@fedify/fedify 2.3.15-dev.2482 → 2.3.15

package/dist/federation/middleware.test.mjs

@@ -9,15 +9,15 @@ import { t as assertRejects } from "../assert_rejects-D1HYAik3.mjs";
 import { n as assertInstanceOf, t as assert } from "../assert-CEO06XCw.mjs";
 import { t as assertNotEquals } from "../assert_not_equals-DkVK8oqV.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-XEgZAlrj.mjs";
-import { g as recordInboxActivity } from "../metrics-BS7YzLVA.mjs";
-import { l as verifyRequest, s as signRequest } from "../http-BNCLeQJ-.mjs";
+import { g as recordInboxActivity } from "../metrics-SYIZHFf_.mjs";
+import { c as signRequest, u as verifyRequest } from "../http-CSDcThvz.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-BAK-tUlf.mjs";
-import { t as getAuthenticatedDocumentLoader } from "../docloader-BVj35vgR.mjs";
+import { n as getAuthenticatedDocumentLoader } from "../docloader-D2dr1_6B.mjs";
 import { t as MemoryKvStore } from "../kv-mI4Ix2EU.mjs";
-import { a as compactJsonLd, h as verifyJsonLd, p as signJsonLd, s as detachSignature } from "../ld-CSNsWdYE.mjs";
-import { t as doesActorOwnKey } from "../owner-DeggvxcG.mjs";
-import { i as verifyObject, r as signObject } from "../proof-DMcUrrp8.mjs";
-import { g as handleBenchmarkTrigger, i as KvSpecDeterminer, n as FederationImpl, o as createFederation, r as InboxContextImpl, t as ContextImpl } from "../middleware-B1RRLN7m.mjs";
+import { a as compactJsonLd, h as verifyJsonLd, p as signJsonLd, s as detachSignature } from "../ld-CVxxE1Pp.mjs";
+import { t as doesActorOwnKey } from "../owner-BluLVPf0.mjs";
+import { i as verifyObject, r as signObject } from "../proof-Co6nQBVR.mjs";
+import { g as handleBenchmarkTrigger, i as KvSpecDeterminer, n as FederationImpl, o as createFederation, r as InboxContextImpl, t as ContextImpl } from "../middleware-CfskJGfV.mjs";
 import { t as CircuitBreaker } from "../circuit-breaker-D1fxthDI.mjs";
 import { t as markCircuitBreakerLegacySweepDone } from "../circuit-breaker-test-utils-CAdwjgMi.mjs";
 import { configure, reset } from "@logtape/logtape";
@@ -27,9 +27,9 @@ import { Create, Offer, Person, getTypeId, lookupObject } from "@fedify/vocab";
 import { SpanStatusCode, metrics } from "@opentelemetry/api";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { FetchError, UrlError, getDocumentLoader } from "@fedify/vocab-runtime";
-import dns from "node:dns/promises";
 import serialize from "json-canon";
 import { DataPointType, MeterProvider as MeterProvider$1, MetricReader } from "@opentelemetry/sdk-metrics";
+import dns from "node:dns/promises";
 //#region ../fixture/src/fixtures/example.com/create.json
 var id$2 = "https://example.com/create";
 var create_default = {
@@ -94,7 +94,7 @@ var person2_default = {
 };
 //#endregion
 //#region src/federation/middleware.test.ts
-const documentLoader = getDocumentLoader();
+const documentLoader = getDocumentLoader({ allowPrivateAddress: true });
 let logtapeLock = Promise.resolve();
 async function withLogtapeLock(fn) {
 	const run = logtapeLock.then(fn, fn);
@@ -649,7 +649,8 @@ test({
 			const federation = createFederation({
 				kv,
 				documentLoaderFactory: () => rejectingLoader,
-				contextLoaderFactory: () => mockDocumentLoader
+				contextLoaderFactory: () => mockDocumentLoader,
+				authenticatedDocumentLoaderFactory: (identity) => getAuthenticatedDocumentLoader(identity, { allowPrivateAddress: true })
 			});
 			let ctx = federation.createContext(new URL("https://example.com:1234/"), 123);
 			assertEquals(ctx.data, 123);
@@ -760,7 +761,7 @@ test({
 				documentUrl: "https://example.com/auth-check",
 				document: true
 			});
-			assertEquals(await ctx.lookupObject("https://example.com/object"), null);
+			assertEquals(await withDnsLookup(() => Promise.reject(/* @__PURE__ */ new Error("Resolver unavailable")), () => ctx.lookupObject("https://example.com/object")), null);
 			await assertRejects(() => ctx.sendActivity({ identifier: "handle" }, [], new vocab.Create({})), TypeError, "The activity to send must have at least one actor property.");
 			await ctx.sendActivity({ identifier: "handle" }, [], new vocab.Create({ actor: new URL("https://example.com/users/handle") }));
 			esm_default.get("https://example.com/object", () => new Response(JSON.stringify({
@@ -1009,7 +1010,7 @@ test({
 			assertStrictEquals(clone.contextLoader, ctx.contextLoader);
 			assertStrictEquals(clone.federation, ctx.federation);
 		});
-		esm_default.get("https://example.com/.well-known/nodeinfo", (cl) => {
+		esm_default.get("path:/.well-known/nodeinfo", (cl) => {
 			const headers = cl.options.headers ?? {};
 			assertEquals(new Headers(headers).get("User-Agent"), "CustomUserAgent/1.2.3");
 			return new Response(JSON.stringify({ links: [{
@@ -1017,7 +1018,7 @@ test({
 				href: "https://example.com/nodeinfo/2.1"
 			}] }));
 		});
-		esm_default.get("https://example.com/nodeinfo/2.1", (cl) => {
+		esm_default.get("path:/nodeinfo/2.1", (cl) => {
 			const headers = cl.options.headers ?? {};
 			assertEquals(new Headers(headers).get("User-Agent"), "CustomUserAgent/1.2.3");
 			return new Response(JSON.stringify({
@@ -1038,7 +1039,11 @@ test({
 				kv,
 				userAgent: "CustomUserAgent/1.2.3"
 			}).createContext(new URL("https://example.com/"), 123);
-			assertEquals(await ctx.lookupNodeInfo("https://example.com/"), {
+			const lookupExample = () => Promise.resolve([{
+				address: "93.184.215.14",
+				family: 4
+			}]);
+			assertEquals(await withDnsLookup(lookupExample, () => ctx.lookupNodeInfo("https://example.com/")), {
 				software: {
 					name: "foo",
 					version: "1.2.3"
@@ -1050,7 +1055,7 @@ test({
 					localComments: 456
 				}
 			});
-			assertEquals(await ctx.lookupNodeInfo("https://example.com/", { parse: "none" }), {
+			assertEquals(await withDnsLookup(lookupExample, () => ctx.lookupNodeInfo("https://example.com/", { parse: "none" })), {
 				software: {
 					name: "foo",
 					version: "1.2.3"
@@ -1234,6 +1239,343 @@ test("Federation.fetch() verifies signatures over unencoded path colons", async
 		assertEquals(federation.createContext(new URL(canonical), void 0).getInboxUri(identifier).href, canonical);
 	});
 });
+test("RequestContext signature checks", async (t) => {
+	const [tracerProvider, exporter] = createTestTracerProvider();
+	const keyId = rsaPublicKey3.id.href;
+	const ownerId = rsaPublicKey3.ownerId.href;
+	const request = await signRequest(new Request("https://example.com/"), rsaPrivateKey3, rsaPublicKey3.id);
+	function setup(options = {}) {
+		const loads = {
+			key: 0,
+			owner: 0
+		};
+		const loader = async (url, loaderOptions) => {
+			if (url === keyId) loads.key++;
+			else if (url === ownerId) loads.owner++;
+			await options.gate;
+			return await (options.load ?? mockDocumentLoader)(url, loaderOptions);
+		};
+		const federation = createFederation({
+			kv: new MemoryKvStore(),
+			documentLoaderFactory: () => loader,
+			contextLoaderFactory: () => mockDocumentLoader,
+			tracerProvider: options.tracerProvider ?? tracerProvider
+		});
+		return {
+			ctx: federation.createContext(options.request ?? new Request(request), void 0),
+			loads,
+			loader,
+			federation
+		};
+	}
+	try {
+		for (const mode of [
+			"keys",
+			"owners",
+			"warm owners",
+			"mixed"
+		]) await t.step(`coalesces ${mode}`, async () => {
+			exporter.clear();
+			let release;
+			const { ctx, loads, loader } = setup({ gate: new Promise((resolve) => release = resolve) });
+			if (mode === "warm owners") {
+				release();
+				assert(await ctx.getSignedKey());
+			}
+			const results = Promise.all(Array.from({ length: 8 }, (_, i) => {
+				const options = i % 2 === 0 ? {} : {
+					documentLoader: loader,
+					contextLoader: ctx.contextLoader,
+					tracerProvider
+				};
+				return mode === "keys" || mode === "mixed" && i % 2 === 0 ? ctx.getSignedKey(options) : ctx.getSignedKeyOwner(options);
+			}));
+			release();
+			for (const result of await results) assert(result != null);
+			assertEquals(loads, {
+				key: 1,
+				owner: mode === "keys" ? 0 : 1
+			});
+			assertEquals(exporter.getSpans("http_signatures.verify").length, 1);
+			assert(await ctx.getSignedKey());
+			if (mode !== "keys") assert(await ctx.getSignedKeyOwner());
+			assertEquals(loads, {
+				key: 1,
+				owner: mode === "keys" ? 0 : 1
+			});
+		});
+		await t.step("memoizes null keys", async () => {
+			exporter.clear();
+			const { ctx, loads } = setup({ load: () => Promise.reject(/* @__PURE__ */ new Error("unavailable")) });
+			for (let i = 0; i < 3; i++) {
+				assertEquals(await ctx.getSignedKey(), null);
+				assertEquals(await ctx.getSignedKeyOwner(), null);
+			}
+			assertEquals(loads, {
+				key: 1,
+				owner: 0
+			});
+			assertEquals(exporter.getSpans("http_signatures.verify").length, 1);
+			assert(await ctx.getSignedKey({ documentLoader: mockDocumentLoader }));
+			assert(await ctx.getSignedKeyOwner({ documentLoader: mockDocumentLoader }));
+		});
+		await t.step("coalesces key-owner FetchError results", async () => {
+			const { ctx, loads } = setup({ load: async (url, options) => {
+				if (url === ownerId) throw new FetchError(new URL(url), "HTTP 401: Unauthorized");
+				return await mockDocumentLoader(url, options);
+			} });
+			assert(await ctx.getSignedKey());
+			assertEquals(await Promise.all(Array.from({ length: 8 }, () => ctx.getSignedKeyOwner())), Array(8).fill(null));
+			assertEquals(await ctx.getSignedKeyOwner(), null);
+			assertEquals(loads, {
+				key: 1,
+				owner: 1
+			});
+			assert(await ctx.getSignedKeyOwner({ documentLoader: mockDocumentLoader }));
+		});
+		await t.step("memoizes unsigned requests", async () => {
+			exporter.clear();
+			const { ctx, loads } = setup({ request: new Request("https://example.com/") });
+			for (let i = 0; i < 3; i++) {
+				assertEquals(await ctx.getSignedKey(), null);
+				assertEquals(await ctx.getSignedKeyOwner(), null);
+			}
+			assertEquals(loads, {
+				key: 0,
+				owner: 0
+			});
+			assertEquals(exporter.getSpans("http_signatures.verify").length, 1);
+		});
+		await t.step("memoizes null owners without trusting a key's owner claim", async () => {
+			const { ctx, loads } = setup({ load: async (url, options) => url === ownerId ? {
+				documentUrl: url,
+				contextUrl: null,
+				document: {
+					...person2_default,
+					publicKey: []
+				}
+			} : await mockDocumentLoader(url, options) });
+			assert(await ctx.getSignedKey());
+			assertEquals(await Promise.all(Array.from({ length: 8 }, () => ctx.getSignedKeyOwner())), Array(8).fill(null));
+			for (let i = 0; i < 3; i++) assertEquals(await ctx.getSignedKeyOwner(), null);
+			assertEquals(loads, {
+				key: 1,
+				owner: 1
+			});
+			assert(await ctx.getSignedKeyOwner({ documentLoader: mockDocumentLoader }));
+			assert(await ctx.getSignedKeyOwner());
+		});
+		await t.step("isolates concurrent document loaders before success", async () => {
+			const { ctx, loads } = setup();
+			let otherLoads = 0;
+			const otherLoader = async (url, options) => {
+				otherLoads++;
+				if (url === ownerId) return {
+					documentUrl: url,
+					contextUrl: null,
+					document: {
+						...person2_default,
+						name: "Other view"
+					}
+				};
+				return await mockDocumentLoader(url, options);
+			};
+			const [first, second] = await Promise.all([ctx.getSignedKeyOwner(), ctx.getSignedKeyOwner({ documentLoader: otherLoader })]);
+			assertEquals(first?.name, "Jane Doe");
+			assertEquals(second?.name, "Other view");
+			const cached = await ctx.getSignedKeyOwner();
+			assert(cached === first || cached === second);
+			assertStrictEquals(await ctx.getSignedKeyOwner({ documentLoader: otherLoader }), cached);
+			assertEquals(loads, {
+				key: 1,
+				owner: 1
+			});
+			assertEquals(otherLoads, 2);
+		});
+		await t.step("preserves in-flight null while another loader succeeds", async () => {
+			exporter.clear();
+			let release;
+			const gate = new Promise((resolve) => release = resolve);
+			const { ctx, loads } = setup({ load: async () => {
+				await gate;
+				throw new TypeError("fetch failed");
+			} });
+			const failed = Promise.all([ctx.getSignedKey(), ctx.getSignedKeyOwner()]);
+			const owner = await ctx.getSignedKeyOwner({ documentLoader: mockDocumentLoader });
+			assert(owner);
+			release();
+			assertEquals(await failed, [null, null]);
+			assertStrictEquals(await ctx.getSignedKeyOwner(), owner);
+			assert(await ctx.getSignedKey());
+			assertEquals(loads, {
+				key: 1,
+				owner: 0
+			});
+			assertEquals(exporter.getSpans("http_signatures.verify").length, 2);
+		});
+		await t.step("isolates context loaders", async () => {
+			exporter.clear();
+			const { ctx, loads } = setup();
+			const otherContextLoader = (url, options) => mockDocumentLoader(url, options);
+			await Promise.all([ctx.getSignedKeyOwner(), ctx.getSignedKeyOwner({ contextLoader: otherContextLoader })]);
+			assertEquals(loads, {
+				key: 2,
+				owner: 2
+			});
+			assertEquals(exporter.getSpans("http_signatures.verify").length, 2);
+		});
+		await t.step("shares work across tracer providers", async () => {
+			exporter.clear();
+			const [otherProvider, otherExporter] = createTestTracerProvider();
+			try {
+				const { ctx, loads } = setup();
+				await Promise.all([
+					ctx.getSignedKeyOwner(),
+					ctx.getSignedKeyOwner({ tracerProvider: otherProvider }),
+					ctx.getSignedKey(),
+					ctx.getSignedKey({ tracerProvider: otherProvider })
+				]);
+				assert(await ctx.getSignedKeyOwner({ tracerProvider: otherProvider }));
+				assertEquals(loads, {
+					key: 1,
+					owner: 1
+				});
+				assertEquals(exporter.getSpans("http_signatures.verify").length, 1);
+				assertEquals(otherExporter.getSpans("http_signatures.verify").length, 0);
+			} finally {
+				await otherProvider.shutdown();
+			}
+		});
+		await t.step("reuses success with a fresh authorization loader", async () => {
+			exporter.clear();
+			const { ctx, loads } = setup();
+			let freshLoads = 0;
+			const freshLoader = (url, options) => {
+				freshLoads++;
+				return mockDocumentLoader(url, options);
+			};
+			const key = await ctx.getSignedKey({ documentLoader: freshLoader });
+			assert(key);
+			assertStrictEquals(await ctx.getSignedKey(), key);
+			const owner = await ctx.getSignedKeyOwner();
+			assert(owner);
+			assertStrictEquals(await ctx.getSignedKeyOwner({ documentLoader: freshLoader }), owner);
+			assertEquals(loads, {
+				key: 0,
+				owner: 1
+			});
+			assertEquals(freshLoads, 1);
+			assertEquals(exporter.getSpans("http_signatures.verify").length, 1);
+		});
+		await t.step("retains a transient owner lookup failure as null", async () => {
+			let fail = true;
+			const { ctx, loads } = setup({ load: async (url, options) => {
+				if (url === ownerId && fail) throw new TypeError("fetch failed");
+				return await mockDocumentLoader(url, options);
+			} });
+			assert(await ctx.getSignedKey());
+			assertEquals(await ctx.getSignedKeyOwner(), null);
+			fail = false;
+			assertEquals(await ctx.getSignedKeyOwner(), null);
+			assertEquals(loads, {
+				key: 1,
+				owner: 1
+			});
+			assert(await ctx.getSignedKeyOwner({ documentLoader: mockDocumentLoader }));
+		});
+		await t.step("rechecks an owner after another loader verifies the key", async () => {
+			let fail = true;
+			const { ctx, loads } = setup({ load: async (url, options) => {
+				if (url === keyId && fail) throw new TypeError("fetch failed");
+				return await mockDocumentLoader(url, options);
+			} });
+			assertEquals(await ctx.getSignedKeyOwner(), null);
+			fail = false;
+			assertEquals(await ctx.getSignedKeyOwner(), null);
+			assertEquals(loads, {
+				key: 1,
+				owner: 0
+			});
+			assert(await ctx.getSignedKey({ documentLoader: mockDocumentLoader }));
+			assertEquals((await ctx.getSignedKeyOwner())?.id?.href, ownerId);
+			assertEquals(loads, {
+				key: 1,
+				owner: 1
+			});
+		});
+		await t.step("retries unexpected key rejections from a rejection handler", async () => {
+			exporter.clear();
+			const failure = /* @__PURE__ */ new Error("transient context loader failure");
+			let rejectContext = true;
+			const contextLoader = async (url, options) => {
+				if (rejectContext) throw failure;
+				return await mockDocumentLoader(url, options);
+			};
+			const { ctx, loads } = setup();
+			const options = { contextLoader };
+			const failedKeys = Promise.allSettled([
+				ctx.getSignedKey(options),
+				ctx.getSignedKeyOwner(options),
+				ctx.getSignedKey(options)
+			]);
+			const recovery = ctx.getSignedKey(options).catch(() => {
+				rejectContext = false;
+				return ctx.getSignedKey(options);
+			});
+			for (const result of await failedKeys) assertEquals(result.status, "rejected");
+			assert(await recovery);
+			assertEquals(loads, {
+				key: 2,
+				owner: 0
+			});
+			assertEquals(exporter.getSpans("http_signatures.verify").length, 2);
+		});
+		await t.step("retries owner rejections while retaining the verified key", async () => {
+			exporter.clear();
+			let rejectContext = false;
+			const contextLoader = async (url, options) => {
+				if (rejectContext) throw new Error("transient owner context failure");
+				return await mockDocumentLoader(url, options);
+			};
+			const { ctx, loads } = setup();
+			const options = { contextLoader };
+			assert(await ctx.getSignedKey(options));
+			assertEquals(loads, {
+				key: 1,
+				owner: 0
+			});
+			rejectContext = true;
+			const failures = await Promise.allSettled([ctx.getSignedKeyOwner(options), ctx.getSignedKeyOwner(options)]);
+			for (const result of failures) assertEquals(result.status, "rejected");
+			assertEquals(loads, {
+				key: 1,
+				owner: 1
+			});
+			rejectContext = false;
+			assert(await ctx.getSignedKeyOwner(options));
+			assertEquals(loads, {
+				key: 1,
+				owner: 2
+			});
+			assertEquals(exporter.getSpans("http_signatures.verify").length, 1);
+		});
+		await t.step("keeps clones and separate requests independent", async () => {
+			exporter.clear();
+			const { ctx, loads, federation } = setup();
+			assert(await ctx.getSignedKeyOwner());
+			const clone = ctx.clone(void 0);
+			const separate = federation.createContext(new Request(request), void 0);
+			await Promise.all([clone.getSignedKeyOwner(), separate.getSignedKeyOwner()]);
+			assertEquals(loads, {
+				key: 3,
+				owner: 3
+			});
+			assertEquals(exporter.getSpans("http_signatures.verify").length, 3);
+		});
+	} finally {
+		await tracerProvider.shutdown();
+	}
+});
 test("Federation.fetch() [rfc9421] multiple POST signatures", async (t) => {
 	for (const validSecond of [true, false]) await t.step(validSecond ? "valid second signature" : "both signatures invalid", async () => {
 		const inbox = [];
@@ -1277,7 +1619,7 @@ test("Federation.fetch()", async (t) => {
 			kv,
 			documentLoaderFactory: () => mockDocumentLoader,
 			authenticatedDocumentLoaderFactory(identity) {
-				const docLoader = getAuthenticatedDocumentLoader(identity);
+				const docLoader = getAuthenticatedDocumentLoader(identity, { allowPrivateAddress: true });
 				return (url) => {
 					if (new URL(url).host === "example.com") return docLoader(url);
 					return mockDocumentLoader(url);
@@ -1728,7 +2070,7 @@ test("Federation.setInboxListeners()", async (t) => {
 			kv,
 			documentLoaderFactory: () => mockDocumentLoader,
 			authenticatedDocumentLoaderFactory(identity) {
-				const docLoader = getAuthenticatedDocumentLoader(identity);
+				const docLoader = getAuthenticatedDocumentLoader(identity, { allowPrivateAddress: true });
 				return (url) => {
 					const urlObj = new URL(url);
 					authenticatedRequests.push([url, identity.keyId.href]);
@@ -2051,7 +2393,7 @@ test("Federation.setInboxListeners()", async (t) => {
 			kv,
 			documentLoaderFactory: () => mockDocumentLoader,
 			authenticatedDocumentLoaderFactory(identity) {
-				const docLoader = getAuthenticatedDocumentLoader(identity);
+				const docLoader = getAuthenticatedDocumentLoader(identity, { allowPrivateAddress: true });
 				return (url) => {
 					if (new URL(url).host === "example.com") return docLoader(url);
 					return mockDocumentLoader(url);
@@ -2264,10 +2606,11 @@ test("Federation.setOutboxListeners()", async (t) => {
 						sinks: ["buffer"]
 					}]
 				});
-				const federation = createFederation({
+				const federation = new FederationImpl({
 					kv,
 					documentLoaderFactory: () => mockDocumentLoader
 				});
+				federation.allowPrivateAddress = true;
 				federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => identifier === "john" ? new vocab.Person({}) : null).setKeyPairsDispatcher(() => [{
 					privateKey: rsaPrivateKey2,
 					publicKey: rsaPublicKey2.publicKey
@@ -2370,10 +2713,11 @@ test("Federation.setOutboxListeners()", async (t) => {
 						sinks: ["buffer"]
 					}]
 				});
-				const federation = createFederation({
+				const federation = new FederationImpl({
 					kv,
 					documentLoaderFactory: () => mockDocumentLoader
 				});
+				federation.allowPrivateAddress = true;
 				federation.setActorDispatcher("/{identifier}", (_ctx, identifier) => identifier === "person2" ? new vocab.Person({}) : null).setKeyPairsDispatcher(() => [{
 					privateKey: rsaPrivateKey2,
 					publicKey: rsaPublicKey2.publicKey
@@ -2605,7 +2949,7 @@ test("FederationImpl.sendActivity()", async (t) => {
 	});
 	const federation = new FederationImpl({
 		kv: new MemoryKvStore(),
-		contextLoaderFactory: () => mockDocumentLoader
+		allowPrivateAddress: true
 	});
 	const context = federation.createContext(new URL("https://example.com/"));
 	await t.step("success", async () => {
@@ -6193,7 +6537,7 @@ test("ContextImpl.sendActivity()", async (t) => {
 	const kv = new MemoryKvStore();
 	const federation = new FederationImpl({
 		kv,
-		contextLoaderFactory: () => mockDocumentLoader
+		allowPrivateAddress: true
 	});
 	federation.setActorDispatcher("/{identifier}", async (ctx, identifier) => {
 		if (identifier !== "1") return null;
@@ -6316,11 +6660,13 @@ test("ContextImpl.sendActivity()", async (t) => {
 	});
 	await t.step("records recipient span attributes correctly", async () => {
 		const [tracerProvider, exporter] = createTestTracerProvider();
-		const ctx = new FederationImpl({
+		const federation3 = new FederationImpl({
 			kv,
 			contextLoaderFactory: () => mockDocumentLoader,
 			tracerProvider
-		}).createContext(new URL("https://example.com/"), void 0);
+		});
+		federation3.allowPrivateAddress = true;
+		const ctx = federation3.createContext(new URL("https://example.com/"), void 0);
 		const activity = new vocab.Create({
 			id: new URL("https://example.com/activity/telemetry"),
 			actor: new URL("https://example.com/person"),
@@ -6354,7 +6700,7 @@ test("ContextImpl.sendActivity()", async (t) => {
 	};
 	const federation2 = new FederationImpl({
 		kv,
-		contextLoaderFactory: () => mockDocumentLoader,
+		allowPrivateAddress: true,
 		queue
 	});
 	federation2.setActorDispatcher("/{identifier}", async (ctx, identifier) => {
@@ -6525,7 +6871,7 @@ test("ContextImpl.sendActivity()", async (t) => {
 		const asyncEnqueued = [];
 		const fed = new FederationImpl({
 			kv,
-			contextLoaderFactory: () => mockDocumentLoader,
+			allowPrivateAddress: true,
 			queue: {
 				enqueue(message) {
 					return new Promise((resolve) => {
@@ -6752,10 +7098,10 @@ test({
 		const signedInvite = await signObject(new vocab.Invite({ actor: new URL("https://example.com/person2") }), ed25519PrivateKey, ed25519Multikey.id);
 		assert(await ctx.routeActivity("id", signedInvite));
 		assertEquals(activities, [[null, signedOffer], ["id", signedInvite]]);
-		assertFalse(await ctx.routeActivity(null, new vocab.Create({
+		assertFalse(await withDnsLookup(() => Promise.reject(/* @__PURE__ */ new Error("Resolver unavailable")), () => ctx.routeActivity(null, new vocab.Create({
 			id: new URL("https://example.com/not-found"),
 			actor: new URL("https://example.com/person")
-		})));
+		}))));
 		assertEquals(activities, [[null, signedOffer], ["id", signedInvite]]);
 		assertFalse(await ctx.routeActivity(null, new vocab.Create({
 			id: new URL("https://example.com/person"),
@@ -7261,7 +7607,7 @@ test("InboxContextImpl.forwardActivity()", async (t) => {
 	const kv = new MemoryKvStore();
 	const federation = new FederationImpl({
 		kv,
-		contextLoaderFactory: () => mockDocumentLoader
+		allowPrivateAddress: true
 	});
 	await t.step("skip", async () => {
 		await new InboxContextImpl(null, {
@@ -7384,6 +7730,7 @@ test("InboxContextImpl.forwardActivity()", async (t) => {
 			contextLoaderFactory: () => mockDocumentLoader,
 			tracerProvider
 		});
+		federationWithTracing.allowPrivateAddress = true;
 		await new InboxContextImpl(null, await signJsonLd({
 			"@context": "https://www.w3.org/ns/activitystreams",
 			"type": "Create",
@@ -7576,5 +7923,19 @@ test("Federation.fetch() bounds inbox bodies before dispatch", async () => {
 	}), { contextData: void 0 })).status, 202);
 	assert(dispatched);
 });
+/**
+* Runs the given function while `node:dns/promises`' `lookup()`, which the
+* default public fetch resolves hostnames with, is replaced, so that no test
+* depends on the real DNS.
+*/
+async function withDnsLookup(lookup, fn) {
+	const originalLookup = dns.lookup;
+	dns.lookup = lookup;
+	try {
+		return await fn();
+	} finally {
+		dns.lookup = originalLookup;
+	}
+}
 //#endregion
 export {};

package/dist/federation/mod.cjs

@@ -2,7 +2,7 @@ const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../chunk-DDcVe30Y.cjs");
-const require_middleware = require("../middleware-D-SL8Bkj.cjs");
+const require_middleware = require("../middleware-4yPyyoF5.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _fedify_uri_template = require("@fedify/uri-template");
 let es_toolkit = require("es-toolkit");

package/dist/federation/mod.d.cts

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
-import { $ as CustomCollectionCursor, A as Rfc6570Expression, At as parseCircuitBreakerKvState, B as createFederationBuilder, C as FederationStartQueueOptions, Ct as CircuitBreakerFailurePolicy, D as InboxListenerSetters, Dt as CircuitBreakerStateChange, E as InboxChallengePolicy, Et as CircuitBreakerState, F as CreateExponentialBackoffPolicyOptions, G as ActorDispatcher, H as respondWithObject, I as RetryContext, J as AuthorizePredicate, K as ActorHandleMapper, L as RetryPolicy, M as FederationOrigin, N as FederationQueueOptions, O as ObjectCallbackSetters, Ot as NormalizedCircuitBreakerOptions, P as createFederation, Q as CustomCollectionCounter, R as createExponentialBackoffPolicy, S as FederationOptions, St as CircuitBreakerCreateOptions, T as IdempotencyStrategy, Tt as CircuitBreakerOptions, U as respondWithObjectIfAcceptable, V as RespondWithObjectOptions, W as ActorAliasMapper, X as CollectionCursor, Y as CollectionCounter, Z as CollectionDispatcher, _ as Federatable, _t as buildCollectionSynchronizationHeader, a as GetSignedKeyOptions, at as ObjectDispatcher, b as FederationBuilder, bt as CircuitBreakerActivityDrop, c as ParseUriResult, ct as OutboxListenerErrorHandler, d as SendActivityOptions, dt as UnverifiedActivityHandler, et as CustomCollectionDispatcher, f as SendActivityOptionsForCollection, ft as UnverifiedActivityReason, g as CustomCollectionCallbackSetters, gt as PageItems, h as ConstructorWithTypeId, ht as SenderKeyPair, i as GetActorOptions, it as ObjectAuthorizePredicate, j as FederationKvPrefixes, k as OutboxListenerSetters, kt as normalizeCircuitBreakerOptions, l as RequestContext, lt as OutboxPermanentFailureHandler, m as CollectionCallbackSetters, mt as SendActivityError, n as Context, nt as InboxListener, o as InboxContext, ot as OutboxErrorHandler, p as ActorCallbackSetters, pt as WebFingerLinksDispatcher, q as ActorKeyPairsDispatcher, r as ForwardActivityOptions, rt as NodeInfoDispatcher, s as OutboxContext, st as OutboxListener, t as ActorKeyPair, tt as InboxErrorHandler, u as RouteActivityOptions, ut as SharedInboxKeyDispatcher, v as Federation, vt as digest, w as IdempotencyKeyCallback, wt as CircuitBreakerKvState, x as FederationFetchOptions, xt as CircuitBreakerBeforeSendDecision, y as FederationBenchmarkOptions, yt as CircuitBreaker, z as Message } from "../context-MOrCC7yl.cjs";
+import { $ as CustomCollectionCursor, A as Rfc6570Expression, At as parseCircuitBreakerKvState, B as createFederationBuilder, C as FederationStartQueueOptions, Ct as CircuitBreakerFailurePolicy, D as InboxListenerSetters, Dt as CircuitBreakerStateChange, E as InboxChallengePolicy, Et as CircuitBreakerState, F as CreateExponentialBackoffPolicyOptions, G as ActorDispatcher, H as respondWithObject, I as RetryContext, J as AuthorizePredicate, K as ActorHandleMapper, L as RetryPolicy, M as FederationOrigin, N as FederationQueueOptions, O as ObjectCallbackSetters, Ot as NormalizedCircuitBreakerOptions, P as createFederation, Q as CustomCollectionCounter, R as createExponentialBackoffPolicy, S as FederationOptions, St as CircuitBreakerCreateOptions, T as IdempotencyStrategy, Tt as CircuitBreakerOptions, U as respondWithObjectIfAcceptable, V as RespondWithObjectOptions, W as ActorAliasMapper, X as CollectionCursor, Y as CollectionCounter, Z as CollectionDispatcher, _ as Federatable, _t as buildCollectionSynchronizationHeader, a as GetSignedKeyOptions, at as ObjectDispatcher, b as FederationBuilder, bt as CircuitBreakerActivityDrop, c as ParseUriResult, ct as OutboxListenerErrorHandler, d as SendActivityOptions, dt as UnverifiedActivityHandler, et as CustomCollectionDispatcher, f as SendActivityOptionsForCollection, ft as UnverifiedActivityReason, g as CustomCollectionCallbackSetters, gt as PageItems, h as ConstructorWithTypeId, ht as SenderKeyPair, i as GetActorOptions, it as ObjectAuthorizePredicate, j as FederationKvPrefixes, k as OutboxListenerSetters, kt as normalizeCircuitBreakerOptions, l as RequestContext, lt as OutboxPermanentFailureHandler, m as CollectionCallbackSetters, mt as SendActivityError, n as Context, nt as InboxListener, o as InboxContext, ot as OutboxErrorHandler, p as ActorCallbackSetters, pt as WebFingerLinksDispatcher, q as ActorKeyPairsDispatcher, r as ForwardActivityOptions, rt as NodeInfoDispatcher, s as OutboxContext, st as OutboxListener, t as ActorKeyPair, tt as InboxErrorHandler, u as RouteActivityOptions, ut as SharedInboxKeyDispatcher, v as Federation, vt as digest, w as IdempotencyKeyCallback, wt as CircuitBreakerKvState, x as FederationFetchOptions, xt as CircuitBreakerBeforeSendDecision, y as FederationBenchmarkOptions, yt as CircuitBreaker, z as Message } from "../context-CE_Tj_Oc.cjs";
 import { a as MemoryKvStore, i as KvStoreSetOptions, n as KvStore, r as KvStoreListEntry, t as KvKey } from "../kv-CZKl1IUS.cjs";
 import { a as MessageQueueEnqueueOptions, i as MessageQueueDepth, n as InProcessMessageQueueOptions, o as MessageQueueListenOptions, r as MessageQueue, s as ParallelMessageQueue, t as InProcessMessageQueue } from "../mq-D8uSFzxe.cjs";
-import { a as RouterOptions, i as RouterError, n as handleWebFinger, o as RouterRouteResult, r as Router, t as WebFingerHandlerParameters } from "../mod-B6PwkUMU.cjs";
+import { a as RouterOptions, i as RouterError, n as handleWebFinger, o as RouterRouteResult, r as Router, t as WebFingerHandlerParameters } from "../mod-DDjtbkZO.cjs";
 export { ActorAliasMapper, ActorCallbackSetters, ActorDispatcher, ActorHandleMapper, ActorKeyPair, ActorKeyPairsDispatcher, AuthorizePredicate, CircuitBreaker, CircuitBreakerActivityDrop, CircuitBreakerBeforeSendDecision, CircuitBreakerCreateOptions, CircuitBreakerFailurePolicy, CircuitBreakerKvState, CircuitBreakerOptions, CircuitBreakerState, CircuitBreakerStateChange, CollectionCallbackSetters, CollectionCounter, CollectionCursor, CollectionDispatcher, ConstructorWithTypeId, Context, CreateExponentialBackoffPolicyOptions, CustomCollectionCallbackSetters, CustomCollectionCounter, CustomCollectionCursor, CustomCollectionDispatcher, Federatable, Federation, FederationBenchmarkOptions, FederationBuilder, FederationFetchOptions, FederationKvPrefixes, FederationOptions, FederationOrigin, FederationQueueOptions, FederationStartQueueOptions, ForwardActivityOptions, GetActorOptions, GetSignedKeyOptions, IdempotencyKeyCallback, IdempotencyStrategy, InProcessMessageQueue, InProcessMessageQueueOptions, InboxChallengePolicy, InboxContext, InboxErrorHandler, InboxListener, InboxListenerSetters, KvKey, KvStore, KvStoreListEntry, KvStoreSetOptions, MemoryKvStore, Message, MessageQueue, MessageQueueDepth, MessageQueueEnqueueOptions, MessageQueueListenOptions, NodeInfoDispatcher, NormalizedCircuitBreakerOptions, ObjectAuthorizePredicate, ObjectCallbackSetters, ObjectDispatcher, OutboxContext, OutboxErrorHandler, OutboxListener, OutboxListenerErrorHandler, OutboxListenerSetters, OutboxPermanentFailureHandler, PageItems, ParallelMessageQueue, ParseUriResult, RequestContext, RespondWithObjectOptions, RetryContext, RetryPolicy, Rfc6570Expression, RouteActivityOptions, Router, RouterError, RouterOptions, RouterRouteResult, SendActivityError, SendActivityOptions, SendActivityOptionsForCollection, SenderKeyPair, SharedInboxKeyDispatcher, UnverifiedActivityHandler, UnverifiedActivityReason, WebFingerHandlerParameters, WebFingerLinksDispatcher, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, normalizeCircuitBreakerOptions, parseCircuitBreakerKvState, respondWithObject, respondWithObjectIfAcceptable };

package/dist/federation/mod.d.ts

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
-import { $ as CustomCollectionCursor, A as Rfc6570Expression, At as parseCircuitBreakerKvState, B as createFederationBuilder, C as FederationStartQueueOptions, Ct as CircuitBreakerFailurePolicy, D as InboxListenerSetters, Dt as CircuitBreakerStateChange, E as InboxChallengePolicy, Et as CircuitBreakerState, F as CreateExponentialBackoffPolicyOptions, G as ActorDispatcher, H as respondWithObject, I as RetryContext, J as AuthorizePredicate, K as ActorHandleMapper, L as RetryPolicy, M as FederationOrigin, N as FederationQueueOptions, O as ObjectCallbackSetters, Ot as NormalizedCircuitBreakerOptions, P as createFederation, Q as CustomCollectionCounter, R as createExponentialBackoffPolicy, S as FederationOptions, St as CircuitBreakerCreateOptions, T as IdempotencyStrategy, Tt as CircuitBreakerOptions, U as respondWithObjectIfAcceptable, V as RespondWithObjectOptions, W as ActorAliasMapper, X as CollectionCursor, Y as CollectionCounter, Z as CollectionDispatcher, _ as Federatable, _t as buildCollectionSynchronizationHeader, a as GetSignedKeyOptions, at as ObjectDispatcher, b as FederationBuilder, bt as CircuitBreakerActivityDrop, c as ParseUriResult, ct as OutboxListenerErrorHandler, d as SendActivityOptions, dt as UnverifiedActivityHandler, et as CustomCollectionDispatcher, f as SendActivityOptionsForCollection, ft as UnverifiedActivityReason, g as CustomCollectionCallbackSetters, gt as PageItems, h as ConstructorWithTypeId, ht as SenderKeyPair, i as GetActorOptions, it as ObjectAuthorizePredicate, j as FederationKvPrefixes, k as OutboxListenerSetters, kt as normalizeCircuitBreakerOptions, l as RequestContext, lt as OutboxPermanentFailureHandler, m as CollectionCallbackSetters, mt as SendActivityError, n as Context, nt as InboxListener, o as InboxContext, ot as OutboxErrorHandler, p as ActorCallbackSetters, pt as WebFingerLinksDispatcher, q as ActorKeyPairsDispatcher, r as ForwardActivityOptions, rt as NodeInfoDispatcher, s as OutboxContext, st as OutboxListener, t as ActorKeyPair, tt as InboxErrorHandler, u as RouteActivityOptions, ut as SharedInboxKeyDispatcher, v as Federation, vt as digest, w as IdempotencyKeyCallback, wt as CircuitBreakerKvState, x as FederationFetchOptions, xt as CircuitBreakerBeforeSendDecision, y as FederationBenchmarkOptions, yt as CircuitBreaker, z as Message } from "../context-BWbdE_MZ.js";
+import { $ as CustomCollectionCursor, A as Rfc6570Expression, At as parseCircuitBreakerKvState, B as createFederationBuilder, C as FederationStartQueueOptions, Ct as CircuitBreakerFailurePolicy, D as InboxListenerSetters, Dt as CircuitBreakerStateChange, E as InboxChallengePolicy, Et as CircuitBreakerState, F as CreateExponentialBackoffPolicyOptions, G as ActorDispatcher, H as respondWithObject, I as RetryContext, J as AuthorizePredicate, K as ActorHandleMapper, L as RetryPolicy, M as FederationOrigin, N as FederationQueueOptions, O as ObjectCallbackSetters, Ot as NormalizedCircuitBreakerOptions, P as createFederation, Q as CustomCollectionCounter, R as createExponentialBackoffPolicy, S as FederationOptions, St as CircuitBreakerCreateOptions, T as IdempotencyStrategy, Tt as CircuitBreakerOptions, U as respondWithObjectIfAcceptable, V as RespondWithObjectOptions, W as ActorAliasMapper, X as CollectionCursor, Y as CollectionCounter, Z as CollectionDispatcher, _ as Federatable, _t as buildCollectionSynchronizationHeader, a as GetSignedKeyOptions, at as ObjectDispatcher, b as FederationBuilder, bt as CircuitBreakerActivityDrop, c as ParseUriResult, ct as OutboxListenerErrorHandler, d as SendActivityOptions, dt as UnverifiedActivityHandler, et as CustomCollectionDispatcher, f as SendActivityOptionsForCollection, ft as UnverifiedActivityReason, g as CustomCollectionCallbackSetters, gt as PageItems, h as ConstructorWithTypeId, ht as SenderKeyPair, i as GetActorOptions, it as ObjectAuthorizePredicate, j as FederationKvPrefixes, k as OutboxListenerSetters, kt as normalizeCircuitBreakerOptions, l as RequestContext, lt as OutboxPermanentFailureHandler, m as CollectionCallbackSetters, mt as SendActivityError, n as Context, nt as InboxListener, o as InboxContext, ot as OutboxErrorHandler, p as ActorCallbackSetters, pt as WebFingerLinksDispatcher, q as ActorKeyPairsDispatcher, r as ForwardActivityOptions, rt as NodeInfoDispatcher, s as OutboxContext, st as OutboxListener, t as ActorKeyPair, tt as InboxErrorHandler, u as RouteActivityOptions, ut as SharedInboxKeyDispatcher, v as Federation, vt as digest, w as IdempotencyKeyCallback, wt as CircuitBreakerKvState, x as FederationFetchOptions, xt as CircuitBreakerBeforeSendDecision, y as FederationBenchmarkOptions, yt as CircuitBreaker, z as Message } from "../context-H_5tZXg-.js";
 import { a as MemoryKvStore, i as KvStoreSetOptions, n as KvStore, r as KvStoreListEntry, t as KvKey } from "../kv-CxaI4eGo.js";
 import { a as MessageQueueEnqueueOptions, i as MessageQueueDepth, n as InProcessMessageQueueOptions, o as MessageQueueListenOptions, r as MessageQueue, s as ParallelMessageQueue, t as InProcessMessageQueue } from "../mq-D-nlpY04.js";
-import { a as RouterOptions, i as RouterError, n as handleWebFinger, o as RouterRouteResult, r as Router, t as WebFingerHandlerParameters } from "../mod-LmD03uRA.js";
+import { a as RouterOptions, i as RouterError, n as handleWebFinger, o as RouterRouteResult, r as Router, t as WebFingerHandlerParameters } from "../mod-CDFFESfL.js";
 export { ActorAliasMapper, ActorCallbackSetters, ActorDispatcher, ActorHandleMapper, ActorKeyPair, ActorKeyPairsDispatcher, AuthorizePredicate, CircuitBreaker, CircuitBreakerActivityDrop, CircuitBreakerBeforeSendDecision, CircuitBreakerCreateOptions, CircuitBreakerFailurePolicy, CircuitBreakerKvState, CircuitBreakerOptions, CircuitBreakerState, CircuitBreakerStateChange, CollectionCallbackSetters, CollectionCounter, CollectionCursor, CollectionDispatcher, ConstructorWithTypeId, Context, CreateExponentialBackoffPolicyOptions, CustomCollectionCallbackSetters, CustomCollectionCounter, CustomCollectionCursor, CustomCollectionDispatcher, Federatable, Federation, FederationBenchmarkOptions, FederationBuilder, FederationFetchOptions, FederationKvPrefixes, FederationOptions, FederationOrigin, FederationQueueOptions, FederationStartQueueOptions, ForwardActivityOptions, GetActorOptions, GetSignedKeyOptions, IdempotencyKeyCallback, IdempotencyStrategy, InProcessMessageQueue, InProcessMessageQueueOptions, InboxChallengePolicy, InboxContext, InboxErrorHandler, InboxListener, InboxListenerSetters, KvKey, KvStore, KvStoreListEntry, KvStoreSetOptions, MemoryKvStore, Message, MessageQueue, MessageQueueDepth, MessageQueueEnqueueOptions, MessageQueueListenOptions, NodeInfoDispatcher, NormalizedCircuitBreakerOptions, ObjectAuthorizePredicate, ObjectCallbackSetters, ObjectDispatcher, OutboxContext, OutboxErrorHandler, OutboxListener, OutboxListenerErrorHandler, OutboxListenerSetters, OutboxPermanentFailureHandler, PageItems, ParallelMessageQueue, ParseUriResult, RequestContext, RespondWithObjectOptions, RetryContext, RetryPolicy, Rfc6570Expression, RouteActivityOptions, Router, RouterError, RouterOptions, RouterRouteResult, SendActivityError, SendActivityOptions, SendActivityOptionsForCollection, SenderKeyPair, SharedInboxKeyDispatcher, UnverifiedActivityHandler, UnverifiedActivityReason, WebFingerHandlerParameters, WebFingerLinksDispatcher, buildCollectionSynchronizationHeader, createExponentialBackoffPolicy, createFederation, createFederationBuilder, digest, handleWebFinger, normalizeCircuitBreakerOptions, parseCircuitBreakerKvState, respondWithObject, respondWithObjectIfAcceptable };

package/dist/federation/mod.js

@@ -1,6 +1,6 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { a as SendActivityError, c as buildCollectionSynchronizationHeader, d as normalizeCircuitBreakerOptions, f as parseCircuitBreakerKvState, i as createExponentialBackoffPolicy, l as digest, o as respondWithObject, p as createFederationBuilder, r as handleWebFinger, s as respondWithObjectIfAcceptable, t as createFederation, u as CircuitBreaker } from "../middleware-WL-JfDiK.js";
+import { a as SendActivityError, c as buildCollectionSynchronizationHeader, d as normalizeCircuitBreakerOptions, f as parseCircuitBreakerKvState, i as createExponentialBackoffPolicy, l as digest, o as respondWithObject, p as createFederationBuilder, r as handleWebFinger, s as respondWithObjectIfAcceptable, t as createFederation, u as CircuitBreaker } from "../middleware-DhN7c65B.js";
 import { getLogger } from "@logtape/logtape";
 import { Router as Router$1, RouterError as RouterError$1, assertPath, isPath } from "@fedify/uri-template";
 import { isEqual } from "es-toolkit";