@fedify/fedify 1.7.5-pr.293.995 → 1.8.0-dev.1003

package/dist/federation/mod.d.ts

@@ -1,15 +1,15 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { KvKey, KvStore, KvStoreSetOptions, MemoryKvStore } from "../kv-DRaeSXco.js";
-import "../docloader-Q42SMRIB.js";
-import "../client-DvtwXO7t.js";
-import "../vocab-CzEfWQk2.js";
-import "../actor-CPpvuBKU.js";
-import "../http-B8EiSgi2.js";
-import "../owner-D0cOz8R5.js";
-import "../mod-CDzlVCUF.js";
-import "../lookup-Bf-K85bV.js";
-import { ActorAliasMapper, ActorCallbackSetters, ActorDispatcher, ActorHandleMapper, ActorKeyPair, ActorKeyPairsDispatcher, AuthorizePredicate, CollectionCallbackSetters, CollectionCounter, CollectionCursor, CollectionDispatcher, Context, CreateExponentialBackoffPolicyOptions, CreateFederationOptions, Federatable, Federation, FederationBuilder, FederationFetchOptions, FederationKvPrefixes, FederationOptions, FederationOrigin, FederationQueueOptions, FederationStartQueueOptions, ForwardActivityOptions, GetSignedKeyOptions, InboxContext, InboxErrorHandler, InboxListener, InboxListenerSetters, Message, NodeInfoDispatcher, ObjectAuthorizePredicate, ObjectCallbackSetters, ObjectDispatcher, OutboxErrorHandler, PageItems, ParseUriResult, RequestContext, RespondWithObjectOptions, RetryContext, RetryPolicy, RouteActivityOptions, Router, RouterError, RouterOptions, RouterRouteResult, SendActivityOptions, SendActivityOptionsForCollection, SenderKeyPair, SharedInboxKeyDispatcher, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "../context-DPggmpB4.js";
+import { KvKey, KvStore, KvStoreSetOptions, MemoryKvStore } from "../kv-DDdb1hMa.js";
+import "../docloader-BeCtcTOJ.js";
+import "../client-BQ4AQGKo.js";
+import "../vocab-By6mpzr-.js";
+import "../actor-B4TBtqRP.js";
+import "../http-CP2ZUALI.js";
+import "../owner-CEv_PfyK.js";
+import "../mod-BFwgZ7_K.js";
+import "../lookup-J_m4YZg0.js";
+import { ActorAliasMapper, ActorCallbackSetters, ActorDispatcher, ActorHandleMapper, ActorKeyPair, ActorKeyPairsDispatcher, AuthorizePredicate, CollectionCallbackSetters, CollectionCounter, CollectionCursor, CollectionDispatcher, Context, CreateExponentialBackoffPolicyOptions, CreateFederationOptions, Federatable, Federation, FederationBuilder, FederationFetchOptions, FederationKvPrefixes, FederationOptions, FederationOrigin, FederationQueueOptions, FederationStartQueueOptions, ForwardActivityOptions, GetSignedKeyOptions, InboxContext, InboxErrorHandler, InboxListener, InboxListenerSetters, Message, NodeInfoDispatcher, ObjectAuthorizePredicate, ObjectCallbackSetters, ObjectDispatcher, OutboxErrorHandler, PageItems, ParseUriResult, RequestContext, RespondWithObjectOptions, RetryContext, RetryPolicy, RouteActivityOptions, Router, RouterError, RouterOptions, RouterRouteResult, SendActivityOptions, SendActivityOptionsForCollection, SenderKeyPair, SharedInboxKeyDispatcher, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "../context-CrSyJrIa.js";
 import { InProcessMessageQueue, InProcessMessageQueueOptions, MessageQueue, MessageQueueEnqueueOptions, MessageQueueListenOptions, ParallelMessageQueue } from "../mq-DYKDDJmp.js";
 import "../mod-g0xFzAP9.js";
 export { ActorAliasMapper, ActorCallbackSetters, ActorDispatcher, ActorHandleMapper, ActorKeyPair, ActorKeyPairsDispatcher, AuthorizePredicate, CollectionCallbackSetters, CollectionCounter, CollectionCursor, CollectionDispatcher, Context, CreateExponentialBackoffPolicyOptions, CreateFederationOptions, Federatable, Federation, FederationBuilder, FederationFetchOptions, FederationKvPrefixes, FederationOptions, FederationOrigin, FederationQueueOptions, FederationStartQueueOptions, ForwardActivityOptions, GetSignedKeyOptions, InProcessMessageQueue, InProcessMessageQueueOptions, InboxContext, InboxErrorHandler, InboxListener, InboxListenerSetters, KvKey, KvStore, KvStoreSetOptions, MemoryKvStore, Message, MessageQueue, MessageQueueEnqueueOptions, MessageQueueListenOptions, NodeInfoDispatcher, ObjectAuthorizePredicate, ObjectCallbackSetters, ObjectDispatcher, OutboxErrorHandler, PageItems, ParallelMessageQueue, ParseUriResult, RequestContext, RespondWithObjectOptions, RetryContext, RetryPolicy, RouteActivityOptions, Router, RouterError, RouterOptions, RouterRouteResult, SendActivityOptions, SendActivityOptionsForCollection, SenderKeyPair, SharedInboxKeyDispatcher, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable };

package/dist/federation/mod.js

@@ -3,16 +3,16 @@
       import { URLPattern } from "urlpattern-polyfill";
     
 import "../transformers-ghwJuzGY.js";
-import "../docloader-0f763awu.js";
-import "../actor-DpOCWBU2.js";
-import { Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-CaLPAUX8.js";
-import "../lookup-C0QZwcNp.js";
-import "../key-Du7Mtz6c.js";
-import "../http-Ctrc1mTY.js";
-import "../proof-Ckfj_lUB.js";
-import { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue } from "../federation-BRIQn-GV.js";
-import "../types-NuyNm5jf.js";
-import "../authdocloader-C8ocs8WK.js";
-import "../vocab-BIEZj4Uc.js";
+import "../docloader-DP2c5RKR.js";
+import "../actor-CESvGo9c.js";
+import { Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-BmxgK7wV.js";
+import "../lookup-BYgWjDk7.js";
+import "../key-BjUOfK1Q.js";
+import "../http-lmPPO2Eo.js";
+import "../proof-B0keqm8m.js";
+import { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue } from "../federation-C44ekWNP.js";
+import "../types-D9EP9eEB.js";
+import "../authdocloader-QSRLyapW.js";
+import "../vocab-BFfwVBw7.js";
 
 export { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue, Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable };

package/dist/federation/mq.test.js

@@ -3,16 +3,16 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { assertEquals } from "../assert_equals-XhPMqqO2.js";
-import { assert } from "../assert-0DSnLFa8.js";
-import "../assert_instance_of-v5adm_-K.js";
+import { assertEquals } from "../assert_equals-C5gKCm6A.js";
+import { assert } from "../assert-DwEa6glZ.js";
+import "../assert_instance_of-C9QtN-X9.js";
 import { test } from "../testing-BZ0dJ4qn.js";
-import { assertGreater, assertGreaterOrEqual } from "../std__assert-CmyZxqPw.js";
-import { assertFalse } from "../assert_rejects-D_nYI1gs.js";
-import "../assert_is_error-Drwb_yQp.js";
-import "../assert_not_equals-BRPdeJ9D.js";
-import "../assert_throws-DNuPhPNp.js";
-import { delay } from "@es-toolkit/es-toolkit";
+import { assertGreater, assertGreaterOrEqual } from "../std__assert-B3iAixc-.js";
+import { assertFalse } from "../assert_rejects-DceVjUlD.js";
+import "../assert_is_error-DQdKoRgb.js";
+import "../assert_not_equals-7pyUM3Ib.js";
+import "../assert_throws-DTDC_gwN.js";
+import { delay } from "es-toolkit";
 
 //#region federation/mq.ts
 /**
@@ -225,7 +225,7 @@ test("InProcessMessageQueue", async (t) => {
 });
 test("MessageQueue.nativeRetrial", async (t) => {
 	if ("Deno" in globalThis && "openKv" in globalThis.Deno && typeof globalThis.Deno.openKv === "function") await t.step("DenoKvMessageQueue", async () => {
-		const { DenoKvMessageQueue } = await import("../denokv-CvROlGYX.js");
+		const { DenoKvMessageQueue } = await import("../denokv-QWKsIqML.js");
 		const mq = new DenoKvMessageQueue(await globalThis.Deno.openKv(":memory:"));
 		assert(mq.nativeRetrial);
 		if (Symbol.dispose in mq) {
@@ -264,7 +264,7 @@ test("MessageQueue.nativeRetrial", async (t) => {
 });
 const queues = { InProcessMessageQueue: () => Promise.resolve(new InProcessMessageQueue()) };
 if ("Deno" in globalThis && "openKv" in globalThis.Deno && typeof globalThis.Deno.openKv === "function") {
-	const { DenoKvMessageQueue } = await import("../denokv-CvROlGYX.js");
+	const { DenoKvMessageQueue } = await import("../denokv-QWKsIqML.js");
 	queues.DenoKvMessageQueue = async () => new DenoKvMessageQueue(await globalThis.Deno.openKv(":memory:"));
 }
 for (const mqName in queues) test({

package/dist/federation/retry.test.js

@@ -3,10 +3,10 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { AssertionError, assertEquals } from "../assert_equals-XhPMqqO2.js";
+import { AssertionError, assertEquals } from "../assert_equals-C5gKCm6A.js";
 import { createExponentialBackoffPolicy } from "../retry-BiIhZWgD.js";
 import { test } from "../testing-BZ0dJ4qn.js";
-import { assertNotEquals } from "../assert_not_equals-BRPdeJ9D.js";
+import { assertNotEquals } from "../assert_not_equals-7pyUM3Ib.js";
 
 //#region federation/retry.test.ts
 test("createExponentialBackoffPolicy()", () => {

package/dist/federation/router.test.js

@@ -3,16 +3,16 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { assertEquals } from "../assert_equals-XhPMqqO2.js";
-import { assert } from "../assert-0DSnLFa8.js";
-import "../assert_instance_of-v5adm_-K.js";
-import { Router, RouterError } from "../router-D_aVZZUc.js";
+import { assertEquals } from "../assert_equals-C5gKCm6A.js";
+import { assert } from "../assert-DwEa6glZ.js";
+import "../assert_instance_of-C9QtN-X9.js";
+import { Router, RouterError } from "../router-D3UybECj.js";
 import { test } from "../testing-BZ0dJ4qn.js";
-import "../std__assert-CmyZxqPw.js";
-import { assertFalse } from "../assert_rejects-D_nYI1gs.js";
-import "../assert_is_error-Drwb_yQp.js";
-import "../assert_not_equals-BRPdeJ9D.js";
-import { assertThrows } from "../assert_throws-DNuPhPNp.js";
+import "../std__assert-B3iAixc-.js";
+import { assertFalse } from "../assert_rejects-DceVjUlD.js";
+import "../assert_is_error-DQdKoRgb.js";
+import "../assert_not_equals-7pyUM3Ib.js";
+import { assertThrows } from "../assert_throws-DTDC_gwN.js";
 
 //#region federation/router.test.ts
 function setUp(options = {}) {

package/dist/federation/send.test.js

@@ -3,30 +3,30 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { assertEquals } from "../assert_equals-XhPMqqO2.js";
-import { assert } from "../assert-0DSnLFa8.js";
-import "../assert_instance_of-v5adm_-K.js";
-import "../docloader-CWnRyKZz.js";
+import { assertEquals } from "../assert_equals-C5gKCm6A.js";
+import { assert } from "../assert-DwEa6glZ.js";
+import "../assert_instance_of-C9QtN-X9.js";
+import "../docloader-Coh6BBtD.js";
 import "../url-kTAI6_KP.js";
 import "../multibase-DeCHcK8L.js";
-import { Activity, Application, Endpoints, Group, Person, Service } from "../vocab-CJVgR_C2.js";
+import { Activity, Application, Endpoints, Group, Person, Service } from "../vocab-Df91ohvp.js";
 import "../langstr-DbWheeIS.js";
-import "../lookup-BhjMJsQq.js";
+import "../lookup-DU2MRGYe.js";
 import "../type-D2s5lmbZ.js";
-import "../actor-DCfCQoKy.js";
-import "../key-w62j0nN_.js";
-import { verifyRequest } from "../http-C2jYH3Wj.js";
-import { doesActorOwnKey } from "../owner-B681rcfZ.js";
-import { extractInboxes, sendActivity } from "../send-C3nUuiVP.js";
+import "../actor-CqSuisvH.js";
+import "../key-BLqpPTN_.js";
+import { verifyRequest } from "../http-CkfVl7ql.js";
+import { doesActorOwnKey } from "../owner-yriwUrxg.js";
+import { extractInboxes, sendActivity } from "../send-CdU_Vjiy.js";
 import { test } from "../testing-BZ0dJ4qn.js";
-import "../std__assert-CmyZxqPw.js";
-import { assertFalse, assertRejects } from "../assert_rejects-D_nYI1gs.js";
-import "../assert_is_error-Drwb_yQp.js";
-import { assertNotEquals } from "../assert_not_equals-BRPdeJ9D.js";
-import "../assert_throws-DNuPhPNp.js";
+import "../std__assert-B3iAixc-.js";
+import { assertFalse, assertRejects } from "../assert_rejects-DceVjUlD.js";
+import "../assert_is_error-DQdKoRgb.js";
+import { assertNotEquals } from "../assert_not_equals-7pyUM3Ib.js";
+import "../assert_throws-DTDC_gwN.js";
 import { mockDocumentLoader } from "../docloader-09nVWLAZ.js";
-import { ed25519Multikey, ed25519PrivateKey, rsaPrivateKey2, rsaPublicKey2 } from "../keys-CLKmoYUK.js";
-import { esm_default } from "../esm-CASHO3OR.js";
+import { ed25519Multikey, ed25519PrivateKey, rsaPrivateKey2, rsaPublicKey2 } from "../keys-D9Gc5bvV.js";
+import { esm_default } from "../esm-d-9EVGaP.js";
 
 //#region federation/send.test.ts
 test("extractInboxes()", () => {

package/dist/{federation-BRIQn-GV.js → federation-C44ekWNP.js}

@@ -2,6 +2,8 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
+import { isEqual } from "es-toolkit";
+
 //#region federation/kv.ts
 /**
 * A key–value store that stores values in memory.
@@ -45,6 +47,26 @@ var MemoryKvStore = class {
 		delete this.#values[encodedKey];
 		return Promise.resolve();
 	}
+	/**
+	* {@inheritDoc KvStore.cas}
+	*/
+	cas(key, expectedValue, newValue, options) {
+		const encodedKey = this.#encodeKey(key);
+		const entry = this.#values[encodedKey];
+		let currentValue;
+		if (entry == null) currentValue = void 0;
+		else {
+			const [value, expiration$1] = entry;
+			if (expiration$1 != null && Temporal.Now.instant().until(expiration$1).sign < 0) {
+				delete this.#values[encodedKey];
+				currentValue = void 0;
+			} else currentValue = value;
+		}
+		if (!isEqual(currentValue, expectedValue)) return Promise.resolve(false);
+		const expiration = options?.ttl == null ? null : Temporal.Now.instant().add(options.ttl.round({ largestUnit: "hour" }));
+		this.#values[encodedKey] = [newValue, expiration];
+		return Promise.resolve(true);
+	}
 };
 
 //#endregion
@@ -75,12 +97,12 @@ var InProcessMessageQueue = class {
 		this.#pollIntervalMs = Temporal.Duration.from(options.pollInterval ?? { seconds: 5 }).total("millisecond");
 	}
 	enqueue(message, options) {
-		const delay = options?.delay == null ? 0 : Math.max(options.delay.total("millisecond"), 0);
-		if (delay > 0) {
+		const delay$1 = options?.delay == null ? 0 : Math.max(options.delay.total("millisecond"), 0);
+		if (delay$1 > 0) {
 			setTimeout(() => this.enqueue(message, {
 				...options,
 				delay: void 0
-			}), delay);
+			}), delay$1);
 			return Promise.resolve();
 		}
 		this.#messages.push(message);
@@ -89,12 +111,12 @@ var InProcessMessageQueue = class {
 	}
 	enqueueMany(messages, options) {
 		if (messages.length === 0) return Promise.resolve();
-		const delay = options?.delay == null ? 0 : Math.max(options.delay.total("millisecond"), 0);
-		if (delay > 0) {
+		const delay$1 = options?.delay == null ? 0 : Math.max(options.delay.total("millisecond"), 0);
+		if (delay$1 > 0) {
 			setTimeout(() => this.enqueueMany(messages, {
 				...options,
 				delay: void 0
-			}), delay);
+			}), delay$1);
 			return Promise.resolve();
 		}
 		this.#messages.push(...messages);

package/dist/{http-B8EiSgi2.d.ts → http-CP2ZUALI.d.ts}

@@ -1,7 +1,7 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { DocumentLoader } from "./docloader-Q42SMRIB.js";
-import { CryptographicKey, Multikey } from "./vocab-CzEfWQk2.js";
+import { DocumentLoader } from "./docloader-BeCtcTOJ.js";
+import { CryptographicKey, Multikey } from "./vocab-By6mpzr-.js";
 import { TracerProvider } from "@opentelemetry/api";
 
 //#region sig/key.d.ts

package/dist/{http-C2jYH3Wj.js → http-CkfVl7ql.js}

@@ -3,9 +3,9 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./docloader-CWnRyKZz.js";
-import { CryptographicKey } from "./vocab-CJVgR_C2.js";
-import { fetchKey, validateCryptoKey } from "./key-w62j0nN_.js";
+import { deno_default } from "./docloader-Coh6BBtD.js";
+import { CryptographicKey } from "./vocab-Df91ohvp.js";
+import { fetchKey, validateCryptoKey } from "./key-BLqpPTN_.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
@@ -645,6 +645,29 @@ async function verifyRequestRfc9421(request, span, { documentLoader, contextLoad
 	return validKey;
 }
 /**
+* Helper function to create a new Request for redirect handling.
+* @param request The original request.
+* @param location The redirect location.
+* @param body The request body as ArrayBuffer or undefined.
+* @returns A new Request object for the redirect.
+*/
+function createRedirectRequest(request, location, body) {
+	return new Request(location, {
+		method: request.method,
+		headers: request.headers,
+		body,
+		redirect: "manual",
+		signal: request.signal,
+		mode: request.mode,
+		credentials: request.credentials,
+		referrer: request.referrer,
+		referrerPolicy: request.referrerPolicy,
+		integrity: request.integrity,
+		keepalive: request.keepalive,
+		cache: request.cache
+	});
+}
+/**
 * Performs a double-knock request to the given URL.  For the details of
 * double-knocking, see
 * <https://swicg.github.io/activitypub-http-signature/#how-to-upgrade-supported-versions>.
@@ -667,19 +690,7 @@ async function doubleKnock(request, identity, options = {}) {
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 		const location = response.headers.get("Location");
 		const body = request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : void 0;
-		return doubleKnock(new Request(location, {
-			method: request.method,
-			headers: request.headers,
-			body,
-			redirect: "manual",
-			signal: request.signal,
-			mode: request.mode,
-			credentials: request.credentials,
-			referrer: request.referrer,
-			referrerPolicy: request.referrerPolicy,
-			integrity: request.integrity,
-			keepalive: request.keepalive
-		}), identity, options);
+		return doubleKnock(createRedirectRequest(request, location, body), identity, options);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		getLogger([
@@ -700,11 +711,8 @@ async function doubleKnock(request, identity, options = {}) {
 		response = await fetch(signedRequest, { redirect: "manual" });
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 			const location = response.headers.get("Location");
-			const body = request.method !== "GET" && request.method !== "HEAD" ? request.clone().body : null;
-			return doubleKnock(new Request(location, {
-				...request,
-				body
-			}), identity, options);
+			const body = request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : void 0;
+			return doubleKnock(createRedirectRequest(request, location, body), identity, options);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{http-Ctrc1mTY.js → http-lmPPO2Eo.js}

@@ -2,9 +2,9 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { deno_default } from "./docloader-0f763awu.js";
-import { CryptographicKey } from "./actor-DpOCWBU2.js";
-import { fetchKey, validateCryptoKey } from "./key-Du7Mtz6c.js";
+import { deno_default } from "./docloader-DP2c5RKR.js";
+import { CryptographicKey } from "./actor-CESvGo9c.js";
+import { fetchKey, validateCryptoKey } from "./key-BjUOfK1Q.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
@@ -644,6 +644,29 @@ async function verifyRequestRfc9421(request, span, { documentLoader, contextLoad
 	return validKey;
 }
 /**
+* Helper function to create a new Request for redirect handling.
+* @param request The original request.
+* @param location The redirect location.
+* @param body The request body as ArrayBuffer or undefined.
+* @returns A new Request object for the redirect.
+*/
+function createRedirectRequest(request, location, body) {
+	return new Request(location, {
+		method: request.method,
+		headers: request.headers,
+		body,
+		redirect: "manual",
+		signal: request.signal,
+		mode: request.mode,
+		credentials: request.credentials,
+		referrer: request.referrer,
+		referrerPolicy: request.referrerPolicy,
+		integrity: request.integrity,
+		keepalive: request.keepalive,
+		cache: request.cache
+	});
+}
+/**
 * Performs a double-knock request to the given URL.  For the details of
 * double-knocking, see
 * <https://swicg.github.io/activitypub-http-signature/#how-to-upgrade-supported-versions>.
@@ -666,19 +689,7 @@ async function doubleKnock(request, identity, options = {}) {
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 		const location = response.headers.get("Location");
 		const body = request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : void 0;
-		return doubleKnock(new Request(location, {
-			method: request.method,
-			headers: request.headers,
-			body,
-			redirect: "manual",
-			signal: request.signal,
-			mode: request.mode,
-			credentials: request.credentials,
-			referrer: request.referrer,
-			referrerPolicy: request.referrerPolicy,
-			integrity: request.integrity,
-			keepalive: request.keepalive
-		}), identity, options);
+		return doubleKnock(createRedirectRequest(request, location, body), identity, options);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		getLogger([
@@ -699,11 +710,8 @@ async function doubleKnock(request, identity, options = {}) {
 		response = await fetch(signedRequest, { redirect: "manual" });
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 			const location = response.headers.get("Location");
-			const body = request.method !== "GET" && request.method !== "HEAD" ? request.clone().body : null;
-			return doubleKnock(new Request(location, {
-				...request,
-				body
-			}), identity, options);
+			const body = request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : void 0;
+			return doubleKnock(createRedirectRequest(request, location, body), identity, options);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{inbox-C0lZZQrn.js → inbox-CF21yedu.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./docloader-CWnRyKZz.js";
-import { Activity } from "./vocab-CJVgR_C2.js";
+import { deno_default } from "./docloader-Coh6BBtD.js";
+import { Activity } from "./vocab-Df91ohvp.js";
 import { getTypeId } from "./type-D2s5lmbZ.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";

package/dist/{key-w62j0nN_.js → key-BLqpPTN_.js}

@@ -3,9 +3,9 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default, getDocumentLoader } from "./docloader-CWnRyKZz.js";
-import { CryptographicKey, Object as Object$1 } from "./vocab-CJVgR_C2.js";
-import { isActor } from "./actor-DCfCQoKy.js";
+import { deno_default, getDocumentLoader } from "./docloader-Coh6BBtD.js";
+import { CryptographicKey, Object as Object$1 } from "./vocab-Df91ohvp.js";
+import { isActor } from "./actor-CqSuisvH.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{key-Du7Mtz6c.js → key-BjUOfK1Q.js}

@@ -2,8 +2,8 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { deno_default, getDocumentLoader } from "./docloader-0f763awu.js";
-import { CryptographicKey, Object as Object$1, isActor } from "./actor-DpOCWBU2.js";
+import { deno_default, getDocumentLoader } from "./docloader-DP2c5RKR.js";
+import { CryptographicKey, Object as Object$1, isActor } from "./actor-CESvGo9c.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{key-DdzidiHt.js → key-CSLD2uRf.js}

@@ -2,9 +2,9 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import "./docloader-0f763awu.js";
-import "./actor-DpOCWBU2.js";
-import "./lookup-C0QZwcNp.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-Du7Mtz6c.js";
+import "./docloader-DP2c5RKR.js";
+import "./actor-CESvGo9c.js";
+import "./lookup-BYgWjDk7.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-BjUOfK1Q.js";
 
 export { validateCryptoKey };

package/dist/{key-DaROeJaM.js → key-NY6yQihW.js}

@@ -3,14 +3,14 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "./docloader-CWnRyKZz.js";
+import "./docloader-Coh6BBtD.js";
 import "./url-kTAI6_KP.js";
 import "./multibase-DeCHcK8L.js";
-import "./vocab-CJVgR_C2.js";
+import "./vocab-Df91ohvp.js";
 import "./langstr-DbWheeIS.js";
-import "./lookup-BhjMJsQq.js";
+import "./lookup-DU2MRGYe.js";
 import "./type-D2s5lmbZ.js";
-import "./actor-DCfCQoKy.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-w62j0nN_.js";
+import "./actor-CqSuisvH.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-BLqpPTN_.js";
 
 export { validateCryptoKey };

package/dist/{keycache-HV9rL4Zg.js → keycache-yqwT_M3m.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey } from "./vocab-CJVgR_C2.js";
+import { CryptographicKey, Multikey } from "./vocab-Df91ohvp.js";
 
 //#region federation/keycache.ts
 var KvKeyCache = class {

package/dist/{keys-CLKmoYUK.js → keys-D9Gc5bvV.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey, importSpki } from "./vocab-CJVgR_C2.js";
+import { CryptographicKey, Multikey, importSpki } from "./vocab-Df91ohvp.js";
 
 //#region testing/keys.ts
 const rsaPublicKey1 = new CryptographicKey({

package/dist/{kv-BMY6Qf_A.js → kv-D7Yt6pnB.js}

@@ -3,6 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
+import { isEqual } from "es-toolkit";
+
 //#region federation/kv.ts
 /**
 * A key–value store that stores values in memory.
@@ -46,6 +48,26 @@ var MemoryKvStore = class {
 		delete this.#values[encodedKey];
 		return Promise.resolve();
 	}
+	/**
+	* {@inheritDoc KvStore.cas}
+	*/
+	cas(key, expectedValue, newValue, options) {
+		const encodedKey = this.#encodeKey(key);
+		const entry = this.#values[encodedKey];
+		let currentValue;
+		if (entry == null) currentValue = void 0;
+		else {
+			const [value, expiration$1] = entry;
+			if (expiration$1 != null && Temporal.Now.instant().until(expiration$1).sign < 0) {
+				delete this.#values[encodedKey];
+				currentValue = void 0;
+			} else currentValue = value;
+		}
+		if (!isEqual(currentValue, expectedValue)) return Promise.resolve(false);
+		const expiration = options?.ttl == null ? null : Temporal.Now.instant().add(options.ttl.round({ largestUnit: "hour" }));
+		this.#values[encodedKey] = [newValue, expiration];
+		return Promise.resolve(true);
+	}
 };
 
 //#endregion

package/dist/{kv-DRaeSXco.d.ts → kv-DDdb1hMa.d.ts}

@@ -44,6 +44,16 @@ interface KvStore {
    * @param key The key to delete.
    */
   delete(key: KvKey): Promise<void>;
+  /**
+   * Compare-and-swap (CAS) operation for the key–value store.
+   * @param key The key to perform the CAS operation on.
+   * @param expectedValue The expected value for the key.
+   * @param newValue The new value to set if the expected value matches.
+   * @param options Additional options for setting the value.
+   * @return `true` if the CAS operation was successful, `false` otherwise.
+   * @since 1.8.0
+   */
+  cas?: (key: KvKey, expectedValue: unknown, newValue: unknown, options?: KvStoreSetOptions) => Promise<boolean>;
 }
 /**
  * A key–value store that stores values in memory.
@@ -65,6 +75,10 @@ declare class MemoryKvStore implements KvStore {
    * {@inheritDoc KvStore.delete}
    */
   delete(key: KvKey): Promise<void>;
+  /**
+   * {@inheritDoc KvStore.cas}
+   */
+  cas(key: KvKey, expectedValue: unknown, newValue: unknown, options?: KvStoreSetOptions): Promise<boolean>;
 }
 //#endregion
 export { KvKey, KvStore, KvStoreSetOptions, MemoryKvStore };

package/dist/{ld-d8SMvc77.js → ld-zsHn8nfn.js}

@@ -3,10 +3,10 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default, getDocumentLoader } from "./docloader-CWnRyKZz.js";
-import { Activity, CryptographicKey, Object as Object$1 } from "./vocab-CJVgR_C2.js";
+import { deno_default, getDocumentLoader } from "./docloader-Coh6BBtD.js";
+import { Activity, CryptographicKey, Object as Object$1 } from "./vocab-Df91ohvp.js";
 import { getTypeId } from "./type-D2s5lmbZ.js";
-import { fetchKey, validateCryptoKey } from "./key-w62j0nN_.js";
+import { fetchKey, validateCryptoKey } from "./key-BLqpPTN_.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";

package/dist/{lookup-C0QZwcNp.js → lookup-BYgWjDk7.js}

@@ -2,7 +2,7 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-0f763awu.js";
+import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-DP2c5RKR.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 
@@ -12,7 +12,7 @@ const logger = getLogger([
 	"webfinger",
 	"lookup"
 ]);
-const MAX_REDIRECTION = 5;
+const DEFAULT_MAX_REDIRECTION = 5;
 /**
 * Looks up a WebFinger resource.
 * @param resource The resource URL to look up.
@@ -90,7 +90,8 @@ async function lookupWebFingerInternal(resource, options = {}) {
 		}
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 			redirected++;
-			if (redirected >= MAX_REDIRECTION) {
+			const maxRedirection = options.maxRedirection ?? DEFAULT_MAX_REDIRECTION;
+			if (redirected >= maxRedirection) {
 				logger.error("Too many redirections ({redirections}) while fetching WebFinger resource descriptor.", { redirections: redirected });
 				return null;
 			}