@rmdes/indiekit-endpoint-webmention-io 1.2.0 → 1.2.2

package/README.md

@@ -7,7 +7,7 @@ Webmention moderation endpoint for [Indiekit](https://getindiekit.com). Syncs we
 - **Background Sync**: Automatically fetches webmentions from webmention.io every 15 minutes (configurable)
 - **Moderation Dashboard**: Admin UI for hiding/unhiding webmentions
 - **Domain Blocking**: Block spam domains (hides all mentions, blocks future ones)
-- **Privacy Removal**: GDPR-compliant permanent deletion with domain blocking
+- **Privacy Removal**: permanently delete a domain's mentions from this database and block it (webmention.io keeps its own copy)
 - **Public JSON API**: Drop-in replacement for webmention.io API with server-side caching
 - **MongoDB Storage**: Persistent storage with indexes for fast queries
 - **Incremental Sync**: Only fetches new webmentions since last sync (efficient)
@@ -59,7 +59,7 @@ Visit `/webmentions` in your Indiekit admin panel to:
 - Filter by type (likes/replies/reposts/mentions)
 - Hide/unhide individual webmentions
 - Block spam domains
-- Remove mentions for privacy requests (GDPR)
+- Remove mentions for privacy requests (local copy only)
 
 ### Manual Sync
 
@@ -147,14 +147,14 @@ Body: domain=spam.example.com
 - Adds domain to blocklist
 - Future mentions from this domain are filtered during sync
 
-#### Privacy removal (GDPR)
+#### Privacy removal
 ```bash
 POST /webmentions/privacy-remove
 Body: domain=user-request.example.com
 ```
 - **Permanently deletes** all mentions from the domain
 - Adds domain to blocklist with reason="privacy"
-- Irreversible - use for GDPR/privacy requests only
+- Irreversible here; the mention still exists on webmention.io, ask them separately for removal at the source
 
 #### Unblock a domain
 ```bash

package/lib/controllers/blocklist.js

@@ -38,7 +38,7 @@ export const blocklistController = {
       response.status(500).render("error", {
         title: "Error",
         message: "Failed to load blocklist",
-        error: error.message,
+        error: error instanceof Error ? error.message : String(error),
       });
     }
   },

package/lib/controllers/dashboard.js

@@ -142,7 +142,7 @@ export const dashboardController = {
       response.status(500).render("error", {
         title: "Error",
         message: "Failed to load webmentions",
-        error: error.message,
+        error: error instanceof Error ? error.message : String(error),
       });
     }
   },
@@ -248,7 +248,12 @@ export const dashboardController = {
    * @type {import("express").RequestHandler}
    */
   async quarantineDomainHandler(request, response) {
-    const { application } = request.app.locals;
+    // This plug-in hangs its mount path and database getter on the shared
+    // application object at init(); the global type does not know them.
+    const application =
+      /** @type {IndiekitApplication & { webmentionEndpoint: string, getWebmentionDb: () => { collection: (name: string) => object } }} */ (
+        request.app.locals.application
+      );
 
     try {
       const { domain, reason } = request.body;

package/lib/hcard.js

@@ -52,7 +52,7 @@ export async function discoverAuthorData(domain, cacheCollection) {
     result = await fetchHcardData(domain);
   } catch (error) {
     console.log(
-      `[Webmentions] h-card discovery failed for ${domain}: ${error.message}`,
+      `[Webmentions] h-card discovery failed for ${domain}: ${error instanceof Error ? error.message : String(error)}`,
     );
   }
 

package/lib/storage/blocklist.js

@@ -44,7 +44,7 @@ export async function blockDomain(
     return true;
   } catch (error) {
     // Duplicate key — domain already blocked
-    if (error.code === 11_000) {
+    if (/** @type {{ code?: number }} */ (error).code === 11_000) {
       // Update reason and count
       // Re-applying an action to a listed domain also moves it between
       // quarantine and block, which is how "promote to block" works.

package/lib/storage/webmentions.js

@@ -176,7 +176,7 @@ export async function getWebmentions(collection, options = {}) {
 /**
  * Get webmention counts
  * @param {object} collection - MongoDB collection
- * @returns {Promise<{total: number, hidden: number, visible: number}>}
+ * @returns {Promise<{total: number, hidden: number, quarantined: number, visible: number}>}
  */
 export async function getWebmentionCounts(collection) {
   const total = await collection.countDocuments({});
@@ -263,7 +263,10 @@ export async function hideByDomain(collection, domain, reason = "blocklist") {
  */
 export async function unhideByDomain(collection, domain) {
   const result = await collection.updateMany(
-    { sourceDomain: normaliseDomain(domain) ?? domain, hiddenReason: "blocklist" },
+    {
+      sourceDomain: normaliseDomain(domain) ?? domain,
+      hiddenReason: "blocklist",
+    },
     { $set: { hidden: false, hiddenAt: null, hiddenReason: null } },
   );
   return result.modifiedCount;

package/lib/sync.js

@@ -189,10 +189,11 @@ export async function runSync(dbOrIndiekit, options) {
       mentionsEnriched: enriched,
     };
   } catch (error) {
-    syncState.lastError = error.message;
+    const message = error instanceof Error ? error.message : String(error);
+    syncState.lastError = message;
     syncState.syncing = false;
-    console.error("[Webmentions] Sync failed:", error.message);
-    return { error: error.message };
+    console.error("[Webmentions] Sync failed:", message);
+    return { error: message };
   }
 }
 
@@ -297,10 +298,11 @@ export async function runFullSync(dbOrIndiekit, options) {
       mentionsEnriched: enriched,
     };
   } catch (error) {
-    syncState.lastError = error.message;
+    const message = error instanceof Error ? error.message : String(error);
+    syncState.lastError = message;
     syncState.syncing = false;
-    console.error("[Webmentions] Full sync failed:", error.message);
-    return { error: error.message };
+    console.error("[Webmentions] Full sync failed:", message);
+    return { error: message };
   }
 }
 
@@ -344,7 +346,7 @@ async function enrichMissingPhotos(db, wmCollection) {
       await delay(200);
     }
   } catch (error) {
-    console.error("[Webmentions] h-card enrichment error:", error.message);
+    console.error("[Webmentions] h-card enrichment error:", error);
   }
 
   return totalUpdated;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-webmention-io",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "Webmention moderation endpoint for Indiekit. Syncs webmentions from webmention.io into MongoDB with delete, block, and privacy removal capabilities.",
   "keywords": [
     "indiekit",