@de-otio/trellis 0.4.0

package/dist/lib/routes/activitypub/entity-profile.js

@@ -0,0 +1,136 @@
+"use strict";
+/**
+ * ActivityPub Entity Routes
+ *
+ * Serves ActivityPub Actor documents and collections for any entity type.
+ * URI pattern: /entities/{entityType}/{entityId}
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.entityProfileRoutes = void 0;
+const fedify_1 = require("@fedify/fedify");
+const worker_1 = require("../../../worker");
+const entity_profile_service_1 = require("../../activitypub/entity-profile-service");
+const entity_actor_1 = require("../../activitypub/dispatchers/entity-actor");
+const database_connection_manager_1 = require("../../database-connection-manager");
+const db_query_helper_1 = require("../../db-query-helper");
+const logger_1 = require("../../logger");
+const middleware_1 = require("../../middleware");
+const region_detection_1 = require("../../region-detection");
+const security_headers_1 = require("../../security-headers");
+exports.entityProfileRoutes = [
+    {
+        path: "/entities/:entityType/:entityId",
+        method: "GET",
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        handler: async (request, env, { params }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const { entityType, entityId } = params;
+            try {
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const entity = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(database_connection_manager_1.sharedDatabaseConnectionManager, region, env, async (db) => {
+                    const found = await db.entity.findUnique({
+                        where: { id: entityId },
+                    });
+                    if (!found)
+                        return null;
+                    const ownership = await db.entityOwnership.findFirst({
+                        where: { entityId: found.id, status: 'ACTIVE' },
+                        orderBy: { id: 'asc' },
+                        select: { userId: true },
+                    });
+                    const owner = ownership ? await db.user.findUnique({
+                        where: { id: ownership.userId },
+                        select: { id: true, actorUri: true },
+                    }) : null;
+                    return { ...found, owner };
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: { operation: "getEntityActor", entityId },
+                });
+                if (!entity) {
+                    return (0, worker_1.addCorsHeaders)(securityHeaders.createSecureResponse(JSON.stringify({ error: "Entity not found" }), { status: 404, headers: { "content-type": "application/json" } }), request, env);
+                }
+                if (entity.entityType && entity.entityType !== entityType) {
+                    return (0, worker_1.addCorsHeaders)(securityHeaders.createSecureResponse(JSON.stringify({ error: "Entity type mismatch" }), { status: 404, headers: { "content-type": "application/json" } }), request, env);
+                }
+                const dispatcher = new entity_actor_1.EntityActorDispatcher(env);
+                const actor = dispatcher.entityToActor(entity);
+                // Use Fedify's respondWithObject for proper JSON-LD serialization
+                // and content negotiation — same pattern as user actor route
+                const response = await (0, fedify_1.respondWithObject)(request, actor);
+                // Apply security headers to Fedify's response
+                const responseBody = await response.text();
+                return (0, worker_1.addCorsHeaders)(securityHeaders.createSecureResponse(responseBody, {
+                    status: response.status,
+                    headers: {
+                        ...Object.fromEntries(response.headers.entries()),
+                        "content-type": "application/activity+json",
+                    },
+                }), request, env);
+            }
+            catch (error) {
+                logger.error("[EntityProfile] Error serving actor document", {
+                    error: error.message,
+                    entityId,
+                });
+                return (0, worker_1.addCorsHeaders)(securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } }), request, env);
+            }
+        },
+        description: "Get ActivityPub entity actor document",
+    },
+    {
+        path: "/entities/:entityType/:entityId/followers",
+        method: "GET",
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        handler: async (request, env, { params }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const { entityId } = params;
+            const url = new URL(request.url);
+            const page = parseInt(url.searchParams.get("page") || "1", 10);
+            const limit = Math.min(parseInt(url.searchParams.get("limit") || "20", 10), 100);
+            try {
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const entity = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(database_connection_manager_1.sharedDatabaseConnectionManager, region, env, async (db) => db.entity.findUnique({
+                    where: { id: entityId },
+                    select: { id: true, actorUri: true },
+                }), {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: { operation: "getEntityForFollowers", entityId },
+                });
+                if (!entity?.actorUri) {
+                    return (0, worker_1.addCorsHeaders)(securityHeaders.createSecureResponse(JSON.stringify({ error: "Entity not found" }), { status: 404, headers: { "content-type": "application/json" } }), request, env);
+                }
+                const followersActorUris = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(database_connection_manager_1.sharedDatabaseConnectionManager, region, env, async (db) => entity_profile_service_1.EntityProfileService.getFollowers(db, entity.id, page, limit), {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: { operation: "getEntityFollowers", entityId },
+                });
+                const totalItems = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(database_connection_manager_1.sharedDatabaseConnectionManager, region, env, async (db) => entity_profile_service_1.EntityProfileService.getFollowersCount(db, entity.id), {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: { operation: "getEntityFollowersCount", entityId },
+                });
+                const collection = {
+                    "@context": "https://www.w3.org/ns/activitystreams",
+                    type: "OrderedCollection",
+                    id: `${entity.actorUri}/followers`,
+                    totalItems,
+                    orderedItems: followersActorUris,
+                };
+                return (0, worker_1.addCorsHeaders)(securityHeaders.createSecureResponse(JSON.stringify(collection), {
+                    status: 200,
+                    headers: { "content-type": "application/activity+json" },
+                }), request, env);
+            }
+            catch (error) {
+                logger.error("[EntityProfile] Error serving followers collection", {
+                    error: error.message,
+                    entityId,
+                });
+                return (0, worker_1.addCorsHeaders)(securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } }), request, env);
+            }
+        },
+        description: "Get ActivityPub entity followers collection",
+    },
+];
+//# sourceMappingURL=entity-profile.js.map

package/dist/lib/routes/activitypub/entity-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-profile.js","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/entity-profile.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,2CAAmD;AAEnD,4CAAiD;AACjD,qFAAgF;AAChF,6EAAmF;AACnF,mFAAoF;AACpF,2DAG+B;AAC/B,yCAAsC;AACtC,iDAAkD;AAClD,6DAA0D;AAC1D,6DAAyD;AAG5C,QAAA,mBAAmB,GAAY;IAC1C;QACE,IAAI,EAAE,iCAAiC;QACvC,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;YAExC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,MAAM,IAAA,0CAAwB,EAC3C,6DAA+B,EAC/B,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;wBACvC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;qBACxB,CAAC,CAAC;oBACH,IAAI,CAAC,KAAK;wBAAE,OAAO,IAAI,CAAC;oBAExB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC;wBACnD,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;wBAC/C,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;wBACtB,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;qBACzB,CAAC,CAAC;oBACH,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;wBACjD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,EAAE;wBAC/B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;qBACrC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBAEV,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC;gBAC7B,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE;iBACnD,CACF,CAAC;gBAEF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,IAAA,uBAAc,EACnB,eAAe,CAAC,oBAAoB,CAClC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,EAC7C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,EACD,OAAO,EACP,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBAC1D,OAAO,IAAA,uBAAc,EACnB,eAAe,CAAC,oBAAoB,CAClC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,EACjD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,EACD,OAAO,EACP,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,UAAU,GAAG,IAAI,oCAAqB,CAAC,GAAU,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;gBAE/C,kEAAkE;gBAClE,6DAA6D;gBAC7D,MAAM,QAAQ,GAAG,MAAM,IAAA,0BAAiB,EACtC,OAAc,EACd,KAAY,CACb,CAAC;gBAEF,8CAA8C;gBAC9C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC3C,OAAO,IAAA,uBAAc,EACnB,eAAe,CAAC,oBAAoB,CAAC,YAAY,EAAE;oBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE;wBACP,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;wBACjD,cAAc,EAAE,2BAA2B;qBAC5C;iBACF,CAAC,EACF,OAAO,EACP,GAAG,CACJ,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;oBAC3D,KAAK,EAAG,KAAe,CAAC,OAAO;oBAC/B,QAAQ;iBACT,CAAC,CAAC;gBACH,OAAO,IAAA,uBAAc,EACnB,eAAe,CAAC,oBAAoB,CAClC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,EACD,OAAO,EACP,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QACD,WAAW,EAAE,uCAAuC;KACrD;IACD;QACE,IAAI,EAAE,2CAA2C;QACjD,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,EACnD,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,MAAM,IAAA,0CAAwB,EAC3C,6DAA+B,EAC/B,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE,CACX,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;oBACnB,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;oBACvB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;iBACrC,CAAC,EACJ;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE;iBAC1D,CACF,CAAC;gBAEF,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;oBACtB,OAAO,IAAA,uBAAc,EACnB,eAAe,CAAC,oBAAoB,CAClC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,EAC7C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,EACD,OAAO,EACP,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,kBAAkB,GAAG,MAAM,IAAA,0CAAwB,EACvD,6DAA+B,EAC/B,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE,CACX,6CAAoB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,EAC/D;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE;iBACvD,CACF,CAAC;gBAEF,MAAM,UAAU,GAAG,MAAM,IAAA,0CAAwB,EAC/C,6DAA+B,EAC/B,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,6CAAoB,CAAC,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EACnE;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE,EAAE,SAAS,EAAE,yBAAyB,EAAE,QAAQ,EAAE;iBAC5D,CACF,CAAC;gBAEF,MAAM,UAAU,GAAG;oBACjB,UAAU,EAAE,uCAAuC;oBACnD,IAAI,EAAE,mBAAmB;oBACzB,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,YAAY;oBAClC,UAAU;oBACV,YAAY,EAAE,kBAAkB;iBACjC,CAAC;gBAEF,OAAO,IAAA,uBAAc,EACnB,eAAe,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;oBAC/D,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;iBACzD,CAAC,EACF,OAAO,EACP,GAAG,CACJ,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;oBACjE,KAAK,EAAG,KAAe,CAAC,OAAO;oBAC/B,QAAQ;iBACT,CAAC,CAAC;gBACH,OAAO,IAAA,uBAAc,EACnB,eAAe,CAAC,oBAAoB,CAClC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,EACD,OAAO,EACP,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QACD,WAAW,EAAE,6CAA6C;KAC3D;CACF,CAAC"}

package/dist/lib/routes/activitypub/friends.d.ts

@@ -0,0 +1,15 @@
+/**
+ * ActivityPub Friends Routes
+ *
+ * Handles friends collection endpoint for ActivityPub.
+ */
+import type { Route } from "../types";
+export interface ActivityPubEnv {
+    DATABASE_URL?: string;
+    HYPERDRIVE?: any;
+    LOG_LEVEL?: string;
+    DEFAULT_REGION?: string;
+    ACTIVITYPUB_BASE_URL?: string;
+}
+export declare const friendsRoutes: Route[];
+//# sourceMappingURL=friends.d.ts.map

package/dist/lib/routes/activitypub/friends.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"friends.d.ts","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/friends.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,aAAa,EAAE,KAAK,EAwBhC,CAAC"}

package/dist/lib/routes/activitypub/friends.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * ActivityPub Friends Routes
+ *
+ * Handles friends collection endpoint for ActivityPub.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.friendsRoutes = void 0;
+const worker_1 = require("../../../worker");
+const friends_collection_1 = require("../../activitypub/listeners/friends-collection");
+const middleware_1 = require("../../middleware");
+const security_headers_1 = require("../../security-headers");
+exports.friendsRoutes = [
+    {
+        path: "/users/:username/friends",
+        method: "GET",
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        handler: async (request, env, { params }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const { username } = params;
+            // Use Fedify-based friends collection retrieval
+            const response = await (0, friends_collection_1.getFriendsCollection)(request, env, username);
+            // Add security headers and CORS
+            const secureResponse = securityHeaders.createSecureResponse(await response.text(), {
+                status: response.status,
+                headers: Object.fromEntries(response.headers.entries()),
+            });
+            return (0, worker_1.addCorsHeaders)(secureResponse, request, env);
+        },
+        description: "Get ActivityPub friends collection",
+    },
+];
+//# sourceMappingURL=friends.js.map

package/dist/lib/routes/activitypub/friends.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"friends.js","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/friends.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,4CAAiD;AACjD,uFAAsF;AACtF,iDAAkD;AAClD,6DAAyD;AAW5C,QAAA,aAAa,GAAY;IACpC;QACE,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;YAE5B,gDAAgD;YAChD,MAAM,QAAQ,GAAG,MAAM,IAAA,yCAAoB,EAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAEpE,gCAAgC;YAChC,MAAM,cAAc,GAAG,eAAe,CAAC,oBAAoB,CACzD,MAAM,QAAQ,CAAC,IAAI,EAAE,EACrB;gBACE,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aACxD,CACF,CAAC;YACF,OAAO,IAAA,uBAAc,EAAC,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,WAAW,EAAE,oCAAoC;KAClD;CACF,CAAC"}

package/dist/lib/routes/activitypub/group.d.ts

@@ -0,0 +1,8 @@
+/**
+ * ActivityPub Group Routes
+ *
+ * Handles group actor documents and collections.
+ */
+import type { Route } from "../types";
+export declare const groupRoutes: Route[];
+//# sourceMappingURL=group.d.ts.map

package/dist/lib/routes/activitypub/group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.d.ts","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/group.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiBH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEtC,eAAO,MAAM,WAAW,EAAE,KAAK,EAomB9B,CAAC"}

package/dist/lib/routes/activitypub/group.js

@@ -0,0 +1,436 @@
+"use strict";
+/**
+ * ActivityPub Group Routes
+ *
+ * Handles group actor documents and collections.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.groupRoutes = void 0;
+const worker_1 = require("../../../worker");
+const activity_processor_1 = require("../../activitypub/activity-processor");
+const activity_service_1 = require("../../activitypub/activity-service");
+const group_service_1 = require("../../activitypub/group-service");
+const http_signatures_1 = require("../../activitypub/http-signatures");
+const database_connection_manager_1 = require("../../database-connection-manager");
+const db_query_helper_1 = require("../../db-query-helper");
+const logger_1 = require("../../logger");
+const middleware_1 = require("../../middleware");
+const region_detection_1 = require("../../region-detection");
+const security_headers_1 = require("../../security-headers");
+exports.groupRoutes = [
+    {
+        path: "/groups/:groupId",
+        method: "GET",
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        handler: async (request, env, { params }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const { groupId } = params;
+            try {
+                // Get region and database
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Get group by ID
+                const group = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.group.findUnique({
+                        where: { id: groupId },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupById",
+                        groupId,
+                    },
+                });
+                if (!group) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Group not found" }), { status: 404, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Serialize to ActivityStreams actor document
+                const actorDoc = await group_service_1.GroupService.serializeActor(group, env, request.url);
+                const response = securityHeaders.createSecureResponse(JSON.stringify(actorDoc), {
+                    status: 200,
+                    headers: {
+                        "content-type": "application/activity+json",
+                    },
+                });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[Group] Error getting group actor", {
+                    error: error.message,
+                    groupId,
+                });
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        description: "Get ActivityPub group actor document",
+    },
+    {
+        path: "/groups/:groupId/followers",
+        method: "GET",
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        handler: async (request, env, { params }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const { groupId } = params;
+            const url = new URL(request.url);
+            const page = parseInt(url.searchParams.get("page") || "1", 10);
+            const limit = Math.min(parseInt(url.searchParams.get("limit") || "20", 10), 100);
+            try {
+                // Get region and database
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Get group by ID
+                const group = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.group.findUnique({
+                        where: { id: groupId },
+                        select: {
+                            id: true,
+                            actorUri: true,
+                            followersUrl: true,
+                        },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupById",
+                        groupId,
+                    },
+                });
+                if (!group || !group.actorUri) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Group not found" }), { status: 404, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Get members (followers)
+                const memberActorUris = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return group_service_1.GroupService.getMemberActorUris(db, group.id, page, limit);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupMembers",
+                        groupId,
+                    },
+                });
+                const totalItems = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return group_service_1.GroupService.getMembersCount(db, group.id);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupMembersCount",
+                        groupId,
+                    },
+                });
+                // Format as OrderedCollection
+                const collection = {
+                    "@context": "https://www.w3.org/ns/activitystreams",
+                    type: "OrderedCollection",
+                    id: group.followersUrl || `${group.actorUri}/followers`,
+                    totalItems,
+                    orderedItems: memberActorUris,
+                };
+                const response = securityHeaders.createSecureResponse(JSON.stringify(collection), {
+                    status: 200,
+                    headers: {
+                        "content-type": "application/activity+json",
+                    },
+                });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[Group] Error getting group followers", {
+                    error: error.message,
+                    groupId,
+                });
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        description: "Get ActivityPub group followers collection (members)",
+    },
+    {
+        path: "/groups/:groupId/inbox",
+        method: "POST",
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        handler: async (request, env, { params }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const { groupId } = params;
+            try {
+                // Clone request for signature verification
+                const requestClone = request.clone();
+                // Verify HTTP Signature
+                const signatureValid = await http_signatures_1.HttpSignatureService.verifyRequest(requestClone, env);
+                if (!signatureValid) {
+                    logger.warn("[GroupInbox] Invalid HTTP signature", { groupId });
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Parse activity
+                let activity;
+                try {
+                    activity = await request.json();
+                }
+                catch (error) {
+                    logger.warn("[GroupInbox] Failed to parse activity JSON", {
+                        error: error.message,
+                        groupId,
+                    });
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Invalid JSON" }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Validate activity structure
+                if (!activity.type || !activity.actor) {
+                    logger.warn("[GroupInbox] Invalid activity structure", {
+                        groupId,
+                        activityType: activity.type,
+                    });
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Invalid activity structure" }), { status: 400, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Get region and database
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Get group
+                const group = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.group.findUnique({
+                        where: { id: groupId },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupById",
+                        groupId,
+                    },
+                });
+                if (!group || !group.actorUri) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Group not found" }), { status: 404, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Store activity in group's inbox
+                await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    await activity_service_1.ActivityService.storeInboxActivity(db, group.actorUri, activity);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "storeGroupInboxActivity",
+                        groupId,
+                    },
+                });
+                // Process activity asynchronously (don't block response)
+                // Note: In production, this should be queued for background processing
+                (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    await activity_processor_1.ActivityProcessor.processActivity(db, activity, {}, env);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "processGroupInboxActivity",
+                        groupId,
+                    },
+                }).catch((error) => {
+                    logger.error("[GroupInbox] Error processing activity", {
+                        error: error.message,
+                        groupId,
+                    });
+                });
+                // Return 202 Accepted (activity received, processing asynchronously)
+                const response = securityHeaders.createSecureResponse(JSON.stringify({ success: true }), {
+                    status: 202,
+                    headers: {
+                        "content-type": "application/json",
+                    },
+                });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[GroupInbox] Error receiving activity", {
+                    error: error.message,
+                    groupId,
+                });
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        description: "Receive ActivityPub activities in group inbox",
+    },
+    {
+        path: "/groups/:groupId/inbox",
+        method: "GET",
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        handler: async (request, env, { params }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const { groupId } = params;
+            const url = new URL(request.url);
+            const page = parseInt(url.searchParams.get("page") || "1", 10);
+            const limit = Math.min(parseInt(url.searchParams.get("limit") || "20", 10), 100);
+            try {
+                // Get region and database
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Get group
+                const group = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.group.findUnique({
+                        where: { id: groupId },
+                        select: {
+                            id: true,
+                            actorUri: true,
+                        },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupById",
+                        groupId,
+                    },
+                });
+                if (!group || !group.actorUri) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Group not found" }), { status: 404, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Get inbox activities
+                const activities = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return activity_service_1.ActivityService.getInboxActivities(db, group.actorUri, page, limit);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupInboxActivities",
+                        groupId,
+                    },
+                });
+                const totalItems = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return activity_service_1.ActivityService.getInboxCount(db, group.actorUri);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupInboxCount",
+                        groupId,
+                    },
+                });
+                // Format as OrderedCollection
+                const collection = {
+                    "@context": "https://www.w3.org/ns/activitystreams",
+                    type: "OrderedCollection",
+                    id: `${group.actorUri}/inbox`,
+                    totalItems,
+                    orderedItems: activities.map((a) => ({
+                        type: a.type,
+                        actor: a.actorUri,
+                        object: a.objectId,
+                        target: a.targetId,
+                        to: a.to,
+                        cc: a.cc,
+                        published: a.published.toISOString(),
+                    })),
+                };
+                const response = securityHeaders.createSecureResponse(JSON.stringify(collection), {
+                    status: 200,
+                    headers: {
+                        "content-type": "application/activity+json",
+                    },
+                });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[GroupInbox] Error getting inbox activities", {
+                    error: error.message,
+                    groupId,
+                });
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        description: "Get ActivityPub group inbox",
+    },
+    {
+        path: "/groups/:groupId/outbox",
+        method: "GET",
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        handler: async (request, env, { params }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            const { groupId } = params;
+            const url = new URL(request.url);
+            const page = parseInt(url.searchParams.get("page") || "1", 10);
+            const limit = Math.min(parseInt(url.searchParams.get("limit") || "20", 10), 100);
+            try {
+                // Get region and database
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Get group
+                const group = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.group.findUnique({
+                        where: { id: groupId },
+                        select: {
+                            id: true,
+                            actorUri: true,
+                        },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupById",
+                        groupId,
+                    },
+                });
+                if (!group || !group.actorUri) {
+                    const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Group not found" }), { status: 404, headers: { "content-type": "application/json" } });
+                    return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+                }
+                // Get outbox activities
+                const activities = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return activity_service_1.ActivityService.getOutboxActivities(db, group.actorUri, page, limit);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupOutboxActivities",
+                        groupId,
+                    },
+                });
+                const totalItems = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return activity_service_1.ActivityService.getOutboxCount(db, group.actorUri);
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getGroupOutboxCount",
+                        groupId,
+                    },
+                });
+                // Format as OrderedCollection
+                const collection = {
+                    "@context": "https://www.w3.org/ns/activitystreams",
+                    type: "OrderedCollection",
+                    id: `${group.actorUri}/outbox`,
+                    totalItems,
+                    orderedItems: activities.map((a) => ({
+                        type: a.type,
+                        actor: a.actorUri,
+                        object: a.objectId,
+                        target: a.targetId,
+                        to: a.to,
+                        cc: a.cc,
+                        published: a.published.toISOString(),
+                    })),
+                };
+                const response = securityHeaders.createSecureResponse(JSON.stringify(collection), {
+                    status: 200,
+                    headers: {
+                        "content-type": "application/activity+json",
+                    },
+                });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[GroupOutbox] Error getting outbox activities", {
+                    error: error.message,
+                    groupId,
+                });
+                const errorResponse = securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(errorResponse, request, env);
+            }
+        },
+        description: "Get ActivityPub group outbox",
+    },
+];
+//# sourceMappingURL=group.js.map