Changeset 0cea12b in Klonkt

Timestamp:

07/20/2026 08:19:20 PM (7 weeks ago)

Author:

Robin <roboburr@…>

Branches:

main

Children:

81b2e1e

Parents:

513ba82

git-author:

Robin <roboburr@…> (07/20/2026 08:18:21 PM)

git-committer:

Robin <roboburr@…> (07/20/2026 08:19:20 PM)

Message:

Feature: owner inbox read over C2S (GET, bearer-gated)

GET /ap/users/:slug/inbox with a bearer scoped to that site returns the
recent timeline (accounts the owner follows) as an OrderedCollection of
Create(Note) items with content, url, published, sensitive and summary
(CW). Anyone else gets 403: the inbox stays write-only for the public.
This is the missing read half for a connected app's unified feed
(Shaer HomeBase, bead shaer-n4h); same gate pattern as the owner
followers/following read.

Changed files:
src/routes/activitypub.js

• GET /ap/users/:slug/inbox (owner only) mapping ap_timeline rows

New file:
test/c2s-inbox.test.js

• data-path coverage for the fields the mapping relies on

-robo
Co-Authored-By: Claude Opus 4.8 <noreply@…>

Files:

• CHANGELOG.de.md (modified) (1 diff)
• CHANGELOG.md (modified) (1 diff)
• CHANGELOG.nl.md (modified) (1 diff)
• src/routes/activitypub.js (modified) (1 diff)
• test/c2s-inbox.test.js (added)

CHANGELOG.de.md

@@ -7 +7 @@
 
 ### Hinzugefügt
+- **Die Inhaberin kann ihre Inbox über C2S lesen.** Ein GET auf die Inbox mit
+  dem eigenen Bearer liefert aktuelle eingegangene Beiträge (die Konten, denen
+  du folgst) als Create(Note)-Einträge, damit eine verbundene App (Shaer) einen
+  vereinten Feed bauen kann. Für alle anderen bleibt die Inbox write-only.
 - **"Mehr laden" in den Feeds.** Solo (Start), Zirkel, Zeitung und Nachrichten
   laden jetzt in Blöcken von 72 mit einem "Mehr laden"-Button statt einer harten

CHANGELOG.md

@@ -7 +7 @@
 
 ### Added
+- **The owner can read their inbox over C2S.** A GET on the inbox with the
+  account's own bearer returns recent inbound posts (the accounts you follow)
+  as Create(Note) items, so a connected app (Shaer) can build a unified feed.
+  For everyone else the inbox stays write-only.
 - **"Load more" on the feeds.** Solo (home), Cirkel, News and Messages now page
   in blocks of 72 with a "Load more" button instead of a hard cap, so older

CHANGELOG.nl.md

@@ -7 +7 @@
 
 ### Toegevoegd
+- **De eigenaar kan zijn inbox lezen via C2S.** Een GET op de inbox met de
+  eigen bearer geeft recente binnengekomen posts (de accounts die je volgt) als
+  Create(Note)-items, zodat een gekoppelde app (Shaer) een unified feed kan
+  bouwen. Voor alle anderen blijft de inbox write-only.
 - **"Meer laden" op de feeds.** Solo (home), Cirkel, Krant en Berichten laden nu
   in blokken van 72 met een "Meer laden"-knop in plaats van een harde limiet, dus

src/routes/activitypub.js

@@ -84 +84 @@
 });
 
+// ── Inbox read (owner only, AP C2S) ───────────────────────────────
+// GET on the inbox is part of ActivityPub C2S: the account owner (a bearer
+// scoped to this site) reads recent inbound posts (the timeline: accounts
+// they follow) as Create(Note) items, so an app (Shaer) can build a unified
+// feed. Anyone else gets 403; the inbox stays write-only for the public.
+router.get('/ap/users/:slug/inbox', (req, res) => {
+  const auth = OAuth.verifyBearer(req.headers.authorization);
+  if (!auth || auth.site.slug !== req.params.slug) return res.status(403).end();
+  const base = baseUrl(req);
+  const items = AP.getTimeline(auth.site.slug, 60).map((t) => ({
+    id: `${t.id}#create`,
+    type: 'Create',
+    actor: t.author_uri,
+    published: t.published || t.created_at || undefined,
+    object: {
+      id: t.id,
+      type: 'Note',
+      attributedTo: t.author_uri,
+      content: t.content,
+      url: t.url || undefined,
+      published: t.published || t.created_at || undefined,
+      sensitive: !!t.nsfw,
+      summary: t.cw || undefined,
+    },
+  }));
+  AP.sendAP(res, {
+    '@context': AP.AP_CONTEXT,
+    id: `${base}/ap/users/${auth.site.slug}/inbox`,
+    type: 'OrderedCollection',
+    totalItems: items.length,
+    orderedItems: items,
+  });
+});
+
 // ── Followers (count-only public, full for the owner) ─────────────
 // A C2S bearer scoped to this site (the account owner) gets the real actor