@fedify/fedify 1.9.0-dev.1426 → 1.9.0-dev.1461

package/dist/{http-BRkdMiKk.js → http-DHfs_YOG.js}

@@ -2,9 +2,9 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { deno_default } from "./docloader-BSCctXal.js";
-import { CryptographicKey } from "./actor-CgMSXJ7T.js";
-import { fetchKey, validateCryptoKey } from "./key-DxDW5e94.js";
+import { deno_default } from "./docloader-BBKozvwM.js";
+import { CryptographicKey } from "./actor-DKLEbAL7.js";
+import { fetchKey, validateCryptoKey } from "./key-C0-cZXSz.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
@@ -366,7 +366,7 @@ async function verifyRequestDraft(request, span, { documentLoader, contextLoader
 			return null;
 		}
 	}
-	const sigValues = Object.fromEntries(sigHeader.split(",").map((pair) => pair.match(/^\s*([A-Za-z]+)="([^"]*)"\s*$/)).filter((m) => m != null).map((m) => m.slice(1, 3)));
+	const sigValues = Object.fromEntries(sigHeader.split(",").map((pair) => pair.match(/^\s*([A-Za-z]+)=(?:"([^"]*)"|(\d+))\s*$/)).filter((m) => m != null).map((m) => [m[1], m[2] ?? m[3]]));
 	if (!("keyId" in sigValues)) {
 		logger.debug("Failed to verify; no keyId field found in the Signature header.", { signature: sigHeader });
 		return null;
@@ -377,6 +377,52 @@ async function verifyRequestDraft(request, span, { documentLoader, contextLoader
 		logger.debug("Failed to verify; no signature field found in the Signature header.", { signature: sigHeader });
 		return null;
 	}
+	if ("expires" in sigValues) {
+		const expiresSeconds = parseInt(sigValues.expires);
+		if (!Number.isInteger(expiresSeconds)) {
+			logger.debug("Failed to verify; invalid expires field in the Signature header: {expires}.", {
+				expires: sigValues.expires,
+				signature: sigHeader
+			});
+			return null;
+		}
+		const expires = Temporal.Instant.fromEpochMilliseconds(expiresSeconds * 1e3);
+		if (Temporal.Instant.compare(now, expires) > 0) {
+			logger.debug("Failed to verify; signature expired at {expires} (now: {now}).", {
+				expires: expires.toString(),
+				now: now.toString(),
+				signature: sigHeader
+			});
+			return null;
+		}
+	}
+	if ("created" in sigValues) {
+		const createdSeconds = parseInt(sigValues.created);
+		if (!Number.isInteger(createdSeconds)) {
+			logger.debug("Failed to verify; invalid created field in the Signature header: {created}.", {
+				created: sigValues.created,
+				signature: sigHeader
+			});
+			return null;
+		}
+		if (timeWindow !== false) {
+			const created = Temporal.Instant.fromEpochMilliseconds(createdSeconds * 1e3);
+			const tw = timeWindow ?? { minutes: 1 };
+			if (Temporal.Instant.compare(created, now.add(tw)) > 0) {
+				logger.debug("Failed to verify; created is too far in the future.", {
+					created: created.toString(),
+					now: now.toString()
+				});
+				return null;
+			} else if (Temporal.Instant.compare(created, now.subtract(tw)) < 0) {
+				logger.debug("Failed to verify; created is too far in the past.", {
+					created: created.toString(),
+					now: now.toString()
+				});
+				return null;
+			}
+		}
+	}
 	const { keyId, headers, signature } = sigValues;
 	span?.setAttribute("http_signatures.key_id", keyId);
 	if ("algorithm" in sigValues) span?.setAttribute("http_signatures.algorithm", sigValues.algorithm);
@@ -396,7 +442,7 @@ async function verifyRequestDraft(request, span, { documentLoader, contextLoader
 		logger.debug("Failed to verify; required headers missing in the Signature header: {headers}.", { headers });
 		return null;
 	}
-	const message = headerNames.map((name) => `${name}: ` + (name == "(request-target)" ? `${request.method.toLowerCase()} ${new URL(request.url).pathname}` : name == "host" ? request.headers.get("host") ?? new URL(request.url).host : request.headers.get(name))).join("\n");
+	const message = headerNames.map((name) => `${name}: ` + (name === "(request-target)" ? `${request.method.toLowerCase()} ${new URL(request.url).pathname}` : name === "(created)" ? sigValues.created ?? "" : name === "(expires)" ? sigValues.expires ?? "" : name === "host" ? request.headers.get("host") ?? new URL(request.url).host : request.headers.get(name))).join("\n");
 	const sig = decodeBase64(signature);
 	span?.setAttribute("http_signatures.signature", encodeHex(sig));
 	const verified = await crypto.subtle.verify("RSASSA-PKCS1-v1_5", key.publicKey, sig, new TextEncoder().encode(message));

package/dist/{inbox-DgeNUDDq.js → inbox-BF56GsRS.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, deno_default, getTypeId } from "./type-Caga0-TR.js";
+import { Activity, deno_default, getTypeId } from "./type-CV54_GsW.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 

package/dist/{key-BFZkjEdF.js → key-BZjRR6o0.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Object as Object$1, deno_default, getDocumentLoader } from "./type-Caga0-TR.js";
-import { isActor } from "./actor-DBVIhd3g.js";
+import { CryptographicKey, Object as Object$1, deno_default, getDocumentLoader } from "./type-CV54_GsW.js";
+import { isActor } from "./actor-Bnmy-5Nt.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{key-DxDW5e94.js → key-C0-cZXSz.js}

@@ -2,8 +2,8 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { deno_default, getDocumentLoader } from "./docloader-BSCctXal.js";
-import { CryptographicKey, Object as Object$1, isActor } from "./actor-CgMSXJ7T.js";
+import { deno_default, getDocumentLoader } from "./docloader-BBKozvwM.js";
+import { CryptographicKey, Object as Object$1, isActor } from "./actor-DKLEbAL7.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{key-DqLks8WZ.js → key-D_cYSLwi.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "./type-Caga0-TR.js";
-import "./actor-DBVIhd3g.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-BFZkjEdF.js";
+import "./type-CV54_GsW.js";
+import "./actor-Bnmy-5Nt.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-BZjRR6o0.js";
 
 export { validateCryptoKey };

package/dist/{key-CnDYMoEy.js → key-se4E48YX.js}

@@ -2,9 +2,9 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import "./docloader-BSCctXal.js";
-import "./actor-CgMSXJ7T.js";
-import "./lookup-Cni8TEY-.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-DxDW5e94.js";
+import "./docloader-BBKozvwM.js";
+import "./actor-DKLEbAL7.js";
+import "./lookup-oH4Tkz5u.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-C0-cZXSz.js";
 
 export { validateCryptoKey };

package/dist/{keycache-DiK_ysAm.js → keycache-XTiCGJXo.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey } from "./type-Caga0-TR.js";
+import { CryptographicKey, Multikey } from "./type-CV54_GsW.js";
 
 //#region src/federation/keycache.ts
 var KvKeyCache = class {

package/dist/{keys-CU3pwbgD.js → keys-KSJYwlm7.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey, importSpki } from "./type-Caga0-TR.js";
+import { CryptographicKey, Multikey, importSpki } from "./type-CV54_GsW.js";
 
 //#region src/testing/keys.ts
 const rsaPublicKey1 = new CryptographicKey({

package/dist/{ld-DZBKkjYA.js → ld-DGTowKKX.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, CryptographicKey, Object as Object$1, deno_default, getDocumentLoader, getTypeId } from "./type-Caga0-TR.js";
-import { fetchKey, validateCryptoKey } from "./key-BFZkjEdF.js";
+import { Activity, CryptographicKey, Object as Object$1, deno_default, getDocumentLoader, getTypeId } from "./type-CV54_GsW.js";
+import { fetchKey, validateCryptoKey } from "./key-BZjRR6o0.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";

package/dist/{lookup-2btkCjyT.js → lookup-jyRLW_1A.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Object as Object$1, deno_default, getDocumentLoader, getTypeId, lookupWebFinger } from "./type-Caga0-TR.js";
+import { Object as Object$1, deno_default, getDocumentLoader, getTypeId, lookupWebFinger } from "./type-CV54_GsW.js";
 import { cloneDeep, delay } from "es-toolkit";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{lookup-Cni8TEY-.js → lookup-oH4Tkz5u.js}

@@ -2,7 +2,7 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-BSCctXal.js";
+import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-BBKozvwM.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/middleware-BaAoxBlu.js

@@ -0,0 +1,17 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+    
+import "./transformers-Dna8Fg7k.js";
+import "./docloader-BBKozvwM.js";
+import "./actor-DKLEbAL7.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "./middleware-DvI0zggU.js";
+import "./lookup-oH4Tkz5u.js";
+import "./key-C0-cZXSz.js";
+import "./http-DHfs_YOG.js";
+import "./proof-D4Lf3ygt.js";
+import "./types-csgj3KOJ.js";
+import "./authdocloader-C3dqTyRk.js";
+import "./vocab-rGoe8nQD.js";
+
+export { FederationImpl };

package/dist/middleware-DNxcRiWz.js

@@ -0,0 +1,26 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+      globalThis.addEventListener = () => {};
+    
+import "./type-CV54_GsW.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "./middleware-Lka8gMFX.js";
+import "./semver-dArNLkR9.js";
+import "./client-Be6Zm6Qo.js";
+import "./lookup-jyRLW_1A.js";
+import "./types-BIgY6c-l.js";
+import "./actor-Bnmy-5Nt.js";
+import "./key-BZjRR6o0.js";
+import "./http-CVGIQDIM.js";
+import "./authdocloader-Ch1dTB6i.js";
+import "./ld-DGTowKKX.js";
+import "./owner-BcisYGga.js";
+import "./proof-DjpZy3G2.js";
+import "./inbox-BF56GsRS.js";
+import "./builder-DOnG508o.js";
+import "./collection-CSzG2j1P.js";
+import "./keycache-XTiCGJXo.js";
+import "./retry-D4GJ670a.js";
+import "./send-Cy_hTnC2.js";
+
+export { FederationImpl };

package/dist/{middleware-CccxNSFX.js → middleware-DvI0zggU.js}

@@ -3,15 +3,15 @@
       import { URLPattern } from "urlpattern-polyfill";
     
 import { getDefaultActivityTransformers } from "./transformers-Dna8Fg7k.js";
-import { deno_default, getDocumentLoader, kvCache } from "./docloader-BSCctXal.js";
-import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, getTypeId } from "./actor-CgMSXJ7T.js";
-import { lookupWebFinger } from "./lookup-Cni8TEY-.js";
-import { exportJwk, importJwk, validateCryptoKey } from "./key-DxDW5e94.js";
-import { doubleKnock, verifyRequest } from "./http-BRkdMiKk.js";
-import { detachSignature, doesActorOwnKey, getKeyOwner, hasSignature, signJsonLd, signObject, verifyJsonLd, verifyObject } from "./proof-CMLfMbze.js";
-import { getNodeInfo, nodeInfoToJson } from "./types-DJjc-Yj8.js";
-import { getAuthenticatedDocumentLoader } from "./authdocloader-Cl_S6m_U.js";
-import { lookupObject, traverseCollection } from "./vocab-B7bJTtQA.js";
+import { deno_default, getDocumentLoader, kvCache } from "./docloader-BBKozvwM.js";
+import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, getTypeId } from "./actor-DKLEbAL7.js";
+import { lookupWebFinger } from "./lookup-oH4Tkz5u.js";
+import { exportJwk, importJwk, validateCryptoKey } from "./key-C0-cZXSz.js";
+import { doubleKnock, verifyRequest } from "./http-DHfs_YOG.js";
+import { detachSignature, doesActorOwnKey, getKeyOwner, hasSignature, signJsonLd, signObject, verifyJsonLd, verifyObject } from "./proof-D4Lf3ygt.js";
+import { getNodeInfo, nodeInfoToJson } from "./types-csgj3KOJ.js";
+import { getAuthenticatedDocumentLoader } from "./authdocloader-C3dqTyRk.js";
+import { lookupObject, traverseCollection } from "./vocab-rGoe8nQD.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 import { encodeHex } from "byte-encodings/hex";
@@ -320,7 +320,7 @@ var FederationBuilderImpl = class {
 		this.collectionTypeIds = {};
 	}
 	async build(options) {
-		const { FederationImpl: FederationImpl$1 } = await import("./middleware-mCOJY7S6.js");
+		const { FederationImpl: FederationImpl$1 } = await import("./middleware-BaAoxBlu.js");
 		const f = new FederationImpl$1(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();

package/dist/{middleware-DPJZ1_pj.js → middleware-Lka8gMFX.js}

@@ -3,22 +3,22 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, deno_default, getDocumentLoader, getTypeId, kvCache, lookupWebFinger } from "./type-Caga0-TR.js";
-import { getNodeInfo } from "./client-D1DkBgMW.js";
-import { RouterError, lookupObject, traverseCollection } from "./lookup-2btkCjyT.js";
+import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, deno_default, getDocumentLoader, getTypeId, kvCache, lookupWebFinger } from "./type-CV54_GsW.js";
+import { getNodeInfo } from "./client-Be6Zm6Qo.js";
+import { RouterError, lookupObject, traverseCollection } from "./lookup-jyRLW_1A.js";
 import { nodeInfoToJson } from "./types-BIgY6c-l.js";
-import { exportJwk, importJwk, validateCryptoKey } from "./key-BFZkjEdF.js";
-import { verifyRequest } from "./http-CEL1OpoJ.js";
-import { getAuthenticatedDocumentLoader } from "./authdocloader-GJlMpzlI.js";
-import { detachSignature, hasSignature, signJsonLd, verifyJsonLd } from "./ld-DZBKkjYA.js";
-import { doesActorOwnKey, getKeyOwner } from "./owner-C7mGG_7y.js";
-import { signObject, verifyObject } from "./proof-jMo9AJgi.js";
-import { routeActivity } from "./inbox-DgeNUDDq.js";
-import { FederationBuilderImpl } from "./builder-DeF3DvGa.js";
+import { exportJwk, importJwk, validateCryptoKey } from "./key-BZjRR6o0.js";
+import { verifyRequest } from "./http-CVGIQDIM.js";
+import { getAuthenticatedDocumentLoader } from "./authdocloader-Ch1dTB6i.js";
+import { detachSignature, hasSignature, signJsonLd, verifyJsonLd } from "./ld-DGTowKKX.js";
+import { doesActorOwnKey, getKeyOwner } from "./owner-BcisYGga.js";
+import { signObject, verifyObject } from "./proof-DjpZy3G2.js";
+import { routeActivity } from "./inbox-BF56GsRS.js";
+import { FederationBuilderImpl } from "./builder-DOnG508o.js";
 import { buildCollectionSynchronizationHeader } from "./collection-CSzG2j1P.js";
-import { KvKeyCache } from "./keycache-DiK_ysAm.js";
+import { KvKeyCache } from "./keycache-XTiCGJXo.js";
 import { createExponentialBackoffPolicy } from "./retry-D4GJ670a.js";
-import { extractInboxes, sendActivity } from "./send-DxWNr0-E.js";
+import { extractInboxes, sendActivity } from "./send-Cy_hTnC2.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_HTTP_RESPONSE_HEADER, ATTR_HTTP_RESPONSE_STATUS_CODE, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";

package/dist/mod.js

@@ -4,17 +4,17 @@
     
 import { actorDehydrator, autoIdAssigner, getDefaultActivityTransformers } from "./transformers-Dna8Fg7k.js";
 import "./compat-Bb5myD13.js";
-import { FetchError, fetchDocumentLoader, getDocumentLoader, getUserAgent, kvCache } from "./docloader-BSCctXal.js";
-import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, LanguageString, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View, exportMultibaseKey, exportSpki, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, importMultibaseKey, importPem, importPkcs1, importSpki, isActor, normalizeActorHandle } from "./actor-CgMSXJ7T.js";
-import { Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "./middleware-CccxNSFX.js";
-import { lookupWebFinger } from "./lookup-Cni8TEY-.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk } from "./key-DxDW5e94.js";
-import { signRequest, verifyRequest } from "./http-BRkdMiKk.js";
-import { attachSignature, createProof, createSignature, detachSignature, doesActorOwnKey, getKeyOwner, signJsonLd, signObject, verifyJsonLd, verifyObject, verifyProof, verifySignature } from "./proof-CMLfMbze.js";
+import { FetchError, fetchDocumentLoader, getDocumentLoader, getUserAgent, kvCache } from "./docloader-BBKozvwM.js";
+import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, LanguageString, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View, exportMultibaseKey, exportSpki, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, importMultibaseKey, importPem, importPkcs1, importSpki, isActor, normalizeActorHandle } from "./actor-DKLEbAL7.js";
+import { Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "./middleware-DvI0zggU.js";
+import { lookupWebFinger } from "./lookup-oH4Tkz5u.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk } from "./key-C0-cZXSz.js";
+import { signRequest, verifyRequest } from "./http-DHfs_YOG.js";
+import { attachSignature, createProof, createSignature, detachSignature, doesActorOwnKey, getKeyOwner, signJsonLd, signObject, verifyJsonLd, verifyObject, verifyProof, verifySignature } from "./proof-D4Lf3ygt.js";
 import { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue } from "./federation-CMX7WzeL.js";
-import { formatSemVer, getNodeInfo, nodeInfoToJson, parseNodeInfo, parseSemVer } from "./types-DJjc-Yj8.js";
-import { getAuthenticatedDocumentLoader } from "./authdocloader-Cl_S6m_U.js";
-import { PUBLIC_COLLECTION, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "./vocab-B7bJTtQA.js";
+import { formatSemVer, getNodeInfo, nodeInfoToJson, parseNodeInfo, parseSemVer } from "./types-csgj3KOJ.js";
+import { getAuthenticatedDocumentLoader } from "./authdocloader-C3dqTyRk.js";
+import { PUBLIC_COLLECTION, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "./vocab-rGoe8nQD.js";
 import "./nodeinfo-CyEbLjHs.js";
 import "./runtime-BSkOVUWM.js";
 import "./sig-BXJO--F9.js";

package/dist/nodeinfo/client.test.js

@@ -3,20 +3,20 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-Caga0-TR.js";
+import "../type-CV54_GsW.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import "../semver-dArNLkR9.js";
-import { getNodeInfo, parseInboundService, parseNodeInfo, parseOutboundService, parseProtocol, parseServices, parseSoftware, parseUsage } from "../client-D1DkBgMW.js";
-import "../lookup-2btkCjyT.js";
-import { test } from "../testing-DsZhG4d1.js";
+import { getNodeInfo, parseInboundService, parseNodeInfo, parseOutboundService, parseProtocol, parseServices, parseSoftware, parseUsage } from "../client-Be6Zm6Qo.js";
+import "../lookup-jyRLW_1A.js";
+import { test } from "../testing-DlDa_1MN.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";
 import "../assert_not_equals-f3m3epl3.js";
 import "../assert_throws-BOO88avQ.js";
-import { esm_default } from "../esm-CC8HHtIX.js";
+import { esm_default } from "../esm-hqPuFfCN.js";
 
 //#region src/nodeinfo/client.test.ts
 test("getNodeInfo()", async (t) => {

package/dist/nodeinfo/handler.test.js

@@ -3,30 +3,30 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-Caga0-TR.js";
+import "../type-CV54_GsW.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-CRZrzyXm.js";
-import { createFederation, handleNodeInfo, handleNodeInfoJrd } from "../middleware-DPJZ1_pj.js";
+import { createFederation, handleNodeInfo, handleNodeInfoJrd } from "../middleware-Lka8gMFX.js";
 import { parseSemVer } from "../semver-dArNLkR9.js";
-import "../client-D1DkBgMW.js";
-import "../lookup-2btkCjyT.js";
+import "../client-Be6Zm6Qo.js";
+import "../lookup-jyRLW_1A.js";
 import "../types-BIgY6c-l.js";
-import "../actor-DBVIhd3g.js";
-import "../key-BFZkjEdF.js";
-import "../http-CEL1OpoJ.js";
-import "../authdocloader-GJlMpzlI.js";
-import "../ld-DZBKkjYA.js";
-import "../owner-C7mGG_7y.js";
-import "../proof-jMo9AJgi.js";
-import "../inbox-DgeNUDDq.js";
-import "../builder-DeF3DvGa.js";
+import "../actor-Bnmy-5Nt.js";
+import "../key-BZjRR6o0.js";
+import "../http-CVGIQDIM.js";
+import "../authdocloader-Ch1dTB6i.js";
+import "../ld-DGTowKKX.js";
+import "../owner-BcisYGga.js";
+import "../proof-DjpZy3G2.js";
+import "../inbox-BF56GsRS.js";
+import "../builder-DOnG508o.js";
 import "../collection-CSzG2j1P.js";
-import "../keycache-DiK_ysAm.js";
+import "../keycache-XTiCGJXo.js";
 import "../retry-D4GJ670a.js";
-import "../send-DxWNr0-E.js";
-import { createRequestContext, test } from "../testing-DsZhG4d1.js";
+import "../send-Cy_hTnC2.js";
+import { createRequestContext, test } from "../testing-DlDa_1MN.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/nodeinfo/mod.js

@@ -2,8 +2,8 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import "../docloader-BSCctXal.js";
-import { formatSemVer, getNodeInfo, nodeInfoToJson, parseNodeInfo, parseSemVer } from "../types-DJjc-Yj8.js";
+import "../docloader-BBKozvwM.js";
+import { formatSemVer, getNodeInfo, nodeInfoToJson, parseNodeInfo, parseSemVer } from "../types-csgj3KOJ.js";
 import "../nodeinfo-CyEbLjHs.js";
 
 export { formatSemVer, getNodeInfo, nodeInfoToJson, parseNodeInfo, parseSemVer };

package/dist/nodeinfo/semver.test.js

@@ -3,13 +3,13 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-Caga0-TR.js";
+import "../type-CV54_GsW.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { formatSemVer, parseSemVer } from "../semver-dArNLkR9.js";
-import "../lookup-2btkCjyT.js";
-import { test } from "../testing-DsZhG4d1.js";
+import "../lookup-jyRLW_1A.js";
+import { test } from "../testing-DlDa_1MN.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/nodeinfo/types.test.js

@@ -3,14 +3,14 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-Caga0-TR.js";
+import "../type-CV54_GsW.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import "../semver-dArNLkR9.js";
-import "../lookup-2btkCjyT.js";
+import "../lookup-jyRLW_1A.js";
 import { nodeInfoToJson } from "../types-BIgY6c-l.js";
-import { test } from "../testing-DsZhG4d1.js";
+import { test } from "../testing-DlDa_1MN.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/{owner-C7mGG_7y.js → owner-BcisYGga.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Object as Object$1, getDocumentLoader } from "./type-Caga0-TR.js";
-import { isActor } from "./actor-DBVIhd3g.js";
+import { CryptographicKey, Object as Object$1, getDocumentLoader } from "./type-CV54_GsW.js";
+import { isActor } from "./actor-Bnmy-5Nt.js";
 import { trace } from "@opentelemetry/api";
 
 //#region src/sig/owner.ts

package/dist/{proof-CMLfMbze.js → proof-D4Lf3ygt.js}

@@ -2,9 +2,9 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { deno_default, getDocumentLoader } from "./docloader-BSCctXal.js";
-import { Activity, CryptographicKey, DataIntegrityProof, Multikey, Object as Object$1, getTypeId, isActor } from "./actor-CgMSXJ7T.js";
-import { fetchKey, validateCryptoKey } from "./key-DxDW5e94.js";
+import { deno_default, getDocumentLoader } from "./docloader-BBKozvwM.js";
+import { Activity, CryptographicKey, DataIntegrityProof, Multikey, Object as Object$1, getTypeId, isActor } from "./actor-DKLEbAL7.js";
+import { fetchKey, validateCryptoKey } from "./key-C0-cZXSz.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import jsonld from "jsonld";

package/dist/{proof-jMo9AJgi.js → proof-DjpZy3G2.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, DataIntegrityProof, Multikey, deno_default, getTypeId } from "./type-Caga0-TR.js";
-import { fetchKey, validateCryptoKey } from "./key-BFZkjEdF.js";
+import { Activity, DataIntegrityProof, Multikey, deno_default, getTypeId } from "./type-CV54_GsW.js";
+import { fetchKey, validateCryptoKey } from "./key-BZjRR6o0.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { encodeHex } from "byte-encodings/hex";

package/dist/runtime/authdocloader.test.js

@@ -3,23 +3,23 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { UrlError } from "../type-Caga0-TR.js";
+import { UrlError } from "../type-CV54_GsW.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import "../lookup-2btkCjyT.js";
-import "../actor-DBVIhd3g.js";
-import "../key-BFZkjEdF.js";
-import { verifyRequest } from "../http-CEL1OpoJ.js";
-import { getAuthenticatedDocumentLoader } from "../authdocloader-GJlMpzlI.js";
-import { mockDocumentLoader, test } from "../testing-DsZhG4d1.js";
+import "../lookup-jyRLW_1A.js";
+import "../actor-Bnmy-5Nt.js";
+import "../key-BZjRR6o0.js";
+import { verifyRequest } from "../http-CVGIQDIM.js";
+import { getAuthenticatedDocumentLoader } from "../authdocloader-Ch1dTB6i.js";
+import { mockDocumentLoader, test } from "../testing-DlDa_1MN.js";
 import "../std__assert-X-_kMxKM.js";
 import { assertRejects } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";
 import "../assert_not_equals-f3m3epl3.js";
 import "../assert_throws-BOO88avQ.js";
-import { rsaPrivateKey2 } from "../keys-CU3pwbgD.js";
-import { esm_default } from "../esm-CC8HHtIX.js";
+import { rsaPrivateKey2 } from "../keys-KSJYwlm7.js";
+import { esm_default } from "../esm-hqPuFfCN.js";
 
 //#region src/runtime/authdocloader.test.ts
 test("getAuthenticatedDocumentLoader()", async (t) => {

package/dist/runtime/docloader.test.js

@@ -3,19 +3,19 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { FetchError, UrlError, contexts_default, deno_default, getDocumentLoader, getUserAgent, kvCache } from "../type-Caga0-TR.js";
+import { FetchError, UrlError, contexts_default, deno_default, getDocumentLoader, getUserAgent, kvCache } from "../type-CV54_GsW.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-CRZrzyXm.js";
-import "../lookup-2btkCjyT.js";
-import { mockDocumentLoader, test } from "../testing-DsZhG4d1.js";
+import "../lookup-jyRLW_1A.js";
+import { mockDocumentLoader, test } from "../testing-DlDa_1MN.js";
 import "../std__assert-X-_kMxKM.js";
 import { assertRejects } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";
 import "../assert_not_equals-f3m3epl3.js";
 import { assertThrows } from "../assert_throws-BOO88avQ.js";
-import { esm_default } from "../esm-CC8HHtIX.js";
+import { esm_default } from "../esm-hqPuFfCN.js";
 import process from "node:process";
 
 //#region src/runtime/docloader.test.ts
@@ -158,6 +158,30 @@ test("getDocumentLoader()", async (t) => {
 			}
 		});
 	});
+	esm_default.get("https://example.com/xhtml-link", {
+		body: `<html>
+        <head>
+          <meta charset="utf-8" />
+          <link
+            rel=alternate
+            type="application/activity+json"
+            href="https://example.com/object" />
+        </head>
+      </html>`,
+		headers: { "Content-Type": "application/xhtml+xml; charset=utf-8" }
+	});
+	await t.step("XHTML <link>", async () => {
+		assertEquals(await fetchDocumentLoader("https://example.com/xhtml-link"), {
+			contextUrl: null,
+			documentUrl: "https://example.com/object",
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				id: "https://example.com/object",
+				name: "Fetched object",
+				type: "Object"
+			}
+		});
+	});
 	esm_default.get("https://example.com/html-a", {
 		body: `<html>
         <head>

package/dist/runtime/key.test.js

@@ -3,14 +3,14 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { exportMultibaseKey, exportSpki, importMultibaseKey, importPem, importPkcs1, importSpki } from "../type-Caga0-TR.js";
+import { exportMultibaseKey, exportSpki, importMultibaseKey, importPem, importPkcs1, importSpki } from "../type-CV54_GsW.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import "../lookup-2btkCjyT.js";
-import "../actor-DBVIhd3g.js";
-import { exportJwk, importJwk } from "../key-BFZkjEdF.js";
-import { test } from "../testing-DsZhG4d1.js";
+import "../lookup-jyRLW_1A.js";
+import "../actor-Bnmy-5Nt.js";
+import { exportJwk, importJwk } from "../key-BZjRR6o0.js";
+import { test } from "../testing-DlDa_1MN.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";