@fedify/fedify 2.0.0-pr.412.1559 → 2.0.0-pr.412.1794

package/dist/vocab/mod.cjs

@@ -0,0 +1,86 @@
+
+          const { Temporal } = require("@js-temporal/polyfill");
+          const { URLPattern } = require("urlpattern-polyfill");
+        
+require('../lookup-CfFkONZD.cjs');
+const require_actor = require('../actor-Ba9Z1eNJ.cjs');
+const require_vocab = require('../vocab-DFaWWYDn.cjs');
+
+exports.Accept = require_actor.Accept;
+exports.Activity = require_actor.Activity;
+exports.Add = require_actor.Add;
+exports.Announce = require_actor.Announce;
+exports.Application = require_actor.Application;
+exports.Arrive = require_actor.Arrive;
+exports.Article = require_actor.Article;
+exports.Audio = require_actor.Audio;
+exports.Block = require_actor.Block;
+exports.ChatMessage = require_actor.ChatMessage;
+exports.Collection = require_actor.Collection;
+exports.CollectionPage = require_actor.CollectionPage;
+exports.Create = require_actor.Create;
+exports.CryptographicKey = require_actor.CryptographicKey;
+exports.DataIntegrityProof = require_actor.DataIntegrityProof;
+exports.Delete = require_actor.Delete;
+exports.DidService = require_actor.DidService;
+exports.Dislike = require_actor.Dislike;
+exports.Document = require_actor.Document;
+exports.Emoji = require_actor.Emoji;
+exports.EmojiReact = require_actor.EmojiReact;
+exports.Endpoints = require_actor.Endpoints;
+exports.Event = require_actor.Event;
+exports.Export = require_actor.Export;
+exports.Flag = require_actor.Flag;
+exports.Follow = require_actor.Follow;
+exports.Group = require_actor.Group;
+exports.Hashtag = require_actor.Hashtag;
+exports.Ignore = require_actor.Ignore;
+exports.Image = require_actor.Image;
+exports.IntransitiveActivity = require_actor.IntransitiveActivity;
+exports.Invite = require_actor.Invite;
+exports.Join = require_actor.Join;
+exports.Leave = require_actor.Leave;
+exports.Like = require_actor.Like;
+exports.Link = require_actor.Link;
+exports.Listen = require_actor.Listen;
+exports.Mention = require_actor.Mention;
+exports.Move = require_actor.Move;
+exports.Multikey = require_actor.Multikey;
+exports.Note = require_actor.Note;
+exports.Object = require_actor.Object$1;
+exports.Offer = require_actor.Offer;
+exports.OrderedCollection = require_actor.OrderedCollection;
+exports.OrderedCollectionPage = require_actor.OrderedCollectionPage;
+exports.Organization = require_actor.Organization;
+exports.PUBLIC_COLLECTION = require_vocab.PUBLIC_COLLECTION;
+exports.Page = require_actor.Page;
+exports.Person = require_actor.Person;
+exports.Place = require_actor.Place;
+exports.Profile = require_actor.Profile;
+exports.PropertyValue = require_actor.PropertyValue;
+exports.Question = require_actor.Question;
+exports.Read = require_actor.Read;
+exports.Reject = require_actor.Reject;
+exports.Relationship = require_actor.Relationship;
+exports.Remove = require_actor.Remove;
+exports.Service = require_actor.Service;
+exports.Source = require_actor.Source;
+exports.TentativeAccept = require_actor.TentativeAccept;
+exports.TentativeReject = require_actor.TentativeReject;
+exports.Tombstone = require_actor.Tombstone;
+exports.Travel = require_actor.Travel;
+exports.Undo = require_actor.Undo;
+exports.Update = require_actor.Update;
+exports.Video = require_actor.Video;
+exports.View = require_actor.View;
+exports.getActorClassByTypeName = require_actor.getActorClassByTypeName;
+exports.getActorHandle = require_actor.getActorHandle;
+exports.getActorTypeName = require_actor.getActorTypeName;
+exports.getTypeId = require_actor.getTypeId;
+exports.isActor = require_actor.isActor;
+exports.isFediverseHandle = require_vocab.isFediverseHandle;
+exports.lookupObject = require_vocab.lookupObject;
+exports.normalizeActorHandle = require_actor.normalizeActorHandle;
+exports.parseFediverseHandle = require_vocab.parseFediverseHandle;
+exports.toAcctUrl = require_vocab.toAcctUrl;
+exports.traverseCollection = require_vocab.traverseCollection;

package/dist/vocab/mod.d.cts

@@ -0,0 +1,4 @@
+import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View } from "../vocab-CeDBzu-f.cjs";
+import { Actor, ActorTypeName, GetActorHandleOptions, NormalizeActorHandleOptions, Recipient, getActorClassByTypeName, getActorHandle, getActorTypeName, isActor, normalizeActorHandle } from "../actor-f2NtjyCg.cjs";
+import { FediverseHandle, LookupObjectOptions, PUBLIC_COLLECTION, TraverseCollectionOptions, getTypeId, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../mod-BxRCHTz-.cjs";
+export { Accept, Activity, Actor, ActorTypeName, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, FediverseHandle, Flag, Follow, GetActorHandleOptions, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, LookupObjectOptions, Mention, Move, Multikey, NormalizeActorHandleOptions, Note, Object$1 as Object, Offer, OrderedCollection, OrderedCollectionPage, Organization, PUBLIC_COLLECTION, Page, Person, Place, Profile, PropertyValue, Question, Read, Recipient, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, TraverseCollectionOptions, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, isActor, isFediverseHandle, lookupObject, normalizeActorHandle, parseFediverseHandle, toAcctUrl, traverseCollection };

package/dist/vocab/mod.d.ts

@@ -1,8 +1,6 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import "../kv-C7sopW2E.js";
-import "../docloader-CxWcuWqQ.js";
-import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View } from "../vocab-SOE1ifCr.js";
-import { Actor, ActorTypeName, GetActorHandleOptions, NormalizeActorHandleOptions, Recipient, getActorClassByTypeName, getActorHandle, getActorTypeName, isActor, normalizeActorHandle } from "../actor-C22bXuuC.js";
-import { FediverseHandle, LookupObjectOptions, PUBLIC_COLLECTION, TraverseCollectionOptions, getTypeId, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../mod-Cxt4Kpf6.js";
+import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View } from "../vocab-BCWe1Ih5.js";
+import { Actor, ActorTypeName, GetActorHandleOptions, NormalizeActorHandleOptions, Recipient, getActorClassByTypeName, getActorHandle, getActorTypeName, isActor, normalizeActorHandle } from "../actor-DqFajh9s.js";
+import { FediverseHandle, LookupObjectOptions, PUBLIC_COLLECTION, TraverseCollectionOptions, getTypeId, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../mod-BlVovdcy.js";
 export { Accept, Activity, Actor, ActorTypeName, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, FediverseHandle, Flag, Follow, GetActorHandleOptions, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, LookupObjectOptions, Mention, Move, Multikey, NormalizeActorHandleOptions, Note, Object$1 as Object, Offer, OrderedCollection, OrderedCollectionPage, Organization, PUBLIC_COLLECTION, Page, Person, Place, Profile, PropertyValue, Question, Read, Recipient, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, TraverseCollectionOptions, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, isActor, isFediverseHandle, lookupObject, normalizeActorHandle, parseFediverseHandle, toAcctUrl, traverseCollection };

package/dist/vocab/mod.js

@@ -1,10 +1,9 @@
 
-      import { Temporal } from "@js-temporal/polyfill";
-      import { URLPattern } from "urlpattern-polyfill";
-    
-import "../docloader-DEhniCVa.js";
-import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, isActor, normalizeActorHandle } from "../actor-CTAuCsWy.js";
-import "../lookup-dtdr2ftf.js";
-import { PUBLIC_COLLECTION, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../vocab-CvD6Vbml.js";
+          import { Temporal } from "@js-temporal/polyfill";
+          import { URLPattern } from "urlpattern-polyfill";
+        
+import "../lookup-CHkCVZTU.js";
+import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, isActor, normalizeActorHandle } from "../actor-DzhunPC_.js";
+import { PUBLIC_COLLECTION, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../vocab-BnR3nIU9.js";
 
 export { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object$1 as Object, Offer, OrderedCollection, OrderedCollectionPage, Organization, PUBLIC_COLLECTION, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, isActor, isFediverseHandle, lookupObject, normalizeActorHandle, parseFediverseHandle, toAcctUrl, traverseCollection };

package/dist/vocab/type.test.js

@@ -3,10 +3,9 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Person, getTypeId } from "../type-SK-d7Tbw.js";
+import { Person, getTypeId } from "../lookup-DQRtjvb1.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
-import "../lookup-Bn_HEC_d.js";
-import { test } from "../testing-Z2omCvKy.js";
+import { test } from "../testing-g4UC4liW.js";
 
 //#region src/vocab/type.test.ts
 test("getTypeId()", () => {

package/dist/vocab/vocab.test.js

@@ -3,19 +3,18 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { Activity, Announce, Collection, Create, CryptographicKey, Follow, Hashtag, LanguageString, Note, Object as Object$1, OrderedCollectionPage, Person, Place, Question, Source, decode, vocab_exports } from "../type-SK-d7Tbw.js";
+import { Activity, Announce, Collection, Create, CryptographicKey, Follow, Hashtag, Link, Note, Object as Object$1, OrderedCollectionPage, Person, Place, Question, Source, vocab_exports } from "../lookup-DQRtjvb1.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
-import "../lookup-Bn_HEC_d.js";
-import { mockDocumentLoader, test } from "../testing-Z2omCvKy.js";
-import "../std__assert-X-_kMxKM.js";
-import { assertFalse, assertRejects } from "../assert_rejects-DiIiJbZn.js";
-import "../assert_is_error-BPGph1Jx.js";
-import { assertNotEquals } from "../assert_not_equals-f3m3epl3.js";
-import { assertThrows } from "../assert_throws-BOO88avQ.js";
-import { ed25519PublicKey, rsaPublicKey1 } from "../keys-zZwiKkfx.js";
+import { mockDocumentLoader, test } from "../testing-g4UC4liW.js";
+import "../std__assert-DWivtrGR.js";
+import { assertFalse, assertRejects } from "../assert_rejects-Ce45JcFg.js";
+import { assertThrows } from "../assert_throws-BNXdRGWP.js";
+import { assertNotEquals } from "../assert_not_equals-C80BG-_5.js";
+import { ed25519PublicKey, rsaPublicKey1 } from "../keys-DMHs8XNn.js";
 import { pascalCase } from "es-toolkit";
+import { LanguageString, decodeMultibase } from "@fedify/vocab-runtime";
 import { Validator } from "@cfworker/json-schema";
 import { readFile, readdir } from "node:fs/promises";
 import { join } from "node:path";
@@ -2238,10 +2237,25 @@ const scalarTypes = {
 		dataCheck(v) {
 			return `typeof ${v} === "object" && "@id" in ${v}
         && typeof ${v}["@id"] === "string"
-        && ${v}["@id"] !== "" && ${v}["@id"] !== "/"`;
-		},
-		decoder(v) {
-			return `new URL(${v}["@id"])`;
+        && ${v}["@id"] !== ""`;
+		},
+		decoder(v, baseUrlVar) {
+			return `${v}["@id"].startsWith("at://")
+        ? new URL("at://" +
+          encodeURIComponent(
+            ${v}["@id"].includes("/", 5)
+              ? ${v}["@id"].slice(5, ${v}["@id"].indexOf("/", 5))
+              : ${v}["@id"].slice(5)
+          ) +
+          (
+            ${v}["@id"].includes("/", 5)
+              ? ${v}["@id"].slice(${v}["@id"].indexOf("/", 5))
+              : ""
+          )
+        )
+        : URL.canParse(${v}["@id"]) && ${baseUrlVar}
+          ? new URL(${v}["@id"])
+          : new URL(${v}["@id"], ${baseUrlVar})`;
 		}
 	},
 	"http://www.w3.org/1999/02/22-rdf-syntax-ns#langString": {
@@ -2719,7 +2733,7 @@ test("Activity.fromJsonLd()", async () => {
 	assertEquals(proofs[0].cryptosuite, "eddsa-jcs-2022");
 	assertEquals(proofs[0].verificationMethodId, new URL("https://server.example/users/alice#ed25519-key"));
 	assertEquals(proofs[0].proofPurpose, "assertionMethod");
-	assertEquals(proofs[0].proofValue, decode("z3sXaxjKs4M3BRicwWA9peyNPJvJqxtGsDmpt1jjoHCjgeUf71TRFz56osPSfDErszyLp5Ks1EhYSgpDaNM977Rg2"));
+	assertEquals(proofs[0].proofValue, decodeMultibase("z3sXaxjKs4M3BRicwWA9peyNPJvJqxtGsDmpt1jjoHCjgeUf71TRFz56osPSfDErszyLp5Ks1EhYSgpDaNM977Rg2"));
 	assertEquals(proofs[0].created, Temporal.Instant.from("2023-02-24T23:36:38Z"));
 });
 test({
@@ -2855,6 +2869,7 @@ test({
 test("Person.fromJsonLd()", async () => {
 	const person = await Person.fromJsonLd({
 		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/v1"],
+		"id": "https://todon.eu/users/hongminhee",
 		"publicKey": {
 			"id": "https://todon.eu/users/hongminhee#main-key",
 			"owner": "https://todon.eu/users/hongminhee",
@@ -2862,7 +2877,8 @@ test("Person.fromJsonLd()", async () => {
 		}
 	}, {
 		documentLoader: mockDocumentLoader,
-		contextLoader: mockDocumentLoader
+		contextLoader: mockDocumentLoader,
+		baseUrl: new URL("https://todon.eu/")
 	});
 	assertEquals(person.publicKeyId, new URL("https://todon.eu/users/hongminhee#main-key"));
 	const publicKey = await person.getPublicKey({ documentLoader: mockDocumentLoader });
@@ -3059,6 +3075,413 @@ test("Actor.getOutbox()", async () => {
 	assertInstanceOf(outbox, OrderedCollectionPage);
 	assertEquals(outbox.totalItems, 1);
 });
+test("Link.fromJsonLd()", async () => {
+	const link = await Link.fromJsonLd({
+		"@context": "https://www.w3.org/ns/activitystreams",
+		"type": "Link",
+		"rel": "canonical",
+		"href": "at://did:plc:ia76kvnndjutgedggx2ibrem/app.bsky.feed.post/3lyxjjs27jkqg"
+	});
+	assertEquals(link.rel, "canonical");
+	assertEquals(link.href, new URL("at://did%3Aplc%3Aia76kvnndjutgedggx2ibrem/app.bsky.feed.post/3lyxjjs27jkqg"));
+	const link2 = await Link.fromJsonLd({
+		"@context": "https://www.w3.org/ns/activitystreams",
+		"type": "Link",
+		"href": "at://bnewbold.bsky.team/app.bsky.feed.post/3jwdwj2ctlk26"
+	});
+	assertEquals(link2.href, new URL("at://bnewbold.bsky.team/app.bsky.feed.post/3jwdwj2ctlk26"));
+	const link3 = await Link.fromJsonLd({
+		"@context": "https://www.w3.org/ns/activitystreams",
+		"type": "Link",
+		"href": "at://did:plc:ia76kvnndjutgedggx2ibrem"
+	});
+	assertEquals(link3.href, new URL("at://did%3Aplc%3Aia76kvnndjutgedggx2ibrem"));
+});
+test("Person.fromJsonLd() with relative URLs", async () => {
+	const json = {
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/v1"],
+		id: "https://example.com/ap/actors/019382d3-63d7-7cf7-86e8-91e2551c306c",
+		type: "Person",
+		name: "Test User",
+		icon: {
+			type: "Image",
+			url: "/avatars/test-avatar.jpg"
+		}
+	};
+	const person = await Person.fromJsonLd(json, {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader
+	});
+	const icon = await person.getIcon();
+	assertEquals(icon?.url, new URL("https://example.com/avatars/test-avatar.jpg"));
+	const json2 = {
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/v1"],
+		id: "https://example.com/ap/actors/019382d3-63d7-7cf7-86e8-91e2551c306c",
+		type: "Person",
+		name: "Test User",
+		icon: {
+			id: "https://media.example.com/avatars/test-avatar.jpg",
+			type: "Image",
+			url: "/avatars/test-avatar.jpg"
+		}
+	};
+	const person2 = await Person.fromJsonLd(json2, {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader
+	});
+	const icon2 = await person2.getIcon();
+	assertEquals(icon2?.url, new URL("https://media.example.com/avatars/test-avatar.jpg"));
+});
+test("Person.fromJsonLd() with relative URLs and baseUrl", async () => {
+	const json = {
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/v1"],
+		"id": "https://example.com/ap/actors/019382d3-63d7-7cf7-86e8-91e2551c306c",
+		"type": "Person",
+		"name": "Test User",
+		"icon": {
+			"type": "Image",
+			"url": "/avatars/test-avatar.jpg"
+		}
+	};
+	const personWithBase = await Person.fromJsonLd(json, {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader,
+		baseUrl: new URL("https://example.com")
+	});
+	const icon = await personWithBase.getIcon();
+	assertEquals(icon?.url, new URL("https://example.com/avatars/test-avatar.jpg"));
+});
+test("FEP-fe34: Trust tracking in object construction", async () => {
+	const note = new Note({
+		id: new URL("https://example.com/note"),
+		content: "Hello World"
+	});
+	const create = new Create({
+		id: new URL("https://example.com/create"),
+		actor: new URL("https://example.com/actor"),
+		object: note
+	});
+	assertEquals(create.objectId, new URL("https://example.com/note"));
+	const result = await create.getObject();
+	assertEquals(result, note);
+	assertEquals(result?.content, "Hello World");
+});
+test("FEP-fe34: Trust tracking in object cloning", () => {
+	const originalNote = new Note({
+		id: new URL("https://example.com/note"),
+		content: "Original content"
+	});
+	const create = new Create({
+		id: new URL("https://example.com/create"),
+		actor: new URL("https://example.com/actor"),
+		object: originalNote
+	});
+	const newNote = new Note({
+		id: new URL("https://example.com/new-note"),
+		content: "New content"
+	});
+	const clonedCreate = create.clone({ object: newNote });
+	assertEquals(clonedCreate.objectId, new URL("https://example.com/new-note"));
+});
+test("FEP-fe34: crossOrigin ignore behavior (default)", async () => {
+	const crossOriginDocumentLoader = async (url) => {
+		if (url === "https://different-origin.com/note") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://malicious.com/fake-note",
+				"content": "This is a spoofed note"
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const create = new Create({
+		id: new URL("https://example.com/create"),
+		actor: new URL("https://example.com/actor"),
+		object: new URL("https://different-origin.com/note")
+	});
+	const result = await create.getObject({ documentLoader: crossOriginDocumentLoader });
+	assertEquals(result, null);
+});
+test("FEP-fe34: crossOrigin throw behavior", async () => {
+	const crossOriginDocumentLoader = async (url) => {
+		if (url === "https://different-origin.com/note") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://malicious.com/fake-note",
+				"content": "This is a spoofed note"
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const create = new Create({
+		id: new URL("https://example.com/create"),
+		actor: new URL("https://example.com/actor"),
+		object: new URL("https://different-origin.com/note")
+	});
+	await assertRejects(() => create.getObject({
+		documentLoader: crossOriginDocumentLoader,
+		crossOrigin: "throw"
+	}), Error, "The object's @id (https://malicious.com/fake-note) has a different origin than the document URL (https://different-origin.com/note)");
+});
+test("FEP-fe34: crossOrigin trust behavior", async () => {
+	const crossOriginDocumentLoader = async (url) => {
+		if (url === "https://different-origin.com/note") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://malicious.com/fake-note",
+				"content": "This is a spoofed note"
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const create = new Create({
+		id: new URL("https://example.com/create"),
+		actor: new URL("https://example.com/actor"),
+		object: new URL("https://different-origin.com/note")
+	});
+	const result = await create.getObject({
+		documentLoader: crossOriginDocumentLoader,
+		crossOrigin: "trust"
+	});
+	assertInstanceOf(result, Note);
+	assertEquals(result?.id, new URL("https://malicious.com/fake-note"));
+	assertEquals(result?.content, "This is a spoofed note");
+});
+test("FEP-fe34: Same origin objects are trusted", async () => {
+	const sameOriginDocumentLoader = async (url) => {
+		if (url === "https://example.com/note") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://example.com/note",
+				"content": "This is a legitimate note"
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const create = new Create({
+		id: new URL("https://example.com/create"),
+		actor: new URL("https://example.com/actor"),
+		object: new URL("https://example.com/note")
+	});
+	const result = await create.getObject({ documentLoader: sameOriginDocumentLoader });
+	assertInstanceOf(result, Note);
+	assertEquals(result?.id, new URL("https://example.com/note"));
+	assertEquals(result?.content, "This is a legitimate note");
+});
+test("FEP-fe34: Embedded cross-origin objects from JSON-LD are ignored by default", async () => {
+	const createDocumentLoader = async (url) => {
+		if (url === "https://example.com/create") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Create",
+				"@id": "https://example.com/create",
+				"actor": "https://example.com/actor",
+				"object": {
+					"@type": "Note",
+					"@id": "https://different-origin.com/note",
+					"content": "Embedded note from JSON-LD"
+				}
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const create = await Create.fromJsonLd(await createDocumentLoader("https://example.com/create").then((r) => r.document), { documentLoader: createDocumentLoader });
+	const objectDocumentLoader = async (url) => {
+		if (url === "https://different-origin.com/note") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://different-origin.com/note",
+				"content": "Legitimate note from origin"
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const result = await create.getObject({ documentLoader: objectDocumentLoader });
+	assertInstanceOf(result, Note);
+	assertEquals(result?.content, "Legitimate note from origin");
+});
+test("FEP-fe34: Constructor vs JSON-LD parsing trust difference", async () => {
+	const constructorCreate = new Create({
+		id: new URL("https://example.com/create"),
+		actor: new URL("https://example.com/actor"),
+		object: new Note({
+			id: new URL("https://different-origin.com/note"),
+			content: "Constructor embedded note"
+		})
+	});
+	const constructorResult = await constructorCreate.getObject();
+	assertEquals(constructorResult?.content, "Constructor embedded note");
+	const jsonLdCreate = await Create.fromJsonLd({
+		"@context": "https://www.w3.org/ns/activitystreams",
+		"@type": "Create",
+		"@id": "https://example.com/create",
+		"actor": "https://example.com/actor",
+		"object": {
+			"@type": "Note",
+			"@id": "https://different-origin.com/note",
+			"content": "JSON-LD embedded note"
+		}
+	});
+	const documentLoader = async (url) => {
+		if (url === "https://different-origin.com/note") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://different-origin.com/note",
+				"content": "Fetched from origin"
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const jsonLdResult = await jsonLdCreate.getObject({ documentLoader });
+	assertEquals(jsonLdResult?.content, "Fetched from origin");
+});
+test("FEP-fe34: Array properties respect cross-origin policy", async () => {
+	const crossOriginDocumentLoader = async (url) => {
+		if (url === "https://different-origin.com/note1") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://malicious.com/fake-note1",
+				"content": "Fake note 1"
+			}
+		};
+		else if (url === "https://example.com/note2") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://example.com/note2",
+				"content": "Legitimate note 2"
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const collection = new Collection({
+		id: new URL("https://example.com/collection"),
+		items: [new URL("https://different-origin.com/note1"), new URL("https://example.com/note2")]
+	});
+	const items = [];
+	for await (const item of collection.getItems({ documentLoader: crossOriginDocumentLoader })) items.push(item);
+	assertEquals(items.length, 1);
+	assertInstanceOf(items[0], Note);
+	assertEquals(items[0].content, "Legitimate note 2");
+});
+test("FEP-fe34: Array properties with crossOrigin trust option", async () => {
+	const crossOriginDocumentLoader = async (url) => {
+		if (url === "https://different-origin.com/note1") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://malicious.com/fake-note1",
+				"content": "Fake note 1"
+			}
+		};
+		else if (url === "https://example.com/note2") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://example.com/note2",
+				"content": "Legitimate note 2"
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const collection = new Collection({
+		id: new URL("https://example.com/collection"),
+		items: [new URL("https://different-origin.com/note1"), new URL("https://example.com/note2")]
+	});
+	const items = [];
+	for await (const item of collection.getItems({
+		documentLoader: crossOriginDocumentLoader,
+		crossOrigin: "trust"
+	})) items.push(item);
+	assertEquals(items.length, 2);
+	assertInstanceOf(items[0], Note);
+	assertInstanceOf(items[1], Note);
+	assertEquals(items[0].content, "Fake note 1");
+	assertEquals(items[1].content, "Legitimate note 2");
+});
+test("FEP-fe34: Embedded objects in arrays from JSON-LD respect cross-origin policy", async () => {
+	const collectionDocumentLoader = async (url) => {
+		if (url === "https://example.com/collection") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Collection",
+				"@id": "https://example.com/collection",
+				"items": [{
+					"@type": "Note",
+					"@id": "https://example.com/trusted-note",
+					"content": "Trusted embedded note from JSON-LD"
+				}, {
+					"@type": "Note",
+					"@id": "https://different-origin.com/untrusted-note",
+					"content": "Untrusted embedded note from JSON-LD"
+				}]
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const collection = await Collection.fromJsonLd(await collectionDocumentLoader("https://example.com/collection").then((r) => r.document), { documentLoader: collectionDocumentLoader });
+	const itemDocumentLoader = async (url) => {
+		if (url === "https://example.com/trusted-note") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://example.com/trusted-note",
+				"content": "Trusted note from origin"
+			}
+		};
+		else if (url === "https://different-origin.com/untrusted-note") return {
+			documentUrl: url,
+			contextUrl: null,
+			document: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				"@type": "Note",
+				"@id": "https://different-origin.com/untrusted-note",
+				"content": "Legitimate note from actual origin"
+			}
+		};
+		throw new Error("Document not found");
+	};
+	const items = [];
+	for await (const item of collection.getItems({ documentLoader: itemDocumentLoader })) items.push(item);
+	assertEquals(items.length, 2);
+	assertInstanceOf(items[0], Note);
+	assertEquals(items[0].content, "Trusted embedded note from JSON-LD");
+	assertInstanceOf(items[1], Note);
+	assertEquals(items[1].content, "Legitimate note from actual origin");
+});
 function getAllProperties(type, types$1) {
 	const props = type.properties;
 	if (type.extends != null) props.push(...getAllProperties(types$1[type.extends], types$1));