graph: add batched actor and entity follow lookups

[Kzoeps]

Summary

Implements TECH-711 batch follow checks through app.certified.graph.getFollows and app.certified.graph.getEntityFollows.

One actor, 1–100 supplied targets; ordered duplicate-preserving results carry the existing follow record view or null. Uses parameterized set-based lookups, representative selection matching single lookups, and endpoint-local collection NSID validation. Includes a documented 7000-byte encoded GET request-target budget.

Reviewer guide

1. New graph Lexicons: public inputs and target-correlated nullable results.
2. api/lua/src/getFollows.lua, getEntityFollows.lua, and shared/followBatch.lua: validation, SQL and reconstruction.
3. Graph unit and HTTP tests: representative selection, duplicate inputs, nulls and failures.
4. Module manifests, generated bundles, explorer and self-contained consumer skill: registration and distribution alignment.

Validation

• Independent worker/reviewer loop completed; malformed collection finding fixed and re-reviewed.
• Coordinator pnpm check: 351 unit tests and 17 explorer tests passed.
• Focused entity-follow tests: 13 passed.
• Worker pnpm build passed; git diff --check passed.
• Installed HTTP/PostgreSQL tests were not run locally; CI runtime-contracts job is expected to run them.

Minor Changeset included. No existing single-endpoint behavior changed.

[changeset-bot]

🦋 Changeset detected

Latest commit: 3ad86a8

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@hypercerts-org/hypercerts-api	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
api-endpoints	Ready	Preview	Oct 14, 2026 10:15am UTC

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 59 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 2cbdf7c5-ea4b-4b2d-a78c-661f59cf3245

📥 Commits

Reviewing files that changed from the base of the PR and between 52658c3 and 3ad86a8.

📒 Files selected for processing: 28

• .agents/skills/hypercerts-api/SKILL.md
• .agents/skills/hypercerts-api/references/endpoint-map.md
• .agents/skills/hypercerts-api/references/openapi.json
• .agents/skills/hypercerts-api/references/reliability.md
• .agents/skills/hypercerts-api/references/request-patterns.md
• .changeset/batch-follow-queries.md
• CONTRIBUTING.md
• api/README.md
• api/lexicons/app.certified.graph.getEntityFollows.json
• api/lexicons/app.certified.graph.getFollows.json
• api/lua/endpoints/getEntityFollows.lua
• api/lua/endpoints/getFollows.lua
• api/lua/shared/followBatch.lua
• api/lua/src/getEntityFollows.lua
• api/lua/src/getFollows.lua
• api/manifest.json
• api/modules/actor-follow/manifest.json
• api/modules/entity-follow/manifest.json
• api/tests/http/actor-follow.http.test.js
• api/tests/http/entity-follow.http.test.js
• api/tests/http/graph-getFollow.http.test.js
• api/tests/unit/tooling/actor-follow.test.js
• api/tests/unit/tooling/entity-follow.test.js
• docs/coverage.json
• docs/openapi.json
• docs/sources/index.json
• docs/sources/lexicons/app.certified.graph.getEntityFollows.json
• docs/sources/lexicons/app.certified.graph.getFollows.json

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

❌ The last analysis has failed.

See analysis details on SonarQube Cloud