@fedify/fedify 2.2.0-dev.606 → 2.2.0-dev.610

package/dist/{builder-CELIfoB4.js → builder-Bkqx5fo0.js}

@@ -3,9 +3,9 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-BOsDbqu7.js";
+import { deno_default } from "./deno-CMcbjYDs.js";
 import { Router, RouterError } from "./router-D9eI0s4b.js";
-import { InboxListenerSet } from "./inbox-Z8XmcoSP.js";
+import { InboxListenerSet } from "./inbox-CTJeEur6.js";
 import { getTypeId } from "@fedify/vocab";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
@@ -46,7 +46,7 @@ var FederationBuilderImpl = class {
 		this.collectionTypeIds = {};
 	}
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-DwgaVw-g.js");
+		const { FederationImpl } = await import("./middleware-HlNnBIDX.js");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();

package/dist/compat/transformers.test.js

@@ -7,26 +7,26 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-BOsDbqu7.js";
-import { FederationImpl, actorDehydrator, autoIdAssigner } from "../middleware-C35-lW8-.js";
+import "../deno-CMcbjYDs.js";
+import { FederationImpl, actorDehydrator, autoIdAssigner } from "../middleware-DRWIaDqh.js";
 import "../client-CoCIaTNO.js";
 import "../router-D9eI0s4b.js";
 import "../types-CPz01LGH.js";
 import "../accept-D7sAxyNa.js";
-import "../key-CZwef9_o.js";
-import "../http-Cfw-SN_z.js";
-import "../ld-BqCzzscX.js";
-import "../owner-Bx4dZ83W.js";
-import "../proof-Fy5Gl4Ca.js";
-import "../docloader-BcEPmNUR.js";
+import "../key-OaS_196P.js";
+import "../http-By9CCocC.js";
+import "../ld-5udwE1JY.js";
+import "../owner-DuRG_QYg.js";
+import "../proof-DFffIwhK.js";
+import "../docloader-ORTT1bPi.js";
 import "../kv-cache-Bw2F2ABq.js";
-import "../inbox-Z8XmcoSP.js";
-import "../builder-CELIfoB4.js";
+import "../inbox-CTJeEur6.js";
+import "../builder-Bkqx5fo0.js";
 import "../collection-CSzG2j1P.js";
 import "../keycache-CpGWAUbj.js";
 import "../negotiation-BlAuS_nr.js";
 import "../retry-mqLf4b-R.js";
-import "../send-CGZHxQYq.js";
+import "../send-CJAMZwWu.js";
 import { test } from "@fedify/fixture";
 import { Follow, Person } from "@fedify/vocab";
 

package/dist/{deno-BOsDbqu7.js → deno-CMcbjYDs.js}

@@ -5,7 +5,7 @@
     
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.2.0-dev.606+3a976326";
+var version = "2.2.0-dev.610+2d418352";
 var license = "MIT";
 var exports = {
 	".": "./src/mod.ts",

package/dist/{docloader-BcEPmNUR.js → docloader-ORTT1bPi.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { validateCryptoKey } from "./key-CZwef9_o.js";
-import { doubleKnock } from "./http-Cfw-SN_z.js";
+import { validateCryptoKey } from "./key-OaS_196P.js";
+import { doubleKnock } from "./http-By9CCocC.js";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, validatePublicUrl } from "@fedify/vocab-runtime";
 import { getLogger } from "@logtape/logtape";
@@ -26,7 +26,7 @@ const logger = getLogger([
 * @throws {TypeError} If the key is invalid or unsupported.
 * @since 0.4.0
 */
-function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, userAgent, specDeterminer, tracerProvider } = {}) {
+function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, maxRedirection, userAgent, specDeterminer, tracerProvider } = {}) {
 	validateCryptoKey(identity.privateKey);
 	async function load(url, options) {
 		if (!allowPrivateAddress) try {
@@ -40,6 +40,7 @@ function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, userAge
 		}
 		const originalRequest = createActivityPubRequest(url, { userAgent });
 		const response = await doubleKnock(originalRequest, identity, {
+			maxRedirection,
 			specDeterminer,
 			log: curry(logRequest)(logger),
 			tracerProvider,

package/dist/federation/builder.test.js

@@ -7,10 +7,10 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-BOsDbqu7.js";
+import "../deno-CMcbjYDs.js";
 import "../router-D9eI0s4b.js";
-import "../inbox-Z8XmcoSP.js";
-import { createFederationBuilder } from "../builder-CELIfoB4.js";
+import "../inbox-CTJeEur6.js";
+import { createFederationBuilder } from "../builder-Bkqx5fo0.js";
 import { assertExists } from "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-0h7I2Esa.js";
 import { assertThrows } from "../assert_throws-rjdMBf31.js";

package/dist/federation/handler.test.js

@@ -7,26 +7,26 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-BOsDbqu7.js";
-import { createFederation, handleActor, handleCollection, handleCustomCollection, handleInbox, handleObject, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-C35-lW8-.js";
+import "../deno-CMcbjYDs.js";
+import { createFederation, handleActor, handleCollection, handleCustomCollection, handleInbox, handleObject, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-DRWIaDqh.js";
 import "../client-CoCIaTNO.js";
 import "../router-D9eI0s4b.js";
 import "../types-CPz01LGH.js";
 import { parseAcceptSignature } from "../accept-D7sAxyNa.js";
-import "../key-CZwef9_o.js";
-import { signRequest } from "../http-Cfw-SN_z.js";
-import "../ld-BqCzzscX.js";
-import "../owner-Bx4dZ83W.js";
-import "../proof-Fy5Gl4Ca.js";
-import "../docloader-BcEPmNUR.js";
+import "../key-OaS_196P.js";
+import { signRequest } from "../http-By9CCocC.js";
+import "../ld-5udwE1JY.js";
+import "../owner-DuRG_QYg.js";
+import "../proof-DFffIwhK.js";
+import "../docloader-ORTT1bPi.js";
 import "../kv-cache-Bw2F2ABq.js";
-import { InboxListenerSet } from "../inbox-Z8XmcoSP.js";
-import "../builder-CELIfoB4.js";
+import { InboxListenerSet } from "../inbox-CTJeEur6.js";
+import "../builder-Bkqx5fo0.js";
 import "../collection-CSzG2j1P.js";
 import "../keycache-CpGWAUbj.js";
 import "../negotiation-BlAuS_nr.js";
 import "../retry-mqLf4b-R.js";
-import "../send-CGZHxQYq.js";
+import "../send-CJAMZwWu.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-0h7I2Esa.js";
 import "../assert_throws-rjdMBf31.js";

package/dist/federation/idempotency.test.js

@@ -7,26 +7,26 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-BOsDbqu7.js";
-import { createFederation } from "../middleware-C35-lW8-.js";
+import "../deno-CMcbjYDs.js";
+import { createFederation } from "../middleware-DRWIaDqh.js";
 import "../client-CoCIaTNO.js";
 import "../router-D9eI0s4b.js";
 import "../types-CPz01LGH.js";
 import "../accept-D7sAxyNa.js";
-import "../key-CZwef9_o.js";
-import "../http-Cfw-SN_z.js";
-import "../ld-BqCzzscX.js";
-import "../owner-Bx4dZ83W.js";
-import { signObject } from "../proof-Fy5Gl4Ca.js";
-import "../docloader-BcEPmNUR.js";
+import "../key-OaS_196P.js";
+import "../http-By9CCocC.js";
+import "../ld-5udwE1JY.js";
+import "../owner-DuRG_QYg.js";
+import { signObject } from "../proof-DFffIwhK.js";
+import "../docloader-ORTT1bPi.js";
 import "../kv-cache-Bw2F2ABq.js";
-import "../inbox-Z8XmcoSP.js";
-import "../builder-CELIfoB4.js";
+import "../inbox-CTJeEur6.js";
+import "../builder-Bkqx5fo0.js";
 import "../collection-CSzG2j1P.js";
 import "../keycache-CpGWAUbj.js";
 import "../negotiation-BlAuS_nr.js";
 import "../retry-mqLf4b-R.js";
-import "../send-CGZHxQYq.js";
+import "../send-CJAMZwWu.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-0h7I2Esa.js";
 import "../assert_throws-rjdMBf31.js";

package/dist/federation/inbox.test.js

@@ -4,8 +4,8 @@
       globalThis.addEventListener = () => {};
     
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
-import "../deno-BOsDbqu7.js";
-import { InboxListenerSet } from "../inbox-Z8XmcoSP.js";
+import "../deno-CMcbjYDs.js";
+import { InboxListenerSet } from "../inbox-CTJeEur6.js";
 import { assertThrows } from "../assert_throws-rjdMBf31.js";
 import { test } from "@fedify/fixture";
 import { Activity, Create, Invite, Offer, Update } from "@fedify/vocab";

package/dist/federation/middleware.test.js

@@ -8,26 +8,26 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-BOsDbqu7.js";
-import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "../middleware-C35-lW8-.js";
+import "../deno-CMcbjYDs.js";
+import { ContextImpl, FederationImpl, InboxContextImpl, KvSpecDeterminer, createFederation } from "../middleware-DRWIaDqh.js";
 import "../client-CoCIaTNO.js";
 import { RouterError } from "../router-D9eI0s4b.js";
 import "../types-CPz01LGH.js";
 import "../accept-D7sAxyNa.js";
-import "../key-CZwef9_o.js";
-import { signRequest, verifyRequest } from "../http-Cfw-SN_z.js";
-import { detachSignature, signJsonLd, verifyJsonLd } from "../ld-BqCzzscX.js";
-import { doesActorOwnKey } from "../owner-Bx4dZ83W.js";
-import { signObject, verifyObject } from "../proof-Fy5Gl4Ca.js";
-import { getAuthenticatedDocumentLoader } from "../docloader-BcEPmNUR.js";
+import "../key-OaS_196P.js";
+import { signRequest, verifyRequest } from "../http-By9CCocC.js";
+import { detachSignature, signJsonLd, verifyJsonLd } from "../ld-5udwE1JY.js";
+import { doesActorOwnKey } from "../owner-DuRG_QYg.js";
+import { signObject, verifyObject } from "../proof-DFffIwhK.js";
+import { getAuthenticatedDocumentLoader } from "../docloader-ORTT1bPi.js";
 import "../kv-cache-Bw2F2ABq.js";
-import "../inbox-Z8XmcoSP.js";
-import "../builder-CELIfoB4.js";
+import "../inbox-CTJeEur6.js";
+import "../builder-Bkqx5fo0.js";
 import "../collection-CSzG2j1P.js";
 import "../keycache-CpGWAUbj.js";
 import "../negotiation-BlAuS_nr.js";
 import "../retry-mqLf4b-R.js";
-import "../send-CGZHxQYq.js";
+import "../send-CJAMZwWu.js";
 import { assertStrictEquals } from "../std__assert-X-_kMxKM.js";
 import { assertFalse, assertRejects } from "../assert_rejects-0h7I2Esa.js";
 import { assertThrows } from "../assert_throws-rjdMBf31.js";

package/dist/federation/mod.cjs

@@ -3,12 +3,12 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 require('../transformers-3g8GZwkZ.cjs');
-require('../http-BVFyeQBR.cjs');
-const require_middleware = require('../middleware-D0hhdxhW.cjs');
-require('../proof-BYXeAOLF.cjs');
+require('../http-BDf1pBmE.cjs');
+const require_middleware = require('../middleware-CFuio6Y_.cjs');
+require('../proof-WJjJMjvC.cjs');
 const require_federation = require('../federation-Bp3HI26G.cjs');
 require('../types-Cd_hszr_.cjs');
-require('../kv-cache-CeTLZBik.cjs');
+require('../kv-cache-DG491NbS.cjs');
 
 exports.InProcessMessageQueue = require_federation.InProcessMessageQueue;
 exports.MemoryKvStore = require_federation.MemoryKvStore;

package/dist/federation/mod.js

@@ -3,11 +3,11 @@
           import { URLPattern } from "urlpattern-polyfill";
         
 import "../transformers-C3FLHUd6.js";
-import "../http-tl74Wmu6.js";
-import { Router, RouterError, SendActivityError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-Dw4qprvi.js";
-import "../proof-CeR_dKsx.js";
+import "../http-DLQMXj_1.js";
+import { Router, RouterError, SendActivityError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-3FSu2a2W.js";
+import "../proof-DG0_Hm4d.js";
 import { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue } from "../federation-DaMfqRm4.js";
 import "../types-C93Ob9cU.js";
-import "../kv-cache-BHtrhC_A.js";
+import "../kv-cache-COnBmjEC.js";
 
 export { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue, Router, RouterError, SendActivityError, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, respondWithObject, respondWithObjectIfAcceptable };

package/dist/federation/send.test.js

@@ -7,12 +7,12 @@ import { esm_default } from "../esm-nLm00z9V.js";
 import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import { assert } from "../assert-MZs1qjMx.js";
 import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
-import "../deno-BOsDbqu7.js";
+import "../deno-CMcbjYDs.js";
 import "../accept-D7sAxyNa.js";
-import "../key-CZwef9_o.js";
-import { verifyRequest } from "../http-Cfw-SN_z.js";
-import { doesActorOwnKey } from "../owner-Bx4dZ83W.js";
-import { SendActivityError, extractInboxes, sendActivity } from "../send-CGZHxQYq.js";
+import "../key-OaS_196P.js";
+import { verifyRequest } from "../http-By9CCocC.js";
+import { doesActorOwnKey } from "../owner-DuRG_QYg.js";
+import { SendActivityError, extractInboxes, sendActivity } from "../send-CJAMZwWu.js";
 import "../std__assert-X-_kMxKM.js";
 import { assertFalse, assertRejects } from "../assert_rejects-0h7I2Esa.js";
 import "../assert_throws-rjdMBf31.js";

package/dist/federation/webfinger.test.js

@@ -7,26 +7,26 @@ import { assertEquals } from "../assert_equals-DSbWqCm3.js";
 import "../assert-MZs1qjMx.js";
 import "../assert_instance_of-DHz7EHNU.js";
 import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-BOsDbqu7.js";
-import { createFederation, handleWebFinger } from "../middleware-C35-lW8-.js";
+import "../deno-CMcbjYDs.js";
+import { createFederation, handleWebFinger } from "../middleware-DRWIaDqh.js";
 import "../client-CoCIaTNO.js";
 import "../router-D9eI0s4b.js";
 import "../types-CPz01LGH.js";
 import "../accept-D7sAxyNa.js";
-import "../key-CZwef9_o.js";
-import "../http-Cfw-SN_z.js";
-import "../ld-BqCzzscX.js";
-import "../owner-Bx4dZ83W.js";
-import "../proof-Fy5Gl4Ca.js";
-import "../docloader-BcEPmNUR.js";
+import "../key-OaS_196P.js";
+import "../http-By9CCocC.js";
+import "../ld-5udwE1JY.js";
+import "../owner-DuRG_QYg.js";
+import "../proof-DFffIwhK.js";
+import "../docloader-ORTT1bPi.js";
 import "../kv-cache-Bw2F2ABq.js";
-import "../inbox-Z8XmcoSP.js";
-import "../builder-CELIfoB4.js";
+import "../inbox-CTJeEur6.js";
+import "../builder-Bkqx5fo0.js";
 import "../collection-CSzG2j1P.js";
 import "../keycache-CpGWAUbj.js";
 import "../negotiation-BlAuS_nr.js";
 import "../retry-mqLf4b-R.js";
-import "../send-CGZHxQYq.js";
+import "../send-CJAMZwWu.js";
 import "../std__assert-X-_kMxKM.js";
 import "../assert_rejects-0h7I2Esa.js";
 import "../assert_throws-rjdMBf31.js";

package/dist/{http-BVFyeQBR.cjs → http-BDf1pBmE.cjs}

@@ -8,13 +8,13 @@ const __fedify_vocab = require_chunk.__toESM(require("@fedify/vocab"));
 const __opentelemetry_api = require_chunk.__toESM(require("@opentelemetry/api"));
 const byte_encodings_hex = require_chunk.__toESM(require("byte-encodings/hex"));
 const structured_field_values = require_chunk.__toESM(require("structured-field-values"));
+const __fedify_vocab_runtime = require_chunk.__toESM(require("@fedify/vocab-runtime"));
 const __opentelemetry_semantic_conventions = require_chunk.__toESM(require("@opentelemetry/semantic-conventions"));
 const byte_encodings_base64 = require_chunk.__toESM(require("byte-encodings/base64"));
-const __fedify_vocab_runtime = require_chunk.__toESM(require("@fedify/vocab-runtime"));
 
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.2.0-dev.606+3a976326";
+var version = "2.2.0-dev.610+2d418352";
 var license = "MIT";
 var exports$1 = {
 	".": "./src/mod.ts",
@@ -610,6 +610,7 @@ async function fetchKeyInternal(keyId, cls, options = {}) {
 
 //#endregion
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -1460,7 +1461,12 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	const maximumRedirection = options.maxRedirection ?? DEFAULT_MAX_REDIRECTION;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -1475,11 +1481,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= maximumRedirection) throw new __fedify_vocab_runtime.FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new __fedify_vocab_runtime.FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const logger = (0, __logtape_logtape.getLogger)([
 			"fedify",
@@ -1554,11 +1563,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= maximumRedirection) throw new __fedify_vocab_runtime.FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new __fedify_vocab_runtime.FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{http-Cfw-SN_z.js → http-By9CCocC.js}

@@ -3,10 +3,11 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-BOsDbqu7.js";
+import { deno_default } from "./deno-CMcbjYDs.js";
 import { fulfillAcceptSignature, parseAcceptSignature, validateAcceptSignature } from "./accept-D7sAxyNa.js";
-import { fetchKeyDetailed, validateCryptoKey } from "./key-CZwef9_o.js";
+import { fetchKeyDetailed, validateCryptoKey } from "./key-OaS_196P.js";
 import { CryptographicKey } from "@fedify/vocab";
+import { FetchError } from "@fedify/vocab-runtime";
 import { getLogger } from "@logtape/logtape";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
@@ -15,6 +16,7 @@ import { encodeHex } from "byte-encodings/hex";
 import { Item, decodeDict, encodeItem } from "structured-field-values";
 
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -865,7 +867,12 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	const maximumRedirection = options.maxRedirection ?? DEFAULT_MAX_REDIRECTION;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -880,11 +887,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= maximumRedirection) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const logger = getLogger([
 			"fedify",
@@ -959,11 +969,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= maximumRedirection) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{http-tl74Wmu6.js → http-DLQMXj_1.js}

@@ -7,13 +7,13 @@ import { CryptographicKey, Object as Object$1, isActor } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 import { encodeHex } from "byte-encodings/hex";
 import { Item, decodeDict, encodeDict, encodeItem } from "structured-field-values";
+import { FetchError, getDocumentLoader } from "@fedify/vocab-runtime";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
-import { FetchError, getDocumentLoader } from "@fedify/vocab-runtime";
 
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.2.0-dev.606+3a976326";
+var version = "2.2.0-dev.610+2d418352";
 var license = "MIT";
 var exports = {
 	".": "./src/mod.ts",
@@ -609,6 +609,7 @@ async function fetchKeyInternal(keyId, cls, options = {}) {
 
 //#endregion
 //#region src/sig/http.ts
+const DEFAULT_MAX_REDIRECTION = 20;
 /**
 * Signs a request using the given private key.
 * @param request The request to sign.
@@ -1459,7 +1460,12 @@ function createRedirectRequest(request, location, body) {
 * @since 1.6.0
 */
 async function doubleKnock(request, identity, options = {}) {
+	return await doubleKnockInternal(request, identity, options);
+}
+async function doubleKnockInternal(request, identity, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 	const { specDeterminer, log, tracerProvider, signal } = options;
+	const maximumRedirection = options.maxRedirection ?? DEFAULT_MAX_REDIRECTION;
+	visited.add(request.url);
 	const origin = new URL(request.url).origin;
 	const firstTrySpec = specDeterminer == null ? "rfc9421" : await specDeterminer.determineSpec(origin);
 	const body = options.body !== void 0 ? options.body : request.method !== "GET" && request.method !== "HEAD" ? await request.clone().arrayBuffer() : null;
@@ -1474,11 +1480,14 @@ async function doubleKnock(request, identity, options = {}) {
 		signal
 	});
 	if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+		if (redirected >= maximumRedirection) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 		const location = response.headers.get("Location");
-		return doubleKnock(createRedirectRequest(request, location, body), identity, {
+		const redirectRequest = createRedirectRequest(request, location, body);
+		if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+		return doubleKnockInternal(redirectRequest, identity, {
 			...options,
 			body
-		});
+		}, redirected + 1, visited);
 	} else if (response.status === 400 || response.status === 401 || response.status > 401) {
 		const logger = getLogger([
 			"fedify",
@@ -1553,11 +1562,14 @@ async function doubleKnock(request, identity, options = {}) {
 			signal
 		});
 		if (response.status >= 300 && response.status < 400 && response.headers.has("Location")) {
+			if (redirected >= maximumRedirection) throw new FetchError(request.url, `Too many redirections (${redirected + 1})`);
 			const location = response.headers.get("Location");
-			return doubleKnock(createRedirectRequest(request, location, body), identity, {
+			const redirectRequest = createRedirectRequest(request, location, body);
+			if (visited.has(redirectRequest.url)) throw new FetchError(request.url, `Redirect loop detected: ${redirectRequest.url}`);
+			return doubleKnockInternal(redirectRequest, identity, {
 				...options,
 				body
-			});
+			}, redirected + 1, visited);
 		} else if (response.status !== 400 && response.status !== 401) await specDeterminer?.rememberSpec(origin, spec);
 	} else await specDeterminer?.rememberSpec(origin, firstTrySpec);
 	return response;

package/dist/{inbox-Z8XmcoSP.js → inbox-CTJeEur6.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-BOsDbqu7.js";
+import { deno_default } from "./deno-CMcbjYDs.js";
 import { Activity, getTypeId } from "@fedify/vocab";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";

package/dist/{key-CZwef9_o.js → key-OaS_196P.js}

@@ -3,7 +3,7 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-BOsDbqu7.js";
+import { deno_default } from "./deno-CMcbjYDs.js";
 import { CryptographicKey, Object as Object$1, isActor } from "@fedify/vocab";
 import { FetchError, getDocumentLoader } from "@fedify/vocab-runtime";
 import { getLogger } from "@logtape/logtape";

package/dist/{kv-cache-BHtrhC_A.js → kv-cache-COnBmjEC.js}

@@ -2,7 +2,7 @@
           import { Temporal } from "@js-temporal/polyfill";
           import { URLPattern } from "urlpattern-polyfill";
         
-import { doubleKnock, validateCryptoKey } from "./http-tl74Wmu6.js";
+import { doubleKnock, validateCryptoKey } from "./http-DLQMXj_1.js";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, preloadedContexts, validatePublicUrl } from "@fedify/vocab-runtime";
@@ -24,7 +24,7 @@ const logger$1 = getLogger([
 * @throws {TypeError} If the key is invalid or unsupported.
 * @since 0.4.0
 */
-function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, userAgent, specDeterminer, tracerProvider } = {}) {
+function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, maxRedirection, userAgent, specDeterminer, tracerProvider } = {}) {
 	validateCryptoKey(identity.privateKey);
 	async function load(url, options) {
 		if (!allowPrivateAddress) try {
@@ -38,6 +38,7 @@ function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, userAge
 		}
 		const originalRequest = createActivityPubRequest(url, { userAgent });
 		const response = await doubleKnock(originalRequest, identity, {
+			maxRedirection,
 			specDeterminer,
 			log: curry(logRequest)(logger$1),
 			tracerProvider,

package/dist/{kv-cache-CeTLZBik.cjs → kv-cache-DG491NbS.cjs}

@@ -3,7 +3,7 @@
           const { URLPattern } = require("urlpattern-polyfill");
         
 const require_chunk = require('./chunk-CGaQZ11T.cjs');
-const require_http = require('./http-BVFyeQBR.cjs');
+const require_http = require('./http-BDf1pBmE.cjs');
 const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
 const es_toolkit = require_chunk.__toESM(require("es-toolkit"));
 const __fedify_vocab_runtime = require_chunk.__toESM(require("@fedify/vocab-runtime"));
@@ -25,7 +25,7 @@ const logger$1 = (0, __logtape_logtape.getLogger)([
 * @throws {TypeError} If the key is invalid or unsupported.
 * @since 0.4.0
 */
-function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, userAgent, specDeterminer, tracerProvider } = {}) {
+function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, maxRedirection, userAgent, specDeterminer, tracerProvider } = {}) {
 	require_http.validateCryptoKey(identity.privateKey);
 	async function load(url, options) {
 		if (!allowPrivateAddress) try {
@@ -39,6 +39,7 @@ function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, userAge
 		}
 		const originalRequest = (0, __fedify_vocab_runtime.createActivityPubRequest)(url, { userAgent });
 		const response = await require_http.doubleKnock(originalRequest, identity, {
+			maxRedirection,
 			specDeterminer,
 			log: (0, es_toolkit.curry)(__fedify_vocab_runtime.logRequest)(logger$1),
 			tracerProvider,

package/dist/{ld-BqCzzscX.js → ld-5udwE1JY.js}

@@ -3,8 +3,8 @@
       import { URLPattern } from "urlpattern-polyfill";
       globalThis.addEventListener = () => {};
     
-import { deno_default } from "./deno-BOsDbqu7.js";
-import { fetchKey, validateCryptoKey } from "./key-CZwef9_o.js";
+import { deno_default } from "./deno-CMcbjYDs.js";
+import { fetchKey, validateCryptoKey } from "./key-OaS_196P.js";
 import { Activity, CryptographicKey, Object as Object$1, getTypeId } from "@fedify/vocab";
 import { getDocumentLoader } from "@fedify/vocab-runtime";
 import { getLogger } from "@logtape/logtape";