@takosjp/yurucommu-core 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (185) hide show
  1. package/LICENSE +16 -0
  2. package/README.md +82 -0
  3. package/migrations/0001_init.sql +495 -0
  4. package/migrations/0002_social_remote_actor_edges.sql +92 -0
  5. package/migrations/0003_activity_remote_object_edges.sql +68 -0
  6. package/migrations/0004_blocklist.sql +26 -0
  7. package/migrations/0005_story_community_scope.sql +13 -0
  8. package/migrations/0006_dm_community_read_status.sql +19 -0
  9. package/migrations/0007_moderation_reports.sql +22 -0
  10. package/migrations/0008_actor_fields_aka.sql +18 -0
  11. package/migrations/0009_object_tags.sql +13 -0
  12. package/migrations/0010_object_recipients_drop_actor_fk.sql +34 -0
  13. package/migrations/0011_drop_remote_actor_fks.sql +205 -0
  14. package/migrations/0012_objects_content_fts.sql +39 -0
  15. package/migrations/0013_efficiency_indexes.sql +13 -0
  16. package/migrations/0014_inbox_actor_created_idx.sql +15 -0
  17. package/migrations/0015_community_bans.sql +16 -0
  18. package/migrations/0016_namespace_takos_oidc_subject.sql +19 -0
  19. package/migrations/0017_mobile_push_registrations.sql +22 -0
  20. package/migrations/README.md +122 -0
  21. package/package.json +75 -0
  22. package/packages/api/LICENSE +16 -0
  23. package/packages/api/package.json +30 -0
  24. package/packages/api/src/index.ts +4 -0
  25. package/packages/api/src/lib/api/account.ts +20 -0
  26. package/packages/api/src/lib/api/actors.ts +149 -0
  27. package/packages/api/src/lib/api/auth.ts +46 -0
  28. package/packages/api/src/lib/api/communities.ts +329 -0
  29. package/packages/api/src/lib/api/dm.test.ts +67 -0
  30. package/packages/api/src/lib/api/dm.ts +236 -0
  31. package/packages/api/src/lib/api/fetch.ts +111 -0
  32. package/packages/api/src/lib/api/follow.ts +30 -0
  33. package/packages/api/src/lib/api/media.ts +100 -0
  34. package/packages/api/src/lib/api/moderation.ts +98 -0
  35. package/packages/api/src/lib/api/normalize.ts +71 -0
  36. package/packages/api/src/lib/api/notifications.test.ts +63 -0
  37. package/packages/api/src/lib/api/notifications.ts +61 -0
  38. package/packages/api/src/lib/api/posts.test.ts +110 -0
  39. package/packages/api/src/lib/api/posts.ts +181 -0
  40. package/packages/api/src/lib/api/recommendations.ts +22 -0
  41. package/packages/api/src/lib/api/search.ts +88 -0
  42. package/packages/api/src/lib/api/stories.ts +80 -0
  43. package/packages/api/src/lib/api.ts +15 -0
  44. package/packages/api/src/lib/fetch-with-timeout.ts +42 -0
  45. package/packages/api/src/lib/transport.ts +40 -0
  46. package/packages/api/src/social-server.ts +47 -0
  47. package/packages/api/src/types/index.ts +185 -0
  48. package/scripts/apply-takosumi-migrations.ts +621 -0
  49. package/src/backend/federation-helpers.ts +36 -0
  50. package/src/backend/index.ts +872 -0
  51. package/src/backend/lib/account-migration.ts +106 -0
  52. package/src/backend/lib/activitypub-actor-cache.ts +238 -0
  53. package/src/backend/lib/activitypub-helpers.ts +131 -0
  54. package/src/backend/lib/activitypub-validators.ts +323 -0
  55. package/src/backend/lib/ap-context.ts +16 -0
  56. package/src/backend/lib/ap-ids.ts +101 -0
  57. package/src/backend/lib/ap-response.ts +30 -0
  58. package/src/backend/lib/ap-signing.ts +87 -0
  59. package/src/backend/lib/ap-verify.ts +670 -0
  60. package/src/backend/lib/auth-lockout.ts +230 -0
  61. package/src/backend/lib/backend-paths.ts +34 -0
  62. package/src/backend/lib/base64.ts +30 -0
  63. package/src/backend/lib/blocklist-purge.ts +109 -0
  64. package/src/backend/lib/blocklist.ts +279 -0
  65. package/src/backend/lib/chunk.ts +33 -0
  66. package/src/backend/lib/client-ip.ts +169 -0
  67. package/src/backend/lib/community-visibility.ts +230 -0
  68. package/src/backend/lib/crypto.ts +424 -0
  69. package/src/backend/lib/delivery/circuit.ts +265 -0
  70. package/src/backend/lib/delivery/metrics.ts +30 -0
  71. package/src/backend/lib/delivery/planner.ts +190 -0
  72. package/src/backend/lib/delivery/queue-batching.ts +626 -0
  73. package/src/backend/lib/delivery/queue-delivery.ts +641 -0
  74. package/src/backend/lib/delivery/queue.ts +576 -0
  75. package/src/backend/lib/delivery/transformers.ts +56 -0
  76. package/src/backend/lib/delivery/types.ts +139 -0
  77. package/src/backend/lib/errors.ts +114 -0
  78. package/src/backend/lib/federation-fetch.ts +296 -0
  79. package/src/backend/lib/feed-cursor.ts +57 -0
  80. package/src/backend/lib/feed-exclude.ts +48 -0
  81. package/src/backend/lib/hex.ts +8 -0
  82. package/src/backend/lib/log-mask.ts +213 -0
  83. package/src/backend/lib/logger.ts +285 -0
  84. package/src/backend/lib/mobile-contract.ts +137 -0
  85. package/src/backend/lib/oauth-providers.ts +324 -0
  86. package/src/backend/lib/oauth-utils.ts +148 -0
  87. package/src/backend/lib/oidc-id-token.ts +151 -0
  88. package/src/backend/lib/parse-helpers.ts +31 -0
  89. package/src/backend/lib/post-visibility.ts +190 -0
  90. package/src/backend/lib/session-actor.ts +61 -0
  91. package/src/backend/lib/ssrf.ts +428 -0
  92. package/src/backend/lib/strip-image-metadata.ts +191 -0
  93. package/src/backend/middleware/bearer-auth.ts +70 -0
  94. package/src/backend/middleware/body-limit.ts +212 -0
  95. package/src/backend/middleware/cache.ts +429 -0
  96. package/src/backend/middleware/csrf.ts +130 -0
  97. package/src/backend/middleware/error-handler.ts +77 -0
  98. package/src/backend/middleware/rate-limit.ts +308 -0
  99. package/src/backend/public.ts +21 -0
  100. package/src/backend/routes/account-teardown.ts +430 -0
  101. package/src/backend/routes/activitypub/handlers/actor-inbox-handlers.ts +354 -0
  102. package/src/backend/routes/activitypub/handlers/inbound-timestamp.ts +29 -0
  103. package/src/backend/routes/activitypub/handlers/inbox-content-handlers.ts +1634 -0
  104. package/src/backend/routes/activitypub/handlers/inbox-follow-handlers.ts +547 -0
  105. package/src/backend/routes/activitypub/handlers/inbox-interaction-handlers.ts +497 -0
  106. package/src/backend/routes/activitypub/handlers/inbox-shared-helpers.ts +262 -0
  107. package/src/backend/routes/activitypub/handlers/user-inbox-handlers.ts +35 -0
  108. package/src/backend/routes/activitypub/inbox-types.ts +74 -0
  109. package/src/backend/routes/activitypub/inbox.ts +1191 -0
  110. package/src/backend/routes/activitypub/outbox.ts +0 -0
  111. package/src/backend/routes/activitypub/query-helpers.ts +227 -0
  112. package/src/backend/routes/activitypub.ts +616 -0
  113. package/src/backend/routes/actors-helpers.ts +487 -0
  114. package/src/backend/routes/actors.ts +1311 -0
  115. package/src/backend/routes/apps.ts +313 -0
  116. package/src/backend/routes/auth-helpers.ts +566 -0
  117. package/src/backend/routes/auth.ts +615 -0
  118. package/src/backend/routes/communities/membership-invites.ts +208 -0
  119. package/src/backend/routes/communities/membership-join.ts +335 -0
  120. package/src/backend/routes/communities/membership-members.ts +539 -0
  121. package/src/backend/routes/communities/membership-requests.ts +296 -0
  122. package/src/backend/routes/communities/membership-shared.ts +364 -0
  123. package/src/backend/routes/communities/messages.ts +479 -0
  124. package/src/backend/routes/communities/routes.ts +624 -0
  125. package/src/backend/routes/communities.ts +21 -0
  126. package/src/backend/routes/dm/contacts.ts +525 -0
  127. package/src/backend/routes/dm/conversations-helpers.ts +197 -0
  128. package/src/backend/routes/dm/conversations.ts +25 -0
  129. package/src/backend/routes/dm/messages.ts +658 -0
  130. package/src/backend/routes/dm/query-helpers.ts +85 -0
  131. package/src/backend/routes/dm/read-archive.ts +228 -0
  132. package/src/backend/routes/dm/requests.ts +222 -0
  133. package/src/backend/routes/dm/typing.ts +81 -0
  134. package/src/backend/routes/dm.ts +15 -0
  135. package/src/backend/routes/follow-helpers.ts +370 -0
  136. package/src/backend/routes/follow.ts +588 -0
  137. package/src/backend/routes/media.ts +692 -0
  138. package/src/backend/routes/mobile.ts +159 -0
  139. package/src/backend/routes/moderation.ts +373 -0
  140. package/src/backend/routes/notifications.ts +757 -0
  141. package/src/backend/routes/posts/delete-cascade.ts +330 -0
  142. package/src/backend/routes/posts/interactions.ts +795 -0
  143. package/src/backend/routes/posts/post-helpers.ts +847 -0
  144. package/src/backend/routes/posts/queries.ts +537 -0
  145. package/src/backend/routes/posts/routes.ts +865 -0
  146. package/src/backend/routes/posts/transformers.ts +161 -0
  147. package/src/backend/routes/posts.ts +17 -0
  148. package/src/backend/routes/recommendations.ts +88 -0
  149. package/src/backend/routes/search.ts +730 -0
  150. package/src/backend/routes/stories/interactions.ts +576 -0
  151. package/src/backend/routes/stories/query-helpers.ts +482 -0
  152. package/src/backend/routes/stories/routes.ts +906 -0
  153. package/src/backend/routes/stories.ts +13 -0
  154. package/src/backend/routes/takos-tools/dm.ts +249 -0
  155. package/src/backend/routes/takos-tools/follows.ts +225 -0
  156. package/src/backend/routes/takos-tools/posts.ts +292 -0
  157. package/src/backend/routes/takos-tools/search.ts +228 -0
  158. package/src/backend/routes/takos-tools/timeline.ts +132 -0
  159. package/src/backend/routes/takos-tools/types.ts +10 -0
  160. package/src/backend/routes/takos-tools-response.ts +178 -0
  161. package/src/backend/routes/takos-tools.ts +153 -0
  162. package/src/backend/routes/timeline.ts +755 -0
  163. package/src/backend/runtime/bun.ts +620 -0
  164. package/src/backend/runtime/cloudflare.ts +202 -0
  165. package/src/backend/runtime/compat-bun/types.ts +44 -0
  166. package/src/backend/runtime/memory-kv.ts +104 -0
  167. package/src/backend/runtime/shared.ts +142 -0
  168. package/src/backend/runtime/types.ts +205 -0
  169. package/src/backend/server.ts +636 -0
  170. package/src/backend/types.ts +143 -0
  171. package/src/db/index.ts +97 -0
  172. package/src/db/schema/actors.ts +129 -0
  173. package/src/db/schema/communities.ts +133 -0
  174. package/src/db/schema/date-utils.ts +17 -0
  175. package/src/db/schema/index.ts +17 -0
  176. package/src/db/schema/messaging.ts +241 -0
  177. package/src/db/schema/mobile.ts +37 -0
  178. package/src/db/schema/posts.ts +150 -0
  179. package/src/db/schema/relations.ts +266 -0
  180. package/src/db/schema/reports.ts +33 -0
  181. package/src/db/schema/social.ts +106 -0
  182. package/src/db/schema/stories.ts +70 -0
  183. package/src/db/schema.ts +15 -0
  184. package/src/plugin/public.ts +7 -0
  185. package/src/runtime/site-worker.ts +10 -0
@@ -0,0 +1,33 @@
1
+ /**
2
+ * Moderation reports table.
3
+ *
4
+ * Inbound `Flag` activities (federated abuse reports) are persisted here so
5
+ * operators can review them via the moderation API instead of the report
6
+ * being lost to a log line. Rows are append-only at ingest; an operator marks
7
+ * a report handled by stamping `resolvedAt`.
8
+ */
9
+
10
+ import { index, sqliteTable, text } from "drizzle-orm/sqlite-core";
11
+ import { nowIso } from "./date-utils.ts";
12
+
13
+ export const reports = sqliteTable(
14
+ "reports",
15
+ {
16
+ id: text("id").primaryKey(),
17
+ // AP-ID of the actor that sent the Flag.
18
+ reporterApId: text("reporter_ap_id").notNull(),
19
+ // AP-ID of the reported object/actor (Flag `object`).
20
+ targetApId: text("target_ap_id"),
21
+ // Free-text reason carried by the Flag (`content`).
22
+ content: text("content"),
23
+ // Origin hostname of the reporter, for at-a-glance triage.
24
+ instance: text("instance"),
25
+ createdAt: text("created_at").notNull().$defaultFn(nowIso),
26
+ // Stamped when an operator marks the report handled; null while open.
27
+ resolvedAt: text("resolved_at"),
28
+ },
29
+ (t) => [
30
+ index("reports_created_idx").on(t.createdAt),
31
+ index("reports_resolved_idx").on(t.resolvedAt),
32
+ ],
33
+ );
@@ -0,0 +1,106 @@
1
+ /**
2
+ * Social graph tables: follows, blocks, mutes
3
+ */
4
+
5
+ import {
6
+ index,
7
+ integer,
8
+ primaryKey,
9
+ sqliteTable,
10
+ text,
11
+ } from "drizzle-orm/sqlite-core";
12
+ import { nowIso } from "./date-utils.ts";
13
+
14
+ // ---------------------------------------------------------------------------
15
+ // FOLLOWS
16
+ // ---------------------------------------------------------------------------
17
+
18
+ export const follows = sqliteTable(
19
+ "follows",
20
+ {
21
+ followerApId: text("follower_ap_id").notNull(),
22
+ followingApId: text("following_ap_id").notNull(),
23
+ status: text("status").notNull().default("pending"),
24
+ activityApId: text("activity_ap_id"),
25
+ createdAt: text("created_at").notNull().$defaultFn(nowIso),
26
+ acceptedAt: text("accepted_at"),
27
+ },
28
+ (t) => [
29
+ primaryKey({ columns: [t.followerApId, t.followingApId] }),
30
+ index("follows_follower_status_idx").on(t.followerApId, t.status),
31
+ index("follows_following_status_idx").on(t.followingApId, t.status),
32
+ index("follows_following_created_idx").on(t.followingApId, t.createdAt),
33
+ // Mirror of follows_following_created_idx for the FOLLOWING-list direction
34
+ // (where follower_ap_id=X order by created_at) — previously only the
35
+ // followers direction had a created-at covering index.
36
+ index("follows_follower_created_idx").on(t.followerApId, t.createdAt),
37
+ index("follows_activity_idx").on(t.activityApId),
38
+ ],
39
+ );
40
+
41
+ // ---------------------------------------------------------------------------
42
+ // BLOCKS
43
+ // ---------------------------------------------------------------------------
44
+
45
+ export const blocks = sqliteTable(
46
+ "blocks",
47
+ {
48
+ blockerApId: text("blocker_ap_id").notNull(),
49
+ blockedApId: text("blocked_ap_id").notNull(),
50
+ createdAt: text("created_at").notNull().$defaultFn(nowIso),
51
+ updatedAt: text("updated_at").$defaultFn(nowIso).$onUpdateFn(nowIso),
52
+ },
53
+ (t) => [
54
+ primaryKey({ columns: [t.blockerApId, t.blockedApId] }),
55
+ index("blocks_blocker_idx").on(t.blockerApId),
56
+ index("blocks_blocked_idx").on(t.blockedApId),
57
+ ],
58
+ );
59
+
60
+ // ---------------------------------------------------------------------------
61
+ // MUTES
62
+ // ---------------------------------------------------------------------------
63
+
64
+ export const mutes = sqliteTable(
65
+ "mutes",
66
+ {
67
+ muterApId: text("muter_ap_id").notNull(),
68
+ mutedApId: text("muted_ap_id").notNull(),
69
+ createdAt: text("created_at").notNull().$defaultFn(nowIso),
70
+ updatedAt: text("updated_at").$defaultFn(nowIso).$onUpdateFn(nowIso),
71
+ },
72
+ (t) => [
73
+ primaryKey({ columns: [t.muterApId, t.mutedApId] }),
74
+ index("mutes_muter_idx").on(t.muterApId),
75
+ index("mutes_muted_idx").on(t.mutedApId),
76
+ ],
77
+ );
78
+
79
+ // ---------------------------------------------------------------------------
80
+ // BLOCKED_DOMAINS / BLOCKED_ACTORS (federation moderation blocklist)
81
+ // ---------------------------------------------------------------------------
82
+ //
83
+ // `blockedDomains` blocks every actor whose AP-ID hostname matches; the row
84
+ // is checked once per inbound activity. `blockedActors` blocks individual
85
+ // remote actors and exists alongside per-user `blocks` so that operator-level
86
+ // moderation can override what a single user can revoke.
87
+
88
+ export const blockedDomains = sqliteTable(
89
+ "blocked_domains",
90
+ {
91
+ domain: text("domain").primaryKey(),
92
+ reason: text("reason"),
93
+ createdAt: text("created_at").notNull().$defaultFn(nowIso),
94
+ },
95
+ (t) => [index("blocked_domains_created_idx").on(t.createdAt)],
96
+ );
97
+
98
+ export const blockedActors = sqliteTable(
99
+ "blocked_actors",
100
+ {
101
+ actorApId: text("actor_ap_id").primaryKey(),
102
+ reason: text("reason"),
103
+ createdAt: text("created_at").notNull().$defaultFn(nowIso),
104
+ },
105
+ (t) => [index("blocked_actors_created_idx").on(t.createdAt)],
106
+ );
@@ -0,0 +1,70 @@
1
+ /**
2
+ * Story-related tables: storyViews, storyVotes, storyShares
3
+ */
4
+
5
+ import {
6
+ index,
7
+ integer,
8
+ primaryKey,
9
+ sqliteTable,
10
+ text,
11
+ uniqueIndex,
12
+ } from "drizzle-orm/sqlite-core";
13
+ import { nowIso } from "./date-utils.ts";
14
+
15
+ // ---------------------------------------------------------------------------
16
+ // STORY_VIEWS
17
+ // ---------------------------------------------------------------------------
18
+
19
+ export const storyViews = sqliteTable(
20
+ "story_views",
21
+ {
22
+ actorApId: text("actor_ap_id").notNull(),
23
+ storyApId: text("story_ap_id").notNull(),
24
+ viewedAt: text("viewed_at").notNull().$defaultFn(nowIso),
25
+ },
26
+ (t) => [
27
+ primaryKey({ columns: [t.actorApId, t.storyApId] }),
28
+ index("story_views_actor_idx").on(t.actorApId),
29
+ index("story_views_story_idx").on(t.storyApId),
30
+ ],
31
+ );
32
+
33
+ // ---------------------------------------------------------------------------
34
+ // STORY_VOTES
35
+ // ---------------------------------------------------------------------------
36
+
37
+ export const storyVotes = sqliteTable(
38
+ "story_votes",
39
+ {
40
+ id: text("id").primaryKey(),
41
+ storyApId: text("story_ap_id").notNull(),
42
+ actorApId: text("actor_ap_id").notNull(),
43
+ optionIndex: integer("option_index").notNull(),
44
+ createdAt: text("created_at").notNull().$defaultFn(nowIso),
45
+ },
46
+ (t) => [
47
+ uniqueIndex("story_votes_story_actor_idx").on(t.storyApId, t.actorApId),
48
+ index("story_votes_story_idx").on(t.storyApId),
49
+ index("story_votes_actor_idx").on(t.actorApId),
50
+ ],
51
+ );
52
+
53
+ // ---------------------------------------------------------------------------
54
+ // STORY_SHARES
55
+ // ---------------------------------------------------------------------------
56
+
57
+ export const storyShares = sqliteTable(
58
+ "story_shares",
59
+ {
60
+ id: text("id").primaryKey(),
61
+ storyApId: text("story_ap_id").notNull(),
62
+ actorApId: text("actor_ap_id").notNull(),
63
+ sharedAt: text("shared_at").notNull().$defaultFn(nowIso),
64
+ },
65
+ (t) => [
66
+ uniqueIndex("story_shares_story_actor_idx").on(t.storyApId, t.actorApId),
67
+ index("story_shares_story_idx").on(t.storyApId),
68
+ index("story_shares_actor_idx").on(t.actorApId),
69
+ ],
70
+ );
@@ -0,0 +1,15 @@
1
+ /**
2
+ * Drizzle ORM Schema for Yurucommu
3
+ *
4
+ * This file re-exports all schema definitions from domain-specific modules
5
+ * under ./schema/. See individual files for table definitions:
6
+ * - schema/actors.ts: actors, actorCache, instanceActor, sessions
7
+ * - schema/posts.ts: objects, likes, announces, bookmarks, objectRecipients
8
+ * - schema/social.ts: follows, blocks, mutes
9
+ * - schema/communities.ts: communities, communityMembers, communityJoinRequests, communityInvites
10
+ * - schema/stories.ts: storyViews, storyVotes, storyShares
11
+ * - schema/messaging.ts: activities, deliveryQueue, deliveryCircuit, inbox, notificationArchived, dm*, dmCommunityReadStatus, mediaUploads
12
+ * - schema/relations.ts: all Drizzle relation definitions
13
+ */
14
+
15
+ export * from "./schema/index.ts";
@@ -0,0 +1,7 @@
1
+ export { YURUCOMMU_BACKEND_PLUGIN_API_VERSION } from "../backend/public.ts";
2
+
3
+ export type {
4
+ BackendPluginContextV1,
5
+ CreateYurucommuBackendAppOptionsV1,
6
+ YurucommuBackendPluginV1,
7
+ } from "../backend/public.ts";
@@ -0,0 +1,10 @@
1
+ interface SiteWorkerEnv {
2
+ ASSETS: { fetch: (req: Request) => Promise<Response> };
3
+ }
4
+
5
+ export default {
6
+ async fetch(request: Request, env: SiteWorkerEnv): Promise<Response> {
7
+ // Static-site mode: serve assets only (no API/backend routes).
8
+ return env.ASSETS.fetch(request);
9
+ },
10
+ };