fedipod-server 0.19.0 → 0.21.0

package/dist/claims.js

@@ -19,7 +19,8 @@ function claims(input, frontHost) {
     const bare = String(input.host).split(':')[0].toLowerCase();
     if (bare !== String(frontHost).toLowerCase())
         return false; // a pod subdomain → not ours
-    return FRONT_PATHS.has(input.pathname) || input.pathname.startsWith('/u/');
+    return FRONT_PATHS.has(input.pathname) || input.pathname.startsWith('/u/')
+        || input.pathname.startsWith('/@'); // the short profile address
 }
 // What an identity answers on its own pod's origin: the protocol routes other
 // software addresses it by, and the one path its owner's pages live under.
@@ -35,7 +36,7 @@ const AGENT_PATHS = new Set([
     // at this name before, so no pod resource is displaced.
     '/.well-known/oauth-authorization-server',
 ]);
-const AGENT_PREFIXES = ['/api/', '/oauth/'];
+const AGENT_PREFIXES = ['/api/', '/oauth/', '/@']; // /@handle: the short profile address
 // An identity's inbox is the container `/<root>/ap/inbox/`, matched by shape
 // rather than a fixed root. A POST here is a delivery, verified at the door
 // before it is written; the handler checks the exact path per identity. The

package/lib/client/masto/render.mjs

@@ -46,7 +46,7 @@ export function account(api, actorUrl, { selfAcct } = {}) {
     // asking about itself would be told it was a person.
     bot: false, discoverable: true,
     group: self ? api.store.getConfig()?.kind === 'group' : cached.type === 'Group',
-    created_at: '2026-01-01T00:00:00.000Z',
+    created_at: (self && api.store.getConfig()?.createdAt) || '2026-01-01T00:00:00.000Z',
     note: (self ? api.store.getConfig()?.summary : cached.summary) || '',
     url: actorUrl, uri: actorUrl,
     avatar: selfIcon(api, self, cached) || TRANSPARENT_PNG,

package/lib/core/publisher/index.mjs

@@ -118,6 +118,52 @@ export class Publisher {
     });
   }
 
+  // The human half: a page a browser can open and follow from. The actor
+  // document is for servers; this is the address you hand to a person. It
+  // shows who the account is, its fields, when it joined and what it pinned;
+  // the counts and the posts live in the collections. Written only when its
+  // content changed.
+  async publishProfilePage({ force = false } = {}) {
+    const { urls } = this;
+    const host = new URL(urls.base).host;
+    // When the account was made. Accounts from before this was recorded take
+    // the date of their oldest post, or today.
+    if (!this.config.createdAt) {
+      const oldest = this.store.getStatuses().filter(s => s.kind === 'post' && s.published)
+        .map(s => s.published).sort()[0];
+      this.config.createdAt = oldest || new Date().toISOString();
+      this.store.setConfig?.({ ...this.store.getConfig?.(), createdAt: this.config.createdAt });
+    }
+    const pinned = this.store.getStatuses()
+      .filter(s => s.kind === 'post' && s.pinned && s.visibility !== 'private' && s.visibility !== 'direct')
+      .sort((a, b) => String(b.published).localeCompare(String(a.published)))
+      .slice(0, 5)
+      .map(s => ({ content: s.content, published: s.published, url: s.noteId }));
+    // The address as the world knows it: at the Gateway for a fronted
+    // identity, on the pod's host otherwise, the actor id where no host can
+    // answer for a handle.
+    const frontActor = this.config.gateway?.frontActor;
+    const address = frontActor ? `@${wire.publicHandle(this.config)}@${new URL(frontActor).host}`
+      : (wire.webfingerHost(urls.base) ? `@${this.config.handle}@${host}` : urls.actor);
+    const html = wire.profilePageHtml({
+      name: this.config.name || this.config.handle,
+      address,
+      summary: this.config.summary ? wire.contentHtml(this.config.summary) : null,
+      icon: this.config.icon || null,
+      image: this.config.image || null,
+      fields: this.config.fields || [],
+      joined: this.config.createdAt,
+      pinned,
+      kind: this.config.kind,
+    });
+    const digest = crypto.createHash('sha256').update(html).digest('hex').slice(0, 32);
+    const seen = this.store.read('published.json', {});
+    if (!force && seen.pageDigest === digest) return false;
+    await podActor.writeProfilePage(this.remote, urls, html);
+    this.store.write('published.json', { ...this.store.read('published.json', {}), pageDigest: digest });
+    return true;
+  }
+
   async publishProfile({ force = false } = {}) {
     const { urls } = this;
     const host = new URL(urls.base).host;
@@ -137,13 +183,16 @@ export class Publisher {
       quiesced: !!this.config.quiescedAt, version: AGENT_VERSION,
       moderators: this.config.moderators || [],
     })).digest('hex').slice(0, 32);
+    // The human page has its own gate: it changes with pins and the joined
+    // date as well as with the profile, and costs one write when it does.
+    await this.publishProfilePage({ force });
     if (!force && this.store.read('published.json', {}).surfaceDigest === surface) {
       this.log('profile unchanged — nothing republished');
       return { unreachable: [], updated: 0, skipped: true };
     }
 
     await discovery.writeWebfinger(this.remote, urls,
-      wire.jrd({ handle: this.config.handle, host, actor: urls.actor }));
+      wire.jrd({ handle: this.config.handle, host, actor: urls.actor, page: urls.profileHtml }));
     await discovery.writeHostMeta(this.remote, urls, wire.hostMeta(urls.base));
 
     const nodeinfoDocUrl = urls.home + 'ap/nodeinfo-2.0';
@@ -166,16 +215,6 @@ export class Publisher {
     // what concerns this identity. Written only while a gateway is advertised.
     if (gwActive) await this.publishGatewayPolicy();
 
-    // The human half: a page a browser can open and follow from. The actor
-    // document is for servers; this is the address you hand to a person.
-    await podActor.writeProfilePage(this.remote, urls, wire.profilePageHtml({
-      name: this.config.name || this.config.handle,
-      address: wire.webfingerHost(urls.base) ? `@${this.config.handle}@${host}` : urls.actor,
-      summary: this.config.summary ? wire.contentHtml(this.config.summary) : null,
-      icon: this.config.icon || null,
-      kind: this.config.kind,
-    }));
-
     // WebID → actor: the profile card lists the actor as a foaf:account.
     // Best-effort — a profile that cannot be read or edited does not stop the
     // publish, it is logged and the rest of the surface still goes up.

package/lib/core/social.mjs

@@ -523,6 +523,9 @@ export async function pinStatus(agent, s, pinned) {
   if (s.actor !== agent.publisher.urls.actor) throw new Error('not your status');
   const updated = agent.store.updateStatus(s.noteId, { pinned: !!pinned });
   await agent.publisher.publishFeatured().catch(e => agent.log?.(`featured: ${e.message}`));
+  if (agent.publisher.publishProfilePage) {
+    await agent.publisher.publishProfilePage().catch(e => agent.log?.(`profile page: ${e.message}`));
+  }
   agent.publisher.publishProfile?.().catch(() => {});
   return updated || s;
 }

package/lib/core/wire.mjs

@@ -52,11 +52,14 @@ export function hostMeta(base) {
   return `<?xml version="1.0" encoding="UTF-8"?>\n<XRD xmlns="http://docs.oasis-open.org/ns/xri/xrd-1.0">\n  <Link rel="lrdd" template="${base}.well-known/webfinger?resource={uri}"/>\n</XRD>\n`;
 }
 
-export function jrd({ handle, host, actor, aliases = [] }) {
+export function jrd({ handle, host, actor, aliases = [], page = null }) {
   return {
     subject: `acct:${handle}@${host}`,
     ...(aliases.length ? { aliases } : {}),
-    links: [{ rel: 'self', type: 'application/activity+json', href: actor }],
+    links: [
+      { rel: 'self', type: 'application/activity+json', href: actor },
+      ...(page ? [{ rel: 'http://webfinger.net/rel/profile-page', type: 'text/html', href: page }] : []),
+    ],
   };
 }
 
@@ -193,9 +196,24 @@ export function actorDoc({ urls, handle, name, publicKeyPem, assertionKey = null
 // the actor document. It says who this is and how to follow — the handle to
 // paste, and the remote-follow control that hands the visitor to their own
 // server's follow screen.
-export function profilePageHtml({ name, address, summary = null, icon = null, kind = 'person' }) {
+// `fields` are the profile's name/value rows, `joined` an ISO date, `pinned`
+// the pinned posts as { content (sanitized HTML), published, url }.
+export function profilePageHtml({ name, address, summary = null, icon = null, image = null,
+  fields = [], joined = null, pinned = [], kind = 'person' }) {
   const esc = (s) => String(s ?? '').replace(/[&<>"]/g, c => ({ ...HTML_ESCAPES, '"': '&quot;' }[c]));
   const what = kind === 'group' ? 'a group' : 'an account';
+  const month = (iso) => {
+    const d = new Date(iso);
+    return Number.isNaN(d.getTime()) ? null
+      : d.toLocaleDateString('en', { month: 'long', year: 'numeric', timeZone: 'UTC' });
+  };
+  const day = (iso) => {
+    const d = new Date(iso);
+    return Number.isNaN(d.getTime()) ? '' : d.toISOString().slice(0, 10);
+  };
+  const fieldRows = fields.filter(f => f?.name && f?.value !== undefined && f?.value !== null && String(f.value) !== '');
+  const joinedText = joined ? month(joined) : null;
+  const pins = pinned.filter(x => x && typeof x.content === 'string');
   return `<!doctype html>
 <html lang="en">
 <head>
@@ -205,14 +223,23 @@ export function profilePageHtml({ name, address, summary = null, icon = null, ki
 <style>
 :root { color-scheme: light dark; }
 body { font: 112.5%/1.5 system-ui, sans-serif; max-width: 34rem; margin: 3rem auto; padding: 0 1rem; }
-img.avatar { width: 6rem; height: 6rem; border-radius: 1rem; object-fit: cover; }
+img.header { width: 100%; max-height: 12rem; object-fit: cover; border-radius: 1rem; }
+img.avatar { width: 6rem; height: 6rem; border-radius: 1rem; object-fit: cover; margin-top: 1rem; }
 h1 { margin: .5rem 0 0; }
 .address { font-size: 1.1rem; user-select: all; }
+dl.fields { display: grid; grid-template-columns: max-content 1fr; gap: .4rem 1rem; margin: 1.5rem 0; }
+dl.fields dt { font-weight: 600; }
+dl.fields dd { margin: 0; overflow-wrap: anywhere; }
+.joined { margin: 1rem 0; }
+section.pinned h2 { font-size: 1.1rem; margin: 2rem 0 .5rem; }
+article.pin { border: 1px solid #8884; border-radius: 1rem; padding: 1rem 1.2rem; margin: 1rem 0; }
+article.pin p:last-child { margin-bottom: 0; }
+article.pin .when { font-size: 1rem; }
 form { margin-top: 2rem; }
 label { display: block; margin-bottom: .3rem; }
 input { font: inherit; padding: .5rem; width: 14rem; max-width: 100%; }
 button { font: inherit; padding: .5rem 1rem; }
-.hint { color: #777; font-size: .9rem; }
+.hint { color: #666; font-size: 1rem; }
 .err { color: #b00020; }
 .err:empty { display: none; }
 @media (prefers-color-scheme: dark) {
@@ -223,10 +250,22 @@ button { font: inherit; padding: .5rem 1rem; }
 </head>
 <body>
 <main>
+${image ? `<img class="header" src="${esc(image)}" alt="">` : ''}
 ${icon ? `<img class="avatar" src="${esc(icon)}" alt="">` : ''}
 <h1>${esc(name)}</h1>
 <p class="address">${esc(address)}</p>
 ${summary ? `<div>${summary}</div>` : ''}
+${fieldRows.length ? `<dl class="fields">
+${fieldRows.map(f => `<dt>${esc(f.name)}</dt><dd>${esc(f.value)}</dd>`).join('\n')}
+</dl>` : ''}
+${joinedText ? `<p class="joined">Joined ${esc(joinedText)}</p>` : ''}
+${pins.length ? `<section class="pinned">
+<h2>Pinned</h2>
+${pins.map(x => `<article class="pin">
+${x.content}
+<p class="when">${x.url ? `<a href="${esc(x.url)}">${esc(day(x.published))}</a>` : esc(day(x.published))}</p>
+</article>`).join('\n')}
+</section>` : ''}
 <p>This is ${what} on the Fediverse. To follow it, paste the address above
 into the search box of Mastodon or any Fediverse app — or use the form.</p>
 <form id="follow">

package/lib/device/admin/surface.mjs

@@ -181,6 +181,14 @@ export function buildAdminSurface({ agent, gate, allowed, log = console.log,
         const scheme = req.socket.encrypted || req.headers['x-forwarded-proto'] === 'https' ? 'https' : 'http';
         return json(res, 200, masto.authorizationServerMetadata(`${scheme}://${req.headers.host}${mount}`));
       }
+      // The short address a person types: /@handle opens the profile page.
+      const at = /^\/@([^/]+)$/u.exec(p);
+      const ownHandle = handle || agent.store?.getConfig?.()?.handle || '';
+      if (at && ownHandle && agent.publisher?.urls?.profileHtml
+        && decodeURIComponent(at[1]).toLowerCase() === String(ownHandle).toLowerCase()) {
+        res.writeHead(302, { location: agent.publisher.urls.profileHtml, 'cache-control': 'no-store' });
+        res.end(); return;
+      }
       if (atDoor && gate(req, res)) return;
       if (p === '/api/v1/streaming/health') {
         res.writeHead(200, { 'content-type': 'text/plain' }); res.end('OK'); return;

package/lib/device/cli/commands/setup.mjs

@@ -163,6 +163,7 @@ const credential = await mintCredential({ origin: issuer, email, password, name:
 const rec = {
   ...credential,
   remotePod: pod.endsWith('/') ? pod : pod + '/',
+  createdAt: new Date().toISOString(),
   // The private half goes on THIS machine, exactly as the browser setup does
   // (lib/setup.mjs). Omitting it here meant the two paths produced different
   // installs from the same answers: the CLI put the timeline, contacts,

package/lib/device/setup.mjs

@@ -293,6 +293,7 @@ export async function runSetup({ home, agent, answers, run, deps = {}, log = ()
       const rec = {
         ...credential,
         remotePod: pod.endsWith('/') ? pod : pod + '/',
+        createdAt: new Date().toISOString(),
         ...(root ? { root } : {}),
         ...(keys === 'pod' ? { keysMode: 'pod' } : {}),
         // Where the private half lives. Per-machine, like keysMode.

package/lib/gateway/front-core.mjs

@@ -26,11 +26,17 @@ import { podBaseOfWebId } from '../pod/urls.mjs';
 // wire.mjs: wire drags the agent's whole HTML pipeline (sanitize-html and
 // friends), which a serverless front must never carry — it crashed the
 // deployed function before it answered its first request.
-const jrd = ({ handle, host, actor, aliases = [] }) => ({
+const jrd = ({ handle, host, actor, aliases = [], page = null }) => ({
   subject: `acct:${handle}@${host}`,
   ...(aliases.length ? { aliases } : {}),
-  links: [{ rel: 'self', type: 'application/activity+json', href: actor }],
+  links: [
+    { rel: 'self', type: 'application/activity+json', href: actor },
+    ...(page ? [{ rel: 'http://webfinger.net/rel/profile-page', type: 'text/html', href: page }] : []),
+  ],
 });
+// The public profile page of any account the front answers for lives on
+// its pod, whether the address is the front's or the pod's own.
+const profilePageOf = (rec) => (rec?.podHome ? rec.podHome + 'ap/profile.html' : null);
 
 const AP_CT = 'application/activity+json';
 
@@ -600,13 +606,29 @@ async function route(request, ctx) {
     // is the alias, so a client signing in by the fronted address can find
     // the pod (and its login) without a lookup only the host could answer.
     const podActor = rec.inboxOnly ? [] : [rec.podHome + 'ap/actor'];
-    const out = j(200, jrd({ handle: m[1], host: ctx.host, actor: rec.actorUrl, aliases: podActor }),
+    const out = j(200, jrd({ handle: m[1], host: ctx.host, actor: rec.actorUrl, aliases: podActor, page: profilePageOf(rec) }),
       'application/jrd+json');
     // RFC 7033: a JRD is read from any origin.
     out.headers['access-control-allow-origin'] = '*';
     return out;
   }
 
+  // The short address a person types: https://<host>/@handle opens the
+  // profile page, the way most Fediverse servers spell it. /@handle@pod-host
+  // is the same for an account whose address is its pod's, which the front
+  // holds under that full address — the form other servers use for a
+  // profile that lives elsewhere.
+  const at = /^\/@([^/@]+)(?:@([^/@]+))?$/u.exec(pathname);
+  if (at) {
+    const handle = decodeURIComponent(at[1]).toLowerCase();
+    const host = at[2] ? decodeURIComponent(at[2]).toLowerCase() : null;
+    const key = host && host !== String(ctx.host).toLowerCase() ? `${handle}@${host}` : handle;
+    const rec = await ctx.lookup(key);
+    const page = rec && profilePageOf(rec);
+    if (!page) return notFound();
+    return { status: 302, headers: { location: page, 'cache-control': 'no-store' }, body: '' };
+  }
+
   const up = parseUserPath(pathname);
   if (!up) return notFound();
   const rec = await ctx.lookup(up.handle);

package/lib/server/embed.mjs

@@ -137,6 +137,7 @@ function ensureCredential(home, { podBase, webId }) {
   const rec = {
     webId,
     remotePod: podBase.endsWith('/') ? podBase : podBase + '/',
+    createdAt: new Date().toISOString(),
     root: 'fedipod/',
     keysMode: 'pod',
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fedipod-server",
-  "version": "0.19.0",
+  "version": "0.21.0",
   "description": "The FediPod Server: a full ActivityPub server as a Community Solid Server component.",
   "license": "MIT",
   "main": "dist/index.js",

package/run-agent.mjs

@@ -588,6 +588,10 @@ export class Agent {
     if (repair) {
       this.ensureActorPublished()
         .catch(e => this.log(`actor check failed: ${e.message}`));
+      // The human page, rewritten only when what it shows has changed: one
+      // local digest compare, and a write the first time after an upgrade.
+      this.publisher.publishProfilePage()
+        .catch(e => this.log(`profile page: ${e.message}`));
     }
     this.seedFollowNotifications().catch(e => this.log(`notification seeding failed: ${e.message}`));
   }

package/web/app/agent.mjs

@@ -88,6 +88,7 @@ export class BrowserAgent {
       // Own posts the outbox names and the timeline index lacks come back
       // here, before anything acts on the index.
       await this.publisher.healStatuses().catch((e) => this.log(`healing the timeline index: ${e.message}`));
+      await this.publisher.publishProfilePage().catch((e) => this.log(`profile page: ${e.message}`));
       // And start delivering again, since demote() stopped it. startQueue() is
       // idempotent, so a goActive() that was already active costs nothing.
       this.deliverer?.startQueue?.();

package/web/app/dist/boot.js

@@ -33444,6 +33444,7 @@ async function signUp(answers, { onStep = () => {
     handle,
     name: handle,
     issuer: credential.issuerOrigin,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
     ...gateway ? { gateway } : {}
   };
   const cfgRemote = new BrowserRemotePod(session, { webId: credential.webId, role: "signup", log: () => {