@rmdes/indiekit-endpoint-webmention-io 1.0.8 → 1.1.0

package/index.js

@@ -1,13 +1,15 @@
-import express from "express";
-import { fileURLToPath } from "node:url";
 import path from "node:path";
+import { fileURLToPath } from "node:url";
 
-import { dashboardController } from "./lib/controllers/dashboard.js";
+import { waitForReady } from "@rmdes/indiekit-startup-gate";
+import express from "express";
+
+import { WEBMENTION_BLOCKS } from "./lib/blocks.js";
+import { apiController } from "./lib/controllers/api.js";
 import { blocklistController } from "./lib/controllers/blocklist.js";
+import { dashboardController } from "./lib/controllers/dashboard.js";
 import { syncController } from "./lib/controllers/sync-controller.js";
-import { apiController } from "./lib/controllers/api.js";
 import { startSync, stopSync } from "./lib/sync.js";
-import { waitForReady } from "@rmdes/indiekit-startup-gate";
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
@@ -21,6 +23,8 @@ const defaults = {
 };
 
 export default class WebmentionEndpoint {
+  _stopGate;
+
   name = "Webmention moderation endpoint";
 
   constructor(options = {}) {
@@ -44,6 +48,10 @@ export default class WebmentionEndpoint {
     };
   }
 
+  get blocks() {
+    return WEBMENTION_BLOCKS;
+  }
+
   /**
    * Protected routes (require authentication)
    * Admin dashboard, moderation, sync controls
@@ -104,10 +112,9 @@ export default class WebmentionEndpoint {
 
     // Start background sync if database is available
     if (Indiekit.config.application.mongodbUrl) {
-      this._stopGate = waitForReady(
-        () => startSync(Indiekit, this.options),
-        { label: "Webmention.io" },
-      );
+      this._stopGate = waitForReady(() => startSync(Indiekit, this.options), {
+        label: "Webmention.io",
+      });
     }
   }
 

package/lib/blocks.js

@@ -0,0 +1,36 @@
+/**
+ * Webmention-io v2 block declaration (Phase 7b — plugin block ownership).
+ *
+ * The `webmentions` sidebar widget was a site-config BUILTIN_BLOCKS seed
+ * (requiresPlugin null, gated only by the theme's legacy widgetPluginRequirements
+ * render-map). Declaring it here makes site-config's scanPlugins stamp
+ * `sourcePlugin` → `requiresPlugin` ("Webmention moderation endpoint"), so the
+ * block is properly plugin-gated (theme ENDPOINT_SLUGS maps it to the
+ * `webmention-io` loadout slug). scanPlugins precedence is `built-in < plugin
+ * blocks`, so this entry OVERWRITES the builtin seed on sites where the plugin is
+ * loaded; the seed itself is removed from site-config in Phase 7d alongside the
+ * legacy-map bridge.
+ *
+ * Descriptor is byte-faithful to the BUILTIN_BLOCKS entry. Bespoke template: the
+ * theme owns `components/widgets/webmentions.njk` (no generic `render.renderer`);
+ * `data.source:"api"` documents the runtime fetch.
+ * @module lib/blocks
+ */
+
+/**
+@type {Array<object>}
+ */
+export const WEBMENTION_BLOCKS = [
+  {
+    id: "webmentions",
+    version: 1,
+    label: "Webmentions",
+    description: "Recent inbound/outbound webmentions",
+    icon: "message-circle",
+    category: "social",
+    placement: { regions: ["sidebar"], surfaces: ["homepage", "postType"] },
+    multiple: false,
+    data: { source: "api" },
+    schema: { type: "object", additionalProperties: false, properties: {} },
+  },
+];

package/lib/controllers/api.js

@@ -8,21 +8,23 @@ import { getWebmentions, documentToJf2 } from "../storage/webmentions.js";
 export const apiController = {
   /**
    * GET /api/mentions - Public JF2 webmentions API
+   * @param request
+   * @param response
    */
   async getMentions(request, response) {
     try {
       const { application } = request.app.locals;
-      const db = application.getWebmentionDb();
+      const database = application.getWebmentionDb();
 
-      if (!db) {
+      if (!database) {
         return response.status(503).json({ error: "Database unavailable" });
       }
 
-      const collection = db.collection("webmentions");
+      const collection = database.collection("webmentions");
 
       const target = request.query.target || null;
       const wmProperty = request.query["wm-property"] || null;
-      const perPage = Math.min(Number(request.query["per-page"]) || 50, 10000);
+      const perPage = Math.min(Number(request.query["per-page"]) || 50, 10_000);
       const page = Number(request.query.page) || 0;
 
       const { items } = await getWebmentions(collection, {

package/lib/controllers/blocklist.js

@@ -9,16 +9,18 @@ import { ensureISOString } from "../utils.js";
 export const blocklistController = {
   /**
    * GET /blocklist - Blocklist management page
+   * @param request
+   * @param response
    */
   async list(request, response) {
     const { application } = request.app.locals;
 
     try {
-      const db = application.getWebmentionDb();
+      const database = application.getWebmentionDb();
       let entries = [];
 
-      if (db) {
-        const collection = db.collection("webmentionBlocklist");
+      if (database) {
+        const collection = database.collection("webmentionBlocklist");
         const raw = await getBlocklist(collection);
         entries = raw.map((entry) => ({
           ...entry,
@@ -43,15 +45,17 @@ export const blocklistController = {
 
   /**
    * POST /blocklist/:domain/delete - Unblock a domain
+   * @param request
+   * @param response
    */
   async unblock(request, response) {
     const { application } = request.app.locals;
 
     try {
       const domain = decodeURIComponent(request.params.domain);
-      const db = application.getWebmentionDb();
-      const blockCollection = db.collection("webmentionBlocklist");
-      const wmCollection = db.collection("webmentions");
+      const database = application.getWebmentionDb();
+      const blockCollection = database.collection("webmentionBlocklist");
+      const wmCollection = database.collection("webmentions");
 
       await unblockDomain(blockCollection, domain);
 
@@ -59,11 +63,15 @@ export const blocklistController = {
       const unhidden = await unhideByDomain(wmCollection, domain);
 
       response.redirect(
-        application.webmentionEndpoint + "/blocklist?unblocked=1&unhidden=" + unhidden,
+        application.webmentionEndpoint +
+          "/blocklist?unblocked=1&unhidden=" +
+          unhidden,
       );
     } catch (error) {
       console.error("[Webmentions] Unblock error:", error);
-      response.redirect(application.webmentionEndpoint + "/blocklist?error=unblock-failed");
+      response.redirect(
+        application.webmentionEndpoint + "/blocklist?error=unblock-failed",
+      );
     }
   },
 };

package/lib/controllers/dashboard.js

@@ -3,6 +3,7 @@
  * Admin UI for webmention moderation
  */
 
+import { blockDomain } from "../storage/blocklist.js";
 import {
   getWebmentions,
   getWebmentionCounts,
@@ -11,20 +12,26 @@ import {
   hideByDomain,
   deleteByDomain,
 } from "../storage/webmentions.js";
-import { blockDomain } from "../storage/blocklist.js";
 import { getSyncState } from "../sync.js";
-import { getMentionType, getMentionTitle, getAuthorName, ensureISOString } from "../utils.js";
+import {
+  getMentionType,
+  getMentionTitle,
+  getAuthorName,
+  ensureISOString,
+} from "../utils.js";
 
 export const dashboardController = {
   /**
    * GET / - Webmentions dashboard
+   * @param request
+   * @param response
    */
   async list(request, response) {
     const { application } = request.app.locals;
 
     try {
-      const db = application.getWebmentionDb();
-      if (!db) {
+      const database = application.getWebmentionDb();
+      if (!database) {
         return response.render("webmentions", {
           title: response.locals.__("webmention-io.title"),
           webmentions: [],
@@ -37,7 +44,7 @@ export const dashboardController = {
         });
       }
 
-      const collection = db.collection("webmentions");
+      const collection = database.collection("webmentions");
 
       const page = Number(request.query.page) || 0;
       const limit = Number(request.query.limit) || 20;
@@ -80,16 +87,22 @@ export const dashboardController = {
           "wm-target": item.wmTarget,
           icon: getMentionType(item.wmProperty),
           locale: application.locale,
-          title: getMentionTitle({ name: item.name, "wm-property": item.wmProperty }),
+          title: getMentionTitle({
+            name: item.name,
+            "wm-property": item.wmProperty,
+          }),
           description: html ? { html } : undefined,
-          published: ensureISOString(item.published) || ensureISOString(item.wmReceived),
+          published:
+            ensureISOString(item.published) || ensureISOString(item.wmReceived),
           url: item.sourceUrl,
           user: {
             avatar: item.authorPhoto ? { src: item.authorPhoto } : undefined,
-            name: item.authorName || getAuthorName({
-              author: { name: item.authorName, url: item.authorUrl },
-              url: item.sourceUrl,
-            }),
+            name:
+              item.authorName ||
+              getAuthorName({
+                author: { name: item.authorName, url: item.authorUrl },
+                url: item.sourceUrl,
+              }),
             url: item.authorUrl,
           },
           // Moderation metadata
@@ -104,7 +117,9 @@ export const dashboardController = {
         next: { href: `?page=${page + 1}&filter=${filter}&type=${typeFilter}` },
       };
       if (page > 0) {
-        cursor.previous = { href: `?page=${page - 1}&filter=${filter}&type=${typeFilter}` };
+        cursor.previous = {
+          href: `?page=${page - 1}&filter=${filter}&type=${typeFilter}`,
+        };
       }
 
       response.render("webmentions", {
@@ -129,14 +144,16 @@ export const dashboardController = {
 
   /**
    * POST /:wmId/hide - Hide a webmention
+   * @param request
+   * @param response
    */
   async hide(request, response) {
     const { application } = request.app.locals;
 
     try {
       const wmId = Number.parseInt(request.params.wmId, 10);
-      const db = application.getWebmentionDb();
-      const collection = db.collection("webmentions");
+      const database = application.getWebmentionDb();
+      const collection = database.collection("webmentions");
 
       await hideWebmention(collection, wmId, "manual");
 
@@ -149,26 +166,32 @@ export const dashboardController = {
 
   /**
    * POST /:wmId/unhide - Restore a webmention
+   * @param request
+   * @param response
    */
   async unhide(request, response) {
     const { application } = request.app.locals;
 
     try {
       const wmId = Number.parseInt(request.params.wmId, 10);
-      const db = application.getWebmentionDb();
-      const collection = db.collection("webmentions");
+      const database = application.getWebmentionDb();
+      const collection = database.collection("webmentions");
 
       await unhideWebmention(collection, wmId);
 
       response.redirect(application.webmentionEndpoint + "?unhidden=1");
     } catch (error) {
       console.error("[Webmentions] Unhide error:", error);
-      response.redirect(application.webmentionEndpoint + "?error=unhide-failed");
+      response.redirect(
+        application.webmentionEndpoint + "?error=unhide-failed",
+      );
     }
   },
 
   /**
    * POST /block - Block a domain
+   * @param request
+   * @param response
    */
   async blockDomainHandler(request, response) {
     const { application } = request.app.locals;
@@ -176,12 +199,14 @@ export const dashboardController = {
     try {
       const { domain } = request.body;
       if (!domain) {
-        return response.redirect(application.webmentionEndpoint + "?error=no-domain");
+        return response.redirect(
+          application.webmentionEndpoint + "?error=no-domain",
+        );
       }
 
-      const db = application.getWebmentionDb();
-      const wmCollection = db.collection("webmentions");
-      const blockCollection = db.collection("webmentionBlocklist");
+      const database = application.getWebmentionDb();
+      const wmCollection = database.collection("webmentions");
+      const blockCollection = database.collection("webmentionBlocklist");
 
       // Hide all existing mentions from this domain
       const hidden = await hideByDomain(wmCollection, domain, "blocklist");
@@ -189,7 +214,11 @@ export const dashboardController = {
       // Add to blocklist
       await blockDomain(blockCollection, domain, "spam", hidden);
 
-      response.redirect(application.webmentionEndpoint + "?blocked=1&domain=" + encodeURIComponent(domain));
+      response.redirect(
+        application.webmentionEndpoint +
+          "?blocked=1&domain=" +
+          encodeURIComponent(domain),
+      );
     } catch (error) {
       console.error("[Webmentions] Block error:", error);
       response.redirect(application.webmentionEndpoint + "?error=block-failed");
@@ -198,6 +227,8 @@ export const dashboardController = {
 
   /**
    * POST /privacy-remove - Privacy removal (delete + block)
+   * @param request
+   * @param response
    */
   async privacyRemove(request, response) {
     const { application } = request.app.locals;
@@ -205,12 +236,14 @@ export const dashboardController = {
     try {
       const { domain } = request.body;
       if (!domain) {
-        return response.redirect(application.webmentionEndpoint + "/blocklist?error=no-domain");
+        return response.redirect(
+          application.webmentionEndpoint + "/blocklist?error=no-domain",
+        );
       }
 
-      const db = application.getWebmentionDb();
-      const wmCollection = db.collection("webmentions");
-      const blockCollection = db.collection("webmentionBlocklist");
+      const database = application.getWebmentionDb();
+      const wmCollection = database.collection("webmentions");
+      const blockCollection = database.collection("webmentionBlocklist");
 
       // Permanently delete all mentions from this domain
       const deleted = await deleteByDomain(wmCollection, domain);
@@ -218,10 +251,16 @@ export const dashboardController = {
       // Add to blocklist with privacy reason
       await blockDomain(blockCollection, domain, "privacy", deleted);
 
-      response.redirect(application.webmentionEndpoint + "/blocklist?removed=1&count=" + deleted);
+      response.redirect(
+        application.webmentionEndpoint +
+          "/blocklist?removed=1&count=" +
+          deleted,
+      );
     } catch (error) {
       console.error("[Webmentions] Privacy remove error:", error);
-      response.redirect(application.webmentionEndpoint + "/blocklist?error=remove-failed");
+      response.redirect(
+        application.webmentionEndpoint + "/blocklist?error=remove-failed",
+      );
     }
   },
 };

package/lib/controllers/sync-controller.js

@@ -7,19 +7,29 @@ import { runSync, runFullSync } from "../sync.js";
 export const syncController = {
   /**
    * POST /sync - Trigger incremental sync
+   * @param request
+   * @param response
    */
   async sync(request, response) {
     const { application } = request.app.locals;
 
     try {
-      const db = application.getWebmentionDb();
+      const database = application.getWebmentionDb();
       const options = application.webmentionConfig || {};
-      const result = await runSync(db, options);
+      const result = await runSync(database, options);
 
       if (result.error) {
-        response.redirect(application.webmentionEndpoint + "?error=" + encodeURIComponent(result.error));
+        response.redirect(
+          application.webmentionEndpoint +
+            "?error=" +
+            encodeURIComponent(result.error),
+        );
       } else {
-        response.redirect(application.webmentionEndpoint + "?synced=1&added=" + result.mentionsAdded);
+        response.redirect(
+          application.webmentionEndpoint +
+            "?synced=1&added=" +
+            result.mentionsAdded,
+        );
       }
     } catch (error) {
       console.error("[Webmentions] Manual sync error:", error);
@@ -29,19 +39,29 @@ export const syncController = {
 
   /**
    * POST /sync/full - Trigger full re-sync
+   * @param request
+   * @param response
    */
   async fullSync(request, response) {
     const { application } = request.app.locals;
 
     try {
-      const db = application.getWebmentionDb();
+      const database = application.getWebmentionDb();
       const options = application.webmentionConfig || {};
-      const result = await runFullSync(db, options);
+      const result = await runFullSync(database, options);
 
       if (result.error) {
-        response.redirect(application.webmentionEndpoint + "?error=" + encodeURIComponent(result.error));
+        response.redirect(
+          application.webmentionEndpoint +
+            "?error=" +
+            encodeURIComponent(result.error),
+        );
       } else {
-        response.redirect(application.webmentionEndpoint + "?synced=1&added=" + result.mentionsAdded);
+        response.redirect(
+          application.webmentionEndpoint +
+            "?synced=1&added=" +
+            result.mentionsAdded,
+        );
       }
     } catch (error) {
       console.error("[Webmentions] Full sync error:", error);

package/lib/hcard.js

@@ -151,8 +151,8 @@ function findUPhoto(html) {
 
     if (!hasClass(tag, "u-photo")) continue;
 
-    const src = getAttr(tag, "src");
-    if (src) return src;
+    const source = getAttribute(tag, "src");
+    if (source) return source;
   }
 
   return null;
@@ -172,7 +172,7 @@ function findUUrl(html) {
 
     if (!hasClass(tag, "u-url") && !hasClass(tag, "u-uid")) continue;
 
-    const href = getAttr(tag, "href");
+    const href = getAttribute(tag, "href");
     if (href) return href;
   }
 
@@ -197,7 +197,7 @@ function hasClass(tag, className) {
  * @param {string} attr - Attribute name
  * @returns {string|null}
  */
-function getAttr(tag, attr) {
+function getAttribute(tag, attr) {
   const regex = new RegExp(`${attr}=["']([^"']*)["']`, "i");
   const match = tag.match(regex);
   return match ? match[1] : null;

package/lib/storage/blocklist.js

@@ -18,7 +18,12 @@ export async function ensureBlocklistIndexes(collection) {
  * @param {number} mentionsHidden - Count of mentions hidden
  * @returns {Promise<boolean>} true if inserted, false if already existed
  */
-export async function blockDomain(collection, domain, reason = "spam", mentionsHidden = 0) {
+export async function blockDomain(
+  collection,
+  domain,
+  reason = "spam",
+  mentionsHidden = 0,
+) {
   try {
     await collection.insertOne({
       domain,
@@ -29,7 +34,7 @@ export async function blockDomain(collection, domain, reason = "spam", mentionsH
     return true;
   } catch (error) {
     // Duplicate key — domain already blocked
-    if (error.code === 11000) {
+    if (error.code === 11_000) {
       // Update reason and count
       await collection.updateOne(
         { domain },
@@ -79,6 +84,8 @@ export async function isDomainBlocked(collection, domain) {
  * @returns {Promise<Set<string>>}
  */
 export async function getBlockedDomainSet(collection) {
-  const entries = await collection.find({}, { projection: { domain: 1 } }).toArray();
+  const entries = await collection
+    .find({}, { projection: { domain: 1 } })
+    .toArray();
   return new Set(entries.map((e) => e.domain));
 }

package/lib/storage/webmentions.js

@@ -36,7 +36,8 @@ export function jf2ToDocument(item) {
 
   return {
     wmId: item["wm-id"],
-    wmReceived: ensureISOString(item["wm-received"]) || new Date().toISOString(),
+    wmReceived:
+      ensureISOString(item["wm-received"]) || new Date().toISOString(),
     wmProperty: item["wm-property"],
     wmTarget: item["wm-target"],
     authorName: item.author?.name || null,
@@ -75,7 +76,8 @@ export function documentToJf2(doc) {
       photo: doc.authorPhoto || "",
     },
     url: doc.sourceUrl || "",
-    published: ensureISOString(doc.published) || ensureISOString(doc.wmReceived),
+    published:
+      ensureISOString(doc.published) || ensureISOString(doc.wmReceived),
   };
 
   if (doc.name) {
@@ -98,11 +100,11 @@ export function documentToJf2(doc) {
  * @returns {Promise<boolean>} true if inserted (new), false if updated
  */
 export async function upsertWebmention(collection, item) {
-  const doc = jf2ToDocument(item);
+  const document = jf2ToDocument(item);
   const result = await collection.updateOne(
-    { wmId: doc.wmId },
+    { wmId: document.wmId },
     {
-      $setOnInsert: doc,
+      $setOnInsert: document,
     },
     { upsert: true },
   );
@@ -185,7 +187,13 @@ export async function getMaxWmId(collection) {
 export async function hideWebmention(collection, wmId, reason = "manual") {
   await collection.updateOne(
     { wmId },
-    { $set: { hidden: true, hiddenAt: new Date().toISOString(), hiddenReason: reason } },
+    {
+      $set: {
+        hidden: true,
+        hiddenAt: new Date().toISOString(),
+        hiddenReason: reason,
+      },
+    },
   );
 }
 
@@ -211,7 +219,13 @@ export async function unhideWebmention(collection, wmId) {
 export async function hideByDomain(collection, domain, reason = "blocklist") {
   const result = await collection.updateMany(
     { sourceDomain: domain, hidden: { $ne: true } },
-    { $set: { hidden: true, hiddenAt: new Date().toISOString(), hiddenReason: reason } },
+    {
+      $set: {
+        hidden: true,
+        hiddenAt: new Date().toISOString(),
+        hiddenReason: reason,
+      },
+    },
   );
   return result.modifiedCount;
 }

package/lib/sync.js

@@ -2,7 +2,11 @@
  * Background sync from webmention.io
  */
 
-import { extractDomain } from "./utils.js";
+import { discoverAuthorData } from "./hcard.js";
+import {
+  ensureBlocklistIndexes,
+  getBlockedDomainSet,
+} from "./storage/blocklist.js";
 import {
   ensureIndexes,
   upsertWebmention,
@@ -12,11 +16,7 @@ import {
   getDomainsWithMissingPhotos,
   updateAuthorDataByDomain,
 } from "./storage/webmentions.js";
-import {
-  ensureBlocklistIndexes,
-  getBlockedDomainSet,
-} from "./storage/blocklist.js";
-import { discoverAuthorData } from "./hcard.js";
+import { extractDomain } from "./utils.js";
 
 let syncInterval = null;
 let syncState = {
@@ -49,15 +49,15 @@ export function startSync(Indiekit, options) {
 
   // Initial sync after delay
   setTimeout(() => {
-    runSync(Indiekit, options).catch((err) => {
-      console.error("[Webmentions] Initial sync error:", err.message);
+    runSync(Indiekit, options).catch((error) => {
+      console.error("[Webmentions] Initial sync error:", error.message);
     });
   }, 10_000);
 
   // Recurring sync
   syncInterval = setInterval(() => {
-    runSync(Indiekit, options).catch((err) => {
-      console.error("[Webmentions] Sync error:", err.message);
+    runSync(Indiekit, options).catch((error) => {
+      console.error("[Webmentions] Sync error:", error.message);
     });
   }, intervalMs);
 }
@@ -66,10 +66,12 @@ export function startSync(Indiekit, options) {
  * Stop background sync
  */
 export function stopSync() {
-  if (syncInterval) {
-    clearInterval(syncInterval);
-    syncInterval = null;
+  if (!syncInterval) {
+    return;
   }
+
+  clearInterval(syncInterval);
+  syncInterval = null;
 }
 
 /**
@@ -79,8 +81,8 @@ export function stopSync() {
  * @returns {Promise<object>}
  */
 export async function runSync(dbOrIndiekit, options) {
-  const db = dbOrIndiekit.database || dbOrIndiekit;
-  if (!db || typeof db.collection !== "function") {
+  const database = dbOrIndiekit.database || dbOrIndiekit;
+  if (!database || typeof database.collection !== "function") {
     syncState.lastError = "No database available";
     return { error: syncState.lastError };
   }
@@ -95,8 +97,8 @@ export async function runSync(dbOrIndiekit, options) {
   syncState.mentionsFiltered = 0;
 
   try {
-    const wmCollection = db.collection("webmentions");
-    const blockCollection = db.collection("webmentionBlocklist");
+    const wmCollection = database.collection("webmentions");
+    const blockCollection = database.collection("webmentionBlocklist");
 
     await ensureIndexes(wmCollection);
     await ensureBlocklistIndexes(blockCollection);
@@ -145,7 +147,7 @@ export async function runSync(dbOrIndiekit, options) {
     }
 
     // Enrich entries with missing author photos via h-card discovery
-    const enriched = await enrichMissingPhotos(db, wmCollection);
+    const enriched = await enrichMissingPhotos(database, wmCollection);
 
     syncState.lastSync = new Date().toISOString();
     syncState.syncing = false;
@@ -174,8 +176,8 @@ export async function runSync(dbOrIndiekit, options) {
  * @returns {Promise<object>}
  */
 export async function runFullSync(dbOrIndiekit, options) {
-  const db = dbOrIndiekit.database || dbOrIndiekit;
-  if (!db || typeof db.collection !== "function") {
+  const database = dbOrIndiekit.database || dbOrIndiekit;
+  if (!database || typeof database.collection !== "function") {
     return { error: "No database available" };
   }
 
@@ -189,15 +191,17 @@ export async function runFullSync(dbOrIndiekit, options) {
   syncState.mentionsFiltered = 0;
 
   try {
-    const wmCollection = db.collection("webmentions");
-    const blockCollection = db.collection("webmentionBlocklist");
+    const wmCollection = database.collection("webmentions");
+    const blockCollection = database.collection("webmentionBlocklist");
 
     await ensureIndexes(wmCollection);
     await ensureBlocklistIndexes(blockCollection);
 
     // Clear all existing webmentions
     const deleted = await deleteAll(wmCollection);
-    console.log(`[Webmentions] Full sync: cleared ${deleted} existing mentions`);
+    console.log(
+      `[Webmentions] Full sync: cleared ${deleted} existing mentions`,
+    );
 
     // Get blocked domains
     const blockedDomains = await getBlockedDomainSet(blockCollection);
@@ -240,7 +244,7 @@ export async function runFullSync(dbOrIndiekit, options) {
     }
 
     // Enrich entries with missing author photos via h-card discovery
-    const enriched = await enrichMissingPhotos(db, wmCollection);
+    const enriched = await enrichMissingPhotos(database, wmCollection);
 
     syncState.lastSync = new Date().toISOString();
     syncState.syncing = false;
@@ -302,10 +306,7 @@ async function enrichMissingPhotos(db, wmCollection) {
       await delay(200);
     }
   } catch (error) {
-    console.error(
-      "[Webmentions] h-card enrichment error:",
-      error.message,
-    );
+    console.error("[Webmentions] h-card enrichment error:", error.message);
   }
 
   return totalUpdated;
@@ -344,6 +345,10 @@ async function fetchPage(options, params = {}) {
   return body?.children || [];
 }
 
+/**
+ *
+ * @param ms
+ */
 function delay(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-webmention-io",
-  "version": "1.0.8",
+  "version": "1.1.0",
   "description": "Webmention moderation endpoint for Indiekit. Syncs webmentions from webmention.io into MongoDB with delete, block, and privacy removal capabilities.",
   "keywords": [
     "indiekit",
@@ -23,7 +23,7 @@
   },
   "license": "MIT",
   "engines": {
-    "node": ">=20"
+    "node": ">=24.17"
   },
   "type": "module",
   "main": "index.js",
@@ -37,16 +37,21 @@
     "index.js"
   ],
   "dependencies": {
-    "@rmdes/indiekit-startup-gate": "^1.0.0",
-    "@indiekit/error": "^1.0.0-beta.25",
-    "@indiekit/frontend": "^1.0.0-beta.25",
-    "express": "^5.0.0",
-    "sanitize-html": "^2.14.0"
+    "@indiekit/error": "^1.0.0-beta.28",
+    "express": "^5.2.1",
+    "sanitize-html": "^2.17.7"
   },
   "peerDependencies": {
     "@indiekit/indiekit": ">=1.0.0-beta.25"
   },
   "publishConfig": {
     "access": "public"
+  },
+  "scripts": {
+    "test": "NODE_ENV=test node --test"
+  },
+  "devDependencies": {
+    "@indiekit/util": "^1.0.0-beta.29",
+    "mongodb-memory-server": "^11.2.0"
   }
 }