@evanp/activitypub-bot 0.51.2 → 0.52.0

package/CHANGELOG.md

@@ -9,6 +9,45 @@ and this project adheres to
 
 ## [Unreleased]
 
+## [0.52.0] - 2026-10-05
+
+### Added
+
+- `GET /js/ap-components.min.js` to serve the installed ap-components bundle
+  locally, with cache revalidation.
+- Regression tests for local component serving, injected fetch usage, reverse
+  WebFinger metadata, and discovery failures.
+
+### Changed
+
+- Serve ap-components from the installed npm dependency at
+  `/js/ap-components.min.js` instead of loading it from a CDN on profile pages.
+- Use activitypub-webfinger for actor ID discovery, mention resolution, and
+  reverse WebFinger lookup, with SafeFetcher.fetch bound once per instance.
+- Reverse WebFinger lookups now fetch directly through SafeFetcher instead of
+  the cached, signed ActivityPub client.
+- Return `null` on failed WebFinger discovery in `BotContext.toActorId()`.
+
+## [0.51.4] 2026-09-29
+
+### Updated
+
+- activitystrea.ms to 4.0.1.
+
+### Fixed
+
+- Restored ESLint 9 compatibility with neostandard so `npm ci` can complete
+  in the release workflow.
+
+## [0.51.3] 2026-09-29
+
+### Updated
+
+- dependencies: csv-parse, express-rate-limit, mysql2, nanoid, pg,
+  rate-limit-redis, redis, and transitive dependencies ip-address, qs, undici.
+- ESLint to 10.x.
+- GitHub Actions: actions/checkout and actions/setup-node to v7.
+
 ## [0.51.2] 2026-08-19
 
 ### Updated
@@ -1642,3 +1681,199 @@ Hot patch on the `stable` branch.
 - Sequelize drivers for SQLite, Postgres, and MySQL.
 - Docker multi-platform build workflow.
 - Dependabot configuration.
+
+[Unreleased]: https://github.com/evanp/activitypub-bot/compare/v0.52.0...HEAD
+[0.52.0]: https://github.com/evanp/activitypub-bot/compare/v0.51.4...v0.52.0
+[0.51.4]: https://github.com/evanp/activitypub-bot/compare/v0.51.3...v0.51.4
+[0.51.3]: https://github.com/evanp/activitypub-bot/compare/v0.51.2...v0.51.3
+[0.51.2]: https://github.com/evanp/activitypub-bot/compare/v0.51.1...v0.51.2
+[0.51.1]: https://github.com/evanp/activitypub-bot/compare/v0.51.0...v0.51.1
+[0.51.0]: https://github.com/evanp/activitypub-bot/compare/v0.50.2...v0.51.0
+[0.50.2]: https://github.com/evanp/activitypub-bot/compare/v0.50.1...v0.50.2
+[0.50.1]: https://github.com/evanp/activitypub-bot/compare/v0.50.0...v0.50.1
+[0.50.0]: https://github.com/evanp/activitypub-bot/compare/v0.49.1...v0.50.0
+[0.49.1]: https://github.com/evanp/activitypub-bot/compare/v0.49.0...v0.49.1
+[0.49.0]: https://github.com/evanp/activitypub-bot/compare/v0.48.2...v0.49.0
+[0.48.2]: https://github.com/evanp/activitypub-bot/compare/v0.48.1...v0.48.2
+[0.48.1]: https://github.com/evanp/activitypub-bot/compare/v0.48.0...v0.48.1
+[0.48.0]: https://github.com/evanp/activitypub-bot/compare/v0.47.1...v0.48.0
+[0.47.1]: https://github.com/evanp/activitypub-bot/compare/v0.47.0...v0.47.1
+[0.47.0]: https://github.com/evanp/activitypub-bot/compare/v0.46.5...v0.47.0
+[0.46.5]: https://github.com/evanp/activitypub-bot/compare/v0.46.4...v0.46.5
+[0.46.4]: https://github.com/evanp/activitypub-bot/compare/v0.46.3...v0.46.4
+[0.46.3]: https://github.com/evanp/activitypub-bot/compare/v0.46.2...v0.46.3
+[0.46.2]: https://github.com/evanp/activitypub-bot/compare/v0.46.1...v0.46.2
+[0.46.1]: https://github.com/evanp/activitypub-bot/compare/v0.46.0...v0.46.1
+[0.46.0]: https://github.com/evanp/activitypub-bot/compare/v0.45.20...v0.46.0
+[0.45.20]: https://github.com/evanp/activitypub-bot/compare/v0.45.19...v0.45.20
+[0.45.19]: https://github.com/evanp/activitypub-bot/compare/v0.45.18...v0.45.19
+[0.45.18]: https://github.com/evanp/activitypub-bot/compare/v0.45.17...v0.45.18
+[0.45.17]: https://github.com/evanp/activitypub-bot/compare/v0.45.16...v0.45.17
+[0.45.16]: https://github.com/evanp/activitypub-bot/compare/v0.45.15...v0.45.16
+[0.45.15]: https://github.com/evanp/activitypub-bot/compare/v0.45.14...v0.45.15
+[0.45.14]: https://github.com/evanp/activitypub-bot/compare/v0.45.13...v0.45.14
+[0.45.13]: https://github.com/evanp/activitypub-bot/compare/v0.45.12...v0.45.13
+[0.45.12]: https://github.com/evanp/activitypub-bot/compare/v0.45.11...v0.45.12
+[0.45.11]: https://github.com/evanp/activitypub-bot/compare/v0.45.10...v0.45.11
+[0.45.10]: https://github.com/evanp/activitypub-bot/compare/v0.45.9...v0.45.10
+[0.45.9]: https://github.com/evanp/activitypub-bot/compare/v0.45.8...v0.45.9
+[0.45.8]: https://github.com/evanp/activitypub-bot/compare/v0.45.7...v0.45.8
+[0.45.7]: https://github.com/evanp/activitypub-bot/compare/v0.45.6...v0.45.7
+[0.45.6]: https://github.com/evanp/activitypub-bot/compare/v0.45.5...v0.45.6
+[0.45.5]: https://github.com/evanp/activitypub-bot/compare/v0.45.4...v0.45.5
+[0.45.4]: https://github.com/evanp/activitypub-bot/compare/v0.45.3...v0.45.4
+[0.45.3]: https://github.com/evanp/activitypub-bot/compare/v0.45.2...v0.45.3
+[0.45.2]: https://github.com/evanp/activitypub-bot/compare/v0.45.1...v0.45.2
+[0.45.1]: https://github.com/evanp/activitypub-bot/compare/v0.45.0...v0.45.1
+[0.45.0]: https://github.com/evanp/activitypub-bot/compare/v0.44.3...v0.45.0
+[0.44.3]: https://github.com/evanp/activitypub-bot/compare/v0.44.2...v0.44.3
+[0.44.2]: https://github.com/evanp/activitypub-bot/compare/v0.44.1...v0.44.2
+[0.44.1]: https://github.com/evanp/activitypub-bot/compare/v0.44.0...v0.44.1
+[0.44.0]: https://github.com/evanp/activitypub-bot/compare/v0.43.3...v0.44.0
+[0.43.3]: https://github.com/evanp/activitypub-bot/compare/v0.43.2...v0.43.3
+[0.43.2]: https://github.com/evanp/activitypub-bot/compare/v0.43.1...v0.43.2
+[0.43.1]: https://github.com/evanp/activitypub-bot/compare/v0.43.0...v0.43.1
+[0.43.0]: https://github.com/evanp/activitypub-bot/compare/v0.42.1...v0.43.0
+[0.42.1]: https://github.com/evanp/activitypub-bot/compare/v0.42.0...v0.42.1
+[0.42.0]: https://github.com/evanp/activitypub-bot/compare/v0.41.3...v0.42.0
+[0.41.3]: https://github.com/evanp/activitypub-bot/compare/v0.41.2...v0.41.3
+[0.41.2]: https://github.com/evanp/activitypub-bot/compare/v0.41.1...v0.41.2
+[0.41.1]: https://github.com/evanp/activitypub-bot/compare/v0.41.0...v0.41.1
+[0.41.0]: https://github.com/evanp/activitypub-bot/compare/v0.40.2...v0.41.0
+[0.40.2]: https://github.com/evanp/activitypub-bot/compare/v0.40.1...v0.40.2
+[0.40.1]: https://github.com/evanp/activitypub-bot/compare/v0.40.0...v0.40.1
+[0.40.0]: https://github.com/evanp/activitypub-bot/compare/v0.39.6...v0.40.0
+[0.39.6]: https://github.com/evanp/activitypub-bot/compare/v0.39.5...v0.39.6
+[0.39.5]: https://github.com/evanp/activitypub-bot/compare/v0.39.4...v0.39.5
+[0.39.4]: https://github.com/evanp/activitypub-bot/compare/v0.39.3...v0.39.4
+[0.39.3]: https://github.com/evanp/activitypub-bot/compare/v0.39.2...v0.39.3
+[0.39.2]: https://github.com/evanp/activitypub-bot/compare/v0.39.1...v0.39.2
+[0.39.1]: https://github.com/evanp/activitypub-bot/compare/v0.39.0...v0.39.1
+[0.39.0]: https://github.com/evanp/activitypub-bot/compare/v0.38.4...v0.39.0
+[0.38.4]: https://github.com/evanp/activitypub-bot/compare/v0.38.3...v0.38.4
+[0.38.3]: https://github.com/evanp/activitypub-bot/compare/v0.38.2...v0.38.3
+[0.38.2]: https://github.com/evanp/activitypub-bot/compare/v0.38.1...v0.38.2
+[0.38.1]: https://github.com/evanp/activitypub-bot/compare/v0.38.0...v0.38.1
+[0.38.0]: https://github.com/evanp/activitypub-bot/compare/v0.37.1...v0.38.0
+[0.37.1]: https://github.com/evanp/activitypub-bot/compare/v0.37.0...v0.37.1
+[0.37.0]: https://github.com/evanp/activitypub-bot/compare/v0.36.2...v0.37.0
+[0.36.2]: https://github.com/evanp/activitypub-bot/compare/v0.36.1...v0.36.2
+[0.36.1]: https://github.com/evanp/activitypub-bot/compare/v0.36.0...v0.36.1
+[0.36.0]: https://github.com/evanp/activitypub-bot/compare/v0.35.0...v0.36.0
+[0.35.0]: https://github.com/evanp/activitypub-bot/compare/v0.34.1...v0.35.0
+[0.34.1]: https://github.com/evanp/activitypub-bot/compare/v0.34.0...v0.34.1
+[0.34.0]: https://github.com/evanp/activitypub-bot/compare/v0.33.0...v0.34.0
+[0.33.0]: https://github.com/evanp/activitypub-bot/compare/v0.32.3...v0.33.0
+[0.32.3]: https://github.com/evanp/activitypub-bot/compare/v0.32.2...v0.32.3
+[0.32.2]: https://github.com/evanp/activitypub-bot/compare/v0.32.1...v0.32.2
+[0.32.1]: https://github.com/evanp/activitypub-bot/compare/v0.32.0...v0.32.1
+[0.32.0]: https://github.com/evanp/activitypub-bot/compare/v0.31.1...v0.32.0
+[0.31.1]: https://github.com/evanp/activitypub-bot/compare/v0.31.0...v0.31.1
+[0.31.0]: https://github.com/evanp/activitypub-bot/compare/v0.30.6...v0.31.0
+[0.30.6]: https://github.com/evanp/activitypub-bot/compare/v0.30.5...v0.30.6
+[0.30.5]: https://github.com/evanp/activitypub-bot/compare/v0.30.4...v0.30.5
+[0.30.4]: https://github.com/evanp/activitypub-bot/compare/v0.30.3...v0.30.4
+[0.30.3]: https://github.com/evanp/activitypub-bot/compare/v0.30.2...v0.30.3
+[0.30.2]: https://github.com/evanp/activitypub-bot/compare/v0.30.1...v0.30.2
+[0.30.1]: https://github.com/evanp/activitypub-bot/compare/v0.30.0...v0.30.1
+[0.30.0]: https://github.com/evanp/activitypub-bot/compare/v0.29.0...v0.30.0
+[0.29.0]: https://github.com/evanp/activitypub-bot/compare/v0.28.7...v0.29.0
+[0.28.7]: https://github.com/evanp/activitypub-bot/compare/v0.28.6...v0.28.7
+[0.28.6]: https://github.com/evanp/activitypub-bot/compare/v0.28.5...v0.28.6
+[0.28.5]: https://github.com/evanp/activitypub-bot/compare/v0.28.4...v0.28.5
+[0.28.4]: https://github.com/evanp/activitypub-bot/compare/v0.28.3...v0.28.4
+[0.28.3]: https://github.com/evanp/activitypub-bot/compare/v0.28.2...v0.28.3
+[0.28.2]: https://github.com/evanp/activitypub-bot/compare/v0.28.1...v0.28.2
+[0.28.1]: https://github.com/evanp/activitypub-bot/compare/v0.28.0...v0.28.1
+[0.28.0]: https://github.com/evanp/activitypub-bot/compare/v0.27.1...v0.28.0
+[0.27.1]: https://github.com/evanp/activitypub-bot/compare/v0.27.0...v0.27.1
+[0.27.0]: https://github.com/evanp/activitypub-bot/compare/v0.26.3...v0.27.0
+[0.26.3]: https://github.com/evanp/activitypub-bot/compare/v0.26.2...v0.26.3
+[0.26.2]: https://github.com/evanp/activitypub-bot/compare/v0.26.1...v0.26.2
+[0.26.1]: https://github.com/evanp/activitypub-bot/compare/v0.26.0...v0.26.1
+[0.26.0]: https://github.com/evanp/activitypub-bot/compare/v0.25.1...v0.26.0
+[0.25.1]: https://github.com/evanp/activitypub-bot/compare/v0.25.0...v0.25.1
+[0.25.0]: https://github.com/evanp/activitypub-bot/compare/v0.24.2...v0.25.0
+[0.24.2]: https://github.com/evanp/activitypub-bot/compare/v0.24.1...v0.24.2
+[0.24.1]: https://github.com/evanp/activitypub-bot/compare/v0.24.0...v0.24.1
+[0.24.0]: https://github.com/evanp/activitypub-bot/compare/v0.23.0...v0.24.0
+[0.23.0]: https://github.com/evanp/activitypub-bot/compare/v0.22.0...v0.23.0
+[0.22.0]: https://github.com/evanp/activitypub-bot/compare/v0.21.2...v0.22.0
+[0.21.2]: https://github.com/evanp/activitypub-bot/compare/v0.21.1...v0.21.2
+[0.21.1]: https://github.com/evanp/activitypub-bot/compare/v0.21.0...v0.21.1
+[0.21.0]: https://github.com/evanp/activitypub-bot/compare/v0.20.1...v0.21.0
+[0.20.1]: https://github.com/evanp/activitypub-bot/compare/v0.20.0...v0.20.1
+[0.20.0]: https://github.com/evanp/activitypub-bot/compare/v0.19.0...v0.20.0
+[0.19.0]: https://github.com/evanp/activitypub-bot/compare/v0.18.0...v0.19.0
+[0.18.0]: https://github.com/evanp/activitypub-bot/compare/v0.17.0...v0.18.0
+[0.17.0]: https://github.com/evanp/activitypub-bot/compare/v0.16.7...v0.17.0
+[0.16.7]: https://github.com/evanp/activitypub-bot/compare/v0.16.6...v0.16.7
+[0.16.6]: https://github.com/evanp/activitypub-bot/compare/v0.16.5...v0.16.6
+[0.16.5]: https://github.com/evanp/activitypub-bot/compare/v0.16.4...v0.16.5
+[0.16.4]: https://github.com/evanp/activitypub-bot/compare/v0.16.3...v0.16.4
+[0.16.3]: https://github.com/evanp/activitypub-bot/compare/v0.16.2...v0.16.3
+[0.16.2]: https://github.com/evanp/activitypub-bot/compare/v0.16.1...v0.16.2
+[0.16.1]: https://github.com/evanp/activitypub-bot/compare/v0.16.0...v0.16.1
+[0.16.0]: https://github.com/evanp/activitypub-bot/compare/v0.15.4...v0.16.0
+[0.15.4]: https://github.com/evanp/activitypub-bot/compare/v0.15.3...v0.15.4
+[0.15.3]: https://github.com/evanp/activitypub-bot/compare/v0.15.2...v0.15.3
+[0.15.2]: https://github.com/evanp/activitypub-bot/compare/v0.15.1...v0.15.2
+[0.15.1]: https://github.com/evanp/activitypub-bot/compare/v0.15.0...v0.15.1
+[0.15.0]: https://github.com/evanp/activitypub-bot/compare/v0.14.2...v0.15.0
+[0.14.2]: https://github.com/evanp/activitypub-bot/compare/v0.14.1...v0.14.2
+[0.14.1]: https://github.com/evanp/activitypub-bot/compare/v0.14.0...v0.14.1
+[0.14.0]: https://github.com/evanp/activitypub-bot/compare/v0.13.14...v0.14.0
+[0.13.14]: https://github.com/evanp/activitypub-bot/compare/v0.13.13...v0.13.14
+[0.13.13]: https://github.com/evanp/activitypub-bot/compare/v0.13.12...v0.13.13
+[0.13.12]: https://github.com/evanp/activitypub-bot/compare/v0.13.11...v0.13.12
+[0.13.11]: https://github.com/evanp/activitypub-bot/compare/v0.13.10...v0.13.11
+[0.13.10]: https://github.com/evanp/activitypub-bot/compare/v0.13.9...v0.13.10
+[0.13.9]: https://github.com/evanp/activitypub-bot/compare/v0.13.8...v0.13.9
+[0.13.8]: https://github.com/evanp/activitypub-bot/compare/v0.13.7...v0.13.8
+[0.13.7]: https://github.com/evanp/activitypub-bot/compare/v0.13.6...v0.13.7
+[0.13.6]: https://github.com/evanp/activitypub-bot/compare/v0.13.5...v0.13.6
+[0.13.5]: https://github.com/evanp/activitypub-bot/compare/v0.13.4...v0.13.5
+[0.13.4]: https://github.com/evanp/activitypub-bot/compare/v0.13.3...v0.13.4
+[0.13.3]: https://github.com/evanp/activitypub-bot/compare/v0.13.2...v0.13.3
+[0.13.2]: https://github.com/evanp/activitypub-bot/compare/v0.13.1...v0.13.2
+[0.13.1]: https://github.com/evanp/activitypub-bot/compare/v0.13.0...v0.13.1
+[0.13.0]: https://github.com/evanp/activitypub-bot/compare/v0.12.1...v0.13.0
+[0.12.1]: https://github.com/evanp/activitypub-bot/compare/v0.12.0...v0.12.1
+[0.12.0]: https://github.com/evanp/activitypub-bot/compare/v0.11.0...v0.12.0
+[0.11.0]: https://github.com/evanp/activitypub-bot/compare/v0.10.0...v0.11.0
+[0.10.0]: https://github.com/evanp/activitypub-bot/compare/v0.9.0...v0.10.0
+[0.9.0]: https://github.com/evanp/activitypub-bot/compare/v0.8.0...v0.9.0
+[0.8.0]: https://github.com/evanp/activitypub-bot/compare/v0.7.5...v0.8.0
+[0.7.5]: https://github.com/evanp/activitypub-bot/compare/v0.7.4...v0.7.5
+[0.7.4]: https://github.com/evanp/activitypub-bot/compare/v0.7.3...v0.7.4
+[0.7.3]: https://github.com/evanp/activitypub-bot/compare/v0.7.2...v0.7.3
+[0.7.2]: https://github.com/evanp/activitypub-bot/compare/v0.7.1...v0.7.2
+[0.7.1]: https://github.com/evanp/activitypub-bot/compare/v0.7.0...v0.7.1
+[0.7.0]: https://github.com/evanp/activitypub-bot/compare/v0.6.0...v0.7.0
+[0.6.0]: https://github.com/evanp/activitypub-bot/compare/v0.5.7...v0.6.0
+[0.5.7]: https://github.com/evanp/activitypub-bot/compare/v0.5.6...v0.5.7
+[0.5.6]: https://github.com/evanp/activitypub-bot/compare/v0.5.5...v0.5.6
+[0.5.5]: https://github.com/evanp/activitypub-bot/compare/v0.5.4...v0.5.5
+[0.5.4]: https://github.com/evanp/activitypub-bot/compare/v0.5.3...v0.5.4
+[0.5.3]: https://github.com/evanp/activitypub-bot/compare/v0.5.2...v0.5.3
+[0.5.2]: https://github.com/evanp/activitypub-bot/compare/v0.5.1...v0.5.2
+[0.5.1]: https://github.com/evanp/activitypub-bot/compare/v0.5.0...v0.5.1
+[0.5.0]: https://github.com/evanp/activitypub-bot/compare/v0.4.10...v0.5.0
+[0.4.10]: https://github.com/evanp/activitypub-bot/compare/v0.4.9...v0.4.10
+[0.4.9]: https://github.com/evanp/activitypub-bot/compare/v0.4.8...v0.4.9
+[0.4.8]: https://github.com/evanp/activitypub-bot/compare/v0.4.7...v0.4.8
+[0.4.7]: https://github.com/evanp/activitypub-bot/compare/v0.4.6...v0.4.7
+[0.4.6]: https://github.com/evanp/activitypub-bot/compare/v0.4.5...v0.4.6
+[0.4.5]: https://github.com/evanp/activitypub-bot/compare/v0.4.4...v0.4.5
+[0.4.4]: https://github.com/evanp/activitypub-bot/compare/v0.4.3...v0.4.4
+[0.4.3]: https://github.com/evanp/activitypub-bot/compare/v0.4.2...v0.4.3
+[0.4.2]: https://github.com/evanp/activitypub-bot/compare/v0.4.1...v0.4.2
+[0.4.1]: https://github.com/evanp/activitypub-bot/compare/v0.4.0...v0.4.1
+[0.4.0]: https://github.com/evanp/activitypub-bot/compare/v0.3.4...v0.4.0
+[0.3.4]: https://github.com/evanp/activitypub-bot/compare/v0.3.3...v0.3.4
+[0.3.3]: https://github.com/evanp/activitypub-bot/compare/v0.3.2...v0.3.3
+[0.3.2]: https://github.com/evanp/activitypub-bot/compare/v0.3.1...v0.3.2
+[0.3.1]: https://github.com/evanp/activitypub-bot/compare/v0.3.0...v0.3.1
+[0.3.0]: https://github.com/evanp/activitypub-bot/compare/v0.2.0...v0.3.0
+[0.2.0]: https://github.com/evanp/activitypub-bot/compare/v0.1.0...v0.2.0
+[0.1.0]: https://github.com/evanp/activitypub-bot/tree/v0.1.0

package/lib/app.js

@@ -37,6 +37,7 @@ import proxyRouter from './routes/proxy.js'
 import nodeinfoRouter from './routes/nodeinfo.js'
 import robotsTxtRouter from './routes/robotstxt.js'
 import faviconRouter from './routes/favicon.js'
+import staticRouter from './routes/static.js'
 import { BotContext } from './botcontext.js'
 import { Transformer } from './microsyntax.js'
 import { HTTPSignatureAuthenticator } from './httpsignatureauthenticator.js'
@@ -331,6 +332,7 @@ export async function makeApp ({ databaseUrl, origin, bots, logLevel = 'silent',
 
   // These should not check HTTP Signature even if provided
 
+  app.use('/', staticRouter)
   app.use('/', healthRouter)
   app.use('/', serverRouter)
   app.use('/', profileRouter)

package/lib/botcontext.js

@@ -1,18 +1,12 @@
 import assert from 'node:assert'
 
 import { nanoid } from 'nanoid'
+import { actorIdOf, webfingerOf } from 'activitypub-webfinger'
 
 import as2 from './activitystreams.js'
 
-const AS2_TYPES = [
-  'application/activity+json',
-  'application/ld+json; profile="https://www.w3.org/ns/activitystreams"'
-]
-
 const AS2_NS = 'https://www.w3.org/ns/activitystreams#'
 
-const WF_NS = 'https://purl.archive.org/socialweb/webfinger#'
-
 const THREAD_PROP = 'https://purl.archive.org/socialweb/thread#thread'
 const CONVERSATION_PROP = 'http://ostatus.org/schema/1.0/conversation'
 
@@ -28,6 +22,7 @@ export class BotContext {
   #logger = null
   #bots
   #fetcher
+  #fetch
 
   constructor (
     botId,
@@ -64,6 +59,7 @@ export class BotContext {
     this.#bots = bots
     this.#logger = logger.child({ class: 'BotContext', botId })
     this.#fetcher = fetcher
+    this.#fetch = fetcher.fetch.bind(fetcher)
   }
 
   get botId () {
@@ -400,34 +396,11 @@ export class BotContext {
     if (domain.toLowerCase() === this.#formatter.hostname) {
       return this.#formatter.format({ username })
     }
-    const url = `https://${domain}/.well-known/webfinger` +
-      `?resource=acct:${webfinger}`
-    const res = await this.#fetcher.fetch(url)
-    if (res.status !== 200) {
-      throw new Error(`Status ${res.status} fetching ${url}`)
-    }
-    const json = await res.json()
-    const link = json?.links?.find(
-      (l) => l.rel === 'self' && AS2_TYPES.includes(l.type)
-    )
-    return link ? link.href : null
+    return await actorIdOf(webfinger, { fetch: this.#fetch })
   }
 
   async toWebfinger (actorId) {
-    const actor = await this.#getRemoteObject(actorId)
-    if (!actor) {
-      return null
-    }
-    const wf = actor.get(WF_NS + 'webfinger')
-    if (wf) {
-      return wf.value()
-    }
-    const username = actor.get('preferredUsername')?.first
-    if (!username) {
-      return null
-    }
-    const actorUrl = new URL(actor.id)
-    return `${username}@${actorUrl.hostname}`
+    return await webfingerOf(actorId, { fetch: this.#fetch })
   }
 
   async announceObject (obj, actors = null) {

package/lib/microsyntax.js

@@ -1,11 +1,12 @@
 import assert from 'node:assert'
+import { actorIdOf } from 'activitypub-webfinger'
 
 const AS2 = 'https://www.w3.org/ns/activitystreams#'
 
 export class Transformer {
   #tagNamespace = null
   #client = null
-  #fetcher = null
+  #fetch = null
   #formatter = null
 
   constructor (tagNamespace, client, fetcher, formatter) {
@@ -16,12 +17,12 @@ export class Transformer {
 
     this.#tagNamespace = tagNamespace
     this.#client = client
-    this.#fetcher = fetcher
+    this.#fetch = fetcher.fetch.bind(fetcher)
     this.#formatter = formatter
 
     assert.ok(this.#tagNamespace)
     assert.ok(this.#client)
-    assert.ok(this.#fetcher)
+    assert.ok(this.#fetch)
     assert.ok(this.#formatter)
   }
 
@@ -99,24 +100,7 @@ export class Transformer {
     if (domain.toLowerCase() === this.#formatter.hostname) {
       return this.#formatter.format({ username, type: 'profile' })
     }
-    const url = `https://${domain}/.well-known/webfinger?` +
-      `resource=acct:${username}@${domain}`
-    let json = null
-    try {
-      const response = await this.#fetcher.fetch(url,
-        { headers: { Accept: 'application/jrd+json' } })
-      if (response.status !== 200) return null
-      json = await response.json()
-    } catch (error) {
-      return null
-    }
-    if (!json.links) return null
-    const link = json.links.find(
-      link => link.rel === 'self' &&
-        (link.type === 'application/activity+json' ||
-          link.type === 'application/ld+json; profile="https://www.w3.org/ns/activitystreams"'))
-    if (!link) return null
-    const actorId = link.href
+    const actorId = await actorIdOf(webfinger, { fetch: this.#fetch })
     if (!actorId) return null
     let actor = null
     try {

package/lib/routes/static.js

@@ -0,0 +1,12 @@
+import { Router } from 'express'
+import { fileURLToPath } from 'node:url'
+
+const router = Router()
+
+const COMPONENT_BUNDLE_FILENAME = fileURLToPath(import.meta.resolve('@socialwebfoundation/ap-components/dist/ap-components.min.js'))
+
+router.get('/js/ap-components.min.js', (req, res) => {
+  res.sendFile(COMPONENT_BUNDLE_FILENAME, { maxAge: 0 })
+})
+
+export default router

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evanp/activitypub-bot",
-  "version": "0.51.2",
+  "version": "0.52.0",
   "description": "server-side ActivityPub bot framework",
   "type": "module",
   "main": "lib/index.js",
@@ -31,17 +31,19 @@
   "homepage": "https://github.com/evanp/activitypub-bot#readme",
   "dependencies": {
     "@isaacs/ttlcache": "^2.1.4",
-    "activitystrea.ms": "^4.0.0",
+    "@socialwebfoundation/ap-components": "^1.4.2",
+    "activitypub-webfinger": "^0.2.1",
+    "activitystrea.ms": "^4.0.1",
     "csv-parse": "^7.0.0",
     "express": "^5.2.1",
     "express-rate-limit": "^8.3.2",
     "humanhash": "^1.0.4",
     "ipaddr.js": "^2.3.0",
-    "nanoid": "^5.1.5",
+    "nanoid": "^6.0.1",
     "node-fetch": "^3.3.2",
     "pino": "^10.1.1",
     "pino-http": "^11.0.0",
-    "rate-limit-redis": "^5.0.0",
+    "rate-limit-redis": "^6.0.1",
     "redis": "^6.0.1",
     "sequelize": "^6.37.7"
   },

package/web/profile.html

@@ -6,7 +6,6 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <meta name="robots" content="noindex,nofollow">
   <title>activitypub.bot</title>
-  <script type="module" src="https://unpkg.com/@socialwebfoundation/ap-components"></script>
   <style>
     body { max-width: 60ch; margin: 0 auto; padding: 1rem; }
   </style>
@@ -19,7 +18,7 @@
   </main>
 
   <script type="module">
-    import { ActivityPubElement } from "https://unpkg.com/@socialwebfoundation/ap-components";
+    import { ActivityPubElement } from "/js/ap-components.min.js";
 
     const cache = new Map();