@fedify/fedify 2.1.12 → 2.1.14

package/dist/federation/mod.cjs

@@ -2,7 +2,7 @@ const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../chunk-DDcVe30Y.cjs");
-const require_middleware = require("../middleware-DFcgN1cH.cjs");
+const require_middleware = require("../middleware-BcbU5lKS.cjs");
 let es_toolkit = require("es-toolkit");
 //#region src/federation/kv.ts
 /**

package/dist/federation/mod.d.cts

@@ -1,4 +1,5 @@
-import { $ as ActorKeyPairsDispatcher, A as createFederation, B as RouterRouteResult, C as InboxChallengePolicy, D as FederationKvPrefixes, E as Rfc6570Expression, F as Message, G as InProcessMessageQueueOptions, H as respondWithObject, I as createFederationBuilder, J as MessageQueueListenOptions, K as MessageQueue, L as Router, M as RetryContext, N as RetryPolicy, O as FederationOrigin, P as createExponentialBackoffPolicy, Q as ActorHandleMapper, R as RouterError, S as IdempotencyStrategy, St as digest, T as ObjectCallbackSetters, U as respondWithObjectIfAcceptable, V as RespondWithObjectOptions, W as InProcessMessageQueue, X as ActorAliasMapper, Y as ParallelMessageQueue, Z as ActorDispatcher, _ as FederationBuilder, _t as WebFingerLinksDispatcher, a as InboxContext, at as CustomCollectionCursor, b as FederationStartQueueOptions, bt as PageItems, c as RouteActivityOptions, ct as InboxListener, d as ActorCallbackSetters, dt as ObjectDispatcher, et as AuthorizePredicate, f as CollectionCallbackSetters, ft as OutboxErrorHandler, g as Federation, gt as UnverifiedActivityReason, h as Federatable, ht as UnverifiedActivityHandler, i as GetSignedKeyOptions, it as CustomCollectionCounter, j as CreateExponentialBackoffPolicyOptions, k as FederationQueueOptions, l as SendActivityOptions, lt as NodeInfoDispatcher, m as CustomCollectionCallbackSetters, mt as SharedInboxKeyDispatcher, n as Context, nt as CollectionCursor, o as ParseUriResult, ot as CustomCollectionDispatcher, p as ConstructorWithTypeId, pt as OutboxPermanentFailureHandler, q as MessageQueueEnqueueOptions, r as ForwardActivityOptions, rt as CollectionDispatcher, s as RequestContext, st as InboxErrorHandler, t as ActorKeyPair, tt as CollectionCounter, u as SendActivityOptionsForCollection, ut as ObjectAuthorizePredicate, v as FederationFetchOptions, vt as SendActivityError, w as InboxListenerSetters, x as IdempotencyKeyCallback, xt as buildCollectionSynchronizationHeader, y as FederationOptions, yt as SenderKeyPair, z as RouterOptions } from "../context-LmrZPwti.cjs";
-import { a as MemoryKvStore, i as KvStoreSetOptions, n as KvStore, r as KvStoreListEntry, t as KvKey } from "../kv-CbLNp3zQ.cjs";
-import { n as handleWebFinger, t as WebFingerHandlerParameters } from "../mod-Cgpc49fA.cjs";
+/// <reference lib="esnext.temporal" />
+import { $ as ActorKeyPairsDispatcher, A as createFederation, B as RouterRouteResult, C as InboxChallengePolicy, D as FederationKvPrefixes, E as Rfc6570Expression, F as Message, G as InProcessMessageQueueOptions, H as respondWithObject, I as createFederationBuilder, J as MessageQueueListenOptions, K as MessageQueue, L as Router, M as RetryContext, N as RetryPolicy, O as FederationOrigin, P as createExponentialBackoffPolicy, Q as ActorHandleMapper, R as RouterError, S as IdempotencyStrategy, St as digest, T as ObjectCallbackSetters, U as respondWithObjectIfAcceptable, V as RespondWithObjectOptions, W as InProcessMessageQueue, X as ActorAliasMapper, Y as ParallelMessageQueue, Z as ActorDispatcher, _ as FederationBuilder, _t as WebFingerLinksDispatcher, a as InboxContext, at as CustomCollectionCursor, b as FederationStartQueueOptions, bt as PageItems, c as RouteActivityOptions, ct as InboxListener, d as ActorCallbackSetters, dt as ObjectDispatcher, et as AuthorizePredicate, f as CollectionCallbackSetters, ft as OutboxErrorHandler, g as Federation, gt as UnverifiedActivityReason, h as Federatable, ht as UnverifiedActivityHandler, i as GetSignedKeyOptions, it as CustomCollectionCounter, j as CreateExponentialBackoffPolicyOptions, k as FederationQueueOptions, l as SendActivityOptions, lt as NodeInfoDispatcher, m as CustomCollectionCallbackSetters, mt as SharedInboxKeyDispatcher, n as Context, nt as CollectionCursor, o as ParseUriResult, ot as CustomCollectionDispatcher, p as ConstructorWithTypeId, pt as OutboxPermanentFailureHandler, q as MessageQueueEnqueueOptions, r as ForwardActivityOptions, rt as CollectionDispatcher, s as RequestContext, st as InboxErrorHandler, t as ActorKeyPair, tt as CollectionCounter, u as SendActivityOptionsForCollection, ut as ObjectAuthorizePredicate, v as FederationFetchOptions, vt as SendActivityError, w as InboxListenerSetters, x as IdempotencyKeyCallback, xt as buildCollectionSynchronizationHeader, y as FederationOptions, yt as SenderKeyPair, z as RouterOptions } from "../context-o22vjzS2.cjs";
+import { a as MemoryKvStore, i as KvStoreSetOptions, n as KvStore, r as KvStoreListEntry, t as KvKey } from "../kv-gJ8LYbxX.cjs";
+import { n as handleWebFinger, t as WebFingerHandlerParameters } from "../mod-0dF0OeGw.cjs";
 export { ActorAliasMapper, ActorCallbackSetters, ActorDispatcher, ActorHandleMapper, ActorKeyPair, ActorKeyPairsDispatcher, AuthorizePredicate, CollectionCallbackSetters, CollectionCounter, CollectionCursor, CollectionDispatcher, ConstructorWithTypeId, Context, CreateExponentialBackoffPolicyOptions, CustomCollectionCallbackSetters, CustomCollectionCounter, CustomCollectionCursor, CustomCollectionDispatcher, Federatable, Federation, FederationBuilder, FederationFetchOptions, FederationKvPrefixes, FederationOptions, FederationOrigin, FederationQueueOptions, FederationStartQueueOptions, ForwardActivityOptions, GetSignedKeyOptions, IdempotencyKeyCallback, IdempotencyStrategy, InProcessMessageQueue, InProcessMessageQueueOptions, InboxChallengePolicy, InboxContext, InboxErrorHandler, InboxListener, InboxListenerSetters, KvKey, KvStore, KvStoreListEntry, KvStoreSetOptions, MemoryKvStore, Message, MessageQueue, MessageQueueEnqueueOptions, MessageQueueListenOptions, NodeInfoDispatcher, ObjectAuthorizePredicate, ObjectCallbackSetters, ObjectDispatcher, OutboxErrorHandler, OutboxPermanentFailureHandler, PageItems, ParallelMessageQueue, ParseUriResult, RequestContext, RespondWithObjectOptions, RetryContext, RetryPolicy, Rfc6570Expression, RouteActivityOptions, Router, RouterError, RouterOptions, RouterRouteResult, SendActivityError, SendActivityOptions, SendActivityOptionsForCollection, SenderKeyPair, SharedInboxKeyDispatcher, UnverifiedActivityHandler, UnverifiedActivityReason, WebFingerHandlerParameters, WebFingerLinksDispatcher, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, respondWithObject, respondWithObjectIfAcceptable };

package/dist/federation/mod.d.ts

@@ -1,6 +1,5 @@
-import { Temporal } from "@js-temporal/polyfill";
-import { URLPattern } from "urlpattern-polyfill";
-import { $ as ActorKeyPairsDispatcher, A as createFederation, B as RouterRouteResult, C as InboxChallengePolicy, D as FederationKvPrefixes, E as Rfc6570Expression, F as Message, G as InProcessMessageQueueOptions, H as respondWithObject, I as createFederationBuilder, J as MessageQueueListenOptions, K as MessageQueue, L as Router, M as RetryContext, N as RetryPolicy, O as FederationOrigin, P as createExponentialBackoffPolicy, Q as ActorHandleMapper, R as RouterError, S as IdempotencyStrategy, St as digest, T as ObjectCallbackSetters, U as respondWithObjectIfAcceptable, V as RespondWithObjectOptions, W as InProcessMessageQueue, X as ActorAliasMapper, Y as ParallelMessageQueue, Z as ActorDispatcher, _ as FederationBuilder, _t as WebFingerLinksDispatcher, a as InboxContext, at as CustomCollectionCursor, b as FederationStartQueueOptions, bt as PageItems, c as RouteActivityOptions, ct as InboxListener, d as ActorCallbackSetters, dt as ObjectDispatcher, et as AuthorizePredicate, f as CollectionCallbackSetters, ft as OutboxErrorHandler, g as Federation, gt as UnverifiedActivityReason, h as Federatable, ht as UnverifiedActivityHandler, i as GetSignedKeyOptions, it as CustomCollectionCounter, j as CreateExponentialBackoffPolicyOptions, k as FederationQueueOptions, l as SendActivityOptions, lt as NodeInfoDispatcher, m as CustomCollectionCallbackSetters, mt as SharedInboxKeyDispatcher, n as Context, nt as CollectionCursor, o as ParseUriResult, ot as CustomCollectionDispatcher, p as ConstructorWithTypeId, pt as OutboxPermanentFailureHandler, q as MessageQueueEnqueueOptions, r as ForwardActivityOptions, rt as CollectionDispatcher, s as RequestContext, st as InboxErrorHandler, t as ActorKeyPair, tt as CollectionCounter, u as SendActivityOptionsForCollection, ut as ObjectAuthorizePredicate, v as FederationFetchOptions, vt as SendActivityError, w as InboxListenerSetters, x as IdempotencyKeyCallback, xt as buildCollectionSynchronizationHeader, y as FederationOptions, yt as SenderKeyPair, z as RouterOptions } from "../context-C0fssarc.js";
-import { a as MemoryKvStore, i as KvStoreSetOptions, n as KvStore, r as KvStoreListEntry, t as KvKey } from "../kv-GFYnFoOl.js";
-import { n as handleWebFinger, t as WebFingerHandlerParameters } from "../mod-CnwZoDzx.js";
+/// <reference lib="esnext.temporal" />
+import { $ as ActorKeyPairsDispatcher, A as createFederation, B as RouterRouteResult, C as InboxChallengePolicy, D as FederationKvPrefixes, E as Rfc6570Expression, F as Message, G as InProcessMessageQueueOptions, H as respondWithObject, I as createFederationBuilder, J as MessageQueueListenOptions, K as MessageQueue, L as Router, M as RetryContext, N as RetryPolicy, O as FederationOrigin, P as createExponentialBackoffPolicy, Q as ActorHandleMapper, R as RouterError, S as IdempotencyStrategy, St as digest, T as ObjectCallbackSetters, U as respondWithObjectIfAcceptable, V as RespondWithObjectOptions, W as InProcessMessageQueue, X as ActorAliasMapper, Y as ParallelMessageQueue, Z as ActorDispatcher, _ as FederationBuilder, _t as WebFingerLinksDispatcher, a as InboxContext, at as CustomCollectionCursor, b as FederationStartQueueOptions, bt as PageItems, c as RouteActivityOptions, ct as InboxListener, d as ActorCallbackSetters, dt as ObjectDispatcher, et as AuthorizePredicate, f as CollectionCallbackSetters, ft as OutboxErrorHandler, g as Federation, gt as UnverifiedActivityReason, h as Federatable, ht as UnverifiedActivityHandler, i as GetSignedKeyOptions, it as CustomCollectionCounter, j as CreateExponentialBackoffPolicyOptions, k as FederationQueueOptions, l as SendActivityOptions, lt as NodeInfoDispatcher, m as CustomCollectionCallbackSetters, mt as SharedInboxKeyDispatcher, n as Context, nt as CollectionCursor, o as ParseUriResult, ot as CustomCollectionDispatcher, p as ConstructorWithTypeId, pt as OutboxPermanentFailureHandler, q as MessageQueueEnqueueOptions, r as ForwardActivityOptions, rt as CollectionDispatcher, s as RequestContext, st as InboxErrorHandler, t as ActorKeyPair, tt as CollectionCounter, u as SendActivityOptionsForCollection, ut as ObjectAuthorizePredicate, v as FederationFetchOptions, vt as SendActivityError, w as InboxListenerSetters, x as IdempotencyKeyCallback, xt as buildCollectionSynchronizationHeader, y as FederationOptions, yt as SenderKeyPair, z as RouterOptions } from "../context-_l9t359k.js";
+import { a as MemoryKvStore, i as KvStoreSetOptions, n as KvStore, r as KvStoreListEntry, t as KvKey } from "../kv-D6hNiMTK.js";
+import { n as handleWebFinger, t as WebFingerHandlerParameters } from "../mod-Bv1elC-b.js";
 export { ActorAliasMapper, ActorCallbackSetters, ActorDispatcher, ActorHandleMapper, ActorKeyPair, ActorKeyPairsDispatcher, AuthorizePredicate, CollectionCallbackSetters, CollectionCounter, CollectionCursor, CollectionDispatcher, ConstructorWithTypeId, Context, CreateExponentialBackoffPolicyOptions, CustomCollectionCallbackSetters, CustomCollectionCounter, CustomCollectionCursor, CustomCollectionDispatcher, Federatable, Federation, FederationBuilder, FederationFetchOptions, FederationKvPrefixes, FederationOptions, FederationOrigin, FederationQueueOptions, FederationStartQueueOptions, ForwardActivityOptions, GetSignedKeyOptions, IdempotencyKeyCallback, IdempotencyStrategy, InProcessMessageQueue, InProcessMessageQueueOptions, InboxChallengePolicy, InboxContext, InboxErrorHandler, InboxListener, InboxListenerSetters, KvKey, KvStore, KvStoreListEntry, KvStoreSetOptions, MemoryKvStore, Message, MessageQueue, MessageQueueEnqueueOptions, MessageQueueListenOptions, NodeInfoDispatcher, ObjectAuthorizePredicate, ObjectCallbackSetters, ObjectDispatcher, OutboxErrorHandler, OutboxPermanentFailureHandler, PageItems, ParallelMessageQueue, ParseUriResult, RequestContext, RespondWithObjectOptions, RetryContext, RetryPolicy, Rfc6570Expression, RouteActivityOptions, Router, RouterError, RouterOptions, RouterRouteResult, SendActivityError, SendActivityOptions, SendActivityOptionsForCollection, SenderKeyPair, SharedInboxKeyDispatcher, UnverifiedActivityHandler, UnverifiedActivityReason, WebFingerHandlerParameters, WebFingerLinksDispatcher, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, respondWithObject, respondWithObjectIfAcceptable };

package/dist/federation/mod.js

@@ -1,6 +1,6 @@
 import { Temporal } from "@js-temporal/polyfill";
-import "urlpattern-polyfill";
-import { a as createExponentialBackoffPolicy, c as buildCollectionSynchronizationHeader, d as Router, f as RouterError, i as SendActivityError, l as digest, o as respondWithObject, r as handleWebFinger, s as respondWithObjectIfAcceptable, t as createFederation, u as createFederationBuilder } from "../middleware-UThUK30x.js";
+import { URLPattern } from "urlpattern-polyfill";
+import { a as createExponentialBackoffPolicy, c as buildCollectionSynchronizationHeader, d as Router, f as RouterError, i as SendActivityError, l as digest, o as respondWithObject, r as handleWebFinger, s as respondWithObjectIfAcceptable, t as createFederation, u as createFederationBuilder } from "../middleware-0vceVN10.js";
 import { isEqual } from "es-toolkit";
 //#region src/federation/kv.ts
 /**

package/dist/federation/retry.test.mjs

@@ -3,7 +3,7 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { l as AssertionError, t as assertEquals } from "../assert_equals-Ew3jOFa3.mjs";
 import { t as assertNotEquals } from "../assert_not_equals--wG9hV7u.mjs";
-import { t as createExponentialBackoffPolicy } from "../retry-B_E3V_Dx.mjs";
+import { t as createExponentialBackoffPolicy } from "../retry-CJL0poaU.mjs";
 import { test } from "@fedify/fixture";
 //#region src/federation/retry.test.ts
 test("createExponentialBackoffPolicy()", () => {

package/dist/federation/send.test.mjs

@@ -8,10 +8,10 @@ import { n as assertFalse, t as assertRejects } from "../assert_rejects-B-qJtC9Z
 import { t as assertInstanceOf } from "../assert_instance_of-C4Ri6VuN.mjs";
 import { t as assertNotEquals } from "../assert_not_equals--wG9hV7u.mjs";
 import { t as assert } from "../assert-ddO5KLpe.mjs";
-import { l as verifyRequest } from "../http-DRDpStn2.mjs";
+import { l as verifyRequest } from "../http-DvhFwy2E.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-BAK-tUlf.mjs";
-import { t as doesActorOwnKey } from "../owner-BceqCVOs.mjs";
-import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-Buz5Gy8x.mjs";
+import { t as doesActorOwnKey } from "../owner-DzcnuWYo.mjs";
+import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-5ulOKVCW.mjs";
 import { createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { Activity, Application, Endpoints, Group, Person, Service } from "@fedify/vocab";
 //#region src/federation/send.test.ts

package/dist/federation/temporal.test.d.mts

@@ -0,0 +1,2 @@
+import { Temporal } from "@js-temporal/polyfill";
+import { URLPattern } from "urlpattern-polyfill";

package/dist/federation/temporal.test.mjs

@@ -0,0 +1,71 @@
+import "@js-temporal/polyfill";
+import "urlpattern-polyfill";
+globalThis.addEventListener = () => {};
+import "../std__assert-Duiq_YC9.mjs";
+import { n as assertFalse } from "../assert_rejects-B-qJtC9Z.mjs";
+import { t as assert } from "../assert-ddO5KLpe.mjs";
+import { t as hasMalformedKnownTemporalLiteral } from "../temporal-CmJkd-25.mjs";
+import { test } from "@fedify/fixture";
+//#region src/federation/temporal.test.ts
+test("hasMalformedKnownTemporalLiteral() detects expanded proof timestamps", async () => {
+	assert(await hasMalformedKnownTemporalLiteral({
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://example.com/activities/invalid-proof-created",
+		type: "Create",
+		actor: "https://example.com/person2",
+		object: {
+			id: "https://example.com/notes/invalid-proof-created",
+			type: "Note",
+			attributedTo: "https://example.com/person2",
+			content: "Hello, world!"
+		},
+		proof: {
+			type: "DataIntegrityProof",
+			cryptosuite: "eddsa-jcs-2022",
+			verificationMethod: "https://example.com/person2#main-key",
+			proofPurpose: "assertionMethod",
+			created: { "@value": "not-a-date" },
+			proofValue: "zLaewdp4H9kqtwyrLatK4cjY5oRHwVcw4gibPSUDYDMhi4M49v8pcYk3ZB6D69dNpAPbUmY8ocuJ3m9KhKJEEg7z"
+		}
+	}, void 0));
+});
+test("hasMalformedKnownTemporalLiteral() follows aliases in nested objects", async () => {
+	assert(await hasMalformedKnownTemporalLiteral({
+		"@context": ["https://www.w3.org/ns/activitystreams", { publishedAt: "as:published" }],
+		id: "https://example.com/activities/invalid-nested-published",
+		type: "Create",
+		actor: "https://example.com/person2",
+		object: {
+			id: "https://example.com/notes/invalid-nested-published",
+			type: "Note",
+			attributedTo: "https://example.com/person2",
+			content: "Hello, world!"
+		},
+		audience: {
+			type: "Note",
+			publishedAt: { "@value": "not-a-date" }
+		}
+	}, void 0));
+});
+test("hasMalformedKnownTemporalLiteral() does not over-classify ignored as:closed values", async () => {
+	assertFalse(await hasMalformedKnownTemporalLiteral({
+		"@context": "https://www.w3.org/ns/activitystreams",
+		type: "Question",
+		closed: "not-a-date"
+	}, void 0));
+});
+test("hasMalformedKnownTemporalLiteral() detects date-like invalid as:closed values", async () => {
+	assert(await hasMalformedKnownTemporalLiteral({
+		"@context": "https://www.w3.org/ns/activitystreams",
+		type: "Question",
+		closed: "2024-02-31T00:00:00Z"
+	}, void 0));
+});
+test("hasMalformedKnownTemporalLiteral() ignores custom-typed as:closed values", async () => {
+	assertFalse(await hasMalformedKnownTemporalLiteral({ "https://www.w3.org/ns/activitystreams#closed": [{
+		"@value": "2024-02-31T00:00:00Z",
+		"@type": "https://example.com/ns#customDateTime"
+	}] }, void 0));
+});
+//#endregion
+export {};

package/dist/federation/webfinger.test.mjs

@@ -5,7 +5,7 @@ import { n as createRequestContext } from "../context-Juj6bdHC.mjs";
 import { t as assertEquals } from "../assert_equals-Ew3jOFa3.mjs";
 import "../std__assert-Duiq_YC9.mjs";
 import { t as MemoryKvStore } from "../kv-tL2TOE9X.mjs";
-import { a as createFederation, o as handleWebFinger } from "../middleware-DDsnRvFC.mjs";
+import { a as createFederation, o as handleWebFinger } from "../middleware-DmT9t0BJ.mjs";
 import { test } from "@fedify/fixture";
 import { Image, Link, Person } from "@fedify/vocab";
 //#region src/federation/webfinger.test.ts

package/dist/{http-CrGuipxe.d.cts → http-BDZeS5om.d.ts}

@@ -1,6 +1,7 @@
+/// <reference lib="esnext.temporal" />
 import { CryptographicKey, Multikey } from "@fedify/vocab";
-import { DocumentLoader } from "@fedify/vocab-runtime";
 import { TracerProvider } from "@opentelemetry/api";
+import { DocumentLoader } from "@fedify/vocab-runtime";
 
 //#region src/sig/key.d.ts
 /**

package/dist/{http-aQzN9Ayi.d.ts → http-C87EWkO0.d.cts}

@@ -1,8 +1,7 @@
-import { Temporal } from "@js-temporal/polyfill";
-import { URLPattern } from "urlpattern-polyfill";
+/// <reference lib="esnext.temporal" />
 import { CryptographicKey, Multikey } from "@fedify/vocab";
-import { TracerProvider } from "@opentelemetry/api";
 import { DocumentLoader } from "@fedify/vocab-runtime";
+import { TracerProvider } from "@opentelemetry/api";
 
 //#region src/sig/key.d.ts
 /**

package/dist/{http-CmDErAnD.cjs → http-CEXtUHix.cjs}

@@ -11,7 +11,7 @@ let _opentelemetry_semantic_conventions = require("@opentelemetry/semantic-conve
 let byte_encodings_base64 = require("byte-encodings/base64");
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.1.12";
+var version = "2.1.14";
 //#endregion
 //#region src/sig/accept.ts
 /**
@@ -497,6 +497,7 @@ async function fetchKeyInternal(keyId, cls, options = {}) {
 //#endregion
 //#region src/sig/http.ts
 const DEFAULT_MAX_REDIRECTION = 20;
+const DOUBLE_KNOCK_TRANSPORT_RETRY_DELAY_MS = 100;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -1325,6 +1326,59 @@ function createRedirectRequest(request, location, body) {
 		cache: request.cache
 	});
 }
+async function fetchDoubleKnockRequest(request, signedRequest, signal) {
+	const maxAttempts = request.method === "GET" || request.method === "HEAD" ? 2 : 1;
+	for (let attempt = 1;; attempt++) try {
+		return await fetch(signedRequest, {
+			redirect: "manual",
+			signal
+		});
+	} catch (error) {
+		const abortedSignal = getAbortedSignal(signal, request.signal, signedRequest.signal);
+		if (abortedSignal != null) throw getAbortReason(abortedSignal);
+		if (isAbortError(error)) throw error;
+		if (attempt >= maxAttempts) throw createFetchError(request.url, error);
+		await sleep(DOUBLE_KNOCK_TRANSPORT_RETRY_DELAY_MS, signal, request.signal, signedRequest.signal);
+	}
+}
+function createFetchError(url, cause) {
+	const error = new _fedify_vocab_runtime.FetchError(url, cause instanceof Error ? cause.message : String(cause));
+	error.cause = cause;
+	return error;
+}
+function isAbortError(error) {
+	return error instanceof Error && error.name === "AbortError";
+}
+async function sleep(ms, ...signals) {
+	const abortSignals = signals.filter((signal) => signal != null);
+	const abortedSignal = getAbortedSignal(...abortSignals);
+	if (abortedSignal != null) throw getAbortReason(abortedSignal);
+	if (abortSignals.length < 1) {
+		await new Promise((resolve) => setTimeout(resolve, ms));
+		return;
+	}
+	await new Promise((resolve, reject) => {
+		const removeAbortListeners = () => {
+			for (const signal of abortSignals) signal.removeEventListener("abort", handleAbort);
+		};
+		const timeout = setTimeout(() => {
+			removeAbortListeners();
+			resolve();
+		}, ms);
+		function handleAbort(event) {
+			clearTimeout(timeout);
+			removeAbortListeners();
+			reject(getAbortReason(event.currentTarget));
+		}
+		for (const signal of abortSignals) signal.addEventListener("abort", handleAbort, { once: true });
+	});
+}
+function getAbortedSignal(...signals) {
+	return signals.find((signal) => signal?.aborted);
+}
+function getAbortReason(signal) {
+	return signal.reason ?? new DOMException("The operation was aborted.", "AbortError");
+}
 /**
 * Performs a double-knock request to the given URL.  For the details of
 * double-knocking, see
@@ -1350,10 +1404,7 @@ async function doubleKnockInternal(request, identity, options, redirected = 0, v
 		body
 	});
 	log?.(signedRequest);
-	let response = await fetch(signedRequest, {
-		redirect: "manual",
-		signal
-	});
+	let response = await fetchDoubleKnockRequest(request, signedRequest, signal);
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new _fedify_vocab_runtime.FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const redirectRequest = createRedirectRequest(request, response.headers.get("Location"), body);
@@ -1428,10 +1479,7 @@ async function doubleKnockInternal(request, identity, options, redirected = 0, v
 			body
 		});
 		log?.(signedRequest);
-		response = await fetch(signedRequest, {
-			redirect: "manual",
-			signal
-		});
+		response = await fetchDoubleKnockRequest(request, signedRequest, signal);
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new _fedify_vocab_runtime.FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const redirectRequest = createRedirectRequest(request, response.headers.get("Location"), body);

package/dist/{http-qKyJKSnF.js → http-Cw1EorUA.js}

@@ -1,5 +1,5 @@
 import { Temporal } from "@js-temporal/polyfill";
-import "urlpattern-polyfill";
+import { URLPattern } from "urlpattern-polyfill";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey, Object as Object$1, isActor } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
@@ -10,7 +10,7 @@ import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } fro
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.1.12";
+var version = "2.1.14";
 //#endregion
 //#region src/sig/accept.ts
 /**
@@ -496,6 +496,7 @@ async function fetchKeyInternal(keyId, cls, options = {}) {
 //#endregion
 //#region src/sig/http.ts
 const DEFAULT_MAX_REDIRECTION = 20;
+const DOUBLE_KNOCK_TRANSPORT_RETRY_DELAY_MS = 100;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -1324,6 +1325,59 @@ function createRedirectRequest(request, location, body) {
 		cache: request.cache
 	});
 }
+async function fetchDoubleKnockRequest(request, signedRequest, signal) {
+	const maxAttempts = request.method === "GET" || request.method === "HEAD" ? 2 : 1;
+	for (let attempt = 1;; attempt++) try {
+		return await fetch(signedRequest, {
+			redirect: "manual",
+			signal
+		});
+	} catch (error) {
+		const abortedSignal = getAbortedSignal(signal, request.signal, signedRequest.signal);
+		if (abortedSignal != null) throw getAbortReason(abortedSignal);
+		if (isAbortError(error)) throw error;
+		if (attempt >= maxAttempts) throw createFetchError(request.url, error);
+		await sleep(DOUBLE_KNOCK_TRANSPORT_RETRY_DELAY_MS, signal, request.signal, signedRequest.signal);
+	}
+}
+function createFetchError(url, cause) {
+	const error = new FetchError(url, cause instanceof Error ? cause.message : String(cause));
+	error.cause = cause;
+	return error;
+}
+function isAbortError(error) {
+	return error instanceof Error && error.name === "AbortError";
+}
+async function sleep(ms, ...signals) {
+	const abortSignals = signals.filter((signal) => signal != null);
+	const abortedSignal = getAbortedSignal(...abortSignals);
+	if (abortedSignal != null) throw getAbortReason(abortedSignal);
+	if (abortSignals.length < 1) {
+		await new Promise((resolve) => setTimeout(resolve, ms));
+		return;
+	}
+	await new Promise((resolve, reject) => {
+		const removeAbortListeners = () => {
+			for (const signal of abortSignals) signal.removeEventListener("abort", handleAbort);
+		};
+		const timeout = setTimeout(() => {
+			removeAbortListeners();
+			resolve();
+		}, ms);
+		function handleAbort(event) {
+			clearTimeout(timeout);
+			removeAbortListeners();
+			reject(getAbortReason(event.currentTarget));
+		}
+		for (const signal of abortSignals) signal.addEventListener("abort", handleAbort, { once: true });
+	});
+}
+function getAbortedSignal(...signals) {
+	return signals.find((signal) => signal?.aborted);
+}
+function getAbortReason(signal) {
+	return signal.reason ?? new DOMException("The operation was aborted.", "AbortError");
+}
 /**
 * Performs a double-knock request to the given URL.  For the details of
 * double-knocking, see
@@ -1349,10 +1403,7 @@ async function doubleKnockInternal(request, identity, options, redirected = 0, v
 		body
 	});
 	log?.(signedRequest);
-	let response = await fetch(signedRequest, {
-		redirect: "manual",
-		signal
-	});
+	let response = await fetchDoubleKnockRequest(request, signedRequest, signal);
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const redirectRequest = createRedirectRequest(request, response.headers.get("Location"), body);
@@ -1427,10 +1478,7 @@ async function doubleKnockInternal(request, identity, options, redirected = 0, v
 			body
 		});
 		log?.(signedRequest);
-		response = await fetch(signedRequest, {
-			redirect: "manual",
-			signal
-		});
+		response = await fetchDoubleKnockRequest(request, signedRequest, signal);
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const redirectRequest = createRedirectRequest(request, response.headers.get("Location"), body);

package/dist/{http-DRDpStn2.mjs → http-DvhFwy2E.mjs}

@@ -1,9 +1,9 @@
 import { Temporal } from "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-Ddb3P7G7.mjs";
+import { n as version, t as name } from "./deno-bqnW1QlD.mjs";
 import { i as validateAcceptSignature, n as fulfillAcceptSignature, r as parseAcceptSignature } from "./accept-Dd__NiUL.mjs";
-import { o as validateCryptoKey, r as fetchKeyDetailed } from "./key-WSedbAA-.mjs";
+import { o as validateCryptoKey, r as fetchKeyDetailed } from "./key-B3OBz6A_.mjs";
 import { CryptographicKey } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { FetchError } from "@fedify/vocab-runtime";
@@ -14,6 +14,7 @@ import { encodeHex } from "byte-encodings/hex";
 import { Item, decodeDict, encodeItem } from "structured-field-values";
 //#region src/sig/http.ts
 const DEFAULT_MAX_REDIRECTION = 20;
+const DOUBLE_KNOCK_TRANSPORT_RETRY_DELAY_MS = 100;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -842,6 +843,59 @@ function createRedirectRequest(request, location, body) {
 		cache: request.cache
 	});
 }
+async function fetchDoubleKnockRequest(request, signedRequest, signal) {
+	const maxAttempts = request.method === "GET" || request.method === "HEAD" ? 2 : 1;
+	for (let attempt = 1;; attempt++) try {
+		return await fetch(signedRequest, {
+			redirect: "manual",
+			signal
+		});
+	} catch (error) {
+		const abortedSignal = getAbortedSignal(signal, request.signal, signedRequest.signal);
+		if (abortedSignal != null) throw getAbortReason(abortedSignal);
+		if (isAbortError(error)) throw error;
+		if (attempt >= maxAttempts) throw createFetchError(request.url, error);
+		await sleep(DOUBLE_KNOCK_TRANSPORT_RETRY_DELAY_MS, signal, request.signal, signedRequest.signal);
+	}
+}
+function createFetchError(url, cause) {
+	const error = new FetchError(url, cause instanceof Error ? cause.message : String(cause));
+	error.cause = cause;
+	return error;
+}
+function isAbortError(error) {
+	return error instanceof Error && error.name === "AbortError";
+}
+async function sleep(ms, ...signals) {
+	const abortSignals = signals.filter((signal) => signal != null);
+	const abortedSignal = getAbortedSignal(...abortSignals);
+	if (abortedSignal != null) throw getAbortReason(abortedSignal);
+	if (abortSignals.length < 1) {
+		await new Promise((resolve) => setTimeout(resolve, ms));
+		return;
+	}
+	await new Promise((resolve, reject) => {
+		const removeAbortListeners = () => {
+			for (const signal of abortSignals) signal.removeEventListener("abort", handleAbort);
+		};
+		const timeout = setTimeout(() => {
+			removeAbortListeners();
+			resolve();
+		}, ms);
+		function handleAbort(event) {
+			clearTimeout(timeout);
+			removeAbortListeners();
+			reject(getAbortReason(event.currentTarget));
+		}
+		for (const signal of abortSignals) signal.addEventListener("abort", handleAbort, { once: true });
+	});
+}
+function getAbortedSignal(...signals) {
+	return signals.find((signal) => signal?.aborted);
+}
+function getAbortReason(signal) {
+	return signal.reason ?? new DOMException("The operation was aborted.", "AbortError");
+}
 /**
 * Performs a double-knock request to the given URL.  For the details of
 * double-knocking, see
@@ -867,10 +921,7 @@ async function doubleKnockInternal(request, identity, options, redirected = 0, v
 		body
 	});
 	log?.(signedRequest);
-	let response = await fetch(signedRequest, {
-		redirect: "manual",
-		signal
-	});
+	let response = await fetchDoubleKnockRequest(request, signedRequest, signal);
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 		if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const redirectRequest = createRedirectRequest(request, response.headers.get("Location"), body);
@@ -945,10 +996,7 @@ async function doubleKnockInternal(request, identity, options, redirected = 0, v
 			body
 		});
 		log?.(signedRequest);
-		response = await fetch(signedRequest, {
-			redirect: "manual",
-			signal
-		});
+		response = await fetchDoubleKnockRequest(request, signedRequest, signal);
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
 			if (redirected >= DEFAULT_MAX_REDIRECTION) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const redirectRequest = createRedirectRequest(request, response.headers.get("Location"), body);

package/dist/{inbox-DTuPJEma.mjs → inbox-7b3VYnec.mjs}

@@ -1,7 +1,7 @@
 import { Temporal } from "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-Ddb3P7G7.mjs";
+import { n as version, t as name } from "./deno-bqnW1QlD.mjs";
 import { Activity, getTypeId } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
 import { getLogger } from "@logtape/logtape";
@@ -39,7 +39,7 @@ var InboxListenerSet = class InboxListenerSet {
 		return this.dispatchWithClass(activity)?.listener ?? null;
 	}
 };
-async function routeActivity({ context: ctx, json, activity, recipient, inboxListeners, inboxContextFactory, inboxErrorHandler, kv, kvPrefixes, queue, span, tracerProvider, idempotencyStrategy }) {
+async function routeActivity({ context: ctx, json, originalJson, normalizedActivity, ldSignatureVerified, activity, recipient, inboxListeners, inboxContextFactory, listenerInboxContextFactory, inboxErrorHandler, kv, kvPrefixes, queue, span, tracerProvider, idempotencyStrategy }) {
 	const logger = getLogger([
 		"fedify",
 		"federation",
@@ -96,7 +96,9 @@ async function routeActivity({ context: ctx, json, activity, recipient, inboxLis
 				type: "inbox",
 				id: crypto.randomUUID(),
 				baseUrl: ctx.origin,
-				activity: json,
+				activity: originalJson ?? json,
+				...normalizedActivity == null ? {} : { normalizedActivity },
+				...ldSignatureVerified == null ? {} : { ldSignatureVerified },
 				identifier: recipient,
 				attempt: 0,
 				started: (/* @__PURE__ */ new Date()).toISOString(),
@@ -140,7 +142,8 @@ async function routeActivity({ context: ctx, json, activity, recipient, inboxLis
 		const { class: cls, listener } = dispatched;
 		span.updateName(`activitypub.dispatch_inbox_listener ${cls.name}`);
 		try {
-			await listener(inboxContextFactory(recipient, json, activity?.id?.href, getTypeId(activity).href), activity);
+			const contextFactory = listenerInboxContextFactory ?? inboxContextFactory;
+			await listener(contextFactory(recipient, contextFactory === inboxContextFactory ? json : originalJson ?? json, activity?.id?.href, getTypeId(activity).href), activity);
 		} catch (error) {
 			try {
 				await inboxErrorHandler?.(ctx, error);

package/dist/{key-WSedbAA-.mjs → key-B3OBz6A_.mjs}

@@ -1,7 +1,7 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-Ddb3P7G7.mjs";
+import { n as version, t as name } from "./deno-bqnW1QlD.mjs";
 import { CryptographicKey, Object as Object$1, isActor } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 import { FetchError, getDocumentLoader } from "@fedify/vocab-runtime";

package/dist/{kv-CbLNp3zQ.d.cts → kv-D6hNiMTK.d.ts}

@@ -1,3 +1,4 @@
+/// <reference lib="esnext.temporal" />
 //#region src/federation/kv.d.ts
 /**
 * A key for a key–value store.  An array of one or more strings.

package/dist/{kv-cache-9cdQDeT0.cjs → kv-cache-BIapFiSV.cjs}

@@ -1,7 +1,7 @@
 const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
 require("./chunk-DDcVe30Y.cjs");
-const require_http = require("./http-CmDErAnD.cjs");
+const require_http = require("./http-CEXtUHix.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let es_toolkit = require("es-toolkit");
 let _fedify_vocab_runtime = require("@fedify/vocab-runtime");
@@ -97,7 +97,7 @@ function kvCache({ loader, kv, prefix, rules }) {
 }
 function matchRule(url, rules) {
 	for (const [pattern, d] of rules) {
-		const duration = d instanceof Temporal.Duration ? d : Temporal.Duration.from(d);
+		const duration = Temporal.Duration.from(d);
 		if (typeof pattern === "string") {
 			if (url === pattern) return duration;
 			continue;

package/dist/{kv-cache-DNNRFY8u.js → kv-cache-C6nynGhh.js}

@@ -1,6 +1,6 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { d as validateCryptoKey, t as doubleKnock } from "./http-qKyJKSnF.js";
+import { d as validateCryptoKey, t as doubleKnock } from "./http-Cw1EorUA.js";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, preloadedContexts, validatePublicUrl } from "@fedify/vocab-runtime";
@@ -96,7 +96,7 @@ function kvCache({ loader, kv, prefix, rules }) {
 }
 function matchRule(url, rules) {
 	for (const [pattern, d] of rules) {
-		const duration = d instanceof Temporal.Duration ? d : Temporal.Duration.from(d);
+		const duration = Temporal.Duration.from(d);
 		if (typeof pattern === "string") {
 			if (url === pattern) return duration;
 			continue;

package/dist/{kv-cache-B01V7s3h.mjs → kv-cache-FsT1ljhs.mjs}

@@ -86,7 +86,7 @@ function kvCache({ loader, kv, prefix, rules }) {
 }
 function matchRule(url, rules) {
 	for (const [pattern, d] of rules) {
-		const duration = d instanceof Temporal.Duration ? d : Temporal.Duration.from(d);
+		const duration = Temporal.Duration.from(d);
 		if (typeof pattern === "string") {
 			if (url === pattern) return duration;
 			continue;

package/dist/{kv-GFYnFoOl.d.ts → kv-gJ8LYbxX.d.cts}

@@ -1,6 +1,4 @@
-import { Temporal } from "@js-temporal/polyfill";
-import { URLPattern } from "urlpattern-polyfill";
-
+/// <reference lib="esnext.temporal" />
 //#region src/federation/kv.d.ts
 /**
 * A key for a key–value store.  An array of one or more strings.