Changeset 31680c3 in Klonkt for src/services/ap-inbox.js

Timestamp:

09/30/2026 08:39:24 AM (3 hours ago)

Author:

Robin <roboburr@…>

Branches:

main

Children:

746d98a

Parents:

76bd53c

Message:

[Add to HUB] on the Connect page — the click is the owner's yes

Putting a klonkt on the Klonkt Hub means the hub sends a Follow. With the
owner gate on (the default) that Follow then waits for the owner — the same
person who just asked for it. Without this they would sign up on the hub and
then have to approve their own sign-up on /connect.

The button POSTs to /connect/add-to-hub, which records a one-day invitation
and redirects to the hub's sign-up form with the site's handle filled in
(?add=). A Follow from the hub's host, signed by the hub itself, passes the
owner gate while that invitation holds. It is not used up on the first
Follow: a hub that re-sends after a timeout would otherwise land in the queue
for something already decided.

Narrow on purpose: only the hub's host, only signed by it, only for a day.
Anyone else still waits for the owner, and a WARD's guardians still decide —
their gate sits before this one and this path never reaches it.

If a request from the hub is already waiting (someone signed the klonkt up
earlier), the click is exactly the yes it waits for: it is accepted on the
spot and the button goes to the channel on the hub instead of the form. Once
the hub follows, /connect shows a confirmation instead of the button. Hidden
after a move, where the outgoing side is locked.

KLONKT_HUB_URL lets a self-hoster point the button at another hub; default
​https://hub.klonkt.com.

Co-Authored-By: Claude Opus 5.5 <noreply@…>

File:

• src/services/ap-inbox.js (modified) (2 diffs)

src/services/ap-inbox.js

@@ -29 +29 @@
 import { parsePoll, recordPollBallot } from './ap-polls.js';
 import { fwStmts } from './ap-following.js';
+import * as HubInvite from './hub-invite.js';
 
 /**
@@ -559 +560 @@
     // Wards vallen hier nooit: de guardianpoort hierboven gaat vóór.
     const ownerGate = db.prepare('SELECT approve_followers FROM sites WHERE slug = ?').get(slug);
-    if (ownerGate && ownerGate.approve_followers) {
+    // Behalve als de eigenaar dat ja al gaf: [Add to HUB] op /connect geldt
+    // een dag als toestemming voor een Follow van de hub. Alleen als de hub
+    // hem ZELF ondertekende. Zie services/hub-invite.js.
+    const alGoedgekeurd = !!(verified && verified.id === who && HubInvite.isInvited(slug, who));
+    if (alGoedgekeurd) console.log('[AP] Follow', who, '→', slug, '(pre-approved via Add to HUB)');
+    if (ownerGate && ownerGate.approve_followers && !alGoedgekeurd) {
       const followId = (typeof act.id === 'string' && act.id) || `${who}#follow-${Date.now()}-${rid()}`;
       Guardianship.follows.recordPending(slug, {