@fedify/fedify 2.0.0-dev.279 → 2.0.0-dev.335

package/dist/{key-BGzsKfpZ.js → key-DFPkYar3.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-fe0u4LiE.js";
+import { deno_default } from "./deno-Dhe5E7NK.js";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey, Object as Object$1, isActor } from "@fedify/vocab";
 import { getDocumentLoader } from "@fedify/vocab-runtime";

package/dist/{kv-cache-CETRZwoP.js → kv-cache-1TNWtgx7.js}

@@ -2,7 +2,7 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { doubleKnock, validateCryptoKey } from "./http-7r8B3dF_.js";
+import { doubleKnock, validateCryptoKey } from "./http-DZrrJD77.js";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getDocumentLoader, getRemoteDocument, logRequest, preloadedContexts, validatePublicUrl } from "@fedify/vocab-runtime";

package/dist/{kv-cache-C0AvpI7U.cjs → kv-cache-DwcKE9EQ.cjs}

@@ -2,8 +2,8 @@
           const { Temporal } = require("@js-temporal/polyfill");
           const { URLPattern } = require("urlpattern-polyfill");
         
-const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_http = require('./http-DMi5iyiI.cjs');
+const require_chunk = require('./chunk-CGaQZ11T.cjs');
+const require_http = require('./http-ChlQCtql.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const es_toolkit = require_chunk.__toESM(require("es-toolkit"));
 const __fedify_vocab_runtime = require_chunk.__toESM(require("@fedify/vocab-runtime"));

package/dist/{ld-BaO1-A5Y.js → ld-kAhyoO55.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-fe0u4LiE.js";
-import { fetchKey, validateCryptoKey } from "./key-BGzsKfpZ.js";
+import { deno_default } from "./deno-Dhe5E7NK.js";
+import { fetchKey, validateCryptoKey } from "./key-DFPkYar3.js";
 import { getLogger } from "@logtape/logtape";
 import { Activity, CryptographicKey, Object as Object$1, getTypeId } from "@fedify/vocab";
 import { getDocumentLoader } from "@fedify/vocab-runtime";

package/dist/middleware-BgurYNZ4.js

@@ -0,0 +1,12 @@
+
+          import { Temporal } from "@js-temporal/polyfill";
+          import { URLPattern } from "urlpattern-polyfill";
+        
+import "./transformers-C3FLHUd6.js";
+import "./http-DZrrJD77.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "./middleware-DQriD-Kq.js";
+import "./proof-JtZEQaKw.js";
+import "./types-C93Ob9cU.js";
+import "./kv-cache-1TNWtgx7.js";
+
+export { FederationImpl };

package/dist/{middleware-C0Vj7vNo.cjs → middleware-CULfPNt-.cjs}

@@ -2,12 +2,12 @@
           const { Temporal } = require("@js-temporal/polyfill");
           const { URLPattern } = require("urlpattern-polyfill");
         
-const require_chunk = require('./chunk-DqRYRqnO.cjs');
-const require_transformers = require('./transformers-BjBg6Lag.cjs');
-const require_http = require('./http-DMi5iyiI.cjs');
-const require_proof = require('./proof-vSvvLbTh.cjs');
-const require_types = require('./types-B6z6CqIz.cjs');
-const require_kv_cache = require('./kv-cache-C0AvpI7U.cjs');
+const require_chunk = require('./chunk-CGaQZ11T.cjs');
+const require_transformers = require('./transformers-3g8GZwkZ.cjs');
+const require_http = require('./http-ChlQCtql.cjs');
+const require_proof = require('./proof-_Rz8hNBt.cjs');
+const require_types = require('./types-Cd_hszr_.cjs');
+const require_kv_cache = require('./kv-cache-DwcKE9EQ.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __fedify_vocab = require_chunk.__toESM(require("@fedify/vocab"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
@@ -323,6 +323,7 @@ var FederationBuilderImpl = class {
 	inboxListeners;
 	inboxErrorHandler;
 	sharedInboxKeyDispatcher;
+	outboxPermanentFailureHandler;
 	idempotencyStrategy;
 	collectionTypeIds;
 	collectionCallbacks;
@@ -338,7 +339,7 @@ var FederationBuilderImpl = class {
 		this.collectionTypeIds = {};
 	}
 	async build(options) {
-		const { FederationImpl: FederationImpl$1 } = await Promise.resolve().then(() => require("./middleware-DT3JkH-g.cjs"));
+		const { FederationImpl: FederationImpl$1 } = await Promise.resolve().then(() => require("./middleware-ChlsNVu2.cjs"));
 		const f = new FederationImpl$1(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();
@@ -360,6 +361,7 @@ var FederationBuilderImpl = class {
 		f.inboxListeners = this.inboxListeners?.clone();
 		f.inboxErrorHandler = this.inboxErrorHandler;
 		f.sharedInboxKeyDispatcher = this.sharedInboxKeyDispatcher;
+		f.outboxPermanentFailureHandler = this.outboxPermanentFailureHandler;
 		f.idempotencyStrategy = this.idempotencyStrategy;
 		return f;
 	}
@@ -841,6 +843,9 @@ var FederationBuilderImpl = class {
 		const path = this.router.build(`collection:${routeName}`, values) ?? this.router.build(`orderedCollection:${routeName}`, values);
 		return path;
 	}
+	setOutboxPermanentFailureHandler(handler) {
+		this.outboxPermanentFailureHandler = handler;
+	}
 	/**
 	* Converts a name (string or symbol) to a unique string identifier.
 	* For symbols, generates and caches a UUID if not already present.
@@ -2181,7 +2186,7 @@ async function sendActivityInternal({ activity, activityId, keys, inbox, headers
 			statusText: response.statusText,
 			error
 		});
-		throw new Error(`Failed to send activity ${activityId} to ${inbox.href} (${response.status} ${response.statusText}):\n${error}`);
+		throw new SendActivityError(inbox, response.status, `Failed to send activity ${activityId} to ${inbox.href} (${response.status} ${response.statusText}):\n${error}`, error);
 	}
 	span.addEvent("activitypub.activity.sent", {
 		"activitypub.activity.json": JSON.stringify(activity),
@@ -2189,6 +2194,40 @@ async function sendActivityInternal({ activity, activityId, keys, inbox, headers
 		"activitypub.activity.id": activityId ?? ""
 	});
 }
+/**
+* An error that is thrown when an activity fails to send to a remote inbox.
+* It contains structured information about the failure, including the HTTP
+* status code, the inbox URL, and the response body.
+* @since 2.0.0
+*/
+var SendActivityError = class extends Error {
+	/**
+	* The inbox URL that the activity was being sent to.
+	*/
+	inbox;
+	/**
+	* The HTTP status code returned by the inbox.
+	*/
+	statusCode;
+	/**
+	* The response body from the inbox, if any.
+	*/
+	responseBody;
+	/**
+	* Creates a new {@link SendActivityError}.
+	* @param inbox The inbox URL.
+	* @param statusCode The HTTP status code.
+	* @param message The error message.
+	* @param responseBody The response body.
+	*/
+	constructor(inbox, statusCode, message, responseBody) {
+		super(message);
+		this.name = "SendActivityError";
+		this.inbox = inbox;
+		this.statusCode = statusCode;
+		this.responseBody = responseBody;
+	}
+};
 
 //#endregion
 //#region src/federation/webfinger.ts
@@ -2350,6 +2389,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 	allowPrivateAddress;
 	userAgent;
 	onOutboxError;
+	permanentFailureStatusCodes;
 	signatureTimeWindow;
 	skipSignatureVerification;
 	outboxRetryPolicy;
@@ -2431,6 +2471,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 		}));
 		this.userAgent = userAgent;
 		this.onOutboxError = options.onOutboxError;
+		this.permanentFailureStatusCodes = options.permanentFailureStatusCodes ?? [404, 410];
 		this.signatureTimeWindow = options.signatureTimeWindow ?? { hours: 1 };
 		this.skipSignatureVerification = options.skipSignatureVerification ?? false;
 		this.outboxRetryPolicy = options.outboxRetryPolicy ?? createExponentialBackoffPolicy();
@@ -2613,13 +2654,44 @@ var FederationImpl = class extends FederationBuilderImpl {
 				tracerProvider: this.tracerProvider
 			});
 			try {
-				this.onOutboxError?.(error, activity);
+				await this.onOutboxError?.(error, activity);
 			} catch (error$1) {
 				logger$1.error("An unexpected error occurred in onError handler:\n{error}", {
 					...logData,
 					error: error$1
 				});
 			}
+			if (error instanceof SendActivityError && this.permanentFailureStatusCodes.includes(error.statusCode)) {
+				logger$1.warn("Permanent delivery failure for activity {activityId} to {inbox} ({status}); not retrying.", {
+					...logData,
+					status: error.statusCode
+				});
+				if (this.outboxPermanentFailureHandler != null) {
+					const ctx = this.#createContext(new URL(message.baseUrl), _, { documentLoader: this.documentLoaderFactory(loaderOptions) });
+					try {
+						await this.outboxPermanentFailureHandler(ctx, {
+							inbox: new URL(message.inbox),
+							activity,
+							error,
+							statusCode: error.statusCode,
+							actorIds: (message.actorIds ?? []).flatMap((id) => {
+								try {
+									return [new URL(id)];
+								} catch {
+									logger$1.warn("Invalid actorId URL in OutboxMessage: {id}", { id });
+									return [];
+								}
+							})
+						});
+					} catch (handlerError) {
+						logger$1.error("An unexpected error occurred in outboxPermanentFailureHandler:\n{error}", {
+							...logData,
+							error: handlerError
+						});
+					}
+				}
+				return;
+			}
 			if (this.outboxQueue?.nativeRetrial) {
 				logger$1.error("Failed to send activity {activityId} to {inbox}; backend will handle retry:\n{error}", {
 					...logData,
@@ -2910,6 +2982,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				activityType: (0, __fedify_vocab.getTypeId)(activity).href,
 				inbox,
 				sharedInbox: inboxes[inbox].sharedInbox,
+				actorIds: [...inboxes[inbox].actorIds],
 				started: (/* @__PURE__ */ new Date()).toISOString(),
 				attempt: 0,
 				headers: collectionSync == null ? {} : { "Collection-Synchronization": await buildCollectionSynchronizationHeader(collectionSync, inboxes[inbox].actorIds) },
@@ -4234,6 +4307,12 @@ Object.defineProperty(exports, 'RouterError', {
     return RouterError;
   }
 });
+Object.defineProperty(exports, 'SendActivityError', {
+  enumerable: true,
+  get: function () {
+    return SendActivityError;
+  }
+});
 Object.defineProperty(exports, 'buildCollectionSynchronizationHeader', {
   enumerable: true,
   get: function () {

package/dist/middleware-ChlsNVu2.cjs

@@ -0,0 +1,12 @@
+
+          const { Temporal } = require("@js-temporal/polyfill");
+          const { URLPattern } = require("urlpattern-polyfill");
+        
+require('./transformers-3g8GZwkZ.cjs');
+require('./http-ChlQCtql.cjs');
+const require_middleware = require('./middleware-CULfPNt-.cjs');
+require('./proof-_Rz8hNBt.cjs');
+require('./types-Cd_hszr_.cjs');
+require('./kv-cache-DwcKE9EQ.cjs');
+
+exports.FederationImpl = require_middleware.FederationImpl;

package/dist/{middleware-R0w-WauH.js → middleware-DQriD-Kq.js}

@@ -2,11 +2,11 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { getDefaultActivityTransformers } from "./transformers-N_ip_y4P.js";
-import { deno_default, doubleKnock, exportJwk, importJwk, validateCryptoKey, verifyRequest } from "./http-7r8B3dF_.js";
-import { detachSignature, doesActorOwnKey, getKeyOwner, hasSignature, signJsonLd, signObject, verifyJsonLd, verifyObject } from "./proof-Cg6AAAWI.js";
-import { getNodeInfo, nodeInfoToJson } from "./types-8l28uC8o.js";
-import { getAuthenticatedDocumentLoader, kvCache } from "./kv-cache-CETRZwoP.js";
+import { getDefaultActivityTransformers } from "./transformers-C3FLHUd6.js";
+import { deno_default, doubleKnock, exportJwk, importJwk, validateCryptoKey, verifyRequest } from "./http-DZrrJD77.js";
+import { detachSignature, doesActorOwnKey, getKeyOwner, hasSignature, signJsonLd, signObject, verifyJsonLd, verifyObject } from "./proof-JtZEQaKw.js";
+import { getNodeInfo, nodeInfoToJson } from "./types-C93Ob9cU.js";
+import { getAuthenticatedDocumentLoader, kvCache } from "./kv-cache-1TNWtgx7.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, getTypeId, lookupObject, traverseCollection } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
@@ -322,6 +322,7 @@ var FederationBuilderImpl = class {
 	inboxListeners;
 	inboxErrorHandler;
 	sharedInboxKeyDispatcher;
+	outboxPermanentFailureHandler;
 	idempotencyStrategy;
 	collectionTypeIds;
 	collectionCallbacks;
@@ -337,7 +338,7 @@ var FederationBuilderImpl = class {
 		this.collectionTypeIds = {};
 	}
 	async build(options) {
-		const { FederationImpl: FederationImpl$1 } = await import("./middleware-BDJNulB_.js");
+		const { FederationImpl: FederationImpl$1 } = await import("./middleware-BgurYNZ4.js");
 		const f = new FederationImpl$1(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();
@@ -359,6 +360,7 @@ var FederationBuilderImpl = class {
 		f.inboxListeners = this.inboxListeners?.clone();
 		f.inboxErrorHandler = this.inboxErrorHandler;
 		f.sharedInboxKeyDispatcher = this.sharedInboxKeyDispatcher;
+		f.outboxPermanentFailureHandler = this.outboxPermanentFailureHandler;
 		f.idempotencyStrategy = this.idempotencyStrategy;
 		return f;
 	}
@@ -840,6 +842,9 @@ var FederationBuilderImpl = class {
 		const path = this.router.build(`collection:${routeName}`, values) ?? this.router.build(`orderedCollection:${routeName}`, values);
 		return path;
 	}
+	setOutboxPermanentFailureHandler(handler) {
+		this.outboxPermanentFailureHandler = handler;
+	}
 	/**
 	* Converts a name (string or symbol) to a unique string identifier.
 	* For symbols, generates and caches a UUID if not already present.
@@ -2180,7 +2185,7 @@ async function sendActivityInternal({ activity, activityId, keys, inbox, headers
 			statusText: response.statusText,
 			error
 		});
-		throw new Error(`Failed to send activity ${activityId} to ${inbox.href} (${response.status} ${response.statusText}):\n${error}`);
+		throw new SendActivityError(inbox, response.status, `Failed to send activity ${activityId} to ${inbox.href} (${response.status} ${response.statusText}):\n${error}`, error);
 	}
 	span.addEvent("activitypub.activity.sent", {
 		"activitypub.activity.json": JSON.stringify(activity),
@@ -2188,6 +2193,40 @@ async function sendActivityInternal({ activity, activityId, keys, inbox, headers
 		"activitypub.activity.id": activityId ?? ""
 	});
 }
+/**
+* An error that is thrown when an activity fails to send to a remote inbox.
+* It contains structured information about the failure, including the HTTP
+* status code, the inbox URL, and the response body.
+* @since 2.0.0
+*/
+var SendActivityError = class extends Error {
+	/**
+	* The inbox URL that the activity was being sent to.
+	*/
+	inbox;
+	/**
+	* The HTTP status code returned by the inbox.
+	*/
+	statusCode;
+	/**
+	* The response body from the inbox, if any.
+	*/
+	responseBody;
+	/**
+	* Creates a new {@link SendActivityError}.
+	* @param inbox The inbox URL.
+	* @param statusCode The HTTP status code.
+	* @param message The error message.
+	* @param responseBody The response body.
+	*/
+	constructor(inbox, statusCode, message, responseBody) {
+		super(message);
+		this.name = "SendActivityError";
+		this.inbox = inbox;
+		this.statusCode = statusCode;
+		this.responseBody = responseBody;
+	}
+};
 
 //#endregion
 //#region src/federation/webfinger.ts
@@ -2349,6 +2388,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 	allowPrivateAddress;
 	userAgent;
 	onOutboxError;
+	permanentFailureStatusCodes;
 	signatureTimeWindow;
 	skipSignatureVerification;
 	outboxRetryPolicy;
@@ -2430,6 +2470,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 		}));
 		this.userAgent = userAgent;
 		this.onOutboxError = options.onOutboxError;
+		this.permanentFailureStatusCodes = options.permanentFailureStatusCodes ?? [404, 410];
 		this.signatureTimeWindow = options.signatureTimeWindow ?? { hours: 1 };
 		this.skipSignatureVerification = options.skipSignatureVerification ?? false;
 		this.outboxRetryPolicy = options.outboxRetryPolicy ?? createExponentialBackoffPolicy();
@@ -2612,13 +2653,44 @@ var FederationImpl = class extends FederationBuilderImpl {
 				tracerProvider: this.tracerProvider
 			});
 			try {
-				this.onOutboxError?.(error, activity);
+				await this.onOutboxError?.(error, activity);
 			} catch (error$1) {
 				logger$1.error("An unexpected error occurred in onError handler:\n{error}", {
 					...logData,
 					error: error$1
 				});
 			}
+			if (error instanceof SendActivityError && this.permanentFailureStatusCodes.includes(error.statusCode)) {
+				logger$1.warn("Permanent delivery failure for activity {activityId} to {inbox} ({status}); not retrying.", {
+					...logData,
+					status: error.statusCode
+				});
+				if (this.outboxPermanentFailureHandler != null) {
+					const ctx = this.#createContext(new URL(message.baseUrl), _, { documentLoader: this.documentLoaderFactory(loaderOptions) });
+					try {
+						await this.outboxPermanentFailureHandler(ctx, {
+							inbox: new URL(message.inbox),
+							activity,
+							error,
+							statusCode: error.statusCode,
+							actorIds: (message.actorIds ?? []).flatMap((id) => {
+								try {
+									return [new URL(id)];
+								} catch {
+									logger$1.warn("Invalid actorId URL in OutboxMessage: {id}", { id });
+									return [];
+								}
+							})
+						});
+					} catch (handlerError) {
+						logger$1.error("An unexpected error occurred in outboxPermanentFailureHandler:\n{error}", {
+							...logData,
+							error: handlerError
+						});
+					}
+				}
+				return;
+			}
 			if (this.outboxQueue?.nativeRetrial) {
 				logger$1.error("Failed to send activity {activityId} to {inbox}; backend will handle retry:\n{error}", {
 					...logData,
@@ -2909,6 +2981,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				activityType: getTypeId(activity).href,
 				inbox,
 				sharedInbox: inboxes[inbox].sharedInbox,
+				actorIds: [...inboxes[inbox].actorIds],
 				started: (/* @__PURE__ */ new Date()).toISOString(),
 				attempt: 0,
 				headers: collectionSync == null ? {} : { "Collection-Synchronization": await buildCollectionSynchronizationHeader(collectionSync, inboxes[inbox].actorIds) },
@@ -4197,4 +4270,4 @@ function getRequestId(request) {
 }
 
 //#endregion
-export { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, Router$1 as Router, RouterError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, respondWithObject, respondWithObjectIfAcceptable };
+export { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, Router$1 as Router, RouterError, SendActivityError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, respondWithObject, respondWithObjectIfAcceptable };

package/dist/{middleware-CnGBoMop.js → middleware-DebYvXJs.js}

@@ -3,24 +3,24 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import "./deno-fe0u4LiE.js";
-import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "./middleware-BlOT9luD.js";
+import "./deno-Dhe5E7NK.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "./middleware-zvH5O0zk.js";
 import "./client-Dg7OfUDA.js";
 import "./router-D9eI0s4b.js";
 import "./types-CPz01LGH.js";
-import "./key-BGzsKfpZ.js";
-import "./http-oCBlFLKT.js";
-import "./ld-BaO1-A5Y.js";
-import "./owner-BqIhDQWW.js";
-import "./proof-DoHt7qrS.js";
-import "./docloader-C9Dmxf-K.js";
+import "./key-DFPkYar3.js";
+import "./http-CSqVEUdE.js";
+import "./ld-kAhyoO55.js";
+import "./owner-DcyH0sQg.js";
+import "./proof-D7C8ouBO.js";
+import "./docloader-D6VuU143.js";
 import "./kv-cache-B__dHl7g.js";
-import "./inbox-Dm1rfkdg.js";
-import "./builder-B7WWCOdc.js";
+import "./inbox-9F91oWJU.js";
+import "./builder-RHW0dkbP.js";
 import "./collection-CcnIw1qY.js";
 import "./keycache-DRxpZ5r9.js";
 import "./negotiation-5NPJL6zp.js";
 import "./retry-D4GJ670a.js";
-import "./send-CO2ZYT96.js";
+import "./send-mAsnzegg.js";
 
 export { FederationImpl };

package/dist/{middleware-BlOT9luD.js → middleware-zvH5O0zk.js}

@@ -3,24 +3,24 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-fe0u4LiE.js";
+import { deno_default } from "./deno-Dhe5E7NK.js";
 import { getNodeInfo } from "./client-Dg7OfUDA.js";
 import { RouterError } from "./router-D9eI0s4b.js";
 import { nodeInfoToJson } from "./types-CPz01LGH.js";
-import { exportJwk, importJwk, validateCryptoKey } from "./key-BGzsKfpZ.js";
-import { verifyRequest } from "./http-oCBlFLKT.js";
-import { detachSignature, hasSignature, signJsonLd, verifyJsonLd } from "./ld-BaO1-A5Y.js";
-import { doesActorOwnKey, getKeyOwner } from "./owner-BqIhDQWW.js";
-import { signObject, verifyObject } from "./proof-DoHt7qrS.js";
-import { getAuthenticatedDocumentLoader } from "./docloader-C9Dmxf-K.js";
+import { exportJwk, importJwk, validateCryptoKey } from "./key-DFPkYar3.js";
+import { verifyRequest } from "./http-CSqVEUdE.js";
+import { detachSignature, hasSignature, signJsonLd, verifyJsonLd } from "./ld-kAhyoO55.js";
+import { doesActorOwnKey, getKeyOwner } from "./owner-DcyH0sQg.js";
+import { signObject, verifyObject } from "./proof-D7C8ouBO.js";
+import { getAuthenticatedDocumentLoader } from "./docloader-D6VuU143.js";
 import { kvCache } from "./kv-cache-B__dHl7g.js";
-import { routeActivity } from "./inbox-Dm1rfkdg.js";
-import { FederationBuilderImpl } from "./builder-B7WWCOdc.js";
+import { routeActivity } from "./inbox-9F91oWJU.js";
+import { FederationBuilderImpl } from "./builder-RHW0dkbP.js";
 import { buildCollectionSynchronizationHeader } from "./collection-CcnIw1qY.js";
 import { KvKeyCache } from "./keycache-DRxpZ5r9.js";
 import { acceptsJsonLd } from "./negotiation-5NPJL6zp.js";
 import { createExponentialBackoffPolicy } from "./retry-D4GJ670a.js";
-import { extractInboxes, sendActivity } from "./send-CO2ZYT96.js";
+import { SendActivityError, extractInboxes, sendActivity } from "./send-mAsnzegg.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, getTypeId, lookupObject, traverseCollection } from "@fedify/vocab";
 import { getDocumentLoader } from "@fedify/vocab-runtime";
@@ -1307,6 +1307,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 	allowPrivateAddress;
 	userAgent;
 	onOutboxError;
+	permanentFailureStatusCodes;
 	signatureTimeWindow;
 	skipSignatureVerification;
 	outboxRetryPolicy;
@@ -1388,6 +1389,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 		}));
 		this.userAgent = userAgent;
 		this.onOutboxError = options.onOutboxError;
+		this.permanentFailureStatusCodes = options.permanentFailureStatusCodes ?? [404, 410];
 		this.signatureTimeWindow = options.signatureTimeWindow ?? { hours: 1 };
 		this.skipSignatureVerification = options.skipSignatureVerification ?? false;
 		this.outboxRetryPolicy = options.outboxRetryPolicy ?? createExponentialBackoffPolicy();
@@ -1570,13 +1572,44 @@ var FederationImpl = class extends FederationBuilderImpl {
 				tracerProvider: this.tracerProvider
 			});
 			try {
-				this.onOutboxError?.(error, activity);
+				await this.onOutboxError?.(error, activity);
 			} catch (error$1) {
 				logger$2.error("An unexpected error occurred in onError handler:\n{error}", {
 					...logData,
 					error: error$1
 				});
 			}
+			if (error instanceof SendActivityError && this.permanentFailureStatusCodes.includes(error.statusCode)) {
+				logger$2.warn("Permanent delivery failure for activity {activityId} to {inbox} ({status}); not retrying.", {
+					...logData,
+					status: error.statusCode
+				});
+				if (this.outboxPermanentFailureHandler != null) {
+					const ctx = this.#createContext(new URL(message.baseUrl), _, { documentLoader: this.documentLoaderFactory(loaderOptions) });
+					try {
+						await this.outboxPermanentFailureHandler(ctx, {
+							inbox: new URL(message.inbox),
+							activity,
+							error,
+							statusCode: error.statusCode,
+							actorIds: (message.actorIds ?? []).flatMap((id) => {
+								try {
+									return [new URL(id)];
+								} catch {
+									logger$2.warn("Invalid actorId URL in OutboxMessage: {id}", { id });
+									return [];
+								}
+							})
+						});
+					} catch (handlerError) {
+						logger$2.error("An unexpected error occurred in outboxPermanentFailureHandler:\n{error}", {
+							...logData,
+							error: handlerError
+						});
+					}
+				}
+				return;
+			}
 			if (this.outboxQueue?.nativeRetrial) {
 				logger$2.error("Failed to send activity {activityId} to {inbox}; backend will handle retry:\n{error}", {
 					...logData,
@@ -1867,6 +1900,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				activityType: getTypeId(activity).href,
 				inbox,
 				sharedInbox: inboxes[inbox].sharedInbox,
+				actorIds: [...inboxes[inbox].actorIds],
 				started: (/* @__PURE__ */ new Date()).toISOString(),
 				attempt: 0,
 				headers: collectionSync == null ? {} : { "Collection-Synchronization": await buildCollectionSynchronizationHeader(collectionSync, inboxes[inbox].actorIds) },

package/dist/{mod-YpmzboJc.d.ts → mod-B9_l3te3.d.ts}

@@ -1,6 +1,6 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { ActivityTransformer, Context } from "./context-BNNWbaZL.js";
+import { ActivityTransformer, Context } from "./context-liIe6DFH.js";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/mod-Bh8mqlYw.d.cts

@@ -0,0 +1,9 @@
+import "node:module";
+
+//#region rolldown:runtime
+
+import * as import___fedify_vocab_runtime from "@fedify/vocab-runtime";
+__reExport(mod_d_exports, import___fedify_vocab_runtime);
+
+//#endregion
+export { __export, __reExport, mod_d_exports };

package/dist/{mod-BrS8tiad.d.cts → mod-COO7VMcm.d.cts}

@@ -1,4 +1,4 @@
-import { KeyCache } from "./http-ClB3pLcL.cjs";
+import { KeyCache } from "./http-CCEu-x1_.cjs";
 import { CryptographicKey, DataIntegrityProof, Multikey, Object as Object$1 } from "@fedify/vocab";
 import { DocumentLoader } from "@fedify/vocab-runtime";
 import { TracerProvider } from "@opentelemetry/api";

package/dist/{mod-DZmuPaKv.d.ts → mod-CvhyLrjX.d.ts}

@@ -1,7 +1,7 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { HttpMessageSignaturesSpecDeterminer } from "./http-DLBDPal9.js";
-import { KvKey, KvStore } from "./kv-CYySNrsn.js";
+import { HttpMessageSignaturesSpecDeterminer } from "./http-CODSJcKx.js";
+import { KvKey, KvStore } from "./kv-jg_8SMc1.js";
 import { TracerProvider } from "@opentelemetry/api";
 import { DocumentLoader, DocumentLoaderFactoryOptions } from "@fedify/vocab-runtime";
 

package/dist/mod-D6HodEq7.d.ts

@@ -0,0 +1,7 @@
+import { Temporal } from "@js-temporal/polyfill";
+import { URLPattern } from "urlpattern-polyfill";
+import * as import___fedify_vocab_runtime from "@fedify/vocab-runtime";
+__reExport(mod_d_exports, import___fedify_vocab_runtime);
+
+//#endregion
+export { mod_d_exports };

package/dist/{mod-BHXq4Q3x.d.cts → mod-DWaA45ef.d.cts}

@@ -1,5 +1,5 @@
-import { HttpMessageSignaturesSpecDeterminer } from "./http-ClB3pLcL.cjs";
-import { KvKey, KvStore } from "./kv-B4vFhIYL.cjs";
+import { HttpMessageSignaturesSpecDeterminer } from "./http-CCEu-x1_.cjs";
+import { KvKey, KvStore } from "./kv-g9jFc34-.cjs";
 import { DocumentLoader, DocumentLoaderFactoryOptions } from "@fedify/vocab-runtime";
 import { TracerProvider } from "@opentelemetry/api";
 

package/dist/{mod-054TSUXs.d.cts → mod-Do_sZWAA.d.cts}

@@ -1,4 +1,4 @@
-import { ActorAliasMapper, ActorDispatcher, ActorHandleMapper, RequestContext, WebFingerLinksDispatcher } from "./context-D7JEVvXJ.cjs";
+import { ActorAliasMapper, ActorDispatcher, ActorHandleMapper, RequestContext, WebFingerLinksDispatcher } from "./context-Cf0-LmZC.cjs";
 import { Span, Tracer } from "@opentelemetry/api";
 
 //#region src/federation/webfinger.d.ts

package/dist/{mod-BhDb3RBS.d.ts → mod-Dquroqiv.d.ts}

@@ -1,6 +1,6 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { ActorAliasMapper, ActorDispatcher, ActorHandleMapper, RequestContext, WebFingerLinksDispatcher } from "./context-BNNWbaZL.js";
+import { ActorAliasMapper, ActorDispatcher, ActorHandleMapper, RequestContext, WebFingerLinksDispatcher } from "./context-liIe6DFH.js";
 import { Span, Tracer } from "@opentelemetry/api";
 
 //#region src/federation/webfinger.d.ts

package/dist/{mod-C74sRHP8.d.cts → mod-H3ScYaOb.d.cts}

@@ -1,4 +1,4 @@
-import { ActivityTransformer, Context } from "./context-D7JEVvXJ.cjs";
+import { ActivityTransformer, Context } from "./context-Cf0-LmZC.cjs";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts