beacon: canonical profile URL is bare /<hex> (was /p/<hex>)

Cleaner scheme — the pubkey is the path:
  /                                       home
  /<hex>                                  human profile page (HTML + OGP)
  /.well-known/did/nostr/<hex>.json       machine DID document
RegExp route constrained to 64-hex so it never collides with /api, /healthz,
/.well-known or static assets. Legacy #<hex> links still resolve.

Author: melvincarvalho

public/index.html

@@ -132,7 +132,7 @@ <h1>A directory of <em style="font-style:italic">did:nostr</em> identities</h1>
 function cardHtml(p) {
   const c = content(p);
   const ct = p._counts || {};
-  return `<a class="card" href="/p/${p.pubkey}" data-pk="${p.pubkey}">
+  return `<a class="card" href="/${p.pubkey}" data-pk="${p.pubkey}">
     ${avatar(c, p.pubkey)}
     <div class="name">${esc(c.name || c.display_name || short(p.pubkey))}</div>
     ${c.nip05 ? `<div class="nip05">${esc(c.nip05)}</div>` : ''}
@@ -197,7 +197,7 @@ <h2>${esc(c.name || short(pk))}</h2>
     <div class="sections">
       <div class="panel"><h3>DID document</h3><pre>${highlight(didOnly(doc))}</pre></div>
       <div class="panel"><h3>Following · ${follows.length}</h3>
-        ${follows.length ? `<div class="follows">${follows.slice(0, 96).map((d) => { const fk = d.replace('did:nostr:', ''); return `<a class="fav" data-pk="${fk}" style="${gradStyle(fk)}" title="${esc(fk)}" href="/p/${fk}"></a>`; }).join('')}</div>`
+        ${follows.length ? `<div class="follows">${follows.slice(0, 96).map((d) => { const fk = d.replace('did:nostr:', ''); return `<a class="fav" data-pk="${fk}" style="${gradStyle(fk)}" title="${esc(fk)}" href="/${fk}"></a>`; }).join('')}</div>`
           : '<div style="color:var(--faint);font-size:.9rem">No follow list indexed.</div>'}
       </div>
     </div>
@@ -215,7 +215,7 @@ <h2>${esc(c.name || short(pk))}</h2>
 }
 
 function route() {
-  const m = location.pathname.match(/^\/p\/([0-9a-f]{64})$/i);
+  const m = location.pathname.match(/^\/([0-9a-f]{64})$/i);
   if (m) return profile(m[1].toLowerCase());
   const h = location.hash.slice(1);                 // legacy #<hex> links still resolve
   if (/^[0-9a-f]{64}$/.test(h)) return profile(h);
@@ -227,7 +227,7 @@ <h2>${esc(c.name || short(pk))}</h2>
   const el = e.target.closest('a[data-pk]');
   if (!el || e.metaKey || e.ctrlKey || e.shiftKey || e.button !== 0) return;
   e.preventDefault();
-  navigate('/p/' + el.dataset.pk);
+  navigate('/' + el.dataset.pk);
 });
 $('#q').addEventListener('input', onSearch);
 window.addEventListener('popstate', route);

src/server.js

@@ -50,17 +50,18 @@ export async function startServer(port = process.env.PORT || 3000) {
   // home shell (default OGP)
   app.get('/', (_req, res) => res.type('html').send(renderShell()));
 
-  // per-profile shell with that identity's OGP (crawlable canonical URL)
-  app.get('/p/:id', async (req, res, next) => {
+  // per-profile shell at /<pubkey> with that identity's OGP (crawlable canonical
+  // URL). RegExp route constrained to 64-hex, so it never collides with /api,
+  // /healthz, /.well-known, or static assets.
+  app.get(/^\/([0-9a-f]{64})$/, async (req, res, next) => {
     try {
-      const id = String(req.params.id).toLowerCase();
-      if (!/^[0-9a-f]{64}$/.test(id)) return res.type('html').send(renderShell());
+      const id = req.params[0].toLowerCase();
       const p = await getProfile(id);
       let c = {}; try { c = JSON.parse(p?.content || '{}'); } catch { /* malformed */ }
       const name = c.name || c.display_name || `did:nostr:${id.slice(0, 8)}…`;
       const about = String(c.about || `A did:nostr identity · ${id.slice(0, 16)}…`).replace(/\s+/g, ' ').slice(0, 180);
       res.type('html').send(renderShell({
-        title: `${name} · Beacon`, description: about, url: `${SITE}/p/${id}`,
+        title: `${name} · Beacon`, description: about, url: `${SITE}/${id}`,
         type: 'profile', image: c.picture || '',
       }));
     } catch (e) { next(e); }