@rmdes/indiekit-endpoint-activitypub 1.1.9 → 1.1.11

package/assets/reader.css

@@ -303,6 +303,7 @@
 
 .ap-card__content .h-card a,
 .ap-card__content a.u-url.mention {
+  display: inline;
   color: var(--color-on-offset);
   text-decoration: none;
   white-space: nowrap;
@@ -321,6 +322,7 @@
 
 /* Hashtag mentions — keep inline, subtle styling */
 .ap-card__content a.mention.hashtag {
+  display: inline;
   color: var(--color-on-offset);
   text-decoration: none;
   white-space: nowrap;

package/lib/controllers/compose.js

@@ -3,7 +3,6 @@
  */
 
 import { Temporal } from "@js-temporal/polyfill";
-import { getTimelineItem } from "../storage/timeline.js";
 import { getToken, validateToken } from "../csrf.js";
 import { sanitizeContent } from "../timeline-store.js";
 
@@ -62,7 +61,12 @@ export function composeController(mountPath, plugin) {
         };
 
         // Try to find the post in our timeline first
-        replyContext = await getTimelineItem(collections, replyTo);
+        // Note: Timeline stores uid (canonical AP URL) and url (display URL).
+        // The card link passes the display URL, so search both fields.
+        const ap_timeline = collections.ap_timeline;
+        replyContext = ap_timeline
+          ? await ap_timeline.findOne({ $or: [{ uid: replyTo }, { url: replyTo }] })
+          : null;
 
         // If not in timeline, try to look up remotely
         if (!replyContext && plugin._federation) {
@@ -110,8 +114,11 @@ export function composeController(mountPath, plugin) {
                 author: { name: authorName, url: authorUrl },
               };
             }
-          } catch {
-            // Could not resolve — form still works without context
+          } catch (error) {
+            console.warn(
+              `[ActivityPub] lookupObject failed for ${replyTo} (compose):`,
+              error.message,
+            );
           }
         }
       }

package/lib/controllers/interactions-boost.js

@@ -82,8 +82,11 @@ export function boostController(mountPath, plugin) {
             );
           }
         }
-      } catch {
-        // Non-critical — followers still received the boost
+      } catch (error) {
+        console.warn(
+          `[ActivityPub] lookupObject failed for ${url} (boost):`,
+          error.message,
+        );
       }
 
       // Track the interaction

package/lib/controllers/interactions-like.js

@@ -4,7 +4,6 @@
  */
 
 import { validateToken } from "../csrf.js";
-import { getTimelineItem } from "../storage/timeline.js";
 
 /**
  * POST /admin/reader/like — send a Like activity to the post author.
@@ -61,17 +60,22 @@ export function likeController(mountPath, plugin) {
           const author = await remoteObject.getAttributedTo({ documentLoader });
           recipient = Array.isArray(author) ? author[0] : author;
         }
-      } catch {
-        // Network failure — fall through to timeline
+      } catch (error) {
+        console.warn(
+          `[ActivityPub] lookupObject failed for ${url}:`,
+          error.message,
+        );
       }
 
       // Strategy 2: Use author URL from our timeline (already stored)
+      // Note: Timeline items store both uid (canonical AP URL) and url (display URL).
+      // The card passes the display URL, so we search by both fields.
       if (!recipient) {
         const { application } = request.app.locals;
-        const collections = {
-          ap_timeline: application?.collections?.get("ap_timeline"),
-        };
-        const timelineItem = await getTimelineItem(collections, url);
+        const ap_timeline = application?.collections?.get("ap_timeline");
+        const timelineItem = ap_timeline
+          ? await ap_timeline.findOne({ $or: [{ uid: url }, { url }] })
+          : null;
         const authorUrl = timelineItem?.author?.url;
 
         if (authorUrl) {
@@ -210,15 +214,18 @@ export function unlikeController(mountPath, plugin) {
           const author = await remoteObject.getAttributedTo({ documentLoader });
           recipient = Array.isArray(author) ? author[0] : author;
         }
-      } catch {
-        // Network failure
+      } catch (error) {
+        console.warn(
+          `[ActivityPub] lookupObject failed for ${url} (unlike):`,
+          error.message,
+        );
       }
 
       if (!recipient) {
-        const collections = {
-          ap_timeline: application?.collections?.get("ap_timeline"),
-        };
-        const timelineItem = await getTimelineItem(collections, url);
+        const ap_timeline = application?.collections?.get("ap_timeline");
+        const timelineItem = ap_timeline
+          ? await ap_timeline.findOne({ $or: [{ uid: url }, { url }] })
+          : null;
         const authorUrl = timelineItem?.author?.url;
 
         if (authorUrl) {

package/lib/controllers/reader.js

@@ -107,26 +107,47 @@ export function readerController(mountPath) {
       const unreadCount = await getUnreadNotificationCount(collections);
 
       // Get interaction state for liked/boosted indicators
+      // Interactions are keyed by canonical AP uid (new) or display url (legacy).
+      // Query by both, normalize map keys to uid for template lookup.
       const interactionsCol =
         application?.collections?.get("ap_interactions");
       const interactionMap = {};
 
       if (interactionsCol) {
-        const itemUrls = items
-          .map((item) => item.url || item.originalUrl)
-          .filter(Boolean);
+        const lookupUrls = new Set();
+        const objectUrlToUid = new Map();
 
-        if (itemUrls.length > 0) {
+        for (const item of items) {
+          const uid = item.uid;
+          const displayUrl = item.url || item.originalUrl;
+
+          if (uid) {
+            lookupUrls.add(uid);
+            objectUrlToUid.set(uid, uid);
+          }
+
+          if (displayUrl) {
+            lookupUrls.add(displayUrl);
+            objectUrlToUid.set(displayUrl, uid || displayUrl);
+          }
+        }
+
+        if (lookupUrls.size > 0) {
           const interactions = await interactionsCol
-            .find({ objectUrl: { $in: itemUrls } })
+            .find({ objectUrl: { $in: [...lookupUrls] } })
             .toArray();
 
           for (const interaction of interactions) {
-            if (!interactionMap[interaction.objectUrl]) {
-              interactionMap[interaction.objectUrl] = {};
+            // Normalize to uid so template can look up by itemUid
+            const key =
+              objectUrlToUid.get(interaction.objectUrl) ||
+              interaction.objectUrl;
+
+            if (!interactionMap[key]) {
+              interactionMap[key] = {};
             }
 
-            interactionMap[interaction.objectUrl][interaction.type] = true;
+            interactionMap[key][interaction.type] = true;
           }
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-activitypub",
-  "version": "1.1.9",
+  "version": "1.1.11",
   "description": "ActivityPub federation endpoint for Indiekit via Fedify. Adds full fediverse support: actor, inbox, outbox, followers, following, syndication, and Mastodon migration.",
   "keywords": [
     "indiekit",

package/views/partials/ap-item-card.njk

@@ -97,11 +97,13 @@
   {% endif %}
 
   {# Interaction buttons — Alpine.js for optimistic updates #}
-  {# Dynamic data moved to data-* attributes to prevent XSS from inline interpolation #}
+  {# Use canonical AP uid for interactions (Fedify lookupObject), display url for links #}
   {% set itemUrl = item.url or item.originalUrl %}
-  {% set isLiked = interactionMap[itemUrl].like if interactionMap[itemUrl] else false %}
-  {% set isBoosted = interactionMap[itemUrl].boost if interactionMap[itemUrl] else false %}
+  {% set itemUid = item.uid or item.url or item.originalUrl %}
+  {% set isLiked = interactionMap[itemUid].like if interactionMap[itemUid] else false %}
+  {% set isBoosted = interactionMap[itemUid].boost if interactionMap[itemUid] else false %}
   <footer class="ap-card__actions"
+    data-item-uid="{{ itemUid }}"
     data-item-url="{{ itemUrl }}"
     data-csrf-token="{{ csrfToken }}"
     data-mount-path="{{ mountPath }}"
@@ -115,7 +117,7 @@
         this.loading = true;
         this.error = '';
         const el = this.$root;
-        const itemUrl = el.dataset.itemUrl;
+        const itemUid = el.dataset.itemUid;
         const csrfToken = el.dataset.csrfToken;
         const basePath = el.dataset.mountPath;
         const prev = { liked: this.liked, boosted: this.boosted };
@@ -130,7 +132,7 @@
               'Content-Type': 'application/json',
               'X-CSRF-Token': csrfToken
             },
-            body: JSON.stringify({ url: itemUrl })
+            body: JSON.stringify({ url: itemUid })
           });
           const data = await res.json();
           if (!data.success) {
@@ -147,7 +149,7 @@
         if (this.error) setTimeout(() => this.error = '', 3000);
       }
     }">
-    <a href="{{ mountPath }}/admin/reader/compose?replyTo={{ itemUrl | urlencode }}"
+    <a href="{{ mountPath }}/admin/reader/compose?replyTo={{ itemUid | urlencode }}"
        class="ap-card__action ap-card__action--reply"
        title="{{ __('activitypub.reader.actions.reply') }}">
       ↩ {{ __("activitypub.reader.actions.reply") }}