Changeset e61c289 in Klonkt for src/routes

Timestamp:

07/24/2026 05:03:34 PM (7 weeks ago)

Author:

Robin Genis <roboburr@…>

Branches:

main

Children:

318d0c2

Parents:

6b5d7da

Message:

Guardian-queues als C2S-routes + push-typen help/guardian

De drie shaer:queues-collecties uit het actor-doc zijn nu echte owner-only
routes (Bearer, zelfde patroon als /blocked): offers, follows (leeg tot
gated follows bestaan) en wards. Contract gelijk aan de Shaer test-daemon,
dus de iOS/Android-dashboards lezen ze ongewijzigd.

Web-push kent twee nieuwe alert-typen: 'help' (hulpvraag van een ward,
niet gethrottled, standaard aan) en 'guardian' (adoptieverkeer). Teksten in
nl/en/de.

Changed files:
src/routes/activitypub.js

• GET /ap/users/:slug/queues/{offers,follows,wards}, owner-only

src/services/PushService.js

• alert-typen help + guardian (defaults aan, throttle 0/30s)

src/services/i18n.js

• push.n_help_*, push.n_guard_* in nl/en/de

New file:
test/guardianship.test.js

• pint het module-oppervlak: actor-props, handshake C2S+S2S beide kanten, queue-shapes, ward-mag-niet-guarden, helpRequest-props

-robo
Co-Authored-By: Claude Opus 4.8 <noreply@…>

File:

• src/routes/activitypub.js (modified) (2 diffs)

src/routes/activitypub.js

@@ -19 +19 @@
 import { apEnabled } from '../services/SettingsService.js';
 import OAuth from '../services/OAuthService.js';
+import * as Guardianship from '../services/guardianship/index.js';
 import multer from 'multer';
 import path from 'path';
@@ -108 +109 @@
   });
 });
+
+// ── Guardian queues (owner only, FEP-633c, shaer:queues) ──────────
+// The dashboard collections the Shaer clients read: pending adoption offers,
+// gated follows (empty in Klonkt for now) and the guardian's wards. Same
+// contract as the Shaer test daemon.
+function queueRoute(name, build) {
+  router.get(`/ap/users/:slug/queues/${name}`, (req, res) => {
+    const auth = OAuth.verifyBearer(req.headers.authorization);
+    if (!auth || auth.site.slug !== req.params.slug) return res.status(403).end();
+    const base = baseUrl(req);
+    const me = `${base}/ap/users/${auth.site.slug}`;
+    AP.sendAP(res, { '@context': AP.AP_CONTEXT, ...build(`${me}/queues/${name}`, auth.site.slug, me) });
+  });
+}
+queueRoute('offers', (id, slug, me) => Guardianship.offersCollection(id, slug, me));
+queueRoute('follows', (id) => Guardianship.followsCollection(id));
+queueRoute('wards', (id, slug) => Guardianship.wardsCollection(id, slug));
 
 // ── Inbox read (owner only, AP C2S) ───────────────────────────────