@rmdes/indiekit-endpoint-activitypub 1.0.28 → 1.1.1

package/lib/controllers/interactions-boost.js

@@ -0,0 +1,208 @@
+/**
+ * Boost/Unboost interaction controllers.
+ * Sends Announce and Undo(Announce) activities via Fedify.
+ */
+
+import { validateToken } from "../csrf.js";
+
+/**
+ * POST /admin/reader/boost — send an Announce activity to followers.
+ */
+export function boostController(mountPath, plugin) {
+  return async (request, response, next) => {
+    try {
+      if (!validateToken(request)) {
+        return response.status(403).json({
+          success: false,
+          error: "Invalid CSRF token",
+        });
+      }
+
+      const { url } = request.body;
+
+      if (!url) {
+        return response.status(400).json({
+          success: false,
+          error: "Missing post URL",
+        });
+      }
+
+      if (!plugin._federation) {
+        return response.status(503).json({
+          success: false,
+          error: "Federation not initialized",
+        });
+      }
+
+      const { Announce } = await import("@fedify/fedify");
+      const handle = plugin.options.actor.handle;
+      const ctx = plugin._federation.createContext(
+        new URL(plugin._publicationUrl),
+        { handle, publicationUrl: plugin._publicationUrl },
+      );
+
+      const activityId = `urn:uuid:${crypto.randomUUID()}`;
+
+      // Construct Announce activity
+      const announce = new Announce({
+        id: new URL(activityId),
+        actor: ctx.getActorUri(handle),
+        object: new URL(url),
+      });
+
+      // Send to followers via shared inbox
+      await ctx.sendActivity({ identifier: handle }, "followers", announce, {
+        preferSharedInbox: true,
+        syncCollection: true,
+        orderingKey: url,
+      });
+
+      // Also send to the original post author
+      try {
+        const remoteObject = await ctx.lookupObject(new URL(url));
+
+        if (
+          remoteObject &&
+          typeof remoteObject.getAttributedTo === "function"
+        ) {
+          const author = await remoteObject.getAttributedTo();
+          const recipient = Array.isArray(author) ? author[0] : author;
+
+          if (recipient) {
+            await ctx.sendActivity(
+              { identifier: handle },
+              recipient,
+              announce,
+              { orderingKey: url },
+            );
+          }
+        }
+      } catch {
+        // Non-critical — followers still received the boost
+      }
+
+      // Track the interaction
+      const { application } = request.app.locals;
+      const interactions = application?.collections?.get("ap_interactions");
+
+      if (interactions) {
+        await interactions.updateOne(
+          { objectUrl: url, type: "boost" },
+          {
+            $set: {
+              objectUrl: url,
+              type: "boost",
+              activityId,
+              createdAt: new Date().toISOString(),
+            },
+          },
+          { upsert: true },
+        );
+      }
+
+      console.info(`[ActivityPub] Sent Announce (boost) for ${url}`);
+
+      return response.json({
+        success: true,
+        type: "boost",
+        objectUrl: url,
+      });
+    } catch (error) {
+      console.error("[ActivityPub] Boost failed:", error.message);
+      return response.status(500).json({
+        success: false,
+        error: "Boost failed. Please try again later.",
+      });
+    }
+  };
+}
+
+/**
+ * POST /admin/reader/unboost — send an Undo(Announce) to followers.
+ */
+export function unboostController(mountPath, plugin) {
+  return async (request, response, next) => {
+    try {
+      if (!validateToken(request)) {
+        return response.status(403).json({
+          success: false,
+          error: "Invalid CSRF token",
+        });
+      }
+
+      const { url } = request.body;
+
+      if (!url) {
+        return response.status(400).json({
+          success: false,
+          error: "Missing post URL",
+        });
+      }
+
+      if (!plugin._federation) {
+        return response.status(503).json({
+          success: false,
+          error: "Federation not initialized",
+        });
+      }
+
+      const { application } = request.app.locals;
+      const interactions = application?.collections?.get("ap_interactions");
+
+      const existing = interactions
+        ? await interactions.findOne({ objectUrl: url, type: "boost" })
+        : null;
+
+      if (!existing) {
+        return response.status(404).json({
+          success: false,
+          error: "No boost found for this post",
+        });
+      }
+
+      const { Announce, Undo } = await import("@fedify/fedify");
+      const handle = plugin.options.actor.handle;
+      const ctx = plugin._federation.createContext(
+        new URL(plugin._publicationUrl),
+        { handle, publicationUrl: plugin._publicationUrl },
+      );
+
+      // Construct Undo(Announce)
+      const announce = new Announce({
+        id: existing.activityId ? new URL(existing.activityId) : undefined,
+        actor: ctx.getActorUri(handle),
+        object: new URL(url),
+      });
+
+      const undo = new Undo({
+        actor: ctx.getActorUri(handle),
+        object: announce,
+      });
+
+      // Send to followers
+      await ctx.sendActivity({ identifier: handle }, "followers", undo, {
+        preferSharedInbox: true,
+        orderingKey: url,
+      });
+
+      // Remove the interaction record
+      if (interactions) {
+        await interactions.deleteOne({ objectUrl: url, type: "boost" });
+      }
+
+      console.info(`[ActivityPub] Sent Undo(Announce) for ${url}`);
+
+      return response.json({
+        success: true,
+        type: "unboost",
+        objectUrl: url,
+      });
+    } catch (error) {
+      console.error("[ActivityPub] Unboost failed:", error.message);
+      return response.status(500).json({
+        success: false,
+        error: "Unboost failed. Please try again later.",
+      });
+    }
+  };
+}

package/lib/controllers/interactions-like.js

@@ -0,0 +1,231 @@
+/**
+ * Like/Unlike interaction controllers.
+ * Sends Like and Undo(Like) activities via Fedify.
+ */
+
+import { validateToken } from "../csrf.js";
+
+/**
+ * POST /admin/reader/like — send a Like activity to the post author.
+ * @param {string} mountPath - Plugin mount path
+ * @param {object} plugin - ActivityPub plugin instance (for federation access)
+ */
+export function likeController(mountPath, plugin) {
+  return async (request, response, next) => {
+    try {
+      if (!validateToken(request)) {
+        return response.status(403).json({
+          success: false,
+          error: "Invalid CSRF token",
+        });
+      }
+
+      const { url } = request.body;
+
+      if (!url) {
+        return response.status(400).json({
+          success: false,
+          error: "Missing post URL",
+        });
+      }
+
+      if (!plugin._federation) {
+        return response.status(503).json({
+          success: false,
+          error: "Federation not initialized",
+        });
+      }
+
+      const { Like } = await import("@fedify/fedify");
+      const handle = plugin.options.actor.handle;
+      const ctx = plugin._federation.createContext(
+        new URL(plugin._publicationUrl),
+        { handle, publicationUrl: plugin._publicationUrl },
+      );
+
+      // Look up the remote post to find its author
+      const remoteObject = await ctx.lookupObject(new URL(url));
+
+      if (!remoteObject) {
+        return response.status(404).json({
+          success: false,
+          error: "Could not resolve remote post",
+        });
+      }
+
+      // Get the post author for delivery
+      let recipient = null;
+
+      if (typeof remoteObject.getAttributedTo === "function") {
+        const author = await remoteObject.getAttributedTo();
+        recipient = Array.isArray(author) ? author[0] : author;
+      }
+
+      if (!recipient) {
+        return response.status(404).json({
+          success: false,
+          error: "Could not resolve post author",
+        });
+      }
+
+      // Generate a unique activity ID
+      const activityId = `urn:uuid:${crypto.randomUUID()}`;
+
+      // Construct and send Like activity
+      const like = new Like({
+        id: new URL(activityId),
+        actor: ctx.getActorUri(handle),
+        object: new URL(url),
+      });
+
+      await ctx.sendActivity({ identifier: handle }, recipient, like, {
+        orderingKey: url,
+      });
+
+      // Track the interaction for undo
+      const { application } = request.app.locals;
+      const interactions = application?.collections?.get("ap_interactions");
+
+      if (interactions) {
+        await interactions.updateOne(
+          { objectUrl: url, type: "like" },
+          {
+            $set: {
+              objectUrl: url,
+              type: "like",
+              activityId,
+              recipientUrl: recipient.id?.href || "",
+              createdAt: new Date().toISOString(),
+            },
+          },
+          { upsert: true },
+        );
+      }
+
+      console.info(`[ActivityPub] Sent Like for ${url}`);
+
+      return response.json({
+        success: true,
+        type: "like",
+        objectUrl: url,
+      });
+    } catch (error) {
+      console.error("[ActivityPub] Like failed:", error.message);
+      return response.status(500).json({
+        success: false,
+        error: "Like failed. Please try again later.",
+      });
+    }
+  };
+}
+
+/**
+ * POST /admin/reader/unlike — send an Undo(Like) activity.
+ */
+export function unlikeController(mountPath, plugin) {
+  return async (request, response, next) => {
+    try {
+      if (!validateToken(request)) {
+        return response.status(403).json({
+          success: false,
+          error: "Invalid CSRF token",
+        });
+      }
+
+      const { url } = request.body;
+
+      if (!url) {
+        return response.status(400).json({
+          success: false,
+          error: "Missing post URL",
+        });
+      }
+
+      if (!plugin._federation) {
+        return response.status(503).json({
+          success: false,
+          error: "Federation not initialized",
+        });
+      }
+
+      const { application } = request.app.locals;
+      const interactions = application?.collections?.get("ap_interactions");
+
+      // Look up the original interaction to get the activity ID
+      const existing = interactions
+        ? await interactions.findOne({ objectUrl: url, type: "like" })
+        : null;
+
+      if (!existing) {
+        return response.status(404).json({
+          success: false,
+          error: "No like found for this post",
+        });
+      }
+
+      const { Like, Undo } = await import("@fedify/fedify");
+      const handle = plugin.options.actor.handle;
+      const ctx = plugin._federation.createContext(
+        new URL(plugin._publicationUrl),
+        { handle, publicationUrl: plugin._publicationUrl },
+      );
+
+      // Resolve the recipient
+      const remoteObject = await ctx.lookupObject(new URL(url));
+      let recipient = null;
+
+      if (remoteObject && typeof remoteObject.getAttributedTo === "function") {
+        const author = await remoteObject.getAttributedTo();
+        recipient = Array.isArray(author) ? author[0] : author;
+      }
+
+      if (!recipient) {
+        // Clean up the local record even if we can't send Undo
+        if (interactions) {
+          await interactions.deleteOne({ objectUrl: url, type: "like" });
+        }
+
+        return response.json({
+          success: true,
+          type: "unlike",
+          objectUrl: url,
+        });
+      }
+
+      // Construct Undo(Like)
+      const like = new Like({
+        id: existing.activityId ? new URL(existing.activityId) : undefined,
+        actor: ctx.getActorUri(handle),
+        object: new URL(url),
+      });
+
+      const undo = new Undo({
+        actor: ctx.getActorUri(handle),
+        object: like,
+      });
+
+      await ctx.sendActivity({ identifier: handle }, recipient, undo, {
+        orderingKey: url,
+      });
+
+      // Remove the interaction record
+      if (interactions) {
+        await interactions.deleteOne({ objectUrl: url, type: "like" });
+      }
+
+      console.info(`[ActivityPub] Sent Undo(Like) for ${url}`);
+
+      return response.json({
+        success: true,
+        type: "unlike",
+        objectUrl: url,
+      });
+    } catch (error) {
+      console.error("[ActivityPub] Unlike failed:", error.message);
+      return response.status(500).json({
+        success: false,
+        error: "Unlike failed. Please try again later.",
+      });
+    }
+  };
+}

package/lib/controllers/interactions.js

@@ -0,0 +1,7 @@
+/**
+ * Interaction controllers — Like, Unlike, Boost, Unboost.
+ * Re-exports from split modules for backward compatibility with index.js imports.
+ */
+
+export { likeController, unlikeController } from "./interactions-like.js";
+export { boostController, unboostController } from "./interactions-boost.js";