@fedify/fedify 2.3.0-dev.1131 → 2.3.0-dev.1145

package/dist/federation/webfinger.test.mjs

@@ -1,13 +1,14 @@
 import { Temporal } from "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { r as createRequestContext } from "../context-BAE7AKLA.mjs";
-import { t as assertEquals } from "../assert_equals-Ew3jOFa3.mjs";
-import "../std__assert-BTEgfoJo.mjs";
-import { t as MemoryKvStore } from "../kv-QHE0oeM3.mjs";
-import { o as createFederation, s as handleWebFinger } from "../middleware-BB0IbDow.mjs";
+import { r as createRequestContext } from "../context-DVoTs_wM.mjs";
+import { t as assertEquals } from "../assert_equals-C-ZRDbaf.mjs";
+import "../std__assert-BBjXFNOb.mjs";
+import { t as assertNotEquals } from "../assert_not_equals-DkVK8oqV.mjs";
+import { t as MemoryKvStore } from "../kv-x2IvBUyq.mjs";
+import { o as createFederation, s as handleWebFinger } from "../middleware-CyJDCmNg.mjs";
 import { Image, Link, Person, Tombstone } from "@fedify/vocab";
-import { test } from "@fedify/fixture";
+import { createTestMeterProvider, test } from "@fedify/fixture";
 //#region src/federation/webfinger.test.ts
 test("handleWebFinger()", async (t) => {
 	const url = new URL("https://example.com/.well-known/webfinger");
@@ -532,5 +533,149 @@ test("handleWebFinger()", async (t) => {
 		});
 	});
 });
+test("handleWebFinger() records webfinger.handle counter and duration", async (t) => {
+	const url = new URL("https://example.com/.well-known/webfinger");
+	const actorDispatcher = (ctx, identifier) => {
+		if (identifier === "gone") return new Tombstone({ id: ctx.getActorUri(identifier) });
+		if (identifier !== "someone") return null;
+		return new Person({
+			id: ctx.getActorUri(identifier),
+			preferredUsername: "someone"
+		});
+	};
+	const onNotFound = () => new Response("Not found", { status: 404 });
+	function createContext(u) {
+		return createRequestContext({
+			federation: createFederation({ kv: new MemoryKvStore() }),
+			url: u,
+			data: void 0,
+			getActorUri(identifier) {
+				return new URL(`${u.origin}/users/${identifier}`);
+			},
+			async getActor(handle) {
+				const actor = await actorDispatcher(this, handle);
+				return actor instanceof Tombstone ? null : actor;
+			},
+			parseUri(uri) {
+				if (uri == null) return null;
+				if (uri.protocol === "acct:") return null;
+				if (!uri.pathname.startsWith("/users/")) return null;
+				return {
+					type: "actor",
+					identifier: uri.pathname.split("/").pop()
+				};
+			}
+		});
+	}
+	await t.step("records result=resolved for a 200 response", async () => {
+		const u = new URL(url);
+		u.searchParams.set("resource", "acct:someone@example.com");
+		const context = createContext(u);
+		const [meterProvider, recorder] = createTestMeterProvider();
+		assertEquals((await handleWebFinger(context.request, {
+			context,
+			actorDispatcher,
+			onNotFound,
+			meterProvider
+		})).status, 200);
+		const counter = recorder.getMeasurement("webfinger.handle");
+		assertNotEquals(counter, void 0);
+		assertEquals(counter?.type, "counter");
+		assertEquals(counter?.value, 1);
+		assertEquals(counter?.attributes["webfinger.handle.result"], "resolved");
+		assertEquals(counter?.attributes["webfinger.resource.scheme"], "acct");
+		assertEquals(counter?.attributes["http.response.status_code"], 200);
+		const duration = recorder.getMeasurement("webfinger.handle.duration");
+		assertNotEquals(duration, void 0);
+		assertEquals(duration?.type, "histogram");
+		assertEquals(duration?.attributes["webfinger.handle.result"], "resolved");
+	});
+	await t.step("records result=invalid for a 400 response", async () => {
+		const context = createContext(new URL(url));
+		const [meterProvider, recorder] = createTestMeterProvider();
+		assertEquals((await handleWebFinger(context.request, {
+			context,
+			actorDispatcher,
+			onNotFound,
+			meterProvider
+		})).status, 400);
+		const counter = recorder.getMeasurement("webfinger.handle");
+		assertEquals(counter?.attributes["webfinger.handle.result"], "invalid");
+		assertEquals(counter?.attributes["http.response.status_code"], 400);
+		assertEquals("webfinger.resource.scheme" in (counter?.attributes ?? {}), false, "missing resource has no scheme attribute");
+	});
+	await t.step("records result=not_found for a 404 response", async () => {
+		const u = new URL(url);
+		u.searchParams.set("resource", "acct:absent@example.com");
+		const context = createContext(u);
+		const [meterProvider, recorder] = createTestMeterProvider();
+		assertEquals((await handleWebFinger(context.request, {
+			context,
+			actorDispatcher,
+			onNotFound,
+			meterProvider
+		})).status, 404);
+		const counter = recorder.getMeasurement("webfinger.handle");
+		assertEquals(counter?.attributes["webfinger.handle.result"], "not_found");
+		assertEquals(counter?.attributes["http.response.status_code"], 404);
+		assertEquals(counter?.attributes["webfinger.resource.scheme"], "acct");
+	});
+	await t.step("records result=tombstoned for a 410 response", async () => {
+		const u = new URL(url);
+		u.searchParams.set("resource", "acct:gone@example.com");
+		const context = createContext(u);
+		const [meterProvider, recorder] = createTestMeterProvider();
+		assertEquals((await handleWebFinger(context.request, {
+			context,
+			actorDispatcher,
+			onNotFound,
+			meterProvider
+		})).status, 410);
+		const counter = recorder.getMeasurement("webfinger.handle");
+		assertEquals(counter?.attributes["webfinger.handle.result"], "tombstoned");
+		assertEquals(counter?.attributes["http.response.status_code"], 410);
+	});
+	await t.step("records result=not_found when onNotFound returns 200", async () => {
+		const u = new URL(url);
+		u.searchParams.set("resource", "acct:absent@example.com");
+		const context = createContext(u);
+		const [meterProvider, recorder] = createTestMeterProvider();
+		assertEquals((await handleWebFinger(context.request, {
+			context,
+			actorDispatcher,
+			onNotFound: () => new Response("custom fallback", { status: 200 }),
+			meterProvider
+		})).status, 200);
+		const counter = recorder.getMeasurement("webfinger.handle");
+		assertEquals(counter?.attributes["webfinger.handle.result"], "not_found");
+		assertEquals(counter?.attributes["http.response.status_code"], 200);
+	});
+	await t.step("buckets unknown resource schemes as 'other' to keep metric cardinality bounded", async () => {
+		const u = new URL(url);
+		u.searchParams.set("resource", "ssh:nobody@example.com");
+		const context = createContext(u);
+		const [meterProvider, recorder] = createTestMeterProvider();
+		await handleWebFinger(context.request, {
+			context,
+			actorDispatcher,
+			onNotFound,
+			meterProvider
+		});
+		assertEquals(recorder.getMeasurement("webfinger.handle")?.attributes["webfinger.resource.scheme"], "other");
+	});
+	await t.step("omits measurements when no meterProvider is provided", async () => {
+		const u = new URL(url);
+		u.searchParams.set("resource", "acct:someone@example.com");
+		const context = createContext(u);
+		const [_unused, recorder] = createTestMeterProvider();
+		await handleWebFinger(context.request, {
+			context,
+			actorDispatcher,
+			onNotFound
+		});
+		assertEquals(recorder.getMeasurements("webfinger.handle").length, 0);
+		assertEquals(recorder.getMeasurements("webfinger.handle.duration").length, 0);
+	});
+});
 //#endregion
 export {};

package/dist/{getMachineId-bsd-BY01PL1n.mjs → getMachineId-bsd-etIyxDet.mjs}

@@ -2,7 +2,7 @@ import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { n as __require, t as __commonJSMin } from "./chunk-DNRtMIoB.mjs";
-import { t as require_execAsync } from "./execAsync-Dxb7rNf3.mjs";
+import { t as require_execAsync } from "./execAsync-DCBrgFiV.mjs";
 //#region ../../node_modules/.pnpm/@opentelemetry+resources@2.7.1_@opentelemetry+api@1.9.1/node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/getMachineId-bsd.js
 var require_getMachineId_bsd = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });

package/dist/{getMachineId-darwin-Dr1gkBkp.mjs → getMachineId-darwin-D23zTf4g.mjs}

@@ -2,7 +2,7 @@ import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { n as __require, t as __commonJSMin } from "./chunk-DNRtMIoB.mjs";
-import { t as require_execAsync } from "./execAsync-Dxb7rNf3.mjs";
+import { t as require_execAsync } from "./execAsync-DCBrgFiV.mjs";
 //#region ../../node_modules/.pnpm/@opentelemetry+resources@2.7.1_@opentelemetry+api@1.9.1/node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/getMachineId-darwin.js
 var require_getMachineId_darwin = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });

package/dist/{getMachineId-win-QEYwcJiy.mjs → getMachineId-win-Dpap6v5i.mjs}

@@ -2,7 +2,7 @@ import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { n as __require, t as __commonJSMin } from "./chunk-DNRtMIoB.mjs";
-import { t as require_execAsync } from "./execAsync-Dxb7rNf3.mjs";
+import { t as require_execAsync } from "./execAsync-DCBrgFiV.mjs";
 //#region ../../node_modules/.pnpm/@opentelemetry+resources@2.7.1_@opentelemetry+api@1.9.1/node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/getMachineId-win.js
 var require_getMachineId_win = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });

package/dist/{http-CJfvRL7D.cjs → http-7kAB7PVx.cjs}

@@ -11,7 +11,7 @@ let _opentelemetry_semantic_conventions = require("@opentelemetry/semantic-conve
 let byte_encodings_base64 = require("byte-encodings/base64");
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.3.0-dev.1131+553b59b8";
+var version = "2.3.0-dev.1145+3fe78022";
 //#endregion
 //#region src/sig/accept.ts
 /**
@@ -177,6 +177,8 @@ var FederationMetrics = class {
 	documentFetch;
 	documentFetchDuration;
 	documentCache;
+	webFingerHandle;
+	webFingerHandleDuration;
 	constructor(meterProvider) {
 		const meter = meterProvider.getMeter(name, version);
 		this.deliverySent = meter.createCounter("activitypub.delivery.sent", {
@@ -335,6 +337,30 @@ var FederationMetrics = class {
 			description: "KV-backed document loader cache lookups, with `hit` or `miss` classification.",
 			unit: "{lookup}"
 		});
+		this.webFingerHandle = meter.createCounter("webfinger.handle", {
+			description: "Incoming WebFinger requests handled by Fedify, classified by terminal outcome.",
+			unit: "{request}"
+		});
+		this.webFingerHandleDuration = meter.createHistogram("webfinger.handle.duration", {
+			description: "Duration of incoming WebFinger request handling in Fedify.",
+			unit: "ms",
+			advice: { explicitBucketBoundaries: [
+				5,
+				10,
+				25,
+				50,
+				75,
+				100,
+				250,
+				500,
+				750,
+				1e3,
+				2500,
+				5e3,
+				7500,
+				1e4
+			] }
+		});
 	}
 	recordDelivery(inbox, durationMs, success, activityType) {
 		const deliveryAttributes = {
@@ -448,6 +474,13 @@ var FederationMetrics = class {
 		if (attrs.remoteUrl != null) attributes["activitypub.remote.host"] = getRemoteHost(attrs.remoteUrl);
 		this.documentCache.add(1, attributes);
 	}
+	recordWebFingerHandle(attrs) {
+		const attributes = { "webfinger.handle.result": attrs.result };
+		if (attrs.scheme != null) attributes["webfinger.resource.scheme"] = attrs.scheme;
+		if (attrs.statusCode != null) attributes["http.response.status_code"] = attrs.statusCode;
+		this.webFingerHandle.add(1, attributes);
+		this.webFingerHandleDuration.record(attrs.durationMs, attributes);
+	}
 };
 function buildActivityLifecycleAttributes(result, activityType) {
 	const attributes = { "activitypub.processing.result": result };
@@ -572,6 +605,19 @@ function recordDocumentCache(meterProvider, attrs) {
 	getFederationMetrics(meterProvider).recordDocumentCache(attrs);
 }
 /**
+* Records one measurement on `webfinger.handle` (counter) and
+* `webfinger.handle.duration` (histogram) for an incoming WebFinger
+* request handled by Fedify.  Counter and histogram are always recorded
+* together, with `webfinger.handle.result` set to one of `resolved`,
+* `invalid`, `not_found`, `tombstoned`, or `error`.  The queried
+* resource string is deliberately excluded; it remains on the
+* `webfinger.handle` span for trace-level investigation.
+* @since 2.3.0
+*/
+function recordWebFingerHandle(meterProvider, attrs) {
+	getFederationMetrics(meterProvider).recordWebFingerHandle(attrs);
+}
+/**
 * Classifies a thrown value from a key or document fetch into the bounded
 * {@link LookupResult} taxonomy and, when an HTTP response was received,
 * surfaces its status code.
@@ -2309,6 +2355,12 @@ Object.defineProperty(exports, "recordOutboxEnqueue", {
 		return recordOutboxEnqueue;
 	}
 });
+Object.defineProperty(exports, "recordWebFingerHandle", {
+	enumerable: true,
+	get: function() {
+		return recordWebFingerHandle;
+	}
+});
 Object.defineProperty(exports, "signRequest", {
 	enumerable: true,
 	get: function() {

package/dist/{http-cqujdCRz.js → http-B2hxA7dO.js}

@@ -10,7 +10,7 @@ import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } fro
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.3.0-dev.1131+553b59b8";
+var version = "2.3.0-dev.1145+3fe78022";
 //#endregion
 //#region src/sig/accept.ts
 /**
@@ -176,6 +176,8 @@ var FederationMetrics = class {
 	documentFetch;
 	documentFetchDuration;
 	documentCache;
+	webFingerHandle;
+	webFingerHandleDuration;
 	constructor(meterProvider) {
 		const meter = meterProvider.getMeter(name, version);
 		this.deliverySent = meter.createCounter("activitypub.delivery.sent", {
@@ -334,6 +336,30 @@ var FederationMetrics = class {
 			description: "KV-backed document loader cache lookups, with `hit` or `miss` classification.",
 			unit: "{lookup}"
 		});
+		this.webFingerHandle = meter.createCounter("webfinger.handle", {
+			description: "Incoming WebFinger requests handled by Fedify, classified by terminal outcome.",
+			unit: "{request}"
+		});
+		this.webFingerHandleDuration = meter.createHistogram("webfinger.handle.duration", {
+			description: "Duration of incoming WebFinger request handling in Fedify.",
+			unit: "ms",
+			advice: { explicitBucketBoundaries: [
+				5,
+				10,
+				25,
+				50,
+				75,
+				100,
+				250,
+				500,
+				750,
+				1e3,
+				2500,
+				5e3,
+				7500,
+				1e4
+			] }
+		});
 	}
 	recordDelivery(inbox, durationMs, success, activityType) {
 		const deliveryAttributes = {
@@ -447,6 +473,13 @@ var FederationMetrics = class {
 		if (attrs.remoteUrl != null) attributes["activitypub.remote.host"] = getRemoteHost(attrs.remoteUrl);
 		this.documentCache.add(1, attributes);
 	}
+	recordWebFingerHandle(attrs) {
+		const attributes = { "webfinger.handle.result": attrs.result };
+		if (attrs.scheme != null) attributes["webfinger.resource.scheme"] = attrs.scheme;
+		if (attrs.statusCode != null) attributes["http.response.status_code"] = attrs.statusCode;
+		this.webFingerHandle.add(1, attributes);
+		this.webFingerHandleDuration.record(attrs.durationMs, attributes);
+	}
 };
 function buildActivityLifecycleAttributes(result, activityType) {
 	const attributes = { "activitypub.processing.result": result };
@@ -571,6 +604,19 @@ function recordDocumentCache(meterProvider, attrs) {
 	getFederationMetrics(meterProvider).recordDocumentCache(attrs);
 }
 /**
+* Records one measurement on `webfinger.handle` (counter) and
+* `webfinger.handle.duration` (histogram) for an incoming WebFinger
+* request handled by Fedify.  Counter and histogram are always recorded
+* together, with `webfinger.handle.result` set to one of `resolved`,
+* `invalid`, `not_found`, `tombstoned`, or `error`.  The queried
+* resource string is deliberately excluded; it remains on the
+* `webfinger.handle` span for trace-level investigation.
+* @since 2.3.0
+*/
+function recordWebFingerHandle(meterProvider, attrs) {
+	getFederationMetrics(meterProvider).recordWebFingerHandle(attrs);
+}
+/**
 * Classifies a thrown value from a key or document fetch into the bounded
 * {@link LookupResult} taxonomy and, when an HTTP response was received,
 * surfaces its status code.
@@ -2176,4 +2222,4 @@ function timingSafeEqual(a, b) {
 	return result === 0;
 }
 //#endregion
-export { formatAcceptSignature as C, name as D, validateAcceptSignature as E, version as O, recordOutboxEnqueue as S, parseAcceptSignature as T, measureSignatureKeyFetch as _, verifyRequestDetailed as a, recordInboxActivity as b, fetchKeyDetailed as c, validateCryptoKey as d, getDurationMs as f, isAbortError$1 as g, instrumentDocumentLoader as h, verifyRequest as i, generateCryptoKeyPair as l, getRemoteHost as m, parseRfc9421SignatureInput as n, exportJwk as o, getFederationMetrics as p, signRequest as r, fetchKey as s, doubleKnock as t, importJwk as u, recordDocumentCache as v, fulfillAcceptSignature as w, recordOutboxActivity as x, recordFanoutRecipients as y };
+export { recordWebFingerHandle as C, validateAcceptSignature as D, parseAcceptSignature as E, name as O, recordOutboxEnqueue as S, fulfillAcceptSignature as T, measureSignatureKeyFetch as _, verifyRequestDetailed as a, recordInboxActivity as b, fetchKeyDetailed as c, validateCryptoKey as d, getDurationMs as f, isAbortError$1 as g, instrumentDocumentLoader as h, verifyRequest as i, version as k, generateCryptoKeyPair as l, getRemoteHost as m, parseRfc9421SignatureInput as n, exportJwk as o, getFederationMetrics as p, signRequest as r, fetchKey as s, doubleKnock as t, importJwk as u, recordDocumentCache as v, formatAcceptSignature as w, recordOutboxActivity as x, recordFanoutRecipients as y };

package/dist/{http-IywnQdiX.mjs → http-QzW9IWfs.mjs}

@@ -1,10 +1,10 @@
 import { Temporal } from "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno--CS-SBS9.mjs";
-import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-BTOMkW8C.mjs";
-import { i as validateAcceptSignature, n as fulfillAcceptSignature, r as parseAcceptSignature } from "./accept-CgDcxvjV.mjs";
-import { o as validateCryptoKey, r as fetchKeyDetailed } from "./key-Df3tMleh.mjs";
+import { n as version, t as name } from "./deno-h0TWFuEz.mjs";
+import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-E0hAHtLZ.mjs";
+import { i as validateAcceptSignature, n as fulfillAcceptSignature, r as parseAcceptSignature } from "./accept-CceiKpCy.mjs";
+import { o as validateCryptoKey, r as fetchKeyDetailed } from "./key-Dh2OK1XQ.mjs";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{key-Df3tMleh.mjs → key-Dh2OK1XQ.mjs}

@@ -1,8 +1,8 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno--CS-SBS9.mjs";
-import { f as recordKeyLookup, n as getDurationMs, t as classifyFetchError } from "./metrics-BTOMkW8C.mjs";
+import { n as version, t as name } from "./deno-h0TWFuEz.mjs";
+import { f as recordKeyLookup, n as getDurationMs, t as classifyFetchError } from "./metrics-E0hAHtLZ.mjs";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey, Object as Object$1, isActor } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{kv-cache-L0SMQkcd.cjs → kv-cache-DCPp-MT0.cjs}

@@ -1,7 +1,7 @@
 const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
 require("./chunk-DDcVe30Y.cjs");
-const require_http = require("./http-CJfvRL7D.cjs");
+const require_http = require("./http-7kAB7PVx.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let es_toolkit = require("es-toolkit");
 let _fedify_vocab_runtime = require("@fedify/vocab-runtime");

package/dist/{kv-cache-q9Ec2ryS.mjs → kv-cache-EZRIPZXD.mjs}

@@ -1,7 +1,7 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { c as recordDocumentCache } from "./metrics-BTOMkW8C.mjs";
+import { c as recordDocumentCache } from "./metrics-E0hAHtLZ.mjs";
 import { getLogger } from "@logtape/logtape";
 import { preloadedContexts } from "@fedify/vocab-runtime";
 //#region src/utils/kv-cache.ts

package/dist/{kv-cache-pEejzYq4.js → kv-cache-b22dNkjt.js}

@@ -1,6 +1,6 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { d as validateCryptoKey, t as doubleKnock, v as recordDocumentCache } from "./http-cqujdCRz.js";
+import { d as validateCryptoKey, t as doubleKnock, v as recordDocumentCache } from "./http-B2hxA7dO.js";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, preloadedContexts, validatePublicUrl } from "@fedify/vocab-runtime";

package/dist/{ld-BGwiJpl3.mjs → ld-eZbar1rr.mjs}

@@ -1,9 +1,9 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno--CS-SBS9.mjs";
-import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-BTOMkW8C.mjs";
-import { n as fetchKey, o as validateCryptoKey } from "./key-Df3tMleh.mjs";
+import { n as version, t as name } from "./deno-h0TWFuEz.mjs";
+import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-E0hAHtLZ.mjs";
+import { n as fetchKey, o as validateCryptoKey } from "./key-Dh2OK1XQ.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Activity, CryptographicKey, Object as Object$1, getTypeId } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{metrics-BTOMkW8C.mjs → metrics-E0hAHtLZ.mjs}

@@ -1,7 +1,7 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno--CS-SBS9.mjs";
+import { n as version, t as name } from "./deno-h0TWFuEz.mjs";
 import { metrics } from "@opentelemetry/api";
 import { FetchError } from "@fedify/vocab-runtime";
 //#region src/federation/metrics.ts
@@ -29,6 +29,8 @@ var FederationMetrics = class {
 	documentFetch;
 	documentFetchDuration;
 	documentCache;
+	webFingerHandle;
+	webFingerHandleDuration;
 	constructor(meterProvider) {
 		const meter = meterProvider.getMeter(name, version);
 		this.deliverySent = meter.createCounter("activitypub.delivery.sent", {
@@ -187,6 +189,30 @@ var FederationMetrics = class {
 			description: "KV-backed document loader cache lookups, with `hit` or `miss` classification.",
 			unit: "{lookup}"
 		});
+		this.webFingerHandle = meter.createCounter("webfinger.handle", {
+			description: "Incoming WebFinger requests handled by Fedify, classified by terminal outcome.",
+			unit: "{request}"
+		});
+		this.webFingerHandleDuration = meter.createHistogram("webfinger.handle.duration", {
+			description: "Duration of incoming WebFinger request handling in Fedify.",
+			unit: "ms",
+			advice: { explicitBucketBoundaries: [
+				5,
+				10,
+				25,
+				50,
+				75,
+				100,
+				250,
+				500,
+				750,
+				1e3,
+				2500,
+				5e3,
+				7500,
+				1e4
+			] }
+		});
 	}
 	recordDelivery(inbox, durationMs, success, activityType) {
 		const deliveryAttributes = {
@@ -300,6 +326,13 @@ var FederationMetrics = class {
 		if (attrs.remoteUrl != null) attributes["activitypub.remote.host"] = getRemoteHost(attrs.remoteUrl);
 		this.documentCache.add(1, attributes);
 	}
+	recordWebFingerHandle(attrs) {
+		const attributes = { "webfinger.handle.result": attrs.result };
+		if (attrs.scheme != null) attributes["webfinger.resource.scheme"] = attrs.scheme;
+		if (attrs.statusCode != null) attributes["http.response.status_code"] = attrs.statusCode;
+		this.webFingerHandle.add(1, attributes);
+		this.webFingerHandleDuration.record(attrs.durationMs, attributes);
+	}
 };
 function buildActivityLifecycleAttributes(result, activityType) {
 	const attributes = { "activitypub.processing.result": result };
@@ -424,6 +457,19 @@ function recordDocumentCache(meterProvider, attrs) {
 	getFederationMetrics(meterProvider).recordDocumentCache(attrs);
 }
 /**
+* Records one measurement on `webfinger.handle` (counter) and
+* `webfinger.handle.duration` (histogram) for an incoming WebFinger
+* request handled by Fedify.  Counter and histogram are always recorded
+* together, with `webfinger.handle.result` set to one of `resolved`,
+* `invalid`, `not_found`, `tombstoned`, or `error`.  The queried
+* resource string is deliberately excluded; it remains on the
+* `webfinger.handle` span for trace-level investigation.
+* @since 2.3.0
+*/
+function recordWebFingerHandle(meterProvider, attrs) {
+	getFederationMetrics(meterProvider).recordWebFingerHandle(attrs);
+}
+/**
 * Classifies a thrown value from a key or document fetch into the bounded
 * {@link LookupResult} taxonomy and, when an HTTP response was received,
 * surfaces its status code.
@@ -586,4 +632,4 @@ function getDurationMs(start) {
 	return Math.max(0, performance.now() - start);
 }
 //#endregion
-export { instrumentDocumentLoader as a, recordDocumentCache as c, recordInboxActivity as d, recordKeyLookup as f, getRemoteHost as i, recordDocumentFetch as l, recordOutboxEnqueue as m, getDurationMs as n, isAbortError as o, recordOutboxActivity as p, getFederationMetrics as r, measureSignatureKeyFetch as s, classifyFetchError as t, recordFanoutRecipients as u };
+export { instrumentDocumentLoader as a, recordDocumentCache as c, recordInboxActivity as d, recordKeyLookup as f, recordWebFingerHandle as h, getRemoteHost as i, recordDocumentFetch as l, recordOutboxEnqueue as m, getDurationMs as n, isAbortError as o, recordOutboxActivity as p, getFederationMetrics as r, measureSignatureKeyFetch as s, classifyFetchError as t, recordFanoutRecipients as u };