811d5f62f5
Implements the social-feed change end-to-end. Local-only follows
between users on the same instance, an aggregated /feed of public
activities from people you follow, and an explicit profile_visibility
setting so the question "can someone follow me?" has a deterministic
answer.
Schema (additive, drizzle-kit push --force in cd-apps handles it):
- journal.follows table keyed by `followed_actor_iri TEXT` for
federation forward-compat. Local IRIs look like
`${ORIGIN}/users/${username}`. `accepted_at` is nullable so the
Pending state from social-federation slots in without migration.
- journal.users.profile_visibility ('public' | 'private', default
'public'). Existing users land 'public' via the default; current
effective behavior is unchanged.
Server (apps/journal/app/lib):
- actor-iri.ts: localActorIri(username) helper — single source of
truth for IRI construction.
- follow.server.ts: followUser / unfollowUser / getFollowState /
countFollowers / countFollowing / listFollowers / listFollowing.
Refuses self-follow + private targets. Idempotent.
- activities.server.ts: listSocialFeed(followerId, limit) joining
follows → activities WHERE visibility='public', reverse-chrono.
Routes:
- POST /api/users/:username/follow + /unfollow (session-bound)
- /feed (signed-in only; redirects anon to /auth/login)
- /users/:username/followers + /users/:username/following (paginated)
- /users/:username gates on profile_visibility AND has-public-content
for visitors; owners on private get an amber explainer banner.
- /settings adds a Public/Private radio with explainer text.
UI:
- FollowButton component on profile page (hidden for owner + anon).
- Follower/following counts on profile linking to collection pages.
- "Feed" link in nav (signed-in) + on personal dashboard alongside
"New Activity".
Privacy manifest updated to document the new follows relation and
profile_visibility setting.
Tests: follow.integration.test.ts (FOLLOW_INTEGRATION=1) for the
follow lifecycle; e2e/social.test.ts for /feed redirect, follow
button + count transitions, and the profile_visibility 404 toggle.
Local development: run `pnpm db:push` after pulling to apply the
schema additions. Production migrates automatically via cd-apps.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
26 lines
944 B
TypeScript
26 lines
944 B
TypeScript
import { data } from "react-router";
|
|
import type { Route } from "./+types/api.users.$username.unfollow";
|
|
import { getSessionUser } from "~/lib/auth.server";
|
|
import { unfollowUser, FollowError } from "~/lib/follow.server";
|
|
|
|
export async function action({ request, params }: Route.ActionArgs) {
|
|
if (request.method !== "POST") {
|
|
return data({ error: "Method not allowed" }, { status: 405 });
|
|
}
|
|
const user = await getSessionUser(request);
|
|
if (!user) return data({ error: "Unauthorized" }, { status: 401 });
|
|
|
|
const username = params.username;
|
|
if (!username) return data({ error: "username required" }, { status: 400 });
|
|
|
|
try {
|
|
const state = await unfollowUser(user.id, username);
|
|
return data({ ok: true, ...state });
|
|
} catch (e) {
|
|
if (e instanceof FollowError) {
|
|
const status = e.code === "user_not_found" ? 404 : 400;
|
|
return data({ error: e.message, code: e.code }, { status });
|
|
}
|
|
throw e;
|
|
}
|
|
}
|