@de-otio/trellis 0.4.0

package/dist/lib/routes/activitypub/outbox.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * ActivityPub Outbox Routes
+ *
+ * Handles retrieving ActivityPub activities from user outboxes.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.outboxRoutes = void 0;
+const worker_1 = require("../../../worker");
+const outbox_1 = require("../../activitypub/listeners/outbox");
+const middleware_1 = require("../../middleware");
+const security_headers_1 = require("../../security-headers");
+exports.outboxRoutes = [
+    {
+        path: "/users/:username/outbox",
+        method: "GET",
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        handler: async (request, env, { params }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const { username } = params;
+            // Use Fedify-based outbox retrieval
+            const response = await (0, outbox_1.getOutboxActivities)(request, env, username);
+            // Add security headers and CORS
+            const secureResponse = securityHeaders.createSecureResponse(await response.text(), {
+                status: response.status,
+                headers: Object.fromEntries(response.headers.entries()),
+            });
+            return (0, worker_1.addCorsHeaders)(secureResponse, request, env);
+        },
+        description: "Get ActivityPub outbox",
+    },
+];
+//# sourceMappingURL=outbox.js.map

package/dist/lib/routes/activitypub/outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/outbox.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,4CAAiD;AACjD,+DAAyE;AACzE,iDAAkD;AAClD,6DAAyD;AAW5C,QAAA,YAAY,GAAY;IACnC;QACE,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;YAE5B,oCAAoC;YACpC,MAAM,QAAQ,GAAG,MAAM,IAAA,4BAAmB,EAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAEnE,gCAAgC;YAChC,MAAM,cAAc,GAAG,eAAe,CAAC,oBAAoB,CACzD,MAAM,QAAQ,CAAC,IAAI,EAAE,EACrB;gBACE,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aACxD,CACF,CAAC;YACF,OAAO,IAAA,uBAAc,EAAC,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,WAAW,EAAE,wBAAwB;KACtC;CACF,CAAC"}

package/dist/lib/routes/activitypub/post.d.ts

@@ -0,0 +1,12 @@
+/**
+ * ActivityPub Post Routes
+ *
+ * Routes for ActivityPub post objects and activities.
+ * These endpoints return ActivityStreams Note objects and Create activities.
+ */
+import type { Route } from "../types";
+/**
+ * ActivityPub post routes
+ */
+export declare const postRoutes: Route[];
+//# sourceMappingURL=post.d.ts.map

package/dist/lib/routes/activitypub/post.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post.d.ts","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/post.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,UAAU,EAAE,KAAK,EAoR7B,CAAC"}

package/dist/lib/routes/activitypub/post.js

@@ -0,0 +1,213 @@
+"use strict";
+/**
+ * ActivityPub Post Routes
+ *
+ * Routes for ActivityPub post objects and activities.
+ * These endpoints return ActivityStreams Note objects and Create activities.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.postRoutes = void 0;
+const fedify_1 = require("@fedify/fedify");
+const context_1 = require("../../activitypub/fedify/context");
+const post_service_fedify_1 = require("../../activitypub/services/post-service-fedify");
+const database_connection_manager_1 = require("../../database-connection-manager");
+const db_query_helper_1 = require("../../db-query-helper");
+const logger_1 = require("../../logger");
+const middleware_1 = require("../../middleware");
+const region_detection_1 = require("../../region-detection");
+const security_headers_1 = require("../../security-headers");
+/**
+ * ActivityPub post routes
+ */
+exports.postRoutes = [
+    /**
+     * GET /posts/:postId
+     * Returns ActivityPub Note object for a post
+     */
+    {
+        path: "/posts/:postId",
+        method: "GET",
+        handler: async (request, env, { params, url }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            try {
+                const postId = params?.postId;
+                if (!postId) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Post ID is required" }), { status: 400, headers: { "content-type": "application/json" } });
+                }
+                // Get region for database connection
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Fetch post with author
+                const post = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.post.findUnique({
+                        where: { id: postId },
+                        include: {
+                            author: {
+                                select: {
+                                    id: true,
+                                    username: true,
+                                    actorUri: true,
+                                    publicKey: true,
+                                },
+                            },
+                        },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getPostNote",
+                        postId,
+                    },
+                });
+                if (!post) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Post not found" }), {
+                        status: 404,
+                        headers: { "content-type": "application/json" },
+                    });
+                }
+                // Check if post is deleted
+                if (post.deletedAt) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Post not found" }), {
+                        status: 404,
+                        headers: { "content-type": "application/json" },
+                    });
+                }
+                // Check if post has ActivityPub fields
+                if (!post.objectId || !post.author?.actorUri) {
+                    logger.warn(`[ActivityPub] Post ${postId} does not have ActivityPub fields set`);
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Post not available" }), {
+                        status: 404,
+                        headers: { "content-type": "application/json" },
+                    });
+                }
+                // Use Fedify to serialize Note object
+                const federation = (0, context_1.getFedifyContext)(env);
+                const note = await post_service_fedify_1.PostActivityServiceFedify.createNote(post, post.author, env, url.toString());
+                // Use Fedify's respondWithObject for proper JSON-LD serialization
+                const response = await (0, fedify_1.respondWithObject)(request, note);
+                // Apply security headers to Fedify's response
+                const responseBody = await response.text();
+                return securityHeaders.createSecureResponse(responseBody, {
+                    status: response.status,
+                    headers: {
+                        ...Object.fromEntries(response.headers.entries()),
+                        "content-type": "application/activity+json",
+                    },
+                });
+            }
+            catch (error) {
+                logger.error("[ActivityPub] Error fetching post note:", error);
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), {
+                    status: 500,
+                    headers: { "content-type": "application/json" },
+                });
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "Get ActivityPub Note object for a post",
+    },
+    /**
+     * GET /posts/:postId/activity
+     * Returns ActivityPub Create activity for a post
+     */
+    {
+        path: "/posts/:postId/activity",
+        method: "GET",
+        handler: async (request, env, { params, url }) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            try {
+                const postId = params?.postId;
+                if (!postId) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Post ID is required" }), { status: 400, headers: { "content-type": "application/json" } });
+                }
+                // Get region for database connection
+                const region = (0, region_detection_1.detectRegionSync)(request, env);
+                const dbManager = database_connection_manager_1.sharedDatabaseConnectionManager;
+                // Fetch post with author
+                const post = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.post.findUnique({
+                        where: { id: postId },
+                        include: {
+                            author: {
+                                select: {
+                                    id: true,
+                                    username: true,
+                                    actorUri: true,
+                                    publicKey: true,
+                                },
+                            },
+                        },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getPostActivity",
+                        postId,
+                    },
+                });
+                if (!post) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Post not found" }), {
+                        status: 404,
+                        headers: { "content-type": "application/json" },
+                    });
+                }
+                // Check if post is deleted
+                if (post.deletedAt) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Post not found" }), {
+                        status: 404,
+                        headers: { "content-type": "application/json" },
+                    });
+                }
+                // Check if post has ActivityPub fields
+                if (!post.activityId || !post.author?.actorUri) {
+                    logger.warn(`[ActivityPub] Post ${postId} does not have ActivityPub fields set`);
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Activity not available" }), {
+                        status: 404,
+                        headers: { "content-type": "application/json" },
+                    });
+                }
+                // Get activity from database
+                const activity = await (0, db_query_helper_1.withQueryTimeoutAndRetry)(dbManager, region, env, async (db) => {
+                    return db.activity.findFirst({
+                        where: {
+                            id: post.activityId || undefined,
+                            outboxActorUri: post.author.actorUri || undefined,
+                        },
+                    });
+                }, {
+                    ...db_query_helper_1.QueryTimeoutPresets.STANDARD,
+                    context: {
+                        operation: "getPostActivity_fromDb",
+                        postId,
+                        activityId: post.activityId,
+                    },
+                });
+                // Always generate activity using Fedify (don't rely on database-stored format)
+                const federation = (0, context_1.getFedifyContext)(env);
+                const createActivity = await post_service_fedify_1.PostActivityServiceFedify.createCreateActivity(post, post.author, env, url.toString());
+                // Use Fedify's respondWithObject for proper JSON-LD serialization
+                const response = await (0, fedify_1.respondWithObject)(request, createActivity);
+                const responseBody = await response.text();
+                return securityHeaders.createSecureResponse(responseBody, {
+                    status: response.status,
+                    headers: {
+                        ...Object.fromEntries(response.headers.entries()),
+                        "content-type": "application/activity+json",
+                    },
+                });
+            }
+            catch (error) {
+                logger.error("[ActivityPub] Error fetching post activity:", error);
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Internal server error" }), {
+                    status: 500,
+                    headers: { "content-type": "application/json" },
+                });
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "Get ActivityPub Create activity for a post",
+    },
+];
+//# sourceMappingURL=post.js.map

package/dist/lib/routes/activitypub/post.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post.js","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/post.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,2CAAmD;AACnD,8DAAoE;AACpE,wFAA2F;AAC3F,mFAAoF;AACpF,2DAG+B;AAC/B,yCAAsC;AACtC,iDAAkD;AAClD,6DAA0D;AAC1D,6DAAyD;AAGzD;;GAEG;AACU,QAAA,UAAU,GAAY;IACjC;;;OAGG;IACH;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;YAC/C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAEvC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;gBAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,EAChD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;gBAED,qCAAqC;gBACrC,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;gBAElD,yBAAyB;gBACzB,MAAM,IAAI,GAAG,MAAM,IAAA,0CAAwB,EACzC,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;wBACxB,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;wBACrB,OAAO,EAAE;4BACP,MAAM,EAAE;gCACN,MAAM,EAAE;oCACN,EAAE,EAAE,IAAI;oCACR,QAAQ,EAAE,IAAI;oCACd,QAAQ,EAAE,IAAI;oCACd,SAAS,EAAE,IAAI;iCAChB;6BACF;yBACF;qBACF,CAAC,CAAC;gBACL,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,aAAa;wBACxB,MAAM;qBACP;iBACF,CACF,CAAC;gBAEF,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAED,2BAA2B;gBAC3B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAED,uCAAuC;gBACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;oBAC7C,MAAM,CAAC,IAAI,CACT,sBAAsB,MAAM,uCAAuC,CACpE,CAAC;oBACF,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,EAC/C;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAED,sCAAsC;gBACtC,MAAM,UAAU,GAAG,IAAA,0BAAgB,EAAC,GAAG,CAAC,CAAC;gBACzC,MAAM,IAAI,GAAG,MAAM,+CAAyB,CAAC,UAAU,CACrD,IAAI,EACJ,IAAI,CAAC,MAAa,EAClB,GAAG,EACH,GAAG,CAAC,QAAQ,EAAE,CACf,CAAC;gBAEF,kEAAkE;gBAClE,MAAM,QAAQ,GAAG,MAAM,IAAA,0BAAiB,EAAC,OAAc,EAAE,IAAW,CAAC,CAAC;gBAEtE,8CAA8C;gBAC9C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC3C,OAAO,eAAe,CAAC,oBAAoB,CAAC,YAAY,EAAE;oBACxD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE;wBACP,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;wBACjD,cAAc,EAAE,2BAA2B;qBAC5C;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;gBAE/D,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,wCAAwC;KACtD;IAED;;;OAGG;IACH;QACE,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;YAC/C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAEvC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;gBAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,EAChD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;gBAED,qCAAqC;gBACrC,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,6DAA+B,CAAC;gBAElD,yBAAyB;gBACzB,MAAM,IAAI,GAAG,MAAM,IAAA,0CAAwB,EACzC,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;wBACxB,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;wBACrB,OAAO,EAAE;4BACP,MAAM,EAAE;gCACN,MAAM,EAAE;oCACN,EAAE,EAAE,IAAI;oCACR,QAAQ,EAAE,IAAI;oCACd,QAAQ,EAAE,IAAI;oCACd,SAAS,EAAE,IAAI;iCAChB;6BACF;yBACF;qBACF,CAAC,CAAC;gBACL,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,iBAAiB;wBAC5B,MAAM;qBACP;iBACF,CACF,CAAC;gBAEF,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAED,2BAA2B;gBAC3B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAED,uCAAuC;gBACvC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;oBAC/C,MAAM,CAAC,IAAI,CACT,sBAAsB,MAAM,uCAAuC,CACpE,CAAC;oBACF,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EACnD;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAED,6BAA6B;gBAC7B,MAAM,QAAQ,GAAG,MAAM,IAAA,0CAAwB,EAC7C,SAAS,EACT,MAAM,EACN,GAAG,EACH,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;wBAC3B,KAAK,EAAE;4BACL,EAAE,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS;4BAChC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,SAAS;yBAClD;qBACF,CAAC,CAAC;gBACL,CAAC,EACD;oBACE,GAAG,qCAAmB,CAAC,QAAQ;oBAC/B,OAAO,EAAE;wBACP,SAAS,EAAE,wBAAwB;wBACnC,MAAM;wBACN,UAAU,EAAE,IAAI,CAAC,UAAU;qBAC5B;iBACF,CACF,CAAC;gBAEF,+EAA+E;gBAC/E,MAAM,UAAU,GAAG,IAAA,0BAAgB,EAAC,GAAG,CAAC,CAAC;gBACzC,MAAM,cAAc,GAClB,MAAM,+CAAyB,CAAC,oBAAoB,CAClD,IAAI,EACJ,IAAI,CAAC,MAAa,EAClB,GAAG,EACH,GAAG,CAAC,QAAQ,EAAE,CACf,CAAC;gBAEJ,kEAAkE;gBAClE,MAAM,QAAQ,GAAG,MAAM,IAAA,0BAAiB,EACtC,OAAc,EACd,cAAqB,CACtB,CAAC;gBAEF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC3C,OAAO,eAAe,CAAC,oBAAoB,CAAC,YAAY,EAAE;oBACxD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE;wBACP,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;wBACjD,cAAc,EAAE,2BAA2B;qBAC5C;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;gBAEnE,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,4CAA4C;KAC1D;CACF,CAAC"}

package/dist/lib/routes/activitypub/webfinger.d.ts

@@ -0,0 +1,11 @@
+/**
+ * ActivityPub WebFinger Routes
+ *
+ * Routes for WebFinger protocol (actor discovery).
+ */
+import type { Route } from "../types";
+/**
+ * ActivityPub WebFinger routes
+ */
+export declare const webfingerRoutes: Route[];
+//# sourceMappingURL=webfinger.d.ts.map

package/dist/lib/routes/activitypub/webfinger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webfinger.d.ts","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/webfinger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAItC;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,KAAK,EAYlC,CAAC"}

package/dist/lib/routes/activitypub/webfinger.js

@@ -0,0 +1,27 @@
+"use strict";
+/**
+ * ActivityPub WebFinger Routes
+ *
+ * Routes for WebFinger protocol (actor discovery).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webfingerRoutes = void 0;
+const middleware_1 = require("../../middleware");
+const server_1 = require("../../activitypub/webfinger/server");
+/**
+ * ActivityPub WebFinger routes
+ */
+exports.webfingerRoutes = [
+    /**
+     * GET /.well-known/webfinger
+     * WebFinger endpoint for actor discovery
+     */
+    {
+        path: "/.well-known/webfinger",
+        method: "GET",
+        handler: server_1.handleWebFinger,
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "WebFinger endpoint for ActivityPub actor discovery",
+    },
+];
+//# sourceMappingURL=webfinger.js.map

package/dist/lib/routes/activitypub/webfinger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webfinger.js","sourceRoot":"","sources":["../../../../src/lib/routes/activitypub/webfinger.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAGH,iDAAkD;AAClD,+DAAqE;AAErE;;GAEG;AACU,QAAA,eAAe,GAAY;IACtC;;;OAGG;IACH;QACE,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,wBAAe;QACxB,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,oDAAoD;KAClE;CACF,CAAC"}

package/dist/lib/routes/admin-costs.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Admin Cost Status Route
+ *
+ * Exposes cost protection status to SUPER_ADMIN users.
+ */
+import type { Route } from "./types";
+export declare const adminCostRoutes: Route[];
+//# sourceMappingURL=admin-costs.d.ts.map

package/dist/lib/routes/admin-costs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-costs.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/admin-costs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAMrC,eAAO,MAAM,eAAe,EAAE,KAAK,EA6FlC,CAAC"}

package/dist/lib/routes/admin-costs.js

@@ -0,0 +1,89 @@
+"use strict";
+/**
+ * Admin Cost Status Route
+ *
+ * Exposes cost protection status to SUPER_ADMIN users.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adminCostRoutes = void 0;
+const db_1 = require("../../db");
+const worker_1 = require("../../worker");
+const cost_accumulator_1 = require("../cost-accumulator");
+const logger_1 = require("../logger");
+const middleware_1 = require("../middleware");
+const openai_budget_1 = require("../openai-budget");
+const secret_resolver_1 = require("../secret-resolver");
+const security_headers_1 = require("../security-headers");
+const session_manager_1 = require("../session-manager");
+/** Cache cost data in-memory for 30 seconds per ECS task. */
+let cachedStatus = null;
+const CACHE_TTL_MS = 30_000;
+exports.adminCostRoutes = [
+    {
+        path: "/api/admin/costs",
+        method: "GET",
+        handler: async (request, env) => {
+            const securityHeaders = new security_headers_1.SecurityHeaders(env);
+            const logger = logger_1.Logger.getInstance(env);
+            // Authenticate
+            const sessionManager = new session_manager_1.SessionManager();
+            const sessionSecret = secret_resolver_1.Secrets.getSessionSecret(env);
+            const session = await sessionManager.getSession(request, sessionSecret, env);
+            if (!session) {
+                const response = securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            // Check SUPER_ADMIN role
+            const db = (0, db_1.createPrisma)(env);
+            const user = await db.user.findUnique({
+                where: { id: session.userId },
+                select: { role: true },
+            });
+            if (!user || user.role !== "SUPER_ADMIN") {
+                const response = securityHeaders.createSecureResponse(JSON.stringify({ error: "Forbidden: Super-admin access required" }), { status: 403, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            // Return cached data if fresh
+            if (cachedStatus && Date.now() - cachedStatus.fetchedAt < CACHE_TTL_MS) {
+                const response = securityHeaders.createSecureResponse(JSON.stringify(cachedStatus.data), { status: 200, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            try {
+                const budgetConfig = {
+                    enabled: env.OPENAI_BUDGET_ENABLED !== "false",
+                    maxRequestsPerHour: parseInt(env.OPENAI_BUDGET_HOURLY_MAX || "500", 10),
+                    maxRequestsPerDay: parseInt(env.OPENAI_BUDGET_DAILY_MAX || "5000", 10),
+                };
+                const [openaiStatus, dailySummary] = await Promise.all([
+                    new openai_budget_1.OpenAiBudget(budgetConfig).getStatus(),
+                    cost_accumulator_1.CostAccumulator.getInstance().getDailySummary(),
+                ]);
+                // Determine overall status
+                let status = "ok";
+                if (openaiStatus.exceeded || dailySummary.estimatedTotal >= dailySummary.limit) {
+                    status = "exceeded";
+                }
+                else if (openaiStatus.dailyUsed / openaiStatus.dailyLimit > 0.8 ||
+                    dailySummary.estimatedTotal / dailySummary.limit > 0.8) {
+                    status = "warning";
+                }
+                const data = {
+                    status,
+                    openai: openaiStatus,
+                    daily: dailySummary,
+                };
+                cachedStatus = { data, fetchedAt: Date.now() };
+                const response = securityHeaders.createSecureResponse(JSON.stringify(data), { status: 200, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+            catch (error) {
+                logger.error("[AdminCosts] Error fetching cost status:", error);
+                const response = securityHeaders.createSecureResponse(JSON.stringify({ error: "Failed to fetch cost status" }), { status: 500, headers: { "content-type": "application/json" } });
+                return (0, worker_1.addCorsHeaders)(response, request, env);
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "Get cost protection status (super-admin only)",
+    },
+];
+//# sourceMappingURL=admin-costs.js.map

package/dist/lib/routes/admin-costs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-costs.js","sourceRoot":"","sources":["../../../src/lib/routes/admin-costs.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,iCAAwC;AACxC,yCAA8C;AAC9C,0DAAsD;AACtD,sCAAmC;AACnC,8CAA+C;AAC/C,oDAAyE;AACzE,wDAA6C;AAC7C,0DAAsD;AACtD,wDAAoD;AAGpD,6DAA6D;AAC7D,IAAI,YAAY,GAA4C,IAAI,CAAC;AACjE,MAAM,YAAY,GAAG,MAAM,CAAC;AAEf,QAAA,eAAe,GAAY;IACtC;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAEvC,eAAe;YACf,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,GAAU,CAAC,CAAC;YAEpF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,yBAAyB;YACzB,MAAM,EAAE,GAAG,IAAA,iBAAY,EAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;gBACpC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE;gBAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACvB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,EACnE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,8BAA8B;YAC9B,IAAI,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;gBACvE,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,EACjC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,YAAY,GAAuB;oBACvC,OAAO,EAAG,GAAW,CAAC,qBAAqB,KAAK,OAAO;oBACvD,kBAAkB,EAAE,QAAQ,CAAE,GAAW,CAAC,wBAAwB,IAAI,KAAK,EAAE,EAAE,CAAC;oBAChF,iBAAiB,EAAE,QAAQ,CAAE,GAAW,CAAC,uBAAuB,IAAI,MAAM,EAAE,EAAE,CAAC;iBAChF,CAAC;gBAEF,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACrD,IAAI,4BAAY,CAAC,YAAY,CAAC,CAAC,SAAS,EAAE;oBAC1C,kCAAe,CAAC,WAAW,EAAE,CAAC,eAAe,EAAE;iBAChD,CAAC,CAAC;gBAEH,2BAA2B;gBAC3B,IAAI,MAAM,GAAkC,IAAI,CAAC;gBACjD,IAAI,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,cAAc,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;oBAC/E,MAAM,GAAG,UAAU,CAAC;gBACtB,CAAC;qBAAM,IACL,YAAY,CAAC,SAAS,GAAG,YAAY,CAAC,UAAU,GAAG,GAAG;oBACtD,YAAY,CAAC,cAAc,GAAG,YAAY,CAAC,KAAK,GAAG,GAAG,EACtD,CAAC;oBACD,MAAM,GAAG,SAAS,CAAC;gBACrB,CAAC;gBAED,MAAM,IAAI,GAAG;oBACX,MAAM;oBACN,MAAM,EAAE,YAAY;oBACpB,KAAK,EAAE,YAAY;iBACpB,CAAC;gBAEF,YAAY,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAE/C,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,eAAe,CAAC,oBAAoB,CACnD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,EACxD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,IAAA,uBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,+CAA+C;KAC7D;CACF,CAAC"}

package/dist/lib/routes/admin.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Admin Routes
+ */
+import type { Route } from "./types";
+export declare const adminRoutes: Route[];
+//# sourceMappingURL=admin.d.ts.map

package/dist/lib/routes/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/admin.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkCH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,WAAW,EAAE,KAAK,EA8+D9B,CAAC"}