@fedify/fedify 1.6.1-pr.242.867 → 1.6.1-pr.242.868

package/dist/federation/retry.test.d.ts

@@ -1,2 +1,3 @@
 import { Temporal } from "@js-temporal/polyfill";
-import { URLPattern } from "urlpattern-polyfill";
+import { URLPattern } from "urlpattern-polyfill";
+globalThis.addEventListener = () => {};

package/dist/federation/retry.test.js

@@ -1,12 +1,12 @@
 
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
+      globalThis.addEventListener = () => {};
     
-import { AssertionError } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assertion_error.js";
-import { assertEquals } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_equals.js";
-import { createExponentialBackoffPolicy } from "./retry.js";
-import { test } from "../testing/mod.js";
-import { assertNotEquals } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_not_equals.js";
+import { AssertionError, assertEquals } from "../assert_equals-ClvzlhZu.js";
+import { createExponentialBackoffPolicy } from "../retry-BiIhZWgD.js";
+import { test } from "../testing-jcGLO9Lp.js";
+import { assertNotEquals } from "../assert_not_equals-Cyf5m9Ke.js";
 
 //#region federation/retry.test.ts
 test("createExponentialBackoffPolicy()", () => {

package/dist/federation/router.test.d.ts

@@ -1,2 +1,3 @@
 import { Temporal } from "@js-temporal/polyfill";
-import { URLPattern } from "urlpattern-polyfill";
+import { URLPattern } from "urlpattern-polyfill";
+globalThis.addEventListener = () => {};

package/dist/federation/router.test.js

@@ -1,11 +1,18 @@
 
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
+      globalThis.addEventListener = () => {};
     
-import { assertEquals } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_equals.js";
-import { Router, RouterError } from "./router.js";
-import { test } from "../testing/mod.js";
-import { assertThrows } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_throws.js";
+import { assertEquals } from "../assert_equals-ClvzlhZu.js";
+import "../assert-Dv75vaGI.js";
+import "../assert_instance_of--9UCVKsi.js";
+import { Router, RouterError } from "../router-BQ9wxxuz.js";
+import { test } from "../testing-jcGLO9Lp.js";
+import "../std__assert-CaBUULmX.js";
+import "../assert_rejects-FOHCtlD2.js";
+import "../assert_is_error-D162gXcM.js";
+import "../assert_not_equals-Cyf5m9Ke.js";
+import { assertThrows } from "../assert_throws-CRfQJvVx.js";
 
 //#region federation/router.test.ts
 function setUp(options = {}) {

package/dist/federation/send.test.d.ts

@@ -1,2 +1,3 @@
 import { Temporal } from "@js-temporal/polyfill";
-import { URLPattern } from "urlpattern-polyfill";
+import { URLPattern } from "urlpattern-polyfill";
+globalThis.addEventListener = () => {};

package/dist/federation/send.test.js

@@ -1,20 +1,32 @@
 
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
+      globalThis.addEventListener = () => {};
     
-import { assert } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert.js";
-import { assertEquals } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_equals.js";
-import { Activity, Application, Endpoints, Group, Person, Service } from "../vocab/vocab.js";
-import { verifyRequest } from "../sig/http.js";
-import { doesActorOwnKey } from "../sig/owner.js";
-import { extractInboxes, sendActivity } from "./send.js";
-import { test } from "../testing/mod.js";
-import { assertFalse } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_false.js";
-import { assertNotEquals } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_not_equals.js";
-import { assertRejects } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_rejects.js";
-import { mockDocumentLoader } from "../testing/docloader.js";
-import { ed25519Multikey, ed25519PrivateKey, rsaPrivateKey2, rsaPublicKey2 } from "../testing/keys.js";
-import { esm_default } from "../node_modules/.pnpm/fetch-mock@12.5.2/node_modules/fetch-mock/dist/esm/index.js";
+import { assertEquals } from "../assert_equals-ClvzlhZu.js";
+import { assert } from "../assert-Dv75vaGI.js";
+import "../assert_instance_of--9UCVKsi.js";
+import "../docloader-SoTWFoGg.js";
+import "../url-kTAI6_KP.js";
+import "../multibase-DeCHcK8L.js";
+import { Activity, Application, Endpoints, Group, Person, Service } from "../vocab-DGenL1NB.js";
+import "../langstr-DbWheeIS.js";
+import "../lookup-DuhsEtQ9.js";
+import "../type-D2s5lmbZ.js";
+import "../actor-4RHkloLu.js";
+import "../key-DMjXmsGn.js";
+import { verifyRequest } from "../http-Bx8zx0B9.js";
+import { doesActorOwnKey } from "../owner-DqE35Vly.js";
+import { extractInboxes, sendActivity } from "../send-B6r0W6TU.js";
+import { test } from "../testing-jcGLO9Lp.js";
+import "../std__assert-CaBUULmX.js";
+import { assertFalse, assertRejects } from "../assert_rejects-FOHCtlD2.js";
+import "../assert_is_error-D162gXcM.js";
+import { assertNotEquals } from "../assert_not_equals-Cyf5m9Ke.js";
+import "../assert_throws-CRfQJvVx.js";
+import { mockDocumentLoader } from "../docloader-09nVWLAZ.js";
+import { ed25519Multikey, ed25519PrivateKey, rsaPrivateKey2, rsaPublicKey2 } from "../keys-Bpe3lo_n.js";
+import { esm_default } from "../esm-BxIKwi-M.js";
 
 //#region federation/send.test.ts
 test("extractInboxes()", () => {

package/dist/{federation/mq.js → federation-Bmj7soSg.js}

@@ -2,6 +2,52 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
+//#region federation/kv.ts
+/**
+* A key-value store that stores values in memory.
+* Do not use this in production as it does not persist values.
+*
+* @since 0.5.0
+*/
+var MemoryKvStore = class {
+	#values = {};
+	#encodeKey(key) {
+		return JSON.stringify(key);
+	}
+	/**
+	* {@inheritDoc KvStore.get}
+	*/
+	get(key) {
+		const encodedKey = this.#encodeKey(key);
+		const entry = this.#values[encodedKey];
+		if (entry == null) return Promise.resolve(void 0);
+		const [value, expiration] = entry;
+		if (expiration != null && Temporal.Now.instant().until(expiration).sign < 0) {
+			delete this.#values[encodedKey];
+			return Promise.resolve(void 0);
+		}
+		return Promise.resolve(value);
+	}
+	/**
+	* {@inheritDoc KvStore.set}
+	*/
+	set(key, value, options) {
+		const encodedKey = this.#encodeKey(key);
+		const expiration = options?.ttl == null ? null : Temporal.Now.instant().add(options.ttl.round({ largestUnit: "hour" }));
+		this.#values[encodedKey] = [value, expiration];
+		return Promise.resolve();
+	}
+	/**
+	* {@inheritDoc KvStore.delete}
+	*/
+	delete(key) {
+		const encodedKey = this.#encodeKey(key);
+		delete this.#values[encodedKey];
+		return Promise.resolve();
+	}
+};
+
+//#endregion
 //#region federation/mq.ts
 /**
 * A message queue that processes messages in the same process.
@@ -144,4 +190,4 @@ var ParallelMessageQueue = class ParallelMessageQueue {
 };
 
 //#endregion
-export { InProcessMessageQueue, ParallelMessageQueue };
+export { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue };

package/dist/{node_modules/.pnpm/@jsr_hongminhee__deno-mock-fetch@0.3.2/node_modules/@jsr/hongminhee__deno-mock-fetch/router.js → hongminhee__deno-mock-fetch-DJKLj_H-.js}

@@ -1,6 +1,7 @@
 
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
+      globalThis.addEventListener = () => {};
     
 //#region node_modules/.pnpm/@jsr+hongminhee__deno-mock-fetch@0.3.2/node_modules/@jsr/hongminhee__deno-mock-fetch/router.js
 /**
@@ -90,4 +91,98 @@ const methodRegex = new RegExp(`(?<=^(?:${METHODS.join("|")}))@`);
 }
 
 //#endregion
-export { router };
+//#region node_modules/.pnpm/@jsr+hongminhee__deno-mock-fetch@0.3.2/node_modules/@jsr/hongminhee__deno-mock-fetch/mod.js
+var UnhandledRouteError = class extends Error {
+	routes;
+	request;
+	constructor(init) {
+		const { request, routes } = init;
+		const method = request.method;
+		const reqPath = new URL(request.url).pathname;
+		const routesNumber = Object.entries(routes).length;
+		const routePlural = routesNumber === 1 ? "route has a handler" : "routes have handlers";
+		super(`${method} ${reqPath} (${routesNumber} ${routePlural})`);
+		this.name = this.constructor.name;
+		if (Error.captureStackTrace) Error.captureStackTrace(this, this.constructor);
+		this.routes = routes;
+		this.request = request;
+	}
+};
+/**
+* Get a set of functions that do not share any state with the globals.
+*
+* The returned object can be destructured.
+*
+* ```
+* const { fetch, mock, remove, reset } = sandbox()
+* ```
+*/ function sandbox() {
+	const routeStore = new Map();
+	async function fetch(input, init) {
+		if (input instanceof URL) input = input.toString();
+		const req = new Request(input, init);
+		const routes = Object.fromEntries(routeStore.entries());
+		return await router(routes, (request) => {
+			throw new UnhandledRouteError({
+				request,
+				routes
+			});
+		}, (_, error) => {
+			throw error;
+		})(req);
+	}
+	function mock$1(route, handler) {
+		routeStore.set(route, handler);
+	}
+	function remove$1(route) {
+		routeStore.delete(route);
+	}
+	function reset$1() {
+		routeStore.clear();
+	}
+	return {
+		reset: reset$1,
+		mock: mock$1,
+		remove: remove$1,
+		fetch
+	};
+}
+const globalMockFetch = sandbox();
+/** This is the function that replaces `fetch` when you call `install()`. */ const mockedFetch = globalMockFetch.fetch;
+/**
+* Mock a new route, or override an existing handler.
+*
+* The route uses URLPattern syntax, with the additional extension of
+* (optional) method routing by prefixing with the method,
+* eg. `"POST@/user/:id"`.
+*
+* The handler function may be asynchronous.
+*
+* ```
+* mock("GET@/users/:id", async (_req, params) => {
+*   const id = parseInt(params["id"]);
+*   const data = await magicallyGetMyUserData(id);
+*   return new Response(JSON.stringify(data));
+* })
+* ```
+*/ const mock = globalMockFetch.mock;
+/** Remove an existing route handler. */ const remove = globalMockFetch.remove;
+/** Remove all existing route handlers. */ const reset = globalMockFetch.reset;
+const originalFetch = globalThis.fetch;
+/**
+* Replace `globalThis.fetch` with `mockedFetch` (or another function that
+* matches the `fetch` signature)
+*
+* To restore the original `globalThis.fetch`, call `uninstall()`.
+*/ const install = (replacement) => {
+	globalThis.fetch = replacement ?? mockedFetch;
+};
+/**
+* Restore `globalThis.fetch` to what it was before this library was imported.
+*/ const uninstall = () => {
+	globalThis.fetch = originalFetch;
+	reset();
+};
+
+//#endregion
+export { install, mock, uninstall };

package/dist/http-BImJcLfv.d.ts

@@ -0,0 +1,258 @@
+import { Temporal } from "@js-temporal/polyfill";
+import { URLPattern } from "urlpattern-polyfill";
+import { DocumentLoader } from "./docloader-DTRsVZPo.js";
+import { CryptographicKey$1 as CryptographicKey, Multikey$1 as Multikey } from "./vocab-CLWdoo7y.js";
+import { TracerProvider } from "@opentelemetry/api";
+
+//#region sig/key.d.ts
+/**
+* Generates a key pair which is appropriate for Fedify.
+* @param algorithm The algorithm to use.  Currently only RSASSA-PKCS1-v1_5 and
+*                  Ed25519 are supported.
+* @returns The generated key pair.
+* @throws {TypeError} If the algorithm is unsupported.
+*/
+
+/**
+ * Generates a key pair which is appropriate for Fedify.
+ * @param algorithm The algorithm to use.  Currently only RSASSA-PKCS1-v1_5 and
+ *                  Ed25519 are supported.
+ * @returns The generated key pair.
+ * @throws {TypeError} If the algorithm is unsupported.
+ */
+declare function generateCryptoKeyPair(algorithm?: "RSASSA-PKCS1-v1_5" | "Ed25519"): Promise<CryptoKeyPair>;
+/**
+ * Exports a key in JWK format.
+ * @param key The key to export.  Either public or private key.
+ * @returns The exported key in JWK format.  The key is suitable for
+ *          serialization and storage.
+ * @throws {TypeError} If the key is invalid or unsupported.
+ */
+declare function exportJwk(key: CryptoKey): Promise<JsonWebKey>;
+/**
+ * Imports a key from JWK format.
+ * @param jwk The key in JWK format.
+ * @param type Which type of key to import, either `"public"` or `"private"`.
+ * @returns The imported key.
+ * @throws {TypeError} If the key is invalid or unsupported.
+ */
+declare function importJwk(jwk: JsonWebKey, type: "public" | "private"): Promise<CryptoKey>;
+/**
+ * Options for {@link fetchKey}.
+ * @since 1.3.0
+ */
+interface FetchKeyOptions {
+  /**
+   * The document loader for loading remote JSON-LD documents.
+   */
+  documentLoader?: DocumentLoader;
+  /**
+   * The context loader for loading remote JSON-LD contexts.
+   */
+  contextLoader?: DocumentLoader;
+  /**
+   * The key cache to use for caching public keys.
+   * @since 0.12.0
+   */
+  keyCache?: KeyCache;
+  /**
+   * The OpenTelemetry tracer provider to use for tracing.  If omitted,
+   * the global tracer provider is used.
+   * @since 1.3.0
+   */
+  tracerProvider?: TracerProvider;
+}
+/**
+ * The result of {@link fetchKey}.
+ * @since 1.3.0
+ */
+interface FetchKeyResult<T extends CryptographicKey | Multikey> {
+  /**
+   * The fetched (or cached) key.
+   */
+  readonly key: T & {
+    publicKey: CryptoKey;
+  } | null;
+  /**
+   * Whether the key is fetched from the cache.
+   */
+  readonly cached: boolean;
+}
+/**
+ * Fetches a {@link CryptographicKey} or {@link Multikey} from the given URL.
+ * If the given URL contains an {@link Actor} object, it tries to find
+ * the corresponding key in the `publicKey` or `assertionMethod` property.
+ * @typeParam T The type of the key to fetch.  Either {@link CryptographicKey}
+ *              or {@link Multikey}.
+ * @param keyId The URL of the key.
+ * @param cls The class of the key to fetch.  Either {@link CryptographicKey}
+ *            or {@link Multikey}.
+ * @param options Options for fetching the key.  See {@link FetchKeyOptions}.
+ * @returns The fetched key or `null` if the key is not found.
+ * @since 1.3.0
+ */
+declare function fetchKey<T extends CryptographicKey | Multikey>(keyId: URL | string, cls: (new (...args: any[]) => T) & {
+  fromJsonLd(jsonLd: unknown, options: {
+    documentLoader?: DocumentLoader;
+    contextLoader?: DocumentLoader;
+    tracerProvider?: TracerProvider;
+  }): Promise<T>;
+}, options?: FetchKeyOptions): Promise<FetchKeyResult<T>>;
+/**
+ * A cache for storing cryptographic keys.
+ * @since 0.12.0
+ */
+interface KeyCache {
+  /**
+   * Gets a key from the cache.
+   * @param keyId The key ID.
+   * @returns The key if found, `null` if the key is not available (e.g.,
+   *          fetching the key was tried but failed), or `undefined`
+   *          if the cache is not available.
+   */
+  get(keyId: URL): Promise<CryptographicKey | Multikey | null | undefined>;
+  /**
+   * Sets a key to the cache.
+   *
+   * Note that this caches unavailable keys (i.e., `null`) as well,
+   * and it is recommended to make unavailable keys expire after a short period.
+   * @param keyId The key ID.
+   * @param key The key to cache.  `null` means the key is not available
+   *            (e.g., fetching the key was tried but failed).
+   */
+  set(keyId: URL, key: CryptographicKey | Multikey | null): Promise<void>;
+} //#endregion
+//#region sig/http.d.ts
+/**
+ * The standard to use for signing and verifying HTTP signatures.
+ * @since 1.6.0
+ */
+type HttpMessageSignaturesSpec =
+/**
+ * The Signing HTTP Messages (draft-cavage-http-signatures-12) specification,
+ * which is widely adopted and used in the fediverse (as of May 2025).
+ */
+"draft-cavage-http-signatures-12"
+/**
+ * The HTTP Message Signatures (RFC 9421) specification, which is the
+ * finalized standard but not widely adopted yet (as of May 2025).
+ */ | "rfc9421";
+/**
+ * Options for {@link signRequest}.
+ * @since 1.3.0
+ */
+interface SignRequestOptions {
+  /**
+   * The HTTP message signatures specification to use for signing.
+   * @default `"draft-cavage-http-signatures-12"`
+   * @since 1.6.0
+   */
+  spec?: HttpMessageSignaturesSpec;
+  /**
+   * The current time.  If not specified, the current time is used.  This is
+   * useful for testing.
+   * @since 1.6.0
+   */
+  currentTime?: Temporal.Instant;
+  /**
+   * The OpenTelemetry tracer provider.  If omitted, the global tracer provider
+   * is used.
+   */
+  tracerProvider?: TracerProvider;
+}
+/**
+ * Signs a request using the given private key.
+ * @param request The request to sign.
+ * @param privateKey The private key to use for signing.
+ * @param keyId The key ID to use for the signature.  It will be used by the
+ *              verifier.
+ * @returns The signed request.
+ * @throws {TypeError} If the private key is invalid or unsupported.
+ */
+declare function signRequest(request: Request, privateKey: CryptoKey, keyId: URL, options?: SignRequestOptions): Promise<Request>;
+/**
+ * Options for {@link verifyRequest}.
+ */
+interface VerifyRequestOptions {
+  /**
+   * The document loader to use for fetching the public key.
+   */
+  documentLoader?: DocumentLoader;
+  /**
+   * The context loader to use for JSON-LD context retrieval.
+   */
+  contextLoader?: DocumentLoader;
+  /**
+   * The time window to allow for the request date.  The actual time window is
+   * twice the value of this option, with the current time as the center.
+   * Or if it is `false`, no time check is performed.
+   *
+   * An hour by default.
+   */
+  timeWindow?: Temporal.Duration | Temporal.DurationLike | false;
+  /**
+   * The current time.  If not specified, the current time is used.  This is
+   * useful for testing.
+   */
+  currentTime?: Temporal.Instant;
+  /**
+   * The key cache to use for caching public keys.
+   * @since 0.12.0
+   */
+  keyCache?: KeyCache;
+  /**
+   * The HTTP message signatures specification to use for verifying.
+   * @default `"draft-cavage-http-signatures-12"`
+   * @since 1.6.0
+   */
+  spec?: HttpMessageSignaturesSpec;
+  /**
+   * The OpenTelemetry tracer provider.  If omitted, the global tracer provider
+   * is used.
+   * @since 1.3.0
+   */
+  tracerProvider?: TracerProvider;
+}
+/**
+ * Verifies the signature of a request.
+ *
+ * Note that this function consumes the request body, so it should not be used
+ * if the request body is already consumed.  Consuming the request body after
+ * calling this function is okay, since this function clones the request
+ * under the hood.
+ *
+ * @param request The request to verify.
+ * @param options Options for verifying the request.
+ * @returns The public key of the verified signature, or `null` if the signature
+ *          could not be verified.
+ */
+declare function verifyRequest(request: Request, options?: VerifyRequestOptions): Promise<CryptographicKey | null>;
+/**
+ * A spec determiner for HTTP Message Signatures.
+ * It determines the spec to use for signing requests.
+ * It is used for double-knocking
+ * (see <https://swicg.github.io/activitypub-http-signature/#how-to-upgrade-supported-versions>).
+ * @since 1.6.0
+ */
+interface HttpMessageSignaturesSpecDeterminer {
+  /**
+   * Determines the spec to use for signing requests.
+   * @param origin The origin of the URL to make the request to.
+   * @returns The spec to use for signing requests.
+   */
+  determineSpec(origin: string): HttpMessageSignaturesSpec | Promise<HttpMessageSignaturesSpec>;
+  /**
+   * Remembers the successfully used spec for the given origin.
+   * @param origin The origin of the URL that was requested.
+   * @param spec The spec to remember.
+   */
+  rememberSpec(origin: string, spec: HttpMessageSignaturesSpec): void | Promise<void>;
+}
+
+//#endregion
+/**
+ * The options for double-knock requests.
+ * @since 1.6.0
+ */
+
+export { FetchKeyOptions, FetchKeyResult, HttpMessageSignaturesSpec, HttpMessageSignaturesSpecDeterminer, KeyCache, SignRequestOptions, VerifyRequestOptions, exportJwk as exportJwk$1, fetchKey as fetchKey$1, generateCryptoKeyPair as generateCryptoKeyPair$1, importJwk as importJwk$1, signRequest as signRequest$1, verifyRequest as verifyRequest$1 };

package/dist/{sig/http.js → http-Bx8zx0B9.js}

@@ -1,10 +1,11 @@
 
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
+      globalThis.addEventListener = () => {};
     
-import { deno_default } from "../deno.js";
-import { CryptographicKey } from "../vocab/vocab.js";
-import { fetchKey, validateCryptoKey } from "./key.js";
+import { deno_default } from "./docloader-SoTWFoGg.js";
+import { CryptographicKey } from "./vocab-DGenL1NB.js";
+import { fetchKey, validateCryptoKey } from "./key-DMjXmsGn.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";