fedipod-server 0.29.0 → 0.31.0

package/lib/core/as2.mjs

@@ -1,206 +0,0 @@
-// as2.mjs — the one place ActivityStreams bytes become something to handle.
-//
-// An AS2 document IS a JSON-LD document; ActivityStreams 2.0 Core says so. We
-// read it as one. Expanding it to a graph is what makes the document mean the
-// same thing however its sender chose to write it — `"type": "Create"` and
-// `"@type": "as:Create"` are the same statement, and only a JSON-LD reader
-// knows that.
-//
-// The graph is what the handlers read, through lib/core/graphview.mjs. `doc`,
-// the copy compacted against the standard context, is kept for the callers
-// that republish what they read rather than act on it — compaction alone drops
-// any term the sender defined in its own context, so it is the weaker read.
-//
-// What we STORE and SEND is untouched by any of this. Bytes go into the pod as
-// they arrived, and lib/core/wire.mjs builds what we send as compacted AS2
-// with a plain string @context, as it always did. This is a reading layer.
-//
-// Every document goes through the processor. There is no shortcut for the
-// common shape: one that skipped it would not be read as JSON-LD, and would
-// produce no graph, so nothing could be validated against it.
-//
-// CONTEXTS ARE NEVER FETCHED. The loader serves the ones the fediverse
-// actually uses and refuses every other URL. That refusal is the point: this
-// code runs on documents a stranger wrote, in the same path the SSRF guards
-// protect, and expanding one would otherwise mean dereferencing a URL of their
-// choosing. A document naming a context we do not hold is not lost for it —
-// `groundContext` reads it against the contexts we hold and says so in
-// `degraded` — but nothing is ever fetched to make that happen.
-
-import jsonld from 'jsonld';
-import { AS_CTX } from './wire.mjs';
-import { CONTEXTS } from './contexts/index.mjs';
-import { graphView } from './graphview.mjs';
-
-export { CONTEXTS };
-
-/** Why a document could not be read. Carried to the caller so a drop is explained. */
-export class AS2Error extends Error {
-  constructor(reason, { context = null } = {}) {
-    super(reason);
-    this.name = 'AS2Error';
-    this.context = context;
-  }
-}
-
-/**
- * A loader over the contexts we hold, and nothing else.
- *
- * jsonld calls this for every `@context` URL in a document. Anything not in
- * the map throws rather than being fetched, so a document cannot make this
- * process reach out to an address its sender picked.
- */
-// Pleroma and Akkoma name their own copy of the litepub schema, one URL per
-// instance. Every copy is the same document, held here under the litepub
-// namespace, so a per-instance URL names that entry.
-const LITEPUB = 'http://litepub.social/ns';
-export const heldKey = (url) => (typeof url === 'string' && /\/schemas\/litepub-0\.1\.jsonld$/u.test(url) ? LITEPUB : url);
-
-export function contextLoader(url) {
-  const doc = CONTEXTS[heldKey(url)];
-  if (!doc) {
-    return Promise.reject(new AS2Error(`context not held here: ${url}`, { context: url }));
-  }
-  return Promise.resolve({ contextUrl: null, documentUrl: url, document: doc });
-}
-
-/**
- * Read AS2 bytes.
- *
- * Returns `{ doc, graph }` — the document compacted against the standard
- * context, which is what handlers read, and its quads, which is what a shape
- * is validated against. Throws AS2Error when the document cannot be read as
- * JSON-LD at all.
- *
- * `raw` is a string or a parsed object; both arrive here in practice.
- */
-export async function parseAS2(raw) {
-  let input;
-  if (typeof raw === 'string') {
-    try {
-      input = JSON.parse(raw);
-    } catch (e) {
-      throw new AS2Error(`not JSON: ${e.message}`);
-    }
-  } else {
-    input = raw;
-  }
-  if (!input || typeof input !== 'object') throw new AS2Error('not a JSON object');
-
-  // A document with no @context expands to nothing at all — every term is
-  // dropped, and the result is an empty graph rather than an error. Silently
-  // reading a delivery as "no statements" is the worst of the outcomes, so it
-  // is named here instead.
-  if (input['@context'] === undefined) throw new AS2Error('no @context');
-
-  const options = { documentLoader: contextLoader };
-  let graph;
-  let doc;
-  try {
-    graph = await jsonld.toRDF(input, options);          // RDF/JS quads, which is what a shape is checked against
-    doc = await jsonld.compact(input, AS_CTX, options);
-  } catch (e) {
-    if (e instanceof AS2Error) throw e;
-    // jsonld wraps a loader rejection; recover ours so the caller can say which
-    // context was missing rather than reporting a library's own phrasing.
-    const cause = e?.details?.cause ?? e?.cause;
-    if (cause instanceof AS2Error) throw cause;
-    throw new AS2Error(`not readable as JSON-LD: ${e.message}`);
-  }
-  return { doc, graph };
-}
-
-/**
- * Rewrite a document's `@context` to one we can read without fetching anything.
- *
- * A document carrying no `@context` is not a puzzle: AS2 Core §2.1 says a
- * consumer meeting `application/activity+json` without one MUST assume the
- * normative context still applies. That is what this does. A document naming a
- * context we do not hold keeps every entry we DO hold — inline objects
- * included, since those need no fetch — and loses only the unfetchable ones,
- * so a Mastodon post with an unknown extension still reads as a post.
- *
- * Nothing here dereferences a URL. The result names only contexts already on
- * disk, so the guarantee that a stranger's document cannot make us reach out
- * survives the fallback.
- */
-export function groundContext(input) {
-  const ctx = input['@context'];
-  const held = (c) => typeof c === 'string' ? Object.hasOwn(CONTEXTS, heldKey(c)) : (c && typeof c === 'object');
-  let kept;
-  if (ctx === undefined || ctx === null) kept = [];
-  else if (Array.isArray(ctx)) kept = ctx.filter(held);
-  else kept = held(ctx) ? [ctx] : [];
-  if (!kept.some(c => c === AS_CTX)) kept.unshift(AS_CTX);
-  return { ...input, '@context': kept.length === 1 ? kept[0] : kept };
-}
-
-/**
- * Read AS2 bytes, and when they cannot be read as JSON-LD as written, read
- * them against the contexts we do hold.
- *
- * A delivery naming a context we do not hold, or carrying none at all, is
- * still a delivery somebody sent. It is now grounded rather than refused, so
- * `graph` is present for anything that is JSON at all — which is what lets the
- * handlers read the graph instead of the document. `degraded` still carries
- * the reason the document could not be read exactly as written, so a caller
- * records what happened instead of letting it pass unnoticed.
- *
- * `doc` and `graph` are null only when the bytes are not JSON at all, which is
- * what the plain read would have concluded too.
- */
-/**
- * What a `null` in the document meant, carried onto the reading of it.
- *
- * ActivityPub §6.3.1: in an Update, a key set to `null` says REMOVE that
- * property. JSON-LD has no way to carry that — expansion drops a null outright
- * — so a partial update that takes something away arrives through the graph
- * saying nothing at all, and is indistinguishable from an Update that never
- * mentioned the property. The document plainly said it, so it is put back.
- *
- * Only nulls, only on the activity and its object, and only where the reading
- * does not already have the key: nothing here overrides what the graph carried.
- */
-function carryRemovals(input, view) {
-  if (!input || typeof input !== 'object' || !view || typeof view !== 'object') return view;
-  for (const [key, value] of Object.entries(input)) {
-    if (value === null) {
-      if (!(key in view)) view[key] = null;
-    } else if (key === 'object' && typeof value === 'object' && !Array.isArray(value)
-      && view.object && typeof view.object === 'object' && !Array.isArray(view.object)) {
-      carryRemovals(value, view.object);
-    }
-  }
-  return view;
-}
-
-export async function readLenient(raw) {
-  // The document's own node is the one its `id` names. Handed to the view
-  // as the root, so a document that points at itself — every actor does,
-  // through its key's `owner` — is still read as itself.
-  let input = null;
-  try { input = typeof raw === 'string' ? JSON.parse(raw) : (raw ?? null); } catch { /* not JSON either */ }
-  const own = input && typeof input === 'object' ? (input.id ?? input['@id']) : null;
-  const root = typeof own === 'string' && /^https?:\/\//u.test(own) ? own : null;
-  try {
-    const { doc, graph } = await parseAS2(raw);
-    return { doc, graph, view: carryRemovals(input, graphView(graph, { root })), degraded: null };
-  } catch (e) {
-    if (!input || typeof input !== 'object') return { doc: null, graph: null, view: null, degraded: e.message };
-    // Grounded, so a graph exists for every document that is JSON at all.
-    //
-    // `doc` stays the bytes as they were parsed, NOT the grounded compaction.
-    // Compacting shortens an IRI to whatever term names it — `#Public` comes
-    // back as `as:Public` — and the callers that still read `doc` republish
-    // what they read, so rewriting it here silently changed what they posted.
-    try {
-      const { graph } = await parseAS2(groundContext(input));
-      return { doc: input, graph, view: carryRemovals(input, graphView(graph, { root })), degraded: e.message };
-    } catch (inner) {
-      // Grounding names only held contexts, so reaching here means the document
-      // is malformed JSON-LD rather than unfetchable. Hand back what a plain
-      // read would have seen, with no graph, as this always did.
-      return { doc: input, graph: null, view: null, degraded: `${e.message}; grounded read also failed: ${inner.message}` };
-    }
-  }
-}

package/lib/core/contexts/activitystreams.json

@@ -1,379 +0,0 @@
-{
-  "@context": {
-    "@vocab": "_:",
-    "xsd": "http://www.w3.org/2001/XMLSchema#",
-    "as": "https://www.w3.org/ns/activitystreams#",
-    "ldp": "http://www.w3.org/ns/ldp#",
-    "vcard": "http://www.w3.org/2006/vcard/ns#",
-    "id": "@id",
-    "type": "@type",
-    "Accept": "as:Accept",
-    "Activity": "as:Activity",
-    "IntransitiveActivity": "as:IntransitiveActivity",
-    "Add": "as:Add",
-    "Announce": "as:Announce",
-    "Application": "as:Application",
-    "Arrive": "as:Arrive",
-    "Article": "as:Article",
-    "Audio": "as:Audio",
-    "Block": "as:Block",
-    "Collection": "as:Collection",
-    "CollectionPage": "as:CollectionPage",
-    "Relationship": "as:Relationship",
-    "Create": "as:Create",
-    "Delete": "as:Delete",
-    "Dislike": "as:Dislike",
-    "Document": "as:Document",
-    "Event": "as:Event",
-    "Follow": "as:Follow",
-    "Flag": "as:Flag",
-    "Group": "as:Group",
-    "Ignore": "as:Ignore",
-    "Image": "as:Image",
-    "Invite": "as:Invite",
-    "Join": "as:Join",
-    "Leave": "as:Leave",
-    "Like": "as:Like",
-    "Link": "as:Link",
-    "Mention": "as:Mention",
-    "Note": "as:Note",
-    "Object": "as:Object",
-    "Offer": "as:Offer",
-    "OrderedCollection": "as:OrderedCollection",
-    "OrderedCollectionPage": "as:OrderedCollectionPage",
-    "Organization": "as:Organization",
-    "Page": "as:Page",
-    "Person": "as:Person",
-    "Place": "as:Place",
-    "Profile": "as:Profile",
-    "Question": "as:Question",
-    "Reject": "as:Reject",
-    "Remove": "as:Remove",
-    "Service": "as:Service",
-    "TentativeAccept": "as:TentativeAccept",
-    "TentativeReject": "as:TentativeReject",
-    "Tombstone": "as:Tombstone",
-    "Undo": "as:Undo",
-    "Update": "as:Update",
-    "Video": "as:Video",
-    "View": "as:View",
-    "Listen": "as:Listen",
-    "Read": "as:Read",
-    "Move": "as:Move",
-    "Travel": "as:Travel",
-    "IsFollowing": "as:IsFollowing",
-    "IsFollowedBy": "as:IsFollowedBy",
-    "IsContact": "as:IsContact",
-    "IsMember": "as:IsMember",
-    "subject": {
-      "@id": "as:subject",
-      "@type": "@id"
-    },
-    "relationship": {
-      "@id": "as:relationship",
-      "@type": "@id"
-    },
-    "actor": {
-      "@id": "as:actor",
-      "@type": "@id"
-    },
-    "attributedTo": {
-      "@id": "as:attributedTo",
-      "@type": "@id"
-    },
-    "attachment": {
-      "@id": "as:attachment",
-      "@type": "@id"
-    },
-    "bcc": {
-      "@id": "as:bcc",
-      "@type": "@id"
-    },
-    "bto": {
-      "@id": "as:bto",
-      "@type": "@id"
-    },
-    "cc": {
-      "@id": "as:cc",
-      "@type": "@id"
-    },
-    "context": {
-      "@id": "as:context",
-      "@type": "@id"
-    },
-    "current": {
-      "@id": "as:current",
-      "@type": "@id"
-    },
-    "first": {
-      "@id": "as:first",
-      "@type": "@id"
-    },
-    "generator": {
-      "@id": "as:generator",
-      "@type": "@id"
-    },
-    "icon": {
-      "@id": "as:icon",
-      "@type": "@id"
-    },
-    "image": {
-      "@id": "as:image",
-      "@type": "@id"
-    },
-    "inReplyTo": {
-      "@id": "as:inReplyTo",
-      "@type": "@id"
-    },
-    "items": {
-      "@id": "as:items",
-      "@type": "@id"
-    },
-    "instrument": {
-      "@id": "as:instrument",
-      "@type": "@id"
-    },
-    "orderedItems": {
-      "@id": "as:items",
-      "@type": "@id",
-      "@container": "@list"
-    },
-    "last": {
-      "@id": "as:last",
-      "@type": "@id"
-    },
-    "location": {
-      "@id": "as:location",
-      "@type": "@id"
-    },
-    "next": {
-      "@id": "as:next",
-      "@type": "@id"
-    },
-    "object": {
-      "@id": "as:object",
-      "@type": "@id"
-    },
-    "oneOf": {
-      "@id": "as:oneOf",
-      "@type": "@id"
-    },
-    "anyOf": {
-      "@id": "as:anyOf",
-      "@type": "@id"
-    },
-    "closed": {
-      "@id": "as:closed",
-      "@type": "xsd:dateTime"
-    },
-    "origin": {
-      "@id": "as:origin",
-      "@type": "@id"
-    },
-    "accuracy": {
-      "@id": "as:accuracy",
-      "@type": "xsd:float"
-    },
-    "prev": {
-      "@id": "as:prev",
-      "@type": "@id"
-    },
-    "preview": {
-      "@id": "as:preview",
-      "@type": "@id"
-    },
-    "replies": {
-      "@id": "as:replies",
-      "@type": "@id"
-    },
-    "result": {
-      "@id": "as:result",
-      "@type": "@id"
-    },
-    "audience": {
-      "@id": "as:audience",
-      "@type": "@id"
-    },
-    "partOf": {
-      "@id": "as:partOf",
-      "@type": "@id"
-    },
-    "tag": {
-      "@id": "as:tag",
-      "@type": "@id"
-    },
-    "target": {
-      "@id": "as:target",
-      "@type": "@id"
-    },
-    "to": {
-      "@id": "as:to",
-      "@type": "@id"
-    },
-    "url": {
-      "@id": "as:url",
-      "@type": "@id"
-    },
-    "altitude": {
-      "@id": "as:altitude",
-      "@type": "xsd:float"
-    },
-    "content": "as:content",
-    "contentMap": {
-      "@id": "as:content",
-      "@container": "@language"
-    },
-    "name": "as:name",
-    "nameMap": {
-      "@id": "as:name",
-      "@container": "@language"
-    },
-    "duration": {
-      "@id": "as:duration",
-      "@type": "xsd:duration"
-    },
-    "endTime": {
-      "@id": "as:endTime",
-      "@type": "xsd:dateTime"
-    },
-    "height": {
-      "@id": "as:height",
-      "@type": "xsd:nonNegativeInteger"
-    },
-    "href": {
-      "@id": "as:href",
-      "@type": "@id"
-    },
-    "hreflang": "as:hreflang",
-    "latitude": {
-      "@id": "as:latitude",
-      "@type": "xsd:float"
-    },
-    "longitude": {
-      "@id": "as:longitude",
-      "@type": "xsd:float"
-    },
-    "mediaType": "as:mediaType",
-    "published": {
-      "@id": "as:published",
-      "@type": "xsd:dateTime"
-    },
-    "radius": {
-      "@id": "as:radius",
-      "@type": "xsd:float"
-    },
-    "rel": "as:rel",
-    "startIndex": {
-      "@id": "as:startIndex",
-      "@type": "xsd:nonNegativeInteger"
-    },
-    "startTime": {
-      "@id": "as:startTime",
-      "@type": "xsd:dateTime"
-    },
-    "summary": "as:summary",
-    "summaryMap": {
-      "@id": "as:summary",
-      "@container": "@language"
-    },
-    "totalItems": {
-      "@id": "as:totalItems",
-      "@type": "xsd:nonNegativeInteger"
-    },
-    "units": "as:units",
-    "updated": {
-      "@id": "as:updated",
-      "@type": "xsd:dateTime"
-    },
-    "width": {
-      "@id": "as:width",
-      "@type": "xsd:nonNegativeInteger"
-    },
-    "describes": {
-      "@id": "as:describes",
-      "@type": "@id"
-    },
-    "formerType": {
-      "@id": "as:formerType",
-      "@type": "@id"
-    },
-    "deleted": {
-      "@id": "as:deleted",
-      "@type": "xsd:dateTime"
-    },
-    "inbox": {
-      "@id": "ldp:inbox",
-      "@type": "@id"
-    },
-    "outbox": {
-      "@id": "as:outbox",
-      "@type": "@id"
-    },
-    "following": {
-      "@id": "as:following",
-      "@type": "@id"
-    },
-    "followers": {
-      "@id": "as:followers",
-      "@type": "@id"
-    },
-    "streams": {
-      "@id": "as:streams",
-      "@type": "@id"
-    },
-    "preferredUsername": "as:preferredUsername",
-    "endpoints": {
-      "@id": "as:endpoints",
-      "@type": "@id"
-    },
-    "uploadMedia": {
-      "@id": "as:uploadMedia",
-      "@type": "@id"
-    },
-    "proxyUrl": {
-      "@id": "as:proxyUrl",
-      "@type": "@id"
-    },
-    "liked": {
-      "@id": "as:liked",
-      "@type": "@id"
-    },
-    "oauthAuthorizationEndpoint": {
-      "@id": "as:oauthAuthorizationEndpoint",
-      "@type": "@id"
-    },
-    "oauthTokenEndpoint": {
-      "@id": "as:oauthTokenEndpoint",
-      "@type": "@id"
-    },
-    "provideClientKey": {
-      "@id": "as:provideClientKey",
-      "@type": "@id"
-    },
-    "signClientKey": {
-      "@id": "as:signClientKey",
-      "@type": "@id"
-    },
-    "sharedInbox": {
-      "@id": "as:sharedInbox",
-      "@type": "@id"
-    },
-    "Public": {
-      "@id": "as:Public",
-      "@type": "@id"
-    },
-    "source": "as:source",
-    "likes": {
-      "@id": "as:likes",
-      "@type": "@id"
-    },
-    "shares": {
-      "@id": "as:shares",
-      "@type": "@id"
-    },
-    "alsoKnownAs": {
-      "@id": "as:alsoKnownAs",
-      "@type": "@id"
-    }
-  }
-}