giles
999249b944
Greenfield SX-native pivot (NOT a strangler): the host speaks SX/SXTP end to end;
JSON only at the future ActivityPub federation edge.
- OUTPUT: host/json-status -> host/sx-status — every host/ok/host/error response is
text/sx via the serialize primitive (NOT application/json). Flips feed, relations,
blog reads. Tests assert the SX envelope ({:ok true :data ...}).
- DELETE the blog JSON CRUD /posts (POST/PUT/DELETE) + bearer-based host/blog--protect:
a pure old-contract REST mirror. Create/edit go through the HTML editor forms;
programmatic writes speak SXTP. FOLLOW-UP: no browser delete route yet (was JSON-only,
no UI) — add POST /:slug/delete + cascade edge cleanup when the metamodel UI needs it.
- INPUT: host/sx-body (sxtp.sx) parses a text/sx request body to a string-keyed dict
(parse-safe + sxtp/-normalize). feed POST + relations attach/detach read it.
- UNIFIED field reader host/fields / host/field: text/sx body OR urlencoded form by
content-type. The blog form handlers (new/edit/relate/unrelate) + login read through
it — additive, urlencoded still works (no-engine / bootstrap fallback).
Conformance 290/290 (11 suites). Retires the strangler framing in the plan; adds the
'SX all the way out' wire table. The engine half (browser posts text/sx) follows.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
50 lines
2.3 KiB
Plaintext
50 lines
2.3 KiB
Plaintext
;; lib/host/feed.sx — Feed domain endpoints on the host. The first domain migrated
|
|
;; onto the SX host: read the activity timeline (GET /feed) and create activities
|
|
;; (POST /feed). Both go straight through the feed subsystem's public API; the
|
|
;; write path runs behind the host middleware stack (auth + ACL). Depends on
|
|
;; lib/feed/* + lib/host/handler.sx + lib/host/middleware.sx (write routes only).
|
|
|
|
;; ── read ───────────────────────────────────────────────────────────
|
|
|
|
;; GET /feed -> recent-first activities as a JSON envelope.
|
|
;; Query: ?actor=<id> (filter) ?limit=<n> (cap, applied after filtering).
|
|
(define host/feed-timeline
|
|
(fn (req)
|
|
(let ((base (feed/recent (feed/all)))
|
|
(actor (dream-query-param req "actor")))
|
|
(let ((filtered (if actor (feed/by-actor base actor) base))
|
|
(limit (dream-query-param req "limit")))
|
|
(let ((capped
|
|
(if limit (feed/take filtered (string->number limit)) filtered)))
|
|
(host/ok (feed/items capped)))))))
|
|
|
|
;; Public read route group.
|
|
(define host/feed-routes
|
|
(list
|
|
(dream-get "/feed" host/feed-timeline)))
|
|
|
|
;; ── write ──────────────────────────────────────────────────────────
|
|
|
|
;; POST /feed -> create an activity from the text/sx body. Returns 201 + the created
|
|
;; (normalised) activity. Body must be an SX dict; anything else -> 400.
|
|
(define host/feed-create
|
|
(fn (req)
|
|
(let ((raw (host/sx-body req)))
|
|
(if (= (type-of raw) "dict")
|
|
(host/ok-status 201 (feed/post raw))
|
|
(host/error 400 "invalid activity")))))
|
|
|
|
;; Guarded write route group: POST /feed behind auth + ACL ("post" on "feed").
|
|
;; resolve : token -> principal | nil (injected auth policy, e.g. token lookup
|
|
;; against the identity subsystem). Errors thrown downstream become a JSON 500.
|
|
(define host/feed-write-routes
|
|
(fn (resolve)
|
|
(list
|
|
(dream-post "/feed"
|
|
(host/pipeline
|
|
(list
|
|
host/wrap-errors
|
|
(host/require-auth resolve)
|
|
(host/require-permission "post" (fn (req) "feed")))
|
|
host/feed-create)))))
|