@fedify/fedify 1.10.4 → 1.10.5

package/dist/federation/mod.js

@@ -3,16 +3,16 @@
           import { URLPattern } from "urlpattern-polyfill";
         
 import "../transformers-BFT6d7J5.js";
-import "../docloader-BH4pzZZC.js";
-import "../actor-BOBYD2WU.js";
-import { Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-ZywRHmGd.js";
-import "../lookup-CBeEjsrU.js";
-import "../key-DY-1H5d9.js";
-import "../http-DbXPDTX4.js";
-import "../proof-BZJajwfx.js";
+import "../docloader-BETPdM09.js";
+import "../actor-CQdxP8N-.js";
+import { Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-Bs4xDuXR.js";
+import "../lookup-CiSAeWJl.js";
+import "../key-I-ibyaZH.js";
+import "../http-PgdBoDIj.js";
+import "../proof-flD2DeA-.js";
 import { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue } from "../federation-K-xsO03l.js";
-import "../types-D8QbEexz.js";
-import "../authdocloader-DAkeYWim.js";
-import "../vocab-CKa0etLd.js";
+import "../types-Bu-epI-z.js";
+import "../authdocloader-fR-Fqcpa.js";
+import "../vocab-CBavAdew.js";
 
 export { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue, Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable };

package/dist/federation/mq.test.js

@@ -3,12 +3,12 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-BJ212aq2.js";
+import "../type-DUhon7qK.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import "../lookup-DqqwtRxy.js";
-import { test } from "../testing-BHk-TOca.js";
+import "../lookup-CySNcNcC.js";
+import { test } from "../testing-C1GIraJh.js";
 import { assertGreater, assertGreaterOrEqual } from "../std__assert-X-_kMxKM.js";
 import { assertFalse } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/federation/retry.test.js

@@ -3,11 +3,11 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-BJ212aq2.js";
+import "../type-DUhon7qK.js";
 import { AssertionError, assertEquals } from "../assert_equals-DSbWqCm3.js";
-import "../lookup-DqqwtRxy.js";
+import "../lookup-CySNcNcC.js";
 import { createExponentialBackoffPolicy } from "../retry-D4GJ670a.js";
-import { test } from "../testing-BHk-TOca.js";
+import { test } from "../testing-C1GIraJh.js";
 import { assertNotEquals } from "../assert_not_equals-f3m3epl3.js";
 
 //#region src/federation/retry.test.ts

package/dist/federation/router.test.js

@@ -3,12 +3,12 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-BJ212aq2.js";
+import "../type-DUhon7qK.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import { Router, RouterError } from "../lookup-DqqwtRxy.js";
-import { test } from "../testing-BHk-TOca.js";
+import { Router, RouterError } from "../lookup-CySNcNcC.js";
+import { test } from "../testing-C1GIraJh.js";
 import "../std__assert-X-_kMxKM.js";
 import { assertFalse } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/federation/send.test.js

@@ -3,25 +3,25 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, Application, Endpoints, Group, Person, Service } from "../type-BJ212aq2.js";
+import { Activity, Application, Endpoints, Group, Person, Service } from "../type-DUhon7qK.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import "../lookup-DqqwtRxy.js";
-import "../actor-Snz2FxRV.js";
-import "../key-Bidhpg7V.js";
-import { verifyRequest } from "../http-n5BTcxeh.js";
-import { doesActorOwnKey } from "../owner-DUbJSrOH.js";
-import { extractInboxes, sendActivity } from "../send-BP6BnZB0.js";
-import { mockDocumentLoader, test } from "../testing-BHk-TOca.js";
+import "../lookup-CySNcNcC.js";
+import "../actor-Ch9BTg3N.js";
+import "../key-Cg0kO4dA.js";
+import { verifyRequest } from "../http-CxiIW4rD.js";
+import { doesActorOwnKey } from "../owner-Bs-sPbHX.js";
+import { extractInboxes, sendActivity } from "../send-C0gFHa2i.js";
+import { mockDocumentLoader, test } from "../testing-C1GIraJh.js";
 import "../std__assert-X-_kMxKM.js";
 import { assertFalse, assertRejects } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";
 import { assertNotEquals } from "../assert_not_equals-f3m3epl3.js";
 import "../assert_throws-BOO88avQ.js";
-import { ed25519Multikey, ed25519PrivateKey, rsaPrivateKey2, rsaPublicKey2 } from "../keys-kLtROwLY.js";
+import { ed25519Multikey, ed25519PrivateKey, rsaPrivateKey2, rsaPublicKey2 } from "../keys-CElJez9H.js";
 import { createTestTracerProvider } from "../otel-Chy5T2Xh.js";
-import { esm_default } from "../esm-CbGx2KcW.js";
+import { esm_default } from "../esm-iGH0sRsE.js";
 
 //#region src/federation/send.test.ts
 test("extractInboxes()", () => {

package/dist/{http-DmxJlZvy.cjs → http-CQAqR_vx.cjs}

@@ -3,9 +3,9 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_docloader = require('./docloader-C54TKiQx.cjs');
-const require_actor = require('./actor-Bj7QfjMG.cjs');
-const require_key = require('./key-CdyBP8cw.cjs');
+const require_docloader = require('./docloader-irBWMSOZ.cjs');
+const require_actor = require('./actor-CjkHF7Cj.cjs');
+const require_key = require('./key-dNFkodH5.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 const byte_encodings_base64 = require_chunk.__toESM(require("byte-encodings/base64"));
@@ -14,6 +14,7 @@ const __opentelemetry_semantic_conventions = require_chunk.__toESM(require("@ope
 const structured_field_values = require_chunk.__toESM(require("structured-field-values"));
 
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -725,7 +726,11 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -740,11 +745,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new require_docloader.FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new require_docloader.FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		(0, __logtape_logtape.getLogger)([
@@ -768,11 +776,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new require_docloader.FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new require_docloader.FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{http-n5BTcxeh.js → http-CxiIW4rD.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, deno_default } from "./type-BJ212aq2.js";
-import { fetchKey, validateCryptoKey } from "./key-Bidhpg7V.js";
+import { CryptographicKey, FetchError, deno_default } from "./type-DUhon7qK.js";
+import { fetchKey, validateCryptoKey } from "./key-Cg0kO4dA.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
@@ -13,6 +13,7 @@ import { encodeHex } from "byte-encodings/hex";
 import { Item, decodeDict, encodeItem } from "structured-field-values";
 
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -724,7 +725,11 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -739,11 +744,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		getLogger([
@@ -767,11 +775,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{http-DbXPDTX4.js → http-PgdBoDIj.js}

@@ -2,9 +2,9 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { deno_default } from "./docloader-BH4pzZZC.js";
-import { CryptographicKey } from "./actor-BOBYD2WU.js";
-import { fetchKey, validateCryptoKey } from "./key-DY-1H5d9.js";
+import { FetchError, deno_default } from "./docloader-BETPdM09.js";
+import { CryptographicKey } from "./actor-CQdxP8N-.js";
+import { fetchKey, validateCryptoKey } from "./key-I-ibyaZH.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
@@ -13,6 +13,7 @@ import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } fro
 import { Item, decodeDict, encodeItem } from "structured-field-values";
 
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -724,7 +725,11 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -739,11 +744,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		getLogger([
@@ -767,11 +775,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{inbox-CQcSx4I9.js → inbox-DcDIqTbR.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, deno_default, getTypeId } from "./type-BJ212aq2.js";
+import { Activity, deno_default, getTypeId } from "./type-DUhon7qK.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 

package/dist/{key-BLNbwA_2.js → key-Bnod5wJl.js}

@@ -2,9 +2,9 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import "./docloader-BH4pzZZC.js";
-import "./actor-BOBYD2WU.js";
-import "./lookup-CBeEjsrU.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-DY-1H5d9.js";
+import "./docloader-BETPdM09.js";
+import "./actor-CQdxP8N-.js";
+import "./lookup-CiSAeWJl.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-I-ibyaZH.js";
 
 export { validateCryptoKey };

package/dist/{key-CPqemOR2.js → key-C6swTX71.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "./type-BJ212aq2.js";
-import "./actor-Snz2FxRV.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-Bidhpg7V.js";
+import "./type-DUhon7qK.js";
+import "./actor-Ch9BTg3N.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-Cg0kO4dA.js";
 
 export { validateCryptoKey };

package/dist/{key-Bidhpg7V.js → key-Cg0kO4dA.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Object as Object$1, deno_default, getDocumentLoader } from "./type-BJ212aq2.js";
-import { isActor } from "./actor-Snz2FxRV.js";
+import { CryptographicKey, Object as Object$1, deno_default, getDocumentLoader } from "./type-DUhon7qK.js";
+import { isActor } from "./actor-Ch9BTg3N.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{key-DY-1H5d9.js → key-I-ibyaZH.js}

@@ -2,8 +2,8 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { deno_default, getDocumentLoader } from "./docloader-BH4pzZZC.js";
-import { CryptographicKey, Object as Object$1, isActor } from "./actor-BOBYD2WU.js";
+import { deno_default, getDocumentLoader } from "./docloader-BETPdM09.js";
+import { CryptographicKey, Object as Object$1, isActor } from "./actor-CQdxP8N-.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/key-_Uq8gkmM.cjs

@@ -0,0 +1,10 @@
+
+          const { Temporal } = require("@js-temporal/polyfill");
+          const { URLPattern } = require("urlpattern-polyfill");
+        
+require('./docloader-irBWMSOZ.cjs');
+require('./actor-CjkHF7Cj.cjs');
+require('./lookup-Bfq9Jpm0.cjs');
+const require_key = require('./key-dNFkodH5.cjs');
+
+exports.validateCryptoKey = require_key.validateCryptoKey;

package/dist/{key-CdyBP8cw.cjs → key-dNFkodH5.cjs}

@@ -3,8 +3,8 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_docloader = require('./docloader-C54TKiQx.cjs');
-const require_actor = require('./actor-Bj7QfjMG.cjs');
+const require_docloader = require('./docloader-irBWMSOZ.cjs');
+const require_actor = require('./actor-CjkHF7Cj.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 

package/dist/{keycache-DtptNYtI.js → keycache-hSs_XFSb.js}

@@ -3,9 +3,14 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey } from "./type-BJ212aq2.js";
+import { CryptographicKey, Multikey } from "./type-DUhon7qK.js";
 
 //#region src/federation/keycache.ts
+const NULL_KEY_CACHE_VALUE = { _fedify: "key-unavailable" };
+const NULL_KEY_CACHE_TTL = Temporal.Duration.from({ minutes: 5 });
+function isNullKeyCacheValue(value) {
+	return typeof value === "object" && value != null && "_fedify" in value && value._fedify === NULL_KEY_CACHE_VALUE._fedify;
+}
 var KvKeyCache = class {
 	kv;
 	prefix;
@@ -21,6 +26,10 @@ var KvKeyCache = class {
 		if (this.nullKeys.has(keyId.href)) return null;
 		const serialized = await this.kv.get([...this.prefix, keyId.href]);
 		if (serialized == null) return void 0;
+		if (isNullKeyCacheValue(serialized)) {
+			this.nullKeys.add(keyId.href);
+			return null;
+		}
 		try {
 			return await CryptographicKey.fromJsonLd(serialized, this.options);
 		} catch {
@@ -35,7 +44,7 @@ var KvKeyCache = class {
 	async set(keyId, key) {
 		if (key == null) {
 			this.nullKeys.add(keyId.href);
-			await this.kv.delete([...this.prefix, keyId.href]);
+			await this.kv.set([...this.prefix, keyId.href], NULL_KEY_CACHE_VALUE, { ttl: NULL_KEY_CACHE_TTL });
 			return;
 		}
 		this.nullKeys.delete(keyId.href);

package/dist/{keys-kLtROwLY.js → keys-CElJez9H.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey, importSpki } from "./type-BJ212aq2.js";
+import { CryptographicKey, Multikey, importSpki } from "./type-DUhon7qK.js";
 
 //#region src/testing/keys.ts
 const rsaPublicKey1 = new CryptographicKey({

package/dist/{ld-8dX3VuDg.js → ld-b16r91YS.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, CryptographicKey, Object as Object$1, deno_default, getDocumentLoader, getTypeId } from "./type-BJ212aq2.js";
-import { fetchKey, validateCryptoKey } from "./key-Bidhpg7V.js";
+import { Activity, CryptographicKey, Object as Object$1, deno_default, getDocumentLoader, getTypeId } from "./type-DUhon7qK.js";
+import { fetchKey, validateCryptoKey } from "./key-Cg0kO4dA.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";

package/dist/{lookup-DpuJzIOl.cjs → lookup-Bfq9Jpm0.cjs}

@@ -3,7 +3,7 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_docloader = require('./docloader-C54TKiQx.cjs');
+const require_docloader = require('./docloader-irBWMSOZ.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 

package/dist/{lookup-CBeEjsrU.js → lookup-CiSAeWJl.js}

@@ -2,7 +2,7 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-BH4pzZZC.js";
+import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-BETPdM09.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{lookup-DqqwtRxy.js → lookup-CySNcNcC.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Object as Object$1, deno_default, getDocumentLoader, getTypeId, lookupWebFinger } from "./type-BJ212aq2.js";
+import { Object as Object$1, deno_default, getDocumentLoader, getTypeId, lookupWebFinger } from "./type-DUhon7qK.js";
 import { cloneDeep, delay } from "es-toolkit";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/middleware-BWsOtDIF.cjs

@@ -0,0 +1,17 @@
+
+          const { Temporal } = require("@js-temporal/polyfill");
+          const { URLPattern } = require("urlpattern-polyfill");
+        
+require('./transformers-CoBS-oFG.cjs');
+require('./docloader-irBWMSOZ.cjs');
+require('./actor-CjkHF7Cj.cjs');
+const require_middleware = require('./middleware-Dxo56yae.cjs');
+require('./lookup-Bfq9Jpm0.cjs');
+require('./key-dNFkodH5.cjs');
+require('./http-CQAqR_vx.cjs');
+require('./proof-BvQS195q.cjs');
+require('./types-BgUCCngg.cjs');
+require('./authdocloader-zc5ibOmU.cjs');
+require('./vocab-5i6DEIi6.cjs');
+
+exports.FederationImpl = require_middleware.FederationImpl;

package/dist/middleware-Bm4bJzjg.js

@@ -0,0 +1,26 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+      globalThis.addEventListener = () => {};
+    
+import "./type-DUhon7qK.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "./middleware-C5emnCh-.js";
+import "./semver-dArNLkR9.js";
+import "./client-BgCucCG7.js";
+import "./lookup-CySNcNcC.js";
+import "./types-BIgY6c-l.js";
+import "./actor-Ch9BTg3N.js";
+import "./key-Cg0kO4dA.js";
+import "./http-CxiIW4rD.js";
+import "./authdocloader-COFZT9Wh.js";
+import "./ld-b16r91YS.js";
+import "./owner-Bs-sPbHX.js";
+import "./proof-SgRikE_Y.js";
+import "./inbox-DcDIqTbR.js";
+import "./builder-YD0q32nG.js";
+import "./collection-CSzG2j1P.js";
+import "./keycache-hSs_XFSb.js";
+import "./retry-D4GJ670a.js";
+import "./send-C0gFHa2i.js";
+
+export { FederationImpl };

package/dist/{middleware-ZywRHmGd.js → middleware-Bs4xDuXR.js}

@@ -3,15 +3,15 @@
           import { URLPattern } from "urlpattern-polyfill";
         
 import { getDefaultActivityTransformers } from "./transformers-BFT6d7J5.js";
-import { deno_default, getDocumentLoader, kvCache } from "./docloader-BH4pzZZC.js";
-import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, getTypeId } from "./actor-BOBYD2WU.js";
-import { lookupWebFinger } from "./lookup-CBeEjsrU.js";
-import { exportJwk, importJwk, validateCryptoKey } from "./key-DY-1H5d9.js";
-import { doubleKnock, verifyRequest } from "./http-DbXPDTX4.js";
-import { detachSignature, doesActorOwnKey, getKeyOwner, hasSignature, signJsonLd, signObject, verifyJsonLd, verifyObject } from "./proof-BZJajwfx.js";
-import { getNodeInfo, nodeInfoToJson } from "./types-D8QbEexz.js";
-import { getAuthenticatedDocumentLoader } from "./authdocloader-DAkeYWim.js";
-import { lookupObject, traverseCollection } from "./vocab-CKa0etLd.js";
+import { deno_default, getDocumentLoader, kvCache } from "./docloader-BETPdM09.js";
+import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, getTypeId } from "./actor-CQdxP8N-.js";
+import { lookupWebFinger } from "./lookup-CiSAeWJl.js";
+import { exportJwk, importJwk, validateCryptoKey } from "./key-I-ibyaZH.js";
+import { doubleKnock, verifyRequest } from "./http-PgdBoDIj.js";
+import { detachSignature, doesActorOwnKey, getKeyOwner, hasSignature, signJsonLd, signObject, verifyJsonLd, verifyObject } from "./proof-flD2DeA-.js";
+import { getNodeInfo, nodeInfoToJson } from "./types-Bu-epI-z.js";
+import { getAuthenticatedDocumentLoader } from "./authdocloader-fR-Fqcpa.js";
+import { lookupObject, traverseCollection } from "./vocab-CBavAdew.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 import { encodeHex } from "byte-encodings/hex";
@@ -344,7 +344,7 @@ var FederationBuilderImpl = class {
 		this.collectionTypeIds = {};
 	}
 	async build(options) {
-		const { FederationImpl: FederationImpl$1 } = await import("./middleware-Cq8RCRvR.js");
+		const { FederationImpl: FederationImpl$1 } = await import("./middleware-BvODpE_U.js");
 		const f = new FederationImpl$1(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();
@@ -912,6 +912,11 @@ async function buildCollectionSynchronizationHeader(collectionId, actorIds) {
 
 //#endregion
 //#region src/federation/keycache.ts
+const NULL_KEY_CACHE_VALUE = { _fedify: "key-unavailable" };
+const NULL_KEY_CACHE_TTL = Temporal.Duration.from({ minutes: 5 });
+function isNullKeyCacheValue(value) {
+	return typeof value === "object" && value != null && "_fedify" in value && value._fedify === NULL_KEY_CACHE_VALUE._fedify;
+}
 var KvKeyCache = class {
 	kv;
 	prefix;
@@ -927,6 +932,10 @@ var KvKeyCache = class {
 		if (this.nullKeys.has(keyId.href)) return null;
 		const serialized = await this.kv.get([...this.prefix, keyId.href]);
 		if (serialized == null) return void 0;
+		if (isNullKeyCacheValue(serialized)) {
+			this.nullKeys.add(keyId.href);
+			return null;
+		}
 		try {
 			return await CryptographicKey.fromJsonLd(serialized, this.options);
 		} catch {
@@ -941,7 +950,7 @@ var KvKeyCache = class {
 	async set(keyId, key) {
 		if (key == null) {
 			this.nullKeys.add(keyId.href);
-			await this.kv.delete([...this.prefix, keyId.href]);
+			await this.kv.set([...this.prefix, keyId.href], NULL_KEY_CACHE_VALUE, { ttl: NULL_KEY_CACHE_TTL });
 			return;
 		}
 		this.nullKeys.delete(keyId.href);

package/dist/middleware-BvODpE_U.js

@@ -0,0 +1,17 @@
+
+          import { Temporal } from "@js-temporal/polyfill";
+          import { URLPattern } from "urlpattern-polyfill";
+        
+import "./transformers-BFT6d7J5.js";
+import "./docloader-BETPdM09.js";
+import "./actor-CQdxP8N-.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "./middleware-Bs4xDuXR.js";
+import "./lookup-CiSAeWJl.js";
+import "./key-I-ibyaZH.js";
+import "./http-PgdBoDIj.js";
+import "./proof-flD2DeA-.js";
+import "./types-Bu-epI-z.js";
+import "./authdocloader-fR-Fqcpa.js";
+import "./vocab-CBavAdew.js";
+
+export { FederationImpl };