@rmdes/indiekit-endpoint-activitypub 3.10.0 → 3.10.2

package/README.md

@@ -110,12 +110,33 @@ ActivityPub federation endpoint for [Indiekit](https://getindiekit.com), built o
 - Federation management page with moderation overview (blocked servers, blocked accounts, muted)
 
 **Standards Compliance**
-- FEP-5feb: Search Indexing Consent — actor advertises `indexable` and `discoverable` properties
-- FEP-f1d5/0151: Enhanced NodeInfo 2.1 — rich metadata including software repository, node name, staff accounts
-- FEP-4f05: Soft Delete with Tombstone — deleted posts return 410 with Tombstone JSON-LD including `formerType` and timestamps
-- FEP-3b86: Activity Intents — WebFinger links for Follow, Create, Like, Announce intents with authorize_interaction routing
-- FEP-8fcf: Collection Synchronization — outbound follower digest headers via Fedify `syncCollection`
-- FEP-044f: Quote Posts — rendered as embedded cards (via Fedify's `quoteUrl` support)
+
+Core protocols and Fediverse Enhancement Proposals (FEPs) supported:
+
+| Standard | Name | Status | Provider |
+|----------|------|--------|----------|
+| [ActivityPub](https://www.w3.org/TR/activitypub/) | W3C ActivityPub | Full (server-to-server) | Fedify 2.1 |
+| [ActivityStreams 2.0](https://www.w3.org/TR/activitystreams-core/) | W3C Activity Streams | Full | Fedify 2.1 |
+| [HTTP Signatures](https://datatracker.ietf.org/doc/html/draft-cavage-http-signatures) | draft-cavage HTTP Signatures | Full | Fedify 2.1 |
+| [RFC 9421](https://www.rfc-editor.org/rfc/rfc9421) | HTTP Message Signatures | Full (with Accept-Signature negotiation) | Fedify 2.1 |
+| [WebFinger](https://www.rfc-editor.org/rfc/rfc7033) | RFC 7033 WebFinger | Full | Fedify 2.1 |
+| [NodeInfo 2.1](https://nodeinfo.diaspora.software/) | Server metadata discovery | Full (enriched) | Plugin |
+| [FEP-8b32](https://w3id.org/fep/8b32) | Object Integrity Proofs (Ed25519) | Full | Fedify 2.1 |
+| [FEP-521a](https://w3id.org/fep/521a) | Multiple key pairs (Multikey) | Full | Fedify 2.1 |
+| [FEP-fe34](https://w3id.org/fep/fe34) | Origin-based security model | Full | Fedify 2.1 + Plugin |
+| [FEP-8fcf](https://w3id.org/fep/8fcf) | Followers collection synchronization | Outbound only | Fedify 2.1 |
+| [FEP-5feb](https://w3id.org/fep/5feb) | Search indexing consent | Full (`indexable`, `discoverable`) | Plugin |
+| [FEP-f1d5](https://w3id.org/fep/f1d5) | Enhanced NodeInfo 2.1 | Full (metadata, staff accounts) | Plugin |
+| [FEP-4f05](https://w3id.org/fep/4f05) | Soft delete with Tombstone | Full (410 + Tombstone JSON-LD) | Plugin |
+| [FEP-3b86](https://w3id.org/fep/3b86) | Activity Intents | Full (Follow, Create, Like, Announce) | Plugin |
+| [FEP-044f](https://w3id.org/fep/044f) | Quote posts | Full (Mastodon, Misskey, Fedibird formats) | Fedify 2.1 + Plugin |
+| [FEP-c0e0](https://w3id.org/fep/c0e0) | Emoji reactions (EmojiReact) | Vocab support (no UI) | Fedify 2.1 |
+| [FEP-5711](https://w3id.org/fep/5711) | Conversation threads | Vocab support | Fedify 2.1 |
+| [Linked Data Signatures](https://w3c-dvcg.github.io/ld-signatures/) | RsaSignature2017 (legacy) | Full (outbound signing) | Fedify 2.1 |
+
+**Status key:** *Full* = complete implementation, *Outbound only* = sending side only, *Vocab support* = types available but no dedicated UI/logic.
+
+**Provider key:** *Fedify 2.1* = handled by the Fedify framework, *Plugin* = implemented in this plugin, *Fedify 2.1 + Plugin* = framework provides primitives, plugin wires them together.
 
 ## Requirements
 

package/lib/syndicator.js

@@ -8,6 +8,7 @@ import {
 } from "./jf2-to-as2.js";
 import { lookupWithSecurity } from "./lookup-helpers.js";
 import { logActivity } from "./activity-log.js";
+import { addTimelineItem } from "./storage/timeline.js";
 
 /**
  * Create the ActivityPub syndicator object.
@@ -219,6 +220,54 @@ export function createSyndicator(plugin) {
           `[ActivityPub] Syndication queued: ${typeName} for ${properties.url}${replyNote}`,
         );
 
+        // Add own post to ap_timeline so it appears in Mastodon Client API
+        // timelines (Phanpy/Moshidon). Uses $setOnInsert — idempotent.
+        try {
+          const profile = await plugin._collections.ap_profile?.findOne({});
+          const content = buildTimelineContent(properties);
+          const timelineItem = {
+            uid: properties.url,
+            url: properties.url,
+            type: mapPostType(properties["post-type"]),
+            content,
+            author: {
+              name: profile?.name || handle,
+              url: profile?.url || plugin._publicationUrl,
+              photo: profile?.icon || "",
+              handle: `@${handle}`,
+              emojis: [],
+              bot: false,
+            },
+            published: properties.published || new Date().toISOString(),
+            createdAt: new Date().toISOString(),
+            visibility: properties.visibility || "public",
+            sensitive: properties.sensitive === "true",
+            category: Array.isArray(properties.category)
+              ? properties.category
+              : properties.category ? [properties.category] : [],
+            photo: normalizeMedia(properties.photo, plugin._publicationUrl),
+            video: normalizeMedia(properties.video, plugin._publicationUrl),
+            audio: normalizeMedia(properties.audio, plugin._publicationUrl),
+            counts: { replies: 0, boosts: 0, likes: 0 },
+          };
+          if (properties.name) timelineItem.name = properties.name;
+          if (properties.summary) timelineItem.summary = properties.summary;
+          if (properties["content-warning"]) {
+            timelineItem.summary = properties["content-warning"];
+            timelineItem.sensitive = true;
+          }
+          if (properties["in-reply-to"]) {
+            timelineItem.inReplyTo = Array.isArray(properties["in-reply-to"])
+              ? properties["in-reply-to"][0]
+              : properties["in-reply-to"];
+          }
+          await addTimelineItem(plugin._collections, timelineItem);
+        } catch (tlError) {
+          console.warn(
+            `[ActivityPub] Failed to add own post to timeline: ${tlError.message}`,
+          );
+        }
+
         return properties.url || undefined;
       } catch (error) {
         console.error("[ActivityPub] Syndication failed:", error.message);
@@ -237,3 +286,73 @@ export function createSyndicator(plugin) {
     update: async (properties) => plugin.update(properties),
   };
 }
+
+// ─── Timeline helpers ───────────────────────────────────────────────────────
+
+/**
+ * Build content from JF2 properties. Synthesizes content for interaction
+ * types (likes, bookmarks, reposts) that have no body text.
+ */
+function buildTimelineContent(properties) {
+  const content = properties.content;
+  if (content) {
+    if (typeof content === "string") return { text: content, html: `<p>${content}</p>` };
+    if (content.text || content.html) {
+      return {
+        text: content.text || content.value || "",
+        html: content.html || content.text || content.value || "",
+      };
+    }
+  }
+
+  // Synthesize for interaction types
+  const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+  const likeOf = properties["like-of"];
+  if (likeOf) {
+    return {
+      text: `Liked: ${likeOf}`,
+      html: `<p>Liked: <a href="${esc(likeOf)}">${esc(likeOf)}</a></p>`,
+    };
+  }
+  const bookmarkOf = properties["bookmark-of"];
+  if (bookmarkOf) {
+    const label = properties.name || bookmarkOf;
+    return {
+      text: `Bookmarked: ${label}`,
+      html: `<p>Bookmarked: <a href="${esc(bookmarkOf)}">${esc(label)}</a></p>`,
+    };
+  }
+  const repostOf = properties["repost-of"];
+  if (repostOf) {
+    const label = properties.name || repostOf;
+    return {
+      text: `Reposted: ${label}`,
+      html: `<p>Reposted: <a href="${esc(repostOf)}">${esc(label)}</a></p>`,
+    };
+  }
+  if (properties.name) {
+    return { text: properties.name, html: `<p>${esc(properties.name)}</p>` };
+  }
+  return { text: "", html: "" };
+}
+
+function mapPostType(postType) {
+  if (postType === "article") return "article";
+  if (postType === "repost") return "boost";
+  return "note";
+}
+
+function normalizeMedia(value, siteUrl) {
+  if (!value) return [];
+  const base = siteUrl?.replace(/\/$/, "") || "";
+  const arr = Array.isArray(value) ? value : [value];
+  return arr.map((item) => {
+    if (typeof item === "string") {
+      return item.startsWith("http") ? item : `${base}/${item.replace(/^\//, "")}`;
+    }
+    if (item?.url && !item.url.startsWith("http")) {
+      return { ...item, url: `${base}/${item.url.replace(/^\//, "")}` };
+    }
+    return item;
+  }).filter(Boolean);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-activitypub",
-  "version": "3.10.0",
+  "version": "3.10.2",
   "description": "ActivityPub federation endpoint for Indiekit via Fedify. Adds full fediverse support: actor, inbox, outbox, followers, following, syndication, and Mastodon migration.",
   "keywords": [
     "indiekit",