@character-foundry/character-foundry 0.4.2-dev.1765997746 → 0.4.2

package/dist/federation.d.cts

@@ -41,8 +41,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -85,8 +84,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -129,8 +127,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -175,8 +172,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -227,8 +223,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -327,8 +322,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -403,8 +397,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -489,8 +482,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -569,8 +561,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -628,23 +619,6 @@ declare const CCv3DataSchema: z.ZodObject<{
  * Character Card v3 full structure
  */
 export type CCv3Data = z.infer<typeof CCv3DataSchema>;
-/**
- * Federation Logger
- *
- * Lightweight logger with configurable verbosity and a safe default (warn).
- * No external dependencies.
- */
-export type LogLevel = "silent" | "error" | "warn" | "info" | "debug";
-export interface Logger {
-	debug: (...args: unknown[]) => void;
-	info: (...args: unknown[]) => void;
-	warn: (...args: unknown[]) => void;
-	error: (...args: unknown[]) => void;
-}
-export declare function createConsoleLogger(level?: LogLevel): Logger;
-declare function getLogger(): Logger;
-declare function setLogger(logger: Logger): void;
-declare function setLogLevel(level: LogLevel): void;
 /**
  * Federation Types
  *
@@ -1004,17 +978,6 @@ export interface InboxHandlerOptions {
 	strictMode?: boolean;
 	/** Maximum age for signatures in seconds (default 300) */
 	maxAge?: number;
-	/**
-	 * Optional shared network key for internal-only federation.
-	 *
-	 * When set, incoming requests must include a matching network key header.
-	 * In strictMode, the header must also be included in the signed header list.
-	 */
-	networkKey?: string;
-	/**
-	 * Header name for the shared network key (default: X-Foundry-Network-Key)
-	 */
-	networkKeyHeader?: string;
 }
 /**
  * ActivityPub Utilities
@@ -3135,10 +3098,6 @@ export declare class RateLimiter {
  */
 export declare function enableFederation(options?: {
 	skipEnvCheck?: boolean;
-	/** Optional logger override */
-	logger?: Logger;
-	/** Optional log level (used when logger is not provided). Default: warn */
-	logLevel?: LogLevel;
 }): void;
 /**
  * Check if federation is enabled
@@ -3154,9 +3113,6 @@ export declare function isFederationEnabled(): boolean;
 export declare function assertFederationEnabled(feature: string): void;
 
 export {
-	getLogger as getFederationLogger,
-	setLogLevel as setFederationLogLevel,
-	setLogger as setFederationLogger,
 	validateActivitySignature as validateHttpSignature,
 	validateBlockActivity as validateBlockActivityFields,
 	validateFlagActivity as validateFlagActivityFields,

package/dist/federation.d.ts

@@ -41,8 +41,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -85,8 +84,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -129,8 +127,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -175,8 +172,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -227,8 +223,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -327,8 +322,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -403,8 +397,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -489,8 +482,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -569,8 +561,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				position: z.ZodOptional<z.ZodNullable<z.ZodUnion<[
 					z.ZodEnum<[
 						"before_char",
-						"after_char",
-						"in_chat"
+						"after_char"
 					]>,
 					z.ZodNumber,
 					z.ZodLiteral<"">
@@ -628,23 +619,6 @@ declare const CCv3DataSchema: z.ZodObject<{
  * Character Card v3 full structure
  */
 export type CCv3Data = z.infer<typeof CCv3DataSchema>;
-/**
- * Federation Logger
- *
- * Lightweight logger with configurable verbosity and a safe default (warn).
- * No external dependencies.
- */
-export type LogLevel = "silent" | "error" | "warn" | "info" | "debug";
-export interface Logger {
-	debug: (...args: unknown[]) => void;
-	info: (...args: unknown[]) => void;
-	warn: (...args: unknown[]) => void;
-	error: (...args: unknown[]) => void;
-}
-export declare function createConsoleLogger(level?: LogLevel): Logger;
-declare function getLogger(): Logger;
-declare function setLogger(logger: Logger): void;
-declare function setLogLevel(level: LogLevel): void;
 /**
  * Federation Types
  *
@@ -1004,17 +978,6 @@ export interface InboxHandlerOptions {
 	strictMode?: boolean;
 	/** Maximum age for signatures in seconds (default 300) */
 	maxAge?: number;
-	/**
-	 * Optional shared network key for internal-only federation.
-	 *
-	 * When set, incoming requests must include a matching network key header.
-	 * In strictMode, the header must also be included in the signed header list.
-	 */
-	networkKey?: string;
-	/**
-	 * Header name for the shared network key (default: X-Foundry-Network-Key)
-	 */
-	networkKeyHeader?: string;
 }
 /**
  * ActivityPub Utilities
@@ -3135,10 +3098,6 @@ export declare class RateLimiter {
  */
 export declare function enableFederation(options?: {
 	skipEnvCheck?: boolean;
-	/** Optional logger override */
-	logger?: Logger;
-	/** Optional log level (used when logger is not provided). Default: warn */
-	logLevel?: LogLevel;
 }): void;
 /**
  * Check if federation is enabled
@@ -3154,9 +3113,6 @@ export declare function isFederationEnabled(): boolean;
 export declare function assertFederationEnabled(feature: string): void;
 
 export {
-	getLogger as getFederationLogger,
-	setLogLevel as setFederationLogLevel,
-	setLogger as setFederationLogger,
 	validateActivitySignature as validateHttpSignature,
 	validateBlockActivity as validateBlockActivityFields,
 	validateFlagActivity as validateFlagActivityFields,

package/dist/federation.js

@@ -44,50 +44,6 @@ function generateUUID() {
 }
 
 // ../federation/dist/index.js
-var LEVELS = {
-  silent: 0,
-  error: 1,
-  warn: 2,
-  info: 3,
-  debug: 4
-};
-var noop = () => {
-};
-function createConsoleLogger(level = "warn") {
-  const severity = LEVELS[level] ?? LEVELS.warn;
-  const hasConsole = typeof console !== "undefined";
-  const c = hasConsole ? console : void 0;
-  const debugImpl = c?.debug ? c.debug.bind(c) : c?.log ? c.log.bind(c) : noop;
-  const infoImpl = c?.info ? c.info.bind(c) : c?.log ? c.log.bind(c) : noop;
-  const warnImpl = c?.warn ? c.warn.bind(c) : c?.log ? c.log.bind(c) : noop;
-  const errorImpl = c?.error ? c.error.bind(c) : c?.log ? c.log.bind(c) : noop;
-  return {
-    debug: severity >= LEVELS.debug ? debugImpl : noop,
-    info: severity >= LEVELS.info ? infoImpl : noop,
-    warn: severity >= LEVELS.warn ? warnImpl : noop,
-    error: severity >= LEVELS.error ? errorImpl : noop
-  };
-}
-var federationLogger = createConsoleLogger("warn");
-function getLogger() {
-  return federationLogger;
-}
-function setLogger(logger) {
-  federationLogger = logger;
-}
-function setLogLevel(level) {
-  federationLogger = createConsoleLogger(level);
-}
-function configureLogger(options) {
-  if (!options) return;
-  if (options.logger) {
-    setLogger(options.logger);
-    return;
-  }
-  if (options.logLevel) {
-    setLogLevel(options.logLevel);
-  }
-}
 var ACTIVITY_CONTEXT = [
   "https://www.w3.org/ns/activitystreams",
   {
@@ -446,7 +402,7 @@ var SyncEngine = class {
         try {
           listener(event);
         } catch (err) {
-          getLogger().error("[federation] Event listener error:", err);
+          console.error(`Event listener error:`, err);
         }
       }
     }
@@ -1575,7 +1531,7 @@ var HttpPlatformAdapter = class extends BasePlatformAdapter {
       const data = await response.json();
       return this.config.transformers?.get ? this.config.transformers.get(data) : data;
     } catch (err) {
-      getLogger().error(`[federation] Failed to get card ${localId}:`, err);
+      console.error(`Failed to get card ${localId}:`, err);
       return null;
     }
   }
@@ -2127,14 +2083,27 @@ function parseSignatureHeader(header) {
   return {
     keyId: params.keyId,
     algorithm: params.algorithm || "rsa-sha256",
-    headers: (params.headers || "(request-target) host date").trim().split(/\s+/).filter(Boolean).map((h) => h.toLowerCase()),
+    headers: (params.headers || "(request-target) host date").split(" "),
     signature: params.signature
   };
 }
 function buildSigningString(method, path, headers, headerNames) {
   const result = buildSigningStringStrict(method, path, headers, headerNames);
   if (!result.success) {
-    throw new Error(result.error);
+    console.warn(`[federation] Signature verification may fail: ${result.error}`);
+    const lines = [];
+    for (const name of headerNames) {
+      if (name === "(request-target)") {
+        lines.push(`(request-target): ${method.toLowerCase()} ${path}`);
+      } else if (name === "(created)" || name === "(expires)") {
+      } else {
+        const value = headers.get(name);
+        if (value !== null) {
+          lines.push(`${name.toLowerCase()}: ${value}`);
+        }
+      }
+    }
+    return lines.join("\n");
   }
   return result.signingString;
 }
@@ -2143,17 +2112,16 @@ function buildSigningStringStrict(method, path, headers, headerNames) {
   const missingHeaders = [];
   const syntheticHeaders = /* @__PURE__ */ new Set(["(request-target)", "(created)", "(expires)"]);
   for (const name of headerNames) {
-    const normalizedName = name.toLowerCase();
-    if (normalizedName === "(request-target)") {
+    if (name === "(request-target)") {
       lines.push(`(request-target): ${method.toLowerCase()} ${path}`);
-    } else if (normalizedName === "(created)") {
-    } else if (normalizedName === "(expires)") {
+    } else if (name === "(created)") {
+    } else if (name === "(expires)") {
     } else {
-      const value = headers.get(normalizedName);
+      const value = headers.get(name);
       if (value !== null) {
-        lines.push(`${normalizedName}: ${value}`);
-      } else if (!syntheticHeaders.has(normalizedName)) {
-        missingHeaders.push(normalizedName);
+        lines.push(`${name.toLowerCase()}: ${value}`);
+      } else if (!syntheticHeaders.has(name)) {
+        missingHeaders.push(name);
       }
     }
   }
@@ -2174,7 +2142,7 @@ async function verifyHttpSignature(parsed, publicKeyPem, method, path, headers,
     if (options.strictHeaders) {
       const strictResult = buildSigningStringStrict(method, path, headers, parsed.headers);
       if (!strictResult.success) {
-        getLogger().warn(`[federation] Strict header verification failed: ${strictResult.error}`);
+        console.warn(`[federation] Strict header verification failed: ${strictResult.error}`);
         return false;
       }
     }
@@ -2194,7 +2162,7 @@ async function verifyHttpSignature(parsed, publicKeyPem, method, path, headers,
       data
     );
   } catch (error) {
-    getLogger().error("[federation] Signature verification failed:", error);
+    console.error("Signature verification failed:", error);
     return false;
   }
 }
@@ -2332,7 +2300,7 @@ async function importPublicKey(pem) {
       ["verify"]
     );
   } catch (error) {
-    getLogger().error("[federation] Failed to import public key:", error);
+    console.error("Failed to import public key:", error);
     return null;
   }
 }
@@ -2348,7 +2316,7 @@ async function importPrivateKey(pem) {
       ["sign"]
     );
   } catch (error) {
-    getLogger().error("[federation] Failed to import private key:", error);
+    console.error("Failed to import private key:", error);
     return null;
   }
 }
@@ -2377,31 +2345,9 @@ function extractHostFromActorId(actorId) {
     return null;
   }
 }
-function timingSafeEqualString(a, b) {
-  let mismatch = a.length === b.length ? 0 : 1;
-  const maxLen = Math.max(a.length, b.length);
-  for (let i = 0; i < maxLen; i++) {
-    const aCode = a.charCodeAt(i) || 0;
-    const bCode = b.charCodeAt(i) || 0;
-    mismatch |= aCode ^ bCode;
-  }
-  return mismatch === 0;
-}
 async function handleInbox(body, headers, options) {
   assertFederationEnabled("handleInbox");
   try {
-    const normalizedHeaders = headers instanceof Headers ? headers : new Headers(headers);
-    const networkKey = typeof options.networkKey === "string" ? options.networkKey : void 0;
-    const networkKeyHeader = options.networkKeyHeader ?? "X-Foundry-Network-Key";
-    if (networkKey && networkKey.length > 0) {
-      const provided = normalizedHeaders.get(networkKeyHeader);
-      if (!provided || !timingSafeEqualString(provided, networkKey)) {
-        return {
-          accepted: false,
-          error: "Unauthorized: invalid or missing network key"
-        };
-      }
-    }
     if (options.moderationStore) {
       const actorId = typeof body === "object" && body !== null && "actor" in body ? String(body.actor) : null;
       if (actorId) {
@@ -2424,7 +2370,7 @@ async function handleInbox(body, headers, options) {
       };
     }
     if (options.strictMode) {
-      const signatureHeader = normalizedHeaders.get("signature");
+      const signatureHeader = headers instanceof Headers ? headers.get("signature") : headers["signature"] || headers["Signature"];
       if (!signatureHeader) {
         return {
           accepted: false,
@@ -2438,15 +2384,6 @@ async function handleInbox(body, headers, options) {
           error: "Invalid Signature header format"
         };
       }
-      if (networkKey && networkKey.length > 0) {
-        const requiredSigned = networkKeyHeader.toLowerCase();
-        if (!parsedSig.headers.includes(requiredSigned)) {
-          return {
-            accepted: false,
-            error: `Strict mode: signature missing required header: ${requiredSigned}`
-          };
-        }
-      }
       const missingSignedHeaders = REQUIRED_SIGNED_HEADERS.filter(
         (h) => !parsedSig.headers.includes(h)
       );
@@ -2456,14 +2393,14 @@ async function handleInbox(body, headers, options) {
           error: `Strict mode: signature missing required headers: ${missingSignedHeaders.join(", ")}`
         };
       }
-      const dateHeader = normalizedHeaders.get("date");
+      const dateHeader = headers instanceof Headers ? headers.get("date") : headers["date"] || headers["Date"];
       if (!dateHeader) {
         return {
           accepted: false,
           error: "Strict mode: Date header required"
         };
       }
-      const hostHeader = normalizedHeaders.get("host");
+      const hostHeader = headers instanceof Headers ? headers.get("host") : headers["host"] || headers["Host"];
       if (!hostHeader) {
         return {
           accepted: false,
@@ -2506,7 +2443,7 @@ async function handleInbox(body, headers, options) {
           error: `Invalid key ID or actor URL`
         };
       }
-      const digestHeader = normalizedHeaders.get("digest");
+      const digestHeader = headers instanceof Headers ? headers.get("digest") : headers["digest"] || headers["Digest"];
       if (digestHeader) {
         if (!options.rawBody) {
           return {
@@ -2537,13 +2474,13 @@ async function handleInbox(body, headers, options) {
       }
       const method = options.method || "POST";
       const path = options.path || "/inbox";
+      const normalizedHeaders = headers instanceof Headers ? headers : new Headers(headers);
       const isValid = await verifyHttpSignature(
         parsedSig,
         actor.publicKey.publicKeyPem,
         method,
         path,
-        normalizedHeaders,
-        { strictHeaders: true }
+        normalizedHeaders
       );
       if (!isValid) {
         return {
@@ -3622,7 +3559,7 @@ var PolicyEngine = class {
     if (!regex) {
       const safetyWarning = checkRegexSafety(rule.pattern);
       if (safetyWarning) {
-        getLogger().warn(`[moderation] Rule "${rule.name}": ${safetyWarning}`);
+        console.warn(`[moderation] Rule "${rule.name}": ${safetyWarning}`);
       }
       try {
         regex = new RegExp(rule.pattern, "i");
@@ -3862,12 +3799,11 @@ function getEnvVar(name) {
   return void 0;
 }
 function enableFederation(options) {
-  configureLogger(options);
   explicitlyEnabled = true;
   envCheckSkipped = options?.skipEnvCheck ?? false;
   const nodeEnv = getEnvVar("NODE_ENV");
   if (nodeEnv === "development" || nodeEnv === "test") {
-    getLogger().warn(
+    console.warn(
       "[character-foundry/federation] Federation enabled. WARNING: Verify HTTP signatures in production. Do NOT use in production with untrusted inputs without signature validation."
     );
   }
@@ -3931,7 +3867,6 @@ export {
   createAnnounceActivity,
   createArchiveAdapter,
   createBlockActivity,
-  createConsoleLogger,
   createCreateActivity,
   createDeleteActivity,
   createFlagActivity,
@@ -3946,7 +3881,6 @@ export {
   enableFederation,
   generateActivityId,
   generateCardId,
-  getLogger as getFederationLogger,
   handleActor,
   handleInbox,
   handleNodeInfo,
@@ -3959,8 +3893,6 @@ export {
   parseForkActivity,
   parseInstallActivity,
   parseSignatureHeader,
-  setLogLevel as setFederationLogLevel,
-  setLogger as setFederationLogger,
   signRequest,
   stCharacterToCCv3,
   validateBlockActivity as validateBlockActivityFields,