@fedify/fedify 1.6.12 → 1.6.14

package/dist/{proof-BjHA4H_1.js → proof.js}

@@ -3,10 +3,10 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./docloader-CPBLJsVK.js";
-import { Activity, DataIntegrityProof, Multikey } from "./vocab-DVEzP_bQ.js";
-import { getTypeId } from "./type-CFuiGLz9.js";
-import { fetchKey, validateCryptoKey } from "./key-Dlbuqhbr.js";
+import { d as version, u as name } from "./docloader.js";
+import { h as Multikey, s as DataIntegrityProof, t as Activity } from "./vocab.js";
+import { t as getTypeId } from "./type.js";
+import { a as validateCryptoKey, n as fetchKey } from "./key2.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { encodeHex } from "byte-encodings/hex";
@@ -41,15 +41,14 @@ async function createProof(object, privateKey, keyId, { contextLoader, context:
 	const msgBytes = encoder.encode(msgCanon);
 	const msgDigest = await crypto.subtle.digest("SHA-256", msgBytes);
 	created ??= Temporal.Now.instant();
-	const proofConfig = {
+	const proofCanon = serialize({
 		"@context": compactMsg["@context"],
 		type: "DataIntegrityProof",
 		cryptosuite: "eddsa-jcs-2022",
 		verificationMethod: keyId.href,
 		proofPurpose: "assertionMethod",
 		created: created.toString()
-	};
-	const proofCanon = serialize(proofConfig);
+	});
 	const proofBytes = encoder.encode(proofCanon);
 	const proofDigest = await crypto.subtle.digest("SHA-256", proofBytes);
 	const digest = new Uint8Array(proofDigest.byteLength + msgDigest.byteLength);
@@ -75,7 +74,7 @@ async function createProof(object, privateKey, keyId, { contextLoader, context:
 * @since 0.10.0
 */
 async function signObject(object, privateKey, keyId, options = {}) {
-	return await (options.tracerProvider ?? trace.getTracerProvider()).getTracer(deno_default.name, deno_default.version).startActiveSpan("object_integrity_proofs.sign", { attributes: { "activitypub.object.type": getTypeId(object).href } }, async (span) => {
+	return await (options.tracerProvider ?? trace.getTracerProvider()).getTracer(name, version).startActiveSpan("object_integrity_proofs.sign", { attributes: { "activitypub.object.type": getTypeId(object).href } }, async (span) => {
 		try {
 			if (object.id != null) span.setAttribute("activitypub.object.id", object.id.href);
 			const existingProofs = [];
@@ -109,7 +108,7 @@ async function signObject(object, privateKey, keyId, options = {}) {
 * @since 0.10.0
 */
 async function verifyProof(jsonLd, proof, options = {}) {
-	return await (options.tracerProvider ?? trace.getTracerProvider()).getTracer(deno_default.name, deno_default.version).startActiveSpan("object_integrity_proofs.verify", async (span) => {
+	return await (options.tracerProvider ?? trace.getTracerProvider()).getTracer(name, version).startActiveSpan("object_integrity_proofs.verify", async (span) => {
 		if (span.isRecording()) {
 			if (proof.cryptosuite != null) span.setAttribute("object_integrity_proofs.cryptosuite", proof.cryptosuite);
 			if (proof.verificationMethodId != null) span.setAttribute("object_integrity_proofs.key_id", proof.verificationMethodId.href);
@@ -133,15 +132,14 @@ async function verifyProof(jsonLd, proof, options = {}) {
 async function verifyProofInternal(jsonLd, proof, options) {
 	if (typeof jsonLd !== "object" || proof.cryptosuite !== "eddsa-jcs-2022" || proof.verificationMethodId == null || proof.proofPurpose !== "assertionMethod" || proof.proofValue == null || proof.created == null) return null;
 	const publicKeyPromise = fetchKey(proof.verificationMethodId, Multikey, options);
-	const proofConfig = {
+	const proofCanon = serialize({
 		"@context": jsonLd["@context"],
 		type: "DataIntegrityProof",
 		cryptosuite: proof.cryptosuite,
 		verificationMethod: proof.verificationMethodId.href,
 		proofPurpose: proof.proofPurpose,
 		created: proof.created.toString()
-	};
-	const proofCanon = serialize(proofConfig);
+	});
 	const encoder = new TextEncoder();
 	const proofBytes = encoder.encode(proofCanon);
 	const proofDigest = await crypto.subtle.digest("SHA-256", proofBytes);
@@ -254,4 +252,4 @@ async function verifyObject(cls, jsonLd, options = {}) {
 }
 
 //#endregion
-export { createProof, signObject, verifyObject, verifyProof };
+export { verifyProof as i, signObject as n, verifyObject as r, createProof as t };

package/dist/{retry-BiIhZWgD.js → retry.js}

@@ -34,4 +34,4 @@ function createExponentialBackoffPolicy(options = {}) {
 }
 
 //#endregion
-export { createExponentialBackoffPolicy };
+export { createExponentialBackoffPolicy as t };

package/dist/{router-D_aVZZUc.js → router.js}

@@ -115,4 +115,4 @@ var RouterError = class extends Error {
 };
 
 //#endregion
-export { Router$1 as Router, RouterError };
+export { RouterError as n, Router$1 as t };

package/dist/runtime/authdocloader.test.js

@@ -3,29 +3,26 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { assertEquals } from "../assert_equals-B44MxcIj.js";
-import "../assert-LOEeCUK5.js";
-import "../assert_instance_of-XtuFevV_.js";
-import "../docloader-CPBLJsVK.js";
-import { UrlError } from "../url-C2xuoQD1.js";
-import "../multibase-CnLHszip.js";
-import "../vocab-DVEzP_bQ.js";
-import "../langstr-DbWheeIS.js";
-import "../lookup-HY083HcK.js";
-import "../type-CFuiGLz9.js";
-import "../actor-BxaCJsn8.js";
-import "../key-Dlbuqhbr.js";
-import { verifyRequest } from "../http-CnSGudcE.js";
-import { getAuthenticatedDocumentLoader } from "../authdocloader-CVhMTbv4.js";
-import { test } from "../testing-DLyvtiiW.js";
-import "../std__assert-o_r9vqm1.js";
-import { assertRejects } from "../assert_rejects-DWQ4jaf9.js";
-import "../assert_is_error-BTlryvT0.js";
-import "../assert_not_equals-C685gKx6.js";
-import "../assert_throws-YetpVSc-.js";
-import { mockDocumentLoader } from "../docloader-09nVWLAZ.js";
-import { rsaPrivateKey2 } from "../keys-CqpeF-EG.js";
-import { esm_default } from "../esm-DO9PrujO.js";
+import "../chunk.js";
+import { t as assertEquals } from "../assert_equals.js";
+import "../docloader.js";
+import { t as UrlError } from "../url.js";
+import "../multibase.js";
+import "../vocab.js";
+import "../langstr.js";
+import "../lookup.js";
+import "../actor.js";
+import "../key2.js";
+import { l as verifyRequest } from "../http.js";
+import { t as getAuthenticatedDocumentLoader } from "../authdocloader.js";
+import { t as test } from "../testing.js";
+import "../std__assert.js";
+import { t as assertRejects } from "../assert_rejects.js";
+import "../assert_is_error.js";
+import "../assert_throws.js";
+import { t as mockDocumentLoader } from "../docloader2.js";
+import { i as rsaPrivateKey2 } from "../keys.js";
+import { t as esm_default } from "../esm.js";
 
 //#region runtime/authdocloader.test.ts
 test("getAuthenticatedDocumentLoader()", async (t) => {
@@ -39,11 +36,10 @@ test("getAuthenticatedDocumentLoader()", async (t) => {
 		return new Response(JSON.stringify(v != null), { headers: { "Content-Type": "application/json" } });
 	});
 	await t.step("test", async () => {
-		const loader = await getAuthenticatedDocumentLoader({
+		assertEquals(await (await getAuthenticatedDocumentLoader({
 			keyId: new URL("https://example.com/key2"),
 			privateKey: rsaPrivateKey2
-		});
-		assertEquals(await loader("https://example.com/object"), {
+		}))("https://example.com/object"), {
 			contextUrl: null,
 			documentUrl: "https://example.com/object",
 			document: true

package/dist/runtime/docloader.test.js

@@ -3,20 +3,19 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { assertEquals } from "../assert_equals-B44MxcIj.js";
-import "../assert-LOEeCUK5.js";
-import "../assert_instance_of-XtuFevV_.js";
-import { MemoryKvStore } from "../kv-DohFOP2C.js";
-import { FetchError, contexts_default, deno_default, getDocumentLoader, getUserAgent, kvCache } from "../docloader-CPBLJsVK.js";
-import { UrlError } from "../url-C2xuoQD1.js";
-import { test } from "../testing-DLyvtiiW.js";
-import "../std__assert-o_r9vqm1.js";
-import { assertRejects } from "../assert_rejects-DWQ4jaf9.js";
-import "../assert_is_error-BTlryvT0.js";
-import "../assert_not_equals-C685gKx6.js";
-import { assertThrows } from "../assert_throws-YetpVSc-.js";
-import { mockDocumentLoader } from "../docloader-09nVWLAZ.js";
-import { esm_default } from "../esm-DO9PrujO.js";
+import "../chunk.js";
+import { t as assertEquals } from "../assert_equals.js";
+import { t as assert } from "../assert.js";
+import { t as MemoryKvStore } from "../kv.js";
+import { d as version, i as getDocumentLoader, l as contexts_default, o as getUserAgent, s as kvCache, t as FetchError } from "../docloader.js";
+import { t as UrlError } from "../url.js";
+import { t as test } from "../testing.js";
+import "../std__assert.js";
+import { t as assertRejects } from "../assert_rejects.js";
+import "../assert_is_error.js";
+import { t as assertThrows } from "../assert_throws.js";
+import { t as mockDocumentLoader } from "../docloader2.js";
+import { t as esm_default } from "../esm.js";
 import process from "node:process";
 
 //#region runtime/docloader.test.ts
@@ -287,6 +286,17 @@ test("getDocumentLoader()", async (t) => {
 		assertEquals(await fetchDocumentLoader2("https://example.com/localhost-redirect"), expected);
 		assertEquals(await fetchDocumentLoader2("https://example.com/localhost-link"), expected);
 	});
+	const maliciousPayload = "<a" + " a=\"b\"".repeat(30) + " ";
+	esm_default.get("https://example.com/redos", {
+		body: maliciousPayload,
+		headers: { "Content-Type": "text/html; charset=utf-8" }
+	});
+	await t.step("ReDoS resistance (CVE-2025-68475)", async () => {
+		const start = performance.now();
+		await assertRejects(() => fetchDocumentLoader("https://example.com/redos"), SyntaxError);
+		const elapsed = performance.now() - start;
+		assert(elapsed < 1e3, `Potential ReDoS vulnerability detected: ${elapsed}ms (expected < 1000ms)`);
+	});
 	esm_default.hardReset();
 });
 test("kvCache()", async (t) => {
@@ -313,12 +323,11 @@ test("kvCache()", async (t) => {
 				type: "Object"
 			}
 		});
-		const cache = await kv.get([
+		assertEquals(await kv.get([
 			"_test",
 			"cached",
 			"https://example.com/object"
-		]);
-		assertEquals(cache, result);
+		]), result);
 		await kv.set([
 			"_test",
 			"cached",
@@ -328,8 +337,7 @@ test("kvCache()", async (t) => {
 			documentUrl: "https://example.org/",
 			document: { "id": "https://example.org/" }
 		});
-		const result2 = await loader("https://example.org/");
-		assertEquals(result2, {
+		assertEquals(await loader("https://example.org/"), {
 			contextUrl: null,
 			documentUrl: "https://example.org/",
 			document: { "id": "https://example.org/" }
@@ -343,21 +351,19 @@ test("kvCache()", async (t) => {
 			documentUrl: "https://example.net/",
 			document: { "id": "https://example.net/" }
 		});
-		const result3 = await loader("https://example.net/");
-		assertEquals(result3, {
+		assertEquals(await loader("https://example.net/"), {
 			contextUrl: null,
 			documentUrl: "https://example.net/",
 			document: { "id": "https://example.net/" }
 		});
 	});
 	await t.step("not cached", async () => {
-		const result = await kvCache({
+		assertEquals(await kvCache({
 			kv,
 			loader: mockDocumentLoader,
 			rules: [],
 			prefix: ["_test", "not cached"]
-		})("https://example.com/object");
-		assertEquals(result, {
+		})("https://example.com/object"), {
 			contextUrl: null,
 			documentUrl: "https://example.com/object",
 			document: {
@@ -367,12 +373,11 @@ test("kvCache()", async (t) => {
 				type: "Object"
 			}
 		});
-		const cache = await kv.get([
+		assertEquals(await kv.get([
 			"test2",
 			"not cached",
 			"https://example.com/object"
-		]);
-		assertEquals(cache, void 0);
+		]), void 0);
 	});
 	await t.step("maximum cache duration", () => {
 		assertThrows(() => kvCache({
@@ -404,7 +409,7 @@ test("kvCache()", async (t) => {
 				throw new Error("Failed to delete key");
 			}
 		}
-		const result = await kvCache({
+		assertEquals(await kvCache({
 			kv: new KvStoreThrowsException(),
 			loader: mockDocumentLoader,
 			rules: [
@@ -413,8 +418,7 @@ test("kvCache()", async (t) => {
 				[new URLPattern("https://example.com/*"), Temporal.Duration.from({ days: 30 })]
 			],
 			prefix: ["_test", "not cached"]
-		})("https://example.com/object");
-		assertEquals(result, {
+		})("https://example.com/object"), {
 			contextUrl: null,
 			documentUrl: "https://example.com/object",
 			document: {
@@ -428,37 +432,37 @@ test("kvCache()", async (t) => {
 });
 test("getUserAgent()", () => {
 	if ("Deno" in globalThis) {
-		assertEquals(getUserAgent(), `Fedify/${deno_default.version} (Deno/${Deno.version.deno})`);
-		assertEquals(getUserAgent({ software: "MyApp/1.0.0" }), `MyApp/1.0.0 (Fedify/${deno_default.version}; Deno/${Deno.version.deno})`);
-		assertEquals(getUserAgent({ url: "https://example.com/" }), `Fedify/${deno_default.version} (Deno/${Deno.version.deno}; +https://example.com/)`);
+		assertEquals(getUserAgent(), `Fedify/${version} (Deno/${Deno.version.deno})`);
+		assertEquals(getUserAgent({ software: "MyApp/1.0.0" }), `MyApp/1.0.0 (Fedify/${version}; Deno/${Deno.version.deno})`);
+		assertEquals(getUserAgent({ url: "https://example.com/" }), `Fedify/${version} (Deno/${Deno.version.deno}; +https://example.com/)`);
 		assertEquals(getUserAgent({
 			software: "MyApp/1.0.0",
 			url: new URL("https://example.com/")
-		}), `MyApp/1.0.0 (Fedify/${deno_default.version}; Deno/${Deno.version.deno}; +https://example.com/)`);
+		}), `MyApp/1.0.0 (Fedify/${version}; Deno/${Deno.version.deno}; +https://example.com/)`);
 	} else if ("Bun" in globalThis) {
-		assertEquals(getUserAgent(), `Fedify/${deno_default.version} (Bun/${Bun.version})`);
-		assertEquals(getUserAgent({ software: "MyApp/1.0.0" }), `MyApp/1.0.0 (Fedify/${deno_default.version}; Bun/${Bun.version})`);
-		assertEquals(getUserAgent({ url: "https://example.com/" }), `Fedify/${deno_default.version} (Bun/${Bun.version}; +https://example.com/)`);
+		assertEquals(getUserAgent(), `Fedify/${version} (Bun/${Bun.version})`);
+		assertEquals(getUserAgent({ software: "MyApp/1.0.0" }), `MyApp/1.0.0 (Fedify/${version}; Bun/${Bun.version})`);
+		assertEquals(getUserAgent({ url: "https://example.com/" }), `Fedify/${version} (Bun/${Bun.version}; +https://example.com/)`);
 		assertEquals(getUserAgent({
 			software: "MyApp/1.0.0",
 			url: new URL("https://example.com/")
-		}), `MyApp/1.0.0 (Fedify/${deno_default.version}; Bun/${Bun.version}; +https://example.com/)`);
+		}), `MyApp/1.0.0 (Fedify/${version}; Bun/${Bun.version}; +https://example.com/)`);
 	} else if (navigator.userAgent === "Cloudflare-Workers") {
-		assertEquals(getUserAgent(), `Fedify/${deno_default.version} (Cloudflare-Workers)`);
-		assertEquals(getUserAgent({ software: "MyApp/1.0.0" }), `MyApp/1.0.0 (Fedify/${deno_default.version}; Cloudflare-Workers)`);
-		assertEquals(getUserAgent({ url: "https://example.com/" }), `Fedify/${deno_default.version} (Cloudflare-Workers; +https://example.com/)`);
+		assertEquals(getUserAgent(), `Fedify/${version} (Cloudflare-Workers)`);
+		assertEquals(getUserAgent({ software: "MyApp/1.0.0" }), `MyApp/1.0.0 (Fedify/${version}; Cloudflare-Workers)`);
+		assertEquals(getUserAgent({ url: "https://example.com/" }), `Fedify/${version} (Cloudflare-Workers; +https://example.com/)`);
 		assertEquals(getUserAgent({
 			software: "MyApp/1.0.0",
 			url: new URL("https://example.com/")
-		}), `MyApp/1.0.0 (Fedify/${deno_default.version}; Cloudflare-Workers; +https://example.com/)`);
+		}), `MyApp/1.0.0 (Fedify/${version}; Cloudflare-Workers; +https://example.com/)`);
 	} else {
-		assertEquals(getUserAgent(), `Fedify/${deno_default.version} (Node.js/${process.versions.node})`);
-		assertEquals(getUserAgent({ software: "MyApp/1.0.0" }), `MyApp/1.0.0 (Fedify/${deno_default.version}; Node.js/${process.versions.node})`);
-		assertEquals(getUserAgent({ url: "https://example.com/" }), `Fedify/${deno_default.version} (Node.js/${process.versions.node}; +https://example.com/)`);
+		assertEquals(getUserAgent(), `Fedify/${version} (Node.js/${process.versions.node})`);
+		assertEquals(getUserAgent({ software: "MyApp/1.0.0" }), `MyApp/1.0.0 (Fedify/${version}; Node.js/${process.versions.node})`);
+		assertEquals(getUserAgent({ url: "https://example.com/" }), `Fedify/${version} (Node.js/${process.versions.node}; +https://example.com/)`);
 		assertEquals(getUserAgent({
 			software: "MyApp/1.0.0",
 			url: new URL("https://example.com/")
-		}), `MyApp/1.0.0 (Fedify/${deno_default.version}; Node.js/${process.versions.node}; +https://example.com/)`);
+		}), `MyApp/1.0.0 (Fedify/${version}; Node.js/${process.versions.node}; +https://example.com/)`);
 	}
 });
 

package/dist/runtime/key.test.js

@@ -3,24 +3,21 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { assertEquals } from "../assert_equals-B44MxcIj.js";
-import "../assert-LOEeCUK5.js";
-import "../assert_instance_of-XtuFevV_.js";
-import "../docloader-CPBLJsVK.js";
-import "../url-C2xuoQD1.js";
-import "../multibase-CnLHszip.js";
-import { exportMultibaseKey, exportSpki, importMultibaseKey, importPem, importPkcs1, importSpki } from "../vocab-DVEzP_bQ.js";
-import "../langstr-DbWheeIS.js";
-import "../lookup-HY083HcK.js";
-import "../type-CFuiGLz9.js";
-import "../actor-BxaCJsn8.js";
-import { exportJwk, importJwk } from "../key-Dlbuqhbr.js";
-import { test } from "../testing-DLyvtiiW.js";
-import "../std__assert-o_r9vqm1.js";
-import "../assert_rejects-DWQ4jaf9.js";
-import "../assert_is_error-BTlryvT0.js";
-import "../assert_not_equals-C685gKx6.js";
-import "../assert_throws-YetpVSc-.js";
+import "../chunk.js";
+import { t as assertEquals } from "../assert_equals.js";
+import "../docloader.js";
+import "../url.js";
+import "../multibase.js";
+import { A as exportSpki, M as importPem, N as importPkcs1, P as importSpki, j as importMultibaseKey, k as exportMultibaseKey } from "../vocab.js";
+import "../langstr.js";
+import "../lookup.js";
+import "../actor.js";
+import { i as importJwk, t as exportJwk } from "../key2.js";
+import { t as test } from "../testing.js";
+import "../std__assert.js";
+import "../assert_rejects.js";
+import "../assert_is_error.js";
+import "../assert_throws.js";
 
 //#region runtime/key.test.ts
 const rsaSpki = "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsRuvCkgJtflBTl4OVsm\nnt/J1mQfZasfJtN33dcZ3d1lJroxmgmMu69zjGEAwkNbMQaWNLqC4eogkJaeJ4RR\n5MHYXkL9nNilVoTkjX5BVit3puzs7XJ7WQnKQgQMI+ezn24GHsZ/v1JIo77lerX5\nk4HNwTNVt+yaZVQWaOMR3+6FwziQR6kd0VuG9/a9dgAnz2cEoORRC1i4W7IZaB1s\nZnh1WbHbevlGd72HSXll5rocPIHn8gq6xpBgpHwRphlRsgn4KHaJ6brXDIJjrnQh\nIe/YUBOGj/ImSEXhRwlFerKsoAVnZ0Hwbfa46qk44TAt8CyoPMWmpK6pt0ng4pQ2\nuwIDAQAB\n-----END PUBLIC KEY-----\n";
@@ -45,64 +42,45 @@ const ed25519Jwk = {
 };
 const ed25519Multibase = "z6MksHj1MJnidCtDiyYW9ugNFftoX9fLK4bornTxmMZ6X7vq";
 test("importSpki()", async () => {
-	const rsaKey = await importSpki(rsaSpki);
-	assertEquals(await exportJwk(rsaKey), rsaJwk);
-	const ed25519Key = await importSpki(ed25519Pem);
-	assertEquals(await exportJwk(ed25519Key), ed25519Jwk);
+	assertEquals(await exportJwk(await importSpki(rsaSpki)), rsaJwk);
+	assertEquals(await exportJwk(await importSpki(ed25519Pem)), ed25519Jwk);
 });
 test("exportSpki()", async () => {
-	const rsaKey = await importJwk(rsaJwk, "public");
-	const rsaSpki$1 = await exportSpki(rsaKey);
+	const rsaSpki$1 = await exportSpki(await importJwk(rsaJwk, "public"));
 	assertEquals(rsaSpki$1, rsaSpki$1);
-	const ed25519Key = await importJwk(ed25519Jwk, "public");
-	const ed25519Spki = await exportSpki(ed25519Key);
-	assertEquals(ed25519Spki, ed25519Pem);
+	assertEquals(await exportSpki(await importJwk(ed25519Jwk, "public")), ed25519Pem);
 });
 test("importPkcs1()", async () => {
-	const rsaKey = await importPkcs1(rsaPkcs1);
-	assertEquals(await exportJwk(rsaKey), rsaJwk);
+	assertEquals(await exportJwk(await importPkcs1(rsaPkcs1)), rsaJwk);
 });
 test("importPem()", async () => {
-	const rsaPkcs1Key = await importPem(rsaPkcs1);
-	assertEquals(await exportJwk(rsaPkcs1Key), rsaJwk);
-	const rsaSpkiKey = await importPem(rsaSpki);
-	assertEquals(await exportJwk(rsaSpkiKey), rsaJwk);
-	const ed25519Key = await importPem(ed25519Pem);
-	assertEquals(await exportJwk(ed25519Key), ed25519Jwk);
+	assertEquals(await exportJwk(await importPem(rsaPkcs1)), rsaJwk);
+	assertEquals(await exportJwk(await importPem(rsaSpki)), rsaJwk);
+	assertEquals(await exportJwk(await importPem(ed25519Pem)), ed25519Jwk);
 });
 test("importMultibase()", async () => {
-	const rsaKey = await importMultibaseKey(rsaMultibase);
-	assertEquals(await exportJwk(rsaKey), rsaJwk);
-	const ed25519Key = await importMultibaseKey(ed25519Multibase);
-	assertEquals(await exportJwk(ed25519Key), ed25519Jwk);
+	assertEquals(await exportJwk(await importMultibaseKey(rsaMultibase)), rsaJwk);
+	assertEquals(await exportJwk(await importMultibaseKey(ed25519Multibase)), ed25519Jwk);
 });
 test("exportMultibaseKey()", async () => {
-	const rsaKey = await importJwk(rsaJwk, "public");
-	const rsaMb = await exportMultibaseKey(rsaKey);
-	assertEquals(rsaMb, rsaMultibase);
-	const ed25519Key = await importJwk(ed25519Jwk, "public");
-	const ed25519Mb = await exportMultibaseKey(ed25519Key);
-	assertEquals(ed25519Mb, ed25519Multibase);
-	const rsaKey2 = await importJwk({
+	assertEquals(await exportMultibaseKey(await importJwk(rsaJwk, "public")), rsaMultibase);
+	assertEquals(await exportMultibaseKey(await importJwk(ed25519Jwk, "public")), ed25519Multibase);
+	assertEquals(await exportMultibaseKey(await importJwk({
 		alg: "RS256",
 		ext: true,
 		key_ops: ["verify"],
 		e: "AQAB",
 		kty: "RSA",
 		n: "sbX82NTV6IylxCh7MfV4hlyvaniCajuP97GyOqSvTmoEdBOflFvZ06kR_9D6ctt45Fk6hskfnag2GG69NALVH2o4RCR6tQiLRpKcMRtDYE_thEmfBvDzm_VVkOIYfxu-Ipuo9J_S5XDNDjczx2v-3oDh5-CIHkU46hvFeCvpUS-L8TJSbgX0kjVk_m4eIb9wh63rtmD6Uz_KBtCo5mmR4TEtcLZKYdqMp3wCjN-TlgHiz_4oVXWbHUefCEe8rFnX1iQnpDHU49_SaXQoud1jCaexFn25n-Aa8f8bc5Vm-5SeRwidHa6ErvEhTvf1dz6GoNPp2iRvm-wJ1gxwWJEYPQ"
-	}, "public");
-	const rsaMb2 = await exportMultibaseKey(rsaKey2);
-	assertEquals(rsaMb2, "z4MXj1wBzi9jUstyPMS4jQqB6KdJaiatPkAtVtGc6bQEQEEsKTic4G7Rou3iBf9vPmT5dbkm9qsZsuVNjq8HCuW1w24nhBFGkRE4cd2Uf2tfrB3N7h4mnyPp1BF3ZttHTYv3DLUPi1zMdkULiow3M1GfXkoC6DoxDUm1jmN6GBj22SjVsr6dxezRVQc7aj9TxE7JLbMH1wh5X3kA58H3DFW8rnYMakFGbca5CB2Jf6CnGQZmL7o5uJAdTwXfy2iiiyPxXEGerMhHwhjTA1mKYobyk2CpeEcmvynADfNZ5MBvcCS7m3XkFCMNUYBS9NQ3fze6vMSUPsNa6GVYmKx2x6JrdEjCk3qRMMmyjnjCMfR4pXbRMZa3i");
-	const ed25519Key2 = await importJwk({
+	}, "public")), "z4MXj1wBzi9jUstyPMS4jQqB6KdJaiatPkAtVtGc6bQEQEEsKTic4G7Rou3iBf9vPmT5dbkm9qsZsuVNjq8HCuW1w24nhBFGkRE4cd2Uf2tfrB3N7h4mnyPp1BF3ZttHTYv3DLUPi1zMdkULiow3M1GfXkoC6DoxDUm1jmN6GBj22SjVsr6dxezRVQc7aj9TxE7JLbMH1wh5X3kA58H3DFW8rnYMakFGbca5CB2Jf6CnGQZmL7o5uJAdTwXfy2iiiyPxXEGerMhHwhjTA1mKYobyk2CpeEcmvynADfNZ5MBvcCS7m3XkFCMNUYBS9NQ3fze6vMSUPsNa6GVYmKx2x6JrdEjCk3qRMMmyjnjCMfR4pXbRMZa3i");
+	assertEquals(await exportMultibaseKey(await importJwk({
 		alg: "Ed25519",
 		crv: "Ed25519",
 		ext: true,
 		key_ops: ["verify"],
 		kty: "OKP",
 		x: "Lm_M42cB3HkUiODQsXRcweM6TByfzEHGO9ND274JcOY"
-	}, "public");
-	const ed25519Mb2 = await exportMultibaseKey(ed25519Key2);
-	assertEquals(ed25519Mb2, "z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK");
+	}, "public")), "z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK");
 });
 
 //#endregion

package/dist/runtime/langstr.test.js

@@ -3,16 +3,14 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { assertEquals } from "../assert_equals-B44MxcIj.js";
-import "../assert-LOEeCUK5.js";
-import "../assert_instance_of-XtuFevV_.js";
-import { LanguageString } from "../langstr-DbWheeIS.js";
-import { test } from "../testing-DLyvtiiW.js";
-import "../std__assert-o_r9vqm1.js";
-import "../assert_rejects-DWQ4jaf9.js";
-import "../assert_is_error-BTlryvT0.js";
-import "../assert_not_equals-C685gKx6.js";
-import "../assert_throws-YetpVSc-.js";
+import "../chunk.js";
+import { t as assertEquals } from "../assert_equals.js";
+import { t as LanguageString } from "../langstr.js";
+import { t as test } from "../testing.js";
+import "../std__assert.js";
+import "../assert_rejects.js";
+import "../assert_is_error.js";
+import "../assert_throws.js";
 import { parseLanguageTag } from "@phensley/language-tag";
 import util from "node:util";
 

package/dist/runtime/mod.d.ts

@@ -1,8 +1,105 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import "../kv-p8sC8PTT.js";
-import { AuthenticatedDocumentLoaderFactory, DocumentLoader, DocumentLoaderFactory, DocumentLoaderFactoryOptions, FetchError, GetDocumentLoaderOptions, GetUserAgentOptions, KvCacheParameters, RemoteDocument, fetchDocumentLoader, getDocumentLoader, getUserAgent, kvCache } from "../docloader-DlUDOVSe.js";
-import { LanguageString } from "../vocab-DSFLLLe6.js";
-import "../http-BkUCISGt.js";
-import { GetAuthenticatedDocumentLoaderOptions, exportMultibaseKey, exportSpki, getAuthenticatedDocumentLoader, importMultibaseKey, importPem, importPkcs1, importSpki } from "../mod-BTHfUeLo.js";
-export { AuthenticatedDocumentLoaderFactory, DocumentLoader, DocumentLoaderFactory, DocumentLoaderFactoryOptions, FetchError, GetAuthenticatedDocumentLoaderOptions, GetDocumentLoaderOptions, GetUserAgentOptions, KvCacheParameters, LanguageString, RemoteDocument, exportMultibaseKey, exportSpki, fetchDocumentLoader, getAuthenticatedDocumentLoader, getDocumentLoader, getUserAgent, importMultibaseKey, importPem, importPkcs1, importSpki, kvCache };
+import { a as FetchError, c as KvCacheParameters, d as getDocumentLoader, f as getUserAgent, i as DocumentLoaderFactoryOptions, l as RemoteDocument, n as DocumentLoader, o as GetDocumentLoaderOptions, p as kvCache, r as DocumentLoaderFactory, s as GetUserAgentOptions, t as AuthenticatedDocumentLoaderFactory, u as fetchDocumentLoader } from "../docloader.js";
+import { pt as LanguageString } from "../vocab.js";
+import { n as HttpMessageSignaturesSpecDeterminer } from "../http.js";
+import { TracerProvider } from "@opentelemetry/api";
+
+//#region runtime/authdocloader.d.ts
+/**
+ * Options for {@link getAuthenticatedDocumentLoader}.
+ * @see {@link getAuthenticatedDocumentLoader}
+ * @since 1.3.0
+ */
+interface GetAuthenticatedDocumentLoaderOptions extends DocumentLoaderFactoryOptions {
+  /**
+   * An optional spec determiner for HTTP Message Signatures.
+   * It determines the spec to use for signing requests.
+   * It is used for double-knocking
+   * (see <https://swicg.github.io/activitypub-http-signature/#how-to-upgrade-supported-versions>).
+   * @since 1.6.0
+   */
+  specDeterminer?: HttpMessageSignaturesSpecDeterminer;
+  /**
+   * The OpenTelemetry tracer provider.  If omitted, the global tracer provider
+   * is used.
+   * @since 1.6.0
+   */
+  tracerProvider?: TracerProvider;
+}
+/**
+ * Gets an authenticated {@link DocumentLoader} for the given identity.
+ * Note that an authenticated document loader intentionally does not cache
+ * the fetched documents.
+ * @param identity The identity to get the document loader for.
+ *                 The actor's key pair.
+ * @param options The options for the document loader.
+ * @returns The authenticated document loader.
+ * @throws {TypeError} If the key is invalid or unsupported.
+ * @since 0.4.0
+ */
+declare function getAuthenticatedDocumentLoader(identity: {
+  keyId: URL;
+  privateKey: CryptoKey;
+}, {
+  allowPrivateAddress,
+  userAgent,
+  specDeterminer,
+  tracerProvider
+}?: GetAuthenticatedDocumentLoaderOptions): DocumentLoader;
+//#endregion
+//#region runtime/key.d.ts
+/**
+ * Imports a PEM-SPKI formatted public key.
+ * @param pem The PEM-SPKI formatted public key.
+ * @returns The imported public key.
+ * @throws {TypeError} If the key is invalid or unsupported.
+ * @since 0.5.0
+ */
+declare function importSpki(pem: string): Promise<CryptoKey>;
+/**
+ * Exports a public key in PEM-SPKI format.
+ * @param key The public key to export.
+ * @returns The exported public key in PEM-SPKI format.
+ * @throws {TypeError} If the key is invalid or unsupported.
+ * @since 0.5.0
+ */
+declare function exportSpki(key: CryptoKey): Promise<string>;
+/**
+ * Imports a PEM-PKCS#1 formatted public key.
+ * @param pem The PEM-PKCS#1 formatted public key.
+ * @returns The imported public key.
+ * @throws {TypeError} If the key is invalid or unsupported.
+ * @since 1.5.0
+ */
+declare function importPkcs1(pem: string): Promise<CryptoKey>;
+/**
+ * Imports a PEM formatted public key (SPKI or PKCS#1).
+ * @param pem The PEM formatted public key to import (SPKI or PKCS#1).
+ * @returns The imported public key.
+ * @throws {TypeError} If the key is invalid or unsupported.
+ * @since 1.5.0
+ */
+declare function importPem(pem: string): Promise<CryptoKey>;
+/**
+ * Imports a [Multibase]-encoded public key.
+ *
+ * [Multibase]: https://www.w3.org/TR/vc-data-integrity/#multibase-0
+ * @param key The Multibase-encoded public key.
+ * @returns The imported public key.
+ * @throws {TypeError} If the key is invalid or unsupported.
+ * @since 0.10.0
+ */
+declare function importMultibaseKey(key: string): Promise<CryptoKey>;
+/**
+ * Exports a public key in [Multibase] format.
+ *
+ * [Multibase]: https://www.w3.org/TR/vc-data-integrity/#multibase-0
+ * @param key The public key to export.
+ * @returns The exported public key in Multibase format.
+ * @throws {TypeError} If the key is invalid or unsupported.
+ * @since 0.10.0
+ */
+declare function exportMultibaseKey(key: CryptoKey): Promise<string>;
+//#endregion
+export { type AuthenticatedDocumentLoaderFactory, type DocumentLoader, type DocumentLoaderFactory, type DocumentLoaderFactoryOptions, FetchError, GetAuthenticatedDocumentLoaderOptions, type GetDocumentLoaderOptions, type GetUserAgentOptions, type KvCacheParameters, LanguageString, type RemoteDocument, exportMultibaseKey, exportSpki, fetchDocumentLoader, getAuthenticatedDocumentLoader, getDocumentLoader, getUserAgent, importMultibaseKey, importPem, importPkcs1, importSpki, kvCache };

package/dist/runtime/mod.js

@@ -2,12 +2,11 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { FetchError, fetchDocumentLoader, getDocumentLoader, getUserAgent, kvCache } from "../docloader-RFcxdgI8.js";
-import { LanguageString, exportMultibaseKey, exportSpki, importMultibaseKey, importPem, importPkcs1, importSpki } from "../actor-7vCpWIGd.js";
-import "../lookup-CdHTw-tQ.js";
-import "../key-BQg3A7eo.js";
-import "../http-B__WhFrv.js";
-import { getAuthenticatedDocumentLoader } from "../authdocloader-niAJMnCQ.js";
-import "../runtime-BSkOVUWM.js";
+import { i as getDocumentLoader, o as getUserAgent, r as fetchDocumentLoader, s as kvCache, t as FetchError } from "../docloader.js";
+import { Ct as importPkcs1, St as importPem, bt as exportSpki, vt as LanguageString, wt as importSpki, xt as importMultibaseKey, yt as exportMultibaseKey } from "../actor.js";
+import "../lookup.js";
+import "../key2.js";
+import "../http.js";
+import { t as getAuthenticatedDocumentLoader } from "../authdocloader.js";
 
 export { FetchError, LanguageString, exportMultibaseKey, exportSpki, fetchDocumentLoader, getAuthenticatedDocumentLoader, getDocumentLoader, getUserAgent, importMultibaseKey, importPem, importPkcs1, importSpki, kvCache };