Changeset 0cea12b in Klonkt for test/c2s-inbox.test.js

Timestamp:

07/20/2026 08:19:20 PM (7 weeks ago)

Author:

Robin <roboburr@…>

Branches:

main

Children:

81b2e1e

Parents:

513ba82

git-author:

Robin <roboburr@…> (07/20/2026 08:18:21 PM)

git-committer:

Robin <roboburr@…> (07/20/2026 08:19:20 PM)

Message:

Feature: owner inbox read over C2S (GET, bearer-gated)

GET /ap/users/:slug/inbox with a bearer scoped to that site returns the
recent timeline (accounts the owner follows) as an OrderedCollection of
Create(Note) items with content, url, published, sensitive and summary
(CW). Anyone else gets 403: the inbox stays write-only for the public.
This is the missing read half for a connected app's unified feed
(Shaer HomeBase, bead shaer-n4h); same gate pattern as the owner
followers/following read.

Changed files:
src/routes/activitypub.js

• GET /ap/users/:slug/inbox (owner only) mapping ap_timeline rows

New file:
test/c2s-inbox.test.js

• data-path coverage for the fields the mapping relies on

-robo
Co-Authored-By: Claude Opus 4.8 <noreply@…>

File:

• test/c2s-inbox.test.js (added)