@character-foundry/character-foundry 0.4.3-dev.1766103111 → 0.4.3

package/dist/federation.cjs

@@ -50,7 +50,6 @@ __export(federation_exports, {
   createAnnounceActivity: () => createAnnounceActivity,
   createArchiveAdapter: () => createArchiveAdapter,
   createBlockActivity: () => createBlockActivity,
-  createConsoleLogger: () => createConsoleLogger,
   createCreateActivity: () => createCreateActivity,
   createDeleteActivity: () => createDeleteActivity,
   createFlagActivity: () => createFlagActivity,
@@ -65,7 +64,6 @@ __export(federation_exports, {
   enableFederation: () => enableFederation,
   generateActivityId: () => generateActivityId,
   generateCardId: () => generateCardId,
-  getFederationLogger: () => getLogger,
   handleActor: () => handleActor,
   handleInbox: () => handleInbox,
   handleNodeInfo: () => handleNodeInfo,
@@ -78,8 +76,6 @@ __export(federation_exports, {
   parseForkActivity: () => parseForkActivity,
   parseInstallActivity: () => parseInstallActivity,
   parseSignatureHeader: () => parseSignatureHeader,
-  setFederationLogLevel: () => setLogLevel,
-  setFederationLogger: () => setLogger,
   signRequest: () => signRequest,
   stCharacterToCCv3: () => stCharacterToCCv3,
   validateBlockActivityFields: () => validateBlockActivity,
@@ -137,50 +133,6 @@ function generateUUID() {
 }
 
 // ../federation/dist/index.js
-var LEVELS = {
-  silent: 0,
-  error: 1,
-  warn: 2,
-  info: 3,
-  debug: 4
-};
-var noop = () => {
-};
-function createConsoleLogger(level = "warn") {
-  const severity = LEVELS[level] ?? LEVELS.warn;
-  const hasConsole = typeof console !== "undefined";
-  const c = hasConsole ? console : void 0;
-  const debugImpl = c?.debug ? c.debug.bind(c) : c?.log ? c.log.bind(c) : noop;
-  const infoImpl = c?.info ? c.info.bind(c) : c?.log ? c.log.bind(c) : noop;
-  const warnImpl = c?.warn ? c.warn.bind(c) : c?.log ? c.log.bind(c) : noop;
-  const errorImpl = c?.error ? c.error.bind(c) : c?.log ? c.log.bind(c) : noop;
-  return {
-    debug: severity >= LEVELS.debug ? debugImpl : noop,
-    info: severity >= LEVELS.info ? infoImpl : noop,
-    warn: severity >= LEVELS.warn ? warnImpl : noop,
-    error: severity >= LEVELS.error ? errorImpl : noop
-  };
-}
-var federationLogger = createConsoleLogger("warn");
-function getLogger() {
-  return federationLogger;
-}
-function setLogger(logger) {
-  federationLogger = logger;
-}
-function setLogLevel(level) {
-  federationLogger = createConsoleLogger(level);
-}
-function configureLogger(options) {
-  if (!options) return;
-  if (options.logger) {
-    setLogger(options.logger);
-    return;
-  }
-  if (options.logLevel) {
-    setLogLevel(options.logLevel);
-  }
-}
 var ACTIVITY_CONTEXT = [
   "https://www.w3.org/ns/activitystreams",
   {
@@ -539,7 +491,7 @@ var SyncEngine = class {
         try {
           listener(event);
         } catch (err) {
-          getLogger().error("[federation] Event listener error:", err);
+          console.error(`Event listener error:`, err);
         }
       }
     }
@@ -1668,7 +1620,7 @@ var HttpPlatformAdapter = class extends BasePlatformAdapter {
       const data = await response.json();
       return this.config.transformers?.get ? this.config.transformers.get(data) : data;
     } catch (err) {
-      getLogger().error(`[federation] Failed to get card ${localId}:`, err);
+      console.error(`Failed to get card ${localId}:`, err);
       return null;
     }
   }
@@ -2220,14 +2172,27 @@ function parseSignatureHeader(header) {
   return {
     keyId: params.keyId,
     algorithm: params.algorithm || "rsa-sha256",
-    headers: (params.headers || "(request-target) host date").trim().split(/\s+/).filter(Boolean).map((h) => h.toLowerCase()),
+    headers: (params.headers || "(request-target) host date").split(" "),
     signature: params.signature
   };
 }
 function buildSigningString(method, path, headers, headerNames) {
   const result = buildSigningStringStrict(method, path, headers, headerNames);
   if (!result.success) {
-    throw new Error(result.error);
+    console.warn(`[federation] Signature verification may fail: ${result.error}`);
+    const lines = [];
+    for (const name of headerNames) {
+      if (name === "(request-target)") {
+        lines.push(`(request-target): ${method.toLowerCase()} ${path}`);
+      } else if (name === "(created)" || name === "(expires)") {
+      } else {
+        const value = headers.get(name);
+        if (value !== null) {
+          lines.push(`${name.toLowerCase()}: ${value}`);
+        }
+      }
+    }
+    return lines.join("\n");
   }
   return result.signingString;
 }
@@ -2236,17 +2201,16 @@ function buildSigningStringStrict(method, path, headers, headerNames) {
   const missingHeaders = [];
   const syntheticHeaders = /* @__PURE__ */ new Set(["(request-target)", "(created)", "(expires)"]);
   for (const name of headerNames) {
-    const normalizedName = name.toLowerCase();
-    if (normalizedName === "(request-target)") {
+    if (name === "(request-target)") {
       lines.push(`(request-target): ${method.toLowerCase()} ${path}`);
-    } else if (normalizedName === "(created)") {
-    } else if (normalizedName === "(expires)") {
+    } else if (name === "(created)") {
+    } else if (name === "(expires)") {
     } else {
-      const value = headers.get(normalizedName);
+      const value = headers.get(name);
       if (value !== null) {
-        lines.push(`${normalizedName}: ${value}`);
-      } else if (!syntheticHeaders.has(normalizedName)) {
-        missingHeaders.push(normalizedName);
+        lines.push(`${name.toLowerCase()}: ${value}`);
+      } else if (!syntheticHeaders.has(name)) {
+        missingHeaders.push(name);
       }
     }
   }
@@ -2267,7 +2231,7 @@ async function verifyHttpSignature(parsed, publicKeyPem, method, path, headers,
     if (options.strictHeaders) {
       const strictResult = buildSigningStringStrict(method, path, headers, parsed.headers);
       if (!strictResult.success) {
-        getLogger().warn(`[federation] Strict header verification failed: ${strictResult.error}`);
+        console.warn(`[federation] Strict header verification failed: ${strictResult.error}`);
         return false;
       }
     }
@@ -2287,7 +2251,7 @@ async function verifyHttpSignature(parsed, publicKeyPem, method, path, headers,
       data
     );
   } catch (error) {
-    getLogger().error("[federation] Signature verification failed:", error);
+    console.error("Signature verification failed:", error);
     return false;
   }
 }
@@ -2425,7 +2389,7 @@ async function importPublicKey(pem) {
       ["verify"]
     );
   } catch (error) {
-    getLogger().error("[federation] Failed to import public key:", error);
+    console.error("Failed to import public key:", error);
     return null;
   }
 }
@@ -2441,7 +2405,7 @@ async function importPrivateKey(pem) {
       ["sign"]
     );
   } catch (error) {
-    getLogger().error("[federation] Failed to import private key:", error);
+    console.error("Failed to import private key:", error);
     return null;
   }
 }
@@ -2470,31 +2434,9 @@ function extractHostFromActorId(actorId) {
     return null;
   }
 }
-function timingSafeEqualString(a, b) {
-  let mismatch = a.length === b.length ? 0 : 1;
-  const maxLen = Math.max(a.length, b.length);
-  for (let i = 0; i < maxLen; i++) {
-    const aCode = a.charCodeAt(i) || 0;
-    const bCode = b.charCodeAt(i) || 0;
-    mismatch |= aCode ^ bCode;
-  }
-  return mismatch === 0;
-}
 async function handleInbox(body, headers, options) {
   assertFederationEnabled("handleInbox");
   try {
-    const normalizedHeaders = headers instanceof Headers ? headers : new Headers(headers);
-    const networkKey = typeof options.networkKey === "string" ? options.networkKey : void 0;
-    const networkKeyHeader = options.networkKeyHeader ?? "X-Foundry-Network-Key";
-    if (networkKey && networkKey.length > 0) {
-      const provided = normalizedHeaders.get(networkKeyHeader);
-      if (!provided || !timingSafeEqualString(provided, networkKey)) {
-        return {
-          accepted: false,
-          error: "Unauthorized: invalid or missing network key"
-        };
-      }
-    }
     if (options.moderationStore) {
       const actorId = typeof body === "object" && body !== null && "actor" in body ? String(body.actor) : null;
       if (actorId) {
@@ -2517,7 +2459,7 @@ async function handleInbox(body, headers, options) {
       };
     }
     if (options.strictMode) {
-      const signatureHeader = normalizedHeaders.get("signature");
+      const signatureHeader = headers instanceof Headers ? headers.get("signature") : headers["signature"] || headers["Signature"];
       if (!signatureHeader) {
         return {
           accepted: false,
@@ -2531,15 +2473,6 @@ async function handleInbox(body, headers, options) {
           error: "Invalid Signature header format"
         };
       }
-      if (networkKey && networkKey.length > 0) {
-        const requiredSigned = networkKeyHeader.toLowerCase();
-        if (!parsedSig.headers.includes(requiredSigned)) {
-          return {
-            accepted: false,
-            error: `Strict mode: signature missing required header: ${requiredSigned}`
-          };
-        }
-      }
       const missingSignedHeaders = REQUIRED_SIGNED_HEADERS.filter(
         (h) => !parsedSig.headers.includes(h)
       );
@@ -2549,14 +2482,14 @@ async function handleInbox(body, headers, options) {
           error: `Strict mode: signature missing required headers: ${missingSignedHeaders.join(", ")}`
         };
       }
-      const dateHeader = normalizedHeaders.get("date");
+      const dateHeader = headers instanceof Headers ? headers.get("date") : headers["date"] || headers["Date"];
       if (!dateHeader) {
         return {
           accepted: false,
           error: "Strict mode: Date header required"
         };
       }
-      const hostHeader = normalizedHeaders.get("host");
+      const hostHeader = headers instanceof Headers ? headers.get("host") : headers["host"] || headers["Host"];
       if (!hostHeader) {
         return {
           accepted: false,
@@ -2599,7 +2532,7 @@ async function handleInbox(body, headers, options) {
           error: `Invalid key ID or actor URL`
         };
       }
-      const digestHeader = normalizedHeaders.get("digest");
+      const digestHeader = headers instanceof Headers ? headers.get("digest") : headers["digest"] || headers["Digest"];
       if (digestHeader) {
         if (!options.rawBody) {
           return {
@@ -2630,13 +2563,13 @@ async function handleInbox(body, headers, options) {
       }
       const method = options.method || "POST";
       const path = options.path || "/inbox";
+      const normalizedHeaders = headers instanceof Headers ? headers : new Headers(headers);
       const isValid = await verifyHttpSignature(
         parsedSig,
         actor.publicKey.publicKeyPem,
         method,
         path,
-        normalizedHeaders,
-        { strictHeaders: true }
+        normalizedHeaders
       );
       if (!isValid) {
         return {
@@ -3715,7 +3648,7 @@ var PolicyEngine = class {
     if (!regex) {
       const safetyWarning = checkRegexSafety(rule.pattern);
       if (safetyWarning) {
-        getLogger().warn(`[moderation] Rule "${rule.name}": ${safetyWarning}`);
+        console.warn(`[moderation] Rule "${rule.name}": ${safetyWarning}`);
       }
       try {
         regex = new RegExp(rule.pattern, "i");
@@ -3955,12 +3888,11 @@ function getEnvVar(name) {
   return void 0;
 }
 function enableFederation(options) {
-  configureLogger(options);
   explicitlyEnabled = true;
   envCheckSkipped = options?.skipEnvCheck ?? false;
   const nodeEnv = getEnvVar("NODE_ENV");
   if (nodeEnv === "development" || nodeEnv === "test") {
-    getLogger().warn(
+    console.warn(
       "[character-foundry/federation] Federation enabled. WARNING: Verify HTTP signatures in production. Do NOT use in production with untrusted inputs without signature validation."
     );
   }