\n ${alreadyPublished ? \"📝\" : \"✅\"}\n

\n ${alreadyPublished ? \"Already Published\" : \"Email Verified!\"}\n

${escapeHtml(message)}

\n ${\n postUrl\n ? `\n \n View Your Post\n \n `\n : \"\"\n }\n \n ← Back to Blog\n \n

\n\n`;\n}\n\n// Generate verification error HTML\nfunction generateVerificationErrorHTML(message: string): string {\n return `\n\n\n \n \n Verification Error - Email Blog\n \n \n\n\n

\n ❌\n

Verification Failed

${escapeHtml(message)}

\n If you believe this is an error, please try sending your email again.\n

\n \n ← Back to Blog\n \n

\n\n`;\n}\n\n// Generate main blog HTML\nfunction generateBlogHTML(posts: any[], baseUrl: string): string {\n const postsHTML = posts.length === 0\n ? `

\n ✉️\n

No posts yet

Send an email to start publishing!

`\n : posts.map(post => `\n

\n \n ${escapeHtml(post.title)}\n \n

\n By ${escapeHtml(post.author_name || post.author_email)}\n ${formatDate(post.published_at)}\n

${truncateContent(post.content)}

\n \n Read more →\n \n

\n ${post.content_type === \"html\" ? \"🌐 HTML\" : \"📝 Text\"}\n

\n `).join(\"\");\n\n return `\n\n\n \n \n Email Blog\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n 📧\">\n \n \n \n \n\n\n \n

\n 📧\n

Email Blog

Want your own email blog? Fork this.

\n \n

\n\n \n

\n ${postsHTML}\n

\n\n \n \n\n`;\n}\n\n// Generate individual post HTML\nfunction generatePostHTML(\n post: any,\n baseUrl: string,\n activityCounts?: { likes: number; shares: number; replies: number },\n): string {\n const postUrl = `${baseUrl}/post/${post.slug}`;\n const description = post.content.replace(/<[^>]*>/g, \"\").substring(0, 160);\n\n return `\n\n\n \n \n ${escapeHtml(post.title)} - Email Blog\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n 📧\">\n \n \n \n \n\n\n \n

\n \n 📧\n

Email Blog

← Back to all posts

\n \n \n

\n\n \n

\n \n

${escapeHtml(post.title)}

\n 👤\n ${escapeHtml(post.author_name || post.author_email)}\n

\n 📅\n ${formatDate(post.published_at)}\n

\n ${post.content_type === \"html\" ? \"🌐 HTML\" : \"📝 Text\"}\n

\n\n \n

\n ${post.content}\n

\n\n \n \n

\n\n \n \n\n \n\n`;\n}\n\n// Generate 404 HTML\nfunction generate404HTML(): string {\n return `\n\n\n \n \n Post Not Found - Email Blog\n \n \n\n\n

\n ❌\n

Post Not Found

The requested post could not be found.

\n ← Back to Blog\n

\n\n`;\n}\n\n// Escape HTML to prevent XSS\nfunction escapeHtml(text: string): string {\n const map: { [key: string]: string } = {\n \"&\": \"&\",\n \"<\": \"<\",\n \">\": \">\",\n \"\\\"\": \""\",\n \"'\": \"'\",\n };\n return text.replace(/[&<>\"']/g, (m) => map[m]);\n}\n\n// Get custom CSS\nfunction getCustomCSS(): string {\n return `\n /* Typography */\n .prose {\n max-width: none;\n }\n .prose h1 { @apply text-3xl font-bold text-gray-900 mb-4; }\n .prose h2 { @apply text-2xl font-semibold text-gray-800 mb-3 mt-6; }\n .prose h3 { @apply text-xl font-medium text-gray-700 mb-2 mt-4; }\n .prose p { @apply text-gray-600 mb-4 leading-relaxed; }\n .prose a { @apply text-blue-600 hover:text-blue-800 underline; }\n .prose ul, .prose ol { @apply mb-4 pl-6; }\n .prose li { @apply mb-1; }\n .prose blockquote { @apply border-l-4 border-gray-300 pl-4 italic text-gray-600 my-4; }\n .prose code { @apply bg-gray-100 px-1 py-0.5 rounded text-sm font-mono; }\n .prose pre { @apply bg-gray-100 p-4 rounded overflow-x-auto mb-4; }\n .prose pre code { @apply bg-transparent p-0; }\n\n /* Blog post styling */\n .blog-post-content { @apply prose max-w-none; }\n .blog-post-content img { @apply max-w-full h-auto rounded-lg shadow-sm my-4; }\n .blog-post-content a { color: blue; }\n\n /* Post cards */\n .post-card { @apply bg-white rounded-lg shadow-sm border border-gray-200 hover:shadow-md transition-shadow duration-200; }\n .post-card:hover { @apply border-gray-300; }\n\n /* Email icon animation */\n .email-icon { animation: bounce 2s infinite; }\n @keyframes bounce {\n 0%, 20%, 53%, 80%, 100% { transform: translateY(0); }\n 40%, 43% { transform: translateY(-10px); }\n 70% { transform: translateY(-5px); }\n 90% { transform: translateY(-2px); }\n }\n\n /* Social links */\n .social-links a { @apply inline-flex items-center px-3 py-2 text-sm font-medium text-gray-600 hover:text-gray-900 hover:bg-gray-100 rounded-md transition-colors duration-200; }\n\n /* Responsive adjustments */\n @media (max-width: 640px) {\n .prose h1 { @apply text-2xl; }\n .prose h2 { @apply text-xl; }\n .prose h3 { @apply text-lg; }\n }\n `;\n}\n\n// Serve static files\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Main blog page with content negotiation\napp.get(\"/\", async c => {\n try {\n await ensureDbInitialized();\n const baseUrl = getBaseUrl(c);\n\n // Check if this is an ActivityPub request (using same logic as actor endpoint)\n const acceptHeader = c.req.header(\"accept\") || \"\";\n const isBrowserRequest = acceptHeader.includes(\"text/html\")\n && (!acceptHeader.includes(\"application/activity+json\")\n || acceptHeader.indexOf(\"text/html\") < acceptHeader.indexOf(\"application/activity+json\"))\n && (!acceptHeader.includes(\"application/ld+json\")\n || acceptHeader.indexOf(\"text/html\") < acceptHeader.indexOf(\"application/ld+json\"));\n\n const isActivityPubRequest = !isBrowserRequest && (\n acceptHeader.includes(\"application/activity+json\")\n || acceptHeader.includes(\"application/ld+json\")\n );\n\n if (isActivityPubRequest) {\n // Return ActivityPub actor document for the home page\n const domain = new URL(baseUrl).hostname;\n const actor = await generateActorDocument(domain);\n return c.json(actor, 200, {\n \"Content-Type\": \"application/activity+json\",\n });\n }\n\n // Return HTML for regular requests\n const posts = await getAllPosts(20);\n const html = generateBlogHTML(posts, baseUrl);\n\n // Add Link headers for ActivityPub discovery\n return c.html(html, 200, {\n \"Link\": `<${baseUrl}/actor>; rel=\"alternate\"; type=\"application/activity+json\"`,\n });\n } catch (error) {\n console.error(\"Error serving main page:\", error);\n return c.text(\"Error loading blog\", 500);\n }\n});\n\n// Individual post page\napp.get(\"/post/:slug\", async c => {\n try {\n await ensureDbInitialized();\n const slug = c.req.param(\"slug\");\n const post = await getPostBySlug(slug);\n\n if (!post) {\n return c.html(generate404HTML(), 404);\n }\n\n // Check if this is an ActivityPub request\n const acceptHeader = c.req.header(\"accept\") || \"\";\n const isActivityPubRequest = acceptHeader.includes(\"application/activity+json\")\n || acceptHeader.includes(\"application/ld+json\");\n\n if (isActivityPubRequest) {\n // Return ActivityPub Note object\n const baseUrl = getBaseUrl(c);\n const contentHtml = post.content_type === \"html\"\n ? post.content\n : `

${post.content.replace(/\\n/g, \"
\")}

`;\n\n const textContent = post.content.replace(/<[^>]*>/g, \"\");\n const summary = textContent.length > 200\n ? textContent.substring(0, 200) + \"...\"\n : textContent;\n\n const note = {\n \"@context\": \"https://www.w3.org/ns/activitystreams\",\n type: \"Note\",\n id: `${baseUrl}/post/${post.slug}`,\n attributedTo: `${baseUrl}/actor`,\n published: new Date(post.published_at).toISOString(),\n url: `${baseUrl}/post/${post.slug}`,\n to: [\"https://www.w3.org/ns/activitystreams#Public\"],\n cc: [`${baseUrl}/followers`],\n name: post.title,\n summary: summary,\n content: `

${post.title}

${contentHtml}`,\n source: {\n content: post.content,\n mediaType: post.content_type === \"html\" ? \"text/html\" : \"text/plain\",\n },\n tag: [],\n attachment: [],\n sensitive: false,\n // Add replies collection\n replies: {\n type: \"Collection\",\n id: `${baseUrl}/post/${post.slug}/replies`,\n totalItems: 0,\n items: [],\n },\n };\n\n return c.json(note, 200, {\n \"Content-Type\": \"application/activity+json\",\n });\n }\n\n // Return HTML for regular requests\n // Get activity counts for this post\n const activityCounts = await getPostActivityCounts(slug);\n\n const baseUrl = getBaseUrl(c);\n const html = generatePostHTML(post, baseUrl, activityCounts);\n\n // Add Link header for ActivityPub discovery\n return c.html(html, 200, {\n \"Link\": `<${baseUrl}/post/${slug}>; rel=\"alternate\"; type=\"application/activity+json\"`,\n });\n } catch (error) {\n console.error(\"Error serving post:\", error);\n return c.text(\"Error loading post\", 500);\n }\n});\n\n// RSS feed\napp.get(\"/rss\", async c => {\n try {\n await ensureDbInitialized();\n const posts = await getRecentPosts(50);\n const baseUrl = getBaseUrl(c);\n const rssXML = generateRSSFeed(posts, baseUrl);\n\n return c.text(rssXML, 200, {\n \"Content-Type\": \"application/rss+xml; charset=utf-8\",\n \"Cache-Control\": \"public, max-age=3600\",\n });\n } catch (error) {\n console.error(\"Error generating RSS feed:\", error);\n return c.text(\"Error generating RSS feed\", 500);\n }\n});\n\n// API: Get all posts\napp.get(\"/api/posts\", async c => {\n try {\n await ensureDbInitialized();\n const limit = parseInt(c.req.query(\"limit\") || \"20\");\n const offset = parseInt(c.req.query(\"offset\") || \"0\");\n const posts = await getAllPosts(limit, offset);\n\n return c.json({ posts });\n } catch (error) {\n console.error(\"Error fetching posts:\", error);\n return c.json({ error: \"Failed to fetch posts\" }, 500);\n }\n});\n\n// API: Get single post\napp.get(\"/api/posts/:slug\", async c => {\n try {\n await ensureDbInitialized();\n const slug = c.req.param(\"slug\");\n const post = await getPostBySlug(slug);\n\n if (!post) {\n return c.json({ error: \"Post not found\" }, 404);\n }\n\n // Get activity counts\n const activityCounts = await getPostActivityCounts(slug);\n\n return c.json({ post, activityCounts });\n } catch (error) {\n console.error(\"Error fetching post:\", error);\n return c.json({ error: \"Failed to fetch post\" }, 500);\n }\n});\n\n// // API: Delete posts by author name (for cleanup)\n// app.delete(\"/api/posts/author/:authorName\", async c => {\n// try {\n// await ensureDbInitialized();\n// const authorName = c.req.param(\"authorName\");\n\n// if (!authorName) {\n// return c.json({ error: \"Author name is required\" }, 400);\n// }\n\n// console.log(`🗑️ Request to delete posts by author: ${authorName}`);\n\n// const deletedCount = await deletePostsByAuthorName(authorName);\n\n// return c.json({\n// message: `Successfully deleted ${deletedCount} posts by ${authorName}`,\n// deletedCount\n// });\n// } catch (error) {\n// console.error(\"Error deleting posts:\", error);\n// return c.json({ error: \"Failed to delete posts\" }, 500);\n// }\n// });\n\n// Human-readable followers page\napp.get(\"/followers-list\", async c => {\n try {\n await ensureDbInitialized();\n const followers = await getActiveFollowers();\n const followerCount = await getFollowerCount();\n const baseUrl = getBaseUrl(c);\n\n const html = `\n\n\n \n \n Followers - Email Blog\n \n \n\n\n

Followers

\n \n ${followerCount} follower${followerCount !== 1 ? \"s\" : \"\"}\n \n

\n \n ${\n followers.length === 0\n ? `\n

\n 👥\n

No followers yet

Share your blog to get your first followers!

\n People can follow @blog@${\n new URL(baseUrl).hostname\n } from Mastodon\n

\n `\n : `\n

\n ${\n followers.map(follower => `\n

\n ${\n follower.actor_icon_url\n ? `\n $\"${\n$ \n `\n : `\n

\n ${(follower.actor_display_name || follower.actor_username || \"U\")[0].toUpperCase()}\n

\n `\n }\n

\n ${\n escapeHtml(follower.actor_display_name || follower.actor_username || \"Unknown User\")\n }\n

\n ${\n follower.actor_username\n ? `\n @${\n escapeHtml(follower.actor_username)\n }\n `\n : \"\"\n }\n

\n ${\n follower.actor_domain\n ? `\n 📍 ${escapeHtml(follower.actor_domain)}\n `\n : \"\"\n }\n 📅 Followed ${formatDate(follower.followed_at)}\n

\n \n View Profile →\n \n

\n `).join(\"\")\n }\n

\n `\n }\n \n

\n \n ← Back to Blog\n \n

\n JSON API\n •\n ActivityPub\n

\n\n`;\n\n return c.html(html);\n } catch (error) {\n console.error(\"Error serving followers page:\", error);\n return c.text(\"Error loading followers\", 500);\n }\n});\n\n// API: Get followers list (human-readable)\napp.get(\"/api/followers\", async c => {\n try {\n await ensureDbInitialized();\n const followers = await getActiveFollowers();\n const followerCount = await getFollowerCount();\n\n return c.json({\n totalFollowers: followerCount,\n followers: followers.map(follower => ({\n actorId: follower.actor_id,\n username: follower.actor_username,\n displayName: follower.actor_display_name,\n domain: follower.actor_domain,\n iconUrl: follower.actor_icon_url,\n followedAt: follower.followed_at,\n lastActivityAt: follower.last_activity_at,\n isActive: follower.is_active === 1,\n })),\n });\n } catch (error) {\n console.error(\"Error fetching followers:\", error);\n return c.json({ error: \"Failed to fetch followers\" }, 500);\n }\n});\n\n// API: Get activity counts for a post\napp.get(\"/api/posts/:slug/activities\", async c => {\n try {\n await ensureDbInitialized();\n const slug = c.req.param(\"slug\");\n const post = await getPostBySlug(slug);\n\n if (!post) {\n return c.json({ error: \"Post not found\" }, 404);\n }\n\n const activityCounts = await getPostActivityCounts(slug);\n return c.json({ activityCounts });\n } catch (error) {\n console.error(\"Error fetching activity counts:\", error);\n return c.json({ error: \"Failed to fetch activity counts\" }, 500);\n }\n});\n\n// WebSub hub endpoint\napp.get(\"/websub\", async c => {\n try {\n await ensureDbInitialized();\n const mode = c.req.query(\"hub.mode\");\n const callback = c.req.query(\"hub.callback\");\n const topic = c.req.query(\"hub.topic\");\n const challenge = c.req.query(\"hub.challenge\");\n const leaseSeconds = c.req.query(\"hub.lease_seconds\");\n const secret = c.req.query(\"hub.secret\");\n\n if (!mode || !callback || !topic) {\n return c.text(\"Missing required parameters\", 400);\n }\n\n const result = await handleWebSubSubscription(\n mode,\n callback,\n topic,\n challenge,\n leaseSeconds ? parseInt(leaseSeconds) : undefined,\n secret,\n );\n\n if (result) {\n return c.text(result);\n }\n\n return c.text(\"OK\", 200);\n } catch (error) {\n console.error(\"WebSub error:\", error);\n return c.text(\"WebSub error\", 400);\n }\n});\n\n// ActivityPub actor endpoint with content negotiation\napp.get(\"/actor\", async c => {\n const startTime = Date.now();\n console.log(\"🎭 === ACTOR ENDPOINT START ===\");\n\n try {\n const baseUrl = getBaseUrl(c);\n const domain = new URL(baseUrl).hostname;\n\n // Log request details\n const acceptHeader = c.req.header(\"accept\") || \"\";\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const referer = c.req.header(\"referer\") || \"\";\n\n console.log(\"📥 Actor request details:\", {\n baseUrl,\n domain,\n acceptHeader,\n userAgent: userAgent.substring(0, 100) + (userAgent.length > 100 ? \"...\" : \"\"),\n referer,\n method: c.req.method,\n url: c.req.url,\n headers: Object.fromEntries(\n Object.entries(c.req.header()).filter(([key]) =>\n [\"accept\", \"user-agent\", \"authorization\", \"content-type\", \"host\"].includes(key.toLowerCase())\n ),\n ),\n });\n\n // Check if this is a browser request (HTML)\n const isBrowserRequest = acceptHeader.includes(\"text/html\")\n && (!acceptHeader.includes(\"application/activity+json\")\n || acceptHeader.indexOf(\"text/html\") < acceptHeader.indexOf(\"application/activity+json\"))\n && (!acceptHeader.includes(\"application/ld+json\")\n || acceptHeader.indexOf(\"text/html\") < acceptHeader.indexOf(\"application/ld+json\"));\n\n console.log(\"🔍 Content negotiation:\", {\n acceptHeader,\n isBrowserRequest,\n isActivityPubRequest: !isBrowserRequest,\n htmlIndex: acceptHeader.indexOf(\"text/html\"),\n activityJsonIndex: acceptHeader.indexOf(\"application/activity+json\"),\n ldJsonIndex: acceptHeader.indexOf(\"application/ld+json\"),\n });\n\n if (isBrowserRequest) {\n console.log(\"🌐 Serving HTML response for browser\");\n // Return HTML page for browsers\n const html = `\n\n\n \n \n ActivityPub Actor - Email Blog\n \n \n\n\n

\n 📧\n

Email Blog

ActivityPub Actor Profile

\n \n

About

A blog powered by email publishing. Follow for updates on new posts!

\n \n

Follow from Mastodon

You can follow this blog from any ActivityPub-compatible platform like Mastodon:

\n @blog@${domain}\n

\n \n

ActivityPub Endpoints

Actor: ${baseUrl}/actor

Inbox: ${baseUrl}/inbox

Outbox: ${baseUrl}/outbox

Followers: ${baseUrl}/followers

\n \n

\n \n ← Back to Blog\n \n

\n View Followers\n •\n RSS Feed\n

\n\n`;\n\n const processingTime = Date.now() - startTime;\n console.log(\"✅ HTML response sent\", {\n processingTimeMs: processingTime,\n responseSize: html.length,\n });\n\n return c.html(html, 200, {\n \"Link\": `<${baseUrl}/actor>; rel=\"alternate\"; type=\"application/activity+json\"`,\n });\n }\n\n // Return ActivityPub JSON for ActivityPub clients\n console.log(\"🔗 Generating ActivityPub actor document...\");\n const actor = await generateActorDocument(domain);\n\n console.log(\"📄 Actor document generated:\", {\n id: actor.id,\n type: actor.type,\n preferredUsername: actor.preferredUsername,\n name: actor.name,\n inbox: actor.inbox,\n outbox: actor.outbox,\n followers: actor.followers,\n following: actor.following,\n publicKeyId: actor.publicKey?.id,\n endpoints: actor.endpoints,\n });\n\n const processingTime = Date.now() - startTime;\n console.log(\"✅ ActivityPub JSON response sent\", {\n processingTimeMs: processingTime,\n actorId: actor.id,\n });\n\n return c.json(actor, 200, {\n \"Content-Type\": \"application/activity+json\",\n });\n } catch (error) {\n const processingTime = Date.now() - startTime;\n console.error(\"💥 ActivityPub actor error:\", {\n error: error.message,\n stack: error.stack,\n processingTimeMs: processingTime,\n });\n return c.json({ error: \"Failed to generate actor document\" }, 500);\n } finally {\n console.log(\"🎭 === ACTOR ENDPOINT END ===\");\n }\n});\n\n// ActivityPub inbox (for receiving activities)\napp.post(\"/inbox\", async c => {\n try {\n await ensureDbInitialized();\n const activity = await c.req.json();\n const baseUrl = getBaseUrl(c);\n const domain = new URL(baseUrl).hostname;\n\n console.log(\"Received ActivityPub activity:\", {\n id: activity.id,\n type: activity.type,\n actor: typeof activity.actor === \"string\" ? activity.actor : activity.actor?.id,\n });\n\n // Process the activity\n const result = await processInboxActivity(activity, domain);\n\n if (result.success) {\n console.log(\"Activity processed successfully:\", result.message);\n return c.text(\"\", 202);\n } else {\n console.error(\"Activity processing failed:\", result.message);\n return c.text(\"Error processing activity\", 400);\n }\n } catch (error) {\n console.error(\"ActivityPub inbox error:\", error);\n return c.text(\"Error processing activity\", 400);\n }\n});\n\n// ActivityPub outbox (for serving activities)\napp.get(\"/outbox\", async c => {\n try {\n await ensureDbInitialized();\n const baseUrl = getBaseUrl(c);\n\n // Support pagination parameters\n const page = parseInt(c.req.query(\"page\") || \"0\");\n const limit = 20;\n\n // Get recent posts to create activities\n const posts = await getRecentPosts(50); // Get more posts for pagination\n const totalItems = posts.length;\n\n // If no page parameter is provided, return the collection summary\n if (!c.req.query(\"page\")) {\n const outbox = {\n \"@context\": \"https://www.w3.org/ns/activitystreams\",\n type: \"OrderedCollection\",\n id: `${baseUrl}/outbox`,\n totalItems: totalItems,\n first: totalItems > 0 ? `${baseUrl}/outbox?page=1` : undefined,\n last: totalItems > 0 ? `${baseUrl}/outbox?page=${Math.ceil(totalItems / limit)}` : undefined,\n };\n\n return c.json(outbox, 200, {\n \"Content-Type\": \"application/activity+json\",\n });\n }\n\n // Return paginated results\n const offset = (page - 1) * limit;\n const paginatedPosts = posts.slice(offset, offset + limit);\n const hasNext = offset + limit < posts.length;\n const hasPrev = page > 1;\n\n const activities = paginatedPosts.map(post => {\n // Create better content for ActivityPub\n const contentHtml = post.content_type === \"html\"\n ? post.content\n : `

${post.content.replace(/\\n/g, \"
\")}

`;\n\n // Create a proper summary/preview\n const textContent = post.content.replace(/<[^>]*>/g, \"\");\n const summary = textContent.length > 200\n ? textContent.substring(0, 200) + \"...\"\n : textContent;\n\n return {\n type: \"Create\",\n id: `${baseUrl}/post/${post.slug}#create`,\n actor: `${baseUrl}/actor`,\n published: new Date(post.published_at).toISOString(),\n to: [\"https://www.w3.org/ns/activitystreams#Public\"],\n cc: [`${baseUrl}/followers`],\n object: {\n type: \"Note\",\n id: `${baseUrl}/post/${post.slug}`,\n attributedTo: `${baseUrl}/actor`,\n published: new Date(post.published_at).toISOString(),\n url: `${baseUrl}/post/${post.slug}`,\n to: [\"https://www.w3.org/ns/activitystreams#Public\"],\n cc: [`${baseUrl}/followers`],\n // Use the post title as the summary/name\n name: post.title,\n summary: summary,\n // Full content with proper HTML\n content: `

${post.title}

${contentHtml}`,\n // Add source for better compatibility\n source: {\n content: post.content,\n mediaType: post.content_type === \"html\" ? \"text/html\" : \"text/plain\",\n },\n // Add tags for better discoverability\n tag: [],\n // Add attachment info if needed\n attachment: [],\n // Indicate this is sensitive content if needed\n sensitive: false,\n },\n };\n });\n\n const outboxPage = {\n \"@context\": \"https://www.w3.org/ns/activitystreams\",\n type: \"OrderedCollectionPage\",\n id: `${baseUrl}/outbox?page=${page}`,\n partOf: `${baseUrl}/outbox`,\n totalItems: totalItems,\n next: hasNext ? `${baseUrl}/outbox?page=${page + 1}` : undefined,\n prev: hasPrev ? `${baseUrl}/outbox?page=${page - 1}` : undefined,\n orderedItems: activities,\n };\n\n return c.json(outboxPage, 200, {\n \"Content-Type\": \"application/activity+json\",\n });\n } catch (error) {\n console.error(\"ActivityPub outbox error:\", error);\n return c.json({ error: \"Failed to generate outbox\" }, 500);\n }\n});\n\n// ActivityPub followers collection\napp.get(\"/followers\", async c => {\n try {\n await ensureDbInitialized();\n const baseUrl = getBaseUrl(c);\n\n // Support pagination parameters\n const page = parseInt(c.req.query(\"page\") || \"1\");\n const limit = parseInt(c.req.query(\"limit\") || \"20\");\n const offset = (page - 1) * limit;\n\n const followers = await getActiveFollowers();\n const followerCount = await getFollowerCount();\n\n // If no page parameter is provided, return the collection summary\n if (!c.req.query(\"page\")) {\n const followersCollection = {\n \"@context\": \"https://www.w3.org/ns/activitystreams\",\n type: \"OrderedCollection\",\n id: `${baseUrl}/followers`,\n totalItems: followerCount,\n first: followerCount > 0 ? `${baseUrl}/followers?page=1` : undefined,\n // Include a sample of followers in the main collection\n orderedItems: followers.slice(0, Math.min(20, followers.length)).map(follower => ({\n id: follower.actor_id,\n type: \"Person\",\n preferredUsername: follower.actor_username || \"unknown\",\n name: follower.actor_display_name || follower.actor_username || \"Unknown User\",\n icon: follower.actor_icon_url\n ? {\n type: \"Image\",\n url: follower.actor_icon_url,\n }\n : undefined,\n url: follower.actor_id,\n // Include domain info for display\n summary: follower.actor_domain ? `User from ${follower.actor_domain}` : undefined,\n // Include follow date\n published: follower.followed_at,\n })),\n };\n\n return c.json(followersCollection, 200, {\n \"Content-Type\": \"application/activity+json\",\n });\n }\n\n // Return paginated results\n const paginatedFollowers = followers.slice(offset, offset + limit);\n const hasNext = offset + limit < followers.length;\n const hasPrev = page > 1;\n\n const followersPage = {\n \"@context\": \"https://www.w3.org/ns/activitystreams\",\n type: \"OrderedCollectionPage\",\n id: `${baseUrl}/followers?page=${page}`,\n partOf: `${baseUrl}/followers`,\n totalItems: followerCount,\n next: hasNext ? `${baseUrl}/followers?page=${page + 1}` : undefined,\n prev: hasPrev ? `${baseUrl}/followers?page=${page - 1}` : undefined,\n orderedItems: paginatedFollowers.map(follower => ({\n id: follower.actor_id,\n type: \"Person\",\n preferredUsername: follower.actor_username || \"unknown\",\n name: follower.actor_display_name || follower.actor_username || \"Unknown User\",\n icon: follower.actor_icon_url\n ? {\n type: \"Image\",\n url: follower.actor_icon_url,\n }\n : undefined,\n url: follower.actor_id,\n summary: follower.actor_domain ? `User from ${follower.actor_domain}` : undefined,\n published: follower.followed_at,\n // Include last activity for debugging\n lastActivity: follower.last_activity_at,\n })),\n };\n\n return c.json(followersPage, 200, {\n \"Content-Type\": \"application/activity+json\",\n });\n } catch (error) {\n console.error(\"ActivityPub followers error:\", error);\n return c.json({ error: \"Failed to generate followers collection\" }, 500);\n }\n});\n\n// ActivityPub following collection (placeholder)\napp.get(\"/following\", async c => {\n try {\n const baseUrl = getBaseUrl(c);\n\n const following = {\n \"@context\": \"https://www.w3.org/ns/activitystreams\",\n type: \"OrderedCollection\",\n id: `${baseUrl}/following`,\n totalItems: 0,\n orderedItems: [],\n };\n\n return c.json(following, 200, {\n \"Content-Type\": \"application/activity+json\",\n });\n } catch (error) {\n console.error(\"ActivityPub following error:\", error);\n return c.json({ error: \"Failed to generate following collection\" }, 500);\n }\n});\n\n// WebFinger endpoint for ActivityPub discovery\napp.get(\"/.well-known/webfinger\", async c => {\n const startTime = Date.now();\n console.log(\"🔍 === WEBFINGER ENDPOINT START ===\");\n\n try {\n const resource = c.req.query(\"resource\");\n const baseUrl = getBaseUrl(c);\n const domain = new URL(baseUrl).hostname;\n\n // Log request details\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const referer = c.req.header(\"referer\") || \"\";\n const acceptHeader = c.req.header(\"accept\") || \"\";\n\n console.log(\"📥 WebFinger request details:\", {\n resource,\n baseUrl,\n domain,\n userAgent: userAgent.substring(0, 100) + (userAgent.length > 100 ? \"...\" : \"\"),\n referer,\n acceptHeader,\n method: c.req.method,\n url: c.req.url,\n allQueryParams: Object.fromEntries(new URL(c.req.url).searchParams.entries()),\n headers: Object.fromEntries(\n Object.entries(c.req.header()).filter(([key]) =>\n [\"accept\", \"user-agent\", \"authorization\", \"content-type\", \"host\", \"origin\"].includes(key.toLowerCase())\n ),\n ),\n });\n\n if (!resource) {\n console.error(\"❌ Missing resource parameter\");\n const processingTime = Date.now() - startTime;\n console.log(\"💥 WebFinger failed - missing resource\", { processingTimeMs: processingTime });\n return c.json({ error: \"Missing resource parameter\" }, 400);\n }\n\n console.log(\"🔍 Validating resource format:\", { resource });\n if (!isValidWebFingerResource(resource)) {\n console.error(\"❌ Invalid resource format:\", { resource });\n const processingTime = Date.now() - startTime;\n console.log(\"💥 WebFinger failed - invalid format\", { processingTimeMs: processingTime });\n return c.json({ error: \"Invalid resource format\" }, 400);\n }\n\n console.log(\"✅ Resource format is valid\");\n console.log(\"🔧 Generating WebFinger response...\");\n\n const webfingerResponse = generateWebFingerResponse(resource, domain);\n\n console.log(\"📄 WebFinger response generated:\", {\n subject: webfingerResponse?.subject,\n linksCount: webfingerResponse?.links?.length || 0,\n links: webfingerResponse?.links?.map(link => ({\n rel: link.rel,\n type: link.type,\n href: link.href,\n })) || [],\n });\n\n if (!webfingerResponse) {\n console.error(\"❌ Resource not found for domain:\", { resource, domain });\n const processingTime = Date.now() - startTime;\n console.log(\"💥 WebFinger failed - resource not found\", { processingTimeMs: processingTime });\n return c.json({ error: \"Resource not found\" }, 404);\n }\n\n const processingTime = Date.now() - startTime;\n console.log(\"✅ WebFinger response sent successfully\", {\n processingTimeMs: processingTime,\n subject: webfingerResponse.subject,\n linksCount: webfingerResponse.links.length,\n });\n\n return c.json(webfingerResponse, 200, {\n \"Content-Type\": \"application/jrd+json; charset=utf-8\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n });\n } catch (error) {\n const processingTime = Date.now() - startTime;\n console.error(\"💥 WebFinger error:\", {\n error: error.message,\n stack: error.stack,\n processingTimeMs: processingTime,\n });\n return c.json({ error: \"Internal server error\" }, 500);\n } finally {\n console.log(\"🔍 === WEBFINGER ENDPOINT END ===\");\n }\n});\n\n// Email verification endpoint\napp.get(\"/verify-email\", async c => {\n const startTime = Date.now();\n console.log(\"🔐 === EMAIL VERIFICATION START ===\");\n\n try {\n await ensureDbInitialized();\n const token = c.req.query(\"token\");\n\n console.log(\"📧 Verification request:\", {\n hasToken: !!token,\n tokenLength: token?.length || 0,\n tokenPreview: token ? token.substring(0, 10) + \"...\" : null,\n userAgent: c.req.header(\"user-agent\"),\n referer: c.req.header(\"referer\"),\n });\n\n if (!token) {\n console.error(\"❌ Missing verification token\");\n return c.html(generateVerificationErrorHTML(\"Missing verification token\"), 400);\n }\n\n console.log(\"🔍 Looking up verification record...\");\n // Get verification record\n const verification = await getEmailVerificationByToken(token);\n if (!verification) {\n console.error(\"❌ Verification record not found:\", {\n token: token.substring(0, 10) + \"...\",\n });\n return c.html(generateVerificationErrorHTML(\"Invalid or expired verification token\"), 404);\n }\n\n console.log(\"✅ Verification record found:\", {\n id: verification.id,\n email: verification.email,\n draftPostId: verification.draft_post_id,\n expiresAt: verification.expires_at,\n verifiedAt: verification.verified_at,\n createdAt: verification.created_at,\n });\n\n // Check if already verified\n if (verification.verified_at) {\n console.log(\"⚠️ Post already verified:\", {\n verifiedAt: verification.verified_at,\n });\n return c.html(generateVerificationSuccessHTML(\"This post has already been verified and published!\", true));\n }\n\n // Check if expired\n const now = new Date();\n const expiresAt = new Date(verification.expires_at);\n if (expiresAt < now) {\n console.error(\"❌ Verification token expired:\", {\n expiresAt: verification.expires_at,\n currentTime: now.toISOString(),\n expiredBy: Math.round((now.getTime() - expiresAt.getTime()) / (1000 * 60)) + \" minutes\",\n });\n return c.html(generateVerificationErrorHTML(\"Verification token has expired\"), 410);\n }\n\n console.log(\"✅ Token is valid, proceeding with verification...\");\n\n try {\n console.log(\"📝 Marking email as verified...\");\n // Mark as verified and publish the post\n await markEmailVerified(token);\n console.log(\"✅ Email marked as verified\");\n\n console.log(\"📤 Publishing draft post...\");\n const post = await publishDraftPost(token);\n console.log(\"✅ Draft post published successfully:\", {\n id: post.id,\n title: post.title,\n slug: post.slug,\n });\n\n // Notify external services\n console.log(\"📡 Notifying external services...\");\n const serviceResults = await Promise.allSettled([\n notifyWebSubSubscribers().then(() => ({ service: \"WebSub\", success: true })).catch(err => ({\n service: \"WebSub\",\n success: false,\n error: err.message,\n })),\n publishToActivityPub(post).then(() => ({ service: \"ActivityPub\", success: true })).catch(err => ({\n service: \"ActivityPub\",\n success: false,\n error: err.message,\n })),\n publishToATProtocol(post).then(() => ({ service: \"AT Protocol\", success: true })).catch(err => ({\n service: \"AT Protocol\",\n success: false,\n error: err.message,\n })),\n ]);\n\n // Log service notification results\n serviceResults.forEach((result, index) => {\n if (result.status === \"fulfilled\") {\n const serviceResult = result.value;\n if (serviceResult.success) {\n console.log(`✅ ${serviceResult.service} notification successful`);\n } else {\n console.error(`❌ ${serviceResult.service} notification failed:`, serviceResult.error);\n }\n } else {\n console.error(`💥 Service notification crashed:`, result.reason);\n }\n });\n\n const successfulServices = serviceResults.filter(r => r.status === \"fulfilled\" && r.value.success).length;\n const totalServices = serviceResults.length;\n console.log(\"📊 Service notification summary:\", {\n successful: successfulServices,\n total: totalServices,\n successRate: `${Math.round((successfulServices / totalServices) * 100)}%`,\n });\n\n console.log(`🎉 Post published successfully: ${post.title} (${post.slug})`);\n\n const baseUrl = getBaseUrl(c);\n const postUrl = `${baseUrl}/post/${post.slug}`;\n\n const processingTime = Date.now() - startTime;\n console.log(\"✅ === EMAIL VERIFICATION COMPLETED ===\", {\n processingTimeMs: processingTime,\n postUrl: postUrl,\n });\n\n return c.html(generateVerificationSuccessHTML(\n `Your post \"${post.title}\" has been verified and published successfully!`,\n false,\n postUrl,\n ));\n } catch (publishError) {\n const processingTime = Date.now() - startTime;\n console.error(\"💥 Error publishing post:\", {\n error: publishError.message,\n stack: publishError.stack,\n processingTimeMs: processingTime,\n token: token.substring(0, 10) + \"...\",\n });\n return c.html(generateVerificationErrorHTML(\"Failed to publish post. Please try again.\"), 500);\n }\n } catch (error) {\n const processingTime = Date.now() - startTime;\n console.error(\"💥 Email verification error:\", {\n error: error.message,\n stack: error.stack,\n processingTimeMs: processingTime,\n });\n return c.html(generateVerificationErrorHTML(\"An error occurred during verification\"), 500);\n } finally {\n console.log(\"🔐 === EMAIL VERIFICATION END ===\");\n }\n});\n\n// ===== IMAGE ROUTES =====\n\n// Serve image upload page\napp.get(\"/upload\", async c => {\n try {\n // Check if upload is enabled\n if (!isUploadEnabled()) {\n return c.html(`\n \n \n \n \n \n Upload Disabled - Posterous Blog\n \n \n \n

Upload Disabled

Image upload is currently disabled.

Administrator: Set the UPLOAD_PASSWORD environment variable to enable uploads.

\n ← Back to Blog\n

\n \n \n `);\n }\n\n const html = await readFile(\"/frontend/upload.html\", import.meta.url);\n return c.html(html);\n } catch (error) {\n console.error(\"Error serving upload page:\", error);\n return c.text(\"Error loading upload page\", 500);\n }\n});\n\n// Serve images\napp.get(\"/images/:filename\", async c => {\n try {\n await ensureDbInitialized();\n const filename = c.req.param(\"filename\");\n\n const imageData = await getImageData(filename);\n if (!imageData) {\n return c.text(\"Image not found\", 404);\n }\n\n // Return the image data as a proper Response\n return new Response(imageData.data, {\n headers: {\n \"Content-Type\": imageData.mimeType,\n \"Cache-Control\": \"public, max-age=31536000\", // Cache for 1 year\n },\n });\n } catch (error) {\n console.error(\"Error serving image:\", error);\n return c.text(\"Error serving image\", 500);\n }\n});\n\n// Upload image endpoint\napp.post(\"/api/images/upload\", async c => {\n try {\n await ensureDbInitialized();\n\n // Get the uploaded file and form data\n const body = await c.req.formData();\n const file = body.get(\"image\") as File;\n const password = body.get(\"password\") as string;\n const uploaderEmail = body.get(\"email\") as string;\n const altText = body.get(\"altText\") as string;\n const postSlug = body.get(\"postSlug\") as string;\n\n if (!file) {\n return c.json({ error: \"No image file provided\" }, 400);\n }\n\n if (!password) {\n return c.json({ error: \"Password is required\" }, 400);\n }\n\n if (!uploaderEmail) {\n return c.json({ error: \"Email is required\" }, 400);\n }\n\n // Validate upload password\n if (!validateUploadPassword(password)) {\n console.log(`❌ Invalid upload password attempt from ${uploaderEmail}`);\n return c.json({ error: \"Invalid password\" }, 403);\n }\n\n console.log(`✅ Valid upload password from ${uploaderEmail}`);\n\n // Store the image\n const image = await storeImageFromFile(file, uploaderEmail, {\n altText: altText || undefined,\n postSlug: postSlug || undefined,\n });\n\n const baseUrl = getBaseUrl(c);\n const imageUrl = getImageUrl(image.filename, baseUrl);\n\n return c.json({\n success: true,\n image: {\n id: image.id,\n filename: image.filename,\n originalFilename: image.original_filename,\n url: imageUrl,\n mimeType: image.mime_type,\n fileSize: image.file_size,\n altText: image.alt_text,\n postSlug: image.post_slug,\n createdAt: image.created_at,\n },\n });\n } catch (error) {\n console.error(\"Error uploading image:\", error);\n return c.json({ error: error.message || \"Failed to upload image\" }, 500);\n }\n});\n\n// Get images for a specific post\napp.get(\"/api/posts/:slug/images\", async c => {\n try {\n await ensureDbInitialized();\n const slug = c.req.param(\"slug\");\n\n const images = await getImagesByPostSlug(slug);\n const baseUrl = getBaseUrl(c);\n\n return c.json({\n images: images.map(image => ({\n id: image.id,\n filename: image.filename,\n originalFilename: image.original_filename,\n url: getImageUrl(image.filename, baseUrl),\n mimeType: image.mime_type,\n fileSize: image.file_size,\n altText: image.alt_text,\n createdAt: image.created_at,\n })),\n });\n } catch (error) {\n console.error(\"Error fetching post images:\", error);\n return c.json({ error: \"Failed to fetch images\" }, 500);\n }\n});\n\n// Get images uploaded by a user\napp.get(\"/api/images/user/:email\", async c => {\n try {\n await ensureDbInitialized();\n const email = c.req.param(\"email\");\n\n // Check password for access\n const password = c.req.query(\"password\");\n if (!password || !validateUploadPassword(password)) {\n return c.json({ error: \"Invalid password\" }, 403);\n }\n\n const images = await getImagesByUser(email);\n const baseUrl = getBaseUrl(c);\n\n return c.json({\n images: images.map(image => ({\n id: image.id,\n filename: image.filename,\n originalFilename: image.original_filename,\n url: getImageUrl(image.filename, baseUrl),\n mimeType: image.mime_type,\n fileSize: image.file_size,\n altText: image.alt_text,\n postSlug: image.post_slug,\n createdAt: image.created_at,\n })),\n });\n } catch (error) {\n console.error(\"Error fetching user images:\", error);\n return c.json({ error: \"Failed to fetch images\" }, 500);\n }\n});\n\n// Delete an image\napp.delete(\"/api/images/:filename\", async c => {\n try {\n await ensureDbInitialized();\n const filename = c.req.param(\"filename\");\n const password = c.req.query(\"password\");\n\n if (!password || !validateUploadPassword(password)) {\n return c.json({ error: \"Invalid password\" }, 403);\n }\n\n const success = await deleteImageCompletely(filename);\n\n if (!success) {\n return c.json({ error: \"Image not found\" }, 404);\n }\n\n return c.json({ success: true, message: \"Image deleted successfully\" });\n } catch (error) {\n console.error(\"Error deleting image:\", error);\n return c.json({ error: \"Failed to delete image\" }, 500);\n }\n});\n\n// Get all images (admin endpoint)\napp.get(\"/api/images\", async c => {\n try {\n await ensureDbInitialized();\n const password = c.req.query(\"password\");\n\n if (!password || !validateUploadPassword(password)) {\n return c.json({ error: \"Invalid password\" }, 403);\n }\n\n const limit = parseInt(c.req.query(\"limit\") || \"50\");\n const offset = parseInt(c.req.query(\"offset\") || \"0\");\n\n const images = await getAllImages(limit, offset);\n const baseUrl = getBaseUrl(c);\n\n return c.json({\n images: images.map(image => ({\n id: image.id,\n filename: image.filename,\n originalFilename: image.original_filename,\n url: getImageUrl(image.filename, baseUrl),\n mimeType: image.mime_type,\n fileSize: image.file_size,\n altText: image.alt_text,\n postSlug: image.post_slug,\n uploadedByEmail: image.uploaded_by_email,\n createdAt: image.created_at,\n })),\n pagination: {\n limit,\n offset,\n hasMore: images.length === limit,\n },\n });\n } catch (error) {\n console.error(\"Error fetching all images:\", error);\n return c.json({ error: \"Failed to fetch images\" }, 500);\n }\n});\n\n// Health check\napp.get(\"/health\", c => {\n return c.json({ status: \"ok\", timestamp: new Date().toISOString() });\n});\n\nexport default app.fetch;","deleted","label",[170,153],"backend","permalink","https://www.val.town/x/humble/postherous/code/backend/index.ts","extension","actionData","errors"]