@geekity/cms 0.3.0 → 0.5.0

package/dist/federation/inbox.js

@@ -1,28 +1,29 @@
 import { randomUUID } from 'node:crypto';
-import { Accept, Follow, getTypeId } from '@fedify/vocab';
-import { SITE_ACTOR_IDENTIFIER } from './keys.js';
+import { Accept, Follow } from '@fedify/vocab';
+import { listUsers } from '../admin/accounts.js';
+import { actorId, senderKeyPairs, userByUsername } from './actor.js';
+import { addFollower, appendInboxActivity, removeFollower } from './records.js';
+import { acceptRelay, rejectRelay } from './relays.js';
 /**
- * Handle a `Follow`: store the follower and reply `Accept`.
+ * Handle a `Follow`: store the follower under the user it named, and reply
+ * `Accept` as that user.
  *
- * A `Follow` of anything but the site actor is ignored rather than refused —
- * a peer that asked to follow a post has not done anything wrong, it has
- * merely addressed something that does not accept followers. The reply goes
- * to the follower's own inbox rather than through the followers collection,
- * because at this moment the follow is not yet a fact for anybody but us.
+ * A `Follow` of anything but one of this site's users is ignored rather than
+ * refused — a peer that asked to follow a post has not done anything wrong, it
+ * has merely addressed something that does not accept followers. The reply
+ * goes to the follower's own inbox rather than through the followers
+ * collection, because at this moment the follow is not yet a fact for anybody
+ * but us.
  *
  * Following twice is a no-op beyond refreshing the stored profile: the store
- * is keyed by actor id and keeps the original follow time, so a redelivered
- * or repeated `Follow` cannot turn one follower into two.
+ * is keyed by the pair (user, actor) and keeps the original follow time, so a
+ * redelivered or repeated `Follow` cannot turn one follower into two. One
+ * actor may follow two of this site's users, and that is two rows.
  */
 export async function handleFollow(context, follow) {
-    await logActivity(context, follow);
-    if (follow.id === null || follow.objectId === null)
-        return;
-    // `parseUri` is what decides whether the object is this actor: comparing
-    // strings would have to know how Fedify spells the actor's URL, and this
-    // asks Fedify instead.
-    const parsed = context.parseUri(follow.objectId);
-    if (parsed?.type !== 'actor' || parsed.identifier !== SITE_ACTOR_IDENTIFIER)
+    const followed = followedUser(context, follow);
+    await logActivity(context, follow, followed?.username);
+    if (follow.id === null || follow.objectId === null || followed === undefined)
         return;
     const actor = await follow.getActor(dereference(context));
     if (actor === null)
@@ -30,15 +31,45 @@ export async function handleFollow(context, follow) {
     const follower = await followerFrom(context, actor);
     if (follower === undefined)
         return;
-    context.data.admin.putFollower(follower);
-    await context.sendActivity({ identifier: SITE_ACTOR_IDENTIFIER }, actor, new Accept({
+    await addFollower(recordsOf(context), followed.username, follower);
+    await context.sendActivity(await senderKeyPairs(context, followed), actor, new Accept({
         // A fresh id every time: an actor may follow, unfollow and follow again,
         // and those are three activities rather than one repeated.
-        id: new URL(`#accept/${randomUUID()}`, context.getActorUri(SITE_ACTOR_IDENTIFIER)),
-        actor: follow.objectId,
+        id: new URL(`#accept/${randomUUID()}`, actorId(context, followed)),
+        // The user's own id rather than the URL the `Follow` happened to name.
+        // They are the same thing for almost everybody, but a user with a stored
+        // actor id may be followed at either of two URLs, and the `Accept` has to
+        // come from the one their actor document publishes — it is what a peer
+        // matches against the account it is waiting to hear about, and the owner
+        // of the key that signed the reply.
+        actor: actorId(context, followed),
         object: follow,
     }));
 }
+/**
+ * The user a `Follow` is a follow of, or `undefined` when it names none.
+ *
+ * `parseUri` is what decides whether the object is one of this site's actors:
+ * comparing strings would have to know how Fedify spells an actor's URL, and
+ * this asks Fedify instead. The identifier it answers with is the username
+ * (decision-14), and a username nobody has is not a follow of anybody.
+ *
+ * A stored actor id is the other way in, and the commoner one for a migrated
+ * site: it is the `id` the actor document publishes, so it is what a peer that
+ * just read the document names, and Fedify's router cannot parse it because it
+ * is not a path Fedify dispatches (doc-8). Matched on the whole URL, as it is
+ * everywhere else.
+ */
+function followedUser(context, follow) {
+    if (follow.objectId === null)
+        return undefined;
+    const parsed = context.parseUri(follow.objectId);
+    if (parsed?.type === 'actor') {
+        return userByUsername(context.data.config.dataDir, parsed.identifier);
+    }
+    const wanted = follow.objectId.href;
+    return listUsers(context.data.config.dataDir).find((user) => user.actorId === wanted);
+}
 /**
  * Handle an `Undo`: an undone `Follow` removes the follower.
  *
@@ -48,15 +79,20 @@ export async function handleFollow(context, follow) {
  * about who the follow belonged to.
  */
 export async function handleUndo(context, undo) {
-    await logActivity(context, undo);
     const object = await undo.getObject(dereference(context));
+    const followed = object instanceof Follow ? followedUser(context, object) : undefined;
+    await logActivity(context, undo, followed?.username);
     if (!(object instanceof Follow))
         return;
     const undoer = undo.actorId;
     const follower = object.actorId;
     if (undoer === null || follower === null || undoer.href !== follower.href)
         return;
-    context.data.admin.deleteFollower(follower.href);
+    // An `Undo` that names which actor was followed unfollows exactly that one;
+    // one that does not — the object arrived as a bare id nothing could
+    // dereference — unfollows everybody, which is what "I do not want your
+    // posts" means when it says nothing more.
+    await forget(context, follower.href, followed?.username);
 }
 /**
  * Handle a `Delete`: an actor deleting itself stops being a follower.
@@ -67,12 +103,55 @@ export async function handleUndo(context, undo) {
  * object to remove.
  */
 export async function handleDelete(context, activity) {
-    await logActivity(context, activity);
+    await logActivity(context, activity, context.recipient ?? undefined);
     const actor = activity.actorId;
     const object = activity.objectId;
     if (actor === null || object === null || actor.href !== object.href)
         return;
-    context.data.admin.deleteFollower(object.href);
+    // An account that is gone is gone from everybody's followers, whichever
+    // inbox the announcement happened to reach.
+    await forget(context, object.href);
+}
+/**
+ * Take one actor off a user's followers, or off every user's.
+ *
+ * Which users to touch is asked of the index rather than of the file listing,
+ * because the index is the one place that already knows which of this site's
+ * people an actor follows; `removeFollower` then rewrites each file and
+ * corrects the index inside the same lock, so the two cannot disagree.
+ */
+async function forget(context, actorHref, username) {
+    const records = recordsOf(context);
+    if (username !== undefined) {
+        await removeFollower(records, username, actorHref);
+        return;
+    }
+    const usernames = new Set(context.data.admin
+        .listFollowers()
+        .filter((follower) => follower.actorId === actorHref)
+        .map((follower) => follower.username));
+    for (const name of usernames)
+        await removeFollower(records, name, actorHref);
+}
+/**
+ * Handle an `Accept`: a relay agreeing to the subscription the site asked for.
+ *
+ * The site follows nothing but relays (doc-4 keeps its `following` collection
+ * empty), so an `Accept` addressed to it is an answer to one of the `Follow`
+ * activities TASK-40 sends — or a stray, which {@link acceptRelay} recognises
+ * as one and leaves alone.
+ */
+export async function handleAccept(context, accept) {
+    await logActivity(context, accept);
+    acceptRelay(context.data.admin, accept);
+}
+/**
+ * Handle a `Reject`: a relay refusing the subscription, with whatever it said
+ * about why, which the federation screen shows beside the relay.
+ */
+export async function handleReject(context, reject) {
+    await logActivity(context, reject);
+    rejectRelay(context.data.admin, reject);
 }
 /**
  * Handle a `Like`, an `Announce` or a `Create`: record it and do nothing else.
@@ -86,29 +165,33 @@ export async function handleLoggedActivity(context, activity) {
     await logActivity(context, activity);
 }
 /**
- * Write one inbound activity to the log.
+ * Write one inbound activity to the log, attributed to the user it was
+ * addressed to.
  *
  * Every handled activity goes through here, the follow traffic included, so
  * the log is a complete record of what the inbox was told rather than of what
  * the inbox ignored. An activity with no actor is dropped: Fedify has already
  * refused anything whose signature does not match its actor, so an activity
  * without one is malformed rather than anonymous.
+ *
+ * The recipient defaults to the inbox the delivery arrived at —
+ * `context.recipient` is the username for a personal inbox and `null` for the
+ * shared one — and a caller that has worked out the addressee for itself, as
+ * `handleFollow` has, names it instead (decision-14).
  */
-export async function logActivity(context, activity) {
-    const actorId = activity.actorId;
-    if (actorId === null)
+export async function logActivity(context, activity, recipient = context.recipient ?? undefined) {
+    const sender = activity.actorId;
+    if (sender === null)
         return;
     const json = await activity.toJsonLd({
         format: 'compact',
         contextLoader: context.contextLoader,
     });
-    context.data.admin.logInboxActivity({
-        activityId: activity.id?.href ?? null,
-        activityType: activityTypeName(activity),
-        actorId: actorId.href,
-        objectId: activity.objectId?.href ?? null,
-        json: JSON.stringify(json),
-    });
+    await appendInboxActivity(recordsOf(context), JSON.stringify(json), { recipient });
+}
+/** The files this inbox writes, and the index over them. */
+function recordsOf(context) {
+    return { admin: context.data.admin, contentDir: context.data.config.contentDir };
 }
 /**
  * A remote actor as the follower row that describes it, or `undefined` when
@@ -152,18 +235,6 @@ function linkHref(value) {
         return null;
     return value instanceof URL ? value.href : (value.href?.href ?? null);
 }
-/**
- * The short ActivityStreams type name — `Follow`, `Like`, `Announce` — that the
- * log stores.
- *
- * Taken from the type IRI rather than from the class name, which a bundler is
- * free to rename, or from the JSON, which spells a type outside the core
- * vocabulary as a full IRI.
- */
-function activityTypeName(activity) {
-    const typeId = getTypeId(activity);
-    return typeId.hash === '' ? typeId.href : typeId.hash.slice(1);
-}
 /** The loaders a vocabulary getter needs to follow a link off this context. */
 function dereference(context) {
     return { documentLoader: context.documentLoader, contextLoader: context.contextLoader };

package/dist/federation/inbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../../src/federation/inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAK1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAKlD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE,MAAc;IAC1E,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO;IAE3D,yEAAyE;IACzE,yEAAyE;IACzE,uBAAuB;IACvB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,KAAK,qBAAqB;QAAE,OAAO;IAEpF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IAEnC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAEzC,MAAM,OAAO,CAAC,YAAY,CACxB,EAAE,UAAU,EAAE,qBAAqB,EAAE,EACrC,KAAK,EACL,IAAI,MAAM,CAAC;QACT,yEAAyE;QACzE,2DAA2D;QAC3D,EAAE,EAAE,IAAI,GAAG,CAAC,WAAW,UAAU,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAClF,KAAK,EAAE,MAAM,CAAC,QAAQ;QACtB,MAAM,EAAE,MAAM;KACf,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAyB,EAAE,IAAU;IACpE,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,MAAM,YAAY,MAAM,CAAC;QAAE,OAAO;IAExC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;IAChC,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO;IAElF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE,QAAgB;IAC5E,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO;IAE5E,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAyB,EACzB,QAAkC;IAElC,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAyB,EAAE,QAAkB;IAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO;IAE7B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;QACnC,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAClC,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,IAAI,IAAI;QACrC,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QACxC,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI;QACzC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAyB,EACzB,KAAY;IAEZ,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAElE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnF,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;QAC3B,aAAa,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI,IAAI;QACzD,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;QACxD,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI;QAClE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACzC,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,sDAAsD;AACtD,SAAS,QAAQ,CAAC,KAAwB;IACxC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,OAAyB;IAI5C,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;AAC1F,CAAC"}
+{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../../src/federation/inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAa/C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEhF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAKvD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE,MAAc;IAC1E,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IAErF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IAEnC,MAAM,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEnE,MAAM,OAAO,CAAC,YAAY,CACxB,MAAM,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,EACvC,KAAK,EACL,IAAI,MAAM,CAAC;QACT,yEAAyE;QACzE,2DAA2D;QAC3D,EAAE,EAAE,IAAI,GAAG,CAAC,WAAW,UAAU,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClE,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,yEAAyE;QACzE,oCAAoC;QACpC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,MAAM,EAAE,MAAM;KACf,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,YAAY,CAAC,OAAyB,EAAE,MAAc;IAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAE/C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;IACpC,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAyB,EAAE,IAAU;IACpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,YAAY,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAErD,IAAI,CAAC,CAAC,MAAM,YAAY,MAAM,CAAC;QAAE,OAAO;IAExC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;IAChC,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO;IAElF,4EAA4E;IAC5E,oEAAoE;IACpE,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE,QAAgB;IAC5E,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC;IAErE,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO;IAE5E,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,MAAM,CACnB,OAAyB,EACzB,SAAiB,EACjB,QAAiB;IAEjB,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,OAAO,CAAC,IAAI,CAAC,KAAK;SACf,aAAa,EAAE;SACf,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC;SACpD,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACxC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,SAAS;QAAE,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE,MAAc;IAC1E,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE,MAAc;IAC1E,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAyB,EACzB,QAAkC;IAElC,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAyB,EACzB,QAAkB,EAClB,SAAS,GAAuB,OAAO,CAAC,SAAS,IAAI,SAAS;IAE9D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;IAChC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAE5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;QACnC,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;IAEH,MAAM,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,4DAA4D;AAC5D,SAAS,SAAS,CAAC,OAAyB;IAC1C,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAyB,EACzB,KAAY;IAEZ,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAElE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnF,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;QAC3B,aAAa,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI,IAAI;QACzD,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;QACxD,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI;QAClE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACzC,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,sDAAsD;AACtD,SAAS,QAAQ,CAAC,KAAwB;IACxC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,OAAyB;IAI5C,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;AAC1F,CAAC"}

package/dist/federation/index.d.ts

@@ -1,14 +1,26 @@
-export { ACTOR_CLASSES, actorClassFor, avatarUrl, siteActor } from './actor.ts';
-export type { SiteActorOptions } from './actor.ts';
-export { articleObjectId, isFederatedDocument, postArticle, postCreateActivity, postDeleteActivity, postUpdateActivity, SOURCE_MEDIA_TYPE, toInstant, } from './article.ts';
-export { createDeliveryService, groupByInbox } from './delivery.ts';
-export type { CreateDeliveryServiceOptions, DeliveryLogger, DeliveryReport, DeliveryService, } from './delivery.ts';
-export { createSiteFederation, federatedObject, federatedPost, OUTBOX_PAGE_SIZE, SOFTWARE_NAME, } from './federation.ts';
+export { actorAliases, actorId, avatarUrl, keyIdFor, mainKeyId, multikeyId, senderKeyPairs, userActor, userByUsername, } from './actor.ts';
+export type { UserActorOptions } from './actor.ts';
+export { articleObjectId, documentAuthor, isFederatedDocument, postArticle, postCreateActivity, postDeleteActivity, postUpdateActivity, SOURCE_MEDIA_TYPE, toInstant, } from './article.ts';
+export { createDeliveryService, deliveryTargets, groupByInbox } from './delivery.ts';
+export type { CreateDeliveryServiceOptions, DeliveryLogger, DeliveryReport, DeliveryService, DeliveryTarget, } from './delivery.ts';
+export { createSiteFederation, federatedPost, outboxPage, OUTBOX_PAGE_SIZE, SOFTWARE_NAME, } from './federation.ts';
 export type { CreateSiteFederationOptions, FederationContextData, SiteFederation, } from './federation.ts';
+export { ExistingKeyPairError, importWordPressActor, UnusableKeyPemError, } from './import-wordpress.ts';
+export type { FollowersImportReport, ImportedKey, ImportWordPressActorOptions, ImportWordPressActorReport, UnreachableFollower, } from './import-wordpress.ts';
 export { followerRecipient, followersPage, FOLLOWERS_PAGE_SIZE, lastFollowersCursor, } from './followers.ts';
-export { followerFrom, handleDelete, handleFollow, handleLoggedActivity, handleUndo, logActivity, } from './inbox.ts';
+export { followerFrom, handleAccept, handleDelete, handleFollow, handleLoggedActivity, handleReject, handleUndo, logActivity, } from './inbox.ts';
 export type { SiteInboxContext } from './inbox.ts';
-export { loadActorKeyPairs, SITE_ACTOR_IDENTIFIER } from './keys.ts';
-export { mountFederation } from './mount.ts';
-export { ACTOR_PATH, createActivityId, deleteActivityId, FEDERATION_PREFIX, federationOrigin, FOLLOWERS_PATH, FOLLOWING_PATH, INBOX_PATH, NODEINFO_PATH, OUTBOX_PATH, POST_OBJECT_PATH, postObjectId, postObjectPath, SHARED_INBOX_PATH, updateActivityId, } from './paths.ts';
+export { ACTOR_KEY_ALGORITHMS, actorKeyFile, actorKeysDir, assertActorKeysUsable, loadActorKeyPairs, migrateActorKeysToFiles, writeActorKeyFile, } from './keys.ts';
+export type { ActorKeyAlgorithm } from './keys.ts';
+export { addFollower, appendInboxActivity, FEDERATION_DATA_DIRECTORY, federatedUsernames, followersFile, FOLLOWERS_FILE, inboxDirectory, inboxFile, inboxMonth, INBOX_DIRECTORY, inboxRowFrom, migrateFederationToFiles, readFollowers, readInboxLog, rebuildFederationIndexes, removeFollower, userDirectory, } from './records.ts';
+export type { FederationIndexReport, FederationRecords, InboxLine } from './records.ts';
+export { acctOf, mountFederation, webFingerSubject, WEBFINGER_PATH } from './mount.ts';
+export type { MountFederationOptions } from './mount.ts';
+export { ACTOR_PATH, createActivityId, deleteActivityId, federationOrigin, FOLLOWERS_PATH, FOLLOWING_PATH, handleHref, INBOX_PATH, NODEINFO_PATH, OUTBOX_PATH, SHARED_INBOX_PATH, updateActivityId, } from './paths.ts';
+export { acceptedRelays, acceptRelay, createRelayService, rejectRelay, relayAnswering, relayRecipient, } from './relays.ts';
+export type { CreateRelayServiceOptions, RelayLogger, RelayService, RelaySyncReport, } from './relays.ts';
+export { actorHandle, replyFrom, replyTargetOf, REPLY_ACTIVITY_TYPE } from './replies.ts';
+export type { Reply } from './replies.ts';
+export { createWordPressFederation, readWordPressRequests, recordWordPressRequest, userByWordPressActorId, WORDPRESS_ACTIVITYPUB_BASE, WORDPRESS_ACTOR_PATH, WORDPRESS_FOLLOWERS_PATH, WORDPRESS_FOLLOWING_PATH, WORDPRESS_INBOX_PATH, WORDPRESS_OUTBOX_PATH, WORDPRESS_REQUESTS_FILE, WORDPRESS_SHARED_INBOX_PATH, wordPressRequestsFile, wordPressRequestTarget, } from './wordpress.ts';
+export type { CreateWordPressFederationOptions, WordPressRequests, WordPressRequestTarget, WordPressRoute, } from './wordpress.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/federation/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/federation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAChF,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,SAAS,GACV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpE,YAAY,EACV,4BAA4B,EAC5B,cAAc,EACd,cAAc,EACd,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,2BAA2B,EAC3B,qBAAqB,EACrB,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,UAAU,EACV,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,UAAU,EACV,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/federation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,OAAO,EACP,SAAS,EACT,QAAQ,EACR,SAAS,EACT,UAAU,EACV,cAAc,EACd,SAAS,EACT,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EACL,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,SAAS,GACV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACrF,YAAY,EACV,4BAA4B,EAC5B,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,2BAA2B,EAC3B,qBAAqB,EACrB,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,qBAAqB,EACrB,WAAW,EACX,2BAA2B,EAC3B,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,cAAc,EACd,SAAS,EACT,UAAU,EACV,eAAe,EACf,YAAY,EACZ,wBAAwB,EACxB,aAAa,EACb,YAAY,EACZ,wBAAwB,EACxB,cAAc,EACd,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACvF,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,UAAU,EACV,UAAU,EACV,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,yBAAyB,EACzB,WAAW,EACX,YAAY,EACZ,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC1F,YAAY,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gCAAgC,EAChC,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,GACf,MAAM,gBAAgB,CAAC"}

package/dist/federation/index.js

@@ -1,10 +1,15 @@
-export { ACTOR_CLASSES, actorClassFor, avatarUrl, siteActor } from './actor.js';
-export { articleObjectId, isFederatedDocument, postArticle, postCreateActivity, postDeleteActivity, postUpdateActivity, SOURCE_MEDIA_TYPE, toInstant, } from './article.js';
-export { createDeliveryService, groupByInbox } from './delivery.js';
-export { createSiteFederation, federatedObject, federatedPost, OUTBOX_PAGE_SIZE, SOFTWARE_NAME, } from './federation.js';
+export { actorAliases, actorId, avatarUrl, keyIdFor, mainKeyId, multikeyId, senderKeyPairs, userActor, userByUsername, } from './actor.js';
+export { articleObjectId, documentAuthor, isFederatedDocument, postArticle, postCreateActivity, postDeleteActivity, postUpdateActivity, SOURCE_MEDIA_TYPE, toInstant, } from './article.js';
+export { createDeliveryService, deliveryTargets, groupByInbox } from './delivery.js';
+export { createSiteFederation, federatedPost, outboxPage, OUTBOX_PAGE_SIZE, SOFTWARE_NAME, } from './federation.js';
+export { ExistingKeyPairError, importWordPressActor, UnusableKeyPemError, } from './import-wordpress.js';
 export { followerRecipient, followersPage, FOLLOWERS_PAGE_SIZE, lastFollowersCursor, } from './followers.js';
-export { followerFrom, handleDelete, handleFollow, handleLoggedActivity, handleUndo, logActivity, } from './inbox.js';
-export { loadActorKeyPairs, SITE_ACTOR_IDENTIFIER } from './keys.js';
-export { mountFederation } from './mount.js';
-export { ACTOR_PATH, createActivityId, deleteActivityId, FEDERATION_PREFIX, federationOrigin, FOLLOWERS_PATH, FOLLOWING_PATH, INBOX_PATH, NODEINFO_PATH, OUTBOX_PATH, POST_OBJECT_PATH, postObjectId, postObjectPath, SHARED_INBOX_PATH, updateActivityId, } from './paths.js';
+export { followerFrom, handleAccept, handleDelete, handleFollow, handleLoggedActivity, handleReject, handleUndo, logActivity, } from './inbox.js';
+export { ACTOR_KEY_ALGORITHMS, actorKeyFile, actorKeysDir, assertActorKeysUsable, loadActorKeyPairs, migrateActorKeysToFiles, writeActorKeyFile, } from './keys.js';
+export { addFollower, appendInboxActivity, FEDERATION_DATA_DIRECTORY, federatedUsernames, followersFile, FOLLOWERS_FILE, inboxDirectory, inboxFile, inboxMonth, INBOX_DIRECTORY, inboxRowFrom, migrateFederationToFiles, readFollowers, readInboxLog, rebuildFederationIndexes, removeFollower, userDirectory, } from './records.js';
+export { acctOf, mountFederation, webFingerSubject, WEBFINGER_PATH } from './mount.js';
+export { ACTOR_PATH, createActivityId, deleteActivityId, federationOrigin, FOLLOWERS_PATH, FOLLOWING_PATH, handleHref, INBOX_PATH, NODEINFO_PATH, OUTBOX_PATH, SHARED_INBOX_PATH, updateActivityId, } from './paths.js';
+export { acceptedRelays, acceptRelay, createRelayService, rejectRelay, relayAnswering, relayRecipient, } from './relays.js';
+export { actorHandle, replyFrom, replyTargetOf, REPLY_ACTIVITY_TYPE } from './replies.js';
+export { createWordPressFederation, readWordPressRequests, recordWordPressRequest, userByWordPressActorId, WORDPRESS_ACTIVITYPUB_BASE, WORDPRESS_ACTOR_PATH, WORDPRESS_FOLLOWERS_PATH, WORDPRESS_FOLLOWING_PATH, WORDPRESS_INBOX_PATH, WORDPRESS_OUTBOX_PATH, WORDPRESS_REQUESTS_FILE, WORDPRESS_SHARED_INBOX_PATH, wordPressRequestsFile, wordPressRequestTarget, } from './wordpress.js';
 //# sourceMappingURL=index.js.map

package/dist/federation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/federation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEhF,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,SAAS,GACV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAOpE,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,UAAU,EACV,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,UAAU,EACV,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/federation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,OAAO,EACP,SAAS,EACT,QAAQ,EACR,SAAS,EACT,UAAU,EACV,cAAc,EACd,SAAS,EACT,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,SAAS,GACV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAQrF,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAQ/B,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,cAAc,EACd,SAAS,EACT,UAAU,EACV,eAAe,EACf,YAAY,EACZ,wBAAwB,EACxB,aAAa,EACb,YAAY,EACZ,wBAAwB,EACxB,cAAc,EACd,aAAa,GACd,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEvF,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,UAAU,EACV,UAAU,EACV,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC;AAOrB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE1F,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC"}

package/dist/federation/keys.d.ts

@@ -1,27 +1,105 @@
 import type { AdminStore } from '../admin/store.ts';
 /**
- * The site actor's internal identifier.
+ * The algorithms an actor holds a key pair for, in the order Fedify wants them:
+ * the RSA pair signs HTTP Signatures for Mastodon and friends, the Ed25519
+ * pair signs FEP-8b32 integrity proofs.
+ */
+export declare const ACTOR_KEY_ALGORITHMS: readonly ['RSASSA-PKCS1-v1_5', 'Ed25519'];
+/** One of {@link ACTOR_KEY_ALGORITHMS}. */
+export type ActorKeyAlgorithm = (typeof ACTOR_KEY_ALGORITHMS)[number];
+/** Where an actor's key files live: `data/keys`, beside the disposable index. */
+export declare function actorKeysDir(dataDir: string): string;
+/**
+ * The file one key pair lives in, e.g. `data/keys/ada.ed25519.jwk`.
+ *
+ * The identifier is the user's username (decision-14), which is also what
+ * their actor id is built from, so a site can tell at a glance whose key a
+ * file is; and the algorithm is in the name too, so the two pairs are
+ * independent files that can be backed up, restored and regenerated one at a
+ * time.
+ *
+ * `algorithm` is a bare string rather than an {@link ActorKeyAlgorithm}, for
+ * the migration's sake: a row written by a version that knows an algorithm
+ * this one does not still has to reach a file before the table is dropped.
+ */
+export declare function actorKeyFile(dataDir: string, identifier: string, algorithm: string): string;
+/**
+ * Put one private JWK on disk as a user's key file for an algorithm, replacing
+ * whatever was there, and answer with the path it was written to.
+ *
+ * The only door into `data/keys` that is not {@link loadActorKeyPairs}, and it
+ * exists for the import (TASK-71): a key pair that arrives from somewhere else
+ * is the one case where a file has to be written from bytes the CMS did not
+ * mint. Everything about the layout stays here rather than at the caller — the
+ * name, the `0700` directory and the `0600` file — so there is one answer to
+ * where a user's key lives.
+ *
+ * It does not decide whether writing is allowed: an existing key is somebody's
+ * identity, and the caller is the one that knows whether it was told to
+ * replace it.
+ */
+export declare function writeActorKeyFile(dataDir: string, identifier: string, algorithm: ActorKeyAlgorithm, privateJwk: string): string;
+/**
+ * One user's key pairs, generated on the first call and read from
+ * `data/keys` on every one after that.
+ *
+ * Both of {@link ACTOR_KEY_ALGORITHMS} are returned, in that order. Each file
+ * holds the private JWK alone, because the public key is derivable from it:
+ * one file per pair is one thing to back up and one thing that cannot fall
+ * half out of step with itself.
  *
- * Fedify keys actors by an identifier rather than by handle, and the two are
- * deliberately not the same thing here: the handle is a setting somebody may
- * change, while the identifier is what the actor's id, its inbox, its outbox
- * and its stored keys are all built from. Renaming `@blog@example.com` to
- * `@notes@example.com` therefore leaves every URL — and every follower — alone.
+ * A file that will not import is thrown over rather than replaced (decision-9).
+ * The old code healed a damaged row by generating a new pair, which is exactly
+ * the wrong thing to do with an identity: every follower holds the public key
+ * and would stop verifying the site's posts. A site that really does want a
+ * new key deletes the file, which is a deliberate act rather than an accident
+ * of a half-written byte.
  */
-export declare const SITE_ACTOR_IDENTIFIER = "actor";
+export declare function loadActorKeyPairs(dataDir: string, identifier: string): Promise<CryptoKeyPair[]>;
 /**
- * The actor's key pairs, generated on the first call and read from SQLite on
- * every one after that.
- *
- * Both of {@link ACTOR_KEY_ALGORITHMS} are returned, in that order, which is
- * the order Fedify wants them in: the RSA pair signs HTTP Signatures for
- * Mastodon and friends, the Ed25519 pair signs FEP-8b32 integrity proofs.
- *
- * A stored pair that will not import — a half-written row, a key from a JWK
- * shape that has since changed — is replaced rather than thrown, so a damaged
- * table heals on the next boot instead of wedging every boot after it. That
- * costs the site its old key for that algorithm, which is why the two are
- * stored and healed independently.
+ * Turn an older site's `actor_keys` rows into files under `data/keys`, once,
+ * and drop the table.
+ *
+ * The rows this writes out are the site actor's, which no version after
+ * TASK-68 has: decision-14 replaced it with one actor per user, and a user's
+ * keys are named after their username rather than after the sentinel `actor`.
+ * The files are still written rather than dropped on the floor, because a
+ * private key is the one thing this CMS never deletes for somebody — an
+ * operator who wants the old identity back has it on disk to move.
+ *
+ * This is the migration decision-9 calls the one that must not fail. Settings
+ * a site could type again and followers a site could ask for again; an actor's
+ * private key is the site's identity, and losing it means every follower's
+ * cached public key stops verifying its posts for good. So the rows are
+ * written out before the table goes, never after, and a file that is already
+ * there always wins — a site that has booted this version once has the truth
+ * on disk, and a row left over from before it did must not overwrite it.
+ *
+ * Synchronous because `createCms` is: it runs before the server is listening
+ * and before anything has asked for a key.
+ */
+export declare function migrateActorKeysToFiles(options: {
+    admin: AdminStore;
+    dataDir: string;
+}): void;
+/**
+ * Refuse to boot on a key file that is there but is not a key.
+ *
+ * `loadActorKeyPairs` throws over such a file, but nothing useful happens to
+ * that throw: Fedify catches whatever the key pairs dispatcher raises and
+ * hands back an empty list, so the site would go on answering with an actor
+ * that publishes no `publicKey` and no `assertionMethod` — unverifiable to
+ * every follower, and silent about it. Boot is where that is caught instead,
+ * and refusing to start is the report: a site is down for a minute and the
+ * message names the file to restore, rather than up for a week signing
+ * nothing.
+ *
+ * The checks are the ones `importJwk` makes, minus the arithmetic, because
+ * they are all that can be made without an `await` inside a synchronous boot.
+ * That is enough for every way a key file really goes wrong — truncated by a
+ * crash, emptied, replaced by something that is not a key at all. A JWK that
+ * is well formed and still will not import is left to
+ * {@link loadActorKeyPairs}, which throws the same error with the same advice.
  */
-export declare function loadActorKeyPairs(store: AdminStore, identifier: string): Promise<CryptoKeyPair[]>;
+export declare function assertActorKeysUsable(dataDir: string, identifier: string): void;
 //# sourceMappingURL=keys.d.ts.map

package/dist/federation/keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/federation/keys.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAqB,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEvE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,UAAU,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,EAAE,CAAC,CAY1B"}
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/federation/keys.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAOpD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,YAAI,mBAAmB,EAAE,SAAS,CAAU,CAAC;AAE9E,2CAA2C;AAC3C,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,iBAAiB,EAC5B,UAAU,EAAE,MAAM,GACjB,MAAM,CAKR;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,EAAE,CAAC,CAM1B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAuB7F;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAkB/E"}