@fedify/fedify 2.3.0-dev.1021 → 2.3.0-dev.1048

package/dist/federation/webfinger.test.mjs

@@ -1,11 +1,11 @@
 import { Temporal } from "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { r as createRequestContext } from "../context-Dk_tacqz.mjs";
+import { r as createRequestContext } from "../context-7Azky82W.mjs";
 import { t as assertEquals } from "../assert_equals-Ew3jOFa3.mjs";
 import "../std__assert-CRDpx_HF.mjs";
-import { t as MemoryKvStore } from "../kv-rV3vodCc.mjs";
-import { o as createFederation, s as handleWebFinger } from "../middleware-BPZEcrMG.mjs";
+import { t as MemoryKvStore } from "../kv-x2IvBUyq.mjs";
+import { o as createFederation, s as handleWebFinger } from "../middleware-THfK90u_.mjs";
 import { test } from "@fedify/fixture";
 import { Image, Link, Person, Tombstone } from "@fedify/vocab";
 //#region src/federation/webfinger.test.ts

package/dist/getMachineId-bsd-DqZ4QRFp.mjs

@@ -0,0 +1,29 @@
+import "@js-temporal/polyfill";
+import "urlpattern-polyfill";
+globalThis.addEventListener = () => {};
+import { n as __require, t as __commonJSMin } from "./chunk-QSgtlS85.mjs";
+import { t as require_execAsync } from "./execAsync-eck5rbtb.mjs";
+//#region ../../node_modules/.pnpm/@opentelemetry+resources@2.5.0_@opentelemetry+api@1.9.0/node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/getMachineId-bsd.js
+var require_getMachineId_bsd = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.getMachineId = void 0;
+	const fs_1 = __require("fs");
+	const execAsync_1 = require_execAsync();
+	const api_1 = __require("@opentelemetry/api");
+	async function getMachineId() {
+		try {
+			return (await fs_1.promises.readFile("/etc/hostid", { encoding: "utf8" })).trim();
+		} catch (e) {
+			api_1.diag.debug(`error reading machine id: ${e}`);
+		}
+		try {
+			return (await (0, execAsync_1.execAsync)("kenv -q smbios.system.uuid")).stdout.trim();
+		} catch (e) {
+			api_1.diag.debug(`error reading machine id: ${e}`);
+		}
+	}
+	exports.getMachineId = getMachineId;
+}));
+//#endregion
+export default require_getMachineId_bsd();
+export {};

package/dist/getMachineId-darwin-DMbbW3m7.mjs

@@ -0,0 +1,26 @@
+import "@js-temporal/polyfill";
+import "urlpattern-polyfill";
+globalThis.addEventListener = () => {};
+import { n as __require, t as __commonJSMin } from "./chunk-QSgtlS85.mjs";
+import { t as require_execAsync } from "./execAsync-eck5rbtb.mjs";
+//#region ../../node_modules/.pnpm/@opentelemetry+resources@2.5.0_@opentelemetry+api@1.9.0/node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/getMachineId-darwin.js
+var require_getMachineId_darwin = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.getMachineId = void 0;
+	const execAsync_1 = require_execAsync();
+	const api_1 = __require("@opentelemetry/api");
+	async function getMachineId() {
+		try {
+			const idLine = (await (0, execAsync_1.execAsync)("ioreg -rd1 -c \"IOPlatformExpertDevice\"")).stdout.split("\n").find((line) => line.includes("IOPlatformUUID"));
+			if (!idLine) return;
+			const parts = idLine.split("\" = \"");
+			if (parts.length === 2) return parts[1].slice(0, -1);
+		} catch (e) {
+			api_1.diag.debug(`error reading machine id: ${e}`);
+		}
+	}
+	exports.getMachineId = getMachineId;
+}));
+//#endregion
+export default require_getMachineId_darwin();
+export {};

package/dist/getMachineId-linux-lyeD2ug3.mjs

@@ -0,0 +1,22 @@
+import "@js-temporal/polyfill";
+import "urlpattern-polyfill";
+globalThis.addEventListener = () => {};
+import { n as __require, t as __commonJSMin } from "./chunk-QSgtlS85.mjs";
+//#region ../../node_modules/.pnpm/@opentelemetry+resources@2.5.0_@opentelemetry+api@1.9.0/node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/getMachineId-linux.js
+var require_getMachineId_linux = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.getMachineId = void 0;
+	const fs_1 = __require("fs");
+	const api_1 = __require("@opentelemetry/api");
+	async function getMachineId() {
+		for (const path of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) try {
+			return (await fs_1.promises.readFile(path, { encoding: "utf8" })).trim();
+		} catch (e) {
+			api_1.diag.debug(`error reading machine id: ${e}`);
+		}
+	}
+	exports.getMachineId = getMachineId;
+}));
+//#endregion
+export default require_getMachineId_linux();
+export {};

package/dist/getMachineId-unsupported-JuKr57jY.mjs

@@ -0,0 +1,17 @@
+import "@js-temporal/polyfill";
+import "urlpattern-polyfill";
+globalThis.addEventListener = () => {};
+import { n as __require, t as __commonJSMin } from "./chunk-QSgtlS85.mjs";
+//#region ../../node_modules/.pnpm/@opentelemetry+resources@2.5.0_@opentelemetry+api@1.9.0/node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/getMachineId-unsupported.js
+var require_getMachineId_unsupported = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.getMachineId = void 0;
+	const api_1 = __require("@opentelemetry/api");
+	async function getMachineId() {
+		api_1.diag.debug("could not read machine-id: unsupported platform");
+	}
+	exports.getMachineId = getMachineId;
+}));
+//#endregion
+export default require_getMachineId_unsupported();
+export {};

package/dist/getMachineId-win-Dxyf5pJq.mjs

@@ -0,0 +1,28 @@
+import "@js-temporal/polyfill";
+import "urlpattern-polyfill";
+globalThis.addEventListener = () => {};
+import { n as __require, t as __commonJSMin } from "./chunk-QSgtlS85.mjs";
+import { t as require_execAsync } from "./execAsync-eck5rbtb.mjs";
+//#region ../../node_modules/.pnpm/@opentelemetry+resources@2.5.0_@opentelemetry+api@1.9.0/node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/getMachineId-win.js
+var require_getMachineId_win = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.getMachineId = void 0;
+	const process = __require("process");
+	const execAsync_1 = require_execAsync();
+	const api_1 = __require("@opentelemetry/api");
+	async function getMachineId() {
+		const args = "QUERY HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography /v MachineGuid";
+		let command = "%windir%\\System32\\REG.exe";
+		if (process.arch === "ia32" && "PROCESSOR_ARCHITEW6432" in process.env) command = "%windir%\\sysnative\\cmd.exe /c " + command;
+		try {
+			const parts = (await (0, execAsync_1.execAsync)(`${command} ${args}`)).stdout.split("REG_SZ");
+			if (parts.length === 2) return parts[1].trim();
+		} catch (e) {
+			api_1.diag.debug(`error reading machine id: ${e}`);
+		}
+	}
+	exports.getMachineId = getMachineId;
+}));
+//#endregion
+export default require_getMachineId_win();
+export {};

package/dist/{http-D4xMqSqO.cjs → http-Bj0uN6d-.cjs}

@@ -11,7 +11,7 @@ let _opentelemetry_semantic_conventions = require("@opentelemetry/semantic-conve
 let byte_encodings_base64 = require("byte-encodings/base64");
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.3.0-dev.1021+ab2fa4a9";
+var version = "2.3.0-dev.1048+2da74497";
 //#endregion
 //#region src/sig/accept.ts
 /**

package/dist/{http-BJ-t29n_.js → http-CA4xKsSY.js}

@@ -10,7 +10,7 @@ import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } fro
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.3.0-dev.1021+ab2fa4a9";
+var version = "2.3.0-dev.1048+2da74497";
 //#endregion
 //#region src/sig/accept.ts
 /**

package/dist/{http-CfToB_iu.mjs → http-D6yvDhyL.mjs}

@@ -1,9 +1,9 @@
 import { Temporal } from "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-BnQyJ03o.mjs";
-import { i as validateAcceptSignature, n as fulfillAcceptSignature, r as parseAcceptSignature } from "./accept-CPkZzmGN.mjs";
-import { o as validateCryptoKey, r as fetchKeyDetailed } from "./key-CeANlo1H.mjs";
+import { n as version, t as name } from "./deno-D9LpbVQR.mjs";
+import { i as validateAcceptSignature, n as fulfillAcceptSignature, r as parseAcceptSignature } from "./accept-CceiKpCy.mjs";
+import { o as validateCryptoKey, r as fetchKeyDetailed } from "./key-BPjHWwyv.mjs";
 import { CryptographicKey } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { FetchError } from "@fedify/vocab-runtime";

package/dist/{key-CeANlo1H.mjs → key-BPjHWwyv.mjs}

@@ -1,7 +1,7 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-BnQyJ03o.mjs";
+import { n as version, t as name } from "./deno-D9LpbVQR.mjs";
 import { CryptographicKey, Object as Object$1, isActor } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 import { FetchError, getDocumentLoader } from "@fedify/vocab-runtime";

package/dist/{kv-cache-DRwOjOkl.cjs → kv-cache-BdSTsjLb.cjs}

@@ -1,7 +1,7 @@
 const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
 require("./chunk-DDcVe30Y.cjs");
-const require_http = require("./http-D4xMqSqO.cjs");
+const require_http = require("./http-Bj0uN6d-.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let es_toolkit = require("es-toolkit");
 let _fedify_vocab_runtime = require("@fedify/vocab-runtime");

package/dist/{kv-cache-B142kDZL.js → kv-cache-DarvCOHt.js}

@@ -1,6 +1,6 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { d as validateCryptoKey, t as doubleKnock } from "./http-BJ-t29n_.js";
+import { d as validateCryptoKey, t as doubleKnock } from "./http-CA4xKsSY.js";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, preloadedContexts, validatePublicUrl } from "@fedify/vocab-runtime";

package/dist/{ld-CUlVC-TS.mjs → ld-D9yQwfkO.mjs}

@@ -1,8 +1,8 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-BnQyJ03o.mjs";
-import { n as fetchKey, o as validateCryptoKey } from "./key-CeANlo1H.mjs";
+import { n as version, t as name } from "./deno-D9LpbVQR.mjs";
+import { n as fetchKey, o as validateCryptoKey } from "./key-BPjHWwyv.mjs";
 import { Activity, CryptographicKey, Object as Object$1, getTypeId } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { getDocumentLoader } from "@fedify/vocab-runtime";

package/dist/{middleware-CysDkaXo.js → middleware-0n0ctSu_.js}

@@ -2,13 +2,13 @@ import { Temporal } from "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 import { t as __exportAll } from "./chunk-nlSIicah.js";
 import { r as getDefaultActivityTransformers } from "./transformers-ve6e2xcg.js";
-import { _ as version, a as verifyRequestDetailed, d as validateCryptoKey, f as formatAcceptSignature, g as name, i as verifyRequest, n as parseRfc9421SignatureInput, o as exportJwk, t as doubleKnock, u as importJwk } from "./http-BJ-t29n_.js";
-import { c as getKeyOwner, d as detachSignature, f as hasSignatureLike, i as verifyObject, m as verifyJsonLd, n as hasProofLike, o as normalizeOutgoingActivityJsonLd, p as signJsonLd, r as signObject, s as doesActorOwnKey } from "./proof-CtMmqa09.js";
+import { _ as version, a as verifyRequestDetailed, d as validateCryptoKey, f as formatAcceptSignature, g as name, i as verifyRequest, n as parseRfc9421SignatureInput, o as exportJwk, t as doubleKnock, u as importJwk } from "./http-CA4xKsSY.js";
+import { c as getKeyOwner, d as detachSignature, f as hasSignatureLike, i as verifyObject, m as verifyJsonLd, n as hasProofLike, o as normalizeOutgoingActivityJsonLd, p as signJsonLd, r as signObject, s as doesActorOwnKey } from "./proof-Cdxbeq4n.js";
 import { n as getNodeInfo, t as nodeInfoToJson } from "./types-hvL8ElAs.js";
-import { n as getAuthenticatedDocumentLoader, t as kvCache } from "./kv-cache-B142kDZL.js";
+import { n as getAuthenticatedDocumentLoader, t as kvCache } from "./kv-cache-DarvCOHt.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, Tombstone, getTypeId, lookupObject, traverseCollection } from "@fedify/vocab";
-import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
+import { SpanKind, SpanStatusCode, context, metrics, propagation, trace } from "@opentelemetry/api";
 import { cloneDeep, uniq } from "es-toolkit";
 import { Router } from "uri-template-router";
 import { parseTemplate } from "url-template";
@@ -779,8 +779,90 @@ async function buildCollectionSynchronizationHeader(collectionId, actorIds) {
 	return `collectionId="${collectionId}", url="${url}", digest="${encodeHex(await digest(actorIds))}"`;
 }
 //#endregion
+//#region src/federation/metrics.ts
+var FederationMetrics = class {
+	deliverySent;
+	deliveryPermanentFailure;
+	signatureVerificationFailure;
+	deliveryDuration;
+	inboxProcessingDuration;
+	constructor(meterProvider) {
+		const meter = meterProvider.getMeter(name, version);
+		this.deliverySent = meter.createCounter("activitypub.delivery.sent", {
+			description: "ActivityPub delivery attempts.",
+			unit: "{attempt}"
+		});
+		this.deliveryPermanentFailure = meter.createCounter("activitypub.delivery.permanent_failure", {
+			description: "ActivityPub deliveries abandoned as permanent failures.",
+			unit: "{failure}"
+		});
+		this.signatureVerificationFailure = meter.createCounter("activitypub.signature.verification_failure", {
+			description: "ActivityPub signature verification failures.",
+			unit: "{failure}"
+		});
+		this.deliveryDuration = meter.createHistogram("activitypub.delivery.duration", {
+			description: "Duration of ActivityPub delivery attempts.",
+			unit: "ms"
+		});
+		this.inboxProcessingDuration = meter.createHistogram("activitypub.inbox.processing_duration", {
+			description: "Duration of ActivityPub inbox listener processing.",
+			unit: "ms"
+		});
+	}
+	recordDelivery(inbox, durationMs, success, activityType) {
+		const deliveryAttributes = {
+			"activitypub.remote.host": getRemoteHost(inbox),
+			"activitypub.delivery.success": success
+		};
+		if (activityType != null) deliveryAttributes["activitypub.activity.type"] = activityType;
+		this.deliverySent.add(1, deliveryAttributes);
+		this.deliveryDuration.record(durationMs, deliveryAttributes);
+	}
+	recordPermanentFailure(inbox, statusCode) {
+		this.deliveryPermanentFailure.add(1, {
+			"activitypub.remote.host": getRemoteHost(inbox),
+			"http.response.status_code": statusCode
+		});
+	}
+	recordSignatureVerificationFailure(reason, remoteHost) {
+		const attributes = { "activitypub.verification.failure_reason": reason };
+		if (remoteHost != null) attributes["activitypub.remote.host"] = remoteHost;
+		this.signatureVerificationFailure.add(1, attributes);
+	}
+	recordInboxProcessingDuration(activityType, durationMs) {
+		this.inboxProcessingDuration.record(durationMs, { "activitypub.activity.type": activityType });
+	}
+};
+const federationMetrics = /* @__PURE__ */ new WeakMap();
+/**
+* Gets the cached Fedify metric instruments for a meter provider.
+* @since 2.3.0
+*/
+function getFederationMetrics(meterProvider = metrics.getMeterProvider()) {
+	let instruments = federationMetrics.get(meterProvider);
+	if (instruments == null) {
+		instruments = new FederationMetrics(meterProvider);
+		federationMetrics.set(meterProvider, instruments);
+	}
+	return instruments;
+}
+/**
+* Gets the bounded remote host attribute value for a URL.
+* @since 2.3.0
+*/
+function getRemoteHost(url) {
+	return url.hostname;
+}
+/**
+* Gets an elapsed duration in milliseconds from a `performance.now()` value.
+* @since 2.3.0
+*/
+function getDurationMs(start) {
+	return Math.max(0, performance.now() - start);
+}
+//#endregion
 //#region src/federation/inbox.ts
-async function routeActivity({ context: ctx, json, activity, recipient, inboxListeners, inboxContextFactory, inboxErrorHandler, kv, kvPrefixes, queue, span, tracerProvider, idempotencyStrategy }) {
+async function routeActivity({ context: ctx, json, activity, recipient, inboxListeners, inboxContextFactory, inboxErrorHandler, kv, kvPrefixes, queue, span, meterProvider, tracerProvider, idempotencyStrategy }) {
 	const logger = getLogger([
 		"fedify",
 		"federation",
@@ -881,7 +963,13 @@ async function routeActivity({ context: ctx, json, activity, recipient, inboxLis
 		const { class: cls, listener } = dispatched;
 		span.updateName(`activitypub.dispatch_inbox_listener ${cls.name}`);
 		try {
-			await listener(inboxContextFactory(recipient, json, activity?.id?.href, getTypeId(activity).href), activity);
+			const activityType = getTypeId(activity).href;
+			const started = performance.now();
+			try {
+				await listener(inboxContextFactory(recipient, json, activity?.id?.href, activityType), activity);
+			} finally {
+				getFederationMetrics(meterProvider).recordInboxProcessingDuration(activityType, getDurationMs(started));
+			}
 		} catch (error) {
 			try {
 				await inboxErrorHandler?.(ctx, error);
@@ -1691,6 +1779,8 @@ async function handleInboxInternal(request, parameters, span) {
 			});
 			if (verification.verified === false) {
 				const reason = verification.reason;
+				const remoteHost = "keyId" in reason && reason.keyId != null ? getRemoteHost(reason.keyId) : void 0;
+				getFederationMetrics(parameters.meterProvider).recordSignatureVerificationFailure(reason.type, remoteHost);
 				logger.error("Failed to verify the request's HTTP Signatures.", {
 					recipient,
 					reason: reason.type,
@@ -1777,6 +1867,7 @@ async function handleInboxInternal(request, parameters, span) {
 		"http_signatures.key_id": httpSigKey?.id?.href ?? ""
 	});
 	if (httpSigKey != null && !await doesActorOwnKey(activity, httpSigKey, ctx)) {
+		getFederationMetrics(parameters.meterProvider).recordSignatureVerificationFailure("actorKeyMismatch", httpSigKey.id == null ? void 0 : getRemoteHost(httpSigKey.id));
 		logger.error("The signer ({keyId}) and the actor ({actorId}) do not match.", {
 			activity: json,
 			recipient,
@@ -1794,6 +1885,7 @@ async function handleInboxInternal(request, parameters, span) {
 	}
 	if (pendingNonceLabel != null) {
 		if (!await verifySignatureNonce(request, kv, kvPrefixes.acceptSignatureNonce, pendingNonceLabel)) {
+			getFederationMetrics(parameters.meterProvider).recordSignatureVerificationFailure("invalidNonce", httpSigKey?.id == null ? void 0 : getRemoteHost(httpSigKey.id));
 			logger.error("Signature nonce verification failed (missing, expired, or replayed).", { recipient });
 			return await getFailedSignatureResponse(inboxChallengePolicy, kv, kvPrefixes);
 		}
@@ -1810,6 +1902,7 @@ async function handleInboxInternal(request, parameters, span) {
 		kvPrefixes,
 		queue,
 		span,
+		meterProvider: parameters.meterProvider,
 		tracerProvider,
 		idempotencyStrategy: parameters.idempotencyStrategy
 	});
@@ -2457,6 +2550,25 @@ function sendActivity(options) {
 	});
 }
 const MAX_ERROR_RESPONSE_BODY_BYTES = 1024;
+function getActivityActorId(activity) {
+	if (!isRecord(activity)) return void 0;
+	return getIdValue(activity.actor);
+}
+function getIdValue(value) {
+	if (typeof value === "string" && value !== "") return value;
+	if (value instanceof URL) return value.href;
+	if (Array.isArray(value)) {
+		for (const item of value) {
+			const id = getIdValue(item);
+			if (id != null) return id;
+		}
+		return;
+	}
+	if (isRecord(value)) return getIdValue(value.id);
+}
+function isRecord(value) {
+	return typeof value === "object" && value != null;
+}
 async function readLimitedResponseBody(response, maxBytes) {
 	if (response.body == null) return "";
 	const reader = response.body.getReader();
@@ -2484,12 +2596,15 @@ async function readLimitedResponseBody(response, maxBytes) {
 	if (truncated) result += "… (truncated)";
 	return result;
 }
-async function sendActivityInternal({ activity, activityId, keys, inbox, headers, specDeterminer, tracerProvider }, span) {
+async function sendActivityInternal({ activity, activityId, activityType, keys, inbox, headers, specDeterminer, meterProvider, tracerProvider }, span) {
 	const logger = getLogger([
 		"fedify",
 		"federation",
 		"outbox"
 	]);
+	const federationMetrics = getFederationMetrics(meterProvider);
+	const started = performance.now();
+	let deliverySuccess = false;
 	headers = new Headers(headers);
 	headers.set("Content-Type", "application/activity+json");
 	const request = new Request(inbox, {
@@ -2521,29 +2636,38 @@ async function sendActivityInternal({ activity, activityId, keys, inbox, headers
 			inbox: inbox.href,
 			error
 		});
+		federationMetrics.recordDelivery(inbox, getDurationMs(started), false, activityType);
 		throw error;
 	}
-	if (!response.ok) {
-		let error;
-		try {
-			error = await readLimitedResponseBody(response, MAX_ERROR_RESPONSE_BODY_BYTES);
-		} catch (_) {
-			error = "";
+	try {
+		if (!response.ok) {
+			let error;
+			try {
+				error = await readLimitedResponseBody(response, MAX_ERROR_RESPONSE_BODY_BYTES);
+			} catch (_) {
+				error = "";
+			}
+			logger.error("Failed to send activity {activityId} to {inbox} ({status} {statusText}):\n{error}", {
+				activityId,
+				inbox: inbox.href,
+				status: response.status,
+				statusText: response.statusText,
+				error
+			});
+			throw new SendActivityError(inbox, response.status, `Failed to send activity ${activityId} to ${inbox.href} (${response.status} ${response.statusText}):\n${error}`, error);
 		}
-		logger.error("Failed to send activity {activityId} to {inbox} ({status} {statusText}):\n{error}", {
-			activityId,
-			inbox: inbox.href,
-			status: response.status,
-			statusText: response.statusText,
-			error
-		});
-		throw new SendActivityError(inbox, response.status, `Failed to send activity ${activityId} to ${inbox.href} (${response.status} ${response.statusText}):\n${error}`, error);
+		deliverySuccess = true;
+		const eventAttributes = {
+			"activitypub.inbox.url": inbox.href,
+			"activitypub.activity.id": activityId ?? ""
+		};
+		if (activityType != null) eventAttributes["activitypub.activity.type"] = activityType;
+		const actorId = getActivityActorId(activity);
+		if (actorId != null) eventAttributes["activitypub.actor.id"] = actorId;
+		span.addEvent("activitypub.activity.sent", eventAttributes);
+	} finally {
+		federationMetrics.recordDelivery(inbox, getDurationMs(started), deliverySuccess, activityType);
 	}
-	span.addEvent("activitypub.activity.sent", {
-		"activitypub.activity.json": JSON.stringify(activity),
-		"activitypub.inbox.url": inbox.href,
-		"activitypub.activity.id": activityId ?? ""
-	});
 }
 /**
 * An error that is thrown when an activity fails to send to a remote inbox.
@@ -2761,6 +2885,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 	inboxRetryPolicy;
 	activityTransformers;
 	_tracerProvider;
+	_meterProvider;
 	firstKnock;
 	inboxChallengePolicy;
 	constructor(options) {
@@ -2846,11 +2971,15 @@ var FederationImpl = class extends FederationBuilderImpl {
 		this.inboxRetryPolicy = options.inboxRetryPolicy ?? createExponentialBackoffPolicy();
 		this.activityTransformers = options.activityTransformers ?? getDefaultActivityTransformers();
 		this._tracerProvider = options.tracerProvider;
+		this._meterProvider = options.meterProvider;
 		this.firstKnock = options.firstKnock;
 	}
 	get tracerProvider() {
 		return this._tracerProvider ?? trace.getTracerProvider();
 	}
+	get meterProvider() {
+		return this._meterProvider ?? metrics.getMeterProvider();
+	}
 	_initializeRouter() {
 		this.router.add("/.well-known/webfinger", "webfinger");
 		this.router.add("/.well-known/nodeinfo", "nodeInfoJrd");
@@ -3029,6 +3158,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				sharedInbox: message.sharedInbox,
 				headers: new Headers(message.headers),
 				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock),
+				meterProvider: this.meterProvider,
 				tracerProvider: this.tracerProvider
 			});
 		} catch (error) {
@@ -3036,6 +3166,21 @@ var FederationImpl = class extends FederationBuilderImpl {
 				code: SpanStatusCode.ERROR,
 				message: String(error)
 			});
+			const remoteHost = (() => {
+				if (error instanceof SendActivityError) return getRemoteHost(error.inbox);
+				try {
+					return getRemoteHost(new URL(message.inbox));
+				} catch (_) {
+					logger.warn("Invalid inbox URL in queued outbox message: {inbox}", logData);
+					return;
+				}
+			})();
+			span.addEvent("activitypub.delivery.failed", {
+				...remoteHost == null ? {} : { "activitypub.remote.host": remoteHost },
+				"activitypub.delivery.attempt": message.attempt,
+				"activitypub.delivery.permanent_failure": error instanceof SendActivityError && this.permanentFailureStatusCodes.includes(error.statusCode),
+				...error instanceof SendActivityError ? { "http.response.status_code": error.statusCode } : {}
+			});
 			const loaderOptions = this.#getLoaderOptions(message.baseUrl);
 			const activity = await Activity.fromJsonLd(message.activity, {
 				contextLoader: this.contextLoaderFactory(loaderOptions),
@@ -3051,6 +3196,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				});
 			}
 			if (error instanceof SendActivityError && this.permanentFailureStatusCodes.includes(error.statusCode)) {
+				getFederationMetrics(this.meterProvider).recordPermanentFailure(error.inbox, error.statusCode);
 				logger.warn("Permanent delivery failure for activity {activityId} to {inbox} ({status}); not retrying.", {
 					...logData,
 					status: error.statusCode
@@ -3159,7 +3305,13 @@ var FederationImpl = class extends FederationBuilderImpl {
 			const { class: cls, listener } = dispatched;
 			span.updateName(`activitypub.dispatch_inbox_listener ${cls.name}`);
 			try {
-				await listener(context.toInboxContext(message.identifier, message.activity, activity.id?.href, getTypeId(activity).href), activity);
+				const activityType = getTypeId(activity).href;
+				const started = performance.now();
+				try {
+					await listener(context.toInboxContext(message.identifier, message.activity, activity.id?.href, activityType), activity);
+				} finally {
+					getFederationMetrics(this.meterProvider).recordInboxProcessingDuration(activityType, getDurationMs(started));
+				}
 			} catch (error) {
 				try {
 					await this.inboxErrorHandler?.(context, error);
@@ -3342,6 +3494,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				sharedInbox: inboxes[inbox].sharedInbox,
 				headers: collectionSync == null ? void 0 : new Headers({ "Collection-Synchronization": await buildCollectionSynchronizationHeader(collectionSync, inboxes[inbox].actorIds) }),
 				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock),
+				meterProvider: this.meterProvider,
 				tracerProvider: this.tracerProvider
 			}));
 			await Promise.all(promises);
@@ -3611,6 +3764,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 					signatureTimeWindow: this.signatureTimeWindow,
 					skipSignatureVerification: this.skipSignatureVerification,
 					inboxChallengePolicy: this.inboxChallengePolicy,
+					meterProvider: this.meterProvider,
 					tracerProvider: this.tracerProvider,
 					idempotencyStrategy: this.idempotencyStrategy
 				});
@@ -3772,6 +3926,9 @@ var ContextImpl = class ContextImpl {
 	get tracerProvider() {
 		return this.federation.tracerProvider;
 	}
+	get meterProvider() {
+		return this.federation.meterProvider;
+	}
 	getNodeInfoUri() {
 		const path = this.federation.router.build("nodeInfo", {});
 		if (path == null) throw new RouterError("No NodeInfo dispatcher registered.");
@@ -4521,6 +4678,7 @@ async function forwardActivityInternal(ctx, loggerCategory, forwarder, recipient
 			activityType: ctx.activityType,
 			inbox: new URL(inbox),
 			sharedInbox: inboxes[inbox].sharedInbox,
+			meterProvider: ctx.meterProvider,
 			tracerProvider: ctx.tracerProvider,
 			specDeterminer: new KvSpecDeterminer(ctx.federation.kv, ctx.federation.kvPrefixes.httpMessageSignaturesSpec, ctx.federation.firstKnock)
 		}));

package/dist/{middleware-Cgy7UwfR.mjs → middleware-C5ao_lvm.mjs}

@@ -1,5 +1,5 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as FederationImpl } from "./middleware-BPZEcrMG.mjs";
+import { n as FederationImpl } from "./middleware-THfK90u_.mjs";
 export { FederationImpl };