@oxy.so/federation 2.2.1 → 2.3.0

package/dist/types/httpSignature.d.ts

@@ -16,7 +16,7 @@
  *    Mention runs behind a CF-proxied apex that rewrites the origin `Host`, so it
  *    passes `true`; a directly-exposed origin leaves it `false`.
  *
- * Lives in the isomorphic `.` entry (no Express / Mongoose): it depends only on
+ * Lives in the isomorphic `.` entry (no Express / database driver): it depends only on
  * the runtime `crypto` builtin (Node / Bun) and is never invoked from browser /
  * React-Native bundles — RN consumers import only the connector TYPES, which are
  * erased at compile time.

package/dist/types/index.d.ts

@@ -8,8 +8,8 @@
  * connector produces, the local-event union connectors deliver outbound, and
  * the connector interface itself.
  *
- * IMPORTANT: this entry is intentionally free of Mongoose / Express / React
- * Native so it can be imported from any Oxy app backend (and, in later phases,
+ * IMPORTANT: this entry is intentionally free of database drivers / Express /
+ * React Native so it can be imported from any Oxy app backend (and, in later phases,
  * share the pure HTTP-signature + actor-object surface with browser/isomorphic
  * callers). The runnable Express/Node engine — signed fetch, delivery transport,
  * webfinger/actor/inbox routers, remote-actor resolution — lives under the
@@ -30,7 +30,7 @@ export { signRequest, verifyHttpSignature, HTTP_SIGNATURE_ALGORITHM, DEFAULT_SIG
  * Domain-parameterized ActivityPub URL builders — each app instantiates them once
  * with its own `FEDERATION_DOMAIN` so every actor stays `@user@its-own-domain`.
  */
-export { createUrlBuilders, normalizeActorUsername, INSTANCE_ACTOR_USERNAME, type UrlBuilders } from './urls';
+export { createUrlBuilders, normalizeActorUsername, INSTANCE_ACTOR_USERNAME, type UrlBuilders, } from './urls';
 /**
  * Network identity: the MECHANISM for re-labelling an account republished by a
  * bridge onto the network it actually came from, plus the network vocabulary and

package/dist/types/node/delivery.d.ts

@@ -79,9 +79,8 @@ export interface DeliveryQueueJob {
  * The durable-delivery fallback (written when BullMQ is unavailable).
  *
  * App-supplied, like every other store in this package: the engine never names
- * a database. Mention backs it with Postgres; the method names below are the
- * ones its original Mongoose collection exposed and are kept only so the
- * adapter shape stays stable for consumers.
+ * a database. Mention backs it with Postgres; the method names below are kept
+ * stable so the adapter shape stays stable for consumers.
  */
 export interface DeliveryFallbackQueue {
     /** Insert one fallback delivery row (`queueDelivery`). */

package/dist/types/node/index.d.ts

@@ -17,6 +17,11 @@
  * actor + inbox + follow-graph Express routers.
  */
 export { createSignedFetch, type SignedFetch, type CreateSignedFetchConfig, type SingleHopFetch, type SingleHopFetchInit, type SignedFetchLogger, } from './signedFetch';
+/**
+ * X's `t.co` wrapper unwrapped into the link the author posted, over the same
+ * injected single-hop transport — for bridged X bios and posts.
+ */
+export { createTcoLinkExpander, type TcoLinkExpander, type TcoLinkCache, type CreateTcoLinkExpanderConfig, } from './tcoLinks';
 /**
  * The actor↔Oxy-user identity bridge — the default implementation of the
  * `PUT /users/resolve` + actor-gone archive/delete seam over an injected

package/dist/types/node/tcoLinks.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Expanding X's `t.co` link wrapper back into the link the author posted.
+ *
+ * X rewrites EVERY link in a post or bio into `https://t.co/<id>`, and a bridge
+ * that mirrors an X account (bird.makeup, mastox) republishes that text as it
+ * is: the actor `summary` and the Note `content` carry only the wrapper. The
+ * author never wrote `t.co`; it is X's click tracker standing in for their link,
+ * and an X API client never shows it because it reads the expansion beside it.
+ * The bridges drop that expansion, so the only place left to recover it is the
+ * wrapper's own redirect.
+ *
+ * Only `t.co` is unwrapped, and only ONE hop. A `bit.ly` the author chose is
+ * their link and stays; so does wherever their link redirects next. What is
+ * replaced is exactly X's wrapper, by exactly the URL it names.
+ *
+ * The transport is injected — the same SSRF-safe, IP-pinned single-hop fetch
+ * {@link createSignedFetch} takes — so each backend keeps its own network
+ * contract. A link that does not resolve (timeout, 404, a malformed or
+ * self-referencing `Location`) is left as `t.co`: still a working link, never a
+ * broken one.
+ */
+import type { SingleHopFetch } from './signedFetch';
+/**
+ * A store of resolved wrappers, keyed by the `t.co` id. A wrapper never changes
+ * what it points to, so an entry never goes stale. Failures are not cached.
+ */
+export interface TcoLinkCache {
+    get(id: string): Promise<string | null | undefined>;
+    set(id: string, target: string): Promise<void>;
+}
+/** Adapters a {@link TcoLinkExpander} is built from. */
+export interface CreateTcoLinkExpanderConfig {
+    /** SSRF-safe single-hop transport (does NOT follow redirects). */
+    fetchSingleHop: SingleHopFetch;
+    /** User-Agent presented to t.co. A browser UA gets an HTML page instead of the 301. */
+    userAgent: string;
+    cache?: TcoLinkCache;
+}
+/** Replace every `t.co` link in `text` with the URL it redirects to. */
+export type TcoLinkExpander = (text: string) => Promise<string>;
+export declare function createTcoLinkExpander(config: CreateTcoLinkExpanderConfig): TcoLinkExpander;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/federation",
-  "version": "2.2.1",
+  "version": "2.3.0",
   "description": "Oxy Federation — the app-agnostic ActivityPub identity + follow engine substrate: the network-connector contract, normalized cross-network DTOs, HTTP signatures, actor resolution, the outbound delivery transport + follow lifecycle, the inbound dispatcher, and the webfinger/actor/inbox Express routers. Domain-parameterized so every Oxy app backend federates under its own domain.",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
@@ -93,7 +93,7 @@
     }
   },
   "dependencies": {
-    "@oxy.so/contracts": "^1.0.0 || ^2.0.0 || ^3.0.0 || ^4.0.0",
+    "@oxy.so/contracts": "^1.0.0 || ^2.0.0 || ^3.0.0 || ^4.0.0 || 4.11.0-oxy-one.0",
     "@oxy.so/core": "^1.0.0 || ^2.0.0 || ^3.0.0 || ^4.0.0"
   },
   "peerDependencies": {
@@ -105,7 +105,6 @@
     }
   },
   "devDependencies": {
-    "@biomejs/biome": "^1.9.4",
     "@types/express": "^4.17.25",
     "@types/jest": "^30.0.0",
     "@types/node": "^22.20.1",

package/src/__tests__/actorCollectionCounts.test.ts

@@ -114,26 +114,32 @@ describe('fetchRemoteActor — remote collection counts', () => {
     expect(upserts[0]).toMatchObject({ followersCount: 1234, followingCount: 0, postsCount: 56 });
   });
 
-  it.each([401, 403, 404, 410])('records a collection that answers %i as unknown (null), not 0', async (status) => {
-    const { upserts } = await resolveWith({
-      followers: new Response(null, { status }),
-      following: collection(3),
-    });
-
-    expect(upserts[0]?.followersCount).toBeNull();
-    expect(upserts[0]?.followingCount).toBe(3);
-  });
+  it.each([401, 403, 404, 410])(
+    'records a collection that answers %i as unknown (null), not 0',
+    async (status) => {
+      const { upserts } = await resolveWith({
+        followers: new Response(null, { status }),
+        following: collection(3),
+      });
+
+      expect(upserts[0]?.followersCount).toBeNull();
+      expect(upserts[0]?.followingCount).toBe(3);
+    },
+  );
 
   it.each([
     ['missing', undefined],
     ['a string', '1234'],
     ['negative', -1],
     ['fractional', 1.5],
-  ])('records a collection whose totalItems is %s as unknown (null)', async (_label, totalItems) => {
-    const { upserts } = await resolveWith({ followers: collection(totalItems) });
+  ])(
+    'records a collection whose totalItems is %s as unknown (null)',
+    async (_label, totalItems) => {
+      const { upserts } = await resolveWith({ followers: collection(totalItems) });
 
-    expect(upserts[0]?.followersCount).toBeNull();
-  });
+      expect(upserts[0]?.followersCount).toBeNull();
+    },
+  );
 
   it('records an actor that advertises no collection as unknown (null)', async () => {
     const { upserts } = await resolveWith({
@@ -150,12 +156,15 @@ describe('fetchRemoteActor — remote collection counts', () => {
     ['a 429', () => Promise.resolve(new Response(null, { status: 429 }))],
     ['malformed JSON', () => Promise.resolve(new Response('{"totalItems": 12'))],
     ['an empty body', () => Promise.resolve(new Response(''))],
-  ] as const)('OMITS a count whose fetch failed with %s, so a known value is kept', async (_label, followers) => {
-    const { upserts } = await resolveWith({ followers, following: collection(9) });
+  ] as const)(
+    'OMITS a count whose fetch failed with %s, so a known value is kept',
+    async (_label, followers) => {
+      const { upserts } = await resolveWith({ followers, following: collection(9) });
 
-    expect(upserts[0]).not.toHaveProperty('followersCount');
-    expect(upserts[0]?.followingCount).toBe(9);
-  });
+      expect(upserts[0]).not.toHaveProperty('followersCount');
+      expect(upserts[0]?.followingCount).toBe(9);
+    },
+  );
 
   it('never hands the identity bridge a zero it did not read', async () => {
     const { bridged } = await resolveWith({

package/src/__tests__/actorObject.test.ts

@@ -23,8 +23,10 @@ import {
 
 /** A media resolver that returns fixed absolute CDN URLs (avatar png, banner jpg). */
 const media: ActorMediaResolver = {
-  resolveAvatar: (ref) => (ref === 'avatar-file-id' ? 'https://cloud.oxy.so/media/nate-avatar.png' : undefined),
-  resolveBanner: (ref) => (ref === 'banner-file-id' ? 'https://cloud.oxy.so/media/nate-banner.jpg' : undefined),
+  resolveAvatar: (ref) =>
+    ref === 'avatar-file-id' ? 'https://cloud.oxy.so/media/nate-avatar.png' : undefined,
+  resolveBanner: (ref) =>
+    ref === 'banner-file-id' ? 'https://cloud.oxy.so/media/nate-banner.jpg' : undefined,
 };
 
 const buildActor = createLocalActorBuilder({
@@ -68,8 +70,16 @@ const EXPECTED_ACTOR: Record<string, unknown> = {
   endpoints: { sharedInbox: 'https://mention.earth/ap/inbox' },
   discoverable: true,
   manuallyApprovesFollowers: false,
-  icon: { type: 'Image', url: 'https://cloud.oxy.so/media/nate-avatar.png', mediaType: 'image/png' },
-  image: { type: 'Image', url: 'https://cloud.oxy.so/media/nate-banner.jpg', mediaType: 'image/jpeg' },
+  icon: {
+    type: 'Image',
+    url: 'https://cloud.oxy.so/media/nate-avatar.png',
+    mediaType: 'image/png',
+  },
+  image: {
+    type: 'Image',
+    url: 'https://cloud.oxy.so/media/nate-banner.jpg',
+    mediaType: 'image/jpeg',
+  },
   publicKey: {
     id: 'https://mention.earth/ap/users/nate#main-key',
     owner: 'https://mention.earth/ap/users/nate',
@@ -88,7 +98,9 @@ describe('createLocalActorBuilder (golden actor vector)', () => {
 
   it('serves the byte-identical document once wrapped in the route @context', () => {
     const served = { '@context': AP_CONTEXT, ...buildActor(PARAMS) };
-    expect(JSON.stringify(served)).toBe(JSON.stringify({ '@context': AP_CONTEXT, ...EXPECTED_ACTOR }));
+    expect(JSON.stringify(served)).toBe(
+      JSON.stringify({ '@context': AP_CONTEXT, ...EXPECTED_ACTOR }),
+    );
     // publicKey.id host MUST equal the actor id host (Mastodon rejects a cross-domain key).
     const key = served.publicKey as { id: string };
     expect(new URL(key.id).host).toBe(new URL(served.id as string).host);
@@ -263,7 +275,13 @@ describe('createLocalActorBuilder — alsoKnownAs', () => {
   it('emits the aliases after publicKey, de-duplicated and https-only', () => {
     const actor = buildActor({
       ...PARAMS,
-      alsoKnownAs: [alias, 'http://insecure.example/users/nate', 'not a url', alias, 'https://pleroma.example/users/n'],
+      alsoKnownAs: [
+        alias,
+        'http://insecure.example/users/nate',
+        'not a url',
+        alias,
+        'https://pleroma.example/users/n',
+      ],
     });
     expect(actor.alsoKnownAs).toEqual([alias, 'https://pleroma.example/users/n']);
     const keys = Object.keys(actor);
@@ -271,7 +289,9 @@ describe('createLocalActorBuilder — alsoKnownAs', () => {
   });
 
   it('emits nothing when every alias is unpublishable', () => {
-    expect(buildActor({ ...PARAMS, alsoKnownAs: ['http://x.example/u'] })).not.toHaveProperty('alsoKnownAs');
+    expect(buildActor({ ...PARAMS, alsoKnownAs: ['http://x.example/u'] })).not.toHaveProperty(
+      'alsoKnownAs',
+    );
   });
 });
 

package/src/__tests__/actorResolver.test.ts

@@ -1,5 +1,9 @@
 import { createDomainPolicy } from '../apUri';
-import { createActorResolver, type ActorResolverConfig, type FederatedActorRecordBase } from '../node/actorResolver';
+import {
+  createActorResolver,
+  type ActorResolverConfig,
+  type FederatedActorRecordBase,
+} from '../node/actorResolver';
 
 /**
  * The instance domain policy applies to CACHED actors, not just fetched ones.
@@ -90,17 +94,23 @@ function makeResolver(
  * the work: a reader that stopped at the cap has pulled a handful of chunks; one
  * that drained has pulled all of them.
  */
-function streamedResponse(chunks: string[], init?: ResponseInit): { response: Response; pulls: () => number } {
+function streamedResponse(
+  chunks: string[],
+  init?: ResponseInit,
+): { response: Response; pulls: () => number } {
   let pulls = 0;
   const encoder = new TextEncoder();
-  const response = new Response(new ReadableStream<Uint8Array>({
-    pull(controller) {
-      pulls += 1;
-      const chunk = chunks.shift();
-      if (chunk === undefined) controller.close();
-      else controller.enqueue(encoder.encode(chunk));
-    },
-  }), init);
+  const response = new Response(
+    new ReadableStream<Uint8Array>({
+      pull(controller) {
+        pulls += 1;
+        const chunk = chunks.shift();
+        if (chunk === undefined) controller.close();
+        else controller.enqueue(encoder.encode(chunk));
+      },
+    }),
+    init,
+  );
   return { response, pulls: () => pulls };
 }
 
@@ -176,7 +186,10 @@ describe('fetchRemoteActor — bounded remote bodies', () => {
    * stops at the cap pulls a handful; one that drains pulls all `count`.
    */
   function chunked(chunkBytes: number, count: number, init?: ResponseInit) {
-    return streamedResponse(Array.from({ length: count }, () => 'x'.repeat(chunkBytes)), init);
+    return streamedResponse(
+      Array.from({ length: count }, () => 'x'.repeat(chunkBytes)),
+      init,
+    );
   }
 
   it('stops reading an actor body once it exceeds the decompressed-size cap', async () => {
@@ -210,14 +223,17 @@ describe('fetchRemoteActor — bounded remote bodies', () => {
 
   it('rejects an oversized actor from Content-Length without consuming its stream', async () => {
     let cancelled = false;
-    const response = new Response(new ReadableStream<Uint8Array>({
-      pull(controller) {
-        controller.enqueue(new Uint8Array([123]));
-      },
-      cancel() {
-        cancelled = true;
-      },
-    }), { headers: { 'content-length': String(1024 * 1024 + 1) } });
+    const response = new Response(
+      new ReadableStream<Uint8Array>({
+        pull(controller) {
+          controller.enqueue(new Uint8Array([123]));
+        },
+        cancel() {
+          cancelled = true;
+        },
+      }),
+      { headers: { 'content-length': String(1024 * 1024 + 1) } },
+    );
     const rig = makeResolver({ signedFetch: async () => response });
 
     await expect(rig.resolver.fetchRemoteActor(ALLOWED_ACTOR)).resolves.toBeNull();
@@ -233,9 +249,8 @@ describe('fetchRemoteActor — bounded remote bodies', () => {
     });
     const oversizedCollection = chunked(8 * 1024, 24);
     const rig = makeResolver({
-      signedFetch: async (url) => url === ALLOWED_ACTOR
-        ? new Response(actor)
-        : oversizedCollection.response,
+      signedFetch: async (url) =>
+        url === ALLOWED_ACTOR ? new Response(actor) : oversizedCollection.response,
     });
 
     await expect(rig.resolver.fetchRemoteActor(ALLOWED_ACTOR)).resolves.toBeNull();

package/src/__tests__/actorResolverNetworkIdentity.test.ts

@@ -9,7 +9,11 @@
  * little and the account renders under a hostname that tells the reader nothing.
  */
 
-import { createActorResolver, type ActorResolverConfig, type FederatedActorRecordBase } from '../node/actorResolver';
+import {
+  createActorResolver,
+  type ActorResolverConfig,
+  type FederatedActorRecordBase,
+} from '../node/actorResolver';
 import {
   FEDERATION_NETWORKS,
   createBridgeRelabeller,
@@ -22,21 +26,26 @@ import {
  * supplies one — which is the arrangement in production too, only there the
  * entries are an app's reviewed policy.
  */
-const relabeller = createBridgeRelabeller([{
-  host: 'bird.makeup',
-  network: FEDERATION_NETWORKS.x,
-  operator: 'test',
-  software: 'BirdsiteLive',
-  derive: upstreamHandleFromProfileField({ fieldName: 'Official', hosts: ['twitter.com', 'x.com'] }),
-  caseRule: 'lowercase',
-  relabel: 'enabled',
-  upstreamIdStability: 'recyclable',
-  boilerplate: [/\s*This account is a replica from Twitter\..*Patreon\.\s*$/s],
-  consent: 'unconsented',
-  evidence: 'test',
-  assumption: '',
-  since: '2026-08-02',
-}]);
+const relabeller = createBridgeRelabeller([
+  {
+    host: 'bird.makeup',
+    network: FEDERATION_NETWORKS.x,
+    operator: 'test',
+    software: 'BirdsiteLive',
+    derive: upstreamHandleFromProfileField({
+      fieldName: 'Official',
+      hosts: ['twitter.com', 'x.com'],
+    }),
+    caseRule: 'lowercase',
+    relabel: 'enabled',
+    upstreamIdStability: 'recyclable',
+    boilerplate: [/\s*This account is a replica from Twitter\..*Patreon\.\s*$/s],
+    consent: 'unconsented',
+    evidence: 'test',
+    assumption: '',
+    since: '2026-08-02',
+  },
+]);
 const deriveBridgedNetworkIdentity = relabeller.deriveNetworkIdentity;
 import type { NormalizedExternalActor } from '../index';
 
@@ -51,13 +60,14 @@ const BRIDGED_ACTOR = {
   name: 'WIRED',
   inbox: 'https://bird.makeup/users/wired/inbox',
   summary:
-    "The latest in tech.\nThis account is a replica from Twitter. Its author can't see your replies. "
-    + 'If you find this service useful, please consider supporting us via our Patreon.',
+    "The latest in tech.\nThis account is a replica from Twitter. Its author can't see your replies. " +
+    'If you find this service useful, please consider supporting us via our Patreon.',
   attachment: [
     {
       type: 'PropertyValue',
       name: 'Official',
-      value: '<a href="https://twitter.com/wired" rel="me nofollow noopener noreferrer">twitter.com/wired</a>',
+      value:
+        '<a href="https://twitter.com/wired" rel="me nofollow noopener noreferrer">twitter.com/wired</a>',
     },
   ],
 };
@@ -75,8 +85,8 @@ const BRIDGED_ACTOR = {
 const ALL_BOILERPLATE_ACTOR = {
   ...BRIDGED_ACTOR,
   summary:
-    "This account is a replica from Twitter. Its author can't see your replies. "
-    + 'If you find this service useful, please consider supporting us via our Patreon.',
+    "This account is a replica from Twitter. Its author can't see your replies. " +
+    'If you find this service useful, please consider supporting us via our Patreon.',
 };
 
 function makeResolver(
@@ -129,7 +139,12 @@ function makeResolver(
 
       ...textOverrides,
     },
-    logger: { info: () => {}, warn: (message) => { warnings.push(message); } },
+    logger: {
+      info: () => {},
+      warn: (message) => {
+        warnings.push(message);
+      },
+    },
   };
 
   return { resolver: createActorResolver(config), upserts, resolved, warnings };
@@ -220,12 +235,21 @@ describe('deriveNetworkIdentity — results the engine refuses', () => {
    * swallowed.
    */
   it.each([
-    ['username under a different domain', { federatedUsername: 'wired@example.com', instanceDomain: 'x.com', bio: '' }],
-    ['username with no domain at all', { federatedUsername: 'wired', instanceDomain: 'x.com', bio: '' }],
+    [
+      'username under a different domain',
+      { federatedUsername: 'wired@example.com', instanceDomain: 'x.com', bio: '' },
+    ],
+    [
+      'username with no domain at all',
+      { federatedUsername: 'wired', instanceDomain: 'x.com', bio: '' },
+    ],
     ['empty local part', { federatedUsername: '@x.com', instanceDomain: 'x.com', bio: '' }],
     ['empty domain', { federatedUsername: 'wired@', instanceDomain: '', bio: '' }],
     ['two at-signs', { federatedUsername: 'a@b@x.com', instanceDomain: 'x.com', bio: '' }],
-    ['a separator that is not an at-sign', { federatedUsername: 'wired.x.com', instanceDomain: 'x.com', bio: '' }],
+    [
+      'a separator that is not an at-sign',
+      { federatedUsername: 'wired.x.com', instanceDomain: 'x.com', bio: '' },
+    ],
   ])('refuses %s and falls back to the protocol acct', async (_label, identity) => {
     const rig = makeResolver(() => identity);
     await rig.resolver.fetchRemoteActor(BRIDGED_ACTOR.id);
@@ -236,7 +260,11 @@ describe('deriveNetworkIdentity — results the engine refuses', () => {
   });
 
   it('accepts a bindable result that differs only in case', async () => {
-    const rig = makeResolver(() => ({ federatedUsername: 'WIRED@X.com', instanceDomain: 'X.com', bio: 'x' }));
+    const rig = makeResolver(() => ({
+      federatedUsername: 'WIRED@X.com',
+      instanceDomain: 'X.com',
+      bio: 'x',
+    }));
     await rig.resolver.fetchRemoteActor(BRIDGED_ACTOR.id);
 
     expect(rig.resolved[0].federatedUsername).toBe('wired@x.com');
@@ -260,12 +288,17 @@ describe('bio handle qualification', () => {
     text.replace(/@([A-Za-z0-9_]+)(?!@)/g, `@$1@${domain}`);
 
   it('qualifies against the NETWORK domain for a relabelled actor', async () => {
-    const rig = makeResolver(deriveBridgedNetworkIdentity, {
-      ...BRIDGED_ACTOR,
-      summary: 'Now building @thinkymachines'
-        + "\nThis account is a replica from Twitter. Its author can't see your replies. "
-        + 'If you find this service useful, please consider supporting us via our Patreon.',
-    }, { qualifyHandles });
+    const rig = makeResolver(
+      deriveBridgedNetworkIdentity,
+      {
+        ...BRIDGED_ACTOR,
+        summary:
+          'Now building @thinkymachines' +
+          "\nThis account is a replica from Twitter. Its author can't see your replies. " +
+          'If you find this service useful, please consider supporting us via our Patreon.',
+      },
+      { qualifyHandles },
+    );
     await rig.resolver.fetchRemoteActor(BRIDGED_ACTOR.id);
 
     // x.com, NOT bird.makeup: the handle belongs to the network the account is
@@ -274,10 +307,14 @@ describe('bio handle qualification', () => {
   });
 
   it('writes the SAME qualified text to the stored row and to Oxy', async () => {
-    const rig = makeResolver(deriveBridgedNetworkIdentity, {
-      ...BRIDGED_ACTOR,
-      summary: 'CTO @openai',
-    }, { qualifyHandles });
+    const rig = makeResolver(
+      deriveBridgedNetworkIdentity,
+      {
+        ...BRIDGED_ACTOR,
+        summary: 'CTO @openai',
+      },
+      { qualifyHandles },
+    );
     await rig.resolver.fetchRemoteActor(BRIDGED_ACTOR.id);
 
     // The point of applying it once: two writes that could disagree, cannot.

package/src/__tests__/apUri.test.ts

@@ -28,8 +28,12 @@ describe('createDomainPolicy.isBlockedDomain', () => {
 
 describe('createDomainPolicy.extractLocalPostId', () => {
   it('extracts the post id from one of our own AP object URIs', () => {
-    expect(policy.extractLocalPostId('https://mention.earth/ap/users/nate/posts/abc123')).toBe('abc123');
-    expect(policy.extractLocalPostId('https://mention.earth/ap/users/nate/posts/abc123/')).toBe('abc123');
+    expect(policy.extractLocalPostId('https://mention.earth/ap/users/nate/posts/abc123')).toBe(
+      'abc123',
+    );
+    expect(policy.extractLocalPostId('https://mention.earth/ap/users/nate/posts/abc123/')).toBe(
+      'abc123',
+    );
   });
 
   it('returns null for a remote URI or a non-matching path', () => {
@@ -41,9 +45,9 @@ describe('createDomainPolicy.extractLocalPostId', () => {
 
 describe('extractActorUriFromActivityId', () => {
   it('trims from the first post-path segment to yield the actor uri', () => {
-    expect(extractActorUriFromActivityId('https://mastodon.social/users/alice/statuses/12345')).toBe(
-      'https://mastodon.social/users/alice',
-    );
+    expect(
+      extractActorUriFromActivityId('https://mastodon.social/users/alice/statuses/12345'),
+    ).toBe('https://mastodon.social/users/alice');
   });
 
   it('returns null when malformed or no post-path segment is present', () => {