@rmdes/indiekit-endpoint-activitypub 3.13.6 → 3.13.8

package/lib/jf2-to-as2.js

@@ -540,10 +540,12 @@ function buildPlainTags(properties, publicationUrl, existing) {
   const tags = [...(existing || [])];
   if (properties.category) {
     for (const cat of asArray(properties.category)) {
+      const value = categoryString(cat);
+      if (!value) continue;
       tags.push({
         type: "Hashtag",
-        name: `#${cat.split("/").at(-1).replace(/\s+/g, "")}`,
-        href: `${publicationUrl}categories/${encodeURIComponent(cat)}`,
+        name: `#${value.split("/").at(-1).replace(/\s+/g, "")}`,
+        href: `${publicationUrl}categories/${encodeURIComponent(value)}`,
       });
     }
   }
@@ -562,11 +564,13 @@ function buildFedifyTags(properties, publicationUrl, postType) {
   }
   if (properties.category) {
     for (const cat of asArray(properties.category)) {
+      const value = categoryString(cat);
+      if (!value) continue;
       tags.push(
         new Hashtag({
-          name: `#${cat.split("/").at(-1).replace(/\s+/g, "")}`,
+          name: `#${value.split("/").at(-1).replace(/\s+/g, "")}`,
           href: new URL(
-            `${publicationUrl}categories/${encodeURIComponent(cat)}`,
+            `${publicationUrl}categories/${encodeURIComponent(value)}`,
           ),
         }),
       );
@@ -583,6 +587,24 @@ function asArray(value) {
   return Array.isArray(value) ? value : [value];
 }
 
+/**
+ * Coerce a JF2 `category` entry to a hashtag-safe string, or null if it is not
+ * a plain tag.
+ *
+ * A Microformats/JF2 `category` array can legitimately contain non-strings —
+ * most commonly an IndieWeb person-tag (a nested h-card object), but malformed
+ * data can also yield null/number. Those are NOT hashtags. Returning null lets
+ * the tag builders skip them instead of crashing on `cat.split` (regression
+ * fixed 2026-06-06: "cat.split is not a function" broke ActivityPub syndication
+ * of any post carrying a person-tag).
+ *
+ * @param {unknown} cat
+ * @returns {string|null}
+ */
+function categoryString(cat) {
+  return typeof cat === "string" && cat.trim() !== "" ? cat : null;
+}
+
 function guessMediaType(url) {
   const ext = url.split(".").pop()?.toLowerCase();
   const types = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-activitypub",
-  "version": "3.13.6",
+  "version": "3.13.8",
   "description": "ActivityPub federation endpoint for Indiekit via Fedify. Adds full fediverse support: actor, inbox, outbox, followers, following, syndication, and Mastodon migration.",
   "keywords": [
     "indiekit",
@@ -22,6 +22,9 @@
   "type": "module",
   "main": "index.js",
   "exports": "./index.js",
+  "scripts": {
+    "test": "node --test tests/*.test.js"
+  },
   "files": [
     "assets",
     "lib",
@@ -37,9 +40,9 @@
     "url": "https://github.com/rmdes/indiekit-endpoint-activitypub/issues"
   },
   "dependencies": {
-    "@fedify/debugger": "^2.2.0",
-    "@fedify/fedify": "^2.2.0",
-    "@fedify/redis": "^2.2.0",
+    "@fedify/debugger": "2.2.4",
+    "@fedify/fedify": "2.2.4",
+    "@fedify/redis": "2.2.4",
     "@js-temporal/polyfill": "^0.5.0",
     "@rmdes/indiekit-startup-gate": "^1.0.0",
     "express": "^5.0.0",