@geekity/cms 0.3.0

package/dist/federation/followers.js

@@ -0,0 +1,69 @@
+/**
+ * How many followers one page of the collection holds.
+ *
+ * A constant for the same reason the outbox's is: a page URL is something a
+ * peer may come back to, and deriving the size from a setting would move every
+ * page boundary the moment somebody changed it.
+ */
+export const FOLLOWERS_PAGE_SIZE = 20;
+/**
+ * A stored follower as the {@link Recipient} Fedify delivers to.
+ *
+ * The shared inbox is offered when the follower published one, because that is
+ * what lets a post addressed to a hundred followers on one instance become one
+ * POST instead of a hundred. Fedify renders a recipient in the collection as
+ * its `id` alone, so the inbox columns cost the collection nothing and are
+ * what `ctx.sendActivity(…, 'followers', …)` needs.
+ */
+export function followerRecipient(follower) {
+    return {
+        id: new URL(follower.actorId),
+        inboxId: new URL(follower.inboxId),
+        endpoints: {
+            sharedInbox: follower.sharedInboxId === null ? null : new URL(follower.sharedInboxId),
+        },
+    };
+}
+/**
+ * The followers collection, newest follow first: one page of it, or all of it.
+ *
+ * A cursor is the offset into the list as a decimal string, exactly as the
+ * outbox's is, so the two collections page the same way and a cursor keeps
+ * meaning what it meant when it was minted.
+ *
+ * A `null` cursor is not the first page: it is Fedify asking for the whole
+ * collection at once, which is what it does before fanning an activity out to
+ * the followers. Answering it with a page would strand every follower past the
+ * first one silently, so this answers with all of them. The collection a peer
+ * reads never arrives here with `null`, because the first cursor is registered
+ * and a registered first cursor is what makes the collection paged.
+ */
+export function followersPage(context, cursor) {
+    const { admin } = context.data;
+    if (cursor === null) {
+        return { items: admin.listFollowers().map(followerRecipient) };
+    }
+    const offset = cursorOffset(cursor);
+    const followers = admin.listFollowers({ limit: FOLLOWERS_PAGE_SIZE, offset });
+    const total = admin.countFollowers();
+    const next = offset + FOLLOWERS_PAGE_SIZE;
+    return {
+        items: followers.map(followerRecipient),
+        nextCursor: next < total ? String(next) : null,
+        prevCursor: offset <= 0 ? null : String(Math.max(0, offset - FOLLOWERS_PAGE_SIZE)),
+    };
+}
+/**
+ * The cursor of the last page of the followers collection: the offset the
+ * final whole page starts at, and `0` for a site nobody follows yet.
+ */
+export function lastFollowersCursor(total) {
+    return String(total === 0 ? 0 : Math.floor((total - 1) / FOLLOWERS_PAGE_SIZE) * FOLLOWERS_PAGE_SIZE);
+}
+/** A cursor as an offset. Anything unreadable starts at the beginning. */
+function cursorOffset(cursor) {
+    if (cursor === null || !/^[0-9]+$/.test(cursor))
+        return 0;
+    return Number(cursor);
+}
+//# sourceMappingURL=followers.js.map

package/dist/federation/followers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"followers.js","sourceRoot":"","sources":["../../src/federation/followers.ts"],"names":[],"mappings":"AAMA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAkB;IAClD,OAAO;QACL,EAAE,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC7B,OAAO,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAClC,SAAS,EAAE;YACT,WAAW,EAAE,QAAQ,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;SACtF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAuC,EACvC,MAAqB;IAErB,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAE/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,GAAG,mBAAmB,CAAC;IAE1C,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACvC,UAAU,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9C,UAAU,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAAC,CAAC;KACnF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,MAAM,CACX,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,mBAAmB,CAAC,GAAG,mBAAmB,CACtF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,MAAqB;IACzC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC"}

package/dist/federation/inbox.d.ts

@@ -0,0 +1,68 @@
+import type { InboxContext } from '@fedify/fedify';
+import { Follow } from '@fedify/vocab';
+import type { Activity, Actor, Announce, Create, Delete, Like, Undo } from '@fedify/vocab';
+import type { NewFollower } from '../admin/store.ts';
+import type { FederationContextData } from './federation.ts';
+/** What an inbox handler is handed: a Fedify context over the CMS's stores. */
+export type SiteInboxContext = InboxContext<FederationContextData>;
+/**
+ * Handle a `Follow`: store the follower and reply `Accept`.
+ *
+ * A `Follow` of anything but the site actor is ignored rather than refused —
+ * a peer that asked to follow a post has not done anything wrong, it has
+ * merely addressed something that does not accept followers. The reply goes
+ * to the follower's own inbox rather than through the followers collection,
+ * because at this moment the follow is not yet a fact for anybody but us.
+ *
+ * Following twice is a no-op beyond refreshing the stored profile: the store
+ * is keyed by actor id and keeps the original follow time, so a redelivered
+ * or repeated `Follow` cannot turn one follower into two.
+ */
+export declare function handleFollow(context: SiteInboxContext, follow: Follow): Promise<void>;
+/**
+ * Handle an `Undo`: an undone `Follow` removes the follower.
+ *
+ * Only the actor that sent the `Follow` may undo it. Without that check any
+ * signed actor could unfollow the site on somebody else's behalf, since the
+ * activity carrying the instruction is signed by its sender and says nothing
+ * about who the follow belonged to.
+ */
+export declare function handleUndo(context: SiteInboxContext, undo: Undo): Promise<void>;
+/**
+ * Handle a `Delete`: an actor deleting itself stops being a follower.
+ *
+ * The only `Delete` acted on is the one whose object is its own actor, which
+ * is how an instance announces that an account is gone. A `Delete` of a note
+ * or an article is logged and left alone; the site holds no copy of a remote
+ * object to remove.
+ */
+export declare function handleDelete(context: SiteInboxContext, activity: Delete): Promise<void>;
+/**
+ * Handle a `Like`, an `Announce` or a `Create`: record it and do nothing else.
+ *
+ * doc-4 keeps these so a later phase can surface likes, boosts and comments.
+ * Nothing about them is interpreted here, because what that phase will want
+ * out of an activity is not knowable yet — which is also why the row keeps the
+ * whole JSON-LD rather than a few columns of it.
+ */
+export declare function handleLoggedActivity(context: SiteInboxContext, activity: Like | Announce | Create): Promise<void>;
+/**
+ * Write one inbound activity to the log.
+ *
+ * Every handled activity goes through here, the follow traffic included, so
+ * the log is a complete record of what the inbox was told rather than of what
+ * the inbox ignored. An activity with no actor is dropped: Fedify has already
+ * refused anything whose signature does not match its actor, so an activity
+ * without one is malformed rather than anonymous.
+ */
+export declare function logActivity(context: SiteInboxContext, activity: Activity): Promise<void>;
+/**
+ * A remote actor as the follower row that describes it, or `undefined` when
+ * it is not deliverable.
+ *
+ * An actor with no id or no inbox is dropped rather than stored: a follower
+ * the site could never deliver to is a row that would only ever fail, and
+ * both are the minimum ActivityPub asks of an actor.
+ */
+export declare function followerFrom(context: SiteInboxContext, actor: Actor): Promise<NewFollower | undefined>;
+//# sourceMappingURL=inbox.d.ts.map

package/dist/federation/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../src/federation/inbox.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAU,MAAM,EAAa,MAAM,eAAe,CAAC;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAQ,IAAI,EAAE,MAAM,eAAe,CAAC;AAEjG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG7D,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAEnE;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B3F;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAWrF;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ7F;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,IAAI,GAAG,QAAQ,GAAG,MAAM,GACjC,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB9F;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAclC"}

package/dist/federation/inbox.js

@@ -0,0 +1,171 @@
+import { randomUUID } from 'node:crypto';
+import { Accept, Follow, getTypeId } from '@fedify/vocab';
+import { SITE_ACTOR_IDENTIFIER } from './keys.js';
+/**
+ * Handle a `Follow`: store the follower and reply `Accept`.
+ *
+ * A `Follow` of anything but the site actor is ignored rather than refused —
+ * a peer that asked to follow a post has not done anything wrong, it has
+ * merely addressed something that does not accept followers. The reply goes
+ * to the follower's own inbox rather than through the followers collection,
+ * because at this moment the follow is not yet a fact for anybody but us.
+ *
+ * Following twice is a no-op beyond refreshing the stored profile: the store
+ * is keyed by actor id and keeps the original follow time, so a redelivered
+ * or repeated `Follow` cannot turn one follower into two.
+ */
+export async function handleFollow(context, follow) {
+    await logActivity(context, follow);
+    if (follow.id === null || follow.objectId === null)
+        return;
+    // `parseUri` is what decides whether the object is this actor: comparing
+    // strings would have to know how Fedify spells the actor's URL, and this
+    // asks Fedify instead.
+    const parsed = context.parseUri(follow.objectId);
+    if (parsed?.type !== 'actor' || parsed.identifier !== SITE_ACTOR_IDENTIFIER)
+        return;
+    const actor = await follow.getActor(dereference(context));
+    if (actor === null)
+        return;
+    const follower = await followerFrom(context, actor);
+    if (follower === undefined)
+        return;
+    context.data.admin.putFollower(follower);
+    await context.sendActivity({ identifier: SITE_ACTOR_IDENTIFIER }, actor, new Accept({
+        // A fresh id every time: an actor may follow, unfollow and follow again,
+        // and those are three activities rather than one repeated.
+        id: new URL(`#accept/${randomUUID()}`, context.getActorUri(SITE_ACTOR_IDENTIFIER)),
+        actor: follow.objectId,
+        object: follow,
+    }));
+}
+/**
+ * Handle an `Undo`: an undone `Follow` removes the follower.
+ *
+ * Only the actor that sent the `Follow` may undo it. Without that check any
+ * signed actor could unfollow the site on somebody else's behalf, since the
+ * activity carrying the instruction is signed by its sender and says nothing
+ * about who the follow belonged to.
+ */
+export async function handleUndo(context, undo) {
+    await logActivity(context, undo);
+    const object = await undo.getObject(dereference(context));
+    if (!(object instanceof Follow))
+        return;
+    const undoer = undo.actorId;
+    const follower = object.actorId;
+    if (undoer === null || follower === null || undoer.href !== follower.href)
+        return;
+    context.data.admin.deleteFollower(follower.href);
+}
+/**
+ * Handle a `Delete`: an actor deleting itself stops being a follower.
+ *
+ * The only `Delete` acted on is the one whose object is its own actor, which
+ * is how an instance announces that an account is gone. A `Delete` of a note
+ * or an article is logged and left alone; the site holds no copy of a remote
+ * object to remove.
+ */
+export async function handleDelete(context, activity) {
+    await logActivity(context, activity);
+    const actor = activity.actorId;
+    const object = activity.objectId;
+    if (actor === null || object === null || actor.href !== object.href)
+        return;
+    context.data.admin.deleteFollower(object.href);
+}
+/**
+ * Handle a `Like`, an `Announce` or a `Create`: record it and do nothing else.
+ *
+ * doc-4 keeps these so a later phase can surface likes, boosts and comments.
+ * Nothing about them is interpreted here, because what that phase will want
+ * out of an activity is not knowable yet — which is also why the row keeps the
+ * whole JSON-LD rather than a few columns of it.
+ */
+export async function handleLoggedActivity(context, activity) {
+    await logActivity(context, activity);
+}
+/**
+ * Write one inbound activity to the log.
+ *
+ * Every handled activity goes through here, the follow traffic included, so
+ * the log is a complete record of what the inbox was told rather than of what
+ * the inbox ignored. An activity with no actor is dropped: Fedify has already
+ * refused anything whose signature does not match its actor, so an activity
+ * without one is malformed rather than anonymous.
+ */
+export async function logActivity(context, activity) {
+    const actorId = activity.actorId;
+    if (actorId === null)
+        return;
+    const json = await activity.toJsonLd({
+        format: 'compact',
+        contextLoader: context.contextLoader,
+    });
+    context.data.admin.logInboxActivity({
+        activityId: activity.id?.href ?? null,
+        activityType: activityTypeName(activity),
+        actorId: actorId.href,
+        objectId: activity.objectId?.href ?? null,
+        json: JSON.stringify(json),
+    });
+}
+/**
+ * A remote actor as the follower row that describes it, or `undefined` when
+ * it is not deliverable.
+ *
+ * An actor with no id or no inbox is dropped rather than stored: a follower
+ * the site could never deliver to is a row that would only ever fail, and
+ * both are the minimum ActivityPub asks of an actor.
+ */
+export async function followerFrom(context, actor) {
+    if (actor.id === null || actor.inboxId === null)
+        return undefined;
+    const icon = await actor.getIcon({ ...dereference(context), suppressError: true });
+    return {
+        actorId: actor.id.href,
+        inboxId: actor.inboxId.href,
+        sharedInboxId: actor.endpoints?.sharedInbox?.href ?? null,
+        handle: actorHandle(actor),
+        name: actor.name === null ? null : actor.name.toString(),
+        iconUrl: linkHref(icon?.url ?? null) ?? actor.iconId?.href ?? null,
+        url: linkHref(actor.url) ?? null,
+    };
+}
+/**
+ * `@name@host` for an actor, built from what the actor document says rather
+ * than from WebFinger.
+ *
+ * A canonical handle would take a WebFinger round trip per follow to confirm
+ * the host, and this is display data: the id is what identifies the follower,
+ * and the id is what every other part of the system keys on.
+ */
+function actorHandle(actor) {
+    const username = actor.preferredUsername;
+    if (username === null || actor.id === null)
+        return null;
+    return `@${username.toString()}@${actor.id.host}`;
+}
+/** A `URL` or a `Link` as a plain href, or `null`. */
+function linkHref(value) {
+    if (value === null)
+        return null;
+    return value instanceof URL ? value.href : (value.href?.href ?? null);
+}
+/**
+ * The short ActivityStreams type name — `Follow`, `Like`, `Announce` — that the
+ * log stores.
+ *
+ * Taken from the type IRI rather than from the class name, which a bundler is
+ * free to rename, or from the JSON, which spells a type outside the core
+ * vocabulary as a full IRI.
+ */
+function activityTypeName(activity) {
+    const typeId = getTypeId(activity);
+    return typeId.hash === '' ? typeId.href : typeId.hash.slice(1);
+}
+/** The loaders a vocabulary getter needs to follow a link off this context. */
+function dereference(context) {
+    return { documentLoader: context.documentLoader, contextLoader: context.contextLoader };
+}
+//# sourceMappingURL=inbox.js.map

package/dist/federation/inbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../../src/federation/inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAK1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAKlD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE,MAAc;IAC1E,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO;IAE3D,yEAAyE;IACzE,yEAAyE;IACzE,uBAAuB;IACvB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,KAAK,qBAAqB;QAAE,OAAO;IAEpF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IAEnC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAEzC,MAAM,OAAO,CAAC,YAAY,CACxB,EAAE,UAAU,EAAE,qBAAqB,EAAE,EACrC,KAAK,EACL,IAAI,MAAM,CAAC;QACT,yEAAyE;QACzE,2DAA2D;QAC3D,EAAE,EAAE,IAAI,GAAG,CAAC,WAAW,UAAU,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAClF,KAAK,EAAE,MAAM,CAAC,QAAQ;QACtB,MAAM,EAAE,MAAM;KACf,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAyB,EAAE,IAAU;IACpE,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,MAAM,YAAY,MAAM,CAAC;QAAE,OAAO;IAExC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;IAChC,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO;IAElF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE,QAAgB;IAC5E,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO;IAE5E,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAyB,EACzB,QAAkC;IAElC,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAyB,EAAE,QAAkB;IAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO;IAE7B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;QACnC,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAClC,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,IAAI,IAAI;QACrC,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QACxC,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI;QACzC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAyB,EACzB,KAAY;IAEZ,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAElE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnF,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;QAC3B,aAAa,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI,IAAI;QACzD,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;QACxD,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI;QAClE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACzC,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,sDAAsD;AACtD,SAAS,QAAQ,CAAC,KAAwB;IACxC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,OAAyB;IAI5C,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;AAC1F,CAAC"}

package/dist/federation/index.d.ts

@@ -0,0 +1,14 @@
+export { ACTOR_CLASSES, actorClassFor, avatarUrl, siteActor } from './actor.ts';
+export type { SiteActorOptions } from './actor.ts';
+export { articleObjectId, isFederatedDocument, postArticle, postCreateActivity, postDeleteActivity, postUpdateActivity, SOURCE_MEDIA_TYPE, toInstant, } from './article.ts';
+export { createDeliveryService, groupByInbox } from './delivery.ts';
+export type { CreateDeliveryServiceOptions, DeliveryLogger, DeliveryReport, DeliveryService, } from './delivery.ts';
+export { createSiteFederation, federatedObject, federatedPost, OUTBOX_PAGE_SIZE, SOFTWARE_NAME, } from './federation.ts';
+export type { CreateSiteFederationOptions, FederationContextData, SiteFederation, } from './federation.ts';
+export { followerRecipient, followersPage, FOLLOWERS_PAGE_SIZE, lastFollowersCursor, } from './followers.ts';
+export { followerFrom, handleDelete, handleFollow, handleLoggedActivity, handleUndo, logActivity, } from './inbox.ts';
+export type { SiteInboxContext } from './inbox.ts';
+export { loadActorKeyPairs, SITE_ACTOR_IDENTIFIER } from './keys.ts';
+export { mountFederation } from './mount.ts';
+export { ACTOR_PATH, createActivityId, deleteActivityId, FEDERATION_PREFIX, federationOrigin, FOLLOWERS_PATH, FOLLOWING_PATH, INBOX_PATH, NODEINFO_PATH, OUTBOX_PATH, POST_OBJECT_PATH, postObjectId, postObjectPath, SHARED_INBOX_PATH, updateActivityId, } from './paths.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/federation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/federation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAChF,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,SAAS,GACV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpE,YAAY,EACV,4BAA4B,EAC5B,cAAc,EACd,cAAc,EACd,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,2BAA2B,EAC3B,qBAAqB,EACrB,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,UAAU,EACV,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,UAAU,EACV,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/federation/index.js

@@ -0,0 +1,10 @@
+export { ACTOR_CLASSES, actorClassFor, avatarUrl, siteActor } from './actor.js';
+export { articleObjectId, isFederatedDocument, postArticle, postCreateActivity, postDeleteActivity, postUpdateActivity, SOURCE_MEDIA_TYPE, toInstant, } from './article.js';
+export { createDeliveryService, groupByInbox } from './delivery.js';
+export { createSiteFederation, federatedObject, federatedPost, OUTBOX_PAGE_SIZE, SOFTWARE_NAME, } from './federation.js';
+export { followerRecipient, followersPage, FOLLOWERS_PAGE_SIZE, lastFollowersCursor, } from './followers.js';
+export { followerFrom, handleDelete, handleFollow, handleLoggedActivity, handleUndo, logActivity, } from './inbox.js';
+export { loadActorKeyPairs, SITE_ACTOR_IDENTIFIER } from './keys.js';
+export { mountFederation } from './mount.js';
+export { ACTOR_PATH, createActivityId, deleteActivityId, FEDERATION_PREFIX, federationOrigin, FOLLOWERS_PATH, FOLLOWING_PATH, INBOX_PATH, NODEINFO_PATH, OUTBOX_PATH, POST_OBJECT_PATH, postObjectId, postObjectPath, SHARED_INBOX_PATH, updateActivityId, } from './paths.js';
+//# sourceMappingURL=index.js.map

package/dist/federation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/federation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEhF,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,SAAS,GACV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAOpE,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,UAAU,EACV,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,UAAU,EACV,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/federation/keys.d.ts

@@ -0,0 +1,27 @@
+import type { AdminStore } from '../admin/store.ts';
+/**
+ * The site actor's internal identifier.
+ *
+ * Fedify keys actors by an identifier rather than by handle, and the two are
+ * deliberately not the same thing here: the handle is a setting somebody may
+ * change, while the identifier is what the actor's id, its inbox, its outbox
+ * and its stored keys are all built from. Renaming `@blog@example.com` to
+ * `@notes@example.com` therefore leaves every URL — and every follower — alone.
+ */
+export declare const SITE_ACTOR_IDENTIFIER = "actor";
+/**
+ * The actor's key pairs, generated on the first call and read from SQLite on
+ * every one after that.
+ *
+ * Both of {@link ACTOR_KEY_ALGORITHMS} are returned, in that order, which is
+ * the order Fedify wants them in: the RSA pair signs HTTP Signatures for
+ * Mastodon and friends, the Ed25519 pair signs FEP-8b32 integrity proofs.
+ *
+ * A stored pair that will not import — a half-written row, a key from a JWK
+ * shape that has since changed — is replaced rather than thrown, so a damaged
+ * table heals on the next boot instead of wedging every boot after it. That
+ * costs the site its old key for that algorithm, which is why the two are
+ * stored and healed independently.
+ */
+export declare function loadActorKeyPairs(store: AdminStore, identifier: string): Promise<CryptoKeyPair[]>;
+//# sourceMappingURL=keys.d.ts.map

package/dist/federation/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/federation/keys.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAqB,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEvE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,UAAU,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,EAAE,CAAC,CAY1B"}

package/dist/federation/keys.js

@@ -0,0 +1,60 @@
+import { exportJwk, generateCryptoKeyPair, importJwk } from '@fedify/fedify';
+import { ACTOR_KEY_ALGORITHMS } from '../admin/store.js';
+/**
+ * The site actor's internal identifier.
+ *
+ * Fedify keys actors by an identifier rather than by handle, and the two are
+ * deliberately not the same thing here: the handle is a setting somebody may
+ * change, while the identifier is what the actor's id, its inbox, its outbox
+ * and its stored keys are all built from. Renaming `@blog@example.com` to
+ * `@notes@example.com` therefore leaves every URL — and every follower — alone.
+ */
+export const SITE_ACTOR_IDENTIFIER = 'actor';
+/**
+ * The actor's key pairs, generated on the first call and read from SQLite on
+ * every one after that.
+ *
+ * Both of {@link ACTOR_KEY_ALGORITHMS} are returned, in that order, which is
+ * the order Fedify wants them in: the RSA pair signs HTTP Signatures for
+ * Mastodon and friends, the Ed25519 pair signs FEP-8b32 integrity proofs.
+ *
+ * A stored pair that will not import — a half-written row, a key from a JWK
+ * shape that has since changed — is replaced rather than thrown, so a damaged
+ * table heals on the next boot instead of wedging every boot after it. That
+ * costs the site its old key for that algorithm, which is why the two are
+ * stored and healed independently.
+ */
+export async function loadActorKeyPairs(store, identifier) {
+    const stored = new Map(store.listActorKeys(identifier).map((key) => [key.algorithm, key]));
+    const pairs = [];
+    for (const algorithm of ACTOR_KEY_ALGORITHMS) {
+        const row = stored.get(algorithm);
+        const imported = row === undefined ? undefined : await importPair(row.privateJwk, row.publicJwk);
+        pairs.push(imported ?? (await generatePair(store, identifier, algorithm)));
+    }
+    return pairs;
+}
+/** A stored pair as `CryptoKey`s, or `undefined` when it will not import. */
+async function importPair(privateJwk, publicJwk) {
+    try {
+        return {
+            privateKey: await importJwk(JSON.parse(privateJwk), 'private'),
+            publicKey: await importJwk(JSON.parse(publicJwk), 'public'),
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+/** A fresh pair, written to the store before it is handed back. */
+async function generatePair(store, identifier, algorithm) {
+    const pair = await generateCryptoKeyPair(algorithm);
+    store.putActorKey({
+        identifier,
+        algorithm,
+        privateJwk: JSON.stringify(await exportJwk(pair.privateKey)),
+        publicJwk: JSON.stringify(await exportJwk(pair.publicKey)),
+    });
+    return pair;
+}
+//# sourceMappingURL=keys.js.map

package/dist/federation/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/federation/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAGzD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAiB,EACjB,UAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAoB,EAAE,CAAC;IAElC,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,QAAQ,GACZ,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAClF,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,UAAU,CACvB,UAAkB,EAClB,SAAiB;IAEjB,IAAI,CAAC;QACH,OAAO;YACL,UAAU,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAe,EAAE,SAAS,CAAC;YAC5E,SAAS,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAe,EAAE,QAAQ,CAAC;SAC1E,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,YAAY,CACzB,KAAiB,EACjB,UAAkB,EAClB,SAA4B;IAE5B,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACpD,KAAK,CAAC,WAAW,CAAC;QAChB,UAAU;QACV,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;KAC3D,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/federation/mount.d.ts

@@ -0,0 +1,23 @@
+import type { Hono } from 'hono';
+import type { GeekityEnv } from '../env.ts';
+import type { SiteFederation } from './federation.ts';
+/**
+ * Put Fedify in front of the rest of the app.
+ *
+ * The middleware only answers the paths Fedify registered — the actor, its
+ * collections, the post objects, WebFinger and NodeInfo; everything else falls
+ * through to `next()` and reaches the admin and the public site as before.
+ * That is why it is mounted first: the public site claims every unmatched path
+ * in its not-found handler, so anything registered after it never sees a
+ * request.
+ *
+ * A post permalink asked for as ActivityStreams is answered here too, by
+ * {@link activityStreamsDocument}, because Fedify only knows about the URLs it
+ * minted and a permalink is not one of them.
+ *
+ * The dispatchers are handed the stores off the Hono context rather than
+ * closing over them, so one federation object could serve more than one CMS
+ * and so a dispatcher is never reading a store the request did not come with.
+ */
+export declare function mountFederation(app: Hono<GeekityEnv>, federation: SiteFederation): void;
+//# sourceMappingURL=mount.d.ts.map

package/dist/federation/mount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../../src/federation/mount.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAW,IAAI,EAAqB,MAAM,MAAM,CAAC;AAE7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAK5C,OAAO,KAAK,EAAyB,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE7E;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,cAAc,GAAG,IAAI,CAoBvF"}

package/dist/federation/mount.js

@@ -0,0 +1,71 @@
+import { respondWithObject } from '@fedify/fedify';
+import { federation as federationMiddleware } from '@fedify/hono';
+import { publicDocumentAt } from '../web/documents.js';
+import { prefersActivityStreams } from '../web/negotiate.js';
+import { requestPath } from '../web/routes.js';
+import { isFederatedDocument, postArticle } from './article.js';
+/**
+ * Put Fedify in front of the rest of the app.
+ *
+ * The middleware only answers the paths Fedify registered — the actor, its
+ * collections, the post objects, WebFinger and NodeInfo; everything else falls
+ * through to `next()` and reaches the admin and the public site as before.
+ * That is why it is mounted first: the public site claims every unmatched path
+ * in its not-found handler, so anything registered after it never sees a
+ * request.
+ *
+ * A post permalink asked for as ActivityStreams is answered here too, by
+ * {@link activityStreamsDocument}, because Fedify only knows about the URLs it
+ * minted and a permalink is not one of them.
+ *
+ * The dispatchers are handed the stores off the Hono context rather than
+ * closing over them, so one federation object could serve more than one CMS
+ * and so a dispatcher is never reading a store the request did not come with.
+ */
+export function mountFederation(app, federation) {
+    // `@fedify/hono` types its context as the two properties it actually reads,
+    // which is looser than Hono's own; the cast is what puts `c.var` back.
+    app.use('*', federationMiddleware(federation, (context) => {
+        const c = context;
+        return contextData(c);
+    }));
+    // Named, and typed as a middleware, so the Hono context arrives with its
+    // path parameters resolved rather than as `any`.
+    const activityStreams = async (c, next) => {
+        const response = await activityStreamsDocument(c, federation);
+        if (response !== undefined)
+            return response;
+        await next();
+    };
+    app.use('*', activityStreams);
+}
+/**
+ * The `Article` for the post at this URL, when the request asked for
+ * ActivityStreams and the URL is a published post's permalink.
+ *
+ * doc-4 wants a peer that dereferences a link somebody shared — which is the
+ * permalink, not the object id — to land on the object rather than on a page
+ * it cannot read. The article is built through the same
+ * {@link postArticle} the object dispatcher uses, off a context Fedify makes
+ * for this request, so the two answers cannot drift apart; its `id` is the
+ * object URL either way, so a peer stores one object however it arrived.
+ *
+ * Anything else — a browser, a `.md` or `.json` request, a page, a listing —
+ * gets `undefined` and falls through to the public site untouched.
+ */
+async function activityStreamsDocument(c, federation) {
+    if (!prefersActivityStreams(c.req.header('accept')))
+        return undefined;
+    const document = publicDocumentAt(c.var.store, requestPath(c));
+    if (document === undefined || !isFederatedDocument(document))
+        return undefined;
+    const context = federation.createContext(c.req.raw, contextData(c));
+    return await respondWithObject(postArticle(context, document), {
+        contextLoader: context.contextLoader,
+    });
+}
+/** What the dispatchers are handed, off the Hono context. */
+function contextData(c) {
+    return { admin: c.var.admin, store: c.var.store, config: c.var.config };
+}
+//# sourceMappingURL=mount.js.map

package/dist/federation/mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.js","sourceRoot":"","sources":["../../src/federation/mount.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAIlE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAAC,GAAqB,EAAE,UAA0B;IAC/E,4EAA4E;IAC5E,uEAAuE;IACvE,GAAG,CAAC,GAAG,CACL,GAAG,EACH,oBAAoB,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;QAC3C,MAAM,CAAC,GAAG,OAAyC,CAAC;QACpD,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC,CACH,CAAC;IAEF,yEAAyE;IACzE,iDAAiD;IACjD,MAAM,eAAe,GAAkC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,uBAAuB,CACpC,CAAsB,EACtB,UAA0B;IAE1B,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAEtE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAE/E,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,MAAM,iBAAiB,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;QAC7D,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,SAAS,WAAW,CAAC,CAAsB;IACzC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;AAC1E,CAAC"}