@evanp/activitypub-bot 0.46.4 → 0.47.1

package/CHANGELOG.md

@@ -9,6 +9,27 @@ and this project adheres to
 
 ## [Unreleased]
 
+## [0.47.1] - 2026-05-28
+
+### Fixed
+
+- GroupBot, GroupBotFactory exported from module
+- Unhandled jobs in BotContext, LitePubRelayClient tests
+
+## [0.47.0] - 2026-05-28
+
+### Added
+
+- getLastActivity() method on BotContext
+- GroupBot class
+- GroupBotFactory class
+
+## [0.46.5] - 2026-05-25
+
+### Fixed
+
+- Several ownership checks in ActivityHandler
+
 ## [0.46.4] - 2026-05-25
 
 ### Added

package/README.md

@@ -240,6 +240,29 @@ A *LitePubRelayClientBot* can be the client of a LitePub (Pleroma) relay.
 
 A *LitePubRelayServerBot* will act as a relay server for remote Pleroma servers and other LitePub-relay-compliant servers.
 
+#### GroupBot
+
+A *GroupBot* is a simple [FEP
+1b12](https://codeberg.org/fediverse/fep/src/branch/main/fep/1b12/fep-1b12.md)-compatible
+group object. When mentioned, it will boost the mentioning object to all its followers.
+
+### Pre-installed factory classes
+
+A [BotFactory](#botfactory) lets you create a whole class of bots that are
+magically created as needed.
+
+#### GroupBotFactory
+
+This factory class lets you add a lot of groups at once. Just include this line
+in your bot config:
+
+```javascript
+   '*': new GroupBotFactory()
+```
+
+Any bot names that don't match one of the other lines in the bot config will be
+passed to the group bot factory.
+
 ## API
 
 Custom bots can implement the [Bot](#bot) interface, which is easiest if you inherit from the `Bot` class.
@@ -517,6 +540,12 @@ bot can forward a public activity it received through a side-channel
 (e.g. a relay-forwarded `Announce`) to all local bots. Errors in any
 individual bot's `onPublic` are logged and do not interrupt the fanout.
 
+#### async getLastActivity (type, object)
+
+Get the id of the last activity that has the type `type` and the object
+`object`. Great for double-checking if an object has been `Announce`d or
+`Follow`ed before.
+
 #### async onIdle ()
 
 Resolves when the background distribution queue has drained. Intended for test code that needs to wait for outbound activities to finish being delivered before asserting on their effects.

package/lib/activityhandler.js

@@ -47,6 +47,12 @@ export class ActivityHandler {
       'activity parameter must be an object'
     )
 
+    const actor = activity.actor?.first
+
+    if (!actor || !await this.#authz.sameOrigin(activity, actor)) {
+      return
+    }
+
     await this.#cache.set(
       activity.id,
       bot.username,
@@ -135,7 +141,7 @@ export class ActivityHandler {
         )
         return
       }
-      if (this.#authz.isOwner(await this.#botActor(bot), original)) {
+      if (await this.#authz.isOwner(await this.#botActor(bot), original)) {
         if (!await this.#authz.canRead(actor, original)) {
           this.#logger.warn(
             'Create activity references inaccessible original object',
@@ -950,7 +956,7 @@ export class ActivityHandler {
     }
     this.#logger.debug({ msg: 'Ensuring object', source: source.id, object: object.id, required })
     // Try getting the object from the source
-    if (this.#authz.sameOrigin(source, object) &&
+    if (await this.#authz.sameOrigin(source, object) &&
       (!required.includes('type') || object.type) &&
       !others.find((prop) => !object.has(prop))) {
       this.#logger.debug('Object is already complete')

package/lib/botcontext.js

@@ -549,6 +549,13 @@ export class BotContext {
     }))
   }
 
+  async getLastActivity (type, object) {
+    assert.strictEqual(typeof type, 'string')
+    assert.strictEqual(typeof object, 'object')
+    assert.ok(object !== null)
+    return await this.#actorStorage.getLastActivity(this.#botId, type, object)
+  }
+
   async #isInCollection (name, obj) {
     assert.ok(name)
     assert.equal(typeof name, 'string')

package/lib/bots/group.js

@@ -0,0 +1,36 @@
+import Bot from '../bot.js'
+
+const DEFAULT_DESCRIPTION = 'An echo group'
+
+export default class GroupBot extends Bot {
+  constructor (username, options = {}) {
+    if (typeof username !== 'string') {
+      throw new Error('username must be a string')
+    }
+    if (typeof options !== 'object') {
+      throw new Error('options must be an object')
+    }
+    super(username,
+      {
+        fullname: `${username} Group`,
+        description: DEFAULT_DESCRIPTION,
+        ...options
+      })
+  }
+
+  get type () {
+    return 'Group'
+  }
+
+  async onMention (object, activity) {
+    const last = await this._context.getLastActivity('Announce', object)
+    if (last) {
+      this._context.logger.info(
+        { object: object.id, activity: activity.id, last },
+        'Skipping re-announce of activity that was previously announced'
+      )
+      return
+    }
+    await this._context.announceObject(object)
+  }
+}

package/lib/bots/groupfactory.js

@@ -0,0 +1,27 @@
+import assert from 'node:assert'
+
+import BotFactory from '../botfactory.js'
+import GroupBot from './group.js'
+
+const USERNAME_PATTERN = /^[a-z0-9]{1,64}$/
+
+export default class GroupBotFactory extends BotFactory {
+  #options
+
+  constructor (options = {}) {
+    super()
+    this.#options = options
+  }
+
+  async canCreate (username) {
+    return USERNAME_PATTERN.test(username)
+  }
+
+  async create (username) {
+    assert.ok(username)
+    assert.ok(username.match(USERNAME_PATTERN))
+    const bot = new GroupBot(username, this.#options)
+    await bot.initialize(await this._context.duplicate(username))
+    return bot
+  }
+}

package/lib/index.js

@@ -9,3 +9,5 @@ export { default as FollowBackBot } from './bots/followback.js'
 export { default as LitePubRelayClientBot } from './bots/litepubrelayclient.js'
 export { default as LitePubRelayServerBot } from './bots/litepubrelayserver.js'
 export { default as LoggingBot } from './bots/logging.js'
+export { default as GroupBot } from './bots/group.js'
+export { default as GroupBotFactory } from './bots/groupfactory.js'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evanp/activitypub-bot",
-  "version": "0.46.4",
+  "version": "0.47.1",
   "description": "server-side ActivityPub bot framework",
   "type": "module",
   "main": "lib/index.js",