@de-otio/trellis 0.4.0

package/dist/lib/routes/activitypub/audiences.js

@@ -0,0 +1,325 @@
+"use strict";
+/**
+ * ActivityPub Custom Audience Routes
+ *
+ * Routes for creating and managing custom audiences.
+ * Custom audiences are ActivityStreams OrderedCollections used for post targeting.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.audienceRoutes = void 0;
+const fedify_1 = require("@fedify/fedify");
+const worker_1 = require("../../../worker");
+const audience_service_1 = require("../../activitypub/audience-service");
+const context_1 = require("../../activitypub/fedify/context");
+const database_connection_manager_1 = require("../../database-connection-manager");
+const db_query_helper_1 = require("../../db-query-helper");
+const logger_1 = require("../../logger");
+const middleware_1 = require("../../middleware");
+const region_detection_1 = require("../../region-detection");
+const secret_resolver_1 = require("../../secret-resolver");
+const security_headers_1 = require("../../security-headers");
+const session_manager_1 = require("../../session-manager");
+/**
+ * ActivityPub custom audience routes
+ */
+exports.audienceRoutes = [
+    /**
+     * POST /api/audiences
+     * Create a custom audience
+     */
+    {
+        path: "/api/audiences",
+        method: "POST",
+        handler: async (request, env, { url }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const sessionManager = new session_manager_1.SessionManager();
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+            try {
+                // Parse request body
+                const body = (await request.json());
+                const { name, memberIds } = body;
+                // Validate input
+                if (!name || typeof name !== "string" || name.trim().length === 0) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "name is required" }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                if (!Array.isArray(memberIds) || memberIds.length === 0) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "memberIds must be a non-empty array" }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Get region for database connection
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Fetch creator
+                const creator = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.user.findUnique({
+                        where: { id: session.userId },
+                        select: {
+                            id: true,
+                            username: true,
+                            actorUri: true,
+                            publicKey: true,
+                            suspended: true,
+                            deletionConfirmedAt: true,
+                        },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "createAudience_fetchCreator",
+                        userId: session.userId,
+                    },
+                });
+                if (!creator || !creator.actorUri || !creator.publicKey) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({
+                        error: "Creator not found or not configured for ActivityPub",
+                    }), { status: 404, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                if (creator.suspended || creator.deletionConfirmedAt) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({
+                        error: "Creator account is suspended or deleted",
+                    }), { status: 403, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Create audience
+                const audience = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return audience_service_1.CustomAudienceService.createAudience(db, creator, name.trim(), memberIds, env, url.toString());
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "createAudience",
+                        userId: session.userId,
+                    },
+                });
+                const response = securityHeaders.createSecureResponse(JSON.stringify({
+                    id: audience.id,
+                    name: audience.name,
+                    collectionId: audience.collectionId,
+                    createdAt: audience.createdAt.toISOString(),
+                }), { status: 201, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[ActivityPub] Error creating custom audience:", error);
+                // Handle specific errors
+                if (error.message?.includes("not found") ||
+                    error.message?.includes("not configured")) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: error.message }), { status: 404, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({
+                    error: error.message || "Failed to create custom audience",
+                }), { status: 400, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        description: "Create a custom audience",
+    },
+    /**
+     * GET /audiences/:audienceId
+     * Get custom audience collection (ActivityPub OrderedCollection)
+     */
+    {
+        path: "/audiences/:audienceId",
+        method: "GET",
+        handler: async (request, env, { params, url }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            try {
+                const audienceId = params?.audienceId;
+                if (!audienceId) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Audience ID is required" }), { status: 400, headers: { "content-type": "application/json" } });
+                }
+                // Parse pagination
+                const urlObj = new URL(url.toString());
+                const page = Math.max(1, parseInt(urlObj.searchParams.get("page") || "1", 10));
+                const limit = Math.min(50, parseInt(urlObj.searchParams.get("limit") || "50", 10));
+                // Get region for database connection
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Create Fedify OrderedCollection
+                const federation = (0, context_1.getFedifyContext)(env);
+                const collection = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return audience_service_1.CustomAudienceService.createOrderedCollection(db, audienceId, env, url.toString(), page, limit);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getAudienceCollection",
+                        audienceId,
+                    },
+                });
+                // Use Fedify's respondWithObject for proper JSON-LD serialization
+                const response = await (0, fedify_1.respondWithObject)(request, collection);
+                // Apply security headers to Fedify's response
+                const responseBody = await response.text();
+                return securityHeaders.createSecureResponse(responseBody, {
+                    status: response.status,
+                    headers: {
+                        ...Object.fromEntries(response.headers.entries()),
+                        "content-type": "application/activity+json",
+                    },
+                });
+            }
+            catch (error) {
+                logger.error("[ActivityPub] Error fetching audience collection:", error);
+                if (error.message?.includes("not found")) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Audience not found" }), {
+                        status: 404,
+                        headers: { "content-type": "application/json" },
+                    });
+                }
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), {
+                    status: 500,
+                    headers: { "content-type": "application/json" },
+                });
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "Get ActivityPub OrderedCollection for a custom audience",
+    },
+    /**
+     * POST /api/audiences/:audienceId/members
+     * Add member to custom audience
+     */
+    {
+        path: "/api/audiences/:audienceId/members",
+        method: "POST",
+        handler: async (request, env) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const sessionManager = new session_manager_1.SessionManager();
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+            try {
+                const audienceId = request.params?.audienceId;
+                const body = (await request.json());
+                const { memberId } = body;
+                if (!audienceId || !memberId) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "audienceId and memberId are required" }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Get region for database connection
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Verify user owns the audience
+                const audience = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.customAudience.findUnique({
+                        where: { id: audienceId },
+                        select: { creatorId: true },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "addAudienceMember_checkOwnership",
+                        userId: session.userId,
+                        audienceId,
+                    },
+                });
+                if (!audience || audience.creatorId !== session.userId) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Audience not found or access denied" }), { status: 403, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Add member
+                await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return audience_service_1.CustomAudienceService.addMember(db, audienceId, memberId);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "addAudienceMember",
+                        userId: session.userId,
+                        audienceId,
+                        memberId,
+                    },
+                });
+                const response = securityHeaders.createSecureResponse(JSON.stringify({ success: true }), { status: 200, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[ActivityPub] Error adding audience member:", error);
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: error.message || "Failed to add member" }), { status: 400, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        description: "Add member to custom audience",
+    },
+    /**
+     * DELETE /api/audiences/:audienceId/members/:memberId
+     * Remove member from custom audience
+     */
+    {
+        path: "/api/audiences/:audienceId/members/:memberId",
+        method: "DELETE",
+        handler: async (request, env) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const sessionManager = new session_manager_1.SessionManager();
+            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            if (!session) {
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+            try {
+                const audienceId = request.params?.audienceId;
+                const memberId = request.params?.memberId;
+                if (!audienceId || !memberId) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "audienceId and memberId are required" }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Get region for database connection
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Verify user owns the audience
+                const audience = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.customAudience.findUnique({
+                        where: { id: audienceId },
+                        select: { creatorId: true },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "removeAudienceMember_checkOwnership",
+                        userId: session.userId,
+                        audienceId,
+                    },
+                });
+                if (!audience || audience.creatorId !== session.userId) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Audience not found or access denied" }), { status: 403, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Remove member
+                await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return audience_service_1.CustomAudienceService.removeMember(db, audienceId, memberId);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "removeAudienceMember",
+                        userId: session.userId,
+                        audienceId,
+                        memberId,
+                    },
+                });
+                const response = securityHeaders.createSecureResponse(JSON.stringify({ success: true }), { status: 200, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[ActivityPub] Error removing audience member:", error);
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Failed to remove member" }), { status: 500, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        description: "Remove member from custom audience",
+    },
+];
+//# sourceMappingURL=audiences.js.map

package/dist/lib/routes/activitypub/audiences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audiences.js","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/audiences.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,2CAAmD;AACnD,4CAAiD;AACjD,yEAA2E;AAC3E,8DAAoE;AACpE,mFAAoF;AACpF,2DAG+B;AAC/B,yCAAsC;AACtC,iDAAkE;AAClE,6DAA0D;AAC1D,2DAAgD;AAChD,6DAAyD;AACzD,2DAAuD;AAGvD;;GAEG;AACU,QAAA,cAAc,GAAY;IACrC;;;OAGG;IACH;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACvC,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,CAAC;gBACH,qBAAqB;gBACrB,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAGjC,CAAC;gBACF,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;gBAEjC,iBAAiB;gBACjB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAClE,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,EAC7C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxD,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,EAChE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,qCAAqC;gBACrC,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;gBAElD,gBAAgB;gBAChB,MAAM,OAAO,GAAG,MAAM,IAAA,0CAAwB,EAC5C,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;wBACxB,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE;wBAC7B,MAAM,EAAE;4BACN,EAAE,EAAE,IAAI;4BACR,QAAQ,EAAE,IAAI;4BACd,QAAQ,EAAE,IAAI;4BACd,SAAS,EAAE,IAAI;4BACf,SAAS,EAAE,IAAI;4BACf,mBAAmB,EAAE,IAAI;yBAC1B;qBACF,CAAC,CAAC;gBACL,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,6BAA6B;wBACxC,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB;iBACF,CACF,CAAC;gBAEF,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBACxD,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,qDAAqD;qBAC7D,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;oBACrD,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,yCAAyC;qBACjD,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,kBAAkB;gBAClB,MAAM,QAAQ,GAAG,MAAM,IAAA,0CAAwB,EAC7C,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,wCAAqB,CAAC,cAAc,CACzC,EAAE,EACF,OAAc,EACd,IAAI,CAAC,IAAI,EAAE,EACX,SAAS,EACT,GAAG,EACH,GAAG,CAAC,QAAQ,EAAE,CACf,CAAC;gBACJ,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,gBAAgB;wBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB;iBACF,CACF,CAAC;gBAEF,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC;oBACb,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE;iBAC5C,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;gBAErE,yBAAyB;gBACzB,IACE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC;oBACpC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EACzC,CAAC;oBACD,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,EACxC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,kCAAkC;iBAC3D,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,0BAA0B;KACxC;IAED;;;OAGG;IACH;QACE,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;YAC/C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAEvC,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,CAAC;gBACtC,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,EACpD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;gBAED,mBAAmB;gBACnB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACvC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CACnB,CAAC,EACD,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CACrD,CAAC;gBACF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,EAAE,EACF,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CACvD,CAAC;gBAEF,qCAAqC;gBACrC,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;gBAElD,kCAAkC;gBAClC,MAAM,UAAU,GAAG,IAAA,0BAAgB,EAAC,GAAG,CAAC,CAAC;gBACzC,MAAM,UAAU,GAAG,MAAM,IAAA,0CAAwB,EAC/C,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,wCAAqB,CAAC,uBAAuB,CAClD,EAAE,EACF,UAAU,EACV,GAAG,EACH,GAAG,CAAC,QAAQ,EAAE,EACd,IAAI,EACJ,KAAK,CACN,CAAC;gBACJ,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,uBAAuB;wBAClC,UAAU;qBACX;iBACF,CACF,CAAC;gBAEF,kEAAkE;gBAClE,MAAM,QAAQ,GAAG,MAAM,IAAA,0BAAiB,EACtC,OAAc,EACd,UAAiB,CAClB,CAAC;gBAEF,8CAA8C;gBAC9C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC3C,OAAO,eAAe,CAAC,oBAAoB,CAAC,YAAY,EAAE;oBACxD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE;wBACP,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;wBACjD,cAAc,EAAE,2BAA2B;qBAC5C;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CACV,mDAAmD,EACnD,KAAK,CACN,CAAC;gBAEF,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;oBACzC,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,EAC/C;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAED,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,yDAAyD;KACvE;IAED;;;OAGG;IACH;QACE,IAAI,EAAE,oCAAoC;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,UAAU,GAAI,OAAe,CAAC,MAAM,EAAE,UAAU,CAAC;gBACvD,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAyB,CAAC;gBAC5D,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;gBAE1B,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC7B,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,EACjE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,qCAAqC;gBACrC,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;gBAElD,gCAAgC;gBAChC,MAAM,QAAQ,GAAG,MAAM,IAAA,0CAAwB,EAC7C,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;wBAClC,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;wBACzB,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,kCAAkC;wBAC7C,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,UAAU;qBACX;iBACF,CACF,CAAC;gBAEF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;oBACvD,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,EAChE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,aAAa;gBACb,MAAM,IAAA,0CAAwB,EAC5B,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,wCAAqB,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACnE,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,mBAAmB;wBAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,UAAU;wBACV,QAAQ;qBACT;iBACF,CACF,CAAC;gBAEF,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EACjC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;gBAEnE,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,sBAAsB,EAAE,CAAC,EAClE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,+BAA+B;KAC7C;IAED;;;OAGG;IACH;QACE,IAAI,EAAE,8CAA8C;QACpD,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,UAAU,GAAI,OAAe,CAAC,MAAM,EAAE,UAAU,CAAC;gBACvD,MAAM,QAAQ,GAAI,OAAe,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAEnD,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC7B,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,EACjE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,qCAAqC;gBACrC,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;gBAElD,gCAAgC;gBAChC,MAAM,QAAQ,GAAG,MAAM,IAAA,0CAAwB,EAC7C,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;wBAClC,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;wBACzB,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,qCAAqC;wBAChD,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,UAAU;qBACX;iBACF,CACF,CAAC;gBAEF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;oBACvD,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,EAChE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAED,gBAAgB;gBAChB,MAAM,IAAA,0CAAwB,EAC5B,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,wCAAqB,CAAC,YAAY,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACtE,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,sBAAsB;wBACjC,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,UAAU;wBACV,QAAQ;qBACT;iBACF,CACF,CAAC;gBAEF,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EACjC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;gBAErE,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,EACpD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,oCAAoC;KAClD;CACF,CAAC"}

package/dist/lib/routes/activitypub/collections.d.ts

@@ -0,0 +1,12 @@
+/**
+ * ActivityPub Collection Routes
+ *
+ * Routes for ActivityPub collections (followers, following, friends).
+ * These endpoints return ActivityStreams OrderedCollection documents.
+ */
+import type { Route } from "../types";
+/**
+ * ActivityPub collection routes
+ */
+export declare const collectionRoutes: Route[];
+//# sourceMappingURL=collections.d.ts.map

package/dist/lib/routes/activitypub/collections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/collections.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,KAAK,EA0JnC,CAAC"}

package/dist/lib/routes/activitypub/collections.js

@@ -0,0 +1,127 @@
+"use strict";
+/**
+ * ActivityPub Collection Routes
+ *
+ * Routes for ActivityPub collections (followers, following, friends).
+ * These endpoints return ActivityStreams OrderedCollection documents.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectionRoutes = void 0;
+const fedify_1 = require("@fedify/fedify");
+const user_actor_1 = require("../../activitypub/dispatchers/user-actor");
+const context_1 = require("../../activitypub/fedify/context");
+const database_connection_manager_1 = require("../../database-connection-manager");
+const db_query_helper_1 = require("../../db-query-helper");
+const logger_1 = require("../../logger");
+const middleware_1 = require("../../middleware");
+const region_detection_1 = require("../../region-detection");
+const security_headers_1 = require("../../security-headers");
+/**
+ * ActivityPub collection routes
+ */
+exports.collectionRoutes = [
+    /**
+     * GET /users/:username/followers
+     * Returns ActivityPub followers collection for a user
+     */
+    {
+        path: "/users/:username/followers",
+        method: "GET",
+        handler: async (request, env, { params, url }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            try {
+                const username = params?.username;
+                if (!username) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Username is required" }), { status: 400, headers: { "content-type": "application/json" } });
+                }
+                // Decode username
+                const decodedUsername = decodeURIComponent(username);
+                // Get region for database connection
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Fetch user from database
+                const user = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.user.findUnique({
+                        where: { username: decodedUsername },
+                        select: {
+                            id: true,
+                            username: true,
+                            actorUri: true,
+                            suspended: true,
+                            deletionConfirmedAt: true,
+                        },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getFollowersCollection",
+                        username: decodedUsername,
+                    },
+                });
+                if (!user) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "User not found" }), {
+                        status: 404,
+                        headers: { "content-type": "application/json" },
+                    });
+                }
+                // Check if user is suspended or deleted
+                if (user.suspended || user.deletionConfirmedAt) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "User not found" }), {
+                        status: 404,
+                        headers: { "content-type": "application/json" },
+                    });
+                }
+                // Check if user has ActivityPub fields set
+                if (!user.actorUri) {
+                    logger.warn(`[ActivityPub] User ${decodedUsername} does not have ActivityPub fields set`);
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Actor not available" }), {
+                        status: 404,
+                        headers: { "content-type": "application/json" },
+                    });
+                }
+                // Get followers count
+                const followersCount = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    // TODO: redesign - use GraphService
+                    return 0;
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getFollowersCollection_count",
+                        userId: user.id,
+                    },
+                });
+                // Build collection URL using Fedify actor dispatcher
+                const actorUri = user_actor_1.UserActorDispatcher.generateActorUri(user.username || "", env);
+                const collectionUrl = new URL(`${actorUri}/followers`);
+                // Use Fedify's OrderedCollection for type-safe serialization
+                const federation = (0, context_1.getFedifyContext)(env);
+                const collection = new fedify_1.OrderedCollection({
+                    id: collectionUrl,
+                    totalItems: followersCount,
+                    first: new URL(`${collectionUrl.toString()}?page=1`),
+                });
+                // Use Fedify's respondWithObject for proper JSON-LD serialization
+                const response = await (0, fedify_1.respondWithObject)(request, collection);
+                const responseBody = await response.text();
+                return securityHeaders.createSecureResponse(responseBody, {
+                    status: response.status,
+                    headers: {
+                        ...Object.fromEntries(response.headers.entries()),
+                        "content-type": "application/activity+json",
+                    },
+                });
+            }
+            catch (error) {
+                logger.error("[ActivityPub] Error fetching followers collection:", error);
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), {
+                    status: 500,
+                    headers: { "content-type": "application/json" },
+                });
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "Get ActivityPub followers collection for a user",
+    },
+];
+//# sourceMappingURL=collections.js.map

package/dist/lib/routes/activitypub/collections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/collections.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,2CAAsE;AACtE,yEAA+E;AAC/E,8DAAoE;AACpE,mFAAoF;AACpF,2DAG+B;AAC/B,yCAAsC;AACtC,iDAAkD;AAClD,6DAA0D;AAC1D,6DAAyD;AAGzD;;GAEG;AACU,QAAA,gBAAgB,GAAY;IACvC;;;OAGG;IACH;QACE,IAAI,EAAE,4BAA4B;QAClC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;YAC/C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAEvC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,CAAC;gBAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,EACjD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;gBAED,kBAAkB;gBAClB,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;gBAErD,qCAAqC;gBACrC,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;gBAElD,2BAA2B;gBAC3B,MAAM,IAAI,GAAG,MAAM,IAAA,0CAAwB,EACzC,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;wBACxB,KAAK,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE;wBACpC,MAAM,EAAE;4BACN,EAAE,EAAE,IAAI;4BACR,QAAQ,EAAE,IAAI;4BACd,QAAQ,EAAE,IAAI;4BACd,SAAS,EAAE,IAAI;4BACf,mBAAmB,EAAE,IAAI;yBAC1B;qBACF,CAAC,CAAC;gBACL,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,wBAAwB;wBACnC,QAAQ,EAAE,eAAe;qBAC1B;iBACF,CACF,CAAC;gBAEF,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAED,wCAAwC;gBACxC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC/C,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAED,2CAA2C;gBAC3C,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CACT,sBAAsB,eAAe,uCAAuC,CAC7E,CAAC;oBACF,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,EAChD;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAED,sBAAsB;gBACtB,MAAM,cAAc,GAAG,MAAM,IAAA,0CAAwB,EACnD,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,oCAAoC;oBACpC,OAAO,CAAC,CAAC;gBACX,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,8BAA8B;wBACzC,MAAM,EAAE,IAAI,CAAC,EAAE;qBAChB;iBACF,CACF,CAAC;gBAEF,qDAAqD;gBACrD,MAAM,QAAQ,GAAG,gCAAmB,CAAC,gBAAgB,CACnD,IAAI,CAAC,QAAQ,IAAI,EAAE,EACnB,GAAG,CACJ,CAAC;gBACF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,GAAG,QAAQ,YAAY,CAAC,CAAC;gBAEvD,6DAA6D;gBAC7D,MAAM,UAAU,GAAG,IAAA,0BAAgB,EAAC,GAAG,CAAC,CAAC;gBACzC,MAAM,UAAU,GAAG,IAAI,0BAAiB,CAAC;oBACvC,EAAE,EAAE,aAAa;oBACjB,UAAU,EAAE,cAAc;oBAC1B,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC;iBACrD,CAAC,CAAC;gBAEH,kEAAkE;gBAClE,MAAM,QAAQ,GAAG,MAAM,IAAA,0BAAiB,EACtC,OAAc,EACd,UAAiB,CAClB,CAAC;gBAEF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC3C,OAAO,eAAe,CAAC,oBAAoB,CAAC,YAAY,EAAE;oBACxD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE;wBACP,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;wBACjD,cAAc,EAAE,2BAA2B;qBAC5C;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CACV,oDAAoD,EACpD,KAAK,CACN,CAAC;gBAEF,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,iDAAiD;KAC/D;CACF,CAAC"}

package/dist/lib/routes/activitypub/entity-profile.d.ts

@@ -0,0 +1,9 @@
+/**
+ * ActivityPub Entity Routes
+ *
+ * Serves ActivityPub Actor documents and collections for any entity type.
+ * URI pattern: /entities/{entityType}/{entityId}
+ */
+import type { Route } from "../types";
+export declare const entityProfileRoutes: Route[];
+//# sourceMappingURL=entity-profile.d.ts.map

package/dist/lib/routes/activitypub/entity-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-profile.d.ts","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/entity-profile.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEtC,eAAO,MAAM,mBAAmB,EAAE,KAAK,EA2MtC,CAAC"}