@fedify/fedify 2.0.7 → 2.0.8

package/dist/{builder-DA7Qgx_F.js → builder-B5cKln9v.js}

@@ -3,9 +3,9 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-CbQK8e-e.js";
+import { deno_default } from "./deno-4w047OFk.js";
 import { Router, RouterError } from "./router-D9eI0s4b.js";
-import { InboxListenerSet } from "./inbox-B33isX44.js";
+import { InboxListenerSet } from "./inbox-3bZUqDLE.js";
 import { getTypeId } from "@fedify/vocab";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
@@ -45,7 +45,7 @@ var FederationBuilderImpl = class {
 		this.collectionTypeIds = {};
 	}
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-vH2jFwC6.js");
+		const { FederationImpl } = await import("./middleware-_1PYruC5.js");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();

package/dist/compat/transformers.test.js

@@ -7,25 +7,25 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-CbQK8e-e.js";
-import { FederationImpl, actorDehydrator, autoIdAssigner } from "../middleware-BI1VCuPT.js";
+import "../deno-4w047OFk.js";
+import { FederationImpl, actorDehydrator, autoIdAssigner } from "../middleware-DozhKfB6.js";
 import "../client-CoCIaTNO.js";
 import "../router-D9eI0s4b.js";
 import "../types-CPz01LGH.js";
-import "../key-Cga1p73u.js";
-import "../http-CjaLjnRN.js";
-import "../ld-BWSOukKj.js";
-import "../owner-HASxJJP1.js";
-import "../proof-BXt2Oi8t.js";
-import "../docloader-CJeSPcS_.js";
+import "../key-D7Y_J9kt.js";
+import "../http-Br3-1dRf.js";
+import "../ld-Bjq9Z4St.js";
+import "../owner-CImU2dKz.js";
+import "../proof-DLL0MLmV.js";
+import "../docloader-CBHh0rC5.js";
 import "../kv-cache-El7We5sy.js";
-import "../inbox-B33isX44.js";
-import "../builder-DA7Qgx_F.js";
+import "../inbox-3bZUqDLE.js";
+import "../builder-B5cKln9v.js";
 import "../collection-CcnIw1qY.js";
-import "../keycache-DRxpZ5r9.js";
+import "../keycache-BASM0rrX.js";
 import "../negotiation-5NPJL6zp.js";
 import "../retry-D4GJ670a.js";
-import "../send-BF3omx5-.js";
+import "../send-DbW03azY.js";
 import { test } from "@fedify/fixture";
 import { Follow, Person } from "@fedify/vocab";
 

package/dist/{deno-CbQK8e-e.js → deno-4w047OFk.js}

@@ -5,7 +5,7 @@
     
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.0.7";
+var version = "2.0.8";
 var license = "MIT";
 var exports = {
 	".": "./src/mod.ts",

package/dist/{docloader-CJeSPcS_.js → docloader-CBHh0rC5.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { validateCryptoKey } from "./key-Cga1p73u.js";
-import { doubleKnock } from "./http-CjaLjnRN.js";
+import { validateCryptoKey } from "./key-D7Y_J9kt.js";
+import { doubleKnock } from "./http-Br3-1dRf.js";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, validatePublicUrl } from "@fedify/vocab-runtime";
 import { getLogger } from "@logtape/logtape";

package/dist/federation/builder.test.js

@@ -7,10 +7,10 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-CbQK8e-e.js";
+import "../deno-4w047OFk.js";
 import "../router-D9eI0s4b.js";
-import "../inbox-B33isX44.js";
-import { createFederationBuilder } from "../builder-DA7Qgx_F.js";
+import "../inbox-3bZUqDLE.js";
+import { createFederationBuilder } from "../builder-B5cKln9v.js";
 import { assertExists } from "../std__assert-DWivtrGR.js";
 import "../assert_rejects-Ce45JcFg.js";
 import { assertThrows } from "../assert_throws-BNXdRGWP.js";

package/dist/federation/handler.test.js

@@ -7,25 +7,25 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-CbQK8e-e.js";
-import { createFederation, handleActor, handleCollection, handleCustomCollection, handleInbox, handleObject, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-BI1VCuPT.js";
+import "../deno-4w047OFk.js";
+import { createFederation, handleActor, handleCollection, handleCustomCollection, handleInbox, handleObject, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-DozhKfB6.js";
 import "../client-CoCIaTNO.js";
 import "../router-D9eI0s4b.js";
 import "../types-CPz01LGH.js";
-import "../key-Cga1p73u.js";
-import { signRequest } from "../http-CjaLjnRN.js";
-import "../ld-BWSOukKj.js";
-import "../owner-HASxJJP1.js";
-import "../proof-BXt2Oi8t.js";
-import "../docloader-CJeSPcS_.js";
+import "../key-D7Y_J9kt.js";
+import { signRequest } from "../http-Br3-1dRf.js";
+import "../ld-Bjq9Z4St.js";
+import "../owner-CImU2dKz.js";
+import "../proof-DLL0MLmV.js";
+import "../docloader-CBHh0rC5.js";
 import "../kv-cache-El7We5sy.js";
-import { InboxListenerSet } from "../inbox-B33isX44.js";
-import "../builder-DA7Qgx_F.js";
+import { InboxListenerSet } from "../inbox-3bZUqDLE.js";
+import "../builder-B5cKln9v.js";
 import "../collection-CcnIw1qY.js";
-import "../keycache-DRxpZ5r9.js";
+import "../keycache-BASM0rrX.js";
 import "../negotiation-5NPJL6zp.js";
 import "../retry-D4GJ670a.js";
-import "../send-BF3omx5-.js";
+import "../send-DbW03azY.js";
 import "../std__assert-DWivtrGR.js";
 import "../assert_rejects-Ce45JcFg.js";
 import "../assert_throws-BNXdRGWP.js";

package/dist/federation/idempotency.test.js

@@ -7,25 +7,25 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-CbQK8e-e.js";
-import { createFederation } from "../middleware-BI1VCuPT.js";
+import "../deno-4w047OFk.js";
+import { createFederation } from "../middleware-DozhKfB6.js";
 import "../client-CoCIaTNO.js";
 import "../router-D9eI0s4b.js";
 import "../types-CPz01LGH.js";
-import "../key-Cga1p73u.js";
-import "../http-CjaLjnRN.js";
-import "../ld-BWSOukKj.js";
-import "../owner-HASxJJP1.js";
-import { signObject } from "../proof-BXt2Oi8t.js";
-import "../docloader-CJeSPcS_.js";
+import "../key-D7Y_J9kt.js";
+import "../http-Br3-1dRf.js";
+import "../ld-Bjq9Z4St.js";
+import "../owner-CImU2dKz.js";
+import { signObject } from "../proof-DLL0MLmV.js";
+import "../docloader-CBHh0rC5.js";
 import "../kv-cache-El7We5sy.js";
-import "../inbox-B33isX44.js";
-import "../builder-DA7Qgx_F.js";
+import "../inbox-3bZUqDLE.js";
+import "../builder-B5cKln9v.js";
 import "../collection-CcnIw1qY.js";
-import "../keycache-DRxpZ5r9.js";
+import "../keycache-BASM0rrX.js";
 import "../negotiation-5NPJL6zp.js";
 import "../retry-D4GJ670a.js";
-import "../send-BF3omx5-.js";
+import "../send-DbW03azY.js";
 import "../std__assert-DWivtrGR.js";
 import "../assert_rejects-Ce45JcFg.js";
 import "../assert_throws-BNXdRGWP.js";

package/dist/federation/inbox.test.js

@@ -4,8 +4,8 @@
       globalThis.addEventListener = () => {};
     
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
-import "../deno-CbQK8e-e.js";
-import { InboxListenerSet } from "../inbox-B33isX44.js";
+import "../deno-4w047OFk.js";
+import { InboxListenerSet } from "../inbox-3bZUqDLE.js";
 import { assertThrows } from "../assert_throws-BNXdRGWP.js";
 import { test } from "@fedify/fixture";
 import { Activity, Create, Invite, Offer, Update } from "@fedify/vocab";

package/dist/federation/keycache.test.js

@@ -7,7 +7,7 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import { KvKeyCache } from "../keycache-DRxpZ5r9.js";
+import { KvKeyCache } from "../keycache-BASM0rrX.js";
 import { test } from "@fedify/fixture";
 import { CryptographicKey, Multikey } from "@fedify/vocab";
 
@@ -29,6 +29,7 @@ test("KvKeyCache.set()", async () => {
 	});
 	await cache.set(new URL("https://example.com/null"), null);
 	assert(cache.nullKeys.has("https://example.com/null"));
+	assertEquals(await kv.get(["pk", "https://example.com/null"]), { _fedify: "key-unavailable" });
 });
 test("KvKeyCache.get()", async () => {
 	const kv = new MemoryKvStore();
@@ -51,6 +52,9 @@ test("KvKeyCache.get()", async () => {
 	assertEquals(multikey?.id?.href, "https://example.com/key2");
 	cache.nullKeys.add("https://example.com/null");
 	assertEquals(await cache.get(new URL("https://example.com/null")), null);
+	await kv.set(["pk", "https://example.com/null2"], { _fedify: "key-unavailable" });
+	const cache2 = new KvKeyCache(kv, ["pk"]);
+	assertEquals(await cache2.get(new URL("https://example.com/null2")), null);
 });
 
 //#endregion

package/dist/federation/middleware.test.js

@@ -8,25 +8,25 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-CbQK8e-e.js";
-import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "../middleware-BI1VCuPT.js";
+import "../deno-4w047OFk.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "../middleware-DozhKfB6.js";
 import "../client-CoCIaTNO.js";
 import { RouterError } from "../router-D9eI0s4b.js";
 import "../types-CPz01LGH.js";
-import "../key-Cga1p73u.js";
-import { signRequest, verifyRequest } from "../http-CjaLjnRN.js";
-import { detachSignature, signJsonLd, verifyJsonLd } from "../ld-BWSOukKj.js";
-import { doesActorOwnKey } from "../owner-HASxJJP1.js";
-import { signObject, verifyObject } from "../proof-BXt2Oi8t.js";
-import { getAuthenticatedDocumentLoader } from "../docloader-CJeSPcS_.js";
+import "../key-D7Y_J9kt.js";
+import { signRequest, verifyRequest } from "../http-Br3-1dRf.js";
+import { detachSignature, signJsonLd, verifyJsonLd } from "../ld-Bjq9Z4St.js";
+import { doesActorOwnKey } from "../owner-CImU2dKz.js";
+import { signObject, verifyObject } from "../proof-DLL0MLmV.js";
+import { getAuthenticatedDocumentLoader } from "../docloader-CBHh0rC5.js";
 import "../kv-cache-El7We5sy.js";
-import "../inbox-B33isX44.js";
-import "../builder-DA7Qgx_F.js";
+import "../inbox-3bZUqDLE.js";
+import "../builder-B5cKln9v.js";
 import "../collection-CcnIw1qY.js";
-import "../keycache-DRxpZ5r9.js";
+import "../keycache-BASM0rrX.js";
 import "../negotiation-5NPJL6zp.js";
 import "../retry-D4GJ670a.js";
-import "../send-BF3omx5-.js";
+import "../send-DbW03azY.js";
 import { assertStrictEquals } from "../std__assert-DWivtrGR.js";
 import { assertFalse, assertRejects } from "../assert_rejects-Ce45JcFg.js";
 import { assertThrows } from "../assert_throws-BNXdRGWP.js";

package/dist/federation/mod.cjs

@@ -3,12 +3,12 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 require('../transformers-3g8GZwkZ.cjs');
-require('../http-CQ7TiYUI.cjs');
-const require_middleware = require('../middleware-Scz2k9eL.cjs');
-require('../proof-BYZ4hcgN.cjs');
+require('../http-DGs_78tx.cjs');
+const require_middleware = require('../middleware-CQeA5yF7.cjs');
+require('../proof-UhA5do8k.cjs');
 const require_federation = require('../federation-Bp3HI26G.cjs');
 require('../types-Cd_hszr_.cjs');
-require('../kv-cache--qyREO7e.cjs');
+require('../kv-cache-9PANi4tA.cjs');
 
 exports.InProcessMessageQueue = require_federation.InProcessMessageQueue;
 exports.MemoryKvStore = require_federation.MemoryKvStore;

package/dist/federation/mod.js

@@ -3,11 +3,11 @@
           import { URLPattern } from "urlpattern-polyfill";
         
 import "../transformers-C3FLHUd6.js";
-import "../http-B3vAjAtl.js";
-import { Router, RouterError, SendActivityError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-CP7JdsGq.js";
-import "../proof-BwfRl5J4.js";
+import "../http-C_RwU_oN.js";
+import { Router, RouterError, SendActivityError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-Bj30TZll.js";
+import "../proof-BygvN4r5.js";
 import { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue } from "../federation-DaMfqRm4.js";
 import "../types-C93Ob9cU.js";
-import "../kv-cache-CFdy0BpZ.js";
+import "../kv-cache-CMM5VJsc.js";
 
 export { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue, Router, RouterError, SendActivityError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, respondWithObject, respondWithObjectIfAcceptable };

package/dist/federation/send.test.js

@@ -7,11 +7,11 @@ import { esm_default } from "../esm-nLm00z9V.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
-import "../deno-CbQK8e-e.js";
-import "../key-Cga1p73u.js";
-import { verifyRequest } from "../http-CjaLjnRN.js";
-import { doesActorOwnKey } from "../owner-HASxJJP1.js";
-import { SendActivityError, extractInboxes, sendActivity } from "../send-BF3omx5-.js";
+import "../deno-4w047OFk.js";
+import "../key-D7Y_J9kt.js";
+import { verifyRequest } from "../http-Br3-1dRf.js";
+import { doesActorOwnKey } from "../owner-CImU2dKz.js";
+import { SendActivityError, extractInboxes, sendActivity } from "../send-DbW03azY.js";
 import "../std__assert-DWivtrGR.js";
 import { assertFalse, assertRejects } from "../assert_rejects-Ce45JcFg.js";
 import "../assert_throws-BNXdRGWP.js";

package/dist/federation/webfinger.test.js

@@ -7,25 +7,25 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-CbQK8e-e.js";
-import { createFederation, handleWebFinger } from "../middleware-BI1VCuPT.js";
+import "../deno-4w047OFk.js";
+import { createFederation, handleWebFinger } from "../middleware-DozhKfB6.js";
 import "../client-CoCIaTNO.js";
 import "../router-D9eI0s4b.js";
 import "../types-CPz01LGH.js";
-import "../key-Cga1p73u.js";
-import "../http-CjaLjnRN.js";
-import "../ld-BWSOukKj.js";
-import "../owner-HASxJJP1.js";
-import "../proof-BXt2Oi8t.js";
-import "../docloader-CJeSPcS_.js";
+import "../key-D7Y_J9kt.js";
+import "../http-Br3-1dRf.js";
+import "../ld-Bjq9Z4St.js";
+import "../owner-CImU2dKz.js";
+import "../proof-DLL0MLmV.js";
+import "../docloader-CBHh0rC5.js";
 import "../kv-cache-El7We5sy.js";
-import "../inbox-B33isX44.js";
-import "../builder-DA7Qgx_F.js";
+import "../inbox-3bZUqDLE.js";
+import "../builder-B5cKln9v.js";
 import "../collection-CcnIw1qY.js";
-import "../keycache-DRxpZ5r9.js";
+import "../keycache-BASM0rrX.js";
 import "../negotiation-5NPJL6zp.js";
 import "../retry-D4GJ670a.js";
-import "../send-BF3omx5-.js";
+import "../send-DbW03azY.js";
 import "../std__assert-DWivtrGR.js";
 import "../assert_rejects-Ce45JcFg.js";
 import "../assert_throws-BNXdRGWP.js";

package/dist/{http-CjaLjnRN.js → http-Br3-1dRf.js}

@@ -3,9 +3,10 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-CbQK8e-e.js";
-import { fetchKey, validateCryptoKey } from "./key-Cga1p73u.js";
+import { deno_default } from "./deno-4w047OFk.js";
+import { fetchKey, validateCryptoKey } from "./key-D7Y_J9kt.js";
 import { CryptographicKey } from "@fedify/vocab";
+import { FetchError } from "@fedify/vocab-runtime";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
@@ -14,6 +15,7 @@ import { encodeHex } from "byte-encodings/hex";
 import { Item, decodeDict, encodeItem } from "structured-field-values";
 
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -725,7 +727,11 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -740,11 +746,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		getLogger([
@@ -768,11 +777,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{http-B3vAjAtl.js → http-C_RwU_oN.js}

@@ -6,14 +6,14 @@ import { getLogger } from "@logtape/logtape";
 import { CryptographicKey, Object as Object$1, isActor } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 import { encodeHex } from "byte-encodings/hex";
+import { FetchError, getDocumentLoader } from "@fedify/vocab-runtime";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
 import { Item, decodeDict, encodeItem } from "structured-field-values";
-import { getDocumentLoader } from "@fedify/vocab-runtime";
 
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.0.7";
+var version = "2.0.8";
 var license = "MIT";
 var exports = {
 	".": "./src/mod.ts",
@@ -377,6 +377,7 @@ async function fetchKeyInternal(keyId, cls, { documentLoader, contextLoader, key
 
 //#endregion
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -1088,7 +1089,11 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -1103,11 +1108,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		getLogger([
@@ -1131,11 +1139,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{http-CQ7TiYUI.cjs → http-DGs_78tx.cjs}

@@ -7,14 +7,14 @@ const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const __fedify_vocab = require_chunk.__toESM(require("@fedify/vocab"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 const byte_encodings_hex = require_chunk.__toESM(require("byte-encodings/hex"));
+const __fedify_vocab_runtime = require_chunk.__toESM(require("@fedify/vocab-runtime"));
 const __opentelemetry_semantic_conventions = require_chunk.__toESM(require("@opentelemetry/semantic-conventions"));
 const byte_encodings_base64 = require_chunk.__toESM(require("byte-encodings/base64"));
 const structured_field_values = require_chunk.__toESM(require("structured-field-values"));
-const __fedify_vocab_runtime = require_chunk.__toESM(require("@fedify/vocab-runtime"));
 
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.0.7";
+var version = "2.0.8";
 var license = "MIT";
 var exports$1 = {
 	".": "./src/mod.ts",
@@ -378,6 +378,7 @@ async function fetchKeyInternal(keyId, cls, { documentLoader, contextLoader, key
 
 //#endregion
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -1089,7 +1090,11 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -1104,11 +1109,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new __fedify_vocab_runtime.FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new __fedify_vocab_runtime.FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const spec = firstTrySpec === "draft-cavage-http-signatures-12" ? "rfc9421" : "draft-cavage-http-signatures-12";
 		(0, __logtape_logtape.getLogger)([
@@ -1132,11 +1140,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new __fedify_vocab_runtime.FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new __fedify_vocab_runtime.FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{inbox-B33isX44.js → inbox-3bZUqDLE.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-CbQK8e-e.js";
+import { deno_default } from "./deno-4w047OFk.js";
 import { Activity, getTypeId } from "@fedify/vocab";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";

package/dist/{key-Cga1p73u.js → key-D7Y_J9kt.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-CbQK8e-e.js";
+import { deno_default } from "./deno-4w047OFk.js";
 import { CryptographicKey, Object as Object$1, isActor } from "@fedify/vocab";
 import { getDocumentLoader } from "@fedify/vocab-runtime";
 import { getLogger } from "@logtape/logtape";

package/dist/{keycache-DRxpZ5r9.js → keycache-BASM0rrX.js}

@@ -6,6 +6,11 @@
 import { CryptographicKey, Multikey } from "@fedify/vocab";
 
 //#region src/federation/keycache.ts
+const NULL_KEY_CACHE_VALUE = { _fedify: "key-unavailable" };
+const NULL_KEY_CACHE_TTL = Temporal.Duration.from({ minutes: 5 });
+function isNullKeyCacheValue(value) {
+	return typeof value === "object" && value != null && "_fedify" in value && value._fedify === NULL_KEY_CACHE_VALUE._fedify;
+}
 var KvKeyCache = class {
 	kv;
 	prefix;
@@ -21,6 +26,10 @@ var KvKeyCache = class {
 		if (this.nullKeys.has(keyId.href)) return null;
 		const serialized = await this.kv.get([...this.prefix, keyId.href]);
 		if (serialized == null) return void 0;
+		if (isNullKeyCacheValue(serialized)) {
+			this.nullKeys.add(keyId.href);
+			return null;
+		}
 		try {
 			return await CryptographicKey.fromJsonLd(serialized, this.options);
 		} catch {
@@ -35,7 +44,7 @@ var KvKeyCache = class {
 	async set(keyId, key) {
 		if (key == null) {
 			this.nullKeys.add(keyId.href);
-			await this.kv.delete([...this.prefix, keyId.href]);
+			await this.kv.set([...this.prefix, keyId.href], NULL_KEY_CACHE_VALUE, { ttl: NULL_KEY_CACHE_TTL });
 			return;
 		}
 		this.nullKeys.delete(keyId.href);

package/dist/{kv-cache--qyREO7e.cjs → kv-cache-9PANi4tA.cjs}

@@ -3,7 +3,7 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-CGaQZ11T.cjs');
-const require_http = require('./http-CQ7TiYUI.cjs');
+const require_http = require('./http-DGs_78tx.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const es_toolkit = require_chunk.__toESM(require("es-toolkit"));
 const __fedify_vocab_runtime = require_chunk.__toESM(require("@fedify/vocab-runtime"));

package/dist/{kv-cache-CFdy0BpZ.js → kv-cache-CMM5VJsc.js}

@@ -2,7 +2,7 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { doubleKnock, validateCryptoKey } from "./http-B3vAjAtl.js";
+import { doubleKnock, validateCryptoKey } from "./http-C_RwU_oN.js";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, preloadedContexts, validatePublicUrl } from "@fedify/vocab-runtime";