAiB5B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,SAAS;IAexB;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,SAAS;IAiBxB;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,YAAY;IAS3B;;OAEG;IACH,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzC;;OAEG;IACH,MAAM,CAAC,UAAU,IAAI,IAAI;CAG1B"}