@fedify/fedify 2.0.0-dev.1641 → 2.0.0-dev.1726

package/dist/federation/retry.test.js

@@ -3,12 +3,12 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-B4NJkfVg.js";
+import "../type-D_8QzkEn.js";
 import { AssertionError, assertEquals } from "../assert_equals-DSbWqCm3.js";
-import "../lookup-CiU3QxQz.js";
-import { createExponentialBackoffPolicy } from "../retry-CfF8Gn4d.js";
-import { test } from "../testing-ByQmUvf-.js";
-import { assertNotEquals } from "../assert_not_equals-C80BG-_5.js";
+import "../lookup-VSVPBU3J.js";
+import { createExponentialBackoffPolicy } from "../retry-D4GJ670a.js";
+import { test } from "../testing-e8Kpb1uV.js";
+import { assertNotEquals } from "../assert_not_equals-f3m3epl3.js";
 
 //#region src/federation/retry.test.ts
 test("createExponentialBackoffPolicy()", () => {

package/dist/federation/router.test.js

@@ -3,17 +3,17 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "../type-B4NJkfVg.js";
+import "../type-D_8QzkEn.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import { Router, RouterError } from "../lookup-CiU3QxQz.js";
-import { test } from "../testing-ByQmUvf-.js";
-import "../std__assert-DWivtrGR.js";
-import { assertFalse } from "../assert_rejects-7UF4R_Qs.js";
-import "../assert_is_error-B035L3om.js";
-import "../assert_not_equals-C80BG-_5.js";
-import { assertThrows } from "../assert_throws-53_pKeP3.js";
+import { Router, RouterError } from "../lookup-VSVPBU3J.js";
+import { test } from "../testing-e8Kpb1uV.js";
+import "../std__assert-X-_kMxKM.js";
+import { assertFalse } from "../assert_rejects-DiIiJbZn.js";
+import "../assert_is_error-BPGph1Jx.js";
+import "../assert_not_equals-f3m3epl3.js";
+import { assertThrows } from "../assert_throws-BOO88avQ.js";
 
 //#region src/federation/router.test.ts
 function setUp(options = {}) {

package/dist/federation/send.test.js

@@ -3,24 +3,24 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, Application, Endpoints, Group, Person, Service } from "../type-B4NJkfVg.js";
+import { Activity, Application, Endpoints, Group, Person, Service } from "../type-D_8QzkEn.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
-import "../lookup-CiU3QxQz.js";
-import "../actor-DVpsNXhn.js";
-import "../key-CfiBDu3o.js";
-import { verifyRequest } from "../http-Cox5GsED.js";
-import { doesActorOwnKey } from "../owner-Cxob5_PK.js";
-import { extractInboxes, sendActivity } from "../send-DSEhWIYD.js";
-import { mockDocumentLoader, test } from "../testing-ByQmUvf-.js";
-import "../std__assert-DWivtrGR.js";
-import { assertFalse, assertRejects } from "../assert_rejects-7UF4R_Qs.js";
-import "../assert_is_error-B035L3om.js";
-import { assertNotEquals } from "../assert_not_equals-C80BG-_5.js";
-import "../assert_throws-53_pKeP3.js";
-import { ed25519Multikey, ed25519PrivateKey, rsaPrivateKey2, rsaPublicKey2 } from "../keys-CBKbYaJA.js";
-import { esm_default } from "../esm-mtx3XJAD.js";
+import "../lookup-VSVPBU3J.js";
+import "../actor-dO7jHa6A.js";
+import "../key-CIIkeide.js";
+import { verifyRequest } from "../http-Danw_xTY.js";
+import { doesActorOwnKey } from "../owner-COcyel6J.js";
+import { extractInboxes, sendActivity } from "../send-C7A7_big.js";
+import { mockDocumentLoader, test } from "../testing-e8Kpb1uV.js";
+import "../std__assert-X-_kMxKM.js";
+import { assertFalse, assertRejects } from "../assert_rejects-DiIiJbZn.js";
+import "../assert_is_error-BPGph1Jx.js";
+import { assertNotEquals } from "../assert_not_equals-f3m3epl3.js";
+import "../assert_throws-BOO88avQ.js";
+import { ed25519Multikey, ed25519PrivateKey, rsaPrivateKey2, rsaPublicKey2 } from "../keys-DZ1bqhJz.js";
+import { esm_default } from "../esm-BODOj_Oi.js";
 
 //#region src/federation/send.test.ts
 test("extractInboxes()", () => {

package/dist/fixtures/media.example.com/avatars/test-avatar.jpg.json

@@ -0,0 +1,6 @@
+{
+  "@context": "https://www.w3.org/ns/activitystreams",
+  "id": "https://media.example.com/avatars/test-avatar.jpg",
+  "type": "Image",
+  "url": "/avatars/test-avatar.jpg"
+}

package/dist/{http-ZhcoaYEa.cjs → http-BmbMWfmh.cjs}

@@ -3,9 +3,9 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_docloader = require('./docloader-kae6M-GI.cjs');
-const require_actor = require('./actor-CP03csrm.cjs');
-const require_key = require('./key-HqzOCwDc.cjs');
+const require_docloader = require('./docloader-Buh0Ah9G.cjs');
+const require_actor = require('./actor-Bn2RCpws.cjs');
+const require_key = require('./key-BR1W25rw.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 const byte_encodings_base64 = require_chunk.__toESM(require("byte-encodings/base64"));

package/dist/{http-BS6766zs.d.cts → http-D-e6AFwR.d.cts}

@@ -1,5 +1,5 @@
 import { DocumentLoader } from "./docloader-D-MrRyHl.cjs";
-import { CryptographicKey, Multikey } from "./vocab-DJTYMqyU.cjs";
+import { CryptographicKey, Multikey } from "./vocab-Dw1-yVGg.cjs";
 import { TracerProvider } from "@opentelemetry/api";
 
 //#region src/sig/key.d.ts

package/dist/{http-DqSNLFNY.d.ts → http-D6Uj2x2y.d.ts}

@@ -1,7 +1,7 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
 import { DocumentLoader } from "./docloader-CxWcuWqQ.js";
-import { CryptographicKey, Multikey } from "./vocab-SOE1ifCr.js";
+import { CryptographicKey, Multikey } from "./vocab-BI0Ak5lL.js";
 import { TracerProvider } from "@opentelemetry/api";
 
 //#region src/sig/key.d.ts

package/dist/{http-Cox5GsED.js → http-Danw_xTY.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, deno_default } from "./type-B4NJkfVg.js";
-import { fetchKey, validateCryptoKey } from "./key-CfiBDu3o.js";
+import { CryptographicKey, deno_default } from "./type-D_8QzkEn.js";
+import { fetchKey, validateCryptoKey } from "./key-CIIkeide.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";

package/dist/{http-C7uYFcBo.js → http-gHyCrTrX.js}

@@ -2,9 +2,9 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { deno_default } from "./docloader-BtqIh1OE.js";
-import { CryptographicKey } from "./actor-DU511yTk.js";
-import { fetchKey, validateCryptoKey } from "./key-Cc0JlcKe.js";
+import { deno_default } from "./docloader-DOmINJ1U.js";
+import { CryptographicKey } from "./actor-menZmmiI.js";
+import { fetchKey, validateCryptoKey } from "./key-BnjofJ4e.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";

package/dist/{inbox-BDdRbWNI.js → inbox-Blp5F74G.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, deno_default, getTypeId } from "./type-B4NJkfVg.js";
+import { Activity, deno_default, getTypeId } from "./type-D_8QzkEn.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 
@@ -41,17 +41,34 @@ var InboxListenerSet = class InboxListenerSet {
 		return this.dispatchWithClass(activity)?.listener ?? null;
 	}
 };
-async function routeActivity({ context: ctx, json, activity, recipient, inboxListeners, inboxContextFactory, inboxErrorHandler, kv, kvPrefixes, queue, span, tracerProvider }) {
+async function routeActivity({ context: ctx, json, activity, recipient, inboxListeners, inboxContextFactory, inboxErrorHandler, kv, kvPrefixes, queue, span, tracerProvider, idempotencyStrategy }) {
 	const logger = getLogger([
 		"fedify",
 		"federation",
 		"inbox"
 	]);
-	const cacheKey = activity.id == null ? null : [
-		...kvPrefixes.activityIdempotence,
-		ctx.origin,
-		activity.id.href
-	];
+	let cacheKey = null;
+	if (activity.id != null) {
+		const inboxContext = inboxContextFactory(recipient, json, activity.id?.href, getTypeId(activity).href);
+		const strategy = idempotencyStrategy ?? "per-inbox";
+		let keyString;
+		if (typeof strategy === "function") {
+			const result = await strategy(inboxContext, activity);
+			keyString = result;
+		} else switch (strategy) {
+			case "global":
+				keyString = activity.id.href;
+				break;
+			case "per-origin":
+				keyString = `${ctx.origin}\n${activity.id.href}`;
+				break;
+			case "per-inbox":
+				keyString = `${ctx.origin}\n${activity.id.href}\n${recipient == null ? "sharedInbox" : `inbox\n${recipient}`}`;
+				break;
+			default: keyString = `${ctx.origin}\n${activity.id.href}`;
+		}
+		if (keyString != null) cacheKey = [...kvPrefixes.activityIdempotence, keyString];
+	}
 	if (cacheKey != null) {
 		const cached = await kv.get(cacheKey);
 		if (cached === true) {

package/dist/{key-CgwCzDC4.js → key-B2cp5-JF.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "./type-B4NJkfVg.js";
-import "./actor-DVpsNXhn.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-CfiBDu3o.js";
+import "./type-D_8QzkEn.js";
+import "./actor-dO7jHa6A.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-CIIkeide.js";
 
 export { validateCryptoKey };

package/dist/{key-HqzOCwDc.cjs → key-BR1W25rw.cjs}

@@ -3,8 +3,8 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_docloader = require('./docloader-kae6M-GI.cjs');
-const require_actor = require('./actor-CP03csrm.cjs');
+const require_docloader = require('./docloader-Buh0Ah9G.cjs');
+const require_actor = require('./actor-Bn2RCpws.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 

package/dist/{key-Cc0JlcKe.js → key-BnjofJ4e.js}

@@ -2,8 +2,8 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { deno_default, getDocumentLoader } from "./docloader-BtqIh1OE.js";
-import { CryptographicKey, Object as Object$1, isActor } from "./actor-DU511yTk.js";
+import { deno_default, getDocumentLoader } from "./docloader-DOmINJ1U.js";
+import { CryptographicKey, Object as Object$1, isActor } from "./actor-menZmmiI.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{key-CfiBDu3o.js → key-CIIkeide.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Object as Object$1, deno_default, getDocumentLoader } from "./type-B4NJkfVg.js";
-import { isActor } from "./actor-DVpsNXhn.js";
+import { CryptographicKey, Object as Object$1, deno_default, getDocumentLoader } from "./type-D_8QzkEn.js";
+import { isActor } from "./actor-dO7jHa6A.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/key-DhflzsBJ.cjs

@@ -0,0 +1,10 @@
+
+          const { Temporal } = require("@js-temporal/polyfill");
+          const { URLPattern } = require("urlpattern-polyfill");
+        
+require('./docloader-Buh0Ah9G.cjs');
+require('./actor-Bn2RCpws.cjs');
+require('./lookup-CDOxr8vw.cjs');
+const require_key = require('./key-BR1W25rw.cjs');
+
+exports.validateCryptoKey = require_key.validateCryptoKey;

package/dist/{key-B9Z5ZuX9.js → key-WES6wszI.js}

@@ -2,9 +2,9 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import "./docloader-BtqIh1OE.js";
-import "./actor-DU511yTk.js";
-import "./lookup-NuT9cCSl.js";
-import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-Cc0JlcKe.js";
+import "./docloader-DOmINJ1U.js";
+import "./actor-menZmmiI.js";
+import "./lookup-D8tCnUj2.js";
+import { exportJwk, fetchKey, generateCryptoKeyPair, importJwk, validateCryptoKey } from "./key-BnjofJ4e.js";
 
 export { validateCryptoKey };

package/dist/{keycache-CVBjz3xi.js → keycache-Covv8lvK.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey } from "./type-B4NJkfVg.js";
+import { CryptographicKey, Multikey } from "./type-D_8QzkEn.js";
 
 //#region src/federation/keycache.ts
 var KvKeyCache = class {

package/dist/{keys-CBKbYaJA.js → keys-DZ1bqhJz.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { CryptographicKey, Multikey, importSpki } from "./type-B4NJkfVg.js";
+import { CryptographicKey, Multikey, importSpki } from "./type-D_8QzkEn.js";
 
 //#region src/testing/keys.ts
 const rsaPublicKey1 = new CryptographicKey({

package/dist/{ld-CxgmnSO3.js → ld-C7KL1MK2.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, CryptographicKey, Object as Object$1, deno_default, getDocumentLoader, getTypeId } from "./type-B4NJkfVg.js";
-import { fetchKey, validateCryptoKey } from "./key-CfiBDu3o.js";
+import { Activity, CryptographicKey, Object as Object$1, deno_default, getDocumentLoader, getTypeId } from "./type-D_8QzkEn.js";
+import { fetchKey, validateCryptoKey } from "./key-CIIkeide.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";

package/dist/{lookup-QHjmy4Og.cjs → lookup-CDOxr8vw.cjs}

@@ -3,7 +3,7 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_docloader = require('./docloader-kae6M-GI.cjs');
+const require_docloader = require('./docloader-Buh0Ah9G.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 

package/dist/{lookup-NuT9cCSl.js → lookup-D8tCnUj2.js}

@@ -2,7 +2,7 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-BtqIh1OE.js";
+import { UrlError, deno_default, getUserAgent, validatePublicUrl } from "./docloader-DOmINJ1U.js";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 

package/dist/{lookup-CiU3QxQz.js → lookup-VSVPBU3J.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Object as Object$1, deno_default, getDocumentLoader, getTypeId, lookupWebFinger } from "./type-B4NJkfVg.js";
+import { Object as Object$1, deno_default, getDocumentLoader, getTypeId, lookupWebFinger } from "./type-D_8QzkEn.js";
 import { cloneDeep, delay } from "es-toolkit";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
@@ -240,14 +240,13 @@ async function lookupObject(identifier, options = {}) {
 async function lookupObjectInternal(identifier, options = {}) {
 	const documentLoader = options.documentLoader ?? getDocumentLoader({ userAgent: options.userAgent });
 	if (typeof identifier === "string") identifier = toAcctUrl(identifier) ?? new URL(identifier);
-	let document = null;
+	let remoteDoc = null;
 	if (identifier.protocol === "http:" || identifier.protocol === "https:") try {
-		const remoteDoc = await documentLoader(identifier.href, { signal: options.signal });
-		document = remoteDoc.document;
+		remoteDoc = await documentLoader(identifier.href, { signal: options.signal });
 	} catch (error) {
 		logger.debug("Failed to fetch remote document:\n{error}", { error });
 	}
-	if (document == null) {
+	if (remoteDoc == null) {
 		const jrd = await lookupWebFinger(identifier, {
 			userAgent: options.userAgent,
 			tracerProvider: options.tracerProvider,
@@ -258,8 +257,7 @@ async function lookupObjectInternal(identifier, options = {}) {
 		for (const l of jrd.links) {
 			if (l.type !== "application/activity+json" && !l.type?.match(/application\/ld\+json;\s*profile="https:\/\/www.w3.org\/ns\/activitystreams"/) || l.rel !== "self" || l.href == null) continue;
 			try {
-				const remoteDoc = await documentLoader(l.href, { signal: options.signal });
-				document = remoteDoc.document;
+				remoteDoc = await documentLoader(l.href, { signal: options.signal });
 				break;
 			} catch (error) {
 				logger.debug("Failed to fetch remote document:\n{error}", { error });
@@ -267,23 +265,34 @@ async function lookupObjectInternal(identifier, options = {}) {
 			}
 		}
 	}
-	if (document == null) return null;
+	if (remoteDoc == null) return null;
+	let object;
 	try {
-		return await Object$1.fromJsonLd(document, {
+		object = await Object$1.fromJsonLd(remoteDoc.document, {
 			documentLoader,
 			contextLoader: options.contextLoader,
-			tracerProvider: options.tracerProvider
+			tracerProvider: options.tracerProvider,
+			baseUrl: new URL(remoteDoc.documentUrl)
 		});
 	} catch (error) {
 		if (error instanceof TypeError) {
 			logger.debug("Failed to parse JSON-LD document: {error}\n{document}", {
-				error,
-				document
+				...remoteDoc,
+				error
 			});
 			return null;
 		}
 		throw error;
 	}
+	if (options.crossOrigin !== "trust" && object.id != null && object.id.origin !== new URL(remoteDoc.documentUrl).origin) {
+		if (options.crossOrigin === "throw") throw new Error(`The object's @id (${object.id.href}) has a different origin than the document URL (${remoteDoc.documentUrl}); refusing to return the object.  If you want to bypass this check and are aware of the security implications, set the crossOrigin option to "trust".`);
+		logger.warn("The object's @id ({objectId}) has a different origin than the document URL ({documentUrl}); refusing to return the object.  If you want to bypass this check and are aware of the security implications, set the crossOrigin option to \"trust\".", {
+			...remoteDoc,
+			objectId: object.id.href
+		});
+		return null;
+	}
+	return object;
 }
 /**
 * Traverses a collection, yielding each item in the collection.

package/dist/middleware-9KSLASn7.js

@@ -0,0 +1,17 @@
+
+          import { Temporal } from "@js-temporal/polyfill";
+          import { URLPattern } from "urlpattern-polyfill";
+        
+import "./transformers-BFT6d7J5.js";
+import "./docloader-DOmINJ1U.js";
+import "./actor-menZmmiI.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "./middleware-DXOZ6_ST.js";
+import "./lookup-D8tCnUj2.js";
+import "./key-BnjofJ4e.js";
+import "./http-gHyCrTrX.js";
+import "./proof-D6pbnNx2.js";
+import "./types-Db4ukgX8.js";
+import "./authdocloader-CZsCIRLV.js";
+import "./vocab-CJHF7Q71.js";
+
+export { FederationImpl };