implemented federation

internal/api/router.go

@@ -65,6 +65,7 @@ func New(cfg *config.Config, engine *xorm.Engine, store sessions.Store, bus even
 	artifactH   := handlers.NewArtifactHandler(engine, artifactRoot)
 	runnerH     := handlers.NewRunnerHandler(engine)
 	gitopsH     := handlers.NewGitOpsHandler(engine, bus)
+	fedH         := handlers.NewFederationHandler(engine, cfg)
 	envH        := handlers.NewEnvironmentHandler(engine, bus)
 	timelineH   := handlers.NewTimelineHandler(engine, cfg.RepoRoot)
 	workspaceH  := handlers.NewWorkspaceHandler(engine, cfg)
@@ -279,6 +280,15 @@ func New(cfg *config.Config, engine *xorm.Engine, store sessions.Store, bus even
 
 	r.With(auth.Optional).Get("/ws", wsH.Hub)
 
+	// ── ActivityPub / federation (root-level, no auth) ────────────────────────
+	// Must be registered before the /* catch-all so they are not proxied to Vite.
+	r.Get("/.well-known/webfinger", fedH.WebFinger)
+	r.Get("/users/{username}", fedH.Actor)
+	r.Post("/users/{username}/inbox", fedH.Inbox)
+	r.Get("/users/{username}/outbox", fedH.OutboxGet)
+	r.Get("/users/{username}/followers", fedH.Followers)
+	r.Get("/users/{username}/following", fedH.Following)
+
 	// In debug mode proxy non-API routes to the Vite dev server so :8080 works too.
 	// In production the built React app is embedded and served from staticFiles.
 	if cfg.Debug {