Changeset 1c2dcba in Klonkt for src/services/ActivityPubService.js

Timestamp:

07/01/2026 07:14:12 PM (2 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

737ea05

Parents:

0688b5f

Message:

feat(fediverse): report a post/account to its home server (AS2 Flag)

From the interact page you can now report a fediverse post to its home server's
moderators. Sends the Mastodon-standard AS2 Flag (object = [reported account,
reported status], content = the reason) to the reported account's inbox.

• src/services/ActivityPubService.js — sendReport(site, {objectUri, actorUri, reason}) resolves the reported account, builds the Flag and delivers it to their inbox.
• src/routes/posts.js — POST /authorize_interaction/report (owner-only); GET passes reported and skips re-resolving on the confirmation view.
• src/views/pages/authorize-interaction.ejs — a "Report this post" disclosure with a reason field, a "reported" confirmation, and scoped styles.
• src/services/i18n.js — fedi.report_* + fedi.reported_* (nl/en/de).
• test/activitypub-as2.test.js — allow the AS2 Flag activity type.
• CHANGELOG(.nl/.de).md — "Report a post to the fediverse" under Unreleased.

Co-Authored-By: Claude <noreply@…>

File:

• src/services/ActivityPubService.js (modified) (2 diffs)

src/services/ActivityPubService.js

@@ -2194 +2194 @@
 }
 
+// Report a remote post or account to its home instance (moderation). Sends the Mastodon-standard
+// AS2 `Flag`: object = [reported account, reported status?], content = the reason, delivered to the
+// reported account's inbox so their instance's moderators receive it. objectUri = a post URL (its
+// author is resolved + included) OR pass actorUri to report an account directly.
+export async function sendReport(site, { objectUri, actorUri, reason }) {
+  const base = (process.env.PUBLIC_BASE_URL || '').replace(/\/+$/, '');
+  if (!base || !site || !site.slug) return { error: 'config' };
+  let targetActor = actorUri || null;
+  let noteUri = null;
+  if (objectUri && /^https?:\/\//i.test(objectUri)) {
+    const note = await apGetJson(objectUri).catch(() => null);
+    if (note && note.id) { noteUri = note.id; if (!targetActor) targetActor = actorUriOf(note.attributedTo); }
+    else if (!targetActor) return { error: 'not_found' };
+  }
+  if (!targetActor || !/^https?:\/\//i.test(targetActor)) return { error: 'not_found' };
+  const actor = await fetchActor(targetActor).catch(() => null);
+  const inbox = actor && (actor.inbox || (actor.endpoints && actor.endpoints.sharedInbox)); // personal inbox → their moderators
+  if (!inbox) return { error: 'unreachable' };
+  const me = actorId(base, site.slug);
+  const keys = getOrCreateKeys(site.slug);
+  const object = [targetActor];
+  if (noteUri && noteUri !== targetActor) object.push(noteUri);
+  const flag = {
+    '@context': AP_CONTEXT,
+    id: `${me}#report-${Date.now()}-${rid()}`,
+    type: 'Flag',
+    actor: me,
+    content: String(reason == null ? '' : reason).slice(0, 3000),
+    object, // [account, status?] — Mastodon's Flag shape
+    to: [targetActor],
+  };
+  deliverWithRetry(site.slug, inbox, flag, `${me}#main-key`, keys.private_pem);
+  return { ok: true };
+}
+
 export function isBlockedAny(actorUri) {
   if (!actorUri) return false;
@@ -2249 +2284 @@
   listOutbox, deliverOutboxDelete, deliverOutboxUpdate,
   webfingerResolve, followActor, resolveRemoteActor, unfollowActor, listFollowing, setAutoBoost, backfillFromOutbox, getTimeline, sendInteraction, voteOnPoll, voteOnRemotePoll,
-  parseOwnPoll, pollTally, ownPollView, deliverPollUpdate, maybeCrawlThread,
+  parseOwnPoll, pollTally, ownPollView, deliverPollUpdate, maybeCrawlThread, sendReport,
   autoBoostCount, boostedCount, markBoosted, unmarkBoosted, markLiked, unmarkLiked, getTimelineReaction, upsertBoostedNote, getCirkelPosts, getCirkelMembers, selfHealTimeline,
   getNotifications, listBlocks, isBlockedAny, blockTarget, unblock,