@fedify/fedify 2.4.0-dev.1564 → 2.4.0-dev.1567

package/dist/{metrics-D7atQvAx.mjs → metrics-CR4UD_gF.mjs}

@@ -1,7 +1,7 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-0Q35TVjL.mjs";
+import { n as version, t as name } from "./deno-Dho0TW0X.mjs";
 import { metrics } from "@opentelemetry/api";
 import { FetchError } from "@fedify/vocab-runtime";
 //#region src/federation/metrics.ts
@@ -167,11 +167,11 @@ var FederationMetrics = class {
 			unit: "{change}"
 		});
 		this.keyLookup = meter.createCounter("activitypub.key.lookup", {
-			description: "Public-key lookup attempts performed by Fedify, including both cache hits and remote fetches.",
+			description: "Public-key lookup attempts performed by Fedify, including cache hits, local resolutions, and remote fetches.",
 			unit: "{lookup}"
 		});
 		this.keyLookupDuration = meter.createHistogram("activitypub.key.lookup.duration", {
-			description: "Duration of public-key lookups performed by Fedify, including any remote fetch.",
+			description: "Duration of public-key lookups performed by Fedify, including cache hits, local resolutions, and any remote fetch.",
 			unit: "ms",
 			advice: { explicitBucketBoundaries: [
 				5,

package/dist/{middleware-ICGLZUHG.js → middleware-BoNiH9CQ.js}

@@ -2,10 +2,10 @@ import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
 import { t as __exportAll } from "./chunk-CRNNMoPX.js";
 import { r as getDefaultActivityTransformers } from "./transformers-BGMIq1cs.js";
-import { A as formatAcceptSignature, D as recordOutboxEnqueue, E as recordOutboxActivity, F as version, O as recordWebFingerHandle, P as name, S as recordCollectionTotalItems, T as recordInboxActivity, a as verifyRequestDetailed, b as recordCollectionPageItems, d as validateCryptoKey, f as getDurationMs, g as isAbortError, h as instrumentDocumentLoader, i as verifyRequest, k as registerQueueDepthGauge, m as getRemoteHost, n as parseRfc9421SignatureInput, o as exportJwk, p as getFederationMetrics, t as doubleKnock, u as importJwk, v as recordCircuitBreakerStateChange, w as recordFanoutRecipients, x as recordCollectionRequest, y as recordCollectionDispatchDuration } from "./http-BjTMQwgu.js";
-import { _ as hasSignatureLike, b as signJsonLd, c as getKeyOwner, f as compactJsonLd, g as hasSignature, h as getNormalizationContextLoader, i as verifyObject, l as InvalidContextReferenceError, m as detachSignature, n as hasProofLike, o as normalizeOutgoingActivityJsonLd, r as signObject, s as doesActorOwnKey, u as assertSafeJsonLd, v as isClearlyMalformedContextReference, w as wrapContextLoaderForJsonLd, x as verifyCompactJsonLd, y as isInvalidUrlTypeError } from "./proof-hzw73GGW.js";
+import { A as formatAcceptSignature, D as recordOutboxEnqueue, E as recordOutboxActivity, F as version, O as recordWebFingerHandle, P as name, S as recordCollectionTotalItems, T as recordInboxActivity, a as verifyRequestDetailed, b as recordCollectionPageItems, d as validateCryptoKey, f as getDurationMs, g as isAbortError, h as instrumentDocumentLoader, i as verifyRequest, k as registerQueueDepthGauge, m as getRemoteHost, n as parseRfc9421SignatureInput, o as exportJwk, p as getFederationMetrics, t as doubleKnock, u as importJwk, v as recordCircuitBreakerStateChange, w as recordFanoutRecipients, x as recordCollectionRequest, y as recordCollectionDispatchDuration } from "./http-sngIMb9S.js";
+import { _ as hasSignatureLike, b as signJsonLd, c as getKeyOwner, f as compactJsonLd, g as hasSignature, h as getNormalizationContextLoader, i as verifyObject, l as InvalidContextReferenceError, m as detachSignature, n as hasProofLike, o as normalizeOutgoingActivityJsonLd, r as signObject, s as doesActorOwnKey, u as assertSafeJsonLd, v as isClearlyMalformedContextReference, w as wrapContextLoaderForJsonLd, x as verifyCompactJsonLd, y as isInvalidUrlTypeError } from "./proof-C5i7MhbD.js";
 import { n as getNodeInfo, t as nodeInfoToJson } from "./types-CAY3OdLq.js";
-import { n as getAuthenticatedDocumentLoader, t as kvCache } from "./kv-cache-3GvEiOJJ.js";
+import { n as getAuthenticatedDocumentLoader, t as kvCache } from "./kv-cache-B0siRaoZ.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
 import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, Tombstone, getTypeId, lookupObject, traverseCollection } from "@fedify/vocab";

package/dist/{middleware-DYaez_JC.mjs → middleware-CIteB8IS.mjs}

@@ -1,5 +1,5 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as FederationImpl } from "./middleware-B3XvOhoB.mjs";
+import { n as FederationImpl } from "./middleware-DfBPuuvp.mjs";
 export { FederationImpl };

package/dist/{middleware-DM5XOWG5.cjs → middleware-DUelXs9h.cjs}

@@ -2,10 +2,10 @@ const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
 const require_chunk = require("./chunk-DDcVe30Y.cjs");
 const require_transformers = require("./transformers-NeAONrAq.cjs");
-const require_http = require("./http-Blx3a-we.cjs");
-const require_proof = require("./proof-B0wYpR4P.cjs");
+const require_http = require("./http-C7Lot0it.cjs");
+const require_proof = require("./proof-DzKUmE7R.cjs");
 const require_types = require("./types-KC4QAoxe.cjs");
-const require_kv_cache = require("./kv-cache-BB6kQbPO.cjs");
+const require_kv_cache = require("./kv-cache-CO2IaDJu.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _fedify_uri_template = require("@fedify/uri-template");
 let _fedify_vocab = require("@fedify/vocab");

package/dist/{middleware-B3XvOhoB.mjs → middleware-DfBPuuvp.mjs}

@@ -1,26 +1,26 @@
 import { Temporal } from "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-0Q35TVjL.mjs";
-import { a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, n as getDurationMs, o as isAbortError, r as getFederationMetrics, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "./metrics-D7atQvAx.mjs";
+import { n as version, t as name } from "./deno-Dho0TW0X.mjs";
+import { a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, n as getDurationMs, o as isAbortError, r as getFederationMetrics, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "./metrics-CR4UD_gF.mjs";
 import { t as formatAcceptSignature } from "./accept-CPkZzmGN.mjs";
-import { a as importJwk, o as validateCryptoKey, t as exportJwk } from "./key-By86iSF1.mjs";
-import { l as verifyRequest, o as parseRfc9421SignatureInput, u as verifyRequestDetailed } from "./http-ZYObKFyR.mjs";
-import { t as getAuthenticatedDocumentLoader } from "./docloader-DnNi7FT5.mjs";
-import { n as kvCache } from "./kv-cache-W72QYEvy.mjs";
-import { _ as wrapContextLoaderForJsonLd, a as compactJsonLd, c as getNormalizationContextLoader, d as isClearlyMalformedContextReference, f as isInvalidUrlTypeError, l as hasSignature, m as verifyCompactJsonLd, p as signJsonLd, r as assertSafeJsonLd, s as detachSignature, t as InvalidContextReferenceError, u as hasSignatureLike } from "./ld-uNPJsHf9.mjs";
-import { n as getKeyOwner, t as doesActorOwnKey } from "./owner-C1IdnJbE.mjs";
+import { a as importJwk, o as validateCryptoKey, t as exportJwk } from "./key-3rYgSl9f.mjs";
+import { l as verifyRequest, o as parseRfc9421SignatureInput, u as verifyRequestDetailed } from "./http-Bf8YhWOi.mjs";
+import { t as getAuthenticatedDocumentLoader } from "./docloader-DCQSgDOg.mjs";
+import { n as kvCache } from "./kv-cache-P3scUO6t.mjs";
+import { _ as wrapContextLoaderForJsonLd, a as compactJsonLd, c as getNormalizationContextLoader, d as isClearlyMalformedContextReference, f as isInvalidUrlTypeError, l as hasSignature, m as verifyCompactJsonLd, p as signJsonLd, r as assertSafeJsonLd, s as detachSignature, t as InvalidContextReferenceError, u as hasSignatureLike } from "./ld-CCOPy-Co.mjs";
+import { n as getKeyOwner, t as doesActorOwnKey } from "./owner-TUz_H-M9.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "./outgoing-jsonld-L_DbOaFe.mjs";
-import { i as verifyObject, n as hasProofLike, r as signObject } from "./proof-3th48TRO.mjs";
+import { i as verifyObject, n as hasProofLike, r as signObject } from "./proof-CrI3UpuA.mjs";
 import { t as getNodeInfo } from "./client-ByXmQhYD.mjs";
 import { t as nodeInfoToJson } from "./types-J53Kw7so.mjs";
-import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "./send-BqPEr21p.mjs";
-import { n as FederationBuilderImpl, t as ACTOR_ALIAS_PREFIX } from "./builder-DQrTY2uR.mjs";
+import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "./send-BBs_erdP.mjs";
+import { n as FederationBuilderImpl, t as ACTOR_ALIAS_PREFIX } from "./builder-DGWCUaNQ.mjs";
 import { t as CircuitBreaker } from "./circuit-breaker-CSWsyoef.mjs";
 import { t as buildCollectionSynchronizationHeader } from "./collection-Cc3DVAhE.mjs";
 import { t as KvKeyCache } from "./keycache-BeU0LCII.mjs";
 import { t as acceptsJsonLd } from "./negotiation-DDstyBvc.mjs";
-import { t as hasMalformedKnownTemporalLiteral } from "./temporal-C7NUQ3nU.mjs";
+import { t as hasMalformedKnownTemporalLiteral } from "./temporal-bBIy2G-F.mjs";
 import { t as createExponentialBackoffPolicy } from "./retry-CXg_MBI-.mjs";
 import { getLogger, withContext } from "@logtape/logtape";
 import { RouterError } from "@fedify/uri-template";

package/dist/mod.cjs

@@ -4,11 +4,11 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("./chunk-DDcVe30Y.cjs");
 const require_transformers = require("./transformers-NeAONrAq.cjs");
 require("./compat/mod.cjs");
-const require_http = require("./http-Blx3a-we.cjs");
-const require_middleware = require("./middleware-DM5XOWG5.cjs");
-const require_proof = require("./proof-B0wYpR4P.cjs");
+const require_http = require("./http-C7Lot0it.cjs");
+const require_middleware = require("./middleware-DUelXs9h.cjs");
+const require_proof = require("./proof-DzKUmE7R.cjs");
 const require_types = require("./types-KC4QAoxe.cjs");
-const require_kv_cache = require("./kv-cache-BB6kQbPO.cjs");
+const require_kv_cache = require("./kv-cache-CO2IaDJu.cjs");
 const require_federation_mod = require("./federation/mod.cjs");
 require("./nodeinfo/mod.cjs");
 require("./runtime/mod.cjs");

package/dist/mod.js

@@ -3,11 +3,11 @@ import { URLPattern } from "urlpattern-polyfill";
 import "./chunk-CRNNMoPX.js";
 import { n as autoIdAssigner, r as getDefaultActivityTransformers, t as actorDehydrator } from "./transformers-BGMIq1cs.js";
 import "./compat/mod.js";
-import { A as formatAcceptSignature, M as parseAcceptSignature, N as validateAcceptSignature, a as verifyRequestDetailed, c as fetchKeyDetailed, i as verifyRequest, j as fulfillAcceptSignature, l as generateCryptoKeyPair, o as exportJwk, r as signRequest, s as fetchKey, u as importJwk } from "./http-BjTMQwgu.js";
-import { a as SendActivityError, c as buildCollectionSynchronizationHeader, d as normalizeCircuitBreakerOptions, f as parseCircuitBreakerKvState, i as createExponentialBackoffPolicy, l as digest, o as respondWithObject, p as createFederationBuilder, r as handleWebFinger, s as respondWithObjectIfAcceptable, t as createFederation, u as CircuitBreaker } from "./middleware-ICGLZUHG.js";
-import { C as verifySignature, S as verifyJsonLd, _ as hasSignatureLike, a as verifyProof, b as signJsonLd, c as getKeyOwner, d as attachSignature, i as verifyObject, m as detachSignature, n as hasProofLike, p as createSignature, r as signObject, s as doesActorOwnKey, t as createProof } from "./proof-hzw73GGW.js";
+import { A as formatAcceptSignature, M as parseAcceptSignature, N as validateAcceptSignature, a as verifyRequestDetailed, c as fetchKeyDetailed, i as verifyRequest, j as fulfillAcceptSignature, l as generateCryptoKeyPair, o as exportJwk, r as signRequest, s as fetchKey, u as importJwk } from "./http-sngIMb9S.js";
+import { a as SendActivityError, c as buildCollectionSynchronizationHeader, d as normalizeCircuitBreakerOptions, f as parseCircuitBreakerKvState, i as createExponentialBackoffPolicy, l as digest, o as respondWithObject, p as createFederationBuilder, r as handleWebFinger, s as respondWithObjectIfAcceptable, t as createFederation, u as CircuitBreaker } from "./middleware-BoNiH9CQ.js";
+import { C as verifySignature, S as verifyJsonLd, _ as hasSignatureLike, a as verifyProof, b as signJsonLd, c as getKeyOwner, d as attachSignature, i as verifyObject, m as detachSignature, n as hasProofLike, p as createSignature, r as signObject, s as doesActorOwnKey, t as createProof } from "./proof-C5i7MhbD.js";
 import { n as getNodeInfo, r as parseNodeInfo, t as nodeInfoToJson } from "./types-CAY3OdLq.js";
-import { n as getAuthenticatedDocumentLoader, t as kvCache } from "./kv-cache-3GvEiOJJ.js";
+import { n as getAuthenticatedDocumentLoader, t as kvCache } from "./kv-cache-B0siRaoZ.js";
 import { InProcessMessageQueue, MemoryKvStore, ParallelMessageQueue, Router, RouterError } from "./federation/mod.js";
 import "./nodeinfo/mod.js";
 import "./runtime/mod.js";

package/dist/nodeinfo/handler.test.mjs

@@ -5,7 +5,7 @@ import { r as createRequestContext } from "../context-DVoTs_wM.mjs";
 import { t as assertEquals } from "../assert_equals-C-ZRDbaf.mjs";
 import "../std__assert-BBjXFNOb.mjs";
 import { t as MemoryKvStore } from "../kv-rV3vodCc.mjs";
-import { _ as handleNodeInfo, o as createFederation, v as handleNodeInfoJrd } from "../middleware-B3XvOhoB.mjs";
+import { _ as handleNodeInfo, o as createFederation, v as handleNodeInfoJrd } from "../middleware-DfBPuuvp.mjs";
 import { test } from "@fedify/fixture";
 //#region src/nodeinfo/handler.test.ts
 test("handleNodeInfo()", async () => {

package/dist/{owner-C1IdnJbE.mjs → owner-TUz_H-M9.mjs}

@@ -1,8 +1,8 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-0Q35TVjL.mjs";
-import "./key-By86iSF1.mjs";
+import { n as version, t as name } from "./deno-Dho0TW0X.mjs";
+import "./key-3rYgSl9f.mjs";
 import { CryptographicKey, Object as Object$1, isActor } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 import { getDocumentLoader } from "@fedify/vocab-runtime";

package/dist/{proof-hzw73GGW.js → proof-C5i7MhbD.js}

@@ -1,6 +1,6 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { F as version, P as name, _ as measureSignatureKeyFetch, d as validateCryptoKey, f as getDurationMs, p as getFederationMetrics, s as fetchKey } from "./http-BjTMQwgu.js";
+import { F as version, P as name, _ as measureSignatureKeyFetch, d as validateCryptoKey, f as getDurationMs, p as getFederationMetrics, s as fetchKey } from "./http-sngIMb9S.js";
 import { getLogger } from "@logtape/logtape";
 import { Activity, CryptographicKey, DataIntegrityProof, Multikey, Object as Object$1, PUBLIC_COLLECTION, getTypeId, isActor } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{proof-3th48TRO.mjs → proof-CrI3UpuA.mjs}

@@ -1,9 +1,9 @@
 import { Temporal } from "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-0Q35TVjL.mjs";
-import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-D7atQvAx.mjs";
-import { n as fetchKey, o as validateCryptoKey } from "./key-By86iSF1.mjs";
+import { n as version, t as name } from "./deno-Dho0TW0X.mjs";
+import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-CR4UD_gF.mjs";
+import { n as fetchKey, o as validateCryptoKey } from "./key-3rYgSl9f.mjs";
 import { n as preloadedOnlyDocumentLoader } from "./public-audience-Cvbr2Gzt.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "./outgoing-jsonld-L_DbOaFe.mjs";
 import { getLogger } from "@logtape/logtape";

package/dist/{proof-B0wYpR4P.cjs → proof-DzKUmE7R.cjs}

@@ -1,7 +1,7 @@
 const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
 const require_chunk = require("./chunk-DDcVe30Y.cjs");
-const require_http = require("./http-Blx3a-we.cjs");
+const require_http = require("./http-C7Lot0it.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _fedify_vocab = require("@fedify/vocab");
 let _opentelemetry_api = require("@opentelemetry/api");

package/dist/{send-BqPEr21p.mjs → send-BBs_erdP.mjs}

@@ -1,9 +1,9 @@
 import "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-0Q35TVjL.mjs";
-import { n as getDurationMs, r as getFederationMetrics } from "./metrics-D7atQvAx.mjs";
-import { n as doubleKnock } from "./http-ZYObKFyR.mjs";
+import { n as version, t as name } from "./deno-Dho0TW0X.mjs";
+import { n as getDurationMs, r as getFederationMetrics } from "./metrics-CR4UD_gF.mjs";
+import { n as doubleKnock } from "./http-Bf8YhWOi.mjs";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 import { FetchError } from "@fedify/vocab-runtime";

package/dist/sig/http.test.mjs

@@ -7,8 +7,8 @@ import { r as assertExists, t as assertStringIncludes } from "../std__assert-BBj
 import { n as assertGreaterOrEqual, r as assertFalse, t as assertRejects } from "../assert_rejects-DN60FHPX.mjs";
 import { t as assertThrows } from "../assert_throws-BOkhLGYc.mjs";
 import { t as assert } from "../assert-OguE97r2.mjs";
-import { t as exportJwk } from "../key-By86iSF1.mjs";
-import { a as parseRfc9421Signature, c as timingSafeEqual, i as formatRfc9421SignatureParameters, l as verifyRequest, n as doubleKnock, o as parseRfc9421SignatureInput, r as formatRfc9421Signature, s as signRequest, t as createRfc9421SignatureBase, u as verifyRequestDetailed } from "../http-ZYObKFyR.mjs";
+import { t as exportJwk } from "../key-3rYgSl9f.mjs";
+import { a as parseRfc9421Signature, c as timingSafeEqual, i as formatRfc9421SignatureParameters, l as verifyRequest, n as doubleKnock, o as parseRfc9421SignatureInput, r as formatRfc9421Signature, s as signRequest, t as createRfc9421SignatureBase, u as verifyRequestDetailed } from "../http-Bf8YhWOi.mjs";
 import { i as rsaPrivateKey2, l as rsaPublicKey5, o as rsaPublicKey1, s as rsaPublicKey2 } from "../keys-DGu1NFwu.mjs";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { FetchError, exportSpki } from "@fedify/vocab-runtime";

package/dist/sig/key.test.mjs

@@ -5,11 +5,11 @@ import { t as assertEquals } from "../assert_equals-C-ZRDbaf.mjs";
 import "../std__assert-BBjXFNOb.mjs";
 import { t as assertRejects } from "../assert_rejects-DN60FHPX.mjs";
 import { t as assertThrows } from "../assert_throws-BOkhLGYc.mjs";
-import { a as importJwk, i as generateCryptoKeyPair, n as fetchKey, o as validateCryptoKey, r as fetchKeyDetailed, t as exportJwk } from "../key-By86iSF1.mjs";
-import { c as rsaPublicKey3, i as rsaPrivateKey2, o as rsaPublicKey1, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DGu1NFwu.mjs";
+import { a as importJwk, i as generateCryptoKeyPair, n as fetchKey, o as validateCryptoKey, r as fetchKeyDetailed, t as exportJwk } from "../key-3rYgSl9f.mjs";
+import { c as rsaPublicKey3, i as rsaPrivateKey2, o as rsaPublicKey1, r as ed25519PublicKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DGu1NFwu.mjs";
 import { CryptographicKey, Multikey } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
-import { FetchError } from "@fedify/vocab-runtime";
+import { FetchError, exportDidKey } from "@fedify/vocab-runtime";
 //#region src/sig/key.test.ts
 test("validateCryptoKey()", async () => {
 	const pkcs1v15 = await crypto.subtle.generateKey({
@@ -303,6 +303,190 @@ test("fetchKeyDetailed() returns detailed fetch errors", async () => {
 	if (detailedError == null || !("error" in detailedError)) throw new Error("Expected non-HTTP fetch error details.");
 	assertEquals(detailedError.error, failure);
 });
+test("fetchKey() resolves did:key Multikeys without document loading", async () => {
+	const did = await exportDidKey(ed25519PublicKey.publicKey);
+	const keyId = `${did}#${did.slice(8)}`;
+	const expectedKey = new Multikey({
+		id: new URL(keyId),
+		controller: new URL(did),
+		publicKey: ed25519PublicKey.publicKey
+	});
+	const cache = { [keyId]: null };
+	let documentLoaderCalls = 0;
+	const options = {
+		documentLoader() {
+			documentLoaderCalls++;
+			throw new TypeError("did:key must not use the document loader");
+		},
+		contextLoader: mockDocumentLoader,
+		keyCache: {
+			get(keyId) {
+				return Promise.resolve(cache[keyId.href]);
+			},
+			set(keyId, key) {
+				cache[keyId.href] = key;
+				return Promise.resolve();
+			}
+		}
+	};
+	assertEquals(await fetchKey(keyId, Multikey, options), {
+		key: expectedKey,
+		cached: false
+	});
+	assertEquals(documentLoaderCalls, 0);
+	assertEquals(cache[keyId], expectedKey);
+	assertEquals(await fetchKey(keyId, Multikey, options), {
+		key: expectedKey,
+		cached: true
+	});
+	assertEquals(documentLoaderCalls, 0);
+});
+test("fetchKey() validates cached did:key Multikeys", async () => {
+	const did = await exportDidKey(ed25519PublicKey.publicKey);
+	const keyId = `${did}#${did.slice(8)}`;
+	const wrongKeyPair = await generateCryptoKeyPair("Ed25519");
+	const cachedKey = new Multikey({
+		id: new URL(keyId),
+		controller: new URL(did),
+		publicKey: wrongKeyPair.publicKey
+	});
+	const expectedKey = new Multikey({
+		id: new URL(keyId),
+		controller: new URL(did),
+		publicKey: ed25519PublicKey.publicKey
+	});
+	const cache = { [keyId]: cachedKey };
+	let documentLoaderCalls = 0;
+	assertEquals(await fetchKey(keyId, Multikey, {
+		documentLoader() {
+			documentLoaderCalls++;
+			throw new TypeError("did:key must not use the document loader");
+		},
+		contextLoader: mockDocumentLoader,
+		keyCache: {
+			get(keyId) {
+				return Promise.resolve(cache[keyId.href]);
+			},
+			set(keyId, key) {
+				cache[keyId.href] = key;
+				return Promise.resolve();
+			}
+		}
+	}), {
+		key: expectedKey,
+		cached: false
+	});
+	assertEquals(documentLoaderCalls, 0);
+	assertEquals(cache[keyId], expectedKey);
+});
+test("fetchKey() rejects unsupported did:key values locally", async () => {
+	const invalidKeyId = "did:key:z6MksHj1MJnidCtDiyYW9ugNFftoX9fLK4bornTxmMZ6X7vq#z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK";
+	const cache = {};
+	let documentLoaderCalls = 0;
+	const [meterProvider, recorder] = createTestMeterProvider();
+	assertEquals(await fetchKey(invalidKeyId, Multikey, {
+		documentLoader() {
+			documentLoaderCalls++;
+			throw new TypeError("did:key must not use the document loader");
+		},
+		contextLoader: mockDocumentLoader,
+		meterProvider,
+		keyCache: {
+			get(keyId) {
+				return Promise.resolve(cache[keyId.href]);
+			},
+			set(keyId, key) {
+				cache[keyId.href] = key;
+				return Promise.resolve();
+			}
+		}
+	}), {
+		key: null,
+		cached: false
+	});
+	assertEquals(documentLoaderCalls, 0);
+	assertEquals(cache, {});
+	assertEquals(recorder.getMeasurement("activitypub.key.lookup")?.attributes["activitypub.lookup.result"], "invalid");
+});
+test("fetchKeyDetailed() resolves did:key without fetchError", async () => {
+	const did = await exportDidKey(ed25519PublicKey.publicKey);
+	const result = await fetchKeyDetailed(`${did}#${did.slice(8)}`, Multikey, {
+		documentLoader() {
+			throw new TypeError("did:key must not use the document loader");
+		},
+		contextLoader: mockDocumentLoader
+	});
+	assertEquals(result.key instanceof Multikey, true);
+	assertEquals(result.cached, false);
+	assertEquals(result.fetchError, void 0);
+});
+test("fetchKeyDetailed() rejects invalid did:key without fetchError", async () => {
+	const invalidKeyId = "did:key:z6MksHj1MJnidCtDiyYW9ugNFftoX9fLK4bornTxmMZ6X7vq#z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK";
+	const cache = {};
+	let documentLoaderCalls = 0;
+	const result = await fetchKeyDetailed(invalidKeyId, Multikey, {
+		documentLoader() {
+			documentLoaderCalls++;
+			throw new TypeError("did:key must not use the document loader");
+		},
+		contextLoader: mockDocumentLoader,
+		keyCache: {
+			get(keyId) {
+				return Promise.resolve(cache[keyId.href]);
+			},
+			set(keyId, key) {
+				cache[keyId.href] = key;
+				return Promise.resolve();
+			}
+		}
+	});
+	assertEquals(result.key, null);
+	assertEquals(result.cached, false);
+	assertEquals(result.fetchError, void 0);
+	assertEquals(documentLoaderCalls, 0);
+	assertEquals(cache, {});
+});
+test("fetchKey() does not resolve did:key as CryptographicKey", async () => {
+	const did = await exportDidKey(ed25519PublicKey.publicKey);
+	const keyId = `${did}#${did.slice(8)}`;
+	let cacheGets = 0;
+	let documentLoaderCalls = 0;
+	assertEquals(await fetchKey(keyId, CryptographicKey, {
+		documentLoader() {
+			documentLoaderCalls++;
+			throw new TypeError("did:key must not use the document loader");
+		},
+		contextLoader: mockDocumentLoader,
+		keyCache: {
+			get() {
+				cacheGets++;
+				throw new TypeError("did:key must not check the cache");
+			},
+			set() {
+				throw new TypeError("did:key must not write to the cache");
+			}
+		}
+	}), {
+		key: null,
+		cached: false
+	});
+	assertEquals(cacheGets, 0);
+	assertEquals(documentLoaderCalls, 0);
+});
+test("fetchKey() records did:key lookup metrics", async () => {
+	const did = await exportDidKey(ed25519PublicKey.publicKey);
+	const keyId = `${did}#${did.slice(8)}`;
+	const [meterProvider, recorder] = createTestMeterProvider();
+	assertEquals((await fetchKey(keyId, Multikey, {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader,
+		meterProvider
+	})).cached, false);
+	const counter = recorder.getMeasurement("activitypub.key.lookup");
+	assertEquals(counter?.attributes["activitypub.lookup.result"], "fetched");
+	assertEquals(counter?.attributes["activitypub.cache.enabled"], false);
+	assertEquals(counter?.attributes["activitypub.remote.host"], "");
+});
 test("fetchKey() records activitypub.key.lookup with hit on cached key", async () => {
 	const [meterProvider, recorder] = createTestMeterProvider();
 	const cache = {};

package/dist/sig/ld.test.mjs

@@ -5,9 +5,9 @@ import { t as assertEquals } from "../assert_equals-C-ZRDbaf.mjs";
 import { n as assertGreaterOrEqual, r as assertFalse, t as assertRejects } from "../assert_rejects-DN60FHPX.mjs";
 import { t as assertThrows } from "../assert_throws-BOkhLGYc.mjs";
 import { t as assert } from "../assert-OguE97r2.mjs";
-import { i as generateCryptoKeyPair } from "../key-By86iSF1.mjs";
+import { i as generateCryptoKeyPair } from "../key-3rYgSl9f.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DGu1NFwu.mjs";
-import { a as compactJsonLd, f as isInvalidUrlTypeError, g as verifySignature, h as verifyJsonLd, i as attachSignature, n as UnsafeJsonLdError, o as createSignature, p as signJsonLd, s as detachSignature, u as hasSignatureLike } from "../ld-uNPJsHf9.mjs";
+import { a as compactJsonLd, f as isInvalidUrlTypeError, g as verifySignature, h as verifyJsonLd, i as attachSignature, n as UnsafeJsonLdError, o as createSignature, p as signJsonLd, s as detachSignature, u as hasSignatureLike } from "../ld-CCOPy-Co.mjs";
 import { CryptographicKey } from "@fedify/vocab";
 import { createTestMeterProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { encodeBase64 } from "byte-encodings/base64";

package/dist/sig/mod.cjs

@@ -1,8 +1,8 @@
 const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_http = require("../http-Blx3a-we.cjs");
-const require_proof = require("../proof-B0wYpR4P.cjs");
+const require_http = require("../http-C7Lot0it.cjs");
+const require_proof = require("../proof-DzKUmE7R.cjs");
 exports.attachSignature = require_proof.attachSignature;
 exports.createProof = require_proof.createProof;
 exports.createSignature = require_proof.createSignature;

package/dist/sig/mod.js

@@ -1,5 +1,5 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { A as formatAcceptSignature, M as parseAcceptSignature, N as validateAcceptSignature, a as verifyRequestDetailed, c as fetchKeyDetailed, i as verifyRequest, j as fulfillAcceptSignature, l as generateCryptoKeyPair, o as exportJwk, r as signRequest, s as fetchKey, u as importJwk } from "../http-BjTMQwgu.js";
-import { C as verifySignature, S as verifyJsonLd, _ as hasSignatureLike, a as verifyProof, b as signJsonLd, c as getKeyOwner, d as attachSignature, i as verifyObject, m as detachSignature, n as hasProofLike, p as createSignature, r as signObject, s as doesActorOwnKey, t as createProof } from "../proof-hzw73GGW.js";
+import { A as formatAcceptSignature, M as parseAcceptSignature, N as validateAcceptSignature, a as verifyRequestDetailed, c as fetchKeyDetailed, i as verifyRequest, j as fulfillAcceptSignature, l as generateCryptoKeyPair, o as exportJwk, r as signRequest, s as fetchKey, u as importJwk } from "../http-sngIMb9S.js";
+import { C as verifySignature, S as verifyJsonLd, _ as hasSignatureLike, a as verifyProof, b as signJsonLd, c as getKeyOwner, d as attachSignature, i as verifyObject, m as detachSignature, n as hasProofLike, p as createSignature, r as signObject, s as doesActorOwnKey, t as createProof } from "../proof-C5i7MhbD.js";
 export { attachSignature, createProof, createSignature, detachSignature, doesActorOwnKey, exportJwk, fetchKey, fetchKeyDetailed, formatAcceptSignature, fulfillAcceptSignature, generateCryptoKeyPair, getKeyOwner, hasProofLike, hasSignatureLike, importJwk, parseAcceptSignature, signJsonLd, signObject, signRequest, validateAcceptSignature, verifyJsonLd, verifyObject, verifyProof, verifyRequest, verifyRequestDetailed, verifySignature };

package/dist/sig/owner.test.mjs

@@ -6,7 +6,7 @@ import "../std__assert-BBjXFNOb.mjs";
 import { r as assertFalse } from "../assert_rejects-DN60FHPX.mjs";
 import { t as assert } from "../assert-OguE97r2.mjs";
 import { o as rsaPublicKey1, s as rsaPublicKey2 } from "../keys-DGu1NFwu.mjs";
-import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-C1IdnJbE.mjs";
+import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-TUz_H-M9.mjs";
 import { Create, CryptographicKey, lookupObject } from "@fedify/vocab";
 import { createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/sig/owner.test.ts

package/dist/sig/proof.test.mjs

@@ -8,10 +8,10 @@ import { t as assertInstanceOf } from "../assert_instance_of-DBC5X09g.mjs";
 import { t as assert } from "../assert-OguE97r2.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DGu1NFwu.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-L_DbOaFe.mjs";
-import { a as verifyProof, i as verifyObject, n as hasProofLike, r as signObject, t as createProof } from "../proof-3th48TRO.mjs";
+import { a as verifyProof, i as verifyObject, n as hasProofLike, r as signObject, t as createProof } from "../proof-CrI3UpuA.mjs";
 import { Create, DataIntegrityProof, Document, Multikey, Note, PUBLIC_COLLECTION, Place } from "@fedify/vocab";
 import { createTestMeterProvider, mockDocumentLoader, test } from "@fedify/fixture";
-import { decodeMultibase, importMultibaseKey } from "@fedify/vocab-runtime";
+import { decodeMultibase, exportDidKey, exportMultibaseKey, importMultibaseKey, parseIri } from "@fedify/vocab-runtime";
 import { decodeHex } from "byte-encodings/hex";
 //#region src/sig/proof.test.ts
 const fep8b32TestVectorPrivateKey = await crypto.subtle.importKey("jwk", {
@@ -326,6 +326,66 @@ test("verifyProof()", async () => {
 	}), null);
 	assertFalse(contextLoaderCalls.includes("https://attacker.example/ctx"));
 });
+test("verifyProof() resolves did:key verification methods locally", async () => {
+	const multibaseKey = (await exportDidKey(ed25519PublicKey.publicKey)).slice(8);
+	const did = `did:key:${multibaseKey}`;
+	const keyId = new URL(`${did}#${multibaseKey}`);
+	const created = Temporal.Instant.from("2023-02-24T23:36:38Z");
+	const note = new Note({
+		id: parseIri(`ap://did:key:${multibaseKey}/objects/1`),
+		attribution: parseIri(`ap://did:key:${multibaseKey}/actor`),
+		content: "Portable hello"
+	});
+	const proof = await createProof(note, ed25519PrivateKey, keyId, {
+		created,
+		contextLoader: mockDocumentLoader,
+		context: ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"]
+	});
+	const jsonLd = await note.toJsonLd({
+		format: "compact",
+		contextLoader: mockDocumentLoader,
+		context: ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"]
+	});
+	let documentLoaderCalls = 0;
+	assertEquals(await verifyProof(jsonLd, proof, {
+		contextLoader: mockDocumentLoader,
+		documentLoader() {
+			documentLoaderCalls++;
+			throw new TypeError("did:key must not use the document loader");
+		}
+	}), new Multikey({
+		id: keyId,
+		controller: new URL(did),
+		publicKey: ed25519PublicKey.publicKey
+	}));
+	assertEquals(documentLoaderCalls, 0);
+	const tampered = { ...jsonLd };
+	tampered.content = "Portable goodbye";
+	assertEquals(await verifyProof(tampered, proof, {
+		contextLoader: mockDocumentLoader,
+		documentLoader() {
+			throw new TypeError("did:key must not use the document loader");
+		}
+	}), null);
+	assertEquals(await verifyProof(jsonLd, proof.clone({ verificationMethod: new URL(`${did}#z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK`) }), {
+		contextLoader: mockDocumentLoader,
+		documentLoader() {
+			throw new TypeError("did:key must not use the document loader");
+		}
+	}), null);
+	const unsupportedMultibaseKey = await exportMultibaseKey(rsaPublicKey2.publicKey);
+	const unsupportedDid = `did:key:${unsupportedMultibaseKey}`;
+	const unsupportedProof = proof.clone({ verificationMethod: new URL(`${unsupportedDid}#${unsupportedMultibaseKey}`) });
+	let unsupportedDocumentLoaderCalls = 0;
+	assertEquals(await verifyProof(jsonLd, unsupportedProof, {
+		contextLoader: mockDocumentLoader,
+		documentLoader() {
+			unsupportedDocumentLoaderCalls++;
+			throw new TypeError("did:key must not use the document loader");
+		}
+	}), null);
+	assertEquals(unsupportedDocumentLoaderCalls, 0);
+});
 test("verifyProof() records verification duration metric", async (t) => {
 	const jsonLd = {
 		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],

package/dist/{temporal-C7NUQ3nU.mjs → temporal-bBIy2G-F.mjs}

@@ -1,7 +1,7 @@
 import { Temporal } from "@js-temporal/polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { c as getNormalizationContextLoader } from "./ld-uNPJsHf9.mjs";
+import { c as getNormalizationContextLoader } from "./ld-CCOPy-Co.mjs";
 import jsonld from "@fedify/vocab-runtime/jsonld";
 //#region src/federation/temporal.ts
 function isPlainObject(value) {

package/dist/utils/docloader.test.mjs

@@ -5,9 +5,9 @@ import { t as esm_default } from "../esm-vrlUxr60.mjs";
 import { t as assertEquals } from "../assert_equals-C-ZRDbaf.mjs";
 import "../std__assert-BBjXFNOb.mjs";
 import { t as assertRejects } from "../assert_rejects-DN60FHPX.mjs";
-import { l as verifyRequest } from "../http-ZYObKFyR.mjs";
+import { l as verifyRequest } from "../http-Bf8YhWOi.mjs";
 import { i as rsaPrivateKey2 } from "../keys-DGu1NFwu.mjs";
-import { t as getAuthenticatedDocumentLoader } from "../docloader-DnNi7FT5.mjs";
+import { t as getAuthenticatedDocumentLoader } from "../docloader-DCQSgDOg.mjs";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { UrlError } from "@fedify/vocab-runtime";
 //#region src/utils/docloader.test.ts

package/dist/utils/kv-cache.test.mjs

@@ -1,7 +1,7 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as kvCache, t as MockKvStore } from "../kv-cache-W72QYEvy.mjs";
+import { n as kvCache, t as MockKvStore } from "../kv-cache-P3scUO6t.mjs";
 import { deepStrictEqual, throws } from "node:assert";
 import { createTestMeterProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { preloadedContexts } from "@fedify/vocab-runtime";

package/dist/utils/mod.cjs

@@ -1,6 +1,6 @@
 const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_kv_cache = require("../kv-cache-BB6kQbPO.cjs");
+const require_kv_cache = require("../kv-cache-CO2IaDJu.cjs");
 exports.getAuthenticatedDocumentLoader = require_kv_cache.getAuthenticatedDocumentLoader;
 exports.kvCache = require_kv_cache.kvCache;

package/dist/utils/mod.js

@@ -1,4 +1,4 @@
 import { Temporal } from "@js-temporal/polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { n as getAuthenticatedDocumentLoader, t as kvCache } from "../kv-cache-3GvEiOJJ.js";
+import { n as getAuthenticatedDocumentLoader, t as kvCache } from "../kv-cache-B0siRaoZ.js";
 export { getAuthenticatedDocumentLoader, kvCache };