@fedify/fedify 1.9.0-pr.388.1454 → 1.9.0-pr.388.1457

package/dist/{http-CyF0WaM0.js → http-CDu8ZPCY.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, deno_default } from "./type-DGVk0-c1.js";
-import { fetchKey, validateCryptoKey } from "./key-7MvpRoyd.js";
+import { CryptographicKey, deno_default } from "./type-DL-xGM3B.js";
+import { fetchKey, validateCryptoKey } from "./key-DIQpEghv.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
@@ -366,7 +366,7 @@ async function verifyRequestDraft(request, span, { documentLoader, contextLoader
 			return null;
 		}
 	}
-	const sigValues = Object.fromEntries(sigHeader.split(",").map((pair) => pair.match(/^\s*([A-Za-z]+)="([^"]*)"\s*$/)).filter((m) => m != null).map((m) => m.slice(1, 3)));
+	const sigValues = Object.fromEntries(sigHeader.split(",").map((pair) => pair.match(/^\s*([A-Za-z]+)=(?:"([^"]*)"|(\d+))\s*$/)).filter((m) => m != null).map((m) => [m[1], m[2] ?? m[3]]));
 	if (!("keyId" in sigValues)) {
 		logger.debug("Failed to verify; no keyId field found in the Signature header.", { signature: sigHeader });
 		return null;
@@ -377,6 +377,52 @@ async function verifyRequestDraft(request, span, { documentLoader, contextLoader
 		logger.debug("Failed to verify; no signature field found in the Signature header.", { signature: sigHeader });
 		return null;
 	}
+	if ("expires" in sigValues) {
+		const expiresSeconds = parseInt(sigValues.expires);
+		if (!Number.isInteger(expiresSeconds)) {
+			logger.debug("Failed to verify; invalid expires field in the Signature header: {expires}.", {
+				expires: sigValues.expires,
+				signature: sigHeader
+			});
+			return null;
+		}
+		const expires = Temporal.Instant.fromEpochMilliseconds(expiresSeconds * 1e3);
+		if (Temporal.Instant.compare(now, expires) > 0) {
+			logger.debug("Failed to verify; signature expired at {expires} (now: {now}).", {
+				expires: expires.toString(),
+				now: now.toString(),
+				signature: sigHeader
+			});
+			return null;
+		}
+	}
+	if ("created" in sigValues) {
+		const createdSeconds = parseInt(sigValues.created);
+		if (!Number.isInteger(createdSeconds)) {
+			logger.debug("Failed to verify; invalid created field in the Signature header: {created}.", {
+				created: sigValues.created,
+				signature: sigHeader
+			});
+			return null;
+		}
+		if (timeWindow !== false) {
+			const created = Temporal.Instant.fromEpochMilliseconds(createdSeconds * 1e3);
+			const tw = timeWindow ?? { minutes: 1 };
+			if (Temporal.Instant.compare(created, now.add(tw)) > 0) {
+				logger.debug("Failed to verify; created is too far in the future.", {
+					created: created.toString(),
+					now: now.toString()
+				});
+				return null;
+			} else if (Temporal.Instant.compare(created, now.subtract(tw)) < 0) {
+				logger.debug("Failed to verify; created is too far in the past.", {
+					created: created.toString(),
+					now: now.toString()
+				});
+				return null;
+			}
+		}
+	}
 	const { keyId, headers, signature } = sigValues;
 	span?.setAttribute("http_signatures.key_id", keyId);
 	if ("algorithm" in sigValues) span?.setAttribute("http_signatures.algorithm", sigValues.algorithm);
@@ -396,7 +442,7 @@ async function verifyRequestDraft(request, span, { documentLoader, contextLoader
 		logger.debug("Failed to verify; required headers missing in the Signature header: {headers}.", { headers });
 		return null;
 	}
-	const message = headerNames.map((name) => `${name}: ` + (name == "(request-target)" ? `${request.method.toLowerCase()} ${new URL(request.url).pathname}` : name == "host" ? request.headers.get("host") ?? new URL(request.url).host : request.headers.get(name))).join("\n");
+	const message = headerNames.map((name) => `${name}: ` + (name === "(request-target)" ? `${request.method.toLowerCase()} ${new URL(request.url).pathname}` : name === "(created)" ? sigValues.created ?? "" : name === "(expires)" ? sigValues.expires ?? "" : name === "host" ? request.headers.get("host") ?? new URL(request.url).host : request.headers.get(name))).join("\n");
 	const sig = decodeBase64(signature);
 	span?.setAttribute("http_signatures.signature", encodeHex(sig));
 	const verified = await crypto.subtle.verify("RSASSA-PKCS1-v1_5", key.publicKey, sig, new TextEncoder().encode(message));

package/dist/{inbox-5hqyXKPa.js → inbox-Dm26WBZx.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, deno_default, getTypeId } from "./type-DGVk0-c1.js";
+import { Activity, deno_default, getTypeId } from "./type-DL-xGM3B.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 

package/dist/{key-7MvpRoyd.js → key-DIQpEghv.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Object as Object$1, deno_default, getDocumentLoader } from "./type-DGVk0-c1.js";
-import { isActor } from "./actor-D6e9qEkV.js";
+import { CryptographicKey, Object as Object$1, deno_default, getDocumentLoader } from "./type-DL-xGM3B.js";
+import { isActor } from "./actor-CEIQwVvy.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{key-CTkfaVig.js → key-DPTlnsSF.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "./type-DGVk0-c1.js";
-import "./actor-D6e9qEkV.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-7MvpRoyd.js";
+import "./type-DL-xGM3B.js";
+import "./actor-CEIQwVvy.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-DIQpEghv.js";
 
 export { validateCryptoKey };

package/dist/{key-5ppjSAIK.js → key-DcXTzzNv.js}

@@ -2,9 +2,9 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import "./docloader-B0JdtOnB.js";
-import "./actor-rnKKWIEt.js";
-import "./lookup-DV4bXX-_.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-DIPT1P-B.js";
+import "./docloader-DLKyJWIV.js";
+import "./actor-i3pzmrNX.js";
+import "./lookup-DMCX9XMw.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-DzPMkR_z.js";
 
 export { validateCryptoKey };

package/dist/{key-DIPT1P-B.js → key-DzPMkR_z.js}

@@ -2,8 +2,8 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { deno_default, getDocumentLoader } from "./docloader-B0JdtOnB.js";
-import { CryptographicKey, Object as Object$1, isActor } from "./actor-rnKKWIEt.js";
+import { deno_default, getDocumentLoader } from "./docloader-DLKyJWIV.js";
+import { CryptographicKey, Object as Object$1, isActor } from "./actor-i3pzmrNX.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{keycache-rmZ6V89m.js → keycache-Dgohl1Dd.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey } from "./type-DGVk0-c1.js";
+import { CryptographicKey, Multikey } from "./type-DL-xGM3B.js";
 
 //#region src/federation/keycache.ts
 var KvKeyCache = class {

package/dist/{keys-DwuXi5ni.js → keys-DTBGTGWL.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey, importSpki } from "./type-DGVk0-c1.js";
+import { CryptographicKey, Multikey, importSpki } from "./type-DL-xGM3B.js";
 
 //#region src/testing/keys.ts
 const rsaPublicKey1 = new CryptographicKey({

package/dist/{ld-pm8P5ZxN.js → ld-CzE3ibrJ.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, CryptographicKey, Object as Object$1, deno_default, getDocumentLoader, getTypeId } from "./type-DGVk0-c1.js";
-import { fetchKey, validateCryptoKey } from "./key-7MvpRoyd.js";
+import { Activity, CryptographicKey, Object as Object$1, deno_default, getDocumentLoader, getTypeId } from "./type-DL-xGM3B.js";
+import { fetchKey, validateCryptoKey } from "./key-DIQpEghv.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";

package/dist/{lookup-DV4bXX-_.js → lookup-DMCX9XMw.js}

@@ -2,7 +2,7 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-B0JdtOnB.js";
+import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-DLKyJWIV.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{lookup-RSoRngQM.js → lookup-DnJ8NYRt.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Object as Object$1, deno_default, getDocumentLoader, getTypeId, lookupWebFinger } from "./type-DGVk0-c1.js";
+import { Object as Object$1, deno_default, getDocumentLoader, getTypeId, lookupWebFinger } from "./type-DL-xGM3B.js";
 import { cloneDeep, delay } from "es-toolkit";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{middleware-u3F5lAP_.js → middleware-B3cHCCxV.js}

@@ -3,15 +3,15 @@
       import { URLPattern } from "urlpattern-polyfill";
     
 import { getDefaultActivityTransformers } from "./transformers-Dna8Fg7k.js";
-import { deno_default, getDocumentLoader, kvCache } from "./docloader-B0JdtOnB.js";
-import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, getTypeId } from "./actor-rnKKWIEt.js";
-import { lookupWebFinger } from "./lookup-DV4bXX-_.js";
-import { exportJwk, importJwk, validateCryptoKey } from "./key-DIPT1P-B.js";
-import { doubleKnock, verifyRequest } from "./http-Udeoz_Al.js";
-import { detachSignature, doesActorOwnKey, getKeyOwner, hasSignature, signJsonLd, signObject, verifyJsonLd, verifyObject } from "./proof-BKV2LcLG.js";
-import { getNodeInfo, nodeInfoToJson } from "./types-DpoqseBT.js";
-import { getAuthenticatedDocumentLoader } from "./authdocloader-DNXCwhe4.js";
-import { lookupObject, traverseCollection } from "./vocab-xe_N1JvM.js";
+import { deno_default, getDocumentLoader, kvCache } from "./docloader-DLKyJWIV.js";
+import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, getTypeId } from "./actor-i3pzmrNX.js";
+import { lookupWebFinger } from "./lookup-DMCX9XMw.js";
+import { exportJwk, importJwk, validateCryptoKey } from "./key-DzPMkR_z.js";
+import { doubleKnock, verifyRequest } from "./http-BRCgmmm5.js";
+import { detachSignature, doesActorOwnKey, getKeyOwner, hasSignature, signJsonLd, signObject, verifyJsonLd, verifyObject } from "./proof-D0vH8pjh.js";
+import { getNodeInfo, nodeInfoToJson } from "./types-Bew-0Gg8.js";
+import { getAuthenticatedDocumentLoader } from "./authdocloader-DPNTnzyp.js";
+import { lookupObject, traverseCollection } from "./vocab-Bk8QAL3P.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 import { encodeHex } from "byte-encodings/hex";
@@ -320,7 +320,7 @@ var FederationBuilderImpl = class {
 		this.collectionTypeIds = {};
 	}
 	async build(options) {
-		const { FederationImpl: FederationImpl$1 } = await import("./middleware-C6C_eSdH.js");
+		const { FederationImpl: FederationImpl$1 } = await import("./middleware-B497T-Of.js");
 		const f = new FederationImpl$1(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();

package/dist/middleware-B497T-Of.js

@@ -0,0 +1,17 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+    
+import "./transformers-Dna8Fg7k.js";
+import "./docloader-DLKyJWIV.js";
+import "./actor-i3pzmrNX.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "./middleware-B3cHCCxV.js";
+import "./lookup-DMCX9XMw.js";
+import "./key-DzPMkR_z.js";
+import "./http-BRCgmmm5.js";
+import "./proof-D0vH8pjh.js";
+import "./types-Bew-0Gg8.js";
+import "./authdocloader-DPNTnzyp.js";
+import "./vocab-Bk8QAL3P.js";
+
+export { FederationImpl };

package/dist/middleware-B50gGkMU.js

@@ -0,0 +1,26 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+      globalThis.addEventListener = () => {};
+    
+import "./type-DL-xGM3B.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "./middleware-COq0pYjE.js";
+import "./semver-dArNLkR9.js";
+import "./client-BralNOu0.js";
+import "./lookup-DnJ8NYRt.js";
+import "./types-BIgY6c-l.js";
+import "./actor-CEIQwVvy.js";
+import "./key-DIQpEghv.js";
+import "./http-CDu8ZPCY.js";
+import "./authdocloader-Dpnm-yj0.js";
+import "./ld-CzE3ibrJ.js";
+import "./owner-DvQeuc07.js";
+import "./proof-CGewCl6O.js";
+import "./inbox-Dm26WBZx.js";
+import "./builder-BDqcViO8.js";
+import "./collection-CSzG2j1P.js";
+import "./keycache-Dgohl1Dd.js";
+import "./retry-D4GJ670a.js";
+import "./send-BigK9oaG.js";
+
+export { FederationImpl };

package/dist/{middleware-DLtvTXdd.js → middleware-COq0pYjE.js}

@@ -3,22 +3,22 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, deno_default, getDocumentLoader, getTypeId, kvCache, lookupWebFinger } from "./type-DGVk0-c1.js";
-import { getNodeInfo } from "./client-V4MB7-QC.js";
-import { RouterError, lookupObject, traverseCollection } from "./lookup-RSoRngQM.js";
+import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, deno_default, getDocumentLoader, getTypeId, kvCache, lookupWebFinger } from "./type-DL-xGM3B.js";
+import { getNodeInfo } from "./client-BralNOu0.js";
+import { RouterError, lookupObject, traverseCollection } from "./lookup-DnJ8NYRt.js";
 import { nodeInfoToJson } from "./types-BIgY6c-l.js";
-import { exportJwk, importJwk, validateCryptoKey } from "./key-7MvpRoyd.js";
-import { verifyRequest } from "./http-CyF0WaM0.js";
-import { getAuthenticatedDocumentLoader } from "./authdocloader-BLlcg6OT.js";
-import { detachSignature, hasSignature, signJsonLd, verifyJsonLd } from "./ld-pm8P5ZxN.js";
-import { doesActorOwnKey, getKeyOwner } from "./owner-Dyov2Vyh.js";
-import { signObject, verifyObject } from "./proof-DOdxEdqB.js";
-import { routeActivity } from "./inbox-5hqyXKPa.js";
-import { FederationBuilderImpl } from "./builder-rbQSp-ig.js";
+import { exportJwk, importJwk, validateCryptoKey } from "./key-DIQpEghv.js";
+import { verifyRequest } from "./http-CDu8ZPCY.js";
+import { getAuthenticatedDocumentLoader } from "./authdocloader-Dpnm-yj0.js";
+import { detachSignature, hasSignature, signJsonLd, verifyJsonLd } from "./ld-CzE3ibrJ.js";
+import { doesActorOwnKey, getKeyOwner } from "./owner-DvQeuc07.js";
+import { signObject, verifyObject } from "./proof-CGewCl6O.js";
+import { routeActivity } from "./inbox-Dm26WBZx.js";
+import { FederationBuilderImpl } from "./builder-BDqcViO8.js";
 import { buildCollectionSynchronizationHeader } from "./collection-CSzG2j1P.js";
-import { KvKeyCache } from "./keycache-rmZ6V89m.js";
+import { KvKeyCache } from "./keycache-Dgohl1Dd.js";
 import { createExponentialBackoffPolicy } from "./retry-D4GJ670a.js";
-import { extractInboxes, sendActivity } from "./send-BW12PG34.js";
+import { extractInboxes, sendActivity } from "./send-BigK9oaG.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_HTTP_RESPONSE_HEADER, ATTR_HTTP_RESPONSE_STATUS_CODE, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";

package/dist/mod.js

@@ -4,17 +4,17 @@
     
 import { actorDehydrator, autoIdAssigner, getDefaultActivityTransformers } from "./transformers-Dna8Fg7k.js";
 import "./compat-Bb5myD13.js";
-import { FetchError, fetchDocumentLoader, getDocumentLoader, getUserAgent, kvCache } from "./docloader-B0JdtOnB.js";
-import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, LanguageString, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View, exportMultibaseKey, exportSpki, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, importMultibaseKey, importPem, importPkcs1, importSpki, isActor, normalizeActorHandle } from "./actor-rnKKWIEt.js";
-import { Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "./middleware-u3F5lAP_.js";
-import { lookupWebFinger } from "./lookup-DV4bXX-_.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk } from "./key-DIPT1P-B.js";
-import { signRequest, verifyRequest } from "./http-Udeoz_Al.js";
-import { attachSignature, createProof, createSignature, detachSignature, doesActorOwnKey, getKeyOwner, signJsonLd, signObject, verifyJsonLd, verifyObject, verifyProof, verifySignature } from "./proof-BKV2LcLG.js";
+import { FetchError, fetchDocumentLoader, getDocumentLoader, getUserAgent, kvCache } from "./docloader-DLKyJWIV.js";
+import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, LanguageString, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View, exportMultibaseKey, exportSpki, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, importMultibaseKey, importPem, importPkcs1, importSpki, isActor, normalizeActorHandle } from "./actor-i3pzmrNX.js";
+import { Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, respondWithObject, respondWithObjectIfAcceptable } from "./middleware-B3cHCCxV.js";
+import { lookupWebFinger } from "./lookup-DMCX9XMw.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk } from "./key-DzPMkR_z.js";
+import { signRequest, verifyRequest } from "./http-BRCgmmm5.js";
+import { attachSignature, createProof, createSignature, detachSignature, doesActorOwnKey, getKeyOwner, signJsonLd, signObject, verifyJsonLd, verifyObject, verifyProof, verifySignature } from "./proof-D0vH8pjh.js";
 import { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue } from "./federation-CMX7WzeL.js";
-import { formatSemVer, getNodeInfo, nodeInfoToJson, parseNodeInfo, parseSemVer } from "./types-DpoqseBT.js";
-import { getAuthenticatedDocumentLoader } from "./authdocloader-DNXCwhe4.js";
-import { PUBLIC_COLLECTION, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "./vocab-xe_N1JvM.js";
+import { formatSemVer, getNodeInfo, nodeInfoToJson, parseNodeInfo, parseSemVer } from "./types-Bew-0Gg8.js";
+import { getAuthenticatedDocumentLoader } from "./authdocloader-DPNTnzyp.js";
+import { PUBLIC_COLLECTION, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "./vocab-Bk8QAL3P.js";
 import "./nodeinfo-CyEbLjHs.js";
 import "./runtime-BSkOVUWM.js";
 import "./sig-BXJO--F9.js";

package/dist/nodeinfo/client.test.js

@@ -3,20 +3,20 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-DGVk0-c1.js";
+import "../type-DL-xGM3B.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import "../semver-dArNLkR9.js";
-import { getNodeInfo, parseInboundService, parseNodeInfo, parseOutboundService, parseProtocol, parseServices, parseSoftware, parseUsage } from "../client-V4MB7-QC.js";
-import "../lookup-RSoRngQM.js";
-import { test } from "../testing-BVgrw3iR.js";
+import { getNodeInfo, parseInboundService, parseNodeInfo, parseOutboundService, parseProtocol, parseServices, parseSoftware, parseUsage } from "../client-BralNOu0.js";
+import "../lookup-DnJ8NYRt.js";
+import { test } from "../testing-BaNygUsb.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";
 import "../assert_not_equals-f3m3epl3.js";
 import "../assert_throws-BOO88avQ.js";
-import { esm_default } from "../esm-Lllns3MF.js";
+import { esm_default } from "../esm-DkPW-ccg.js";
 
 //#region src/nodeinfo/client.test.ts
 test("getNodeInfo()", async (t) => {

package/dist/nodeinfo/handler.test.js

@@ -3,30 +3,30 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-DGVk0-c1.js";
+import "../type-DL-xGM3B.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-CRZrzyXm.js";
-import { createFederation, handleNodeInfo, handleNodeInfoJrd } from "../middleware-DLtvTXdd.js";
+import { createFederation, handleNodeInfo, handleNodeInfoJrd } from "../middleware-COq0pYjE.js";
 import { parseSemVer } from "../semver-dArNLkR9.js";
-import "../client-V4MB7-QC.js";
-import "../lookup-RSoRngQM.js";
+import "../client-BralNOu0.js";
+import "../lookup-DnJ8NYRt.js";
 import "../types-BIgY6c-l.js";
-import "../actor-D6e9qEkV.js";
-import "../key-7MvpRoyd.js";
-import "../http-CyF0WaM0.js";
-import "../authdocloader-BLlcg6OT.js";
-import "../ld-pm8P5ZxN.js";
-import "../owner-Dyov2Vyh.js";
-import "../proof-DOdxEdqB.js";
-import "../inbox-5hqyXKPa.js";
-import "../builder-rbQSp-ig.js";
+import "../actor-CEIQwVvy.js";
+import "../key-DIQpEghv.js";
+import "../http-CDu8ZPCY.js";
+import "../authdocloader-Dpnm-yj0.js";
+import "../ld-CzE3ibrJ.js";
+import "../owner-DvQeuc07.js";
+import "../proof-CGewCl6O.js";
+import "../inbox-Dm26WBZx.js";
+import "../builder-BDqcViO8.js";
 import "../collection-CSzG2j1P.js";
-import "../keycache-rmZ6V89m.js";
+import "../keycache-Dgohl1Dd.js";
 import "../retry-D4GJ670a.js";
-import "../send-BW12PG34.js";
-import { createRequestContext, test } from "../testing-BVgrw3iR.js";
+import "../send-BigK9oaG.js";
+import { createRequestContext, test } from "../testing-BaNygUsb.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/nodeinfo/mod.js

@@ -2,8 +2,8 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import "../docloader-B0JdtOnB.js";
-import { formatSemVer, getNodeInfo, nodeInfoToJson, parseNodeInfo, parseSemVer } from "../types-DpoqseBT.js";
+import "../docloader-DLKyJWIV.js";
+import { formatSemVer, getNodeInfo, nodeInfoToJson, parseNodeInfo, parseSemVer } from "../types-Bew-0Gg8.js";
 import "../nodeinfo-CyEbLjHs.js";
 
 export { formatSemVer, getNodeInfo, nodeInfoToJson, parseNodeInfo, parseSemVer };

package/dist/nodeinfo/semver.test.js

@@ -3,13 +3,13 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-DGVk0-c1.js";
+import "../type-DL-xGM3B.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { formatSemVer, parseSemVer } from "../semver-dArNLkR9.js";
-import "../lookup-RSoRngQM.js";
-import { test } from "../testing-BVgrw3iR.js";
+import "../lookup-DnJ8NYRt.js";
+import { test } from "../testing-BaNygUsb.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/nodeinfo/types.test.js

@@ -3,14 +3,14 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-DGVk0-c1.js";
+import "../type-DL-xGM3B.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import "../semver-dArNLkR9.js";
-import "../lookup-RSoRngQM.js";
+import "../lookup-DnJ8NYRt.js";
 import { nodeInfoToJson } from "../types-BIgY6c-l.js";
-import { test } from "../testing-BVgrw3iR.js";
+import { test } from "../testing-BaNygUsb.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";

package/dist/{owner-Dyov2Vyh.js → owner-DvQeuc07.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Object as Object$1, getDocumentLoader } from "./type-DGVk0-c1.js";
-import { isActor } from "./actor-D6e9qEkV.js";
+import { CryptographicKey, Object as Object$1, getDocumentLoader } from "./type-DL-xGM3B.js";
+import { isActor } from "./actor-CEIQwVvy.js";
 import { trace } from "@opentelemetry/api";
 
 //#region src/sig/owner.ts

package/dist/{proof-DOdxEdqB.js → proof-CGewCl6O.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, DataIntegrityProof, Multikey, deno_default, getTypeId } from "./type-DGVk0-c1.js";
-import { fetchKey, validateCryptoKey } from "./key-7MvpRoyd.js";
+import { Activity, DataIntegrityProof, Multikey, deno_default, getTypeId } from "./type-DL-xGM3B.js";
+import { fetchKey, validateCryptoKey } from "./key-DIQpEghv.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { encodeHex } from "byte-encodings/hex";

package/dist/{proof-BKV2LcLG.js → proof-D0vH8pjh.js}

@@ -2,9 +2,9 @@
       import { Temporal } from "@js-temporal/polyfill";
       import { URLPattern } from "urlpattern-polyfill";
     
-import { deno_default, getDocumentLoader } from "./docloader-B0JdtOnB.js";
-import { Activity, CryptographicKey, DataIntegrityProof, Multikey, Object as Object$1, getTypeId, isActor } from "./actor-rnKKWIEt.js";
-import { fetchKey, validateCryptoKey } from "./key-DIPT1P-B.js";
+import { deno_default, getDocumentLoader } from "./docloader-DLKyJWIV.js";
+import { Activity, CryptographicKey, DataIntegrityProof, Multikey, Object as Object$1, getTypeId, isActor } from "./actor-i3pzmrNX.js";
+import { fetchKey, validateCryptoKey } from "./key-DzPMkR_z.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import jsonld from "jsonld";

package/dist/runtime/authdocloader.test.js

@@ -3,23 +3,23 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { UrlError } from "../type-DGVk0-c1.js";
+import { UrlError } from "../type-DL-xGM3B.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import "../lookup-RSoRngQM.js";
-import "../actor-D6e9qEkV.js";
-import "../key-7MvpRoyd.js";
-import { verifyRequest } from "../http-CyF0WaM0.js";
-import { getAuthenticatedDocumentLoader } from "../authdocloader-BLlcg6OT.js";
-import { mockDocumentLoader, test } from "../testing-BVgrw3iR.js";
+import "../lookup-DnJ8NYRt.js";
+import "../actor-CEIQwVvy.js";
+import "../key-DIQpEghv.js";
+import { verifyRequest } from "../http-CDu8ZPCY.js";
+import { getAuthenticatedDocumentLoader } from "../authdocloader-Dpnm-yj0.js";
+import { mockDocumentLoader, test } from "../testing-BaNygUsb.js";
 import "../std__assert-X-_kMxKM.js";
 import { assertRejects } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";
 import "../assert_not_equals-f3m3epl3.js";
 import "../assert_throws-BOO88avQ.js";
-import { rsaPrivateKey2 } from "../keys-DwuXi5ni.js";
-import { esm_default } from "../esm-Lllns3MF.js";
+import { rsaPrivateKey2 } from "../keys-DTBGTGWL.js";
+import { esm_default } from "../esm-DkPW-ccg.js";
 
 //#region src/runtime/authdocloader.test.ts
 test("getAuthenticatedDocumentLoader()", async (t) => {

package/dist/runtime/docloader.test.js

@@ -3,19 +3,19 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { FetchError, UrlError, contexts_default, deno_default, getDocumentLoader, getUserAgent, kvCache } from "../type-DGVk0-c1.js";
+import { FetchError, UrlError, contexts_default, deno_default, getDocumentLoader, getUserAgent, kvCache } from "../type-DL-xGM3B.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-CRZrzyXm.js";
-import "../lookup-RSoRngQM.js";
-import { mockDocumentLoader, test } from "../testing-BVgrw3iR.js";
+import "../lookup-DnJ8NYRt.js";
+import { mockDocumentLoader, test } from "../testing-BaNygUsb.js";
 import "../std__assert-X-_kMxKM.js";
 import { assertRejects } from "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";
 import "../assert_not_equals-f3m3epl3.js";
 import { assertThrows } from "../assert_throws-BOO88avQ.js";
-import { esm_default } from "../esm-Lllns3MF.js";
+import { esm_default } from "../esm-DkPW-ccg.js";
 import process from "node:process";
 
 //#region src/runtime/docloader.test.ts
@@ -158,6 +158,30 @@ test("getDocumentLoader()", async (t) => {
 			}
 		});
 	});
+	esm_default.get("https://example.com/xhtml-link", {
+		body: `<html>
+        <head>
+          <meta charset="utf-8" />
+          <link
+            rel=alternate
+            type="application/activity+json"
+            href="https://example.com/object" />
+        </head>
+      </html>`,
+		headers: { "Content-Type": "application/xhtml+xml; charset=utf-8" }
+	});
+	await t.step("XHTML <link>", async () => {
+		assertEquals(await fetchDocumentLoader("https://example.com/xhtml-link"), {
+			contextUrl: null,
+			documentUrl: "https://example.com/object",
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				id: "https://example.com/object",
+				name: "Fetched object",
+				type: "Object"
+			}
+		});
+	});
 	esm_default.get("https://example.com/html-a", {
 		body: `<html>
         <head>

package/dist/runtime/key.test.js

@@ -3,14 +3,14 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { exportMultibaseKey, exportSpki, importMultibaseKey, importPem, importPkcs1, importSpki } from "../type-DGVk0-c1.js";
+import { exportMultibaseKey, exportSpki, importMultibaseKey, importPem, importPkcs1, importSpki } from "../type-DL-xGM3B.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import "../lookup-RSoRngQM.js";
-import "../actor-D6e9qEkV.js";
-import { exportJwk, importJwk } from "../key-7MvpRoyd.js";
-import { test } from "../testing-BVgrw3iR.js";
+import "../lookup-DnJ8NYRt.js";
+import "../actor-CEIQwVvy.js";
+import { exportJwk, importJwk } from "../key-DIQpEghv.js";
+import { test } from "../testing-BaNygUsb.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-DiIiJbZn.js";
 import "../assert_is_error-BPGph1Jx.js";