@fedify/fedify 2.0.17 → 2.0.19

package/dist/federation/middleware.test.mjs

@@ -10,17 +10,17 @@ import { t as assertInstanceOf } from "../assert_instance_of-C4Ri6VuN.mjs";
 import { t as assertThrows } from "../assert_throws-4NwKEy2q.mjs";
 import { t as assertNotEquals } from "../assert_not_equals--wG9hV7u.mjs";
 import { t as assert } from "../assert-ddO5KLpe.mjs";
-import { l as verifyRequest, s as signRequest } from "../http-CkpjqreM.mjs";
+import { l as verifyRequest, s as signRequest } from "../http-BGqCzFFW.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-CtZLJq76.mjs";
-import { t as getAuthenticatedDocumentLoader } from "../docloader-BtgBOjR2.mjs";
-import { a as signJsonLd, o as verifyJsonLd, r as detachSignature } from "../ld-C48i1Mdp.mjs";
-import { t as doesActorOwnKey } from "../owner-9JLKNjOK.mjs";
-import { n as signObject, r as verifyObject } from "../proof-CVNf-KlO.mjs";
+import { t as getAuthenticatedDocumentLoader } from "../docloader-LahMFnq1.mjs";
+import { a as compactJsonLd, f as signJsonLd, m as verifyJsonLd, s as detachSignature } from "../ld-DHdnBuQl.mjs";
+import { t as doesActorOwnKey } from "../owner-B8gYOXYm.mjs";
+import { n as signObject, r as verifyObject } from "../proof-DSGV862v.mjs";
 import { t as MemoryKvStore } from "../kv-BrZHNugx.mjs";
-import { a as createFederation, i as KvSpecDeterminer, n as FederationImpl, r as InboxContextImpl, t as ContextImpl } from "../middleware-Bua1eJKj.mjs";
+import { a as createFederation, i as KvSpecDeterminer, n as FederationImpl, r as InboxContextImpl, t as ContextImpl } from "../middleware-B0dEe1fJ.mjs";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import * as vocab from "@fedify/vocab";
-import { getTypeId, lookupObject } from "@fedify/vocab";
+import { Create, Offer, Person, getTypeId, lookupObject } from "@fedify/vocab";
 import { getDocumentLoader } from "@fedify/vocab-runtime";
 //#region ../fixture/src/fixtures/example.com/create.json
 var id$2 = "https://example.com/create";
@@ -1061,6 +1061,54 @@ test("Federation.setInboxListeners()", async (t) => {
 	});
 	esm_default.hardReset();
 });
+test("Federation.fetch() preserves original LD-signed payload for InboxContextImpl.activity", async () => {
+	const remoteContextUrl = "https://remote.example/contexts/ext";
+	const sourceContextLoader = async (resource) => {
+		const url = new URL(resource).href;
+		if (url === remoteContextUrl) return {
+			contextUrl: null,
+			documentUrl: url,
+			document: { "@context": { ext: "https://example.com/ext" } }
+		};
+		return await mockDocumentLoader(url);
+	};
+	const federation = createFederation({
+		kv: new MemoryKvStore(),
+		documentLoaderFactory: () => mockDocumentLoader,
+		contextLoaderFactory: () => sourceContextLoader
+	});
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => identifier === "someone" ? new Person({}) : null);
+	let receivedRaw = null;
+	let receivedTyped = null;
+	federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, (ctx, activity) => {
+		receivedRaw = ctx.activity;
+		receivedTyped = activity;
+	});
+	const signed = await signJsonLd({
+		"@context": [remoteContextUrl, "https://www.w3.org/ns/activitystreams"],
+		id: "https://example.com/activities/preserve-raw",
+		type: "Create",
+		actor: "https://example.com/person2",
+		ext: "preserve-me",
+		object: {
+			id: "https://example.com/notes/preserve-raw",
+			type: "Note",
+			attributedTo: "https://example.com/person2",
+			content: "Hello, world!"
+		}
+	}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: sourceContextLoader });
+	const response = await federation.fetch(new Request("https://example.com/inbox", {
+		method: "POST",
+		headers: { "Content-Type": "application/activity+json" },
+		body: JSON.stringify(signed)
+	}), { contextData: void 0 });
+	assertEquals([response.status, await response.text()], [202, ""]);
+	assertEquals(receivedRaw, signed);
+	assertNotEquals(receivedRaw, await compactJsonLd(signed, sourceContextLoader));
+	const delivered = receivedTyped;
+	assert(delivered != null);
+	assertEquals(delivered.id?.href, "https://example.com/activities/preserve-raw");
+});
 test("Federation.setInboxDispatcher()", async (t) => {
 	const kv = new MemoryKvStore();
 	await t.step("path match", () => {
@@ -1172,140 +1220,1567 @@ test("FederationImpl.sendActivity()", async (t) => {
 		assertEquals(request?.url, "https://example.com/inbox");
 		assertEquals(request?.headers.get("Content-Type"), "application/activity+json");
 	});
-	esm_default.hardReset();
-});
-test("FederationImpl.processQueuedTask()", async (t) => {
-	await t.step("with MessageQueue having nativeRetrial", async () => {
+	esm_default.hardReset();
+});
+test("FederationImpl.processQueuedTask()", async (t) => {
+	await t.step("with MessageQueue having nativeRetrial", async () => {
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		const federation = new FederationImpl({
+			kv,
+			queue: {
+				nativeRetrial: true,
+				enqueue(message, _options) {
+					queuedMessages.push(message);
+					return Promise.resolve();
+				},
+				listen(_handler, _options) {
+					return Promise.resolve();
+				}
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(vocab.Create, () => {
+			throw new Error("Intended error for testing");
+		});
+		await assertRejects(() => federation.processQueuedTask(void 0, {
+			type: "outbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			keys: [],
+			activity: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				type: "Create",
+				actor: "https://example.com/users/alice",
+				object: {
+					type: "Note",
+					content: "test"
+				}
+			},
+			activityType: "https://www.w3.org/ns/activitystreams#Create",
+			inbox: "https://invalid-domain-that-does-not-exist.example/inbox",
+			sharedInbox: false,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			headers: {},
+			traceContext: {}
+		}), Error);
+		assertEquals(queuedMessages, []);
+		await assertRejects(() => federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				type: "Create",
+				actor: "https://remote.example/users/alice",
+				object: {
+					type: "Note",
+					content: "Hello world"
+				}
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		}), Error);
+		assertEquals(queuedMessages, []);
+	});
+	await t.step("with MessageQueue having no nativeRetrial", async () => {
+		const kv = new MemoryKvStore();
+		let queuedMessages = [];
+		const federation = new FederationImpl({
+			kv,
+			queue: {
+				enqueue(message, _options) {
+					queuedMessages.push(message);
+					return Promise.resolve();
+				},
+				listen(_handler, _options) {
+					return Promise.resolve();
+				}
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(vocab.Create, () => {
+			throw new Error("Intended error for testing");
+		});
+		const outboxMessage = {
+			type: "outbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			keys: [],
+			activity: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				type: "Create",
+				actor: "https://example.com/users/alice",
+				object: {
+					type: "Note",
+					content: "test"
+				}
+			},
+			activityType: "https://www.w3.org/ns/activitystreams#Create",
+			inbox: "https://invalid-domain-that-does-not-exist.example/inbox",
+			sharedInbox: false,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			headers: {},
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, outboxMessage);
+		assertEquals(queuedMessages, [{
+			...outboxMessage,
+			attempt: 1
+		}]);
+		queuedMessages = [];
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				type: "Create",
+				actor: "https://remote.example/users/alice",
+				object: {
+					type: "Note",
+					content: "Hello world"
+				}
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(queuedMessages, [{
+			...inboxMessage,
+			attempt: 1
+		}]);
+	});
+	await t.step("with restrictive context loader and normalized LD-signed inbox activity", async () => {
+		const remoteContextUrl = "https://remote.example/contexts/ext";
+		const sourceContextLoader = async (resource) => {
+			const url = new URL(resource).href;
+			if (url === remoteContextUrl) return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { ext: "https://example.com/ext" } }
+			};
+			return await mockDocumentLoader(url);
+		};
+		const restrictiveContextLoader = async (resource) => {
+			const url = new URL(resource).href;
+			if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+			throw new Error(`Unexpected context: ${url}`);
+		};
+		const kv = new MemoryKvStore();
+		let receivedCount = 0;
+		let received = null;
+		let receivedRaw = null;
+		const federation = new FederationImpl({
+			kv,
+			contextLoaderFactory: () => restrictiveContextLoader
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, (ctx, activity) => {
+			receivedCount++;
+			receivedRaw = ctx.activity;
+			received = activity;
+		});
+		const signed = await signJsonLd({
+			"@context": [remoteContextUrl, "https://www.w3.org/ns/activitystreams"],
+			id: "https://remote.example/activities/1",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			ext: "preserve-me",
+			object: {
+				id: "https://remote.example/notes/1",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello, world!"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: sourceContextLoader });
+		const normalizedActivity = await compactJsonLd(signed, sourceContextLoader);
+		const messageId = crypto.randomUUID();
+		await federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: messageId,
+			baseUrl: "https://example.com",
+			activity: signed,
+			normalizedActivity,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		});
+		const delivered = received;
+		assert(delivered != null);
+		const deliveredCreate = delivered;
+		assertInstanceOf(deliveredCreate, Create);
+		assertEquals(deliveredCreate.id?.href, "https://remote.example/activities/1");
+		assertEquals(receivedRaw, signed);
+		await federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: messageId,
+			baseUrl: "https://example.com",
+			activity: signed,
+			normalizedActivity,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		});
+		assertEquals(receivedCount, 1);
+	});
+	await t.step("cached normalizedActivity is rechecked for unsafe JSON-LD keywords", async () => {
+		const queuedMessages = [];
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		let receivedCount = 0;
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			receivedCount++;
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": "https://www.w3.org/ns/activitystreams",
+			id: "https://remote.example/activities/unsafe-normalized-cache",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			object: {
+				id: "https://remote.example/notes/unsafe-normalized-cache",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from unsafe normalized cache"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader });
+		const normalizedActivity = await compactJsonLd(signed, mockDocumentLoader);
+		const tamperedNormalizedActivity = {
+			...normalizedActivity,
+			signature: {
+				...normalizedActivity.signature,
+				"@included": [{
+					id: "https://remote.example/activities/inside-signature",
+					type: "Undo"
+				}]
+			}
+		};
+		await federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: signed,
+			normalizedActivity: tamperedNormalizedActivity,
+			ldSignatureVerified: false,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		});
+		assertEquals(receivedCount, 0);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, []);
+	});
+	await t.step("old queued LDS inbox messages without normalizedActivity still work", async () => {
+		const restrictiveContextLoader = async (resource) => {
+			const url = new URL(resource).href;
+			if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+			throw new Error(`Unexpected context: ${url}`);
+		};
+		const kv = new MemoryKvStore();
+		let received = null;
+		const federation = new FederationImpl({
+			kv,
+			contextLoaderFactory: () => restrictiveContextLoader
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, (_ctx, activity) => {
+			received = activity;
+		});
+		const compacted = await compactJsonLd(await signJsonLd({
+			"@context": "https://www.w3.org/ns/activitystreams",
+			id: "https://remote.example/activities/legacy",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			object: {
+				id: "https://remote.example/notes/legacy",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader }), restrictiveContextLoader);
+		await federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: compacted,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		});
+		assert(received != null);
+		assertEquals(received.id?.href, "https://remote.example/activities/legacy");
+	});
+	await t.step("queued signature-bearing non-LDS inbox messages keep parse-time normalization contexts", async () => {
+		const signingContextLoader = async (resource) => {
+			const url = new URL(resource).href;
+			if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1" || url === "https://w3id.org/security/v1" || url === "https://w3id.org/security/data-integrity/v1") return await mockDocumentLoader(url);
+			throw new Error(`Unexpected context: ${url}`);
+		};
+		const processingContextLoader = async (resource) => {
+			const url = new URL(resource).href;
+			if (url === "https://w3id.org/identity/v1" || url === "https://w3id.org/security/v1" || url === "https://w3id.org/security/data-integrity/v1") throw new Error("queued non-LDS signed payloads should parse with the normalization loader's built-in signature contexts");
+			return await signingContextLoader(resource);
+		};
+		const kv = new MemoryKvStore();
+		let received = null;
+		let receivedRaw = null;
+		const federation = new FederationImpl({
+			kv,
+			contextLoaderFactory: () => processingContextLoader
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, (ctx, activity) => {
+			receivedRaw = ctx.activity;
+			received = activity;
+		});
+		const signed = await signJsonLd({
+			"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/v1"],
+			id: "https://remote.example/activities/non-lds-queued-signature",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			object: {
+				id: "https://remote.example/notes/non-lds-queued-signature",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from non-LDS queued signature"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: signingContextLoader });
+		const signedPayload = signed;
+		assert(Array.isArray(signedPayload["@context"]) && signedPayload["@context"].includes("https://w3id.org/security/v1"));
+		await federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: signed,
+			ldSignatureVerified: false,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		});
+		if (received == null) throw new Error("Inbox activity not delivered.");
+		assertEquals(received.id?.href, "https://remote.example/activities/non-lds-queued-signature");
+		assertEquals(receivedRaw, signed);
+	});
+	await t.step("queued signature-bearing non-LDS inbox messages reuse normalizedActivity for custom contexts", async () => {
+		const remoteContextUrl = "https://remote.example/contexts/ext";
+		const sourceContextLoader = async (resource) => {
+			const url = new URL(resource).href;
+			if (url === remoteContextUrl) return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { ext: "https://example.com/ext" } }
+			};
+			return await mockDocumentLoader(url);
+		};
+		const restrictiveContextLoader = async (resource) => {
+			const url = new URL(resource).href;
+			if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+			throw new Error(`Unexpected context: ${url}`);
+		};
+		const kv = new MemoryKvStore();
+		let received = null;
+		let receivedRaw = null;
+		const federation = new FederationImpl({
+			kv,
+			contextLoaderFactory: () => restrictiveContextLoader
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, (ctx, activity) => {
+			receivedRaw = ctx.activity;
+			received = activity;
+		});
+		const unsignedBody = {
+			"@context": [
+				remoteContextUrl,
+				"https://www.w3.org/ns/activitystreams",
+				"https://w3id.org/security/v1"
+			],
+			id: "https://remote.example/activities/non-lds-queued-custom-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			ext: "preserve-me",
+			object: {
+				id: "https://remote.example/notes/non-lds-queued-custom-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from non-LDS queued custom context"
+			},
+			signature: {
+				type: "RsaSignature2017",
+				creator: "not a url",
+				created: "2024-09-12T16:50:46Z",
+				signatureValue: "Zm9v"
+			}
+		};
+		const normalizedActivity = await compactJsonLd(unsignedBody, sourceContextLoader);
+		await federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: unsignedBody,
+			normalizedActivity,
+			ldSignatureVerified: false,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		});
+		if (received == null) throw new Error("Inbox activity not delivered.");
+		assertEquals(received.id?.href, "https://remote.example/activities/non-lds-queued-custom-context");
+		assertEquals(receivedRaw, unsignedBody);
+	});
+	await t.step("legacy raw LDS inbox messages without normalizedActivity retry through worker error handling", async () => {
+		const remoteContextUrl = "https://remote.example/contexts/ext";
+		const restrictiveContextLoader = async (resource) => {
+			const url = new URL(resource).href;
+			if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+			throw new Error(`Unexpected context: ${url}`);
+		};
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => restrictiveContextLoader
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": [remoteContextUrl, "https://www.w3.org/ns/activitystreams"],
+			id: "https://remote.example/activities/legacy-raw",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			ext: "preserve-me",
+			object: {
+				id: "https://remote.example/notes/legacy-raw",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from raw legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: async (resource) => {
+			const url = new URL(resource).href;
+			if (url === remoteContextUrl) return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { ext: "https://example.com/ext" } }
+			};
+			return await mockDocumentLoader(url);
+		} });
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: signed,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages.length, 1);
+		const retried = queuedMessages[0];
+		assertEquals(retried.attempt, 1);
+		assertEquals(retried.activity, inboxMessage.activity);
+	});
+	await t.step("without inbox queue retriable inbox parse failures bubble to caller", async () => {
+		const remoteContextUrl = "https://remote.example/contexts/ext";
+		const sourceContextLoader = async (resource) => {
+			const url = new URL(resource).href;
+			if (url === remoteContextUrl) return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { ext: "https://example.com/ext" } }
+			};
+			return await mockDocumentLoader(url);
+		};
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv: new MemoryKvStore(),
+			contextLoaderFactory: () => async (resource) => {
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				if (url === remoteContextUrl) throw new Error(`Transient remote context failure: ${url}`);
+				throw new Error(`Unexpected context: ${url}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": [remoteContextUrl, "https://www.w3.org/ns/activitystreams"],
+			id: "https://remote.example/activities/manual-retry",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			ext: "preserve-me",
+			object: {
+				id: "https://remote.example/notes/manual-retry",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from manual retry queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: sourceContextLoader });
+		await assertRejects(() => federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: signed,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		}), Error);
+		assertEquals(errorCount, 1);
+	});
+	await t.step("legacy raw LDS inbox messages with transient InvalidUrl failures retry", async () => {
+		const remoteContextUrl = "https://remote.example/contexts/ext";
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				if (url === remoteContextUrl) {
+					const error = /* @__PURE__ */ new Error(`Transient remote context failure: ${url}`);
+					error.name = "jsonld.InvalidUrl";
+					error.details = {
+						code: "loading remote context failed",
+						url
+					};
+					throw error;
+				}
+				throw new Error(`Unexpected context: ${url}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": [remoteContextUrl, "https://www.w3.org/ns/activitystreams"],
+			id: "https://remote.example/activities/legacy-invalid-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			ext: "preserve-me",
+			object: {
+				id: "https://remote.example/notes/legacy-invalid-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from invalid legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: async (resource) => {
+			const url = new URL(resource).href;
+			if (url === remoteContextUrl) return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { ext: "https://example.com/ext" } }
+			};
+			return await mockDocumentLoader(url);
+		} });
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: signed,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages.length, 1);
+		const retried = queuedMessages[0];
+		assertEquals(retried.attempt, 1);
+		assertEquals(retried.activity, inboxMessage.activity);
+	});
+	await t.step("legacy raw LDS inbox messages with opaque context ids retry", async () => {
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				if (resource === "app-context") {
+					const error = /* @__PURE__ */ new Error(`Opaque context backend is unavailable: ${resource}`);
+					error.name = "jsonld.InvalidUrl";
+					error.details = {
+						code: "loading remote context failed",
+						url: resource
+					};
+					throw error;
+				}
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				throw new Error(`Unexpected context: ${resource}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": "https://www.w3.org/ns/activitystreams",
+			id: "https://remote.example/activities/legacy-malformed-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			object: {
+				id: "https://remote.example/notes/legacy-malformed-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from malformed legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader });
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				...signed,
+				"@context": ["app-context", "https://www.w3.org/ns/activitystreams"]
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, [{
+			...inboxMessage,
+			attempt: 1
+		}]);
+	});
+	await t.step("legacy raw LDS inbox messages with Invalid URL TypeErrors retry", async () => {
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				if (resource === "app:context") throw new TypeError(`Invalid URL: ${resource}`);
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				throw new Error(`Unexpected context: ${resource}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": "https://www.w3.org/ns/activitystreams",
+			id: "https://remote.example/activities/legacy-typeerror-invalid-url",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			object: {
+				id: "https://remote.example/notes/legacy-typeerror-invalid-url",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from invalid-url typeerror queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader });
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				...signed,
+				"@context": ["app:context", "https://www.w3.org/ns/activitystreams"]
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages.length, 1);
+		const retried = queuedMessages[0];
+		assertEquals(retried.attempt, 1);
+		assertEquals(retried.activity, inboxMessage.activity);
+	});
+	await t.step("legacy raw LDS inbox messages with malformed absolute context refs do not retry", async () => {
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				if (resource === "http:/[") throw new TypeError(`Invalid URL: ${resource}`);
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				throw new Error(`Unexpected context: ${resource}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": "https://www.w3.org/ns/activitystreams",
+			id: "https://remote.example/activities/legacy-malformed-absolute-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			object: {
+				id: "https://remote.example/notes/legacy-malformed-absolute-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from malformed absolute context queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader });
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				...signed,
+				"@context": ["http:/[", "https://www.w3.org/ns/activitystreams"]
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, []);
+	});
+	await t.step("malformed IRI fields are permanent queued inbox parse errors", async () => {
+		const queuedMessages = [];
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		await federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				"@context": "https://www.w3.org/ns/activitystreams",
+				id: "http://[",
+				type: "Create",
+				actor: "https://remote.example/users/alice",
+				object: {
+					id: "https://remote.example/notes/invalid-iri",
+					type: "Note",
+					attributedTo: "https://remote.example/users/alice",
+					content: "Hello from invalid IRI queue"
+				}
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		});
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, []);
+	});
+	await t.step("legacy raw LDS inbox messages with network-path context ids retry", async () => {
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				if (resource === "//cdn.example/ctx") {
+					const error = /* @__PURE__ */ new Error(`Network-path context backend is unavailable: ${resource}`);
+					error.name = "jsonld.InvalidUrl";
+					error.details = {
+						code: "loading remote context failed",
+						url: resource
+					};
+					throw error;
+				}
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				throw new Error(`Unexpected context: ${resource}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": "https://www.w3.org/ns/activitystreams",
+			id: "https://remote.example/activities/legacy-network-path-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			object: {
+				id: "https://remote.example/notes/legacy-network-path-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from network-path legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader });
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				...signed,
+				"@context": ["//cdn.example/ctx", "https://www.w3.org/ns/activitystreams"]
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, [{
+			...inboxMessage,
+			attempt: 1
+		}]);
+	});
+	await t.step("legacy raw LDS inbox messages with malformed network-path refs do not retry", async () => {
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				if (resource === "//[") {
+					const error = /* @__PURE__ */ new Error(`Malformed network-path context: ${resource}`);
+					error.name = "jsonld.InvalidUrl";
+					error.details = {
+						code: "loading remote context failed",
+						url: resource
+					};
+					throw error;
+				}
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				throw new Error(`Unexpected context: ${resource}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": "https://www.w3.org/ns/activitystreams",
+			id: "https://remote.example/activities/legacy-malformed-network-path-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			object: {
+				id: "https://remote.example/notes/legacy-malformed-network-path-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from malformed network-path legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader });
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				...signed,
+				"@context": ["//[", "https://www.w3.org/ns/activitystreams"]
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, []);
+	});
+	await t.step("legacy raw LDS inbox messages with malformed context URLs do not retry", async () => {
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				if (resource === "not a url") {
+					const error = /* @__PURE__ */ new Error(`Invalid remote context URL: ${resource}`);
+					error.name = "jsonld.InvalidUrl";
+					error.details = {
+						code: "loading remote context failed",
+						url: resource
+					};
+					throw error;
+				}
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				throw new Error(`Unexpected context: ${resource}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": "https://www.w3.org/ns/activitystreams",
+			id: "https://remote.example/activities/legacy-malformed-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			object: {
+				id: "https://remote.example/notes/legacy-malformed-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from malformed legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader });
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				...signed,
+				"@context": ["not a url", "https://www.w3.org/ns/activitystreams"]
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, []);
+	});
+	await t.step("legacy raw LDS inbox messages with invalid percent escapes do not retry", async () => {
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
 		const kv = new MemoryKvStore();
 		const queuedMessages = [];
+		let errorCount = 0;
 		const federation = new FederationImpl({
 			kv,
-			queue: {
-				nativeRetrial: true,
-				enqueue(message, _options) {
-					queuedMessages.push(message);
-					return Promise.resolve();
-				},
-				listen(_handler, _options) {
-					return Promise.resolve();
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				if (resource === "foo%zz") {
+					const error = /* @__PURE__ */ new Error(`Invalid remote context URL: ${resource}`);
+					error.name = "jsonld.InvalidUrl";
+					error.details = {
+						code: "loading remote context failed",
+						url: resource
+					};
+					throw error;
 				}
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				throw new Error(`Unexpected context: ${resource}`);
 			}
 		});
-		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(vocab.Create, () => {
-			throw new Error("Intended error for testing");
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
 		});
-		await assertRejects(() => federation.processQueuedTask(void 0, {
-			type: "outbox",
+		const signed = await signJsonLd({
+			"@context": "https://www.w3.org/ns/activitystreams",
+			id: "https://remote.example/activities/legacy-malformed-percent-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			object: {
+				id: "https://remote.example/notes/legacy-malformed-percent-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from malformed percent legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader });
+		const inboxMessage = {
+			type: "inbox",
 			id: crypto.randomUUID(),
 			baseUrl: "https://example.com",
-			keys: [],
 			activity: {
-				"@context": "https://www.w3.org/ns/activitystreams",
-				type: "Create",
-				actor: "https://example.com/users/alice",
-				object: {
-					type: "Note",
-					content: "test"
-				}
+				...signed,
+				"@context": ["foo%zz", "https://www.w3.org/ns/activitystreams"]
 			},
-			activityType: "https://www.w3.org/ns/activitystreams#Create",
-			inbox: "https://invalid-domain-that-does-not-exist.example/inbox",
-			sharedInbox: false,
 			started: (/* @__PURE__ */ new Date()).toISOString(),
 			attempt: 0,
-			headers: {},
+			identifier: null,
 			traceContext: {}
-		}), Error);
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
 		assertEquals(queuedMessages, []);
-		await assertRejects(() => federation.processQueuedTask(void 0, {
+	});
+	await t.step("legacy raw LDS inbox messages with invalid remote contexts do not retry", async () => {
+		const remoteContextUrl = "https://remote.example/contexts/ext";
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				if (url === remoteContextUrl) return {
+					contextUrl: null,
+					documentUrl: url,
+					document: [
+						"not",
+						"an",
+						"object"
+					]
+				};
+				throw new Error(`Unexpected context: ${url}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": [remoteContextUrl, "https://www.w3.org/ns/activitystreams"],
+			id: "https://remote.example/activities/legacy-invalid-remote-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			ext: "preserve-me",
+			object: {
+				id: "https://remote.example/notes/legacy-invalid-remote-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from invalid remote context queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: async (resource) => {
+			const url = new URL(resource).href;
+			if (url === remoteContextUrl) return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { ext: "https://example.com/ext" } }
+			};
+			return await mockDocumentLoader(url);
+		} });
+		const inboxMessage = {
 			type: "inbox",
 			id: crypto.randomUUID(),
 			baseUrl: "https://example.com",
-			activity: {
-				"@context": "https://www.w3.org/ns/activitystreams",
-				type: "Create",
-				actor: "https://remote.example/users/alice",
-				object: {
-					type: "Note",
-					content: "Hello world"
-				}
-			},
+			activity: signed,
 			started: (/* @__PURE__ */ new Date()).toISOString(),
 			attempt: 0,
 			identifier: null,
 			traceContext: {}
-		}), Error);
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
 		assertEquals(queuedMessages, []);
 	});
-	await t.step("with MessageQueue having no nativeRetrial", async () => {
+	await t.step("legacy raw LDS inbox messages with string remote contexts retry", async () => {
+		const remoteContextUrl = "https://remote.example/contexts/ext";
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
 		const kv = new MemoryKvStore();
-		let queuedMessages = [];
+		const queuedMessages = [];
+		let errorCount = 0;
 		const federation = new FederationImpl({
 			kv,
-			queue: {
-				enqueue(message, _options) {
-					queuedMessages.push(message);
-					return Promise.resolve();
-				},
-				listen(_handler, _options) {
-					return Promise.resolve();
-				}
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				if (url === remoteContextUrl) return {
+					contextUrl: null,
+					documentUrl: url,
+					document: "{not valid json"
+				};
+				throw new Error(`Unexpected context: ${url}`);
 			}
 		});
-		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(vocab.Create, () => {
-			throw new Error("Intended error for testing");
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": [remoteContextUrl, "https://www.w3.org/ns/activitystreams"],
+			id: "https://remote.example/activities/legacy-string-remote-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			ext: "preserve-me",
+			object: {
+				id: "https://remote.example/notes/legacy-string-remote-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from string remote context queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: async (resource) => {
+			const url = new URL(resource).href;
+			if (url === remoteContextUrl) return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { ext: "https://example.com/ext" } }
+			};
+			return await mockDocumentLoader(url);
+		} });
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: signed,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, [{
+			...inboxMessage,
+			attempt: 1
+		}]);
+	});
+	await t.step("legacy raw LDS inbox messages with loader TypeErrors retry", async () => {
+		const remoteContextUrl = "https://remote.example/contexts/ext";
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				if (url === remoteContextUrl) throw new TypeError(`Cannot initialize remote context loader: ${url}`);
+				throw new Error(`Unexpected context: ${url}`);
+			}
 		});
-		const outboxMessage = {
-			type: "outbox",
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": [remoteContextUrl, "https://www.w3.org/ns/activitystreams"],
+			id: "https://remote.example/activities/legacy-typeerror-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			ext: "preserve-me",
+			object: {
+				id: "https://remote.example/notes/legacy-typeerror-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from typeerror legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: async (resource) => {
+			const url = new URL(resource).href;
+			if (url === remoteContextUrl) return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { ext: "https://example.com/ext" } }
+			};
+			return await mockDocumentLoader(url);
+		} });
+		const inboxMessage = {
+			type: "inbox",
 			id: crypto.randomUUID(),
 			baseUrl: "https://example.com",
-			keys: [],
-			activity: {
-				"@context": "https://www.w3.org/ns/activitystreams",
-				type: "Create",
-				actor: "https://example.com/users/alice",
-				object: {
-					type: "Note",
-					content: "test"
-				}
+			activity: signed,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, [{
+			...inboxMessage,
+			attempt: 1
+		}]);
+	});
+	await t.step("legacy raw LDS inbox messages with syntax errors in remote contexts retry", async () => {
+		const remoteContextUrl = "https://remote.example/contexts/ext";
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
 			},
-			activityType: "https://www.w3.org/ns/activitystreams#Create",
-			inbox: "https://invalid-domain-that-does-not-exist.example/inbox",
-			sharedInbox: false,
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				if (url === remoteContextUrl) {
+					const error = /* @__PURE__ */ new Error(`Transient syntax failure: ${url}`);
+					error.name = "jsonld.SyntaxError";
+					error.details = { code: "loading remote context failed" };
+					throw error;
+				}
+				throw new Error(`Unexpected context: ${url}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": [remoteContextUrl, "https://www.w3.org/ns/activitystreams"],
+			id: "https://remote.example/activities/legacy-syntax-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			ext: "preserve-me",
+			object: {
+				id: "https://remote.example/notes/legacy-syntax-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from syntax legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: async (resource) => {
+			const url = new URL(resource).href;
+			if (url === remoteContextUrl) return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { ext: "https://example.com/ext" } }
+			};
+			return await mockDocumentLoader(url);
+		} });
+		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: signed,
 			started: (/* @__PURE__ */ new Date()).toISOString(),
 			attempt: 0,
-			headers: {},
+			identifier: null,
 			traceContext: {}
 		};
-		await federation.processQueuedTask(void 0, outboxMessage);
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
 		assertEquals(queuedMessages, [{
-			...outboxMessage,
+			...inboxMessage,
 			attempt: 1
 		}]);
-		queuedMessages = [];
+	});
+	await t.step("legacy raw LDS inbox messages with loader RangeErrors retry", async () => {
+		const remoteContextUrl = "https://remote.example/contexts/ext";
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		const queuedMessages = [];
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			contextLoaderFactory: () => async (resource) => {
+				const url = new URL(resource).href;
+				if (url === "https://www.w3.org/ns/activitystreams" || url === "https://w3id.org/identity/v1") return await mockDocumentLoader(url);
+				if (url === remoteContextUrl) throw new RangeError(`Temporary remote context cache window exceeded: ${url}`);
+				throw new Error(`Unexpected context: ${url}`);
+			}
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		const signed = await signJsonLd({
+			"@context": [remoteContextUrl, "https://www.w3.org/ns/activitystreams"],
+			id: "https://remote.example/activities/legacy-rangeerror-context",
+			type: "Create",
+			actor: "https://remote.example/users/alice",
+			ext: "preserve-me",
+			object: {
+				id: "https://remote.example/notes/legacy-rangeerror-context",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Hello from rangeerror legacy queue"
+			}
+		}, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: async (resource) => {
+			const url = new URL(resource).href;
+			if (url === remoteContextUrl) return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { ext: "https://example.com/ext" } }
+			};
+			return await mockDocumentLoader(url);
+		} });
 		const inboxMessage = {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: signed,
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		};
+		await federation.processQueuedTask(void 0, inboxMessage);
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, [{
+			...inboxMessage,
+			attempt: 1
+		}]);
+	});
+	await t.step("permanent queued inbox parse errors do not re-enqueue poison messages", async () => {
+		const queuedMessages = [];
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		await federation.processQueuedTask(void 0, {
 			type: "inbox",
 			id: crypto.randomUUID(),
 			baseUrl: "https://example.com",
 			activity: {
 				"@context": "https://www.w3.org/ns/activitystreams",
+				id: "https://remote.example/objects/not-an-activity",
+				type: "Note",
+				attributedTo: "https://remote.example/users/alice",
+				content: "Not an activity"
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		});
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, []);
+	});
+	await t.step("malformed Temporal fields are permanent queued inbox parse errors", async () => {
+		const queuedMessages = [];
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue,
+			documentLoaderFactory: () => mockDocumentLoader,
+			contextLoaderFactory: () => mockDocumentLoader
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		await federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+				id: "https://remote.example/activities/invalid-proof-created",
 				type: "Create",
 				actor: "https://remote.example/users/alice",
 				object: {
+					id: "https://remote.example/notes/invalid-proof-created",
 					type: "Note",
-					content: "Hello world"
+					attributedTo: "https://remote.example/users/alice",
+					content: "Hello, world!"
+				},
+				proof: {
+					type: "DataIntegrityProof",
+					cryptosuite: "eddsa-jcs-2022",
+					verificationMethod: "https://remote.example/users/alice#ed25519-key",
+					proofPurpose: "assertionMethod",
+					created: { "@value": "not-a-date" },
+					proofValue: "zLaewdp4H9kqtwyrLatK4cjY5oRHwVcw4gibPSUDYDMhi4M49v8pcYk3ZB6D69dNpAPbUmY8ocuJ3m9KhKJEEg7z"
 				}
 			},
 			started: (/* @__PURE__ */ new Date()).toISOString(),
 			attempt: 0,
 			identifier: null,
 			traceContext: {}
-		};
-		await federation.processQueuedTask(void 0, inboxMessage);
-		assertEquals(queuedMessages, [{
-			...inboxMessage,
-			attempt: 1
-		}]);
+		});
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, []);
 	});
 });
 test("FederationImpl.processQueuedTask() permanent failure", async (t) => {
@@ -1995,6 +3470,35 @@ test({
 		]);
 	}
 });
+test("ContextImpl.routeActivity() marks queued signed activities as non-LDS", async () => {
+	let queuedMessage = null;
+	const federation = new FederationImpl({
+		kv: new MemoryKvStore(),
+		queue: {
+			enqueue(message) {
+				queuedMessage = message;
+				return Promise.resolve();
+			},
+			async listen() {}
+		}
+	});
+	federation.setInboxListeners("/u/{identifier}/i", "/i").on(Offer, () => {
+		throw new Error("listener should not run for queued routeActivity");
+	});
+	const ctx = new ContextImpl({
+		url: new URL("https://example.com/"),
+		federation,
+		data: void 0,
+		documentLoader: mockDocumentLoader,
+		contextLoader: documentLoader
+	});
+	const signedOffer = await signObject(new Offer({ actor: new URL("https://example.com/person2") }), ed25519PrivateKey, ed25519Multikey.id);
+	assert(await ctx.routeActivity(null, signedOffer));
+	if (queuedMessage == null) throw new Error("Inbox message not queued.");
+	const inboxMessage = queuedMessage;
+	assertEquals(inboxMessage.ldSignatureVerified, false);
+	assertEquals(inboxMessage.normalizedActivity, void 0);
+});
 test("ContextImpl.getCollectionUri()", () => {
 	const federation = new FederationImpl({ kv: new MemoryKvStore() });
 	const base = "https://example.com";