Changeset 0cea12b in Klonkt for CHANGELOG.md

Timestamp:

07/20/2026 08:19:20 PM (7 weeks ago)

Author:

Robin <roboburr@…>

Branches:

main

Children:

81b2e1e

Parents:

513ba82

git-author:

Robin <roboburr@…> (07/20/2026 08:18:21 PM)

git-committer:

Robin <roboburr@…> (07/20/2026 08:19:20 PM)

Message:

Feature: owner inbox read over C2S (GET, bearer-gated)

GET /ap/users/:slug/inbox with a bearer scoped to that site returns the
recent timeline (accounts the owner follows) as an OrderedCollection of
Create(Note) items with content, url, published, sensitive and summary
(CW). Anyone else gets 403: the inbox stays write-only for the public.
This is the missing read half for a connected app's unified feed
(Shaer HomeBase, bead shaer-n4h); same gate pattern as the owner
followers/following read.

Changed files:
src/routes/activitypub.js

• GET /ap/users/:slug/inbox (owner only) mapping ap_timeline rows

New file:
test/c2s-inbox.test.js

• data-path coverage for the fields the mapping relies on

-robo
Co-Authored-By: Claude Opus 4.8 <noreply@…>

File:

• CHANGELOG.md (modified) (1 diff)

CHANGELOG.md

@@ -7 +7 @@
 
 ### Added
+- **The owner can read their inbox over C2S.** A GET on the inbox with the
+  account's own bearer returns recent inbound posts (the accounts you follow)
+  as Create(Note) items, so a connected app (Shaer) can build a unified feed.
+  For everyone else the inbox stays write-only.
 - **"Load more" on the feeds.** Solo (home), Cirkel, News and Messages now page
   in blocks of 72 with a "Load more" button instead of a hard cap, so older