@oxy.so/federation 2.2.0 → 2.3.0

package/dist/cjs/apUri.js

@@ -105,7 +105,9 @@ function createDomainPolicy(config) {
         canonicalFederationHost(config.domain),
         canonicalFederationHost(config.actorDomain ?? config.domain),
     ]);
-    const identityApex = config.identityApex ? canonicalFederationHost(config.identityApex) : undefined;
+    const identityApex = config.identityApex
+        ? canonicalFederationHost(config.identityApex)
+        : undefined;
     const blocked = new Set();
     for (const d of config.blockedDomains ?? []) {
         blocked.add(canonicalFederationHost(d));
@@ -113,7 +115,7 @@ function createDomainPolicy(config) {
     return {
         isBlockedDomain(domain) {
             const d = canonicalFederationHost(domain);
-            return localDomains.has(d) || (identityApex !== undefined && d === identityApex) || blocked.has(d);
+            return (localDomains.has(d) || (identityApex !== undefined && d === identityApex) || blocked.has(d));
         },
         extractLocalPostId(objectUri) {
             let parsed;

package/dist/cjs/httpSignature.js

@@ -17,7 +17,7 @@
  *    Mention runs behind a CF-proxied apex that rewrites the origin `Host`, so it
  *    passes `true`; a directly-exposed origin leaves it `false`.
  *
- * Lives in the isomorphic `.` entry (no Express / Mongoose): it depends only on
+ * Lives in the isomorphic `.` entry (no Express / database driver): it depends only on
  * the runtime `crypto` builtin (Node / Bun) and is never invoked from browser /
  * React-Native bundles — RN consumers import only the connector TYPES, which are
  * erased at compile time.

package/dist/cjs/index.js

@@ -9,8 +9,8 @@
  * connector produces, the local-event union connectors deliver outbound, and
  * the connector interface itself.
  *
- * IMPORTANT: this entry is intentionally free of Mongoose / Express / React
- * Native so it can be imported from any Oxy app backend (and, in later phases,
+ * IMPORTANT: this entry is intentionally free of database drivers / Express /
+ * React Native so it can be imported from any Oxy app backend (and, in later phases,
  * share the pure HTTP-signature + actor-object surface with browser/isomorphic
  * callers). The runnable Express/Node engine — signed fetch, delivery transport,
  * webfinger/actor/inbox routers, remote-actor resolution — lives under the

package/dist/cjs/networkIdentity.js

@@ -245,7 +245,8 @@ function upstreamHandleFromProfileField(options) {
                 // https://https://twitter.com/jordievole. Repair exactly one duplicated
                 // HTTPS prefix, then run the ordinary host/path/credential validation.
                 const candidateHref = options.repairRepeatedHttpsScheme && href.startsWith('https://https://')
-                    ? href.slice('https://'.length) : href;
+                    ? href.slice('https://'.length)
+                    : href;
                 let handle;
                 try {
                     handle = profileUrlHandle(candidateHref, options.hosts, prefix);
@@ -446,7 +447,7 @@ function createBridgeRelabeller(entries) {
             const bridge = findBridge(actorHost);
             if (!bridge)
                 return false;
-            return (0, apUri_1.canonicalFederationHost)(bridge.network.domain) === (0, apUri_1.canonicalFederationHost)(networkDomain);
+            return ((0, apUri_1.canonicalFederationHost)(bridge.network.domain) === (0, apUri_1.canonicalFederationHost)(networkDomain));
         },
         deriveNetworkIdentity: (candidate) => {
             const entry = findBridge(candidate.host);

package/dist/cjs/node/actorResolver.js

@@ -108,9 +108,9 @@ function sameOriginUrl(a, b) {
     try {
         const urlA = new URL(a);
         const urlB = new URL(b);
-        return urlA.protocol === urlB.protocol
-            && urlA.port === urlB.port
-            && (0, apUri_1.isSameFederationHost)(urlA.hostname, urlB.hostname);
+        return (urlA.protocol === urlB.protocol &&
+            urlA.port === urlB.port &&
+            (0, apUri_1.isSameFederationHost)(urlA.hostname, urlB.hostname));
     }
     catch {
         return false;
@@ -230,8 +230,10 @@ class ActorResolver {
                 // the username-based URI we may have stored.
                 const parsed = new URL(currentUri);
                 const pathUsername = parsed.pathname.split('/').filter(Boolean).pop();
-                const acct = canonicalAcctHint
-                    || (pathUsername ? this.config.normalizeFederatedAcct(`${pathUsername}@${parsed.hostname}`) : undefined);
+                const acct = canonicalAcctHint ||
+                    (pathUsername
+                        ? this.config.normalizeFederatedAcct(`${pathUsername}@${parsed.hostname}`)
+                        : undefined);
                 if (acct) {
                     this.config.logger.info(`[FedSync] attempting WebFinger fallback for ${acct}`);
                     const resolved = await this.resolveWebFinger(acct);
@@ -279,9 +281,9 @@ class ActorResolver {
                 return null;
             }
             const actorHost = new URL(actorId).hostname.toLowerCase();
-            const username = this.config.text.inlineField(actor.preferredUsername)
-                || this.config.text.inlineField(actor.name)
-                || 'unknown';
+            const username = this.config.text.inlineField(actor.preferredUsername) ||
+                this.config.text.inlineField(actor.name) ||
+                'unknown';
             const actorWebfinger = typeof actor.webfinger === 'string'
                 ? this.config.normalizeFederatedAcct(actor.webfinger)
                 : undefined;
@@ -291,10 +293,10 @@ class ActorResolver {
             const verifiedActorWebfinger = this.acctMatchesActorHost(actorWebfinger, actorHost)
                 ? actorWebfinger
                 : undefined;
-            const acct = verifiedAcctHint
-                || verifiedActorWebfinger
-                || this.config.normalizeFederatedAcct(`${username}@${actorHost}`)
-                || `${username.toLowerCase()}@${actorHost}`;
+            const acct = verifiedAcctHint ||
+                verifiedActorWebfinger ||
+                this.config.normalizeFederatedAcct(`${username}@${actorHost}`) ||
+                `${username.toLowerCase()}@${actorHost}`;
             const domain = this.config.domainFromAcct(acct) || actorHost;
             // Re-check against the RESOLVED host/acct (post-redirect / WebFinger), which
             // can differ from the originally-requested URI host the early guard screened.
@@ -442,7 +444,9 @@ class ActorResolver {
                         postsCount: postsCount ?? undefined,
                         oxyUserId: fedActor.oxyUserId ?? undefined,
                     };
-                    const oxyId = await this.config.identity.resolveExternalUser(normalized, { forceAvatarRefresh });
+                    const oxyId = await this.config.identity.resolveExternalUser(normalized, {
+                        forceAvatarRefresh,
+                    });
                     if (oxyId && fedActor.oxyUserId !== oxyId && fedActor._id != null) {
                         await this.config.store.setActorOxyUserId(fedActor._id, oxyId);
                     }
@@ -483,11 +487,11 @@ class ActorResolver {
         // instead of needing its own clause.
         const atIndex = federatedUsername.indexOf('@');
         const localPart = atIndex > 0 ? federatedUsername.slice(0, atIndex) : '';
-        if (domain.length === 0
-            || localPart.length === 0
-            || federatedUsername !== `${localPart}@${domain}`) {
-            this.config.logger.warn(`[FedSync] refusing network identity for ${candidate.actorUri}: `
-                + `"${derived.federatedUsername}" is not bindable to domain "${derived.instanceDomain}"`);
+        if (domain.length === 0 ||
+            localPart.length === 0 ||
+            federatedUsername !== `${localPart}@${domain}`) {
+            this.config.logger.warn(`[FedSync] refusing network identity for ${candidate.actorUri}: ` +
+                `"${derived.federatedUsername}" is not bindable to domain "${derived.instanceDomain}"`);
             return undefined;
         }
         return { federatedUsername, instanceDomain: domain, bio: derived.bio };
@@ -590,8 +594,8 @@ class ActorResolver {
             return;
         const missingProfile = !existing || !existing.avatarUrl || !existing.headerUrl;
         const lastFetchedMs = existing?.lastFetchedAt?.getTime();
-        const refreshedRecently = typeof lastFetchedMs === 'number'
-            && Date.now() - lastFetchedMs < ACTOR_REFRESH_MIN_INTERVAL_MS;
+        const refreshedRecently = typeof lastFetchedMs === 'number' &&
+            Date.now() - lastFetchedMs < ACTOR_REFRESH_MIN_INTERVAL_MS;
         // Skip if we refreshed recently AND the cached profile is already complete.
         if (refreshedRecently && !missingProfile)
             return;

package/dist/cjs/node/actorRouter.js

@@ -64,7 +64,7 @@ function createActorRouter(config) {
     async function handleInbox(req, res) {
         try {
             // Verify HTTP signature (use originalUrl to avoid proxy path mangling).
-            const { verified, actorUri, reason: signatureError } = await (0, httpSignature_1.verifyHttpSignature)({
+            const { verified, actorUri, reason: signatureError, } = await (0, httpSignature_1.verifyHttpSignature)({
                 method: req.method,
                 path: req.originalUrl || req.path,
                 headers: req.headers,
@@ -94,7 +94,10 @@ function createActorRouter(config) {
             // is never dropped.
             let enqueued = false;
             try {
-                enqueued = await config.inbound.enqueueInboxActivity({ activity, verifiedActorUri: actorUri });
+                enqueued = await config.inbound.enqueueInboxActivity({
+                    activity,
+                    verifiedActorUri: actorUri,
+                });
             }
             catch (err) {
                 logger.error('Failed to enqueue inbox activity — processing inline:', err);
@@ -142,7 +145,9 @@ function createActorRouter(config) {
                     }
                     catch (err) {
                         logger.warn('[Federation] follow-collection summary total lookup failed', {
-                            username, direction, error: err,
+                            username,
+                            direction,
+                            error: err,
                         });
                     }
                 }
@@ -169,7 +174,10 @@ function createActorRouter(config) {
                 // Fail-soft: never 500 the whole collection on an Oxy graph hiccup — serve
                 // an empty page against the best-known total rather than crashing.
                 logger.warn('[Federation] follow-collection Oxy graph list failed, serving empty page', {
-                    username, direction, offset, error: err,
+                    username,
+                    direction,
+                    offset,
+                    error: err,
                 });
             }
             const orderedItems = members

package/dist/cjs/node/delivery.js

@@ -192,7 +192,12 @@ function createDeliveryService(config) {
                 return false;
             });
             if (!enqueued) {
-                durableFallback.push({ activityJson: activity, targetInbox: inbox, senderOxyUserId, nextAttemptAt: now });
+                durableFallback.push({
+                    activityJson: activity,
+                    targetInbox: inbox,
+                    senderOxyUserId,
+                    nextAttemptAt: now,
+                });
             }
         }
         if (durableFallback.length > 0) {
@@ -243,9 +248,7 @@ function createDeliveryService(config) {
         const localActorUri = urls.actor(localUsername);
         // Use the actor _id when known, otherwise a stable hash of the URI so the
         // activity ID is deterministic across retries before the actor is cached.
-        const activityIdSuffix = cached?._id
-            ? String(cached._id)
-            : encodeURIComponent(canonicalUri);
+        const activityIdSuffix = cached?._id ? String(cached._id) : encodeURIComponent(canonicalUri);
         const activityId = `${localActorUri}/follows/${activityIdSuffix}`;
         // Create or update the follow record
         await config.follows.upsertOutboundPending(localOxyUserId, canonicalUri, activityId);

package/dist/cjs/node/inboundDispatch.js

@@ -222,9 +222,10 @@ function createInboundDispatcher(config) {
         }
         else if (object.type === 'Follow') {
             const followActivityId = object.id;
-            updated = typeof followActivityId === 'string' && followActivityId.length > 0
-                ? await config.follows.markOutboundAcceptedByActivityId(actorUri, followActivityId)
-                : await config.follows.markOutboundAcceptedAnyPending(actorUri);
+            updated =
+                typeof followActivityId === 'string' && followActivityId.length > 0
+                    ? await config.follows.markOutboundAcceptedByActivityId(actorUri, followActivityId)
+                    : await config.follows.markOutboundAcceptedAnyPending(actorUri);
         }
         if (updated) {
             logger.debug(`Follow accepted by ${actorUri}`);

package/dist/cjs/node/index.js

@@ -18,9 +18,15 @@
  * actor + inbox + follow-graph Express routers.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createActorRouter = exports.createWebfingerRouter = exports.ActorResolutionPendingError = exports.createInboundDispatcher = exports.createDeliveryService = exports.ActorResolver = exports.createActorResolver = exports.createIdentityBridge = exports.createSignedFetch = void 0;
+exports.createActorRouter = exports.createWebfingerRouter = exports.ActorResolutionPendingError = exports.createInboundDispatcher = exports.createDeliveryService = exports.ActorResolver = exports.createActorResolver = exports.createIdentityBridge = exports.createTcoLinkExpander = exports.createSignedFetch = void 0;
 var signedFetch_1 = require("./signedFetch");
 Object.defineProperty(exports, "createSignedFetch", { enumerable: true, get: function () { return signedFetch_1.createSignedFetch; } });
+/**
+ * X's `t.co` wrapper unwrapped into the link the author posted, over the same
+ * injected single-hop transport — for bridged X bios and posts.
+ */
+var tcoLinks_1 = require("./tcoLinks");
+Object.defineProperty(exports, "createTcoLinkExpander", { enumerable: true, get: function () { return tcoLinks_1.createTcoLinkExpander; } });
 /**
  * The actor↔Oxy-user identity bridge — the default implementation of the
  * `PUT /users/resolve` + actor-gone archive/delete seam over an injected

package/dist/cjs/node/tcoLinks.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * Expanding X's `t.co` link wrapper back into the link the author posted.
+ *
+ * X rewrites EVERY link in a post or bio into `https://t.co/<id>`, and a bridge
+ * that mirrors an X account (bird.makeup, mastox) republishes that text as it
+ * is: the actor `summary` and the Note `content` carry only the wrapper. The
+ * author never wrote `t.co`; it is X's click tracker standing in for their link,
+ * and an X API client never shows it because it reads the expansion beside it.
+ * The bridges drop that expansion, so the only place left to recover it is the
+ * wrapper's own redirect.
+ *
+ * Only `t.co` is unwrapped, and only ONE hop. A `bit.ly` the author chose is
+ * their link and stays; so does wherever their link redirects next. What is
+ * replaced is exactly X's wrapper, by exactly the URL it names.
+ *
+ * The transport is injected — the same SSRF-safe, IP-pinned single-hop fetch
+ * {@link createSignedFetch} takes — so each backend keeps its own network
+ * contract. A link that does not resolve (timeout, 404, a malformed or
+ * self-referencing `Location`) is left as `t.co`: still a working link, never a
+ * broken one.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTcoLinkExpander = createTcoLinkExpander;
+/**
+ * A `t.co` link in plain text. X ids are alphanumeric; the lookahead stops a
+ * longer token (`t.co/abc/def`, `t.co/abcé`) from being half-replaced.
+ */
+const TCO_LINK = /\bhttps?:\/\/t\.co\/([A-Za-z0-9]+)(?![\w/])/gi;
+const REDIRECT_STATUS_CODES = new Set([301, 302, 303, 307, 308]);
+/** A link that has not answered by then is kept as `t.co`. */
+const TCO_TIMEOUT_MS = 5000;
+/** Bounds the requests one text can cost; the rest keep their wrapper. */
+const MAX_LINKS_PER_TEXT = 10;
+/** The `t.co` ids in `text`, in order of first appearance. */
+function findTcoLinkIds(text) {
+    return [...new Set(Array.from(text.matchAll(TCO_LINK), (match) => match[1]))];
+}
+/** The redirect target, if it is an http(s) URL that is not another `t.co` wrapper. */
+function readTarget(response, from) {
+    if (!REDIRECT_STATUS_CODES.has(response.status))
+        return null;
+    const location = response.headers.get('location');
+    if (!location)
+        return null;
+    let target;
+    try {
+        target = new URL(location, from);
+    }
+    catch {
+        return null;
+    }
+    if (target.protocol !== 'https:' && target.protocol !== 'http:')
+        return null;
+    if (target.hostname.toLowerCase() === 't.co')
+        return null;
+    return target.href;
+}
+function createTcoLinkExpander(config) {
+    const { cache } = config;
+    async function resolve(id) {
+        const cached = await cache?.get(id).catch(() => null);
+        if (cached)
+            return cached;
+        const from = `https://t.co/${id}`;
+        let target;
+        try {
+            const response = await config.fetchSingleHop(from, {
+                headers: { Accept: '*/*', 'User-Agent': config.userAgent },
+                signal: AbortSignal.timeout(TCO_TIMEOUT_MS),
+                headersTimeoutMs: TCO_TIMEOUT_MS,
+            });
+            target = readTarget(response, from);
+            await response.body?.cancel().catch(() => undefined);
+        }
+        catch {
+            return null;
+        }
+        if (target)
+            await cache?.set(id, target).catch(() => undefined);
+        return target;
+    }
+    return async function expandTcoLinks(text) {
+        const ids = findTcoLinkIds(text).slice(0, MAX_LINKS_PER_TEXT);
+        if (ids.length === 0)
+            return text;
+        const targets = new Map();
+        await Promise.all(ids.map(async (id) => {
+            const target = await resolve(id);
+            if (target)
+                targets.set(id, target);
+        }));
+        if (targets.size === 0)
+            return text;
+        return text.replace(TCO_LINK, (whole, id) => targets.get(id) ?? whole);
+    };
+}