@geekity/cms 0.3.0 → 0.4.0

package/dist/federation/mount.js

@@ -1,38 +1,114 @@
 import { respondWithObject } from '@fedify/fedify';
 import { federation as federationMiddleware } from '@fedify/hono';
+import { listUsers } from '../admin/accounts.js';
+import { readSiteSettings } from '../admin/settings.js';
+import { authorHref, parseAuthorPath } from '../web/authors.js';
 import { publicDocumentAt } from '../web/documents.js';
-import { prefersActivityStreams } from '../web/negotiate.js';
+import { absoluteUrl, prefersActivityStreams } from '../web/negotiate.js';
 import { requestPath } from '../web/routes.js';
+import { actorAliases, actorId, userActor } from './actor.js';
 import { isFederatedDocument, postArticle } from './article.js';
+import { federationOrigin, handleHref } from './paths.js';
+import { recordWordPressRequest, userByWordPressActorId, wordPressRequestTarget, } from './wordpress.js';
 /**
  * Put Fedify in front of the rest of the app.
  *
  * The middleware only answers the paths Fedify registered — the actor, its
- * collections, the post objects, WebFinger and NodeInfo; everything else falls
- * through to `next()` and reaches the admin and the public site as before.
- * That is why it is mounted first: the public site claims every unmatched path
- * in its not-found handler, so anything registered after it never sees a
- * request.
+ * collections, WebFinger and NodeInfo; everything else falls through to
+ * `next()` and reaches the admin and the public site as before. That is why it
+ * is mounted first: the public site claims every unmatched path in its
+ * not-found handler, so anything registered after it never sees a request.
  *
- * A post permalink asked for as ActivityStreams is answered here too, by
- * {@link activityStreamsDocument}, because Fedify only knows about the URLs it
- * minted and a permalink is not one of them.
+ * A post's object is not one of Fedify's paths at all. decision-13 makes a
+ * post's ActivityStreams id its permalink, so {@link activityStreamsDocument}
+ * is what serves the `Article`: one URL, answering a browser with the page and
+ * a peer with the object. The same handler answers at the `activitypub.id` a
+ * migrated post's file names, and sends a browser from there to the permalink.
  *
  * The dispatchers are handed the stores off the Hono context rather than
  * closing over them, so one federation object could serve more than one CMS
  * and so a dispatcher is never reading a store the request did not come with.
  */
-export function mountFederation(app, federation) {
+export function mountFederation(app, federation, options = {}) {
+    // WebFinger is ours rather than Fedify's, and so has to be registered before
+    // the middleware that would otherwise answer it. Fedify hard-codes the
+    // `self` link to the dispatcher path and computes `aliases` from the
+    // resource, neither of which can be added to, so an actor served under the
+    // id it had elsewhere could never be discovered by it (doc-8). Owning the
+    // route is a dozen lines and gives complete control of `subject`, `aliases`
+    // and `links`.
+    app.get(WEBFINGER_PATH, (c) => {
+        const resource = c.req.query('resource') ?? '';
+        const user = webFingerSubject(c, resource);
+        if (user === undefined)
+            return c.notFound();
+        const context = federation.createContext(c.req.raw, contextData(c));
+        const { baseUrl } = c.var.config;
+        const aliases = actorAliases(context, user, baseUrl);
+        return c.json({
+            subject: acctOf(user.username, c.var.config.baseUrl),
+            aliases: aliases.map((alias) => alias.href),
+            links: [
+                {
+                    rel: 'self',
+                    type: 'application/activity+json',
+                    href: actorId(context, user).href,
+                },
+                {
+                    rel: 'http://webfinger.net/rel/profile-page',
+                    type: 'text/html',
+                    href: absoluteUrl(authorHref(user.username), baseUrl),
+                },
+            ],
+        }, 200, {
+            // The media type RFC 7033 defines, and the header that lets a browser
+            // application read the answer, which is what every other WebFinger
+            // server sends.
+            'content-type': 'application/jrd+json; charset=utf-8',
+            'access-control-allow-origin': '*',
+        });
+    });
+    // `/@ada`, the short URL WordPress publishes beside the author archive and
+    // the one a person is most likely to type. It is an alias rather than a
+    // second identity, so it goes where the identity is.
+    app.get('/:handle{@.+}', (c) => {
+        // The pattern is a regex rather than `/@:username`, because Hono's path
+        // parameters are whole segments: the `@` has to be matched inside one.
+        const handle = c.req.param('handle') ?? '';
+        return c.redirect(authorHref(decodeURIComponent(handle.slice(1))), 301);
+    });
     // `@fedify/hono` types its context as the two properties it actually reads,
     // which is looser than Hono's own; the cast is what puts `c.var` back.
-    app.use('*', federationMiddleware(federation, (context) => {
+    const fedify = federationMiddleware(federation, (context) => {
         const c = context;
         return contextData(c);
-    }));
+    });
+    // The one path where Fedify and the public site both have a claim: a user's
+    // author archive is their actor id (decision-14), and Fedify answers a bare
+    // `Accept: application/json` as an ActivityStreams request while doc-3 gives
+    // that spelling the listing's own JSON. The CMS's rule decides, so a peer
+    // asking for `activity+json` or `ld+json` gets the actor and everything else
+    // — a browser, a reader, a feed tool — reaches the archive it asked for.
+    // Every other Fedify path is left exactly as it was.
+    const federationGate = async (c, next) => {
+        const isArchive = parseAuthorPath(requestPath(c)) !== undefined;
+        if (isArchive && !prefersActivityStreams(c.req.header('accept')))
+            return await next();
+        return await fedify(c, next);
+    };
+    app.use('*', federationGate);
+    // And then WordPress's, if the site is carrying them (TASK-70). It goes
+    // after the canonical middleware, which has already claimed everything it
+    // answers, and before the stored-id middleware below, which claims paths of
+    // its own: a `/wp-json/` path is served by whichever of the three wants it,
+    // and only this one ever does.
+    if (options.wordpress !== undefined) {
+        app.use('*', wordPressGate(options.wordpress));
+    }
     // Named, and typed as a middleware, so the Hono context arrives with its
     // path parameters resolved rather than as `any`.
     const activityStreams = async (c, next) => {
-        const response = await activityStreamsDocument(c, federation);
+        const response = (await activityStreamsActor(c, federation)) ?? (await activityStreamsDocument(c, federation));
         if (response !== undefined)
             return response;
         await next();
@@ -40,30 +116,194 @@ export function mountFederation(app, federation) {
     app.use('*', activityStreams);
 }
 /**
- * The `Article` for the post at this URL, when the request asked for
- * ActivityStreams and the URL is a published post's permalink.
+ * The middleware that answers the WordPress ActivityPub plugin's paths, when
+ * the site is carrying them.
+ *
+ * The setting is read per request rather than at boot, which is the whole of
+ * AC #4: turning the switch off in the settings screen takes the paths away on
+ * the very next request, and turning it on puts them back, with nothing
+ * restarted. A request for one of those paths with the switch off falls
+ * through to the public site, which answers it as the 404 it is.
+ *
+ * The instant is recorded before Fedify is asked, because the record is of
+ * what the site was *asked for*: a peer still holding the old inbox URL is
+ * news whether or not the number in it still names anybody.
+ */
+function wordPressGate(build) {
+    let federation;
+    let middleware;
+    return async (c, next) => {
+        const target = wordPressRequestTarget(requestPath(c));
+        if (target === undefined)
+            return await next();
+        if (!readSiteSettings(c.var.config.contentDir).wordpressActivityPub)
+            return await next();
+        const user = target.wordpressActorId === undefined
+            ? undefined
+            : userByWordPressActorId(c.var.config.dataDir, target.wordpressActorId);
+        await recordWordPressRequest({
+            dataDir: c.var.config.dataDir,
+            target,
+            username: user?.username,
+            at: c.var.config.now(),
+        });
+        if (middleware === undefined) {
+            federation = build();
+            middleware = federationMiddleware(federation, (context) => contextData(context));
+        }
+        return await middleware(c, next);
+    };
+}
+/**
+ * The person this request is about, when it asks at the id they were published
+ * under somewhere else: the `Person` for a peer, a redirect to the author
+ * archive for a browser, and `undefined` for everything else.
+ *
+ * The twin of {@link activityStreamsDocument}, and for the same reason
+ * (decision-14): a stored actor id is identity. A follower's server keys the
+ * account by the URL it first saw, so that URL has to keep answering with this
+ * person's actor for as long as the account exists, or every follow out there
+ * points at nothing.
+ *
+ * Fedify cannot serve it — its router matches paths, and a stored id is
+ * commonly a query string on the site root (doc-8) — so it is served here,
+ * ahead of the public site, exactly as a post's stored `activitypub.id` is.
+ */
+async function activityStreamsActor(c, federation) {
+    const user = storedActorAt(c);
+    if (user === undefined)
+        return undefined;
+    if (!prefersActivityStreams(c.req.header('accept'))) {
+        return c.redirect(authorHref(user.username), 301);
+    }
+    const context = federation.createContext(c.req.raw, contextData(c));
+    const actor = await userActor(context, user, { baseUrl: c.var.config.baseUrl });
+    return await respondWithObject(actor, { contextLoader: context.contextLoader });
+}
+/**
+ * The user whose stored actor id is the URL this request asks for, or
+ * `undefined`.
+ *
+ * Built the way {@link storedObjectAt} builds a post's candidate — the
+ * request's path and query on the site's base URL, rather than `request.url`,
+ * which behind a proxy is the internal address — and matched on the whole URL,
+ * query string and all, which is what decision-14 asks for.
+ *
+ * A user whose stored id happens to be their author URL is not one of these:
+ * the actor dispatcher has already answered for that URL, and answering again
+ * here would only redirect a browser to where it already is.
+ */
+function storedActorAt(c) {
+    const { search } = new URL(c.req.url);
+    const candidate = `${absoluteUrl(requestPath(c), c.var.config.baseUrl)}${search}`;
+    const user = listUsers(c.var.config.dataDir).find((entry) => entry.actorId === candidate);
+    if (user === undefined)
+        return undefined;
+    if (absoluteUrl(authorHref(user.username), c.var.config.baseUrl) === candidate)
+        return undefined;
+    return user;
+}
+/**
+ * The post this request is about, when it is about one: the `Article` for a
+ * peer, a redirect to the permalink for a browser at a stored id, and
+ * `undefined` for everything else.
  *
- * doc-4 wants a peer that dereferences a link somebody shared — which is the
- * permalink, not the object id — to land on the object rather than on a page
- * it cannot read. The article is built through the same
- * {@link postArticle} the object dispatcher uses, off a context Fedify makes
- * for this request, so the two answers cannot drift apart; its `id` is the
- * object URL either way, so a peer stores one object however it arrived.
+ * Two URLs can name a post. Its permalink always does — that is the whole of
+ * decision-13, and a peer that dereferences a link somebody shared lands on
+ * the object rather than on a page it cannot read. The other is the
+ * `activitypub.id` a migrated post's file carries: the name its followers,
+ * its replies and its RSS subscribers already hold, which has to keep
+ * answering or every copy out there points at nothing. A browser that follows
+ * one of those old links is sent on to the permalink, because that is the URL
+ * a person should end up at.
  *
- * Anything else — a browser, a `.md` or `.json` request, a page, a listing —
- * gets `undefined` and falls through to the public site untouched.
+ * Anything else — a browser at a permalink, a `.md` or `.json` request, a
+ * page, a listing — gets `undefined` and falls through to the public site
+ * untouched.
  */
 async function activityStreamsDocument(c, federation) {
-    if (!prefersActivityStreams(c.req.header('accept')))
+    const wantsObject = prefersActivityStreams(c.req.header('accept'));
+    if (wantsObject) {
+        const atPermalink = publicDocumentAt(c.var.store, requestPath(c));
+        if (atPermalink !== undefined && isFederatedDocument(atPermalink, c.var.store.now())) {
+            return await article(c, federation, atPermalink);
+        }
+    }
+    const stored = storedObjectAt(c);
+    if (stored === undefined)
+        return undefined;
+    if (!wantsObject)
+        return c.redirect(stored.permalink, 301);
+    return await article(c, federation, stored);
+}
+/**
+ * The post whose `activitypub.id` is the URL this request asks for, or
+ * `undefined`.
+ *
+ * The candidate is built the way the ids themselves are — the request's path
+ * and query on the site's base URL — rather than taken from `request.url`,
+ * which behind a proxy is the internal address. A post whose stored id is its
+ * permalink is not one of these: the permalink lookup has already answered for
+ * it, and answering again here would only invite a redirect to itself.
+ */
+function storedObjectAt(c) {
+    const { search } = new URL(c.req.url);
+    const candidate = `${absoluteUrl(requestPath(c), c.var.config.baseUrl)}${search}`;
+    const document = c.var.store.getByStoredObjectId(candidate);
+    if (document === undefined || document.type !== 'post')
         return undefined;
-    const document = publicDocumentAt(c.var.store, requestPath(c));
-    if (document === undefined || !isFederatedDocument(document))
+    if (absoluteUrl(document.permalink, c.var.config.baseUrl) === candidate)
         return undefined;
+    return document;
+}
+/**
+ * One post as the ActivityStreams response a peer asked for.
+ *
+ * The article is built through the same {@link postArticle} the outbox uses,
+ * off a context Fedify makes for this request, so the object a peer fetches
+ * and the one it is delivered cannot drift apart.
+ */
+async function article(c, federation, document) {
     const context = federation.createContext(c.req.raw, contextData(c));
     return await respondWithObject(postArticle(context, document), {
         contextLoader: context.contextLoader,
     });
 }
+/** Where WebFinger lives, which is defined on the host rather than under a site. */
+export const WEBFINGER_PATH = '/.well-known/webfinger';
+/** `acct:{username}@{host}`, the handle a person types into a search box. */
+export function acctOf(username, baseUrl) {
+    return `acct:${username}@${federationOrigin(baseUrl === '' ? 'http://localhost' : baseUrl).handleHost}`;
+}
+/**
+ * The user a WebFinger `resource` asks about, or `undefined` for one this site
+ * answers for nobody.
+ *
+ * Every spelling of a person resolves, and they are the ones decision-14 lists
+ * as their aliases: the `acct:` handle, the author archive, `/@{username}` and
+ * — for somebody who was published elsewhere first — the id they were
+ * published under. Matching every one of them is what lets a peer that holds
+ * any one URL for this person find the others, which is the whole job of
+ * WebFinger, and it is how a server holding only `?author=2` discovers that
+ * the account it follows is still here.
+ */
+export function webFingerSubject(c, resource) {
+    const wanted = resource.trim();
+    if (wanted === '')
+        return undefined;
+    const { baseUrl } = c.var.config;
+    return listUsers(c.var.config.dataDir).find((user) => {
+        if (wanted === acctOf(user.username, baseUrl))
+            return true;
+        // A bare `user@host` is not what RFC 7033 asks for, but it is what enough
+        // clients send that refusing it would only look like a missing account.
+        if (wanted === acctOf(user.username, baseUrl).slice('acct:'.length))
+            return true;
+        return (wanted === absoluteUrl(authorHref(user.username), baseUrl) ||
+            wanted === absoluteUrl(handleHref(user.username), baseUrl) ||
+            wanted === user.actorId);
+    });
+}
 /** What the dispatchers are handed, off the Hono context. */
 function contextData(c) {
     return { admin: c.var.admin, store: c.var.store, config: c.var.config };

package/dist/federation/mount.js.map

@@ -1 +1 @@
-{"version":3,"file":"mount.js","sourceRoot":"","sources":["../../src/federation/mount.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAIlE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAAC,GAAqB,EAAE,UAA0B;IAC/E,4EAA4E;IAC5E,uEAAuE;IACvE,GAAG,CAAC,GAAG,CACL,GAAG,EACH,oBAAoB,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;QAC3C,MAAM,CAAC,GAAG,OAAyC,CAAC;QACpD,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC,CACH,CAAC;IAEF,yEAAyE;IACzE,iDAAiD;IACjD,MAAM,eAAe,GAAkC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,uBAAuB,CACpC,CAAsB,EACtB,UAA0B;IAE1B,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAEtE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAE/E,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,MAAM,iBAAiB,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;QAC7D,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,SAAS,WAAW,CAAC,CAAsB;IACzC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"mount.js","sourceRoot":"","sources":["../../src/federation/mount.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGlE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGxD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAqB,EACrB,UAA0B,EAC1B,OAAO,GAA2B,EAAE;IAEpC,6EAA6E;IAC7E,uEAAuE;IACvE,qEAAqE;IACrE,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,eAAe;IACf,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAE5C,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACjC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAErD,OAAO,CAAC,CAAC,IAAI,CACX;YACE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;YACpD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YAC3C,KAAK,EAAE;gBACL;oBACE,GAAG,EAAE,MAAM;oBACX,IAAI,EAAE,2BAA2B;oBACjC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI;iBAClC;gBACD;oBACE,GAAG,EAAE,uCAAuC;oBAC5C,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;iBACtD;aACF;SACF,EACD,GAAG,EACH;YACE,sEAAsE;YACtE,mEAAmE;YACnE,gBAAgB;YAChB,cAAc,EAAE,qCAAqC;YACrD,6BAA6B,EAAE,GAAG;SACnC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,wEAAwE;IACxE,qDAAqD;IACrD,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7B,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3C,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1D,MAAM,CAAC,GAAG,OAAyC,CAAC;QACpD,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAkC,CAAC;IAEpC,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,0EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,qDAAqD;IACrD,MAAM,cAAc,GAAkC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACtE,MAAM,SAAS,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;QAChE,IAAI,SAAS,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO,MAAM,IAAI,EAAE,CAAC;QACtF,OAAO,MAAM,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAE7B,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,+BAA+B;IAC/B,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,yEAAyE;IACzE,iDAAiD;IACjD,MAAM,eAAe,GAAkC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvE,MAAM,QAAQ,GACZ,CAAC,MAAM,oBAAoB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,uBAAuB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QAChG,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;AAChC,CAAC;AAgBD;;;;;;;;;;;;;GAaG;AACH,SAAS,aAAa,CAAC,KAA2B;IAChD,IAAI,UAAsC,CAAC;IAC3C,IAAI,UAAqD,CAAC;IAE1D,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB;YAAE,OAAO,MAAM,IAAI,EAAE,CAAC;QAEzF,MAAM,IAAI,GACR,MAAM,CAAC,gBAAgB,KAAK,SAAS;YACnC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC5E,MAAM,sBAAsB,CAAC;YAC3B,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO;YAC7B,MAAM;YACN,QAAQ,EAAE,IAAI,EAAE,QAAQ;YACxB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;SACvB,CAAC,CAAC;QAEH,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,UAAU,GAAG,KAAK,EAAE,CAAC;YACrB,UAAU,GAAG,oBAAoB,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CACxD,WAAW,CAAC,OAAyC,CAAC,CACtB,CAAC;QACrC,CAAC;QACD,OAAO,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,oBAAoB,CACjC,CAAsB,EACtB,UAA0B;IAE1B,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,OAAO,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,aAAa,CAAC,CAAsB;IAC3C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;IAElF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IAC1F,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACjG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,uBAAuB,CACpC,CAAsB,EACtB,UAA0B;IAE1B,MAAM,WAAW,GAAG,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEnE,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,WAAW,KAAK,SAAS,IAAI,mBAAmB,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACrF,OAAO,MAAM,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,MAAM,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,CAAsB;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;IAElF,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACzE,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1F,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,OAAO,CACpB,CAAsB,EACtB,UAA0B,EAC1B,QAAkB;IAElB,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,MAAM,iBAAiB,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;QAC7D,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEvD,6EAA6E;AAC7E,MAAM,UAAU,MAAM,CAAC,QAAgB,EAAE,OAAe;IACtD,OAAO,QAAQ,QAAQ,IAAI,gBAAgB,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;AAC1G,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAsB,EAAE,QAAgB;IACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAEpC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IACjC,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACnD,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACjF,OAAO,CACL,MAAM,KAAK,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;YAC1D,MAAM,KAAK,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;YAC1D,MAAM,KAAK,IAAI,CAAC,OAAO,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,SAAS,WAAW,CAAC,CAAsB;IACzC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;AAC1E,CAAC"}

package/dist/federation/paths.d.ts

@@ -1,48 +1,36 @@
 import type { FederationOrigin } from '@fedify/fedify';
 /**
- * Where the ActivityPub endpoints live, under one prefix so they never
- * collide with a permalink. doc-4 puts post objects at `/ap/posts/{slug}`;
- * the actor is its sibling.
- */
-export declare const FEDERATION_PREFIX = "/ap";
-/**
- * The actor's path template.
+ * Where a user's ActivityPub endpoints live: at their author URL, and under it.
+ *
+ * decision-14 makes every user an actor whose id is their author archive,
+ * `{baseUrl}/author/{username}/`, so there is no prefix of its own any more —
+ * the actor is a page in a browser and an actor to a peer, exactly as a post
+ * is its permalink to both (decision-13). The collections are the archive's
+ * children, with the trailing slashes every URL on this site has, and Fedify
+ * builds each id from these templates so nothing has to guess the form.
  *
- * The identifier is a template variable because Fedify requires one, but only
- * the site actor's sentinel identifier ever answers: a site is one actor.
- * Because that identifier is a constant rather than the handle, the actor's id
- * is `{baseUrl}/ap/actor` however often the handle is renamed.
+ * A GET of `/author/ada` without the slash is a Fedify 404 that falls through
+ * to the public site's own canonical redirect, which is where a browser that
+ * followed an actor id without its slash lands (doc-8).
  */
-export declare const ACTOR_PATH: "/ap/{identifier}";
+export declare const ACTOR_PATH: "/author/{identifier}/";
 /** The actor's inbox, its outbox and its two follow collections. */
-export declare const INBOX_PATH: "/ap/{identifier}/inbox";
-export declare const OUTBOX_PATH: "/ap/{identifier}/outbox";
-export declare const FOLLOWERS_PATH: "/ap/{identifier}/followers";
-export declare const FOLLOWING_PATH: "/ap/{identifier}/following";
-/** The instance-wide inbox, which a peer may use to deliver to every actor at once. */
-export declare const SHARED_INBOX_PATH: "/ap/shared-inbox";
+export declare const INBOX_PATH: "/author/{identifier}/inbox/";
+export declare const OUTBOX_PATH: "/author/{identifier}/outbox/";
+export declare const FOLLOWERS_PATH: "/author/{identifier}/followers/";
+export declare const FOLLOWING_PATH: "/author/{identifier}/following/";
 /**
- * A post's object path template.
+ * The instance-wide inbox, which a peer may use to deliver to every actor at
+ * once.
  *
- * The slug, not the permalink, is what names the object, exactly as doc-4
- * asks: a post moved from `/2026/09/hello/` to `/notes/hello/` keeps its
- * ActivityStreams id, so the followers who already have the object are not
- * handed a second one.
+ * A reserved top-level path (decision-14), which is why `inbox` is one of the
+ * two names `web/authors.ts` keeps a user from taking.
  */
-export declare const POST_OBJECT_PATH: "/ap/posts/{slug}";
+export declare const SHARED_INBOX_PATH: "/inbox/";
+/** Where a user's mention-style short URL lives: `/@ada`, WordPress's alias. */
+export declare function handleHref(username: string): string;
 /** Where the NodeInfo 2.1 document lives; `/.well-known/nodeinfo` points at it. */
 export declare const NODEINFO_PATH = "/nodeinfo/2.1";
-/** The path a post's ActivityStreams object is served at. */
-export declare function postObjectPath(slug: string): string;
-/**
- * A post's ActivityStreams id, as an absolute URL.
- *
- * It is built on the {@link federationOrigin} rather than on the whole base
- * URL, because that is where Fedify serves the object from: a site in a
- * subdirectory keeps its pages under that directory, but its federation
- * endpoints — this one included — are host-rooted.
- */
-export declare function postObjectId(slug: string, baseUrl: string): string;
 /**
  * The id of the `Create` that announced an object.
  *

package/dist/federation/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/federation/paths.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAEvC;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,oBAA+C,CAAC;AAEvE,oEAAoE;AACpE,eAAO,MAAM,UAAU,0BAAiC,CAAC;AACzD,eAAO,MAAM,WAAW,2BAAkC,CAAC;AAC3D,eAAO,MAAM,cAAc,8BAAqC,CAAC;AACjE,eAAO,MAAM,cAAc,8BAAqC,CAAC;AACjE,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,oBAA+C,CAAC;AAE9E;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,oBAA+C,CAAC;AAE7E,mFAAmF;AACnF,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,GAAG,GAAG,MAAM,GAAG,GAAG,CAE5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,GAAG,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAE9E;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,GAAG,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAE9E;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAGlE"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/federation/paths.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIvD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,UAAU,yBAA2C,CAAC;AAEnE,oEAAoE;AACpE,eAAO,MAAM,UAAU,+BAAiC,CAAC;AACzD,eAAO,MAAM,WAAW,gCAAkC,CAAC;AAC3D,eAAO,MAAM,cAAc,mCAAqC,CAAC;AACjE,eAAO,MAAM,cAAc,mCAAqC,CAAC;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,WAA6B,CAAC;AAE5D,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,mFAAmF;AACnF,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,GAAG,GAAG,MAAM,GAAG,GAAG,CAE5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,GAAG,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAE9E;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,GAAG,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAE9E;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAGlE"}

package/dist/federation/paths.js

@@ -1,51 +1,38 @@
+import { AUTHOR_BASE, INBOX_BASE } from '../web/authors.js';
 /**
- * Where the ActivityPub endpoints live, under one prefix so they never
- * collide with a permalink. doc-4 puts post objects at `/ap/posts/{slug}`;
- * the actor is its sibling.
- */
-export const FEDERATION_PREFIX = '/ap';
-/**
- * The actor's path template.
+ * Where a user's ActivityPub endpoints live: at their author URL, and under it.
+ *
+ * decision-14 makes every user an actor whose id is their author archive,
+ * `{baseUrl}/author/{username}/`, so there is no prefix of its own any more —
+ * the actor is a page in a browser and an actor to a peer, exactly as a post
+ * is its permalink to both (decision-13). The collections are the archive's
+ * children, with the trailing slashes every URL on this site has, and Fedify
+ * builds each id from these templates so nothing has to guess the form.
  *
- * The identifier is a template variable because Fedify requires one, but only
- * the site actor's sentinel identifier ever answers: a site is one actor.
- * Because that identifier is a constant rather than the handle, the actor's id
- * is `{baseUrl}/ap/actor` however often the handle is renamed.
+ * A GET of `/author/ada` without the slash is a Fedify 404 that falls through
+ * to the public site's own canonical redirect, which is where a browser that
+ * followed an actor id without its slash lands (doc-8).
  */
-export const ACTOR_PATH = `${FEDERATION_PREFIX}/{identifier}`;
+export const ACTOR_PATH = `/${AUTHOR_BASE}/{identifier}/`;
 /** The actor's inbox, its outbox and its two follow collections. */
-export const INBOX_PATH = `${ACTOR_PATH}/inbox`;
-export const OUTBOX_PATH = `${ACTOR_PATH}/outbox`;
-export const FOLLOWERS_PATH = `${ACTOR_PATH}/followers`;
-export const FOLLOWING_PATH = `${ACTOR_PATH}/following`;
-/** The instance-wide inbox, which a peer may use to deliver to every actor at once. */
-export const SHARED_INBOX_PATH = `${FEDERATION_PREFIX}/shared-inbox`;
+export const INBOX_PATH = `${ACTOR_PATH}inbox/`;
+export const OUTBOX_PATH = `${ACTOR_PATH}outbox/`;
+export const FOLLOWERS_PATH = `${ACTOR_PATH}followers/`;
+export const FOLLOWING_PATH = `${ACTOR_PATH}following/`;
 /**
- * A post's object path template.
+ * The instance-wide inbox, which a peer may use to deliver to every actor at
+ * once.
  *
- * The slug, not the permalink, is what names the object, exactly as doc-4
- * asks: a post moved from `/2026/09/hello/` to `/notes/hello/` keeps its
- * ActivityStreams id, so the followers who already have the object are not
- * handed a second one.
+ * A reserved top-level path (decision-14), which is why `inbox` is one of the
+ * two names `web/authors.ts` keeps a user from taking.
  */
-export const POST_OBJECT_PATH = `${FEDERATION_PREFIX}/posts/{slug}`;
+export const SHARED_INBOX_PATH = `/${INBOX_BASE}/`;
+/** Where a user's mention-style short URL lives: `/@ada`, WordPress's alias. */
+export function handleHref(username) {
+    return `/@${encodeURIComponent(username)}`;
+}
 /** Where the NodeInfo 2.1 document lives; `/.well-known/nodeinfo` points at it. */
 export const NODEINFO_PATH = '/nodeinfo/2.1';
-/** The path a post's ActivityStreams object is served at. */
-export function postObjectPath(slug) {
-    return `${FEDERATION_PREFIX}/posts/${encodeURIComponent(slug)}`;
-}
-/**
- * A post's ActivityStreams id, as an absolute URL.
- *
- * It is built on the {@link federationOrigin} rather than on the whole base
- * URL, because that is where Fedify serves the object from: a site in a
- * subdirectory keeps its pages under that directory, but its federation
- * endpoints — this one included — are host-rooted.
- */
-export function postObjectId(slug, baseUrl) {
-    return new URL(postObjectPath(slug), federationOrigin(baseUrl).webOrigin).href;
-}
 /**
  * The id of the `Create` that announced an object.
  *

package/dist/federation/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/federation/paths.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,iBAAiB,eAAwB,CAAC;AAEvE,oEAAoE;AACpE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,UAAU,QAAiB,CAAC;AACzD,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,UAAU,SAAkB,CAAC;AAC3D,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,UAAU,YAAqB,CAAC;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,UAAU,YAAqB,CAAC;AACjE,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,iBAAiB,eAAwB,CAAC;AAE9E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,iBAAiB,eAAwB,CAAC;AAE7E,mFAAmF;AACnF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAE7C,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,GAAG,iBAAiB,UAAU,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe;IACxD,OAAO,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB;IACrD,OAAO,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB,EAAE,QAAgB;IACvE,OAAO,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,WAAW,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB,EAAE,QAAgB;IACvE,OAAO,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,WAAW,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AACzD,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/federation/paths.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE5D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,WAAW,gBAAyB,CAAC;AAEnE,oEAAoE;AACpE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,UAAU,QAAiB,CAAC;AACzD,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,UAAU,SAAkB,CAAC;AAC3D,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,UAAU,YAAqB,CAAC;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,UAAU,YAAqB,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,UAAU,GAAY,CAAC;AAE5D,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,KAAK,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB;IACrD,OAAO,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB,EAAE,QAAgB;IACvE,OAAO,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,WAAW,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB,EAAE,QAAgB;IACvE,OAAO,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,WAAW,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AACzD,CAAC"}