@takosjp/yurucommu-core 3.0.0

package/src/backend/types.ts

@@ -0,0 +1,143 @@
+import type { Database } from "../db/index.ts";
+import type {
+  IKeyValueStore,
+  IObjectStorage,
+  IStaticAssets,
+} from "./runtime/types.ts";
+import type {
+  DeliveryDlqMessageV1,
+  DeliveryQueueMessageV1,
+} from "./lib/delivery/types.ts";
+
+/**
+ * Environment Variables (common across all runtimes)
+ */
+export interface EnvVars {
+  APP_URL: string;
+
+  // Takos-specific endpoints are opt-in (fail-close by default).
+  ENABLE_TAKOS_TOOLS?: string;
+
+  // 認証設定（自由に組み合わせ可能）
+  AUTH_PASSWORD_HASH?: string; // PBKDF2-hashed password
+  GOOGLE_CLIENT_ID?: string;
+  GOOGLE_CLIENT_SECRET?: string;
+  X_CLIENT_ID?: string;
+  X_CLIENT_SECRET?: string;
+  OIDC_ISSUER_URL?: string;
+  OIDC_CLIENT_ID?: string;
+  OIDC_CLIENT_SECRET?: string;
+  OAUTH_ISSUER_URL?: string;
+  TAKOSUMI_ACCOUNTS_ISSUER_URL?: string;
+  TAKOSUMI_ACCOUNTS_CLIENT_ID?: string;
+  TAKOSUMI_ACCOUNTS_CLIENT_SECRET?: string;
+  // Pins the OIDC/OAuth subject allowed to take the single owner slot. When set,
+  // only a first-login whose subject equals this value becomes `owner`; any other
+  // first-login is refused. Prevents an owner-slot race on an OIDC-seeded Capsule.
+  OIDC_OWNER_SUB?: string;
+  TAKOSUMI_ACCOUNTS_OWNER_SUB?: string;
+  // Comma-separated allowlist of OAuth/OIDC subjects permitted to auto-provision
+  // a NON-owner (member) account. Empty/unset = member auto-provisioning is
+  // CLOSED (single-user default): once the owner exists, no new external subject
+  // can self-register a member just by completing the issuer's OAuth flow.
+  OIDC_ALLOWED_SUBS?: string;
+  TAKOS_URL?: string; // Optional Takos API base URL; not the OIDC issuer.
+  AUTH_MODE?: string;
+  ENCRYPTION_KEY?: string; // 32-byte hex key for encrypting sensitive data
+
+  // Per-deployment salt mixed into the SHA-256 of the session id before it is
+  // persisted as the session-row lookup key. The raw session id only ever
+  // lives in the client cookie; a read-only DB leak cannot be replayed without
+  // also recovering the raw id. Production deployments MUST set this to a
+  // high-entropy value (see hashSessionId in lib/crypto.ts). When
+  // YURUCOMMU_STRICT_READINESS is enabled and this is unset, the app warns.
+  YURUCOMMU_SESSION_HASH_SALT?: string;
+
+  // Shadow delivery probes (staging-only). Comma-separated hosts.
+  DELIVERY_SHADOW_PROBE_HOSTS?: string;
+  // 0.0-1.0 sampling rate for probes (default: 1.0)
+  DELIVERY_SHADOW_PROBE_SAMPLE_RATE?: string;
+  DELIVERY_QUEUE_NAME?: string;
+  DELIVERY_DLQ_NAME?: string;
+  YURUCOMMU_STRICT_READINESS?: string;
+  YURUCOMMU_ENABLE_LOCAL_SUBSTRATE_REMOTE_FETCHES?: string;
+  YURUCOMMU_ENABLE_LOCAL_DELIVERY_QUEUE?: string;
+  // Software version advertised in NodeInfo (software.version). The build /
+  // deploy pipeline should inject the real build version here; when unset the
+  // app falls back to the YURUCOMMU_VERSION default constant.
+  YURUCOMMU_SOFTWARE_VERSION?: string;
+
+  // CSRF allowed origins (comma-separated). APP_URL の origin に加えて
+  // 受け付ける追加 origin (= dev hostname (`https://yurucommu.test`) を
+  // production-equivalent な strict CSRF check 経由で踏むため)。 未設定なら
+  // 既存動作と同じ (= APP_URL 単一 origin のみ accept、 production 影響ゼロ)。
+  CSRF_ALLOWED_ORIGINS?: string;
+
+  // Declare the reverse-proxy type so the client-IP resolver trusts the right
+  // forwarding header (opt-in; a worker fronted directly by a client cannot
+  // spoof its own IP otherwise). Accepted values:
+  //   "generic" — nginx / Caddy / Traefik: trust X-Forwarded-For (leftmost) /
+  //               X-Real-IP, and IGNORE a client-settable CF-Connecting-IP.
+  //   "cf"      — a Cloudflare front (incl. cloudflared tunnel): trust
+  //               CF-Connecting-IP.
+  //   "true" / "1" — legacy alias: behaves like "generic" but keeps a
+  //               CF-Connecting-IP fallback for back-compat.
+  // The genuine Cloudflare edge (unspoofable request.cf) always trusts
+  // CF-Connecting-IP with no opt-in.
+  TAKOS_TRUST_PROXY?: string;
+}
+
+/**
+ * Application Environment
+ *
+ * Uses the runtime-neutral `I*` contracts. The Cloudflare worker entry
+ * wraps the native `D1Database` / `R2Bucket` / `KVNamespace` / `Fetcher`
+ * bindings with the adapters in `runtime/cloudflare.ts` before handing
+ * the Env to Hono. The local runtime compatibility classes already
+ * implement these contracts directly.
+ *
+ * `DB_INSTANCE` is the drizzle wrapper that the app calls; it is built
+ * by each runtime entry point (Cloudflare `fetch`, local server, or
+ * runtime-specific wrappers).
+ */
+export type Env = {
+  DB_INSTANCE: Database;
+  MEDIA?: IObjectStorage;
+  KV: IKeyValueStore;
+  ASSETS?: IStaticAssets;
+  DELIVERY_QUEUE?: Queue<DeliveryQueueMessageV1>;
+  DELIVERY_DLQ?: Queue<DeliveryDlqMessageV1>;
+} & EnvVars;
+
+export type Variables = {
+  actor: Actor | null;
+  db: Database;
+  oauthToken?: { sub: string; scope: string; client_id: string };
+};
+
+// Local actor (Person)
+export interface Actor {
+  ap_id: string; // Primary key: https://domain/ap/users/username
+  type: string;
+  preferred_username: string;
+  name: string | null;
+  summary: string | null;
+  icon_url: string | null;
+  header_url: string | null;
+  inbox: string;
+  outbox: string;
+  followers_url: string;
+  following_url: string;
+  public_key_pem: string;
+  private_key_pem: string;
+  takos_user_id: string | null;
+  follower_count: number;
+  following_count: number;
+  post_count: number;
+  is_private: number;
+  role: "owner" | "moderator" | "member";
+  created_at: string;
+}
+
+// Re-export Hono types for route files
+export type { Context } from "hono";

package/src/db/index.ts

@@ -0,0 +1,97 @@
+/**
+ * Drizzle ORM Database Client for Yurucommu
+ *
+ * Multi-runtime support:
+ * - Cloudflare Workers (D1) via `drizzle-orm/d1`
+ * - Node.js / Bun (libsql) via `drizzle-orm/libsql`
+ *
+ * Both factories return distinct subclasses of `BaseSQLiteDatabase`, with
+ * different concrete result-row types (`D1Result` vs libsql's `ResultSet`).
+ * The query-builder surface this app uses (`select`, `insert`, `update`,
+ * `delete`, transactions) is inherited from the common base. The `Database`
+ * union below preserves both result-row types; consumers that need to
+ * inspect post-mutation metadata go through `affectedRowCount`.
+ */
+
+import type { D1Database, D1Result } from "@cloudflare/workers-types";
+import { drizzle as drizzleD1, type DrizzleD1Database } from "drizzle-orm/d1";
+import type { LibSQLDatabase } from "drizzle-orm/libsql";
+import type { BaseSQLiteDatabase } from "drizzle-orm/sqlite-core";
+import type { ResultSet } from "@libsql/client";
+import { isNull } from "drizzle-orm";
+import * as schema from "./schema.ts";
+
+export type Database = BaseSQLiteDatabase<
+  "async",
+  D1Result | ResultSet,
+  typeof schema
+>;
+
+/**
+ * Create a Drizzle client for Cloudflare D1
+ */
+export function getDb(d1: D1Database): DrizzleD1Database<typeof schema> {
+  return drizzleD1(d1, { schema });
+}
+
+// Singleton for non-D1 runtimes
+let sqliteDb: LibSQLDatabase<typeof schema> | null = null;
+
+/**
+ * Create or get a Drizzle client for Node.js/Bun with SQLite file (libsql).
+ */
+export async function getDbSQLite(databasePath: string): Promise<Database> {
+  if (sqliteDb) return sqliteDb;
+
+  const { createClient } = await import("@libsql/client");
+  const { drizzle } = await import("drizzle-orm/libsql");
+
+  const client = createClient({ url: `file:${databasePath}` });
+  // Foreign keys are explicitly turned OFF so the libsql engine matches
+  // Cloudflare D1, which ignores the FK constraints declared in the
+  // migrations. NOTE: libsql (unlike bun:sqlite / stock SQLite, which default
+  // OFF) defaults foreign_keys ON, so this must be set explicitly — simply
+  // not enabling it is not enough. Remote actors are stored in actor_cache
+  // (never in actors), yet objects.attributed_to / follows.* / likes.* /
+  // announces.* FK-reference actors(ap_id); enforcement would make every
+  // inbound federated activity from a remote actor violate the FK and fail to
+  // insert. Referential cleanup is handled at the app level by
+  // delete-cascade.ts, identically on D1.
+  await client.execute("PRAGMA foreign_keys = OFF");
+  sqliteDb = drizzle(client, { schema });
+  return sqliteDb;
+}
+
+/**
+ * Cross-runtime rows-affected accessor.
+ *
+ * Drizzle D1 returns `D1Result` with `meta.changes`; drizzle libsql returns
+ * `ResultSet` with `rowsAffected`. Use this helper to read affected-row
+ * counts portably after `update`/`delete`/`insert` builders.
+ */
+export function affectedRowCount(result: unknown): number {
+  if (typeof result !== "object" || result === null) return 0;
+  const candidate = result as {
+    meta?: { changes?: number };
+    rowsAffected?: number;
+  };
+  if (typeof candidate.meta?.changes === "number") {
+    return candidate.meta.changes;
+  }
+  if (typeof candidate.rowsAffected === "number") return candidate.rowsAffected;
+  return 0;
+}
+
+/**
+ * Soft-delete helper: returns `isNull(table.deletedAt)` condition.
+ * Use in WHERE clauses for tables with soft-delete (actors, objects, communities).
+ */
+export function notDeleted(
+  table:
+    typeof schema.actors | typeof schema.objects | typeof schema.communities,
+) {
+  return isNull(table.deletedAt);
+}
+
+export { nowIso } from "./schema.ts";
+export * from "./schema.ts";

package/src/db/schema/actors.ts

@@ -0,0 +1,129 @@
+/**
+ * Actor-related tables: actors, actorCache, instanceActor, sessions
+ */
+
+import {
+  index,
+  integer,
+  sqliteTable,
+  text,
+  uniqueIndex,
+} from "drizzle-orm/sqlite-core";
+import { nowIso } from "./date-utils.ts";
+
+// ---------------------------------------------------------------------------
+// ACTORS
+// ---------------------------------------------------------------------------
+
+export const actors = sqliteTable(
+  "actors",
+  {
+    apId: text("ap_id").primaryKey(),
+    type: text("type").notNull().default("Person"),
+    preferredUsername: text("preferred_username").notNull().unique(),
+    name: text("name"),
+    summary: text("summary"),
+    iconUrl: text("icon_url"),
+    headerUrl: text("header_url"),
+    inbox: text("inbox").notNull(),
+    outbox: text("outbox").notNull(),
+    followersUrl: text("followers_url").notNull(),
+    followingUrl: text("following_url").notNull(),
+    publicKeyPem: text("public_key_pem").notNull(),
+    privateKeyPem: text("private_key_pem").notNull(),
+    takosUserId: text("takos_user_id").unique(),
+    followerCount: integer("follower_count").notNull().default(0),
+    followingCount: integer("following_count").notNull().default(0),
+    postCount: integer("post_count").notNull().default(0),
+    isPrivate: integer("is_private").notNull().default(0),
+    role: text("role").notNull().default("member"),
+    // Structured profile metadata (Mastodon PropertyValue): JSON array of
+    // { name, value } rows rendered as `attachment` on the served actor doc.
+    fieldsJson: text("fields_json").notNull().default("[]"),
+    // Account-migration aliases: JSON array of AP IDs this account claims
+    // (alsoKnownAs). `movedTo` is the migration target once the account moves.
+    alsoKnownAsJson: text("also_known_as_json").notNull().default("[]"),
+    movedTo: text("moved_to"),
+    createdAt: text("created_at").notNull().$defaultFn(nowIso),
+    updatedAt: text("updated_at")
+      .notNull()
+      .$defaultFn(nowIso)
+      .$onUpdateFn(nowIso),
+    deletedAt: text("deleted_at"),
+    ownerActorApId: text("owner_actor_ap_id"),
+  },
+  (t) => [
+    index("actors_preferred_username_idx").on(t.preferredUsername),
+    index("actors_takos_user_id_idx").on(t.takosUserId),
+    index("actors_deleted_at_idx").on(t.deletedAt),
+  ],
+);
+
+// ---------------------------------------------------------------------------
+// ACTOR_CACHE
+// ---------------------------------------------------------------------------
+
+export const actorCache = sqliteTable("actor_cache", {
+  apId: text("ap_id").primaryKey(),
+  type: text("type").notNull().default("Person"),
+  preferredUsername: text("preferred_username"),
+  name: text("name"),
+  summary: text("summary"),
+  iconUrl: text("icon_url"),
+  inbox: text("inbox").notNull(),
+  outbox: text("outbox"),
+  followersUrl: text("followers_url"),
+  followingUrl: text("following_url"),
+  sharedInbox: text("shared_inbox"),
+  publicKeyId: text("public_key_id"),
+  publicKeyPem: text("public_key_pem"),
+  rawJson: text("raw_json").notNull(),
+  lastFetchedAt: text("last_fetched_at").notNull().$defaultFn(nowIso),
+  createdAt: text("created_at").notNull().$defaultFn(nowIso),
+});
+
+// ---------------------------------------------------------------------------
+// INSTANCE_ACTOR
+// ---------------------------------------------------------------------------
+
+export const instanceActor = sqliteTable("instance_actor", {
+  apId: text("ap_id").primaryKey(),
+  preferredUsername: text("preferred_username").notNull(),
+  name: text("name"),
+  summary: text("summary"),
+  publicKeyPem: text("public_key_pem").notNull(),
+  privateKeyPem: text("private_key_pem").notNull(),
+  joinPolicy: text("join_policy").notNull().default("open"),
+  postingPolicy: text("posting_policy").notNull().default("members"),
+  visibility: text("visibility").notNull().default("public"),
+  createdAt: text("created_at").notNull().$defaultFn(nowIso),
+  updatedAt: text("updated_at")
+    .notNull()
+    .$defaultFn(nowIso)
+    .$onUpdateFn(nowIso),
+});
+
+// ---------------------------------------------------------------------------
+// SESSIONS
+// ---------------------------------------------------------------------------
+
+export const sessions = sqliteTable(
+  "sessions",
+  {
+    id: text("id").primaryKey(),
+    memberId: text("member_id").notNull(),
+    accessToken: text("access_token").notNull().unique(),
+    refreshToken: text("refresh_token"),
+    expiresAt: text("expires_at").notNull(),
+    createdAt: text("created_at").notNull().$defaultFn(nowIso),
+    provider: text("provider"),
+    providerAccessToken: text("provider_access_token"),
+    providerRefreshToken: text("provider_refresh_token"),
+    providerTokenExpiresAt: text("provider_token_expires_at"),
+  },
+  (t) => [
+    index("sessions_member_idx").on(t.memberId),
+    index("sessions_provider_idx").on(t.provider),
+    index("sessions_expires_idx").on(t.expiresAt),
+  ],
+);

package/src/db/schema/communities.ts

@@ -0,0 +1,133 @@
+/**
+ * Community-related tables: communities, communityMembers, communityJoinRequests, communityInvites
+ */
+
+import {
+  index,
+  integer,
+  primaryKey,
+  sqliteTable,
+  text,
+} from "drizzle-orm/sqlite-core";
+import { nowIso } from "./date-utils.ts";
+
+// ---------------------------------------------------------------------------
+// COMMUNITIES
+// ---------------------------------------------------------------------------
+
+export const communities = sqliteTable(
+  "communities",
+  {
+    apId: text("ap_id").primaryKey(),
+    type: text("type").notNull().default("Group"),
+    preferredUsername: text("preferred_username").notNull().unique(),
+    name: text("name").notNull(),
+    summary: text("summary"),
+    iconUrl: text("icon_url"),
+    inbox: text("inbox").notNull(),
+    outbox: text("outbox").notNull(),
+    followersUrl: text("followers_url").notNull(),
+    visibility: text("visibility").notNull().default("public"),
+    joinPolicy: text("join_policy").notNull().default("open"),
+    postPolicy: text("post_policy").notNull().default("members"),
+    publicKeyPem: text("public_key_pem").notNull(),
+    privateKeyPem: text("private_key_pem").notNull(),
+    createdBy: text("created_by").notNull(),
+    memberCount: integer("member_count").notNull().default(0),
+    createdAt: text("created_at").notNull().$defaultFn(nowIso),
+    lastMessageAt: text("last_message_at"),
+    deletedAt: text("deleted_at"),
+  },
+  (t) => [
+    index("communities_deleted_at_idx").on(t.deletedAt),
+    index("communities_visibility_idx").on(t.visibility),
+  ],
+);
+
+// ---------------------------------------------------------------------------
+// COMMUNITY_MEMBERS
+// ---------------------------------------------------------------------------
+
+export const communityMembers = sqliteTable(
+  "community_members",
+  {
+    communityApId: text("community_ap_id").notNull(),
+    actorApId: text("actor_ap_id").notNull(),
+    role: text("role").notNull().default("member"),
+    joinedAt: text("joined_at").notNull().$defaultFn(nowIso),
+    updatedAt: text("updated_at").$defaultFn(nowIso).$onUpdateFn(nowIso),
+  },
+  (t) => [
+    primaryKey({ columns: [t.communityApId, t.actorApId] }),
+    index("community_members_actor_idx").on(t.actorApId),
+    index("community_members_comm_role_joined_idx").on(
+      t.communityApId,
+      t.role,
+      t.joinedAt,
+    ),
+  ],
+);
+
+// ---------------------------------------------------------------------------
+// COMMUNITY_BANS — durable per-community bans so a kicked member cannot
+// immediately re-join an open community (consulted by the local join route +
+// the inbound Group Follow handler; cleared on explicit re-admission).
+// ---------------------------------------------------------------------------
+
+export const communityBans = sqliteTable(
+  "community_bans",
+  {
+    communityApId: text("community_ap_id").notNull(),
+    bannedApId: text("banned_ap_id").notNull(),
+    createdAt: text("created_at").notNull().$defaultFn(nowIso),
+  },
+  (t) => [
+    primaryKey({ columns: [t.communityApId, t.bannedApId] }),
+    index("community_bans_banned_idx").on(t.bannedApId),
+  ],
+);
+
+// ---------------------------------------------------------------------------
+// COMMUNITY_JOIN_REQUESTS
+// ---------------------------------------------------------------------------
+
+export const communityJoinRequests = sqliteTable(
+  "community_join_requests",
+  {
+    communityApId: text("community_ap_id").notNull(),
+    actorApId: text("actor_ap_id").notNull(),
+    status: text("status").notNull().default("pending"),
+    createdAt: text("created_at").notNull().$defaultFn(nowIso),
+    processedAt: text("processed_at"),
+  },
+  (t) => [
+    primaryKey({ columns: [t.communityApId, t.actorApId] }),
+    index("community_join_requests_comm_status_idx").on(
+      t.communityApId,
+      t.status,
+    ),
+    index("community_join_requests_actor_idx").on(t.actorApId),
+  ],
+);
+
+// ---------------------------------------------------------------------------
+// COMMUNITY_INVITES
+// ---------------------------------------------------------------------------
+
+export const communityInvites = sqliteTable(
+  "community_invites",
+  {
+    id: text("id").primaryKey(),
+    communityApId: text("community_ap_id").notNull(),
+    invitedByApId: text("invited_by_ap_id").notNull(),
+    invitedApId: text("invited_ap_id"),
+    createdAt: text("created_at").notNull().$defaultFn(nowIso),
+    expiresAt: text("expires_at"),
+    usedAt: text("used_at"),
+    usedByApId: text("used_by_ap_id"),
+  },
+  (t) => [
+    index("community_invites_comm_idx").on(t.communityApId),
+    index("community_invites_invited_by_idx").on(t.invitedByApId),
+  ],
+);

package/src/db/schema/date-utils.ts

@@ -0,0 +1,17 @@
+/** ISO timestamp with space separator for SQLite default values. */
+export function nowIso(): string {
+  return new Date().toISOString().replace("T", " ").replace("Z", "");
+}
+
+/**
+ * Canonical ISO-8601 UTC timestamp (`2026-…T…Z`) — the SAME shape produced by
+ * every explicit `new Date().toISOString()` write and used as every range
+ * comparison operand. Use this (NOT the space-separated `nowIso`) as the default
+ * for any column that is range-COMPARED or SORTED lexically, e.g.
+ * `inbox.created_at`: under SQLite BINARY collation a space-format value sorts
+ * BELOW a same-instant `…Z` value (space 0x20 < `T` 0x54 at position 10), so a
+ * column written in BOTH formats mis-orders / mis-paginates rows.
+ */
+export function nowIsoUtc(): string {
+  return new Date().toISOString();
+}

package/src/db/schema/index.ts

@@ -0,0 +1,17 @@
+/**
+ * Schema barrel export
+ *
+ * Re-exports all tables and relations from domain-specific schema files.
+ */
+
+export { nowIso } from "./date-utils.ts";
+
+export * from "./actors.ts";
+export * from "./posts.ts";
+export * from "./social.ts";
+export * from "./reports.ts";
+export * from "./communities.ts";
+export * from "./stories.ts";
+export * from "./messaging.ts";
+export * from "./mobile.ts";
+export * from "./relations.ts";