@de-otio/trellis 0.4.0

package/dist/lib/activitypub/remote-fetch-service.js

@@ -0,0 +1,364 @@
+"use strict";
+/**
+ * ActivityPub Remote Fetching Service
+ *
+ * Handles fetching of remote ActivityPub actors and objects from other servers.
+ * This enables federation with other ActivityPub instances.
+ *
+ * Phase 4: Federation
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemoteFetchService = void 0;
+const standalone_mode_1 = require("./standalone-mode");
+/**
+ * Service for fetching remote ActivityPub actors and objects
+ */
+class RemoteFetchService {
+    /**
+     * Default cache TTL: 1 hour
+     */
+    static DEFAULT_CACHE_TTL = 3600000; // 1 hour in milliseconds
+    /**
+     * In-memory cache (for Cloudflare Workers)
+     * In production, consider using Cloudflare KV or Durable Objects for distributed caching
+     */
+    static cache = new Map();
+    /**
+     * Fetch remote actor document
+     *
+     * @param actorUri - Actor URI (e.g., https://mastodon.social/users/alice)
+     * @param env - Environment variables
+     * @param logger - Optional logger instance
+     * @returns Actor document or null if fetch fails
+     */
+    static async fetchActor(actorUri, env, logger) {
+        // Validate URI
+        if (!this.isValidUri(actorUri)) {
+            if (logger) {
+                logger.warn(`[RemoteFetchService] Invalid actor URI: ${actorUri}`);
+            }
+            return null;
+        }
+        // Check if this is a remote actor
+        if (!(0, standalone_mode_1.isRemoteUri)(actorUri, env)) {
+            // Local actor - should not be fetched via RemoteFetchService
+            if (logger) {
+                logger.debug(`[RemoteFetchService] Actor is local, skipping: ${actorUri}`);
+            }
+            return null;
+        }
+        // Check if standalone mode is enabled - skip remote fetches
+        const standaloneMode = await (0, standalone_mode_1.isStandaloneModeEnabled)(env);
+        if (standaloneMode) {
+            if (logger) {
+                logger.info(`[RemoteFetchService] Skipping remote actor fetch (standalone mode enabled): ${actorUri}`);
+            }
+            return null;
+        }
+        // Check cache
+        const cached = this.getCached(actorUri);
+        if (cached) {
+            if (logger) {
+                logger.debug(`[RemoteFetchService] Using cached actor: ${actorUri}`);
+            }
+            return cached;
+        }
+        try {
+            // Fetch actor document
+            const response = await fetch(actorUri, {
+                headers: {
+                    Accept: 'application/activity+json, application/ld+json; profile="https://www.w3.org/ns/activitystreams"',
+                    "User-Agent": "Trellis ActivityPub Client/1.0",
+                },
+                // Cloudflare Workers fetch supports redirects by default
+            });
+            if (!response.ok) {
+                if (logger) {
+                    logger.warn(`[RemoteFetchService] Failed to fetch actor ${actorUri}: ${response.status} ${response.statusText}`);
+                }
+                return null;
+            }
+            const actor = (await response.json());
+            // Validate actor document
+            if (!this.isValidActor(actor)) {
+                if (logger) {
+                    logger.warn(`[RemoteFetchService] Invalid actor document: ${actorUri}`);
+                }
+                return null;
+            }
+            // Cache actor
+            this.setCached(actorUri, actor);
+            if (logger) {
+                logger.info(`[RemoteFetchService] Fetched remote actor: ${actorUri}`);
+            }
+            return actor;
+        }
+        catch (error) {
+            if (logger) {
+                logger.error(`[RemoteFetchService] Error fetching actor ${actorUri}:`, error);
+            }
+            return null;
+        }
+    }
+    /**
+     * Fetch remote object (post, note, etc.)
+     *
+     * @param objectUri - Object URI
+     * @param env - Environment variables
+     * @param logger - Optional logger instance
+     * @returns Object document or null if fetch fails
+     */
+    static async fetchObject(objectUri, env, logger) {
+        // Validate URI
+        if (!this.isValidUri(objectUri)) {
+            if (logger) {
+                logger.warn(`[RemoteFetchService] Invalid object URI: ${objectUri}`);
+            }
+            return null;
+        }
+        // Check if this is a remote object
+        if (!(0, standalone_mode_1.isRemoteUri)(objectUri, env)) {
+            // Local object - should not be fetched via RemoteFetchService
+            if (logger) {
+                logger.debug(`[RemoteFetchService] Object is local, skipping: ${objectUri}`);
+            }
+            return null;
+        }
+        // Check if standalone mode is enabled - skip remote fetches
+        const standaloneMode = await (0, standalone_mode_1.isStandaloneModeEnabled)(env);
+        if (standaloneMode) {
+            if (logger) {
+                logger.info(`[RemoteFetchService] Skipping remote object fetch (standalone mode enabled): ${objectUri}`);
+            }
+            return null;
+        }
+        // Check cache
+        const cached = this.getCached(objectUri);
+        if (cached) {
+            if (logger) {
+                logger.debug(`[RemoteFetchService] Using cached object: ${objectUri}`);
+            }
+            return cached;
+        }
+        try {
+            // Fetch object document
+            const response = await fetch(objectUri, {
+                headers: {
+                    Accept: 'application/activity+json, application/ld+json; profile="https://www.w3.org/ns/activitystreams"',
+                    "User-Agent": "Trellis ActivityPub Client/1.0",
+                },
+            });
+            if (!response.ok) {
+                if (logger) {
+                    logger.warn(`[RemoteFetchService] Failed to fetch object ${objectUri}: ${response.status} ${response.statusText}`);
+                }
+                return null;
+            }
+            const obj = (await response.json());
+            // Validate object document
+            if (!this.isValidObject(obj)) {
+                if (logger) {
+                    logger.warn(`[RemoteFetchService] Invalid object document: ${objectUri}`);
+                }
+                return null;
+            }
+            // Cache object
+            this.setCached(objectUri, obj);
+            if (logger) {
+                logger.info(`[RemoteFetchService] Fetched remote object: ${objectUri}`);
+            }
+            return obj;
+        }
+        catch (error) {
+            if (logger) {
+                logger.error(`[RemoteFetchService] Error fetching object ${objectUri}:`, error);
+            }
+            return null;
+        }
+    }
+    /**
+     * Get actor's inbox URL
+     *
+     * @param actorUri - Actor URI
+     * @param env - Environment variables
+     * @param logger - Optional logger instance
+     * @returns Inbox URL or null if not found
+     */
+    static async getActorInbox(actorUri, env, logger) {
+        const actor = await this.fetchActor(actorUri, env, logger);
+        if (!actor) {
+            return null;
+        }
+        const inbox = actor.inbox;
+        if (typeof inbox === "string") {
+            return inbox;
+        }
+        if (typeof inbox === "object" && inbox !== null && inbox.id) {
+            return inbox.id;
+        }
+        return null;
+    }
+    /**
+     * Get actor's public key for signature verification
+     *
+     * @param actorUri - Actor URI
+     * @param env - Environment variables
+     * @param logger - Optional logger instance
+     * @returns Public key PEM or null if not found
+     */
+    static async getActorPublicKey(actorUri, env, logger) {
+        const actor = await this.fetchActor(actorUri, env, logger);
+        if (!actor) {
+            return null;
+        }
+        const publicKey = actor.publicKey;
+        if (!publicKey) {
+            return null;
+        }
+        // Handle different public key formats
+        if (typeof publicKey === "string") {
+            return publicKey;
+        }
+        if (typeof publicKey === "object" && publicKey !== null) {
+            // ActivityPub format: { id, owner, publicKeyPem }
+            if (publicKey.publicKeyPem) {
+                return publicKey.publicKeyPem;
+            }
+        }
+        return null;
+    }
+    /**
+     * Check if URI is remote (not from our server)
+     *
+     * @param uri - URI to check
+     * @param env - Environment variables
+     * @returns True if URI is remote
+     */
+    static isRemoteUri(uri, env) {
+        const baseUrl = env.ACTIVITYPUB_BASE_URL || "https://example.com";
+        return !uri.startsWith(baseUrl);
+    }
+    /**
+     * Extract domain from URI
+     *
+     * @param uri - URI
+     * @returns Domain or null if invalid
+     */
+    static extractDomain(uri) {
+        try {
+            const url = new URL(uri);
+            return url.hostname;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Validate URI format
+     */
+    static isValidUri(uri) {
+        try {
+            const url = new URL(uri);
+            return url.protocol === "https:" || url.protocol === "http:";
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Validate actor document structure
+     */
+    static isValidActor(actor) {
+        if (!actor || typeof actor !== "object") {
+            return false;
+        }
+        // Must have type, id, and inbox
+        const validTypes = [
+            "Person",
+            "Group",
+            "Organization",
+            "Service",
+            "Application",
+        ];
+        if (!validTypes.includes(actor.type)) {
+            return false;
+        }
+        if (!actor.id || typeof actor.id !== "string") {
+            return false;
+        }
+        if (!actor.inbox) {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Validate object document structure
+     */
+    static isValidObject(obj) {
+        if (!obj || typeof obj !== "object") {
+            return false;
+        }
+        // Must have id and type
+        if (!obj.id || typeof obj.id !== "string") {
+            return false;
+        }
+        if (!obj.type || typeof obj.type !== "string") {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Get cached document
+     */
+    static getCached(uri) {
+        const cached = this.cache.get(uri);
+        if (!cached) {
+            return null;
+        }
+        // Check if expired
+        if (cached.expires < Date.now()) {
+            this.cache.delete(uri);
+            return null;
+        }
+        return cached.document;
+    }
+    /**
+     * Cache document
+     */
+    static setCached(uri, document, ttl = this.DEFAULT_CACHE_TTL) {
+        this.cache.set(uri, {
+            document,
+            expires: Date.now() + ttl,
+        });
+        // Clean up expired entries periodically (simple approach)
+        // In production, use a more sophisticated cache eviction strategy
+        if (this.cache.size > 1000) {
+            this.cleanupCache();
+        }
+    }
+    /**
+     * Clean up expired cache entries
+     */
+    static cleanupCache() {
+        const now = Date.now();
+        for (const [key, value] of this.cache.entries()) {
+            if (value.expires < now) {
+                this.cache.delete(key);
+            }
+        }
+    }
+    /**
+     * Invalidate cache entry
+     */
+    static invalidateCache(uri) {
+        this.cache.delete(uri);
+    }
+    /**
+     * Clear all cache entries
+     */
+    static clearCache() {
+        this.cache.clear();
+    }
+}
+exports.RemoteFetchService = RemoteFetchService;
+//# sourceMappingURL=remote-fetch-service.js.map

package/dist/lib/activitypub/remote-fetch-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-fetch-service.js","sourceRoot":"","sources":["../../../src/lib/activitypub/remote-fetch-service.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAKH,uDAAyE;AAUzE;;GAEG;AACH,MAAa,kBAAkB;IAC7B;;OAEG;IACK,MAAM,CAAU,iBAAiB,GAAG,OAAO,CAAC,CAAC,yBAAyB;IAE9E;;;OAGG;IACK,MAAM,CAAC,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEzD;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CACrB,QAAgB,EAChB,GAAQ,EACR,MAA8C;QAE9C,eAAe;QACf,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,2CAA2C,QAAQ,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,IAAA,6BAAW,EAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;YAChC,6DAA6D;YAC7D,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CACV,kDAAkD,QAAQ,EAAE,CAC7D,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4DAA4D;QAC5D,MAAM,cAAc,GAAG,MAAM,IAAA,yCAAuB,EAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CACT,+EAA+E,QAAQ,EAAE,CAC1F,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,cAAc;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,4CAA4C,QAAQ,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACH,uBAAuB;YACvB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBACrC,OAAO,EAAE;oBACP,MAAM,EACJ,iGAAiG;oBACnG,YAAY,EAAE,gCAAgC;iBAC/C;gBACD,yDAAyD;aAC1D,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CACT,8CAA8C,QAAQ,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CACpG,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAC;YAE7C,0BAA0B;YAC1B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CACT,gDAAgD,QAAQ,EAAE,CAC3D,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,cAAc;YACd,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAe,CAAC,CAAC;YAE1C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,8CAA8C,QAAQ,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,KAAe,CAAC;QACzB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CACV,6CAA6C,QAAQ,GAAG,EACxD,KAAK,CACN,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,WAAW,CACtB,SAAiB,EACjB,GAAQ,EACR,MAA8C;QAE9C,eAAe;QACf,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,4CAA4C,SAAS,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,IAAA,6BAAW,EAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;YACjC,8DAA8D;YAC9D,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CACV,mDAAmD,SAAS,EAAE,CAC/D,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4DAA4D;QAC5D,MAAM,cAAc,GAAG,MAAM,IAAA,yCAAuB,EAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CACT,gFAAgF,SAAS,EAAE,CAC5F,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,cAAc;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,6CAA6C,SAAS,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACH,wBAAwB;YACxB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBACtC,OAAO,EAAE;oBACP,MAAM,EACJ,iGAAiG;oBACnG,YAAY,EAAE,gCAAgC;iBAC/C;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CACT,+CAA+C,SAAS,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CACtG,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAC;YAE3C,2BAA2B;YAC3B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CACT,iDAAiD,SAAS,EAAE,CAC7D,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,eAAe;YACf,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,GAAa,CAAC,CAAC;YAEzC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,+CAA+C,SAAS,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,OAAO,GAAa,CAAC;QACvB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CACV,8CAA8C,SAAS,GAAG,EAC1D,KAAK,CACN,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,aAAa,CACxB,QAAgB,EAChB,GAAQ,EACR,MAA8C;QAE9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAI,KAAa,CAAC,KAAK,CAAC;QACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAAa,CAAC,EAAE,EAAE,CAAC;YACrE,OAAQ,KAAa,CAAC,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAC5B,QAAgB,EAChB,GAAQ,EACR,MAA8C;QAE9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAI,KAAa,CAAC,SAAS,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sCAAsC;QACtC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxD,kDAAkD;YAClD,IAAK,SAAiB,CAAC,YAAY,EAAE,CAAC;gBACpC,OAAQ,SAAiB,CAAC,YAAY,CAAC;YACzC,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,WAAW,CAAC,GAAW,EAAE,GAAQ;QACtC,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,IAAI,qBAAqB,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,aAAa,CAAC,GAAW;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,GAAG,CAAC,QAAQ,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,UAAU,CAAC,GAAW;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,YAAY,CAAC,KAAU;QACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,gCAAgC;QAChC,MAAM,UAAU,GAAG;YACjB,QAAQ;YACR,OAAO;YACP,cAAc;YACd,SAAS;YACT,aAAa;SACd,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,aAAa,CAAC,GAAQ;QACnC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,SAAS,CAAC,GAAW;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,IAAI,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,SAAS,CACtB,GAAW,EACX,QAAgB,EAChB,MAAc,IAAI,CAAC,iBAAiB;QAEpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG;SAC1B,CAAC,CAAC;QAEH,0DAA0D;QAC1D,kEAAkE;QAClE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,YAAY;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,KAAK,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,eAAe,CAAC,GAAW;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAU;QACf,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;;AArbH,gDAsbC"}

package/dist/lib/activitypub/services/abuse-prevention.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Abuse Prevention Service
+ *
+ * Implements abuse prevention for ActivityPub federation.
+ * Fedify provides rate limiting and signature verification.
+ * This service adds custom abuse detection logic.
+ */
+import type { Env } from "../../../env";
+/**
+ * Rate limit configuration
+ *
+ * Fedify provides rate limiting, but we can configure it here.
+ */
+export interface RateLimitConfig {
+    requestsPerMinute: number;
+    requestsPerHour: number;
+    requestsPerDay: number;
+}
+/**
+ * Default rate limit configuration
+ */
+export declare const DEFAULT_RATE_LIMITS: RateLimitConfig;
+/**
+ * Check rate limit for an actor.
+ *
+ * Uses a sliding window per actor URI. Returns false (and the request
+ * should be rejected with 429) when the actor exceeds the limit.
+ */
+export declare function checkRateLimit(actorUri: string, env: Env): Promise<boolean>;
+/**
+ * Detect abusive activity patterns
+ *
+ * Custom abuse detection logic beyond Fedify's built-in protections.
+ *
+ * @param activity - Activity to check
+ * @param actorUri - Actor URI
+ * @param env - Cloudflare Workers environment
+ * @returns True if activity appears abusive, false otherwise
+ */
+export declare function detectAbuse(activity: any, actorUri: string, env: Env): boolean;
+/**
+ * Validate activity for abuse prevention
+ *
+ * Combines rate limiting and abuse detection.
+ *
+ * @param activity - Activity to validate
+ * @param actorUri - Actor URI
+ * @param env - Cloudflare Workers environment
+ * @returns True if activity is safe, false if abusive
+ */
+export declare function validateActivity(activity: any, actorUri: string, env: Env): Promise<boolean>;
+//# sourceMappingURL=abuse-prevention.d.ts.map

package/dist/lib/activitypub/services/abuse-prevention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abuse-prevention.d.ts","sourceRoot":"","sources":["../../../../src/lib/activitypub/services/abuse-prevention.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,eAIjC,CAAC;AAKF;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,OAAO,CAAC,CAyBlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,GAAG,GACP,OAAO,CAyBT;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,OAAO,CAAC,CAqBlB"}

package/dist/lib/activitypub/services/abuse-prevention.js

@@ -0,0 +1,118 @@
+"use strict";
+/**
+ * Abuse Prevention Service
+ *
+ * Implements abuse prevention for ActivityPub federation.
+ * Fedify provides rate limiting and signature verification.
+ * This service adds custom abuse detection logic.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_RATE_LIMITS = void 0;
+exports.checkRateLimit = checkRateLimit;
+exports.detectAbuse = detectAbuse;
+exports.validateActivity = validateActivity;
+const logger_1 = require("../../logger");
+/**
+ * Default rate limit configuration
+ */
+exports.DEFAULT_RATE_LIMITS = {
+    requestsPerMinute: 60,
+    requestsPerHour: 1000,
+    requestsPerDay: 10000,
+};
+// In-memory per-actor request tracking (resets on server restart)
+const actorRequestCounts = new Map();
+/**
+ * Check rate limit for an actor.
+ *
+ * Uses a sliding window per actor URI. Returns false (and the request
+ * should be rejected with 429) when the actor exceeds the limit.
+ */
+async function checkRateLimit(actorUri, env) {
+    const now = Date.now();
+    const windowMs = 60_000; // 1-minute window
+    const maxPerWindow = exports.DEFAULT_RATE_LIMITS.requestsPerMinute;
+    const entry = actorRequestCounts.get(actorUri);
+    if (!entry || now - entry.windowStart > windowMs) {
+        // New window
+        actorRequestCounts.set(actorUri, { count: 1, windowStart: now });
+        return true;
+    }
+    entry.count++;
+    if (entry.count > maxPerWindow) {
+        const logger = logger_1.Logger.getInstance(env);
+        logger.warn("[AbusePrevention] Rate limit exceeded", {
+            actorUri,
+            count: entry.count,
+            limit: maxPerWindow,
+        });
+        return false;
+    }
+    return true;
+}
+/**
+ * Detect abusive activity patterns
+ *
+ * Custom abuse detection logic beyond Fedify's built-in protections.
+ *
+ * @param activity - Activity to check
+ * @param actorUri - Actor URI
+ * @param env - Cloudflare Workers environment
+ * @returns True if activity appears abusive, false otherwise
+ */
+function detectAbuse(activity, actorUri, env) {
+    try {
+        const logger = logger_1.Logger.getInstance(env);
+        // Check for suspicious activity patterns
+        // 1. Rapid activity creation
+        // 2. Spam-like content
+        // 3. Suspicious actor patterns
+        // Custom abuse detection logic can be implemented here
+        // Fedify handles rate limiting and signature verification
+        return false;
+    }
+    catch (error) {
+        // Logger.getInstance might fail, try to get logger again for error logging
+        try {
+            const logger = logger_1.Logger.getInstance(env);
+            logger.error("[AbusePrevention] Error detecting abuse", {
+                error: error.message,
+                actorUri,
+            });
+        }
+        catch {
+            // If logger also fails, just continue
+        }
+        return false; // Fail open on error (allow activity)
+    }
+}
+/**
+ * Validate activity for abuse prevention
+ *
+ * Combines rate limiting and abuse detection.
+ *
+ * @param activity - Activity to validate
+ * @param actorUri - Actor URI
+ * @param env - Cloudflare Workers environment
+ * @returns True if activity is safe, false if abusive
+ */
+async function validateActivity(activity, actorUri, env) {
+    const logger = logger_1.Logger.getInstance(env);
+    // Check rate limit
+    const withinRateLimit = await checkRateLimit(actorUri, env);
+    if (!withinRateLimit) {
+        logger.warn("[AbusePrevention] Rate limit exceeded", { actorUri });
+        return false;
+    }
+    // Check for abuse patterns
+    const isAbusive = detectAbuse(activity, actorUri, env);
+    if (isAbusive) {
+        logger.warn("[AbusePrevention] Abusive activity detected", {
+            actorUri,
+            activityType: activity.type,
+        });
+        return false;
+    }
+    return true;
+}
+//# sourceMappingURL=abuse-prevention.js.map

package/dist/lib/activitypub/services/abuse-prevention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abuse-prevention.js","sourceRoot":"","sources":["../../../../src/lib/activitypub/services/abuse-prevention.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAmCH,wCA4BC;AAYD,kCA6BC;AAYD,4CAyBC;AA1ID,yCAAsC;AActC;;GAEG;AACU,QAAA,mBAAmB,GAAoB;IAClD,iBAAiB,EAAE,EAAE;IACrB,eAAe,EAAE,IAAI;IACrB,cAAc,EAAE,KAAK;CACtB,CAAC;AAEF,kEAAkE;AAClE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkD,CAAC;AAErF;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,GAAQ;IAER,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,kBAAkB;IAC3C,MAAM,YAAY,GAAG,2BAAmB,CAAC,iBAAiB,CAAC;IAE3D,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,GAAG,QAAQ,EAAE,CAAC;QACjD,aAAa;QACb,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,IAAI,KAAK,CAAC,KAAK,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;YACnD,QAAQ;YACR,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,WAAW,CACzB,QAAa,EACb,QAAgB,EAChB,GAAQ;IAER,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,yCAAyC;QACzC,6BAA6B;QAC7B,uBAAuB;QACvB,+BAA+B;QAE/B,uDAAuD;QACvD,0DAA0D;QAE1D,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;gBACtD,KAAK,EAAG,KAAe,CAAC,OAAO;gBAC/B,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,sCAAsC;IACtD,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,gBAAgB,CACpC,QAAa,EACb,QAAgB,EAChB,GAAQ;IAER,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEvC,mBAAmB;IACnB,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2BAA2B;IAC3B,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;YACzD,QAAQ;YACR,YAAY,EAAE,QAAQ,CAAC,IAAI;SAC5B,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/activitypub/services/dm-service-fedify.d.ts

@@ -0,0 +1,46 @@
+/**
+ * ActivityPub Direct Message Service (Fedify-Based)
+ *
+ * Handles creation and delivery of direct messages using Fedify's type-safe Create and Note types.
+ * DMs use the `bto` (blind recipients) field for privacy.
+ */
+import { Create, Note } from "@fedify/fedify";
+import type { Env } from "../../../env";
+import type { User } from "@prisma/client";
+import type { PrismaClient } from "@prisma/client";
+import { Logger } from "../../logger";
+/**
+ * Service for managing direct messages as Fedify ActivityPub activities
+ */
+export declare class DmServiceFedify {
+    /**
+     * Generate ActivityPub URIs for a direct message
+     */
+    static generateDmUris(dmId: string, env: Env, requestUrl?: string): {
+        activityId: URL;
+        objectId: URL;
+    };
+    /**
+     * Create Fedify Note object for a direct message
+     * Uses bto field for privacy (blind recipients)
+     */
+    static createDmNote(dmId: string, sender: User, recipient: User, text: string, published: Date, env: Env, requestUrl?: string): Promise<Note>;
+    /**
+     * Create Fedify Create activity for a direct message
+     */
+    static createDmCreateActivity(dmId: string, sender: User, recipient: User, text: string, published: Date, env: Env, requestUrl?: string): Promise<Create>;
+    /**
+     * Create direct message and store in database and outbox
+     */
+    static createDirectMessage(prisma: PrismaClient, sender: User, recipient: User, text: string, env: Env, requestUrl?: string, logger?: ReturnType<typeof Logger.getInstance>): Promise<{
+        id: string;
+        senderId: string;
+        recipientId: string;
+        text: string;
+        objectId: string;
+        activityId: string;
+        read: boolean;
+        createdAt: Date;
+    }>;
+}
+//# sourceMappingURL=dm-service-fedify.d.ts.map

package/dist/lib/activitypub/services/dm-service-fedify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dm-service-fedify.d.ts","sourceRoot":"","sources":["../../../../src/lib/activitypub/services/dm-service-fedify.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAInD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAGtC;;GAEG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IACH,MAAM,CAAC,cAAc,CACnB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,GAAG,EACR,UAAU,CAAC,EAAE,MAAM,GAClB;QACD,UAAU,EAAE,GAAG,CAAC;QAChB,QAAQ,EAAE,GAAG,CAAC;KACf;IAQD;;;OAGG;WACU,YAAY,CACvB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,IAAI,EACZ,SAAS,EAAE,IAAI,EACf,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,IAAI,EACf,GAAG,EAAE,GAAG,EACR,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IA4BhB;;OAEG;WACU,sBAAsB,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,IAAI,EACZ,SAAS,EAAE,IAAI,EACf,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,IAAI,EACf,GAAG,EAAE,GAAG,EACR,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC;IAsClB;;OAEG;WACU,mBAAmB,CAC9B,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,IAAI,EACZ,SAAS,EAAE,IAAI,EACf,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,GAAG,EACR,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,WAAW,CAAC,GAC7C,OAAO,CAAC;QACT,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC;QACd,SAAS,EAAE,IAAI,CAAC;KACjB,CAAC;CAqGH"}