fedipod-server 0.28.1 → 0.30.0

package/lib/client/masto/instance.mjs

@@ -1,112 +0,0 @@
-// instance.mjs — what the instance says about itself: the v1 and v2 instance
-// documents, the limits a client reads from them, the title and blurb, the
-// tag object, and the empty-collection stubs for endpoints a single-actor
-// instance has nothing to say to.
-
-import { TRANSPARENT_PNG } from './render.mjs';
-import {
-  MAX_OPTIONS as POLL_MAX_OPTIONS, MAX_OPTION_CHARS as POLL_MAX_OPTION_CHARS,
-  MIN_SECONDS as POLL_MIN_SECONDS, MAX_SECONDS as POLL_MAX_SECONDS,
-} from '../../core/polls.mjs';
-
-const STUBS = new Map(Object.entries({
-  '/api/v1/filters': [],
-  '/api/v1/custom_emojis': [],
-  '/api/v1/announcements': [],
-  '/api/v1/instance/peers': [],
-  '/api/v1/trends/links': [],
-  '/api/v2/suggestions': [],
-  '/api/v1/preferences': {},
-}));   // followed_tags is served live from the tag feed, not stubbed
-
-export function instanceConfig() {
-  return {
-    statuses: { max_characters: 5000, max_media_attachments: 4, characters_reserved_per_url: 23 },
-    media_attachments: {
-      supported_mime_types: ['image/jpeg', 'image/png', 'image/gif', 'image/webp',
-        'video/mp4', 'video/webm', 'audio/mpeg', 'audio/ogg'],
-      image_size_limit: 10 * 1024 * 1024, video_size_limit: 40 * 1024 * 1024,
-      image_matrix_limit: 16777216, video_matrix_limit: 2304000,
-    },
-    polls: {
-      max_options: POLL_MAX_OPTIONS,
-      max_characters_per_option: POLL_MAX_OPTION_CHARS,
-      min_expiration: POLL_MIN_SECONDS,
-      max_expiration: POLL_MAX_SECONDS,
-    },
-    accounts: { max_featured_tags: 0 },
-  };
-}
-
-// Every agent used to report title 'solid-activitypub', so a client holding two
-// of them showed two identical instances and you had to read the acct to tell
-// them apart. The title is free text no client parses — make it say who.
-export function instanceTitle(api) {
-  const cfg = api.store.getConfig();
-  return cfg?.handle ? `@${cfg.handle}@${api.host}` : 'FediPod';
-}
-
-// A Mastodon Tag object. The client reads `following` in its Followed
-// Hashtags view and toggles it with the follow/unfollow endpoints. No usage
-// history — a single-actor instance has no firehose stats to report.
-export function tagObject(api, name, following, req, history = []) {
-  const host = req?.headers?.host || api.host;
-  return { name, url: `https://${host}/tags/${name}`, history, following: !!following };
-}
-
-export function instanceBlurb(api) {
-  const kind = api.store.getConfig()?.kind === 'group' ? 'group' : 'actor';
-  return `Solid pod ActivityPub ${kind}`;
-}
-
-// The Mastodon API version this facade answers to. Clients read it for what
-// the server can do beyond the version string: grouped notifications from 2,
-// a filter's blur action from 5, quote posts from 7. Everything up to 7 is
-// served here; nothing past it is claimed.
-const API_VERSIONS = { mastodon: 7 };
-
-export async function handle(api, ctx) {
-  const { req, res, pathname, url, send } = ctx;   // eslint-disable-line no-unused-vars
-
-  // --- instance (public) ---
-  if (pathname === '/api/v1/instance') {
-    const su = api.streamingUrl(req);
-    return send(200, {
-      uri: api.host, title: api.instanceTitle(), short_description: api.instanceBlurb(),
-      description: api.instanceBlurb(), email: '', version: '4.2.0 (compatible; fedipod)',
-      api_versions: API_VERSIONS,
-      urls: su ? { streaming_api: su } : {},
-      stats: { user_count: 1, status_count: api.store.countStatuses(), domain_count: 1 },
-      languages: ['en'], registrations: false, approval_required: false, invites_enabled: false,
-      configuration: instanceConfig(),
-      contact_account: null, rules: [],
-    });
-  }
-  if (pathname === '/api/v2/instance') {
-    const su = api.streamingUrl(req);
-    return send(200, {
-      domain: api.host, title: api.instanceTitle(), version: '4.2.0 (compatible; fedipod)',
-      api_versions: API_VERSIONS,
-      source_url: 'https://github.com/jeff-zucker/FediPod', description: api.instanceBlurb(),
-      usage: { users: { active_month: 1 } },
-      thumbnail: { url: TRANSPARENT_PNG },
-      languages: ['en'],
-      // Both spellings: v2 clients read configuration.urls.streaming, older
-      // ones the top-level urls.streaming_api, and some fall back blindly.
-      // Omitted entirely when there is no streaming, so the client polls.
-      urls: su ? { streaming_api: su } : {},
-      configuration: {
-        ...instanceConfig(),
-        ...(su ? { urls: { streaming: su } } : {}),
-        ...(api.webPush ? { vapid: { public_key: api.push.publicKey() } } : {}),
-      },
-      registrations: { enabled: false, approval_required: false, message: null },
-      contact: { email: '', account: null }, rules: [],
-    });
-  }
-
-  const stub = STUBS.get(pathname);
-  if (stub !== undefined && req.method === 'GET') return send(200, stub);
-
-  return false;
-}

package/lib/client/masto/media.mjs

@@ -1,79 +0,0 @@
-// media.mjs — an upload on its way to the pod's media container: what an
-// attachment is allowed to be and the two media endpoints. The multipart
-// reader moved to body.mjs, which is where a client's body is read.
-
-import crypto from 'node:crypto';
-import * as podMedia from '../../pod/media.mjs';
-import { readBody, readMultipart } from './body.mjs';
-
-// What an attachment is allowed to BE. Anything else is stored as bytes, which
-// a browser downloads rather than runs.
-const ATTACHMENT_KINDS = new Set(['image', 'video', 'audio']);
-// image/* with an exception: an SVG is a document, it carries script, and a
-// browser renders it rather than showing it. Mastodon does not take them as
-// media either.
-const NEVER = new Set(['image/svg+xml', 'image/svg']);
-const OPAQUE = 'application/octet-stream';
-
-export function attachmentType(claimed) {
-  const t = String(claimed || '').split(';')[0].trim().toLowerCase();
-  if (!/^[a-z0-9.+-]+\/[a-z0-9.+-]+$/.test(t) || NEVER.has(t)) return OPAQUE;
-  return ATTACHMENT_KINDS.has(t.split('/')[0]) ? t : OPAQUE;
-}
-
-// From the TYPE we accepted, not from the name the client sent — an `.html`
-// suffix on a file stored as octet-stream is what a pod would serve from, and
-// a filename is the client's to choose.
-export function extensionFor(mediaType, filename = '') {
-  if (mediaType === OPAQUE) return 'bin';
-  const sub = mediaType.split('/')[1].replace(/[^a-z0-9]/g, '');
-  const given = String(filename || '').includes('.')
-    ? filename.split('.').pop().toLowerCase().replace(/[^a-z0-9]/g, '') : '';
-  // Keep the client's suffix only when it plainly belongs to the accepted type,
-  // so jpg/jpeg and mp4/m4v survive without a table of every media type.
-  return given && (given === sub || sub.startsWith(given) || given.startsWith(sub)) ? given : (sub || 'bin');
-}
-
-export async function handle(api, ctx) {
-  const { req, res, pathname, url, send } = ctx;   // eslint-disable-line no-unused-vars
-
-  // Media upload: file → remote pod /ap/media/ (public-Read), entry in the
-  // media registry so a later POST /statuses can attach it.
-  if ((pathname === '/api/v2/media' || pathname === '/api/v1/media') && req.method === 'POST') {
-    const { fields, file } = await readMultipart(req);
-    if (!file?.data?.length) return send(422, { error: 'file required' });
-    // The client said what this is, and we used to believe it. The media
-    // container is world-readable and sits on the pod's own origin — the same
-    // origin as the WebID and the ACLs — so a file stored as text/html is a
-    // page served from your identity, and script in it runs as you in any
-    // browser already logged into that pod. A bearer is not "only you": the
-    // facade exists so third-party clients can connect, tokens last 90 days,
-    // and no scope is enforced. So any client you authorize could leave that
-    // page behind.
-    const mediaType = attachmentType(file.contentType);
-    const ext = extensionFor(mediaType, file.filename);
-    const slug = new Date().toISOString().slice(0, 10) + '-' + crypto.randomBytes(4).toString('hex') + '.' + ext;
-    const mediaUrl = api.urls.media + slug;
-    await api.agent.publisher.ensureMediaContainer();
-    await podMedia.write(api.agent.remote, mediaUrl, file.data, mediaType);
-    const entry = { url: mediaUrl, mediaType, description: fields.description || '' };
-    const id = api.store.idFor(mediaUrl);
-    api.store.setMedia(id, entry);
-    return send(200, api.mediaJson({ id, ...entry }));
-  }
-  const mMedia = /^\/api\/v1\/media\/([a-f0-9]+)$/.exec(pathname);
-  if (mMedia) {
-    const entry = api.store.getMedia()[mMedia[1]];
-    if (!entry) return send(404, { error: 'Record not found' });
-    if (req.method === 'PUT') {
-      const body = await readBody(req);
-      if (typeof body.description === 'string') {
-        entry.description = body.description;
-        api.store.setMedia(mMedia[1], entry);
-      }
-    }
-    return send(200, api.mediaJson({ id: mMedia[1], ...entry }));
-  }
-
-  return false;
-}