v4: every request about a user, and the dump editor's path, come from one builder each — fourteen places wrote /api/users/<key>/… by hand, some encoding a handle (@alice%40music.example) and some not, a slug never; userApiUrl (src/utils/shared/urls.ts) now writes them all, by the user's id or by @ and the handle a page's path gives, each segment encoded. The editor's path was the dump's page's with /edit added in two places; dumpPath takes the view, as userPath and feedPath do.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/components/shared/Avatar.tsx

@@ -6,7 +6,7 @@
  */
 
 import { useContext, useState } from "react";
-import { API_URL } from "../../config/api.ts";
+import { userApiUrl } from "../../utils/shared/urls.ts";
 import { AvatarOverrideContext } from "../../contexts/ws/AvatarOverrideContext.ts";
 
 /**
@@ -51,8 +51,8 @@ export function Avatar(
 
   if (effectiveHasAvatar && !imgFailed) {
     const src = effectiveVersion
-      ? `${API_URL}/api/users/${userId}/avatar?v=${effectiveVersion}`
-      : `${API_URL}/api/users/${userId}/avatar`;
+      ? `${userApiUrl({ id: userId }, "avatar")}?v=${effectiveVersion}`
+      : userApiUrl({ id: userId }, "avatar");
     return (
       <img
         src={src}