feat(federation): wire onPeerActivated into 8 transition sites

Every code location that sets federation_peers.status='active'
now invokes onPeerActivated(peerId, reason). HTTP handler sites
use fire-and-forget (.catch(log)) so the response isn't blocked
by sync-pull pagination. The worker-internal health-check site
awaits the handler since the tick is already async.

Sites: /peer/initiate, /peer/accept (4 branches), /approval-
requests/:id/approve, health check recovery, ensurePeered/
performHandshake.

packages/server/src/utils/federationPeering.ts

@@ -4,6 +4,7 @@ import { eq } from 'drizzle-orm';
 import { generateSnowflake } from './snowflake.js';
 import { getOurOrigin, generateHmacSecret } from './federationAuth.js';
 import { validateOrigin } from '../routes/federation.js';
+import { onPeerActivated } from './federationPeerActivation.js';
 
 // ─── Types ───────────────────────────────────────────────────────────────────
 
@@ -158,6 +159,9 @@ async function performHandshake(
         .run();
       const { connectionManager } = await import('../ws/handler.js');
       connectionManager.sendToAdmins({ type: 'federation_peers_changed' as const });
+      onPeerActivated(peerId, 'ensure_peered').catch(err =>
+        console.error('[federation] onPeerActivated from ensurePeered failed:', err)
+      );
       return { status: 'active', peerId };
     }
 

packages/server/src/utils/federationWorker.ts

@@ -11,7 +11,7 @@ import { getDmMessageWithUser } from '../routes/dm.js';
 import { connectionManager } from '../ws/handler.js';
 import { generateThumbnail } from './thumbnail.js';
 import type { FederationRelayRequest, FederationRelayResponse, FederationRelayEvent } from '@backspace/shared';
-import { startupBootstrapSync } from './federationPeerActivation.js';
+import { onPeerActivated, startupBootstrapSync } from './federationPeerActivation.js';
 import fs from 'node:fs';
 import path from 'node:path';
 import crypto from 'node:crypto';
@@ -1054,6 +1054,8 @@ async function processHealthCheckTick(): Promise<void> {
         console.log(
           `[federation-worker] Peer ${peer.origin} recovered — marked active`,
         );
+
+        await onPeerActivated(peer.id, 'health_check_recovery');
       }
       // If not ok, leave as unreachable — will check again next cycle
     } catch (err) {