@fedify/fedify 1.10.3 → 1.10.5

package/dist/federation/keycache.test.js

@@ -3,14 +3,14 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey } from "../type-BVpqRkFR.js";
+import { CryptographicKey, Multikey } from "../type-DUhon7qK.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../lookup-CyI7sF0p.js";
-import { KvKeyCache } from "../keycache-Cm9Ke5JM.js";
-import { test } from "../testing-DoQEBY_a.js";
+import "../lookup-CySNcNcC.js";
+import { KvKeyCache } from "../keycache-hSs_XFSb.js";
+import { test } from "../testing-C1GIraJh.js";
 
 //#region src/federation/keycache.test.ts
 test("KvKeyCache.set()", async () => {
@@ -30,6 +30,7 @@ test("KvKeyCache.set()", async () => {
 	});
 	await cache.set(new URL("https://example.com/null"), null);
 	assert(cache.nullKeys.has("https://example.com/null"));
+	assertEquals(await kv.get(["pk", "https://example.com/null"]), { _fedify: "key-unavailable" });
 });
 test("KvKeyCache.get()", async () => {
 	const kv = new MemoryKvStore();
@@ -52,6 +53,9 @@ test("KvKeyCache.get()", async () => {
 	assertEquals(multikey?.id?.href, "https://example.com/key2");
 	cache.nullKeys.add("https://example.com/null");
 	assertEquals(await cache.get(new URL("https://example.com/null")), null);
+	await kv.set(["pk", "https://example.com/null2"], { _fedify: "key-unavailable" });
+	const cache2 = new KvKeyCache(kv, ["pk"]);
+	assertEquals(await cache2.get(new URL("https://example.com/null2")), null);
 });
 
 //#endregion

package/dist/federation/kv.test.js

@@ -3,13 +3,13 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-BVpqRkFR.js";
+import "../type-DUhon7qK.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../lookup-CyI7sF0p.js";
-import { test } from "../testing-DoQEBY_a.js";
+import "../lookup-CySNcNcC.js";
+import { test } from "../testing-C1GIraJh.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/federation/middleware.test.js

@@ -3,37 +3,37 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, Announce, Create, FetchError, Invite, Multikey, Note, Object as Object$1, Offer, Person, fetchDocumentLoader, getTypeId } from "../type-BVpqRkFR.js";
+import { Activity, Announce, Create, FetchError, Invite, Multikey, Note, Object as Object$1, Offer, Person, fetchDocumentLoader, getTypeId } from "../type-DUhon7qK.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "../middleware-CmaZY01E.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "../middleware-C5emnCh-.js";
 import "../semver-dArNLkR9.js";
-import "../client-BTEYHgMp.js";
-import { RouterError, lookupObject } from "../lookup-CyI7sF0p.js";
+import "../client-BgCucCG7.js";
+import { RouterError, lookupObject } from "../lookup-CySNcNcC.js";
 import "../types-BIgY6c-l.js";
-import "../actor-BdLqN1gg.js";
-import "../key-DrXt0cYP.js";
-import { signRequest, verifyRequest } from "../http-DplZ1SHu.js";
-import { getAuthenticatedDocumentLoader } from "../authdocloader-CLAhEwIS.js";
-import { detachSignature, signJsonLd, verifyJsonLd } from "../ld-DzleVPgo.js";
-import { doesActorOwnKey } from "../owner-n8GJaHF9.js";
-import { signObject, verifyObject } from "../proof-D7qegtQm.js";
-import "../inbox-BxnmUryw.js";
-import "../builder-4kTkpLYJ.js";
+import "../actor-Ch9BTg3N.js";
+import "../key-Cg0kO4dA.js";
+import { signRequest, verifyRequest } from "../http-CxiIW4rD.js";
+import { getAuthenticatedDocumentLoader } from "../authdocloader-COFZT9Wh.js";
+import { detachSignature, signJsonLd, verifyJsonLd } from "../ld-b16r91YS.js";
+import { doesActorOwnKey } from "../owner-Bs-sPbHX.js";
+import { signObject, verifyObject } from "../proof-SgRikE_Y.js";
+import "../inbox-DcDIqTbR.js";
+import "../builder-YD0q32nG.js";
 import "../collection-CSzG2j1P.js";
-import "../keycache-Cm9Ke5JM.js";
+import "../keycache-hSs_XFSb.js";
 import "../retry-D4GJ670a.js";
-import "../send-CcNf5O--.js";
-import { mockDocumentLoader, test } from "../testing-DoQEBY_a.js";
+import "../send-C0gFHa2i.js";
+import { mockDocumentLoader, test } from "../testing-C1GIraJh.js";
 import { assertStrictEquals } from "../std__assert-X-_kMxKM.js";
 import { assertFalse, assertRejects } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";
 import { assertNotEquals } from "../assert_not_equals-f3m3epl3.js";
 import { assertThrows } from "../assert_throws-BOO88avQ.js";
-import { ed25519Multikey, ed25519PrivateKey, ed25519PublicKey, rsaPrivateKey2, rsaPrivateKey3, rsaPublicKey2, rsaPublicKey3 } from "../keys-C6gRMT25.js";
-import { esm_default } from "../esm-gCncx4Xn.js";
+import { ed25519Multikey, ed25519PrivateKey, ed25519PublicKey, rsaPrivateKey2, rsaPrivateKey3, rsaPublicKey2, rsaPublicKey3 } from "../keys-CElJez9H.js";
+import { esm_default } from "../esm-iGH0sRsE.js";
 
 //#region src/testing/fixtures/example.com/person.json
 var __context$1 = ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/v1"];

package/dist/federation/mod.cjs

@@ -3,17 +3,17 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 require('../transformers-CoBS-oFG.cjs');
-require('../docloader-CNsCwkxG.cjs');
-require('../actor-DOYpLAOc.cjs');
-const require_middleware = require('../middleware-xSPzx3UI.cjs');
-require('../lookup-4na242fe.cjs');
-require('../key-Cdysd1b9.cjs');
-require('../http-CcPpEG46.cjs');
-require('../proof-tEhbsByx.cjs');
+require('../docloader-irBWMSOZ.cjs');
+require('../actor-CjkHF7Cj.cjs');
+const require_middleware = require('../middleware-Dxo56yae.cjs');
+require('../lookup-Bfq9Jpm0.cjs');
+require('../key-dNFkodH5.cjs');
+require('../http-CQAqR_vx.cjs');
+require('../proof-BvQS195q.cjs');
 const require_federation = require('../federation-C15gGOh1.cjs');
-require('../types-oz5uR2vt.cjs');
-require('../authdocloader-B1zJPoS6.cjs');
-require('../vocab-i1kbdwbr.cjs');
+require('../types-BgUCCngg.cjs');
+require('../authdocloader-zc5ibOmU.cjs');
+require('../vocab-5i6DEIi6.cjs');
 
 exports.InProcessMessageQueue = require_federation.InProcessMessageQueue;
 exports.MemoryKvStore = require_federation.MemoryKvStore;

package/dist/federation/mod.js

@@ -3,16 +3,16 @@
           import { URLPattern } from "urlpattern-polyfill";
         
 import "../transformers-BFT6d7J5.js";
-import "../docloader-BRNFZnTb.js";
-import "../actor-jvzet8bO.js";
-import { Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-BXUQTcBK.js";
-import "../lookup-CKEj5FWO.js";
-import "../key-gldrk_5Z.js";
-import "../http-C3_5amY1.js";
-import "../proof-Bx8lj3_m.js";
+import "../docloader-BETPdM09.js";
+import "../actor-CQdxP8N-.js";
+import { Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-Bs4xDuXR.js";
+import "../lookup-CiSAeWJl.js";
+import "../key-I-ibyaZH.js";
+import "../http-PgdBoDIj.js";
+import "../proof-flD2DeA-.js";
 import { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue } from "../federation-K-xsO03l.js";
-import "../types-BsFw6XaG.js";
-import "../authdocloader-Ddqc8DWD.js";
-import "../vocab-qsTMTRUj.js";
+import "../types-Bu-epI-z.js";
+import "../authdocloader-fR-Fqcpa.js";
+import "../vocab-CBavAdew.js";
 
 export { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue, Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable };

package/dist/federation/mq.test.js

@@ -3,12 +3,12 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-BVpqRkFR.js";
+import "../type-DUhon7qK.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import "../lookup-CyI7sF0p.js";
-import { test } from "../testing-DoQEBY_a.js";
+import "../lookup-CySNcNcC.js";
+import { test } from "../testing-C1GIraJh.js";
 import { assertGreater, assertGreaterOrEqual } from "../std__assert-X-_kMxKM.js";
 import { assertFalse } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/federation/retry.test.js

@@ -3,11 +3,11 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-BVpqRkFR.js";
+import "../type-DUhon7qK.js";
 import { AssertionError, assertEquals } from "../assert_equals-DSbWqCm3.js";
-import "../lookup-CyI7sF0p.js";
+import "../lookup-CySNcNcC.js";
 import { createExponentialBackoffPolicy } from "../retry-D4GJ670a.js";
-import { test } from "../testing-DoQEBY_a.js";
+import { test } from "../testing-C1GIraJh.js";
 import { assertNotEquals } from "../assert_not_equals-f3m3epl3.js";
 
 //#region src/federation/retry.test.ts

package/dist/federation/router.test.js

@@ -3,12 +3,12 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-BVpqRkFR.js";
+import "../type-DUhon7qK.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import { Router, RouterError } from "../lookup-CyI7sF0p.js";
-import { test } from "../testing-DoQEBY_a.js";
+import { Router, RouterError } from "../lookup-CySNcNcC.js";
+import { test } from "../testing-C1GIraJh.js";
 import "../std__assert-X-_kMxKM.js";
 import { assertFalse } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/federation/send.test.js

@@ -3,25 +3,25 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, Application, Endpoints, Group, Person, Service } from "../type-BVpqRkFR.js";
+import { Activity, Application, Endpoints, Group, Person, Service } from "../type-DUhon7qK.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import "../lookup-CyI7sF0p.js";
-import "../actor-BdLqN1gg.js";
-import "../key-DrXt0cYP.js";
-import { verifyRequest } from "../http-DplZ1SHu.js";
-import { doesActorOwnKey } from "../owner-n8GJaHF9.js";
-import { extractInboxes, sendActivity } from "../send-CcNf5O--.js";
-import { mockDocumentLoader, test } from "../testing-DoQEBY_a.js";
+import "../lookup-CySNcNcC.js";
+import "../actor-Ch9BTg3N.js";
+import "../key-Cg0kO4dA.js";
+import { verifyRequest } from "../http-CxiIW4rD.js";
+import { doesActorOwnKey } from "../owner-Bs-sPbHX.js";
+import { extractInboxes, sendActivity } from "../send-C0gFHa2i.js";
+import { mockDocumentLoader, test } from "../testing-C1GIraJh.js";
 import "../std__assert-X-_kMxKM.js";
 import { assertFalse, assertRejects } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";
 import { assertNotEquals } from "../assert_not_equals-f3m3epl3.js";
 import "../assert_throws-BOO88avQ.js";
-import { ed25519Multikey, ed25519PrivateKey, rsaPrivateKey2, rsaPublicKey2 } from "../keys-C6gRMT25.js";
+import { ed25519Multikey, ed25519PrivateKey, rsaPrivateKey2, rsaPublicKey2 } from "../keys-CElJez9H.js";
 import { createTestTracerProvider } from "../otel-Chy5T2Xh.js";
-import { esm_default } from "../esm-gCncx4Xn.js";
+import { esm_default } from "../esm-iGH0sRsE.js";
 
 //#region src/federation/send.test.ts
 test("extractInboxes()", () => {

package/dist/{http-CcPpEG46.cjs → http-CQAqR_vx.cjs}

@@ -3,9 +3,9 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_docloader = require('./docloader-CNsCwkxG.cjs');
-const require_actor = require('./actor-DOYpLAOc.cjs');
-const require_key = require('./key-Cdysd1b9.cjs');
+const require_docloader = require('./docloader-irBWMSOZ.cjs');
+const require_actor = require('./actor-CjkHF7Cj.cjs');
+const require_key = require('./key-dNFkodH5.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 const byte_encodings_base64 = require_chunk.__toESM(require("byte-encodings/base64"));
@@ -14,6 +14,7 @@ const __opentelemetry_semantic_conventions = require_chunk.__toESM(require("@ope
 const structured_field_values = require_chunk.__toESM(require("structured-field-values"));
 
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -725,7 +726,11 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -740,11 +745,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new require_docloader.FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new require_docloader.FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		(0, __logtape_logtape.getLogger)([
@@ -768,11 +776,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new require_docloader.FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new require_docloader.FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{http-DplZ1SHu.js → http-CxiIW4rD.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, deno_default } from "./type-BVpqRkFR.js";
-import { fetchKey, validateCryptoKey } from "./key-DrXt0cYP.js";
+import { CryptographicKey, FetchError, deno_default } from "./type-DUhon7qK.js";
+import { fetchKey, validateCryptoKey } from "./key-Cg0kO4dA.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
@@ -13,6 +13,7 @@ import { encodeHex } from "byte-encodings/hex";
 import { Item, decodeDict, encodeItem } from "structured-field-values";
 
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -724,7 +725,11 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -739,11 +744,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		getLogger([
@@ -767,11 +775,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{http-C3_5amY1.js → http-PgdBoDIj.js}

@@ -2,9 +2,9 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { deno_default } from "./docloader-BRNFZnTb.js";
-import { CryptographicKey } from "./actor-jvzet8bO.js";
-import { fetchKey, validateCryptoKey } from "./key-gldrk_5Z.js";
+import { FetchError, deno_default } from "./docloader-BETPdM09.js";
+import { CryptographicKey } from "./actor-CQdxP8N-.js";
+import { fetchKey, validateCryptoKey } from "./key-I-ibyaZH.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
@@ -13,6 +13,7 @@ import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } fro
 import { Item, decodeDict, encodeItem } from "structured-field-values";
 
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -724,7 +725,11 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -739,11 +744,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		getLogger([
@@ -767,11 +775,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{inbox-BxnmUryw.js → inbox-DcDIqTbR.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, deno_default, getTypeId } from "./type-BVpqRkFR.js";
+import { Activity, deno_default, getTypeId } from "./type-DUhon7qK.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 

package/dist/{key-MUjY4i2E.js → key-Bnod5wJl.js}

@@ -2,9 +2,9 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import "./docloader-BRNFZnTb.js";
-import "./actor-jvzet8bO.js";
-import "./lookup-CKEj5FWO.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-gldrk_5Z.js";
+import "./docloader-BETPdM09.js";
+import "./actor-CQdxP8N-.js";
+import "./lookup-CiSAeWJl.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-I-ibyaZH.js";
 
 export { validateCryptoKey };

package/dist/{key-Kt3kKq85.js → key-C6swTX71.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "./type-BVpqRkFR.js";
-import "./actor-BdLqN1gg.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-DrXt0cYP.js";
+import "./type-DUhon7qK.js";
+import "./actor-Ch9BTg3N.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-Cg0kO4dA.js";
 
 export { validateCryptoKey };

package/dist/{key-DrXt0cYP.js → key-Cg0kO4dA.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Object as Object$1, deno_default, getDocumentLoader } from "./type-BVpqRkFR.js";
-import { isActor } from "./actor-BdLqN1gg.js";
+import { CryptographicKey, Object as Object$1, deno_default, getDocumentLoader } from "./type-DUhon7qK.js";
+import { isActor } from "./actor-Ch9BTg3N.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{key-gldrk_5Z.js → key-I-ibyaZH.js}

@@ -2,8 +2,8 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { deno_default, getDocumentLoader } from "./docloader-BRNFZnTb.js";
-import { CryptographicKey, Object as Object$1, isActor } from "./actor-jvzet8bO.js";
+import { deno_default, getDocumentLoader } from "./docloader-BETPdM09.js";
+import { CryptographicKey, Object as Object$1, isActor } from "./actor-CQdxP8N-.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/key-_Uq8gkmM.cjs

@@ -0,0 +1,10 @@
+
+          const { Temporal } = require("@js-temporal/polyfill");
+          const { URLPattern } = require("urlpattern-polyfill");
+        
+require('./docloader-irBWMSOZ.cjs');
+require('./actor-CjkHF7Cj.cjs');
+require('./lookup-Bfq9Jpm0.cjs');
+const require_key = require('./key-dNFkodH5.cjs');
+
+exports.validateCryptoKey = require_key.validateCryptoKey;

package/dist/{key-Cdysd1b9.cjs → key-dNFkodH5.cjs}

@@ -3,8 +3,8 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_docloader = require('./docloader-CNsCwkxG.cjs');
-const require_actor = require('./actor-DOYpLAOc.cjs');
+const require_docloader = require('./docloader-irBWMSOZ.cjs');
+const require_actor = require('./actor-CjkHF7Cj.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 

package/dist/{keycache-Cm9Ke5JM.js → keycache-hSs_XFSb.js}

@@ -3,9 +3,14 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey } from "./type-BVpqRkFR.js";
+import { CryptographicKey, Multikey } from "./type-DUhon7qK.js";
 
 //#region src/federation/keycache.ts
+const NULL_KEY_CACHE_VALUE = { _fedify: "key-unavailable" };
+const NULL_KEY_CACHE_TTL = Temporal.Duration.from({ minutes: 5 });
+function isNullKeyCacheValue(value) {
+	return typeof value === "object" && value != null && "_fedify" in value && value._fedify === NULL_KEY_CACHE_VALUE._fedify;
+}
 var KvKeyCache = class {
 	kv;
 	prefix;
@@ -21,6 +26,10 @@ var KvKeyCache = class {
 		if (this.nullKeys.has(keyId.href)) return null;
 		const serialized = await this.kv.get([...this.prefix, keyId.href]);
 		if (serialized == null) return void 0;
+		if (isNullKeyCacheValue(serialized)) {
+			this.nullKeys.add(keyId.href);
+			return null;
+		}
 		try {
 			return await CryptographicKey.fromJsonLd(serialized, this.options);
 		} catch {
@@ -35,7 +44,7 @@ var KvKeyCache = class {
 	async set(keyId, key) {
 		if (key == null) {
 			this.nullKeys.add(keyId.href);
-			await this.kv.delete([...this.prefix, keyId.href]);
+			await this.kv.set([...this.prefix, keyId.href], NULL_KEY_CACHE_VALUE, { ttl: NULL_KEY_CACHE_TTL });
 			return;
 		}
 		this.nullKeys.delete(keyId.href);

package/dist/{keys-C6gRMT25.js → keys-CElJez9H.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey, importSpki } from "./type-BVpqRkFR.js";
+import { CryptographicKey, Multikey, importSpki } from "./type-DUhon7qK.js";
 
 //#region src/testing/keys.ts
 const rsaPublicKey1 = new CryptographicKey({

package/dist/{ld-DzleVPgo.js → ld-b16r91YS.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, CryptographicKey, Object as Object$1, deno_default, getDocumentLoader, getTypeId } from "./type-BVpqRkFR.js";
-import { fetchKey, validateCryptoKey } from "./key-DrXt0cYP.js";
+import { Activity, CryptographicKey, Object as Object$1, deno_default, getDocumentLoader, getTypeId } from "./type-DUhon7qK.js";
+import { fetchKey, validateCryptoKey } from "./key-Cg0kO4dA.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";

package/dist/{lookup-4na242fe.cjs → lookup-Bfq9Jpm0.cjs}

@@ -3,7 +3,7 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_docloader = require('./docloader-CNsCwkxG.cjs');
+const require_docloader = require('./docloader-irBWMSOZ.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 

package/dist/{lookup-CKEj5FWO.js → lookup-CiSAeWJl.js}

@@ -2,7 +2,7 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-BRNFZnTb.js";
+import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-BETPdM09.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";