@fedify/fedify 2.4.0-dev.1583 → 2.4.0-dev.1618

package/dist/{middleware-1AyOpRqz.mjs → middleware-BRunoF2v.mjs}

@@ -1,29 +1,29 @@
-import { Temporal } from "@js-temporal/polyfill";
+import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-Bkl9jNVs.mjs";
-import { a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, n as getDurationMs, o as isAbortError, r as getFederationMetrics, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "./metrics-BVRrGEXj.mjs";
-import { t as formatAcceptSignature } from "./accept-CgDcxvjV.mjs";
-import { a as importJwk, o as validateCryptoKey, t as exportJwk } from "./key-BBKNHoB9.mjs";
-import { l as verifyRequest, o as parseRfc9421SignatureInput, u as verifyRequestDetailed } from "./http-BBkdx4Kd.mjs";
-import { t as getAuthenticatedDocumentLoader } from "./docloader-f1XFaWWh.mjs";
-import { n as kvCache } from "./kv-cache-SVUAUYIs.mjs";
-import { _ as wrapContextLoaderForJsonLd, a as compactJsonLd, c as getNormalizationContextLoader, d as isClearlyMalformedContextReference, f as isInvalidUrlTypeError, l as hasSignature, m as verifyCompactJsonLd, p as signJsonLd, r as assertSafeJsonLd, s as detachSignature, t as InvalidContextReferenceError, u as hasSignatureLike } from "./ld-DLyXLPDS.mjs";
-import { n as getKeyOwner, t as doesActorOwnKey } from "./owner-BukzQW4T.mjs";
-import { r as normalizeOutgoingActivityJsonLd } from "./outgoing-jsonld-BNL8AC14.mjs";
-import { i as verifyObject, n as hasProofLike, r as signObject } from "./proof-BVglyYRW.mjs";
-import { t as getNodeInfo } from "./client-B_A6mfn3.mjs";
-import { t as nodeInfoToJson } from "./types-BFowWFTT.mjs";
-import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "./send-D04Hz77b.mjs";
-import { n as FederationBuilderImpl, t as ACTOR_ALIAS_PREFIX } from "./builder-Doj1FmsW.mjs";
-import { t as CircuitBreaker } from "./circuit-breaker-hJBB6jwA.mjs";
-import { t as buildCollectionSynchronizationHeader } from "./collection-Dp5ky45w.mjs";
-import { t as KvKeyCache } from "./keycache-CaOR6NYg.mjs";
-import { t as acceptsJsonLd } from "./negotiation-m_L2nyS3.mjs";
-import { t as hasMalformedKnownTemporalLiteral } from "./temporal-xcPM9mxe.mjs";
-import { t as createExponentialBackoffPolicy } from "./retry-DI4O-zYl.mjs";
-import { t as TaskCodec } from "./codec-nfBU4Up4.mjs";
-import { n as ParallelMessageQueue } from "./mq-03vS-C9P.mjs";
+import { n as version, t as name } from "./deno-DepnPEgI.mjs";
+import { a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, n as getDurationMs, o as isAbortError, r as getFederationMetrics, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "./metrics-D1NrDWq-.mjs";
+import { t as formatAcceptSignature } from "./accept-8PiolDP7.mjs";
+import { a as importJwk, o as validateCryptoKey, t as exportJwk } from "./key-C3t-PS3M.mjs";
+import { l as verifyRequest, o as parseRfc9421SignatureInput, u as verifyRequestDetailed } from "./http-CT7tcVBN.mjs";
+import { t as getAuthenticatedDocumentLoader } from "./docloader-C_IefWRb.mjs";
+import { n as kvCache } from "./kv-cache-CK273Baz.mjs";
+import { _ as wrapContextLoaderForJsonLd, a as compactJsonLd, c as getNormalizationContextLoader, d as isClearlyMalformedContextReference, f as isInvalidUrlTypeError, l as hasSignature, m as verifyCompactJsonLd, p as signJsonLd, r as assertSafeJsonLd, s as detachSignature, t as InvalidContextReferenceError, u as hasSignatureLike } from "./ld-D8wAPjxC.mjs";
+import { n as getKeyOwner, t as doesActorOwnKey } from "./owner-BjdNNmKF.mjs";
+import { r as normalizeOutgoingActivityJsonLd } from "./outgoing-jsonld-URuqsICz.mjs";
+import { i as verifyObject, n as hasProofLike, r as signObject } from "./proof-1Xy5Ur-T.mjs";
+import { t as getNodeInfo } from "./client-CjF5IYQS.mjs";
+import { t as nodeInfoToJson } from "./types-CrtdVuDP.mjs";
+import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "./send-ClJ4UcZL.mjs";
+import { n as FederationBuilderImpl, t as ACTOR_ALIAS_PREFIX } from "./builder-C4a7TAvq.mjs";
+import { t as CircuitBreaker } from "./circuit-breaker-CBGyz5F7.mjs";
+import { t as buildCollectionSynchronizationHeader } from "./collection-BIhlldqK.mjs";
+import { t as KvKeyCache } from "./keycache-_DHqz5z_.mjs";
+import { t as acceptsJsonLd } from "./negotiation-RuwrPFqi.mjs";
+import { t as hasMalformedKnownTemporalLiteral } from "./temporal-wA-b1IAz.mjs";
+import { t as createExponentialBackoffPolicy } from "./retry-DgFqeS5k.mjs";
+import { t as TaskCodec } from "./codec-BBga-FWI.mjs";
+import { n as ParallelMessageQueue } from "./mq-llHKivST.mjs";
 import { getLogger, withContext } from "@logtape/logtape";
 import { RouterError } from "@fedify/uri-template";
 import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, Tombstone, getTypeId, lookupObject, traverseCollection } from "@fedify/vocab";
@@ -1025,6 +1025,193 @@ async function handleOutbox(request, { identifier, context: ctx, outboxContextFa
 		headers: { "Content-Type": "text/plain; charset=utf-8" }
 	});
 }
+const plainTextHeaders = { "Content-Type": "text/plain; charset=utf-8" };
+/**
+* Handles a media upload request (the [ActivityPub Media Upload
+* extension](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload)).
+* @template TContextData The context data to pass to the context.
+* @param request The HTTP request.
+* @param parameters The parameters for handling the request.
+* @returns A promise that resolves to an HTTP response.
+* @since 2.4.0
+*/
+async function handleMediaUpload(request, { identifier, context: ctx, mediaUploaderCallback, actorDispatcher, authorizePredicate, isRegisteredObjectUri, onUnauthorized, onNotFound }) {
+	const logger = getLogger([
+		"fedify",
+		"federation",
+		"mediaUploader"
+	]);
+	if (request.bodyUsed) {
+		logger.error("Request body has already been read.", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	} else if (request.body?.locked) {
+		logger.error("Request body is locked.", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	const contentType = request.headers.get("content-type");
+	if (contentType == null || !contentType.toLowerCase().startsWith("multipart/form-data")) {
+		logger.error("The media upload request is not multipart/form-data (got {contentType}).", {
+			identifier,
+			contentType
+		});
+		return new Response("Unsupported media type.", {
+			status: 415,
+			headers: plainTextHeaders
+		});
+	}
+	if (actorDispatcher == null) {
+		logger.error("Actor dispatcher is not set.", { identifier });
+		return await onNotFound(request);
+	}
+	const actor = await actorDispatcher(ctx, identifier);
+	if (actor == null || actor instanceof Tombstone) {
+		logger.error("Actor {identifier} not found.", { identifier });
+		return await onNotFound(request);
+	}
+	if (authorizePredicate != null) {
+		let body;
+		try {
+			body = await request.arrayBuffer();
+		} catch (error) {
+			logger.error("Failed to read the multipart/form-data body:\n{error}", {
+				identifier,
+				error
+			});
+			return new Response("Invalid multipart/form-data body.", {
+				status: 400,
+				headers: plainTextHeaders
+			});
+		}
+		const rebuild = () => new Request(request.url, {
+			method: request.method,
+			headers: request.headers,
+			body: body.byteLength > 0 ? body : void 0
+		});
+		const authorizeContext = ctx.clone(ctx.data);
+		authorizeContext.request = rebuild();
+		if (!await authorizePredicate(authorizeContext, identifier)) return await onUnauthorized(rebuild());
+		request = rebuild();
+	}
+	let form;
+	try {
+		form = await request.formData();
+	} catch (error) {
+		logger.error("Failed to parse the multipart/form-data body:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Invalid multipart/form-data body.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	const file = form.get("file");
+	if (!(file instanceof File)) {
+		logger.error("The media upload request has no file field.", { identifier });
+		return new Response("Missing file field.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	const objectField = form.get("object");
+	if (objectField == null) {
+		logger.error("The media upload request has no object field.", { identifier });
+		return new Response("Missing object field.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	let object;
+	try {
+		const objectText = typeof objectField === "string" ? objectField : await objectField.text();
+		object = await Object$1.fromJsonLd(JSON.parse(objectText), ctx);
+	} catch (error) {
+		logger.error("Failed to parse the object field:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Invalid object field.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	let result;
+	try {
+		result = await mediaUploaderCallback(ctx, identifier, file, object);
+	} catch (error) {
+		logger.error("Failed to process the media upload:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	if (result == null) {
+		logger.error("The media uploader callback for {identifier} returned null or undefined; it must return an object (201 Created) or a URL (202 Accepted).", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	const warnUnlessRegistered = (target) => {
+		if (isRegisteredObjectUri(target)) return;
+		logger.warn("The media uploader callback for {identifier} returned {target}, which does not point at a registered object dispatcher route; derive the returned id/URL from Context.getObjectUri().  The upload still succeeded.", {
+			identifier,
+			target: target.href
+		});
+	};
+	if (result instanceof URL) {
+		warnUnlessRegistered(result);
+		logger.info("The media upload for {identifier} is still being processed; responding 202 Accepted.", {
+			identifier,
+			location: result.href
+		});
+		return new Response(null, {
+			status: 202,
+			headers: { Location: result.href }
+		});
+	}
+	if (result.id == null) {
+		logger.error("The media uploader callback for {identifier} returned an object without an id, so a 201 Created response cannot include the required Location header.  Set the object's id with Context.getObjectUri(), or return the eventual URL to respond 202 Accepted instead.", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	warnUnlessRegistered(result.id);
+	let jsonLd;
+	try {
+		jsonLd = await result.toJsonLd(ctx);
+	} catch (error) {
+		logger.error("Failed to serialize the uploaded object to JSON-LD:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	logger.info("The media upload for {identifier} is ready; responding 201 Created.", {
+		identifier,
+		location: result.id.href
+	});
+	return new Response(JSON.stringify(jsonLd), {
+		status: 201,
+		headers: {
+			"Content-Type": "application/activity+json",
+			Location: result.id.href
+		}
+	});
+}
 /**
 * Handles an inbox request for ActivityPub activities.
 * @template TContextData The context data to pass to the context.
@@ -2641,6 +2828,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 	benchmarkMode;
 	benchmarkMetricReader;
 	benchmarkTriggerOptions;
+	#mediaUploaderNoAuthWarned = false;
 	#queueDepthGaugeSourceId = `fedify-${(++nextQueueDepthGaugeSourceId).toString(36)}`;
 	#queueDepthGaugeEntries = [];
 	#queueDepthGaugeMeterProvider;
@@ -3956,6 +4144,32 @@ var FederationImpl = class extends FederationBuilderImpl {
 			});
 			case "benchmarkStats": return await handleBenchmarkStats(request, this.benchmarkMetricReader);
 			case "benchmarkTrigger": return await handleBenchmarkTrigger(request, context, this.benchmarkTriggerOptions);
+			case "mediaUploader":
+				if (request.method !== "POST" || this.mediaUploaderCallback == null) return new Response("Method not allowed.", {
+					status: 405,
+					headers: {
+						Allow: "POST",
+						"Content-Type": "text/plain; charset=utf-8"
+					}
+				});
+				if (this.mediaUploaderAuthorizePredicate == null && !this.#mediaUploaderNoAuthWarned) {
+					this.#mediaUploaderNoAuthWarned = true;
+					getLogger([
+						"fedify",
+						"federation",
+						"mediaUploader"
+					]).warn("The media uploader is registered without an authorize() hook, so it accepts uploads from anyone who can reach the endpoint.  Protect it with .authorize() unless a public upload endpoint is intended.");
+				}
+				return await handleMediaUpload(request, {
+					identifier: route.values.identifier,
+					context,
+					mediaUploaderCallback: this.mediaUploaderCallback,
+					actorDispatcher: this.actorCallbacks?.dispatcher,
+					authorizePredicate: this.mediaUploaderAuthorizePredicate,
+					isRegisteredObjectUri: (uri) => context.parseUri(uri)?.type === "object",
+					onUnauthorized,
+					onNotFound
+				});
 		}
 		if (request.method !== "POST" && !acceptsJsonLd(request)) {
 			metricState.endpoint = "not_acceptable";
@@ -4190,6 +4404,7 @@ function getEndpointCategory(routeName) {
 		case "inbox": return "inbox";
 		case "sharedInbox": return "shared_inbox";
 		case "outbox": return "outbox";
+		case "mediaUploader": return "media_upload";
 		case "following": return "following";
 		case "followers": return "followers";
 		case "liked": return "liked";
@@ -4323,6 +4538,11 @@ var ContextImpl = class ContextImpl {
 		if (path == null) throw new RouterError("No outbox dispatcher registered.");
 		return new URL(path, this.canonicalOrigin);
 	}
+	getMediaUploaderUri(identifier) {
+		const path = this.federation.router.build("mediaUploader", { identifier });
+		if (path == null) throw new RouterError("No media uploader registered.");
+		return new URL(path, this.canonicalOrigin);
+	}
 	getInboxUri(identifier) {
 		if (identifier == null) {
 			const path = this.federation.router.build("sharedInbox", {});

package/dist/{middleware-CzWfDAQY.mjs → middleware-CaP0k3AD.mjs}

@@ -1,5 +1,5 @@
-import "@js-temporal/polyfill";
+import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as FederationImpl } from "./middleware-1AyOpRqz.mjs";
+import { n as FederationImpl } from "./middleware-BRunoF2v.mjs";
 export { FederationImpl };

package/dist/{middleware-B1jZw4xB.js → middleware-kQ-qwTDh.js}

@@ -1,11 +1,11 @@
-import { Temporal } from "@js-temporal/polyfill";
+import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { t as __exportAll } from "./chunk-CRNNMoPX.js";
-import { r as getDefaultActivityTransformers } from "./transformers-BGMIq1cs.js";
-import { A as formatAcceptSignature, D as recordOutboxEnqueue, E as recordOutboxActivity, F as version, O as recordWebFingerHandle, P as name, S as recordCollectionTotalItems, T as recordInboxActivity, a as verifyRequestDetailed, b as recordCollectionPageItems, d as validateCryptoKey, f as getDurationMs, g as isAbortError, h as instrumentDocumentLoader, i as verifyRequest, k as registerQueueDepthGauge, m as getRemoteHost, n as parseRfc9421SignatureInput, o as exportJwk, p as getFederationMetrics, t as doubleKnock, u as importJwk, v as recordCircuitBreakerStateChange, w as recordFanoutRecipients, x as recordCollectionRequest, y as recordCollectionDispatchDuration } from "./http-CphHLbTC.js";
-import { _ as hasSignatureLike, b as signJsonLd, c as getKeyOwner, f as compactJsonLd, g as hasSignature, h as getNormalizationContextLoader, i as verifyObject, l as InvalidContextReferenceError, m as detachSignature, n as hasProofLike, o as normalizeOutgoingActivityJsonLd, r as signObject, s as doesActorOwnKey, u as assertSafeJsonLd, v as isClearlyMalformedContextReference, w as wrapContextLoaderForJsonLd, x as verifyCompactJsonLd, y as isInvalidUrlTypeError } from "./proof-IDHRILpm.js";
-import { n as getNodeInfo, t as nodeInfoToJson } from "./types-CAY3OdLq.js";
-import { n as getAuthenticatedDocumentLoader, t as kvCache } from "./kv-cache-D3KdEZAg.js";
+import { t as __exportAll } from "./chunk-D5IdezsZ.js";
+import { r as getDefaultActivityTransformers } from "./transformers-DXze6FUB.js";
+import { A as formatAcceptSignature, D as recordOutboxEnqueue, E as recordOutboxActivity, F as version, O as recordWebFingerHandle, P as name, S as recordCollectionTotalItems, T as recordInboxActivity, a as verifyRequestDetailed, b as recordCollectionPageItems, d as validateCryptoKey, f as getDurationMs, g as isAbortError, h as instrumentDocumentLoader, i as verifyRequest, k as registerQueueDepthGauge, m as getRemoteHost, n as parseRfc9421SignatureInput, o as exportJwk, p as getFederationMetrics, t as doubleKnock, u as importJwk, v as recordCircuitBreakerStateChange, w as recordFanoutRecipients, x as recordCollectionRequest, y as recordCollectionDispatchDuration } from "./http-DD07Erm7.js";
+import { _ as hasSignatureLike, b as signJsonLd, c as getKeyOwner, f as compactJsonLd, g as hasSignature, h as getNormalizationContextLoader, i as verifyObject, l as InvalidContextReferenceError, m as detachSignature, n as hasProofLike, o as normalizeOutgoingActivityJsonLd, r as signObject, s as doesActorOwnKey, u as assertSafeJsonLd, v as isClearlyMalformedContextReference, w as wrapContextLoaderForJsonLd, x as verifyCompactJsonLd, y as isInvalidUrlTypeError } from "./proof--HiDnLAE.js";
+import { n as getNodeInfo, t as nodeInfoToJson } from "./types-DC1pNgJA.js";
+import { n as getAuthenticatedDocumentLoader, t as kvCache } from "./kv-cache-Bvv7Wp8h.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
 import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, Tombstone, getTypeId, lookupObject, traverseCollection } from "@fedify/vocab";
@@ -102,6 +102,9 @@ var FederationBuilderImpl = class {
 	inboxErrorHandler;
 	outboxListenerErrorHandler;
 	outboxAuthorizePredicate;
+	mediaUploaderPath;
+	mediaUploaderCallback;
+	mediaUploaderAuthorizePredicate;
 	sharedInboxKeyDispatcher;
 	unverifiedActivityHandler;
 	outboxPermanentFailureHandler;
@@ -154,6 +157,9 @@ var FederationBuilderImpl = class {
 		f.inboxErrorHandler = this.inboxErrorHandler;
 		f.outboxListenerErrorHandler = this.outboxListenerErrorHandler;
 		f.outboxAuthorizePredicate = this.outboxAuthorizePredicate;
+		f.mediaUploaderPath = this.mediaUploaderPath;
+		f.mediaUploaderCallback = this.mediaUploaderCallback;
+		f.mediaUploaderAuthorizePredicate = this.mediaUploaderAuthorizePredicate;
 		f.sharedInboxKeyDispatcher = this.sharedInboxKeyDispatcher;
 		f.unverifiedActivityHandler = this.unverifiedActivityHandler;
 		f.outboxPermanentFailureHandler = this.outboxPermanentFailureHandler;
@@ -232,6 +238,10 @@ var FederationBuilderImpl = class {
 				if (actor.publicKeyId == null) logger.warn("You configured a key pairs dispatcher, but the actor does not have a publicKey property.  Set the property with Context.getActorKeyPairs(identifier).");
 				if (actor.assertionMethodId == null) logger.warn("You configured a key pairs dispatcher, but the actor does not have an assertionMethod property.  Set the property with Context.getActorKeyPairs(identifier).");
 			}
+			if (this.mediaUploaderCallback != null) {
+				if (actor.endpoints == null || actor.endpoints.uploadMedia == null) logger.warn("You configured a media uploader, but the actor does not have a endpoints.uploadMedia property.  Set the property with Context.getMediaUploaderUri(identifier).");
+				else if (actor.endpoints.uploadMedia.href != context.getMediaUploaderUri(identifier).href) logger.warn("You configured a media uploader, but the actor's endpoints.uploadMedia property does not match the media upload endpoint URI.  Set the property with Context.getMediaUploaderUri(identifier).");
+			}
 			return actor;
 		} };
 		this.actorCallbacks = callbacks;
@@ -444,6 +454,18 @@ var FederationBuilderImpl = class {
 		};
 		return setters;
 	}
+	setMediaUploader(path, callback) {
+		if (this.mediaUploaderCallback != null) throw new RouterError("Media uploader already set.");
+		assertPath(path);
+		this.router.add(path, "mediaUploader", identifierSingular);
+		this.mediaUploaderPath = path;
+		this.mediaUploaderCallback = callback;
+		const setters = { authorize: (predicate) => {
+			this.mediaUploaderAuthorizePredicate = predicate;
+			return setters;
+		} };
+		return setters;
+	}
 	setFollowingDispatcher(path, dispatcher) {
 		if (this.router.has("following")) throw new RouterError("Following collection dispatcher already set.");
 		assertPath(path);
@@ -2014,6 +2036,193 @@ async function handleOutbox(request, { identifier, context: ctx, outboxContextFa
 		headers: { "Content-Type": "text/plain; charset=utf-8" }
 	});
 }
+const plainTextHeaders = { "Content-Type": "text/plain; charset=utf-8" };
+/**
+* Handles a media upload request (the [ActivityPub Media Upload
+* extension](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload)).
+* @template TContextData The context data to pass to the context.
+* @param request The HTTP request.
+* @param parameters The parameters for handling the request.
+* @returns A promise that resolves to an HTTP response.
+* @since 2.4.0
+*/
+async function handleMediaUpload(request, { identifier, context: ctx, mediaUploaderCallback, actorDispatcher, authorizePredicate, isRegisteredObjectUri, onUnauthorized, onNotFound }) {
+	const logger = getLogger([
+		"fedify",
+		"federation",
+		"mediaUploader"
+	]);
+	if (request.bodyUsed) {
+		logger.error("Request body has already been read.", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	} else if (request.body?.locked) {
+		logger.error("Request body is locked.", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	const contentType = request.headers.get("content-type");
+	if (contentType == null || !contentType.toLowerCase().startsWith("multipart/form-data")) {
+		logger.error("The media upload request is not multipart/form-data (got {contentType}).", {
+			identifier,
+			contentType
+		});
+		return new Response("Unsupported media type.", {
+			status: 415,
+			headers: plainTextHeaders
+		});
+	}
+	if (actorDispatcher == null) {
+		logger.error("Actor dispatcher is not set.", { identifier });
+		return await onNotFound(request);
+	}
+	const actor = await actorDispatcher(ctx, identifier);
+	if (actor == null || actor instanceof Tombstone) {
+		logger.error("Actor {identifier} not found.", { identifier });
+		return await onNotFound(request);
+	}
+	if (authorizePredicate != null) {
+		let body;
+		try {
+			body = await request.arrayBuffer();
+		} catch (error) {
+			logger.error("Failed to read the multipart/form-data body:\n{error}", {
+				identifier,
+				error
+			});
+			return new Response("Invalid multipart/form-data body.", {
+				status: 400,
+				headers: plainTextHeaders
+			});
+		}
+		const rebuild = () => new Request(request.url, {
+			method: request.method,
+			headers: request.headers,
+			body: body.byteLength > 0 ? body : void 0
+		});
+		const authorizeContext = ctx.clone(ctx.data);
+		authorizeContext.request = rebuild();
+		if (!await authorizePredicate(authorizeContext, identifier)) return await onUnauthorized(rebuild());
+		request = rebuild();
+	}
+	let form;
+	try {
+		form = await request.formData();
+	} catch (error) {
+		logger.error("Failed to parse the multipart/form-data body:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Invalid multipart/form-data body.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	const file = form.get("file");
+	if (!(file instanceof File)) {
+		logger.error("The media upload request has no file field.", { identifier });
+		return new Response("Missing file field.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	const objectField = form.get("object");
+	if (objectField == null) {
+		logger.error("The media upload request has no object field.", { identifier });
+		return new Response("Missing object field.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	let object;
+	try {
+		const objectText = typeof objectField === "string" ? objectField : await objectField.text();
+		object = await Object$1.fromJsonLd(JSON.parse(objectText), ctx);
+	} catch (error) {
+		logger.error("Failed to parse the object field:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Invalid object field.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	let result;
+	try {
+		result = await mediaUploaderCallback(ctx, identifier, file, object);
+	} catch (error) {
+		logger.error("Failed to process the media upload:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	if (result == null) {
+		logger.error("The media uploader callback for {identifier} returned null or undefined; it must return an object (201 Created) or a URL (202 Accepted).", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	const warnUnlessRegistered = (target) => {
+		if (isRegisteredObjectUri(target)) return;
+		logger.warn("The media uploader callback for {identifier} returned {target}, which does not point at a registered object dispatcher route; derive the returned id/URL from Context.getObjectUri().  The upload still succeeded.", {
+			identifier,
+			target: target.href
+		});
+	};
+	if (result instanceof URL) {
+		warnUnlessRegistered(result);
+		logger.info("The media upload for {identifier} is still being processed; responding 202 Accepted.", {
+			identifier,
+			location: result.href
+		});
+		return new Response(null, {
+			status: 202,
+			headers: { Location: result.href }
+		});
+	}
+	if (result.id == null) {
+		logger.error("The media uploader callback for {identifier} returned an object without an id, so a 201 Created response cannot include the required Location header.  Set the object's id with Context.getObjectUri(), or return the eventual URL to respond 202 Accepted instead.", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	warnUnlessRegistered(result.id);
+	let jsonLd;
+	try {
+		jsonLd = await result.toJsonLd(ctx);
+	} catch (error) {
+		logger.error("Failed to serialize the uploaded object to JSON-LD:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	logger.info("The media upload for {identifier} is ready; responding 201 Created.", {
+		identifier,
+		location: result.id.href
+	});
+	return new Response(JSON.stringify(jsonLd), {
+		status: 201,
+		headers: {
+			"Content-Type": "application/activity+json",
+			Location: result.id.href
+		}
+	});
+}
 /**
 * Handles an inbox request for ActivityPub activities.
 * @template TContextData The context data to pass to the context.
@@ -4517,6 +4726,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 	benchmarkMode;
 	benchmarkMetricReader;
 	benchmarkTriggerOptions;
+	#mediaUploaderNoAuthWarned = false;
 	#queueDepthGaugeSourceId = `fedify-${(++nextQueueDepthGaugeSourceId).toString(36)}`;
 	#queueDepthGaugeEntries = [];
 	#queueDepthGaugeMeterProvider;
@@ -5832,6 +6042,32 @@ var FederationImpl = class extends FederationBuilderImpl {
 			});
 			case "benchmarkStats": return await handleBenchmarkStats(request, this.benchmarkMetricReader);
 			case "benchmarkTrigger": return await handleBenchmarkTrigger(request, context, this.benchmarkTriggerOptions);
+			case "mediaUploader":
+				if (request.method !== "POST" || this.mediaUploaderCallback == null) return new Response("Method not allowed.", {
+					status: 405,
+					headers: {
+						Allow: "POST",
+						"Content-Type": "text/plain; charset=utf-8"
+					}
+				});
+				if (this.mediaUploaderAuthorizePredicate == null && !this.#mediaUploaderNoAuthWarned) {
+					this.#mediaUploaderNoAuthWarned = true;
+					getLogger([
+						"fedify",
+						"federation",
+						"mediaUploader"
+					]).warn("The media uploader is registered without an authorize() hook, so it accepts uploads from anyone who can reach the endpoint.  Protect it with .authorize() unless a public upload endpoint is intended.");
+				}
+				return await handleMediaUpload(request, {
+					identifier: route.values.identifier,
+					context,
+					mediaUploaderCallback: this.mediaUploaderCallback,
+					actorDispatcher: this.actorCallbacks?.dispatcher,
+					authorizePredicate: this.mediaUploaderAuthorizePredicate,
+					isRegisteredObjectUri: (uri) => context.parseUri(uri)?.type === "object",
+					onUnauthorized,
+					onNotFound
+				});
 		}
 		if (request.method !== "POST" && !acceptsJsonLd(request)) {
 			metricState.endpoint = "not_acceptable";
@@ -6066,6 +6302,7 @@ function getEndpointCategory(routeName) {
 		case "inbox": return "inbox";
 		case "sharedInbox": return "shared_inbox";
 		case "outbox": return "outbox";
+		case "mediaUploader": return "media_upload";
 		case "following": return "following";
 		case "followers": return "followers";
 		case "liked": return "liked";
@@ -6199,6 +6436,11 @@ var ContextImpl = class ContextImpl {
 		if (path == null) throw new RouterError("No outbox dispatcher registered.");
 		return new URL(path, this.canonicalOrigin);
 	}
+	getMediaUploaderUri(identifier) {
+		const path = this.federation.router.build("mediaUploader", { identifier });
+		if (path == null) throw new RouterError("No media uploader registered.");
+		return new URL(path, this.canonicalOrigin);
+	}
 	getInboxUri(identifier) {
 		if (identifier == null) {
 			const path = this.federation.router.build("sharedInbox", {});